@webda/azure 0.0.0-stage → 4.0.0-beta.13

package/lib/index.js

@@ -0,0 +1,18 @@
+import { registerWebdaPackage } from "@webda/utils";
+export * from "./services/azure-parameters.js";
+export * from "./services/contributors.js";
+export * from "./services/keyvault.service.js";
+export * from "./services/monitorlogger.service.js";
+export * from "./services/servicebus.service.js";
+export * from "./services/blob.service.js";
+export * from "./services/cosmos.service.js";
+export * from "./services/functionserver.service.js";
+export * from "./auth.js";
+export * from "./template.js";
+export * from "./deployers/arm.service.js";
+export * from "./deployers/containerapps.service.js";
+export * from "./deployers/functionspackager.service.js";
+export * from "./deployers/functions.service.js";
+// Refuse a second copy of the package, see registerWebdaPackage
+registerWebdaPackage("@webda/azure", import.meta.url);
+//# sourceMappingURL=index.js.map

package/lib/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,qCAAqC,CAAC;AACpD,cAAc,kCAAkC,CAAC;AACjD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,sCAAsC,CAAC;AACrD,cAAc,WAAW,CAAC;AAC1B,cAAc,eAAe,CAAC;AAC9B,cAAc,4BAA4B,CAAC;AAC3C,cAAc,sCAAsC,CAAC;AACrD,cAAc,0CAA0C,CAAC;AACzD,cAAc,kCAAkC,CAAC;AAEjD,gEAAgE;AAChE,oBAAoB,CAAC,cAAc,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC"}

package/lib/services/azure-parameters.d.ts

@@ -0,0 +1,41 @@
+import type { TokenCredential } from "@azure/core-auth";
+import { SecretString, ServiceParameters } from "@webda/core";
+/** Authentication and endpoint parameters shared by Azure services and deployers. */
+export interface AzureServiceParameters {
+    /** Microsoft Entra tenant; defaults to AZURE_TENANT_ID. */
+    tenantId?: string;
+    /** Service principal or user-assigned managed identity client id; defaults to AZURE_CLIENT_ID. */
+    clientId?: string;
+    /** Service principal secret; defaults to AZURE_CLIENT_SECRET. Prefer managed/workload identity. */
+    clientSecret?: string | SecretString;
+    /** Subscription containing the resources; defaults to AZURE_SUBSCRIPTION_ID. */
+    subscriptionId?: string;
+    /** Service-specific endpoint override, for example Azurite. This is not an identity authority URL. */
+    endpoint?: string;
+}
+/** Common parameters for services using Microsoft Entra authentication. */
+export declare class AzureParameters extends ServiceParameters implements AzureServiceParameters {
+    tenantId?: string;
+    clientId?: string;
+    clientSecret?: string | SecretString;
+    subscriptionId?: string;
+    endpoint?: string;
+    /**
+     * Apply the standard Azure environment defaults.
+     * @override
+     */
+    load(params?: Partial<AzureParameters>): this;
+}
+/**
+ * Fill absent Azure parameters from the standard Azure environment variables. Explicit values always win. Service parameter classes can call this from load(); it preserves SecretString instances.
+ * @param params - Raw configuration parameters
+ * @returns The load azure parameters result
+ */
+export declare function loadAzureParameters<T extends AzureServiceParameters>(params: T): T;
+/**
+ * Select a service principal when all three credential fields are nonempty, otherwise use Azure's default chain. Constructing the credential performs no network I/O. Secrets are unwrapped only for the SDK constructor and clear-text values produce SecretString's value-free warning. The input and process environment are unchanged.
+ * @param params - Raw configuration parameters
+ * @returns The azure credential result
+ */
+export declare function getAzureCredential(params?: AzureServiceParameters): TokenCredential;
+//# sourceMappingURL=azure-parameters.d.ts.map

package/lib/services/azure-parameters.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"azure-parameters.d.ts","sources":["../../src/services/azure-parameters.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAE9D,qFAAqF;AACrF,MAAM,WAAW,sBAAsB;IACrC,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kGAAkG;IAClG,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mGAAmG;IACnG,YAAY,CAAC,EAAE,MAAM,GAAG,YAAY,CAAC;IACrC,gFAAgF;IAChF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,sGAAsG;IACtG,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,2EAA2E;AAC3E,qBAAa,eAAgB,SAAQ,iBAAkB,YAAW,sBAAsB;IACtF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,GAAG,YAAY,CAAC;IACrC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;;OAGG;IACH,IAAI,CAAC,MAAM,GAAE,OAAO,CAAC,eAAe,CAAM,GAAG,IAAI,CAGhD;CACF;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,SAAS,sBAAsB,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,CAMlF;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,GAAE,sBAA2B,GAAG,eAAe,CAYvF"}

