@cdk8s/cdktf-resolver 0.0.0

package/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -0,0 +1,160 @@
+# CDK For Terraform Resolver
+
+The `CdkTfResolver` is able to resolve any [`TerraformOutput`](https://developer.hashicorp.com/terraform/cdktf/concepts/variables-and-outputs#output-values) 
+defined by your CDKTF application. In this example, we create an S3 `Bucket` with the CDKTF, and pass its (deploy time generated) 
+name as an environment variable to a Kubernetes `CronJob` resource.
+
+```ts
+import * as tf from "cdktf";
+import * as aws from "@cdktf/provider-aws";
+import * as k8s from 'cdk8s';
+import * as kplus from 'cdk8s-plus-26';
+
+import { CdkTfResolver } from '@cdk8s/cdktf-resolver';
+
+const awsApp = new tf.App();
+const stack = new tf.TerraformStack(awsApp, 'aws');
+
+const k8sApp = new k8s.App({ resolvers: [new CdkTfResolver()] });
+const manifest = new k8s.Chart(k8sApp, 'Manifest', { resolver });
+
+const bucket = new aws.s3Bucket.S3Bucket(stack, 'Bucket');
+const bucketName = new tf.TerraformOutput(constrcut, 'BucketName', {
+  value: bucket.bucket,
+});
+
+new kplus.CronJob(manifest, 'CronJob', {
+  schedule: k8s.Cron.daily(),
+  containers: [{
+    image: 'job',
+    envVariables: {
+      // directly passing the value of the `TerraformOutput` containing 
+      // the deploy time bucket name
+      BUCKET_NAME: kplus.EnvValue.fromValue(bucketName.value),
+    }
+ }]
+});
+
+awsApp.synth();
+k8sApp.synth();
+```
+
+During cdk8s synthesis, the custom resolver will detect that `bucketName.value` is not a concrete value, 
+but rather a value of a `TerraformOutput`. It will then perform `cdktf` CLI commands in order to fetch the 
+actual value from the deployed infrastructure in your account. This means that in order 
+for `cdk8s synth` to succeed, it must be executed *after* the CDKTF resources 
+have been deployed. So your deployment workflow should (conceptually) be:
+
+1. `cdktf deploy`
+2. `cdk8s synth`
+
+> Note that the `CdkTfResolver` is **only** able to fetch tokens that have a `TerraformOutput` defined for them.
+
+##### Permissions
+
+Since running `cdk8s synth` will now require reading terraform outputs, it must have permissions to do so.
+In case a remote state file is used, this means providing a set of credentials for the account that have access
+to where the state is stored. This will vary depending on your cloud provider, but in most cases will involve giving 
+read permissions on a blob storage device (e.g S3 bucket).
+
+Note that the permissions cdk8s require are far more scoped down than those normally required for the 
+deployment of CDKTF applications. It is therefore recommended to not reuse the same set of credentials, 
+and instead create a scoped down `ReadOnly` role dedicated for cdk8s resolvers.
+
+Following are the set of commands the resolver will execute:
+
+- [`cdktf output`](https://developer.hashicorp.com/terraform/cdktf/cli-reference/commands#output)
+
+## Cross Repository Workflow
+
+As we've seen, your `cdk8s` application needs access to the objects defined in your cloud application. If both applications
+are defined within the same file, this is trivial to achieve. If they are in different files, a simple `import` statement will suffice.
+However, what if the applications are managed in two separate repositories? This makes it a little trickier, but still possible. 
+
+In this scenario, `cdktf.ts` in the CDKTF application, stored in a dedicated repository.
+
+```ts
+import * as tf from "cdktf";
+import * as aws from "@cdktf/provider-aws";
+
+import { CdkTfResolver } from '@cdk8s/cdktf-resolver';
+
+const awsApp = new tf.App();
+const stack = new tf.TerraformStack(awsApp, 'aws');
+
+const bucket = new aws.s3Bucket.S3Bucket(stack, 'Bucket');
+const bucketName = new tf.TerraformOutput(constrcut, 'BucketName', {
+  value: bucket.bucket,
+});
+
+awsApp.synth();
+```
+
+In order for the `cdk8s` application to have cross repository access, the CDKTF object instances 
+that we want to expose need to be available via a package repository. To do this, break up the 
+CDKTF application into the following files:
+
+`app.ts`
+
+```ts
+import * as tf from "cdktf";
+import * as aws from "@cdktf/provider-aws";
+
+import { CdkTfResolver } from '@cdk8s/cdktf-resolver';
+
+const awsApp = new tf.App();
+const stack = new tf.TerraformStack(awsApp, 'aws');
+
+const bucket = new aws.s3Bucket.S3Bucket(stack, 'Bucket');
+// export the thing we want to have available for cdk8s applications
+export const bucketName = new tf.TerraformOutput(constrcut, 'BucketName', {
+  value: bucket.bucket,
+});
+
+// note that we don't call awsApp.synth here
+```
+
+`main.ts`
+
+```ts
+import { awsApp } from './app.ts'
+
+awsApp.synth();
+```
+
+Now, publish the `app.ts` file to a package manager, so that your `cdk8s` application can install and import it. 
+This approach might be somewhat counter intuitive, because normally we only publish classes to the package manager, 
+not instances. Indeed, these types of applications introduce a new use-case that requires the sharing of instances.
+Conceptually, this is no different than writing state<sup>*</sup> to an SSM parameter or an S3 bucket, and it allows us to remain 
+in the boundaries of our programming language, and the typing guarantees it provides.
+
+> <sup>*</sup> Actually, we are only publishing instructions for fetching state, not the state itself.
+
+Assuming `app.ts` was published as the `my-cdktf-app` package, our `cdk8s` application will now look like so:
+
+```ts
+import * as k8s from 'cdk8s';
+import * as kplus from 'cdk8s-plus-27';
+
+// import the desired instance from the CDKTF app.
+import { bucketName } from 'my-cdktf-app';
+
+import { CdkTfResolver } from '@cdk8s/cdktf-resolver';
+
+const k8sApp = new k8s.App({ resolvers: [new CdkTfResolver()] });
+const manifest = new k8s.Chart(k8sApp, 'Manifest');
+
+new kplus.CronJob(manifest, 'CronJob', {
+  schedule: k8s.Cron.daily(),
+  containers: [{
+    image: 'job',
+    envVariables: {
+      // directly passing the value of the `TerraformOutput` containing 
+      // the deploy time bucket name
+      BUCKET_NAME: kplus.EnvValue.fromValue(bucketName.value),
+    }
+ }]
+});
+
+k8sApp.synth();
+```

