timonel 2.8.0-beta.5 → 2.8.0

package/dist/src/lib/resources/network/networkResources.d.ts

@@ -1,515 +0,0 @@
-/**
- * @fileoverview Network resources for Kubernetes networking
- * @since 2.7.0
- */
-import type { ApiObject } from 'cdk8s';
-import { BaseResourceProvider } from '../baseResourceProvider.js';
-/**
- * Network policy rule specification
- * @since 2.7.0
- */
-export interface NetworkPolicyRule {
-    /** Ports to allow */
-    ports?: Array<{
-        port?: number | string;
-        protocol?: 'TCP' | 'UDP' | 'SCTP';
-    }>;
-    /** Pod selector for allowed pods */
-    podSelector?: {
-        matchLabels?: Record<string, string>;
-        matchExpressions?: Array<{
-            key: string;
-            operator: 'In' | 'NotIn' | 'Exists' | 'DoesNotExist';
-            values?: string[];
-        }>;
-    };
-    /** Namespace selector for allowed namespaces */
-    namespaceSelector?: {
-        matchLabels?: Record<string, string>;
-        matchExpressions?: Array<{
-            key: string;
-            operator: 'In' | 'NotIn' | 'Exists' | 'DoesNotExist';
-            values?: string[];
-        }>;
-    };
-}
-/**
- * Predefined NetworkPolicy templates for common security patterns
- * @since 2.9.0
- */
-export interface NetworkPolicyTemplate {
-    /** Template name */
-    name: string;
-    /** Template description */
-    description: string;
-    /** Policy types */
-    policyTypes: Array<'Ingress' | 'Egress'>;
-    /** Ingress rules */
-    ingress?: NetworkPolicyRule[];
-    /** Egress rules */
-    egress?: NetworkPolicyRule[];
-}
-/**
- * Network policy specification
- * @since 2.7.0
- */
-export interface NetworkPolicySpec {
-    /** Resource name */
-    name: string;
-    /** Pod selector to apply policy to */
-    podSelector: {
-        matchLabels?: Record<string, string>;
-        matchExpressions?: Array<{
-            key: string;
-            operator: 'In' | 'NotIn' | 'Exists' | 'DoesNotExist';
-            values?: string[];
-        }>;
-    };
-    /** Policy types to apply */
-    policyTypes?: Array<'Ingress' | 'Egress'>;
-    /** Ingress rules */
-    ingress?: NetworkPolicyRule[];
-    /** Egress rules */
-    egress?: NetworkPolicyRule[];
-    /** Resource labels */
-    labels?: Record<string, string>;
-    /** Resource annotations */
-    annotations?: Record<string, string>;
-}
-/**
- * TLS configuration for Ingress
- * @since 2.8.0
- */
-export interface IngressTLSConfig {
-    /** Hosts covered by the TLS certificate */
-    hosts?: string[];
-    /** Name of the secret containing the TLS certificate and key */
-    secretName?: string;
-}
-/**
- * Environment types for Ingress security validation
- * @since 2.8.0
- */
-export type IngressEnvironment = 'development' | 'staging' | 'production';
-/**
- * NGINX Ingress specific configuration
- * @since 2.9.0
- */
-export interface NginxIngressConfig {
-    /** Enable SSL redirect */
-    sslRedirect?: boolean;
-    /** Force SSL redirect */
-    forceSSLRedirect?: boolean;
-    /** SSL protocols */
-    sslProtocols?: string;
-    /** SSL ciphers */
-    sslCiphers?: string;
-    /** Enable HSTS */
-    enableHSTS?: boolean;
-    /** HSTS max age */
-    hstsMaxAge?: number;
-    /** Include HSTS subdomains */
-    hstsIncludeSubdomains?: boolean;
-    /** Enable HSTS preload */
-    hstsPreload?: boolean;
-    /** Proxy body size */
-    proxyBodySize?: string;
-    /** Proxy connect timeout */
-    proxyConnectTimeout?: number;
-    /** Proxy send timeout */
-    proxySendTimeout?: number;
-    /** Proxy read timeout */
-    proxyReadTimeout?: number;
-    /** Enable CORS */
