@quadnix/octo-aws-cdk 0.0.19 → 0.2.0

package/dist/services/docker/docker.service.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Runs the local docker CLI on behalf of a resource action.
+ *
+ * Terraform has no way to build or push a container image, so the resource that publishes one is an
+ * external resource and reaches docker through here. Every method shells out to the binary named by
+ * `dockerBinary`; nothing is talked to over the docker socket directly.
+ *
+ * @internal
+ */
+export declare class DockerService {
+    private readonly dockerBinary;
+    /**
+     * @internal
+     */
+    constructor(dockerBinary: string);
+    /**
+     * Builds `imageReference` from the given build context, as a single manifest.
+     *
+     * Provenance and SBOM attestations are off because they turn the result into an image index, and
+     * pushing an index writes its tag twice - once for the manifest and once for the index. A
+     * repository with immutable tags rejects the second write, having already been given the first,
+     * which leaves the tag pointing at half a push. Both flags need a buildx-backed `docker build`.
+     *
+     * @param dockerfilePath Absolute path of the Dockerfile.
+     * @param contextDirectory Absolute path of the build context.
+     */
+    build(imageReference: string, dockerfilePath: string, contextDirectory: string): Promise<void>;
+    /**
+     * Authenticates the docker CLI against a registry.
+     *
+     * The password is written to the child's stdin rather than passed as an argument, so it never
+     * appears in the process list or in terraform's echo of the `local-exec` command.
+     */
+    login(registryUri: string, username: string, password: string): Promise<void>;
+    /**
+     * Pushes an already built image reference to its registry.
+     */
+    push(imageReference: string): Promise<void>;
+    /**
+     * @throws If docker is not on the PATH, or exits non-zero. The error carries docker's own stderr,
+     * which is the only thing that explains a failed build.
+     */
+    private run;
+}
+/**
+ * @internal
+ */
+export declare class DockerServiceFactory {
+    private static instance;
+    /**
+     * @param dockerBinary The docker CLI to invoke. Defaults to `docker` on the PATH.
+     */
+    static create(dockerBinary?: string): Promise<DockerService>;
+}

package/dist/services/docker/docker.service.js

@@ -0,0 +1,112 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+import { spawn } from 'node:child_process';
+import { Factory } from '@quadnix/octo';
+/**
+ * Runs the local docker CLI on behalf of a resource action.
+ *
+ * Terraform has no way to build or push a container image, so the resource that publishes one is an
+ * external resource and reaches docker through here. Every method shells out to the binary named by
+ * `dockerBinary`; nothing is talked to over the docker socket directly.
+ *
+ * @internal
+ */
+export class DockerService {
+    /**
+     * @internal
+     */
+    constructor(dockerBinary) {
+        this.dockerBinary = dockerBinary;
+    }
+    /**
+     * Builds `imageReference` from the given build context, as a single manifest.
+     *
+     * Provenance and SBOM attestations are off because they turn the result into an image index, and
+     * pushing an index writes its tag twice - once for the manifest and once for the index. A
+     * repository with immutable tags rejects the second write, having already been given the first,
+     * which leaves the tag pointing at half a push. Both flags need a buildx-backed `docker build`.
+     *
+     * @param dockerfilePath Absolute path of the Dockerfile.
+     * @param contextDirectory Absolute path of the build context.
+     */
+    async build(imageReference, dockerfilePath, contextDirectory) {
+        await this.run([
+            'build',
+            '--provenance',
+            'false',
+            '--sbom',
+            'false',
+            '--file',
+            dockerfilePath,
+            '--tag',
+            imageReference,
+            contextDirectory,
+        ]);
+    }
+    /**
+     * Authenticates the docker CLI against a registry.
+     *
+     * The password is written to the child's stdin rather than passed as an argument, so it never
+     * appears in the process list or in terraform's echo of the `local-exec` command.
+     */
+    async login(registryUri, username, password) {
+        await this.run(['login', '--username', username, '--password-stdin', registryUri], password);
+    }
+    /**
+     * Pushes an already built image reference to its registry.
+     */
+    async push(imageReference) {
+        await this.run(['push', imageReference]);
+    }
+    /**
+     * @throws If docker is not on the PATH, or exits non-zero. The error carries docker's own stderr,
+     * which is the only thing that explains a failed build.
+     */
+    run(args, stdin) {
+        return new Promise((resolve, reject) => {
+            const child = spawn(this.dockerBinary, args, { stdio: ['pipe', 'pipe', 'pipe'] });
+            let stdout = '';
+            let stderr = '';
+            child.stdout.on('data', (chunk) => (stdout += chunk.toString()));
+            child.stderr.on('data', (chunk) => (stderr += chunk.toString()));
+            child.on('error', (error) => {
+                reject(new Error(`Could not run "${this.dockerBinary} ${args[0]}"! ${error.message}`));
+            });
+            child.on('close', (exitCode) => {
+                if (exitCode === 0) {
+                    resolve(stdout);
+                }
+                else {
+                    reject(new Error(`"${this.dockerBinary} ${args[0]}" exited with ${exitCode}!\n${stderr || stdout}`));
+                }
+            });
+            if (stdin !== undefined) {
+                child.stdin.write(stdin);
+            }
+            child.stdin.end();
+        });
+    }
+}
+/**
+ * @internal
+ */
+let DockerServiceFactory = class DockerServiceFactory {
+    /**
+     * @param dockerBinary The docker CLI to invoke. Defaults to `docker` on the PATH.
+     */
+    static async create(dockerBinary = 'docker') {
+        if (!this.instance) {
+            this.instance = new DockerService(dockerBinary);
+        }
+        return this.instance;
+    }
+};
+DockerServiceFactory = __decorate([
+    Factory(DockerService)
+], DockerServiceFactory);
+export { DockerServiceFactory };
+//# sourceMappingURL=docker.service.js.map

