@empire-builder-kit/runtime 1.0.0-beta.9 → 1.0.0-rc.1

package/src/secrets/resolver.js

@@ -0,0 +1,602 @@
+import { __awaiter } from "tslib";
+import { GetSecretValueCommand, SecretsManagerClient, } from '@aws-sdk/client-secrets-manager';
+import { DEFAULT_SECRET_FRESH_TTL_MS, MAX_SECRET_STALE_TTL_MS, isDefinedSecret, } from './contract.js';
+const SERVER_RUNTIME_BRAND = Symbol('ebk.server-secret-runtime');
+const CORRELATION_ID_UNAVAILABLE = 'unavailable';
+export const DEFAULT_SECRET_CACHE_MAX_ENTRIES = 64;
+export const MAX_SECRET_CACHE_MAX_ENTRIES = 1024;
+export const SECRET_SOURCE_FAILURE_CLASSES = [
+    'access-denied',
+    'availability',
+    'missing',
+    'other',
+];
+export class SecretSourceError extends Error {
+    constructor(failureClass, code) {
+        super('The secret source could not satisfy the request.');
+        this.name = 'SecretSourceError';
+        this.failureClass = failureClass;
+        this.code = code;
+    }
+}
+export const SECRET_RESOLUTION_ERROR_CODES = [
+    'secret-access-denied',
+    'secret-current-version-missing',
+    'secret-cache-capacity-exceeded',
+    'secret-reference-invalid',
+    'secret-reference-mismatch',
+    'secret-refresh-invalidated',
+    'secret-personal-source-forbidden',
+    'secret-personal-stage-invalid',
+    'secret-runtime-configuration-invalid',
+    'secret-runtime-unbound',
+    'secret-source-failed',
+    'secret-source-missing',
+    'secret-source-unavailable',
+    'secret-value-malformed',
+];
+export class SecretResolutionError extends Error {
+    constructor(input) {
+        var _a;
+        const correlationId = safeCorrelationId(input.correlationId);
+        super(`Secret "${safeLogicalName(input.logicalName)}" could not be resolved ` +
+            `(${input.code}); correlationId=${correlationId}.`);
+        this.name = 'SecretResolutionError';
+        this.code = input.code;
+        this.correlationId = correlationId;
+        this.logicalName = safeLogicalName(input.logicalName);
+        this.staleEligible = (_a = input.staleEligible) !== null && _a !== void 0 ? _a : false;
+    }
+}
+const safeIdentityPattern = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/;
+const logicalNamePattern = /^[A-Za-z][A-Za-z0-9]{0,63}$/;
+const secretArnPattern = /^arn:(?:aws|aws-us-gov|aws-cn):secretsmanager:[a-z0-9-]+:\d{12}:secret:[A-Za-z0-9/_+=.@-]+$/;
+function safeLogicalName(value) {
+    return logicalNamePattern.test(value) ? value : 'unknown';
+}
+function safeCorrelationId(value) {
+    return value !== undefined && safeIdentityPattern.test(value)
+        ? value
+        : CORRELATION_ID_UNAVAILABLE;
+}
+function validateDuration(value, fallback, maximum) {
+    const resolved = value !== null && value !== void 0 ? value : fallback;
+    if (!Number.isSafeInteger(resolved) || resolved < 0 || resolved > maximum) {
+        throw new SecretResolutionError({
+            code: 'secret-runtime-configuration-invalid',
+            logicalName: 'unknown',
+        });
+    }
+    return resolved;
+}
+function resolveCachePolicy(policy) {
+    var _a;
+    const maximumEntries = (_a = policy === null || policy === void 0 ? void 0 : policy.maximumEntries) !== null && _a !== void 0 ? _a : DEFAULT_SECRET_CACHE_MAX_ENTRIES;
+    if (!Number.isSafeInteger(maximumEntries) ||
+        maximumEntries < 1 ||
+        maximumEntries > MAX_SECRET_CACHE_MAX_ENTRIES) {
+        throw new SecretResolutionError({
+            code: 'secret-runtime-configuration-invalid',
+            logicalName: 'unknown',
+        });
+    }
+    return {
+        freshTtlMs: validateDuration(policy === null || policy === void 0 ? void 0 : policy.freshTtlMs, DEFAULT_SECRET_FRESH_TTL_MS, DEFAULT_SECRET_FRESH_TTL_MS),
+        staleTtlMs: validateDuration(policy === null || policy === void 0 ? void 0 : policy.staleTtlMs, MAX_SECRET_STALE_TTL_MS, MAX_SECRET_STALE_TTL_MS),
+        maximumEntries,
+    };
+}
+function resolveBackoffPolicy(policy) {
+    var _a, _b;
+    const initialMs = (_a = policy === null || policy === void 0 ? void 0 : policy.initialMs) !== null && _a !== void 0 ? _a : 1000;
+    const maximumMs = (_b = policy === null || policy === void 0 ? void 0 : policy.maximumMs) !== null && _b !== void 0 ? _b : 30000;
+    if (!Number.isSafeInteger(initialMs) ||
+        !Number.isSafeInteger(maximumMs) ||
+        initialMs < 1 ||
+        maximumMs < initialMs ||
+        maximumMs > 60000) {
+        throw new SecretResolutionError({
+            code: 'secret-runtime-configuration-invalid',
+            logicalName: 'unknown',
+        });
+    }
+    return { initialMs, maximumMs };
+}
+function effectiveCachePolicy(defaults, declaration) {
+    var _a, _b, _c, _d;
+    return {
+        freshTtlMs: Math.min(defaults.freshTtlMs, (_b = (_a = declaration.cache) === null || _a === void 0 ? void 0 : _a.freshTtlMs) !== null && _b !== void 0 ? _b : defaults.freshTtlMs),
+        maximumEntries: defaults.maximumEntries,
+        staleTtlMs: Math.min(defaults.staleTtlMs, (_d = (_c = declaration.cache) === null || _c === void 0 ? void 0 : _c.staleTtlMs) !== null && _d !== void 0 ? _d : defaults.staleTtlMs),
+    };
+}
+function isBinding(value) {
+    return (typeof value === 'object' &&
+        value !== null &&
+        SERVER_RUNTIME_BRAND in value &&
+        value[SERVER_RUNTIME_BRAND] === true);
+}
+export function assertServerSecretRuntimeBinding(value) {
+    if (!isBinding(value)) {
+        throw new SecretResolutionError({
+            code: 'secret-runtime-unbound',
+            logicalName: 'unknown',
+        });
+    }
+}
+export function bindServerSecretRuntime(input) {
+    if (!safeIdentityPattern.test(input.stage) ||
+        !safeIdentityPattern.test(input.workload)) {
+        throw new SecretResolutionError({
+            code: 'secret-runtime-unbound',
+            logicalName: 'unknown',
+        });
+    }
+    return Object.freeze({
+        [SERVER_RUNTIME_BRAND]: true,
+        stage: input.stage,
+        workload: input.workload,
+    });
+}
+function sourceFailure(error) {
+    if (error instanceof SecretSourceError) {
+        return error;
+    }
+    return new SecretSourceError('other', 'source-failed');
+}
+function resolutionFailure(error, logicalName, context) {
+    switch (error.failureClass) {
+        case 'access-denied':
+            return new SecretResolutionError({
+                code: 'secret-access-denied',
+                correlationId: context === null || context === void 0 ? void 0 : context.correlationId,
+                logicalName,
+            });
+        case 'availability':
+            return new SecretResolutionError({
+                code: 'secret-source-unavailable',
+                correlationId: context === null || context === void 0 ? void 0 : context.correlationId,
+                logicalName,
+                staleEligible: true,
+            });
+        case 'missing':
+            return new SecretResolutionError({
+                code: 'secret-source-missing',
+                correlationId: context === null || context === void 0 ? void 0 : context.correlationId,
+                logicalName,
+            });
+        case 'other':
+            return new SecretResolutionError({
+                code: 'secret-source-failed',
+                correlationId: context === null || context === void 0 ? void 0 : context.correlationId,
+                logicalName,
+            });
+    }
+}
+function clonePayload(payload) {
+    return Object.assign(Object.assign({}, (payload.secretBinary === undefined
+        ? {}
+        : { secretBinary: new Uint8Array(payload.secretBinary) })), (payload.secretString === undefined
+        ? {}
+        : { secretString: payload.secretString }));
+}
+function wipePayload(payload) {
+    var _a;
+    (_a = payload === null || payload === void 0 ? void 0 : payload.secretBinary) === null || _a === void 0 ? void 0 : _a.fill(0);
+}
+function validatePayload(declaration, payload, context) {
+    let validationPayload;
+    try {
+        validationPayload = clonePayload(payload);
+        const result = declaration.value.validate(validationPayload);
+        if (result.valid) {
+            return (declaration.value.kind === 'binary' &&
+                result.value instanceof Uint8Array
+                ? new Uint8Array(result.value)
+                : result.value);
+        }
+    }
+    catch (_a) {
+        // Validator details are intentionally discarded: they may include values.
+    }
+    finally {
+        wipePayload(validationPayload);
+    }
+    throw new SecretResolutionError({
+        code: 'secret-value-malformed',
+        correlationId: context === null || context === void 0 ? void 0 : context.correlationId,
+        logicalName: declaration.logicalName,
+    });
+}
+function assertPayloadValid(declaration, payload, context) {
+    const value = validatePayload(declaration, payload, context);
+    if (declaration.value.kind === 'binary' && value instanceof Uint8Array) {
+        value.fill(0);
+    }
+}
+function validateReference(declaration, reference, context) {
+    if (!isDefinedSecret(declaration)) {
+        throw new SecretResolutionError({
+            code: 'secret-reference-invalid',
+            correlationId: context === null || context === void 0 ? void 0 : context.correlationId,
+            logicalName: 'unknown',
+        });
+    }
+    if (reference.provider !== 'aws-secrets-manager' ||
+        !secretArnPattern.test(reference.secretArn) ||
+        !logicalNamePattern.test(reference.logicalName)) {
+        throw new SecretResolutionError({
+            code: 'secret-reference-invalid',
+            correlationId: context === null || context === void 0 ? void 0 : context.correlationId,
+            logicalName: declaration.logicalName,
+        });
+    }
+    if (reference.logicalName !== declaration.logicalName) {
+        throw new SecretResolutionError({
+            code: 'secret-reference-mismatch',
+            correlationId: context === null || context === void 0 ? void 0 : context.correlationId,
+            logicalName: declaration.logicalName,
+        });
+    }
+}
+function awsErrorIdentifiers(error) {
+    if (typeof error !== 'object' || error === null) {
+        return [];
+    }
+    const value = error;
+    return [
+        ...(typeof value.name === 'string' ? [value.name] : []),
+        ...(typeof value.code === 'string' ? [value.code] : []),
+    ];
+}
+function classifyAwsError(error) {
+    const identifiers = awsErrorIdentifiers(error);
+    if (identifiers.some((identifier) => [
+        'AccessDeniedException',
+        'DecryptionFailure',
+        'ExpiredTokenException',
+        'InvalidSignatureException',
+        'UnrecognizedClientException',
+    ].includes(identifier))) {
+        return new SecretSourceError('access-denied', 'aws-access-denied');
+    }
+    if (identifiers.includes('ResourceNotFoundException')) {
+        return new SecretSourceError('missing', 'aws-secret-missing');
+    }
+    if (identifiers.some((identifier) => [
+        'AbortError',
+        'EAI_AGAIN',
+        'ECONNREFUSED',
+        'ECONNRESET',
+        'ENETUNREACH',
+        'ENOTFOUND',
+        'ETIMEDOUT',
+        'InternalServiceError',
+        'NetworkingError',
+        'RequestTimeout',
+        'RequestTimeoutException',
+        'ServiceUnavailable',
+        'ServiceUnavailableException',
+        'Throttling',
+        'ThrottlingException',
+        'TimeoutError',
+        'TooManyRequestsException',
+    ].includes(identifier))) {
+        return new SecretSourceError('availability', 'aws-source-unavailable');
+    }
+    return new SecretSourceError('other', 'aws-source-failed');
+}
+export function createAwsSecretsManagerSource(client = new SecretsManagerClient({})) {
+    return {
+        getCurrentValue(request) {
+            return __awaiter(this, void 0, void 0, function* () {
+                var _a, _b;
+                try {
+                    const output = yield client.send(new GetSecretValueCommand({
+                        SecretId: request.secretArn,
+                        VersionStage: 'AWSCURRENT',
+                    }));
+                    try {
+                        return Object.assign(Object.assign(Object.assign({}, (output.SecretBinary === undefined
+                            ? {}
+                            : { secretBinary: new Uint8Array(output.SecretBinary) })), (output.SecretString === undefined
+                            ? {}
+                            : { secretString: output.SecretString })), { versionStages: (_a = output.VersionStages) !== null && _a !== void 0 ? _a : [] });
+                    }
+                    finally {
+                        (_b = output.SecretBinary) === null || _b === void 0 ? void 0 : _b.fill(0);
+                    }
+                }
+                catch (error) {
+                    throw classifyAwsError(error);
+                }
+            });
+        },
+    };
+}
+export function createServerSecretResolver(options) {
+    var _a;
+    if (typeof options !== 'object' ||
+        options === null ||
+        typeof ((_a = options.source) === null || _a === void 0 ? void 0 : _a.getCurrentValue) !== 'function') {
+        throw new SecretResolutionError({
+            code: 'secret-runtime-unbound',
+            logicalName: 'unknown',
+        });
+    }
+    assertServerSecretRuntimeBinding(options.binding);
+    const now = () => {
+        var _a, _b;
+        const value = (_b = (_a = options.clock) === null || _a === void 0 ? void 0 : _a.now()) !== null && _b !== void 0 ? _b : Date.now();
