@empire-builder-kit/runtime 1.0.0-beta.9 → 1.0.0-rc.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (218) hide show
  1. package/NOTICE +6 -0
  2. package/package.json +93 -3
  3. package/src/api-contract/artifacts.d.ts +67 -0
  4. package/src/api-contract/artifacts.js +349 -0
  5. package/src/api-contract/artifacts.js.map +1 -0
  6. package/src/api-contract/client.d.ts +79 -0
  7. package/src/api-contract/client.js +561 -0
  8. package/src/api-contract/client.js.map +1 -0
  9. package/src/api-contract/errors.d.ts +7 -0
  10. package/src/api-contract/errors.js +11 -0
  11. package/src/api-contract/errors.js.map +1 -0
  12. package/src/api-contract/index.d.ts +9 -0
  13. package/src/api-contract/index.js +10 -0
  14. package/src/api-contract/index.js.map +1 -0
  15. package/src/api-contract/operation.d.ts +118 -0
  16. package/src/api-contract/operation.js +609 -0
  17. package/src/api-contract/operation.js.map +1 -0
  18. package/src/api-contract/schema.d.ts +81 -0
  19. package/src/api-contract/schema.js +313 -0
  20. package/src/api-contract/schema.js.map +1 -0
  21. package/src/api-contract/server.d.ts +77 -0
  22. package/src/api-contract/server.js +466 -0
  23. package/src/api-contract/server.js.map +1 -0
  24. package/src/async-work/contract.d.ts +17 -0
  25. package/src/async-work/contract.js +105 -0
  26. package/src/async-work/contract.js.map +1 -0
  27. package/src/async-work/idempotency.d.ts +123 -0
  28. package/src/async-work/idempotency.js +167 -0
  29. package/src/async-work/idempotency.js.map +1 -0
  30. package/src/async-work/index.d.ts +8 -0
  31. package/src/async-work/index.js +9 -0
  32. package/src/async-work/index.js.map +1 -0
  33. package/src/async-work/provider.d.ts +90 -0
  34. package/src/async-work/provider.js +155 -0
  35. package/src/async-work/provider.js.map +1 -0
  36. package/src/async-work/recovery.d.ts +103 -0
  37. package/src/async-work/recovery.js +291 -0
  38. package/src/async-work/recovery.js.map +1 -0
  39. package/src/async-work/schedule.d.ts +117 -0
  40. package/src/async-work/schedule.js +279 -0
  41. package/src/async-work/schedule.js.map +1 -0
  42. package/src/async-work/sqs.d.ts +133 -0
  43. package/src/async-work/sqs.js +280 -0
  44. package/src/async-work/sqs.js.map +1 -0
  45. package/src/async-work/webhook.d.ts +60 -0
  46. package/src/async-work/webhook.js +178 -0
  47. package/src/async-work/webhook.js.map +1 -0
  48. package/src/async-work/workflow.d.ts +98 -0
  49. package/src/async-work/workflow.js +225 -0
  50. package/src/async-work/workflow.js.map +1 -0
  51. package/src/auth-backend.d.ts +12 -2
  52. package/src/auth-backend.js +30 -18
  53. package/src/auth-backend.js.map +1 -1
  54. package/src/authorization/admission.d.ts +30 -0
  55. package/src/authorization/admission.js +87 -0
  56. package/src/authorization/admission.js.map +1 -0
  57. package/src/authorization/approval.d.ts +99 -0
  58. package/src/authorization/approval.js +249 -0
  59. package/src/authorization/approval.js.map +1 -0
  60. package/src/authorization/audit.d.ts +35 -0
  61. package/src/authorization/audit.js +35 -0
  62. package/src/authorization/audit.js.map +1 -0
  63. package/src/authorization/delegation.d.ts +149 -0
  64. package/src/authorization/delegation.js +401 -0
  65. package/src/authorization/delegation.js.map +1 -0
  66. package/src/authorization/errors.d.ts +32 -0
  67. package/src/authorization/errors.js +153 -0
  68. package/src/authorization/errors.js.map +1 -0
  69. package/src/authorization/evaluator.d.ts +39 -0
  70. package/src/authorization/evaluator.js +199 -0
  71. package/src/authorization/evaluator.js.map +1 -0
  72. package/src/authorization/index.d.ts +14 -0
  73. package/src/authorization/index.js +15 -0
  74. package/src/authorization/index.js.map +1 -0
  75. package/src/authorization/machine-token.d.ts +87 -0
  76. package/src/authorization/machine-token.js +201 -0
  77. package/src/authorization/machine-token.js.map +1 -0
  78. package/src/authorization/machine.d.ts +32 -0
  79. package/src/authorization/machine.js +41 -0
  80. package/src/authorization/machine.js.map +1 -0
  81. package/src/authorization/model.d.ts +112 -0
  82. package/src/authorization/model.js +112 -0
  83. package/src/authorization/model.js.map +1 -0
  84. package/src/canonical-json.cjs +157 -0
  85. package/src/canonical-json.d.cts +26 -0
  86. package/src/canonical-json.d.ts +18 -0
  87. package/src/canonical-json.js +125 -0
  88. package/src/canonical-json.js.map +1 -0
  89. package/src/configuration/contract.d.ts +107 -0
  90. package/src/configuration/contract.js +461 -0
  91. package/src/configuration/contract.js.map +1 -0
  92. package/src/configuration/index.d.ts +3 -0
  93. package/src/configuration/index.js +4 -0
  94. package/src/configuration/index.js.map +1 -0
  95. package/src/configuration/provider.d.ts +59 -0
  96. package/src/configuration/provider.js +198 -0
  97. package/src/configuration/provider.js.map +1 -0
  98. package/src/configuration/rollout-evaluator.cjs +54 -0
  99. package/src/configuration/rollout-evaluator.d.cts +26 -0
  100. package/src/configuration/rollout-evaluator.d.ts +18 -0
  101. package/src/configuration/rollout-evaluator.js +38 -0
  102. package/src/configuration/rollout-evaluator.js.map +1 -0
  103. package/src/configuration/rollout-key.cjs +38 -0
  104. package/src/configuration/rollout-key.d.cts +14 -0
  105. package/src/configuration/rollout-key.d.ts +10 -0
  106. package/src/configuration/rollout-key.js +26 -0
  107. package/src/configuration/rollout-key.js.map +1 -0
  108. package/src/configuration/rollout.d.ts +60 -0
  109. package/src/configuration/rollout.js +42 -0
  110. package/src/configuration/rollout.js.map +1 -0
  111. package/src/data-lifecycle/contract.d.ts +33 -0
  112. package/src/data-lifecycle/contract.js +118 -0
  113. package/src/data-lifecycle/contract.js.map +1 -0
  114. package/src/data-lifecycle/event.d.ts +28 -0
  115. package/src/data-lifecycle/event.js +76 -0
  116. package/src/data-lifecycle/event.js.map +1 -0
  117. package/src/data-lifecycle/evidence.d.ts +65 -0
  118. package/src/data-lifecycle/evidence.js +162 -0
  119. package/src/data-lifecycle/evidence.js.map +1 -0
  120. package/src/data-lifecycle/holds.d.ts +29 -0
  121. package/src/data-lifecycle/holds.js +124 -0
  122. package/src/data-lifecycle/holds.js.map +1 -0
  123. package/src/data-lifecycle/index.d.ts +8 -0
  124. package/src/data-lifecycle/index.js +9 -0
  125. package/src/data-lifecycle/index.js.map +1 -0
  126. package/src/data-lifecycle/policy.d.ts +16 -0
  127. package/src/data-lifecycle/policy.js +79 -0
  128. package/src/data-lifecycle/policy.js.map +1 -0
  129. package/src/data-lifecycle/restore.d.ts +90 -0
  130. package/src/data-lifecycle/restore.js +336 -0
  131. package/src/data-lifecycle/restore.js.map +1 -0
  132. package/src/data-lifecycle/retention.d.ts +57 -0
  133. package/src/data-lifecycle/retention.js +232 -0
  134. package/src/data-lifecycle/retention.js.map +1 -0
  135. package/src/data-lifecycle/rights.d.ts +171 -0
  136. package/src/data-lifecycle/rights.js +533 -0
  137. package/src/data-lifecycle/rights.js.map +1 -0
  138. package/src/database.d.ts +36 -0
  139. package/src/database.js +119 -0
  140. package/src/database.js.map +1 -0
  141. package/src/deterministic-order.cjs +16 -0
  142. package/src/deterministic-order.d.cts +9 -0
  143. package/src/deterministic-order.d.ts +7 -0
  144. package/src/deterministic-order.js +10 -0
  145. package/src/deterministic-order.js.map +1 -0
  146. package/src/events.d.ts +28 -19
  147. package/src/events.js +171 -66
  148. package/src/events.js.map +1 -1
  149. package/src/index.d.ts +7 -1
  150. package/src/index.js +24 -0
  151. package/src/index.js.map +1 -1
  152. package/src/lambda.d.ts +8 -2
  153. package/src/lambda.js +100 -39
  154. package/src/lambda.js.map +1 -1
  155. package/src/logging.d.ts +95 -36
  156. package/src/logging.js +460 -62
  157. package/src/logging.js.map +1 -1
  158. package/src/observability.d.ts +80 -18
