@vibesdotdev/integrations-kubernetes 0.0.0-stage → 1.0.0-rc.0

package/dist/k8s-secret.js

@@ -0,0 +1,391 @@
+/**
+ * Kubernetes Secret Resource Providers
+ *
+ * Three providers in one file (they share kubectl plumbing):
+ *   - `k8s/secret`                  — Opaque secret from key/value pairs
+ *   - `k8s/secret-tls`              — kubernetes.io/tls secret from cert+key files
+ *   - `k8s/secret-docker-registry`  — kubernetes.io/dockerconfigjson secret
+ *
+ * Each replaces a slice of the prior bash-script `k8s/secret-setup` provider,
+ * which had a single readiness check ("any secret exists in namespace") that
+ * could not detect a silently-skipped TLS secret. These typed providers each
+ * verify their own secret by name (and by type, where it matters), so a
+ * partial failure surfaces at the resource that owns it.
+ */
+import { CapabilityError } from '@vibesdotdev/kernel';
+import * as z from 'zod/v4';
+import { readJsonObject, setupErrorResult, toolFailure, toolOutputExcerpt } from '@vibesdotdev/pm/resources/tool-env';
+import { runKubeCapture } from "./tool-env.js";
+import { attempt } from '@vibesdotdev/pm/utils/attempt';
+import { pmFileSystem } from '@vibesdotdev/pm/helpers/runtime-files';
+import { JsonObjectSchema } from '@vibesdotdev/kernel/schemas/json';
+const KUBECTL_REQUEST_TIMEOUT = '5s';
+/**
+ * Apply a Secret manifest on stdin. kubectl's rejection can echo the object it
+ * was handed, so its output reaches the failure only as a bounded excerpt with
+ * every `secrets` value (as given and base64) removed, or not at all
+ * (`'value-free'`) when the manifest holds values PM never saw.
+ */
+async function applyManifest(runtime, manifest, opts, secrets) {
+    const cmd = ['kubectl', 'apply', '-f', '-', '--namespace', opts.namespace];
+    if (opts.context)
+        cmd.push('--context', opts.context);
+    const outcome = await runKubeCapture(runtime, cmd[0], cmd.slice(1), { stdin: manifest });
+    if (outcome.exitCode !== 0) {
+        throw toolFailure({ tool: 'kubectl', action: 'apply', outcome, secrets });
+    }
+}
+/** Delete a secret by name; an absent secret is the goal, any other failure is typed. */
+async function deleteSecret(runtime, name, opts) {
+    const cmd = ['kubectl', 'delete', 'secret', name, '--namespace', opts.namespace, '--ignore-not-found=true'];
+    if (opts.context)
+        cmd.push('--context', opts.context);
+    const outcome = await runKubeCapture(runtime, cmd[0], cmd.slice(1));
+    if (outcome.exitCode !== 0)
+        throw toolFailure({ tool: 'kubectl', action: 'delete secret', outcome });
+}
+async function generateManifest(runtime, createArgs, opts) {
+    const cmd = ['kubectl', 'create', ...createArgs, '--namespace', opts.namespace];
+    if (opts.context)
+        cmd.push('--context', opts.context);
+    cmd.push('--dry-run=client', '-o', 'yaml');
+    const outcome = await runKubeCapture(runtime, cmd[0], cmd.slice(1));
+    if (outcome.exitCode !== 0) {
+        // The generator read the key material from files: none of its output is kept.
+        throw toolFailure({ tool: 'kubectl', action: 'create --dry-run', outcome, secrets: 'value-free' });
+    }
+    return outcome.stdout;
+}
+/** `value`'s UTF-8 bytes as base64 (a Secret's `data` encoding). */
+function base64Utf8(value) {
+    let binary = '';
+    for (const byte of new TextEncoder().encode(value))
+        binary += String.fromCharCode(byte);
+    return btoa(binary);
+}
+/**
+ * A Secret manifest built in-process and handed to `kubectl apply -f -` on
+ * stdin. Secret values never go on a command line, where every process on the
+ * host can read them (pm.md R2); kubectl's own `create --dry-run` generator
+ * takes them only as argv, so it is not used for literal values.