-    enableCORS?: boolean;
-    /** CORS allow origin */
-    corsAllowOrigin?: string;
-    /** CORS allow methods */
-    corsAllowMethods?: string;
-    /** CORS allow headers */
-    corsAllowHeaders?: string;
-    /** Rate limiting */
-    rateLimiting?: {
-        rps?: number;
-        rpm?: number;
-        connections?: number;
-    };
-    /** Custom configuration snippet */
-    configurationSnippet?: string;
-    /** Server snippet */
-    serverSnippet?: string;
-    /** Rewrite target */
-    rewriteTarget?: string;
-    /** Use regex in rewrite */
-    useRegex?: boolean;
-    /** Backend protocol */
-    backendProtocol?: 'HTTP' | 'HTTPS' | 'GRPC' | 'GRPCS';
-    /** Upstream hash by */
-    upstreamHashBy?: string;
-    /** Session affinity */
-    sessionAffinity?: 'cookie';
-    /** Session cookie name */
-    sessionCookieName?: string;
-    /** Session cookie expires */
-    sessionCookieExpires?: number;
-    /** Session cookie max age */
-    sessionCookieMaxAge?: number;
-    /** Session cookie path */
-    sessionCookiePath?: string;
-    /** Whitelist source range */
-    whitelistSourceRange?: string[];
-}
-/**
- * Cert-manager integration configuration
- * @since 2.9.0
- */
-export interface CertManagerConfig {
-    /** ClusterIssuer name */
-    clusterIssuer?: string;
-    /** Issuer name */
-    issuer?: string;
-    /** ACME challenge type */
-    acmeChallenge?: 'http01' | 'dns01';
-    /** Certificate class */
-    certificateClass?: string;
-}
-/**
- * Ingress specification with enhanced TLS validation and security defaults
- * @since 2.7.0
- */
-export interface IngressSpec {
-    /** Resource name */
-    name: string;
-    /** Ingress class name */
-    ingressClassName?: string;
-    /** TLS configuration with validation */
-    tls?: IngressTLSConfig[];
-    /** Ingress rules */
-    rules?: Array<{
-        host?: string;
-        http?: {
-            paths: Array<{
-                path?: string;
-                pathType?: 'Exact' | 'Prefix' | 'ImplementationSpecific';
-                backend: {
-                    service: {
-                        name: string;
-                        port: {
-                            number?: number;
-                            name?: string;
-                        };
-                    };
-                };
-            }>;
-        };
-    }>;
-    /** Environment for security validation (production requires TLS) */
-    environment?: IngressEnvironment;
-    /** Force TLS requirement regardless of environment */
-    requireTLS?: boolean;
-    /** Automatically redirect HTTP to HTTPS */
-    forceSSLRedirect?: boolean;
-    /** NGINX specific configuration */
-    nginx?: NginxIngressConfig;
-    /** Cert-manager integration */
-    certManager?: CertManagerConfig;
-    /** Resource labels */
-    labels?: Record<string, string>;
-    /** Resource annotations */
-    annotations?: Record<string, string>;
-}
-/**
- * Network resources provider for NetworkPolicy and Ingress
- * @extends BaseResourceProvider
- * @since 2.7.0
- */
-export declare class NetworkResources extends BaseResourceProvider {
-    /**
-     * Error message for missing TLS configuration in production environments
-     * @since 2.9.0
-     */
-    private static readonly TLS_REQUIRED_ERROR_MESSAGE;
-    /**
-     * Warning message for NetworkPolicy with default policy types
-     * @since 2.9.0
-     */
-    private static readonly NETWORK_POLICY_DEFAULT_WARNING;
-    /**
-     * Info message for NetworkPolicy template usage
-     * @since 2.9.0
-     */
-    private static readonly NETWORK_POLICY_TEMPLATE_INFO;
