typekro 0.10.0 → 0.11.0

package/dist/factories/ory/compositions/ory-platform-stack.js

@@ -0,0 +1,536 @@
+import { type } from 'arktype';
+import { kubernetesComposition } from '../../../core/composition/imperative.js';
+import { Cel } from '../../../core/references/cel.js';
+import { isKubernetesRef } from '../../../utils/type-guards.js';
+import { cluster } from '../../cnpg/resources/cluster.js';
+import { secret } from '../../kubernetes/config/secret.js';
+import { configMap } from '../../kubernetes/config/config-map.js';
+import { customResource } from '../../kubernetes/extensions/custom-resource.js';
+import { simple } from '../../simple/index.js';
+import { OryPlatformStackConfigSchema, OryPlatformStackStatusSchema, } from '../types.js';
+import { oryIdentityStack } from './ory-identity-stack.js';
+import { oathkeeperRule } from '../resources/oathkeeper-rule.js';
+const apisixRouteSpecSchema = type({
+    'http?': 'object[]',
+});
+function dependencySources(config) {
+    const routeSource = (url, resourceName) => defined({ mode: 'managed', resourceName, url });
+    return {
+        hydra: {
+            database: { dsn: { mode: 'managed', resourceName: config.hydraDatabaseSecretName, secretKey: 'uri' } },
+            systemSecret: { mode: 'managed', secretName: config.hydraSystemSecretName, secretKey: 'system' },
+            issuerUrl: { url: routeSource(config.hydraPublicRouteUrl, config.hydraPublicRouteName) },
+            loginUrl: { url: routeSource(config.kratosPublicRouteUrl, config.kratosPublicRouteName) },
+            consentUrl: { url: routeSource(config.kratosPublicRouteUrl, config.kratosPublicRouteName) },
+            logoutUrl: { url: routeSource(config.kratosPublicRouteUrl, config.kratosPublicRouteName) },
+        },
+        kratos: {
+            database: { dsn: { mode: 'managed', resourceName: config.kratosDatabaseSecretName, secretKey: 'uri' } },
+            publicBaseUrl: { url: routeSource(config.kratosPublicRouteUrl, config.kratosPublicRouteName) },
+            browserBaseUrl: { url: routeSource(config.kratosPublicRouteUrl, config.kratosPublicRouteName) },
+            secrets: {
+                cookie: { mode: 'managed', secretName: config.kratosSecretsName, secretKey: 'cookie' },
+                cipher: { mode: 'managed', secretName: config.kratosSecretsName, secretKey: 'cipher' },
+            },
+        },
+        keto: {
+            database: { dsn: { mode: 'managed', resourceName: config.ketoDatabaseSecretName, secretKey: 'uri' } },
+        },
+        oathkeeper: {
+            proxyRoute: { url: routeSource(config.oathkeeperProxyRouteUrl, config.oathkeeperProxyRouteName) },
+            apiRoute: { url: routeSource(config.oathkeeperApiRouteUrl, config.oathkeeperApiRouteName) },
+            upstream: { url: { mode: 'managed', resourceName: config.sampleUpstreamName } },
+            mutatorIdTokenJwks: { mode: 'managed', secretName: config.oathkeeperSecretsName, secretKey: 'jwks' },
+        },
+    };
+}
+function managedDependencySources(config, managed) {
+    const defaults = dependencySources(config);
+    const manageDatabases = managedFlagEnabled(managed, 'databases');
+    const manageSecrets = managedFlagEnabled(managed, 'secrets');
+    const manageRoutes = managedFlagEnabled(managed, 'routes');
+    const manageSampleUpstream = managedFlagEnabled(managed, 'sampleUpstream');
+    const hydra = {};
+    const kratos = {};
+    const keto = {};
+    const oathkeeper = {};
+    if (manageDatabases) {
+        if (defaults.hydra?.database)
+            hydra.database = defaults.hydra.database;
+        if (defaults.kratos?.database)
+            kratos.database = defaults.kratos.database;
+        if (defaults.keto?.database)
+            keto.database = defaults.keto.database;
+    }
+    if (manageSecrets) {
+        if (defaults.hydra?.systemSecret)
+            hydra.systemSecret = defaults.hydra.systemSecret;
+        if (defaults.kratos?.secrets)
+            kratos.secrets = defaults.kratos.secrets;
+        if (defaults.oathkeeper?.mutatorIdTokenJwks) {
+            oathkeeper.mutatorIdTokenJwks = defaults.oathkeeper.mutatorIdTokenJwks;
+        }
+    }
+    if (manageRoutes) {
+        if (defaults.hydra?.issuerUrl)
+            hydra.issuerUrl = defaults.hydra.issuerUrl;
+        if (defaults.hydra?.loginUrl)
+            hydra.loginUrl = defaults.hydra.loginUrl;
+        if (defaults.hydra?.consentUrl)
+            hydra.consentUrl = defaults.hydra.consentUrl;
+        if (defaults.hydra?.logoutUrl)
+            hydra.logoutUrl = defaults.hydra.logoutUrl;
+        if (defaults.kratos?.publicBaseUrl)
+            kratos.publicBaseUrl = defaults.kratos.publicBaseUrl;
+        if (defaults.kratos?.browserBaseUrl)
+            kratos.browserBaseUrl = defaults.kratos.browserBaseUrl;
+        if (defaults.oathkeeper?.proxyRoute)
+            oathkeeper.proxyRoute = defaults.oathkeeper.proxyRoute;
+        if (defaults.oathkeeper?.apiRoute)
+            oathkeeper.apiRoute = defaults.oathkeeper.apiRoute;
+    }
+    if (manageSampleUpstream) {
+        if (defaults.oathkeeper?.upstream)
+            oathkeeper.upstream = defaults.oathkeeper.upstream;
+    }
+    return {
+        hydra,
+        kratos,
+        keto,
+        oathkeeper,
+        ...(managed?.courierSes ? { courier: { mode: 'managed', resourceName: config.courierSesName } } : {}),
+    };
+}
+function managedFlagEnabled(managed, key) {
+    return managed?.[key] !== false;
+}
+function apisixRoute(id, name, namespace, host, serviceName, servicePort) {
+    return customResource({ apiVersion: 'apisix.apache.org/v2', kind: 'ApisixRoute', spec: apisixRouteSpecSchema }, {
+        id,
+        metadata: { name, namespace },
+        spec: {
+            http: [
+                {
+                    name,
+                    match: { hosts: [host], paths: ['/*'] },
+                    backends: [{ serviceName, servicePort }],
+                },
+            ],
+        },
+    });
+}
+function mergeDependencySources(managed, explicit) {
+    const hydra = explicit?.hydra;
+    const kratos = explicit?.kratos;
+    const keto = explicit?.keto;
+    const oathkeeper = explicit?.oathkeeper;
+    return defined({
+        hydra: defined({
+            database: defined({
+                dsn: mergeDependencySource(managed.hydra?.database?.dsn, hydra?.database?.dsn),
+                databaseName: hydra?.database?.databaseName ?? managed.hydra?.database?.databaseName,
