@ptfm/chainguard 0.1.28

package/bin/types/input.d.ts

@@ -0,0 +1,187 @@
+import * as pulumi from "@pulumi/pulumi";
+export interface AccountAssociationsAmazon {
+    /**
+     * AWS account ID
+     */
+    account?: pulumi.Input<string>;
+}
+export interface AccountAssociationsChainguard {
+    /**
+     * A map of service bindings where the key is the service name and the value is the Id of the service principal identity.
+     */
+    serviceBindings?: pulumi.Input<{
+        [key: string]: pulumi.Input<string>;
+    }>;
+}
+export interface AccountAssociationsGoogle {
+    /**
+     * GCP project id
+     */
+    projectId?: pulumi.Input<string>;
+    /**
+     * GCP project number
+     */
+    projectNumber?: pulumi.Input<string>;
+}
+export interface IdentityAwsIdentity {
+    /**
+     * AWS Account ID of AWS user
+     */
+    awsAccount?: pulumi.Input<string>;
+    /**
+     * The exact Arn that must appear in GetCallerIdentity to assume this identity.
+     */
+    awsArn?: pulumi.Input<string>;
+    /**
+     * A pattern for matching acceptable Arn that must appear in GetCallerIdentity response to assume this identity.
+     */
+    awsArnPattern?: pulumi.Input<string>;
+    /**
+     * The exact UserId that must appear in GetCallerIdentity to assume this identity.
+     */
+    awsUserId?: pulumi.Input<string>;
+    /**
+     * A pattern for matching acceptable UserID that must appear in GetCallerIdentity response to assume this identity.
+     */
+    awsUserIdPattern?: pulumi.Input<string>;
+}
+export interface IdentityClaimMatch {
+    /**
+     * The exact audience that must appear in tokens to assume this identity.
+     */
+    audience?: pulumi.Input<string>;
+    /**
+     * A pattern for matching acceptable audiences that appear in tokens to assume this identity.
+     */
+    audiencePattern?: pulumi.Input<string>;
+    /**
+     * The custom claim patterns for matching acceptable custom claims that appear in tokens to assume this identity.
+     */
+    claimPatterns?: pulumi.Input<{
+        [key: string]: pulumi.Input<string>;
+    }>;
+    /**
+     * The exact custom claims that appear in tokens to assume this identity.
+     */
+    claims?: pulumi.Input<{
+        [key: string]: pulumi.Input<string>;
+    }>;
+    /**
+     * The exact issuer that must appear in tokens to assume this identity.
+     */
+    issuer?: pulumi.Input<string>;
+    /**
+     * A pattern for matching acceptable issuers that appear in tokens to assume this identity.
+     */
+    issuerPattern?: pulumi.Input<string>;
+    /**
+     * The exact subject that must appear in tokens to assume this identity.
+     */
+    subject?: pulumi.Input<string>;
+    /**
+     * A pattern for matching acceptable subjects that appear in tokens to assume this identity.
+     */
+    subjectPattern?: pulumi.Input<string>;
+}
+export interface IdentityProviderOidc {
+    /**
+     * List of scopes to request
+     */
+    additionalScopes?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Client ID for OIDC identity provider
+     */
+    clientId?: pulumi.Input<string>;