  159. package/src/observability.js +252 -61
  160. package/src/observability.js.map +1 -1
  161. package/src/performance/index.d.ts +1 -0
  162. package/src/performance/index.js +2 -0
  163. package/src/performance/index.js.map +1 -0
  164. package/src/performance/protected-load-endpoint.d.ts +140 -0
  165. package/src/performance/protected-load-endpoint.js +462 -0
  166. package/src/performance/protected-load-endpoint.js.map +1 -0
  167. package/src/rds-global-ca-bundle.d.ts +1 -0
  168. package/src/rds-global-ca-bundle.js +2742 -0
  169. package/src/rds-global-ca-bundle.js.map +1 -0
  170. package/src/reliability/burn.d.ts +39 -0
  171. package/src/reliability/burn.js +102 -0
  172. package/src/reliability/burn.js.map +1 -0
  173. package/src/reliability/contract.d.ts +5 -0
  174. package/src/reliability/contract.js +317 -0
  175. package/src/reliability/contract.js.map +1 -0
  176. package/src/reliability/incident.d.ts +16 -0
  177. package/src/reliability/incident.js +562 -0
  178. package/src/reliability/incident.js.map +1 -0
  179. package/src/reliability/index.d.ts +5 -0
  180. package/src/reliability/index.js +6 -0
  181. package/src/reliability/index.js.map +1 -0
  182. package/src/reliability/model.d.ts +191 -0
  183. package/src/reliability/model.fixtures.d.ts +2 -0
  184. package/src/reliability/model.fixtures.js +57 -0
  185. package/src/reliability/model.fixtures.js.map +1 -0
  186. package/src/reliability/model.js +2 -0
  187. package/src/reliability/model.js.map +1 -0
  188. package/src/reliability/slo.d.ts +9 -0
  189. package/src/reliability/slo.js +74 -0
  190. package/src/reliability/slo.js.map +1 -0
  191. package/src/request-context.d.ts +57 -15
  192. package/src/request-context.js +116 -36
  193. package/src/request-context.js.map +1 -1
  194. package/src/safe-reference.cjs +57 -0
  195. package/src/safe-reference.d.cts +25 -0
  196. package/src/safe-reference.d.ts +11 -0
  197. package/src/safe-reference.js +46 -0
  198. package/src/safe-reference.js.map +1 -0
  199. package/src/secrets/contract.d.ts +99 -0
  200. package/src/secrets/contract.js +238 -0
  201. package/src/secrets/contract.js.map +1 -0
  202. package/src/secrets/index.d.ts +4 -0
  203. package/src/secrets/index.js +5 -0
  204. package/src/secrets/index.js.map +1 -0
  205. package/src/secrets/observability.d.ts +14 -0
  206. package/src/secrets/observability.js +100 -0
  207. package/src/secrets/observability.js.map +1 -0
  208. package/src/secrets/personal.d.ts +48 -0
  209. package/src/secrets/personal.js +332 -0
  210. package/src/secrets/personal.js.map +1 -0
  211. package/src/secrets/resolver.d.ts +125 -0
  212. package/src/secrets/resolver.js +602 -0
  213. package/src/secrets/resolver.js.map +1 -0
  214. package/src/secrets/sensitive-patterns.cjs +84 -0
  215. package/src/secrets/sensitive-patterns.d.cts +62 -0
  216. package/src/secrets/sensitive-patterns.d.ts +40 -0
  217. package/src/secrets/sensitive-patterns.js +60 -0
  218. package/src/secrets/sensitive-patterns.js.map +1 -0
@@ -0,0 +1,533 @@
1
+ import { compareLifecycleStrings, failDataLifecycleRuntime, requireBoundedInteger, requireCanonicalTimestamp, requireChronologicalTransition, requireDataLifecycleCode, requireDataLifecycleId, requirePolicyVersion, requireSafeReference, requireUniqueLifecycleIds, } from './contract.js';
2
+ import { evaluateDataLifecycleHolds, } from './holds.js';
3
+ export const DATA_LIFECYCLE_RIGHTS_STATE_VERSION = 1;
4
+ export const DATA_LIFECYCLE_MAX_EXPORT_LIFETIME_MS = 30 * 24 * 60 * 60 * 1000;
5
+ function requireApprovalRequirement(value, pointer) {
6
+ if (value !== 'required' && value !== 'not-required') {
7
+ failDataLifecycleRuntime('data-lifecycle-input-invalid', pointer, 'must be required or not-required');
8
+ }
9
+ return value;
10
+ }
11
+ function initialCopies(copyIds) {
12
+ return requireUniqueLifecycleIds(copyIds, '/copyIds').map((copyId) => ({
13
+ attempts: 0,
14
+ copyId,
15
+ status: 'pending',
16
+ }));
17
+ }
18
+ function normalizeTrackedCopies(values, pointer) {
19
+ if (!Array.isArray(values) || values.length > 1000) {
20
+ failDataLifecycleRuntime('data-lifecycle-input-invalid', pointer, 'must be a bounded copy collection');
21
+ }
22
+ const seen = new Set();
23
+ const copies = values.map((value, index) => {
24
+ const entryPointer = `${pointer}/${index}`;
25
+ const copyId = requireDataLifecycleId(value.copyId, `${entryPointer}/copyId`);
26
+ if (seen.has(copyId)) {
27
+ failDataLifecycleRuntime('data-lifecycle-input-invalid', `${entryPointer}/copyId`, 'copy identifier is duplicated');
28
+ }
29
+ seen.add(copyId);
30
+ if (value.status !== 'pending' &&
31
+ value.status !== 'in-progress' &&
32
+ value.status !== 'completed' &&
33
+ value.status !== 'failed') {
34
+ failDataLifecycleRuntime('data-lifecycle-input-invalid', `${entryPointer}/status`, 'copy status is unsupported');
35
+ }
36
+ const copy = {
37
+ attempts: requireBoundedInteger(value.attempts, `${entryPointer}/attempts`, 0, 1000000),
38
+ copyId,
39
+ status: value.status,
40
+ };
41
+ if (value.outcomeCode !== undefined) {
42
+ copy.outcomeCode = requireDataLifecycleCode(value.outcomeCode, `${entryPointer}/outcomeCode`);
43
+ }
44
+ if (copy.status === 'completed' && !copy.outcomeCode) {
45
+ failDataLifecycleRuntime('data-lifecycle-input-invalid', `${entryPointer}/outcomeCode`, 'completed copy requires a bounded outcome code');
46
+ }
47
+ return copy;
48
+ });
49
+ return copies.sort((left, right) => compareLifecycleStrings(left.copyId, right.copyId));
50
+ }
51
+ function normalizeOptionalApproval(state, pointer) {
52
+ const normalized = {
53
+ approvalRequirement: requireApprovalRequirement(state.approvalRequirement, `${pointer}/approvalRequirement`),
54
+ };
55
+ if (state.approvalRef !== undefined) {
56
+ normalized.approvalRef = requireSafeReference(state.approvalRef, `${pointer}/approvalRef`);
57
+ }
58
+ if (state.authorityRef !== undefined) {
59
+ normalized.authorityRef = requireSafeReference(state.authorityRef, `${pointer}/authorityRef`);
60
+ }
61
+ return normalized;
62
+ }
63
+ function validateApproval(requirement, approvalRef, pointer) {
64
+ if (requirement === 'required' && approvalRef === undefined) {
65
+ failDataLifecycleRuntime('data-lifecycle-rights-transition-invalid', pointer, 'an explicit safe approval reference is required');
66
+ }
67
+ return approvalRef === undefined
68
+ ? undefined
69
+ : requireSafeReference(approvalRef, pointer);
70
+ }
71
+ export function createDataLifecycleDeletionRequest(options) {
72
+ const createdAt = requireCanonicalTimestamp(options.createdAt, '/createdAt');
73
+ return {
74
+ approvalRequirement: requireApprovalRequirement(options.approvalRequirement, '/approvalRequirement'),
75
+ categoryId: requireDataLifecycleId(options.categoryId, '/categoryId'),
76
+ createdAt,
77
+ downstreamCopies: initialCopies(options.downstreamCopyIds),
78
+ holdIds: [],
79
+ kind: 'data-deletion',
80
+ policyVersion: requirePolicyVersion(options.policyVersion, '/policyVersion'),
81
+ primaryLocationId: requireDataLifecycleId(options.primaryLocationId, '/primaryLocationId'),
82
+ primaryStatus: 'pending',
83
+ requestRef: requireSafeReference(options.requestRef, '/requestRef'),
84
+ scopeRef: requireSafeReference(options.scopeRef, '/scopeRef'),
85
+ status: 'requested',
86
+ updatedAt: createdAt,
87
+ version: DATA_LIFECYCLE_RIGHTS_STATE_VERSION,
88
+ };
89
+ }
90
+ function normalizeDeletionState(value) {
91
+ if (value.version !== DATA_LIFECYCLE_RIGHTS_STATE_VERSION ||
92
+ value.kind !== 'data-deletion') {
93
+ failDataLifecycleRuntime('data-lifecycle-input-invalid', '/state', 'must be a v1 deletion request');
94
+ }
95
+ const createdAt = requireCanonicalTimestamp(value.createdAt, '/state/createdAt');
96
+ const updatedAt = requireCanonicalTimestamp(value.updatedAt, '/state/updatedAt');
97
+ if (Date.parse(updatedAt) < Date.parse(createdAt)) {
98
+ failDataLifecycleRuntime('data-lifecycle-input-invalid', '/state/updatedAt', 'cannot precede request creation');
99
+ }
100
