@quadnix/octo-aws-cdk 0.0.19 → 0.2.0

package/dist/resources/cloudfront-distribution/cloudfront-distribution.resource.js

@@ -0,0 +1,613 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var CloudFrontDistribution_1;
+import { ATerraformResource, Diff, DiffAction, DiffUtility, Resource, } from '@quadnix/octo';
+import { CommonUtility } from '../../utilities/common/common.utility.js';
+import { PolicyUtility } from '../../utilities/policy/policy.utility.js';
+import { CloudFrontDistributionSchema, } from './index.schema.js';
+/**
+ * The only region CloudFront reads a certificate or a web ACL from, whichever region the origins
+ * behind it live in. AWS rejects anything else at apply, so it is worth catching here.
+ *
+ * @internal
+ */
+const CLOUD_FRONT_GLOBAL_REGION = 'us-east-1';
+/**
+ * The longest name AWS accepts for an origin access control.
+ *
+ * @internal
+ */
+const ORIGIN_ACCESS_CONTROL_NAME_MAX_LENGTH = 64;
+/**
+ * What an unset optional field means at render time.
+ *
+ * A schema default only fires for a value octo instantiated through the schema, and the nested
+ * members of `properties` are plain objects a module author wrote by hand. So the renderer supplies
+ * its own values rather than trusting a default that would never run - otherwise a policy
+ * declared as `{ name: 'x' }`, which the schema says is legal, renders as `undefined`.
+ *
+ * @internal
+ */
+const RENDER_DEFAULTS = {
+    behavior: {
+        allowedMethods: ['GET', 'HEAD'],
+        cachedMethods: ['GET', 'HEAD'],
+        compress: true,
+        functionAssociations: [],
+        viewerProtocolPolicy: 'redirect-to-https',
+    },
+    cachePolicy: { defaultTtl: 86400, enableBrotli: true, enableGzip: true, maxTtl: 31536000, minTtl: 1 },
+    errorCachingMinTtl: 10,
+    origin: { connectionAttempts: 3, connectionTimeout: 10, customHeaders: {}, originPath: '' },
+    securityHeaders: { contentTypeOptions: true, frameOptions: 'SAMEORIGIN', strictTransportSecurityMaxAge: 31536000 },
+    valueSelection: { kind: 'none' },
+};
+/**
+ * @internal
+ */
+let CloudFrontDistribution = CloudFrontDistribution_1 = class CloudFrontDistribution extends ATerraformResource {
+    /**
+     * @internal
+     */
+    constructor(resourceId, properties, parents = []) {
+        super(resourceId, properties, parents);
+        this.validateReferences();
+    }
+    /**
+     * A name AWS will accept, that still says which thing it belongs to.
+     *
+     * A distribution's name and an origin's are each free-form, so their join is what overflows a
+     * limit neither of them knew about. Cutting the tail off alone would let two origins collide, so
+     * what is cut is replaced by a digest of the whole name: two names that differ anywhere still
+     * differ here, and the same name always renders the same way.
+     *
+     * @internal
+     */
+    static boundedName(name, maxLength) {
+        if (name.length <= maxLength) {
+            return name;
+        }
+        const digest = CommonUtility.hash(name).substring(0, 8);
+        return `${name.substring(0, maxLength - digest.length - 1)}-${digest}`;
+    }
+    /**
+     * How a policy reference is looked up once every policy has been emitted.
+     *
+     * @internal
+     */
+    static policyKey(slot, reference) {
+        return `${slot}/${reference.kind}/${reference.name}`;
+    }
+    /**
+     * Nothing about a distribution is force-new. Origins, behaviors, aliases, the certificate, the WAF
+     * association - AWS edits all of them in place on a live distribution, so every change is an
+     * update. What is left is identity, and the distribution's name is already in the resource id, so
+     * only the account can move a distribution to being a different one.
+     *
+     * @internal
+     */
+    async diffProperties(previous) {
+        if (previous.properties.awsAccountId !== this.properties.awsAccountId) {
+            return [
+                new Diff(this, DiffAction.REPLACE, 'resourceId', this.getContext(), 'a distribution belongs to one account; a change recreates it'),
+            ];
+        }
+        if (!DiffUtility.isObjectDeepEquals(previous.properties, this.properties)) {
+            return [new Diff(this, DiffAction.UPDATE, 'properties', this.properties)];
+        }
+        return [];
+    }
+    /**
+     * @internal
+     */
+    async toHCL(terraform) {
+        const distributionOctoResource = terraform.addOctoTerraformResource(this, {
+            provider: { accountId: this.properties.awsAccountId },
+        });
+        const providerRef = terraform.getProviderAliasRef(this.properties.awsAccountId);
+        const policyIdByReference = this.renderPolicies(terraform, distributionOctoResource, providerRef);
+        const originAccessControlIdByOriginId = this.renderOriginAccessControls(terraform, distributionOctoResource);
+        const distributionTFResource = distributionOctoResource.addTerraformResource('aws_cloudfront_distribution', `${this.resourceId}_distribution`, {
+            ...(this.properties.aliases.length > 0 ? { aliases: this.properties.aliases } : {}),
+            comment: this.properties.comment,
+            ...(this.properties.customErrorResponses.length > 0
+                ? {
+                    custom_error_response: this.properties.customErrorResponses.map((customErrorResponse) => ({
+                        error_caching_min_ttl: customErrorResponse.errorCachingMinTtl ?? RENDER_DEFAULTS.errorCachingMinTtl,
+                        error_code: customErrorResponse.errorCode,
+                        response_code: customErrorResponse.responseCode,
+                        response_page_path: customErrorResponse.responsePagePath,
+                    })),
+                }
+                : {}),
+            default_cache_behavior: this.renderBehavior(this.getDefaultBehavior(), policyIdByReference),
+            ...(this.properties.defaultRootObject ? { default_root_object: this.properties.defaultRootObject } : {}),
+            enabled: this.properties.enabled,
+            http_version: this.properties.httpVersion,
+            is_ipv6_enabled: this.properties.isIpv6Enabled,
+            ...(this.properties.logging
+                ? {
+                    logging_config: {
+                        bucket: this.properties.logging.bucketDomainName,
+                        include_cookies: this.properties.logging.includeCookies,
+                        prefix: this.properties.logging.prefix,
+                    },
+                }
+                : {}),
+            ...(this.getOrderedBehaviors().length > 0
+                ? {
+                    ordered_cache_behavior: this.getOrderedBehaviors().map((behavior) => ({
+                        ...this.renderBehavior(behavior, policyIdByReference),
+                        path_pattern: behavior.pathPattern,
+                    })),
+                }
+                : {}),
+            origin: this.properties.origins.map((origin) => this.renderOrigin(terraform, origin, originAccessControlIdByOriginId)),
+            ...(this.properties.originGroups.length > 0
+                ? {
+                    origin_group: this.properties.originGroups.map((originGroup) => ({
+                        failover_criteria: { status_codes: originGroup.failoverStatusCodes },
+                        member: [{ origin_id: originGroup.primaryOriginId }, { origin_id: originGroup.failoverOriginId }],
+                        origin_id: originGroup.originGroupId,
+                    })),
+                }
+                : {}),
+            price_class: this.properties.priceClass,
+            restrictions: {
+                geo_restriction: this.properties.geoRestriction.kind === 'none'
+                    ? { restriction_type: 'none' }
+                    : {
+                        locations: this.properties.geoRestriction.countries,
+                        restriction_type: this.properties.geoRestriction.kind === 'allow' ? 'whitelist' : 'blacklist',
+                    },
+            },
+            viewer_certificate: this.properties.viewerCertificate.kind === 'acm'
+                ? {
+                    acm_certificate_arn: this.properties.viewerCertificate.certificateArn,
+                    minimum_protocol_version: this.properties.viewerCertificate.minimumProtocolVersion,
+                    // eslint-disable-next-line spellcheck/spell-checker
+                    ssl_support_method: 'sni-only',
+                }
+                : { cloudfront_default_certificate: true },
+            ...(this.properties.webAclArn ? { web_acl_id: this.properties.webAclArn } : {}),
+        });
+        distributionOctoResource.output({
+            Arn: terraform.raw(`${distributionTFResource.address}.arn`),
+            DistributionId: terraform.raw(`${distributionTFResource.address}.id`),
+            DomainName: terraform.raw(`${distributionTFResource.address}.domain_name`),
+            HostedZoneId: terraform.raw(`${distributionTFResource.address}.hosted_zone_id`),
+        });
+        if (Object.keys(this.tags).length > 0) {
+            distributionTFResource.attribute('tags', this.tags);
+        }
+    }
+    /**
+     * Every managed policy a behavior names, paired with the slot it fills.
