alchemy 0.50.0 → 0.51.1

package/lib/cloudflare/api-shield.js

@@ -0,0 +1,427 @@
+import fs from "node:fs/promises";
+import * as yaml from "yaml";
+import { Resource } from "../resource.js";
+import { handleApiError } from "./api-error.js";
+import { APIGatewayOperation } from "./api-gateway-operation.js";
+import { APISchema } from "./api-schema.js";
+import { createCloudflareApi, } from "./api.js";
+import { findZoneForHostname } from "./zone.js";
+/**
+ * Cloudflare Schema Validation protects your API endpoints by validating incoming requests
+ * against an OpenAPI v3 schema. It can log or block requests that don't match your schema,
+ * helping prevent malformed requests and potential security issues.
+ *
+ * @example
+ * ## Basic schema validation with inline YAML
+ *
+ * Enable schema validation with a simple OpenAPI schema as YAML string
+ *
+ * const apiSchema = await APISchema("my-schema", {
+ *   zone: myZone,
+ *   schema: `
+ *     openapi: 3.0.0
+ *     info:
+ *       title: My API
+ *       version: 1.0.0
+ *     servers:
+ *       - url: https://api.example.com
+ *     paths:
+ *       /users:
+ *         get:
+ *           operationId: getUsers
+ *           responses:
+ *             '200':
+ *               description: Success
+ *       /users/{id}:
+ *         get:
+ *           operationId: getUser
+ *           parameters:
+ *             - name: id
+ *               in: path
+ *               required: true
+ *               schema:
+ *                 type: string
+ *   `,
+ * });
+ *
+ * const shield = await APIShield("api-validation", {
+ *   zone: myZone,
+ *   schema: apiSchema,
+ *   defaultAction: "none"
+ * });
+ *
+ * @example
+ * ## API Shield with typed OpenAPI object
+ *
+ * Use strongly-typed OpenAPI v3 objects for better IDE support
+ *
+ * import type { OpenAPIV3 } from "openapi-types";
+ *
+ * const apiSchema: OpenAPIV3.Document = {
+ *   openapi: "3.0.0",
+ *   info: {
+ *     title: "My API",
+ *     version: "1.0.0",
+ *   },
+ *   servers: [
+ *     { url: "https://api.example.com" }
+ *   ],
+ *   paths: {
+ *     "/users": {
+ *       get: {
+ *         operationId: "getUsers",
+ *         responses: {
+ *           "200": {
+ *             description: "Success",
+ *             content: {
+ *               "application/json": {
+ *                 schema: {
+ *                   type: "array",
+ *                   items: {
+ *                     type: "object",
+ *                     properties: {
+ *                       id: { type: "string" },
+ *                       name: { type: "string" }
+ *                     }
+ *                   }
+ *                 }
+ *               }
+ *             }
+ *           }
+ *         }
+ *       }
+ *     }
+ *   }
+ * };
+ *
+ * const schema = await APISchema("my-schema", {
+ *   zone: myZone,
+ *   schema: apiSchema,
+ * });
+ *
+ * const shield = await APIShield("api-validation", {
+ *   zone: myZone,
+ *   schema: schema,
+ *   defaultAction: "none"
+ * });
+ *
+ * @example
+ * ## API Shield with file
+ *
+ * Load schema from an external file with custom settings
+ *
+ * const schema = await APISchema("my-schema", {
+ *   zone: "example.com",
+ *   schema: new URL("file:///path/to/openapi.yaml"),
+ *   name: "production-api-v2",
+ * });
+ *
+ * const shield = await APIShield("api-validation", {
+ *   zone: "example.com",
+ *   schema: schema,
+ *   defaultAction: "none",
+ *   mitigations: {
+ *     "/users": {
+ *       get: "none",        // No mitigation for read operations
+ *       post: "log",        // Log violations for writes (requires paid plan)
+ *     },
+ *     "/users/{id}": {
+ *       delete: "block"     // Block destructive operations (requires paid plan)
+ *     }
+ *   },
+ *   unknownOperationAction: "none"
+ * });
+ *
+ * @example
+ * ## Monitor API traffic without impact
+ *
+ * Use validation in monitoring mode to understand traffic patterns
+ *
+ * const schema = await APISchema("my-schema", {
+ *   zone: myZone,
+ *   schema: new URL("file:///path/to/api-schema.json"),
+ * });
+ *
+ * const monitoring = await APIShield("api-monitoring", {
+ *   zone: myZone,
+ *   schema: schema,
+ *   defaultAction: "none"
+ * });
+ *
+ * @example
+ * ## Log schema violations
+ *
+ * Track non-compliant requests without blocking (requires paid plan)
+ *
+ * const schema = await APISchema("my-schema", {
+ *   zone: myZone,
+ *   schema: new URL("file:///path/to/api-schema.json"),
+ * });
+ *
+ * const withLogging = await APIShield("api-logging", {
+ *   zone: myZone,
+ *   schema: schema,
+ *   defaultAction: "log"
+ * });
+ *
+ * @example
+ * ## Protect critical endpoints with blanket mitigations
+ *
+ * Apply mitigations to entire paths or specific methods (requires paid plan)
+ *
+ * const schema = await APISchema("my-schema", {
+ *   zone: myZone,
+ *   schema: new URL("file:///path/to/api-schema.json"),
+ * });
+ *
+ * const protection = await APIShield("api-protection", {
+ *   zone: myZone,
+ *   schema: schema,
+ *   defaultAction: "log",
+ *   mitigations: {
+ *     "/admin": "block",              // Block all methods on admin endpoints
+ *     "/payments": {
+ *       post: "block",                // Block payment creation
+ *       put: "block"                  // Block payment updates
+ *     },
+ *     "/users/{id}": {
+ *       delete: "block"               // Block user deletion
+ *     },
+ *     "/public": "none",              // Allow all methods on public endpoints
+ *     "/products": "none"             // Allow all methods on products
+ *   }
+ * });
+ *
+ * @see https://developers.cloudflare.com/api-shield/security/schema-validation/
+ */
+export async function APIShield(id, props) {
+    return (await _APIShield(id, {
+        ...props,
+        // resolve file URLs to documents prior to passing input to the resource
+        // so that updates to the schema trigger changes to the resource
+        schema: await loadSchemaContent(props.schema),
+    }));
+}
+const _APIShield = Resource("cloudflare::APIShield", {
+    // delete the api gateway operations in parallel
+    destroyStrategy: "parallel",
+}, async function (id, props) {
+    const api = await createCloudflareApi(props);
+    // Resolve zone ID and name
+    const zoneId = typeof props.zone === "string"
+        ? (await findZoneForHostname(api, props.zone)).zoneId
+        : props.zone.id;
