@kensio/yulin 1.17.2 → 1.18.0

package/dist/service/wafv2/cfn/association/sim-cfn-waf-association-creator.js

@@ -0,0 +1,69 @@
+import { SimWafUnavailableEntityException } from "../../error/sim-wafv2.error.js";
+import { simCfnWafResourceCommand } from "../sim-cfn-waf-resource-error.js";
+import { wafWebAclAssociationResourceType } from "../sim-cfn-waf-resource-types.js";
+import { SimCfnWafAssociationConfig } from "./sim-cfn-waf-association-config.js";
+import { SimWafCfnWebAclAssociation } from "./sim-cfn-waf-web-acl-association.js";
+/**
+ * Puts a web ACL in front of a resource from an AWS::WAFv2::WebACLAssociation
+ * Resource.
+ *
+ * The association is made through AssociateWebACL and taken off through
+ * DisassociateWebACL, so a template gets the same association an SDK caller
+ * gets, and the same refusals: a resource type WAF does not protect, a
+ * resource this simulation does not hold, and a `CLOUDFRONT` scope web ACL,
+ * which reaches a distribution through the distribution's own `WebACLId`
+ * rather than through an association.
+ */
+export class SimCfnWafAssociationCreator {
+    #wafV2;
+    constructor(properties) {
+        this.#wafV2 = properties.wafV2;
+    }
+    /**
+     * Make the association an AWS::WAFv2::WebACLAssociation Resource describes.
+     */
+    async create(resource, properties) {
+        const config = new SimCfnWafAssociationConfig({ resource, properties });
+        const association = new SimWafCfnWebAclAssociation({
+            resourceArn: config.resourceArn(),
+            webAclArn: config.webAclArn(),
+        });
+        return await simCfnWafResourceCommand(wafWebAclAssociationResourceType, resource.logicalId, async () => {
+            await this.#wafV2.associateWebAcl({
+                input: {
+                    ResourceArn: association.resourceArn,
+                    WebACLArn: association.webAclArn,
+                },
+            });
+            return association;
+        });
+    }
+    /**
+     * Take the association an AWS::WAFv2::WebACLAssociation Resource made off
+     * again.
+     *
+     * The web ACL and the resource are both left as they are. Deleting the
+     * association is only ever about the association, which is why a teardown
+     * reaches it before the web ACL it names.
+     *
+     * A stage or a user pool that has gone already is not an error. A template
+     * whose `ResourceArn` is a literal rather than a reference gives
+     * CloudFormation no reason to bring the association down first, and deleting
+     * the stage took the association with it, so there is nothing left to undo.
+     */
+    async delete(resource, association) {
+        await simCfnWafResourceCommand(wafWebAclAssociationResourceType, resource.logicalId, async () => {
+            try {
+                await this.#wafV2.disassociateWebAcl({
+                    input: { ResourceArn: association.resourceArn },
+                });
+            }
+            catch (error) {
+                if (!(error instanceof SimWafUnavailableEntityException)) {
+                    throw error;
+                }
+            }
+        });
+    }
+}
+//# sourceMappingURL=sim-cfn-waf-association-creator.js.map

package/dist/service/wafv2/cfn/association/sim-cfn-waf-association-creator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-waf-association-creator.js","sourceRoot":"","sources":["../../../../../src/service/wafv2/cfn/association/sim-cfn-waf-association-creator.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gCAAgC,EAAE,MAAM,gCAAgC,CAAC;AAElF,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,EAAE,gCAAgC,EAAE,MAAM,kCAAkC,CAAC;AACpF,OAAO,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AACjF,OAAO,EAAE,0BAA0B,EAAE,MAAM,sCAAsC,CAAC;AAMlF;;;;;;;;;;GAUG;AACH,MAAM,OAAO,2BAA2B;IAC7B,MAAM,CAAW;IAE1B,YAAY,UAAiD;QAC3D,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,QAAwB,EACxB,UAAqC;QAErC,MAAM,MAAM,GAAG,IAAI,0BAA0B,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;QACxE,MAAM,WAAW,GAAG,IAAI,0BAA0B,CAAC;YACjD,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE;YACjC,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE;SAC9B,CAAC,CAAC;QAEH,OAAO,MAAM,wBAAwB,CACnC,gCAAgC,EAChC,QAAQ,CAAC,SAAS,EAClB,KAAK,IAAI,EAAE;YACT,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;gBAChC,KAAK,EAAE;oBACL,WAAW,EAAE,WAAW,CAAC,WAAW;oBACpC,SAAS,EAAE,WAAW,CAAC,SAAS;iBACjC;aACF,CAAC,CAAC;YAEH,OAAO,WAAW,CAAC;QACrB,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,MAAM,CACV,QAAwB,EACxB,WAAuC;QAEvC,MAAM,wBAAwB,CAC5B,gCAAgC,EAChC,QAAQ,CAAC,SAAS,EAClB,KAAK,IAAI,EAAE;YACT,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC;oBACnC,KAAK,EAAE,EAAE,WAAW,EAAE,WAAW,CAAC,WAAW,EAAE;iBAChD,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,CAAC,KAAK,YAAY,gCAAgC,CAAC,EAAE,CAAC;oBACzD,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;CACF"}