package/dist/services/docker/docker.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker.service.js","sourceRoot":"","sources":["../../../src/services/docker/docker.service.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAExC;;;;;;;;GAQG;AACH,MAAM,OAAO,aAAa;IACxB;;OAEG;IACH,YAA6B,YAAoB;QAApB,iBAAY,GAAZ,YAAY,CAAQ;IAAG,CAAC;IAErD;;;;;;;;;;OAUG;IACH,KAAK,CAAC,KAAK,CAAC,cAAsB,EAAE,cAAsB,EAAE,gBAAwB;QAClF,MAAM,IAAI,CAAC,GAAG,CAAC;YACb,OAAO;YACP,cAAc;YACd,OAAO;YACP,QAAQ;YACR,OAAO;YACP,QAAQ;YACR,cAAc;YACd,OAAO;YACP,cAAc;YACd,gBAAgB;SACjB,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,KAAK,CAAC,WAAmB,EAAE,QAAgB,EAAE,QAAgB;QACjE,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,kBAAkB,EAAE,WAAW,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC/F,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI,CAAC,cAAsB;QAC/B,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;IAC3C,CAAC;IAED;;;OAGG;IACK,GAAG,CAAC,IAAc,EAAE,KAAc;QACxC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;YAElF,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;YACjE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;YAEjE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC1B,MAAM,CAAC,IAAI,KAAK,CAAC,kBAAkB,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACzF,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE;gBAC7B,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;oBACnB,OAAO,CAAC,MAAM,CAAC,CAAC;gBAClB,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,iBAAiB,QAAQ,MAAM,MAAM,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC;gBACvG,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC3B,CAAC;YACD,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACpB,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED;;GAEG;AAEI,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IAG/B;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,eAAuB,QAAQ;QACjD,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,IAAI,CAAC,QAAQ,GAAG,IAAI,aAAa,CAAC,YAAY,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;CACF,CAAA;AAZY,oBAAoB;IADhC,OAAO,CAAgB,aAAa,CAAC;GACzB,oBAAoB,CAYhC"}