+ */
+export function buildSecretManifest(name, namespace, type, stringData) {
+    const data = Object.fromEntries(Object.entries(stringData).map(([key, value]) => [key, base64Utf8(value)]));
+    return JSON.stringify({ apiVersion: 'v1', kind: 'Secret', metadata: { name, namespace }, type, data });
+}
+/** The `.dockerconfigjson` payload `kubectl create secret docker-registry` writes. */
+export function dockerConfigJson(server, username, password, email) {
+    const auth = base64Utf8(`${username}:${password}`);
+    return JSON.stringify({ auths: { [server]: { username, password, email, auth } } });
+}
+const SecretObjectSchema = z.object({ type: z.string().optional(), data: JsonObjectSchema.optional() });
+async function inspectSecret(runtime, name, opts) {
+    const cmd = [
+        'kubectl',
+        'get',
+        'secret',
+        name,
+        '--namespace',
+        opts.namespace,
+        '--request-timeout',
+        KUBECTL_REQUEST_TIMEOUT,
+        '-o',
+        'json'
+    ];
+    if (opts.context)
+        cmd.push('--context', opts.context);
+    const { exitCode, stdout, stderr } = await runKubeCapture(runtime, cmd[0], cmd.slice(1));
+    if (exitCode !== 0) {
+        if (stderr.includes('NotFound') || stderr.includes('not found')) {
+            return { exists: false, dataKeys: [] };
+        }
+        return { exists: false, dataKeys: [], error: toolOutputExcerpt(stderr) };
+    }
+    // The object kubectl printed carries the secret's data: only its type and key names are read.
+    const object = readJsonObject(SecretObjectSchema, stdout);
+    if (!object) {
+        return { exists: false, dataKeys: [], error: `kubectl get secret ${name} answered an unreadable object` };
+    }
+    return { exists: true, type: object.type, dataKeys: Object.keys(object.data ?? {}) };
+}
+function readyState(config, metadata) {
+    return {
+        state: {
+            id: config.id,
+            type: config.type,
+            status: 'ready',
+            createdAt: new Date(),
+            lastChecked: new Date(),
+            metadata
+        }
+    };
+}
+// ──────────────────────────────────────────────────────────────────────────
+// k8s/secret — Opaque secret from key/value pairs (manifest on stdin)
+// ──────────────────────────────────────────────────────────────────────────
+const SecretConfigSchema = z.object({
+    name: z.string().min(1),
+    namespace: z.string().min(1),
+    context: z.string().optional(),
+    data: z.record(z.string().min(1), z.string()).refine((d) => Object.keys(d).length > 0, {
+        message: 'data must contain at least one key/value pair'
+    })
+});
+/** The refusal for a secret whose post-apply check failed: what is wrong, and where. */
+function secretCheckFailed(message, reason, name, namespace) {
+    return new CapabilityError(message, 'UNAVAILABLE', { reason, retryable: true, details: { name, namespace } });
+}
+/** Apply the Opaque secret manifest on stdin, then verify the secret is visible with every declared key. */
+async function applyOpaqueSecret(runtime, config, cfg) {
+    const manifest = buildSecretManifest(cfg.name, cfg.namespace, 'Opaque', cfg.data);
+    await applyManifest(runtime, manifest, cfg, Object.values(cfg.data));
+    // Verify post-apply: the secret exists with the expected keys.
+    const info = await inspectSecret(runtime, cfg.name, cfg);
+    if (!info.exists) {
+        throw secretCheckFailed(`Secret '${cfg.name}' was applied but is not visible to kubectl get`, 'pm-secret-not-visible', cfg.name, cfg.namespace);
+    }
+    const expected = new Set(Object.keys(cfg.data));
+    const missing = [...expected].filter((k) => !info.dataKeys.includes(k));
+    if (missing.length > 0) {
+        throw secretCheckFailed(`Secret '${cfg.name}' is missing expected keys: ${missing.join(', ')}`, 'pm-secret-keys-missing', cfg.name, cfg.namespace);
+    }
+    return readyState(config, {
+        name: cfg.name,
+        namespace: cfg.namespace,
+        keys: info.dataKeys
+    });
+}
+export const k8sSecretProvider = {
+    type: 'k8s/secret',
+    async setup(config, { runtime }) {
+        const cfg = SecretConfigSchema.parse(config.config);
+        const applied = await attempt(() => applyOpaqueSecret(runtime, config, cfg));
+        return applied.ok ? applied.value : setupErrorResult(config, applied.failure);
+    },
+    async teardown(id, _state, { runtime, config: providerConfig }) {
+        const stored = providerConfig;
+        if (!stored)
+            return;
+        const cfg = SecretConfigSchema.parse(stored.config);
+        await deleteSecret(runtime, cfg.name, cfg);
+    },
+    async status(id, { runtime, config: providerConfig }) {
+        const stored = providerConfig;
+        if (!stored)
+            return { status: 'missing' };
+        const cfg = SecretConfigSchema.parse(stored.config);
+        const info = await inspectSecret(runtime, cfg.name, cfg);
