@cloud-copilot/iam-lens 0.1.136 → 0.1.138

package/dist/esm/principalCan/principalConstraints.js

@@ -0,0 +1,456 @@
+import { splitArnParts } from '@cloud-copilot/iam-utils';
+const principalTypes = ['AWS', 'Service', 'Federated', 'CanonicalUser'];
+/**
+ * Build an unconstrained principal dimension.
+ *
+ * @param explicit - True when the source policy explicitly used Principal: "*".
+ * @returns The unconstrained principal constraint.
+ */
+export function anyPrincipalConstraint(explicit) {
+    return { kind: 'any', explicit };
+}
+/**
+ * Build a positive principal constraint.
+ *
+ * @param principals - The positive principal values.
+ * @returns A normalized principal constraint.
+ */
+export function principalConstraint(principals) {
+    return normalizePrincipalConstraint(principals, undefined);
+}
+/**
+ * Build a negative principal constraint.
+ *
+ * @param notPrincipals - The excluded principal values.
+ * @returns A normalized not-principal constraint.
+ */
+export function notPrincipalConstraint(notPrincipals) {
+    return normalizePrincipalConstraint(undefined, notPrincipals);
+}
+/**
+ * Normalize optional Principal and NotPrincipal values into an internal constraint.
+ *
+ * @param principal - Positive principals, if present.
+ * @param notPrincipal - Negative principals, if present.
+ * @returns The normalized principal constraint.
+ */
+export function normalizePrincipalConstraint(principal, notPrincipal) {
+    if (principal && notPrincipal) {
+        throw new Error('Permission must have a principal or notPrincipal, not both.');
+    }
+    if (principal) {
+        const normalized = normalizePermissionPrincipals(principal);
+        if (normalized.wildcard)
+            return { kind: 'any', explicit: true };
+        return { kind: 'principal', principals: normalized };
+    }
+    if (notPrincipal) {
+        const normalized = normalizePermissionPrincipals(notPrincipal);
+        if (normalized.wildcard)
+            return { kind: 'notPrincipal', principals: normalized };
+        return { kind: 'notPrincipal', principals: normalized };
+    }
+    return { kind: 'any', explicit: false };
+}
+/**
+ * Normalize principal values by validating wildcard usage, de-duplicating values, and normalizing STS sessions.
+ *
+ * @param principals - Principal values to normalize.
+ * @returns Normalized principal values.
+ */
+export function normalizePermissionPrincipals(principals) {
+    const hasTypedValues = principalTypes.some((type) => (principals[type]?.length ?? 0) > 0);
+    if (principals.wildcard && hasTypedValues) {
+        throw new Error('Permission principals cannot combine wildcard: true with typed principal values');
+    }
+    const normalized = {};
+    if (principals.wildcard) {
+        normalized.wildcard = true;
+    }
+    for (const type of principalTypes) {
+        const values = principals[type];
+        if (values && values.length > 0) {
+            normalized[type] = Array.from(new Set(values.map((value) => normalizePrincipalValue(type, value))));
+        }
+    }
+    if (!normalized.wildcard && principalEntries(normalized).length === 0) {
+        throw new Error('Permission principals must contain at least one principal value');
+    }
+    return normalized;
+}
+/**
+ * Determine whether one principal constraint fully includes another.
+ *
+ * @param a - Candidate including constraint.
+ * @param b - Candidate included constraint.
+ * @returns True when every principal in b is also in a.
+ */
+export function principalIncludes(a, b) {
+    if (a.kind === 'any')
+        return true;
+    if (b.kind === 'any')
+        return constraintIsUniversal(a);
+    if (a.kind === 'principal' && b.kind === 'principal') {
+        return entriesIncludeAll(principalEntries(a.principals), principalEntries(b.principals));
+    }
+    if (a.kind === 'notPrincipal' && b.kind === 'principal') {
+        return principalEntries(b.principals).every((entry) => !principalEntries(a.principals).some((excluded) => entriesOverlap(excluded, entry)));
+    }
+    if (a.kind === 'notPrincipal' && b.kind === 'notPrincipal') {
+        return entriesIncludeAll(principalEntries(b.principals), principalEntries(a.principals));
+    }
+    if (a.kind === 'principal' && b.kind === 'notPrincipal') {
+        return constraintIsUniversal(a);
+    }
+    return false;
+}
+/**
+ * Determine whether two principal constraints have any possible overlap.
