@kensio/yulin 1.12.1 → 1.14.0

package/dist/service/ecs/cluster/sim-ecs-cluster-store.js

@@ -0,0 +1,51 @@
+/**
+ * The simulated ECS clusters one Account and Region holds.
+ *
+ * Clusters are keyed by name because a cluster name is unique within an
+ * Account and Region on real ECS, and because both forms a request can name a
+ * cluster by, the short name and the ARN, come down to that name.
+ *
+ * A deleted cluster is kept rather than removed. It is still describable, as
+ * it is on real ECS, and creating a cluster with its name again replaces it
+ * with a new active one.
+ */
+export class SimEcsClusterStore {
+    clusters = new Map();
+    /**
+     * Hold a cluster, replacing any earlier one of the same name.
+     *
+     * The earlier one is dropped before the replacement is held, so a cluster
+     * created again after being deleted takes its place at the end of the
+     * listing rather than keeping the position the deleted one had.
+     */
+    put(cluster) {
+        this.clusters.delete(cluster.clusterName);
+        this.clusters.set(cluster.clusterName, cluster);
+    }
+    /**
+     * Find a cluster by name, whether it is active or deleted.
+     */
+    find(clusterName) {
+        return this.clusters.get(clusterName);
+    }
+    /**
+     * Find an active cluster by name.
+     */
+    findActive(clusterName) {
+        const cluster = this.clusters.get(clusterName);
+        if (cluster?.isActive() !== true) {
+            return undefined;
+        }
+        return cluster;
+    }
+    /**
+     * The active clusters, in the order they were created.
+     */
+    active() {
+        return this.clusters
+            .values()
+            .filter((cluster) => cluster.isActive())
+            .toArray();
+    }
+}
+//# sourceMappingURL=sim-ecs-cluster-store.js.map

package/dist/service/ecs/cluster/sim-ecs-cluster-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ecs-cluster-store.js","sourceRoot":"","sources":["../../../../src/service/ecs/cluster/sim-ecs-cluster-store.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;GAUG;AACH,MAAM,OAAO,kBAAkB;IACZ,QAAQ,GAAG,IAAI,GAAG,EAAyB,CAAC;IAE7D;;;;;;OAMG;IACH,GAAG,CAAC,OAAsB;QACxB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC1C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAClD,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,WAAmB;QACtB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,WAAmB;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAE/C,IAAI,OAAO,EAAE,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC;YACjC,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,MAAM;QACJ,OAAO,IAAI,CAAC,QAAQ;aACjB,MAAM,EAAE;aACR,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;aACvC,OAAO,EAAE,CAAC;IACf,CAAC;CACF"}