package/lib/services/azure-parameters.js

@@ -0,0 +1,43 @@
+import { ClientSecretCredential, DefaultAzureCredential } from "@azure/identity";
+import { SecretString, ServiceParameters } from "@webda/core";
+/** Common parameters for services using Microsoft Entra authentication. */
+export class AzureParameters extends ServiceParameters {
+    /**
+     * Apply the standard Azure environment defaults.
+     * @override
+     */
+    load(params = {}) {
+        super.load(params);
+        return loadAzureParameters(this);
+    }
+}
+/**
+ * Fill absent Azure parameters from the standard Azure environment variables. Explicit values always win. Service parameter classes can call this from load(); it preserves SecretString instances.
+ * @param params - Raw configuration parameters
+ * @returns The load azure parameters result
+ */
+export function loadAzureParameters(params) {
+    params.tenantId ?? (params.tenantId = process.env.AZURE_TENANT_ID || undefined);
+    params.clientId ?? (params.clientId = process.env.AZURE_CLIENT_ID || undefined);
+    params.clientSecret ?? (params.clientSecret = process.env.AZURE_CLIENT_SECRET || undefined);
+    params.subscriptionId ?? (params.subscriptionId = process.env.AZURE_SUBSCRIPTION_ID || undefined);
+    return params;
+}
+/**
+ * Select a service principal when all three credential fields are nonempty, otherwise use Azure's default chain. Constructing the credential performs no network I/O. Secrets are unwrapped only for the SDK constructor and clear-text values produce SecretString's value-free warning. The input and process environment are unchanged.
+ * @param params - Raw configuration parameters
+ * @returns The azure credential result
+ */
+export function getAzureCredential(params = {}) {
+    const resolved = loadAzureParameters({ ...params });
+    const secret = resolved.clientSecret === undefined ? undefined : SecretString.from(resolved.clientSecret, "clientSecret");
+    if (resolved.tenantId && resolved.clientId && secret) {
+        return new ClientSecretCredential(resolved.tenantId, resolved.clientId, secret);
+    }
+    return new DefaultAzureCredential({
+        tenantId: resolved.tenantId || undefined,
+        managedIdentityClientId: resolved.clientId || undefined,
+        workloadIdentityClientId: resolved.clientId || undefined
+    });
+}
+//# sourceMappingURL=azure-parameters.js.map

package/lib/services/azure-parameters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"azure-parameters.js","sources":["../../src/services/azure-parameters.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAEjF,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAgB9D,2EAA2E;AAC3E,MAAM,OAAO,eAAgB,SAAQ,iBAAiB;IAOpD;;;OAGG;IACH,IAAI,CAAC,MAAM,GAA6B,EAAE;QACxC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnB,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAmC,MAAS;IAC7E,MAAM,CAAC,QAAQ,KAAf,MAAM,CAAC,QAAQ,GAAK,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,SAAS,EAAC;IAC7D,MAAM,CAAC,QAAQ,KAAf,MAAM,CAAC,QAAQ,GAAK,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,SAAS,EAAC;IAC7D,MAAM,CAAC,YAAY,KAAnB,MAAM,CAAC,YAAY,GAAK,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,SAAS,EAAC;IACrE,MAAM,CAAC,cAAc,KAArB,MAAM,CAAC,cAAc,GAAK,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,SAAS,EAAC;IACzE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAM,GAA2B,EAAE;IACpE,MAAM,QAAQ,GAAG,mBAAmB,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;IACpD,MAAM,MAAM,GACV,QAAQ,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAC7G,IAAI,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,IAAI,MAAM,EAAE,CAAC;QACrD,OAAO,IAAI,sBAAsB,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,IAAI,sBAAsB,CAAC;QAChC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,SAAS;QACxC,uBAAuB,EAAE,QAAQ,CAAC,QAAQ,IAAI,SAAS;QACvD,wBAAwB,EAAE,QAAQ,CAAC,QAAQ,IAAI,SAAS;KACzD,CAAC,CAAC;AACL,CAAC"}

