@webda/azure 0.0.0-stage → 4.0.0-beta.14

package/lib/services/blob.service.js

@@ -0,0 +1,450 @@
+import { BlobSASPermissions, BlobServiceClient, generateBlobSASQueryParameters, newPipeline, StorageSharedKeyCredential } from "@azure/storage-blob";
+import { CloudBinary, CloudBinaryParameters, SecretString, useModelId, WebdaError, normalizeHashes, normalizeHash } from "@webda/core";
+import { ContentExistsError, ContentNotFoundError, parseContentUrl, toReadable } from "@webda/utils";
+import { createHash, randomUUID } from "node:crypto";
+import { posix } from "node:path";
+import { getAzureCredential, loadAzureParameters } from "./azure-parameters.js";
+/** Blob storage settings. Shared keys are optional; managed identity is preferred. */
+export class AzureBlobBinaryParameters extends CloudBinaryParameters {
+    constructor() {
+        super(...arguments);
+        /**
+         * Create container
+         */
+        this.createContainer = false;
+        /**
+         * Pending timeout
+         */
+        this.pendingTimeout = 3600;
+    }
+    /**
+     * Perform load.
+     * @override
+     */
+    load(params = {}) {
+        super.load(params);
+        return loadAzureParameters(this);
+    }
+}
+/** Blob-backed binaries with verified direct uploads and exact ownership markers.
+ * @WebdaModda
+ */
+export class AzureBlobBinary extends CloudBinary {
+    constructor() {
+        super(...arguments);
+        /**
+         * Schemes
+         */
+        this.schemes = ["azure", "azblob"];
+    }
+    /**
+     * Perform init.
+     * @override
+     */
+    async init() {
+        const p = this.parameters;
+        if (p.connectionString !== undefined) {
+            this.client = BlobServiceClient.fromConnectionString(SecretString.from(p.connectionString, "connectionString"));
+            if (p.endpoint)
+                this.client = new BlobServiceClient(p.endpoint, this.client.credential);
+        }
+        else {
+            if (!p.account)
+                throw new WebdaError.BadRequest("Azure Blob storage requires account or connectionString");
+            this.client = new BlobServiceClient(p.endpoint ?? `https://${p.account}.blob.core.windows.net`, getAzureCredential(p));
+        }
+        if (p.serviceVersion) {
+            if (!/^\d{4}-\d{2}-\d{2}$/.test(p.serviceVersion))
+                throw new WebdaError.BadRequest("Invalid Azure Blob serviceVersion");
+            const pipeline = newPipeline(this.client.credential);
+            pipeline.factories.push({
+                /**
+                 * Create operation
+                 * @param next - the next
+                 * @returns the result
+                 */
+                create(next) {
+                    return {
+                        /**
+                         * Send request
+                         * @param request - the request
+                         * @returns the result
+                         */
+                        sendRequest(request) {
+                            request.headers.set("x-ms-version", p.serviceVersion);
+                            return next.sendRequest(request);
+                        }
+                    };
+                }
+            });
+            this.client = new BlobServiceClient(this.client.url, pipeline);
+        }
+        if (p.createContainer)
+            await this.client.getContainerClient(p.container).createIfNotExists();
+        await super.init();
+        return this;
+    }
+    /**
+     * Perform get content bucket.
+     * @override
+     */
+    getContentBucket() {
+        return this.parameters.container;
+    }
+    /**
+     * Resolve a content URL to a configured Blob SDK client.
+     * @param url - Content URL
+     * @returns The blob result
+     */
+    blob(url) {
+        const target = parseContentUrl(url, this.parameters.container);
+        // A content URL cannot redirect this client's credentials to another endpoint.
+        if (target.endpoint || target.credential)
+            throw new WebdaError.BadRequest("Use configured Azure Blob endpoint and credentials");
+        return this.client.getContainerClient(target.bucket ?? this.parameters.container).getBlockBlobClient(target.key);
+    }
+    /**
+     * Perform get content.
+     * @override
+     */
+    async getContent(url, options) {
+        try {
+            const range = options?.range;
+            const response = await this.blob(url).download(range?.start, range?.end === undefined ? undefined : range.end - (range?.start ?? 0) + 1);
+            return response.readableStreamBody;
+        }
+        catch (error) {
+            if (error.statusCode === 404)
+                throw new ContentNotFoundError(url);
+            throw error;
+        }
+    }
+    /**
+     * Perform put content.
