@empire-builder-kit/nx 1.0.0-rc.30 → 1.0.0-rc.32

package/src/secrets/adapters.d.ts

@@ -7,6 +7,9 @@ export interface SecretDeclarationContractLike {
         staleTtlMs?: number;
     };
     contractVersion: 1;
+    generation?: {
+        kind: 'hmac-key-ring-v1';
+    };
     logicalName: string;
     owner: string;
     requiredStages: readonly string[];
@@ -21,24 +24,26 @@ export interface SecretDeclarationContractLike {
         mode: 'provider-managed';
         runbook?: string;
     };
-    source: 'aws-managed' | 'database-bootstrap' | 'operator';
+    source: 'aws-managed' | 'database-bootstrap' | 'generated' | 'operator';
     value: {
         kind: 'binary' | 'json' | 'string';
         validate: unknown;
     };
 }
 export declare class SecretDeclarationAdapterError extends Error {
-    readonly code: 'secret-cross-slice-approval-required' | 'secret-consumption-stage-invalid' | 'secret-declaration-adapter-invalid' | 'secret-reference-undeclared';
+    readonly code: 'secret-cross-slice-approval-required' | 'secret-consumption-stage-invalid' | 'secret-declaration-adapter-invalid' | 'secret-reference-ownership-invalid' | 'secret-reference-undeclared';
     constructor(code: SecretDeclarationAdapterError['code']);
 }
 export declare function toSecretMetadataDeclaration(declaration: SecretDeclarationContractLike): SecretMetadataDeclaration;
 export declare function toOperatorSecretMetadataDeclarations(declarations: Readonly<Record<string, SecretDeclarationContractLike>>): readonly SecretMetadataDeclaration[];
+export declare function toDeployedSecretMetadataDeclarations(declarations: Readonly<Record<string, SecretDeclarationContractLike>>): readonly SecretMetadataDeclaration[];
 export declare function createHiddenInputValidator(declaration: SecretDeclarationContractLike): PersonalSecretValueValidator;
 export declare function createDeclaredWorkloadSecretPermissionIntent(input: {
     consumerSlice: string;
     declarations: Readonly<Record<string, SecretDeclarationContractLike>>;
     externalApprovals?: readonly {
         approved: true;
+        containerOwnership: 'ebk-stage' | 'external';
         logicalName: string;
         owner: string;
         secretArn: string;

package/src/secrets/adapters.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.SecretDeclarationAdapterError = void 0;
 exports.toSecretMetadataDeclaration = toSecretMetadataDeclaration;
 exports.toOperatorSecretMetadataDeclarations = toOperatorSecretMetadataDeclarations;
+exports.toDeployedSecretMetadataDeclarations = toDeployedSecretMetadataDeclarations;
 exports.createHiddenInputValidator = createHiddenInputValidator;
 exports.createDeclaredWorkloadSecretPermissionIntent = createDeclaredWorkloadSecretPermissionIntent;
 const deterministic_order_js_1 = require("../deterministic-order.js");
@@ -31,6 +32,7 @@ function validateContractShape(declaration) {
         !hasOnlyProperties(declaration, [
             'cache',
             'contractVersion',
+            'generation',
             'logicalName',
             'owner',
             'requiredStages',
@@ -44,11 +46,18 @@ function validateContractShape(declaration) {
         typeof declaration.owner !== 'string' ||
         !Array.isArray(declaration.requiredStages) ||
         declaration.requiredStages.some((stage) => typeof stage !== 'string') ||
-        !['aws-managed', 'database-bootstrap', 'operator'].includes(declaration.source) ||
+        !['aws-managed', 'database-bootstrap', 'generated', 'operator'].includes(declaration.source) ||
         !isRecord(declaration.value) ||
         !hasOnlyProperties(declaration.value, ['kind', 'validate']) ||
         !['binary', 'json', 'string'].includes(declaration.value.kind) ||
         typeof declaration.value.validate !== 'function' ||
+        (declaration.source === 'generated') !==
+            (declaration.generation !== undefined) ||
+        (declaration.generation !== undefined &&
+            (!isRecord(declaration.generation) ||
+                !hasOnlyProperties(declaration.generation, ['kind']) ||
+                declaration.generation.kind !== 'hmac-key-ring-v1' ||
+                declaration.value.kind !== 'json')) ||
         !isRecord(declaration.rotation) ||
         !hasOnlyProperties(declaration.rotation, ['mode', 'runbook']) ||
         !['manual', 'provider-managed'].includes(declaration.rotation.mode) ||
@@ -81,6 +90,13 @@ function validateContractShape(declaration) {
 function toSecretMetadataDeclaration(declaration) {
     validateContractShape(declaration);
     const metadata = {
+        ...(declaration.generation === undefined
+            ? {}
+            : {
+                generation: Object.freeze({
+                    kind: declaration.generation.kind,
+                }),
+            }),
         logicalName: declaration.logicalName,
         owner: declaration.owner,
         requiredStages: Object.freeze([...declaration.requiredStages]),
@@ -116,6 +132,11 @@ function toOperatorSecretMetadataDeclarations(declarations) {
         .filter(({ source }) => source === 'operator')
         .map((declaration) => toSecretMetadataDeclaration(declaration)));
 }
+function toDeployedSecretMetadataDeclarations(declarations) {
+    return Object.freeze([...validatedDeclarations(declarations).values()]
+        .filter(({ source }) => source === 'operator' || source === 'generated')
+        .map((declaration) => toSecretMetadataDeclaration(declaration)));
+}
 function createHiddenInputValidator(declaration) {
     validateContractShape(declaration);
     const validate = declaration.value.validate;
@@ -166,14 +187,24 @@ function createDeclaredWorkloadSecretPermissionIntent(input) {
         }
         const resourceName = reference.secretArn.split(':secret:')[1] ?? '';
         const expectedPrefix = `ebk/${input.stage}/${input.consumerSlice}/`;
+        const reservedStagePrefix = `ebk/${input.stage}/`;
         if (!resourceName.startsWith(expectedPrefix)) {
-            const approved = input.externalApprovals?.some((approval) => approval.approved === true &&
+            const approval = input.externalApprovals?.find((approval) => approval.approved === true &&
                 approval.logicalName === reference.logicalName &&
                 approval.owner === declaration.owner &&
                 approval.secretArn === reference.secretArn);
-            if (!approved) {
+            if (approval === undefined) {
                 throw new SecretDeclarationAdapterError('secret-cross-slice-approval-required');
             }
+            const isReservedStageContainer = resourceName.startsWith(reservedStagePrefix);
+            const isAnyReservedEbkContainer = resourceName.startsWith('ebk/');
+            if ((isReservedStageContainer &&
+                approval.containerOwnership !== 'ebk-stage') ||
+                (!isReservedStageContainer &&
+                    approval.containerOwnership !== 'external') ||
+                (isAnyReservedEbkContainer && !isReservedStageContainer)) {
+                throw new SecretDeclarationAdapterError('secret-reference-ownership-invalid');
+            }
         }
     }
     return (0, permissions_js_1.createWorkloadSecretPermissionIntent)({

