@jaypie/constructs 1.1.21 → 1.1.22

package/dist/esm/index.js

@@ -190,47 +190,54 @@ class JaypieHostedZone extends Construct {
     }
 }
 
-class JaypieMongoDbSecret extends JaypieEnvSecret {
-    constructor(scope, id = "MongoConnectionString", props) {
-        const defaultProps = {
-            envKey: "MONGODB_URI",
-            roleTag: CDK.ROLE.STORAGE,
-            vendorTag: CDK.VENDOR.MONGODB,
-            ...props,
-        };
-        super(scope, id, defaultProps);
-    }
-}
-
-class JaypieOpenAiSecret extends JaypieEnvSecret {
-    constructor(scope, id = "OpenAiApiKey", props) {
-        const defaultProps = {
-            envKey: "OPENAI_API_KEY",
-            roleTag: CDK.ROLE.PROCESSING,
-            vendorTag: CDK.VENDOR.OPENAI,
-            ...props,
-        };
-        super(scope, id, defaultProps);
-    }
-}
-
-class JaypieQueuedLambda extends Construct {
+class JaypieLambda extends Construct {
     constructor(scope, id, props) {
         super(scope, id);
-        const { batchSize = 1, code, environment = {}, envSecrets = {}, fifo = true, handler = "index.handler", layers = [], logRetention = CDK.LAMBDA.LOG_RETENTION, memorySize = CDK.LAMBDA.MEMORY_SIZE, paramsAndSecrets, reservedConcurrentExecutions, roleTag, runtime = lambda.Runtime.NODEJS_20_X, secrets = [], timeout = Duration.seconds(CDK.DURATION.LAMBDA_WORKER), vendorTag, visibilityTimeout = Duration.seconds(CDK.DURATION.LAMBDA_WORKER), } = props;
+        const { code, datadogApiKeyArn, environment: initialEnvironment = {}, envSecrets = {}, handler = "index.handler", layers = [], logRetention = CDK.LAMBDA.LOG_RETENTION, memorySize = CDK.LAMBDA.MEMORY_SIZE, paramsAndSecrets, paramsAndSecretsOptions, reservedConcurrentExecutions, roleTag, runtime = lambda.Runtime.NODEJS_20_X, secrets = [], timeout = Duration.seconds(CDK.DURATION.LAMBDA_WORKER), vendorTag, } = props;
+        // Create a mutable copy of the environment variables
+        let environment = { ...initialEnvironment };
         this._code = typeof code === "string" ? lambda.Code.fromAsset(code) : code;
-        // Create SQS Queue
-        this._queue = new sqs.Queue(this, "Queue", {
-            fifo,
-            visibilityTimeout: typeof visibilityTimeout === "number"
-                ? Duration.seconds(visibilityTimeout)
-                : visibilityTimeout,
-        });
-        if (roleTag) {
-            Tags.of(this._queue).add(CDK.TAG.ROLE, roleTag);
+        // Create a working copy of layers
+        const resolvedLayers = [...layers];
+        // Determine if we should add Datadog integration
+        // Check for datadog API key ARN in different sources
+        const resolvedDatadogApiKeyArn = datadogApiKeyArn ||
+            process.env.DATADOG_API_KEY_ARN ||
+            process.env.CDK_ENV_DATADOG_API_KEY_ARN;
+        // Add Datadog integration if API key is available
+        if (resolvedDatadogApiKeyArn) {
+            // Add Datadog Node.js layer
+            const datadogNodeLayer = lambda.LayerVersion.fromLayerVersionArn(this, "DatadogNodeLayer", `arn:aws:lambda:${Stack.of(this).region}:464622532012:layer:Datadog-Node20-x:${CDK.DATADOG.LAYER.NODE}`);
+            resolvedLayers.push(datadogNodeLayer);
+            // Add Datadog Extension layer
+            const datadogExtensionLayer = lambda.LayerVersion.fromLayerVersionArn(this, "DatadogExtensionLayer", `arn:aws:lambda:${Stack.of(this).region}:464622532012:layer:Datadog-Extension:${CDK.DATADOG.LAYER.EXTENSION}`);
+            resolvedLayers.push(datadogExtensionLayer);
+            // Set Datadog environment variables
+            Object.assign(environment, {
+                DD_API_KEY_SECRET_ARN: resolvedDatadogApiKeyArn,
+                DD_ENV: process.env.PROJECT_ENV || "",
+                DD_SERVICE: process.env.PROJECT_SERVICE || "",
+                DD_SITE: CDK.DATADOG.SITE,
+                DD_TAGS: `${CDK.TAG.SPONSOR}:${process.env.PROJECT_SPONSOR || ""}`,
+            });
         }
-        if (vendorTag) {
-            Tags.of(this._queue).add(CDK.TAG.VENDOR, vendorTag);
+        // Configure ParamsAndSecrets layer
+        let resolvedParamsAndSecrets = undefined;
+        if (paramsAndSecrets !== false) {
+            if (paramsAndSecrets instanceof lambda.ParamsAndSecretsLayerVersion) {
+                resolvedParamsAndSecrets = paramsAndSecrets;
+            }
+            else {
+                // Create default ParamsAndSecrets layer
+                resolvedParamsAndSecrets =
+                    lambda.ParamsAndSecretsLayerVersion.fromVersion(lambda.ParamsAndSecretsVersions.V1_0_103, {
+                        cacheSize: paramsAndSecretsOptions?.cacheSize,
+                        logLevel: paramsAndSecretsOptions?.logLevel ||
+                            lambda.ParamsAndSecretsLogLevel.WARN,
+                        parameterStoreTtl: paramsAndSecretsOptions?.parameterStoreTtl,
+                        secretsManagerTtl: paramsAndSecretsOptions?.secretsManagerTtl,
+                    });
+            }
         }
         // Process secrets environment variables
         const secretsEnvironment = Object.entries(envSecrets).reduce((acc, [key, secret]) => ({
@@ -251,16 +258,15 @@ class JaypieQueuedLambda extends Construct {
         this._lambda = new lambda.Function(this, "Function", {
             code: this._code,
             environment: {
-                CDK_ENV_QUEUE_URL: this._queue.queueUrl,
                 ...environment,
                 ...secretsEnvironment,
                 ...jaypieSecretsEnvironment,
             },
             handler,
-            layers,
+            layers: resolvedLayers,
             logRetention,
             memorySize,
-            paramsAndSecrets,
+            paramsAndSecrets: resolvedParamsAndSecrets,
             reservedConcurrentExecutions,
             runtime,
             timeout: typeof timeout === "number" ? Duration.seconds(timeout) : timeout,
@@ -274,11 +280,11 @@ class JaypieQueuedLambda extends Construct {
             secret.grantRead(this);
             secret.grantRead(this._lambda);
         });
-        this._queue.grantConsumeMessages(this._lambda);
-        this._queue.grantSendMessages(this._lambda);
-        this._lambda.addEventSource(new lambdaEventSources.SqsEventSource(this._queue, {
-            batchSize,
-        }));
+        // Grant Datadog API key read permission if applicable
+        if (resolvedDatadogApiKeyArn) {
+            const datadogApiKey = secretsmanager.Secret.fromSecretCompleteArn(this, "DatadogApiKeyGrant", resolvedDatadogApiKeyArn);
+            datadogApiKey.grantRead(this._lambda);
+        }
         if (roleTag) {
             Tags.of(this._lambda).add(CDK.TAG.ROLE, roleTag);
         }
@@ -287,9 +293,6 @@ class JaypieQueuedLambda extends Construct {
         }
     }
     // Public accessors
-    get queue() {
-        return this._queue;
-    }
     get lambda() {
         return this._lambda;
     }
@@ -387,6 +390,178 @@ class JaypieQueuedLambda extends Construct {
     }
     applyRemovalPolicy(policy) {
         this._lambda.applyRemovalPolicy(policy);
+    }
+}
+
+class JaypieMongoDbSecret extends JaypieEnvSecret {
+    constructor(scope, id = "MongoConnectionString", props) {
+        const defaultProps = {
+            envKey: "MONGODB_URI",
+            roleTag: CDK.ROLE.STORAGE,
+            vendorTag: CDK.VENDOR.MONGODB,
+            ...props,
+        };
+        super(scope, id, defaultProps);
+    }
+}
+
+class JaypieOpenAiSecret extends JaypieEnvSecret {
+    constructor(scope, id = "OpenAiApiKey", props) {
+        const defaultProps = {
+            envKey: "OPENAI_API_KEY",
+            roleTag: CDK.ROLE.PROCESSING,
+            vendorTag: CDK.VENDOR.OPENAI,
+            ...props,
+        };
+        super(scope, id, defaultProps);
+    }
+}
+
+class JaypieQueuedLambda extends Construct {
+    constructor(scope, id, props) {
+        super(scope, id);
+        const { batchSize = 1, code, environment = {}, envSecrets = {}, fifo = true, handler = "index.handler", layers = [], logRetention = CDK.LAMBDA.LOG_RETENTION, memorySize = CDK.LAMBDA.MEMORY_SIZE, paramsAndSecrets, reservedConcurrentExecutions, roleTag, runtime = lambda.Runtime.NODEJS_20_X, secrets = [], timeout = Duration.seconds(CDK.DURATION.LAMBDA_WORKER), vendorTag, visibilityTimeout = Duration.seconds(CDK.DURATION.LAMBDA_WORKER), } = props;
+        // Create SQS Queue
+        this._queue = new sqs.Queue(this, "Queue", {
+            fifo,
+            visibilityTimeout: typeof visibilityTimeout === "number"
+                ? Duration.seconds(visibilityTimeout)
+                : visibilityTimeout,
+        });
+        if (roleTag) {
+            Tags.of(this._queue).add(CDK.TAG.ROLE, roleTag);
+        }
+        if (vendorTag) {
+            Tags.of(this._queue).add(CDK.TAG.VENDOR, vendorTag);
+        }
+        // Create Lambda with JaypieLambda
+        this._lambdaConstruct = new JaypieLambda(this, "Function", {
+            code,
+            environment: {
+                ...environment,
+                CDK_ENV_QUEUE_URL: this._queue.queueUrl,
+            },
+            envSecrets,
+            handler,
+            layers,
+            logRetention,
+            memorySize,
+            paramsAndSecrets,
+            reservedConcurrentExecutions,
+            roleTag,
+            runtime,
+            secrets,
+            timeout,
+            vendorTag,
+        });
+        // Set up queue and lambda integration
+        this._queue.grantConsumeMessages(this._lambdaConstruct);
+        this._queue.grantSendMessages(this._lambdaConstruct);
+        this._lambdaConstruct.addEventSource(new lambdaEventSources.SqsEventSource(this._queue, {
+            batchSize,
+        }));
+    }
+    // Public accessors
+    get queue() {
+        return this._queue;
+    }
+    get lambda() {
+        return this._lambdaConstruct.lambda;
+    }
+    get code() {
+        return this._lambdaConstruct.code;
+    }
+    // IFunction implementation
+    get functionArn() {
+        return this._lambdaConstruct.functionArn;
+    }
+    get functionName() {
+        return this._lambdaConstruct.functionName;
+    }
+    get grantPrincipal() {
+        return this._lambdaConstruct.grantPrincipal;
+    }
+    get role() {
+        return this._lambdaConstruct.role;
+    }
+    get architecture() {
+        return this._lambdaConstruct.architecture;
+    }
+    get connections() {
+        return this._lambdaConstruct.connections;
+    }
+    get isBoundToVpc() {
+        return this._lambdaConstruct.isBoundToVpc;
+    }
+    get latestVersion() {
+        return this._lambdaConstruct.latestVersion;
+    }
+    get permissionsNode() {
+        return this._lambdaConstruct.permissionsNode;
+    }
+    get resourceArnsForGrantInvoke() {
+        return this._lambdaConstruct.resourceArnsForGrantInvoke;
+    }
+    addEventSource(source) {
+        this._lambdaConstruct.addEventSource(source);
+    }
+    addEventSourceMapping(id, options) {
+        return this._lambdaConstruct.addEventSourceMapping(id, options);
+    }
+    addFunctionUrl(options) {
+        return this._lambdaConstruct.addFunctionUrl(options);
+    }
+    addPermission(id, permission) {
+        this._lambdaConstruct.addPermission(id, permission);
+    }
+    addToRolePolicy(statement) {
+        this._lambdaConstruct.addToRolePolicy(statement);
+    }
+    configureAsyncInvoke(options) {
+        this._lambdaConstruct.configureAsyncInvoke(options);
+    }
+    grantInvoke(grantee) {
+        return this._lambdaConstruct.grantInvoke(grantee);
+    }
+    grantInvokeCompositePrincipal(compositePrincipal) {
+        return this._lambdaConstruct.grantInvokeCompositePrincipal(compositePrincipal);
+    }
+    grantInvokeUrl(grantee) {
+        return this._lambdaConstruct.grantInvokeUrl(grantee);
+    }
+    metric(metricName, props) {
+        return this._lambdaConstruct.metric(metricName, props);
+    }
+    metricDuration(props) {
+        return this._lambdaConstruct.metricDuration(props);
+    }
+    metricErrors(props) {
+        return this._lambdaConstruct.metricErrors(props);
+    }
+    metricInvocations(props) {
+        return this._lambdaConstruct.metricInvocations(props);
+    }
+    metricThrottles(props) {
+        return this._lambdaConstruct.metricThrottles(props);
+    }
+    // Additional IFunction implementation
+    grantInvokeLatestVersion(grantee) {
+        return this._lambdaConstruct.grantInvokeLatestVersion(grantee);
+    }
+    grantInvokeVersion(grantee, version) {
+        return this._lambdaConstruct.grantInvokeVersion(grantee, version);
+    }
+    get env() {
+        return {
+            account: Stack.of(this).account,
+            region: Stack.of(this).region,
+        };
+    }
+    get stack() {
+        return Stack.of(this);
+    }
+    applyRemovalPolicy(policy) {
+        this._lambdaConstruct.applyRemovalPolicy(policy);
         this._queue.applyRemovalPolicy(policy);
     }
     // IQueue implementation
@@ -736,5 +911,5 @@ class JaypieTraceSigningKeySecret extends JaypieEnvSecret {
     }
 }
 
-export { JaypieEnvSecret, JaypieHostedZone, JaypieMongoDbSecret, JaypieOpenAiSecret, JaypieQueuedLambda, JaypieSsoGroups, JaypieTraceSigningKeySecret, PermissionSetType };
+export { JaypieEnvSecret, JaypieHostedZone, JaypieLambda, JaypieMongoDbSecret, JaypieOpenAiSecret, JaypieQueuedLambda, JaypieSsoGroups, JaypieTraceSigningKeySecret, PermissionSetType };
 //# sourceMappingURL=index.js.map

package/dist/esm/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sources":["../../../src/JaypieEnvSecret.ts","../../../src/JaypieHostedZone.ts","../../../src/JaypieMongoDbSecret.ts","../../../src/JaypieOpenAiSecret.ts","../../../src/JaypieQueuedLambda.ts","../../../src/JaypieSsoGroups.ts","../../../src/JaypieTraceSigningKeySecret.ts"],"sourcesContent":["import { Construct } from \"constructs\";\nimport {\n  CfnOutput,\n  Fn,\n  SecretValue,\n  Tags,\n  RemovalPolicy,\n  Stack,\n} from \"aws-cdk-lib\";\nimport * as secretsmanager from \"aws-cdk-lib/aws-secretsmanager\";\nimport { CDK } from \"@jaypie/cdk\";\nimport {\n  ISecret,\n  ISecretAttachmentTarget,\n  RotationSchedule,\n  RotationScheduleOptions,\n} from \"aws-cdk-lib/aws-secretsmanager\";\nimport { IKey } from \"aws-cdk-lib/aws-kms\";\nimport {\n  Grant,\n  IGrantable,\n  PolicyStatement,\n  AddToResourcePolicyResult,\n} from \"aws-cdk-lib/aws-iam\";\n\n// It is a consumer if the environment is ephemeral\nfunction checkEnvIsConsumer(env = process.env): boolean {\n  return (\n    env.PROJECT_ENV === CDK.ENV.PERSONAL ||\n    !!env.CDK_ENV_PERSONAL ||\n    /** @deprecated */ env.PROJECT_ENV === \"ephemeral\" ||\n    /** @deprecated */ !!env.CDK_ENV_EPHEMERAL\n  );\n}\n\nfunction checkEnvIsProvider(env = process.env): boolean {\n  return env.PROJECT_ENV === CDK.ENV.SANDBOX;\n}\n\nfunction cleanName(name: string): string {\n  return name.replace(/[^a-zA-Z0-9:-]/g, \"\");\n}\n\nfunction exportEnvName(name: string, env = process.env): string {\n  let rawName;\n  if (checkEnvIsProvider(env)) {\n    rawName = `env-${env.PROJECT_ENV}-${env.PROJECT_KEY}-${name}`;\n    // Clean the entire name to only allow alphanumeric, colons, and hyphens\n    return cleanName(rawName);\n  } else {\n    if (checkEnvIsConsumer(env)) {\n      rawName = `env-${CDK.ENV.SANDBOX}-${env.PROJECT_KEY}-${name}`;\n    } else {\n      rawName = `env-${env.PROJECT_ENV}-${env.PROJECT_KEY}-${name}`;\n    }\n  }\n  return cleanName(rawName);\n}\n\nexport interface JaypieEnvSecretProps {\n  consumer?: boolean;\n  envKey?: string;\n  export?: string;\n  provider?: boolean;\n  roleTag?: string;\n  vendorTag?: string;\n  value?: string;\n}\n\nexport class JaypieEnvSecret extends Construct implements ISecret {\n  private readonly _envKey?: string;\n  private readonly _secret: secretsmanager.ISecret;\n\n  constructor(scope: Construct, id: string, props?: JaypieEnvSecretProps) {\n    super(scope, id);\n\n    const {\n      consumer = checkEnvIsConsumer(),\n      envKey,\n      export: exportParam,\n      provider = checkEnvIsProvider(),\n      roleTag,\n      vendorTag,\n      value,\n    } = props || {};\n\n    this._envKey = envKey;\n\n    let exportName;\n\n    if (!exportParam) {\n      exportName = exportEnvName(id);\n    } else {\n      exportName = cleanName(exportParam);\n    }\n\n    if (consumer) {\n      const secretName = Fn.importValue(exportName);\n      this._secret = secretsmanager.Secret.fromSecretNameV2(\n        this,\n        id,\n        secretName,\n      );\n\n      // Add CfnOutput for consumer secrets\n      new CfnOutput(this, `ConsumedName`, {\n        value: this._secret.secretName,\n      });\n    } else {\n      const secretValue =\n        envKey && process.env[envKey] ? process.env[envKey] : value;\n\n      const secretProps: secretsmanager.SecretProps = {\n        secretStringValue: secretValue\n          ? SecretValue.unsafePlainText(secretValue)\n          : undefined,\n      };\n\n      this._secret = new secretsmanager.Secret(this, id, secretProps);\n\n      if (roleTag) {\n        Tags.of(this._secret).add(CDK.TAG.ROLE, roleTag);\n      }\n\n      if (vendorTag) {\n        Tags.of(this._secret).add(CDK.TAG.VENDOR, vendorTag);\n      }\n\n      if (provider) {\n        new CfnOutput(this, `ProvidedName`, {\n          value: this._secret.secretName,\n          exportName,\n        });\n      } else {\n        new CfnOutput(this, `CreatedName`, {\n          value: this._secret.secretName,\n        });\n      }\n    }\n  }\n\n  // IResource implementation\n  public get stack(): Stack {\n    return Stack.of(this);\n  }\n\n  public get env(): { account: string; region: string } {\n    return {\n      account: Stack.of(this).account,\n      region: Stack.of(this).region,\n    };\n  }\n\n  public applyRemovalPolicy(policy: RemovalPolicy): void {\n    this._secret.applyRemovalPolicy(policy);\n  }\n\n  // ISecret implementation\n  public get secretArn(): string {\n    return this._secret.secretArn;\n  }\n\n  public get secretName(): string {\n    return this._secret.secretName;\n  }\n\n  public get secretFullArn(): string | undefined {\n    return this._secret.secretFullArn;\n  }\n\n  public get encryptionKey(): IKey | undefined {\n    return this._secret.encryptionKey;\n  }\n\n  public get secretValue(): SecretValue {\n    return this._secret.secretValue;\n  }\n\n  public secretValueFromJson(key: string): SecretValue {\n    return this._secret.secretValueFromJson(key);\n  }\n\n  public grantRead(grantee: IGrantable, versionStages?: string[]): Grant {\n    return this._secret.grantRead(grantee, versionStages);\n  }\n\n  public grantWrite(grantee: IGrantable): Grant {\n    return this._secret.grantWrite(grantee);\n  }\n\n  public addRotationSchedule(\n    id: string,\n    options: RotationScheduleOptions,\n  ): RotationSchedule {\n    return this._secret.addRotationSchedule(id, options);\n  }\n\n  public addToResourcePolicy(\n    statement: PolicyStatement,\n  ): AddToResourcePolicyResult {\n    return this._secret.addToResourcePolicy(statement);\n  }\n\n  public denyAccountRootDelete(): void {\n    this._secret.denyAccountRootDelete();\n  }\n\n  public attach(target: ISecretAttachmentTarget): ISecret {\n    return this._secret.attach(target);\n  }\n\n  public get envKey(): string | undefined {\n    return this._envKey;\n  }\n}\n","import { CDK } from \"@jaypie/cdk\";\nimport * as cdk from \"aws-cdk-lib\";\nimport { ServicePrincipal } from \"aws-cdk-lib/aws-iam\";\nimport {\n  LogGroup,\n  FilterPattern,\n  RetentionDays,\n  ILogGroup,\n} from \"aws-cdk-lib/aws-logs\";\nimport { HostedZone, IHostedZone } from \"aws-cdk-lib/aws-route53\";\nimport { Construct } from \"constructs\";\nimport { LambdaDestination } from \"aws-cdk-lib/aws-logs-destinations\";\n\nconst SERVICE = {\n  ROUTE53: \"route53.amazonaws.com\",\n} as const;\n\ninterface JaypieHostedZoneProps {\n  /**\n   * The domain name for the hosted zone\n   */\n  zoneName: string;\n  /**\n   * The service tag value\n   * @default CDK.SERVICE.INFRASTRUCTURE\n   */\n  service?: string;\n  /**\n   * Optional project tag value\n   */\n  project?: string;\n  /**\n   * Optional log destination\n   */\n  destination?: LambdaDestination;\n}\n\nexport class JaypieHostedZone extends Construct {\n  public readonly hostedZone: IHostedZone;\n  public readonly logGroup: ILogGroup;\n\n  /**\n   * Create a new hosted zone with query logging\n   */\n  constructor(scope: Construct, id: string, props: JaypieHostedZoneProps) {\n    super(scope, id);\n\n    const { destination, zoneName, project } = props;\n    const service = props.service || CDK.SERVICE.INFRASTRUCTURE;\n\n    // Create the log group\n    this.logGroup = new LogGroup(this, \"LogGroup\", {\n      logGroupName: process.env.PROJECT_NONCE\n        ? `/aws/route53/${zoneName}-${process.env.PROJECT_NONCE}`\n        : `/aws/route53/${zoneName}`,\n      retention: RetentionDays.ONE_WEEK,\n    });\n\n    // Add tags\n    cdk.Tags.of(this.logGroup).add(CDK.TAG.SERVICE, service);\n    cdk.Tags.of(this.logGroup).add(CDK.TAG.ROLE, CDK.ROLE.NETWORKING);\n    if (project) {\n      cdk.Tags.of(this.logGroup).add(CDK.TAG.PROJECT, project);\n    }\n\n    // Grant Route 53 permissions to write to the log group\n    this.logGroup.grantWrite(new ServicePrincipal(SERVICE.ROUTE53));\n\n    // Add destination if provided\n    if (destination) {\n      this.logGroup.addSubscriptionFilter(\"DatadogLambdaDestination\", {\n        destination,\n        filterPattern: FilterPattern.allEvents(),\n      });\n    }\n\n    // Create the hosted zone\n    this.hostedZone = new HostedZone(this, \"HostedZone\", {\n      queryLogsLogGroupArn: this.logGroup.logGroupArn,\n      zoneName,\n    });\n\n    // Add tags\n    cdk.Tags.of(this.hostedZone).add(CDK.TAG.SERVICE, service);\n    cdk.Tags.of(this.hostedZone).add(CDK.TAG.ROLE, CDK.ROLE.NETWORKING);\n    if (project) {\n      cdk.Tags.of(this.hostedZone).add(CDK.TAG.PROJECT, project);\n    }\n  }\n}\n","import { Construct } from \"constructs\";\nimport { CDK } from \"@jaypie/cdk\";\nimport { JaypieEnvSecret, JaypieEnvSecretProps } from \"./JaypieEnvSecret\";\n\nexport class JaypieMongoDbSecret extends JaypieEnvSecret {\n  constructor(\n    scope: Construct,\n    id = \"MongoConnectionString\",\n    props?: JaypieEnvSecretProps,\n  ) {\n    const defaultProps: JaypieEnvSecretProps = {\n      envKey: \"MONGODB_URI\",\n      roleTag: CDK.ROLE.STORAGE,\n      vendorTag: CDK.VENDOR.MONGODB,\n      ...props,\n    };\n\n    super(scope, id, defaultProps);\n  }\n}\n","import { Construct } from \"constructs\";\nimport { CDK } from \"@jaypie/cdk\";\nimport { JaypieEnvSecret, JaypieEnvSecretProps } from \"./JaypieEnvSecret\";\n\nexport class JaypieOpenAiSecret extends JaypieEnvSecret {\n  constructor(\n    scope: Construct,\n    id = \"OpenAiApiKey\",\n    props?: JaypieEnvSecretProps,\n  ) {\n    const defaultProps: JaypieEnvSecretProps = {\n      envKey: \"OPENAI_API_KEY\",\n      roleTag: CDK.ROLE.PROCESSING,\n      vendorTag: CDK.VENDOR.OPENAI,\n      ...props,\n    };\n\n    super(scope, id, defaultProps);\n  }\n}\n","import { Construct } from \"constructs\";\nimport { Duration, Tags, Stack, RemovalPolicy } from \"aws-cdk-lib\";\nimport * as lambda from \"aws-cdk-lib/aws-lambda\";\nimport * as sqs from \"aws-cdk-lib/aws-sqs\";\nimport { CDK } from \"@jaypie/cdk\";\nimport * as lambdaEventSources from \"aws-cdk-lib/aws-lambda-event-sources\";\nimport * as iam from \"aws-cdk-lib/aws-iam\";\nimport * as cloudwatch from \"aws-cdk-lib/aws-cloudwatch\";\nimport * as kms from \"aws-cdk-lib/aws-kms\";\nimport * as secretsmanager from \"aws-cdk-lib/aws-secretsmanager\";\nimport { JaypieEnvSecret } from \"./JaypieEnvSecret.js\";\n\nexport interface JaypieQueuedLambdaProps {\n  batchSize?: number;\n  code: lambda.Code | string;\n  environment?: { [key: string]: string };\n  envSecrets?: { [key: string]: secretsmanager.ISecret };\n  fifo?: boolean;\n  handler: string;\n  layers?: lambda.ILayerVersion[];\n  logRetention?: number;\n  memorySize?: number;\n  paramsAndSecrets?: lambda.ParamsAndSecretsLayerVersion;\n  reservedConcurrentExecutions?: number;\n  roleTag?: string;\n  runtime?: lambda.Runtime;\n  secrets?: JaypieEnvSecret[];\n  timeout?: Duration | number;\n  vendorTag?: string;\n  visibilityTimeout?: Duration | number;\n}\n\nexport class JaypieQueuedLambda\n  extends Construct\n  implements lambda.IFunction, sqs.IQueue\n{\n  private readonly _queue: sqs.Queue;\n  private readonly _lambda: lambda.Function;\n  private readonly _code: lambda.Code;\n\n  constructor(scope: Construct, id: string, props: JaypieQueuedLambdaProps) {\n    super(scope, id);\n\n    const {\n      batchSize = 1,\n      code,\n      environment = {},\n      envSecrets = {},\n      fifo = true,\n      handler = \"index.handler\",\n      layers = [],\n      logRetention = CDK.LAMBDA.LOG_RETENTION,\n      memorySize = CDK.LAMBDA.MEMORY_SIZE,\n      paramsAndSecrets,\n      reservedConcurrentExecutions,\n      roleTag,\n      runtime = lambda.Runtime.NODEJS_20_X,\n      secrets = [],\n      timeout = Duration.seconds(CDK.DURATION.LAMBDA_WORKER),\n      vendorTag,\n      visibilityTimeout = Duration.seconds(CDK.DURATION.LAMBDA_WORKER),\n    } = props;\n\n    this._code = typeof code === \"string\" ? lambda.Code.fromAsset(code) : code;\n\n    // Create SQS Queue\n    this._queue = new sqs.Queue(this, \"Queue\", {\n      fifo,\n      visibilityTimeout:\n        typeof visibilityTimeout === \"number\"\n          ? Duration.seconds(visibilityTimeout)\n          : visibilityTimeout,\n    });\n    if (roleTag) {\n      Tags.of(this._queue).add(CDK.TAG.ROLE, roleTag);\n    }\n    if (vendorTag) {\n      Tags.of(this._queue).add(CDK.TAG.VENDOR, vendorTag);\n    }\n\n    // Process secrets environment variables\n    const secretsEnvironment = Object.entries(envSecrets).reduce(\n      (acc, [key, secret]) => ({\n        ...acc,\n        [`SECRET_${key}`]: secret.secretName,\n      }),\n      {},\n    );\n\n    // Process JaypieEnvSecret array\n    const jaypieSecretsEnvironment = secrets.reduce((acc, secret) => {\n      if (secret.envKey) {\n        return {\n          ...acc,\n          [`SECRET_${secret.envKey}`]: secret.secretName,\n        };\n      }\n      return acc;\n    }, {});\n\n    // Create Lambda Function\n    this._lambda = new lambda.Function(this, \"Function\", {\n      code: this._code,\n      environment: {\n        CDK_ENV_QUEUE_URL: this._queue.queueUrl,\n        ...environment,\n        ...secretsEnvironment,\n        ...jaypieSecretsEnvironment,\n      },\n      handler,\n      layers,\n      logRetention,\n      memorySize,\n      paramsAndSecrets,\n      reservedConcurrentExecutions,\n      runtime,\n      timeout:\n        typeof timeout === \"number\" ? Duration.seconds(timeout) : timeout,\n    });\n\n    // Grant secret read permissions\n    Object.values(envSecrets).forEach((secret) => {\n      secret.grantRead(this._lambda);\n    });\n\n    // Grant read permissions for JaypieEnvSecrets\n    secrets.forEach((secret) => {\n      secret.grantRead(this);\n      secret.grantRead(this._lambda);\n    });\n\n    this._queue.grantConsumeMessages(this._lambda);\n    this._queue.grantSendMessages(this._lambda);\n    this._lambda.addEventSource(\n      new lambdaEventSources.SqsEventSource(this._queue, {\n        batchSize,\n      }),\n    );\n    if (roleTag) {\n      Tags.of(this._lambda).add(CDK.TAG.ROLE, roleTag);\n    }\n    if (vendorTag) {\n      Tags.of(this._lambda).add(CDK.TAG.VENDOR, vendorTag);\n    }\n  }\n\n  // Public accessors\n  public get queue(): sqs.Queue {\n    return this._queue;\n  }\n\n  public get lambda(): lambda.Function {\n    return this._lambda;\n  }\n\n  public get code(): lambda.Code {\n    return this._code;\n  }\n\n  // IFunction implementation\n  public get functionArn(): string {\n    return this._lambda.functionArn;\n  }\n\n  public get functionName(): string {\n    return this._lambda.functionName;\n  }\n\n  public get grantPrincipal(): import(\"aws-cdk-lib/aws-iam\").IPrincipal {\n    return this._lambda.grantPrincipal;\n  }\n\n  public get role(): import(\"aws-cdk-lib/aws-iam\").IRole | undefined {\n    return this._lambda.role;\n  }\n\n  public get architecture(): lambda.Architecture {\n    return this._lambda.architecture;\n  }\n\n  public get connections(): import(\"aws-cdk-lib/aws-ec2\").Connections {\n    return this._lambda.connections;\n  }\n\n  public get isBoundToVpc(): boolean {\n    return this._lambda.isBoundToVpc;\n  }\n\n  public get latestVersion(): lambda.IVersion {\n    return this._lambda.latestVersion;\n  }\n\n  public get permissionsNode(): import(\"constructs\").Node {\n    return this._lambda.permissionsNode;\n  }\n\n  public get resourceArnsForGrantInvoke(): string[] {\n    return this._lambda.resourceArnsForGrantInvoke;\n  }\n\n  public addEventSource(source: lambda.IEventSource): void {\n    this._lambda.addEventSource(source);\n  }\n\n  public addEventSourceMapping(\n    id: string,\n    options: lambda.EventSourceMappingOptions,\n  ): lambda.EventSourceMapping {\n    return this._lambda.addEventSourceMapping(id, options);\n  }\n\n  public addFunctionUrl(\n    options?: lambda.FunctionUrlOptions,\n  ): lambda.FunctionUrl {\n    return this._lambda.addFunctionUrl(options);\n  }\n\n  public addPermission(id: string, permission: lambda.Permission): void {\n    this._lambda.addPermission(id, permission);\n  }\n\n  public addToRolePolicy(\n    statement: import(\"aws-cdk-lib/aws-iam\").PolicyStatement,\n  ): void {\n    this._lambda.addToRolePolicy(statement);\n  }\n\n  public configureAsyncInvoke(options: lambda.EventInvokeConfigOptions): void {\n    this._lambda.configureAsyncInvoke(options);\n  }\n\n  public grantInvoke(\n    grantee: import(\"aws-cdk-lib/aws-iam\").IGrantable,\n  ): import(\"aws-cdk-lib/aws-iam\").Grant {\n    return this._lambda.grantInvoke(grantee);\n  }\n\n  public grantInvokeCompositePrincipal(\n    compositePrincipal: import(\"aws-cdk-lib/aws-iam\").CompositePrincipal,\n  ): import(\"aws-cdk-lib/aws-iam\").Grant[] {\n    return this._lambda.grantInvokeCompositePrincipal(compositePrincipal);\n  }\n\n  public grantInvokeUrl(\n    grantee: import(\"aws-cdk-lib/aws-iam\").IGrantable,\n  ): import(\"aws-cdk-lib/aws-iam\").Grant {\n    return this._lambda.grantInvokeUrl(grantee);\n  }\n\n  public metric(\n    metricName: string,\n    props?: import(\"aws-cdk-lib/aws-cloudwatch\").MetricOptions,\n  ): import(\"aws-cdk-lib/aws-cloudwatch\").Metric {\n    return this._lambda.metric(metricName, props);\n  }\n\n  public metricDuration(\n    props?: import(\"aws-cdk-lib/aws-cloudwatch\").MetricOptions,\n  ): import(\"aws-cdk-lib/aws-cloudwatch\").Metric {\n    return this._lambda.metricDuration(props);\n  }\n\n  public metricErrors(\n    props?: import(\"aws-cdk-lib/aws-cloudwatch\").MetricOptions,\n  ): import(\"aws-cdk-lib/aws-cloudwatch\").Metric {\n    return this._lambda.metricErrors(props);\n  }\n\n  public metricInvocations(\n    props?: import(\"aws-cdk-lib/aws-cloudwatch\").MetricOptions,\n  ): import(\"aws-cdk-lib/aws-cloudwatch\").Metric {\n    return this._lambda.metricInvocations(props);\n  }\n\n  public metricThrottles(\n    props?: import(\"aws-cdk-lib/aws-cloudwatch\").MetricOptions,\n  ): import(\"aws-cdk-lib/aws-cloudwatch\").Metric {\n    return this._lambda.metricThrottles(props);\n  }\n\n  // Additional IFunction implementation\n  public grantInvokeLatestVersion(grantee: iam.IGrantable): iam.Grant {\n    return this._lambda.grantInvokeLatestVersion(grantee);\n  }\n\n  public grantInvokeVersion(\n    grantee: iam.IGrantable,\n    version: lambda.Version,\n  ): iam.Grant {\n    return this._lambda.grantInvokeVersion(grantee, version);\n  }\n\n  public get env() {\n    return {\n      account: Stack.of(this).account,\n      region: Stack.of(this).region,\n    };\n  }\n\n  public get stack(): Stack {\n    return this._lambda.stack;\n  }\n\n  public applyRemovalPolicy(policy: RemovalPolicy): void {\n    this._lambda.applyRemovalPolicy(policy);\n    this._queue.applyRemovalPolicy(policy);\n  }\n\n  // IQueue implementation\n  public get fifo(): boolean {\n    return this._queue.fifo;\n  }\n\n  public get queueArn(): string {\n    return this._queue.queueArn;\n  }\n\n  public get queueName(): string {\n    return this._queue.queueName;\n  }\n\n  public get queueUrl(): string {\n    return this._queue.queueUrl;\n  }\n\n  public get encryptionMasterKey(): kms.IKey | undefined {\n    return this._queue.encryptionMasterKey;\n  }\n\n  public addToResourcePolicy(\n    statement: iam.PolicyStatement,\n  ): iam.AddToResourcePolicyResult {\n    return this._queue.addToResourcePolicy(statement);\n  }\n\n  public grant(grantee: iam.IGrantable, ...actions: string[]): iam.Grant {\n    return this._queue.grant(grantee, ...actions);\n  }\n\n  public grantConsumeMessages(grantee: iam.IGrantable): iam.Grant {\n    return this._queue.grantConsumeMessages(grantee);\n  }\n\n  public grantPurge(grantee: iam.IGrantable): iam.Grant {\n    return this._queue.grantPurge(grantee);\n  }\n\n  public grantSendMessages(grantee: iam.IGrantable): iam.Grant {\n    return this._queue.grantSendMessages(grantee);\n  }\n\n  // Queue metrics\n  public metricApproximateAgeOfOldestMessage(\n    props?: cloudwatch.MetricOptions,\n  ): cloudwatch.Metric {\n    return this._queue.metricApproximateAgeOfOldestMessage(props);\n  }\n\n  public metricApproximateNumberOfMessagesDelayed(\n    props?: cloudwatch.MetricOptions,\n  ): cloudwatch.Metric {\n    return this._queue.metricApproximateNumberOfMessagesDelayed(props);\n  }\n\n  public metricApproximateNumberOfMessagesNotVisible(\n    props?: cloudwatch.MetricOptions,\n  ): cloudwatch.Metric {\n    return this._queue.metricApproximateNumberOfMessagesNotVisible(props);\n  }\n\n  public metricApproximateNumberOfMessagesVisible(\n    props?: cloudwatch.MetricOptions,\n  ): cloudwatch.Metric {\n    return this._queue.metricApproximateNumberOfMessagesVisible(props);\n  }\n\n  public metricNumberOfEmptyReceives(\n    props?: cloudwatch.MetricOptions,\n  ): cloudwatch.Metric {\n    return this._queue.metricNumberOfEmptyReceives(props);\n  }\n\n  public metricNumberOfMessagesDeleted(\n    props?: cloudwatch.MetricOptions,\n  ): cloudwatch.Metric {\n    return this._queue.metricNumberOfMessagesDeleted(props);\n  }\n\n  public metricNumberOfMessagesReceived(\n    props?: cloudwatch.MetricOptions,\n  ): cloudwatch.Metric {\n    return this._queue.metricNumberOfMessagesReceived(props);\n  }\n\n  public metricNumberOfMessagesSent(\n    props?: cloudwatch.MetricOptions,\n  ): cloudwatch.Metric {\n    return this._queue.metricNumberOfMessagesSent(props);\n  }\n\n  public metricSentMessageSize(\n    props?: cloudwatch.MetricOptions,\n  ): cloudwatch.Metric {\n    return this._queue.metricSentMessageSize(props);\n  }\n}\n","import { Construct } from \"constructs\";\nimport { Tags, Duration } from \"aws-cdk-lib\";\nimport * as sso from \"aws-cdk-lib/aws-sso\";\nimport { CDK } from \"@jaypie/cdk\";\n\n/**\n * Account categories for SSO group assignments\n */\nexport interface JaypieSsoAccountMap {\n  development: string[];\n  management: string[];\n  operations: string[];\n  production: string[];\n  sandbox: string[];\n  security: string[];\n  stage: string[];\n}\n\n/**\n * Mapping of group types to Google Workspace group GUIDs\n */\nexport interface JaypieSsoGroupMap {\n  administrators: string;\n  analysts: string;\n  developers: string;\n}\n\n/**\n * IAM Policy Statement structure for inline policies\n */\nexport interface PolicyStatement {\n  Effect: \"Allow\" | \"Deny\";\n  Action: string[] | string;\n  Resource: string[] | string;\n  Condition?: Record<string, unknown>;\n}\n\n/**\n * Properties for the JaypieSsoGroups construct\n */\nexport interface JaypieSsoGroupsProps {\n  /**\n   * ARN of the IAM Identity Center instance\n   */\n  instanceArn: string;\n\n  /**\n   * Mapping of account categories to AWS account IDs\n   */\n  accountMap: JaypieSsoAccountMap;\n\n  /**\n   * Mapping of group types to Google Workspace group GUIDs\n   */\n  groupMap: JaypieSsoGroupMap;\n\n  /**\n   * Additional inline policy statements to append to each group's permission set\n   * Each group can have its own set of policy statements that will be merged\n   * with the default policies.