@reyemtech/nimbus 1.2.0 → 2.0.1

package/dist/cjs/observability/stack.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Observability stack implementation — deploys Prometheus, Grafana, Loki,
+ * Alloy, and Alertmanager as a cohesive monitoring/logging stack.
+ *
+ * @module observability/stack
+ */
+import type { IObservabilityStack, IObservabilityStackConfig } from "./interfaces";
+/**
+ * Deploy an observability stack to a cluster.
+ *
+ * Installs Prometheus, Grafana, Loki, Alloy, and Alertmanager via Helm.
+ * Each component is individually gated by its `enabled` flag.
+ *
+ * @example
+ * ```typescript
+ * const obs = createObservabilityStack("prod", {
+ *   cluster,
+ *   domain: "reyem.tech",
+ *   prometheus: { enabled: true },
+ *   grafana: { enabled: true },
+ *   loki: { enabled: true },
+ *   alloy: { enabled: true },
+ * });
+ * ```
+ *
+ * @param name - Stack name prefix for all resources
+ * @param config - Observability stack configuration
+ * @returns Deployed observability stack
+ */
+export declare function createObservabilityStack(name: string, config: IObservabilityStackConfig): IObservabilityStack;
+//# sourceMappingURL=stack.d.ts.map

package/dist/cjs/observability/stack.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stack.d.ts","sourceRoot":"","sources":["../../../src/observability/stack.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EAMV,mBAAmB,EACnB,yBAAyB,EAE1B,MAAM,cAAc,CAAC;AAiBtB;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,yBAAyB,GAChC,mBAAmB,CAwOrB"}

package/dist/cjs/observability/stack.js

@@ -0,0 +1,523 @@
+"use strict";
+/**
+ * Observability stack implementation — deploys Prometheus, Grafana, Loki,
+ * Alloy, and Alertmanager as a cohesive monitoring/logging stack.
+ *
+ * @module observability/stack
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createObservabilityStack = createObservabilityStack;
+const k8s = __importStar(require("@pulumi/kubernetes"));
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const index_1 = require("./dashboards/index");
+const storage_tiers_1 = require("../types/storage-tiers");
+const alerts_1 = require("./alerts");
+/**
+ * Default Helm chart versions. Used only when the consumer doesn't pass `version`.
+ * Set to `undefined` to let Helm resolve the latest available version.
+ */
+const DEFAULT_VERSIONS = {
+    kubePrometheusStack: undefined,
+    loki: undefined,
+    alloy: undefined,
+};
+/**
+ * Deploy an observability stack to a cluster.
+ *
+ * Installs Prometheus, Grafana, Loki, Alloy, and Alertmanager via Helm.
+ * Each component is individually gated by its `enabled` flag.
+ *
+ * @example
+ * ```typescript
+ * const obs = createObservabilityStack("prod", {
+ *   cluster,
+ *   domain: "reyem.tech",
+ *   prometheus: { enabled: true },
+ *   grafana: { enabled: true },
+ *   loki: { enabled: true },
+ *   alloy: { enabled: true },
+ * });
+ * ```
+ *
+ * @param name - Stack name prefix for all resources
+ * @param config - Observability stack configuration
+ * @returns Deployed observability stack
+ */
+function createObservabilityStack(name, config) {
+    const cluster = config.cluster;
+    const provider = cluster.provider;
+    const namespace = config.namespace ?? "observability";
+    const components = {};
+    // 1. Create the namespace
+    new k8s.core.v1.Namespace(`${name}-ns`, {
+        metadata: { name: namespace },
+    }, { provider });
+    // 2. kube-prometheus-stack (Prometheus + Grafana + Alertmanager)
+    const prometheusEnabled = config.prometheus?.enabled === true;
+    const grafanaEnabled = config.grafana?.enabled === true;
+    const alertmanagerEnabled = config.alertmanager?.enabled === true;
+    // Grafana plugins to install (built up based on datasources configured)
+    const grafanaPlugins = [];
+    if (config.neo4jEndpoint) {
+        grafanaPlugins.push("kniepdennis-neo4j-datasource");
+    }
+    if (prometheusEnabled || grafanaEnabled || alertmanagerEnabled) {
+        components["kube-prometheus-stack"] = deployKubePrometheusStack(name, namespace, config.domain, config.prometheus, config.grafana, config.alertmanager, provider, cluster.storageTiers, grafanaPlugins, config.alerts);
+    }
+    // Global alert rules (PVC, cert-manager) — after kube-prometheus-stack
+    if (config.alerts && components["kube-prometheus-stack"]) {
+        (0, alerts_1.createGlobalAlertRules)(name, namespace, provider, [components["kube-prometheus-stack"]]);
+    }
+    // 3. Loki (log aggregation)
+    if (config.loki?.enabled) {
+        components["loki"] = deployLoki(name, namespace, config.loki, provider, cluster.storageTiers);
+    }
+    // 4. Alloy (log/metric collector)
+    if (config.alloy?.enabled) {
+        const lokiEndpoint = components["loki"]
+            ? components["loki"].status.apply((s) => `http://${s?.name ?? "loki"}.${namespace}.svc.cluster.local:3100/loki/api/v1/push`)
+            : pulumi.output(`http://loki.${namespace}.svc.cluster.local:3100/loki/api/v1/push`);
+        components["alloy"] = deployAlloy(name, namespace, config.alloy, provider, lokiEndpoint);
+    }
+    // 5. Loki datasource + dashboard for Grafana
+    if (components["loki"] && grafanaEnabled) {
+        const lokiUrl = components["loki"].status.apply((s) => `http://${s?.name ?? "loki"}.${namespace}.svc.cluster.local:3100`);
+        // Loki datasource ConfigMap (sidecar picks it up)
+        new k8s.core.v1.ConfigMap(`${name}-grafana-loki-datasource`, {
+            metadata: {
+                name: `${name}-grafana-loki-datasource`,
+                namespace,
+                labels: { grafana_datasource: "1" },
+            },
+            data: {
+                "loki-datasource.yaml": lokiUrl.apply((url) => JSON.stringify({
+                    apiVersion: 1,
+                    datasources: [
+                        {
+                            name: "Loki",
+                            type: "loki",
+                            uid: "loki",
+                            url,
+                            access: "proxy",
+                            isDefault: false,
