@reyemtech/nimbus 1.2.0 → 2.0.1

package/dist/cjs/operator/interfaces.d.ts

@@ -0,0 +1,192 @@
+/**
+ * Operator module interfaces for @reyemtech/nimbus.
+ *
+ * Models the real-world pattern: install an operator once, create cluster
+ * instances, then provision individual databases within each cluster.
+ * Each database gets connection secrets replicated to target namespaces.
+ *
+ * @module operator/interfaces
+ */
+import type * as pulumi from "@pulumi/pulumi";
+import type * as k8s from "@pulumi/kubernetes";
+import type { ICluster } from "../cluster";
+import type { IBackupTarget } from "../backup";
+import type { StorageTier } from "../types/storage-tiers";
+/** Per-environment config overrides. Keys are environment names (e.g. "dev", "prod"). */
+export type EnvironmentOverrides<T> = Record<string, Partial<T>>;
+/** Supported Kubernetes database operators. */
+export type OperatorType = "cloudnative-pg" | "mariadb-operator" | "minio" | "neo4j";
+/** Typed constant map for OperatorType string literals. */
+export declare const OPERATOR_TYPES: {
+    CLOUDNATIVE_PG: "cloudnative-pg";
+    MARIADB_OPERATOR: "mariadb-operator";
+    NEO4J: "neo4j";
+    MINIO: "minio";
+};
+/** Default backup configuration for clusters provisioned by an operator. */
+export interface IBackupDefaults {
+    /** Backup target (S3 bucket + credentials). */
+    readonly target: IBackupTarget;
+    /** Cron schedule for scheduled backups (e.g., "0 3 * * *"). */
+    readonly schedule?: string;
+    /** Number of days to retain backups. */
+    readonly retentionDays?: number;
+    /** Enable point-in-time recovery. */
+    readonly pitr?: boolean;
+    /** WAL archive upload interval in seconds (CNPG-specific). Default: 300. */
+    readonly pitrIntervalSeconds?: number;
+}
+/** Configuration for deploying a database operator via Helm. */
+export interface IOperatorConfig {
+    /** Cluster to deploy the operator to. */
+    readonly cluster: ICluster;
+    /** Kubernetes namespace for the operator. Defaults to operator-specific namespace. */
+    readonly namespace?: string;
+    /** Helm chart version. Uses latest if omitted. */
+    readonly version?: string;
+    /** Additional Helm values to merge. */
+    readonly values?: Record<string, unknown>;
+    /** Default backup configuration for clusters created by this operator. */
+    readonly backup?: IBackupDefaults;
+}
+/** Per-cluster configuration when creating a database cluster via an operator. */
+export interface IOperatorClusterConfig {
+    /** Database engine version (e.g., "17" for PostgreSQL, "11.7" for MariaDB). */
+    readonly version?: string;
+    /** Number of instances/replicas. Default: 1. */
+    readonly replicas?: number;
+    /** Storage size in GB. Default: 10. */
+    readonly storageGb?: number;
+    /** Storage tier for PVC storage class selection. */
+    readonly storageTier?: StorageTier;
+    /** Override operator-level backup defaults for this cluster. */
+    readonly backup?: Partial<IBackupDefaults>;
+    /** CPU and memory resource requests/limits. */
+    readonly resources?: {
+        readonly requests?: {
+            cpu?: string;
+            memory?: string;
+        };
+        readonly limits?: {
+            cpu?: string;
+            memory?: string;
+        };
+    };
+    /** Database engine parameters (e.g., max_connections, shared_buffers). */
+    readonly parameters?: Record<string, string>;
+    /** Resource tags (applied as labels). */
+    readonly tags?: Record<string, string>;
+    /** When set, creates separate clusters per environment with {name}-{env} naming. Per-env values override base config. */
+    readonly environments?: EnvironmentOverrides<Omit<IOperatorClusterConfig, "environments">>;
+}
+/** Configuration for creating a database within a cluster. */
+export interface IOperatorDatabaseConfig {
+    /** Namespaces to replicate the connection secret into. */
+    readonly namespaces: string[];
+    /** Database owner/username. Default: same as database name. */
+    readonly owner?: string;
+    /** When set, creates separate databases per environment with {dbName}-{env} naming. Per-env values override base config. */
+    readonly environments?: EnvironmentOverrides<Omit<IOperatorDatabaseConfig, "environments">>;
+}
+/** A database within a cluster, with connection secrets in target namespaces. */
+export interface IDatabaseInstance {
+    /** Database name. */
+    readonly name: string;
+    /** Cluster this database belongs to. */
+    readonly clusterName: string;
+    /** Database connection endpoint. */
+    readonly host: pulumi.Output<string>;
+    /** Database connection port. */
+    readonly port: pulumi.Output<number>;
+    /** Database name on the server. */
+    readonly database: pulumi.Output<string>;
+    /** Secrets created in target namespaces (namespace → secret name). */
+    readonly secrets: Record<string, pulumi.Output<string>>;
+    /** Underlying Pulumi resource for dependency wiring. */
+    readonly nativeResource: pulumi.Resource;
+}
+/** A database cluster instance created by an operator. */
+export interface IClusterInstance {
+    /** Cluster name. */
+    readonly name: string;
+    /** Database engine type. */
+    readonly engine: "postgresql" | "mariadb" | "neo4j";
+    /** Read-write endpoint for the cluster. */
+    readonly endpoint: pulumi.Output<string>;
+    /** Connection port. */
+    readonly port: pulumi.Output<number>;
+    /** Underlying CRD resource. */
+    readonly nativeResource: pulumi.Resource;
+    /**
+     * Create a database within this cluster and replicate connection
+     * secrets to specified namespaces.
+     *
+     * Each secret contains: host, port, username, password, database, uri.