+        if (info.error)
+            return { status: 'error', error: info.error };
+        if (!info.exists)
+            return { status: 'missing' };
+        const expected = Object.keys(cfg.data);
+        const missing = expected.filter((k) => !info.dataKeys.includes(k));
+        if (missing.length > 0) {
+            return {
+                status: 'error',
+                error: `Secret exists but is missing keys: ${missing.join(', ')}`
+            };
+        }
+        return { status: 'ready', metadata: { keys: info.dataKeys } };
+    },
+    async checkReady(config, _state, { runtime }) {
+        const cfg = SecretConfigSchema.parse(config.config);
+        const info = await inspectSecret(runtime, cfg.name, cfg);
+        if (!info.exists) {
+            return { ready: false, reason: `Secret '${cfg.name}' not found in ${cfg.namespace}` };
+        }
+        const missing = Object.keys(cfg.data).filter((k) => !info.dataKeys.includes(k));
+        if (missing.length > 0) {
+            return { ready: false, reason: `Secret missing keys: ${missing.join(', ')}` };
+        }
+        return { ready: true };
+    },
+    validateConfig(config) {
+        return SecretConfigSchema.parse(config);
+    },
+    describe(config) {
+        const cfg = SecretConfigSchema.parse(config.config);
+        return `k8s Opaque secret '${cfg.name}' in ${cfg.namespace}`;
+    }
+};
+// ──────────────────────────────────────────────────────────────────────────
+// k8s/secret-tls — kubernetes.io/tls from cert + key files
+// ──────────────────────────────────────────────────────────────────────────
+const TlsSecretConfigSchema = z.object({
+    name: z.string().min(1),
+    namespace: z.string().min(1),
+    context: z.string().optional(),
+    certPath: z.string().min(1),
+    keyPath: z.string().min(1)
+});
+/** Generate the TLS secret manifest from the cert and key files, apply it, then verify the secret and its type. */
+async function applyTlsSecret(runtime, config, cfg) {
+    const files = await pmFileSystem(runtime);
+    if (!(await files.exists(cfg.certPath))) {
+        throw new CapabilityError(`Cert file not found: ${cfg.certPath}`, 'NOT_FOUND', {
+            reason: 'pm-secret-tls-cert-missing',
+            details: { path: cfg.certPath }
+        });
+    }
+    if (!(await files.exists(cfg.keyPath))) {
+        throw new CapabilityError(`Key file not found: ${cfg.keyPath}`, 'NOT_FOUND', {
+            reason: 'pm-secret-tls-key-missing',
+            details: { path: cfg.keyPath }
+        });
+    }
+    const args = ['secret', 'tls', cfg.name, `--cert=${cfg.certPath}`, `--key=${cfg.keyPath}`];
+    const manifest = await generateManifest(runtime, args, cfg);
+    await applyManifest(runtime, manifest, cfg, 'value-free');
+    const info = await inspectSecret(runtime, cfg.name, cfg);
+    if (!info.exists) {
+        throw secretCheckFailed(`TLS secret '${cfg.name}' was applied but is not visible`, 'pm-secret-not-visible', cfg.name, cfg.namespace);
+    }
+    if (info.type !== 'kubernetes.io/tls') {
+        throw secretCheckFailed(`TLS secret '${cfg.name}' has unexpected type '${info.type}' (want kubernetes.io/tls)`, 'pm-secret-type-mismatch', cfg.name, cfg.namespace);
+    }
+    return readyState(config, {
+        name: cfg.name,
+        namespace: cfg.namespace,
+        certPath: cfg.certPath,
+        keyPath: cfg.keyPath
+    });
+}
+export const k8sSecretTlsProvider = {
+    type: 'k8s/secret-tls',
+    async setup(config, { runtime }) {
+        const cfg = TlsSecretConfigSchema.parse(config.config);
+        const applied = await attempt(() => applyTlsSecret(runtime, config, cfg));
+        return applied.ok ? applied.value : setupErrorResult(config, applied.failure);
+    },
+    async teardown(id, _state, { runtime, config: providerConfig }) {
+        const stored = providerConfig;
+        if (!stored)
+            return;
+        const cfg = TlsSecretConfigSchema.parse(stored.config);
+        await deleteSecret(runtime, cfg.name, cfg);
+    },
+    async status(id, { runtime, config: providerConfig }) {
+        const stored = providerConfig;
+        if (!stored)
+            return { status: 'missing' };
+        const cfg = TlsSecretConfigSchema.parse(stored.config);
+        const info = await inspectSecret(runtime, cfg.name, cfg);
+        if (info.error)
+            return { status: 'error', error: info.error };
+        if (!info.exists)
+            return { status: 'missing' };
+        if (info.type !== 'kubernetes.io/tls') {
+            return {
+                status: 'error',
+                error: `Secret exists but has type '${info.type}' (want kubernetes.io/tls)`
+            };
+        }
+        return { status: 'ready', metadata: { type: info.type } };
+    },
+    async checkReady(config, _state, { runtime }) {
+        const cfg = TlsSecretConfigSchema.parse(config.config);