package/dist/service/wafv2/cfn/association/sim-cfn-waf-web-acl-association.d.ts

@@ -0,0 +1,18 @@
+/**
+ * One AWS::WAFv2::WebACLAssociation Resource, as CloudFormation holds it.
+ *
+ * WAFv2 keeps an association against the resource it protects rather than as a
+ * thing of its own, so there is nothing in the service for a deployed Resource
+ * to point at. This is what CloudFormation holds instead: the two ARNs the
+ * Resource named, which is what teardown needs to take the association off
+ * again and what `Ref` answers with.
+ */
+export declare class SimWafCfnWebAclAssociation {
+    readonly resourceArn: string;
+    readonly webAclArn: string;
+    constructor(properties: {
+        readonly resourceArn: string;
+        readonly webAclArn: string;
+    });
+}
+//# sourceMappingURL=sim-cfn-waf-web-acl-association.d.ts.map

package/dist/service/wafv2/cfn/association/sim-cfn-waf-web-acl-association.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-waf-web-acl-association.d.ts","sourceRoot":"","sources":["../../../../../src/service/wafv2/cfn/association/sim-cfn-waf-web-acl-association.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,qBAAa,0BAA0B;IACrC,SAAgB,WAAW,EAAE,MAAM,CAAC;IACpC,SAAgB,SAAS,EAAE,MAAM,CAAC;IAElC,YAAY,UAAU,EAAE;QACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;KAC5B,EAGA;CACF"}

package/dist/service/wafv2/cfn/association/sim-cfn-waf-web-acl-association.js

@@ -0,0 +1,18 @@
+/**
+ * One AWS::WAFv2::WebACLAssociation Resource, as CloudFormation holds it.
+ *
+ * WAFv2 keeps an association against the resource it protects rather than as a
+ * thing of its own, so there is nothing in the service for a deployed Resource
+ * to point at. This is what CloudFormation holds instead: the two ARNs the
+ * Resource named, which is what teardown needs to take the association off
+ * again and what `Ref` answers with.
+ */
+export class SimWafCfnWebAclAssociation {
+    resourceArn;
+    webAclArn;
+    constructor(properties) {
+        this.resourceArn = properties.resourceArn;
+        this.webAclArn = properties.webAclArn;
+    }
+}
+//# sourceMappingURL=sim-cfn-waf-web-acl-association.js.map

package/dist/service/wafv2/cfn/association/sim-cfn-waf-web-acl-association.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-waf-web-acl-association.js","sourceRoot":"","sources":["../../../../../src/service/wafv2/cfn/association/sim-cfn-waf-web-acl-association.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,MAAM,OAAO,0BAA0B;IACrB,WAAW,CAAS;IACpB,SAAS,CAAS;IAElC,YAAY,UAGX;QACC,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;IACxC,CAAC;CACF"}

package/dist/service/wafv2/cfn/ip-set/sim-cfn-waf-ip-set-config.d.ts

@@ -0,0 +1,18 @@
+import type { SimCreateIpSetCommandInput } from "../../command/ip-set/ip-set.command.js";
+import { SimCfnWafResourceConfig } from "../sim-cfn-waf-resource-config.js";
+/**
+ * Reads an AWS::WAFv2::IPSet Resource into what CreateIPSet takes.
+ *
+ * Both properties of a set are required by the CloudFormation schema, so one
+ * missing is a template AWS refuses before an IP set is reached. They are
+ * handed over as the template wrote them and checked by CreateIPSet, which is
+ * where an address that is not CIDR notation is refused.
+ */
+export declare class SimCfnWafIpSetConfig extends SimCfnWafResourceConfig {
+    protected get resourceType(): string;
+    /**
+     * The input the IP set this Resource describes is created from.
+     */
+    createInput(): SimCreateIpSetCommandInput;
+}
+//# sourceMappingURL=sim-cfn-waf-ip-set-config.d.ts.map

package/dist/service/wafv2/cfn/ip-set/sim-cfn-waf-ip-set-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-waf-ip-set-config.d.ts","sourceRoot":"","sources":["../../../../../src/service/wafv2/cfn/ip-set/sim-cfn-waf-ip-set-config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,wCAAwC,CAAC;AACzF,OAAO,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAG5E;;;;;;;GAOG;AACH,qBAAa,oBAAqB,SAAQ,uBAAuB;IAC/D,cAAuB,YAAY,IAAI,MAAM,CAE5C;IAED;;OAEG;IACH,WAAW,IAAI,0BAA0B,CAQxC;CACF"}