+     *
+     * @internal
+     */
+    collectManagedPolicyReferences() {
+        const references = [];
+        for (const behavior of this.properties.behaviors) {
+            if (behavior.cachePolicy.kind === 'managed') {
+                references.push(['cache', behavior.cachePolicy]);
+            }
+            if (behavior.originRequestPolicy?.kind === 'managed') {
+                references.push(['originRequest', behavior.originRequestPolicy]);
+            }
+            if (behavior.responseHeadersPolicy?.kind === 'managed') {
+                references.push(['responseHeaders', behavior.responseHeadersPolicy]);
+            }
+        }
+        return references;
+    }
+    /**
+     * The behavior claiming everything no other behavior did.
+     *
+     * @internal
+     */
+    getDefaultBehavior() {
+        return this.properties.behaviors.find((behavior) => !behavior.pathPattern);
+    }
+    /**
+     * The behaviors matched, in order, before the default one.
+     *
+     * @internal
+     */
+    getOrderedBehaviors() {
+        return this.properties.behaviors.filter((behavior) => !!behavior.pathPattern);
+    }
+    /**
+     * @internal
+     */
+    renderBehavior(behavior, policyIdByReference) {
+        const functionAssociations = behavior.functionAssociations ?? RENDER_DEFAULTS.behavior.functionAssociations;
+        const cloudFrontFunctions = functionAssociations.filter((f) => f.kind === 'cloudfront-function');
+        const lambdaEdgeFunctions = functionAssociations.filter((f) => f.kind === 'lambda-edge');
+        return {
+            allowed_methods: behavior.allowedMethods ?? RENDER_DEFAULTS.behavior.allowedMethods,
+            cache_policy_id: policyIdByReference.get(CloudFrontDistribution_1.policyKey('cache', behavior.cachePolicy)),
+            cached_methods: behavior.cachedMethods ?? RENDER_DEFAULTS.behavior.cachedMethods,
+            compress: behavior.compress ?? RENDER_DEFAULTS.behavior.compress,
+            ...(cloudFrontFunctions.length > 0
+                ? {
+                    function_association: cloudFrontFunctions.map((f) => ({
+                        event_type: f.eventType,
+                        function_arn: f.arn,
+                    })),
+                }
+                : {}),
+            ...(lambdaEdgeFunctions.length > 0
+                ? {
+                    lambda_function_association: lambdaEdgeFunctions.map((f) => ({
+                        event_type: f.eventType,
+                        lambda_arn: f.arn,
+                    })),
+                }
+                : {}),
+            ...(behavior.originRequestPolicy
+                ? {
+                    origin_request_policy_id: policyIdByReference.get(CloudFrontDistribution_1.policyKey('originRequest', behavior.originRequestPolicy)),
+                }
+                : {}),
+            ...(behavior.responseHeadersPolicy
+                ? {
+                    response_headers_policy_id: policyIdByReference.get(CloudFrontDistribution_1.policyKey('responseHeaders', behavior.responseHeadersPolicy)),
+                }
+                : {}),
+            target_origin_id: behavior.targetOriginId,
+            viewer_protocol_policy: behavior.viewerProtocolPolicy ?? RENDER_DEFAULTS.behavior.viewerProtocolPolicy,
+        };
+    }
+    /**
+     * @internal
+     */
+    renderOrigin(terraform, origin, originAccessControlIdByOriginId) {
+        const customHeaders = Object.entries(origin.customHeaders ?? RENDER_DEFAULTS.origin.customHeaders);
+        return {
+            connection_attempts: origin.connectionAttempts ?? RENDER_DEFAULTS.origin.connectionAttempts,
+            connection_timeout: origin.connectionTimeout ?? RENDER_DEFAULTS.origin.connectionTimeout,
+            ...(customHeaders.length > 0 ? { custom_header: customHeaders.map(([name, value]) => ({ name, value })) } : {}),
+            ...(origin.kind.kind === 'custom'
+                ? {
+                    custom_origin_config: {
+                        http_port: origin.kind.httpPort,
+                        https_port: origin.kind.httpsPort,
+                        origin_keepalive_timeout: origin.kind.keepaliveTimeout,
+                        origin_protocol_policy: origin.kind.originProtocolPolicy,
+                        origin_read_timeout: origin.kind.readTimeout,
+                        origin_ssl_protocols: origin.kind.sslProtocols,
+                    },
+                }
+                : { origin_access_control_id: originAccessControlIdByOriginId.get(origin.originId) }),
+            // An S3 origin's hostname is written down rather than referenced, because the bucket's own
+            // policy already references this distribution's ARN. Referencing it back would close a cycle
+            // between the two folders, which terragrunt cannot order.
+            domain_name: origin.kind.kind === 's3'
+                ? `${origin.kind.bucketName}.s3.${origin.kind.bucketRegion}.amazonaws.com`
+                : origin.kind.source.kind === 'literal'
+                    ? origin.kind.source.domainName
+                    : terraform.getRef(this.parents.find((p) => p.getSchemaInstanceInResourceAction().resourceId ===
+                        origin.kind.source.resourceId), origin.kind.source.responseKey),
+            origin_id: origin.originId,
+            ...(origin.originPath ? { origin_path: origin.originPath } : {}),
+        };
+    }
+    /**
+     * One origin access control per S3 origin. It is what lets the distribution sign its requests to
+     * a bucket that admits nothing else.