+ *
+ * @param a - First principal constraint.
+ * @param b - Second principal constraint.
+ * @returns True when at least one principal can satisfy both constraints.
+ */
+export function principalConstraintsOverlap(a, b) {
+    return intersectPrincipalConstraints(a, b).length > 0;
+}
+/**
+ * Return compact principal constraints representing a union.
+ *
+ * @param a - First principal constraint.
+ * @param b - Second principal constraint.
+ * @returns One or more constraints representing the union.
+ */
+export function unionPrincipalConstraints(a, b) {
+    if (principalIncludes(a, b))
+        return [a];
+    if (principalIncludes(b, a))
+        return [b];
+    if (a.kind === 'any')
+        return [{ kind: 'any', explicit: a.explicit }];
+    if (b.kind === 'any')
+        return [{ kind: 'any', explicit: b.explicit }];
+    if (a.kind === 'principal' && b.kind === 'principal') {
+        return [{ kind: 'principal', principals: mergePrincipals(a.principals, b.principals) }];
+    }
+    if (a.kind === 'notPrincipal' && b.kind === 'notPrincipal') {
+        const intersection = intersectPrincipalMaps(a.principals, b.principals);
+        return intersection
+            ? [{ kind: 'notPrincipal', principals: intersection }]
+            : [{ kind: 'any', explicit: true }];
+    }
+    const positive = a.kind === 'principal' ? a : b.kind === 'principal' ? b : undefined;
+    const negative = a.kind === 'notPrincipal' ? a : b.kind === 'notPrincipal' ? b : undefined;
+    if (positive && negative) {
+        const remainingExclusions = subtractPrincipalMap(negative.principals, positive.principals);
+        return remainingExclusions
+            ? [{ kind: 'notPrincipal', principals: remainingExclusions }]
+            : [{ kind: 'any', explicit: true }];
+    }
+    return [a, b];
+}
+/**
+ * Return constraints representing the intersection of two principal constraints.
+ *
+ * @param a - First principal constraint.
+ * @param b - Second principal constraint.
+ * @returns Constraints for the overlap, or an empty array when disjoint.
+ */
+export function intersectPrincipalConstraints(a, b) {
+    if (a.kind === 'any')
+        return [b];
+    if (b.kind === 'any')
+        return [a];
+    if (a.kind === 'principal' && b.kind === 'principal') {
+        const intersection = intersectPrincipalMaps(a.principals, b.principals);
+        return intersection ? [{ kind: 'principal', principals: intersection }] : [];
+    }
+    if (a.kind === 'notPrincipal' && b.kind === 'notPrincipal') {
+        return [{ kind: 'notPrincipal', principals: mergePrincipals(a.principals, b.principals) }];
+    }
+    const positive = a.kind === 'principal' ? a : b.kind === 'principal' ? b : undefined;
+    const negative = a.kind === 'notPrincipal' ? a : b.kind === 'notPrincipal' ? b : undefined;
+    if (positive && negative) {
+        const remaining = subtractPrincipalMap(positive.principals, negative.principals);
+        return remaining ? [{ kind: 'principal', principals: remaining }] : [];
+    }
+    return [];
+}
+/**
+ * Return constraints for allow minus deny on the principal dimension.
+ *
+ * @param allow - Allow principal constraint.
+ * @param deny - Deny principal constraint.
+ * @returns Principal constraints that remain allowed.
