@empire-builder-kit/nx 1.0.0-beta.9 → 1.0.0-rc.2

package/src/workload-roles/account-baseline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-baseline.js","sourceRoot":"","sources":["../../../../../packages/nx/src/workload-roles/account-baseline.ts"],"names":[],"mappings":";;;AAsNA,0EAoBC;AAmgBD,gGA0KC;AA8FD,gGA8EC;AAUD,8FAkDC;AA/nCD,6CAAyC;AAEzC,6CAGsB;AAEtB,qDAAoF;AAEpF,6CAGsB;AACtB,uDAW2B;AAC3B,2DAG6B;AAEhB,QAAA,oCAAoC,GAC/C,iCAA0C,CAAC;AAChC,QAAA,6CAA6C,GAAG,CAAU,CAAC;AAQxE,MAAa,gCAAiC,SAAQ,KAAK;IAE9C;IADX,YACW,cAAgE,EACzE,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,mBAAc,GAAd,cAAc,CAAkD;QAIzE,IAAI,CAAC,IAAI,GAAG,kCAAkC,CAAC;IACjD,CAAC;CACF;AARD,4EAQC;AAkGD,MAAM,cAAc,GAAG,UAAU,CAAC;AAClC,MAAM,aAAa,GACjB,gEAAgE,CAAC;AACnE,MAAM,gBAAgB,GAAG,8BAA8B,CAAC;AACxD,MAAM,aAAa,GAAG,gBAAgB,CAAC;AACvC,MAAM,cAAc,GAAG,2BAA2B,CAAC;AACnD,MAAM,aAAa,GAAG,+BAA+B,CAAC;AACtD,MAAM,YAAY,GAAG,2BAA2B,CAAC;AACjD,MAAM,wBAAwB,GAC5B,wGAAwG,CAAC;AAC3G,MAAM,4BAA4B,GAChC,oGAAoG,CAAC;AAEvG,SAAS,cAAc,CAAC,IAAY,EAAE,KAAa;IACjD,OAAO,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,YAAY,CAAC,KAAa,EAAE,OAAe,EAAE,KAAa;IACjE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,gCAAgC,CACxC,gCAAgC,EAChC,GAAG,KAAK,cAAc,CACvB,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,UAAU,CACjB,UAA6B,EAC7B,aAAqB;IAErB,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IACjD,IAAI,KAAK,CAAC,MAAM,IAAI,aAAa;QAAE,OAAO,KAAK,CAAC;IAChD,MAAM,MAAM,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC;SAChC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC;SACrB,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChB,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,GAAG,EAAE,CAAC,IAAI,MAAM,EAAE,CAAC;AAC3D,CAAC;AAED,SAAS,SAAS,CAAC,OAAe,EAAE,MAAc;IAChD,MAAM,MAAM,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC;SAChC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC;SACvB,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChB,OAAO,UAAU,MAAM,GAAG,MAAM,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAa,EAAE,OAAe;IAC7D,OAAO,UAAU,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,kBAAkB,CAAC,EAAE,EAAE,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,OAAO,UAAU,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,2BAA2B,CAAC,EAAE,EAAE,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,eAAe,CACtB,SAAiB,EACjB,MAAc,EACd,KAAa;IAEb,OAAO,UAAU,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,UAAU,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,gCAAgC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC3E,CAAC;AAED,SAAgB,+BAA+B,CAAC,OAO/C;IACC,YAAY,CAAC,OAAO,CAAC,SAAS,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC;IAC9D,YAAY,CAAC,OAAO,CAAC,cAAc,EAAE,aAAa,EAAE,iBAAiB,CAAC,CAAC;IACvE,YAAY,CAAC,OAAO,CAAC,OAAO,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;IACzD,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC;IACtD,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;IACnD,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,gCAAgC,CACxC,gCAAgC,EAChC,uBAAuB,CACxB,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,OAAO,CAAC,SAAS,WAAW,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,SAAS,aAAa,uBAAuB,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,cAAc,OAAO,CAAC,cAAc,EAAE,CAAC;AAC1L,CAAC;AAED,SAAS,mBAAmB,CAC1B,KAA0C;IAE1C,IACE,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;QACrC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE;QAC7B,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC;QAC/B,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,EACjC,CAAC;QACD,MAAM,IAAI,gCAAgC,CACxC,gCAAgC,EAChC,kFAAkF,CACnF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC;AACtB,CAAC;AAED,SAAS,aAAa,CAAC,QAA2C;IAChE,OAAO,QAAQ,CAAC,SAAS;SACtB,OAAO,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,CAC9C,QAAQ,CAAC,KAAK,CAAC,GAAG,CAChB,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,OAAO,SAAS,SAAS,SAAS,SAAS,QAAQ,EAAE,CACxE,CACF;SACA,IAAI,CAAC,cAAc,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,wBAAwB,CAAC,OAMjC;IAKC,IACE,CAAC,OAAO,CAAC,sBAAsB,KAAK,SAAS,CAAC;QAC9C,CAAC,OAAO,CAAC,sBAAsB,KAAK,SAAS,CAAC,EAC9C,CAAC;QACD,MAAM,IAAI,gCAAgC,CACxC,gCAAgC,EAChC,wFAAwF,CACzF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,sBAAsB,IAAI,CAAC,OAAO,CAAC,sBAAsB,EAAE,CAAC;QACvE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,mBAAmB,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAClE,CAAC;IACD,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC,IAAI,CACvE,cAAc,CACf,CAAC;IACF,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC,IAAI,CACvE,cAAc,CACf,CAAC;IACF,IACE,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC;QACrE,gBAAgB,CAAC,IAAI,CACnB,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAC1D,EACD,CAAC;QACD,MAAM,IAAI,gCAAgC,CACxC,sCAAsC,EACtC,0EAA0E,CAC3E,CAAC;IACJ,CAAC;IACD,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAC9B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;QAC3C,QAAQ,CAAC,OAAO;QAChB,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;KAChE,CAAC,CACH,CAAC;IACF,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAC9C,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CACtE,CACF,CAAC;IACF,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IAC1C,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