@xemahq/xema 0.13.0 → 0.15.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +90 -21
- package/dist/assets/appliance-base/distribution.lock.json +5144 -0
- package/dist/assets/appliance-base/images.lock.json +1706 -0
- package/dist/assets/appliance-lean/distribution.lock.json +2888 -0
- package/dist/assets/appliance-lean/images.lock.json +1229 -0
- package/dist/assets/boot-graph.json +380 -28
- package/dist/assets/cloud/distribution.lock.json +5278 -0
- package/dist/assets/cloud/images.lock.json +1713 -0
- package/dist/assets/core/distribution.lock.json +2401 -354
- package/dist/assets/core/images.lock.json +1208 -268
- package/dist/assets/distribution-assets.manifest.json +147 -0
- package/dist/assets/keycloak/realm-xema.json +412 -0
- package/dist/assets/minimal/distribution.lock.json +2710 -0
- package/dist/assets/minimal/images.lock.json +1149 -0
- package/dist/assets/oss/distribution.lock.json +3742 -494
- package/dist/assets/oss/images.lock.json +1591 -472
- package/dist/assets/starter/distribution.lock.json +3422 -0
- package/dist/assets/starter/images.lock.json +1404 -0
- package/dist/cli.d.ts.map +1 -1
- package/dist/cli.js +40 -1
- package/dist/cli.js.map +1 -1
- package/dist/commands/apply.d.ts.map +1 -1
- package/dist/commands/apply.js +2 -2
- package/dist/commands/apply.js.map +1 -1
- package/dist/commands/biome-dev.d.ts +3 -0
- package/dist/commands/biome-dev.d.ts.map +1 -0
- package/dist/commands/biome-dev.js +176 -0
- package/dist/commands/biome-dev.js.map +1 -0
- package/dist/commands/biome-validate.d.ts +10 -0
- package/dist/commands/biome-validate.d.ts.map +1 -0
- package/dist/commands/biome-validate.js +49 -0
- package/dist/commands/biome-validate.js.map +1 -0
- package/dist/commands/biome.d.ts.map +1 -1
- package/dist/commands/biome.js +437 -26
- package/dist/commands/biome.js.map +1 -1
- package/dist/commands/canopy.d.ts +3 -0
- package/dist/commands/canopy.d.ts.map +1 -0
- package/dist/commands/canopy.js +214 -0
- package/dist/commands/canopy.js.map +1 -0
- package/dist/commands/config.d.ts +3 -0
- package/dist/commands/config.d.ts.map +1 -0
- package/dist/commands/config.js +78 -0
- package/dist/commands/config.js.map +1 -0
- package/dist/commands/dev.d.ts.map +1 -1
- package/dist/commands/dev.js +92 -20
- package/dist/commands/dev.js.map +1 -1
- package/dist/commands/dist.d.ts +13 -0
- package/dist/commands/dist.d.ts.map +1 -1
- package/dist/commands/dist.js +51 -11
- package/dist/commands/dist.js.map +1 -1
- package/dist/commands/doctor.d.ts +25 -0
- package/dist/commands/doctor.d.ts.map +1 -1
- package/dist/commands/doctor.js +422 -18
- package/dist/commands/doctor.js.map +1 -1
- package/dist/commands/down.d.ts +10 -0
- package/dist/commands/down.d.ts.map +1 -1
- package/dist/commands/down.js +107 -33
- package/dist/commands/down.js.map +1 -1
- package/dist/commands/export.js +1 -1
- package/dist/commands/export.js.map +1 -1
- package/dist/commands/import.d.ts.map +1 -1
- package/dist/commands/import.js +2 -2
- package/dist/commands/import.js.map +1 -1
- package/dist/commands/init.d.ts.map +1 -1
- package/dist/commands/init.js +56 -3
- package/dist/commands/init.js.map +1 -1
- package/dist/commands/installation.d.ts +3 -0
- package/dist/commands/installation.d.ts.map +1 -0
- package/dist/commands/installation.js +258 -0
- package/dist/commands/installation.js.map +1 -0
- package/dist/commands/license.d.ts +3 -0
- package/dist/commands/license.d.ts.map +1 -0
- package/dist/commands/license.js +97 -0
- package/dist/commands/license.js.map +1 -0
- package/dist/commands/login.d.ts +4 -0
- package/dist/commands/login.d.ts.map +1 -0
- package/dist/commands/login.js +127 -0
- package/dist/commands/login.js.map +1 -0
- package/dist/commands/logs.d.ts +21 -0
- package/dist/commands/logs.d.ts.map +1 -1
- package/dist/commands/logs.js +133 -32
- package/dist/commands/logs.js.map +1 -1
- package/dist/commands/objects.d.ts.map +1 -1
- package/dist/commands/objects.js +85 -6
- package/dist/commands/objects.js.map +1 -1
- package/dist/commands/plan.d.ts.map +1 -1
- package/dist/commands/plan.js +2 -2
- package/dist/commands/plan.js.map +1 -1
- package/dist/commands/run.d.ts.map +1 -1
- package/dist/commands/run.js +61 -9
- package/dist/commands/run.js.map +1 -1
- package/dist/commands/serve.d.ts.map +1 -1
- package/dist/commands/serve.js +67 -14
- package/dist/commands/serve.js.map +1 -1
- package/dist/commands/shell.d.ts.map +1 -1
- package/dist/commands/shell.js +190 -6
- package/dist/commands/shell.js.map +1 -1
- package/dist/commands/source.d.ts +3 -0
- package/dist/commands/source.d.ts.map +1 -0
- package/dist/commands/source.js +120 -0
- package/dist/commands/source.js.map +1 -0
- package/dist/commands/status.d.ts.map +1 -1
- package/dist/commands/status.js +29 -3
- package/dist/commands/status.js.map +1 -1
- package/dist/commands/up.d.ts.map +1 -1
- package/dist/commands/up.js +70 -5
- package/dist/commands/up.js.map +1 -1
- package/dist/dev/env-defaults.d.ts +1 -0
- package/dist/dev/env-defaults.d.ts.map +1 -1
- package/dist/dev/env-defaults.js +24 -12
- package/dist/dev/env-defaults.js.map +1 -1
- package/dist/dev/forked-worker-bootstrap-protocol.d.ts +17 -0
- package/dist/dev/forked-worker-bootstrap-protocol.d.ts.map +1 -0
- package/dist/dev/forked-worker-bootstrap-protocol.js +35 -0
- package/dist/dev/forked-worker-bootstrap-protocol.js.map +1 -0
- package/dist/dev/forked-worker-bootstrap.d.ts +18 -0
- package/dist/dev/forked-worker-bootstrap.d.ts.map +1 -0
- package/dist/dev/forked-worker-bootstrap.js +84 -0
- package/dist/dev/forked-worker-bootstrap.js.map +1 -0
- package/dist/dev/forked-worker.d.ts +29 -0
- package/dist/dev/forked-worker.d.ts.map +1 -1
- package/dist/dev/forked-worker.js +267 -42
- package/dist/dev/forked-worker.js.map +1 -1
- package/dist/dev/opa-policies.d.ts +3 -0
- package/dist/dev/opa-policies.d.ts.map +1 -0
- package/dist/dev/opa-policies.js +64 -0
- package/dist/dev/opa-policies.js.map +1 -0
- package/dist/lib/cli-errors.d.ts +7 -0
- package/dist/lib/cli-errors.d.ts.map +1 -0
- package/dist/lib/cli-errors.js +30 -0
- package/dist/lib/cli-errors.js.map +1 -0
- package/dist/lib/control-plane.d.ts +5 -1
- package/dist/lib/control-plane.d.ts.map +1 -1
- package/dist/lib/control-plane.js +61 -8
- package/dist/lib/control-plane.js.map +1 -1
- package/dist/lib/exit-codes.d.ts +3 -4
- package/dist/lib/exit-codes.d.ts.map +1 -1
- package/dist/lib/exit-codes.js +3 -4
- package/dist/lib/exit-codes.js.map +1 -1
- package/dist/lib/http-error.d.ts +2 -0
- package/dist/lib/http-error.d.ts.map +1 -0
- package/dist/lib/http-error.js +51 -0
- package/dist/lib/http-error.js.map +1 -0
- package/dist/lib/roster-profile.d.ts +10 -0
- package/dist/lib/roster-profile.d.ts.map +1 -0
- package/dist/lib/roster-profile.js +44 -0
- package/dist/lib/roster-profile.js.map +1 -0
- package/dist/runtime/asset-provenance.d.ts +17 -0
- package/dist/runtime/asset-provenance.d.ts.map +1 -0
- package/dist/runtime/asset-provenance.js +29 -0
- package/dist/runtime/asset-provenance.js.map +1 -0
- package/dist/runtime/auth/client-bootstrap.d.ts +11 -0
- package/dist/runtime/auth/client-bootstrap.d.ts.map +1 -0
- package/dist/runtime/auth/client-bootstrap.js +60 -0
- package/dist/runtime/auth/client-bootstrap.js.map +1 -0
- package/dist/runtime/auth/device-flow.d.ts +43 -0
- package/dist/runtime/auth/device-flow.d.ts.map +1 -0
- package/dist/runtime/auth/device-flow.js +201 -0
- package/dist/runtime/auth/device-flow.js.map +1 -0
- package/dist/runtime/auth/session-auth.d.ts +8 -0
- package/dist/runtime/auth/session-auth.d.ts.map +1 -0
- package/dist/runtime/auth/session-auth.js +43 -0
- package/dist/runtime/auth/session-auth.js.map +1 -0
- package/dist/runtime/auth/session-store.d.ts +19 -0
- package/dist/runtime/auth/session-store.d.ts.map +1 -0
- package/dist/runtime/auth/session-store.js +83 -0
- package/dist/runtime/auth/session-store.js.map +1 -0
- package/dist/runtime/auth/token-claims.d.ts +2 -0
- package/dist/runtime/auth/token-claims.d.ts.map +1 -0
- package/dist/runtime/auth/token-claims.js +45 -0
- package/dist/runtime/auth/token-claims.js.map +1 -0
- package/dist/runtime/biome-dev.d.ts +28 -0
- package/dist/runtime/biome-dev.d.ts.map +1 -0
- package/dist/runtime/biome-dev.js +131 -0
- package/dist/runtime/biome-dev.js.map +1 -0
- package/dist/runtime/biome-local-install.d.ts +29 -0
- package/dist/runtime/biome-local-install.d.ts.map +1 -0
- package/dist/runtime/biome-local-install.js +243 -0
- package/dist/runtime/biome-local-install.js.map +1 -0
- package/dist/runtime/biome-provenance.d.ts +26 -0
- package/dist/runtime/biome-provenance.d.ts.map +1 -0
- package/dist/runtime/biome-provenance.js +70 -0
- package/dist/runtime/biome-provenance.js.map +1 -0
- package/dist/runtime/biome-publish.d.ts +48 -0
- package/dist/runtime/biome-publish.d.ts.map +1 -0
- package/dist/runtime/biome-publish.js +278 -0
- package/dist/runtime/biome-publish.js.map +1 -0
- package/dist/runtime/biome-scaffold.d.ts +35 -0
- package/dist/runtime/biome-scaffold.d.ts.map +1 -0
- package/dist/runtime/biome-scaffold.js +151 -0
- package/dist/runtime/biome-scaffold.js.map +1 -0
- package/dist/runtime/biome-validate.d.ts +28 -0
- package/dist/runtime/biome-validate.d.ts.map +1 -0
- package/dist/runtime/biome-validate.js +452 -0
- package/dist/runtime/biome-validate.js.map +1 -0
- package/dist/runtime/boot-graph-loader.d.ts +1 -0
- package/dist/runtime/boot-graph-loader.d.ts.map +1 -1
- package/dist/runtime/boot-graph-loader.js +99 -7
- package/dist/runtime/boot-graph-loader.js.map +1 -1
- package/dist/runtime/canopy-refs.d.ts +8 -0
- package/dist/runtime/canopy-refs.d.ts.map +1 -0
- package/dist/runtime/canopy-refs.js +51 -0
- package/dist/runtime/canopy-refs.js.map +1 -0
- package/dist/runtime/canopy-replies.d.ts +14 -0
- package/dist/runtime/canopy-replies.d.ts.map +1 -0
- package/dist/runtime/canopy-replies.js +39 -0
- package/dist/runtime/canopy-replies.js.map +1 -0
- package/dist/runtime/capability-invoke.d.ts +35 -0
- package/dist/runtime/capability-invoke.d.ts.map +1 -0
- package/dist/runtime/capability-invoke.js +119 -0
- package/dist/runtime/capability-invoke.js.map +1 -0
- package/dist/runtime/cleanup.d.ts +10 -0
- package/dist/runtime/cleanup.d.ts.map +1 -0
- package/dist/runtime/cleanup.js +35 -0
- package/dist/runtime/cleanup.js.map +1 -0
- package/dist/runtime/config/dev-mode.d.ts +8 -0
- package/dist/runtime/config/dev-mode.d.ts.map +1 -0
- package/dist/runtime/config/dev-mode.js +84 -0
- package/dist/runtime/config/dev-mode.js.map +1 -0
- package/dist/runtime/config/init-presets.d.ts +1 -1
