@kensio/yulin 1.20.7 → 1.20.8

package/dist/service/athena/cfn/work-group/sim-cfn-athena-work-group-configuration-properties.js

@@ -0,0 +1,46 @@
+/**
+ * Read a template's `WorkGroupConfiguration` into the shape CreateWorkGroup
+ * takes.
+ *
+ * The settings this simulation has no answer for are left out here and
+ * recorded by the property rules, so a template carrying one still deploys its
+ * workgroup.
+ */
+export function workGroupConfigurationProperties(read) {
+    const engineVersion = read.nested("EngineVersion");
+    return {
+        BytesScannedCutoffPerQuery: read.number("BytesScannedCutoffPerQuery"),
+        EnforceWorkGroupConfiguration: read.boolean("EnforceWorkGroupConfiguration"),
+        PublishCloudWatchMetricsEnabled: read.boolean("PublishCloudWatchMetricsEnabled"),
+        RequesterPaysEnabled: read.boolean("RequesterPaysEnabled"),
+        ResultConfiguration: resultConfigurationProperties(read),
+        EngineVersion: engineVersion === undefined
+            ? undefined
+            : {
+                SelectedEngineVersion: engineVersion.string("SelectedEngineVersion"),
+                EffectiveEngineVersion: engineVersion.string("EffectiveEngineVersion"),
+            },
+    };
+}
+function resultConfigurationProperties(read) {
+    const results = read.nested("ResultConfiguration");
+    if (results === undefined) {
+        return undefined;
+    }
+    const encryption = results.nested("EncryptionConfiguration");
+    const acl = results.nested("AclConfiguration");
+    return {
+        OutputLocation: results.string("OutputLocation"),
+        ExpectedBucketOwner: results.string("ExpectedBucketOwner"),
+        EncryptionConfiguration: encryption === undefined
+            ? undefined
+            : {
+                EncryptionOption: encryption.string("EncryptionOption"),
+                KmsKey: encryption.string("KmsKey"),
+            },
+        AclConfiguration: acl === undefined
+            ? undefined
+            : { S3AclOption: acl.string("S3AclOption") },
+    };
+}
+//# sourceMappingURL=sim-cfn-athena-work-group-configuration-properties.js.map

package/dist/service/athena/cfn/work-group/sim-cfn-athena-work-group-configuration-properties.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-athena-work-group-configuration-properties.js","sourceRoot":"","sources":["../../../../../src/service/athena/cfn/work-group/sim-cfn-athena-work-group-configuration-properties.ts"],"names":[],"mappings":"AAMA;;;;;;;GAOG;AACH,MAAM,UAAU,gCAAgC,CAC9C,IAA4B;IAE5B,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAEnD,OAAO;QACL,0BAA0B,EAAE,IAAI,CAAC,MAAM,CAAC,4BAA4B,CAAC;QACrE,6BAA6B,EAAE,IAAI,CAAC,OAAO,CACzC,+BAA+B,CAChC;QACD,+BAA+B,EAAE,IAAI,CAAC,OAAO,CAC3C,iCAAiC,CAClC;QACD,oBAAoB,EAAE,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC;QAC1D,mBAAmB,EAAE,6BAA6B,CAAC,IAAI,CAAC;QACxD,aAAa,EACX,aAAa,KAAK,SAAS;YACzB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC;gBACE,qBAAqB,EAAE,aAAa,CAAC,MAAM,CACzC,uBAAuB,CACxB;gBACD,sBAAsB,EAAE,aAAa,CAAC,MAAM,CAC1C,wBAAwB,CACzB;aACF;KACR,CAAC;AACJ,CAAC;AAED,SAAS,6BAA6B,CACpC,IAA4B;IAE5B,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;IAEnD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC;IAC7D,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAE/C,OAAO;QACL,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAChD,mBAAmB,EAAE,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAC;QAC1D,uBAAuB,EACrB,UAAU,KAAK,SAAS;YACtB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC;gBACE,gBAAgB,EAAE,UAAU,CAAC,MAAM,CAAC,kBAAkB,CAAC;gBACvD,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC;aACpC;QACP,gBAAgB,EACd,GAAG,KAAK,SAAS;YACf,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE;KACjD,CAAC;AACJ,CAAC"}

package/dist/service/athena/cfn/work-group/sim-cfn-athena-work-group-creator.d.ts

