@empire-builder-kit/nx 1.0.0-rc.2 → 1.0.0-rc.21

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (253) hide show
  1. package/executors.json +10 -0
  2. package/package.json +4 -4
  3. package/src/cli/output.js +1 -1
  4. package/src/developer-agent/model.js +4 -4
  5. package/src/developer-agent/model.js.map +1 -1
  6. package/src/developer-agent/operation-registry.js +67 -10
  7. package/src/developer-agent/operation-registry.js.map +1 -1
  8. package/src/developer-agent/planning.js +7 -9
  9. package/src/developer-agent/planning.js.map +1 -1
  10. package/src/developer-agent/workspace-inspection.js +12 -0
  11. package/src/developer-agent/workspace-inspection.js.map +1 -1
  12. package/src/executors/blueprint-trust/blueprint-trust.js +6 -0
  13. package/src/executors/blueprint-trust/blueprint-trust.js.map +1 -1
  14. package/src/executors/deployment-plan/deployment-plan.js +5 -0
  15. package/src/executors/deployment-plan/deployment-plan.js.map +1 -1
  16. package/src/executors/foundation-preflight/foundation-preflight.d.ts +2 -0
  17. package/src/executors/foundation-preflight/foundation-preflight.js +6 -2
  18. package/src/executors/foundation-preflight/foundation-preflight.js.map +1 -1
  19. package/src/executors/foundation-preflight/schema.json +10 -0
  20. package/src/executors/foundation-profile-preflight/foundation-profile-preflight.d.ts +2 -0
  21. package/src/executors/foundation-profile-preflight/foundation-profile-preflight.js +2 -1
  22. package/src/executors/foundation-profile-preflight/foundation-profile-preflight.js.map +1 -1
  23. package/src/executors/foundation-profile-preflight/schema.json +19 -3
  24. package/src/executors/github-bootstrap/github-bootstrap.js +1 -0
  25. package/src/executors/github-bootstrap/github-bootstrap.js.map +1 -1
  26. package/src/executors/infrastructure-plan/infrastructure-plan.d.ts +229 -5
  27. package/src/executors/infrastructure-plan/infrastructure-plan.js +2298 -175
  28. package/src/executors/infrastructure-plan/infrastructure-plan.js.map +1 -1
  29. package/src/executors/infrastructure-plan/schema.json +16 -0
  30. package/src/executors/local-deploy/fixtures/local-deploy-state-machine.mjs +53 -0
  31. package/src/executors/local-deploy/local-approval.d.ts +23 -0
  32. package/src/executors/local-deploy/local-approval.js +43 -0
  33. package/src/executors/local-deploy/local-approval.js.map +1 -0
  34. package/src/executors/local-deploy/local-deploy.d.ts +69 -0
  35. package/src/executors/local-deploy/local-deploy.js +911 -0
  36. package/src/executors/local-deploy/local-deploy.js.map +1 -0
  37. package/src/executors/local-deploy/schema.json +42 -0
  38. package/src/executors/router-waf-rehearsal/router-waf-rehearsal.d.ts +3 -0
  39. package/src/executors/router-waf-rehearsal/router-waf-rehearsal.js +94 -0
  40. package/src/executors/router-waf-rehearsal/router-waf-rehearsal.js.map +1 -0
  41. package/src/executors/router-waf-rehearsal/schema.json +9 -0
  42. package/src/executors/secret-metadata/schema.json +5 -0
  43. package/src/executors/secret-metadata/secret-metadata.d.ts +12 -1
  44. package/src/executors/secret-metadata/secret-metadata.js +68 -16
  45. package/src/executors/secret-metadata/secret-metadata.js.map +1 -1
  46. package/src/executors/sst-lifecycle/logging-preflight.d.ts +5 -0
  47. package/src/executors/sst-lifecycle/logging-preflight.js +23 -13
  48. package/src/executors/sst-lifecycle/logging-preflight.js.map +1 -1
  49. package/src/executors/sst-lifecycle/run-sst-command.d.ts +8 -1
  50. package/src/executors/sst-lifecycle/run-sst-command.js +144 -12
  51. package/src/executors/sst-lifecycle/run-sst-command.js.map +1 -1
  52. package/src/executors/sst-lifecycle/schema.json +13 -1
  53. package/src/executors/sst-lifecycle/sst-environment-source.d.ts +25 -0
  54. package/src/executors/sst-lifecycle/sst-environment-source.js +213 -0
  55. package/src/executors/sst-lifecycle/sst-environment-source.js.map +1 -0
  56. package/src/foundation/index.d.ts +2 -0
  57. package/src/foundation/index.js +2 -0
  58. package/src/foundation/index.js.map +1 -1
  59. package/src/foundation/logging-preflight.js +1 -1
  60. package/src/foundation/logging-preflight.js.map +1 -1
  61. package/src/foundation/logging.d.ts +3 -1
  62. package/src/foundation/logging.js +1 -1
  63. package/src/foundation/logging.js.map +1 -1
  64. package/src/foundation/partial-state.d.ts +10 -0
  65. package/src/foundation/partial-state.js +21 -0
  66. package/src/foundation/partial-state.js.map +1 -0
  67. package/src/foundation/router-waf.d.ts +98 -0
  68. package/src/foundation/router-waf.js +401 -0
  69. package/src/foundation/router-waf.js.map +1 -0
  70. package/src/generators/function/function.js +2 -1
  71. package/src/generators/function/function.js.map +1 -1
  72. package/src/generators/post-generation-install.d.ts +1 -0
  73. package/src/generators/post-generation-install.js +134 -67
  74. package/src/generators/post-generation-install.js.map +1 -1
  75. package/src/generators/preset/generator.js +23 -3
  76. package/src/generators/preset/generator.js.map +1 -1
  77. package/src/generators/preset/schema.d.ts +7 -0
  78. package/src/generators/preset/schema.json +47 -0
  79. package/src/generators/preset/tool-versions.d.ts +5 -5
  80. package/src/generators/preset/tool-versions.js +4 -4
  81. package/src/generators/preset/workspace-files-ci-acceptance.d.ts +1 -0
  82. package/src/generators/preset/workspace-files-ci-acceptance.js +791 -0
  83. package/src/generators/preset/workspace-files-ci-acceptance.js.map +1 -0
  84. package/src/generators/preset/workspace-files-developer-agent.d.ts +2 -0
  85. package/src/generators/preset/workspace-files-developer-agent.js +25 -11
  86. package/src/generators/preset/workspace-files-developer-agent.js.map +1 -1
  87. package/src/generators/preset/workspace-files-foundation-workload-roles.js +5 -2
  88. package/src/generators/preset/workspace-files-foundation-workload-roles.js.map +1 -1
  89. package/src/generators/preset/workspace-files-performance-load.js +2 -1
  90. package/src/generators/preset/workspace-files-performance-load.js.map +1 -1
  91. package/src/generators/preset/workspace-files-workload-role-baseline.js +254 -42
  92. package/src/generators/preset/workspace-files-workload-role-baseline.js.map +1 -1
  93. package/src/generators/preset/workspace-files.d.ts +8 -4
  94. package/src/generators/preset/workspace-files.js +1039 -68
  95. package/src/generators/preset/workspace-files.js.map +1 -1
  96. package/src/generators/repository-policy/repository-policy.js +65 -3
  97. package/src/generators/repository-policy/repository-policy.js.map +1 -1
  98. package/src/generators/repository-policy/schema.d.ts +6 -0
  99. package/src/generators/repository-policy/schema.json +46 -0
  100. package/src/generators/slice/built-in-plan-api-files.js +2 -1
  101. package/src/generators/slice/built-in-plan-api-files.js.map +1 -1
  102. package/src/generators/slice/built-in-plan-authorization-infrastructure-files.js +19 -1
  103. package/src/generators/slice/built-in-plan-authorization-infrastructure-files.js.map +1 -1
  104. package/src/generators/slice/built-in-plan-data-files.js +16 -5
  105. package/src/generators/slice/built-in-plan-data-files.js.map +1 -1
  106. package/src/generators/slice/built-in-plan-data-retention-job-files.js +10 -6
  107. package/src/generators/slice/built-in-plan-data-retention-job-files.js.map +1 -1
  108. package/src/generators/slice/built-in-plan-database-lifecycle-files.js +25 -10
  109. package/src/generators/slice/built-in-plan-database-lifecycle-files.js.map +1 -1
  110. package/src/generators/slice/built-in-plan-foundation-files.js +2 -3
  111. package/src/generators/slice/built-in-plan-foundation-files.js.map +1 -1
  112. package/src/generators/slice/built-in-plan-infrastructure-files.js +364 -29
  113. package/src/generators/slice/built-in-plan-infrastructure-files.js.map +1 -1
  114. package/src/generators/slice/built-in-plan-infrastructure-safety-files.js +67 -11
  115. package/src/generators/slice/built-in-plan-infrastructure-safety-files.js.map +1 -1
  116. package/src/generators/slice/built-in-plan-metadata-files.js +1 -0
  117. package/src/generators/slice/built-in-plan-metadata-files.js.map +1 -1
  118. package/src/generators/slice/built-in-plan-operations-files.js +442 -5
  119. package/src/generators/slice/built-in-plan-operations-files.js.map +1 -1
  120. package/src/generators/slice/built-in-plan-performance-files.d.ts +2 -1
  121. package/src/generators/slice/built-in-plan-performance-files.js +41 -47
  122. package/src/generators/slice/built-in-plan-performance-files.js.map +1 -1
  123. package/src/generators/slice/built-in-plan-project-files.js +14 -1
  124. package/src/generators/slice/built-in-plan-project-files.js.map +1 -1
  125. package/src/generators/slice/built-in-plan-release-files.js +235 -56
  126. package/src/generators/slice/built-in-plan-release-files.js.map +1 -1
  127. package/src/generators/slice/built-in-plan-testing-files.js +92 -5
  128. package/src/generators/slice/built-in-plan-testing-files.js.map +1 -1
  129. package/src/generators/slice/built-in-plan-web-files.js +13 -0
  130. package/src/generators/slice/built-in-plan-web-files.js.map +1 -1
  131. package/src/generators/slice/built-in-plan-workload-role-files.js +5 -2
