@xemahq/xema 0.13.0 → 0.15.0

package/dist/runtime/installation/contract.js

@@ -0,0 +1,504 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.XemaInstallationSchema = exports.SourceBindingKind = exports.UpgradeChannel = exports.ObservabilityLevel = exports.BackupMode = exports.StorageClass = exports.TlsMode = exports.DomainPurpose = exports.EncryptionMode = exports.SecretsBackend = exports.IdentityMode = exports.NetworkPolicyMode = exports.TenantIsolation = exports.TenancyMode = exports.ExternalSecretStoreKind = exports.DeveloperSecretWorkflow = exports.SecretReferenceProvider = exports.FeatureSelectionMode = exports.DistributionReferenceKind = exports.InstallationOperatorKind = exports.InstallationTargetKind = exports.LifecycleEnvironment = exports.InstallationProfile = exports.XEMA_INSTALLATION_CONTRACT_RELEASE = exports.XEMA_INSTALLATION_KIND = exports.XEMA_INSTALLATION_API_VERSION = void 0;
+const zod_1 = require("zod");
+const schema_1 = require("../config/schema");
+exports.XEMA_INSTALLATION_API_VERSION = 'installation.xema.dev/v1';
+exports.XEMA_INSTALLATION_KIND = 'XemaInstallation';
+exports.XEMA_INSTALLATION_CONTRACT_RELEASE = '2.0.0';
+var InstallationProfile;
+(function (InstallationProfile) {
+    InstallationProfile["Developer"] = "developer";
+    InstallationProfile["Starter"] = "starter";
+    InstallationProfile["SingleNodeProduction"] = "single-node-production";
+    InstallationProfile["BusinessHa"] = "business-ha";
+    InstallationProfile["EnterpriseRegulated"] = "enterprise-regulated";
+    InstallationProfile["HostedCell"] = "hosted-cell";
+})(InstallationProfile || (exports.InstallationProfile = InstallationProfile = {}));
+var LifecycleEnvironment;
+(function (LifecycleEnvironment) {
+    LifecycleEnvironment["Development"] = "development";
+    LifecycleEnvironment["Staging"] = "staging";
+    LifecycleEnvironment["Production"] = "production";
+})(LifecycleEnvironment || (exports.LifecycleEnvironment = LifecycleEnvironment = {}));
+var InstallationTargetKind;
+(function (InstallationTargetKind) {
+    InstallationTargetKind["LocalMachine"] = "local-machine";
+    InstallationTargetKind["SingleNodeKubernetes"] = "single-node-kubernetes";
+    InstallationTargetKind["CustomerKubernetes"] = "customer-kubernetes";
+    InstallationTargetKind["HostedCell"] = "hosted-cell";
+})(InstallationTargetKind || (exports.InstallationTargetKind = InstallationTargetKind = {}));
+var InstallationOperatorKind;
+(function (InstallationOperatorKind) {
+    InstallationOperatorKind["Developer"] = "developer";
+    InstallationOperatorKind["Organization"] = "organization";
+    InstallationOperatorKind["Platform"] = "platform";
+})(InstallationOperatorKind || (exports.InstallationOperatorKind = InstallationOperatorKind = {}));
+var DistributionReferenceKind;
+(function (DistributionReferenceKind) {
+    DistributionReferenceKind["Edition"] = "edition";
+    DistributionReferenceKind["Lock"] = "lock";
+})(DistributionReferenceKind || (exports.DistributionReferenceKind = DistributionReferenceKind = {}));
+var FeatureSelectionMode;
+(function (FeatureSelectionMode) {
+    FeatureSelectionMode["Minimal"] = "minimal";
+    FeatureSelectionMode["Default"] = "default";
+    FeatureSelectionMode["All"] = "all";
+    FeatureSelectionMode["Explicit"] = "explicit";
+})(FeatureSelectionMode || (exports.FeatureSelectionMode = FeatureSelectionMode = {}));
+var SecretReferenceProvider;
+(function (SecretReferenceProvider) {
+    SecretReferenceProvider["Environment"] = "environment";
+    SecretReferenceProvider["File"] = "file";
+    SecretReferenceProvider["Prompt"] = "prompt";
+    SecretReferenceProvider["ManagedLocal"] = "managed-local";
+    SecretReferenceProvider["Kubernetes"] = "kubernetes";
+    SecretReferenceProvider["ExternalSecrets"] = "external-secrets";
+    SecretReferenceProvider["ExternalVault"] = "external-vault";
+})(SecretReferenceProvider || (exports.SecretReferenceProvider = SecretReferenceProvider = {}));
+var DeveloperSecretWorkflow;
+(function (DeveloperSecretWorkflow) {
+    DeveloperSecretWorkflow["Interactive"] = "developer-interactive";
+})(DeveloperSecretWorkflow || (exports.DeveloperSecretWorkflow = DeveloperSecretWorkflow = {}));
+var ExternalSecretStoreKind;
+(function (ExternalSecretStoreKind) {
+    ExternalSecretStoreKind["ClusterSecretStore"] = "ClusterSecretStore";
+    ExternalSecretStoreKind["SecretStore"] = "SecretStore";
+})(ExternalSecretStoreKind || (exports.ExternalSecretStoreKind = ExternalSecretStoreKind = {}));
+var TenancyMode;
+(function (TenancyMode) {
+    TenancyMode["SingleOrganization"] = "single-organization";
+    TenancyMode["MultiOrganization"] = "multi-organization";
+})(TenancyMode || (exports.TenancyMode = TenancyMode = {}));
+var TenantIsolation;
+(function (TenantIsolation) {
+    TenantIsolation["Shared"] = "shared";
+    TenantIsolation["Namespace"] = "namespace";
+    TenantIsolation["DedicatedCell"] = "dedicated-cell";
+})(TenantIsolation || (exports.TenantIsolation = TenantIsolation = {}));
+var NetworkPolicyMode;
+(function (NetworkPolicyMode) {
+    NetworkPolicyMode["Development"] = "development";
+    NetworkPolicyMode["Restricted"] = "restricted";
+    NetworkPolicyMode["ZeroTrust"] = "zero-trust";
