@go-to-k/cdkd 0.219.2 → 0.219.3

package/dist/asg-provider-B_hrCxRx.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"asg-provider-B_hrCxRx.js","names":["DeleteTagsCommand"],"sources":["../src/provisioning/providers/asg-provider.ts"],"sourcesContent":["import {\n  AutoScalingClient,\n  CreateAutoScalingGroupCommand,\n  UpdateAutoScalingGroupCommand,\n  DeleteAutoScalingGroupCommand,\n  DescribeAutoScalingGroupsCommand,\n  type DescribeAutoScalingGroupsCommandOutput,\n  DescribeLifecycleHooksCommand,\n  DescribeTrafficSourcesCommand,\n  DescribeNotificationConfigurationsCommand,\n  EnableMetricsCollectionCommand,\n  DisableMetricsCollectionCommand,\n  PutLifecycleHookCommand,\n  DeleteLifecycleHookCommand,\n  AttachTrafficSourcesCommand,\n  DetachTrafficSourcesCommand,\n  PutNotificationConfigurationCommand,\n  DeleteNotificationConfigurationCommand,\n  CreateOrUpdateTagsCommand,\n  DeleteTagsCommand,\n  AttachLoadBalancersCommand,\n  DetachLoadBalancersCommand,\n  AttachLoadBalancerTargetGroupsCommand,\n  DetachLoadBalancerTargetGroupsCommand,\n  type Tag as ASGTag,\n  type LaunchTemplateSpecification,\n} from '@aws-sdk/client-auto-scaling';\nimport { EC2Client } from '@aws-sdk/client-ec2';\nimport { getLogger } from '../../utils/logger.js';\nimport { ProvisioningError, ResourceUpdateNotSupportedError } from '../../utils/error-handler.js';\nimport { assertRegionMatch, type DeleteContext } from '../region-check.js';\nimport { disableInstanceApiTermination } from '../ec2-termination-protection.js';\nimport { generateResourceName } from '../resource-name.js';\nimport { normalizeAwsTagsToCfn } from '../import-helpers.js';\nimport type {\n  ResourceProvider,\n  ResourceCreateResult,\n  ResourceUpdateResult,\n} from '../../types/resource.js';\n\n/**\n * AWS Auto Scaling Provider\n *\n * Implements resource provisioning for `AWS::AutoScaling::AutoScalingGroup`.\n *\n * WHY a dedicated SDK provider (instead of CC API fallback):\n *   1. Owns the `--remove-protection` flip-off: ASG protection has three\n *      levels (`none` / `prevent-force-deletion` / `prevent-all-deletion`)\n *      and the destroy path needs to (a) clear it via `UpdateAutoScalingGroup\n *      ({DeletionProtection: 'none'})` before the actual delete and (b) set\n *      `ForceDelete: true` on `DeleteAutoScalingGroup` so AWS terminates any\n *      running instances as part of the delete (matches the user's \"I know\n *      what I'm doing\" intent).\n *   2. Faster than CC API for the common case — direct Create/Update calls\n *      with no eventual-consistency polling beyond what `DescribeAutoScaling\n *      Groups` already provides.\n *\n * Update has narrower coverage than create: AWS does not support modifying\n * `AutoScalingGroupName` (immutable) — that diff still surfaces\n * `ResourceUpdateNotSupportedError` so the caller can `cdkd deploy\n * --replace`. The mutable fields handled in-place via\n * `UpdateAutoScalingGroup` include MinSize / MaxSize / DesiredCapacity /\n * VPCZoneIdentifier / HealthCheckType / HealthCheckGracePeriod /\n * DefaultCooldown / Cooldown / NewInstancesProtectedFromScaleIn /\n * MaxInstanceLifetime / TerminationPolicies / CapacityRebalance /\n * ServiceLinkedRoleARN / Context / DesiredCapacityType /\n * DefaultInstanceWarmup / AvailabilityZones / AvailabilityZoneDistribution\n * / AvailabilityZoneImpairmentPolicy / SkipZonalShiftValidation /\n * CapacityReservationSpecification / InstanceMaintenancePolicy /\n * DeletionProtection / MixedInstancesPolicy / LaunchTemplate.\n *\n * Sub-shape diffs are applied via dedicated AWS APIs before the main\n * `UpdateAutoScalingGroup` call:\n *   - `Tags` → `CreateOrUpdateTags` / `DeleteTags` (#475)\n *   - `LoadBalancerNames` → `AttachLoadBalancers` /\n *     `DetachLoadBalancers` (#476)\n *   - `TargetGroupARNs` → `AttachLoadBalancerTargetGroups` /\n *     `DetachLoadBalancerTargetGroups` (#476)\n *   - `MetricsCollection` → `EnableMetricsCollection` /\n *     `DisableMetricsCollection`\n *   - `LifecycleHookSpecificationList` → per-entry `PutLifecycleHook` /\n *     `DeleteLifecycleHook`\n *   - `TrafficSources` → `AttachTrafficSources` /\n *     `DetachTrafficSources`\n *   - `NotificationConfigurations` → per-topic\n *     `PutNotificationConfiguration` /\n *     `DeleteNotificationConfiguration`\n *\n * Each helper is a no-op when the before/after JSON is identical.\n */\nexport class ASGProvider implements ResourceProvider {\n  private asgClient?: AutoScalingClient;\n  private ec2Client?: EC2Client;\n  private readonly providerRegion = process.env['AWS_REGION'];\n  private logger = getLogger().child('ASGProvider');\n\n  handledProperties = new Map<string, ReadonlySet<string>>([\n    [\n      'AWS::AutoScaling::AutoScalingGroup',\n      new Set([\n        'AutoScalingGroupName',\n        'LaunchTemplate',\n        'MinSize',\n        'MaxSize',\n        'DesiredCapacity',\n        'VPCZoneIdentifier',\n        'AvailabilityZones',\n        'HealthCheckType',\n        'HealthCheckGracePeriod',\n        'Cooldown',\n        'DefaultCooldown',\n        'Tags',\n        'TerminationPolicies',\n        'NewInstancesProtectedFromScaleIn',\n        'CapacityRebalance',\n        'ServiceLinkedRoleARN',\n        'MaxInstanceLifetime',\n        'LoadBalancerNames',\n        'TargetGroupARNs',\n        'MetricsCollection',\n        'LifecycleHookSpecificationList',\n        'MixedInstancesPolicy',\n        'Context',\n        'DesiredCapacityType',\n        'DefaultInstanceWarmup',\n        'TrafficSources',\n        'NotificationConfigurations',\n        'AvailabilityZoneDistribution',\n        'AvailabilityZoneImpairmentPolicy',\n        'SkipZonalShiftValidation',\n        'CapacityReservationSpecification',\n        'InstanceMaintenancePolicy',\n        'DeletionProtection',\n      ]),\n    ],\n  ]);\n\n  unhandledByDesign = new Map<string, ReadonlyMap<string, string>>([\n    [\n      'AWS::AutoScaling::AutoScalingGroup',\n      new Map<string, string>([\n        [\n          'LaunchConfigurationName',\n          'AWS Launch Configurations end-of-life 2024-10; use LaunchTemplate instead',\n        ],\n        [\n          'NotificationConfiguration',\n          'Legacy singular form; use NotificationConfigurations (plural) which cdkd already wires',\n        ],\n      ]),\n    ],\n  ]);\n\n  private getClient(): AutoScalingClient {\n    if (!this.asgClient) {\n      this.asgClient = new AutoScalingClient(\n        this.providerRegion ? { region: this.providerRegion } : {}\n      );\n    }\n    return this.asgClient;\n  }\n\n  private getEc2Client(): EC2Client {\n    if (!this.ec2Client) {\n      this.ec2Client = new EC2Client(this.providerRegion ? { region: this.providerRegion } : {});\n    }\n    return this.ec2Client;\n  }\n\n  // ─── Dispatch ─────────────────────────────────────────────────────\n\n  async create(\n    logicalId: string,\n    resourceType: string,\n    properties: Record<string, unknown>\n  ): Promise<ResourceCreateResult> {\n    if (resourceType !== 'AWS::AutoScaling::AutoScalingGroup') {\n      throw new ProvisioningError(\n        `Unsupported resource type: ${resourceType}`,\n        resourceType,\n        logicalId\n      );\n    }\n\n    const groupName =\n      (properties['AutoScalingGroupName'] as string | undefined) ||\n      generateResourceName(logicalId, { maxLength: 255 });\n\n    this.logger.debug(`Creating AutoScalingGroup ${logicalId}: ${groupName}`);\n\n    try {\n      const launchTemplate = this.buildLaunchTemplate(properties);\n      const tags = this.buildTags(groupName, properties);\n      const vpcZoneIdentifier = this.joinVpcZoneIdentifier(properties['VPCZoneIdentifier']);\n\n      const minSize = properties['MinSize'] != null ? Number(properties['MinSize']) : 0;\n      const maxSize = properties['MaxSize'] != null ? Number(properties['MaxSize']) : minSize;\n\n      await this.getClient().send(\n        new CreateAutoScalingGroupCommand({\n          AutoScalingGroupName: groupName,\n          MinSize: minSize,\n          MaxSize: maxSize,\n          ...(properties['DesiredCapacity'] != null && {\n            DesiredCapacity: Number(properties['DesiredCapacity']),\n          }),\n          ...(launchTemplate && { LaunchTemplate: launchTemplate }),\n          ...(properties['MixedInstancesPolicy'] !== undefined && {\n            MixedInstancesPolicy: properties['MixedInstancesPolicy'] as never,\n          }),\n          ...(vpcZoneIdentifier !== undefined && { VPCZoneIdentifier: vpcZoneIdentifier }),\n          ...(properties['AvailabilityZones'] !== undefined && {\n            AvailabilityZones: properties['AvailabilityZones'] as string[],\n          }),\n          ...(properties['HealthCheckType'] !== undefined && {\n            HealthCheckType: properties['HealthCheckType'] as string,\n          }),\n          ...(properties['HealthCheckGracePeriod'] != null && {\n            HealthCheckGracePeriod: Number(properties['HealthCheckGracePeriod']),\n          }),\n          ...(properties['Cooldown'] != null && {\n            DefaultCooldown: Number(properties['Cooldown']),\n          }),\n          ...(properties['DefaultCooldown'] != null && {\n            DefaultCooldown: Number(properties['DefaultCooldown']),\n          }),\n          ...(properties['TerminationPolicies'] !== undefined && {\n            TerminationPolicies: properties['TerminationPolicies'] as string[],\n          }),\n          ...(properties['NewInstancesProtectedFromScaleIn'] !== undefined && {\n            NewInstancesProtectedFromScaleIn: properties[\n              'NewInstancesProtectedFromScaleIn'\n            ] as boolean,\n          }),\n          ...(properties['CapacityRebalance'] !== undefined && {\n            CapacityRebalance: properties['CapacityRebalance'] as boolean,\n          }),\n          ...(properties['ServiceLinkedRoleARN'] !== undefined && {\n            ServiceLinkedRoleARN: properties['ServiceLinkedRoleARN'] as string,\n          }),\n          ...(properties['MaxInstanceLifetime'] != null && {\n            MaxInstanceLifetime: Number(properties['MaxInstanceLifetime']),\n          }),\n          ...(properties['LoadBalancerNames'] !== undefined && {\n            LoadBalancerNames: properties['LoadBalancerNames'] as string[],\n          }),\n          ...(properties['TargetGroupARNs'] !== undefined && {\n            TargetGroupARNs: properties['TargetGroupARNs'] as string[],\n          }),\n          ...(properties['Context'] !== undefined && {\n            Context: properties['Context'] as string,\n          }),\n          ...(properties['DesiredCapacityType'] !== undefined && {\n            DesiredCapacityType: properties['DesiredCapacityType'] as string,\n          }),\n          ...(properties['DefaultInstanceWarmup'] != null && {\n            DefaultInstanceWarmup: Number(properties['DefaultInstanceWarmup']),\n          }),\n          ...(properties['LifecycleHookSpecificationList'] !== undefined && {\n            LifecycleHookSpecificationList: properties['LifecycleHookSpecificationList'] as never,\n          }),\n          ...(properties['TrafficSources'] !== undefined && {\n            TrafficSources: properties['TrafficSources'] as never,\n          }),\n          ...(properties['AvailabilityZoneDistribution'] !== undefined && {\n            AvailabilityZoneDistribution: properties['AvailabilityZoneDistribution'] as never,\n          }),\n          ...(properties['AvailabilityZoneImpairmentPolicy'] !== undefined && {\n            AvailabilityZoneImpairmentPolicy: properties[\n              'AvailabilityZoneImpairmentPolicy'\n            ] as never,\n          }),\n          ...(properties['SkipZonalShiftValidation'] !== undefined && {\n            SkipZonalShiftValidation: properties['SkipZonalShiftValidation'] as boolean,\n          }),\n          ...(properties['CapacityReservationSpecification'] !== undefined && {\n            CapacityReservationSpecification: properties[\n              'CapacityReservationSpecification'\n            ] as never,\n          }),\n          ...(properties['InstanceMaintenancePolicy'] !== undefined && {\n            InstanceMaintenancePolicy: properties['InstanceMaintenancePolicy'] as never,\n          }),\n          ...(properties['DeletionProtection'] !== undefined && {\n            DeletionProtection: properties['DeletionProtection'] as never,\n          }),\n          ...(tags.length > 0 && { Tags: tags }),\n        })\n      );\n\n      this.logger.debug(`Successfully created AutoScalingGroup ${logicalId}: ${groupName}`);\n\n      const arn = await this.fetchArn(groupName);\n      const attributes: Record<string, unknown> = {};\n      if (arn) attributes['Arn'] = arn;\n      if (launchTemplate?.LaunchTemplateId) {\n        attributes['LaunchTemplateID'] = launchTemplate.LaunchTemplateId;\n      }\n      return { physicalId: groupName, attributes };\n    } catch (error) {\n      const cause = error instanceof Error ? error : undefined;\n      throw new ProvisioningError(\n        `Failed to create AutoScalingGroup ${logicalId}: ${error instanceof Error ? error.message : String(error)}`,\n        resourceType,\n        logicalId,\n        groupName,\n        cause\n      );\n    }\n  }\n\n  async update(\n    logicalId: string,\n    physicalId: string,\n    resourceType: string,\n    properties: Record<string, unknown>,\n    previousProperties: Record<string, unknown>\n  ): Promise<ResourceUpdateResult> {\n    if (resourceType !== 'AWS::AutoScaling::AutoScalingGroup') {\n      throw new ProvisioningError(\n        `Unsupported resource type: ${resourceType}`,\n        resourceType,\n        logicalId,\n        physicalId\n      );\n    }\n    this.logger.debug(`Updating AutoScalingGroup ${logicalId}: ${physicalId}`);\n\n    // Reject diffs on fields AWS does not support modifying via\n    // UpdateAutoScalingGroup. The replacement-detection layer typically\n    // catches AutoScalingGroupName changes earlier; this is defense-in-\n    // depth + the only place to surface the equivalent error for\n    // sub-resource fields the caller may reasonably expect to round-trip.\n    const stringEq = (a: unknown, b: unknown): boolean => JSON.stringify(a) === JSON.stringify(b);\n    if (!stringEq(properties['AutoScalingGroupName'], previousProperties['AutoScalingGroupName'])) {\n      throw new ResourceUpdateNotSupportedError(\n        resourceType,\n        logicalId,\n        'AutoScalingGroupName is immutable on AWS — UpdateAutoScalingGroup does not accept a new name; the name is fixed at creation. Use cdkd deploy --replace to replace the group.'\n      );\n    }\n    try {\n      // Sub-shape diffs are applied via separate per-shape SDK calls\n      // BEFORE the main UpdateAutoScalingGroup. AWS does not expose these\n      // fields on UpdateAutoScalingGroup, so each one rides its own\n      // dedicated API. Each per-shape helper is a no-op when the\n      // before/after JSON is identical.\n      await this.applyTagsDiff(physicalId, properties['Tags'], previousProperties['Tags']);\n      await this.applyLoadBalancerNamesDiff(\n        physicalId,\n        properties['LoadBalancerNames'],\n        previousProperties['LoadBalancerNames']\n      );\n      await this.applyTargetGroupArnsDiff(\n        physicalId,\n        properties['TargetGroupARNs'],\n        previousProperties['TargetGroupARNs']\n      );\n      await this.applyMetricsCollectionDiff(\n        physicalId,\n        properties['MetricsCollection'],\n        previousProperties['MetricsCollection']\n      );\n      await this.applyLifecycleHooksDiff(\n        physicalId,\n        properties['LifecycleHookSpecificationList'],\n        previousProperties['LifecycleHookSpecificationList']\n      );\n      await this.applyTrafficSourcesDiff(\n        physicalId,\n        properties['TrafficSources'],\n        previousProperties['TrafficSources']\n      );\n      await this.applyNotificationConfigurationsDiff(\n        physicalId,\n        properties['NotificationConfigurations'],\n        previousProperties['NotificationConfigurations']\n      );\n\n      const launchTemplate = this.buildLaunchTemplate(properties);\n      const vpcZoneIdentifier = this.joinVpcZoneIdentifier(properties['VPCZoneIdentifier']);\n\n      await this.getClient().send(\n        new UpdateAutoScalingGroupCommand({\n          AutoScalingGroupName: physicalId,\n          ...