- package/dist/runtime/config/init-presets.d.ts.map +1 -1
- package/dist/runtime/config/init-presets.js +68 -13
- package/dist/runtime/config/init-presets.js.map +1 -1
- package/dist/runtime/config/loader.d.ts +1 -0
- package/dist/runtime/config/loader.d.ts.map +1 -1
- package/dist/runtime/config/loader.js +41 -5
- package/dist/runtime/config/loader.js.map +1 -1
- package/dist/runtime/config/schema.d.ts +27 -12
- package/dist/runtime/config/schema.d.ts.map +1 -1
- package/dist/runtime/config/schema.js +113 -8
- package/dist/runtime/config/schema.js.map +1 -1
- package/dist/runtime/config/sources-config.d.ts +14 -0
- package/dist/runtime/config/sources-config.d.ts.map +1 -0
- package/dist/runtime/config/sources-config.js +79 -0
- package/dist/runtime/config/sources-config.js.map +1 -0
- package/dist/runtime/distribution/available-biome.d.ts.map +1 -1
- package/dist/runtime/distribution/available-biome.js +2 -0
- package/dist/runtime/distribution/available-biome.js.map +1 -1
- package/dist/runtime/distribution/compose.d.ts +2 -1
- package/dist/runtime/distribution/compose.d.ts.map +1 -1
- package/dist/runtime/distribution/compose.js +4 -1
- package/dist/runtime/distribution/compose.js.map +1 -1
- package/dist/runtime/env-seeder.d.ts +5 -0
- package/dist/runtime/env-seeder.d.ts.map +1 -1
- package/dist/runtime/env-seeder.js +152 -19
- package/dist/runtime/env-seeder.js.map +1 -1
- package/dist/runtime/foreground.d.ts +9 -0
- package/dist/runtime/foreground.d.ts.map +1 -1
- package/dist/runtime/foreground.js +37 -3
- package/dist/runtime/foreground.js.map +1 -1
- package/dist/runtime/infra/infra-catalog.d.ts +34 -1
- package/dist/runtime/infra/infra-catalog.d.ts.map +1 -1
- package/dist/runtime/infra/infra-catalog.js +202 -10
- package/dist/runtime/infra/infra-catalog.js.map +1 -1
- package/dist/runtime/infra/infra-environment.d.ts +10 -0
- package/dist/runtime/infra/infra-environment.d.ts.map +1 -0
- package/dist/runtime/infra/infra-environment.js +76 -0
- package/dist/runtime/infra/infra-environment.js.map +1 -0
- package/dist/runtime/infra/infra-plan.d.ts +2 -1
- package/dist/runtime/infra/infra-plan.d.ts.map +1 -1
- package/dist/runtime/infra/infra-plan.js +10 -0
- package/dist/runtime/infra/infra-plan.js.map +1 -1
- package/dist/runtime/infra/infra-runner.d.ts +16 -1
- package/dist/runtime/infra/infra-runner.d.ts.map +1 -1
- package/dist/runtime/infra/infra-runner.js +245 -55
- package/dist/runtime/infra/infra-runner.js.map +1 -1
- package/dist/runtime/infra/keycloak-realm.d.ts +25 -0
- package/dist/runtime/infra/keycloak-realm.d.ts.map +1 -0
- package/dist/runtime/infra/keycloak-realm.js +116 -0
- package/dist/runtime/infra/keycloak-realm.js.map +1 -0
- package/dist/runtime/infra/postgres-endpoint.d.ts +8 -0
- package/dist/runtime/infra/postgres-endpoint.d.ts.map +1 -0
- package/dist/runtime/infra/postgres-endpoint.js +21 -0
- package/dist/runtime/infra/postgres-endpoint.js.map +1 -0
- package/dist/runtime/installation/compiler.d.ts +114 -0
- package/dist/runtime/installation/compiler.d.ts.map +1 -0
- package/dist/runtime/installation/compiler.js +456 -0
- package/dist/runtime/installation/compiler.js.map +1 -0
- package/dist/runtime/installation/contract.d.ts +296 -0
- package/dist/runtime/installation/contract.d.ts.map +1 -0
- package/dist/runtime/installation/contract.js +504 -0
- package/dist/runtime/installation/contract.js.map +1 -0
- package/dist/runtime/installation/current-launcher-renderer.d.ts +12 -0
- package/dist/runtime/installation/current-launcher-renderer.d.ts.map +1 -0
- package/dist/runtime/installation/current-launcher-renderer.js +123 -0
- package/dist/runtime/installation/current-launcher-renderer.js.map +1 -0
- package/dist/runtime/installation/diagnostics.d.ts +16 -0
- package/dist/runtime/installation/diagnostics.d.ts.map +1 -0
- package/dist/runtime/installation/diagnostics.js +21 -0
- package/dist/runtime/installation/diagnostics.js.map +1 -0
- package/dist/runtime/installation/diff.d.ts +32 -0
- package/dist/runtime/installation/diff.d.ts.map +1 -0
- package/dist/runtime/installation/diff.js +136 -0
- package/dist/runtime/installation/diff.js.map +1 -0
- package/dist/runtime/installation/format.d.ts +3 -0
- package/dist/runtime/installation/format.d.ts.map +1 -0
- package/dist/runtime/installation/format.js +22 -0
- package/dist/runtime/installation/format.js.map +1 -0
- package/dist/runtime/installation/from-current-config.d.ts +9 -0
- package/dist/runtime/installation/from-current-config.d.ts.map +1 -0
- package/dist/runtime/installation/from-current-config.js +245 -0
- package/dist/runtime/installation/from-current-config.js.map +1 -0
- package/dist/runtime/installation/helm-release-readiness.d.ts +9 -0
- package/dist/runtime/installation/helm-release-readiness.d.ts.map +1 -0
- package/dist/runtime/installation/helm-release-readiness.js +97 -0
- package/dist/runtime/installation/helm-release-readiness.js.map +1 -0
- package/dist/runtime/installation/helm-release.d.ts +24 -0
- package/dist/runtime/installation/helm-release.d.ts.map +1 -0
- package/dist/runtime/installation/helm-release.js +96 -0
- package/dist/runtime/installation/helm-release.js.map +1 -0
- package/dist/runtime/installation/index.d.ts +22 -0
- package/dist/runtime/installation/index.d.ts.map +1 -0
- package/dist/runtime/installation/index.js +38 -0
- package/dist/runtime/installation/index.js.map +1 -0
- package/dist/runtime/installation/json-schema.d.ts +4 -0
- package/dist/runtime/installation/json-schema.d.ts.map +1 -0
- package/dist/runtime/installation/json-schema.js +16 -0
- package/dist/runtime/installation/json-schema.js.map +1 -0
- package/dist/runtime/installation/kubernetes-readiness.d.ts +60 -0
- package/dist/runtime/installation/kubernetes-readiness.d.ts.map +1 -0
- package/dist/runtime/installation/kubernetes-readiness.js +384 -0
- package/dist/runtime/installation/kubernetes-readiness.js.map +1 -0
- package/dist/runtime/installation/lifecycle.d.ts +25 -0
- package/dist/runtime/installation/lifecycle.d.ts.map +1 -0
- package/dist/runtime/installation/lifecycle.js +157 -0
- package/dist/runtime/installation/lifecycle.js.map +1 -0
- package/dist/runtime/installation/readiness-proof.d.ts +72 -0
- package/dist/runtime/installation/readiness-proof.d.ts.map +1 -0
- package/dist/runtime/installation/readiness-proof.js +142 -0
- package/dist/runtime/installation/readiness-proof.js.map +1 -0
- package/dist/runtime/installation/readiness.d.ts +21 -0
- package/dist/runtime/installation/readiness.d.ts.map +1 -0
- package/dist/runtime/installation/readiness.js +418 -0
- package/dist/runtime/installation/readiness.js.map +1 -0
- package/dist/runtime/installation/serialization.d.ts +3 -0
- package/dist/runtime/installation/serialization.d.ts.map +1 -0
- package/dist/runtime/installation/serialization.js +39 -0
- package/dist/runtime/installation/serialization.js.map +1 -0
- package/dist/runtime/installation/setup-profile.d.ts +8 -0
- package/dist/runtime/installation/setup-profile.d.ts.map +1 -0
- package/dist/runtime/installation/setup-profile.js +41 -0
- package/dist/runtime/installation/setup-profile.js.map +1 -0
- package/dist/runtime/installation/setup-renderer.d.ts +31 -0
- package/dist/runtime/installation/setup-renderer.d.ts.map +1 -0
- package/dist/runtime/installation/setup-renderer.js +238 -0
- package/dist/runtime/installation/setup-renderer.js.map +1 -0
- package/dist/runtime/installation/state-store.d.ts +28 -0
- package/dist/runtime/installation/state-store.d.ts.map +1 -0
- package/dist/runtime/installation/state-store.js +377 -0
- package/dist/runtime/installation/state-store.js.map +1 -0
- package/dist/runtime/installation/status.d.ts +24 -0
- package/dist/runtime/installation/status.d.ts.map +1 -0
- package/dist/runtime/installation/status.js +52 -0
- package/dist/runtime/installation/status.js.map +1 -0
- package/dist/runtime/installation/support-bundle.d.ts +30 -0
- package/dist/runtime/installation/support-bundle.d.ts.map +1 -0
- package/dist/runtime/installation/support-bundle.js +145 -0
- package/dist/runtime/installation/support-bundle.js.map +1 -0
- package/dist/runtime/installation/to-current-config.d.ts +4 -0
- package/dist/runtime/installation/to-current-config.d.ts.map +1 -0
- package/dist/runtime/installation/to-current-config.js +171 -0
- package/dist/runtime/installation/to-current-config.js.map +1 -0
- package/dist/runtime/installation/validation.d.ts +8 -0
- package/dist/runtime/installation/validation.d.ts.map +1 -0
- package/dist/runtime/installation/validation.js +117 -0
- package/dist/runtime/installation/validation.js.map +1 -0
- package/dist/runtime/installation/validators/common.d.ts +4 -0
- package/dist/runtime/installation/validators/common.d.ts.map +1 -0
- package/dist/runtime/installation/validators/common.js +32 -0
- package/dist/runtime/installation/validators/common.js.map +1 -0
- package/dist/runtime/installation/validators/infrastructure.d.ts +4 -0
- package/dist/runtime/installation/validators/infrastructure.d.ts.map +1 -0
- package/dist/runtime/installation/validators/infrastructure.js +96 -0
- package/dist/runtime/installation/validators/infrastructure.js.map +1 -0
- package/dist/runtime/installation/validators/operational.d.ts +4 -0
- package/dist/runtime/installation/validators/operational.d.ts.map +1 -0
- package/dist/runtime/installation/validators/operational.js +68 -0
- package/dist/runtime/installation/validators/operational.js.map +1 -0
- package/dist/runtime/installation/validators/profile.d.ts +4 -0
- package/dist/runtime/installation/validators/profile.d.ts.map +1 -0
- package/dist/runtime/installation/validators/profile.js +80 -0
- package/dist/runtime/installation/validators/profile.js.map +1 -0
- package/dist/runtime/installation/validators/secrets.d.ts +4 -0
- package/dist/runtime/installation/validators/secrets.d.ts.map +1 -0
- package/dist/runtime/installation/validators/secrets.js +85 -0
- package/dist/runtime/installation/validators/secrets.js.map +1 -0
- package/dist/runtime/launch-plan-format.d.ts +3 -0
- package/dist/runtime/launch-plan-format.d.ts.map +1 -0
- package/dist/runtime/launch-plan-format.js +57 -0
- package/dist/runtime/launch-plan-format.js.map +1 -0
- package/dist/runtime/launch.d.ts +35 -3
- package/dist/runtime/launch.d.ts.map +1 -1
- package/dist/runtime/launch.js +382 -37
- package/dist/runtime/launch.js.map +1 -1
- package/dist/runtime/license/license-clock.d.ts +12 -0
- package/dist/runtime/license/license-clock.d.ts.map +1 -0
- package/dist/runtime/license/license-clock.js +57 -0
