@xemahq/xema 0.13.0 → 0.15.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (564) hide show
  1. package/README.md +90 -21
  2. package/dist/assets/appliance-base/distribution.lock.json +5144 -0
  3. package/dist/assets/appliance-base/images.lock.json +1706 -0
  4. package/dist/assets/appliance-lean/distribution.lock.json +2888 -0
  5. package/dist/assets/appliance-lean/images.lock.json +1229 -0
  6. package/dist/assets/boot-graph.json +380 -28
  7. package/dist/assets/cloud/distribution.lock.json +5278 -0
  8. package/dist/assets/cloud/images.lock.json +1713 -0
  9. package/dist/assets/core/distribution.lock.json +2401 -354
  10. package/dist/assets/core/images.lock.json +1208 -268
  11. package/dist/assets/distribution-assets.manifest.json +147 -0
  12. package/dist/assets/keycloak/realm-xema.json +412 -0
  13. package/dist/assets/minimal/distribution.lock.json +2710 -0
  14. package/dist/assets/minimal/images.lock.json +1149 -0
  15. package/dist/assets/oss/distribution.lock.json +3742 -494
  16. package/dist/assets/oss/images.lock.json +1591 -472
  17. package/dist/assets/starter/distribution.lock.json +3422 -0
  18. package/dist/assets/starter/images.lock.json +1404 -0
  19. package/dist/cli.d.ts.map +1 -1
  20. package/dist/cli.js +40 -1
  21. package/dist/cli.js.map +1 -1
  22. package/dist/commands/apply.d.ts.map +1 -1
  23. package/dist/commands/apply.js +2 -2
  24. package/dist/commands/apply.js.map +1 -1
  25. package/dist/commands/biome-dev.d.ts +3 -0
  26. package/dist/commands/biome-dev.d.ts.map +1 -0
  27. package/dist/commands/biome-dev.js +176 -0
  28. package/dist/commands/biome-dev.js.map +1 -0
  29. package/dist/commands/biome-validate.d.ts +10 -0
  30. package/dist/commands/biome-validate.d.ts.map +1 -0
  31. package/dist/commands/biome-validate.js +49 -0
  32. package/dist/commands/biome-validate.js.map +1 -0
  33. package/dist/commands/biome.d.ts.map +1 -1
  34. package/dist/commands/biome.js +437 -26
  35. package/dist/commands/biome.js.map +1 -1
  36. package/dist/commands/canopy.d.ts +3 -0
  37. package/dist/commands/canopy.d.ts.map +1 -0
  38. package/dist/commands/canopy.js +214 -0
  39. package/dist/commands/canopy.js.map +1 -0
  40. package/dist/commands/config.d.ts +3 -0
  41. package/dist/commands/config.d.ts.map +1 -0
  42. package/dist/commands/config.js +78 -0
  43. package/dist/commands/config.js.map +1 -0
  44. package/dist/commands/dev.d.ts.map +1 -1
  45. package/dist/commands/dev.js +92 -20
  46. package/dist/commands/dev.js.map +1 -1
  47. package/dist/commands/dist.d.ts +13 -0
  48. package/dist/commands/dist.d.ts.map +1 -1
  49. package/dist/commands/dist.js +51 -11
  50. package/dist/commands/dist.js.map +1 -1
  51. package/dist/commands/doctor.d.ts +25 -0
  52. package/dist/commands/doctor.d.ts.map +1 -1
  53. package/dist/commands/doctor.js +422 -18
  54. package/dist/commands/doctor.js.map +1 -1
  55. package/dist/commands/down.d.ts +10 -0
  56. package/dist/commands/down.d.ts.map +1 -1
  57. package/dist/commands/down.js +107 -33
  58. package/dist/commands/down.js.map +1 -1
  59. package/dist/commands/export.js +1 -1
  60. package/dist/commands/export.js.map +1 -1
  61. package/dist/commands/import.d.ts.map +1 -1
  62. package/dist/commands/import.js +2 -2
  63. package/dist/commands/import.js.map +1 -1
  64. package/dist/commands/init.d.ts.map +1 -1
  65. package/dist/commands/init.js +56 -3
  66. package/dist/commands/init.js.map +1 -1
  67. package/dist/commands/installation.d.ts +3 -0
  68. package/dist/commands/installation.d.ts.map +1 -0
  69. package/dist/commands/installation.js +258 -0
  70. package/dist/commands/installation.js.map +1 -0
  71. package/dist/commands/license.d.ts +3 -0
  72. package/dist/commands/license.d.ts.map +1 -0
  73. package/dist/commands/license.js +97 -0
  74. package/dist/commands/license.js.map +1 -0
  75. package/dist/commands/login.d.ts +4 -0
  76. package/dist/commands/login.d.ts.map +1 -0
  77. package/dist/commands/login.js +127 -0
  78. package/dist/commands/login.js.map +1 -0
  79. package/dist/commands/logs.d.ts +21 -0
  80. package/dist/commands/logs.d.ts.map +1 -1
  81. package/dist/commands/logs.js +133 -32
  82. package/dist/commands/logs.js.map +1 -1
  83. package/dist/commands/objects.d.ts.map +1 -1
  84. package/dist/commands/objects.js +85 -6
  85. package/dist/commands/objects.js.map +1 -1
  86. package/dist/commands/plan.d.ts.map +1 -1
  87. package/dist/commands/plan.js +2 -2
  88. package/dist/commands/plan.js.map +1 -1
  89. package/dist/commands/run.d.ts.map +1 -1
  90. package/dist/commands/run.js +61 -9
  91. package/dist/commands/run.js.map +1 -1
  92. package/dist/commands/serve.d.ts.map +1 -1
  93. package/dist/commands/serve.js +67 -14
  94. package/dist/commands/serve.js.map +1 -1
  95. package/dist/commands/shell.d.ts.map +1 -1
  96. package/dist/commands/shell.js +190 -6
  97. package/dist/commands/shell.js.map +1 -1
  98. package/dist/commands/source.d.ts +3 -0
  99. package/dist/commands/source.d.ts.map +1 -0
  100. package/dist/commands/source.js +120 -0
  101. package/dist/commands/source.js.map +1 -0
  102. package/dist/commands/status.d.ts.map +1 -1
  103. package/dist/commands/status.js +29 -3
  104. package/dist/commands/status.js.map +1 -1
  105. package/dist/commands/up.d.ts.map +1 -1
  106. package/dist/commands/up.js +70 -5
  107. package/dist/commands/up.js.map +1 -1
  108. package/dist/dev/env-defaults.d.ts +1 -0
  109. package/dist/dev/env-defaults.d.ts.map +1 -1
  110. package/dist/dev/env-defaults.js +24 -12
  111. package/dist/dev/env-defaults.js.map +1 -1
  112. package/dist/dev/forked-worker-bootstrap-protocol.d.ts +17 -0
  113. package/dist/dev/forked-worker-bootstrap-protocol.d.ts.map +1 -0
  114. package/dist/dev/forked-worker-bootstrap-protocol.js +35 -0
  115. package/dist/dev/forked-worker-bootstrap-protocol.js.map +1 -0
  116. package/dist/dev/forked-worker-bootstrap.d.ts +18 -0
  117. package/dist/dev/forked-worker-bootstrap.d.ts.map +1 -0
  118. package/dist/dev/forked-worker-bootstrap.js +84 -0
  119. package/dist/dev/forked-worker-bootstrap.js.map +1 -0
  120. package/dist/dev/forked-worker.d.ts +29 -0
  121. package/dist/dev/forked-worker.d.ts.map +1 -1
  122. package/dist/dev/forked-worker.js +267 -42
  123. package/dist/dev/forked-worker.js.map +1 -1
  124. package/dist/dev/opa-policies.d.ts +3 -0
  125. package/dist/dev/opa-policies.d.ts.map +1 -0
  126. package/dist/dev/opa-policies.js +64 -0
  127. package/dist/dev/opa-policies.js.map +1 -0
  128. package/dist/lib/cli-errors.d.ts +7 -0
  129. package/dist/lib/cli-errors.d.ts.map +1 -0
  130. package/dist/lib/cli-errors.js +30 -0
  131. package/dist/lib/cli-errors.js.map +1 -0
  132. package/dist/lib/control-plane.d.ts +5 -1
  133. package/dist/lib/control-plane.d.ts.map +1 -1
  134. package/dist/lib/control-plane.js +61 -8
  135. package/dist/lib/control-plane.js.map +1 -1
  136. package/dist/lib/exit-codes.d.ts +3 -4
  137. package/dist/lib/exit-codes.d.ts.map +1 -1
  138. package/dist/lib/exit-codes.js +3 -4
  139. package/dist/lib/exit-codes.js.map +1 -1
  140. package/dist/lib/http-error.d.ts +2 -0
  141. package/dist/lib/http-error.d.ts.map +1 -0
  142. package/dist/lib/http-error.js +51 -0
  143. package/dist/lib/http-error.js.map +1 -0
  144. package/dist/lib/roster-profile.d.ts +10 -0
  145. package/dist/lib/roster-profile.d.ts.map +1 -0
  146. package/dist/lib/roster-profile.js +44 -0
  147. package/dist/lib/roster-profile.js.map +1 -0
  148. package/dist/runtime/asset-provenance.d.ts +17 -0
  149. package/dist/runtime/asset-provenance.d.ts.map +1 -0
  150. package/dist/runtime/asset-provenance.js +29 -0
  151. package/dist/runtime/asset-provenance.js.map +1 -0
  152. package/dist/runtime/auth/client-bootstrap.d.ts +11 -0
  153. package/dist/runtime/auth/client-bootstrap.d.ts.map +1 -0
  154. package/dist/runtime/auth/client-bootstrap.js +60 -0
  155. package/dist/runtime/auth/client-bootstrap.js.map +1 -0
  156. package/dist/runtime/auth/device-flow.d.ts +43 -0
  157. package/dist/runtime/auth/device-flow.d.ts.map +1 -0
  158. package/dist/runtime/auth/device-flow.js +201 -0
  159. package/dist/runtime/auth/device-flow.js.map +1 -0
  160. package/dist/runtime/auth/session-auth.d.ts +8 -0
  161. package/dist/runtime/auth/session-auth.d.ts.map +1 -0
  162. package/dist/runtime/auth/session-auth.js +43 -0
  163. package/dist/runtime/auth/session-auth.js.map +1 -0
  164. package/dist/runtime/auth/session-store.d.ts +19 -0
  165. package/dist/runtime/auth/session-store.d.ts.map +1 -0
  166. package/dist/runtime/auth/session-store.js +83 -0
  167. package/dist/runtime/auth/session-store.js.map +1 -0
  168. package/dist/runtime/auth/token-claims.d.ts +2 -0
  169. package/dist/runtime/auth/token-claims.d.ts.map +1 -0
  170. package/dist/runtime/auth/token-claims.js +45 -0
  171. package/dist/runtime/auth/token-claims.js.map +1 -0
  172. package/dist/runtime/biome-dev.d.ts +28 -0
  173. package/dist/runtime/biome-dev.d.ts.map +1 -0
  174. package/dist/runtime/biome-dev.js +131 -0
  175. package/dist/runtime/biome-dev.js.map +1 -0
  176. package/dist/runtime/biome-local-install.d.ts +29 -0
  177. package/dist/runtime/biome-local-install.d.ts.map +1 -0
  178. package/dist/runtime/biome-local-install.js +243 -0
  179. package/dist/runtime/biome-local-install.js.map +1 -0
  180. package/dist/runtime/biome-provenance.d.ts +26 -0
  181. package/dist/runtime/biome-provenance.d.ts.map +1 -0
  182. package/dist/runtime/biome-provenance.js +70 -0
  183. package/dist/runtime/biome-provenance.js.map +1 -0
  184. package/dist/runtime/biome-publish.d.ts +48 -0
  185. package/dist/runtime/biome-publish.d.ts.map +1 -0
  186. package/dist/runtime/biome-publish.js +278 -0
  187. package/dist/runtime/biome-publish.js.map +1 -0
  188. package/dist/runtime/biome-scaffold.d.ts +35 -0
  189. package/dist/runtime/biome-scaffold.d.ts.map +1 -0
  190. package/dist/runtime/biome-scaffold.js +151 -0
  191. package/dist/runtime/biome-scaffold.js.map +1 -0
  192. package/dist/runtime/biome-validate.d.ts +28 -0
  193. package/dist/runtime/biome-validate.d.ts.map +1 -0
  194. package/dist/runtime/biome-validate.js +452 -0
  195. package/dist/runtime/biome-validate.js.map +1 -0
  196. package/dist/runtime/boot-graph-loader.d.ts +1 -0
  197. package/dist/runtime/boot-graph-loader.d.ts.map +1 -1
  198. package/dist/runtime/boot-graph-loader.js +99 -7
  199. package/dist/runtime/boot-graph-loader.js.map +1 -1
  200. package/dist/runtime/canopy-refs.d.ts +8 -0