+})(NetworkPolicyMode || (exports.NetworkPolicyMode = NetworkPolicyMode = {}));
+var IdentityMode;
+(function (IdentityMode) {
+    IdentityMode["Managed"] = "managed";
+    IdentityMode["ExternalOidc"] = "external-oidc";
+})(IdentityMode || (exports.IdentityMode = IdentityMode = {}));
+var SecretsBackend;
+(function (SecretsBackend) {
+    SecretsBackend["Local"] = "local";
+    SecretsBackend["Kubernetes"] = "kubernetes";
+    SecretsBackend["External"] = "external";
+})(SecretsBackend || (exports.SecretsBackend = SecretsBackend = {}));
+var EncryptionMode;
+(function (EncryptionMode) {
+    EncryptionMode["Development"] = "development";
+    EncryptionMode["PlatformManaged"] = "platform-managed";
+    EncryptionMode["CustomerManaged"] = "customer-managed";
+})(EncryptionMode || (exports.EncryptionMode = EncryptionMode = {}));
+var DomainPurpose;
+(function (DomainPurpose) {
+    DomainPurpose["Api"] = "api";
+    DomainPurpose["Web"] = "web";
+    DomainPurpose["Identity"] = "identity";
+})(DomainPurpose || (exports.DomainPurpose = DomainPurpose = {}));
+var TlsMode;
+(function (TlsMode) {
+    TlsMode["Disabled"] = "disabled";
+    TlsMode["Managed"] = "managed";
+    TlsMode["External"] = "external";
+})(TlsMode || (exports.TlsMode = TlsMode = {}));
+var StorageClass;
+(function (StorageClass) {
+    StorageClass["Ephemeral"] = "ephemeral";
+    StorageClass["Persistent"] = "persistent";
+    StorageClass["External"] = "external";
+})(StorageClass || (exports.StorageClass = StorageClass = {}));
+var BackupMode;
+(function (BackupMode) {
+    BackupMode["Disabled"] = "disabled";
+    BackupMode["Snapshots"] = "snapshots";
+    BackupMode["Continuous"] = "continuous";
+})(BackupMode || (exports.BackupMode = BackupMode = {}));
+var ObservabilityLevel;
+(function (ObservabilityLevel) {
+    ObservabilityLevel["Development"] = "development";
+    ObservabilityLevel["Standard"] = "standard";
+    ObservabilityLevel["Regulated"] = "regulated";
+})(ObservabilityLevel || (exports.ObservabilityLevel = ObservabilityLevel = {}));
+var UpgradeChannel;
+(function (UpgradeChannel) {
+    UpgradeChannel["Stable"] = "stable";
+    UpgradeChannel["Preview"] = "preview";
+    UpgradeChannel["Pinned"] = "pinned";
+})(UpgradeChannel || (exports.UpgradeChannel = UpgradeChannel = {}));
+var SourceBindingKind;
+(function (SourceBindingKind) {
+    SourceBindingKind["Workspace"] = "workspace";
+    SourceBindingKind["Distribution"] = "distribution";
+    SourceBindingKind["Npm"] = "npm";
+    SourceBindingKind["Oci"] = "oci";
+    SourceBindingKind["Git"] = "git";
+})(SourceBindingKind || (exports.SourceBindingKind = SourceBindingKind = {}));
+const Sha256Schema = zod_1.z.string().regex(/^[a-f0-9]{64}$/);
+const ReferenceSchema = zod_1.z.string().min(1);
+const IdentifierSchema = zod_1.z
+    .string()
+    .min(1)
+    .regex(/^[A-Za-z0-9][A-Za-z0-9._/-]*$/);
+const KubernetesNamespaceSchema = zod_1.z
+    .string()
+    .min(1)
+    .max(63)
+    .regex(/^[a-z0-9](?:[-a-z0-9]*[a-z0-9])?$/);
+const KubernetesResourceNameSchema = zod_1.z
+    .string()
+    .min(1)
+    .max(253)
+    .regex(/^[a-z0-9](?:[-a-z0-9.]*[a-z0-9])?$/);
+const SecretDataKeySchema = zod_1.z
+    .string()
+    .min(1)
+    .regex(/^[A-Za-z0-9._-]+$/);
+const SafeHttpsReferenceSchema = zod_1.z
+    .string()
+    .url()
+    .regex(/^https:\/\//, 'reference must use https')
+    .superRefine((value, ctx) => {
+    const parsed = new URL(value);
+    if (parsed.username.length > 0 ||
+        parsed.password.length > 0 ||
+        parsed.search.length > 0 ||
+        parsed.hash.length > 0) {
+        ctx.addIssue({
+            code: 'custom',
+            message: 'reference must not contain userinfo, query parameters, or fragments',
+        });
+    }
+});
+const DistributionReferenceSchema = zod_1.z.discriminatedUnion('kind', [
+    zod_1.z
+        .object({
+        kind: zod_1.z.literal(DistributionReferenceKind.Edition),
+        edition: IdentifierSchema,
+    })
+        .strict(),
+    zod_1.z
+        .object({
+        kind: zod_1.z.literal(DistributionReferenceKind.Lock),
+        ref: ReferenceSchema,
+        digest: zod_1.z.string().regex(/^sha256:[a-f0-9]{64}$/),
+    })
+        .strict(),
+]);
+const InfrastructureBindingSchema = zod_1.z
+    .object({
+    component: zod_1.z.nativeEnum(schema_1.InfraComponent),
+    ownership: zod_1.z.nativeEnum(schema_1.InfraMode),
+    endpoint: ReferenceSchema.optional(),
+    secretRefs: zod_1.z.array(ReferenceSchema).default([]),
+    realm: ReferenceSchema.optional(),
+    bucketPrefix: ReferenceSchema.optional(),
+    persistencePath: ReferenceSchema.optional(),
+})
+    .strict();
+const SecretReferenceBaseSchema = {
+    name: ReferenceSchema,
+};
+const SecretReferenceSchema = zod_1.z.discriminatedUnion('provider', [
+    zod_1.z
+        .object({
+        ...SecretReferenceBaseSchema,
+        provider: zod_1.z.literal(SecretReferenceProvider.Environment),
+        workflow: zod_1.z.literal(DeveloperSecretWorkflow.Interactive),
+        variable: zod_1.z
+            .string()
+            .regex(/^[A-Za-z_][A-Za-z0-9_]*$/),
+    })
+        .strict(),
+    zod_1.z
+        .object({
+        ...SecretReferenceBaseSchema,
+        provider: zod_1.z.literal(SecretReferenceProvider.File),