- package/dist/runtime/license/license-clock.js.map +1 -0
- package/dist/runtime/license/license-report.d.ts +19 -0
- package/dist/runtime/license/license-report.d.ts.map +1 -0
- package/dist/runtime/license/license-report.js +105 -0
- package/dist/runtime/license/license-report.js.map +1 -0
- package/dist/runtime/license/license-store.d.ts +5 -0
- package/dist/runtime/license/license-store.d.ts.map +1 -0
- package/dist/runtime/license/license-store.js +11 -0
- package/dist/runtime/license/license-store.js.map +1 -0
- package/dist/runtime/license/registry-credential.d.ts +26 -0
- package/dist/runtime/license/registry-credential.d.ts.map +1 -0
- package/dist/runtime/license/registry-credential.js +94 -0
- package/dist/runtime/license/registry-credential.js.map +1 -0
- package/dist/runtime/license/resolve-license.d.ts +30 -0
- package/dist/runtime/license/resolve-license.d.ts.map +1 -0
- package/dist/runtime/license/resolve-license.js +73 -0
- package/dist/runtime/license/resolve-license.js.map +1 -0
- package/dist/runtime/license/store-license.d.ts +18 -0
- package/dist/runtime/license/store-license.d.ts.map +1 -0
- package/dist/runtime/license/store-license.js +26 -0
- package/dist/runtime/license/store-license.js.map +1 -0
- package/dist/runtime/lock-loader.d.ts +3 -6
- package/dist/runtime/lock-loader.d.ts.map +1 -1
- package/dist/runtime/lock-loader.js +26 -20
- package/dist/runtime/lock-loader.js.map +1 -1
- package/dist/runtime/native-process-group.d.ts +46 -0
- package/dist/runtime/native-process-group.d.ts.map +1 -0
- package/dist/runtime/native-process-group.js +390 -0
- package/dist/runtime/native-process-group.js.map +1 -0
- package/dist/runtime/object-registry-client.d.ts +31 -0
- package/dist/runtime/object-registry-client.d.ts.map +1 -0
- package/dist/runtime/object-registry-client.js +54 -0
- package/dist/runtime/object-registry-client.js.map +1 -0
- package/dist/runtime/paths.d.ts +2 -0
- package/dist/runtime/paths.d.ts.map +1 -1
- package/dist/runtime/paths.js +3 -0
- package/dist/runtime/paths.js.map +1 -1
- package/dist/runtime/roster.d.ts +12 -5
- package/dist/runtime/roster.d.ts.map +1 -1
- package/dist/runtime/roster.js +89 -11
- package/dist/runtime/roster.js.map +1 -1
- package/dist/runtime/run-manifest.d.ts +52 -0
- package/dist/runtime/run-manifest.d.ts.map +1 -0
- package/dist/runtime/run-manifest.js +587 -0
- package/dist/runtime/run-manifest.js.map +1 -0
- package/dist/runtime/runner/container-preflight.d.ts +77 -0
- package/dist/runtime/runner/container-preflight.d.ts.map +1 -0
- package/dist/runtime/runner/container-preflight.js +360 -0
- package/dist/runtime/runner/container-preflight.js.map +1 -0
- package/dist/runtime/runner/container-runner.d.ts +14 -0
- package/dist/runtime/runner/container-runner.d.ts.map +1 -1
- package/dist/runtime/runner/container-runner.js +110 -14
- package/dist/runtime/runner/container-runner.js.map +1 -1
- package/dist/runtime/runner/docker-cli.d.ts +35 -2
- package/dist/runtime/runner/docker-cli.d.ts.map +1 -1
- package/dist/runtime/runner/docker-cli.js +314 -9
- package/dist/runtime/runner/docker-cli.js.map +1 -1
- package/dist/runtime/runner/health-probe.d.ts +1 -0
- package/dist/runtime/runner/health-probe.d.ts.map +1 -1
- package/dist/runtime/runner/health-probe.js +3 -2
- package/dist/runtime/runner/health-probe.js.map +1 -1
- package/dist/runtime/runner/helm-cli.d.ts +19 -1
- package/dist/runtime/runner/helm-cli.d.ts.map +1 -1
- package/dist/runtime/runner/helm-cli.js +76 -8
- package/dist/runtime/runner/helm-cli.js.map +1 -1
- package/dist/runtime/runner/helm-runner.d.ts +3 -0
- package/dist/runtime/runner/helm-runner.d.ts.map +1 -1
- package/dist/runtime/runner/helm-runner.js +23 -7
- package/dist/runtime/runner/helm-runner.js.map +1 -1
- package/dist/runtime/runner/host-platform.d.ts +39 -0
- package/dist/runtime/runner/host-platform.d.ts.map +1 -0
- package/dist/runtime/runner/host-platform.js +136 -0
- package/dist/runtime/runner/host-platform.js.map +1 -0
- package/dist/runtime/runner/kube-cli.d.ts +23 -0
- package/dist/runtime/runner/kube-cli.d.ts.map +1 -0
- package/dist/runtime/runner/kube-cli.js +112 -0
- package/dist/runtime/runner/kube-cli.js.map +1 -0
- package/dist/runtime/runner/native-runner.d.ts.map +1 -1
- package/dist/runtime/runner/native-runner.js +46 -15
- package/dist/runtime/runner/native-runner.js.map +1 -1
- package/dist/runtime/runner/service-runner.d.ts +5 -0
- package/dist/runtime/runner/service-runner.d.ts.map +1 -1
- package/dist/runtime/runner/service-runner.js.map +1 -1
- package/dist/runtime/runner/stream-outcome.d.ts +7 -0
- package/dist/runtime/runner/stream-outcome.d.ts.map +1 -0
- package/dist/runtime/runner/stream-outcome.js +13 -0
- package/dist/runtime/runner/stream-outcome.js.map +1 -0
- package/dist/runtime/secrets/managed-local-cipher.d.ts +18 -0
- package/dist/runtime/secrets/managed-local-cipher.d.ts.map +1 -0
- package/dist/runtime/secrets/managed-local-cipher.js +110 -0
- package/dist/runtime/secrets/managed-local-cipher.js.map +1 -0
- package/dist/runtime/secrets/managed-local-files.d.ts +4 -0
- package/dist/runtime/secrets/managed-local-files.d.ts.map +1 -0
- package/dist/runtime/secrets/managed-local-files.js +132 -0
- package/dist/runtime/secrets/managed-local-files.js.map +1 -0
- package/dist/runtime/secrets/managed-local-key-provider.d.ts +27 -0
- package/dist/runtime/secrets/managed-local-key-provider.d.ts.map +1 -0
- package/dist/runtime/secrets/managed-local-key-provider.js +144 -0
- package/dist/runtime/secrets/managed-local-key-provider.js.map +1 -0
- package/dist/runtime/secrets/managed-local-secret-store.d.ts +18 -0
- package/dist/runtime/secrets/managed-local-secret-store.d.ts.map +1 -0
- package/dist/runtime/secrets/managed-local-secret-store.js +82 -0
- package/dist/runtime/secrets/managed-local-secret-store.js.map +1 -0
- package/dist/runtime/secrets/managed-local-store.d.ts +33 -0
- package/dist/runtime/secrets/managed-local-store.d.ts.map +1 -0
- package/dist/runtime/secrets/managed-local-store.js +121 -0
- package/dist/runtime/secrets/managed-local-store.js.map +1 -0
- package/dist/runtime/secrets/resolver.d.ts +23 -0
- package/dist/runtime/secrets/resolver.d.ts.map +1 -0
- package/dist/runtime/secrets/resolver.js +265 -0
- package/dist/runtime/secrets/resolver.js.map +1 -0
- package/dist/runtime/secrets/url-security.d.ts +3 -0
- package/dist/runtime/secrets/url-security.d.ts.map +1 -0
- package/dist/runtime/secrets/url-security.js +13 -0
- package/dist/runtime/secrets/url-security.js.map +1 -0
- package/dist/runtime/sources/credentials.d.ts +2 -0
- package/dist/runtime/sources/credentials.d.ts.map +1 -1
- package/dist/runtime/sources/credentials.js +51 -1
- package/dist/runtime/sources/credentials.js.map +1 -1
- package/dist/runtime/sources/kinds/distribution.js +3 -3
- package/dist/runtime/sources/kinds/distribution.js.map +1 -1
- package/dist/runtime/sources/kinds/git.d.ts +6 -3
- package/dist/runtime/sources/kinds/git.d.ts.map +1 -1
- package/dist/runtime/sources/kinds/git.js +99 -22
- package/dist/runtime/sources/kinds/git.js.map +1 -1
- package/dist/runtime/sources/manifest-walk.d.ts +1 -0
- package/dist/runtime/sources/manifest-walk.d.ts.map +1 -1
- package/dist/runtime/sources/manifest-walk.js +16 -11
- package/dist/runtime/sources/manifest-walk.js.map +1 -1
- package/dist/runtime/sources/resolve-context.d.ts +7 -0
- package/dist/runtime/sources/resolve-context.d.ts.map +1 -0
- package/dist/runtime/sources/resolve-context.js +3 -0
- package/dist/runtime/sources/resolve-context.js.map +1 -0
- package/dist/runtime/sources/resolver.d.ts +2 -2
- package/dist/runtime/sources/resolver.d.ts.map +1 -1
- package/dist/runtime/sources/resolver.js +11 -5
- package/dist/runtime/sources/resolver.js.map +1 -1
- package/dist/runtime/sources/schema.d.ts.map +1 -1
- package/dist/runtime/sources/schema.js +51 -3
- package/dist/runtime/sources/schema.js.map +1 -1
- package/dist/runtime/store-client.d.ts +59 -0
- package/dist/runtime/store-client.d.ts.map +1 -0
- package/dist/runtime/store-client.js +72 -0
- package/dist/runtime/store-client.js.map +1 -0
- package/dist/runtime/store-submit.d.ts +31 -0
- package/dist/runtime/store-submit.d.ts.map +1 -0
- package/dist/runtime/store-submit.js +77 -0
- package/dist/runtime/store-submit.js.map +1 -0
- package/dist/runtime/supervisor.d.ts +18 -0
- package/dist/runtime/supervisor.d.ts.map +1 -1
- package/dist/runtime/supervisor.js +162 -15
- package/dist/runtime/supervisor.js.map +1 -1
- package/dist/runtime/waves.d.ts +1 -1
- package/dist/runtime/waves.d.ts.map +1 -1
- package/dist/runtime/waves.js +86 -19
- package/dist/runtime/waves.js.map +1 -1
- package/examples/01-local-native.yaml +4 -1
- package/examples/03-byo-infra.yaml +17 -7
- package/examples/05-appliance-helm.yaml +1 -1
- package/examples/06-biome-sources.yaml +4 -1
- package/package.json +20 -28
- package/xema.config.example.yaml +22 -18
- package/LICENSE +0 -176
- package/dist/lib/command-registry.d.ts +0 -5
- package/dist/lib/command-registry.d.ts.map +0 -1
- package/dist/lib/command-registry.js +0 -17
- package/dist/lib/command-registry.js.map +0 -1
|
@@ -0,0 +1,114 @@
|
|
|
1
|
+
import { BackupMode, EncryptionMode, FeatureSelectionMode, IdentityMode, InstallationOperatorKind, InstallationProfile, InstallationTargetKind, LifecycleEnvironment, NetworkPolicyMode, ObservabilityLevel, SecretsBackend, StorageClass, TenantIsolation, TenancyMode, UpgradeChannel, type ParsedXemaInstallation, type XemaInstallation } from './contract';
|
|
2
|
+
import { WorkspaceDriver } from '../config/schema';
|
|
3
|
+
export interface CompiledXemaInstallation extends Omit<ParsedXemaInstallation, 'spec'> {
|
|
4
|
+
readonly spec: {
|
|
5
|
+
readonly profile: InstallationProfile;
|
|
6
|
+
readonly lifecycle: {
|
|
7
|
+
readonly environment: LifecycleEnvironment;
|
|
8
|
+
};
|
|
9
|
+
readonly distribution: ParsedXemaInstallation['spec']['distribution'];
|
|
10
|
+
readonly target: {
|
|
11
|
+
readonly kind: InstallationTargetKind;
|
|
12
|
+
readonly region: string;
|
|
13
|
+
readonly zones: readonly string[];
|
|
14
|
+
};
|
|
15
|
+
readonly operator: {
|
|
16
|
+
readonly kind: InstallationOperatorKind;
|
|
17
|
+
readonly namespace?: string;
|
|
18
|
+
};
|
|
19
|
+
readonly features: {
|
|
20
|
+
readonly selection: FeatureSelectionMode;
|
|
21
|
+
readonly include: readonly string[];
|
|
22
|
+
readonly exclude: readonly string[];
|
|
23
|
+
readonly enabled: readonly string[];
|
|
24
|
+
readonly web: boolean;
|
|
25
|
+
};
|
|
26
|
+