+     * @override
+     */
+    async putContent(url, body, options) {
+        try {
+            const result = await this.blob(url).uploadStream(toReadable(body), undefined, undefined, {
+                blobHTTPHeaders: { blobContentType: options?.contentType ?? "application/octet-stream" },
+                metadata: options?.metadata,
+                conditions: options?.ifNotExists ? { ifNoneMatch: "*" } : undefined
+            });
+            return {
+                url,
+                size: options?.contentLength,
+                etag: result.etag,
+                contentType: options?.contentType,
+                metadata: options?.metadata,
+                lastModified: result.lastModified
+            };
+        }
+        catch (error) {
+            if (options?.ifNotExists && [409, 412].includes(error.statusCode))
+                throw new ContentExistsError(url);
+            throw error;
+        }
+    }
+    /**
+     * Perform head content.
+     * @override
+     */
+    async headContent(url) {
+        try {
+            const info = await this.blob(url).getProperties();
+            return {
+                url,
+                size: info.contentLength,
+                contentType: info.contentType,
+                etag: info.etag,
+                metadata: info.metadata,
+                lastModified: info.lastModified
+            };
+        }
+        catch (error) {
+            if (error.statusCode === 404)
+                return undefined;
+            throw error;
+        }
+    }
+    /**
+     * Perform delete content.
+     * @override
+     */
+    async deleteContent(url) {
+        await this.blob(url).deleteIfExists();
+    }
+    /**
+     * Perform _get.
+     * @override
+     */
+    async _get(info) {
+        this.checkHash(info.hash);
+        return this.getContent(this.getContentUrl(this._getKey(info.hash)));
+    }
+    /**
+     * Perform get signed url from map.
+     * @override
+     */
+    async getSignedUrlFromMap(map, expires, _context) {
+        this.checkHash(map.hash);
+        return this.getSignedUrl(this._getKey(map.hash), "r", expires);
+    }
+    /**
+     * Issue narrowly scoped SAS credentials. Direct uploads only create isolated staging blobs.
+     * @param key - Object key within the container
+     * @param permissions - Permissions granted by the SAS
+     * @param expires - SAS lifetime in seconds
+     * @returns The signed url result
+     */
+    async getSignedUrl(key, permissions = "r", expires = this.parameters.urlExpiry) {
+        if (!Number.isFinite(expires) || expires <= 0 || expires > 7 * 86400 - 600)
+            throw new WebdaError.BadRequest("SAS expiry must be positive and less than seven days");
+        const startsOn = new Date(Date.now() - 300000), expiresOn = new Date(Date.now() + expires * 1000);
+        const values = {
+            containerName: this.parameters.container,
+            blobName: key,
+            permissions: BlobSASPermissions.parse(permissions),
+            startsOn,
+            expiresOn,
+            version: this.parameters.serviceVersion
+        };
+        const credential = this.client.credential;
+        const sas = credential instanceof StorageSharedKeyCredential
+            ? generateBlobSASQueryParameters(values, credential)
+            : generateBlobSASQueryParameters(values, await this.client.getUserDelegationKey(startsOn, expiresOn), this.client.accountName);
+        return `${this.client.getContainerClient(this.parameters.container).getBlobClient(key).url}?${sas.toString()}`;
+    }
+    /**
+     * Validate a hash before using it in a storage key.
+     * @param hash - Normalized content hash
+     * @returns The check hash result
+     */
+    checkHash(hash) {
+        if (!hash || !/^[0-9a-f]{32}$/.test(hash))
+            throw new WebdaError.BadRequest("Invalid binary hash");
+    }
+    /**
+     * Build an injective ownership marker from the model, attribute and key.
+     * @param model - Model class or model identifier
+     * @param property - Binary or model attribute
+     * @param uuid - Owner primary key
+     * @returns The marker result
+     */
+    marker(model, property, uuid) {
+        return ("@" +
+            [model, property, uuid]
+                .map(part => [...Buffer.from(part)]
+                .map(byte => {
+                const character = String.fromCharCode(byte);
+                return /[A-Za-z0-9.:@-]/.test(character)
+                    ? character
+                    : `~${byte.toString(16).toUpperCase().padStart(2, "0")}`;
+            })
+                .join(""))
+                .join("_"));
+    }
+    /**
+     * Build the private pending-upload record key.
+     * @param object - Model owning the binary
+     * @param property - Binary or model attribute
+     * @param hash - Normalized content hash
+     * @returns The pending key result
+     */
+    pendingKey(object, property, hash) {
+        return posix.join(this.parameters.prefix ?? "", "_pending", hash, this.marker(useModelId(object.constructor), property, object.getUUID()));
+    }
+    /**
+     * Persist an exact ownership marker and attach the verified file.