  132. package/src/generators/slice/built-in-plan-workload-role-files.js.map +1 -1
  133. package/src/generators/slice/built-in-plan.d.ts +2 -1
  134. package/src/generators/slice/built-in-plan.js +8 -5
  135. package/src/generators/slice/built-in-plan.js.map +1 -1
  136. package/src/generators/slice/slice.js +11 -3
  137. package/src/generators/slice/slice.js.map +1 -1
  138. package/src/generators/upgrade/upgrade.js +35 -0
  139. package/src/generators/upgrade/upgrade.js.map +1 -1
  140. package/src/generators/workload/frozen-container.d.ts +3 -2
  141. package/src/generators/workload/frozen-container.js +6 -4
  142. package/src/generators/workload/frozen-container.js.map +1 -1
  143. package/src/generators/workload/workload.js +2 -2
  144. package/src/generators/workload/workload.js.map +1 -1
  145. package/src/git-policy/github-bootstrap.d.ts +3 -1
  146. package/src/git-policy/github-bootstrap.js +22 -5
  147. package/src/git-policy/github-bootstrap.js.map +1 -1
  148. package/src/git-policy/routing.d.ts +2 -0
  149. package/src/git-policy/routing.js +12 -1
  150. package/src/git-policy/routing.js.map +1 -1
  151. package/src/infrastructure-change/local-capability.d.ts +73 -0
  152. package/src/infrastructure-change/local-capability.js +114 -0
  153. package/src/infrastructure-change/local-capability.js.map +1 -0
  154. package/src/infrastructure-change/model.d.ts +25 -4
  155. package/src/infrastructure-change/model.js +1 -0
  156. package/src/infrastructure-change/model.js.map +1 -1
  157. package/src/infrastructure-change/normalize.d.ts +4 -0
  158. package/src/infrastructure-change/normalize.js +47 -7
  159. package/src/infrastructure-change/normalize.js.map +1 -1
  160. package/src/infrastructure-change/plan.d.ts +30 -3
  161. package/src/infrastructure-change/plan.js +323 -13
  162. package/src/infrastructure-change/plan.js.map +1 -1
  163. package/src/infrastructure-change/risk.d.ts +3 -1
  164. package/src/infrastructure-change/risk.js +96 -16
  165. package/src/infrastructure-change/risk.js.map +1 -1
  166. package/src/local-dev/environment-inspector.d.ts +1 -0
  167. package/src/local-dev/environment-inspector.js +21 -9
  168. package/src/local-dev/environment-inspector.js.map +1 -1
  169. package/src/local-dev/private-state.d.ts +2 -0
  170. package/src/local-dev/private-state.js +3 -1
  171. package/src/local-dev/private-state.js.map +1 -1
  172. package/src/performance/cost-controls.d.ts +5 -3
  173. package/src/performance/cost-controls.js +30 -24
  174. package/src/performance/cost-controls.js.map +1 -1
  175. package/src/performance/model.d.ts +1 -1
  176. package/src/performance/model.js +0 -2
  177. package/src/performance/model.js.map +1 -1
  178. package/src/performance/test-fixtures.js +0 -2
  179. package/src/performance/test-fixtures.js.map +1 -1
  180. package/src/release/source-authority.d.ts +1 -0
  181. package/src/release/source-authority.js +136 -9
  182. package/src/release/source-authority.js.map +1 -1
  183. package/src/repository-policy/deployment-plan.d.ts +4 -1
  184. package/src/repository-policy/deployment-plan.js +8 -0
  185. package/src/repository-policy/deployment-plan.js.map +1 -1
  186. package/src/repository-policy/foundation-profile.js +1 -2
  187. package/src/repository-policy/foundation-profile.js.map +1 -1
  188. package/src/repository-policy/policy.d.ts +25 -1
  189. package/src/repository-policy/policy.js +145 -4
  190. package/src/repository-policy/policy.js.map +1 -1
  191. package/src/schemas/performance-policy-v1.json +0 -2
  192. package/src/schemas/repository-policy-v1.json +41 -0
  193. package/src/secrets/operator.js +22 -4
  194. package/src/secrets/operator.js.map +1 -1
  195. package/src/secrets/verification.js +9 -1
  196. package/src/secrets/verification.js.map +1 -1
  197. package/src/sst-environment-source-format.d.ts +3 -0
  198. package/src/sst-environment-source-format.js +179 -0
  199. package/src/sst-environment-source-format.js.map +1 -0
  200. package/src/supply-chain/blueprint-trust-git.js +72 -21
  201. package/src/supply-chain/blueprint-trust-git.js.map +1 -1
  202. package/src/supply-chain/blueprint-verification-authority.js +55 -3
  203. package/src/supply-chain/blueprint-verification-authority.js.map +1 -1
  204. package/src/supply-chain/blueprint-verification-execution.js +17 -2
  205. package/src/supply-chain/blueprint-verification-execution.js.map +1 -1
  206. package/src/supply-chain/build-output.d.ts +7 -1
  207. package/src/supply-chain/build-output.js +160 -20
  208. package/src/supply-chain/build-output.js.map +1 -1
  209. package/src/supply-chain/generated-command.js +131 -43
  210. package/src/supply-chain/generated-command.js.map +1 -1
  211. package/src/supply-chain/generated-container-release-command.js +187 -38
  212. package/src/supply-chain/generated-container-release-command.js.map +1 -1
  213. package/src/supply-chain/generated-ecr-collector-command.js +12 -2
  214. package/src/supply-chain/generated-ecr-collector-command.js.map +1 -1
  215. package/src/supply-chain/generated-scanner-command.js +114 -54
  216. package/src/supply-chain/generated-scanner-command.js.map +1 -1
  217. package/src/supply-chain/inventory.d.ts +17 -0
  218. package/src/supply-chain/inventory.js +114 -3
  219. package/src/supply-chain/inventory.js.map +1 -1
  220. package/src/supply-chain/pnpm-toolchain-authority.d.ts +4 -3
  221. package/src/supply-chain/pnpm-toolchain-authority.js +20 -34
  222. package/src/supply-chain/pnpm-toolchain-authority.js.map +1 -1
  223. package/src/supply-chain/policy.js +4 -1
  224. package/src/supply-chain/policy.js.map +1 -1
  225. package/src/supply-chain/sbom.d.ts +1 -1
  226. package/src/supply-chain/sbom.js +30 -5
  227. package/src/supply-chain/sbom.js.map +1 -1
  228. package/src/supply-chain/scanner.js +10 -1
  229. package/src/supply-chain/scanner.js.map +1 -1
  230. package/src/workload-roles/account-baseline.d.ts +11 -0
  231. package/src/workload-roles/account-baseline.js +253 -16
  232. package/src/workload-roles/account-baseline.js.map +1 -1
  233. package/src/workload-roles/authority.d.ts +3 -1
  234. package/src/workload-roles/authority.js +48 -2
  235. package/src/workload-roles/authority.js.map +1 -1
  236. package/src/workload-roles/aws-s3-state.js +27 -0
  237. package/src/workload-roles/aws-s3-state.js.map +1 -1
  238. package/src/workload-roles/boundary.d.ts +2 -1
  239. package/src/workload-roles/boundary.js +9 -2
  240. package/src/workload-roles/boundary.js.map +1 -1
  241. package/src/workload-roles/handler.js +52 -24
  242. package/src/workload-roles/handler.js.map +1 -1
  243. package/src/workload-roles/injection.js +1 -1
  244. package/src/workload-roles/injection.js.map +1 -1
  245. package/src/workload-roles/provisioner.js +12 -4
  246. package/src/workload-roles/provisioner.js.map +1 -1
  247. package/src/workload-roles/registration.d.ts +1 -0
  248. package/src/workload-roles/registration.js +5 -0
  249. package/src/workload-roles/registration.js.map +1 -1
  250. package/src/workload-roles/stage-boundary.js +1 -1
  251. package/src/workload-roles/stage-boundary.js.map +1 -1
  252. package/src/workload-roles/standard-slice.js +1 -0
  253. package/src/workload-roles/standard-slice.js.map +1 -1
@@ -1,8 +1,10 @@
1
1
  "use strict";
2
2
  Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.materialNormalizedSstDiffResources = materialNormalizedSstDiffResources;
3
4
  exports.computeMaterialPlanDigest = computeMaterialPlanDigest;
4
5
  exports.createInfrastructurePlan = createInfrastructurePlan;
5
6
  exports.validateInfrastructurePlanForApply = validateInfrastructurePlanForApply;
7
+ exports.validateInfrastructurePlanForProtectedApply = validateInfrastructurePlanForProtectedApply;
6
8
  const deterministic_order_js_1 = require("../deterministic-order.js");
7
9
  const canonical_json_1 = require("@empire-builder-kit/runtime/canonical-json");
8
10
  const model_js_1 = require("./model.js");
@@ -85,15 +87,63 @@ function sortedFindings(findings) {
85
87
  (0, deterministic_order_js_1.compareUtf16)(left.code, right.code) ||
86
88
  (0, deterministic_order_js_1.compareUtf16)(left.class, right.class));
87
89
  }
90
+ const SST_BUCKET_FILES_RESOURCE_TYPE = 'pulumi-nodejs:dynamic:Resource';
91
+ const SST_BUCKET_FILES_LOGICAL_ID_SUFFIX = '.sst.aws.BucketFiles';
92
+ const SST_BUCKET_FILES_ENTRY_PATH = /^files\[(?:0|[1-9]\d*)\]\.(?:contentType|hash|key|source)$/u;
93
+ function materialChangedProperties(resource) {
94
+ const isSstBucketFilesUpdate = resource.logicalId.endsWith(SST_BUCKET_FILES_LOGICAL_ID_SUFFIX) &&
95
+ resource.operation === 'update' &&
96
+ resource.providerOperation === 'update' &&
97
+ !resource.replacement &&
98
+ resource.resourceType === SST_BUCKET_FILES_RESOURCE_TYPE;
99
+ const properties = resource.changedProperties.map((property) => isSstBucketFilesUpdate && SST_BUCKET_FILES_ENTRY_PATH.test(property.path)
100
+ ? { ...property, path: 'files[*]' }
101
+ : property);
102
+ return [
103
+ ...new Map(properties.map((property) => [
104
+ JSON.stringify([
105
+ property.inputDiff,
106
+ property.kind,
107
+ property.path,
108
+ property.sensitive,
109
+ ]),
110
+ property,
111
+ ])).values(),
112
+ ].sort((left, right) => (0, deterministic_order_js_1.compareUtf16)(JSON.stringify(left), JSON.stringify(right)));
113
+ }
114
+ /**
115
+ * Returns the value-free resource projection used by plan and drift digests.