package/src/secrets/adapters.js.map

@@ -1 +1 @@
-{"version":3,"file":"adapters.js","sourceRoot":"","sources":["../../../../../packages/nx/src/secrets/adapters.ts"],"names":[],"mappings":";;;AAsIA,kEAoBC;AA0BD,oFAQC;AAED,gEAuCC;AAED,oGAmDC;AA1RD,sEAAyD;AACzD,yCAIoB;AACpB,qDAI0B;AAgC1B,MAAa,6BAA8B,SAAQ,KAAK;IAC7C,IAAI,CAIqB;IAElC,YAAY,IAA2C;QACrD,KAAK,CAAC,yCAAyC,IAAI,IAAI,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;QAC5C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAZD,sEAYC;AAED,MAAM,YAAY,GAAG,2BAA2B,CAAC;AACjD,MAAM,iBAAiB,GAAG,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;AACzC,MAAM,iBAAiB,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;AAE1C,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,iBAAiB,CACxB,KAA8B,EAC9B,OAA0B;IAE1B,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,qBAAqB,CAC5B,WAA0C;IAE1C,IACE,CAAC,QAAQ,CAAC,WAAW,CAAC;QACtB,CAAC,iBAAiB,CAAC,WAAW,EAAE;YAC9B,OAAO;YACP,iBAAiB;YACjB,aAAa;YACb,OAAO;YACP,gBAAgB;YAChB,WAAW;YACX,UAAU;YACV,QAAQ;YACR,OAAO;SACR,CAAC;QACF,WAAW,CAAC,eAAe,KAAK,CAAC;QACjC,OAAO,WAAW,CAAC,WAAW,KAAK,QAAQ;QAC3C,OAAO,WAAW,CAAC,KAAK,KAAK,QAAQ;QACrC,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,cAAc,CAAC;QAC1C,WAAW,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;QACrE,CAAC,CAAC,aAAa,EAAE,oBAAoB,EAAE,UAAU,CAAC,CAAC,QAAQ,CACzD,WAAW,CAAC,MAAM,CACnB;QACD,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC;QAC5B,CAAC,iBAAiB,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAC3D,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC;QAC9D,OAAO,WAAW,CAAC,KAAK,CAAC,QAAQ,KAAK,UAAU;QAChD,CAAC,QAAQ,CAAC,WAAW,CAAC,QAAQ,CAAC;QAC/B,CAAC,iBAAiB,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAC7D,CAAC,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC;QACnE,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ;YACrC,OAAO,WAAW,CAAC,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC;QACnD,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,KAAK,kBAAkB;YAC/C,WAAW,CAAC,QAAQ,CAAC,OAAO,KAAK,SAAS;YAC1C,OAAO,WAAW,CAAC,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC;QACnD,CAAC,QAAQ,CAAC,WAAW,CAAC,SAAS,CAAC;QAChC,CAAC,iBAAiB,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;QACzE,CAAC,CAAC,QAAQ,EAAE,6BAA6B,CAAC,CAAC,QAAQ,CACjD,WAAW,CAAC,SAAS,CAAC,IAAI,CAC3B;QACD,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,KAAK,6BAA6B;YAC3D,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,SAAS,CAAC,kBAAkB,CAAC;gBAC9D,CAAC,WAAW,CAAC,SAAS,CAAC,kBAAkB,IAAI,CAAC,CAAC,GAAG,CAAC;gBACnD,CAAC,WAAW,CAAC,SAAS,CAAC,kBAAkB,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QAC1D,CAAC,WAAW,CAAC,KAAK,KAAK,SAAS;YAC9B,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC;gBAC3B,CAAC,iBAAiB,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;gBACnE,CAAC,WAAW,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS;oBACzC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC;wBAClD,WAAW,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC;wBAChC,WAAW,CAAC,KAAK,CAAC,UAAU,GAAG,iBAAiB,CAAC,CAAC;gBACtD,CAAC,WAAW,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS;oBACzC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC;wBAClD,WAAW,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC;wBAChC,WAAW,CAAC,KAAK,CAAC,UAAU,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAC5D,CAAC;QACD,MAAM,IAAI,6BAA6B,CACrC,oCAAoC,CACrC,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAgB,2BAA2B,CACzC,WAA0C;IAE1C,qBAAqB,CAAC,WAAW,CAAC,CAAC;IACnC,MAAM,QAAQ,GAA8B;QAC1C,WAAW,EAAE,WAAW,CAAC,WAAW;QACpC,KAAK,EAAE,WAAW,CAAC,KAAK;QACxB,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,WAAW,CAAC,cAAc,CAAC,CAAC;QAC9D,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,WAAW,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC5D,MAAM,EAAE,WAAW,CAAC,MAAM;QAC1B,SAAS,EAAE,WAAW,CAAC,KAAK,CAAC,IAAI;KAClC,CAAC;IACF,IAAI,CAAC;QACH,IAAA,4CAAiC,EAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,6BAA6B,CACrC,oCAAoC,CACrC,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,qBAAqB,CAC5B,YAAqE;IAErE,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,6BAA6B,CACrC,oCAAoC,CACrC,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAyC,CAAC;IAChE,KAAK,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,IAAI,CAChE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAA,qCAAY,EAAC,IAAI,EAAE,KAAK,CAAC,CAC/C,EAAE,CAAC;QACF,qBAAqB,CAAC,WAAW,CAAC,CAAC;QACnC,2BAA2B,CAAC,WAAW,CAAC,CAAC;QACzC,IAAI,GAAG,KAAK,WAAW,CAAC,WAAW,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACvD,MAAM,IAAI,6BAA6B,CACrC,oCAAoC,CACrC,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAgB,oCAAoC,CAClD,YAAqE;IAErE,OAAO,MAAM,CAAC,MAAM,CAClB,CAAC,GAAG,qBAAqB,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,CAAC;SAC9C,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,KAAK,UAAU,CAAC;SAC7C,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,2BAA2B,CAAC,WAAW,CAAC,CAAC,CAClE,CAAC;AACJ,CAAC;AAED,SAAgB,0BAA0B,CACxC,WAA0C;IAE1C,qBAAqB,CAAC,WAAW,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,QAGtB,CAAC;IACd,MAAM,SAAS,GAAiC;QAC9C,QAAQ,CAAC,KAAK;YACZ,IAAI,KAAK,CAAC,SAAS,KAAK,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;gBAC/C,OAAO,KAAK,CAAC;YACf,CAAC;YACD,IAAI,eAAuC,CAAC;YAC5C,IAAI,CAAC;gBACH,MAAM,OAAO,GACX,KAAK,CAAC,SAAS,KAAK,QAAQ;oBAC1B,CAAC,CAAC;wBACE,YAAY,EAAE,CAAC,eAAe,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;qBAC9D;oBACH,CAAC,CAAC;wBACE,YAAY,EAAE,IAAI,WAAW,CAAC,OAAO,EAAE;4BACrC,KAAK,EAAE,IAAI;yBACZ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;qBACvB,CAAC;gBACR,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;gBACjC,OAAO,CACL,QAAQ,CAAC,MAAM,CAAC;oBAChB,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI;oBACxB,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CACtD,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;oBAAS,CAAC;gBACT,eAAe,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;KACF,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAED,SAAgB,4CAA4C,CAAC,KAY5D;IACC,IACE,CAAC,IAAA,iCAAsB,EAAC,KAAK,CAAC,KAAK,CAAC;QACpC,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,EACvC,CAAC;QACD,MAAM,IAAI,6BAA6B,CAAC,kCAAkC,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,YAAY,GAAG,qBAAqB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC/D,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACzC,MAAM,WAAW,GAAG,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAC5D,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,6BAA6B,CAAC,6BAA6B,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,6BAA6B,CACrC,kCAAkC,CACnC,CAAC;QACJ,CAAC;QACD,MAAM,YAAY,GAAG,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACpE,MAAM,cAAc,GAAG,OAAO,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,aAAa,GAAG,CAAC;QACpE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YAC7C,MAAM,QAAQ,GAAG,KAAK,CAAC,iBAAiB,EAAE,IAAI,CAC5C,CAAC,QAAQ,EAAE,EAAE,CACX,QAAQ,CAAC,QAAQ,KAAK,IAAI;gBAC1B,QAAQ,CAAC,WAAW,KAAK,SAAS,CAAC,WAAW;gBAC9C,QAAQ,CAAC,KAAK,KAAK,WAAW,CAAC,KAAK;gBACpC,QAAQ,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS,CAC7C,CAAC;YACF,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,6BAA6B,CACrC,sCAAsC,CACvC,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAA,qDAAoC,EAAC;QAC1C,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"adapters.js","sourceRoot":"","sources":["../../../../../packages/nx/src/secrets/adapters.ts"],"names":[],"mappings":";;;AAgJA,kEA2BC;AA0BD,oFAQC;AAED,oFAQC;AAED,gEAuCC;AAED,oGAmEC;AArUD,sEAAyD;AACzD,yCAIoB;AACpB,qDAI0B;AAiC1B,MAAa,6BAA8B,SAAQ,KAAK;IAC7C,IAAI,CAKqB;IAElC,YAAY,IAA2C;QACrD,KAAK,CAAC,yCAAyC,IAAI,IAAI,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;QAC5C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAbD,sEAaC;AAED,MAAM,YAAY,GAAG,2BAA2B,CAAC;AACjD,MAAM,iBAAiB,GAAG,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;AACzC,MAAM,iBAAiB,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;AAE1C,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,iBAAiB,CACxB,KAA8B,EAC9B,OAA0B;IAE1B,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,qBAAqB,CAC5B,WAA0C;IAE1C,IACE,CAAC,QAAQ,CAAC,WAAW,CAAC;QACtB,CAAC,iBAAiB,CAAC,WAAW,EAAE;YAC9B,OAAO;YACP,iBAAiB;YACjB,YAAY;YACZ,aAAa;YACb,OAAO;YACP,gBAAgB;YAChB,WAAW;YACX,UAAU;YACV,QAAQ;YACR,OAAO;SACR,CAAC;QACF,WAAW,CAAC,eAAe,KAAK,CAAC;QACjC,OAAO,WAAW,CAAC,WAAW,KAAK,QAAQ;QAC3C,OAAO,WAAW,CAAC,KAAK,KAAK,QAAQ;QACrC,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,cAAc,CAAC;QAC1C,WAAW,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;QACrE,CAAC,CAAC,aAAa,EAAE,oBAAoB,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,QAAQ,CACtE,WAAW,CAAC,MAAM,CACnB;QACD,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC;QAC5B,CAAC,iBAAiB,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAC3D,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC;QAC9D,OAAO,WAAW,CAAC,KAAK,CAAC,QAAQ,KAAK,UAAU;QAChD,CAAC,WAAW,CAAC,MAAM,KAAK,WAAW,CAAC;YAClC,CAAC,WAAW,CAAC,UAAU,KAAK,SAAS,CAAC;QACxC,CAAC,WAAW,CAAC,UAAU,KAAK,SAAS;YACnC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,UAAU,CAAC;gBAChC,CAAC,iBAAiB,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC,CAAC;gBACpD,WAAW,CAAC,UAAU,CAAC,IAAI,KAAK,kBAAkB;gBAClD,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;QACvC,CAAC,QAAQ,CAAC,WAAW,CAAC,QAAQ,CAAC;QAC/B,CAAC,iBAAiB,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAC7D,CAAC,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC;QACnE,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ;YACrC,OAAO,WAAW,CAAC,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC;QACnD,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,KAAK,kBAAkB;YAC/C,WAAW,CAAC,QAAQ,CAAC,OAAO,KAAK,SAAS;YAC1C,OAAO,WAAW,CAAC,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC;QACnD,CAAC,QAAQ,CAAC,WAAW,CAAC,SAAS,CAAC;QAChC,CAAC,iBAAiB,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;QACzE,CAAC,CAAC,QAAQ,EAAE,6BAA6B,CAAC,CAAC,QAAQ,CACjD,WAAW,CAAC,SAAS,CAAC,IAAI,CAC3B;QACD,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,KAAK,6BAA6B;YAC3D,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,SAAS,CAAC,kBAAkB,CAAC;gBAC9D,CAAC,WAAW,CAAC,SAAS,CAAC,kBAAkB,IAAI,CAAC,CAAC,GAAG,CAAC;gBACnD,CAAC,WAAW,CAAC,SAAS,CAAC,kBAAkB,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QAC1D,CAAC,WAAW,CAAC,KAAK,KAAK,SAAS;YAC9B,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC;gBAC3B,CAAC,iBAAiB,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;gBACnE,CAAC,WAAW,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS;oBACzC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC;wBAClD,WAAW,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC;wBAChC,WAAW,CAAC,KAAK,CAAC,UAAU,GAAG,iBAAiB,CAAC,CAAC;gBACtD,CAAC,WAAW,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS;oBACzC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC;wBAClD,WAAW,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC;wBAChC,WAAW,CAAC,KAAK,CAAC,UAAU,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAC5D,CAAC;QACD,MAAM,IAAI,6BAA6B,CACrC,oCAAoC,CACrC,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAgB,2BAA2B,CACzC,WAA0C;IAE1C,qBAAqB,CAAC,WAAW,CAAC,CAAC;IACnC,MAAM,QAAQ,GAA8B;QAC1C,GAAG,CAAC,WAAW,CAAC,UAAU,KAAK,SAAS;YACtC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC;oBACxB,IAAI,EAAE,WAAW,CAAC,UAAU,CAAC,IAAI;iBAClC,CAAC;aACH,CAAC;QACN,WAAW,EAAE,WAAW,CAAC,WAAW;QACpC,KAAK,EAAE,WAAW,CAAC,KAAK;QACxB,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,WAAW,CAAC,cAAc,CAAC,CAAC;QAC9D,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,WAAW,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC5D,MAAM,EAAE,WAAW,CAAC,MAAM;QAC1B,SAAS,EAAE,WAAW,CAAC,KAAK,CAAC,IAAI;KAClC,CAAC;IACF,IAAI,CAAC;QACH,IAAA,4CAAiC,EAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,6BAA6B,CACrC,oCAAoC,CACrC,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,qBAAqB,CAC5B,YAAqE;IAErE,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,6BAA6B,CACrC,oCAAoC,CACrC,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAyC,CAAC;IAChE,KAAK,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,IAAI,CAChE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAA,qCAAY,EAAC,IAAI,EAAE,KAAK,CAAC,CAC/C,EAAE,CAAC;QACF,qBAAqB,CAAC,WAAW,CAAC,CAAC;QACnC,2BAA2B,CAAC,WAAW,CAAC,CAAC;QACzC,IAAI,GAAG,KAAK,WAAW,CAAC,WAAW,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACvD,MAAM,IAAI,6BAA6B,CACrC,oCAAoC,CACrC,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAgB,oCAAoC,CAClD,YAAqE;IAErE,OAAO,MAAM,CAAC,MAAM,CAClB,CAAC,GAAG,qBAAqB,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,CAAC;SAC9C,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,KAAK,UAAU,CAAC;SAC7C,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,2BAA2B,CAAC,WAAW,CAAC,CAAC,CAClE,CAAC;AACJ,CAAC;AAED,SAAgB,oCAAoC,CAClD,YAAqE;IAErE,OAAO,MAAM,CAAC,MAAM,CAClB,CAAC,GAAG,qBAAqB,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,CAAC;SAC9C,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,KAAK,UAAU,IAAI,MAAM,KAAK,WAAW,CAAC;SACvE,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,2BAA2B,CAAC,WAAW,CAAC,CAAC,CAClE,CAAC;AACJ,CAAC;AAED,SAAgB,0BAA0B,CACxC,WAA0C;IAE1C,qBAAqB,CAAC,WAAW,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,QAGtB,CAAC;IACd,MAAM,SAAS,GAAiC;QAC9C,QAAQ,CAAC,KAAK;YACZ,IAAI,KAAK,CAAC,SAAS,KAAK,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;gBAC/C,OAAO,KAAK,CAAC;YACf,CAAC;YACD,IAAI,eAAuC,CAAC;YAC5C,IAAI,CAAC;gBACH,MAAM,OAAO,GACX,KAAK,CAAC,SAAS,KAAK,QAAQ;oBAC1B,CAAC,CAAC;wBACE,YAAY,EAAE,CAAC,eAAe,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;qBAC9D;oBACH,CAAC,CAAC;wBACE,YAAY,EAAE,IAAI,WAAW,CAAC,OAAO,EAAE;4BACrC,KAAK,EAAE,IAAI;yBACZ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;qBACvB,CAAC;gBACR,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;gBACjC,OAAO,CACL,QAAQ,CAAC,MAAM,CAAC;oBAChB,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI;oBACxB,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CACtD,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;oBAAS,CAAC;gBACT,eAAe,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;KACF,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAED,SAAgB,4CAA4C,CAAC,KAa5D;IACC,IACE,CAAC,IAAA,iCAAsB,EAAC,KAAK,CAAC,KAAK,CAAC;QACpC,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,EACvC,CAAC;QACD,MAAM,IAAI,6BAA6B,CAAC,kCAAkC,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,YAAY,GAAG,qBAAqB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC/D,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACzC,MAAM,WAAW,GAAG,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAC5D,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,6BAA6B,CAAC,6BAA6B,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,6BAA6B,CACrC,kCAAkC,CACnC,CAAC;QACJ,CAAC;QACD,MAAM,YAAY,GAAG,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACpE,MAAM,cAAc,GAAG,OAAO,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,aAAa,GAAG,CAAC;QACpE,MAAM,mBAAmB,GAAG,OAAO,KAAK,CAAC,KAAK,GAAG,CAAC;QAClD,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YAC7C,MAAM,QAAQ,GAAG,KAAK,CAAC,iBAAiB,EAAE,IAAI,CAC5C,CAAC,QAAQ,EAAE,EAAE,CACX,QAAQ,CAAC,QAAQ,KAAK,IAAI;gBAC1B,QAAQ,CAAC,WAAW,KAAK,SAAS,CAAC,WAAW;gBAC9C,QAAQ,CAAC,KAAK,KAAK,WAAW,CAAC,KAAK;gBACpC,QAAQ,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS,CAC7C,CAAC;YACF,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,MAAM,IAAI,6BAA6B,CACrC,sCAAsC,CACvC,CAAC;YACJ,CAAC;YACD,MAAM,wBAAwB,GAC5B,YAAY,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC;YAC/C,MAAM,yBAAyB,GAAG,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAClE,IACE,CAAC,wBAAwB;gBACvB,QAAQ,CAAC,kBAAkB,KAAK,WAAW,CAAC;gBAC9C,CAAC,CAAC,wBAAwB;oBACxB,QAAQ,CAAC,kBAAkB,KAAK,UAAU,CAAC;gBAC7C,CAAC,yBAAyB,IAAI,CAAC,wBAAwB,CAAC,EACxD,CAAC;gBACD,MAAM,IAAI,6BAA6B,CACrC,oCAAoC,CACrC,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAA,qDAAoC,EAAC;QAC1C,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAC,CAAC;AACL,CAAC"}

