@empire-builder-kit/nx 1.0.0-rc.2 → 1.0.0-rc.21

package/src/foundation/logging-preflight.js.map

@@ -1 +1 @@
-{"version":3,"file":"logging-preflight.js","sourceRoot":"","sources":["../../../../../packages/nx/src/foundation/logging-preflight.ts"],"names":[],"mappings":";;;AA2FA,sEAqBC;AAED,4EAyFC;AA3MD,sEAAyD;AACzD,6CAIsB;AAET,QAAA,2BAA2B,GACtC,kCAA2C,CAAC;AAqC9C,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAE,KAA2C;QAC9C,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3B,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,UAAU,EAAE,SAAS,IAAI,IAAI,EAAE,SAAS,CAAC;IAC3D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,sEAAsE,CACvE,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC,MAAM,CACrB,CAAC,QAAQ,EAAmC,EAAE,CAC5C,OAAO,QAAQ,KAAK,QAAQ;QAC5B,QAAQ,KAAK,IAAI;QACjB,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAC3B,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CACvB,GAAW,EACX,YAAoB;IAEpB,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9B,IACE,KAAK,CAAC,MAAM,GAAG,CAAC;QAChB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,aAAa,CAAC;QACpC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,KAAK,CAAC;QACtB,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,KAAK,CAAC,EAC1B,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IACzC,OAAO;QACL,eAAe,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAW;QACvC,YAAY;QACZ,aAAa,EAAE,GAAG,OAAO,IAAI,KAAK,EAAE;KACrC,CAAC;AACJ,CAAC;AAED,SAAgB,6BAA6B,CAC3C,KAAc;IAEd,MAAM,SAAS,GAAgC,EAAE,CAAC;IAClD,KAAK,MAAM,QAAQ,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7C,IAAI,QAAQ,CAAC,IAAI,KAAK,mCAA2B;YAAE,SAAS;QAC5D,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,YAAY,GAChB,OAAO,OAAO,EAAE,IAAI,KAAK,QAAQ;YAC/B,CAAC,CAAC,OAAO,CAAC,IAAI;YACd,CAAC,CAAC,OAAO,MAAM,EAAE,IAAI,KAAK,QAAQ;gBAChC,CAAC,CAAC,MAAM,CAAC,IAAI;gBACb,CAAC,CAAC,SAAS,CAAC;QAClB,IAAI,CAAC,YAAY,IAAI,OAAO,QAAQ,CAAC,GAAG,KAAK,QAAQ;YAAE,SAAS;QAChE,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QAC5D,IAAI,MAAM;YAAE,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACpC,IAAA,qCAAY,EAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC,CACpD,CAAC;AACJ,CAAC;AAED,SAAgB,gCAAgC,CAAC,KAKhD;IACC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAmC,CAAC;IAC7D,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACvC,IAAI,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CACb,2DAA2D,QAAQ,CAAC,IAAI,GAAG,CAC5E,CAAC;QACJ,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACzC,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAmC,CAAC;IAC5D,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACnC,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,wDAAwD,KAAK,CAAC,IAAI,GAAG,CACtE,CAAC;QACJ,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAuC,CAAC;IACnE,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QAC7C,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QACjE,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3B,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,MAAM,GAAoC,EAAE,CAAC;IACnD,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAClE,IAAA,qCAAY,EAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CACpC,EAAE,CAAC;QACF,MAAM,aAAa,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACnC,SAAS;QACX,CAAC;QACD,IAAI,aAAa,CAAC,mBAAmB,EAAE,CAAC;YACtC,MAAM,CAAC,IAAI,CAAC;gBACV,cAAc,EAAE,mCAAmC;gBACnD,YAAY,EAAE,QAAQ,CAAC,IAAI;aAC5B,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,eAAe,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC7D,MAAM,cAAc,GAClB,eAAe,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAChE,MAAM,QAAQ,GAA4B;YACxC,MAAM,EAAE,IAAI;YACZ,GAAG,CAAC,cAAc;gBAChB,CAAC,CAAC;oBACE,KAAK,EAAE;wBACL,QAAQ,EAAE,cAAc,CAAC,aAAa;wBACtC,eAAe,EAAE,cAAc,CAAC,eAAe;wBAC/C,YAAY,EAAE,cAAc,CAAC,YAAY;qBAC1C;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,IAAI,EAAE,aAAa,CAAC,IAAI;SACzB,CAAC;QACF,MAAM,WAAW,GAAG,IAAA,6CAAgC,EAAC,QAAQ,EAAE,QAAQ,EAAE;YACvE,aAAa,EAAE,KAAK,CAAC,qBAAqB;SAC3C,CAAC,CAAC;QACH,IAAI,WAAW,CAAC,MAAM,KAAK,0BAA0B,EAAE,CAAC;YACtD,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACnC,SAAS;QACX,CAAC;QACD,IAAI,WAAW,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CACb,wCAAwC,QAAQ,CAAC,IAAI,gCAAgC,CACtF,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,IAAI,CAAC;YACV,cAAc,EAAE,WAAW,CAAC,cAAc;YAC1C,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;YAClD,YAAY,EAAE,QAAQ,CAAC,IAAI;SAC5B,CAAC,CAAC;IACL,CAAC;IACD,OAAO;QACL,MAAM;QACN,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QACvB,cAAc;QACd,cAAc;KACf,CAAC;AACJ,CAAC"}
+{"version":3,"file":"logging-preflight.js","sourceRoot":"","sources":["../../../../../packages/nx/src/foundation/logging-preflight.ts"],"names":[],"mappings":";;;AA2FA,sEAqBC;AAED,4EAyFC;AA3MD,sEAAyD;AACzD,6CAIsB;AAET,QAAA,2BAA2B,GACtC,kCAA2C,CAAC;AAqC9C,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAE,KAA2C;QAC9C,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3B,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC;IAC5E,MAAM,SAAS,GAAG,UAAU,EAAE,SAAS,IAAI,IAAI,EAAE,SAAS,CAAC;IAC3D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,sEAAsE,CACvE,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC,MAAM,CACrB,CAAC,QAAQ,EAAmC,EAAE,CAC5C,OAAO,QAAQ,KAAK,QAAQ;QAC5B,QAAQ,KAAK,IAAI;QACjB,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAC3B,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CACvB,GAAW,EACX,YAAoB;IAEpB,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9B,IACE,KAAK,CAAC,MAAM,GAAG,CAAC;QAChB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,aAAa,CAAC;QACpC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,KAAK,CAAC;QACtB,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,KAAK,CAAC,EAC1B,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IACzC,OAAO;QACL,eAAe,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAW;QACvC,YAAY;QACZ,aAAa,EAAE,GAAG,OAAO,IAAI,KAAK,EAAE;KACrC,CAAC;AACJ,CAAC;AAED,SAAgB,6BAA6B,CAC3C,KAAc;IAEd,MAAM,SAAS,GAAgC,EAAE,CAAC;IAClD,KAAK,MAAM,QAAQ,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7C,IAAI,QAAQ,CAAC,IAAI,KAAK,mCAA2B;YAAE,SAAS;QAC5D,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,YAAY,GAChB,OAAO,OAAO,EAAE,IAAI,KAAK,QAAQ;YAC/B,CAAC,CAAC,OAAO,CAAC,IAAI;YACd,CAAC,CAAC,OAAO,MAAM,EAAE,IAAI,KAAK,QAAQ;gBAChC,CAAC,CAAC,MAAM,CAAC,IAAI;gBACb,CAAC,CAAC,SAAS,CAAC;QAClB,IAAI,CAAC,YAAY,IAAI,OAAO,QAAQ,CAAC,GAAG,KAAK,QAAQ;YAAE,SAAS;QAChE,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QAC5D,IAAI,MAAM;YAAE,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACpC,IAAA,qCAAY,EAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC,CACpD,CAAC;AACJ,CAAC;AAED,SAAgB,gCAAgC,CAAC,KAKhD;IACC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAmC,CAAC;IAC7D,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACvC,IAAI,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CACb,2DAA2D,QAAQ,CAAC,IAAI,GAAG,CAC5E,CAAC;QACJ,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACzC,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAmC,CAAC;IAC5D,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACnC,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,wDAAwD,KAAK,CAAC,IAAI,GAAG,CACtE,CAAC;QACJ,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAuC,CAAC;IACnE,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QAC7C,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QACjE,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3B,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,MAAM,GAAoC,EAAE,CAAC;IACnD,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAClE,IAAA,qCAAY,EAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CACpC,EAAE,CAAC;QACF,MAAM,aAAa,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACnC,SAAS;QACX,CAAC;QACD,IAAI,aAAa,CAAC,mBAAmB,EAAE,CAAC;YACtC,MAAM,CAAC,IAAI,CAAC;gBACV,cAAc,EAAE,mCAAmC;gBACnD,YAAY,EAAE,QAAQ,CAAC,IAAI;aAC5B,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,eAAe,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC7D,MAAM,cAAc,GAClB,eAAe,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAChE,MAAM,QAAQ,GAA4B;YACxC,MAAM,EAAE,IAAI;YACZ,GAAG,CAAC,cAAc;gBAChB,CAAC,CAAC;oBACE,KAAK,EAAE;wBACL,QAAQ,EAAE,cAAc,CAAC,aAAa;wBACtC,eAAe,EAAE,cAAc,CAAC,eAAe;wBAC/C,YAAY,EAAE,cAAc,CAAC,YAAY;qBAC1C;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,IAAI,EAAE,aAAa,CAAC,IAAI;SACzB,CAAC;QACF,MAAM,WAAW,GAAG,IAAA,6CAAgC,EAAC,QAAQ,EAAE,QAAQ,EAAE;YACvE,aAAa,EAAE,KAAK,CAAC,qBAAqB;SAC3C,CAAC,CAAC;QACH,IAAI,WAAW,CAAC,MAAM,KAAK,0BAA0B,EAAE,CAAC;YACtD,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACnC,SAAS;QACX,CAAC;QACD,IAAI,WAAW,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CACb,wCAAwC,QAAQ,CAAC,IAAI,gCAAgC,CACtF,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,IAAI,CAAC;YACV,cAAc,EAAE,WAAW,CAAC,cAAc;YAC1C,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;YAClD,YAAY,EAAE,QAAQ,CAAC,IAAI;SAC5B,CAAC,CAAC;IACL,CAAC;IACD,OAAO;QACL,MAAM;QACN,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QACvB,cAAc;QACd,cAAc;KACf,CAAC;AACJ,CAAC"}