package/SECURITY.md

@@ -0,0 +1,5 @@
+# Reporting a Vulnerability
+
+If you discover a potential security issue in this project we ask that you notify the cdk8s team directly via email to cncf-cdk8s-security@lists.cncf.io.
+
+**Please do not create a public GitHub issue.**

package/git-hooks/README.md

@@ -0,0 +1,9 @@
+# Git Hooks
+
+This directory contains git hooks that the core team uses for various tasks.
+
+- Commit signoff for automatic compliance of the [DCO](../CONTRIBUTING.md#developer-certificate-of-origin-dco).
+
+## Setup
+
+To setup these git hooks, run `./git-hooks/setup.sh` from the root directory of the project.

package/git-hooks/prepare-commit-msg

@@ -0,0 +1,18 @@
+#!/bin/sh
+
+NAME=$(git config user.name)
+EMAIL=$(git config user.email)
+
+if [ -z "$NAME" ]; then
+    echo "empty git config user.name"
+    exit 1
+fi
+
+if [ -z "$EMAIL" ]; then
+    echo "empty git config user.email"
+    exit 1
+fi
+
+git interpret-trailers --if-exists doNothing --trailer \
+    "Signed-off-by: $NAME <$EMAIL>" \
+    --in-place "$1"

package/git-hooks/setup.sh

@@ -0,0 +1,10 @@
+#!/bin/bash
+
+##############################################
+# Setup shared .git hooks for this project.
+#
+
+hooksdir="$(cd $(dirname $0) && pwd)"
+
+git config core.hooksPath ${hooksdir}
+echo "Configured core.hooksPath to ${hooksdir}"

package/lib/exec.d.ts

@@ -0,0 +1,7 @@
+export interface ExecSyncOptions {
+    readonly cwd?: string;
+    readonly env?: {
+        [key: string]: string;
+    };
+}
+export declare function execSync(command: string, options?: ExecSyncOptions): void;

package/lib/exec.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.execSync = void 0;
+const child = require("child_process");
+function execSync(command, options = {}) {
+    try {
+        child.execSync(command, { cwd: options.cwd, env: options.env });
+    }
+    catch (err) {
+        const message = [`Command failed: ${command}`];
+        if (err.stderr) {
+            message.push('STDERR:');
+            message.push('\n');
+            message.push('\n');
+            message.push(err.stderr.toString().trim());
+        }
+        if (err.stdout) {
+            message.push('STDOUT:');
+            message.push('\n');
+            message.push('\n');
+            message.push(err.stdout.toString().trim());
+        }
+        throw new Error(message.join('\n\n'));
+    }
+}
+exports.execSync = execSync;
+//# sourceMappingURL=data:application/json;base64,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

package/lib/index.d.ts

@@ -0,0 +1 @@
+export * from './resolve';

package/lib/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./resolve"), exports);
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi9zcmMvaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7Ozs7Ozs7Ozs7Ozs7OztBQUFBLDRDQUEwQiIsInNvdXJjZXNDb250ZW50IjpbImV4cG9ydCAqIGZyb20gJy4vcmVzb2x2ZSc7Il19

package/lib/resolve.d.ts

@@ -0,0 +1,18 @@
+import { IResolver, ResolutionContext } from 'cdk8s';
+import { App } from 'cdktf';
+export interface CdktfResolverProps {
+    /**
+     * The CDKTF App instance in which the outputs are deinfed in.
+     */
+    readonly app: App;
+}
+export declare class CdktfResolver implements IResolver {
+    private readonly app;
+    private _outputs;
+    constructor(props: CdktfResolverProps);
+    resolve(context: ResolutionContext): void;
+    private fetchOutputValue;
+    private fetchOutputs;
+    private findOutput;
+    private isAddressable;
+}