package/dist/utilities/cidr/cidr.utility.d.ts

@@ -2,6 +2,17 @@
  * @internal
  */
 export declare class CidrUtility {
-    static contains(cidrRange1: string[], cidrRange2: string[]): boolean;
-    static hasOverlap(cidrRange1: string[], cidrRange2: string[]): boolean;
+    /**
+     * @internal
+     */
+    static getCidrRange(startIp: string, endIp: string): string[];
+    /**
+     * @internal
+     */
+    static isPrivateIpV4CidrRange(cidrRange: string): boolean;
+    /**
+     * Validates that a string is a well-formed IpV4 CIDR block usable as an AWS VPC CIDR.
+     * AWS requires the network mask to be between /16 and /28 (inclusive).
+     */
+    static isValidVpcCidrBlock(cidrBlock: string): boolean;
 }

package/dist/utilities/cidr/cidr.utility.js

@@ -1,13 +1,66 @@
-import { contains, overlap } from 'fast-cidr-tools';
+import { bigint2ip, ip2bigint } from 'fast-cidr-tools';
 /**
  * @internal
  */
 export class CidrUtility {
-    static contains(cidrRange1, cidrRange2) {
-        return contains(cidrRange1, cidrRange2);
+    /**
+     * @internal
+     */
+    static getCidrRange(startIp, endIp) {
+        // IpV4 fits in 32 bits, well within Number's safe-integer range, so the bit-width math below
+        // can stay in `number` while delegating the IP<->int conversion to fast-cidr-tools.
+        let startIpAsNumber = Number(ip2bigint(startIp, 4));
+        const endIpAsNumber = Number(ip2bigint(endIp, 4));
+        const cidrBlocks = [];
+        while (startIpAsNumber <= endIpAsNumber) {
+            const maxBits = 32 - Math.floor(Math.log2(endIpAsNumber - startIpAsNumber + 1));
+            const cidrBlock = bigint2ip(BigInt(startIpAsNumber), 4) + '/' + maxBits;
+            cidrBlocks.push(cidrBlock);
+            startIpAsNumber += Math.pow(2, 32 - maxBits);
+        }
+        return cidrBlocks;
     }
-    static hasOverlap(cidrRange1, cidrRange2) {
-        return overlap(cidrRange1, cidrRange2);
+    /**
+     * @internal
+     */
+    static isPrivateIpV4CidrRange(cidrRange) {
+        const [firstIp, size = '32'] = cidrRange.split('/');
+        const firstIpOctets = firstIp.split('.');
+        if (firstIpOctets.length !== 4 || firstIpOctets.some((octet) => Number(octet) < 0 || Number(octet) > 255)) {
+            return false;
+        }
+        if (firstIpOctets[0] === '10') {
+            return Number(size) >= 8 && Number(size) <= 31;
+        }
+        else if (firstIpOctets[0] === '172' && Number(firstIpOctets[1]) >= 16 && Number(firstIpOctets[1]) <= 31) {
+            return Number(size) >= 12 && Number(size) <= 31;
+        }
+        else if (firstIpOctets[0] === '192' && firstIpOctets[1] === '168') {
+            return Number(size) >= 16 && Number(size) <= 31;
+        }
+        return false;
+    }
+    /**
+     * Validates that a string is a well-formed IpV4 CIDR block usable as an AWS VPC CIDR.
+     * AWS requires the network mask to be between /16 and /28 (inclusive).
+     */
+    static isValidVpcCidrBlock(cidrBlock) {
+        const parts = cidrBlock.split('/');
+        if (parts.length !== 2) {
+            return false;
+        }
+        const [ip, prefix] = parts;
+        // IpV4: exactly four octets, each 0-255.
+        const octets = ip.split('.');
+        if (octets.length !== 4 || octets.some((octet) => !/^\d{1,3}$/.test(octet) || Number(octet) > 255)) {
+            return false;
+        }
+        // AWS VPC CIDR prefix length must be between /16 and /28.
+        if (!/^\d{1,2}$/.test(prefix)) {
+            return false;
+        }
+        const prefixLength = Number(prefix);
+        return prefixLength >= 16 && prefixLength <= 28;
     }
 }
 //# sourceMappingURL=cidr.utility.js.map