package/dist/service/ecs/cluster/sim-ecs-cluster.d.ts

@@ -0,0 +1,95 @@
+import type { SimArn } from "../../aws/arn.js";
+import type { SimEcsTag } from "../task-definition/sim-ecs-task-definition-parts.js";
+/**
+ * Minimal structural sim ECS cluster setting.
+ *
+ * https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_ClusterSetting.html
+ */
+export interface SimEcsClusterSetting {
+    readonly name?: string | undefined;
+    readonly value?: string | undefined;
+}
+/**
+ * Minimal structural sim ECS described cluster.
+ *
+ * https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_Cluster.html
+ */
+export interface SimEcsClusterDetail {
+    readonly clusterArn?: SimArn | undefined;
+    readonly clusterName?: string | undefined;
+    readonly status?: SimEcsClusterStatus | undefined;
+    readonly registeredContainerInstancesCount?: number | undefined;
+    readonly runningTasksCount?: number | undefined;
+    readonly pendingTasksCount?: number | undefined;
+    readonly activeServicesCount?: number | undefined;
+    readonly statistics?: readonly SimEcsKeyValueString[] | undefined;
+    readonly settings?: readonly SimEcsClusterSetting[] | undefined;
+    readonly configuration?: object | undefined;
+    readonly tags?: readonly SimEcsTag[] | undefined;
+    readonly capacityProviders?: readonly string[] | undefined;
+    readonly defaultCapacityProviderStrategy?: readonly object[] | undefined;
+}
+/**
+ * Minimal structural sim ECS statistic entry.
+ */
+export interface SimEcsKeyValueString {
+    readonly name?: string | undefined;
+    readonly value?: string | undefined;
+}
+/**
+ * The states a simulated ECS cluster can be in.
+ */
+export type SimEcsClusterStatus = "ACTIVE" | "INACTIVE";
+interface SimEcsClusterProperties {
+    readonly clusterArn: SimArn;
+    readonly clusterName: string;
+    readonly settings?: readonly SimEcsClusterSetting[] | undefined;
+    readonly configuration?: object | undefined;
+    readonly tags?: readonly SimEcsTag[] | undefined;
+}
+/**
+ * One simulated ECS cluster.
+ *
+ * A cluster is little more than a named scope for the tasks and services that
+ * will run in it. It holds no capacity here, because there is nothing to hold:
+ * a simulated task runs in this process rather than on an instance, so the
+ * counts a described cluster reports are the ones it can honestly report.
+ */
+export declare class SimEcsCluster {
+    readonly clusterArn: SimArn;
+    readonly clusterName: string;
+    private status;
+    private readonly settings;
+    private readonly configuration;
+    private readonly tags;
+    constructor(properties: SimEcsClusterProperties);
+    /**
+     * Whether this cluster is still the one a request naming it reaches.
+     */
+    isActive(): boolean;
+    /**
+     * Mark this cluster deleted.
+     *
+     * It stays describable as `INACTIVE` rather than being removed, which is
+     * what real ECS does with a deleted cluster: something holding its ARN can
+     * still find out what became of it.
+     */
+    markDeleted(): void;
+    /**
+     * This cluster as `DescribeClusters` reports it.
+     *
+     * Tags and settings are only reported when the request asked for them, as
+     * real ECS only reports them under the matching `include` value.
+     */
+    toOutput(included: SimEcsClusterIncludes): SimEcsClusterDetail;
+}
+/**
+ * Which parts of a cluster a describe request asked to be reported.
+ */
+export interface SimEcsClusterIncludes {
+    readonly settings: boolean;
+    readonly configuration: boolean;
+    readonly tags: boolean;
+}
+export {};
+//# sourceMappingURL=sim-ecs-cluster.d.ts.map

package/dist/service/ecs/cluster/sim-ecs-cluster.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ecs-cluster.d.ts","sourceRoot":"","sources":["../../../../src/service/ecs/cluster/sim-ecs-cluster.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qDAAqD,CAAC;AAErF;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACrC;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,MAAM,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;IAClD,QAAQ,CAAC,iCAAiC,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClD,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,oBAAoB,EAAE,GAAG,SAAS,CAAC;IAClE,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,oBAAoB,EAAE,GAAG,SAAS,CAAC;IAChE,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,SAAS,EAAE,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAC3D,QAAQ,CAAC,+BAA+B,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;CAC1E;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACrC;AAED;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAAG,QAAQ,GAAG,UAAU,CAAC;AAExD,UAAU,uBAAuB;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,oBAAoB,EAAE,GAAG,SAAS,CAAC;IAChE,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,SAAS,EAAE,GAAG,SAAS,CAAC;CAClD;AAED;;;;;;;GAOG;AACH,qBAAa,aAAa;IACxB,SAAgB,UAAU,EAAE,MAAM,CAAC;IACnC,SAAgB,WAAW,EAAE,MAAM,CAAC;IAEpC,OAAO,CAAC,MAAM,CAAiC;IAC/C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAkC;IAC3D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAqB;IACnD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAuB;IAE5C,YAAY,UAAU,EAAE,uBAAuB,EAM9C;IAED;;OAEG;IACH,QAAQ,IAAI,OAAO,CAElB;IAED;;;;;;OAMG;IACH,WAAW,IAAI,IAAI,CAElB;IAED;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,GAAG,mBAAmB,CAmB7D;CACF;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB"}

package/dist/service/ecs/cluster/sim-ecs-cluster.factory.d.ts

@@ -0,0 +1,23 @@
+import { AsyncMappedFactory } from "@kensio/part-factory";
+import type { SimAws } from "../../aws/sim-aws.js";
+import type { SimEcsClusterDetail } from "./sim-ecs-cluster.js";
+/**
+ * What a test asks for when it wants a cluster already created.
+ */
+export interface SimEcsCreatedClusterInput {
+    readonly clusterName: string;
+}
+/**
+ * Creates one ECS cluster.
+ *
+ * A task needs a cluster to run in, and a request naming none means the
+ * `default` one, which real ECS does not create by itself. That is what a test
+ * about running a task wants and none of them is about, so it defaults to the
+ * default cluster.
+ *
+ * ```typescript
+ * await simEcsClusterFactory.make({}, simAws);
+ * ```
+ */
+export declare const simEcsClusterFactory: AsyncMappedFactory<SimEcsCreatedClusterInput, SimEcsClusterDetail, SimAws>;
+//# sourceMappingURL=sim-ecs-cluster.factory.d.ts.map