+    if (this.phase === "delete") {
+        // Reset settings to default
+        await updateGlobalSettings(api, zoneId, {
+            validation_default_mitigation_action: "none",
+        });
+        return this.destroy();
+    }
+    // Update global settings
+    const defaultAction = props.defaultMitigation || "none";
+    await updateGlobalSettings(api, zoneId, {
+        validation_default_mitigation_action: defaultAction,
+        validation_override_mitigation_action: props.unknownOperationMitigation,
+    });
+    const schema = await APISchema("schema", {
+        schema: props.schema,
+        zone: props.zone,
+        name: props.name ?? id,
+        enabled: props.enabled,
+        accountId: props.accountId,
+        apiKey: props.apiKey,
+        apiToken: props.apiToken,
+        baseUrl: props.baseUrl,
+        email: props.email,
+    });
+    return this({
+        zoneId,
+        schema,
+        operations: await Promise.all(parseSchemaOperations(schema.schema).map(async (parsedOp) => {
+            let operationAction = defaultAction;
+            const method = parsedOp.method.toLowerCase();
+            if (props.mitigations) {
+                const pathActions = props.mitigations[parsedOp.endpoint];
+                if (typeof pathActions === "string") {
+                    // Blanket action for all methods on this path
+                    operationAction = pathActions;
+                }
+                else if (pathActions && typeof pathActions === "object") {
+                    // Per-method configuration
+                    const methodAction = pathActions[method];
+                    if (methodAction) {
+                        operationAction = methodAction;
+                    }
+                }
+            }
+            return APIGatewayOperation(
+            // Create a deterministic ID for the operation
+            `${id}-${method}-${parsedOp.endpoint.replace(/[^a-z0-9]/gi, "-")}`, {
+                zone: zoneId,
+                endpoint: parsedOp.endpoint,
+                host: parsedOp.host,
+                method: parsedOp.method,
+                mitigation: operationAction,
+            });
+        })),
+    });
+});
+// Helper functions for API calls
+async function getGlobalSettings(api, zoneId) {
+    const response = await api.get(`/zones/${zoneId}/api_gateway/settings/schema_validation`);
+    if (!response.ok) {
+        await handleApiError(response, "getting", "global settings");
+    }
+    const data = (await response.json());
+    return data.result;
+}
+async function updateGlobalSettings(api, zoneId, params) {
+    const response = await api.put(`/zones/${zoneId}/api_gateway/settings/schema_validation`, params);
+    if (!response.ok) {
+        await handleApiError(response, "updating", "global settings");
+    }
+}
+/**
+ * Get global schema validation settings for a zone
+ */
+export async function getGlobalSettingsForZone(api, zoneId) {
+    return getGlobalSettings(api, zoneId);
+}
+/**
+ * Extract operations from an OpenAPI schema
+ */
+export function parseSchemaOperations(schema) {
+    const operations = [];
+    if (!schema?.paths) {
+        return operations;
+    }
+    // Determine the host from servers
+    const defaultHost = extractHostFromSchema(schema);
+    // Extract operations from each path
+    for (const [path, pathItem] of Object.entries(schema.paths)) {
+        if (!pathItem || typeof pathItem !== "object")
+            continue;
+        // Check each HTTP method
+        for (const method of [
+            "get",
+            "post",
+            "put",
+            "patch",
+            "delete",
+            "head",
+            "options",
+            "trace",
+        ]) {
+            const operation = pathItem[method];
+            if (operation &&
+                typeof operation === "object" &&
+                !Array.isArray(operation)) {
+                // Determine host for this operation (operation-level servers override global)
+                const operationHost = operation.servers?.[0]?.url
+                    ? extractHostFromUrl(operation.servers[0].url)
+                    : defaultHost;
+                operations.push({
+                    method: method.toUpperCase(),
+                    endpoint: path,
+                    operationId: operation.operationId,
+                    host: operationHost,
+                });
+            }
+        }
+    }
+    return operations;
+}
+/**
+ * Extract host from OpenAPI schema servers
+ */
+function extractHostFromSchema(schema) {
+    if (schema.servers && schema.servers.length > 0) {
+        return extractHostFromUrl(schema.servers[0].url);
+    }
+    // Fallback to a default host
+    return "api.example.com";
+}
+/**
+ * Extract hostname from a URL
+ */
+function extractHostFromUrl(url) {
+    try {
+        const urlObj = new URL(url);
+        return urlObj.hostname;
+    }
+    catch {
+        // If URL parsing fails, return the URL as-is (might be relative)
+        return url;
+    }
+}
+/**
+ * Helper function to load schema content from various sources
+ */
+async function loadSchemaContent(schema) {
+    // Handle string content (YAML/JSON)
+    try {
+        if (typeof schema === "string") {
+            if (schema.startsWith("http://") || schema.startsWith("https://")) {
+                return loadSchemaContent(new URL(schema));
+            }
+            else if (schema.includes("\n")) {
+                // json or YAML
+                return tryParse(schema);
+            }
+            else {
+                try {
+                    return tryParse(await fs.readFile(schema, "utf-8"));
+                }
+                catch {
+                    // maybe minified JSON
+                    return tryParse(schema);
+                }
+            }
+        }
+        else if (schema instanceof URL) {
+            return yaml.parse(await fetchUrl(schema));
+        }
+        else if (typeof schema === "object") {
+            return schema;
+        }
+        else {
+            // should be unreachable
+            throw SchemaError(new Error(`Unsupported schema type: ${typeof schema}`));
+        }
+    }
+    catch (err) {
+        throw SchemaError(err);
+    }
+}
+const SchemaError = (cause) => new Error(`Invalid OpenAPI schema. Please provide a:
+1. a string containing OpenAPI v3.0 schema (in YAML or JSON format)
+2. a string path to a file containing OpenAPI v3.0 schema (in YAML or JSON format)
+3. a file://, http:// or https:// URL pointing to an OpenAPI v3.0 schema (in YAML or JSON format)
+4. a literal OpenAPI v3.0 schema object`, { cause });
+function tryParse(schema) {
+    try {
+        return yaml.parse(schema);
+    }
+    catch {
+        return JSON.parse(schema);
+    }
+}
+async function fetchUrl(url) {
+    if (url.protocol === "file:") {
+        // Read from local filesystem for file:// URLs
+        return await fs.readFile(url.pathname, "utf-8");
+    }
+    else if (url.protocol === "http:" || url.protocol === "https:") {
+        // Fetch from remote for http/https URLs
+        const response = await fetch(url.toString());
+        if (!response.ok) {
+            throw new Error(`Failed to fetch schema from URL: ${response.statusText}`);
+        }
+        return await response.text();
+    }
+    else {
+        throw new Error(`Unsupported URL protocol: ${url.protocol}. Only http:, https:, and file: are supported.`);
+    }
+}
+//# sourceMappingURL=api-shield.js.map

package/lib/cloudflare/api-shield.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-shield.js","sourceRoot":"","sources":["../../src/cloudflare/api-shield.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAElC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAE7B,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAEjE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EACL,mBAAmB,GAGpB,MAAM,UAAU,CAAC;AAElB,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAwKhD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2LG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,EAAU,EACV,KAAwB;IAExB,OAAO,CAAC,MAAM,UAAU,CAAC,EAAE,EAAE;QAC3B,GAAG,KAAK;QACR,wEAAwE;QACxE,gEAAgE;QAChE,MAAM,EAAE,MAAM,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC;KAC9C,CAAC,CAA+D,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,GAAG,QAAQ,CACzB,uBAAuB,EACvB;IACE,gDAAgD;IAChD,eAAe,EAAE,UAAU;CAC5B,EACD,KAAK,WAEH,EAAU,EACV,KAAwD;IAExD,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAE7C,2BAA2B;IAC3B,MAAM,MAAM,GACV,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAC5B,CAAC,CAAC,CAAC,MAAM,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;QACrD,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;IAEpB,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC5B,4BAA4B;QAC5B,MAAM,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE;YACtC,oCAAoC,EAAE,MAAM;SAC7C,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;IACxB,CAAC;IAED,yBAAyB;IACzB,MAAM,aAAa,GAAG,KAAK,CAAC,iBAAiB,IAAI,MAAM,CAAC;IACxD,MAAM,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE;QACtC,oCAAoC,EAAE,aAAa;QACnD,qCAAqC,EAAE,KAAK,CAAC,0BAA0B;KACxE,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,QAAQ,EAAE;QACvC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE;QACtB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,KAAK,EAAE,KAAK,CAAC,KAAK;KACnB,CAAC,CAAC;IAEH,OAAO,IAAI,CAAC;QACV,MAAM;QACN,MAAM;QACN,UAAU,EAAE,MAAM,OAAO,CAAC,GAAG,CAC3B,qBAAqB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE;YAC1D,IAAI,eAAe,GAAG,aAAa,CAAC;YACpC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC7C,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;gBACtB,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACzD,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;oBACpC,8CAA8C;oBAC9C,eAAe,GAAG,WAAW,CAAC;gBAChC,CAAC;qBAAM,IAAI,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;oBAC1D,2BAA2B;oBAC3B,MAAM,YAAY,GAChB,WAAW,CAAC,MAAkC,CAAC,CAAC;oBAClD,IAAI,YAAY,EAAE,CAAC;wBACjB,eAAe,GAAG,YAAY,CAAC;oBACjC,CAAC;gBACH,CAAC;YACH,CAAC;YACD,OAAO,mBAAmB;YACxB,8CAA8C;YAC9C,GAAG,EAAE,IAAI,MAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,EAAE,EAClE;gBACE,IAAI,EAAE,MAAM;gBACZ,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,UAAU,EAAE,eAAe;aAC5B,CACF,CAAC;QACJ,CAAC,CAAC,CACH;KACF,CAAC,CAAC;AACL,CAAC,CACF,CAAC;AAEF,iCAAiC;AAEjC,KAAK,UAAU,iBAAiB,CAC9B,GAAkB,EAClB,MAAc;IAEd,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,GAAG,CAC5B,UAAU,MAAM,yCAAyC,CAC1D,CAAC;IAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,cAAc,CAAC,QAAQ,EAAE,SAAS,EAAE,iBAAiB,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAyC,CAAC;IAC7E,OAAO,IAAI,CAAC,MAAM,CAAC;AACrB,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,GAAkB,EAClB,MAAc,EACd,MAAyC;IAEzC,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,GAAG,CAC5B,UAAU,MAAM,yCAAyC,EACzD,MAAM,CACP,CAAC;IAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,cAAc,CAAC,QAAQ,EAAE,UAAU,EAAE,iBAAiB,CAAC,CAAC;IAChE,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,GAAkB,EAClB,MAAc;IAEd,OAAO,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACxC,CAAC;AASD;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAA0B;IAM9D,MAAM,UAAU,GAKX,EAAE,CAAC;IAER,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;QACnB,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,kCAAkC;IAClC,MAAM,WAAW,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAElD,oCAAoC;IACpC,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5D,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ;YAAE,SAAS;QAExD,yBAAyB;QACzB,KAAK,MAAM,MAAM,IAAI;YACnB,KAAK;YACL,MAAM;YACN,KAAK;YACL,OAAO;YACP,QAAQ;YACR,MAAM;YACN,SAAS;YACT,OAAO;SACR,EAAE,CAAC;YACF,MAAM,SAAS,GAAG,QAAQ,CAAC,MAA+B,CAAC,CAAC;YAC5D,IACE,SAAS;gBACT,OAAO,SAAS,KAAK,QAAQ;gBAC7B,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EACzB,CAAC;gBACD,8EAA8E;gBAC9E,MAAM,aAAa,GAAI,SAAiB,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG;oBACxD,CAAC,CAAC,kBAAkB,CAAE,SAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;oBACvD,CAAC,CAAC,WAAW,CAAC;gBAEhB,UAAU,CAAC,IAAI,CAAC;oBACd,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE;oBAC5B,QAAQ,EAAE,IAAI;oBACd,WAAW,EAAG,SAAiB,CAAC,WAAW;oBAC3C,IAAI,EAAE,aAAa;iBACpB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,SAAS,qBAAqB,CAAC,MAA0B;IACvD,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChD,OAAO,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACnD,CAAC;IAED,6BAA6B;IAC7B,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,GAAW;IACrC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,OAAO,MAAM,CAAC,QAAQ,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,iEAAiE;QACjE,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,iBAAiB,CAC9B,MAAyC;IAEzC,oCAAoC;IACpC,IAAI,CAAC;QACH,