  201. package/dist/runtime/canopy-refs.d.ts.map +1 -0
  202. package/dist/runtime/canopy-refs.js +51 -0
  203. package/dist/runtime/canopy-refs.js.map +1 -0
  204. package/dist/runtime/canopy-replies.d.ts +14 -0
  205. package/dist/runtime/canopy-replies.d.ts.map +1 -0
  206. package/dist/runtime/canopy-replies.js +39 -0
  207. package/dist/runtime/canopy-replies.js.map +1 -0
  208. package/dist/runtime/capability-invoke.d.ts +35 -0
  209. package/dist/runtime/capability-invoke.d.ts.map +1 -0
  210. package/dist/runtime/capability-invoke.js +119 -0
  211. package/dist/runtime/capability-invoke.js.map +1 -0
  212. package/dist/runtime/cleanup.d.ts +10 -0
  213. package/dist/runtime/cleanup.d.ts.map +1 -0
  214. package/dist/runtime/cleanup.js +35 -0
  215. package/dist/runtime/cleanup.js.map +1 -0
  216. package/dist/runtime/config/dev-mode.d.ts +8 -0
  217. package/dist/runtime/config/dev-mode.d.ts.map +1 -0
  218. package/dist/runtime/config/dev-mode.js +84 -0
  219. package/dist/runtime/config/dev-mode.js.map +1 -0
  220. package/dist/runtime/config/init-presets.d.ts +1 -1
  221. package/dist/runtime/config/init-presets.d.ts.map +1 -1
  222. package/dist/runtime/config/init-presets.js +68 -13
  223. package/dist/runtime/config/init-presets.js.map +1 -1
  224. package/dist/runtime/config/loader.d.ts +1 -0
  225. package/dist/runtime/config/loader.d.ts.map +1 -1
  226. package/dist/runtime/config/loader.js +41 -5
  227. package/dist/runtime/config/loader.js.map +1 -1
  228. package/dist/runtime/config/schema.d.ts +27 -12
  229. package/dist/runtime/config/schema.d.ts.map +1 -1
  230. package/dist/runtime/config/schema.js +113 -8
  231. package/dist/runtime/config/schema.js.map +1 -1
  232. package/dist/runtime/config/sources-config.d.ts +14 -0
  233. package/dist/runtime/config/sources-config.d.ts.map +1 -0
  234. package/dist/runtime/config/sources-config.js +79 -0
  235. package/dist/runtime/config/sources-config.js.map +1 -0
  236. package/dist/runtime/distribution/available-biome.d.ts.map +1 -1
  237. package/dist/runtime/distribution/available-biome.js +2 -0
  238. package/dist/runtime/distribution/available-biome.js.map +1 -1
  239. package/dist/runtime/distribution/compose.d.ts +2 -1
  240. package/dist/runtime/distribution/compose.d.ts.map +1 -1
  241. package/dist/runtime/distribution/compose.js +4 -1
  242. package/dist/runtime/distribution/compose.js.map +1 -1
  243. package/dist/runtime/env-seeder.d.ts +5 -0
  244. package/dist/runtime/env-seeder.d.ts.map +1 -1
  245. package/dist/runtime/env-seeder.js +152 -19
  246. package/dist/runtime/env-seeder.js.map +1 -1
  247. package/dist/runtime/foreground.d.ts +9 -0
  248. package/dist/runtime/foreground.d.ts.map +1 -1
  249. package/dist/runtime/foreground.js +37 -3
  250. package/dist/runtime/foreground.js.map +1 -1
  251. package/dist/runtime/infra/infra-catalog.d.ts +34 -1
  252. package/dist/runtime/infra/infra-catalog.d.ts.map +1 -1
  253. package/dist/runtime/infra/infra-catalog.js +202 -10
  254. package/dist/runtime/infra/infra-catalog.js.map +1 -1
  255. package/dist/runtime/infra/infra-environment.d.ts +10 -0
  256. package/dist/runtime/infra/infra-environment.d.ts.map +1 -0
  257. package/dist/runtime/infra/infra-environment.js +76 -0
  258. package/dist/runtime/infra/infra-environment.js.map +1 -0
  259. package/dist/runtime/infra/infra-plan.d.ts +2 -1
  260. package/dist/runtime/infra/infra-plan.d.ts.map +1 -1
  261. package/dist/runtime/infra/infra-plan.js +10 -0
  262. package/dist/runtime/infra/infra-plan.js.map +1 -1
  263. package/dist/runtime/infra/infra-runner.d.ts +16 -1
  264. package/dist/runtime/infra/infra-runner.d.ts.map +1 -1
  265. package/dist/runtime/infra/infra-runner.js +245 -55
  266. package/dist/runtime/infra/infra-runner.js.map +1 -1
  267. package/dist/runtime/infra/keycloak-realm.d.ts +25 -0
  268. package/dist/runtime/infra/keycloak-realm.d.ts.map +1 -0
  269. package/dist/runtime/infra/keycloak-realm.js +116 -0
  270. package/dist/runtime/infra/keycloak-realm.js.map +1 -0
  271. package/dist/runtime/infra/postgres-endpoint.d.ts +8 -0
  272. package/dist/runtime/infra/postgres-endpoint.d.ts.map +1 -0
  273. package/dist/runtime/infra/postgres-endpoint.js +21 -0
  274. package/dist/runtime/infra/postgres-endpoint.js.map +1 -0
  275. package/dist/runtime/installation/compiler.d.ts +114 -0
  276. package/dist/runtime/installation/compiler.d.ts.map +1 -0
  277. package/dist/runtime/installation/compiler.js +456 -0
  278. package/dist/runtime/installation/compiler.js.map +1 -0
  279. package/dist/runtime/installation/contract.d.ts +296 -0
  280. package/dist/runtime/installation/contract.d.ts.map +1 -0
  281. package/dist/runtime/installation/contract.js +504 -0
  282. package/dist/runtime/installation/contract.js.map +1 -0
  283. package/dist/runtime/installation/current-launcher-renderer.d.ts +12 -0
  284. package/dist/runtime/installation/current-launcher-renderer.d.ts.map +1 -0
  285. package/dist/runtime/installation/current-launcher-renderer.js +123 -0
  286. package/dist/runtime/installation/current-launcher-renderer.js.map +1 -0
  287. package/dist/runtime/installation/diagnostics.d.ts +16 -0
  288. package/dist/runtime/installation/diagnostics.d.ts.map +1 -0
  289. package/dist/runtime/installation/diagnostics.js +21 -0
  290. package/dist/runtime/installation/diagnostics.js.map +1 -0
  291. package/dist/runtime/installation/diff.d.ts +32 -0
  292. package/dist/runtime/installation/diff.d.ts.map +1 -0
  293. package/dist/runtime/installation/diff.js +136 -0
  294. package/dist/runtime/installation/diff.js.map +1 -0
  295. package/dist/runtime/installation/format.d.ts +3 -0
  296. package/dist/runtime/installation/format.d.ts.map +1 -0
  297. package/dist/runtime/installation/format.js +22 -0
  298. package/dist/runtime/installation/format.js.map +1 -0
  299. package/dist/runtime/installation/from-current-config.d.ts +9 -0
  300. package/dist/runtime/installation/from-current-config.d.ts.map +1 -0
  301. package/dist/runtime/installation/from-current-config.js +245 -0
  302. package/dist/runtime/installation/from-current-config.js.map +1 -0
  303. package/dist/runtime/installation/helm-release-readiness.d.ts +9 -0
  304. package/dist/runtime/installation/helm-release-readiness.d.ts.map +1 -0
  305. package/dist/runtime/installation/helm-release-readiness.js +97 -0
  306. package/dist/runtime/installation/helm-release-readiness.js.map +1 -0
  307. package/dist/runtime/installation/helm-release.d.ts +24 -0
  308. package/dist/runtime/installation/helm-release.d.ts.map +1 -0
  309. package/dist/runtime/installation/helm-release.js +96 -0
  310. package/dist/runtime/installation/helm-release.js.map +1 -0
  311. package/dist/runtime/installation/index.d.ts +22 -0
  312. package/dist/runtime/installation/index.d.ts.map +1 -0
  313. package/dist/runtime/installation/index.js +38 -0
  314. package/dist/runtime/installation/index.js.map +1 -0
  315. package/dist/runtime/installation/json-schema.d.ts +4 -0
  316. package/dist/runtime/installation/json-schema.d.ts.map +1 -0
  317. package/dist/runtime/installation/json-schema.js +16 -0
  318. package/dist/runtime/installation/json-schema.js.map +1 -0
  319. package/dist/runtime/installation/kubernetes-readiness.d.ts +60 -0
  320. package/dist/runtime/installation/kubernetes-readiness.d.ts.map +1 -0
  321. package/dist/runtime/installation/kubernetes-readiness.js +384 -0
  322. package/dist/runtime/installation/kubernetes-readiness.js.map +1 -0
  323. package/dist/runtime/installation/lifecycle.d.ts +25 -0
  324. package/dist/runtime/installation/lifecycle.d.ts.map +1 -0
  325. package/dist/runtime/installation/lifecycle.js +157 -0
  326. package/dist/runtime/installation/lifecycle.js.map +1 -0
  327. package/dist/runtime/installation/readiness-proof.d.ts +72 -0
  328. package/dist/runtime/installation/readiness-proof.d.ts.map +1 -0
  329. package/dist/runtime/installation/readiness-proof.js +142 -0
  330. package/dist/runtime/installation/readiness-proof.js.map +1 -0
  331. package/dist/runtime/installation/readiness.d.ts +21 -0
  332. package/dist/runtime/installation/readiness.d.ts.map +1 -0
  333. package/dist/runtime/installation/readiness.js +418 -0
  334. package/dist/runtime/installation/readiness.js.map +1 -0
  335. package/dist/runtime/installation/serialization.d.ts +3 -0
  336. package/dist/runtime/installation/serialization.d.ts.map +1 -0
  337. package/dist/runtime/installation/serialization.js +39 -0
  338. package/dist/runtime/installation/serialization.js.map +1 -0
  339. package/dist/runtime/installation/setup-profile.d.ts +8 -0
  340. package/dist/runtime/installation/setup-profile.d.ts.map +1 -0
  341. package/dist/runtime/installation/setup-profile.js +41 -0
  342. package/dist/runtime/installation/setup-profile.js.map +1 -0
  343. package/dist/runtime/installation/setup-renderer.d.ts +31 -0
  344. package/dist/runtime/installation/setup-renderer.d.ts.map +1 -0
  345. package/dist/runtime/installation/setup-renderer.js +238 -0
  346. package/dist/runtime/installation/setup-renderer.js.map +1 -0
  347. package/dist/runtime/installation/state-store.d.ts +28 -0
  348. package/dist/runtime/installation/state-store.d.ts.map +1 -0
  349. package/dist/runtime/installation/state-store.js +377 -0
  350. package/dist/runtime/installation/state-store.js.map +1 -0
  351. package/dist/runtime/installation/status.d.ts +24 -0
  352. package/dist/runtime/installation/status.d.ts.map +1 -0
  353. package/dist/runtime/installation/status.js +52 -0
  354. package/dist/runtime/installation/status.js.map +1 -0
  355. package/dist/runtime/installation/support-bundle.d.ts +30 -0
  356. package/dist/runtime/installation/support-bundle.d.ts.map +1 -0
  357. package/dist/runtime/installation/support-bundle.js +145 -0
  358. package/dist/runtime/installation/support-bundle.js.map +1 -0
  359. package/dist/runtime/installation/to-current-config.d.ts +4 -0
  360. package/dist/runtime/installation/to-current-config.d.ts.map +1 -0
  361. package/dist/runtime/installation/to-current-config.js +171 -0
  362. package/dist/runtime/installation/to-current-config.js.map +1 -0
  363. package/dist/runtime/installation/validation.d.ts +8 -0
  364. package/dist/runtime/installation/validation.d.ts.map +1 -0
  365. package/dist/runtime/installation/validation.js +117 -0
  366. package/dist/runtime/installation/validation.js.map +1 -0
  367. package/dist/runtime/installation/validators/common.d.ts +4 -0