+     * @param object - Model owning the binary
+     * @param property - Binary or model attribute
+     * @param info - Binary metadata or increment specification
+     */
+    async attach(object, property, info) {
+        const model = useModelId(object.constructor);
+        await this.putContent(this.getContentUrl(this._getKey(info.hash, this.marker(model, property, object.getUUID()))), "", { metadata: { webdamodel: model } });
+        await this.uploadSuccess(object, property, info);
+    }
+    /**
+     * Perform store.
+     * @override
+     */
+    async store(object, property, file) {
+        this.checkMap(object, property);
+        const computed = await this.verifiedHashes(file);
+        const url = this.getContentUrl(this._getKey(computed.hash));
+        try {
+            await this.putContent(url, await file.get(), {
+                ifNotExists: true,
+                metadata: { ...file.metadata, webdaproof: computed.challenge },
+                contentType: file.mimetype,
+                contentLength: file.size
+            });
+        }
+        catch (error) {
+            if (!(error instanceof ContentExistsError))
+                throw error;
+        }
+        const stored = await this.headContent(url);
+        if (stored?.metadata?.webdaproof !== computed.challenge)
+            throw new WebdaError.Conflict("Stored binary proof does not match");
+        await this.attach(object, property, { ...file.toBinaryFileInfo(), size: stored.size });
+    }
+    /**
+     * Perform put redirect url.
+     * @override
+     */
+    async putRedirectUrl(object, property, info, context) {
+        info = normalizeHashes(info ?? (await context?.getInput()));
+        this.checkHash(info?.hash);
+        if (!info?.challenge || !/^[0-9a-f]{32}$/.test(info.challenge))
+            throw new WebdaError.BadRequest("Upload challenge is required");
+        this.checkMap(object, property);
+        const stored = await this.headContent(this.getContentUrl(this._getKey(info.hash)));
+        if (stored?.metadata?.webdaproof === info.challenge) {
+            if (this.parameters.maxUploadSize !== undefined && stored.size > this.parameters.maxUploadSize)
+                throw new WebdaError.BadRequest("File too big");
+            await this.attach(object, property, { ...info, size: stored.size });
+            return undefined;
+        }
+        const stagingKey = posix.join(this.parameters.prefix ?? "", "_staging", randomUUID());
+        const pending = { info, stagingKey, created: Date.now() };
+        await this.putContent(this.getContentUrl(this.pendingKey(object, property, info.hash)), JSON.stringify(pending), {
+            contentType: "application/json"
+        });
+        return {
+            url: await this.getSignedUrl(stagingKey, "c"),
+            method: "PUT",
+            headers: {
+                "x-ms-blob-type": "BlockBlob",
+                "Content-Type": "application/octet-stream",
+                "Content-MD5": Buffer.from(info.hash, "hex").toString("base64")
+            }
+        };
+    }
+    /**
+     * Verify the bytes before copying them to the content hash and attaching them to the owner.
+     * @override
+     */
+    async completeUpload(object, property, hash) {
+        hash = normalizeHash(hash);
+        this.checkHash(hash);
+        this.checkMap(object, property);
+        if (this.isLinked(object, property, hash, await this.getStoredValue(object, property)))
+            return;
+        const pendingUrl = this.getContentUrl(this.pendingKey(object, property, hash));
+        const pendingBlob = this.blob(pendingUrl);
+        let response;
+        try {
+            response = await pendingBlob.download();
+        }
+        catch (error) {
+            if (error.statusCode === 404)
+                throw new WebdaError.NotFound("No pending upload");
+            throw error;
+        }
+        const chunks = [];
+        for await (const chunk of response.readableStreamBody)
+            chunks.push(Buffer.from(chunk));
+        const pending = JSON.parse(Buffer.concat(chunks).toString());
+        if (Date.now() - pending.created > this.parameters.pendingTimeout * 1000)
+            throw new WebdaError.PreconditionFailed("Pending upload expired");
+        const stagingUrl = this.getContentUrl(pending.stagingKey);
+        const head = await this.headContent(stagingUrl);
+        if (!head)
+            throw new WebdaError.PreconditionFailed("Upload not found");
+        const max = this.parameters.maxUploadSize;