\n   */\n  inlinePolicyStatements?: {\n    administrators?: PolicyStatement[];\n    analysts?: PolicyStatement[];\n    developers?: PolicyStatement[];\n  };\n}\n\n/**\n * Permission set types with corresponding AWS managed policies\n */\nexport enum PermissionSetType {\n  ADMINISTRATOR = \"Administrator\",\n  ANALYST = \"Analyst\",\n  DEVELOPER = \"Developer\",\n}\n\n/**\n * Construct to simplify AWS SSO group management.\n * This construct encapsulates the complexity of creating permission sets\n * and assigning them to groups across multiple AWS accounts.\n */\nexport class JaypieSsoGroups extends Construct {\n  private readonly permissionSets: Record<\n    PermissionSetType,\n    sso.CfnPermissionSet\n  > = {} as Record<PermissionSetType, sso.CfnPermissionSet>;\n  private readonly instanceArn: string;\n  private readonly props: JaypieSsoGroupsProps;\n\n  constructor(scope: Construct, id: string, props: JaypieSsoGroupsProps) {\n    super(scope, id);\n\n    this.instanceArn = props.instanceArn;\n    this.props = props;\n\n    // Create the permission sets\n    this.createAdministratorPermissionSet();\n    this.createAnalystPermissionSet();\n    this.createDeveloperPermissionSet();\n\n    // Create the assignments\n    this.createPermissionSetAssignments(props);\n  }\n\n  /**\n   * Creates the Administrator permission set with AdministratorAccess policy\n   * and billing access\n   */\n  private createAdministratorPermissionSet(): void {\n    const defaultInlinePolicy = {\n      Version: \"2012-10-17\",\n      Statement: [\n        {\n          Effect: \"Allow\",\n          Action: [\n            \"aws-portal:*\",\n            \"budgets:*\",\n            \"ce:*\",\n            \"cost-optimization-hub:*\",\n          ],\n          Resource: \"*\",\n        },\n      ],\n    };\n\n    // Merge with any additional policy statements provided for administrators\n    const mergedPolicy = this.mergeInlinePolicies(\n      defaultInlinePolicy,\n      this.props?.inlinePolicyStatements?.administrators,\n    );\n\n    const permissionSet = new sso.CfnPermissionSet(\n      this,\n      \"AdministratorPermissionSet\",\n      {\n        instanceArn: this.instanceArn,\n        name: PermissionSetType.ADMINISTRATOR,\n        description:\n          \"Full administrative access to all AWS services and resources\",\n        sessionDuration: Duration.hours(8).toIsoString(),\n        managedPolicies: [\"arn:aws:iam::aws:policy/AdministratorAccess\"],\n        inlinePolicy: mergedPolicy,\n      },\n    );\n\n    Tags.of(permissionSet).add(CDK.TAG.SERVICE, CDK.SERVICE.SSO);\n\n    this.permissionSets[PermissionSetType.ADMINISTRATOR] = permissionSet;\n  }\n\n  /**\n   * Creates the Analyst permission set with ReadOnlyAccess policy\n   * and limited write access\n   */\n  private createAnalystPermissionSet(): void {\n    const defaultInlinePolicy = {\n      Version: \"2012-10-17\",\n      Statement: [\n        {\n          Effect: \"Allow\",\n          Action: [\n            \"aws-portal:ViewBilling\",\n            \"aws-portal:ViewAccount\",\n            \"budgets:ViewBudget\",\n            \"cloudwatch:PutDashboard\",\n            \"cloudwatch:PutMetricData\",\n            \"s3:PutObject\",\n            \"s3:GetObject\",\n            \"s3:ListBucket\",\n          ],\n          Resource: \"*\",\n        },\n      ],\n    };\n\n    // Merge with any additional policy statements provided for analysts\n    const mergedPolicy = this.mergeInlinePolicies(\n      defaultInlinePolicy,\n      this.props?.inlinePolicyStatements?.analysts,\n    );\n\n    const permissionSet = new sso.CfnPermissionSet(\n      this,\n      \"AnalystPermissionSet\",\n      {\n        instanceArn: this.instanceArn,\n        name: PermissionSetType.ANALYST,\n        description:\n          \"Read-only access with billing visibility and limited write access\",\n        sessionDuration: Duration.hours(4).toIsoString(),\n        managedPolicies: [\"arn:aws:iam::aws:policy/ReadOnlyAccess\"],\n        inlinePolicy: mergedPolicy,\n      },\n    );\n\n    Tags.of(permissionSet).add(CDK.TAG.SERVICE, CDK.SERVICE.SSO);\n\n    this.permissionSets[PermissionSetType.ANALYST] = permissionSet;\n  }\n\n  /**\n   * Creates the Developer permission set with SystemAdministrator policy\n   * and expanded write access\n   */\n  private createDeveloperPermissionSet(): void {\n    const defaultInlinePolicy = {\n      Version: \"2012-10-17\",\n      Statement: [\n        {\n          Effect: \"Allow\",\n          Action: [\n            \"cloudwatch:*\",\n            \"logs:*\",\n            \"lambda:*\",\n            \"apigateway:*\",\n            \"dynamodb:*\",\n            \"s3:*\",\n            \"sns:*\",\n            \"sqs:*\",\n            \"events:*\",\n            \"ecr:*\",\n            \"ecs:*\",\n            \"codebuild:*\",\n          ],\n          Resource: \"*\",\n        },\n        {\n          Effect: \"Deny\",\n          Action: [\n            \"iam:*User*\",\n            \"iam:*Role*\",\n            \"iam:*Policy*\",\n            \"organizations:*\",\n            \"account:*\",\n          ],\n          Resource: \"*\",\n        },\n      ],\n    };\n\n    // Merge with any additional policy statements provided for developers\n    const mergedPolicy = this.mergeInlinePolicies(\n      defaultInlinePolicy,\n      this.props?.inlinePolicyStatements?.developers,\n    );\n\n    const permissionSet = new sso.CfnPermissionSet(\n      this,\n      \"DeveloperPermissionSet\",\n      {\n        instanceArn: this.instanceArn,\n        name: PermissionSetType.DEVELOPER,\n        description:\n          \"System administrator access with expanded write permissions\",\n        sessionDuration: Duration.hours(8).toIsoString(),\n        managedPolicies: [\n          \"arn:aws:iam::aws:policy/job-function/SystemAdministrator\",\n        ],\n        inlinePolicy: mergedPolicy,\n      },\n    );\n\n    Tags.of(permissionSet).add(CDK.TAG.SERVICE, CDK.SERVICE.SSO);\n\n    this.permissionSets[PermissionSetType.DEVELOPER] = permissionSet;\n  }\n\n  /**\n   * Gets the permission set for the specified type\n   */\n  public getPermissionSet(type: PermissionSetType): sso.CfnPermissionSet {\n    return this.permissionSets[type];\n  }\n\n  /**\n   * Merges default inline policies with additional user-provided policy statements\n   *\n   * @param defaultPolicy - The default policy object with Version and Statement properties\n   * @param additionalStatements - Optional additional policy statements to merge\n   * @returns The merged policy object\n   */\n  private mergeInlinePolicies(\n    defaultPolicy: Record<string, unknown>,\n    additionalStatements?: PolicyStatement[],\n  ): Record<string, unknown> {\n    if (!additionalStatements || additionalStatements.length === 0) {\n      return defaultPolicy;\n    }\n\n    // Create a deep copy of the default policy to avoid modifying the original\n    const mergedPolicy = JSON.parse(JSON.stringify(defaultPolicy));\n\n    // Add the additional statements to the existing statements\n    mergedPolicy.Statement = [\n      ...mergedPolicy.Statement,\n      ...additionalStatements,\n    ];\n\n    return mergedPolicy;\n  }\n\n  /**\n   * Creates assignments between permission sets, groups, and accounts\n   * based on the provided configuration\n   */\n  private createPermissionSetAssignments(props: JaypieSsoGroupsProps): void {\n    // Administrator assignments\n    this.assignAdministratorPermissions(props);\n\n    // Analyst assignments\n    this.assignAnalystPermissions(props);\n\n    // Developer assignments\n    this.assignDeveloperPermissions(props);\n  }\n\n  /**\n   * Assigns Administrator permissions to appropriate accounts\n   */\n  private assignAdministratorPermissions(props: JaypieSsoGroupsProps): void {\n    const administratorGroup = props.groupMap.administrators;\n    const administratorPermissionSet =\n      this.permissionSets[PermissionSetType.ADMINISTRATOR];\n\n    // Administrators get access to all accounts\n    const allAccounts = [\n      ...props.accountMap.development,\n      ...props.accountMap.management,\n      ...props.accountMap.operations,\n      ...props.accountMap.production,\n      ...props.accountMap.sandbox,\n      ...props.accountMap.security,\n      ...props.accountMap.stage,\n    ];\n\n    // Create assignments for each account\n    allAccounts.forEach((accountId, index) => {\n      const assignment = new sso.CfnAssignment(\n        this,\n        `AdministratorAssignment${index}`,\n        {\n          instanceArn: this.instanceArn,\n          permissionSetArn: administratorPermissionSet.attrPermissionSetArn,\n          principalId: administratorGroup,\n          principalType: \"GROUP\",\n          targetId: accountId,\n          targetType: \"AWS_ACCOUNT\",\n        },\n      );\n\n      Tags.of(assignment).add(CDK.TAG.SERVICE, CDK.SERVICE.SSO);\n      Tags.of(assignment).add(\"Group\", \"administrators\");\n    });\n  }\n\n  /**\n   * Assigns Analyst permissions to appropriate accounts\n   */\n  private assignAnalystPermissions(props: JaypieSsoGroupsProps): void {\n    const analystGroup = props.groupMap.analysts;\n    const analystPermissionSet = this.permissionSets[PermissionSetType.ANALYST];\n\n    // Analysts get access to development, management, sandbox, and stage accounts\n    const analystAccounts = [\n      ...props.accountMap.development,\n      ...props.accountMap.management,\n      ...props.accountMap.sandbox,\n      ...props.accountMap.stage,\n    ];\n\n    // Create assignments for each account\n    analystAccounts.forEach((accountId, index) => {\n      const assignment = new sso.CfnAssignment(\n        this,\n        `AnalystAssignment${index}`,\n        {\n          instanceArn: this.instanceArn,\n          permissionSetArn: analystPermissionSet.attrPermissionSetArn,\n          principalId: analystGroup,\n          principalType: \"GROUP\",\n          targetId: accountId,\n          targetType: \"AWS_ACCOUNT\",\n        },\n      );\n\n      Tags.of(assignment).add(CDK.TAG.SERVICE, CDK.SERVICE.SSO);\n      Tags.of(assignment).add(\"Group\", \"analysts\");\n    });\n  }\n\n  /**\n   * Assigns Developer permissions to appropriate accounts\n   */\n  private assignDeveloperPermissions(props: JaypieSsoGroupsProps): void {\n    const developerGroup = props.groupMap.developers;\n    const developerPermissionSet =\n      this.permissionSets[PermissionSetType.DEVELOPER];\n\n    // Developers get access to development, sandbox, and stage accounts\n    const developerAccounts = [\n      ...props.accountMap.development,\n      ...props.accountMap.sandbox,\n      ...props.accountMap.stage,\n    ];\n\n    // Create assignments for each account\n    developerAccounts.forEach((accountId, index) => {\n      const assignment = new sso.CfnAssignment(\n        this,\n        `DeveloperAssignment${index}`,\n        {\n          instanceArn: this.instanceArn,\n          permissionSetArn: developerPermissionSet.attrPermissionSetArn,\n          principalId: developerGroup,\n          principalType: \"GROUP\",\n          targetId: accountId,\n          targetType: \"AWS_ACCOUNT\",\n        },\n      );\n\n      Tags.of(assignment).add(CDK.TAG.SERVICE, CDK.SERVICE.SSO);\n      Tags.of(assignment).add(\"Group\", \"developers\");\n    });\n  }\n}\n","import { Construct } from \"constructs\";\nimport { CDK } from \"@jaypie/cdk\";\nimport { JaypieEnvSecret, JaypieEnvSecretProps } from \"./JaypieEnvSecret\";\n\nexport class JaypieTraceSigningKeySecret extends JaypieEnvSecret {\n  constructor(\n    scope: Construct,\n    id = \"TraceSigningKey\",\n    props?: JaypieEnvSecretProps,\n  ) {\n    const defaultProps: JaypieEnvSecretProps = {\n      envKey: \"TRACE_SIGNING_KEY\",\n      roleTag: CDK.ROLE.API,\n      vendorTag: CDK.VENDOR.KNOWTRACE,\n      ...props,\n    };\n\n    super(scope, id, defaultProps);\n  }\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;AAyBA;AACA,SAAS,kBAAkB,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,EAAA;IAC3C,QACE,GAAG,CAAC,WAAW,KAAK,GAAG,CAAC,GAAG,CAAC,QAAQ;QACpC,CAAC,CAAC,GAAG,CAAC,gBAAgB;AACtB,2BAAmB,GAAG,CAAC,WAAW,KAAK,WAAW;AAClD,2BAAmB,CAAC,CAAC,GAAG,CAAC,iBAAiB;AAE9C;AAEA,SAAS,kBAAkB,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,EAAA;IAC3C,OAAO,GAAG,CAAC,WAAW,KAAK,GAAG,CAAC,GAAG,CAAC,OAAO;AAC5C;AAEA,SAAS,SAAS,CAAC,IAAY,EAAA;IAC7B,OAAO,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC;AAC5C;AAEA,SAAS,aAAa,CAAC,IAAY,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,EAAA;AACpD,IAAA,IAAI,OAAO;AACX,IAAA,IAAI,kBAAkB,CAAC,GAAG,CAAC,EAAE;AAC3B,QAAA,OAAO,GAAG,CAAA,IAAA,EAAO,GAAG,CAAC,WAAW,CAAA,CAAA,EAAI,GAAG,CAAC,WAAW,CAAA,CAAA,EAAI,IAAI,CAAA,CAAE;;AAE7D,QAAA,OAAO,SAAS,CAAC,OAAO,CAAC;;SACpB;AACL,QAAA,IAAI,kBAAkB,CAAC,GAAG,CAAC,EAAE;AAC3B,YAAA,OAAO,GAAG,CAAA,IAAA,EAAO,GAAG,CAAC,GAAG,CAAC,OAAO,CAAI,CAAA,EAAA,GAAG,CAAC,WAAW,CAAI,CAAA,EAAA,IAAI,EAAE;;aACxD;AACL,YAAA,OAAO,GAAG,CAAA,IAAA,EAAO,GAAG,CAAC,WAAW,CAAA,CAAA,EAAI,GAAG,CAAC,WAAW,CAAA,CAAA,EAAI,IAAI,CAAA,CAAE;;;AAGjE,IAAA,OAAO,SAAS,CAAC,OAAO,CAAC;AAC3B;AAYM,MAAO,eAAgB,SAAQ,SAAS,CAAA;AAI5C,IAAA,WAAA,CAAY,KAAgB,EAAE,EAAU,EAAE,KAA4B,EAAA;AACpE,QAAA,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAEhB,MAAM,EACJ,QAAQ,GAAG,kBAAkB,EAAE,EAC/B,MAAM,EACN,MAAM,EAAE,WAAW,EACnB,QAAQ,GAAG,kBAAkB,EAAE,EAC/B,OAAO,EACP,SAAS,EACT,KAAK,GACN,GAAG,KAAK,IAAI,EAAE;AAEf,QAAA,IAAI,CAAC,OAAO,GAAG,MAAM;AAErB,QAAA,IAAI,UAAU;QAEd,IAAI,CAAC,WAAW,EAAE;AAChB,YAAA,UAAU,GAAG,aAAa,CAAC,EAAE,CAAC;;aACzB;AACL,YAAA,UAAU,GAAG,SAAS,CAAC,WAAW,CAAC;;QAGrC,IAAI,QAAQ,EAAE;YACZ,MAAM,UAAU,GAAG,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC;AAC7C,YAAA,IAAI,CAAC,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,gBAAgB,CACnD,IAAI,EACJ,EAAE,EACF,UAAU,CACX;;AAGD,YAAA,IAAI,SAAS,CAAC,IAAI,EAAE,cAAc,EAAE;AAClC,gBAAA,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU;AAC/B,aAAA,CAAC;;aACG;YACL,MAAM,WAAW,GACf,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,KAAK;AAE7D,YAAA,MAAM,WAAW,GAA+B;AAC9C,gBAAA,iBAAiB,EAAE;AACjB,sBAAE,WAAW,CAAC,eAAe,CAAC,WAAW;AACzC,sBAAE,SAAS;aACd;AAED,YAAA,IAAI,CAAC,OAAO,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,WAAW,CAAC;YAE/D,IAAI,OAAO,EAAE;AACX,gBAAA,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC;;YAGlD,IAAI,SAAS,EAAE;AACb,gBAAA,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC;;YAGtD,IAAI,QAAQ,EAAE;AACZ,gBAAA,IAAI,SAAS,CAAC,IAAI,EAAE,cAAc,EAAE;AAClC,oBAAA,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU;oBAC9B,UAAU;AACX,iBAAA,CAAC;;iBACG;AACL,gBAAA,IAAI,SAAS,CAAC,IAAI,EAAE,aAAa,EAAE;AACjC,oBAAA,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU;AAC/B,iBAAA,CAAC;;;;;AAMR,IAAA,IAAW,KAAK,GAAA;AACd,QAAA,OAAO,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC;;AAGvB,IAAA,IAAW,GAAG,GAAA;QACZ,OAAO;YACL,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO;YAC/B,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM;SAC9B;;AAGI,IAAA,kBAAkB,CAAC,MAAqB,EAAA;AAC7C,QAAA,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC;;;AAIzC,IAAA,IAAW,SAAS,GAAA;AAClB,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS;;AAG/B,IAAA,IAAW,UAAU,GAAA;AACnB,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU;;AAGhC,IAAA,IAAW,aAAa,GAAA;AACtB,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa;;AAGnC,IAAA,IAAW,aAAa,GAAA;AACtB,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa;;AAGnC,IAAA,IAAW,WAAW,GAAA;AACpB,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW;;AAG1B,IAAA,mBAAmB,CAAC,GAAW,EAAA;QACpC,OAAO,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,GAAG,CAAC;;IAGvC,SAAS,CAAC,OAAmB,EAAE,aAAwB,EAAA;QAC5D,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,aAAa,CAAC;;AAGhD,IAAA,UAAU,CAAC,OAAmB,EAAA;QACnC,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC;;IAGlC,mBAAmB,CACxB,EAAU,EACV,OAAgC,EAAA;QAEhC,OAAO,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAE,EAAE,OAAO,CAAC;;AAG/C,IAAA,mBAAmB,CACxB,SAA0B,EAAA;QAE1B,OAAO,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,SAAS,CAAC;;IAG7C,qBAAqB,GAAA;AAC1B,QAAA,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE;;AAG/B,IAAA,MAAM,CAAC,MAA+B,EAAA;QAC3C,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;;AAGpC,IAAA,IAAW,MAAM,GAAA;QACf,OAAO,IAAI,CAAC,OAAO;;AAEtB;;ACzMD,MAAM,OAAO,GAAG;AACd,IAAA,OAAO,EAAE,uBAAuB;CACxB;AAsBJ,MAAO,gBAAiB,SAAQ,SAAS,CAAA;AAI7C;;AAEG;AACH,IAAA,WAAA,CAAY,KAAgB,EAAE,EAAU,EAAE,KAA4B,EAAA;AACpE,QAAA,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAEhB,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,KAAK;QAChD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,cAAc;;QAG3D,IAAI,CAAC,QAAQ,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE;AAC7C,YAAA,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC;kBACtB,gBAAgB,QAAQ,CAAA,CAAA,EAAI,OAAO,CAAC,GAAG,CAAC,aAAa,CAAE;kBACvD,CAAgB,aAAA