kustodian 1.0.0

package/dist/registry/dockerhub.js

@@ -0,0 +1,91 @@
+import { failure, success } from '../core/index.js';
+const DOCKERHUB_AUTH_URL = 'https://auth.docker.io/token';
+const DOCKERHUB_REGISTRY_URL = 'https://registry-1.docker.io/v2';
+const DEFAULT_TIMEOUT = 30000;
+/**
+ * Creates an abort signal with timeout.
+ */
+function create_abort_signal(timeout_ms) {
+    const controller = new AbortController();
+    setTimeout(() => controller.abort(), timeout_ms);
+    return controller.signal;
+}
+/**
+ * Gets an authentication token for Docker Hub.
+ */
+async function get_dockerhub_token(image, config) {
+    const scope = `repository:${image.namespace}/${image.repository}:pull`;
+    const url = `${DOCKERHUB_AUTH_URL}?service=registry.docker.io&scope=${encodeURIComponent(scope)}`;
+    const headers = {};
+    if (config?.auth?.username && config.auth.password) {
+        const credentials = Buffer.from(`${config.auth.username}:${config.auth.password}`).toString('base64');
+        headers['Authorization'] = `Basic ${credentials}`;
+    }
+    try {
+        const response = await fetch(url, {
+            headers,
+            signal: create_abort_signal(config?.timeout ?? DEFAULT_TIMEOUT),
+        });
+        if (!response.ok) {
+            return failure({
+                code: 'REGISTRY_AUTH_ERROR',
+                message: `Docker Hub auth failed: ${response.status} ${response.statusText}`,
+            });
+        }
+        const data = (await response.json());
+        const token = data.token || data.access_token;
+        if (!token) {
+            return failure({
+                code: 'REGISTRY_AUTH_ERROR',
+                message: 'No token returned from Docker Hub auth',
+            });
+        }
+        return success(token);
+    }
+    catch (error) {
+        return failure({
+            code: 'REGISTRY_ERROR',
+            message: `Docker Hub auth request failed: ${error instanceof Error ? error.message : String(error)}`,
+        });
+    }
+}
+/**
+ * Creates a Docker Hub registry client.
+ */
+export function create_dockerhub_client(config) {
+    return {
+        async list_tags(image) {
+            // Get auth token
+            const token_result = await get_dockerhub_token(image, config);
+            if (!token_result.success) {
+                return token_result;
+            }
+            const url = `${DOCKERHUB_REGISTRY_URL}/${image.namespace}/${image.repository}/tags/list`;
+            try {
+                const response = await fetch(url, {
+                    headers: {
+                        Authorization: `Bearer ${token_result.value}`,
+                        Accept: 'application/json',
+                    },
+                    signal: create_abort_signal(config?.timeout ?? DEFAULT_TIMEOUT),
+                });
+                if (!response.ok) {
+                    return failure({
+                        code: 'REGISTRY_ERROR',
+                        message: `Failed to fetch tags: ${response.status} ${response.statusText}`,
+                    });
+                }
+                const data = (await response.json());
+                const tags = (data.tags || []).map((name) => ({ name }));
+                return success(tags);
+            }
+            catch (error) {
+                return failure({
+                    code: 'REGISTRY_ERROR',
+                    message: `Failed to fetch tags: ${error instanceof Error ? error.message : String(error)}`,
+                });
+            }
+        },
+    };
+}
+//# sourceMappingURL=dockerhub.js.map