+ */
+export function subtractPrincipalConstraint(allow, deny) {
+    if (!principalConstraintsOverlap(allow, deny))
+        return [allow];
+    if (principalIncludes(deny, allow))
+        return [];
+    if (constraintIsUniversal(allow) && deny.kind === 'principal') {
+        return [{ kind: 'notPrincipal', principals: deny.principals }];
+    }
+    if (constraintIsUniversal(allow) && deny.kind === 'notPrincipal') {
+        return [{ kind: 'principal', principals: deny.principals }];
+    }
+    if (allow.kind === 'principal' && deny.kind === 'principal') {
+        const remaining = subtractPrincipalMap(allow.principals, deny.principals);
+        return remaining ? [{ kind: 'principal', principals: remaining }] : [];
+    }
+    if (allow.kind === 'notPrincipal' && deny.kind === 'principal') {
+        return [
+            { kind: 'notPrincipal', principals: mergePrincipals(allow.principals, deny.principals) }
+        ];
+    }
+    if (allow.kind === 'notPrincipal' && deny.kind === 'notPrincipal') {
+        const remaining = subtractPrincipalMap(deny.principals, allow.principals);
+        return remaining ? [{ kind: 'principal', principals: remaining }] : [];
+    }
+    return [allow];
+}
+/**
+ * Convert a constraint into Permission constructor principal arguments.
+ *
+ * @param constraint - The principal constraint to convert.
+ * @returns Principal and NotPrincipal fields for a Permission.
+ */
+export function principalArgsForConstraint(constraint) {
+    if (constraint.kind === 'any') {
+        return {
+            principal: constraint.explicit ? { wildcard: true } : undefined,
+            notPrincipal: undefined
+        };
+    }
+    if (constraint.kind === 'principal') {
+        return { principal: constraint.principals, notPrincipal: undefined };
+    }
+    return { principal: undefined, notPrincipal: constraint.principals };
+}
+/**
+ * Convert principal values to a stable JSON value for bucketing policy statements.
+ *
+ * @param principal - Principal values to canonicalize.
+ * @returns A JSON-compatible canonical representation.
+ */
+export function canonicalPrincipal(principal) {
+    if (!principal)
+        return null;
+    const normalized = normalizePermissionPrincipals(principal);
+    const out = {};
+    if (normalized.wildcard)
+        out.wildcard = true;
+    for (const type of principalTypes) {
+        if (normalized[type])
+            out[type] = [...normalized[type]].sort();
+    }
+    return out;
+}
+/**
+ * Convert a Principal/NotPrincipal raw policy value into PermissionPrincipals.
+ *
+ * @param value - The raw Principal or NotPrincipal value.
+ * @returns Permission principal values.
+ */
+export function principalsFromRawPolicyValue(value) {
+    if (value === undefined)
+        return undefined;
+    if (value === '*')
+        return { wildcard: true };
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return undefined;
+    const result = {};
+    const record = value;
+    for (const type of principalTypes) {
+        const rawValues = record[type];
+        if (rawValues === undefined)
+            continue;
+        result[type] = Array.isArray(rawValues) ? [...rawValues] : [rawValues];
+    }
+    return normalizePermissionPrincipals(result);
+}
+/**
+ * Convert PermissionPrincipals into a raw policy Principal or NotPrincipal value.
+ *
+ * @param principals - Principal values to convert.
+ * @returns A raw policy value.