+ const optional = normalizeOptionalApproval(value, '/state');
101
+ const state = Object.assign(Object.assign({}, optional), { categoryId: requireDataLifecycleId(value.categoryId, '/state/categoryId'), createdAt, downstreamCopies: normalizeTrackedCopies(value.downstreamCopies, '/state/downstreamCopies'), holdIds: requireUniqueLifecycleIds(value.holdIds, '/state/holdIds'), kind: 'data-deletion', policyVersion: requirePolicyVersion(value.policyVersion, '/state/policyVersion'), primaryLocationId: requireDataLifecycleId(value.primaryLocationId, '/state/primaryLocationId'), primaryStatus: value.primaryStatus, requestRef: requireSafeReference(value.requestRef, '/state/requestRef'), scopeRef: requireSafeReference(value.scopeRef, '/state/scopeRef'), status: value.status, updatedAt, version: DATA_LIFECYCLE_RIGHTS_STATE_VERSION });
102
+ if (value.outcomeCode !== undefined) {
103
+ state.outcomeCode = requireDataLifecycleCode(value.outcomeCode, '/state/outcomeCode');
104
+ }
105
+ const statuses = [
106
+ 'requested',
107
+ 'verified',
108
+ 'held',
109
+ 'rejected',
110
+ 'primary-deletion-in-progress',
111
+ 'downstream-deletion-in-progress',
112
+ 'completed',
113
+ 'failed',
114
+ ];
115
+ if (!statuses.includes(state.status)) {
116
+ failDataLifecycleRuntime('data-lifecycle-input-invalid', '/state/status', 'deletion status is unsupported');
117
+ }
118
+ if (state.primaryStatus !== 'pending' &&
119
+ state.primaryStatus !== 'in-progress' &&
120
+ state.primaryStatus !== 'completed' &&
121
+ state.primaryStatus !== 'failed') {
122
+ failDataLifecycleRuntime('data-lifecycle-input-invalid', '/state/primaryStatus', 'primary status is unsupported');
123
+ }
124
+ if (state.status === 'held' && state.holdIds.length === 0) {
125
+ failDataLifecycleRuntime('data-lifecycle-input-invalid', '/state/holdIds', 'held request must name its bounded holds');
126
+ }
127
+ if (state.status === 'primary-deletion-in-progress' &&
128
+ state.primaryStatus !== 'in-progress') {
129
+ failDataLifecycleRuntime('data-lifecycle-input-invalid', '/state/primaryStatus', 'must be in-progress during primary deletion');
130
+ }
131
+ if ((state.status === 'downstream-deletion-in-progress' ||
132
+ state.status === 'completed') &&
133
+ state.primaryStatus !== 'completed') {
134
+ failDataLifecycleRuntime('data-lifecycle-input-invalid', '/state/primaryStatus', 'must be completed before downstream completion');
135
+ }
136
+ if (state.status === 'completed' &&
137
+ state.downstreamCopies.some(({ status }) => status !== 'completed')) {
138
+ failDataLifecycleRuntime('data-lifecycle-input-invalid', '/state/downstreamCopies', 'all downstream copies must complete before deletion completion');
139
+ }
140
+ return state;
141
+ }
142
+ function rightsTransitionFailure(pointer, message) {
143
+ failDataLifecycleRuntime('data-lifecycle-rights-transition-invalid', pointer, message);
144
+ }
145
+ function requireDeletionStatus(state, statuses, command) {
146
+ if (!statuses.includes(state.status)) {
147
+ rightsTransitionFailure('/command/type', `${command} is not allowed from deletion status ${state.status}`);
148
+ }
149
+ }
150
+ function updateTrackedCopy(copies, copyIdValue, transform) {
151
+ const copyId = requireDataLifecycleId(copyIdValue, '/command/copyId');
152
+ let found = false;
153
+ const updated = copies.map((copy) => {
154
+ if (copy.copyId !== copyId)
155
+ return copy;
156
+ found = true;
157
+ return transform(copy);
158
+ });
159
+ if (!found) {
160
+ rightsTransitionFailure('/command/copyId', `copy ${copyId} is not tracked by this request`);
161
+ }
162
+ return updated;
163
+ }
164
+ export function transitionDataLifecycleDeletion(current, command) {
165
+ const state = normalizeDeletionState(current);
166
+ const at = requireChronologicalTransition(state.updatedAt, command.at, '/command/at');
167
+ switch (command.type) {
168
+ case 'verify': {
169
+ requireDeletionStatus(state, ['requested', 'held'], command.type);
170
+ const authorityRef = requireSafeReference(command.authorityRef, '/command/authorityRef');
171
+ const approvalRef = validateApproval(state.approvalRequirement, command.approvalRef, '/command/approvalRef');
172
+ const holds = evaluateDataLifecycleHolds({
173
+ categoryId: state.categoryId,
174
+ holds: command.holds,
175
+ now: at,
176
+ operation: 'deletion',
177
+ scopeRef: state.scopeRef,
178
+ });
179
+ const next = Object.assign(Object.assign({}, state), { authorityRef, holdIds: holds.holdIds, status: holds.blocked ? 'held' : 'verified', updatedAt: at });
180
+ if (approvalRef !== undefined)
181
+ next.approvalRef = approvalRef;
182
+ return next;
183
+ }
184
+ case 'reject':
185
+ requireDeletionStatus(state, ['requested', 'verified', 'held'], command.type);
186
+ return Object.assign(Object.assign({}, state), { outcomeCode: requireDataLifecycleCode(command.reasonCode, '/command/reasonCode'), status: 'rejected', updatedAt: at });
187
+ case 'start-primary':
188
+ requireDeletionStatus(state, ['verified'], command.type);
189
+ return Object.assign(Object.assign({}, state), { primaryStatus: 'in-progress', status: 'primary-deletion-in-progress', updatedAt: at });
190
+ case 'complete-primary':
191
+ requireDeletionStatus(state, ['primary-deletion-in-progress'], command.type);
192
+ return Object.assign(Object.assign({}, state), { outcomeCode: command.outcomeCode, primaryStatus: 'completed', status: state.downstreamCopies.length === 0
193
+ ? 'completed'
194
+ : 'downstream-deletion-in-progress', updatedAt: at });
195
+ case 'fail-primary':
196
+ requireDeletionStatus(state, ['primary-deletion-in-progress'], command.type);
197
+ return Object.assign(Object.assign({}, state), { outcomeCode: requireDataLifecycleCode(command.errorCode, '/command/errorCode'), primaryStatus: 'failed', status: 'failed', updatedAt: at });
198
+ case 'start-copy': {
199
+ requireDeletionStatus(state, ['downstream-deletion-in-progress'], command.type);
200
+ const downstreamCopies = updateTrackedCopy(state.downstreamCopies, command.copyId, (copy) => {
201
+ if (copy.status !== 'pending' && copy.status !== 'failed') {
202
+ rightsTransitionFailure('/command/copyId', `copy ${copy.copyId} cannot start from ${copy.status}`);
203
+ }
204
+ return {
205
+ attempts: copy.attempts + 1,
206
+ copyId: copy.copyId,
207
+ status: 'in-progress',
208
+ };
209
+ });
210
+ return Object.assign(Object.assign({}, state), { downstreamCopies, updatedAt: at });
211
+ }
212
+ case 'complete-copy': {
213
+ requireDeletionStatus(state, ['downstream-deletion-in-progress'], command.type);
214
+ const downstreamCopies = updateTrackedCopy(state.downstreamCopies, command.copyId, (copy) => {
215
+ if (copy.status !== 'in-progress') {
216
+ rightsTransitionFailure('/command/copyId', `copy ${copy.copyId} is not in progress`);
217
+ }
218
+ return {
219
+ attempts: copy.attempts,
220
+ copyId: copy.copyId,
221
+ outcomeCode: command.outcomeCode,
222
+ status: 'completed',
223
+ };
224
+ });
225
+ return Object.assign(Object.assign({}, state), { downstreamCopies, status: downstreamCopies.every(({ status }) => status === 'completed')
226
+ ? 'completed'
227
+ : 'downstream-deletion-in-progress', updatedAt: at });
228
+ }
229
+ case 'fail-copy': {
230
+ requireDeletionStatus(state, ['downstream-deletion-in-progress'], command.type);
231
+ const downstreamCopies = updateTrackedCopy(state.downstreamCopies, command.copyId, (copy) => {
232
+ if (copy.status !== 'in-progress') {
233
+ rightsTransitionFailure('/command/copyId', `copy ${copy.copyId} is not in progress`);
234
+ }
235
+ return {
236
+ attempts: copy.attempts,
237
+ copyId: copy.copyId,
238
+ outcomeCode: requireDataLifecycleCode(command.errorCode, '/command/errorCode'),
239
+ status: 'failed',
240
+ };
241
+ });
242
+ return Object.assign(Object.assign({}, state), { downstreamCopies, outcomeCode: 'downstream-retry-required', status: 'failed', updatedAt: at });
243
+ }
244
+ case 'retry': {
245
+ requireDeletionStatus(state, ['failed'], command.type);
246
+ if (state.primaryStatus === 'failed') {
