@empire-builder-kit/nx 1.0.0-rc.2 → 1.0.0-rc.21

package/src/executors/sst-lifecycle/run-sst-command.js

@@ -17,7 +17,9 @@ const index_js_1 = require("../../repository-policy/index.js");
 const index_js_2 = require("../../work-markers/index.js");
 const logging_preflight_js_1 = require("./logging-preflight.js");
 const secret_preflight_js_1 = require("./secret-preflight.js");
-const PROTECTED_STAGES = new Set(['staging', 'production']);
+const sst_environment_source_js_1 = require("./sst-environment-source.js");
+const GOVERNED_STAGES = new Set(['development', 'staging', 'production']);
+const DEPLOYMENT_STAGES = new Set(['development', 'staging', 'production']);
 const RESERVED_FORWARDED_OPTIONS = new Set([
     '--config',
     '--profile',
@@ -27,14 +29,37 @@ const RESERVED_FORWARDED_OPTIONS = new Set([
 ]);
 const SST_DEV_MODES = new Set(['basic', 'mono']);
 const AWS_REGION_PATTERN = /^[a-z]{2}(?:-gov)?-[a-z]+-\d$/;
+const AWS_ROLE_ARN_PATTERN = /^arn:(aws|aws-us-gov|aws-cn):iam::\d{12}:role\/[A-Za-z0-9+=,.@_/-]{1,512}$/;
+function captureSstEnvironmentSource(context) {
+    const projectName = context.projectName;
+    const configured = projectName
+        ? context.projectsConfigurations?.projects[projectName]?.root
+        : undefined;
+    if (!projectName || !configured) {
+        throw new Error('SST lifecycle tool-owned source requires one exact Nx project root.');
+    }
+    return (0, sst_environment_source_js_1.captureSstEnvironmentSourceTree)({
+        projectRoot: (0, node_path_1.isAbsolute)(configured)
+            ? configured
+            : (0, node_path_1.join)(context.root, configured),
+        workspaceRoot: context.root,
+    });
+}
 function requiresInfrastructureBinding(command, stage) {
-    return (PROTECTED_STAGES.has(stage) &&
+    return (GOVERNED_STAGES.has(stage) &&
         (command === 'deploy' || command === 'refresh' || command === 'remove'));
 }
 async function authorizeInfrastructureMutation(command, options, context, invocation) {
     const { revalidateInfrastructureMutationAuthorization } = await Promise.resolve().then(() => require('../infrastructure-plan/infrastructure-plan.js'));
     await revalidateInfrastructureMutationAuthorization(command, options, context, invocation);
 }
+async function authorizeLocalUnlock(options, invocation) {
+    const { revalidateLocalUnlockCallerAuthority } = await Promise.resolve().then(() => require('../infrastructure-plan/infrastructure-plan.js'));
+    revalidateLocalUnlockCallerAuthority({
+        invocation,
+        profile: options.profile,
+    });
+}
 async function retainInfrastructureConvergence(command, options, context, invocation, applySucceeded) {
     const { recordInfrastructureMutationConvergence } = await Promise.resolve().then(() => require('../infrastructure-plan/infrastructure-plan.js'));
     return recordInfrastructureMutationConvergence(command, options, context, invocation, applySucceeded);
@@ -56,6 +81,19 @@ function createSstChildEnvironment(ambient, invocation) {
         ? (0, personal_stage_js_1.createPersonalDevelopmentEnvironment)(invocation.EBK_CONSUMER_STAGE, ambient)
         : (0, personal_stage_js_1.stripAmbientStageAuthority)(ambient);
     delete sanitized.EBK_PRODUCTION_FOUNDATION_PROFILE;
+    delete sanitized.EBK_LOCAL_MUTATION_CAPABILITY_NONCE;
+    delete sanitized.EBK_LOCAL_MUTATION_CAPABILITY_PATH;
+    // Nx injects task identity, target, hash, terminal, cache, and invocation
+    // metadata into every executor process. A reviewed infrastructure-plan and
+    // its mutation-time revalidation intentionally run under different Nx
+    // targets, so those values are orchestration context rather than desired
+    // infrastructure inputs. Never let them reach SST, where build tools can
+    // persist ambient environment values into deployment archives.
+    for (const name of Object.keys(sanitized)) {
+        if (name.startsWith('NX_') || name === 'LERNA_PACKAGE_NAME') {
+            delete sanitized[name];
+        }
+    }
     return { ...sanitized, ...invocation };
 }
 function assertSafeSstForwardedArguments(args) {
@@ -80,12 +118,16 @@ function resolveSstDevMode(environment, forwardedArguments = []) {
     }
     return requested;
 }
-function assertSstLifecyclePolicy(command, stage, environment = process.env) {
-    if (!PROTECTED_STAGES.has(stage))
+function assertSstLifecyclePolicy(command, stage, environment = process.env, deploymentProfile = 'fully-isolated') {
+    if (!GOVERNED_STAGES.has(stage))
         return;
     if (command === 'dev') {
         throw new Error(`SST dev is not permitted for protected stage ${stage}.`);
     }
+    if (!(0, index_js_1.requiresGithubDeployment)(deploymentProfile, stage) &&
+        environment.GITHUB_ACTIONS !== 'true') {
+        return;
+    }
     const repository = environment.GITHUB_REPOSITORY;
     const expectedBranch = stage === 'staging' ? 'develop' : 'main';
     const expectedRef = `refs/heads/${expectedBranch}`;
@@ -180,8 +222,44 @@ function buildSstCommandInvocation(command, options, context, environment = proc
         stages.mapped) {
         throw new Error(`Full deploy is not permitted for mapped personal stage ${stages.consumerStage}. Use ebk dev against the ${stages.foundationStage} Foundation.`);
     }
-    assertSstLifecyclePolicy(command, stages.consumerStage, environment);
-    if (PROTECTED_STAGES.has(stages.consumerStage) &&
+    const operatingPolicy = DEPLOYMENT_STAGES.has(stages.consumerStage) &&
+        (command === 'deploy' ||
+            command === 'refresh' ||
+            command === 'remove' ||
+            command === 'unlock')
+        ? (0, index_js_1.readRepositoryOperatingPolicy)(context.root)
+        : undefined;
+    assertSstLifecyclePolicy(command, stages.consumerStage, environment, operatingPolicy?.deploymentProfile);
+    const deploymentAccounts = operatingPolicy
+        ? (0, index_js_1.configuredDeploymentAccountTopology)(operatingPolicy.deploymentProfile, operatingPolicy.deploymentAccounts)
+        : undefined;
+    const deploymentRegion = operatingPolicy
+        ? (0, index_js_1.configuredDeploymentRegion)(operatingPolicy.deploymentRegion)
+        : undefined;
+    if (deploymentRegion &&
+        options.region?.trim() &&
+        options.region.trim() !== deploymentRegion) {
+        throw new Error(`SST lifecycle Region ${options.region.trim()} differs from committed deployment Region ${deploymentRegion}.`);
+    }
+    if (options.expectedRoleArn !== undefined &&
+        !AWS_ROLE_ARN_PATTERN.test(options.expectedRoleArn.trim())) {
+        throw new Error('SST lifecycle expectedRoleArn must be one exact IAM role ARN.');
+    }
+    const profile = options.profile?.trim();
+    if (options.profile !== undefined &&
+        (!profile || profile !== options.profile || profile.length > 128)) {
+        throw new Error('SST lifecycle profile must be one non-empty exact AWS profile name up to 128 characters.');
+    }
+    if (operatingPolicy &&
+        environment.GITHUB_ACTIONS !== 'true' &&
+        (command === 'deploy' ||
+            command === 'refresh' ||
+            command === 'remove' ||
+            command === 'unlock') &&
+        !options.expectedRoleArn?.trim()) {
+        throw new Error(`Local ${command} for ${stages.consumerStage} requires --expectedRoleArn for one temporary assumed-role session.`);
+    }
+    if (GOVERNED_STAGES.has(stages.consumerStage) &&
         (command === 'deploy' || command === 'refresh')) {
         (0, index_js_2.assertWorkMarkerReport)((0, index_js_2.scanWorkMarkers)(context.root), {
             protectedPromotion: true,
@@ -200,9 +278,6 @@ function buildSstCommandInvocation(command, options, context, environment = proc
         })
         : undefined;
     const args = [command, '--stage', stages.consumerStage];
-    if (options.profile) {
-        args.push('--profile', options.profile);
-    }
     if (options.target) {
         args.push('--target', options.target);
     }
@@ -222,8 +297,23 @@ function buildSstCommandInvocation(command, options, context, environment = proc
         ],
         cwd,
         environment: {
-            ...(options.region?.trim() ? { AWS_REGION: options.region.trim() } : {}),
+            ...(deploymentAccounts
+                ? {
+                    AWS_EXPECTED_ACCOUNT_ID: deploymentAccounts[stages.consumerStage],
+                }
+                : {}),
+            ...(profile ? { AWS_PROFILE: profile } : {}),
+            ...(deploymentRegion
+                ? { AWS_REGION: deploymentRegion }
+                : options.region?.trim()
+                    ? { AWS_REGION: options.region.trim() }
+                    : {}),
             EBK_CONSUMER_STAGE: stages.consumerStage,
+            ...(options.expectedRoleArn?.trim()
+                ? {
+                    EBK_EXPECTED_DEPLOYMENT_ROLE_ARN: options.expectedRoleArn.trim(),
+                }
+                : {}),
             EBK_FOUNDATION_STAGE: stages.foundationStage,
             ...(policyDecision?.effectiveProductionProfile
                 ? {
@@ -241,6 +331,10 @@ async function runSstLifecyclePreflights(command, options, context, invocation,
     if (command === 'deploy') {
         await (dependencies.secrets ?? secret_preflight_js_1.preflightSliceSecretMetadata)(options, context, invocation);
     }
+    if (command === 'unlock' &&
+        invocation.environment.EBK_EXPECTED_DEPLOYMENT_ROLE_ARN) {
+        await (dependencies.unlockAuthorization ?? authorizeLocalUnlock)(options, invocation);
+    }
     if (requiresInfrastructureBinding(command, invocation.environment.EBK_CONSUMER_STAGE)) {
         await (dependencies.infrastructureAuthorization ??
             authorizeInfrastructureMutation)(command, options, context, invocation);
@@ -248,12 +342,36 @@ async function runSstLifecyclePreflights(command, options, context, invocation,
 }
 async function runSstCommand(command, options, context, dependencies = {}) {
     let invocation;
+    let environmentSource;
     try {
         invocation = buildSstCommandInvocation(command, options, context);
+        if (requiresInfrastructureBinding(command, invocation.environment.EBK_CONSUMER_STAGE)) {
+            // Infrastructure authorization runs an SST plan and SST can rewrite its
+            // generated environment declaration during that preflight. Capture the
+            // committed source before any SST-bearing operation so neither the plan
+            // nor the mutation child can become the restoration baseline.
+            environmentSource = captureSstEnvironmentSource(context);
+        }
         await runSstLifecyclePreflights(command, options, context, invocation, dependencies);
+        if (environmentSource)
+            (0, sst_environment_source_js_1.reconcileSstEnvironmentSourceTree)(environmentSource);
     }
     catch (error) {
+        let restorationError;
+        if (environmentSource) {
+            try {
+                (0, sst_environment_source_js_1.reconcileSstEnvironmentSourceTree)(environmentSource);
+            }
+            catch (candidate) {
+                restorationError = candidate;
+            }
+        }
         devkit_1.logger.error(error instanceof Error ? error.message : String(error));
+        if (restorationError !== undefined) {
+            devkit_1.logger.error(`Failed to restore SST tool-owned source after preflight: ${restorationError instanceof Error
+                ? restorationError.message
+                : String(restorationError)}`);
+        }
         return { success: false };
     }
     devkit_1.logger.info(`Running workspace SST: ${command} --stage ${invocation.environment.EBK_CONSUMER_STAGE} foundationStage=${invocation.environment.EBK_FOUNDATION_STAGE} (${invocation.cwd})`);
@@ -284,7 +402,17 @@ async function runSstCommand(command, options, context, dependencies = {}) {
                     devkit_1.logger.error(`If the stack is locked, run pnpm nx run ${context.projectName ?? '<project>'}:unlock --stage=${options.stage}.`);
                 }
             }
-            const applySucceeded = code === 0;
+            let sourceRestored = true;
+            if (environmentSource) {
+                try {
+                    (0, sst_environment_source_js_1.reconcileSstEnvironmentSourceTree)(environmentSource);
+                }
+                catch (error) {
+                    sourceRestored = false;
+                    devkit_1.logger.error(`Failed to restore SST tool-owned source: ${error instanceof Error ? error.message : String(error)}`);
+                }
+            }
+            const applySucceeded = code === 0 && sourceRestored;
             if (requiresInfrastructureBinding(command, invocation.environment.EBK_CONSUMER_STAGE)) {
                 try {
                     const mutationEvidenceRetained = await (dependencies.infrastructureConvergence ??
@@ -295,7 +423,11 @@ async function runSstCommand(command, options, context, dependencies = {}) {
                     // A deploy retains apply-complete-unverified as a successful handoff
                     // to deployed smoke. It is not terminal convergence; the protected
                     // finalizer consumes the exact alarm, data, and journey evidence.
-                    settle(applySucceeded && mutationEvidenceRetained);
+                    // Convergence remains the fail-closed authority for governed
+                    // mutations. A child failure remains failed even if refresh wrote a
+                    // newer state snapshot; that condition is retained as recovery
+                    // evidence and cannot be upgraded into accepted success.
+                    settle(sourceRestored && mutationEvidenceRetained && applySucceeded);
                 }
                 catch (error) {
                     devkit_1.logger.error(`Failed to retain infrastructure convergence: ${error instanceof Error ? error.message : String(error)}`);