package/src/foundation/logging.d.ts

@@ -24,7 +24,9 @@ export interface ManagedLogGroupContract {
             {
                 DataIdentifier: string[];
                 Operation: {
-                    Audit: Record<string, never>;
+                    Audit: {
+                        FindingsDestination: Record<string, never>;
+                    };
                 };
                 Sid: 'AuditSensitiveData';
             },

package/src/foundation/logging.js

@@ -66,7 +66,7 @@ function createManagedLogGroupContract(input) {
             Statement: [
                 {
                     DataIdentifier: identifiers,
-                    Operation: { Audit: {} },
+                    Operation: { Audit: { FindingsDestination: {} } },
                     Sid: 'AuditSensitiveData',
                 },
                 {

package/src/foundation/logging.js.map

@@ -1 +1 @@
-{"version":3,"file":"logging.js","sourceRoot":"","sources":["../../../../../packages/nx/src/foundation/logging.ts"],"names":[],"mappings":";;;AAsGA,sEAsDC;AAED,4EA0CC;AAED,gFAiBC;AA3NY,QAAA,uBAAuB,GAAG,UAAmB,CAAC;AAC9C,QAAA,gCAAgC,GAAG,EAAW,CAAC;AAC/C,QAAA,0BAA0B,GAAG;IACxC,SAAS,EAAE,eAAe;IAC1B,OAAO,EAAE,aAAa;IACtB,KAAK,EAAE,WAAW;IAClB,KAAK,EAAE,WAAW;IAClB,SAAS,EAAE,eAAe;CAClB,CAAC;AAEE,QAAA,4BAA4B,GAAG;IAC1C,0DAA0D;IAC1D,0DAA0D;IAC1D,uDAAuD;CAC/C,CAAC;AAEE,QAAA,uCAAuC,GAAG;IACrD,wBAAwB;IACxB,uBAAuB;IACvB,qBAAqB;IACrB,aAAa;CACL,CAAC;AAyDX,MAAM,cAAc,GAAG,4BAA4B,CAAC;AACpD,MAAM,sBAAsB,GAAG,6BAA6B,CAAC;AAC7D,MAAM,gBAAgB,GAAG,4BAA4B,CAAC;AAEtD,SAAS,cAAc,CAAC,KAAa,EAAE,KAAa;IAClD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACb,wBAAwB,KAAK,uCAAuC,CACrE,CAAC;IACJ,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CACb,qEAAqE,CACtE,CAAC;IACJ,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAgB,6BAA6B,CAC3C,KAA2B;IAE3B,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,gBAAgB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACpD,MAAM,QAAQ,GACZ,KAAK,CAAC,QAAQ,KAAK,SAAS;QAC1B,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,CAAC,GAAG,EAAE;YACJ,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACzC,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC7C,MAAM,IAAI,KAAK,CACb,mFAAmF,CACpF,CAAC;YACJ,CAAC;YACD,OAAO,UAAU,CAAC;QACpB,CAAC,CAAC,EAAE,CAAC;IACX,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC;SACxD,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC;SACvD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACf,MAAM,WAAW,GAAG,CAAC,GAAG,oCAA4B,CAAC,CAAC;IAEtD,OAAO;QACL,oBAAoB,EAAE;YACpB,WAAW,EACT,kFAAkF;YACpF,IAAI,EAAE,OAAO,KAAK,IAAI,KAAK,IAAI,SAAS,kBAAkB;YAC1D,SAAS,EAAE;gBACT;oBACE,cAAc,EAAE,WAAW;oBAC3B,SAAS,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;oBACxB,GAAG,EAAE,oBAAoB;iBAC1B;gBACD;oBACE,cAAc,EAAE,WAAW;oBAC3B,SAAS,EAAE,EAAE,UAAU,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE;oBAC7C,GAAG,EAAE,mBAAmB;iBACzB;aACF;YACD,OAAO,EAAE,YAAY;SACtB;QACD,aAAa,EAAE,+BAAuB;QACtC,IAAI;QACJ,eAAe,EAAE,wCAAgC;QACjD,IAAI,EAAE;YACJ,CAAC,kCAA0B,CAAC,SAAS,CAAC,EAAE,SAAS;YACjD,CAAC,kCAA0B,CAAC,OAAO,CAAC,EAAE,MAAM;YAC5C,CAAC,kCAA0B,CAAC,KAAK,CAAC,EAAE,KAAK;YACzC,CAAC,kCAA0B,CAAC,KAAK,CAAC,EAAE,KAAK;YACzC,CAAC,kCAA0B,CAAC,SAAS,CAAC,EAAE,SAAS;SAClD;KACF,CAAC;AACJ,CAAC;AAED,SAAgB,gCAAgC,CAC9C,QAAiC,EACjC,QAAiC,EACjC,QAA0C;IAE1C,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QACrB,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC9B,CAAC;IACD,IACE,QAAQ,CAAC,IAAI,EAAE,CAAC,kCAA0B,CAAC,SAAS,CAAC;QACrD,QAAQ,CAAC,IAAI,CAAC,kCAA0B,CAAC,SAAS,CAAC,EACnD,CAAC;QACD,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC,kCAA0B,CAAC,SAAS,CAAC;YAC1D,CAAC,CAAC;gBACE,MAAM,EAAE,QAAQ;gBAChB,cAAc,EAAE,+BAA+B;aAChD;YACH,CAAC,CAAC;gBACE,MAAM,EAAE,QAAQ;gBAChB,cAAc,EAAE,+BAA+B;aAChD,CAAC;IACR,CAAC;IACD,IACE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAChC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,KAAK,CACjD,EACD,CAAC;QACD,OAAO;YACL,MAAM,EAAE,QAAQ;YAChB,cAAc,EAAE,+BAA+B;SAChD,CAAC;IACJ,CAAC;IACD,IACE,QAAQ,CAAC,KAAK,EAAE,QAAQ,KAAK,QAAQ,CAAC,aAAa;QACnD,QAAQ,CAAC,KAAK,CAAC,YAAY,KAAK,QAAQ,CAAC,IAAI,EAC7C,CAAC;QACD,OAAO;YACL,MAAM,EAAE,QAAQ;YAChB,cAAc,EAAE,+BAA+B;SAChD,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;AAChD,CAAC;AAED,SAAgB,kCAAkC,CAChD,OAA0B;IAE1B,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CACzC,+CAA6D,CAAC,QAAQ,CACrE,MAAM,CACP,CACF,CAAC;IACF,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,6FAA6F;YAC3F,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC;SACtB;aACE,IAAI,EAAE;aACN,IAAI,CAAC,IAAI,CAAC,GAAG,CACjB,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"logging.js","sourceRoot":"","sources":["../../../../../packages/nx/src/foundation/logging.ts"],"names":[],"mappings":";;;AAwGA,sEAsDC;AAED,4EA0CC;AAED,gFAiBC;AA7NY,QAAA,uBAAuB,GAAG,UAAmB,CAAC;AAC9C,QAAA,gCAAgC,GAAG,EAAW,CAAC;AAC/C,QAAA,0BAA0B,GAAG;IACxC,SAAS,EAAE,eAAe;IAC1B,OAAO,EAAE,aAAa;IACtB,KAAK,EAAE,WAAW;IAClB,KAAK,EAAE,WAAW;IAClB,SAAS,EAAE,eAAe;CAClB,CAAC;AAEE,QAAA,4BAA4B,GAAG;IAC1C,0DAA0D;IAC1D,0DAA0D;IAC1D,uDAAuD;CAC/C,CAAC;AAEE,QAAA,uCAAuC,GAAG;IACrD,wBAAwB;IACxB,uBAAuB;IACvB,qBAAqB;IACrB,aAAa;CACL,CAAC;AA2DX,MAAM,cAAc,GAAG,4BAA4B,CAAC;AACpD,MAAM,sBAAsB,GAAG,6BAA6B,CAAC;AAC7D,MAAM,gBAAgB,GAAG,4BAA4B,CAAC;AAEtD,SAAS,cAAc,CAAC,KAAa,EAAE,KAAa;IAClD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACb,wBAAwB,KAAK,uCAAuC,CACrE,CAAC;IACJ,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CACb,qEAAqE,CACtE,CAAC;IACJ,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAgB,6BAA6B,CAC3C,KAA2B;IAE3B,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,gBAAgB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACpD,MAAM,QAAQ,GACZ,KAAK,CAAC,QAAQ,KAAK,SAAS;QAC1B,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,CAAC,GAAG,EAAE;YACJ,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACzC,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC7C,MAAM,IAAI,KAAK,CACb,mFAAmF,CACpF,CAAC;YACJ,CAAC;YACD,OAAO,UAAU,CAAC;QACpB,CAAC,CAAC,EAAE,CAAC;IACX,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC;SACxD,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC;SACvD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACf,MAAM,WAAW,GAAG,CAAC,GAAG,oCAA4B,CAAC,CAAC;IAEtD,OAAO;QACL,oBAAoB,EAAE;YACpB,WAAW,EACT,kFAAkF;YACpF,IAAI,EAAE,OAAO,KAAK,IAAI,KAAK,IAAI,SAAS,kBAAkB;YAC1D,SAAS,EAAE;gBACT;oBACE,cAAc,EAAE,WAAW;oBAC3B,SAAS,EAAE,EAAE,KAAK,EAAE,EAAE,mBAAmB,EAAE,EAAE,EAAE,EAAE;oBACjD,GAAG,EAAE,oBAAoB;iBAC1B;gBACD;oBACE,cAAc,EAAE,WAAW;oBAC3B,SAAS,EAAE,EAAE,UAAU,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE;oBAC7C,GAAG,EAAE,mBAAmB;iBACzB;aACF;YACD,OAAO,EAAE,YAAY;SACtB;QACD,aAAa,EAAE,+BAAuB;QACtC,IAAI;QACJ,eAAe,EAAE,wCAAgC;QACjD,IAAI,EAAE;YACJ,CAAC,kCAA0B,CAAC,SAAS,CAAC,EAAE,SAAS;YACjD,CAAC,kCAA0B,CAAC,OAAO,CAAC,EAAE,MAAM;YAC5C,CAAC,kCAA0B,CAAC,KAAK,CAAC,EAAE,KAAK;YACzC,CAAC,kCAA0B,CAAC,KAAK,CAAC,EAAE,KAAK;YACzC,CAAC,kCAA0B,CAAC,SAAS,CAAC,EAAE,SAAS;SAClD;KACF,CAAC;AACJ,CAAC;AAED,SAAgB,gCAAgC,CAC9C,QAAiC,EACjC,QAAiC,EACjC,QAA0C;IAE1C,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QACrB,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC9B,CAAC;IACD,IACE,QAAQ,CAAC,IAAI,EAAE,CAAC,kCAA0B,CAAC,SAAS,CAAC;QACrD,QAAQ,CAAC,IAAI,CAAC,kCAA0B,CAAC,SAAS,CAAC,EACnD,CAAC;QACD,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC,kCAA0B,CAAC,SAAS,CAAC;YAC1D,CAAC,CAAC;gBACE,MAAM,EAAE,QAAQ;gBAChB,cAAc,EAAE,+BAA+B;aAChD;YACH,CAAC,CAAC;gBACE,MAAM,EAAE,QAAQ;gBAChB,cAAc,EAAE,+BAA+B;aAChD,CAAC;IACR,CAAC;IACD,IACE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAChC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,KAAK,CACjD,EACD,CAAC;QACD,OAAO;YACL,MAAM,EAAE,QAAQ;YAChB,cAAc,EAAE,+BAA+B;SAChD,CAAC;IACJ,CAAC;IACD,IACE,QAAQ,CAAC,KAAK,EAAE,QAAQ,KAAK,QAAQ,CAAC,aAAa;QACnD,QAAQ,CAAC,KAAK,CAAC,YAAY,KAAK,QAAQ,CAAC,IAAI,EAC7C,CAAC;QACD,OAAO;YACL,MAAM,EAAE,QAAQ;YAChB,cAAc,EAAE,+BAA+B;SAChD,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;AAChD,CAAC;AAED,SAAgB,kCAAkC,CAChD,OAA0B;IAE1B,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CACzC,+CAA6D,CAAC,QAAQ,CACrE,MAAM,CACP,CACF,CAAC;IACF,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,6FAA6F;YAC3F,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC;SACtB;aACE,IAAI,EAAE;aACN,IAAI,CAAC,IAAI,CAAC,GAAG,CACjB,CAAC;IACJ,CAAC;AACH,CAAC"}

package/src/foundation/partial-state.d.ts

@@ -0,0 +1,10 @@
+export declare const FOUNDATION_PENDING_DATABASE_ENDPOINT: "pending.invalid";
+/**
+ * Pulumi can evaluate a refresh program against an interrupted first deploy
+ * before the Aurora cluster has ever existed. SST currently resolves that
+ * absent endpoint as `undefined` and its Aurora link implementation calls
+ * `.split()` unconditionally. Keep the refresh program total without
+ * publishing a routable cross-stage value. A subsequent deploy receives the
+ * real provider output and replaces this sentinel before creating discovery.
+ */
+export declare function foundationDatabaseEndpointHost(endpoint: unknown): string;