@@ -0,0 +1,34 @@
+import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
+import type { SimAthena } from "../../sim-athena.js";
+import type { SimAthenaWorkGroup } from "../../workgroup/sim-athena-work-group.js";
+interface SimCfnAthenaWorkGroupCreatorProperties {
+    readonly athena: SimAthena;
+}
+/**
+ * Creates and deletes a simulated workgroup for one AWS::Athena::WorkGroup
+ * Resource.
+ *
+ * The workgroup goes through the ordinary CreateWorkGroup command rather than
+ * being constructed directly, so a workgroup a template deployed is the same
+ * thing an SDK caller would have got, down to the refusals.
+ */
+export declare class SimCfnAthenaWorkGroupCreator {
+    private readonly athena;
+    constructor(properties: SimCfnAthenaWorkGroupCreatorProperties);
+    /**
+     * Create the workgroup a Resource declares.
+     */
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimAthenaWorkGroup>;
+    /**
+     * Delete the workgroup a Resource created.
+     *
+     * Deleted recursively, so a workgroup the stack also gave named queries goes
+     * with them rather than failing the stack deletion.
+     */
+    delete(workGroup: SimAthenaWorkGroup): Promise<void>;
+    private applyState;
+    private read;
+}
+export {};
+//# sourceMappingURL=sim-cfn-athena-work-group-creator.d.ts.map

package/dist/service/athena/cfn/work-group/sim-cfn-athena-work-group-creator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-athena-work-group-creator.d.ts","sourceRoot":"","sources":["../../../../../src/service/athena/cfn/work-group/sim-cfn-athena-work-group-creator.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAClH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAErD,OAAO,KAAK,EACV,kBAAkB,EAEnB,MAAM,0CAA0C,CAAC;AAKlD,UAAU,sCAAsC;IAC9C,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;CAC5B;AAED;;;;;;;GAOG;AACH,qBAAa,4BAA4B;IACvC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAY;IAEnC,YAAY,UAAU,EAAE,sCAAsC,EAE7D;IAED;;OAEG;IACG,MAAM,CACV,QAAQ,EAAE,cAAc,EACxB,UAAU,EAAE,yBAAyB,GACpC,OAAO,CAAC,kBAAkB,CAAC,CAiC7B;IAED;;;;;OAKG;IACG,MAAM,CAAC,SAAS,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAIzD;YAEa,UAAU;IAaxB,OAAO,CAAC,IAAI;CAMb"}

package/dist/service/athena/cfn/work-group/sim-cfn-athena-work-group-creator.js

@@ -0,0 +1,65 @@
+import { assertDefined } from "../../../../util/type-guard/defined.js";
+import { workGroupStateFrom } from "../../command/work-group/sim-athena-work-group-input.js";
+import { simCfnAthenaResourceCreation } from "../sim-cfn-athena-resource-error.js";
+import { athenaWorkGroupResourceType } from "../sim-cfn-athena-resource-types.js";
+import { SimCfnAthenaWorkGroupProperties } from "./sim-cfn-athena-work-group-properties.js";
+/**
+ * Creates and deletes a simulated workgroup for one AWS::Athena::WorkGroup
+ * Resource.
+ *
+ * The workgroup goes through the ordinary CreateWorkGroup command rather than
+ * being constructed directly, so a workgroup a template deployed is the same
+ * thing an SDK caller would have got, down to the refusals.
+ */
+export class SimCfnAthenaWorkGroupCreator {
+    athena;
+    constructor(properties) {
+        this.athena = properties.athena;
+    }
+    /**
+     * Create the workgroup a Resource declares.
+     */
+    async create(resource, properties) {
+        const read = this.read(resource, properties);
+        read.recordIgnoredProperties();
+        const input = read.createInput();
+        return await simCfnAthenaResourceCreation(athenaWorkGroupResourceType, resource.logicalId, async () => {
+            /*
+             * The state is read before the workgroup is made rather than after.
+             * CloudFormation fails a Resource without taking back what its
+             * creation already did, so a state this simulation will not take has
+             * to be refused while there is still nothing to leave behind.
+             */
+            const state = workGroupStateFrom(read.state());
+            await this.athena.createWorkGroup({ input });
+            await this.applyState(String(input.Name), state);
+            const workGroup = this.athena.findWorkGroup(String(input.Name));
+            assertDefined(workGroup, `sim Athena workgroup ${String(input.Name)} after CloudFormation ` +
+                `creation`);
+            return workGroup;
+        });
+    }
+    /**
+     * Delete the workgroup a Resource created.
+     *
+     * Deleted recursively, so a workgroup the stack also gave named queries goes
+     * with them rather than failing the stack deletion.
+     */
+    async delete(workGroup) {
+        await this.athena.deleteWorkGroup({
+            input: { WorkGroup: workGroup.name, RecursiveDeleteOption: true },
+        });
+    }
+    async applyState(name, state) {
+        if (state === undefined) {
+            return;
+        }
+        await this.athena.updateWorkGroup({
+            input: { WorkGroup: name, State: state },
+        });
+    }
+    read(resource, properties) {
+        return new SimCfnAthenaWorkGroupProperties({ resource, properties });
+    }
+}
+//# sourceMappingURL=sim-cfn-athena-work-group-creator.js.map