+ */
+export function principalsToPolicyValue(principals) {
+    const normalized = normalizePermissionPrincipals(principals);
+    if (normalized.wildcard)
+        return '*';
+    const out = {};
+    for (const type of principalTypes) {
+        const values = normalized[type];
+        if (values)
+            out[type] = values.length === 1 ? values[0] : [...values];
+    }
+    return out;
+}
+function constraintIsUniversal(constraint) {
+    return (constraint.kind === 'any' ||
+        (constraint.kind === 'principal' && isWildcardPrincipals(constraint.principals)));
+}
+function isWildcardPrincipals(principals) {
+    return principals.wildcard === true || principals.AWS?.includes('*') === true;
+}
+function principalEntries(principals) {
+    if (principals.wildcard)
+        return [{ type: 'Any', value: '*', semanticKind: 'wildcard' }];
+    return principalTypes.flatMap((type) => (principals[type] ?? []).map((value) => entryForValue(type, value)));
+}
+function entriesIncludeAll(a, b) {
+    return b.every((bEntry) => a.some((aEntry) => entryIncludes(aEntry, bEntry)));
+}
+function entryIncludes(a, b) {
+    if (a.semanticKind === 'wildcard')
+        return true;
+    if (a.type === 'AWS' && a.value === '*')
+        return true;
+    if (a.type !== b.type)
+        return false;
+    if (a.value === b.value)
+        return true;
+    if (a.semanticKind === 'account' &&
+        b.accountIds?.some((accountId) => a.accountIds?.includes(accountId))) {
+        return true;
+    }
+    return false;
+}
+function entriesOverlap(a, b) {
+    return entryIncludes(a, b) || entryIncludes(b, a);
+}
+function mergePrincipals(a, b) {
+    if (isWildcardPrincipals(a) || isWildcardPrincipals(b))
+        return a.wildcard || b.wildcard ? { wildcard: true } : { AWS: ['*'] };
+    const merged = {};
+    for (const type of principalTypes) {
+        const values = [...(a[type] ?? []), ...(b[type] ?? [])];
+        if (values.length > 0)
+            merged[type] = Array.from(new Set(values.map((v) => normalizePrincipalValue(type, v))));
+    }
+    return normalizePermissionPrincipals(merged);
+}
+function intersectPrincipalMaps(a, b) {
+    if (isWildcardPrincipals(a))
+        return b;
+    if (isWildcardPrincipals(b))
+        return a;
+    const entriesA = principalEntries(a);
+    const entriesB = principalEntries(b);
+    const kept = [];
+    for (const aEntry of entriesA) {
+        for (const bEntry of entriesB) {
+            const intersection = intersectEntries(aEntry, bEntry);
+            if (intersection)
+                kept.push(intersection);
+        }
+    }
+    return principalsFromEntries(kept);
+}
+function subtractPrincipalMap(source, remove) {
+    if (isWildcardPrincipals(remove))
+        return undefined;
+    // Universal-source subtraction that needs a NotPrincipal residual is handled by
+    // subtractPrincipalConstraint before this positive-map helper is called.
+    if (isWildcardPrincipals(source))
+        return source;
+    const removeEntries = principalEntries(remove);
+    const kept = principalEntries(source).filter((entry) => !removeEntries.some((removeEntry) => entryIncludes(removeEntry, entry)));
+    return principalsFromEntries(kept);
+}
+function intersectEntries(a, b) {
+    if (!entriesOverlap(a, b))
+        return undefined;
+    if (entryIncludes(a, b))
+        return b;
+    if (entryIncludes(b, a))
+        return a;
+    return undefined;
+}
+function principalsFromEntries(entries) {
+    const out = {};
+    for (const entry of entries) {
+        if (entry.semanticKind === 'wildcard')
+            return { wildcard: true };
+        if (entry.type === 'Any')
+            return { wildcard: true };
+        const type = entry.type;
+        out[type] = [...(out[type] ?? []), entry.value];
+    }
+    for (const type of principalTypes) {
+        if (out[type])
+            out[type] = Array.from(new Set(out[type]));
+    }
+    return principalEntries(out).length > 0 ? normalizePermissionPrincipals(out) : undefined;
+}
+function entryForValue(type, value) {
+    const normalizedValue = normalizePrincipalValue(type, value);
+    if (normalizedValue === '*')
+        return { type, value: normalizedValue, semanticKind: 'wildcard' };