package/dist/service/wafv2/cfn/ip-set/sim-cfn-waf-ip-set-config.js

@@ -0,0 +1,28 @@
+import { SimCfnWafResourceConfig } from "../sim-cfn-waf-resource-config.js";
+import { wafIpSetResourceType } from "../sim-cfn-waf-resource-types.js";
+/**
+ * Reads an AWS::WAFv2::IPSet Resource into what CreateIPSet takes.
+ *
+ * Both properties of a set are required by the CloudFormation schema, so one
+ * missing is a template AWS refuses before an IP set is reached. They are
+ * handed over as the template wrote them and checked by CreateIPSet, which is
+ * where an address that is not CIDR notation is refused.
+ */
+export class SimCfnWafIpSetConfig extends SimCfnWafResourceConfig {
+    get resourceType() {
+        return wafIpSetResourceType;
+    }
+    /**
+     * The input the IP set this Resource describes is created from.
+     */
+    createInput() {
+        return {
+            Name: this.name(),
+            Scope: this.scope(),
+            Description: this.description(),
+            IPAddressVersion: this.text("IPAddressVersion"),
+            Addresses: this.requiredStrings("Addresses"),
+        };
+    }
+}
+//# sourceMappingURL=sim-cfn-waf-ip-set-config.js.map

package/dist/service/wafv2/cfn/ip-set/sim-cfn-waf-ip-set-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-waf-ip-set-config.js","sourceRoot":"","sources":["../../../../../src/service/wafv2/cfn/ip-set/sim-cfn-waf-ip-set-config.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAExE;;;;;;;GAOG;AACH,MAAM,OAAO,oBAAqB,SAAQ,uBAAuB;IAC/D,IAAuB,YAAY;QACjC,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,WAAW;QACT,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;YACjB,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;YACnB,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE;YAC/B,gBAAgB,EAAE,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC;YAC/C,SAAS,EAAE,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC;SAC7C,CAAC;IACJ,CAAC;CACF"}

package/dist/service/wafv2/cfn/ip-set/sim-cfn-waf-ip-set-creator.d.ts

@@ -0,0 +1,29 @@
+import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
+import type { SimWafIpSet } from "../../ip-set/sim-waf-ip-set.js";
+import type { SimWafV2 } from "../../sim-wafv2.js";
+interface SimCfnWafIpSetCreatorProperties {
+    readonly wafV2: SimWafV2;
+}
+/**
+ * Creates simulated IP sets from AWS::WAFv2::IPSet Resources.
+ *
+ * Nothing evaluates an IP set here, because a rule referring to one is
+ * refused: every request in this simulation comes from 127.0.0.1. The set is
+ * still deployed, so a stack that declares one deploys whole and a test can
+ * read back the ranges it was written with.
+ */
+export declare class SimCfnWafIpSetCreator {
+    #private;
+    constructor(properties: SimCfnWafIpSetCreatorProperties);
+    /**
+     * Create the IP set an AWS::WAFv2::IPSet Resource describes.
+     */
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimWafIpSet>;
+    /**
+     * Delete the IP set an AWS::WAFv2::IPSet Resource created.
+     */
+    delete(resource: SimCfnResource, ipSet: SimWafIpSet): Promise<void>;
+}
+export {};
+//# sourceMappingURL=sim-cfn-waf-ip-set-creator.d.ts.map

package/dist/service/wafv2/cfn/ip-set/sim-cfn-waf-ip-set-creator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-waf-ip-set-creator.d.ts","sourceRoot":"","sources":["../../../../../src/service/wafv2/cfn/ip-set/sim-cfn-waf-ip-set-creator.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAClH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAKnD,UAAU,+BAA+B;IACvC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED;;;;;;;GAOG;AACH,qBAAa,qBAAqB;;IAGhC,YAAY,UAAU,EAAE,+BAA+B,EAEtD;IAED;;OAEG;IACG,MAAM,CACV,QAAQ,EAAE,cAAc,EACxB,UAAU,EAAE,yBAAyB,GACpC,OAAO,CAAC,WAAW,CAAC,CA8BtB;IAED;;OAEG;IACG,MAAM,CAAC,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAcxE;CACF"}

