@empire-builder-kit/nx 1.0.0-rc.30 → 1.0.0-rc.31

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (261) hide show
  1. package/executors.json +8 -3
  2. package/package.json +10 -7
  3. package/src/aws/child-environment.d.ts +10 -0
  4. package/src/aws/child-environment.js +77 -0
  5. package/src/aws/child-environment.js.map +1 -0
  6. package/src/aws/identity.d.ts +13 -0
  7. package/src/aws/identity.js +41 -0
  8. package/src/aws/identity.js.map +1 -0
  9. package/src/aws-authority/index.d.ts +1 -0
  10. package/src/aws-authority/index.js +5 -0
  11. package/src/aws-authority/index.js.map +1 -0
  12. package/src/aws-authority/stage-authority.d.ts +238 -0
  13. package/src/aws-authority/stage-authority.js +2836 -0
  14. package/src/aws-authority/stage-authority.js.map +1 -0
  15. package/src/developer-agent/generator-planning.js +4 -4
  16. package/src/developer-agent/generator-planning.js.map +1 -1
  17. package/src/developer-agent/operation-registry.js +14 -6
  18. package/src/developer-agent/operation-registry.js.map +1 -1
  19. package/src/executors/deployment-plan/deployment-plan.js +1 -1
  20. package/src/executors/deployment-plan/deployment-plan.js.map +1 -1
  21. package/src/executors/foundation-preflight/foundation-preflight.d.ts +0 -1
  22. package/src/executors/foundation-preflight/foundation-preflight.js.map +1 -1
  23. package/src/executors/foundation-preflight/schema.json +0 -5
  24. package/src/executors/foundation-profile-preflight/foundation-profile-preflight.d.ts +12 -3
  25. package/src/executors/foundation-profile-preflight/foundation-profile-preflight.js +95 -32
  26. package/src/executors/foundation-profile-preflight/foundation-profile-preflight.js.map +1 -1
  27. package/src/executors/foundation-profile-preflight/production-database-safeguard.d.ts +64 -0
  28. package/src/executors/foundation-profile-preflight/production-database-safeguard.js +221 -0
  29. package/src/executors/foundation-profile-preflight/production-database-safeguard.js.map +1 -0
  30. package/src/executors/foundation-profile-preflight/schema.json +1 -6
  31. package/src/executors/foundation-remove-preflight/foundation-remove-preflight.d.ts +11 -1
  32. package/src/executors/foundation-remove-preflight/foundation-remove-preflight.js +44 -21
  33. package/src/executors/foundation-remove-preflight/foundation-remove-preflight.js.map +1 -1
  34. package/src/executors/foundation-remove-preflight/schema.json +6 -1
  35. package/src/executors/infrastructure-plan/infrastructure-plan.d.ts +25 -369
  36. package/src/executors/infrastructure-plan/infrastructure-plan.js +222 -5472
  37. package/src/executors/infrastructure-plan/infrastructure-plan.js.map +1 -1
  38. package/src/executors/infrastructure-plan/schema.json +8 -64
  39. package/src/executors/local-deploy/federated-credential-transport.d.ts +48 -0
  40. package/src/executors/local-deploy/federated-credential-transport.js +252 -0
  41. package/src/executors/local-deploy/federated-credential-transport.js.map +1 -0
  42. package/src/executors/local-deploy/local-approval.d.ts +4 -9
  43. package/src/executors/local-deploy/local-approval.js +3 -7
  44. package/src/executors/local-deploy/local-approval.js.map +1 -1
  45. package/src/executors/local-deploy/local-deploy.d.ts +58 -43
  46. package/src/executors/local-deploy/local-deploy.js +938 -804
  47. package/src/executors/local-deploy/local-deploy.js.map +1 -1
  48. package/src/executors/local-deploy/schema.json +3 -20
  49. package/src/executors/refresh/refresh.js +2 -2
  50. package/src/executors/refresh/refresh.js.map +1 -1
  51. package/src/executors/remove/remove.js +2 -2
  52. package/src/executors/remove/remove.js.map +1 -1
  53. package/src/executors/router-waf-rehearsal/router-waf-rehearsal.d.ts +25 -1
  54. package/src/executors/router-waf-rehearsal/router-waf-rehearsal.js +905 -22
  55. package/src/executors/router-waf-rehearsal/router-waf-rehearsal.js.map +1 -1
  56. package/src/executors/router-waf-rehearsal/schema.json +17 -2
  57. package/src/executors/secret-initialize/schema.json +42 -0
  58. package/src/executors/secret-initialize/secret-initialize.d.ts +30 -0
  59. package/src/executors/secret-initialize/secret-initialize.js +229 -0
  60. package/src/executors/secret-initialize/secret-initialize.js.map +1 -0
  61. package/src/executors/secret-metadata/secret-metadata.d.ts +2 -1
  62. package/src/executors/secret-metadata/secret-metadata.js +62 -29
  63. package/src/executors/secret-metadata/secret-metadata.js.map +1 -1
  64. package/src/executors/sst-lifecycle/generated-secret-retirement.d.ts +53 -0
  65. package/src/executors/sst-lifecycle/generated-secret-retirement.js +192 -0
  66. package/src/executors/sst-lifecycle/generated-secret-retirement.js.map +1 -0
  67. package/src/executors/sst-lifecycle/governed-native-operation.d.ts +46 -0
  68. package/src/executors/sst-lifecycle/governed-native-operation.js +153 -0
  69. package/src/executors/sst-lifecycle/governed-native-operation.js.map +1 -0
  70. package/src/executors/sst-lifecycle/run-sst-command.d.ts +25 -7
  71. package/src/executors/sst-lifecycle/run-sst-command.js +459 -89
  72. package/src/executors/sst-lifecycle/run-sst-command.js.map +1 -1
  73. package/src/executors/sst-lifecycle/schema.json +0 -5
  74. package/src/executors/sst-lifecycle/secret-preflight.d.ts +2 -0
  75. package/src/executors/sst-lifecycle/secret-preflight.js +13 -7
  76. package/src/executors/sst-lifecycle/secret-preflight.js.map +1 -1
  77. package/src/executors/unlock/unlock.js +2 -2
  78. package/src/executors/unlock/unlock.js.map +1 -1
  79. package/src/foundation/router-waf-rate-rehearsal.d.ts +97 -0
  80. package/src/foundation/router-waf-rate-rehearsal.js +210 -0
  81. package/src/foundation/router-waf-rate-rehearsal.js.map +1 -0
  82. package/src/foundation/router-waf.d.ts +59 -9
  83. package/src/foundation/router-waf.js +427 -32
  84. package/src/foundation/router-waf.js.map +1 -1
  85. package/src/foundation/stages.d.ts +1 -0
  86. package/src/foundation/stages.js +11 -0
  87. package/src/foundation/stages.js.map +1 -1
  88. package/src/generators/formatting.d.ts +8 -0
  89. package/src/generators/formatting.js +118 -0
  90. package/src/generators/formatting.js.map +1 -0
  91. package/src/generators/function/function.js +37 -17
  92. package/src/generators/function/function.js.map +1 -1
  93. package/src/generators/post-generation-install.js +2 -2
  94. package/src/generators/post-generation-install.js.map +1 -1
  95. package/src/generators/preset/generator.js +22 -7
  96. package/src/generators/preset/generator.js.map +1 -1
  97. package/src/generators/preset/workspace-files-developer-agent.js +15 -7
  98. package/src/generators/preset/workspace-files-developer-agent.js.map +1 -1
  99. package/src/generators/preset/workspace-files-ecr-inspector.d.ts +18 -0
  100. package/src/generators/preset/workspace-files-ecr-inspector.js +298 -0
  101. package/src/generators/preset/workspace-files-ecr-inspector.js.map +1 -0
  102. package/src/generators/preset/workspace-files-performance-cost.d.ts +2 -2
  103. package/src/generators/preset/workspace-files-performance-cost.js +8 -8
  104. package/src/generators/preset/workspace-files-performance-cost.js.map +1 -1
  105. package/src/generators/preset/workspace-files-performance-load.d.ts +1 -1
  106. package/src/generators/preset/workspace-files-performance-load.js +8 -12
  107. package/src/generators/preset/workspace-files-performance-load.js.map +1 -1
  108. package/src/generators/preset/workspace-files-stage-authority.d.ts +4 -0
  109. package/src/generators/preset/workspace-files-stage-authority.js +275 -0
  110. package/src/generators/preset/workspace-files-stage-authority.js.map +1 -0
  111. package/src/generators/preset/workspace-files-thin-deploy.d.ts +35 -0
  112. package/src/generators/preset/workspace-files-thin-deploy.js +1434 -0
  113. package/src/generators/preset/workspace-files-thin-deploy.js.map +1 -0
  114. package/src/generators/preset/workspace-files-thin-docs.d.ts +5 -0
  115. package/src/generators/preset/workspace-files-thin-docs.js +224 -0
  116. package/src/generators/preset/workspace-files-thin-docs.js.map +1 -0
  117. package/src/generators/preset/workspace-files-thin-release.d.ts +14 -0
  118. package/src/generators/preset/workspace-files-thin-release.js +26 -0
  119. package/src/generators/preset/workspace-files-thin-release.js.map +1 -0
  120. package/src/generators/preset/workspace-files.d.ts +1 -1
  121. package/src/generators/preset/workspace-files.js +373 -223
  122. package/src/generators/preset/workspace-files.js.map +1 -1
  123. package/src/generators/slice/built-in-plan-api-files.js +1 -0
  124. package/src/generators/slice/built-in-plan-api-files.js.map +1 -1
  125. package/src/generators/slice/built-in-plan-authorization-infrastructure-files.js +4 -0
  126. package/src/generators/slice/built-in-plan-authorization-infrastructure-files.js.map +1 -1
  127. package/src/generators/slice/built-in-plan-data-export-infrastructure-files.js +5 -31
  128. package/src/generators/slice/built-in-plan-data-export-infrastructure-files.js.map +1 -1
  129. package/src/generators/slice/built-in-plan-data-files.d.ts +1 -1
  130. package/src/generators/slice/built-in-plan-data-files.js +89 -30
  131. package/src/generators/slice/built-in-plan-data-files.js.map +1 -1
  132. package/src/generators/slice/built-in-plan-foundation-files.js +3 -5
  133. package/src/generators/slice/built-in-plan-foundation-files.js.map +1 -1
  134. package/src/generators/slice/built-in-plan-frontend-files.js +5 -1
  135. package/src/generators/slice/built-in-plan-frontend-files.js.map +1 -1
  136. package/src/generators/slice/built-in-plan-infrastructure-files.d.ts +1 -1
  137. package/src/generators/slice/built-in-plan-infrastructure-files.js +199 -188
  138. package/src/generators/slice/built-in-plan-infrastructure-files.js.map +1 -1
  139. package/src/generators/slice/built-in-plan-metadata-files.js +13 -0
  140. package/src/generators/slice/built-in-plan-metadata-files.js.map +1 -1
  141. package/src/generators/slice/built-in-plan-native-runtime-authority-files.d.ts +2 -0
  142. package/src/generators/slice/built-in-plan-native-runtime-authority-files.js +307 -0
  143. package/src/generators/slice/built-in-plan-native-runtime-authority-files.js.map +1 -0
  144. package/src/generators/slice/built-in-plan-operations-files.js +43 -49
  145. package/src/generators/slice/built-in-plan-operations-files.js.map +1 -1
  146. package/src/generators/slice/built-in-plan-performance-files.js +37 -19
  147. package/src/generators/slice/built-in-plan-performance-files.js.map +1 -1
  148. package/src/generators/slice/built-in-plan-project-files.js +9 -68
  149. package/src/generators/slice/built-in-plan-project-files.js.map +1 -1
  150. package/src/generators/slice/built-in-plan-secret-runtime-files.d.ts +1 -1
  151. package/src/generators/slice/built-in-plan-secret-runtime-files.js +74 -76
  152. package/src/generators/slice/built-in-plan-secret-runtime-files.js.map +1 -1
  153. package/src/generators/slice/built-in-plan-testing-files.js +74 -47
  154. package/src/generators/slice/built-in-plan-testing-files.js.map +1 -1
  155. package/src/generators/slice/built-in-plan-thin-release-files.d.ts +11 -0
  156. package/src/generators/slice/built-in-plan-thin-release-files.js +129 -0
  157. package/src/generators/slice/built-in-plan-thin-release-files.js.map +1 -0
  158. package/src/generators/slice/built-in-plan-verification-files.js +6 -2
  159. package/src/generators/slice/built-in-plan-verification-files.js.map +1 -1
  160. package/src/generators/slice/built-in-plan-web-files.js +4 -2
  161. package/src/generators/slice/built-in-plan-web-files.js.map +1 -1
  162. package/src/generators/slice/built-in-plan-workload-role-files.js +26 -4
  163. package/src/generators/slice/built-in-plan-workload-role-files.js.map +1 -1
  164. package/src/generators/slice/built-in-plan.d.ts +1 -0
  165. package/src/generators/slice/built-in-plan.js +28 -11
  166. package/src/generators/slice/built-in-plan.js.map +1 -1
  167. package/src/generators/slice/slice.js +27 -29