(properties['MinSize'] != null && { MinSize: Number(properties['MinSize']) }),\n          ...(properties['MaxSize'] != null && { MaxSize: Number(properties['MaxSize']) }),\n          ...(properties['DesiredCapacity'] != null && {\n            DesiredCapacity: Number(properties['DesiredCapacity']),\n          }),\n          ...(launchTemplate && { LaunchTemplate: launchTemplate }),\n          ...(properties['MixedInstancesPolicy'] !== undefined && {\n            MixedInstancesPolicy: properties['MixedInstancesPolicy'] as never,\n          }),\n          ...(vpcZoneIdentifier !== undefined && { VPCZoneIdentifier: vpcZoneIdentifier }),\n          ...(properties['AvailabilityZones'] !== undefined && {\n            AvailabilityZones: properties['AvailabilityZones'] as string[],\n          }),\n          ...(properties['HealthCheckType'] !== undefined && {\n            HealthCheckType: properties['HealthCheckType'] as string,\n          }),\n          ...(properties['HealthCheckGracePeriod'] != null && {\n            HealthCheckGracePeriod: Number(properties['HealthCheckGracePeriod']),\n          }),\n          ...(properties['Cooldown'] != null && {\n            DefaultCooldown: Number(properties['Cooldown']),\n          }),\n          ...(properties['DefaultCooldown'] != null && {\n            DefaultCooldown: Number(properties['DefaultCooldown']),\n          }),\n          ...(properties['TerminationPolicies'] !== undefined && {\n            TerminationPolicies: properties['TerminationPolicies'] as string[],\n          }),\n          ...(properties['NewInstancesProtectedFromScaleIn'] !== undefined && {\n            NewInstancesProtectedFromScaleIn: properties[\n              'NewInstancesProtectedFromScaleIn'\n            ] as boolean,\n          }),\n          ...(properties['CapacityRebalance'] !== undefined && {\n            CapacityRebalance: properties['CapacityRebalance'] as boolean,\n          }),\n          ...(properties['ServiceLinkedRoleARN'] !== undefined && {\n            ServiceLinkedRoleARN: properties['ServiceLinkedRoleARN'] as string,\n          }),\n          ...(properties['MaxInstanceLifetime'] != null && {\n            MaxInstanceLifetime: Number(properties['MaxInstanceLifetime']),\n          }),\n          ...(properties['Context'] !== undefined && {\n            Context: properties['Context'] as string,\n          }),\n          ...(properties['DesiredCapacityType'] !== undefined && {\n            DesiredCapacityType: properties['DesiredCapacityType'] as string,\n          }),\n          ...(properties['DefaultInstanceWarmup'] != null && {\n            DefaultInstanceWarmup: Number(properties['DefaultInstanceWarmup']),\n          }),\n          ...(properties['AvailabilityZoneDistribution'] !== undefined && {\n            AvailabilityZoneDistribution: properties['AvailabilityZoneDistribution'] as never,\n          }),\n          ...(properties['AvailabilityZoneImpairmentPolicy'] !== undefined && {\n            AvailabilityZoneImpairmentPolicy: properties[\n              'AvailabilityZoneImpairmentPolicy'\n            ] as never,\n          }),\n          ...(properties['SkipZonalShiftValidation'] !== undefined && {\n            SkipZonalShiftValidation: properties['SkipZonalShiftValidation'] as boolean,\n          }),\n          ...(properties['CapacityReservationSpecification'] !== undefined && {\n            CapacityReservationSpecification: properties[\n              'CapacityReservationSpecification'\n            ] as never,\n          }),\n          ...(properties['InstanceMaintenancePolicy'] !== undefined && {\n            InstanceMaintenancePolicy: properties['InstanceMaintenancePolicy'] as never,\n          }),\n          ...(properties['DeletionProtection'] !== undefined && {\n            DeletionProtection: properties['DeletionProtection'] as never,\n          }),\n        })\n      );\n\n      this.logger.debug(`Successfully updated AutoScalingGroup ${logicalId}`);\n\n      const arn = await this.fetchArn(physicalId);\n      const attributes: Record<string, unknown> = {};\n      if (arn) attributes['Arn'] = arn;\n      if (launchTemplate?.LaunchTemplateId) {\n        attributes['LaunchTemplateID'] = launchTemplate.LaunchTemplateId;\n      }\n      return { physicalId, wasReplaced: false, attributes };\n    } catch (error) {\n      if (error instanceof ResourceUpdateNotSupportedError) throw error;\n      const cause = error instanceof Error ? error : undefined;\n      throw new ProvisioningError(\n        `Failed to update AutoScalingGroup ${logicalId}: ${error instanceof Error ? error.message : String(error)}`,\n        resourceType,\n        logicalId,\n        physicalId,\n        cause\n      );\n    }\n  }\n\n  async delete(\n    logicalId: string,\n    physicalId: string,\n    resourceType: string,\n    _properties?: Record<string, unknown>,\n    context?: DeleteContext\n  ): Promise<void> {\n    this.logger.debug(`Deleting AutoScalingGroup ${logicalId}: ${physicalId}`);\n\n    // `--remove-protection`: clear DeletionProtection in-place before the\n    // actual delete, then set ForceDelete=true so AWS terminates running\n    // instances as part of the delete (matches the \"I know what I'm doing\"\n    // intent of the flag). Without `removeProtection`, ForceDelete stays\n    // false and AWS rejects the delete on a group with running instances\n    // or DeletionProtection set, surfacing as ProvisioningError. The\n    // flip-off is idempotent — AWS accepts UpdateAutoScalingGroup\n    // (DeletionProtection: 'none') even when protection is already\n    // disabled, so we always issue it under the flag.\n    if (context?.removeProtection === true) {\n      try {\n        await this.getClient().send(\n          new UpdateAutoScalingGroupCommand({\n            AutoScalingGroupName: physicalId,\n            DeletionProtection: 'none' as never,\n          })\n        );\n        this.logger.debug(\n          `Disabled DeletionProtection on AutoScalingGroup ${logicalId} before delete`\n        );\n      } catch (flipError) {\n        // Non-fatal: log and proceed. The actual delete below surfaces\n        // any real error.\n        this.logger.debug(\n          `Could not disable DeletionProtection on ${physicalId}: ${flipError instanceof Error ? flipError.message : String(flipError)}`\n        );\n      }\n\n      // ASG-level DeletionProtection + ForceDelete only governs the GROUP and\n      // its scale-in protection. If the group's launch template sets\n      // EC2-level termination protection (DisableApiTermination), the\n      // ForceDelete below still cannot terminate those instances and they\n      // ORPHAN after the group is gone (issue #796). Enumerate the group's\n      // current instances and flip each one's DisableApiTermination off first,\n      // mirroring the EC2Provider `--remove-protection` path.\n      await this.removeInstanceTerminationProtection(physicalId, logicalId);\n    }\n\n    try {\n      await this.getClient().send(\n        new DeleteAutoScalingGroupCommand({\n          AutoScalingGroupName: physicalId,\n          ForceDelete: context?.removeProtection === true,\n        })\n      );\n\n      this.logger.debug(`Successfully initiated deletion of AutoScalingGroup ${logicalId}`);\n\n      // Wait for the group to be fully gone. ASG delete is asynchronous —\n      // returning immediately would leave dependent EC2 / IAM / SG\n      // resources blocked on the lingering group.\n      await this.waitForGroupDeleted(physicalId);\n    } catch (error) {\n      if (this.isNotFoundError(error)) {\n        const clientRegion = await this.getClient().config.region();\n        assertRegionMatch(\n          clientRegion,\n          context?.expectedRegion,\n          resourceType,\n          logicalId,\n          physicalId\n        );\n        this.logger.debug(`AutoScalingGroup ${physicalId} does not exist, skipping deletion`);\n        return;\n      }\n      const cause = error instanceof Error ? error : undefined;\n      throw new ProvisioningError(\n        `Failed to delete AutoScalingGroup ${logicalId}: ${error instanceof Error ? error.message : String(error)}`,\n        resourceType,\n        logicalId,\n        physicalId,\n        cause\n      );\n    }\n  }\n\n  async getAttribute(\n    physicalId: string,\n    _resourceType: string,\n    attributeName: string\n  ): Promise<unknown> {\n    const group = await this.describeGroup(physicalId);\n    if (!group) {\n      throw new ProvisioningError(\n        `AutoScalingGroup ${physicalId} not found while resolving attribute ${attributeName}`,\n        'AWS::AutoScaling::AutoScalingGroup',\n        physicalId,\n        physicalId\n      );\n    }\n    switch (attributeName) {\n      case 'Arn':\n      case 'AutoScalingGroupARN':\n        return group.AutoScalingGroupARN ?? '';\n      case 'LaunchConfigurationName':\n        return group.LaunchConfigurationName ?? '';\n      case 'LaunchTemplateID':\n      case 'LaunchTemplateId':\n        return group.LaunchTemplate?.LaunchTemplateId ?? '';\n      default:\n        return '';\n    }\n  }\n\n  /**\n   * Read the AWS-current AutoScalingGroup configuration in CFn-property shape.\n   *\n   * Surfaces the user-controllable subset of `DescribeAutoScalingGroups`,\n   * with always-emit placeholders on user-controllable top-level keys per\n   * the cdkd PR #145 always-emit convention so that v3 `observedProperties`\n   * baseline catches console-side ADDs to fields a clean deploy did not\n   * template (e.g. a console-set `DeletionProtection: 'prevent-force-deletion'`\n   * on a group originally created without it).\n   *\n   * Sub-shapes (LifecycleHookSpecificationList / TrafficSources /\n   * NotificationConfigurations) are surfaced via three parallel Describe\n   * calls fired alongside the primary `DescribeAutoScalingGroups`. Each is\n   * best-effort: a per-call failure (e.g. permissions gap on\n   * `autoscaling:DescribeLifecycleHooks`) is logged at debug and the\n   * matching key falls back to its always-emit `[]` placeholder rather\n   * than aborting the whole drift read.\n   *\n   * `MetricsCollection` is reverse-mapped from `EnabledMetrics` (already\n   * present on the primary `DescribeAutoScalingGroups` response, so no\n   * extra call is needed).\n   *\n   * Returns `undefined` when the group is gone.\n   */\n  async readCurrentState(\n    physicalId: string,\n    _logicalId: string,\n    _resourceType: string\n  ): Promise<Record<string, unknown> | undefined> {\n    // Fire the four reads in parallel. Sub-shape failures are best-effort\n    // so a single permission gap does not break the whole drift read.\n    const groupPromise = (async () => {\n      try {\n        return await this.describeGroup(physicalId);\n      } catch (err) {\n        if (this.isNotFoundError(err)) return undefined;\n        throw err;\n      }\n    })();\n\n    const lifecycleHooksPromise = this.getClient()\n      .send(new DescribeLifecycleHooksCommand({ AutoScalingGroupName: physicalId }))\n      .then((r) => r.LifecycleHooks ?? [])\n      .catch((err) => {\n        this.logger.debug(\n          `DescribeLifecycleHooks(${physicalId}) failed: ${err instanceof Error ? err.message : String(err)}`\n        );\n        return [];\n      });\n\n    const trafficSourcesPromise = this.getClient()\n      .send(new DescribeTrafficSourcesCommand({ AutoScalingGroupName: physicalId }))\n      .then((r) => r.TrafficSources ?? [])\n      .catch((err) => {\n        this.logger.debug(\n          `DescribeTrafficSources(${physicalId}) failed: ${err instanceof Error ? err.message : String(err)}`\n        );\n        return [];\n      });\n\n    const notificationsPromise = this.getClient()\n      .send(new DescribeNotificationConfigurationsCommand({ AutoScalingGroupNames: [physicalId] }))\n      .then((r) => r.NotificationConfigurations ?? [])\n      .catch((err) => {\n        this.logger.debug(\n          `DescribeNotificationConfigurations(${physicalId}) failed: ${err instanceof Error ? err.message : String(err)}`\n        );\n        return [];\n      });\n\n    const [group, lifecycleHooks, trafficSources, notifications] = await Promise.all([\n      groupPromise,\n      lifecycleHooksPromise,\n      trafficSourcesPromise,\n      notificationsPromise,\n    ]);\n\n    if (!group) return undefined;\n\n    const result: Record<string, unknown> = {};\n    if (group.AutoScalingGroupName !== undefined) {\n      result['AutoScalingGroupName'] = group.AutoScalingGroupName;\n    }\n    if (group.LaunchTemplate) {\n      const lt: Record<string, unknown> = {};\n      if (group.LaunchTemplate.LaunchTemplateId !== undefined) {\n        lt['LaunchTemplateId'] = group.LaunchTemplate.LaunchTemplateId;\n      }\n      if (group.LaunchTemplate.LaunchTemplateName !== undefined) {\n        lt['LaunchTemplateName'] = group.LaunchTemplate.LaunchTemplateName;\n      }\n      if (group.LaunchTemplate.Version !== undefined) {\n        lt['Version'] = group.LaunchTemplate.Version;\n      }\n      result['LaunchTemplate'] = lt;\n    }\n    result['MinSize'] = group.MinSize ?? 0;\n    result['MaxSize'] = group.MaxSize ?? 0;\n    if (group.DesiredCapacity !== undefined) result['DesiredCapacity'] = group.DesiredCapacity;\n    // VPCZoneIdentifier round-trips back to the CFn list shape so the\n    // comparator sees the same array the template emitted, not the\n    // SDK-side comma-joined string.\n    if (group.VPCZoneIdentifier !== undefined && group.VPCZoneIdentifier !== '') {\n      result['VPCZoneIdentifier'] = group.VPCZoneIdentifier.split(',').map((s) => s.trim());\n    } else {\n      result['VPCZoneIdentifier'] = [];\n    }\n    result['AvailabilityZones'] = group.AvailabilityZones ?? [];\n    if (group.HealthCheckType !== undefined) result['HealthCheckType'] = group.HealthCheckType;\n    if (group.HealthCheckGracePeriod !== undefined) {\n      result['HealthCheckGracePeriod'] = group.HealthCheckGracePeriod;\n    }\n    if (group.DefaultCooldown !== undefined) {\n      // CFn template field is `Cooldown`; SDK / Describe response calls it\n      // `DefaultCooldown`. Surface under the CFn name so the comparator\n      // matches state directly.\n      result['Cooldown'] = group.DefaultCooldown;\n    }\n    result['NewInstancesProtectedFromScaleIn'] = group.NewInstancesProtectedFromScaleIn ?? false;\n    result['TerminationPolicies'] = group.TerminationPolicies ?? [];\n    result['CapacityRebalance'] = group.CapacityRebalance ?? false;\n    if (group.ServiceLinkedRoleARN !== undefined) {\n      result['ServiceLinkedRoleARN'] = group.ServiceLinkedRoleARN;\n    }\n    if (group.MaxInstanceLifetime !== undefined) {\n      result['MaxInstanceLifetime'] = group.MaxInstanceLifetime;\n    }\n    result['LoadBalancerNames'] = group.LoadBalancerNames ?? [];\n    result['TargetGroupARNs'] = group.TargetGroupARNs ?? [];\n    if (group.Context !== undefined) result['Context'] = group.Context;\n    if (group.DesiredCapacityType !== undefined) {\n      result['DesiredCapacityType'] = group.DesiredCapacityType;\n    }\n    if (group.DefaultInstanceWarmup !== undefined) {\n      result['DefaultInstanceWarmup'] = group.DefaultInstanceWarmup;\n    }\n    if (group.MixedInstancesPolicy !== undefined) {\n      result['MixedInstancesPolicy'] = group.MixedInstancesPolicy;\n    }\n    if (group.AvailabilityZoneDistribution !== undefined) {\n      result['AvailabilityZoneDistribution'] = group.AvailabilityZoneDistribution;\n    }\n    if (group.AvailabilityZoneImpairmentPolicy !== undefined) {\n      result['AvailabilityZoneImpairmentPolicy'] = group.AvailabilityZoneImpairmentPolicy;\n    }\n    if (group.CapacityReservationSpecification !