@vibesdotdev/integrations-digitalocean 0.0.0-stage → 1.0.0-rc.1

package/dist/infra/doks/service-release-schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-release-schemas.d.ts","sourceRoot":"","sources":["../../../src/infra/doks/service-release-schemas.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAG5B,eAAO,MAAM,gDAAgD;;;;;;;iBAM3D,CAAC;AAEH,eAAO,MAAM,gDAAgD;;;;;;;;;;;;iBAM3D,CAAC;AAEH,yGAAyG;AACzG,eAAO,MAAM,0CAA0C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BrD,CAAC;AAEH,MAAM,MAAM,0CAA0C,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gDAAgD,CAAC,CAAC;AAC1H,MAAM,MAAM,0CAA0C,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gDAAgD,CAAC,CAAC;AAC1H,MAAM,MAAM,oCAAoC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0CAA0C,CAAC,CAAC"}

package/dist/infra/doks/service-release-schemas.js

@@ -0,0 +1,51 @@
+/**
+ * DigitalOcean Kubernetes service-release schemas. The infra/service-release
+ * kind keeps `config` open; this package validates the DigitalOcean-owned part
+ * once, when it resolves a release or target.
+ */
+import * as z from 'zod/v4';
+import { ServiceReleaseDescriptorSchema } from '@vibesdotdev/infra-core';
+export const DigitalOceanKubernetesServiceReleaseTargetSchema = z.object({
+    adapter: z.literal('digitalocean-kubernetes'),
+    cluster: z.union([
+        z.object({ id: z.string().min(1) }),
+        z.object({ name: z.string().min(1) })
+    ])
+});
+export const DigitalOceanKubernetesServiceReleaseConfigSchema = DigitalOceanKubernetesServiceReleaseTargetSchema.extend({
+    imageRegistry: z.object({
+        provider: z.literal('digitalocean-container-registry'),
+        name: z.string().min(1).max(63).regex(/^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/, 'must be a DNS label')
+    }).optional(),
+    loadBalancerAnnotations: z.record(z.string(), z.string()).default({})
+});
+/** The kind's descriptor plus the DigitalOcean-owned config fields and the registry-bound image rule. */
+export const DigitalOceanServiceReleaseDescriptorSchema = ServiceReleaseDescriptorSchema.transform((descriptor, ctx) => {
+    const config = DigitalOceanKubernetesServiceReleaseConfigSchema.safeParse(descriptor.config);
+    if (!config.success) {
+        for (const issue of config.error.issues) {
+            ctx.addIssue({ code: 'custom', path: ['config', ...issue.path], message: issue.message });
+        }
+        return z.NEVER;
+    }
+    const imageRegistry = config.data.imageRegistry;
+    if (imageRegistry) {
+        const prefix = `registry.digitalocean.com/${imageRegistry.name}/`;
+        for (const [path, image] of [
+            [['gateway', 'image'], descriptor.gateway.image],
+            [['controlPlaneRouter', 'image'], descriptor.controlPlaneRouter.image],
+            [['stateful', 'image'], descriptor.stateful.image],
+            [['stateful', 'backup', 'toolImage'], descriptor.stateful.backup.toolImage]
+        ]) {
+            if (!image.startsWith(prefix)) {
+                ctx.addIssue({
+                    code: 'custom',
+                    path: [...path],
+                    message: `image must come from declared DigitalOcean registry ${imageRegistry.name}`
+                });
+            }
+        }
+    }
+    return { ...descriptor, config: { ...descriptor.config, ...config.data } };
+});
+//# sourceMappingURL=service-release-schemas.js.map

package/dist/infra/doks/service-release-schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-release-schemas.js","sourceRoot":"","sources":["../../../src/infra/doks/service-release-schemas.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,8BAA8B,EAAE,MAAM,yBAAyB,CAAC;AAEzE,MAAM,CAAC,MAAM,gDAAgD,GAAG,CAAC,CAAC,MAAM,CAAC;IACxE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC;IAC7C,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC;QAChB,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;KACrC,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gDAAgD,GAAG,gDAAgD,CAAC,MAAM,CAAC;IACvH,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC;QACvB,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,iCAAiC,CAAC;QACtD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,mCAAmC,EAAE,qBAAqB,CAAC;KACjG,CAAC,CAAC,QAAQ,EAAE;IACb,uBAAuB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACrE,CAAC,CAAC;AAEH,yGAAyG;AACzG,MAAM,CAAC,MAAM,0CAA0C,GAAG,8BAA8B,CAAC,SAAS,CAAC,CAAC,UAAU,EAAE,GAAG,EAAE,EAAE;IACtH,MAAM,MAAM,GAAG,gDAAgD,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAC7F,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACzC,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3F,CAAC;QACD,OAAO,CAAC,CAAC,KAAK,CAAC;IAChB,CAAC;IACD,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC;IAChD,IAAI,aAAa,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,6BAA6B,aAAa,CAAC,IAAI,GAAG,CAAC;QAClE,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI;YAC3B,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC;YAChD,CAAC,CAAC,oBAAoB,EAAE,OAAO,CAAC,EAAE,UAAU,CAAC,kBAAkB,CAAC,KAAK,CAAC;YACtE,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC;YAClD,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,WAAW,CAAC,EAAE,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC;SAClE,EAAE,CAAC;YACZ,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC/B,GAAG,CAAC,QAAQ,CAAC;oBACZ,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;oBACf,OAAO,EAAE,uDAAuD,aAAa,CAAC,IAAI,EAAE;iBACpF,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;IACF,CAAC;IACD,OAAO,EAAE,GAAG,UAAU,EAAE,MAAM,EAAE,EAAE,GAAG,UAAU,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;AAC5E,CAAC,CAAC,CAAC"}

package/dist/infra/doks/service-release.d.ts

@@ -0,0 +1,415 @@
+import { KubernetesManifestProjectionSchema } from '../../schemas/kubernetes-responses.ts';
+import { type VibesRuntime } from '@vibesdotdev/kernel';
+import * as z from 'zod/v4';
+import { type ServiceReleaseOperation } from '@vibesdotdev/infra-core';
+import { DigitalOceanKubernetesServiceReleaseTargetSchema, DigitalOceanServiceReleaseDescriptorSchema as ServiceReleaseDescriptorSchema } from './service-release-schemas.ts';
+import type { DigitalOceanKubernetesClient } from '../../kubernetes/index.ts';
+import type { DigitalOceanSpacesKeysClient, DoSpacesKeyGrant } from '../../storage/spaces-keys.ts';
+import { type DigitalOceanDoksWorkerExecutionInput, type DigitalOceanDoksWorkerPlan } from '../../schemas/doks-worker.ts';
+import type { DigitalOceanDoksWorkerStatus } from '../../schemas/worker-status.ts';
+type JsonObject = z.infer<typeof KubernetesManifestProjectionSchema>;
+export interface ServiceReleaseChange {
+    operation: ServiceReleaseOperation;
+    gatewayReplicas?: number;
+    rollback?: {
+        gateway: {
+            image: string;
+            revision: string;
+        };
+        stateful: {
+            image: string;
+            revision: string;
+            storageCompatibility: {
+                readFrom: number;
+                readThrough: number;
+                writeVersion: number;
+            };
+        };
+    };
+}
+export interface KubernetesReleaseResource {
+    apiVersion: string;
+    kind: string;
+    namespace?: string;
+    name: string;
+    manifest: JsonObject;
+}
+export interface KubernetesServiceReleasePlan {
+    provider: 'digitalocean-kubernetes';
+    cluster: {
+        id?: string;
+        name?: string;
+    };
+    operation: ServiceReleaseOperation;
+    fieldManager: 'vibes-infra-service-release';
+    conflictPolicy: 'fail';
+    dns: {
+        hostname: string;
+        ownerRef: string;
+        managedByThisPlan: false;
+    };
+    hostKeyAuthority: {
+        publicKey: string;
+        fingerprint: string;
+        generation: number;
+        source: {
+            repository: string;
+            path: string;
+        };
+        secret: {
+            namespace: string;
+            name: string;
+            provisioningOwner: 'secret-management';
+            rotationStrategy: 'preprovisioned-atomic';
+        };
+    };
+    namespaceQuota?: {
+        namespace: string;
+        name: string;
+        hard: Record<string, string>;
+    };
+    imageRegistry?: {
+        provider: 'digitalocean-container-registry';
+        name: string;
+        pullSecretName: string;
+    };
+    backup: {
+        mode: 'restic-s3';
+        repository: string;
+        encryption: 'restic-repository-key';
+        schedule: string;
+        verifySchedule: string;
+        retention: {
+            keepDaily: number;
+            keepWeekly: number;
+            keepMonthly: number;
+        };