package/dist/registry/dockerhub.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dockerhub.js","sourceRoot":"","sources":["../../src/registry/dockerhub.ts"],"names":[],"mappings":"AACA,OAAO,EAAmB,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAQrE,MAAM,kBAAkB,GAAG,8BAA8B,CAAC;AAC1D,MAAM,sBAAsB,GAAG,iCAAiC,CAAC;AACjE,MAAM,eAAe,GAAG,KAAK,CAAC;AAa9B;;GAEG;AACH,SAAS,mBAAmB,CAAC,UAAkB;IAC7C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,UAAU,CAAC,CAAC;IACjD,OAAO,UAAU,CAAC,MAAM,CAAC;AAC3B,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,mBAAmB,CAChC,KAAyB,EACzB,MAAiC;IAEjC,MAAM,KAAK,GAAG,cAAc,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,UAAU,OAAO,CAAC;IACvE,MAAM,GAAG,GAAG,GAAG,kBAAkB,qCAAqC,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;IAElG,MAAM,OAAO,GAA2B,EAAE,CAAC;IAE3C,IAAI,MAAM,EAAE,IAAI,EAAE,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACnD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CACzF,QAAQ,CACT,CAAC;QACF,OAAO,CAAC,eAAe,CAAC,GAAG,SAAS,WAAW,EAAE,CAAC;IACpD,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,OAAO;YACP,MAAM,EAAE,mBAAmB,CAAC,MAAM,EAAE,OAAO,IAAI,eAAe,CAAC;SAChE,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,OAAO,CAAC;gBACb,IAAI,EAAE,qBAAqB;gBAC3B,OAAO,EAAE,2BAA2B,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE;aAC7E,CAAC,CAAC;QACL,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA2B,CAAC;QAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,YAAY,CAAC;QAE9C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,OAAO,CAAC;gBACb,IAAI,EAAE,qBAAqB;gBAC3B,OAAO,EAAE,wCAAwC;aAClD,CAAC,CAAC;QACL,CAAC;QAED,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,OAAO,CAAC;YACb,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,mCAAmC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;SACrG,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAiC;IACvE,OAAO;QACL,KAAK,CAAC,SAAS,CACb,KAAyB;YAEzB,iBAAiB;YACjB,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAC9D,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;gBAC1B,OAAO,YAAY,CAAC;YACtB,CAAC;YAED,MAAM,GAAG,GAAG,GAAG,sBAAsB,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,UAAU,YAAY,CAAC;YAEzF,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;oBAChC,OAAO,EAAE;wBACP,aAAa,EAAE,UAAU,YAAY,CAAC,KAAK,EAAE;wBAC7C,MAAM,EAAE,kBAAkB;qBAC3B;oBACD,MAAM,EAAE,mBAAmB,CAAC,MAAM,EAAE,OAAO,IAAI,eAAe,CAAC;iBAChE,CAAC,CAAC;gBAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,OAAO,OAAO,CAAC;wBACb,IAAI,EAAE,gBAAgB;wBACtB,OAAO,EAAE,yBAAyB,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE;qBAC3E,CAAC,CAAC;gBACL,CAAC;gBAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA0B,CAAC;gBAE9D,MAAM,IAAI,GAAkB,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;gBAExE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;YACvB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,OAAO,CAAC;oBACb,IAAI,EAAE,gBAAgB;oBACtB,OAAO,EAAE,yBAAyB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;iBAC3F,CAAC,CAAC;YACL,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/registry/ghcr.d.ts

@@ -0,0 +1,6 @@
+import type { RegistryClientConfigType, RegistryClientType } from './types.js';
+/**
+ * Creates a GitHub Container Registry client.
+ */
+export declare function create_ghcr_client(config?: RegistryClientConfigType): RegistryClientType;
+//# sourceMappingURL=ghcr.d.ts.map

package/dist/registry/ghcr.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ghcr.d.ts","sourceRoot":"","sources":["../../src/registry/ghcr.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAEV,wBAAwB,EACxB,kBAAkB,EAEnB,MAAM,YAAY,CAAC;AA8EpB;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,CAAC,EAAE,wBAAwB,GAAG,kBAAkB,CA0CxF"}