+        workflow: zod_1.z.literal(DeveloperSecretWorkflow.Interactive),
+        path: ReferenceSchema,
+    })
+        .strict(),
+    zod_1.z
+        .object({
+        ...SecretReferenceBaseSchema,
+        provider: zod_1.z.literal(SecretReferenceProvider.Prompt),
+        workflow: zod_1.z.literal(DeveloperSecretWorkflow.Interactive),
+        promptId: IdentifierSchema,
+    })
+        .strict(),
+    zod_1.z
+        .object({
+        ...SecretReferenceBaseSchema,
+        provider: zod_1.z.literal(SecretReferenceProvider.ManagedLocal),
+        entry: IdentifierSchema,
+    })
+        .strict(),
+    zod_1.z
+        .object({
+        ...SecretReferenceBaseSchema,
+        provider: zod_1.z.literal(SecretReferenceProvider.Kubernetes),
+        namespace: KubernetesNamespaceSchema,
+        resourceName: KubernetesResourceNameSchema,
+        key: SecretDataKeySchema,
+    })
+        .strict(),
+    zod_1.z
+        .object({
+        ...SecretReferenceBaseSchema,
+        provider: zod_1.z.literal(SecretReferenceProvider.ExternalSecrets),
+        namespace: KubernetesNamespaceSchema,
+        storeKind: zod_1.z.nativeEnum(ExternalSecretStoreKind),
+        storeName: KubernetesResourceNameSchema,
+        remoteKey: IdentifierSchema,
+        property: ReferenceSchema.optional(),
+        targetName: KubernetesResourceNameSchema,
+        targetKey: SecretDataKeySchema,
+    })
+        .strict(),
+    zod_1.z
+        .object({
+        ...SecretReferenceBaseSchema,
+        provider: zod_1.z.literal(SecretReferenceProvider.ExternalVault),
+        address: SafeHttpsReferenceSchema,
+        mount: IdentifierSchema,
+        path: IdentifierSchema,
+        key: SecretDataKeySchema,
+    })
+        .strict(),
+]);
+const DomainSchema = zod_1.z
+    .object({
+    hostname: zod_1.z.string().min(1),
+    purpose: zod_1.z.nativeEnum(DomainPurpose),
+    tls: zod_1.z
+        .object({
+        mode: zod_1.z.nativeEnum(TlsMode),
+        secretRef: ReferenceSchema.optional(),
+    })
+        .strict(),
+})
+    .strict();
+const SourceBindingBaseSchema = {
+    name: zod_1.z
+        .string()
+        .min(1)
+        .regex(/^[a-z][a-z0-9-]*$/),
+};
+const SourceBindingSchema = zod_1.z
+    .discriminatedUnion('kind', [
+    zod_1.z
+        .object({
+        ...SourceBindingBaseSchema,
+        kind: zod_1.z.literal(SourceBindingKind.Workspace),
+        root: ReferenceSchema.optional(),
+    })
+        .strict(),
+    zod_1.z
+        .object({
+        ...SourceBindingBaseSchema,
+        kind: zod_1.z.literal(SourceBindingKind.Distribution),
+        edition: IdentifierSchema,
+        ref: ReferenceSchema.optional(),
+    })
+        .strict(),
+    zod_1.z
+        .object({
+        ...SourceBindingBaseSchema,
+        kind: zod_1.z.literal(SourceBindingKind.Npm),
+        registryUrl: zod_1.z.string().url().optional(),
+        scope: zod_1.z
+            .string()
+            .regex(/^@[a-z0-9][a-z0-9-]*$/)
+            .optional(),
+        authSecretRef: ReferenceSchema.optional(),
+    })
+        .strict(),
+    zod_1.z
+        .object({
+        ...SourceBindingBaseSchema,
+        kind: zod_1.z.literal(SourceBindingKind.Oci),
+        registry: ReferenceSchema,
+        authSecretRef: ReferenceSchema.optional(),
+    })
+        .strict(),
+    zod_1.z
+        .object({
+        ...SourceBindingBaseSchema,
+        kind: zod_1.z.literal(SourceBindingKind.Git),
+        url: zod_1.z
+            .string()
+            .url('git source url must be valid')
+            .regex(/^https?:\/\//, 'git source url must be http(s)'),
+        ref: ReferenceSchema.optional(),
+        authSecretRef: ReferenceSchema.optional(),
+    })
+        .strict(),
+])
+    .superRefine((source, ctx) => {
+    const location = source.kind === SourceBindingKind.Git
+        ? source.url
+        : source.kind === SourceBindingKind.Npm
+            ? source.registryUrl
+            : source.kind === SourceBindingKind.Oci
+                ? source.registry
+                : undefined;
+    if (location === undefined) {
+        return;
+    }
+    const candidate = /^https?:\/\//.test(location)
+        ? location
+        : `https://${location}`;
+    try {
+        const parsed = new URL(candidate);
+        if (parsed.username.length > 0 ||
+            parsed.password.length > 0 ||
+            parsed.search.length > 0 ||
+            parsed.hash.length > 0) {
+            ctx.addIssue({
+                code: 'custom',
+                message: 'source location must not contain userinfo, query parameters, or fragments; use authSecretRef',
+            });
+        }
+    }
+    catch {
+    }
+});
+exports.XemaInstallationSchema = zod_1.z
+    .object({
+    apiVersion: zod_1.z
+        .literal(exports.XEMA_INSTALLATION_API_VERSION)
+        .default(exports.XEMA_INSTALLATION_API_VERSION),
+    kind: zod_1.z.literal(exports.XEMA_INSTALLATION_KIND).default(exports.XEMA_INSTALLATION_KIND),
+    metadata: zod_1.z
+        .object({
+        name: zod_1.z
+            .string()
+            .min(1)
+            .regex(/^[A-Za-z0-9][A-Za-z0-9._-]*$/),
+    })
+        .strict(),
+    provenance: zod_1.z
+        .object({
+        sourceConfigHash: Sha256Schema.optional(),
+    })
+        .strict()
