timonel 2.3.0 → 2.4.0

package/dist/lib/resources/cloud/aws/awsResources.js

@@ -0,0 +1,187 @@
+import { ApiObject } from 'cdk8s';
+import { BaseResourceProvider } from '../../baseResourceProvider.js';
+/**
+ * AWS-specific Kubernetes resources provider
+ * Handles AWS integrations like EBS, EFS, ALB, IRSA, and other AWS services
+ *
+ * @since 2.4.0
+ */
+export class AWSResources extends BaseResourceProvider {
+    /**
+     * Creates an AWS EBS StorageClass
+     * @param spec - EBS StorageClass specification
+     * @returns Created StorageClass ApiObject
+     *
+     * @example
+     * ```typescript
+     * awsResources.addEBSStorageClass({
+     *   name: 'fast-ebs',
+     *   volumeType: 'gp3',
+     *   encrypted: true,
+     *   allowVolumeExpansion: true
+     * });
+     * ```
+     *
+     * @since 2.4.0
+     */
+    addEBSStorageClass(spec) {
+        const parameters = {
+            type: spec.volumeType ?? 'gp3',
+            ...(spec.encrypted !== undefined ? { encrypted: String(spec.encrypted) } : {}),
+            ...(spec.iops ? { iops: String(spec.iops) } : {}),
+            ...(spec.throughput ? { throughput: String(spec.throughput) } : {}),
+            ...(spec.fsType ? { fsType: spec.fsType } : {}),
+        };
+        const storageClassSpec = {
+            provisioner: 'ebs.csi.aws.com',
+            parameters,
+            reclaimPolicy: spec.reclaimPolicy ?? 'Delete',
+            allowVolumeExpansion: spec.allowVolumeExpansion ?? true,
+            volumeBindingMode: spec.volumeBindingMode ?? 'WaitForFirstConsumer',
+        };
+        return this.createApiObject(spec.name, AWSResources.STORAGE_API_VERSION, 'StorageClass', storageClassSpec, spec.labels, spec.annotations);
+    }
+    /**
+     * Creates an AWS EFS StorageClass
+     * @param spec - EFS StorageClass specification
+     * @returns Created StorageClass ApiObject
+     *
+     * @example
+     * ```typescript
+     * awsResources.addEFSStorageClass({
+     *   name: 'efs-storage',
+     *   fileSystemId: 'fs-12345678',
+     *   directoryPerms: '0755'
+     * });
+     * ```
+     *
+     * @since 2.4.0
+     */
+    addEFSStorageClass(spec) {
+        const parameters = {
+            ...(spec.fileSystemId ? { fileSystemId: spec.fileSystemId } : {}),
+            ...(spec.directoryPerms ? { directoryPerms: spec.directoryPerms } : {}),
+            ...(spec.gidRangeStart ? { gidRangeStart: String(spec.gidRangeStart) } : {}),
+            ...(spec.gidRangeEnd ? { gidRangeEnd: String(spec.gidRangeEnd) } : {}),
+            ...(spec.basePath ? { basePath: spec.basePath } : {}),
+        };
+        const storageClassSpec = {
+            provisioner: 'efs.csi.aws.com',
+            parameters,
+            reclaimPolicy: spec.reclaimPolicy ?? 'Delete',
+            volumeBindingMode: spec.volumeBindingMode ?? 'Immediate',
+        };
+        return this.createApiObject(spec.name, AWSResources.STORAGE_API_VERSION, 'StorageClass', storageClassSpec, spec.labels, spec.annotations);
+    }
+    /**
+     * Creates an AWS IRSA (IAM Roles for Service Accounts) ServiceAccount
+     * @param spec - IRSA ServiceAccount specification
+     * @returns Created ServiceAccount ApiObject
+     *
+     * @example
+     * ```typescript
+     * awsResources.addIRSAServiceAccount({
+     *   name: 'aws-service-account',
+     *   roleArn: 'arn:aws:iam::123456789012:role/MyRole'
+     * });
+     * ```
+     *
+     * @since 2.4.0
+     */
+    addIRSAServiceAccount(spec) {
+        this.validateRoleArn(spec.roleArn);
+        const annotations = {
+            'eks.amazonaws.com/role-arn': spec.roleArn,
+            ...(spec.annotations ?? {}),
+        };
+        return new ApiObject(this.chart, spec.name, {
+            apiVersion: AWSResources.CORE_API_VERSION,
+            kind: 'ServiceAccount',
+            metadata: {
+                name: spec.name,
+                annotations,
+                ...(spec.labels ? { labels: spec.labels } : {}),