package/dist/service/ecs/cluster/sim-ecs-cluster.factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ecs-cluster.factory.d.ts","sourceRoot":"","sources":["../../../../src/service/ecs/cluster/sim-ecs-cluster.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE1D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAEnD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAEhE;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,oBAAoB,4EAkBhC,CAAC"}

package/dist/service/ecs/cluster/sim-ecs-cluster.factory.js

@@ -0,0 +1,23 @@
+import { AsyncMappedFactory } from "@kensio/part-factory";
+import { assertDefined } from "../../../util/type-guard/defined.js";
+import { simEcsDefaultClusterName } from "./sim-ecs-cluster-arn.js";
+/**
+ * Creates one ECS cluster.
+ *
+ * A task needs a cluster to run in, and a request naming none means the
+ * `default` one, which real ECS does not create by itself. That is what a test
+ * about running a task wants and none of them is about, so it defaults to the
+ * default cluster.
+ *
+ * ```typescript
+ * await simEcsClusterFactory.make({}, simAws);
+ * ```
+ */
+export const simEcsClusterFactory = new AsyncMappedFactory(() => ({ clusterName: simEcsDefaultClusterName }), async (input, simAws) => {
+    const creation = await simAws
+        .ecs()
+        .createCluster({ input: { clusterName: input.clusterName } });
+    assertDefined(creation.cluster, "Creating a sim ECS cluster gave none back");
+    return creation.cluster;
+});
+//# sourceMappingURL=sim-ecs-cluster.factory.js.map

package/dist/service/ecs/cluster/sim-ecs-cluster.factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ecs-cluster.factory.js","sourceRoot":"","sources":["../../../../src/service/ecs/cluster/sim-ecs-cluster.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAEpE,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AAUpE;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,kBAAkB,CAKxD,GAAG,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,wBAAwB,EAAE,CAAC,EACjD,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;IACtB,MAAM,QAAQ,GAAG,MAAM,MAAM;SAC1B,GAAG,EAAE;SACL,aAAa,CAAC,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAEhE,aAAa,CACX,QAAQ,CAAC,OAAO,EAChB,2CAA2C,CAC5C,CAAC;IAEF,OAAO,QAAQ,CAAC,OAAO,CAAC;AAC1B,CAAC,CACF,CAAC"}

package/dist/service/ecs/cluster/sim-ecs-cluster.js

@@ -0,0 +1,66 @@
+/**
+ * One simulated ECS cluster.
+ *
+ * A cluster is little more than a named scope for the tasks and services that
+ * will run in it. It holds no capacity here, because there is nothing to hold:
+ * a simulated task runs in this process rather than on an instance, so the
+ * counts a described cluster reports are the ones it can honestly report.
+ */
+export class SimEcsCluster {
+    clusterArn;
+    clusterName;
+    status = "ACTIVE";
+    settings;
+    configuration;
+    tags;
+    constructor(properties) {
+        this.clusterArn = properties.clusterArn;
+        this.clusterName = properties.clusterName;
+        this.settings = structuredClone(properties.settings ?? []);
+        this.configuration = structuredClone(properties.configuration);
+        this.tags = structuredClone(properties.tags ?? []);
+    }
+    /**
+     * Whether this cluster is still the one a request naming it reaches.
+     */
+    isActive() {
+        return this.status === "ACTIVE";
+    }
+    /**
+     * Mark this cluster deleted.
+     *
+     * It stays describable as `INACTIVE` rather than being removed, which is
+     * what real ECS does with a deleted cluster: something holding its ARN can
+     * still find out what became of it.
+     */
+    markDeleted() {
+        this.status = "INACTIVE";
+    }
+    /**
+     * This cluster as `DescribeClusters` reports it.
+     *
+     * Tags and settings are only reported when the request asked for them, as
+     * real ECS only reports them under the matching `include` value.
+     */
+    toOutput(included) {
+        return {
+            clusterArn: this.clusterArn,
+            clusterName: this.clusterName,
+            status: this.status,
+            registeredContainerInstancesCount: 0,
+            runningTasksCount: 0,
+            pendingTasksCount: 0,
+            activeServicesCount: 0,
+            statistics: [],
+            capacityProviders: [],
+            defaultCapacityProviderStrategy: [],
+            settings: included.settings ? structuredClone(this.settings) : [],
+            tags: included.tags ? structuredClone(this.tags) : [],
+            ...(included.configuration &&
+                this.configuration !== undefined && {
+                configuration: structuredClone(this.configuration),
+            }),
+        };
+    }
+}
+//# sourceMappingURL=sim-ecs-cluster.js.map

