alchemy 2.0.0-beta.4 → 2.0.0-beta.41

package/lib/AWS/EKS/AccessEntry.d.ts

@@ -0,0 +1,84 @@
+import * as eks from "@distilled.cloud/aws/eks";
+import type { Input } from "../../Input.ts";
+import * as Provider from "../../Provider.ts";
+import { Resource } from "../../Resource.ts";
+import type { Providers } from "../Providers.ts";
+export interface AccessPolicyAssociation {
+    /**
+     * ARN of the AWS-managed EKS access policy.
+     */
+    policyArn: string;
+    /**
+     * Scope the policy applies to.
+     */
+    accessScope: eks.AccessScope;
+}
+export interface AccessEntryProps {
+    /**
+     * Target cluster name.
+     */
+    clusterName: Input<string>;
+    /**
+     * IAM principal ARN to grant access to.
+     */
+    principalArn: Input<string>;
+    /**
+     * Optional Kubernetes groups for the principal.
+     */
+    kubernetesGroups?: string[];
+    /**
+     * Optional username to map inside Kubernetes.
+     */
+    username?: string;
+    /**
+     * Entry type, such as `STANDARD`.
+     */
+    type?: string;
+    /**
+     * Exact set of EKS access policies associated with this entry.
+     */
+    accessPolicies?: AccessPolicyAssociation[];
+    /**
+     * User-defined tags to apply to the access entry.
+     */
+    tags?: Record<string, string>;
+}
+export interface AccessEntry extends Resource<"AWS.EKS.AccessEntry", AccessEntryProps, {
+    accessEntryArn: string;
+    clusterName: string;
+    principalArn: string;
+    kubernetesGroups: string[];
+    username: string | undefined;
+    type: string | undefined;
+    accessPolicies: AccessPolicyAssociation[];
+    tags: Record<string, string>;
+}, never, Providers> {
+}
+/**
+ * An Amazon EKS access entry that grants an IAM principal access to a cluster.
+ *
+ * `AccessEntry` owns both the entry itself and the exact set of associated EKS
+ * access policies, making cluster access explicit and updatable after initial
+ * cluster bootstrap.
+ *
+ * @section Managing Cluster Access
+ * @example Grant Read Access to a Role
+ * ```typescript
+ * const viewer = yield* AccessEntry("ViewerAccess", {
+ *   clusterName: cluster.clusterName,
+ *   principalArn: viewerRole.roleArn,
+ *   accessPolicies: [
+ *     {
+ *       policyArn:
+ *         "arn:aws:eks::aws:cluster-access-policy/AmazonEKSViewPolicy",
+ *       accessScope: {
+ *         type: "cluster",
+ *       },
+ *     },
+ *   ],
+ * });
+ * ```
+ */
+export declare const AccessEntry: import("../../Resource.ts").ResourceClass<AccessEntry>;
+export declare const AccessEntryProvider: () => import("effect/Layer").Layer<Provider.Provider<AccessEntry>, never, import("effect/unstable/http/HttpClient").HttpClient | import("../../Stage.ts").Stage | import("../../Stack.ts").Stack | import("@distilled.cloud/aws/Region").Region | import("@distilled.cloud/aws/Credentials").Credentials>;
+//# sourceMappingURL=AccessEntry.d.ts.map

package/lib/AWS/EKS/AccessEntry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AccessEntry.d.ts","sourceRoot":"","sources":["../../../src/AWS/EKS/AccessEntry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,0BAA0B,CAAC;AAIhD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAGjD,MAAM,WAAW,uBAAuB;IACtC;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC;CAC9B;AAED,MAAM,WAAW,gBAAgB;IAC/B;;OAEG;IACH,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B;;OAEG;IACH,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5B;;OAEG;IACH,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,cAAc,CAAC,EAAE,uBAAuB,EAAE,CAAC;IAC3C;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,WAAY,SAAQ,QAAQ,CAC3C,qBAAqB,EACrB,gBAAgB,EAChB;IACE,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,cAAc,EAAE,uBAAuB,EAAE,CAAC;IAC1C,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B,EACD,KAAK,EACL,SAAS,CACV;CAAG;AAEJ;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,eAAO,MAAM,WAAW,wDAA+C,CAAC;AAExE,eAAO,MAAM,mBAAmB,2SA4J5B,CAAC"}

package/lib/AWS/EKS/AccessEntry.js

@@ -0,0 +1,217 @@
+import * as eks from "@distilled.cloud/aws/eks";
+import * as Effect from "effect/Effect";
+import { Unowned } from "../../AdoptPolicy.js";
+import { isResolved } from "../../Diff.js";
+import * as Provider from "../../Provider.js";
+import { Resource } from "../../Resource.js";
+import { createInternalTags, diffTags, hasAlchemyTags } from "../../Tags.js";
+/**
+ * An Amazon EKS access entry that grants an IAM principal access to a cluster.
+ *
+ * `AccessEntry` owns both the entry itself and the exact set of associated EKS
+ * access policies, making cluster access explicit and updatable after initial
+ * cluster bootstrap.