+     *
+     * @param name - Database name
+     * @param config - Namespaces for secret replication + optional owner
+     * @returns Database instance with secret references
+     */
+    createDatabase(name: string, config: IOperatorDatabaseConfig): IDatabaseInstance;
+    /** Overload: when environments is provided, returns a Record keyed by environment name. */
+    createDatabase(name: string, config: IOperatorDatabaseConfig & Required<Pick<IOperatorDatabaseConfig, "environments">>): Record<string, IDatabaseInstance>;
+}
+/** Configuration for creating a MinIO bucket via the operator. */
+export interface IMinIOBucketConfig {
+    /** Bucket size in GB. Default: 10. */
+    readonly sizeGb?: number;
+    /** Enable public read access on the bucket. Default: false. */
+    readonly public?: boolean;
+    /** Namespaces to replicate the access credentials secret into. */
+    readonly namespaces?: string[];
+}
+/** MinIO ingress configuration for external S3 API access. */
+export interface IMinIOIngressConfig {
+    /** Base domain (e.g., "reyem.ca"). */
+    readonly domain: string;
+    /** Subdomain prefix for the S3 API. Default: "s3". */
+    readonly subdomain?: string;
+    /** TLS secret name. If omitted, derived from domain. */
+    readonly tlsSecretName?: string;
+}
+/** A MinIO bucket with endpoint, credentials, and namespace secrets. */
+export interface IMinIOBucket {
+    readonly name: string;
+    readonly endpoint: pulumi.Output<string>;
+    readonly bucketName: pulumi.Output<string>;
+    readonly credentials: {
+        readonly accessKeyId: pulumi.Output<string>;
+        readonly secretAccessKey: pulumi.Output<string>;
+    };
+    /** Secrets created in target namespaces (namespace → secret name). */
+    readonly secrets: Record<string, pulumi.Output<string>>;
+    /** Underlying Pulumi resource for dependency wiring. */
+    readonly nativeResource: pulumi.Resource;
+}
+/** A MinIO operator instance with createBucket(). */
+export interface IMinIOOperator extends Omit<IOperator, "createCluster"> {
+    /** S3 API endpoint URL (internal cluster URL). */
+    readonly endpoint: pulumi.Output<string>;
+    /** Create a bucket on the MinIO deployment and replicate credentials to target namespaces. */
+    createBucket(name: string, config?: IMinIOBucketConfig): IMinIOBucket;
+}
+/** Deployed database operator instance. */
+export interface IOperator {
+    /** Logical name of the operator. */
+    readonly name: string;
+    /** Operator type discriminant. */
+    readonly type: OperatorType;
+    /** Underlying Helm release resource. */
+    readonly helmRelease: k8s.helm.v3.Release;
+    /**
+     * Create a database cluster via the operator.
+     *
+     * @param name - Cluster name (used for CRD metadata and service names)
+     * @param config - Per-cluster configuration (when environments is set, returns a Record keyed by environment name)
+     * @returns Cluster instance with createDatabase() for per-database provisioning
+     */
+    createCluster(name: string, config?: IOperatorClusterConfig): IClusterInstance;
+    /** Overload: when environments is provided, returns a Record keyed by environment name. */
+    createCluster(name: string, config: IOperatorClusterConfig & Required<Pick<IOperatorClusterConfig, "environments">>): Record<string, IClusterInstance>;
+}
+//# sourceMappingURL=interfaces.d.ts.map

package/dist/cjs/operator/interfaces.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"interfaces.d.ts","sourceRoot":"","sources":["../../../src/operator/interfaces.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAC9C,OAAO,KAAK,KAAK,GAAG,MAAM,oBAAoB,CAAC;AAC/C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAE1D,yFAAyF;AACzF,MAAM,MAAM,oBAAoB,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AAEjE,+CAA+C;AAC/C,MAAM,MAAM,YAAY,GAAG,gBAAgB,GAAG,kBAAkB,GAAG,OAAO,GAAG,OAAO,CAAC;AAErF,2DAA2D;AAC3D,eAAO,MAAM,cAAc;;;;;CAKa,CAAC;AAEzC,4EAA4E;AAC5E,MAAM,WAAW,eAAe;IAC9B,+CAA+C;IAC/C,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,+DAA+D;IAC/D,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,wCAAwC;IACxC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,qCAAqC;IACrC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB,4EAA4E;IAC5E,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;CACvC;AAED,gEAAgE;AAChE,MAAM,WAAW,eAAe;IAC9B,yCAAyC;IACzC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC;IAC3B,sFAAsF;IACtF,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,kDAAkD;IAClD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,uCAAuC;IACvC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,0EAA0E;IAC1E,QAAQ,CAAC,MAAM,CAAC,EAAE,eAAe,CAAC;CACnC;AAED,kFAAkF;AAClF,MAAM,WAAW,sBAAsB;IACrC,+EAA+E;IAC/E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,gDAAgD;IAChD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,uCAAuC;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,oDAAoD;IACpD,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;IACnC,gEAAgE;IAChE,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IAC3C,+CAA+C;IAC/C,QAAQ,CAAC,SAAS,CAAC,EAAE;QACnB,QAAQ,CAAC,QAAQ,CAAC,EAAE;YAAE,GAAG,CAAC,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QACtD,QAAQ,CAAC,MAAM,CAAC,EAAE;YAAE,GAAG,CAAC,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACrD,CAAC;IACF,0EAA0E;IAC1E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7C,yCAAyC;IACzC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,yHAAyH;IACzH,QAAQ,CAAC,YAAY,CAAC,EAAE,oBAAoB,CAAC,IAAI,CAAC,sBAAsB,EAAE,cAAc,CAAC,CAAC,CAAC;CAC5F;AAED,8DAA8D;AAC9D,MAAM,WAAW,uBAAuB;IACtC,0DAA0D;IAC1D,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAC9B,+DAA+D;IAC/D,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,4HAA4H;IAC5H,QAAQ,CAAC,YAAY,CAAC,EAAE,oBAAoB,CAAC,IAAI,CAAC,uBAAuB,EAAE,cAAc,CAAC,CAAC,CAAC;CAC7F;AAED,iFAAiF;AACjF,MAAM,WAAW,iBAAiB;IAChC,qBAAqB;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,wCAAwC;IACxC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,oCAAoC;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACrC,gCAAgC;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACrC,mCAAmC;IACnC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzC,sEAAsE;IACtE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACxD,wDAAwD;IACxD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC;CAC1C;AAED,0DAA0D;AAC1D,MAAM,WAAW,gBAAgB;IAC/B,oBAAoB;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