+            },
+            ...(spec.automountServiceAccountToken !== undefined
+                ? { automountServiceAccountToken: spec.automountServiceAccountToken }
+                : {}),
+            ...(spec.imagePullSecrets ? { imagePullSecrets: spec.imagePullSecrets } : {}),
+        });
+    }
+    /**
+     * Creates an AWS ALB Ingress
+     * @param spec - ALB Ingress specification
+     * @returns Created Ingress ApiObject
+     *
+     * @example
+     * ```typescript
+     * awsResources.addALBIngress({
+     *   name: 'web-ingress',
+     *   rules: [{
+     *     paths: [{
+     *       path: '/',
+     *       pathType: 'Prefix',
+     *       backend: { service: { name: 'web-service', port: { number: 80 } } }
+     *     }]
+     *   }],
+     *   scheme: 'internet-facing'
+     * });
+     * ```
+     *
+     * @since 2.4.0
+     */
+    addALBIngress(spec) {
+        const annotations = this.buildALBAnnotations(spec);
+        const ingressSpec = {
+            ...(spec.ingressClassName ? { ingressClassName: spec.ingressClassName } : {}),
+            rules: spec.rules,
+            ...(spec.tls ? { tls: spec.tls } : {}),
+        };
+        return this.createApiObject(spec.name, AWSResources.NETWORKING_API_VERSION, 'Ingress', ingressSpec, spec.labels, annotations);
+    }
+    /**
+     * Validates AWS IAM Role ARN format
+     * @param roleArn - Role ARN to validate
+     */
+    validateRoleArn(roleArn) {
+        // Skip validation for Helm template values
+        if (roleArn.includes('{{') && roleArn.includes('}}')) {
+            return;
+        }
+        const arnRegex = /^arn:aws:iam::\d{12}:role\/[\w+=,.@-]+$/;
+        if (!arnRegex.test(roleArn)) {
+            throw new Error(`Invalid AWS IAM Role ARN format: ${roleArn}`);
+        }
+    }
+    /**
+     * Builds ALB-specific annotations
+     * @param spec - ALB Ingress specification
+     * @returns ALB annotations
+     */
+    buildALBAnnotations(spec) {
+        const annotations = {
+            'kubernetes.io/ingress.class': 'alb',
+            ...(spec.annotations ?? {}),
+        };
+        if (spec.scheme) {
+            annotations['alb.ingress.kubernetes.io/scheme'] = spec.scheme;
+        }
+        if (spec.targetType) {
+            annotations['alb.ingress.kubernetes.io/target-type'] = spec.targetType;
+        }
+        if (spec.certificateArn) {
+            annotations['alb.ingress.kubernetes.io/certificate-arn'] = spec.certificateArn;
+        }
+        if (spec.sslRedirect) {
+            annotations['alb.ingress.kubernetes.io/ssl-redirect'] = '443';
+        }
+        if (spec.healthCheckPath) {
+            annotations['alb.ingress.kubernetes.io/healthcheck-path'] = spec.healthCheckPath;
+        }
+        return annotations;
+    }
+}
+AWSResources.STORAGE_API_VERSION = 'storage.k8s.io/v1';
+AWSResources.CORE_API_VERSION = 'v1';
+AWSResources.NETWORKING_API_VERSION = 'networking.k8s.io/v1';
+//# sourceMappingURL=awsResources.js.map

package/dist/lib/resources/cloud/aws/awsResources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"awsResources.js","sourceRoot":"","sources":["../../../../../src/lib/resources/cloud/aws/awsResources.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAElC,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAErE;;;;;GAKG;AACH,MAAM,OAAO,YAAa,SAAQ,oBAAoB;IAKpD;;;;;;;;;;;;;;;;OAgBG;IACH,kBAAkB,CAAC,IAA4B;QAC7C,MAAM,UAAU,GAA2B;YACzC,IAAI,EAAE,IAAI,CAAC,UAAU,IAAI,KAAK;YAC9B,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9E,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChD,CAAC;QAEF,MAAM,gBAAgB,GAAG;YACvB,WAAW,EAAE,iBAAiB;YAC9B,UAAU;YACV,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,QAAQ;YAC7C,oBAAoB,EAAE,IAAI,CAAC,oBAAoB,IAAI,IAAI;YACvD,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,IAAI,sBAAsB;SACpE,CAAC;QAEF,OAAO,IAAI,CAAC,eAAe,CACzB,IAAI,CAAC,IAAI,EACT,YAAY,CAAC,mBAAmB,EAChC,cAAc,EACd,gBAAgB,