+            }),
+            systemSecret: mergeDependencySource(managed.hydra?.systemSecret, hydra?.systemSecret),
+            issuerUrl: defined({
+                url: mergeDependencySource(managed.hydra?.issuerUrl?.url, hydra?.issuerUrl?.url),
+            }),
+            loginUrl: defined({
+                url: mergeDependencySource(managed.hydra?.loginUrl?.url, hydra?.loginUrl?.url),
+            }),
+            consentUrl: defined({
+                url: mergeDependencySource(managed.hydra?.consentUrl?.url, hydra?.consentUrl?.url),
+            }),
+            logoutUrl: defined({
+                url: mergeDependencySource(managed.hydra?.logoutUrl?.url, hydra?.logoutUrl?.url),
+            }),
+        }),
+        kratos: defined({
+            database: defined({
+                dsn: mergeDependencySource(managed.kratos?.database?.dsn, kratos?.database?.dsn),
+                databaseName: kratos?.database?.databaseName ?? managed.kratos?.database?.databaseName,
+            }),
+            publicBaseUrl: defined({
+                url: mergeDependencySource(managed.kratos?.publicBaseUrl?.url, kratos?.publicBaseUrl?.url),
+            }),
+            browserBaseUrl: defined({
+                url: mergeDependencySource(managed.kratos?.browserBaseUrl?.url, kratos?.browserBaseUrl?.url),
+            }),
+            secrets: defined({
+                cookie: mergeDependencySource(managed.kratos?.secrets?.cookie, kratos?.secrets?.cookie),
+                cipher: mergeDependencySource(managed.kratos?.secrets?.cipher, kratos?.secrets?.cipher),
+            }),
+            courier: mergeDependencySource(managed.kratos?.courier, kratos?.courier),
+        }),
+        keto: defined({
+            database: defined({
+                dsn: mergeDependencySource(managed.keto?.database?.dsn, keto?.database?.dsn),
+                databaseName: keto?.database?.databaseName ?? managed.keto?.database?.databaseName,
+            }),
+        }),
+        oathkeeper: defined({
+            proxyRoute: defined({
+                url: mergeDependencySource(managed.oathkeeper?.proxyRoute?.url, oathkeeper?.proxyRoute?.url),
+            }),
+            apiRoute: defined({
+                url: mergeDependencySource(managed.oathkeeper?.apiRoute?.url, oathkeeper?.apiRoute?.url),
+            }),
+            upstream: defined({
+                url: mergeDependencySource(managed.oathkeeper?.upstream?.url, oathkeeper?.upstream?.url),
+            }),
+            mutatorIdTokenJwks: mergeDependencySource(managed.oathkeeper?.mutatorIdTokenJwks, oathkeeper?.mutatorIdTokenJwks),
+        }),
+        courier: mergeDependencySource(managed.courier, explicit?.courier),
+    });
+}
+function defined(value) {
+    return Object.fromEntries(Object.entries(value).filter(([, entry]) => entry !== undefined));
+}
+function mergeDependencySource(defaults, explicit) {
+    if (!defaults)
+        return explicit;
+    if (!explicit)
+        return defaults;
+    const explicitValue = explicit.value;
+    const defaultManaged = defaults.mode === 'managed' ? defaults : undefined;
+    const explicitManaged = explicit.mode === 'managed' ? explicit : undefined;
+    return defined({
+        mode: defaulted(explicit.mode, defaults.mode),
+        value: explicitValue,
+        url: defaulted(explicit.url, defaults.url),
+        resourceName: defaulted(explicit.resourceName, defaults.resourceName),
+        namespace: defaulted(explicitManaged?.namespace, defaultManaged?.namespace),
+        secretName: defaulted(explicitManaged?.secretName, defaultManaged?.secretName),
+        secretKey: defaulted(explicitManaged?.secretKey, defaultManaged?.secretKey),
+    });
+}
+function defaulted(explicit, fallback) {
+    if (explicit === undefined)
+        return fallback;
+    if (fallback !== undefined && isKubernetesRef(explicit)) {
+        return Cel.default(explicit, fallback);
+    }
+    return explicit;
+}
+function mode(value) {
+    return value?.mode ?? 'external';
+}
+function routeEndpoint(url, port = 80) {
+    const parsed = new URL(url);
+    const parsedPort = parsed.port ? Number(parsed.port) : parsed.protocol === 'https:' ? 443 : port;
+    return {
+        url,
+        scheme: parsed.protocol.replace(':', ''),
+        host: parsed.hostname,
+        port: parsedPort,
+    };
+}
+function serviceEndpoint(stackName, serviceSuffix, namespaceName, port, scheme = 'http') {
+    const serviceName = Cel.template('%s-%s', stackName, serviceSuffix);
+    const host = Cel.template('%s-%s.%s.svc.cluster.local', stackName, serviceSuffix, namespaceName);
+    return {
+        url: Cel.template(`${scheme}://%s-%s.%s.svc.cluster.local:${port}`, stackName, serviceSuffix, namespaceName),
+        scheme,
+        host,
+        port,
+        serviceName,
+        namespace: namespaceName,
+    };
+}
+function hasPath(path) {
+    const parts = path.split('.');
+    const guards = [];
+    for (let index = 2; index < parts.length; index++) {
+        guards.push(`has(${parts.slice(0, index + 1).join('.')})`);
+    }
+    return guards.join(' && ');
+}
+function platformGraphUrl(sourcePath, explicitPath, fallback) {
+    const sourceUrlPath = `${sourcePath}.url`;
+    const sourceNamePath = `${sourcePath}.resourceName`;
+    return Cel.expr(`(${hasPath(sourceUrlPath)} ? ${sourceUrlPath} : (${hasPath(explicitPath)} ? ${explicitPath} : (${hasPath(sourceNamePath)} ? "http://" + string(${sourceNamePath}) : ${JSON.stringify(fallback)})))`);
+}
+function platformEndpoints(stackName, namespaceName, emitRouteResources) {
+    return {
+        hydraPublic: emitRouteResources
+            ? routeEndpoint('http://hydra.localhost')
+            : serviceEndpoint(stackName, 'hydra-public', namespaceName, 4444),
+        hydraAdmin: serviceEndpoint(stackName, 'hydra-admin', namespaceName, 4445),
+        kratosPublic: emitRouteResources
+            ? routeEndpoint('http://kratos.localhost')
+            : serviceEndpoint(stackName, 'kratos-public', namespaceName, 4433),
+        kratosAdmin: serviceEndpoint(stackName, 'kratos-admin', namespaceName, 4434),
+        ketoRead: serviceEndpoint(stackName, 'keto-read', namespaceName, 4466),
+        ketoWrite: serviceEndpoint(stackName, 'keto-write', namespaceName, 4467),
+        oathkeeperProxy: emitRouteResources
+            ? routeEndpoint('http://identity.localhost', 4455)
+            : serviceEndpoint(stackName, 'oathkeeper-proxy', namespaceName, 4455),