package/dist/service/wafv2/cfn/ip-set/sim-cfn-waf-ip-set-creator.js

@@ -0,0 +1,49 @@
+import { assertDefined } from "../../../../util/type-guard/defined.js";
+import { simCfnWafResourceCommand } from "../sim-cfn-waf-resource-error.js";
+import { wafIpSetResourceType } from "../sim-cfn-waf-resource-types.js";
+import { SimCfnWafIpSetConfig } from "./sim-cfn-waf-ip-set-config.js";
+/**
+ * Creates simulated IP sets from AWS::WAFv2::IPSet Resources.
+ *
+ * Nothing evaluates an IP set here, because a rule referring to one is
+ * refused: every request in this simulation comes from 127.0.0.1. The set is
+ * still deployed, so a stack that declares one deploys whole and a test can
+ * read back the ranges it was written with.
+ */
+export class SimCfnWafIpSetCreator {
+    #wafV2;
+    constructor(properties) {
+        this.#wafV2 = properties.wafV2;
+    }
+    /**
+     * Create the IP set an AWS::WAFv2::IPSet Resource describes.
+     */
+    async create(resource, properties) {
+        const input = new SimCfnWafIpSetConfig({
+            resource,
+            properties,
+        }).createInput();
+        return await simCfnWafResourceCommand(wafIpSetResourceType, resource.logicalId, async () => {
+            const created = await this.#wafV2.createIpSet({ input });
+            const arn = created.Summary?.ARN;
+            assertDefined(arn, `sim WAFv2 IP set ARN for CloudFormation Resource ${resource.logicalId}`);
+            const ipSet = this.#wafV2.findIpSetByArn(arn);
+            assertDefined(ipSet, `sim WAFv2 IP set ${arn} after CloudFormation creation`);
+            return ipSet;
+        });
+    }
+    /**
+     * Delete the IP set an AWS::WAFv2::IPSet Resource created.
+     */
+    async delete(resource, ipSet) {
+        await simCfnWafResourceCommand(wafIpSetResourceType, resource.logicalId, async () => await this.#wafV2.deleteIpSet({
+            input: {
+                Name: ipSet.name,
+                Scope: ipSet.scope,
+                Id: ipSet.id,
+                LockToken: ipSet.lockToken,
+            },
+        }));
+    }
+}
+//# sourceMappingURL=sim-cfn-waf-ip-set-creator.js.map

package/dist/service/wafv2/cfn/ip-set/sim-cfn-waf-ip-set-creator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-waf-ip-set-creator.js","sourceRoot":"","sources":["../../../../../src/service/wafv2/cfn/ip-set/sim-cfn-waf-ip-set-creator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAKvE,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAMtE;;;;;;;GAOG;AACH,MAAM,OAAO,qBAAqB;IACvB,MAAM,CAAW;IAE1B,YAAY,UAA2C;QACrD,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,QAAwB,EACxB,UAAqC;QAErC,MAAM,KAAK,GAAG,IAAI,oBAAoB,CAAC;YACrC,QAAQ;YACR,UAAU;SACX,CAAC,CAAC,WAAW,EAAE,CAAC;QAEjB,OAAO,MAAM,wBAAwB,CACnC,oBAAoB,EACpB,QAAQ,CAAC,SAAS,EAClB,KAAK,IAAI,EAAE;YACT,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YACzD,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;YAEjC,aAAa,CACX,GAAG,EACH,oDACE,QAAQ,CAAC,SACX,EAAE,CACH,CAAC;YAEF,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;YAE9C,aAAa,CACX,KAAK,EACL,oBAAoB,GAAG,gCAAgC,CACxD,CAAC;YAEF,OAAO,KAAK,CAAC;QACf,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,QAAwB,EAAE,KAAkB;QACvD,MAAM,wBAAwB,CAC5B,oBAAoB,EACpB,QAAQ,CAAC,SAAS,EAClB,KAAK,IAAI,EAAE,CACT,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;YAC5B,KAAK,EAAE;gBACL,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,SAAS,EAAE,KAAK,CAAC,SAAS;aAC3B;SACF,CAAC,CACL,CAAC;IACJ,CAAC;CACF"}

package/dist/service/wafv2/cfn/regex-pattern-set/sim-cfn-waf-regex-set-config.d.ts

@@ -0,0 +1,19 @@
+import type { SimCreateRegexPatternSetCommandInput } from "../../command/regex-pattern-set/regex-pattern-set.command.js";
+import { SimCfnWafResourceConfig } from "../sim-cfn-waf-resource-config.js";
+/**
+ * Reads an AWS::WAFv2::RegexPatternSet Resource into what
+ * CreateRegexPatternSet takes.
+ *
+ * This is the one place where CloudFormation and the API disagree about the
+ * shape of a WAFv2 resource. `RegularExpressionList` is a list of strings in a
+ * template and a list of `{ RegexString }` objects in the API, so the patterns
+ * are wrapped on the way through rather than passed along.
+ */
+export declare class SimCfnWafRegexPatternSetConfig extends SimCfnWafResourceConfig {
+    protected get resourceType(): string;
+    /**
+     * The input the pattern set this Resource describes is created from.
+     */
+    createInput(): SimCreateRegexPatternSetCommandInput;
+}
+//# sourceMappingURL=sim-cfn-waf-regex-set-config.d.ts.map

package/dist/service/wafv2/cfn/regex-pattern-set/sim-cfn-waf-regex-set-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-waf-regex-set-config.d.ts","sourceRoot":"","sources":["../../../../../src/service/wafv2/cfn/regex-pattern-set/sim-cfn-waf-regex-set-config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oCAAoC,EAAE,MAAM,8DAA8D,CAAC;AACzH,OAAO,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAG5E;;;;;;;;GAQG;AACH,qBAAa,8BAA+B,SAAQ,uBAAuB;IACzE,cAAuB,YAAY,IAAI,MAAM,CAE5C;IAED;;OAEG;IACH,WAAW,IAAI,oCAAoC,CASlD;CACF"}