package/dist/service/ecs/cluster/sim-ecs-cluster.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ecs-cluster.js","sourceRoot":"","sources":["../../../../src/service/ecs/cluster/sim-ecs-cluster.ts"],"names":[],"mappings":"AAuDA;;;;;;;GAOG;AACH,MAAM,OAAO,aAAa;IACR,UAAU,CAAS;IACnB,WAAW,CAAS;IAE5B,MAAM,GAAwB,QAAQ,CAAC;IAC9B,QAAQ,CAAkC;IAC1C,aAAa,CAAqB;IAClC,IAAI,CAAuB;IAE5C,YAAY,UAAmC;QAC7C,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,QAAQ,GAAG,eAAe,CAAC,UAAU,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,aAAa,GAAG,eAAe,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;QAC/D,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC;IAClC,CAAC;IAED;;;;;;OAMG;IACH,WAAW;QACT,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC;IAC3B,CAAC;IAED;;;;;OAKG;IACH,QAAQ,CAAC,QAA+B;QACtC,OAAO;YACL,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,iCAAiC,EAAE,CAAC;YACpC,iBAAiB,EAAE,CAAC;YACpB,iBAAiB,EAAE,CAAC;YACpB,mBAAmB,EAAE,CAAC;YACtB,UAAU,EAAE,EAAE;YACd,iBAAiB,EAAE,EAAE;YACrB,+BAA+B,EAAE,EAAE;YACnC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE;YACjE,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE;YACrD,GAAG,CAAC,QAAQ,CAAC,aAAa;gBACxB,IAAI,CAAC,aAAa,KAAK,SAAS,IAAI;gBAClC,aAAa,EAAE,eAAe,CAAC,IAAI,CAAC,aAAa,CAAC;aACnD,CAAC;SACL,CAAC;IACJ,CAAC;CACF"}

package/dist/service/ecs/command/authorize/sim-ecs-authorizer.d.ts

@@ -0,0 +1,64 @@
+import type { SimAwsResolvedCaller } from "../../../aws/caller/sim-aws-caller-resolver.js";
+import type { SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimEcsRequestOptions } from "../sim-ecs-request-options.js";
+interface SimEcsAuthorizerProperties {
+    readonly iam: SimIamInterServiceAuthZ;
+}
+/**
+ * Applies simulated IAM authorization to ECS requests.
+ *
+ * ECS splits its operations by the resource type each action takes.
+ * `DescribeClusters` and `DeleteCluster` take a cluster, `RunTask` takes the
+ * task definition it runs, `DescribeTasks` and `StopTask` take the task, and
+ * the service operations take the service.
+ * The operations that read or write a task definition, along with
+ * `CreateCluster`, `ListClusters` and `ListTasks`, have no resource type at
+ * all, so they authorize against `*`.
+ *
+ * A denial is reported as ECS's own AccessDeniedException rather than the
+ * shared IAM error, because that is the error a real ECS caller would have to
+ * handle.
+ */
+export declare class SimEcsAuthorizer {
+    private readonly iam;
+    private readonly callerIdentifier;
+    constructor(properties: SimEcsAuthorizerProperties);
+    /**
+     * Ensure the caller may perform an action on a cluster, named by its ARN.
+     *
+     * The cluster need not exist. Authorization comes first either way, so an
+     * unauthorized caller cannot learn from the error whether a cluster is
+     * there.
+     */
+    authorizeCluster(action: string, clusterArn: string, options?: SimEcsRequestOptions): SimAwsResolvedCaller;
+    /**
+     * Ensure the caller may perform an action on a task, named by its ARN.
+     *
+     * The task need not exist, as the cluster need not for a cluster action.
+     */
+    authorizeTask(action: string, taskArn: string, options?: SimEcsRequestOptions): SimAwsResolvedCaller;
+    /**
+     * Ensure the caller may perform an action on a service, named by its ARN.
+     *
+     * The service need not exist, as the cluster need not for a cluster action.
+     * `CreateService` authorizes against the ARN the service is about to have,
+     * which is what real ECS does with it.
+     */
+    authorizeService(action: string, serviceArn: string, options?: SimEcsRequestOptions): SimAwsResolvedCaller;
+    /**
+     * Ensure the caller may perform an action on a task definition revision.
+     *
+     * `RunTask` is the one operation here whose resource is a task definition.
+     * The revision it authorizes against is the one the request resolved to, so
+     * a request naming a family alone is authorized against the revision it
+     * would run.
+     */
+    authorizeTaskDefinition(action: string, taskDefinitionArn: string, options?: SimEcsRequestOptions): SimAwsResolvedCaller;
+    /**
+     * Ensure the caller may perform an action that names no ECS resource.
+     */
+    authorizeAnyResource(action: string, options?: SimEcsRequestOptions): SimAwsResolvedCaller;
+    private authorizeResource;
+}
+export {};
+//# sourceMappingURL=sim-ecs-authorizer.d.ts.map