  168. package/src/generators/slice/slice.js.map +1 -1
  169. package/src/generators/upgrade/upgrade.d.ts +1 -1
  170. package/src/generators/upgrade/upgrade.js +224 -69
  171. package/src/generators/upgrade/upgrade.js.map +1 -1
  172. package/src/generators/workload/performance-registration.d.ts +1 -0
  173. package/src/generators/workload/performance-registration.js +6 -4
  174. package/src/generators/workload/performance-registration.js.map +1 -1
  175. package/src/generators/workload/service-performance-files.d.ts +1 -0
  176. package/src/generators/workload/service-performance-files.js +27 -7
  177. package/src/generators/workload/service-performance-files.js.map +1 -1
  178. package/src/generators/workload/workload.d.ts +1 -1
  179. package/src/generators/workload/workload.js +55 -28
  180. package/src/generators/workload/workload.js.map +1 -1
  181. package/src/git-policy/github-bootstrap.d.ts +19 -6
  182. package/src/git-policy/github-bootstrap.js +103 -157
  183. package/src/git-policy/github-bootstrap.js.map +1 -1
  184. package/src/local-dev/private-state.d.ts +3 -0
  185. package/src/local-dev/private-state.js +17 -5
  186. package/src/local-dev/private-state.js.map +1 -1
  187. package/src/performance/cost-collection.d.ts +1 -1
  188. package/src/performance/cost-collection.js +4 -2
  189. package/src/performance/cost-collection.js.map +1 -1
  190. package/src/performance/cost-controls.d.ts +3 -1
  191. package/src/performance/cost-controls.js +9 -4
  192. package/src/performance/cost-controls.js.map +1 -1
  193. package/src/performance/evidence.d.ts +1 -1
  194. package/src/performance/evidence.js +5 -3
  195. package/src/performance/evidence.js.map +1 -1
  196. package/src/performance/load-safety.js +5 -3
  197. package/src/performance/load-safety.js.map +1 -1
  198. package/src/performance/model.d.ts +2 -2
  199. package/src/performance/model.js +4 -3
  200. package/src/performance/model.js.map +1 -1
  201. package/src/release/index.d.ts +0 -2
  202. package/src/release/index.js +0 -2
  203. package/src/release/index.js.map +1 -1
  204. package/src/release/source-authority.d.ts +4 -5
  205. package/src/release/source-authority.js +13 -123
  206. package/src/release/source-authority.js.map +1 -1
  207. package/src/repository-policy/aurora-preflight.d.ts +1 -1
  208. package/src/repository-policy/aurora-preflight.js +4 -1
  209. package/src/repository-policy/aurora-preflight.js.map +1 -1
  210. package/src/repository-policy/policy.d.ts +5 -1
  211. package/src/repository-policy/policy.js +64 -13
  212. package/src/repository-policy/policy.js.map +1 -1
  213. package/src/schemas/performance-policy-v1.json +3 -1
  214. package/src/secrets/adapters.d.ts +5 -1
  215. package/src/secrets/adapters.js +22 -1
  216. package/src/secrets/adapters.js.map +1 -1
  217. package/src/secrets/aws-control-plane.d.ts +10 -1
  218. package/src/secrets/aws-control-plane.js +67 -0
  219. package/src/secrets/aws-control-plane.js.map +1 -1
  220. package/src/secrets/generated-aws-control-plane.d.ts +23 -0
  221. package/src/secrets/generated-aws-control-plane.js +259 -0
  222. package/src/secrets/generated-aws-control-plane.js.map +1 -0
  223. package/src/secrets/metadata.js +38 -10
  224. package/src/secrets/metadata.js.map +1 -1
  225. package/src/secrets/model.d.ts +8 -1
  226. package/src/secrets/model.js +24 -3
  227. package/src/secrets/model.js.map +1 -1
  228. package/src/secrets/operator.d.ts +89 -3
  229. package/src/secrets/operator.js +422 -9
  230. package/src/secrets/operator.js.map +1 -1
  231. package/src/secrets/registry.d.ts +2 -1
  232. package/src/secrets/registry.js +18 -1
  233. package/src/secrets/registry.js.map +1 -1
  234. package/src/secrets/workload-access.js +10 -2
  235. package/src/secrets/workload-access.js.map +1 -1
  236. package/src/supply-chain/action-pins.js +61 -7
  237. package/src/supply-chain/action-pins.js.map +1 -1
  238. package/src/supply-chain/build-output-bounds.d.ts +2 -0
  239. package/src/supply-chain/build-output-bounds.js +12 -0
  240. package/src/supply-chain/build-output-bounds.js.map +1 -0
  241. package/src/supply-chain/build-output.js +2 -4
  242. package/src/supply-chain/build-output.js.map +1 -1
  243. package/src/supply-chain/ecr-scanning.d.ts +5 -3
  244. package/src/supply-chain/ecr-scanning.js +11 -7
  245. package/src/supply-chain/ecr-scanning.js.map +1 -1
  246. package/src/supply-chain/ecs-deployed-image.d.ts +5 -3
  247. package/src/supply-chain/ecs-deployed-image.js +6 -4
  248. package/src/supply-chain/ecs-deployed-image.js.map +1 -1
  249. package/src/supply-chain/generated-container-release-command.js +816 -34
  250. package/src/supply-chain/generated-container-release-command.js.map +1 -1
  251. package/src/supply-chain/generated-ecr-collector-command.d.ts +0 -1
  252. package/src/supply-chain/generated-ecr-collector-command.js +188 -91
  253. package/src/supply-chain/generated-ecr-collector-command.js.map +1 -1
  254. package/src/supply-chain/generated-files.js +4 -3
  255. package/src/supply-chain/generated-files.js.map +1 -1
  256. package/src/supply-chain/index.d.ts +1 -1
  257. package/src/supply-chain/index.js +2 -1
  258. package/src/supply-chain/index.js.map +1 -1
  259. package/src/workload-roles/index.d.ts +10 -17
  260. package/src/workload-roles/index.js +5 -18
  261. package/src/workload-roles/index.js.map +1 -1
@@ -1 +1 @@
1
- {"version":3,"file":"router-waf-rehearsal.js","sourceRoot":"","sources":["../../../../../../packages/nx/src/executors/router-waf-rehearsal/router-waf-rehearsal.ts"],"names":[],"mappings":";;AAAA,qCAQiB;AACjB,yCAAiC;AAEjC,uCAA0D;AAE1D,wDAGmC;AAEnC,MAAM,6BAA6B,GAAG,EAAE,GAAG,IAAI,CAAC;AAChD,MAAM,eAAe,GAAG,IAAA,gBAAI,EAAC,UAAU,EAAE,YAAY,CAAC,CAAC;AACvD,MAAM,WAAW,GAAG,IAAA,gBAAI,EAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC;AACxD,MAAM,aAAa,GAAG,IAAA,gBAAI,EAAC,UAAU,EAAE,+BAA+B,CAAC,CAAC;AACxE,MAAM,YAAY,GAAG,IAAA,gBAAI,EAAC,UAAU,EAAE,oCAAoC,CAAC,CAAC;AAE5E,SAAS,eAAe,CAAC,IAAY,EAAE,KAAa;IAClD,MAAM,MAAM,GAAG,IAAA,mBAAS,EAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,KAAK,KAAK,EAAE,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,sCAAsC,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,6BAA6B,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,qCAAqC,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,KAAK,GAAG,IAAA,sBAAY,EAAC,IAAI,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,IAAA,mBAAS,EAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,IACE,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;QACxB,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;QACxB,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;QAC1B,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;QAC1B,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;QAChC,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EAChC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,mCAAmC,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,qBAAqB,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,OAAgB;IAClD,MAAM,QAAQ,GAAG,IAAA,mBAAS,EAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,QAAQ,CAAC,KAAK,KAAK,EAAE,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CACb,2EAA2E,CAC5E,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IACtD,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,6BAA6B,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,SAAS,GAAG,GAAG,IAAI,QAAQ,OAAO,CAAC,GAAG,EAAE,CAAC;IAC/C,IAAI,UAA8B,CAAC;IACnC,IAAI,YAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,UAAU,GAAG,IAAA,kBAAQ,EAAC,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,IAAM,CAAC,CAAC,CAAC;QACvE,IAAA,uBAAa,EAAC,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACzC,IAAA,mBAAS,EAAC,UAAU,CAAC,CAAC;QACtB,UAAU,GAAG,SAAS,CAAC;QACvB,IAAA,oBAAU,EAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC9B,CAAC;YAAS,CAAC;QACT,IAAI,UAAU,KAAK,SAAS;YAAE,IAAA,mBAAS,EAAC,UAAU,CAAC,CAAC;QACpD,IAAI,CAAC;YACH,IAAA,oBAAU,EAAC,SAAS,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvD,YAAY,GAAG,KAAK,CAAC;YACvB,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,YAAY;QAAE,MAAM,YAAY,CAAC;AACvC,CAAC;AAED,MAAM,QAAQ,GAA2C,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE;IAC5E,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,OAAO,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,IAAA,mCAAwB,EACrC,eAAe,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,WAAW,CAAC,EAAE,mBAAmB,CAAC,CAC9D,CAAC;QACF,MAAM,OAAO,GAAG,IAAA,2CAAgC,EAAC;YAC/C,QAAQ,EAAE,eAAe,CACvB,IAAA,gBAAI,EAAC,IAAI,EAAE,aAAa,CAAC,EACzB,0BAA0B,CAC3B;YACD,MAAM;SACP,CAAC,CAAC;QACH,YAAY,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,YAAY,CAAC,EAAE,OAAO,CAAC,CAAC;QAChD,eAAM,CAAC,IAAI,CACT,IAAI,CAAC,SAAS,CAAC;YACb,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,MAAM,EAAE,IAAI;YACZ,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB,CAAC,CACH,CAAC;QACF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,eAAM,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACrE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;AACH,CAAC,CAAC;AAEF,kBAAe,QAAQ,CAAC"}
1
+ {"version":3,"file":"router-waf-rehearsal.js","sourceRoot":"","sources":["../../../../../../packages/nx/src/executors/router-waf-rehearsal/router-waf-rehearsal.ts"],"names":[],"mappings":";;AAouCA,4EAgRC;AAp/CD,kEAIoC;AACpC,4EAIyC;AACzC,kEAKoC;AACpC,oDAA0E;AAC1E,wDAQ+B;AAC/B,wEAAwD;AACxD,6CAAsD;AACtD,qCAQiB;AACjB,yCAAiC;AAEjC,uCAA0D;AAE1D,wDAWmC;AACnC,gGAMuD;AACvD,2DAA4E;AAC5E,uDAG+B;AAC/B,+DAK0C;AAC1C,yEAA4D;AAE5D,MAAM,6BAA6B,GAAG,EAAE,GAAG,IAAI,CAAC;AAChD,MAAM,eAAe,GAAG,IAAA,gBAAI,EAAC,UAAU,EAAE,YAAY,CAAC,CAAC;AACvD,MAAM,WAAW,GAAG,IAAA,gBAAI,EAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC;AACxD,MAAM,aAAa,GAAG,IAAA,gBAAI,EAAC,UAAU,EAAE,+BAA+B,CAAC,CAAC;AACxE,MAAM,YAAY,GAAG,IAAA,gBAAI,EAAC,UAAU,EAAE,oCAAoC,CAAC,CAAC;AAC5E,MAAM,iBAAiB,GAAG,WAAW,CAAC;AACtC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,kBAAkB,GAAG,0BAA0B,CAAC;AACtD,MAAM,sBAAsB,GAAG,qBAAqB,CAAC;AACrD,MAAM,yBAAyB,GAAG,iBAAiB,CAAC;AACpD,MAAM,iBAAiB,GAAG,4CAA4C,CAAC;AACvE,MAAM,OAAO,GACX,0GAA0G,CAAC;AAC7G,MAAM,cAAc,GAClB,yGAAyG,CAAC;AAC5G,MAAM,iBAAiB,GAAG,6BAA6B,CAAC;AACxD,MAAM,0BAA0B,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;AA+BvD,SAAS,eAAe,CAAC,IAAY,EAAE,KAAa;IAClD,MAAM,MAAM,GAAG,IAAA,mBAAS,EAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,KAAK,KAAK,EAAE,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,sCAAsC,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,6BAA6B,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,qCAAqC,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,KAAK,GAAG,IAAA,sBAAY,EAAC,IAAI,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,IAAA,mBAAS,EAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,IACE,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;QACxB,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;QACxB,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;QAC1B,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;QAC1B,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;QAChC,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EAChC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,mCAAmC,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,qBAAqB,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY,EAAE,KAAc,EAAE,KAAa;IACnE,MAAM,QAAQ,GAAG,IAAA,mBAAS,EAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,QAAQ,CAAC,KAAK,KAAK,EAAE,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,sCAAsC,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IACpD,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,6BAA6B,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,qBAAqB,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,SAAS,GAAG,GAAG,IAAI,QAAQ,OAAO,CAAC,GAAG,EAAE,CAAC;IAC/C,IAAI,UAA8B,CAAC;IACnC,IAAI,YAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,UAAU,GAAG,IAAA,kBAAQ,EAAC,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,IAAM,CAAC,CAAC,CAAC;QACvE,IAAA,uBAAa,EAAC,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACzC,IAAA,mBAAS,EAAC,UAAU,CAAC,CAAC;QACtB,UAAU,GAAG,SAAS,CAAC;QACvB,IAAA,oBAAU,EAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC9B,CAAC;YAAS,CAAC;QACT,IAAI,UAAU,KAAK,SAAS;YAAE,IAAA,mBAAS,EAAC,UAAU,CAAC,CAAC;QACpD,IAAI,CAAC;YACH,IAAA,oBAAU,EAAC,SAAS,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvD,YAAY,GAAG,KAAK,CAAC;YACvB,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,YAAY;QAAE,MAAM,YAAY,CAAC;AACvC,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAc;IACxC,OAAO,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC;QAC7B,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC;YAC5B,CAAC,CAAC,YAAY;YACd,CAAC,CAAC,KAAK,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CACtB,OAAkC,EAClC,WAA8B;IAE9B,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;IACzC,MAAM,QAAQ,GAAG,WAAW,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;IACjD,IAAI,QAAQ,IAAI,QAAQ,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CACb,gFAAgF,CACjF,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,IAAI,QAAQ,IAAI,SAAS,CAAC;IAClD,IAAI,WAAW,CAAC,cAAc,KAAK,MAAM,EAAE,CAAC;QAC1C,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CACb,qGAAqG,CACtG,CAAC;QACJ,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,qFAAqF,CACtF,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,UAAU,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAC9E,CAAC;AAED,SAAS,UAAU,CAAC,KAAa,EAAE,QAAgB;IACjD,OAAO,GAAG,KAAK,IAAI,QAAQ,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACvC,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,IACE,GAAG,CAAC,QAAQ,KAAK,QAAQ;QACzB,GAAG,CAAC,QAAQ,KAAK,EAAE;QACnB,GAAG,CAAC,QAAQ,KAAK,EAAE;QACnB,GAAG,CAAC,IAAI,KAAK,EAAE;QACf,GAAG,CAAC,MAAM,KAAK,EAAE;QACjB,GAAG,CAAC,IAAI,KAAK,EAAE;QACf,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EACrC,CAAC;QACD,MAAM,IAAI,KAAK,CACb,wIAAwI,CACzI,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,OAAO,CACd,OAA2B,EAC3B,MAAc,EACd,YAA4C;IAE5C,MAAM,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,IAAA,8BAAO,EAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/D,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAClD,OAAO;QACL,UAAU,EAAE,CACV,YAAY,CAAC,sBAAsB;YACnC,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC,IAAI,oCAAgB,CAAC,aAAa,CAAC,CAAC,CACzD,CAAC;YACA,GAAG,MAAM;YACT,MAAM,EAAE,iBAAiB;SAC1B,CAAC;QACF,UAAU,EAAE,CACV,YAAY,CAAC,sBAAsB;YACnC,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC,IAAI,oCAAgB,CAAC,aAAa,CAAC,CAAC,CACzD,CAAC;YACA,GAAG,MAAM;YACT,MAAM,EAAE,iBAAiB;SAC1B,CAAC;QACF,cAAc,EAAE,CACd,YAAY,CAAC,0BAA0B;YACvC,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC,IAAI,6CAAoB,CAAC,aAAa,CAAC,CAAC,CAC7D,CAAC;YACA,GAAG,MAAM;YACT,MAAM,EAAE,iBAAiB;SAC1B,CAAC;QACF,GAAG,EAAE,CACH,YAAY,CAAC,eAAe;YAC5B,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC,IAAI,sBAAS,CAAC,aAAa,CAAC,CAAC,CAClD,CAAC;YACA,GAAG,MAAM;YACT,QAAQ,EAAE,IAAA,kCAAoB,EAAC,MAAM,CAAC;YACtC,MAAM;SACP,CAAC;QACF,GAAG,EAAE,CACH,YAAY,CAAC,eAAe;YAC5B,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC,IAAI,0BAAW,CAAC,aAAa,CAAC,CAAC,CACpD,CAAC;YACA,GAAG,MAAM;YACT,MAAM,EAAE,iBAAiB;SAC1B,CAAC;KACH,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,4BAA4B,CAAC,KAS3C;IACC,MAAM,WAAW,GAAG,OAAO,KAAK,CAAC,SAAS,gBAAgB,KAAK,CAAC,SAAS,iBAAiB,KAAK,CAAC,cAAc,EAAE,CAAC;IACjH,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC5C,KAAK,CAAC,UAAU,CAAC,IAAI,CACnB,IAAI,0CAAsB,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,CACzD;QACD,KAAK,CAAC,UAAU,CAAC,IAAI,CACnB,IAAI,8CAAoC,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CACpE;KACF,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;IACzC,MAAM,aAAa,GAAG,YAAY,EAAE,kBAAkB,CAAC;IACvD,MAAM,OAAO,GAAG,aAAa,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC;IACpD,IACE,YAAY,EAAE,GAAG,KAAK,WAAW;QACjC,YAAY,EAAE,EAAE,KAAK,KAAK,CAAC,cAAc;QACzC,YAAY,CAAC,MAAM,KAAK,UAAU;QAClC,aAAa,EAAE,OAAO,KAAK,KAAK;QAChC,CAAC,YAAY,CAAC,UAAU;QACxB,CAAC,aAAa;QACd,aAAa,CAAC,OAAO,KAAK,IAAI;QAC9B,aAAa,CAAC,QAAQ,KAAK,KAAK,CAAC,SAAS;QAC1C,CAAC,KAAK,CAAC,SAAS,KAAK,YAAY,CAAC,UAAU;YAC1C,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EACrC,CAAC;QACD,MAAM,IAAI,KAAK,CACb,+HAA+H,CAChI,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,CAClB,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAC5C,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAC5D,CACF,CAAC;IACF,IACE,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAK,oBAAoB;QACnD,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,YAAY;QACtC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,KAAK,CAAC,KAAK;QACrC,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,KAAK,KAAK,CAAC,SAAS,EAC7C,CAAC;QACD,MAAM,IAAI,KAAK,CACb,2GAA2G,CAC5G,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAc,EAAE,KAAa;IAC/C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,qBAAqB,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,aAAa,CACpB,KAA8B,EAC9B,QAA2B,EAC3B,KAAa;IAEb,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;SACnC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC;SACxC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC;SACnB,IAAI,EAAE,CAAC;IACV,MAAM,QAAQ,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IACtC,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,gCAAgC,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,KAAa;IACpD,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC3C,aAAa,CAAC,SAAS,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACnD,CAAC;IACD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;aACxD,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aACrE,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;aACrE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAClB,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,2BAA2B,CAClC,KAAyC;IAEzC,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,CAA8B,CAAC;IACvE,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC;IAC7E,MAAM,SAAS,GAAG,SAAS,EAAE,SAMhB,CAAC;IACd,MAAM,UAAU,GACd,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,CAAC;IAC9D,IAAI,UAAU,EAAE,CAAC;QACf,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAC9B,IAAA,qCAAY,EAAC,aAAa,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,CACxD,CAAC;IACJ,CAAC;IACD,OAAO,aAAa,CAAC,UAAU,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,wBAAwB,CAC/B,KAAc,EACd,kBAA0B,EAC1B,KAAa;IAEb,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,EAAE,GAAG,KAAK,aAAa,CAAC,CAAC;IAC3D,aAAa,CACX,SAAS,EACT,CAAC,0BAA0B,EAAE,YAAY,EAAE,wBAAwB,CAAC,EACpE,GAAG,KAAK,aAAa,CACtB,CAAC;IACF,IACE,SAAS,CAAC,wBAAwB,KAAK,IAAI;QAC3C,SAAS,CAAC,sBAAsB,KAAK,IAAI;QACzC,SAAS,CAAC,UAAU,KAAK,kBAAkB,EAC3C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,8CAA8C,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO;QACL,wBAAwB,EAAE,IAAI;QAC9B,UAAU,EAAE,kBAAkB;QAC9B,sBAAsB,EAAE,IAAI;KAC7B,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAC/B,KAAc,EACd,KAAa;IAEb,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC3C,aAAa,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;IACzC,IAAI,OAAO,SAAS,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,kBAAkB,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO;QACL,GAAG,EAAE,SAAS,CAAC,GAAG;QAClB,UAAU,EAAE,EAAE,uBAAuB,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,EAAE;KAChE,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,KAG5B;IACC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3E,MAAM,aAAa,GAAG;QACpB,kBAAkB;QAClB,wDAAyB;QACzB,8BAA8B;QAC9B,sCAAsC;QACtC,uCAAuC;KACxC,CAAC;IACF,IACE,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,aAAa,CAAC,MAAM;QAC3C,KAAK,CAAC,KAAK,CAAC,IAAI,CACd,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,UAAU,CAAC,IAAI,EAAE,mBAAmB,KAAK,EAAE,CAAC,CAAC,IAAI;YACjD,aAAa,CAAC,KAAK,CAAC,CACvB,EACD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,kFAAkF,CACnF,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC7C,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,EAAE,mBAAmB,IAAI,EAAE,CAAC,CAAC;QAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;QACnD,aAAa,CACX,IAAI,EACJ,OAAO;YACL,CAAC,CAAC;gBACE,MAAM;gBACN,gBAAgB;gBAChB,UAAU;gBACV,WAAW;gBACX,kBAAkB;aACnB;YACH,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,kBAAkB,CAAC,EACnE,mBAAmB,IAAI,EAAE,CAC1B,CAAC;QACF,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CACb,wBAAwB,IAAI,4CAA4C,CACzE,CAAC;QACJ,CAAC;QACD,MAAM,gBAAgB,GAAG,wBAAwB,CAC/C,IAAI,CAAC,gBAAgB,EACrB,GAAG,MAAM,GAAG,IAAI,EAAE,EAClB,mBAAmB,IAAI,EAAE,CAC1B,CAAC;QACF,MAAM,SAAS,GAAG,UAAU,CAC1B,IAAI,CAAC,SAAS,EACd,mBAAmB,IAAI,YAAY,CACpC,CAAC;QACF,IAAI,IAAI,KAAK,kBAAkB,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;YAClE,aAAa,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,yBAAyB,CAAC,CAAC;YAC5D,eAAe,CAAC,MAAM,CAAC,KAAK,EAAE,+BAA+B,CAAC,CAAC;YAC/D,aAAa,CAAC,SAAS,EAAE,CAAC,cAAc,CAAC,EAAE,4BAA4B,CAAC,CAAC;YACzE,MAAM,YAAY,GAAG,UAAU,CAC7B,SAAS,CAAC,YAAY,EACtB,gCAAgC,CACjC,CAAC;YACF,aAAa,CACX,YAAY,EACZ,CAAC,WAAW,CAAC,EACb,gCAAgC,CACjC,CAAC;YACF,MAAM,MAAM,GAAG,UAAU,CACvB,YAAY,CAAC,SAAS,EACtB,mCAAmC,CACpC,CAAC;YACF,IAAI,gBAAyC,CAAC;YAC9C,IAAI,yBAAyB,IAAI,MAAM,EAAE,CAAC;gBACxC,aAAa,CACX,MAAM,EACN,CAAC,yBAAyB,CAAC,EAC3B,mCAAmC,CACpC,CAAC;gBACF,MAAM,SAAS,GAAG,wBAAwB,CACxC,MAAM,CAAC,uBAAuB,EAC9B,mCAAmC,CACpC,CAAC;gBACF,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBAC9B,gBAAgB,GAAG,SAAS,CAAC,UAAU,CAAC;YAC1C,CAAC;iBAAM,CAAC;gBACN,aAAa,CACX,MAAM,EACN,CAAC,aAAa,CAAC,EACf,mCAAmC,CACpC,CAAC;gBACF,MAAM,WAAW,GAAG,UAAU,CAC5B,MAAM,CAAC,WAAW,EAClB,+BAA+B,CAChC,CAAC;gBACF,aAAa,CACX,WAAW,EACX,CAAC,YAAY,CAAC,EACd,+BAA+B,CAChC,CAAC;gBACF,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC;oBACtC,WAAW,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EACnC,CAAC;oBACD,MAAM,IAAI,KAAK,CACb,0FAA0F,CAC3F,CAAC;gBACJ,CAAC;gBACD,MAAM,UAAU,GAAG,WAAW,CAAC,UAAU,CAAC,GAAG,CAC3C,CAAC,IAAI,EAAE,cAAc,EAAE,EAAE;oBACvB,MAAM,OAAO,GAAG,UAAU,CACxB,IAAI,EACJ,8BAA8B,cAAc,EAAE,CAC/C,CAAC;oBACF,aAAa,CACX,OAAO,EACP,CAAC,yBAAyB,CAAC,EAC3B,8BAA8B,cAAc,EAAE,CAC/C,CAAC;oBACF,MAAM,SAAS,GAAG,wBAAwB,CACxC,OAAO,CAAC,uBAAuB,EAC/B,8BAA8B,cAAc,EAAE,CAC/C,CAAC;oBACF,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;oBAC9B,OAAO,SAAS,CAAC,UAAU,CAAC;gBAC9B,CAAC,CACF,CAAC;gBACF,gBAAgB,GAAG,EAAE,WAAW,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,CAAC;YACjE,CAAC;YACD,OAAO;gBACL,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBACrB,IAAI;gBACJ,QAAQ,EAAE,KAAK;gBACf,SAAS,EAAE;oBACT,YAAY,EAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE;iBAC9C;gBACD,gBAAgB;aACjB,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,KAAK,wDAAyB,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;YAChE,aAAa,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,uBAAuB,CAAC,CAAC;YAC1D,eAAe,CAAC,MAAM,CAAC,KAAK,EAAE,6BAA6B,CAAC,CAAC;YAC7D,aAAa,CACX,SAAS,EACT,CAAC,oBAAoB,CAAC,EACtB,0BAA0B,CAC3B,CAAC;YACF,MAAM,IAAI,GAAG,UAAU,CACrB,SAAS,CAAC,kBAAkB,EAC5B,+BAA+B,CAChC,CAAC;YACF,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;iBAClC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC;iBACxC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC;iBACnB,IAAI,EAAE,CAAC;YACV,IACE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;gBACtB,IAAI,CAAC,SAAS,CACZ;oBACE,kBAAkB;oBAClB,GAAG,CAAC,IAAI,CAAC,mBAAmB,KAAK,SAAS;wBACxC,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC;oBAC5B,OAAO;iBACR,CAAC,IAAI,EAAE,CACT;gBACH,IAAI,CAAC,gBAAgB,KAAK,IAAI;gBAC9B,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;gBAC9B,CAAC,IAAI,CAAC,mBAAmB,KAAK,SAAS;oBACrC,IAAI,CAAC,mBAAmB,KAAK,GAAG,CAAC,EACnC,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,qHAAqH,CACtH,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBACrB,IAAI;gBACJ,QAAQ,EAAE,KAAK;gBACf,SAAS,EAAE;oBACT,kBAAkB,EAAE;wBAClB,gBAAgB,EAAE,IAAI;wBACtB,KAAK,EAAE,IAAI,CAAC,KAAK;qBAClB;iBACF;gBACD,gBAAgB;aACjB,CAAC;QACJ,CAAC;QACD,MAAM,cAAc,GAAG,UAAU,CAC/B,IAAI,CAAC,cAAc,EACnB,mBAAmB,IAAI,kBAAkB,CAC1C,CAAC;QACF,aAAa,CACX,cAAc,EACd,CAAC,MAAM,CAAC,EACR,mBAAmB,IAAI,kBAAkB,CAC1C,CAAC;QACF,eAAe,CAAC,cAAc,CAAC,IAAI,EAAE,mBAAmB,IAAI,cAAc,CAAC,CAAC;QAC5E,aAAa,CACX,SAAS,EACT,CAAC,2BAA2B,CAAC,EAC7B,mBAAmB,IAAI,YAAY,CACpC,CAAC;QACF,MAAM,gBAAgB,GAAG,UAAU,CACjC,SAAS,CAAC,yBAAyB,EACnC,mBAAmB,IAAI,oBAAoB,CAC5C,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,KAAK,8BAA8B,CAAC;QACvD,aAAa,CACX,gBAAgB,EAChB,MAAM;YACJ,CAAC,CAAC,CAAC,MAAM,EAAE,qBAAqB,EAAE,YAAY,CAAC;YAC/C,CAAC,CAAC,CAAC,MAAM,EAAE,YAAY,CAAC,EAC1B,mBAAmB,IAAI,oBAAoB,CAC5C,CAAC;QACF,IACE,gBAAgB,CAAC,IAAI,KAAK,IAAI;YAC9B,gBAAgB,CAAC,UAAU,KAAK,KAAK,EACrC,CAAC;YACD,MAAM,IAAI,KAAK,CACb,wBAAwB,IAAI,iDAAiD,CAC9E,CAAC;QACJ,CAAC;QACD,IAAI,mBAA4B,CAAC;QACjC,IAAI,MAAM,EAAE,CAAC;YACX,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,mBAAmB,CAAC;gBACpD,gBAAgB,CAAC,mBAAmB,CAAC,MAAM,KAAK,CAAC,EACjD,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,0FAA0F,CAC3F,CAAC;YACJ,CAAC;YACD,MAAM,QAAQ,GAAG,UAAU,CACzB,gBAAgB,CAAC,mBAAmB,CAAC,CAAC,CAAC,EACvC,gCAAgC,CACjC,CAAC;YACF,aAAa,CACX,QAAQ,EACR,CAAC,aAAa,EAAE,MAAM,CAAC,EACvB,gCAAgC,CACjC,CAAC;YACF,MAAM,WAAW,GAAG,UAAU,CAC5B,QAAQ,CAAC,WAAW,EACpB,8BAA8B,CAC/B,CAAC;YACF,aAAa,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,EAAE,8BAA8B,CAAC,CAAC;YACtE,eAAe,CAAC,WAAW,CAAC,KAAK,EAAE,oCAAoC,CAAC,CAAC;YACzE,IAAI,QAAQ,CAAC,IAAI,KAAK,uBAAuB,EAAE,CAAC;gBAC9C,MAAM,IAAI,KAAK,CACb,mEAAmE,CACpE,CAAC;YACJ,CAAC;YACD,mBAAmB,GAAG;gBACpB;oBACE,WAAW,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;oBAC1B,IAAI,EAAE,uBAAuB;iBAC9B;aACF,CAAC;QACJ,CAAC;QACD,OAAO;YACL,IAAI;YACJ,cAAc,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;YAC5B,QAAQ,EAAE,KAAK;YACf,SAAS,EAAE;gBACT,yBAAyB,EAAE;oBACzB,IAAI;oBACJ,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC1C,UAAU,EAAE,KAAK;iBAClB;aACF;YACD,gBAAgB;SACjB,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,oBAAoB,CAAC,KAI7B;IACC,OAAO;QACL,gBAAgB,EAAE,oBAAoB;QACtC,WAAW,EAAE,YAAY;QACzB,mBAAmB,EAAE,KAAK,CAAC,YAAY;QACvC,WAAW,EAAE,KAAK,CAAC,KAAK;QACxB,eAAe,EAAE,KAAK,CAAC,SAAS;KACjC,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,UAAmB,EACnB,WAAmB,EACnB,QAA0C,EAC1C,KAAa;IAEb,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,EAAE,GAAG,KAAK,eAAe,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,UAAU,CACxB,MAAM,CAAC,kBAAkB,EACzB,GAAG,KAAK,kBAAkB,CAC3B,CAAC;IACF,IAAI,OAAO,CAAC,WAAW,KAAK,WAAW,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,gDAAgD,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,CAClB,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QAChC,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,EAAE,GAAG,KAAK,MAAM,CAAC,CAAC;QAC9C,OAAO,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ;YACjE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAU,CAAC;YACjC,CAAC,CAAC,EAAE,CAAC;IACT,CAAC,CAAC,CACH,CAAC;IACF,IACE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,EACxE,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,2CAA2C,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,KAO1B;IACC,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1B,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACxB,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAClD,KAAK,CAAC,GAAG,CAAC,IAAI,CACZ,IAAI,8BAAe,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CACjE;QACD,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,yCAA0B,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;KAC3E,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC;IAChC,MAAM,aAAa,GACjB,KAAK,EAAE,gBAAgB,KAAK,MAAM;QAChC,CAAC,CAAC,KAAK,CAAC,iBAAiB;QACzB,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;IAC9B,IACE,KAAK,EAAE,GAAG,KAAK,KAAK,CAAC,GAAG;QACxB,KAAK,CAAC,EAAE,KAAK,EAAE;QACf,KAAK,CAAC,IAAI,KAAK,IAAI;QACnB,CAAC,KAAK,CAAC,gBAAgB,KAAK,MAAM,IAAI,KAAK,CAAC,gBAAgB,KAAK,MAAM,CAAC;QACxE,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACjD,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC,IAAI,EAAE,CAAC,EAC3C,CAAC;QACD,MAAM,IAAI,KAAK,CACb,iGAAiG,CAClG,CAAC;IACJ,CAAC;IACD,aAAa,CAAC,UAAU,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC;IAC9E,OAAO,KAAK,CAAC,gBAAgB,CAAC;AAChC,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAC,KAMzC;IACC,IAAI,aAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,IAAI,CACjC,IAAI,6CAA8B,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CACrE,CAAC;QACF,aAAa,GAAG,MAAM,CAAC,oBAAoB,CAAC;IAC9C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IACE,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,KAAK;YAC5B,KAAK,YAAY,KAAK;YACtB,KAAK,CAAC,IAAI,KAAK,6BAA6B,EAC5C,CAAC;YACD,OAAO;QACT,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;QACjC,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CACb,qEAAqE,CACtE,CAAC;QACJ,CAAC;QACD,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,UAAU,CAAC,aAAa,EAAE,kCAAkC,CAAC,CAAC;IAC3E,IACE,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC,SAAS;QACpC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC;QAC1C,IAAI,CAAC,qBAAqB,CAAC,MAAM,KAAK,CAAC;QACvC,OAAO,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,KAAK,QAAQ;QACjD,CAAC,IAAI,MAAM,CACT,0CAA0C,KAAK,CAAC,SAAS,uCAAuC,KAAK,CAAC,IAAI,CAAC,KAAK,uCAAuC,CACxJ,CAAC,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACrC,IAAI,CAAC,wBAAwB,KAAK,KAAK;QACvC,IAAI,CAAC,QAAQ,KAAK,UAAU;QAC5B,IAAI,CAAC,OAAO,KAAK,UAAU,EAC3B,CAAC;QACD,MAAM,IAAI,KAAK,CACb,kFAAkF,CACnF,CAAC;IACJ,CAAC;IACD,MAAM,cAAc,GAAG,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAW,CAAC;IAC/D,MAAM,YAAY,GAAG,cAAc,CAAC,KAAK,CACvC,cAAc,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,EAAE,CAC3C,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,IAAI,CAC/C,IAAI,iDAAwB,CAAC;QAC3B,qBAAqB,EAAE,KAAK;QAC5B,kBAAkB,EAAE,YAAY;KACjC,CAAC,CACH,CAAC;IACF,MAAM,cAAc,GAAG,CAAC,SAAS,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM,CACvD,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,SAAS,KAAK,YAAY,CAC5D,CAAC;IACF,IACE,cAAc,CAAC,MAAM,KAAK,CAAC;QAC3B,cAAc,CAAC,CAAC,CAAC,EAAE,WAAW,KAAK,cAAc;QACjD,cAAc,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,GAAG,cAAc,IAAI;QAChD,cAAc,CAAC,CAAC,CAAC,EAAE,aAAa,KAAK,UAAU;QAC/C,cAAc,CAAC,CAAC,CAAC,EAAE,eAAe;YAChC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CACnE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAC7B,IAAI,CAAC,CAAC,CAAC,EACV,CAAC;QACD,MAAM,IAAI,KAAK,CACb,qGAAqG,CACtG,CAAC;IACJ,CAAC;IACD,MAAM,kBAAkB,GAAG;QACzB,EAAE,WAAW,EAAE,EAAE,EAAE;QACnB,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE;QAC3C,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;QACpC,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE;KACxC,CAAC;IACF,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC;QACnD,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YAChC,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,EAAE,2BAA2B,CAAC,CAAC;YAC7D,IAAI,aAAa,IAAI,KAAK,EAAE,CAAC;gBAC3B,aAAa,CAAC,KAAK,EAAE,CAAC,aAAa,CAAC,EAAE,4BAA4B,CAAC,CAAC;gBACpE,eAAe,CAAC,KAAK,CAAC,WAAW,EAAE,4BAA4B,CAAC,CAAC;gBACjE,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;YAC7B,CAAC;YACD,aAAa,CAAC,KAAK,EAAE,CAAC,cAAc,CAAC,EAAE,6BAA6B,CAAC,CAAC;YACtE,MAAM,MAAM,GAAG,UAAU,CACvB,KAAK,CAAC,YAAY,EAClB,6BAA6B,CAC9B,CAAC;YACF,aAAa,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,6BAA6B,CAAC,CAAC;YAC/D,OAAO,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QACjD,CAAC,CAAC;QACJ,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,aAAa,EAAE,2BAA2B,CAAC,CAAC;IAC3E,aAAa,CACX,MAAM,EACN,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAC9B,2BAA2B,CAC5B,CAAC;IACF,IACE,aAAa,CACX,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACnC,IAAA,qCAAY,EAAC,aAAa,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,CACxD,CACF;QACC,aAAa,CACX,CAAC,GAAG,kBAAkB,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAC3C,IAAA,qCAAY,EAAC,aAAa,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,CACxD,CACF;QACH,MAAM,CAAC,eAAe,KAAK,MAAM;QACjC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;QAC9B,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAC3B,CAAC;QACD,MAAM,IAAI,KAAK,CACb,oFAAoF,CACrF,CAAC;IACJ,CAAC;IACD,MAAM,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,uBAAuB,CAAC,CAAC;IAC9E,aAAa,CACX,cAAc,EACd,CAAC,UAAU,EAAE,YAAY,EAAE,aAAa,CAAC,EACzC,uBAAuB,CACxB,CAAC;IACF,IACE,cAAc,CAAC,QAAQ,KAAK,MAAM;QAClC,cAAc,CAAC,WAAW,KAAK,WAAW;QAC1C,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC;QACzC,cAAc,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;QACtC,aAAa,CAAC,cAAc,CAAC,UAAU,CAAC;YACtC,aAAa,CAAC,CAAC,EAAE,eAAe,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,EAC3D,CAAC;QACD,MAAM,IAAI,KAAK,CACb,kEAAkE,CACnE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,KAUtC;IACC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC1C,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CACb,yFAAyF,CAC1F,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1B,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACxB,MAAM,CAAC,YAAY,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACnD,KAAK,CAAC,GAAG,CAAC,IAAI,CACZ,IAAI,+BAAgB,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAClE;QACD,KAAK,CAAC,GAAG,CAAC,IAAI,CACZ,IAAI,yCAA0B,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CACjE;KACF,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC;IACnC,IACE,MAAM,EAAE,GAAG,KAAK,KAAK,CAAC,SAAS;QAC/B,MAAM,CAAC,EAAE,KAAK,EAAE;QAChB,MAAM,CAAC,IAAI,KAAK,IAAI;QACpB,CAAC,MAAM,CAAC,aAAa,EAAE,KAAK;QAC5B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,OAAO,CAAC;QAChE,MAAM,CAAC,gBAAgB,EAAE,wBAAwB,KAAK,IAAI;QAC1D,MAAM,CAAC,gBAAgB,CAAC,sBAAsB,KAAK,IAAI;QACvD,MAAM,CAAC,gBAAgB,CAAC,UAAU,KAAK,KAAK,CAAC,gBAAgB,EAC7D,CAAC;QACD,MAAM,IAAI,KAAK,CACb,kGAAkG,CACnG,CAAC;IACJ,CAAC;IACD,eAAe,CACb,MAAM,CAAC,aAAa,CAAC,KAAK,EAC1B,yCAAyC,CAC1C,CAAC;IACF,MAAM,YAAY,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IACjD,aAAa,CACX,UAAU,EACV,KAAK,CAAC,SAAS,EACf,YAAY,EACZ,oBAAoB,CACrB,CAAC;IACF,MAAM,UAAU,GAAG,mBAAmB,CAAC;QACrC,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE;QACzB,KAAK,EAAE,KAAK,CAAC,KAAK;KACnB,CAAC,CAAC;IACH,MAAM,kBAAkB,GACtB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC1C,IAAI,UAAU,CAAC,SAAS,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CACb,gFAAgF,CACjF,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;QACvE,MAAM,IAAI,KAAK,CACb,iGAAiG,CAClG,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,GAAG,CACpC,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE;QAC1C,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC;YAChC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,GAAG,EAAE,QAAQ;YACb,iBAAiB,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS;YACvC,iBAAiB,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS;YACvC,YAAY;YACZ,GAAG,EAAE,KAAK,CAAC,GAAG;SACf,CAAC,CAAC;QACH,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpC,CAAC,CAAC,CACH,CAAC;IACF,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,KAAK,MAAM,CAAC,EAAE,GAAG,CAAC;IAC5E,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,KAAK,MAAM,CAAC,EAAE,GAAG,CAAC;IAC5E,IACE,OAAO,CAAC,OAAO,CAAC,KAAK,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;QACzD,OAAO,CAAC,OAAO,CAAC,KAAK,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EACzD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,yEAAyE,CAC1E,CAAC;IACJ,CAAC;IACD,MAAM,aAAa,GAAG,IAAA,+BAAoB,EAAC,KAAK,CAAC,IAAI,EAAE;QACrD,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/B,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChC,CAAC,CAAC;IACH,IACE,2BAA2B,CAAC,UAAU,CAAC,KAAK,CAAC;QAC7C,2BAA2B,CAAC,aAAa,CAAC,EAC1C,CAAC;QACD,MAAM,IAAI,KAAK,CACb,8EAA8E,CAC/E,CAAC;IACJ,CAAC;IACD,MAAM,0BAA0B,CAAC;QAC/B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,yBAAyB,CAAC,KAIlC;IACC,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IACjD,OAAO,CACL,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,OAAO;QAChC,KAAK,CAAC,QAAQ,KAAK,OAAO,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,EAAE,CACzD,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,KAMlC;IACC,MAAM,CAAC,YAAY,EAAE,cAAc,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1E,MAAM,UAAU,GACd,KAAK,CAAC,IAAI,KAAK,gBAAgB;QAC7B,CAAC,CAAC,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,kBAAkB;QAC7E,CAAC,CAAC,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,YAAY,EAAE,CAAC;IACjF,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,IAAI,CAClC,IAAI,wCAAyB,CAAC;QAC5B,QAAQ,EAAE,GAAG;QACb,cAAc,EAAE,UAAU;QAC1B,KAAK,EAAE,YAAY;QACnB,UAAU,EAAE;YACV,OAAO,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC;YAC/C,SAAS,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC;SAClD;QACD,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC,CACH,CAAC;IACF,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE;QAChE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,OAAO,IAAI,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CACzB,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,sBAAsB,CAC7D,EAAE,KAAK,CAAC;QACT,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC;QAC9C,OAAO,CACL,MAAM,CAAC,MAAM,KAAK,OAAO;YACzB,MAAM,CAAC,OAAO,EAAE,MAAM,KAAK,KAAK,CAAC,QAAQ,CAAC,MAAM;YAChD,MAAM,CAAC,OAAO,CAAC,GAAG,KAAK,KAAK,CAAC,QAAQ,CAAC,IAAI;YAC1C,MAAM,KAAK,KAAK,CAAC,QAAQ,CAAC,MAAM;YAChC,SAAS,KAAK,SAAS;YACvB,IAAI,CAAC,GAAG,CAAC,SAAS,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,IAAI,MAAM;YACnD,CAAC,KAAK,CAAC,IAAI,KAAK,gBAAgB;gBAC9B,CAAC,CAAC,MAAM,CAAC,uBAAuB,KAAK,SAAS;gBAC9C,CAAC,CAAC,yBAAyB,CAAC;oBACxB,KAAK,EAAE,YAAY;oBACnB,QAAQ,EAAE,MAAM,CAAC,uBAAuB;oBACxC,OAAO,EAAE,cAAc;iBACxB,CAAC,CAAC,CACR,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,cAAc,KAAK,CAAC,IAAI,2EAA2E,CACpG,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,KAW/B;IACC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC1C,KAAK,CAAC,GAAG,CAAC,IAAI,CACZ,IAAI,wCAAyB,CAAC;YAC5B,QAAQ,EAAE,GAAG;YACb,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,KAAK,EAAE,YAAY;YACnB,UAAU,EAAE;gBACV,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,SAAS,EAAE,KAAK,CAAC,SAAS;aAC3B;YACD,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC,CACH;QACD,KAAK,CAAC,UAAU,CAAC,IAAI,CACnB,IAAI,wCAAoB,CAAC;YACvB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,iBAAiB,EAAE;gBACjB;oBACE,EAAE,EAAE,aAAa;oBACjB,UAAU,EAAE;wBACV,MAAM,EAAE;4BACN,UAAU,EAAE;gCACV,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,cAAc,EAAE;gCAC7C,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,gBAAgB,EAAE;6BAClD;4BACD,UAAU,EAAE,iBAAiB;4BAC7B,SAAS,EAAE,WAAW;yBACvB;wBACD,MAAM,EAAE,EAAE;wBACV,IAAI,EAAE,KAAK;qBACZ;oBACD,UAAU,EAAE,IAAI;iBACjB;aACF;YACD,MAAM,EAAE,qBAAqB;YAC7B,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC,CACH;KACF,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,CAAC,iBAAiB,EAAE,IAAI,CAC3C,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,aAAa,CAC9C,CAAC;IACF,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE;QACtE,MAAM,KAAK,GAAG,MAAM,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC;QACtC,OAAO,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ;YAC3C,CAAC,CAAC;gBACE;oBACE,IAAI,EAAE,iBAAiB;oBACvB,SAAS,EAAE,WAAW;oBACtB,cAAc,EAAE,KAAK,CAAC,cAAc;oBACpC,SAAS;oBACT,KAAK;oBACL,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;iBACzC;aACF;YACH,CAAC,CAAC,EAAE,CAAC;IACT,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;QACjE,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAChD,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,kBAAkB;YACjD,MAAM,CAAC,KAAK,KAAK,KAAK,CAAC,MAAM,CAChC,CAAC;QACF,OAAO,MAAM,CAAC,SAAS;YACrB,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;YACjC,MAAM,CAAC,OAAO,EAAE,MAAM,KAAK,KAAK;YAChC,MAAM,CAAC,OAAO,CAAC,GAAG,KAAK,KAAK,CAAC,SAAS;YACtC,YAAY;YACZ,CAAC,CAAC;gBACE;oBACE,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,YAAY,EAAE,KAAK,CAAC,YAAY;oBAChC,MAAM,EAAE,KAAK;oBACb,cAAc,EAAE,KAAK,CAAC,cAAc;oBACpC,QAAQ,EAAE,wDAAyB;oBACnC,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,GAAG,EAAE,KAAK,CAAC,SAAS;iBACrB;aACF;YACH,CAAC,CAAC,EAAE,CAAC;IACT,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,iBAAiB,CACxB,QAAiB,EACjB,oBAA4B,EAC5B,SAAyC,EACzC,WAAmB;IAEnB,MAAM,SAAS,GAAG,QAAmC,CAAC;IACtD,MAAM,MAAM,GAAG,SAAS,CAAC,MAAiC,CAAC;IAC3D,OAAO;QACL,GAAG,SAAS;QACZ,WAAW;QACX,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,oBAAoB,EAAE,SAAS,EAAE;KACvD,CAAC;AACJ,CAAC;AAED,SAAgB,gCAAgC,CAC9C,eAA+C,EAAE;IAEjD,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;QAChC,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,YAAY,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC;YAC5D,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,OAAO,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,IAAA,mCAAwB,EACrC,eAAe,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,WAAW,CAAC,EAAE,mBAAmB,CAAC,CAC9D,CAAC;YACF,MAAM,iBAAiB,GAAG,UAAU,CAClC,eAAe,CACb,IAAA,gBAAI,EAAC,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,EAClC,oBAAoB,CACrB,EACD,oBAAoB,CACrB,CAAC;YACF,MAAM,SAAS,GAAG,iBAAiB,CAAC,IAAI,CAAC;YACzC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBACxE,MAAM,IAAI,KAAK,CACb,kFAAkF,CACnF,CAAC;YACJ,CAAC;YACD,MAAM,eAAe,GAAG,IAAA,wCAA6B,EAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACpE,IAAI,eAAe,CAAC,iBAAiB,KAAK,MAAM,CAAC,iBAAiB,EAAE,CAAC;gBACnE,MAAM,IAAI,KAAK,CACb,oFAAoF,CACrF,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,GAAG,IAAA,mCAAwB,EAAC,eAAe,CAAC,iBAAiB,CAAC,CAAC;YAC1E,MAAM,SAAS,GAAG,IAAA,8CAAmC,EACnD,eAAe,CAAC,iBAAiB,EACjC,eAAe,CAAC,kBAAkB,EAClC,KAAK,CACN,CAAC;YACF,MAAM,MAAM,GAAG,IAAA,qCAA0B,EACvC,eAAe,CAAC,gBAAgB,CACjC,CAAC;YACF,KAAK,MAAM,SAAS,IAAI;gBACtB,WAAW,CAAC,UAAU,EAAE,IAAI,EAAE;gBAC9B,WAAW,CAAC,kBAAkB,EAAE,IAAI,EAAE;aACvC,EAAE,CAAC;gBACF,IAAI,SAAS,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;oBACtC,MAAM,IAAI,KAAK,CACb,uCAAuC,SAAS,6CAA6C,MAAM,GAAG,CACvG,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;YAC7C,MAAM,eAAe,GAAG,IAAA,uCAA4B,EAAC;gBACnD,SAAS;gBACT,SAAS;gBACT,MAAM;gBACN,KAAK;aACN,CAAC,CAAC,iBAAiB,CAAC;YACrB,MAAM,iBAAiB,GAAG,IAAA,kCAAuB,EAAC,MAAM,CAAC,CAAC;YAC1D,MAAM,IAAI,GAAG,IAAA,mCAAwB,EAAC;gBACpC,MAAM;gBACN,SAAS,EAAE,IAAI;gBACf,KAAK;aACN,CAAC,CAAC;YACH,MAAM,YAAY,GAAG,IAAA,gBAAI,EAAC,IAAI,EAAE,aAAa,CAAC,CAAC;YAC/C,MAAM,gBAAgB,GAAG,eAAe,CACtC,YAAY,EACZ,0BAA0B,CAC3B,CAAC;YACF,MAAM,IAAI,GAAG,IAAA,4CAAiC,EAAC;gBAC7C,QAAQ,EAAE,gBAAgB;gBAC1B,MAAM;aACP,CAAC,CAAC;YACH,IACE,IAAI,CAAC,KAAK,KAAK,KAAK;gBACpB,IAAI,CAAC,SAAS,KAAK,SAAS;gBAC5B,IAAI,CAAC,MAAM,KAAK,MAAM;gBACtB,IAAI,CAAC,iBAAiB,KAAK,eAAe;gBAC1C,IAAI,CAAC,SAAS,KAAK,SAAS;gBAC5B,IAAI,CAAC,iBAAiB,KAAK,iBAAiB,EAC5C,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,gIAAgI,CACjI,CAAC;YACJ,CAAC;YACD,MAAM,mBAAmB,GAAG,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;YACvE,IACE,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC,OAAO,EAAE,CAAC;gBAC/C,IAAI,CAAC,SAAS,GAAG,mBAAmB,CAAC,OAAO,EAAE;gBAC9C,IAAI,CAAC,WAAW,GAAG,mBAAmB,CAAC,OAAO,EAAE;gBAChD,mBAAmB,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,WAAW;oBAC9C,0BAA0B,EAC5B,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,mFAAmF,CACpF,CAAC;YACJ,CAAC;YACD,MAAM,WAAW,GAAG,IAAA,gBAAI,EAAC,IAAI,EAAE,YAAY,CAAC,CAAC;YAC7C,MAAM,eAAe,GAAG,IAAA,8CAAmC,EACzD,eAAe,CAAC,WAAW,EAAE,uCAAuC,CAAC,CACtE,CAAC;YACF,IAAI,eAAe,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CACb,0GAA0G,CAC3G,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,GAAG,kBAAkB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACjD,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YACtD,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;YACnD,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,qCAAwB,CAAC,EAAE,CAAC,CAAC,CAAC;YACtE,IACE,QAAQ,CAAC,OAAO,KAAK,SAAS;gBAC9B,OAAO,QAAQ,CAAC,GAAG,KAAK,QAAQ;gBAChC,CAAC,IAAA,2CAA6B,EAAC,SAAS,EAAE,QAAQ,CAAC,GAAG,EAAE,eAAe,CAAC,EACxE,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,mGAAmG,CACpG,CAAC;YACJ,CAAC;YACD,MAAM,0BAA0B,GAAG,IAAA,wDAAyB,EAAC,KAAK,CAAC,CAAC;YACpE,MAAM,CAAC,EAAE,gBAAgB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBAC7C,4BAA4B,CAAC;oBAC3B,SAAS;oBACT,UAAU,EAAE,GAAG,CAAC,UAAU;oBAC1B,cAAc,EAAE,IAAI,CAAC,cAAc;oBACnC,SAAS;oBACT,SAAS,EAAE,GAAG,CAAC,QAAQ;oBACvB,KAAK;oBACL,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,SAAS;iBACV,CAAC;gBACF,uBAAuB,CAAC;oBACtB,SAAS;oBACT,cAAc,EAAE,GAAG,CAAC,cAAc;oBAClC,IAAI;oBACJ,YAAY,EAAE,IAAA,gCAAqB,EAAC,MAAM,CAAC;oBAC3C,KAAK;oBACL,GAAG,EAAE,GAAG,CAAC,GAAG;oBACZ,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,gBAAgB,EAAE,0BAA0B;oBAC5C,SAAS;iBACV,CAAC;aACH,CAAC,CAAC;YACH,MAAM,OAAO,CAAC,GAAG,CAAC;gBAChB,mBAAmB,CAAC;oBAClB,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,WAA6C;oBACnE,KAAK;oBACL,IAAI,EAAE,SAAS;oBACf,GAAG,EAAE,GAAG,CAAC,GAAG;oBACZ,SAAS,EAAE,IAAI,CAAC,SAAS;iBAC1B,CAAC;gBACF,mBAAmB,CAAC;oBAClB,QAAQ,EAAE,IAAI,CAAC,MAAM;yBAClB,cAAgD;oBACnD,KAAK;oBACL,IAAI,EAAE,gBAAgB;oBACtB,GAAG,EAAE,GAAG,CAAC,GAAG;oBACZ,SAAS,EAAE,IAAI,CAAC,SAAS;iBAC1B,CAAC;aACH,CAAC,CAAC;YACH,MAAM,YAAY,GAAG,YAAY,CAAC,KAAK,IAAI,KAAK,CAAC;YACjD,MAAM,gBAAgB,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE;gBAC/C,KAAK,EAAE,UAAU;gBACjB,OAAO,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE;gBACxC,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC;aAChD,CAAC,CAAC;YACH,MAAM,oBAAoB,GAAG,gBAAgB,CAAC,MAAM,CAAC;YACrD,MAAM,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;YACtC,IAAI,oBAAoB,GAAG,GAAG,IAAI,oBAAoB,GAAG,GAAG,EAAE,CAAC;gBAC7D,MAAM,IAAI,KAAK,CACb,kEAAkE,oBAAoB,8BAA8B,CACrH,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,GAAG,CACZ,YAAY,CAAC,WAAW,IAAI,CAAC,GAAG,EAAE,CAAC,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CACpE,EAAE,CAAC;YACJ,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3C,MAAM,IAAI,KAAK,CACb,8FAA8F,CAC/F,CAAC;YACJ,CAAC;YACD,MAAM,SAAS,GAAG,MAAM,CACtB,YAAY,CAAC,gBAAgB,IAAI,wDAAyB,CAC3D,CAAC;gBACA,YAAY,EAAE;oBACZ,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACtD,OAAO,EAAE,CAAC,EACR,OAAO,EACP,YAAY,EAAE,oBAAoB,EAClC,cAAc,EACd,QAAQ,EACR,SAAS,EACT,gBAAgB,EAAE,wBAAwB,GAC3C,EAAE,EAAE;wBACH,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;wBAC3C,IAAI,wBAAwB,KAAK,gBAAgB,EAAE,CAAC;4BAClD,MAAM,IAAI,KAAK,CACb,+FAA+F,CAChG,CAAC;wBACJ,CAAC;wBACD,IAAI,YAAY,CAAC,MAAM,CAAC,KAAK,oBAAoB,EAAE,CAAC;4BAClD,MAAM,IAAI,KAAK,CACb,4EAA4E,CAC7E,CAAC;wBACJ,CAAC;wBACD,OAAO,gBAAgB,CAAC;4BACtB,UAAU,EAAE,GAAG,CAAC,UAAU;4BAC1B,OAAO;4BACP,MAAM;4BACN,YAAY,EAAE,oBAAoB;4BAClC,SAAS,EAAE,GAAG,CAAC,QAAQ;4BACvB,cAAc;4BACd,SAAS;4BACT,GAAG,EAAE,GAAG,CAAC,GAAG;4BACZ,SAAS,EAAE,IAAI,CAAC,SAAS;4BACzB,gBAAgB,EAAE,wBAAwB;yBAC3C,CAAC,CAAC;oBACL,CAAC;oBACD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;wBAC1B,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;wBAC3C,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE;4BACvC,KAAK,EAAE,UAAU;4BACjB,OAAO,EAAE;gCACP,eAAe,EAAE,UAAU;gCAC3B,CAAC,kBAAkB,CAAC,EAAE,MAAM;6BAC7B;4BACD,QAAQ,EAAE,QAAQ;4BAClB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC;yBAChD,CAAC,CAAC;wBACH,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;wBAC9B,OAAO;4BACL,YAAY,EAAE,YAAY,CAAC,MAAM,CAAC;4BAClC,MAAM,EAAE,QAAQ,CAAC,MAAM;yBACxB,CAAC;oBACJ,CAAC;oBACD,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC7D;gBACD,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,KAAK;gBACL,gBAAgB;aACjB,CAAC,CAAC;YACH,MAAM,WAAW,GAAG,CAClB,YAAY,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CACvC,EAAE,CAAC,WAAW,EAAE,CAAC;YAClB,MAAM,QAAQ,GAAG,iBAAiB,CAChC,gBAAgB,EAChB,oBAAoB,EACpB,SAAS,EACT,WAAW,CACZ,CAAC;YACF,MAAM,OAAO,GAAG,IAAA,2CAAgC,EAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;YACvE,gBAAgB,CAAC,YAAY,EAAE,QAAQ,EAAE,0BAA0B,CAAC,CAAC;YACrE,gBAAgB,CACd,WAAW,EACX,OAAO,EACP,uCAAuC,CACxC,CAAC;YACF,eAAM,CAAC,IAAI,CACT,IAAI,CAAC,SAAS,CAAC;gBACb,cAAc,EAAE,OAAO,CAAC,cAAc;gBACtC,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,YAAY,EAAE,SAAS,CAAC,YAAY;gBACpC,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,MAAM,EAAE,IAAI;gBACZ,KAAK,EAAE,OAAO,CAAC,KAAK;aACrB,CAAC,CACH,CAAC;YACF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,eAAM,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACrE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5B,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,QAAQ,GAAG,gCAAgC,EAAE,CAAC;AAEpD,kBAAe,QAAQ,CAAC"}
@@ -2,8 +2,23 @@
2
2
  "$schema": "https://json-schema.org/schema",
3
3
  "version": 2,
4
4
  "title": "Empire Builder Kit Router WAF rehearsal seal",
5
- "description": "Seal the fixed Foundation staging Router WAF live evidence path for the exact committed policy.",
5
+ "description": "Attest committed stage authority and the live CloudFront/Web ACL baseline, then run the bounded RateLimitPerIP probe and seal its exact marked WAF sample and metric.",
6
6
  "type": "object",
7
7
  "additionalProperties": false,
8
- "properties": {}
8
+ "properties": {
9
+ "probeUrl": {
10
+ "type": "string",
11
+ "minLength": 9,
12
+ "maxLength": 2048,
13
+ "pattern": "^https://[^/?#]+/[a-z0-9]+(?:-[a-z0-9]+)*/api/health$",
14
+ "description": "Exact HTTPS Router health URL in /<kebab-slice>/api/health form. The host must equal the retained CloudFront DomainName or an exact Alias."