,4BAA4B;IAC5B,QAAQ,CAAC,MAAM,EAAE,YAAY,GAAG,SAAS,GAAG,OAAO,CAAC;IACpD,2CAA2C;IAC3C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzC,uBAAuB;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACrC,+BAA+B;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC;IACzC;;;;;;;;;OASG;IACH,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,uBAAuB,GAAG,iBAAiB,CAAC;IACjF,2FAA2F;IAC3F,cAAc,CACZ,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,uBAAuB,GAAG,QAAQ,CAAC,IAAI,CAAC,uBAAuB,EAAE,cAAc,CAAC,CAAC,GACxF,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;CACtC;AAMD,kEAAkE;AAClE,MAAM,WAAW,kBAAkB;IACjC,sCAAsC;IACtC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,+DAA+D;IAC/D,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,kEAAkE;IAClE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CAChC;AAED,8DAA8D;AAC9D,MAAM,WAAW,mBAAmB;IAClC,sCAAsC;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,sDAAsD;IACtD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,wDAAwD;IACxD,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,wEAAwE;AACxE,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3C,QAAQ,CAAC,WAAW,EAAE;QACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5C,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;KACjD,CAAC;IACF,sEAAsE;IACtE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACxD,wDAAwD;IACxD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC;CAC1C;AAED,qDAAqD;AACrD,MAAM,WAAW,cAAe,SAAQ,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC;IACtE,kDAAkD;IAClD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzC,8FAA8F;IAC9F,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,YAAY,CAAC;CACvE;AAED,2CAA2C;AAC3C,MAAM,WAAW,SAAS;IACxB,oCAAoC;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,kCAAkC;IAClC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,wCAAwC;IACxC,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;IAC1C;;;;;;OAMG;IACH,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,sBAAsB,GAAG,gBAAgB,CAAC;IAC/E,2FAA2F;IAC3F,aAAa,CACX,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,sBAAsB,GAAG,QAAQ,CAAC,IAAI,CAAC,sBAAsB,EAAE,cAAc,CAAC,CAAC,GACtF,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;CACrC"}

package/dist/cjs/operator/interfaces.js

@@ -0,0 +1,20 @@
+"use strict";
+/**
+ * Operator module interfaces for @reyemtech/nimbus.
+ *
+ * Models the real-world pattern: install an operator once, create cluster
+ * instances, then provision individual databases within each cluster.
+ * Each database gets connection secrets replicated to target namespaces.
+ *
+ * @module operator/interfaces
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OPERATOR_TYPES = void 0;
+/** Typed constant map for OperatorType string literals. */
+exports.OPERATOR_TYPES = {
+    CLOUDNATIVE_PG: "cloudnative-pg",
+    MARIADB_OPERATOR: "mariadb-operator",
+    NEO4J: "neo4j",
+    MINIO: "minio",
+};
+//# sourceMappingURL=interfaces.js.map

package/dist/cjs/operator/interfaces.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"interfaces.js","sourceRoot":"","sources":["../../../src/operator/interfaces.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;AAcH,2DAA2D;AAC9C,QAAA,cAAc,GAAG;IAC5B,cAAc,EAAE,gBAAyB;IACzC,gBAAgB,EAAE,kBAA2B;IAC7C,KAAK,EAAE,OAAgB;IACvB,KAAK,EAAE,OAAgB;CACe,CAAC"}

package/dist/cjs/operator/mariadb.d.ts

@@ -0,0 +1,22 @@
+/**
+ * MariaDB Operator backend — provisions MariaDB instances via CRDs.
+ *
+ * Creates a MariaDB CRD and optional backup CRDs. Returns IClusterInstance
+ * with createDatabase() for provisioning individual databases with connection
+ * secrets replicated to target namespaces.
+ *
+ * @module operator/mariadb
+ */
+import * as k8s from "@pulumi/kubernetes";
+import { type StorageTierMap } from "../types/storage-tiers";
+import type { IBackupDefaults, IOperatorClusterConfig, IClusterInstance } from "./interfaces";
+/**
+ * Create a MariaDB instance via the MariaDB Operator.
+ *
+ * When `config.environments` is set, creates separate instances per environment
+ * with `{name}-{env}` naming and returns a Record of IClusterInstance.
+ *
+ * @returns IClusterInstance or Record<string, IClusterInstance> when environments is set
+ */
+export declare function createMariadbDatabase(name: string, config: IOperatorClusterConfig | undefined, backupDefaults: IBackupDefaults | undefined, provider: k8s.Provider, operatorRelease: k8s.helm.v3.Release, storageTiers?: StorageTierMap): IClusterInstance | Record<string, IClusterInstance>;
+//# sourceMappingURL=mariadb.d.ts.map

package/dist/cjs/operator/mariadb.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mariadb.d.ts","sourceRoot":"","sources":["../../../src/operator/mariadb.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,GAAG,MAAM,oBAAoB,CAAC;AAG1C,OAAO,EAAsB,KAAK,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACjF,OAAO,KAAK,EACV,eAAe,EACf,sBAAsB,EACtB,gBAAgB,EAGjB,MAAM,cAAc,CAAC;AAgatB;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,sBAAsB,GAAG,SAAS,EAC1C,cAAc,EAAE,eAAe,GAAG,SAAS,EAC3C,QAAQ,EAAE,GAAG,CAAC,QAAQ,EACtB,eAAe,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EACpC,YAAY,CAAC,EAAE,cAAc,GAC5B,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAyCrD"}

package/dist/cjs/operator/mariadb.js

@@ -0,0 +1,389 @@
+"use strict";
+/**
+ * MariaDB Operator backend — provisions MariaDB instances via CRDs.
+ *
+ * Creates a MariaDB CRD and optional backup CRDs. Returns IClusterInstance
+ * with createDatabase() for provisioning individual databases with connection
+ * secrets replicated to target namespaces.
+ *
+ * @module operator/mariadb
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createMariadbDatabase = createMariadbDatabase;
+const crypto = __importStar(require("node:crypto"));
+const k8s = __importStar(require("@pulumi/kubernetes"));
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const ensure_namespace_1 = require("../utils/ensure-namespace");
+const storage_tiers_1 = require("../types/storage-tiers");
+const dashboards_1 = require("../observability/dashboards");
+const alerts_1 = require("../observability/alerts");
+const nimbus_1 = require("../nimbus");
+const DATA_NAMESPACE = "data";
+const DEFAULT_MARIADB_VERSION = "11.7";
+const DEFAULT_REPLICAS = 1;
+const DEFAULT_STORAGE_GB = 10;
+/**
+ * Create a single database instance within a MariaDB cluster using
+ * operator CRDs (Database, User, Grant) for proper lifecycle management.