package/src/executors/sst-lifecycle/run-sst-command.js.map

@@ -1 +1 @@
-{"version":3,"file":"run-sst-command.js","sourceRoot":"","sources":["../../../../../../packages/nx/src/executors/sst-lifecycle/run-sst-command.ts"],"names":[],"mappings":";;AAgJA,8DAYC;AAED,0EAWC;AAED,8CAmBC;AAED,4DA4CC;AAED,8DA+BC;AAED,8DAyHC;AAED,8DAiCC;AAED,sCA+FC;AA5gBD,uCAA0D;AAC1D,2DAA2C;AAC3C,yCAA6C;AAC7C,0DAIoC;AACpC,yEAM2C;AAC3C,+DAAiF;AACjF,0DAGqC;AACrC,iEAAmE;AACnE,+DAAqE;AAkDrE,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;AAC5D,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAC;IACzC,UAAU;IACV,WAAW;IACX,UAAU;IACV,SAAS;IACT,UAAU;CACX,CAAC,CAAC;AACH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;AACjD,MAAM,kBAAkB,GAAG,+BAA+B,CAAC;AAE3D,SAAS,6BAA6B,CACpC,OAA4B,EAC5B,KAAa;IAEb,OAAO,CACL,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC;QAC3B,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,QAAQ,CAAC,CACxE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,+BAA+B,CAC5C,OAAwC,EACxC,OAA4B,EAC5B,OAAwB,EACxB,UAAgC;IAEhC,MAAM,EAAE,6CAA6C,EAAE,GACrD,2CAAa,+CAA+C,EAAC,CAAC;IAChE,MAAM,6CAA6C,CACjD,OAAO,EACP,OAAO,EACP,OAAO,EACP,UAAU,CACX,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,+BAA+B,CAC5C,OAAwC,EACxC,OAA4B,EAC5B,OAAwB,EACxB,UAAgC,EAChC,cAAuB;IAEvB,MAAM,EAAE,uCAAuC,EAAE,GAC/C,2CAAa,+CAA+C,EAAC,CAAC;IAChE,OAAO,uCAAuC,CAC5C,OAAO,EACP,OAAO,EACP,OAAO,EACP,UAAU,EACV,cAAc,CACf,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,OAAwB;IAC3C,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,mGAAmG,CACpG,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GACR,OAAO,CAAC,sBAAsB,EAAE,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;IAC5E,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC1C,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,cAAc,OAAO,CAAC,WAAW,+EAA+E,CACjH,CAAC;IACJ,CAAC;IACD,OAAO,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC;AAC7C,CAAC;AAED,SAAgB,yBAAyB,CACvC,OAA0B,EAC1B,UAA+C;IAE/C,MAAM,SAAS,GAAG,IAAA,4CAAwB,EAAC,UAAU,CAAC,kBAAkB,CAAC;QACvE,CAAC,CAAC,IAAA,wDAAoC,EAClC,UAAU,CAAC,kBAAkB,EAC7B,OAAO,CACR;QACH,CAAC,CAAC,IAAA,8CAA0B,EAAC,OAAO,CAAC,CAAC;IACxC,OAAO,SAAS,CAAC,iCAAiC,CAAC;IACnD,OAAO,EAAE,GAAG,SAAS,EAAE,GAAG,UAAU,EAAE,CAAC;AACzC,CAAC;AAED,SAAgB,+BAA+B,CAAC,IAAuB;IACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;QACtC,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QACvD,OAAO,0BAA0B,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IACH,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CACb,4DAA4D,MAAM,qDAAqD,CACxH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAgB,iBAAiB,CAC/B,WAA8B,EAC9B,qBAAwC,EAAE;IAE1C,IACE,kBAAkB,CAAC,IAAI,CACrB,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,QAAQ,CACnE,EACD,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,SAAS,GAAG,WAAW,CAAC,gBAAgB,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrE,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,aAAa;QAAE,OAAO,SAAS,CAAC;IAChE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,gEAAgE,CACjE,CAAC;IACJ,CAAC;IACD,OAAO,SAA6B,CAAC;AACvC,CAAC;AAED,SAAgB,wBAAwB,CACtC,OAA4B,EAC5B,KAAa,EACb,cAAiC,OAAO,CAAC,GAAG;IAE5C,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO;IACzC,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,gDAAgD,KAAK,GAAG,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,UAAU,GAAG,WAAW,CAAC,iBAAiB,CAAC;IACjD,MAAM,cAAc,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;IAChE,MAAM,WAAW,GAAG,cAAc,cAAc,EAAE,CAAC;IACnD,MAAM,mBAAmB,GAAG,UAAU;QACpC,CAAC,CAAC,GAAG,UAAU,iCAAiC,WAAW,EAAE;QAC7D,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,SAAS,GAAG,WAAW,CAAC,iBAAiB,CAAC;IAChD,MAAM,YAAY,GAChB,SAAS,KAAK,mBAAmB;QACjC,CAAC,SAAS,KAAK,MAAM,IAAI,OAAO,KAAK,QAAQ,CAAC,CAAC;IACjD,wEAAwE;IACxE,2EAA2E;IAC3E,2EAA2E;IAC3E,wEAAwE;IACxE,kEAAkE;IAClE,MAAM,yBAAyB,GAC7B,OAAO,CAAC,UAAU,CAAC;QACnB,WAAW,CAAC,cAAc,KAAK,MAAM;QACrC,YAAY;QACZ,WAAW,CAAC,UAAU,KAAK,WAAW;QACtC,WAAW,CAAC,mBAAmB,KAAK,mBAAmB,CAAC;IAC1D,IAAI,CAAC,yBAAyB,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,OAAO,OAAO,wBAAwB,KAAK,sBAAsB,cAAc,4GAA4G,CAC5L,CAAC;IACJ,CAAC;IACD,IACE,OAAO,KAAK,QAAQ;QACpB,KAAK,KAAK,YAAY;QACtB,WAAW,CAAC,2BAA2B,KAAK,MAAM,EAClD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,uGAAuG,CACxG,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAgB,yBAAyB,CACvC,OAA4B,EAC5B,cAAiC,OAAO,CAAC,GAAG;IAE5C,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,KAAK,YAAY,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,IAAA,kCAAsB,EAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACpD,IACE,OAAO,CAAC,eAAe,EAAE,IAAI,EAAE;YAC/B,IAAA,kCAAsB,EAAC,OAAO,CAAC,eAAe,CAAC,KAAK,KAAK,EACzD,CAAC;YACD,MAAM,IAAI,KAAK,CACb,8BAA8B,KAAK,mCAAmC,OAAO,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,CACxG,CAAC;QACJ,CAAC;QACD,OAAO;YACL,aAAa,EAAE,KAAK;YACpB,eAAe,EAAE,KAAK;YACtB,MAAM,EAAE,KAAK;SACd,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,IAAA,mCAAuB,EAAC;QAC7B,aAAa,EAAE,OAAO,CAAC,KAAK;QAC5B,eAAe,EACb,OAAO,CAAC,eAAe,IAAI,WAAW,CAAC,oBAAoB;KAC9D,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,yBAAyB,CACvC,OAA4B,EAC5B,OAA4B,EAC5B,OAAwB,EACxB,cAAiC,OAAO,CAAC,GAAG,EAC5C,eAAkE,EAAE;IAEpE,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,iBAAiB,GAAG,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC;IAC5E,IAAI,OAAO,CAAC,SAAS,KAAK,iBAAiB,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CACb,cAAc,OAAO,CAAC,WAAW,iBAAiB,IAAI,2BAA2B,iBAAiB,gDAAgD,CACnJ,CAAC;IACJ,CAAC;IACD,MAAM,cAAc,GAAG,OAAO,CAAC,WAAW;QACxC,CAAC,CAAC,OAAO,CAAC,sBAAsB,EAAE,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,IAAI;QACrE,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,IAAI,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;IACpE,MAAM,GAAG,GAAG,IAAA,sBAAU,EAAC,aAAa,CAAC;QACnC,CAAC,CAAC,aAAa;QACf,CAAC,CAAC,IAAA,gBAAI,EAAC,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IACtC,MAAM,MAAM,GACV,OAAO,KAAK,KAAK;QACf,CAAC,CAAC,CAAC,GAAG,EAAE;YACJ,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;YACnE,CAAC;YACD,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAChC,MAAM,IAAI,KAAK,CACb,yGAAyG,CAC1G,CAAC;YACJ,CAAC;YACD,IACE,OAAO,CAAC,eAAe,KAAK,SAAS;gBACrC,OAAO,CAAC,eAAe,KAAK,aAAa,EACzC,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACrE,CAAC;YACD,OAAO;gBACL,aAAa,EAAE,CACb,YAAY,CAAC,qBAAqB;oBAClC,IAAA,+CAA2B,GAAE,CAC9B,CAAC,OAAO,EAAE,CAAC,KAAK;gBACjB,eAAe,EAAE,aAAsB;gBACvC,MAAM,EAAE,IAAI;aACb,CAAC;QACJ,CAAC,CAAC,EAAE;QACN,CAAC,CAAC,yBAAyB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACtD,IACE,OAAO,CAAC,MAAM,KAAK,SAAS;QAC5B,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAC/C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,IACE,OAAO,CAAC,SAAS,KAAK,UAAU;QAChC,OAAO,KAAK,QAAQ;QACpB,MAAM,CAAC,