package/dist/registry/ghcr.js

@@ -0,0 +1,95 @@
+import { failure, success } from '../core/index.js';
+const GHCR_URL = 'https://ghcr.io/v2';
+const GHCR_AUTH_URL = 'https://ghcr.io/token';
+const DEFAULT_TIMEOUT = 30000;
+/**
+ * Creates an abort signal with timeout.
+ */
+function create_abort_signal(timeout_ms) {
+    const controller = new AbortController();
+    setTimeout(() => controller.abort(), timeout_ms);
+    return controller.signal;
+}
+/**
+ * Gets an authentication token for GHCR.
+ */
+async function get_ghcr_token(image, config) {
+    const scope = `repository:${image.namespace}/${image.repository}:pull`;
+    const url = `${GHCR_AUTH_URL}?service=ghcr.io&scope=${encodeURIComponent(scope)}`;
+    const headers = {};
+    // GHCR supports token-based auth or username/password
+    if (config?.auth?.token) {
+        // Use bearer token (GitHub PAT)
+        headers['Authorization'] = `Bearer ${config.auth.token}`;
+    }
+    else if (config?.auth?.username && config.auth.password) {
+        const credentials = Buffer.from(`${config.auth.username}:${config.auth.password}`).toString('base64');
+        headers['Authorization'] = `Basic ${credentials}`;
+    }
+    try {
+        const response = await fetch(url, {
+            headers,
+            signal: create_abort_signal(config?.timeout ?? DEFAULT_TIMEOUT),
+        });
+        if (!response.ok) {
+            return failure({
+                code: 'REGISTRY_AUTH_ERROR',
+                message: `GHCR auth failed: ${response.status} ${response.statusText}`,
+            });
+        }
+        const data = (await response.json());
+        if (!data.token) {
+            return failure({
+                code: 'REGISTRY_AUTH_ERROR',
+                message: 'No token returned from GHCR auth',
+            });
+        }
+        return success(data.token);
+    }
+    catch (error) {
+        return failure({
+            code: 'REGISTRY_ERROR',
+            message: `GHCR auth request failed: ${error instanceof Error ? error.message : String(error)}`,
+        });
+    }
+}
+/**
+ * Creates a GitHub Container Registry client.
+ */
+export function create_ghcr_client(config) {
+    return {
+        async list_tags(image) {
+            // Get auth token
+            const token_result = await get_ghcr_token(image, config);
+            if (!token_result.success) {
+                return token_result;
+            }
+            const url = `${GHCR_URL}/${image.namespace}/${image.repository}/tags/list`;
+            try {
+                const response = await fetch(url, {
+                    headers: {
+                        Authorization: `Bearer ${token_result.value}`,
+                        Accept: 'application/json',
+                    },
+                    signal: create_abort_signal(config?.timeout ?? DEFAULT_TIMEOUT),
+                });
+                if (!response.ok) {
+                    return failure({
+                        code: 'REGISTRY_ERROR',
+                        message: `Failed to fetch tags: ${response.status} ${response.statusText}`,
+                    });
+                }
+                const data = (await response.json());
+                const tags = (data.tags || []).map((name) => ({ name }));
+                return success(tags);
+            }
+            catch (error) {
+                return failure({
+                    code: 'REGISTRY_ERROR',
+                    message: `Failed to fetch tags: ${error instanceof Error ? error.message : String(error)}`,
+                });
+            }
+        },
+    };
+}
+//# sourceMappingURL=ghcr.js.map

