@reyemtech/nimbus 1.3.0 → 2.0.1

package/dist/esm/nimbus/index.js

@@ -0,0 +1,44 @@
+"use strict";
+/**
+ * Nimbus global singleton — central config + resource registry.
+ *
+ * @module nimbus
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.nimbus = void 0;
+const registry_1 = require("./registry");
+class Nimbus {
+    registry = new registry_1.NimbusRegistry();
+    config = {};
+    /** Configure nimbus-wide settings (notifications, etc.). Call once at project top. */
+    configure(config) {
+        this.config = { ...this.config, ...config };
+    }
+    /** Get notification config (read by Alertmanager, ArgoCD Notifications, etc.). */
+    get notifications() {
+        return this.config.notifications;
+    }
+    /** Register a resource for cross-module discovery. */
+    register(name, resource) {
+        this.registry.register(name, resource);
+    }
+    /** Look up a registered resource by name. */
+    lookup(name) {
+        return this.registry.lookup(name);
+    }
+    /** All registered caches. */
+    caches() {
+        return this.registry.caches();
+    }
+    /** All registered databases. */
+    databases() {
+        return this.registry.databases();
+    }
+    /** All registered resources. */
+    all() {
+        return this.registry.all();
+    }
+}
+/** Global nimbus singleton. */
+exports.nimbus = new Nimbus();
+//# sourceMappingURL=index.js.map

package/dist/esm/nimbus/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/nimbus/index.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAQH,yCAA4C;AAY5C,MAAM,MAAM;IACO,QAAQ,GAAG,IAAI,yBAAc,EAAE,CAAC;IACzC,MAAM,GAAkB,EAAE,CAAC;IAEnC,sFAAsF;IACtF,SAAS,CAAC,MAAqB;QAC7B,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;IAC9C,CAAC;IAED,kFAAkF;IAClF,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;IACnC,CAAC;IAED,sDAAsD;IACtD,QAAQ,CAAC,IAAY,EAAE,QAAyB;QAC9C,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACzC,CAAC;IAED,6CAA6C;IAC7C,MAAM,CAAC,IAAY;QACjB,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,6BAA6B;IAC7B,MAAM;QACJ,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;IAChC,CAAC;IAED,gCAAgC;IAChC,SAAS;QACP,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;IACnC,CAAC;IAED,gCAAgC;IAChC,GAAG;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;IAC7B,CAAC;CACF;AAED,+BAA+B;AAClB,QAAA,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC"}

package/dist/esm/nimbus/interfaces.d.ts

@@ -0,0 +1,64 @@
+/**
+ * Nimbus global singleton interfaces.
+ *
+ * Central config, resource registry, and notifications.
+ *
+ * @module nimbus/interfaces
+ */
+import type * as pulumi from "@pulumi/pulumi";
+import type { IEmailTransport } from "../email/interfaces";
+/** Email notification config — reused by Alertmanager, ArgoCD Notifications, etc. */
+export interface INotificationEmailConfig {
+    readonly transport: IEmailTransport;
+    readonly to: string | string[];
+}
+/** Slack notification config (future). */
+export interface INotificationSlackConfig {
+    readonly webhookUrl: pulumi.Input<string>;
+    readonly channel: string;
+    readonly username?: string;
+}
+/** Nimbus-wide notification configuration. */
+export interface INotificationsConfig {
+    readonly email?: INotificationEmailConfig;
+    readonly slack?: INotificationSlackConfig;
+}
+/** Top-level nimbus configuration. */
+export interface INimbusConfig {
+    readonly notifications?: INotificationsConfig;
+}
+/** Resource types that can be registered. */
+export type NimbusResourceType = "cache" | "database" | "object-storage" | "operator" | "platform" | "observability" | "access";
+/** Base registered resource. */
+export interface INimbusResource {
+    readonly name: string;
+    readonly type: NimbusResourceType;
+    readonly namespace: string;
+    readonly endpoint: string | pulumi.Output<string>;
+    readonly port?: number;
+    readonly secretRef?: {
+        readonly name: string | pulumi.Output<string>;
+        readonly keys: Record<string, string>;
+    };
+    readonly nativeResource: pulumi.Resource;
+}
+/** Lookup result with helpers. */
+export interface INimbusResourceRef {
+    readonly name: string;
+    readonly type: NimbusResourceType;
+    readonly namespace: string;
+    readonly endpoint: string | pulumi.Output<string>;
+    readonly port?: number;
+    /** Returns { existingSecret: name, existingSecretPasswordKey: defaultKey }. */
+    secret(): Record<string, string | pulumi.Output<string>>;
+    /** Returns { secretKeyRef: { name, key } }. */
+    secretRef(key?: string): {
+        secretKeyRef: {
+            name: string | pulumi.Output<string>;
+            key: string;
+        };
+    };
+    /** Returns a connection string (e.g., redis://..., postgresql://...). */
+    connectionString(): pulumi.Output<string>;
+}
+//# sourceMappingURL=interfaces.d.ts.map