,mBAAmB,GAAa,EAAE,CAAC;IACzC,MAAM,SAAS,GAAwC,EAAE,CAAC;IAE1D,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;QACvC,MAAM,WAAW,GAAG,OAAO,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAC5D,IACE,CAAC,WAAW;YACZ,CAAC,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC;YACrD,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC;YAC9C,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,EAC/C,CAAC;YACD,MAAM,IAAI,gCAAgC,CACxC,gCAAgC,EAChC,iCAAiC,OAAO,cAAc,CACvD,CAAC;QACJ,CAAC;QACD,IAAI,OAA4B,CAAC;QACjC,IAAI,CAAC;YACH,OAAO,GAAG,IAAA,uCAA0B,EAClC,OAAO,CAAC,sBAAsB,CAAC,OAAO,CAAC,CACxC,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,gCAAgC,CACxC,+BAA+B,EAC/B,qBAAqB,OAAO,sDAAsD,CACnF,CAAC;QACJ,CAAC;QACD,IACE,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,QAAQ,CAAC,KAAK;YACxC,OAAO,CAAC,wBAAwB,KAAK,WAAW,CAAC,iBAAiB;YAClE,OAAO,CAAC,aAAa,KAAK,WAAW,CAAC,aAAa;YACnD,OAAO,CAAC,qBAAqB,KAAK,WAAW,CAAC,cAAc;YAC5D,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,CAC7C,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE,EAAE,CAC7B,SAAS,CAAC,OAAO,KAAK,OAAO,IAAI,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,GAAG,CACxE,EACD,CAAC;YACD,MAAM,IAAI,gCAAgC,CACxC,+BAA+B,EAC/B,qBAAqB,OAAO,4EAA4E,CACzG,CAAC;QACJ,CAAC;QACD,MAAM,WAAW,GAAG,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,gCAAgC,CACxC,sCAAsC,EACtC,mBAAmB,OAAO,aAAa,CACxC,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnC,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,QAAQ,KAAK,KAAK,CAAC,QAAQ;gBAAE,SAAS;YACrE,MAAM,cAAc,GAAG,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;YACpD,IACE,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC;gBAChC,eAAe,CAAC,GAAG,CAAC,cAAc,CAAC,EACnC,CAAC;gBACD,MAAM,IAAI,gCAAgC,CACxC,+BAA+B,EAC/B,yBAAyB,KAAK,CAAC,QAAQ,uDAAuD,CAC/F,CAAC;YACJ,CAAC;YACD,eAAe,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YACpC,MAAM,OAAO,GAAG,OAAO,OAAO,CAAC,QAAQ,CAAC,SAAS,SAAS,OAAO,CAAC,QAAQ,CAAC,SAAS,SAAS,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC9G,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvB,IAAI,KAAK,CAAC,OAAO,KAAK,yBAAyB,EAAE,CAAC;gBAChD,mBAAmB,CAAC,IAAI,CACtB,OAAO,OAAO,CAAC,QAAQ,CAAC,SAAS,SAAS,OAAO,CAAC,QAAQ,CAAC,SAAS,qBAAqB,KAAK,CAAC,QAAQ,UAAU,CAClH,CAAC;YACJ,CAAC;QACH,CAAC;QACD,SAAS,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;IAC/B,CAAC;IACD,OAAO;QACL,SAAS;QACT,mBAAmB,EAAE,mBAAmB,CAAC,IAAI,CAAC,cAAc,CAAC;QAC7D,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC;KACxC,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAC/B,QAA2C;IAE3C,OAAO,QAAQ,CAAC,SAAS;SACtB,OAAO,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,CAC9C,QAAQ,CAAC,KAAK;SACX,MAAM,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,KAAK,yBAAyB,CAAC;SAC9D,GAAG,CACF,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CACf,OAAO,SAAS,SAAS,SAAS,qBAAqB,QAAQ,UAAU,CAC5E,CACJ;SACA,IAAI,CAAC,cAAc,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,iBAAiB,CAAC,OAO1B;IACC,MAAM,eAAe,GAAG,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,CAAC,GAAG,eAAe,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC,IAAI,CACzE,cAAc,CACf,CAAC;IACF,MAAM,WAAW,GAAG;QAClB,GAAG,wBAAwB,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC7C,GAAG,OAAO,CAAC,+BAA+B;KAC3C,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACvB,OAAO;QACL,SAAS,EAAE;YACT;gBACE,MAAM,EAAE,CAAC,sBAAsB,EAAE,mBAAmB,CAAC;gBACrD,MAAM,EAAE,OAAO;gBACf,QAAQ,EAAE,OAAO,CAAC,YAAY;qBAC3B,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC;qBACxB,IAAI,CAAC,cAAc,CAAC;gBACvB,GAAG,EAAE,sBAAsB;aAC5B;YACD;gBACE,MAAM,EAAE,CAAC,cAAc,CAAC;gBACxB,MAAM,EAAE,OAAO;gBACf,QAAQ,EAAE;oBACR,GAAG,OAAO,CAAC,oBAAoB;oBAC/B,GAAG,OAAO,CAAC,eAAe;iBAC3B,CAAC,IAAI,CAAC,cAAc,CAAC;gBACtB,GAAG,EAAE,0BAA0B;aAChC;YACD;gBACE,MAAM,EAAE,CAAC,iBAAiB,EAAE,cAAc,CAAC;gBAC3C,MAAM,EAAE,OAAO;gBACf,QAAQ,EAAE,CAAC,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC;gBAC3D,GAAG,EAAE,4BAA4B;aAClC;YACD;gBACE,MAAM,EAAE,CAAC,gBAAgB,EAAE,gCAAgC,CAAC;gBAC5D,SAAS,EAAE;oBACT,YAAY,EAAE;wBACZ,yBAAyB,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG;qBAChD;iBACF;gBACD,MAAM,EAAE,OAAO;gBACf,QAAQ,EAAE,eAAe;gBACzB,GAAG,EAAE,yBAAyB;aAC/B;YACD;gBACE,MAAM,EAAE;oBACN,gBAAgB;oBAChB,sBAAsB;oBACtB,sBAAsB;oBACtB,aAAa;oBACb,mBAAmB;oBACnB,8BAA8B;oBAC9B,sBAAsB;oBACtB,mBAAmB;oBACnB,aAAa;oBACb,eAAe;oBACf,4BAA4B;iBAC7B;gBACD,MAAM,EAAE,OAAO;gBACf,QAAQ,EAAE,QAAQ;gBAClB,GAAG,EAAE,8BAA8B;aACpC;YACD,GAAG,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;gBAC1B,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC;oBACE;wBACE,MAAM,EAAE;4BACN,8BAA8B;4BAC9B,2BAA2B;4BAC3B,2BAA2B;4BAC3B,wBAAwB;4BACxB,mCAAmC;yBACpC;wBACD,MAAM,EAAE,OAAgB;wBACxB,QAAQ,EAAE,CAAC,GAAG,QAAQ,EAAE,GAAG,WAAW,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC;wBAC5D,GAAG,EAAE,kCAAkC;qBACxC;iBACF,CAAC;SACP;QACD,OAAO,EAAE,YAAY;KACtB,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CACnB,SAAiB,EACjB,UAAkB;IAElB,MAAM,SAAS,GAAG,OAAO,SAAS,SAAS,UAAU,EAAE,CAAC;IACxD,MAAM,SAAS,GAAG,GAAG,SAAS,IAAI,CAAC;IACnC,OAAO;QACL,SAAS,EAAE;YACT;gBACE,MAAM,EAAE,MAAM;gBACd,SAAS,EAAE,EAAE,IAAI,EAAE,EAAE,qBAAqB,EAAE,OAAO,EAAE,EAAE;gBACvD,MAAM,EAAE,MAAM;gBACd,SAAS,EAAE,GAAG;gBACd,QAAQ,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;gBAChC,GAAG,EAAE,uBAAuB;aAC7B;YACD;gBACE,MAAM,EAAE,cAAc;gBACtB,SAAS,EAAE;oBACT,IAAI,EAAE,EAAE,iCAAiC