package/src/secrets/aws-control-plane.d.ts

@@ -1,5 +1,5 @@
 import { CreateSecretCommand, DeleteSecretCommand, DescribeSecretCommand, ListSecretsCommand, RestoreSecretCommand, SecretsManagerClient, TagResourceCommand } from '@aws-sdk/client-secrets-manager';
-import type { ProtectedSecretLifecycleControlPlane, SecretMetadataControlPlane } from './operator.js';
+import type { GeneratedSecretRetirementControlPlane, ProtectedSecretLifecycleControlPlane, SecretMetadataControlPlane } from './operator.js';
 export type AwsSecretMetadataCommand = CreateSecretCommand | DeleteSecretCommand | DescribeSecretCommand | ListSecretsCommand | RestoreSecretCommand | TagResourceCommand;
 export interface AwsSecretsManagerMetadataClient {
     send(command: AwsSecretMetadataCommand): Promise<unknown>;
@@ -18,3 +18,12 @@ export declare function createAwsSecretsManagerMetadataControlPlane(options?: {
     client?: AwsSecretsManagerMetadataClient;
     clientConfiguration?: ConstructorParameters<typeof SecretsManagerClient>[0];
 }): SecretMetadataControlPlane & ProtectedSecretLifecycleControlPlane;
+/**
+ * Narrow adapter for framework-generated, stage-exclusive secret retirement.
+ * Immediate deletion is intentionally unavailable from the human/operator
+ * lifecycle adapter above and requires the caller to prove exact ownership.
+ */
+export declare function createAwsGeneratedSecretRetirementControlPlane(options?: {
+    client?: AwsSecretsManagerMetadataClient;
+    clientConfiguration?: ConstructorParameters<typeof SecretsManagerClient>[0];
+}): GeneratedSecretRetirementControlPlane;