+ *
+ * @section Managing Cluster Access
+ * @example Grant Read Access to a Role
+ * ```typescript
+ * const viewer = yield* AccessEntry("ViewerAccess", {
+ *   clusterName: cluster.clusterName,
+ *   principalArn: viewerRole.roleArn,
+ *   accessPolicies: [
+ *     {
+ *       policyArn:
+ *         "arn:aws:eks::aws:cluster-access-policy/AmazonEKSViewPolicy",
+ *       accessScope: {
+ *         type: "cluster",
+ *       },
+ *     },
+ *   ],
+ * });
+ * ```
+ */
+export const AccessEntry = Resource("AWS.EKS.AccessEntry");
+export const AccessEntryProvider = () => Provider.succeed(AccessEntry, {
+    stables: ["accessEntryArn"],
+    diff: Effect.fn(function* ({ olds, news }) {
+        if (!isResolved(news))
+            return;
+        if (olds.clusterName !== news.clusterName) {
+            return { action: "replace" };
+        }
+        if (olds.principalArn !== news.principalArn) {
+            return { action: "replace" };
+        }
+        if ((olds.type ?? "STANDARD") !== (news.type ?? "STANDARD")) {
+            return { action: "replace" };
+        }
+    }),
+    read: Effect.fn(function* ({ id, olds, output }) {
+        const state = yield* readAccessEntry({
+            clusterName: (output?.clusterName ?? olds.clusterName),
+            principalArn: (output?.principalArn ?? olds.principalArn),
+        });
+        if (!state)
+            return undefined;
+        return (yield* hasAlchemyTags(id, state.tags)) ? state : Unowned(state);
+    }),
+    reconcile: Effect.fn(function* ({ id, news, session }) {
+        const clusterName = news.clusterName;
+        const principalArn = news.principalArn;
+        const desiredTags = {
+            ...(yield* createInternalTags(id)),
+            ...news.tags,
+        };
+        // Observe — fetch live cloud state by (clusterName, principalArn).
+        let state = yield* readAccessEntry({
+            clusterName,
+            principalArn,
+        });
+        // Ensure — create the entry if missing. Tolerate
+        // `ResourceInUseException` as a race with a peer reconciler.
+        if (!state) {
+            yield* eks
+                .createAccessEntry({
+                clusterName,
+                principalArn,
+                kubernetesGroups: news.kubernetesGroups,
+                username: news.username,
+                type: news.type,
+                tags: desiredTags,
+            })
+                .pipe(Effect.catchTag("ResourceInUseException", () => Effect.void));
+            state = yield* readAccessEntry({
+                clusterName,
+                principalArn,
+            });
+            if (!state) {
+                return yield* Effect.fail(new Error(`AccessEntry '${principalArn}' could not be read after creation`));
+            }
+        }
+        // Sync kubernetesGroups + username — observed ↔ desired.
+        const observedGroups = state.kubernetesGroups ?? [];
+        const desiredGroups = news.kubernetesGroups ?? [];
+        if (JSON.stringify(observedGroups) !== JSON.stringify(desiredGroups) ||
+            state.username !== news.username) {
+            yield* eks.updateAccessEntry({
+                clusterName,
+                principalArn,
+                kubernetesGroups: desiredGroups,
+                username: news.username,
+            });
+        }
+        // Sync tags — diff observed cloud tags against desired.
+        const { removed, upsert } = diffTags(state.tags, desiredTags);
+        if (upsert.length > 0) {
+            yield* eks.tagResource({
+                resourceArn: state.accessEntryArn,
+                tags: Object.fromEntries(upsert.map((tag) => [tag.Key, tag.Value])),
+            });
+        }
+        if (removed.length > 0) {
+            yield* eks.untagResource({
+                resourceArn: state.accessEntryArn,
+                tagKeys: removed,
+            });
+        }
+        // Sync access policy associations — diff observed against desired.
+        const observedPolicies = state.accessPolicies;
+        const desiredPolicies = normalizeAccessPolicies(news.accessPolicies);
+        const observedPolicyMap = new Map(observedPolicies.map((policy) => [policyKey(policy), policy]));
+        const desiredPolicyMap = new Map(desiredPolicies.map((policy) => [policyKey(policy), policy]));
+        for (const [key, policy] of desiredPolicyMap) {
+            if (!observedPolicyMap.has(key)) {
+                yield* eks.associateAccessPolicy({
+                    clusterName,
+                    principalArn,
+                    policyArn: policy.policyArn,
+                    accessScope: policy.accessScope,
+                });
+            }
+        }
+        for (const [key, policy] of observedPolicyMap) {
+            if (!desiredPolicyMap.has(key)) {
+                yield* eks.disassociateAccessPolicy({
+                    clusterName,
+                    principalArn,
+                    policyArn: policy.policyArn,
+                });
+            }
+        }
+        yield* session.note(state.accessEntryArn);
+        // Re-read final state so returned attributes reflect post-sync.