+        .default({}),
+    spec: zod_1.z
+        .object({
+        profile: zod_1.z.nativeEnum(InstallationProfile),
+        lifecycle: zod_1.z
+            .object({
+            environment: zod_1.z.nativeEnum(LifecycleEnvironment),
+        })
+            .strict(),
+        distribution: DistributionReferenceSchema,
+        target: zod_1.z
+            .object({
+            kind: zod_1.z.nativeEnum(InstallationTargetKind).optional(),
+            region: ReferenceSchema.optional(),
+            zones: zod_1.z.array(ReferenceSchema).optional(),
+        })
+            .strict()
+            .default({}),
+        operator: zod_1.z
+            .object({
+            kind: zod_1.z.nativeEnum(InstallationOperatorKind).optional(),
+            namespace: ReferenceSchema.optional(),
+        })
+            .strict()
+            .default({}),
+        features: zod_1.z
+            .object({
+            selection: zod_1.z.nativeEnum(FeatureSelectionMode).optional(),
+            include: zod_1.z.array(ReferenceSchema).default([]),
+            exclude: zod_1.z.array(ReferenceSchema).default([]),
+            enabled: zod_1.z.array(ReferenceSchema).default([]),
+            web: zod_1.z.boolean().default(false),
+        })
+            .strict()
+            .default({ include: [], exclude: [], enabled: [], web: false }),
+        infrastructure: zod_1.z.array(InfrastructureBindingSchema).default([]),
+        secrets: zod_1.z.array(SecretReferenceSchema).default([]),
+        tenancy: zod_1.z
+            .object({
+            mode: zod_1.z.nativeEnum(TenancyMode).optional(),
+            isolation: zod_1.z.nativeEnum(TenantIsolation).optional(),
+        })
+            .strict()
+            .default({}),
+        domains: zod_1.z.array(DomainSchema).default([]),
+        security: zod_1.z
+            .object({
+            networkPolicy: zod_1.z.nativeEnum(NetworkPolicyMode).optional(),
+            identity: zod_1.z.nativeEnum(IdentityMode).optional(),
+            secretsBackend: zod_1.z.nativeEnum(SecretsBackend).optional(),
+            encryption: zod_1.z.nativeEnum(EncryptionMode).optional(),
+            residency: ReferenceSchema.optional(),
+            managedModelAccess: zod_1.z.nativeEnum(schema_1.LaunchAllowedTiers).optional(),
+        })
+            .strict()
+            .default({}),
+        storage: zod_1.z
+            .object({
+            class: zod_1.z.nativeEnum(StorageClass).optional(),
+            workspaceDriver: zod_1.z.nativeEnum(schema_1.WorkspaceDriver).optional(),
+            workspaceRoot: ReferenceSchema.optional(),
+            materializationRoot: ReferenceSchema.optional(),
+            externalBinding: ReferenceSchema.optional(),
+        })
+            .strict()
+            .default({}),
+        recovery: zod_1.z
+            .object({
+            mode: zod_1.z.nativeEnum(BackupMode).optional(),
+            retentionDays: zod_1.z.number().int().positive().optional(),
+            rpoMinutes: zod_1.z.number().int().nonnegative().optional(),
+            rtoMinutes: zod_1.z.number().int().positive().optional(),
+            restoreDrillIntervalDays: zod_1.z.number().int().positive().optional(),
+            destinationSecretRef: ReferenceSchema.optional(),
+        })
+            .strict()
+            .default({}),
+        observability: zod_1.z
+            .object({
+            level: zod_1.z.nativeEnum(ObservabilityLevel).optional(),
+            metrics: zod_1.z.boolean().optional(),
+            tracing: zod_1.z.boolean().optional(),
+            auditLog: zod_1.z.boolean().optional(),
+            retentionDays: zod_1.z.number().int().positive().optional(),
+            exportSecretRef: ReferenceSchema.optional(),
+        })
+            .strict()
+            .default({}),
+        capacity: zod_1.z
+            .object({
+            minReplicas: zod_1.z.number().int().positive().optional(),
+            maxReplicas: zod_1.z.number().int().positive().optional(),
+            maxOrganizations: zod_1.z.number().int().positive().optional(),
+            maxConcurrentSessions: zod_1.z.number().int().positive().optional(),
+            zones: zod_1.z.number().int().positive().optional(),
+        })
+            .strict()
+            .default({}),
+        sources: zod_1.z.array(SourceBindingSchema).default([]),
+        upgrade: zod_1.z
+            .object({
+            channel: zod_1.z.nativeEnum(UpgradeChannel).optional(),
+            releaseRef: ReferenceSchema.optional(),
+        })
+            .strict()
+            .default({}),
+    })
+        .strict(),
+})
+    .strict();
+//# sourceMappingURL=contract.js.map