+    if (type === 'AWS') {
+        const accountId = accountIdForAwsPrincipal(normalizedValue);
+        if (/^\d{12}$/.test(normalizedValue) || normalizedValue.endsWith(':root')) {
+            return {
+                type,
+                value: normalizedValue,
+                semanticKind: 'account',
+                accountIds: accountId ? [accountId] : undefined
+            };
+        }
+        return {
+            type,
+            value: normalizedValue,
+            semanticKind: 'arn',
+            accountIds: accountId ? [accountId] : undefined
+        };
+    }
+    if (type === 'Service') {
+        return {
+            type,
+            value: normalizedValue,
+            semanticKind: 'service',
+            servicePrincipals: [normalizedValue]
+        };
+    }
+    if (type === 'Federated')
+        return { type, value: normalizedValue, semanticKind: 'federated' };
+    return { type, value: normalizedValue, semanticKind: 'canonicalUser' };
+}
+function normalizePrincipalValue(type, value) {
+    if (type !== 'AWS')
+        return value;
+    return normalizeStsAssumedRoleArn(value);
+}
+function accountIdForAwsPrincipal(value) {
+    if (/^\d{12}$/.test(value))
+        return value;
+    if (!value.startsWith('arn:'))
+        return undefined;
+    try {
+        return splitArnParts(value).accountId;
+    }
+    catch (_err) {
+        return undefined;
+    }
+}
+function normalizeStsAssumedRoleArn(value) {
+    if (!value.startsWith('arn:'))
+        return value;
+    let parts;
+    try {
+        parts = splitArnParts(value);
+    }
+    catch (_err) {
+        return value;
+    }
+    const resource = parts.resource ?? '';
+    if (parts.service !== 'sts' || !resource.startsWith('assumed-role/'))
+        return value;
+    const assumedRoleParts = resource.slice('assumed-role/'.length).split('/');
+    if (assumedRoleParts.length < 2)
+        return value;
+    const rolePathAndName = assumedRoleParts.slice(0, -1).join('/');
+    return `arn:${parts.partition}:iam::${parts.accountId}:role/${rolePathAndName}`;
+}
+//# sourceMappingURL=principalConstraints.js.map

package/dist/esm/principalCan/principalConstraints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"principalConstraints.js","sourceRoot":"","sources":["../../../src/principalCan/principalConstraints.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AAiDxD,MAAM,cAAc,GAA8B,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,eAAe,CAAC,CAAA;AAElG;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAiB;IACtD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAA;AAClC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,UAA4C;IAE5C,OAAO,4BAA4B,CAAC,UAAU,EAAE,SAAS,CAAC,CAAA;AAC5D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACpC,aAA+C;IAE/C,OAAO,4BAA4B,CAAC,SAAS,EAAE,aAAa,CAAC,CAAA;AAC/D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,4BAA4B,CAC1C,SAA2C,EAC3C,YAA8C;IAE9C,IAAI,SAAS,IAAI,YAAY,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAA;IAChF,CAAC;IACD,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,UAAU,GAAG,6BAA6B,CAAC,SAAS,CAAC,CAAA;QAC3D,IAAI,UAAU,CAAC,QAAQ;YAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAA;QAC/D,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,CAAA;IACtD,CAAC;IACD,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,UAAU,GAAG,6BAA6B,CAAC,YAAY,CAAC,CAAA;QAC9D,IAAI,UAAU,CAAC,QAAQ;YAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,UAAU,EAAE,CAAA;QAChF,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,UAAU,EAAE,CAAA;IACzD,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAA;AACzC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,6BAA6B,CAC3C,UAAgC;IAEhC,MAAM,cAAc,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;IACzF,IAAI,UAAU,CAAC,QAAQ,IAAI,cAAc,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CACb,iFAAiF,CAClF,CAAA;IACH,CAAC;IAED,MAAM,UAAU,GAAyB,EAAE,CAAA;IAC3C,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;QACxB,UAAU,CAAC,QAAQ,GAAG,IAAI,CAAA;IAC5B,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;QAC/B,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,UAAU,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAC3B,