+        return yield* readAccessEntry({
+            clusterName,
+            principalArn,
+        }).pipe(Effect.flatMap((finalState) => finalState
+            ? Effect.succeed(finalState)
+            : Effect.fail(new Error(`AccessEntry '${principalArn}' could not be read after reconcile`))));
+    }),
+    delete: Effect.fn(function* ({ output }) {
+        yield* eks
+            .deleteAccessEntry({
+            clusterName: output.clusterName,
+            principalArn: output.principalArn,
+        })
+            .pipe(Effect.catchTag("ResourceNotFoundException", () => Effect.void));
+    }),
+});
+const normalizeTags = (tags) => Object.fromEntries(Object.entries(tags ?? {}).filter((entry) => entry[1] !== undefined));
+const comparePolicyAssociation = (a, b) => a.policyArn.localeCompare(b.policyArn) ||
+    JSON.stringify(a.accessScope).localeCompare(JSON.stringify(b.accessScope));
+const normalizeAccessPolicies = (policies) => (policies ?? [])
+    .flatMap((policy) => policy.policyArn && policy.accessScope
+    ? [
+        {
+            policyArn: policy.policyArn,
+            accessScope: policy.accessScope,
+        },
+    ]
+    : [])
+    .sort(comparePolicyAssociation);
+const policyKey = (policy) => `${policy.policyArn}::${JSON.stringify(policy.accessScope)}`;
+const listAccessPolicies = Effect.fn(function* ({ clusterName, principalArn, }) {
+    const policies = [];
+    let nextToken;
+    while (true) {
+        const response = yield* eks.listAssociatedAccessPolicies({
+            clusterName,
+            principalArn,
+            nextToken,
+        });
+        policies.push(...normalizeAccessPolicies(response.associatedAccessPolicies));
+        if (!response.nextToken) {
+            break;
+        }
+        nextToken = response.nextToken;
+    }
+    return policies.sort(comparePolicyAssociation);
+});
+const readAccessEntry = Effect.fn(function* ({ clusterName, principalArn, }) {
+    const response = yield* eks
+        .describeAccessEntry({
+        clusterName,
+        principalArn,
+    })
+        .pipe(Effect.catchTag("ResourceNotFoundException", () => Effect.succeed(undefined)));
+    const accessEntry = response?.accessEntry;
+    if (!accessEntry?.accessEntryArn ||
+        !accessEntry.clusterName ||
+        !accessEntry.principalArn) {
+        return undefined;
+    }
+    return {
+        accessEntryArn: accessEntry.accessEntryArn,
+        clusterName: accessEntry.clusterName,
+        principalArn: accessEntry.principalArn,
+        kubernetesGroups: accessEntry.kubernetesGroups ?? [],
+        username: accessEntry.username,
+        type: accessEntry.type,
+        accessPolicies: yield* listAccessPolicies({
+            clusterName: accessEntry.clusterName,
+            principalArn: accessEntry.principalArn,
+        }),
+        tags: normalizeTags(accessEntry.tags),
+    };
+});
+//# sourceMappingURL=AccessEntry.js.map

package/lib/AWS/EKS/AccessEntry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AccessEntry.js","sourceRoot":"","sources":["../../../src/AWS/EKS/AccessEntry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,0BAA0B,CAAC;AAChD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAE3C,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,OAAO,EAAE,kBAAkB,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AA6D7E;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,QAAQ,CAAc,qBAAqB,CAAC,CAAC;AAExE,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,EAAE,CACtC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE;IAC5B,OAAO,EAAE,CAAC,gBAAgB,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;QACvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO;QAC9B,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1C,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;QACxC,CAAC;QAED,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY,EAAE,CAAC;YAC5C,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;QACxC,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,UAAU,CAAC,EAAE,CAAC;YAC5D,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;QACxC,CAAC;IACH,CAAC,CAAC;IACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QAC7C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC;YACnC,WAAW,EAAE,CAAC,MAAM,EAAE,WAAW,IAAI,IAAI,CAAC,WAAW,CAAW;YAChE,YAAY,EAAE,CAAC,MAAM,EAAE,YAAY,IAAI,IAAI,CAAC,YAAY,CAAW;SACpE,CAAC,CAAC;QACH,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAC7B,OAAO,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC1E,CAAC,CAAC;IACF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;QACnD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAqB,CAAC;QAC/C,MAAM,YAAY,GAAG,IAAI,CAAC,YAAsB,CAAC;QACjD,MAAM,WAAW,GAAG;YAClB,GAAG,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;YAClC,GAAG,IAAI,CAAC,IAAI;SACb,CAAC;QAEF,mEAAmE;QACnE,IAAI,KAAK,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC;YACjC,WAAW;YACX,YAAY;SACb,CAAC,CAAC;QAEH,iDAAiD;QACjD,6DAA6D;QAC7D,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,CAAC,CAAC,GAAG;iBACP,iBAAiB,CAAC;gBACjB,WAAW;gBACX,YAAY;gBACZ,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;gBACvC,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,WAAW;aAClB,CAAC;iBACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YAEtE,KAAK,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC;gBAC7B,WAAW;gBACX,YAAY;aACb,CAAC,CAAC;YAEH,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CACP,gBAAgB,YAAY,oCAAoC,CACjE,CACF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,yDAAyD;QACzD,MAAM,cAAc,GAAG,KAAK,CAAC,gBAAgB,IAAI,EAAE,CAAC;QACpD,MAAM,aAAa,GAAG,IAAI,CAAC,gBAAgB,IAAI,EAAE,CAAC;QAClD,IACE,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;YAChE,