package/dist/runtime/installation/contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.js","sourceRoot":"","sources":["../../../src/runtime/installation/contract.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAExB,6CAK0B;AAEb,QAAA,6BAA6B,GAAG,0BAA0B,CAAC;AAC3D,QAAA,sBAAsB,GAAG,kBAAkB,CAAC;AAC5C,QAAA,kCAAkC,GAAG,OAAO,CAAC;AAE1D,IAAY,mBAOX;AAPD,WAAY,mBAAmB;IAC7B,8CAAuB,CAAA;IACvB,0CAAmB,CAAA;IACnB,sEAA+C,CAAA;IAC/C,iDAA0B,CAAA;IAC1B,mEAA4C,CAAA;IAC5C,iDAA0B,CAAA;AAC5B,CAAC,EAPW,mBAAmB,mCAAnB,mBAAmB,QAO9B;AAED,IAAY,oBAIX;AAJD,WAAY,oBAAoB;IAC9B,mDAA2B,CAAA;IAC3B,2CAAmB,CAAA;IACnB,iDAAyB,CAAA;AAC3B,CAAC,EAJW,oBAAoB,oCAApB,oBAAoB,QAI/B;AAED,IAAY,sBAKX;AALD,WAAY,sBAAsB;IAChC,wDAA8B,CAAA;IAC9B,yEAA+C,CAAA;IAC/C,oEAA0C,CAAA;IAC1C,oDAA0B,CAAA;AAC5B,CAAC,EALW,sBAAsB,sCAAtB,sBAAsB,QAKjC;AAED,IAAY,wBAIX;AAJD,WAAY,wBAAwB;IAClC,mDAAuB,CAAA;IACvB,yDAA6B,CAAA;IAC7B,iDAAqB,CAAA;AACvB,CAAC,EAJW,wBAAwB,wCAAxB,wBAAwB,QAInC;AAED,IAAY,yBAGX;AAHD,WAAY,yBAAyB;IACnC,gDAAmB,CAAA;IACnB,0CAAa,CAAA;AACf,CAAC,EAHW,yBAAyB,yCAAzB,yBAAyB,QAGpC;AAED,IAAY,oBAKX;AALD,WAAY,oBAAoB;IAC9B,2CAAmB,CAAA;IACnB,2CAAmB,CAAA;IACnB,mCAAW,CAAA;IACX,6CAAqB,CAAA;AACvB,CAAC,EALW,oBAAoB,oCAApB,oBAAoB,QAK/B;AAED,IAAY,uBAQX;AARD,WAAY,uBAAuB;IACjC,sDAA2B,CAAA;IAC3B,wCAAa,CAAA;IACb,4CAAiB,CAAA;IACjB,yDAA8B,CAAA;IAC9B,oDAAyB,CAAA;IACzB,+DAAoC,CAAA;IACpC,2DAAgC,CAAA;AAClC,CAAC,EARW,uBAAuB,uCAAvB,uBAAuB,QAQlC;AAED,IAAY,uBAEX;AAFD,WAAY,uBAAuB;IACjC,gEAAqC,CAAA;AACvC,CAAC,EAFW,uBAAuB,uCAAvB,uBAAuB,QAElC;AAED,IAAY,uBAGX;AAHD,WAAY,uBAAuB;IACjC,oEAAyC,CAAA;IACzC,sDAA2B,CAAA;AAC7B,CAAC,EAHW,uBAAuB,uCAAvB,uBAAuB,QAGlC;AAED,IAAY,WAGX;AAHD,WAAY,WAAW;IACrB,yDAA0C,CAAA;IAC1C,uDAAwC,CAAA;AAC1C,CAAC,EAHW,WAAW,2BAAX,WAAW,QAGtB;AAED,IAAY,eAIX;AAJD,WAAY,eAAe;IACzB,oCAAiB,CAAA;IACjB,0CAAuB,CAAA;IACvB,mDAAgC,CAAA;AAClC,CAAC,EAJW,eAAe,+BAAf,eAAe,QAI1B;AAED,IAAY,iBAIX;AAJD,WAAY,iBAAiB;IAC3B,gDAA2B,CAAA;IAC3B,8CAAyB,CAAA;IACzB,6CAAwB,CAAA;AAC1B,CAAC,EAJW,iBAAiB,iCAAjB,iBAAiB,QAI5B;AAED,IAAY,YAGX;AAHD,WAAY,YAAY;IACtB,mCAAmB,CAAA;IACnB,8CAA8B,CAAA;AAChC,CAAC,EAHW,YAAY,4BAAZ,YAAY,QAGvB;AAED,IAAY,cAIX;AAJD,WAAY,cAAc;IACxB,iCAAe,CAAA;IACf,2CAAyB,CAAA;IACzB,uCAAqB,CAAA;AACvB,CAAC,EAJW,cAAc,8BAAd,cAAc,QAIzB;AAED,IAAY,cAIX;AAJD,WAAY,cAAc;IACxB,6CAA2B,CAAA;IAC3B,sDAAoC,CAAA;IACpC,sDAAoC,CAAA;AACtC,CAAC,EAJW,cAAc,8BAAd,cAAc,QAIzB;AAED,IAAY,aAIX;AAJD,WAAY,aAAa;IACvB,4BAAW,CAAA;IACX,4BAAW,CAAA;IACX,sCAAqB,CAAA;AACvB,CAAC,EAJW,aAAa,6BAAb,aAAa,QAIxB;AAED,IAAY,OAIX;AAJD,WAAY,OAAO;IACjB,gCAAqB,CAAA;IACrB,8BAAmB,CAAA;IACnB,gCAAqB,CAAA;AACvB,CAAC,EAJW,OAAO,uBAAP,OAAO,QAIlB;AAED,IAAY,YAIX;AAJD,WAAY,YAAY;IACtB,uCAAuB,CAAA;IACvB,yCAAyB,CAAA;IACzB,qCAAqB,CAAA;AACvB,CAAC,EAJW,YAAY,4BAAZ,YAAY,QAIvB;AAED,IAAY,UAIX;AAJD,WAAY,UAAU;IACpB,mCAAqB,CAAA;IACrB,qCAAuB,CAAA;IACvB,uCAAyB,CAAA;AAC3B,CAAC,EAJW,UAAU,0BAAV,UAAU,QAIrB;AAED,IAAY,kBAIX;AAJD,WAAY,kBAAkB;IAC5B,iDAA2B,CAAA;IAC3B,2CAAqB,CAAA;IACrB,6CAAuB,CAAA;AACzB,CAAC,EAJW,kBAAkB,kCAAlB,kBAAkB,QAI7B;AAED,IAAY,cAIX;AAJD,WAAY,cAAc;IACxB,mCAAiB,CAAA;IACjB,qCAAmB,CAAA;IACnB,mCAAiB,CAAA;AACnB,CAAC,EAJW,cAAc,8BAAd,cAAc,QAIzB;AAED,IAAY,iBAMX;AAND,WAAY,iBAAiB;IAC3B,4CAAuB,CAAA;IACvB,kDAA6B,CAAA;IAC7B,gCAAW,CAAA;IACX,gCAAW,CAAA;IACX,gCAAW,CAAA;AACb,CAAC,EANW,iBAAiB,iCAAjB,iBAAiB,QAM5B;AAED,MAAM,YAAY,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;AACxD,MAAM,eAAe,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC1C,MAAM,gBAAgB,GAAG,OAAC;KACvB,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,KAAK,CAAC,+BAA+B,CAAC,CAAC;AAC1C,MAAM,yBAAyB,GAAG,OAAC;KAChC,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,EAAE,CAAC;KACP,KAAK,CAAC,mCAAmC,CAAC,CAAC;AAC9C,MAAM,4BAA4B,GAAG,OAAC;KACnC,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,GAAG,CAAC;KACR,KAAK,CAAC,oCAAoC,CAAC,CAAC;AAC/C,MAAM,mBAAmB,GAAG,OAAC;KAC1B,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,KAAK,CAAC,mBAAmB,CAAC,CAAC;AAC9B,MAAM,wBAAwB,GAAG,OAAC;KAC/B,MAAM,EAAE;KACR,GAAG,EAAE;KACL,KAAK,CAAC,aAAa,EAAE,0BAA0B,CAAC;KAChD,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC1B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC9B,IACE,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;QAC1B,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;QAC1B,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;QACxB,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EACtB,CAAC;QACD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,OAAO,EACL,qEAAqE;SACxE,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,2BAA2B,GAAG,OAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC/D,OAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC,OAAO,CAAC;QAClD,OAAO,EAAE,gBAAgB;KAC1B,CAAC;SACD,MAAM,EAAE;IACX,OAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC,IAAI,CAAC;QAC/C,GAAG,EAAE,eAAe;QACpB,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC;KAClD,CAAC;SACD,MAAM,EAAE;CACZ,CAAC,CAAC;AAEH,MAAM,2BAA2B,GAAG,OAAC;KAClC,MAAM,CAAC;IACN,SAAS,EAAE,OAAC,CAAC,UAAU,CAAC,uBAAc,CAAC;IACvC,SAAS,EAAE,OAAC,CAAC,UAAU,CAAC,kBAAS,CAAC;IAClC,QAAQ,EAAE,eAAe,CAAC,QAAQ,EAAE;IACpC,UAAU,EAAE,OAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAChD,KAAK,EAAE,eAAe,CAAC,QAAQ,EAAE;IACjC,YAAY,EAAE,eAAe,CAAC,QAAQ,EAAE;IACxC,eAAe,EAAE,eAAe,CAAC,QAAQ,EAAE;CAC5C,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,yBAAyB,GAAG;IAChC,IAAI,EAAE,eAAe;CACtB,CAAC;AAEF,MAAM,qBAAqB,GAAG,OAAC,CAAC,kBAAkB,CAAC,UAAU,EAAE;IAC7D,OAAC;SACE,MAAM,CAAC;QACN,GAAG,yBAAyB;QAC5B,QAAQ,EAAE,OAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,WAAW,CAAC;QACxD,QAAQ,EAAE,OAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,WAAW,CAAC;QACxD,QAAQ,EAAE,OAAC;aACR,MAAM,EAAE;aACR,KAAK,CAAC,0BAA0B,CAAC;KACrC,CAAC;SACD,MAAM,EAAE;IACX,OAAC;SACE,MAAM,CAAC;QACN,GAAG,yBAAyB;QAC5B,QAAQ,EAAE,OAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,IAAI,CAAC;QACjD,QAAQ,EAAE,OAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,WAAW,CAAC;QACxD,IAAI,EAAE,eAAe;KACtB,CAAC;SACD,MAAM,EAAE;IACX,OAAC;SACE,MAAM,CAAC;QACN,GAAG,yBAAyB;QAC5B,QAAQ,EAAE,OAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,MAAM,CAAC;QACnD,QAAQ,EAAE,OAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,WAAW,CAAC;QACxD,QAAQ,EAAE,gBAAgB;KAC3B,CAAC;SACD,MAAM,EAAE;IACX,OAAC;SACE,MAAM,CAAC;QACN,GAAG,yBAAyB;QAC5B,QAAQ,EAAE,OAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,YAAY,CAAC;QACzD,KAAK,EAAE,gBAAgB;KACxB,CAAC;SACD,MAAM,EAAE;IACX,OAAC;SACE,MAAM,CAAC;QACN,GAAG,yBAAyB;QAC5B,QAAQ,EAAE,OAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,UAAU,CAAC;QACvD,SAAS,EAAE,yBAAyB;QACpC,YAAY,EAAE,4BAA4B;QAC1C,GAAG,EAAE,mBAAmB;KACzB,CAAC;SACD,MAAM,EAAE;IACX,OAAC;SACE,MAAM,CAAC;QACN,GAAG,yBAAyB;QAC5B,QAAQ,EAAE,OAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,eAAe,CAAC;QAC5D,SAAS,EAAE,yBAAyB;QACpC,SAAS,EAAE,OAAC,CAAC,UAAU,CAAC,uBAAuB,CAAC;QAChD,SAAS,EAAE,4BAA4B;QACvC,SAAS,EAAE,gBAAgB;QAC3B,QAAQ,EAAE,eAAe,CAAC,QAAQ,EAAE;QACpC,UAAU,EAAE,4BAA4B;QACxC,SAAS,EAAE,mBAAmB;KAC/B,CAAC;SACD,MAAM,EAAE;IACX,OAAC;SACE,MAAM,CAAC;QACN,GAAG,yBAAyB;QAC5B,QAAQ,EAAE,OAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,aAAa,CAAC;QAC1D,OAAO,EAAE,wBAAwB;QACjC,KAAK,EAAE,gBAAgB;QACvB,IAAI,EAAE,gBAAgB;QACtB,GAAG,EAAE,mBAAmB;KACzB,CAAC;SACD,MAAM,EAAE;CACZ,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG,OAAC;KACnB,MAAM,CAAC;IACN,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,OAAO,EAAE,OAAC,CAAC,UAAU,CAAC,aAAa,CAAC;IACpC,GAAG,EAAE,OAAC;SACH,MAAM,CAAC;QACN,IAAI,EAAE,OAAC,CAAC,UAAU,CAAC,OAAO,CAAC;QAC3B,SAAS,EAAE,eAAe,CAAC,QAAQ,EAAE;KACtC,CAAC;SACD,MAAM,EAAE;CACZ,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,uBAAuB,GAAG;IAC9B,IAAI,EAAE,OAAC;SACJ,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,KAAK,CAAC,mBAAmB,CAAC;CAC9B,CAAC;AAEF,MAAM,mBAAmB,GAAG,OAAC;KAC1B,kBAAkB,CAAC,MAAM,EAAE;IAC1B,OAAC;SACE,MAAM,CAAC;QACN,GAAG,uBAAuB;QAC1B,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,SAAS,CAAC;QAC5C,IAAI,EAAE,eAAe,CAAC,QAAQ,EAAE;KACjC,CAAC;SACD,MAAM,EAAE;IACX,OAAC;SACE,MAAM,CAAC;QACN,GAAG,uBAAuB;QAC1B,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,YAAY,CAAC;QAC/C,OAAO,EAAE,gBAAgB;QACzB,GAAG,EAAE,eAAe,CAAC,QAAQ,EAAE;KAChC,CAAC;SACD,MAAM,EAAE;IACX,OAAC;SACE,MAAM,CAAC;QACN,GAAG,uBAAuB;QAC1B,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,GAAG,CAAC;QACtC,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QACxC,KAAK,EAAE,OAAC;aACL,MAAM,EAAE;aACR,KAAK,CAAC,uBAAuB,CAAC;aAC9B,QAAQ,EAAE;QACb,aAAa,EAAE,eAAe,CAAC,QAAQ,EAAE;KAC1C,CAAC;SACD,MAAM,EAAE;IACX,OAAC;SACE,MAAM,CAAC;QACN,GAAG,uBAAuB;QAC1B,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,GAAG,CAAC;QACtC,QAAQ,EAAE,eAAe;QACzB,aAAa,EAAE,eAAe,CAAC,QAAQ,EAAE;KAC1C,CAAC;SACD,MAAM,EAAE;IACX,OAAC;SACE,MAAM,CAAC;QACN,GAAG,uBAAuB;QAC1B,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,GAAG,CAAC;QACtC,GAAG,EAAE,OAAC;aACH,MAAM,EAAE;aACR,GAAG,CAAC,8BAA8B,CAAC;aACnC,KAAK,CAAC,cAAc,EAAE,gCAAgC,CAAC;QAC1D,GAAG,EAAE,eAAe,CAAC,QAAQ,EAAE;QAC/B,aAAa,EAAE,eAAe,CAAC,QAAQ,EAAE;KAC1C,CAAC;SACD,MAAM,EAAE;CACZ,CAAC;KACD,WAAW,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;IAC3B,MAAM,QAAQ,GACZ,MAAM,CAAC,IAAI,KAAK,iBAAiB,CAAC,GAAG;QACnC,CAAC,CAAC,MAAM,CAAC,GAAG;QACZ,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,iBAAiB,CAAC,GAAG;YACrC,CAAC,CAAC,MAAM,CAAC,WAAW;YACpB,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,iBAAiB,CAAC,GAAG;gBACrC,CAAC,CAAC,MAAM,CAAC,QAAQ;gBACjB,CAAC,CAAC,SAAS,CAAC;IACpB,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO;IACT,CAAC;IACD,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC7C,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,WAAW,QAAQ,EAAE,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;QAClC,IACE,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;YAC1B,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;YAC1B,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;YACxB,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EACtB,CAAC;YACD,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,OAAO,EACL,8FAA8F;aACjG,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;IAET,CAAC;AACH,CAAC,CAAC,CAAC;AAEQ,QAAA,sBAAsB,GAAG,OAAC;KACpC,MAAM,CAAC;IACN,UAAU,EAAE,OAAC;SACV,OAAO,CAAC,qCAA6B,CAAC;SACtC,OAAO,CAAC,qCAA6B,CAAC;IACzC,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,8BAAsB,CAAC,CAAC,OAAO,CAAC,8BAAsB,CAAC;IACvE,QAAQ,EAAE,OAAC;SACR,MAAM,CAAC;QACN,IAAI,EAAE,OAAC;aACJ,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,KAAK,CAAC,8BAA8B,CAAC;KACzC,CAAC;SACD,MAAM,EAAE;IACX,UAAU,EAAE,OAAC;SACV,MAAM,CAAC;QACN,gBAAgB,EAAE,YAAY,CAAC,QAAQ,EAAE;KAC1C,CAAC;SACD,MAAM,EAAE;SACR,OAAO,CAAC,EAAE,CAAC;IACd,IAAI,EAAE,OAAC;SACJ,MAAM,CAAC;QACN,OAAO,EAAE,OAAC,CAAC,UAAU,CAAC,mBAAmB,CAAC;QAC1C,SAAS,EAAE,OAAC;aACT,MAAM,CAAC;YACN,WAAW,EAAE,OAAC,CAAC,UAAU,CAAC,oBAAoB,CAAC;SAChD,CAAC;aACD,MAAM,EAAE;QACX,YAAY,EAAE,2BAA2B;QACzC,MAAM,EAAE,OAAC;aACN,MAAM,CAAC;YACN,IAAI,EAAE,OAAC,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC,QAAQ,EAAE;YACrD,MAAM,EAAE,eAAe,CAAC,QAAQ,EAAE;YAClC,KAAK,EAAE,OAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,QAAQ,EAAE;SAC3C,CAAC;aACD,MAAM,EAAE;aACR,OAAO,CAAC,EAAE,CAAC;QACd,QAAQ,EAAE,OAAC;aACR,MAAM,CAAC;YACN,IAAI,EAAE,OAAC,CAAC,UAAU,CAAC,wBAAwB,CAAC,CAAC,QAAQ,EAAE;YACvD,SAAS,EAAE,eAAe,CAAC,QAAQ,EAAE;SACtC,CAAC;aACD,MAAM,EAAE;aACR,OAAO,CAAC,EAAE,CAAC;QACd,QAAQ,EAAE,OAAC;aACR,MAAM,CAAC;YACN,SAAS,EAAE,OAAC,