+    /**
+     * Client secret for OIDC identity provider
+     */
+    clientSecret?: pulumi.Input<string>;
+    /**
+     * Issuer URL
+     */
+    issuer?: pulumi.Input<string>;
+}
+export interface IdentityStatic {
+    /**
+     * The RFC3339 encoded date and time at which this identity will no longer be valid.
+     */
+    expiration?: pulumi.Input<string>;
+    /**
+     * The exact issuer that must appear in tokens to assume this identity.
+     */
+    issuer?: pulumi.Input<string>;
+    /**
+     * The JSON web key set (JWKS) of the OIDC issuer that should be used to verify tokens.
+     */
+    issuerKeys?: pulumi.Input<string>;
+    /**
+     * The exact subject that must appear in tokens to assume this identity.
+     */
+    subject?: pulumi.Input<string>;
+}
+export interface ImageRepoSyncConfig {
+    /**
+     * The Amazon repository under which to create a new repository with the same name as the source repository.
+     */
+    amazon?: pulumi.Input<string>;
+    /**
+     * A json-encoded APKO configuration to overlay on rebuilds of images being synced.
+     */
+    apkoOverlay?: pulumi.Input<string>;
+    /**
+     * The RFC3339 encoded date and time at which this entitlement will expire.
+     */
+    expiration?: pulumi.Input<string>;
+    /**
+     * The Google repository under which to create a new repository with the same name as the source repository.
+     */
+    google?: pulumi.Input<string>;
+    /**
+     * Controls whether the image grace period functionality is enabled or not.
+     */
+    gracePeriod?: pulumi.Input<boolean>;
+    /**
+     * The UIDP of the repository to sync images from.
+     */
+    source?: pulumi.Input<string>;
+    /**
+     * Whether the APKs for each image should also be synchronized.
+     */
+    syncApks?: pulumi.Input<boolean>;
+    /**
+     * Whether each synchronized tag should be suffixed with the image timestamp.
+     */
+    uniqueTags?: pulumi.Input<boolean>;
+}
+export interface ProviderLoginOptions {
+    /**
+     * Auth0 social connection to use by default for OIDC token. Must be one of: google-oauth2, gitlab, github
+     */
+    auth0Connection?: pulumi.Input<string>;
+    /**
+     * Disable automatic login when Chainguard token is expired.
+     */
+    disabled?: pulumi.Input<boolean>;
+    /**
+     * Enable to use of refresh tokens when authenticating with an IdP (not compatible with identity_token authentication).
+     */
+    enableRefreshTokens?: pulumi.Input<boolean>;
+    /**
+     * UIDP of the identity to assume when exchanging OIDC token for Chainguard token.
+     */
+    identityId?: pulumi.Input<string>;
+    /**
+     * UIDP of the identity provider authenticate with for OIDC token.
+     */
+    identityProviderId?: pulumi.Input<string>;
+    /**
+     * A path to an OIDC identity token, or explicit identity token.
+     */
+    identityToken?: pulumi.Input<string>;
+    /**
+     * Verified organization name for determining identity provider to obtain OIDC token.
+     */
+    organizationName?: pulumi.Input<string>;
+}
+export declare namespace config {
+}