+        if (!Number.isSafeInteger(value) || value < 0) {
+            throw new SecretResolutionError({
+                code: 'secret-runtime-configuration-invalid',
+                logicalName: 'unknown',
+            });
+        }
+        return value;
+    };
+    const defaultCache = resolveCachePolicy(options.cache);
+    const backoff = resolveBackoffPolicy(options.backoff);
+    const cache = new Map();
+    const failures = new Map();
+    const generations = new Map();
+    const inflight = new Map();
+    const knownKeys = new Map();
+    const schemaIds = new WeakMap();
+    let nextSchemaId = 1;
+    function deleteCached(key) {
+        const existing = cache.get(key);
+        if (existing !== undefined) {
+            wipePayload(existing.payload);
+            cache.delete(key);
+        }
+    }
+    function removeKeyState(key) {
+        deleteCached(key);
+        failures.delete(key);
+        generations.delete(key);
+        knownKeys.delete(key);
+    }
+    function reserveKey(key) {
+        if (knownKeys.delete(key)) {
+            knownKeys.set(key, true);
+            return;
+        }
+        if (knownKeys.size >= defaultCache.maximumEntries) {
+            const evictable = [...knownKeys.keys()].find((candidate) => !inflight.has(candidate));
+            if (evictable === undefined) {
+                throw new SecretResolutionError({
+                    code: 'secret-cache-capacity-exceeded',
+                    logicalName: 'unknown',
+                });
+            }
+            removeKeyState(evictable);
+        }
+        knownKeys.set(key, true);
+    }
+    function observe(observation) {
+        var _a, _b;
+        try {
+            (_b = (_a = options.hooks) === null || _a === void 0 ? void 0 : _a.observe) === null || _b === void 0 ? void 0 : _b.call(_a, observation);
+        }
+        catch (_c) {
+            // Observability must not alter secret availability.
+        }
+    }
+    function observationContext(logicalName, context) {
+        return {
+            correlationId: safeCorrelationId(context === null || context === void 0 ? void 0 : context.correlationId),
+            logicalName,
+        };
+    }
+    function cacheKey(declaration, reference) {
+        let schemaId = schemaIds.get(declaration.value);
+        if (schemaId === undefined) {
+            schemaId = nextSchemaId;
+            nextSchemaId += 1;
+            schemaIds.set(declaration.value, schemaId);
+        }
+        return `${reference.secretArn}\0${reference.logicalName}\0${schemaId}`;
+    }
+    function nextBackoff(key, timestamp) {
+        var _a, _b;
+        const attempts = ((_b = (_a = failures.get(key)) === null || _a === void 0 ? void 0 : _a.attempts) !== null && _b !== void 0 ? _b : 0) + 1;
+        const delay = Math.min(backoff.initialMs * Math.pow(2, Math.min(attempts - 1, 16)), backoff.maximumMs);
+        failures.set(key, { attempts, nextRefreshAt: timestamp + delay });
+        return delay;
+    }
+    function startRefresh(key, declaration, reference, context) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a;
+            const existing = inflight.get(key);
+            if (existing !== undefined) {
+                return existing;
+            }
+            const generation = (_a = generations.get(key)) !== null && _a !== void 0 ? _a : 0;
+            const request = (() => __awaiter(this, void 0, void 0, function* () {
+                var _a, _b;
+                let candidatePayload;
+                observe(Object.assign(Object.assign({}, observationContext(declaration.logicalName, context)), { type: 'refresh-started' }));
+                try {
+                    const sourceValue = yield options.source.getCurrentValue({
+                        logicalName: declaration.logicalName,
+                        secretArn: reference.secretArn,
+                        versionStage: 'AWSCURRENT',
+                    });
+                    try {
+                        if (!sourceValue.versionStages.includes('AWSCURRENT')) {
+                            throw new SecretResolutionError({
+                                code: 'secret-current-version-missing',
+                                correlationId: context === null || context === void 0 ? void 0 : context.correlationId,
+                                logicalName: declaration.logicalName,
+                            });
+                        }
+                        candidatePayload = clonePayload(sourceValue);
+                    }
+                    finally {
+                        wipePayload(sourceValue);
+                    }
+                    assertPayloadValid(declaration, candidatePayload, context);
+                    if (((_a = generations.get(key)) !== null && _a !== void 0 ? _a : 0) !== generation) {
+                        throw new SecretResolutionError({
+                            code: 'secret-refresh-invalidated',
+                            correlationId: context === null || context === void 0 ? void 0 : context.correlationId,
+                            logicalName: declaration.logicalName,
+                        });
+                    }
+                    const refreshed = { loadedAt: now(), payload: candidatePayload };
+                    deleteCached(key);
+                    cache.set(key, refreshed);
+                    candidatePayload = undefined;
+                    failures.delete(key);
+                    observe(Object.assign(Object.assign({}, observationContext(declaration.logicalName, context)), { type: 'refresh-succeeded' }));
+                    return refreshed;
+                }
+                catch (error) {
+                    wipePayload(candidatePayload);
+                    const invalidated = ((_b = generations.get(key)) !== null && _b !== void 0 ? _b : 0) !== generation;
+                    const resolved = invalidated
+                        ? new SecretResolutionError({
+                            code: 'secret-refresh-invalidated',
+                            correlationId: context === null || context === void 0 ? void 0 : context.correlationId,
+                            logicalName: declaration.logicalName,
+                        })
+                        : error instanceof SecretResolutionError
+                            ? error
+                            : resolutionFailure(sourceFailure(error), declaration.logicalName, context);
+                    const failureClass = resolved.staleEligible
+                        ? 'availability'
+                        : sourceFailure(error).failureClass;
+                    if (invalidated) {
+                        // A newer generation owns all cache/backoff state for this key.