+     *
+     * @internal
+     */
+    renderOriginAccessControls(terraform, distributionOctoResource) {
+        const originAccessControlIdByOriginId = new Map();
+        for (const origin of this.properties.origins) {
+            if (origin.kind.kind !== 's3') {
+                continue;
+            }
+            const label = PolicyUtility.getSafeSid(origin.originId);
+            const originAccessControlTFResource = distributionOctoResource.addTerraformResource('aws_cloudfront_origin_access_control', `${this.resourceId}_origin_access_control_${label}`, {
+                name: CloudFrontDistribution_1.boundedName(`${this.resourceId}-${origin.originId}`, ORIGIN_ACCESS_CONTROL_NAME_MAX_LENGTH),
+                origin_access_control_origin_type: 's3',
+                signing_behavior: 'always',
+                // eslint-disable-next-line spellcheck/spell-checker
+                signing_protocol: 'sigv4',
+            });
+            originAccessControlIdByOriginId.set(origin.originId, terraform.raw(`${originAccessControlTFResource.address}.id`));
+        }
+        return originAccessControlIdByOriginId;
+    }
+    /**
+     * Emits every policy the behaviors reach for, and returns the id expression each reference
+     * resolves to.
+     *
+     * A managed policy is read by name through a `data` block, so the id AWS assigns is never written
+     * down here. A custom policy is created, and only the behaviors of this distribution can name it.
+     *
+     * @internal
+     */
+    renderPolicies(terraform, distributionOctoResource, providerRef) {
+        const policyIdByReference = new Map();
+        for (const cachePolicy of this.properties.cachePolicies) {
+            const tfResource = distributionOctoResource.addTerraformResource('aws_cloudfront_cache_policy', `${this.resourceId}_cache_policy_${PolicyUtility.getSafeSid(cachePolicy.name)}`, {
+                default_ttl: cachePolicy.defaultTtl ?? RENDER_DEFAULTS.cachePolicy.defaultTtl,
+                max_ttl: cachePolicy.maxTtl ?? RENDER_DEFAULTS.cachePolicy.maxTtl,
+                min_ttl: cachePolicy.minTtl ?? RENDER_DEFAULTS.cachePolicy.minTtl,
+                name: cachePolicy.name,
+                parameters_in_cache_key_and_forwarded_to_origin: {
+                    cookies_config: renderCookiesConfig(cachePolicy.cookies),
+                    enable_accept_encoding_brotli: cachePolicy.enableBrotli ?? RENDER_DEFAULTS.cachePolicy.enableBrotli,
+                    enable_accept_encoding_gzip: cachePolicy.enableGzip ?? RENDER_DEFAULTS.cachePolicy.enableGzip,
+                    headers_config: renderHeadersConfig(cachePolicy.headers),
+                    query_strings_config: renderQueryStringsConfig(cachePolicy.queryStrings),
+                },
+            });
+            policyIdByReference.set(CloudFrontDistribution_1.policyKey('cache', { kind: 'custom', name: cachePolicy.name }), terraform.raw(`${tfResource.address}.id`));
+        }
+        for (const originRequestPolicy of this.properties.originRequestPolicies) {
+            const tfResource = distributionOctoResource.addTerraformResource('aws_cloudfront_origin_request_policy', `${this.resourceId}_origin_request_policy_${PolicyUtility.getSafeSid(originRequestPolicy.name)}`, {
+                cookies_config: renderCookiesConfig(originRequestPolicy.cookies),
+                headers_config: renderHeadersConfig(originRequestPolicy.headers),
+                name: originRequestPolicy.name,
+                query_strings_config: renderQueryStringsConfig(originRequestPolicy.queryStrings),
+            });
+            policyIdByReference.set(CloudFrontDistribution_1.policyKey('originRequest', { kind: 'custom', name: originRequestPolicy.name }), terraform.raw(`${tfResource.address}.id`));
+        }
+        for (const responseHeadersPolicy of this.properties.responseHeadersPolicies) {
+            const tfResource = distributionOctoResource.addTerraformResource('aws_cloudfront_response_headers_policy', `${this.resourceId}_response_headers_policy_${PolicyUtility.getSafeSid(responseHeadersPolicy.name)}`, renderResponseHeadersPolicy(responseHeadersPolicy));
+            policyIdByReference.set(CloudFrontDistribution_1.policyKey('responseHeaders', { kind: 'custom', name: responseHeadersPolicy.name }), terraform.raw(`${tfResource.address}.id`));
+        }
+        const managedDataTypes = {
+            cache: 'aws_cloudfront_cache_policy',
+            originRequest: 'aws_cloudfront_origin_request_policy',
+            responseHeaders: 'aws_cloudfront_response_headers_policy',
+        };
+        for (const [slot, reference] of this.collectManagedPolicyReferences()) {
+            const key = CloudFrontDistribution_1.policyKey(slot, reference);
+            if (policyIdByReference.has(key)) {
+                continue;
+            }
+            const dataSource = terraform.addTerraformData(managedDataTypes[slot], `${this.resourceId}_managed_${slot}_${PolicyUtility.getSafeSid(reference.name)}`, { name: reference.name, provider: providerRef });
+            policyIdByReference.set(key, dataSource.ref('id'));
+        }
+        return policyIdByReference;
+    }
+    /**
+     * Everything a distribution says about itself that terraform would only reject later, or that AWS
+     * would accept and then serve wrongly.
+     *
+     * @internal
+     * @throws If ids collide or do not resolve, if an alias has no certificate to serve it, if a
+     * certificate or web ACL is not one CloudFront can read, or if a CloudFront Function is bound to
+     * an event it cannot run on.
+     */
+    validateReferences() {
+        const originIds = this.properties.origins.map((origin) => origin.originId);
+        const originGroupIds = this.properties.originGroups.map((originGroup) => originGroup.originGroupId);
+        const targetIds = [...originIds, ...originGroupIds];
+        // Behaviors and origin groups name origins out of one namespace, so a duplicate would silently
+        // resolve to whichever came first.
+        const duplicateIds = targetIds.filter((id, index) => targetIds.indexOf(id) !== index);
+        if (duplicateIds.length > 0) {
+            throw new Error(`CloudFront origin id "${duplicateIds[0]}" is declared more than once!`);
+        }
+        const s3BucketNames = this.properties.origins
+            .filter((origin) => origin.kind.kind === 's3')
+            .map((origin) => origin.kind.bucketName);
+        const duplicateBucketNames = s3BucketNames.filter((name, index) => s3BucketNames.indexOf(name) !== index);
+        if (duplicateBucketNames.length > 0) {
+            throw new Error(`CloudFront bucket "${duplicateBucketNames[0]}" is claimed by more than one origin!`);
+        }
+        // An S3 origin is reached over HTTPS at `<bucket>.s3.<region>.amazonaws.com`, and the certificate
+        // AWS serves there covers one label in front of `s3`. A bucket named with a dot is accepted by
+        // every step up to the first request, which then fails the handshake and answers 502.