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;YACxD,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7C,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7C,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7C,GAAG,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;SAChC,CAAC;aACD,MAAM,EAAE;aACR,OAAO,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;QACjE,cAAc,EAAE,OAAC,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QAChE,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,OAAO,EAAE,OAAC;aACP,MAAM,CAAC;YACN,IAAI,EAAE,OAAC,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE;YAC1C,SAAS,EAAE,OAAC,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,QAAQ,EAAE;SACpD,CAAC;aACD,MAAM,EAAE;aACR,OAAO,CAAC,EAAE,CAAC;QACd,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1C,QAAQ,EAAE,OAAC;aACR,MAAM,CAAC;YACN,aAAa,EAAE,OAAC,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,QAAQ,EAAE;YACzD,QAAQ,EAAE,OAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE;YAC/C,cAAc,EAAE,OAAC,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,QAAQ,EAAE;YACvD,UAAU,EAAE,OAAC,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,QAAQ,EAAE;YACnD,SAAS,EAAE,eAAe,CAAC,QAAQ,EAAE;YACrC,kBAAkB,EAAE,OAAC,CAAC,UAAU,CAAC,2BAAkB,CAAC,CAAC,QAAQ,EAAE;SAChE,CAAC;aACD,MAAM,EAAE;aACR,OAAO,CAAC,EAAE,CAAC;QACd,OAAO,EAAE,OAAC;aACP,MAAM,CAAC;YACN,KAAK,EAAE,OAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE;YAC5C,eAAe,EAAE,OAAC,CAAC,UAAU,CAAC,wBAAe,CAAC,CAAC,QAAQ,EAAE;YACzD,aAAa,EAAE,eAAe,CAAC,QAAQ,EAAE;YACzC,mBAAmB,EAAE,eAAe,CAAC,QAAQ,EAAE;YAC/C,eAAe,EAAE,eAAe,CAAC,QAAQ,EAAE;SAC5C,CAAC;aACD,MAAM,EAAE;aACR,OAAO,CAAC,EAAE,CAAC;QACd,QAAQ,EAAE,OAAC;aACR,MAAM,CAAC;YACN,IAAI,EAAE,OAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE;YACzC,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;YACrD,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;YACrD,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;YAClD,wBAAwB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;YAChE,oBAAoB,EAAE,eAAe,CAAC,QAAQ,EAAE;SACjD,CAAC;aACD,MAAM,EAAE;aACR,OAAO,CAAC,EAAE,CAAC;QACd,aAAa,EAAE,OAAC;aACb,MAAM,CAAC;YACN,KAAK,EAAE,OAAC,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC,QAAQ,EAAE;YAClD,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;YAC/B,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;YAC/B,QAAQ,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;YAChC,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;YACrD,eAAe,EAAE,eAAe,CAAC,QAAQ,EAAE;SAC5C,CAAC;aACD,MAAM,EAAE;aACR,OAAO,CAAC,EAAE,CAAC;QACd,QAAQ,EAAE,OAAC;aACR,MAAM,CAAC;YACN,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;YACnD,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;YACnD,gBAAgB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;YACxD,qBAAqB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;YAC7D,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;SAC9C,CAAC;aACD,MAAM,EAAE;aACR,OAAO,CAAC,EAAE,CAAC;QACd,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QACjD,OAAO,EAAE,OAAC;aACP,MAAM,CAAC;YACN,OAAO,EAAE,OAAC,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,QAAQ,EAAE;YAChD,UAAU,EAAE,eAAe,CAAC,QAAQ,EAAE;SACvC,CAAC;aACD,MAAM,EAAE;aACR,OAAO,CAAC,EAAE,CAAC;KACf,CAAC;SACD,MAAM,EAAE;CACZ,CAAC;KACD,MAAM,EAAE,CAAC"}

package/dist/runtime/installation/current-launcher-renderer.d.ts

@@ -0,0 +1,12 @@
+import { type CompiledXemaInstallation } from './compiler';
+import { type HelmReleaseRendering } from './helm-release';
+import { renderInstallationSetup, type InstallationSetupArtifact } from './setup-renderer';
+import type { XemaConfig } from '../config/schema';
+export interface CurrentLauncherRendering {
+    readonly config: XemaConfig;
+    readonly artifacts: readonly InstallationSetupArtifact[];
+    readonly renderedArtifacts: ReturnType<typeof renderInstallationSetup>['renderedArtifacts'];
+    readonly helmRelease?: HelmReleaseRendering;
+}
+export declare function renderCurrentLauncherPlan(installation: CompiledXemaInstallation): CurrentLauncherRendering;
+//# sourceMappingURL=current-launcher-renderer.d.ts.map

package/dist/runtime/installation/current-launcher-renderer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"current-launcher-renderer.d.ts","sourceRoot":"","sources":["../../../src/runtime/installation/current-launcher-renderer.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,wBAAwB,EAE9B,MAAM,YAAY,CAAC;AAMpB,OAAO,EAAwB,KAAK,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACjF,OAAO,EACL,uBAAuB,EACvB,KAAK,yBAAyB,EAC/B,MAAM,kBAAkB,CAAC;AAG1B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,SAAS,yBAAyB,EAAE,CAAC;IACzD,QAAQ,CAAC,iBAAiB,EAAE,UAAU,CACpC,OAAO,uBAAuB,CAC/B,CAAC,mBAAmB,CAAC,CAAC;IAMvB,QAAQ,CAAC,WAAW,CAAC,EAAE,oBAAoB,CAAC;CAC7C;AA8BD,wBAAgB,yBAAyB,CACvC,YAAY,EAAE,wBAAwB,GACrC,wBAAwB,CAiB1B"}

package/dist/runtime/installation/current-launcher-renderer.js

@@ -0,0 +1,123 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.renderCurrentLauncherPlan = renderCurrentLauncherPlan;
+const compiler_1 = require("./compiler");
+const contract_1 = require("./contract");
+const helm_release_1 = require("./helm-release");
+const setup_renderer_1 = require("./setup-renderer");
+const to_current_config_1 = require("./to-current-config");
+const LAUNCHER_RENDERABLE_PROFILES = new Set([