+    } | {
+        mode: 'csi-volume-snapshot';
+        snapshotClassName: string;
+        deletionPolicy: 'Delete';
+        schedule: string;
+        verifySchedule: string;
+        retention: {
+            verifiedGenerations: number;
+        };
+    };
+    repositoryMigration?: {
+        migrationId: string;
+        mode: 'mirror-ssh';
+        sourceOrigin: string;
+        inventoryUrl: string;
+        sshLeaseUrl: string;
+        releaseRevision: string;
+        expectedRepositoryCount: number;
+        expectedOwners: Array<{
+            ownerType: 'user' | 'organization';
+            ownerId: string;
+            repositoryCount: number;
+        }>;
+        inventoryAuthoritySecret: {
+            namespace: string;
+            name: string;
+            key: string;
+        };
+        /** The release's declared VIBES_ENVIRONMENT_TIER (the stateful pod's literal env). */
+        environmentTier: string;
+        destination: {
+            pvcName: string;
+            mountPath: string;
+        };
+        statefulName: string;
+        image: string;
+        receipt: {
+            namespace: string;
+            name: string;
+        };
+        stablePasses: 2;
+        rollback: 'source-authoritative-until-public-cutover';
+    };
+    certificates: Array<{
+        namespace: string;
+        name: string;
+        secretName: string;
+        dnsNames: string[];
+        issuerRef: {
+            kind: 'ClusterIssuer' | 'Issuer';
+            name: string;
+        };
+        duration: '2160h';
+        renewBefore: '360h';
+        privateKey: {
+            algorithm: 'ECDSA';
+            size: 256;
+            rotationPolicy: 'Always';
+        };
+    }>;
+    requiresCiliumNetworkPolicy: boolean;
+    verification?: {
+        performed: true;
+        hostKeyFingerprint: string;
+        hostKeyGeneration: number;
+        pvcSchemaVersion: number | 'new';
+    };
+    requiredSecrets: Array<{
+        namespace: string;
+        name: string;
+        keys: string[];
+    }>;
+    readiness?: {
+        cluster: 'running';
+        secrets: Array<{
+            namespace: string;
+            name: string;
+            keys: string[];
+        }>;
+        imageRegistry?: {
+            provider: 'digitalocean-container-registry';
+            name: string;
+            pullSecretName: string;
+        };
+        namespaceQuota?: {
+            namespace: string;
+            name: string;
+            hard: Record<string, string>;
+        };
+        snapshotClass?: {
+            name: string;
+            driver: 'dobs.csi.digitalocean.com';
+            deletionPolicy: 'Delete';
+        };
+        repositoryMigration?: {
+            migrationId: string;
+            repositoryCount: number;
+            inventoryDigest: string;
+            parityDigest: string;
+            stablePasses: 2;
+            rollback: 'source-authoritative-until-public-cutover';
+        };
+    };
+    resources: KubernetesReleaseResource[];
+    warnings: string[];
+}
+export interface ServiceReleaseSecretMaterial {
+    target: {
+        name: string;
+        key: string;
+    };
+    value: string;
+}
+export interface ServiceReleaseSecretProvisionResult {
+    provider: 'digitalocean-kubernetes';
+    cluster: {
+        id: string;
+        name: string;
+    };
+    secrets: Array<{
+        namespace: string;
+        name: string;
+        keys: string[];
+    }>;
+}
+export interface ServiceReleaseCertificateAuthorityInventory {
+    provider: 'digitalocean-kubernetes';
+    cluster: {
+        id: string;
+        name: string;
+    };
+    authorities: Array<{
+        name: string;
+        kind: 'ClusterIssuer';
+        ready: boolean;
+        solverTypes: string[];
+        acmeServer?: string;
+        contactEmail?: string;
+    }>;
+}
+export interface ServiceReleaseCertificateAuthorityProvisionResult {
+    provider: 'digitalocean-kubernetes';
+    cluster: {
+        id: string;
+        name: string;
+    };
+    authority: {
+        namespace: string;
+        name: string;
+        kind: 'Issuer';
+        solver: 'dns01/cloudflare';
+        dnsZones: string[];
+        secret: {
+            name: string;
+            keys: string[];
+        };