package/bin/types/input.js

@@ -0,0 +1,5 @@
+"use strict";
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=input.js.map

package/bin/types/input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"input.js","sourceRoot":"","sources":["../../types/input.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF"}

package/bin/types/output.d.ts

@@ -0,0 +1,309 @@
+import * as outputs from "../types/output";
+export interface AccountAssociationsAmazon {
+    /**
+     * AWS account ID
+     */
+    account?: string;
+}
+export interface AccountAssociationsChainguard {
+    /**
+     * A map of service bindings where the key is the service name and the value is the Id of the service principal identity.
+     */
+    serviceBindings?: {
+        [key: string]: string;
+    };
+}
+export interface AccountAssociationsGoogle {
+    /**
+     * GCP project id
+     */
+    projectId?: string;
+    /**
+     * GCP project number
+     */
+    projectNumber?: string;
+}
+export interface GetRoleItem {
+    /**
+     * The capabilities granted to this role.
+     */
+    capabilities: string[];
+    /**
+     * The description of this role.
+     */
+    description: string;
+    /**
+     * The UIDP of this role.
+     */
+    id: string;
+    /**
+     * The name of this role.
+     */
+    name: string;
+}
+export interface GetVersionsVersionMap {
+    /**
+     * Whether the version is eol.
+     */
+    eol: boolean;
+    /**
+     * The eol date.
+     */
+    eolDate: string;
+    /**
+     * Whether the version exists.
+     */
+    exists: boolean;
+    /**
+     * Whether the version is fips.
+     */
+    fips: boolean;
+    /**
+     * Whether the version is the latest.
+     */
+    isLatest: boolean;
+    /**
+     * The lts version.
+     */
+    lts: string;
+    /**
+     * The main version.
+     */
+    main: string;
+    /**
+     * The release date.
+     */
+    releaseDate: string;
+    /**
+     * The version.
+     */
+    version: string;
+}
+export interface GetVersionsVersions {
+    /**
+     * The eol versions.
+     */
+    eolVersions: outputs.GetVersionsVersionsEolVersion[];
+    /**
+     * The grace period in months.
+     */
+    gracePeriodMonths: number;
+    /**
+     * The last updated timestamp.
+     */
+    lastUpdatedTimestamp: string;
+    /**
+     * The latest version.
+     */
+    latestVersion: string;
+    /**
+     * The versions.
+     */
+    versions: outputs.GetVersionsVersionsVersion[];
+}
+export interface GetVersionsVersionsEolVersion {
+    /**
+     * Whether the EOL version is broken.
+     */
+    eolBroken: boolean;
+    /**
+     * The eol date.
+     */
+    eolDate: string;
+    /**
+     * Whether the version exists.
+     */
+    exists: boolean;
+    /**
+     * Whether the FIPS version exists.
+     */
+    fips: boolean;
+    /**
+     * The release date.
+     */
+    releaseDate: string;
+    /**
+     * The version.
+     */
+    version: string;
+}
+export interface GetVersionsVersionsVersion {
+    /**
+     * Whether the version exists.
+     */
+    exists: boolean;
+    /**
+     * Whether the FIPS version exists.
+     */
+    fips: boolean;
+    /**
+     * The release date.
+     */
+    releaseDate: string;
+    /**
+     * The version.
+     */
+    version: string;
+}
+export interface IdentityAwsIdentity {
+    /**
+     * AWS Account ID of AWS user
+     */
+    awsAccount?: string;
+    /**
+     * The exact Arn that must appear in GetCallerIdentity to assume this identity.
+     */
+    awsArn?: string;
+    /**
+     * A pattern for matching acceptable Arn that must appear in GetCallerIdentity response to assume this identity.
+     */
+    awsArnPattern?: string;
+    /**
+     * The exact UserId that must appear in GetCallerIdentity to assume this identity.
+     */
+    awsUserId?: string;
+    /**
+     * A pattern for matching acceptable UserID that must appear in GetCallerIdentity response to assume this identity.
+     */
+    awsUserIdPattern?: string;
+}
+export interface IdentityClaimMatch {
+    /**
+     * The exact audience that must appear in tokens to assume this identity.
+     */
+    audience?: string;