MAAM,EACb,CAAC;QACD,MAAM,IAAI,KAAK,CACb,0DAA0D,MAAM,CAAC,aAAa,6BAA6B,MAAM,CAAC,eAAe,cAAc,CAChJ,CAAC;IACJ,CAAC;IACD,wBAAwB,CAAC,OAAO,EAAE,MAAM,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;IACrE,IACE,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC;QAC1C,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,SAAS,CAAC,EAC/C,CAAC;QACD,IAAA,iCAAsB,EAAC,IAAA,0BAAe,EAAC,OAAO,CAAC,IAAI,CAAC,EAAE;YACpD,kBAAkB,EAAE,IAAI;SACzB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,cAAc,GAClB,MAAM,CAAC,aAAa,KAAK,YAAY;QACnC,CAAC,CAAC,IAAA,wCAA6B,EAAC,OAAO,CAAC,IAAI,EAAE;YAC1C,MAAM,EAAE,OAAO;YACf,QAAQ,EAAE;gBACR;oBACE,IAAI;oBACJ,IAAI,EAAE,OAAO,CAAC,WAAW,IAAI,EAAE;iBAChC;aACF;YACD,KAAK,EAAE,MAAM,CAAC,aAAa;SAC5B,CAAC;QACJ,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;IAExD,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,iBAAiB,CAAC,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,IAAI;YAAE,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,+BAA+B,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED,OAAO;QACL,IAAI,EAAE;YACJ,IAAA,gBAAI,EAAC,OAAO,CAAC,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC;YAC3D,GAAG,IAAI;SACR;QACD,GAAG;QACH,WAAW,EAAE;YACX,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,kBAAkB,EAAE,MAAM,CAAC,aAAa;YACxC,oBAAoB,EAAE,MAAM,CAAC,eAAe;YAC5C,GAAG,CAAC,cAAc,EAAE,0BAA0B;gBAC5C,CAAC,CAAC;oBACE,iCAAiC,EAC/B,cAAc,CAAC,0BAA0B;iBAC5C;gBACH,CAAC,CAAC,EAAE,CAAC;SACR;QACD,UAAU,EAAE,OAAO,CAAC,QAAQ;KAC7B,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,yBAAyB,CAC7C,OAA4B,EAC5B,OAA4B,EAC5B,OAAwB,EACxB,UAAgC,EAChC,eAAkD,EAAE;IAEpD,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;QAC9C,MAAM,CAAC,YAAY,CAAC,OAAO,IAAI,gDAAyB,CAAC,CACvD,OAAO,EACP,OAAO,EACP,OAAO,EACP,UAAU,CACX,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,MAAM,CAAC,YAAY,CAAC,OAAO,IAAI,kDAA4B,CAAC,CAC1D,OAAO,EACP,OAAO,EACP,UAAU,CACX,CAAC;IACJ,CAAC;IACD,IACE,6BAA6B,CAC3B,OAAO,EACP,UAAU,CAAC,WAAW,CAAC,kBAAkB,CAC1C,EACD,CAAC;QACD,MAAM,CACJ,YAAY,CAAC,2BAA2B;YACxC,+BAA+B,CAChC,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,aAAa,CACjC,OAA4B,EAC5B,OAA4B,EAC5B,OAAwB,EACxB,eAAgD,EAAE;IAElD,IAAI,UAAgC,CAAC;IACrC,IAAI,CAAC;QACH,UAAU,GAAG,yBAAyB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAClE,MAAM,yBAAyB,CAC7B,OAAO,EACP,OAAO,EACP,OAAO,EACP,UAAU,EACV,YAAY,CACb,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,eAAM,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACrE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;IAED,eAAM,CAAC,IAAI,CACT,0BAA0B,OAAO,YAAY,UAAU,CAAC,WAAW,CAAC,kBAAkB,oBAAoB,UAAU,CAAC,WAAW,CAAC,oBAAoB,KAAK,UAAU,CAAC,GAAG,GAAG,CAC5K,CAAC;IAEF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,CAAC,YAAY,CAAC,UAAU,IAAI,0BAAK,CAAC,CAC9C,UAAU,CAAC,UAAU,EACrB,UAAU,CAAC,IAAI,EACf;YACE,GAAG,EAAE,UAAU,CAAC,GAAG;YACnB,GAAG,EAAE,yBAAyB,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,WAAW,CAAC;YACnE,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,SAAS;SACjB,CACF,CAAC;QACF,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,MAAM,MAAM,GAAG,CAAC,OAAgB,EAAE,EAAE;YAClC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QACvB,CAAC,CAAC;QAEF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1B,eAAM,CAAC,KAAK,CAAC,kCAAkC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAChE,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;YACvC,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,eAAM,CAAC,KAAK,CACV,MAAM;oBACJ,CAAC,CAAC,OAAO,OAAO,2BAA2B,MAAM,GAAG;oBACpD,CAAC,CAAC,OAAO,OAAO,uBAAuB,IAAI,IAAI,SAAS,GAAG,CAC9D,CAAC;gBACF,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;oBACjD,eAAM,CAAC,KAAK,CACV,2CAA2C,OAAO,CAAC,WAAW,IAAI,WAAW,mBAAmB,OAAO,CAAC,KAAK,GAAG,CACjH,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,MAAM,cAAc,GAAG,IAAI,KAAK,CAAC,CAAC;YAClC,IACE,6BAA6B,CAC3B,OAAO,EACP,UAAU,CAAC,WAAW,CAAC,kBAAkB,CAC1C,EACD,CAAC;gBACD,IAAI,CAAC;oBACH,MAAM,wBAAwB,GAAG,MAAM,CACrC,YAAY,CAAC,yBAAyB;wBACtC,+BAA+B,CAChC,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;oBACzD,IAAI,CAAC,wBAAwB,EAAE,CAAC;wBAC9B,eAAM,CAAC,KAAK,CACV,OAAO,OAAO,yDAAyD,CACxE,CAAC;oBACJ,CAAC;oBACD,qEAAqE;oBACrE,mEAAmE;oBACnE,kEAAkE;oBAClE,MAAM,CAAC,cAAc,IAAI,wBAAwB,CAAC,CAAC;gBACrD,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,eAAM,CAAC,KAAK,CACV,gDACE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE,CACH,CAAC;oBACF,MAAM,CAAC,KAAK,CAAC,CAAC;gBAChB,CAAC;gBACD,OAAO;YACT,CAAC;YACD,MAAM,CAAC,cAAc,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"run-sst-command.js","sourceRoot":"","sources":["../../../../../../packages/nx/src/executors/sst-lifecycle/run-sst-command.ts"],"names":[],"mappings":";;AAwMA,8DAyBC;AAED,0EAWC;AAED,8CAmBC;AAED,4DAsDC;AAED,8DA+BC;AAED,8DAqMC;AAED,8DA0CC;AAED,sCA+IC;AAhuBD,uCAA0D;AAC1D,2DAA2C;AAC3C,yCAA6C;AAC7C,0DAIoC;AACpC,yEAM2C;AAC3C,+DAQ0C;AAC1C,0DAGqC;AACrC,iEAAmE;AACnE,+DAAqE;AACrE,2EAIqC;AA2DrC,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;AAC1E,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;AAC5E,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAC;IACzC,UAAU;IACV,WAAW;IACX,UAAU;IACV,SAAS;IACT,UAAU;CACX,CAAC,CAAC;AACH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;AACjD,MAAM,kBAAkB,GAAG,+BAA+B,CAAC;AAC3D,MAAM,oBAAoB,GACxB,4EAA4E,CAAC;AAC/E,SAAS,2BAA2B,CAClC,OAAwB;IAExB,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IACxC,MAAM,UAAU,GAAG,WAAW;QAC5B,CAAC,CAAC,OAAO,CAAC,sBAAsB,EAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,IAAI;QAC7D,CAAC,CAAC,SAAS,CAAC;IACd,IAAI,CAAC,WAAW,IAAI,CAAC,UAAU,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,qEAAqE,CACtE,CAAC;IACJ,CAAC;IACD,OAAO,IAAA,2DAA+B,EAAC;QACrC,WAAW,EAAE,IAAA,sBAAU,EAAC,UAAU,CAAC;YACjC,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,IAAA,gBAAI,EAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC;QAClC,aAAa,EAAE,OAAO,CAAC,IAAI;KAC5B,CAAC,CAAC;AACL,CAAC;AAED,SAAS,6BAA6B,CACpC,OAA4B,EAC5B,KAAa;IAEb,OAAO,CACL,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC;QAC1B,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,QAAQ,CAAC,CACxE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,+BAA+B,CAC5C,OAAwC,EACxC,OAA4B,EAC5B,OAAwB,EACxB,UAAgC;IAEhC,MAAM,EAAE,6CAA6C,EAAE,GACrD,2CAAa,+CAA+C,EAAC,CAAC;IAChE,MAAM,6CAA6C,CACjD,OAAO,EACP,OAAO,EACP,OAAO,EACP,UAAU,CACX,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,OAA4B,EAC5B,UAAgC;IAEhC,MAAM,EAAE,oCAAoC,EAAE,GAC5C,2CAAa,+CAA+C,EAAC,CAAC;IAChE,oCAAoC,CAAC;QACnC,UAAU;QACV,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,+BAA+B,CAC5C,OAAwC,EACxC,OAA4B,EAC5B,OAAwB,EACxB,UAAgC,EAChC,cAAuB;IAEvB,MAAM,EAAE,uCAAuC,EAAE,GAC/C,2CAAa,+CAA+C,EAAC,CAAC;IAChE,OAAO,uCAAuC,CAC5C,OAAO,EACP,OAAO,EACP,OAAO,EACP,UAAU,EACV,cAAc,CACf,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