package/dist/registry/ghcr.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ghcr.js","sourceRoot":"","sources":["../../src/registry/ghcr.ts"],"names":[],"mappings":"AACA,OAAO,EAAmB,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAQrE,MAAM,QAAQ,GAAG,oBAAoB,CAAC;AACtC,MAAM,aAAa,GAAG,uBAAuB,CAAC;AAC9C,MAAM,eAAe,GAAG,KAAK,CAAC;AAW9B;;GAEG;AACH,SAAS,mBAAmB,CAAC,UAAkB;IAC7C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,UAAU,CAAC,CAAC;IACjD,OAAO,UAAU,CAAC,MAAM,CAAC;AAC3B,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,cAAc,CAC3B,KAAyB,EACzB,MAAiC;IAEjC,MAAM,KAAK,GAAG,cAAc,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,UAAU,OAAO,CAAC;IACvE,MAAM,GAAG,GAAG,GAAG,aAAa,0BAA0B,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;IAElF,MAAM,OAAO,GAA2B,EAAE,CAAC;IAE3C,sDAAsD;IACtD,IAAI,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QACxB,gCAAgC;QAChC,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;IAC3D,CAAC;SAAM,IAAI,MAAM,EAAE,IAAI,EAAE,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC1D,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CACzF,QAAQ,CACT,CAAC;QACF,OAAO,CAAC,eAAe,CAAC,GAAG,SAAS,WAAW,EAAE,CAAC;IACpD,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,OAAO;YACP,MAAM,EAAE,mBAAmB,CAAC,MAAM,EAAE,OAAO,IAAI,eAAe,CAAC;SAChE,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,OAAO,CAAC;gBACb,IAAI,EAAE,qBAAqB;gBAC3B,OAAO,EAAE,qBAAqB,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE;aACvE,CAAC,CAAC;QACL,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAsB,CAAC;QAE1D,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,OAAO,OAAO,CAAC;gBACb,IAAI,EAAE,qBAAqB;gBAC3B,OAAO,EAAE,kCAAkC;aAC5C,CAAC,CAAC;QACL,CAAC;QAED,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,OAAO,CAAC;YACb,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,6BAA6B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;SAC/F,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAiC;IAClE,OAAO;QACL,KAAK,CAAC,SAAS,CACb,KAAyB;YAEzB,iBAAiB;YACjB,MAAM,YAAY,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACzD,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;gBAC1B,OAAO,YAAY,CAAC;YACtB,CAAC;YAED,MAAM,GAAG,GAAG,GAAG,QAAQ,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,UAAU,YAAY,CAAC;YAE3E,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;oBAChC,OAAO,EAAE;wBACP,aAAa,EAAE,UAAU,YAAY,CAAC,KAAK,EAAE;wBAC7C,MAAM,EAAE,kBAAkB;qBAC3B;oBACD,MAAM,EAAE,mBAAmB,CAAC,MAAM,EAAE,OAAO,IAAI,eAAe,CAAC;iBAChE,CAAC,CAAC;gBAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,OAAO,OAAO,CAAC;wBACb,IAAI,EAAE,gBAAgB;wBACtB,OAAO,EAAE,yBAAyB,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE;qBAC3E,CAAC,CAAC;gBACL,CAAC;gBAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAqB,CAAC;gBAEzD,MAAM,IAAI,GAAkB,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;gBAExE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;YACvB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,OAAO,CAAC;oBACb,IAAI,EAAE,gBAAgB;oBACtB,OAAO,EAAE,yBAAyB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;iBAC3F,CAAC,CAAC;YACL,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/registry/helm.d.ts

@@ -0,0 +1,11 @@
+import type { RegistryClientConfigType, RegistryClientType } from './types.js';
+/**
+ * Creates a Helm repository client.
+ * Supports both traditional Helm repositories and OCI registries.
+ */
+export declare function create_helm_client(helm_config: {
+    repository?: string;
+    oci?: string;
+    chart: string;
+}, config?: RegistryClientConfigType): RegistryClientType;
+//# sourceMappingURL=helm.d.ts.map

package/dist/registry/helm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"helm.d.ts","sourceRoot":"","sources":["../../src/registry/helm.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAEV,wBAAwB,EACxB,kBAAkB,EAEnB,MAAM,YAAY,CAAC;AAuHpB;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,WAAW,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,EACjE,MAAM,CAAC,EAAE,wBAAwB,GAChC,kBAAkB,CA2CpB"}