+    /**
+     * A pattern for matching acceptable audiences that appear in tokens to assume this identity.
+     */
+    audiencePattern?: string;
+    /**
+     * The custom claim patterns for matching acceptable custom claims that appear in tokens to assume this identity.
+     */
+    claimPatterns?: {
+        [key: string]: string;
+    };
+    /**
+     * The exact custom claims that appear in tokens to assume this identity.
+     */
+    claims?: {
+        [key: string]: string;
+    };
+    /**
+     * The exact issuer that must appear in tokens to assume this identity.
+     */
+    issuer?: string;
+    /**
+     * A pattern for matching acceptable issuers that appear in tokens to assume this identity.
+     */
+    issuerPattern?: string;
+    /**
+     * The exact subject that must appear in tokens to assume this identity.
+     */
+    subject?: string;
+    /**
+     * A pattern for matching acceptable subjects that appear in tokens to assume this identity.
+     */
+    subjectPattern?: string;
+}
+export interface IdentityProviderOidc {
+    /**
+     * List of scopes to request
+     */
+    additionalScopes?: string[];
+    /**
+     * Client ID for OIDC identity provider
+     */
+    clientId?: string;
+    /**
+     * Client secret for OIDC identity provider
+     */
+    clientSecret?: string;
+    /**
+     * Issuer URL
+     */
+    issuer?: string;
+}
+export interface IdentityStatic {
+    /**
+     * The RFC3339 encoded date and time at which this identity will no longer be valid.
+     */
+    expiration?: string;
+    /**
+     * The exact issuer that must appear in tokens to assume this identity.
+     */
+    issuer?: string;
+    /**
+     * The JSON web key set (JWKS) of the OIDC issuer that should be used to verify tokens.
+     */
+    issuerKeys?: string;
+    /**
+     * The exact subject that must appear in tokens to assume this identity.
+     */
+    subject?: string;
+}
+export interface ImageRepoSyncConfig {
+    /**
+     * The Amazon repository under which to create a new repository with the same name as the source repository.
+     */
+    amazon?: string;
+    /**
+     * A json-encoded APKO configuration to overlay on rebuilds of images being synced.
+     */
+    apkoOverlay?: string;
+    /**
+     * The RFC3339 encoded date and time at which this entitlement will expire.
+     */
+    expiration?: string;
+    /**
+     * The Google repository under which to create a new repository with the same name as the source repository.
+     */
+    google?: string;
+    /**
+     * Controls whether the image grace period functionality is enabled or not.
+     */
+    gracePeriod?: boolean;
+    /**
+     * The UIDP of the repository to sync images from.
+     */
+    source?: string;
+    /**
+     * Whether the APKs for each image should also be synchronized.
+     */
+    syncApks?: boolean;
+    /**
+     * Whether each synchronized tag should be suffixed with the image timestamp.
+     */
+    uniqueTags?: boolean;
+}
+export declare namespace config {
+    interface LoginOptions {
+        /**
+         * Auth0 social connection to use by default for OIDC token. Must be one of: google-oauth2, gitlab, github
+         */
+        auth0Connection?: string;
+        /**
+         * Disable automatic login when Chainguard token is expired.
+         */
+        disabled?: boolean;
+        /**
+         * Enable to use of refresh tokens when authenticating with an IdP (not compatible with identity_token authentication).
+         */
+        enableRefreshTokens?: boolean;
+        /**
+         * UIDP of the identity to assume when exchanging OIDC token for Chainguard token.
+         */
+        identityId?: string;
+        /**
+         * UIDP of the identity provider authenticate with for OIDC token.
+         */
+        identityProviderId?: string;
+        /**
+         * A path to an OIDC identity token, or explicit identity token.
+         */
+        identityToken?: string;
+        /**
+         * Verified organization name for determining identity provider to obtain OIDC token.
+         */
+        organizationName?: string;
+    }
+}