package/dist/service/wafv2/cfn/regex-pattern-set/sim-cfn-waf-regex-set-config.js

@@ -0,0 +1,28 @@
+import { SimCfnWafResourceConfig } from "../sim-cfn-waf-resource-config.js";
+import { wafRegexPatternSetResourceType } from "../sim-cfn-waf-resource-types.js";
+/**
+ * Reads an AWS::WAFv2::RegexPatternSet Resource into what
+ * CreateRegexPatternSet takes.
+ *
+ * This is the one place where CloudFormation and the API disagree about the
+ * shape of a WAFv2 resource. `RegularExpressionList` is a list of strings in a
+ * template and a list of `{ RegexString }` objects in the API, so the patterns
+ * are wrapped on the way through rather than passed along.
+ */
+export class SimCfnWafRegexPatternSetConfig extends SimCfnWafResourceConfig {
+    get resourceType() {
+        return wafRegexPatternSetResourceType;
+    }
+    /**
+     * The input the pattern set this Resource describes is created from.
+     */
+    createInput() {
+        return {
+            Name: this.name(),
+            Scope: this.scope(),
+            Description: this.description(),
+            RegularExpressionList: this.requiredStrings("RegularExpressionList").map((pattern) => ({ RegexString: pattern })),
+        };
+    }
+}
+//# sourceMappingURL=sim-cfn-waf-regex-set-config.js.map

package/dist/service/wafv2/cfn/regex-pattern-set/sim-cfn-waf-regex-set-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-waf-regex-set-config.js","sourceRoot":"","sources":["../../../../../src/service/wafv2/cfn/regex-pattern-set/sim-cfn-waf-regex-set-config.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,EAAE,8BAA8B,EAAE,MAAM,kCAAkC,CAAC;AAElF;;;;;;;;GAQG;AACH,MAAM,OAAO,8BAA+B,SAAQ,uBAAuB;IACzE,IAAuB,YAAY;QACjC,OAAO,8BAA8B,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,WAAW;QACT,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;YACjB,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;YACnB,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE;YAC/B,qBAAqB,EAAE,IAAI,CAAC,eAAe,CAAC,uBAAuB,CAAC,CAAC,GAAG,CACtE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CACxC;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/service/wafv2/cfn/regex-pattern-set/sim-cfn-waf-regex-set-creator.d.ts

@@ -0,0 +1,29 @@
+import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
+import type { SimWafRegexPatternSet } from "../../regex-pattern-set/sim-waf-regex-pattern-set.js";
+import type { SimWafV2 } from "../../sim-wafv2.js";
+interface SimCfnWafRegexPatternSetCreatorProperties {
+    readonly wafV2: SimWafV2;
+}
+/**
+ * Creates simulated regex pattern sets from AWS::WAFv2::RegexPatternSet
+ * Resources.
+ *
+ * Every pattern is compiled by CreateRegexPatternSet, so an expression that
+ * will not compile fails the deployment where it was written rather than
+ * quietly matching nothing when a request arrives.
+ */
+export declare class SimCfnWafRegexPatternSetCreator {
+    #private;
+    constructor(properties: SimCfnWafRegexPatternSetCreatorProperties);
+    /**
+     * Create the pattern set an AWS::WAFv2::RegexPatternSet Resource describes.
+     */
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimWafRegexPatternSet>;
+    /**
+     * Delete the pattern set an AWS::WAFv2::RegexPatternSet Resource created.
+     */
+    delete(resource: SimCfnResource, patternSet: SimWafRegexPatternSet): Promise<void>;
+}
+export {};
+//# sourceMappingURL=sim-cfn-waf-regex-set-creator.d.ts.map

package/dist/service/wafv2/cfn/regex-pattern-set/sim-cfn-waf-regex-set-creator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-waf-regex-set-creator.d.ts","sourceRoot":"","sources":["../../../../../src/service/wafv2/cfn/regex-pattern-set/sim-cfn-waf-regex-set-creator.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAClH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,sDAAsD,CAAC;AAClG,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAKnD,UAAU,yCAAyC;IACjD,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED;;;;;;;GAOG;AACH,qBAAa,+BAA+B;;IAG1C,YAAY,UAAU,EAAE,yCAAyC,EAEhE;IAED;;OAEG;IACG,MAAM,CACV,QAAQ,EAAE,cAAc,EACxB,UAAU,EAAE,yBAAyB,GACpC,OAAO,CAAC,qBAAqB,CAAC,CA8BhC;IAED;;OAEG;IACG,MAAM,CACV,QAAQ,EAAE,cAAc,EACxB,UAAU,EAAE,qBAAqB,GAChC,OAAO,CAAC,IAAI,CAAC,CAcf;CACF"}

package/dist/service/wafv2/cfn/regex-pattern-set/sim-cfn-waf-regex-set-creator.js

