timonel 2.2.0 → 2.4.0

package/dist/lib/security.d.ts

@@ -0,0 +1,73 @@
+/**
+ * @fileoverview Security utilities for input validation and sanitization
+ * Focused on CLI tool security concerns: path traversal, injection prevention
+ * @since 2.2.0
+ */
+/**
+ * Security utilities for input validation and sanitization
+ * Focused on CLI tool security concerns: path traversal, injection prevention
+ *
+ * @since 2.2.0
+ */
+export declare class SecurityUtils {
+    /**
+     * Validates and sanitizes file paths to prevent path traversal attacks
+     * @param inputPath - The path to validate
+     * @param allowedBasePath - The base path that the input should be within
+     * @returns Sanitized path if valid
+     * @throws Error if path is invalid or contains traversal sequences
+     *
+     * @since 2.2.0
+     */
+    static validatePath(inputPath: string, allowedBasePath: string): string;
+    /**
+     * Sanitizes log messages to prevent log injection attacks
+     * @param message - The message to sanitize
+     * @returns Sanitized message with control characters removed
+     *
+     * @since 2.2.0
+     */
+    static sanitizeLogMessage(message: string): string;
+    /**
+     * Sanitizes environment names to prevent path traversal (CWE-22)
+     * @param env - Environment name to sanitize
+     * @returns Sanitized environment name
+     * @throws Error if environment name is invalid
+     *
+     * @since 2.2.0
+     */
+    static sanitizeEnvironmentName(env: string): string;
+    /**
+     * Validates TypeScript file extensions for dynamic imports
+     * @param filePath - The file path to validate
+     * @returns True if the file has a valid TypeScript extension
+     *
+     * @since 2.2.0
+     */
+    static isValidTypeScriptFile(filePath: string): boolean;
+    /**
+     * Validates Helm template path syntax
+     * @param templatePath - The template path to validate
+     * @returns True if the path is valid for Helm templates
+     *
+     * @since 2.2.0
+     */
+    static isValidHelmTemplatePath(templatePath: string): boolean;
+    /**
+     * Validates chart names according to Helm conventions
+     * @param chartName - Chart name to validate
+     * @returns True if chart name follows Helm naming rules
+     *
+     * @since 2.2.0
+     */
+    static isValidChartName(chartName: string): boolean;
+    /**
+     * Validates subchart names according to Helm conventions
+     * @param subchartName - Subchart name to validate
+     * @returns True if subchart name is valid
+     *
+     * @since 2.2.0
+     */
+    static isValidSubchartName(subchartName: string): boolean;
+}
+//# sourceMappingURL=security.d.ts.map

package/dist/lib/security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../src/lib/security.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH;;;;;GAKG;AACH,qBAAa,aAAa;IACxB;;;;;;;;OAQG;IACH,MAAM,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,MAAM;IA2BvE;;;;;;OAMG;IACH,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM;IAgBlD;;;;;;;OAOG;IACH,MAAM,CAAC,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM;IAmBnD;;;;;;OAMG;IACH,MAAM,CAAC,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAMvD;;;;;;OAMG;IACH,MAAM,CAAC,uBAAuB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO;IAU7D;;;;;;OAMG;IACH,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAWnD;;;;;;OAMG;IACH,MAAM,CAAC,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO;CAG1D"}