+        const info = await inspectSecret(runtime, cfg.name, cfg);
+        if (!info.exists) {
+            return { ready: false, reason: `TLS secret '${cfg.name}' not found in ${cfg.namespace}` };
+        }
+        if (info.type !== 'kubernetes.io/tls') {
+            return {
+                ready: false,
+                reason: `Secret has wrong type '${info.type}' (want kubernetes.io/tls)`
+            };
+        }
+        return { ready: true };
+    },
+    validateConfig(config) {
+        return TlsSecretConfigSchema.parse(config);
+    },
+    describe(config) {
+        const cfg = TlsSecretConfigSchema.parse(config.config);
+        return `k8s TLS secret '${cfg.name}' in ${cfg.namespace}`;
+    }
+};
+// ──────────────────────────────────────────────────────────────────────────
+// k8s/secret-docker-registry — kubernetes.io/dockerconfigjson
+// ──────────────────────────────────────────────────────────────────────────
+const DockerRegistryConfigSchema = z.object({
+    name: z.string().min(1),
+    namespace: z.string().min(1),
+    context: z.string().optional(),
+    server: z.string().min(1),
+    username: z.string().min(1),
+    password: z.string().min(1),
+    email: z.string().min(1)
+});
+/** Apply the docker-registry secret manifest on stdin, then verify the secret and its type. */
+async function applyRegistrySecret(runtime, config, cfg) {
+    const dockerConfig = dockerConfigJson(cfg.server, cfg.username, cfg.password, cfg.email);
+    const manifest = buildSecretManifest(cfg.name, cfg.namespace, 'kubernetes.io/dockerconfigjson', {
+        '.dockerconfigjson': dockerConfig
+    });
+    await applyManifest(runtime, manifest, cfg, [cfg.password, dockerConfig, base64Utf8(`${cfg.username}:${cfg.password}`)]);
+    const info = await inspectSecret(runtime, cfg.name, cfg);
+    if (!info.exists) {
+        throw secretCheckFailed(`Registry secret '${cfg.name}' was applied but is not visible`, 'pm-secret-not-visible', cfg.name, cfg.namespace);
+    }
+    if (info.type !== 'kubernetes.io/dockerconfigjson') {
+        throw secretCheckFailed(`Registry secret '${cfg.name}' has unexpected type '${info.type}' (want kubernetes.io/dockerconfigjson)`, 'pm-secret-type-mismatch', cfg.name, cfg.namespace);
+    }
+    return readyState(config, {
+        name: cfg.name,
+        namespace: cfg.namespace,
+        server: cfg.server
+    });
+}
+export const k8sSecretDockerRegistryProvider = {
+    type: 'k8s/secret-docker-registry',
+    async setup(config, { runtime }) {
+        const cfg = DockerRegistryConfigSchema.parse(config.config);
+        const applied = await attempt(() => applyRegistrySecret(runtime, config, cfg));
+        return applied.ok ? applied.value : setupErrorResult(config, applied.failure);
+    },
+    async teardown(id, _state, { runtime, config: providerConfig }) {
+        const stored = providerConfig;
+        if (!stored)
+            return;
+        const cfg = DockerRegistryConfigSchema.parse(stored.config);
+        await deleteSecret(runtime, cfg.name, cfg);
+    },
+    async status(id, { runtime, config: providerConfig }) {
+        const stored = providerConfig;
+        if (!stored)
+            return { status: 'missing' };
+        const cfg = DockerRegistryConfigSchema.parse(stored.config);
+        const info = await inspectSecret(runtime, cfg.name, cfg);
+        if (info.error)
+            return { status: 'error', error: info.error };
+        if (!info.exists)
+            return { status: 'missing' };
+        if (info.type !== 'kubernetes.io/dockerconfigjson') {
+            return {
+                status: 'error',
+                error: `Secret exists but has type '${info.type}' (want kubernetes.io/dockerconfigjson)`
+            };
+        }
+        return { status: 'ready', metadata: { type: info.type } };
+    },
+    async checkReady(config, _state, { runtime }) {
+        const cfg = DockerRegistryConfigSchema.parse(config.config);
+        const info = await inspectSecret(runtime, cfg.name, cfg);
+        if (!info.exists) {
+            return {
+                ready: false,
+                reason: `Registry secret '${cfg.name}' not found in ${cfg.namespace}`
+            };
+        }
+        return { ready: true };
+    },
+    validateConfig(config) {
+        return DockerRegistryConfigSchema.parse(config);
+    },
+    describe(config) {
+        const cfg = DockerRegistryConfigSchema.parse(config.config);
+        return `k8s docker-registry secret '${cfg.name}' in ${cfg.namespace}`;
+    }
+};
+//# sourceMappingURL=k8s-secret.js.map