package/lib/resolve.js

@@ -0,0 +1,112 @@
+"use strict";
+var _a;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CdktfResolver = void 0;
+const JSII_RTTI_SYMBOL_1 = Symbol.for("jsii.rtti");
+const fs = require("fs");
+const os = require("os");
+const path = require("path");
+const cdktf_1 = require("cdktf");
+const exec_1 = require("./exec");
+class CdktfResolver {
+    constructor(props) {
+        this.app = props.app;
+    }
+    resolve(context) {
+        // detects full resources being passed as values.
+        // this is legit in terraform and should resolve
+        // to the resource fqn.
+        // see https://github.com/hashicorp/terraform-cdk/blob/main/packages/cdktf/lib/terraform-output.ts#L79
+        const addressable = this.isAddressable(context.value);
+        if (!cdktf_1.Token.isUnresolved(context.value) && !addressable) {
+            return;
+        }
+        const output = this.findOutput(context.value);
+        try {
+            const outputValue = this.fetchOutputValue(output);
+            context.replaceValue(outputValue);
+        }
+        catch (err) {
+            // if both cdk8s and CDKTF applications are defined within the same file,
+            // a cdk8s synth is going to happen before the CDKTF deployment.
+            // in this case we must swallow the error, otherwise the CDKTF deployment
+            // won't be able to go through. we replace the value with something to indicate
+            // that a fetching attempt was made and failed.
+            context.replaceValue(`Failed fetching value for output ${output.node.path}: ${err}`);
+        }
+    }
+    fetchOutputValue(output) {
+        if (!this._outputs) {
+            this._outputs = this.fetchOutputs();
+        }
+        const stack = cdktf_1.TerraformStack.of(output);
+        return this._outputs[stack.node.id][output.friendlyUniqueId];
+    }
+    fetchOutputs() {
+        const projectDir = fs.mkdtempSync(path.join(os.tmpdir(), 'cdktf-project-'));
+        const outputsFile = 'outputs.json';
+        try {
+            this.app.synth();
+            const cdktfJson = {
+                // `cdktf output` doesn't actually use this value,
+                // so we can put whatever we want here.
+                language: 'python',
+                app: 'cdktf.out',
+            };
+            // create our own copy of the synthesized app so we can safely clean it up
+            copyDirectory(this.app.outdir, path.join(projectDir, cdktfJson.app));
+            // write the configuration file as it is required for any cdktf command
+            fs.writeFileSync(path.join(projectDir, 'cdktf.json'), JSON.stringify(cdktfJson));
+            const stacks = this.app.node.findAll().filter(c => cdktf_1.TerraformStack.isStack(c)).map(c => c.node.id);