+        sourceKey: string;
+    };
+}
+export interface ServiceReleaseClusterCapabilities {
+    provider: 'digitalocean-kubernetes';
+    cluster: {
+        id: string;
+        name: string;
+    };
+    ciliumNetworkPolicy: boolean;
+    volumeSnapshots: {
+        apiAvailable: boolean;
+        classes: Array<{
+            name: string;
+            driver: string;
+            deletionPolicy: string;
+            isDefault: boolean;
+        }>;
+    };
+}
+export interface ServiceReleaseBackupAuthorityInventory {
+    provider: 'digitalocean-spaces';
+    authorities: Array<{
+        name: string;
+        grants: DoSpacesKeyGrant[];
+        createdAt: string;
+    }>;
+}
+export interface ServiceReleaseBackupAuthorityHandle {
+    name: string;
+    accessKeyId: string;
+    grants: DoSpacesKeyGrant[];
+    createdAt: string;
+}
+export interface ServiceReleaseBackupAuthorityCredential {
+    name: string;
+    accessKeyId: string;
+    secretAccessKey: string;
+    grants: DoSpacesKeyGrant[];
+}
+export interface ServiceReleaseCertificateProvisionResult {
+    provider: 'digitalocean-kubernetes';
+    cluster: {
+        id: string;
+        name: string;
+    };
+    certificates: Array<{
+        namespace: string;
+        name: string;
+        secretName: string;
+        dnsNames: string[];
+    }>;
+}
+export interface ServiceReleaseRepositoryMigrationProvisionResult {
+    provider: 'digitalocean-kubernetes';
+    cluster: {
+        id: string;
+        name: string;
+    };
+    migration: {
+        migrationId: string;
+        namespace: string;
+        jobName: string;
+        receiptConfigMapName: string;
+        repositoryCount: number;
+        state: 'started' | 'running' | 'succeeded' | 'failed';
+        completedRepositories: number;
+        lastCompletedRepository?: string;
+        failedRepository?: string;
+        progressReason?: string;
+        reason?: string;
+    };
+}
+export interface ServiceReleaseImageRegistryProvisionResult {
+    provider: 'digitalocean-kubernetes';
+    cluster: {
+        id: string;
+        name: string;
+    };
+    registry: {
+        provider: 'digitalocean-container-registry';
+        name: string;
+        pullSecret: {
+            namespace: string;
+            name: string;
+            type: 'kubernetes.io/dockerconfigjson';
+        };
+    };
+}
+export type KubernetesFetch = (input: string | URL | Request, init?: RequestInit & {
+    tls?: {
+        ca?: string;
+        cert?: string;
+        key?: string;
+    };
+}) => Promise<Response>;
+export declare function planDigitalOceanKubernetesServiceRelease(rawDescriptor: unknown, change: ServiceReleaseChange): KubernetesServiceReleasePlan;
+export declare class DigitalOceanKubernetesServiceReleaseClient {
+    private readonly runtime;
+    private readonly kubernetes;
+    private readonly fetchImpl?;
+    private readonly spacesKeys?;
+    constructor(runtime: VibesRuntime, kubernetes: DigitalOceanKubernetesClient, fetchImpl?: KubernetesFetch | undefined, spacesKeys?: DigitalOceanSpacesKeysClient | undefined);
+    /**
+     * Resolve the DOKS Secret delivery capability through its semantic runtime
+     * client. The secrets/store projection remains limited to store operations.
+     */
+    private workerCredentialDeliveryOwner;
+    /**
+     * Admission for every externally reachable worker execution. The caller
+     * supplies only the execution input (operation, worker id, source
+     * revision); the authorized projection is regenerated from the descriptor
+     * the runtime selects by id, so a descriptor embedded in an untrusted plan
+     * is never independent authority.
+     */
+    private authorizeWorkerExecution;
+    /**
+     * Regenerate the authorized projection from the descriptor the runtime
+     * selects by id. A credential lease the Secrets owner issued mid-execution
+     * is the only caller state that may re-enter, and only when the caller is
+     * allowed to reuse it.
+     */
+    private authorizeWorkerPlan;
+    /**
+     * Recover the issued source lease only from the live, owned Job. The
+     * operation annotation and the Job's source Secret reference must agree;
+     * a plan regenerated from the descriptor alone is not cleanup authority.