package/dist/k8s-secret.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"k8s-secret.js","sourceRoot":"","sources":["../src/k8s-secret.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,eAAe,EAAmB,MAAM,qBAAqB,CAAC;AACvE,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAQ5B,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACtH,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/C,OAAO,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAEpE,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAWrC;;;;;GAKG;AACH,KAAK,UAAU,aAAa,CAC3B,OAAmB,EACnB,QAAgB,EAChB,IAAiB,EACjB,OAAyC;IAEzC,MAAM,GAAG,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAC3E,IAAI,IAAI,CAAC,OAAO;QAAE,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAEtD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC1F,IAAI,OAAO,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,WAAW,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAC3E,CAAC;AACF,CAAC;AAED,yFAAyF;AACzF,KAAK,UAAU,YAAY,CAAC,OAAmB,EAAE,IAAY,EAAE,IAAiB;IAC/E,MAAM,GAAG,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,SAAS,EAAE,yBAAyB,CAAC,CAAC;IAC5G,IAAI,IAAI,CAAC,OAAO;QAAE,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,IAAI,OAAO,CAAC,QAAQ,KAAK,CAAC;QAAE,MAAM,WAAW,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,CAAC;AACtG,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,OAAmB,EAAE,UAAoB,EAAE,IAAiB;IAC3F,MAAM,GAAG,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,UAAU,EAAE,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAChF,IAAI,IAAI,CAAC,OAAO;QAAE,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACtD,GAAG,CAAC,IAAI,CAAC,kBAAkB,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAE3C,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,IAAI,OAAO,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QAC5B,8EAA8E;QAC9E,MAAM,WAAW,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;IACpG,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,CAAC;AACvB,CAAC;AAED,oEAAoE;AACpE,SAAS,UAAU,CAAC,KAAa;IAChC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACxF,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;AACrB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAClC,IAAY,EACZ,SAAiB,EACjB,IAAiD,EACjD,UAAkC;IAElC,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAC9B,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAC1E,CAAC;IACF,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;AACxG,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,gBAAgB,CAAC,MAAc,EAAE,QAAgB,EAAE,QAAgB,EAAE,KAAa;IACjG,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,QAAQ,IAAI,QAAQ,EAAE,CAAC,CAAC;IACnD,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;AACrF,CAAC;AAED,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,gBAAgB,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AASxG,KAAK,UAAU,aAAa,CAAC,OAAmB,EAAE,IAAY,EAAE,IAAiB;IAChF,MAAM,GAAG,GAAG;QACX,SAAS;QACT,KAAK;QACL,QAAQ;QACR,IAAI;QACJ,aAAa;QACb,IAAI,CAAC,SAAS;QACd,mBAAmB;QACnB,uBAAuB;QACvB,IAAI;QACJ,MAAM;KACN,CAAC;IACF,IAAI,IAAI,CAAC,OAAO;QAAE,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAEtD,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAE1F,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;QACpB,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACjE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QACxC,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;IAC1E,CAAC;IAED,8FAA8F;IAC9F,MAAM,MAAM,GAAG,cAAc,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;IAC1D,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,sBAAsB,IAAI,gCAAgC,EAAE,CAAC;IAC3G,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;AACtF,CAAC;AAED,SAAS,UAAU,CAAC,MAAsB,EAAE,QAAyB;IACpE,OAAO;QACN,KAAK,EAAE;YACN,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,MAAM,EAAE,OAAO;YACf,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,WAAW,EAAE,IAAI,IAAI,EAAE;YACvB,QAAQ;SACR;KACD,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,sEAAsE;AACtE,6EAA6E;AAE7E,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE;QACtF,OAAO,EAAE,+CAA+C;KACxD,CAAC;CACF,CAAC,CAAC;AAIH,wFAAwF;AACxF,SAAS,iBAAiB,CAAC,OAAe,EAAE,MAAc,EAAE,IAAY,EAAE,SAAiB;IAC1F,OAAO,IAAI,eAAe,CAAC,OAAO,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;AAC/G,CAAC;AAED,4GAA4G;AAC5G,KAAK,UAAU,iBAAiB,CAAC,OAAmB,EAAE,MAAsB,EAAE,GAAiB;IAC9F,MAAM,QAAQ,GAAG,mBAAmB,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IAClF,MAAM,aAAa,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAErE,+DAA+D;IAC/D,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACzD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,iBAAiB,CAAC,WAAW,GAAG,CAAC,IAAI,iDAAiD,EAAE,uBAAuB,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IACjJ,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACxE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,iBAAiB,CAAC,WAAW,GAAG,CAAC,IAAI,+BAA+B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,wBAAwB,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IACpJ,CAAC;IAED,OAAO,UAAU,CAAC,MAAM,EAAE;QACzB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,IAAI,EAAE,IAAI,CAAC,QAAQ;KACnB,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAmC;IAChE,IAAI,EAAE,YAAY;IAElB,KAAK,CAAC,KAAK,CAAC,MAAsB,EAAE,EAAE,OAAO,EAA2B;QACvE,MAAM,GAAG,GAAG,