package/src/secrets/aws-control-plane.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AwsSecretMetadataControlPlaneError = void 0;
 exports.createAwsSecretsManagerMetadataControlPlane = createAwsSecretsManagerMetadataControlPlane;
+exports.createAwsGeneratedSecretRetirementControlPlane = createAwsGeneratedSecretRetirementControlPlane;
 const deterministic_order_js_1 = require("../deterministic-order.js");
 const client_secrets_manager_1 = require("@aws-sdk/client-secrets-manager");
 const model_js_1 = require("./model.js");
@@ -18,6 +19,12 @@ const maximumListPages = 100;
 function isRecord(value) {
     return typeof value === 'object' && value !== null && !Array.isArray(value);
 }
+function isResourceNotFound(error) {
+    return (isRecord(error) &&
+        (error['name'] === 'ResourceNotFoundException' ||
+            error['Code'] === 'ResourceNotFoundException' ||
+            error['code'] === 'ResourceNotFoundException'));
+}
 function requireRecord(value) {
     if (!isRecord(value)) {
         throw new AwsSecretMetadataControlPlaneError('aws-secret-metadata-observation-invalid');
@@ -97,8 +104,16 @@ function versionStagesFromAws(value) {
     return Object.freeze([...stages].sort());
 }
 function toObservedSecretMetadata(output, expectedArn) {
+    if (output.DeletedDate !== undefined &&
+        (!(output.DeletedDate instanceof Date) ||
+            Number.isNaN(output.DeletedDate.getTime()))) {
+        throw new AwsSecretMetadataControlPlaneError('aws-secret-metadata-observation-invalid');
+    }
     const observed = Object.freeze({
         arn: requireExactArn(output.ARN),
+        ...(output.DeletedDate === undefined
+            ? {}
+            : { deletionPendingUntil: output.DeletedDate.toISOString() }),
         name: requireNonEmptyString(output.Name),
         rotationEnabled: output.RotationEnabled === true,
         tags: tagsFromAws(output.Tags),
@@ -172,6 +187,34 @@ function createAwsSecretsManagerMetadataControlPlane(options = {}) {
             })));
             return toObservedSecretMetadata(output, input.arn);
         },
+        async describeExact(input) {
+            validateMetadataText(input.name);
+            let output;
+            try {
+                output = requireOutput(await client.send(new client_secrets_manager_1.DescribeSecretCommand({
+                    SecretId: input.name,
+                })));
+            }
+            catch (error) {
+                if (isResourceNotFound(error))
+                    return undefined;
+                throw error;
+            }
+            const arn = requireExactArn(output.ARN);
+            if (output.DeletedDate !== undefined &&
+                input.includePlannedDeletion !== true) {
+                throw new AwsSecretMetadataControlPlaneError('aws-secret-metadata-observation-invalid');
+            }
+            const observed = toObservedSecretMetadata(output, arn);
+            const marker = `:secret:${input.name}-`;
+            const markerIndex = arn.lastIndexOf(marker);
+            if (observed.name !== input.name ||
+                markerIndex <= 0 ||
+                !/^[A-Za-z0-9]{6}$/.test(arn.slice(markerIndex + marker.length))) {
+                throw new AwsSecretMetadataControlPlaneError('aws-secret-metadata-observation-invalid');
+            }
+            return observed;
+        },
         async list(input) {
             validateMetadataText(input.namePrefix);
             const listed = [];
@@ -252,4 +295,28 @@ function createAwsSecretsManagerMetadataControlPlane(options = {}) {
         },
     });
 }
+/**
+ * Narrow adapter for framework-generated, stage-exclusive secret retirement.
+ * Immediate deletion is intentionally unavailable from the human/operator
+ * lifecycle adapter above and requires the caller to prove exact ownership.
+ */
+function createAwsGeneratedSecretRetirementControlPlane(options = {}) {
+    const client = options.client ?? defaultClient(options.clientConfiguration ?? {});
+    const metadata = createAwsSecretsManagerMetadataControlPlane({ client });
+    return Object.freeze({
+        describeExact: metadata.describeExact,
+        async deleteImmediately(input) {
+            assertExactArn(input.arn);
+            const output = requireOutput(await client.send(new client_secrets_manager_1.DeleteSecretCommand({
+                ForceDeleteWithoutRecovery: true,
+                SecretId: input.arn,
+            })));
+            if (requireExactArn(output.ARN) !== input.arn) {
+                throw new AwsSecretMetadataControlPlaneError('aws-secret-metadata-observation-invalid');
+            }
+        },
+        restore: metadata.restore,
+        scheduleRetirement: metadata.scheduleRetirement,
+    });
+}
 //# sourceMappingURL=aws-control-plane.js.map