package/dist/esm/nimbus/interfaces.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"interfaces.d.ts","sourceRoot":"","sources":["../../../src/nimbus/interfaces.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAC9C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAM3D,qFAAqF;AACrF,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CAChC;AAED,0CAA0C;AAC1C,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,8CAA8C;AAC9C,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,wBAAwB,CAAC;IAC1C,QAAQ,CAAC,KAAK,CAAC,EAAE,wBAAwB,CAAC;CAC3C;AAED,sCAAsC;AACtC,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,aAAa,CAAC,EAAE,oBAAoB,CAAC;CAC/C;AAMD,6CAA6C;AAC7C,MAAM,MAAM,kBAAkB,GAC1B,OAAO,GACP,UAAU,GACV,gBAAgB,GAChB,UAAU,GACV,UAAU,GACV,eAAe,GACf,QAAQ,CAAC;AAEb,gCAAgC;AAChC,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,CAAC,EAAE;QACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KACvC,CAAC;IACF,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC;CAC1C;AAED,kCAAkC;AAClC,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,+EAA+E;IAC/E,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACzD,+CAA+C;IAC/C,SAAS,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG;QAAE,YAAY,EAAE;YAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAAC,GAAG,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;IACjG,yEAAyE;IACzE,gBAAgB,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;CAC3C"}

package/dist/esm/nimbus/interfaces.js

@@ -0,0 +1,10 @@
+"use strict";
+/**
+ * Nimbus global singleton interfaces.
+ *
+ * Central config, resource registry, and notifications.
+ *
+ * @module nimbus/interfaces
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=interfaces.js.map

package/dist/esm/nimbus/interfaces.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"interfaces.js","sourceRoot":"","sources":["../../../src/nimbus/interfaces.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG"}

package/dist/esm/nimbus/registry.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Nimbus resource registry — global Map for cross-module discovery.
+ *
+ * @module nimbus/registry
+ */
+import type { INimbusResource, INimbusResourceRef } from "./interfaces";
+/**
+ * Resource registry — simple Map with typed queries.
+ */
+export declare class NimbusRegistry {
+    private readonly resources;
+    register(name: string, resource: INimbusResource): void;
+    lookup(name: string): INimbusResourceRef;
+    caches(): ReadonlyArray<INimbusResourceRef>;
+    databases(): ReadonlyArray<INimbusResourceRef>;
+    all(): ReadonlyArray<INimbusResourceRef>;
+    private byType;
+}
+//# sourceMappingURL=registry.d.ts.map

package/dist/esm/nimbus/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../src/nimbus/registry.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,eAAe,EAAE,kBAAkB,EAAsB,MAAM,cAAc,CAAC;AAuD5F;;GAEG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAsC;IAEhE,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,GAAG,IAAI;IAOvD,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB;IAUxC,MAAM,IAAI,aAAa,CAAC,kBAAkB,CAAC;IAI3C,SAAS,IAAI,aAAa,CAAC,kBAAkB,CAAC;IAI9C,GAAG,IAAI,aAAa,CAAC,kBAAkB,CAAC;IAIxC,OAAO,CAAC,MAAM;CAGf"}