EAChB,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,WAAW,CACjB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,kBAAkB,CAAC,IAA4B;QAC7C,MAAM,UAAU,GAA2B;YACzC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5E,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD,CAAC;QAEF,MAAM,gBAAgB,GAAG;YACvB,WAAW,EAAE,iBAAiB;YAC9B,UAAU;YACV,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,QAAQ;YAC7C,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,IAAI,WAAW;SACzD,CAAC;QAEF,OAAO,IAAI,CAAC,eAAe,CACzB,IAAI,CAAC,IAAI,EACT,YAAY,CAAC,mBAAmB,EAChC,cAAc,EACd,gBAAgB,EAChB,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,WAAW,CACjB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,qBAAqB,CAAC,IAA+B;QACnD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAEnC,MAAM,WAAW,GAA2B;YAC1C,4BAA4B,EAAE,IAAI,CAAC,OAAO;YAC1C,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;SAC5B,CAAC;QAEF,OAAO,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE;YAC1C,UAAU,EAAE,YAAY,CAAC,gBAAgB;YACzC,IAAI,EAAE,gBAAgB;YACtB,QAAQ,EAAE;gBACR,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW;gBACX,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChD;YACD,GAAG,CAAC,IAAI,CAAC,4BAA4B,KAAK,SAAS;gBACjD,CAAC,CAAC,EAAE,4BAA4B,EAAE,IAAI,CAAC,4BAA4B,EAAE;gBACrE,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9E,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,aAAa,CAAC,IAAuB;QACnC,MAAM,WAAW,GAAG,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAEnD,MAAM,WAAW,GAAG;YAClB,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7E,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvC,CAAC;QAEF,OAAO,IAAI,CAAC,eAAe,CACzB,IAAI,CAAC,IAAI,EACT,YAAY,CAAC,sBAAsB,EACnC,SAAS,EACT,WAAW,EACX,IAAI,CAAC,MAAM,EACX,WAAW,CACZ,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,eAAe,CAAC,OAAe;QACrC,2CAA2C;QAC3C,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACrD,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,yCAAyC,CAAC;QAC3D,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,oCAAoC,OAAO,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,mBAAmB,CAAC,IAAuB;QACjD,MAAM,WAAW,GAA2B;YAC1C,6BAA6B,EAAE,KAAK;YACpC,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;SAC5B,CAAC;QAEF,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,WAAW,CAAC,kCAAkC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;QAChE,CAAC;QAED,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,WAAW,CAAC,uCAAuC,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC;QACzE,CAAC;QAED,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,WAAW,CAAC,2CAA2C,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC;QACjF,CAAC;QAED,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,WAAW,CAAC,wCAAwC,CAAC,GAAG,KAAK,CAAC;QAChE,CAAC;QAED,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,WAAW,CAAC,4CAA4C,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC;QACnF,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;;AAzNuB,gCAAmB,GAAG,mBAAmB,CAAC;AAC1C,6BAAgB,GAAG,IAAI,CAAC;AACxB,mCAAsB,GAAG,sBAAsB,CAAC"}

package/dist/lib/resources/cloud/azure/azureResources.d.ts

@@ -0,0 +1,169 @@
+import type { ApiObject } from 'cdk8s';
+import { BaseResourceProvider } from '../../baseResourceProvider.js';
+/**
+ * Azure-specific Kubernetes resources provider
+ * Handles Azure integrations like Azure Disk, Azure File, Application Gateway, AGIC, and other Azure services
+ *
+ * @since 2.4.0
+ */
+export declare class AzureResources extends BaseResourceProvider {
+    private static readonly STORAGE_API_VERSION;
+    private static readonly NETWORKING_API_VERSION;
+    /**
+     * Creates an Azure Disk StorageClass
+     * @param spec - Azure Disk StorageClass specification
+     * @returns Created StorageClass ApiObject
+     *
+     * @example
+     * ```typescript
+     * azureResources.addAzureDiskStorageClass({
+     *   name: 'premium-disk',
+     *   skuName: 'Premium_LRS',
+     *   cachingMode: 'ReadOnly',
+     *   allowVolumeExpansion: true