package/lib/services/blob.service.d.ts

@@ -0,0 +1,157 @@
+import { BlobServiceClient } from "@azure/storage-blob";
+import { BinaryFile, BinaryFileInfo, BinaryMap, CloudBinary, CloudBinaryParameters, CoreModelWithBinary, OperationContext, SecretString } from "@webda/core";
+import { ContentBody, ContentGetOptions, ContentInfo, ContentPutOptions } from "@webda/utils";
+import { Readable } from "node:stream";
+import { AzureServiceParameters } from "./azure-parameters.js";
+import { AzureContributor, AzureDeployerInfo, AzureResourceContribution } from "./contributors.js";
+/** Blob storage settings. Shared keys are optional; managed identity is preferred. */
+export declare class AzureBlobBinaryParameters extends CloudBinaryParameters implements AzureServiceParameters {
+    account?: string;
+    connectionString?: string | SecretString;
+    container: string;
+    endpoint?: string;
+    tenantId?: string;
+    clientId?: string;
+    clientSecret?: string | SecretString;
+    subscriptionId?: string;
+    createContainer: boolean;
+    /** Override the Blob API/SAS version for older Azurite installations. */
+    serviceVersion?: string;
+    pendingTimeout: number;
+    /**
+     * Perform load.
+     * @override
+     */
+    load(params?: any): this;
+}
+/** Blob-backed binaries with verified direct uploads and exact ownership markers.
+ * @WebdaModda
+ */
+export declare class AzureBlobBinary extends CloudBinary<AzureBlobBinaryParameters> implements AzureContributor {
+    static Parameters: typeof AzureBlobBinaryParameters;
+    readonly schemes: string[];
+    protected client: BlobServiceClient;
+    /**
+     * Perform init.
+     * @override
+     */
+    init(): Promise<this>;
+    /**
+     * Perform get content bucket.
+     * @override
+     */
+    getContentBucket(): string;
+    /**
+     * Resolve a content URL to a configured Blob SDK client.
+     * @param url - Content URL
+     * @returns The blob result
+     */
+    protected blob(url: string): import("@azure/storage-blob").BlockBlobClient;
+    /**
+     * Perform get content.
+     * @override
+     */
+    getContent(url: string, options?: ContentGetOptions): Promise<Readable>;
+    /**
+     * Perform put content.
+     * @override
+     */
+    putContent(url: string, body: ContentBody, options?: ContentPutOptions): Promise<ContentInfo>;
+    /**
+     * Perform head content.
+     * @override
+     */
+    headContent(url: string): Promise<ContentInfo | undefined>;
+    /**
+     * Perform delete content.
+     * @override
+     */
+    deleteContent(url: string): Promise<void>;
+    /**
+     * Perform _get.
+     * @override
+     */
+    _get(info: BinaryMap): Promise<Readable>;
+    /**
+     * Perform get signed url from map.
+     * @override
+     */
+    getSignedUrlFromMap(map: BinaryMap, expires: number, _context: OperationContext): Promise<string>;
+    /**
+     * Issue narrowly scoped SAS credentials. Direct uploads only create isolated staging blobs.
+     * @param key - Object key within the container
+     * @param permissions - Permissions granted by the SAS
+     * @param expires - SAS lifetime in seconds
+     * @returns The signed url result
+     */
+    getSignedUrl(key: string, permissions?: "r" | "c", expires?: number): Promise<string>;
+    /**
+     * Validate a hash before using it in a storage key.
+     * @param hash - Normalized content hash
+     * @returns The check hash result
+     */
+    protected checkHash(hash?: string): asserts hash is string;
+    /**
+     * Build an injective ownership marker from the model, attribute and key.
+     * @param model - Model class or model identifier
+     * @param property - Binary or model attribute
+     * @param uuid - Owner primary key
+     * @returns The marker result
+     */
+    protected marker(model: string, property: string, uuid: string): string;
+    /**
+     * Build the private pending-upload record key.
+     * @param object - Model owning the binary
+     * @param property - Binary or model attribute
+     * @param hash - Normalized content hash
+     * @returns The pending key result
+     */
+    protected pendingKey(object: CoreModelWithBinary, property: string, hash: string): string;
+    /**
+     * Persist an exact ownership marker and attach the verified file.
+     * @param object - Model owning the binary
+     * @param property - Binary or model attribute
+     * @param info - Binary metadata or increment specification
+     */
+    protected attach(object: CoreModelWithBinary, property: string, info: BinaryFileInfo): Promise<void>;
+    /**
+     * Perform store.
+     * @override
+     */
+    store(object: CoreModelWithBinary, property: string, file: BinaryFile): Promise<void>;
+    /**
+     * Perform put redirect url.
+     * @override
+     */
+    putRedirectUrl(object: CoreModelWithBinary, property: string, info?: BinaryFileInfo, context?: OperationContext<BinaryFileInfo>): Promise<{
+        url: string;
+        method: string;
+        headers: {
+            "x-ms-blob-type": string;
+            "Content-Type": string;
+            "Content-MD5": string;
+        };
+    } | undefined>;
+    /**
+     * Verify the bytes before copying them to the content hash and attaching them to the owner.
+     * @override
+     */
+    completeUpload(object: CoreModelWithBinary, property: string, hash: string): Promise<void>;
+    /**
+     * Perform get usage count.
+     * @override
+     */
+    getUsageCount(hash: string): Promise<number>;
+    /**
+     * Perform _clean usage.
+     * @override
+     */
+    _cleanUsage(hash: string, uuid: string, attribute: string, model: string): Promise<void>;
+    /**
+     * Describe the Azure resources and identity permissions required by this service.
+     * @param deployer - Deployment scope and identity helpers
+     * @returns The azure resources result
+     */
+    getAzureResources(deployer: AzureDeployerInfo): AzureResourceContribution;
+}
+//# sourceMappingURL=blob.service.d.ts.map