247
+ return Object.assign(Object.assign({}, state), { outcomeCode: undefined, primaryStatus: 'pending', status: 'verified', updatedAt: at });
248
+ }
249
+ if (state.primaryStatus !== 'completed') {
250
+ rightsTransitionFailure('/state/primaryStatus', 'failed deletion has no retryable phase');
251
+ }
252
+ return Object.assign(Object.assign({}, state), { downstreamCopies: state.downstreamCopies.map((copy) => copy.status === 'failed'
253
+ ? {
254
+ attempts: copy.attempts,
255
+ copyId: copy.copyId,
256
+ status: 'pending',
257
+ }
258
+ : copy), outcomeCode: undefined, status: 'downstream-deletion-in-progress', updatedAt: at });
259
+ }
260
+ }
261
+ }
262
+ export function createDataLifecycleExportRequest(options) {
263
+ const createdAt = requireCanonicalTimestamp(options.createdAt, '/createdAt');
264
+ if (!Array.isArray(options.sourceCopyIds) ||
265
+ options.sourceCopyIds.length === 0) {
266
+ failDataLifecycleRuntime('data-lifecycle-input-invalid', '/sourceCopyIds', 'export must declare at least one source copy');
267
+ }
268
+ return {
269
+ approvalRequirement: requireApprovalRequirement(options.approvalRequirement, '/approvalRequirement'),
270
+ categoryId: requireDataLifecycleId(options.categoryId, '/categoryId'),
271
+ createdAt,
272
+ holdIds: [],
273
+ kind: 'data-export',
274
+ policyVersion: requirePolicyVersion(options.policyVersion, '/policyVersion'),
275
+ requestRef: requireSafeReference(options.requestRef, '/requestRef'),
276
+ scopeRef: requireSafeReference(options.scopeRef, '/scopeRef'),
277
+ sourceCopies: initialCopies(options.sourceCopyIds),
278
+ status: 'requested',
279
+ updatedAt: createdAt,
280
+ version: DATA_LIFECYCLE_RIGHTS_STATE_VERSION,
281
+ };
282
+ }
283
+ function normalizeArtifact(value) {
284
+ const createdAt = requireCanonicalTimestamp(value.createdAt, '/state/artifact/createdAt');
285
+ const expiresAt = requireCanonicalTimestamp(value.expiresAt, '/state/artifact/expiresAt');
286
+ if (Date.parse(expiresAt) <= Date.parse(createdAt) ||
287
+ Date.parse(expiresAt) - Date.parse(createdAt) >
288
+ DATA_LIFECYCLE_MAX_EXPORT_LIFETIME_MS) {
289
+ failDataLifecycleRuntime('data-lifecycle-input-invalid', '/state/artifact/expiresAt', 'export expiry must be after creation and within the technical maximum');
290
+ }
291
+ if (value.encryption !== 'approved-profile') {
292
+ failDataLifecycleRuntime('data-lifecycle-input-invalid', '/state/artifact/encryption', 'export artifact must use the approved encryption profile');
293
+ }
294
+ if (value.status !== 'available' &&
295
+ value.status !== 'deletion-in-progress' &&
296
+ value.status !== 'deleted') {
297
+ failDataLifecycleRuntime('data-lifecycle-input-invalid', '/state/artifact/status', 'export artifact status is unsupported');
298
+ }
299
+ return {
300
+ artifactRef: requireSafeReference(value.artifactRef, '/state/artifact/artifactRef'),
301
+ createdAt,
302
+ encryption: 'approved-profile',
303
+ expiresAt,
304
+ status: value.status,
305
+ };
306
+ }
307
+ function normalizeExportState(value) {
308
+ if (value.version !== DATA_LIFECYCLE_RIGHTS_STATE_VERSION ||
309
+ value.kind !== 'data-export') {
310
+ failDataLifecycleRuntime('data-lifecycle-input-invalid', '/state', 'must be a v1 export request');
311
+ }
312
+ const createdAt = requireCanonicalTimestamp(value.createdAt, '/state/createdAt');
313
+ const updatedAt = requireCanonicalTimestamp(value.updatedAt, '/state/updatedAt');
314
+ if (Date.parse(updatedAt) < Date.parse(createdAt)) {
315
+ failDataLifecycleRuntime('data-lifecycle-input-invalid', '/state/updatedAt', 'cannot precede request creation');
316
+ }
317
+ const optional = normalizeOptionalApproval(value, '/state');
318
+ const state = Object.assign(Object.assign({}, optional), { categoryId: requireDataLifecycleId(value.categoryId, '/state/categoryId'), createdAt, holdIds: requireUniqueLifecycleIds(value.holdIds, '/state/holdIds'), kind: 'data-export', policyVersion: requirePolicyVersion(value.policyVersion, '/state/policyVersion'), requestRef: requireSafeReference(value.requestRef, '/state/requestRef'), scopeRef: requireSafeReference(value.scopeRef, '/state/scopeRef'), sourceCopies: normalizeTrackedCopies(value.sourceCopies, '/state/sourceCopies'), status: value.status, updatedAt, version: DATA_LIFECYCLE_RIGHTS_STATE_VERSION });
319
+ if (value.artifact !== undefined) {
320
+ state.artifact = normalizeArtifact(value.artifact);
321
+ }
322
+ if (value.failurePhase !== undefined) {
323
+ if (value.failurePhase !== 'gathering' &&
324
+ value.failurePhase !== 'artifact-deletion' &&
325
+ value.failurePhase !== 'unpublished-artifact-deletion') {
326
+ failDataLifecycleRuntime('data-lifecycle-input-invalid', '/state/failurePhase', 'failure phase is unsupported');
327
+ }
328
+ state.failurePhase = value.failurePhase;
329
+ }
330
+ if (value.outcomeCode !== undefined) {
331
+ state.outcomeCode = requireDataLifecycleCode(value.outcomeCode, '/state/outcomeCode');
332
+ }
333
+ const statuses = [
334
+ 'requested',
335
+ 'verified',
336
+ 'held',
337
+ 'rejected',
338
+ 'gathering',
339
+ 'ready',
340
+ 'expired',
341
+ 'artifact-deletion-in-progress',
342
+ 'unpublished-artifact-deletion-in-progress',
343
+ 'completed',
344
+ 'failed',
345
+ ];
346
+ if (!statuses.includes(state.status)) {
347
+ failDataLifecycleRuntime('data-lifecycle-input-invalid', '/state/status', 'export status is unsupported');
348
+ }
349
+ if (state.status === 'held' && state.holdIds.length === 0) {
350
+ failDataLifecycleRuntime('data-lifecycle-input-invalid', '/state/holdIds', 'held export must name its bounded holds');
351
+ }
352
+ if ((state.status === 'ready' ||
353
+ state.status === 'expired' ||
354
+ state.status === 'artifact-deletion-in-progress') &&
355
+ !state.artifact) {
356
+ failDataLifecycleRuntime('data-lifecycle-input-invalid', '/state/artifact', 'export phase requires its safe artifact metadata');
357
+ }
358
+ if (state.status === 'unpublished-artifact-deletion-in-progress' &&
359
+ state.artifact) {
360
+ failDataLifecycleRuntime('data-lifecycle-input-invalid', '/state/artifact', 'unpublished export cleanup cannot name a published artifact');
361
+ }
362
+ if (state.status === 'completed' &&
363
+ !state.artifact &&
364
+ state.outcomeCode !== 'deleted' &&
365
+ state.outcomeCode !== 'not-found') {
366
+ failDataLifecycleRuntime('data-lifecycle-input-invalid', '/state/outcomeCode', 'artifact-free export completion must record its cleanup outcome');
367
+ }
368
+ if (state.status === 'ready' &&
369
+ state.sourceCopies.some(({ status }) => status !== 'completed')) {
370
+ failDataLifecycleRuntime('data-lifecycle-input-invalid', '/state/sourceCopies', 'all declared source copies must be gathered before publication');
371
+ }
372
+ if (state.status === 'failed' && !state.failurePhase) {
373
+ failDataLifecycleRuntime('data-lifecycle-input-invalid', '/state/failurePhase', 'failed export must retain its retry phase');
374
+ }
375
+ return state;
376
+ }
377
+ function requireExportStatus(state, statuses, command) {
378
+ if (!statuses.includes(state.status)) {
379
+ rightsTransitionFailure('/command/type', `${command} is not allowed from export status ${state.status}`);
380
+ }
381
+ }
382
+ export function transitionDataLifecycleExport(current, command) {
383
+ const state = normalizeExportState(current);
384
+ const at = requireChronologicalTransition(state.updatedAt, command.at, '/command/at');
385
+ switch (command.type) {
386
+ case 'verify': {
387
+ requireExportStatus(state, ['requested', 'held'], command.type);
388
+ const authorityRef = requireSafeReference(command.authorityRef, '/command/authorityRef');
389
+ const approvalRef = validateApproval(state.approvalRequirement, command.approvalRef, '/command/approvalRef');
390
+ const holds = evaluateDataLifecycleHolds({
391
+ categoryId: state.categoryId,
392
+ holds: command.holds,
393
+ now: at,
394
+ operation: 'export',
395
+ scopeRef: state.scopeRef,
396
+ });
397
+ const next = Object.assign(Object.assign({}, state), { authorityRef, holdIds: holds.holdIds, status: holds.blocked ? 'held' : 'verified', updatedAt: at });