  368. package/dist/runtime/installation/validators/common.d.ts.map +1 -0
  369. package/dist/runtime/installation/validators/common.js +32 -0
  370. package/dist/runtime/installation/validators/common.js.map +1 -0
  371. package/dist/runtime/installation/validators/infrastructure.d.ts +4 -0
  372. package/dist/runtime/installation/validators/infrastructure.d.ts.map +1 -0
  373. package/dist/runtime/installation/validators/infrastructure.js +96 -0
  374. package/dist/runtime/installation/validators/infrastructure.js.map +1 -0
  375. package/dist/runtime/installation/validators/operational.d.ts +4 -0
  376. package/dist/runtime/installation/validators/operational.d.ts.map +1 -0
  377. package/dist/runtime/installation/validators/operational.js +68 -0
  378. package/dist/runtime/installation/validators/operational.js.map +1 -0
  379. package/dist/runtime/installation/validators/profile.d.ts +4 -0
  380. package/dist/runtime/installation/validators/profile.d.ts.map +1 -0
  381. package/dist/runtime/installation/validators/profile.js +80 -0
  382. package/dist/runtime/installation/validators/profile.js.map +1 -0
  383. package/dist/runtime/installation/validators/secrets.d.ts +4 -0
  384. package/dist/runtime/installation/validators/secrets.d.ts.map +1 -0
  385. package/dist/runtime/installation/validators/secrets.js +85 -0
  386. package/dist/runtime/installation/validators/secrets.js.map +1 -0
  387. package/dist/runtime/launch-plan-format.d.ts +3 -0
  388. package/dist/runtime/launch-plan-format.d.ts.map +1 -0
  389. package/dist/runtime/launch-plan-format.js +57 -0
  390. package/dist/runtime/launch-plan-format.js.map +1 -0
  391. package/dist/runtime/launch.d.ts +35 -3
  392. package/dist/runtime/launch.d.ts.map +1 -1
  393. package/dist/runtime/launch.js +382 -37
  394. package/dist/runtime/launch.js.map +1 -1
  395. package/dist/runtime/license/license-clock.d.ts +12 -0
  396. package/dist/runtime/license/license-clock.d.ts.map +1 -0
  397. package/dist/runtime/license/license-clock.js +57 -0
  398. package/dist/runtime/license/license-clock.js.map +1 -0
  399. package/dist/runtime/license/license-report.d.ts +19 -0
  400. package/dist/runtime/license/license-report.d.ts.map +1 -0
  401. package/dist/runtime/license/license-report.js +105 -0
  402. package/dist/runtime/license/license-report.js.map +1 -0
  403. package/dist/runtime/license/license-store.d.ts +5 -0
  404. package/dist/runtime/license/license-store.d.ts.map +1 -0
  405. package/dist/runtime/license/license-store.js +11 -0
  406. package/dist/runtime/license/license-store.js.map +1 -0
  407. package/dist/runtime/license/registry-credential.d.ts +26 -0
  408. package/dist/runtime/license/registry-credential.d.ts.map +1 -0
  409. package/dist/runtime/license/registry-credential.js +94 -0
  410. package/dist/runtime/license/registry-credential.js.map +1 -0
  411. package/dist/runtime/license/resolve-license.d.ts +30 -0
  412. package/dist/runtime/license/resolve-license.d.ts.map +1 -0
  413. package/dist/runtime/license/resolve-license.js +73 -0
  414. package/dist/runtime/license/resolve-license.js.map +1 -0
  415. package/dist/runtime/license/store-license.d.ts +18 -0
  416. package/dist/runtime/license/store-license.d.ts.map +1 -0
  417. package/dist/runtime/license/store-license.js +26 -0
  418. package/dist/runtime/license/store-license.js.map +1 -0
  419. package/dist/runtime/lock-loader.d.ts +3 -6
  420. package/dist/runtime/lock-loader.d.ts.map +1 -1
  421. package/dist/runtime/lock-loader.js +26 -20
  422. package/dist/runtime/lock-loader.js.map +1 -1
  423. package/dist/runtime/native-process-group.d.ts +46 -0
  424. package/dist/runtime/native-process-group.d.ts.map +1 -0
  425. package/dist/runtime/native-process-group.js +390 -0
  426. package/dist/runtime/native-process-group.js.map +1 -0
  427. package/dist/runtime/object-registry-client.d.ts +31 -0
  428. package/dist/runtime/object-registry-client.d.ts.map +1 -0
  429. package/dist/runtime/object-registry-client.js +54 -0
  430. package/dist/runtime/object-registry-client.js.map +1 -0
  431. package/dist/runtime/paths.d.ts +2 -0
  432. package/dist/runtime/paths.d.ts.map +1 -1
  433. package/dist/runtime/paths.js +3 -0
  434. package/dist/runtime/paths.js.map +1 -1
  435. package/dist/runtime/roster.d.ts +12 -5
  436. package/dist/runtime/roster.d.ts.map +1 -1
  437. package/dist/runtime/roster.js +89 -11
  438. package/dist/runtime/roster.js.map +1 -1
  439. package/dist/runtime/run-manifest.d.ts +52 -0
  440. package/dist/runtime/run-manifest.d.ts.map +1 -0
  441. package/dist/runtime/run-manifest.js +587 -0
  442. package/dist/runtime/run-manifest.js.map +1 -0
  443. package/dist/runtime/runner/container-preflight.d.ts +77 -0
  444. package/dist/runtime/runner/container-preflight.d.ts.map +1 -0
  445. package/dist/runtime/runner/container-preflight.js +360 -0
  446. package/dist/runtime/runner/container-preflight.js.map +1 -0
  447. package/dist/runtime/runner/container-runner.d.ts +14 -0
  448. package/dist/runtime/runner/container-runner.d.ts.map +1 -1
  449. package/dist/runtime/runner/container-runner.js +110 -14
  450. package/dist/runtime/runner/container-runner.js.map +1 -1
  451. package/dist/runtime/runner/docker-cli.d.ts +35 -2
  452. package/dist/runtime/runner/docker-cli.d.ts.map +1 -1
  453. package/dist/runtime/runner/docker-cli.js +314 -9
  454. package/dist/runtime/runner/docker-cli.js.map +1 -1
  455. package/dist/runtime/runner/health-probe.d.ts +1 -0
  456. package/dist/runtime/runner/health-probe.d.ts.map +1 -1
  457. package/dist/runtime/runner/health-probe.js +3 -2
  458. package/dist/runtime/runner/health-probe.js.map +1 -1
  459. package/dist/runtime/runner/helm-cli.d.ts +19 -1
  460. package/dist/runtime/runner/helm-cli.d.ts.map +1 -1
  461. package/dist/runtime/runner/helm-cli.js +76 -8
  462. package/dist/runtime/runner/helm-cli.js.map +1 -1
  463. package/dist/runtime/runner/helm-runner.d.ts +3 -0
  464. package/dist/runtime/runner/helm-runner.d.ts.map +1 -1
  465. package/dist/runtime/runner/helm-runner.js +23 -7
  466. package/dist/runtime/runner/helm-runner.js.map +1 -1
  467. package/dist/runtime/runner/host-platform.d.ts +39 -0
  468. package/dist/runtime/runner/host-platform.d.ts.map +1 -0
  469. package/dist/runtime/runner/host-platform.js +136 -0
  470. package/dist/runtime/runner/host-platform.js.map +1 -0
  471. package/dist/runtime/runner/kube-cli.d.ts +23 -0
  472. package/dist/runtime/runner/kube-cli.d.ts.map +1 -0
  473. package/dist/runtime/runner/kube-cli.js +112 -0
  474. package/dist/runtime/runner/kube-cli.js.map +1 -0
  475. package/dist/runtime/runner/native-runner.d.ts.map +1 -1
  476. package/dist/runtime/runner/native-runner.js +46 -15
  477. package/dist/runtime/runner/native-runner.js.map +1 -1
  478. package/dist/runtime/runner/service-runner.d.ts +5 -0
  479. package/dist/runtime/runner/service-runner.d.ts.map +1 -1
  480. package/dist/runtime/runner/service-runner.js.map +1 -1
  481. package/dist/runtime/runner/stream-outcome.d.ts +7 -0
  482. package/dist/runtime/runner/stream-outcome.d.ts.map +1 -0
  483. package/dist/runtime/runner/stream-outcome.js +13 -0
  484. package/dist/runtime/runner/stream-outcome.js.map +1 -0
  485. package/dist/runtime/secrets/managed-local-cipher.d.ts +18 -0
  486. package/dist/runtime/secrets/managed-local-cipher.d.ts.map +1 -0
  487. package/dist/runtime/secrets/managed-local-cipher.js +110 -0
  488. package/dist/runtime/secrets/managed-local-cipher.js.map +1 -0
  489. package/dist/runtime/secrets/managed-local-files.d.ts +4 -0
  490. package/dist/runtime/secrets/managed-local-files.d.ts.map +1 -0
  491. package/dist/runtime/secrets/managed-local-files.js +132 -0
  492. package/dist/runtime/secrets/managed-local-files.js.map +1 -0
  493. package/dist/runtime/secrets/managed-local-key-provider.d.ts +27 -0
  494. package/dist/runtime/secrets/managed-local-key-provider.d.ts.map +1 -0
  495. package/dist/runtime/secrets/managed-local-key-provider.js +144 -0
  496. package/dist/runtime/secrets/managed-local-key-provider.js.map +1 -0
  497. package/dist/runtime/secrets/managed-local-secret-store.d.ts +18 -0
  498. package/dist/runtime/secrets/managed-local-secret-store.d.ts.map +1 -0
  499. package/dist/runtime/secrets/managed-local-secret-store.js +82 -0
  500. package/dist/runtime/secrets/managed-local-secret-store.js.map +1 -0
  501. package/dist/runtime/secrets/managed-local-store.d.ts +33 -0
  502. package/dist/runtime/secrets/managed-local-store.d.ts.map +1 -0
  503. package/dist/runtime/secrets/managed-local-store.js +121 -0
  504. package/dist/runtime/secrets/managed-local-store.js.map +1 -0
  505. package/dist/runtime/secrets/resolver.d.ts +23 -0
  506. package/dist/runtime/secrets/resolver.d.ts.map +1 -0
  507. package/dist/runtime/secrets/resolver.js +265 -0
  508. package/dist/runtime/secrets/resolver.js.map +1 -0
  509. package/dist/runtime/secrets/url-security.d.ts +3 -0
  510. package/dist/runtime/secrets/url-security.d.ts.map +1 -0
  511. package/dist/runtime/secrets/url-security.js +13 -0
  512. package/dist/runtime/secrets/url-security.js.map +1 -0
  513. package/dist/runtime/sources/credentials.d.ts +2 -0
  514. package/dist/runtime/sources/credentials.d.ts.map +1 -1
  515. package/dist/runtime/sources/credentials.js +51 -1
  516. package/dist/runtime/sources/credentials.js.map +1 -1
  517. package/dist/runtime/sources/kinds/distribution.js +3 -3
  518. package/dist/runtime/sources/kinds/distribution.js.map +1 -1
  519. package/dist/runtime/sources/kinds/git.d.ts +6 -3
  520. package/dist/runtime/sources/kinds/git.d.ts.map +1 -1
  521. package/dist/runtime/sources/kinds/git.js +99 -22
  522. package/dist/runtime/sources/kinds/git.js.map +1 -1
  523. package/dist/runtime/sources/manifest-walk.d.ts +1 -0
  524. package/dist/runtime/sources/manifest-walk.d.ts.map +1 -1
  525. package/dist/runtime/sources/manifest-walk.js +16 -11
  526. package/dist/runtime/sources/manifest-walk.js.map +1 -1
  527. package/dist/runtime/sources/resolve-context.d.ts +7 -0
  528. package/dist/runtime/sources/resolve-context.d.ts.map +1 -0
  529. package/dist/runtime/sources/resolve-context.js +3 -0
  530. package/dist/runtime/sources/resolve-context.js.map +1 -0
  531. package/dist/runtime/sources/resolver.d.ts +2 -2
  532. package/dist/runtime/sources/resolver.d.ts.map +1 -1
  533. package/dist/runtime/sources/resolver.js +11 -5
  534. package/dist/runtime/sources/resolver.js.map +1 -1