+     */
+    private recoverWorkerSourceLease;
+    private revokeWorkerSourceLease;
+    backupAuthorities(input: {
+        namePrefix: string;
+        bucket: string;
+        requiredControlPlaneScopes: string[];
+    }): Promise<ServiceReleaseBackupAuthorityInventory>;
+    backupAuthorityHandles(input: {
+        namePrefix: string;
+        bucket: string;
+        requiredControlPlaneScopes: string[];
+    }): Promise<ServiceReleaseBackupAuthorityHandle[]>;
+    createBackupAuthorityKey(input: {
+        name: string;
+        grants: DoSpacesKeyGrant[];
+        requiredControlPlaneScopes: string[];
+    }): Promise<ServiceReleaseBackupAuthorityCredential>;
+    deleteBackupAuthorityKey(accessKeyId: string): Promise<void>;
+    private backupAuthorityError;
+    plan(descriptor: z.input<typeof ServiceReleaseDescriptorSchema>, change: ServiceReleaseChange): KubernetesServiceReleasePlan;
+    private connect;
+    private assertReadiness;
+    readiness(descriptor: z.input<typeof ServiceReleaseDescriptorSchema>, change: ServiceReleaseChange): Promise<KubernetesServiceReleasePlan>;
+    certificateAuthorities(target: z.input<typeof DigitalOceanKubernetesServiceReleaseTargetSchema>): Promise<ServiceReleaseCertificateAuthorityInventory>;
+    clusterCapabilities(target: z.input<typeof DigitalOceanKubernetesServiceReleaseTargetSchema>): Promise<ServiceReleaseClusterCapabilities>;
+    provisionSecrets(descriptor: z.input<typeof ServiceReleaseDescriptorSchema>, change: ServiceReleaseChange, material: ServiceReleaseSecretMaterial[]): Promise<ServiceReleaseSecretProvisionResult>;
+    provisionImageRegistry(descriptor: z.input<typeof ServiceReleaseDescriptorSchema>, change: ServiceReleaseChange): Promise<ServiceReleaseImageRegistryProvisionResult>;
+    provisionCertificateAuthority(descriptor: z.input<typeof ServiceReleaseDescriptorSchema>, change: ServiceReleaseChange, material: {
+        sourceKey: string;
+        value: string;
+    }): Promise<ServiceReleaseCertificateAuthorityProvisionResult>;
+    provisionCertificates(descriptor: z.input<typeof ServiceReleaseDescriptorSchema>, change: ServiceReleaseChange): Promise<ServiceReleaseCertificateProvisionResult>;
+    provisionRepositoryMigration(descriptor: z.input<typeof ServiceReleaseDescriptorSchema>, change: ServiceReleaseChange): Promise<ServiceReleaseRepositoryMigrationProvisionResult>;
+    apply(descriptor: z.input<typeof ServiceReleaseDescriptorSchema>, change: ServiceReleaseChange): Promise<KubernetesServiceReleasePlan>;
+    /**
+     * Apply a worker execution through the same short-lived DOKS authority and
+     * bounded error surface as service releases. The caller names the worker
+     * and operation; the plan that mutates the cluster is the projection this
+     * method re-derives from the runtime-selected descriptor.
+     */
+    applyWorkerPlan(input: unknown): Promise<DigitalOceanDoksWorkerPlan>;
+    getWorkerPlanStatus(input: DigitalOceanDoksWorkerExecutionInput): Promise<DigitalOceanDoksWorkerStatus>;
+}
+export {};
+//# sourceMappingURL=service-release.d.ts.map