package/dist/esm/nimbus/registry.js

@@ -0,0 +1,123 @@
+"use strict";
+/**
+ * Nimbus resource registry — global Map for cross-module discovery.
+ *
+ * @module nimbus/registry
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NimbusRegistry = void 0;
+const pulumi = __importStar(require("@pulumi/pulumi"));
+/**
+ * Wrap a registered resource with helper methods.
+ */
+function wrapResource(resource) {
+    return {
+        name: resource.name,
+        type: resource.type,
+        namespace: resource.namespace,
+        endpoint: resource.endpoint,
+        port: resource.port,
+        secret() {
+            if (!resource.secretRef) {
+                throw new Error(`Resource "${resource.name}" has no secret reference`);
+            }
+            const defaultKey = Object.values(resource.secretRef.keys)[0] ?? "password";
+            return {
+                existingSecret: resource.secretRef.name,
+                existingSecretPasswordKey: defaultKey,
+            };
+        },
+        secretRef(key) {
+            if (!resource.secretRef) {
+                throw new Error(`Resource "${resource.name}" has no secret reference`);
+            }
+            const resolvedKey = key
+                ? (resource.secretRef.keys[key] ?? key)
+                : (Object.values(resource.secretRef.keys)[0] ?? "password");
+            return {
+                secretKeyRef: {
+                    name: resource.secretRef.name,
+                    key: resolvedKey,
+                },
+            };
+        },
+        connectionString() {
+            const ep = pulumi.output(resource.endpoint);
+            const port = resource.port;
+            switch (resource.type) {
+                case "cache":
+                    return ep.apply((e) => `redis://${e}${port ? `:${port}` : ""}`);
+                case "database":
+                    return ep.apply((e) => `postgresql://${e}${port ? `:${port}` : ""}`);
+                default:
+                    return ep.apply((e) => `${e}${port ? `:${port}` : ""}`);
+            }
+        },
+    };
+}
+/**
+ * Resource registry — simple Map with typed queries.
+ */
+class NimbusRegistry {
+    resources = new Map();
+    register(name, resource) {
+        if (this.resources.has(name)) {
+            throw new Error(`Resource "${name}" is already registered`);
+        }
+        this.resources.set(name, resource);
+    }
+    lookup(name) {
+        const resource = this.resources.get(name);
+        if (!resource) {
+            throw new Error(`Resource "${name}" not found. Registered: ${[...this.resources.keys()].join(", ") || "(none)"}`);
+        }
+        return wrapResource(resource);
+    }
+    caches() {
+        return this.byType("cache");
+    }
+    databases() {
+        return this.byType("database");
+    }
+    all() {
+        return [...this.resources.values()].map(wrapResource);
+    }
+    byType(type) {
+        return [...this.resources.values()].filter((r) => r.type === type).map(wrapResource);
+    }
+}
+exports.NimbusRegistry = NimbusRegistry;
+//# sourceMappingURL=registry.js.map

package/dist/esm/nimbus/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../src/nimbus/registry.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,uDAAyC;AAGzC;;GAEG;AACH,SAAS,YAAY,CAAC,QAAyB;IAC7C,OAAO;QACL,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,IAAI,EAAE,QAAQ,CAAC,IAAI;QAEnB,MAAM;YACJ,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CAAC,aAAa,QAAQ,CAAC,IAAI,2BAA2B,CAAC,CAAC;YACzE,CAAC;YACD,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC;YAC3E,OAAO;gBACL,cAAc,EAAE,QAAQ,CAAC,SAAS,CAAC,IAAI;gBACvC,yBAAyB,EAAE,UAAU;aACtC,CAAC;QACJ,CAAC;QAED,SAAS,CAAC,GAAY;YACpB,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CAAC,aAAa,QAAQ,CAAC,IAAI,2BAA2B,CAAC,CAAC;YACzE,CAAC;YACD,MAAM,WAAW,GAAG,GAAG;gBACrB,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC;gBACvC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC;YAC9D,OAAO;gBACL,YAAY,EAAE;oBACZ,IAAI,EAAE,QAAQ,CAAC,SAAS,CAAC,IAAI;oBAC7B,GAAG,EAAE,WAAW;iBACjB;aACF,CAAC;QACJ,CAAC;QAED,gBAAgB;YACd,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC5C,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;YAE3B,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACtB,KAAK,OAAO;oBACV,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAClE,KAAK,UAAU;oBACb,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACvE;oBACE,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAa,cAAc;IACR,SAAS,GAAG,IAAI,GAAG,EAA2B,CAAC;IAEhE,QAAQ,CAAC,IAAY,EAAE,QAAyB;QAC9C,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,yBAAyB,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,CAAC,IAAY;QACjB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CACb,aAAa,IAAI,4BAA4B,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,EAAE,CACjG,CAAC;QACJ,CAAC;QACD,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACjC,CAAC;IAED,GAAG;QACD,OAAO,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACxD,CAAC;IAEO,MAAM,CAAC,IAAwB;QACrC,OAAO,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACvF,CAAC;CACF;AAnCD,wCAmCC"}