package/dist/lib/security.js

@@ -0,0 +1,138 @@
+/**
+ * @fileoverview Security utilities for input validation and sanitization
+ * Focused on CLI tool security concerns: path traversal, injection prevention
+ * @since 2.2.0
+ */
+import * as path from 'path';
+/**
+ * Security utilities for input validation and sanitization
+ * Focused on CLI tool security concerns: path traversal, injection prevention
+ *
+ * @since 2.2.0
+ */
+export class SecurityUtils {
+    /**
+     * Validates and sanitizes file paths to prevent path traversal attacks
+     * @param inputPath - The path to validate
+     * @param allowedBasePath - The base path that the input should be within
+     * @returns Sanitized path if valid
+     * @throws Error if path is invalid or contains traversal sequences
+     *
+     * @since 2.2.0
+     */
+    static validatePath(inputPath, allowedBasePath) {
+        if (!inputPath || typeof inputPath !== 'string') {
+            throw new Error('Invalid path: path must be a non-empty string');
+        }
+        // Check for path traversal sequences
+        if (inputPath.includes('../') ||
+            inputPath.includes('..\\') ||
+            inputPath.includes('%2e%2e%2f') ||
+            inputPath.includes('%2e%2e%5c')) {
+            throw new Error('Invalid path: path traversal sequences detected');
+        }
+        // Resolve and normalize paths
+        const resolvedInput = path.resolve(inputPath);
+        const resolvedBase = path.resolve(allowedBasePath);
+        // Ensure the resolved path is within the allowed base path
+        if (!resolvedInput.startsWith(resolvedBase + path.sep) && resolvedInput !== resolvedBase) {
+            throw new Error(`Invalid path: path must be within ${resolvedBase}`);
+        }
+        return resolvedInput;
+    }
+    /**
+     * Sanitizes log messages to prevent log injection attacks
+     * @param message - The message to sanitize
+     * @returns Sanitized message with control characters removed
+     *
+     * @since 2.2.0
+     */
+    static sanitizeLogMessage(message) {
+        if (typeof message !== 'string') {
+            return String(message);
+        }
+        // Remove control characters (ASCII 0-31 and 127) and normalize line endings
+        return (message
+            // eslint-disable-next-line no-control-regex -- Intentionally removing control characters for security
+            .replace(/[\x00-\x1F\x7F]/g, '') // Remove control characters
+            .replace(/\r\n/g, ' ') // Replace CRLF with space
+            .replace(/[\r\n]/g, ' ') // Replace remaining CR/LF with space
+            .trim());
+    }
+    /**
+     * Sanitizes environment names to prevent path traversal (CWE-22)
+     * @param env - Environment name to sanitize
+     * @returns Sanitized environment name
+     * @throws Error if environment name is invalid
+     *
+     * @since 2.2.0
+     */
+    static sanitizeEnvironmentName(env) {
+        if (!env || typeof env !== 'string') {
+            throw new Error('Environment name must be a non-empty string');
+        }
+        // Allow only alphanumeric, hyphens, and underscores
+        const sanitized = env.replace(/[^a-zA-Z0-9-_]/g, '');
+        if (sanitized !== env) {
+            throw new Error(`Invalid environment name: ${this.sanitizeLogMessage(env)}`);
+        }
+        if (sanitized.length === 0 || sanitized.length > 63) {
+            throw new Error('Environment name must be 1-63 characters long');
+        }
+        return sanitized;
+    }
+    /**
+     * Validates TypeScript file extensions for dynamic imports
+     * @param filePath - The file path to validate
+     * @returns True if the file has a valid TypeScript extension
+     *
+     * @since 2.2.0
+     */
+    static isValidTypeScriptFile(filePath) {
+        const allowedExtensions = ['.ts', '.tsx'];
+        const ext = path.extname(filePath);
+        return allowedExtensions.includes(ext);
+    }
+    /**
+     * Validates Helm template path syntax
+     * @param templatePath - The template path to validate
+     * @returns True if the path is valid for Helm templates
+     *
+     * @since 2.2.0
+     */
+    static isValidHelmTemplatePath(templatePath) {
+        if (!templatePath || typeof templatePath !== 'string') {
+            return false;
+        }
+        // Basic validation for dot notation and no special characters that could break Helm
+        const helmPathRegex = /^[a-zA-Z][a-zA-Z0-9._-]*$/;
+        return helmPathRegex.test(templatePath);
+    }
+    /**
+     * Validates chart names according to Helm conventions
+     * @param chartName - Chart name to validate
+     * @returns True if chart name follows Helm naming rules
+     *
+     * @since 2.2.0
+     */
+    static isValidChartName(chartName) {
+        if (!chartName || typeof chartName !== 'string') {
+            return false;
+        }
+        // Helm chart name validation (RFC 1123 subdomain) - safe regex
+        // eslint-disable-next-line security/detect-unsafe-regex -- Simple character class regex is safe
+        const chartNameRegex = /^[a-z0-9]([-a-z0-9]*[a-z0-9])?$/;
+        return chartNameRegex.test(chartName) && chartName.length <= 63;
+    }
+    /**
+     * Validates subchart names according to Helm conventions
+     * @param subchartName - Subchart name to validate
+     * @returns True if subchart name is valid
+     *
+     * @since 2.2.0
+     */
+    static isValidSubchartName(subchartName) {
+        return this.isValidChartName(subchartName);
+    }
+}
+//# sourceMappingURL=security.js.map