116
+ * SST's BucketFiles dynamic provider reports rebuilt file arrays by ephemeral
117
+ * list index. The committed source and release-candidate authorities bind the
118
+ * bytes; the plan binds the mutation kind without turning array scheduling
119
+ * into a new approval identity. Every unrecognized path remains exact.
120
+ *
121
+ * @internal
122
+ */
123
+ function materialNormalizedSstDiffResources(diff) {
124
+ return diff.resources.map((resource) => ({
125
+ ...Object.fromEntries(Object.entries(resource).filter(([key]) => key !== 'sourceIndex')),
126
+ changedProperties: materialChangedProperties(resource),
127
+ }));
128
+ }
129
+ function materialDiff(diff) {
130
+ const withoutSourceIndex = (value) => Object.fromEntries(Object.entries(value).filter(([key]) => key !== 'sourceIndex'));
131
+ return {
132
+ ...diff,
133
+ failures: diff.failures.map(withoutSourceIndex),
134
+ resources: materialNormalizedSstDiffResources(diff),
135
+ };
136
+ }
137
+ function materialState(state) {
138
+ return Object.fromEntries(Object.entries(state).filter(([key]) => key !== 'expiresAt' && key !== 'observedAt'));
139
+ }
88
140
  function planMaterial(plan) {
89
141
  return {
90
142
  action: plan.action,
91
143
  aggregateRisk: plan.aggregateRisk,
92
144
  configurationMetadataDigest: plan.configurationMetadataDigest,
93
- diff: plan.diff,
145
+ diff: materialDiff(plan.diff),
94
146
  driftEvidenceDigest: plan.driftEvidenceDigest,
95
- driftEvidenceExpiresAt: plan.driftEvidenceExpiresAt,
96
- driftEvidenceGeneratedAt: plan.driftEvidenceGeneratedAt,
97
147
  driftStatus: plan.driftStatus,
98
148
  frameworkVersion: plan.frameworkVersion,
99
149
  kind: plan.kind,
@@ -102,16 +152,18 @@ function planMaterial(plan) {
102
152
  requiredApprovals: plan.requiredApprovals,
103
153
  resourceFindings: plan.resourceFindings,
104
154
  schemaVersion: plan.schemaVersion,
105
- state: plan.state,
155
+ state: materialState(plan.state),
106
156
  target: plan.target,
107
157
  tool: plan.tool,
108
158
  versions: plan.versions,
109
159
  };
110
160
  }
111
161
  /**
112
- * Hashes the material plan contract. generatedAt, expiresAt, repository,
113
- * sourceCommit, and approval-record contents are intentionally excluded and
114
- * validated independently immediately before apply.
162
+ * Hashes the material plan contract. Diagnostic source positions, observation
163
+ * timestamps, generatedAt, expiresAt, repository, sourceCommit, and
164
+ * approval-record contents are intentionally excluded. Freshness, repository,
165
+ * source, and approval authority are validated independently immediately
166
+ * before apply.
115
167
  */
116
168
  function computeMaterialPlanDigest(plan) {
117
169
  return (0, canonical_json_1.canonicalJsonSha256)(planMaterial(plan), {
@@ -120,8 +172,13 @@ function computeMaterialPlanDigest(plan) {
120
172
  }
121
173
  function createInfrastructurePlan(input) {
122
174
  validateCreationInput(input);
175
+ const action = input.action ?? 'deploy';
176
+ const requiredApprovals = new Set(input.risk.requiredApprovals);
177
+ if (action === 'refresh') {
178
+ requiredApprovals.add('deployment-review');
179
+ }
123
180
  const withoutDigest = {
124
- action: input.action ?? 'deploy',
181
+ action,
125
182
  aggregateRisk: input.risk.aggregate,
126
183
  configurationMetadataDigest: input.configurationMetadataDigest,
127
184
  diff: input.diff,
@@ -136,7 +193,7 @@ function createInfrastructurePlan(input) {
136
193
  policyProfileDigest: input.policyProfileDigest,
137
194
  projects: [...input.projects],
138
195
  repository: input.repository,
139
- requiredApprovals: [...input.risk.requiredApprovals].sort(),
196
+ requiredApprovals: [...requiredApprovals].sort(),
140
197
  resourceFindings: sortedFindings(input.risk.findings),
141
198
  schemaVersion: model_js_1.INFRASTRUCTURE_CHANGE_SCHEMA_VERSION,
142
199
  sourceCommit: input.sourceCommit,
@@ -157,7 +214,7 @@ function validDate(value) {
157
214
  const timestamp = Date.parse(value);
158
215
  return Number.isFinite(timestamp) ? timestamp : undefined;
159
216
  }
160
- function approvalFindings(plan, approval, now, plannedGeneratedAt) {
217
+ function approvalFindings(plan, approval, now, plannedGeneratedAt, allowInvocationLocalOperatorAcknowledgement) {
161
218
  if (approval === undefined) {
162
219
  return [
163
220
  {
@@ -193,10 +250,17 @@ function approvalFindings(plan, approval, now, plannedGeneratedAt) {
193
250
  }
194
251
  else if (approval.mode === 'standing-policy' ||
195
252
  approval.author === approval.approver ||
196
- !approval.codeownerReviewed) {
253
+ (approval.mode !== 'operator-acknowledgement' &&
254
+ !approval.codeownerReviewed) ||
255
+ (approval.mode === 'operator-acknowledgement' &&
256
+ (!allowInvocationLocalOperatorAcknowledgement ||
257
+ approval.codeownerReviewed ||
258
+ approval.recordPath !== undefined ||
259
+ approval.author !== 'ebk-infrastructure-plan' ||
260
+ !/^local-federated:[a-f0-9]{64}$/u.test(approval.approver)))) {
197
261
  findings.push({
198
262
  code: 'approval-invalid',
199
- detail: 'Additional approval requires a non-author CODEOWNER-reviewed decision.',
263
+ detail: 'Additional approval requires either an honest active-operator acknowledgement or a non-author CODEOWNER-reviewed decision.',
200
264
  });
201
265
  }
202
266
  for (const requirement of plan.requiredApprovals) {
@@ -335,13 +399,259 @@ function validateInfrastructurePlanForApply(input) {
335
399
  detail: 'Source changed beyond the exact approval-record file after planning.',
336
400
  });
337
401
  }
338
- findings.push(...approvalFindings(input.recomputed, input.approval, now, input.planned.generatedAt));
402
+ findings.push(...approvalFindings(input.recomputed, input.approval, now, input.planned.generatedAt, true));
403
+ const codes = new Set(findings.map(({ code }) => code));
404
+ const outcome = codes.has('state-locked')
405
+ ? 'state-locked'
406
+ : codes.has('state-lock-unverified')
407
+ ? 'state-lock-unverified'
408
+ : [...codes].some((code) => [
409
+ 'material-plan-changed',
410
+ 'plan-expired',
411
+ 'plan-schema-invalid',
412
+ 'plan-tool-version-invalid',
413
+ 'source-change-invalid',
414
+ ].includes(code))
415
+ ? 'plan-stale'
416
+ : findings.length > 0
417
+ ? 'plan-risk-blocked'
418
+ : 'plan-clean';
419
+ return {
420
+ allowed: findings.length === 0,
421
+ findings,
422
+ outcome,
423
+ };
424
+ }
425
+ function protectedAuthorityEnvelope(plan) {
426
+ return {
427
+ action: plan.action,
428
+ configurationMetadataDigest: plan.configurationMetadataDigest,
429
+ frameworkVersion: plan.frameworkVersion,
430
+ kind: plan.kind,
431
+ policyProfileDigest: plan.policyProfileDigest,
432
+ projects: plan.projects,
433
+ schemaVersion: plan.schemaVersion,
434
+ state: materialState(plan.state),
435
+ target: plan.target,
436
+ tool: plan.tool,
437
+ versions: plan.versions,
438
+ };
439
+ }
440
+ function isProviderObservation(resource) {
441
+ return (resource.changedProperties.length === 0 &&
442
+ !resource.replacement &&
443
+ ((resource.operation === 'read' && resource.providerOperation === 'read') ||
444
+ (resource.operation === 'discard' &&
445
+ resource.providerOperation === 'discard') ||
446
+ (resource.operation === 'delete' &&
447
+ resource.providerOperation === 'delete' &&
448
+ resource.resourceType.startsWith('pulumi:providers:'))));
449
+ }
450
+ function approvalRequiredPlanEntries(plan) {
451
+ const resourceIds = new Set(plan.diff.resources.map(({ logicalId }) => logicalId));
452
+ const findingsByResource = new Map();
453
+ for (const finding of plan.resourceFindings) {
454
+ if (!finding.resourceId)
455
+ continue;
456
+ findingsByResource.set(finding.resourceId, [
457
+ ...(findingsByResource.get(finding.resourceId) ?? []),
458
+ finding,
459
+ ]);
460
+ }
461
+ const entries = plan.diff.resources
462
+ .filter((resource) => {
463
+ if (isProviderObservation(resource))
464
+ return false;
465
+ const findings = findingsByResource.get(resource.logicalId) ?? [];
466
+ return (resource.operation === 'delete' ||
467
+ resource.operation === 'replace' ||
468
+ resource.operation === 'import' ||
469
+ resource.operation === 'unknown' ||
470
+ resource.resourceType.startsWith('aws:iam/') ||
471
+ findings.some(({ disposition }) => disposition !== 'allow-standing-policy'));
472
+ })
473
+ .map((resource) => (0, canonical_json_1.canonicalJsonSha256)({
474
+ changedProperties: materialChangedProperties(resource),
475
+ findings: (findingsByResource.get(resource.logicalId) ?? []).map(({ class: riskClass, code, disposition, propertyPath }) => ({
476
+ class: riskClass,
477
+ code,
478
+ disposition,
479
+ ...(propertyPath === undefined ? {} : { propertyPath }),
480
+ })),
481
+ logicalId: resource.logicalId,
482
+ operation: resource.operation,
483
+ replacement: resource.replacement,
484
+ replacementStrategy: resource.replacementStrategy,
485
+ resourceType: resource.resourceType,
486
+ }, { omitUndefinedObjectValues: true }));
487
+ for (const finding of plan.resourceFindings) {
488
+ if ((finding.resourceId && resourceIds.has(finding.resourceId)) ||
489
+ finding.disposition === 'allow-standing-policy') {
490
+ continue;
491
+ }
492
+ entries.push((0, canonical_json_1.canonicalJsonSha256)({
493
+ class: finding.class,
494
+ code: finding.code,
495
+ disposition: finding.disposition,
496
+ ...(finding.resourceId === undefined
497
+ ? {}
498
+ : { resourceId: finding.resourceId }),
499
+ ...(finding.propertyPath === undefined
500
+ ? {}
501
+ : { propertyPath: finding.propertyPath }),
502
+ }, { omitUndefinedObjectValues: true }));
503
+ }
504
+ return [...new Set(entries)].sort(deterministic_order_js_1.compareUtf16);
505
+ }
506
+ /**
507
+ * Validates a fresh protected-workflow plan against source-bound deployment
508
+ * authority. The retained provider preview remains review evidence, but
509
+ * provider observations are not treated as a replayable transaction. Every
510
+ * approval-required resource and operation in the fresh plan must have been
511
+ * present in the reviewed plan.