package/dist/service/ecs/command/authorize/sim-ecs-authorizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ecs-authorizer.d.ts","sourceRoot":"","sources":["../../../../../src/service/ecs/command/authorize/sim-ecs-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gDAAgD,CAAC;AAC3F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAGtG,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAa1E,UAAU,0BAA0B;IAClC,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;CACvC;AAED;;;;;;;;;;;;;;GAcG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA0B;IAC9C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAgC;IAEjE,YAAY,UAAU,EAAE,0BAA0B,EAEjD;IAED;;;;;;OAMG;IACH,gBAAgB,CACd,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE,oBAAoB,GAC7B,oBAAoB,CAEtB;IAED;;;;OAIG;IACH,aAAa,CACX,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,oBAAoB,GAC7B,oBAAoB,CAEtB;IAED;;;;;;OAMG;IACH,gBAAgB,CACd,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE,oBAAoB,GAC7B,oBAAoB,CAEtB;IAED;;;;;;;OAOG;IACH,uBAAuB,CACrB,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,MAAM,EACzB,OAAO,CAAC,EAAE,oBAAoB,GAC7B,oBAAoB,CAEtB;IAED;;OAEG;IACH,oBAAoB,CAClB,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,oBAAoB,GAC7B,oBAAoB,CAEtB;IAED,OAAO,CAAC,iBAAiB;CAwB1B"}

package/dist/service/ecs/command/authorize/sim-ecs-authorizer.js

@@ -0,0 +1,93 @@
+import { SimIamCallerIdentifier } from "../../../iam/error/sim-iam-caller-identifier.js";
+import { SimEcsAccessDeniedException } from "../../error/sim-ecs.error.js";
+/**
+ * The resource an ECS action with no resource type authorizes against.
+ *
+ * Real ECS gives the task definition operations no resource type, because a
+ * task definition is not something an ECS policy can name. The same goes for
+ * `CreateCluster` and `ListClusters`. A policy allowing any of them has to use
+ * a resource of `*`, and one naming a cluster ARN allows none of them, here as
+ * on AWS.
+ */
+const noResource = "*";
+/**
+ * Applies simulated IAM authorization to ECS requests.
+ *
+ * ECS splits its operations by the resource type each action takes.
+ * `DescribeClusters` and `DeleteCluster` take a cluster, `RunTask` takes the
+ * task definition it runs, `DescribeTasks` and `StopTask` take the task, and
+ * the service operations take the service.
+ * The operations that read or write a task definition, along with
+ * `CreateCluster`, `ListClusters` and `ListTasks`, have no resource type at
+ * all, so they authorize against `*`.
+ *
+ * A denial is reported as ECS's own AccessDeniedException rather than the
+ * shared IAM error, because that is the error a real ECS caller would have to
+ * handle.
+ */
+export class SimEcsAuthorizer {
+    iam;
+    callerIdentifier = new SimIamCallerIdentifier();
+    constructor(properties) {
+        this.iam = properties.iam;
+    }
+    /**
+     * Ensure the caller may perform an action on a cluster, named by its ARN.
+     *
+     * The cluster need not exist. Authorization comes first either way, so an
+     * unauthorized caller cannot learn from the error whether a cluster is
+     * there.
+     */
+    authorizeCluster(action, clusterArn, options) {
+        return this.authorizeResource(action, clusterArn, options);
+    }
+    /**
+     * Ensure the caller may perform an action on a task, named by its ARN.
+     *
+     * The task need not exist, as the cluster need not for a cluster action.
+     */
+    authorizeTask(action, taskArn, options) {
+        return this.authorizeResource(action, taskArn, options);
+    }
+    /**
+     * Ensure the caller may perform an action on a service, named by its ARN.
+     *
+     * The service need not exist, as the cluster need not for a cluster action.
+     * `CreateService` authorizes against the ARN the service is about to have,
+     * which is what real ECS does with it.
+     */
+    authorizeService(action, serviceArn, options) {
+        return this.authorizeResource(action, serviceArn, options);
+    }
+    /**
+     * Ensure the caller may perform an action on a task definition revision.
+     *
+     * `RunTask` is the one operation here whose resource is a task definition.
+     * The revision it authorizes against is the one the request resolved to, so
+     * a request naming a family alone is authorized against the revision it
+     * would run.
+     */
+    authorizeTaskDefinition(action, taskDefinitionArn, options) {
+        return this.authorizeResource(action, taskDefinitionArn, options);
+    }
+    /**
+     * Ensure the caller may perform an action that names no ECS resource.
+     */
+    authorizeAnyResource(action, options) {
+        return this.authorizeResource(action, noResource, options);
+    }
+    authorizeResource(action, resource, options) {
+        const decision = this.iam.authorize({
+            action,
+            resource,
+            caller: options?.caller,
+        });
+        if (decision.isDenied) {
+            const identifier = this.callerIdentifier.format(decision.caller.principal);
+            throw new SimEcsAccessDeniedException(`User: ${identifier} is not authorized to perform: ${action} on ` +
+                `resource: ${resource}`);
+        }
+        return decision.caller;
+    }
+}
+//# sourceMappingURL=sim-ecs-authorizer.js.map