package/src/foundation/partial-state.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FOUNDATION_PENDING_DATABASE_ENDPOINT = void 0;
+exports.foundationDatabaseEndpointHost = foundationDatabaseEndpointHost;
+exports.FOUNDATION_PENDING_DATABASE_ENDPOINT = 'pending.invalid';
+/**
+ * Pulumi can evaluate a refresh program against an interrupted first deploy
+ * before the Aurora cluster has ever existed. SST currently resolves that
+ * absent endpoint as `undefined` and its Aurora link implementation calls
+ * `.split()` unconditionally. Keep the refresh program total without
+ * publishing a routable cross-stage value. A subsequent deploy receives the
+ * real provider output and replaces this sentinel before creating discovery.
+ */
+function foundationDatabaseEndpointHost(endpoint) {
+    if (typeof endpoint !== 'string') {
+        return exports.FOUNDATION_PENDING_DATABASE_ENDPOINT;
+    }
+    const host = endpoint.trim().split(':', 1)[0]?.trim() ?? '';
+    return host.length > 0 ? host : exports.FOUNDATION_PENDING_DATABASE_ENDPOINT;
+}
+//# sourceMappingURL=partial-state.js.map

package/src/foundation/partial-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"partial-state.js","sourceRoot":"","sources":["../../../../../packages/nx/src/foundation/partial-state.ts"],"names":[],"mappings":";;;AAUA,wEAOC;AAjBY,QAAA,oCAAoC,GAAG,iBAA0B,CAAC;AAE/E;;;;;;;GAOG;AACH,SAAgB,8BAA8B,CAAC,QAAiB;IAC9D,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,OAAO,4CAAoC,CAAC;IAC9C,CAAC;IAED,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC5D,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,4CAAoC,CAAC;AACvE,CAAC"}

package/src/foundation/router-waf.d.ts

@@ -0,0 +1,98 @@
+import { type FoundationStage } from './stages.js';
+export declare const ROUTER_WAF_POLICY_KIND: "ebk-router-waf-policy";
+export declare const ROUTER_WAF_REHEARSAL_KIND: "ebk-router-waf-blocking-rehearsal";
+export declare const ROUTER_WAF_SCHEMA_VERSION: 1;
+export declare const ROUTER_WAF_REQUIRED_MANAGED_RULES: readonly ["AWSManagedRulesCommonRuleSet", "AWSManagedRulesKnownBadInputsRuleSet", "AWSManagedRulesAmazonIpReputationList"];
+export type RouterWafAccess = 'allowlist' | 'public';
+export type RouterWafMode = 'block' | 'count';
+export interface RouterWafStagePolicy {
+    access: RouterWafAccess;
+    allowedCidrs: string[];
+    mode: RouterWafMode;
+}
+export interface RouterWafPolicy {
+    kind: typeof ROUTER_WAF_POLICY_KIND;
+    logging: {
+        enabled: boolean;
+        retention: '1 day' | '3 days' | '5 days' | '1 week' | '2 weeks';
+    };
+    rateLimitPerIp: number;
+    schemaVersion: typeof ROUTER_WAF_SCHEMA_VERSION;
+    stages: Record<FoundationStage, RouterWafStagePolicy>;
+}
+export interface RouterWafBlockingRehearsal {
+    completedAt: string;
+    evidenceDigest: `sha256:${string}`;
+    kind: typeof ROUTER_WAF_REHEARSAL_KIND;
+    mode: 'block';
+    policyDigest: `sha256:${string}`;
+    schemaVersion: typeof ROUTER_WAF_SCHEMA_VERSION;
+    stage: 'staging';
+    status: 'passed';
+}
+export interface RouterWafLiveEvidence {
+    accountId: string;
+    completedAt: string;
+    distributionId: string;
+    kind: 'ebk-router-waf-live-evidence';
+    mode: 'block';
+    policyDigest: `sha256:${string}`;
+    probes: {
+        allowedRequestStatus: number;
+        blockedManagedRuleStatus: 403;
+        blockedNonAllowlistedStatus: 403;
+        blockedRateLimitStatus: 403;
+        cloudWatchMetricsObserved: true;
+        countModeTuningObserved: true;
+        sampledRequestsObserved: true;
+    };
+    region: string;
+    requiredRules: string[];
+    result: 'passed';
+    schemaVersion: typeof ROUTER_WAF_SCHEMA_VERSION;
+    sourceCommit: string;
+    stage: 'staging';
+    startedAt: string;
+    webAclArn: string;
+    webAclScope: 'CLOUDFRONT';
+}
+export interface RouterWafStagePlan {
+    access: RouterWafAccess;
+    ipv4Cidrs: string[];
+    ipv6Cidrs: string[];
+    logging: false | {
+        include: 'blocked';
+        redact: {
+            headers: string[];
+            queryString: true;
+        };
+        retention: RouterWafPolicy['logging']['retention'];
+    };
+    mode: RouterWafMode;
+    policyDigest: `sha256:${string}`;
+    rateLimitPerIp: number;
+    stage: FoundationStage;
+}
+type WafRule = Readonly<Record<string, unknown>>;
+export declare function normalizeRouterWafPolicy(value: unknown): RouterWafPolicy;
+export declare function routerWafPolicyDigest(policy: RouterWafPolicy): `sha256:${string}`;
+export declare function normalizeRouterWafBlockingRehearsal(value: unknown): RouterWafBlockingRehearsal | null;
+export declare function createRouterWafBlockingRehearsal(input: {
+    evidence: unknown;
+    policy: RouterWafPolicy;
+}): RouterWafBlockingRehearsal;
+export declare function reconcileRouterWafBlockingRehearsal(input: {
+    evidence: unknown;
+    policy: RouterWafPolicy;
+    receipt: unknown;
+}): RouterWafBlockingRehearsal | null;
+export declare function createRouterWafStagePlan(input: {
+    policy: RouterWafPolicy;
+    rehearsal: RouterWafBlockingRehearsal | null;
+    stage: string;
+}): RouterWafStagePlan;
+export declare function createRouterWafRules(plan: RouterWafStagePlan, ipSets: {
+    ipv4Arn?: unknown;
+    ipv6Arn?: unknown;
+}): WafRule[];
+export {};