512
+ */
513
+ function validateInfrastructurePlanForProtectedApply(input) {
514
+ const findings = [];
515
+ const now = validDate(input.now);
516
+ if (now === undefined) {
517
+ throw new TypeError('now must be an ISO date-time.');
518
+ }
519
+ for (const [label, plan] of [
520
+ ['planned', input.planned],
521
+ ['recomputed', input.recomputed],
522
+ ]) {
523
+ if (plan.kind !== model_js_1.INFRASTRUCTURE_PLAN_KIND ||
524
+ plan.schemaVersion !== model_js_1.INFRASTRUCTURE_CHANGE_SCHEMA_VERSION) {
525
+ findings.push({
526
+ code: 'plan-schema-invalid',
527
+ detail: `${label} plan is not an infrastructure plan v1.`,
528
+ });
529
+ }
530
+ if (!SOURCE_COMMIT.test(plan.sourceCommit)) {
531
+ findings.push({
532
+ code: 'source-change-invalid',
533
+ detail: `${label} plan source commit is not a full Git object identifier.`,
534
+ });
535
+ }
536
+ if (plan.tool.name !== model_js_1.SST_DIFF_TOOL_NAME ||
537
+ plan.tool.version !== model_js_1.SST_DIFF_TOOL_VERSION) {
538
+ findings.push({
539
+ code: 'plan-tool-version-invalid',
540
+ detail: `${label} plan was not produced by SST ${model_js_1.SST_DIFF_TOOL_VERSION}.`,
541
+ });
542
+ }
543
+ if (computeMaterialPlanDigest(plan) !== plan.materialDigest) {
544
+ findings.push({
545
+ code: 'material-plan-changed',
546
+ detail: `${label} plan digest does not match its material contents.`,
547
+ });
548
+ }
549
+ if (!plan.diff.complete) {
550
+ findings.push({
551
+ code: 'diff-incomplete',
552
+ detail: `${label} plan contains an incomplete cloud-backed diff.`,
553
+ });
554
+ }
555
+ }
556
+ if ((0, canonical_json_1.canonicalJsonSha256)(protectedAuthorityEnvelope(input.planned)) !==
557
+ (0, canonical_json_1.canonicalJsonSha256)(protectedAuthorityEnvelope(input.recomputed))) {
558
+ findings.push({
559
+ code: 'authority-envelope-changed',
560
+ detail: 'The fresh plan changed the exact state, environment, tool, configuration, policy, or framework authority envelope.',
561
+ });
562
+ }
563
+ if (input.planned.repository !== input.recomputed.repository) {
564
+ findings.push({
565
+ code: 'source-change-invalid',
566
+ detail: 'The fresh plan targets a different repository.',
567
+ });
568
+ }
569
+ const reviewedEntries = new Set(approvalRequiredPlanEntries(input.planned));
570
+ const newApprovalRequiredEntries = approvalRequiredPlanEntries(input.recomputed).filter((entry) => !reviewedEntries.has(entry));
571
+ if (newApprovalRequiredEntries.length > 0) {
572
+ findings.push({
573
+ code: 'approval-required-change',
574
+ detail: `The fresh plan introduced ${newApprovalRequiredEntries.length} approval-required resource or operation not present in the reviewed preview.`,
575
+ });
576
+ }
577
+ const planExpiry = validDate(input.planned.expiresAt);
578
+ if (planExpiry === undefined || planExpiry <= now) {
579
+ findings.push({
580
+ code: 'plan-expired',
581
+ detail: 'The reviewed source-bound authority has expired.',
582
+ });
583
+ }
584
+ if (input.recomputed.state.locked === true) {
585
+ findings.push({
586
+ code: 'state-locked',
587
+ detail: 'The target state is locked.',
588
+ });
589
+ }
590
+ else if (input.recomputed.state.locked === 'unknown') {
591
+ findings.push({
592
+ code: 'state-lock-unverified',
593
+ detail: 'The read-only observer could not prove that the target state is unlocked.',
594
+ });
595
+ }
596
+ if (input.recomputed.aggregateRisk === 'unknown') {
597
+ findings.push({
598
+ code: 'unknown-risk',
599
+ detail: 'Unknown infrastructure risk blocks apply.',
600
+ });
601
+ }
602
+ const driftPermitted = input.recomputed.action === 'refresh'
603
+ ? input.recomputed.driftStatus === 'no-drift' ||
604
+ input.recomputed.driftStatus === 'drift-detected'
605
+ : input.recomputed.driftStatus === 'no-drift';
606
+ if (!driftPermitted) {
607
+ findings.push({
608
+ code: 'drift-unresolved',
609
+ detail: input.recomputed.action === 'refresh'
610
+ ? 'Protected refresh requires bounded no-drift or drift-detected evidence.'