package/dist/service/ecs/command/authorize/sim-ecs-authorizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ecs-authorizer.js","sourceRoot":"","sources":["../../../../../src/service/ecs/command/authorize/sim-ecs-authorizer.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,sBAAsB,EAAE,MAAM,iDAAiD,CAAC;AACzF,OAAO,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AAG3E;;;;;;;;GAQG;AACH,MAAM,UAAU,GAAG,GAAG,CAAC;AAMvB;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,gBAAgB;IACV,GAAG,CAA0B;IAC7B,gBAAgB,GAAG,IAAI,sBAAsB,EAAE,CAAC;IAEjE,YAAY,UAAsC;QAChD,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;;;;;OAMG;IACH,gBAAgB,CACd,MAAc,EACd,UAAkB,EAClB,OAA8B;QAE9B,OAAO,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IAED;;;;OAIG;IACH,aAAa,CACX,MAAc,EACd,OAAe,EACf,OAA8B;QAE9B,OAAO,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;IAED;;;;;;OAMG;IACH,gBAAgB,CACd,MAAc,EACd,UAAkB,EAClB,OAA8B;QAE9B,OAAO,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IAED;;;;;;;OAOG;IACH,uBAAuB,CACrB,MAAc,EACd,iBAAyB,EACzB,OAA8B;QAE9B,OAAO,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,EAAE,OAAO,CAAC,CAAC;IACpE,CAAC;IAED;;OAEG;IACH,oBAAoB,CAClB,MAAc,EACd,OAA8B;QAE9B,OAAO,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IAEO,iBAAiB,CACvB,MAAc,EACd,QAAgB,EAChB,OAAyC;QAEzC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAClC,MAAM;YACN,QAAQ;YACR,MAAM,EAAE,OAAO,EAAE,MAAM;SACxB,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAC7C,QAAQ,CAAC,MAAM,CAAC,SAAS,CAC1B,CAAC;YAEF,MAAM,IAAI,2BAA2B,CACnC,SAAS,UAAU,kCAAkC,MAAM,MAAM;gBAC/D,aAAa,QAAQ,EAAE,CAC1B,CAAC;QACJ,CAAC;QAED,OAAO,QAAQ,CAAC,MAAM,CAAC;IACzB,CAAC;CACF"}