+        const dottedBucketName = s3BucketNames.find((name) => name.includes('.'));
+        if (dottedBucketName) {
+            throw new Error(`CloudFront cannot reach an S3 origin whose bucket name holds a dot, "${dottedBucketName}"!`);
+        }
+        for (const originGroup of this.properties.originGroups) {
+            for (const memberId of [originGroup.primaryOriginId, originGroup.failoverOriginId]) {
+                if (!originIds.includes(memberId)) {
+                    throw new Error(`CloudFront origin group "${originGroup.originGroupId}" names unknown origin "${memberId}"!`);
+                }
+            }
+        }
+        const defaultBehaviors = this.properties.behaviors.filter((behavior) => !behavior.pathPattern);
+        if (defaultBehaviors.length !== 1) {
+            throw new Error('A CloudFront distribution needs exactly one behavior without a path pattern!');
+        }
+        const customPolicyNames = {
+            cache: this.properties.cachePolicies.map((p) => p.name),
+            originRequest: this.properties.originRequestPolicies.map((p) => p.name),
+            responseHeaders: this.properties.responseHeadersPolicies.map((p) => p.name),
+        };
+        for (const behavior of this.properties.behaviors) {
+            if (!targetIds.includes(behavior.targetOriginId)) {
+                throw new Error(`CloudFront behavior names unknown origin "${behavior.targetOriginId}"!`);
+            }
+            const referenced = [
+                ['cache', behavior.cachePolicy],
+                ['originRequest', behavior.originRequestPolicy],
+                ['responseHeaders', behavior.responseHeadersPolicy],
+            ];
+            for (const [slot, reference] of referenced) {
+                if (reference?.kind === 'custom' && !customPolicyNames[slot].includes(reference.name)) {
+                    throw new Error(`CloudFront behavior names unknown custom policy "${reference.name}"!`);
+                }
+            }
+            for (const functionAssociation of behavior.functionAssociations ?? []) {
+                if (functionAssociation.kind === 'cloudfront-function' &&
+                    !functionAssociation.eventType.startsWith('viewer-')) {
+                    throw new Error(`A CloudFront Function cannot run on "${functionAssociation.eventType}"! Use Lambda@Edge instead.`);
+                }
+            }
+        }
+        if (this.properties.aliases.length > 0 && this.properties.viewerCertificate.kind !== 'acm') {
+            throw new Error('A CloudFront alias needs a certificate covering it!');
+        }
+        // CloudFront reads both of these from us-east-1 alone, wherever the origins live. Left to AWS,
+        // this surfaces as a failed apply rather than as anything a caller can act on.
+        const globalArns = [
+            [
+                'certificate',
+                this.properties.viewerCertificate.kind === 'acm' ? this.properties.viewerCertificate.certificateArn : null,
+            ],
+            ['web ACL', this.properties.webAclArn],
+        ];
+        for (const [subject, arn] of globalArns) {
+            if (arn && arn.split(':')[3] !== CLOUD_FRONT_GLOBAL_REGION) {
+                throw new Error(`CloudFront only reads a ${subject} from "${CLOUD_FRONT_GLOBAL_REGION}"!`);
+            }
+        }
+    }
+};
+CloudFrontDistribution = CloudFrontDistribution_1 = __decorate([
+    Resource('@octo', 'cloudfront-distribution', CloudFrontDistributionSchema),
+    __metadata("design:paramtypes", [String, Object, Array])
+], CloudFrontDistribution);
+export { CloudFrontDistribution };
+/**
+ * @internal
+ */
+function renderCookiesConfig(input) {
+    const selection = input ?? RENDER_DEFAULTS.valueSelection;
+    return {
+        cookie_behavior: cookieBehavior(selection),
+        ...(selection.kind === 'allowList' ? { cookies: { items: selection.values } } : {}),
+    };
+}
+/**
+ * @internal
+ */
+function renderHeadersConfig(input) {
+    const selection = input ?? RENDER_DEFAULTS.valueSelection;
+    return {
+        header_behavior: headerBehavior(selection),
+        ...(selection.kind === 'allowList' ? { headers: { items: selection.values } } : {}),
+    };
+}
+/**
+ * @internal
+ */
+function renderQueryStringsConfig(input) {
+    const selection = input ?? RENDER_DEFAULTS.valueSelection;
+    return {
+        query_string_behavior: cookieBehavior(selection),
+        ...(selection.kind === 'allowList' ? { query_strings: { items: selection.values } } : {}),
+    };
+}
+/**
+ * Cookies and query strings share a vocabulary; headers do not, because only a header selection can
+ * mean "everything the viewer sent".
+ *
+ * @internal
+ */
+function cookieBehavior(selection) {
+    switch (selection.kind) {
+        case 'all':
+        case 'allViewerAndWhitelistCloudFront':
+            return 'all';
+        case 'allowList':
+            return 'whitelist';
+        default:
+            return 'none';
+    }
+}
+/**
+ * @internal
+ */
+function headerBehavior(selection) {
+    switch (selection.kind) {
+        case 'all':
+            return 'allViewer';
+        case 'allViewerAndWhitelistCloudFront':
+            return 'allViewerAndWhitelistCloudFront';
+        case 'allowList':
+            return 'whitelist';
+        default:
+            return 'none';
+    }
+}
+/**
+ * @internal
+ */
+function renderResponseHeadersPolicy(policy) {
+    const securityHeaders = policy.securityHeaders;
+    return {
+        ...(policy.cors
+            ? {
+                cors_config: {
+                    access_control_allow_credentials: policy.cors.allowCredentials,
+                    access_control_allow_headers: { items: policy.cors.allowHeaders },
+                    access_control_allow_methods: { items: policy.cors.allowMethods },
+                    access_control_allow_origins: { items: policy.cors.allowOrigins },
+                    access_control_max_age_sec: policy.cors.maxAgeSeconds,
+                    origin_override: true,
+                },
+            }
+            : {}),
+        ...((policy.customHeaders ?? []).length > 0
+            ? {
+                custom_headers_config: {
+                    items: (policy.customHeaders ?? []).map((h) => ({
+                        header: h.header,
+                        override: h.override,
+                        value: h.value,
+                    })),
+                },
+            }
+            : {}),
+        name: policy.name,
+        ...((policy.removeHeaders ?? []).length > 0
+            ? { remove_headers_config: { items: (policy.removeHeaders ?? []).map((header) => ({ header })) } }
+            : {}),
+        ...(securityHeaders
+            ? {
+                security_headers_config: {
+                    ...(securityHeaders.contentSecurityPolicy
+                        ? {
+                            content_security_policy: {
+                                content_security_policy: securityHeaders.contentSecurityPolicy,
+                                override: true,
+                            },
+                        }
+                        : {}),
+                    ...((securityHeaders.contentTypeOptions ?? RENDER_DEFAULTS.securityHeaders.contentTypeOptions)
+                        ? { content_type_options: { override: true } }
+                        : {}),
+                    ...(securityHeaders.frameOptions === null
+                        ? {}
+                        : {
+                            frame_options: {
+                                frame_option: securityHeaders.frameOptions ?? RENDER_DEFAULTS.securityHeaders.frameOptions,
+                                override: true,
+                            },
+                        }),
+                    ...(securityHeaders.referrerPolicy
+                        ? { referrer_policy: { override: true, referrer_policy: securityHeaders.referrerPolicy } }
+                        : {}),
+                    ...(securityHeaders.strictTransportSecurityMaxAge !== null
+                        ? {
+                            strict_transport_security: {
+                                access_control_max_age_sec: securityHeaders.strictTransportSecurityMaxAge ??