package/dist/lib/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../src/lib/security.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAE7B;;;;;GAKG;AACH,MAAM,OAAO,aAAa;IACxB;;;;;;;;OAQG;IACH,MAAM,CAAC,YAAY,CAAC,SAAiB,EAAE,eAAuB;QAC5D,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QAED,qCAAqC;QACrC,IACE,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC;YACzB,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC1B,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC;YAC/B,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,EAC/B,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QAED,8BAA8B;QAC9B,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC9C,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAEnD,2DAA2D;QAC3D,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,aAAa,KAAK,YAAY,EAAE,CAAC;YACzF,MAAM,IAAI,KAAK,CAAC,qCAAqC,YAAY,EAAE,CAAC,CAAC;QACvE,CAAC;QAED,OAAO,aAAa,CAAC;IACvB,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,kBAAkB,CAAC,OAAe;QACvC,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;QAED,4EAA4E;QAC5E,OAAO,CACL,OAAO;YACL,sGAAsG;aACrG,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,4BAA4B;aAC5D,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,0BAA0B;aAChD,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,qCAAqC;aAC7D,IAAI,EAAE,CACV,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,uBAAuB,CAAC,GAAW;QACxC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACjE,CAAC;QAED,oDAAoD;QACpD,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;QAErD,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/E,CAAC;QAED,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,qBAAqB,CAAC,QAAgB;QAC3C,MAAM,iBAAiB,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACnC,OAAO,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACzC,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,uBAAuB,CAAC,YAAoB;QACjD,IAAI,CAAC,YAAY,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;YACtD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,oFAAoF;QACpF,MAAM,aAAa,GAAG,2BAA2B,CAAC;QAClD,OAAO,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC1C,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,gBAAgB,CAAC,SAAiB;QACvC,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAChD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,+DAA+D;QAC/D,gGAAgG;QAChG,MAAM,cAAc,GAAG,iCAAiC,CAAC;QACzD,OAAO,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC;IAClE,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,mBAAmB,CAAC,YAAoB;QAC7C,OAAO,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;IAC7C,CAAC;CACF"}

package/dist/lib/umbrella.d.ts

@@ -1,7 +1,27 @@
-import type { UmbrellaRutter, UmbrellaRutterProps } from './UmbrellaRutter.js';
+/**
+ * @fileoverview Umbrella chart utilities for managing multiple subcharts as a single unit
+ * @since 0.2.0
+ */
+import type { UmbrellaRutter, UmbrellaRutterProps } from './umbrellaRutter.js';
 /**
  * Create an umbrella chart from multiple Rutter instances
+ *
+ * @param props - Umbrella chart configuration
+ * @returns UmbrellaRutter instance for managing subcharts
+ *
+ * @example
+ * ```typescript
+ * const umbrella = createUmbrella({
+ *   meta: { name: 'my-umbrella', version: '1.0.0' },
+ *   subcharts: [
+ *     { name: 'frontend', rutter: frontendChart },
+ *     { name: 'backend', rutter: backendChart }
+ *   ]
+ * });
+ * ```
+ *
+ * @since 0.2.0
  */
 export declare function createUmbrella(props: UmbrellaRutterProps): UmbrellaRutter;
-export type { UmbrellaRutterProps, SubchartSpec } from './UmbrellaRutter.js';
+export type { UmbrellaRutterProps, SubchartSpec } from './umbrellaRutter.js';
 //# sourceMappingURL=umbrella.d.ts.map

package/dist/lib/umbrella.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"umbrella.d.ts","sourceRoot":"","sources":["../../src/lib/umbrella.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAG/E;;GAEG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,mBAAmB,GAAG,cAAc,CAEzE;AAGD,YAAY,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC"}
+{"version":3,"file":"umbrella.d.ts","sourceRoot":"","sources":["../../src/lib/umbrella.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAG/E;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,mBAAmB,GAAG,cAAc,CAEzE;AAGD,YAAY,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/lib/umbrella.js