package/src/secrets/aws-control-plane.js.map

@@ -1 +1 @@
-{"version":3,"file":"aws-control-plane.js","sourceRoot":"","sources":["../../../../../packages/nx/src/secrets/aws-control-plane.ts"],"names":[],"mappings":";;;AAwOA,kGAkKC;AA1YD,sEAAyD;AACzD,4EAayC;AAEzC,yCAIoB;AAkBpB,MAAa,kCAAmC,SAAQ,KAAK;IAClD,IAAI,CAGgC;IAE7C,YAAY,IAAgD;QAC1D,KAAK,CAAC,6CAA6C,IAAI,IAAI,CAAC,CAAC;QAC7D,IAAI,CAAC,IAAI,GAAG,oCAAoC,CAAC;QACjD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAXD,gFAWC;AAED,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAE7B,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,kCAAkC,CAC1C,yCAAyC,CAC1C,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,kCAAkC,CAC1C,yCAAyC,CAC1C,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,MAAM,GAAG,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,CAAC,IAAA,2BAAgB,EAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,kCAAkC,CAC1C,yCAAyC,CAC1C,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,CAAC,IAAA,2BAAgB,EAAC,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,kCAAkC,CAC1C,mCAAmC,CACpC,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa;IACzC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,kCAAkC,CAC1C,mCAAmC,CACpC,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,IAAsC;IACvD,IACE,CAAC,QAAQ,CAAC,IAAI,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAC9B,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CACvB,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CACf,GAAG,CAAC,MAAM,KAAK,CAAC;YAChB,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;YAClB,OAAO,KAAK,KAAK,QAAQ;YACzB,KAAK,CAAC,MAAM,KAAK,CAAC;YAClB,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CACvB,EACD,CAAC;QACD,MAAM,IAAI,kCAAkC,CAC1C,mCAAmC,CACpC,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;SACrB,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAClD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,kCAAkC,CAC1C,yCAAyC,CAC1C,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAA2B,EAAE,CAAC;IACxC,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,GAAG,GAAG,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9C,IACE,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ;YAChC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,EAC/C,CAAC;YACD,MAAM,IAAI,kCAAkC,CAC1C,yCAAyC,CAC1C,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAClD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,kCAAkC,CAC1C,yCAAyC,CAC1C,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACxC,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YACpB,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,EACrE,CAAC;YACD,MAAM,IAAI,kCAAkC,CAC1C,yCAAyC,CAC1C,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,IAAI;YAAE,MAAM,CAAC,GAAG,CAAC,KAAe,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,wBAAwB,CAC/B,MAAmC,EACnC,WAAmB;IAEnB,MAAM,QAAQ,GAA2B,MAAM,CAAC,MAAM,CAAC;QACrD,GAAG,EAAE,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC;QAChC,IAAI,EAAE,qBAAqB,CAAC,MAAM,CAAC,IAAI,CAAC;QACxC,eAAe,EAAE,MAAM,CAAC,eAAe,KAAK,IAAI;QAChD,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC;QAC9B,aAAa,EAAE,oBAAoB,CAAC,MAAM,CAAC,kBAAkB,CAAC;KAC/D,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,GAAG,KAAK,WAAW,EAAE,CAAC;QACjC,MAAM,IAAI,kCAAkC,CAC1C,yCAAyC,CAC1C,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,IAAA,yCAA8B,EAAC,QAAQ,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,kCAAkC,CAC1C,yCAAyC,CAC1C,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,aAAa,CAAI,KAAc;IACtC,aAAa,CAAC,KAAK,CAAC,CAAC;IACrB,OAAO,KAAU,CAAC;AACpB,CAAC;AAED,SAAS,aAAa,CACpB,aAAoE;IAEpE,MAAM,MAAM,GAAG,IAAI,6CAAoB,CAAC,aAAa,CAAC,CAAC;IACvD,OAAO;QACL,IAAI,CAAC,OAAO;YACV,IAAI,OAAO,YAAY,4CAAmB,EAAE,CAAC;gBAC3C,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC9B,CAAC;YACD,IAAI,OAAO,YAAY,4CAAmB,EAAE,CAAC;gBAC3C,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC9B,CAAC;YACD,IAAI,OAAO,YAAY,8CAAqB,EAAE,CAAC;gBAC7C,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC9B,CAAC;YACD,IAAI,OAAO,YAAY,2CAAkB,EAAE,CAAC;gBAC1C,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC9B,CAAC;YACD,IAAI,OAAO,YAAY,6CAAoB,EAAE,CAAC;gBAC5C,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC9B,CAAC;YACD,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAgB,2CAA2C,CACzD,UAGI,EAAE;IAEN,MAAM,MAAM,GACV,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC,OAAO,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC;IAErE,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,KAAK,CAAC,WAAW,CAAC,KAAK;YACrB,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACjC,oBAAoB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YACxC,MAAM,MAAM,GAAG,aAAa,CAC1B,MAAM,MAAM,CAAC,IAAI,CACf,IAAI,4CAAmB,CAAC;gBACtB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;aAC5B,CAAC,CACH,CACF,CAAC;YACF,MAAM,GAAG,GAAG,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACjE,MAAM,IAAI,kCAAkC,CAC1C,yCAAyC,CAC1C,CAAC;YACJ,CAAC;YACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QAChC,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,KAAK;YAClB,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC1B,MAAM,MAAM,GAAG,aAAa,CAC1B,MAAM,MAAM,CAAC,IAAI,CACf,IAAI,8CAAqB,CAAC;gBACxB,QAAQ,EAAE,KAAK,CAAC,GAAG;aACpB,CAAC,CACH,CACF,CAAC;YACF,OAAO,wBAAwB,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;QACrD,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,KAAK;YACd,oBAAoB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACvC,MAAM,MAAM,GAAoC,EAAE,CAAC;YACnD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;YACrC,IAAI,SAA6B,CAAC;YAClC,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,gBAAgB,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;gBACtD,MAAM,MAAM,GAAG,aAAa,CAC1B,MAAM,MAAM,CAAC,IAAI,CACf,IAAI,2CAAkB,CAAC;oBACrB,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;oBACtD,GAAG,CAAC,KAAK,CAAC,sBAAsB,KAAK,SAAS;wBAC5C,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC;4BACE,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;yBACrD,CAAC;oBACN,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;iBAC7D,CAAC,CACH,CACF,CAAC;gBACF,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC;gBAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC9B,MAAM,IAAI,kCAAkC,CAC1C,yCAAyC,CAC1C,CAAC;gBACJ,CAAC;gBACD,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;oBAC7B,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACtC,MAAM,IAAI,GAAG,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAC9C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;wBACvC,MAAM,IAAI,kCAAkC,CAC1C,yCAAyC,CAC1C,CAAC;oBACJ,CAAC;oBACD,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC7B,CAAC;gBAED,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;oBACnC,OAAO,MAAM,CAAC,MAAM,CAClB,MAAM;yBACH,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAA,qCAAY,EAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;yBAC1D,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CACtC,CAAC;gBACJ,CAAC;gBACD,IACE,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;oBACpC,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;oBAC7B,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,EAChC,CAAC;oBACD,MAAM,IAAI,kCAAkC,CAC1C,wCAAwC,CACzC,CAAC;gBACJ,CAAC;gBACD,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACjC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;YAC/B,CAAC;YACD,MAAM,IAAI,kCAAkC,CAC1C,wCAAwC,CACzC,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,KAAK;YACjB,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC1B,MAAM,MAAM,GAAG,aAAa,CAC1B,MAAM,MAAM,CAAC,IAAI,CACf,IAAI,6CAAoB,CAAC;gBACvB,QAAQ,EAAE,KAAK,CAAC,GAAG;aACpB,CAAC,CACH,CACF,CAAC;YACF,IAAI,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,EAAE,CAAC;gBAC9C,MAAM,IAAI,kCAAkC,CAC1C,yCAAyC,CAC1C,CAAC;YACJ,CAAC;QACH,CAAC;QAED,KAAK,CAAC,kBAAkB,CAAC,KAAK;YAC5B,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC1B,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,kBAAkB,CAAC;gBAC/C,KAAK,CAAC,kBAAkB,GAAG,CAAC;gBAC5B,KAAK,CAAC,kBAAkB,GAAG,EAAE,EAC7B,CAAC;gBACD,MAAM,IAAI,kCAAkC,CAC1C,mCAAmC,CACpC,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,GAAG,aAAa,CAC1B,MAAM,MAAM,CAAC,IAAI,CACf,IAAI,4CAAmB,CAAC;gBACtB,oBAAoB,EAAE,KAAK,CAAC,kBAAkB;gBAC9C,QAAQ,EAAE,KAAK,CAAC,GAAG;aACpB,CAAC,CACH,CACF,CAAC;YACF,IACE,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG;gBACzC,CAAC,CAAC,MAAM,CAAC,YAAY,YAAY,IAAI,CAAC;gBACtC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,EAC3C,CAAC;gBACD,MAAM,IAAI,kCAAkC,CAC1C,yCAAyC,CAC1C,CAAC;YACJ,CAAC;YACD,OAAO,MAAM,CAAC,MAAM,CAAC;gBACnB,aAAa,EAAE,MAAM,CAAC,YAAY,CAAC,WAAW,EAAE;aACjD,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,KAAK;YACb,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC1B,MAAM,MAAM,CAAC,IAAI,CACf,IAAI,2CAAkB,CAAC;gBACrB,QAAQ,EAAE,KAAK,CAAC,GAAG;gBACnB,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;aAC5B,CAAC,CACH,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"aws-control-plane.js","sourceRoot":"","sources":["../../../../../packages/nx/src/secrets/aws-control-plane.ts"],"names":[],"mappings":";;;AA8PA,kGAyMC;AAOD,wGA+BC;AA7eD,sEAAyD;AACzD,4EAayC;AAEzC,yCAIoB;AAmBpB,MAAa,kCAAmC,SAAQ,KAAK;IAClD,IAAI,CAGgC;IAE7C,YAAY,IAAgD;QAC1D,KAAK,CAAC,6CAA6C,IAAI,IAAI,CAAC,CAAC;QAC7D,IAAI,CAAC,IAAI,GAAG,oCAAoC,CAAC;QACjD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAXD,gFAWC;AAED,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAE7B,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC;QACf,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,2BAA2B;YAC5C,KAAK,CAAC,MAAM,CAAC,KAAK,2BAA2B;YAC7C,KAAK,CAAC,MAAM,CAAC,KAAK,2BAA2B,CAAC,CACjD,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,kCAAkC,CAC1C,yCAAyC,CAC1C,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,kCAAkC,CAC1C,yCAAyC,CAC1C,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,MAAM,GAAG,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,CAAC,IAAA,2BAAgB,EAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,kCAAkC,CAC1C,yCAAyC,CAC1C,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,CAAC,IAAA,2BAAgB,EAAC,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,kCAAkC,CAC1C,mCAAmC,CACpC,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa;IACzC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,kCAAkC,CAC1C,mCAAmC,CACpC,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,IAAsC;IACvD,IACE,CAAC,QAAQ,CAAC,IAAI,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAC9B,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CACvB,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CACf,GAAG,CAAC,MAAM,KAAK,CAAC;YAChB,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;YAClB,OAAO,KAAK,KAAK,QAAQ;YACzB,KAAK,CAAC,MAAM,KAAK,CAAC;YAClB,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CACvB,EACD,CAAC;QACD,MAAM,IAAI,kCAAkC,CAC1C,mCAAmC,CACpC,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;SACrB,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAClD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,kCAAkC,CAC1C,yCAAyC,CAC1C,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAA2B,EAAE,CAAC;IACxC,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,GAAG,GAAG,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9C,IACE,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ;YAChC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,EAC/C,CAAC;YACD,MAAM,IAAI,kCAAkC,CAC1C,yCAAyC,CAC1C,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAClD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,kCAAkC,CAC1C,yCAAyC,CAC1C,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACxC,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YACpB,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,EACrE,CAAC;YACD,MAAM,IAAI,kCAAkC,CAC1C,yCAAyC,CAC1C,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,IAAI;YAAE,MAAM,CAAC,GAAG,CAAC,KAAe,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,wBAAwB,CAC/B,MAAmC,EACnC,WAAmB;IAEnB,IACE,MAAM,CAAC,WAAW,KAAK,SAAS;QAChC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,YAAY,IAAI,CAAC;YACpC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,EAC7C,CAAC;QACD,MAAM,IAAI,kCAAkC,CAC1C,yCAAyC,CAC1C,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAA2B,MAAM,CAAC,MAAM,CAAC;QACrD,GAAG,EAAE,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC;QAChC,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS;YAClC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,oBAAoB,EAAE,MAAM,CAAC,WAAW,CAAC,WAAW,EAAE,EAAE,CAAC;QAC/D,IAAI,EAAE,qBAAqB,CAAC,MAAM,CAAC,IAAI,CAAC;QACxC,eAAe,EAAE,MAAM,CAAC,eAAe,KAAK,IAAI;QAChD,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC;QAC9B,aAAa,EAAE,oBAAoB,CAAC,MAAM,CAAC,kBAAkB,CAAC;KAC/D,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,GAAG,KAAK,WAAW,EAAE,CAAC;QACjC,MAAM,IAAI,kCAAkC,CAC1C,yCAAyC,CAC1C,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,IAAA,yCAA8B,EAAC,QAAQ,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,kCAAkC,CAC1C,yCAAyC,CAC1C,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,aAAa,CAAI,KAAc;IACtC,aAAa,CAAC,KAAK,CAAC,CAAC;IACrB,OAAO,KAAU,CAAC;AACpB,CAAC;AAED,SAAS,aAAa,CACpB,aAAoE;IAEpE,MAAM,MAAM,GAAG,IAAI,6CAAoB,CAAC,aAAa,CAAC,CAAC;IACvD,OAAO;QACL,IAAI,CAAC,OAAO;YACV,IAAI,OAAO,YAAY,4CAAmB,EAAE,CAAC;gBAC3C,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC9B,CAAC;YACD,IAAI,OAAO,YAAY,4CAAmB,EAAE,CAAC;gBAC3C,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC9B,CAAC;YACD,IAAI,OAAO,YAAY,8CAAqB,EAAE,CAAC;gBAC7C,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC9B,CAAC;YACD,IAAI,OAAO,YAAY,2CAAkB,EAAE,CAAC;gBAC1C,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC9B,CAAC;YACD,IAAI,OAAO,YAAY,6CAAoB,EAAE,CAAC;gBAC5C,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC9B,CAAC;YACD,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAgB,2CAA2C,CACzD,UAGI,EAAE;IAEN,MAAM,MAAM,GACV,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC,OAAO,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC;IAErE,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,KAAK,CAAC,WAAW,CAAC,KAAK;YACrB,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACjC,oBAAoB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YACxC,MAAM,MAAM,GAAG,aAAa,CAC1B,MAAM,MAAM,CAAC,IAAI,CACf,IAAI,4CAAmB,CAAC;gBACtB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;aAC5B,CAAC,CACH,CACF,CAAC;YACF,MAAM,GAAG,GAAG,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACjE,MAAM,IAAI,kCAAkC,CAC1C,yCAAyC,CAC1C,CAAC;YACJ,CAAC;YACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QAChC,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,KAAK;YAClB,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC1B,MAAM,MAAM,GAAG,aAAa,CAC1B,MAAM,MAAM,CAAC,IAAI,CACf,IAAI,8CAAqB,CAAC;gBACxB,QAAQ,EAAE,KAAK,CAAC,GAAG;aACpB,CAAC,CACH,CACF,CAAC;YACF,OAAO,wBAAwB,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;QACrD,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,KAAK;YACvB,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,MAAmC,CAAC;YACxC,IAAI,CAAC;gBACH,MAAM,GAAG,aAAa,CACpB,MAAM,MAAM,CAAC,IAAI,CACf,IAAI,8CAAqB,CAAC;oBACxB,QAAQ,EAAE,KAAK,CAAC,IAAI;iBACrB,CAAC,CACH,CACF,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,kBAAkB,CAAC,KAAK,CAAC;oBAAE,OAAO,SAAS,CAAC;gBAChD,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,GAAG,GAAG,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACxC,IACE,MAAM,CAAC,WAAW,KAAK,SAAS;gBAChC,KAAK,CAAC,sBAAsB,KAAK,IAAI,EACrC,CAAC;gBACD,MAAM,IAAI,kCAAkC,CAC1C,yCAAyC,CAC1C,CAAC;YACJ,CAAC;YACD,MAAM,QAAQ,GAAG,wBAAwB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACvD,MAAM,MAAM,GAAG,WAAW,KAAK,CAAC,IAAI,GAAG,CAAC;YACxC,MAAM,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YAC5C,IACE,QAAQ,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;gBAC5B,WAAW,IAAI,CAAC;gBAChB,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,EAChE,CAAC;gBACD,MAAM,IAAI,kCAAkC,CAC1C,yCAAyC,CAC1C,CAAC;YACJ,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,KAAK;YACd,oBAAoB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACvC,MAAM,MAAM,GAAoC,EAAE,CAAC;YACnD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;YACrC,IAAI,SAA6B,CAAC;YAClC,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,gBAAgB,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;gBACtD,MAAM,MAAM,GAAG,aAAa,CAC1B,MAAM,MAAM,CAAC,IAAI,CACf,IAAI,2CAAkB,CAAC;oBACrB,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;oBACtD,GAAG,CAAC,KAAK,CAAC,sBAAsB,KAAK,SAAS;wBAC5C,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC;4BACE,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;yBACrD,CAAC;oBACN,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;iBAC7D,CAAC,CACH,CACF,CAAC;gBACF,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC;gBAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC9B,MAAM,IAAI,kCAAkC,CAC1C,yCAAyC,CAC1C,CAAC;gBACJ,CAAC;gBACD,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;oBAC7B,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACtC,MAAM,IAAI,GAAG,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAC9C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;wBACvC,MAAM,IAAI,kCAAkC,CAC1C,yCAAyC,CAC1C,CAAC;oBACJ,CAAC;oBACD,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC7B,CAAC;gBAED,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;oBACnC,OAAO,MAAM,CAAC,MAAM,CAClB,MAAM;yBACH,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAA,qCAAY,EAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;yBAC1D,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CACtC,CAAC;gBACJ,CAAC;gBACD,IACE,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;oBACpC,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;oBAC7B,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,EAChC,CAAC;oBACD,MAAM,IAAI,kCAAkC,CAC1C,wCAAwC,CACzC,CAAC;gBACJ,CAAC;gBACD,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACjC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;YAC/B,CAAC;YACD,MAAM,IAAI,kCAAkC,CAC1C,wCAAwC,CACzC,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,KAAK;YACjB,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC1B,MAAM,MAAM,GAAG,aAAa,CAC1B,MAAM,MAAM,CAAC,IAAI,CACf,IAAI,6CAAoB,CAAC;gBACvB,QAAQ,EAAE,KAAK,CAAC,GAAG;aACpB,CAAC,CACH,CACF,CAAC;YACF,IAAI,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,EAAE,CAAC;gBAC9C,MAAM,IAAI,kCAAkC,CAC1C,yCAAyC,CAC1C,CAAC;YACJ,CAAC;QACH,CAAC;QAED,KAAK,CAAC,kBAAkB,CAAC,KAAK;YAC5B,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC1B,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,kBAAkB,CAAC;gBAC/C,KAAK,CAAC,kBAAkB,GAAG,CAAC;gBAC5B,KAAK,CAAC,kBAAkB,GAAG,EAAE,EAC7B,CAAC;gBACD,MAAM,IAAI,kCAAkC,CAC1C,mCAAmC,CACpC,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,GAAG,aAAa,CAC1B,MAAM,MAAM,CAAC,IAAI,CACf,IAAI,4CAAmB,CAAC;gBACtB,oBAAoB,EAAE,KAAK,CAAC,kBAAkB;gBAC9C,QAAQ,EAAE,KAAK,CAAC,GAAG;aACpB,CAAC,CACH,CACF,CAAC;YACF,IACE,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG;gBACzC,CAAC,CAAC,MAAM,CAAC,YAAY,YAAY,IAAI,CAAC;gBACtC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,EAC3C,CAAC;gBACD,MAAM,IAAI,kCAAkC,CAC1C,yCAAyC,CAC1C,CAAC;YACJ,CAAC;YACD,OAAO,MAAM,CAAC,MAAM,CAAC;gBACnB,aAAa,EAAE,MAAM,CAAC,YAAY,CAAC,WAAW,EAAE;aACjD,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,KAAK;YACb,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC1B,MAAM,MAAM,CAAC,IAAI,CACf,IAAI,2CAAkB,CAAC;gBACrB,QAAQ,EAAE,KAAK,CAAC,GAAG;gBACnB,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;aAC5B,CAAC,CACH,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,SAAgB,8CAA8C,CAC5D,UAGI,EAAE;IAEN,MAAM,MAAM,GACV,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC,OAAO,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAG,2CAA2C,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IAEzE,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,aAAa,EAAE,QAAQ,CAAC,aAAa;QACrC,KAAK,CAAC,iBAAiB,CAAC,KAAK;YAC3B,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC1B,MAAM,MAAM,GAAG,aAAa,CAC1B,MAAM,MAAM,CAAC,IAAI,CACf,IAAI,4CAAmB,CAAC;gBACtB,0BAA0B,EAAE,IAAI;gBAChC,QAAQ,EAAE,KAAK,CAAC,GAAG;aACpB,CAAC,CACH,CACF,CAAC;YACF,IAAI,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,EAAE,CAAC;gBAC9C,MAAM,IAAI,kCAAkC,CAC1C,yCAAyC,CAC1C,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;KAChD,CAAC,CAAC;AACL,CAAC"}