+                            jsonData: { maxLines: 1000 },
+                        },
+                    ],
+                })),
+            },
+        }, {
+            provider,
+            dependsOn: [components["loki"], components["kube-prometheus-stack"]].filter(Boolean),
+        });
+        // Loki logs explorer dashboard (under Nimbus folder)
+        new k8s.core.v1.ConfigMap(`${name}-grafana-loki-dashboard`, {
+            metadata: {
+                name: `${name}-loki-logs-dashboard`,
+                namespace,
+                labels: { grafana_dashboard: "1" },
+                annotations: { grafana_folder: "Nimbus" },
+            },
+            data: {
+                "loki-logs.json": JSON.stringify((0, index_1.lokiLogsDashboard)()),
+            },
+        }, {
+            provider,
+            dependsOn: [components["kube-prometheus-stack"]].filter(Boolean),
+        });
+    }
+    // 6. Neo4j Grafana datasource (Cypher query support)
+    if (config.neo4jEndpoint && grafanaEnabled && components["kube-prometheus-stack"]) {
+        // Neo4j datasource ConfigMap (sidecar picks it up).
+        // Read the admin password from the stored secret for the datasource config.
+        const neo4jPasswordSecretName = config.neo4jPasswordSecret;
+        const neo4jPassword = neo4jPasswordSecretName
+            ? k8s.core.v1.Secret.get(`${name}-neo4j-ds-password-read`, pulumi.interpolate `data/${neo4jPasswordSecretName}`, { provider }).data.apply((d) => Buffer.from(d?.["password"] ?? "", "base64").toString())
+            : pulumi.output("neo4j");
+        new k8s.core.v1.ConfigMap(`${name}-grafana-neo4j-datasource`, {
+            metadata: {
+                name: `${name}-grafana-neo4j-datasource`,
+                namespace,
+                labels: { grafana_datasource: "1" },
+            },
+            data: {
+                "neo4j-datasource.yaml": pulumi
+                    .all([pulumi.output(config.neo4jEndpoint), neo4jPassword])
+                    .apply(([endpoint, pw]) => {
+                    // Convert bolt:// to neo4j:// scheme (Go driver v5+ requirement)
+                    const url = endpoint.replace(/^bolt:\/\//, "neo4j://");
+                    return JSON.stringify({
+                        apiVersion: 1,
+                        datasources: [
+                            {
+                                name: "Neo4j",
+                                type: "kniepdennis-neo4j-datasource",
+                                uid: "neo4j",
+                                // Plugin reads URL from jsonData, not top-level url
+                                url: url,
+                                access: "proxy",
+                                isDefault: false,
+                                jsonData: {
+                                    url,
+                                    database: "neo4j",
+                                    username: "neo4j",
+                                },
+                                secureJsonData: { password: pw },
+                            },
+                        ],
+                    });
+                }),
+            },
+        }, {
+            provider,
+            dependsOn: [components["kube-prometheus-stack"]],
+        });
+    }
+    // 7. Component dashboards and ServiceMonitors
+    if (components["kube-prometheus-stack"]) {
+        (0, index_1.createDashboards)(name, {
+            namespace,
+            provider,
+            dependsOn: [components["kube-prometheus-stack"]],
+        });
+    }
+    // Collect exposed services — use Helm release name to derive K8s service names
+    const exposedServices = [];
+    const kpsRelease = components["kube-prometheus-stack"];
+    if (kpsRelease) {
+        const releaseName = kpsRelease.status.apply((s) => s?.name ?? "");
+        if (grafanaEnabled && config.grafana?.expose !== false) {
+            const originalName = releaseName.apply((r) => `${r}-grafana`);
+            exposedServices.push({
+                name: "grafana",
+                originalName,
+                namespace,
+                port: 80,
+                label: "grafana",
+            });
+        }
+        if (prometheusEnabled && config.prometheus?.expose !== false) {
+            const originalName = `${name}-kube-prometheus-prometheus`;
+            exposedServices.push({
+                name: "prometheus",
+                originalName,
+                namespace,
+                port: 9090,
+                label: "prometheus",
+            });
+        }
+        if (alertmanagerEnabled && config.alertmanager?.expose !== false) {
+            const originalName = `${name}-kube-prometheus-alertmanager`;
+            exposedServices.push({
+                name: "alertmanager",
+                originalName,
+                namespace,
+                port: 9093,
+                label: "alertmanager",
+            });
+        }
+    }
+    return { name, cluster, components, exposedServices };
+}
+function deployKubePrometheusStack(name, namespace, domain, prometheus, grafana, alertmanager, provider, storageTiers, grafanaPlugins, alertConfig) {
+    const certName = domain.replace(/\./g, "-");
+    const tlsSecretName = `${certName}-wildcard-tls`;
+    // Prometheus values
+    const prometheusValues = {
+        enabled: prometheus?.enabled ?? false,
+    };
+    if (prometheus?.enabled) {
+        const promSubdomain = prometheus.subdomain ?? "prometheus";
+        const promStorageClass = (0, storage_tiers_1.resolveStorageTier)(prometheus.storageTier ?? "standard", storageTiers);
+        prometheusValues["prometheusSpec"] = {
+            serviceMonitorSelectorNilUsesHelmValues: false,
+            podMonitorSelectorNilUsesHelmValues: false,
+            ruleSelectorNilUsesHelmValues: false,
+            retention: prometheus.retention ?? "15d",
+            storageSpec: {
+                volumeClaimTemplate: {
+                    spec: {
+                        // Note: storageClassName can only be set on initial creation.