package/dist/esm/observability/alerts.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Alerting module — PrometheusRule CRD helpers, Alertmanager config builder,
+ * and global alert rules for cross-cutting concerns (PVC, certs).
+ *
+ * Per-instance alerts (CNPG, MariaDB, Neo4j, MinIO, Redis, Traefik) are
+ * created by their respective module factories, not here.
+ *
+ * @module observability/alerts
+ */
+import * as k8s from "@pulumi/kubernetes";
+import type * as pulumi from "@pulumi/pulumi";
+import type { IAlertConfig } from "./interfaces";
+/** A single Prometheus alert rule. */
+export interface IPrometheusAlertRule {
+    readonly alert: string;
+    readonly expr: string;
+    readonly for: string;
+    readonly labels: Record<string, string>;
+    readonly annotations: Record<string, string>;
+}
+/** A group of Prometheus alert rules. */
+export interface IPrometheusRuleGroup {
+    readonly name: string;
+    readonly interval?: string;
+    readonly rules: IPrometheusAlertRule[];
+}
+/**
+ * Parse a human-readable duration to seconds for PromQL expressions.
+ * Supports: "30s", "5m", "2h", "14d".
+ */
+export declare function parseDurationToSeconds(duration: string): number;
+/**
+ * Create a PrometheusRule CRD with the given alert groups.
+ *
+ * Used by both global rules (this module) and per-instance rules
+ * (operator modules, cache, platform).
+ */
+export declare function createPrometheusRule(name: string, namespace: string, groups: IPrometheusRuleGroup[], provider: k8s.Provider, dependsOn: pulumi.Resource[]): void;
+/**
+ * Create global PrometheusRule for cross-cutting alerts.
+ * Called from createObservabilityStack() when alerts are configured.
+ */
+export declare function createGlobalAlertRules(name: string, namespace: string, provider: k8s.Provider, dependsOn: pulumi.Resource[]): void;
+/**
+ * Build Alertmanager Helm values for receivers and routes.
+ *
+ * Returns values to deep-merge into the kube-prometheus-stack
+ * alertmanager section.
+ */
+export declare function buildAlertmanagerConfig(alertConfig: IAlertConfig): Record<string, unknown>;
+//# sourceMappingURL=alerts.d.ts.map

package/dist/esm/observability/alerts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"alerts.d.ts","sourceRoot":"","sources":["../../../src/observability/alerts.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,GAAG,MAAM,oBAAoB,CAAC;AAC1C,OAAO,KAAK,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAC9C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAMjD,sCAAsC;AACtC,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9C;AAED,yCAAyC;AACzC,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,oBAAoB,EAAE,CAAC;CACxC;AAMD;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAgB/D;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,oBAAoB,EAAE,EAC9B,QAAQ,EAAE,GAAG,CAAC,QAAQ,EACtB,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,GAC3B,IAAI,CAoBN;AAMD;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,GAAG,CAAC,QAAQ,EACtB,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,GAC3B,IAAI,CAuDN;AAMD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,WAAW,EAAE,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAkI1F"}