readonly infrastructure: ParsedXemaInstallation['spec']['infrastructure'];
|
|
27
|
+
readonly secrets: ParsedXemaInstallation['spec']['secrets'];
|
|
28
|
+
readonly tenancy: {
|
|
29
|
+
readonly mode: TenancyMode;
|
|
30
|
+
readonly isolation: TenantIsolation;
|
|
31
|
+
};
|
|
32
|
+
readonly domains: ParsedXemaInstallation['spec']['domains'];
|
|
33
|
+
readonly security: {
|
|
34
|
+
readonly networkPolicy: NetworkPolicyMode;
|
|
35
|
+
readonly identity: IdentityMode;
|
|
36
|
+
readonly secretsBackend: SecretsBackend;
|
|
37
|
+
readonly encryption: EncryptionMode;
|
|
38
|
+
readonly residency?: string;
|
|
39
|
+
readonly managedModelAccess?: ParsedXemaInstallation['spec']['security']['managedModelAccess'];
|
|
40
|
+
};
|
|
41
|
+
readonly storage: {
|
|
42
|
+
readonly class: StorageClass;
|
|
43
|
+
readonly workspaceDriver: WorkspaceDriver;
|
|
44
|
+
readonly workspaceRoot?: string;
|
|
45
|
+
readonly materializationRoot?: string;
|
|
46
|
+
readonly externalBinding?: string;
|
|
47
|
+
};
|
|
48
|
+
readonly recovery: {
|
|
49
|
+
readonly mode: BackupMode;
|
|
50
|
+
readonly retentionDays: number;
|
|
51
|
+
readonly rpoMinutes: number;
|
|
52
|
+
readonly rtoMinutes: number;
|
|
53
|
+
readonly restoreDrillIntervalDays: number;
|
|
54
|
+
readonly destinationSecretRef?: string;
|
|
55
|
+
};
|
|
56
|
+
readonly observability: {
|
|
57
|
+
readonly level: ObservabilityLevel;
|
|
58
|
+
readonly metrics: boolean;
|
|
59
|
+
readonly tracing: boolean;
|
|
60
|
+
readonly auditLog: boolean;
|
|
61
|
+
readonly retentionDays: number;
|
|
62
|
+
readonly exportSecretRef?: string;
|
|
63
|
+
};
|
|
64
|
+
readonly capacity: {
|
|
65
|
+
readonly minReplicas: number;
|
|
66
|
+
readonly maxReplicas: number;
|
|
67
|
+
readonly maxOrganizations: number;
|
|
68
|
+
readonly maxConcurrentSessions: number;
|
|
69
|
+
readonly zones: number;
|
|
70
|
+
};
|
|
71
|
+
readonly sources: ParsedXemaInstallation['spec']['sources'];
|
|
72
|
+
readonly upgrade: {
|
|
73
|
+
readonly channel: UpgradeChannel;
|
|
74
|
+
readonly releaseRef?: string;
|
|
75
|
+
};
|
|
76
|
+
};
|
|
77
|
+
readonly effectivePlanHash: string;
|
|
78
|
+
}
|
|
79
|
+
export interface InstallationProfileDefaults {
|
|
80
|
+
readonly target: InstallationTargetKind;
|
|
81
|
+
readonly region: string;
|
|
82
|
+
readonly operator: InstallationOperatorKind;
|
|
83
|
+
readonly selection: FeatureSelectionMode;
|
|
84
|
+
readonly featureIds: readonly string[];
|
|
85
|
+
readonly tenancyMode: TenancyMode;
|
|
86
|
+
readonly isolation: TenantIsolation;
|
|
87
|
+
readonly networkPolicy: NetworkPolicyMode;
|
|
88
|
+
readonly identity: IdentityMode;
|
|
89
|
+
readonly secretsBackend: SecretsBackend;
|
|
90
|
+
readonly encryption: EncryptionMode;
|
|
91
|
+
readonly storageClass: StorageClass;
|
|
92
|
+
readonly workspaceDriver: WorkspaceDriver;
|
|
93
|
+
readonly backupMode: BackupMode;
|
|
94
|
+
readonly backupRetentionDays: number;
|
|
95
|
+
readonly rpoMinutes: number;
|
|
96
|
+
readonly rtoMinutes: number;
|
|
97
|
+
readonly restoreDrillIntervalDays: number;
|
|
98
|
+
readonly observability: ObservabilityLevel;
|
|
99
|
+
readonly metrics: boolean;
|
|
100
|
+
readonly tracing: boolean;
|
|
101
|
+
readonly auditLog: boolean;
|
|
102
|
+
readonly observabilityRetentionDays: number;
|
|
103
|
+
readonly minReplicas: number;
|
|
104
|
+
readonly maxReplicas: number;
|
|
105
|
+
readonly maxOrganizations: number;
|
|
106
|
+
readonly maxConcurrentSessions: number;
|
|
107
|
+
readonly zones: number;
|
|
108
|
+
}
|
|
109
|
+
export declare function installationProfileDefaults(profile: InstallationProfile): InstallationProfileDefaults;
|
|
110
|
+
export declare function profileLifecycleEnvironment(profile: InstallationProfile): LifecycleEnvironment;
|
|
111
|
+
export declare function compileXemaInstallation(raw: XemaInstallation | unknown): CompiledXemaInstallation;
|
|
112
|
+
export declare function effectivePayload(installation: Omit<CompiledXemaInstallation, 'effectivePlanHash'>): unknown;
|
|
113
|
+
export declare function isManagedInfrastructure(plan: CompiledXemaInstallation): boolean;
|
|
114
|
+
//# sourceMappingURL=compiler.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"compiler.d.ts","sourceRoot":"","sources":["../../../src/runtime/installation/compiler.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,cAAc,EACd,oBAAoB,EACpB,YAAY,EACZ,wBAAwB,EACxB,mBAAmB,EACnB,sBAAsB,EACtB,oBAAoB,EACpB,iBAAiB,EACjB,kBAAkB,EAElB,cAAc,EACd,YAAY,EACZ,eAAe,EACf,WAAW,EACX,cAAc,EACd,KAAK,sBAAsB,EAC3B,KAAK,gBAAgB,EACtB,MAAM,YAAY,CAAC;AAOpB,OAAO,EAAa,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAG9D,MAAM,WAAW,wBACf,SAAQ,IAAI,CAAC,sBAAsB,EAAE,MAAM,CAAC;IAC5C,QAAQ,CAAC,IAAI,EAAE;QACb,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;QACtC,QAAQ,CAAC,SAAS,EAAE;YAClB,QAAQ,CAAC,WAAW,EAAE,oBAAoB,CAAC;SAC5C,CAAC;QACF,QAAQ,CAAC,YAAY,EAAE,sBAAsB,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC;QACtE,QAAQ,CAAC,MAAM,EAAE;YACf,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;YACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;YACxB,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;SACnC,CAAC;QACF,QAAQ,CAAC,QAAQ,EAAE;YACjB,QAAQ,CAAC,IAAI,EAAE,wBAAwB,CAAC;YACxC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;SAC7B,CAAC;QACF,QAAQ,CAAC,QAAQ,EAAE;YACjB,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;YACzC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;YACpC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;YACpC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;YACpC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;SACvB,CAAC;QACF,QAAQ,CAAC,cAAc,EAAE,sBAAsB,CAAC,MAAM,CAAC,CAAC,gBAAgB,CAAC,CAAC;QAC1E,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC;QAC5D,QAAQ,CAAC,OAAO,EAAE;YAChB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;YAC3B,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;SACrC,CAAC;QACF,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC;QAC5D,QAAQ,CAAC,QAAQ,EAAE;YACjB,QAAQ,CAAC,aAAa,EAAE,iBAAiB,CAAC;YAC1C,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;YAChC,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;YACxC,QAAQ,CAAC,UAAU,EAAE,cAAc,CAAC;YACpC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;YAC5B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,sBAAsB,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC,oBAAoB,CAAC,CAAC;SAChG,CAAC;QACF,QAAQ,CAAC,OAAO,EAAE;YAChB,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;YAC7B,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;YAC1C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;YAChC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;YACtC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;SACnC,CAAC;QACF,QAAQ,CAAC,QAAQ,EAAE;YACjB,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;YAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;YAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;YAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;YAC5B,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;YAC1C,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;SACxC,CAAC;QACF,QAAQ,CAAC,aAAa,EAAE;YACtB,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC;YACnC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;YAC1B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;YAC1B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;YAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;YAC/B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;SACnC,CAAC;QACF,QAAQ,CAAC,QAAQ,EAAE;YACjB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;YAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;YAC7B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;YAClC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;YACvC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;SACxB,CAAC;QACF,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC;QAC5D,QAAQ,CAAC,OAAO,EAAE;YAChB,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;YACjC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;SAC9B,CAAC;KACH,CAAC;IACF,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;CACpC;AAQD,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAC;IACxC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,wBAAwB,CAAC;IAC5C,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;IACzC,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,aAAa,EAAE,iBAAiB,CAAC;IAC1C,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,QAAQ,CAAC,UAAU,EAAE,cAAc,CAAC;IACpC,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAC1C,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,aAAa,EAAE,kBAAkB,CAAC;IAC3C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,0BAA0B,EAAE,MAAM,CAAC;IAC5C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AA+LD,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,mBAAmB,GAC3B,2BAA2B,CAE7B;AAYD,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,mBAAmB,GAC3B,oBAAoB,CAItB;AAED,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,gBAAgB,GAAG,OAAO,GAC9B,wBAAwB,CA0B1B;AA0XD,wBAAgB,gBAAgB,CAC9B,YAAY,EAAE,IAAI,CAAC,wBAAwB,EAAE,mBAAmB,CAAC,GAChE,OAAO,CAOT;AAYD,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAIT"}
|
|
@@ -0,0 +1,456 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.installationProfileDefaults = installationProfileDefaults;
|
|
4
|
+
exports.profileLifecycleEnvironment = profileLifecycleEnvironment;
|
|
5
|
+
exports.compileXemaInstallation = compileXemaInstallation;
|
|
6
|
+
exports.effectivePayload = effectivePayload;
|
|
7
|
+
exports.isManagedInfrastructure = isManagedInfrastructure;
|
|
8
|
+
const contract_1 = require("./contract");
|
|
9
|
+
const diagnostics_1 = require("./diagnostics");
|
|
10
|
+
const serialization_1 = require("./serialization");
|
|
11
|
+
const validation_1 = require("./validation");
|
|
12
|
+
const schema_1 = require("../config/schema");
|
|
13
|
+
const infra_catalog_1 = require("../infra/infra-catalog");
|
|
14
|
+
const STARTER_FEATURES = [];
|
|
15
|
+
const PROFILE_DEFAULTS = {
|
|
16
|
+
[contract_1.InstallationProfile.Developer]: {
|
|
17
|
+
target: contract_1.InstallationTargetKind.LocalMachine,
|
|
18
|
+
region: 'local',
|
|
19
|
+
operator: contract_1.InstallationOperatorKind.Developer,
|
|
20
|
+
selection: contract_1.FeatureSelectionMode.Default,
|
|
21
|
+
featureIds: STARTER_FEATURES,
|
|
22
|
+
tenancyMode: contract_1.TenancyMode.SingleOrganization,
|
|
23
|
+
isolation: contract_1.TenantIsolation.Shared,
|
|
24
|
+
networkPolicy: contract_1.NetworkPolicyMode.Development,
|
|
25
|
+