+ */
+function createSingleMariadbDatabaseInstance(clusterName, dbName, dbConfig, endpoint, port, mariadb, provider) {
+    // MariaDB operator uses the User CRD name as the MySQL username
+    const username = `${clusterName}-${dbName}`;
+    const userSecretName = `${clusterName}-${dbName}-user`;
+    // 1. Database CRD — creates the database on the MariaDB instance
+    const database = new k8s.apiextensions.CustomResource(`${clusterName}-${dbName}-database`, {
+        apiVersion: "k8s.mariadb.com/v1alpha1",
+        kind: "Database",
+        metadata: {
+            name: `${clusterName}-${dbName}`,
+            namespace: DATA_NAMESPACE,
+            labels: {
+                "app.kubernetes.io/managed-by": "nimbus",
+                "nimbus/cluster": clusterName,
+                "nimbus/database": dbName,
+            },
+        },
+        spec: {
+            mariaDbRef: { name: clusterName },
+            characterSet: "utf8mb4",
+            collate: "utf8mb4_unicode_ci",
+        },
+    }, { provider, dependsOn: [mariadb] });
+    // 2. Generate a password and store it in a Secret for the User CRD to reference
+    const generatedPassword = pulumi.secret(crypto.randomBytes(24).toString("base64url"));
+    const passwordSecret = new k8s.core.v1.Secret(`${clusterName}-${dbName}-password-secret`, {
+        metadata: {
+            name: userSecretName,
+            namespace: DATA_NAMESPACE,
+            labels: {
+                "app.kubernetes.io/managed-by": "nimbus",
+                "nimbus/cluster": clusterName,
+                "nimbus/database": dbName,
+            },
+        },
+        stringData: {
+            password: generatedPassword,
+        },
+    }, { provider, dependsOn: [mariadb], ignoreChanges: ["data", "stringData"] });
+    // User CRD — creates a user referencing the password Secret
+    const user = new k8s.apiextensions.CustomResource(`${clusterName}-${dbName}-user`, {
+        apiVersion: "k8s.mariadb.com/v1alpha1",
+        kind: "User",
+        metadata: {
+            name: `${clusterName}-${dbName}`,
+            namespace: DATA_NAMESPACE,
+            labels: {
+                "app.kubernetes.io/managed-by": "nimbus",
+                "nimbus/cluster": clusterName,
+                "nimbus/database": dbName,
+            },
+        },
+        spec: {
+            mariaDbRef: { name: clusterName },
+            passwordSecretKeyRef: {
+                name: userSecretName,
+                key: "password",
+            },
+            maxUserConnections: 100,
+        },
+    }, { provider, dependsOn: [mariadb, passwordSecret] });
+    // 3. Grant CRD — grants ALL PRIVILEGES on the database to the user
+    const grant = new k8s.apiextensions.CustomResource(`${clusterName}-${dbName}-grant`, {
+        apiVersion: "k8s.mariadb.com/v1alpha1",
+        kind: "Grant",
+        metadata: {
+            name: `${clusterName}-${dbName}`,
+            namespace: DATA_NAMESPACE,
+            labels: {
+                "app.kubernetes.io/managed-by": "nimbus",
+                "nimbus/cluster": clusterName,
+                "nimbus/database": dbName,
+            },
+        },
+        spec: {
+            mariaDbRef: { name: clusterName },
+            privileges: ["ALL PRIVILEGES"],
+            database: `${clusterName}-${dbName}`,
+            table: "*",
+            username: `${clusterName}-${dbName}`,
+            grantOption: true,
+        },
+    }, { provider, dependsOn: [database, user] });
+    // 4. Read password back from the stored secret (stable across deploys)
+    const storedSecret = k8s.core.v1.Secret.get(`${clusterName}-${dbName}-password-read`, pulumi.interpolate `${DATA_NAMESPACE}/${userSecretName}`, { provider, dependsOn: [passwordSecret] });
+    const stablePassword = storedSecret.data.apply((d) => Buffer.from(d?.["password"] ?? "", "base64").toString());
+    // Replicate connection secrets with per-user credentials to target namespaces
+    const secrets = {};
+    const dbHost = endpoint;
+    const dbPort = port;
+    for (const targetNs of dbConfig.namespaces) {
+        const nsResource = (0, ensure_namespace_1.ensureNamespace)(targetNs, provider);
+        const secretName = `${clusterName}-${dbName}-mariadb`;
+        new k8s.core.v1.Secret(`${clusterName}-${dbName}-secret-${targetNs}`, {
+            metadata: {
+                name: secretName,
+                namespace: targetNs,
+                labels: {
+                    "app.kubernetes.io/managed-by": "nimbus",
+                    "nimbus/cluster": clusterName,
+                    "nimbus/database": dbName,
+                },
+            },
+            stringData: {
+                host: dbHost,
+                port: dbPort.apply((p) => String(p)),
+                username,
+                password: stablePassword,
+                database: `${clusterName}-${dbName}`,
+                uri: pulumi
+                    .all([dbHost, dbPort, stablePassword])
+                    .apply(([h, p, pw]) => `mysql://${username}:${pw}@${h}:${p}/${clusterName}-${dbName}`),
+            },
+        }, { provider, dependsOn: [grant, nsResource] });
+        secrets[targetNs] = pulumi.output(secretName);
+    }
+    return {
+        name: dbName,
+        clusterName,
+        host: endpoint,
+        port,
+        database: pulumi.output(dbName),
+        secrets,
+        nativeResource: database,
+    };
+}
+/**
+ * Create a single MariaDB instance via the MariaDB Operator (no environment awareness).