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;QAC7E,OAAO,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/E,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,EAAU,EAAE,MAAiC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAA2B;QACzH,MAAM,MAAM,GAAG,cAAc,CAAC;QAC9B,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,MAAM,GAAG,GAAG,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACpD,MAAM,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAA2B;QACpF,MAAM,MAAM,GAAG,cAAc,CAAC;QAC9B,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC1C,MAAM,GAAG,GAAG,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACpD,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACzD,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9D,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC/C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACnE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO;gBACN,MAAM,EAAE,OAAO;gBACf,KAAK,EAAE,sCAAsC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aACjE,CAAC;QACH,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;IAC/D,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAsB,EAAE,MAAqB,EAAE,EAAE,OAAO,EAA2B;QACnG,MAAM,GAAG,GAAG,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACpD,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAClB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,GAAG,CAAC,IAAI,kBAAkB,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC;QACvF,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAChF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QAC/E,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACxB,CAAC;IAED,cAAc,CAAC,MAAuB;QACrC,OAAO,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC;IAED,QAAQ,CAAC,MAAsB;QAC9B,MAAM,GAAG,GAAG,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACpD,OAAO,sBAAsB,GAAG,CAAC,IAAI,QAAQ,GAAG,CAAC,SAAS,EAAE,CAAC;IAC9D,CAAC;CACD,CAAC;AAEF,6EAA6E;AAC7E,2DAA2D;AAC3D,6EAA6E;AAE7E,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC1B,CAAC,CAAC;AAIH,mHAAmH;AACnH,KAAK,UAAU,cAAc,CAAC,OAAmB,EAAE,MAAsB,EAAE,GAAoB;IAC9F,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,eAAe,CAAC,wBAAwB,GAAG,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE;YAC9E,MAAM,EAAE,4BAA4B;YACpC,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE;SAC/B,CAAC,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,eAAe,CAAC,uBAAuB,GAAG,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE;YAC5E,MAAM,EAAE,2BAA2B;YACnC,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE;SAC9B,CAAC,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,UAAU,GAAG,CAAC,QAAQ,EAAE,EAAE,SAAS,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3F,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IAC5D,MAAM,aAAa,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC;IAE1D,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACzD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,iBAAiB,CAAC,eAAe,GAAG,CAAC,IAAI,kCAAkC,EAAE,uBAAuB,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IACtI,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;QACvC,MAAM,iBAAiB,CACtB,eAAe,GAAG,CAAC,IAAI,0BAA0B,IAAI,CAAC,IAAI,4BAA4B,EACtF,yBAAyB,EACzB,GAAG,CAAC,IAAI,EACR,GAAG,CAAC,SAAS,CACb,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAC,MAAM,EAAE;QACzB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,OAAO,EAAE,GAAG,CAAC,OAAO;KACpB,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAsC;IACtE,IAAI,EAAE,gBAAgB;IAEtB,KAAK,CAAC,KAAK,CAAC,MAAsB,EAAE,EAAE,OAAO,EAA2B;QACvE,MAAM,GAAG,GAAG,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;QAC1E,OAAO,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/E,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,EAAU,EAAE,MAAiC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAA2B;QACzH,MAAM,MAAM,GAAG,cAAc,CAAC;QAC9B,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,MAAM,GAAG,GAAG,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACvD,MAAM,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAA2B;QACpF,MAAM,MAAM,GAAG,cAAc,CAAC;QAC9B,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC1C,MAAM,GAAG,GAAG,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACvD,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACzD,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9D,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC/C,IAAI,IAAI,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;YACvC,OAAO;gBACN,MAAM,EAAE,OAAO;gBACf,KAAK,EAAE,+BAA+B,IAAI,CAAC,IAAI,4BAA4B;aAC3E,CAAC;QACH,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAsB,EAAE,MAAqB,EAAE,EAAE,OAAO,EAA2B;QACnG,MAAM,GAAG,GAAG,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACvD,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAClB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,GAAG,CAAC,IAAI,kBAAkB,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC;QAC3F,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;YACvC,OAAO;gBACN,