+            const command = ['cdktf output',
+                '--skip-synth',
+                `--output ${cdktfJson.app}`,
+                `--outputs-file ${outputsFile}`,
+                `${stacks.join(' ')}`];
+            (0, exec_1.execSync)(command.join(' '), { cwd: projectDir });
+            return JSON.parse(fs.readFileSync(path.join(projectDir, outputsFile), { encoding: 'utf-8' }));
+        }
+        finally {
+            fs.rmSync(projectDir, { recursive: true });
+        }
+    }
+    findOutput(value) {
+        const inspectedStacks = this.app.node.findAll().filter(c => cdktf_1.TerraformStack.isStack(c));
+        for (const stack of inspectedStacks) {
+            const output = stack.node.findAll().filter(c => c instanceof cdktf_1.TerraformOutput && c.value === value)[0];
+            // we don't really care if there are more outputs (possibly from different stacks)
+            // that point to the same value. the first will suffice.
+            if (output)
+                return output;
+        }
+        // This can happen if either:
+        // --------------------------
+        //  1. User didn't define an output.
+        //  2. User defined a complex literal output value (e.g { bucketName: bucket.bucket }).
+        throw new Error(`Unable to find output defined for ${value} (Inspected stacks: ${inspectedStacks.map(s => s.node.id).join(',')})`);
+    }
+    isAddressable(object) {
+        return object && typeof object === 'object' && !Array.isArray(object) && 'fqn' in object;
+    }
+}
+exports.CdktfResolver = CdktfResolver;
+_a = JSII_RTTI_SYMBOL_1;
+CdktfResolver[_a] = { fqn: "@cdk8s/cdktf-resolver.CdktfResolver", version: "0.0.0" };
+function copyDirectory(sourceDir, targetDir) {
+    if (!fs.existsSync(targetDir)) {
+        fs.mkdirSync(targetDir);
+    }
+    const files = fs.readdirSync(sourceDir);
+    for (const file of files) {
+        const sourceFilePath = path.join(sourceDir, file);
+        const targetFilePath = path.join(targetDir, file);
+        const stats = fs.statSync(sourceFilePath);
+        if (stats.isDirectory()) {
+            copyDirectory(sourceFilePath, targetFilePath);
+        }
+        else if (stats.isFile()) {
+            fs.copyFileSync(sourceFilePath, targetFilePath);
+        }
+    }
+}
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicmVzb2x2ZS5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uL3NyYy9yZXNvbHZlLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7Ozs7O0FBQUEseUJBQXlCO0FBQ3pCLHlCQUF5QjtBQUN6Qiw2QkFBNkI7QUFFN0IsaUNBQTJGO0FBQzNGLGlDQUFrQztBQVVsQyxNQUFhLGFBQWE7SUFNeEIsWUFBWSxLQUF5QjtRQUNuQyxJQUFJLENBQUMsR0FBRyxHQUFHLEtBQUssQ0FBQyxHQUFHLENBQUM7SUFDdkIsQ0FBQztJQUVNLE9BQU8sQ0FBQyxPQUEwQjtRQUV2QyxpREFBaUQ7UUFDakQsZ0RBQWdEO1FBQ2hELHVCQUF