+ */
+function createSingleMariadbCluster(name, config, backupDefaults, provider, operatorRelease, storageTiers) {
+    const namespace = (0, ensure_namespace_1.ensureNamespace)(DATA_NAMESPACE, provider);
+    const replicas = config?.replicas ?? DEFAULT_REPLICAS;
+    const storageGb = config?.storageGb ?? DEFAULT_STORAGE_GB;
+    const dbVersion = config?.version ?? DEFAULT_MARIADB_VERSION;
+    const image = `mariadb:${dbVersion}`;
+    // Merge backup: per-cluster config overrides operator defaults
+    const backup = config?.backup?.target !== undefined
+        ? { ...backupDefaults, ...config.backup }
+        : backupDefaults;
+    const dependsOn = [operatorRelease, namespace];
+    // MariaDB CRD spec
+    const mariadbSpec = {
+        image,
+        rootPasswordSecretKeyRef: {
+            name: `${name}-root`,
+            key: "password",
+            generate: true,
+        },
+        port: 3306,
+        storage: {
+            size: `${storageGb}Gi`,
+            // Note: MariaDB operator's admission webhook marks storageClassName as
+            // immutable after creation. Only set it if explicitly requested via storageTier.
+            ...(config?.storageTier && (0, storage_tiers_1.resolveStorageTier)(config.storageTier, storageTiers)
+                ? { storageClassName: (0, storage_tiers_1.resolveStorageTier)(config.storageTier, storageTiers) }
+                : {}),
+        },
+    };
+    if (config?.resources) {
+        mariadbSpec["resources"] = config.resources;
+    }
+    if (config?.parameters) {
+        mariadbSpec["myCnf"] = Object.entries(config.parameters)
+            .map(([k, v]) => `${k}=${v}`)
+            .join("\n");
+    }
+    // Metrics exporter sidecar
+    mariadbSpec["metrics"] = {
+        enabled: true,
+        exporter: { image: "prom/mysqld-exporter:v0.16.0", port: 9104 },
+    };
+    // Replication (replicas > 1)
+    if (replicas > 1) {
+        mariadbSpec["replicas"] = replicas;
+        mariadbSpec["replication"] = {
+            enabled: true,
+            primary: { automaticFailover: true },
+        };
+    }
+    // S3 backup credentials
+    if (backup) {
+        const backupSecret = new k8s.core.v1.Secret(`${name}-mariadb-backup-secret`, {
+            metadata: {
+                name: `${name}-backup-s3-credentials`,
+                namespace: DATA_NAMESPACE,
+            },
+            stringData: {
+                "access-key-id": backup.target.credentials.accessKeyId,
+                "secret-access-key": backup.target.credentials.secretAccessKey,
+            },
+        }, { provider, dependsOn: [namespace] });
+        dependsOn.push(backupSecret);
+    }
+    // Create the MariaDB CRD
+    const mariadb = new k8s.apiextensions.CustomResource(`${name}-mariadb`, {
+        apiVersion: "k8s.mariadb.com/v1alpha1",
+        kind: "MariaDB",
+        metadata: {
+            name,
+            namespace: DATA_NAMESPACE,
+            labels: config?.tags ?? {},
+        },
+        spec: mariadbSpec,
+    }, { provider, dependsOn });
+    // Per-cluster Grafana dashboard
+    (0, dashboards_1.createMariadbClusterDashboard)(name, "observability", provider, [mariadb]);
+    // Per-cluster alert rules
+    (0, alerts_1.createPrometheusRule)(`${name}-mariadb-alerts`, "observability", [
+        {
+            name: `nimbus.mariadb.${name}`,
+            rules: [
+                {
+                    alert: "MariadbDown",
+                    expr: `mysql_up{job=~".*mariadb.*",instance=~"${name}.*"} == 0`,
+                    for: "2m",
+                    labels: { severity: "critical" },
+                    annotations: { summary: `MariaDB instance ${name} is DOWN` },
+                },
+            ],
+        },
+    ], provider, [mariadb]);
+    // Scheduled backup via S3
+    if (backup) {
+        new k8s.apiextensions.CustomResource(`${name}-mariadb-backup`, {
+            apiVersion: "k8s.mariadb.com/v1alpha1",
+            kind: "Backup",
+            metadata: {
+                name: `${name}-scheduled-backup`,
+                namespace: DATA_NAMESPACE,
+            },
+            spec: {
+                mariaDbRef: { name },
+                schedule: {
+                    cron: backup.schedule ?? "0 3 * * *",
+                    suspend: false,
+                },
+                maxRetention: `${(backup.retentionDays ?? 7) * 24}h`,
+                storage: {
+                    s3: {
+                        bucket: backup.target.bucket,
+                        prefix: `mariadb/${name}`,
+                        endpoint: `s3.${backup.target.region}.amazonaws.com`,
+                        accessKeyIdSecretKeyRef: {
+                            name: `${name}-backup-s3-credentials`,
+                            key: "access-key-id",
+                        },
+                        secretAccessKeySecretKeyRef: {
+                            name: `${name}-backup-s3-credentials`,
+                            key: "secret-access-key",
+                        },
+                        region: backup.target.region,
+                    },
+                },
+            },
+        }, { provider, dependsOn: [mariadb] });
+    }
+    const endpoint = pulumi.output(`${name}.${DATA_NAMESPACE}.svc.cluster.local`);
+    const port = pulumi.output(3306);
+    nimbus_1.nimbus.register(name, {
+        name,
+        type: "database",
+        namespace: DATA_NAMESPACE,
+        endpoint,
+        port: 3306,
+        secretRef: {
+            name: `${name}-root`,
+            keys: { password: "password" },
+        },
+        nativeResource: mariadb,
+    });
+    return {
+        name,
+        engine: "mariadb",
+        endpoint,
+        port,
+        nativeResource: mariadb,
+        createDatabase(dbName, dbConfig) {
+            let result;
+            if (dbConfig.environments) {
+                const envResult = {};
+                for (const [env, envOverrides] of Object.entries(dbConfig.environments)) {
+                    const { environments: _, ...baseConfig } = dbConfig;
+                    const mergedConfig = {
+                        ...baseConfig,
+                        ...envOverrides,
+                    };
+                    envResult[env] = createSingleMariadbDatabaseInstance(`${name}`, `${dbName}-${env}`, mergedConfig, endpoint, port, mariadb, provider);
+                }
+                result = envResult;
+            }
+            else {
+                const { environments: _, ...cleanConfig } = dbConfig;
+                result = createSingleMariadbDatabaseInstance(name, dbName, cleanConfig, endpoint, port, mariadb, provider);
+            }
+            // Runtime: environments → Record, otherwise → IDatabaseInstance.