,OAAwB;IAC3C,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,mGAAmG,CACpG,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GACR,OAAO,CAAC,sBAAsB,EAAE,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;IAC5E,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC1C,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,cAAc,OAAO,CAAC,WAAW,+EAA+E,CACjH,CAAC;IACJ,CAAC;IACD,OAAO,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC;AAC7C,CAAC;AAED,SAAgB,yBAAyB,CACvC,OAA0B,EAC1B,UAA+C;IAE/C,MAAM,SAAS,GAAG,IAAA,4CAAwB,EAAC,UAAU,CAAC,kBAAkB,CAAC;QACvE,CAAC,CAAC,IAAA,wDAAoC,EAClC,UAAU,CAAC,kBAAkB,EAC7B,OAAO,CACR;QACH,CAAC,CAAC,IAAA,8CAA0B,EAAC,OAAO,CAAC,CAAC;IACxC,OAAO,SAAS,CAAC,iCAAiC,CAAC;IACnD,OAAO,SAAS,CAAC,mCAAmC,CAAC;IACrD,OAAO,SAAS,CAAC,kCAAkC,CAAC;IACpD,0EAA0E;IAC1E,2EAA2E;IAC3E,sEAAsE;IACtE,yEAAyE;IACzE,yEAAyE;IACzE,+DAA+D;IAC/D,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1C,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,oBAAoB,EAAE,CAAC;YAC5D,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,GAAG,SAAS,EAAE,GAAG,UAAU,EAAE,CAAC;AACzC,CAAC;AAED,SAAgB,+BAA+B,CAAC,IAAuB;IACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;QACtC,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QACvD,OAAO,0BAA0B,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IACH,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CACb,4DAA4D,MAAM,qDAAqD,CACxH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAgB,iBAAiB,CAC/B,WAA8B,EAC9B,qBAAwC,EAAE;IAE1C,IACE,kBAAkB,CAAC,IAAI,CACrB,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,QAAQ,CACnE,EACD,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,SAAS,GAAG,WAAW,CAAC,gBAAgB,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrE,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,aAAa;QAAE,OAAO,SAAS,CAAC;IAChE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,gEAAgE,CACjE,CAAC;IACJ,CAAC;IACD,OAAO,SAA6B,CAAC;AACvC,CAAC;AAED,SAAgB,wBAAwB,CACtC,OAA4B,EAC5B,KAAa,EACb,cAAiC,OAAO,CAAC,GAAG,EAC5C,oBAAuC,gBAAgB;IAEvD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO;IACxC,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,gDAAgD,KAAK,GAAG,CAAC,CAAC;IAC5E,CAAC;IACD,IACE,CAAC,IAAA,mCAAwB,EACvB,iBAAiB,EACjB,KAAiC,CAClC;QACD,WAAW,CAAC,cAAc,KAAK,MAAM,EACrC,CAAC;QACD,OAAO;IACT,CAAC;IACD,MAAM,UAAU,GAAG,WAAW,CAAC,iBAAiB,CAAC;IACjD,MAAM,cAAc,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;IAChE,MAAM,WAAW,GAAG,cAAc,cAAc,EAAE,CAAC;IACnD,MAAM,mBAAmB,GAAG,UAAU;QACpC,CAAC,CAAC,GAAG,UAAU,iCAAiC,WAAW,EAAE;QAC7D,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,SAAS,GAAG,WAAW,CAAC,iBAAiB,CAAC;IAChD,MAAM,YAAY,GAChB,SAAS,KAAK,mBAAmB;QACjC,CAAC,SAAS,KAAK,MAAM,IAAI,OAAO,KAAK,QAAQ,CAAC,CAAC;IACjD,wEAAwE;IACxE,2EAA2E;IAC3E,2EAA2E;IAC3E,wEAAwE;IACxE,kEAAkE;IAClE,MAAM,yBAAyB,GAC7B,OAAO,CAAC,UAAU,CAAC;QACnB,WAAW,CAAC,cAAc,KAAK,MAAM;QACrC,YAAY;QACZ,WAAW,CAAC,UAAU,KAAK,WAAW;QACtC,WAAW,CAAC,mBAAmB,KAAK,mBAAmB,CAAC;IAC1D,IAAI,CAAC,yBAAyB,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,OAAO,OAAO,wBAAwB,KAAK,sBAAsB,cAAc,4GAA4G,CAC5L,CAAC;IACJ,CAAC;IACD,IACE,OAAO,KAAK,QAAQ;QACpB,KAAK,KAAK,YAAY;QACtB,WAAW,CAAC,2BAA2B,KAAK,MAAM,EAClD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,uGAAuG,CACxG,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAgB,yBAAyB,CACvC,OAA4B,EAC5B,cAAiC,OAAO,CAAC,GAAG;IAE5C,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,KAAK,YAAY,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,IAAA,kCAAsB,EAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACpD,IACE,OAAO,CAAC,eAAe,EAAE,IAAI,EAAE;YAC/B,IAAA,kCAAsB,EAAC,OAAO,CAAC,eAAe,CAAC,KAAK,KAAK,EACzD,CAAC;YACD,MAAM,IAAI,KAAK,CACb,8BAA8B,KAAK,mCAAmC,OAAO,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,CACxG,CAAC;QACJ,CAAC;QACD,OAAO;YACL,aAAa,EAAE,KAAK;YACpB,eAAe,EAAE,KAAK;YACtB,MAAM,EAAE,KAAK;SACd,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,IAAA,mCAAuB,EAAC;QAC7B,aAAa,EAAE,OAAO,CAAC,KAAK;QAC5B,eAAe,EACb,OAAO,CAAC,eAAe,IAAI,WAAW,CAAC,oBAAoB;KAC9D,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,yBAAyB,CACvC,OAA4B,EAC5B,OAA4B,EAC5B,OAAwB,EACxB,cAAiC,OAAO,CAAC,GAAG,EAC5C,eAAkE,EAAE;IAEpE,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,iBAAiB,GAAG,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC;IAC5E,IAAI,OAAO,CAAC,SAAS,KAAK,iBAAiB,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CACb,cAAc,OAAO,CAAC,WAAW,iBAAiB,IAAI,2BAA2B,iBAAiB,gDAAgD,CACnJ,CAAC;IACJ,CAAC;IACD,MAAM,cAAc,GAAG,OAAO,CAAC,WAAW;QACxC,CAAC,CAAC,OAAO,CAAC,sBAAsB,EAAE,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,IAAI;QACrE,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,IAAI,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;IACpE,MAAM,GAAG,GAAG,IAAA,sBAAU,EAAC,aAAa,CAAC;QACnC,CAAC,CAAC,aAAa;QACf,CAAC,CAAC,IAAA,gBAAI,EAAC,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IACtC,MAAM,MAAM,GACV,OAAO,KAAK,KAAK;QACf,CAAC,CAAC,CAAC,GAAG,EAAE;YACJ,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;YACnE,CAAC;YACD,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAChC,MAAM,IAAI,KAAK,CACb,yGAAyG,CAC1G,CAAC;YACJ,CAAC;YACD,IACE,OAAO,CAAC,eAAe,KAAK,SAAS;gBACrC,OAAO,CAAC,eAAe,KAAK,aAAa,EACzC,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACrE,CAAC;YACD,OAAO;gBACL,aAAa,EAAE,CACb,YAAY,CAAC,qBAAqB;oBAClC,IAAA,+CAA2B,GAAE,CAC9B,CAAC,OAAO,EAAE,CAAC,KAAK;gBACjB,eAAe,EAAE,aAAsB;gBACvC,MAAM,EAAE,IAAI;aACb,CAAC;QACJ,CAAC,CAAC,EAAE;QACN,CAAC,CAAC,yBAAyB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACtD,IACE,OAAO,CAAC,MAAM,KAAK,SAAS;QAC5B,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAC/C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,IACE,OAAO,CAAC,SAAS,KAAK,UAAU;QAChC,OAAO,KAAK,QAAQ;QACpB,MAAM,CAAC,MAAM,EACb,CAAC;QACD,MAAM,IAAI,KAAK,CACb,0DAA0D,MAAM,CAAC,aAAa,6BAA6B,MAAM,CAAC,eAAe,cAAc,CAChJ,CAAC;IACJ,CAAC;IACD,MAAM,eAAe,GACnB,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC;QAC3C,CAAC,OAAO,KAAK,QAAQ;YACnB,OAAO,KAAK,SAAS;YACrB,OAAO,KAAK,QAAQ;YACpB,OAAO,KAAK,QAAQ,CAAC;QACrB,CAAC,CAAC,IAAA,wCAA6B,EAAC,OAAO,CAAC,IAAI,CAAC;QAC7C,CAAC,CAAC,SAAS,CAAC;IAChB,wBAAwB,CACtB,OAAO,EACP,MAAM,CAAC,aAAa,EACpB,WAAW,EACX,eAAe,EAAE,iBAAiB,CACnC,CAAC;IACF,MAAM,kBAAkB,GAAG,eAAe;QACxC,CAAC,CAAC,IAAA,8CAAmC,EACjC,eAAe,CAAC,iBAAiB,EACjC,eAAe,CAAC,kBAAkB,CACnC;QACH,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,gBAAgB,GAAG,eAAe;QACtC,CAAC,CAAC,IAAA,qCAA0B,EAAC,eAAe,CAAC,gBAAgB,CAAC;QAC9D,CAAC,CAAC,SAAS,CAAC;IACd,IACE,gBAAgB;QAChB,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE;QACtB,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,gBAAgB,EAC1C,CAAC;QACD,MAAM,IAAI,KAAK,CACb,wBAAwB,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,6CAA6C,gBAAgB,GAAG,CAC9G,CAAC;IACJ,CAAC;IACD,IACE,OAAO,CAAC