+        if ((pending.info.size !== undefined && pending.info.size !== head.size) || (max !== undefined && head.size > max))
+            throw new WebdaError.BadRequest("Uploaded size does not match");
+        const md5 = createHash("md5"), proof = createHash("md5").update("WEBDA");
+        const stagingBlob = this.blob(stagingUrl);
+        const read = async () => (await stagingBlob.download(0, undefined, { conditions: { ifMatch: head.etag } })).readableStreamBody;
+        for await (const chunk of await read()) {
+            md5.update(chunk);
+            proof.update(chunk);
+        }
+        const challenge = proof.digest("hex");
+        if (md5.digest("hex") !== hash || challenge !== pending.info.challenge)
+            throw new WebdaError.BadRequest("Uploaded content does not match the challenge");
+        const url = this.getContentUrl(this._getKey(hash));
+        try {
+            await this.putContent(url, await read(), {
+                ifNotExists: true,
+                metadata: { ...pending.info.metadata, webdaproof: challenge },
+                contentType: pending.info.mimetype,
+                contentLength: head.size
+            });
+        }
+        catch (error) {
+            if (!(error instanceof ContentExistsError))
+                throw error;
+        }
+        if ((await this.headContent(url))?.metadata?.webdaproof !== challenge)
+            throw new WebdaError.Conflict("Stored binary proof does not match");
+        await this.attach(object, property, { ...pending.info, hash, size: head.size });
+        await pendingBlob.delete({ conditions: { ifMatch: response.etag } });
+        await this.deleteContent(stagingUrl);
+    }
+    /**
+     * Perform get usage count.
+     * @override
+     */
+    async getUsageCount(hash) {
+        let count = 0;
+        for await (const blob of this.client
+            .getContainerClient(this.parameters.container)
+            .listBlobsFlat({ prefix: this._getKey(hash, "") + "/" })) {
+            if (blob.name !== this._getKey(hash))
+                count++;
+        }
+        return count;
+    }
+    /**
+     * Perform _clean usage.
+     * @override
+     */
+    async _cleanUsage(hash, uuid, attribute, model) {
+        if (!attribute || !model)
+            return;
+        await this.deleteContent(this.getContentUrl(this._getKey(hash, this.marker(model, attribute, uuid))));
+        if ((await this.getUsageCount(hash)) === 0)
+            await this.deleteContent(this.getContentUrl(this._getKey(hash)));
+    }
+    /**
+     * Describe the Azure resources and identity permissions required by this service.
+     * @param deployer - Deployment scope and identity helpers
+     * @returns The azure resources result
+     */
+    getAzureResources(deployer) {
+        if (!this.parameters.account)
+            return {};
+        const name = `${this.parameters.account}/default/${this.parameters.container}`;
+        const scope = `/subscriptions/${deployer.resources.subscriptionId}/resourceGroups/${deployer.resources.resourceGroup}/providers/Microsoft.Storage/storageAccounts/${this.parameters.account}/blobServices/default/containers/${this.parameters.container}`;
+        return {
+            resources: [
+                {
+                    type: "Microsoft.Storage/storageAccounts/blobServices/containers",
+                    apiVersion: "2023-05-01",
+                    name,
+                    properties: { publicAccess: "None" }
+                }
+            ],
+            roleAssignments: [
+                {
+                    scope,
+                    roleDefinitionId: `/subscriptions/${deployer.resources.subscriptionId}/providers/Microsoft.Authorization/roleDefinitions/ba92f5b4-2d11-453d-a403-e96b0029c9fe`
+                },
+                {
+                    scope: scope.split("/blobServices/")[0],
+                    roleDefinitionId: `/subscriptions/${deployer.resources.subscriptionId}/providers/Microsoft.Authorization/roleDefinitions/db58b8e5-c6ad-4a2a-8342-4190687cbf4a`
+                }
+            ],
+            env: { AZURE_STORAGE_ACCOUNT: this.parameters.account }
+        };
+    }
+}
+/**
+ * Parameters
+ */
+AzureBlobBinary.Parameters = AzureBlobBinaryParameters;
+//# sourceMappingURL=blob.service.js.map