,EAAA,QAAQ,CAAE,CAAA;YAC9B,SAAS,EAAE,aAAa,CAAC,QAAQ;AAClC,SAAA,CAAC;;QAGF,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC;QACxD,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC;QACjE,IAAI,OAAO,EAAE;YACX,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC;;;AAI1D,QAAA,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;;QAG/D,IAAI,WAAW,EAAE;AACf,YAAA,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,0BAA0B,EAAE;gBAC9D,WAAW;AACX,gBAAA,aAAa,EAAE,aAAa,CAAC,SAAS,EAAE;AACzC,aAAA,CAAC;;;QAIJ,IAAI,CAAC,UAAU,GAAG,IAAI,UAAU,CAAC,IAAI,EAAE,YAAY,EAAE;AACnD,YAAA,oBAAoB,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW;YAC/C,QAAQ;AACT,SAAA,CAAC;;QAGF,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC;QAC1D,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC;QACnE,IAAI,OAAO,EAAE;YACX,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC;;;AAG/D;;ACrFK,MAAO,mBAAoB,SAAQ,eAAe,CAAA;AACtD,IAAA,WAAA,CACE,KAAgB,EAChB,EAAE,GAAG,uBAAuB,EAC5B,KAA4B,EAAA;AAE5B,QAAA,MAAM,YAAY,GAAyB;AACzC,YAAA,MAAM,EAAE,aAAa;AACrB,YAAA,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO;AACzB,YAAA,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO;AAC7B,YAAA,GAAG,KAAK;SACT;AAED,QAAA,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,YAAY,CAAC;;AAEjC;;ACfK,MAAO,kBAAmB,SAAQ,eAAe,CAAA;AACrD,IAAA,WAAA,CACE,KAAgB,EAChB,EAAE,GAAG,cAAc,EACnB,KAA4B,EAAA;AAE5B,QAAA,MAAM,YAAY,GAAyB;AACzC,YAAA,MAAM,EAAE,gBAAgB;AACxB,YAAA,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU;AAC5B,YAAA,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM;AAC5B,YAAA,GAAG,KAAK;SACT;AAED,QAAA,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,YAAY,CAAC;;AAEjC;;ACaK,MAAO,kBACX,SAAQ,SAAS,CAAA;AAOjB,IAAA,WAAA,CAAY,KAAgB,EAAE,EAAU,EAAE,KAA8B,EAAA;AACtE,QAAA,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;AAEhB,QAAA,MAAM,EACJ,SAAS,GAAG,CAAC,EACb,IAAI,EACJ,WAAW,GAAG,EAAE,EAChB,UAAU,GAAG,EAAE,EACf,IAAI,GAAG,IAAI,EACX,OAAO,GAAG,eAAe,EACzB,MAAM,GAAG,EAAE,EACX,YAAY,GAAG,GAAG,CAAC,MAAM,CAAC,aAAa,EACvC,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,WAAW,EACnC,gBAAgB,EAChB,4BAA4B,EAC5B,OAAO,EACP,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,EACpC,OAAO,GAAG,EAAE,EACZ,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,EACtD,SAAS,EACT,iBAAiB,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,GACjE,GAAG,KAAK;QAET,IAAI,CAAC,KAAK,GAAG,OAAO,IAAI,KAAK,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI;;QAG1E,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE;YACzC,IAAI;AACJ,YAAA,iBAAiB,EACf,OAAO,iBAAiB,KAAK;AAC3B,kBAAE,QAAQ,CAAC,OAAO,CAAC,iBAAiB;AACpC,kBAAE,iBAAiB;AACxB,SAAA,CAAC;QACF,IAAI,OAAO,EAAE;AACX,YAAA,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC;;QAEjD,IAAI,SAAS,EAAE;AACb,YAAA,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC;;;QAIrD,MAAM,kBAAkB,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,MAAM,CAC1D,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM;AACvB,YAAA,GAAG,GAAG;AACN,YAAA,CAAC,UAAU,GAAG,CAAA,CAAE,GAAG,MAAM,CAAC,UAAU;SACrC,CAAC,EACF,EAAE,CACH;;QAGD,MAAM,wBAAwB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,MAAM,KAAI;AAC9D,YAAA,IAAI,MAAM,CAAC,MAAM,EAAE;gBACjB,OAAO;AACL,oBAAA,GAAG,GAAG;oBACN,CAAC,CAAA,OAAA,EAAU,MAAM,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU;iBAC/C;;AAEH,YAAA,OAAO,GAAG;SACX,EAAE,EAAE,CAAC;;QAGN,IAAI,CAAC,OAAO,GAAG,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE;YACnD,IAAI,EAAE,IAAI,CAAC,KAAK;AAChB,YAAA,WAAW,EAAE;AACX,gBAAA,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;AACvC,gBAAA,GAAG,WAAW;AACd,gBAAA,GAAG,kBAAkB;AACrB,gBAAA,GAAG,wBAAwB;AAC5B,aAAA;YACD,OAAO;YACP,MAAM;YACN,YAAY;YACZ,UAAU;YACV,gBAAgB;YAChB,4BAA4B;YAC5B,OAAO;AACP,YAAA,OAAO,EACL,OAAO,OAAO,KAAK,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO;AACpE,SAAA,CAAC;;QAGF,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,KAAI;AAC3C,YAAA,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;AAChC,SAAC,CAAC;;AAGF,QAAA,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,KAAI;AACzB,YAAA,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC;AACtB,YAAA,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;AAChC,SAAC,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC;AAC3C,QAAA,IAAI,CAAC,OAAO,CAAC,cAAc,CACzB,IAAI,kBAAkB,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE;YACjD,SAAS;AACV,SAAA,CAAC,CACH;QACD,IAAI,OAAO,EAAE;AACX,YAAA,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC;;QAElD,IAAI,SAAS,EAAE;AACb,YAAA,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC;;;;AAKxD,IAAA,IAAW,KAAK,GAAA;QACd,OAAO,IAAI,CAAC,MAAM;;AAGpB,IAAA,IAAW,MAAM,GAAA;QACf,OAAO,IAAI,CAAC,OAAO;;AAGrB,IAAA,IAAW,IAAI,GAAA;QACb,OAAO,IAAI,CAAC,KAAK;;;AAInB,IAAA,IAAW,WAAW,GAAA;AACpB,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW;;AAGjC,IAAA,IAAW,YAAY,GAAA;AACrB,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY;;AAGlC,IAAA,IAAW,cAAc,GAAA;AACvB,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc;;AAGpC,IAAA,IAAW,IAAI,GAAA;AACb,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI;;AAG1B,IAAA,IAAW,YAAY,GAAA;AACrB,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY;;AAGlC,IAAA,IAAW,WAAW,GAAA;AACpB,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW;;AAGjC,IAAA,IAAW,YAAY,GAAA;AACrB,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY;;AAGlC,IAAA,IAAW,aAAa,GAAA;AACtB,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa;;AAGnC,IAAA,IAAW,eAAe,GAAA;AACxB,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,eAAe;;AAGrC,IAAA,IAAW,0BAA0B,GAAA;AACnC,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,0BAA0B;;AAGzC,IAAA,cAAc,CAAC,MAA2B,EAAA;AAC/C,QAAA,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC;;IAG9B,qBAAqB,CAC1B,EAAU,EACV,OAAyC,EAAA;QAEzC,OAAO,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAAE,EAAE,OAAO,CAAC;;AAGjD,IAAA,cAAc,CACnB,OAAmC,EAAA;QAEnC,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC;;IAGtC,aAAa,CAAC,EAAU,EAAE,UAA6B,EAAA;QAC5D,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,EAAE,UAAU,CAAC;;AAGrC,IAAA,eAAe,CACpB,SAAwD,EAAA;AAExD,QAAA,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,SAAS,CAAC;;AAGlC,IAAA,oBAAoB,CAAC,OAAwC,EAAA;AAClE,QAAA,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,OAAO,CAAC;;AAGrC,IAAA,WAAW,CAChB,OAAiD,EAAA;QAEjD,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC;;AAGnC,IAAA,6BAA6B,CAClC,kBAAoE,EAAA;QAEpE,OAAO,IAAI,CAAC,OAAO,CAAC,6BAA6B,CAAC,kBAAkB,CAAC;;AAGhE,IAAA,cAAc,CACnB,OAAiD,EAAA;QAEjD,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC;;IAGtC,MAAM,CACX,UAAkB,EAClB,KAA0D,EAAA;QAE1D,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC;;AAGxC,IAAA,cAAc,CACnB,KAA0D,EAAA;QAE1D,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC;;AAGpC,IAAA,YAAY,CACjB,KAA0D,EAAA;QAE1D,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC;;AAGlC,IAAA,iBAAiB,CACtB,KAA0D,EAAA;QAE1D,OAAO,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,KAAK,CAAC;;AAGvC,IAAA,eAAe,CACpB,KAA0D,EAAA;QAE1D,OAAO,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC;;;AAIrC,IAAA,wBAAwB,CAAC,OAAuB,EAAA;QACrD,OAAO,IAAI,CAAC,OAAO,CAAC,wBAAwB,CAAC,OAAO,CAAC;;IAGhD,kBAAkB,CACvB,OAAuB,EACvB,OAAuB,EAAA;QAEvB,OAAO,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC;;AAG1D,IAAA,IAAW,GAAG,GAAA;QACZ,OAAO;YACL,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO;YAC/B,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM;SAC9B;;AAGH,IAAA,IAAW,KAAK,GAAA;AACd,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK;;AAGpB,IAAA,kBAAkB,CAAC,MAAqB,EAAA;AAC7C,QAAA,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC;AACvC,QAAA,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC;;;AAIxC,IAAA,IAAW,IAAI,GAAA;AACb,QAAA,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI;;AAGzB,IAAA,IAAW,QAAQ,GAAA;AACjB,QAAA,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ;;AAG7B,IAAA,IAAW,SAAS,GAAA;AAClB,QAAA,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS;;AAG9B,IAAA,IAAW,QAAQ,GAAA;AACjB,QAAA,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ;;AAG7B,IAAA,IAAW,mBAAmB,GAAA;AAC5B,QAAA,OAAO,IAAI,CAAC,MAAM,CAAC,mBAAmB;;AAGjC,IAAA,mBAAmB,CACxB,SAA8B,EAAA;QAE9B,OAAO,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,SAAS,CAAC;;AAG5C,IAAA,KAAK,CAAC,OAAuB,EAAE,GAAG,OAAiB,EAAA;QACxD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC;;AAGxC,IAAA,oBAAoB,CAAC,OAAuB,EAAA;QACjD,OAAO,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,OAAO,CAAC;;AAG3C,IAAA,UAAU,CAAC,OAAuB,EAAA;QACvC,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC;;AAGjC,IAAA,iBAAiB,CAAC,OAAuB,EAAA;QAC9C,OAAO,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC;;;AAIxC,IAAA,mCAAmC,CACxC,KAAgC,EAAA;QAEhC,OAAO,IAAI,CAAC,MAAM,CAAC,mCAAmC,CAAC,KAAK,CAAC;;AAGxD,IAAA,wCAAwC,CAC7C,KAAgC,EAAA;QAEhC,OAAO,IAAI,CAAC,MAAM,CAAC,wCAAwC,CAAC,KAAK,CAAC;;AAG7D,IAAA,2CAA2C,CAChD,KAAgC,EAAA;QAEhC,OAAO,IAAI,CAAC,MAAM,CAAC,2CAA2C,CAAC,KAAK,CAAC;;AAGhE,IAAA,wCAAwC,CAC7C,KAAgC,EAAA;QAEhC,OAAO,IAAI,CAAC,MAAM,CAAC,wCAAwC,CAAC,KAAK,CAAC;;AAG7D,IAAA,2BAA2B,CAChC,KAAgC,EAAA;QAEhC,OAAO,IAAI,CAAC,MAAM,CAAC,2BAA2B,CAAC,KAAK,CAAC;;AAGhD,IAAA,6BAA6B,CAClC,KAAgC,EAAA;QAEhC,OAAO,IAAI,CAAC,MAAM,CAAC,6BAA6B,CAAC,KAAK,CAAC;;AAGlD,IAAA,8BAA8B,CACnC,KAAgC,EAAA;QAEhC,OAAO,IAAI,CAAC,MAAM,CAAC,8BAA8B,CAAC,KAAK,CAAC;;AAGnD,IAAA,0BAA0B,CAC/B,KAAgC,EAAA;QAEhC,OAAO,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAAC,KAAK,CAAC;;AAG/C,IAAA,qBAAqB,CAC1B,KAAgC,EAAA;QAEhC,OAAO,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC;;AAElD;;ACjVD;;AAEG;IACS;AAAZ,CAAA,UAAY,iBAAiB,EAAA;AAC3B,IAAA,iBAAA,CAAA,eAAA,CAAA,GAAA,eAA+B;AAC/B,IAAA,iBAAA,CAAA,SAAA,CAAA,GAAA,SAAmB;AACnB,IAAA,iBAAA,CAAA,WAAA,CAAA,GAAA,WAAuB;AACzB,CAAC,EAJW,iBAAiB,KAAjB,iBAAiB,GAI5B,EAAA,CAAA,CAAA;AAED;;;;AAIG;AACG,MAAO,eAAgB,SAAQ,SAAS,CAAA;AAQ5C,IAAA,WAAA,CAAY,KAAgB,EAAE,EAAU,EAAE,KAA2B,EAAA;AACnE,QAAA,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QARD,IAAc,CAAA,cAAA,GAG3B,EAAqD;AAOvD,QAAA,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW;AACpC,QAAA,IAAI,CAAC,KAAK,GAAG,KAAK;;QAGlB,IAAI,CAAC,gCAAgC,EAAE;QACvC,IAAI,CAAC,0BAA0B,EAAE;QACjC,IAAI,CAAC,4BAA4B,EAAE;;AAGnC,QAAA,IAAI,CAAC,8BAA8B,CAAC,KAAK,CAAC;;AAG5C;;;AAGG;IACK,gCAAgC,GAAA;AACtC,QAAA,MAAM,mBAAmB,GAAG;AAC1B,YAAA,OAAO,EAAE,YAAY;AACrB,YAAA,SAAS,EAAE;AACT,gBAAA;AACE,oBAAA,MAAM,EAAE,OAAO;AACf,oBAAA,MAAM,EAAE;wBACN,cAAc;wBACd,WAAW;wBACX,MAAM;wBACN,yBAAyB;AAC1B,qBAAA;AACD,oBAAA,QAAQ,EAAE,GAAG;AACd,iBAAA;AACF,aAAA;SACF;;AAGD,QAAA,MAAM,YAAY,GAAG,IAAI,CAAC,mBAAmB,CAC3C,mBAAmB,EACnB,IAAI,CAAC,KAAK,EAAE,sBAAsB,EAAE,cAAc,CACnD;QAED,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAC5C,IAAI,EACJ,4BAA4B,EAC5B;YACE,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,IAAI,EAAE,iBAAiB,CAAC,aAAa;AACrC,YAAA,WAAW,EACT,8DAA8D;YAChE,eAAe,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;YAChD,eAAe,EAAE,CAAC,6CAA6C,CAAC;AAChE,YAAA,YAAY,EAAE,YAAY;AAC3B,SAAA,CACF;QAED,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC;QAE5D,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,aAAa,CAAC,GAAG,aAAa;;AAGtE;;;AAGG;IACK,0BAA0B,GAAA;AAChC,QAAA,MAAM,mBAAmB,GAAG;AAC1B,YAAA,OAAO,EAAE,YAAY;AACrB,YAAA,SAAS,EAAE;AACT,gBAAA;AACE,oBAAA,MAAM,EAAE,OAAO;AACf,oBAAA,MAAM,EAAE;wBACN,wBAAwB;wBACxB,wBAAwB;wBACxB,oBAAoB;wBACpB,yBAAyB;wBACzB,0BAA0B;wBAC1B,cAAc;wBACd,cAAc;wBACd,eAAe;AAChB,qBAAA;AACD,oBAAA,QAAQ,EAAE,GAAG;AACd,iBAAA;AACF,aAAA;SACF;;AAGD,QAAA,MAAM,YAAY,GAAG,IAAI,CAAC,mBAAmB,CAC3C,mBAAmB,EACnB,IAAI,CAAC,KAAK,EAAE,sBAAsB,EAAE,QAAQ,CAC7C;QAED,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAC5C,IAAI,EACJ,sBAAsB,EACtB;YACE,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,IAAI,EAAE,iBAAiB,CAAC,OAAO;AAC/B,YAAA,WAAW,EACT,mEAAmE;YACrE,eAAe,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;YAChD,eAAe,EAAE,CAAC,wCAAwC,CAAC;AAC3D,YAAA,YAAY,EAAE,YAAY;AAC3B,SAAA,CACF;QAED,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC;QAE5D,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,OAAO,CAAC,GAAG,aAAa;;AAGhE;;;AAGG;IACK,4BAA4B,GAAA;AAClC,QAAA,MAAM,mBAAmB,GAAG;AAC1B,YAAA,OAAO,EAAE,YAAY;AACrB,YAAA,SAAS,EAAE;AACT,gBAAA;AACE,oBAAA,MAAM,EAAE,OAAO;AACf,oBAAA,MAAM,EAAE;wBACN,cAAc;wBACd,QAAQ;wBACR,UAAU;wBACV,cAAc;wBACd,YAAY;wBACZ,MAAM;wBACN,OAAO;wBACP,OAAO;wBACP,UAAU;wBACV,OAAO;wBACP,OAAO;wBACP,aAAa;AACd,qBAAA;AACD,oBAAA,QAAQ,EAAE,GAAG;AACd,iBAAA;AACD,gBAAA;AACE,oBAAA,MAAM,EAAE,MAAM;AACd,oBAAA,MAAM,EAAE;wBACN,YAAY;wBACZ,YAAY;wBACZ,cAAc;wBACd,iBAAiB;wBACjB,WAAW;AACZ,qBAAA;AACD,oBAAA,QAAQ,EAAE,GAAG;AACd,iBAAA;AACF,aAAA;SACF;;AAGD,QAAA,MAAM,YAAY,GAAG,IAAI,CAAC,mBAAmB,CAC3C,mBAAmB,EACnB,IAAI,CAAC,KAAK,EAAE,sBAAsB,EAAE,UAAU,CAC/C;QAED,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAC5C,IAAI,EACJ,wBAAwB,EACxB;YACE,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,IAAI,EAAE,iBAAiB,CAAC,SAAS;AACjC,YAAA,WAAW,EACT,6DAA6D;YAC/D,eAAe,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;AAChD,YAAA,eAAe,EAAE;gBACf,0DAA0D;AAC3D,aAAA;AACD,YAAA,YAAY,EAAE,YAAY;AAC3B,SAAA,CACF;QAED,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC;QAE5D,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,SAAS,CAAC,GAAG,aAAa;;AAGlE;;AAEG;AACI,IAAA,gBAAgB,CAAC,IAAuB,EAAA;AAC7C,QAAA,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;;AAGlC;;;;;;AAMG;IACK,mBAAmB,CACzB,aAAsC,EACtC,oBAAwC,EAAA;QAExC,IAAI,CAAC,oBAAoB,IAAI,oBAAoB,CAAC,MAAM,KAAK,CAAC,EAAE;AAC9D,YAAA,OAAO,aAAa;;;AAItB,QAAA,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;;QAG9D,YAAY,CAAC,SAAS,GAAG;YACvB,GAAG,YAAY,CAAC,SAAS;AACzB,YAAA,GAAG,oBAAoB;SACxB;AAED,QAAA,OAAO,YAAY;;AAGrB;;;AAGG;AACK,IAAA,8BAA8B,CAAC,KAA2B,EAAA;;AAEhE,QAAA,IAAI,CAAC,8BAA8B,CAAC,KAAK,CAAC;;AAG1C,QAAA,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC;;AAGpC,QAAA,IAAI,CAAC,0BAA0B,CAAC,KAAK,CAAC;;AAGxC;;AAEG;AACK,IAAA,8BAA8B,CAAC,KAA2B,EAAA;AAChE,QAAA,MAAM,kBAAkB,GAAG,KAAK,CAAC,QAAQ,CAAC,cAAc;QACxD,MAAM,0BAA0B,GAC9B,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,aAAa,CAAC;;AAGtD,QAAA,MAAM,WAAW,GAAG;AAClB,YAAA,GAAG,KAAK,CAAC,UAAU,CAAC,WAAW;AAC/B,YAAA,GAAG,KAAK,CAAC,UAAU,CAAC,UAAU;AAC9B,YAAA,GAAG,KAAK,CAAC,UAAU,CAAC,UAAU;AAC9B,YAAA,GAAG,KAAK,CAAC,UAAU,CAAC,UAAU;AAC9B,YAAA,GAAG,KAAK,CAAC,UAAU,CAAC,OAAO;AAC3B,YAAA,GAAG,KAAK,CAAC,UAAU,CAAC,QAAQ;AAC5B,YAAA,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK;SAC1B;;QAGD,WAAW,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,KAAK,KAAI;AACvC,YAAA,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,aAAa,CACtC,IAAI,EACJ,CAAA,uBAAA,EAA0B,KAAK,CAAA,CAAE,EACjC;gBACE,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,gBAAgB,EAAE,0BAA0B,CAAC,oBAAoB;AACjE,gBAAA,WAAW,EAAE,kBAAkB;AAC/B,gBAAA,aAAa,EAAE,OAAO;AACtB,gBAAA,QAAQ,EAAE,SAAS;AACnB,gBAAA,UAAU,EAAE,aAAa;AAC1B,aAAA,CACF;YAED,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC;AACzD,YAAA,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,gBAAgB,CAAC;AACpD,SAAC,CAAC;;AAGJ;;AAEG;AACK,IAAA,wBAAwB,CAAC,KAA2B,EAAA;AAC1D,QAAA,MAAM,YAAY,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ;QAC5C,MAAM,oBAAoB,GAAG,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,OAAO,CAAC;;AAG3E,QAAA,MAAM,eAAe,GAAG;AACtB,YAAA,GAAG,KAAK,CAAC,UAAU,CAAC,WAAW;AAC/B,YAAA,GAAG,KAAK,CAAC,UAAU,CAAC,UAAU;AAC9B,YAAA,GAAG,KAAK,CAAC,UAAU,CAAC,OAAO;AAC3B,YAAA,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK;SAC1B;;QAGD,eAAe,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,KAAK,KAAI;AAC3C,YAAA,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,aAAa,CACtC,IAAI,EACJ,CAAA,iBAAA,EAAoB,KAAK,CAAA,CAAE,EAC3B;gBACE,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,gBAAgB,EAAE,oBAAoB,CAAC,oBAAoB;AAC3D,gBAAA,WAAW,EAAE,YAAY;AACzB,gBAAA,aAAa,EAAE,OAAO;AACtB,gBAAA,QAAQ,EAAE,SAAS;AACnB,gBAAA,UAAU,EAAE,aAAa;AAC1B,aAAA,CACF;YAED,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC;AACzD,YAAA,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC;AAC9C,SAAC,CAAC;;AAGJ;;AAEG;AACK,IAAA,0BAA0B,CAAC,KAA2B,EAAA;AAC5D,QAAA,MAAM,cAAc,GAAG,KAAK,CAAC,QAAQ,CAAC,UAAU;QAChD,MAAM,sBAAsB,GAC1B,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,SAAS,CAAC;;AAGlD,QAAA,MAAM,iBAAiB,GAAG;AACxB,YAAA,GAAG,KAAK,CAAC,UAAU,CAAC,WAAW;AAC/B,YAAA,GAAG,KAAK,CAAC,UAAU,CAAC,OAAO;AAC3B,YAAA,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK;SAC1B;;QAGD,iBAAiB,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,KAAK,KAAI;AAC7C,YAAA,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,aAAa,CACtC,IAAI,EACJ,CAAA,mBAAA,EAAsB,KAAK,CAAA,CAAE,EAC7B;gBACE,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,gBAAgB,EAAE,sBAAsB,CAAC,oBAAoB;AAC7D,gBAAA,WAAW,EAAE,cAAc;AAC3B,gBAAA,aAAa,EAAE,OAAO;AACtB,gBAAA,QAAQ,EAAE,SAAS;AACnB,gBAAA,UAAU,EAAE,aAAa;AAC1B,aAAA,CACF;YAED,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC;AACzD,YAAA,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,YAAY,CAAC;AAChD,SAAC,CAAC;;AAEL;;ACraK,MAAO,2BAA4B,SAAQ,eAAe,CAAA;AAC9D,IAAA,WAAA,CACE,KAAgB,EAChB,EAAE,GAAG,iBAAiB,EACtB,KAA4B,EAAA;AAE5B,QAAA,MAAM,YAAY,GAAyB;AACzC,YAAA,MAAM,EAAE,mBAAmB;AAC3B,YAAA,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG;AACrB,YAAA,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS;AAC/B,YAAA,GAAG,KAAK;SACT;AAED,QAAA,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,YAAY,CAAC;;AAEjC;;;;"}