  535. package/dist/runtime/sources/schema.d.ts.map +1 -1
  536. package/dist/runtime/sources/schema.js +51 -3
  537. package/dist/runtime/sources/schema.js.map +1 -1
  538. package/dist/runtime/store-client.d.ts +59 -0
  539. package/dist/runtime/store-client.d.ts.map +1 -0
  540. package/dist/runtime/store-client.js +72 -0
  541. package/dist/runtime/store-client.js.map +1 -0
  542. package/dist/runtime/store-submit.d.ts +31 -0
  543. package/dist/runtime/store-submit.d.ts.map +1 -0
  544. package/dist/runtime/store-submit.js +77 -0
  545. package/dist/runtime/store-submit.js.map +1 -0
  546. package/dist/runtime/supervisor.d.ts +18 -0
  547. package/dist/runtime/supervisor.d.ts.map +1 -1
  548. package/dist/runtime/supervisor.js +162 -15
  549. package/dist/runtime/supervisor.js.map +1 -1
  550. package/dist/runtime/waves.d.ts +1 -1
  551. package/dist/runtime/waves.d.ts.map +1 -1
  552. package/dist/runtime/waves.js +86 -19
  553. package/dist/runtime/waves.js.map +1 -1
  554. package/examples/01-local-native.yaml +4 -1
  555. package/examples/03-byo-infra.yaml +17 -7
  556. package/examples/05-appliance-helm.yaml +1 -1
  557. package/examples/06-biome-sources.yaml +4 -1
  558. package/package.json +20 -28
  559. package/xema.config.example.yaml +22 -18
  560. package/LICENSE +0 -176
  561. package/dist/lib/command-registry.d.ts +0 -5
  562. package/dist/lib/command-registry.d.ts.map +0 -1
  563. package/dist/lib/command-registry.js +0 -17
  564. package/dist/lib/command-registry.js.map +0 -1
@@ -0,0 +1,114 @@
1
+ import { BackupMode, EncryptionMode, FeatureSelectionMode, IdentityMode, InstallationOperatorKind, InstallationProfile, InstallationTargetKind, LifecycleEnvironment, NetworkPolicyMode, ObservabilityLevel, SecretsBackend, StorageClass, TenantIsolation, TenancyMode, UpgradeChannel, type ParsedXemaInstallation, type XemaInstallation } from './contract';
2
+ import { WorkspaceDriver } from '../config/schema';
3
+ export interface CompiledXemaInstallation extends Omit<ParsedXemaInstallation, 'spec'> {
4
+ readonly spec: {
5
+ readonly profile: InstallationProfile;
6
+ readonly lifecycle: {
7
+ readonly environment: LifecycleEnvironment;
8
+ };
9
+ readonly distribution: ParsedXemaInstallation['spec']['distribution'];
10
+ readonly target: {
11
+ readonly kind: InstallationTargetKind;
12
+ readonly region: string;
13
+ readonly zones: readonly string[];
14
+ };
15
+ readonly operator: {
16
+ readonly kind: InstallationOperatorKind;
17
+ readonly namespace?: string;
18
+ };
19
+ readonly features: {
20
+ readonly selection: FeatureSelectionMode;
21
+ readonly include: readonly string[];
22
+ readonly exclude: readonly string[];
23
+ readonly enabled: readonly string[];
24
+ readonly web: boolean;
25
+ };
26
+ readonly infrastructure: ParsedXemaInstallation['spec']['infrastructure'];
27
+ readonly secrets: ParsedXemaInstallation['spec']['secrets'];
28
+ readonly tenancy: {
29
+ readonly mode: TenancyMode;
30
+ readonly isolation: TenantIsolation;
31
+ };
32
+ readonly domains: ParsedXemaInstallation['spec']['domains'];
33
+ readonly security: {
34
+ readonly networkPolicy: NetworkPolicyMode;
35
+ readonly identity: IdentityMode;
36
+ readonly secretsBackend: SecretsBackend;
37
+ readonly encryption: EncryptionMode;
38
+ readonly residency?: string;
39
+ readonly managedModelAccess?: ParsedXemaInstallation['spec']['security']['managedModelAccess'];
40
+ };
41
+ readonly storage: {
42
+ readonly class: StorageClass;
43
+ readonly workspaceDriver: WorkspaceDriver;
44
+ readonly workspaceRoot?: string;
45
+ readonly materializationRoot?: string;
46
+ readonly externalBinding?: string;
47
+ };
48
+ readonly recovery: {
49
+ readonly mode: BackupMode;
50
+ readonly retentionDays: number;
51
+ readonly rpoMinutes: number;
52
+ readonly rtoMinutes: number;
53
+ readonly restoreDrillIntervalDays: number;
54
+ readonly destinationSecretRef?: string;
55
+ };
56
+ readonly observability: {
57
+ readonly level: ObservabilityLevel;
58
+ readonly metrics: boolean;
59
+ readonly tracing: boolean;
60
+ readonly auditLog: boolean;
61
+ readonly retentionDays: number;
62
+ readonly exportSecretRef?: string;
63
+ };
64
+ readonly capacity: {
65
+ readonly minReplicas: number;
66
+ readonly maxReplicas: number;
67
+ readonly maxOrganizations: number;
68
+ readonly maxConcurrentSessions: number;
69
+ readonly zones: number;
70
+ };
71
+ readonly sources: ParsedXemaInstallation['spec']['sources'];
72
+ readonly upgrade: {
73
+ readonly channel: UpgradeChannel;
74
+ readonly releaseRef?: string;
75
+ };
76
+ };
77
+ readonly effectivePlanHash: string;
78
+ }
79
+ export interface InstallationProfileDefaults {
80
+ readonly target: InstallationTargetKind;
81
+ readonly region: string;
82
+ readonly operator: InstallationOperatorKind;
83
+ readonly selection: FeatureSelectionMode;
84
+ readonly featureIds: readonly string[];
85
+ readonly tenancyMode: TenancyMode;
86
+ readonly isolation: TenantIsolation;
87
+ readonly networkPolicy: NetworkPolicyMode;
88
+ readonly identity: IdentityMode;
89
+ readonly secretsBackend: SecretsBackend;
90
+ readonly encryption: EncryptionMode;
91
+ readonly storageClass: StorageClass;
92
+ readonly workspaceDriver: WorkspaceDriver;
93
+ readonly backupMode: BackupMode;
94
+ readonly backupRetentionDays: number;
95
+ readonly rpoMinutes: number;
96
+ readonly rtoMinutes: number;
97
+ readonly restoreDrillIntervalDays: number;
98
+ readonly observability: ObservabilityLevel;
99
+ readonly metrics: boolean;
100
+ readonly tracing: boolean;
101
+ readonly auditLog: boolean;
102
+ readonly observabilityRetentionDays: number;
103
+ readonly minReplicas: number;
104
+ readonly maxReplicas: number;
105
+ readonly maxOrganizations: number;
106
+ readonly maxConcurrentSessions: number;
107
+ readonly zones: number;
108
+ }
109
+ export declare function installationProfileDefaults(profile: InstallationProfile): InstallationProfileDefaults;
110
+ export declare function profileLifecycleEnvironment(profile: InstallationProfile): LifecycleEnvironment;
111
+ export declare function compileXemaInstallation(raw: XemaInstallation | unknown): CompiledXemaInstallation;
112
+ export declare function effectivePayload(installation: Omit<CompiledXemaInstallation, 'effectivePlanHash'>): unknown;
113
+ export declare function isManagedInfrastructure(plan: CompiledXemaInstallation): boolean;
114
+ //# sourceMappingURL=compiler.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"compiler.d.ts","sourceRoot":"","sources":["../../../src/runtime/installation/compiler.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,cAAc,EACd,oBAAoB,EACpB,YAAY,EACZ,wBAAwB,EACxB,mBAAmB,EACnB,sBAAsB,EACtB,oBAAoB,EACpB,iBAAiB,EACjB,kBAAkB,EAElB,cAAc,EACd,YAAY,EACZ,eAAe,EACf,WAAW,EACX,cAAc,EACd,KAAK,sBAAsB,EAC3B,KAAK,gBAAgB,EACtB,MAAM,YAAY,CAAC;AAOpB,OAAO,EAAa,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAG9D,MAAM,WAAW,wBACf,SAAQ,IAAI,CAAC,sBAAsB,EAAE,MAAM,CAAC;IAC5C,QAAQ,CAAC,IAAI,EAAE;QACb,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;QACtC,QAAQ,CAAC,SAAS,EAAE;YAClB,QAAQ,CAAC,WAAW,EAAE,oBAAoB,CAAC;SAC5C,CAAC;QACF,QAAQ,CAAC,YAAY,EAAE,sBAAsB,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC;QACtE,QAAQ,CAAC,MAAM,EAAE;YACf,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;YACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;YACxB,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;SACnC,CAAC;QACF,QAAQ,CAAC,QAAQ,EAAE;YACjB,QAAQ,CAAC,IAAI,EAAE,wBAAwB,CAAC;YACxC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;SAC7B,CAAC;QACF,QAAQ,CAAC,QAAQ,EAAE;YACjB,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;YACzC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;YACpC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;YACpC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;YACpC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;SACvB,CAAC;QACF,QAAQ,CAAC,cAAc,EAAE,sBAAsB,CAAC,MAAM,CAAC,CAAC,gBAAgB,CAAC,CAAC;QAC1E,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC;QAC5D,QAAQ,CAAC,OAAO,EAAE;YAChB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;YAC3B,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;SACrC,CAAC;QACF,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC;QAC5D,QAAQ,CAAC,QAAQ,EAAE;YACjB,QAAQ,CAAC,aAAa,EAAE,iBAAiB,CAAC;YAC1C,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;YAChC,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;YACxC,QAAQ,CAAC,UAAU,EAAE,cAAc,CAAC;YACpC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;YAC5B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,sBAAsB,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC,oBAAoB,CAAC,CAAC;SAChG,CAAC;QACF,QAAQ,CAAC,OAAO,EAAE;YAChB,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;YAC7B,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;YAC1C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;YAChC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;YACtC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;SACnC,CAAC;QACF,QAAQ,CAAC,QAAQ,EAAE;YACjB,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;YAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;YAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;YAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;YAC5B,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;YAC1C,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;SACxC,CAAC;QACF,QAAQ,CAAC,aAAa,EAAE;YACtB,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC;YACnC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;YAC1B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;YAC1B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;YAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;YAC/B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;SACnC,CAAC;QACF,QAAQ,CAAC,QAAQ,EAAE;YACjB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;YAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;YAC7B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;YAClC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;YACvC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;SACxB,CAAC;QACF,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC;QAC5D,QAAQ,CAAC,OAAO,EAAE;YAChB,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;YACjC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;SAC9B,CAAC;KACH,CAAC;IACF,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;CACpC;AAQD,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAC;IACxC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,wBAAwB,CAAC;IAC5C,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;IACzC,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,aAAa,EAAE,iBAAiB,CAAC;IAC1C,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,QAAQ,CAAC,UAAU,EAAE,cAAc,CAAC;IACpC,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAC1C,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,aAAa,EAAE,kBAAkB,CAAC;IAC3C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,0BAA0B,EAAE,MAAM,CAAC;IAC5C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AA+LD,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,mBAAmB,GAC3B,2BAA2B,CAE7B;AAYD,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,mBAAmB,GAC3B,oBAAoB,CAItB;AAED,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,gBAAgB,GAAG,OAAO,GAC9B,wBAAwB,CA0B1B;AA0XD,wBAAgB,gBAAgB,CAC9B,YAAY,EAAE,IAAI,CAAC,wBAAwB,EAAE,mBAAmB,CAAC,GAChE,OAAO,CAOT;AAYD,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAIT"}