identity: contract_1.IdentityMode.Managed,
|
|
26
|
+
secretsBackend: contract_1.SecretsBackend.Local,
|
|
27
|
+
encryption: contract_1.EncryptionMode.Development,
|
|
28
|
+
storageClass: contract_1.StorageClass.Ephemeral,
|
|
29
|
+
workspaceDriver: schema_1.WorkspaceDriver.HostPath,
|
|
30
|
+
backupMode: contract_1.BackupMode.Disabled,
|
|
31
|
+
backupRetentionDays: 1,
|
|
32
|
+
rpoMinutes: 1_440,
|
|
33
|
+
rtoMinutes: 240,
|
|
34
|
+
restoreDrillIntervalDays: 365,
|
|
35
|
+
observability: contract_1.ObservabilityLevel.Development,
|
|
36
|
+
metrics: false,
|
|
37
|
+
tracing: false,
|
|
38
|
+
auditLog: false,
|
|
39
|
+
observabilityRetentionDays: 7,
|
|
40
|
+
minReplicas: 1,
|
|
41
|
+
maxReplicas: 1,
|
|
42
|
+
maxOrganizations: 1,
|
|
43
|
+
maxConcurrentSessions: 10,
|
|
44
|
+
zones: 1,
|
|
45
|
+
},
|
|
46
|
+
[contract_1.InstallationProfile.Starter]: {
|
|
47
|
+
target: contract_1.InstallationTargetKind.LocalMachine,
|
|
48
|
+
region: 'local',
|
|
49
|
+
operator: contract_1.InstallationOperatorKind.Organization,
|
|
50
|
+
selection: contract_1.FeatureSelectionMode.Default,
|
|
51
|
+
featureIds: STARTER_FEATURES,
|
|
52
|
+
tenancyMode: contract_1.TenancyMode.MultiOrganization,
|
|
53
|
+
isolation: contract_1.TenantIsolation.Shared,
|
|
54
|
+
networkPolicy: contract_1.NetworkPolicyMode.Development,
|
|
55
|
+
identity: contract_1.IdentityMode.Managed,
|
|
56
|
+
secretsBackend: contract_1.SecretsBackend.Local,
|
|
57
|
+
encryption: contract_1.EncryptionMode.Development,
|
|
58
|
+
storageClass: contract_1.StorageClass.Persistent,
|
|
59
|
+
workspaceDriver: schema_1.WorkspaceDriver.DockerLocal,
|
|
60
|
+
backupMode: contract_1.BackupMode.Disabled,
|
|
61
|
+
backupRetentionDays: 1,
|
|
62
|
+
rpoMinutes: 1_440,
|
|
63
|
+
rtoMinutes: 240,
|
|
64
|
+
restoreDrillIntervalDays: 365,
|
|
65
|
+
observability: contract_1.ObservabilityLevel.Development,
|
|
66
|
+
metrics: false,
|
|
67
|
+
tracing: false,
|
|
68
|
+
auditLog: false,
|
|
69
|
+
observabilityRetentionDays: 7,
|
|
70
|
+
minReplicas: 1,
|
|
71
|
+
maxReplicas: 1,
|
|
72
|
+
maxOrganizations: 100,
|
|
73
|
+
maxConcurrentSessions: 100,
|
|
74
|
+
zones: 1,
|
|
75
|
+
},
|
|
76
|
+
[contract_1.InstallationProfile.SingleNodeProduction]: {
|
|
77
|
+
target: contract_1.InstallationTargetKind.SingleNodeKubernetes,
|
|
78
|
+
region: 'primary',
|
|
79
|
+
operator: contract_1.InstallationOperatorKind.Organization,
|
|
80
|
+
selection: contract_1.FeatureSelectionMode.Default,
|
|
81
|
+
featureIds: STARTER_FEATURES,
|
|
82
|
+
tenancyMode: contract_1.TenancyMode.MultiOrganization,
|
|
83
|
+
isolation: contract_1.TenantIsolation.Namespace,
|
|
84
|
+
networkPolicy: contract_1.NetworkPolicyMode.Restricted,
|
|
85
|
+
identity: contract_1.IdentityMode.Managed,
|
|
86
|
+
secretsBackend: contract_1.SecretsBackend.Kubernetes,
|
|
87
|
+
encryption: contract_1.EncryptionMode.PlatformManaged,
|
|
88
|
+
storageClass: contract_1.StorageClass.Persistent,
|
|
89
|
+
workspaceDriver: schema_1.WorkspaceDriver.DockerLocal,
|
|
90
|
+
backupMode: contract_1.BackupMode.Snapshots,
|
|
91
|
+
backupRetentionDays: 30,
|
|
92
|
+
rpoMinutes: 240,
|
|
93
|
+
rtoMinutes: 120,
|
|
94
|
+
restoreDrillIntervalDays: 30,
|
|
95
|
+
observability: contract_1.ObservabilityLevel.Standard,
|
|
96
|
+
metrics: true,
|
|
97
|
+
tracing: true,
|
|
98
|
+
auditLog: false,
|
|
99
|
+
observabilityRetentionDays: 30,
|
|
100
|
+
minReplicas: 1,
|
|
101
|
+
maxReplicas: 1,
|
|
102
|
+
maxOrganizations: 1_000,
|
|
103
|
+
maxConcurrentSessions: 1_000,
|
|
104
|
+
zones: 1,
|
|
105
|
+
},
|
|
106
|
+
[contract_1.InstallationProfile.BusinessHa]: {
|
|
107
|
+
target: contract_1.InstallationTargetKind.CustomerKubernetes,
|
|
108
|
+
region: 'primary',
|
|
109
|
+
operator: contract_1.InstallationOperatorKind.Organization,
|
|
110
|
+
selection: contract_1.FeatureSelectionMode.Default,
|
|
111
|
+
featureIds: STARTER_FEATURES,
|
|
112
|
+
tenancyMode: contract_1.TenancyMode.MultiOrganization,
|
|
113
|
+
isolation: contract_1.TenantIsolation.Namespace,
|
|
114
|
+
networkPolicy: contract_1.NetworkPolicyMode.Restricted,
|
|
115
|
+
identity: contract_1.IdentityMode.Managed,
|
|
116
|
+
secretsBackend: contract_1.SecretsBackend.Kubernetes,
|
|
117
|
+
encryption: contract_1.EncryptionMode.PlatformManaged,
|
|
118
|
+
storageClass: contract_1.StorageClass.Persistent,
|
|
119
|
+
workspaceDriver: schema_1.WorkspaceDriver.DockerLocal,
|
|
120
|
+
backupMode: contract_1.BackupMode.Continuous,
|
|
121
|
+
backupRetentionDays: 30,
|
|
122
|
+
rpoMinutes: 30,
|
|
123
|
+
rtoMinutes: 60,
|
|
124
|
+
restoreDrillIntervalDays: 30,
|
|
125
|
+
observability: contract_1.ObservabilityLevel.Standard,
|
|
126
|
+
metrics: true,
|
|
127
|
+
tracing: true,
|
|
128
|
+
auditLog: false,
|
|
129
|
+
observabilityRetentionDays: 30,
|
|
130
|
+
minReplicas: 2,
|
|
131
|
+
maxReplicas: 12,
|
|
132
|
+
maxOrganizations: 10_000,
|
|
133
|
+
maxConcurrentSessions: 10_000,
|
|
134
|
+
zones: 3,
|
|
135
|
+
},
|
|
136
|
+
[contract_1.InstallationProfile.EnterpriseRegulated]: {
|
|
137
|
+
target: contract_1.InstallationTargetKind.CustomerKubernetes,
|
|
138
|
+
region: 'primary',
|
|
139
|
+
operator: contract_1.InstallationOperatorKind.Organization,
|
|
140
|
+
selection: contract_1.FeatureSelectionMode.Default,
|
|
141
|
+
featureIds: STARTER_FEATURES,
|
|
142
|
+
tenancyMode: contract_1.TenancyMode.MultiOrganization,
|
|
143
|
+
isolation: contract_1.TenantIsolation.DedicatedCell,
|
|
144
|
+
networkPolicy: contract_1.NetworkPolicyMode.ZeroTrust,
|
|
145
|
+
identity: contract_1.IdentityMode.ExternalOidc,
|
|
146
|
+
secretsBackend: contract_1.SecretsBackend.External,
|
|
147
|
+
encryption: contract_1.EncryptionMode.CustomerManaged,
|
|
148
|
+
storageClass: contract_1.StorageClass.Persistent,
|
|
149
|
+
workspaceDriver: schema_1.WorkspaceDriver.DockerLocal,
|
|
150
|
+
backupMode: contract_1.BackupMode.Continuous,
|
|
151
|
+
backupRetentionDays: 90,
|
|
152
|
+
rpoMinutes: 5,
|
|
153
|
+
rtoMinutes: 60,
|
|
154
|
+
restoreDrillIntervalDays: 14,
|
|
155
|
+
observability: contract_1.ObservabilityLevel.Regulated,
|
|
156
|
+
metrics: true,
|
|
157
|
+
tracing: true,
|
|
158
|
+
auditLog: true,
|
|
159
|
+
observabilityRetentionDays: 365,
|
|
160
|
+
minReplicas: 3,
|
|
161
|
+
maxReplicas: 24,
|
|
162
|
+
maxOrganizations: 10_000,
|
|
163
|
+
maxConcurrentSessions: 10_000,
|
|
164
|
+
zones: 3,
|
|
165
|
+
},
|
|
166
|
+
[contract_1.InstallationProfile.HostedCell]: {
|
|
167
|
+
target: contract_1.InstallationTargetKind.HostedCell,
|
|
168
|
+
region: 'primary',
|
|
169
|
+
operator: contract_1.InstallationOperatorKind.Platform,
|
|
170
|
+
selection: contract_1.FeatureSelectionMode.Default,
|
|
171
|
+
featureIds: STARTER_FEATURES,
|
|
172
|
+
tenancyMode: contract_1.TenancyMode.MultiOrganization,
|
|
173
|
+
isolation: contract_1.TenantIsolation.DedicatedCell,
|
|
174
|
+
networkPolicy: contract_1.NetworkPolicyMode.ZeroTrust,
|
|
175
|
+
identity: contract_1.IdentityMode.ExternalOidc,
|
|
176
|
+
secretsBackend: contract_1.SecretsBackend.External,
|
|
177
|
+
encryption: contract_1.EncryptionMode.PlatformManaged,
|
|
178
|
+
storageClass: contract_1.StorageClass.Persistent,
|
|
179
|
+
workspaceDriver: schema_1.WorkspaceDriver.DockerLocal,
|
|
180
|
+
backupMode: contract_1.BackupMode.Continuous,
|
|
181
|
+
backupRetentionDays: 30,
|
|
182
|
+
rpoMinutes: 5,
|
|
183
|
+
rtoMinutes: 30,
|
|
184
|
+
restoreDrillIntervalDays: 14,
|
|
185
|
+
observability: contract_1.ObservabilityLevel.Regulated,
|
|
186
|
+
metrics: true,
|
|
187
|
+
tracing: true,
|
|
188
|
+
auditLog: true,
|
|
189
|
+
observabilityRetentionDays: 90,
|
|
190
|
+
minReplicas: 3,
|
|
191
|
+
maxReplicas: 100,
|
|
192
|
+
maxOrganizations: 100_000,
|
|
193
|
+
maxConcurrentSessions: 100_000,
|
|
194
|
+
zones: 3,
|
|
195
|
+
},
|
|
196
|
+
};
|
|
197
|
+
function installationProfileDefaults(profile) {
|
|
198
|
+
return PROFILE_DEFAULTS[profile];
|
|
199
|
+
}
|
|
200
|
+
function profileLifecycleEnvironment(profile) {
|
|
201
|
+
return PROFILE_DEFAULTS[profile].target === contract_1.InstallationTargetKind.LocalMachine
|
|
202
|
+
? contract_1.LifecycleEnvironment.Development
|
|
203
|
+
: contract_1.LifecycleEnvironment.Production;
|
|
204
|
+
}
|
|
205
|
+
function compileXemaInstallation(raw) {
|
|
206
|
+
const validation = (0, validation_1.validateXemaInstallation)(raw);
|
|
207
|
+
if (validation.installation === undefined || validation.issues.length > 0) {
|
|
208
|
+
throw new diagnostics_1.InstallationCompilationError(validation.issues);
|
|
209
|
+
}
|
|
210
|
+
const installation = validation.installation;
|
|
211
|
+
const payload = normalizedPayload(installation, PROFILE_DEFAULTS[installation.spec.profile]);
|
|
212
|
+
if (payload.spec.capacity.minReplicas > payload.spec.capacity.maxReplicas) {
|
|
213
|
+
throw new diagnostics_1.InstallationCompilationError([
|
|
214
|
+
{
|
|
215
|
+
kind: diagnostics_1.InstallationIssueKind.Invalid,
|
|
216
|
+
code: 'CAPACITY_RANGE_INVALID',
|
|
217
|
+
path: 'spec.capacity',
|
|
218
|
+
message: 'minReplicas cannot exceed maxReplicas',
|
|
219
|
+
},
|
|
220
|
+
]);
|
|
221
|
+
}
|
|
222
|
+
const effectiveIssues = validateEffectiveInstallation(payload);
|
|
223
|
+
if (effectiveIssues.length > 0) {
|
|
224
|
+
throw new diagnostics_1.InstallationCompilationError(effectiveIssues);
|
|
225
|
+
}
|
|
226
|
+
const effectivePlanHash = (0, serialization_1.hashInstallation)(effectivePayload(payload));
|
|
227
|
+
return deepFreeze({ ...payload, effectivePlanHash });
|
|
228
|
+
}
|
|
229
|
+
function validateEffectiveInstallation(installation) {
|
|
230
|
+
const spec = installation.spec;
|
|
231
|
+
const issues = [];
|
|
232
|
+
if (spec.lifecycle.environment === contract_1.LifecycleEnvironment.Production) {
|
|
233
|
+
if (spec.target.kind === contract_1.InstallationTargetKind.LocalMachine) {
|
|
234
|
+
issues.push(effectiveIssue('PRODUCTION_TARGET_UNSAFE', 'spec.target.kind', 'production requires a Kubernetes or hosted-cell target'));
|
|
235
|
+
}
|
|
236
|
+
if (spec.operator.kind === contract_1.InstallationOperatorKind.Developer) {
|
|
237
|
+
issues.push(effectiveIssue('PRODUCTION_OPERATOR_UNSAFE', 'spec.operator.kind', 'production cannot use the developer operator'));
|
|
238
|
+
}
|
|
239
|
+
if (spec.security.networkPolicy === contract_1.NetworkPolicyMode.Development) {
|
|
240
|
+
issues.push(effectiveIssue('PRODUCTION_NETWORK_POLICY_UNSAFE', 'spec.security.networkPolicy', 'production cannot use development network policy'));
|
|
241
|
+
}
|
|