,EAAE,MAAM,EAAE;iBACpD;gBACD,MAAM,EAAE,MAAM;gBACd,SAAS,EAAE,GAAG;gBACd,QAAQ,EAAE,SAAS;gBACnB,GAAG,EAAE,6BAA6B;aACnC;YACD;gBACE,MAAM,EAAE,cAAc;gBACtB,SAAS,EAAE;oBACT,eAAe,EAAE;wBACf,iCAAiC,EAAE,QAAQ;qBAC5C;iBACF;gBACD,MAAM,EAAE,MAAM;gBACd,SAAS,EAAE,GAAG;gBACd,QAAQ,EAAE,SAAS;gBACnB,GAAG,EAAE,0BAA0B;aAChC;SACF;QACD,OAAO,EAAE,YAAY;KACtB,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,OAI/B;IACC,MAAM,UAAU,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;IAC1E,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;IACrE,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;IACpE,OAAO;QACL,CAAC,KAAK,CAAC,EAAE;YACP,cAAc,EAAE,QAAQ;YACxB,UAAU,EAAE;gBACV,YAAY,EAAE,eAAe,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE;gBACxD,eAAe,EAAE,EAAE;aACpB;YACD,IAAI,EAAE,qBAAqB;YAC3B,mBAAmB,EAAE,QAAQ;SAC9B;QACD,CAAC,UAAU,CAAC,EAAE;YACZ,SAAS,EAAE,CAAC,KAAK,EAAE,+BAA+B,CAAC;YACnD,UAAU,EAAE;gBACV,IAAI,EAAE;oBACJ,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,UAAU;oBACjC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS;oBAC7B,eAAe,EAAE,OAAO,CAAC,IAAI,CAAC,aAAa;iBAC5C;gBACD,WAAW,EAAE;oBACX,SAAS,EAAE;wBACT,wBAAwB,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU;wBACzD,iCAAiC,EAAE,OAAO,CAAC,IAAI,CAAC,cAAc;wBAC9D,yBAAyB,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO;wBAC/C,uCAAuC,EACrC,OAAO,CAAC,IAAI,CAAC,mBAAmB;wBAClC,uBAAuB,EACrB,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK;qBAC3D;iBACF;gBACD,YAAY,EAAE,OAAO,CAAC,IAAI,CAAC,YAAY;gBACvC,OAAO,EAAE,eAAe;gBACxB,UAAU,EAAE,GAAG;gBACf,4BAA4B,EAAE,CAAC;gBAC/B,IAAI,EAAE;oBACJ,YAAY,EAAE,CAAC,OAAO,CAAC,wBAAwB,EAAE,KAAK,CAAC;iBACxD;gBACD,OAAO,EAAE,YAAY;gBACrB,OAAO,EAAE,GAAG;aACb;YACD,IAAI,EAAE,uBAAuB;SAC9B;QACD,CAAC,SAAS,CAAC,EAAE;YACX,UAAU,EAAE;gBACV,WAAW,EAAE,aAAa,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE;gBACvD,YAAY,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE;aAClC;YACD,IAAI,EAAE,sBAAsB;SAC7B;QACD,CAAC,OAAO,CAAC,EAAE;YACT,UAAU,EAAE;gBACV,YAAY,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE;gBACjC,eAAe,EAAE,EAAE,YAAY,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE;gBACzD,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,oBAAoB;aACxC;YACD,IAAI,EAAE,oBAAoB;SAC3B;KACF,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,OAS/B;IACC,MAAM,oBAAoB,GAAG,OAAO,CAAC,YAAY,CAAC,GAAG,CACnD,CAAC,EAAE,2BAA2B,EAAE,EAAE,EAAE,CAClC,OAAO,OAAO,CAAC,QAAQ,CAAC,SAAS,SAAS,OAAO,CAAC,eAAe,IAAI,2BAA2B,EAAE,CACrG,CAAC;IACF,MAAM,eAAe,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QACpE,OAAO,OAAO,CAAC,QAAQ,CAAC,SAAS,SAAS,OAAO,CAAC,eAAe,IAAI,IAAA,8DAA4C,EAC/G;YACE,cAAc,EAAE,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CACvD,OAAO,CACE;YACX,OAAO;YACP,sBAAsB,EAAE,OAAO,CAAC,YAAY,CAAC,IAAI,CAC/C,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,OAAO,CACnC,EAAE,mBAA6B;YAChC,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,KAAK;SAC9B,CACF,EAAE;QACH,OAAO,OAAO,CAAC,QAAQ,CAAC,SAAS,SAAS,OAAO,CAAC,eAAe,IAAI,IAAA,8CAA4B,EAC/F,OAAO,CAAC,QAAQ,CAAC,KAAK,EACtB,OAAO,CACR,EAAE;KACJ,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,GAAG,CAC3C,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CACnB,OAAO,OAAO,CAAC,QAAQ,CAAC,SAAS,SAAS,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,0BAA0B,YAAY,EAAE,CACjI,CAAC;IACF,MAAM,MAAM,GAAG,iBAAiB,CAAC;QAC/B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,YAAY;QACZ,oBAAoB;QACpB,eAAe;QACf,+BAA+B,EAAE,OAAO,CAAC,+BAA+B;QACxE,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;KACnD,CAAC,CAAC;IACH,MAAM,SAAS,GAA4B;QACzC,oBAAoB,EAAE;YACpB,UAAU,EAAE;gBACV,WAAW,EACT,sEAAsE;gBACxE,iBAAiB,EAAE,OAAO,CAAC,QAAQ,CAAC,UAAU;gBAC9C,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAC3B,cAAc,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM;aACxC;YACD,IAAI,EAAE,yBAAyB;SAChC;QACD,2BAA2B,EAAE;YAC3B,UAAU,EAAE;gBACV,wBAAwB,EAAE;oBACxB,SAAS,EAAE;wBACT;4BACE,MAAM,EAAE,gBAAgB;4BACxB,MAAM,EAAE,OAAO;4BACf,SAAS,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE;yBAC/C;qBACF;oBACD,OAAO,EAAE,YAAY;iBACtB;gBACD,QAAQ,EAAE;oBACR;wBACE,cAAc,EAAE,MAAM;wBACtB,UAAU,EAAE,wCAAwC;qBACrD;iBACF;gBACD,QAAQ,EAAE,OAAO,CAAC,mBAAmB;gBACrC,IAAI,EAAE;oBACJ,EAAE,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,kBAAkB,EAAE;oBACpD,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE;iBACpD;aACF;YACD,IAAI,EAAE,gBAAgB;SACvB;QACD,uBAAuB,EAAE;YACvB,cAAc,EAAE,QAAQ;YACxB,UAAU,EAAE;gBACV,gBAAgB,EAAE;oBAChB,iCAAiC,EAAE;wBACjC;4BACE,6BAA6B,EAAE;gCAC7B,YAAY,EAAE,QAAQ;6BACvB;yBACF;qBACF;iBACF;gBACD,UAAU,EAAE,OAAO,CAAC,eAAe;gBACnC,iBAAiB,EAAE;oBACjB,KAAK,EAAE,CAAC,EAAE,eAAe,EAAE,qBAAqB,EAAE,CAAC;iBACpD;gBACD,8BAA8B,EAAE;oBAC9B,eAAe,EAAE,IAAI;oBACrB,iBAAiB,EAAE,IAAI;oBACvB,gBAAgB,EAAE,IAAI;oBACtB,qBAAqB,EAAE,IAAI;iBAC5B;gBACD,uBAAuB,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE;aAC/C;YACD,IAAI,EAAE,iBAAiB;YACvB,mBAAmB,EAAE,QAAQ;SAC9B;QACD,6BAA6B,EAAE;YAC7B,UAAU,EAAE;gBACV,MAAM,EAAE,EAAE,GAAG,EAAE,yBAAyB,EAAE;gBAC1C,cAAc,EAAE,YAAY,CAC1B,OAAO,CAAC,QAAQ,CAAC,SAAS,EAC1B,OAAO,CAAC,eAAe,CACxB;aACF;YACD,IAAI,EAAE,uBAAuB;SAC9B;KACF,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QACxC,MAAM,CAAC,MAAM,CACX,SAAS,EACT,sBAAsB,CAAC;YACrB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,IAAI;YACJ,wBAAwB,EAAE,6BAA6B;SACxD,CAAC,CACH,CAAC;IACJ,CAAC;IACD,OAAO;QACL,wBAAwB,EAAE,YAAY;QACtC,WAAW,EACT,4HAA