398
+ if (approvalRef !== undefined)
399
+ next.approvalRef = approvalRef;
400
+ return next;
401
+ }
402
+ case 'reject':
403
+ requireExportStatus(state, ['requested', 'verified', 'held'], command.type);
404
+ return Object.assign(Object.assign({}, state), { outcomeCode: requireDataLifecycleCode(command.reasonCode, '/command/reasonCode'), status: 'rejected', updatedAt: at });
405
+ case 'start-gathering':
406
+ requireExportStatus(state, ['verified'], command.type);
407
+ return Object.assign(Object.assign({}, state), { status: 'gathering', updatedAt: at });
408
+ case 'start-copy': {
409
+ requireExportStatus(state, ['gathering'], command.type);
410
+ const sourceCopies = updateTrackedCopy(state.sourceCopies, command.copyId, (copy) => {
411
+ if (copy.status !== 'pending' && copy.status !== 'failed') {
412
+ rightsTransitionFailure('/command/copyId', `copy ${copy.copyId} cannot start from ${copy.status}`);
413
+ }
414
+ return {
415
+ attempts: copy.attempts + 1,
416
+ copyId: copy.copyId,
417
+ status: 'in-progress',
418
+ };
419
+ });
420
+ return Object.assign(Object.assign({}, state), { sourceCopies, updatedAt: at });
421
+ }
422
+ case 'complete-copy': {
423
+ requireExportStatus(state, ['gathering'], command.type);
424
+ const sourceCopies = updateTrackedCopy(state.sourceCopies, command.copyId, (copy) => {
425
+ if (copy.status !== 'in-progress') {
426
+ rightsTransitionFailure('/command/copyId', `copy ${copy.copyId} is not in progress`);
427
+ }
428
+ return {
429
+ attempts: copy.attempts,
430
+ copyId: copy.copyId,
431
+ outcomeCode: command.outcomeCode,
432
+ status: 'completed',
433
+ };
434
+ });
435
+ return Object.assign(Object.assign({}, state), { sourceCopies, updatedAt: at });
436
+ }
437
+ case 'fail-copy': {
438
+ requireExportStatus(state, ['gathering'], command.type);
439
+ const sourceCopies = updateTrackedCopy(state.sourceCopies, command.copyId, (copy) => {
440
+ if (copy.status !== 'in-progress') {
441
+ rightsTransitionFailure('/command/copyId', `copy ${copy.copyId} is not in progress`);
442
+ }
443
+ return {
444
+ attempts: copy.attempts,
445
+ copyId: copy.copyId,
446
+ outcomeCode: requireDataLifecycleCode(command.errorCode, '/command/errorCode'),
447
+ status: 'failed',
448
+ };
449
+ });
450
+ return Object.assign(Object.assign({}, state), { failurePhase: 'gathering', outcomeCode: 'source-retry-required', sourceCopies, status: 'failed', updatedAt: at });
451
+ }
452
+ case 'publish': {
453
+ requireExportStatus(state, ['gathering'], command.type);
454
+ if (state.sourceCopies.some(({ status }) => status !== 'completed')) {
455
+ rightsTransitionFailure('/state/sourceCopies', 'all declared source copies must be gathered before publication');
456
+ }
457
+ if (command.encryption !== 'approved-profile') {
458
+ rightsTransitionFailure('/command/encryption', 'export artifact must use the approved encryption profile');
459
+ }
460
+ const expiresAt = requireCanonicalTimestamp(command.expiresAt, '/command/expiresAt');
461
+ if (Date.parse(expiresAt) <= Date.parse(at) ||
462
+ Date.parse(expiresAt) - Date.parse(at) >
463
+ DATA_LIFECYCLE_MAX_EXPORT_LIFETIME_MS) {
464
+ rightsTransitionFailure('/command/expiresAt', 'export expiry must be future and within the technical maximum');
465
+ }
466
+ return Object.assign(Object.assign({}, state), { artifact: {
467
+ artifactRef: requireSafeReference(command.artifactRef, '/command/artifactRef'),
468
+ createdAt: at,
469
+ encryption: 'approved-profile',
470
+ expiresAt,
471
+ status: 'available',
472
+ }, status: 'ready', updatedAt: at });
473
+ }
474
+ case 'expire':
475
+ requireExportStatus(state, ['ready'], command.type);
476
+ if (!state.artifact ||
477
+ Date.parse(at) < Date.parse(state.artifact.expiresAt)) {
478
+ rightsTransitionFailure('/command/at', 'export cannot expire before its declared expiry');
479
+ }
480
+ return Object.assign(Object.assign({}, state), { status: 'expired', updatedAt: at });
481
+ case 'start-artifact-deletion':
482
+ requireExportStatus(state, ['expired'], command.type);
483
+ if (!state.artifact) {
484
+ rightsTransitionFailure('/state/artifact', 'export artifact is missing');
485
+ }
486
+ return Object.assign(Object.assign({}, state), { artifact: Object.assign(Object.assign({}, state.artifact), { status: 'deletion-in-progress' }), status: 'artifact-deletion-in-progress', updatedAt: at });
487
+ case 'start-unpublished-artifact-deletion':
488
+ requireExportStatus(state, ['gathering'], command.type);
489
+ if (state.artifact) {
490
+ rightsTransitionFailure('/state/artifact', 'unpublished export cleanup cannot delete a published artifact');
491
+ }
492
+ return Object.assign(Object.assign({}, state), { status: 'unpublished-artifact-deletion-in-progress', updatedAt: at });
493
+ case 'complete-artifact-deletion':
494
+ requireExportStatus(state, [
495
+ 'artifact-deletion-in-progress',
496
+ 'unpublished-artifact-deletion-in-progress',
497
+ ], command.type);
498
+ if (state.status === 'artifact-deletion-in-progress' && !state.artifact) {
499
+ rightsTransitionFailure('/state/artifact', 'export artifact is missing');
500
+ }
501
+ return Object.assign(Object.assign(Object.assign({}, state), (state.artifact
502
+ ? { artifact: Object.assign(Object.assign({}, state.artifact), { status: 'deleted' }) }
503
+ : {})), { outcomeCode: command.outcomeCode, status: 'completed', updatedAt: at });
504
+ case 'fail-artifact-deletion':
505
+ requireExportStatus(state, [
506
+ 'artifact-deletion-in-progress',
507
+ 'unpublished-artifact-deletion-in-progress',
508
+ ], command.type);
509
+ return Object.assign(Object.assign({}, state), { failurePhase: state.status === 'unpublished-artifact-deletion-in-progress'
510
+ ? 'unpublished-artifact-deletion'
511
+ : 'artifact-deletion', outcomeCode: requireDataLifecycleCode(command.errorCode, '/command/errorCode'), status: 'failed', updatedAt: at });
512
+ case 'retry':
513
+ requireExportStatus(state, ['failed'], command.type);
514
+ if (state.failurePhase === 'gathering') {
515
+ return Object.assign(Object.assign({}, state), { failurePhase: undefined, outcomeCode: undefined, sourceCopies: state.sourceCopies.map((copy) => copy.status === 'failed'
516
+ ? {
517
+ attempts: copy.attempts,
518
+ copyId: copy.copyId,
519
+ status: 'pending',
520
+ }
521
+ : copy), status: 'gathering', updatedAt: at });
522
+ }
523
+ if (state.failurePhase === 'artifact-deletion' && state.artifact) {
524
+ return Object.assign(Object.assign({}, state), { failurePhase: undefined, outcomeCode: undefined, status: 'artifact-deletion-in-progress', updatedAt: at });
525
+ }
526
+ if (state.failurePhase === 'unpublished-artifact-deletion' &&
527
+ !state.artifact) {
528
+ return Object.assign(Object.assign({}, state), { failurePhase: undefined, outcomeCode: undefined, status: 'unpublished-artifact-deletion-in-progress', updatedAt: at });
529
+ }
530
+ rightsTransitionFailure('/state/failurePhase', 'failed export has no retryable phase');
531
+ }
532
+ }
533