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,EAChC,CAAC;YACD,KAAK,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC;gBAC3B,WAAW;gBACX,YAAY;gBACZ,gBAAgB,EAAE,aAAa;gBAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;aACxB,CAAC,CAAC;QACL,CAAC;QAED,wDAAwD;QACxD,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAC9D,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,KAAK,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC;gBACrB,WAAW,EAAE,KAAK,CAAC,cAAc;gBACjC,IAAI,EAAE,MAAM,CAAC,WAAW,CACtB,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAU,CAAC,CACnD;aACF,CAAC,CAAC;QACL,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,KAAK,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC;gBACvB,WAAW,EAAE,KAAK,CAAC,cAAc;gBACjC,OAAO,EAAE,OAAO;aACjB,CAAC,CAAC;QACL,CAAC;QAED,mEAAmE;QACnE,MAAM,gBAAgB,GAAG,KAAK,CAAC,cAAc,CAAC;QAC9C,MAAM,eAAe,GAAG,uBAAuB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACrE,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAC/B,gBAAgB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAC9D,CAAC;QACF,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAC9B,eAAe,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAC7D,CAAC;QAEF,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,gBAAgB,EAAE,CAAC;YAC7C,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChC,KAAK,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC;oBAC/B,WAAW;oBACX,YAAY;oBACZ,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;iBAChC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,iBAAiB,EAAE,CAAC;YAC9C,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/B,KAAK,CAAC,CAAC,GAAG,CAAC,wBAAwB,CAAC;oBAClC,WAAW;oBACX,YAAY;oBACZ,SAAS,EAAE,MAAM,CAAC,SAAS;iBAC5B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAE1C,gEAAgE;QAChE,OAAO,KAAK,CAAC,CAAC,eAAe,CAAC;YAC5B,WAAW;YACX,YAAY;SACb,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE,CAC5B,UAAU;YACR,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;YAC5B,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,IAAI,KAAK,CACP,gBAAgB,YAAY,qCAAqC,CAClE,CACF,CACN,CACF,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;QACrC,KAAK,CAAC,CAAC,GAAG;aACP,iBAAiB,CAAC;YACjB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;SAClC,CAAC;aACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3E,CAAC,CAAC;CACH,CAAC,CAAC;AAEL,MAAM,aAAa,GAAG,CAAC,IAAoD,EAAE,EAAE,CAC7E,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,CAC/B,CAAC,KAAK,EAA6B,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAC7D,CACF,CAAC;AAEJ,MAAM,wBAAwB,GAAG,CAC/B,CAA0B,EAC1B,CAA0B,EAC1B,EAAE,CACF,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;IACtC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;AAE7E,MAAM,uBAAuB,GAAG,CAC9B,QAEa,EACc,EAAE,CAC7B,CAAC,QAAQ,IAAI,EAAE,CAAC;KACb,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAClB,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,WAAW;IACpC,CAAC,CAAC;QACE;YACE,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;SAChC;KACF;IACH,CAAC,CAAC,EAAE,CACP;KACA,IAAI,CAAC,wBAAwB,CAAC,CAAC;AAEpC,MAAM,SAAS,GAAG,CAAC,MAA+B,EAAE,EAAE,CACpD,GAAG,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;AAE/D,MAAM,kBAAkB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAC9C,WAAW,EACX,YAAY,GAIb;IACC,MAAM,QAAQ,GAA8B,EAAE,CAAC;IAC/C,IAAI,SAA6B,CAAC;IAElC,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,4BAA4B,CAAC;YACvD,WAAW;YACX,YAAY;YACZ,SAAS;SACV,CAAC,CAAC;QAEH,QAAQ,CAAC,IAAI,CACX,GAAG,uBAAuB,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAC9D,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;YACxB,MAAM;QACR,CAAC;QAED,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC;IACjC,CAAC;IAED,OAAO,QAAQ,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;AACjD,CAAC,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAC3C,WAAW,EACX,YAAY,GAIb;IACC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,GAAG;SACxB,mBAAmB,CAAC;QACnB,WAAW;QACX,YAAY;KACb,CAAC;SACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE,CAChD,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAC1B,CACF,CAAC;IAEJ,MAAM,WAAW,GAAG,QAAQ,EAAE,WAAW,CAAC;IAC1C,IACE,CAAC,WAAW,EAAE,cAAc;QAC5B,CAAC,WAAW,CAAC,WAAW;QACxB,CAAC,WAAW,CAAC,YAAY,EACzB,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO;QACL,cAAc,EAAE,WAAW,CAAC,cAAc;QAC1C,WAAW,EAAE,WAAW,CAAC,WAAW;QACpC,YAAY,EAAE,WAAW,CAAC,YAAY;QACtC,gBAAgB,EAAE,WAAW,CAAC,gBAAgB,IAAI,EAAE;QACpD,QAAQ,EAAE,WAAW,CAAC,QAAQ;QAC9B,IAAI,EAAE,WAAW,CAAC,IAAI;QACtB,cAAc,EAAE,KAAK,CAAC,CAAC,kBAAkB,CAAC;YACxC,WAAW,EAAE,WAAW,CAAC,WAAW;YACpC,YAAY,EAAE,WAAW,CAAC,YAAY;SACvC,CAAC;QACF,IAAI,EAAE,aAAa,CAAC,WAAW,CAAC,IAAI,CAAC;KACtC,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/lib/AWS/EKS/Addon.d.ts

@@ -0,0 +1,82 @@
+import * as eks from "@distilled.cloud/aws/eks";
+import type { Input } from "../../Input.ts";
+import * as Provider from "../../Provider.ts";
+import { Resource } from "../../Resource.ts";
+import type { Providers } from "../Providers.ts";
+export interface AddonProps {
+    /**
+     * Target cluster name.
+     */
+    clusterName: Input<string>;
+    /**
+     * Add-on name, such as `metrics-server`.
+     */
+    addonName: string;
+    /**
+     * Optional add-on version. If omitted, EKS chooses the default compatible version.
+     */
+    addonVersion?: string;
+    /**
+     * IAM role ARN used by the add-on's service account.
+     */
+    serviceAccountRoleArn?: Input<string>;
+    /**
+     * Conflict resolution strategy used during create and update.
+     */
+    resolveConflicts?: eks.ResolveConflicts;
+    /**
+     * Optional add-on configuration JSON string.
+     */
+    configurationValues?: string;
+    /**
+     * Optional pod identity associations managed by the add-on.