611
+ : 'Protected apply requires a bounded read-only no-drift result.',
612
+ });
613
+ }
614
+ const recordPath = input.approval?.recordPath;
615
+ const allowedSourceChanges = input.approval?.mode === 'human-record' &&
616
+ recordPath !== undefined &&
617
+ input.planned.sourceCommit !== input.recomputed.sourceCommit
618
+ ? [recordPath]
619
+ : [];
620
+ const actualSourceChanges = [...new Set(input.sourceChangesSincePlan)].sort(deterministic_order_js_1.compareUtf16);
621
+ if (input.planned.sourceCommit !== input.recomputed.sourceCommit &&
622
+ actualSourceChanges.length === 0) {
623
+ findings.push({
624
+ code: 'source-change-invalid',
625
+ detail: 'Source commit changed without a declared path delta.',
626
+ });
627
+ }
628
+ if (actualSourceChanges.length !== allowedSourceChanges.length ||
629
+ actualSourceChanges.some((path, index) => path !== [...allowedSourceChanges].sort(deterministic_order_js_1.compareUtf16)[index])) {
630
+ findings.push({
631
+ code: 'source-change-invalid',
632
+ detail: 'Source changed beyond the exact approval-record file after planning.',
633
+ });
634
+ }
635
+ if (input.environmentReviewerApproved === true) {
636
+ if (input.approval !== undefined ||
637
+ input.planned.requiredApprovals.length === 0) {
638
+ findings.push({
639
+ code: 'approval-invalid',
640
+ detail: 'Environment reviewer admission is only valid for a reviewed plan awaiting external approval.',
641
+ });
642
+ }
643
+ }
644
+ else {
645
+ findings.push(...approvalFindings(input.planned, input.approval, now, input.planned.generatedAt, false));
646
+ }
339
647
  const codes = new Set(findings.map(({ code }) => code));
340
648
  const outcome = codes.has('state-locked')
341
649
  ? 'state-locked'
342
650
  : codes.has('state-lock-unverified')
343
651
  ? 'state-lock-unverified'
344
652
  : [...codes].some((code) => [
653
+ 'approval-required-change',
654
+ 'authority-envelope-changed',
345
655
  'material-plan-changed',
346
656
  'plan-expired',
347
657
  'plan-schema-invalid',
@@ -1 +1 @@
1
- {"version":3,"file":"plan.js","sourceRoot":"","sources":["../../../../../packages/nx/src/infrastructure-change/plan.ts"],"names":[],"mappings":";;AAuLA,8DAMC;AAED,4DAwCC;AAoFD,gFAsKC;AAjeD,sEAAyD;AACzD,+EAAiF;AACjF,yCAeoB;AAEpB,MAAM,aAAa,GAAG,iCAAiC,CAAC;AAuBxD,SAAS,eAAe,CAAC,KAAa,EAAE,KAAa;IACnD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,8BAA8B,CAAC,CAAC;IAC9D,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAsC;IACnE,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC9C,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACpE,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAChE,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC3D,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACzD,IACE,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC7B,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC3B,SAAS,IAAI,WAAW,EACxB,CAAC;QACD,MAAM,IAAI,SAAS,CACjB,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IACD,IACE,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAClC,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC;QAChC,gBAAgB,GAAG,WAAW;QAC9B,cAAc,IAAI,WAAW;QAC7B,SAAS,GAAG,cAAc,EAC1B,CAAC;QACD,MAAM,IAAI,SAAS,CACjB,+EAA+E,CAChF,CAAC;IACJ,CAAC;IACD,IACE,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC;QACjC,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC;QAChC,eAAe,GAAG,WAAW;QAC7B,cAAc,IAAI,WAAW;QAC7B,SAAS,GAAG,cAAc,EAC1B,CAAC;QACD,MAAM,IAAI,SAAS,CACjB,+EAA+E,CAChF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,SAAS,CACjB,yDAAyD,CAC1D,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,SAAS,CACjB,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IACD,IACE,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,cAAc;QAClC,KAAK,CAAC,IAAI,CAAC,aAAa,KAAK,+CAAoC;QACjE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,6BAAkB;QAC3C,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,KAAK,gCAAqB;QACjD,KAAK,CAAC,IAAI,CAAC,cAAc,KAAK,kCAAkC,EAChE,CAAC;QACD,MAAM,IAAI,SAAS,CACjB,4CAA4C,gCAAqB,eAAe,CACjF,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI;QAC3B,CAAC,6BAA6B,EAAE,KAAK,CAAC,2BAA2B,CAAC;QAClE,CAAC,qBAAqB,EAAE,KAAK,CAAC,mBAAmB,CAAC;QAClD,CAAC,kBAAkB,EAAE,KAAK,CAAC,gBAAgB,CAAC;QAC5C,CAAC,qBAAqB,EAAE,KAAK,CAAC,mBAAmB,CAAC;QAClD,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC;QAChC,CAAC,cAAc,EAAE,KAAK,CAAC,YAAY,CAAC;QACpC,CAAC,eAAe,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;QACtC,CAAC,cAAc,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;QACpC,CAAC,iBAAiB,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC;QAC1C,CAAC,kBAAkB,EAAE,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC;QAC5C,CAAC,aAAa,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC;QAClC,CAAC,eAAe,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;QACtC,CAAC,2BAA2B,EAAE,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC;QAC9D,CAAC,eAAe,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;QACtC,CAAC,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC;KAC5B,EAAE,CAAC;QACX,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAChC,CAAC;IACD,IACE,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QAC3B,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,QAAQ,CAAC,MAAM;QACtD,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,EAC7D,CAAC;QACD,MAAM,IAAI,SAAS,CACjB,uDAAuD,CACxD,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAC/D,MAAM,IAAI,SAAS,CAAC,sDAAsD,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CACrB,QAAoD;IAEpD,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CACvB,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,IAAA,qCAAY,EAAC,IAAI,CAAC,UAAU,IAAI,EAAE,EAAE,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC;QAC3D,IAAA,qCAAY,EAAC,IAAI,CAAC,YAAY,IAAI,EAAE,EAAE,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC;QAC/D,IAAA,qCAAY,EAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC;QACnC,IAAA,qCAAY,EAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CACxC,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CACnB,IAAkD;IAElD,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,2BAA2B,EAAE,IAAI,CAAC,2BAA2B;QAC7D,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,sBAAsB,EAAE,IAAI,CAAC,sBAAsB;QACnD,wBAAwB,EAAE,IAAI,CAAC,wBAAwB;QACvD,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;KACxB,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAgB,yBAAyB,CACvC,IAAyE;IAEzE,OAAO,IAAA,oCAAmB,EAAC,YAAY,CAAC,IAAI,CAAC,EAAE;QAC7C,yBAAyB,EAAE,IAAI;KAChC,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,wBAAwB,CACtC,KAAsC;IAEtC,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC7B,MAAM,aAAa,GAAiD;QAClE,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,QAAQ;QAChC,aAAa,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS;QACnC,2BAA2B,EAAE,KAAK,CAAC,2BAA2B;QAC9D,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;QACpD,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;QACxD,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,IAAI,EAAE,mCAAwB;QAC9B,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,QAAQ,EAAE,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC;QAC7B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,iBAAiB,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,IAAI,EAAE;QAC3D,gBAAgB,EAAE,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC;QACrD,aAAa,EAAE,+CAAoC;QACnD,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,KAAK,EAAE,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE;QACzB,MAAM,EAAE,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE;QAC3B,IAAI,EAAE;YACJ,IAAI,EAAE,6BAAkB;YACxB,OAAO,EAAE,gCAAqB;SAC/B;QACD,QAAQ,EAAE,MAAM,CAAC,WAAW,CAC1B,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CACtD,IAAA,qCAAY,EAAC,IAAI,EAAE,KAAK,CAAC,CAC1B,CACF;KACF,CAAC;IACF,OAAO;QACL,GAAG,aAAa;QAChB,cAAc,EAAE,yBAAyB,CAAC,aAAa,CAAC;KACzD,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACpC,OAAO,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5D,CAAC;AAED,SAAS,gBAAgB,CACvB,IAA0B,EAC1B,QAAoD,EACpD,GAAW,EACX,kBAA0B;IAE1B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO;YACL;gBACE,IAAI,EAAE,kBAAkB;gBACxB,MAAM,EAAE,4DAA4D;aACrE;SACF,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAA4C,EAAE,CAAC;IAC7D,MAAM,UAAU,GAAG,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,cAAc,GAAG,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACrD,MAAM,WAAW,GAAG,SAAS,CAAC,kBAAkB,CAAC,CAAC;IAClD,IACE,QAAQ,CAAC,cAAc,KAAK,IAAI,CAAC,cAAc;QAC/C,QAAQ,CAAC,KAAK,KAAK,IAAI,CAAC,MAAM,CAAC,KAAK;QACpC,UAAU,KAAK,SAAS;QACxB,UAAU,GAAG,GAAG;QAChB,WAAW,KAAK,SAAS;QACzB,UAAU,GAAG,WAAW;QACxB,cAAc,KAAK,SAAS;QAC5B,cAAc,IAAI,GAAG,EACrB,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,uDAAuD;SAChE,CAAC,CAAC;IACL,CAAC;IACD,IAAI,IAAI,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxC,IAAI,QAAQ,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YACxC,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,kBAAkB;gBACxB,MAAM,EACJ,kEAAkE;aACrE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;SAAM,IACL,QAAQ,CAAC,IAAI,KAAK,iBAAiB;QACnC,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,QAAQ;QACrC,CAAC,QAAQ,CAAC,iBAAiB,EAC3B,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,kBAAkB;YACxB,MAAM,EACJ,wEAAwE;SAC3E,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,WAAW,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACjD,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;YAChD,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,kBAAkB;gBACxB,MAAM,EAAE,oCAAoC,WAAW,GAAG;aAC3D