+        oathkeeperApi: emitRouteResources
+            ? routeEndpoint('http://oathkeeper-api.localhost', 4456)
+            : serviceEndpoint(stackName, 'oathkeeper-api', namespaceName, 4456),
+    };
+}
+function isSchemaSpec(value) {
+    return (!!value &&
+        typeof value === 'object' &&
+        value.__schemaProxyBasePath === 'spec');
+}
+export const oryPlatformStack = kubernetesComposition({
+    name: 'ory-platform-stack',
+    kind: 'OryPlatformStack',
+    spec: OryPlatformStackConfigSchema,
+    status: OryPlatformStackStatusSchema,
+}, (spec) => {
+    const namespaceName = spec.namespace ?? 'ory-system';
+    const concreteSpec = !isSchemaSpec(spec) &&
+        ![spec.name, spec.namespace, spec.managed, spec.dependencySources].some((value) => isKubernetesRef(value));
+    const manageDatabasesIncludeWhen = Cel.expr('!has(schema.spec.managed) || !has(schema.spec.managed.databases) || schema.spec.managed.databases != false');
+    let manageDatabases = manageDatabasesIncludeWhen;
+    let manageSecrets = Cel.expr('!has(schema.spec.managed) || !has(schema.spec.managed.secrets) || schema.spec.managed.secrets != false');
+    let manageRoutes = Cel.expr('!has(schema.spec.managed) || !has(schema.spec.managed.routes) || schema.spec.managed.routes != false');
+    let manageSampleUpstream = Cel.expr('!has(schema.spec.managed) || !has(schema.spec.managed.sampleUpstream) || schema.spec.managed.sampleUpstream != false');
+    if (concreteSpec) {
+        manageDatabases = managedFlagEnabled(spec.managed, 'databases');
+        manageSecrets = managedFlagEnabled(spec.managed, 'secrets');
+        manageRoutes = managedFlagEnabled(spec.managed, 'routes');
+        manageSampleUpstream = managedFlagEnabled(spec.managed, 'sampleUpstream');
+    }
+    const createManagedDatabases = !concreteSpec || manageDatabases;
+    const createManagedSecrets = !concreteSpec || manageSecrets;
+    const createManagedSampleUpstream = !concreteSpec || manageSampleUpstream;
+    const emitRouteResources = manageRoutes && concreteSpec;
+    let hydraDatabaseSecretName = `${spec.name}-hydra-db-app`;
+    let kratosDatabaseSecretName = `${spec.name}-kratos-db-app`;
+    let ketoDatabaseSecretName = `${spec.name}-keto-db-app`;
+    let hydraSystemSecretName = `${spec.name}-hydra-secrets`;
+    let kratosSecretsName = `${spec.name}-kratos-secrets`;
+    let oathkeeperSecretsName = `${spec.name}-oathkeeper-secrets`;
+    let sampleUpstreamName = `${spec.name}-sample-upstream`;
+    const hydraConfig = concreteSpec
+        ? spec.hydra
+        : {
+            ...(spec.hydra ?? {}),
+            issuerUrl: platformGraphUrl('schema.spec.dependencySources.hydra.issuerUrl.url', 'schema.spec.hydra.issuerUrl', 'http://hydra.localhost'),
+            loginUrl: platformGraphUrl('schema.spec.dependencySources.hydra.loginUrl.url', 'schema.spec.hydra.loginUrl', 'http://kratos.localhost'),
+            consentUrl: platformGraphUrl('schema.spec.dependencySources.hydra.consentUrl.url', 'schema.spec.hydra.consentUrl', 'http://kratos.localhost'),
+            logoutUrl: platformGraphUrl('schema.spec.dependencySources.hydra.logoutUrl.url', 'schema.spec.hydra.logoutUrl', 'http://kratos.localhost'),
+        };
+    const kratosConfig = concreteSpec
+        ? spec.kratos
+        : {
+            ...(spec.kratos ?? {}),
+            publicBaseUrl: platformGraphUrl('schema.spec.dependencySources.kratos.publicBaseUrl.url', 'schema.spec.kratos.publicBaseUrl', 'http://kratos.localhost'),
+            browserBaseUrl: platformGraphUrl('schema.spec.dependencySources.kratos.browserBaseUrl.url', 'schema.spec.kratos.browserBaseUrl', 'http://kratos.localhost'),
+        };
+    if (createManagedDatabases) {
+        cluster({
+            id: 'hydraDatabase',
+            name: `${spec.name}-hydra-db`,
+            namespace: namespaceName,
+            spec: {
+                instances: 1,
+                storage: { size: '1Gi' },
+                bootstrap: { initdb: { database: 'hydra', owner: 'hydra' } },
+            },
+        }).withIncludeWhen(manageDatabasesIncludeWhen);
+        hydraDatabaseSecretName = `${spec.name}-hydra-db-app`;
+        secret({
+            id: 'hydraDsnSecret',
+            metadata: { name: `${spec.name}-hydra-db`, namespace: namespaceName },
+            type: 'Opaque',
+            stringData: { dsn: `postgres://hydra@${spec.name}-hydra-db-rw.${namespaceName}.svc.cluster.local:5432/hydra` },
+        }).withIncludeWhen(manageDatabasesIncludeWhen);
+        cluster({
+            id: 'kratosDatabase',
+            name: `${spec.name}-kratos-db`,
+            namespace: namespaceName,
+            spec: {
+                instances: 1,
+                storage: { size: '1Gi' },
+                bootstrap: { initdb: { database: 'kratos', owner: 'kratos' } },
+            },
+        }).withIncludeWhen(manageDatabasesIncludeWhen);
+        kratosDatabaseSecretName = `${spec.name}-kratos-db-app`;
+        secret({
+            id: 'kratosDsnSecret',
+            metadata: { name: `${spec.name}-kratos-db`, namespace: namespaceName },
+            type: 'Opaque',
+            stringData: { dsn: `postgres://kratos@${spec.name}-kratos-db-rw.${namespaceName}.svc.cluster.local:5432/kratos` },
+        }).withIncludeWhen(manageDatabasesIncludeWhen);
+        cluster({
+            id: 'ketoDatabase',
+            name: `${spec.name}-keto-db`,
+            namespace: namespaceName,
+            spec: {
+                instances: 1,
+                storage: { size: '1Gi' },
+                bootstrap: { initdb: { database: 'keto', owner: 'keto' } },
+            },
+        }).withIncludeWhen(manageDatabasesIncludeWhen);
+        ketoDatabaseSecretName = `${spec.name}-keto-db-app`;
+        secret({
+            id: 'ketoDsnSecret',
+            metadata: { name: `${spec.name}-keto-db`, namespace: namespaceName },
+            type: 'Opaque',
+            stringData: { dsn: `postgres://keto@${spec.name}-keto-db-rw.${namespaceName}.svc.cluster.local:5432/keto` },
+        }).withIncludeWhen(manageDatabasesIncludeWhen);
+    }
+    if (createManagedSecrets) {
+        const hydraSystemSecret = secret({
+            id: 'hydraSystemSecret',
+            metadata: {
+                name: `${spec.name}-hydra-secrets`,
+                namespace: namespaceName,
+                annotations: { 'typekro.dev/local-default': 'true' },
+            },
+            type: 'Opaque',