package/dist/utilities/cidr/cidr.utility.js.map

@@ -1 +1 @@
-{"version":3,"file":"cidr.utility.js","sourceRoot":"","sources":["../../../src/utilities/cidr/cidr.utility.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAEpD;;GAEG;AACH,MAAM,OAAO,WAAW;IACtB,MAAM,CAAC,QAAQ,CAAC,UAAoB,EAAE,UAAoB;QACxD,OAAO,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,CAAC,UAAU,CAAC,UAAoB,EAAE,UAAoB;QAC1D,OAAO,OAAO,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IACzC,CAAC;CACF"}
+{"version":3,"file":"cidr.utility.js","sourceRoot":"","sources":["../../../src/utilities/cidr/cidr.utility.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEvD;;GAEG;AACH,MAAM,OAAO,WAAW;IACtB;;OAEG;IACH,MAAM,CAAC,YAAY,CAAC,OAAe,EAAE,KAAa;QAChD,6FAA6F;QAC7F,oFAAoF;QACpF,IAAI,eAAe,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QACpD,MAAM,aAAa,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;QAElD,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,OAAO,eAAe,IAAI,aAAa,EAAE,CAAC;YACxC,MAAM,OAAO,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,GAAG,eAAe,GAAG,CAAC,CAAC,CAAC,CAAC;YAChF,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,GAAG,GAAG,GAAG,OAAO,CAAC;YACxE,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAE3B,eAAe,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,GAAG,OAAO,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,sBAAsB,CAAC,SAAiB;QAC7C,MAAM,CAAC,OAAO,EAAE,IAAI,GAAG,IAAI,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAEpD,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC;YAC1G,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,aAAa,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC9B,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACjD,CAAC;aAAM,IAAI,aAAa,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAC1G,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAClD,CAAC;aAAM,IAAI,aAAa,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,aAAa,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;YACpE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAClD,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,mBAAmB,CAAC,SAAiB;QAC1C,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC;QAE3B,yCAAyC;QACzC,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC;YACnG,OAAO,KAAK,CAAC;QACf,CAAC;QAED,0DAA0D;QAC1D,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QACpC,OAAO,YAAY,IAAI,EAAE,IAAI,YAAY,IAAI,EAAE,CAAC;IAClD,CAAC;CACF"}

package/dist/utilities/common/common.utility.d.ts

@@ -2,6 +2,12 @@
  * @internal
  */
 export declare class CommonUtility {
+    /**
+     * @internal
+     */
     static hash(...args: string[]): string;
+    /**
+     * @internal
+     */
     static randomToken(size: number): string;
 }

package/dist/utilities/common/common.utility.js

@@ -3,6 +3,9 @@ import { createHash } from 'crypto';
  * @internal
  */
 export class CommonUtility {
+    /**
+     * @internal
+     */
     static hash(...args) {
         let hash = createHash('sha1');
         for (const arg of args) {
@@ -10,6 +13,9 @@ export class CommonUtility {
         }
         return hash.digest('hex');
     }
+    /**
+     * @internal
+     */
     static randomToken(size) {
         const possible = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789';
         let text = '';

package/dist/utilities/common/common.utility.js.map

@@ -1 +1 @@
-{"version":3,"file":"common.utility.js","sourceRoot":"","sources":["../../../src/utilities/common/common.utility.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEpC;;GAEG;AACH,MAAM,OAAO,aAAa;IACxB,MAAM,CAAC,IAAI,CAAC,GAAG,IAAc;QAC3B,IAAI,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QAC9B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IAED,MAAM,CAAC,WAAW,CAAC,IAAY;QAC7B,MAAM,QAAQ,GAAG,gEAAgE,CAAC;QAClF,IAAI,IAAI,GAAG,EAAE,CAAC;QAEd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;YAC9B,IAAI,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACvE,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}
+{"version":3,"file":"common.utility.js","sourceRoot":"","sources":["../../../src/utilities/common/common.utility.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEpC;;GAEG;AACH,MAAM,OAAO,aAAa;IACxB;;OAEG;IACH,MAAM,CAAC,IAAI,CAAC,GAAG,IAAc;QAC3B,IAAI,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QAC9B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,WAAW,CAAC,IAAY;QAC7B,MAAM,QAAQ,GAAG,gEAAgE,CAAC;QAClF,IAAI,IAAI,GAAG,EAAE,CAAC;QAEd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;YAC9B,IAAI,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACvE,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/utilities/ecr-image-uri/ecr-image-uri.utility.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Reads what a container image URI names.
+ *
+ * @internal
+ */
+export declare class EcrImageUriUtility {
+    /**
+     * Splits an ECR image URI into the repository and tag it addresses.
+     *
+     * @param uri The URI a container definition runs, which is as likely to name docker hub or any
+     * other registry as it is to name ECR.
+     * @returns The repository and tag, or `undefined` when the URI does not address ECR.
+     */
+    static parse(uri: string): {
+        awsAccountId: string;
+        awsRegionId: string;
+        imageId: string;
+        imageTag: string;
+    } | undefined;
+}