+     * });
+     * ```
+     *
+     * @since 2.4.0
+     */
+    addAzureDiskStorageClass(spec: AzureDiskStorageClassSpec): ApiObject;
+    /**
+     * Creates an Azure File StorageClass
+     * @param spec - Azure File StorageClass specification
+     * @returns Created StorageClass ApiObject
+     *
+     * @example
+     * ```typescript
+     * azureResources.addAzureFileStorageClass({
+     *   name: 'azure-file-premium',
+     *   skuName: 'Premium_LRS',
+     *   protocol: 'nfs',
+     *   allowSharedAccess: true
+     * });
+     * ```
+     *
+     * @since 2.4.0
+     */
+    addAzureFileStorageClass(spec: AzureFileStorageClassSpec): ApiObject;
+    /**
+     * Creates an Azure Application Gateway Ingress
+     * @param spec - AGIC Ingress specification
+     * @returns Created Ingress ApiObject
+     *
+     * @example
+     * ```typescript
+     * azureResources.addApplicationGatewayIngress({
+     *   name: 'app-gateway-ingress',
+     *   host: 'myapp.example.com',
+     *   serviceName: 'my-service',
+     *   servicePort: 80,
+     *   sslRedirect: true
+     * });
+     * ```
+     *
+     * @since 2.4.0
+     */
+    addApplicationGatewayIngress(spec: AzureAGICIngressSpec): ApiObject;
+    /**
+     * Creates an Azure Key Vault SecretProviderClass
+     * @param spec - Azure Key Vault SecretProviderClass specification
+     * @returns Created SecretProviderClass ApiObject
+     *
+     * @example
+     * ```typescript
+     * azureResources.addAzureKeyVaultSecretProviderClass({
+     *   name: 'app-secrets',
+     *   keyVaultName: 'my-keyvault',
+     *   tenantId: '87654321-4321-4321-4321-210987654321',
+     *   objects: [
+     *     { objectName: 'database-password', objectType: 'secret' }
+     *   ]
+     * });
+     * ```
+     *
+     * @since 2.4.0
+     */
+    addAzureKeyVaultSecretProviderClass(spec: AzureKeyVaultSecretProviderClassSpec): ApiObject;
+    /**
+     * Creates an Azure Container Registry ServiceAccount
+     * @param spec - Azure ACR ServiceAccount specification
+     * @returns Created ServiceAccount ApiObject
+     *
+     * @example
+     * ```typescript
+     * azureResources.addAzureACRServiceAccount({
+     *   name: 'acr-service-account',
+     *   acrName: 'myregistry',
+     *   resourceGroup: 'my-rg'
+     * });
+     * ```
+     *
+     * @since 2.4.0
+     */
+    addAzureACRServiceAccount(spec: AzureACRServiceAccountSpec): ApiObject;
+}
+export interface AzureDiskStorageClassSpec {
+    name: string;
+    skuName?: 'Standard_LRS' | 'Premium_LRS' | 'StandardSSD_LRS' | 'UltraSSD_LRS';
+    cachingMode?: 'None' | 'ReadOnly' | 'ReadWrite';
+    fsType?: string;
+    kind?: 'Shared' | 'Dedicated' | 'Managed';
+    reclaimPolicy?: 'Delete' | 'Retain';
+    allowVolumeExpansion?: boolean;
+    volumeBindingMode?: 'Immediate' | 'WaitForFirstConsumer';
+    labels?: Record<string, string>;
+    annotations?: Record<string, string>;
+}
+export interface AzureFileStorageClassSpec {
+    name: string;
+    skuName?: 'Standard_LRS' | 'Premium_LRS';
+    protocol?: 'smb' | 'nfs';
+    allowSharedAccess?: boolean;
+    reclaimPolicy?: 'Delete' | 'Retain';
+    allowVolumeExpansion?: boolean;
+    volumeBindingMode?: 'Immediate' | 'WaitForFirstConsumer';
+    labels?: Record<string, string>;
+    annotations?: Record<string, string>;
+}
+export interface AzureAGICIngressSpec {
+    name: string;
+    host: string;
+    serviceName: string;
+    servicePort: number;
+    path?: string;
+    sslRedirect?: boolean;
+    cookieBasedAffinity?: boolean;
+    requestTimeout?: number;
+    connectionDraining?: boolean;
+    tls?: Array<{
+        hosts: string[];
+        secretName: string;
+    }>;
+    labels?: Record<string, string>;
+    annotations?: Record<string, string>;
+}
+export interface AzureKeyVaultSecretProviderClassSpec {
+    name: string;
+    keyVaultName: string;
+    tenantId: string;
+    objects: Array<{
+        objectName: string;