242
|
+
if (spec.domains.some((domain) => domain.tls.mode === 'disabled')) {
|
|
243
|
+
issues.push(effectiveIssue('PRODUCTION_TLS_REQUIRED', 'spec.domains', 'production domains must use managed or external TLS'));
|
|
244
|
+
}
|
|
245
|
+
if (spec.security.encryption === contract_1.EncryptionMode.Development) {
|
|
246
|
+
issues.push(effectiveIssue('PRODUCTION_ENCRYPTION_REQUIRED', 'spec.security.encryption', 'production requires platform-managed or customer-managed encryption'));
|
|
247
|
+
}
|
|
248
|
+
if (spec.security.secretsBackend === contract_1.SecretsBackend.Local) {
|
|
249
|
+
issues.push(effectiveIssue('PRODUCTION_SECRET_CUSTODY_REQUIRED', 'spec.security.secretsBackend', 'production cannot use local secret custody'));
|
|
250
|
+
}
|
|
251
|
+
if (spec.secrets.some((secret) => secret.provider === contract_1.SecretReferenceProvider.Environment ||
|
|
252
|
+
secret.provider === contract_1.SecretReferenceProvider.File ||
|
|
253
|
+
secret.provider === contract_1.SecretReferenceProvider.Prompt ||
|
|
254
|
+
(secret.provider === contract_1.SecretReferenceProvider.ManagedLocal &&
|
|
255
|
+
spec.profile !== contract_1.InstallationProfile.SingleNodeProduction))) {
|
|
256
|
+
issues.push(effectiveIssue('PRODUCTION_SECRET_REFERENCE_UNSAFE', 'spec.secrets', 'production secret references must use Kubernetes, External Secrets, an external vault, or encrypted managed-local custody on the single-node profile'));
|
|
257
|
+
}
|
|
258
|
+
if (spec.storage.class === contract_1.StorageClass.Ephemeral) {
|
|
259
|
+
issues.push(effectiveIssue('PRODUCTION_PERSISTENCE_REQUIRED', 'spec.storage.class', 'production requires persistent or external storage'));
|
|
260
|
+
}
|
|
261
|
+
if (spec.recovery.mode === contract_1.BackupMode.Disabled) {
|
|
262
|
+
issues.push(effectiveIssue('PRODUCTION_RECOVERY_REQUIRED', 'spec.recovery.mode', 'production requires snapshots or continuous recovery'));
|
|
263
|
+
}
|
|
264
|
+
if (spec.observability.level === contract_1.ObservabilityLevel.Development ||
|
|
265
|
+
!spec.observability.metrics) {
|
|
266
|
+
issues.push(effectiveIssue('PRODUCTION_OBSERVABILITY_REQUIRED', 'spec.observability', 'production requires standard or regulated observability with metrics'));
|
|
267
|
+
}
|
|
268
|
+
}
|
|
269
|
+
const minimum = PROFILE_MINIMUMS[spec.profile];
|
|
270
|
+
if (spec.capacity.minReplicas < minimum.minReplicas) {
|
|
271
|
+
issues.push(effectiveIssue('PROFILE_REPLICA_MINIMUM', 'spec.capacity.minReplicas', `${spec.profile} requires at least ${String(minimum.minReplicas)} replicas`));
|
|
272
|
+
}
|
|
273
|
+
if (spec.capacity.zones < minimum.zones) {
|
|
274
|
+
issues.push(effectiveIssue('PROFILE_ZONE_MINIMUM', 'spec.capacity.zones', `${spec.profile} requires at least ${String(minimum.zones)} zones`));
|
|
275
|
+
}
|
|
276
|
+
if (spec.profile === contract_1.InstallationProfile.EnterpriseRegulated ||
|
|
277
|
+
spec.profile === contract_1.InstallationProfile.HostedCell) {
|
|
278
|
+
if (spec.tenancy.isolation !== contract_1.TenantIsolation.DedicatedCell) {
|
|
279
|
+
issues.push(effectiveIssue('PROFILE_DEDICATED_ISOLATION_REQUIRED', 'spec.tenancy.isolation', `${spec.profile} requires dedicated-cell tenant isolation`));
|
|
280
|
+
}
|
|
281
|
+
if (spec.security.identity !== contract_1.IdentityMode.ExternalOidc) {
|
|
282
|
+
issues.push(effectiveIssue('PROFILE_EXTERNAL_IDENTITY_REQUIRED', 'spec.security.identity', `${spec.profile} requires external OIDC identity`));
|
|
283
|
+
}
|
|
284
|
+
if (spec.security.networkPolicy !== contract_1.NetworkPolicyMode.ZeroTrust) {
|
|
285
|
+
issues.push(effectiveIssue('PROFILE_ZERO_TRUST_REQUIRED', 'spec.security.networkPolicy', `${spec.profile} requires zero-trust network policy`));
|
|
286
|
+
}
|
|
287
|
+
if (spec.security.secretsBackend !== contract_1.SecretsBackend.External) {
|
|
288
|
+
issues.push(effectiveIssue('PROFILE_EXTERNAL_SECRET_CUSTODY_REQUIRED', 'spec.security.secretsBackend', `${spec.profile} requires external secret custody`));
|
|
289
|
+
}
|
|
290
|
+
if (spec.recovery.mode !== contract_1.BackupMode.Continuous) {
|
|
291
|
+
issues.push(effectiveIssue('PROFILE_CONTINUOUS_RECOVERY_REQUIRED', 'spec.recovery.mode', `${spec.profile} requires continuous recovery`));
|
|
292
|
+
}
|
|
293
|
+
if (!spec.observability.auditLog) {
|
|
294
|
+
issues.push(effectiveIssue('PROFILE_AUDIT_LOG_REQUIRED', 'spec.observability.auditLog', `${spec.profile} requires audit logging`));
|
|
295
|
+
}
|
|
296
|
+
}
|
|
297
|
+
if (spec.profile === contract_1.InstallationProfile.EnterpriseRegulated &&
|
|
298
|
+
spec.security.residency === undefined) {
|
|
299
|
+
issues.push(effectiveIssue('REGULATED_RESIDENCY_REQUIRED', 'spec.security.residency', 'enterprise-regulated requires an explicit residency policy'));
|
|
300
|
+
}
|
|
301
|
+
if (spec.profile === contract_1.InstallationProfile.EnterpriseRegulated &&
|
|
302
|
+
spec.security.encryption !== contract_1.EncryptionMode.CustomerManaged) {
|
|
303
|
+
issues.push(effectiveIssue('REGULATED_CUSTOMER_ENCRYPTION_REQUIRED', 'spec.security.encryption', 'enterprise-regulated requires customer-managed encryption'));
|
|
304
|
+
}
|
|
305
|
+
return issues;
|
|
306
|
+
}
|
|
307
|
+
const PROFILE_MINIMUMS = {
|
|
308
|
+
[contract_1.InstallationProfile.Developer]: { minReplicas: 1, zones: 1 },
|
|
309
|
+
[contract_1.InstallationProfile.Starter]: { minReplicas: 1, zones: 1 },
|
|
310
|
+
[contract_1.InstallationProfile.SingleNodeProduction]: { minReplicas: 1, zones: 1 },
|
|
311
|
+
[contract_1.InstallationProfile.BusinessHa]: { minReplicas: 2, zones: 2 },
|
|
312
|
+
[contract_1.InstallationProfile.EnterpriseRegulated]: { minReplicas: 3, zones: 3 },
|
|
313
|
+
[contract_1.InstallationProfile.HostedCell]: { minReplicas: 3, zones: 3 },
|
|
314
|
+
};
|
|
315
|
+
function effectiveIssue(code, path, message) {
|
|
316
|
+
return { kind: diagnostics_1.InstallationIssueKind.Invalid, code, path, message };
|
|
317
|
+
}
|
|
318
|
+
function normalizedPayload(installation, defaults) {
|
|
319
|
+
const spec = installation.spec;
|
|
320
|
+
const declaredInfrastructure = new Map(spec.infrastructure.map((binding) => [binding.component, binding]));
|
|
321
|
+
return {
|
|
322
|
+
apiVersion: installation.apiVersion,
|
|
323
|
+
kind: installation.kind,
|
|
324
|
+
metadata: installation.metadata,
|
|
325
|
+
provenance: installation.provenance,
|
|
326
|
+
spec: {
|
|
327
|
+
profile: spec.profile,
|
|
328
|
+
lifecycle: spec.lifecycle,
|
|
329
|
+
distribution: spec.distribution,
|
|
330
|
+
target: {
|
|
331
|
+
kind: spec.target.kind ?? defaults.target,
|
|
332
|
+
region: spec.target.region ?? defaults.region,
|
|
333
|
+
zones: [...(spec.target.zones ?? [])].sort(),
|
|
334
|
+
},
|
|
335
|
+
operator: {
|
|
336
|
+
kind: spec.operator.kind ?? defaults.operator,
|
|
337
|
+
...(spec.operator.namespace === undefined
|
|
338
|
+
? {}
|
|
339
|
+
: { namespace: spec.operator.namespace }),
|
|
340
|
+
},
|
|
341
|
+
features: {
|
|
342
|
+
selection: spec.features.selection ?? defaults.selection,
|
|
343
|
+
include: [...spec.features.include].sort(),
|
|
344
|
+
exclude: [...spec.features.exclude].sort(),
|
|
345
|
+
enabled: [
|
|
346
|
+
...new Set([...defaults.featureIds, ...spec.features.enabled]),
|
|
347
|
+
].sort(),
|
|
348
|
+
web: spec.features.web,
|
|
349
|
+
},
|
|
350
|
+
infrastructure: infra_catalog_1.INFRA_COMPONENTS.map((component) => {
|
|
351
|
+
const binding = declaredInfrastructure.get(component) ?? {
|
|
352
|
+
component,
|
|
353
|
+
ownership: schema_1.InfraMode.Managed,
|
|
354
|
+
secretRefs: [],
|
|
355
|
+
};
|
|
356
|
+
return {
|
|
357
|
+
...binding,
|
|
358
|
+
secretRefs: [...binding.secretRefs].sort(),
|
|
359
|
+
};
|
|
360
|
+
}).sort((left, right) => left.component.localeCompare(right.component)),
|
|
361
|
+
secrets: [...spec.secrets].sort((left, right) => left.name.localeCompare(right.name)),
|
|
362
|
+
tenancy: {
|
|
363
|
+
mode: spec.tenancy.mode ?? defaults.tenancyMode,
|
|
364
|
+
isolation: spec.tenancy.isolation ?? defaults.isolation,
|
|
365
|
+
},
|
|
366
|
+
domains: [...spec.domains].sort((left, right) => {
|
|
367
|
+
const purpose = left.purpose.localeCompare(right.purpose);
|
|
368
|
+
return purpose === 0
|
|
369
|
+
? left.hostname.localeCompare(right.hostname)
|
|
370
|
+
: purpose;
|
|
371
|
+
}),
|
|
372
|
+
security: {
|
|
373
|
+
networkPolicy: spec.security.networkPolicy ?? defaults.networkPolicy,
|
|
374
|
+
identity: spec.security.identity ?? defaults.identity,
|
|
375
|
+
secretsBackend: spec.security.secretsBackend ?? defaults.secretsBackend,
|
|
376
|
+
encryption: spec.security.encryption ?? defaults.encryption,
|
|
377
|
+
...(spec.security.residency === undefined
|
|
378
|
+
? {}
|
|
379
|
+
: { residency: spec.security.residency }),
|
|
380
|
+
...(spec.security.managedModelAccess === undefined
|
|
381
|
+
? {}
|
|
382
|
+
: { managedModelAccess: spec.security.managedModelAccess }),
|
|
383
|
+
},
|
|
384
|
+
storage: {
|
|
385
|
+
class: spec.storage.class ?? defaults.storageClass,
|
|
386
|
+
workspaceDriver: spec.storage.workspaceDriver ?? defaults.workspaceDriver,
|
|
387
|
+
...(spec.storage.workspaceRoot === undefined
|
|
388
|
+
? {}
|
|
389
|
+
: { workspaceRoot: spec.storage.workspaceRoot }),
|
|
390
|
+
...(spec.storage.materializationRoot === undefined
|
|
391
|
+
? {}
|
|
392
|
+
: { materializationRoot: spec.storage.materializationRoot }),
|
|
393
|
+
...(spec.storage.externalBinding === undefined
|
|
394
|
+
? {}
|
|
395
|
+
: { externalBinding: spec.storage.externalBinding }),
|
|
396
|
+
},
|
|
397
|
+
recovery: {
|
|
398
|
+
mode: spec.recovery.mode ?? defaults.backupMode,
|
|
399
|
+
retentionDays: spec.recovery.retentionDays ?? defaults.backupRetentionDays,
|
|
400
|
+
rpoMinutes: spec.recovery.rpoMinutes ?? defaults.rpoMinutes,
|
|
401
|
+
rtoMinutes: spec.recovery.rtoMinutes ?? defaults.rtoMinutes,
|
|
402
|
+
restoreDrillIntervalDays: spec.recovery.restoreDrillIntervalDays ??
|
|
403
|
+
defaults.restoreDrillIntervalDays,
|
|
404
|
+
...(spec.recovery.destinationSecretRef === undefined
|
|
405
|
+
? {}
|
|
406
|
+
: { destinationSecretRef: spec.recovery.destinationSecretRef }),
|
|
407
|
+
},
|
|
408
|
+
observability: {
|
|
409
|
+
level: spec.observability.level ?? defaults.observability,
|
|
410
|
+
metrics: spec.observability.metrics ?? defaults.metrics,
|
|
411
|
+
tracing: spec.observability.tracing ?? defaults.tracing,
|
|
412
|
+
auditLog: spec.observability.auditLog ?? defaults.auditLog,
|
|
413
|
+
retentionDays: spec.observability.retentionDays ??