package/src/foundation/router-waf.js

@@ -0,0 +1,401 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ROUTER_WAF_REQUIRED_MANAGED_RULES = exports.ROUTER_WAF_SCHEMA_VERSION = exports.ROUTER_WAF_REHEARSAL_KIND = exports.ROUTER_WAF_POLICY_KIND = void 0;
+exports.normalizeRouterWafPolicy = normalizeRouterWafPolicy;
+exports.routerWafPolicyDigest = routerWafPolicyDigest;
+exports.normalizeRouterWafBlockingRehearsal = normalizeRouterWafBlockingRehearsal;
+exports.createRouterWafBlockingRehearsal = createRouterWafBlockingRehearsal;
+exports.reconcileRouterWafBlockingRehearsal = reconcileRouterWafBlockingRehearsal;
+exports.createRouterWafStagePlan = createRouterWafStagePlan;
+exports.createRouterWafRules = createRouterWafRules;
+const node_crypto_1 = require("node:crypto");
+const node_net_1 = require("node:net");
+const stages_js_1 = require("./stages.js");
+exports.ROUTER_WAF_POLICY_KIND = 'ebk-router-waf-policy';
+exports.ROUTER_WAF_REHEARSAL_KIND = 'ebk-router-waf-blocking-rehearsal';
+exports.ROUTER_WAF_SCHEMA_VERSION = 1;
+exports.ROUTER_WAF_REQUIRED_MANAGED_RULES = [
+    'AWSManagedRulesCommonRuleSet',
+    'AWSManagedRulesKnownBadInputsRuleSet',
+    'AWSManagedRulesAmazonIpReputationList',
+];
+const POLICY_KEYS = [
+    'kind',
+    'logging',
+    'rateLimitPerIp',
+    'schemaVersion',
+    'stages',
+];
+const LOGGING_KEYS = ['enabled', 'retention'];
+const STAGE_KEYS = ['access', 'allowedCidrs', 'mode'];
+const REHEARSAL_KEYS = [
+    'completedAt',
+    'evidenceDigest',
+    'kind',
+    'mode',
+    'policyDigest',
+    'schemaVersion',
+    'stage',
+    'status',
+];
+const LIVE_EVIDENCE_KEYS = [
+    'accountId',
+    'completedAt',
+    'distributionId',
+    'kind',
+    'mode',
+    'policyDigest',
+    'probes',
+    'region',
+    'requiredRules',
+    'result',
+    'schemaVersion',
+    'sourceCommit',
+    'stage',
+    'startedAt',
+    'webAclArn',
+    'webAclScope',
+];
+const LIVE_PROBE_KEYS = [
+    'allowedRequestStatus',
+    'blockedManagedRuleStatus',
+    'blockedNonAllowlistedStatus',
+    'blockedRateLimitStatus',
+    'cloudWatchMetricsObserved',
+    'countModeTuningObserved',
+    'sampledRequestsObserved',
+];
+const DIGEST_PATTERN = /^sha256:[a-f0-9]{64}$/;
+function record(value, label) {
+    if (!value || typeof value !== 'object' || Array.isArray(value)) {
+        throw new Error(`${label} must be an object.`);
+    }
+    return value;
+}
+function exactKeys(value, expected, label) {
+    const observed = Object.keys(value).sort();
+    const required = [...expected].sort();
+    if (JSON.stringify(observed) !== JSON.stringify(required)) {
+        throw new Error(`${label} must contain exactly ${required.join(', ')}.`);
+    }
+}
+function canonical(value) {
+    if (Array.isArray(value))
+        return `[${value.map(canonical).join(',')}]`;
+    if (value && typeof value === 'object') {
+        return `{${Object.entries(value)
+            .sort(([left], [right]) => (left < right ? -1 : left > right ? 1 : 0))
+            .map(([key, item]) => `${JSON.stringify(key)}:${canonical(item)}`)
+            .join(',')}}`;
+    }
+    const encoded = JSON.stringify(value);
+    if (encoded === undefined) {
+        throw new Error('Router WAF authority contains an unsupported value.');
+    }
+    return encoded;
+}
+function cidr(value, label) {
+    if (typeof value !== 'string' || value !== value.trim()) {
+        throw new Error(`${label} must be a canonical IPv4 or IPv6 CIDR.`);
+    }
+    const match = /^([^/]+)\/(\d{1,3})$/.exec(value);
+    if (!match) {
+        throw new Error(`${label} must be a canonical IPv4 or IPv6 CIDR.`);
+    }
+    const address = match[1] ?? '';
+    const prefix = Number(match[2]);
+    const family = (0, node_net_1.isIP)(address);
+    if (family === 0 ||
+        !Number.isInteger(prefix) ||
+        (family === 4 && prefix > 32) ||
+        (family === 6 && prefix > 128)) {
+        throw new Error(`${label} must be a canonical IPv4 or IPv6 CIDR.`);
+    }
+    return value;
+}
+function stagePolicy(value, stage) {
+    const candidate = record(value, `Router WAF ${stage} policy`);
+    exactKeys(candidate, STAGE_KEYS, `Router WAF ${stage} policy`);
+    if (candidate.access !== 'allowlist' && candidate.access !== 'public') {
+        throw new Error(`Router WAF ${stage} access is invalid.`);
+    }
+    if (candidate.mode !== 'block' && candidate.mode !== 'count') {
+        throw new Error(`Router WAF ${stage} mode is invalid.`);
+    }
+    if (!Array.isArray(candidate.allowedCidrs)) {
+        throw new Error(`Router WAF ${stage} allowedCidrs must be an array.`);
+    }
+    const allowedCidrs = candidate.allowedCidrs.map((value, index) => cidr(value, `Router WAF ${stage} allowedCidrs[${index}]`));
+    if (new Set(allowedCidrs).size !== allowedCidrs.length) {
+        throw new Error(`Router WAF ${stage} allowedCidrs must be unique.`);
+    }
+    if (candidate.access === 'public' && allowedCidrs.length > 0) {
+        throw new Error(`Router WAF ${stage} public access cannot carry an unused allowlist.`);
+    }
+    return {
+        access: candidate.access,
+        allowedCidrs,
+        mode: candidate.mode,
+    };
+}
+function normalizeRouterWafPolicy(value) {
+    const candidate = record(value, 'Router WAF policy');
+    exactKeys(candidate, POLICY_KEYS, 'Router WAF policy');
+    if (candidate.kind !== exports.ROUTER_WAF_POLICY_KIND ||
+        candidate.schemaVersion !== exports.ROUTER_WAF_SCHEMA_VERSION) {
+        throw new Error('Router WAF policy kind or schemaVersion is invalid.');
+    }
+    if (typeof candidate.rateLimitPerIp !== 'number' ||
+        !Number.isSafeInteger(candidate.rateLimitPerIp) ||
+        candidate.rateLimitPerIp < 100 ||
+        candidate.rateLimitPerIp > 2_000_000_000) {
+        throw new Error('Router WAF rateLimitPerIp must be an integer from 100 through 2000000000.');
+    }
+    const logging = record(candidate.logging, 'Router WAF logging policy');
+    exactKeys(logging, LOGGING_KEYS, 'Router WAF logging policy');
+    if (typeof logging.enabled !== 'boolean') {
+        throw new Error('Router WAF logging enabled must be boolean.');
+    }
+    if (logging.retention !== '1 day' &&
+        logging.retention !== '3 days' &&
+        logging.retention !== '5 days' &&
+        logging.retention !== '1 week' &&
+        logging.retention !== '2 weeks') {
+        throw new Error('Router WAF logging retention is invalid or unbounded.');
+    }
+    const stages = record(candidate.stages, 'Router WAF stages');
+    exactKeys(stages, stages_js_1.FOUNDATION_STAGES, 'Router WAF stages');
+    return {
+        kind: exports.ROUTER_WAF_POLICY_KIND,
+        logging: {
+            enabled: logging.enabled,
+            retention: logging.retention,
+        },
+        rateLimitPerIp: candidate.rateLimitPerIp,
+        schemaVersion: exports.ROUTER_WAF_SCHEMA_VERSION,
+        stages: {
+            development: stagePolicy(stages.development, 'development'),
+            production: stagePolicy(stages.production, 'production'),
+            staging: stagePolicy(stages.staging, 'staging'),
+        },
+    };
+}
+function routerWafPolicyDigest(policy) {
+    return `sha256:${(0, node_crypto_1.createHash)('sha256').update(canonical(policy)).digest('hex')}`;
+}
+function normalizeRouterWafBlockingRehearsal(value) {
+    const candidate = record(value, 'Router WAF blocking rehearsal');
+    if (candidate.status === 'pending') {
+        exactKeys(candidate, ['kind', 'schemaVersion', 'status'], 'Pending Router WAF blocking rehearsal');
+        if (candidate.kind !== exports.ROUTER_WAF_REHEARSAL_KIND ||
+            candidate.schemaVersion !== exports.ROUTER_WAF_SCHEMA_VERSION) {
+            throw new Error('Pending Router WAF blocking rehearsal kind or schemaVersion is invalid.');
+        }
+        return null;
+    }
+    exactKeys(candidate, REHEARSAL_KEYS, 'Router WAF blocking rehearsal');
+    if (candidate.kind !== exports.ROUTER_WAF_REHEARSAL_KIND ||
+        candidate.schemaVersion !== exports.ROUTER_WAF_SCHEMA_VERSION ||
+        candidate.status !== 'passed' ||
+        candidate.stage !== 'staging' ||
+        candidate.mode !== 'block' ||
+        typeof candidate.completedAt !== 'string' ||
+        !Number.isFinite(Date.parse(candidate.completedAt)) ||
+        typeof candidate.evidenceDigest !== 'string' ||
+        !DIGEST_PATTERN.test(candidate.evidenceDigest) ||