+ //# sourceMappingURL=rights.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"rights.js","sourceRoot":"","sources":["../../../../../packages/runtime/src/data-lifecycle/rights.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,qBAAqB,EACrB,yBAAyB,EACzB,8BAA8B,EAC9B,wBAAwB,EACxB,sBAAsB,EACtB,oBAAoB,EACpB,oBAAoB,EACpB,yBAAyB,GAC1B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,0BAA0B,GAE3B,MAAM,YAAY,CAAC;AAEpB,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAU,CAAC;AAC9D,MAAM,CAAC,MAAM,qCAAqC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAK,CAAC;AAiJ/E,SAAS,0BAA0B,CACjC,KAAuC,EACvC,OAAe;IAEf,IAAI,KAAK,KAAK,UAAU,IAAI,KAAK,KAAK,cAAc,EAAE,CAAC;QACrD,wBAAwB,CACtB,8BAA8B,EAC9B,OAAO,EACP,kCAAkC,CACnC,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CACpB,OAA0B;IAE1B,OAAO,yBAAyB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACrE,QAAQ,EAAE,CAAC;QACX,MAAM;QACN,MAAM,EAAE,SAAS;KAClB,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,sBAAsB,CAC7B,MAA6C,EAC7C,OAAe;IAEf,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,IAAK,EAAE,CAAC;QACpD,wBAAwB,CACtB,8BAA8B,EAC9B,OAAO,EACP,mCAAmC,CACpC,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACzC,MAAM,YAAY,GAAG,GAAG,OAAO,IAAI,KAAK,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,sBAAsB,CACnC,KAAK,CAAC,MAAM,EACZ,GAAG,YAAY,SAAS,CACzB,CAAC;QACF,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACrB,wBAAwB,CACtB,8BAA8B,EAC9B,GAAG,YAAY,SAAS,EACxB,+BAA+B,CAChC,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjB,IACE,KAAK,CAAC,MAAM,KAAK,SAAS;YAC1B,KAAK,CAAC,MAAM,KAAK,aAAa;YAC9B,KAAK,CAAC,MAAM,KAAK,WAAW;YAC5B,KAAK,CAAC,MAAM,KAAK,QAAQ,EACzB,CAAC;YACD,wBAAwB,CACtB,8BAA8B,EAC9B,GAAG,YAAY,SAAS,EACxB,4BAA4B,CAC7B,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAA+B;YACvC,QAAQ,EAAE,qBAAqB,CAC7B,KAAK,CAAC,QAAQ,EACd,GAAG,YAAY,WAAW,EAC1B,CAAC,EACD,OAAS,CACV;YACD,MAAM;YACN,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC;QACF,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACpC,IAAI,CAAC,WAAW,GAAG,wBAAwB,CACzC,KAAK,CAAC,WAAW,EACjB,GAAG,YAAY,cAAc,CAC9B,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACrD,wBAAwB,CACtB,8BAA8B,EAC9B,GAAG,YAAY,cAAc,EAC7B,gDAAgD,CACjD,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACjC,uBAAuB,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CACnD,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAChC,KAIC,EACD,OAAe;IAMf,MAAM,UAAU,GAIZ;QACF,mBAAmB,EAAE,0BAA0B,CAC7C,KAAK,CAAC,mBAAmB,EACzB,GAAG,OAAO,sBAAsB,CACjC;KACF,CAAC;IACF,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACpC,UAAU,CAAC,WAAW,GAAG,oBAAoB,CAC3C,KAAK,CAAC,WAAW,EACjB,GAAG,OAAO,cAAc,CACzB,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACrC,UAAU,CAAC,YAAY,GAAG,oBAAoB,CAC5C,KAAK,CAAC,YAAY,EAClB,GAAG,OAAO,eAAe,CAC1B,CAAC;IACJ,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,gBAAgB,CACvB,WAA6C,EAC7C,WAA+B,EAC/B,OAAe;IAEf,IAAI,WAAW,KAAK,UAAU,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC5D,wBAAwB,CACtB,0CAA0C,EAC1C,OAAO,EACP,iDAAiD,CAClD,CAAC;IACJ,CAAC;IACD,OAAO,WAAW,KAAK,SAAS;QAC9B,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,oBAAoB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,kCAAkC,CAAC,OASlD;IACC,MAAM,SAAS,GAAG,yBAAyB,CAAC,OAAO,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAC7E,OAAO;QACL,mBAAmB,EAAE,0BAA0B,CAC7C,OAAO,CAAC,mBAAmB,EAC3B,sBAAsB,CACvB;QACD,UAAU,EAAE,sBAAsB,CAAC,OAAO,CAAC,UAAU,EAAE,aAAa,CAAC;QACrE,SAAS;QACT,gBAAgB,EAAE,aAAa,CAAC,OAAO,CAAC,iBAAiB,CAAC;QAC1D,OAAO,EAAE,EAAE;QACX,IAAI,EAAE,eAAe;QACrB,aAAa,EAAE,oBAAoB,CACjC,OAAO,CAAC,aAAa,EACrB,gBAAgB,CACjB;QACD,iBAAiB,EAAE,sBAAsB,CACvC,OAAO,CAAC,iBAAiB,EACzB,oBAAoB,CACrB;QACD,aAAa,EAAE,SAAS;QACxB,UAAU,EAAE,oBAAoB,CAAC,OAAO,CAAC,UAAU,EAAE,aAAa,CAAC;QACnE,QAAQ,EAAE,oBAAoB,CAAC,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAC;QAC7D,MAAM,EAAE,WAAW;QACnB,SAAS,EAAE,SAAS;QACpB,OAAO,EAAE,mCAAmC;KAC7C,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAC7B,KAAqC;IAErC,IACE,KAAK,CAAC,OAAO,KAAK,mCAAmC;QACrD,KAAK,CAAC,IAAI,KAAK,eAAe,EAC9B,CAAC;QACD,wBAAwB,CACtB,8BAA8B,EAC9B,QAAQ,EACR,+BAA+B,CAChC,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,yBAAyB,CACzC,KAAK,CAAC,SAAS,EACf,kBAAkB,CACnB,CAAC;IACF,MAAM,SAAS,GAAG,yBAAyB,CACzC,KAAK,CAAC,SAAS,EACf,kBAAkB,CACnB,CAAC;IACF,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAClD,wBAAwB,CACtB,8BAA8B,EAC9B,kBAAkB,EAClB,iCAAiC,CAClC,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,yBAAyB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC5D,MAAM,KAAK,mCACN,QAAQ,KACX,UAAU,EAAE,sBAAsB,CAAC,KAAK,CAAC,UAAU,EAAE,mBAAmB,CAAC,EACzE,SAAS,EACT,gBAAgB,EAAE,sBAAsB,CACtC,KAAK,CAAC,gBAAgB,EACtB,yBAAyB,CAC1B,EACD,OAAO,EAAE,yBAAyB,CAAC,KAAK,CAAC,OAAO,EAAE,gBAAgB,CAAC,EACnE,IAAI,EAAE,eAAe,EACrB,aAAa,EAAE,oBAAoB,CACjC,KAAK,CAAC,aAAa,EACnB,sBAAsB,CACvB,EACD,iBAAiB,EAAE,sBAAsB,CACvC,KAAK,CAAC,iBAAiB,EACvB,0BAA0B,CAC3B,EACD,aAAa,EAAE,KAAK,CAAC,aAAa,EAClC,UAAU,EAAE,oBAAoB,CAAC,KAAK,CAAC,UAAU,EAAE,mBAAmB,CAAC,EACvE,QAAQ,EAAE,oBAAoB,CAAC,KAAK,CAAC,QAAQ,EAAE,iBAAiB,CAAC,EACjE,MAAM,EAAE,KAAK,CAAC,MAAM,EACpB,SAAS,EACT,OAAO,EAAE,mCAAmC,GAC7C,CAAC;IACF,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACpC,KAAK,CAAC,WAAW,GAAG,wBAAwB,CAC1C,KAAK,CAAC,WAAW,EACjB,oBAAoB,CACrB,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAA2C;QACvD,WAAW;QACX,UAAU;QACV,MAAM;QACN,UAAU;QACV,8BAA8B;QAC9B,iCAAiC;QACjC,WAAW;QACX,QAAQ;KACT,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACrC,wBAAwB,CACtB,8BAA8B,EAC9B,eAAe,EACf,gCAAgC,CACjC,CAAC;IACJ,CAAC;IACD,IACE,KAAK,CAAC,aAAa,KAAK,SAAS;QACjC,KAAK,CAAC,aAAa,KAAK,aAAa;QACrC,KAAK,CAAC,aAAa,KAAK,WAAW;QACnC,KAAK,CAAC,aAAa,KAAK,QAAQ,EAChC,CAAC;QACD,wBAAwB,CACtB,8BAA8B,EAC9B,sBAAsB,EACtB,+BAA+B,CAChC,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1D,wBAAwB,CACtB,8BAA8B,EAC9B,gBAAgB,EAChB,0CAA0C,CAC3C,CAAC;IACJ,CAAC;IACD,IACE,KAAK,CAAC,MAAM,KAAK,8BAA8B;QAC/C,KAAK,CAAC,aAAa,KAAK,aAAa,EACrC,CAAC;QACD,wBAAwB,CACtB,8BAA8B,EAC9B,sBAAsB,EACtB,6CAA6C,CAC9C,CAAC;IACJ,CAAC;IACD,IACE,CAAC,KAAK,CAAC,MAAM,KAAK,iCAAiC;QACjD,KAAK,CAAC,MAAM,KAAK,WAAW,CAAC;QAC/B,KAAK,CAAC,aAAa,KAAK,WAAW,EACnC,CAAC;QACD,wBAAwB,CACtB,8BAA8B,EAC9B,sBAAsB,EACtB,gDAAgD,CACjD,CAAC;IACJ,CAAC;IACD,IACE,KAAK,CAAC,MAAM,KAAK,WAAW;QAC5B,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,KAAK,WAAW,CAAC,EACnE,CAAC;QACD,wBAAwB,CACtB,8BAA8B,EAC9B,yBAAyB,EACzB,gEAAgE,CACjE,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,uBAAuB,CAAC,OAAe,EAAE,OAAe;IAC/D,wBAAwB,CACtB,0CAA0C,EAC1C,OAAO,EACP,OAAO,CACR,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAC5B,KAAqC,EACrC,QAAgD,EAChD,OAAe;IAEf,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACrC,uBAAuB,CACrB,eAAe,EACf,GAAG,OAAO,wCAAwC,KAAK,CAAC,MAAM,EAAE,CACjE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CACxB,MAA6C,EAC7C,WAAmB,EACnB,SAA2E;IAE3E,MAAM,MAAM,GAAG,sBAAsB,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;IACtE,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAClC,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QACxC,KAAK,GAAG,IAAI,CAAC;QACb,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,uBAAuB,CACrB,iBAAiB,EACjB,QAAQ,MAAM,iCAAiC,CAChD,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC7C,OAAuC,EACvC,OAAqC;IAErC,MAAM,KAAK,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,EAAE,GAAG,8BAA8B,CACvC,KAAK,CAAC,SAAS,EACf,OAAO,CAAC,EAAE,EACV,aAAa,CACd,CAAC;IAEF,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,qBAAqB,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YAClE,MAAM,YAAY,GAAG,oBAAoB,CACvC,OAAO,CAAC,YAAY,EACpB,uBAAuB,CACxB,CAAC;YACF,MAAM,WAAW,GAAG,gBAAgB,CAClC,KAAK,CAAC,mBAAmB,EACzB,OAAO,CAAC,WAAW,EACnB,sBAAsB,CACvB,CAAC;YACF,MAAM,KAAK,GAAG,0BAA0B,CAAC;gBACvC,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,GAAG,EAAE,EAAE;gBACP,SAAS,EAAE,UAAU;gBACrB,QAAQ,EAAE,KAAK,CAAC,QAAQ;aACzB,CAAC,CAAC;YACH,MAAM,IAAI,mCACL,KAAK,KACR,YAAY,EACZ,OAAO,EAAE,KAAK,CAAC,OAAO,EACtB,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,EAC3C,SAAS,EAAE,EAAE,GACd,CAAC;YACF,IAAI,WAAW,KAAK,SAAS;gBAAE,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;YAC9D,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,QAAQ;YACX,qBAAqB,CACnB,KAAK,EACL,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,EACjC,OAAO,CAAC,IAAI,CACb,CAAC;YACF,uCACK,KAAK,KACR,WAAW,EAAE,wBAAwB,CACnC,OAAO,CAAC,UAAU,EAClB,qBAAqB,CACtB,EACD,MAAM,EAAE,UAAU,EAClB,SAAS,EAAE,EAAE,IACb;QACJ,KAAK,eAAe;YAClB,qBAAqB,CAAC,KAAK,EAAE,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YACzD,uCACK,KAAK,KACR,aAAa,EAAE,aAAa,EAC5B,MAAM,EAAE,8BAA8B,EACtC,SAAS,EAAE,EAAE,IACb;QACJ,KAAK,kBAAkB;YACrB,qBAAqB,CACnB,KAAK,EACL,CAAC,8BAA8B,CAAC,EAChC,OAAO,CAAC,IAAI,CACb,CAAC;YACF,uCACK,KAAK,KACR,WAAW,EAAE,OAAO,CAAC,WAAW,EAChC,aAAa,EAAE,WAAW,EAC1B,MAAM,EACJ,KAAK,CAAC,gBAAgB,CAAC,MAAM,KAAK,CAAC;oBACjC,CAAC,CAAC,WAAW;oBACb,CAAC,CAAC,iCAAiC,EACvC,SAAS,EAAE,EAAE,IACb;QACJ,KAAK,cAAc;YACjB,qBAAqB,CACnB,KAAK,EACL,CAAC,8BAA8B,CAAC,EAChC,OAAO,CAAC,IAAI,CACb,CAAC;YACF,uCACK,KAAK,KACR,WAAW,EAAE,wBAAwB,CACnC,OAAO,CAAC,SAAS,EACjB,oBAAoB,CACrB,EACD,aAAa,EAAE,QAAQ,EACvB,MAAM,EAAE,QAAQ,EAChB,SAAS,EAAE,EAAE,IACb;QACJ,