+     */
+    podIdentityAssociations?: eks.AddonPodIdentityAssociations[];
+    /**
+     * Optional namespace override. Changing this requires replacement.
+     */
+    namespaceConfig?: eks.AddonNamespaceConfigRequest;
+    /**
+     * Preserve the add-on installation when the Alchemy resource is deleted.
+     */
+    preserveOnDelete?: boolean;
+    /**
+     * User-defined tags to apply to the add-on.
+     */
+    tags?: Record<string, string>;
+}
+export interface Addon extends Resource<"AWS.EKS.Addon", AddonProps, {
+    addonArn: string;
+    addonName: string;
+    clusterName: string;
+    status: eks.AddonStatus;
+    addonVersion: string | undefined;
+    serviceAccountRoleArn: string | undefined;
+    configurationValues: string | undefined;
+    podIdentityAssociations: string[];
+    namespace: string | undefined;
+    publisher: string | undefined;
+    owner: string | undefined;
+    tags: Record<string, string>;
+    healthIssues: eks.AddonIssue[];
+}, never, Providers> {
+}
+/**
+ * An Amazon EKS managed add-on installed on a cluster.
+ *
+ * `Addon` is intended for optional managed add-ons. On Auto Mode clusters, many
+ * core components are already provided by AWS and do not need to be modeled as
+ * explicit add-on resources.
+ *
+ * @section Managing Add-ons
+ * @example Install Metrics Server
+ * ```typescript
+ * const metricsServer = yield* Addon("MetricsServer", {
+ *   clusterName: cluster.clusterName,
+ *   addonName: "metrics-server",
+ * });
+ * ```
+ */
+export declare const Addon: import("../../Resource.ts").ResourceClass<Addon>;
+export declare const AddonProvider: () => import("effect/Layer").Layer<Provider.Provider<Addon>, never, import("effect/unstable/http/HttpClient").HttpClient | import("../../Stage.ts").Stage | import("../../Stack.ts").Stack | import("@distilled.cloud/aws/Region").Region | import("@distilled.cloud/aws/Credentials").Credentials>;
+//# sourceMappingURL=Addon.d.ts.map

package/lib/AWS/EKS/Addon.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Addon.d.ts","sourceRoot":"","sources":["../../../src/AWS/EKS/Addon.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,0BAA0B,CAAC;AAMhD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAE5C,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAGjD,MAAM,WAAW,UAAU;IACzB;;OAEG;IACH,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;OAEG;IACH,qBAAqB,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACtC;;OAEG;IACH,gBAAgB,CAAC,EAAE,GAAG,CAAC,gBAAgB,CAAC;IACxC;;OAEG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B;;OAEG;IACH,uBAAuB,CAAC,EAAE,GAAG,CAAC,4BAA4B,EAAE,CAAC;IAC7D;;OAEG;IACH,eAAe,CAAC,EAAE,GAAG,CAAC,2BAA2B,CAAC;IAClD;;OAEG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,KAAM,SAAQ,QAAQ,CACrC,eAAe,EACf,UAAU,EACV;IACE,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,GAAG,CAAC,WAAW,CAAC;IACxB,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,qBAAqB,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,mBAAmB,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,uBAAuB,EAAE,MAAM,EAAE,CAAC;IAClC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,YAAY,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC;CAChC,EACD,KAAK,EACL,SAAS,CACV;CAAG;AAEJ;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,KAAK,kDAAmC,CAAC;AA6DtD,eAAO,MAAM,aAAa,qSAwJvB,CAAC"}

package/lib/AWS/EKS/Addon.js

@@ -0,0 +1,230 @@
+import * as eks from "@distilled.cloud/aws/eks";
+import * as Data from "effect/Data";
+import * as Effect from "effect/Effect";
+import * as Schedule from "effect/Schedule";
+import { Unowned } from "../../AdoptPolicy.js";
+import { deepEqual, isResolved } from "../../Diff.js";
+import { createPhysicalName } from "../../PhysicalName.js";
+import * as Provider from "../../Provider.js";
+import { Resource } from "../../Resource.js";
+import { createInternalTags, diffTags, hasAlchemyTags } from "../../Tags.js";
+/**
+ * An Amazon EKS managed add-on installed on a cluster.
+ *
+ * `Addon` is intended for optional managed add-ons. On Auto Mode clusters, many
+ * core components are already provided by AWS and do not need to be modeled as
+ * explicit add-on resources.