@@ -0,0 +1,456 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.installationProfileDefaults = installationProfileDefaults;
4
+ exports.profileLifecycleEnvironment = profileLifecycleEnvironment;
5
+ exports.compileXemaInstallation = compileXemaInstallation;
6
+ exports.effectivePayload = effectivePayload;
7
+ exports.isManagedInfrastructure = isManagedInfrastructure;
8
+ const contract_1 = require("./contract");
9
+ const diagnostics_1 = require("./diagnostics");
10
+ const serialization_1 = require("./serialization");
11
+ const validation_1 = require("./validation");
12
+ const schema_1 = require("../config/schema");
13
+ const infra_catalog_1 = require("../infra/infra-catalog");
14
+ const STARTER_FEATURES = [];
15
+ const PROFILE_DEFAULTS = {
16
+ [contract_1.InstallationProfile.Developer]: {
17
+ target: contract_1.InstallationTargetKind.LocalMachine,
18
+ region: 'local',
19
+ operator: contract_1.InstallationOperatorKind.Developer,
20
+ selection: contract_1.FeatureSelectionMode.Default,
21
+ featureIds: STARTER_FEATURES,
22
+ tenancyMode: contract_1.TenancyMode.SingleOrganization,
23
+ isolation: contract_1.TenantIsolation.Shared,
24
+ networkPolicy: contract_1.NetworkPolicyMode.Development,
25
+ identity: contract_1.IdentityMode.Managed,
26
+ secretsBackend: contract_1.SecretsBackend.Local,
27
+ encryption: contract_1.EncryptionMode.Development,
28
+ storageClass: contract_1.StorageClass.Ephemeral,
29
+ workspaceDriver: schema_1.WorkspaceDriver.HostPath,
30
+ backupMode: contract_1.BackupMode.Disabled,
31
+ backupRetentionDays: 1,
32
+ rpoMinutes: 1_440,
33
+ rtoMinutes: 240,
34
+ restoreDrillIntervalDays: 365,
35
+ observability: contract_1.ObservabilityLevel.Development,
36
+ metrics: false,
37
+ tracing: false,
38
+ auditLog: false,
39
+ observabilityRetentionDays: 7,
40
+ minReplicas: 1,
41
+ maxReplicas: 1,
42
+ maxOrganizations: 1,
43
+ maxConcurrentSessions: 10,
44
+ zones: 1,
45
+ },
46
+ [contract_1.InstallationProfile.Starter]: {
47
+ target: contract_1.InstallationTargetKind.LocalMachine,
48
+ region: 'local',
49
+ operator: contract_1.InstallationOperatorKind.Organization,
50
+ selection: contract_1.FeatureSelectionMode.Default,
51
+ featureIds: STARTER_FEATURES,
52
+ tenancyMode: contract_1.TenancyMode.MultiOrganization,
53
+ isolation: contract_1.TenantIsolation.Shared,
54
+ networkPolicy: contract_1.NetworkPolicyMode.Development,
55
+ identity: contract_1.IdentityMode.Managed,
56
+ secretsBackend: contract_1.SecretsBackend.Local,
57
+ encryption: contract_1.EncryptionMode.Development,
58
+ storageClass: contract_1.StorageClass.Persistent,
59
+ workspaceDriver: schema_1.WorkspaceDriver.DockerLocal,
60
+ backupMode: contract_1.BackupMode.Disabled,
61
+ backupRetentionDays: 1,
62
+ rpoMinutes: 1_440,
63
+ rtoMinutes: 240,
64
+ restoreDrillIntervalDays: 365,
65
+ observability: contract_1.ObservabilityLevel.Development,
66
+ metrics: false,
67
+ tracing: false,
68
+ auditLog: false,
69
+ observabilityRetentionDays: 7,
70
+ minReplicas: 1,
71
+ maxReplicas: 1,
72
+ maxOrganizations: 100,
73
+ maxConcurrentSessions: 100,
74
+ zones: 1,
75
+ },
76
+ [contract_1.InstallationProfile.SingleNodeProduction]: {
77
+ target: contract_1.InstallationTargetKind.SingleNodeKubernetes,
78
+ region: 'primary',
79
+ operator: contract_1.InstallationOperatorKind.Organization,
80
+ selection: contract_1.FeatureSelectionMode.Default,
81
+ featureIds: STARTER_FEATURES,
82
+ tenancyMode: contract_1.TenancyMode.MultiOrganization,
83
+ isolation: contract_1.TenantIsolation.Namespace,
84
+ networkPolicy: contract_1.NetworkPolicyMode.Restricted,
85
+ identity: contract_1.IdentityMode.Managed,
86
+ secretsBackend: contract_1.SecretsBackend.Kubernetes,
87
+ encryption: contract_1.EncryptionMode.PlatformManaged,
88
+ storageClass: contract_1.StorageClass.Persistent,
89
+ workspaceDriver: schema_1.WorkspaceDriver.DockerLocal,
90
+ backupMode: contract_1.BackupMode.Snapshots,
91
+ backupRetentionDays: 30,
92
+ rpoMinutes: 240,
93
+ rtoMinutes: 120,
94
+ restoreDrillIntervalDays: 30,
95
+ observability: contract_1.ObservabilityLevel.Standard,
96
+ metrics: true,
97
+ tracing: true,
98
+ auditLog: false,
99
+ observabilityRetentionDays: 30,
100
+ minReplicas: 1,
101
+ maxReplicas: 1,
102
+ maxOrganizations: 1_000,
103
+ maxConcurrentSessions: 1_000,
104
+ zones: 1,
105
+ },
106
+ [contract_1.InstallationProfile.BusinessHa]: {
107
+ target: contract_1.InstallationTargetKind.CustomerKubernetes,
108
+ region: 'primary',
109
+ operator: contract_1.InstallationOperatorKind.Organization,
110
+ selection: contract_1.FeatureSelectionMode.Default,
111
+ featureIds: STARTER_FEATURES,
112
+ tenancyMode: contract_1.TenancyMode.MultiOrganization,
113
+ isolation: contract_1.TenantIsolation.Namespace,
114
+ networkPolicy: contract_1.NetworkPolicyMode.Restricted,
115
+ identity: contract_1.IdentityMode.Managed,
116
+ secretsBackend: contract_1.SecretsBackend.Kubernetes,
117
+ encryption: contract_1.EncryptionMode.PlatformManaged,
118
+ storageClass: contract_1.StorageClass.Persistent,
119
+ workspaceDriver: schema_1.WorkspaceDriver.DockerLocal,
120
+ backupMode: contract_1.BackupMode.Continuous,
121
+ backupRetentionDays: 30,
122
+ rpoMinutes: 30,
123
+ rtoMinutes: 60,
124
+ restoreDrillIntervalDays: 30,
125
+ observability: contract_1.ObservabilityLevel.Standard,
126
+ metrics: true,
127
+ tracing: true,
128
+ auditLog: false,
129
+ observabilityRetentionDays: 30,
130
+ minReplicas: 2,
131
+ maxReplicas: 12,
132
+ maxOrganizations: 10_000,
133
+ maxConcurrentSessions: 10_000,
134
+ zones: 3,
135
+ },
136
+ [contract_1.InstallationProfile.EnterpriseRegulated]: {
137
+ target: contract_1.InstallationTargetKind.CustomerKubernetes,
138
+ region: 'primary',
139
+ operator: contract_1.InstallationOperatorKind.Organization,
140
+ selection: contract_1.FeatureSelectionMode.Default,
141
+ featureIds: STARTER_FEATURES,
142
+ tenancyMode: contract_1.TenancyMode.MultiOrganization,
143
+ isolation: contract_1.TenantIsolation.DedicatedCell,
144
+ networkPolicy: contract_1.NetworkPolicyMode.ZeroTrust,
145
+ identity: contract_1.IdentityMode.ExternalOidc,
146
+ secretsBackend: contract_1.SecretsBackend.External,
147
+ encryption: contract_1.EncryptionMode.CustomerManaged,
148
+ storageClass: contract_1.StorageClass.Persistent,
149
+ workspaceDriver: schema_1.WorkspaceDriver.DockerLocal,
150
+ backupMode: contract_1.BackupMode.Continuous,
151
+ backupRetentionDays: 90,
152
+ rpoMinutes: 5,
153
+ rtoMinutes: 60,
154
+ restoreDrillIntervalDays: 14,
155
+ observability: contract_1.ObservabilityLevel.Regulated,
156
+ metrics: true,
157
+ tracing: true,
158
+ auditLog: true,
159
+ observabilityRetentionDays: 365,
160
+ minReplicas: 3,
161
+ maxReplicas: 24,
162
+ maxOrganizations: 10_000,
163
+ maxConcurrentSessions: 10_000,
164
+ zones: 3,
165
+ },
166
+ [contract_1.InstallationProfile.HostedCell]: {
167
+ target: contract_1.InstallationTargetKind.HostedCell,
168
+ region: 'primary',
169
+ operator: contract_1.InstallationOperatorKind.Platform,
170
+ selection: contract_1.FeatureSelectionMode.Default,
171
+ featureIds: STARTER_FEATURES,
172
+ tenancyMode: contract_1.TenancyMode.MultiOrganization,
173
+ isolation: contract_1.TenantIsolation.DedicatedCell,
174
+ networkPolicy: contract_1.NetworkPolicyMode.ZeroTrust,
175
+ identity: contract_1.IdentityMode.ExternalOidc,
176
+ secretsBackend: contract_1.SecretsBackend.External,
177
+ encryption: contract_1.EncryptionMode.PlatformManaged,
178
+ storageClass: contract_1.StorageClass.Persistent,
179
+ workspaceDriver: schema_1.WorkspaceDriver.DockerLocal,
180
+ backupMode: contract_1.BackupMode.Continuous,
181
+ backupRetentionDays: 30,
182
+ rpoMinutes: 5,
183
+ rtoMinutes: 30,
184
+ restoreDrillIntervalDays: 14,
185
+ observability: contract_1.ObservabilityLevel.Regulated,
186
+ metrics: true,
187
+ tracing: true,
188
+ auditLog: true,
189
+ observabilityRetentionDays: 90,
190
+ minReplicas: 3,
191
+ maxReplicas: 100,
192
+ maxOrganizations: 100_000,
193
+ maxConcurrentSessions: 100_000,
194
+ zones: 3,
195
+ },
196
+ };
197
+ function installationProfileDefaults(profile) {
198
+ return PROFILE_DEFAULTS[profile];
199
+ }
200
+ function profileLifecycleEnvironment(profile) {
201
+ return PROFILE_DEFAULTS[profile].target === contract_1.InstallationTargetKind.LocalMachine
202
+ ? contract_1.LifecycleEnvironment.Development
203
+ : contract_1.LifecycleEnvironment.Production;
204
+ }
205
+ function compileXemaInstallation(raw) {
206
+ const validation = (0, validation_1.validateXemaInstallation)(raw);
207
+ if (validation.installation === undefined || validation.issues.length > 0) {
208
+ throw new diagnostics_1.InstallationCompilationError(validation.issues);
209
+ }
210
+ const installation = validation.installation;
211
+ const payload = normalizedPayload(installation, PROFILE_DEFAULTS[installation.spec.profile]);
212
+ if (payload.spec.capacity.minReplicas > payload.spec.capacity.maxReplicas) {
213
+ throw new diagnostics_1.InstallationCompilationError([
214
+ {
215
+ kind: diagnostics_1.InstallationIssueKind.Invalid,
216
+ code: 'CAPACITY_RANGE_INVALID',
217
+ path: 'spec.capacity',
218
+ message: 'minReplicas cannot exceed maxReplicas',
219
+ },
220
+ ]);
221
+ }
222
+ const effectiveIssues = validateEffectiveInstallation(payload);
223
+ if (effectiveIssues.length > 0) {
224
+ throw new diagnostics_1.InstallationCompilationError(effectiveIssues);
225
+ }
226
+ const effectivePlanHash = (0, serialization_1.hashInstallation)(effectivePayload(payload));
227