+{"version":3,"file":"index.js","sources":["../../../src/JaypieEnvSecret.ts","../../../src/JaypieHostedZone.ts","../../../src/JaypieLambda.ts","../../../src/JaypieMongoDbSecret.ts","../../../src/JaypieOpenAiSecret.ts","../../../src/JaypieQueuedLambda.ts","../../../src/JaypieSsoGroups.ts","../../../src/JaypieTraceSigningKeySecret.ts"],"sourcesContent":["import { Construct } from \"constructs\";\nimport {\n  CfnOutput,\n  Fn,\n  SecretValue,\n  Tags,\n  RemovalPolicy,\n  Stack,\n} from \"aws-cdk-lib\";\nimport * as secretsmanager from \"aws-cdk-lib/aws-secretsmanager\";\nimport { CDK } from \"@jaypie/cdk\";\nimport {\n  ISecret,\n  ISecretAttachmentTarget,\n  RotationSchedule,\n  RotationScheduleOptions,\n} from \"aws-cdk-lib/aws-secretsmanager\";\nimport { IKey } from \"aws-cdk-lib/aws-kms\";\nimport {\n  Grant,\n  IGrantable,\n  PolicyStatement,\n  AddToResourcePolicyResult,\n} from \"aws-cdk-lib/aws-iam\";\n\n// It is a consumer if the environment is ephemeral\nfunction checkEnvIsConsumer(env = process.env): boolean {\n  return (\n    env.PROJECT_ENV === CDK.ENV.PERSONAL ||\n    !!env.CDK_ENV_PERSONAL ||\n    /** @deprecated */ env.PROJECT_ENV === \"ephemeral\" ||\n    /** @deprecated */ !!env.CDK_ENV_EPHEMERAL\n  );\n}\n\nfunction checkEnvIsProvider(env = process.env): boolean {\n  return env.PROJECT_ENV === CDK.ENV.SANDBOX;\n}\n\nfunction cleanName(name: string): string {\n  return name.replace(/[^a-zA-Z0-9:-]/g, \"\");\n}\n\nfunction exportEnvName(name: string, env = process.env): string {\n  let rawName;\n  if (checkEnvIsProvider(env)) {\n    rawName = `env-${env.PROJECT_ENV}-${env.PROJECT_KEY}-${name}`;\n    // Clean the entire name to only allow alphanumeric, colons, and hyphens\n    return cleanName(rawName);\n  } else {\n    if (checkEnvIsConsumer(env)) {\n      rawName = `env-${CDK.ENV.SANDBOX}-${env.PROJECT_KEY}-${name}`;\n    } else {\n      rawName = `env-${env.PROJECT_ENV}-${env.PROJECT_KEY}-${name}`;\n    }\n  }\n  return cleanName(rawName);\n}\n\nexport interface JaypieEnvSecretProps {\n  consumer?: boolean;\n  envKey?: string;\n  export?: string;\n  provider?: boolean;\n  roleTag?: string;\n  vendorTag?: string;\n  value?: string;\n}\n\nexport class JaypieEnvSecret extends Construct implements ISecret {\n  private readonly _envKey?: string;\n  private readonly _secret: secretsmanager.ISecret;\n\n  constructor(scope: Construct, id: string, props?: JaypieEnvSecretProps) {\n    super(scope, id);\n\n    const {\n      consumer = checkEnvIsConsumer(),\n      envKey,\n      export: exportParam,\n      provider = checkEnvIsProvider(),\n      roleTag,\n      vendorTag,\n      value,\n    } = props || {};\n\n    this._envKey = envKey;\n\n    let exportName;\n\n    if (!exportParam) {\n      exportName = exportEnvName(id);\n    } else {\n      exportName = cleanName(exportParam);\n    }\n\n    if (consumer) {\n      const secretName = Fn.importValue(exportName);\n      this._secret = secretsmanager.Secret.fromSecretNameV2(\n        this,\n        id,\n        secretName,\n      );\n\n      // Add CfnOutput for consumer secrets\n      new CfnOutput(this, `ConsumedName`, {\n        value: this._secret.secretName,\n      });\n    } else {\n      const secretValue =\n        envKey && process.env[envKey] ? process.env[envKey] : value;\n\n      const secretProps: secretsmanager.SecretProps = {\n        secretStringValue: secretValue\n          ? SecretValue.unsafePlainText(secretValue)\n          : undefined,\n      };\n\n      this._secret = new secretsmanager.Secret(this, id, secretProps);\n\n      if (roleTag) {\n        Tags.of(this._secret).add(CDK.TAG.ROLE, roleTag);\n      }\n\n      if (vendorTag) {\n        Tags.of(this._secret).add(CDK.TAG.VENDOR, vendorTag);\n      }\n\n      if (provider) {\n        new CfnOutput(this, `ProvidedName`, {\n          value: this._secret.secretName,\n          exportName,\n        });\n      } else {\n        new CfnOutput(this, `CreatedName`, {\n          value: this._secret.secretName,\n        });\n      }\n    }\n  }\n\n  // IResource implementation\n  public get stack(): Stack {\n    return Stack.of(this);\n  }\n\n  public get env(): { account: string; region: string } {\n    return {\n      account: Stack.of(this).account,\n      region: Stack.of(this).region,\n    };\n  }\n\n  public applyRemovalPolicy(policy: RemovalPolicy): void {\n    this._secret.applyRemovalPolicy(policy);\n  }\n\n  // ISecret implementation\n  public get secretArn(): string {\n    return this._secret.secretArn;\n  }\n\n  public get secretName(): string {\n    return this._secret.secretName;\n  }\n\n  public get secretFullArn(): string | undefined {\n    return this._secret.secretFullArn;\n  }\n\n  public get encryptionKey(): IKey | undefined {\n    return this._secret.encryptionKey;\n  }\n\n  public get secretValue(): SecretValue {\n    return this._secret.secretValue;\n  }\n\n  public secretValueFromJson(key: string): SecretValue {\n    return this._secret.secretValueFromJson(key);\n  }\n\n  public grantRead(grantee: IGrantable, versionStages?: string[]): Grant {\n    return this._secret.grantRead(grantee, versionStages);\n  }\n\n  public grantWrite(grantee: IGrantable): Grant {\n    return this._secret.grantWrite(grantee);\n  }\n\n  public addRotationSchedule(\n    id: string,\n    options: RotationScheduleOptions,\n  ): RotationSchedule {\n    return this._secret.addRotationSchedule(id, options);\n  }\n\n  public addToResourcePolicy(\n    statement: PolicyStatement,\n  ): AddToResourcePolicyResult {\n    return this._secret.addToResourcePolicy(statement);\n  }\n\n  public denyAccountRootDelete(): void {\n    this._secret.denyAccountRootDelete();\n  }\n\n  public attach(target: ISecretAttachmentTarget): ISecret {\n    return this._secret.attach(target);\n  }\n\n  public get envKey(): string | undefined {\n    return this._envKey;\n  }\n}\n","import { CDK } from \"@jaypie/cdk\";\nimport * as cdk from \"aws-cdk-lib\";\nimport { ServicePrincipal } from \"aws-cdk-lib/aws-iam\";\nimport {\n  LogGroup,\n  FilterPattern,\n  RetentionDays,\n  ILogGroup,\n} from \"aws-cdk-lib/aws-logs\";\nimport { HostedZone, IHostedZone } from \"aws-cdk-lib/aws-route53\";\nimport { Construct } from \"constructs\";\nimport { LambdaDestination } from \"aws-cdk-lib/aws-logs-destinations\";\n\nconst SERVICE = {\n  ROUTE53: \"route53.amazonaws.com\",\n} as const;\n\ninterface JaypieHostedZoneProps {\n  /**\n   * The domain name for the hosted zone\n   */\n  zoneName: string;\n  /**\n   * The service tag value\n   * @default CDK.SERVICE.INFRASTRUCTURE\n   */\n  service?: string;\n  /**\n   * Optional project tag value\n   */\n  project?: string;\n  /**\n   * Optional log destination\n   */\n  destination?: LambdaDestination;\n}\n\nexport class JaypieHostedZone extends Construct {\n  public readonly hostedZone: IHostedZone;\n  public readonly logGroup: ILogGroup;\n\n  /**\n   * Create a new hosted zone with query logging\n   */\n  constructor(scope: Construct, id: string, props: JaypieHostedZoneProps) {\n    super(scope, id);\n\n    const { destination, zoneName, project } = props;\n    const service = props.service || CDK.SERVICE.INFRASTRUCTURE;\n\n    // Create the log group\n    this.logGroup = new LogGroup(this, \"LogGroup\", {\n      logGroupName: process.env.PROJECT_NONCE\n        ? `/aws/route53/${zoneName}-${process.env.PROJECT_NONCE}`\n        : `/aws/route53/${zoneName}`,\n      retention: RetentionDays.ONE_WEEK,\n    });\n\n    // Add tags\n    cdk.Tags.of(this.logGroup).add(CDK.TAG.SERVICE, service);\n    cdk.Tags.of(this.logGroup).add(CDK.TAG.ROLE, CDK.ROLE.NETWORKING);\n    if (project) {\n      cdk.Tags.of(this.logGroup).add(CDK.TAG.PROJECT, project);\n    }\n\n    // Grant Route 53 permissions to write to the log group\n    this.logGroup.grantWrite(new ServicePrincipal(SERVICE.ROUTE53));\n\n    // Add destination if provided\n    if (destination) {\n      this.logGroup.addSubscriptionFilter(\"DatadogLambdaDestination\", {\n        destination,\n        filterPattern: FilterPattern.allEvents(),\n      });\n    }\n\n    // Create the hosted zone\n    this.hostedZone = new HostedZone(this, \"HostedZone\", {\n      queryLogsLogGroupArn: this.logGroup.logGroupArn,\n      zoneName,\n    });\n\n    // Add tags\n    cdk.Tags.of(this.hostedZone).add(CDK.TAG.SERVICE, service);\n    cdk.Tags.of(this.hostedZone).add(CDK.TAG.ROLE, CDK.ROLE.NETWORKING);\n    if (project) {\n      cdk.Tags.of(this.hostedZone).add(CDK.TAG.PROJECT, project);\n    }\n  }\n}\n","import { Construct } from \"constructs\";\nimport { Duration, Tags, Stack, RemovalPolicy } from \"aws-cdk-lib\";\nimport * as lambda from \"aws-cdk-lib/aws-lambda\";\nimport { CDK } from \"@jaypie/cdk\";\nimport * as iam from \"aws-cdk-lib/aws-iam\";\nimport * as cloudwatch from \"aws-cdk-lib/aws-cloudwatch\";\nimport * as secretsmanager from \"aws-cdk-lib/aws-secretsmanager\";\nimport { JaypieEnvSecret } from \"./JaypieEnvSecret.js\";\n\nexport interface JaypieLambdaProps {\n  code: lambda.Code | string;\n  datadogApiKeyArn?: string;\n  environment?: { [key: string]: string };\n  envSecrets?: { [key: string]: secretsmanager.ISecret };\n  handler: string;\n  layers?: lambda.ILayerVersion[];\n  logRetention?: number;\n  memorySize?: number;\n  paramsAndSecrets?: lambda.ParamsAndSecretsLayerVersion | boolean;\n  paramsAndSecretsOptions?: {\n    cacheSize?: number;\n    logLevel?: lambda.ParamsAndSecretsLogLevel;\n    parameterStoreTtl?: number;\n    secretsManagerTtl?: number;\n  };\n  reservedConcurrentExecutions?: number;\n  roleTag?: string;\n  runtime?: lambda.Runtime;\n  secrets?: JaypieEnvSecret[];\n  timeout?: Duration | number;\n  vendorTag?: string;\n}\n\nexport class JaypieLambda extends Construct implements lambda.IFunction {\n  private readonly _lambda: lambda.Function;\n  private readonly _code: lambda.Code;\n\n  constructor(scope: Construct, id: string, props: JaypieLambdaProps) {\n    super(scope, id);\n\n    const {\n      code,\n      datadogApiKeyArn,\n      environment: initialEnvironment = {},\n      envSecrets = {},\n      handler = \"index.handler\",\n      layers = [],\n      logRetention = CDK.LAMBDA.LOG_RETENTION,\n      memorySize = CDK.LAMBDA.MEMORY_SIZE,\n      paramsAndSecrets,\n      paramsAndSecretsOptions,\n      reservedConcurrentExecutions,\n      roleTag,\n      runtime = lambda.Runtime.NODEJS_20_X,\n      secrets = [],\n      timeout = Duration.seconds(CDK.DURATION.LAMBDA_WORKER),\n      vendorTag,\n    } = props;\n\n    // Create a mutable copy of the environment variables\n    let environment = { ...initialEnvironment };\n\n    this._code = typeof code === \"string\" ? lambda.Code.fromAsset(code) : code;\n\n    // Create a working copy of layers\n    const resolvedLayers = [...layers];\n\n    // Determine if we should add Datadog integration\n    // Check for datadog API key ARN in different sources\n    const resolvedDatadogApiKeyArn =\n      datadogApiKeyArn ||\n      process.env.DATADOG_API_KEY_ARN ||\n      process.env.CDK_ENV_DATADOG_API_KEY_ARN;\n\n    // Add Datadog integration if API key is available\n    if (resolvedDatadogApiKeyArn) {\n      // Add Datadog Node.js layer\n      const datadogNodeLayer = lambda.LayerVersion.fromLayerVersionArn(\n        this,\n        \"DatadogNodeLayer\",\n        `arn:aws:lambda:${Stack.of(this).region}:464622532012:layer:Datadog-Node20-x:${CDK.DATADOG.LAYER.NODE}`,\n      );\n      resolvedLayers.push(datadogNodeLayer);\n\n      // Add Datadog Extension layer\n      const datadogExtensionLayer = lambda.LayerVersion.fromLayerVersionArn(\n        this,\n        \"DatadogExtensionLayer\",\n        `arn:aws:lambda:${Stack.of(this).region}:464622532012:layer:Datadog-Extension:${CDK.DATADOG.LAYER.EXTENSION}`,\n      );\n      resolvedLayers.push(datadogExtensionLayer);\n\n      // Set Datadog environment variables\n      Object.assign(environment, {\n        DD_API_KEY_SECRET_ARN: resolvedDatadogApiKeyArn,\n        DD_ENV: process.env.PROJECT_ENV || \"\",\n        DD_SERVICE: process.env.PROJECT_SERVICE || \"\",\n        DD_SITE: CDK.DATADOG.SITE,\n        DD_TAGS: `${CDK.TAG.SPONSOR}:${process.env.PROJECT_SPONSOR || \"\"}`,\n      });\n    }\n\n    // Configure ParamsAndSecrets layer\n    let resolvedParamsAndSecrets:\n      | lambda.ParamsAndSecretsLayerVersion\n      | undefined = undefined;\n\n    if (paramsAndSecrets !== false) {\n      if (paramsAndSecrets instanceof lambda.ParamsAndSecretsLayerVersion) {\n        resolvedParamsAndSecrets = paramsAndSecrets;\n      } else {\n        // Create default ParamsAndSecrets layer\n        resolvedParamsAndSecrets =\n          lambda.ParamsAndSecretsLayerVersion.fromVersion(\n            lambda.ParamsAndSecretsVersions.V1_0_103,\n            {\n              cacheSize: paramsAndSecretsOptions?.cacheSize,\n              logLevel:\n                paramsAndSecretsOptions?.logLevel ||\n                lambda.ParamsAndSecretsLogLevel.WARN,\n              parameterStoreTtl: paramsAndSecretsOptions?.parameterStoreTtl,\n              secretsManagerTtl: paramsAndSecretsOptions?.secretsManagerTtl,\n            },\n          );\n      }\n    }\n\n    // Process secrets environment variables\n    const secretsEnvironment = Object.entries(envSecrets).reduce(\n      (acc, [key, secret]) => ({\n        ...acc,\n        [`SECRET_${key}`]: secret.secretName,\n      }),\n      {},\n    );\n\n    // Process JaypieEnvSecret array\n    const jaypieSecretsEnvironment = secrets.reduce((acc, secret) => {\n      if (secret.envKey) {\n        return {\n          ...acc,\n          [`SECRET_${secret.envKey}`]: secret.secretName,\n        };\n      }\n      return acc;\n    }, {});\n\n    // Create Lambda Function\n    this._lambda = new lambda.Function(this, \"Function\", {\n      code: this._code,\n      environment: {\n        ...environment,\n        ...secretsEnvironment,\n        ...jaypieSecretsEnvironment,\n      },\n      handler,\n      layers: resolvedLayers,\n      logRetention,\n      memorySize,\n      paramsAndSecrets: resolvedParamsAndSecrets,\n      reservedConcurrentExecutions,\n      runtime,\n      timeout:\n        typeof timeout === \"number\" ? Duration.seconds(timeout) : timeout,\n    });\n\n    // Grant secret read permissions\n    Object.values(envSecrets).forEach((secret) => {\n      secret.grantRead(this._lambda);\n    });\n\n    // Grant read permissions for JaypieEnvSecrets\n    secrets.forEach((secret) => {\n      secret.grantRead(this);\n      secret.grantRead(this._lambda);\n    });\n\n    // Grant Datadog API key read permission if applicable\n    if (resolvedDatadogApiKeyArn) {\n      const datadogApiKey = secretsmanager.Secret.fromSecretCompleteArn(\n        this,\n        \"DatadogApiKeyGrant\",\n        resolvedDatadogApiKeyArn,\n      );\n      datadogApiKey.grantRead(this._lambda);\n    }\n\n    if (roleTag) {\n      Tags.of(this._lambda).add(CDK.TAG.ROLE, roleTag);\n    }\n    if (vendorTag) {\n      Tags.of(this._lambda).add(CDK.TAG.VENDOR, vendorTag);\n    }\n  }\n\n  // Public accessors\n  public get lambda(): lambda.Function {\n    return this._lambda;\n  }\n\n  public get code(): lambda.Code {\n    return this._code;\n  }\n\n  // IFunction implementation\n  public get functionArn(): string {\n    return this._lambda.functionArn;\n  }\n\n  public get functionName(): string {\n    return this._lambda.functionName;\n  }\n\n  public get grantPrincipal(): iam.IPrincipal {\n    return this._lambda.grantPrincipal;\n  }\n\n  public get role(): iam.IRole | undefined {\n    return this._lambda.role;\n  }\n\n  public get architecture(): lambda.Architecture {\n    return this._lambda.architecture;\n  }\n\n  public get connections(): import(\"aws-cdk-lib/aws-ec2\").Connections {\n    return this._lambda.connections;\n  }\n\n  public get isBoundToVpc(): boolean {\n    return this._lambda.isBoundToVpc;\n  }\n\n  public get latestVersion(): lambda.IVersion {\n    return this._lambda.latestVersion;\n  }\n\n  public get permissionsNode(): import(\"constructs\").Node {\n    return this._lambda.permissionsNode;\n  }\n\n  public get resourceArnsForGrantInvoke(): string[] {\n    return this._lambda.resourceArnsForGrantInvoke;\n  }\n\n  public addEventSource(source: lambda.IEventSource): void {\n    this._lambda.addEventSource(source);\n  }\n\n  public addEventSourceMapping(\n    id: string,\n    options: lambda.EventSourceMappingOptions,\n  ): lambda.EventSourceMapping {\n    return this._lambda.addEventSourceMapping(id, options);\n  }\n\n  public addFunctionUrl(\n    options?: lambda.FunctionUrlOptions,\n  ): lambda.FunctionUrl {\n    return this._lambda.addFunctionUrl(options);\n  }\n\n  public addPermission(id: string, permission: lambda.Permission): void {\n    this._lambda.addPermission(id, permission);\n  }\n\n  public addToRolePolicy(statement: iam.PolicyStatement): void {\n    this._lambda.addToRolePolicy(statement);\n  }\n\n  public configureAsyncInvoke(options: lambda.EventInvokeConfigOptions): void {\n    this._lambda.configureAsyncInvoke(options);\n  }\n\n  public grantInvoke(grantee: iam.IGrantable): iam.Grant {\n    return this._lambda.grantInvoke(grantee);\n  }\n\n  public grantInvokeCompositePrincipal(\n    compositePrincipal: iam.CompositePrincipal,\n  ): iam.Grant[] {\n    return this._lambda.grantInvokeCompositePrincipal(compositePrincipal);\n  }\n\n  public grantInvokeUrl(grantee: iam.IGrantable): iam.Grant {\n    return this._lambda.grantInvokeUrl(grantee);\n  }\n\n  public metric(\n    metricName: string,\n    props?: cloudwatch.MetricOptions,\n  ): cloudwatch.Metric {\n    return this._lambda.metric(metricName, props);\n  }\n\n  public metricDuration(props?: cloudwatch.MetricOptions): cloudwatch.Metric {\n    return this._lambda.metricDuration(props);\n  }\n\n  public metricErrors(props?: cloudwatch.MetricOptions): cloudwatch.Metric {\n    return this._lambda.metricErrors(props);\n  }\n\n  public metricInvocations(\n    props?: cloudwatch.MetricOptions,\n  ): cloudwatch.Metric {\n    return this._lambda.metricInvocations(props);\n  }\n\n  public metricThrottles(props?: cloudwatch.MetricOptions): cloudwatch.Metric {\n    return this._lambda.metricThrottles(props);\n  }\n\n  // Additional IFunction implementation\n  public grantInvokeLatestVersion(grantee: iam.IGrantable): iam.Grant {\n    return this._lambda.grantInvokeLatestVersion(grantee);\n  }\n\n  public grantInvokeVersion(\n    grantee: iam.IGrantable,\n    version: lambda.Version,\n  ): iam.Grant {\n    return