15
+ },
16
+ "profile": {
17
+ "type": "string",
18
+ "minLength": 1,
19
+ "maxLength": 128,
20
+ "description": "Optional invocation-private AWS profile. Local runs may instead inherit the exact AWS_PROFILE; protected GitHub runs use configured OIDC credentials."
21
+ }
22
+ },
23
+ "required": ["probeUrl"]
9
24
  }
@@ -0,0 +1,42 @@
1
+ {
2
+ "$schema": "https://json-schema.org/schema",
3
+ "version": 2,
4
+ "title": "Empire Builder Kit generated secret initializer",
5
+ "description": "Report or explicitly initialize one declared machine-generated secret without accepting or returning its value.",
6
+ "type": "object",
7
+ "additionalProperties": false,
8
+ "properties": {
9
+ "apply": {
10
+ "type": "boolean",
11
+ "description": "Atomically create the exact declared generated secret and its first version. Defaults to report-only.",
12
+ "default": false
13
+ },
14
+ "expectedRoleArn": {
15
+ "type": "string",
16
+ "pattern": "^arn:(aws|aws-us-gov|aws-cn):iam::[0-9]{12}:role/[A-Za-z0-9+=,.@_/-]{1,512}$",
17
+ "description": "Exact committed stage deployment role expected for a local apply."
18
+ },
19
+ "logicalName": {
20
+ "type": "string",
21
+ "pattern": "^[A-Za-z][A-Za-z0-9]{0,63}$",
22
+ "description": "Exact generated secret declaration to initialize."
23
+ },
24
+ "profile": {
25
+ "type": "string",
26
+ "minLength": 1,
27
+ "maxLength": 128,
28
+ "description": "Optional exact AWS shared-config profile; required for a local apply."
29
+ },
30
+ "region": {
31
+ "type": "string",
32
+ "pattern": "^[a-z]{2}(-gov)?-[a-z]+-[0-9]$",
33
+ "description": "Exact committed AWS Region. Defaults to AWS_REGION or AWS_DEFAULT_REGION."
34
+ },
35
+ "stage": {
36
+ "type": "string",
37
+ "enum": ["development", "staging", "production"],
38
+ "description": "Active canonical stage that owns the generated secret."
39
+ }
40
+ },
41
+ "required": ["logicalName", "stage"]
42
+ }
@@ -0,0 +1,30 @@
1
+ import { type ExecutorContext, type PromiseExecutor } from '@nx/devkit';
2
+ import { type DeploymentProfile, type RepositoryOperatingPolicy } from '../../repository-policy/index.js';
3
+ import { type GeneratedSecretInitializationControlPlane, type GeneratedSecretInitializationResult, type SecretMetadataControlPlane } from '../../secrets/index.js';
4
+ export interface SecretInitializeExecutorOptions {
5
+ apply?: boolean;
6
+ expectedRoleArn?: string;
7
+ logicalName: string;
8
+ profile?: string;
9
+ region?: string;
10
+ stage: 'development' | 'production' | 'staging';
11
+ }
12
+ export interface SecretInitializeExecutorDependencies {
13
+ environment?: NodeJS.ProcessEnv;
14
+ initializationControlPlane?: GeneratedSecretInitializationControlPlane;
15
+ metadataControlPlane?: SecretMetadataControlPlane;
16
+ readJson?: (path: string) => Promise<unknown>;
17
+ readOperatingPolicy?: (workspaceRoot: string) => RepositoryOperatingPolicy;
18
+ readPrincipal?: (input: {
19
+ profile?: string;
20
+ region: string;
21
+ }) => Promise<{
22
+ accountId: string;
23
+ arn: string;
24
+ }>;
25
+ }
26
+ export type SecretInitializeApplyAuthority = 'local' | 'none' | 'workflow';
27
+ export declare function assertSecretInitializeApplyAuthority(stage: SecretInitializeExecutorOptions['stage'], apply: boolean, environment: NodeJS.ProcessEnv, deploymentProfile: DeploymentProfile): SecretInitializeApplyAuthority;
28
+ export declare function executeSecretInitialize(options: SecretInitializeExecutorOptions, context: ExecutorContext, dependencies?: SecretInitializeExecutorDependencies): Promise<GeneratedSecretInitializationResult>;
29
+ declare const executor: PromiseExecutor<SecretInitializeExecutorOptions>;
30
+ export default executor;
@@ -0,0 +1,229 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.assertSecretInitializeApplyAuthority = assertSecretInitializeApplyAuthority;
4
+ exports.executeSecretInitialize = executeSecretInitialize;
5
+ const client_sts_1 = require("@aws-sdk/client-sts");
6
+ const credential_providers_1 = require("@aws-sdk/credential-providers");
7
+ const devkit_1 = require("@nx/devkit");
8
+ const node_path_1 = require("node:path");
9
+ const index_js_1 = require("../../aws-authority/index.js");
10
+ const identity_js_1 = require("../../aws/identity.js");
11
+ const index_js_2 = require("../../repository-policy/index.js");
12
+ const index_js_3 = require("../../secrets/index.js");
13
+ const generated_aws_control_plane_js_1 = require("../../secrets/generated-aws-control-plane.js");
14
+ const secret_preflight_js_1 = require("../sst-lifecycle/secret-preflight.js");
15
+ const allowedOptionKeys = new Set([
16
+ 'apply',
17
+ 'expectedRoleArn',
18
+ 'logicalName',
19
+ 'profile',
20
+ 'region',
21
+ 'stage',
22
+ ]);
23
+ const logicalNamePattern = /^[A-Za-z][A-Za-z0-9]{0,63}$/;
24
+ const roleArnPattern = /^arn:(aws|aws-us-gov|aws-cn):iam::\d{12}:role\/[A-Za-z0-9+=,.@_/-]{1,512}$/;
25
+ function partitionForRegion(region) {
26
+ if (region.startsWith('cn-'))
27
+ return 'aws-cn';
28
+ if (region.startsWith('us-gov-'))
29
+ return 'aws-us-gov';
30
+ return 'aws';
31
+ }
32
+ function assertOptions(options) {
33
+ if (typeof options !== 'object' ||
34
+ options === null ||
35
+ Object.keys(options).some((key) => !allowedOptionKeys.has(key)) ||
36
+ (options.apply !== undefined && typeof options.apply !== 'boolean') ||
37
+ typeof options.logicalName !== 'string' ||
38
+ !logicalNamePattern.test(options.logicalName) ||
39
+ (options.profile !== undefined &&
40
+ (options.profile.trim() !== options.profile ||
41
+ options.profile.length === 0 ||
42
+ options.profile.length > 128)) ||
43
+ (options.region !== undefined &&
44
+ options.region.trim() !== options.region) ||
45
+ (options.expectedRoleArn !== undefined &&
46
+ (!roleArnPattern.test(options.expectedRoleArn) ||
47
+ options.expectedRoleArn.trim() !== options.expectedRoleArn))) {
48
+ throw new Error('Generated secret initialization accepts only one exact logical name and value-free authority options.');
49
+ }
50
+ }
51
+ function resolveSliceRoot(context) {
52
+ if (!context.projectName) {
53
+ throw new Error('Generated secret initialization requires the exact Nx Product Slice name.');
54
+ }
55
+ const configuredRoot = context.projectsConfigurations?.projects[context.projectName]?.root;
56
+ if (!configuredRoot) {
57
+ throw new Error(`Nx project ${context.projectName} does not declare a project root.`);
58
+ }
59
+ return (0, node_path_1.isAbsolute)(configuredRoot)
60
+ ? configuredRoot
61
+ : (0, node_path_1.join)(context.root, configuredRoot);
62
+ }
63
+ function assertSecretInitializeApplyAuthority(stage, apply, environment, deploymentProfile) {
64
+ if (!apply)
65
+ return 'none';
66
+ const repository = environment.GITHUB_REPOSITORY;
67
+ const branch = stage === 'production' ? 'main' : 'develop';
68
+ const ref = `refs/heads/${branch}`;
69
+ const expectedWorkflow = repository
70
+ ? `${repository}/.github/workflows/secret-initialize.yml@${ref}`
71
+ : undefined;
72
+ const exactWorkflow = environment.GITHUB_ACTIONS === 'true' &&
73
+ environment.GITHUB_EVENT_NAME === 'workflow_dispatch' &&
74
+ environment.GITHUB_REF === ref &&
75
+ Boolean(repository) &&
76
+ environment.GITHUB_WORKFLOW_REF === expectedWorkflow;
77
+ if (exactWorkflow) {
78
+ if (deploymentProfile === 'starter' ||
79
+ (0, index_js_2.requiresGithubDeployment)(deploymentProfile, stage)) {
80
+ return 'workflow';
81
+ }
82
+ throw new Error(`Generated secret initialization for ${stage} is local-only under the ${deploymentProfile} deployment profile.`);
83
+ }
84
+ if ((0, index_js_2.requiresGithubDeployment)(deploymentProfile, stage) ||
85
+ environment.GITHUB_ACTIONS === 'true') {
86
+ throw new Error(`Generated secret initialization for ${stage} must run from the exact ${branch}-branch Secret initialize workflow.`);
87
+ }
88
+ return 'local';
89
+ }
90
+ async function readCurrentPrincipal(input) {
91
+ const client = new client_sts_1.STSClient({
92
+ ...(input.profile
93
+ ? { credentials: (0, credential_providers_1.fromIni)({ profile: input.profile }) }
94
+ : {}),
95
+ endpoint: (0, identity_js_1.canonicalStsEndpoint)(input.region),
96
+ region: input.region,
97
+ });
98
+ const identity = await client.send(new client_sts_1.GetCallerIdentityCommand({}));
99
+ if (!identity.Account || !identity.Arn) {
100
+ throw new Error('Generated secret initialization principal is unavailable.');
101
+ }
102
+ return { accountId: identity.Account, arn: identity.Arn };
103
+ }
104
+ async function assertExactPrincipal(input) {
105
+ const profile = input.profile?.trim() ?? '';
106
+ if (input.authority === 'local' && profile === '') {
107
+ throw new Error('Local generated secret initialization requires one exact AWS profile.');
108
+ }
109
+ if (input.authority === 'workflow') {
110
+ if (input.environment.AWS_EXPECTED_ACCOUNT_ID !== input.accountId ||
111
+ input.environment.AWS_DEPLOY_ROLE_ARN !== input.expectedRoleArn ||
112
+ !/^\d+$/.test(input.environment.GITHUB_RUN_ID ?? '') ||
113
+ !/^\d+$/.test(input.environment.GITHUB_RUN_ATTEMPT ?? '')) {
114
+ throw new Error('Protected generated secret initialization requires the exact committed deployment role and workflow run identity.');
115
+ }
116
+ }
117
+ let principal;
118
+ try {
119
+ principal = await (input.readPrincipal ?? readCurrentPrincipal)({
120
+ ...(input.authority === 'local' ? { profile } : {}),
121
+ region: input.region,
122
+ });
123
+ }
124
+ catch {
125
+ throw new Error('Generated secret initialization could not authenticate its AWS principal.');
126
+ }
127
+ if (principal.accountId !== input.accountId ||
128
+ !(0, identity_js_1.matchesExpectedAssumedRoleArn)(input.accountId, principal.arn, input.expectedRoleArn)) {
129
+ throw new Error('Generated secret initialization is not running in the committed account as the exact temporary stage deployment role.');
130
+ }
131
+ if (input.authority === 'workflow') {
132
+ const expectedSession = `ebk-secret-initialize-${input.environment.GITHUB_RUN_ID}-${input.environment.GITHUB_RUN_ATTEMPT}`;
133
+ if (!principal.arn.endsWith(`/${expectedSession}`)) {
134
+ throw new Error('Protected generated secret initialization is not running as the exact reviewed workflow session.');
135
+ }
136
+ }
137
+ }
138
+ async function executeSecretInitialize(options, context, dependencies = {}) {
139
+ assertOptions(options);
140
+ const environment = dependencies.environment ?? process.env;
141
+ const policy = (dependencies.readOperatingPolicy ?? index_js_2.readRepositoryOperatingPolicy)(context.root);
142
+ if (!(0, index_js_2.isActiveDeploymentStage)(policy.deploymentProfile, options.stage)) {
143
+ throw new Error(`Generated secret initialization stage ${options.stage} is inactive for the ${policy.deploymentProfile} deployment profile.`);
144
+ }
145
+ const aws = (0, secret_preflight_js_1.resolveSecretAwsContext)(options, environment);
146
+ const region = (0, index_js_2.configuredDeploymentRegion)(policy.deploymentRegion);
147
+ if (aws.region !== region) {
148
+ throw new Error(`Generated secret initialization requires committed deployment Region ${region}.`);