+        objectType: 'secret' | 'key' | 'cert';
+        objectAlias?: string;
+        objectVersion?: string;
+    }>;
+    secretName?: string;
+    userAssignedIdentityID?: string;
+    labels?: Record<string, string>;
+    annotations?: Record<string, string>;
+}
+export interface AzureACRServiceAccountSpec {
+    name: string;
+    acrName: string;
+    resourceGroup?: string;
+    clientId?: string;
+    tenantId?: string;
+    labels?: Record<string, string>;
+    annotations?: Record<string, string>;
+}
+//# sourceMappingURL=azureResources.d.ts.map

package/dist/lib/resources/cloud/azure/azureResources.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"azureResources.d.ts","sourceRoot":"","sources":["../../../../../src/lib/resources/cloud/azure/azureResources.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAEvC,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAErE;;;;;GAKG;AACH,qBAAa,cAAe,SAAQ,oBAAoB;IACtD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAuB;IAClE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAA0B;IAExE;;;;;;;;;;;;;;;;OAgBG;IACH,wBAAwB,CAAC,IAAI,EAAE,yBAAyB,GAAG,SAAS;IA0BpE;;;;;;;;;;;;;;;;OAgBG;IACH,wBAAwB,CAAC,IAAI,EAAE,yBAAyB,GAAG,SAAS;IA2BpE;;;;;;;;;;;;;;;;;OAiBG;IACH,4BAA4B,CAAC,IAAI,EAAE,oBAAoB,GAAG,SAAS;IAqDnE;;;;;;;;;;;;;;;;;;OAkBG;IACH,mCAAmC,CAAC,IAAI,EAAE,oCAAoC,GAAG,SAAS;IAgD1F;;;;;;;;;;;;;;;OAeG;IACH,yBAAyB,CAAC,IAAI,EAAE,0BAA0B,GAAG,SAAS;CAkBvE;AAGD,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,cAAc,GAAG,aAAa,GAAG,iBAAiB,GAAG,cAAc,CAAC;IAC9E,WAAW,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,WAAW,CAAC;IAChD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,QAAQ,GAAG,WAAW,GAAG,SAAS,CAAC;IAC1C,aAAa,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;IACpC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,iBAAiB,CAAC,EAAE,WAAW,GAAG,sBAAsB,CAAC;IACzD,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,cAAc,GAAG,aAAa,CAAC;IACzC,QAAQ,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC;IACzB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,aAAa,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;IACpC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,iBAAiB,CAAC,EAAE,WAAW,GAAG,sBAAsB,CAAC;IACzD,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,GAAG,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrD,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,oCAAoC;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,KAAK,CAAC;QACb,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;QACtC,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,CAAC,CAAC;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC"}

package/dist/lib/resources/cloud/azure/azureResources.js

@@ -0,0 +1,218 @@
+import { BaseResourceProvider } from '../../baseResourceProvider.js';
+/**
+ * Azure-specific Kubernetes resources provider
+ * Handles Azure integrations like Azure Disk, Azure File, Application Gateway, AGIC, and other Azure services
+ *
+ * @since 2.4.0
+ */
+export class AzureResources extends BaseResourceProvider {
+    /**
+     * Creates an Azure Disk StorageClass
+     * @param spec - Azure Disk StorageClass specification
+     * @returns Created StorageClass ApiObject
+     *
+     * @example
+     * ```typescript
+     * azureResources.addAzureDiskStorageClass({
+     *   name: 'premium-disk',
+     *   skuName: 'Premium_LRS',
+     *   cachingMode: 'ReadOnly',
+     *   allowVolumeExpansion: true
+     * });
+     * ```
+     *
+     * @since 2.4.0
+     */
+    addAzureDiskStorageClass(spec) {
+        const parameters = {
+            skuName: spec.skuName ?? 'Standard_LRS',
+            ...(spec.cachingMode ? { cachingmode: spec.cachingMode } : {}),
+            ...(spec.fsType ? { fsType: spec.fsType } : {}),
+            ...(spec.kind ? { kind: spec.kind } : {}),
+        };
+        const storageClassSpec = {
+            provisioner: 'disk.csi.azure.com',
+            parameters,
+            reclaimPolicy: spec.reclaimPolicy ?? 'Delete',