+            // Overload signatures on IClusterInstance narrow the type for callers.
+            return result;
+        },
+    };
+}
+/**
+ * Create a MariaDB instance via the MariaDB Operator.
+ *
+ * When `config.environments` is set, creates separate instances per environment
+ * with `{name}-{env}` naming and returns a Record of IClusterInstance.
+ *
+ * @returns IClusterInstance or Record<string, IClusterInstance> when environments is set
+ */
+function createMariadbDatabase(name, config, backupDefaults, provider, operatorRelease, storageTiers) {
+    if (config?.environments) {
+        const result = {};
+        for (const [env, envOverrides] of Object.entries(config.environments)) {
+            const { environments: _, ...baseConfig } = config;
+            const mergedConfig = {
+                ...baseConfig,
+                ...envOverrides,
+            };
+            result[env] = createSingleMariadbCluster(`${name}-${env}`, mergedConfig, backupDefaults, provider, operatorRelease, storageTiers);
+        }
+        return result;
+    }
+    if (config) {
+        const { environments: _, ...cleanConfig } = config;
+        return createSingleMariadbCluster(name, cleanConfig, backupDefaults, provider, operatorRelease, storageTiers);
+    }
+    return createSingleMariadbCluster(name, config, backupDefaults, provider, operatorRelease, storageTiers);
+}
+//# sourceMappingURL=mariadb.js.map

package/dist/cjs/operator/mariadb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mariadb.js","sourceRoot":"","sources":["../../../src/operator/mariadb.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqbH,sDAgDC;AAneD,oDAAsC;AACtC,wDAA0C;AAC1C,uDAAyC;AACzC,gEAA4D;AAC5D,0DAAiF;AAQjF,4DAA4E;AAC5E,oDAA+D;AAC/D,sCAAmC;AAEnC,MAAM,cAAc,GAAG,MAAM,CAAC;AAC9B,MAAM,uBAAuB,GAAG,MAAM,CAAC;AACvC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAC3B,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAE9B;;;GAGG;AACH,SAAS,mCAAmC,CAC1C,WAAmB,EACnB,MAAc,EACd,QAAuD,EACvD,QAA+B,EAC/B,IAA2B,EAC3B,OAAyC,EACzC,QAAsB;IAEtB,gEAAgE;IAChE,MAAM,QAAQ,GAAG,GAAG,WAAW,IAAI,MAAM,EAAE,CAAC;IAC5C,MAAM,cAAc,GAAG,GAAG,WAAW,IAAI,MAAM,OAAO,CAAC;IAEvD,iEAAiE;IACjE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,cAAc,CACnD,GAAG,WAAW,IAAI,MAAM,WAAW,EACnC;QACE,UAAU,EAAE,0BAA0B;QACtC,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE;YACR,IAAI,EAAE,GAAG,WAAW,IAAI,MAAM,EAAE;YAChC,SAAS,EAAE,cAAc;YACzB,MAAM,EAAE;gBACN,8BAA8B,EAAE,QAAQ;gBACxC,gBAAgB,EAAE,WAAW;gBAC7B,iBAAiB,EAAE,MAAM;aAC1B;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE;YACjC,YAAY,EAAE,SAAS;YACvB,OAAO,EAAE,oBAAoB;SAC9B;KACF,EACD,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,OAAO,CAAC,EAAE,CACnC,CAAC;IAEF,gFAAgF;IAChF,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;IACtF,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAC3C,GAAG,WAAW,IAAI,MAAM,kBAAkB,EAC1C;QACE,QAAQ,EAAE;YACR,IAAI,EAAE,cAAc;YACpB,SAAS,EAAE,cAAc;YACzB,MAAM,EAAE;gBACN,8BAA8B,EAAE,QAAQ;gBACxC,gBAAgB,EAAE,WAAW;gBAC7B,iBAAiB,EAAE,MAAM;aAC1B;SACF;QACD,UAAU,EAAE;YACV,QAAQ,EAAE,iBAAiB;SAC5B;KACF,EACD,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,CAC1E,CAAC;IAEF,4DAA4D;IAC5D,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,cAAc,CAC/C,GAAG,WAAW,IAAI,MAAM,OAAO,EAC/B;QACE,UAAU,EAAE,0BAA0B;QACtC,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE;YACR,IAAI,EAAE,GAAG,WAAW,IAAI,MAAM,EAAE;YAChC,SAAS,EAAE,cAAc;YACzB,MAAM,EAAE;gBACN,8BAA8B,EAAE,QAAQ;gBACxC,gBAAgB,EAAE,WAAW;gBAC7B,iBAAiB,EAAE,MAAM;aAC1B;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE;YACjC,oBAAoB,EAAE;gBACpB,IAAI,EAAE,cAAc;gBACpB,GAAG,EAAE,UAAU;aAChB;YACD,kBAAkB,EAAE,GAAG;SACxB;KACF,EACD,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,CACnD,CAAC;IAEF,mEAAmE;IACnE,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,cAAc,CAChD,GAAG,WAAW,IAAI,MAAM,QAAQ,EAChC;QACE,UAAU,EAAE,0BAA0B;QACtC,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE;YACR,IAAI,EAAE,GAAG,WAAW,IAAI,MAAM,EAAE;YAChC,SAAS,EAAE,cAAc;YACzB,MAAM,EAAE;gBACN,8BAA8B,EAAE,QAAQ;gBACxC,gBAAgB,EAAE,WAAW;gBAC7B,iBAAiB,EAAE,MAAM;aAC1B;SACF;QACD,IAAI,EAAE;YACJ,UAAU,