== undefined) {\n      result['CapacityReservationSpecification'] = group.CapacityReservationSpecification;\n    }\n    if (group.InstanceMaintenancePolicy !== undefined) {\n      result['InstanceMaintenancePolicy'] = group.InstanceMaintenancePolicy;\n    }\n    if (group.DeletionProtection !== undefined) {\n      result['DeletionProtection'] = group.DeletionProtection;\n    } else {\n      // AWS reports `undefined` when the group has the AWS-side default\n      // (`'none'`). Always-emit placeholder so the v3 `observedProperties`\n      // baseline catches a console-side flip to `prevent-force-deletion`\n      // / `prevent-all-deletion`.\n      result['DeletionProtection'] = 'none';\n    }\n    // Tags: filter aws:* prefix and normalize to CFn shape sorted by Key.\n    // ASG returns Tags inside the AutoScalingGroup record (already populated\n    // by DescribeAutoScalingGroups — no separate ListTagsForResource call).\n    result['Tags'] = normalizeAwsTagsToCfn(group.Tags);\n\n    // Sub-shapes — reverse-map AWS responses to CFn template shape and\n    // always-emit `[]` placeholders so the v3 `observedProperties` baseline\n    // catches console-side ADDs to a previously-empty list.\n    result['MetricsCollection'] = mapEnabledMetricsToCfn(group.EnabledMetrics);\n    result['LifecycleHookSpecificationList'] = mapLifecycleHooksToCfn(lifecycleHooks);\n    // Strip ALL elbv2 / elb entries from TrafficSources — the canonical\n    // attachment state for these types lives in TargetGroupARNs /\n    // LoadBalancerNames. TrafficSources is meant for attachment types\n    // without a dedicated CFn property (VPC Lattice, VPC Endpoint\n    // Service). Filtering unconditionally avoids two failure modes\n    // surfaced by tests/integration/drift-revert-vpc (PR #547):\n    // double-attach/detach on revert, and stale TS entries from AWS's\n    // eventual-consistency window after Attach/Detach surfacing as\n    // false drift on the next read.\n    const dedupedTrafficSources = trafficSources.filter((t) => {\n      if (t.Identifier === undefined) return false;\n      if (t.Type === 'elbv2' || t.Type === 'elb') return false;\n      return true;\n    });\n    result['TrafficSources'] = mapTrafficSourcesToCfn(dedupedTrafficSources);\n    result['NotificationConfigurations'] = mapNotificationsToCfn(notifications);\n\n    return result;\n  }\n\n  // ─── Helpers ──────────────────────────────────────────────────────\n\n  private buildLaunchTemplate(\n    properties: Record<string, unknown>\n  ): LaunchTemplateSpecification | undefined {\n    const lt = properties['LaunchTemplate'] as\n      | { LaunchTemplateId?: string; LaunchTemplateName?: string; Version?: string | number }\n      | undefined;\n    if (!lt) return undefined;\n    const out: LaunchTemplateSpecification = {};\n    // AWS UpdateAutoScalingGroup rejects when both LaunchTemplateId and\n    // LaunchTemplateName are present in the same LaunchTemplate object\n    // (\"Valid requests must contain either launchTemplateId or\n    // LaunchTemplateName\"). DescribeAutoScalingGroups returns both, so\n    // a straight readCurrentState → update round-trip on `drift --revert`\n    // would hit this. Prefer the ID (canonical, doesn't change on LT\n    // rename) and only fall back to Name when ID is absent.\n    if (lt.LaunchTemplateId !== undefined) {\n      out.LaunchTemplateId = lt.LaunchTemplateId;\n      if (lt.LaunchTemplateName !== undefined) {\n        // User templated BOTH — AWS would reject the resulting Create /\n        // Update otherwise; we silently prefer the ID. Surface the\n        // choice in --verbose so a user wondering why their Name didn't\n        // take effect has an auditable signal.\n        this.logger.debug(\n          `buildLaunchTemplate: both LaunchTemplateId (${lt.LaunchTemplateId}) and LaunchTemplateName (${lt.LaunchTemplateName}) templated; dropping Name (#551)`\n        );\n      }\n    } else if (lt.LaunchTemplateName !== undefined) {\n      out.LaunchTemplateName = lt.LaunchTemplateName;\n    }\n    if (lt.Version !== undefined) {\n      // Defensive coercion: AWS SDK `LaunchTemplateSpecification.Version`\n      // is `string` and AWS rejects non-string forms with `Invalid\n      // launch template version: either '$Default', '$Latest', or a\n      // numeric version are allowed.`. cdkd's `IntrinsicResolver`\n      // resolves `Fn::GetAtt <LaunchTemplate>.LatestVersionNumber`\n      // through a per-type lookup; intermediate cases could surface\n      // numeric values, so we coerce defensively.\n      out.Version = String(lt.Version);\n    }\n    if (out.LaunchTemplateId === undefined && out.LaunchTemplateName === undefined) {\n      return undefined;\n    }\n    return out;\n  }\n\n  /**\n   * CFn `Tags` is `[{Key, Value, PropagateAtLaunch?}]`. AWS expects each\n   * tag to also carry `ResourceId: <groupName>` and `ResourceType:\n   * 'auto-scaling-group'`. We tack those on at create time so the SDK\n   * input shape matches without forcing the user to template them.\n   */\n  private buildTags(groupName: string, properties: Record<string, unknown>): ASGTag[] {\n    const raw = properties['Tags'] as\n      | Array<{ Key?: string; Value?: string; PropagateAtLaunch?: boolean }>\n      | undefined;\n    if (!raw) return [];\n    return raw\n      .filter((t) => t.Key !== undefined)\n      .map((t) => ({\n        ResourceId: groupName,\n        ResourceType: 'auto-scaling-group',\n        Key: t.Key as string,\n        Value: t.Value ?? '',\n        PropagateAtLaunch: t.PropagateAtLaunch ?? false,\n      }));\n  }\n\n  /**\n   * CFn `VPCZoneIdentifier` is a list of subnet ids; the AWS SDK input\n   * field is a comma-joined string.\n   */\n  private joinVpcZoneIdentifier(value: unknown): string | undefined {\n    if (value === undefined || value === null) return undefined;\n    if (Array.isArray(value)) {\n      const cleaned = value.map((v) => String(v).trim()).filter((v) => v.length > 0);\n      if (cleaned.length === 0) return undefined;\n      return cleaned.join(',');\n    }\n    if (typeof value === 'string') return value;\n    return undefined;\n  }\n\n  private async describeGroup(groupName: string) {\n    const response = await this.getClient().send(\n      new DescribeAutoScalingGroupsCommand({\n        AutoScalingGroupNames: [groupName],\n      })\n    );\n    return response.AutoScalingGroups?.[0];\n  }\n\n  /**\n   * Flip EC2-level termination protection (`DisableApiTermination`) off on\n   * every instance currently launched by the group, so the subsequent\n   * `DeleteAutoScalingGroup(ForceDelete: true)` can actually terminate them\n   * instead of orphaning the protected instances (issue #796). Best-effort:\n   * a Describe failure or a per-instance flip failure is logged at debug and\n   * does not block the delete (the modify WRITE lags the terminate READ, so\n   * the shared helper swallows propagation errors the same way the EC2 path\n   * does — the orphan, if any, surfaces as a leftover instance the caller\n   * can clean up rather than a hard delete failure).\n   */\n  private async removeInstanceTerminationProtection(\n    groupName: string,\n    logicalId: string\n  ): Promise<void> {\n    let instanceIds: string[];\n    try {\n      const group = await this.describeGroup(groupName);\n      instanceIds = (group?.Instances ?? [])\n        .map((i) => i.InstanceId)\n        .filter((id): id is string => typeof id === 'string' && id.length > 0);\n    } catch (describeError) {\n      this.logger.debug(\n        `Could not enumerate instances of AutoScalingGroup ${logicalId} for termination-protection removal: ${describeError instanceof Error ? describeError.message : String(describeError)}`\n      );\n      return;\n    }\n\n    if (instanceIds.length === 0) return;\n\n    this.logger.debug(\n      `Disabling EC2 termination protection on ${instanceIds.length} instance(s) of AutoScalingGroup ${logicalId} before force delete`\n    );\n    for (const instanceId of instanceIds) {\n      await disableInstanceApiTermination(this.getEc2Client(), instanceId, this.logger);\n    }\n  }\n\n  private async fetchArn(groupName: string): Promise<string | undefined> {\n    try {\n      const group = await this.describeGroup(groupName);\n      return group?.AutoScalingGroupARN;\n    } catch (err) {\n      this.logger.debug(\n        `DescribeAutoScalingGroups(${groupName}) failed: ${err instanceof Error ? err.message : String(err)}`\n      );\n      return undefined;\n    }\n  }\n\n  private isNotFoundError(error: unknown): boolean {\n    if (!(error instanceof Error)) return false;\n    const name = (error as { name?: string }).name ?? '';\n    const message = error.message.toLowerCase();\n    // ASG returns ValidationError with message \"AutoScalingGroup name not\n    // found\" rather than a typed NotFound exception; cover both shapes.\n    return (\n      name === 'ValidationError' &&\n      (message.includes('autoscalinggroup name not found') ||\n        message.includes('not found') ||\n        message.includes('does not exist'))\n    );\n  }\n\n  private async waitForGroupDeleted(groupName: string, maxWaitMs = 900_000): Promise<void> {\n    const startTime = Date.now();\n    let delay = 5_000;\n\n    while (Date.now() - startTime < maxWaitMs) {\n      try {\n        const group = await this.describeGroup(groupName);\n        if (!group) return;\n      } catch (error) {\n        if (this.isNotFoundError(error)) return;\n        throw error;\n      }\n\n      await this.sleep(delay);\n      delay = Math.min(delay * 2, 30_000);\n    }\n\n    throw new Error(\n      `Timed out waiting for AutoScalingGroup ${groupName} to be deleted (15 minute cap)`\n    );\n  }\n\n  private sleep(ms: number): Promise<void> {\n    return new Promise((resolve) => setTimeout(resolve, ms));\n  }\n\n  // ─── Sub-shape diff helpers ───────────────────────────────────────\n  // Each helper is a no-op when before/after JSON is identical (the cheap\n  // structural-equality check happens first; we only build SDK calls for\n  // genuine diffs). Identity is positional within the array per CFn shape:\n  // `MetricsCollection` keyed on `Granularity`, `LifecycleHookSpecification\n  // List` on `LifecycleHookName`, `TrafficSources` on `Identifier`,\n  // `NotificationConfigurations` on `TopicARN`.\n\n  /**\n   * Diff and apply changes to the ASG's `Tags` property via the\n   * `CreateOrUpdateTags` / `DeleteTags` AWS APIs (#475). CFn Tags shape is\n   * `[{Key, Value, PropagateAtLaunch}]`; AWS Tag input adds `ResourceId`\n   * (= the ASG name) and `ResourceType: 'auto-scaling-group'`.\n   *\n   * Diff semantics:\n   *   - Removed keys → `DeleteTags`.\n   *   - Added keys → `CreateOrUpdateTags`.\n   *   - Modified value or `PropagateAtLaunch` flag → `CreateOrUpdateTags`\n   *     (the AWS API upserts by `(ResourceId, ResourceType, Key)` tuple, so\n   *     a single upsert call replaces the old value).\n   *\n   * No-op when before/after JSON is identical.\n   */\n  private async applyTagsDiff(physicalId: string, next: unknown, prev: unknown): Promise<void> {\n    if (JSON.stringify(next ?? []) === JSON.stringify(prev ?? [])) return;\n    type CfnTag = { Key?: string; Value?: string; PropagateAtLaunch?: boolean };\n    const nextEntries = (Array.isArray(next) ? next : []) as CfnTag[];\n    const prevEntries = (Array.isArray(prev) ? prev : []) as CfnTag[];\n    const nextByKey = new Map<string, CfnTag>();\n    for (const t of nextEntries) {\n      if (t.Key) nextByKey.set(t.Key, t);\n    }\n    const prevByKey = new Map<string, CfnTag>();\n    for (const t of prevEntries) {\n      if (t.Key) prevByKey.set(t.Key, t);\n    }\n    // Delete keys removed from `next`.\n    const toDelete: CfnTag[] = [];\n    for (const [key, tag] of prevByKey) {\n      if (!nextByKey.has(key)) toDelete.push(tag);\n    }\n    if (toDelete.length > 0) {\n      await this.getClient().send(\n        new DeleteTagsCommand({\n          // DeleteTags is keyed only by (ResourceId, ResourceType, Key).\n          // Intentionally omit `Value` / `PropagateAtLaunch`: AWS treats\n          // those as additional match constraints, so passing the\n          // cdkd-recorded values would silently no-op when a console-side\n          // edit drifted them between deploys. cdkd owns the tag, so\n          // delete-by-key matches the \"we own the resource\" intent.\n          Tags: toDelete.map((t) => ({\n            ResourceId: physicalId,\n            ResourceType: 'auto-scaling-group',\n            Key: t.Key as string,\n          })),\n        })\n      );\n    }\n    // Upsert keys whose value / propagate-flag differs.\n    const toUpsert: CfnTag[] = [];\n    for (const [key, tag] of nextByKey) {\n      const before = prevByKey.get(key);\n      if (JSON.stringify(before) === JSON.stringify(tag)) continue;\n      toUpsert.push(tag);\n    }\n    if (toUpsert.length > 0) {\n      await this.getClient().send(\n        new CreateOrUpdateTagsCommand({\n          Tags: toUpsert.map((t) => ({\n            ResourceId: physicalId,\n            ResourceType: 'auto-scaling-group',\n            Key: t.Key as string,\n            ...(t.Value !== undefined && { Value: t.Value }),\n            ...(t.PropagateAtLaunch !== undefined && {\n              PropagateAtLaunch: t.PropagateAtLaunch,\n            }),\n          })),\n        })\n      );\n    }\n  }\n\n  /**\n   * Diff `LoadBalancerNames` (Classic Load Balancers) and issue\n   * `AttachLoadBalancers` / `DetachLoadBalancers` for the delta (#476).\n   * Names are opaque strings; AWS allows N attached LBs per ASG so this\n   * helper batches every add into one Attach call and every remove into\n   * one Detach call. No-op when before/after JSON is identical.\n   */\n  private async applyLoadBalancerNamesDiff(\n    physicalId: string,\n    next: unknown,\n    prev: unknown\n  ): Promise<void> {\n    if (JSON.stringify(next ?? []) === JSON.stringify(prev ?? [])) return;\n    const nextNames = (Array.isArray(next) ? next : []).filter(\n      (n): n is string => typeof n === 'string'\n    );\n    const prevNames = (Array.isArray(prev) ? prev : []).filter(\n      (n): n is string => typeof n === 'string'\n    );\n    const nextSet = new Set(nextNames);\n    const prevSet = new Set(prevNames);\n    const toAttach = nextNames.filter((n) => !prevSet.has(n));\n    const toDetach = prevNames.filter((n) => !nextSet.has(n));\n    if (toDetach.length > 0) {\n      await this.getClient().send(\n        new DetachLoadBalancersCommand({\n          AutoScalingGroupName: physicalId,\n          LoadBalancerNames: toDetach,\n        })\n      );\n    }\n    if (toAttach.length > 0) {\n      await this.getClient().send(\n        new AttachLoadBalancersCommand({\n          AutoScalingGroupName: physicalId,\n          LoadBalancerNames: toAttach,\n        })\n      );\n    }\n  }\n\n  /**\n   * Diff `TargetGroupARNs` (ALB / NLB target groups) and issue\n   * `AttachLoadBalancerTargetGroups` /\n   * `DetachLoadBalancerTargetGroups` for the delta (#476). Target-group\n   * ARNs are opaque strings; same per-call batching pattern as\n   * `applyLoadBalancerNamesDiff`. No-op when before/after JSON is\n   * identical.