package/dist/service/athena/cfn/work-group/sim-cfn-athena-work-group-creator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-athena-work-group-creator.js","sourceRoot":"","sources":["../../../../../src/service/athena/cfn/work-group/sim-cfn-athena-work-group-creator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAIvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yDAAyD,CAAC;AAK7F,OAAO,EAAE,4BAA4B,EAAE,MAAM,qCAAqC,CAAC;AACnF,OAAO,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAC;AAClF,OAAO,EAAE,+BAA+B,EAAE,MAAM,2CAA2C,CAAC;AAM5F;;;;;;;GAOG;AACH,MAAM,OAAO,4BAA4B;IACtB,MAAM,CAAY;IAEnC,YAAY,UAAkD;QAC5D,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,QAAwB,EACxB,UAAqC;QAErC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAE7C,IAAI,CAAC,uBAAuB,EAAE,CAAC;QAE/B,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAEjC,OAAO,MAAM,4BAA4B,CACvC,2BAA2B,EAC3B,QAAQ,CAAC,SAAS,EAClB,KAAK,IAAI,EAAE;YACT;;;;;eAKG;YACH,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;YAE/C,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7C,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;YAEjD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAEhE,aAAa,CACX,SAAS,EACT,wBAAwB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,wBAAwB;gBAChE,UAAU,CACb,CAAC;YAEF,OAAO,SAAS,CAAC;QACnB,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CAAC,SAA6B;QACxC,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;YAChC,KAAK,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE;SAClE,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,UAAU,CACtB,IAAY,EACZ,KAA0C;QAE1C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO;QACT,CAAC;QAED,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;YAChC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE;SACzC,CAAC,CAAC;IACL,CAAC;IAEO,IAAI,CACV,QAAwB,EACxB,UAAqC;QAErC,OAAO,IAAI,+BAA+B,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;IACvE,CAAC;CACF"}

package/dist/service/athena/cfn/work-group/sim-cfn-athena-work-group-properties.d.ts

@@ -0,0 +1,46 @@
+import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
+import type { SimCreateWorkGroupCommandInput } from "../../command/work-group/work-group.command.js";
+/**
+ * Reads AWS::Athena::WorkGroup properties into the shape CreateWorkGroup
+ * takes.
+ *
+ * The template's property names are the API's, so this is mostly reading and
+ * type checking. What the simulation will not act on is recorded through the
+ * property rules rather than refused, so a stack carrying an Athena setting
+ * this simulator has no answer for still deploys.
+ */
+export declare class SimCfnAthenaWorkGroupProperties {
+    private readonly resource;
+    private readonly read;
+    private readonly rules;
+    constructor(properties: {
+        readonly resource: SimCfnResource;
+        readonly properties: SimCfnTemplateValueRecord;
+    });
+    /**
+     * The workgroup name.
+     *
+     * An unnamed workgroup is named after the stack and the logical ID, as real
+     * CloudFormation names one.
+     */
+    name(): string;
+    /**
+     * Everything CreateWorkGroup takes, read out of the template.
+     */
+    createInput(): SimCreateWorkGroupCommandInput;
+    /**
+     * The state the template asks the workgroup to be in.
+     *
+     * `CreateWorkGroup` has no state field, so a workgroup the template disables
+     * is created and then updated. A template asking for `ENABLED`, which is
+     * where a workgroup starts, needs neither.
+     */
+    state(): string | undefined;
+    /**
+     * Record the properties the workgroup is created without acting on.
+     */
+    recordIgnoredProperties(): void;
+    private configuration;
+}
+//# sourceMappingURL=sim-cfn-athena-work-group-properties.d.ts.map

package/dist/service/athena/cfn/work-group/sim-cfn-athena-work-group-properties.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-athena-work-group-properties.d.ts","sourceRoot":"","sources":["../../../../../src/service/athena/cfn/work-group/sim-cfn-athena-work-group-properties.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAClH,OAAO,KAAK,EAEV,8BAA8B,EAC/B,MAAM,gDAAgD,CAAC;AASxD;;;;;;;;GAQG;AACH,qBAAa,+BAA+B;IAC1C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAC1C,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAyB;IAC9C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAqC;IAE3D,YAAY,UAAU,EAAE;QACtB,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;QAClC,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC;KAChD,EAaA;IAED;;;;;OAKG;IACH,IAAI,IAAI,MAAM,CASb;IAED;;OAEG;IACH,WAAW,IAAI,8BAA8B,CAM5C;IAED;;;;;;OAMG;IACH,KAAK,IAAI,MAAM,GAAG,SAAS,CAE1B;IAED;;OAEG;IACH,uBAAuB,IAAI,IAAI,CAE9B;IAED,OAAO,CAAC,aAAa;CAStB"}

package/dist/service/athena/cfn/work-group/sim-cfn-athena-work-group-properties.js