@@ -1,6 +1,26 @@
-import { UmbrellaRutter as UmbrellaRutterClass } from './UmbrellaRutter.js';
+/**
+ * @fileoverview Umbrella chart utilities for managing multiple subcharts as a single unit
+ * @since 0.2.0
+ */
+import { UmbrellaRutter as UmbrellaRutterClass } from './umbrellaRutter.js';
 /**
  * Create an umbrella chart from multiple Rutter instances
+ *
+ * @param props - Umbrella chart configuration
+ * @returns UmbrellaRutter instance for managing subcharts
+ *
+ * @example
+ * ```typescript
+ * const umbrella = createUmbrella({
+ *   meta: { name: 'my-umbrella', version: '1.0.0' },
+ *   subcharts: [
+ *     { name: 'frontend', rutter: frontendChart },
+ *     { name: 'backend', rutter: backendChart }
+ *   ]
+ * });
+ * ```
+ *
+ * @since 0.2.0
  */
 export function createUmbrella(props) {
     return new UmbrellaRutterClass(props);

package/dist/lib/umbrella.js.map

@@ -1 +1 @@
-{"version":3,"file":"umbrella.js","sourceRoot":"","sources":["../../src/lib/umbrella.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,IAAI,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE5E;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,KAA0B;IACvD,OAAO,IAAI,mBAAmB,CAAC,KAAK,CAAC,CAAC;AACxC,CAAC"}
+{"version":3,"file":"umbrella.js","sourceRoot":"","sources":["../../src/lib/umbrella.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,cAAc,IAAI,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE5E;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,cAAc,CAAC,KAA0B;IACvD,OAAO,IAAI,mBAAmB,CAAC,KAAK,CAAC,CAAC;AACxC,CAAC"}

package/dist/lib/umbrellaRutter.d.ts

@@ -0,0 +1,97 @@
+/**
+ * @fileoverview UmbrellaRutter class for managing Helm umbrella charts with multiple subcharts
+ * @since 0.2.0
+ */
+import type { Rutter } from './rutter.js';
+import type { HelmChartMeta } from './helmChartWriter.js';
+/**
+ * Configuration for a subchart within an umbrella chart
+ *
+ * @since 0.2.0
+ */
+export interface SubchartSpec {
+    /** Name of the subchart */
+    name: string;
+    /** Rutter instance that generates the subchart */
+    rutter: Rutter;
+    /** Version of the subchart (optional) */
+    version?: string;
+    /** Helm condition for enabling/disabling the subchart */
+    condition?: string;
+    /** Tags for grouping subcharts */
+    tags?: string[];
+    /** Repository URL for the subchart */
+    repository?: string;
+}
+/**
+ * Configuration properties for UmbrellaRutter
+ *
+ * @since 0.2.0
+ */
+export interface UmbrellaRutterProps {
+    /** Metadata for the umbrella chart */
+    meta: HelmChartMeta;
+    /** Array of subchart specifications */
+    subcharts: SubchartSpec[];
+    /** Default values for the umbrella chart */
+    defaultValues?: Record<string, unknown>;
+    /** Environment-specific values */
+    envValues?: Record<string, Record<string, unknown>>;
+}
+/**
+ * UmbrellaRutter manages multiple Rutter instances as subcharts
+ * to create Helm umbrella charts with dependencies.
+ *
+ * @example
+ * ```typescript
+ * const umbrella = new UmbrellaRutter({
+ *   meta: { name: 'my-app', version: '1.0.0' },
+ *   subcharts: [
+ *     { name: 'frontend', rutter: frontendChart },
+ *     { name: 'backend', rutter: backendChart }
+ *   ]
+ * });
+ *
+ * umbrella.write('./charts/my-app');
+ * ```
+ *
+ * @since 0.2.0
+ */
+export declare class UmbrellaRutter {
+    private readonly props;
+    /**
+     * Creates a new UmbrellaRutter instance
+     *
+     * @param props - Configuration properties for the umbrella chart
+     * @throws {Error} If chart metadata is invalid
+     *
+     * @since 0.2.0
+     */
+    constructor(props: UmbrellaRutterProps);
+    private validateMetadata;
+    /**
+     * Write the umbrella chart with all subcharts to the output directory
+     *
+     * Creates the complete umbrella chart structure including:
+     * - Parent Chart.yaml with dependencies
+     * - Parent values.yaml with global and subchart values
+     * - Individual subchart directories under charts/
+     * - NOTES.txt template
+     *
+     * @param outDir - Output directory path for the umbrella chart
+     * @throws {Error} If output directory path is invalid
+     *
+     * @example
+     * ```typescript
+     * umbrella.write('./dist/my-umbrella-chart');
+     * ```
+     *
+     * @since 0.2.0
+     */
+    write(outDir: string): void;
+    private writeParentChart;
+    private writeParentValues;
+    private deepMerge;
+    private generateNotesTemplate;
+}
+//# sourceMappingURL=umbrellaRutter.d.ts.map