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,IACE,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,oBAAoB,CAAC;QACrD,CAAC,QAAQ,CAAC,eAAe,EAAE,IAAI,EAAE,EACjC,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,0DAA0D;SACnE,CAAC,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,SAAgB,kCAAkC,CAAC,KAMlD;IACC,MAAM,QAAQ,GAA4C,EAAE,CAAC;IAC7D,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,MAAM,IAAI,SAAS,CAAC,+BAA+B,CAAC,CAAC;IACvD,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI;QAC1B,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC;QAC1B,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC;KACxB,EAAE,CAAC;QACX,IACE,IAAI,CAAC,IAAI,KAAK,mCAAwB;YACtC,IAAI,CAAC,aAAa,KAAK,+CAAoC,EAC3D,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,qBAAqB;gBAC3B,MAAM,EAAE,GAAG,KAAK,yCAAyC;aAC1D,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YAC3C,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,uBAAuB;gBAC7B,MAAM,EAAE,GAAG,KAAK,0DAA0D;aAC3E,CAAC,CAAC;QACL,CAAC;QACD,IACE,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,6BAAkB;YACrC,IAAI,CAAC,IAAI,CAAC,OAAO,KAAK,gCAAqB,EAC3C,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,2BAA2B;gBACjC,MAAM,EAAE,GAAG,KAAK,iCAAiC,gCAAqB,GAAG;aAC1E,CAAC,CAAC;QACL,CAAC;QACD,IAAI,yBAAyB,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,cAAc,EAAE,CAAC;YAC5D,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,uBAAuB;gBAC7B,MAAM,EAAE,GAAG,KAAK,oDAAoD;aACrE,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACxB,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,iBAAiB;gBACvB,MAAM,EAAE,GAAG,KAAK,iDAAiD;aAClE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,cAAc,KAAK,KAAK,CAAC,UAAU,CAAC,cAAc,EAAE,CAAC;QACrE,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,uBAAuB;YAC7B,MAAM,EAAE,8DAA8D;SACvE,CAAC,CAAC;IACL,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;QAC7D,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,uBAAuB;YAC7B,MAAM,EAAE,qDAAqD;SAC9D,CAAC,CAAC;IACL,CAAC;IACD,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACtD,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,IAAI,GAAG,EAAE,CAAC;QAClD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,cAAc;YACpB,MAAM,EAAE,gCAAgC;SACzC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAC3C,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,cAAc;YACpB,MAAM,EAAE,6BAA6B;SACtC,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACvD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,uBAAuB;YAC7B,MAAM,EACJ,2EAA2E;SAC9E,CAAC,CAAC;IACL,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACjD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,cAAc;YACpB,MAAM,EAAE,2CAA2C;SACpD,CAAC,CAAC;IACL,CAAC;IACD,MAAM,cAAc,GAClB,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,SAAS;QACnC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,KAAK,UAAU;YAC3C,KAAK,CAAC,UAAU,CAAC,WAAW,KAAK,gBAAgB;QACnD,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,KAAK,UAAU,CAAC;IAClD,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,kBAAkB;YACxB,MAAM,EACJ,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,SAAS;gBACnC,CAAC,CAAC,wGAAwG;gBAC1G,CAAC,CAAC,+DAA+D;SACtE,CAAC,CAAC;IACL,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9C,MAAM,oBAAoB,GACxB,KAAK,CAAC,QAAQ,KAAK,SAAS;QAC5B,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,cAAc;QACtC,UAAU,KAAK,SAAS;QACxB,KAAK,CAAC,OAAO,CAAC,YAAY,KAAK,KAAK,CAAC,UAAU,CAAC,YAAY;QAC1D,CAAC,CAAC,CAAC,UAAU,CAAC;QACd,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,mBAAmB,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9E,IACE,KAAK,CAAC,OAAO,CAAC,YAAY,KAAK,KAAK,CAAC,UAAU,CAAC,YAAY;QAC5D,mBAAmB,CAAC,MAAM,KAAK,CAAC,EAChC,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,uBAAuB;YAC7B,MAAM,EAAE,sDAAsD;SAC/D,CAAC,CAAC;IACL,CAAC;IACD,IACE,mBAAmB,CAAC,MAAM,KAAK,oBAAoB,CAAC,MAAM;QAC1D,mBAAmB,CAAC,IAAI,CACtB,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,GAAG,oBAAoB,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAClE,EACD,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,uBAAuB;YAC7B,MAAM,EACJ,sEAAsE;SACzE,CAAC,CAAC;IACL,CAAC;IACD,QAAQ,CAAC,IAAI,CACX,GAAG,gBAAgB,CACjB,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,QAAQ,EACd,GAAG,EACH,KAAK,CAAC,OAAO,CAAC,WAAW,CAC1B,CACF,CAAC;IAEF,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC;QACvC,CAAC,CAAC,cAAc;QAChB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,uBAAuB,CAAC;YAClC,CAAC,CAAC,uBAAuB;YACzB,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CACrB;gBACE,uBAAuB;gBACvB,cAAc;gBACd,qBAAqB;gBACrB,2BAA2B;gBAC3B,uBAAuB;aACxB,CAAC,QAAQ,CAAC,IAAI,CAAC,CACjB;gBACH,CAAC,CAAC,YAAY;gBACd,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;oBACnB,CAAC,CAAC,mBAAmB;oBACrB,CAAC,CAAC,YAAY,CAAC;IACvB,OAAO;QACL,OAAO,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC;QAC9B,QAAQ;QACR,OAAO;KACR,CAAC;AACJ,CAAC"}
1
+ {"version":3,"file":"plan.js","sourceRoot":"","sources":["../../../../../packages/nx/src/infrastructure-change/plan.ts"],"names":[],"mappings":";;AAqMA,gFASC;AAqDD,8DAMC;AAED,4DA6CC;AA4FD,gFAuKC;AAsHD,kGAsMC;AAv3BD,sEAAyD;AACzD,+EAAiF;AACjF,yCAeoB;AAEpB,MAAM,aAAa,GAAG,iCAAiC,CAAC;AAuBxD,SAAS,eAAe,CAAC,KAAa,EAAE,KAAa;IACnD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,8BAA8B,CAAC,CAAC;IAC9D,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAsC;IACnE,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC9C,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACpE,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAChE,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC3D,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACzD,IACE,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC7B,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC3B,SAAS,IAAI,WAAW,EACxB,CAAC;QACD,MAAM,IAAI,SAAS,CACjB,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IACD,IACE,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAClC,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC;QAChC,gBAAgB,GAAG,WAAW;QAC9B,cAAc,IAAI,WAAW;QAC7B,SAAS,GAAG,cAAc,EAC1B,CAAC;QACD,MAAM,IAAI,SAAS,CACjB,+EAA+E,CAChF,CAAC;IACJ,CAAC;IACD,IACE,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC;QACjC,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC;QAChC,eAAe,GAAG,WAAW;QAC7B,cAAc,IAAI,WAAW;QAC7B,SAAS,GAAG,cAAc,EAC1B,CAAC;QACD,MAAM,IAAI,SAAS,CACjB,+EAA+E,CAChF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,SAAS,CACjB,yDAAyD,CAC1D,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,SAAS,CACjB,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IACD,IACE,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,cAAc;QAClC,KAAK,CAAC,IAAI,CAAC,aAAa,KAAK,+CAAoC;QACjE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,6BAAkB;QAC3C,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,KAAK,gCAAqB;QACjD,KAAK,CAAC,IAAI,CAAC,cAAc,KAAK,kCAAkC,EAChE,CAAC;QACD,MAAM,IAAI,SAAS,CACjB,4CAA4C,gCAAqB,eAAe,CACjF,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI;QAC3B,CAAC,6BAA6B,EAAE,KAAK,CAAC,2BAA2B,CAAC;QAClE,CAAC,qBAAqB,EAAE,KAAK,CAAC,mBAAmB,CAAC;QAClD,CAAC,kBAAkB,EAAE,KAAK,CAAC,gBAAgB,CAAC;QAC5C,CAAC,qBAAqB,EAAE,KAAK,CAAC,mBAAmB,CAAC;QAClD,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC;QAChC,CAAC,cAAc,EAAE,KAAK,CAAC,YAAY,CAAC;QACpC,CAAC,eAAe,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;QACtC,CAAC,cAAc,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;QACpC,CAAC,iBAAiB,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC;QAC1C,CAAC,kBAAkB,EAAE,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC;QAC5C,CAAC,aAAa,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC;QAClC,CAAC,eAAe,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;QACtC,CAAC,2BAA2B,EAAE,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC;QAC9D,CAAC,eAAe,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;QACtC,CAAC,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC;KAC5B,EAAE,CAAC;QACX,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAChC,CAAC;IACD,IACE,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QAC3B,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,QAAQ,CAAC,MAAM;QACtD,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,EAC7D,CAAC;QACD,MAAM,IAAI,SAAS,CACjB,uDAAuD,CACxD,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAC/D,MAAM,IAAI,SAAS,CAAC,sDAAsD,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CACrB,QAAoD;IAEpD,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CACvB,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,IAAA,qCAAY,EAAC,IAAI,CAAC,UAAU,IAAI,EAAE,EAAE,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC;QAC3D,IAAA,qCAAY,EAAC,IAAI,CAAC,YAAY,IAAI,EAAE,EAAE,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC;QAC/D,IAAA,qCAAY,EAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC;QACnC,IAAA,qCAAY,EAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CACxC,CAAC;AACJ,CAAC;AAED,MAAM,8BAA8B,GAAG,gCAAgC,CAAC;AACxE,MAAM,kCAAkC,GAAG,sBAAsB,CAAC;AAClE,MAAM,2BAA2B,GAC/B,6DAA6D,CAAC;AAEhE,SAAS,yBAAyB,CAChC,QAAkD;IAElD,MAAM,sBAAsB,GAC1B,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,kCAAkC,CAAC;QAC/D,QAAQ,CAAC,SAAS,KAAK,QAAQ;QAC/B,QAAQ,CAAC,iBAAiB,KAAK,QAAQ;QACvC,CAAC,QAAQ,CAAC,WAAW;QACrB,QAAQ,CAAC,YAAY,KAAK,8BAA8B,CAAC;IAC3D,MAAM,UAAU,GAAG,QAAQ,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAC7D,sBAAsB,IAAI,2BAA2B,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QACvE,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE;QACnC,CAAC,CAAC,QAAQ,CACb,CAAC;IACF,OAAO;QACL,GAAG,IAAI,GAAG,CACR,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;YAC3B,IAAI,CAAC,SAAS,