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/B,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAClE,OAAO,iBAAiB,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;YAC5C,CAAC;iBAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjC,eAAe;gBACf,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC1B,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC;oBACH,OAAO,QAAQ,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;gBACtD,CAAC;gBAAC,MAAM,CAAC;oBACP,sBAAsB;oBACtB,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC1B,CAAC;YACH,CAAC;QACH,CAAC;aAAM,IAAI,MAAM,YAAY,GAAG,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5C,CAAC;aAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YACtC,OAAO,MAA4B,CAAC;QACtC,CAAC;aAAM,CAAC;YACN,wBAAwB;YACxB,MAAM,WAAW,CAAC,IAAI,KAAK,CAAC,4BAA4B,OAAO,MAAM,EAAE,CAAC,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;AACH,CAAC;AAED,MAAM,WAAW,GAAG,CAAC,KAAW,EAAE,EAAE,CAClC,IAAI,KAAK,CACP;;;;wCAIoC,EACpC,EAAE,KAAK,EAAE,CACV,CAAC;AAEJ,SAAS,QAAQ,CAAC,MAAc;IAC9B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAQ;IAC9B,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC7B,8CAA8C;QAC9C,OAAO,MAAM,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAClD,CAAC;SAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjE,wCAAwC;QACxC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CACb,oCAAoC,QAAQ,CAAC,UAAU,EAAE,CAC1D,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CACb,6BAA6B,GAAG,CAAC,QAAQ,gDAAgD,CAC1F,CAAC;IACJ,CAAC;AACH,CAAC"}

package/lib/cloudflare/certificate-pack.d.ts

@@ -1,7 +1,7 @@
 import type { Context } from "../context.ts";
 import { Resource } from "../resource.ts";
 import { type CloudflareApi, type CloudflareApiOptions } from "./api.ts";
-import type { Zone } from "./zone.ts";
+import { type Zone } from "./zone.ts";
 /**
  * Certificate Authority options for Advanced Certificate Packs
  */

package/lib/cloudflare/certificate-pack.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"certificate-pack.d.ts","sourceRoot":"","sources":["../../src/cloudflare/certificate-pack.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAG1C,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,oBAAoB,EAC1B,MAAM,UAAU,CAAC;AAClB,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEtC;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAAG,QAAQ,GAAG,cAAc,GAAG,SAAS,CAAC;AAEzE;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG,KAAK,GAAG,MAAM,GAAG,OAAO,CAAC;AAExD;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;AAE9C;;GAEG;AACH,MAAM,MAAM,qBAAqB,GAC7B,cAAc,GACd,oBAAoB,GACpB,SAAS,GACT,kBAAkB,GAClB,oBAAoB,GACpB,kBAAkB,GAClB,oBAAoB,GACpB,SAAS,GACT,QAAQ,GACR,wBAAwB,GACxB,sBAAsB,GACtB,oBAAoB,GACpB,sBAAsB,GACtB,oBAAoB,GACpB,iBAAiB,GACjB,oBAAoB,GACpB,gBAAgB,GAChB,cAAc,GACd,UAAU,GACV,eAAe,GACf,oBAAoB,CAAC;AAEzB;;GAEG;AACH,MAAM,WAAW,oBAAqB,SAAQ,oBAAoB;IAChE;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAErB;;;;;;;;OAQG;IACH,oBAAoB,EAAE,oBAAoB,CAAC;IAE3C;;;;;;OAMG;IACH,KAAK,EAAE,MAAM,EAAE,CAAC;IAEhB;;;;;OAKG;IACH,IAAI,CAAC,EAAE,UAAU,CAAC;IAElB;;;;;;;OAOG;IACH,gBAAgB,EAAE,gBAAgB,CAAC;IAEnC;;;;;OAKG;IACH,YAAY,EAAE,YAAY,CAAC;IAE3B;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAE7B;;;;;OAKG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,eACf,SAAQ,QAAQ,CAAC,6BAA6B,CAAC;IAC/C;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IAEX;;OAEG;IACH,oBAAoB,EAAE,oBAAoB,CAAC;IAE3C;;OAEG;IACH,kBAAkB,EAAE,OAAO,CAAC;IAE5B;;OAEG;IACH,KAAK,EAAE,MAAM,EAAE,CAAC;IAEhB;;OAEG;IACH,MAAM,EAAE,qBAAqB,CAAC;IAE9B;;OAEG;IACH,IAAI,EAAE,UAAU,CAAC;IAEjB;;OAEG;IACH,gBAAgB,EAAE,gBAAgB,CAAC;IAEnC;;OAEG;IACH,YAAY,EAAE,YAAY,CAAC;IAE3B;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6DG;AACH,eAAO,MAAM,eAAe,yFAGlB,OAAO,CAAC,eAAe,CAAC,OACzB,MAAM,SACJ,oBAAoB,KAC1B,OAAO,CAAC,eAAe,CAAC,CAoQ5B,CAAC;AAiBF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,4BAA4B,CAChD,GAAG,EAAE,aAAa,EAClB,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,MAAM,EACzB,SAAS,GAAE,MAAuB,GACjC,OAAO,CAAC,qBAAqB,CAAC,CAuChC"}
+{"version":3,"file":"certificate-pack.d.ts","sourceRoot":"","sources":["../../src/cloudflare/certificate-pack.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAG1C,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,oBAAoB,EAC1B,MAAM,UAAU,CAAC;AAClB,OAAO,EAAuB,KAAK,IAAI,EAAE,MAAM,WAAW,CAAC;AAE3D;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAAG,QAAQ,GAAG,cAAc,GAAG,SAAS,CAAC;AAEzE;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG,KAAK,GAAG,MAAM,GAAG,OAAO,CAAC;AAExD;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;AAE9C;;GAEG;AACH,MAAM,MAAM,qBAAqB,GAC7B,cAAc,GACd,oBAAoB,GACpB,SAAS,GACT,kBAAkB,GAClB,oBAAoB,GACpB,kBAAkB,GAClB,oBAAoB,GACpB,SAAS,GACT,QAAQ,GACR,wBAAwB,GACxB,sBAAsB,GACtB,oBAAoB,GACpB,sBAAsB,GACtB,oBAAoB,GACpB,iBAAiB,GACjB,oBAAoB,GACpB,gBAAgB,GAChB,cAAc,GACd,UAAU,GACV,eAAe,GACf,oBAAoB,CAAC;AAEzB;;GAEG;AACH,MAAM,WAAW,oBAAqB,SAAQ,oBAAoB;IAChE;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAErB;;;;;;;;OAQG;IACH,oBAAoB,EAAE,oBAAoB,CAAC;IAE3C;;;;;;OAMG;IACH,KAAK,EAAE,MAAM,EAAE,CAAC;IAEhB;;;;;OAKG;IACH,IAAI,CAAC,EAAE,UAAU,CAAC;IAElB;;;;;;;OAOG;IACH,gBAAgB,EAAE,gBAAgB,CAAC;IAEnC;;;;;OAKG;IACH,YAAY,EAAE,YAAY,CAAC;IAE3B;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAE7B;;;;;OAKG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,eACf,SAAQ,QAAQ,CAAC,6BAA6B,CAAC;IAC/C;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IAEX;;OAEG;IACH,oBAAoB,EAAE,oBAAoB,CAAC;IAE3C;;OAEG;IACH,kBAAkB,EAAE,OAAO,CAAC;IAE5B;;OAEG;IACH,KAAK,EAAE,MAAM,EAAE,CAAC;IAEhB;;OAEG;IACH,MAAM,EAAE,qBAAqB,CAAC;IAE9B;;OAEG;IACH,IAAI,EAAE,UAAU,CAAC;IAEjB;;OAEG;IACH,gBAAgB,EAAE,gBAAgB,CAAC;IAEnC;;OAEG;IACH,YAAY,EAAE,YAAY,CAAC;IAE3B;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6DG;AACH,eAAO,MAAM,eAAe,yFAGlB,OAAO,CAAC,eAAe,CAAC,OACzB,MAAM,SACJ,oBAAoB,KAC1B,OAAO,CAAC,eAAe,CAAC,CAqL5B,CAAC;AAeF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,4BAA4B,CAChD,GAAG,EAAE,aAAa,EAClB,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,MAAM,EACzB,SAAS,GAAE,MAAuB,GACjC,OAAO,CAAC,qBAAqB,CAAC,CAuChC"}

package/lib/cloudflare/certificate-pack.js

@@ -2,6 +2,7 @@ import { Resource } from "../resource.js";
 import { logger } from "../util/logger.js";
 import { handleApiError } from "./api-error.js";
 import { createCloudflareApi, } from "./api.js";
+import { findZoneForHostname } from "./zone.js";
 /**
  * Creates and manages Cloudflare Advanced Certificate Packs.