+            allowVolumeExpansion: spec.allowVolumeExpansion ?? true,
+            volumeBindingMode: spec.volumeBindingMode ?? 'WaitForFirstConsumer',
+        };
+        return this.createApiObject(spec.name, AzureResources.STORAGE_API_VERSION, 'StorageClass', storageClassSpec, spec.labels, spec.annotations);
+    }
+    /**
+     * Creates an Azure File StorageClass
+     * @param spec - Azure File StorageClass specification
+     * @returns Created StorageClass ApiObject
+     *
+     * @example
+     * ```typescript
+     * azureResources.addAzureFileStorageClass({
+     *   name: 'azure-file-premium',
+     *   skuName: 'Premium_LRS',
+     *   protocol: 'nfs',
+     *   allowSharedAccess: true
+     * });
+     * ```
+     *
+     * @since 2.4.0
+     */
+    addAzureFileStorageClass(spec) {
+        const parameters = {
+            skuName: spec.skuName ?? 'Standard_LRS',
+            ...(spec.protocol ? { protocol: spec.protocol } : {}),
+            ...(spec.allowSharedAccess !== undefined
+                ? { allowSharedAccess: String(spec.allowSharedAccess) }
+                : {}),
+        };
+        const storageClassSpec = {
+            provisioner: 'file.csi.azure.com',
+            parameters,
+            reclaimPolicy: spec.reclaimPolicy ?? 'Delete',
+            allowVolumeExpansion: spec.allowVolumeExpansion ?? true,
+            volumeBindingMode: spec.volumeBindingMode ?? 'Immediate',
+        };
+        return this.createApiObject(spec.name, AzureResources.STORAGE_API_VERSION, 'StorageClass', storageClassSpec, spec.labels, spec.annotations);
+    }
+    /**
+     * Creates an Azure Application Gateway Ingress
+     * @param spec - AGIC Ingress specification
+     * @returns Created Ingress ApiObject
+     *
+     * @example
+     * ```typescript
+     * azureResources.addApplicationGatewayIngress({
+     *   name: 'app-gateway-ingress',
+     *   host: 'myapp.example.com',
+     *   serviceName: 'my-service',
+     *   servicePort: 80,
+     *   sslRedirect: true
+     * });
+     * ```
+     *
+     * @since 2.4.0
+     */
+    addApplicationGatewayIngress(spec) {
+        const annotations = {
+            'kubernetes.io/ingress.class': 'azure/application-gateway',
+            ...(spec.sslRedirect !== undefined
+                ? { 'appgw.ingress.kubernetes.io/ssl-redirect': String(spec.sslRedirect) }
+                : {}),
+            ...(spec.cookieBasedAffinity !== undefined
+                ? { 'appgw.ingress.kubernetes.io/cookie-based-affinity': String(spec.cookieBasedAffinity) }
+                : {}),
+            ...(spec.requestTimeout
+                ? { 'appgw.ingress.kubernetes.io/request-timeout': String(spec.requestTimeout) }
+                : {}),
+            ...(spec.connectionDraining !== undefined
+                ? { 'appgw.ingress.kubernetes.io/connection-draining': String(spec.connectionDraining) }
+                : {}),
+            ...(spec.annotations || {}),
+        };
+        const rules = [
+            {
+                host: spec.host,
+                http: {
+                    paths: [
+                        {
+                            path: spec.path ?? '/',
+                            pathType: 'Prefix',
+                            backend: {
+                                service: {
+                                    name: spec.serviceName,
+                                    port: { number: spec.servicePort },
+                                },
+                            },
+                        },
+                    ],
+                },
+            },
+        ];
+        const ingressSpec = {
+            rules,
+            ...(spec.tls ? { tls: spec.tls } : {}),
+        };
+        return this.createApiObject(spec.name, AzureResources.NETWORKING_API_VERSION, 'Ingress', ingressSpec, spec.labels, annotations);
+    }
+    /**
+     * Creates an Azure Key Vault SecretProviderClass