4H;QAC9H,SAAS,EAAE,SAAS;KACrB,CAAC;AACJ,CAAC;AAED,SAAgB,0CAA0C,CAAC,OAgB1D;IACC,YAAY,CACV,OAAO,CAAC,iBAAiB,EACzB,cAAc,EACd,qBAAqB,CACtB,CAAC;IACF,YAAY,CACV,OAAO,CAAC,yBAAyB,EACjC,gBAAgB,EAChB,6BAA6B,CAC9B,CAAC;IACF,YAAY,CAAC,OAAO,CAAC,aAAa,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC;IACpE,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,mBAAmB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,cAAc,GAAG,wBAAwB,CAAC,IAAI,CAClD,OAAO,CAAC,yBAAyB,CAClC,CAAC;IACF,IACE,CAAC,cAAc;QACf,cAAc,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,iBAAiB;QAC/C,cAAc,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,iBAAiB,EAC/C,CAAC;QACD,MAAM,IAAI,gCAAgC,CACxC,+BAA+B,EAC/B,+EAA+E,CAChF,CAAC;IACJ,CAAC;IACD,MAAM,kBAAkB,GAAG,4BAA4B,CAAC,IAAI,CAC1D,OAAO,CAAC,6BAA6B,CACtC,CAAC;IACF,IACE,CAAC,kBAAkB;QACnB,kBAAkB,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,iBAAiB;QACnD,kBAAkB,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,iBAAiB;QACnD,OAAO,CAAC,6BAA6B,KAAK,OAAO,CAAC,yBAAyB,EAC3E,CAAC;QACD,MAAM,IAAI,gCAAgC,CACxC,+BAA+B,EAC/B,qHAAqH,CACtH,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,IAAA,2DAAuC,EAAC;QACvD,SAAS,EAAE,OAAO,CAAC,mBAAmB;QACtC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,yBAAyB,EAAE,OAAO,CAAC,yBAAyB;QAC5D,uBAAuB,EAAE,OAAO,CAAC,uBAAuB;QACxD,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,aAAa,EAAE,OAAO,CAAC,aAAa;KACrC,CAAC,CAAC;IACH,MAAM,mBAAmB,GAAG,wBAAwB,CAAC;QACnD,QAAQ;QACR,GAAG,CAAC,OAAO,CAAC,sBAAsB;YAChC,CAAC,CAAC,EAAE,sBAAsB,EAAE,OAAO,CAAC,sBAAsB,EAAE;YAC5D,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,CAAC,sBAAsB;YAChC,CAAC,CAAC,EAAE,sBAAsB,EAAE,OAAO,CAAC,sBAAsB,EAAE;YAC5D,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,eAAe,CAChC,OAAO,CAAC,iBAAiB,EACzB,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,aAAa,CACtB,CAAC;IACF,MAAM,YAAY,GAAG,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE;QACvD,MAAM,sBAAsB,GAAG,+BAA+B,CAAC;YAC7D,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK;SACzC,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,sBAAsB,KAAK,sBAAsB,EAAE,CAAC;YAC/D,MAAM,IAAI,gCAAgC,CACxC,+BAA+B,EAC/B,sBAAsB,QAAQ,CAAC,OAAO,2DAA2D,CAClG,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,IAAA,uDAAqC,EAAC;YACpD,UAAU;YACV,iBAAiB,EAAE,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ;YACvD,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,sBAAsB,EAAE,sBAAsB;YAC9C,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK;SACzC,CAAC,CAAC;QACH,OAAO;YACL,iBAAiB,EAAE,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ;YACvD,YAAY,EAAE,uBAAuB,CACnC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,EACjC,QAAQ,CAAC,OAAO,CACjB;YACD,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,mBAAmB,EAAE,sBAAsB;YAC3C,oBAAoB,EAAE,aAAa,QAAQ,CAAC,cAAc,EAAE;YAC5D,kBAAkB,EAAE;gBAClB,iBAAiB,EAAE,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ;gBACvD,cAAc,EAAE,QAAQ,CAAC,cAAc;gBACvC,SAAS,EAAE,UAAmB;gBAC9B,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK;aACzC;YACD,kBAAkB,EAAE,QAAQ;YAC5B,2BAA2B,EAAE,IAAA,yDAAuC,EAAC;gBACnE,cAAc,EAAE,QAAQ,CAAC,cAAc;gBACvC,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,sBAAsB,EAAE,sBAAsB;gBAC9C,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK;aACzC,CAAC;YACF,OAAO;YACP,oBAAoB,EAAE,IAAA,qDAAmC,EACvD,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,EACjC,QAAQ,CAAC,OAAO,CACjB;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC5D,OAAO;QACL,QAAQ;QACR,iBAAiB,EAAE,OAAO,CAAC,yBAAyB;QACpD,iBAAiB,EAAE,OAAO,CAAC,yBAAyB;QACpD,kBAAkB,EAAE,cAAc,CAAC,CAAC,CAAW;QAC/C,YAAY;QACZ,mBAAmB,EAAE,QAAQ;QAC7B,qBAAqB,EAAE,OAAO,CAAC,6BAA6B;QAC5D,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,aAAa,EAAE,qDAA6C;QAC5D,SAAS,EAAE,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC;QAC3C,KAAK,EAAE,OAAO,CAAC,aAAa;QAC5B,eAAe,EAAE,UAAU;QAC3B,6BAA6B,EAAE,sBAAsB,CAAC;YACpD,QAAQ;YACR,IAAI;YACJ,YAAY;YACZ,mBAAmB,EAAE,QAAQ;YAC7B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,eAAe,EAAE,UAAU;YAC3B,+BAA+B,EAAE,EAAE;YACnC,oBAAoB,EAAE,EAAE;SACzB,CAAC;QACF,kCAAkC,EAAE,sBAAsB,CAAC;YACzD,QAAQ;YACR,IAAI;YACJ,YAAY;YACZ,mBAAmB,EAAE,QAAQ;YAC7B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,eAAe,EAAE,UAAU;YAC3B,+BAA+B,EAAE,mBAAmB,CAAC,mBAAmB;YACxE,oBAAoB,EAAE,mBAAmB,CAAC,QAAQ;SACnD,CAAC;QACF,+BAA+B,EAAE,mBAAmB,CAAC,mBAAmB;QACxE,oBAAoB,EAAE,mBAAmB,CAAC,QAAQ;KACnD,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAC3B,IAAqC,EACrC,KAAc;IAKd,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACpB,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC;QAChB,KAAK,CAAC,EAAE,KAAK,IAAI,EACjB,CAAC;QACD,MAAM,IAAI,gCAAgC,CACxC,iCAAiC,EACjC,yBAAyB,IAAI,CAAC,OAAO,oCAAoC,CAC1E,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,MAAM,OAAO,GAAG;QACd,mBAAmB;QACnB,eAAe;QACf,gBAAgB;QAChB,IAAI;QACJ,WAAW;QACX,iBAAiB;QACjB,iBAAiB;QACjB,yBAAyB;QACzB,qBAAqB;QACrB,OAAO;KACR,CAAC;IACF,IACE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACnE,MAAM,CAAC,iBAAiB,KAAK,IAAI,CAAC,iBAAiB;QACnD,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ;QACxC,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;QACzC,MAAM,CAAC,cAAc,KAAK,IAAI,CAAC,cAAc;QAC7C,MAAM,CAAC,SAAS,KAAK,UAAU;QAC/B,MAAM,CAAC,eAAe;YACpB,iEAAgD;QAClD,MAAM,CAAC,mBAAmB;YACxB,kEAAqD;QACvD,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK;QACjE