+    contract_1.InstallationProfile.Developer,
+    contract_1.InstallationProfile.Starter,
+    contract_1.InstallationProfile.SingleNodeProduction,
+]);
+function renderCurrentLauncherPlan(installation) {
+    assertCurrentLauncherCapability(installation);
+    const config = (0, to_current_config_1.launcherConfigFromInstallation)(installation);
+    const setup = (0, setup_renderer_1.renderInstallationSetup)(installation, {
+        providers: [
+            ...new Set(installation.spec.secrets.map((secret) => secret.provider)),
+        ].map((provider) => ({ provider, available: true })),
+    });
+    const helmRelease = rendersOnKubernetes(installation.spec.profile)
+        ? (0, helm_release_1.helmReleaseRendering)(installation)
+        : undefined;
+    return {
+        config,
+        artifacts: setup.artifacts,
+        renderedArtifacts: setup.renderedArtifacts,
+        ...(helmRelease === undefined ? {} : { helmRelease }),
+    };
+}
+function rendersOnKubernetes(profile) {
+    return ((0, compiler_1.installationProfileDefaults)(profile).target !==
+        contract_1.InstallationTargetKind.LocalMachine);
+}
+function assertCurrentLauncherCapability(installation) {
+    const spec = installation.spec;
+    if (!LAUNCHER_RENDERABLE_PROFILES.has(spec.profile)) {
+        unsupported(`profile ${spec.profile}; HA/regulated/hosted profiles require their dedicated installer renderer`);
+    }
+    const defaults = (0, compiler_1.installationProfileDefaults)(spec.profile);
+    const onKubernetes = rendersOnKubernetes(spec.profile);
+    if (spec.lifecycle.environment !== (0, compiler_1.profileLifecycleEnvironment)(spec.profile)) {
+        unsupported(`lifecycle environment ${spec.lifecycle.environment} on profile ${spec.profile}`);
+    }
+    if (spec.target.kind !== defaults.target ||
+        spec.target.region !== defaults.region ||
+        spec.target.zones.length !== 0) {
+        unsupported('non-default target placement');
+    }
+    if (spec.operator.kind !== defaults.operator) {
+        unsupported('custom operator authority');
+    }
+    if (!onKubernetes && spec.operator.namespace !== undefined) {
+        unsupported('an operator namespace on a local substrate');
+    }
+    if (spec.upgrade.channel !== contract_1.UpgradeChannel.Stable ||
+        spec.upgrade.releaseRef !== undefined) {
+        unsupported('upgrade policy override');
+    }
+    if (onKubernetes) {
+        assertKubernetesRenderable(spec);
+        return;
+    }
+    assertLocalRenderable(spec, defaults);
+}
+function assertKubernetesRenderable(spec) {
+    if (spec.storage.externalBinding !== undefined) {
+        unsupported('an external storage binding');
+    }
+    if (spec.security.residency !== undefined) {
+        unsupported('a data-residency policy');
+    }
+}
+function assertLocalRenderable(spec, defaults) {
+    if (spec.security.networkPolicy !== defaults.networkPolicy ||
+        spec.security.identity !== defaults.identity ||
+        spec.security.secretsBackend !== defaults.secretsBackend ||
+        spec.security.encryption !== defaults.encryption ||
+        spec.security.residency !== undefined) {
+        unsupported('a security-posture override');
+    }
+    if (spec.domains.length !== 0) {
+        unsupported('domain/TLS rendering');
+    }
+    if (spec.recovery.mode !== defaults.backupMode ||
+        spec.recovery.retentionDays !== defaults.backupRetentionDays ||
+        spec.recovery.rpoMinutes !== defaults.rpoMinutes ||
+        spec.recovery.rtoMinutes !== defaults.rtoMinutes ||
+        spec.recovery.restoreDrillIntervalDays !==
+            defaults.restoreDrillIntervalDays ||
+        spec.recovery.destinationSecretRef !== undefined) {
+        unsupported('a recovery policy override');
+    }
+    if (spec.observability.level !== defaults.observability ||
+        spec.observability.metrics !== defaults.metrics ||
+        spec.observability.tracing !== defaults.tracing ||
+        spec.observability.auditLog !== defaults.auditLog ||
+        spec.observability.retentionDays !== defaults.observabilityRetentionDays ||
+        spec.observability.exportSecretRef !== undefined) {
+        unsupported('an observability policy override');
+    }
+    if (spec.capacity.minReplicas !== defaults.minReplicas ||
+        spec.capacity.maxReplicas !== defaults.maxReplicas ||
+        spec.capacity.maxOrganizations !== defaults.maxOrganizations ||
+        spec.capacity.maxConcurrentSessions !== defaults.maxConcurrentSessions ||
+        spec.capacity.zones !== defaults.zones) {
+        unsupported('a capacity policy override');
+    }
+    if (spec.tenancy.mode !== defaults.tenancyMode ||
+        spec.tenancy.isolation !== defaults.isolation) {
+        unsupported('a tenancy policy override');
+    }
+    if (spec.storage.class !== defaults.storageClass ||
+        spec.storage.workspaceDriver !== defaults.workspaceDriver ||
+        spec.storage.externalBinding !== undefined) {
+        unsupported('a storage policy override');
+    }
+}
+function unsupported(detail) {
+    throw new Error(`The current launcher renderer cannot apply ${detail}. Plan with XemaInstallation, then use the renderer for that target.`);
+}
+//# sourceMappingURL=current-launcher-renderer.js.map