+                                    RENDER_DEFAULTS.securityHeaders.strictTransportSecurityMaxAge,
+                                // eslint-disable-next-line spellcheck/spell-checker
+                                include_subdomains: true,
+                                override: true,
+                                preload: false,
+                            },
+                        }
+                        : {}),
+                },
+            }
+            : {}),
+    };
+}
+//# sourceMappingURL=cloudfront-distribution.resource.js.map

package/dist/resources/cloudfront-distribution/cloudfront-distribution.resource.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudfront-distribution.resource.js","sourceRoot":"","sources":["../../../src/resources/cloudfront-distribution/cloudfront-distribution.resource.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,OAAO,EACL,kBAAkB,EAElB,IAAI,EACJ,UAAU,EACV,WAAW,EAEX,QAAQ,GAET,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,aAAa,EAAE,MAAM,0CAA0C,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,MAAM,0CAA0C,CAAC;AACzE,OAAO,EAEL,4BAA4B,GAK7B,MAAM,mBAAmB,CAAC;AAS3B;;;;;GAKG;AACH,MAAM,yBAAyB,GAAG,WAAW,CAAC;AAE9C;;;;GAIG;AACH,MAAM,qCAAqC,GAAG,EAAE,CAAC;AAEjD;;;;;;;;;GASG;AACH,MAAM,eAAe,GAAG;IACtB,QAAQ,EAAE;QACR,cAAc,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC;QAC/B,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC;QAC9B,QAAQ,EAAE,IAAI;QACd,oBAAoB,EAAE,EAAE;QACxB,oBAAoB,EAAE,mBAAmB;KAC1C;IACD,WAAW,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,EAAE;IACrG,kBAAkB,EAAE,EAAE;IACtB,MAAM,EAAE,EAAE,kBAAkB,EAAE,CAAC,EAAE,iBAAiB,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE;IAC3F,eAAe,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE,YAAY,EAAE,YAAY,EAAE,6BAA6B,EAAE,QAAQ,EAAE;IAClH,cAAc,EAAE,EAAE,IAAI,EAAE,MAAM,EAA+B;CACrD,CAAC;AAEX;;GAEG;AAEI,IAAM,sBAAsB,8BAA5B,MAAM,sBAAuB,SAAQ,kBAAwE;IAKlH;;OAEG;IACH,YACE,UAAkB,EAClB,UAAsD,EACtD,UAAkD,EAAE;QAEpD,KAAK,CAAC,UAAU,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QAEvC,IAAI,CAAC,kBAAkB,EAAE,CAAC;IAC5B,CAAC;IAED;;;;;;;;;OASG;IACK,MAAM,CAAC,WAAW,CAAC,IAAY,EAAE,SAAiB;QACxD,IAAI,IAAI,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACxD,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,MAAM,EAAE,CAAC;IACzE,CAAC;IAED;;;;OAIG;IACK,MAAM,CAAC,SAAS,CAAC,IAAY,EAAE,SAAqC;QAC1E,OAAO,GAAG,IAAI,IAAI,SAAS,CAAC,IAAI,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC;IACvD,CAAC;IAED;;;;;;;OAOG;IACM,KAAK,CAAC,cAAc,CAAC,QAAgC;QAC5D,IAAI,QAAQ,CAAC,UAAU,CAAC,YAAY,KAAK,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;YACtE,OAAO;gBACL,IAAI,IAAI,CACN,IAAI,EACJ,UAAU,CAAC,OAAO,EAClB,YAAY,EACZ,IAAI,CAAC,UAAU,EAAE,EACjB,8DAA8D,CAC/D;aACF,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1E,OAAO,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAC5E,CAAC;QAED,OAAO,EAAE,CAAC;IACZ,CAAC;IAED;;OAEG;IACM,KAAK,CAAC,KAAK,CAAC,SAA+B;QAClD,MAAM,wBAAwB,GAAG,SAAS,CAAC,wBAAwB,CAAC,IAA8B,EAAE;YAClG,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE;SACtD,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,SAAS,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QAEhF,MAAM,mBAAmB,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,wBAAwB,EAAE,WAAW,CAAC,CAAC;QAClG,MAAM,+BAA+B,GAAG,IAAI,CAAC,0BAA0B,CAAC,SAAS,EAAE,wBAAwB,CAAC,CAAC;QAE7G,MAAM,sBAAsB,GAAG,wBAAwB,CAAC,oBAAoB,CAC1E,6BAA6B,EAC7B,GAAG,IAAI,CAAC,UAAU,eAAe,EACjC;YACE,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnF,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO;YAChC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,MAAM,GAAG,CAAC;gBACjD,CAAC,CAAC;oBACE,qBAAqB,EAAE,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;wBACxF,qBAAqB,EAAE,mBAAmB,CAAC,kBAAkB,IAAI,eAAe,CAAC,kBAAkB;wBACnG,UAAU,EAAE,mBAAmB,CAAC,SAAS;wBACzC,aAAa,EAAE,mBAAmB,CAAC,YAAY;wBAC/C,kBAAkB,EAAE,mBAAmB,CAAC,gBAAgB;qBACzD,CAAC,CAAC;iBACJ;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,sBAAsB,EAAE,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,mBAAmB,CAAC;YAC3F,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,IAAI,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxG,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO;YAChC,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,WAAW;YACzC,eAAe,EAAE,IAAI,CAAC,UAAU,CAAC,aAAa;YAC9C,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO;gBACzB,CAAC,CAAC;oBACE,cAAc,EAAE;wBACd,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,gBAAgB;wBAChD,eAAe,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,cAAc;wBACvD,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM;qBACvC;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,MAAM,GAAG,CAAC;gBACvC,CAAC,CAAC;oBACE,sBAAsB,EAAE,IAAI,CAAC,mBAAmB,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;wBACpE,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,mBAAmB,CAAC;wBACrD,YAAY,EAAE,QAAQ,CAAC,WAAW;qBACnC,CAAC,CAAC;iBACJ;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAC7C,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,+BAA+B,CAAC,CACtE;YACD,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;gBACzC,CAAC,CAAC;oBACE,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;wBAC/D,iBAAiB,EAAE,EAAE,YAAY,EAAE,WAAW,CAAC,mBAAmB,EAAE;wBACpE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,WAAW,CAAC,eAAe,EAAE,EAAE,EAAE,SAAS,EAAE,WAAW,CAAC,gBAAgB,EAAE,CAAC;wBACjG,SAAS,EAAE,WAAW,CAAC,aAAa;