\n   */\n  private async applyTargetGroupArnsDiff(\n    physicalId: string,\n    next: unknown,\n    prev: unknown\n  ): Promise<void> {\n    if (JSON.stringify(next ?? []) === JSON.stringify(prev ?? [])) return;\n    const nextArns = (Array.isArray(next) ? next : []).filter(\n      (a): a is string => typeof a === 'string'\n    );\n    const prevArns = (Array.isArray(prev) ? prev : []).filter(\n      (a): a is string => typeof a === 'string'\n    );\n    const nextSet = new Set(nextArns);\n    const prevSet = new Set(prevArns);\n    const toAttach = nextArns.filter((a) => !prevSet.has(a));\n    const toDetach = prevArns.filter((a) => !nextSet.has(a));\n    if (toDetach.length > 0) {\n      await this.getClient().send(\n        new DetachLoadBalancerTargetGroupsCommand({\n          AutoScalingGroupName: physicalId,\n          TargetGroupARNs: toDetach,\n        })\n      );\n    }\n    if (toAttach.length > 0) {\n      await this.getClient().send(\n        new AttachLoadBalancerTargetGroupsCommand({\n          AutoScalingGroupName: physicalId,\n          TargetGroupARNs: toAttach,\n        })\n      );\n    }\n    // AttachLoadBalancerTargetGroups is async — the target group starts in\n    // 'Adding' state and only becomes visible in\n    // DescribeAutoScalingGroups.TargetGroupARNs after AWS internal\n    // propagation. A subsequent `cdkd drift` read right after the call\n    // returns can otherwise see a stale snapshot and report drift\n    // against the AWS-side empty list (surfaced by tests/integration/\n    // drift-revert-vpc's step-6 \"drift again\" check). Bounded poll to\n    // confirm the post-state matches the intent before returning so the\n    // caller's next read is consistent.\n    if (toDetach.length > 0 || toAttach.length > 0) {\n      await this.waitForTargetGroupArnsConvergence(physicalId, new Set(nextArns));\n    }\n  }\n\n  private static readonly TG_CONVERGENCE_TIMEOUT_MS = 30_000;\n  private static readonly TG_CONVERGENCE_POLL_INTERVAL_MS = 1_000;\n\n  private async waitForTargetGroupArnsConvergence(\n    physicalId: string,\n    expected: Set<string>\n  ): Promise<void> {\n    const deadlineMs = Date.now() + ASGProvider.TG_CONVERGENCE_TIMEOUT_MS;\n    let lastObserved: Set<string> = new Set();\n    while (Date.now() < deadlineMs) {\n      let resp: DescribeAutoScalingGroupsCommandOutput | undefined;\n      try {\n        resp = await this.getClient().send(\n          new DescribeAutoScalingGroupsCommand({ AutoScalingGroupNames: [physicalId] })\n        );\n      } catch (err) {\n        // Transient throttle / network blip during the 30s window must\n        // not throw out of applyTargetGroupArnsDiff — the Attach/Detach\n        // already succeeded, and propagating would fail the whole\n        // update path. Log + retry; the loop will fall through to the\n        // timeout-warn path if the API is genuinely down.\n        this.logger.debug(\n          `applyTargetGroupArnsDiff convergence poll: transient error, retrying — ${\n            err instanceof Error ? err.message : String(err)\n          }`\n        );\n        await new Promise((r) => setTimeout(r, ASGProvider.TG_CONVERGENCE_POLL_INTERVAL_MS));\n        continue;\n      }\n      lastObserved = new Set(resp.AutoScalingGroups?.[0]?.TargetGroupARNs ?? []);\n      if (lastObserved.size === expected.size && [...expected].every((a) => lastObserved.has(a))) {\n        return;\n      }\n      await new Promise((r) => setTimeout(r, ASGProvider.TG_CONVERGENCE_POLL_INTERVAL_MS));\n    }\n    // Timeout — surface as a warning rather than failure so the caller\n    // still sees the SDK-side success; drift can re-report if the\n    // propagation is still stuck. Includes observed vs expected so\n    // post-mortem doesn't need a re-deploy.\n    // Sort both sides before stringify for visual symmetry — expected\n    // comes from the caller's insertion order, observed from AWS-side\n    // order; eyeballing the diff in logs is easier when both are sorted.\n    const expectedSorted = [...expected].sort();\n    const observedSorted = [...lastObserved].sort();\n    this.logger.warn(\n      `applyTargetGroupArnsDiff: TG set did not converge within ${ASGProvider.TG_CONVERGENCE_TIMEOUT_MS}ms for ASG ${physicalId}. expected=${JSON.stringify(expectedSorted)} observed=${JSON.stringify(observedSorted)}`\n    );\n  }\n\n  private async applyMetricsCollectionDiff(\n    physicalId: string,\n    next: unknown,\n    prev: unknown\n  ): Promise<void> {\n    if (JSON.stringify(next ?? []) === JSON.stringify(prev ?? [])) return;\n    const nextEntries = (Array.isArray(next) ? next : []) as Array<{\n      Granularity?: string;\n      Metrics?: string[];\n    }>;\n    const prevEntries = (Array.isArray(prev) ? prev : []) as Array<{\n      Granularity?: string;\n      Metrics?: string[];\n    }>;\n    const prevByGranularity = new Map<string, string[] | undefined>();\n    for (const e of prevEntries) {\n      if (e.Granularity) prevByGranularity.set(e.Granularity, e.Metrics);\n    }\n    const nextByGranularity = new Map<string, string[] | undefined>();\n    for (const e of nextEntries) {\n      if (e.Granularity) nextByGranularity.set(e.Granularity, e.Metrics);\n    }\n    // Disable removed granularities first, then issue Enable for the\n    // intended state of every Granularity in `next`. AWS treats Enable as\n    // additive within a Granularity, so a remove-then-add pattern works\n    // even when the Metrics list shrinks.\n    for (const [granularity, metrics] of prevByGranularity) {\n      if (!nextByGranularity.has(granularity)) {\n        await this.getClient().send(\n          new DisableMetricsCollectionCommand({\n            AutoScalingGroupName: physicalId,\n            ...(metrics && metrics.length > 0 ? { Metrics: metrics } : {}),\n          })\n        );\n      }\n    }\n    for (const [granularity, metrics] of nextByGranularity) {\n      const before = prevByGranularity.get(granularity);\n      if (JSON.stringify(before ?? null) === JSON.stringify(metrics ?? null)) continue;\n      // If the Metrics list shrunk, disable the removed metrics first\n      // (AWS Enable is additive). When `metrics` is undefined or empty,\n      // AWS treats that as \"all metrics\" — disable any prior subset\n      // before re-enabling the full set.\n      if (before && before.length > 0) {\n        const removed = metrics ? before.filter((m) => !metrics.includes(m)) : [];\n        if (removed.length > 0) {\n          await this.getClient().send(\n            new DisableMetricsCollectionCommand({\n              AutoScalingGroupName: physicalId,\n              Metrics: removed,\n            })\n          );\n        }\n      }\n      await this.getClient().send(\n        new EnableMetricsCollectionCommand({\n          AutoScalingGroupName: physicalId,\n          Granularity: granularity,\n          ...(metrics && metrics.length > 0 ? { Metrics: metrics } : {}),\n        })\n      );\n    }\n  }\n\n  private async applyLifecycleHooksDiff(\n    physicalId: string,\n    next: unknown,\n    prev: unknown\n  ): Promise<void> {\n    if (JSON.stringify(next ?? []) === JSON.stringify(prev ?? [])) return;\n    const nextEntries = (Array.isArray(next) ? next : []) as Array<{\n      LifecycleHookName?: string;\n      LifecycleTransition?: string;\n      RoleARN?: string;\n      NotificationTargetARN?: string;\n      NotificationMetadata?: string;\n      HeartbeatTimeout?: number;\n      DefaultResult?: string;\n    }>;\n    const prevEntries = (Array.isArray(prev) ? prev : []) as Array<{\n      LifecycleHookName?: string;\n    }>;\n    const nextNames = new Set(\n      nextEntries.map((e) => e.LifecycleHookName).filter((n): n is string => !!n)\n    );\n    // Delete hooks no longer in `next`.\n    for (const e of prevEntries) {\n      if (e.LifecycleHookName && !nextNames.has(e.LifecycleHookName)) {\n        await this.getClient().send(\n          new DeleteLifecycleHookCommand({\n            AutoScalingGroupName: physicalId,\n            LifecycleHookName: e.LifecycleHookName,\n          })\n        );\n      }\n    }\n    // PutLifecycleHook is upsert — issue for every hook in `next` whose\n    // shape differs from the matching `prev` entry.\n    const prevByName = new Map<string, unknown>();\n    for (const e of prevEntries) {\n      if (e.LifecycleHookName) prevByName.set(e.LifecycleHookName, e);\n    }\n    for (const e of nextEntries) {\n      if (!e.LifecycleHookName) continue;\n      const prevHook = prevByName.get(e.LifecycleHookName);\n      if (JSON.stringify(prevHook) === JSON.stringify(e)) continue;\n      await this.getClient().send(\n        new PutLifecycleHookCommand({\n          AutoScalingGroupName: physicalId,\n          LifecycleHookName: e.LifecycleHookName,\n          ...(e.LifecycleTransition !== undefined && {\n            LifecycleTransition: e.LifecycleTransition,\n          }),\n          ...(e.RoleARN !== undefined && { RoleARN: e.RoleARN }),\n          ...(e.NotificationTargetARN !== undefined && {\n            NotificationTargetARN: e.NotificationTargetARN,\n          }),\n          ...(e.NotificationMetadata !== undefined && {\n            NotificationMetadata: e.NotificationMetadata,\n          }),\n          ...(e.HeartbeatTimeout !== undefined && { HeartbeatTimeout: e.HeartbeatTimeout }),\n          ...(e.DefaultResult !== undefined && { DefaultResult: e.DefaultResult }),\n        })\n      );\n    }\n  }\n\n  private async applyTrafficSourcesDiff(\n    physicalId: string,\n    next: unknown,\n    prev: unknown\n  ): Promise<void> {\n    if (JSON.stringify(next ?? []) === JSON.stringify(prev ?? [])) return;\n    const nextEntries = (Array.isArray(next) ? next : []) as Array<{\n      Identifier?: string;\n      Type?: string;\n    }>;\n    const prevEntries = (Array.isArray(prev) ? prev : []) as Array<{\n      Identifier?: string;\n      Type?: string;\n    }>;\n    const nextIds = new Set(nextEntries.map((e) => e.Identifier).filter((i): i is string => !!i));\n    const prevIds = new Set(prevEntries.map((e) => e.Identifier).filter((i): i is string => !!i));\n    const toDetach = prevEntries.filter((e) => e.Identifier && !nextIds.has(e.Identifier));\n    const toAttach = nextEntries.filter((e) => e.Identifier && !prevIds.has(e.Identifier));\n    if (toDetach.length > 0) {\n      await this.getClient().send(\n        new DetachTrafficSourcesCommand({\n          AutoScalingGroupName: physicalId,\n          TrafficSources: toDetach.map((e) => ({\n            Identifier: e.Identifier as string,\n            ...(e.Type !== undefined && { Type: e.Type }),\n          })),\n        })\n      );\n    }\n    if (toAttach.length > 0) {\n      await this.getClient().send(\n        new AttachTrafficSourcesCommand({\n          AutoScalingGroupName: physicalId,\n          TrafficSources: toAttach.map((e) => ({\n            Identifier: e.Identifier as string,\n            ...(e.Type !== undefined && { Type: e.Type }),\n          })),\n        })\n      );\n    }\n  }\n\n  private async applyNotificationConfigurationsDiff(\n    physicalId: string,\n    next: unknown,\n    prev: unknown\n  ): Promise<void> {\n    if (JSON.stringify(next ?? []) === JSON.stringify(prev ?? [])) return;\n    // CFn `NotificationConfigurations` is an array of `{TopicARN,\n    // NotificationTypes[]}`; AWS `PutNotificationConfiguration` is keyed\n    // by TopicARN — one call per topic. AWS reports each notification\n    // type as a separate response entry (one row per `(asgName, topicArn,\n    // notificationType)` triple), but cdkd state stores the CFn shape, so\n    // both sides of the diff share the per-topic key.\n    const nextEntries = (Array.isArray(next) ? next : []) as Array<{\n      TopicARN?: string;\n      NotificationTypes?: string[];\n    }>;\n    const prevEntries = (Array.isArray(prev) ? prev : []) as Array<{\n      TopicARN?: string;\n      NotificationTypes?: string[];\n    }>;\n    const nextByTopic = new Map<string, string[] | undefined>();\n    for (const e of nextEntries) {\n      if (e.TopicARN) nextByTopic.set(e.TopicARN, e.NotificationTypes);\n    }\n    const prevByTopic = new Map<string, string[] | undefined>();\n    for (const e of prevEntries) {\n      if (e.TopicARN) prevByTopic.set(e.TopicARN, e.NotificationTypes);\n    }\n    for (const topic of prevByTopic.keys()) {\n      if (!nextByTopic.has(topic)) {\n        await this.getClient().send(\n          new DeleteNotificationConfigurationCommand({\n            AutoScalingGroupName: physicalId,\n            TopicARN: topic,\n          })\n        );\n      }\n    }\n    for (const [topic, types] of nextByTopic) {\n      const before = prevByTopic.get(topic);\n      if (JSON.stringify(before ?? null) === JSON.stringify(types ?? null)) continue;\n      await this.getClient().send(\n        new PutNotificationConfigurationCommand({\n          AutoScalingGroupName: physicalId,\n          TopicARN: topic,\n          NotificationTypes: types ?? [],\n        })\n      );\n    }\n  }\n}\n\n// ─── File-level reverse-mappers (CFn template shape) ────────────────\n\n/**\n * Reverse-map AWS `EnabledMetrics: [{Metric, Granularity}]` (flat list,\n * one row per enabled metric) back to the CFn array shape\n * `[{Granularity, Metrics?[]}]`. Metrics with the same Granularity are\n * grouped together; the resulting Metrics list is sorted alphabetically\n * for stable positional compare in the drift comparator.\n *\n * Always returns a placeholder `[]` per the cdkd PR #145 always-emit\n * convention so a console-side EnableMetricsCollection on a previously-\n * empty group surfaces as drift on the v3 `observedProperties` baseline.\n */\nfunction mapEnabledMetricsToCfn(\n  enabledMetrics:\n    | Array<{ Metric?: string | undefined; Granularity?: string | undefined }>\n    | undefined\n): Array<{ Granularity: string; Metrics?: string[] }> {\n  if (!enabledMetrics || enabledMetrics.length === 0) return [];\n  const byGranularity = new Map<string, Set<string>>();\n  for (const e of enabledMetrics) {\n    const g = e.Granularity;\n    if (!g) continue;\n    let set = byGranularity.get(g);\n    if (!set) {\n      set = new Set();\n      byGranularity.set(g, set);\n    }\n    if (e.Metric) set.add(e.Metric);\n  }\n  const result: Array<{ Granularity: string; Metrics?: string[] }> = [];\n  // Sort by Granularity for stable positional compare.\n  for (const granularity of Array.from(byGranularity.keys()).sort()) {\n    const metrics = Array.from(byGranularity.get(granularity) ?? []).sort();\n    result.push(\n      metrics.length > 0\n        ? { Granularity: granularity, Metrics: metrics }\n        : { Granularity: granularity }\n    );\n  }\n  return result;\n}\n\n/**\n * Reverse-map AWS `DescribeLifecycleHooks` response to the CFn\n * `LifecycleHookSpecificationList` shape. Each hook is surfaced under the\n * exact CFn property name. AWS-side fields cdkd state never carried\n * (`AutoScalingGroupName` — duplicated on every hook by AWS,\n * `GlobalTimeout` — AWS-derived) are filtered out. Sorted by\n * LifecycleHookName for stable positional compare.\n */\nfunction mapLifecycleHooksToCfn(\n  hooks: Array<{\n    LifecycleHookName?: string | undefined;\n    LifecycleTransition?: string | undefined;\n    NotificationTargetARN?: string | undefined;\n    RoleARN?: string | undefined;\n    NotificationMetadata?: string | undefined;\n    HeartbeatTimeout?: number | undefined;\n    DefaultResult?: string | undefined;\n  }>\n): Array<Record<string, unknown>> {\n  if (!hooks || hooks.length === 0) return [];\n  const result: Array<Record<string, unknown>> = [];\n  for (const h of hooks) {\n    if (!h.LifecycleHookName) continue;\n    const entry: Record<string, unknown> = { LifecycleHookName: h.LifecycleHookName };\n    if (h.LifecycleTransition !== undefined) entry['LifecycleTransition'] = h.LifecycleTransition;\n    if (h.RoleARN !== undefined) entry['RoleARN'] = h.RoleARN;\n    if (h.NotificationTargetARN !== undefined) {\n      entry['NotificationTargetARN'] = h.NotificationTargetARN;\n    }\n    if (h.NotificationMetadata !== undefined) {\n      entry['NotificationMetadata'] = h.NotificationMetadata;\n    }\n    if (h.HeartbeatTimeout !== undefined) entry['HeartbeatTimeout'] = h.HeartbeatTimeout;\n    if (h.DefaultResult !== undefined) entry['DefaultResult'] = h.DefaultResult;\n    result.push(entry);\n  }\n  result.sort((a, b) =>\n    String(a['LifecycleHookName']).localeCompare(String(b['LifecycleHookName']))\n  );\n  return result;\n}\n\n/**\n * Reverse-map AWS `DescribeTrafficSources` response to the CFn\n * `TrafficSources` shape `[{Identifier, Type?}]`. AWS-side runtime fields\n * (`State`, the deprecated `TrafficSource` alias) are filtered out.\n * Sorted by Identifier for stable positional compare.