+                    }
+                    else if (resolved.staleEligible) {
+                        nextBackoff(key, now());
+                    }
+                    else {
+                        deleteCached(key);
+                        failures.delete(key);
+                    }
+                    observe(Object.assign(Object.assign({}, observationContext(declaration.logicalName, context)), { failureClass, type: 'refresh-failed' }));
+                    throw resolved;
+                }
+            }))();
+            inflight.set(key, request);
+            try {
+                return yield request;
+            }
+            finally {
+                if (inflight.get(key) === request) {
+                    inflight.delete(key);
+                }
+            }
+        });
+    }
+    function get(declaration_1, reference_1, context_1) {
+        return __awaiter(this, arguments, void 0, function* (declaration, reference, context, forceRefresh = false) {
+            var _a, _b, _c, _d;
+            validateReference(declaration, reference, context);
+            const key = cacheKey(declaration, reference);
+            reserveKey(key);
+            const policy = effectiveCachePolicy(defaultCache, declaration);
+            const timestamp = now();
+            const generation = (_a = generations.get(key)) !== null && _a !== void 0 ? _a : 0;
+            const existing = cache.get(key);
+            const ageMs = existing === undefined
+                ? Number.POSITIVE_INFINITY
+                : Math.max(0, timestamp - existing.loadedAt);
+            if (!forceRefresh && existing !== undefined && ageMs < policy.freshTtlMs) {
+                observe(Object.assign(Object.assign({ ageMs }, observationContext(declaration.logicalName, context)), { type: 'cache-hit' }));
+                return validatePayload(declaration, existing.payload, context);
+            }
+            const failure = failures.get(key);
+            const withinStaleWindow = existing !== undefined && ageMs <= policy.freshTtlMs + policy.staleTtlMs;
+            if (!forceRefresh &&
+                failure !== undefined &&
+                timestamp < failure.nextRefreshAt) {
+                if (withinStaleWindow && existing !== undefined) {
+                    observe(Object.assign(Object.assign({ ageMs }, observationContext(declaration.logicalName, context)), { retryAfterMs: failure.nextRefreshAt - timestamp, type: 'stale-value-used' }));
+                    return validatePayload(declaration, existing.payload, context);
+                }
+                deleteCached(key);
+                throw new SecretResolutionError({
+                    code: 'secret-source-unavailable',
+                    correlationId: context === null || context === void 0 ? void 0 : context.correlationId,
+                    logicalName: declaration.logicalName,
+                    staleEligible: true,
+                });
+            }
+            try {
+                const refreshed = yield startRefresh(key, declaration, reference, context);
+                if (cache.get(key) !== refreshed) {
+                    throw new SecretResolutionError({
+                        code: 'secret-refresh-invalidated',
+                        correlationId: context === null || context === void 0 ? void 0 : context.correlationId,
+                        logicalName: declaration.logicalName,
+                    });
+                }
+                return validatePayload(declaration, refreshed.payload, context);
+            }
+            catch (error) {
+                if (!forceRefresh &&
+                    error instanceof SecretResolutionError &&
+                    error.staleEligible &&
+                    withinStaleWindow &&
+                    existing !== undefined &&
+                    ((_b = generations.get(key)) !== null && _b !== void 0 ? _b : 0) === generation &&
+                    cache.get(key) === existing) {
+                    const retryAt = (_d = (_c = failures.get(key)) === null || _c === void 0 ? void 0 : _c.nextRefreshAt) !== null && _d !== void 0 ? _d : timestamp;
+                    observe(Object.assign(Object.assign({ ageMs }, observationContext(declaration.logicalName, context)), { retryAfterMs: Math.max(0, retryAt - timestamp), type: 'stale-value-used' }));
+                    return validatePayload(declaration, existing.payload, context);
+                }
+                throw error;
+            }
+        });
+    }
+    function invalidate(declaration, reference, reason = 'explicit', context) {
+        var _a;
+        validateReference(declaration, reference, context);
+        const key = cacheKey(declaration, reference);
+        if (!knownKeys.has(key) && !inflight.has(key) && !cache.has(key)) {
+            observe(Object.assign(Object.assign({}, observationContext(declaration.logicalName, context)), { reason, type: 'cache-invalidated' }));
+            return;
+        }
+        deleteCached(key);
+        failures.delete(key);
+        generations.set(key, ((_a = generations.get(key)) !== null && _a !== void 0 ? _a : 0) + 1);
+        inflight.delete(key);
+        observe(Object.assign(Object.assign({}, observationContext(declaration.logicalName, context)), { reason, type: 'cache-invalidated' }));
+    }
+    const resolver = {
+        get: (declaration, reference, context) => get(declaration, reference, context),
+        invalidate,
+        runWithSecret(runOptions) {
+            return __awaiter(this, void 0, void 0, function* () {