-    /**
-     * Kubernetes networking API version
-     * @since 2.9.0
-     */
-    private static readonly NETWORKING_API_VERSION;
-    /**
-     * Creates a NetworkPolicy resource with enhanced defaults
-     * @param spec - NetworkPolicy specification
-     * @returns Created NetworkPolicy ApiObject
-     * @since 2.7.0
-     */
-    addNetworkPolicy(spec: NetworkPolicySpec): ApiObject;
-    /**
-     * Creates a deny-all NetworkPolicy that blocks all ingress and egress traffic
-     * @param name - Policy name
-     * @param podSelector - Pod selector to apply policy to
-     * @param labels - Optional labels
-     * @param annotations - Optional annotations
-     * @returns Created NetworkPolicy ApiObject
-     * @since 2.7.0
-     */
-    addDenyAllNetworkPolicy(name: string, podSelector?: NetworkPolicySpec['podSelector'], labels?: Record<string, string>, annotations?: Record<string, string>): ApiObject;
-    /**
-     * Creates a NetworkPolicy that allows traffic from specific pods
-     * @param name - Policy name
-     * @param podSelector - Pod selector to apply policy to
-     * @param fromPodSelector - Pod selector for allowed source pods
-     * @param ports - Optional ports to allow
-     * @param labels - Optional labels
-     * @param annotations - Optional annotations
-     * @returns Created NetworkPolicy ApiObject
-     * @since 2.7.0
-     */
-    addAllowFromPodsNetworkPolicy(name: string, podSelector: NetworkPolicySpec['podSelector'], fromPodSelector: NetworkPolicyRule['podSelector'], ports?: NetworkPolicyRule['ports'], labels?: Record<string, string>, annotations?: Record<string, string>): ApiObject;
-    /**
-     * Creates a NetworkPolicy that allows traffic from specific namespaces
-     * @param name - Policy name
-     * @param podSelector - Pod selector to apply policy to
-     * @param fromNamespaceSelector - Namespace selector for allowed source namespaces
-     * @param ports - Optional ports to allow
-     * @param labels - Optional labels
-     * @param annotations - Optional annotations
-     * @returns Created NetworkPolicy ApiObject
-     * @since 2.7.0
-     */
-    addAllowFromNamespaceNetworkPolicy(name: string, podSelector: NetworkPolicySpec['podSelector'], fromNamespaceSelector: NetworkPolicyRule['namespaceSelector'], ports?: NetworkPolicyRule['ports'], labels?: Record<string, string>, annotations?: Record<string, string>): ApiObject;
-    /**
-     * Validates TLS configuration for security compliance
-     * @param spec - Ingress specification to validate
-     * @throws Error if TLS validation fails
-     * @since 2.8.0
-     */
-    private validateIngressSecurity;
-    /**
-     * Validates hostname format (supports wildcards) with ReDoS protection
-     * @param hostname - Hostname to validate
-     * @returns True if hostname is valid
-     * @since 2.8.0
-     */
-    private isValidHostname;
-    /**
-     * Applies NGINX Ingress specific annotations
-     * @param spec - Ingress specification
-     * @param annotations - Base annotations to enhance
-     * @returns Enhanced annotations with NGINX specific settings
-     * @since 2.9.0
-     */
-    private applyNginxAnnotations;
-    /**
-     * Apply SSL/TLS annotations
-     * @private
-     */
-    private applySSLAnnotations;
-    /**
-     * Apply HSTS annotations
-     * @private
-     */
-    private applyHSTSAnnotations;
-    /**
-     * Apply proxy annotations
-     * @private
-     */
-    private applyProxyAnnotations;
-    /**
-     * Apply CORS annotations
-     * @private
-     */
-    private applyCORSAnnotations;
-    /**
-     * Apply rate limiting annotations