,OAAO,MAAM,CAAC,eAAe,KAAK,QAAQ;QAC1C,MAAM,CAAC,eAAe,KAAK,IAAI;QAC/B,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,EACrC,CAAC;QACD,MAAM,IAAI,gCAAgC,CACxC,iCAAiC,EACjC,0CAA0C,IAAI,CAAC,OAAO,mBAAmB,CAC1E,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,eAA0C,CAAC;IACjE,IACE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,sBAAsB;QAC/D,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CACxB,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAK,KAAgB,GAAG,CAAC,CACjE,EACD,CAAC;QACD,MAAM,IAAI,gCAAgC,CACxC,iCAAiC,EACjC,0CAA0C,IAAI,CAAC,OAAO,eAAe,CACtE,CAAC;IACJ,CAAC;IACD,MAAM,uBAAuB,GAC3B,IAAA,oEAAkD,EAChD,MAAM,CAAC,uBAAuB,CAC/B,CAAC;IACJ,IACE,uBAAuB,CAAC,YAAY,CAAC,sBAAsB;QAC3D,IAAI,CAAC,mBAAmB,EACxB,CAAC;QACD,MAAM,IAAI,gCAAgC,CACxC,iCAAiC,EACjC,gCAAgC,IAAI,CAAC,OAAO,uBAAuB,CACpE,CAAC;IACJ,CAAC;IACD,OAAO;QACL,GAAI,KAAkE;QACtE,uBAAuB;KACxB,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAe,EAAE,GAAW;IAC1D,MAAM,aAAa,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC;SACvC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC;SACvB,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChB,OAAO,UAAU,aAAa,GAAG,GAAG,EAAE,CAAC;AACzC,CAAC;AAED,SAAgB,0CAA0C,CAAC,OAG1D;IACC,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,IAAI,CACjE,cAAc,CACf,CAAC;IACF,MAAM,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,YAAY;SAC/C,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC;SAC7B,IAAI,CAAC,cAAc,CAAC,CAAC;IACxB,IAAI,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,gCAAgC,CACxC,sCAAsC,EACtC,qEAAqE,CACtE,CAAC;IACJ,CAAC;IACD,MAAM,oBAAoB,GAA4C,EAAE,CAAC;IACzE,MAAM,iBAAiB,GAGnB,EAAE,CAAC;IACP,MAAM,iBAAiB,GACrB,EAAE,CAAC;IAEL,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,oBAAoB,CACjC,IAAI,EACJ,OAAO,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CACzC,CAAC;QACF,MAAM,SAAS,GAAG,IAAA,+CAA6B,EAAC;YAC9C,yBAAyB,EAAE,OAAO,CAAC,IAAI,CAAC,iBAAiB;YACzD,eAAe,EAAE,IAAI,CAAC,OAAO;YAC7B,aAAa,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK;YACjC,uBAAuB,EAAE,MAAM,CAAC,uBAAuB;YACvD,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,mBAAmB,EAAE,IAAI,CAAC,OAAO;SAClC,CAAC,CAAC;QACH,oBAAoB,CAAC,IAAI,CACvB,GAAG,SAAS,CAAC,aAAa,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YACxD,MAAM,EAAE,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC9B,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,QAAQ,EAAE,CAAC,GAAG,SAAS,CAAC,SAAS,CAAC;YAClC,GAAG,EAAE,sBAAsB,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC;SACzD,CAAC,CAAC,CACJ,CAAC;QACF,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG;YAChC,uBAAuB,EAAE,MAAM,CAAC,uBAAuB;YACvD,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;YAC/C,qBAAqB,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;SACpD,CAAC;QACF,iBAAiB,CAAC,IAAI,CAAC;YACrB,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,eAAe,EAAE;gBACf,MAAM,EAAE,MAAM,CAAC,eAAe,CAAC,MAAM;gBACrC,MAAM,EAAE,MAAM,CAAC,eAAe,CAAC,MAAM;gBACrC,MAAM,EAAE,MAAM,CAAC,eAAe,CAAC,MAAM;aACtC;YACD,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC,CAAC;IACL,CAAC;IACD,oBAAoB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACxC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CACpC,CAAC;IACF,OAAO;QACL,gBAAgB,EAAE;YAChB,SAAS,EAAE,oBAAoB;YAC/B,OAAO,EAAE,YAAY;SACtB;QACD,oBAAoB,EAAE,4CAAoC;QAC1D,iBAAiB;QACjB,eAAe,EAAE;YACf,iBAAiB,EAAE,OAAO,CAAC,IAAI,CAAC,iBAAiB;YACjD,QAAQ,EAAE,iBAAiB;YAC3B,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK;SAC1B;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACI,KAAK,UAAU,yCAAyC,CAAC,OAG/D;IACC,MAAM,OAAO,CAAC,YAAY,CAAC,oBAAoB,CAC7C,OAAO,CAAC,IAAI,CAAC,kCAAkC,EAC/C,OAAO,CAAC,IAAI,CAAC,SAAS,CACvB,CAAC;IACF,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QAChD,MAAM,OAAO,CAAC,YAAY,CAAC,qBAAqB,CAAC;YAC/C,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,UAAU;YACtC,GAAG,EAAE,OAAO,CAAC,2BAA2B;YACxC,KAAK,EAAE,OAAO,CAAC,kBAAkB;SAClC,CAAC,CAAC;IACL,CAAC;IACD,MAAM,kBAAkB,GAA4B,EAAE,CAAC;IACvD,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QAChD,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC;YACjC,MAAM,OAAO,CAAC,YAAY,CAAC,0BAA0B,CACnD,OAAO,CAAC,mBAAmB,EAC3B,OAAO,CAAC,kBAAkB,CAC3B,CAAC;IACN,CAAC;IACD,MAAM,SAAS,GAAG,0CAA0C,CAAC;QAC3D,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,kBAAkB;KACnB,CAAC,CAAC;IACH,MAAM,OAAO,CAAC,YAAY,CAAC,oBAAoB,CAC7C,OAAO,CAAC,IAAI,CAAC,6BAA6B,EAC1C,OAAO,CAAC,IAAI,CAAC,SAAS,CACvB,CAAC;IACF,MAAM,OAAO,CAAC,YAAY,CAAC,uBAAuB,CAAC;QACjD,MAAM,EAAE,SAAS,CAAC,gBAAgB;QAClC,UAAU,EAAE,SAAS,CAAC,oBAAoB;QAC1C,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,kBAAkB;KAC1C,CAAC,CAAC;IACH,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QAChD,MAAM,QAAQ,GAAG,SAAS,CAAC,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9D,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,gCAAgC,CACxC,iCAAiC,EACjC,wBAAwB,OAAO,CAAC,OAAO,aAAa,CACrD,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,CAAC,YAAY,CAAC,iBAAiB,CAAC;YAC3C,IAAI,EAAE,QAAQ,CAAC,oBAAoB;YACnC,KAAK,EAAE,QAAQ,CAAC,qBAAqB;SACtC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,SAAS,CAAC,eAAe,CAAC;AACnC,CAAC"}

package/src/workload-roles/authority.d.ts

@@ -0,0 +1,38 @@
+import { ExactProvisionedWorkloadRoleRegistry } from './injection.js';
+/**
+ * Direct workload-role IAM mutation denied to the ordinary deployment role.