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE;YACjC,UAAU,EAAE,CAAC,gBAAgB,CAAC;YAC9B,QAAQ,EAAE,GAAG,WAAW,IAAI,MAAM,EAAE;YACpC,KAAK,EAAE,GAAG;YACV,QAAQ,EAAE,GAAG,WAAW,IAAI,MAAM,EAAE;YACpC,WAAW,EAAE,IAAI;SAClB;KACF,EACD,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAC1C,CAAC;IAEF,uEAAuE;IACvE,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CACzC,GAAG,WAAW,IAAI,MAAM,gBAAgB,EACxC,MAAM,CAAC,WAAW,CAAA,GAAG,cAAc,IAAI,cAAc,EAAE,EACvD,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,cAAc,CAAC,EAAE,CAC1C,CAAC;IACF,MAAM,cAAc,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CACnD,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CACxD,CAAC;IAEF,8EAA8E;IAC9E,MAAM,OAAO,GAA0C,EAAE,CAAC;IAC1D,MAAM,MAAM,GAAG,QAAQ,CAAC;IACxB,MAAM,MAAM,GAAG,IAAI,CAAC;IAEpB,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;QAC3C,MAAM,UAAU,GAAG,IAAA,kCAAe,EAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACvD,MAAM,UAAU,GAAG,GAAG,WAAW,IAAI,MAAM,UAAU,CAAC;QAEtD,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CACpB,GAAG,WAAW,IAAI,MAAM,WAAW,QAAQ,EAAE,EAC7C;YACE,QAAQ,EAAE;gBACR,IAAI,EAAE,UAAU;gBAChB,SAAS,EAAE,QAAQ;gBACnB,MAAM,EAAE;oBACN,8BAA8B,EAAE,QAAQ;oBACxC,gBAAgB,EAAE,WAAW;oBAC7B,iBAAiB,EAAE,MAAM;iBAC1B;aACF;YACD,UAAU,EAAE;gBACV,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBACpC,QAAQ;gBACR,QAAQ,EAAE,cAAc;gBACxB,QAAQ,EAAE,GAAG,WAAW,IAAI,MAAM,EAAE;gBACpC,GAAG,EAAE,MAAM;qBACR,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;qBACrC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,WAAW,QAAQ,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,WAAW,IAAI,MAAM,EAAE,CAAC;aACzF;SACF,EACD,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,CAC7C,CAAC;QAEF,OAAO,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAChD,CAAC;IAED,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,WAAW;QACX,IAAI,EAAE,QAAQ;QACd,IAAI;QACJ,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QAC/B,OAAO;QACP,cAAc,EAAE,QAAQ;KACzB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,0BAA0B,CACjC,IAAY,EACZ,MAAgE,EAChE,cAA2C,EAC3C,QAAsB,EACtB,eAAoC,EACpC,YAA6B;IAE7B,MAAM,SAAS,GAAG,IAAA,kCAAe,EAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,MAAM,EAAE,QAAQ,IAAI,gBAAgB,CAAC;IACtD,MAAM,SAAS,GAAG,MAAM,EAAE,SAAS,IAAI,kBAAkB,CAAC;IAC1D,MAAM,SAAS,GAAG,MAAM,EAAE,OAAO,IAAI,uBAAuB,CAAC;IAC7D,MAAM,KAAK,GAAG,WAAW,SAAS,EAAE,CAAC;IAErC,+DAA+D;IAC/D,MAAM,MAAM,GACV,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,SAAS;QAClC,CAAC,CAAC,EAAE,GAAG,cAAc,EAAE,GAAI,MAAM,CAAC,MAA0B,EAAE;QAC9D,CAAC,CAAC,cAAc,CAAC;IAErB,MAAM,SAAS,GAAsB,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;IAElE,mBAAmB;IACnB,MAAM,WAAW,GAA4B;QAC3C,KAAK;QACL,wBAAwB,EAAE;YACxB,IAAI,EAAE,GAAG,IAAI,OAAO;YACpB,GAAG,EAAE,UAAU;YACf,QAAQ,EAAE,IAAI;SACf;QACD,IAAI,EAAE,IAAI;QACV,OAAO,EAAE;YACP,IAAI,EAAE,GAAG,SAAS,IAAI;YACtB,uEAAuE;YACvE,iFAAiF;YACjF,GAAG,CAAC,MAAM,EAAE,WAAW,IAAI,IAAA,kCAAkB,EAAC,MAAM,CAAC,WAAW,EAAE,YAAY,CAAC;gBAC7E,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAA,kCAAkB,EAAC,MAAM,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE;gBAC5E,CAAC,CAAC,EAAE,CAAC;SACR;KACF,CAAC;IAEF,IAAI,MAAM,EAAE,SAAS,EAAE,CAAC;QACtB,WAAW,CAAC,WAAW,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC;IAC9C,CAAC;IAED,IAAI,MAAM,EAAE,UAAU,EAAE,CAAC;QACvB,WAAW,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC;aACrD,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;aAC5B,IAAI,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC;IAED,2BAA2B;IAC3B,WAAW,CAAC,SAAS,CAAC,GAAG;QACvB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,EAAE,KAAK,EAAE,8BAA8B,EAAE,IAAI,EAAE,IAAI,EAAE;KAChE,CAAC;IAEF,6BAA6B;IAC7B,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;QACjB,WAAW,CAAC,UAAU,CAAC,GAAG,QAAQ,CAAC;QACnC,WAAW,CAAC,aAAa,CAAC,GAAG;YAC3B,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE;SACrC,CAAC;IACJ,CAAC;IAED,wBAAwB;IACxB,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CACzC,GAAG,IAAI,wBAAwB,EAC/B;YACE,QAAQ,EAAE;gBACR,IAAI,EAAE,GAAG,IAAI,wBAAwB;gBACrC,SAAS,EAAE,cAAc;aAC1B;YACD,UAAU,EAAE;gBACV,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,WAAW;gBACtD,mBAAmB,