,eAAe,KAAK,SAAS;QACrC,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,EAC1D,CAAC;QACD,MAAM,IAAI,KAAK,CACb,+DAA+D,CAChE,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;IACxC,IACE,OAAO,CAAC,OAAO,KAAK,SAAS;QAC7B,CAAC,CAAC,OAAO,IAAI,OAAO,KAAK,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,EACjE,CAAC;QACD,MAAM,IAAI,KAAK,CACb,0FAA0F,CAC3F,CAAC;IACJ,CAAC;IACD,IACE,eAAe;QACf,WAAW,CAAC,cAAc,KAAK,MAAM;QACrC,CAAC,OAAO,KAAK,QAAQ;YACnB,OAAO,KAAK,SAAS;YACrB,OAAO,KAAK,QAAQ;YACpB,OAAO,KAAK,QAAQ,CAAC;QACvB,CAAC,OAAO,CAAC,eAAe,EAAE,IAAI,EAAE,EAChC,CAAC;QACD,MAAM,IAAI,KAAK,CACb,SAAS,OAAO,QAAQ,MAAM,CAAC,aAAa,qEAAqE,CAClH,CAAC;IACJ,CAAC;IACD,IACE,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC;QACzC,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,SAAS,CAAC,EAC/C,CAAC;QACD,IAAA,iCAAsB,EAAC,IAAA,0BAAe,EAAC,OAAO,CAAC,IAAI,CAAC,EAAE;YACpD,kBAAkB,EAAE,IAAI;SACzB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,cAAc,GAClB,MAAM,CAAC,aAAa,KAAK,YAAY;QACnC,CAAC,CAAC,IAAA,wCAA6B,EAAC,OAAO,CAAC,IAAI,EAAE;YAC1C,MAAM,EAAE,OAAO;YACf,QAAQ,EAAE;gBACR;oBACE,IAAI;oBACJ,IAAI,EAAE,OAAO,CAAC,WAAW,IAAI,EAAE;iBAChC;aACF;YACD,KAAK,EAAE,MAAM,CAAC,aAAa;SAC5B,CAAC;QACJ,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;IAExD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,iBAAiB,CAAC,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,IAAI;YAAE,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,+BAA+B,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED,OAAO;QACL,IAAI,EAAE;YACJ,IAAA,gBAAI,EAAC,OAAO,CAAC,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC;YAC3D,GAAG,IAAI;SACR;QACD,GAAG;QACH,WAAW,EAAE;YACX,GAAG,CAAC,kBAAkB;gBACpB,CAAC,CAAC;oBACE,uBAAuB,EACrB,kBAAkB,CAChB,MAAM,CAAC,aAAyD,CACjE;iBACJ;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5C,GAAG,CAAC,gBAAgB;gBAClB,CAAC,CAAC,EAAE,UAAU,EAAE,gBAAgB,EAAE;gBAClC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE;oBACtB,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE;oBACvC,CAAC,CAAC,EAAE,CAAC;YACT,kBAAkB,EAAE,MAAM,CAAC,aAAa;YACxC,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,IAAI,EAAE;gBACjC,CAAC,CAAC;oBACE,gCAAgC,EAAE,OAAO,CAAC,eAAe,CAAC,IAAI,EAAE;iBACjE;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,oBAAoB,EAAE,MAAM,CAAC,eAAe;YAC5C,GAAG,CAAC,cAAc,EAAE,0BAA0B;gBAC5C,CAAC,CAAC;oBACE,iCAAiC,EAC/B,cAAc,CAAC,0BAA0B;iBAC5C;gBACH,CAAC,CAAC,EAAE,CAAC;SACR;QACD,UAAU,EAAE,OAAO,CAAC,QAAQ;KAC7B,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,yBAAyB,CAC7C,OAA4B,EAC5B,OAA4B,EAC5B,OAAwB,EACxB,UAAgC,EAChC,eAAkD,EAAE;IAEpD,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;QAC9C,MAAM,CAAC,YAAY,CAAC,OAAO,IAAI,gDAAyB,CAAC,CACvD,OAAO,EACP,OAAO,EACP,OAAO,EACP,UAAU,CACX,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,MAAM,CAAC,YAAY,CAAC,OAAO,IAAI,kDAA4B,CAAC,CAC1D,OAAO,EACP,OAAO,EACP,UAAU,CACX,CAAC;IACJ,CAAC;IACD,IACE,OAAO,KAAK,QAAQ;QACpB,UAAU,CAAC,WAAW,CAAC,gCAAgC,EACvD,CAAC;QACD,MAAM,CAAC,YAAY,CAAC,mBAAmB,IAAI,oBAAoB,CAAC,CAC9D,OAAO,EACP,UAAU,CACX,CAAC;IACJ,CAAC;IACD,IACE,6BAA6B,CAC3B,OAAO,EACP,UAAU,CAAC,WAAW,CAAC,kBAAkB,CAC1C,EACD,CAAC;QACD,MAAM,CACJ,YAAY,CAAC,2BAA2B;YACxC,+BAA+B,CAChC,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,aAAa,CACjC,OAA4B,EAC5B,OAA4B,EAC5B,OAAwB,EACxB,eAAgD,EAAE;IAElD,IAAI,UAAgC,CAAC;IACrC,IAAI,iBAA+D,CAAC;IACpE,IAAI,CAAC;QACH,UAAU,GAAG,yBAAyB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAClE,IACE,6BAA6B,CAC3B,OAAO,EACP,UAAU,CAAC,WAAW,CAAC,kBAAkB,CAC1C,EACD,CAAC;YACD,wEAAwE;YACxE,uEAAuE;YACvE,wEAAwE;YACxE,8DAA8D;YAC9D,iBAAiB,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,yBAAyB,CAC7B,OAAO,EACP,OAAO,EACP,OAAO,EACP,UAAU,EACV,YAAY,CACb,CAAC;QACF,IAAI,iBAAiB;YAAE,IAAA,6DAAiC,EAAC,iBAAiB,CAAC,CAAC;IAC9E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,gBAAyB,CAAC;QAC9B,IAAI,iBAAiB,EAAE,CAAC;YACtB,IAAI,CAAC;gBACH,IAAA,6DAAiC,EAAC,iBAAiB,CAAC,CAAC;YACvD,CAAC;YAAC,OAAO,SAAS,EAAE,CAAC;gBACnB,gBAAgB,GAAG,SAAS,CAAC;YAC/B,CAAC;QACH,CAAC;QACD,eAAM,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACrE,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACnC,eAAM,CAAC,KAAK,CACV,4DACE,gBAAgB,YAAY,KAAK;gBAC/B,CAAC,CAAC,gBAAgB,CAAC,OAAO;gBAC1B,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAC7B,EAAE,CACH,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;IAED,eAAM,CAAC,IAAI,CACT,0BAA0B,OAAO,YAAY,UAAU,CAAC,WAAW,CAAC,kBAAkB,oBAAoB,UAAU,CAAC,WAAW,CAAC,oBAAoB,KAAK,UAAU,CAAC,GAAG,GAAG,CAC5K,CAAC;IAEF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,CAAC,YAAY,CAAC,UAAU,IAAI,0BAAK,CAAC,CAC9C,UAAU,CAAC,UAAU,EACrB,UAAU,CAAC,IAAI,EACf;YACE,GAAG,EAAE,UAAU,CAAC,GAAG;YACnB,GAAG,EAAE,yBAAyB,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,WAAW,CAAC;YACnE,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,SAAS;SACjB,CACF,CAAC;QACF,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,MAAM,MAAM,GAAG,CAAC,OAAgB,EAAE,EAAE;YAClC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QACvB,CAAC,CAAC;QAEF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1B,eAAM,CAAC,KAAK,CAAC,kCAAkC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAChE,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;YACvC,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,eAAM,CAAC,KAAK,CACV,MAAM;oBACJ,CAAC,CAAC,OAAO,OAAO,2BAA2B,MAAM,GAAG;oBACpD,CAAC,CAAC,OAAO,OAAO,uBAAuB,IAAI,IAAI,SAAS,GAAG,CAC9D,CAAC;gBACF,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;oBACjD,eAAM,CAAC,KAAK,CACV,2CAA2C,OAAO,CAAC,WAAW,IAAI,WAAW,mBAAmB,OAAO,CAAC,KAAK,GAAG,CACjH,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,IAAI,cAAc,GAAG,IAAI,CAAC;YAC1B,IAAI,iBAAiB,EAAE,CAAC;gBACtB,IAAI,CAAC;oBACH,IAAA,6DAAiC,EAAC,iBAAiB,CAAC,CAAC;gBACvD,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,cAAc,GAAG,KAAK,CAAC;oBACvB,eAAM,CAAC,KAAK,CACV,4CACE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE,CACH,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,MAAM,cAAc,GAAG,IAAI,KAAK,CAAC,IAAI,cAAc,CAAC;YACpD,IACE,6BAA6B,CAC3B,OAAO,EACP,UAAU,CAAC,WAAW,CAAC,kBAAkB,CAC1C,EACD,CAAC;gBACD,IAAI,CAAC;oBACH,MAAM,wBAAwB,GAAG,MAAM,CACrC,YAAY,CAAC,yBAAyB;wBACtC,+BAA+B,CAChC,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;oBACzD,IAAI,CAAC,wBAAwB,EAAE,CAAC;wBAC9B,eAAM,CAAC,KAAK,CACV,OAAO,OAAO,yDAAyD,CACxE,CAAC;oBACJ,CAAC;oBACD,qEAAqE;oBACrE,mEAAmE;oBACnE,kEAAkE;oBAClE,6DAA6D;oBAC7D,oEAAoE;oBACpE,+DAA+D;oBAC/D,yDAAyD;oBACzD,MAAM,CAAC,cAAc,IAAI,wBAAwB,IAAI,cAAc,CAAC,CAAC;gBACvE,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,eAAM,CAAC,KAAK,CACV,gDACE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE,CACH,CAAC;oBACF,MAAM,CAAC,KAAK,CAAC,CAAC;gBAChB,CAAC;gBACD,OAAO;YACT,CAAC;YACD,MAAM,CAAC,cAAc,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/src/executors/sst-lifecycle/schema.json