package/dist/registry/helm.js

@@ -0,0 +1,124 @@
+import { parse } from 'yaml';
+import { failure, success } from '../core/index.js';
+import { create_ghcr_client } from './ghcr.js';
+const DEFAULT_TIMEOUT = 30000;
+/**
+ * Creates an abort signal with timeout.
+ */
+function create_abort_signal(timeout_ms) {
+    const controller = new AbortController();
+    setTimeout(() => controller.abort(), timeout_ms);
+    return controller.signal;
+}
+/**
+ * Fetches and parses a Helm repository index.yaml file.
+ */
+async function fetch_helm_index(repository_url, config) {
+    // Ensure URL doesn't have trailing slash
+    const base_url = repository_url.replace(/\/$/, '');
+    const index_url = `${base_url}/index.yaml`;
+    try {
+        const response = await fetch(index_url, {
+            signal: create_abort_signal(config?.timeout ?? DEFAULT_TIMEOUT),
+        });
+        if (!response.ok) {
+            return failure({
+                code: 'HELM_REPO_ERROR',
+                message: `Failed to fetch Helm index: ${response.status} ${response.statusText}`,
+            });
+        }
+        const content = await response.text();
+        const index = parse(content);
+        if (!index.entries) {
+            return failure({
+                code: 'HELM_REPO_ERROR',
+                message: 'Invalid Helm index: missing entries',
+            });
+        }
+        return success(index);
+    }
+    catch (error) {
+        return failure({
+            code: 'HELM_REPO_ERROR',
+            message: `Failed to fetch Helm index: ${error instanceof Error ? error.message : String(error)}`,
+        });
+    }
+}
+/**
+ * Parses an OCI Helm reference into components.
+ * Example: oci://ghcr.io/traefik/helm/traefik -> {registry: ghcr.io, namespace: traefik/helm, repository: traefik}
+ */
+function parse_oci_helm_reference(oci_url, chart_name) {
+    // Remove oci:// prefix
+    const url_without_prefix = oci_url.replace(/^oci:\/\//, '');
+    // Split into parts
+    const parts = url_without_prefix.split('/');
+    if (parts.length < 2) {
+        // Fallback for invalid format
+        return {
+            registry: parts[0] || 'ghcr.io',
+            namespace: 'library',
+            repository: chart_name,
+        };
+    }
+    // First part is registry
+    const registry = parts[0] || 'ghcr.io';
+    // Everything except first part and last part (if it matches chart name) is namespace
+    const last_part = parts[parts.length - 1];
+    let namespace;
+    if (last_part === chart_name && parts.length > 2) {
+        // If last part is the chart name, use everything in between as namespace
+        const intermediate_namespace = parts.slice(1, -1).join('/');
+        namespace = intermediate_namespace || 'library';
+    }
+    else {
+        // Otherwise, use everything after registry as namespace
+        const full_namespace = parts.slice(1).join('/');
+        namespace = full_namespace || 'library';
+    }
+    return {
+        registry,
+        namespace,
+        repository: chart_name,
+    };
+}
+/**
+ * Creates a Helm repository client.
+ * Supports both traditional Helm repositories and OCI registries.
+ */
+export function create_helm_client(helm_config, config) {
+    // OCI registry
+    if (helm_config.oci) {
+        const image_ref = parse_oci_helm_reference(helm_config.oci, helm_config.chart);
+        // Use GHCR client for OCI registries (they all use the same OCI Distribution spec)
+        const oci_client = create_ghcr_client(config);
+        return {
+            list_tags: () => oci_client.list_tags(image_ref),
+        };
+    }
+    // Traditional Helm repository
+    return {
+        async list_tags(_image) {
+            if (!helm_config.repository) {
+                return failure({
+                    code: 'HELM_REPO_ERROR',
+                    message: 'No repository URL provided for Helm chart',
+                });
+            }
+            const index_result = await fetch_helm_index(helm_config.repository, config);
+            if (!index_result.success) {
+                return index_result;
+            }
+            const chart_entries = index_result.value.entries[helm_config.chart];
+            if (!chart_entries || chart_entries.length === 0) {
+                return failure({
+                    code: 'HELM_CHART_NOT_FOUND',
+                    message: `Chart "${helm_config.chart}" not found in Helm repository`,
+                });
+            }
+            const tags = chart_entries.map((entry) => entry.digest ? { name: entry.version, digest: entry.digest } : { name: entry.version });
+            return success(tags);
+        },
+    };
+}
+//# sourceMappingURL=helm.js.map