package/dist/infra/doks/service-release.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-release.d.ts","sourceRoot":"","sources":["../../../src/infra/doks/service-release.ts"],"names":[],"mappings":"AAAA,OAAO,EAIN,kCAAkC,EAClC,MAAM,uCAAuC,CAAC;AAiC/C,OAAO,EAGN,KAAK,YAAY,EAEjB,MAAM,qBAAqB,CAAC;AAI7B,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAY,KAAK,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AACjF,OAAO,EACN,gDAAgD,EAEhD,0CAA0C,IAAI,8BAA8B,EAE5E,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,2BAA2B,CAAC;AAE9E,OAAO,KAAK,EAAE,4BAA4B,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAGnG,OAAO,EAUN,KAAK,oCAAoC,EACzC,KAAK,0BAA0B,EAC/B,MAAM,8BAA8B,CAAC;AAKtC,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,gCAAgC,CAAC;AAEnF,KAAK,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAErE,MAAM,WAAW,oBAAoB;IACpC,SAAS,EAAE,uBAAuB,CAAC;IACnC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE;QACV,OAAO,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAA;SAAE,CAAC;QAC7C,QAAQ,EAAE;YACT,KAAK,EAAE,MAAM,CAAC;YACd,QAAQ,EAAE,MAAM,CAAC;YACjB,oBAAoB,EAAE;gBAAE,QAAQ,EAAE,MAAM,CAAC;gBAAC,WAAW,EAAE,MAAM,CAAC;gBAAC,YAAY,EAAE,MAAM,CAAA;aAAE,CAAC;SACtF,CAAC;KACF,CAAC;CACF;AAED,MAAM,WAAW,yBAAyB;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,UAAU,CAAC;CACrB;AAED,MAAM,WAAW,4BAA4B;IAC5C,QAAQ,EAAE,yBAAyB,CAAC;IACpC,OAAO,EAAE;QAAE,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACxC,SAAS,EAAE,uBAAuB,CAAC;IACnC,YAAY,EAAE,6BAA6B,CAAC;IAC5C,cAAc,EAAE,MAAM,CAAC;IACvB,GAAG,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,iBAAiB,EAAE,KAAK,CAAA;KAAE,CAAC;IACtE,gBAAgB,EAAE;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,WAAW,EAAE,MAAM,CAAC;QACpB,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE;YAAE,UAAU,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC;QAC7C,MAAM,EAAE;YACP,SAAS,EAAE,MAAM,CAAC;YAClB,IAAI,EAAE,MAAM,CAAC;YACb,iBAAiB,EAAE,mBAAmB,CAAC;YACvC,gBAAgB,EAAE,uBAAuB,CAAC;SAC1C,CAAC;KACF,CAAC;IACF,cAAc,CAAC,EAAE;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KAC7B,CAAC;IACF,aAAa,CAAC,EAAE;QACf,QAAQ,EAAE,iCAAiC,CAAC;QAC5C,IAAI,EAAE,MAAM,CAAC;QACb,cAAc,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,MAAM,EACH;QACA,IAAI,EAAE,WAAW,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,uBAAuB,CAAC;QACpC,QAAQ,EAAE,MAAM,CAAC;QACjB,cAAc,EAAE,MAAM,CAAC;QACvB,SAAS,EAAE;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,CAAC;YAAC,WAAW,EAAE,MAAM,CAAA;SAAE,CAAC;KACzE,GACD;QACA,IAAI,EAAE,qBAAqB,CAAC;QAC5B,iBAAiB,EAAE,MAAM,CAAC;QAC1B,cAAc,EAAE,QAAQ,CAAC;QACzB,QAAQ,EAAE,MAAM,CAAC;QACjB,cAAc,EAAE,MAAM,CAAC;QACvB,SAAS,EAAE;YAAE,mBAAmB,EAAE,MAAM,CAAA;SAAE,CAAC;KAC1C,CAAC;IACL,mBAAmB,CAAC,EAAE;QACrB,WAAW,EAAE,MAAM,CAAC;QACpB,IAAI,EAAE,YAAY,CAAC;QACnB,YAAY,EAAE,MAAM,CAAC;QACrB,YAAY,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,MAAM,CAAC;QACpB,eAAe,EAAE,MAAM,CAAC;QACxB,uBAAuB,EAAE,MAAM,CAAC;QAChC,cAAc,EAAE,KAAK,CAAC;YACrB,SAAS,EAAE,MAAM,GAAG,cAAc,CAAC;YACnC,OAAO,EAAE,MAAM,CAAC;YAChB,eAAe,EAAE,MAAM,CAAC;SACxB,CAAC,CAAC;QACH,wBAAwB,EAAE;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,GAAG,EAAE,MAAM,CAAA;SAAE,CAAC;QAC3E,sFAAsF;QACtF,eAAe,EAAE,MAAM,CAAC;QACxB,WAAW,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAC;QACpD,YAAY,EAAE,MAAM,CAAC;QACrB,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC;QAC7C,YAAY,EAAE,CAAC,CAAC;QAChB,QAAQ,EAAE,2CAA2C,CAAC;KACtD,CAAC;IACF,YAAY,EAAE,KAAK,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC;QAClB,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;QACnB,SAAS,EAAE;YAAE,IAAI,EAAE,eAAe,GAAG,QAAQ,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC;QAC9D,QAAQ,EAAE,OAAO,CAAC;QAClB,WAAW,EAAE,MAAM,CAAC;QACpB,UAAU,EAAE;YAAE,SAAS,EAAE,OAAO,CAAC;YAAC,IAAI,EAAE,GAAG,CAAC;YAAC,cAAc,EAAE,QAAQ,CAAA;SAAE,CAAC;KACxE,CAAC,CAAC;IACH,2BAA2B,EAAE,OAAO,CAAC;IACrC,YAAY,CAAC,EAAE;QACd,SAAS,EAAE,IAAI,CAAC;QAChB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,iBAAiB,EAAE,MAAM,CAAC;QAC1B,gBAAgB,EAAE,MAAM,GAAG,KAAK,CAAC;KACjC,CAAC;IACF,eAAe,EAAE,KAAK,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IAC5E,SAAS,CAAC,EAAE;QACX,OAAO,EAAE,SAAS,CAAC;QACnB,OAAO,EAAE,KAAK,CAAC;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC,CAAC;QACpE,aAAa,CAAC,EAAE;YACf,QAAQ,EAAE,iCAAiC,CAAC;YAC5C,IAAI,EAAE,MAAM,CAAC;YACb,cAAc,EAAE,MAAM,CAAC;SACvB,CAAC;QACF,cAAc,CAAC,EAAE;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;SAAE,CAAC;QACnF,aAAa,CAAC,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,2BAA2B,CAAC;YAAC,cAAc,EAAE,QAAQ,CAAA;SAAE,CAAC;QAChG,mBAAmB,CAAC,EAAE;YACrB,WAAW,EAAE,MAAM,CAAC;YACpB,eAAe,EAAE,MAAM,CAAC;YACxB,eAAe,EAAE,MAAM,CAAC;YACxB,YAAY,EAAE,MAAM,CAAC;YACrB,YAAY,EAAE,CAAC,CAAC;YAChB,QAAQ,EAAE,2CAA2C,CAAC;SACtD,CAAC;KACF,CAAC;IACF,SAAS,EAAE,yBAAyB,EAAE,CAAC;IACvC,QAAQ,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,4BAA4B;IAC5C,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IACtC,KAAK,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,mCAAmC;IACnD,QAAQ,EAAE,yBAAyB,CAAC;IACpC,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACtC,OAAO,EAAE,KAAK,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;CACpE;AAED,MAAM,WAAW,2CAA2C;IAC3D,QAAQ,EAAE,yBAAyB,CAAC;IACpC,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACtC,WAAW,EAAE,KAAK,CAAC;QAClB,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,eAAe,CAAC;QACtB,KAAK,EAAE,OAAO,CAAC;QACf,WAAW,EAAE,MAAM,EAAE,CAAC;QACtB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,YAAY,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC,CAAC;CACH;AAED,MAAM,WAAW,iDAAiD;IACjE,QAAQ,EAAE,yBAAyB,CAAC;IACpC,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACtC,SAAS,EAAE;QACV,SAAS,EAAE,MAAM,CAAC;QAClB,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,QAAQ,CAAC;QACf,MAAM,EAAE,kBAAkB,CAAC;QAC3B,QAAQ,EAAE,MAAM,EAAE,CAAC;QACnB,MAAM,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC;QACzC,SAAS,EAAE,MAAM,CAAC;KAClB,CAAC;CACF;AAED,MAAM,WAAW,iCAAiC;IACjD,QAAQ,EAAE,yBAAyB,CAAC;IACpC,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACtC,mBAAmB,EAAE,OAAO,CAAC;IAC7B,eAAe,EAAE;QAChB,YAAY,EAAE,OAAO,CAAC;QACtB,OAAO,EAAE,KAAK,CAAC;YACd,IAAI,EAAE,MAAM,CAAC;YACb,MAAM,EAAE,MAAM,CAAC;YACf,cAAc,EAAE,MAAM,CAAC;YACvB,SAAS,EAAE,OAAO,CAAC;SACnB,CAAC,CAAC;KACH,CAAC;CACF;AAED,MAAM,WAAW,sCAAsC;IACtD,QAAQ,EAAE,qBAAqB,CAAC;IAChC,WAAW,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,gBAAgB,EAAE,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACpF;AAED,MAAM,WAAW,mCAAmC;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,uCAAuC;IACvD,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,gBAAgB,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,wCAAwC;IACxD,QAAQ,EAAE,yBAAyB,CAAC;IACpC,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACtC,YAAY,EAAE,KAAK,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;CACjG;AAED,MAAM,WAAW,gDAAgD;IAChE,QAAQ,EAAE,yBAAyB,CAAC;IACpC,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACtC,SAAS,EAAE;QACV,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