package/dist/lib/umbrellaRutter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"umbrellaRutter.d.ts","sourceRoot":"","sources":["../../src/lib/umbrellaRutter.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAOH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAG1D;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,2BAA2B;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,kDAAkD;IAClD,MAAM,EAAE,MAAM,CAAC;IACf,yCAAyC;IACzC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,yDAAyD;IACzD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kCAAkC;IAClC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,sCAAsC;IACtC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,sCAAsC;IACtC,IAAI,EAAE,aAAa,CAAC;IACpB,uCAAuC;IACvC,SAAS,EAAE,YAAY,EAAE,CAAC;IAC1B,4CAA4C;IAC5C,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,kCAAkC;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACrD;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAsB;IAE5C;;;;;;;OAOG;gBACS,KAAK,EAAE,mBAAmB;IAMtC,OAAO,CAAC,gBAAgB;IAcxB;;;;;;;;;;;;;;;;;;OAkBG;IACH,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAoC3B,OAAO,CAAC,gBAAgB;IA4BxB,OAAO,CAAC,iBAAiB;IAgCzB,OAAO,CAAC,SAAS;IAqBjB,OAAO,CAAC,qBAAqB;CAe9B"}

package/dist/lib/{UmbrellaRutter.js → umbrellaRutter.js}

@@ -1,11 +1,39 @@
+/**
+ * @fileoverview UmbrellaRutter class for managing Helm umbrella charts with multiple subcharts
+ * @since 0.2.0
+ */
 import { writeFileSync, mkdirSync } from 'fs';
 import { join } from 'path';
 import YAML from 'yaml';
+import { SecurityUtils } from './security.js';
 /**
  * UmbrellaRutter manages multiple Rutter instances as subcharts
  * to create Helm umbrella charts with dependencies.
+ *
+ * @example
+ * ```typescript
+ * const umbrella = new UmbrellaRutter({
+ *   meta: { name: 'my-app', version: '1.0.0' },
+ *   subcharts: [
+ *     { name: 'frontend', rutter: frontendChart },
+ *     { name: 'backend', rutter: backendChart }
+ *   ]
+ * });
+ *
+ * umbrella.write('./charts/my-app');
+ * ```
+ *
+ * @since 0.2.0
  */
 export class UmbrellaRutter {
+    /**
+     * Creates a new UmbrellaRutter instance
+     *
+     * @param props - Configuration properties for the umbrella chart
+     * @throws {Error} If chart metadata is invalid
+     *
+     * @since 0.2.0
+     */
     constructor(props) {
         // Validate chart metadata
         this.validateMetadata(props.meta);
@@ -25,34 +53,50 @@ export class UmbrellaRutter {
     }
     /**
      * Write the umbrella chart with all subcharts to the output directory
+     *
+     * Creates the complete umbrella chart structure including:
+     * - Parent Chart.yaml with dependencies
+     * - Parent values.yaml with global and subchart values
+     * - Individual subchart directories under charts/
+     * - NOTES.txt template
+     *
+     * @param outDir - Output directory path for the umbrella chart
+     * @throws {Error} If output directory path is invalid
+     *
+     * @example
+     * ```typescript
+     * umbrella.write('./dist/my-umbrella-chart');
+     * ```
+     *
+     * @since 0.2.0
      */
     write(outDir) {
-        // Sanitize paths to prevent directory traversal
-        const path = require('path');
-        const sanitizedOutDir = path.normalize(path.resolve(outDir));
-        const cwd = process.cwd();
-        if (!sanitizedOutDir.startsWith(cwd)) {
-            throw new Error('Output directory must be within current working directory');
-        }
+        // Validate output directory path
+        const validatedOutDir = SecurityUtils.validatePath(outDir, process.cwd());
         // Create output directory structure
         // eslint-disable-next-line security/detect-non-literal-fs-filename -- CLI tool needs dynamic paths
-        mkdirSync(sanitizedOutDir, { recursive: true });
+        mkdirSync(validatedOutDir, { recursive: true });
         // eslint-disable-next-line security/detect-non-literal-fs-filename -- CLI tool needs dynamic paths
-        mkdirSync(join(sanitizedOutDir, 'charts'), { recursive: true });