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CACrE,CAAA;QACH,CAAC;IACH,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,QAAQ,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAA;IACpF,CAAC;IACD,OAAO,UAAU,CAAA;AACnB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,CAAsB,EAAE,CAAsB;IAC9E,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,IAAI,CAAA;IACjC,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,qBAAqB,CAAC,CAAC,CAAC,CAAA;IAErD,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACrD,OAAO,iBAAiB,CAAC,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAA;IAC1F,CAAC;IAED,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACxD,OAAO,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,KAAK,CACzC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAC/F,CAAA;IACH,CAAC;IAED,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QAC3D,OAAO,iBAAiB,CAAC,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAA;IAC1F,CAAC;IAED,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QACxD,OAAO,qBAAqB,CAAC,CAAC,CAAC,CAAA;IACjC,CAAC;IAED,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CACzC,CAAsB,EACtB,CAAsB;IAEtB,OAAO,6BAA6B,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAA;AACvD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CACvC,CAAsB,EACtB,CAAsB;IAEtB,IAAI,iBAAiB,CAAC,CAAC,EAAE,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,CAAC,CAAA;IACvC,IAAI,iBAAiB,CAAC,CAAC,EAAE,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,CAAC,CAAA;IACvC,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAA;IACpE,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAA;IAEpE,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACrD,OAAO,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;IACzF,CAAC;IAED,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QAC3D,MAAM,YAAY,GAAG,sBAAsB,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC,CAAA;QACvE,OAAO,YAAY;YACjB,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;YACtD,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;IACvC,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACpF,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC1F,IAAI,QAAQ,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,mBAAmB,GAAG,oBAAoB,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAA;QAC1F,OAAO,mBAAmB;YACxB,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,mBAAmB,EAAE,CAAC;YAC7D,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;IACvC,CAAC;IAED,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,6BAA6B,CAC3C,CAAsB,EACtB,CAAsB;IAEtB,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,CAAC,CAAC,CAAC,CAAA;IAChC,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,CAAC,CAAC,CAAC,CAAA;IAEhC,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACrD,MAAM,YAAY,GAAG,sBAAsB,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC,CAAA;QACvE,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAC9E,CAAC;IAED,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QAC3D,OAAO,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;IAC5F,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACpF,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC1F,IAAI,QAAQ,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,oBAAoB,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAA;QAChF,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IACxE,CAAC;IAED,OAAO,EAAE,CAAA;AACX,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CACzC,KAA0B,EAC1B,IAAyB;IAEzB,IAAI,CAAC,2BAA2B,CAAC,KAAK,EAAE,IAAI,CAAC;QAAE,OAAO,CAAC,KAAK,CAAC,CAAA;IAC7D,IAAI,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IAE7C,IAAI,qBAAqB,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC9D,OAAO,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAA;IAChE,CAAC;IACD,IAAI,qBAAqB,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QACjE,OAAO,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAA;IAC7D,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC5D,MAAM,SAAS,GAAG,oBAAoB,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;QACzE,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IACxE,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC/D,OAAO;YACL,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,eAAe,