package/dist/registry/helm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"helm.js","sourceRoot":"","sources":["../../src/registry/helm.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,MAAM,CAAC;AAE7B,OAAO,EAAmB,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAQ/C,MAAM,eAAe,GAAG,KAAK,CAAC;AAsB9B;;GAEG;AACH,SAAS,mBAAmB,CAAC,UAAkB;IAC7C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,UAAU,CAAC,CAAC;IACjD,OAAO,UAAU,CAAC,MAAM,CAAC;AAC3B,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,gBAAgB,CAC7B,cAAsB,EACtB,MAAiC;IAEjC,yCAAyC;IACzC,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,GAAG,QAAQ,aAAa,CAAC;IAE3C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE;YACtC,MAAM,EAAE,mBAAmB,CAAC,MAAM,EAAE,OAAO,IAAI,eAAe,CAAC;SAChE,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,OAAO,CAAC;gBACb,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,+BAA+B,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE;aACjF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAkB,CAAC;QAE9C,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACnB,OAAO,OAAO,CAAC;gBACb,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,qCAAqC;aAC/C,CAAC,CAAC;QACL,CAAC;QAED,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,OAAO,CAAC;YACb,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,+BAA+B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;SACjG,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,wBAAwB,CAAC,OAAe,EAAE,UAAkB;IACnE,uBAAuB;IACvB,MAAM,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAE5D,mBAAmB;IACnB,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAE5C,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,8BAA8B;QAC9B,OAAO;YACL,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,SAAS;YAC/B,SAAS,EAAE,SAAS;YACpB,UAAU,EAAE,UAAU;SACvB,CAAC;IACJ,CAAC;IAED,yBAAyB;IACzB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC;IAEvC,qFAAqF;IACrF,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC1C,IAAI,SAAiB,CAAC;IAEtB,IAAI,SAAS,KAAK,UAAU,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjD,yEAAyE;QACzE,MAAM,sBAAsB,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5D,SAAS,GAAG,sBAAsB,IAAI,SAAS,CAAC;IAClD,CAAC;SAAM,CAAC;QACN,wDAAwD;QACxD,MAAM,cAAc,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChD,SAAS,GAAG,cAAc,IAAI,SAAS,CAAC;IAC1C,CAAC;IAED,OAAO;QACL,QAAQ;QACR,SAAS;QACT,UAAU,EAAE,UAAU;KACvB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,WAAiE,EACjE,MAAiC;IAEjC,eAAe;IACf,IAAI,WAAW,CAAC,GAAG,EAAE,CAAC;QACpB,MAAM,SAAS,GAAG,wBAAwB,CAAC,WAAW,CAAC,GAAG,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC;QAC/E,mFAAmF;QACnF,MAAM,UAAU,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC9C,OAAO;YACL,SAAS,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,SAAS,CAAC;SACjD,CAAC;IACJ,CAAC;IAED,8BAA8B;IAC9B,OAAO;QACL,KAAK,CAAC,SAAS,CACb,MAA2B;YAE3B,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC;gBAC5B,OAAO,OAAO,CAAC;oBACb,IAAI,EAAE,iBAAiB;oBACvB,OAAO,EAAE,2CAA2C;iBACrD,CAAC,CAAC;YACL,CAAC;YAED,MAAM,YAAY,GAAG,MAAM,gBAAgB,CAAC,WAAW,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YAC5E,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;gBAC1B,OAAO,YAAY,CAAC;YACtB,CAAC;YAED,MAAM,aAAa,GAAG,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACpE,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACjD,OAAO,OAAO,CAAC;oBACb,IAAI,EAAE,sBAAsB;oBAC5B,OAAO,EAAE,UAAU,WAAW,CAAC,KAAK,gCAAgC;iBACrE,CAAC,CAAC;YACL,CAAC;YAED,MAAM,IAAI,GAAkB,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACtD,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,CACvF,CAAC;YAEF,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/registry/index.d.ts

@@ -0,0 +1,8 @@
+export { get_auth_for_registry, get_dockerhub_auth, get_ghcr_auth } from './auth.js';
+export { create_client_for_image, create_registry_client, detect_registry_type, parse_image_reference, } from './client.js';
+export { create_dockerhub_client } from './dockerhub.js';
+export { create_ghcr_client } from './ghcr.js';
+export { create_helm_client } from './helm.js';
+export type { ImageReferenceType, RegistryAuthType, RegistryClientConfigType, RegistryClientType, TagInfoType, VersionCheckResultType, } from './types.js';
+export { check_version_update, DEFAULT_SEMVER_PATTERN, filter_semver_tags, find_latest_matching, } from './version.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/registry/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/registry/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAGrF,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,aAAa,CAAC;AAGrB,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC/C,YAAY,EACV,kBAAkB,EAClB,gBAAgB,EAChB,wBAAwB,EACxB,kBAAkB,EAClB,WAAW,EACX,sBAAsB,GACvB,MAAM,YAAY,CAAC;AAGpB,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,cAAc,CAAC"}