package/dist/esm/observability/alerts.js

@@ -0,0 +1,281 @@
+"use strict";
+/**
+ * Alerting module — PrometheusRule CRD helpers, Alertmanager config builder,
+ * and global alert rules for cross-cutting concerns (PVC, certs).
+ *
+ * Per-instance alerts (CNPG, MariaDB, Neo4j, MinIO, Redis, Traefik) are
+ * created by their respective module factories, not here.
+ *
+ * @module observability/alerts
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseDurationToSeconds = parseDurationToSeconds;
+exports.createPrometheusRule = createPrometheusRule;
+exports.createGlobalAlertRules = createGlobalAlertRules;
+exports.buildAlertmanagerConfig = buildAlertmanagerConfig;
+const k8s = __importStar(require("@pulumi/kubernetes"));
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+/**
+ * Parse a human-readable duration to seconds for PromQL expressions.
+ * Supports: "30s", "5m", "2h", "14d".
+ */
+function parseDurationToSeconds(duration) {
+    const match = duration.match(/^(\d+)(s|m|h|d)$/);
+    if (!match || !match[1] || !match[2])
+        throw new Error(`Invalid duration: ${duration}`);
+    const value = parseInt(match[1], 10);
+    switch (match[2]) {
+        case "s":
+            return value;
+        case "m":
+            return value * 60;
+        case "h":
+            return value * 3600;
+        case "d":
+            return value * 86400;
+        default:
+            throw new Error(`Unknown unit: ${match[2]}`);
+    }
+}
+/**
+ * Create a PrometheusRule CRD with the given alert groups.
+ *
+ * Used by both global rules (this module) and per-instance rules
+ * (operator modules, cache, platform).
+ */
+function createPrometheusRule(name, namespace, groups, provider, dependsOn) {
+    if (groups.length === 0)
+        return;
+    new k8s.apiextensions.CustomResource(`${name}-prometheus-rule`, {
+        apiVersion: "monitoring.coreos.com/v1",
+        kind: "PrometheusRule",
+        metadata: {
+            name,
+            namespace,
+            labels: {
+                "app.kubernetes.io/managed-by": "nimbus",
+                "prometheus.io/rule": "true",
+            },
+        },
+        spec: { groups },
+    }, { provider, dependsOn });
+}
+// ---------------------------------------------------------------------------
+// Global alert rules (PVC + cert-manager)
+// ---------------------------------------------------------------------------
+/**
+ * Create global PrometheusRule for cross-cutting alerts.
+ * Called from createObservabilityStack() when alerts are configured.
+ */
+function createGlobalAlertRules(name, namespace, provider, dependsOn) {
+    createPrometheusRule(`${name}-global-alerts`, namespace, [
+        // PVC disk usage (all namespaces)
+        {
+            name: "nimbus.pvc",
+            interval: "60s",
+            rules: [
+                {
+                    alert: "PvcDiskUsageCritical",
+                    expr: `(kubelet_volume_stats_used_bytes / kubelet_volume_stats_capacity_bytes) > 0.9`,
+                    for: "5m",
+                    labels: { severity: "critical" },
+                    annotations: {
+                        summary: "PVC {{ $labels.persistentvolumeclaim }} in {{ $labels.namespace }} is {{ $value | humanizePercentage }} full",
+                        description: "PVC disk usage exceeds 90%. Pod may crash if storage fills completely.",
+                    },
+                },
+                {
+                    alert: "PvcDiskUsageWarning",
+                    expr: `(kubelet_volume_stats_used_bytes / kubelet_volume_stats_capacity_bytes) > 0.75`,
+                    for: "10m",
+                    labels: { severity: "warning" },
+                    annotations: {
+                        summary: "PVC {{ $labels.persistentvolumeclaim }} in {{ $labels.namespace }} is {{ $value | humanizePercentage }} full",
+                        description: "PVC disk usage exceeds 75%. Plan capacity expansion.",
+                    },
+                },
+            ],
+        },
+        // Certificate expiry (cert-manager)
+        {
+            name: "nimbus.certmanager",
+            rules: [
+                {
+                    alert: "CertificateExpiryCritical",
+                    expr: `(certmanager_certificate_expiration_timestamp_seconds - time()) < ${parseDurationToSeconds("7d")}`,
+                    for: "1h",
+                    labels: { severity: "critical" },
+                    annotations: {
+                        summary: "Certificate {{ $labels.name }} in {{ $labels.namespace }} expires in less than 7 days",
+                        description: "cert-manager should auto-renew. This alert means renewal failed.",
+                    },
+                },
+            ],