+ *
+ * @section Managing Add-ons
+ * @example Install Metrics Server
+ * ```typescript
+ * const metricsServer = yield* Addon("MetricsServer", {
+ *   clusterName: cluster.clusterName,
+ *   addonName: "metrics-server",
+ * });
+ * ```
+ */
+export const Addon = Resource("AWS.EKS.Addon");
+const normalizeTags = (tags) => Object.fromEntries(Object.entries(tags ?? {}).filter((entry) => entry[1] !== undefined));
+const mapAddon = (addon) => ({
+    addonArn: addon.addonArn,
+    addonName: addon.addonName,
+    clusterName: addon.clusterName,
+    status: addon.status ?? "CREATING",
+    addonVersion: addon.addonVersion,
+    serviceAccountRoleArn: addon.serviceAccountRoleArn,
+    configurationValues: addon.configurationValues,
+    podIdentityAssociations: addon.podIdentityAssociations ?? [],
+    namespace: addon.namespaceConfig?.namespace,
+    publisher: addon.publisher,
+    owner: addon.owner,
+    tags: normalizeTags(addon.tags),
+    healthIssues: addon.health?.issues ?? [],
+});
+const readAddon = Effect.fn(function* ({ clusterName, addonName, }) {
+    const response = yield* eks
+        .describeAddon({
+        clusterName,
+        addonName,
+    })
+        .pipe(Effect.catchTag("ResourceNotFoundException", () => Effect.succeed(undefined)));
+    const addon = response?.addon;
+    if (!addon?.addonArn || !addon.addonName || !addon.clusterName) {
+        return undefined;
+    }
+    return mapAddon(addon);
+});
+class AddonNotReady extends Data.TaggedError("AddonNotReady") {
+}
+class AddonStillExists extends Data.TaggedError("AddonStillExists") {
+}
+export const AddonProvider = () => Provider.effect(Addon, Effect.gen(function* () {
+    const toClientRequestToken = (id, action) => createPhysicalName({
+        id: `${id}-${action}`,
+        maxLength: 64,
+        delimiter: "-",
+    });
+    return {
+        stables: ["addonArn"],
+        diff: Effect.fn(function* ({ olds, news }) {
+            if (!isResolved(news))
+                return;
+            if (olds.clusterName !== news.clusterName) {
+                return { action: "replace" };
+            }
+            if (olds.addonName !== news.addonName) {
+                return { action: "replace" };
+            }
+            if (!deepEqual(olds.namespaceConfig, news.namespaceConfig)) {
+                return { action: "replace" };
+            }
+        }),
+        read: Effect.fn(function* ({ id, olds }) {
+            const state = yield* readAddon({
+                clusterName: olds.clusterName,
+                addonName: olds.addonName,
+            });
+            if (!state)
+                return undefined;
+            return (yield* hasAlchemyTags(id, state.tags))
+                ? state
+                : Unowned(state);
+        }),
+        reconcile: Effect.fn(function* ({ id, news, session }) {
+            const clusterName = news.clusterName;
+            const addonName = news.addonName;
+            const desiredTags = {
+                ...(yield* createInternalTags(id)),
+                ...news.tags,
+            };
+            // Observe — fetch live cloud state by (clusterName, addonName).
+            let state = yield* readAddon({
+                clusterName,
+                addonName,
+            });
+            // Ensure — create if missing. Tolerate `ResourceInUseException`
+            // as a race with a peer reconciler: re-read and continue with
+            // sync.
+            if (!state) {
+                yield* eks
+                    .createAddon({
+                    clusterName,
+                    addonName,
+                    addonVersion: news.addonVersion,
+                    serviceAccountRoleArn: news.serviceAccountRoleArn,
+                    resolveConflicts: news.resolveConflicts,
+                    configurationValues: news.configurationValues,
+                    podIdentityAssociations: news.podIdentityAssociations,
+                    namespaceConfig: news.namespaceConfig,
+                    tags: desiredTags,
+                    clientRequestToken: yield* toClientRequestToken(id, "create"),
+                })
+                    .pipe(Effect.catchTag("ResourceInUseException", () => Effect.void));
+                state = yield* waitForAddonActive({
+                    clusterName,
+                    addonName,
+                });
+            }
+            // Sync addon version / config — diff observed against desired.
+            // updateAddon handles version, role, resolve conflicts, config
+            // values, and pod identity associations atomically.
+            const podIdentityChanged = JSON.stringify(state.podIdentityAssociations ?? []) !==
+                JSON.stringify(news.podIdentityAssociations ?? []);
+            if ((news.addonVersion !== undefined &&
+                state.addonVersion !== news.addonVersion) ||
+                state.serviceAccountRoleArn !==
+                    news.serviceAccountRoleArn ||
+                state.configurationValues !== news.configurationValues ||
+                podIdentityChanged) {
+                yield* eks.updateAddon({
+                    clusterName,
+                    addonName,
+                    addonVersion: news.addonVersion,
+                    serviceAccountRoleArn: news.serviceAccountRoleArn,
+                    resolveConflicts: news.resolveConflicts,
+                    configurationValues: news.configurationValues,
+                    podIdentityAssociations: news.podIdentityAssociations,
+                    clientRequestToken: yield* toClientRequestToken(id, "update"),
+                });
+                state = yield* waitForAddonActive({
+                    clusterName,
+                    addonName,
+                });
+            }
+            // Sync tags — diff observed cloud tags against desired.