package/lib/services/blob.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blob.service.js","sources":["../../src/services/blob.service.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,8BAA8B,EAC9B,WAAW,EACX,0BAA0B,EAC3B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAIL,WAAW,EACX,qBAAqB,EAGrB,YAAY,EACZ,UAAU,EACV,UAAU,EACV,eAAe,EACf,aAAa,EACd,MAAM,aAAa,CAAC;AACrB,OAAO,EAEL,kBAAkB,EAGlB,oBAAoB,EAEpB,eAAe,EACf,UAAU,EACX,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAErD,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAClC,OAAO,EAA0B,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAGxG,sFAAsF;AACtF,MAAM,OAAO,yBAA0B,SAAQ,qBAAqB;IAApE;;QAiCE;;WAEG;QACH,oBAAe,GAAG,KAAK,CAAC;QAGxB;;WAEG;QACH,mBAAc,GAAG,IAAI,CAAC;IAUxB,CAAC;IARC;;;OAGG;IACH,IAAI,CAAC,MAAM,GAAQ,EAAE;QACnB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnB,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;CACF;AAoBD;;GAEG;AACH,MAAM,OAAO,eAAgB,SAAQ,WAAsC;IAA3E;;QAKE;;WAEG;QACM,YAAO,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAubzC,CAAC;IAjbC;;;OAGG;IACH,KAAK,CAAC,IAAI;QACR,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC;QAC1B,IAAI,CAAC,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACrC,IAAI,CAAC,MAAM,GAAG,iBAAiB,CAAC,oBAAoB,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC,CAAC;YAChH,IAAI,CAAC,CAAC,QAAQ;gBAAE,IAAI,CAAC,MAAM,GAAG,IAAI,iBAAiB,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC1F,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,CAAC,CAAC,OAAO;gBAAE,MAAM,IAAI,UAAU,CAAC,UAAU,CAAC,yDAAyD,CAAC,CAAC;YAC3G,IAAI,CAAC,MAAM,GAAG,IAAI,iBAAiB,CACjC,CAAC,CAAC,QAAQ,IAAI,WAAW,CAAC,CAAC,OAAO,wBAAwB,EAC1D,kBAAkB,CAAC,CAAC,CAAC,CACtB,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,CAAC,cAAc,EAAE,CAAC;YACrB,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC;gBAC/C,MAAM,IAAI,UAAU,CAAC,UAAU,CAAC,mCAAmC,CAAC,CAAC;YACvE,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACrD,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC;gBACtB;;;;mBAIG;gBACH,MAAM,CAAC,IAAI;oBACT,OAAO;wBACL;;;;2BAIG;wBACH,WAAW,CAAC,OAAO;4BACjB,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,cAAe,CAAC,CAAC;4BACvD,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;wBACnC,CAAC;qBACF,CAAC;gBACJ,CAAC;aACF,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,CAAC,CAAC,eAAe;YAAE,MAAM,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,iBAAiB,EAAE,CAAC;QAC7F,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;OAGG;IACH,gBAAgB;QACd,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;IACnC,CAAC;IAED;;;;OAIG;IACO,IAAI,CAAC,GAAW;QACxB,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC/D,+EAA+E;QAC/E,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,UAAU;YACtC,MAAM,IAAI,UAAU,CAAC,UAAU,CAAC,oDAAoD,CAAC,CAAC;QACxF,OAAO,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACnH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,UAAU,CAAC,GAAW,EAAE,OAA2B;QACvD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,CAAC;YAC7B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAC5C,KAAK,EAAE,KAAK,EACZ,KAAK,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,KAAK,EAAE,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAC3E,CAAC;YACF,OAAO,QAAQ,CAAC,kBAA8B,CAAC;QACjD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAAiC,CAAC,UAAU,KAAK,GAAG;gBAAE,MAAM,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC;YAC/F,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,UAAU,CAAC,GAAW,EAAE,IAAiB,EAAE,OAA2B;QAC1E,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE;gBACvF,eAAe,EAAE,EAAE,eAAe,EAAE,OAAO,EAAE,WAAW,IAAI,0BAA0B,EAAE;gBACxF,QAAQ,EAAE,OAAO,EAAE,QAAQ;gBAC3B,UAAU,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS;aACpE,CAAC,CAAC;YACH,OAAO;gBACL,GAAG;gBACH,IAAI,EAAE,OAAO,EAAE,aAAa;gBAC5B,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,WAAW,EAAE,OAAO,EAAE,WAAW;gBACjC,QAAQ,EAAE,OAAO,EAAE,QAAQ;gBAC3B,YAAY,EAAE,MAAM,CAAC,YAAY;aAClC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,OAAO,EAAE,WAAW,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAE,KAAgC,CAAC,UAAU,CAAC;gBAC3F,MAAM,IAAI,kBAAkB,CAAC,GAAG,CAAC,CAAC;YACpC,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,WAAW,CAAC,GAAW;QAC3B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,aAAa,EAAE,CAAC;YAClD,OAAO;gBACL,GAAG;gBACH,IAAI,EAAE,IAAI,CAAC,aAAa;gBACxB,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,YAAY,EAAE,IAAI,CAAC,YAAY;aAChC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAAiC,CAAC,UAAU,KAAK,GAAG;gBAAE,OAAO,SAAS,CAAC;YAC5E,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,aAAa,CAAC,GAAW;QAC7B,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,cAAc,EAAE,CAAC;IACxC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,IAAI,CAAC,IAAe;QACxB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtE,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