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,0BAA0B,IAAI,CAAC,IAAI,4BAA4B;aACvE,CAAC;QACH,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACxB,CAAC;IAED,cAAc,CAAC,MAAuB;QACrC,OAAO,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC;IAED,QAAQ,CAAC,MAAsB;QAC9B,MAAM,GAAG,GAAG,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACvD,OAAO,mBAAmB,GAAG,CAAC,IAAI,QAAQ,GAAG,CAAC,SAAS,EAAE,CAAC;IAC3D,CAAC;CACD,CAAC;AAEF,6EAA6E;AAC7E,8DAA8D;AAC9D,6EAA6E;AAE7E,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACxB,CAAC,CAAC;AAIH,+FAA+F;AAC/F,KAAK,UAAU,mBAAmB,CACjC,OAAmB,EACnB,MAAsB,EACtB,GAAyB;IAEzB,MAAM,YAAY,GAAG,gBAAgB,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;IACzF,MAAM,QAAQ,GAAG,mBAAmB,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,SAAS,EAAE,gCAAgC,EAAE;QAC/F,mBAAmB,EAAE,YAAY;KACjC,CAAC,CAAC;IACH,MAAM,aAAa,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE,UAAU,CAAC,GAAG,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;IAEzH,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACzD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,iBAAiB,CAAC,oBAAoB,GAAG,CAAC,IAAI,kCAAkC,EAAE,uBAAuB,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IAC3I,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,gCAAgC,EAAE,CAAC;QACpD,MAAM,iBAAiB,CACtB,oBAAoB,GAAG,CAAC,IAAI,0BAA0B,IAAI,CAAC,IAAI,yCAAyC,EACxG,yBAAyB,EACzB,GAAG,CAAC,IAAI,EACR,GAAG,CAAC,SAAS,CACb,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAC,MAAM,EAAE;QACzB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,MAAM,EAAE,GAAG,CAAC,MAAM;KAClB,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,+BAA+B,GAA2C;IACtF,IAAI,EAAE,4BAA4B;IAElC,KAAK,CAAC,KAAK,CAAC,MAAsB,EAAE,EAAE,OAAO,EAA2B;QACvE,MAAM,GAAG,GAAG,0BAA0B,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5D,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;QAC/E,OAAO,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/E,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,EAAU,EAAE,MAAiC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAA2B;QACzH,MAAM,MAAM,GAAG,cAAc,CAAC;QAC9B,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,MAAM,GAAG,GAAG,0BAA0B,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5D,MAAM,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAA2B;QACpF,MAAM,MAAM,GAAG,cAAc,CAAC;QAC9B,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC1C,MAAM,GAAG,GAAG,0BAA0B,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACzD,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9D,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC/C,IAAI,IAAI,CAAC,IAAI,KAAK,gCAAgC,EAAE,CAAC;YACpD,OAAO;gBACN,MAAM,EAAE,OAAO;gBACf,KAAK,EAAE,+BAA+B,IAAI,CAAC,IAAI,yCAAyC;aACxF,CAAC;QACH,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAsB,EAAE,MAAqB,EAAE,EAAE,OAAO,EAA2B;QACnG,MAAM,GAAG,GAAG,0BAA0B,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAClB,OAAO;gBACN,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,oBAAoB,GAAG,CAAC,IAAI,kBAAkB,GAAG,CAAC,SAAS,EAAE;aACrE,CAAC;QACH,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACxB,CAAC;IAED,cAAc,CAAC,MAAuB;QACrC,OAAO,0BAA0B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjD,CAAC;IAED,QAAQ,CAAC,MAAsB;QAC9B,MAAM,GAAG,GAAG,0BAA0B,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5D,OAAO,+BAA+B,GAAG,CAAC,IAAI,QAAQ,GAAG,CAAC,SAAS,EAAE,CAAC;IACvE,CAAC;CACD,CAAC"}

package/dist/kind-cluster.d.ts

@@ -0,0 +1,84 @@
+/**
+ * Kind Cluster Resource Provider
+ * Manages Kind (Kubernetes in Docker) cluster lifecycle including local registry
+ *
+ * Handles:
+ * - Cluster creation with local registry
+ * - Orphaned registry detection and cleanup
+ * - Cluster recovery (restart vs recreate)
+ * - Full lifecycle management
+ */
+import type { ResourceProviderRuntime } from '@vibesdotdev/pm/resources/provider';
+import * as z from 'zod/v4';
+import type { ResourceProvider, ResourceProviderContext, ResourceSetupResult, ResourceStatusResult, ResourceReadyCheckResult } from '@vibesdotdev/pm/resources/provider';
+import type { ProviderPayload, ResourceConfig, ResourceState } from '@vibesdotdev/pm/schemas/resource';
+/**
+ * Kind cluster provider configuration schema
+ */
+declare const KindClusterConfigSchema: z.ZodObject<{
+    name: z.ZodOptional<z.ZodString>;
+    registry: z.ZodDefault<z.ZodBoolean>;
+    registryPort: z.ZodDefault<z.ZodNumber>;
+    registryName: z.ZodDefault<z.ZodString>;
+    configFile: z.ZodOptional<z.ZodString>;
+    nodeImage: z.ZodOptional<z.ZodString>;
+    waitTimeout: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strip>;
+type KindClusterConfig = z.infer<typeof KindClusterConfigSchema>;
+/**
+ * List PersistentVolumeClaims in the cluster whose underlying storage
+ * would be lost on `kind delete cluster`. By default, kind uses the
+ * local-path-provisioner which writes data into the kind container's
+ * filesystem — NOT a host bind mount — so PVCs are destroyed with the
+ * cluster. Returns a list of `<namespace>/<name>` strings.