+                        // Changing it on an existing StatefulSet requires manual PVC migration.
+                        ...(promStorageClass ? { storageClassName: promStorageClass } : {}),
+                        resources: {
+                            requests: {
+                                storage: `${prometheus.storageGb ?? 20}Gi`,
+                            },
+                        },
+                    },
+                },
+            },
+        };
+        // Disable public ingress when exposed via access gateway (expose defaults to true)
+        const promIngressEnabled = prometheus?.expose === false;
+        prometheusValues["ingress"] = {
+            enabled: promIngressEnabled,
+            ingressClassName: "traefik",
+            hosts: [`${promSubdomain}.${domain}`],
+            annotations: {
+                "traefik.ingress.kubernetes.io/router.entrypoints": "websecure",
+            },
+            tls: [{ secretName: tlsSecretName, hosts: [`${promSubdomain}.${domain}`] }],
+        };
+    }
+    // Grafana values
+    const grafanaValues = {
+        enabled: grafana?.enabled ?? false,
+    };
+    if (grafana?.enabled) {
+        const grafSubdomain = grafana.subdomain ?? "grafana";
+        grafanaValues["ingress"] = {
+            enabled: true,
+            ingressClassName: "traefik",
+            hosts: [`${grafSubdomain}.${domain}`],
+            annotations: {
+                "traefik.ingress.kubernetes.io/router.entrypoints": "websecure",
+            },
+            tls: [{ secretName: tlsSecretName, hosts: [`${grafSubdomain}.${domain}`] }],
+        };
+        // Install additional Grafana plugins
+        if (grafanaPlugins && grafanaPlugins.length > 0) {
+            grafanaValues["plugins"] = grafanaPlugins;
+        }
+        // Grafana SMTP for email alerts (uses the email transport's credentials)
+        if (alertConfig?.email) {
+            const transport = alertConfig.email.transport;
+            grafanaValues["smtp"] = {
+                enabled: true,
+                host: `${transport.host}:${transport.port}`,
+                user: transport.username,
+                from_address: transport.fromAddress,
+                from_name: "Nimbus Grafana",
+            };
+            if (transport.secretName) {
+                grafanaValues["extraSecretMounts"] = [
+                    {
+                        name: "smtp-password",
+                        secretName: transport.secretName,
+                        defaultMode: "0440",
+                        mountPath: "/etc/secrets/smtp-password",
+                        readOnly: true,
+                    },
+                ];
+                grafanaValues["smtp"]["password"] =
+                    "$__file{/etc/secrets/smtp-password/password}";
+            }
+        }
+        // Dashboard + datasource sidecars for configmap-based persistence
+        if ((grafana.dashboardPersistence ?? "configmap") === "configmap") {
+            grafanaValues["sidecar"] = {
+                dashboards: {
+                    enabled: true,
+                    searchNamespace: "ALL",
+                    label: "grafana_dashboard",
+                },
+                datasources: {
+                    enabled: true,
+                    searchNamespace: "ALL",
+                    label: "grafana_datasource",
+                },
+            };
+        }
+    }
+    // Alertmanager values
+    const alertmanagerValues = {
+        enabled: alertmanager?.enabled ?? false,
+    };
+    if (alertmanager?.enabled) {
+        const amSubdomain = alertmanager.subdomain ?? "alertmanager";
+        const amIngressEnabled = alertmanager?.expose === false;
+        alertmanagerValues["ingress"] = {
+            enabled: amIngressEnabled,
+            ...(amIngressEnabled && {
+                ingressClassName: "traefik",
+                hosts: [`${amSubdomain}.${domain}`],
+                annotations: {
+                    "traefik.ingress.kubernetes.io/router.entrypoints": "websecure",
+                },
+                tls: [{ secretName: tlsSecretName, hosts: [`${amSubdomain}.${domain}`] }],
+            }),
+        };
+    }
+    // Determine the chart version — use prometheus version, grafana version, alertmanager version, or default
+    const version = prometheus?.version ??
+        grafana?.version ??
+        alertmanager?.version ??