package/src/secrets/generated-aws-control-plane.d.ts

@@ -0,0 +1,23 @@
+import { CreateSecretCommand, DescribeSecretCommand, SecretsManagerClient } from '@aws-sdk/client-secrets-manager';
+import type { GeneratedSecretInitializationControlPlane } from './operator.js';
+export type AwsGeneratedSecretCommand = CreateSecretCommand | DescribeSecretCommand;
+export interface AwsGeneratedSecretClient {
+    send(command: AwsGeneratedSecretCommand): Promise<unknown>;
+}
+export declare class AwsGeneratedSecretInitializationError extends Error {
+    readonly code: 'generated-secret-input-invalid' | 'generated-secret-observation-invalid' | 'generated-secret-read-failed' | 'generated-secret-state-conflicting' | 'generated-secret-write-failed';
+    constructor(code: AwsGeneratedSecretInitializationError['code']);
+}
+/**
+ * Generates one declared machine value inside the AWS adapter and atomically
+ * creates its Secrets Manager container. The public API accepts no plaintext
+ * and returns only applied/unchanged metadata. Plaintext necessarily exists
+ * transiently in this trusted process and the AWS SDK request, but it is never
+ * returned, logged, or persisted by EBK.
+ */
+export declare function createAwsGeneratedSecretInitializationControlPlane(options?: {
+    client?: AwsGeneratedSecretClient;
+    clientConfiguration?: ConstructorParameters<typeof SecretsManagerClient>[0];
+    randomBytes?: (size: number) => Buffer;
+    wait?: (milliseconds: number) => Promise<void>;
+}): GeneratedSecretInitializationControlPlane;