+        typeof candidate.policyDigest !== 'string' ||
+        !DIGEST_PATTERN.test(candidate.policyDigest)) {
+        throw new Error('Router WAF blocking rehearsal is invalid.');
+    }
+    return candidate;
+}
+function createRouterWafBlockingRehearsal(input) {
+    const evidence = record(input.evidence, 'Router WAF live evidence');
+    exactKeys(evidence, LIVE_EVIDENCE_KEYS, 'Router WAF live evidence');
+    const probes = record(evidence.probes, 'Router WAF live evidence probes');
+    exactKeys(probes, LIVE_PROBE_KEYS, 'Router WAF live evidence probes');
+    const policyDigest = routerWafPolicyDigest(input.policy);
+    const startedAt = typeof evidence.startedAt === 'string'
+        ? Date.parse(evidence.startedAt)
+        : Number.NaN;
+    const completedAt = typeof evidence.completedAt === 'string'
+        ? Date.parse(evidence.completedAt)
+        : Number.NaN;
+    const expectedRules = [
+        'StageIpAllowlist',
+        'RateLimitPerIP',
+        ...exports.ROUTER_WAF_REQUIRED_MANAGED_RULES,
+    ];
+    if (input.policy.stages.staging.mode !== 'block' ||
+        input.policy.stages.staging.access !== 'allowlist' ||
+        input.policy.stages.staging.allowedCidrs.length === 0 ||
+        evidence.kind !== 'ebk-router-waf-live-evidence' ||
+        evidence.schemaVersion !== exports.ROUTER_WAF_SCHEMA_VERSION ||
+        evidence.stage !== 'staging' ||
+        evidence.mode !== 'block' ||
+        evidence.result !== 'passed' ||
+        evidence.webAclScope !== 'CLOUDFRONT' ||
+        evidence.policyDigest !== policyDigest ||
+        typeof evidence.accountId !== 'string' ||
+        !/^\d{12}$/.test(evidence.accountId) ||
+        typeof evidence.region !== 'string' ||
+        !/^[a-z]{2}(?:-gov)?-[a-z]+-\d$/.test(evidence.region) ||
+        typeof evidence.sourceCommit !== 'string' ||
+        !/^[a-f0-9]{40}$/.test(evidence.sourceCommit) ||
+        typeof evidence.distributionId !== 'string' ||
+        !/^[A-Z0-9]{8,32}$/.test(evidence.distributionId) ||
+        typeof evidence.webAclArn !== 'string' ||
+        !new RegExp(`^arn:(?:aws|aws-us-gov):wafv2:us-east-1:${evidence.accountId}:global/webacl/[A-Za-z0-9_-]{1,128}/[a-f0-9-]{36}$`).test(evidence.webAclArn) ||
+        !Number.isFinite(startedAt) ||
+        !Number.isFinite(completedAt) ||
+        completedAt < startedAt ||
+        completedAt - startedAt > 4 * 60 * 60 * 1_000 ||
+        !Array.isArray(evidence.requiredRules) ||
+        JSON.stringify(evidence.requiredRules) !== JSON.stringify(expectedRules) ||
+        typeof probes.allowedRequestStatus !== 'number' ||
+        probes.allowedRequestStatus < 200 ||
+        probes.allowedRequestStatus > 399 ||
+        probes.blockedManagedRuleStatus !== 403 ||
+        probes.blockedNonAllowlistedStatus !== 403 ||
+        probes.blockedRateLimitStatus !== 403 ||
+        probes.cloudWatchMetricsObserved !== true ||
+        probes.countModeTuningObserved !== true ||
+        probes.sampledRequestsObserved !== true) {
+        throw new Error('Router WAF live evidence does not prove the exact staging blocking baseline.');
+    }
+    const evidenceDigest = `sha256:${(0, node_crypto_1.createHash)('sha256')
+        .update(canonical(evidence))
+        .digest('hex')}`;
+    return {
+        completedAt: evidence.completedAt,
+        evidenceDigest,
+        kind: exports.ROUTER_WAF_REHEARSAL_KIND,
+        mode: 'block',
+        policyDigest,
+        schemaVersion: exports.ROUTER_WAF_SCHEMA_VERSION,
+        stage: 'staging',
+        status: 'passed',
+    };
+}
+function reconcileRouterWafBlockingRehearsal(input) {
+    const retained = normalizeRouterWafBlockingRehearsal(input.receipt);
+    if (!retained)
+        return null;
+    const observed = createRouterWafBlockingRehearsal({
+        evidence: input.evidence,
+        policy: input.policy,
+    });
+    if (canonical(retained) !== canonical(observed)) {
+        throw new Error('Router WAF blocking rehearsal receipt does not match its exact live evidence.');
+    }
+    return retained;
+}
+function createRouterWafStagePlan(input) {
+    const stage = (0, stages_js_1.requireFoundationStage)(input.stage);
+    const stagePolicy = input.policy.stages[stage];
+    const policyDigest = routerWafPolicyDigest(input.policy);
+    if (stagePolicy.access === 'allowlist' &&
+        stagePolicy.allowedCidrs.length === 0) {
+        throw new Error(`Router WAF ${stage} allowlist requires at least one explicit CIDR before deployment.`);
+    }
+    if (stage === 'production') {
+        if (stagePolicy.mode !== 'block') {
+            throw new Error('Production Router WAF must deploy in blocking mode.');
+        }
+        if (!input.rehearsal || input.rehearsal.policyDigest !== policyDigest) {
+            throw new Error('Production Router WAF requires a passed staging blocking rehearsal for the exact policy digest.');
+        }
+    }
+    return {
+        access: stagePolicy.access,
+        ipv4Cidrs: stagePolicy.allowedCidrs.filter((value) => (0, node_net_1.isIP)(value.split('/')[0] ?? '') === 4),
+        ipv6Cidrs: stagePolicy.allowedCidrs.filter((value) => (0, node_net_1.isIP)(value.split('/')[0] ?? '') === 6),
+        logging: input.policy.logging.enabled
+            ? {
+                include: 'blocked',
+                redact: {
+                    headers: ['authorization', 'cookie', 'x-api-key'],
+                    queryString: true,
+                },
+                retention: input.policy.logging.retention,
+            }
+            : false,
+        mode: stagePolicy.mode,
+        policyDigest,
+        rateLimitPerIp: input.policy.rateLimitPerIp,
+        stage,
+    };
+}
+function visibility(metricName) {
+    return {
+        cloudwatchMetricsEnabled: true,
+        metricName,
+        sampledRequestsEnabled: true,
+    };
+}
+function createRouterWafRules(plan, ipSets) {
+    const prefix = `Ebk${plan.stage[0]?.toUpperCase()}${plan.stage.slice(1)}`;
+    const rules = [];
+    let priority = 0;
+    if (plan.access === 'allowlist') {
+        const references = [ipSets.ipv4Arn, ipSets.ipv6Arn]
+            .filter((value) => value !== undefined)
+            .map((arn) => ({ ipSetReferenceStatement: { arn } }));
+        if (references.length === 0) {
+            throw new Error('Router WAF allowlist is missing its exact IP set ARN.');
+        }
+        rules.push({
+            action: plan.mode === 'block' ? { block: {} } : { count: {} },
+            name: 'StageIpAllowlist',
+            priority: priority++,
+            statement: {
+                notStatement: {
+                    statement: references.length === 1
+                        ? references[0]
+                        : { orStatement: { statements: references } },
+                },
+            },
+            visibilityConfig: visibility(`${prefix}StageIpAllowlist`),
+        });
+    }
+    rules.push({
+        action: plan.mode === 'block' ? { block: {} } : { count: {} },
+        name: 'RateLimitPerIP',
+        priority: priority++,
+        statement: {
+            rateBasedStatement: {
+                aggregateKeyType: 'IP',
+                limit: plan.rateLimitPerIp,
+            },
+        },
+        visibilityConfig: visibility(`${prefix}RateLimitPerIP`),
+    });
+    for (const name of exports.ROUTER_WAF_REQUIRED_MANAGED_RULES) {
+        rules.push({
+            name,
+            overrideAction: plan.mode === 'block' ? { none: {} } : { count: {} },
+            priority: priority++,
+            statement: {
+                managedRuleGroupStatement: {
+                    name,
+                    ...(name === 'AWSManagedRulesCommonRuleSet'
+                        ? {
+                            // Preserve SST's safe baseline for legitimate request bodies
+                            // larger than WAF's managed-rule inspection limit.
+                            ruleActionOverrides: [
+                                {
+                                    actionToUse: { count: {} },
+                                    name: 'SizeRestrictions_BODY',
+                                },
+                            ],
+                        }
+                        : {}),
+                    vendorName: 'AWS',
+                },
+            },
+            visibilityConfig: visibility(`${prefix}${name}`),
+        });
+    }
+    return rules;
+}
+//# sourceMappingURL=router-waf.js.map