@@ -0,0 +1,49 @@
+import { assertDefined } from "../../../../util/type-guard/defined.js";
+import { simCfnWafResourceCommand } from "../sim-cfn-waf-resource-error.js";
+import { wafRegexPatternSetResourceType } from "../sim-cfn-waf-resource-types.js";
+import { SimCfnWafRegexPatternSetConfig } from "./sim-cfn-waf-regex-set-config.js";
+/**
+ * Creates simulated regex pattern sets from AWS::WAFv2::RegexPatternSet
+ * Resources.
+ *
+ * Every pattern is compiled by CreateRegexPatternSet, so an expression that
+ * will not compile fails the deployment where it was written rather than
+ * quietly matching nothing when a request arrives.
+ */
+export class SimCfnWafRegexPatternSetCreator {
+    #wafV2;
+    constructor(properties) {
+        this.#wafV2 = properties.wafV2;
+    }
+    /**
+     * Create the pattern set an AWS::WAFv2::RegexPatternSet Resource describes.
+     */
+    async create(resource, properties) {
+        const input = new SimCfnWafRegexPatternSetConfig({
+            resource,
+            properties,
+        }).createInput();
+        return await simCfnWafResourceCommand(wafRegexPatternSetResourceType, resource.logicalId, async () => {
+            const created = await this.#wafV2.createRegexPatternSet({ input });
+            const arn = created.Summary?.ARN;
+            assertDefined(arn, `sim WAFv2 regex pattern set ARN for CloudFormation Resource ${resource.logicalId}`);
+            const patternSet = this.#wafV2.findRegexPatternSetByArn(arn);
+            assertDefined(patternSet, `sim WAFv2 regex pattern set ${arn} after CloudFormation creation`);
+            return patternSet;
+        });
+    }
+    /**
+     * Delete the pattern set an AWS::WAFv2::RegexPatternSet Resource created.
+     */
+    async delete(resource, patternSet) {
+        await simCfnWafResourceCommand(wafRegexPatternSetResourceType, resource.logicalId, async () => await this.#wafV2.deleteRegexPatternSet({
+            input: {
+                Name: patternSet.name,
+                Scope: patternSet.scope,
+                Id: patternSet.id,
+                LockToken: patternSet.lockToken,
+            },
+        }));
+    }
+}
+//# sourceMappingURL=sim-cfn-waf-regex-set-creator.js.map

package/dist/service/wafv2/cfn/regex-pattern-set/sim-cfn-waf-regex-set-creator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-waf-regex-set-creator.js","sourceRoot":"","sources":["../../../../../src/service/wafv2/cfn/regex-pattern-set/sim-cfn-waf-regex-set-creator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAKvE,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,EAAE,8BAA8B,EAAE,MAAM,kCAAkC,CAAC;AAClF,OAAO,EAAE,8BAA8B,EAAE,MAAM,mCAAmC,CAAC;AAMnF;;;;;;;GAOG;AACH,MAAM,OAAO,+BAA+B;IACjC,MAAM,CAAW;IAE1B,YAAY,UAAqD;QAC/D,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,QAAwB,EACxB,UAAqC;QAErC,MAAM,KAAK,GAAG,IAAI,8BAA8B,CAAC;YAC/C,QAAQ;YACR,UAAU;SACX,CAAC,CAAC,WAAW,EAAE,CAAC;QAEjB,OAAO,MAAM,wBAAwB,CACnC,8BAA8B,EAC9B,QAAQ,CAAC,SAAS,EAClB,KAAK,IAAI,EAAE;YACT,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YACnE,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;YAEjC,aAAa,CACX,GAAG,EACH,+DACE,QAAQ,CAAC,SACX,EAAE,CACH,CAAC;YAEF,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC;YAE7D,aAAa,CACX,UAAU,EACV,+BAA+B,GAAG,gCAAgC,CACnE,CAAC;YAEF,OAAO,UAAU,CAAC;QACpB,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,QAAwB,EACxB,UAAiC;QAEjC,MAAM,wBAAwB,CAC5B,8BAA8B,EAC9B,QAAQ,CAAC,SAAS,EAClB,KAAK,IAAI,EAAE,CACT,MAAM,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC;YACtC,KAAK,EAAE;gBACL,IAAI,EAAE,UAAU,CAAC,IAAI;gBACrB,KAAK,EAAE,UAAU,CAAC,KAAK;gBACvB,EAAE,EAAE,UAAU,CAAC,EAAE;gBACjB,SAAS,EAAE,UAAU,CAAC,SAAS;aAChC;SACF,CAAC,CACL,CAAC;IACJ,CAAC;CACF"}