|
|
414
|
+
defaults.observabilityRetentionDays,
|
|
415
|
+
...(spec.observability.exportSecretRef === undefined
|
|
416
|
+
? {}
|
|
417
|
+
: { exportSecretRef: spec.observability.exportSecretRef }),
|
|
418
|
+
},
|
|
419
|
+
capacity: {
|
|
420
|
+
minReplicas: spec.capacity.minReplicas ?? defaults.minReplicas,
|
|
421
|
+
maxReplicas: spec.capacity.maxReplicas ?? defaults.maxReplicas,
|
|
422
|
+
maxOrganizations: spec.capacity.maxOrganizations ?? defaults.maxOrganizations,
|
|
423
|
+
maxConcurrentSessions: spec.capacity.maxConcurrentSessions ?? defaults.maxConcurrentSessions,
|
|
424
|
+
zones: spec.capacity.zones ?? defaults.zones,
|
|
425
|
+
},
|
|
426
|
+
sources: [...spec.sources],
|
|
427
|
+
upgrade: {
|
|
428
|
+
channel: spec.upgrade.channel ?? contract_1.UpgradeChannel.Stable,
|
|
429
|
+
...(spec.upgrade.releaseRef === undefined
|
|
430
|
+
? {}
|
|
431
|
+
: { releaseRef: spec.upgrade.releaseRef }),
|
|
432
|
+
},
|
|
433
|
+
},
|
|
434
|
+
};
|
|
435
|
+
}
|
|
436
|
+
function effectivePayload(installation) {
|
|
437
|
+
return {
|
|
438
|
+
apiVersion: installation.apiVersion,
|
|
439
|
+
kind: installation.kind,
|
|
440
|
+
metadata: installation.metadata,
|
|
441
|
+
spec: installation.spec,
|
|
442
|
+
};
|
|
443
|
+
}
|
|
444
|
+
function deepFreeze(value) {
|
|
445
|
+
if (value !== null && typeof value === 'object' && !Object.isFrozen(value)) {
|
|
446
|
+
for (const child of Object.values(value)) {
|
|
447
|
+
deepFreeze(child);
|
|
448
|
+
}
|
|
449
|
+
Object.freeze(value);
|
|
450
|
+
}
|
|
451
|
+
return value;
|
|
452
|
+
}
|
|
453
|
+
function isManagedInfrastructure(plan) {
|
|
454
|
+
return plan.spec.infrastructure.some((binding) => binding.ownership === schema_1.InfraMode.Managed);
|
|
455
|
+
}
|
|
456
|
+
//# sourceMappingURL=compiler.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"compiler.js","sourceRoot":"","sources":["../../../src/runtime/installation/compiler.ts"],"names":[],"mappings":";;AA6UA,kEAIC;AAYD,kEAMC;AAED,0DA4BC;AA0XD,4CASC;AAYD,0DAMC;AAtxBD,yCAmBoB;AACpB,+CAGuB;AACvB,mDAAmD;AACnD,6CAAwD;AACxD,6CAA8D;AAC9D,0DAA0D;AAqH1D,MAAM,gBAAgB,GAAsB,EAAE,CAAC;AAE/C,MAAM,gBAAgB,GAGpB;IACE,CAAC,8BAAmB,CAAC,SAAS,CAAC,EAAE;QAC/B,MAAM,EAAE,iCAAsB,CAAC,YAAY;QAC3C,MAAM,EAAE,OAAO;QACf,QAAQ,EAAE,mCAAwB,CAAC,SAAS;QAC5C,SAAS,EAAE,+BAAoB,CAAC,OAAO;QACvC,UAAU,EAAE,gBAAgB;QAC5B,WAAW,EAAE,sBAAW,CAAC,kBAAkB;QAC3C,SAAS,EAAE,0BAAe,CAAC,MAAM;QACjC,aAAa,EAAE,4BAAiB,CAAC,WAAW;QAC5C,QAAQ,EAAE,uBAAY,CAAC,OAAO;QAC9B,cAAc,EAAE,yBAAc,CAAC,KAAK;QACpC,UAAU,EAAE,yBAAc,CAAC,WAAW;QACtC,YAAY,EAAE,uBAAY,CAAC,SAAS;QACpC,eAAe,EAAE,wBAAe,CAAC,QAAQ;QACzC,UAAU,EAAE,qBAAU,CAAC,QAAQ;QAC/B,mBAAmB,EAAE,CAAC;QACtB,UAAU,EAAE,KAAK;QACjB,UAAU,EAAE,GAAG;QACf,wBAAwB,EAAE,GAAG;QAC7B,aAAa,EAAE,6BAAkB,CAAC,WAAW;QAC7C,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,KAAK;QACf,0BAA0B,EAAE,CAAC;QAC7B,WAAW,EAAE,CAAC;QACd,WAAW,EAAE,CAAC;QACd,gBAAgB,EAAE,CAAC;QACnB,qBAAqB,EAAE,EAAE;QACzB,KAAK,EAAE,CAAC;KACT;IACD,CAAC,8BAAmB,CAAC,OAAO,CAAC,EAAE;QAC7B,MAAM,EAAE,iCAAsB,CAAC,YAAY;QAC3C,MAAM,EAAE,OAAO;QACf,QAAQ,EAAE,mCAAwB,CAAC,YAAY;QAC/C,SAAS,EAAE,+BAAoB,CAAC,OAAO;QACvC,UAAU,EAAE,gBAAgB;QAC5B,WAAW,EAAE,sBAAW,CAAC,iBAAiB;QAC1C,SAAS,EAAE,0BAAe,CAAC,MAAM;QACjC,aAAa,EAAE,4BAAiB,CAAC,WAAW;QAC5C,QAAQ,EAAE,uBAAY,CAAC,OAAO;QAC9B,cAAc,EAAE,yBAAc,CAAC,KAAK;QACpC,UAAU,EAAE,yBAAc,CAAC,WAAW;QACtC,YAAY,EAAE,uBAAY,CAAC,UAAU;QACrC,eAAe,EAAE,wBAAe,CAAC,WAAW;QAC5C,UAAU,EAAE,qBAAU,CAAC,QAAQ;QAC/B,mBAAmB,EAAE,CAAC;QACtB,UAAU,EAAE,KAAK;QACjB,UAAU,EAAE,GAAG;QACf,wBAAwB,EAAE,GAAG;QAC7B,aAAa,EAAE,6BAAkB,CAAC,WAAW;QAC7C,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,KAAK;QACf,0BAA0B,EAAE,CAAC;QAC7B,WAAW,EAAE,CAAC;QACd,WAAW,EAAE,CAAC;QACd,gBAAgB,EAAE,GAAG;QACrB,qBAAqB,EAAE,GAAG;QAC1B,KAAK,EAAE,CAAC;KACT;IACD,CAAC,8BAAmB,CAAC,oBAAoB,CAAC,EAAE;QAC1C,MAAM,EAAE,iCAAsB,CAAC,oBAAoB;QACnD,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE,mCAAwB,CAAC,YAAY;QAC/C,SAAS,EAAE,+BAAoB,CAAC,OAAO;QACvC,UAAU,EAAE,gBAAgB;QAC5B,WAAW,EAAE,sBAAW,CAAC,iBAAiB;QAC1C,SAAS,EAAE,0BAAe,CAAC,SAAS;QACpC,aAAa,EAAE,4BAAiB,CAAC,UAAU;QAC3C,QAAQ,EAAE,uBAAY,CAAC,OAAO;QAC9B,cAAc,EAAE,yBAAc,CAAC,UAAU;QACzC,UAAU,EAAE,yBAAc,CAAC,eAAe;QAC1C,YAAY,EAAE,uBAAY,CAAC,UAAU;QACrC,eAAe,EAAE,wBAAe,CAAC,WAAW;QAC5C,UAAU,EAAE,qBAAU,CAAC,SAAS;QAChC,mBAAmB,EAAE,EAAE;QACvB,UAAU,EAAE,GAAG;QACf,UAAU,EAAE,GAAG;QACf,wBAAwB,EAAE,EAAE;QAC5B,aAAa,EAAE,6BAAkB,CAAC,QAAQ;QAC1C,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,KAAK;QACf,0BAA0B,EAAE,EAAE;QAC9B,WAAW,EAAE,CAAC;QACd,WAAW,EAAE,CAAC;QACd,gBAAgB,EAAE,KAAK;QACvB,qBAAqB,EAAE,KAAK;QAC5B,KAAK,EAAE,CAAC;KACT;IACD,CAAC,8BAAmB,CAAC,UAAU,CAAC,EAAE;QAChC,MAAM,EAAE,iCAAsB,CAAC,kBAAkB;QACjD,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE,mCAAwB,CAAC,YAAY;QAC/C,SAAS,EAAE,+BAAoB,CAAC,OAAO;QACvC,UAAU,EAAE,gBAAgB;QAC5B,WAAW,EAAE,sBAAW,CAAC,iBAAiB;QAC1C,SAAS,EAAE,0BAAe,CAAC,SAAS;QACpC,aAAa,EAAE,4BAAiB,CAAC,UAAU;QAC3C,QAAQ,EAAE,uBAAY,CAAC,OAAO;QAC9B,cAAc,EAAE,yBAAc,CAAC,UAAU;QACzC,UAAU,EAAE,yBAAc,CAAC,eAAe;QAC1C,YAAY,EAAE,uBAAY,CAAC,UAAU;QACrC,eAAe,EAAE,wBAAe,CAAC,WAAW;QAC5C,UAAU,EAAE,qBAAU,CAAC,UAAU;QACjC,mBAAmB,EAAE,EAAE;QACvB,UAAU,EAAE,EAAE;QACd,UAAU,EAAE,EAAE;QACd,wBAAwB,EAAE,EAAE;QAC5B,aAAa,EAAE,6BAAkB,CAAC,QAAQ;QAC1C,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,KAAK;QACf,0BAA0B,EAAE,EAAE;QAC9B,WAAW,EAAE,CAAC;QACd,WAAW,EAAE,EAAE;QACf,gBAAgB,EAAE,MAAM;QACxB,qBAAqB,EAAE,MAAM;QAC7B,KAAK,EAAE,CAAC;KACT;IACD,CAAC,8BAAmB,CAAC,mBAAmB,CAAC,EAAE;QACzC,MAAM,EAAE,iCAAsB,CAAC,kBAAkB;QACjD,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE,mCAAwB,CAAC,YAAY;QAC/C,SAAS,EAAE,+BAAoB,CAAC,OAAO;QACvC,UAAU,EAAE,gBAAgB;QAC5B,WAAW,EAAE,sBAAW,CAAC,iBAAiB;QAC1C,SAAS,EAAE,0BAAe,CAAC,aAAa;QACxC,aAAa,EAAE,4BAAiB,CAAC,SAAS;QAC1C,QAAQ,EAAE,uBAAY,CAAC,YAAY;QACnC,cAAc,EAAE,yBAAc,CAAC,QAAQ;QACvC,UAAU,EAAE,yBAAc,CAAC,eAAe;QAC1C,YAAY,EAAE,uBAAY,CAAC,UAAU;QACrC,eAAe,EAAE,wBAAe,CAAC,WAAW;QAC5C,UAAU,EAAE,qBAAU,CAAC,UAAU;QACjC,mBAAmB,EAAE,EAAE;QACvB,UAAU,EAAE,CAAC;QACb,UAAU,EAAE,EAAE;QACd,wBAAwB,EAAE,EAAE;QAC5B,aAAa,EAAE,6BAAkB,CAAC,SAAS;QAC3C,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,IAAI;QACd,0BAA0B,EAAE,GAAG;QAC/B,WAAW,EAAE,CAAC;QACd,WAAW,EAAE,EAAE;QACf,gBAAgB,EAAE,MAAM;QACxB,qBAAqB,EAAE,MAAM;QAC7B,KAAK,EAAE,CAAC;KACT;IACD,CAAC,8BAAmB,CAAC,UAAU,CAAC,EAAE;QAChC,MAAM,EAAE,iCAAsB,CAAC,UAAU;QACzC,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE,mCAAwB,CAAC,QAAQ;QAC3C,SAAS,EAAE,+BAAoB,CAAC,OAAO;QACvC,UAAU,EAAE,gBAAgB;QAC5B,WAAW,EAAE,sBAAW,CAAC,iBAAiB;QAC1C,SAAS,EAAE,0BAAe,CAAC,aAAa;QACxC,aAAa,EAAE,4BAAiB,CAAC,SAAS;QAC1C,QAAQ,EAAE,uBAAY,CAAC,YAAY;QACnC,cAAc,EAAE,yBAAc,CAAC,QAAQ;QACvC,UAAU,EAAE,yBAAc,CAAC,eAAe;QAC1C,YAAY,EAAE,uBAAY,CAAC,UAAU;QACrC,eAAe,EAAE,wBAAe,CAAC,WAAW;QAC5C,UAAU,EAAE,qBAAU,CAAC,UAAU;QACjC,mBAAmB,EAAE,EAAE;QACvB,UAAU,EAAE,CAAC;QACb,UAAU,EAAE,EAAE;QACd,wBAAwB,EAAE,EAAE;QAC5B,aAAa,EAAE,6BAAkB,CAAC,SAAS;QAC3C,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,IAAI;QACd,0BAA0B,EAAE,EAAE;QAC9B,WAAW,EAAE,CAAC;QACd,WAAW,EAAE,GAAG;QAChB,gBAAgB,EAAE,OAAO;QACzB,qBAAqB,EAAE,OAAO;QAC9B,KAAK,EAAE,CAAC;KACT;CACF,CAAC;AAGJ,SAAgB,2BAA2B,CACzC,OAA4B;IAE5B,OAAO,gBAAgB,CAAC,OAAO,CAAC,CAAC;AACnC,CAAC;AAYD,SAAgB,2BAA2B,CACzC,OAA4B;IAE5B,OAAO,gBAAgB,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,iCAAsB,CAAC,YAAY;QAC7E,CAAC,CAAC,+BAAoB,CAAC,WAAW;QAClC,CAAC,CAAC,+BAAoB,CAAC,UAAU,CAAC;AACtC,CAAC;AAED,SAAgB,uBAAuB,CACrC,GAA+B;IAE/B,MAAM,UAAU,GAAG,IAAA,qCAAwB,EAAC,GAAG,CAAC,CAAC;IACjD,IAAI,UAAU,CAAC,YAAY,KAAK,SAAS,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,0CAA4B,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;IAC7C,MAAM,OAAO,GAAG,iBAAiB,CAC/B,YAAY,EACZ,gBAAgB,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAC5C,CAAC;IACF,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC1E,MAAM,IAAI,0CAA4B,CAAC;YACrC;gBACE,IAAI,EAAE,mCAAqB,CAAC,OAAO;gBACnC,IAAI,EAAE,wBAAwB;gBAC9B,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,uCAAuC;aACjD;SACF,CAAC,CAAC;IACL,CAAC;IACD,MAAM,eAAe,GAAG,6BAA6B,CAAC,OAAO,CAAC,CAAC;IAC/D,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,0CAA4B,CAAC,eAAe,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,iBAAiB,GAAG,IAAA,gCAAgB,EAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;IACtE,OAAO,UAAU,CAAC,EAAE,GAAG,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,6BAA6B,CACpC,YAAiE;IAOjE,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC;IAC/B,MAAM,MAAM,GAKP,EAAE,CAAC;IACR,IAAI,IAAI,CAAC,SAAS,CAAC,WAAW,KAAK,+BAAoB,CAAC,UAAU,EAAE,CAAC;QACnE,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,iCAAsB,CAAC,YAAY,EAAE,CAAC;YAC7D,MAAM,CAAC,IAAI,CACT,cAAc,CACZ,0BAA0B,EAC1B,kBAAkB,EAClB,wDAAwD,CACzD,CACF,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,mCAAwB,CAAC,SAAS,EAAE,CAAC;YAC9D,MAAM,CAAC,IAAI,CACT,cAAc,CACZ,4BAA4B,EAC5B,oBAAoB,EACpB,8CAA8C,CAC/C,CACF,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,CAAC,aAAa,KAAK,4BAAiB,CAAC,WAAW,EAAE,CAAC;YAClE,MAAM,CAAC,IAAI,CACT,cAAc,CACZ,kCAAkC,EAClC,6BAA6B,EAC7B,kDAAkD,CACnD,CACF,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,KAAK,UAAU,CAAC,EAAE,CAAC;YAClE,MAAM,CAAC,IAAI,CACT,cAAc,CACZ,yBAAyB,EACzB,cAAc,EACd,qDAAqD,CACtD,CACF,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,KAAK,yBAAc,CAAC,WAAW,EAAE,CAAC;YAC5D,MAAM,CAAC,IAAI,CACT,cAAc,CACZ,gCAAgC,EAChC,0BAA0B,EAC1B,qEAAqE,CACtE,CACF,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,CAAC,cAAc,KAAK,yBAAc,CAAC,KAAK,EAAE,CAAC;YAC1D,MAAM,CAAC,IAAI,CACT,cAAc,CACZ,oCAAoC,EACpC,8BAA8B,EAC9B,4CAA4C,CAC7C,CACF,CAAC;QACJ,CAAC;QACD,IACE,IAAI,CAAC,