+        DEFAULT_VERSIONS.kubePrometheusStack;
+    return new k8s.helm.v3.Release(`${name}-kube-prometheus-stack`, {
+        chart: "kube-prometheus-stack",
+        repositoryOpts: { repo: "https://prometheus-community.github.io/helm-charts" },
+        version,
+        namespace,
+        createNamespace: false,
+        values: {
+            prometheus: prometheusValues,
+            grafana: grafanaValues,
+            alertmanager: alertmanagerValues,
+            ...prometheus?.values,
+            ...grafana?.values,
+            ...alertmanager?.values,
+            ...(alertConfig
+                ? { alertmanager: { ...alertmanagerValues, ...(0, alerts_1.buildAlertmanagerConfig)(alertConfig) } }
+                : {}),
+        },
+    }, { provider });
+}
+function deployLoki(name, namespace, config, provider, storageTiers) {
+    const mode = config.mode ?? "single-binary";
+    const storageGb = config.storageGb ?? 10;
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    const lokiValues = {};
+    if (mode === "single-binary") {
+        lokiValues["deploymentMode"] = "SingleBinary";
+        lokiValues["singleBinary"] = {
+            replicas: 1,
+        };
+        lokiValues["loki"] = {
+            auth_enabled: false,
+            commonConfig: {
+                replication_factor: 1,
+            },
+            storage: {
+                type: "filesystem",
+            },
+            schemaConfig: {
+                configs: [
+                    {
+                        from: "2024-01-01",
+                        store: "tsdb",
+                        object_store: "filesystem",
+                        schema: "v13",
+                        index: { prefix: "index_", period: "24h" },
+                    },
+                ],
+            },
+        };
+        if (config.retention) {
+            lokiValues["loki"]["limits_config"] = {
+                retention_period: config.retention,
+            };
+            lokiValues["loki"]["compactor"] = {
+                retention_enabled: true,
+                delete_request_store: "filesystem",
+            };
+        }
+        lokiValues["gateway"] = { enabled: false };
+        lokiValues["chunksCache"] = { enabled: false };
+        lokiValues["resultsCache"] = { enabled: false };
+        lokiValues["backend"] = { replicas: 0 };
+        lokiValues["read"] = { replicas: 0 };
+        lokiValues["write"] = { replicas: 0 };
+        const lokiStorageClass = (0, storage_tiers_1.resolveStorageTier)(config.storageTier ?? "standard", storageTiers);
+        lokiValues["singleBinary"]["persistence"] = {
+            enabled: true,
+            size: `${storageGb}Gi`,
+            ...(lokiStorageClass ? { storageClass: lokiStorageClass } : {}),
+        };
+    }
+    return new k8s.helm.v3.Release(`${name}-loki`, {
+        chart: "loki",
+        repositoryOpts: { repo: "https://grafana.github.io/helm-charts" },
+        version: config.version ?? DEFAULT_VERSIONS.loki,
+        namespace,
+        createNamespace: false,
+        values: {
+            ...lokiValues,
+            ...config.values,
+        },
+    }, { provider });
+}
+function deployAlloy(name, namespace, config, provider, lokiEndpoint) {
+    const alloyConfig = lokiEndpoint.apply((endpoint) => `
+logging {
+  level  = "info"
+  format = "logfmt"
+}
+
+discovery.kubernetes "pods" {
+  role = "pod"
+}
+
+discovery.relabel "pods" {
+  targets = discovery.kubernetes.pods.targets
+
+  rule {
+    source_labels = ["__meta_kubernetes_namespace"]
+    target_label  = "namespace"
+  }
+  rule {
+    source_labels = ["__meta_kubernetes_pod_name"]
+    target_label  = "pod"
+  }
+  rule {
+    source_labels = ["__meta_kubernetes_pod_container_name"]
+    target_label  = "container"
+  }
+  rule {
+    source_labels = ["__meta_kubernetes_pod_node_name"]
+    target_label  = "node"
+  }
+  rule {
+    source_labels = ["__meta_kubernetes_pod_label_app_kubernetes_io_name"]