package/dist/service/wafv2/cfn/sim-cfn-waf-creators.d.ts

@@ -0,0 +1,32 @@
+import type { SimWafV2 } from "../sim-wafv2.js";
+import { SimCfnWafAssociationCreator } from "./association/sim-cfn-waf-association-creator.js";
+import { SimCfnWafIpSetCreator } from "./ip-set/sim-cfn-waf-ip-set-creator.js";
+import { SimCfnWafRegexPatternSetCreator } from "./regex-pattern-set/sim-cfn-waf-regex-set-creator.js";
+import { SimCfnWafWebAclCreator } from "./web-acl/sim-cfn-waf-web-acl-creator.js";
+/**
+ * The creator behind each simulated WAFv2 Resource type.
+ *
+ * Both halves of the CloudFormation lifecycle need all four, because each
+ * creator owns the deletion of what it made as well as the making of it, so
+ * the set is built once here and handed to the factory and its deleter.
+ */
+export interface SimCfnWafCreators {
+    readonly webAcl: SimCfnWafWebAclCreator;
+    readonly association: SimCfnWafAssociationCreator;
+    readonly ipSet: SimCfnWafIpSetCreator;
+    readonly regexPatternSet: SimCfnWafRegexPatternSetCreator;
+}
+/**
+ * Build the creators for one simulated WAFv2.
+ */
+export declare function simCfnWafCreators(wafV2: SimWafV2): SimCfnWafCreators;
+/**
+ * The error a Resource type this factory does not model is refused with.
+ *
+ * Sim CloudFormation reads it as a Resource to record and step over, which is
+ * the right answer for a rule group or a logging configuration: neither has
+ * anything behind it here, and a stack declaring one says so in its skipped
+ * Resources rather than failing.
+ */
+export declare function unsupportedSimWafResourceType(resourceTypeName: string, operationSuffix: string): Error;
+//# sourceMappingURL=sim-cfn-waf-creators.d.ts.map

package/dist/service/wafv2/cfn/sim-cfn-waf-creators.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-waf-creators.d.ts","sourceRoot":"","sources":["../../../../src/service/wafv2/cfn/sim-cfn-waf-creators.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,2BAA2B,EAAE,MAAM,kDAAkD,CAAC;AAC/F,OAAO,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AAC/E,OAAO,EAAE,+BAA+B,EAAE,MAAM,sDAAsD,CAAC;AACvG,OAAO,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AAElF;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAC;IACxC,QAAQ,CAAC,WAAW,EAAE,2BAA2B,CAAC;IAClD,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAC;IACtC,QAAQ,CAAC,eAAe,EAAE,+BAA+B,CAAC;CAC3D;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,QAAQ,GAAG,iBAAiB,CAOpE;AAED;;;;;;;GAOG;AACH,wBAAgB,6BAA6B,CAC3C,gBAAgB,EAAE,MAAM,EACxB,eAAe,EAAE,MAAM,GACtB,KAAK,CAKP"}

package/dist/service/wafv2/cfn/sim-cfn-waf-creators.js

@@ -0,0 +1,28 @@
+import { SimCfnWafAssociationCreator } from "./association/sim-cfn-waf-association-creator.js";
+import { SimCfnWafIpSetCreator } from "./ip-set/sim-cfn-waf-ip-set-creator.js";
+import { SimCfnWafRegexPatternSetCreator } from "./regex-pattern-set/sim-cfn-waf-regex-set-creator.js";
+import { SimCfnWafWebAclCreator } from "./web-acl/sim-cfn-waf-web-acl-creator.js";
+/**
+ * Build the creators for one simulated WAFv2.
+ */
+export function simCfnWafCreators(wafV2) {
+    return {
+        webAcl: new SimCfnWafWebAclCreator({ wafV2 }),
+        association: new SimCfnWafAssociationCreator({ wafV2 }),
+        ipSet: new SimCfnWafIpSetCreator({ wafV2 }),
+        regexPatternSet: new SimCfnWafRegexPatternSetCreator({ wafV2 }),
+    };
+}
+/**
+ * The error a Resource type this factory does not model is refused with.
+ *
+ * Sim CloudFormation reads it as a Resource to record and step over, which is
+ * the right answer for a rule group or a logging configuration: neither has
+ * anything behind it here, and a stack declaring one says so in its skipped
+ * Resources rather than failing.
+ */
+export function unsupportedSimWafResourceType(resourceTypeName, operationSuffix) {
+    return new Error(`Unsupported sim WAFv2 CloudFormation Resource ` +
+        `${resourceTypeName}${operationSuffix}`);
+}
+//# sourceMappingURL=sim-cfn-waf-creators.js.map

package/dist/service/wafv2/cfn/sim-cfn-waf-creators.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-waf-creators.js","sourceRoot":"","sources":["../../../../src/service/wafv2/cfn/sim-cfn-waf-creators.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,2BAA2B,EAAE,MAAM,kDAAkD,CAAC;AAC/F,OAAO,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AAC/E,OAAO,EAAE,+BAA+B,EAAE,MAAM,sDAAsD,CAAC;AACvG,OAAO,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AAgBlF;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAe;IAC/C,OAAO;QACL,MAAM,EAAE,IAAI,sBAAsB,CAAC,EAAE,KAAK,EAAE,CAAC;QAC7C,WAAW,EAAE,IAAI,2BAA2B,CAAC,EAAE,KAAK,EAAE,CAAC;QACvD,KAAK,EAAE,IAAI,qBAAqB,CAAC,EAAE,KAAK,EAAE,CAAC;QAC3C,eAAe,EAAE,IAAI,+BAA+B,CAAC,EAAE,KAAK,EAAE,CAAC;KAChE,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,6BAA6B,CAC3C,gBAAwB,EACxB,eAAuB;IAEvB,OAAO,IAAI,KAAK,CACd,gDAAgD;QAC9C,GAAG,gBAAgB,GAAG,eAAe,EAAE,CAC1C,CAAC;AACJ,CAAC"}