package/dist/registry/index.js

@@ -0,0 +1,12 @@
+// Types
+// Auth utilities
+export { get_auth_for_registry, get_dockerhub_auth, get_ghcr_auth } from './auth.js';
+// Client utilities
+export { create_client_for_image, create_registry_client, detect_registry_type, parse_image_reference, } from './client.js';
+// Registry implementations
+export { create_dockerhub_client } from './dockerhub.js';
+export { create_ghcr_client } from './ghcr.js';
+export { create_helm_client } from './helm.js';
+// Version utilities
+export { check_version_update, DEFAULT_SEMVER_PATTERN, filter_semver_tags, find_latest_matching, } from './version.js';
+//# sourceMappingURL=index.js.map

package/dist/registry/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/registry/index.ts"],"names":[],"mappings":"AAAA,QAAQ;AAER,iBAAiB;AACjB,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAErF,mBAAmB;AACnB,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,aAAa,CAAC;AAErB,2BAA2B;AAC3B,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAU/C,oBAAoB;AACpB,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,cAAc,CAAC"}

package/dist/registry/types.d.ts

@@ -0,0 +1,55 @@
+import type { KustodianErrorType, ResultType } from '../core/index.js';
+/**
+ * Authentication configuration for registries.
+ */
+export interface RegistryAuthType {
+    username?: string;
+    password?: string;
+    token?: string;
+}
+/**
+ * Registry client configuration.
+ */
+export interface RegistryClientConfigType {
+    auth?: RegistryAuthType | undefined;
+    timeout?: number | undefined;
+}
+/**
+ * Parsed image reference components.
+ */
+export interface ImageReferenceType {
+    /** Registry hostname (e.g., docker.io, ghcr.io) */
+    registry: string;
+    /** Namespace/organization (e.g., library, prom) */
+    namespace: string;
+    /** Repository name (e.g., nginx, prometheus) */
+    repository: string;
+    /** Optional tag */
+    tag?: string | undefined;
+}
+/**
+ * Tag information from registry.
+ */
+export interface TagInfoType {
+    name: string;
+    digest?: string;
+}
+/**
+ * Version check result.
+ */
+export interface VersionCheckResultType {
+    current_version: string;
+    latest_version: string;
+    available_versions: string[];
+    has_update: boolean;
+}
+/**
+ * Registry client interface.
+ */
+export interface RegistryClientType {
+    /**
+     * Lists all tags for an image.
+     */
+    list_tags(image: ImageReferenceType): Promise<ResultType<TagInfoType[], KustodianErrorType>>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/registry/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/registry/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEvE;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,IAAI,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;IACpC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,mDAAmD;IACnD,QAAQ,EAAE,MAAM,CAAC;IACjB,mDAAmD;IACnD,SAAS,EAAE,MAAM,CAAC;IAClB,gDAAgD;IAChD,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB;IACnB,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,UAAU,EAAE,OAAO,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC;;OAEG;IACH,SAAS,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,UAAU,CAAC,WAAW,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;CAC9F"}

package/dist/registry/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/registry/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/registry/types.ts"],"names":[],"mappings":""}

package/dist/registry/version.d.ts

@@ -0,0 +1,22 @@
+import type { TagInfoType, VersionCheckResultType } from './types.js';
+/**
+ * Default pattern for semver-like tags.
+ * Matches: 1.0.0, v1.0.0, 1.0.0-alpha, v1.0.0-rc.1
+ */
+export declare const DEFAULT_SEMVER_PATTERN: RegExp;
+/**
+ * Filters tags to only semver-valid versions.
+ */
+export declare function filter_semver_tags(tags: TagInfoType[], options?: {
+    pattern?: RegExp;
+    exclude_prerelease?: boolean;
+}): string[];
+/**
+ * Finds the latest version satisfying a constraint.
+ */
+export declare function find_latest_matching(versions: string[], constraint?: string): string | undefined;
+/**
+ * Checks if a newer version is available.
+ */
+export declare function check_version_update(current: string, available: string[], constraint?: string): VersionCheckResultType;
+//# sourceMappingURL=version.d.ts.map