,mBAAmB,CAAC,GAAc,EAAE,OAAe,EAAE,QAA0B;QACnF,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzB,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IACjE,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,YAAY,CAAC,GAAW,EAAE,WAAW,GAAc,GAAG,EAAE,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS;QAC/F,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,GAAG,GAAG;YACxE,MAAM,IAAI,UAAU,CAAC,UAAU,CAAC,sDAAsD,CAAC,CAAC;QAC1F,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,EAC5C,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG;YACb,aAAa,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS;YACxC,QAAQ,EAAE,GAAG;YACb,WAAW,EAAE,kBAAkB,CAAC,KAAK,CAAC,WAAW,CAAC;YAClD,QAAQ;YACR,SAAS;YACT,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,cAAc;SACxC,CAAC;QACF,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;QAC1C,MAAM,GAAG,GACP,UAAU,YAAY,0BAA0B;YAC9C,CAAC,CAAC,8BAA8B,CAAC,MAAM,EAAE,UAAU,CAAC;YACpD,CAAC,CAAC,8BAA8B,CAC5B,MAAM,EACN,MAAM,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,QAAQ,EAAE,SAAS,CAAC,EAC3D,IAAI,CAAC,MAAM,CAAC,WAAW,CACxB,CAAC;QACR,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC;IACjH,CAAC;IAED;;;;OAIG;IACO,SAAS,CAAC,IAAa;QAC/B,IAAI,CAAC,IAAI,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC;IACpG,CAAC;IAED;;;;;;OAMG;IACO,MAAM,CAAC,KAAa,EAAE,QAAgB,EAAE,IAAY;QAC5D,OAAO,CACL,GAAG;YACH,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC;iBACpB,GAAG,CAAC,IAAI,CAAC,EAAE,CACV,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;iBACnB,GAAG,CAAC,IAAI,CAAC,EAAE;gBACV,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;gBAC5C,OAAO,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC;oBACtC,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;YAC7D,CAAC,CAAC;iBACD,IAAI,CAAC,EAAE,CAAC,CACZ;iBACA,IAAI,CAAC,GAAG,CAAC,CACb,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACO,UAAU,CAAC,MAA2B,EAAE,QAAgB,EAAE,IAAY;QAC9E,OAAO,KAAK,CAAC,IAAI,CACf,IAAI,CAAC,UAAU,CAAC,MAAM,IAAI,EAAE,EAC5B,UAAU,EACV,IAAI,EACJ,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,CAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CACzE,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACO,KAAK,CAAC,MAAM,CAAC,MAA2B,EAAE,QAAgB,EAAE,IAAoB;QACxF,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,WAAW,CAAE,CAAC;QAC9C,MAAM,IAAI,CAAC,UAAU,CACnB,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAC5F,EAAE,EACF,EAAE,QAAQ,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,CACpC,CAAC;QACF,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IACnD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK,CAAC,MAA2B,EAAE,QAAgB,EAAE,IAAgB;QACzE,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,IAAI,CAAC,GAAG,EAAE,EAAE;gBAC3C,WAAW,EAAE,IAAI;gBACjB,QAAQ,EAAE,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,SAAS,EAAE;gBAC9D,WAAW,EAAE,IAAI,CAAC,QAAQ;gBAC1B,aAAa,EAAE,IAAI,CAAC,IAAI;aACzB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,YAAY,kBAAkB,CAAC;gBAAE,MAAM,KAAK,CAAC;QAC1D,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,MAAM,EAAE,QAAQ,EAAE,UAAU,KAAK,QAAQ,CAAC,SAAS;YACrD,MAAM,IAAI,UAAU,CAAC,QAAQ,CAAC,oCAAoC,CAAC,CAAC;QACtE,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,GAAG,IAAI,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAK,EAAE,CAAC,CAAC;IAC1F,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,cAAc,CAClB,MAA2B,EAC3B,QAAgB,EAChB,IAAqB,EACrB,OAA0C;QAE1C,IAAI,GAAG,eAAe,CAAC,IAAI,IAAI,CAAC,MAAM,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC3B,IAAI,CAAC,IAAI,EAAE,SAAS,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;YAC5D,MAAM,IAAI,UAAU,CAAC,UAAU,CAAC,8BAA8B,CAAC,CAAC;QAClE,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnF,IAAI,MAAM,EAAE,QAAQ,EAAE,UAAU,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;YACpD,IAAI,IAAI,CAAC,UAAU,CAAC,aAAa,KAAK,SAAS,IAAI,MAAM,CAAC,IAAK,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa;gBAC7F,MAAM,IAAI,UAAU,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;YAClD,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAK,EAAE,CAAC,CAAC;YACrE,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,IAAI,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;QACtF,MAAM,OAAO,GAAkB,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACzE,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE;YAC/G,WAAW,EAAE,kBAAkB;SAChC,CAAC,CAAC;QACH,OAAO;YACL,GAAG,EAAE,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,GAAG,CAAC;YAC7C,MAAM,EAAE,KAAK;YACb,OAAO,EAAE;gBACP,gBAAgB,EAAE,WAAW;gBAC7B,cAAc,EAAE,0BAA0B;gBAC1C,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;aAChE;SACF,