+ return deepFreeze({ ...payload, effectivePlanHash });
228
+ }
229
+ function validateEffectiveInstallation(installation) {
230
+ const spec = installation.spec;
231
+ const issues = [];
232
+ if (spec.lifecycle.environment === contract_1.LifecycleEnvironment.Production) {
233
+ if (spec.target.kind === contract_1.InstallationTargetKind.LocalMachine) {
234
+ issues.push(effectiveIssue('PRODUCTION_TARGET_UNSAFE', 'spec.target.kind', 'production requires a Kubernetes or hosted-cell target'));
235
+ }
236
+ if (spec.operator.kind === contract_1.InstallationOperatorKind.Developer) {
237
+ issues.push(effectiveIssue('PRODUCTION_OPERATOR_UNSAFE', 'spec.operator.kind', 'production cannot use the developer operator'));
238
+ }
239
+ if (spec.security.networkPolicy === contract_1.NetworkPolicyMode.Development) {
240
+ issues.push(effectiveIssue('PRODUCTION_NETWORK_POLICY_UNSAFE', 'spec.security.networkPolicy', 'production cannot use development network policy'));
241
+ }
242
+ if (spec.domains.some((domain) => domain.tls.mode === 'disabled')) {
243
+ issues.push(effectiveIssue('PRODUCTION_TLS_REQUIRED', 'spec.domains', 'production domains must use managed or external TLS'));
244
+ }
245
+ if (spec.security.encryption === contract_1.EncryptionMode.Development) {
246
+ issues.push(effectiveIssue('PRODUCTION_ENCRYPTION_REQUIRED', 'spec.security.encryption', 'production requires platform-managed or customer-managed encryption'));
247
+ }
248
+ if (spec.security.secretsBackend === contract_1.SecretsBackend.Local) {
249
+ issues.push(effectiveIssue('PRODUCTION_SECRET_CUSTODY_REQUIRED', 'spec.security.secretsBackend', 'production cannot use local secret custody'));
250
+ }
251
+ if (spec.secrets.some((secret) => secret.provider === contract_1.SecretReferenceProvider.Environment ||
252
+ secret.provider === contract_1.SecretReferenceProvider.File ||
253
+ secret.provider === contract_1.SecretReferenceProvider.Prompt ||
254
+ (secret.provider === contract_1.SecretReferenceProvider.ManagedLocal &&
255
+ spec.profile !== contract_1.InstallationProfile.SingleNodeProduction))) {
256
+ issues.push(effectiveIssue('PRODUCTION_SECRET_REFERENCE_UNSAFE', 'spec.secrets', 'production secret references must use Kubernetes, External Secrets, an external vault, or encrypted managed-local custody on the single-node profile'));
257
+ }
258
+ if (spec.storage.class === contract_1.StorageClass.Ephemeral) {
259
+ issues.push(effectiveIssue('PRODUCTION_PERSISTENCE_REQUIRED', 'spec.storage.class', 'production requires persistent or external storage'));
260
+ }
261
+ if (spec.recovery.mode === contract_1.BackupMode.Disabled) {
262
+ issues.push(effectiveIssue('PRODUCTION_RECOVERY_REQUIRED', 'spec.recovery.mode', 'production requires snapshots or continuous recovery'));
263
+ }
264
+ if (spec.observability.level === contract_1.ObservabilityLevel.Development ||
265
+ !spec.observability.metrics) {
266
+ issues.push(effectiveIssue('PRODUCTION_OBSERVABILITY_REQUIRED', 'spec.observability', 'production requires standard or regulated observability with metrics'));
267
+ }
268
+ }
269
+ const minimum = PROFILE_MINIMUMS[spec.profile];
270
+ if (spec.capacity.minReplicas < minimum.minReplicas) {
271
+ issues.push(effectiveIssue('PROFILE_REPLICA_MINIMUM', 'spec.capacity.minReplicas', `${spec.profile} requires at least ${String(minimum.minReplicas)} replicas`));
272
+ }
273
+ if (spec.capacity.zones < minimum.zones) {
274
+ issues.push(effectiveIssue('PROFILE_ZONE_MINIMUM', 'spec.capacity.zones', `${spec.profile} requires at least ${String(minimum.zones)} zones`));
275
+ }
276
+ if (spec.profile === contract_1.InstallationProfile.EnterpriseRegulated ||
277
+ spec.profile === contract_1.InstallationProfile.HostedCell) {
278
+ if (spec.tenancy.isolation !== contract_1.TenantIsolation.DedicatedCell) {
279
+ issues.push(effectiveIssue('PROFILE_DEDICATED_ISOLATION_REQUIRED', 'spec.tenancy.isolation', `${spec.profile} requires dedicated-cell tenant isolation`));
280
+ }
281
+ if (spec.security.identity !== contract_1.IdentityMode.ExternalOidc) {
282
+ issues.push(effectiveIssue('PROFILE_EXTERNAL_IDENTITY_REQUIRED', 'spec.security.identity', `${spec.profile} requires external OIDC identity`));
283
+ }
284
+ if (spec.security.networkPolicy !== contract_1.NetworkPolicyMode.ZeroTrust) {
285
+ issues.push(effectiveIssue('PROFILE_ZERO_TRUST_REQUIRED', 'spec.security.networkPolicy', `${spec.profile} requires zero-trust network policy`));
286
+ }
287
+ if (spec.security.secretsBackend !== contract_1.SecretsBackend.External) {
288
+ issues.push(effectiveIssue('PROFILE_EXTERNAL_SECRET_CUSTODY_REQUIRED', 'spec.security.secretsBackend', `${spec.profile} requires external secret custody`));
289
+ }
290
+ if (spec.recovery.mode !== contract_1.BackupMode.Continuous) {
291
+ issues.push(effectiveIssue('PROFILE_CONTINUOUS_RECOVERY_REQUIRED', 'spec.recovery.mode', `${spec.profile} requires continuous recovery`));
292
+ }
293
+ if (!spec.observability.auditLog) {
294
+ issues.push(effectiveIssue('PROFILE_AUDIT_LOG_REQUIRED', 'spec.observability.auditLog', `${spec.profile} requires audit logging`));
295
+ }
296
+ }
297
+ if (spec.profile === contract_1.InstallationProfile.EnterpriseRegulated &&
298
+ spec.security.residency === undefined) {
299
+ issues.push(effectiveIssue('REGULATED_RESIDENCY_REQUIRED', 'spec.security.residency', 'enterprise-regulated requires an explicit residency policy'));
300
+ }
301
+ if (spec.profile === contract_1.InstallationProfile.EnterpriseRegulated &&
302
+ spec.security.encryption !== contract_1.EncryptionMode.CustomerManaged) {
303
+ issues.push(effectiveIssue('REGULATED_CUSTOMER_ENCRYPTION_REQUIRED', 'spec.security.encryption', 'enterprise-regulated requires customer-managed encryption'));
304
+ }
305
+ return issues;
306
+ }
307
+ const PROFILE_MINIMUMS = {
308
+ [contract_1.InstallationProfile.Developer]: { minReplicas: 1, zones: 1 },
309
+ [contract_1.InstallationProfile.Starter]: { minReplicas: 1, zones: 1 },
310
+ [contract_1.InstallationProfile.SingleNodeProduction]: { minReplicas: 1, zones: 1 },
311
+ [contract_1.InstallationProfile.BusinessHa]: { minReplicas: 2, zones: 2 },
312
+ [contract_1.InstallationProfile.EnterpriseRegulated]: { minReplicas: 3, zones: 3 },
313
+ [contract_1.InstallationProfile.HostedCell]: { minReplicas: 3, zones: 3 },
314
+ };
315
+ function effectiveIssue(code, path, message) {
316
+ return { kind: diagnostics_1.InstallationIssueKind.Invalid, code, path, message };
317
+ }
318
+ function normalizedPayload(installation, defaults) {
319
+ const spec = installation.spec;
320
+ const declaredInfrastructure = new Map(spec.infrastructure.map((binding) => [binding.component, binding]));
321
+ return {
322
+ apiVersion: installation.apiVersion,
323
+ kind: installation.kind,
324
+ metadata: installation.metadata,
325
+ provenance: installation.provenance,
326
+ spec: {
327
+ profile: spec.profile,
328
+ lifecycle: spec.lifecycle,
329
+ distribution: spec.distribution,
330
+ target: {
331
+ kind: spec.target.kind ?? defaults.target,
332
+ region: spec.target.region ?? defaults.region,
333
+ zones: [...(spec.target.zones ?? [])].sort(),
334
+ },
335
+ operator: {
336
+ kind: spec.operator.kind ?? defaults.operator,
337
+ ...(spec.operator.namespace === undefined
338
+ ? {}
339
+ : { namespace: spec.operator.namespace }),
340
+ },
341
+ features: {
342
+ selection: spec.features.selection ?? defaults.selection,
343
+ include: [...spec.features.include].sort(),
344
+ exclude: [...spec.features.exclude].sort(),
345
+ enabled: [
346
+ ...new Set([...defaults.featureIds, ...spec.features.enabled]),
347
+ ].sort(),
348
+ web: spec.features.web,
349
+ },
350
+ infrastructure: infra_catalog_1.INFRA_COMPONENTS.map((component) => {
351
+ const binding = declaredInfrastructure.get(component) ?? {
352
+ component,
353
+ ownership: schema_1.InfraMode.Managed,
354
+ secretRefs: [],
355
+ };
356
+ return {
357
+ ...binding,
358
+ secretRefs: [...binding.secretRefs].sort(),
359
+ };
360
+ }).sort((left, right) => left.component.localeCompare(right.component)),
361
+ secrets: [...spec.secrets].sort((left, right) => left.name.localeCompare(right.name)),
362
+ tenancy: {
363
+ mode: spec.tenancy.mode ?? defaults.tenancyMode,
364
+ isolation: spec.tenancy.isolation ?? defaults.isolation,
365
+ },
366
+ domains: [...spec.domains].sort((left, right) => {
367
+ const purpose = left.purpose.localeCompare(right.purpose);
368
+ return purpose === 0
369
+ ? left.hostname.localeCompare(right.hostname)
370
+ : purpose;
371
+ }),
372
+ security: {
373
+ networkPolicy: spec.security.networkPolicy ?? defaults.networkPolicy,
374
+ identity: spec.security.identity ?? defaults.identity,
375
+ secretsBackend: spec.security.secretsBackend ?? defaults.secretsBackend,
376
+ encryption: spec.security.encryption ?? defaults.encryption,
377
+ ...(spec.security.residency === undefined
378
+ ? {}
379
+ : { residency: spec.security.residency }),
380
+ ...(spec.security.managedModelAccess === undefined
381
+ ? {}
382
+ : { managedModelAccess: spec.security.managedModelAccess }),
383
+ },
384
+ storage: {
385
+ class: spec.storage.class ?? defaults.storageClass,
386
+ workspaceDriver: spec.storage.workspaceDriver ?? defaults.workspaceDriver,
387
+ ...(spec.storage.workspaceRoot === undefined
388
+ ? {}
389
+ : { workspaceRoot: spec.storage.workspaceRoot }),
390
+ ...(spec.storage.materializationRoot === undefined
391
+ ? {}
392
+ : { materializationRoot: spec.storage.materializationRoot }),
393
+ ...(spec.storage.externalBinding === undefined
394
+ ? {}
395
+ : { externalBinding: spec.storage.externalBinding }),
396
+ },
397
+ recovery: {
398
+ mode: spec.recovery.mode ?? defaults.backupMode,
399
+ retentionDays: spec.recovery.retentionDays ?? defaults.backupRetentionDays,
400
+ rpoMinutes: spec.recovery.rpoMinutes ?? defaults.rpoMinutes,
401
+ rtoMinutes: spec.recovery.rtoMinutes ?? defaults.rtoMinutes,
402
+ restoreDrillIntervalDays: spec.recovery.restoreDrillIntervalDays ??
403
+ defaults.restoreDrillIntervalDays,
404
+ ...(spec.recovery.destinationSecretRef === undefined
405
+ ? {}
406
+ : { destinationSecretRef: spec.recovery.destinationSecretRef }),
407
+ },
408
+ observability: {
409
+ level: spec.observability.level ?? defaults.observability,
410
+ metrics: spec.observability.metrics ?? defaults.metrics,
411
+ tracing: spec.observability.tracing ?? defaults.tracing,
412
+ auditLog: spec.observability.auditLog ?? defaults.auditLog,
413
+ retentionDays: spec.observability.retentionDays ??