@@ -0,0 +1,77 @@
+import { SimCfnGeneratedResourceName } from "../../../cloudformation/resource/name/sim-cfn-generated-resource-name.js";
+import { SimCfnAthenaProperties } from "../sim-cfn-athena-property-values.js";
+import { simCfnAthenaResourceError } from "../sim-cfn-athena-resource-error.js";
+import { athenaWorkGroupResourceType } from "../sim-cfn-athena-resource-types.js";
+import { workGroupConfigurationProperties } from "./sim-cfn-athena-work-group-configuration-properties.js";
+import { SimCfnAthenaWorkGroupPropertyRules } from "./sim-cfn-athena-work-group-property-rules.js";
+const maximumNameLength = 128;
+/**
+ * Reads AWS::Athena::WorkGroup properties into the shape CreateWorkGroup
+ * takes.
+ *
+ * The template's property names are the API's, so this is mostly reading and
+ * type checking. What the simulation will not act on is recorded through the
+ * property rules rather than refused, so a stack carrying an Athena setting
+ * this simulator has no answer for still deploys.
+ */
+export class SimCfnAthenaWorkGroupProperties {
+    resource;
+    read;
+    rules;
+    constructor(properties) {
+        this.resource = properties.resource;
+        this.read = new SimCfnAthenaProperties(properties.properties, (reason) => simCfnAthenaResourceError(athenaWorkGroupResourceType, properties.resource.logicalId, reason));
+        this.rules = new SimCfnAthenaWorkGroupPropertyRules({
+            properties: properties.properties,
+            ignorer: properties.resource,
+        });
+    }
+    /**
+     * The workgroup name.
+     *
+     * An unnamed workgroup is named after the stack and the logical ID, as real
+     * CloudFormation names one.
+     */
+    name() {
+        return (this.read.string("Name") ??
+            new SimCfnGeneratedResourceName({
+                stackName: this.resource.stackName,
+                logicalId: this.resource.logicalId,
+                maximumLength: maximumNameLength,
+            }).value);
+    }
+    /**
+     * Everything CreateWorkGroup takes, read out of the template.
+     */
+    createInput() {
+        return {
+            Name: this.name(),
+            Description: this.read.string("Description"),
+            Configuration: this.configuration(),
+        };
+    }
+    /**
+     * The state the template asks the workgroup to be in.
+     *
+     * `CreateWorkGroup` has no state field, so a workgroup the template disables
+     * is created and then updated. A template asking for `ENABLED`, which is
+     * where a workgroup starts, needs neither.
+     */
+    state() {
+        return this.read.string("State");
+    }
+    /**
+     * Record the properties the workgroup is created without acting on.
+     */
+    recordIgnoredProperties() {
+        this.rules.apply();
+    }
+    configuration() {
+        const configuration = this.read.nested("WorkGroupConfiguration");
+        if (configuration === undefined) {
+            return undefined;
+        }
+        return workGroupConfigurationProperties(configuration);
+    }
+}
+//# sourceMappingURL=sim-cfn-athena-work-group-properties.js.map

package/dist/service/athena/cfn/work-group/sim-cfn-athena-work-group-properties.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-athena-work-group-properties.js","sourceRoot":"","sources":["../../../../../src/service/athena/cfn/work-group/sim-cfn-athena-work-group-properties.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,MAAM,0EAA0E,CAAC;AAOvH,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAC9E,OAAO,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAChF,OAAO,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAC;AAClF,OAAO,EAAE,gCAAgC,EAAE,MAAM,yDAAyD,CAAC;AAC3G,OAAO,EAAE,kCAAkC,EAAE,MAAM,+CAA+C,CAAC;AAEnG,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAE9B;;;;;;;;GAQG;AACH,MAAM,OAAO,+BAA+B;IACzB,QAAQ,CAAiB;IACzB,IAAI,CAAyB;IAC7B,KAAK,CAAqC;IAE3D,YAAY,UAGX;QACC,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,IAAI,GAAG,IAAI,sBAAsB,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,EAAE,CACvE,yBAAyB,CACvB,2BAA2B,EAC3B,UAAU,CAAC,QAAQ,CAAC,SAAS,EAC7B,MAAM,CACP,CACF,CAAC;QACF,IAAI,CAAC,KAAK,GAAG,IAAI,kCAAkC,CAAC;YAClD,UAAU,EAAE,UAAU,CAAC,UAAU;YACjC,OAAO,EAAE,UAAU,CAAC,QAAQ;SAC7B,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,IAAI;QACF,OAAO,CACL,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YACxB,IAAI,2BAA2B,CAAC;gBAC9B,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;gBAClC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;gBAClC,aAAa,EAAE,iBAAiB;aACjC,CAAC,CAAC,KAAK,CACT,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,WAAW;QACT,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;YACjB,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;YAC5C,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE;SACpC,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK;QACH,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,uBAAuB;QACrB,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAEO,aAAa;QACnB,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC;QAEjE,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,gCAAgC,CAAC,aAAa,CAAC,CAAC;IACzD,CAAC;CACF"}

package/dist/service/athena/cfn/work-group/sim-cfn-athena-work-group-property-rules.d.ts