package/bin/types/output.js

@@ -0,0 +1,5 @@
+"use strict";
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=output.js.map

package/bin/types/output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.js","sourceRoot":"","sources":["../../types/output.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF"}

package/bin/utilities.d.ts

@@ -0,0 +1,9 @@
+import * as pulumi from "@pulumi/pulumi";
+export declare function getEnv(...vars: string[]): string | undefined;
+export declare function getEnvBoolean(...vars: string[]): boolean | undefined;
+export declare function getEnvNumber(...vars: string[]): number | undefined;
+export declare function getVersion(): string;
+export declare function callAsync<T>(tok: string, props: pulumi.Inputs, res?: pulumi.Resource, opts?: {
+    property?: string;
+}): Promise<T>;
+export declare function getPackage(): Promise<string | undefined>;

package/bin/utilities.js

@@ -0,0 +1,141 @@
+"use strict";
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getPackage = exports.callAsync = exports.lazyLoad = exports.resourceOptsDefaults = exports.getVersion = exports.getEnvNumber = exports.getEnvBoolean = exports.getEnv = void 0;
+const resproto = require("@pulumi/pulumi/proto/resource_pb");
+const mutex = require("async-mutex");
+const runtime = require("@pulumi/pulumi/runtime");
+function getEnv(...vars) {
+    for (const v of vars) {
+        const value = process.env[v];
+        if (value) {
+            return value;
+        }
+    }
+    return undefined;
+}
+exports.getEnv = getEnv;
+function getEnvBoolean(...vars) {
+    const s = getEnv(...vars);
+    if (s !== undefined) {
+        // NOTE: these values are taken from https://golang.org/src/strconv/atob.go?s=351:391#L1, which is what
+        // Terraform uses internally when parsing boolean values.
+        if (["1", "t", "T", "true", "TRUE", "True"].find(v => v === s) !== undefined) {
+            return true;
+        }
+        if (["0", "f", "F", "false", "FALSE", "False"].find(v => v === s) !== undefined) {
+            return false;
+        }
+    }
+    return undefined;
+}
+exports.getEnvBoolean = getEnvBoolean;
+function getEnvNumber(...vars) {
+    const s = getEnv(...vars);
+    if (s !== undefined) {
+        const f = parseFloat(s);
+        if (!isNaN(f)) {
+            return f;
+        }
+    }
+    return undefined;
+}
+exports.getEnvNumber = getEnvNumber;
+function getVersion() {
+    let version = require('./package.json').version;
+    // Node allows for the version to be prefixed by a "v", while semver doesn't.
+    // If there is a v, strip it off.
+    if (version.indexOf('v') === 0) {
+        version = version.slice(1);
+    }
+    return version;
+}
+exports.getVersion = getVersion;
+/** @internal */
+function resourceOptsDefaults() {
+    return { version: getVersion() };
+}
+exports.resourceOptsDefaults = resourceOptsDefaults;
+/** @internal */
+function lazyLoad(exports, props, loadModule) {
+    for (let property of props) {
+        Object.defineProperty(exports, property, {
+            enumerable: true,
+            get: function () {
+                return loadModule()[property];
+            },
+        });
+    }
+}
+exports.lazyLoad = lazyLoad;
+function callAsync(tok, props, res, opts) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const o = runtime.call(tok, props, res);
+        const value = yield o.promise(true /*withUnknowns*/);
+        const isKnown = yield o.isKnown;
+        const isSecret = yield o.isSecret;
+        const problem = !isKnown ? "an unknown value"
+            : isSecret ? "a secret value"
+                : undefined;
+        // Ingoring o.resources silently. They are typically non-empty, r.f() calls include r as a dependency.
+        if (problem) {
+            throw new Error(`Plain resource method "${tok}" incorrectly returned ${problem}. ` +
+                "This is an error in the provider, please report this to the provider developer.");
+        }
+        // Extract a single property if requested.
+        if (opts && opts.property) {
+            return value[opts.property];
+        }
+        return value;
+    });
+}
+exports.callAsync = callAsync;
+const _packageLock = new mutex.Mutex();
+var _packageRef = undefined;
+function getPackage() {
+    return __awaiter(this, void 0, void 0, function* () {
+        if (_packageRef === undefined) {
+            if (!runtime.supportsParameterization()) {
+                throw new Error("The Pulumi CLI does not support parameterization. Please update the Pulumi CLI");
+            }
+            yield _packageLock.acquire();
+            if (_packageRef === undefined) {
+                const monitor = runtime.getMonitor();
+                const params = new resproto.Parameterization();
+                params.setName("chainguard");
+                params.setVersion("0.1.28");
+                params.setValue(Uint8Array.from(atob("eyJyZW1vdGUiOnsidXJsIjoicmVnaXN0cnkudGVycmFmb3JtLmlvL2NoYWluZ3VhcmQtZGV2L2NoYWluZ3VhcmQiLCJ2ZXJzaW9uIjoiMC4xLjI4In19"), c => c.charCodeAt(0)));
+                const req = new resproto.RegisterPackageRequest();
+                req.setName("terraform-provider");
+                req.setVersion("0.8.1");
+                req.setDownloadUrl("");
+                req.setParameterization(params);
+                const resp = yield new Promise((resolve, reject) => {
+                    monitor.registerPackage(req, (err, resp) => {
+                        if (err) {
+                            reject(err);
+                        }
+                        else {
+                            resolve(resp);
+                        }
+                    });
+                });
+                _packageRef = resp.getRef();
+            }
+            _packageLock.release();
+        }
+        return _packageRef;
+    });
+}
+exports.getPackage = getPackage;
+//# sourceMappingURL=utilities.js.map