\n */\nfunction mapTrafficSourcesToCfn(\n  trafficSources: Array<{ Identifier?: string | undefined; Type?: string | undefined }>\n): Array<Record<string, unknown>> {\n  if (!trafficSources || trafficSources.length === 0) return [];\n  const result: Array<Record<string, unknown>> = [];\n  for (const t of trafficSources) {\n    if (!t.Identifier) continue;\n    const entry: Record<string, unknown> = { Identifier: t.Identifier };\n    if (t.Type !== undefined) entry['Type'] = t.Type;\n    result.push(entry);\n  }\n  result.sort((a, b) => String(a['Identifier']).localeCompare(String(b['Identifier'])));\n  return result;\n}\n\n/**\n * Reverse-map AWS `DescribeNotificationConfigurations` (a flat list, one\n * row per `(topicArn, notificationType)`) into the CFn shape\n * `[{TopicARN, NotificationTypes[]}]`. NotificationTypes are grouped per\n * TopicARN and sorted alphabetically for stable positional compare.\n */\nfunction mapNotificationsToCfn(\n  configurations: Array<{ TopicARN?: string | undefined; NotificationType?: string | undefined }>\n): Array<Record<string, unknown>> {\n  if (!configurations || configurations.length === 0) return [];\n  const byTopic = new Map<string, Set<string>>();\n  for (const c of configurations) {\n    if (!c.TopicARN) continue;\n    let set = byTopic.get(c.TopicARN);\n    if (!set) {\n      set = new Set();\n      byTopic.set(c.TopicARN, set);\n    }\n    if (c.NotificationType) set.add(c.NotificationType);\n  }\n  const result: Array<Record<string, unknown>> = [];\n  for (const topic of Array.from(byTopic.keys()).sort()) {\n    const types = Array.from(byTopic.get(topic) ?? []).sort();\n    result.push({ TopicARN: topic, NotificationTypes: types });\n  }\n  return result;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA0FA,IAAa,cAAb,MAAa,YAAwC;CACnD,AAAQ;CACR,AAAQ;CACR,AAAiB,iBAAiB,QAAQ,IAAI;CAC9C,AAAQ,SAAS,WAAW,CAAC,MAAM,cAAc;CAEjD,oBAAoB,IAAI,IAAiC,CACvD,CACE,sCACA,IAAI,IAAI;EACN;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CAAC,CACH,CACF,CAAC;CAEF,oBAAoB,IAAI,IAAyC,CAC/D,CACE,sCACA,IAAI,IAAoB,CACtB,CACE,2BACA,4EACD,EACD,CACE,6BACA,yFACD,CACF,CAAC,CACH,CACF,CAAC;CAEF,AAAQ,YAA+B;AACrC,MAAI,CAAC,KAAK,UACR,MAAK,YAAY,IAAI,kBACnB,KAAK,iBAAiB,EAAE,QAAQ,KAAK,gBAAgB,GAAG,EAAE,CAC3D;AAEH,SAAO,KAAK;;CAGd,AAAQ,eAA0B;AAChC,MAAI,CAAC,KAAK,UACR,MAAK,YAAY,IAAI,UAAU,KAAK,iBAAiB,EAAE,QAAQ,KAAK,gBAAgB,GAAG,EAAE,CAAC;AAE5F,SAAO,KAAK;;CAKd,MAAM,OACJ,WACA,cACA,YAC+B;AAC/B,MAAI,iBAAiB,qCACnB,OAAM,IAAI,kBACR,8BAA8B,gBAC9B,cACA,UACD;EAGH,MAAM,YACH,WAAW,2BACZ,qBAAqB,WAAW,EAAE,WAAW,KAAK,CAAC;AAErD,OAAK,OAAO,MAAM,6BAA6B,UAAU,IAAI,YAAY;AAEzE,MAAI;GACF,MAAM,iBAAiB,KAAK,oBAAoB,WAAW;GAC3D,MAAM,OAAO,KAAK,UAAU,WAAW,WAAW;GAClD,MAAM,oBAAoB,KAAK,sBAAsB,WAAW,qBAAqB;GAErF,MAAM,UAAU,WAAW,cAAc,OAAO,OAAO,WAAW,WAAW,GAAG;GAChF,MAAM,UAAU,WAAW,cAAc,OAAO,OAAO,WAAW,WAAW,GAAG;AAEhF,SAAM,KAAK,WAAW,CAAC,KACrB,IAAI,8BAA8B;IAChC,sBAAsB;IACtB,SAAS;IACT,SAAS;IACT,GAAI,WAAW,sBAAsB,QAAQ,EAC3C,iBAAiB,OAAO,WAAW,mBAAmB,EACvD;IACD,GAAI,kBAAkB,EAAE,gBAAgB,gBAAgB;IACxD,GAAI,WAAW,4BAA4B,UAAa,EACtD,sBAAsB,WAAW,yBAClC;IACD,GAAI,sBAAsB,UAAa,EAAE,mBAAmB,mBAAmB;IAC/E,GAAI,WAAW,yBAAyB,UAAa,EACnD,mBAAmB,WAAW,sBAC/B;IACD,GAAI,WAAW,uBAAuB,UAAa,EACjD,iBAAiB,WAAW,oBAC7B;IACD,GAAI,WAAW,6BAA6B,QAAQ,EAClD,wBAAwB,OAAO,WAAW,0BAA0B,EACrE;IACD,GAAI,WAAW,eAAe,QAAQ,EACpC,iBAAiB,OAAO,WAAW,YAAY,EAChD;IACD,GAAI,WAAW,sBAAsB,QAAQ,EAC3C,iBAAiB,OAAO,WAAW,mBAAmB,EACvD;IACD,GAAI,WAAW,2BAA2B,UAAa,EACrD,qBAAqB,WAAW,wBACjC;IACD,GAAI,WAAW,wCAAwC,UAAa,EAClE,kCAAkC,WAChC,qCAEH;IACD,GAAI,WAAW,yBAAyB,UAAa,EACnD,mBAAmB,WAAW,sBAC/B;IACD,GAAI,WAAW,4BAA4B,UAAa,EACtD,sBAAsB,WAAW,yBAClC;IACD,GAAI,WAAW,0BAA0B,QAAQ,EAC/C,qBAAqB,OAAO,WAAW,uBAAuB,EAC/D;IACD,GAAI,WAAW,yBAAyB,UAAa,EACnD,mBAAmB,WAAW,sBAC/B;IACD,GAAI,WAAW,uBAAuB,UAAa,EACjD,iBAAiB,WAAW,oBAC7B;IACD,GAAI,WAAW,eAAe,UAAa,EACzC,SAAS,WAAW,YACrB;IACD,GAAI,WAAW,2BAA2B,UAAa,EACrD,qBAAqB,WAAW,wBACjC;IACD,GAAI,WAAW,4BAA4B,QAAQ,EACjD,uBAAuB,OAAO,WAAW,yBAAyB,EACnE;IACD,GAAI,WAAW,sCAAsC,UAAa,EAChE,gCAAgC,WAAW,mCAC5C;IACD,GAAI,WAAW,sBAAsB,UAAa,EAChD,gBAAgB,WAAW,mBAC5B;IACD,GAAI,WAAW,oCAAoC,UAAa,EAC9D,8BAA8B,WAAW,iCAC1C;IACD,GAAI,WAAW,wCAAwC,UAAa,EAClE,kCAAkC,WAChC,qCAEH;IACD,GAAI,WAAW,gCAAgC,UAAa,EAC1D,0BAA0B,WAAW,6BACtC;IACD,GAAI,WAAW,wCAAwC,UAAa,EAClE,kCAAkC,WAChC,qCAEH;IACD,GAAI,WAAW,iCAAiC,UAAa,EAC3D,2BAA2B,WAAW,8BACvC;IACD,GAAI,WAAW,0BAA0B,UAAa,EACpD,oBAAoB,WAAW,uBAChC;IACD,GAAI,KAAK,SAAS,KAAK,EAAE,MAAM,MAAM;IACtC,CAAC,CACH;AAED,QAAK,OAAO,MAAM,yCAAyC,UAAU,IAAI,YAAY;GAErF,MAAM,MAAM,MAAM,KAAK,SAAS,UAAU;GAC1C,MAAM,aAAsC,EAAE;AAC9C,OAAI,IAAK,YAAW,SAAS;AAC7B,OAAI,gBAAgB,iBAClB,YAAW,sBAAsB,eAAe;AAElD,UAAO;IAAE,YAAY;IAAW;IAAY;WACrC,OAAO;GACd,MAAM,QAAQ,iBAAiB,QAAQ,QAAQ;AAC/C,SAAM,IAAI,kBACR,qCAAqC,UAAU,IAAI,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,IACzG,cACA,WACA,WACA,MACD;;;CAIL,MAAM,OACJ,WACA,YACA,cACA,YACA,oBAC+B;AAC/B,MAAI,iBAAiB,qCACnB,OAAM,IAAI,kBACR,8BAA8B,gBAC9B,cACA,WACA,WACD;AAEH,OAAK,OAAO,MAAM,6BAA6B,UAAU,IAAI,aAAa;EAO1E,MAAM,YAAY,GAAY,MAAwB,KAAK,UAAU,EAAE,KAAK,KAAK,UAAU,EAAE;AAC7F,MAAI,CAAC,SAAS,WAAW,yBAAyB,mBAAmB,wBAAwB,CAC3F,OAAM,IAAI,gCACR,cACA,WACA,+KACD;AAEH,MAAI;AAMF,SAAM,KAAK,cAAc,YAAY,WAAW,SAAS,mBAAmB,QAAQ;AACpF,SAAM,KAAK,2BACT,YACA,WAAW,sBACX,mBAAmB,qBACpB;AACD,SAAM,KAAK,yBACT,YACA,WAAW,oBACX,mBAAmB,mBACpB;AACD,SAAM,KAAK,2BACT,YACA,WAAW,sBACX,mBAAmB,qBACpB;AACD,SAAM,KAAK,wBACT,YACA,WAAW,mCACX,mBAAmB,kCACpB;AACD,SAAM,KAAK,wBACT,YACA,WAAW,mBACX,mBAAmB,kBACpB;AACD,SAAM,KAAK,oCACT,YACA,WAAW,+BACX,mBAAmB,8BACpB;GAED,MAAM,iBAAiB,KAAK,oBAAoB,WAAW;GAC3D,MAAM,oBAAoB,KAAK,sBAAsB,WAAW,qBAAqB;AAErF,SAAM,KAAK,WAAW,CAAC,KACrB,IAAI,8BAA8B;IAChC,sBAAsB;IACtB,GAAI,WAAW,cAAc,QAAQ,EAAE,SAAS,OAAO,WAAW,WAAW,EAAE;IAC/E,GAAI,WAAW,cAAc,QAAQ,EAAE,SAAS,OAAO,WAAW,WAAW,EAAE;IAC/E,GAAI,WAAW,sBAAsB,QAAQ,EAC3C,iBAAiB,OAAO,WAAW,mBAAmB,EACvD;IACD,GAAI,kBAAkB,EAAE,gBAAgB,gBAAgB;IACxD,GAAI,WAAW,4BAA4B,UAAa,EACtD,sBAAsB,WAAW,yBAClC;IACD,GAAI,sBAAsB,UAAa,EAAE,mBAAmB,mBAAmB;IAC/E,GAAI,WAAW,yBAAyB,UAAa,EACnD,mBAAmB,WAAW,sBAC/B;IACD,GAAI,WAAW,uBAAuB,UAAa,EACjD,iBAAiB,WAAW,oBAC7B;IACD,GAAI,WAAW,6BAA6B,QAAQ,EAClD,wBAAwB,OAAO,WAAW,0BAA0B,EACrE;IACD,GAAI,WAAW,eAAe,QAAQ,EACpC,iBAAiB,OAAO,WAAW,YAAY,EAChD;IACD,GAAI,WAAW,sBAAsB,QAAQ,EAC3C,iBAAiB,OAAO,WAAW,mBAAmB,EACvD;IACD,GAAI,WAAW,2BAA2B,UAAa,EACrD,qBAAqB,WAAW,wBACjC;IACD,GAAI,WAAW,wCAAwC,UAAa,EAClE,kCAAkC,WAChC,qCAEH;IACD,GAAI,WAAW,yBAAyB,UAAa,EACnD,mBAAmB,WAAW,sBAC/B;IACD,GAAI,WAAW,4BAA4B,UAAa,EACtD,sBAAsB,WAAW,yBAClC;IACD,GAAI,WAAW,0BAA0B,QAAQ,EAC/C,qBAAqB,OAAO,WAAW,uBAAuB,EAC/D;IACD,GAAI,WAAW,eAAe,UAAa,EACzC,SAAS,WAAW,YACrB;IACD,GAAI,WAAW,2BAA2B,UAAa,EACrD,qBAAqB,WAAW,wBACjC;IACD,GAAI,WAAW,4BAA4B,QAAQ,EACjD,uBAAuB,OAAO,WAAW,yBAAyB,EACnE;IACD,GAAI,WAAW,oCAAoC,UAAa,EAC9D,8BAA8B,WAAW,iCAC1C;IACD,GAAI,WAAW,wCAAwC,UAAa,EAClE,kCAAkC,WAChC,qCAEH;IACD,GAAI,WAAW,gCAAgC,UAAa,EAC1D,0BAA0B,WAAW,6BACtC;IACD,GAAI,WAAW,wCAAwC,UAAa,EAClE,kCAAkC,WAChC,qCAEH;IACD,GAAI,WAAW,iCAAiC,UAAa,EAC3D,2BAA2B,WAAW,8BACvC;IACD,GAAI,WAAW,0BAA0B,UAAa,EACpD,oBAAoB,WAAW,uBAChC;IACF,CAAC,CACH;AAED,QAAK,OAAO,MAAM,yCAAyC,YAAY;GAEvE,MAAM,MAAM,MAAM,KAAK,SAAS,WAAW;GAC3C,MAAM,aAAsC,EAAE;AAC9C,OAAI,IAAK,YAAW,SAAS;AAC7B,OAAI,gBAAgB,iBAClB,YAAW,sBAAsB,eAAe;AAElD,UAAO;IAAE;IAAY,aAAa;IAAO;IAAY;WAC9C,OAAO;AACd,OAAI,iBAAiB,gCAAiC,OAAM;GAC5D,MAAM,QAAQ,iBAAiB,QAAQ,QAAQ;AAC/C,SAAM,IAAI,kBACR,qCAAqC,UAAU,IAAI,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,IACzG,cACA,WACA,YACA,MACD;;;CAIL,MAAM,OACJ,WACA,YACA,cACA,aACA,SACe;AACf,OAAK,OAAO,MAAM,6BAA6B,UAAU,IAAI,aAAa;AAW1E,MAAI,SAAS,qBAAqB,MAAM;AACtC,OAAI;AACF,UAAM,KAAK,WAAW,CAAC,KACrB,IAAI,8BAA8B;KAChC,sBAAsB;KACtB,oBAAoB;KACrB,CAAC,CACH;AACD,SAAK,OAAO,MACV,mDAAmD,UAAU,gBAC9D;YACM,WAAW;AAGlB,SAAK,OAAO,MACV,2CAA2C,WAAW,IAAI,qBAAqB,QAAQ,UAAU,UAAU,OAAO,UAAU,GAC7H;;AAUH,SAAM,KAAK,oCAAoC,YAAY,UAAU;;AAGvE,MAAI;AACF,SAAM,KAAK,WAAW,CAAC,KACrB,IAAI,8BAA8B;IAChC,sBAAsB;IACtB,aAAa,SAAS,qBAAqB;IAC5C,CAAC,CACH;AAED,QAAK,OAAO,MAAM,uDAAuD,YAAY;AAKrF,SAAM,KAAK,oBAAoB,WAAW;WACnC,OAAO;AACd,OAAI,KAAK,gBAAgB,MAAM,EAAE;AAE/B,sBACE,MAFyB,KAAK,WAAW,CAAC,OAAO,QAAQ,EAGzD,SAAS,gBACT,cACA,WACA,WACD;AACD,SAAK,OAAO,MAAM,oBAAoB,WAAW,oCAAoC;AACrF;;GAEF,MAAM,QAAQ,iBAAiB,QAAQ,QAAQ;AAC/C,SAAM,IAAI,kBACR,qCAAqC,UAAU,IAAI,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,IACzG,cACA,WACA,YACA,MACD;;;CAIL,MAAM,aACJ,YACA,eACA,eACkB;EAClB,MAAM,QAAQ,MAAM,KAAK,cAAc,WAAW;AAClD,MAAI,CAAC,MACH,OAAM,IAAI,kBACR,oBAAoB,WAAW,uCAAuC,iBACtE,sCACA,YACA,WACD;AAEH,UAAQ,eAAR;GACE,KAAK;GACL,KAAK,sBACH,QAAO,MAAM,uBAAuB;GACtC,KAAK,0BACH,QAAO,MAAM,2BAA2B;GAC1C,KAAK;GACL,KAAK,mBACH,QAAO,MAAM,gBAAgB,oBAAoB;GACnD,QACE,QAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4Bb,MAAM,iBACJ,YACA,YACA,eAC8C;EAG9C,MAAM,gBAAgB,YAAY;AAChC,OAAI;AACF,WAAO,MAAM,KAAK,cAAc,WAAW;YACpC,KAAK;AACZ,QAAI,KAAK,gBAAgB,IAAI,CAAE,QAAO;AACtC,UAAM;;MAEN;EAEJ,MAAM,wBAAwB,KAAK,WAAW,CAC3C,KAAK,IAAI,8BAA8B,EAAE,sBAAsB,YAAY,CAAC,CAAC,CAC7E,MAAM,MAAM,EAAE,kBAAkB,EAAE,CAAC,CACnC,OAAO,QAAQ;AACd,QAAK,OAAO,MACV,0BAA0B,WAAW,YAAY,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,GAClG;AACD,UAAO,EAAE;IACT;EAEJ,MAAM,wBAAwB,KAAK,WAAW,CAC3C,KAAK,IAAI,8BAA8B,EAAE,sBAAsB,YAAY,CAAC,CAAC,CAC7E,MAAM,MAAM,EAAE,kBAAkB,EAAE,CAAC,CACnC,OAAO,QAAQ;AACd,QAAK,OAAO,MACV,0BAA0B,WAAW,YAAY,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,GAClG;AACD,UAAO,EAAE;IACT;EAEJ,MAAM,uBAAuB,KAAK,WAAW,CAC1C,KAAK,IAAI,0CAA0C,EAAE,uBAAuB,CAAC,WAAW,EAAE,CAAC,CAAC,CAC5F,MAAM,MAAM,EAAE,8BAA8B,EAAE,CAAC,CAC/C,OAAO,QAAQ;AACd,QAAK,OAAO,MACV,sCAAsC,WAAW,YAAY,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,GAC9G;AACD,UAAO,EAAE;IACT;EAEJ,MAAM,CAAC,OAAO,gBAAgB,gBAAgB,iBAAiB,MAAM,QAAQ,IAAI;GAC/E;GACA;GACA;GACA;GACD,CAAC;AAEF,MAAI,CAAC,MAAO,QAAO;EAEnB,MAAM,SAAkC,EAAE;AAC1C,MAAI,MAAM,yBAAyB,OACjC,QAAO,0BAA0B,MAAM;AAEzC,MAAI,MAAM,gBAAgB;GACxB,MAAM,KAA8B,EAAE;AACtC,OAAI,MAAM,eAAe,qBAAqB,OAC5C,IAAG,sBAAsB,MAAM,eAAe;AAEhD,OAAI,MAAM,eAAe,uBAAuB,OAC9C,IAAG,wBAAwB,MAAM,eAAe;AAElD,OAAI,MAAM,eAAe,YAAY,OACnC,IAAG,aAAa,MAAM,eAAe;AAEvC,UAAO,oBAAoB;;AAE7B,SAAO,aAAa,MAAM,WAAW;AACrC,SAAO,aAAa,MAAM,WAAW;AACrC,MAAI,MAAM,oBAAoB,OAAW,QAAO,qBAAqB,MAAM;AAI3E,MAAI,MAAM,sBAAsB,UAAa,MAAM,sBAAsB,GACvE,QAAO,uBAAuB,MAAM,kBAAkB,MAAM,IAAI,CAAC,KAAK,MAAM,EAAE,MAAM,CAAC;MAErF,QAAO,uBAAuB,EAAE;AAElC,SAAO,uBAAuB,MAAM,qBAAqB,EAAE;AAC3D,MAAI,MAAM,oBAAoB,OAAW,QAAO,qBAAqB,MAAM;AAC3E,MAAI,MAAM,2BAA2B,OACnC,QAAO,4BAA4B,MAAM;AAE3C,MAAI,MAAM,oBAAoB,OAI5B,QAAO,cAAc,MAAM;AAE7B,SAAO,sCAAsC,MAAM,oCAAoC;AACvF,SAAO,yBAAyB,MAAM,uBAAuB,EAAE;AAC/D,SAAO,uBAAuB,MAAM,qBAAqB;AACzD,MAAI,MAAM,yBAAyB,OACjC,QAAO,0BAA0B,MAAM;AAEzC,MAAI,MAAM,wBAAwB,OAChC,QAAO,yBAAyB,MAAM;AAExC,SAAO,uBAAuB,MAAM,qBAAqB,EAAE;AAC3D,SAAO,qBAAqB,MAAM,mBAAmB,EAAE;AACvD,MAAI,MAAM,YAAY,OAAW,QAAO,aAAa,MAAM;AAC3D,MAAI,MAAM,wBAAwB,OAChC,QAAO,yBAAyB,MAAM;AAExC,MAAI,MAAM,0BAA0B,OAClC,QAAO,2BAA2B,MAAM;AAE1C,MAAI,MAAM,yBAAyB,OACjC,QAAO,0BAA0B,MAAM;AAEzC,MAAI,MAAM,iCAAiC,OACzC,QAAO,kCAAkC,MAAM;AAEjD,MAAI,MAAM,qCAAqC,OAC7C,QAAO,sCAAsC,MAAM;AAErD,MAAI,MAAM,qCAAqC,OAC7C,QAAO,sCAAsC,MAAM;AAErD,MAAI,MAAM,8BAA8B,OACtC,QAAO,+BAA+B,MAAM;AAE9C,MAAI,MAAM,uBAAuB,OAC/B,QAAO,wBAAwB,MAAM;MAMrC,QAAO,wBAAwB;AAKjC,SAAO,UAAU,sBAAsB,MAAM,KAAK;AAKlD,SAAO,uBAAuB,uBAAuB,MAAM,eAAe;AAC1E,SAAO,oCAAoC,uBAAuB,eAAe;AAejF,SAAO,oBAAoB,uBALG,eAAe,QAAQ,MAAM;AACzD,OAAI,EAAE,eAAe,OAAW,QAAO;AACvC,OAAI,EAAE,SAAS,WAAW,EAAE,SAAS,MAAO,QAAO;AACnD,UAAO;IAE8D,CAAC;AACxE,SAAO,gCAAgC,sBAAsB,cAAc;AAE3E,SAAO;;CAKT,AAAQ,oBACN,YACyC;EACzC,MAAM,KAAK,WAAW;AAGtB,MAAI,CAAC,GAAI,QAAO;EAChB,MAAM,MAAmC,EAAE;AAQ3C,MAAI,GAAG,qBAAqB,QAAW;AACrC,OAAI,mBAAmB,GAAG;AAC1B,OAAI,GAAG,uBAAuB,OAK5B,MAAK,OAAO,MACV,+CAA+C,GAAG,iBAAiB,4BAA4B,GAAG,mBAAmB,mCACtH;aAEM,GAAG,uBAAuB,OACnC,KAAI,qBAAqB,GAAG;AAE9B,MAAI,GAAG,YAAY,OAQjB,KAAI,UAAU,OAAO,GAAG,QAAQ;AAElC,MAAI,IAAI,qBAAqB,UAAa,IAAI,uBAAuB,OACnE;AAEF,SAAO;;;;;;;;CAST,AAAQ,UAAU,WAAmB,YAA+C;EAClF,MAAM,MAAM,WAAW;AAGvB,MAAI,CAAC,IAAK,QAAO,EAAE;AACnB,SAAO,IACJ,QAAQ,MAAM,EAAE,QAAQ,OAAU,CAClC,KAAK,OAAO;GACX,YAAY;GACZ,cAAc;GACd,KAAK,EAAE;GACP,OAAO,EAAE,SAAS;GAClB,mBAAmB,EAAE,qBAAqB;GAC3C,EAAE;;;;;;CAOP,AAAQ,sBAAsB,OAAoC;AAChE,MAAI,UAAU,UAAa,UAAU,KAAM,QAAO;AAClD,MAAI,MAAM,QAAQ,MAAM,EAAE;GACxB,MAAM,UAAU,MAAM,KAAK,MAAM,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,QAAQ,MAAM,EAAE,SAAS,EAAE;AAC9E,OAAI,QAAQ,WAAW,EAAG,QAAO;AACjC,UAAO,QAAQ,KAAK,IAAI;;AAE1B,MAAI,OAAO,UAAU,SAAU,QAAO;;CAIxC,MAAc,cAAc,WAAmB;AAM7C,UAAO,MALgB,KAAK,WAAW,CAAC,KACtC,IAAI,iCAAiC,EACnC,uBAAuB,CAAC,UAAU,EACnC,CAAC,CACH,EACe,oBAAoB;;;;;;;;;;;;;CActC,MAAc,oCACZ,WACA,WACe;EACf,IAAI;AACJ,MAAI;AAEF,mBAAe,MADK,KAAK,cAAc,UAAU,GAC3B,aAAa,EAAE,EAClC,KAAK,MAAM,EAAE,WAAW,CACxB,QAAQ,OAAqB,OAAO,OAAO,YAAY,GAAG,SAAS,EAAE;WACjE,eAAe;AACtB,QAAK,OAAO,MACV,qDAAqD,UAAU,uCAAuC,yBAAyB,QAAQ,cAAc,UAAU,OAAO,cAAc,GACrL;AACD;;AAGF,MAAI,YAAY,WAAW,EAAG;AAE9B,OAAK,OAAO,MACV,2CAA2C,YAAY,OAAO,mCAAmC,UAAU,sBAC5G;AACD,OAAK,MAAM,cAAc,YACvB,OAAM,8BAA8B,KAAK,cAAc,EAAE,YAAY,KAAK,OAAO;;CAIrF,MAAc,SAAS,WAAgD;AACrE,MAAI;AAEF,WAAO,MADa,KAAK,cAAc,UAAU,GACnC;WACP,KAAK;AACZ,QAAK,OAAO,MACV,6BAA6B,UAAU,YAAY,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,GACpG;AACD;;;CAIJ,AAAQ,gBAAgB,OAAyB;AAC/C,MAAI,EAAE,iBAAiB,OAAQ,QAAO;EACtC,MAAM,OAAQ,MAA4B,QAAQ;EAClD,MAAM,UAAU,MAAM,QAAQ,aAAa;AAG3C,SACE,SAAS,sBACR,QAAQ,SAAS,kCAAkC,IAClD,QAAQ,SAAS,YAAY,IAC7B,QAAQ,SAAS,iBAAiB;;CAIxC,MAAc,oBAAoB,WAAmB,YAAY,KAAwB;EACvF,MAAM,YAAY,KAAK,KAAK;EAC5B,IAAI,QAAQ;AAEZ,SAAO,KAAK,KAAK,GAAG,YAAY,WAAW;AACzC,OAAI;AAEF,QAAI,CAAC,MADe,KAAK,cAAc,UAAU,CACrC;YACL,OAAO;AACd,QAAI,KAAK,gBAAgB,MAAM,CAAE;AACjC,UAAM;;AAGR,SAAM,KAAK,MAAM,MAAM;AACvB,WAAQ,KAAK,IAAI,QAAQ,GAAG,IAAO;;AAGrC,QAAM,IAAI,MACR,0CAA0C,UAAU,gCACrD;;CAGH,AAAQ,MAAM,IAA2B;AACvC,SAAO,IAAI,SAAS,YAAY,WAAW,SAAS,GAAG,CAAC;;;;;;;;;;;;;;;;;CA0B1D,MAAc,cAAc,YAAoB,MAAe,MAA8B;AAC3F,MAAI,KAAK,UAAU,QAAQ,EAAE,CAAC,KAAK,KAAK,UAAU,QAAQ,EAAE,CAAC,CAAE;EAE/D,MAAM,cAAe,MAAM,QAAQ,KAAK,GAAG,OAAO,EAAE;EACpD,MAAM,cAAe,MAAM,QAAQ,KAAK,GAAG,OAAO,EAAE;EACpD,MAAM,4BAAY,IAAI,KAAqB;AAC3C,OAAK,MAAM,KAAK,YACd,KAAI,EAAE,IAAK,WAAU,IAAI,EAAE,KAAK,EAAE;EAEpC,MAAM,4BAAY,IAAI,KAAqB;AAC3C,OAAK,MAAM,KAAK,YACd,KAAI,EAAE,IAAK,WAAU,IAAI,EAAE,KAAK,EAAE;EAGpC,MAAM,WAAqB,EAAE;AAC7B,OAAK,MAAM,CAAC,KAAK,QAAQ,UACvB,KAAI,CAAC,UAAU,IAAI,IAAI,CAAE,UAAS,KAAK,IAAI;AAE7C,MAAI,SAAS,SAAS,EACpB,OAAM,KAAK,WAAW,CAAC,KACrB,IAAIA,oBAAkB,EAOpB,MAAM,SAAS,KAAK,OAAO;GACzB,YAAY;GACZ,cAAc;GACd,KAAK,EAAE;GACR,EAAE,EACJ,CAAC,CACH;EAGH,MAAM,WAAqB,EAAE;AAC7B,OAAK,MAAM,CAAC,KAAK,QAAQ,WAAW;GAClC,MAAM,SAAS,UAAU,IAAI,IAAI;AACjC,OAAI,KAAK,UAAU,OAAO,KAAK,KAAK,UAAU,IAAI,CAAE;AACpD,YAAS,KAAK,IAAI;;AAEpB,MAAI,SAAS,SAAS,EACpB,OAAM,KAAK,WAAW,CAAC,KACrB,IAAI,0BAA0B,EAC5B,MAAM,SAAS,KAAK,OAAO;GACzB,YAAY;GACZ,cAAc;GACd,KAAK,EAAE;GACP,GAAI,EAAE,UAAU,UAAa,EAAE,OAAO,EAAE,OAAO;GAC/C,GAAI,EAAE,sBAAsB,UAAa,EACvC,mBAAmB,EAAE,mBACtB;GACF,EAAE,EACJ,CAAC,CACH;;;;;;;;;CAWL,MAAc,2BACZ,YACA,MACA,MACe;AACf,MAAI,KAAK,UAAU,QAAQ,EAAE,CAAC,KAAK,KAAK,UAAU,QAAQ,EAAE,CAAC,CAAE;EAC/D,MAAM,aAAa,MAAM,QAAQ,KAAK,GAAG,OAAO,EAAE,EAAE,QACjD,MAAmB,OAAO,MAAM,SAClC;EACD,MAAM,aAAa,MAAM,QAAQ,KAAK,GAAG,OAAO,EAAE,EAAE,QACjD,MAAmB,OAAO,MAAM,SAClC;EACD,MAAM,UAAU,IAAI,IAAI,UAAU;EAClC,MAAM,UAAU,IAAI,IAAI,UAAU;EAClC,MAAM,WAAW,UAAU,QAAQ,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;EACzD,MAAM,WAAW,UAAU,QAAQ,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;AACzD,MAAI,SAAS,SAAS,EACpB,OAAM,KAAK,WAAW,CAAC,KACrB,IAAI,2BAA2B;GAC7B,sBAAsB;GACtB,mBAAmB;GACpB,CAAC,CACH;AAEH,MAAI,SAAS,SAAS,EACpB,OAAM,KAAK,WAAW,CAAC,KACrB,IAAI,2BAA2B;GAC7B,sBAAsB;GACtB,mBAAmB;GACpB,CAAC,CACH;;;;;;;;;;CAYL,MAAc,yBACZ,YACA,MACA,MACe;AACf,MAAI,KAAK,UAAU,QAAQ,EAAE,CAAC,KAAK,KAAK,UAAU,QAAQ,EAAE,CAAC,CAAE;EAC/D,MAAM,YAAY,MAAM,QAAQ,KAAK,GAAG,OAAO,EAAE,EAAE,QAChD,MAAmB,OAAO,MAAM,SAClC;EACD,MAAM,YAAY,MAAM,QAAQ,KAAK,GAAG,OAAO,EAAE,EAAE,QAChD,MAAmB,OAAO,MAAM,SAClC;EACD,MAAM,UAAU,IAAI,IAAI,SAAS;EACjC,MAAM,UAAU,IAAI,IAAI,SAAS;EACjC,MAAM,WAAW,SAAS,QAAQ,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;EACxD,MAAM,WAAW,SAAS,QAAQ,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;AACxD,MAAI,SAAS,SAAS,EACpB,OAAM,KAAK,WAAW,CAAC,KACrB,IAAI,sCAAsC;GACxC,sBAAsB;GACtB,iBAAiB;GAClB,CAAC,CACH;AAEH,MAAI,SAAS,SAAS,EACpB,OAAM,KAAK,WAAW,CAAC,KACrB,IAAI,sCAAsC;GACxC,sBAAsB;GACtB,iBAAiB;GAClB,CAAC,CACH;AAWH,MAAI,SAAS,SAAS,KAAK,SAAS,SAAS,EAC3C,OAAM,KAAK,kCAAkC,YAAY,IAAI,IAAI,SAAS,CAAC;;CAI/E,OAAwB,4BAA4B;CACpD,OAAwB,kCAAkC;CAE1D,MAAc,kCACZ,YACA,UACe;EACf,MAAM,aAAa,KAAK,KAAK,GAAG,YAAY;EAC5C,IAAI,+BAA4B,IAAI,KAAK;AACzC,SAAO,KAAK,KAAK,GAAG,YAAY