@@ -0,0 +1,27 @@
+import type { SimCfnPropertyIgnorer } from "../../../cloudformation/resource/ignore/sim-cfn-ignored-property.type.js";
+import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
+interface SimCfnAthenaWorkGroupPropertyRulesProperties {
+    readonly properties: SimCfnTemplateValueRecord;
+    readonly ignorer: SimCfnPropertyIgnorer;
+}
+/**
+ * What a workgroup Resource is created without acting on.
+ *
+ * Nothing here fails the Resource. A template naming a setting this simulation
+ * has no answer for still deploys its workgroup, and the setting is recorded
+ * so a reader can see what the deployed workgroup is not doing.
+ */
+export declare class SimCfnAthenaWorkGroupPropertyRules {
+    private readonly properties;
+    private readonly ignorer;
+    constructor(properties: SimCfnAthenaWorkGroupPropertyRulesProperties);
+    /**
+     * Record every property the workgroup is created without.
+     */
+    apply(): void;
+    private applyToProperty;
+    private applyToConfiguration;
+    private ignore;
+}
+export {};
+//# sourceMappingURL=sim-cfn-athena-work-group-property-rules.d.ts.map

package/dist/service/athena/cfn/work-group/sim-cfn-athena-work-group-property-rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-athena-work-group-property-rules.d.ts","sourceRoot":"","sources":["../../../../../src/service/athena/cfn/work-group/sim-cfn-athena-work-group-property-rules.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,0EAA0E,CAAC;AACtH,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AA4BlH,UAAU,4CAA4C;IACpD,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC;IAC/C,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;CACzC;AAED;;;;;;GAMG;AACH,qBAAa,kCAAkC;IAC7C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA4B;IACvD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAwB;IAEhD,YAAY,UAAU,EAAE,4CAA4C,EAGnE;IAED;;OAEG;IACH,KAAK,IAAI,IAAI,CAMZ;IAED,OAAO,CAAC,eAAe;IAQvB,OAAO,CAAC,oBAAoB;IAmB5B,OAAO,CAAC,MAAM;CAmBf"}

package/dist/service/athena/cfn/work-group/sim-cfn-athena-work-group-property-rules.js

@@ -0,0 +1,75 @@
+import { isRecord } from "../../../../util/type-guard/record.js";
+import { unsimulatedConfigurationReasons, unsimulatedPropertyReasons, } from "./sim-cfn-athena-work-group-unsimulated-properties.js";
+/**
+ * The top-level properties a workgroup Resource is created from.
+ */
+const readProperties = new Set([
+    "Name",
+    "Description",
+    "State",
+    "WorkGroupConfiguration",
+]);
+/**
+ * The WorkGroupConfiguration settings a workgroup Resource is created from.
+ */
+const readConfiguration = new Set([
+    "BytesScannedCutoffPerQuery",
+    "EnforceWorkGroupConfiguration",
+    "PublishCloudWatchMetricsEnabled",
+    "RequesterPaysEnabled",
+    "ResultConfiguration",
+    "EngineVersion",
+]);
+/**
+ * What a workgroup Resource is created without acting on.
+ *
+ * Nothing here fails the Resource. A template naming a setting this simulation
+ * has no answer for still deploys its workgroup, and the setting is recorded
+ * so a reader can see what the deployed workgroup is not doing.
+ */
+export class SimCfnAthenaWorkGroupPropertyRules {
+    properties;
+    ignorer;
+    constructor(properties) {
+        this.properties = properties.properties;
+        this.ignorer = properties.ignorer;
+    }
+    /**
+     * Record every property the workgroup is created without.
+     */
+    apply() {
+        for (const name of Object.keys(this.properties)) {
+            this.applyToProperty(name);
+        }
+        this.applyToConfiguration();
+    }
+    applyToProperty(name) {
+        if (readProperties.has(name)) {
+            return;
+        }
+        this.ignore(name, unsimulatedPropertyReasons.get(name));
+    }
+    applyToConfiguration() {
+        const configuration = this.properties["WorkGroupConfiguration"];
+        if (!isRecord(configuration)) {
+            return;
+        }
+        for (const name of Object.keys(configuration)) {
+            if (readConfiguration.has(name)) {
+                continue;
+            }
+            this.ignore(`WorkGroupConfiguration.${name}`, unsimulatedConfigurationReasons.get(name));
+        }
+    }
+    ignore(path, unsimulatedReason) {
+        const name = path.slice(path.lastIndexOf(".") + 1);
+        if (unsimulatedReason === undefined) {
+            this.ignorer.ignoreProperty(path, `${name} is not a property simulated Athena knows about, so the ` +
+                `workgroup is created without it`);
+            return;
+        }
+        this.ignorer.ignoreProperty(path, `${name} is a real AWS::Athena::WorkGroup property simulated Athena ` +
+            `does not act on: ${unsimulatedReason}`);
+    }
+}
+//# sourceMappingURL=sim-cfn-athena-work-group-property-rules.js.map