1QjtRQUN2QixzR0FBc0c7UUFDdEcsTUFBTSxXQUFXLEdBQUcsSUFBSSxDQUFDLGFBQWEsQ0FBQyxPQUFPLENBQUMsS0FBSyxDQUFDLENBQUM7UUFFdEQsSUFBSSxDQUFDLGFBQUssQ0FBQyxZQUFZLENBQUMsT0FBTyxDQUFDLEtBQUssQ0FBQyxJQUFJLENBQUMsV0FBVyxFQUFFO1lBQ3RELE9BQU87U0FDUjtRQUVELE1BQU0sTUFBTSxHQUFHLElBQUksQ0FBQyxVQUFVLENBQUMsT0FBTyxDQUFDLEtBQUssQ0FBQyxDQUFDO1FBQzlDLElBQUk7WUFDRixNQUFNLFdBQVcsR0FBRyxJQUFJLENBQUMsZ0JBQWdCLENBQUMsTUFBTSxDQUFDLENBQUM7WUFDbEQsT0FBTyxDQUFDLFlBQVksQ0FBQyxXQUFXLENBQUMsQ0FBQztTQUNuQztRQUFDLE9BQU8sR0FBRyxFQUFFO1lBQ1oseUVBQXlFO1lBQ3pFLGdFQUFnRTtZQUNoRSx5RUFBeUU7WUFDekUsK0VBQStFO1lBQy9FLCtDQUErQztZQUMvQyxPQUFPLENBQUMsWUFBWSxDQUFDLG9DQUFvQyxNQUFNLENBQUMsSUFBSSxDQUFDLElBQUksS0FBSyxHQUFHLEVBQUUsQ0FBQyxDQUFDO1NBQ3RGO0lBRUgsQ0FBQztJQUVPLGdCQUFnQixDQUFDLE1BQXVCO1FBQzlDLElBQUksQ0FBQyxJQUFJLENBQUMsUUFBUSxFQUFFO1lBQ2xCLElBQUksQ0FBQyxRQUFRLEdBQUcsSUFBSSxDQUFDLFlBQVksRUFBRSxDQUFDO1NBQ3JDO1FBRUQsTUFBTSxLQUFLLEdBQUcsc0JBQWMsQ0FBQyxFQUFFLENBQUMsTUFBTSxDQUFDLENBQUM7UUFFeEMsT0FBTyxJQUFJLENBQUMsUUFBUSxDQUFDLEtBQUssQ0FBQyxJQUFJLENBQUMsRUFBRSxDQUFDLENBQUMsTUFBTSxDQUFDLGdCQUFnQixDQUFDLENBQUM7SUFDL0QsQ0FBQztJQUVPLFlBQVk7UUFFbEIsTUFBTSxVQUFVLEdBQUcsRUFBRSxDQUFDLFdBQVcsQ0FBQyxJQUFJLENBQUMsSUFBSSxDQUFDLEVBQUUsQ0FBQyxNQUFNLEVBQUUsRUFBRSxnQkFBZ0IsQ0FBQyxDQUFDLENBQUM7UUFDNUUsTUFBTSxXQUFXLEdBQUcsY0FBYyxDQUFDO1FBRW5DLElBQUk7WUFFRixJQUFJLENBQUMsR0FBRyxDQUFDLEtBQUssRUFBRSxDQUFDO1lBRWpCLE1BQU0sU0FBUyxHQUFHO2dCQUNoQixrREFBa0Q7Z0JBQ2xELHVDQUF1QztnQkFDdkMsUUFBUSxFQUFFLFFBQVE7Z0JBQ2xCLEdBQUcsRUFBRSxXQUFXO2FBQ2pCLENBQUM7WUFFRiwwRUFBMEU7WUFDMUUsYUFBYSxDQUFDLElBQUksQ0FBQyxHQUFHLENBQUMsTUFBTSxFQUFFLElBQUksQ0FBQyxJQUFJLENBQUMsVUFBVSxFQUFFLFNBQVMsQ0FBQyxHQUFHLENBQUMsQ0FBQyxDQUFDO1lBRXJFLHVFQUF1RTtZQUN2RSxFQUFFLENBQUMsYUFBYSxDQUFDLElBQUksQ0FBQyxJQUFJLENBQUMsVUFBVSxFQUFFLFlBQVksQ0FBQyxFQUFFLElBQUksQ0FBQyxTQUFTLENBQUMsU0FBUyxDQUFDLENBQUMsQ0FBQztZQUVqRixNQUFNLE1BQU0sR0FBRyxJQUFJLENBQUMsR0FBRyxDQUFDLElBQUksQ0FBQyxPQUFPLEVBQUUsQ0FBQyxNQUFNLENBQUMsQ0FBQyxDQUFDLEVBQUUsQ0FBQyxzQkFBYyxDQUFDLE9BQU8sQ0FBQyxDQUFDLENBQUMsQ0FBQyxDQUFDLEdBQUcsQ0FBQyxDQUFDLENBQUMsRUFBRSxDQUFDLENBQUMsQ0FBQyxJQUFJLENBQUMsRUFBRSxDQUFDLENBQUM7WUFFbEcsTUFBTSxPQUFPLEdBQUcsQ0FBQyxjQUFjO2dCQUM3QixjQUFjO2dCQUNkLFlBQVksU0FBUyxDQUFDLEdBQUcsRUFBRTtnQkFDM0Isa0JBQWtCLFdBQVcsRUFBRTtnQkFDL0IsR0FBRyxNQUFNLENBQUMsSUFBSSxDQUFDLEdBQUcsQ0FBQyxFQUFFLENBQUMsQ0FBQztZQUV6QixJQUFBLGVBQVEsRUFBQyxPQUFPLENBQUMsSUFBSSxDQUFDLEdBQUcsQ0FBQyxFQUFFLEVBQUUsR0FBRyxFQUFFLFVBQVUsRUFBRSxDQUFDLENBQUM7WUFFakQsT0FBTyxJQUFJLENBQUMsS0FBSyxDQUFDLEVBQUUsQ0FBQyxZQUFZLENBQUMsSUFBSSxDQUFDLElBQUksQ0FBQyxVQUFVLEVBQUUsV0FBVyxDQUFDLEVBQUUsRUFBRSxRQUFRLEVBQUUsT0FBTyxFQUFFLENBQUMsQ0FBQyxDQUFDO1NBRS9GO2dCQUFTO1lBQ1IsRUFBRSxDQUFDLE1BQU0sQ0FBQyxVQUFVLEVBQUUsRUFBRSxTQUFTLEVBQUUsSUFBSSxFQUFFLENBQUMsQ0FBQztTQUM1QztJQUNILENBQUM7SUFFTyxVQUFVLENBQUMsS0FBVTtRQUUzQixNQUFNLGVBQWUsR0FBcUIsSUFBSSxDQUFDLEdBQUcsQ0FBQyxJQUFJLENBQUMsT0FBTyxFQUFFLENBQUMsTUFBTSxDQUFDLENBQUMsQ0FBQyxFQUFFLENBQUMsc0JBQWMsQ0FBQyxPQUFPLENBQUMsQ0FBQyxDQUFDLENBQXFCLENBQUM7UUFFN0gsS0FBSyxNQUFNLEtBQUssSUFBSSxlQUFlLEVBQUU7WUFDbkMsTUFBTSxNQUFNLEdBQUcsS0FBSyxDQUFDLElBQUksQ0FBQyxPQUFPLEVBQUUsQ0FBQyxNQUFNLENBQUMsQ0FBQyxDQUFDLEVBQUUsQ0FBQyxDQUFDLFlBQVksdUJBQWUsSUFBSSxDQUFDLENBQUMsS0FBSyxLQUFLLEtBQUssQ0FBQyxDQUFDLENBQUMsQ0FBb0IsQ0FBQztZQUN6SCxrRkFBa0Y7WUFDbEYsd0RBQXdEO1lBQ3hELElBQUksTUFBTTtnQkFBRSxPQUFPLE1BQU0sQ0FBQztTQUMzQjtRQUVELDZCQUE2QjtRQUM3Qiw2QkFBNkI7UUFDN0Isb0NBQW9DO1FBQ3BDLHVGQUF1RjtRQUN2RixNQUFNLElBQUksS0FBSyxDQUFDLHFDQUFxQyxLQUFLLHVCQUF1QixlQUFlLENBQUMsR0FBRyxDQUFDLENBQUMsQ0FBQyxFQUFFLENBQUMsQ0FBQyxDQUFDLElBQUksQ0FBQyxFQUFFLENBQUMsQ0FBQyxJQUFJLENBQUMsR0FBRyxDQUFDLEdBQUcsQ0FBQyxDQUFDO0lBRXJJLENBQUM7SUFFTyxhQUFhLENBQUMsTUFBVztRQUMvQixPQUFPLE1BQU0sSUFBSSxPQUFPLE1BQU0sS0FBSyxRQUFRLElBQUksQ0FBQyxLQUFLLENBQUMsT0FBTyxDQUFDLE1BQU0sQ0FBQyxJQUFJLEtBQUssSUFBSSxNQUFNLENBQUM7SUFDM0YsQ0FBQzs7QUEzR0gsc0NBOEdDOzs7QUFFRCxTQUFTLGFBQWEsQ0FBQyxTQUFpQixFQUFFLFNBQWlCO0lBQ3pELElBQUksQ0FBQyxFQUFFLENBQUMsVUFBVSxDQUFDLFNBQVMsQ0FBQyxFQUFFO1FBQzdCLEVBQUUsQ0FBQyxTQUFTLENBQUMsU0FBUyxDQUFDLENBQUM7S0FDekI7SUFDRCxNQUFNLEtBQUssR0FBRyxFQUFFLENBQUMsV0FBVyxDQUFDLFNBQVMsQ0FBQyxDQUFDO0lBRXhDLEtBQUssTUFBTSxJQUFJLElBQUksS0FBSyxFQUFFO1FBQ3hCLE1BQU0sY0FBYyxHQUFHLElBQUksQ0FBQyxJQUFJLENBQUMsU0FBUyxFQUFFLElBQUksQ0FBQyxDQUFDO1FBQ2xELE1BQU0sY0FBYyxHQUFHLElBQUksQ0FBQyxJQUFJLENBQUMsU0FBUyxFQUFFLElBQUksQ0FBQyxDQUFDO1FBQ2xELE1BQU0sS0FBSyxHQUFHLEVBQUUsQ0FBQyxRQUFRLENBQUMsY0FBYyxDQUFDLENBQUM7UUFFMUMsSUFBSSxLQUFLLENBQUMsV0FBVyxFQUFFLEVBQUU7WUFDdkIsYUFBYSxDQUFDLGNBQWMsRUFBRSxjQUFjLENBQUMsQ0FBQztTQUMvQzthQUFNLElBQUksS0FBSyxDQUFDLE1BQU0sRUFBRSxFQUFFO1lBQ3pCLEVBQUUsQ0FBQyxZQUFZLENBQUMsY0FBYyxFQUFFLGNBQWMsQ0FBQyxDQUFDO1NBQ2pEO0tBQ0Y7QUFDSCxDQUFDIiwic291cmNlc0NvbnRlbnQiOlsiaW1wb3J0ICogYXMgZnMgZnJvbSAnZnMnO1xuaW1wb3J0ICogYXMgb3MgZnJvbSAnb3MnO1xuaW1wb3J0ICogYXMgcGF0aCBmcm9tICdwYXRoJztcbmltcG9ydCB7IElSZXNvbHZlciwgUmVzb2x1dGlvbkNvbnRleHQgfSBmcm9tICdjZGs4cyc7XG5pbXBvcnQgeyBUb2tlbiwgVGVycmFmb3JtT3V0cHV0LCBUZXJyYWZvcm1TdGFjaywgQXBwLCBJVGVycmFmb3JtQWRkcmVzc2FibGUgfSBmcm9tICdjZGt0Zic7XG5pbXBvcnQgeyBleGVjU3luYyB9IGZyb20gJy4vZXhlYyc7XG5cbmV4cG9ydCBpbnRlcmZhY2UgQ2RrdGZSZXNvbHZlclByb3BzIHtcblxuICAvKipcbiAgICogVGhlIENES1RGIEFwcCBpbnN0YW5jZSBpbiB3aGljaCB0aGUgb3V0cHV0cyBhcmUgZGVpbmZlZCBpbi5cbiAgICovXG4gIHJlYWRvbmx5IGFwcDogQXBwO1xufVxuXG5leHBvcnQgY2xhc3MgQ2RrdGZSZXNvbHZlciBpbXBsZW1lbnRzIElSZXNvbHZlciB7XG5cbiAgcHJpdmF0ZSByZWFkb25seSBhcHA6IEFwcDtcblxuICBwcml2YXRlIF9vdXRwdXRzOiBhbnk7XG5cbiAgY29uc3RydWN0b3IocHJvcHM6IENka3RmUmVzb2x2ZXJQcm9wcykge1xuICAgIHRoaXMuYXBwID0gcHJvcHMuYXBwO1xuICB9XG5cbiAgcHVibGljIHJlc29sdmUoY29udGV4dDogUmVzb2x1dGlvbkNvbnRleHQpIHtcblxuICAgIC8vIGRldGVjdHMgZnVsbCByZXNvdXJjZXMgYmVpbmcgcGFzc2VkIGFzIHZhbHVlcy5cbiAgICAvLyB0aGlzIGlzIGxlZ2l0IGluIHRlcnJhZm9ybSBhbmQgc2hvdWxkIHJlc29sdmVcbiAgICAvLyB0byB0aGUgcmVzb3VyY2UgZnFuLlxuICAgIC8vIHNlZSBodHRwczovL2dpdGh1Yi5jb20vaGFzaGljb3JwL3RlcnJhZm9ybS1jZGsvYmxvYi9tYWluL3BhY2thZ2VzL2Nka3RmL2xpYi90ZXJyYWZvcm0tb3V0cHV0LnRzI0w3OVxuICAgIGNvbnN0IGFkZHJlc3NhYmxlID0gdGhpcy5pc0FkZHJlc3NhYmxlKGNvbnRleHQudmFsdWUpO1xuXG4gICAgaWYgKCFUb2tlbi5pc1VucmVzb2x2ZWQoY29udGV4dC52YWx1ZSkgJiYgIWFkZHJlc3NhYmxlKSB7XG4gICAgICByZXR1cm47XG4gICAgfVxuXG4gICAgY29uc3Qgb3V0cHV0ID0gdGhpcy5maW5kT3V0cHV0KGNvbnRleHQudmFsdWUpO1xuICAgIHRyeSB7XG4gICAgICBjb25zdCBvdXRwdXRWYWx1ZSA9IHRoaXMuZmV0Y2hPdXRwdXRWYWx1ZShvdXRwdXQpO1xuICAgICAgY29udGV4dC5yZXBsYWNlVmFsdWUob3V0cHV0VmFsdWUpO1xuICAgIH0gY2F0Y2ggKGVycikge1xuICAgICAgLy8gaWYgYm90aCBjZGs4cyBhbmQgQ0RLVEYgYXBwbGljYXRpb25zIGFyZSBkZWZpbmVkIHdpdGhpbiB0aGUgc2FtZSBmaWxlLFxuICAgICAgLy8gYSBjZGs4cyBzeW50aCBpcyBnb2luZyB0byBoYXBwZW4gYmVmb3JlIHRoZSBDREtURiBkZXBsb3ltZW50LlxuICAgICAgLy8gaW4gdGhpcyBjYXNlIHdlIG11c3Qgc3dhbGxvdyB0aGUgZXJyb3IsIG90aGVyd2lzZSB0aGUgQ0RLVEYgZGVwbG95bWVudFxuICAgICAgLy8gd29uJ3QgYmUgYWJsZSB0byBnbyB0aHJvdWdoLiB3ZSByZXBsYWNlIHRoZSB2YWx1ZSB3aXRoIHNvbWV0aGluZyB0byBpbmRpY2F0ZVxuICAgICAgLy8gdGhhdCBhIGZldGNoaW5nIGF0dGVtcHQgd2FzIG1hZGUgYW5kIGZhaWxlZC5cbiAgICAgIGNvbnRleHQucmVwbGFjZVZhbHVlKGBGYWlsZWQgZmV0Y2hpbmcgdmFsdWUgZm9yIG91dHB1dCAke291dHB1dC5ub2RlLnBhdGh9OiAke2Vycn1gKTtcbiAgICB9XG5cbiAgfVxuXG4gIHByaXZhdGUgZmV0Y2hPdXRwdXRWYWx1ZShvdXRwdXQ6IFRlcnJhZm9ybU91dHB1dCkge1xuICAgIGlmICghdGhpcy5fb3V0cHV0cykge1xuICAgICAgdGhpcy5fb3V0cHV0cyA9IHRoaXMuZmV0Y2hPdXRwdXRzKCk7XG4gICAgfVxuXG4gICAgY29uc3Qgc3RhY2sgPSBUZXJyYWZvcm1TdGFjay5vZihvdXRwdXQpO1xuXG4gICAgcmV0dXJuIHRoaXMuX291dHB1dHNbc3RhY2subm9kZS5pZF1bb3V0cHV0LmZyaWVuZGx5VW5pcXVlSWRdO1xuICB9XG5cbiAgcHJpdmF0ZSBmZXRjaE91dHB1dHMoKTogYW55IHtcblxuICAgIGNvbnN0IHByb2plY3REaXIgPSBmcy5ta2R0ZW1wU3luYyhwYXRoLmpvaW4ob3MudG1wZGlyKCksICdjZGt0Zi1wcm9qZWN0LScpKTtcbiAgICBjb25zdCBvdXRwdXRzRmlsZSA9ICdvdXRwdXRzLmpzb24nO1xuXG4gICAgdHJ5IHtcblxuICAgICAgdGhpcy5hcHAuc3ludGgoKTtcblxuICAgICAgY29uc3QgY2RrdGZKc29uID0ge1xuICAgICAgICAvLyBgY2RrdGYgb3V0cHV0YCBkb2Vzbid0IGFjdHVhbGx5IHVzZSB0aGlzIHZhbHVlLFxuICAgICAgICAvLyBzbyB3ZSBjYW4gcHV0IHdoYXRldmVyIHdlIHdhbnQgaGVyZS5cbiAgICAgICAgbGFuZ3VhZ2U6ICdweXRob24nLFxuICAgICAgICBhcHA6ICdjZGt0Zi5vdXQnLFxuICAgICAgfTtcblxuICAgICAgLy8gY3JlYXRlIG91ciBvd24gY29weSBvZiB0aGUgc3ludGhlc2l6ZWQgYXBwIHNvIHdlIGNhbiBzYWZlbHkgY2xlYW4gaXQgdXBcbiAgICAgIGNvcHlEaXJlY3RvcnkodGhpcy5hcHAub3V0ZGlyLCBwYXRoLmpvaW4ocHJvamVjdERpciwgY2RrdGZKc29uLmFwcCkpO1xuXG4gICAgICAvLyB3cml0ZSB0aGUgY29uZmlndXJhdGlvbiBmaWxlIGFzIGl0IGlzIHJlcXVpcmVkIGZvciBhbnkgY2RrdGYgY29tbWFuZFxuICAgICAgZnMud3JpdGVGaWxlU3luYyhwYXRoLmpvaW4ocHJvamVjdERpciwgJ2Nka3RmLmpzb24nKSwgSlNPTi5zdHJpbmdpZnkoY2RrdGZKc29uKSk7XG5cbiAgICAgIGNvbnN0IHN0YWNrcyA9IHRoaXMuYXBwLm5vZGUuZmluZEFsbCgpLmZpbHRlcihjID0+IFRlcnJhZm9ybVN0YWNrLmlzU3RhY2soYykpLm1hcChjID0+IGMubm9kZS5pZCk7XG5cbiAgICAgIGNvbnN0IGNvbW1hbmQgPSBbJ2Nka3RmIG91dHB1dCcsXG4gICAgICAgICctLXNraXAtc3ludGgnLFxuICAgICAgICBgLS1vdXRwdXQgJHtjZGt0Zkpzb24uYXBwfWAsXG4gICAgICAgIGAtLW91dHB1dHMtZmlsZSAke291dHB1dHNGaWxlfWAsXG4gICAgICAgIGAke3N0YWNrcy5qb2luKCcgJyl9YF07XG5cbiAgICAgIGV4ZWNTeW5jKGNvbW1hbmQuam9pbignICcpLCB7IGN3ZDogcHJvamVjdERpciB9KTtcblxuICAgICAgcmV0dXJuIEpTT04ucGFyc2UoZnMucmVhZEZpbGVTeW5jKHBhdGguam9pbihwcm9qZWN0RGlyLCBvdXRwdXRzRmlsZSksIHsgZW5jb2Rpbmc6ICd1dGYtOCcgfSkpO1xuXG4gICAgfSBmaW5hbGx5IHtcbiAgICAgIGZzLnJtU3luYyhwcm9qZWN0RGlyLCB7IHJlY3Vyc2l2ZTogdHJ1ZSB9KTtcbiAgICB9XG4gIH1cblxuICBwcml2YXRlIGZpbmRPdXRwdXQodmFsdWU6IGFueSk6IFRlcnJhZm9ybU91dHB1dCB7XG5cbiAgICBjb25zdCBpbnNwZWN0ZWRTdGFja3M6IFRlcnJhZm9ybVN0YWNrW10gPSB0aGlzLmFwcC5ub2RlLmZpbmRBbGwoKS5maWx0ZXIoYyA9PiBUZXJyYWZvcm1TdGFjay5pc1N0YWNrKGMpKSBhcyBUZXJyYWZvcm1TdGFja1tdO1xuXG4gICAgZm9yIChjb25zdCBzdGFjayBvZiBpbnNwZWN0ZWRTdGFja3MpIHtcbiAgICAgIGNvbnN0IG91dHB1dCA9IHN0YWNrLm5vZGUuZmluZEFsbCgpLmZpbHRlcihjID0+IGMgaW5zdGFuY2VvZiBUZXJyYWZvcm1PdXRwdXQgJiYgYy52YWx1ZSA9PT0gdmFsdWUpWzBdIGFzIFRlcnJhZm9ybU91dHB1dDtcbiAgICAgIC8vIHdlIGRvbid0IHJlYWxseSBjYXJlIGlmIHRoZXJlIGFyZSBtb3JlIG91dHB1dHMgKHBvc3NpYmx5IGZyb20gZGlmZmVyZW50IHN0YWNrcylcbiAgICAgIC8vIHRoYXQgcG9pbnQgdG8gdGhlIHNhbWUgdmFsdWUuIHRoZSBmaXJzdCB3aWxsIHN1ZmZpY2UuXG4gICAgICBpZiAob3V0cHV0KSByZXR1cm4gb3V0cHV0O1xuICAgIH1cblxuICAgIC8vIFRoaXMgY2FuIGhhcHBlbiBpZiBlaXRoZXI6XG4gICAgLy8gLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS1cbiAgICAvLyAgMS4gVXNlciBkaWRuJ3QgZGVmaW5lIGFuIG91dHB1dC5cbiAgICAvLyAgMi4gVXNlciBkZWZpbmVkIGEgY29tcGxleCBsaXRlcmFsIG91dHB1dCB2YWx1ZSAoZS5nIHsgYnVja2V0TmFtZTogYnVja2V0LmJ1Y2tldCB9KS5cbiAgICB0aHJvdyBuZXcgRXJyb3IoYFVuYWJsZSB0byBmaW5kIG91dHB1dCBkZWZpbmVkIGZvciAke3ZhbHVlfSAoSW5zcGVjdGVkIHN0YWNrczogJHtpbnNwZWN0ZWRTdGFja3MubWFwKHMgPT4gcy5ub2RlLmlkKS5qb2luKCcsJyl9KWApO1xuXG4gIH1cblxuICBwcml2YXRlIGlzQWRkcmVzc2FibGUob2JqZWN0OiBhbnkpOiBvYmplY3QgaXMgSVRlcnJhZm9ybUFkZHJlc3NhYmxlIHtcbiAgICByZXR1cm4gb2JqZWN0ICYmIHR5cGVvZiBvYmplY3QgPT09ICdvYmplY3QnICYmICFBcnJheS5pc0FycmF5KG9iamVjdCkgJiYgJ2ZxbicgaW4gb2JqZWN0O1xuICB9XG5cblxufVxuXG5mdW5jdGlvbiBjb3B5RGlyZWN0b3J5KHNvdXJjZURpcjogc3RyaW5nLCB0YXJnZXREaXI6IHN0cmluZyk6IHZvaWQge1xuICBpZiAoIWZzLmV4aXN0c1N5bmModGFyZ2V0RGlyKSkge1xuICAgIGZzLm1rZGlyU3luYyh0YXJnZXREaXIpO1xuICB9XG4gIGNvbnN0IGZpbGVzID0gZnMucmVhZGRpclN5bmMoc291cmNlRGlyKTtcblxuICBmb3IgKGNvbnN0IGZpbGUgb2YgZmlsZXMpIHtcbiAgICBjb25zdCBzb3VyY2VGaWxlUGF0aCA9IHBhdGguam9pbihzb3VyY2VEaXIsIGZpbGUpO1xuICAgIGNvbnN0IHRhcmdldEZpbGVQYXRoID0gcGF0aC5qb2luKHRhcmdldERpciwgZmlsZSk7XG4gICAgY29uc3Qgc3RhdHMgPSBmcy5zdGF0U3luYyhzb3VyY2VGaWxlUGF0aCk7XG5cbiAgICBpZiAoc3RhdHMuaXNEaXJlY3RvcnkoKSkge1xuICAgICAgY29weURpcmVjdG9yeShzb3VyY2VGaWxlUGF0aCwgdGFyZ2V0RmlsZVBhdGgpO1xuICAgIH0gZWxzZSBpZiAoc3RhdHMuaXNGaWxlKCkpIHtcbiAgICAgIGZzLmNvcHlGaWxlU3luYyhzb3VyY2VGaWxlUGF0aCwgdGFyZ2V0RmlsZVBhdGgpO1xuICAgIH1cbiAgfVxufSJdfQ==