+                const value = yield get(runOptions.declaration, runOptions.reference, runOptions.context);
+                try {
+                    return yield runOptions.operation(value);
+                }
+                catch (error) {
+                    if (!runOptions.isAuthenticationFailure(error)) {
+                        throw error;
+                    }
+                }
+                invalidate(runOptions.declaration, runOptions.reference, 'authentication-failure', runOptions.context);
+                observe(Object.assign(Object.assign({}, observationContext(runOptions.declaration.logicalName, runOptions.context)), { type: 'authentication-retry' }));
+                const refreshed = yield get(runOptions.declaration, runOptions.reference, runOptions.context, true);
+                try {
+                    return yield runOptions.operation(refreshed);
+                }
+                catch (error) {
+                    if (runOptions.isAuthenticationFailure(error)) {
+                        invalidate(runOptions.declaration, runOptions.reference, 'authentication-failure', runOptions.context);
+                    }
+                    throw error;
+                }
+            });
+        },
+    };
+    return Object.freeze(resolver);
+}
+//# sourceMappingURL=resolver.js.map

package/src/secrets/resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolver.js","sourceRoot":"","sources":["../../../../../packages/runtime/src/secrets/resolver.ts"],"names":[],"mappings":";AAAA,OAAO,EACL,qBAAqB,EACrB,oBAAoB,GAErB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,2BAA2B,EAC3B,uBAAuB,EACvB,eAAe,GAMhB,MAAM,eAAe,CAAC;AAEvB,MAAM,oBAAoB,GAAG,MAAM,CAAC,2BAA2B,CAAC,CAAC;AACjE,MAAM,0BAA0B,GAAG,aAAa,CAAC;AACjD,MAAM,CAAC,MAAM,gCAAgC,GAAG,EAAW,CAAC;AAC5D,MAAM,CAAC,MAAM,4BAA4B,GAAG,IAAc,CAAC;AAE3D,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,eAAe;IACf,cAAc;IACd,SAAS;IACT,OAAO;CACC,CAAC;AAmBX,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAI1C,YAAY,YAAsC,EAAE,IAAY;QAC9D,KAAK,CAAC,kDAAkD,CAAC,CAAC;QAC1D,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,sBAAsB;IACtB,gCAAgC;IAChC,gCAAgC;IAChC,0BAA0B;IAC1B,2BAA2B;IAC3B,4BAA4B;IAC5B,kCAAkC;IAClC,+BAA+B;IAC/B,sCAAsC;IACtC,wBAAwB;IACxB,sBAAsB;IACtB,uBAAuB;IACvB,2BAA2B;IAC3B,wBAAwB;CAChB,CAAC;AAKX,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAM9C,YAAY,KAKX;;QACC,MAAM,aAAa,GAAG,iBAAiB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAC7D,KAAK,CACH,WAAW,eAAe,CAAC,KAAK,CAAC,WAAW,CAAC,0BAA0B;YACrE,IAAI,KAAK,CAAC,IAAI,oBAAoB,aAAa,GAAG,CACrD,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;QACpC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACvB,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACtD,IAAI,CAAC,aAAa,GAAG,MAAA,KAAK,CAAC,aAAa,mCAAI,KAAK,CAAC;IACpD,CAAC;CACF;AA2ID,MAAM,mBAAmB,GAAG,qCAAqC,CAAC;AAClE,MAAM,kBAAkB,GAAG,6BAA6B,CAAC;AACzD,MAAM,gBAAgB,GACpB,6FAA6F,CAAC;AAEhG,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5D,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAyB;IAClD,OAAO,KAAK,KAAK,SAAS,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC;QAC3D,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,0BAA0B,CAAC;AACjC,CAAC;AAED,SAAS,gBAAgB,CACvB,KAAyB,EACzB,QAAgB,EAChB,OAAe;IAEf,MAAM,QAAQ,GAAG,KAAK,aAAL,KAAK,cAAL,KAAK,GAAI,QAAQ,CAAC;IACnC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,IAAI,QAAQ,GAAG,OAAO,EAAE,CAAC;QAC1E,MAAM,IAAI,qBAAqB,CAAC;YAC9B,IAAI,EAAE,sCAAsC;YAC5C,WAAW,EAAE,SAAS;SACvB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,kBAAkB,CACzB,MAA6C;;IAE7C,MAAM,cAAc,GAClB,MAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,cAAc,mCAAI,gCAAgC,CAAC;IAC7D,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,cAAc,CAAC;QACrC,cAAc,GAAG,CAAC;QAClB,cAAc,GAAG,4BAA4B,EAC7C,CAAC;QACD,MAAM,IAAI,qBAAqB,CAAC;YAC9B,IAAI,EAAE,sCAAsC;YAC5C,WAAW,EAAE,SAAS;SACvB,CAAC,CAAC;IACL,CAAC;IACD,OAAO;QACL,UAAU,EAAE,gBAAgB,CAC1B,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,UAAU,EAClB,2BAA2B,EAC3B,2BAA2B,CAC5B;QACD,UAAU,EAAE,gBAAgB,CAC1B,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,UAAU,EAClB,uBAAuB,EACvB,uBAAuB,CACxB;QACD,cAAc;KACf,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAC3B,MAA+C;;IAE/C,MAAM,SAAS,GAAG,MAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,SAAS,mCAAI,IAAK,CAAC;IAC7C,MAAM,SAAS,GAAG,MAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,SAAS,mCAAI,KAAM,CAAC;IAC9C,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC;QAChC,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC;QAChC,SAAS,GAAG,CAAC;QACb,SAAS,GAAG,SAAS;QACrB,SAAS,GAAG,KAAM,EAClB,CAAC;QACD,MAAM,IAAI,qBAAqB,CAAC;YAC9B,IAAI,EAAE,sCAAsC;YAC5C,WAAW,EAAE,SAAS;SACvB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,oBAAoB,CAC3B,QAA6B,EAC7B,WAA0B;;IAE1B,OAAO;QACL,UAAU,EAAE,IAAI,CAAC,GAAG,CAClB,QAAQ,CAAC,UAAU,EACnB,MAAA,MAAA,WAAW,CAAC,KAAK,0CAAE,UAAU,mCAAI,QAAQ,CAAC,UAAU,CACrD;QACD,cAAc,EAAE,QAAQ,CAAC,cAAc;QACvC,UAAU,EAAE,IAAI,CAAC,GAAG,CAClB,QAAQ,CAAC,UAAU,EACnB,MAAA,MAAA,WAAW,CAAC,KAAK,0CAAE,UAAU,mCAAI,QAAQ,CAAC,UAAU,CACrD;KACF,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,oBAAoB,IAAI,KAAK;QAC7B,KAAK,CAAC,oBAAoB,CAAC,KAAK,IAAI,CACrC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,KAAc;IAEd,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,qBAAqB,CAAC;YAC9B,IAAI,EAAE,wBAAwB;YAC9B,WAAW,EAAE,SAAS;SACvB,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAGvC;IACC,IACE,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;QACtC,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EACzC,CAAC;QACD,MAAM,IAAI,qBAAqB,CAAC;YAC9B,IAAI,EAAE,wBAAwB;YAC9B,WAAW,EAAE,SAAS;SACvB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,CAAC,oBAAoB,CAAC,EAAE,