  *
@@ -108,7 +109,12 @@ export const CertificatePack = Resource("cloudflare::CertificatePack", async fun
     if (this.phase === "delete") {
         if (this.output?.id && props.delete !== false) {
             const deleteResponse = await api.delete(`/zones/${zoneId}/ssl/certificate_packs/${this.output.id}`);
-            if (!deleteResponse.ok && deleteResponse.status !== 404) {
+            const deleteResponseJson = (await deleteResponse.json());
+            const isCurrentlyDeleting = deleteResponse.status === 400 &&
+                deleteResponseJson.errors[0].code === 1406;
+            if (!deleteResponse.ok &&
+                deleteResponse.status !== 404 &&
+                !isCurrentlyDeleting) {
                 await handleApiError(deleteResponse, "delete", "certificate pack", this.output.id);
             }
         }
@@ -118,53 +124,7 @@ export const CertificatePack = Resource("cloudflare::CertificatePack", async fun
         return this.destroy();
     }
     if (this.phase === "update" && this.output?.id) {
-        // Validate immutable properties
-        const currentPack = this.output;
-        if (props.certificateAuthority !== currentPack.certificateAuthority) {
-            throw new Error(`Cannot change certificateAuthority from '${currentPack.certificateAuthority}' to '${props.certificateAuthority}'. Certificate Authority is immutable after creation. You must delete and recreate the certificate pack.`);
-        }
-        if (JSON.stringify(props.hosts.sort()) !==
-            JSON.stringify(currentPack.hosts.sort())) {
-            throw new Error(`Cannot change hosts from [${currentPack.hosts.join(", ")}] to [${props.hosts.join(", ")}]. Hosts are immutable after creation. You must delete and recreate the certificate pack.`);
-        }
-        if (props.validationMethod !== currentPack.validationMethod) {
-            throw new Error(`Cannot change validationMethod from '${currentPack.validationMethod}' to '${props.validationMethod}'. Validation method is immutable after creation. You must delete and recreate the certificate pack.`);
-        }
-        if (props.validityDays !== currentPack.validityDays) {
-            throw new Error(`Cannot change validityDays from ${currentPack.validityDays} to ${props.validityDays}. Validity period is immutable after creation. You must delete and recreate the certificate pack.`);
-        }
-        const type = props.type || "advanced";
-        if (type !== currentPack.type) {
-            throw new Error(`Cannot change type from '${currentPack.type}' to '${type}'. Type is immutable after creation. You must delete and recreate the certificate pack.`);
-        }
-        // Only cloudflareBranding can be updated
-        if (props.cloudflareBranding !== currentPack.cloudflareBranding) {
-            logger.log(`Updating certificate pack cloudflare branding from ${currentPack.cloudflareBranding} to ${props.cloudflareBranding}`);
-            const updateResponse = await api.patch(`/zones/${zoneId}/ssl/certificate_packs/${this.output.id}`, {
-                cloudflare_branding: props.cloudflareBranding || false,
-            });
-            if (!updateResponse.ok) {
-                await handleApiError(updateResponse, "update", "certificate pack", this.output.id);
-            }
-        }
-        // Get updated certificate pack details
-        const response = await api.get(`/zones/${zoneId}/ssl/certificate_packs/${this.output.id}`);
-        if (!response.ok) {
-            await handleApiError(response, "get", "certificate pack", this.output.id);
-        }
-        const updatedPack = (await response.json()).result;
-        return this({
-            id: updatedPack.id,
-            certificateAuthority: updatedPack.certificate_authority,
-            cloudflareBranding: updatedPack.cloudflare_branding,
-            hosts: updatedPack.hosts,
-            status: updatedPack.status,
-            type: updatedPack.type,
-            validationMethod: updatedPack.validation_method,
-            validityDays: updatedPack.validity_days,
-            zoneId: updatedPack.zone_id,
-            zoneName: zoneName,
-        });
+        this.replace();
     }
     // Create new certificate pack
     if (props.hosts.length === 0) {
@@ -186,13 +146,13 @@ export const CertificatePack = Resource("cloudflare::CertificatePack", async fun
         return this({
             id: existingPack.id,
             certificateAuthority: existingPack.certificate_authority,
-            cloudflareBranding: existingPack.cloudflare_branding,
+            cloudflareBranding: props.cloudflareBranding ?? false,
             hosts: existingPack.hosts,
             status: existingPack.status,
             type: existingPack.type,
             validationMethod: existingPack.validation_method,
             validityDays: existingPack.validity_days,
-            zoneId: existingPack.zone_id,
+            zoneId,
             zoneName: zoneName,
         });
     }
@@ -222,13 +182,13 @@ export const CertificatePack = Resource("cloudflare::CertificatePack", async fun
     return this({
         id: createdPack.id,
         certificateAuthority: createdPack.certificate_authority,
-        cloudflareBranding: createdPack.cloudflare_branding,
+        cloudflareBranding: props.cloudflareBranding ?? false,
         hosts: createdPack.hosts,
         status: createdPack.status,
         type: createdPack.type,
         validationMethod: createdPack.validation_method,
         validityDays: createdPack.validity_days,
-        zoneId: createdPack.zone_id,
+        zoneId,
         zoneName: zoneName,
     });
 });
@@ -275,41 +235,6 @@ export async function waitForCertificatePackActive(api, zoneId, certificatePackI
     }