this._lambda.grantInvokeVersion(grantee, version);\n  }\n\n  public get env() {\n    return {\n      account: Stack.of(this).account,\n      region: Stack.of(this).region,\n    };\n  }\n\n  public get stack(): Stack {\n    return this._lambda.stack;\n  }\n\n  public applyRemovalPolicy(policy: RemovalPolicy): void {\n    this._lambda.applyRemovalPolicy(policy);\n  }\n}\n","import { Construct } from \"constructs\";\nimport { CDK } from \"@jaypie/cdk\";\nimport { JaypieEnvSecret, JaypieEnvSecretProps } from \"./JaypieEnvSecret\";\n\nexport class JaypieMongoDbSecret extends JaypieEnvSecret {\n  constructor(\n    scope: Construct,\n    id = \"MongoConnectionString\",\n    props?: JaypieEnvSecretProps,\n  ) {\n    const defaultProps: JaypieEnvSecretProps = {\n      envKey: \"MONGODB_URI\",\n      roleTag: CDK.ROLE.STORAGE,\n      vendorTag: CDK.VENDOR.MONGODB,\n      ...props,\n    };\n\n    super(scope, id, defaultProps);\n  }\n}\n","import { Construct } from \"constructs\";\nimport { CDK } from \"@jaypie/cdk\";\nimport { JaypieEnvSecret, JaypieEnvSecretProps } from \"./JaypieEnvSecret\";\n\nexport class JaypieOpenAiSecret extends JaypieEnvSecret {\n  constructor(\n    scope: Construct,\n    id = \"OpenAiApiKey\",\n    props?: JaypieEnvSecretProps,\n  ) {\n    const defaultProps: JaypieEnvSecretProps = {\n      envKey: \"OPENAI_API_KEY\",\n      roleTag: CDK.ROLE.PROCESSING,\n      vendorTag: CDK.VENDOR.OPENAI,\n      ...props,\n    };\n\n    super(scope, id, defaultProps);\n  }\n}\n","import { Construct } from \"constructs\";\nimport { Duration, Tags, Stack, RemovalPolicy } from \"aws-cdk-lib\";\nimport * as lambda from \"aws-cdk-lib/aws-lambda\";\nimport * as sqs from \"aws-cdk-lib/aws-sqs\";\nimport { CDK } from \"@jaypie/cdk\";\nimport * as lambdaEventSources from \"aws-cdk-lib/aws-lambda-event-sources\";\nimport * as iam from \"aws-cdk-lib/aws-iam\";\nimport * as cloudwatch from \"aws-cdk-lib/aws-cloudwatch\";\nimport * as kms from \"aws-cdk-lib/aws-kms\";\nimport { JaypieLambda, JaypieLambdaProps } from \"./JaypieLambda.js\";\n\nexport interface JaypieQueuedLambdaProps extends JaypieLambdaProps {\n  batchSize?: number;\n  fifo?: boolean;\n  visibilityTimeout?: Duration | number;\n}\n\nexport class JaypieQueuedLambda\n  extends Construct\n  implements lambda.IFunction, sqs.IQueue\n{\n  private readonly _queue: sqs.Queue;\n  private readonly _lambdaConstruct: JaypieLambda;\n\n  constructor(scope: Construct, id: string, props: JaypieQueuedLambdaProps) {\n    super(scope, id);\n\n    const {\n      batchSize = 1,\n      code,\n      environment = {},\n      envSecrets = {},\n      fifo = true,\n      handler = \"index.handler\",\n      layers = [],\n      logRetention = CDK.LAMBDA.LOG_RETENTION,\n      memorySize = CDK.LAMBDA.MEMORY_SIZE,\n      paramsAndSecrets,\n      reservedConcurrentExecutions,\n      roleTag,\n      runtime = lambda.Runtime.NODEJS_20_X,\n      secrets = [],\n      timeout = Duration.seconds(CDK.DURATION.LAMBDA_WORKER),\n      vendorTag,\n      visibilityTimeout = Duration.seconds(CDK.DURATION.LAMBDA_WORKER),\n    } = props;\n\n    // Create SQS Queue\n    this._queue = new sqs.Queue(this, \"Queue\", {\n      fifo,\n      visibilityTimeout:\n        typeof visibilityTimeout === \"number\"\n          ? Duration.seconds(visibilityTimeout)\n          : visibilityTimeout,\n    });\n    if (roleTag) {\n      Tags.of(this._queue).add(CDK.TAG.ROLE, roleTag);\n    }\n    if (vendorTag) {\n      Tags.of(this._queue).add(CDK.TAG.VENDOR, vendorTag);\n    }\n\n    // Create Lambda with JaypieLambda\n    this._lambdaConstruct = new JaypieLambda(this, \"Function\", {\n      code,\n      environment: {\n        ...environment,\n        CDK_ENV_QUEUE_URL: this._queue.queueUrl,\n      },\n      envSecrets,\n      handler,\n      layers,\n      logRetention,\n      memorySize,\n      paramsAndSecrets,\n      reservedConcurrentExecutions,\n      roleTag,\n      runtime,\n      secrets,\n      timeout,\n      vendorTag,\n    });\n\n    // Set up queue and lambda integration\n    this._queue.grantConsumeMessages(this._lambdaConstruct);\n    this._queue.grantSendMessages(this._lambdaConstruct);\n    this._lambdaConstruct.addEventSource(\n      new lambdaEventSources.SqsEventSource(this._queue, {\n        batchSize,\n      }),\n    );\n  }\n\n  // Public accessors\n  public get queue(): sqs.Queue {\n    return this._queue;\n  }\n\n  public get lambda(): lambda.Function {\n    return this._lambdaConstruct.lambda;\n  }\n\n  public get code(): lambda.Code {\n    return this._lambdaConstruct.code;\n  }\n\n  // IFunction implementation\n  public get functionArn(): string {\n    return this._lambdaConstruct.functionArn;\n  }\n\n  public get functionName(): string {\n    return this._lambdaConstruct.functionName;\n  }\n\n  public get grantPrincipal(): import(\"aws-cdk-lib/aws-iam\").IPrincipal {\n    return this._lambdaConstruct.grantPrincipal;\n  }\n\n  public get role(): import(\"aws-cdk-lib/aws-iam\").IRole | undefined {\n    return this._lambdaConstruct.role;\n  }\n\n  public get architecture(): lambda.Architecture {\n    return this._lambdaConstruct.architecture;\n  }\n\n  public get connections(): import(\"aws-cdk-lib/aws-ec2\").Connections {\n    return this._lambdaConstruct.connections;\n  }\n\n  public get isBoundToVpc(): boolean {\n    return this._lambdaConstruct.isBoundToVpc;\n  }\n\n  public get latestVersion(): lambda.IVersion {\n    return this._lambdaConstruct.latestVersion;\n  }\n\n  public get permissionsNode(): import(\"constructs\").Node {\n    return this._lambdaConstruct.permissionsNode;\n  }\n\n  public get resourceArnsForGrantInvoke(): string[] {\n    return this._lambdaConstruct.resourceArnsForGrantInvoke;\n  }\n\n  public addEventSource(source: lambda.IEventSource): void {\n    this._lambdaConstruct.addEventSource(source);\n  }\n\n  public addEventSourceMapping(\n    id: string,\n    options: lambda.EventSourceMappingOptions,\n  ): lambda.EventSourceMapping {\n    return this._lambdaConstruct.addEventSourceMapping(id, options);\n  }\n\n  public addFunctionUrl(\n    options?: lambda.FunctionUrlOptions,\n  ): lambda.FunctionUrl {\n    return this._lambdaConstruct.addFunctionUrl(options);\n  }\n\n  public addPermission(id: string, permission: lambda.Permission): void {\n    this._lambdaConstruct.addPermission(id, permission);\n  }\n\n  public addToRolePolicy(\n    statement: import(\"aws-cdk-lib/aws-iam\").PolicyStatement,\n  ): void {\n    this._lambdaConstruct.addToRolePolicy(statement);\n  }\n\n  public configureAsyncInvoke(options: lambda.EventInvokeConfigOptions): void {\n    this._lambdaConstruct.configureAsyncInvoke(options);\n  }\n\n  public grantInvoke(\n    grantee: import(\"aws-cdk-lib/aws-iam\").IGrantable,\n  ): import(\"aws-cdk-lib/aws-iam\").Grant {\n    return this._lambdaConstruct.grantInvoke(grantee);\n  }\n\n  public grantInvokeCompositePrincipal(\n    compositePrincipal: import(\"aws-cdk-lib/aws-iam\").CompositePrincipal,\n  ): import(\"aws-cdk-lib/aws-iam\").Grant[] {\n    return this._lambdaConstruct.grantInvokeCompositePrincipal(compositePrincipal);\n  }\n\n  public grantInvokeUrl(\n    grantee: import(\"aws-cdk-lib/aws-iam\").IGrantable,\n  ): import(\"aws-cdk-lib/aws-iam\").Grant {\n    return this._lambdaConstruct.grantInvokeUrl(grantee);\n  }\n\n  public metric(\n    metricName: string,\n    props?: import(\"aws-cdk-lib/aws-cloudwatch\").MetricOptions,\n  ): import(\"aws-cdk-lib/aws-cloudwatch\").Metric {\n    return this._lambdaConstruct.metric(metricName, props);\n  }\n\n  public metricDuration(\n    props?: import(\"aws-cdk-lib/aws-cloudwatch\").MetricOptions,\n  ): import(\"aws-cdk-lib/aws-cloudwatch\").Metric {\n    return this._lambdaConstruct.metricDuration(props);\n  }\n\n  public metricErrors(\n    props?: import(\"aws-cdk-lib/aws-cloudwatch\").MetricOptions,\n  ): import(\"aws-cdk-lib/aws-cloudwatch\").Metric {\n    return this._lambdaConstruct.metricErrors(props);\n  }\n\n  public metricInvocations(\n    props?: import(\"aws-cdk-lib/aws-cloudwatch\").MetricOptions,\n  ): import(\"aws-cdk-lib/aws-cloudwatch\").Metric {\n    return this._lambdaConstruct.metricInvocations(props);\n  }\n\n  public metricThrottles(\n    props?: import(\"aws-cdk-lib/aws-cloudwatch\").MetricOptions,\n  ): import(\"aws-cdk-lib/aws-cloudwatch\").Metric {\n    return this._lambdaConstruct.metricThrottles(props);\n  }\n\n  // Additional IFunction implementation\n  public grantInvokeLatestVersion(grantee: iam.IGrantable): iam.Grant {\n    return this._lambdaConstruct.grantInvokeLatestVersion(grantee);\n  }\n\n  public grantInvokeVersion(\n    grantee: iam.IGrantable,\n    version: lambda.Version,\n  ): iam.Grant {\n    return this._lambdaConstruct.grantInvokeVersion(grantee, version);\n  }\n\n  public get env() {\n    return {\n      account: Stack.of(this).account,\n      region: Stack.of(this).region,\n    };\n  }\n\n  public get stack(): Stack {\n    return Stack.of(this);\n  }\n\n  public applyRemovalPolicy(policy: RemovalPolicy): void {\n    this._lambdaConstruct.applyRemovalPolicy(policy);\n    this._queue.applyRemovalPolicy(policy);\n  }\n\n  // IQueue implementation\n  public get fifo(): boolean {\n    return this._queue.fifo;\n  }\n\n  public get queueArn(): string {\n    return this._queue.queueArn;\n  }\n\n  public get queueName(): string {\n    return this._queue.queueName;\n  }\n\n  public get queueUrl(): string {\n    return this._queue.queueUrl;\n  }\n\n  public get encryptionMasterKey(): kms.IKey | undefined {\n    return this._queue.encryptionMasterKey;\n  }\n\n  public addToResourcePolicy(\n    statement: iam.PolicyStatement,\n  ): iam.AddToResourcePolicyResult {\n    return this._queue.addToResourcePolicy(statement);\n  }\n\n  public grant(grantee: iam.IGrantable, ...actions: string[]): iam.Grant {\n    return this._queue.grant(grantee, ...actions);\n  }\n\n  public grantConsumeMessages(grantee: iam.IGrantable): iam.Grant {\n    return this._queue.grantConsumeMessages(grantee);\n  }\n\n  public grantPurge(grantee: iam.IGrantable): iam.Grant {\n    return this._queue.grantPurge(grantee);\n  }\n\n  public grantSendMessages(grantee: iam.IGrantable): iam.Grant {\n    return this._queue.grantSendMessages(grantee);\n  }\n\n  // Queue metrics\n  public metricApproximateAgeOfOldestMessage(\n    props?: cloudwatch.MetricOptions,\n  ): cloudwatch.Metric {\n    return this._queue.metricApproximateAgeOfOldestMessage(props);\n  }\n\n  public metricApproximateNumberOfMessagesDelayed(\n    props?: cloudwatch.MetricOptions,\n  ): cloudwatch.Metric {\n    return this._queue.metricApproximateNumberOfMessagesDelayed(props);\n  }\n\n  public metricApproximateNumberOfMessagesNotVisible(\n    props?: cloudwatch.MetricOptions,\n  ): cloudwatch.Metric {\n    return this._queue.metricApproximateNumberOfMessagesNotVisible(props);\n  }\n\n  public metricApproximateNumberOfMessagesVisible(\n    props?: cloudwatch.MetricOptions,\n  ): cloudwatch.Metric {\n    return this._queue.metricApproximateNumberOfMessagesVisible(props);\n  }\n\n  public metricNumberOfEmptyReceives(\n    props?: cloudwatch.MetricOptions,\n  ): cloudwatch.Metric {\n    return this._queue.metricNumberOfEmptyReceives(props);\n  }\n\n  public metricNumberOfMessagesDeleted(\n    props?: cloudwatch.MetricOptions,\n  ): cloudwatch.Metric {\n    return this._queue.metricNumberOfMessagesDeleted(props);\n  }\n\n  public metricNumberOfMessagesReceived(\n    props?: cloudwatch.MetricOptions,\n  ): cloudwatch.Metric {\n    return this._queue.metricNumberOfMessagesReceived(props);\n  }\n\n  public metricNumberOfMessagesSent(\n    props?: cloudwatch.MetricOptions,\n  ): cloudwatch.Metric {\n    return this._queue.metricNumberOfMessagesSent(props);\n  }\n\n  public metricSentMessageSize(\n    props?: cloudwatch.MetricOptions,\n  ): cloudwatch.Metric {\n    return this._queue.metricSentMessageSize(props);\n  }\n}","import { Construct } from \"constructs\";\nimport { Tags, Duration } from \"aws-cdk-lib\";\nimport * as sso from \"aws-cdk-lib/aws-sso\";\nimport { CDK } from \"@jaypie/cdk\";\n\n/**\n * Account categories for SSO group assignments\n */\nexport interface JaypieSsoAccountMap {\n  development: string[];\n  management: string[];\n  operations: string[];\n  production: string[];\n  sandbox: string[];\n  security: string[];\n  stage: string[];\n}\n\n/**\n * Mapping of group types to Google Workspace group GUIDs\n */\nexport interface JaypieSsoGroupMap {\n  administrators: string;\n  analysts: string;\n  developers: string;\n}\n\n/**\n * IAM Policy Statement structure for inline policies\n */\nexport interface PolicyStatement {\n  Effect: \"Allow\" | \"Deny\";\n  Action: string[] | string;\n  Resource: string[] | string;\n  Condition?: Record<string, unknown>;\n}\n\n/**\n * Properties for the JaypieSsoGroups construct\n */\nexport interface JaypieSsoGroupsProps {\n  /**\n   * ARN of the IAM Identity Center instance\n   */\n  instanceArn: string;\n\n  /**\n   * Mapping of account categories to AWS account IDs\n   */\n  accountMap: JaypieSsoAccountMap;\n\n  /**\n   * Mapping of group types to Google Workspace group GUIDs\n   */\n  groupMap: JaypieSsoGroupMap;\n\n  /**\n   * Additional inline policy statements to append to each group's permission set\n   * Each group can have its own set of policy statements that will be merged\n   * with the default policies.\n   */\n  inlinePolicyStatements?: {\n    administrators?: PolicyStatement[];\n    analysts?: PolicyStatement[];\n    developers?: PolicyStatement[];\n  };\n}\n\n/**\n * Permission set types with corresponding AWS managed policies\n */\nexport enum PermissionSetType {\n  ADMINISTRATOR = \"Administrator\",\n  ANALYST = \"Analyst\",\n  DEVELOPER = \"Developer\",\n}\n\n/**\n * Construct to simplify AWS SSO group management.\n * This construct encapsulates the complexity of creating permission sets\n * and assigning them to groups across multiple AWS accounts.\n */\nexport class JaypieSsoGroups extends Construct {\n  private readonly permissionSets: Record<\n    PermissionSetType,\n    sso.CfnPermissionSet\n  > = {} as Record<PermissionSetType, sso.CfnPermissionSet>;\n  private readonly instanceArn: string;\n  private readonly props: JaypieSsoGroupsProps;\n\n  constructor(scope: Construct, id: string, props: JaypieSsoGroupsProps) {\n    super(scope, id);\n\n    this.instanceArn = props.instanceArn;\n    this.props = props;\n\n    // Create the permission sets\n    this.createAdministratorPermissionSet();\n    this.createAnalystPermissionSet();\n    this.createDeveloperPermissionSet();\n\n    // Create the assignments\n    this.createPermissionSetAssignments(props);\n  }\n\n  /**\n   * Creates the Administrator permission set with AdministratorAccess policy\n   * and billing access\n   */\n  private createAdministratorPermissionSet(): void {\n    const defaultInlinePolicy = {\n      Version: \"2012-10-17\",\n      Statement: [\n        {\n          Effect: \"Allow\",\n          Action: [\n            \"aws-portal:*\",\n            \"budgets:*\",\n            \"ce:*\",\n            \"cost-optimization-hub:*\",\n          ],\n          Resource: \"*\",\n        },\n      ],\n    };\n\n    // Merge with any additional policy statements provided for administrators\n    const mergedPolicy = this.mergeInlinePolicies(\n      defaultInlinePolicy,\n      this.props?.inlinePolicyStatements?.administrators,\n    );\n\n    const permissionSet = new sso.CfnPermissionSet(\n      this,\n      \"AdministratorPermissionSet\",\n      {\n        instanceArn: this.instanceArn,\n        name: PermissionSetType.ADMINISTRATOR,\n        description:\n          \"Full administrative access to all AWS services and resources\",\n        sessionDuration: Duration.hours(8).toIsoString(),\n        managedPolicies: [\"arn:aws:iam::aws:policy/AdministratorAccess\"],\n        inlinePolicy: mergedPolicy,\n      },\n    );\n\n    Tags.of(permissionSet).add(CDK.TAG.SERVICE, CDK.SERVICE.SSO);\n\n    this.permissionSets[PermissionSetType.ADMINISTRATOR] = permissionSet;\n  }\n\n  /**\n   * Creates the Analyst permission set with ReadOnlyAccess policy\n   * and limited write access\n   */\n  private createAnalystPermissionSet(): void {\n    const defaultInlinePolicy = {\n      Version: \"2012-10-17\",\n      Statement: [\n        {\n          Effect: \"Allow\",\n          Action: [\n            \"aws-portal:ViewBilling\",\n            \"aws-portal:ViewAccount\",\n            \"budgets:ViewBudget\",\n            \"cloudwatch:PutDashboard\",\n            \"cloudwatch:PutMetricData\",\n            \"s3:PutObject\",\n            \"s3:GetObject\",\n            \"s3:ListBucket\",\n          ],\n          Resource: \"*\",\n        },\n      ],\n    };\n\n    // Merge with any additional policy statements provided for analysts\n    const mergedPolicy = this.mergeInlinePolicies(\n      defaultInlinePolicy,\n      this.props?.inlinePolicyStatements?.analysts,\n    );\n\n    const permissionSet = new sso.CfnPermissionSet(\n      this,\n      \"AnalystPermissionSet\",\n      {\n        instanceArn: this.instanceArn,\n        name: PermissionSetType.ANALYST,\n        description:\n          \"Read-only access with billing visibility and limited write access\",\n        sessionDuration: Duration.hours(4).toIsoString(),\n        managedPolicies: [\"arn:aws:iam::aws:policy/ReadOnlyAccess\"],\n        inlinePolicy: mergedPolicy,\n      },\n    );\n\n    Tags.of(permissionSet).add(CDK.TAG.SERVICE, CDK.SERVICE.SSO);\n\n    this.permissionSets[PermissionSetType.ANALYST] = permissionSet;\n  }\n\n  /**\n   * Creates the Developer permission set with SystemAdministrator policy\n   * and expanded write access\n   */\n  private createDeveloperPermissionSet(): void {\n    