IAAa;QACrC,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;QACvC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,IAAI,iBAAiB,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,iBAAiB,CACxB,KAAwB,EACxB,WAAmB,EACnB,OAA4C;IAE5C,QAAQ,KAAK,CAAC,YAAY,EAAE,CAAC;QAC3B,KAAK,eAAe;YAClB,OAAO,IAAI,qBAAqB,CAAC;gBAC/B,IAAI,EAAE,sBAAsB;gBAC5B,aAAa,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,aAAa;gBACrC,WAAW;aACZ,CAAC,CAAC;QACL,KAAK,cAAc;YACjB,OAAO,IAAI,qBAAqB,CAAC;gBAC/B,IAAI,EAAE,2BAA2B;gBACjC,aAAa,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,aAAa;gBACrC,WAAW;gBACX,aAAa,EAAE,IAAI;aACpB,CAAC,CAAC;QACL,KAAK,SAAS;YACZ,OAAO,IAAI,qBAAqB,CAAC;gBAC/B,IAAI,EAAE,uBAAuB;gBAC7B,aAAa,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,aAAa;gBACrC,WAAW;aACZ,CAAC,CAAC;QACL,KAAK,OAAO;YACV,OAAO,IAAI,qBAAqB,CAAC;gBAC/B,IAAI,EAAE,sBAAsB;gBAC5B,aAAa,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,aAAa;gBACrC,WAAW;aACZ,CAAC,CAAC;IACP,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,OAA2B;IAC/C,uCACK,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS;QACpC,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,UAAU,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC,GACxD,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS;QACpC,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,EAC3C;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,OAAuC;;IAC1D,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,YAAY,0CAAE,IAAI,CAAC,CAAC,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,eAAe,CAGtB,WAAwB,EACxB,OAA2B,EAC3B,OAA4C;IAE5C,IAAI,iBAAiD,CAAC;IACtD,IAAI,CAAC;QACH,iBAAiB,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;QAC7D,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,OAAO,CACL,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ;gBACnC,MAAM,CAAC,KAAK,YAAY,UAAU;gBAChC,CAAC,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC9B,CAAC,CAAC,MAAM,CAAC,KAAK,CACa,CAAC;QAClC,CAAC;IACH,CAAC;IAAC,WAAM,CAAC;QACP,0EAA0E;IAC5E,CAAC;YAAS,CAAC;QACT,WAAW,CAAC,iBAAiB,CAAC,CAAC;IACjC,CAAC;IAED,MAAM,IAAI,qBAAqB,CAAC;QAC9B,IAAI,EAAE,wBAAwB;QAC9B,aAAa,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,aAAa;QACrC,WAAW,EAAE,WAAW,CAAC,WAAW;KACrC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CAGzB,WAAwB,EACxB,OAA2B,EAC3B,OAA4C;IAE5C,MAAM,KAAK,GAAG,eAAe,CAAC,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7D,IAAI,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,YAAY,UAAU,EAAE,CAAC;QACvE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAChB,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CACxB,WAA0B,EAC1B,SAA0B,EAC1B,OAA4C;IAE5C,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,qBAAqB,CAAC;YAC9B,IAAI,EAAE,0BAA0B;YAChC,aAAa,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,aAAa;YACrC,WAAW,EAAE,SAAS;SACvB,CAAC,CAAC;IACL,CAAC;IACD,IACE,SAAS,CAAC,QAAQ,KAAK,qBAAqB;QAC5C,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;QAC3C,CAAC,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAC/C,CAAC;QACD,MAAM,IAAI,qBAAqB,CAAC;YAC9B,IAAI,EAAE,0BAA0B;YAChC,aAAa,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,aAAa;YACrC,WAAW,EAAE,WAAW,CAAC,WAAW;SACrC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,SAAS,CAAC,WAAW,KAAK,WAAW,CAAC,WAAW,EAAE,CAAC;QACtD,MAAM,IAAI,qBAAqB,CAAC;YAC9B,IAAI,EAAE,2BAA2B;YACjC,aAAa,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,aAAa;YACrC,WAAW,EAAE,WAAW,CAAC,WAAW;SACrC,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,KAAK,GAAG,KAA2C,CAAC;IAC1D,OAAO;QACL,GAAG,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACxD,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,MAAM,WAAW,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC/C,IACE,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAC9B;QACE,uBAAuB;QACvB,mBAAmB;QACnB,uBAAuB;QACvB,2BAA2B;QAC3B,6BAA6B;KAC9B,CAAC,QAAQ,CAAC,UAAU,CAAC,CACvB,EACD,CAAC;QACD,OAAO,IAAI,iBAAiB,CAAC,eAAe,EAAE,mBAAmB,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,WAAW,CAAC,QAAQ,CAAC,2BAA2B,CAAC,EAAE,CAAC;QACtD,OAAO,IAAI,iBAAiB,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;IAChE,CAAC;IACD,IACE,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAC9B;QACE,YAAY;QACZ,WAAW;QACX,cAAc;QACd,YAAY;QACZ,aAAa;QACb,WAAW;QACX,WAAW;QACX,sBAAsB;QACtB,iBAAiB;QACjB,gBAAgB;QAChB,yBAAyB;QACzB,oBAAoB;QACpB,6BAA6B;QAC7B,YAAY;QACZ,qBAAqB;QACrB,cAAc;QACd,0BAA0B;KAC3B,CAAC,QAAQ,CAAC,UAAU,CAAC,CACvB,EACD,CAAC;QACD,OAAO,IAAI,iBAAiB,CAAC,cAAc,EAAE,wBAAwB,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,IAAI,iBAAiB,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,SAAkC,IAAI,oBAAoB,CAAC,EAAE,CAAC;IAE9D,OAAO;QACC,eAAe,CACnB,OAA4B;;;gBAE5B,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAC9B,IAAI,qBAAqB,CAAC;wBACxB,QAAQ,EAAE,OAAO,CAAC,SAAS;wBAC3B,YAAY,EAAE,YAAY;qBAC3B,CAAC,CACH,CAAC;oBACF,IAAI,CAAC;wBACH,qDACK,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS;4BACnC,CAAC,CAAC,EAAE;4BACJ,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,UAAU,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,GACvD,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS;4BACnC,CAAC,CAAC,EAAE;4BACJ,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,KAC1C,aAAa,EAAE,MAAA,MAAM,CAAC,aAAa,mCAAI,EAAE,IACzC;oBACJ,CAAC;4BAAS,CAAC;wBACT,MAAA,MAAM,CAAC,YAAY,0CAAE,IAAI,CAAC,CAAC,CAAC,CAAC;oBAC/B,CAAC;gBACH,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,gBAAgB,CAAC,KAAK,CAAC,CAAC;gBAChC,CAAC;YACH,CAAC;SAAA;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,OAA0C;;IAE1C,IACE,OAAO,OAAO,KAAK,QAAQ;QAC3B,OAAO,KAAK,IAAI;QAChB,OAAO,CAAA,MAAA,OAAO,CAAC,MAAM,0CAAE,eAAe,CAAA,KAAK,UAAU,EACrD,CAAC;QACD,MAAM,IAAI,qBAAqB,CAAC;YAC9B,IAAI,EAAE,wBAAwB;YAC9B,WAAW,EAAE,SAAS;SACvB,CAAC,CAAC;IACL,CAAC;IACD,gCAAgC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAElD,MAAM,GAAG,GAAG,GAAW,EAAE;;QACvB,MAAM,KAAK,GAAG,MAAA,MAAA,OAAO,CAAC,KAAK,0CAAE,GAAG,EAAE,mCAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACjD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,qBAAqB,CAAC;gBAC9B,IAAI,EAAE,sCAAsC;gBAC5C,WAAW,EAAE,SAAS;aACvB,CAAC,CAAC;QACL,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,MAAM,YAAY,GAAG,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,oBAAoB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC9C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA0B,CAAC;IACnD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC9C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAiC,CAAC;IAC1D,MAAM,SAAS,GAAG,IAAI,GAAG,EAAgB,CAAC;IAC1C,MAAM,SAAS,GAAG,IAAI,OAAO,EAAkB,CAAC;IAChD,IAAI,YAAY,GAAG,CAAC,CAAC;IAErB,SAAS,YAAY,CAAC,GAAW;QAC/B,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC9B,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IAED,SAAS,cAAc,CAAC,GAAW;QACjC,YAAY,CAAC,GAAG,CAAC,CAAC;QAClB,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACrB,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACxB,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAED,SAAS,UAAU,CAAC,GAAW;QAC7B,IAAI,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACzB,OAAO;QACT,CAAC;QACD,IAAI,SAAS,CAAC,IAAI,IAAI,YAAY,CAAC,cAAc,EAAE,CAAC;YAClD,MAAM,SAAS,GAAG,CAAC,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAC1C,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CACxC,CAAC;YACF,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,MAAM,IAAI,qBAAqB,CAAC;oBAC9B,IAAI,EAAE,gCAAgC;oBACtC,WAAW,EAAE,SAAS;iBACvB,CAAC,CAAC;YACL,CAAC;YACD,cAAc,CAAC,SAAS,CAAC,CAAC;QAC5B,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED,SAAS,OAAO,CAAC,WAAsC;;QACrD,IAAI,CAAC;YACH,MAAA,MAAA,OAAO,CAAC,KAAK,0CAAE,OAAO,mDAAG,WAAW,CAAC,CAAC;QACxC,CAAC;QAAC,WAAM,CAAC;YACP,oDAAoD;QACtD,CAAC;IACH,CAAC;IAED,SAAS,kBAAkB,CACzB,WAAmB,EACnB,OAA4C;QAE5C,OAAO;YACL,aAAa,EAAE,iBAAiB,CAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,aAAa,CAAC;YACxD,WAAW;SACZ,CAAC;IACJ,CAAC;IAED,SAAS,QAAQ,CACf,WAA0B,EAC1B,SAA0B;QAE1B,IAAI,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAChD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,QAAQ,GAAG,YAAY,CAAC;YACxB,YAAY,IAAI,CAAC,CAAC;YAClB,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,GAAG,SAAS,CAAC,SAAS,KAAK,SAAS,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;IACzE,CAAC;IAED,SAAS,WAAW,CAAC,GAAW,EAAE,SAAiB;;QACjD,MAAM,QAAQ,GAAG,CAAC,MAAA,MAAA,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,0CAAE,QAAQ,mCAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CACpB,OAAO,CAAC,SAAS,GAAG,SAAA,CAAC,EAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,CAAC,EAAE,EAAE,CAAC,CAAA,EACnD,OAAO,CAAC,SAAS,CAClB,CAAC;QACF,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,GAAG,KAAK,EAAE,CAAC,CAAC;QAClE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,SAAe,YAAY,CAGzB,GAAW,EACX,WAAwB,EACxB,SAA0B,EAC1B,OAA4C;;;YAE5C,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACnC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,OAAO,QAAQ,CAAC;YAClB,CAAC;YAED,MAAM,UAAU,GAAG,MAAA,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,mCAAI,CAAC,CAAC;YAC7C,MAAM,OAAO,GAAG,CAAC,GAAgC,EAAE;;gBACjD,IAAI,gBAAgD,CAAC;gBACrD,OAAO,iCACF,kBAAkB,CAAC,WAAW,CAAC,WAAW,EAAE,OAAO,CAAC,KACvD,IAAI,EAAE,iBAAiB,IACvB,CAAC;gBACH,IAAI,CAAC;oBACH,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC;wBACvD,WAAW,EAAE,WAAW,CAAC,WAAW;wBACpC,SAAS,EAAE,SAAS,CAAC,SAAS;wBAC9B,YAAY,EAAE,YAAY;qBAC3B,CAAC,CAAC;oBACH,IAAI,CAAC;wBACH,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;4BACtD,MAAM,IAAI,qBAAqB,CAAC;gCAC9B,IAAI,EAAE,gCAAgC;gCACtC,aAAa,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,aAAa;gCACrC,WAAW,EAAE,WAAW,CAAC,WAAW;6BACrC,CAAC,CAAC;wBACL,CAAC;wBACD,gBAAgB,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;oBAC/C,CAAC;4BAAS,CAAC;wBACT,WAAW,CAAC,WAAW,CAAC,CAAC;oBAC3B,CAAC;oBACD,kBAAkB,CAAC,WAAW,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC;oBAC3D,IAAI,CAAC,MAAA,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,mCAAI,CAAC,CAAC,KAAK,UAAU,EAAE,CAAC;wBAC/C,MAAM,IAAI,qBAAqB,CAAC;4BAC9B,IAAI,EAAE,4BAA4B;4BAClC,aAAa,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,aAAa;4BACrC,WAAW,EAAE,WAAW,CAAC,WAAW;yBACrC,CAAC,CAAC;oBACL,CAAC;oBAED,MAAM,SAAS,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;oBACjE,YAAY,CAAC,GAAG,CAAC,CAAC;oBAClB,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;oBAC1B,gBAAgB,GAAG,SAAS,CAAC;oBAC7B,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBACrB,OAAO,iCACF,kBAAkB,CAAC,WAAW,CAAC,WAAW,EAAE,OAAO,CAAC,KACvD,IAAI,EAAE,mBAAmB,IACzB,CAAC;oBACH,OAAO,SAAS,CAAC;gBACnB,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,WAAW,CAAC,gBAAgB,CAAC,CAAC;oBAC9B,MAAM,WAAW,GAAG,CAAC,MAAA,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,mCAAI,CAAC,CAAC,KAAK,UAAU,CAAC;oBAC/D,MAAM,QAAQ,GAAG,WAAW;wBAC1B,CAAC,CAAC,IAAI,qBAAqB,CAAC;4BACxB,IAAI,EAAE,4BAA4B;4BAClC,aAAa,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,aAAa;4BACrC,WAAW,EAAE,WAAW,CAAC,WAAW;yBACrC,CAAC;wBACJ,CAAC,CAAC,KAAK,YAAY,qBAAqB;4BACtC,CAAC,CAAC,KAAK;4BACP,CAAC,CAAC,iBAAiB,CACf,aAAa,CAAC,KAAK,CAAC,EACpB,WAAW,CAAC,WAAW,EACvB,OAAO,CACR,CAAC;oBACR,MAAM,YAAY,GAAG,QAAQ,CAAC,aAAa;wBACzC,CAAC,CAAC,cAAc;wBAChB,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC;oBACtC,IAAI,WAAW,EAAE,CAAC;wBAChB,gEAAgE;oBAClE,CAAC;yBAAM,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;wBAClC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;oBAC1B,CAAC;yBAAM,CAAC;wBACN,YAAY,CAAC,GAAG,CAAC,CAAC;wBAClB,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBACvB,CAAC;oBACD,OAAO,iCACF,kBAAkB,CAAC,WAAW,CAAC,WAAW,EAAE,OAAO,CAAC,KACvD,YAAY,EACZ,IAAI,EAAE,gBAAgB,IACtB,CAAC;oBACH,MAAM,QAAQ,CAAC;gBACjB,CAAC;YACH,CAAC,CAAA,CAAC,EAAE,CAAC;YAEL,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAC3B,IAAI,CAAC;gBACH,OAAO,MAAM,OAAO,CAAC;YACvB,CAAC;oBAAS,CAAC;gBACT,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,OAAO,EAAE,CAAC;oBAClC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACvB,CAAC;YACH,CAAC;QACH,CAAC;KAAA;IAED,SAAe,GAAG;6DAGhB,WAAwB,EACxB,SAA0B,EAC1B,OAAiC,EACjC,YAAY,GAAG,KAAK;;YAEpB,iBAAiB,CAAC,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;YACnD,MAAM,GAAG,GAAG,QAAQ,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;YAC7C,UAAU,CAAC,GAAG,CAAC,CAAC;YAChB,MAAM,MAAM,GAAG,oBAAoB,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;YAC/D,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;YACxB,MAAM,UAAU,GAAG,MAAA,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,mCAAI,CAAC,CAAC;YAC7C,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAChC,MAAM,KAAK,GACT,QAAQ,KAAK,SAAS;gBACpB,CAAC,CAAC,MAAM,CAAC,iBAAiB;gBAC1B,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAEjD,IAAI,CAAC,YAAY,IAAI,QAAQ,KAAK,SAAS,IAAI,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;gBACzE,OAAO,+BACL,KAAK,IACF,kBAAkB,CAAC,WAAW,CAAC,WAAW,EAAE,OAAO,CAAC,KACvD,IAAI,EAAE,WAAW,IACjB,CAAC;gBACH,OAAO,eAAe,CAAC,WAAW,EAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACjE,CAAC;YAED,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAClC,MAAM,iBAAiB,GACrB,QAAQ,KAAK,SAAS,IAAI,KAAK,IAAI,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;YAC3E,IACE,CAAC,YAAY;gBACb,OAAO,KAAK,SAAS;gBACrB,SAAS,GAAG,OAAO,CAAC,aAAa,EACjC,CAAC;gBACD,IAAI,iBAAiB,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;oBAChD,OAAO,+BACL,KAAK,IACF,kBAAkB,CAAC,WAAW,CAAC,WAAW,EAAE,OAAO,CAAC,KACvD,YAAY,EAAE,OAAO,CAAC,aAAa,GAAG,SAAS,EAC/C,IAAI,EAAE,kBAAkB,IACxB,CAAC;oBACH,OAAO,eAAe,CAAC,WAAW,EAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACjE,CAAC;gBACD,YAAY,CAAC,GAAG,CAAC,CAAC;gBAClB,MAAM,IAAI,qBAAqB,CAAC;oBAC9B,IAAI,EAAE,2BAA2B;oBACjC,aAAa,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,aAAa;oBACrC,WAAW,EAAE,WAAW,CAAC,WAAW;oBACpC,aAAa,EAAE,IAAI;iBACpB,CAAC,CAAC;YACL,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,MAAM,YAAY,CAClC,GAAG,EACH,WAAW,EACX,SAAS,EACT,OAAO,CACR,CAAC;gBACF,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC;oBACjC,MAAM,IAAI,qBAAqB,CAAC;wBAC9B,IAAI,EAAE,4BAA4B;wBAClC,aAAa,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,aAAa;wBACrC,WAAW,EAAE,WAAW,CAAC,WAAW;qBACrC,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO,eAAe,CAAC,WAAW,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAClE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IACE,CAAC,YAAY;oBACb,KAAK,YAAY,qBAAqB;oBACtC,KAAK,CAAC,aAAa;oBACnB,iBAAiB;oBACjB,QAAQ,KAAK,SAAS;oBACtB,CAAC,MAAA,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,mCAAI,CAAC,CAAC,KAAK,UAAU;oBAC1C,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,QAAQ,EAC3B,CAAC;oBACD,MAAM,OAAO,GAAG,MAAA,MAAA,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,0CAAE,aAAa,mCAAI,SAAS,CAAC;oBAC9D,OAAO,+BACL,KAAK,IACF,kBAAkB,CAAC,WAAW,CAAC,WAAW,EAAE,OAAO,CAAC,KACvD,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC,EAC9C,IAAI,EAAE,kBAAkB,IACxB,CAAC;oBACH,OAAO,eAAe,CAAC,WAAW,EAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACjE,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;KAAA;IAED,SAAS,UAAU,CAGjB,WAAwB,EACxB,SAA0B,EAC1B,SAA6D,UAAU,EACvE,OAAiC;;QAEjC,iBAAiB,CAAC,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QACnD,MAAM,GAAG,GAAG,QAAQ,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACjE,OAAO,iCACF,kBAAkB,CAAC,WAAW,CAAC,WAAW,EAAE,OAAO,CAAC,KACvD,MAAM,EACN,IAAI,EAAE,mBAAmB,IACzB,CAAC;YACH,OAAO;QACT,CAAC;QACD,YAAY,CAAC,GAAG,CAAC,CAAC;QAClB,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACrB,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,MAAA,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,mCAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACtD,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACrB,OAAO,iCACF,kBAAkB,CAAC,WAAW,CAAC,WAAW,EAAE,OAAO,CAAC,KACvD,MAAM,EACN,IAAI,EAAE,mBAAmB,IACzB,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GAAyB;QACrC,GAAG,EAAE,CAGH,WAAwB,EACxB,SAA0B,EAC1B,OAAiC,EACI,EAAE,CACvC,GAAG,CAAC,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC;QACtC,UAAU;QACJ,aAAa,CAGjB,UAAqD;;gBACrD,MAAM,KAAK,GAAG,MAAM,GAAG,CACrB,UAAU,CAAC,WAAW,EACtB,UAAU,CAAC,SAAS,EACpB,UAAU,CAAC,OAAO,CACnB,CAAC;gBACF,IAAI,CAAC;oBACH,OAAO,MAAM,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;gBAC3C,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC,UAAU,CAAC,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC;wBAC/C,MAAM,KAAK,CAAC;oBACd,CAAC;gBACH,CAAC;gBAED,UAAU,CACR,UAAU,CAAC,WAAW,EACtB,UAAU,CAAC,SAAS,EACpB,wBAAwB,EACxB,UAAU,CAAC,OAAO,CACnB,CAAC;gBACF,OAAO,iCACF,kBAAkB,CACnB,UAAU,CAAC,WAAW,CAAC,WAAW,EAClC,UAAU,CAAC,OAAO,CACnB,KACD,IAAI,EAAE,sBAAsB,IAC5B,CAAC;gBACH,MAAM,SAAS,GAAG,MAAM,GAAG,CACzB,UAAU,CAAC,WAAW,EACtB,UAAU,CAAC,SAAS,EACpB,UAAU,CAAC,OAAO,EAClB,IAAI,CACL,CAAC;gBACF,IAAI,CAAC;oBACH,OAAO,MAAM,UAAU,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;gBAC/C,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,UAAU,CAAC,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC;wBAC9C,UAAU,CACR,UAAU,CAAC,WAAW,EACtB,UAAU,CAAC,SAAS,EACpB,wBAAwB,EACxB,UAAU,CAAC,OAAO,CACnB,CAAC;oBACJ,CAAC;oBACD,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;SAAA;KACF,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AACjC,CAAC"}