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,cAAc,CAAC,MAA2B,EAAE,QAAgB,EAAE,IAAY;QAC9E,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACrB,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAChC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAAE,OAAO;QAC/F,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;QAC/E,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC1C,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,WAAW,CAAC,QAAQ,EAAE,CAAC;QAC1C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAAiC,CAAC,UAAU,KAAK,GAAG;gBAAE,MAAM,IAAI,UAAU,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;YAC9G,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,QAAQ,CAAC,kBAA8B;YAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACnG,MAAM,OAAO,GAAkB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC5E,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,cAAc,GAAG,IAAI;YACtE,MAAM,IAAI,UAAU,CAAC,kBAAkB,CAAC,wBAAwB,CAAC,CAAC;QACpE,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,UAAU,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,CAAC;QACvE,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC;QAC1C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,IAAK,GAAG,GAAG,CAAC;YACjH,MAAM,IAAI,UAAU,CAAC,UAAU,CAAC,8BAA8B,CAAC,CAAC;QAClE,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,EAC3B,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE,CACtB,CAAC,MAAM,WAAW,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,kBAA8B,CAAC;QACpH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,IAAI,EAAE,EAAE,CAAC;YACvC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAClB,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QACD,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,SAAS,KAAK,OAAO,CAAC,IAAI,CAAC,SAAS;YACpE,MAAM,IAAI,UAAU,CAAC,UAAU,CAAC,+CAA+C,CAAC,CAAC;QACnF,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACnD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,IAAI,EAAE,EAAE;gBACvC,WAAW,EAAE,IAAI;gBACjB,QAAQ,EAAE,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE;gBAC7D,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ;gBAClC,aAAa,EAAE,IAAI,CAAC,IAAI;aACzB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,YAAY,kBAAkB,CAAC;gBAAE,MAAM,KAAK,CAAC;QAC1D,CAAC;QACD,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,KAAK,SAAS;YACnE,MAAM,IAAI,UAAU,CAAC,QAAQ,CAAC,oCAAoC,CAAC,CAAC;QACtE,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAK,EAAE,CAAC,CAAC;QACjF,MAAM,WAAW,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACrE,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;IACvC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,aAAa,CAAC,IAAY;QAC9B,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,IAAI,CAAC,MAAM;aACjC,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;aAC7C,aAAa,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,CAAC;YAC3D,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;gBAAE,KAAK,EAAE,CAAC;QAChD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,WAAW,CAAC,IAAY,EAAE,IAAY,EAAE,SAAiB,EAAE,KAAa;QAC5E,IAAI,CAAC,SAAS,IAAI,CAAC,KAAK;YAAE,OAAO;QACjC,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACtG,IAAI,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/G,CAAC;IAED;;;;OAIG;IACH,iBAAiB,CAAC,QAA2B;QAC3C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,YAAY,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;QAC/E,MAAM,KAAK,GAAG,kBAAkB,QAAQ,CAAC,SAAS,CAAC,cAAc,mBAAmB,QAAQ,CAAC,SAAS,CAAC,aAAa,gDAAgD,IAAI,CAAC,UAAU,CAAC,OAAO,oCAAoC,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;QAC3P,OAAO;YACL,SAAS,EAAE;gBACT;oBACE,IAAI,EAAE,2DAA2D;oBACjE,UAAU,EAAE,YAAY;oBACxB,IAAI;oBACJ,UAAU,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE;iBACrC;aACF;YACD,eAAe,EAAE;gBACf;oBACE,KAAK;oBACL,gBAAgB,EAAE,kBAAkB,QAAQ,CAAC,SAAS,CAAC,cAAc,yFAAyF;iBAC/J;gBACD;oBACE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;oBACvC,gBAAgB,EAAE,kBAAkB,QAAQ,CAAC,SAAS,CAAC,cAAc,yFAAyF;iBAC/J;aACF;YACD,GAAG,EAAE,EAAE,qBAAqB,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE;SACxD,CAAC;IACJ,CAAC;CACF;AA9bC;;GAEG;AACI,0BAAU,GAAG,yBAAyB,AAA5B,CAA6B"}

package/lib/services/contributors.d.ts

@@ -0,0 +1,50 @@
+/** Minimal deployer contract given to contributors, without importing a concrete Azure deployer. */
+export interface AzureDeployerInfo {
+    /** Resolved deployment scope and location; other deployer parameters can coexist. */
+    resources: {
+        resourceGroup: string;
+        location: string;
+        subscriptionId: string;
+    };
+    /**
+     * Merge deployment tags and resource-specific tags.