package/dist/utilities/ecr-image-uri/ecr-image-uri.utility.js

@@ -0,0 +1,33 @@
+/**
+ * The repository and tag an ECR image URI names.
+ *
+ * @internal
+ */
+const ECR_IMAGE_URI = /^(?<awsAccountId>\d+)\.dkr\.ecr\.(?<awsRegionId>[a-z0-9-]+)\.amazonaws\.com\/(?<imageId>[\w-./]+):(?<imageTag>[\w-.]+)$/;
+/**
+ * Reads what a container image URI names.
+ *
+ * @internal
+ */
+export class EcrImageUriUtility {
+    /**
+     * Splits an ECR image URI into the repository and tag it addresses.
+     *
+     * @param uri The URI a container definition runs, which is as likely to name docker hub or any
+     * other registry as it is to name ECR.
+     * @returns The repository and tag, or `undefined` when the URI does not address ECR.
+     */
+    static parse(uri) {
+        const groups = ECR_IMAGE_URI.exec(uri)?.groups;
+        if (!groups) {
+            return undefined;
+        }
+        return {
+            awsAccountId: groups.awsAccountId,
+            awsRegionId: groups.awsRegionId,
+            imageId: groups.imageId,
+            imageTag: groups.imageTag,
+        };
+    }
+}
+//# sourceMappingURL=ecr-image-uri.utility.js.map

package/dist/utilities/ecr-image-uri/ecr-image-uri.utility.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ecr-image-uri.utility.js","sourceRoot":"","sources":["../../../src/utilities/ecr-image-uri/ecr-image-uri.utility.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,aAAa,GACjB,yHAAyH,CAAC;AAE5H;;;;GAIG;AACH,MAAM,OAAO,kBAAkB;IAC7B;;;;;;OAMG;IACH,MAAM,CAAC,KAAK,CACV,GAAW;QAEX,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QAC/C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO;YACL,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC;IACJ,CAAC;CACF"}

package/dist/utilities/file/file.utility.d.ts

@@ -2,7 +2,16 @@
  * @internal
  */
 export declare class FileUtility {
+    /**
+     * @internal
+     */
     static base64Decode(base64EncodedString: string): string;
+    /**
+     * @internal
+     */
     static hash(filePath: string): Promise<string>;
+    /**
+     * @internal
+     */
     static readDirectoryRecursively(dirPath: string, base?: string): Promise<string[]>;
 }

package/dist/utilities/file/file.utility.js

@@ -6,9 +6,15 @@ import { join, parse, resolve } from 'path';
  * @internal
  */
 export class FileUtility {
+    /**
+     * @internal
+     */
     static base64Decode(base64EncodedString) {
         return Buffer.from(base64EncodedString, 'base64').toString('ascii');
     }
+    /**
+     * @internal
+     */
     static async hash(filePath) {
         return new Promise((resolve, reject) => {
             const hash = createHash('sha1');
@@ -18,6 +24,9 @@ export class FileUtility {
             stream.on('end', () => resolve(hash.digest('hex')));
         });
     }
+    /**
+     * @internal
+     */
     static async readDirectoryRecursively(dirPath, base = '') {
         dirPath = resolve(dirPath);
         const stats = await lstat(dirPath);