+        mkdirSync(join(validatedOutDir, 'charts'), { recursive: true });
         // Write each subchart to charts/ directory
         for (const subchart of this.props.subcharts) {
-            const subchartDir = join(sanitizedOutDir, 'charts', subchart.name);
+            // Validate subchart name using centralized validation
+            if (!SecurityUtils.isValidSubchartName(subchart.name)) {
+                throw new Error(`Invalid subchart name: ${SecurityUtils.sanitizeLogMessage(subchart.name)}`);
+            }
+            const sanitizedName = subchart.name; // Already validated by SecurityUtils
+            const subchartDir = join(validatedOutDir, 'charts', sanitizedName);
             subchart.rutter.write(subchartDir);
         }
         // Generate parent Chart.yaml with dependencies
-        this.writeParentChart(sanitizedOutDir);
+        this.writeParentChart(validatedOutDir);
         // Generate parent values.yaml
-        this.writeParentValues(sanitizedOutDir);
+        this.writeParentValues(validatedOutDir);
         // Generate empty templates directory (umbrella charts typically don't have templates)
         // eslint-disable-next-line security/detect-non-literal-fs-filename -- CLI tool needs dynamic paths
-        mkdirSync(join(sanitizedOutDir, 'templates'), { recursive: true });
+        mkdirSync(join(validatedOutDir, 'templates'), { recursive: true });
         // eslint-disable-next-line security/detect-non-literal-fs-filename -- CLI tool needs dynamic paths
-        writeFileSync(join(sanitizedOutDir, 'templates', 'NOTES.txt'), this.generateNotesTemplate());
+        writeFileSync(join(validatedOutDir, 'templates', 'NOTES.txt'), this.generateNotesTemplate());
     }
     writeParentChart(outDir) {
         const chartYaml = {
@@ -66,13 +110,16 @@ export class UmbrellaRutter {
             home: this.props.meta.home,
             sources: this.props.meta.sources,
             maintainers: this.props.meta.maintainers,
-            dependencies: this.props.subcharts.map((subchart) => ({
-                name: subchart.name,
-                version: subchart.version || '0.1.0',
-                repository: subchart.repository || `file://./charts/${subchart.name}`,
-                condition: subchart.condition,
-                tags: subchart.tags,
-            })),
+            dependencies: this.props.subcharts.map((subchart) => {
+                // Subchart name already validated in write() method
+                return {
+                    name: subchart.name,
+                    version: subchart.version || '0.1.0',
+                    repository: subchart.repository || `file://./charts/${subchart.name}`,
+                    ...(subchart.condition && { condition: subchart.condition }),
+                    ...(subchart.tags && { tags: subchart.tags }),
+                };
+            }),
         };
         // eslint-disable-next-line security/detect-non-literal-fs-filename -- CLI tool needs dynamic paths
         writeFileSync(join(outDir, 'Chart.yaml'), YAML.stringify(chartYaml));
@@ -97,9 +144,11 @@ export class UmbrellaRutter {
         // Write environment-specific values files
         if (this.props.envValues) {
             for (const [env, envVals] of Object.entries(this.props.envValues)) {
+                // Use centralized environment name sanitization
+                const sanitizedEnv = SecurityUtils.sanitizeEnvironmentName(env);
                 const envValues = this.deepMerge(values, envVals);
                 // eslint-disable-next-line security/detect-non-literal-fs-filename -- CLI tool needs dynamic paths
-                writeFileSync(join(outDir, `values-${env}.yaml`), YAML.stringify(envValues));
+                writeFileSync(join(outDir, `values-${sanitizedEnv}.yaml`), YAML.stringify(envValues));
             }
         }
     }
@@ -135,4 +184,4 @@ ${this.props.subcharts.map((s) => `  - charts/${s.name}/README.md`).join('\n')}
 `;
     }
 }
-//# sourceMappingURL=UmbrellaRutter.js.map
+//# sourceMappingURL=umbrellaRutter.js.map