+     * @param tags - resource-specific tags
+     * @returns merged resource tags
+     */
+    getDefaultTags(tags?: Record<string, string>): Record<string, string>;
+    /**
+     * Get aRM expression identifying the application's managed identity principal
+     * @returns ARM expression identifying the application's managed identity principal
+     */
+    getAppPrincipalId(): string;
+}
+/** A role that the deployer must grant to the application's managed identity, at the given resource scope. */
+export interface AzureRoleAssignment {
+    /** Role definition resource identifier or ARM expression. */
+    roleDefinitionId: string;
+    /** Resource scope identifier or ARM expression. */
+    scope: string;
+}
+/** ARM resources and runtime settings contributed by one application service. */
+export interface AzureResourceContribution {
+    /** ARM resource declarations. */
+    resources?: Record<string, unknown>[];
+    /** Variables for the application and jobs; secret values are references, rather than inline secrets. */
+    env?: Record<string, string | {
+        secretRef: string;
+    }>;
+    /** ARM template outputs. */
+    outputs?: Record<string, unknown>;
+    /** Roles granted to the application's managed identity by the deployer. */
+    roleAssignments?: AzureRoleAssignment[];
+}
+/** Allow a service to contribute to an Azure deployment template without depending on its implementation. */
+export interface AzureContributor {
+    /**
+     * Describe resources, settings and managed-identity roles, without deploying them.
+     * @param deployer - current deployment scope and template helpers
+     * @returns contribution merged by the deployer
+     */
+    getAzureResources(deployer: AzureDeployerInfo): AzureResourceContribution;
+}
+//# sourceMappingURL=contributors.d.ts.map

package/lib/services/contributors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contributors.d.ts","sources":["../../src/services/contributors.ts"],"names":[],"mappings":"AAAA,oGAAoG;AACpG,MAAM,WAAW,iBAAiB;IAChC,qFAAqF;IACrF,SAAS,EAAE;QACT,aAAa,EAAE,MAAM,CAAC;QACtB,QAAQ,EAAE,MAAM,CAAC;QACjB,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC;IACF;;;;OAIG;IACH,cAAc,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtE;;;OAGG;IACH,iBAAiB,IAAI,MAAM,CAAC;CAC7B;AAED,8GAA8G;AAC9G,MAAM,WAAW,mBAAmB;IAClC,6DAA6D;IAC7D,gBAAgB,EAAE,MAAM,CAAC;IACzB,mDAAmD;IACnD,KAAK,EAAE,MAAM,CAAC;CACf;AAED,iFAAiF;AACjF,MAAM,WAAW,yBAAyB;IACxC,iCAAiC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IACtC,wGAAwG;IACxG,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrD,4BAA4B;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,2EAA2E;IAC3E,eAAe,CAAC,EAAE,mBAAmB,EAAE,CAAC;CACzC;AAED,6GAA6G;AAC7G,MAAM,WAAW,gBAAgB;IAC/B;;;;OAIG;IACH,iBAAiB,CAAC,QAAQ,EAAE,iBAAiB,GAAG,yBAAyB,CAAC;CAC3E"}

package/lib/services/contributors.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=contributors.js.map

package/lib/services/contributors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contributors.js","sources":["../../src/services/contributors.ts"],"names":[],"mappings":""}