package/dist/service/athena/cfn/work-group/sim-cfn-athena-work-group-property-rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-athena-work-group-property-rules.js","sourceRoot":"","sources":["../../../../../src/service/athena/cfn/work-group/sim-cfn-athena-work-group-property-rules.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,uCAAuC,CAAC;AAGjE,OAAO,EACL,+BAA+B,EAC/B,0BAA0B,GAC3B,MAAM,uDAAuD,CAAC;AAE/D;;GAEG;AACH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,MAAM;IACN,aAAa;IACb,OAAO;IACP,wBAAwB;CACzB,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,4BAA4B;IAC5B,+BAA+B;IAC/B,iCAAiC;IACjC,sBAAsB;IACtB,qBAAqB;IACrB,eAAe;CAChB,CAAC,CAAC;AAOH;;;;;;GAMG;AACH,MAAM,OAAO,kCAAkC;IAC5B,UAAU,CAA4B;IACtC,OAAO,CAAwB;IAEhD,YAAY,UAAwD;QAClE,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,KAAK;QACH,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAChD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QAED,IAAI,CAAC,oBAAoB,EAAE,CAAC;IAC9B,CAAC;IAEO,eAAe,CAAC,IAAY;QAClC,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,OAAO;QACT,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,0BAA0B,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1D,CAAC;IAEO,oBAAoB;QAC1B,MAAM,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC,wBAAwB,CAAC,CAAC;QAEhE,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;YAC7B,OAAO;QACT,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;YAC9C,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChC,SAAS;YACX,CAAC;YAED,IAAI,CAAC,MAAM,CACT,0BAA0B,IAAI,EAAE,EAChC,+BAA+B,CAAC,GAAG,CAAC,IAAI,CAAC,CAC1C,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,IAAY,EAAE,iBAAqC;QAChE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QAEnD,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACpC,IAAI,CAAC,OAAO,CAAC,cAAc,CACzB,IAAI,EACJ,GAAG,IAAI,0DAA0D;gBAC/D,iCAAiC,CACpC,CAAC;YAEF,OAAO;QACT,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,cAAc,CACzB,IAAI,EACJ,GAAG,IAAI,8DAA8D;YACnE,oBAAoB,iBAAiB,EAAE,CAC1C,CAAC;IACJ,CAAC;CACF"}

package/dist/service/athena/cfn/work-group/sim-cfn-athena-work-group-unsimulated-properties.d.ts

@@ -0,0 +1,18 @@
+/**
+ * The AWS::Athena::WorkGroup properties this simulation has nothing to act on,
+ * and why.
+ *
+ * Recorded as ignored rather than refused. A workgroup without any of them
+ * still does what a workgroup does here, which is hold the settings a query
+ * would run under and hand them back.
+ */
+export declare const unsimulatedPropertyReasons: ReadonlyMap<string, string>;
+/**
+ * The AWS::Athena::WorkGroup WorkGroupConfiguration settings this simulation
+ * holds without acting on, and why.
+ *
+ * These read back through GetWorkGroup exactly as the template set them. What
+ * they would change about a query is what is missing, because no query runs.
+ */
+export declare const unsimulatedConfigurationReasons: ReadonlyMap<string, string>;
+//# sourceMappingURL=sim-cfn-athena-work-group-unsimulated-properties.d.ts.map

package/dist/service/athena/cfn/work-group/sim-cfn-athena-work-group-unsimulated-properties.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-athena-work-group-unsimulated-properties.d.ts","sourceRoot":"","sources":["../../../../../src/service/athena/cfn/work-group/sim-cfn-athena-work-group-unsimulated-properties.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,eAAO,MAAM,0BAA0B,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAOjE,CAAC;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,+BAA+B,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAyBpE,CAAC"}

package/dist/service/athena/cfn/work-group/sim-cfn-athena-work-group-unsimulated-properties.js