+            stringData: { system: 'hydra-local-system-secret-000000' },
+        }).withIncludeWhen(manageSecrets);
+        hydraSystemSecretName = hydraSystemSecret.metadata.name ?? hydraSystemSecretName;
+        const kratosSecrets = secret({
+            id: 'kratosSecrets',
+            metadata: {
+                name: `${spec.name}-kratos-secrets`,
+                namespace: namespaceName,
+                annotations: { 'typekro.dev/local-default': 'true' },
+            },
+            type: 'Opaque',
+            stringData: {
+                cookie: 'kratos-local-cookie-secret-00000',
+                cipher: 'kratos-local-cipher-secret-00010',
+            },
+        }).withIncludeWhen(manageSecrets);
+        kratosSecretsName = kratosSecrets.metadata.name ?? kratosSecretsName;
+        const oathkeeperSecrets = secret({
+            id: 'oathkeeperSecrets',
+            metadata: {
+                name: `${spec.name}-oathkeeper-secrets`,
+                namespace: namespaceName,
+                annotations: { 'typekro.dev/local-default': 'true' },
+            },
+            type: 'Opaque',
+            stringData: { jwks: '{"keys":[]}' },
+        }).withIncludeWhen(manageSecrets);
+        oathkeeperSecretsName = oathkeeperSecrets.metadata.name ?? oathkeeperSecretsName;
+    }
+    if (createManagedSampleUpstream) {
+        simple.Deployment({
+            id: 'sampleUpstream',
+            name: `${spec.name}-sample-upstream`,
+            namespace: namespaceName,
+            image: 'nginx:1.27-alpine',
+            replicas: 1,
+            ports: [{ containerPort: 80 }],
+        }).withIncludeWhen(manageSampleUpstream);
+        const sampleUpstreamService = simple.Service({
+            id: 'sampleUpstreamService',
+            name: `${spec.name}-sample-upstream`,
+            namespace: namespaceName,
+            selector: { app: `${spec.name}-sample-upstream` },
+            ports: [{ port: 80, targetPort: 80 }],
+        }).withIncludeWhen(manageSampleUpstream);
+        sampleUpstreamName = sampleUpstreamService.metadata.name ?? sampleUpstreamName;
+    }
+    const managedSources = managedDependencySources({
+        hydraDatabaseSecretName,
+        hydraSystemSecretName,
+        kratosDatabaseSecretName,
+        kratosSecretsName,
+        ketoDatabaseSecretName,
+        oathkeeperSecretsName,
+        hydraPublicRouteUrl: 'http://hydra.localhost',
+        kratosPublicRouteUrl: 'http://kratos.localhost',
+        oathkeeperProxyRouteUrl: 'http://identity.localhost',
+        oathkeeperApiRouteUrl: 'http://oathkeeper-api.localhost',
+        ...(concreteSpec
+            ? {
+                hydraPublicRouteName: `${spec.name}-hydra-public-route`,
+                kratosPublicRouteName: `${spec.name}-kratos-public-route`,
+                oathkeeperProxyRouteName: `${spec.name}-oathkeeper-proxy-route`,
+                oathkeeperApiRouteName: `${spec.name}-oathkeeper-api-route`,
+            }
+            : {}),
+        sampleUpstreamName,
+        courierSesName: `${spec.name}-courier-ses`,
+    }, concreteSpec
+        ? { ...spec.managed, routes: emitRouteResources }
+        : {
+            databases: true,
+            secrets: true,
+            routes: true,
+            sampleUpstream: true,
+            ...(spec.managed?.courierSes !== undefined ? { courierSes: spec.managed.courierSes } : {}),
+        });
+    const resolvedSources = mergeDependencySources(managedSources, spec.dependencySources);
+    const ory = oryIdentityStack({
+        ...spec,
+        hydra: hydraConfig,
+        kratos: kratosConfig,
+        namespace: namespaceName,
+        dependencySources: resolvedSources,
+    });
+    const oryStatus = {
+        ready: ory.status.ready,
+        phase: Cel.expr(ory.status.ready, ' ? "Ready" : "Installing"'),
+        components: {
+            hydra: ory.status.components.hydra,
+            kratos: ory.status.components.kratos,
+            keto: ory.status.components.keto,
+            oathkeeper: ory.status.components.oathkeeper,
+        },
+        maester: {
+            hydra: ory.status.maester.hydra,
+            oathkeeper: ory.status.maester.oathkeeper,
+        },
+        endpoints: platformEndpoints(spec.name, namespaceName, emitRouteResources),
+        version: Cel.template('%s', spec.version ?? '0.62.0'),
+    };
+    configMap({
+        id: 'oryPlatformStackMetadata',
+        metadata: { name: `${spec.name}-platform-metadata`, namespace: namespaceName },
+        data: {
+            'oryIdentityStack': spec.name,
+            'dependencies': 'managed-or-external',
+        },
+    });
+    if (emitRouteResources) {
+        oathkeeperRule({
+            id: 'sampleUpstreamOathkeeperRule',
+            name: `${spec.name}-sample-upstream`,
+            namespace: namespaceName,
+            spec: {
+                match: { methods: ['GET'], url: 'http://identity.localhost/<.*>' },
+                upstream: { url: `http://${sampleUpstreamName}.${namespaceName}.svc.cluster.local` },
+                authenticators: [{ handler: 'anonymous' }],
+                authorizer: { handler: 'allow' },
+                mutators: [{ handler: 'noop' }],
+            },
+        });
+        apisixRoute('hydraPublicApisixRoute', `${spec.name}-hydra-public-route`, namespaceName, 'hydra.localhost', `${spec.name}-hydra-public`, 4444);
+        apisixRoute('kratosPublicApisixRoute', `${spec.name}-kratos-public-route`, namespaceName, 'kratos.localhost', `${spec.name}-kratos-public`, 4433);
+        apisixRoute('oathkeeperProxyApisixRoute', `${spec.name}-oathkeeper-proxy-route`, namespaceName, 'identity.localhost', `${spec.name}-oathkeeper-proxy`, 4455);
+        apisixRoute('oathkeeperApiApisixRoute', `${spec.name}-oathkeeper-api-route`, namespaceName, 'oathkeeper-api.localhost', `${spec.name}-oathkeeper-api`, 4456);
+    }
+    return {
+        ready: ory.status.ready,
+        phase: Cel.expr(ory.status.ready, ' ? "Ready" : "Installing"'),
+        infrastructure: {
+            databases: manageDatabases,
+            secrets: manageSecrets,
+            routes: emitRouteResources,
+            upstream: manageSampleUpstream,
+            courier: spec.managed?.courierSes ?? false,
+        },
+        dependencies: {
+            hydraDatabase: mode(resolvedSources.hydra?.database?.dsn),
+            kratosDatabase: mode(resolvedSources.kratos?.database?.dsn),