+            const { removed, upsert } = diffTags(state.tags, desiredTags);
+            if (upsert.length > 0) {
+                yield* eks.tagResource({
+                    resourceArn: state.addonArn,
+                    tags: Object.fromEntries(upsert.map((tag) => [tag.Key, tag.Value])),
+                });
+            }
+            if (removed.length > 0) {
+                yield* eks.untagResource({
+                    resourceArn: state.addonArn,
+                    tagKeys: removed,
+                });
+            }
+            yield* session.note(state.addonArn);
+            return state;
+        }),
+        delete: Effect.fn(function* ({ olds, output }) {
+            yield* eks
+                .deleteAddon({
+                clusterName: output.clusterName,
+                addonName: output.addonName,
+                preserve: olds.preserveOnDelete,
+            })
+                .pipe(Effect.catchTag("ResourceNotFoundException", () => Effect.void));
+            if (!olds.preserveOnDelete) {
+                yield* waitForAddonDeleted({
+                    clusterName: output.clusterName,
+                    addonName: output.addonName,
+                });
+            }
+        }),
+    };
+}));
+const waitForAddonActive = Effect.fn(function* ({ clusterName, addonName, }) {
+    return yield* readAddon({
+        clusterName,
+        addonName,
+    }).pipe(Effect.flatMap((addon) => {
+        if (!addon) {
+            return Effect.fail(new AddonNotReady({
+                clusterName,
+                addonName,
+                status: undefined,
+            }));
+        }
+        switch (addon.status) {
+            case "ACTIVE":
+                return Effect.succeed(addon);
+            case "CREATE_FAILED":
+            case "UPDATE_FAILED":
+            case "DELETE_FAILED":
+                return Effect.fail(new Error(`Addon '${clusterName}/${addonName}' entered terminal status '${addon.status}'`));
+            default:
+                return Effect.fail(new AddonNotReady({
+                    clusterName,
+                    addonName,
+                    status: addon.status,
+                }));
+        }
+    }), Effect.retry({
+        while: (error) => error instanceof AddonNotReady,
+        schedule: Schedule.exponential("1 second").pipe(Schedule.both(Schedule.recurs(120))),
+    }));
+});
+const waitForAddonDeleted = Effect.fn(function* ({ clusterName, addonName, }) {
+    yield* readAddon({
+        clusterName,
+        addonName,
+    }).pipe(Effect.flatMap((addon) => addon
+        ? Effect.fail(new AddonStillExists({ clusterName, addonName }))
+        : Effect.void), Effect.retry({
+        while: (error) => error instanceof AddonStillExists,
+        schedule: Schedule.exponential("1 second").pipe(Schedule.both(Schedule.recurs(120))),
+    }));
+});
+//# sourceMappingURL=Addon.js.map

package/lib/AWS/EKS/Addon.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Addon.js","sourceRoot":"","sources":["../../../src/AWS/EKS/Addon.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,0BAA0B,CAAC;AAChD,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AACpC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAEtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,OAAO,EAAE,kBAAkB,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAmE7E;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG,QAAQ,CAAQ,eAAe,CAAC,CAAC;AAEtD,MAAM,aAAa,GAAG,CAAC,IAAoD,EAAE,EAAE,CAC7E,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,CAC/B,CAAC,KAAK,EAA6B,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAC7D,CACF,CAAC;AAEJ,MAAM,QAAQ,GAAG,CAAC,KAAgB,EAAE,EAAE,CAAC,CAAC;IACtC,QAAQ,EAAE,KAAK,CAAC,QAAS;IACzB,SAAS,EAAE,KAAK,CAAC,SAAU;IAC3B,WAAW,EAAE,KAAK,CAAC,WAAY;IAC/B,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,UAAU;IAClC,YAAY,EAAE,KAAK,CAAC,YAAY;IAChC,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;IAClD,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;IAC9C,uBAAuB,EAAE,KAAK,CAAC,uBAAuB,IAAI,EAAE;IAC5D,SAAS,EAAE,KAAK,CAAC,eAAe,EAAE,SAAS;IAC3C,SAAS,EAAE,KAAK,CAAC,SAAS;IAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;IAClB,IAAI,EAAE,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC;IAC/B,YAAY,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,IAAI,EAAE;CACzC,CAAC,CAAC;AAEH,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EACrC,WAAW,EACX,SAAS,GAIV;IACC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,GAAG;SACxB,aAAa,CAAC;QACb,WAAW;QACX,SAAS;KACV,CAAC;SACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE,CAChD,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAC1B,CACF,CAAC;IAEJ,MAAM,KAAK,GAAG,QAAQ,EAAE,KAAK,CAAC;IAC9B,IAAI,CAAC,KAAK,EAAE,QAAQ,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QAC/D,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC,CAAC,CAAC;AAEH,MAAM,aAAc,SAAQ,IAAI,CAAC,WAAW,CAAC,eAAe,CAI1D;CAAG;AAEL,MAAM,gBAAiB,SAAQ,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAGhE;CAAG;AACL,MAAM,CAAC,MAAM,aAAa,GAAG,GAAG,EAAE,CAChC,QAAQ,CAAC,MAAM,CACb,KAAK,EACL,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,oBAAoB,GAAG,CAAC,EAAU,EAAE,MAAc,EAAE,EAAE,CAC1D,kBAAkB,CAAC;QACjB,EAAE,EAAE,GAAG,EAAE,IAAI,MAAM,EAAE;QACrB,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,GAAG;KACf,CAAC,CAAC;IAEL,OAAO;QACL,OAAO,EAAE,CAAC,UAAU,CAAC;QACrB,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;YACvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO;YAC9B,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