OAAO,CAAC,IAAI,CACf,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,QAAQ,KAAK,kCAAuB,CAAC,WAAW;YACvD,MAAM,CAAC,QAAQ,KAAK,kCAAuB,CAAC,IAAI;YAChD,MAAM,CAAC,QAAQ,KAAK,kCAAuB,CAAC,MAAM;YAClD,CAAC,MAAM,CAAC,QAAQ,KAAK,kCAAuB,CAAC,YAAY;gBACvD,IAAI,CAAC,OAAO,KAAK,8BAAmB,CAAC,oBAAoB,CAAC,CAC/D,EACD,CAAC;YACD,MAAM,CAAC,IAAI,CACT,cAAc,CACZ,oCAAoC,EACpC,cAAc,EACd,sJAAsJ,CACvJ,CACF,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,uBAAY,CAAC,SAAS,EAAE,CAAC;YAClD,MAAM,CAAC,IAAI,CACT,cAAc,CACZ,iCAAiC,EACjC,oBAAoB,EACpB,oDAAoD,CACrD,CACF,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,qBAAU,CAAC,QAAQ,EAAE,CAAC;YAC/C,MAAM,CAAC,IAAI,CACT,cAAc,CACZ,8BAA8B,EAC9B,oBAAoB,EACpB,sDAAsD,CACvD,CACF,CAAC;QACJ,CAAC;QACD,IACE,IAAI,CAAC,aAAa,CAAC,KAAK,KAAK,6BAAkB,CAAC,WAAW;YAC3D,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,EAC3B,CAAC;YACD,MAAM,CAAC,IAAI,CACT,cAAc,CACZ,mCAAmC,EACnC,oBAAoB,EACpB,sEAAsE,CACvE,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QACpD,MAAM,CAAC,IAAI,CACT,cAAc,CACZ,yBAAyB,EACzB,2BAA2B,EAC3B,GAAG,IAAI,CAAC,OAAO,sBAAsB,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,WAAW,CAC5E,CACF,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;QACxC,MAAM,CAAC,IAAI,CACT,cAAc,CACZ,sBAAsB,EACtB,qBAAqB,EACrB,GAAG,IAAI,CAAC,OAAO,sBAAsB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CACnE,CACF,CAAC;IACJ,CAAC;IACD,IACE,IAAI,CAAC,OAAO,KAAK,8BAAmB,CAAC,mBAAmB;QACxD,IAAI,CAAC,OAAO,KAAK,8BAAmB,CAAC,UAAU,EAC/C,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,KAAK,0BAAe,CAAC,aAAa,EAAE,CAAC;YAC7D,MAAM,CAAC,IAAI,CACT,cAAc,CACZ,sCAAsC,EACtC,wBAAwB,EACxB,GAAG,IAAI,CAAC,OAAO,2CAA2C,CAC3D,CACF,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,KAAK,uBAAY,CAAC,YAAY,EAAE,CAAC;YACzD,MAAM,CAAC,IAAI,CACT,cAAc,CACZ,oCAAoC,EACpC,wBAAwB,EACxB,GAAG,IAAI,CAAC,OAAO,kCAAkC,CAClD,CACF,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,CAAC,aAAa,KAAK,4BAAiB,CAAC,SAAS,EAAE,CAAC;YAChE,MAAM,CAAC,IAAI,CACT,cAAc,CACZ,6BAA6B,EAC7B,6BAA6B,EAC7B,GAAG,IAAI,CAAC,OAAO,qCAAqC,CACrD,CACF,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,CAAC,cAAc,KAAK,yBAAc,CAAC,QAAQ,EAAE,CAAC;YAC7D,MAAM,CAAC,IAAI,CACT,cAAc,CACZ,0CAA0C,EAC1C,8BAA8B,EAC9B,GAAG,IAAI,CAAC,OAAO,mCAAmC,CACnD,CACF,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,qBAAU,CAAC,UAAU,EAAE,CAAC;YACjD,MAAM,CAAC,IAAI,CACT,cAAc,CACZ,sCAAsC,EACtC,oBAAoB,EACpB,GAAG,IAAI,CAAC,OAAO,+BAA+B,CAC/C,CACF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC;YACjC,MAAM,CAAC,IAAI,CACT,cAAc,CACZ,4BAA4B,EAC5B,6BAA6B,EAC7B,GAAG,IAAI,CAAC,OAAO,yBAAyB,CACzC,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IACE,IAAI,CAAC,OAAO,KAAK,8BAAmB,CAAC,mBAAmB;QACxD,IAAI,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS,EACrC,CAAC;QACD,MAAM,CAAC,IAAI,CACT,cAAc,CACZ,8BAA8B,EAC9B,yBAAyB,EACzB,4DAA4D,CAC7D,CACF,CAAC;IACJ,CAAC;IACD,IACE,IAAI,CAAC,OAAO,KAAK,8BAAmB,CAAC,mBAAmB;QACxD,IAAI,CAAC,QAAQ,CAAC,UAAU,KAAK,yBAAc,CAAC,eAAe,EAC3D,CAAC;QACD,MAAM,CAAC,IAAI,CACT,cAAc,CACZ,wCAAwC,EACxC,0BAA0B,EAC1B,2DAA2D,CAC5D,CACF,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,gBAAgB,GAKlB;IACF,CAAC,8BAAmB,CAAC,SAAS,CAAC,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;IAC7D,CAAC,8BAAmB,CAAC,OAAO,CAAC,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;IAC3D,CAAC,8BAAmB,CAAC,oBAAoB,CAAC,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;IACxE,CAAC,8BAAmB,CAAC,UAAU,CAAC,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;IAC9D,CAAC,8BAAmB,CAAC,mBAAmB,CAAC,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;IACvE,CAAC,8BAAmB,CAAC,UAAU,CAAC,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;CAC/D,CAAC;AAEF,SAAS,cAAc,CAAC,IAAY,EAAE,IAAY,EAAE,OAAe;IACjE,OAAO,EAAE,IAAI,EAAE,mCAAqB,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AACtE,CAAC;AAED,SAAS,iBAAiB,CACxB,YAAoC,EACpC,QAAqC;IAErC,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC;IAC/B,MAAM,sBAAsB,GAAG,IAAI,GAAG,CACpC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CACnE,CAAC;IACF,OAAO;QACL,UAAU,EAAE,YAAY,CAAC,UAAU;QACnC,IAAI,EAAE,YAAY,CAAC,IAAI;QACvB,QAAQ,EAAE,YAAY,CAAC,QAAQ;QAC/B,UAAU,EAAE,YAAY,CAAC,UAAU;QACnC,IAAI,EAAE;YACJ,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,MAAM,EAAE;gBACN,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,QAAQ,CAAC,MAAM;gBACzC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM;gBAC7C,KAAK,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE;aAC7C;YACD,QAAQ,EAAE;gBACR,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,QAAQ;gBAC7C,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS;oBACvC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;aAC5C;YACD,QAAQ,EAAE;gBACR,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS;gBACxD,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE;gBAC1C,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE;gBAC1C,OAAO,EAAE;oBACP,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;iBAC/D,CAAC,IAAI,EAAE;gBACR,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG;aACvB;YACD,cAAc,EAAE,gCAAgB,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;gBACjD,MAAM,OAAO,GAAG,sBAAsB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI;oBACvD,SAAS;oBACT,SAAS,EAAE,kBAAS,CAAC,OAAO;oBAC5B,UAAU,EAAE,EAAE;iBACf,CAAC;gBACF,OAAO;oBACL,GAAG,OAAO;oBACV,UAAU,EAAE,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE;iBAC3C,CAAC;YACJ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACvE,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAC9C,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CACpC;YACD,OAAO,EAAE;gBACP,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,QAAQ,CAAC,WAAW;gBAC/C,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS;aACxD;YACD,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;gBAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC1D,OAAO,OAAO,KAAK,CAAC;oBAClB,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC;oBAC7C,CAAC,CAAC,OAAO,CAAC;YACd,CAAC,CAAC;YACF,QAAQ,EAAE;gBACR,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,aAAa,IAAI,QAAQ,CAAC,aAAa;gBACpE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ;gBACrD,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc,IAAI,QAAQ,CAAC,cAAc;gBACvE,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,IAAI,QAAQ,CAAC,UAAU;gBAC3D,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS;oBACvC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;gBAC3C,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,kBAAkB,KAAK,SAAS;oBAChD,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC;aAC9D;YACD,OAAO,EAAE;gBACP,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,QAAQ,CAAC,YAAY;gBAClD,eAAe,EACb,IAAI,CAAC,OAAO,CAAC,eAAe,IAAI,QAAQ,CAAC,eAAe;gBAC1D,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS;oBAC1C,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;gBAClD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,KAAK,SAAS;oBAChD,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,mBAAmB,EAAE,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC;gBAC9D,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS;oBAC5C,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;aACvD;YACD,QAAQ,EAAE;gBACR,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,UAAU;gBAC/C,aAAa,EACX,IAAI,CAAC,QAAQ,CAAC,aAAa,IAAI,QAAQ,CAAC,mBAAmB;gBAC7D,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,IAAI,QAAQ,CAAC,UAAU;gBAC3D,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,IAAI,QAAQ,CAAC,UAAU;gBAC3D,wBAAwB,EACtB,IAAI,CAAC,QAAQ,CAAC,wBAAwB;oBACtC,QAAQ,CAAC,wBAAwB;gBACnC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,oBAAoB,KAAK,SAAS;oBAClD,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,oBAAoB,EAAE,IAAI,CAAC,QAAQ,CAAC,oBAAoB,EAAE,CAAC;aAClE;YACD,aAAa,EAAE;gBACb,KAAK,EAAE,IAAI,CAAC,aAAa,CAAC,KAAK,IAAI,QAAQ,CAAC,aAAa;gBACzD,OAAO,EAAE,IAAI,CAAC,aAAa,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO;gBACvD,OAAO,EAAE,IAAI,CAAC,aAAa,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO;gBACvD,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ;gBAC1D,aAAa,EACX,IAAI,CAAC,aAAa,CAAC,aAAa;oBAChC,QAAQ,CAAC,0BAA0B;gBACrC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,eAAe,KAAK,SAAS;oBAClD,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,aAAa,CAAC,eAAe,EAAE,CAAC;aAC7D;YACD,QAAQ,EAAE;gBACR,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,IAAI,QAAQ,CAAC,WAAW;gBAC9D,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,IAAI,QAAQ,CAAC,WAAW;gBAC9D,gBAAgB,EACd,IAAI,CAAC,QAAQ,CAAC,gBAAgB,IAAI,QAAQ,CAAC,gBAAgB;gBAC7D,qBAAqB,EACnB,IAAI,CAAC,QAAQ,CAAC,qBAAqB,IAAI,QAAQ,CAAC,qBAAqB;gBACvE,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK;aAC7C;YAED,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;YAC1B,OAAO,EAAE;gBACP,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,yBAAc,CAAC,MAAM;gBACtD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS;oBACvC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;aAC7C;SACF;KACF,CAAC;AACJ,CAAC;AAED,SAAgB,gBAAgB,CAC9B,YAAiE;IAEjE,OAAO;QACL,UAAU,EAAE,YAAY,CAAC,UAAU;QACnC,IAAI,EAAE,YAAY,CAAC,IAAI;QACvB,QAAQ,EAAE,YAAY,CAAC,QAAQ;QAC/B,IAAI,EAAE,YAAY,CAAC,IAAI;KACxB,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAI,KAAQ;IAC7B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3E,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACzC,UAAU,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,uBAAuB,CACrC,IAA8B;IAE9B,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAClC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,KAAK,kBAAS,CAAC,OAAO,CACrD,CAAC;AACJ,CAAC"}
|