-     * @private
-     */
-    private applyRateLimitingAnnotations;
-    /**
-     * Apply rewrite annotations
-     * @private
-     */
-    private applyRewriteAnnotations;
-    /**
-     * Apply backend annotations
-     * @private
-     */
-    private applyBackendAnnotations;
-    /**
-     * Apply session affinity annotations
-     * @private
-     */
-    private applySessionAffinityAnnotations;
-    /**
-     * Apply security annotations
-     * @private
-     */
-    private applySecurityAnnotations;
-    /**
-     * Apply custom annotations
-     * @private
-     */
-    private applyCustomAnnotations;
-    /**
-     * Applies cert-manager annotations for automatic certificate management
-     * @param spec - Ingress specification
-     * @param annotations - Base annotations to enhance
-     * @returns Enhanced annotations with cert-manager settings
-     * @since 2.9.0
-     */
-    private applyCertManagerAnnotations;
-    /**
-     * Applies security defaults to Ingress annotations
-     * @param spec - Ingress specification
-     * @returns Enhanced annotations with security defaults
-     * @since 2.8.0
-     */
-    private applySecurityDefaults;
-    /**
-     * Creates a secure Ingress with TLS validation and environment-aware defaults
-     * @param spec - Enhanced Ingress specification
-     * @returns Created Ingress ApiObject
-     * @example
-     * ```typescript
-     * // Production Ingress with mandatory TLS
-     * networkResources.addSecureIngress({
-     *   name: 'web-ingress',
-     *   environment: 'production',
-     *   tls: [{
-     *     hosts: ['example.com'],
-     *     secretName: 'example-tls'
-     *   }],
-     *   rules: [{
-     *     host: 'example.com',
-     *     http: {
-     *       paths: [{
-     *         path: '/',
-     *         pathType: 'Prefix',
-     *         backend: {
-     *           service: { name: 'web-service', port: { number: 80 } }
-     *         }
-     *       }]
-     *     }
-     *   }]
-     * });
-     * ```
-     * @since 2.8.0
-     */
-    addSecureIngress(spec: IngressSpec): ApiObject;
-    /**
-     * Creates an Ingress resource with optional TLS validation
-     * @param spec - Ingress specification
-     * @returns Created Ingress ApiObject
-     * @deprecated Use addSecureIngress for enhanced security validation
-     * @since 2.7.0
-     */
-    addIngress(spec: IngressSpec): ApiObject;
-    /**
-     * Creates an NGINX Ingress with enhanced configuration and cert-manager integration
-     * @param spec - Enhanced Ingress specification with NGINX and cert-manager support
-     * @returns Created Ingress ApiObject
-     * @example
-     * ```typescript
-     * // NGINX Ingress with Let's Encrypt and advanced features
-     * networkResources.addNginxIngress({
-     *   name: 'web-ingress',
-     *   ingressClassName: 'nginx',
-     *   environment: 'production',
-     *   rules: [{
-     *     host: 'example.com',
-     *     http: {
-     *       paths: [{
-     *         path: '/',
-     *         pathType: 'Prefix',
-     *         backend: {
-     *           service: { name: 'web-service', port: { number: 80 } }
-     *         }
-     *       }]
-     *     }
-     *   }],
-     *   tls: [{
-     *     hosts: ['example.com'],
-     *     secretName: 'example-tls'
-     *   }],
-     *   nginx: {
-     *     sslRedirect: true,
-     *     enableHSTS: true,
-     *     hstsMaxAge: 31536000,
-     *     proxyBodySize: '10m',
-     *     rateLimiting: { rps: 100 }
-     *   },
-     *   certManager: {
-     *     clusterIssuer: 'letsencrypt-prod'
-     *   }
-     * });