;GAC9B,IAAI;AACJ,OAAI;AACF,WAAO,MAAM,KAAK,WAAW,CAAC,KAC5B,IAAI,iCAAiC,EAAE,uBAAuB,CAAC,WAAW,EAAE,CAAC,CAC9E;YACM,KAAK;AAMZ,SAAK,OAAO,MACV,0EACE,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,GAEnD;AACD,UAAM,IAAI,SAAS,MAAM,WAAW,GAAG,YAAY,gCAAgC,CAAC;AACpF;;AAEF,kBAAe,IAAI,IAAI,KAAK,oBAAoB,IAAI,mBAAmB,EAAE,CAAC;AAC1E,OAAI,aAAa,SAAS,SAAS,QAAQ,CAAC,GAAG,SAAS,CAAC,OAAO,MAAM,aAAa,IAAI,EAAE,CAAC,CACxF;AAEF,SAAM,IAAI,SAAS,MAAM,WAAW,GAAG,YAAY,gCAAgC,CAAC;;EAStF,MAAM,iBAAiB,CAAC,GAAG,SAAS,CAAC,MAAM;EAC3C,MAAM,iBAAiB,CAAC,GAAG,aAAa,CAAC,MAAM;AAC/C,OAAK,OAAO,KACV,4DAA4D,YAAY,0BAA0B,aAAa,WAAW,aAAa,KAAK,UAAU,eAAe,CAAC,YAAY,KAAK,UAAU,eAAe,GACjN;;CAGH,MAAc,2BACZ,YACA,MACA,MACe;AACf,MAAI,KAAK,UAAU,QAAQ,EAAE,CAAC,KAAK,KAAK,UAAU,QAAQ,EAAE,CAAC,CAAE;EAC/D,MAAM,cAAe,MAAM,QAAQ,KAAK,GAAG,OAAO,EAAE;EAIpD,MAAM,cAAe,MAAM,QAAQ,KAAK,GAAG,OAAO,EAAE;EAIpD,MAAM,oCAAoB,IAAI,KAAmC;AACjE,OAAK,MAAM,KAAK,YACd,KAAI,EAAE,YAAa,mBAAkB,IAAI,EAAE,aAAa,EAAE,QAAQ;EAEpE,MAAM,oCAAoB,IAAI,KAAmC;AACjE,OAAK,MAAM,KAAK,YACd,KAAI,EAAE,YAAa,mBAAkB,IAAI,EAAE,aAAa,EAAE,QAAQ;AAMpE,OAAK,MAAM,CAAC,aAAa,YAAY,kBACnC,KAAI,CAAC,kBAAkB,IAAI,YAAY,CACrC,OAAM,KAAK,WAAW,CAAC,KACrB,IAAI,gCAAgC;GAClC,sBAAsB;GACtB,GAAI,WAAW,QAAQ,SAAS,IAAI,EAAE,SAAS,SAAS,GAAG,EAAE;GAC9D,CAAC,CACH;AAGL,OAAK,MAAM,CAAC,aAAa,YAAY,mBAAmB;GACtD,MAAM,SAAS,kBAAkB,IAAI,YAAY;AACjD,OAAI,KAAK,UAAU,UAAU,KAAK,KAAK,KAAK,UAAU,WAAW,KAAK,CAAE;AAKxE,OAAI,UAAU,OAAO,SAAS,GAAG;IAC/B,MAAM,UAAU,UAAU,OAAO,QAAQ,MAAM,CAAC,QAAQ,SAAS,EAAE,CAAC,GAAG,EAAE;AACzE,QAAI,QAAQ,SAAS,EACnB,OAAM,KAAK,WAAW,CAAC,KACrB,IAAI,gCAAgC;KAClC,sBAAsB;KACtB,SAAS;KACV,CAAC,CACH;;AAGL,SAAM,KAAK,WAAW,CAAC,KACrB,IAAI,+BAA+B;IACjC,sBAAsB;IACtB,aAAa;IACb,GAAI,WAAW,QAAQ,SAAS,IAAI,EAAE,SAAS,SAAS,GAAG,EAAE;IAC9D,CAAC,CACH;;;CAIL,MAAc,wBACZ,YACA,MACA,MACe;AACf,MAAI,KAAK,UAAU,QAAQ,EAAE,CAAC,KAAK,KAAK,UAAU,QAAQ,EAAE,CAAC,CAAE;EAC/D,MAAM,cAAe,MAAM,QAAQ,KAAK,GAAG,OAAO,EAAE;EASpD,MAAM,cAAe,MAAM,QAAQ,KAAK,GAAG,OAAO,EAAE;EAGpD,MAAM,YAAY,IAAI,IACpB,YAAY,KAAK,MAAM,EAAE,kBAAkB,CAAC,QAAQ,MAAmB,CAAC,CAAC,EAAE,CAC5E;AAED,OAAK,MAAM,KAAK,YACd,KAAI,EAAE,qBAAqB,CAAC,UAAU,IAAI,EAAE,kBAAkB,CAC5D,OAAM,KAAK,WAAW,CAAC,KACrB,IAAI,2BAA2B;GAC7B,sBAAsB;GACtB,mBAAmB,EAAE;GACtB,CAAC,CACH;EAKL,MAAM,6BAAa,IAAI,KAAsB;AAC7C,OAAK,MAAM,KAAK,YACd,KAAI,EAAE,kBAAmB,YAAW,IAAI,EAAE,mBAAmB,EAAE;AAEjE,OAAK,MAAM,KAAK,aAAa;AAC3B,OAAI,CAAC,EAAE,kBAAmB;GAC1B,MAAM,WAAW,WAAW,IAAI,EAAE,kBAAkB;AACpD,OAAI,KAAK,UAAU,SAAS,KAAK,KAAK,UAAU,EAAE,CAAE;AACpD,SAAM,KAAK,WAAW,CAAC,KACrB,IAAI,wBAAwB;IAC1B,sBAAsB;IACtB,mBAAmB,EAAE;IACrB,GAAI,EAAE,wBAAwB,UAAa,EACzC,qBAAqB,EAAE,qBACxB;IACD,GAAI,EAAE,YAAY,UAAa,EAAE,SAAS,EAAE,SAAS;IACrD,GAAI,EAAE,0BAA0B,UAAa,EAC3C,uBAAuB,EAAE,uBAC1B;IACD,GAAI,EAAE,yBAAyB,UAAa,EAC1C,sBAAsB,EAAE,sBACzB;IACD,GAAI,EAAE,qBAAqB,UAAa,EAAE,kBAAkB,EAAE,kBAAkB;IAChF,GAAI,EAAE,kBAAkB,UAAa,EAAE,eAAe,EAAE,eAAe;IACxE,CAAC,CACH;;;CAIL,MAAc,wBACZ,YACA,MACA,MACe;AACf,MAAI,KAAK,UAAU,QAAQ,EAAE,CAAC,KAAK,KAAK,UAAU,QAAQ,EAAE,CAAC,CAAE;EAC/D,MAAM,cAAe,MAAM,QAAQ,KAAK,GAAG,OAAO,EAAE;EAIpD,MAAM,cAAe,MAAM,QAAQ,KAAK,GAAG,OAAO,EAAE;EAIpD,MAAM,UAAU,IAAI,IAAI,YAAY,KAAK,MAAM,EAAE,WAAW,CAAC,QAAQ,MAAmB,CAAC,CAAC,EAAE,CAAC;EAC7F,MAAM,UAAU,IAAI,IAAI,YAAY,KAAK,MAAM,EAAE,WAAW,CAAC,QAAQ,MAAmB,CAAC,CAAC,EAAE,CAAC;EAC7F,MAAM,WAAW,YAAY,QAAQ,MAAM,EAAE,cAAc,CAAC,QAAQ,IAAI,EAAE,WAAW,CAAC;EACtF,MAAM,WAAW,YAAY,QAAQ,MAAM,EAAE,cAAc,CAAC,QAAQ,IAAI,EAAE,WAAW,CAAC;AACtF,MAAI,SAAS,SAAS,EACpB,OAAM,KAAK,WAAW,CAAC,KACrB,IAAI,4BAA4B;GAC9B,sBAAsB;GACtB,gBAAgB,SAAS,KAAK,OAAO;IACnC,YAAY,EAAE;IACd,GAAI,EAAE,SAAS,UAAa,EAAE,MAAM,EAAE,MAAM;IAC7C,EAAE;GACJ,CAAC,CACH;AAEH,MAAI,SAAS,SAAS,EACpB,OAAM,KAAK,WAAW,CAAC,KACrB,IAAI,4BAA4B;GAC9B,sBAAsB;GACtB,gBAAgB,SAAS,KAAK,OAAO;IACnC,YAAY,EAAE;IACd,GAAI,EAAE,SAAS,UAAa,EAAE,MAAM,EAAE,MAAM;IAC7C,EAAE;GACJ,CAAC,CACH;;CAIL,MAAc,oCACZ,YACA,MACA,MACe;AACf,MAAI,KAAK,UAAU,QAAQ,EAAE,CAAC,KAAK,KAAK,UAAU,QAAQ,EAAE,CAAC,CAAE;EAO/D,MAAM,cAAe,MAAM,QAAQ,KAAK,GAAG,OAAO,EAAE;EAIpD,MAAM,cAAe,MAAM,QAAQ,KAAK,GAAG,OAAO,EAAE;EAIpD,MAAM,8BAAc,IAAI,KAAmC;AAC3D,OAAK,MAAM,KAAK,YACd,KAAI,EAAE,SAAU,aAAY,IAAI,EAAE,UAAU,EAAE,kBAAkB;EAElE,MAAM,8BAAc,IAAI,KAAmC;AAC3D,OAAK,MAAM,KAAK,YACd,KAAI,EAAE,SAAU,aAAY,IAAI,EAAE,UAAU,EAAE,kBAAkB;AAElE,OAAK,MAAM,SAAS,YAAY,MAAM,CACpC,KAAI,CAAC,YAAY,IAAI,MAAM,CACzB,OAAM,KAAK,WAAW,CAAC,KACrB,IAAI,uCAAuC;GACzC,sBAAsB;GACtB,UAAU;GACX,CAAC,CACH;AAGL,OAAK,MAAM,CAAC,OAAO,UAAU,aAAa;GACxC,MAAM,SAAS,YAAY,IAAI,MAAM;AACrC,OAAI,KAAK,UAAU,UAAU,KAAK,KAAK,KAAK,UAAU,SAAS,KAAK,CAAE;AACtE,SAAM,KAAK,WAAW,CAAC,KACrB,IAAI,oCAAoC;IACtC,sBAAsB;IACtB,UAAU;IACV,mBAAmB,SAAS,EAAE;IAC/B,CAAC,CACH;;;;;;;;;;;;;;;AAkBP,SAAS,uBACP,gBAGoD;AACpD,KAAI,CAAC,kBAAkB,eAAe,WAAW,EAAG,QAAO,EAAE;CAC7D,MAAM,gCAAgB,IAAI,KAA0B;AACpD,MAAK,MAAM,KAAK,gBAAgB;EAC9B,MAAM,IAAI,EAAE;AACZ,MAAI,CAAC,EAAG;EACR,IAAI,MAAM,cAAc,IAAI,EAAE;AAC9B,MAAI,CAAC,KAAK;AACR,yBAAM,IAAI,KAAK;AACf,iBAAc,IAAI,GAAG,IAAI;;AAE3B,MAAI,EAAE,OAAQ,KAAI,IAAI,EAAE,OAAO;;CAEjC,MAAM,SAA6D,EAAE;AAErE,MAAK,MAAM,eAAe,MAAM,KAAK,cAAc,MAAM,CAAC,CAAC,MAAM,EAAE;EACjE,MAAM,UAAU,MAAM,KAAK,cAAc,IAAI,YAAY,IAAI,EAAE,CAAC,CAAC,MAAM;AACvE,SAAO,KACL,QAAQ,SAAS,IACb;GAAE,aAAa;GAAa,SAAS;GAAS,GAC9C,EAAE,aAAa,aAAa,CACjC;;AAEH,QAAO;;;;;;;;;;AAWT,SAAS,uBACP,OASgC;AAChC,KAAI,CAAC,SAAS,MAAM,WAAW,EAAG,QAAO,EAAE;CAC3C,MAAM,SAAyC,EAAE;AACjD,MAAK,MAAM,KAAK,OAAO;AACrB,MAAI,CAAC,EAAE,kBAAmB;EAC1B,MAAM,QAAiC,EAAE,mBAAmB,EAAE,mBAAmB;AACjF,MAAI,EAAE,wBAAwB,OAAW,OAAM,yBAAyB,EAAE;AAC1E,MAAI,EAAE,YAAY,OAAW,OAAM,aAAa,EAAE;AAClD,MAAI,EAAE,0BAA0B,OAC9B,OAAM,2BAA2B,EAAE;AAErC,MAAI,EAAE,yBAAyB,OAC7B,OAAM,0BAA0B,EAAE;AAEpC,MAAI,EAAE,qBAAqB,OAAW,OAAM,sBAAsB,EAAE;AACpE,MAAI,EAAE,kBAAkB,OAAW,OAAM,mBAAmB,EAAE;AAC9D,SAAO,KAAK,MAAM;;AAEpB,QAAO,MAAM,GAAG,MACd,OAAO,EAAE,qBAAqB,CAAC,cAAc,OAAO,EAAE,qBAAqB,CAAC,CAC7E;AACD,QAAO;;;;;;;;AAST,SAAS,uBACP,gBACgC;AAChC,KAAI,CAAC,kBAAkB,eAAe,WAAW,EAAG,QAAO,EAAE;CAC7D,MAAM,SAAyC,EAAE;AACjD,MAAK,MAAM,KAAK,gBAAgB;AAC9B,MAAI,CAAC,EAAE,WAAY;EACnB,MAAM,QAAiC,EAAE,YAAY,EAAE,YAAY;AACnE,MAAI,EAAE,SAAS,OAAW,OAAM,UAAU,EAAE;AAC5C,SAAO,KAAK,MAAM;;AAEpB,QAAO,MAAM,GAAG,MAAM,OAAO,EAAE,cAAc,CAAC,cAAc,OAAO,EAAE,cAAc,CAAC,CAAC;AACrF,QAAO;;;;;;;;AAST,SAAS,sBACP,gBACgC;AAChC,KAAI,CAAC,kBAAkB,eAAe,WAAW,EAAG,QAAO,EAAE;CAC7D,MAAM,0BAAU,IAAI,KAA0B;AAC9C,MAAK,MAAM,KAAK,gBAAgB;AAC9B,MAAI,CAAC,EAAE,SAAU;EACjB,IAAI,MAAM,QAAQ,IAAI,EAAE,SAAS;AACjC,MAAI,CAAC,KAAK;AACR,yBAAM,IAAI,KAAK;AACf,WAAQ,IAAI,EAAE,UAAU,IAAI;;AAE9B,MAAI,EAAE,iBAAkB,KAAI,IAAI,EAAE,iBAAiB;;CAErD,MAAM,SAAyC,EAAE;AACjD,MAAK,MAAM,SAAS,MAAM,KAAK,QAAQ,MAAM,CAAC,CAAC,MAAM,EAAE;EACrD,MAAM,QAAQ,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM;AACzD,SAAO,KAAK;GAAE,UAAU;GAAO,mBAAmB;GAAO,CAAC;;AAE5D,QAAO"}

package/dist/{aws-clients-DWUnLza1.js → aws-clients-pjPwZz1r.js}

@@ -1,3 +1,4 @@
+import { t as __exportAll } from "./rolldown-runtime-CjeV3_4I.js";
 import { S3Client } from "@aws-sdk/client-s3";
 import { CloudControlClient } from "@aws-sdk/client-cloudcontrol";
 import { IAMClient } from "@aws-sdk/client-iam";
@@ -18,23 +19,6 @@ import { CloudWatchLogsClient } from "@aws-sdk/client-cloudwatch-logs";
 import { BedrockAgentCoreControlClient } from "@aws-sdk/client-bedrock-agentcore-control";
 import { ACMClient } from "@aws-sdk/client-acm";
 
-//#region \0rolldown/runtime.js
-var __defProp = Object.defineProperty;
-var __exportAll = (all, no_symbols) => {
-	let target = {};
-	for (var name in all) {
-		__defProp(target, name, {
-			get: all[name],
-			enumerable: true
-		});
-	}
-	if (!no_symbols) {
-		__defProp(target, Symbol.toStringTag, { value: "Module" });
-	}
-	return target;
-};
-
-//#endregion
 //#region src/utils/aws-clients.ts
 var aws_clients_exports = /* @__PURE__ */ __exportAll({
 	AwsClients: () => AwsClients,
@@ -448,4 +432,4 @@ function resetAwsClients() {
 
 //#endregion
 export { setAwsClients as a, resetAwsClients as i, aws_clients_exports as n, getAwsClients as r, AwsClients as t };
-//# sourceMappingURL=aws-clients-DWUnLza1.js.map
+//# sourceMappingURL=aws-clients-pjPwZz1r.js.map

package/dist/{aws-clients-DWUnLza1.js.map → aws-clients-pjPwZz1r.js.map}

@@ -1 +1 @@
-{"version":3,"file":"aws-clients-DWUnLza1.js","names":[],"sources":["../src/utils/aws-clients.ts"],"sourcesContent":["import { S3Client } from '@aws-sdk/client-s3';\nimport { CloudControlClient } from '@aws-sdk/client-cloudcontrol';\nimport { IAMClient } from '@aws-sdk/client-iam';\nimport { SQSClient } from '@aws-sdk/client-sqs';\nimport { SNSClient } from '@aws-sdk/client-sns';\nimport { LambdaClient } from '@aws-sdk/client-lambda';\nimport { STSClient } from '@aws-sdk/client-sts';\nimport { EC2Client } from '@aws-sdk/client-ec2';\nimport { DynamoDBClient } from '@aws-sdk/client-dynamodb';\nimport { CloudFormationClient } from '@aws-sdk/client-cloudformation';\nimport { APIGatewayClient } from '@aws-sdk/client-api-gateway';\nimport { EventBridgeClient } from '@aws-sdk/client-eventbridge';\nimport { SecretsManagerClient } from '@aws-sdk/client-secrets-manager';\nimport { SSMClient } from '@aws-sdk/client-ssm';\nimport { CloudFrontClient } from '@aws-sdk/client-cloudfront';\nimport { CloudWatchClient } from '@aws-sdk/client-cloudwatch';\nimport { CloudWatchLogsClient } from '@aws-sdk/client-cloudwatch-logs';\nimport { BedrockAgentCoreControlClient } from '@aws-sdk/client-bedrock-agentcore-control';\nimport { ACMClient } from '@aws-sdk/client-acm';\n\n/**\n * AWS client configuration\n */\nexport interface AwsClientConfig {\n  region?: string;\n  profile?: string;\n  credentials?: {\n    accessKeyId: string;\n    secretAccessKey: string;\n    sessionToken?: string;\n  };\n}\n\n/**\n * AWS clients manager\n */\nexport class AwsClients {\n  private s3Client?: S3Client;\n  private cloudControlClient?: CloudControlClient;\n  private iamClient?: IAMClient;\n  private sqsClient?: SQSClient;\n  private snsClient?: SNSClient;\n  private lambdaClient?: LambdaClient;\n  private stsClient?: STSClient;\n  private ec2Client?: EC2Client;\n  private dynamoDBClient?: DynamoDBClient;\n  private cloudFormationClient?: CloudFormationClient;\n  private apiGatewayClient?: APIGatewayClient;\n  private eventBridgeClient?: EventBridgeClient;\n  private secretsManagerClient?: SecretsManagerClient;\n  private ssmClient?: SSMClient;\n  private cloudFrontClient?: CloudFrontClient;\n  private cloudWatchClient?: CloudWatchClient;\n  private cloudWatchLogsClient?: CloudWatchLogsClient;\n  private bedrockAgentCoreControlClient?: BedrockAgentCoreControlClient;\n  private acmClient?: ACMClient;\n  private config: AwsClientConfig;\n\n  constructor(config: AwsClientConfig = {}) {\n    this.config = config;\n  }\n\n  /**\n   * Get S3 client\n   *\n   * Note: If region and credentials are not provided, AWS SDK will use:\n   * 1. Environment variables (AWS_REGION, AWS_ACCESS_KEY_ID, etc.)\n   * 2. AWS credentials file (~/.aws/credentials)\n   * 3. IAM role (if running on EC2/ECS/Lambda)\n   */\n  getS3Client(): S3Client {\n    if (!this.s3Client) {\n      this.s3Client = new S3Client({\n        ...(this.config.region && { region: this.config.region }),\n        ...(this.config.credentials && { credentials: this.config.credentials }),\n        // Suppress \"Are you using a Stream of unknown length\" warning\n        logger: { debug: () => {}, info: () => {}, warn: () => {}, error: () => {} },\n      });\n    }\n    return this.s3Client;\n  }\n\n  /**\n   * Get Cloud Control API client\n   *\n   * Note: If region and credentials are not provided, AWS SDK will use:\n   * 1. Environment variables (AWS_REGION, AWS_ACCESS_KEY_ID, etc.)\n   * 2. AWS credentials file (~/.aws/credentials)\n   * 3. IAM role (if running on EC2/ECS/Lambda)\n   */\n  getCloudControlClient(): CloudControlClient {\n    if (!this.cloudControlClient) {\n      this.cloudControlClient = new CloudControlClient({\n        ...(this.config.region && { region: this.config.region }),\n        ...(this.config.credentials && { credentials: this.config.credentials }),\n      });\n    }\n    return this.cloudControlClient;\n  }\n\n  /**\n   * Get IAM client\n   *\n   * Note: IAM is a global service, but we accept region for consistency.\n   * If not specified, defaults to us-east-1.\n   */\n  getIAMClient(): IAMClient {\n    if (!this.iamClient) {\n      this.iamClient = new IAMClient({\n        region: this.config.region || 'us-east-1',\n        ...(this.config.credentials && { credentials: this.config.credentials }),\n      });\n    }\n    return this.iamClient;\n  }\n\n  /**\n   * Convenience getter for S3 client\n   */\n  get s3(): S3Client {\n    return this.getS3Client();\n  }\n\n  /**\n   * Convenience getter for Cloud Control client\n   */\n  get cloudControl(): CloudControlClient {\n    return this.getCloudControlClient();\n  }\n\n  /**\n   * Convenience getter for IAM client\n   */\n  get iam(): IAMClient {\n    return this.getIAMClient();\n  }\n\n  /**\n   * Get SQS client\n   */\n  getSQSClient(): SQSClient {\n    if (!this.sqsClient) {\n      this.sqsClient = new SQSClient({\n        ...(this.config.region && { region: this.config.region }),\n        ...(this.config.credentials && { credentials: this.config.credentials }),\n      });\n    }\n    return this.sqsClient;\n  }\n\n  /**\n   * Convenience getter for SQS client\n   */\n  get sqs(): SQSClient {\n    return this.getSQSClient();\n  }\n\n  /**\n   * Get SNS client\n   */\n  getSNSClient(): SNSClient {\n    if (!this.snsClient) {\n      this.snsClient = new SNSClient({\n        ...(this.config.region && { region: this.config.region }),\n        ...(this.config.credentials && { credentials: this.config.credentials }),\n      });\n    }\n    return this.snsClient;\n  }\n\n  /**\n   * Convenience getter for SNS client\n   */\n  get sns(): SNSClient {\n    return this.getSNSClient();\n  }\n\n  /**\n   * Get Lambda client\n   */\n  getLambdaClient(): LambdaClient {\n    if (!this.lambdaClient) {\n      this.lambdaClient = new LambdaClient({\n        ...(this.config.region && { region: this.config.region }),\n        ...(this.config.credentials && { credentials: this.config.credentials }),\n      });\n    }\n    return this.lambdaClient;\n  }\n\n  /**\n   * Convenience getter for Lambda client\n   */\n  get lambda(): LambdaClient {\n    return this.getLambdaClient();\n  }\n\n  /**\n   * Get EC2 client\n   */\n  getEC2Client(): EC2Client {\n    if (!this.ec2Client) {\n      this.ec2Client = new EC2Client({\n        ...(this.config.region && { region: this.config.region }),\n        ...(this.config.credentials && { credentials: this.config.credentials }),\n      });\n    }\n    return this.ec2Client;\n  }\n\n  /**\n   * Convenience getter for EC2 client\n   */\n  get ec2(): EC2Client {\n    return this.getEC2Client();\n  }\n\n  /**\n   * Get STS client\n   */\n  getSTSClient(): STSClient {\n    if (!this.stsClient) {\n      this.stsClient = new STSClient({\n        ...(this.config.region && { region: this.config.region }),\n        ...(this.config.credentials && { credentials: this.config.credentials }),\n      });\n    }\n    return this.stsClient;\n  }\n\n  /**\n   * Convenience getter for STS client\n   */\n  get sts(): STSClient {\n    return this.getSTSClient();\n  }\n\n  /**\n   * Get DynamoDB client\n   */\n  getDynamoDBClient(): DynamoDBClient {\n    if (!this.dynamoDBClient) {\n      this.dynamoDBClient = new DynamoDBClient({\n        ...(this.config.region && { region: this.config.region }),\n        ...(this.config.credentials && { credentials: this.config.credentials }),\n      });\n    }\n    return this.dynamoDBClient;\n  }\n\n  /**\n   * Convenience getter for DynamoDB client\n   */\n  get dynamoDB(): DynamoDBClient {\n    return this.getDynamoDBClient();\n  }\n\n  /**\n   * Get CloudFormation client\n   */\n  getCloudFormationClient(): CloudFormationClient {\n    if (!this.cloudFormationClient) {\n      this.cloudFormationClient = new CloudFormationClient({\n        ...(this.config.region && { region: this.config.region }),\n        ...(this.config.credentials && { credentials: this.config.credentials }),\n      });\n    }\n    return this.cloudFormationClient;\n  }\n\n  /**\n   * Convenience getter for CloudFormation client\n   */\n  get cloudFormation(): CloudFormationClient {\n    return this.getCloudFormationClient();\n  }\n\n  /**\n   * Get API Gateway client\n   */\n  getAPIGatewayClient(): APIGatewayClient {\n    if (!this.apiGatewayClient) {\n      this.apiGatewayClient = new APIGatewayClient({\n        ...