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE;SACzF,CAAA;IACH,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,IAAI,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QAClE,MAAM,SAAS,GAAG,oBAAoB,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAA;QACzE,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IACxE,CAAC;IAED,OAAO,CAAC,KAAK,CAAC,CAAA;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CAAC,UAA+B;IAIxE,IAAI,UAAU,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC9B,OAAO;YACL,SAAS,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;YAC/D,YAAY,EAAE,SAAS;SACxB,CAAA;IACH,CAAC;IACD,IAAI,UAAU,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACpC,OAAO,EAAE,SAAS,EAAE,UAAU,CAAC,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,CAAA;IACtE,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,CAAC,UAAU,EAAE,CAAA;AACtE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,SAA2C;IAC5E,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAA;IAC3B,MAAM,UAAU,GAAG,6BAA6B,CAAC,SAAS,CAAC,CAAA;IAC3D,MAAM,GAAG,GAAoC,EAAE,CAAA;IAC/C,IAAI,UAAU,CAAC,QAAQ;QAAE,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAA;IAC5C,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,IAAI,UAAU,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAChE,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B,CAAC,KAAc;IACzD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IACzC,IAAI,KAAK,KAAK,GAAG;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAA;IAC5C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IAEjF,MAAM,MAAM,GAAyB,EAAE,CAAA;IACvC,MAAM,MAAM,GAAG,KAA0C,CAAA;IACzD,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,CAAA;QAC9B,IAAI,SAAS,KAAK,SAAS;YAAE,SAAQ;QACrC,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;IACxE,CAAC;IACD,OAAO,6BAA6B,CAAC,MAAM,CAAC,CAAA;AAC9C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,UAAgC;IACtE,MAAM,UAAU,GAAG,6BAA6B,CAAC,UAAU,CAAC,CAAA;IAC5D,IAAI,UAAU,CAAC,QAAQ;QAAE,OAAO,GAAG,CAAA;IAEnC,MAAM,GAAG,GAAsC,EAAE,CAAA;IACjD,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;QAC/B,IAAI,MAAM;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAA;IACvE,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,qBAAqB,CAAC,UAA+B;IAC5D,OAAO,CACL,UAAU,CAAC,IAAI,KAAK,KAAK;QACzB,CAAC,UAAU,CAAC,IAAI,KAAK,WAAW,IAAI,oBAAoB,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CACjF,CAAA;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,UAAgC;IAC5D,OAAO,UAAU,CAAC,QAAQ,KAAK,IAAI,IAAI,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,CAAC,KAAK,IAAI,CAAA;AAC/E,CAAC;AAED,SAAS,gBAAgB,CAAC,UAAgC;IACxD,IAAI,UAAU,CAAC,QAAQ;QAAE,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC,CAAA;IACvF,OAAO,cAAc,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CACrC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CACpE,CAAA;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,CAA6B,EAAE,CAA6B;IACrF,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAA;AAC/E,CAAC;AAED,SAAS,aAAa,CAAC,CAA2B,EAAE,CAA2B;IAC7E,IAAI,CAAC,CAAC,YAAY,KAAK,UAAU;QAAE,OAAO,IAAI,CAAA;IAC9C,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,KAAK,KAAK,GAAG;QAAE,OAAO,IAAI,CAAA;IACpD,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;QAAE,OAAO,KAAK,CAAA;IACnC,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IACpC,IACE,CAAC,CAAC,YAAY,KAAK,SAAS;QAC5B,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,EACpE,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,cAAc,CAAC,CAA2B,EAAE,CAA2B;IAC9E,OAAO,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AACnD,CAAC;AAED,SAAS,eAAe,CAAC,CAAuB,EAAE,CAAuB;IACvE,IAAI,oBAAoB,CAAC,CAAC,CAAC,IAAI,oBAAoB,CAAC,CAAC,CAAC;QACpD,OAAO,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAA;IACvE,MAAM,MAAM,GAAyB,EAAE,CAAA;IACvC,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;QACvD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YACnB,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC3F,CAAC;IACD,OAAO,6BAA6B,CAAC,MAAM,CAAC,CAAA;AAC9C,CAAC;AAED,SAAS,sBAAsB,CAC7B,CAAuB,EACvB,CAAuB;IAEvB,IAAI,oBAAoB,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAA;IACrC,IAAI,oBAAoB,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAA;IACrC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAA;IACpC