+    target_label  = "app"
+  }
+}
+
+loki.source.kubernetes "pods" {
+  targets    = discovery.relabel.pods.output
+  forward_to = [loki.write.default.receiver]
+}
+
+loki.write "default" {
+  endpoint {
+    url = "${endpoint}"
+  }
+}
+`);
+    return new k8s.helm.v3.Release(`${name}-alloy`, {
+        chart: "alloy",
+        repositoryOpts: { repo: "https://grafana.github.io/helm-charts" },
+        version: config.version ?? DEFAULT_VERSIONS.alloy,
+        namespace,
+        createNamespace: false,
+        values: {
+            alloy: {
+                configMap: { content: alloyConfig },
+            },
+            ...config.values,
+        },
+    }, { provider });
+}
+//# sourceMappingURL=stack.js.map

package/dist/cjs/observability/stack.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stack.js","sourceRoot":"","sources":["../../../src/observability/stack.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoDH,4DA2OC;AA7RD,wDAA0C;AAC1C,uDAAyC;AAazC,8CAAyE;AACzE,0DAA4D;AAC5D,qCAA2E;AAE3E;;;GAGG;AACH,MAAM,gBAAgB,GAAuC;IAC3D,mBAAmB,EAAE,SAAS;IAC9B,IAAI,EAAE,SAAS;IACf,KAAK,EAAE,SAAS;CACR,CAAC;AAEX;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,SAAgB,wBAAwB,CACtC,IAAY,EACZ,MAAiC;IAEjC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC/B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAClC,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,eAAe,CAAC;IACtD,MAAM,UAAU,GAAwC,EAAE,CAAC;IAE3D,0BAA0B;IAC1B,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CACvB,GAAG,IAAI,KAAK,EACZ;QACE,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;KAC9B,EACD,EAAE,QAAQ,EAAE,CACb,CAAC;IAEF,iEAAiE;IACjE,MAAM,iBAAiB,GAAG,MAAM,CAAC,UAAU,EAAE,OAAO,KAAK,IAAI,CAAC;IAC9D,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;IACxD,MAAM,mBAAmB,GAAG,MAAM,CAAC,YAAY,EAAE,OAAO,KAAK,IAAI,CAAC;IAElE,wEAAwE;IACxE,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QACzB,cAAc,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IACtD,CAAC;IAED,IAAI,iBAAiB,IAAI,cAAc,IAAI,mBAAmB,EAAE,CAAC;QAC/D,UAAU,CAAC,uBAAuB,CAAC,GAAG,yBAAyB,CAC7D,IAAI,EACJ,SAAS,EACT,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,YAAY,EACnB,QAAQ,EACR,OAAO,CAAC,YAAY,EACpB,cAAc,EACd,MAAM,CAAC,MAAM,CACd,CAAC;IACJ,CAAC;IAED,uEAAuE;IACvE,IAAI,MAAM,CAAC,MAAM,IAAI,UAAU,CAAC,uBAAuB,CAAC,EAAE,CAAC;QACzD,IAAA,+BAAsB,EAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC;IAC3F,CAAC;IAED,4BAA4B;IAC5B,IAAI,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC;QACzB,UAAU,CAAC,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IAChG,CAAC;IAED,kCAAkC;IAClC,IAAI,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC;QAC1B,MAAM,YAAY,GAAG,UAAU,CAAC,MAAM,CAAC;YACrC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAC7B,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,IAAI,IAAI,MAAM,IAAI,SAAS,0CAA0C,CAC1F;YACH,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,SAAS,0CAA0C,CAAC,CAAC;QACtF,UAAU,CAAC,OAAO,CAAC,GAAG,WAAW,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IAC3F,CAAC;IAED,6CAA6C;IAC7C,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAC7C,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,IAAI,IAAI,MAAM,IAAI,SAAS,yBAAyB,CACzE,CAAC;QAEF,kDAAkD;QAClD,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CACvB,GAAG,IAAI,0BAA0B,EACjC;YACE,QAAQ,EAAE;gBACR,IAAI,EAAE,GAAG,IAAI,0BAA0B;gBACvC,SAAS;gBACT,MAAM,EAAE,EAAE,kBAAkB,EAAE,GAAG,EAAE;aACpC;YACD,IAAI,EAAE;gBACJ,sBAAsB,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAC5C,IAAI,CAAC,SAAS,CAAC;oBACb,UAAU,EAAE,CAAC;oBACb,WAAW,EAAE;wBACX;4BACE,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,MAAM;4BACZ,GAAG,EAAE,MAAM;4BACX,GAAG;4BACH,MAAM,EAAE,OAAO;4BACf,SAAS,EAAE,KAAK;4BAChB,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;yBAC7B;qBACF;iBACF,CAAC,CACH;aACF;SACF,EACD;YACE,QAAQ;YACR,SAAS,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC,uBAAuB,CAAC,CAAC,CAAC,MAAM,CACzE,OAAO,CACiB;SAC3B,CACF,CAAC;QAEF,qDAAqD;QACrD,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CACvB,GAAG,IAAI,yBAAyB,EAChC;YACE,QAAQ,EAAE;gBACR,IAAI,EAAE,GAAG,IAAI,sBAAsB;gBACnC,SAAS;gBACT,MAAM,EAAE,EAAE,iBAAiB,EAAE,GAAG,EAAE;gBAClC,WAAW,EAAE,EAAE,cAAc,EAAE,QAAQ,EAAE;aAC1C;YACD,IAAI,EAAE;gBACJ,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,IAAA,yBAAiB,GAAE,CAAC;aACtD;SACF,EACD;YACE,QAAQ;YACR,SAAS,EAAE,CAAC,UAAU,CAAC,uBAAuB,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAA0B;SAC1F,CACF,CAAC;IACJ,CAAC;IAED,qDAAqD;IACrD,IAAI,MAAM,CAAC,aAAa,IAAI,cAAc,IAAI,UAAU,CAAC,uBAAuB,CAAC,EAAE,CAAC;QAClF,oDAAoD;QACpD,4EAA4E;QAC5E,MAAM,uBAAuB,GAAG,MAAM,CAAC,mBAAmB,CAAC;QAC3D,MAAM,aAAa,GAAG,uBAAuB;YAC3C,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CACpB,GAAG,IAAI,yBAAyB,EAChC,MAAM,CAAC,WAAW,CAAA,QAAQ,uBAAuB,EAAE,EACnD,EAAE,QAAQ,EAAE,CACb,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;YAC9E,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAE3B,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CACvB,GAAG,IAAI,2BAA2B,EAClC;YACE,QAAQ,EAAE;gBACR,IAAI,EAAE,GAAG,IAAI,2BAA2B;gBACxC,SAAS;gBACT,MAAM,EAAE,EAAE,kBAAkB,EAAE,GAAG,EAAE;aACpC;YACD,IAAI,EAAE;gBACJ,uBAAuB,EAAE,MAAM;qBAC5B,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC,CAAC;qBACzD,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE;oBACxB,iEAAiE;oBACjE,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;oBACvD,OAAO,IAAI,CAAC,SAAS,CAAC;wBACpB,UAAU,EAAE,CAAC;wBACb,WAAW,EAAE;4BACX;gCACE,IAAI,EAAE,OAAO;gCACb,IAAI,EAAE,8BAA8B;gCACpC,GAAG,EAAE,OAAO;gCACZ,oDAAoD;gCACpD,GAAG,EAAE,GAAG;gCACR,MAAM,EAAE,OAAO;gCACf,SAAS,EAAE,KAAK;gCAChB,QAAQ,EAAE;oCACR,GAAG;oCACH,QAAQ,EAAE,OAAO;oCACjB,QAAQ,EAAE,OAAO;iCAClB;gCACD,cAAc,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;6BACjC;yBACF;qBACF,CAAC,CAAC;gBACL,CAAC,CAAC;aACL;SACF,EACD;YACE,QAAQ;YACR,SAAS,EAAE,CAAC,UAAU,CAAC,uBAAuB,CAAC,CAAC;SACjD,CACF,CAAC;IACJ,CAAC;IAED,8CAA8C;IAC9C,IAAI,UAAU,CAAC,uBAAuB,CAAC,EAAE,CAAC;QACxC,IAAA,wBAAgB,EAAC,IAAI,EAAE;YACrB,SAAS;YACT,QAAQ;YACR,SAAS,EAAE,CAAC,UAAU,CAAC,uBAAuB,CAAC,CAAC;SACjD,CAAC,CAAC;IACL,CAAC;IAED,+EAA+E;IAC/E,MAAM,eAAe,GAAsB,EAAE,CAAC;IAC9C,MAAM,UAAU,GAAG,UAAU,CAAC,uBAAuB,CAAC,CAAC;IAEvD,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QAElE,IAAI,cAAc,IAAI,MAAM,CAAC,OAAO,EAAE,MAAM,KAAK,KAAK,EAAE,CAAC;YACvD,MAAM,YAAY,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAC9D,eAAe,CAAC,IAAI,CAAC;gBACnB,IAAI,EAAE,SAAS;gBACf,YAAY;gBACZ,SAAS;gBACT,IAAI,EAAE,EAAE;gBACR,KAAK,EAAE,SAAS;aACjB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,iBAAiB,IAAI,MAAM,CAAC,UAAU,EAAE,MAAM,KAAK,KAAK,EAAE,CAAC;YAC7D,MAAM,YAAY,GAAG,GAAG,IAAI,6BAA6B,CAAC;YAC1D,eAAe,CAAC,IAAI,CAAC;gBACnB,IAAI,EAAE,YAAY;gBAClB,YAAY;gBACZ,SAAS;gBACT,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,YAAY;aACpB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,mBAAmB,IAAI,MAAM,CAAC,YAAY,EAAE,MAAM,KAAK,KAAK,EAAE,CAAC;YACjE,MAAM,YAAY,GAAG,GAAG,IAAI,+BAA+B,CAAC;YAC5D,eAAe,CAAC,IAAI,CAAC;gBACnB,IAAI,EAAE,cAAc;gBACpB,YAAY;gBACZ,SAAS;gBACT,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,cAAc;aACtB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC;AACxD,CAAC;AAED,SAAS,yBAAyB,CAChC,IAAY,EACZ,SAAiB,EACjB,MAAc,EACd,UAAyC,EACzC,OAAmC,EACnC,YAA6C,EAC7C,QAAsB,EACtB,YAA6B,EAC7B,cAAyB,EACzB,WAA0B;IAE1B,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC5C,MAAM,aAAa,GAAG,GAAG,QAAQ,eAAe,CAAC;IAEjD,oBAAoB;IACpB,MAAM,gBAAgB,GAA4B;QAChD,OAAO,EAAE,UAAU,EAAE,OAAO,IAAI,KAAK;KACtC,CAAC;IACF,IAAI,UAAU,EAAE,OAAO,EAAE,CAAC;QACxB,MAAM,aAAa,GAAG,UAAU,CAAC,SAAS,IAAI,YAAY,CAAC;QAC3D,MAAM,gBAAgB,GAAG,IAAA,kCAAkB,EAAC,UAAU,CAAC,WAAW,IAAI,UAAU,EAAE,YAAY,CAAC,CAAC;QAChG,gBAAgB,CAAC,gBAAgB,CAAC,GAAG;YACnC,uCAAuC,EAAE,KAAK;YAC9C,mCAAmC,EAAE,KAAK;YAC1C,6BAA6B,EAAE,KAAK;YACpC,SAAS,EAAE,UAAU,CAAC,SAAS,IAAI,KAAK;YACxC,WAAW,EAAE;gBACX,mBAAmB,EAAE;oBACnB,IAAI,EAAE;wBACJ,8DAA8D;wBAC9D,wEAAwE;wBACxE,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACnE,SAAS,EAAE;4BACT,QAAQ,EAAE;gCACR,OAAO,EAAE,GAAG,UAAU,CAAC,SAAS,IAAI,EAAE,IAAI;6BAC3C;yBACF;qBACF;iBACF;aACF;SACF,CAAC;QACF,mFAAmF;QACnF,MAAM,kBAAkB,GAAG,UAAU,EAAE,