@@ -0,0 +1,49 @@
+/**
+ * The AWS::Athena::WorkGroup properties this simulation has nothing to act on,
+ * and why.
+ *
+ * Recorded as ignored rather than refused. A workgroup without any of them
+ * still does what a workgroup does here, which is hold the settings a query
+ * would run under and hand them back.
+ */
+export const unsimulatedPropertyReasons = new Map([
+    ["Tags", "workgroup tags are not held or reported"],
+    [
+        "RecursiveDeleteOption",
+        "a workgroup deleted with its Stack takes its named queries with it " +
+            "whatever this says",
+    ],
+]);
+/**
+ * The AWS::Athena::WorkGroup WorkGroupConfiguration settings this simulation
+ * holds without acting on, and why.
+ *
+ * These read back through GetWorkGroup exactly as the template set them. What
+ * they would change about a query is what is missing, because no query runs.
+ */
+export const unsimulatedConfigurationReasons = new Map([
+    [
+        "AdditionalConfiguration",
+        "no query engine reads it, so nothing it configures happens",
+    ],
+    [
+        "CustomerContentEncryptionConfiguration",
+        "nothing is written for a query, so nothing is encrypted",
+    ],
+    [
+        "EnableMinimumEncryptionConfiguration",
+        "result encryption is held rather than applied, so no minimum is " +
+            "enforced",
+    ],
+    ["ExecutionRole", "no query runs, so no role is assumed to run one"],
+    [
+        "IdentityCenterConfiguration",
+        "Identity Center is not simulated, and a request is authorized against " +
+            "IAM here",
+    ],
+    [
+        "QueryResultsS3AccessGrantsConfiguration",
+        "S3 Access Grants are not simulated",
+    ],
+]);
+//# sourceMappingURL=sim-cfn-athena-work-group-unsimulated-properties.js.map

package/dist/service/athena/cfn/work-group/sim-cfn-athena-work-group-unsimulated-properties.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-athena-work-group-unsimulated-properties.js","sourceRoot":"","sources":["../../../../../src/service/athena/cfn/work-group/sim-cfn-athena-work-group-unsimulated-properties.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAgC,IAAI,GAAG,CAAC;IAC7E,CAAC,MAAM,EAAE,yCAAyC,CAAC;IACnD;QACE,uBAAuB;QACvB,qEAAqE;YACnE,oBAAoB;KACvB;CACF,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAC1C,IAAI,GAAG,CAAC;IACN;QACE,yBAAyB;QACzB,4DAA4D;KAC7D;IACD;QACE,wCAAwC;QACxC,yDAAyD;KAC1D;IACD;QACE,sCAAsC;QACtC,kEAAkE;YAChE,UAAU;KACb;IACD,CAAC,eAAe,EAAE,iDAAiD,CAAC;IACpE;QACE,6BAA6B;QAC7B,wEAAwE;YACtE,UAAU;KACb;IACD;QACE,yCAAyC;QACzC,oCAAoC;KACrC;CACF,CAAC,CAAC"}

package/dist/service/athena/command/authorize/sim-athena-authorizer.d.ts

@@ -0,0 +1,36 @@
+import type { SimAwsResolvedCaller } from "../../../aws/caller/sim-aws-caller-resolver.js";
+import type { SimAwsAccountRegionScope } from "../../../aws/sim-aws-account-region-scope.js";
+import type { SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimAthenaRequestOptions } from "../sim-athena-request-options.js";
+interface SimAthenaAuthorizerProperties {
+    readonly iam: SimIamInterServiceAuthZ;
+    readonly accountRegionScope: SimAwsAccountRegionScope;
+}
+/**
+ * Applies simulated IAM authorization to Athena requests.
+ *
+ * The resource is the workgroup ARN,
+ * `arn:aws:athena:<region>:<account>:workgroup/<name>`. A named query has no
+ * ARN of its own on real Athena, and work on one is authorized against the
+ * workgroup it belongs to, so that is what this asks about too.
+ */
+export declare class SimAthenaAuthorizer {
+    private readonly iam;
+    private readonly accountRegionScope;
+    private readonly callerIdentifier;
+    constructor(properties: SimAthenaAuthorizerProperties);
+    /**
+     * Ensure the caller may perform an action on a workgroup, named by name.
+     *
+     * The workgroup need not exist: `CreateWorkGroup` authorizes against the ARN
+     * the workgroup is about to have.
+     */
+    authorizeWorkGroup(action: string, workGroupName: string, options?: SimAthenaRequestOptions): SimAwsResolvedCaller;
+    /**
+     * Ensure the caller may perform an action naming no particular workgroup.
+     */
+    authorizeAnyWorkGroup(action: string, options?: SimAthenaRequestOptions): SimAwsResolvedCaller;
+    private authorizeResource;
+}
+export {};
+//# sourceMappingURL=sim-athena-authorizer.d.ts.map

package/dist/service/athena/command/authorize/sim-athena-authorizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-athena-authorizer.d.ts","sourceRoot":"","sources":["../../../../../src/service/athena/command/authorize/sim-athena-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gDAAgD,CAAC;AAC3F,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAItG,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAUhF,UAAU,6BAA6B;IACrC,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;IACtC,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;CACvD;AAED;;;;;;;GAOG;AACH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA0B;IAC9C,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA2B;IAC9D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAgC;IAEjE,YAAY,UAAU,EAAE,6BAA6B,EAGpD;IAED;;;;;OAKG;IACH,kBAAkB,CAChB,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,MAAM,EACrB,OAAO,CAAC,EAAE,uBAAuB,GAChC,oBAAoB,CAMtB;IAED;;OAEG;IACH,qBAAqB,CACnB,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,uBAAuB,GAChC,oBAAoB,CAEtB;IAED,OAAO,CAAC,iBAAiB;CAwB1B"}