+ *
+ * Returns an empty list when kubectl is unavailable, the context doesn't
+ * exist, or there are no PVCs — the recreate command treats that as
+ * "no stateful data at risk".
+ */
+export declare function listAtRiskPVCs(runtime: ResourceProviderRuntime, clusterName: string): Promise<string[]>;
+/**
+ * Kind Cluster Provider
+ * Creates and manages Kind clusters with local registry support
+ */
+export declare class KindClusterProvider implements ResourceProvider<KindClusterConfig> {
+    readonly type = "kind";
+    readonly subType = "cluster";
+    private readonly configStore;
+    /**
+     * Setup (create or ensure) a kind cluster
+     */
+    setup(config: ResourceConfig, { runtime }: ResourceProviderContext): Promise<ResourceSetupResult>;
+    /**
+     * Create success result
+     */
+    private createSuccessResult;
+    /**
+     * Teardown (delete) cluster and registry
+     */
+    teardown(id: string, state: ResourceState | undefined, { runtime }: ResourceProviderContext): Promise<void>;
+    /**
+     * Get status of cluster
+     */
+    status(id: string, { runtime }: ResourceProviderContext): Promise<ResourceStatusResult>;
+    /**
+     * Check if cluster is ready
+     */
+    checkReady(config: ResourceConfig, _state: ResourceState, { runtime }: ResourceProviderContext): Promise<ResourceReadyCheckResult>;
+    /**
+     * Validate provider-specific configuration
+     */
+    validateConfig(config: ProviderPayload): KindClusterConfig;
+    /**
+     * Get human-readable description
+     */
+    describe(config: ResourceConfig): string;
+    /**
+     * Data a `kind delete cluster` would destroy: the cluster's PVCs on
+     * kind's default local-path provisioner (see {@link listAtRiskPVCs}).
+     */
+    listAtRiskData(config: ResourceConfig, { runtime }: ResourceProviderContext): Promise<string[]>;
+    computeSourceHash(config: ResourceConfig, { runtime }: ResourceProviderContext): Promise<string | null>;
+}
+export {};
+//# sourceMappingURL=kind-cluster.d.ts.map

package/dist/kind-cluster.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kind-cluster.d.ts","sourceRoot":"","sources":["../src/kind-cluster.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAClF,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,KAAK,EACX,gBAAgB,EAChB,uBAAuB,EACvB,mBAAmB,EACnB,oBAAoB,EACpB,wBAAwB,EACxB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AAUvG;;GAEG;AACH,QAAA,MAAM,uBAAuB;;;;;;;;iBAe3B,CAAC;AAEH,KAAK,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAuVjE;;;;;;;;;;GAUG;AACH,wBAAsB,cAAc,CAAC,OAAO,EAAE,uBAAuB,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAwC7G;AA+HD;;;GAGG;AACH,qBAAa,mBAAoB,YAAW,gBAAgB,CAAC,iBAAiB,CAAC;IAC9E,QAAQ,CAAC,IAAI,UAAU;IACvB,QAAQ,CAAC,OAAO,aAAa;IAC7B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAqC;IAEjE;;OAEG;IACG,KAAK,CAAC,MAAM,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,EAAE,uBAAuB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAyDvG;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAsC3B;;OAEG;IACG,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,SAAS,EAAE,EAAE,OAAO,EAAE,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC;IA2BjH;;OAEG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,uBAAuB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA0B7F;;OAEG;IACG,UAAU,CAAC,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,OAAO,EAAE,EAAE,uBAAuB,GAAG,OAAO,CAAC,wBAAwB,CAAC;IA2BxI;;OAEG;IACH,cAAc,CAAC,MAAM,EAAE,eAAe,GAAG,iBAAiB;IAI1D;;OAEG;IACH,QAAQ,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM;IASxC;;;OAGG;IACG,cAAc,CAAC,MAAM,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,EAAE,uBAAuB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAK/F,iBAAiB,CAAC,MAAM,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,EAAE,uBAAuB,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;CAwB7G"}