package/dist/service/ecs/command/create-cluster/create-cluster-factory.d.ts

@@ -0,0 +1,30 @@
+import { type SimEcsClusterArn } from "../../cluster/sim-ecs-cluster-arn.js";
+import { SimEcsCluster } from "../../cluster/sim-ecs-cluster.js";
+import type { SimEcsClusterStore } from "../../cluster/sim-ecs-cluster-store.js";
+import type { SimCreateClusterCommandInput } from "./create-cluster.command.js";
+interface CreateClusterFactoryProperties {
+    readonly clusters: SimEcsClusterStore;
+    readonly clusterArn: SimEcsClusterArn;
+}
+/**
+ * Makes the cluster a CreateCluster request asked for.
+ *
+ * Real ECS answers a repeated CreateCluster with the cluster already holding
+ * the name rather than an error, which is what makes a stack deploying the
+ * same cluster twice work. That is why this finds before it makes.
+ */
+export declare class CreateClusterFactory {
+    private readonly clusters;
+    private readonly clusterArn;
+    constructor(properties: CreateClusterFactoryProperties);
+    /**
+     * The name a request asked for, which is `default` when it asked for none.
+     */
+    static clusterName(input: SimCreateClusterCommandInput): string;
+    /**
+     * The cluster this request means, made and held if it is not already there.
+     */
+    make(input: SimCreateClusterCommandInput, clusterName: string): SimEcsCluster;
+}
+export {};
+//# sourceMappingURL=create-cluster-factory.d.ts.map

package/dist/service/ecs/command/create-cluster/create-cluster-factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-cluster-factory.d.ts","sourceRoot":"","sources":["../../../../../src/service/ecs/command/create-cluster/create-cluster-factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AACjE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAC;AAEjF,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,6BAA6B,CAAC;AAEhF,UAAU,8BAA8B;IACtC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;CACvC;AAED;;;;;;GAMG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqB;IAC9C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmB;IAE9C,YAAY,UAAU,EAAE,8BAA8B,EAGrD;IAED;;OAEG;IACH,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,4BAA4B,GAAG,MAAM,CAM9D;IAED;;OAEG;IACH,IAAI,CACF,KAAK,EAAE,4BAA4B,EACnC,WAAW,EAAE,MAAM,GAClB,aAAa,CAkBf;CACF"}

package/dist/service/ecs/command/create-cluster/create-cluster-factory.js

@@ -0,0 +1,46 @@
+import { simEcsDefaultClusterName, } from "../../cluster/sim-ecs-cluster-arn.js";
+import { SimEcsCluster } from "../../cluster/sim-ecs-cluster.js";
+import { requiredSimEcsName } from "../../sim-ecs-name.js";
+/**
+ * Makes the cluster a CreateCluster request asked for.
+ *
+ * Real ECS answers a repeated CreateCluster with the cluster already holding
+ * the name rather than an error, which is what makes a stack deploying the
+ * same cluster twice work. That is why this finds before it makes.
+ */
+export class CreateClusterFactory {
+    clusters;
+    clusterArn;
+    constructor(properties) {
+        this.clusters = properties.clusters;
+        this.clusterArn = properties.clusterArn;
+    }
+    /**
+     * The name a request asked for, which is `default` when it asked for none.
+     */
+    static clusterName(input) {
+        if (input.clusterName === undefined) {
+            return simEcsDefaultClusterName;
+        }
+        return requiredSimEcsName(input.clusterName, "cluster name");
+    }
+    /**
+     * The cluster this request means, made and held if it is not already there.
+     */
+    make(input, clusterName) {
+        const held = this.clusters.findActive(clusterName);
+        if (held !== undefined) {
+            return held;
+        }
+        const cluster = new SimEcsCluster({
+            clusterArn: this.clusterArn.make(clusterName),
+            clusterName,
+            settings: input.settings,
+            configuration: input.configuration,
+            tags: input.tags,
+        });
+        this.clusters.put(cluster);
+        return cluster;
+    }
+}
+//# sourceMappingURL=create-cluster-factory.js.map

package/dist/service/ecs/command/create-cluster/create-cluster-factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-cluster-factory.js","sourceRoot":"","sources":["../../../../../src/service/ecs/command/create-cluster/create-cluster-factory.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,GAEzB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AAEjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAQ3D;;;;;;GAMG;AACH,MAAM,OAAO,oBAAoB;IACd,QAAQ,CAAqB;IAC7B,UAAU,CAAmB;IAE9C,YAAY,UAA0C;QACpD,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,WAAW,CAAC,KAAmC;QACpD,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO,wBAAwB,CAAC;QAClC,CAAC;QAED,OAAO,kBAAkB,CAAC,KAAK,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IAC/D,CAAC;IAED;;OAEG;IACH,IAAI,CACF,KAAmC,EACnC,WAAmB;QAEnB,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QAEnD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC;YAChC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC;YAC7C,WAAW;YACX,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,IAAI,EAAE,KAAK,CAAC,IAAI;SACjB,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAE3B,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}