const defaultInlinePolicy = {\n      Version: \"2012-10-17\",\n      Statement: [\n        {\n          Effect: \"Allow\",\n          Action: [\n            \"cloudwatch:*\",\n            \"logs:*\",\n            \"lambda:*\",\n            \"apigateway:*\",\n            \"dynamodb:*\",\n            \"s3:*\",\n            \"sns:*\",\n            \"sqs:*\",\n            \"events:*\",\n            \"ecr:*\",\n            \"ecs:*\",\n            \"codebuild:*\",\n          ],\n          Resource: \"*\",\n        },\n        {\n          Effect: \"Deny\",\n          Action: [\n            \"iam:*User*\",\n            \"iam:*Role*\",\n            \"iam:*Policy*\",\n            \"organizations:*\",\n            \"account:*\",\n          ],\n          Resource: \"*\",\n        },\n      ],\n    };\n\n    // Merge with any additional policy statements provided for developers\n    const mergedPolicy = this.mergeInlinePolicies(\n      defaultInlinePolicy,\n      this.props?.inlinePolicyStatements?.developers,\n    );\n\n    const permissionSet = new sso.CfnPermissionSet(\n      this,\n      \"DeveloperPermissionSet\",\n      {\n        instanceArn: this.instanceArn,\n        name: PermissionSetType.DEVELOPER,\n        description:\n          \"System administrator access with expanded write permissions\",\n        sessionDuration: Duration.hours(8).toIsoString(),\n        managedPolicies: [\n          \"arn:aws:iam::aws:policy/job-function/SystemAdministrator\",\n        ],\n        inlinePolicy: mergedPolicy,\n      },\n    );\n\n    Tags.of(permissionSet).add(CDK.TAG.SERVICE, CDK.SERVICE.SSO);\n\n    this.permissionSets[PermissionSetType.DEVELOPER] = permissionSet;\n  }\n\n  /**\n   * Gets the permission set for the specified type\n   */\n  public getPermissionSet(type: PermissionSetType): sso.CfnPermissionSet {\n    return this.permissionSets[type];\n  }\n\n  /**\n   * Merges default inline policies with additional user-provided policy statements\n   *\n   * @param defaultPolicy - The default policy object with Version and Statement properties\n   * @param additionalStatements - Optional additional policy statements to merge\n   * @returns The merged policy object\n   */\n  private mergeInlinePolicies(\n    defaultPolicy: Record<string, unknown>,\n    additionalStatements?: PolicyStatement[],\n  ): Record<string, unknown> {\n    if (!additionalStatements || additionalStatements.length === 0) {\n      return defaultPolicy;\n    }\n\n    // Create a deep copy of the default policy to avoid modifying the original\n    const mergedPolicy = JSON.parse(JSON.stringify(defaultPolicy));\n\n    // Add the additional statements to the existing statements\n    mergedPolicy.Statement = [\n      ...mergedPolicy.Statement,\n      ...additionalStatements,\n    ];\n\n    return mergedPolicy;\n  }\n\n  /**\n   * Creates assignments between permission sets, groups, and accounts\n   * based on the provided configuration\n   */\n  private createPermissionSetAssignments(props: JaypieSsoGroupsProps): void {\n    // Administrator assignments\n    this.assignAdministratorPermissions(props);\n\n    // Analyst assignments\n    this.assignAnalystPermissions(props);\n\n    // Developer assignments\n    this.assignDeveloperPermissions(props);\n  }\n\n  /**\n   * Assigns Administrator permissions to appropriate accounts\n   */\n  private assignAdministratorPermissions(props: JaypieSsoGroupsProps): void {\n    const administratorGroup = props.groupMap.administrators;\n    const administratorPermissionSet =\n      this.permissionSets[PermissionSetType.ADMINISTRATOR];\n\n    // Administrators get access to all accounts\n    const allAccounts = [\n      ...props.accountMap.development,\n      ...props.accountMap.management,\n      ...props.accountMap.operations,\n      ...props.accountMap.production,\n      ...props.accountMap.sandbox,\n      ...props.accountMap.security,\n      ...props.accountMap.stage,\n    ];\n\n    // Create assignments for each account\n    allAccounts.forEach((accountId, index) => {\n      const assignment = new sso.CfnAssignment(\n        this,\n        `AdministratorAssignment${index}`,\n        {\n          instanceArn: this.instanceArn,\n          permissionSetArn: administratorPermissionSet.attrPermissionSetArn,\n          principalId: administratorGroup,\n          principalType: \"GROUP\",\n          targetId: accountId,\n          targetType: \"AWS_ACCOUNT\",\n        },\n      );\n\n      Tags.of(assignment).add(CDK.TAG.SERVICE, CDK.SERVICE.SSO);\n      Tags.of(assignment).add(\"Group\", \"administrators\");\n    });\n  }\n\n  /**\n   * Assigns Analyst permissions to appropriate accounts\n   */\n  private assignAnalystPermissions(props: JaypieSsoGroupsProps): void {\n    const analystGroup = props.groupMap.analysts;\n    const analystPermissionSet = this.permissionSets[PermissionSetType.ANALYST];\n\n    // Analysts get access to development, management, sandbox, and stage accounts\n    const analystAccounts = [\n      ...props.accountMap.development,\n      ...props.accountMap.management,\n      ...props.accountMap.sandbox,\n      ...props.accountMap.stage,\n    ];\n\n    // Create assignments for each account\n    analystAccounts.forEach((accountId, index) => {\n      const assignment = new sso.CfnAssignment(\n        this,\n        `AnalystAssignment${index}`,\n        {\n          instanceArn: this.instanceArn,\n          permissionSetArn: analystPermissionSet.attrPermissionSetArn,\n          principalId: analystGroup,\n          principalType: \"GROUP\",\n          targetId: accountId,\n          targetType: \"AWS_ACCOUNT\",\n        },\n      );\n\n      Tags.of(assignment).add(CDK.TAG.SERVICE, CDK.SERVICE.SSO);\n      Tags.of(assignment).add(\"Group\", \"analysts\");\n    });\n  }\n\n  /**\n   * Assigns Developer permissions to appropriate accounts\n   */\n  private assignDeveloperPermissions(props: JaypieSsoGroupsProps): void {\n    const developerGroup = props.groupMap.developers;\n    const developerPermissionSet =\n      this.permissionSets[PermissionSetType.DEVELOPER];\n\n    // Developers get access to development, sandbox, and stage accounts\n    const developerAccounts = [\n      ...props.accountMap.development,\n      ...props.accountMap.sandbox,\n      ...props.accountMap.stage,\n    ];\n\n    // Create assignments for each account\n    developerAccounts.forEach((accountId, index) => {\n      const assignment = new sso.CfnAssignment(\n        this,\n        `DeveloperAssignment${index}`,\n        {\n          instanceArn: this.instanceArn,\n          permissionSetArn: developerPermissionSet.attrPermissionSetArn,\n          principalId: developerGroup,\n          principalType: \"GROUP\",\n          targetId: accountId,\n          targetType: \"AWS_ACCOUNT\",\n        },\n      );\n\n      Tags.of(assignment).add(CDK.TAG.SERVICE, CDK.SERVICE.SSO);\n      Tags.of(assignment).add(\"Group\", \"developers\");\n    });\n  }\n}\n","import { Construct } from \"constructs\";\nimport { CDK } from \"@jaypie/cdk\";\nimport { JaypieEnvSecret, JaypieEnvSecretProps } from \"./JaypieEnvSecret\";\n\nexport class JaypieTraceSigningKeySecret extends JaypieEnvSecret {\n  constructor(\n    scope: Construct,\n    id = \"TraceSigningKey\",\n    props?: JaypieEnvSecretProps,\n  ) {\n    const defaultProps: JaypieEnvSecretProps = {\n      envKey: \"TRACE_SIGNING_KEY\",\n      roleTag: CDK.ROLE.API,\n      vendorTag: CDK.VENDOR.KNOWTRACE,\n      ...props,\n    };\n\n    super(scope, id, defaultProps);\n  }\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;AAyBA;AACA,SAAS,kBAAkB,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,EAAA;IAC3C,QACE,GAAG,CAAC,WAAW,KAAK,GAAG,CAAC,GAAG,CAAC,QAAQ;QACpC,CAAC,CAAC,GAAG,CAAC,gBAAgB;AACtB,2BAAmB,GAAG,CAAC,WAAW,KAAK,WAAW;AAClD,2BAAmB,CAAC,CAAC,GAAG,CAAC,iBAAiB;AAE9C;AAEA,SAAS,kBAAkB,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,EAAA;IAC3C,OAAO,GAAG,CAAC,WAAW,KAAK,GAAG,CAAC,GAAG,CAAC,OAAO;AAC5C;AAEA,SAAS,SAAS,CAAC,IAAY,EAAA;IAC7B,OAAO,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC;AAC5C;AAEA,SAAS,aAAa,CAAC,IAAY,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,EAAA;AACpD,IAAA,IAAI,OAAO;AACX,IAAA,IAAI,kBAAkB,CAAC,GAAG,CAAC,EAAE;AAC3B,QAAA,OAAO,GAAG,CAAA,IAAA,EAAO,GAAG,CAAC,WAAW,CAAA,CAAA,EAAI,GAAG,CAAC,WAAW,CAAA,CAAA,EAAI,IAAI,CAAA,CAAE;;AAE7D,QAAA,OAAO,SAAS,CAAC,OAAO,CAAC;;SACpB;AACL,QAAA,IAAI,kBAAkB,CAAC,GAAG,CAAC,EAAE;AAC3B,YAAA,OAAO,GAAG,CAAA,IAAA,EAAO,GAAG,CAAC,GAAG,CAAC,OAAO,CAAI,CAAA,EAAA,GAAG,CAAC,WAAW,CAAI,CAAA,EAAA,IAAI,EAAE;;aACxD;AACL,YAAA,OAAO,GAAG,CAAA,IAAA,EAAO,GAAG,CAAC,WAAW,CAAA,CAAA,EAAI,GAAG,CAAC,WAAW,CAAA,CAAA,EAAI,IAAI,CAAA,CAAE;;;AAGjE,IAAA,OAAO,SAAS,CAAC,OAAO,CAAC;AAC3B;AAYM,MAAO,eAAgB,SAAQ,SAAS,CAAA;AAI5C,IAAA,WAAA,CAAY,KAAgB,EAAE,EAAU,EAAE,KAA4B,EAAA;AACpE,QAAA,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAEhB,MAAM,EACJ,QAAQ,GAAG,kBAAkB,EAAE,EAC/B,MAAM,EACN,MAAM,EAAE,WAAW,EACnB,QAAQ,GAAG,kBAAkB,EAAE,EAC/B,OAAO,EACP,SAAS,EACT,KAAK,GACN,GAAG,KAAK,IAAI,EAAE;AAEf,QAAA,IAAI,CAAC,OAAO,GAAG,MAAM;AAErB,QAAA,IAAI,UAAU;QAEd,IAAI,CAAC,WAAW,EAAE;AAChB,YAAA,UAAU,GAAG,aAAa,CAAC,EAAE,CAAC;;aACzB;AACL,YAAA,UAAU,GAAG,SAAS,CAAC,WAAW,CAAC;;QAGrC,IAAI,QAAQ,EAAE;YACZ,MAAM,UAAU,GAAG,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC;AAC7C,YAAA,IAAI,CAAC,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,gBAAgB,CACnD,IAAI,EACJ,EAAE,EACF,UAAU,CACX;;AAGD,YAAA,IAAI,SAAS,CAAC,IAAI,EAAE,cAAc,EAAE;AAClC,gBAAA,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU;AAC/B,aAAA,CAAC;;aACG;YACL,MAAM,WAAW,GACf,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,KAAK;AAE7D,YAAA,MAAM,WAAW,GAA+B;AAC9C,gBAAA,iBAAiB,EAAE;AACjB,sBAAE,WAAW,CAAC,eAAe,CAAC,WAAW;AACzC,sBAAE,SAAS;aACd;AAED,YAAA,IAAI,CAAC,OAAO,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,WAAW,CAAC;YAE/D,IAAI,OAAO,EAAE;AACX,gBAAA,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC;;YAGlD,IAAI,SAAS,EAAE;AACb,gBAAA,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC;;YAGtD,IAAI,QAAQ,EAAE;AACZ,gBAAA,IAAI,SAAS,CAAC,IAAI,EAAE,cAAc,EAAE;AAClC,oBAAA,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU;oBAC9B,UAAU;AACX,iBAAA,CAAC;;iBACG;AACL,gBAAA,IAAI,SAAS,CAAC,IAAI,EAAE,aAAa,EAAE;AACjC,oBAAA,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU;AAC/B,iBAAA,CAAC;;;;;AAMR,IAAA,IAAW,KAAK,GAAA;AACd,QAAA,OAAO,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC;;AAGvB,IAAA,IAAW,GAAG,GAAA;QACZ,OAAO;YACL,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO;YAC/B,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM;SAC9B;;AAGI,IAAA,kBAAkB,CAAC,MAAqB,EAAA;AAC7C,QAAA,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC;;;AAIzC,IAAA,IAAW,SAAS,GAAA;AAClB,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS;;AAG/B,IAAA,IAAW,UAAU,GAAA;AACnB,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU;;AAGhC,IAAA,IAAW,aAAa,GAAA;AACtB,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa;;AAGnC,IAAA,IAAW,aAAa,GAAA;AACtB,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa;;AAGnC,IAAA,IAAW,WAAW,GAAA;AACpB,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW;;AAG1B,IAAA,mBAAmB,CAAC,GAAW,EAAA;QACpC,OAAO,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,GAAG,CAAC;;IAGvC,SAAS,CAAC,OAAmB,EAAE,aAAwB,EAAA;QAC5D,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,aAAa,CAAC;;AAGhD,IAAA,UAAU,CAAC,OAAmB,EAAA;QACnC,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC;;IAGlC,mBAAmB,CACxB,EAAU,EACV,OAAgC,EAAA;QAEhC,OAAO,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAE,EAAE,OAAO,CAAC;;AAG/C,IAAA,mBAAmB,CACxB,SAA0B,EAAA;QAE1B,OAAO,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,SAAS,CAAC;;IAG7C,qBAAqB,GAAA;AAC1B,QAAA,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE;;AAG/B,IAAA,MAAM,CAAC,MAA+B,EAAA;QAC3C,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;;AAGpC,IAAA,IAAW,MAAM,GAAA;QACf,OAAO,IAAI,CAAC,OAAO;;AAEtB;;ACzMD,MAAM,OAAO,GAAG;AACd,IAAA,OAAO,EAAE,uBAAuB;CACxB;AAsBJ,MAAO,gBAAiB,SAAQ,SAAS,CAAA;AAI7C;;AAEG;AACH,IAAA,WAAA,CAAY,KAAgB,EAAE,EAAU,EAAE,KAA4B,EAAA;AACpE,QAAA,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAEhB,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,KAAK;QAChD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,cAAc;;QAG3D,IAAI,CAAC,QAAQ,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE;AAC7C,YAAA,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC;kBACtB,gBAAgB,QAAQ,CAAA,CAAA,EAAI,OAAO,CAAC,GAAG,CAAC,aAAa,CAAE;kBACvD,CAAgB,aAAA,EAAA,QAAQ,CAAE,CAAA;YAC9B,SAAS,EAAE,aAAa,CAAC,QAAQ;AAClC,SAAA,CAAC;;QAGF,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC;QACxD,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC;QACjE,IAAI,OAAO,EAAE;YACX,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC;;;AAI1D,QAAA,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;;QAG/D,IAAI,WAAW,EAAE;AACf,YAAA,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,0BAA0B,EAAE;gBAC9D,WAAW;AACX,gBAAA,aAAa,EAAE,aAAa,CAAC,SAAS,EAAE;AACzC,aAAA,CAAC;;;QAIJ,IAAI,CAAC,UAAU,GAAG,IAAI,UAAU,CAAC,IAAI,EAAE,YAAY,EAAE;AACnD,YAAA,oBAAoB,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW;YAC/C,QAAQ;AACT,SAAA,CAAC;;QAGF,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC;QAC1D,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC;QACnE,IAAI,OAAO,EAAE;YACX,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC;;;AAG/D;;ACxDK,MAAO,YAAa,SAAQ,SAAS,CAAA;AAIzC,IAAA,WAAA,CAAY,KAAgB,EAAE,EAAU,EAAE,KAAwB,EAAA;AAChE,QAAA,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;AAEhB,QAAA,MAAM,EACJ,IAAI,EACJ,gBAAgB,EAChB,WAAW,EAAE,kBAAkB,GAAG,EAAE,EACpC,UAAU,GAAG,EAAE,EACf,OAAO,GAAG,eAAe,EACzB,MAAM,GAAG,EAAE,EACX,YAAY,GAAG,GAAG,CAAC,MAAM,CAAC,aAAa,EACvC,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,WAAW,EACnC,gBAAgB,EAChB,uBAAuB,EACvB,4BAA4B,EAC5B,OAAO,EACP,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,EACpC,OAAO,GAAG,EAAE,EACZ,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,EACtD,SAAS,GACV,GAAG,KAAK;;AAGT,QAAA,IAAI,WAAW,GAAG,EAAE,GAAG,kBAAkB,EAAE;QAE3C,IAAI,CAAC,KAAK,GAAG,OAAO,IAAI,KAAK,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI;;AAG1E,QAAA,MAAM,cAAc,GAAG,CAAC,GAAG,MAAM,CAAC;;;QAIlC,MAAM,wBAAwB,GAC5B,gBAAgB;YAChB,OAAO,CAAC,GAAG,CAAC,mBAAmB;AAC/B,YAAA,OAAO,CAAC,GAAG,CAAC,2BAA2B;;QAGzC,IAAI,wBAAwB,EAAE;;AAE5B,YAAA,MAAM,gBAAgB,GAAG,MAAM,CAAC,YAAY,CAAC,mBAAmB,CAC9D,IAAI,EACJ,kBAAkB,EAClB,kBAAkB,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,wCAAwC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAA,CAAE,CACxG;AACD,YAAA,cAAc,CAAC,IAAI,CAAC,gBAAgB,CAAC;;AAGrC,YAAA,MAAM,qBAAqB,GAAG,MAAM,CAAC,YAAY,CAAC,mBAAmB,CACnE,IAAI,EACJ,uBAAuB,EACvB,kBAAkB,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,yCAAyC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAA,CAAE,CAC9G;AACD,YAAA,cAAc,CAAC,IAAI,CAAC,qBAAqB,CAAC;;AAG1C,YAAA,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE;AACzB,gBAAA,qBAAqB,EAAE,wBAAwB;AAC/C,gBAAA,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE;AACrC,gBAAA,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE;AAC7C,gBAAA,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI;AACzB,gBAAA,OAAO,EAAE,CAAA,EAAG,GAAG,CAAC,GAAG,CAAC,OAAO,CAAI,CAAA,EAAA,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAE,CAAA;AACnE,aAAA,CAAC;;;QAIJ,IAAI,wBAAwB,GAEZ,SAAS;AAEzB,QAAA,IAAI,gBAAgB,KAAK,KAAK,EAAE;AAC9B,YAAA,IAAI,gBAAgB,YAAY,MAAM,CAAC,4BAA4B,EAAE;gBACnE,wBAAwB,GAAG,gBAAgB;;iBACtC;;gBAEL,wBAAwB;oBACtB,MAAM,CAAC,4BAA4B,CAAC,WAAW,CAC7C,MAAM,CAAC,wBAAwB,CAAC,QAAQ,EACxC;wBACE,SAAS,EAAE,uBAAuB,EAAE,SAAS;wBAC7C,QAAQ,EACN,uBAAuB,EAAE,QAAQ;4BACjC,MAAM,CAAC,wBAAwB,CAAC,IAAI;wBACtC,iBAAiB,EAAE,uBAAuB,EAAE,iBAAiB;wBAC7D,iBAAiB,EAAE,uBAAuB,EAAE,iBAAiB;AAC9D,qBAAA,CACF;;;;QAKP,MAAM,kBAAkB,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,MAAM,CAC1D,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM;AACvB,YAAA,GAAG,GAAG;AACN,YAAA,CAAC,UAAU,GAAG,CAAA,CAAE,GAAG,MAAM,CAAC,UAAU;SACrC,CAAC,EACF,EAAE,CACH;;QAGD,MAAM,wBAAwB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,MAAM,KAAI;AAC9D,YAAA,IAAI,MAAM,CAAC,MAAM,EAAE;gBACjB,OAAO;AACL,oBAAA,GAAG,GAAG;oBACN,CAAC,CAAA,OAAA,EAAU,MAAM,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU;iBAC/C;;AAEH,YAAA,OAAO,GAAG;SACX,EAAE,EAAE,CAAC;;QAGN,IAAI,CAAC,OAAO,GAAG,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE;YACnD,IAAI,EAAE,IAAI,CAAC,KAAK;AAChB,YAAA,WAAW,EAAE;AACX,gBAAA,GAAG,WAAW;AACd,gBAAA,GAAG,kBAAkB;AACrB,gBAAA,GAAG,wBAAwB;AAC5B,aAAA;YACD,OAAO;AACP,YAAA,MAAM,EAAE,cAAc;YACtB,YAAY;YACZ,UAAU;AACV,YAAA,gBAAgB,EAAE,wBAAwB;YAC1C,4BAA4B;YAC5B,OAAO;AACP,YAAA,OAAO,EACL,OAAO,OAAO,KAAK,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO;AACpE,SAAA,CAAC;;QAGF,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,KAAI;AAC3C,YAAA,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;AAChC,SAAC,CAAC;;AAGF,QAAA,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,KAAI;AACzB,YAAA,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC;AACtB,YAAA,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;AAChC,SAAC,CAAC;;QAGF,IAAI,wBAAwB,EAAE;AAC5B,YAAA,MAAM,aAAa,GAAG,cAAc,CAAC,MAAM,CAAC,qBAAqB,CAC/D,IAAI,EACJ,oBAAoB,EACpB,wBAAwB,CACzB;AACD,YAAA,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;;QAGvC,IAAI,OAAO,EAAE;AACX,YAAA,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC;;QAElD,IAAI,SAAS,EAAE;AACb,YAAA,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC;;;;AAKxD,IAAA,IAAW,MAAM,GAAA;QACf,OAAO,IAAI,CAAC,OAAO;;AAGrB,IAAA,IAAW,IAAI,GAAA;QACb,OAAO,IAAI,CAAC,KAAK;;;AAInB,IAAA,IAAW,WAAW,GAAA;AACpB,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW;;AAGjC,IAAA,IAAW,YAAY,GAAA;AACrB,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY;;AAGlC,IAAA,IAAW,cAAc,GAAA;AACvB,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc;;AAGpC,IAAA,IAAW,IAAI,GAAA;AACb,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI;;AAG1B,IAAA,IAAW,YAAY,GAAA;AACrB,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY;;AAGlC,IAAA,IAAW,WAAW,GAAA;AACpB,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW;;AAGjC,IAAA,IAAW,YAAY,GAAA;AACrB,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY;;AAGlC,IAAA,IAAW,aAAa,GAAA;AACtB,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa;;AAGnC,IAAA,IAAW,eAAe,GAAA;AACxB,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,eAAe;;AAGrC,IAAA,IAAW,0BAA0B,GAAA;AACnC,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,0BAA0B;;AAGzC,IAAA,cAAc,CAAC,MAA2B,EAAA;AAC/C,QAAA,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC;;IAG9B,qBAAqB,CAC1B,EAAU,EACV,OAAyC,EAAA;QAEzC,OAAO,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAAE,EAAE,OAAO,CAAC;;AAGjD,IAAA,cAAc,CACnB,OAAmC,EAAA;QAEnC,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC;;IAGtC,aAAa,CAAC,EAAU,EAAE,UAA6B,EAAA;QAC5D,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,EAAE,UAAU,CAAC;;AAGrC,IAAA,eAAe,CAAC,SAA8B,EAAA;AACnD,QAAA,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,SAAS,CAAC;;AAGlC,IAAA,oBAAoB,CAAC,OAAwC,EAAA;AAClE,QAAA,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,OAAO,CAAC;;AAGrC,IAAA,WAAW,CAAC,OAAuB,EAAA;QACxC,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC;;AAGnC,IAAA,6BAA6B,CAClC,kBAA0C,EAAA;QAE1C,OAAO,IAAI,CAAC,OAAO,CAAC,6BAA6B,CAAC,kBAAkB,CAAC;;AAGhE,IAAA,cAAc,CAAC,OAAuB,EAAA;QAC3C,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC;;IAGtC,MAAM,CACX,UAAkB,EAClB,KAAgC,EAAA;QAEhC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC;;AAGxC,IAAA,cAAc,CAAC,KAAgC,EAAA;QACpD,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC;;AAGpC,IAAA,YAAY,CAAC,KAAgC,EAAA;QAClD,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC;;AAGlC,IAAA,iBAAiB,CACtB,KAAgC,EAAA;QAEhC,OAAO,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,KAAK,CAAC;;AAGvC,IAAA,eAAe,CAAC,KAAgC,EAAA;QACrD,OAAO,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC;;;AAIrC,IAAA,wBAAwB,CAAC,OAAuB,EAAA;QACrD,OAAO,IAAI,CAAC,OAAO,CAAC,wBAAwB,CAAC,OAAO,CAAC;;IAGhD,kBAAkB,CACvB,OAAuB,EACvB,OAAuB,EAAA;QAEvB,OAAO,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC;;AAG1D,IAAA,IAAW,GAAG,GAAA;QACZ,OAAO;YACL,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO;YAC/B,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM;SAC9B;;AAGH,IAAA,IAAW,KAAK,GAAA;AACd,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK;;AAGpB,IAAA,kBAAkB,CAAC,MAAqB,EAAA;AAC7C,QAAA,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC;;AAE1C;;AC/UK,MAAO,mBAAoB,SAAQ,eAAe,CAAA;AACtD,IAAA,WAAA,CACE,KAAgB,EAChB,EAAE,GAAG,uBAAuB,EAC5B,KAA4B,EAAA;AAE5B,QAAA,MAAM,YAAY,GAAyB;AACzC,YAAA,MAAM,EAAE,aAAa;AACrB,YAAA,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO;AACzB,YAAA,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO;AAC7B,YAAA,GAAG,KAAK;SACT;AAED,QAAA,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,YAAY,CAAC;;AAEjC;;ACfK,MAAO,kBAAmB,SAAQ,eAAe,CAAA;AACrD,IAAA,WAAA,CACE,KAAgB,EAChB,EAAE,GAAG,cAAc,EACnB,KAA4B,EAAA;AAE5B,QAAA,MAAM,YAAY,GAAyB;AACzC,YAAA,MAAM,EAAE,gBAAgB;AACxB,YAAA,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU;AAC5B,YAAA,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM;AAC5B,YAAA,GAAG,KAAK;SACT;AAED,QAAA,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,YAAY,CAAC;;AAEjC;;ACFK,MAAO,kBACX,SAAQ,SAAS,CAAA;AAMjB,IAAA,WAAA,CAAY,KAAgB,EAAE,EAAU,EAAE,KAA8B,EAAA;AACtE,QAAA,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;AAEhB,QAAA,MAAM,EACJ,SAAS,GAAG,CAAC,EACb,IAAI,EACJ,WAAW,GAAG,EAAE,EAChB,UAAU,GAAG,EAAE,EACf,IAAI,GAAG,IAAI,EACX,OAAO,GAAG,eAAe,EACzB,MAAM,GAAG,EAAE,EACX,YAAY,GAAG,GAAG,CAAC,MAAM,CAAC,aAAa,EACvC,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,WAAW,EACnC,gBAAgB,EAChB,4BAA4B,EAC5B,OAAO,EACP,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,EACpC,OAAO,GAAG,EAAE,EACZ,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,EACtD,SAAS,EACT,iBAAiB,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,GACjE,GAAG,KAAK;;QAGT,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE;YACzC,IAAI;AACJ,YAAA,iBAAiB,EACf,OAAO,iBAAiB,KAAK;AAC3B,kBAAE,QAAQ,CAAC,OAAO,CAAC,iBAAiB;AACpC,kBAAE,iBAAiB;AACxB,SAAA,CAAC;QACF,IAAI,OAAO,EAAE;AACX,YAAA,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC;;QAEjD,IAAI,SAAS,EAAE;AACb,YAAA,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC;;;QAIrD,IAAI,CAAC,gBAAgB,GAAG,IAAI,YAAY,CAAC,IAAI,EAAE,UAAU,EAAE;YACzD,IAAI;AACJ,YAAA,WAAW,EAAE;AACX,gBAAA,GAAG,WAAW;AACd,gBAAA,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;AACxC,aAAA;YACD,UAAU;YACV,OAAO;YACP,MAAM;YACN,YAAY;YACZ,UAAU;YACV,gBAAgB;YAChB,4BAA4B;YAC5B,OAAO;YACP,OAAO;YACP,OAAO;YACP,OAAO;YACP,SAAS;AACV,SAAA,CAAC;;QAGF,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,gBAAgB,CAAC;QACvD,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,gBAAgB,CAAC;AACpD,QAAA,IAAI,CAAC,gBAAgB,CAAC,cAAc,CAClC,IAAI,kBAAkB,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE;YACjD,SAAS;AACV,SAAA,CAAC,CACH;;;AAIH,IAAA,IAAW,KAAK,GAAA;QACd,OAAO,IAAI,CAAC,MAAM;;AAGpB,IAAA,IAAW,MAAM,GAAA;AACf,QAAA,OAAO,IAAI,CAAC,gBAAgB,CAAC,MAAM;;AAGrC,IAAA,IAAW,IAAI,GAAA;AACb,QAAA,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI;;;AAInC,IAAA,IAAW,WAAW,GAAA;AACpB,QAAA,OAAO,IAAI,CAAC,gBAAgB,CAAC,WAAW;;AAG1C,IAAA,IAAW,YAAY,GAAA;AACrB,QAAA,OAAO,IAAI,CAAC,gBAAgB,CAAC,YAAY;;AAG3C,IAAA,IAAW,cAAc,GAAA;AACvB,QAAA,OAAO,IAAI,CAAC,gBAAgB,CAAC,cAAc;;AAG7C,IAAA,IAAW,IAAI,GAAA;AACb,QAAA,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI;;AAGnC,IAAA,IAAW,YAAY,GAAA;AACrB,QAAA,OAAO,IAAI,CAAC,gBAAgB,CAAC,YAAY;;AAG3C,IAAA,IAAW,WAAW,GAAA;AACpB,QAAA,OAAO,IAAI,CAAC,gBAAgB,CAAC,WAAW;;AAG1C,IAAA,IAAW,YAAY,GAAA;AACrB,QAAA,OAAO,IAAI,CAAC,gBAAgB,CAAC,YAAY;;AAG3C,IAAA,IAAW,aAAa,GAAA;AACtB,QAAA,OAAO,IAAI,CAAC,gBAAgB,CAAC,aAAa;;AAG5C,IAAA,IAAW,eAAe,GAAA;AACxB,QAAA,OAAO,IAAI,CAAC,gBAAgB,CAAC,eAAe;;AAG9C,IAAA,IAAW,0BAA0B,GAAA;AACnC,QAAA,OAAO,IAAI,CAAC,gBAAgB,CAAC,0BAA0B;;AAGlD,IAAA,cAAc,CAAC,MAA2B,EAAA;AAC/C,QAAA,IAAI,CAAC,gBAAgB,CAAC,cAAc,CAAC,MAAM,CAAC;;IAGvC,qBAAqB,CAC1B,EAAU,EACV,OAAyC,EAAA;QAEzC,OAAO,IAAI,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,EAAE,EAAE,OAAO,CAAC;;AAG1D,IAAA,cAAc,CACnB,OAAmC,EAAA;QAEnC,OAAO,IAAI,CAAC,gBAAgB,CAAC,cAAc,CAAC,OAAO,CAAC;;IAG/C,aAAa,CAAC,EAAU,EAAE,UAA6B,EAAA;QAC5D,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,EAAE,UAAU,CAAC;;AAG9C,IAAA,eAAe,CACpB,SAAwD,EAAA;AAExD,QAAA,IAAI,CAAC,gBAAgB,CAAC,eAAe,CAAC,SAAS,CAAC;;AAG3C,IAAA,oBAAoB,CAAC,OAAwC,EAAA;AAClE,QAAA,IAAI,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,OAAO,CAAC;;AAG9C,IAAA,WAAW,CAChB,OAAiD,EAAA;QAEjD,OAAO,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,OAAO,CAAC;;AAG5C,IAAA,6BAA6B,CAClC,kBAAoE,EAAA;QAEpE,OAAO,IAAI,CAAC,gBAAgB,CAAC,6BAA6B,CAAC,kBAAkB,CAAC;;AAGzE,IAAA,cAAc,CACnB,OAAiD,EAAA;QAEjD,OAAO,IAAI,CAAC,gBAAgB,CAAC,cAAc,CAAC,OAAO,CAAC;;IAG/C,MAAM,CACX,UAAkB,EAClB,KAA0D,EAAA;QAE1D,OAAO,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC;;AAGjD,IAAA,cAAc,CACnB,KAA0D,EAAA;QAE1D,OAAO,IAAI,CAAC,gBAAgB,CAAC,cAAc,CAAC,KAAK,CAAC;;AAG7C,IAAA,YAAY,CACjB,KAA0D,EAAA;QAE1D,OAAO,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,KAAK,CAAC;;AAG3C,IAAA,iBAAiB,CACtB,KAA0D,EAAA;QAE1D,OAAO,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,KAAK,CAAC;;AAGhD,IAAA,eAAe,CACpB,KAA0D,EAAA;QAE1D,OAAO,IAAI,CAAC,gBAAgB,CAAC,eAAe,CAAC,KAAK,CAAC;;;AAI9C,IAAA,wBAAwB,CAAC,OAAuB,EAAA;QACrD,OAAO,IAAI,CAAC,gBAAgB,CAAC,wBAAwB,CAAC,OAAO,CAAC;;IAGzD,kBAAkB,CACvB,OAAuB,EACvB,OAAuB,EAAA;QAEvB,OAAO,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC;;AAGnE,IAAA,IAAW,GAAG,GAAA;QACZ,OAAO;YACL,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO;YAC/B,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM;SAC9B;;AAGH,IAAA,IAAW,KAAK,GAAA;AACd,QAAA,OAAO,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC;;AAGhB,IAAA,kBAAkB,CAAC,MAAqB,EAAA;AAC7C,QAAA,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,MAAM,CAAC;AAChD,QAAA,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC;;;AAIxC,IAAA,IAAW,IAAI,GAAA;AACb,QAAA,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI;;AAGzB,IAAA,IAAW,QAAQ,GAAA;AACjB,QAAA,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ;;AAG7B,IAAA,IAAW,SAAS,GAAA;AAClB,QAAA,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS;;AAG9B,IAAA,IAAW,QAAQ,GAAA;AACjB,QAAA,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ;;AAG7B,IAAA,IAAW,mBAAmB,GAAA;AAC5B,QAAA,OAAO,IAAI,CAAC,MAAM,CAAC,mBAAmB;;AAGjC,IAAA,mBAAmB,CACxB,SAA8B,EAAA;QAE9B,OAAO,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,SAAS,CAAC;;AAG5C,IAAA,KAAK,CAAC,OAAuB,EAAE,GAAG,OAAiB,EAAA;QACxD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC;;AAGxC,IAAA,oBAAoB,CAAC,OAAuB,EAAA;QACjD,OAAO,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,OAAO,CAAC;;AAG3C,IAAA,UAAU,CAAC,OAAuB,EAAA;QACvC,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC;;AAGjC,IAAA,iBAAiB,CAAC,OAAuB,EAAA;QAC9C,OAAO,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC;;;AAIxC,IAAA,mCAAmC,CACxC,KAAgC,EAAA;QAEhC,OAAO,IAAI,CAAC,MAAM,CAAC,mCAAmC,CAAC,KAAK,CAAC;;AAGxD,IAAA,wCAAwC,CAC7C,KAAgC,EAAA;QAEhC,OAAO,IAAI,CAAC,MAAM,CAAC,wCAAwC,CAAC,KAAK,CAAC;;AAG7D,IAAA,2CAA2C,CAChD,KAAgC,EAAA;QAEhC,OAAO,IAAI,CAAC,MAAM,CAAC,2CAA2C,CAAC,KAAK,CAAC;;AAGhE,IAAA,wCAAwC,CAC7C,KAAgC,EAAA;QAEhC,OAAO,IAAI,CAAC,MAAM,CAAC,wCAAwC,CAAC,KAAK,CAAC;;AAG7D,IAAA,2BAA2B,CAChC,KAAgC,EAAA;QAEhC,OAAO,IAAI,CAAC,MAAM,CAAC,2BAA2B,CAAC,KAAK,CAAC;;AAGhD,IAAA,6BAA6B,CAClC,KAAgC,EAAA;QAEhC,OAAO,IAAI,CAAC,MAAM,CAAC,6BAA6B,CAAC,KAAK,CAAC;;AAGlD,IAAA,8BAA8B,CACnC,KAAgC,EAAA;QAEhC,OAAO,IAAI,CAAC,MAAM,CAAC,8BAA8B,CAAC,KAAK,CAAC;;AAGnD,IAAA,0BAA0B,CAC/B,KAAgC,EAAA;QAEhC,OAAO,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAAC,KAAK,CAAC;;AAG/C,IAAA,qBAAqB,CAC1B,KAAgC,EAAA;QAEhC,OAAO,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC;;AAElD;;AC5RD;;AAEG;IACS;AAAZ,CAAA,UAAY,iBAAiB,EAAA;AAC3B,IAAA,iBAAA,CAAA,eAAA,CAAA,GAAA,eAA+B;AAC/B,IAAA,iBAAA,CAAA,SAAA,CAAA,GAAA,SAAmB;AACnB,IAAA,iBAAA,CAAA,WAAA,CAAA,GAAA,WAAuB;AACzB,CAAC,EAJW,iBAAiB,KAAjB,iBAAiB,GAI5B,EAAA,CAAA,CAAA;AAED;;;;AAIG;AACG,MAAO,eAAgB,SAAQ,SAAS,CAAA;AAQ5C,IAAA,WAAA,CAAY,KAAgB,EAAE,EAAU,EAAE,KAA2B,EAAA;AACnE,QAAA,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QARD,IAAc,CAAA,cAAA,GAG3B,EAAqD;AAOvD,QAAA,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW;AACpC,QAAA,IAAI,CAAC,KAAK,GAAG,KAAK;;QAGlB,IAAI,CAAC,gCAAgC,EAAE;QACvC,IAAI,CAAC,0BAA0B,EAAE;QACjC,IAAI,CAAC,4BAA4B,EAAE;;AAGnC,QAAA,IAAI,CAAC,8BAA8B,CAAC,KAAK,CAAC;;AAG5C;;;AAGG;IACK,gCAAgC,GAAA;AACtC,QAAA,MAAM,mBAAmB,GAAG;AAC1B,YAAA,OAAO,EAAE,YAAY;AACrB,YAAA,SAAS,EAAE;AACT,gBAAA;AACE,oBAAA,MAAM,EAAE,OAAO;AACf,oBAAA,MAAM,EAAE;wBACN,cAAc;wBACd,WAAW;wBACX,MAAM;wBACN,yBAAyB;AAC1B,qBAAA;AACD,oBAAA,QAAQ,EAAE,GAAG;AACd,iBAAA;AACF,aAAA;SACF;;AAGD,QAAA,MAAM,YAAY,GAAG,IAAI,CAAC,mBAAmB,CAC3C,mBAAmB,EACnB,IAAI,CAAC,KAAK,EAAE,sBAAsB,EAAE,cAAc,CACnD;QAED,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAC5C,IAAI,EACJ,4BAA4B,EAC5B;YACE,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,IAAI,EAAE,iBAAiB,CAAC,aAAa;AACrC,YAAA,WAAW,EACT,8DAA8D;YAChE,eAAe,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;YAChD,eAAe,EAAE,CAAC,6CAA6C,CAAC;AAChE,YAAA,YAAY,EAAE,YAAY;AAC3B,SAAA,CACF;QAED,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC;QAE5D,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,aAAa,CAAC,GAAG,aAAa;;AAGtE;;;AAGG;IACK,0BAA0B,GAAA;AAChC,QAAA,MAAM,mBAAmB,GAAG;AAC1B,YAAA,OAAO,EAAE,YAAY;AACrB,YAAA,SAAS,EAAE;AACT,gBAAA;AACE,oBAAA,MAAM,EAAE,OAAO;AACf,oBAAA,MAAM,EAAE;wBACN,wBAAwB;wBACxB,wBAAwB;wBACxB,oBAAoB;wBACpB,yBAAyB;wBACzB,0BAA0B;wBAC1B,cAAc;wBACd,cAAc;wBACd,eAAe;AAChB,qBAAA;AACD,oBAAA,QAAQ,EAAE,GAAG;AACd,iBAAA;AACF,aAAA;SACF;;AAGD,QAAA,MAAM,YAAY,GAAG,IAAI,CAAC,mBAAmB,CAC3C,mBAAmB,EACnB,IAAI,CAAC,KAAK,EAAE,sBAAsB,EAAE,QAAQ,CAC7C;QAED,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAC5C,IAAI,EACJ,sBAAsB,EACtB;YACE,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,IAAI,EAAE,iBAAiB,CAAC,OAAO;AAC/B,YAAA,WAAW,EACT,mEAAmE;YACrE,eAAe,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;YAChD,eAAe,EAAE,CAAC,wCAAwC,CAAC;AAC3D,YAAA,YAAY,EAAE,YAAY;AAC3B,SAAA,CACF;QAED,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC;QAE5D,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,OAAO,CAAC,GAAG,aAAa;;AAGhE;;;AAGG;IACK,4BAA4B,GAAA;AAClC,QAAA,MAAM,mBAAmB,GAAG;AAC1B,YAAA,OAAO,EAAE,YAAY;AACrB,YAAA,SAAS,EAAE;AACT,gBAAA;AACE,oBAAA,MAAM,EAAE,OAAO;AACf,oBAAA,MAAM,EAAE;wBACN,cAAc;wBACd,QAAQ;wBACR,UAAU;wBACV,cAAc;wBACd,YAAY;wBACZ,MAAM;wBACN,OAAO;wBACP,OAAO;wBACP,UAAU;wBACV,OAAO;wBACP,OAAO;wBACP,aAAa;AACd,qBAAA;AACD,oBAAA,QAAQ,EAAE,GAAG;AACd,iBAAA;AACD,gBAAA;AACE,oBAAA,MAAM,EAAE,MAAM;AACd,oBAAA,MAAM,EAAE;wBACN,YAAY;wBACZ,YAAY;wBACZ,cAAc;wBACd,iBAAiB;wBACjB,WAAW;AACZ,qBAAA;AACD,oBAAA,QAAQ,EAAE,GAAG;AACd,iBAAA;AACF,aAAA;SACF;;AAGD,QAAA,MAAM,YAAY,GAAG,IAAI,CAAC,mBAAmB,CAC3C,mBAAmB,EACnB,IAAI,CAAC,KAAK,EAAE,sBAAsB,EAAE,UAAU,CAC/C;QAED,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAC5C,IAAI,EACJ,wBAAwB,EACxB;YACE,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,IAAI,EAAE,iBAAiB,CAAC,SAAS;AACjC,YAAA,WAAW,EACT,6DAA6D;YAC/D,eAAe,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;AAChD,YAAA,eAAe,EAAE;gBACf,0DAA0D;AAC3D,aAAA;AACD,YAAA,YAAY,EAAE,YAAY;AAC3B,SAAA,CACF;QAED,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC;QAE5D,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,SAAS,CAAC,GAAG,aAAa;;AAGlE;;AAEG;AACI,IAAA,gBAAgB,CAAC,IAAuB,EAAA;AAC7C,QAAA,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;;AAGlC;;;;;;AAMG;IACK,mBAAmB,CACzB,aAAsC,EACtC,oBAAwC,EAAA;QAExC,IAAI,CAAC,oBAAoB,IAAI,oBAAoB,CAAC,MAAM,KAAK,CAAC,EAAE;AAC9D,YAAA,OAAO,aAAa;;;AAItB,QAAA,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;;QAG9D,YAAY,CAAC,SAAS,GAAG;YACvB,GAAG,YAAY,CAAC,SAAS;AACzB,YAAA,GAAG,oBAAoB;SACxB;AAED,QAAA,OAAO,YAAY;;AAGrB;;;AAGG;AACK,IAAA,8BAA8B,CAAC,KAA2B,EAAA;;AAEhE,QAAA,IAAI,CAAC,8BAA8B,CAAC,KAAK,CAAC;;AAG1C,QAAA,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC;;AAGpC,QAAA,IAAI,CAAC,0BAA0B,CAAC,KAAK,CAAC;;AAGxC;;AAEG;AACK,IAAA,8BAA8B,CAAC,KAA2B,EAAA;AAChE,QAAA,MAAM,kBAAkB,GAAG,KAAK,CAAC,QAAQ,CAAC,cAAc;QACxD,MAAM,0BAA0B,GAC9B,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,aAAa,CAAC;;AAGtD,QAAA,MAAM,WAAW,GAAG;AAClB,YAAA,GAAG,KAAK,CAAC,UAAU,CAAC,WAAW;AAC/B,YAAA,GAAG,KAAK,CAAC,UAAU,CAAC,UAAU;AAC9B,YAAA,GAAG,KAAK,CAAC,UAAU,CAAC,UAAU;AAC9B,YAAA,GAAG,KAAK,CAAC,UAAU,CAAC,UAAU;AAC9B,YAAA,GAAG,KAAK,CAAC,UAAU,CAAC,OAAO;AAC3B,YAAA,GAAG,KAAK,CAAC,UAAU,CAAC,QAAQ;AAC5B,YAAA,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK;SAC1B;;QAGD,WAAW,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,KAAK,KAAI;AACvC,YAAA,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,aAAa,CACtC,IAAI,EACJ,CAAA,uBAAA,EAA0B,KAAK,CAAA,CAAE,EACjC;gBACE,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,gBAAgB,EAAE,0BAA0B,CAAC,oBAAoB;AACjE,gBAAA,WAAW,EAAE,kBAAkB;AAC/B,gBAAA,aAAa,EAAE,OAAO;AACtB,gBAAA,QAAQ,EAAE,SAAS;AACnB,gBAAA,UAAU,EAAE,aAAa;AAC1B,aAAA,CACF;YAED,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC;AACzD,YAAA,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,gBAAgB,CAAC;AACpD,SAAC,CAAC;;AAGJ;;AAEG;AACK,IAAA,wBAAwB,CAAC,KAA2B,EAAA;AAC1D,QAAA,MAAM,YAAY,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ;QAC5C,MAAM,oBAAoB,GAAG,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,OAAO,CAAC;;AAG3E,QAAA,MAAM,eAAe,GAAG;AACtB,YAAA,GAAG,KAAK,CAAC,UAAU,CAAC,WAAW;AAC/B,YAAA,GAAG,KAAK,CAAC,UAAU,CAAC,UAAU;AAC9B,YAAA,GAAG,KAAK,CAAC,UAAU,CAAC,OAAO;AAC3B,YAAA,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK;SAC1B;;QAGD,eAAe,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,KAAK,KAAI;AAC3C,YAAA,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,aAAa,CACtC,IAAI,EACJ,CAAA,iBAAA,EAAoB,KAAK,CAAA,CAAE,EAC3B;gBACE,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,gBAAgB,EAAE,oBAAoB,CAAC,oBAAoB;AAC3D,gBAAA,WAAW,EAAE,YAAY;AACzB,gBAAA,aAAa,EAAE,OAAO;AACtB,gBAAA,QAAQ,EAAE,SAAS;AACnB,gBAAA,UAAU,EAAE,aAAa;AAC1B,aAAA,CACF;YAED,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC;AACzD,YAAA,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC;AAC9C,SAAC,CAAC;;AAGJ;;AAEG;AACK,IAAA,0BAA0B,CAAC,KAA2B,EAAA;AAC5D,QAAA,MAAM,cAAc,GAAG,KAAK,CAAC,QAAQ,CAAC,UAAU;QAChD,MAAM,sBAAsB,GAC1B,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,SAAS,CAAC;;AAGlD,QAAA,MAAM,iBAAiB,GAAG;AACxB,YAAA,GAAG,KAAK,CAAC,UAAU,CAAC,WAAW;AAC/B,YAAA,GAAG,KAAK,CAAC,UAAU,CAAC,OAAO;AAC3B,YAAA,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK;SAC1B;;QAGD,iBAAiB,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,KAAK,KAAI;AAC7C,YAAA,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,aAAa,CACtC,IAAI,EACJ,CAAA,mBAAA,EAAsB,KAAK,CAAA,CAAE,EAC7B;gBACE,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,gBAAgB,EAAE,sBAAsB,CAAC,oBAAoB;AAC7D,gBAAA,WAAW,EAAE,cAAc;AAC3B,gBAAA,aAAa,EAAE,OAAO;AACtB,gBAAA,QAAQ,EAAE,SAAS;AACnB,gBAAA,UAAU,EAAE,aAAa;AAC1B,aAAA,CACF;YAED,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC;AACzD,YAAA,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,YAAY,CAAC;AAChD,SAAC,CAAC;;AAEL;;ACraK,MAAO,2BAA4B,SAAQ,eAAe,CAAA;AAC9D,IAAA,WAAA,CACE,KAAgB,EAChB,EAAE,GAAG,iBAAiB,EACtB,KAA4B,EAAA;AAE5B,QAAA,MAAM,YAAY,GAAyB;AACzC,YAAA,MAAM,EAAE,mBAAmB;AAC3B,YAAA,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG;AACrB,YAAA,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS;AAC/B,YAAA,GAAG,KAAK;SACT;AAED,QAAA,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,YAAY,CAAC;;AAEjC;;;;"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jaypie/constructs",
-  "version": "1.1.21",
+  "version": "1.1.22",
   "description": "CDK constructs for Jaypie applications",
   "license": "MIT",
   "author": "Finlayson Studio",
@@ -46,5 +46,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "gitHead": "28fe9c4bc2882aa4f54f8ed4b2bddbe53486508a"
+  "gitHead": "c21b273946dbe3a16d3d69fd543e0c17ebac0dff"
 }