149
+ }
150
+ const accountId = (0, index_js_2.configuredDeploymentAccountForStage)(policy.deploymentProfile, policy.deploymentAccounts, options.stage);
151
+ const expectedRoleArn = (0, index_js_1.createStageAuthorityIdentity)({
152
+ accountId,
153
+ partition: partitionForRegion(region),
154
+ region,
155
+ stage: options.stage,
156
+ }).deploymentRoleArn;
157
+ if (options.expectedRoleArn !== undefined &&
158
+ options.expectedRoleArn !== expectedRoleArn) {
159
+ throw new Error(`Generated secret initialization requires the exact committed ${options.stage} stage authority role ${expectedRoleArn}.`);
160
+ }
161
+ const apply = options.apply === true;
162
+ const authority = assertSecretInitializeApplyAuthority(options.stage, apply, environment, policy.deploymentProfile);
163
+ if (authority === 'local') {
164
+ if (options.expectedRoleArn !== expectedRoleArn) {
165
+ throw new Error(`Local generated secret initialization requires the exact committed ${options.stage} stage authority role ${expectedRoleArn}.`);
166
+ }
167
+ await assertExactPrincipal({
168
+ accountId,
169
+ authority,
170
+ environment,
171
+ expectedRoleArn,
172
+ ...(aws.profile ? { profile: aws.profile } : {}),
173
+ readPrincipal: dependencies.readPrincipal,
174
+ region,
175
+ });
176
+ }
177
+ else if (authority === 'workflow') {
178
+ if (options.profile !== undefined ||
179
+ options.expectedRoleArn !== undefined) {
180
+ throw new Error('Protected generated secret initialization uses only its exact OIDC workflow authority.');
181
+ }
182
+ await assertExactPrincipal({
183
+ accountId,
184
+ authority,
185
+ environment,
186
+ expectedRoleArn,
187
+ readPrincipal: dependencies.readPrincipal,
188
+ region,
189
+ });
190
+ }
191
+ const loaded = await (0, secret_preflight_js_1.loadSliceSecretMetadata)({
192
+ context,
193
+ cwd: resolveSliceRoot(context),
194
+ ...(dependencies.readJson ? { readJson: dependencies.readJson } : {}),
195
+ stage: options.stage,
196
+ });
197
+ const metadataControlPlane = dependencies.metadataControlPlane ?? (0, secret_preflight_js_1.createSecretMetadataControlPlane)(aws);
198
+ const initializationControlPlane = dependencies.initializationControlPlane ??
199
+ (0, generated_aws_control_plane_js_1.createAwsGeneratedSecretInitializationControlPlane)({
200
+ clientConfiguration: (0, secret_preflight_js_1.secretMetadataClientConfiguration)(aws),
201
+ });
202
+ return (0, index_js_3.runGeneratedSecretInitializer)({
203
+ declarations: loaded.declarations,
204
+ initializationControlPlane,
205
+ logicalName: options.logicalName,
206
+ metadataControlPlane,
207
+ mode: apply ? 'apply' : 'report',
208
+ scope: loaded.scope,
209
+ });
210
+ }
211
+ const executor = async (options, context) => {
212
+ try {
213
+ const result = await executeSecretInitialize(options, context);
214
+ devkit_1.logger.info(`[secret-initialize] ${result.mode} ${result.outcome}\n${JSON.stringify(result, null, 2)}`);
215
+ return {
216
+ success: result.outcome === 'applied' ||
217
+ result.outcome === 'reported' ||
218
+ result.outcome === 'unchanged',
219
+ };
220
+ }
221
+ catch (error) {
222
+ devkit_1.logger.error(error instanceof Error
223
+ ? error.message
224
+ : 'Generated secret initialization failed.');
225
+ return { success: false };
226
+ }
227
+ };
228
+ exports.default = executor;
229
+ //# sourceMappingURL=secret-initialize.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"secret-initialize.js","sourceRoot":"","sources":["../../../../../../packages/nx/src/executors/secret-initialize/secret-initialize.ts"],"names":[],"mappings":";;AAoHA,oFAuCC;AAkFD,0DAsGC;AAnVD,oDAA0E;AAC1E,wEAAwD;AACxD,uCAAgF;AAChF,yCAA6C;AAE7C,2DAA4E;AAC5E,uDAG+B;AAC/B,+DAQ0C;AAC1C,qDAKgC;AAChC,iGAAkH;AAClH,8EAK8C;AAyB9C,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,OAAO;IACP,iBAAiB;IACjB,aAAa;IACb,SAAS;IACT,QAAQ;IACR,OAAO;CACR,CAAC,CAAC;AACH,MAAM,kBAAkB,GAAG,6BAA6B,CAAC;AACzD,MAAM,cAAc,GAClB,4EAA4E,CAAC;AAE/E,SAAS,kBAAkB,CAAC,MAAc;IACxC,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC9C,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,YAAY,CAAC;IACtD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,OAAwC;IAC7D,IACE,OAAO,OAAO,KAAK,QAAQ;QAC3B,OAAO,KAAK,IAAI;QAChB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/D,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC;QACnE,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ;QACvC,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;QAC7C,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS;YAC5B,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,OAAO,CAAC,OAAO;gBACzC,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;gBAC5B,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;QAClC,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS;YAC3B,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,OAAO,CAAC,MAAM,CAAC;QAC3C,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS;YACpC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC;gBAC5C,OAAO,CAAC,eAAe,CAAC,IAAI,EAAE,KAAK,OAAO,CAAC,eAAe,CAAC,CAAC,EAChE,CAAC;QACD,MAAM,IAAI,KAAK,CACb,uGAAuG,CACxG,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAwB;IAChD,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,2EAA2E,CAC5E,CAAC;IACJ,CAAC;IACD,MAAM,cAAc,GAClB,OAAO,CAAC,sBAAsB,EAAE,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC;IACtE,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,cAAc,OAAO,CAAC,WAAW,mCAAmC,CACrE,CAAC;IACJ,CAAC;IACD,OAAO,IAAA,sBAAU,EAAC,cAAc,CAAC;QAC/B,CAAC,CAAC,cAAc;QAChB,CAAC,CAAC,IAAA,gBAAI,EAAC,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;AACzC,CAAC;AAED,SAAgB,oCAAoC,CAClD,KAA+C,EAC/C,KAAc,EACd,WAA8B,EAC9B,iBAAoC;IAEpC,IAAI,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,UAAU,GAAG,WAAW,CAAC,iBAAiB,CAAC;IACjD,MAAM,MAAM,GAAG,KAAK,KAAK,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3D,MAAM,GAAG,GAAG,cAAc,MAAM,EAAE,CAAC;IACnC,MAAM,gBAAgB,GAAG,UAAU;QACjC,CAAC,CAAC,GAAG,UAAU,4CAA4C,GAAG,EAAE;QAChE,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,aAAa,GACjB,WAAW,CAAC,cAAc,KAAK,MAAM;QACrC,WAAW,CAAC,iBAAiB,KAAK,mBAAmB;QACrD,WAAW,CAAC,UAAU,KAAK,GAAG;QAC9B,OAAO,CAAC,UAAU,CAAC;QACnB,WAAW,CAAC,mBAAmB,KAAK,gBAAgB,CAAC;IACvD,IAAI,aAAa,EAAE,CAAC;QAClB,IACE,iBAAiB,KAAK,SAAS;YAC/B,IAAA,mCAAwB,EAAC,iBAAiB,EAAE,KAAK,CAAC,EAClD,CAAC;YACD,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,MAAM,IAAI,KAAK,CACb,uCAAuC,KAAK,4BAA4B,iBAAiB,sBAAsB,CAChH,CAAC;IACJ,CAAC;IACD,IACE,IAAA,mCAAwB,EAAC,iBAAiB,EAAE,KAAK,CAAC;QAClD,WAAW,CAAC,cAAc,KAAK,MAAM,EACrC,CAAC;QACD,MAAM,IAAI,KAAK,CACb,uCAAuC,KAAK,4BAA4B,MAAM,qCAAqC,CACpH,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,KAGnC;IACC,MAAM,MAAM,GAAG,IAAI,sBAAS,CAAC;QAC3B,GAAG,CAAC,KAAK,CAAC,OAAO;YACf,CAAC,CAAC,EAAE,WAAW,EAAE,IAAA,8BAAO,EAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,EAAE;YACtD,CAAC,CAAC,EAAE,CAAC;QACP,QAAQ,EAAE,IAAA,kCAAoB,EAAC,KAAK,CAAC,MAAM,CAAC;QAC5C,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,qCAAwB,CAAC,EAAE,CAAC,CAAC,CAAC;IACrE,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CACb,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC;AAC5D,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,KAQnC;IACC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC5C,IAAI,KAAK,CAAC,SAAS,KAAK,OAAO,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CACb,uEAAuE,CACxE,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;QACnC,IACE,KAAK,CAAC,WAAW,CAAC,uBAAuB,KAAK,KAAK,CAAC,SAAS;YAC7D,KAAK,CAAC,WAAW,CAAC,mBAAmB,KAAK,KAAK,CAAC,eAAe;YAC/D,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,aAAa,IAAI,EAAE,CAAC;YACpD,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,kBAAkB,IAAI,EAAE,CAAC,EACzD,CAAC;YACD,MAAM,IAAI,KAAK,CACb,mHAAmH,CACpH,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,SAA6C,CAAC;IAClD,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,aAAa,IAAI,oBAAoB,CAAC,CAAC;YAC9D,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,2EAA2E,CAC5E,CAAC;IACJ,CAAC;IACD,IACE,SAAS,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;QACvC,CAAC,IAAA,2CAA6B,EAC5B,KAAK,CAAC,SAAS,EACf,SAAS,CAAC,GAAG,EACb,KAAK,CAAC,eAAe,CACtB,EACD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,uHAAuH,CACxH,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;QACnC,MAAM,eAAe,GAAG,yBAAyB,KAAK,CAAC,WAAW,CAAC,aAAa,IAAI,KAAK,CAAC,WAAW,CAAC,kBAAkB,EAAE,CAAC;QAC3H,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,eAAe,EAAE,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CACb,kGAAkG,CACnG,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,uBAAuB,CAC3C,OAAwC,EACxC,OAAwB,EACxB,eAAqD,EAAE;IAEvD,aAAa,CAAC,OAAO,CAAC,CAAC;IACvB,MAAM,WAAW,GAAG,YAAY,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC;IAC5D,MAAM,MAAM,GAAG,CACb,YAAY,CAAC,mBAAmB,IAAI,wCAA6B,CAClE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAChB,IAAI,CAAC,IAAA,kCAAuB,EAAC,MAAM,CAAC,iBAAiB,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CACb,yCAAyC,OAAO,CAAC,KAAK,wBAAwB,MAAM,CAAC,iBAAiB,sBAAsB,CAC7H,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,IAAA,6CAAuB,EAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,IAAA,qCAA0B,EAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACnE,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,wEAAwE,MAAM,GAAG,CAClF,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,IAAA,8CAAmC,EACnD,MAAM,CAAC,iBAAiB,EACxB,MAAM,CAAC,kBAAkB,EACzB,OAAO,CAAC,KAAK,CACd,CAAC;IACF,MAAM,eAAe,GAAG,IAAA,uCAA4B,EAAC;QACnD,SAAS;QACT,SAAS,EAAE,kBAAkB,CAAC,MAAM,CAAC;QACrC,MAAM;QACN,KAAK,EAAE,OAAO,CAAC,KAAK;KACrB,CAAC,CAAC,iBAAiB,CAAC;IACrB,IACE,OAAO,CAAC,eAAe,KAAK,SAAS;QACrC,OAAO,CAAC,eAAe,KAAK,eAAe,EAC3C,CAAC;QACD,MAAM,IAAI,KAAK,CACb,gEAAgE,OAAO,CAAC,KAAK,yBAAyB,eAAe,GAAG,CACzH,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC;IACrC,MAAM,SAAS,GAAG,oCAAoC,CACpD,OAAO,CAAC,KAAK,EACb,KAAK,EACL,WAAW,EACX,MAAM,CAAC,iBAAiB,CACzB,CAAC;IACF,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;QAC1B,IAAI,OAAO,CAAC,eAAe,KAAK,eAAe,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CACb,sEAAsE,OAAO,CAAC,KAAK,yBAAyB,eAAe,GAAG,CAC/H,CAAC;QACJ,CAAC;QACD,MAAM,oBAAoB,CAAC;YACzB,SAAS;YACT,SAAS;YACT,WAAW;YACX,eAAe;YACf,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChD,aAAa,EAAE,YAAY,CAAC,aAAa;YACzC,MAAM;SACP,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;QACpC,IACE,OAAO,CAAC,OAAO,KAAK,SAAS;YAC7B,OAAO,CAAC,eAAe,KAAK,SAAS,EACrC,CAAC;YACD,MAAM,IAAI,KAAK,CACb,wFAAwF,CACzF,CAAC;QACJ,CAAC;QACD,MAAM,oBAAoB,CAAC;YACzB,SAAS;YACT,SAAS;YACT,WAAW;YACX,eAAe;YACf,aAAa,EAAE,YAAY,CAAC,aAAa;YACzC,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,IAAA,6CAAuB,EAAC;QAC3C,OAAO;QACP,GAAG,EAAE,gBAAgB,CAAC,OAAO,CAAC;QAC9B,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,KAAK,EAAE,OAAO,CAAC,KAAK;KACrB,CAAC,CAAC;IACH,MAAM,oBAAoB,GACxB,YAAY,CAAC,oBAAoB,IAAI,IAAA,sDAAgC,EAAC,GAAG,CAAC,CAAC;IAC7E,MAAM,0BAA0B,GAC9B,YAAY,CAAC,0BAA0B;QACvC,IAAA,mFAAkD,EAAC;YACjD,mBAAmB,EAAE,IAAA,uDAAiC,EAAC,GAAG,CAAC;SAC5D,CAAC,CAAC;IACL,OAAO,IAAA,wCAA6B,EAAC;QACnC,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,0BAA0B;QAC1B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,oBAAoB;QACpB,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ;QAChC,KAAK,EAAE,MAAM,CAAC,KAAK;KACpB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,QAAQ,GAAqD,KAAK,EACtE,OAAO,EACP,OAAO,EACP,EAAE;IACF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC/D,eAAM,CAAC,IAAI,CACT,uBAAuB,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAC3F,CAAC;QACF,OAAO;YACL,OAAO,EACL,MAAM,CAAC,OAAO,KAAK,SAAS;gBAC5B,MAAM,CAAC,OAAO,KAAK,UAAU;gBAC7B,MAAM,CAAC,OAAO,KAAK,WAAW;SACjC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,eAAM,CAAC,KAAK,CACV,KAAK,YAAY,KAAK;YACpB,CAAC,CAAC,KAAK,CAAC,OAAO;YACf,CAAC,CAAC,yCAAyC,CAC9C,CAAC;QACF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;AACH,CAAC,CAAC;AAEF,kBAAe,QAAQ,CAAC"}