qBACrC,CAAC,CAAC;iBACJ;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,WAAW,EAAE,IAAI,CAAC,UAAU,CAAC,UAAU;YACvC,YAAY,EAAE;gBACZ,eAAe,EACb,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,KAAK,MAAM;oBAC5C,CAAC,CAAC,EAAE,gBAAgB,EAAE,MAAM,EAAE;oBAC9B,CAAC,CAAC;wBACE,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,SAAS;wBACnD,gBAAgB,EAAE,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW;qBAC9F;aACR;YACD,kBAAkB,EAChB,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,IAAI,KAAK,KAAK;gBAC9C,CAAC,CAAC;oBACE,mBAAmB,EAAE,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,cAAc;oBACrE,wBAAwB,EAAE,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,sBAAsB;oBAClF,oDAAoD;oBACpD,kBAAkB,EAAE,UAAU;iBAC/B;gBACH,CAAC,CAAC,EAAE,8BAA8B,EAAE,IAAI,EAAE;YAC9C,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChF,CACF,CAAC;QAEF,wBAAwB,CAAC,MAAM,CAAC;YAC9B,GAAG,EAAE,SAAS,CAAC,GAAG,CAAC,GAAG,sBAAsB,CAAC,OAAO,MAAM,CAAC;YAC3D,cAAc,EAAE,SAAS,CAAC,GAAG,CAAC,GAAG,sBAAsB,CAAC,OAAO,KAAK,CAAC;YACrE,UAAU,EAAE,SAAS,CAAC,GAAG,CAAC,GAAG,sBAAsB,CAAC,OAAO,cAAc,CAAC;YAC1E,YAAY,EAAE,SAAS,CAAC,GAAG,CAAC,GAAG,sBAAsB,CAAC,OAAO,iBAAiB,CAAC;SAChF,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtC,sBAAsB,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,8BAA8B;QACpC,MAAM,UAAU,GAA2C,EAAE,CAAC;QAE9D,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;YACjD,IAAI,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC5C,UAAU,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;YACnD,CAAC;YACD,IAAI,QAAQ,CAAC,mBAAmB,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;gBACrD,UAAU,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAAC;YACnE,CAAC;YACD,IAAI,QAAQ,CAAC,qBAAqB,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvD,UAAU,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,QAAQ,CAAC,qBAAqB,CAAC,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;;;OAIG;IACK,kBAAkB;QACxB,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAE,CAAC;IAC9E,CAAC;IAED;;;;OAIG;IACK,mBAAmB;QACzB,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAChF,CAAC;IAED;;OAEG;IACK,cAAc,CACpB,QAAkC,EAClC,mBAAyC;QAEzC,MAAM,oBAAoB,GAAG,QAAQ,CAAC,oBAAoB,IAAI,eAAe,CAAC,QAAQ,CAAC,oBAAoB,CAAC;QAC5G,MAAM,mBAAmB,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,qBAAqB,CAAC,CAAC;QACjG,MAAM,mBAAmB,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC;QAEzF,OAAO;YACL,eAAe,EAAE,QAAQ,CAAC,cAAc,IAAI,eAAe,CAAC,QAAQ,CAAC,cAAc;YACnF,eAAe,EAAE,mBAAmB,CAAC,GAAG,CAAC,wBAAsB,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;YACzG,cAAc,EAAE,QAAQ,CAAC,aAAa,IAAI,eAAe,CAAC,QAAQ,CAAC,aAAa;YAChF,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,eAAe,CAAC,QAAQ,CAAC,QAAQ;YAChE,GAAG,CAAC,mBAAmB,CAAC,MAAM,GAAG,CAAC;gBAChC,CAAC,CAAC;oBACE,oBAAoB,EAAE,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBACpD,UAAU,EAAE,CAAC,CAAC,SAAS;wBACvB,YAAY,EAAE,CAAC,CAAC,GAAG;qBACpB,CAAC,CAAC;iBACJ;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,mBAAmB,CAAC,MAAM,GAAG,CAAC;gBAChC,CAAC,CAAC;oBACE,2BAA2B,EAAE,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBAC3D,UAAU,EAAE,CAAC,CAAC,SAAS;wBACvB,UAAU,EAAE,CAAC,CAAC,GAAG;qBAClB,CAAC,CAAC;iBACJ;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,QAAQ,CAAC,mBAAmB;gBAC9B,CAAC,CAAC;oBACE,wBAAwB,EAAE,mBAAmB,CAAC,GAAG,CAC/C,wBAAsB,CAAC,SAAS,CAAC,eAAe,EAAE,QAAQ,CAAC,mBAAmB,CAAC,CAChF;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,QAAQ,CAAC,qBAAqB;gBAChC,CAAC,CAAC;oBACE,0BAA0B,EAAE,mBAAmB,CAAC,GAAG,CACjD,wBAAsB,CAAC,SAAS,CAAC,iBAAiB,EAAE,QAAQ,CAAC,qBAAqB,CAAC,CACpF;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,gBAAgB,EAAE,QAAQ,CAAC,cAAc;YACzC,sBAAsB,EAAE,QAAQ,CAAC,oBAAoB,IAAI,eAAe,CAAC,QAAQ,CAAC,oBAAoB;SACvG,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,YAAY,CAClB,SAA+B,EAC/B,MAA8B,EAC9B,+BAAqD;QAErD,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,IAAI,eAAe,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAEnG,OAAO;YACL,mBAAmB,EAAE,MAAM,CAAC,kBAAkB,IAAI,eAAe,CAAC,MAAM,CAAC,kBAAkB;YAC3F,kBAAkB,EAAE,MAAM,CAAC,iBAAiB,IAAI,eAAe,CAAC,MAAM,CAAC,iBAAiB;YACxF,GAAG,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/G,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ;gBAC/B,CAAC,CAAC;oBACE,oBAAoB,EAAE;wBACpB,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ;wBAC/B,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS;wBACjC,wBAAwB,EAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB;wBACtD,sBAAsB,EAAE,MAAM,CAAC,IAAI,CAAC,oBAAoB;wBACxD,mBAAmB,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;wBAC5C,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY;qBAC/C;iBACF;gBACH,CAAC,CAAC,EAAE,wBAAwB,EAAE,+BAA+B,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvF,2FAA2F;YAC3F,6FAA6F;YAC7F,0DAA0D;YAC1D,WAAW,EACT,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI;gBACvB,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,OAAO,MAAM,CAAC,IAAI,CAAC,YAAY,gBAAgB;gBAC1E,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS;oBACrC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU;oBAC/B,CAAC,CAAC,SAAS,CAAC,MAAM,CACd,IAAI,CAAC,OAAO,CAAC,IAAI,CACf,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,iCAAiC,EAAE,CAAC,UAAU;wBAC/C,MAAM,CAAC,IAA2C,CAAC,MAAM,CAAC,UAAU,CACvE,EACF,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAC/B;YACT,SAAS,EAAE,MAAM,CAAC,QAAQ;YAC1B,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACK,0BAA0B,CAChC,SAA+B,EAC/B,wBAAmC;