package/dist/lib/umbrellaRutter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"umbrellaRutter.js","sourceRoot":"","sources":["../../src/lib/umbrellaRutter.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,IAAI,MAAM,MAAM,CAAC;AAIxB,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAsC9C;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,OAAO,cAAc;IAGzB;;;;;;;OAOG;IACH,YAAY,KAA0B;QACpC,0BAA0B;QAC1B,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAEO,gBAAgB,CAAC,IAAmB;QAC1C,+CAA+C;QAC/C,gGAAgG;QAChG,IAAI,CAAC,iCAAiC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;QACzF,CAAC;QAED,+BAA+B;QAC/B,4FAA4F;QAC5F,IAAI,CAAC,sDAAsD,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/E,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACjF,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACH,KAAK,CAAC,MAAc;QAClB,iCAAiC;QACjC,MAAM,eAAe,GAAG,aAAa,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAE1E,oCAAoC;QACpC,mGAAmG;QACnG,SAAS,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,mGAAmG;QACnG,SAAS,CAAC,IAAI,CAAC,eAAe,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAEhE,2CAA2C;QAC3C,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YAC5C,sDAAsD;YACtD,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtD,MAAM,IAAI,KAAK,CACb,0BAA0B,aAAa,CAAC,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAC5E,CAAC;YACJ,CAAC;YACD,MAAM,aAAa,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,qCAAqC;YAC1E,MAAM,WAAW,GAAG,IAAI,CAAC,eAAe,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;YACnE,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACrC,CAAC;QAED,+CAA+C;QAC/C,IAAI,CAAC,gBAAgB,CAAC,eAAe,CAAC,CAAC;QAEvC,8BAA8B;QAC9B,IAAI,CAAC,iBAAiB,CAAC,eAAe,CAAC,CAAC;QAExC,sFAAsF;QACtF,mGAAmG;QACnG,SAAS,CAAC,IAAI,CAAC,eAAe,EAAE,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,mGAAmG;QACnG,aAAa,CAAC,IAAI,CAAC,eAAe,EAAE,WAAW,EAAE,WAAW,CAAC,EAAE,IAAI,CAAC,qBAAqB,EAAE,CAAC,CAAC;IAC/F,CAAC;IAEO,gBAAgB,CAAC,MAAc;QACrC,MAAM,SAAS,GAAG;YAChB,UAAU,EAAE,IAAI;YAChB,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI;YAC1B,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,iBAAiB;YACpF,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO;YAChC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU;YACtC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE;YACxC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI;YAC1B,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO;YAChC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW;YACxC,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE;gBAClD,oDAAoD;gBACpD,OAAO;oBACL,IAAI,EAAE,QAAQ,CAAC,IAAI;oBACnB,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,OAAO;oBACpC,UAAU,EAAE,QAAQ,CAAC,UAAU,IAAI,mBAAmB,QAAQ,CAAC,IAAI,EAAE;oBACrE,GAAG,CAAC,QAAQ,CAAC,SAAS,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC;oBAC5D,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;iBAC9C,CAAC;YACJ,CAAC,CAAC;SACH,CAAC;QAEF,mGAAmG;QACnG,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;IACvE,CAAC;IAEO,iBAAiB,CAAC,MAAc;QACtC,MAAM,MAAM,GAA4B;YACtC,oDAAoD;YACpD,MAAM,EAAE,EAAE;YACV,6BAA6B;YAC7B,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa;SAC5B,CAAC;QAEF,uCAAuC;QACvC,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YAC5C,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,IAAI,MAAM,CAAC,EAAE,CAAC;gBAC/B,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG;oBACtB,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;QACH,CAAC;QAED,mGAAmG;QACnG,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAEnE,0CAA0C;QAC1C,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YACzB,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;gBAClE,gDAAgD;gBAChD,MAAM,YAAY,GAAG,aAAa,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC;gBAChE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAClD,mGAAmG;gBACnG,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,YAAY,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;YACxF,CAAC;QACH,CAAC;IACH,CAAC;IAEO,SAAS,CACf,MAA+B,EAC/B,MAA+B;QAE/B,MAAM,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;QAC7B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChE,yGAAyG;gBACzG,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS;gBAC1B,yGAAyG;gBACxG,MAAM,CAAC,GAAG,CAA6B,IAAI,EAAE,EAC9C,KAAgC,CACjC,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,yGAAyG;gBACzG,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACtB,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,qBAAqB;QAC3B,OAAO;;;;;;;;;;;EAWT,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,IAAI,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;CAC7E,CAAC;IACA,CAAC;CACF"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "timonel",
   "type": "module",
-  "version": "2.2.0",
+  "version": "2.4.0",
   "description": "Timonel: programmatic Helm chart generator using cdk8s (TypeScript)",
   "bin": {
     "timonel": "dist/cli.js",
@@ -80,6 +80,7 @@
   },
   "dependencies": {
     "cdk8s": "^2.70.11",
+    "constructs": "^10.4.2",
     "ts-node": "^10.9.2",
     "yaml": "^2.8.1"
   },