+        },
+    ], provider, dependsOn);
+}
+// ---------------------------------------------------------------------------
+// Alertmanager config builder
+// ---------------------------------------------------------------------------
+/**
+ * Build Alertmanager Helm values for receivers and routes.
+ *
+ * Returns values to deep-merge into the kube-prometheus-stack
+ * alertmanager section.
+ */
+function buildAlertmanagerConfig(alertConfig) {
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    const receivers = [{ name: "null" }];
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    const routes = [];
+    const secretNames = [];
+    // Email receivers
+    if (alertConfig.email) {
+        const transport = alertConfig.email.transport;
+        const to = Array.isArray(alertConfig.email.to)
+            ? alertConfig.email.to.join(", ")
+            : alertConfig.email.to;
+        if (transport.secretName) {
+            secretNames.push(transport.secretName);
+        }
+        const emailConfig = {
+            to,
+            from: transport.fromAddress,
+            smarthost: `${transport.host}:${transport.port}`,
+            auth_username: transport.username,
+            auth_password_file: transport.secretName
+                ? `/etc/alertmanager/secrets/${transport.secretName}/password`
+                : undefined,
+            require_tls: true,
+            send_resolved: true,
+        };
+        receivers.push({ name: "email-critical", email_configs: [emailConfig] });
+        receivers.push({ name: "email-warning", email_configs: [emailConfig] });
+        routes.push({
+            receiver: "email-critical",
+            matchers: ['severity="critical"'],
+            group_wait: "10s",
+            group_interval: "1m",
+            repeat_interval: "1h",
+            continue: !!alertConfig.slack,
+        });
+        routes.push({
+            receiver: "email-warning",
+            matchers: ['severity="warning"'],
+            group_wait: "5m",
+            group_interval: "10m",
+            repeat_interval: "12h",
+            continue: !!alertConfig.slack,
+        });
+    }
+    // Slack receivers
+    if (alertConfig.slack) {
+        const webhookSecretName = alertConfig.slack.webhookUrlSecret;
+        secretNames.push(webhookSecretName);
+        const slackBase = {
+            api_url_file: `/etc/alertmanager/secrets/${webhookSecretName}/webhook-url`,
+            channel: alertConfig.slack.channel,
+            username: alertConfig.slack.username ?? "Nimbus Alerts",
+            send_resolved: true,
+            icon_emoji: ":warning:",
+        };
+        receivers.push({
+            name: "slack-critical",
+            slack_configs: [
+                {
+                    ...slackBase,
+                    color: "danger",
+                    title: `[CRITICAL] {{ .GroupLabels.alertname }}`,
+                    text: `{{ range .Alerts }}{{ .Annotations.summary }}\n{{ end }}`,
+                },
+            ],
+        });
+        receivers.push({
+            name: "slack-warning",
+            slack_configs: [
+                {
+                    ...slackBase,
+                    color: "warning",
+                    title: `[WARNING] {{ .GroupLabels.alertname }}`,
+                    text: `{{ range .Alerts }}{{ .Annotations.summary }}\n{{ end }}`,
+                },
+            ],
+        });
+        routes.push({
+            receiver: "slack-critical",
+            matchers: ['severity="critical"'],
+            group_wait: "10s",
+            group_interval: "1m",
+            repeat_interval: "1h",
+        });
+        routes.push({
+            receiver: "slack-warning",
+            matchers: ['severity="warning"'],
+            group_wait: "5m",
+            group_interval: "10m",
+            repeat_interval: "12h",
+        });
+    }
+    // Silenced routes — matched first, sent to null receiver.
+    // These are alerts that fire on managed K8s but aren't actionable.
+    const silencedRoutes = [
+        {
+            receiver: "null",
+            matchers: ['alertname=~"KubeControllerManagerDown|KubeSchedulerDown|KubeProxyDown"'],
+            continue: false,
+        },
+    ];
+    return {
+        config: {
+            global: { resolve_timeout: "5m" },
+            route: {
+                receiver: "null",
+                group_by: ["alertname", "namespace"],
+                group_wait: "30s",
+                group_interval: "5m",
+                repeat_interval: "4h",
+                routes: [...silencedRoutes, ...routes],
+            },
+            receivers,
+        },
+        alertmanagerSpec: {
+            secrets: secretNames,
+        },
+    };
+}
+//# sourceMappingURL=alerts.js.map