;gBAC1C,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;YAED,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;gBACtC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;YAED,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;gBAC3D,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;QACH,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;YACrC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC;gBAC7B,WAAW,EAAE,IAAI,CAAC,WAAqB;gBACvC,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC,CAAC;YACH,IAAI,CAAC,KAAK;gBAAE,OAAO,SAAS,CAAC;YAC7B,OAAO,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC5C,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC,CAAC;QACF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;YACnD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAqB,CAAC;YAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;YACjC,MAAM,WAAW,GAAG;gBAClB,GAAG,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;gBAClC,GAAG,IAAI,CAAC,IAAI;aACb,CAAC;YAEF,gEAAgE;YAChE,IAAI,KAAK,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC;gBAC3B,WAAW;gBACX,SAAS;aACV,CAAC,CAAC;YAEH,gEAAgE;YAChE,8DAA8D;YAC9D,QAAQ;YACR,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,KAAK,CAAC,CAAC,GAAG;qBACP,WAAW,CAAC;oBACX,WAAW;oBACX,SAAS;oBACT,YAAY,EAAE,IAAI,CAAC,YAAY;oBAC/B,qBAAqB,EAAE,IAAI,CAAC,qBAEf;oBACb,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;oBACvC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;oBAC7C,uBAAuB,EAAE,IAAI,CAAC,uBAAuB;oBACrD,eAAe,EAAE,IAAI,CAAC,eAAe;oBACrC,IAAI,EAAE,WAAW;oBACjB,kBAAkB,EAAE,KAAK,CAAC,CAAC,oBAAoB,CAAC,EAAE,EAAE,QAAQ,CAAC;iBAC9D,CAAC;qBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAC7D,CAAC;gBAEJ,KAAK,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC;oBAChC,WAAW;oBACX,SAAS;iBACV,CAAC,CAAC;YACL,CAAC;YAED,+DAA+D;YAC/D,+DAA+D;YAC/D,oDAAoD;YACpD,MAAM,kBAAkB,GACtB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,uBAAuB,IAAI,EAAE,CAAC;gBACnD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,uBAAuB,IAAI,EAAE,CAAC,CAAC;YACrD,IACE,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS;gBAC9B,KAAK,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY,CAAC;gBAC3C,KAAK,CAAC,qBAAqB;oBACxB,IAAI,CAAC,qBAA4C;gBACpD,KAAK,CAAC,mBAAmB,KAAK,IAAI,CAAC,mBAAmB;gBACtD,kBAAkB,EAClB,CAAC;gBACD,KAAK,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC;oBACrB,WAAW;oBACX,SAAS;oBACT,YAAY,EAAE,IAAI,CAAC,YAAY;oBAC/B,qBAAqB,EAAE,IAAI,CAAC,qBAEf;oBACb,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;oBACvC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;oBAC7C,uBAAuB,EAAE,IAAI,CAAC,uBAAuB;oBACrD,kBAAkB,EAAE,KAAK,CAAC,CAAC,oBAAoB,CAAC,EAAE,EAAE,QAAQ,CAAC;iBAC9D,CAAC,CAAC;gBACH,KAAK,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC;oBAChC,WAAW;oBACX,SAAS;iBACV,CAAC,CAAC;YACL,CAAC;YAED,wDAAwD;YACxD,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;YAC9D,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,KAAK,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC;oBACrB,WAAW,EAAE,KAAK,CAAC,QAAQ;oBAC3B,IAAI,EAAE,MAAM,CAAC,WAAW,CACtB,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAU,CAAC,CACnD;iBACF,CAAC,CAAC;YACL,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,KAAK,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC;oBACvB,WAAW,EAAE,KAAK,CAAC,QAAQ;oBAC3B,OAAO,EAAE,OAAO;iBACjB,CAAC,CAAC;YACL,CAAC;YAED,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACpC,OAAO,KAAK,CAAC;QACf,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;YAC3C,KAAK,CAAC,CAAC,GAAG;iBACP,WAAW,CAAC;gBACX,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,QAAQ,EAAE,IAAI,CAAC,gBAAgB;aAChC,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAChE,CAAC;YAEJ,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBAC3B,KAAK,CAAC,CAAC,mBAAmB,CAAC;oBACzB,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;iBAC5B,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC;AAEJ,MAAM,kBAAkB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAC9C,WAAW,EACX,SAAS,GAIV;IACC,OAAO,KAAK,CAAC,CAAC,SAAS,CAAC;QACtB,WAAW;QACX,SAAS;KACV,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QACvB,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,MAAM,CAAC,IAAI,CAChB,IAAI,aAAa,CAAC;gBAChB,WAAW;gBACX,SAAS;gBACT,MAAM,EAAE,SAAS;aAClB,CAAC,CACH,CAAC;QACJ,CAAC;QAED,QAAQ,KAAK,CAAC,MAAM,EAAE,CAAC;YACrB,KAAK,QAAQ;gBACX,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC/B,KAAK,eAAe,CAAC;YACrB,KAAK,eAAe,CAAC;YACrB,KAAK,eAAe;gBAClB,OAAO,MAAM,CAAC,IAAI,CAChB,IAAI,KAAK,CACP,UAAU,WAAW,IAAI,SAAS,8BAA8B,KAAK,CAAC,MAAM,GAAG,CAChF,CACF,CAAC;YACJ;gBACE,OAAO,MAAM,CAAC,IAAI,CAChB,IAAI,aAAa,CAAC;oBAChB,WAAW;oBACX,SAAS;oBACT,MAAM,EAAE,KAAK,CAAC,MAAM;iBACrB,CAAC,CACH,CAAC;QACN,CAAC;IACH,CAAC,CAAC,EACF,MAAM,CAAC,KAAK,CAAC;QACX,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,YAAY,aAAa;QAChD,QAAQ,EAAE,QAAQ,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,IAAI,CAC7C,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CACpC;KACF,CAAC,CACH,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAC/C,WAAW,EACX,SAAS,GAIV;IACC,KAAK,CAAC,CAAC,SAAS,CAAC;QACf,WAAW;QACX,SAAS;KACV,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CACvB,KAAK;QACH,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;QAC/D,CAAC,CAAC,MAAM,CAAC,IAAI,CAChB,EACD,MAAM,CAAC,KAAK,CAAC;QACX,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,YAAY,gBAAgB;QACnD,QAAQ,EAAE,QAAQ,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,IAAI,CAC7C,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CACpC;KACF,CAAC,CACH,CAAC;AACJ,CAAC,CAAC,CAAC"}