package/dist/service/wafv2/cfn/sim-cfn-waf-resource-config.d.ts

@@ -0,0 +1,72 @@
+import type { SimCfnResource } from "../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnTemplateValue, SimCfnTemplateValueRecord } from "../../cloudformation/template/value/sim-cfn-template-value.js";
+export interface SimCfnWafResourceConfigProperties {
+    readonly resource: SimCfnResource;
+    readonly properties: SimCfnTemplateValueRecord;
+}
+/**
+ * What the three named WAFv2 Resource types read the same way.
+ *
+ * A web ACL, an IP set and a regex pattern set are each named within a scope
+ * and carry an optional description, and each is created through the ordinary
+ * WAFv2 command for it. What is left to a subclass is the handful of
+ * properties that say which of the three it is.
+ *
+ * The scope is read as whatever the template wrote and handed straight to the
+ * command, which refuses anything that is not `CLOUDFRONT` or `REGIONAL` and
+ * refuses `CLOUDFRONT` outside `us-east-1`. Deciding it here as well would be
+ * a second answer to a question WAFv2 already answers.
+ */
+export declare abstract class SimCfnWafResourceConfig {
+    protected readonly resource: SimCfnResource;
+    protected readonly properties: SimCfnTemplateValueRecord;
+    constructor(properties: SimCfnWafResourceConfigProperties);
+    /**
+     * The CloudFormation Resource type this reads, as a refusal names it.
+     */
+    protected abstract get resourceType(): string;
+    /**
+     * The resource name.
+     *
+     * `Name` is optional on all three types, and an unnamed resource is named
+     * after the stack and the logical ID as real CloudFormation names one. The
+     * name is part of the ARN and of what `Ref` answers with, so a template that
+     * leaves it out still gets something a test can predict.
+     */
+    name(): string;
+    /**
+     * The scope the resource belongs to, as the template wrote it.
+     */
+    scope(): string | undefined;
+    /**
+     * The description, when the template gave one.
+     */
+    description(): string | undefined;
+    /**
+     * One property of the Resource, whatever shape it is in.
+     */
+    protected value(key: string): SimCfnTemplateValue | undefined;
+    /**
+     * One string property, or nothing when the template left it out.
+     */
+    protected text(key: string): string | undefined;
+    /**
+     * One list-of-strings property, or nothing when the template left it out.
+     */
+    protected strings(key: string): readonly string[] | undefined;
+    /**
+     * One list-of-strings property the Resource type requires.
+     *
+     * An omitted list is refused rather than read as an empty one. Both places
+     * this is used name a list CloudFormation requires, and an empty IP set or
+     * pattern set matches nothing, so a template that misspells `Addresses`
+     * would otherwise deploy a set with nothing in it and a rule pointing at it
+     * that never fires.
+     */
+    protected requiredStrings(key: string): readonly string[];
+    /**
+     * Refuse this Resource, saying which part of it could not be read.
+     */
+    protected refuse(reason: string): never;
+}
+//# sourceMappingURL=sim-cfn-waf-resource-config.d.ts.map

package/dist/service/wafv2/cfn/sim-cfn-waf-resource-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-waf-resource-config.d.ts","sourceRoot":"","sources":["../../../../src/service/wafv2/cfn/sim-cfn-waf-resource-config.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mDAAmD,CAAC;AACxF,OAAO,KAAK,EACV,mBAAmB,EACnB,yBAAyB,EAC1B,MAAM,+DAA+D,CAAC;AASvE,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC;CAChD;AAED;;;;;;;;;;;;GAYG;AACH,8BAAsB,uBAAuB;IAC3C,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAC5C,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC;IAEzD,YAAY,UAAU,EAAE,iCAAiC,EAGxD;IAED;;OAEG;IACH,SAAS,CAAC,QAAQ,KAAK,YAAY,IAAI,MAAM,CAAC;IAE9C;;;;;;;OAOG;IACH,IAAI,IAAI,MAAM,CAWb;IAED;;OAEG;IACH,KAAK,IAAI,MAAM,GAAG,SAAS,CAE1B;IAED;;OAEG;IACH,WAAW,IAAI,MAAM,GAAG,SAAS,CAEhC;IAED;;OAEG;IACH,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS,CAG5D;IAED;;OAEG;IACH,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAY9C;IAED;;OAEG;IACH,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CAkB5D;IAED;;;;;;;;OAQG;IACH,SAAS,CAAC,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAExD;IAED;;OAEG;IACH,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAMtC;CACF"}