CAAC;gBACb,QAAQ,CAAC,SAAS;gBAClB,QAAQ,CAAC,IAAI;gBACb,QAAQ,CAAC,IAAI;gBACb,QAAQ,CAAC,SAAS;aACnB,CAAC;YACF,QAAQ;SACT,CAAC,CACH,CAAC,MAAM,EAAE;KACX,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACrB,IAAA,qCAAY,EAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAC1D,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,kCAAkC,CAChD,IAAyB;IAEzB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACvC,GAAG,MAAM,CAAC,WAAW,CACnB,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,aAAa,CAAC,CAClE;QACD,iBAAiB,EAAE,yBAAyB,CAAC,QAAQ,CAAC;KACvD,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,YAAY,CAAC,IAAyB;IAC7C,MAAM,kBAAkB,GAAG,CAAC,KAAa,EAAW,EAAE,CACpD,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,aAAa,CAAC,CAC/D,CAAC;IACJ,OAAO;QACL,GAAG,IAAI;QACP,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,kBAAkB,CAAC;QAC/C,SAAS,EAAE,kCAAkC,CAAC,IAAI,CAAC;KACpD,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAoC;IACzD,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAC1B,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,YAAY,CACvD,CACF,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CACnB,IAAkD;IAElD,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,2BAA2B,EAAE,IAAI,CAAC,2BAA2B;QAC7D,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;QAC7B,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,KAAK,EAAE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC;QAChC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;KACxB,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,yBAAyB,CACvC,IAAyE;IAEzE,OAAO,IAAA,oCAAmB,EAAC,YAAY,CAAC,IAAI,CAAC,EAAE;QAC7C,yBAAyB,EAAE,IAAI;KAChC,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,wBAAwB,CACtC,KAAsC;IAEtC,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC7B,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,QAAQ,CAAC;IACxC,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAChE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,iBAAiB,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,aAAa,GAAiD;QAClE,MAAM;QACN,aAAa,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS;QACnC,2BAA2B,EAAE,KAAK,CAAC,2BAA2B;QAC9D,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;QACpD,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;QACxD,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,IAAI,EAAE,mCAAwB;QAC9B,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,QAAQ,EAAE,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC;QAC7B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,iBAAiB,EAAE,CAAC,GAAG,iBAAiB,CAAC,CAAC,IAAI,EAAE;QAChD,gBAAgB,EAAE,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC;QACrD,aAAa,EAAE,+CAAoC;QACnD,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,KAAK,EAAE,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE;QACzB,MAAM,EAAE,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE;QAC3B,IAAI,EAAE;YACJ,IAAI,EAAE,6BAAkB;YACxB,OAAO,EAAE,gCAAqB;SAC/B;QACD,QAAQ,EAAE,MAAM,CAAC,WAAW,CAC1B,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CACtD,IAAA,qCAAY,EAAC,IAAI,EAAE,KAAK,CAAC,CAC1B,CACF;KACF,CAAC;IACF,OAAO;QACL,GAAG,aAAa;QAChB,cAAc,EAAE,yBAAyB,CAAC,aAAa,CAAC;KACzD,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACpC,OAAO,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5D,CAAC;AAED,SAAS,gBAAgB,CACvB,IAA0B,EAC1B,QAAoD,EACpD,GAAW,EACX,kBAA0B,EAC1B,2CAAoD;IAEpD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO;YACL;gBACE,IAAI,EAAE,kBAAkB;gBACxB,MAAM,EAAE,4DAA4D;aACrE;SACF,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAA4C,EAAE,CAAC;IAC7D,MAAM,UAAU,GAAG,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,cAAc,GAAG,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACrD,MAAM,WAAW,GAAG,SAAS,CAAC,kBAAkB,CAAC,CAAC;IAClD,IACE,QAAQ,CAAC,cAAc,KAAK,IAAI,CAAC,cAAc;QAC/C,QAAQ,CAAC,KAAK,KAAK,IAAI,CAAC,MAAM,CAAC,KAAK;QACpC,UAAU,KAAK,SAAS;QACxB,UAAU,GAAG,GAAG;QAChB,WAAW,KAAK,SAAS;QACzB,UAAU,GAAG,WAAW;QACxB,cAAc,KAAK,SAAS;QAC5B,cAAc,IAAI,GAAG,EACrB,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,uDAAuD;SAChE,CAAC,CAAC;IACL,CAAC;IACD,IAAI,IAAI,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxC,IAAI,QAAQ,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YACxC,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,kBAAkB;gBACxB,MAAM,EACJ,kEAAkE;aACrE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;SAAM,IACL,QAAQ,CAAC,IAAI,KAAK,iBAAiB;QACnC,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,QAAQ;QACrC,CAAC,QAAQ,CAAC,IAAI,KAAK,0BAA0B;YAC3C,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QAC9B,CAAC,QAAQ,CAAC,IAAI,KAAK,0BAA0B;YAC3C,CAAC,CAAC,2CAA2C;gBAC3C,QAAQ,CAAC,iBAAiB;gBAC1B,QAAQ,CAAC,UAAU,KAAK,SAAS;gBACjC,QAAQ,CAAC,MAAM,KAAK,yBAAyB;gBAC7C,CAAC,iCAAiC,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAChE,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,kBAAkB;YACxB,MAAM,EACJ,4HAA4H;SAC/H,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,WAAW,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACjD,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;YAChD,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,kBAAkB;gBACxB,MAAM,EAAE,oCAAoC,WAAW,GAAG;aAC3D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,IACE,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,oBAAoB,CAAC;QACrD,CAAC,QAAQ,CAAC,eAAe,EAAE,IAAI,EAAE,EACjC,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,0DAA0D;SACnE,CAAC,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,SAAgB,kCAAkC,CAAC,KAMlD;IACC,MAAM,QAAQ,GAA4C,EAAE,CAAC;IAC7D,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,MAAM,IAAI,SAAS,CAAC,+BAA+B,CAAC,CAAC;IACvD,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI;QAC1B,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC;QAC1B,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC;KACxB,EAAE,CAAC;QACX,IACE,IAAI,CAAC,IAAI,KAAK,mCAAwB;YACtC,IAAI,CAAC,aAAa,KAAK,+CAAoC,EAC3D,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,qBAAqB;gBAC3B,MAAM,EAAE,GAAG,KAAK,yCAAyC;aAC1D,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YAC3C,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,uBAAuB;gBAC7B,MAAM,EAAE,GAAG,KAAK,0DAA0D;aAC3E,CAAC,CAAC;QACL,CAAC;QACD,IACE,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,6BAAkB;YACrC,IAAI,CAAC,IAAI,CAAC,OAAO,KAAK,gCAAqB,EAC3C,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,2BAA2B;gBACjC,MAAM,EAAE,GAAG,KAAK,iCAAiC,gCAAqB,GAAG;aAC1E,CAAC,CAAC;QACL,CAAC;QACD,IAAI,yBAAyB,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,cAAc,EAAE,CAAC;YAC5D,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,uBAAuB;gBAC7B,MAAM,EAAE,GAAG,KAAK,oDAAoD;aACrE,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACxB,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,iBAAiB;gBACvB,MAAM,EAAE,GAAG,KAAK,iDAAiD;aAClE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,cAAc,KAAK,KAAK,CAAC,UAAU,CAAC,cAAc,EAAE,CAAC;QACrE,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,uBAAuB;YAC7B,MAAM,EAAE,8DAA8D;SACvE,CAAC,CAAC;IACL,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;QAC7D,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,uBAAuB;YAC7B,MAAM,EAAE,qDAAqD;SAC9D,CAAC,CAAC;IACL,CAAC;IACD,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACtD,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,IAAI,GAAG,EAAE,CAAC;QAClD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,cAAc;YACpB,MAAM,EAAE,gCAAgC;SACzC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAC3C,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,cAAc;YACpB,MAAM,EAAE,6BAA6B;SACtC,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACvD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,uBAAuB;YAC7B,MAAM,EACJ,2EAA2E;SAC9E,CAAC,CAAC;IACL,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACjD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,cAAc;YACpB,MAAM,EAAE,2CAA2C;SACpD,CAAC,CAAC;IACL,CAAC;IACD,MAAM,cAAc,GAClB,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,SAAS;QACnC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,KAAK,UAAU;YAC3C,KAAK,CAAC,UAAU,CAAC,WAAW,KAAK,gBAAgB;QACnD,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,KAAK,UAAU,CAAC;IAClD,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,kBAAkB;YACxB,MAAM,EACJ,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,SAAS;gBACnC,CAAC,CAAC,wGAAwG;gBAC1G,CAAC,CAAC,+DAA+D;SACtE,CAAC,CAAC;IACL,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9C,MAAM,oBAAoB,GACxB,KAAK,CAAC,QAAQ,KAAK,SAAS;QAC5B,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,cAAc;QACtC,UAAU,KAAK,SAAS;QACxB,KAAK,CAAC,OAAO,CAAC,YAAY,KAAK,KAAK,CAAC,UAAU,CAAC,YAAY;QAC1D,CAAC,CAAC,CAAC,UAAU,CAAC;QACd,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,mBAAmB,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9E,IACE,KAAK,CAAC,OAAO,CAAC,YAAY,KAAK,KAAK,CAAC,UAAU,CAAC,YAAY;QAC5D,mBAAmB,CAAC,MAAM,KAAK,CAAC,EAChC,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,uBAAuB;YAC7B,MAAM,EAAE,sDAAsD;SAC/D,CAAC,CAAC;IACL,CAAC;IACD,IACE,mBAAmB,CAAC,MAAM,KAAK,oBAAoB,CAAC,MAAM;QAC1D,mBAAmB,CAAC,IAAI,CACtB,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,GAAG,oBAAoB,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAClE,EACD,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,uBAAuB;YAC7B,MAAM,EACJ,sEAAsE;SACzE,CAAC,CAAC;IACL,CAAC;IACD,QAAQ,CAAC,IAAI,CACX,GAAG,gBAAgB,CACjB,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,QAAQ,EACd,GAAG,EACH,KAAK,CAAC,OAAO,CAAC,WAAW,EACzB,IAAI,CACL,CACF,CAAC;IAEF,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC;QACvC,CAAC,CAAC,cAAc;QAChB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