package/src/foundation/router-waf.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"router-waf.js","sourceRoot":"","sources":["../../../../../packages/nx/src/foundation/router-waf.ts"],"names":[],"mappings":";;;AA4OA,4DAiDC;AAED,sDAIC;AAED,kFAqCC;AAED,4EA8EC;AAED,kFAiBC;AAED,4DAiDC;AAUD,oDAoEC;AA9iBD,6CAAyC;AACzC,uCAAgC;AAEhC,2CAIqB;AAER,QAAA,sBAAsB,GAAG,uBAAgC,CAAC;AAC1D,QAAA,yBAAyB,GACpC,mCAA4C,CAAC;AAClC,QAAA,yBAAyB,GAAG,CAAU,CAAC;AACvC,QAAA,iCAAiC,GAAG;IAC/C,8BAA8B;IAC9B,sCAAsC;IACtC,uCAAuC;CAC/B,CAAC;AAkFX,MAAM,WAAW,GAAG;IAClB,MAAM;IACN,SAAS;IACT,gBAAgB;IAChB,eAAe;IACf,QAAQ;CACA,CAAC;AACX,MAAM,YAAY,GAAG,CAAC,SAAS,EAAE,WAAW,CAAU,CAAC;AACvD,MAAM,UAAU,GAAG,CAAC,QAAQ,EAAE,cAAc,EAAE,MAAM,CAAU,CAAC;AAC/D,MAAM,cAAc,GAAG;IACrB,aAAa;IACb,gBAAgB;IAChB,MAAM;IACN,MAAM;IACN,cAAc;IACd,eAAe;IACf,OAAO;IACP,QAAQ;CACA,CAAC;AACX,MAAM,kBAAkB,GAAG;IACzB,WAAW;IACX,aAAa;IACb,gBAAgB;IAChB,MAAM;IACN,MAAM;IACN,cAAc;IACd,QAAQ;IACR,QAAQ;IACR,eAAe;IACf,QAAQ;IACR,eAAe;IACf,cAAc;IACd,OAAO;IACP,WAAW;IACX,WAAW;IACX,aAAa;CACL,CAAC;AACX,MAAM,eAAe,GAAG;IACtB,sBAAsB;IACtB,0BAA0B;IAC1B,6BAA6B;IAC7B,wBAAwB;IACxB,2BAA2B;IAC3B,yBAAyB;IACzB,yBAAyB;CACjB,CAAC;AACX,MAAM,cAAc,GAAG,uBAAuB,CAAC;AAE/C,SAAS,MAAM,CAAC,KAAc,EAAE,KAAa;IAC3C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,qBAAqB,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,SAAS,CAChB,KAA8B,EAC9B,QAA2B,EAC3B,KAAa;IAEb,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,MAAM,QAAQ,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IACtC,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,yBAAyB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACvE,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;aACxD,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aACrE,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;aACjE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAClB,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,IAAI,CAAC,KAAc,EAAE,KAAa;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,yCAAyC,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,KAAK,GAAG,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,yCAAyC,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,IAAA,eAAI,EAAC,OAAO,CAAC,CAAC;IAC7B,IACE,MAAM,KAAK,CAAC;QACZ,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC;QACzB,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,GAAG,EAAE,CAAC;QAC7B,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,GAAG,GAAG,CAAC,EAC9B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,yCAAyC,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAClB,KAAc,EACd,KAAsB;IAEtB,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,EAAE,cAAc,KAAK,SAAS,CAAC,CAAC;IAC9D,SAAS,CAAC,SAAS,EAAE,UAAU,EAAE,cAAc,KAAK,SAAS,CAAC,CAAC;IAC/D,IAAI,SAAS,CAAC,MAAM,KAAK,WAAW,IAAI,SAAS,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,cAAc,KAAK,qBAAqB,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,cAAc,KAAK,mBAAmB,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,cAAc,KAAK,iCAAiC,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,YAAY,GAAG,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAC/D,IAAI,CAAC,KAAK,EAAE,cAAc,KAAK,iBAAiB,KAAK,GAAG,CAAC,CAC1D,CAAC;IACF,IAAI,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,MAAM,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,cAAc,KAAK,+BAA+B,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,QAAQ,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CACb,cAAc,KAAK,kDAAkD,CACtE,CAAC;IACJ,CAAC;IACD,OAAO;QACL,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,YAAY;QACZ,IAAI,EAAE,SAAS,CAAC,IAAI;KACrB,CAAC;AACJ,CAAC;AAED,SAAgB,wBAAwB,CAAC,KAAc;IACrD,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;IACrD,SAAS,CAAC,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,CAAC;IACvD,IACE,SAAS,CAAC,IAAI,KAAK,8BAAsB;QACzC,SAAS,CAAC,aAAa,KAAK,iCAAyB,EACrD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,IACE,OAAO,SAAS,CAAC,cAAc,KAAK,QAAQ;QAC5C,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,cAAc,CAAC;QAC/C,SAAS,CAAC,cAAc,GAAG,GAAG;QAC9B,SAAS,CAAC,cAAc,GAAG,aAAa,EACxC,CAAC;QACD,MAAM,IAAI,KAAK,CACb,2EAA2E,CAC5E,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,2BAA2B,CAAC,CAAC;IACvE,SAAS,CAAC,OAAO,EAAE,YAAY,EAAE,2BAA2B,CAAC,CAAC;IAC9D,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,IACE,OAAO,CAAC,SAAS,KAAK,OAAO;QAC7B,OAAO,CAAC,SAAS,KAAK,QAAQ;QAC9B,OAAO,CAAC,SAAS,KAAK,QAAQ;QAC9B,OAAO,CAAC,SAAS,KAAK,QAAQ;QAC9B,OAAO,CAAC,SAAS,KAAK,SAAS,EAC/B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IAC7D,SAAS,CAAC,MAAM,EAAE,6BAAiB,EAAE,mBAAmB,CAAC,CAAC;IAC1D,OAAO;QACL,IAAI,EAAE,8BAAsB;QAC5B,OAAO,EAAE;YACP,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B;QACD,cAAc,EAAE,SAAS,CAAC,cAAc;QACxC,aAAa,EAAE,iCAAyB;QACxC,MAAM,EAAE;YACN,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC;YAC3D,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC;YACxD,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC;SAChD;KACF,CAAC;AACJ,CAAC;AAED,SAAgB,qBAAqB,CACnC,MAAuB;IAEvB,OAAO,UAAU,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAClF,CAAC;AAED,SAAgB,mCAAmC,CACjD,KAAc;IAEd,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,EAAE,+BAA+B,CAAC,CAAC;IACjE,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACnC,SAAS,CACP,SAAS,EACT,CAAC,MAAM,EAAE,eAAe,EAAE,QAAQ,CAAC,EACnC,uCAAuC,CACxC,CAAC;QACF,IACE,SAAS,CAAC,IAAI,KAAK,iCAAyB;YAC5C,SAAS,CAAC,aAAa,KAAK,iCAAyB,EACrD,CAAC;YACD,MAAM,IAAI,KAAK,CACb,yEAAyE,CAC1E,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,SAAS,CAAC,SAAS,EAAE,cAAc,EAAE,+BAA+B,CAAC,CAAC;IACtE,IACE,SAAS,CAAC,IAAI,KAAK,iCAAyB;QAC5C,SAAS,CAAC,aAAa,KAAK,iCAAyB;QACrD,SAAS,CAAC,MAAM,KAAK,QAAQ;QAC7B,SAAS,CAAC,KAAK,KAAK,SAAS;QAC7B,SAAS,CAAC,IAAI,KAAK,OAAO;QAC1B,OAAO,SAAS,CAAC,WAAW,KAAK,QAAQ;QACzC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACnD,OAAO,SAAS,CAAC,cAAc,KAAK,QAAQ;QAC5C,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC;QAC9C,OAAO,SAAS,CAAC,YAAY,KAAK,QAAQ;QAC1C,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAC5C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,SAAkD,CAAC;AAC5D,CAAC;AAED,SAAgB,gCAAgC,CAAC,KAGhD;IACC,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,0BAA0B,CAAC,CAAC;IACpE,SAAS,CAAC,QAAQ,EAAE,kBAAkB,EAAE,0BAA0B,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,iCAAiC,CAAC,CAAC;IAC1E,SAAS,CAAC,MAAM,EAAE,eAAe,EAAE,iCAAiC,CAAC,CAAC;IACtE,MAAM,YAAY,GAAG,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzD,MAAM,SAAS,GACb,