-     * ```
-     * @since 2.9.0
-     */
-    addNginxIngress(spec: IngressSpec): ApiObject;
-    /**
-     * Creates an NGINX Ingress with Let's Encrypt certificate automation
-     * @param name - Ingress name
-     * @param host - Primary hostname
-     * @param serviceName - Backend service name
-     * @param servicePort - Backend service port
-     * @param clusterIssuer - Let's Encrypt ClusterIssuer name
-     * @param additionalHosts - Additional hostnames
-     * @param path - URL path (default: '/')
-     * @param pathType - Path type (default: 'Prefix')
-     * @param nginxConfig - Optional NGINX configuration
-     * @param labels - Optional labels
-     * @param annotations - Optional additional annotations
-     * @returns Created Ingress ApiObject
-     * @example
-     * ```typescript
-     * // Simple NGINX Ingress with Let's Encrypt
-     * networkResources.addNginxIngressWithLetsEncrypt(
-     *   'web-ingress',
-     *   'example.com',
-     *   'web-service',
-     *   80,
-     *   'letsencrypt-prod',
-     *   ['www.example.com'],
-     *   '/',
-     *   'Prefix',
-     *   { enableHSTS: true, rateLimiting: { rps: 50 } }
-     * );
-     * ```
-     * @since 2.9.0
-     */
-    addNginxIngressWithLetsEncrypt(name: string, host: string, serviceName: string, servicePort: number, clusterIssuer: string, additionalHosts?: string[], path?: string, pathType?: 'Exact' | 'Prefix' | 'ImplementationSpecific', nginxConfig?: NginxIngressConfig, labels?: Record<string, string>, annotations?: Record<string, string>): ApiObject;
-    /**
-     * Gets predefined NetworkPolicy templates for common security patterns
-     * @returns Array of predefined NetworkPolicy templates
-     * @since 2.9.0
-     */
-    static getNetworkPolicyTemplates(): NetworkPolicyTemplate[];
-    /**
-     * Creates a NetworkPolicy from a predefined template
-     * @param templateName - Name of the predefined template
-     * @param name - Policy name
-     * @param podSelector - Pod selector to apply policy to
-     * @param labels - Optional labels
-     * @param annotations - Optional annotations
-     * @returns Created NetworkPolicy ApiObject
-     * @example
-     * ```typescript
-     * // Create a deny-all policy
-     * networkResources.addNetworkPolicyFromTemplate(
-     *   'deny-all',
-     *   'default-deny',
-     *   { matchLabels: { app: 'web' } }
-     * );
-     * ```
-     * @since 2.9.0
-     */
-    addNetworkPolicyFromTemplate(templateName: string, name: string, podSelector: NetworkPolicySpec['podSelector'], labels?: Record<string, string>, annotations?: Record<string, string>): ApiObject;
-}
-//# sourceMappingURL=networkResources.d.ts.map

package/dist/src/lib/resources/network/networkResources.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"networkResources.d.ts","sourceRoot":"","sources":["../../../../../src/lib/resources/network/networkResources.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAEvC,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAElE;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,qBAAqB;IACrB,KAAK,CAAC,EAAE,KAAK,CAAC;QACZ,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QACvB,QAAQ,CAAC,EAAE,KAAK,GAAG,KAAK,GAAG,MAAM,CAAC;KACnC,CAAC,CAAC;IACH,oCAAoC;IACpC,WAAW,CAAC,EAAE;QACZ,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACrC,gBAAgB,CAAC,EAAE,KAAK,CAAC;YACvB,GAAG,EAAE,MAAM,CAAC;YACZ,QAAQ,EAAE,IAAI,GAAG,OAAO,GAAG,QAAQ,GAAG,cAAc,CAAC;YACrD,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;SACnB,CAAC,CAAC;KACJ,CAAC;IACF,gDAAgD;IAChD,iBAAiB,CAAC,EAAE;QAClB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACrC,gBAAgB,