package/dist/utilities/file/file.utility.js.map

@@ -1 +1 @@
-{"version":3,"file":"file.utility.js","sourceRoot":"","sources":["../../../src/utilities/file/file.utility.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,gBAAgB,EAAE,MAAM,IAAI,CAAC;AACtC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAE5C;;GAEG;AACH,MAAM,OAAO,WAAW;IACtB,MAAM,CAAC,YAAY,CAAC,mBAA2B;QAC7C,OAAO,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAgB;QAChC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;YAChC,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC1C,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC7C,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACjD,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,OAAe,EAAE,IAAI,GAAG,EAAE;QAC9D,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAE3B,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACnB,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3C,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7B,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE;YAC1B,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC5C,OAAO,QAAQ,CAAC,WAAW,EAAE;gBAC3B,CAAC,CAAC,WAAW,CAAC,wBAAwB,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC;gBAC1D,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC,CAAC,CACH,CAAC;QACF,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;IACtB,CAAC;CACF"}
+{"version":3,"file":"file.utility.js","sourceRoot":"","sources":["../../../src/utilities/file/file.utility.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,gBAAgB,EAAE,MAAM,IAAI,CAAC;AACtC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAE5C;;GAEG;AACH,MAAM,OAAO,WAAW;IACtB;;OAEG;IACH,MAAM,CAAC,YAAY,CAAC,mBAA2B;QAC7C,OAAO,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACtE,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAgB;QAChC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;YAChC,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC1C,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC7C,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACjD,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,OAAe,EAAE,IAAI,GAAG,EAAE;QAC9D,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAE3B,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACnB,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3C,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7B,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE;YAC1B,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC5C,OAAO,QAAQ,CAAC,WAAW,EAAE;gBAC3B,CAAC,CAAC,WAAW,CAAC,wBAAwB,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC;gBAC1D,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC,CAAC,CACH,CAAC;QACF,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;IACtB,CAAC;CACF"}

package/dist/utilities/hcl/hcl.utility.d.ts

@@ -0,0 +1,34 @@
+type HclBlock = {
+    [key: string]: string | HclBlock | HclBlock[];
+};
+export type HclShape = Record<string, HclBlock>;
+/**
+ * @internal
+ */
+export declare class HclUtility {
+    /**
+     * @internal
+     */
+    static parse(rendered: string): HclShape;
+    /**
+     * @internal
+     */
+    private static addressToKeyword;
+    /**
+     * @internal
+     */
+    private static extractAddresses;
+    /**
+     * @internal
+     */
+    private static extractBlock;
+    /**
+     * @internal
+     */
+    private static normalizeValue;
+    /**
+     * @internal
+     */
+    private static parseBlockLines;
+}
+export {};