package/dist/service/ecs/command/create-cluster/create-cluster.command.d.ts

@@ -0,0 +1,28 @@
+import type { SimResponseMetadata } from "../../../aws/metadata/response-metadata.type.js";
+import type { SimEcsClusterDetail, SimEcsClusterSetting } from "../../cluster/sim-ecs-cluster.js";
+import type { SimEcsTag } from "../../task-definition/sim-ecs-task-definition-parts.js";
+/**
+ * Minimal structural sim ECS CreateCluster command.
+ */
+export interface SimCreateClusterCommand {
+    readonly input: SimCreateClusterCommandInput;
+}
+/**
+ * Minimal structural sim ECS CreateCluster input.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/ecs/command/CreateClusterCommand/
+ */
+export interface SimCreateClusterCommandInput {
+    readonly clusterName?: string | undefined;
+    readonly settings?: readonly SimEcsClusterSetting[] | undefined;
+    readonly configuration?: object | undefined;
+    readonly tags?: readonly SimEcsTag[] | undefined;
+}
+/**
+ * Minimal structural sim ECS CreateCluster output.
+ */
+export interface SimCreateClusterCommandOutput {
+    readonly cluster?: SimEcsClusterDetail | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+//# sourceMappingURL=create-cluster.command.d.ts.map

package/dist/service/ecs/command/create-cluster/create-cluster.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-cluster.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/ecs/command/create-cluster/create-cluster.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,KAAK,EACV,mBAAmB,EACnB,oBAAoB,EACrB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wDAAwD,CAAC;AAExF;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,4BAA4B,CAAC;CAC9C;AAED;;;;GAIG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,oBAAoB,EAAE,GAAG,SAAS,CAAC;IAChE,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,SAAS,EAAE,GAAG,SAAS,CAAC;CAClD;AAED;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;IACnD,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC"}

package/dist/service/ecs/command/create-cluster/create-cluster.command.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=create-cluster.command.js.map

package/dist/service/ecs/command/create-cluster/create-cluster.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-cluster.command.js","sourceRoot":"","sources":["../../../../../src/service/ecs/command/create-cluster/create-cluster.command.ts"],"names":[],"mappings":""}

package/dist/service/ecs/command/create-cluster/create-cluster.handler.d.ts

@@ -0,0 +1,23 @@
+import type { CommandHandler } from "../../../../command/command-handler.js";
+import type { SimEcsClusterCommandContext } from "../sim-ecs-command-context.js";
+import { SimEcsCommandHandler } from "../sim-ecs-command-handler.js";
+import type { SimEcsRequestOptions } from "../sim-ecs-request-options.js";
+import type { SimCreateClusterCommand, SimCreateClusterCommandOutput } from "./create-cluster.command.js";
+/**
+ * Simulated ECS CreateClusterCommand handler.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/ecs/command/CreateClusterCommand/
+ */
+export declare class CreateClusterCommandHandler extends SimEcsCommandHandler implements CommandHandler<SimCreateClusterCommand, SimCreateClusterCommandOutput> {
+    private readonly clusterFactory;
+    constructor(context: SimEcsClusterCommandContext);
+    /**
+     * Create a cluster, or hand back the one already holding the name.
+     *
+     * The name is read before authorization because a malformed request is
+     * malformed whoever made it, and nothing is held until the caller has been
+     * authorized.
+     */
+    handle(command: SimCreateClusterCommand, options?: SimEcsRequestOptions): Promise<SimCreateClusterCommandOutput>;
+}
+//# sourceMappingURL=create-cluster.handler.d.ts.map

package/dist/service/ecs/command/create-cluster/create-cluster.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-cluster.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/ecs/command/create-cluster/create-cluster.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AACjF,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAE1E,OAAO,KAAK,EACV,uBAAuB,EACvB,6BAA6B,EAC9B,MAAM,6BAA6B,CAAC;AAqBrC;;;;GAIG;AACH,qBAAa,2BACX,SAAQ,oBACR,YACE,cAAc,CAAC,uBAAuB,EAAE,6BAA6B,CAAC;IAExE,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAuB;IAEtD,YAAY,OAAO,EAAE,2BAA2B,EAG/C;IAED;;;;;;OAMG;IACG,MAAM,CACV,OAAO,EAAE,uBAAuB,EAChC,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,6BAA6B,CAAC,CAYxC;CACF"}