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAA;IACpC,MAAM,IAAI,GAA+B,EAAE,CAAA;IAC3C,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;YAC9B,MAAM,YAAY,GAAG,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;YACrD,IAAI,YAAY;gBAAE,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QAC3C,CAAC;IACH,CAAC;IACD,OAAO,qBAAqB,CAAC,IAAI,CAAC,CAAA;AACpC,CAAC;AAED,SAAS,oBAAoB,CAC3B,MAA4B,EAC5B,MAA4B;IAE5B,IAAI,oBAAoB,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAA;IAClD,gFAAgF;IAChF,yEAAyE;IACzE,IAAI,oBAAoB,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAA;IAC/C,MAAM,aAAa,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAA;IAC9C,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,MAAM,CAC1C,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CACnF,CAAA;IACD,OAAO,qBAAqB,CAAC,IAAI,CAAC,CAAA;AACpC,CAAC;AAED,SAAS,gBAAgB,CACvB,CAA2B,EAC3B,CAA2B;IAE3B,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC;QAAE,OAAO,SAAS,CAAA;IAC3C,IAAI,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC;QAAE,OAAO,CAAC,CAAA;IACjC,IAAI,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC;QAAE,OAAO,CAAC,CAAA;IACjC,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,qBAAqB,CAC5B,OAAmC;IAEnC,MAAM,GAAG,GAAyB,EAAE,CAAA;IACpC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,YAAY,KAAK,UAAU;YAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAA;QAChE,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK;YAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAA;QACnD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAA;QACvB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;IACjD,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,IAAI,GAAG,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAC3D,CAAC;IACD,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,6BAA6B,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AAC1F,CAAC;AAED,SAAS,aAAa,CAAC,IAA6B,EAAE,KAAa;IACjE,MAAM,eAAe,GAAG,uBAAuB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IAC5D,IAAI,eAAe,KAAK,GAAG;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,UAAU,EAAE,CAAA;IAC9F,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACnB,MAAM,SAAS,GAAG,wBAAwB,CAAC,eAAe,CAAC,CAAA;QAC3D,IAAI,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1E,OAAO;gBACL,IAAI;gBACJ,KAAK,EAAE,eAAe;gBACtB,YAAY,EAAE,SAAS;gBACvB,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;aAChD,CAAA;QACH,CAAC;QACD,OAAO;YACL,IAAI;YACJ,KAAK,EAAE,eAAe;YACtB,YAAY,EAAE,KAAK;YACnB,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;SAChD,CAAA;IACH,CAAC;IACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO;YACL,IAAI;YACJ,KAAK,EAAE,eAAe;YACtB,YAAY,EAAE,SAAS;YACvB,iBAAiB,EAAE,CAAC,eAAe,CAAC;SACrC,CAAA;IACH,CAAC;IACD,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,WAAW,EAAE,CAAA;IAC5F,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,eAAe,EAAE,CAAA;AACxE,CAAC;AAED,SAAS,uBAAuB,CAAC,IAA6B,EAAE,KAAa;IAC3E,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,KAAK,CAAA;IAChC,OAAO,0BAA0B,CAAC,KAAK,CAAC,CAAA;AAC1C,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAa;IAC7C,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACxC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAA;IAC/C,IAAI,CAAC;QACH,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC,SAAS,CAAA;IACvC,CAAC;IAAC,OAAO,IAAI,EAAE,CAAC;QACd,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CAAC,KAAa;IAC/C,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAA;IAC3C,IAAI,KAAuC,CAAA;IAC3C,IAAI,CAAC;QACH,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,CAAA;IAC9B,CAAC;IAAC,OAAO,IAAI,EAAE,CAAC;QACd,OAAO,KAAK,CAAA;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAA;IACrC,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,eAAe,CAAC;QAAE,OAAO,KAAK,CAAA;IAClF,MAAM,gBAAgB,GAAG,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC1E,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAA;IAC7C,MAAM,eAAe,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC/D,OAAO,OAAO,KAAK,CAAC,SAAS,SAAS,KAAK,CAAC,SAAS,SAAS,eAAe,EAAE,CAAA;AACjF,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cloud-copilot/iam-lens",
-  "version": "0.1.136",
+  "version": "0.1.138",
   "description": "Visibility in IAM in and across AWS accounts",
   "keywords": [
     "aws",