package/dist/service/athena/command/authorize/sim-athena-authorizer.js

@@ -0,0 +1,56 @@
+import { SimIamCallerIdentifier } from "../../../iam/error/sim-iam-caller-identifier.js";
+import { athenaWorkGroupArn } from "../../sim-athena-arn.js";
+import { SimAthenaAccessDeniedException } from "../../error/sim-athena.error.js";
+/**
+ * The resource an action naming no workgroup authorizes against.
+ *
+ * `ListWorkGroups` names none, so IAM evaluates it against `*` and only a
+ * policy whose Resource is `*` allows it.
+ */
+const noResource = "*";
+/**
+ * Applies simulated IAM authorization to Athena requests.
+ *
+ * The resource is the workgroup ARN,
+ * `arn:aws:athena:<region>:<account>:workgroup/<name>`. A named query has no
+ * ARN of its own on real Athena, and work on one is authorized against the
+ * workgroup it belongs to, so that is what this asks about too.
+ */
+export class SimAthenaAuthorizer {
+    iam;
+    accountRegionScope;
+    callerIdentifier = new SimIamCallerIdentifier();
+    constructor(properties) {
+        this.iam = properties.iam;
+        this.accountRegionScope = properties.accountRegionScope;
+    }
+    /**
+     * Ensure the caller may perform an action on a workgroup, named by name.
+     *
+     * The workgroup need not exist: `CreateWorkGroup` authorizes against the ARN
+     * the workgroup is about to have.
+     */
+    authorizeWorkGroup(action, workGroupName, options) {
+        return this.authorizeResource(action, athenaWorkGroupArn(workGroupName, this.accountRegionScope), options);
+    }
+    /**
+     * Ensure the caller may perform an action naming no particular workgroup.
+     */
+    authorizeAnyWorkGroup(action, options) {
+        return this.authorizeResource(action, noResource, options);
+    }
+    authorizeResource(action, resource, options) {
+        const decision = this.iam.authorize({
+            action,
+            resource,
+            caller: options?.caller,
+        });
+        if (decision.isDenied) {
+            const identifier = this.callerIdentifier.format(decision.caller.principal);
+            throw new SimAthenaAccessDeniedException(`User: ${identifier} is not authorized to perform: ${action} on ` +
+                `resource: ${resource}`);
+        }
+        return decision.caller;
+    }
+}
+//# sourceMappingURL=sim-athena-authorizer.js.map

package/dist/service/athena/command/authorize/sim-athena-authorizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-athena-authorizer.js","sourceRoot":"","sources":["../../../../../src/service/athena/command/authorize/sim-athena-authorizer.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,sBAAsB,EAAE,MAAM,iDAAiD,CAAC;AACzF,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,8BAA8B,EAAE,MAAM,iCAAiC,CAAC;AAGjF;;;;;GAKG;AACH,MAAM,UAAU,GAAG,GAAG,CAAC;AAOvB;;;;;;;GAOG;AACH,MAAM,OAAO,mBAAmB;IACb,GAAG,CAA0B;IAC7B,kBAAkB,CAA2B;IAC7C,gBAAgB,GAAG,IAAI,sBAAsB,EAAE,CAAC;IAEjE,YAAY,UAAyC;QACnD,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;QAC1B,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;IAC1D,CAAC;IAED;;;;;OAKG;IACH,kBAAkB,CAChB,MAAc,EACd,aAAqB,EACrB,OAAiC;QAEjC,OAAO,IAAI,CAAC,iBAAiB,CAC3B,MAAM,EACN,kBAAkB,CAAC,aAAa,EAAE,IAAI,CAAC,kBAAkB,CAAC,EAC1D,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,qBAAqB,CACnB,MAAc,EACd,OAAiC;QAEjC,OAAO,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IAEO,iBAAiB,CACvB,MAAc,EACd,QAAgB,EAChB,OAA4C;QAE5C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAClC,MAAM;YACN,QAAQ;YACR,MAAM,EAAE,OAAO,EAAE,MAAM;SACxB,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAC7C,QAAQ,CAAC,MAAM,CAAC,SAAS,CAC1B,CAAC;YAEF,MAAM,IAAI,8BAA8B,CACtC,SAAS,UAAU,kCAAkC,MAAM,MAAM;gBAC/D,aAAa,QAAQ,EAAE,CAC1B,CAAC;QACJ,CAAC;QAED,OAAO,QAAQ,CAAC,MAAM,CAAC;IACzB,CAAC;CACF"}