+ * The validator requires this exact deny and rejects every IAM Allow except
+ * the generated service-constrained `iam:PassRole` statements.
+ */
+export declare const DIRECT_WORKLOAD_ROLE_IAM_MUTATION_ACTIONS: readonly ["iam:AddRoleToInstanceProfile", "iam:AttachRolePolicy", "iam:CreateInstanceProfile", "iam:CreatePolicy", "iam:CreatePolicyVersion", "iam:CreateRole", "iam:DeleteInstanceProfile", "iam:DeletePolicy", "iam:DeletePolicyVersion", "iam:DeleteRole", "iam:DeleteRolePermissionsBoundary", "iam:DeleteRolePolicy", "iam:DetachRolePolicy", "iam:PutRolePermissionsBoundary", "iam:PutRolePolicy", "iam:RemoveRoleFromInstanceProfile", "iam:SetDefaultPolicyVersion", "iam:TagInstanceProfile", "iam:TagPolicy", "iam:TagRole", "iam:UntagInstanceProfile", "iam:UntagPolicy", "iam:UntagRole", "iam:UpdateAssumeRolePolicy", "iam:UpdateRole", "iam:UpdateRoleDescription"];
+export interface DeploymentRoleAuthorityStatement {
+    actions: string[];
+    conditions?: {
+        StringEquals: {
+            'iam:PassedToService': string;
+        };
+    };
+    effect: 'Allow' | 'Deny';
+    resources: string[];
+    sid: string;
+}
+export interface DeploymentRoleAuthorityPlan {
+    statements: DeploymentRoleAuthorityStatement[];
+}
+export interface DeploymentRoleRegistrationReadScope {
+    provisionedRegistrationObjectArn: string;
+    registeredManifestObjectArn: string;
+    storageRegistrationParameterArn: string;
+}
+export interface DeploymentRoleAuthorityValidation {
+    issues: string[];
+    valid: boolean;
+}
+/**
+ * Stable ordinary deployment-role authority. It can read exact protected
+ * registration objects, invoke and observe only the fixed qualified
+ * provisioner, and pass exact registered roles to their declared AWS services.
+ * It deliberately exposes no direct IAM role inspection or mutation surface.
+ */
+export declare function createDeploymentRoleAuthorityPlan(registry: ExactProvisionedWorkloadRoleRegistry, registrationReadScope?: DeploymentRoleRegistrationReadScope): DeploymentRoleAuthorityPlan;
+export declare function validateDeploymentRoleAuthorityPlan(registry: ExactProvisionedWorkloadRoleRegistry, value: unknown, registrationReadScope?: DeploymentRoleRegistrationReadScope): DeploymentRoleAuthorityValidation;

package/src/workload-roles/authority.js

@@ -0,0 +1,156 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DIRECT_WORKLOAD_ROLE_IAM_MUTATION_ACTIONS = void 0;
+exports.createDeploymentRoleAuthorityPlan = createDeploymentRoleAuthorityPlan;
+exports.validateDeploymentRoleAuthorityPlan = validateDeploymentRoleAuthorityPlan;
+/**
+ * Direct workload-role IAM mutation denied to the ordinary deployment role.
+ * The validator requires this exact deny and rejects every IAM Allow except
+ * the generated service-constrained `iam:PassRole` statements.
+ */
+exports.DIRECT_WORKLOAD_ROLE_IAM_MUTATION_ACTIONS = [
+    'iam:AddRoleToInstanceProfile',
+    'iam:AttachRolePolicy',
+    'iam:CreateInstanceProfile',
+    'iam:CreatePolicy',
+    'iam:CreatePolicyVersion',
+    'iam:CreateRole',
+    'iam:DeleteInstanceProfile',
+    'iam:DeletePolicy',
+    'iam:DeletePolicyVersion',
+    'iam:DeleteRole',
+    'iam:DeleteRolePermissionsBoundary',
+    'iam:DeleteRolePolicy',
+    'iam:DetachRolePolicy',
+    'iam:PutRolePermissionsBoundary',
+    'iam:PutRolePolicy',
+    'iam:RemoveRoleFromInstanceProfile',
+    'iam:SetDefaultPolicyVersion',
+    'iam:TagInstanceProfile',
+    'iam:TagPolicy',
+    'iam:TagRole',
+    'iam:UntagInstanceProfile',
+    'iam:UntagPolicy',
+    'iam:UntagRole',
+    'iam:UpdateAssumeRolePolicy',
+    'iam:UpdateRole',
+    'iam:UpdateRoleDescription',
+];
+function compareStrings(left, right) {
+    return left < right ? -1 : left > right ? 1 : 0;
+}
+function createPassRoleStatements(registry) {
+    const rolesByDestination = new Map();
+    for (const declaration of registry.manifest.roles) {
+        const role = registry.resolve(declaration.id);
+        for (const destination of declaration.passDestinations) {
+            const roleArns = rolesByDestination.get(destination) ?? new Set();
+            roleArns.add(role.roleArn);
+            rolesByDestination.set(destination, roleArns);
+        }
+    }
+    return [...rolesByDestination.entries()]
+        .sort(([left], [right]) => compareStrings(left, right))
+        .map(([destination, roleArns], index) => ({
+        actions: ['iam:PassRole'],
+        conditions: {
+            StringEquals: {
+                'iam:PassedToService': destination,
+            },
+        },
+        effect: 'Allow',
+        resources: [...roleArns].sort(compareStrings),
+        sid: `PassRegisteredWorkloadRoles${index + 1}`,
+    }));
+}
+/**
+ * Stable ordinary deployment-role authority. It can read exact protected
+ * registration objects, invoke and observe only the fixed qualified
+ * provisioner, and pass exact registered roles to their declared AWS services.