package/dist/esm/observability/alerts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"alerts.js","sourceRoot":"","sources":["../../../src/observability/alerts.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkCH,wDAgBC;AAQD,oDA0BC;AAUD,wDA4DC;AAYD,0DAkIC;AAtSD,wDAA0C;AAwB1C,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E;;;GAGG;AACH,SAAgB,sBAAsB,CAAC,QAAgB;IACrD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACjD,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,QAAQ,EAAE,CAAC,CAAC;IACvF,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACrC,QAAQ,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACjB,KAAK,GAAG;YACN,OAAO,KAAK,CAAC;QACf,KAAK,GAAG;YACN,OAAO,KAAK,GAAG,EAAE,CAAC;QACpB,KAAK,GAAG;YACN,OAAO,KAAK,GAAG,IAAI,CAAC;QACtB,KAAK,GAAG;YACN,OAAO,KAAK,GAAG,KAAK,CAAC;QACvB;YACE,MAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,oBAAoB,CAClC,IAAY,EACZ,SAAiB,EACjB,MAA8B,EAC9B,QAAsB,EACtB,SAA4B;IAE5B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAEhC,IAAI,GAAG,CAAC,aAAa,CAAC,cAAc,CAClC,GAAG,IAAI,kBAAkB,EACzB;QACE,UAAU,EAAE,0BAA0B;QACtC,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE;YACR,IAAI;YACJ,SAAS;YACT,MAAM,EAAE;gBACN,8BAA8B,EAAE,QAAQ;gBACxC,oBAAoB,EAAE,MAAM;aAC7B;SACF;QACD,IAAI,EAAE,EAAE,MAAM,EAAE;KACjB,EACD,EAAE,QAAQ,EAAE,SAAS,EAAE,CACxB,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,0CAA0C;AAC1C,8EAA8E;AAE9E;;;GAGG;AACH,SAAgB,sBAAsB,CACpC,IAAY,EACZ,SAAiB,EACjB,QAAsB,EACtB,SAA4B;IAE5B,oBAAoB,CAClB,GAAG,IAAI,gBAAgB,EACvB,SAAS,EACT;QACE,kCAAkC;QAClC;YACE,IAAI,EAAE,YAAY;YAClB,QAAQ,EAAE,KAAK;YACf,KAAK,EAAE;gBACL;oBACE,KAAK,EAAE,sBAAsB;oBAC7B,IAAI,EAAE,+EAA+E;oBACrF,GAAG,EAAE,IAAI;oBACT,MAAM,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE;oBAChC,WAAW,EAAE;wBACX,OAAO,EACL,8GAA8G;wBAChH,WAAW,EAAE,wEAAwE;qBACtF;iBACF;gBACD;oBACE,KAAK,EAAE,qBAAqB;oBAC5B,IAAI,EAAE,gFAAgF;oBACtF,GAAG,EAAE,KAAK;oBACV,MAAM,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE;oBAC/B,WAAW,EAAE;wBACX,OAAO,EACL,8GAA8G;wBAChH,WAAW,EAAE,sDAAsD;qBACpE;iBACF;aACF;SACF;QACD,oCAAoC;QACpC;YACE,IAAI,EAAE,oBAAoB;YAC1B,KAAK,EAAE;gBACL;oBACE,KAAK,EAAE,2BAA2B;oBAClC,IAAI,EAAE,qEAAqE,sBAAsB,CAAC,IAAI,CAAC,EAAE;oBACzG,GAAG,EAAE,IAAI;oBACT,MAAM,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE;oBAChC,WAAW,EAAE;wBACX,OAAO,EACL,uFAAuF;wBACzF,WAAW,EAAE,kEAAkE;qBAChF;iBACF;aACF;SACF;KACF,EACD,QAAQ,EACR,SAAS,CACV,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,8BAA8B;AAC9B,8EAA8E;AAE9E;;;;;GAKG;AACH,SAAgB,uBAAuB,CAAC,WAAyB;IAC/D,8DAA8D;IAC9D,MAAM,SAAS,GAAU,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5C,8DAA8D;IAC9D,MAAM,MAAM,GAAU,EAAE,CAAC;IACzB,MAAM,WAAW,GAAa,EAAE,CAAC;IAEjC,kBAAkB;IAClB,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC;QACtB,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC;QAC9C,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5C,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