package/dist/registry/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../../src/registry/version.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAEtE;;;GAGG;AACH,eAAO,MAAM,sBAAsB,QAAkC,CAAC;AAEtE;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,WAAW,EAAE,EACnB,OAAO,GAAE;IACP,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kBAAkB,CAAC,EAAE,OAAO,CAAC;CACzB,GACL,MAAM,EAAE,CA8BV;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAQhG;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EAAE,EACnB,UAAU,CAAC,EAAE,MAAM,GAClB,sBAAsB,CAgBxB"}

package/dist/registry/version.js

@@ -0,0 +1,62 @@
+import * as semver from 'semver';
+/**
+ * Default pattern for semver-like tags.
+ * Matches: 1.0.0, v1.0.0, 1.0.0-alpha, v1.0.0-rc.1
+ */
+export const DEFAULT_SEMVER_PATTERN = /^v?(\d+\.\d+\.\d+)(-[\w.]+)?$/;
+/**
+ * Filters tags to only semver-valid versions.
+ */
+export function filter_semver_tags(tags, options = {}) {
+    const pattern = options.pattern ?? DEFAULT_SEMVER_PATTERN;
+    const exclude_prerelease = options.exclude_prerelease ?? true;
+    const versions = [];
+    for (const tag of tags) {
+        if (!pattern.test(tag.name)) {
+            continue;
+        }
+        const cleaned = semver.clean(tag.name);
+        if (!cleaned) {
+            continue;
+        }
+        const parsed = semver.parse(cleaned);
+        if (!parsed) {
+            continue;
+        }
+        if (exclude_prerelease && parsed.prerelease.length > 0) {
+            continue;
+        }
+        versions.push(cleaned);
+    }
+    // Sort descending (newest first)
+    return versions.sort(semver.rcompare);
+}
+/**
+ * Finds the latest version satisfying a constraint.
+ */
+export function find_latest_matching(versions, constraint) {
+    if (!constraint) {
+        // Return the latest (first in sorted array)
+        return versions[0];
+    }
+    const result = semver.maxSatisfying(versions, constraint);
+    return result ?? undefined;
+}
+/**
+ * Checks if a newer version is available.
+ */
+export function check_version_update(current, available, constraint) {
+    const cleaned_current = semver.clean(current) ?? current;
+    const latest = find_latest_matching(available, constraint);
+    const has_update = latest !== undefined &&
+        semver.valid(latest) !== null &&
+        semver.valid(cleaned_current) !== null &&
+        semver.gt(latest, cleaned_current);
+    return {
+        current_version: cleaned_current,
+        latest_version: latest ?? cleaned_current,
+        available_versions: available,
+        has_update,
+    };
+}
+//# sourceMappingURL=version.js.map

package/dist/registry/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../../src/registry/version.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AAGjC;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,+BAA+B,CAAC;AAEtE;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAAmB,EACnB,UAGI,EAAE;IAEN,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,sBAAsB,CAAC;IAC1D,MAAM,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,IAAI,IAAI,CAAC;IAE9D,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,SAAS;QACX,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,SAAS;QACX,CAAC;QAED,IAAI,kBAAkB,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvD,SAAS;QACX,CAAC;QAED,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IAED,iCAAiC;IACjC,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AACxC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAkB,EAAE,UAAmB;IAC1E,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,4CAA4C;QAC5C,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;IACrB,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,aAAa,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC1D,OAAO,MAAM,IAAI,SAAS,CAAC;AAC7B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAAe,EACf,SAAmB,EACnB,UAAmB;IAEnB,MAAM,eAAe,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC;IACzD,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAE3D,MAAM,UAAU,GACd,MAAM,KAAK,SAAS;QACpB,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI;QAC7B,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,KAAK,IAAI;QACtC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAErC,OAAO;QACL,eAAe,EAAE,eAAe;QAChC,cAAc,EAAE,MAAM,IAAI,eAAe;QACzC,kBAAkB,EAAE,SAAS;QAC7B,UAAU;KACX,CAAC;AACJ,CAAC"}