@@ -24,9 +24,10 @@ export interface SecretMetadataExecutorDependencies {
24
24
  type SecretMetadataApplyAuthority = 'none' | 'workflow' | 'local';
25
25
  export declare function assertSecretMetadataApplyAuthority(stage: SecretMetadataExecutorOptions['stage'], apply: boolean, environment?: NodeJS.ProcessEnv, deploymentProfile?: DeploymentProfile): SecretMetadataApplyAuthority;
26
26
  export declare function assertProtectedSecretMetadataPrincipal(input: {
27
+ accountId: string;
27
28
  apply: boolean;
28
29
  environment: NodeJS.ProcessEnv;
29
- profile?: string;
30
+ expectedRoleArn: string;
30
31
  readPrincipal?: SecretMetadataExecutorDependencies['readPrincipal'];
31
32
  region: string;
32
33
  stage: SecretMetadataExecutorOptions['stage'];
@@ -9,16 +9,16 @@ const client_sts_1 = require("@aws-sdk/client-sts");
9
9
  const credential_providers_1 = require("@aws-sdk/credential-providers");
10
10
  const node_path_1 = require("node:path");
11
11
  const index_js_1 = require("../../secrets/index.js");
12
+ const index_js_2 = require("../../aws-authority/index.js");
12
13
  const secret_preflight_js_1 = require("../sst-lifecycle/secret-preflight.js");
13
- const index_js_2 = require("../../repository-policy/index.js");
14
- const infrastructure_plan_js_1 = require("../infrastructure-plan/infrastructure-plan.js");
15
- const protectedStages = new Set(['staging', 'production']);
14
+ const index_js_3 = require("../../repository-policy/index.js");
15
+ const identity_js_1 = require("../../aws/identity.js");
16
16
  const ROLE = /^arn:(aws|aws-us-gov|aws-cn):iam::\d{12}:role\/[A-Za-z0-9+=,.@_/-]{1,512}$/;
17
17
  function assertSecretMetadataApplyAuthority(stage, apply, environment = process.env, deploymentProfile = 'fully-isolated') {
18
- if (!apply || !protectedStages.has(stage))
18
+ if (!apply)
19
19
  return 'none';
20
20
  const repository = environment.GITHUB_REPOSITORY;
21
- const branch = stage === 'staging' ? 'develop' : 'main';
21
+ const branch = stage === 'production' ? 'main' : 'develop';
22
22
  const ref = `refs/heads/${branch}`;
23
23
  const expectedWorkflow = repository
24
24
  ? `${repository}/.github/workflows/secret-metadata.yml@${ref}`
@@ -30,12 +30,19 @@ function assertSecretMetadataApplyAuthority(stage, apply, environment = process.
30
30
  environment.GITHUB_WORKFLOW_REF === expectedWorkflow;
31
31
  if (exactWorkflow)
32
32
  return 'workflow';
33
- if ((0, index_js_2.requiresGithubDeployment)(deploymentProfile, stage) ||
33
+ if ((0, index_js_3.requiresGithubDeployment)(deploymentProfile, stage) ||
34
34
  environment.GITHUB_ACTIONS === 'true') {
35
35
  throw new Error(`Protected ${stage} secret metadata apply must run from the ${branch}-branch Secret metadata workflow.`);
36
36
  }
37
37
  return 'local';
38
38
  }
39
+ function partitionForRegion(region) {
40
+ if (region.startsWith('cn-'))
41
+ return 'aws-cn';
42
+ if (region.startsWith('us-gov-'))
43
+ return 'aws-us-gov';
44
+ return 'aws';
45
+ }
39
46
  async function readCurrentPrincipal(input) {
40
47
  const client = new client_sts_1.STSClient({
41
48
  ...(input.profile
@@ -43,6 +50,7 @@ async function readCurrentPrincipal(input) {
43
50
  credentials: (0, credential_providers_1.fromIni)({ profile: input.profile }),
44
51
  }
45
52
  : {}),
53
+ endpoint: (0, identity_js_1.canonicalStsEndpoint)(input.region),
46
54
  region: input.region,
47
55
  });
48
56
  const identity = await client.send(new client_sts_1.GetCallerIdentityCommand({}));
@@ -52,33 +60,32 @@ async function readCurrentPrincipal(input) {
52
60
  return { accountId: identity.Account, arn: identity.Arn };
53
61
  }
54
62
  async function assertProtectedSecretMetadataPrincipal(input) {
55
- if (!input.apply || !protectedStages.has(input.stage))
63
+ if (!input.apply)
56
64
  return;
57
65
  const expectedAccount = input.environment.AWS_EXPECTED_ACCOUNT_ID;
58
- const expectedRoleArn = input.environment.AWS_DEPLOY_ROLE_ARN;
66
+ const configuredRoleArn = input.environment.AWS_DEPLOY_ROLE_ARN;
59
67
  const runId = input.environment.GITHUB_RUN_ID;
60
68
  const runAttempt = input.environment.GITHUB_RUN_ATTEMPT;
61
- const role = /^(arn:(aws|aws-us-gov|aws-cn):iam::(\d{12}):role\/([A-Za-z0-9+=,.@_-]{1,64}))$/.exec(expectedRoleArn ?? '');
62
- if (!role ||
63
- role[1] !== expectedRoleArn ||
64
- role[3] !== expectedAccount ||
69
+ if (!ROLE.test(input.expectedRoleArn) ||
70
+ expectedAccount !== input.accountId ||
71
+ configuredRoleArn !== input.expectedRoleArn ||
65
72
  !/^\d+$/.test(runId ?? '') ||
66
73
  !/^\d+$/.test(runAttempt ?? '')) {
67
- throw new Error('Protected secret metadata apply requires one exact pathless deployment role and workflow run identity.');
74
+ throw new Error('Protected secret metadata apply requires the exact committed stage deployment role and workflow run identity.');
68
75
  }
69
76
  let principal;
70
77
  try {
71
78
  principal = await (input.readPrincipal ?? readCurrentPrincipal)({
72
- ...(input.profile ? { profile: input.profile } : {}),
73
79
  region: input.region,
74
80
  });
75
81
  }
76
82
  catch {
77
83
  throw new Error('Protected secret metadata apply could not authenticate its AWS principal.');
78
84
  }
79
- const expectedPrincipalArn = `arn:${role[2]}:sts::${expectedAccount}:assumed-role/${role[4]}/ebk-secret-metadata-${runId}-${runAttempt}`;
80
- if (principal.accountId !== expectedAccount ||
81
- principal.arn !== expectedPrincipalArn) {
85
+ const expectedSession = `ebk-secret-metadata-${runId}-${runAttempt}`;
86
+ if (principal.accountId !== input.accountId ||
87
+ !(0, identity_js_1.matchesExpectedAssumedRoleArn)(input.accountId, principal.arn, input.expectedRoleArn) ||
88
+ !principal.arn.endsWith(`/${expectedSession}`)) {
82
89
  throw new Error('Protected secret metadata apply is not running as the exact reviewed deployment-role session.');
83
90
  }
84
91
  }
@@ -99,7 +106,7 @@ async function assertLocalSecretMetadataPrincipal(input) {
99
106
  throw new Error('Local protected secret metadata apply could not authenticate its AWS principal.');
100
107
  }
101
108
  if (principal.accountId !== input.accountId ||
102
- !(0, infrastructure_plan_js_1.matchesExpectedAssumedRoleArn)(input.accountId, principal.arn, expectedRoleArn)) {
109
+ !(0, identity_js_1.matchesExpectedAssumedRoleArn)(input.accountId, principal.arn, expectedRoleArn)) {
103
110
  throw new Error('Local protected secret metadata apply is not running in the committed account as the exact temporary assumed role.');
104
111
  }
105
112
  }
@@ -118,36 +125,62 @@ function resolveSliceRoot(context) {
118
125
  async function executeSecretMetadata(options, context, dependencies = {}) {
119
126
  const environment = dependencies.environment ?? process.env;
120
127
  const apply = options.apply === true;
121
- const operatingPolicy = apply && protectedStages.has(options.stage)
122
- ? (dependencies.readOperatingPolicy ?? index_js_2.readRepositoryOperatingPolicy)(context.root)
128
+ const operatingPolicy = apply
129
+ ? (dependencies.readOperatingPolicy ?? index_js_3.readRepositoryOperatingPolicy)(context.root)
123
130
  : undefined;
124
131
  const authority = assertSecretMetadataApplyAuthority(options.stage, apply, environment, operatingPolicy?.deploymentProfile);
125
132
  const aws = (0, secret_preflight_js_1.resolveSecretAwsContext)(options, environment);
133
+ let accountId;
134
+ let expectedRoleArn;
135
+ if (apply) {
136
+ if (!operatingPolicy) {
137
+ throw new Error('Secret metadata operating policy is unavailable.');
138
+ }
139
+ if (!(0, index_js_3.isActiveDeploymentStage)(operatingPolicy.deploymentProfile, options.stage)) {
140
+ throw new Error(`Secret metadata stage ${options.stage} is inactive for the ${operatingPolicy.deploymentProfile} deployment profile.`);
141
+ }
142
+ const region = (0, index_js_3.configuredDeploymentRegion)(operatingPolicy.deploymentRegion);
143
+ if (aws.region !== region) {
144
+ throw new Error(`Secret metadata apply requires committed deployment Region ${region}.`);
145
+ }
146
+ accountId = (0, index_js_3.configuredDeploymentAccountForStage)(operatingPolicy.deploymentProfile, operatingPolicy.deploymentAccounts, options.stage);
147
+ expectedRoleArn = (0, index_js_2.createStageAuthorityIdentity)({
148
+ accountId,
149
+ partition: partitionForRegion(region),
150
+ region,
151
+ stage: options.stage,
152
+ }).deploymentRoleArn;
153
+ }
126
154
  if (authority === 'workflow') {
155
+ if (accountId === undefined ||
156
+ expectedRoleArn === undefined ||
157
+ options.profile !== undefined ||
158
+ options.expectedRoleArn !== undefined) {
159
+ throw new Error('Protected secret metadata apply uses only its exact OIDC workflow authority.');
160
+ }
127
161
  await assertProtectedSecretMetadataPrincipal({
162
+ accountId,
128
163
  apply,
129
164
  environment,
130
- ...(aws.profile ? { profile: aws.profile } : {}),
165
+ expectedRoleArn,
131
166
  readPrincipal: dependencies.readPrincipal,
132
167
  region: aws.region,
133
168
  stage: options.stage,
134
169
  });
135
170
  }
136
171
  else if (authority === 'local') {
137
- if (!operatingPolicy) {
172
+ if (accountId === undefined || expectedRoleArn === undefined) {
138
173
  throw new Error('Local secret metadata operating policy is unavailable.');
139
174
  }
140
- const accounts = (0, index_js_2.configuredDeploymentAccountTopology)(operatingPolicy.deploymentProfile, operatingPolicy.deploymentAccounts);
141
- const region = (0, index_js_2.configuredDeploymentRegion)(operatingPolicy.deploymentRegion);
142
- if (aws.region !== region) {
143
- throw new Error(`Local protected secret metadata apply requires committed deployment Region ${region}.`);
175
+ if (options.expectedRoleArn !== expectedRoleArn) {
176
+ throw new Error(`Local secret metadata apply requires the exact committed ${options.stage} stage authority role ${expectedRoleArn}.`);
144
177
  }
145
178
  await assertLocalSecretMetadataPrincipal({
146
- accountId: accounts[options.stage],
147
- expectedRoleArn: options.expectedRoleArn,
179
+ accountId,
180
+ expectedRoleArn,
148
181
  ...(aws.profile ? { profile: aws.profile } : {}),
149
182
  readPrincipal: dependencies.readPrincipal,
150
- region,
183
+ region: aws.region,
151
184
  });
152
185
  }
153
186
  const loaded = await (0, secret_preflight_js_1.loadSliceSecretMetadata)({