MAAM,KAAK,KAAK,CAAC;QACxD,gBAAgB,CAAC,SAAS,CAAC,GAAG;YAC5B,OAAO,EAAE,kBAAkB;YAC3B,gBAAgB,EAAE,SAAS;YAC3B,KAAK,EAAE,CAAC,GAAG,aAAa,IAAI,MAAM,EAAE,CAAC;YACrC,WAAW,EAAE;gBACX,kDAAkD,EAAE,WAAW;aAChE;YACD,GAAG,EAAE,CAAC,EAAE,UAAU,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,GAAG,aAAa,IAAI,MAAM,EAAE,CAAC,EAAE,CAAC;SAC5E,CAAC;IACJ,CAAC;IAED,iBAAiB;IACjB,MAAM,aAAa,GAA4B;QAC7C,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,KAAK;KACnC,CAAC;IACF,IAAI,OAAO,EAAE,OAAO,EAAE,CAAC;QACrB,MAAM,aAAa,GAAG,OAAO,CAAC,SAAS,IAAI,SAAS,CAAC;QACrD,aAAa,CAAC,SAAS,CAAC,GAAG;YACzB,OAAO,EAAE,IAAI;YACb,gBAAgB,EAAE,SAAS;YAC3B,KAAK,EAAE,CAAC,GAAG,aAAa,IAAI,MAAM,EAAE,CAAC;YACrC,WAAW,EAAE;gBACX,kDAAkD,EAAE,WAAW;aAChE;YACD,GAAG,EAAE,CAAC,EAAE,UAAU,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,GAAG,aAAa,IAAI,MAAM,EAAE,CAAC,EAAE,CAAC;SAC5E,CAAC;QAEF,qCAAqC;QACrC,IAAI,cAAc,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChD,aAAa,CAAC,SAAS,CAAC,GAAG,cAAc,CAAC;QAC5C,CAAC;QAED,yEAAyE;QACzE,IAAI,WAAW,EAAE,KAAK,EAAE,CAAC;YACvB,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC;YAC9C,aAAa,CAAC,MAAM,CAAC,GAAG;gBACtB,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,GAAG,SAAS,CAAC,IAAI,IAAI,SAAS,CAAC,IAAI,EAAE;gBAC3C,IAAI,EAAE,SAAS,CAAC,QAAQ;gBACxB,YAAY,EAAE,SAAS,CAAC,WAAW;gBACnC,SAAS,EAAE,gBAAgB;aAC5B,CAAC;YACF,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC;gBACzB,aAAa,CAAC,mBAAmB,CAAC,GAAG;oBACnC;wBACE,IAAI,EAAE,eAAe;wBACrB,UAAU,EAAE,SAAS,CAAC,UAAU;wBAChC,WAAW,EAAE,MAAM;wBACnB,SAAS,EAAE,4BAA4B;wBACvC,QAAQ,EAAE,IAAI;qBACf;iBACF,CAAC;gBACD,aAAa,CAAC,MAAM,CAA6B,CAAC,UAAU,CAAC;oBAC5D,8CAA8C,CAAC;YACnD,CAAC;QACH,CAAC;QAED,kEAAkE;QAClE,IAAI,CAAC,OAAO,CAAC,oBAAoB,IAAI,WAAW,CAAC,KAAK,WAAW,EAAE,CAAC;YAClE,aAAa,CAAC,SAAS,CAAC,GAAG;gBACzB,UAAU,EAAE;oBACV,OAAO,EAAE,IAAI;oBACb,eAAe,EAAE,KAAK;oBACtB,KAAK,EAAE,mBAAmB;iBAC3B;gBACD,WAAW,EAAE;oBACX,OAAO,EAAE,IAAI;oBACb,eAAe,EAAE,KAAK;oBACtB,KAAK,EAAE,oBAAoB;iBAC5B;aACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,sBAAsB;IACtB,MAAM,kBAAkB,GAA4B;QAClD,OAAO,EAAE,YAAY,EAAE,OAAO,IAAI,KAAK;KACxC,CAAC;IACF,IAAI,YAAY,EAAE,OAAO,EAAE,CAAC;QAC1B,MAAM,WAAW,GAAG,YAAY,CAAC,SAAS,IAAI,cAAc,CAAC;QAC7D,MAAM,gBAAgB,GAAG,YAAY,EAAE,MAAM,KAAK,KAAK,CAAC;QACxD,kBAAkB,CAAC,SAAS,CAAC,GAAG;YAC9B,OAAO,EAAE,gBAAgB;YACzB,GAAG,CAAC,gBAAgB,IAAI;gBACtB,gBAAgB,EAAE,SAAS;gBAC3B,KAAK,EAAE,CAAC,GAAG,WAAW,IAAI,MAAM,EAAE,CAAC;gBACnC,WAAW,EAAE;oBACX,kDAAkD,EAAE,WAAW;iBAChE;gBACD,GAAG,EAAE,CAAC,EAAE,UAAU,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,GAAG,WAAW,IAAI,MAAM,EAAE,CAAC,EAAE,CAAC;aAC1E,CAAC;SACH,CAAC;IACJ,CAAC;IAED,0GAA0G;IAC1G,MAAM,OAAO,GACX,UAAU,EAAE,OAAO;QACnB,OAAO,EAAE,OAAO;QAChB,YAAY,EAAE,OAAO;QACrB,gBAAgB,CAAC,mBAAmB,CAAC;IAEvC,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAC5B,GAAG,IAAI,wBAAwB,EAC/B;QACE,KAAK,EAAE,uBAAuB;QAC9B,cAAc,EAAE,EAAE,IAAI,EAAE,oDAAoD,EAAE;QAC9E,OAAO;QACP,SAAS;QACT,eAAe,EAAE,KAAK;QACtB,MAAM,EAAE;YACN,UAAU,EAAE,gBAAgB;YAC5B,OAAO,EAAE,aAAa;YACtB,YAAY,EAAE,kBAAkB;YAChC,GAAG,UAAU,EAAE,MAAM;YACrB,GAAG,OAAO,EAAE,MAAM;YAClB,GAAG,YAAY,EAAE,MAAM;YACvB,GAAG,CAAC,WAAW;gBACb,CAAC,CAAC,EAAE,YAAY,EAAE,EAAE,GAAG,kBAAkB,EAAE,GAAG,IAAA,gCAAuB,EAAC,WAAW,CAAC,EAAE,EAAE;gBACtF,CAAC,CAAC,EAAE,CAAC;SACR;KACF,EACD,EAAE,QAAQ,EAAE,CACb,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CACjB,IAAY,EACZ,SAAiB,EACjB,MAAmB,EACnB,QAAsB,EACtB,YAA6B;IAE7B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,eAAe,CAAC;IAC5C,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;IAEzC,8DAA8D;IAC9D,MAAM,UAAU,GAAwB,EAAE,CAAC;IAE3C,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;QAC7B,UAAU,CAAC,gBAAgB,CAAC,GAAG,cAAc,CAAC;QAC9C,UAAU,CAAC,cAAc,CAAC,GAAG;YAC3B,QAAQ,EAAE,CAAC;SACZ,CAAC;QACF,UAAU,CAAC,MAAM,CAAC,GAAG;YACnB,YAAY,EAAE,KAAK;YACnB,YAAY,EAAE;gBACZ,kBAAkB,EAAE,CAAC;aACtB;YACD,OAAO,EAAE;gBACP,IAAI,EAAE,YAAY;aACnB;YACD,YAAY,EAAE;gBACZ,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,YAAY;wBAClB,KAAK,EAAE,MAAM;wBACb,YAAY,EAAE,YAAY;wBAC1B,MAAM,EAAE,KAAK;wBACb,KAAK,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE;qBAC3C;iBACF;aACF;SACF,CAAC;QACF,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACrB,UAAU,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,GAAG;gBACpC,gBAAgB,EAAE,MAAM,CAAC,SAAS;aACnC,CAAC;YACF,UAAU,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,GAAG;gBAChC,iBAAiB,EAAE,IAAI;gBACvB,oBAAoB,EAAE,YAAY;aACnC,CAAC;QACJ,CAAC;QACD,UAAU,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC3C,UAAU,CAAC,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC/C,UAAU,CAAC,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAChD,UAAU,CAAC,SAAS,CAAC,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACxC,UAAU,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACrC,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACtC,MAAM,gBAAgB,GAAG,IAAA,kCAAkB,EAAC,MAAM,CAAC,WAAW,IAAI,UAAU,EAAE,YAAY,CAAC,CAAC;QAC5F,UAAU,CAAC,cAAc,CAAC,CAAC,aAAa,CAAC,GAAG;YAC1C,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,GAAG,SAAS,IAAI;YACtB,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChE,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAC5B,GAAG,IAAI,OAAO,EACd;QACE,KAAK,EAAE,MAAM;QACb,cAAc,EAAE,EAAE,IAAI,EAAE,uCAAuC,EAAE;QACjE,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,gBAAgB,CAAC,IAAI;QAChD,SAAS;QACT,eAAe,EAAE,KAAK;QACtB,MAAM,EAAE;YACN,GAAG,UAAU;YACb,GAAG,MAAM,CAAC,MAAM;SACjB;KACF,EACD,EAAE,QAAQ,EAAE,CACb,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAClB,IAAY,EACZ,SAAiB,EACjB,MAAoB,EACpB,QAAsB,EACtB,YAAmC;IAEnC,MAAM,WAAW,GAAG,YAAY,CAAC,KAAK,CACpC,CAAC,QAAQ,EAAE,EAAE,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;aA0CL,QAAQ;;;CAGpB,CACE,CAAC;IAEF,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAC5B,GAAG,IAAI,QAAQ,EACf;QACE,KAAK,EAAE,OAAO;QACd,cAAc,EAAE,EAAE,IAAI,EAAE,uCAAuC,EAAE;QACjE,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,gBAAgB,CAAC,KAAK;QACjD,SAAS;QACT,eAAe,EAAE,KAAK;QACtB,MAAM,EAAE;YACN,KAAK,EAAE;gBACL,SAAS,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE;aACpC;YACD,GAAG,MAAM,CAAC,MAAM;SACjB;KACF,EACD,EAAE,QAAQ,EAAE,CACb,CAAC;AACJ,CAAC"}

package/dist/cjs/operator/cnpg.d.ts

@@ -0,0 +1,22 @@
+/**
+ * CloudNativePG backend — provisions PostgreSQL clusters via the CNPG operator.
+ *
+ * Creates a CNPG Cluster CRD, backup credentials, and scheduled backups.
+ * Returns IClusterInstance with createDatabase() for provisioning individual
+ * databases with connection secrets replicated to target namespaces.
+ *
+ * @module operator/cnpg
+ */
+import * as k8s from "@pulumi/kubernetes";
+import { type StorageTierMap } from "../types/storage-tiers";
+import type { IBackupDefaults, IOperatorClusterConfig, IClusterInstance } from "./interfaces";
+/**
+ * Create a PostgreSQL cluster via the CloudNativePG operator.
+ *
+ * When `config.environments` is set, creates separate clusters per environment
+ * with `{name}-{env}` naming and returns a Record of IClusterInstance.
+ *
+ * @returns IClusterInstance or Record<string, IClusterInstance> when environments is set
+ */
+export declare function createCnpgDatabase(name: string, config: IOperatorClusterConfig | undefined, backupDefaults: IBackupDefaults | undefined, provider: k8s.Provider, operatorRelease: k8s.helm.v3.Release, storageTiers?: StorageTierMap): IClusterInstance | Record<string, IClusterInstance>;
+//# sourceMappingURL=cnpg.d.ts.map

package/dist/cjs/operator/cnpg.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cnpg.d.ts","sourceRoot":"","sources":["../../../src/operator/cnpg.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,GAAG,MAAM,oBAAoB,CAAC;AAG1C,OAAO,EAAsB,KAAK,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACjF,OAAO,KAAK,EACV,eAAe,EACf,sBAAsB,EACtB,gBAAgB,EAGjB,MAAM,cAAc,CAAC;AA8atB;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,sBAAsB,GAAG,SAAS,EAC1C,cAAc,EAAE,eAAe,GAAG,SAAS,EAC3C,QAAQ,EAAE,GAAG,CAAC,QAAQ,EACtB,eAAe,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EACpC,YAAY,CAAC,EAAE,cAAc,GAC5B,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAyCrD"}