(this.config.region && { region: this.config.region }),\n        ...(this.config.credentials && { credentials: this.config.credentials }),\n      });\n    }\n    return this.apiGatewayClient;\n  }\n\n  /**\n   * Convenience getter for API Gateway client\n   */\n  get apiGateway(): APIGatewayClient {\n    return this.getAPIGatewayClient();\n  }\n\n  /**\n   * Get EventBridge client\n   */\n  getEventBridgeClient(): EventBridgeClient {\n    if (!this.eventBridgeClient) {\n      this.eventBridgeClient = new EventBridgeClient({\n        ...(this.config.region && { region: this.config.region }),\n        ...(this.config.credentials && { credentials: this.config.credentials }),\n      });\n    }\n    return this.eventBridgeClient;\n  }\n\n  /**\n   * Convenience getter for EventBridge client\n   */\n  get eventBridge(): EventBridgeClient {\n    return this.getEventBridgeClient();\n  }\n\n  /**\n   * Get Secrets Manager client\n   */\n  getSecretsManagerClient(): SecretsManagerClient {\n    if (!this.secretsManagerClient) {\n      this.secretsManagerClient = new SecretsManagerClient({\n        ...(this.config.region && { region: this.config.region }),\n        ...(this.config.credentials && { credentials: this.config.credentials }),\n      });\n    }\n    return this.secretsManagerClient;\n  }\n\n  /**\n   * Convenience getter for Secrets Manager client\n   */\n  get secretsManager(): SecretsManagerClient {\n    return this.getSecretsManagerClient();\n  }\n\n  /**\n   * Get SSM client\n   */\n  getSSMClient(): SSMClient {\n    if (!this.ssmClient) {\n      this.ssmClient = new SSMClient({\n        ...(this.config.region && { region: this.config.region }),\n        ...(this.config.credentials && { credentials: this.config.credentials }),\n      });\n    }\n    return this.ssmClient;\n  }\n\n  /**\n   * Convenience getter for SSM client\n   */\n  get ssm(): SSMClient {\n    return this.getSSMClient();\n  }\n\n  /**\n   * Get CloudFront client\n   */\n  getCloudFrontClient(): CloudFrontClient {\n    if (!this.cloudFrontClient) {\n      this.cloudFrontClient = new CloudFrontClient({\n        ...(this.config.region && { region: this.config.region }),\n        ...(this.config.credentials && { credentials: this.config.credentials }),\n      });\n    }\n    return this.cloudFrontClient;\n  }\n\n  /**\n   * Convenience getter for CloudFront client\n   */\n  get cloudFront(): CloudFrontClient {\n    return this.getCloudFrontClient();\n  }\n\n  /**\n   * Get ACM client\n   *\n   * ACM is region-scoped. The client uses the configured AWS region so the\n   * deploy engine's per-stack region resolution carries through. CloudFront\n   * users must place their certificate stack in `us-east-1`.\n   */\n  getACMClient(): ACMClient {\n    if (!this.acmClient) {\n      this.acmClient = new ACMClient({\n        ...(this.config.region && { region: this.config.region }),\n        ...(this.config.credentials && { credentials: this.config.credentials }),\n      });\n    }\n    return this.acmClient;\n  }\n\n  /**\n   * Convenience getter for ACM client\n   */\n  get acm(): ACMClient {\n    return this.getACMClient();\n  }\n\n  /**\n   * Get CloudWatch client\n   */\n  getCloudWatchClient(): CloudWatchClient {\n    if (!this.cloudWatchClient) {\n      this.cloudWatchClient = new CloudWatchClient({\n        ...(this.config.region && { region: this.config.region }),\n        ...(this.config.credentials && { credentials: this.config.credentials }),\n      });\n    }\n    return this.cloudWatchClient;\n  }\n\n  /**\n   * Convenience getter for CloudWatch client\n   */\n  get cloudWatch(): CloudWatchClient {\n    return this.getCloudWatchClient();\n  }\n\n  /**\n   * Get CloudWatch Logs client\n   */\n  getCloudWatchLogsClient(): CloudWatchLogsClient {\n    if (!this.cloudWatchLogsClient) {\n      this.cloudWatchLogsClient = new CloudWatchLogsClient({\n        ...(this.config.region && { region: this.config.region }),\n        ...(this.config.credentials && { credentials: this.config.credentials }),\n      });\n    }\n    return this.cloudWatchLogsClient;\n  }\n\n  /**\n   * Convenience getter for CloudWatch Logs client\n   */\n  get cloudWatchLogs(): CloudWatchLogsClient {\n    return this.getCloudWatchLogsClient();\n  }\n\n  /**\n   * Get BedrockAgentCoreControl client\n   */\n  getBedrockAgentCoreControlClient(): BedrockAgentCoreControlClient {\n    if (!this.bedrockAgentCoreControlClient) {\n      this.bedrockAgentCoreControlClient = new BedrockAgentCoreControlClient({\n        ...(this.config.region && { region: this.config.region }),\n        ...(this.config.credentials && { credentials: this.config.credentials }),\n      });\n    }\n    return this.bedrockAgentCoreControlClient;\n  }\n\n  /**\n   * Convenience getter for BedrockAgentCoreControl client\n   */\n  get bedrockAgentCoreControl(): BedrockAgentCoreControlClient {\n    return this.getBedrockAgentCoreControlClient();\n  }\n\n  /**\n   * Destroy all clients\n   */\n  destroy(): void {\n    this.s3Client?.destroy();\n    this.cloudControlClient?.destroy();\n    this.iamClient?.destroy();\n    this.sqsClient?.destroy();\n    this.snsClient?.destroy();\n    this.lambdaClient?.destroy();\n    this.stsClient?.destroy();\n    this.ec2Client?.destroy();\n    this.dynamoDBClient?.destroy();\n    this.cloudFormationClient?.destroy();\n    this.apiGatewayClient?.destroy();\n    this.eventBridgeClient?.destroy();\n    this.secretsManagerClient?.destroy();\n    this.ssmClient?.destroy();\n    this.cloudFrontClient?.destroy();\n    this.cloudWatchClient?.destroy();\n    this.cloudWatchLogsClient?.destroy();\n    this.bedrockAgentCoreControlClient?.destroy();\n    this.acmClient?.destroy();\n  }\n}\n\n/**\n * Global AWS clients instance\n */\nlet globalClients: AwsClients | null = null;\n\n/**\n * Get or create global AWS clients\n */\nexport function getAwsClients(config?: AwsClientConfig): AwsClients {\n  if (!globalClients) {\n    globalClients = new AwsClients(config);\n  }\n  return globalClients;\n}\n\n/**\n * Set global AWS clients instance\n */\nexport function setAwsClients(clients: AwsClients): void {\n  globalClients = clients;\n}\n\n/**\n * Reset global AWS clients (useful for testing)\n */\nexport function resetAwsClients(): void {\n  globalClients?.destroy();\n  globalClients = null;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoCA,IAAa,aAAb,MAAwB;CACtB,AAAQ;CACR,AAAQ;CACR,AAAQ;CACR,AAAQ;CACR,AAAQ;CACR,AAAQ;CACR,AAAQ;CACR,AAAQ;CACR,AAAQ;CACR,AAAQ;CACR,AAAQ;CACR,AAAQ;CACR,AAAQ;CACR,AAAQ;CACR,AAAQ;CACR,AAAQ;CACR,AAAQ;CACR,AAAQ;CACR,AAAQ;CACR,AAAQ;CAER,YAAY,SAA0B,EAAE,EAAE;AACxC,OAAK,SAAS;;;;;;;;;;CAWhB,cAAwB;AACtB,MAAI,CAAC,KAAK,SACR,MAAK,WAAW,IAAI,SAAS;GAC3B,GAAI,KAAK,OAAO,UAAU,EAAE,QAAQ,KAAK,OAAO,QAAQ;GACxD,GAAI,KAAK,OAAO,eAAe,EAAE,aAAa,KAAK,OAAO,aAAa;GAEvE,QAAQ;IAAE,aAAa;IAAI,YAAY;IAAI,YAAY;IAAI,aAAa;IAAI;GAC7E,CAAC;AAEJ,SAAO,KAAK;;;;;;;;;;CAWd,wBAA4C;AAC1C,MAAI,CAAC,KAAK,mBACR,MAAK,qBAAqB,IAAI,mBAAmB;GAC/C,GAAI,KAAK,OAAO,UAAU,EAAE,QAAQ,KAAK,OAAO,QAAQ;GACxD,GAAI,KAAK,OAAO,eAAe,EAAE,aAAa,KAAK,OAAO,aAAa;GACxE,CAAC;AAEJ,SAAO,KAAK;;;;;;;;CASd,eAA0B;AACxB,MAAI,CAAC,KAAK,UACR,MAAK,YAAY,IAAI,UAAU;GAC7B,QAAQ,KAAK,OAAO,UAAU;GAC9B,GAAI,KAAK,OAAO,eAAe,EAAE,aAAa,KAAK,OAAO,aAAa;GACxE,CAAC;AAEJ,SAAO,KAAK;;;;;CAMd,IAAI,KAAe;AACjB,SAAO,KAAK,aAAa;;;;;CAM3B,IAAI,eAAmC;AACrC,SAAO,KAAK,uBAAuB;;;;;CAMrC,IAAI,MAAiB;AACnB,SAAO,KAAK,cAAc;;;;;CAM5B,eAA0B;AACxB,MAAI,CAAC,KAAK,UACR,MAAK,YAAY,IAAI,UAAU;GAC7B,GAAI,KAAK,OAAO,UAAU,EAAE,QAAQ,KAAK,OAAO,QAAQ;GACxD,GAAI,KAAK,OAAO,eAAe,EAAE,aAAa,KAAK,OAAO,aAAa;GACxE,CAAC;AAEJ,SAAO,KAAK;;;;;CAMd,IAAI,MAAiB;AACnB,SAAO,KAAK,cAAc;;;;;CAM5B,eAA0B;AACxB,MAAI,CAAC,KAAK,UACR,MAAK,YAAY,IAAI,UAAU;GAC7B,GAAI,KAAK,OAAO,UAAU,EAAE,QAAQ,KAAK,OAAO,QAAQ;GACxD,GAAI,KAAK,OAAO,eAAe,EAAE,aAAa,KAAK,OAAO,aAAa;GACxE,CAAC;AAEJ,SAAO,KAAK;;;;;CAMd,IAAI,MAAiB;AACnB,SAAO,KAAK,cAAc;;;;;CAM5B,kBAAgC;AAC9B,MAAI,CAAC,KAAK,aACR,MAAK,eAAe,IAAI,aAAa;GACnC,GAAI,KAAK,OAAO,UAAU,EAAE,QAAQ,KAAK,OAAO,QAAQ;GACxD,GAAI,KAAK,OAAO,eAAe,EAAE,aAAa,KAAK,OAAO,aAAa;GACxE,CAAC;AAEJ,SAAO,KAAK;;;;;CAMd,IAAI,SAAuB;AACzB,SAAO,KAAK,iBAAiB;;;;;CAM/B,eAA0B;AACxB,MAAI,CAAC,KAAK,UACR,MAAK,YAAY,IAAI,UAAU;GAC7B,GAAI,KAAK,OAAO,UAAU,EAAE,QAAQ,KAAK,OAAO,QAAQ;GACxD,GAAI,KAAK,OAAO,eAAe,EAAE,aAAa,KAAK,OAAO,aAAa;GACxE,CAAC;AAEJ,SAAO,KAAK;;;;;CAMd,IAAI,MAAiB;AACnB,SAAO,KAAK,cAAc;;;;;CAM5B,eAA0B;AACxB,MAAI,CAAC,KAAK,UACR,MAAK,YAAY,IAAI,UAAU;GAC7B,GAAI,KAAK,OAAO,UAAU,EAAE,QAAQ,KAAK,OAAO,QAAQ;GACxD,GAAI,KAAK,OAAO,eAAe,EAAE,aAAa,KAAK,OAAO,aAAa;GACxE,CAAC;AAEJ,SAAO,KAAK;;;;;CAMd,IAAI,MAAiB;AACnB,SAAO,KAAK,cAAc;;;;;CAM5B,oBAAoC;AAClC,MAAI,CAAC,KAAK,eACR,MAAK,iBAAiB,IAAI,eAAe;GACvC,GAAI,KAAK,OAAO,UAAU,EAAE,QAAQ,KAAK,OAAO,QAAQ;GACxD,GAAI,KAAK,OAAO,eAAe,EAAE,aAAa,KAAK,OAAO,aAAa;GACxE,CAAC;AAEJ,SAAO,KAAK;;;;;CAMd,IAAI,WAA2B;AAC7B,SAAO,KAAK,mBAAmB;;;;;CAMjC,0BAAgD;AAC9C,MAAI,CAAC,KAAK,qBACR,MAAK,uBAAuB,IAAI,qBAAqB;GACnD,GAAI,KAAK,OAAO,UAAU,EAAE,QAAQ,KAAK,OAAO,QAAQ;GACxD,GAAI,KAAK,OAAO,eAAe,EAAE,aAAa,KAAK,OAAO,aAAa;GACxE,CAAC;AAEJ,SAAO,KAAK;;;;;CAMd,IAAI,iBAAuC;AACzC,SAAO,KAAK,yBAAyB;;;;;CAMvC,sBAAwC;AACtC,MAAI,CAAC,KAAK,iBACR,MAAK,mBAAmB,IAAI,iBAAiB;GAC3C,GAAI,KAAK,OAAO,UAAU,EAAE,QAAQ,KAAK,OAAO,QAAQ;GACxD,GAAI,KAAK,OAAO,eAAe,EAAE,aAAa,KAAK,OAAO,aAAa;GACxE,CAAC;AAEJ,SAAO,KAAK;;;;;CAMd,IAAI,aAA+B;AACjC,SAAO,KAAK,qBAAqB;;;;;CAMnC,uBAA0C;AACxC,MAAI,CAAC,KAAK,kBACR,MAAK,oBAAoB,IAAI,kBAAkB;GAC7C,GAAI,KAAK,OAAO,UAAU,EAAE,QAAQ,KAAK,OAAO,QAAQ;GACxD,GAAI,KAAK,OAAO,eAAe,EAAE,aAAa,KAAK,OAAO,aAAa;GACxE,CAAC;AAEJ,SAAO,KAAK;;;;;CAMd,IAAI,cAAiC;AACnC,SAAO,KAAK,sBAAsB;;;;;CAMpC,0BAAgD;AAC9C,MAAI,CAAC,KAAK,qBACR,MAAK,uBAAuB,IAAI,qBAAqB;GACnD,GAAI,KAAK,OAAO,UAAU,EAAE,QAAQ,KAAK,OAAO,QAAQ;GACxD,GAAI,KAAK,OAAO,eAAe,EAAE,aAAa,KAAK,OAAO,aAAa;GACxE,CAAC;AAEJ,SAAO,KAAK;;;;;CAMd,IAAI,iBAAuC;AACzC,SAAO,KAAK,yBAAyB;;;;;CAMvC,eAA0B;AACxB,MAAI,CAAC,KAAK,UACR,MAAK,YAAY,IAAI,UAAU;GAC7B,GAAI,KAAK,OAAO,UAAU,EAAE,QAAQ,KAAK,OAAO,QAAQ;GACxD,GAAI,KAAK,OAAO,eAAe,EAAE,aAAa,KAAK,OAAO,aAAa;GACxE,CAAC;AAEJ,SAAO,KAAK;;;;;CAMd,IAAI,MAAiB;AACnB,SAAO,KAAK,cAAc;;;;;CAM5B,sBAAwC;AACtC,MAAI,CAAC,KAAK,iBACR,MAAK,mBAAmB,IAAI,iBAAiB;GAC3C,GAAI,KAAK,OAAO,UAAU,EAAE,QAAQ,KAAK,OAAO,QAAQ;GACxD,GAAI,KAAK,OAAO,eAAe,EAAE,aAAa,KAAK,OAAO,aAAa;GACxE,CAAC;AAEJ,SAAO,KAAK;;;;;CAMd,IAAI,aAA+B;AACjC,SAAO,KAAK,qBAAqB;;;;;;;;;CAUnC,eAA0B;AACxB,MAAI,CAAC,KAAK,UACR,MAAK,YAAY,IAAI,UAAU;GAC7B,GAAI,KAAK,OAAO,UAAU,EAAE,QAAQ,KAAK,OAAO,QAAQ;GACxD,GAAI,KAAK,OAAO,eAAe,EAAE,aAAa,KAAK,OAAO,aAAa;GACxE,CAAC;AAEJ,SAAO,KAAK;;;;;CAMd,IAAI,MAAiB;AACnB,SAAO,KAAK,cAAc;;;;;CAM5B,sBAAwC;AACtC,MAAI,CAAC,KAAK,iBACR,MAAK,mBAAmB,IAAI,iBAAiB;GAC3C,GAAI,KAAK,OAAO,UAAU,EAAE,QAAQ,KAAK,OAAO,QAAQ;GACxD,GAAI,KAAK,OAAO,eAAe,EAAE,aAAa,KAAK,OAAO,aAAa;GACxE,CAAC;AAEJ,SAAO,KAAK;;;;;CAMd,IAAI,aAA+B;AACjC,SAAO,KAAK,qBAAqB;;;;;CAMnC,0BAAgD;AAC9C,MAAI,CAAC,KAAK,qBACR,MAAK,uBAAuB,IAAI,qBAAqB;GACnD,GAAI,KAAK,OAAO,UAAU,EAAE,QAAQ,KAAK,OAAO,QAAQ;GACxD,GAAI,KAAK,OAAO,eAAe,EAAE,aAAa,KAAK,OAAO,aAAa;GACxE,CAAC;AAEJ,SAAO,KAAK;;;;;CAMd,IAAI,iBAAuC;AACzC,SAAO,KAAK,yBAAyB;;;;;CAMvC,mCAAkE;AAChE,MAAI,CAAC,KAAK,8BACR,MAAK,gCAAgC,IAAI,8BAA8B;GACrE,GAAI,KAAK,OAAO,UAAU,EAAE,QAAQ,KAAK,OAAO,QAAQ;GACxD,GAAI,KAAK,OAAO,eAAe,EAAE,aAAa,KAAK,OAAO,aAAa;GACxE,CAAC;AAEJ,SAAO,KAAK;;;;;CAMd,IAAI,0BAAyD;AAC3D,SAAO,KAAK,kCAAkC;;;;;CAMhD,UAAgB;AACd,OAAK,UAAU,SAAS;AACxB,OAAK,oBAAoB,SAAS;AAClC,OAAK,WAAW,SAAS;AACzB,OAAK,WAAW,SAAS;AACzB,OAAK,WAAW,SAAS;AACzB,OAAK,cAAc,SAAS;AAC5B,OAAK,WAAW,SAAS;AACzB,OAAK,WAAW,SAAS;AACzB,OAAK,gBAAgB,SAAS;AAC9B,OAAK,sBAAsB,SAAS;AACpC,OAAK,kBAAkB,SAAS;AAChC,OAAK,mBAAmB,SAAS;AACjC,OAAK,sBAAsB,SAAS;AACpC,OAAK,WAAW,SAAS;AACzB,OAAK,kBAAkB,SAAS;AAChC,OAAK,kBAAkB,SAAS;AAChC,OAAK,sBAAsB,SAAS;AACpC,OAAK,+BAA+B,SAAS;AAC7C,OAAK,WAAW,SAAS;;;;;;AAO7B,IAAI,gBAAmC;;;;AAKvC,SAAgB,cAAc,QAAsC;AAClE,KAAI,CAAC,cACH,iBAAgB,IAAI,WAAW,OAAO;AAExC,QAAO;;;;;AAMT,SAAgB,cAAc,SAA2B;AACvD,iBAAgB;;;;;AAMlB,SAAgB,kBAAwB;AACtC,gBAAe,SAAS;AACxB,iBAAgB"}
+{"version":3,"file":"aws-clients-pjPwZz1r.js","names":[],"sources":["../src/utils/aws-clients.ts"],"sourcesContent":["import { S3Client } from '@aws-sdk/client-s3';\nimport { CloudControlClient } from '@aws-sdk/client-cloudcontrol';\nimport { IAMClient } from '@aws-sdk/client-iam';\nimport { SQSClient } from '@aws-sdk/client-sqs';\nimport { SNSClient } from '@aws-sdk/client-sns';\nimport { LambdaClient } from '@aws-sdk/client-lambda';\nimport { STSClient } from '@aws-sdk/client-sts';\nimport { EC2Client } from '@aws-sdk/client-ec2';\nimport { DynamoDBClient } from '@aws-sdk/client-dynamodb';\nimport { CloudFormationClient } from '@aws-sdk/client-cloudformation';\nimport { APIGatewayClient } from '@aws-sdk/client-api-gateway';\nimport { EventBridgeClient } from '@aws-sdk/client-eventbridge';\nimport { SecretsManagerClient } from '@aws-sdk/client-secrets-manager';\nimport { SSMClient } from '@aws-sdk/client-ssm';\nimport { CloudFrontClient } from '@aws-sdk/client-cloudfront';\nimport { CloudWatchClient } from '@aws-sdk/client-cloudwatch';\nimport { CloudWatchLogsClient } from '@aws-sdk/client-cloudwatch-logs';\nimport { BedrockAgentCoreControlClient } from '@aws-sdk/client-bedrock-agentcore-control';\nimport { ACMClient } from '@aws-sdk/client-acm';\n\n/**\n * AWS client configuration\n */\nexport interface AwsClientConfig {\n  region?: string;\n  profile?: string;\n  credentials?: {\n    accessKeyId: string;\n    secretAccessKey: string;\n    sessionToken?: string;\n  };\n}\n\n/**\n * AWS clients manager\n */\nexport class AwsClients {\n  private s3Client?: S3Client;\n  private cloudControlClient?: CloudControlClient;\n  private iamClient?: IAMClient;\n  private sqsClient?: SQSClient;\n  private snsClient?: SNSClient;\n  private lambdaClient?: LambdaClient;\n  private stsClient?: STSClient;\n  private ec2Client?: EC2Client;\n  private dynamoDBClient?: DynamoDBClient;\n  private cloudFormationClient?: CloudFormationClient;\n  private apiGatewayClient?: APIGatewayClient;\n  private eventBridgeClient?: EventBridgeClient;\n  private secretsManagerClient?: SecretsManagerClient;\n  private ssmClient?: SSMClient;\n  private cloudFrontClient?: CloudFrontClient;\n  private cloudWatchClient?: CloudWatchClient;\n  private cloudWatchLogsClient?: CloudWatchLogsClient;\n  private bedrockAgentCoreControlClient?: BedrockAgentCoreControlClient;\n  private acmClient?: ACMClient;\n  private config: AwsClientConfig;\n\n  constructor(config: AwsClientConfig = {}) {\n    this.config = config;\n  }\n\n  /**\n   * Get S3 client\n   *\n   * Note: If region and credentials are not provided, AWS SDK will use:\n   * 1. Environment variables (AWS_REGION, AWS_ACCESS_KEY_ID, etc.)\n   * 2. AWS credentials file (~/.aws/credentials)\n   * 3. IAM role (if running on EC2/ECS/Lambda)\n   */\n  getS3Client(): S3Client {\n    if (!this.s3Client) {\n      this.s3Client = new S3Client({\n        ...(this.config.region && { region: this.config.region }),\n        ...(this.config.credentials && { credentials: this.config.credentials }),\n        // Suppress \"Are you using a Stream of unknown length\" warning\n        logger: { debug: () => {}, info: () => {}, warn: () => {}, error: () => {} },\n      });\n    }\n    return this.s3Client;\n  }\n\n  /**\n   * Get Cloud Control API client\n   *\n   * Note: If region and credentials are not provided, AWS SDK will use:\n   * 1. Environment variables (AWS_REGION, AWS_ACCESS_KEY_ID, etc.)\n   * 2. AWS credentials file (~/.aws/credentials)\n   * 3. IAM role (if running on EC2/ECS/Lambda)\n   */\n  getCloudControlClient(): CloudControlClient {\n    if (!this.cloudControlClient) {\n      this.cloudControlClient = new CloudControlClient({\n        ...(this.config.region && { region: this.config.region }),\n        ...(this.config.credentials && { credentials: this.config.credentials }),\n      });\n    }\n    return this.cloudControlClient;\n  }\n\n  /**\n   * Get IAM client\n   *\n   * Note: IAM is a global service, but we accept region for consistency.\n   * If not specified, defaults to us-east-1.