,uBAAuB,CAAC;YAClC,CAAC,CAAC,uBAAuB;YACzB,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CACrB;gBACE,uBAAuB;gBACvB,cAAc;gBACd,qBAAqB;gBACrB,2BAA2B;gBAC3B,uBAAuB;aACxB,CAAC,QAAQ,CAAC,IAAI,CAAC,CACjB;gBACH,CAAC,CAAC,YAAY;gBACd,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;oBACnB,CAAC,CAAC,mBAAmB;oBACrB,CAAC,CAAC,YAAY,CAAC;IACvB,OAAO;QACL,OAAO,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC;QAC9B,QAAQ;QACR,OAAO;KACR,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CAAC,IAA0B;IAC5D,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,2BAA2B,EAAE,IAAI,CAAC,2BAA2B;QAC7D,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,KAAK,EAAE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC;QAChC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;KACxB,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAC5B,QAA2D;IAE3D,OAAO,CACL,QAAQ,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC;QACvC,CAAC,QAAQ,CAAC,WAAW;QACrB,CAAC,CAAC,QAAQ,CAAC,SAAS,KAAK,MAAM,IAAI,QAAQ,CAAC,iBAAiB,KAAK,MAAM,CAAC;YACvE,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS;gBAC/B,QAAQ,CAAC,iBAAiB,KAAK,SAAS,CAAC;YAC3C,CAAC,QAAQ,CAAC,SAAS,KAAK,QAAQ;gBAC9B,QAAQ,CAAC,iBAAiB,KAAK,QAAQ;gBACvC,QAAQ,CAAC,YAAY,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAC5D,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAAC,IAA0B;IAC7D,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,CACtD,CAAC;IACF,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAG/B,CAAC;IACJ,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC5C,IAAI,CAAC,OAAO,CAAC,UAAU;YAAE,SAAS;QAClC,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE;YACzC,GAAG,CAAC,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;YACrD,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS;SAChC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE;QACnB,IAAI,qBAAqB,CAAC,QAAQ,CAAC;YAAE,OAAO,KAAK,CAAC;QAClD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QAClE,OAAO,CACL,QAAQ,CAAC,SAAS,KAAK,QAAQ;YAC/B,QAAQ,CAAC,SAAS,KAAK,SAAS;YAChC,QAAQ,CAAC,SAAS,KAAK,QAAQ;YAC/B,QAAQ,CAAC,SAAS,KAAK,SAAS;YAChC,QAAQ,CAAC,YAAY,CAAC,UAAU,CAAC,UAAU,CAAC;YAC5C,QAAQ,CAAC,IAAI,CACX,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,WAAW,KAAK,uBAAuB,CAC7D,CACF,CAAC;IACJ,CAAC,CAAC;SACD,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAChB,IAAA,oCAAmB,EACjB;QACE,iBAAiB,EAAE,yBAAyB,CAAC,QAAQ,CAAC;QACtD,QAAQ,EAAE,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAC9D,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC;YAC1D,KAAK,EAAE,SAAS;YAChB,IAAI;YACJ,WAAW;YACX,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;SACxD,CAAC,CACH;QACD,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB;QACjD,YAAY,EAAE,QAAQ,CAAC,YAAY;KACpC,EACD,EAAE,yBAAyB,EAAE,IAAI,EAAE,CACpC,CACF,CAAC;IACJ,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC5C,IACE,CAAC,OAAO,CAAC,UAAU,IAAI,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAC3D,OAAO,CAAC,WAAW,KAAK,uBAAuB,EAC/C,CAAC;YACD,SAAS;QACX,CAAC;QACD,OAAO,CAAC,IAAI,CACV,IAAA,oCAAmB,EACjB;YACE,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS;gBAClC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;YACvC,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS;gBACpC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;SAC5C,EACD,EAAE,yBAAyB,EAAE,IAAI,EAAE,CACpC,CACF,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,qCAAY,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,2CAA2C,CAAC,KAO3D;IACC,MAAM,QAAQ,GAA4C,EAAE,CAAC;IAC7D,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,MAAM,IAAI,SAAS,CAAC,+BAA+B,CAAC,CAAC;IACvD,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI;QAC1B,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC;QAC1B,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC;KACxB,EAAE,CAAC;QACX,IACE,IAAI,CAAC,IAAI,KAAK,mCAAwB;YACtC,IAAI,CAAC,aAAa,KAAK,+CAAoC,EAC3D,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,qBAAqB;gBAC3B,MAAM,EAAE,GAAG,KAAK,yCAAyC;aAC1D,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YAC3C,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,uBAAuB;gBAC7B,MAAM,EAAE,GAAG,KAAK,0DAA0D;aAC3E,CAAC,CAAC;QACL,CAAC;QACD,IACE,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,6BAAkB;YACrC,IAAI,CAAC,IAAI,CAAC,OAAO,KAAK,gCAAqB,EAC3C,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,2BAA2B;gBACjC,MAAM,EAAE,GAAG,KAAK,iCAAiC,gCAAqB,GAAG;aAC1E,CAAC,CAAC;QACL,CAAC;QACD,IAAI,yBAAyB,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,cAAc,EAAE,CAAC;YAC5D,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,uBAAuB;gBAC7B,MAAM,EAAE,GAAG,KAAK,oDAAoD;aACrE,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACxB,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,iBAAiB;gBACvB,MAAM,EAAE,GAAG,KAAK,iDAAiD;aAClE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,IACE,IAAA,oCAAmB,EAAC,0BAA0B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC9D,IAAA,oCAAmB,EAAC,0BAA0B,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,EACjE,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,4BAA4B;YAClC,MAAM,EACJ,oHAAoH;SACvH,CAAC,CAAC;IACL,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;QAC7D,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,uBAAuB;YAC7B,MAAM,EAAE,gDAAgD;SACzD,CAAC,CAAC;IACL,CAAC;IACD,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,2BAA2B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5E,MAAM,0BAA0B,GAAG,2BAA2B,CAC5D,KAAK,CAAC,UAAU,CACjB,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IACjD,IAAI,0BAA0B,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1C,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,0BAA0B;YAChC,MAAM,EAAE,6BAA6B,0BAA0B,CAAC,MAAM,+EAA+E;SACtJ,CAAC,CAAC;IACL,CAAC;IACD,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACtD,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,IAAI,GAAG,EAAE,CAAC;QAClD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,cAAc;YACpB,MAAM,EAAE,kDAAkD;SAC3D,CAAC,CAAC;IACL,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAC3C,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,cAAc;YACpB,MAAM,EAAE,6BAA6B;SACtC,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACvD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,uBAAuB;YAC7B,MAAM,EACJ,2EAA2E;SAC9E,CAAC,CAAC;IACL,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACjD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,cAAc;YACpB,MAAM,EAAE,2CAA2C;SACpD,CAAC,CAAC;IACL,CAAC;IACD,MAAM,cAAc,GAClB,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,SAAS;QACnC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,KAAK,UAAU;YAC3C,KAAK,CAAC,UAAU,CAAC,WAAW,KAAK,gBAAgB;QACnD,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,KAAK,UAAU,CAAC;IAClD,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,kBAAkB;YACxB,MAAM,EACJ,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,SAAS;gBACnC,CAAC,CAAC,yEAAyE;gBAC3E,CAAC,CAAC,+DAA+D;SACtE,CAAC,CAAC;IACL,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9C,MAAM,oBAAoB,GACxB,KAAK,CAAC,QAAQ,EAAE,IAAI,KAAK,cAAc;QACvC,UAAU,KAAK,SAAS;QACxB,KAAK,CAAC,OAAO,CAAC,YAAY,KAAK,KAAK,CAAC,UAAU,CAAC,YAAY;QAC1D,CAAC,CAAC,CAAC,UAAU,CAAC;QACd,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,mBAAmB,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,CACzE,qCAAY,CACb,CAAC;IACF,IACE,KAAK,CAAC,OAAO,CAAC,YAAY,KAAK,KAAK,CAAC,UAAU,CAAC,YAAY;QAC5D,mBAAmB,CAAC,MAAM,KAAK,CAAC,EAChC,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,uBAAuB;YAC7B,MAAM,EAAE,sDAAsD;SAC/D,CAAC,CAAC;IACL,CAAC;IACD,IACE,mBAAmB,CAAC,MAAM,KAAK,oBAAoB,CAAC,MAAM;QAC1D,mBAAmB,CAAC,IAAI,CACtB,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,IAAI,KAAK,CAAC,GAAG,oBAAoB,CAAC,CAAC,IAAI,CAAC,qCAAY,CAAC,CAAC,KAAK,CAAC,CAC/D,EACD,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,uBAAuB;YAC7B,MAAM,EACJ,sEAAsE;SACzE,CAAC,CAAC;IACL,CAAC;IACD,IAAI,KAAK,CAAC,2BAA2B,KAAK,IAAI,EAAE,CAAC;QAC/C,IACE,KAAK,CAAC,QAAQ,KAAK,SAAS;YAC5B,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAC5C,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,kBAAkB;gBACxB,MAAM,EACJ,8FAA8F;aACjG,CAAC,CAAC;QACL,CAAC;IACH,CAAC;SAAM,CAAC;QACN,QAAQ,CAAC,IAAI,CACX,GAAG,gBAAgB,CACjB,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,QAAQ,EACd,GAAG,EACH,KAAK,CAAC,OAAO,CAAC,WAAW,EACzB,KAAK,CACN,CACF,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC;QACvC,CAAC,CAAC,cAAc;QAChB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,uBAAuB,CAAC;YAClC,CAAC,CAAC,uBAAuB;YACzB,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CACrB;gBACE,0BAA0B;gBAC1B,4BAA4B;gBAC5B,uBAAuB;gBACvB,cAAc;gBACd,qBAAqB;gBACrB,2BAA2B;gBAC3B,uBAAuB;aACxB,CAAC,QAAQ,CAAC,IAAI,CAAC,CACjB;gBACH,CAAC,CAAC,YAAY;gBACd,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;oBACnB,CAAC,CAAC,mBAAmB;oBACrB,CAAC,CAAC,YAAY,CAAC;IACvB,OAAO;QACL,OAAO,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC;QAC9B,QAAQ;QACR,OAAO;KACR,CAAC;AACJ,CAAC"}
@@ -1,4 +1,6 @@
1
- import type { IamAccessAnalyzerValidationV1, InfrastructurePolicySignalV1, InfrastructureRiskAssessmentV1, InfrastructureRiskPolicyV1, NormalizedSstDiffV1 } from './model.js';
1
+ import type { IamAccessAnalyzerValidationV1, InfrastructurePolicySignalV1, InfrastructureRiskAssessmentV1, InfrastructureRiskPolicyV1, NormalizedInfrastructureResourceV1, NormalizedSstDiffV1 } from './model.js';
2
+ /** @internal */
3
+ export declare function requiresIamPolicyAnalysis(resource: NormalizedInfrastructureResourceV1): boolean;
2
4
  export declare function classifyInfrastructureRisk(input: {
3
5
  diff: NormalizedSstDiffV1;
4
6
  iamValidations?: readonly IamAccessAnalyzerValidationV1[];