+ * It deliberately exposes no direct IAM role inspection or mutation surface.
+ */
+function createDeploymentRoleAuthorityPlan(registry, registrationReadScope) {
+    return {
+        statements: [
+            {
+                actions: [...exports.DIRECT_WORKLOAD_ROLE_IAM_MUTATION_ACTIONS].sort(compareStrings),
+                effect: 'Deny',
+                resources: ['*'],
+                sid: 'DenyDirectWorkloadIamMutation',
+            },
+            {
+                actions: ['lambda:InvokeFunction'],
+                effect: 'Allow',
+                resources: [registry.provisionerFunctionArn],
+                sid: 'InvokeFixedWorkloadRoleProvisioner',
+            },
+            {
+                actions: ['lambda:GetFunction'],
+                effect: 'Allow',
+                resources: [registry.provisionerFunctionArn],
+                sid: 'ObserveFixedWorkloadRoleProvisioner',
+            },
+            ...(registrationReadScope
+                ? [
+                    {
+                        actions: ['ssm:GetParameter'],
+                        effect: 'Allow',
+                        resources: [
+                            registrationReadScope.storageRegistrationParameterArn,
+                        ],
+                        sid: 'ReadWorkloadRoleStorageRegistration',
+                    },
+                    {
+                        actions: ['s3:GetObject'],
+                        effect: 'Allow',
+                        resources: [
+                            registrationReadScope.registeredManifestObjectArn,
+                            registrationReadScope.provisionedRegistrationObjectArn,
+                        ].sort(compareStrings),
+                        sid: 'ReadExactWorkloadRoleRegistrations',
+                    },
+                ]
+                : []),
+            ...createPassRoleStatements(registry),
+        ],
+    };
+}
+function canonicalPlan(plan) {
+    return JSON.stringify(plan);
+}
+function validateDeploymentRoleAuthorityPlan(registry, value, registrationReadScope) {
+    const issues = [];
+    if (typeof value !== 'object' ||
+        value === null ||
+        !('statements' in value) ||
+        !Array.isArray(value.statements)) {
+        return {
+            issues: ['authority plan must contain a statements array'],
+            valid: false,
+        };
+    }
+    for (const statement of value.statements) {
+        if (typeof statement !== 'object' ||
+            statement === null ||
+            !('actions' in statement) ||
+            !Array.isArray(statement.actions)) {
+            issues.push('every authority statement must contain an actions array');
+            continue;
+        }
+        for (const action of statement.actions) {
+            if (typeof action !== 'string' ||
+                (action.startsWith('iam:') &&
+                    action !== 'iam:PassRole' &&
+                    (!('effect' in statement) || statement.effect !== 'Deny'))) {
+                issues.push(`ordinary deployment authority contains forbidden IAM action ${String(action)}`);
+            }
+        }
+    }
+    const expected = createDeploymentRoleAuthorityPlan(registry, registrationReadScope);
+    if (canonicalPlan(value) !==
+        canonicalPlan(expected)) {
+        issues.push('authority plan does not exactly match the fixed provisioner and registered PassRole plan');
+    }
+    return { issues, valid: issues.length === 0 };
+}
+//# sourceMappingURL=authority.js.map

package/src/workload-roles/authority.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authority.js","sourceRoot":"","sources":["../../../../../packages/nx/src/workload-roles/authority.ts"],"names":[],"mappings":";;;AAqGA,8EAkDC;AAMD,kFAuDC;AAlND;;;;GAIG;AACU,QAAA,yCAAyC,GAAG;IACvD,8BAA8B;IAC9B,sBAAsB;IACtB,2BAA2B;IAC3B,kBAAkB;IAClB,yBAAyB;IACzB,gBAAgB;IAChB,2BAA2B;IAC3B,kBAAkB;IAClB,yBAAyB;IACzB,gBAAgB;IAChB,mCAAmC;IACnC,sBAAsB;IACtB,sBAAsB;IACtB,gCAAgC;IAChC,mBAAmB;IACnB,mCAAmC;IACnC,6BAA6B;IAC7B,wBAAwB;IACxB,eAAe;IACf,aAAa;IACb,0BAA0B;IAC1B,iBAAiB;IACjB,eAAe;IACf,4BAA4B;IAC5B,gBAAgB;IAChB,2BAA2B;CACnB,CAAC;AA6BX,SAAS,cAAc,CAAC,IAAY,EAAE,KAAa;IACjD,OAAO,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,wBAAwB,CAC/B,QAA8C;IAE9C,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC1D,KAAK,MAAM,WAAW,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QAClD,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAC9C,KAAK,MAAM,WAAW,IAAI,WAAW,CAAC,gBAAgB,EAAE,CAAC;YACvD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;YAC1E,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC3B,kBAAkB,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,kBAAkB,CAAC,OAAO,EAAE,CAAC;SACrC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;SACtD,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACxC,OAAO,EAAE,CAAC,cAAc,CAAC;QACzB,UAAU,EAAE;YACV,YAAY,EAAE;gBACZ,qBAAqB,EAAE,WAAW;aACnC;SACF;QACD,MAAM,EAAE,OAAO;QACf,SAAS,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC;QAC7C,GAAG,EAAE,8BAA8B,KAAK,GAAG,CAAC,EAAE;KAC/C,CAAC,CAAC,CAAC;AACR,CAAC;AAED;;;;;GAKG;AACH,SAAgB,iCAAiC,CAC/C,QAA8C,EAC9C,qBAA2D;IAE3D,OAAO;QACL,UAAU,EAAE;YACV;gBACE,OAAO,EAAE,CAAC,GAAG,iDAAyC,CAAC,CAAC,IAAI,CAC1D,cAAc,CACf;gBACD,MAAM,EAAE,MAAM;gBACd,SAAS,EAAE,CAAC,GAAG,CAAC;gBAChB,GAAG,EAAE,+BAA+B;aACrC;YACD;gBACE,OAAO,EAAE,CAAC,uBAAuB,CAAC;gBAClC,MAAM,EAAE,OAAO;gBACf,SAAS,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC;gBAC5C,GAAG,EAAE,oCAAoC;aAC1C;YACD;gBACE,OAAO,EAAE,CAAC,oBAAoB,CAAC;gBAC/B,MAAM,EAAE,OAAO;gBACf,SAAS,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC;gBAC5C,GAAG,EAAE,qCAAqC;aAC3C;YACD,GAAG,CAAC,qBAAqB;gBACvB,CAAC,CAAC;oBACE;wBACE,OAAO,EAAE,CAAC,kBAAkB,CAAC;wBAC7B,MAAM,EAAE,OAAgB;wBACxB,SAAS,EAAE;4BACT,qBAAqB,CAAC,+BAA+B;yBACtD;wBACD,GAAG,EAAE,qCAAqC;qBAC3C;oBACD;wBACE,OAAO,EAAE,CAAC,cAAc,CAAC;wBACzB,MAAM,EAAE,OAAgB;wBACxB,SAAS,EAAE;4BACT,qBAAqB,CAAC,2BAA2B;4BACjD,qBAAqB,CAAC,gCAAgC;yBACvD,CAAC,IAAI,CAAC,cAAc,CAAC;wBACtB,GAAG,EAAE,oCAAoC;qBAC1C;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,wBAAwB,CAAC,QAAQ,CAAC;SACtC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,IAAiC;IACtD,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,SAAgB,mCAAmC,CACjD,QAA8C,EAC9C,KAAc,EACd,qBAA2D;IAE3D,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,CAAC,CAAC,YAAY,IAAI,KAAK,CAAC;QACxB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,EAChC,CAAC;QACD,OAAO;YACL,MAAM,EAAE,CAAC,gDAAgD,CAAC;YAC1D,KAAK,EAAE,KAAK;SACb,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACzC,IACE,OAAO,SAAS,KAAK,QAAQ;YAC7B,SAAS,KAAK,IAAI;YAClB,CAAC,CAAC,SAAS,IAAI,SAAS,CAAC;YACzB,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,EACjC,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;YACvE,SAAS;QACX,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;YACvC,IACE,OAAO,MAAM,KAAK,QAAQ;gBAC1B,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;oBACxB,MAAM,KAAK,cAAc;oBACzB,CAAC,CAAC,CAAC,QAAQ,IAAI,SAAS,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,EAC5D,CAAC;gBACD,MAAM,CAAC,IAAI,CACT,+DAA+D,MAAM,CAAC,MAAM,CAAC,EAAE,CAChF,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,iCAAiC,CAChD,QAAQ,EACR,qBAAqB,CACtB,CAAC;IACF,IACE,aAAa,CAAC,KAAoC,CAAC;QACnD,aAAa,CAAC,QAAQ,CAAC,EACvB,CAAC;QACD,MAAM,CAAC,IAAI,CACT,0FAA0F,CAC3F,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;AAChD,CAAC"}

package/src/workload-roles/aws-adapter.d.ts

@@ -0,0 +1,99 @@
+import { type ObservedWorkloadRole } from './convergence.js';
+import { type CanonicalIamPolicyDocument } from './effective-policy.js';
+import type { WorkloadRoleDeclaration } from './manifest.js';
+import type { AssumeRolePolicyDocument, FixedNatInstanceProfileMutation, FixedWorkloadRoleMutation, FixedWorkloadRoleProvisionerAdapter } from './provisioner.js';
+export declare const FIXED_WORKLOAD_ROLE_INLINE_POLICY_NAME: "ebk-effective-permissions";
+export type FixedAwsIamAdapterFailureClassification = 'aws-iam-create-collision' | 'aws-iam-nat-profile-substitution' | 'aws-iam-observation-invalid' | 'aws-iam-state-race';
+export declare class FixedAwsIamAdapterError extends Error {
+    readonly classification: FixedAwsIamAdapterFailureClassification;
+    constructor(classification: FixedAwsIamAdapterFailureClassification, message: string);
+}
+export interface FixedAwsIamRole {
+    arn: string;
+    assumeRolePolicyDocument: unknown;
+    permissionsBoundaryArn: string | null;
+    roleName: string;
+    tags: Readonly<Record<string, string>>;
+}
+export interface FixedAwsIamInstanceProfile {
+    instanceProfileName: string;
+    roleNames: readonly string[];
+}
+/**
+ * Thin command port implemented by the AWS SDK v3 handler bundle. Every
+ * operation is scoped to one exact role or instance-profile name; notably
+ * there is no ListRoles or caller-selected policy/trust mutation operation.
+ */
+export interface FixedAwsIamControlPlane {
+    addRoleToInstanceProfile(input: {
+        instanceProfileName: string;
+        roleName: string;
+    }): Promise<void>;
+    createInstanceProfile(input: {
+        instanceProfileName: string;
+    }): Promise<void>;
+    createRole(input: {
+        assumeRolePolicyDocument: AssumeRolePolicyDocument;
+        permissionsBoundaryArn: string;
+        roleName: string;
+        tags: Readonly<Record<string, string>>;
+    }): Promise<void>;
+    deleteInstanceProfile(input: {
+        instanceProfileName: string;
+    }): Promise<void>;
+    deleteRole(input: {
+        roleName: string;
+    }): Promise<void>;
+    deleteRolePolicy(input: {
+        policyName: string;
+        roleName: string;
+    }): Promise<void>;
+    detachRolePolicy(input: {
+        policyArn: string;
+        roleName: string;
+    }): Promise<void>;
+    getInstanceProfile(instanceProfileName: string): Promise<FixedAwsIamInstanceProfile | undefined>;
+    getRole(roleName: string): Promise<FixedAwsIamRole | undefined>;
+    getRolePolicy(input: {
+        policyName: string;
+        roleName: string;
+    }): Promise<unknown | undefined>;
+    listAttachedRolePolicyArns(roleName: string): Promise<readonly string[]>;
+    listRolePolicyNames(roleName: string): Promise<readonly string[]>;
+    putRolePermissionsBoundary(input: {
+        permissionsBoundaryArn: string;
+        roleName: string;
+    }): Promise<void>;
+    putRolePolicy(input: {
+        policyDocument: CanonicalIamPolicyDocument;
+        policyName: string;
+        roleName: string;
+    }): Promise<void>;
+    removeRoleFromInstanceProfile(input: {
+        instanceProfileName: string;
+        roleName: string;
+    }): Promise<void>;
+    tagRole(input: {
+        roleName: string;
+        tags: Readonly<Record<string, string>>;
+    }): Promise<void>;
+    untagRole(input: {
+        roleName: string;
+        tagKeys: readonly string[];
+    }): Promise<void>;
+    updateAssumeRolePolicy(input: {
+        assumeRolePolicyDocument: AssumeRolePolicyDocument;
+        roleName: string;
+    }): Promise<void>;
+}
+export declare class FixedAwsIamProvisionerAdapter implements FixedWorkloadRoleProvisionerAdapter {
+    #private;
+    private readonly iam;
+    constructor(iam: FixedAwsIamControlPlane);
+    observeExact(roleNames: readonly string[]): Promise<ObservedWorkloadRole[]>;
+    create(mutation: FixedWorkloadRoleMutation): Promise<void>;
+    update(mutation: FixedWorkloadRoleMutation, before: ObservedWorkloadRole): Promise<void>;
+    remove(declaration: WorkloadRoleDeclaration, before: ObservedWorkloadRole): Promise<void>;
+    ensureNatInstanceProfile(mutation: FixedNatInstanceProfileMutation): Promise<void>;
+    removeNatInstanceProfile(mutation: FixedNatInstanceProfileMutation): Promise<void>;
+}