@@ -27,7 +27,19 @@
     },
     "profile": {
       "type": "string",
-      "description": "Optional AWS profile passed to SST."
+      "minLength": 1,
+      "maxLength": 128,
+      "description": "Optional exact AWS profile exposed to the SST child as AWS_PROFILE."
+    },
+    "expectedRoleArn": {
+      "type": "string",
+      "pattern": "^arn:(aws|aws-us-gov|aws-cn):iam::[0-9]{12}:role/[A-Za-z0-9+=,.@_/-]{1,512}$",
+      "description": "Exact temporary-session IAM role expected for local governed deployment. This is verified against STS before mutation."
+    },
+    "localProductionConfirmation": {
+      "type": "string",
+      "maxLength": 256,
+      "description": "One-use local starter production confirmation: <action>:production:<account>:<region>:<source-commit>. It is never forwarded to SST."
     },
     "region": {
       "type": "string",

package/src/executors/sst-lifecycle/sst-environment-source.d.ts

@@ -0,0 +1,25 @@
+interface SstEnvironmentSourceSnapshot {
+    absolutePath: string;
+    bytes: Buffer;
+    identity: {
+        birthtimeNs: bigint;
+        dev: bigint;
+        ino: bigint;
+        mode: bigint;
+        nlink: bigint;
+    };
+    relativePath: string;
+}
+export interface SstEnvironmentSourceTreeSnapshot {
+    projectRoot: string;
+    rootPythonSourcePath: string;
+    rootSourcePath: string;
+    snapshots: readonly SstEnvironmentSourceSnapshot[];
+    workspaceRoot: string;
+}
+export declare function captureSstEnvironmentSourceTree(input: {
+    projectRoot: string;
+    workspaceRoot: string;
+}): SstEnvironmentSourceTreeSnapshot;
+export declare function reconcileSstEnvironmentSourceTree(retained: SstEnvironmentSourceTreeSnapshot): void;
+export {};