+            ketoDatabase: mode(resolvedSources.keto?.database?.dsn),
+            secrets: mode(resolvedSources.hydra?.systemSecret),
+            routes: mode(resolvedSources.oathkeeper?.proxyRoute?.url),
+            upstream: mode(resolvedSources.oathkeeper?.upstream?.url),
+            courier: mode(resolvedSources.courier),
+        },
+        ory: oryStatus,
+        endpoints: oryStatus.endpoints,
+    };
+});
+//# sourceMappingURL=ory-platform-stack.js.map

package/dist/factories/ory/compositions/ory-platform-stack.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ory-platform-stack.js","sourceRoot":"","sources":["../../../../src/factories/ory/compositions/ory-platform-stack.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,IAAI,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EAAE,GAAG,EAAE,MAAM,iCAAiC,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,OAAO,EAAE,MAAM,iCAAiC,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,MAAM,mCAAmC,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,uCAAuC,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,gDAAgD,CAAC;AAChF,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAML,4BAA4B,EAC5B,4BAA4B,GAE7B,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAEjE,MAAM,qBAAqB,GAAG,IAAI,CAAC;IACjC,OAAO,EAAE,UAAU;CACpB,CAAC,CAAC;AAEH,SAAS,iBAAiB,CAAC,MAiB1B;IACC,MAAM,WAAW,GAAG,CAAC,GAAW,EAAE,YAAqB,EAAuB,EAAE,CAC9E,OAAO,CAAC,EAAE,IAAI,EAAE,SAAkB,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC;IAE3D,OAAO;QACL,KAAK,EAAE;YACL,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,CAAC,uBAAuB,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE;YACtG,YAAY,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,qBAAqB,EAAE,SAAS,EAAE,QAAQ,EAAE;YAChG,SAAS,EAAE,EAAE,GAAG,EAAE,WAAW,CAAC,MAAM,CAAC,mBAAmB,EAAE,MAAM,CAAC,oBAAoB,CAAC,EAAE;YACxF,QAAQ,EAAE,EAAE,GAAG,EAAE,WAAW,CAAC,MAAM,CAAC,oBAAoB,EAAE,MAAM,CAAC,qBAAqB,CAAC,EAAE;YACzF,UAAU,EAAE,EAAE,GAAG,EAAE,WAAW,CAAC,MAAM,CAAC,oBAAoB,EAAE,MAAM,CAAC,qBAAqB,CAAC,EAAE;YAC3F,SAAS,EAAE,EAAE,GAAG,EAAE,WAAW,CAAC,MAAM,CAAC,oBAAoB,EAAE,MAAM,CAAC,qBAAqB,CAAC,EAAE;SAC3F;QACD,MAAM,EAAE;YACN,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,CAAC,wBAAwB,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE;YACvG,aAAa,EAAE,EAAE,GAAG,EAAE,WAAW,CAAC,MAAM,CAAC,oBAAoB,EAAE,MAAM,CAAC,qBAAqB,CAAC,EAAE;YAC9F,cAAc,EAAE,EAAE,GAAG,EAAE,WAAW,CAAC,MAAM,CAAC,oBAAoB,EAAE,MAAM,CAAC,qBAAqB,CAAC,EAAE;YAC/F,OAAO,EAAE;gBACP,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,iBAAiB,EAAE,SAAS,EAAE,QAAQ,EAAE;gBACtF,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,iBAAiB,EAAE,SAAS,EAAE,QAAQ,EAAE;aACvF;SACF;QACD,IAAI,EAAE;YACJ,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,CAAC,sBAAsB,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE;SACtG;QACD,UAAU,EAAE;YACV,UAAU,EAAE,EAAE,GAAG,EAAE,WAAW,CAAC,MAAM,CAAC,uBAAuB,EAAE,MAAM,CAAC,wBAAwB,CAAC,EAAE;YACjG,QAAQ,EAAE,EAAE,GAAG,EAAE,WAAW,CAAC,MAAM,CAAC,qBAAqB,EAAE,MAAM,CAAC,sBAAsB,CAAC,EAAE;YAC3F,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,CAAC,kBAAkB,EAAE,EAAE;YAC/E,kBAAkB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,qBAAqB,EAAE,SAAS,EAAE,MAAM,EAAE;SACrG;KACF,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAC/B,MAA+C,EAC/C,OAA0C;IAE1C,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,eAAe,GAAG,kBAAkB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACjE,MAAM,aAAa,GAAG,kBAAkB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC7D,MAAM,YAAY,GAAG,kBAAkB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC3D,MAAM,oBAAoB,GAAG,kBAAkB,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAoD,EAAE,CAAC;IAClE,MAAM,MAAM,GAAqD,EAAE,CAAC;IACpE,MAAM,IAAI,GAAmD,EAAE,CAAC;IAChE,MAAM,UAAU,GAAyD,EAAE,CAAC;IAE5E,IAAI,eAAe,EAAE,CAAC;QACpB,IAAI,QAAQ,CAAC,KAAK,EAAE,QAAQ;YAAE,KAAK,CAAC,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;QACvE,IAAI,QAAQ,CAAC,MAAM,EAAE,QAAQ;YAAE,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC1E,IAAI,QAAQ,CAAC,IAAI,EAAE,QAAQ;YAAE,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC;IACtE,CAAC;IACD,IAAI,aAAa,EAAE,CAAC;QAClB,IAAI,QAAQ,CAAC,KAAK,EAAE,YAAY;YAAE,KAAK,CAAC,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC;QACnF,IAAI,QAAQ,CAAC,MAAM,EAAE,OAAO;YAAE,MAAM,CAAC,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC;QACvE,IAAI,QAAQ,CAAC,UAAU,EAAE,kBAAkB,EAAE,CAAC;YAC5C,UAAU,CAAC,kBAAkB,GAAG,QAAQ,CAAC,UAAU,CAAC,kBAAkB,CAAC;QACzE,CAAC;IACH,CAAC;IACD,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,QAAQ,CAAC,KAAK,EAAE,SAAS;YAAE,KAAK,CAAC,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC;QAC1E,IAAI,QAAQ,CAAC,KAAK,EAAE,QAAQ;YAAE,KAAK,CAAC,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;QACvE,IAAI,QAAQ,CAAC,KAAK,EAAE,UAAU;YAAE,KAAK,CAAC,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC;QAC7E,IAAI,QAAQ,CAAC,KAAK,EAAE,SAAS;YAAE,KAAK,CAAC,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC;QAC1E,IAAI,QAAQ,CAAC,MAAM,EAAE,aAAa;YAAE,MAAM,CAAC,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC;QACzF,IAAI,QAAQ,CAAC,MAAM,EAAE,cAAc;YAAE,MAAM,CAAC,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC;QAC5F,IAAI,QAAQ,CAAC,UAAU,EAAE,UAAU;YAAE,UAAU,CAAC,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC;QAC5F,IAAI,QAAQ,CAAC,UAAU,EAAE,QAAQ;YAAE,UAAU,CAAC,QAAQ,GAAG,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC;IACxF,CAAC;IACD,IAAI,oBAAoB,EAAE,CAAC;QACzB,IAAI,QAAQ,CAAC,UAAU,EAAE,QAAQ;YAAE,UAAU,CAAC,QAAQ,GAAG,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC;IACxF,CAAC;IAED,OAAO;QACL,KAAK;QACL,MAAM;QACN,IAAI;QACJ,UAAU;QACV,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,SAAkB,EAAE,YAAY,EAAE,MAAM,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/G,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CACzB,OAA0C,EAC1C,GAA0D;IAE1D,OAAO,OAAO,EAAE,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC;AAClC,CAAC;AAED,SAAS,WAAW,CAClB,EAAU,EACV,IAAY,EACZ,SAAiB,EACjB,IAAY,EACZ,WAAmB,EACnB,WAAmB;IAEnB,OAAO,cAAc,CACnB,EAAE,UAAU,EAAE,sBAAsB,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,qBAAqB,EAAE,EACxF;QACE,EAAE;QACF,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;QAC7B,IAAI,EAAE;YACJ,IAAI,EAAE;gBACJ;oBACE,IAAI;oBACJ,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE;oBACvC,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;iBACzC;aACF;SACF;KACF,CACF,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAC7B,OAAkC,EAClC,QAA+C;IAE/C,MAAM,KAAK,GAAG,QAAQ,EAAE,KAAK,CAAC;IAC9B,MAAM,MAAM,GAAG,QAAQ,EAAE,MAAM,CAAC;IAChC,MAAM,IAAI,GAAG,QAAQ,EAAE,IAAI,CAAC;IAC5B,MAAM,UAAU,GAAG