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,qBAAqB,CACnB,KAAK,EACL,CAAC,iCAAiC,CAAC,EACnC,OAAO,CAAC,IAAI,CACb,CAAC;YACF,MAAM,gBAAgB,GAAG,iBAAiB,CACxC,KAAK,CAAC,gBAAgB,EACtB,OAAO,CAAC,MAAM,EACd,CAAC,IAAI,EAAE,EAAE;gBACP,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;oBAC1D,uBAAuB,CACrB,iBAAiB,EACjB,QAAQ,IAAI,CAAC,MAAM,sBAAsB,IAAI,CAAC,MAAM,EAAE,CACvD,CAAC;gBACJ,CAAC;gBACD,OAAO;oBACL,QAAQ,EAAE,IAAI,CAAC,QAAQ,GAAG,CAAC;oBAC3B,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,MAAM,EAAE,aAAa;iBACtB,CAAC;YACJ,CAAC,CACF,CAAC;YACF,uCAAY,KAAK,KAAE,gBAAgB,EAAE,SAAS,EAAE,EAAE,IAAG;QACvD,CAAC;QACD,KAAK,eAAe,CAAC,CAAC,CAAC;YACrB,qBAAqB,CACnB,KAAK,EACL,CAAC,iCAAiC,CAAC,EACnC,OAAO,CAAC,IAAI,CACb,CAAC;YACF,MAAM,gBAAgB,GAAG,iBAAiB,CACxC,KAAK,CAAC,gBAAgB,EACtB,OAAO,CAAC,MAAM,EACd,CAAC,IAAI,EAAE,EAAE;gBACP,IAAI,IAAI,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;oBAClC,uBAAuB,CACrB,iBAAiB,EACjB,QAAQ,IAAI,CAAC,MAAM,qBAAqB,CACzC,CAAC;gBACJ,CAAC;gBACD,OAAO;oBACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,MAAM,EAAE,WAAW;iBACpB,CAAC;YACJ,CAAC,CACF,CAAC;YACF,uCACK,KAAK,KACR,gBAAgB,EAChB,MAAM,EAAE,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,KAAK,WAAW,CAAC;oBACpE,CAAC,CAAC,WAAW;oBACb,CAAC,CAAC,iCAAiC,EACrC,SAAS,EAAE,EAAE,IACb;QACJ,CAAC;QACD,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,qBAAqB,CACnB,KAAK,EACL,CAAC,iCAAiC,CAAC,EACnC,OAAO,CAAC,IAAI,CACb,CAAC;YACF,MAAM,gBAAgB,GAAG,iBAAiB,CACxC,KAAK,CAAC,gBAAgB,EACtB,OAAO,CAAC,MAAM,EACd,CAAC,IAAI,EAAE,EAAE;gBACP,IAAI,IAAI,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;oBAClC,uBAAuB,CACrB,iBAAiB,EACjB,QAAQ,IAAI,CAAC,MAAM,qBAAqB,CACzC,CAAC;gBACJ,CAAC;gBACD,OAAO;oBACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,WAAW,EAAE,wBAAwB,CACnC,OAAO,CAAC,SAAS,EACjB,oBAAoB,CACrB;oBACD,MAAM,EAAE,QAAQ;iBACjB,CAAC;YACJ,CAAC,CACF,CAAC;YACF,uCACK,KAAK,KACR,gBAAgB,EAChB,WAAW,EAAE,2BAA2B,EACxC,MAAM,EAAE,QAAQ,EAChB,SAAS,EAAE,EAAE,IACb;QACJ,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,qBAAqB,CAAC,KAAK,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YACvD,IAAI,KAAK,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;gBACrC,uCACK,KAAK,KACR,WAAW,EAAE,SAAS,EACtB,aAAa,EAAE,SAAS,EACxB,MAAM,EAAE,UAAU,EAClB,SAAS,EAAE,EAAE,IACb;YACJ,CAAC;YACD,IAAI,KAAK,CAAC,aAAa,KAAK,WAAW,EAAE,CAAC;gBACxC,uBAAuB,CACrB,sBAAsB,EACtB,wCAAwC,CACzC,CAAC;YACJ,CAAC;YACD,uCACK,KAAK,KACR,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACpD,IAAI,CAAC,MAAM,KAAK,QAAQ;oBACtB,CAAC,CAAC;wBACE,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,MAAM,EAAE,IAAI,CAAC,MAAM;wBACnB,MAAM,EAAE,SAAS;qBAClB;oBACH,CAAC,CAAC,IAAI,CACT,EACD,WAAW,EAAE,SAAS,EACtB,MAAM,EAAE,iCAAiC,EACzC,SAAS,EAAE,EAAE,IACb;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,OAQhD;IACC,MAAM,SAAS,GAAG,yBAAyB,CAAC,OAAO,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAC7E,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;QACrC,OAAO,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,EAClC,CAAC;QACD,wBAAwB,CACtB,8BAA8B,EAC9B,gBAAgB,EAChB,8CAA8C,CAC/C,CAAC;IACJ,CAAC;IACD,OAAO;QACL,mBAAmB,EAAE,0BAA0B,CAC7C,OAAO,CAAC,mBAAmB,EAC3B,sBAAsB,CACvB;QACD,UAAU,EAAE,sBAAsB,CAAC,OAAO,CAAC,UAAU,EAAE,aAAa,CAAC;QACrE,SAAS;QACT,OAAO,EAAE,EAAE;QACX,IAAI,EAAE,aAAa;QACnB,aAAa,EAAE,oBAAoB,CACjC,OAAO,CAAC,aAAa,EACrB,gBAAgB,CACjB;QACD,UAAU,EAAE,oBAAoB,CAAC,OAAO,CAAC,UAAU,EAAE,aAAa,CAAC;QACnE,QAAQ,EAAE,oBAAoB,CAAC,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAC;QAC7D,YAAY,EAAE,aAAa,CAAC,OAAO,CAAC,aAAa,CAAC;QAClD,MAAM,EAAE,WAAW;QACnB,SAAS,EAAE,SAAS;QACpB,OAAO,EAAE,mCAAmC;KAC7C,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CACxB,KAAoC;IAEpC,MAAM,SAAS,GAAG,yBAAyB,CACzC,KAAK,CAAC,SAAS,EACf,2BAA2B,CAC5B,CAAC;IACF,MAAM,SAAS,GAAG,yBAAyB,CACzC,KAAK,CAAC,SAAS,EACf,2BAA2B,CAC5B,CAAC;IACF,IACE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;QAC9C,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;YAC3C,qCAAqC,EACvC,CAAC;QACD,wBAAwB,CACtB,8BAA8B,EAC9B,2BAA2B,EAC3B,uEAAuE,CACxE,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,KAAK,kBAAkB,EAAE,CAAC;QAC5C,wBAAwB,CACtB,8BAA8B,EAC9B,4BAA4B,EAC5B,0DAA0D,CAC3D,CAAC;IACJ,CAAC;IACD,IACE,KAAK,CAAC,MAAM,KAAK,WAAW;QAC5B,KAAK,CAAC,MAAM,KAAK,sBAAsB;QACvC,KAAK,CAAC,MAAM,KAAK,SAAS,EAC1B,CAAC;QACD,wBAAwB,CACtB,8BAA8B,EAC9B,wBAAwB,EACxB,uCAAuC,CACxC,CAAC;IACJ,CAAC;IACD,OAAO;QACL,WAAW,EAAE,oBAAoB,CAC/B,KAAK,CAAC,WAAW,EACjB,6BAA6B,CAC9B;QACD,SAAS;QACT,UAAU,EAAE,kBAAkB;QAC9B,SAAS;QACT,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAC3B,KAAmC;IAEnC,IACE,KAAK,CAAC,OAAO,KAAK,mCAAmC;QACrD,KAAK,CAAC,IAAI,KAAK,aAAa,EAC5B,CAAC;QACD,wBAAwB,CACtB,8BAA8B,EAC9B,QAAQ,EACR,6BAA6B,CAC9B,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,yBAAyB,CACzC,KAAK,CAAC,SAAS,EACf,kBAAkB,CACnB,CAAC;IACF,MAAM,SAAS,GAAG,yBAAyB,CACzC,KAAK,CAAC,SAAS,EACf,kBAAkB,CACnB,CAAC;IACF,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAClD,wBAAwB,CACtB,8BAA8B,EAC9B,kBAAkB,EAClB,iCAAiC,CAClC,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,yBAAyB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC5D,MAAM,KAAK,mCACN,QAAQ,KACX,UAAU,EAAE,sBAAsB,CAAC,KAAK,CAAC,UAAU,EAAE,mBAAmB,CAAC,EACzE,SAAS,EACT,OAAO,EAAE,yBAAyB,CAAC,KAAK,CAAC,OAAO,EAAE,gBAAgB,CAAC,EACnE,IAAI,EAAE,aAAa,EACnB,aAAa,EAAE,oBAAoB,CACjC,KAAK,CAAC,aAAa,EACnB,sBAAsB,CACvB,EACD,UAAU,EAAE,oBAAoB,CAAC,KAAK,CAAC,UAAU,EAAE,mBAAmB,CAAC,EACvE,QAAQ,EAAE,oBAAoB,CAAC,KAAK,CAAC,QAAQ,EAAE,iBAAiB,CAAC,EACjE,YAAY,EAAE,sBAAsB,CAClC,KAAK,CAAC,YAAY,EAClB,qBAAqB,CACtB,EACD,MAAM,EAAE,KAAK,CAAC,MAAM,EACpB,SAAS,EACT,OAAO,EAAE,mCAAmC,GAC7C,CAAC;IACF,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACjC,KAAK,CAAC,QAAQ,GAAG,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACrC,IACE,KAAK,CAAC,YAAY,KAAK,WAAW;YAClC,KAAK,CAAC,YAAY,KAAK,mBAAmB;YAC1C,KAAK,CAAC,YAAY,KAAK,+BAA+B,EACtD,CAAC;YACD,wBAAwB,CACtB,8BAA8B,EAC9B,qBAAqB,EACrB,8BAA8B,CAC/B,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;IAC1C,CAAC;IACD,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACpC,KAAK,CAAC,WAAW,GAAG,wBAAwB,CAC1C,KAAK,CAAC,WAAW,EACjB,oBAAoB,CACrB,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAyC;QACrD,WAAW;QACX,UAAU;QACV,MAAM;QACN,UAAU;QACV,WAAW;QACX,OAAO;QACP,SAAS;QACT,+BAA+B;QAC/B,2CAA2C;QAC3C,WAAW;QACX,QAAQ;KACT,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACrC,wBAAwB,CACtB,8BAA8B,EAC9B,eAAe,EACf,8BAA8B,CAC/B,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1D,wBAAwB,CACtB,8BAA8B,EAC9B,gBAAgB,EAChB,yCAAyC,CAC1C,CAAC;IACJ,CAAC;IACD,IACE,CAAC,KAAK,CAAC,MAAM,KAAK,OAAO;QACvB,KAAK,CAAC,MAAM,KAAK,SAAS;QAC1B,KAAK,CAAC,MAAM,KAAK,+BAA+B,CAAC;QACnD,CAAC,KAAK,CAAC,QAAQ,EACf,CAAC;QACD,wBAAwB,CACtB,8BAA8B,EAC9B,iBAAiB,EACjB,kDAAkD,CACnD,CAAC;IACJ,CAAC;IACD,IACE,KAAK,CAAC,MAAM,KAAK,2CAA2C;QAC5D,KAAK,CAAC,QAAQ,EACd,CAAC;QACD,wBAAwB,CACtB,8BAA8B,EAC9B,iBAAiB,EACjB,6DAA6D,CAC9D,CAAC;IACJ,CAAC;IACD,IACE,KAAK,CAAC,MAAM,KAAK,WAAW;QAC5B,CAAC,KAAK,CAAC,QAAQ;QACf,KAAK,CAAC,WAAW,KAAK,SAAS;QAC/B,KAAK,CAAC,WAAW,KAAK,WAAW,EACjC,CAAC;QACD,wBAAwB,CACtB,8BAA8B,EAC9B,oBAAoB,EACpB,iEAAiE,CAClE,CAAC;IACJ,CAAC;IACD,IACE,KAAK,CAAC,MAAM,KAAK,OAAO;QACxB,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,KAAK,WAAW,CAAC,EAC/D,CAAC;QACD,wBAAwB,CACtB,8BAA8B,EAC9B,qBAAqB,EACrB,gEAAgE,CACjE,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;QACrD,wBAAwB,CACtB,8BAA8B,EAC9B,qBAAqB,EACrB,2CAA2C,CAC5C,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,mBAAmB,CAC1B,KAAmC,EACnC,QAA8C,EAC9C,OAAe;IAEf,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACrC,uBAAuB,CACrB,eAAe,EACf,GAAG,OAAO,sCAAsC,KAAK,CAAC,MAAM,EAAE,CAC/D,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,OAAqC,EACrC,OAAmC;IAEnC,MAAM,KAAK,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,EAAE,GAAG,8BAA8B,CACvC,KAAK,CAAC,SAAS,EACf,OAAO,CAAC,EAAE,EACV,aAAa,CACd,CAAC;IAEF,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,mBAAmB,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YAChE,MAAM,YAAY,GAAG,oBAAoB,CACvC,OAAO,CAAC,YAAY,EACpB,uBAAuB,CACxB,CAAC;YACF,MAAM,WAAW,GAAG,gBAAgB,CAClC,KAAK,CAAC,mBAAmB,EACzB,OAAO,CAAC,WAAW,EACnB,sBAAsB,CACvB,CAAC;YACF,MAAM,KAAK,GAAG,0BAA0B,CAAC;gBACvC,