QAEnC,MAAM,+BAA+B,GAAG,IAAI,GAAG,EAAmB,CAAC;QAEnE,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YAC7C,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;gBAC9B,SAAS;YACX,CAAC;YAED,MAAM,KAAK,GAAG,aAAa,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACxD,MAAM,6BAA6B,GAAG,wBAAwB,CAAC,oBAAoB,CACjF,sCAAsC,EACtC,GAAG,IAAI,CAAC,UAAU,0BAA0B,KAAK,EAAE,EACnD;gBACE,IAAI,EAAE,wBAAsB,CAAC,WAAW,CACtC,GAAG,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,QAAQ,EAAE,EACvC,qCAAqC,CACtC;gBACD,iCAAiC,EAAE,IAAI;gBACvC,gBAAgB,EAAE,QAAQ;gBAC1B,oDAAoD;gBACpD,gBAAgB,EAAE,OAAO;aAC1B,CACF,CAAC;YACF,+BAA+B,CAAC,GAAG,CACjC,MAAM,CAAC,QAAQ,EACf,SAAS,CAAC,GAAG,CAAC,GAAG,6BAA6B,CAAC,OAAO,KAAK,CAAC,CAC7D,CAAC;QACJ,CAAC;QAED,OAAO,+BAA+B,CAAC;IACzC,CAAC;IAED;;;;;;;;OAQG;IACK,cAAc,CACpB,SAA+B,EAC/B,wBAAmC,EACnC,WAAoB;QAEpB,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAmB,CAAC;QAEvD,KAAK,MAAM,WAAW,IAAI,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,CAAC;YACxD,MAAM,UAAU,GAAG,wBAAwB,CAAC,oBAAoB,CAC9D,6BAA6B,EAC7B,GAAG,IAAI,CAAC,UAAU,iBAAiB,aAAa,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAC/E;gBACE,WAAW,EAAE,WAAW,CAAC,UAAU,IAAI,eAAe,CAAC,WAAW,CAAC,UAAU;gBAC7E,OAAO,EAAE,WAAW,CAAC,MAAM,IAAI,eAAe,CAAC,WAAW,CAAC,MAAM;gBACjE,OAAO,EAAE,WAAW,CAAC,MAAM,IAAI,eAAe,CAAC,WAAW,CAAC,MAAM;gBACjE,IAAI,EAAE,WAAW,CAAC,IAAI;gBACtB,+CAA+C,EAAE;oBAC/C,cAAc,EAAE,mBAAmB,CAAC,WAAW,CAAC,OAAO,CAAC;oBACxD,6BAA6B,EAAE,WAAW,CAAC,YAAY,IAAI,eAAe,CAAC,WAAW,CAAC,YAAY;oBACnG,2BAA2B,EAAE,WAAW,CAAC,UAAU,IAAI,eAAe,CAAC,WAAW,CAAC,UAAU;oBAC7F,cAAc,EAAE,mBAAmB,CAAC,WAAW,CAAC,OAAO,CAAC;oBACxD,oBAAoB,EAAE,wBAAwB,CAAC,WAAW,CAAC,YAAY,CAAC;iBACzE;aACF,CACF,CAAC;YACF,mBAAmB,CAAC,GAAG,CACrB,wBAAsB,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC,EACrF,SAAS,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,OAAO,KAAK,CAAC,CAC1C,CAAC;QACJ,CAAC;QAED,KAAK,MAAM,mBAAmB,IAAI,IAAI,CAAC,UAAU,CAAC,qBAAqB,EAAE,CAAC;YACxE,MAAM,UAAU,GAAG,wBAAwB,CAAC,oBAAoB,CAC9D,sCAAsC,EACtC,GAAG,IAAI,CAAC,UAAU,0BAA0B,aAAa,CAAC,UAAU,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,EAChG;gBACE,cAAc,EAAE,mBAAmB,CAAC,mBAAmB,CAAC,OAAO,CAAC;gBAChE,cAAc,EAAE,mBAAmB,CAAC,mBAAmB,CAAC,OAAO,CAAC;gBAChE,IAAI,EAAE,mBAAmB,CAAC,IAAI;gBAC9B,oBAAoB,EAAE,wBAAwB,CAAC,mBAAmB,CAAC,YAAY,CAAC;aACjF,CACF,CAAC;YACF,mBAAmB,CAAC,GAAG,CACrB,wBAAsB,CAAC,SAAS,CAAC,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,mBAAmB,CAAC,IAAI,EAAE,CAAC,EACrG,SAAS,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,OAAO,KAAK,CAAC,CAC1C,CAAC;QACJ,CAAC;QAED,KAAK,MAAM,qBAAqB,IAAI,IAAI,CAAC,UAAU,CAAC,uBAAuB,EAAE,CAAC;YAC5E,MAAM,UAAU,GAAG,wBAAwB,CAAC,oBAAoB,CAC9D,wCAAwC,EACxC,GAAG,IAAI,CAAC,UAAU,4BAA4B,aAAa,CAAC,UAAU,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,EACpG,2BAA2B,CAAC,qBAAqB,CAAC,CACnD,CAAC;YACF,mBAAmB,CAAC,GAAG,CACrB,wBAAsB,CAAC,SAAS,CAAC,iBAAiB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,qBAAqB,CAAC,IAAI,EAAE,CAAC,EACzG,SAAS,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,OAAO,KAAK,CAAC,CAC1C,CAAC;QACJ,CAAC;QAED,MAAM,gBAAgB,GAA2B;YAC/C,KAAK,EAAE,6BAA6B;YACpC,aAAa,EAAE,sCAAsC;YACrD,eAAe,EAAE,wCAAwC;SAC1D,CAAC;QACF,KAAK,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC,8BAA8B,EAAE,EAAE,CAAC;YACtE,MAAM,GAAG,GAAG,wBAAsB,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YAC9D,IAAI,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjC,SAAS;YACX,CAAC;YAED,MAAM,UAAU,GAAG,SAAS,CAAC,gBAAgB,CAC3C,gBAAgB,CAAC,IAAI,CAAC,EACtB,GAAG,IAAI,CAAC,UAAU,YAAY,IAAI,IAAI,aAAa,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAChF,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,CAChD,CAAC;YACF,mBAAmB,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACrD,CAAC;QAED,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IAED;;;;;;;;OAQG;IACK,kBAAkB;QACxB,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC3E,MAAM,cAAc,GAAG,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;QACpG,MAAM,SAAS,GAAG,CAAC,GAAG,SAAS,EAAE,GAAG,cAAc,CAAC,CAAC;QAEpD,+FAA+F;QAC/F,mCAAmC;QACnC,MAAM,YAAY,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,KAAK,CAAC,CAAC;QACtF,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,yBAAyB,YAAY,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC;QAC3F,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO;aAC1C,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC;aAC7C,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAE,MAAM,CAAC,IAA+B,CAAC,UAAU,CAAC,CAAC;QACvE,MAAM,oBAAoB,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC;QAC1G,IAAI,oBAAoB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,sBAAsB,oBAAoB,CAAC,CAAC,CAAC,uCAAuC,CAAC,CAAC;QACxG,CAAC;QAED,kGAAkG;QAClG,+FAA+F;QAC/F,sFAAsF;QACtF,MAAM,gBAAgB,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1E,IAAI,gBAAgB,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,wEAAwE,gBAAgB,IAAI,CAAC,CAAC;QAChH,CAAC;QAED,KAAK,MAAM,WAAW,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;YACvD,KAAK,MAAM,QAAQ,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE,WAAW,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBACnF,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAClC,MAAM,IAAI,KAAK,CAAC,4BAA4B,WAAW,CAAC,aAAa,2BAA2B,QAAQ,IAAI,CAAC,CAAC;gBAChH,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,gBAAgB,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC/F,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAC;QAClG,CAAC;QAED,MAAM,iBAAiB,GAA6B;YAClD,