,oBAAoB,EAAE,MAAM,CAAC;QAC7B,eAAe,EAAE,MAAM,CAAC;QACxB,KAAK,EAAE,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;QACtD,qBAAqB,EAAE,MAAM,CAAC;QAC9B,uBAAuB,CAAC,EAAE,MAAM,CAAC;QACjC,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,MAAM,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;CACF;AAED,MAAM,WAAW,0CAA0C;IAC1D,QAAQ,EAAE,yBAAyB,CAAC;IACpC,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACtC,QAAQ,EAAE;QACT,QAAQ,EAAE,iCAAiC,CAAC;QAC5C,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,EAAE;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,gCAAgC,CAAA;SAAE,CAAC;KACxF,CAAC;CACF;AAYD,MAAM,MAAM,eAAe,GAAG,CAC7B,KAAK,EAAE,MAAM,GAAG,GAAG,GAAG,OAAO,EAC7B,IAAI,CAAC,EAAE,WAAW,GAAG;IAAE,GAAG,CAAC,EAAE;QAAE,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,KACvE,OAAO,CAAC,QAAQ,CAAC,CAAC;AAwXvB,wBAAgB,wCAAwC,CACvD,aAAa,EAAE,OAAO,EACtB,MAAM,EAAE,oBAAoB,GAC1B,4BAA4B,CA2uC9B;AAmCD,qBAAa,0CAA0C;IAErD,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;IAC3B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;gBAHX,OAAO,EAAE,YAAY,EACrB,UAAU,EAAE,4BAA4B,EACxC,SAAS,CAAC,EAAE,eAAe,YAAA,EAC3B,UAAU,CAAC,EAAE,4BAA4B,YAAA;IAG3D;;;OAGG;YACW,6BAA6B;IA8B3C;;;;;;OAMG;YACW,wBAAwB;IAOtC;;;;;OAKG;YACW,mBAAmB;IAuDjC;;;;OAIG;IACH,OAAO,CAAC,wBAAwB;YA2DlB,uBAAuB;IAM/B,iBAAiB,CAAC,KAAK,EAAE;QAC9B,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC;QACf,0BAA0B,EAAE,MAAM,EAAE,CAAC;KACrC,GAAG,OAAO,CAAC,sCAAsC,CAAC;IAY7C,sBAAsB,CAAC,KAAK,EAAE;QACnC,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC;QACf,0BAA0B,EAAE,MAAM,EAAE,CAAC;KACrC,GAAG,OAAO,CAAC,mCAAmC,EAAE,CAAC;IAe5C,wBAAwB,CAAC,KAAK,EAAE;QACrC,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,gBAAgB,EAAE,CAAC;QAC3B,0BAA0B,EAAE,MAAM,EAAE,CAAC;KACrC,GAAG,OAAO,CAAC,uCAAuC,CAAC;IAe9C,wBAAwB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKlE,OAAO,CAAC,oBAAoB;IAuB5B,IAAI,CACH,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,EAC1D,MAAM,EAAE,oBAAoB,GAC1B,4BAA4B;YAIjB,OAAO;YA0CP,eAAe;IA0TvB,SAAS,CACd,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,EAC1D,MAAM,EAAE,oBAAoB,GAC1B,OAAO,CAAC,4BAA4B,CAAC;IAMlC,sBAAsB,CAC3B,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,gDAAgD,CAAC,GACtE,OAAO,CAAC,2CAA2C,CAAC;IAwEjD,mBAAmB,CACxB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,gDAAgD,CAAC,GACtE,OAAO,CAAC,iCAAiC,CAAC;IA2CvC,gBAAgB,CACrB,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,EAC1D,MAAM,EAAE,oBAAoB,EAC5B,QAAQ,EAAE,4BAA4B,EAAE,GACtC,OAAO,CAAC,mCAAmC,CAAC;IAsDzC,sBAAsB,CAC3B,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,EAC1D,MAAM,EAAE,oBAAoB,GAC1B,OAAO,CAAC,0CAA0C,CAAC;IA0DhD,6BAA6B,CAClC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,EAC1D,MAAM,EAAE,oBAAoB,EAC5B,QAAQ,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAC5C,OAAO,CAAC,iDAAiD,CAAC;IAsGvD,qBAAqB,CAC1B,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,EAC1D,MAAM,EAAE,oBAAoB,GAC1B,OAAO,CAAC,wCAAwC,CAAC;IA2F9C,4BAA4B,CACjC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,EAC1D,MAAM,EAAE,oBAAoB,GAC1B,OAAO,CAAC,gDAAgD,CAAC;IAioBtD,KAAK,CACV,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,EAC1D,MAAM,EAAE,oBAAoB,GAC1B,OAAO,CAAC,4BAA4B,CAAC;IAgBxC;;;;;OAKG;IACG,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,0BAA0B,CAAC;IAiNpE,mBAAmB,CACxB,KAAK,EAAE,oCAAoC,GACzC,OAAO,CAAC,4BAA4B,CAAC;CA+KxC"}