     throw new Error(`Certificate pack did not become active within ${timeoutMs / 1000 / 60} minutes`);
 }
-/**
- * Helper function to find zone ID from a hostname
- * Searches for the zone that matches the hostname or its parent domains
- *
- * @param api CloudflareApi instance
- * @param hostname The hostname to find the zone for
- * @returns Promise resolving to the zone ID and zone name
- */
-async function findZoneForHostname(api, hostname) {
-    // Remove wildcard prefix if present
-    const cleanHostname = hostname.replace(/^\*\./, "");
-    // Get all zones and find the best match
-    const response = await api.get("/zones");
-    if (!response.ok) {
-        throw new Error(`Failed to list zones: ${response.statusText}`);
-    }
-    const zonesData = (await response.json());
-    // Find the zone that best matches the hostname
-    // We look for the longest matching zone name (most specific)
-    let bestMatch = null;
-    let longestMatch = 0;
-    for (const zone of zonesData.result) {
-        if (cleanHostname === zone.name ||
-            cleanHostname.endsWith(`.${zone.name}`)) {
-            if (zone.name.length > longestMatch) {
-                longestMatch = zone.name.length;
-                bestMatch = { zoneId: zone.id, zoneName: zone.name };
-            }
-        }
-    }
-    if (!bestMatch) {
-        throw new Error(`Could not find zone for hostname '${hostname}'. Available zones: ${zonesData.result.map((z) => z.name).join(", ")}`);
-    }
-    return bestMatch;
-}
 /**
  * Helper function to find existing certificate packs that match the given configuration
  * Used to adopt existing certificates instead of creating duplicates
@@ -320,7 +245,7 @@ async function findZoneForHostname(api, hostname) {
  * @returns Promise resolving to matching certificate pack or null if none found
  */
 async function findMatchingCertificatePack(api, zoneId, props) {
-    const response = await api.get(`/zones/${zoneId}/ssl/certificate_packs`);
+    const response = await api.get(`/zones/${zoneId}/ssl/certificate_packs?status=all`);
     if (!response.ok) {
         throw new Error(`Failed to list certificate packs: ${response.statusText}`);
     }
@@ -340,6 +265,11 @@ async function findMatchingCertificatePack(api, zoneId, props) {
             const packHosts = new Set(pack.hosts);
             const allHostsCovered = props.hosts.every((host) => packHosts.has(host));
             if (allHostsCovered) {
+                // If Cloudflare branding is enabled, ensure that the cert pack is cloudflare branded`
+                if (props.cloudflareBranding &&
+                    !pack.hosts.some((host) => host.endsWith("sni.cloudflaressl.com"))) {
+                    continue;
+                }
                 logger.log(`Found existing certificate pack ${pack.id} that covers all requested hosts`);
                 return pack;
             }

package/lib/cloudflare/certificate-pack.js.map

@@ -1 +1 @@
-{"version":3,"file":"certificate-pack.js","sourceRoot":"","sources":["../../src/cloudflare/certificate-pack.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EACL,mBAAmB,GAGpB,MAAM,UAAU,CAAC;AA8KlB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6DG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,QAAQ,CACrC,6BAA6B,EAC7B,KAAK,WAEH,GAAW,EACX,KAA2B;IAE3B,gEAAgE;IAChE,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAE7C,gCAAgC;IAChC,IAAI,MAAc,CAAC;IACnB,IAAI,QAAgB,CAAC;IAErB,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QACf,yBAAyB;QACzB,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACnC,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC;YACpB,0DAA0D;YAC1D,IAAI,CAAC;gBACH,MAAM,YAAY,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,UAAU,MAAM,EAAE,CAAC,CAAC;gBACvD,IAAI,YAAY,CAAC,EAAE,EAAE,CAAC;oBACpB,MAAM,QAAQ,GAAG,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,CAE1C,CAAC;oBACF,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;gBAClC,CAAC;qBAAM,CAAC;oBACN,QAAQ,GAAG,MAAM,CAAC,CAAC,iBAAiB;gBACtC,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ,GAAG,MAAM,CAAC,CAAC,iBAAiB;YACtC,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,CAAC;IACH,CAAC;SAAM,CAAC;QACN,sCAAsC;QACtC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,+DAA+D,CAChE,CAAC;QACJ,CAAC;QAED,MAAM,CAAC,GAAG,CAAC,sCAAsC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACnE,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAChE,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QACzB,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,uBAAuB,QAAQ,KAAK,MAAM,GAAG,CAAC,CAAC;IAC5D,CAAC;IAED,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC9C,MAAM,cAAc,GAAG,MAAM,GAAG,CAAC,MAAM,CACrC,UAAU,MAAM,0BAA0B,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAC3D,CAAC;YAEF,IAAI,CAAC,cAAc,CAAC,EAAE,IAAI,cAAc,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACxD,MAAM,cAAc,CAClB,cAAc,EACd,QAAQ,EACR,kBAAkB,EAClB,IAAI,CAAC,MAAM,CAAC,EAAE,CACf,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;IACxB,CAAC;IAED,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC;QAC/C,gCAAgC;QAChC,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC;QAEhC,IAAI,KAAK,CAAC,oBAAoB,KAAK,WAAW,CAAC,oBAAoB,EAAE,CAAC;YACpE,MAAM,IAAI,KAAK,CACb,4CAA4C,WAAW,CAAC,oBAAoB,SAAS,KAAK,CAAC,oBAAoB,0GAA0G,CAC1N,CAAC;QACJ,CAAC;QAED,IACE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAClC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,EACxC,CAAC;YACD,MAAM,IAAI,KAAK,CACb,6BAA6B,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,2FAA2F,CACpL,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,CAAC,gBAAgB,KAAK,WAAW,CAAC,gBAAgB,EAAE,CAAC;YAC5D,MAAM,IAAI,KAAK,CACb,wCAAwC,WAAW,CAAC,gBAAgB,SAAS,KAAK,CAAC,gBAAgB,sGAAsG,CAC1M,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,CAAC,YAAY,KAAK,WAAW,CAAC,YAAY,