,QAAQ,EAAE,UAAU,CAAC;IAExC,OAAO,OAAO,CAAC;QACb,KAAK,EAAE,OAAO,CAAC;YACb,QAAQ,EAAE,OAAO,CAAC;gBAChB,GAAG,EAAE,qBAAqB,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC;gBAC9E,YAAY,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,IAAI,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,YAAY;aACrF,CAAC;YACF,YAAY,EAAE,qBAAqB,CAAC,OAAO,CAAC,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,CAAC;YACrF,SAAS,EAAE,OAAO,CAAC;gBACjB,GAAG,EAAE,qBAAqB,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC;aACjF,CAAC;YACF,QAAQ,EAAE,OAAO,CAAC;gBAChB,GAAG,EAAE,qBAAqB,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC;aAC/E,CAAC;YACF,UAAU,EAAE,OAAO,CAAC;gBAClB,GAAG,EAAE,qBAAqB,CAAC,OAAO,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,CAAC;aACnF,CAAC;YACF,SAAS,EAAE,OAAO,CAAC;gBACjB,GAAG,EAAE,qBAAqB,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC;aACjF,CAAC;SACH,CAAC;QACF,MAAM,EAAE,OAAO,CAAC;YACd,QAAQ,EAAE,OAAO,CAAC;gBAChB,GAAG,EAAE,qBAAqB,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC;gBAChF,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,IAAI,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,YAAY;aACvF,CAAC;YACF,aAAa,EAAE,OAAO,CAAC;gBACrB,GAAG,EAAE,qBAAqB,CAAC,OAAO,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,CAAC;aAC3F,CAAC;YACF,cAAc,EAAE,OAAO,CAAC;gBACtB,GAAG,EAAE,qBAAqB,CAAC,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,GAAG,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,CAAC;aAC7F,CAAC;YACF,OAAO,EAAE,OAAO,CAAC;gBACf,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC;gBACvF,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC;aACxF,CAAC;YACF,OAAO,EAAE,qBAAqB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC;SACzE,CAAC;QACF,IAAI,EAAE,OAAO,CAAC;YACZ,QAAQ,EAAE,OAAO,CAAC;gBAChB,GAAG,EAAE,qBAAqB,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC;gBAC5E,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,IAAI,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,YAAY;aACnF,CAAC;SACH,CAAC;QACF,UAAU,EAAE,OAAO,CAAC;YAClB,UAAU,EAAE,OAAO,CAAC;gBAClB,GAAG,EAAE,qBAAqB,CAAC,OAAO,CAAC,UAAU,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,CAAC;aAC7F,CAAC;YACF,QAAQ,EAAE,OAAO,CAAC;gBAChB,GAAG,EAAE,qBAAqB,CAAC,OAAO,CAAC,UAAU,EAAE,QAAQ,EAAE,GAAG,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,CAAC;aACzF,CAAC;YACF,QAAQ,EAAE,OAAO,CAAC;gBAChB,GAAG,EAAE,qBAAqB,CAAC,OAAO,CAAC,UAAU,EAAE,QAAQ,EAAE,GAAG,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,CAAC;aACzF,CAAC;YACF,kBAAkB,EAChB,qBAAqB,CAAC,OAAO,CAAC,UAAU,EAAE,kBAAkB,EAAE,UAAU,EAAE,kBAAkB,CAAC;SAChG,CAAC;QACF,OAAO,EAAE,qBAAqB,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC;KACnE,CAAC,CAAC;AACL,CAAC;AAED,SAAS,OAAO,CAAmB,KAA2C;IAC5E,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAM,CAAC;AACnG,CAAC;AAED,SAAS,qBAAqB,CAC5B,QAAyC,EACzC,QAAyC;IAEzC,IAAI,CAAC,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC/B,IAAI,CAAC,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC/B,MAAM,aAAa,GAAI,QAAuC,CAAC,KAAK,CAAC;IACrE,MAAM,cAAc,GAAG,QAAQ,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1E,MAAM,eAAe,GAAG,QAAQ,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IAE3E,OAAO,OAAO,CAAC;QACb,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC;QAC7C,KAAK,EAAE,aAAa;QACpB,GAAG,EAAE,SAAS,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,CAAC;QAC1C,YAAY,EAAE,SAAS,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,YAAY,CAAC;QACrE,SAAS,EAAE,SAAS,CAAC,eAAe,EAAE,SAAS,EAAE,cAAc,EAAE,SAAS,CAAC;QAC3E,UAAU,EAAE,SAAS,CAAC,eAAe,EAAE,UAAU,EAAE,cAAc,EAAE,UAAU,CAAC;QAC9E,SAAS,EAAE,SAAS,CAAC,eAAe,EAAE,SAAS,EAAE,cAAc,EAAE,SAAS,CAAC;KAC5E,CAAwB,CAAC;AAC5B,CAAC;AAED,SAAS,SAAS,CAAmB,QAAuB,EAAE,QAAuB;IACnF,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IAC5C,IAAI,QAAQ,KAAK,SAAS,IAAI,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxD,OAAO,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAM,CAAC;IAC9C,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,IAAI,CAAC,KAAmD;IAC/D,OAAO,KAAK,EAAE,IAAI,IAAI,UAAU,CAAC;AACnC,CAAC;AAED,SAAS,aAAa,CAAC,GAAW,EAAE,IAAI,GAAG,EAAE;IAC3C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IACjG,OAAO;QACL,GAAG;QACH,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC;QACxC,IAAI,EAAE,MAAM,CAAC,QAAQ;QACrB,IAAI,EAAE,UAAU;KACjB,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CACtB,SAAiB,EACjB,aAAqB,EACrB,aAAqB,EACrB,IAAY,EACZ,MAAM,GAAG,MAAM;IAEf,MAAM,WAAW,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,EAAE,aAAa,CAAW,CAAC;IAC9E,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,4BAA4B,EAAE,SAAS,EAAE,aAAa,EAAE,aAAa,CAAW,CAAC;IAC3G,OAAO;QACL,GAAG,EAAE,GAAG,CAAC,QAAQ,CACf,GAAG,MAAM,iCAAiC,IAAI,EAAE,EAChD,SAAS,EACT,aAAa,EACb,aAAa,CACJ;QACX,MAAM;QACN,IAAI;QACJ,IAAI;QACJ,WAAW;QACX,SAAS,EAAE,aAAa;KACzB,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,IAAY;IAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAClD,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,gBAAgB,CAAC,UAAkB,EAAE,YAAoB,EAAE,QAAgB;IAClF,MAAM,aAAa,GAAG,GAAG,UAAU,MAAM,CAAC;IAC1C,MAAM,cAAc,GAAG,GAAG,UAAU,eAAe,CAAC;IACpD,OAAO,GAAG,CAAC,IAAI,CACb,IAAI,OAAO,CAAC,aAAa,CAAC,MAAM,aAAa,OAAO,OAAO,CAAC,YAAY,CAAC,MAAM,YAAY,OAAO,OAAO,CAAC,cAAc,CAAC,yBAAyB,cAAc,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAC3L,CAAC;AACd,CAAC;AAED,SAAS,iBAAiB,CACxB,SAAiB,EACjB,aAAqB,EACrB,kBAA2B;IAE3B,OAAO;QACL,WAAW,EAAE,kBAAkB;YAC7B,CAAC,CAAC,aAAa,CAAC,wBAAwB,CAAC;YACzC,CAAC,CAAC,eAAe,CAAC,SAAS,EAAE,cAAc,EAAE,aAAa,EAAE,IAAI,CAAC;QACnE,UAAU,EAAE,eAAe,CAAC,SAAS,EAAE,aAAa,EAAE,aAAa,EAAE,IAAI,CAAC;QAC1E,YAAY,EAAE,kBAAkB;YAC9B,CAAC,CAAC,aAAa,CAAC,yBAAyB,CAAC;YAC1C,CAAC,CAAC,eAAe,CAAC,SAAS,EAAE,eAAe,EAAE,aAAa,EAAE,IAAI,CAAC;QACpE,WAAW,EAAE,eAAe,CAAC,SAAS,EAAE,cAAc,EAAE,aAAa,EAAE,IAAI,CAAC;QAC5E,QAAQ,EAAE,eAAe,CAAC,SAAS,EAAE,WAAW,EAAE,aAAa,EAAE,IAAI,CAAC;QACtE,SAAS,EAAE,eAAe,CAAC,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,IAAI,CAAC;QACxE,eAAe,EAAE,kBAAkB;YACjC,CAAC,CAAC,aAAa,CAAC,2BAA2B,EAAE,IAAI,CAAC;YAClD,CAAC,CAAC,eAAe,CAAC,SAAS,EAAE,kBAAkB,EAAE,aAAa,EAAE,IAAI,CAAC;QACvE,aAAa,EAAE,kBAAkB;YAC/B,CAAC,CAAC,aAAa,CAAC,iCAAiC,EAAE,IAAI,CAAC;YACxD,CAAC,CAAC,eAAe,CAAC,SAAS,EAAE,gBAAgB,EAAE,aAAa,EAAE,IAAI,CAAC;KACtE,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,CACL,CAAC,CAAC,KAAK;QACP,OAAO,KAAK,KAAK,QAAQ;QACxB,KAA6C,CAAC,qBAAqB,KAAK,MAAM,CAChF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG,qBAAqB,CACnD;IACE,IAAI,EAAE,oBAAoB;IAC1B,IAAI,EAAE,kBAAkB;IACxB,IAAI,EAAE,4BAAuE;IAC7E,MAAM,EAAE,4BAA4B;CACrC,EACD,CAAC,IAA4B,EAAE,EAAE;IAC/B,