package/lib/services/blob.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"blob.service.d.ts","sources":["../../src/services/blob.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,iBAAiB,EAIlB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,UAAU,EACV,cAAc,EACd,SAAS,EACT,WAAW,EACX,qBAAqB,EACrB,mBAAmB,EACnB,gBAAgB,EAChB,YAAY,EAKb,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,WAAW,EAEX,iBAAiB,EACjB,WAAW,EAEX,iBAAiB,EAGlB,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,OAAO,EAAE,sBAAsB,EAA2C,MAAM,uBAAuB,CAAC;AACxG,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAEnG,sFAAsF;AACtF,qBAAa,yBAA0B,SAAQ,qBAAsB,YAAW,sBAAsB;IACpG,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gBAAgB,CAAC,EAAE,MAAM,GAAG,YAAY,CAAC;IACzC,SAAS,EAAG,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,GAAG,YAAY,CAAC;IACrC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,UAAS;IACxB,yEAAyE;IACzE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,SAAQ;IAEtB;;;OAGG;IACH,IAAI,CAAC,MAAM,GAAE,GAAQ,GAAG,IAAI,CAG3B;CACF;AAQD;;GAEG;AACH,qBAAa,eAAgB,SAAQ,WAAW,CAAC,yBAAyB,CAAE,YAAW,gBAAgB;IACrG,MAAM,CAAC,UAAU,mCAA6B;IAC9C,QAAQ,CAAC,OAAO,WAAuB;IACvC,SAAS,CAAC,MAAM,EAAG,iBAAiB,CAAC;IAErC;;;OAGG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CA+B1B;IAED;;;OAGG;IACH,gBAAgB,IAAI,MAAM,CAEzB;IAED;;;;OAIG;IACH,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,iDAMzB;IAED;;;OAGG;IACG,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAY5E;IAED;;;OAGG;IACG,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,WAAW,CAAC,CAoBlG;IAED;;;OAGG;IACG,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,CAe/D;IAED;;;OAGG;IACG,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE9C;IAED;;;OAGG;IACG,IAAI,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,CAG7C;IAED;;;OAGG;IACG,mBAAmB,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAGtG;IAED;;;;;;OAMG;IACG,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,GAAE,GAAG,GAAG,GAAS,EAAE,OAAO,SAA4B,GAAG,OAAO,CAAC,MAAM,CAAC,CAuBlH;IAED;;;;OAIG;IACH,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,IAAI,MAAM,CAEzD;IAED;;;;;;OAMG;IACH,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAgBtE;IAED;;;;;;OAMG;IACH,SAAS,CAAC,UAAU,CAAC,MAAM,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAOxF;IAED;;;;;OAKG;IACH,UAAgB,MAAM,CAAC,MAAM,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAQzG;IAED;;;OAGG;IACG,KAAK,CAAC,MAAM,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAkB1F;IAED;;;OAGG;IACG,cAAc,CAClB,MAAM,EAAE,mBAAmB,EAC3B,QAAQ,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE,cAAc,EACrB,OAAO,CAAC,EAAE,gBAAgB,CAAC,cAAc,CAAC;;;;YAuBtC,gBAAgB;YAChB,cAAc;YACd,aAAa;;mBAGlB;IAED;;;OAGG;IACG,cAAc,CAAC,MAAM,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAqD/F;IAED;;;OAGG;IACG,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAQjD;IAED;;;OAGG;IACG,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAI7F;IAED;;;;OAIG;IACH,iBAAiB,CAAC,QAAQ,EAAE,iBAAiB,GAAG,yBAAyB,CAyBxE;CACF"}