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CACb,mCAAmC,WAAW,CAAC,YAAY,OAAO,KAAK,CAAC,YAAY,mGAAmG,CACxL,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,UAAU,CAAC;QACtC,IAAI,IAAI,KAAK,WAAW,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CACb,4BAA4B,WAAW,CAAC,IAAI,SAAS,IAAI,yFAAyF,CACnJ,CAAC;QACJ,CAAC;QAED,yCAAyC;QACzC,IAAI,KAAK,CAAC,kBAAkB,KAAK,WAAW,CAAC,kBAAkB,EAAE,CAAC;YAChE,MAAM,CAAC,GAAG,CACR,sDAAsD,WAAW,CAAC,kBAAkB,OAAO,KAAK,CAAC,kBAAkB,EAAE,CACtH,CAAC;YAEF,MAAM,cAAc,GAAG,MAAM,GAAG,CAAC,KAAK,CACpC,UAAU,MAAM,0BAA0B,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,EAC1D;gBACE,mBAAmB,EAAE,KAAK,CAAC,kBAAkB,IAAI,KAAK;aACvD,CACF,CAAC;YAEF,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;gBACvB,MAAM,cAAc,CAClB,cAAc,EACd,QAAQ,EACR,kBAAkB,EAClB,IAAI,CAAC,MAAM,CAAC,EAAE,CACf,CAAC;YACJ,CAAC;QACH,CAAC;QAED,uCAAuC;QACvC,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,GAAG,CAC5B,UAAU,MAAM,0BAA0B,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAC3D,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,cAAc,CAClB,QAAQ,EACR,KAAK,EACL,kBAAkB,EAClB,IAAI,CAAC,MAAM,CAAC,EAAE,CACf,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GACf,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CACvB,CAAC,MAAM,CAAC;QAET,OAAO,IAAI,CAAC;YACV,EAAE,EAAE,WAAW,CAAC,EAAE;YAClB,oBAAoB,EAAE,WAAW,CAAC,qBAAqB;YACvD,kBAAkB,EAAE,WAAW,CAAC,mBAAmB;YACnD,KAAK,EAAE,WAAW,CAAC,KAAK;YACxB,MAAM,EAAE,WAAW,CAAC,MAAM;YAC1B,IAAI,EAAE,WAAW,CAAC,IAAI;YACtB,gBAAgB,EAAE,WAAW,CAAC,iBAAiB;YAC/C,YAAY,EAAE,WAAW,CAAC,aAAa;YACvC,MAAM,EAAE,WAAW,CAAC,OAAO;YAC3B,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAC;IACL,CAAC;IAED,8BAA8B;IAC9B,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IAED,sCAAsC;IACtC,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAClC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,QAAQ,IAAI,IAAI,KAAK,QAAQ,CAAC,CAC/D,CAAC;IAEF,IAAI,CAAC,WAAW,IAAI,QAAQ,EAAE,CAAC;QAC7B,MAAM,CAAC,IAAI,CACT,cAAc,QAAQ,2EAA2E,CAClG,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,MAAM,YAAY,GAAG,MAAM,2BAA2B,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAE3E,IAAI,YAAY,EAAE,CAAC;QACjB,sCAAsC;QACtC,MAAM,CAAC,GAAG,CACR,sCAAsC,YAAY,CAAC,EAAE,gCAAgC,CACtF,CAAC;QAEF,OAAO,IAAI,CAAC;YACV,EAAE,EAAE,YAAY,CAAC,EAAE;YACnB,oBAAoB,EAAE,YAAY,CAAC,qBAAqB;YACxD,kBAAkB,EAAE,YAAY,CAAC,mBAAmB;YACpD,KAAK,EAAE,YAAY,CAAC,KAAK;YACzB,MAAM,EAAE,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,YAAY,CAAC,IAAI;YACvB,gBAAgB,EAAE,YAAY,CAAC,iBAAiB;YAChD,YAAY,EAAE,YAAY,CAAC,aAAa;YACxC,MAAM,EAAE,YAAY,CAAC,OAAO;YAC5B,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,GAAG,CACR,kCAAkC,KAAK,CAAC,KAAK,CAAC,MAAM,gBAAgB,KAAK,CAAC,oBAAoB,EAAE,CACjG,CAAC;IAEF,MAAM,cAAc,GAAG,MAAM,GAAG,CAAC,IAAI,CACnC,UAAU,MAAM,8BAA8B,EAC9C;QACE,qBAAqB,EAAE,KAAK,CAAC,oBAAoB;QACjD,mBAAmB,EAAE,KAAK,CAAC,kBAAkB,IAAI,KAAK;QACtD,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,UAAU;QAC9B,iBAAiB,EAAE,KAAK,CAAC,gBAAgB;QACzC,aAAa,EAAE,KAAK,CAAC,YAAY;KAClC,CACF,CAAC;IAEF,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,CAAC;QAE9C,mDAAmD;QACnD,IAAI,SAAS,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CACb,0KAA0K,SAAS,EAAE,CACtL,CAAC;QACJ,CAAC;QAED,IAAI,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CACb,4HAA4H,SAAS,EAAE,CACxI,CAAC;QACJ,CAAC;QAED,sCAAsC;QACtC,MAAM,IAAI,KAAK,CACb,sCAAsC,cAAc,CAAC,UAAU,OAAO,SAAS,EAAE,CAClF,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GACf,CAAC,MAAM,cAAc,CAAC,IAAI,EAAE,CAC7B,CAAC,MAAM,CAAC;IAET,MAAM,CAAC,GAAG,CACR,oCAAoC,WAAW,CAAC,EAAE,aAAa,WAAW,CAAC,MAAM,6DAA6D,CAC/I,CAAC;IAEF,OAAO,IAAI,CAAC;QACV,EAAE,EAAE,WAAW,CAAC,EAAE;QAClB,oBAAoB,EAAE,WAAW,CAAC,qBAAqB;QACvD,kBAAkB,EAAE,WAAW,CAAC,mBAAmB;QACnD,KAAK,EAAE,WAAW,CAAC,KAAK;QACxB,MAAM,EAAE,WAAW,CAAC,MAAM;QAC1B,IAAI,EAAE,WAAW,CAAC,IAAI;QACtB,gBAAgB,EAAE,WAAW,CAAC,iBAAiB;QAC/C,YAAY,EAAE,WAAW,CAAC,aAAa;QACvC,MAAM,EAAE,WAAW,CAAC,OAAO;QAC3B,QAAQ,EAAE,QAAQ;KACnB,CAAC,CAAC;AACL,CAAC,CACF,CAAC;AAiBF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,GAAkB,EAClB,MAAc,EACd,iBAAyB,EACzB,YAAoB,EAAE,GAAG,EAAE,GAAG,IAAI;IAElC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,YAAY,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,wBAAwB;IAExD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,SAAS,EAAE,CAAC;QAC1C,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,GAAG,CAC5B,UAAU,MAAM,0BAA0B,iBAAiB,EAAE,CAC9D,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CACb,4CAA4C,QAAQ,CAAC,UAAU,EAAE,CAClE,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GACR,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CACvB,CAAC,MAAM,CAAC;QAET,yDAAyD;QACzD,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,CAAC;QAED,IACE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;YACjC,IAAI,CAAC,MAAM,KAAK,SAAS;YACzB,IAAI,CAAC,MAAM,KAAK,SAAS,EACzB,CAAC;YACD,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,CAAC;QAED,wBAAwB;QACxB,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,IAAI,KAAK,CACb,iDAAiD,SAAS,GAAG,IAAI,GAAG,EAAE,UAAU,CACjF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,mBAAmB,CAChC,GAAkB,EAClB,QAAgB;IAEhB,oCAAoC;IACpC,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAEpD,wCAAwC;IACxC,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAEzC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,yBAAyB,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;IAClE,CAAC;IAED,MAAM,SAAS,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAEvC,CAAC;IAEF,+CAA+C;IAC/C,6DAA6D;IAC7D,IAAI,SAAS,GAAgD,IAAI,CAAC;IAClE,IAAI,YAAY,GAAG,CAAC,CAAC;IAErB,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;QACpC,IACE,aAAa,KAAK,IAAI,CAAC,IAAI;YAC3B,aAAa,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,EACvC,CAAC;YACD,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,YAAY,EAAE,CAAC;gBACpC,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