package/dist/lib/HelmChartWriter.d.ts

@@ -1,69 +0,0 @@
-export interface HelmChartMeta {
-    name: string;
-    version: string;
-    description?: string;
-    appVersion?: string;
-    type?: 'application' | 'library';
-    kubeVersion?: string;
-    keywords?: string[];
-    home?: string;
-    sources?: string[];
-    maintainers?: {
-        name: string;
-        email?: string;
-        url?: string;
-    }[];
-    icon?: string;
-    dependencies?: Array<{
-        name: string;
-        version: string;
-        repository: string;
-        alias?: string;
-        condition?: string | string[];
-        tags?: string[];
-        importValues?: unknown;
-    }>;
-}
-export interface EnvValuesMap {
-    [env: string]: Record<string, unknown>;
-}
-export interface SynthAsset {
-    /** filename or logical id */
-    id: string;
-    /** YAML string, may contain multiple docs separated by --- */
-    yaml: string;
-    /** target directory inside chart: templates (default) or crds */
-    target?: 'templates' | 'crds';
-    /** if true, don't split this asset into multiple files even if it contains multiple docs */
-    singleFile?: boolean;
-}
-export interface HelmChartWriteOptions {
-    outDir: string;
-    meta: HelmChartMeta;
-    defaultValues?: Record<string, unknown> | undefined;
-    envValues?: EnvValuesMap | undefined;
-    /**
-     * Kubernetes manifests to place under templates/
-     * Accepts one or multiple documents per SynthAsset.
-     */
-    assets: SynthAsset[];
-    /**
-     * Optional Helm helpers content for templates/_helpers.tpl.
-     * If a string is provided, it's written verbatim.
-     * If an array is provided, each item becomes a named Helm template
-     * block as: {{- define "<name>" -}} ... {{- end }}
-     */
-    helpersTpl?: string | HelperDefinition[];
-    /** Optional NOTES.txt content under templates/ */
-    notesTpl?: string;
-    /** Optional values.schema.json object */
-    valuesSchema?: Record<string, unknown>;
-}
-export interface HelperDefinition {
-    name: string;
-    body: string;
-}
-export declare class HelmChartWriter {
-    static write(opts: HelmChartWriteOptions): void;
-}
-//# sourceMappingURL=HelmChartWriter.d.ts.map

package/dist/lib/HelmChartWriter.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"HelmChartWriter.d.ts","sourceRoot":"","sources":["../../src/lib/HelmChartWriter.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,aAAa,GAAG,SAAS,CAAC;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,WAAW,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC/D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,KAAK,CAAC;QACnB,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;QAC9B,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAChB,YAAY,CAAC,EAAE,OAAO,CAAC;KACxB,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,YAAY;IAC3B,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACxC;AAED,MAAM,WAAW,UAAU;IACzB,6BAA6B;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,8DAA8D;IAC9D,IAAI,EAAE,MAAM,CAAC;IACb,iEAAiE;IACjE,MAAM,CAAC,EAAE,WAAW,GAAG,MAAM,CAAC;IAC9B,4FAA4F;IAC5F,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,aAAa,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IACpD,SAAS,CAAC,EAAE,YAAY,GAAG,SAAS,CAAC;IACrC;;;OAGG;IACH,MAAM,EAAE,UAAU,EAAE,CAAC;IACrB;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAAC;IACzC,kDAAkD;IAClD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yCAAyC;IACzC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACxC;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,qBAAa,eAAe;IAC1B,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,qBAAqB;CA4GzC"}