CAAC,EAAE,KAAK,CAAC;YACvB,GAAG,EAAE,MAAM,CAAC;YACZ,QAAQ,EAAE,IAAI,GAAG,OAAO,GAAG,QAAQ,GAAG,cAAc,CAAC;YACrD,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;SACnB,CAAC,CAAC;KACJ,CAAC;CACH;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,oBAAoB;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,2BAA2B;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,mBAAmB;IACnB,WAAW,EAAE,KAAK,CAAC,SAAS,GAAG,QAAQ,CAAC,CAAC;IACzC,oBAAoB;IACpB,OAAO,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAC9B,mBAAmB;IACnB,MAAM,CAAC,EAAE,iBAAiB,EAAE,CAAC;CAC9B;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,oBAAoB;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,sCAAsC;IACtC,WAAW,EAAE;QACX,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACrC,gBAAgB,CAAC,EAAE,KAAK,CAAC;YACvB,GAAG,EAAE,MAAM,CAAC;YACZ,QAAQ,EAAE,IAAI,GAAG,OAAO,GAAG,QAAQ,GAAG,cAAc,CAAC;YACrD,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;SACnB,CAAC,CAAC;KACJ,CAAC;IACF,4BAA4B;IAC5B,WAAW,CAAC,EAAE,KAAK,CAAC,SAAS,GAAG,QAAQ,CAAC,CAAC;IAC1C,oBAAoB;IACpB,OAAO,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAC9B,mBAAmB;IACnB,MAAM,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAC7B,sBAAsB;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,2BAA2B;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,2CAA2C;IAC3C,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,gEAAgE;IAChE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;GAGG;AACH,MAAM,MAAM,kBAAkB,GAAG,aAAa,GAAG,SAAS,GAAG,YAAY,CAAC;AAE1E;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,0BAA0B;IAC1B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,yBAAyB;IACzB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,oBAAoB;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kBAAkB;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kBAAkB;IAClB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,mBAAmB;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,8BAA8B;IAC9B,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,0BAA0B;IAC1B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,sBAAsB;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,4BAA4B;IAC5B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,yBAAyB;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,yBAAyB;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,kBAAkB;IAClB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,wBAAwB;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,yBAAyB;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,yBAAyB;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,oBAAoB;IACpB,YAAY,CAAC,EAAE;QACb,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IACF,mCAAmC;IACnC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,qBAAqB;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,qBAAqB;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,2BAA2B;IAC3B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,uBAAuB;IACvB,eAAe,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC;IACtD,uBAAuB;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,uBAAuB;IACvB,eAAe,CAAC,EAAE,QAAQ,CAAC;IAC3B,0BAA0B;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,6BAA6B;IAC7B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,6BAA6B;IAC7B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,0BAA0B;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,6BAA6B;IAC7B,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;CACjC;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,yBAAyB;IACzB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kBAAkB;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0BAA0B;IAC1B,aAAa,