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ;QACpC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;QAChC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;IACjB,MAAM,WAAW,GACf,OAAO,QAAQ,CAAC,WAAW,KAAK,QAAQ;QACtC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;QAClC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;IACjB,MAAM,aAAa,GAAG;QACpB,kBAAkB;QAClB,gBAAgB;QAChB,GAAG,yCAAiC;KACrC,CAAC;IACF,IACE,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO;QAC5C,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,WAAW;QAClD,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;QACrD,QAAQ,CAAC,IAAI,KAAK,8BAA8B;QAChD,QAAQ,CAAC,aAAa,KAAK,iCAAyB;QACpD,QAAQ,CAAC,KAAK,KAAK,SAAS;QAC5B,QAAQ,CAAC,IAAI,KAAK,OAAO;QACzB,QAAQ,CAAC,MAAM,KAAK,QAAQ;QAC5B,QAAQ,CAAC,WAAW,KAAK,YAAY;QACrC,QAAQ,CAAC,YAAY,KAAK,YAAY;QACtC,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ;QACtC,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;QACpC,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ;QACnC,CAAC,+BAA+B,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QACtD,OAAO,QAAQ,CAAC,YAAY,KAAK,QAAQ;QACzC,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;QAC7C,OAAO,QAAQ,CAAC,cAAc,KAAK,QAAQ;QAC3C,CAAC,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC;QACjD,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ;QACtC,CAAC,IAAI,MAAM,CACT,2CAA2C,QAAQ,CAAC,SAAS,oDAAoD,CAClH,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC1B,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC3B,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC7B,WAAW,GAAG,SAAS;QACvB,WAAW,GAAG,SAAS,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK;QAC7C,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC;QACtC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,aAAa,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;QACxE,OAAO,MAAM,CAAC,oBAAoB,KAAK,QAAQ;QAC/C,MAAM,CAAC,oBAAoB,GAAG,GAAG;QACjC,MAAM,CAAC,oBAAoB,GAAG,GAAG;QACjC,MAAM,CAAC,wBAAwB,KAAK,GAAG;QACvC,MAAM,CAAC,2BAA2B,KAAK,GAAG;QAC1C,MAAM,CAAC,sBAAsB,KAAK,GAAG;QACrC,MAAM,CAAC,yBAAyB,KAAK,IAAI;QACzC,MAAM,CAAC,uBAAuB,KAAK,IAAI;QACvC,MAAM,CAAC,uBAAuB,KAAK,IAAI,EACvC,CAAC;QACD,MAAM,IAAI,KAAK,CACb,8EAA8E,CAC/E,CAAC;IACJ,CAAC;IACD,MAAM,cAAc,GAAG,UAAU,IAAA,wBAAU,EAAC,QAAQ,CAAC;SAClD,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;SAC3B,MAAM,CAAC,KAAK,CAAC,EAAW,CAAC;IAC5B,OAAO;QACL,WAAW,EAAE,QAAQ,CAAC,WAAqB;QAC3C,cAAc;QACd,IAAI,EAAE,iCAAyB;QAC/B,IAAI,EAAE,OAAO;QACb,YAAY;QACZ,aAAa,EAAE,iCAAyB;QACxC,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE,QAAQ;KACjB,CAAC;AACJ,CAAC;AAED,SAAgB,mCAAmC,CAAC,KAInD;IACC,MAAM,QAAQ,GAAG,mCAAmC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpE,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,QAAQ,GAAG,gCAAgC,CAAC;QAChD,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAC;IACH,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAK,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CACb,+EAA+E,CAChF,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAgB,wBAAwB,CAAC,KAIxC;IACC,MAAM,KAAK,GAAG,IAAA,kCAAsB,EAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAClD,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/C,MAAM,YAAY,GAAG,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzD,IACE,WAAW,CAAC,MAAM,KAAK,WAAW;QAClC,WAAW,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EACrC,CAAC;QACD,MAAM,IAAI,KAAK,CACb,cAAc,KAAK,mEAAmE,CACvF,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,KAAK,YAAY,EAAE,CAAC;QAC3B,IAAI,WAAW,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC,YAAY,KAAK,YAAY,EAAE,CAAC;YACtE,MAAM,IAAI,KAAK,CACb,iGAAiG,CAClG,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO;QACL,MAAM,EAAE,WAAW,CAAC,MAAM;QAC1B,SAAS,EAAE,WAAW,CAAC,YAAY,CAAC,MAAM,CACxC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAA,eAAI,EAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CACjD;QACD,SAAS,EAAE,WAAW,CAAC,YAAY,CAAC,MAAM,CACxC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAA,eAAI,EAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CACjD;QACD,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO;YACnC,CAAC,CAAC;gBACE,OAAO,EAAE,SAAS;gBAClB,MAAM,EAAE;oBACN,OAAO,EAAE,CAAC,eAAe,EAAE,QAAQ,EAAE,WAAW,CAAC;oBACjD,WAAW,EAAE,IAAI;iBAClB;gBACD,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS;aAC1C;YACH,CAAC,CAAC,KAAK;QACT,IAAI,EAAE,WAAW,CAAC,IAAI;QACtB,YAAY;QACZ,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,cAAc;QAC3C,KAAK;KACN,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,UAAkB;IACpC,OAAO;QACL,wBAAwB,EAAE,IAAI;QAC9B,UAAU;QACV,sBAAsB,EAAE,IAAI;KAC7B,CAAC;AACJ,CAAC;AAED,SAAgB,oBAAoB,CAClC,IAAwB,EACxB,MAAgD;IAEhD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,MAAM,KAAK,GAAc,EAAE,CAAC;IAC5B,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QAChC,MAAM,UAAU,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC;aAChD,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC;aACtC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,uBAAuB,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;QACxD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;QACD,KAAK,CAAC,IAAI,CAAC;YACT,MAAM,EAAE,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;YAC7D,IAAI,EAAE,kBAAkB;YACxB,QAAQ,EAAE,QAAQ,EAAE;YACpB,SAAS,EAAE;gBACT,YAAY,EAAE;oBACZ,SAAS,EACP,UAAU,CAAC,MAAM,KAAK,CAAC;wBACrB,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;wBACf,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE;iBAClD;aACF;YACD,gBAAgB,EAAE,UAAU,CAAC,GAAG,MAAM,kBAAkB,CAAC;SAC1D,CAAC,CAAC;IACL,CAAC;IACD,KAAK,CAAC,IAAI,CAAC;QACT,MAAM,EAAE,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;QAC7D,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,QAAQ,EAAE;QACpB,SAAS,EAAE;YACT,kBAAkB,EAAE;gBAClB,gBAAgB,EAAE,IAAI;gBACtB,KAAK,EAAE,IAAI,CAAC,cAAc;aAC3B;SACF;QACD,gBAAgB,EAAE,UAAU,CAAC,GAAG,MAAM,gBAAgB,CAAC;KACxD,CAAC,CAAC;IACH,KAAK,MAAM,IAAI,IAAI,yCAAiC,EAAE,CAAC;QACrD,KAAK,CAAC,IAAI,CAAC;YACT,IAAI;YACJ,cAAc,EAAE,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;YACpE,QAAQ,EAAE,QAAQ,EAAE;YACpB,SAAS,EAAE;gBACT,yBAAyB,EAAE;oBACzB,IAAI;oBACJ,GAAG,CAAC,IAAI,KAAK,8BAA8B;wBACzC,CAAC,CAAC;4BACE,6DAA6D;4BAC7D,mDAAmD;4BACnD,mBAAmB,EAAE;gCACnB;oCACE,WAAW,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;oCAC1B,IAAI,EAAE,uBAAuB;iCAC9B;6BACF;yBACF;wBACH,CAAC,CAAC,EAAE,CAAC;oBACP,UAAU,EAAE,KAAK;iBAClB;aACF;YACD,gBAAgB,EAAE,UAAU,CAAC,GAAG,MAAM,GAAG,IAAI,EAAE,CAAC;SACjD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}