package/bin/utilities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utilities.js","sourceRoot":"","sources":["../utilities.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;AAEjF,6DAA6D;AAC7D,qCAAqC;AAErC,kDAAkD;AAGlD,SAAgB,MAAM,CAAC,GAAG,IAAc;IACpC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE;QAClB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,KAAK,EAAE;YACP,OAAO,KAAK,CAAC;SAChB;KACJ;IACD,OAAO,SAAS,CAAC;AACrB,CAAC;AARD,wBAQC;AAED,SAAgB,aAAa,CAAC,GAAG,IAAc;IAC3C,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;IAC1B,IAAI,CAAC,KAAK,SAAS,EAAE;QACjB,uGAAuG;QACvG,yDAAyD;QACzD,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,SAAS,EAAE;YAC1E,OAAO,IAAI,CAAC;SACf;QACD,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,SAAS,EAAE;YAC7E,OAAO,KAAK,CAAC;SAChB;KACJ;IACD,OAAO,SAAS,CAAC;AACrB,CAAC;AAbD,sCAaC;AAED,SAAgB,YAAY,CAAC,GAAG,IAAc;IAC1C,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;IAC1B,IAAI,CAAC,KAAK,SAAS,EAAE;QACjB,MAAM,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;YACX,OAAO,CAAC,CAAC;SACZ;KACJ;IACD,OAAO,SAAS,CAAC;AACrB,CAAC;AATD,oCASC;AAED,SAAgB,UAAU;IACtB,IAAI,OAAO,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC;IAChD,6EAA6E;IAC7E,iCAAiC;IACjC,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;QAC5B,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;KAC9B;IACD,OAAO,OAAO,CAAC;AACnB,CAAC;AARD,gCAQC;AAED,gBAAgB;AAChB,SAAgB,oBAAoB;IAChC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,CAAC;AACrC,CAAC;AAFD,oDAEC;AAED,gBAAgB;AAChB,SAAgB,QAAQ,CAAC,OAAY,EAAE,KAAe,EAAE,UAAe;IACnE,KAAK,IAAI,QAAQ,IAAI,KAAK,EAAE;QACxB,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,EAAE;YACrC,UAAU,EAAE,IAAI;YAChB,GAAG,EAAE;gBACD,OAAO,UAAU,EAAE,CAAC,QAAQ,CAAC,CAAC;YAClC,CAAC;SACJ,CAAC,CAAC;KACN;AACL,CAAC;AATD,4BASC;AAED,SAAsB,SAAS,CAC3B,GAAW,EACX,KAAoB,EACpB,GAAqB,EACrB,IAA0B;;QAE1B,MAAM,CAAC,GAAQ,OAAO,CAAC,IAAI,CAAI,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC;QAChC,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,QAAQ,CAAC;QAClC,MAAM,OAAO,GACT,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB;YAC7B,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,gBAAgB;gBAC7B,CAAC,CAAC,SAAS,CAAC;QAChB,sGAAsG;QACtG,IAAI,OAAO,EAAE;YACT,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,0BAA0B,OAAO,IAAI;gBAC9E,iFAAiF,CAAC,CAAC;SAC1F;QACD,0CAA0C;QAC1C,IAAI,IAAI,IAAI,IAAI,CAAC,QAAQ,EAAE;YACvB,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;SAC/B;QACD,OAAO,KAAK,CAAC;IACjB,CAAC;CAAA;AAxBD,8BAwBC;AAED,MAAM,YAAY,GAAG,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;AACvC,IAAI,WAAW,GAAwB,SAAS,CAAC;AACjD,SAAsB,UAAU;;QAC/B,IAAI,WAAW,KAAK,SAAS,EAAE;YAC9B,IAAI,CAAC,OAAO,CAAC,wBAAwB,EAAE,EAAE;gBACxC,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAC;aAClG;YAED,MAAM,YAAY,CAAC,OAAO,EAAE,CAAC;YAC7B,IAAI,WAAW,KAAK,SAAS,EAAE;gBAC9B,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;gBACrC,MAAM,MAAM,GAAG,IAAI,QAAQ,CAAC,gBAAgB,EAAE,CAAC;gBAC/C,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;gBAC7B,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;gBAC5B,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,sHAAsH,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAErL,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,sBAAsB,EAAE,CAAC;gBAClD,GAAG,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;gBAClC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;gBACxB,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;gBACvB,GAAG,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;gBAChC,MAAM,IAAI,GAAS,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;oBACxD,OAAQ,CAAC,eAAe,CAAC,GAAG,EAAE,CAAC,GAAQ,EAAE,IAAS,EAAE,EAAE;wBACrD,IAAI,GAAG,EAAE;4BACR,MAAM,CAAC,GAAG,CAAC,CAAC;yBACZ;6BAAM;4BACN,OAAO,CAAC,IAAI,CAAC,CAAC;yBACd;oBACF,CAAC,CAAC,CAAC;gBACJ,CAAC,CAAC,CAAC;gBACH,WAAW,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;aAC5B;YACD,YAAY,CAAC,OAAO,EAAE,CAAC;SACvB;QACD,OAAO,WAAqB,CAAC;IAC9B,CAAC;CAAA;AAjCD,gCAiCC"}