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC;IACnC,wBAAwB;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,oBAAoB;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,yBAAyB;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,wCAAwC;IACxC,GAAG,CAAC,EAAE,gBAAgB,EAAE,CAAC;IACzB,oBAAoB;IACpB,KAAK,CAAC,EAAE,KAAK,CAAC;QACZ,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE;YACL,KAAK,EAAE,KAAK,CAAC;gBACX,IAAI,CAAC,EAAE,MAAM,CAAC;gBACd,QAAQ,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,wBAAwB,CAAC;gBACzD,OAAO,EAAE;oBACP,OAAO,EAAE;wBACP,IAAI,EAAE,MAAM,CAAC;wBACb,IAAI,EAAE;4BACJ,MAAM,CAAC,EAAE,MAAM,CAAC;4BAChB,IAAI,CAAC,EAAE,MAAM,CAAC;yBACf,CAAC;qBACH,CAAC;iBACH,CAAC;aACH,CAAC,CAAC;SACJ,CAAC;KACH,CAAC,CAAC;IACH,oEAAoE;IACpE,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC,sDAAsD;IACtD,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,2CAA2C;IAC3C,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,mCAAmC;IACnC,KAAK,CAAC,EAAE,kBAAkB,CAAC;IAC3B,+BAA+B;IAC/B,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,sBAAsB;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,2BAA2B;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC;AAED;;;;GAIG;AACH,qBAAa,gBAAiB,SAAQ,oBAAoB;IACxD;;;OAGG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,0BAA0B,CACsF;IAExI;;;OAGG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,8BAA8B,CAC8G;IAEpK;;;OAGG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,4BAA4B,CACuB;IAE3E;;;OAGG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAA0B;IAExE;;;;;OAKG;IACH,gBAAgB,CAAC,IAAI,EAAE,iBAAiB,GAAG,SAAS;IA6CpD;;;;;;;;OAQG;IACH,uBAAuB,CACrB,IAAI,EAAE,MAAM,EACZ,WAAW,GAAE,iBAAiB,CAAC,aAAa,CAAM,EAClD,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACnC,SAAS;IAYZ;;;;;;;;;;OAUG;IACH,6BAA6B,CAC3B,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,iBAAiB,CAAC,aAAa,CAAC,EAC7C,eAAe,EAAE,iBAAiB,CAAC,aAAa,CAAC,EACjD,KAAK,CAAC,EAAE,iBAAiB,CAAC,OAAO,CAAC,EAClC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACnC,SAAS;IAqBZ;;;;;;;;;;OAUG;IACH,kCAAkC,CAChC,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,iBAAiB,CAAC,aAAa,CAAC,EAC7C,qBAAqB,EAAE,iBAAiB,CAAC,mBAAmB,CAAC,EAC7D,KAAK,CAAC,EAAE,iBAAiB,CAAC,OAAO,CAAC,EAClC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACnC,SAAS;IAqBZ;;;;;OAKG;IACH,OAAO,CAAC,uBAAuB;IA8D/B;;;;;OAKG;IACH,OAAO,CAAC,eAAe;IAuBvB;;;;;;OAMG;IACH,OAAO,CAAC,qBAAqB;IAsB7B;;;OAGG;IACH,OAAO,CAAC,mBAAmB;IAmB3B;;;OAGG;IACH,OAAO,CAAC,oBAAoB;IAmB5B;;;OAGG;IACH,OAAO,CAAC,qBAAqB;IAqB7B;;;OAGG;IACH,OAAO,CAAC,oBAAoB;IAkB5B;;;OAGG;IACH,OAAO,CAAC,4BAA4B;IAoBpC;;;OAGG;IACH,OAAO,CAAC,uBAAuB;IAY/B;;;OAGG;IACH,OAAO,CAAC,uBAAuB;IAY/B;;;OAGG;IACH,OAAO,CAAC,+BAA+B;IAuBvC;;;OAGG;IACH,OAAO,CAAC,wBAAwB;IAUhC;;;OAGG;IACH,OAAO,CAAC,sBAAsB;IAY9B;;;;;;OAMG;IACH,OAAO,CAAC,2BAA2B;IA6BnC;;;;;OAKG;IACH,OAAO,CAAC,qBAAqB;IAqC7B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6BG;IACH,gBAAgB,CAAC,IAAI,EAAE,WAAW,GAAG,SAAS;IAgC9C;;;;;;OAMG;IACH,UAAU,CAAC,IAAI,EAAE,WAAW,GAAG,SAAS;IAuDxC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAwCG;IACH,eAAe,CAAC,IAAI,EAAE,WAAW,GAAG,SAAS;IAW7C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BG;IACH,8BAA8B,CAC5B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,MAAM,EACrB,eAAe,GAAE,MAAM,EAAO,EAC9B,IAAI,GAAE,MAAY,EAClB,QAAQ,GAAE,OAAO,GAAG,QAAQ,GAAG,wBAAmC,EAClE,WAAW,CAAC,EAAE,kBAAkB,EAChC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACnC,SAAS;IAgDZ;;;;OAIG;IACH,MAAM,CAAC,yBAAyB,IAAI,qBAAqB,EAAE;IA+C3D;;;;;;;;;;;;;;;;;;OAkBG;IACH,4BAA4B,CAC1B,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,iBAAiB,CAAC,aAAa,CAAC,EAC7C,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACnC,SAAS;CA4Bb"}