package/dist/utilities/hcl/hcl.utility.js

@@ -0,0 +1,163 @@
+/**
+ * @internal
+ */
+export class HclUtility {
+    /**
+     * @internal
+     */
+    static parse(rendered) {
+        const shape = {};
+        for (const address of HclUtility.extractAddresses(rendered)) {
+            const block = HclUtility.extractBlock(HclUtility.addressToKeyword(address), rendered);
+            const lines = block.split('\n');
+            shape[address] = HclUtility.parseBlockLines(lines.slice(1, -1));
+        }
+        return shape;
+    }
+    /**
+     * @internal
+     */
+    static addressToKeyword(address) {
+        const [type, ...rest] = address.split('.');
+        if (type === 'resource') {
+            return `resource "${rest[0]}" "${rest[1]}"`;
+        }
+        if (type === 'output') {
+            return `output "${rest[0]}"`;
+        }
+        if (type === 'data') {
+            return `data "${rest[0]}" "${rest[1]}"`;
+        }
+        if (type === 'variable') {
+            return `variable "${rest[0]}"`;
+        }
+        throw new Error(`Unsupported block type in address: "${address}".`);
+    }
+    /**
+     * @internal
+     */
+    static extractAddresses(rendered) {
+        const addresses = [];
+        for (const [, type, name] of rendered.matchAll(/^resource "([^"]+)" "([^"]+)" \{/gm)) {
+            addresses.push(`resource.${type}.${name}`);
+        }
+        for (const [, name] of rendered.matchAll(/^output "([^"]+)" \{/gm)) {
+            addresses.push(`output.${name}`);
+        }
+        for (const [, type, name] of rendered.matchAll(/^data "([^"]+)" "([^"]+)" \{/gm)) {
+            addresses.push(`data.${type}.${name}`);
+        }
+        for (const [, name] of rendered.matchAll(/^variable "([^"]+)" \{/gm)) {
+            addresses.push(`variable.${name}`);
+        }
+        return addresses;
+    }
+    /**
+     * @internal
+     */
+    static extractBlock(startKeyword, rendered) {
+        const escaped = startKeyword.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+        const pattern = new RegExp(`^${escaped} \\{`, 'm');
+        const match = pattern.exec(rendered);
+        if (!match) {
+            throw new Error(`Block "${startKeyword}" not found in rendered HCL.`);
+        }
+        let depth = 0;
+        for (let i = match.index; i < rendered.length; i++) {
+            if (rendered[i] === '{')
+                depth++;
+            else if (rendered[i] === '}') {
+                depth--;
+                if (depth === 0)
+                    return rendered.slice(match.index, i + 1);
+            }
+        }
+        throw new Error(`Un-closed block "${startKeyword}" in rendered HCL.`);
+    }
+    /**
+     * @internal
+     */
+    static normalizeValue(hclValue) {
+        if (hclValue.startsWith('"') && hclValue.endsWith('"')) {
+            return hclValue.slice(1, -1);
+        }
+        return hclValue;
+    }
+    /**
+     * @internal
+     */
+    static parseBlockLines(lines) {
+        const result = {};
+        let i = 0;
+        while (i < lines.length) {
+            const line = lines[i];
+            const assignedBlockMatch = line.match(/^\s+(\w+)\s*=\s*\{/);
+            if (assignedBlockMatch) {
+                const blockKey = assignedBlockMatch[1];
+                let depth = 0;
+                let end = lines.length - 1;
+                for (let j = i; j < lines.length; j++) {
+                    depth += (lines[j].match(/\{/g) ?? []).length;
+                    depth -= (lines[j].match(/}/g) ?? []).length;
+                    if (depth === 0) {
+                        end = j;
+                        break;
+                    }
+                }
+                const nested = HclUtility.parseBlockLines(lines.slice(i + 1, end));
+                const existing = result[blockKey];
+                if (existing !== undefined) {
+                    if (Array.isArray(existing)) {
+                        existing.push(nested);
+                    }
+                    else {
+                        result[blockKey] = [existing, nested];
+                    }
+                }
+                else {
+                    result[blockKey] = nested;
+                }
+                i = end + 1;
+                continue;
+            }
+            const kvMatch = line.match(/^\s+(\w+)\s*=\s*(.+)$/);
+            if (kvMatch) {
+                result[kvMatch[1]] = HclUtility.normalizeValue(kvMatch[2].trim());
+                i++;
+                continue;
+            }
+            const blockMatch = line.match(/^\s+(\w+)(?:\s+"[^"]*")?\s*\{/);
+            if (blockMatch) {
+                const blockKey = blockMatch[1];
+                let depth = 0;
+                let end = lines.length - 1;
+                for (let j = i; j < lines.length; j++) {
+                    depth += (lines[j].match(/\{/g) ?? []).length;
+                    depth -= (lines[j].match(/}/g) ?? []).length;
+                    if (depth === 0) {
+                        end = j;
+                        break;
+                    }
+                }
+                const nested = HclUtility.parseBlockLines(lines.slice(i + 1, end));
+                const existing = result[blockKey];
+                if (existing !== undefined) {
+                    if (Array.isArray(existing)) {
+                        existing.push(nested);
+                    }
+                    else {
+                        result[blockKey] = [existing, nested];
+                    }
+                }
+                else {
+                    result[blockKey] = nested;
+                }
+                i = end + 1;
+                continue;
+            }
+            i++;
+        }
+        return result;
+    }
+}
+//# sourceMappingURL=hcl.utility.js.map