414
+ defaults.observabilityRetentionDays,
415
+ ...(spec.observability.exportSecretRef === undefined
416
+ ? {}
417
+ : { exportSecretRef: spec.observability.exportSecretRef }),
418
+ },
419
+ capacity: {
420
+ minReplicas: spec.capacity.minReplicas ?? defaults.minReplicas,
421
+ maxReplicas: spec.capacity.maxReplicas ?? defaults.maxReplicas,
422
+ maxOrganizations: spec.capacity.maxOrganizations ?? defaults.maxOrganizations,
423
+ maxConcurrentSessions: spec.capacity.maxConcurrentSessions ?? defaults.maxConcurrentSessions,
424
+ zones: spec.capacity.zones ?? defaults.zones,
425
+ },
426
+ sources: [...spec.sources],
427
+ upgrade: {
428
+ channel: spec.upgrade.channel ?? contract_1.UpgradeChannel.Stable,
429
+ ...(spec.upgrade.releaseRef === undefined
430
+ ? {}
431
+ : { releaseRef: spec.upgrade.releaseRef }),
432
+ },
433
+ },
434
+ };
435
+ }
436
+ function effectivePayload(installation) {
437
+ return {
438
+ apiVersion: installation.apiVersion,
439
+ kind: installation.kind,
440
+ metadata: installation.metadata,
441
+ spec: installation.spec,
442
+ };
443
+ }
444
+ function deepFreeze(value) {
445
+ if (value !== null && typeof value === 'object' && !Object.isFrozen(value)) {
446
+ for (const child of Object.values(value)) {
447
+ deepFreeze(child);
448
+ }
449
+ Object.freeze(value);
450
+ }
451
+ return value;
452
+ }
453
+ function isManagedInfrastructure(plan) {
454
+ return plan.spec.infrastructure.some((binding) => binding.ownership === schema_1.InfraMode.Managed);
455
+ }
456
+ //# sourceMappingURL=compiler.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"compiler.js","sourceRoot":"","sources":["../../../src/runtime/installation/compiler.ts"],"names":[],"mappings":";;AA6UA,kEAIC;AAYD,kEAMC;AAED,0DA4BC;AA0XD,4CASC;AAYD,0DAMC;AAtxBD,yCAmBoB;AACpB,+CAGuB;AACvB,mDAAmD;AACnD,6CAAwD;AACxD,6CAA8D;AAC9D,0DAA0D;AAqH1D,MAAM,gBAAgB,GAAsB,EAAE,CAAC;AAE/C,MAAM,gBAAgB,GAGpB;IACE,CAAC,8BAAmB,CAAC,SAAS,CAAC,EAAE;QAC/B,MAAM,EAAE,iCAAsB,CAAC,YAAY;QAC3C,MAAM,EAAE,OAAO;QACf,QAAQ,EAAE,mCAAwB,CAAC,SAAS;QAC5C,SAAS,EAAE,+BAAoB,CAAC,OAAO;QACvC,UAAU,EAAE,gBAAgB;QAC5B,WAAW,EAAE,sBAAW,CAAC,kBAAkB;QAC3C,SAAS,EAAE,0BAAe,CAAC,MAAM;QACjC,aAAa,EAAE,4BAAiB,CAAC,WAAW;QAC5C,QAAQ,EAAE,uBAAY,CAAC,OAAO;QAC9B,cAAc,EAAE,yBAAc,CAAC,KAAK;QACpC,UAAU,EAAE,yBAAc,CAAC,WAAW;QACtC,YAAY,EAAE,uBAAY,CAAC,SAAS;QACpC,eAAe,EAAE,wBAAe,CAAC,QAAQ;QACzC,UAAU,EAAE,qBAAU,CAAC,QAAQ;QAC/B,mBAAmB,EAAE,CAAC;QACtB,UAAU,EAAE,KAAK;QACjB,UAAU,EAAE,GAAG;QACf,wBAAwB,EAAE,GAAG;QAC7B,aAAa,EAAE,6BAAkB,CAAC,WAAW;QAC7C,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,KAAK;QACf,0BAA0B,EAAE,CAAC;QAC7B,WAAW,EAAE,CAAC;QACd,WAAW,EAAE,CAAC;QACd,gBAAgB,EAAE,CAAC;QACnB,qBAAqB,EAAE,EAAE;QACzB,KAAK,EAAE,CAAC;KACT;IACD,CAAC,8BAAmB,CAAC,OAAO,CAAC,EAAE;QAC7B,MAAM,EAAE,iCAAsB,CAAC,YAAY;QAC3C,MAAM,EAAE,OAAO;QACf,QAAQ,EAAE,mCAAwB,CAAC,YAAY;QAC/C,SAAS,EAAE,+BAAoB,CAAC,OAAO;QACvC,UAAU,EAAE,gBAAgB;QAC5B,WAAW,EAAE,sBAAW,CAAC,iBAAiB;QAC1C,SAAS,EAAE,0BAAe,CAAC,MAAM;QACjC,aAAa,EAAE,4BAAiB,CAAC,WAAW;QAC5C,QAAQ,EAAE,uBAAY,CAAC,OAAO;QAC9B,cAAc,EAAE,yBAAc,CAAC,KAAK;QACpC,UAAU,EAAE,yBAAc,CAAC,WAAW;QACtC,YAAY,EAAE,uBAAY,CAAC,UAAU;QACrC,eAAe,EAAE,wBAAe,CAAC,WAAW;QAC5C,UAAU,EAAE,qBAAU,CAAC,QAAQ;QAC/B,mBAAmB,EAAE,CAAC;QACtB,UAAU,EAAE,KAAK;QACjB,UAAU,EAAE,GAAG;QACf,wBAAwB,EAAE,GAAG;QAC7B,aAAa,EAAE,6BAAkB,CAAC,WAAW;QAC7C,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,KAAK;QACf,0BAA0B,EAAE,CAAC;QAC7B,WAAW,EAAE,CAAC;QACd,WAAW,EAAE,CAAC;QACd,gBAAgB,EAAE,GAAG;QACrB,qBAAqB,EAAE,GAAG;QAC1B,KAAK,EAAE,CAAC;KACT;IACD,CAAC,8BAAmB,CAAC,oBAAoB,CAAC,EAAE;QAC1C,MAAM,EAAE,iCAAsB,CAAC,oBAAoB;QACnD,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE,mCAAwB,CAAC,YAAY;QAC/C,SAAS,EAAE,+BAAoB,CAAC,OAAO;QACvC,UAAU,EAAE,gBAAgB;QAC5B,WAAW,EAAE,sBAAW,CAAC,iBAAiB;QAC1C,SAAS,EAAE,0BAAe,CAAC,SAAS;QACpC,aAAa,EAAE,4BAAiB,CAAC,UAAU;QAC3C,QAAQ,EAAE,uBAAY,CAAC,OAAO;QAC9B,cAAc,EAAE,yBAAc,CAAC,UAAU;QACzC,UAAU,EAAE,yBAAc,CAAC,eAAe;QAC1C,YAAY,EAAE,uBAAY,CAAC,UAAU;QACrC,eAAe,EAAE,wBAAe,CAAC,WAAW;QAC5C,UAAU,EAAE,qBAAU,CAAC,SAAS;QAChC,mBAAmB,EAAE,EAAE;QACvB,UAAU,EAAE,GAAG;QACf,UAAU,EAAE,GAAG;QACf,wBAAwB,EAAE,EAAE;QAC5B,aAAa,EAAE,6BAAkB,CAAC,QAAQ;QAC1C,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,KAAK;QACf,0BAA0B,EAAE,EAAE;QAC9B,WAAW,EAAE,CAAC;QACd,WAAW,EAAE,CAAC;QACd,gBAAgB,EAAE,KAAK;QACvB,qBAAqB,EAAE,KAAK;QAC5B,KAAK,EAAE,CAAC;KACT;IACD,CAAC,8BAAmB,CAAC,UAAU,CAAC,EAAE;QAChC,MAAM,EAAE,iCAAsB,CAAC,kBAAkB;QACjD,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE,mCAAwB,CAAC,YAAY;QAC/C,SAAS,EAAE,+BAAoB,CAAC,OAAO;QACvC,UAAU,EAAE,gBAAgB;QAC5B,WAAW,EAAE,sBAAW,CAAC,iBAAiB;QAC1C,SAAS,EAAE,0BAAe,CAAC,SAAS;QACpC,aAAa,EAAE,4BAAiB,CAAC,UAAU;QAC3C,QAAQ,EAAE,uBAAY,CAAC,OAAO;QAC9B,cAAc,EAAE,yBAAc,CAAC,UAAU;QACzC,UAAU,EAAE,yBAAc,CAAC,eAAe;QAC1C,YAAY,EAAE,uBAAY,CAAC,UAAU;QACrC,eAAe,EAAE,wBAAe,CAAC,WAAW;QAC5C,UAAU,EAAE,qBAAU,CAAC,UAAU;QACjC,mBAAmB,EAAE,EAAE;QACvB,UAAU,EAAE,EAAE;QACd,UAAU,EAAE,EAAE;QACd,wBAAwB,EAAE,EAAE;QAC5B,aAAa,EAAE,6BAAkB,CAAC,QAAQ;QAC1C,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,KAAK;QACf,0BAA0B,EAAE,EAAE;QAC9B,WAAW,EAAE,CAAC;QACd,WAAW,EAAE,EAAE;QACf,gBAAgB,EAAE,MAAM;QACxB,qBAAqB,EAAE,MAAM;QAC7B,KAAK,EAAE,CAAC;KACT;IACD,CAAC,8BAAmB,CAAC,mBAAmB,CAAC,EAAE;QACzC,MAAM,EAAE,iCAAsB,CAAC,kBAAkB;QACjD,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE,mCAAwB,CAAC,YAAY;QAC/C,SAAS,EAAE,+BAAoB,CAAC,OAAO;QACvC,UAAU,EAAE,gBAAgB;QAC5B,WAAW,EAAE,sBAAW,CAAC,iBAAiB;QAC1C,SAAS,EAAE,0BAAe,CAAC,aAAa;QACxC,aAAa,EAAE,4BAAiB,CAAC,SAAS;QAC1C,QAAQ,EAAE,uBAAY,CAAC,YAAY;QACnC,cAAc,EAAE,yBAAc,CAAC,QAAQ;QACvC,UAAU,EAAE,yBAAc,CAAC,eAAe;QAC1C,YAAY,EAAE,uBAAY,CAAC,UAAU;QACrC,eAAe,EAAE,wBAAe,CAAC,WAAW;QAC5C,UAAU,EAAE,qBAAU,CAAC,UAAU;QACjC,mBAAmB,EAAE,EAAE;QACvB,UAAU,EAAE,CAAC;QACb,UAAU,EAAE,EAAE;QACd,wBAAwB,EAAE,EAAE;QAC5B,aAAa,EAAE,6BAAkB,CAAC,SAAS;QAC3C,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,IAAI;QACd,0BAA0B,EAAE,GAAG;QAC/B,WAAW,EAAE,CAAC;QACd,WAAW,EAAE,EAAE;QACf,gBAAgB,EAAE,MAAM;QACxB,qBAAqB,EAAE,MAAM;QAC7B,KAAK,EAAE,CAAC;KACT;IACD,CAAC,8BAAmB,CAAC,UAAU,CAAC,EAAE;QAChC,MAAM,EAAE,iCAAsB,CAAC,UAAU;QACzC,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE,mCAAwB,CAAC,QAAQ;QAC3C,SAAS,EAAE,+BAAoB,CAAC,OAAO;QACvC,UAAU,EAAE,gBAAgB;QAC5B,WAAW,EAAE,sBAAW,CAAC,iBAAiB;QAC1C,SAAS,EAAE,0BAAe,CAAC,aAAa;QACxC,aAAa,EAAE,4BAAiB,CAAC,SAAS;QAC1C,QAAQ,EAAE,uBAAY,CAAC,YAAY;QACnC,cAAc,EAAE,yBAAc,CAAC,QAAQ;QACvC,UAAU,EAAE,yBAAc,CAAC,eAAe;QAC1C,YAAY,EAAE,uBAAY,CAAC,UAAU;QACrC,eAAe,EAAE,wBAAe,CAAC,WAAW;QAC5C,UAAU,EAAE,qBAAU,CAAC,UAAU;QACjC,mBAAmB,EAAE,EAAE;QACvB,UAAU,EAAE,CAAC;QACb,UAAU,EAAE,EAAE;QACd,wBAAwB,EAAE,EAAE;QAC5B,aAAa,EAAE,6BAAkB,CAAC,SAAS;QAC3C,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,IAAI;QACd,0BAA0B,EAAE,EAAE;QAC9B,WAAW,EAAE,CAAC;QACd,WAAW,EAAE,GAAG;QAChB,gBAAgB,EAAE,OAAO;QACzB,qBAAqB,EAAE,OAAO;QAC9B,KAAK,EAAE,CAAC;KACT;CACF,CAAC;AAGJ,SAAgB,2BAA2B,CACzC,OAA4B;IAE5B,OAAO,gBAAgB,CAAC,OAAO,CAAC,CAAC;AACnC,CAAC;AAYD,SAAgB,2BAA2B,CACzC,OAA4B;IAE5B,OAAO,gBAAgB,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,iCAAsB,CAAC,YAAY;QAC7E,CAAC,CAAC,+BAAoB,CAAC,WAAW;QAClC,CAAC,CAAC,+BAAoB,CAAC,UAAU,CAAC;AACtC,CAAC;AAED,SAAgB,uBAAuB,CACrC,GAA+B;IAE/B,MAAM,UAAU,GAAG,IAAA,qCAAwB,EAAC,GAAG,CAAC,CAAC;IACjD,IAAI,UAAU,CAAC,YAAY,KAAK,SAAS,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,0CAA4B,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;IAC7C,MAAM,OAAO,GAAG,iBAAiB,CAC/B,YAAY,EACZ,gBAAgB,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAC5C,CAAC;IACF,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC1E,MAAM,IAAI,0CAA4B,CAAC;YACrC;gBACE,IAAI,EAAE,mCAAqB,CAAC,OAAO;gBACnC,IAAI,EAAE,wBAAwB;gBAC9B,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,uCAAuC;aACjD;SACF,CAAC,CAAC;IACL,CAAC;IACD,MAAM,eAAe,GAAG,6BAA6B,CAAC,OAAO,CAAC,CAAC;IAC/D,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,0CAA4B,CAAC,eAAe,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,iBAAiB,GAAG,IAAA,gCAAgB,EAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;IACtE,OAAO,UAAU,CAAC,EAAE,GAAG,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,6BAA6B,CACpC,YAAiE;IAOjE,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC;IAC/B,MAAM,MAAM,GAKP,EAAE,CAAC;IACR,IAAI,IAAI,CAAC,SAAS,CAAC,WAAW,KAAK,+BAAoB,CAAC,UAAU,EAAE,CAAC;QACnE,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,iCAAsB,CAAC,YAAY,EAAE,CAAC;YAC7D,MAAM,CAAC,IAAI,CACT,cAAc,CACZ,0BAA0B,EAC1B,kBAAkB,EAClB,wDAAwD,CACzD,CACF,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,mCAAwB,CAAC,SAAS,EAAE,CAAC;YAC9D,MAAM,CAAC,IAAI,CACT,cAAc,CACZ,4BAA4B,EAC5B,oBAAoB,EACpB,8CAA8C,CAC/C,CACF,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,CAAC,aAAa,KAAK,4BAAiB,CAAC,WAAW,EAAE,CAAC;YAClE,MAAM,CAAC,IAAI,CACT,cAAc,CACZ,kCAAkC,EAClC,6BAA6B,EAC7B,kDAAkD,CACnD,CACF,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,KAAK,UAAU,CAAC,EAAE,CAAC;YAClE,MAAM,CAAC,IAAI,CACT,cAAc,CACZ,yBAAyB,EACzB,cAAc,EACd,qDAAqD,CACtD,CACF,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,KAAK,yBAAc,CAAC,WAAW,EAAE,CAAC;YAC5D,MAAM,CAAC,IAAI,CACT,cAAc,CACZ,gCAAgC,EAChC,0BAA0B,EAC1B,qEAAqE,CACtE,CACF,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,CAAC,cAAc,KAAK,yBAAc,CAAC,KAAK,EAAE,CAAC;YAC1D,MAAM,CAAC,IAAI,CACT,cAAc,CACZ,oCAAoC,EACpC,8BAA8B,EAC9B,4CAA4C,CAC7C,CACF,CAAC;QACJ,CAAC;QACD,IACE,IAAI,CAAC,OAAO,CAAC,IAAI,CACf,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,QAAQ,KAAK,kCAAuB,CAAC,WAAW;YACvD,MAAM,CAAC,QAAQ,KAAK,kCAAuB,CAAC,IAAI;YAChD,MAAM,CAAC,QAAQ,KAAK,kCAAuB,CAAC,MAAM;YAClD,CAAC,MAAM,CAAC,QAAQ,KAAK,kCAAuB,CAAC,YAAY;gBACvD,IAAI,CAAC,OAAO,KAAK,8BAAmB,CAAC,oBAAoB,CAAC,CAC/D,EACD,CAAC;YACD,MAAM,CAAC,IAAI,CACT,cAAc,CACZ,oCAAoC,EACpC,cAAc,EACd,sJAAsJ,CACvJ,CACF,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,uBAAY,CAAC,SAAS,EAAE,CAAC;YAClD,MAAM,CAAC,IAAI,CACT,cAAc,CACZ,iCAAiC,EACjC,oBAAoB,EACpB,oDAAoD,CACrD,CACF,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,qBAAU,CAAC,QAAQ,EAAE,CAAC;YAC/C,MAAM,CAAC,IAAI,CACT,cAAc,CACZ,8BAA8B,EAC9B,oBAAoB,EACpB,sDAAsD,CACvD,CACF,CAAC;QACJ,CAAC;QACD,IACE,IAAI,CAAC,aAAa,CAAC,KAAK,KAAK,6BAAkB,CAAC,WAAW;YAC3D,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,EAC3B,CAAC;YACD,MAAM,CAAC,IAAI,CACT,cAAc,CACZ,mCAAmC,EACnC,oBAAoB,EACpB,sEAAsE,CACvE,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QACpD,MAAM,CAAC,IAAI,CACT,cAAc,CACZ,yBAAyB,EACzB,2BAA2B,EAC3B,GAAG,IAAI,CAAC,OAAO,sBAAsB,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,WAAW,CAC5E,CACF,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;QACxC,MAAM,CAAC,IAAI,CACT,cAAc,CACZ,sBAAsB,EACtB,qBAAqB,EACrB,GAAG,IAAI,CAAC,OAAO,sBAAsB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CACnE,CACF,CAAC;IACJ,CAAC;IACD,IACE,IAAI,CAAC,OAAO,KAAK,8BAAmB,CAAC,mBAAmB;QACxD,IAAI,CAAC,OAAO,KAAK,8BAAmB,CAAC,UAAU,EAC/C,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,KAAK,0BAAe,CAAC,aAAa,EAAE,CAAC;YAC7D,MAAM,CAAC,IAAI,CACT,cAAc,CACZ,sCAAsC,EACtC,wBAAwB,EACxB,GAAG,IAAI,CAAC,OAAO,2CAA2C,CAC3D,CACF,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,KAAK,uBAAY,CAAC,YAAY,EAAE,CAAC;YACzD,MAAM,CAAC,IAAI,CACT,cAAc,CACZ,oCAAoC,EACpC,wBAAwB,EACxB,GAAG,IAAI,CAAC,OAAO,kCAAkC,CAClD,CACF,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,CAAC,aAAa,KAAK,4BAAiB,CAAC,SAAS,EAAE,CAAC;YAChE,MAAM,CAAC,IAAI,CACT,cAAc,CACZ,6BAA6B,EAC7B,6BAA6B,EAC7B,GAAG,IAAI,CAAC,OAAO,qCAAqC,CACrD,CACF,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,CAAC,cAAc,KAAK,yBAAc,CAAC,QAAQ,EAAE,CAAC;YAC7D,MAAM,CAAC,IAAI,CACT,cAAc,CACZ,0CAA0C,EAC1C,8BAA8B,EAC9B,GAAG,IAAI,CAAC,OAAO,mCAAmC,CACnD,CACF,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,qBAAU,CAAC,UAAU,EAAE,CAAC;YACjD,MAAM,CAAC,IAAI,CACT,cAAc,CACZ,sCAAsC,EACtC,oBAAoB,EACpB,GAAG,IAAI,CAAC,OAAO,+BAA+B,CAC/C,CACF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC;YACjC,MAAM,CAAC,IAAI,CACT,cAAc,CACZ,4BAA4B,EAC5B,6BAA6B,EAC7B,GAAG,IAAI,CAAC,OAAO,yBAAyB,CACzC,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IACE,IAAI,CAAC,OAAO,KAAK,8BAAmB,CAAC,mBAAmB;QACxD,IAAI,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS,EACrC,CAAC;QACD,MAAM,CAAC,IAAI,CACT,cAAc,CACZ,8BAA8B,EAC9B,yBAAyB,EACzB,4DAA4D,CAC7D,CACF,CAAC;IACJ,CAAC;IACD,IACE,IAAI,CAAC,OAAO,KAAK,8BAAmB,CAAC,mBAAmB;QACxD,IAAI,CAAC,QAAQ,CAAC,UAAU,KAAK,yBAAc,CAAC,eAAe,EAC3D,CAAC;QACD,MAAM,CAAC,IAAI,CACT,cAAc,CACZ,wCAAwC,EACxC,0BAA0B,EAC1B,2DAA2D,CAC5D,CACF,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,gBAAgB,GAKlB;IACF,CAAC,8BAAmB,CAAC,SAAS,CAAC,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;IAC7D,CAAC,8BAAmB,CAAC,OAAO,CAAC,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;IAC3D,CAAC,8BAAmB,CAAC,oBAAoB,CAAC,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;IACxE,CAAC,8BAAmB,CAAC,UAAU,CAAC,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;IAC9D,CAAC,8BAAmB,CAAC,mBAAmB,CAAC,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;IACvE,CAAC,8BAAmB,CAAC,UAAU,CAAC,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;CAC/D,CAAC;AAEF,SAAS,cAAc,CAAC,IAAY,EAAE,IAAY,EAAE,OAAe;IACjE,OAAO,EAAE,IAAI,EAAE,mCAAqB,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AACtE,CAAC;AAED,SAAS,iBAAiB,CACxB,YAAoC,EACpC,QAAqC;IAErC,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC;IAC/B,MAAM,sBAAsB,GAAG,IAAI,GAAG,CACpC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CACnE,CAAC;IACF,OAAO;QACL,UAAU,EAAE,YAAY,CAAC,UAAU;QACnC,IAAI,EAAE,YAAY,CAAC,IAAI;QACvB,QAAQ,EAAE,YAAY,CAAC,QAAQ;QAC/B,UAAU,EAAE,YAAY,CAAC,UAAU;QACnC,IAAI,EAAE;YACJ,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,MAAM,EAAE;gBACN,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,QAAQ,CAAC,MAAM;gBACzC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM;gBAC7C,KAAK,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE;aAC7C;YACD,QAAQ,EAAE;gBACR,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,QAAQ;gBAC7C,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS;oBACvC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;aAC5C;YACD,QAAQ,EAAE;gBACR,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS;gBACxD,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE;gBAC1C,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE;gBAC1C,OAAO,EAAE;oBACP,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;iBAC/D,CAAC,IAAI,EAAE;gBACR,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG;aACvB;YACD,cAAc,EAAE,gCAAgB,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;gBACjD,MAAM,OAAO,GAAG,sBAAsB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI;oBACvD,SAAS;oBACT,SAAS,EAAE,kBAAS,CAAC,OAAO;oBAC5B,UAAU,EAAE,EAAE;iBACf,CAAC;gBACF,OAAO;oBACL,GAAG,OAAO;oBACV,UAAU,EAAE,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE;iBAC3C,CAAC;YACJ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACvE,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAC9C,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CACpC;YACD,OAAO,EAAE;gBACP,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,QAAQ,CAAC,WAAW;gBAC/C,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS;aACxD;YACD,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;gBAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC1D,OAAO,OAAO,KAAK,CAAC;oBAClB,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC;oBAC7C,CAAC,CAAC,OAAO,CAAC;YACd,CAAC,CAAC;YACF,QAAQ,EAAE;gBACR,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,aAAa,IAAI,QAAQ,CAAC,aAAa;gBACpE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ;gBACrD,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc,IAAI,QAAQ,CAAC,cAAc;gBACvE,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,IAAI,QAAQ,CAAC,UAAU;gBAC3D,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS;oBACvC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;gBAC3C,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,kBAAkB,KAAK,SAAS;oBAChD,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC;aAC9D;YACD,OAAO,EAAE;gBACP,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,QAAQ,CAAC,YAAY;gBAClD,eAAe,EACb,IAAI,CAAC,OAAO,CAAC,eAAe,IAAI,QAAQ,CAAC,eAAe;gBAC1D,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS;oBAC1C,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;gBAClD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,KAAK,SAAS;oBAChD,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,mBAAmB,EAAE,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC;gBAC9D,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS;oBAC5C,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;aACvD;YACD,QAAQ,EAAE;gBACR,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,UAAU;gBAC/C,aAAa,EACX,IAAI,CAAC,QAAQ,CAAC,aAAa,IAAI,QAAQ,CAAC,mBAAmB;gBAC7D,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,IAAI,QAAQ,CAAC,UAAU;gBAC3D,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,IAAI,QAAQ,CAAC,UAAU;gBAC3D,wBAAwB,EACtB,IAAI,CAAC,QAAQ,CAAC,wBAAwB;oBACtC,QAAQ,CAAC,wBAAwB;gBACnC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,oBAAoB,KAAK,SAAS;oBAClD,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,oBAAoB,EAAE,IAAI,CAAC,QAAQ,CAAC,oBAAoB,EAAE,CAAC;aAClE;YACD,aAAa,EAAE;gBACb,KAAK,EAAE,IAAI,CAAC,aAAa,CAAC,KAAK,IAAI,QAAQ,CAAC,aAAa;gBACzD,OAAO,EAAE,IAAI,CAAC,aAAa,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO;gBACvD,OAAO,EAAE,IAAI,CAAC,aAAa,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO;gBACvD,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ;gBAC1D,aAAa,EACX,IAAI,CAAC,aAAa,CAAC,aAAa;oBAChC,QAAQ,CAAC,0BAA0B;gBACrC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,eAAe,KAAK,SAAS;oBAClD,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,aAAa,CAAC,eAAe,EAAE,CAAC;aAC7D;YACD,QAAQ,EAAE;gBACR,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,IAAI,QAAQ,CAAC,WAAW;gBAC9D,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,IAAI,QAAQ,CAAC,WAAW;gBAC9D,gBAAgB,EACd,IAAI,CAAC,QAAQ,CAAC,gBAAgB,IAAI,QAAQ,CAAC,gBAAgB;gBAC7D,qBAAqB,EACnB,IAAI,CAAC,QAAQ,CAAC,qBAAqB,IAAI,QAAQ,CAAC,qBAAqB;gBACvE,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK;aAC7C;YAED,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;YAC1B,OAAO,EAAE;gBACP,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,yBAAc,CAAC,MAAM;gBACtD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS;oBACvC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;aAC7C;SACF;KACF,CAAC;AACJ,CAAC;AAED,SAAgB,gBAAgB,CAC9B,YAAiE;IAEjE,OAAO;QACL,UAAU,EAAE,YAAY,CAAC,UAAU;QACnC,IAAI,EAAE,YAAY,CAAC,IAAI;QACvB,QAAQ,EAAE,YAAY,CAAC,QAAQ;QAC/B,IAAI,EAAE,YAAY,CAAC,IAAI;KACxB,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAI,KAAQ;IAC7B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3E,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACzC,UAAU,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,uBAAuB,CACrC,IAA8B;IAE9B,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAClC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,KAAK,kBAAS,CAAC,OAAO,CACrD,CAAC;AACJ,CAAC"}