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,GAAG,EAAE,EAAE;gBACP,SAAS,EAAE,QAAQ;gBACnB,QAAQ,EAAE,KAAK,CAAC,QAAQ;aACzB,CAAC,CAAC;YACH,MAAM,IAAI,mCACL,KAAK,KACR,YAAY,EACZ,OAAO,EAAE,KAAK,CAAC,OAAO,EACtB,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,EAC3C,SAAS,EAAE,EAAE,GACd,CAAC;YACF,IAAI,WAAW,KAAK,SAAS;gBAAE,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;YAC9D,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,QAAQ;YACX,mBAAmB,CACjB,KAAK,EACL,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,EACjC,OAAO,CAAC,IAAI,CACb,CAAC;YACF,uCACK,KAAK,KACR,WAAW,EAAE,wBAAwB,CACnC,OAAO,CAAC,UAAU,EAClB,qBAAqB,CACtB,EACD,MAAM,EAAE,UAAU,EAClB,SAAS,EAAE,EAAE,IACb;QACJ,KAAK,iBAAiB;YACpB,mBAAmB,CAAC,KAAK,EAAE,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YACvD,uCAAY,KAAK,KAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE,IAAG;QAC1D,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,mBAAmB,CAAC,KAAK,EAAE,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YACxD,MAAM,YAAY,GAAG,iBAAiB,CACpC,KAAK,CAAC,YAAY,EAClB,OAAO,CAAC,MAAM,EACd,CAAC,IAAI,EAAE,EAAE;gBACP,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;oBAC1D,uBAAuB,CACrB,iBAAiB,EACjB,QAAQ,IAAI,CAAC,MAAM,sBAAsB,IAAI,CAAC,MAAM,EAAE,CACvD,CAAC;gBACJ,CAAC;gBACD,OAAO;oBACL,QAAQ,EAAE,IAAI,CAAC,QAAQ,GAAG,CAAC;oBAC3B,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,MAAM,EAAE,aAAa;iBACtB,CAAC;YACJ,CAAC,CACF,CAAC;YACF,uCAAY,KAAK,KAAE,YAAY,EAAE,SAAS,EAAE,EAAE,IAAG;QACnD,CAAC;QACD,KAAK,eAAe,CAAC,CAAC,CAAC;YACrB,mBAAmB,CAAC,KAAK,EAAE,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YACxD,MAAM,YAAY,GAAG,iBAAiB,CACpC,KAAK,CAAC,YAAY,EAClB,OAAO,CAAC,MAAM,EACd,CAAC,IAAI,EAAE,EAAE;gBACP,IAAI,IAAI,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;oBAClC,uBAAuB,CACrB,iBAAiB,EACjB,QAAQ,IAAI,CAAC,MAAM,qBAAqB,CACzC,CAAC;gBACJ,CAAC;gBACD,OAAO;oBACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,MAAM,EAAE,WAAW;iBACpB,CAAC;YACJ,CAAC,CACF,CAAC;YACF,uCAAY,KAAK,KAAE,YAAY,EAAE,SAAS,EAAE,EAAE,IAAG;QACnD,CAAC;QACD,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,mBAAmB,CAAC,KAAK,EAAE,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YACxD,MAAM,YAAY,GAAG,iBAAiB,CACpC,KAAK,CAAC,YAAY,EAClB,OAAO,CAAC,MAAM,EACd,CAAC,IAAI,EAAE,EAAE;gBACP,IAAI,IAAI,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;oBAClC,uBAAuB,CACrB,iBAAiB,EACjB,QAAQ,IAAI,CAAC,MAAM,qBAAqB,CACzC,CAAC;gBACJ,CAAC;gBACD,OAAO;oBACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,WAAW,EAAE,wBAAwB,CACnC,OAAO,CAAC,SAAS,EACjB,oBAAoB,CACrB;oBACD,MAAM,EAAE,QAAQ;iBACjB,CAAC;YACJ,CAAC,CACF,CAAC;YACF,uCACK,KAAK,KACR,YAAY,EAAE,WAAW,EACzB,WAAW,EAAE,uBAAuB,EACpC,YAAY,EACZ,MAAM,EAAE,QAAQ,EAChB,SAAS,EAAE,EAAE,IACb;QACJ,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,mBAAmB,CAAC,KAAK,EAAE,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YACxD,IAAI,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,KAAK,WAAW,CAAC,EAAE,CAAC;gBACpE,uBAAuB,CACrB,qBAAqB,EACrB,gEAAgE,CACjE,CAAC;YACJ,CAAC;YACD,IAAI,OAAO,CAAC,UAAU,KAAK,kBAAkB,EAAE,CAAC;gBAC9C,uBAAuB,CACrB,qBAAqB,EACrB,0DAA0D,CAC3D,CAAC;YACJ,CAAC;YACD,MAAM,SAAS,GAAG,yBAAyB,CACzC,OAAO,CAAC,SAAS,EACjB,oBAAoB,CACrB,CAAC;YACF,IACE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;oBACpC,qCAAqC,EACvC,CAAC;gBACD,uBAAuB,CACrB,oBAAoB,EACpB,+DAA+D,CAChE,CAAC;YACJ,CAAC;YACD,uCACK,KAAK,KACR,QAAQ,EAAE;oBACR,WAAW,EAAE,oBAAoB,CAC/B,OAAO,CAAC,WAAW,EACnB,sBAAsB,CACvB;oBACD,SAAS,EAAE,EAAE;oBACb,UAAU,EAAE,kBAAkB;oBAC9B,SAAS;oBACT,MAAM,EAAE,WAAW;iBACpB,EACD,MAAM,EAAE,OAAO,EACf,SAAS,EAAE,EAAE,IACb;QACJ,CAAC;QACD,KAAK,QAAQ;YACX,mBAAmB,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YACpD,IACE,CAAC,KAAK,CAAC,QAAQ;gBACf,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,EACrD,CAAC;gBACD,uBAAuB,CACrB,aAAa,EACb,iDAAiD,CAClD,CAAC;YACJ,CAAC;YACD,uCAAY,KAAK,KAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,IAAG;QACxD,KAAK,yBAAyB;YAC5B,mBAAmB,CAAC,KAAK,EAAE,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YACtD,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACpB,uBAAuB,CACrB,iBAAiB,EACjB,4BAA4B,CAC7B,CAAC;YACJ,CAAC;YACD,uCACK,KAAK,KACR,QAAQ,kCAAO,KAAK,CAAC,QAAQ,KAAE,MAAM,EAAE,sBAAsB,KAC7D,MAAM,EAAE,+BAA+B,EACvC,SAAS,EAAE,EAAE,IACb;QACJ,KAAK,qCAAqC;YACxC,mBAAmB,CAAC,KAAK,EAAE,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YACxD,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACnB,uBAAuB,CACrB,iBAAiB,EACjB,+DAA+D,CAChE,CAAC;YACJ,CAAC;YACD,uCACK,KAAK,KACR,MAAM,EAAE,2CAA2C,EACnD,SAAS,EAAE,EAAE,IACb;QACJ,KAAK,4BAA4B;YAC/B,mBAAmB,CACjB,KAAK,EACL;gBACE,+BAA+B;gBAC/B,2CAA2C;aAC5C,EACD,OAAO,CAAC,IAAI,CACb,CAAC;YACF,IAAI,KAAK,CAAC,MAAM,KAAK,+BAA+B,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACxE,uBAAuB,CACrB,iBAAiB,EACjB,4BAA4B,CAC7B,CAAC;YACJ,CAAC;YACD,qDACK,KAAK,GACL,CAAC,KAAK,CAAC,QAAQ;gBAChB,CAAC,CAAC,EAAE,QAAQ,kCAAO,KAAK,CAAC,QAAQ,KAAE,MAAM,EAAE,SAAkB,GAAE,EAAE;gBACjE,CAAC,CAAC,EAAE,CAAC,KACP,WAAW,EAAE,OAAO,CAAC,WAAW,EAChC,MAAM,EAAE,WAAW,EACnB,SAAS,EAAE,EAAE,IACb;QACJ,KAAK,wBAAwB;YAC3B,mBAAmB,CACjB,KAAK,EACL;gBACE,+BAA+B;gBAC/B,2CAA2C;aAC5C,EACD,OAAO,CAAC,IAAI,CACb,CAAC;YACF,uCACK,KAAK,KACR,YAAY,EACV,KAAK,CAAC,MAAM,KAAK,2CAA2C;oBAC1D,CAAC,CAAC,+BAA+B;oBACjC,CAAC,CAAC,mBAAmB,EACzB,WAAW,EAAE,wBAAwB,CACnC,OAAO,CAAC,SAAS,EACjB,oBAAoB,CACrB,EACD,MAAM,EAAE,QAAQ,EAChB,SAAS,EAAE,EAAE,IACb;QACJ,KAAK,OAAO;YACV,mBAAmB,CAAC,KAAK,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YACrD,IAAI,KAAK,CAAC,YAAY,KAAK,WAAW,EAAE,CAAC;gBACvC,uCACK,KAAK,KACR,YAAY,EAAE,SAAS,EACvB,WAAW,EAAE,SAAS,EACtB,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAC5C,IAAI,CAAC,MAAM,KAAK,QAAQ;wBACtB,CAAC,CAAC;4BACE,QAAQ,EAAE,IAAI,CAAC,QAAQ;4BACvB,MAAM,EAAE,IAAI,CAAC,MAAM;4BACnB,MAAM,EAAE,SAAS;yBAClB;wBACH,CAAC,CAAC,IAAI,CACT,EACD,MAAM,EAAE,WAAW,EACnB,SAAS,EAAE,EAAE,IACb;YACJ,CAAC;YACD,IAAI,KAAK,CAAC,YAAY,KAAK,mBAAmB,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACjE,uCACK,KAAK,KACR,YAAY,EAAE,SAAS,EACvB,WAAW,EAAE,SAAS,EACtB,MAAM,EAAE,+BAA+B,EACvC,SAAS,EAAE,EAAE,IACb;YACJ,CAAC;YACD,IACE,KAAK,CAAC,YAAY,KAAK,+BAA+B;gBACtD,CAAC,KAAK,CAAC,QAAQ,EACf,CAAC;gBACD,uCACK,KAAK,KACR,YAAY,EAAE,SAAS,EACvB,WAAW,EAAE,SAAS,EACtB,MAAM,EAAE,2CAA2C,EACnD,SAAS,EAAE,EAAE,IACb;YACJ,CAAC;YACD,uBAAuB,CACrB,qBAAqB,EACrB,sCAAsC,CACvC,CAAC;IACN,CAAC;AACH,CAAC"}
@@ -0,0 +1,36 @@
1
+ import { type DefinedSecret, type SecretValueSchema } from './secrets/contract.js';
2
+ import { type SecretResolutionContext, type ServerSecretResolver } from './secrets/resolver.js';
3
+ export interface DatabaseCredential {
4
+ database: string;
5
+ host: string;
6
+ password: string;
7
+ port: number;
8
+ username: string;
9
+ }
10
+ export interface LocalDatabaseResource extends DatabaseCredential {
11
+ provider: 'local';
12
+ }
13
+ export interface SecretsManagerDatabaseResource {
14
+ database: string;
15
+ host: string;
16
+ logicalName: string;
17
+ port: number;
18
+ provider: 'aws-secrets-manager';
19
+ secretArn: string;
20
+ username: string;
21
+ }
22
+ export type LinkedDatabaseResource = LocalDatabaseResource | SecretsManagerDatabaseResource;
23
+ export interface DatabaseTlsOptions {
24
+ ca: string;
25
+ rejectUnauthorized: true;
26
+ }
27
+ export interface ResolveDatabaseCredentialOptions {
28
+ context?: SecretResolutionContext;
29
+ declaration: DefinedSecret<string, SecretValueSchema<DatabaseCredential>>;
30
+ resolver: ServerSecretResolver;
31
+ }
32
+ export declare function databaseTlsOptions(resource: LinkedDatabaseResource): false | DatabaseTlsOptions;
33
+ export declare const databaseCredentialSecretSchema: SecretValueSchema<DatabaseCredential>;
34
+ export declare function resolveDatabaseCredential(resource: LinkedDatabaseResource, options?: ResolveDatabaseCredentialOptions): Promise<DatabaseCredential>;
35
+ export declare function runWithDatabaseCredential<Result>(resource: LinkedDatabaseResource, options: ResolveDatabaseCredentialOptions | undefined, operation: (credential: DatabaseCredential) => Promise<Result>, isAuthenticationFailure: (error: unknown) => boolean): Promise<Result>;
36
+ export { RDS_GLOBAL_CA_BUNDLE } from './rds-global-ca-bundle.js';