\n   */\n  getIAMClient(): IAMClient {\n    if (!this.iamClient) {\n      this.iamClient = new IAMClient({\n        region: this.config.region || 'us-east-1',\n        ...(this.config.credentials && { credentials: this.config.credentials }),\n      });\n    }\n    return this.iamClient;\n  }\n\n  /**\n   * Convenience getter for S3 client\n   */\n  get s3(): S3Client {\n    return this.getS3Client();\n  }\n\n  /**\n   * Convenience getter for Cloud Control client\n   */\n  get cloudControl(): CloudControlClient {\n    return this.getCloudControlClient();\n  }\n\n  /**\n   * Convenience getter for IAM client\n   */\n  get iam(): IAMClient {\n    return this.getIAMClient();\n  }\n\n  /**\n   * Get SQS client\n   */\n  getSQSClient(): SQSClient {\n    if (!this.sqsClient) {\n      this.sqsClient = new SQSClient({\n        ...(this.config.region && { region: this.config.region }),\n        ...(this.config.credentials && { credentials: this.config.credentials }),\n      });\n    }\n    return this.sqsClient;\n  }\n\n  /**\n   * Convenience getter for SQS client\n   */\n  get sqs(): SQSClient {\n    return this.getSQSClient();\n  }\n\n  /**\n   * Get SNS client\n   */\n  getSNSClient(): SNSClient {\n    if (!this.snsClient) {\n      this.snsClient = new SNSClient({\n        ...(this.config.region && { region: this.config.region }),\n        ...(this.config.credentials && { credentials: this.config.credentials }),\n      });\n    }\n    return this.snsClient;\n  }\n\n  /**\n   * Convenience getter for SNS client\n   */\n  get sns(): SNSClient {\n    return this.getSNSClient();\n  }\n\n  /**\n   * Get Lambda client\n   */\n  getLambdaClient(): LambdaClient {\n    if (!this.lambdaClient) {\n      this.lambdaClient = new LambdaClient({\n        ...(this.config.region && { region: this.config.region }),\n        ...(this.config.credentials && { credentials: this.config.credentials }),\n      });\n    }\n    return this.lambdaClient;\n  }\n\n  /**\n   * Convenience getter for Lambda client\n   */\n  get lambda(): LambdaClient {\n    return this.getLambdaClient();\n  }\n\n  /**\n   * Get EC2 client\n   */\n  getEC2Client(): EC2Client {\n    if (!this.ec2Client) {\n      this.ec2Client = new EC2Client({\n        ...(this.config.region && { region: this.config.region }),\n        ...(this.config.credentials && { credentials: this.config.credentials }),\n      });\n    }\n    return this.ec2Client;\n  }\n\n  /**\n   * Convenience getter for EC2 client\n   */\n  get ec2(): EC2Client {\n    return this.getEC2Client();\n  }\n\n  /**\n   * Get STS client\n   */\n  getSTSClient(): STSClient {\n    if (!this.stsClient) {\n      this.stsClient = new STSClient({\n        ...(this.config.region && { region: this.config.region }),\n        ...(this.config.credentials && { credentials: this.config.credentials }),\n      });\n    }\n    return this.stsClient;\n  }\n\n  /**\n   * Convenience getter for STS client\n   */\n  get sts(): STSClient {\n    return this.getSTSClient();\n  }\n\n  /**\n   * Get DynamoDB client\n   */\n  getDynamoDBClient(): DynamoDBClient {\n    if (!this.dynamoDBClient) {\n      this.dynamoDBClient = new DynamoDBClient({\n        ...(this.config.region && { region: this.config.region }),\n        ...(this.config.credentials && { credentials: this.config.credentials }),\n      });\n    }\n    return this.dynamoDBClient;\n  }\n\n  /**\n   * Convenience getter for DynamoDB client\n   */\n  get dynamoDB(): DynamoDBClient {\n    return this.getDynamoDBClient();\n  }\n\n  /**\n   * Get CloudFormation client\n   */\n  getCloudFormationClient(): CloudFormationClient {\n    if (!this.cloudFormationClient) {\n      this.cloudFormationClient = new CloudFormationClient({\n        ...(this.config.region && { region: this.config.region }),\n        ...(this.config.credentials && { credentials: this.config.credentials }),\n      });\n    }\n    return this.cloudFormationClient;\n  }\n\n  /**\n   * Convenience getter for CloudFormation client\n   */\n  get cloudFormation(): CloudFormationClient {\n    return this.getCloudFormationClient();\n  }\n\n  /**\n   * Get API Gateway client\n   */\n  getAPIGatewayClient(): APIGatewayClient {\n    if (!this.apiGatewayClient) {\n      this.apiGatewayClient = new APIGatewayClient({\n        ...(this.config.region && { region: this.config.region }),\n        ...(this.config.credentials && { credentials: this.config.credentials }),\n      });\n    }\n    return this.apiGatewayClient;\n  }\n\n  /**\n   * Convenience getter for API Gateway client\n   */\n  get apiGateway(): APIGatewayClient {\n    return this.getAPIGatewayClient();\n  }\n\n  /**\n   * Get EventBridge client\n   */\n  getEventBridgeClient(): EventBridgeClient {\n    if (!this.eventBridgeClient) {\n      this.eventBridgeClient = new EventBridgeClient({\n        ...(this.config.region && { region: this.config.region }),\n        ...(this.config.credentials && { credentials: this.config.credentials }),\n      });\n    }\n    return this.eventBridgeClient;\n  }\n\n  /**\n   * Convenience getter for EventBridge client\n   */\n  get eventBridge(): EventBridgeClient {\n    return this.getEventBridgeClient();\n  }\n\n  /**\n   * Get Secrets Manager client\n   */\n  getSecretsManagerClient(): SecretsManagerClient {\n    if (!this.secretsManagerClient) {\n      this.secretsManagerClient = new SecretsManagerClient({\n        ...(this.config.region && { region: this.config.region }),\n        ...(this.config.credentials && { credentials: this.config.credentials }),\n      });\n    }\n    return this.secretsManagerClient;\n  }\n\n  /**\n   * Convenience getter for Secrets Manager client\n   */\n  get secretsManager(): SecretsManagerClient {\n    return this.getSecretsManagerClient();\n  }\n\n  /**\n   * Get SSM client\n   */\n  getSSMClient(): SSMClient {\n    if (!this.ssmClient) {\n      this.ssmClient = new SSMClient({\n        ...(this.config.region && { region: this.config.region }),\n        ...(this.config.credentials && { credentials: this.config.credentials }),\n      });\n    }\n    return this.ssmClient;\n  }\n\n  /**\n   * Convenience getter for SSM client\n   */\n  get ssm(): SSMClient {\n    return this.getSSMClient();\n  }\n\n  /**\n   * Get CloudFront client\n   */\n  getCloudFrontClient(): CloudFrontClient {\n    if (!this.cloudFrontClient) {\n      this.cloudFrontClient = new CloudFrontClient({\n        ...(this.config.region && { region: this.config.region }),\n        ...(this.config.credentials && { credentials: this.config.credentials }),\n      });\n    }\n    return this.cloudFrontClient;\n  }\n\n  /**\n   * Convenience getter for CloudFront client\n   */\n  get cloudFront(): CloudFrontClient {\n    return this.getCloudFrontClient();\n  }\n\n  /**\n   * Get ACM client\n   *\n   * ACM is region-scoped. The client uses the configured AWS region so the\n   * deploy engine's per-stack region resolution carries through. CloudFront\n   * users must place their certificate stack in `us-east-1`.\n   */\n  getACMClient(): ACMClient {\n    if (!this.acmClient) {\n      this.acmClient = new ACMClient({\n        ...(this.config.region && { region: this.config.region }),\n        ...(this.config.credentials && { credentials: this.config.credentials }),\n      });\n    }\n    return this.acmClient;\n  }\n\n  /**\n   * Convenience getter for ACM client\n   */\n  get acm(): ACMClient {\n    return this.getACMClient();\n  }\n\n  /**\n   * Get CloudWatch client\n   */\n  getCloudWatchClient(): CloudWatchClient {\n    if (!this.cloudWatchClient) {\n      this.cloudWatchClient = new CloudWatchClient({\n        ...(this.config.region && { region: this.config.region }),\n        ...(this.config.credentials && { credentials: this.config.credentials }),\n      });\n    }\n    return this.cloudWatchClient;\n  }\n\n  /**\n   * Convenience getter for CloudWatch client\n   */\n  get cloudWatch(): CloudWatchClient {\n    return this.getCloudWatchClient();\n  }\n\n  /**\n   * Get CloudWatch Logs client\n   */\n  getCloudWatchLogsClient(): CloudWatchLogsClient {\n    if (!this.cloudWatchLogsClient) {\n      this.cloudWatchLogsClient = new CloudWatchLogsClient({\n        ...(this.config.region && { region: this.config.region }),\n        ...(this.config.credentials && { credentials: this.config.credentials }),\n      });\n    }\n    return this.cloudWatchLogsClient;\n  }\n\n  /**\n   * Convenience getter for CloudWatch Logs client\n   */\n  get cloudWatchLogs(): CloudWatchLogsClient {\n    return this.getCloudWatchLogsClient();\n  }\n\n  /**\n   * Get BedrockAgentCoreControl client\n   */\n  getBedrockAgentCoreControlClient(): BedrockAgentCoreControlClient {\n    if (!this.bedrockAgentCoreControlClient) {\n      this.bedrockAgentCoreControlClient = new BedrockAgentCoreControlClient({\n        ...(this.config.region && { region: this.config.region }),\n        ...(this.config.credentials && { credentials: this.config.credentials }),\n      });\n    }\n    return this.bedrockAgentCoreControlClient;\n  }\n\n  /**\n   * Convenience getter for BedrockAgentCoreControl client\n   */\n  get bedrockAgentCoreControl(): BedrockAgentCoreControlClient {\n    return this.getBedrockAgentCoreControlClient();\n  }\n\n  /**\n   * Destroy all clients\n   */\n  destroy(): void {\n    this.s3Client?.destroy();\n    this.cloudControlClient?.destroy();\n    this.iamClient?.destroy();\n    this.sqsClient?.destroy();\n    this.snsClient?.destroy();\n    this.lambdaClient?.destroy();\n    this.stsClient?.destroy();\n    this.ec2Client?.destroy();\n    this.dynamoDBClient?.destroy();\n    this.cloudFormationClient?.destroy();\n    this.apiGatewayClient?.destroy();\n    this.eventBridgeClient?.destroy();\n    this.secretsManagerClient?.destroy();\n    this.ssmClient?.destroy();\n    this.cloudFrontClient?.destroy();\n    this.cloudWatchClient?.destroy();\n    this.cloudWatchLogsClient?.destroy();\n    this.bedrockAgentCoreControlClient?.destroy();\n    this.acmClient?.destroy();\n  }\n}\n\n/**\n * Global AWS clients instance\n */\nlet globalClients: AwsClients | null = null;\n\n/**\n * Get or create global AWS clients\n */\nexport function getAwsClients(config?: AwsClientConfig): AwsClients {\n  if (!globalClients) {\n    globalClients = new AwsClients(config);\n  }\n  return globalClients;\n}\n\n/**\n * Set global AWS clients instance\n */\nexport function setAwsClients(clients: AwsClients): void {\n  globalClients = clients;\n}\n\n/**\n * Reset global AWS clients (useful for testing)\n */\nexport function resetAwsClients(): void {\n  globalClients?.destroy();\n  globalClients = null;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoCA,IAAa,aAAb,MAAwB;CACtB,AAAQ;CACR,AAAQ;CACR,AAAQ;CACR,AAAQ;CACR,AAAQ;CACR,AAAQ;CACR,AAAQ;CACR,AAAQ;CACR,AAAQ;CACR,AAAQ;CACR,AAAQ;CACR,AAAQ;CACR,AAAQ;CACR,AAAQ;CACR,AAAQ;CACR,AAAQ;CACR,AAAQ;CACR,AAAQ;CACR,AAAQ;CACR,AAAQ;CAER,YAAY,SAA0B,EAAE,EAAE;AACxC,OAAK,SAAS;;;;;;;;;;CAWhB,cAAwB;AACtB,MAAI,CAAC,KAAK,SACR,MAAK,WAAW,IAAI,SAAS;GAC3B,GAAI,KAAK,OAAO,UAAU,EAAE,QAAQ,KAAK,OAAO,QAAQ;GACxD,GAAI,KAAK,OAAO,eAAe,EAAE,aAAa,KAAK,OAAO,aAAa;GAEvE,QAAQ;IAAE,aAAa;IAAI,YAAY;IAAI,YAAY;IAAI,aAAa;IAAI;GAC7E,CAAC;AAEJ,SAAO,KAAK;;;;;;;;;;CAWd,wBAA4C;AAC1C,MAAI,CAAC,KAAK,mBACR,MAAK,qBAAqB,IAAI,mBAAmB;GAC/C,GAAI,KAAK,OAAO,UAAU,EAAE,QAAQ,KAAK,OAAO,QAAQ;GACxD,GAAI,KAAK,OAAO,eAAe,EAAE,aAAa,KAAK,OAAO,aAAa;GACxE,CAAC;AAEJ,SAAO,KAAK;;;;;;;;CASd,eAA0B;AACxB,MAAI,CAAC,KAAK,UACR,MAAK,YAAY,IAAI,UAAU;GAC7B,QAAQ,KAAK,OAAO,UAAU;GAC9B,GAAI,KAAK,OAAO,eAAe,EAAE,aAAa,KAAK,OAAO,aAAa;GACxE,CAAC;AAEJ,SAAO,KAAK;;;;;CAMd,IAAI,KAAe;AACjB,SAAO,KAAK,aAAa;;;;;CAM3B,IAAI,eAAmC;AACrC,SAAO,KAAK,uBAAuB;;;;;CAMrC,IAAI,MAAiB;AACnB,SAAO,KAAK,cAAc;;;;;CAM5B,eAA0B;AACxB,MAAI,CAAC,KAAK,UACR,MAAK,YAAY,IAAI,UAAU;GAC7B,GAAI,KAAK,OAAO,UAAU,EAAE,QAAQ,KAAK,OAAO,QAAQ;GACxD,GAAI,KAAK,OAAO,eAAe,EAAE,aAAa,KAAK,OAAO,aAAa;GACxE,CAAC;AAEJ,SAAO,KAAK;;;;;CAMd,IAAI,MAAiB;AACnB,SAAO,KAAK,cAAc;;;;;CAM5B,eAA0B;AACxB,MAAI,CAAC,KAAK,UACR,MAAK,YAAY,IAAI,UAAU;GAC7B,GAAI,KAAK,OAAO,UAAU,EAAE,QAAQ,KAAK,OAAO,QAAQ;GACxD,GAAI,KAAK,OAAO,eAAe,EAAE,aAAa,KAAK,OAAO,aAAa;GACxE,CAAC;AAEJ,SAAO,KAAK;;;;;CAMd,IAAI,MAAiB;AACnB,SAAO,KAAK,cAAc;;;;;CAM5B,kBAAgC;AAC9B,MAAI,CAAC,KAAK,aACR,MAAK,eAAe,IAAI,aAAa;GACnC,GAAI,KAAK,OAAO,UAAU,EAAE,QAAQ,KAAK,OAAO,QAAQ;GACxD,GAAI,KAAK,OAAO,eAAe,EAAE,aAAa,KAAK,OAAO,aAAa;GACxE,CAAC;AAEJ,SAAO,KAAK;;;;;CAMd,IAAI,SAAuB;AACzB,SAAO,KAAK,iBAAiB;;;;;CAM/B,eAA0B;AACxB,MAAI,CAAC,KAAK,UACR,MAAK,YAAY,IAAI,UAAU;GAC7B,GAAI,KAAK,OAAO,UAAU,EAAE,QAAQ,KAAK,OAAO,QAAQ;GACxD,GAAI,KAAK,OAAO,eAAe,EAAE,aAAa,KAAK,OAAO,aAAa;GACxE,CAAC;AAEJ,SAAO,KAAK;;;;;CAMd,IAAI,MAAiB;AACnB,SAAO,KAAK,cAAc;;;;;CAM5B,eAA0B;AACxB,MAAI,CAAC,KAAK,UACR,MAAK,YAAY,IAAI,UAAU;GAC7B,GAAI,KAAK,OAAO,UAAU,EAAE,QAAQ,KAAK,OAAO,QAAQ;GACxD,GAAI,KAAK,OAAO,eAAe,EAAE,aAAa,KAAK,OAAO,aAAa;GACxE,CAAC;AAEJ,SAAO,KAAK;;;;;CAMd,IAAI,MAAiB;AACnB,SAAO,KAAK,cAAc;;;;;CAM5B,oBAAoC;AAClC,MAAI,CAAC,KAAK,eACR,MAAK,iBAAiB,IAAI,eAAe;GACvC,GAAI,KAAK,OAAO,UAAU,EAAE,QAAQ,KAAK,OAAO,QAAQ;GACxD,GAAI,KAAK,OAAO,eAAe,EAAE,aAAa,KAAK,OAAO,aAAa;GACxE,CAAC;AAEJ,SAAO,KAAK;;;;;CAMd,IAAI,WAA2B;AAC7B,SAAO,KAAK,mBAAmB;;;;;CAMjC,0BAAgD;AAC9C,MAAI,CAAC,KAAK,qBACR,MAAK,uBAAuB,IAAI,qBAAqB;GACnD,GAAI,KAAK,OAAO,UAAU,EAAE,QAAQ,KAAK,OAAO,QAAQ;GACxD,GAAI,KAAK,OAAO,eAAe,EAAE,aAAa,KAAK,OAAO,aAAa;GACxE,CAAC;AAEJ,SAAO,KAAK;;;;;CAMd,IAAI,iBAAuC;AACzC,SAAO,KAAK,yBAAyB;;;;;CAMvC,sBAAwC;AACtC,MAAI,CAAC,KAAK,iBACR,MAAK,mBAAmB,IAAI,iBAAiB;GAC3C,GAAI,KAAK,OAAO,UAAU,EAAE,QAAQ,KAAK,OAAO,QAAQ;GACxD,GAAI,KAAK,OAAO,eAAe,EAAE,aAAa,KAAK,OAAO,aAAa;GACxE,CAAC;AAEJ,SAAO,KAAK;;;;;CAMd,IAAI,aAA+B;AACjC,SAAO,KAAK,qBAAqB;;;;;CAMnC,uBAA0C;AACxC,MAAI,CAAC,KAAK,kBACR,MAAK,oBAAoB,IAAI,kBAAkB;GAC7C,GAAI,KAAK,OAAO,UAAU,EAAE,QAAQ,KAAK,OAAO,QAAQ;GACxD,GAAI,KAAK,OAAO,eAAe,EAAE,aAAa,KAAK,OAAO,aAAa;GACxE,CAAC;AAEJ,SAAO,KAAK;;;;;CAMd,IAAI,cAAiC;AACnC,SAAO,KAAK,sBAAsB;;;;;CAMpC,0BAAgD;AAC9C,MAAI,CAAC,KAAK,qBACR,MAAK,uBAAuB,IAAI,qBAAqB;GACnD,GAAI,KAAK,OAAO,UAAU,EAAE,QAAQ,KAAK,OAAO,QAAQ;GACxD,GAAI,KAAK,OAAO,eAAe,EAAE,aAAa,KAAK,OAAO,aAAa;GACxE,CAAC;AAEJ,SAAO,KAAK;;;;;CAMd,IAAI,iBAAuC;AACzC,SAAO,KAAK,yBAAyB;;;;;CAMvC,eAA0B;AACxB,MAAI,CAAC,KAAK,UACR,MAAK,YAAY,IAAI,UAAU;GAC7B,GAAI,KAAK,OAAO,UAAU,EAAE,QAAQ,KAAK,OAAO,QAAQ;GACxD,GAAI,KAAK,OAAO,eAAe,EAAE,aAAa,KAAK,OAAO,aAAa;GACxE,CAAC;AAEJ,SAAO,KAAK;;;;;CAMd,IAAI,MAAiB;AACnB,SAAO,KAAK,cAAc;;;;;CAM5B,sBAAwC;AACtC,MAAI,CAAC,KAAK,iBACR,MAAK,mBAAmB,IAAI,iBAAiB;GAC3C,GAAI,KAAK,OAAO,UAAU,EAAE,QAAQ,KAAK,OAAO,QAAQ;GACxD,GAAI,KAAK,OAAO,eAAe,EAAE,aAAa,KAAK,OAAO,aAAa;GACxE,CAAC;AAEJ,SAAO,KAAK;;;;;CAMd,IAAI,aAA+B;AACjC,SAAO,KAAK,qBAAqB;;;;;;;;;CAUnC,eAA0B;AACxB,MAAI,CAAC,KAAK,UACR,MAAK,YAAY,IAAI,UAAU;GAC7B,GAAI,KAAK,OAAO,UAAU,EAAE,QAAQ,KAAK,OAAO,QAAQ;GACxD,GAAI,KAAK,OAAO,eAAe,EAAE,aAAa,KAAK,OAAO,aAAa;GACxE,CAAC;AAEJ,SAAO,KAAK;;;;;CAMd,IAAI,MAAiB;AACnB,SAAO,KAAK,cAAc;;;;;CAM5B,sBAAwC;AACtC,MAAI,CAAC,KAAK,iBACR,MAAK,mBAAmB,IAAI,iBAAiB;GAC3C,GAAI,KAAK,OAAO,UAAU,EAAE,QAAQ,KAAK,OAAO,QAAQ;GACxD,GAAI,KAAK,OAAO,eAAe,EAAE,aAAa,KAAK,OAAO,aAAa;GACxE,CAAC;AAEJ,SAAO,KAAK;;;;;CAMd,IAAI,aAA+B;AACjC,SAAO,KAAK,qBAAqB;;;;;CAMnC,0BAAgD;AAC9C,MAAI,CAAC,KAAK,qBACR,MAAK,uBAAuB,IAAI,qBAAqB;GACnD,GAAI,KAAK,OAAO,UAAU,EAAE,QAAQ,KAAK,OAAO,QAAQ;GACxD,GAAI,KAAK,OAAO,eAAe,EAAE,aAAa,KAAK,OAAO,aAAa;GACxE,CAAC;AAEJ,SAAO,KAAK;;;;;CAMd,IAAI,iBAAuC;AACzC,SAAO,KAAK,yBAAyB;;;;;CAMvC,mCAAkE;AAChE,MAAI,CAAC,KAAK,8BACR,MAAK,gCAAgC,IAAI,8BAA8B;GACrE,GAAI,KAAK,OAAO,UAAU,EAAE,QAAQ,KAAK,OAAO,QAAQ;GACxD,GAAI,KAAK,OAAO,eAAe,EAAE,aAAa,KAAK,OAAO,aAAa;GACxE,CAAC;AAEJ,SAAO,KAAK;;;;;CAMd,IAAI,0BAAyD;AAC3D,SAAO,KAAK,kCAAkC;;;;;CAMhD,UAAgB;AACd,OAAK,UAAU,SAAS;AACxB,OAAK,oBAAoB,SAAS;AAClC,OAAK,WAAW,SAAS;AACzB,OAAK,WAAW,SAAS;AACzB,OAAK,WAAW,SAAS;AACzB,OAAK,cAAc,SAAS;AAC5B,OAAK,WAAW,SAAS;AACzB,OAAK,WAAW,SAAS;AACzB,OAAK,gBAAgB,SAAS;AAC9B,OAAK,sBAAsB,SAAS;AACpC,OAAK,kBAAkB,SAAS;AAChC,OAAK,mBAAmB,SAAS;AACjC,OAAK,sBAAsB,SAAS;AACpC,OAAK,WAAW,SAAS;AACzB,OAAK,kBAAkB,SAAS;AAChC,OAAK,kBAAkB,SAAS;AAChC,OAAK,sBAAsB,SAAS;AACpC,OAAK,+BAA+B,SAAS;AAC7C,OAAK,WAAW,SAAS;;;;;;AAO7B,IAAI,gBAAmC;;;;AAKvC,SAAgB,cAAc,QAAsC;AAClE,KAAI,CAAC,cACH,iBAAgB,IAAI,WAAW,OAAO;AAExC,QAAO;;;;;AAMT,SAAgB,cAAc,SAA2B;AACvD,iBAAgB;;;;;AAMlB,SAAgB,kBAAwB;AACtC,gBAAe,SAAS;AACxB,iBAAgB"}