;YACjC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;QAEzB,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC;YACzB,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACzC,CAAC;QAED,MAAM,WAAW,GAAG;YAClB,EAAE;YACF,IAAI,EAAE,SAAS,CAAC,WAAW;YAC3B,SAAS,EAAE,GAAG,SAAS,CAAC,IAAI,IAAI,SAAS,CAAC,IAAI,EAAE;YAChD,aAAa,EAAE,SAAS,CAAC,QAAQ;YACjC,kBAAkB,EAAE,SAAS,CAAC,UAAU;gBACtC,CAAC,CAAC,6BAA6B,SAAS,CAAC,UAAU,WAAW;gBAC9D,CAAC,CAAC,SAAS;YACb,WAAW,EAAE,IAAI;YACjB,aAAa,EAAE,IAAI;SACpB,CAAC;QAEF,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,aAAa,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACzE,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,aAAa,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAExE,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ,EAAE,gBAAgB;YAC1B,QAAQ,EAAE,CAAC,qBAAqB,CAAC;YACjC,UAAU,EAAE,KAAK;YACjB,cAAc,EAAE,IAAI;YACpB,eAAe,EAAE,IAAI;YACrB,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,KAAK;SAC9B,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ,EAAE,eAAe;YACzB,QAAQ,EAAE,CAAC,oBAAoB,CAAC;YAChC,UAAU,EAAE,IAAI;YAChB,cAAc,EAAE,KAAK;YACrB,eAAe,EAAE,KAAK;YACtB,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,KAAK;SAC9B,CAAC,CAAC;IACL,CAAC;IAED,kBAAkB;IAClB,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC;QACtB,MAAM,iBAAiB,GAAG,WAAW,CAAC,KAAK,CAAC,gBAAgB,CAAC;QAC7D,WAAW,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAEpC,MAAM,SAAS,GAAG;YAChB,YAAY,EAAE,6BAA6B,iBAAiB,cAAc;YAC1E,OAAO,EAAE,WAAW,CAAC,KAAK,CAAC,OAAO;YAClC,QAAQ,EAAE,WAAW,CAAC,KAAK,CAAC,QAAQ,IAAI,eAAe;YACvD,aAAa,EAAE,IAAI;YACnB,UAAU,EAAE,WAAW;SACxB,CAAC;QAEF,SAAS,CAAC,IAAI,CAAC;YACb,IAAI,EAAE,gBAAgB;YACtB,aAAa,EAAE;gBACb;oBACE,GAAG,SAAS;oBACZ,KAAK,EAAE,QAAQ;oBACf,KAAK,EAAE,yCAAyC;oBAChD,IAAI,EAAE,0DAA0D;iBACjE;aACF;SACF,CAAC,CAAC;QACH,SAAS,CAAC,IAAI,CAAC;YACb,IAAI,EAAE,eAAe;YACrB,aAAa,EAAE;gBACb;oBACE,GAAG,SAAS;oBACZ,KAAK,EAAE,SAAS;oBAChB,KAAK,EAAE,wCAAwC;oBAC/C,IAAI,EAAE,0DAA0D;iBACjE;aACF;SACF,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ,EAAE,gBAAgB;YAC1B,QAAQ,EAAE,CAAC,qBAAqB,CAAC;YACjC,UAAU,EAAE,KAAK;YACjB,cAAc,EAAE,IAAI;YACpB,eAAe,EAAE,IAAI;SACtB,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ,EAAE,eAAe;YACzB,QAAQ,EAAE,CAAC,oBAAoB,CAAC;YAChC,UAAU,EAAE,IAAI;YAChB,cAAc,EAAE,KAAK;YACrB,eAAe,EAAE,KAAK;SACvB,CAAC,CAAC;IACL,CAAC;IAED,0DAA0D;IAC1D,mEAAmE;IACnE,MAAM,cAAc,GAAG;QACrB;YACE,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE,CAAC,wEAAwE,CAAC;YACpF,QAAQ,EAAE,KAAK;SAChB;KACF,CAAC;IAEF,OAAO;QACL,MAAM,EAAE;YACN,MAAM,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE;YACjC,KAAK,EAAE;gBACL,QAAQ,EAAE,MAAM;gBAChB,QAAQ,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC;gBACpC,UAAU,EAAE,KAAK;gBACjB,cAAc,EAAE,IAAI;gBACpB,eAAe,EAAE,IAAI;gBACrB,MAAM,EAAE,CAAC,GAAG,cAAc,EAAE,GAAG,MAAM,CAAC;aACvC;YACD,SAAS;SACV;QACD,gBAAgB,EAAE;YAChB,OAAO,EAAE,WAAW;SACrB;KACF,CAAC;AACJ,CAAC"}