package/src/executors/sst-lifecycle/sst-environment-source.js

@@ -0,0 +1,213 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.captureSstEnvironmentSourceTree = captureSstEnvironmentSourceTree;
+exports.reconcileSstEnvironmentSourceTree = reconcileSstEnvironmentSourceTree;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const sst_environment_source_format_js_1 = require("../../sst-environment-source-format.js");
+const MAX_SST_ENV_SOURCE_BYTES = 1024 * 1024;
+const MAX_SST_ENV_SOURCE_FILES = 64;
+const MAX_PROJECT_DIRECTORY_ENTRIES = 32_768;
+const MAX_PROJECT_DIRECTORY_DEPTH = 32;
+const MAX_RELATIVE_PATH_BYTES = 1024;
+const SKIPPED_DIRECTORIES = new Set([
+    '.git',
+    '.nx',
+    '.sst',
+    'coverage',
+    'dist',
+    'node_modules',
+]);
+function normalizedRelativePath(root, absolutePath) {
+    const path = (0, node_path_1.relative)(root, absolutePath).split('\\').join('/');
+    if (!path ||
+        path === '..' ||
+        path.startsWith('../') ||
+        (0, node_path_1.isAbsolute)(path) ||
+        Buffer.byteLength(path, 'utf8') > MAX_RELATIVE_PATH_BYTES) {
+        throw new Error('SST lifecycle tool-owned source escapes its boundary.');
+    }
+    return path;
+}
+function stableSstEnvironmentSource(absolutePath, workspaceRoot) {
+    const relativePath = normalizedRelativePath(workspaceRoot, absolutePath);
+    const before = (0, node_fs_1.lstatSync)(absolutePath, { bigint: true });
+    if (!before.isFile() ||
+        before.nlink !== 1n ||
+        before.size > BigInt(MAX_SST_ENV_SOURCE_BYTES) ||
+        (0, node_fs_1.realpathSync)(absolutePath) !== absolutePath) {
+        throw new Error(`SST lifecycle tool-owned source ${relativePath} is not one bounded, unaliased regular file.`);
+    }
+    const bytes = (0, node_fs_1.readFileSync)(absolutePath);
+    const after = (0, node_fs_1.lstatSync)(absolutePath, { bigint: true });
+    if (before.dev !== after.dev ||
+        before.ino !== after.ino ||
+        before.mode !== after.mode ||
+        before.nlink !== after.nlink ||
+        before.size !== after.size ||
+        before.mtimeNs !== after.mtimeNs ||
+        before.ctimeNs !== after.ctimeNs ||
+        BigInt(bytes.byteLength) !== after.size) {
+        throw new Error(`SST lifecycle tool-owned source ${relativePath} changed while it was read.`);
+    }
+    return {
+        absolutePath,
+        bytes,
+        identity: {
+            birthtimeNs: before.birthtimeNs,
+            dev: before.dev,
+            ino: before.ino,
+            mode: before.mode,
+            nlink: before.nlink,
+        },
+        relativePath,
+    };
+}
+function discoverSstEnvironmentSources(input) {
+    const queue = [{ absolutePath: input.projectRoot, depth: 0 }];
+    const sources = [];
+    let observedEntries = 0;
+    for (let index = 0; index < queue.length; index += 1) {
+        const current = queue[index];
+        if (!current)
+            break;
+        for (const entry of (0, node_fs_1.readdirSync)(current.absolutePath, {
+            withFileTypes: true,
+        })) {
+            observedEntries += 1;
+            if (observedEntries > MAX_PROJECT_DIRECTORY_ENTRIES) {
+                throw new Error('SST lifecycle project source exceeds the bounded directory inventory.');
+            }
+            const absolutePath = (0, node_path_1.join)(current.absolutePath, entry.name);
+            if (entry.name === 'sst-env.d.ts' ||
+                (entry.name === 'sst.pyi' &&
+                    absolutePath === (0, node_path_1.join)(input.projectRoot, 'sst.pyi'))) {
+                sources.push(stableSstEnvironmentSource(absolutePath, input.workspaceRoot));
+                if (sources.length > MAX_SST_ENV_SOURCE_FILES) {
+                    throw new Error('SST lifecycle project source exceeds the bounded environment-source inventory.');
+                }
+                continue;
+            }
+            if (entry.isDirectory() && !SKIPPED_DIRECTORIES.has(entry.name)) {
+                if (current.depth >= MAX_PROJECT_DIRECTORY_DEPTH) {
+                    throw new Error('SST lifecycle project source exceeds the bounded directory depth.');
+                }
+                queue.push({ absolutePath, depth: current.depth + 1 });
+            }
+        }
+    }
+    return sources.sort((left, right) => left.relativePath < right.relativePath
+        ? -1
+        : left.relativePath > right.relativePath
+            ? 1
+            : 0);
+}
+function sameIdentity(left, right) {
+    return (left.birthtimeNs === right.birthtimeNs &&
+        left.dev === right.dev &&
+        left.ino === right.ino &&
+        left.mode === right.mode &&
+        left.nlink === right.nlink);
+}
+function restoreExistingSstEnvironmentSource(retained, observed, workspaceRoot) {
+    if (!sameIdentity(retained.identity, observed.identity)) {
+        throw new Error(`SST lifecycle tool-owned source ${retained.relativePath} changed filesystem identity.`);
+    }
+    if (!observed.bytes.equals(retained.bytes)) {
+        const descriptor = (0, node_fs_1.openSync)(retained.absolutePath, 'r+');
+        try {
+            const opened = (0, node_fs_1.fstatSync)(descriptor, { bigint: true });
+            if (!opened.isFile() ||
+                opened.birthtimeNs !== retained.identity.birthtimeNs ||
+                opened.dev !== retained.identity.dev ||
+                opened.ino !== retained.identity.ino ||
+                opened.mode !== retained.identity.mode ||
+                opened.nlink !== 1n) {
+                throw new Error(`SST lifecycle tool-owned source ${retained.relativePath} changed before restoration.`);
+            }
+            (0, node_fs_1.ftruncateSync)(descriptor, 0);
+            (0, node_fs_1.writeFileSync)(descriptor, retained.bytes);
+            (0, node_fs_1.fsyncSync)(descriptor);
+        }
+        finally {
+            (0, node_fs_1.closeSync)(descriptor);
+        }
+    }
+    const restored = stableSstEnvironmentSource(retained.absolutePath, workspaceRoot);
+    if (!restored.bytes.equals(retained.bytes) ||
+        !sameIdentity(retained.identity, restored.identity)) {
+        throw new Error(`SST lifecycle tool-owned source ${retained.relativePath} was not restored exactly.`);
+    }
+}
+function removeGeneratedNestedSource(observed, rootPythonSourcePath, rootSourcePath, workspaceRoot) {
+    if (observed.absolutePath === rootPythonSourcePath) {
+        if (!(0, sst_environment_source_format_js_1.isExactGeneratedRootSstPythonSourceBytes)(observed.bytes)) {
+            throw new Error(`SST lifecycle new tool-owned source ${observed.relativePath} is not exact generated output.`);
+        }
+        const beforeDelete = stableSstEnvironmentSource(observed.absolutePath, workspaceRoot);
+        if (!beforeDelete.bytes.equals(observed.bytes) ||
+            !sameIdentity(beforeDelete.identity, observed.identity)) {
+            throw new Error(`SST lifecycle new tool-owned source ${observed.relativePath} changed before removal.`);
+        }
+        (0, node_fs_1.unlinkSync)(observed.absolutePath);
+        return;
+    }
+    const expectedBytes = (0, sst_environment_source_format_js_1.exactGeneratedNestedSstEnvironmentSourceBytes)(observed.absolutePath, rootSourcePath);
+    if (expectedBytes.length === 0) {
+        throw new Error('SST lifecycle generated environment source has an invalid root reference.');
+    }
+    if (observed.absolutePath === rootSourcePath ||
+        !expectedBytes.some((expected) => expected.equals(observed.bytes))) {
+        throw new Error(`SST lifecycle new tool-owned source ${observed.relativePath} is not exact generated output.`);
+    }
+    const beforeDelete = stableSstEnvironmentSource(observed.absolutePath, workspaceRoot);
+    if (!beforeDelete.bytes.equals(observed.bytes) ||
+        !sameIdentity(beforeDelete.identity, observed.identity)) {
+        throw new Error(`SST lifecycle new tool-owned source ${observed.relativePath} changed before removal.`);
+    }
+    (0, node_fs_1.unlinkSync)(observed.absolutePath);
+}
+function captureSstEnvironmentSourceTree(input) {
+    const workspaceRoot = (0, node_fs_1.realpathSync)(input.workspaceRoot);
+    const projectRoot = (0, node_fs_1.realpathSync)(input.projectRoot);
+    normalizedRelativePath(workspaceRoot, projectRoot);
+    const rootSourcePath = (0, node_path_1.join)(projectRoot, 'sst-env.d.ts');
+    const rootPythonSourcePath = (0, node_path_1.join)(projectRoot, 'sst.pyi');
+    const snapshots = discoverSstEnvironmentSources({
+        projectRoot,
+        workspaceRoot,
+    });
+    if (!snapshots.some(({ absolutePath }) => absolutePath === rootSourcePath)) {
+        throw new Error('SST lifecycle project lacks its exact root environment source.');
+    }
+    return {
+        projectRoot,
+        rootPythonSourcePath,
+        rootSourcePath,
+        snapshots,
+        workspaceRoot,
+    };
+}
+function reconcileSstEnvironmentSourceTree(retained) {
+    const retainedByPath = new Map(retained.snapshots.map((snapshot) => [snapshot.absolutePath, snapshot]));
+    const observed = discoverSstEnvironmentSources(retained);
+    const observedByPath = new Map(observed.map((snapshot) => [snapshot.absolutePath, snapshot]));
+    for (const snapshot of retained.snapshots) {
+        const current = observedByPath.get(snapshot.absolutePath);
+        if (!current) {
+            throw new Error(`SST lifecycle tool-owned source ${snapshot.relativePath} was removed.`);
+        }
+        restoreExistingSstEnvironmentSource(snapshot, current, retained.workspaceRoot);
+    }
+    for (const current of observed) {
+        if (!retainedByPath.has(current.absolutePath)) {
+            removeGeneratedNestedSource(current, retained.rootPythonSourcePath, retained.rootSourcePath, retained.workspaceRoot);
+        }
+    }
+    const finalPaths = discoverSstEnvironmentSources(retained).map(({ absolutePath }) => absolutePath);
+    const retainedPaths = retained.snapshots.map(({ absolutePath }) => absolutePath);
+    if (JSON.stringify(finalPaths) !== JSON.stringify(retainedPaths)) {
+        throw new Error('SST lifecycle environment-source inventory was not restored exactly.');
+    }
+}
+//# sourceMappingURL=sst-environment-source.js.map