package/dist/utilities/hcl/hcl.utility.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hcl.utility.js","sourceRoot":"","sources":["../../../src/utilities/hcl/hcl.utility.ts"],"names":[],"mappings":"AAIA;;GAEG;AACH,MAAM,OAAO,UAAU;IACrB;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,QAAgB;QAC3B,MAAM,KAAK,GAAa,EAAE,CAAC;QAE3B,KAAK,MAAM,OAAO,IAAI,UAAU,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5D,MAAM,KAAK,GAAG,UAAU,CAAC,YAAY,CAAC,UAAU,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;YACtF,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAChC,KAAK,CAAC,OAAO,CAAC,GAAG,UAAU,CAAC,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAClE,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,gBAAgB,CAAC,OAAe;QAC7C,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAE3C,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;YACxB,OAAO,aAAa,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;QAC9C,CAAC;QACD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,OAAO,WAAW,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;QAC/B,CAAC;QACD,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,OAAO,SAAS,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;QAC1C,CAAC;QACD,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;YACxB,OAAO,aAAa,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;QACjC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,uCAAuC,OAAO,IAAI,CAAC,CAAC;IACtE,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,gBAAgB,CAAC,QAAgB;QAC9C,MAAM,SAAS,GAAa,EAAE,CAAC;QAE/B,KAAK,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,oCAAoC,CAAC,EAAE,CAAC;YACrF,SAAS,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;QAC7C,CAAC;QACD,KAAK,MAAM,CAAC,EAAE,IAAI,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,CAAC;YACnE,SAAS,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;QACnC,CAAC;QACD,KAAK,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,gCAAgC,CAAC,EAAE,CAAC;YACjF,SAAS,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;QACzC,CAAC;QACD,KAAK,MAAM,CAAC,EAAE,IAAI,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,0BAA0B,CAAC,EAAE,CAAC;YACrE,SAAS,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;QACrC,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,YAAY,CAAC,YAAoB,EAAE,QAAgB;QAChE,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,IAAI,OAAO,MAAM,EAAE,GAAG,CAAC,CAAC;QACnD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,UAAU,YAAY,8BAA8B,CAAC,CAAC;QACxE,CAAC;QAED,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACnD,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,GAAG;gBAAE,KAAK,EAAE,CAAC;iBAC5B,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBAC7B,KAAK,EAAE,CAAC;gBACR,IAAI,KAAK,KAAK,CAAC;oBAAE,OAAO,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,oBAAoB,YAAY,oBAAoB,CAAC,CAAC;IACxE,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,cAAc,CAAC,QAAgB;QAC5C,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACvD,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/B,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,eAAe,CAAC,KAAe;QAC5C,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,CAAC,GAAG,CAAC,CAAC;QAEV,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAEtB,MAAM,kBAAkB,GAAG,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;YAC5D,IAAI,kBAAkB,EAAE,CAAC;gBACvB,MAAM,QAAQ,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC;gBACvC,IAAI,KAAK,GAAG,CAAC,CAAC;gBACd,IAAI,GAAG,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;gBAE3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBACtC,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;oBAC9C,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;oBAC7C,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;wBAChB,GAAG,GAAG,CAAC,CAAC;wBACR,MAAM;oBACR,CAAC;gBACH,CAAC;gBAED,MAAM,MAAM,GAAG,UAAU,CAAC,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;gBACnE,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAClC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;oBAC3B,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;wBAC5B,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBACxB,CAAC;yBAAM,CAAC;wBACN,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAoB,EAAE,MAAM,CAAC,CAAC;oBACpD,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC;gBAC5B,CAAC;gBAED,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;gBACZ,SAAS;YACX,CAAC;YAED,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;YACpD,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBAClE,CAAC,EAAE,CAAC;gBACJ,SAAS;YACX,CAAC;YAED,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;YAC/D,IAAI,UAAU,EAAE,CAAC;gBACf,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;gBAC/B,IAAI,KAAK,GAAG,CAAC,CAAC;gBACd,IAAI,GAAG,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;gBAE3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBACtC,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;oBAC9C,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;oBAC7C,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;wBAChB,GAAG,GAAG,CAAC,CAAC;wBACR,MAAM;oBACR,CAAC;gBACH,CAAC;gBAED,MAAM,MAAM,GAAG,UAAU,CAAC,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;gBACnE,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAClC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;oBAC3B,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;wBAC5B,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBACxB,CAAC;yBAAM,CAAC;wBACN,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAoB,EAAE,MAAM,CAAC,CAAC;oBACpD,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC;gBAC5B,CAAC;gBAED,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;gBACZ,SAAS;YACX,CAAC;YAED,CAAC,EAAE,CAAC;QACN,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}