+     * @param spec - Azure Key Vault SecretProviderClass specification
+     * @returns Created SecretProviderClass ApiObject
+     *
+     * @example
+     * ```typescript
+     * azureResources.addAzureKeyVaultSecretProviderClass({
+     *   name: 'app-secrets',
+     *   keyVaultName: 'my-keyvault',
+     *   tenantId: '87654321-4321-4321-4321-210987654321',
+     *   objects: [
+     *     { objectName: 'database-password', objectType: 'secret' }
+     *   ]
+     * });
+     * ```
+     *
+     * @since 2.4.0
+     */
+    addAzureKeyVaultSecretProviderClass(spec) {
+        // Validate object names for security
+        spec.objects.forEach((obj) => {
+            if (obj.objectName.includes('../') || obj.objectName.includes('..\\')) {
+                throw new Error(`Azure Key Vault ${spec.name}: Object name '${obj.objectName}' contains invalid path traversal sequences`);
+            }
+        });
+        const objects = spec.objects.map((obj) => ({
+            objectName: obj.objectName,
+            objectType: obj.objectType,
+            ...(obj.objectAlias ? { objectAlias: obj.objectAlias } : {}),
+            ...(obj.objectVersion ? { objectVersion: obj.objectVersion } : {}),
+        }));
+        const secretProviderSpec = {
+            secretObjects: [
+                {
+                    secretName: spec.secretName || spec.name,
+                    type: 'Opaque',
+                    data: objects.map((obj) => ({
+                        objectName: obj.objectName,
+                        key: obj.objectAlias || obj.objectName,
+                    })),
+                },
+            ],
+            parameters: {
+                keyvaultName: spec.keyVaultName,
+                tenantId: spec.tenantId,
+                objects: JSON.stringify({ array: objects }),
+                ...(spec.userAssignedIdentityID
+                    ? { userAssignedIdentityID: spec.userAssignedIdentityID }
+                    : {}),
+            },
+        };
+        return this.createApiObject(spec.name, 'secrets-store.csi.x-k8s.io/v1', 'SecretProviderClass', secretProviderSpec, spec.labels, spec.annotations);
+    }
+    /**
+     * Creates an Azure Container Registry ServiceAccount
+     * @param spec - Azure ACR ServiceAccount specification
+     * @returns Created ServiceAccount ApiObject
+     *
+     * @example
+     * ```typescript
+     * azureResources.addAzureACRServiceAccount({
+     *   name: 'acr-service-account',
+     *   acrName: 'myregistry',
+     *   resourceGroup: 'my-rg'
+     * });
+     * ```
+     *
+     * @since 2.4.0
+     */
+    addAzureACRServiceAccount(spec) {
+        const annotations = {
+            'azure.workload.identity/client-id': spec.clientId || '',
+            'azure.workload.identity/tenant-id': spec.tenantId || '',
+            ...(spec.annotations || {}),
+        };
+        const serviceAccountSpec = {};
+        return this.createApiObject(spec.name, 'v1', 'ServiceAccount', serviceAccountSpec, spec.labels, annotations);
+    }
+}
+AzureResources.STORAGE_API_VERSION = 'storage.k8s.io/v1';
+AzureResources.NETWORKING_API_VERSION = 'networking.k8s.io/v1';
+//# sourceMappingURL=azureResources.js.map

package/dist/lib/resources/cloud/azure/azureResources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"azureResources.js","sourceRoot":"","sources":["../../../../../src/lib/resources/cloud/azure/azureResources.