package/src/secrets/generated-aws-control-plane.js

@@ -0,0 +1,259 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AwsGeneratedSecretInitializationError = void 0;
+exports.createAwsGeneratedSecretInitializationControlPlane = createAwsGeneratedSecretInitializationControlPlane;
+const node_crypto_1 = require("node:crypto");
+const client_secrets_manager_1 = require("@aws-sdk/client-secrets-manager");
+const model_js_1 = require("./model.js");
+class AwsGeneratedSecretInitializationError extends Error {
+    code;
+    constructor(code) {
+        super(`Generated secret initialization failed (${code}).`);
+        this.name = 'AwsGeneratedSecretInitializationError';
+        this.code = code;
+    }
+}
+exports.AwsGeneratedSecretInitializationError = AwsGeneratedSecretInitializationError;
+const inspectionDelaysMilliseconds = [0, 100, 250, 500, 1_000];
+const generatedSecretNamePattern = /^ebk\/(development|staging|production)\/([a-z0-9][a-z0-9-]{0,62})\/([A-Za-z][A-Za-z0-9]{0,63})$/;
+const metadataTextPattern = /^[^\0]{1,256}$/;
+const slugPattern = /^[a-z0-9][a-z0-9-]{0,62}$/;
+const generatedSecretTagKeys = [
+    'ebk:generation',
+    'ebk:logical-name',
+    'ebk:management',
+    'ebk:owner',
+    'ebk:slice',
+    'ebk:stage',
+    'ebk:workspace',
+];
+function expectedVersionId(name, generation) {
+    return (0, node_crypto_1.createHash)('sha256')
+        .update('ebk-generated-secret-initialization-v2\0', 'utf8')
+        .update(name, 'utf8')
+        .update('\0', 'utf8')
+        .update(generation, 'utf8')
+        .digest('hex');
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function isResourceNotFound(error) {
+    return (isRecord(error) &&
+        (error['name'] === 'ResourceNotFoundException' ||
+            error['Code'] === 'ResourceNotFoundException' ||
+            error['code'] === 'ResourceNotFoundException'));
+}
+function requireInput(input) {
+    const name = generatedSecretNamePattern.exec(input.name);
+    if (!isRecord(input) ||
+        name === null ||
+        input.description !== `EBK generated secret ${name[3]}` ||
+        input.generation !== 'hmac-key-ring-v1' ||
+        !isRecord(input.tags) ||
+        Object.keys(input.tags).length !== generatedSecretTagKeys.length ||
+        generatedSecretTagKeys.some((key) => !Object.prototype.hasOwnProperty.call(input.tags, key)) ||
+        input.tags['ebk:generation'] !== 'hmac-key-ring-v1' ||
+        input.tags['ebk:logical-name'] !== name[3] ||
+        input.tags['ebk:management'] !== 'generated-secret' ||
+        !slugPattern.test(input.tags['ebk:owner'] ?? '') ||
+        input.tags['ebk:slice'] !== name[2] ||
+        input.tags['ebk:stage'] !== name[1] ||
+        !slugPattern.test(input.tags['ebk:workspace'] ?? '') ||
+        Object.entries(input.tags).some(([key, value]) => !metadataTextPattern.test(key) ||
+            typeof value !== 'string' ||
+            !metadataTextPattern.test(value))) {
+        throw new AwsGeneratedSecretInitializationError('generated-secret-input-invalid');
+    }
+}
+function tagsToAws(tags) {
+    return Object.keys(tags)
+        .sort()
+        .map((Key) => ({ Key, Value: tags[Key] }));
+}
+function exactTags(value, expected) {
+    if (!Array.isArray(value) || value.length !== Object.keys(expected).length) {
+        return false;
+    }
+    const observed = {};
+    for (const entry of value) {
+        if (!isRecord(entry) ||
+            typeof entry['Key'] !== 'string' ||
+            typeof entry['Value'] !== 'string' ||
+            Object.prototype.hasOwnProperty.call(observed, entry['Key'])) {
+            return false;
+        }
+        observed[entry['Key']] = entry['Value'];
+    }
+    return Object.entries(expected).every(([key, expectedValue]) => observed[key] === expectedValue);
+}
+function arnMatchesName(arn, name) {
+    if (!(0, model_js_1.isExactSecretArn)(arn))
+        return false;
+    const marker = `:secret:${name}-`;
+    const markerIndex = arn.lastIndexOf(marker);
+    return (markerIndex > 0 &&
+        /^[A-Za-z0-9]{6}$/.test(arn.slice(markerIndex + marker.length)));
+}
+function inspectVersionState(output, versionId) {
+    const versions = output.VersionIdsToStages;
+    if (versions === undefined || Object.keys(versions).length !== 1) {
+        return 'conflicting';
+    }
+    const entry = Object.entries(versions)[0];
+    return entry?.[0] === versionId &&
+        Array.isArray(entry[1]) &&
+        entry[1].length === 1 &&
+        entry[1][0] === 'AWSCURRENT'
+        ? 'current'
+        : 'conflicting';
+}
+function requireDescribeOutput(value, input) {
+    if (!isRecord(value) ||
+        typeof value['ARN'] !== 'string' ||
+        !arnMatchesName(value['ARN'], input.name) ||
+        value['Name'] !== input.name ||
+        value['Description'] !== input.description ||
+        value['DeletedDate'] !== undefined ||
+        value['RotationEnabled'] === true ||
+        !exactTags(value['Tags'], input.tags)) {
+        throw new AwsGeneratedSecretInitializationError('generated-secret-observation-invalid');
+    }
+    return {
+        arn: value['ARN'],
+        state: inspectVersionState(value, expectedVersionId(input.name, input.generation)),
+    };
+}
+function requireCreateOutput(value, input, versionId) {
+    if (!isRecord(value) ||
+        typeof value['ARN'] !== 'string' ||
+        !arnMatchesName(value['ARN'], input.name) ||
+        value['Name'] !== input.name ||
+        value['VersionId'] !== versionId) {
+        throw new AwsGeneratedSecretInitializationError('generated-secret-observation-invalid');
+    }
+    return value;
+}
+function defaultClient(configuration) {
+    const client = new client_secrets_manager_1.SecretsManagerClient(configuration);
+    return {
+        send(command) {
+            if (command instanceof client_secrets_manager_1.DescribeSecretCommand) {
+                return client.send(command);
+            }
+            return client.send(command);
+        },
+    };
+}
+async function defaultWait(milliseconds) {
+    if (milliseconds === 0)
+        return;
+    await new Promise((resolve) => setTimeout(resolve, milliseconds));
+}
+/**
+ * Generates one declared machine value inside the AWS adapter and atomically
+ * creates its Secrets Manager container. The public API accepts no plaintext
+ * and returns only applied/unchanged metadata. Plaintext necessarily exists
+ * transiently in this trusted process and the AWS SDK request, but it is never
+ * returned, logged, or persisted by EBK.
+ */
+function createAwsGeneratedSecretInitializationControlPlane(options = {}) {
+    const client = options.client ?? defaultClient(options.clientConfiguration ?? {});
+    const generateBytes = options.randomBytes ?? node_crypto_1.randomBytes;
+    const wait = options.wait ?? defaultWait;
+    const inspectExact = async (input) => {
+        requireInput(input);
+        let rawOutput;
+        try {
+            rawOutput = await client.send(new client_secrets_manager_1.DescribeSecretCommand({ SecretId: input.name }));
+        }
+        catch (error) {
+            if (isResourceNotFound(error))
+                return { state: 'missing' };
+            throw new AwsGeneratedSecretInitializationError('generated-secret-read-failed');
+        }
+        return requireDescribeOutput(rawOutput, input);
+    };
+    const inspectAfterCreate = async (input) => {
+        let finalInspection = { state: 'missing' };
+        for (const delay of inspectionDelaysMilliseconds) {
+            await wait(delay);
+            finalInspection = await inspectExact(input);
+            if (finalInspection.state !== 'missing')
+                return finalInspection;
+        }
+        return finalInspection;
+    };
+    return Object.freeze({
+        async inspect(input) {
+            return (await inspectExact(input)).state;
+        },
+        async initializeGenerated(input) {
+            requireInput(input);
+            const initial = await inspectExact(input);
+            if (initial.state === 'current')
+                return 'unchanged';
+            if (initial.state !== 'missing') {
+                throw new AwsGeneratedSecretInitializationError('generated-secret-state-conflicting');
+            }
+            let idBytes;
+            let keyBytes;
+            try {
+                idBytes = generateBytes(12);
+                keyBytes = generateBytes(32);
+            }
+            catch {
+                idBytes?.fill(0);
+                keyBytes?.fill(0);
+                throw new AwsGeneratedSecretInitializationError('generated-secret-input-invalid');
+            }
+            if (idBytes.length !== 12 || keyBytes.length !== 32) {
+                idBytes.fill(0);
+                keyBytes.fill(0);
+                throw new AwsGeneratedSecretInitializationError('generated-secret-input-invalid');
+            }
+            const versionId = expectedVersionId(input.name, input.generation);
+            let responseAccepted = false;
+            try {
+                try {
+                    // SecretString is intentionally created only in the trusted adapter.
+                    // JavaScript strings cannot be zeroized; never expose this command or
+                    // its input through logs, return values, evidence, or dependency hooks.
+                    const secretString = JSON.stringify({
+                        current: {
+                            id: `ebk-${idBytes.toString('hex')}`,
+                            secret: keyBytes.toString('base64url'),
+                        },
+                    });
+                    const output = await client.send(new client_secrets_manager_1.CreateSecretCommand({
+                        ClientRequestToken: versionId,
+                        Description: input.description,
+                        Name: input.name,
+                        SecretString: secretString,
+                        Tags: tagsToAws(input.tags),
+                    }));
+                    requireCreateOutput(output, input, versionId);
+                    responseAccepted = true;
+                }
+                catch {
+                    responseAccepted = false;
+                }
+            }
+            finally {
+                idBytes.fill(0);
+                keyBytes.fill(0);
+            }
+            const finalInspection = await inspectAfterCreate(input);
+            if (finalInspection.state === 'current') {
+                return responseAccepted ? 'applied' : 'unchanged';
+            }
+            if (finalInspection.state === 'conflicting') {
+                throw new AwsGeneratedSecretInitializationError('generated-secret-state-conflicting');
+            }
+            throw new AwsGeneratedSecretInitializationError(responseAccepted
+                ? 'generated-secret-observation-invalid'
+                : 'generated-secret-write-failed');
+        },
+    });
+}
+//# sourceMappingURL=generated-aws-control-plane.js.map