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,IAAI,YAAY,CAAC;IACrD,MAAM,YAAY,GAChB,CAAC,YAAY,CAAC,IAAI,CAAC;QACnB,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAChF,eAAe,CAAC,KAAK,CAAC,CACvB,CAAC;IACJ,MAAM,0BAA0B,GAAG,GAAG,CAAC,IAAI,CACzC,4GAA4G,CAC7G,CAAC;IACF,IAAI,eAAe,GAAY,0BAA0B,CAAC;IAC1D,IAAI,aAAa,GAAY,GAAG,CAAC,IAAI,CACnC,wGAAwG,CACzG,CAAC;IACF,IAAI,YAAY,GAAY,GAAG,CAAC,IAAI,CAClC,sGAAsG,CACvG,CAAC;IACF,IAAI,oBAAoB,GAAY,GAAG,CAAC,IAAI,CAC1C,sHAAsH,CACvH,CAAC;IACF,IAAI,YAAY,EAAE,CAAC;QACjB,eAAe,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAChE,aAAa,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC5D,YAAY,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC1D,oBAAoB,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,sBAAsB,GAAG,CAAC,YAAY,IAAI,eAAe,CAAC;IAChE,MAAM,oBAAoB,GAAG,CAAC,YAAY,IAAI,aAAa,CAAC;IAC5D,MAAM,2BAA2B,GAAG,CAAC,YAAY,IAAI,oBAAoB,CAAC;IAC1E,MAAM,kBAAkB,GAAG,YAAY,IAAI,YAAY,CAAC;IACxD,IAAI,uBAAuB,GAAG,GAAG,IAAI,CAAC,IAAI,eAAe,CAAC;IAC1D,IAAI,wBAAwB,GAAG,GAAG,IAAI,CAAC,IAAI,gBAAgB,CAAC;IAC5D,IAAI,sBAAsB,GAAG,GAAG,IAAI,CAAC,IAAI,cAAc,CAAC;IACxD,IAAI,qBAAqB,GAAG,GAAG,IAAI,CAAC,IAAI,gBAAgB,CAAC;IACzD,IAAI,iBAAiB,GAAG,GAAG,IAAI,CAAC,IAAI,iBAAiB,CAAC;IACtD,IAAI,qBAAqB,GAAG,GAAG,IAAI,CAAC,IAAI,qBAAqB,CAAC;IAC9D,IAAI,kBAAkB,GAAG,GAAG,IAAI,CAAC,IAAI,kBAAkB,CAAC;IACxD,MAAM,WAAW,GAAG,YAAY;QAC9B,CAAC,CAAC,IAAI,CAAC,KAAK;QACZ,CAAC,CAAC;YACE,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YACrB,SAAS,EAAE,gBAAgB,CACzB,mDAAmD,EACnD,6BAA6B,EAC7B,wBAAwB,CACzB;YACD,QAAQ,EAAE,gBAAgB,CACxB,kDAAkD,EAClD,4BAA4B,EAC5B,yBAAyB,CAC1B;YACD,UAAU,EAAE,gBAAgB,CAC1B,oDAAoD,EACpD,8BAA8B,EAC9B,yBAAyB,CAC1B;YACD,SAAS,EAAE,gBAAgB,CACzB,mDAAmD,EACnD,6BAA6B,EAC7B,yBAAyB,CAC1B;SACF,CAAC;IACN,MAAM,YAAY,GAAG,YAAY;QAC/B,CAAC,CAAC,IAAI,CAAC,MAAM;QACb,CAAC,CAAC;YACE,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;YACtB,aAAa,EAAE,gBAAgB,CAC7B,wDAAwD,EACxD,kCAAkC,EAClC,yBAAyB,CAC1B;YACD,cAAc,EAAE,gBAAgB,CAC9B,yDAAyD,EACzD,mCAAmC,EACnC,yBAAyB,CAC1B;SACF,CAAC;IAEN,IAAI,sBAAsB,EAAE,CAAC;QAC3B,OAAO,CAAC;YACN,EAAE,EAAE,eAAe;YACnB,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,WAAW;YAC7B,SAAS,EAAE,aAAa;YACxB,IAAI,EAAE;gBACJ,SAAS,EAAE,CAAC;gBACZ,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;gBACxB,SAAS,EAAE,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;aAC7D;SACF,CAAC,CAAC,eAAe,CAAC,0BAA0B,CAAC,CAAC;QAC/C,uBAAuB,GAAG,GAAG,IAAI,CAAC,IAAI,eAAe,CAAC;QACtD,MAAM,CAAC;YACL,EAAE,EAAE,gBAAgB;YACpB,QAAQ,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,WAAW,EAAE,SAAS,EAAE,aAAa,EAAE;YACrE,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,EAAE,GAAG,EAAE,oBAAoB,IAAI,CAAC,IAAI,gBAAgB,aAAa,+BAA+B,EAAE;SAC/G,CAAC,CAAC,eAAe,CAAC,0BAA0B,CAAC,CAAC;QAC/C,OAAO,CAAC;YACN,EAAE,EAAE,gBAAgB;YACpB,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,YAAY;YAC9B,SAAS,EAAE,aAAa;YACxB,IAAI,EAAE;gBACJ,SAAS,EAAE,CAAC;gBACZ,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;gBACxB,SAAS,EAAE,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;aAC/D;SACF,CAAC,CAAC,eAAe,CAAC,0BAA0B,CAAC,CAAC;QAC/C,wBAAwB,GAAG,GAAG,IAAI,CAAC,IAAI,gBAAgB,CAAC;QACxD,MAAM,CAAC;YACL,EAAE,EAAE,iBAAiB;YACrB,QAAQ,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE;YACtE,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,EAAE,GAAG,EAAE,qBAAqB,IAAI,CAAC,IAAI,iBAAiB,aAAa,gCAAgC,EAAE;SAClH,CAAC,CAAC,eAAe,CAAC,0BAA0B,CAAC,CAAC;QAC/C,OAAO,CAAC;YACN,EAAE,EAAE,cAAc;YAClB,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,UAAU;YAC5B,SAAS,EAAE,aAAa;YACxB,IAAI,EAAE;gBACJ,SAAS,EAAE,CAAC;gBACZ,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;gBACxB,SAAS,EAAE,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;aAC3D;SACF,CAAC,CAAC,eAAe,CAAC,0BAA0B,CAAC,CAAC;QAC/C,sBAAsB,GAAG,GAAG,IAAI,CAAC,IAAI,cAAc,CAAC;QACpD,MAAM,CAAC;YACL,EAAE,EAAE,eAAe;YACnB,QAAQ,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE;YACpE,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,EAAE,GAAG,EAAE,mBAAmB,IAAI,CAAC,IAAI,eAAe,aAAa,8BAA8B,EAAE;SAC5G,CAAC,CAAC,eAAe,CAAC,0BAA0B,CAAC,CAAC;IACjD,CAAC;IAED,IAAI,oBAAoB,EAAE,CAAC;QACzB,MAAM,iBAAiB,GAAG,MAAM,CAAC;YAC/B,EAAE,EAAE,mBAAmB;YACvB,QAAQ,EAAE;gBACR,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,gBAAgB;gBAClC,SAAS,EAAE,aAAa;gBACxB,WAAW,EAAE,EAAE,2BAA2B,EAAE,MAAM,EAAE;aACrD;YACD,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,EAAE,MAAM,EAAE,kCAAkC,EAAE;SAC3D,CAAC,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC;QAClC,qBAAqB,GAAG,iBAAiB,CAAC,QAAQ,CAAC,IAAI,IAAI,qBAAqB,CAAC;QACjF,MAAM,aAAa,GAAG,MAAM,CAAC;YAC3B,EAAE,EAAE,eAAe;YACnB,QAAQ,EAAE;gBACR,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,iBAAiB;gBACnC,SAAS,EAAE,aAAa;gBACxB,WAAW,EAAE,EAAE,2BAA2B,EAAE,MAAM,EAAE;aACrD;YACD,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,MAAM,EAAE,kCAAkC;gBAC1C,MAAM,EAAE,kCAAkC;aAC3C;SACF,CAAC,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC;QAClC,iBAAiB,GAAG,aAAa,CAAC,QAAQ,CAAC,IAAI,IAAI,iBAAiB,CAAC;QACrE,MAAM,iBAAiB,GAAG,MAAM,CAAC;YAC/B,EAAE,EAAE,mBAAmB;YACvB,QAAQ,EAAE;gBACR,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,qBAAqB;gBACvC,SAAS,EAAE,aAAa;gBACxB,WAAW,EAAE,EAAE,2BAA2B,EAAE,MAAM,EAAE;aACrD;YACD,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE;SACpC,CAAC,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC;QAClC,qBAAqB,GAAG,iBAAiB,CAAC,QAAQ,CAAC,IAAI,IAAI,qBAAqB,CAAC;IACnF,CAAC;IAED,IAAI,2BAA2B,EAAE,CAAC;QAChC,MAAM,CAAC,UAAU,CAAC;YAChB,EAAE,EAAE,gBAAgB;YACpB,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,kBAAkB;YACpC,SAAS,EAAE,aAAa;YACxB,KAAK,EAAE,mBAAmB;YAC1B,QAAQ,EAAE,CAAC;YACX,KAAK,EAAE,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;SAC/B,CAAC,CAAC,eAAe,CAAC,oBAAoB,CAAC,CAAC;QACzC,MAAM,qBAAqB,GAAG,MAAM,CAAC,OAAO,CAAC;YAC3C,EAAE,EAAE,uBAAuB;YAC3B,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,kBAAkB;YACpC,SAAS,EAAE,aAAa;YACxB,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,kBAAkB,EAAE;YACjD,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;SACtC,CAAC,CAAC,eAAe,CAAC,oBAAoB,CAAC,CAAC;QACzC,kBAAkB,GAAG,qBAAqB,CAAC,QAAQ,CAAC,IAAI,IAAI,kBAAkB,CAAC;IACjF,CAAC;IAED,MAAM,cAAc,GAAG,wBAAwB,CAC7C;QACE,uBAAuB;QACvB,qBAAqB;QACrB,wBAAwB;QACxB,iBAAiB;QACjB,sBAAsB;QACtB,qBAAqB;QACrB,mBAAmB,EAAE,wBAAwB;QAC7C,oBAAoB,EAAE,yBAAyB;QAC/C,uBAAuB,EAAE,2BAA2B;QACpD,qBAAqB,EAAE,iCAAiC;QACxD,GAAG,CAAC,YAAY;YACd,CAAC,CAAC;gBACE,oBAAoB,EAAE,GAAG,IAAI,CAAC,IAAI,qBAAqB;gBACvD,qBAAqB,EAAE,GAAG,IAAI,CAAC,IAAI,sBAAsB;gBACzD,wBAAwB,EAAE,GAAG,IAAI,CAAC,IAAI,yBAAyB;gBAC/D,sBAAsB,EAAE,GAAG,IAAI,CAAC,IAAI,uBAAuB;aAC5D;YACH,CAAC,CAAC,EAAE,CAAC;QACP,kBAAkB;QAClB,cAAc,EAAE,GAAG,IAAI,CAAC,IAAI,cAAc;KAC3C,EACD,YAAY;QACV,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE;QACjD,CAAC,CAAC;YACE,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,IAAI;YACZ,cAAc,EAAE,IAAI;YACpB,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3F,CACN,CAAC;IACF,MAAM,eAAe,GAAG,sBAAsB,CAAC,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAEvF,MAAM,GAAG,GAAG,gBAAgB,CAAC;QAC3B,GAAG,IAAI;QACP,KAAK,EAAE,WAAW;QAClB,MAAM,EAAE,YAAY;QACpB,SAAS,EAAE,aAAa;QACxB,iBAAiB,EAAE,eAAe;KACO,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG;QAChB,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK;QACvB,KAAK,EAAE,GAAG,CAAC,IAAI,CAAyB,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,2BAA2B,CAAC;QACtF,UAAU,EAAE;YACV,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK;YAClC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM;YACpC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI;YAChC,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU;SAC7C;QACD,OAAO,EAAE;YACP,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK;YAC/B,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU;SAC1C;QACD,SAAS,EAAE,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE,kBAAkB,CAAC;QAC1E,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,IAAI,QAAQ,CAAC;KACtD,CAAC;IAEF,SAAS,CAAC;QACR,EAAE,EAAE,0BAA0B;QAC9B,QAAQ,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,oBAAoB,EAAE,SAAS,EAAE,aAAa,EAAE;QAC9E,IAAI,EAAE;YACJ,kBAAkB,EAAE,IAAI,CAAC,IAAI;YAC7B,cAAc,EAAE,qBAAqB;SACtC;KACF,CAAC,CAAC;IAEH,IAAI,kBAAkB,EAAE,CAAC;QACvB,cAAc,CAAC;YACb,EAAE,EAAE,8BAA8B;YAClC,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,kBAAkB;YACpC,SAAS,EAAE,aAAa;YACxB,IAAI,EAAE;gBACJ,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,gCAAgC,EAAE;gBAClE,QAAQ,EAAE,EAAE,GAAG,EAAE,UAAU,kBAAkB,IAAI,aAAa,oBAAoB,EAAE;gBACpF,cAAc,EAAE,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;gBAC1C,UAAU,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE;gBAChC,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;aAChC;SACF,CAAC,CAAC;QACH,WAAW,CACT,wBAAwB,EACxB,GAAG,IAAI,CAAC,IAAI,qBAAqB,EACjC,aAAa,EACb,iBAAiB,EACjB,GAAG,IAAI,CAAC,IAAI,eAAe,EAC3B,IAAI,CACL,CAAC;QACF,WAAW,CACT,yBAAyB,EACzB,GAAG,IAAI,CAAC,IAAI,sBAAsB,EAClC,aAAa,EACb,kBAAkB,EAClB,GAAG,IAAI,CAAC,IAAI,gBAAgB,EAC5B,IAAI,CACL,CAAC;QACF,WAAW,CACT,4BAA4B,EAC5B,GAAG,IAAI,CAAC,IAAI,yBAAyB,EACrC,aAAa,EACb,oBAAoB,EACpB,GAAG,IAAI,CAAC,IAAI,mBAAmB,EAC/B,IAAI,CACL,CAAC;QACF,WAAW,CACT,0BAA0B,EAC1B,GAAG,IAAI,CAAC,IAAI,uBAAuB,EACnC,aAAa,EACb,0BAA0B,EAC1B,GAAG,IAAI,CAAC,IAAI,iBAAiB,EAC7B,IAAI,CACL,CAAC;IACJ,CAAC;IAED,OAAO;QACL,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK;QACvB,KAAK,EAAE,GAAG,CAAC,IAAI,CAAyB,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,2BAA2B,CAAC;QACtF,cAAc,EAAE;YACd,SAAS,EAAE,eAAe;YAC1B,OAAO,EAAE,aAAa;YACtB,MAAM,EAAE,kBAAkB;YAC1B,QAAQ,EAAE,oBAAoB;YAC9B,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,UAAU,IAAI,KAAK;SAC3C;QACD,YAAY,EAAE;YACZ,aAAa,EAAE,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC;YACzD,cAAc,EAAE,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC;YAC3D,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC;YACvD,OAAO,EAAE,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,YAAY,CAAC;YAClD,MAAM,EAAE,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,UAAU,EAAE,GAAG,CAAC;YACzD,QAAQ,EAAE,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,QAAQ,EAAE,GAAG,CAAC;YACzD,OAAO,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC;SACvC;QACD,GAAG,EAAE,SAAS;QACd,SAAS,EAAE,SAAS,CAAC,SAAS;KAC/B,CAAC;AACJ,CAAC,CACF,CAAC"}

package/dist/factories/ory/index.d.ts

@@ -0,0 +1,5 @@
+export * from './resources/index.js';
+export * from './utils/index.js';
+export * from './compositions/index.js';
+export * from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/factories/ory/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/factories/ory/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AACxC,cAAc,YAAY,CAAC"}

package/dist/factories/ory/index.js

@@ -0,0 +1,5 @@
+export * from './resources/index.js';
+export * from './utils/index.js';
+export * from './compositions/index.js';
+export * from './types.js';
+//# sourceMappingURL=index.js.map

package/dist/factories/ory/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/factories/ory/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AACxC,cAAc,YAAY,CAAC"}

package/dist/factories/ory/resources/helm.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Ory Helm integration resources.
+ *
+ * These wrappers install the official Ory charts through Flux HelmRepository and
+ * HelmRelease resources while preserving TypeKro resource ids and typed values.
+ */
+import type { OryDefaultChartVersion, OryDefaultHelmRepositoryUrl, OryHelmRepositoryFactory, OryHydraHelmReleaseFactory, OryKetoHelmReleaseFactory, OryKratosHelmReleaseFactory, OryOathkeeperHelmReleaseFactory } from '../types.js';
+export declare const ORY_HELM_REPOSITORY_URL: OryDefaultHelmRepositoryUrl;
+export declare const ORY_CHART_VERSION: OryDefaultChartVersion;
+/** Create the official Ory HelmRepository resource. */
+export declare const oryHelmRepository: OryHelmRepositoryFactory;
+/** Create a Flux HelmRelease for the official Ory Hydra chart. */
+export declare const hydraHelmRelease: OryHydraHelmReleaseFactory;
+/** Create a Flux HelmRelease for the official Ory Kratos chart. */
+export declare const kratosHelmRelease: OryKratosHelmReleaseFactory;
+/** Create a Flux HelmRelease for the official Ory Keto chart. */
+export declare const ketoHelmRelease: OryKetoHelmReleaseFactory;
+/** Create a Flux HelmRelease for the official Ory Oathkeeper chart. */
+export declare const oathkeeperHelmRelease: OryOathkeeperHelmReleaseFactory;
+//# sourceMappingURL=helm.d.ts.map

package/dist/factories/ory/resources/helm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"helm.d.ts","sourceRoot":"","sources":["../../../../src/factories/ory/resources/helm.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAaH,OAAO,KAAK,EACV,sBAAsB,EACtB,2BAA2B,EAE3B,wBAAwB,EACxB,0BAA0B,EAE1B,yBAAyB,EAEzB,2BAA2B,EAE3B,+BAA+B,EAEhC,MAAM,aAAa,CAAC;AAQrB,eAAO,MAAM,uBAAuB,EAAE,2BACJ,CAAC;AACnC,eAAO,MAAM,iBAAiB,EAAE,sBAAiC,CAAC;AAKlE,uDAAuD;AACvD,eAAO,MAAM,iBAAiB,EAAE,wBAY/B,CAAC;AAwCF,kEAAkE;AAClE,eAAO,MAAM,gBAAgB,EAAE,0BACQ,CAAC;AAExC,mEAAmE;AACnE,eAAO,MAAM,iBAAiB,EAAE,2BACQ,CAAC;AAEzC,iEAAiE;AACjE,eAAO,MAAM,eAAe,EAAE,yBACQ,CAAC;AAEvC,uEAAuE;AACvE,eAAO,MAAM,qBAAqB,EAAE,+BACQ,CAAC"}