package/src/executors/sst-lifecycle/sst-environment-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sst-environment-source.js","sourceRoot":"","sources":["../../../../../../packages/nx/src/executors/sst-lifecycle/sst-environment-source.ts"],"names":[],"mappings":";;AAgSA,0EAyBC;AAED,8EA4CC;AAvWD,qCAYiB;AACjB,yCAAuD;AAEvD,6FAGgD;AAEhD,MAAM,wBAAwB,GAAG,IAAI,GAAG,IAAI,CAAC;AAC7C,MAAM,wBAAwB,GAAG,EAAE,CAAC;AACpC,MAAM,6BAA6B,GAAG,MAAM,CAAC;AAC7C,MAAM,2BAA2B,GAAG,EAAE,CAAC;AACvC,MAAM,uBAAuB,GAAG,IAAI,CAAC;AACrC,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,MAAM;IACN,KAAK;IACL,MAAM;IACN,UAAU;IACV,MAAM;IACN,cAAc;CACf,CAAC,CAAC;AAuBH,SAAS,sBAAsB,CAAC,IAAY,EAAE,YAAoB;IAChE,MAAM,IAAI,GAAG,IAAA,oBAAQ,EAAC,IAAI,EAAE,YAAY,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChE,IACE,CAAC,IAAI;QACL,IAAI,KAAK,IAAI;QACb,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QACtB,IAAA,sBAAU,EAAC,IAAI,CAAC;QAChB,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,uBAAuB,EACzD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,0BAA0B,CACjC,YAAoB,EACpB,aAAqB;IAErB,MAAM,YAAY,GAAG,sBAAsB,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;IACzE,MAAM,MAAM,GAAG,IAAA,mBAAS,EAAC,YAAY,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,IACE,CAAC,MAAM,CAAC,MAAM,EAAE;QAChB,MAAM,CAAC,KAAK,KAAK,EAAE;QACnB,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,wBAAwB,CAAC;QAC9C,IAAA,sBAAY,EAAC,YAAY,CAAC,KAAK,YAAY,EAC3C,CAAC;QACD,MAAM,IAAI,KAAK,CACb,mCAAmC,YAAY,8CAA8C,CAC9F,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,IAAA,sBAAY,EAAC,YAAY,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,IAAA,mBAAS,EAAC,YAAY,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,IACE,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;QACxB,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;QACxB,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;QAC1B,MAAM,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;QAC5B,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;QAC1B,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;QAChC,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;QAChC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,KAAK,CAAC,IAAI,EACvC,CAAC;QACD,MAAM,IAAI,KAAK,CACb,mCAAmC,YAAY,6BAA6B,CAC7E,CAAC;IACJ,CAAC;IACD,OAAO;QACL,YAAY;QACZ,KAAK;QACL,QAAQ,EAAE;YACR,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,KAAK,EAAE,MAAM,CAAC,KAAK;SACpB;QACD,YAAY;KACb,CAAC;AACJ,CAAC;AAED,SAAS,6BAA6B,CAAC,KAGtC;IACC,MAAM,KAAK,GAAG,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAmC,EAAE,CAAC;IACnD,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,CAAC,OAAO;YAAE,MAAM;QACpB,KAAK,MAAM,KAAK,IAAI,IAAA,qBAAW,EAAC,OAAO,CAAC,YAAY,EAAE;YACpD,aAAa,EAAE,IAAI;SACpB,CAAC,EAAE,CAAC;YACH,eAAe,IAAI,CAAC,CAAC;YACrB,IAAI,eAAe,GAAG,6BAA6B,EAAE,CAAC;gBACpD,MAAM,IAAI,KAAK,CACb,uEAAuE,CACxE,CAAC;YACJ,CAAC;YACD,MAAM,YAAY,GAAG,IAAA,gBAAI,EAAC,OAAO,CAAC,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5D,IACE,KAAK,CAAC,IAAI,KAAK,cAAc;gBAC7B,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS;oBACvB,YAAY,KAAK,IAAA,gBAAI,EAAC,KAAK,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,EACtD,CAAC;gBACD,OAAO,CAAC,IAAI,CACV,0BAA0B,CAAC,YAAY,EAAE,KAAK,CAAC,aAAa,CAAC,CAC9D,CAAC;gBACF,IAAI,OAAO,CAAC,MAAM,GAAG,wBAAwB,EAAE,CAAC;oBAC9C,MAAM,IAAI,KAAK,CACb,gFAAgF,CACjF,CAAC;gBACJ,CAAC;gBACD,SAAS;YACX,CAAC;YACD,IAAI,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChE,IAAI,OAAO,CAAC,KAAK,IAAI,2BAA2B,EAAE,CAAC;oBACjD,MAAM,IAAI,KAAK,CACb,mEAAmE,CACpE,CAAC;gBACJ,CAAC;gBACD,KAAK,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAClC,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY;QACpC,CAAC,CAAC,CAAC,CAAC;QACJ,CAAC,CAAC,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY;YACtC,CAAC,CAAC,CAAC;YACH,CAAC,CAAC,CAAC,CACR,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CACnB,IAA8C,EAC9C,KAA+C;IAE/C,OAAO,CACL,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;QACtC,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;QACtB,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;QACtB,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;QACxB,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CAC3B,CAAC;AACJ,CAAC;AAED,SAAS,mCAAmC,CAC1C,QAAsC,EACtC,QAAsC,EACtC,aAAqB;IAErB,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CACb,mCAAmC,QAAQ,CAAC,YAAY,+BAA+B,CACxF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3C,MAAM,UAAU,GAAG,IAAA,kBAAQ,EAAC,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QACzD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAA,mBAAS,EAAC,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACvD,IACE,CAAC,MAAM,CAAC,MAAM,EAAE;gBAChB,MAAM,CAAC,WAAW,KAAK,QAAQ,CAAC,QAAQ,CAAC,WAAW;gBACpD,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,QAAQ,CAAC,GAAG;gBACpC,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,QAAQ,CAAC,GAAG;gBACpC,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,QAAQ,CAAC,IAAI;gBACtC,MAAM,CAAC,KAAK,KAAK,EAAE,EACnB,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,mCAAmC,QAAQ,CAAC,YAAY,8BAA8B,CACvF,CAAC;YACJ,CAAC;YACD,IAAA,uBAAa,EAAC,UAAU,EAAE,CAAC,CAAC,CAAC;YAC7B,IAAA,uBAAa,EAAC,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC1C,IAAA,mBAAS,EAAC,UAAU,CAAC,CAAC;QACxB,CAAC;gBAAS,CAAC;YACT,IAAA,mBAAS,EAAC,UAAU,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,0BAA0B,CACzC,QAAQ,CAAC,YAAY,EACrB,aAAa,CACd,CAAC;IACF,IACE,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QACtC,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,EACnD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,mCAAmC,QAAQ,CAAC,YAAY,4BAA4B,CACrF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,2BAA2B,CAClC,QAAsC,EACtC,oBAA4B,EAC5B,cAAsB,EACtB,aAAqB;IAErB,IAAI,QAAQ,CAAC,YAAY,KAAK,oBAAoB,EAAE,CAAC;QACnD,IAAI,CAAC,IAAA,2EAAwC,EAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,KAAK,CACb,uCAAuC,QAAQ,CAAC,YAAY,iCAAiC,CAC9F,CAAC;QACJ,CAAC;QACD,MAAM,YAAY,GAAG,0BAA0B,CAC7C,QAAQ,CAAC,YAAY,EACrB,aAAa,CACd,CAAC;QACF,IACE,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAC1C,CAAC,YAAY,CAAC,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,EACvD,CAAC;YACD,MAAM,IAAI,KAAK,CACb,uCAAuC,QAAQ,CAAC,YAAY,0BAA0B,CACvF,CAAC;QACJ,CAAC;QACD,IAAA,oBAAU,EAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAClC,OAAO;IACT,CAAC;IACD,MAAM,aAAa,GAAG,IAAA,gFAA6C,EACjE,QAAQ,CAAC,YAAY,EACrB,cAAc,CACf,CAAC;IACF,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,2EAA2E,CAC5E,CAAC;IACJ,CAAC;IACD,IACE,QAAQ,CAAC,YAAY,KAAK,cAAc;QACxC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAClE,CAAC;QACD,MAAM,IAAI,KAAK,CACb,uCAAuC,QAAQ,CAAC,YAAY,iCAAiC,CAC9F,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAAG,0BAA0B,CAC7C,QAAQ,CAAC,YAAY,EACrB,aAAa,CACd,CAAC;IACF,IACE,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC1C,CAAC,YAAY,CAAC,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,EACvD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,uCAAuC,QAAQ,CAAC,YAAY,0BAA0B,CACvF,CAAC;IACJ,CAAC;IACD,IAAA,oBAAU,EAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;AACpC,CAAC;AAED,SAAgB,+BAA+B,CAAC,KAG/C;IACC,MAAM,aAAa,GAAG,IAAA,sBAAY,EAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACxD,MAAM,WAAW,GAAG,IAAA,sBAAY,EAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACpD,sBAAsB,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;IACnD,MAAM,cAAc,GAAG,IAAA,gBAAI,EAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IACzD,MAAM,oBAAoB,GAAG,IAAA,gBAAI,EAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IAC1D,MAAM,SAAS,GAAG,6BAA6B,CAAC;QAC9C,WAAW;QACX,aAAa;KACd,CAAC,CAAC;IACH,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,YAAY,KAAK,cAAc,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CACb,gEAAgE,CACjE,CAAC;IACJ,CAAC;IACD,OAAO;QACL,WAAW;QACX,oBAAoB;QACpB,cAAc;QACd,SAAS;QACT,aAAa;KACd,CAAC;AACJ,CAAC;AAED,SAAgB,iCAAiC,CAC/C,QAA0C;IAE1C,MAAM,cAAc,GAAG,IAAI,GAAG,CAC5B,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,CACxE,CAAC;IACF,MAAM,QAAQ,GAAG,6BAA6B,CAAC,QAAQ,CAAC,CAAC;IACzD,MAAM,cAAc,GAAG,IAAI,GAAG,CAC5B,QAAQ,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,CAC9D,CAAC;IACF,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC1D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,mCAAmC,QAAQ,CAAC,YAAY,eAAe,CACxE,CAAC;QACJ,CAAC;QACD,mCAAmC,CACjC,QAAQ,EACR,OAAO,EACP,QAAQ,CAAC,aAAa,CACvB,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;YAC9C,2BAA2B,CACzB,OAAO,EACP,QAAQ,CAAC,oBAAoB,EAC7B,QAAQ,CAAC,cAAc,EACvB,QAAQ,CAAC,aAAa,CACvB,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,UAAU,GAAG,6BAA6B,CAAC,QAAQ,CAAC,CAAC,GAAG,CAC5D,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,YAAY,CACnC,CAAC;IACF,MAAM,aAAa,GAAG,QAAQ,CAAC,SAAS,CAAC,GAAG,CAC1C,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,YAAY,CACnC,CAAC;IACF,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CACb,sEAAsE,CACvE,CAAC;IACJ,CAAC;AACH,CAAC"}

package/src/foundation/index.d.ts

@@ -2,8 +2,10 @@ export * from './discovery.js';
 export * from './local-database-contract.js';
 export * from './logging.js';
 export * from './logging-preflight.js';
+export * from './partial-state.js';
 export * from './provision-database-bindings.js';
 export * from './provision-logical-database.js';
 export * from './requirements.js';
 export * from './router-origin-proof.js';
+export * from './router-waf.js';
 export * from './stages.js';

package/src/foundation/index.js

@@ -5,9 +5,11 @@ tslib_1.__exportStar(require("./discovery.js"), exports);
 tslib_1.__exportStar(require("./local-database-contract.js"), exports);
 tslib_1.__exportStar(require("./logging.js"), exports);
 tslib_1.__exportStar(require("./logging-preflight.js"), exports);
+tslib_1.__exportStar(require("./partial-state.js"), exports);
 tslib_1.__exportStar(require("./provision-database-bindings.js"), exports);
 tslib_1.__exportStar(require("./provision-logical-database.js"), exports);
 tslib_1.__exportStar(require("./requirements.js"), exports);
 tslib_1.__exportStar(require("./router-origin-proof.js"), exports);
+tslib_1.__exportStar(require("./router-waf.js"), exports);
 tslib_1.__exportStar(require("./stages.js"), exports);
 //# sourceMappingURL=index.js.map

package/src/foundation/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../packages/nx/src/foundation/index.ts"],"names":[],"mappings":";;;AAAA,yDAA+B;AAC/B,uEAA6C;AAC7C,uDAA6B;AAC7B,iEAAuC;AACvC,2EAAiD;AACjD,0EAAgD;AAChD,4DAAkC;AAClC,mEAAyC;AACzC,sDAA4B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../packages/nx/src/foundation/index.ts"],"names":[],"mappings":";;;AAAA,yDAA+B;AAC/B,uEAA6C;AAC7C,uDAA6B;AAC7B,iEAAuC;AACvC,6DAAmC;AACnC,2EAAiD;AACjD,0EAAgD;AAChD,4DAAkC;AAClC,mEAAyC;AACzC,0DAAgC;AAChC,sDAA4B"}

package/src/foundation/logging-preflight.js

@@ -13,7 +13,7 @@ function record(value) {
 }
 function stateResources(value) {
     const root = record(value);
-    const deployment = record(root?.deployment);
+    const deployment = record(root?.deployment) ?? record(root?.latest) ?? root;
     const resources = deployment?.resources ?? root?.resources;
     if (!Array.isArray(resources)) {
         throw new Error('SST state export does not contain a Pulumi deployment resource list.');