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,eAAe;aAC/D;SACF,EACD,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,SAAS,CAAC,EAAE,CACrC,CAAC;QACF,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC/B,CAAC;IAED,yBAAyB;IACzB,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,cAAc,CAClD,GAAG,IAAI,UAAU,EACjB;QACE,UAAU,EAAE,0BAA0B;QACtC,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE;YACR,IAAI;YACJ,SAAS,EAAE,cAAc;YACzB,MAAM,EAAE,MAAM,EAAE,IAAI,IAAI,EAAE;SAC3B;QACD,IAAI,EAAE,WAAW;KAClB,EACD,EAAE,QAAQ,EAAE,SAAS,EAAE,CACxB,CAAC;IAEF,gCAAgC;IAChC,IAAA,0CAA6B,EAAC,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAE1E,0BAA0B;IAC1B,IAAA,6BAAoB,EAClB,GAAG,IAAI,iBAAiB,EACxB,eAAe,EACf;QACE;YACE,IAAI,EAAE,kBAAkB,IAAI,EAAE;YAC9B,KAAK,EAAE;gBACL;oBACE,KAAK,EAAE,aAAa;oBACpB,IAAI,EAAE,0CAA0C,IAAI,WAAW;oBAC/D,GAAG,EAAE,IAAI;oBACT,MAAM,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE;oBAChC,WAAW,EAAE,EAAE,OAAO,EAAE,oBAAoB,IAAI,UAAU,EAAE;iBAC7D;aACF;SACF;KACF,EACD,QAAQ,EACR,CAAC,OAAO,CAAC,CACV,CAAC;IAEF,0BAA0B;IAC1B,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,GAAG,CAAC,aAAa,CAAC,cAAc,CAClC,GAAG,IAAI,iBAAiB,EACxB;YACE,UAAU,EAAE,0BAA0B;YACtC,IAAI,EAAE,QAAQ;YACd,QAAQ,EAAE;gBACR,IAAI,EAAE,GAAG,IAAI,mBAAmB;gBAChC,SAAS,EAAE,cAAc;aAC1B;YACD,IAAI,EAAE;gBACJ,UAAU,EAAE,EAAE,IAAI,EAAE;gBACpB,QAAQ,EAAE;oBACR,IAAI,EAAE,MAAM,CAAC,QAAQ,IAAI,WAAW;oBACpC,OAAO,EAAE,KAAK;iBACf;gBACD,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG;gBACpD,OAAO,EAAE;oBACP,EAAE,EAAE;wBACF,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM;wBAC5B,MAAM,EAAE,WAAW,IAAI,EAAE;wBACzB,QAAQ,EAAE,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,gBAAgB;wBACpD,uBAAuB,EAAE;4BACvB,IAAI,EAAE,GAAG,IAAI,wBAAwB;4BACrC,GAAG,EAAE,eAAe;yBACrB;wBACD,2BAA2B,EAAE;4BAC3B,IAAI,EAAE,GAAG,IAAI,wBAAwB;4BACrC,GAAG,EAAE,mBAAmB;yBACzB;wBACD,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM;qBAC7B;iBACF;aACF;SACF,EACD,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,OAAO,CAAC,EAAE,CACnC,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,IAAI,cAAc,oBAAoB,CAAC,CAAC;IAC9E,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAEjC,eAAM,CAAC,QAAQ,CAAC,IAAI,EAAE;QACpB,IAAI;QACJ,IAAI,EAAE,UAAU;QAChB,SAAS,EAAE,cAAc;QACzB,QAAQ;QACR,IAAI,EAAE,IAAI;QACV,SAAS,EAAE;YACT,IAAI,EAAE,GAAG,IAAI,OAAO;YACpB,IAAI,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE;SAC/B;QACD,cAAc,EAAE,OAAO;KACxB,CAAC,CAAC;IAEH,OAAO;QACL,IAAI;QACJ,MAAM,EAAE,SAAS;QACjB,QAAQ;QACR,IAAI;QACJ,cAAc,EAAE,OAAO;QACvB,cAAc,CAAC,MAAc,EAAE,QAAiC;YAC9D,IAAI,MAA6D,CAAC;YAClE,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;gBAC1B,MAAM,SAAS,GAAsC,EAAE,CAAC;gBACxD,KAAK,MAAM,CAAC,GAAG,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;oBACxE,MAAM,EAAE,YAAY,EAAE,CAAC,EAAE,GAAG,UAAU,EAAE,GAAG,QAAQ,CAAC;oBACpD,MAAM,YAAY,GAAkD;wBAClE,GAAG,UAAU;wBACb,GAAG,YAAY;qBAChB,CAAC;oBACF,SAAS,CAAC,GAAG,CAAC,GAAG,mCAAmC,CAClD,GAAG,IAAI,EAAE,EACT,GAAG,MAAM,IAAI,GAAG,EAAE,EAClB,YAAY,EACZ,QAAQ,EACR,IAAI,EACJ,OAAO,EACP,QAAQ,CACT,CAAC;gBACJ,CAAC;gBACD,MAAM,GAAG,SAAS,CAAC;YACrB,CAAC;iBAAM,CAAC;gBACN,MAAM,EAAE,YAAY,EAAE,CAAC,EAAE,GAAG,WAAW,EAAE,GAAG,QAAQ,CAAC;gBACrD,MAAM,GAAG,mCAAmC,CAC1C,IAAI,EACJ,MAAM,EACN,WAAW,EACX,QAAQ,EACR,IAAI,EACJ,OAAO,EACP,QAAQ,CACT,CAAC;YACJ,CAAC;YACD,iEAAiE;YACjE,uEAAuE;YACvE,OAAO,MAA+D,CAAC;QACzE,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,qBAAqB,CACnC,IAAY,EACZ,MAA0C,EAC1C,cAA2C,EAC3C,QAAsB,EACtB,eAAoC,EACpC,YAA6B;IAE7B,IAAI,MAAM,EAAE,YAAY,EAAE,CAAC;QACzB,MAAM,MAAM,GAAqC,EAAE,CAAC;QACpD,KAAK,MAAM,CAAC,GAAG,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;YACtE,MAAM,EAAE,YAAY,EAAE,CAAC,EAAE,GAAG,UAAU,EAAE,GAAG,MAAM,CAAC;YAClD,MAAM,YAAY,GAAiD;gBACjE,GAAG,UAAU;gBACb,GAAG,YAAY;aAChB,CAAC;YACF,MAAM,CAAC,GAAG,CAAC,GAAG,0BAA0B,CACtC,GAAG,IAAI,IAAI,GAAG,EAAE,EAChB,YAAY,EACZ,cAAc,EACd,QAAQ,EACR,eAAe,EACf,YAAY,CACb,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,EAAE,YAAY,EAAE,CAAC,EAAE,GAAG,WAAW,EAAE,GAAG,MAAM,CAAC;QACnD,OAAO,0BAA0B,CAC/B,IAAI,EACJ,WAAW,EACX,cAAc,EACd,QAAQ,EACR,eAAe,EACf,YAAY,CACb,CAAC;IACJ,CAAC;IAED,OAAO,0BAA0B,CAC/B,IAAI,EACJ,MAAM,EACN,cAAc,EACd,QAAQ,EACR,eAAe,EACf,YAAY,CACb,CAAC;AACJ,CAAC"}