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAErE;;;;;GAKG;AACH,MAAM,OAAO,cAAe,SAAQ,oBAAoB;IAItD;;;;;;;;;;;;;;;;OAgBG;IACH,wBAAwB,CAAC,IAA+B;QACtD,MAAM,UAAU,GAA2B;YACzC,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,cAAc;YACvC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1C,CAAC;QAEF,MAAM,gBAAgB,GAAG;YACvB,WAAW,EAAE,oBAAoB;YACjC,UAAU;YACV,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,QAAQ;YAC7C,oBAAoB,EAAE,IAAI,CAAC,oBAAoB,IAAI,IAAI;YACvD,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,IAAI,sBAAsB;SACpE,CAAC;QAEF,OAAO,IAAI,CAAC,eAAe,CACzB,IAAI,CAAC,IAAI,EACT,cAAc,CAAC,mBAAmB,EAClC,cAAc,EACd,gBAAgB,EAChB,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,WAAW,CACjB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,wBAAwB,CAAC,IAA+B;QACtD,MAAM,UAAU,GAA2B;YACzC,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,cAAc;YACvC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,IAAI,CAAC,iBAAiB,KAAK,SAAS;gBACtC,CAAC,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE;gBACvD,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QAEF,MAAM,gBAAgB,GAAG;YACvB,WAAW,EAAE,oBAAoB;YACjC,UAAU;YACV,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,QAAQ;YAC7C,oBAAoB,EAAE,IAAI,CAAC,oBAAoB,IAAI,IAAI;YACvD,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,IAAI,WAAW;SACzD,CAAC;QAEF,OAAO,IAAI,CAAC,eAAe,CACzB,IAAI,CAAC,IAAI,EACT,cAAc,CAAC,mBAAmB,EAClC,cAAc,EACd,gBAAgB,EAChB,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,WAAW,CACjB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACH,4BAA4B,CAAC,IAA0B;QACrD,MAAM,WAAW,GAA2B;YAC1C,6BAA6B,EAAE,2BAA2B;YAC1D,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS;gBAChC,CAAC,CAAC,EAAE,0CAA0C,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE;gBAC1E,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,IAAI,CAAC,mBAAmB,KAAK,SAAS;gBACxC,CAAC,CAAC,EAAE,mDAAmD,EAAE,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,EAAE;gBAC3F,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,IAAI,CAAC,cAAc;gBACrB,CAAC,CAAC,EAAE,6CAA6C,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE;gBAChF,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,IAAI,CAAC,kBAAkB,KAAK,SAAS;gBACvC,CAAC,CAAC,EAAE,iDAAiD,EAAE,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE;gBACxF,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;SAC5B,CAAC;QAEF,MAAM,KAAK,GAAG;YACZ;gBACE,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE;oBACJ,KAAK,EAAE;wBACL;4BACE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,GAAG;4BACtB,QAAQ,EAAE,QAAQ;4BAClB,OAAO,EAAE;gCACP,OAAO,EAAE;oCACP,IAAI,EAAE,IAAI,CAAC,WAAW;oCACtB,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE;iCACnC;6BACF;yBACF;qBACF;iBACF;aACF;SACF,CAAC;QAEF,MAAM,WAAW,GAAG;YAClB,KAAK;YACL,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvC,CAAC;QAEF,OAAO,IAAI,CAAC,eAAe,CACzB,IAAI,CAAC,IAAI,EACT,cAAc,CAAC,sBAAsB,EACrC,SAAS,EACT,WAAW,EACX,IAAI,CAAC,MAAM,EACX,WAAW,CACZ,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACH,mCAAmC,CAAC,IAA0C;QAC5E,qCAAqC;QACrC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;YAC3B,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACtE,MAAM,IAAI,KAAK,CACb,mBAAmB,IAAI,CAAC,IAAI,kBAAkB,GAAG,CAAC,UAAU,6CAA6C,CAC1G,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACzC,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnE,CAAC,CAAC,CAAC;QAEJ,MAAM,kBAAkB,GAAG;YACzB,aAAa,EAAE;gBACb;oBACE,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,IAAI;oBACxC,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;wBAC1B,UAAU,EAAE,GAAG,CAAC,UAAU;wBAC1B,GAAG,EAAE,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,UAAU;qBACvC,CAAC,CAAC;iBACJ;aACF;YACD,UAAU,EAAE;gBACV,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;gBAC3C,GAAG,CAAC,IAAI,CAAC,sBAAsB;oBAC7B,CAAC,CAAC,EAAE,sBAAsB,EAAE,IAAI,CAAC,sBAAsB,EAAE;oBACzD,CAAC,CAAC,EAAE,CAAC;aACR;SACF,CAAC;QAEF,OAAO,IAAI,CAAC,eAAe,CACzB,IAAI,CAAC,IAAI,EACT,+BAA+B,EAC/B,qBAAqB,EACrB,kBAAkB,EAClB,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,WAAW,CACjB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,yBAAyB,CAAC,IAAgC;QACxD,MAAM,WAAW,GAA2B;YAC1C,mCAAmC,EAAE,IAAI,CAAC,QAAQ,IAAI,EAAE;YACxD,mCAAmC,EAAE,IAAI,CAAC,QAAQ,IAAI,EAAE;YACxD,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;SAC5B,CAAC;QAEF,MAAM,kBAAkB,GAAG,EAAE,CAAC;QAE9B,OAAO,IAAI,CAAC,eAAe,CACzB,IAAI,CAAC,IAAI,EACT,IAAI,EACJ,gBAAgB,EAChB,kBAAkB,EAClB,IAAI,CAAC,MAAM,EACX,WAAW,CACZ,CAAC;IACJ,CAAC;;AArQuB,kCAAmB,GAAG,mBAAmB,CAAC;AAC1C,qCAAsB,GAAG,sBAAsB,CAAC"}