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YACvD,aAAa,EAAE,IAAI,CAAC,UAAU,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YACvE,eAAe,EAAE,IAAI,CAAC,UAAU,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;SAC5E,CAAC;QACF,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;YACjD,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;gBACjD,MAAM,IAAI,KAAK,CAAC,6CAA6C,QAAQ,CAAC,cAAc,IAAI,CAAC,CAAC;YAC5F,CAAC;YAED,MAAM,UAAU,GAA8D;gBAC5E,CAAC,OAAO,EAAE,QAAQ,CAAC,WAAW,CAAC;gBAC/B,CAAC,eAAe,EAAE,QAAQ,CAAC,mBAAmB,CAAC;gBAC/C,CAAC,iBAAiB,EAAE,QAAQ,CAAC,qBAAqB,CAAC;aACpD,CAAC;YACF,KAAK,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,UAAU,EAAE,CAAC;gBAC3C,IAAI,SAAS,EAAE,IAAI,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtF,MAAM,IAAI,KAAK,CAAC,oDAAoD,SAAS,CAAC,IAAI,IAAI,CAAC,CAAC;gBAC1F,CAAC;YACH,CAAC;YAED,KAAK,MAAM,mBAAmB,IAAI,QAAQ,CAAC,oBAAoB,IAAI,EAAE,EAAE,CAAC;gBACtE,IACE,mBAAmB,CAAC,IAAI,KAAK,qBAAqB;oBAClD,CAAC,mBAAmB,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,EACpD,CAAC;oBACD,MAAM,IAAI,KAAK,CACb,wCAAwC,mBAAmB,CAAC,SAAS,6BAA6B,CACnG,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAC3F,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzE,CAAC;QAED,+FAA+F;QAC/F,+EAA+E;QAC/E,MAAM,UAAU,GAA8B;YAC5C;gBACE,aAAa;gBACb,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI;aAC3G;YACD,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;SACvC,CAAC;QACF,KAAK,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,UAAU,EAAE,CAAC;YACxC,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,yBAAyB,EAAE,CAAC;gBAC3D,MAAM,IAAI,KAAK,CAAC,2BAA2B,OAAO,UAAU,yBAAyB,IAAI,CAAC,CAAC;YAC7F,CAAC;QACH,CAAC;IACH,CAAC;CACF,CAAA;AAhiBY,sBAAsB;IADlC,QAAQ,CAAyB,OAAO,EAAE,yBAAyB,EAAE,4BAA4B,CAAC;;GACtF,sBAAsB,CAgiBlC;;AAED;;GAEG;AACH,SAAS,mBAAmB,CAAC,KAAiC;IAC5D,MAAM,SAAS,GAAG,KAAK,IAAI,eAAe,CAAC,cAAc,CAAC;IAC1D,OAAO;QACL,eAAe,EAAE,cAAc,CAAC,SAAS,CAAC;QAC1C,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAAC,KAAiC;IAC5D,MAAM,SAAS,GAAG,KAAK,IAAI,eAAe,CAAC,cAAc,CAAC;IAC1D,OAAO;QACL,eAAe,EAAE,cAAc,CAAC,SAAS,CAAC;QAC1C,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,wBAAwB,CAAC,KAAiC;IACjE,MAAM,SAAS,GAAG,KAAK,IAAI,eAAe,CAAC,cAAc,CAAC;IAC1D,OAAO;QACL,qBAAqB,EAAE,cAAc,CAAC,SAAS,CAAC;QAChD,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1F,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CAAC,SAAoC;IAC1D,QAAQ,SAAS,CAAC,IAAI,EAAE,CAAC;QACvB,KAAK,KAAK,CAAC;QACX,KAAK,iCAAiC;YACpC,OAAO,KAAK,CAAC;QACf,KAAK,WAAW;YACd,OAAO,WAAW,CAAC;QACrB;YACE,OAAO,MAAM,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,SAAoC;IAC1D,QAAQ,SAAS,CAAC,IAAI,EAAE,CAAC;QACvB,KAAK,KAAK;YACR,OAAO,WAAW,CAAC;QACrB,KAAK,iCAAiC;YACpC,OAAO,iCAAiC,CAAC;QAC3C,KAAK,WAAW;YACd,OAAO,WAAW,CAAC;QACrB;YACE,OAAO,MAAM,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,2BAA2B,CAAC,MAA6C;IAChF,MAAM,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;IAE/C,OAAO;QACL,GAAG,CAAC,MAAM,CAAC,IAAI;YACb,CAAC,CAAC;gBACE,WAAW,EAAE;oBACX,gCAAgC,EAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB;oBAC9D,4BAA4B,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE;oBACjE,4BAA4B,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE;oBACjE,4BAA4B,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE;oBACjE,0BAA0B,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa;oBACrD,eAAe,EAAE,IAAI;iBACtB;aACF;YACH,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC;YACzC,CAAC,CAAC;gBACE,qBAAqB,EAAE;oBACrB,KAAK,EAAE,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBAC9C,MAAM,EAAE,CAAC,CAAC,MAAM;wBAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;wBACpB,KAAK,EAAE,CAAC,CAAC,KAAK;qBACf,CAAC,CAAC;iBACJ;aACF;YACH,CAAC,CAAC,EAAE,CAAC;QACP,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,GAAG,CAAC,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC;YACzC,CAAC,CAAC,EAAE,qBAAqB,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE;YAClG,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,eAAe;YACjB,CAAC,CAAC;gBACE,uBAAuB,EAAE;oBACvB,GAAG,CAAC,eAAe,CAAC,qBAAqB;wBACvC,CAAC,CAAC;4BACE,uBAAuB,EAAE;gCACvB,uBAAuB,EAAE,eAAe,CAAC,qBAAqB;gCAC9D,QAAQ,EAAE,IAAI;6BACf;yBACF;wBACH,CAAC,CAAC,EAAE,CAAC;oBACP,GAAG,CAAC,CAAC,eAAe,CAAC,kBAAkB,IAAI,eAAe,CAAC,eAAe,CAAC,kBAAkB,CAAC;wBAC5F,CAAC,CAAC,EAAE,oBAAoB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;wBAC9C,CAAC,CAAC,EAAE,CAAC;oBACP,GAAG,CAAC,eAAe,CAAC,YAAY,KAAK,IAAI;wBACvC,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC;4BACE,aAAa,EAAE;gCACb,YAAY,EAAE,eAAe,CAAC,YAAY,IAAI,eAAe,CAAC,eAAe,CAAC,YAAY;gCAC1F,QAAQ,EAAE,IAAI;6BACf;yBACF,CAAC;oBACN,GAAG,CAAC,eAAe,CAAC,cAAc;wBAChC,CAAC,CAAC,EAAE,eAAe,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,eAAe,CAAC,cAAc,EAAE,EAAE;wBAC1F,CAAC,CAAC,EAAE,CAAC;oBACP,GAAG,CAAC,eAAe,CAAC,6BAA6B,KAAK,IAAI;wBACxD,CAAC,CAAC;4BACE,yBAAyB,EAAE;gCACzB,0BAA0B,EACxB,eAAe,CAAC,6BAA6B;oCAC7C,eAAe,CAAC,eAAe,CAAC,6BAA6B;gCAC/D,oDAAoD;gCACpD,kBAAkB,EAAE,IAAI;gCACxB,QAAQ,EAAE,IAAI;gCACd,OAAO,EAAE,KAAK;6BACf;yBACF;wBACH,CAAC,CAAC,EAAE,CAAC;iBACR;aACF;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC"}

package/dist/resources/cloudfront-distribution/index.d.ts

@@ -0,0 +1 @@
+export { CloudFrontDistribution } from './cloudfront-distribution.resource.js';

package/dist/resources/cloudfront-distribution/index.js

@@ -0,0 +1,2 @@
+export { CloudFrontDistribution } from './cloudfront-distribution.resource.js';
+//# sourceMappingURL=index.js.map