package/src/secrets/generated-aws-control-plane.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generated-aws-control-plane.js","sourceRoot":"","sources":["../../../../../packages/nx/src/secrets/generated-aws-control-plane.ts"],"names":[],"mappings":";;;AAqPA,gHA6HC;AAlXD,6CAAyE;AACzE,4EAMyC;AAEzC,yCAA8C;AAU9C,MAAa,qCAAsC,SAAQ,KAAK;IACrD,IAAI,CAKuB;IAEpC,YAAY,IAAmD;QAC7D,KAAK,CAAC,2CAA2C,IAAI,IAAI,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAI,GAAG,uCAAuC,CAAC;QACpD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAbD,sFAaC;AAYD,MAAM,4BAA4B,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,CAAU,CAAC;AACxE,MAAM,0BAA0B,GAC9B,iGAAiG,CAAC;AACpG,MAAM,mBAAmB,GAAG,gBAAgB,CAAC;AAC7C,MAAM,WAAW,GAAG,2BAA2B,CAAC;AAChD,MAAM,sBAAsB,GAAG;IAC7B,gBAAgB;IAChB,kBAAkB;IAClB,gBAAgB;IAChB,WAAW;IACX,WAAW;IACX,WAAW;IACX,eAAe;CACP,CAAC;AAEX,SAAS,iBAAiB,CACxB,IAAY,EACZ,UAA8B;IAE9B,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,0CAA0C,EAAE,MAAM,CAAC;SAC1D,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC;SACpB,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC;SACpB,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC;SAC1B,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC;QACf,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,2BAA2B;YAC5C,KAAK,CAAC,MAAM,CAAC,KAAK,2BAA2B;YAC7C,KAAK,CAAC,MAAM,CAAC,KAAK,2BAA2B,CAAC,CACjD,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAA2B;IAC/C,MAAM,IAAI,GAAG,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzD,IACE,CAAC,QAAQ,CAAC,KAAK,CAAC;QAChB,IAAI,KAAK,IAAI;QACb,KAAK,CAAC,WAAW,KAAK,wBAAwB,IAAI,CAAC,CAAC,CAAC,EAAE;QACvD,KAAK,CAAC,UAAU,KAAK,kBAAkB;QACvC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;QACrB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,sBAAsB,CAAC,MAAM;QAChE,sBAAsB,CAAC,IAAI,CACzB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAChE;QACD,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,kBAAkB;QACnD,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;QAC1C,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,kBAAkB;QACnD,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QAChD,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;QACnC,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;QACpD,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAC7B,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CACf,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC;YAC9B,OAAO,KAAK,KAAK,QAAQ;YACzB,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CACnC,EACD,CAAC;QACD,MAAM,IAAI,qCAAqC,CAC7C,gCAAgC,CACjC,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,IAAsC;IACvD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;SACrB,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,SAAS,CAChB,KAAc,EACd,QAA0C;IAE1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC;QAC3E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,IACE,CAAC,QAAQ,CAAC,KAAK,CAAC;YAChB,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,QAAQ;YAChC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,QAAQ;YAClC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAC5D,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,KAAK,CACnC,CAAC,CAAC,GAAG,EAAE,aAAa,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,aAAa,CAC1D,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,GAAW,EAAE,IAAY;IAC/C,IAAI,CAAC,IAAA,2BAAgB,EAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACzC,MAAM,MAAM,GAAG,WAAW,IAAI,GAAG,CAAC;IAClC,MAAM,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAC5C,OAAO,CACL,WAAW,GAAG,CAAC;QACf,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAChE,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAC1B,MAAmC,EACnC,SAAiB;IAEjB,MAAM,QAAQ,GAAG,MAAM,CAAC,kBAAkB,CAAC;IAC3C,IAAI,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjE,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1C,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,SAAS;QAC7B,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACvB,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC;QACrB,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,YAAY;QAC5B,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,aAAa,CAAC;AACpB,CAAC;AAED,SAAS,qBAAqB,CAC5B,KAAc,EACd,KAA2B;IAE3B,IACE,CAAC,QAAQ,CAAC,KAAK,CAAC;QAChB,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,QAAQ;QAChC,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC;QACzC,KAAK,CAAC,MAAM,CAAC,KAAK,KAAK,CAAC,IAAI;QAC5B,KAAK,CAAC,aAAa,CAAC,KAAK,KAAK,CAAC,WAAW;QAC1C,KAAK,CAAC,aAAa,CAAC,KAAK,SAAS;QAClC,KAAK,CAAC,iBAAiB,CAAC,KAAK,IAAI;QACjC,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,EACrC,CAAC;QACD,MAAM,IAAI,qCAAqC,CAC7C,sCAAsC,CACvC,CAAC;IACJ,CAAC;IACD,OAAO;QACL,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC;QACjB,KAAK,EAAE,mBAAmB,CACxB,KAA+C,EAC/C,iBAAiB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,UAAU,CAAC,CAChD;KACF,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAC1B,KAAc,EACd,KAA2B,EAC3B,SAAiB;IAEjB,IACE,CAAC,QAAQ,CAAC,KAAK,CAAC;QAChB,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,QAAQ;QAChC,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC;QACzC,KAAK,CAAC,MAAM,CAAC,KAAK,KAAK,CAAC,IAAI;QAC5B,KAAK,CAAC,WAAW,CAAC,KAAK,SAAS,EAChC,CAAC;QACD,MAAM,IAAI,qCAAqC,CAC7C,sCAAsC,CACvC,CAAC;IACJ,CAAC;IACD,OAAO,KAA6C,CAAC;AACvD,CAAC;AAED,SAAS,aAAa,CACpB,aAAoE;IAEpE,MAAM,MAAM,GAAG,IAAI,6CAAoB,CAAC,aAAa,CAAC,CAAC;IACvD,OAAO;QACL,IAAI,CAAC,OAAO;YACV,IAAI,OAAO,YAAY,8CAAqB,EAAE,CAAC;gBAC7C,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC9B,CAAC;YACD,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,YAAoB;IAC7C,IAAI,YAAY,KAAK,CAAC;QAAE,OAAO;IAC/B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,kDAAkD,CAChE,UAKI,EAAE;IAEN,MAAM,MAAM,GACV,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC,OAAO,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC;IACrE,MAAM,aAAa,GAAG,OAAO,CAAC,WAAW,IAAI,yBAAe,CAAC;IAC7D,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC;IAEzC,MAAM,YAAY,GAAG,KAAK,EACxB,KAA2B,EACS,EAAE;QACtC,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,IAAI,SAAkB,CAAC;QACvB,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CAC3B,IAAI,8CAAqB,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CACpD,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,kBAAkB,CAAC,KAAK,CAAC;gBAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;YAC3D,MAAM,IAAI,qCAAqC,CAC7C,8BAA8B,CAC/B,CAAC;QACJ,CAAC;QACD,OAAO,qBAAqB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACjD,CAAC,CAAC;IAEF,MAAM,kBAAkB,GAAG,KAAK,EAC9B,KAA2B,EACS,EAAE;QACtC,IAAI,eAAe,GAA8B,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QACtE,KAAK,MAAM,KAAK,IAAI,4BAA4B,EAAE,CAAC;YACjD,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC;YAClB,eAAe,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,CAAC;YAC5C,IAAI,eAAe,CAAC,KAAK,KAAK,SAAS;gBAAE,OAAO,eAAe,CAAC;QAClE,CAAC;QACD,OAAO,eAAe,CAAC;IACzB,CAAC,CAAC;IAEF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,KAAK,CAAC,OAAO,CAAC,KAAK;YACjB,OAAO,CAAC,MAAM,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;QAC3C,CAAC;QACD,KAAK,CAAC,mBAAmB,CAAC,KAAK;YAC7B,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,CAAC;YAC1C,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;gBAAE,OAAO,WAAW,CAAC;YACpD,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAChC,MAAM,IAAI,qCAAqC,CAC7C,oCAAoC,CACrC,CAAC;YACJ,CAAC;YAED,IAAI,OAA2B,CAAC;YAChC,IAAI,QAA4B,CAAC;YACjC,IAAI,CAAC;gBACH,OAAO,GAAG,aAAa,CAAC,EAAE,CAAC,CAAC;gBAC5B,QAAQ,GAAG,aAAa,CAAC,EAAE,CAAC,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;gBACjB,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClB,MAAM,IAAI,qCAAqC,CAC7C,gCAAgC,CACjC,CAAC;YACJ,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,KAAK,EAAE,IAAI,QAAQ,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;gBACpD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAChB,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACjB,MAAM,IAAI,qCAAqC,CAC7C,gCAAgC,CACjC,CAAC;YACJ,CAAC;YAED,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;YAClE,IAAI,gBAAgB,GAAG,KAAK,CAAC;YAC7B,IAAI,CAAC;gBACH,IAAI,CAAC;oBACH,qEAAqE;oBACrE,sEAAsE;oBACtE,wEAAwE;oBACxE,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC;wBAClC,OAAO,EAAE;4BACP,EAAE,EAAE,OAAO,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;4BACpC,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC;yBACvC;qBACF,CAAC,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAC9B,IAAI,4CAAmB,CAAC;wBACtB,kBAAkB,EAAE,SAAS;wBAC7B,WAAW,EAAE,KAAK,CAAC,WAAW;wBAC9B,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,YAAY,EAAE,YAAY;wBAC1B,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;qBAC5B,CAAC,CACH,CAAC;oBACF,mBAAmB,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;oBAC9C,gBAAgB,GAAG,IAAI,CAAC;gBAC1B,CAAC;gBAAC,MAAM,CAAC;oBACP,gBAAgB,GAAG,KAAK,CAAC;gBAC3B,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAChB,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACnB,CAAC;YAED,MAAM,eAAe,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC,CAAC;YACxD,IAAI,eAAe,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxC,OAAO,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC;YACpD,CAAC;YACD,IAAI,eAAe,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;gBAC5C,MAAM,IAAI,qCAAqC,CAC7C,oCAAoC,CACrC,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,qCAAqC,CAC7C,gBAAgB;gBACd,CAAC,CAAC,sCAAsC;gBACxC,CAAC,CAAC,+BAA+B,CACpC,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}