;gBAChC,SAAS,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;YACvD,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,qCAAqC,QAAQ,uBAAuB,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACrH,CAAC;IACJ,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,2BAA2B,CACxC,GAAkB,EAClB,MAAc,EACd,KAA2B;IAE3B,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,UAAU,MAAM,wBAAwB,CAAC,CAAC;IAEzE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,qCAAqC,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,SAAS,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAEvC,CAAC;IAEF,yDAAyD;IACzD,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;QACpC,gCAAgC;QAChC,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC3D,SAAS;QACX,CAAC;QAED,qCAAqC;QACrC,IACE,IAAI,CAAC,qBAAqB,KAAK,KAAK,CAAC,oBAAoB;YACzD,IAAI,CAAC,iBAAiB,KAAK,KAAK,CAAC,gBAAgB;YACjD,IAAI,CAAC,aAAa,KAAK,KAAK,CAAC,YAAY;YACzC,IAAI,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,IAAI,UAAU,CAAC,EACxC,CAAC;YACD,oEAAoE;YACpE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACtC,MAAM,eAAe,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;YAEzE,IAAI,eAAe,EAAE,CAAC;gBACpB,MAAM,CAAC,GAAG,CACR,mCAAmC,IAAI,CAAC,EAAE,kCAAkC,CAC7E,CAAC;gBACF,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"certificate-pack.js","sourceRoot":"","sources":["../../src/cloudflare/certificate-pack.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EACL,mBAAmB,GAGpB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,mBAAmB,EAAa,MAAM,WAAW,CAAC;AA6K3D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6DG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,QAAQ,CACrC,6BAA6B,EAC7B,KAAK,WAEH,GAAW,EACX,KAA2B;IAE3B,gEAAgE;IAChE,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAE7C,gCAAgC;IAChC,IAAI,MAAc,CAAC;IACnB,IAAI,QAAgB,CAAC;IAErB,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QACf,yBAAyB;QACzB,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACnC,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC;YACpB,0DAA0D;YAC1D,IAAI,CAAC;gBACH,MAAM,YAAY,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,UAAU,MAAM,EAAE,CAAC,CAAC;gBACvD,IAAI,YAAY,CAAC,EAAE,EAAE,CAAC;oBACpB,MAAM,QAAQ,GAAG,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,CAE1C,CAAC;oBACF,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;gBAClC,CAAC;qBAAM,CAAC;oBACN,QAAQ,GAAG,MAAM,CAAC,CAAC,iBAAiB;gBACtC,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ,GAAG,MAAM,CAAC,CAAC,iBAAiB;YACtC,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,CAAC;IACH,CAAC;SAAM,CAAC;QACN,sCAAsC;QACtC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,+DAA+D,CAChE,CAAC;QACJ,CAAC;QAED,MAAM,CAAC,GAAG,CAAC,sCAAsC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACnE,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAChE,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QACzB,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,uBAAuB,QAAQ,KAAK,MAAM,GAAG,CAAC,CAAC;IAC5D,CAAC;IAED,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC9C,MAAM,cAAc,GAAG,MAAM,GAAG,CAAC,MAAM,CACrC,UAAU,MAAM,0BAA0B,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAC3D,CAAC;YACF,MAAM,kBAAkB,GAAG,CAAC,MAAM,cAAc,CAAC,IAAI,EAAE,CAEtD,CAAC;YACF,MAAM,mBAAmB,GACvB,cAAc,CAAC,MAAM,KAAK,GAAG;gBAC7B,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC;YAE7C,IACE,CAAC,cAAc,CAAC,EAAE;gBAClB,cAAc,CAAC,MAAM,KAAK,GAAG;gBAC7B,CAAC,mBAAmB,EACpB,CAAC;gBACD,MAAM,cAAc,CAClB,cAAc,EACd,QAAQ,EACR,kBAAkB,EAClB,IAAI,CAAC,MAAM,CAAC,EAAE,CACf,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;IACxB,CAAC;IAED,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC;QAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IAED,8BAA8B;IAC9B,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IAED,sCAAsC;IACtC,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAClC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,QAAQ,IAAI,IAAI,KAAK,QAAQ,CAAC,CAC/D,CAAC;IAEF,IAAI,CAAC,WAAW,IAAI,QAAQ,EAAE,CAAC;QAC7B,MAAM,CAAC,IAAI,CACT,cAAc,QAAQ,2EAA2E,CAClG,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,MAAM,YAAY,GAAG,MAAM,2BAA2B,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAE3E,IAAI,YAAY,EAAE,CAAC;QACjB,sCAAsC;QACtC,MAAM,CAAC,GAAG,CACR,sCAAsC,YAAY,CAAC,EAAE,gCAAgC,CACtF,CAAC;QAEF,OAAO,IAAI,CAAC;YACV,EAAE,EAAE,YAAY,CAAC,EAAE;YACnB,oBAAoB,EAAE,YAAY,CAAC,qBAAqB;YACxD,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,IAAI,KAAK;YACrD,KAAK,EAAE,YAAY,CAAC,KAAK;YACzB,MAAM,EAAE,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,YAAY,CAAC,IAAI;YACvB,gBAAgB,EAAE,YAAY,CAAC,iBAAiB;YAChD,YAAY,EAAE,YAAY,CAAC,aAAa;YACxC,MAAM;YACN,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,GAAG,CACR,kCAAkC,KAAK,CAAC,KAAK,CAAC,MAAM,gBAAgB,KAAK,CAAC,oBAAoB,EAAE,CACjG,CAAC;IAEF,MAAM,cAAc,GAAG,MAAM,GAAG,CAAC,IAAI,CACnC,UAAU,MAAM,8BAA8B,EAC9C;QACE,qBAAqB,EAAE,KAAK,CAAC,oBAAoB;QACjD,mBAAmB,EAAE,KAAK,CAAC,kBAAkB,IAAI,KAAK;QACtD,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,UAAU;QAC9B,iBAAiB,EAAE,KAAK,CAAC,gBAAgB;QACzC,aAAa,EAAE,KAAK,CAAC,YAAY;KAClC,CACF,CAAC;IAEF,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,CAAC;QAE9C,mDAAmD;QACnD,IAAI,SAAS,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CACb,0KAA0K,SAAS,EAAE,CACtL,CAAC;QACJ,CAAC;QAED,IAAI,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CACb,4HAA4H,SAAS,EAAE,CACxI,CAAC;QACJ,CAAC;QAED,sCAAsC;QACtC,MAAM,IAAI,KAAK,CACb,sCAAsC,cAAc,CAAC,UAAU,OAAO,SAAS,EAAE,CAClF,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GACf,CAAC,MAAM,cAAc,CAAC,IAAI,EAAE,CAC7B,CAAC,MAAM,CAAC;IAET,MAAM,CAAC,GAAG,CACR,oCAAoC,WAAW,CAAC,EAAE,aAAa,WAAW,CAAC,MAAM,6DAA6D,CAC/I,CAAC;IAEF,OAAO,IAAI,CAAC;QACV,EAAE,EAAE,WAAW,CAAC,EAAE;QAClB,oBAAoB,EAAE,WAAW,CAAC,qBAAqB;QACvD,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,IAAI,KAAK;QACrD,KAAK,EAAE,WAAW,CAAC,KAAK;QACxB,MAAM,EAAE,WAAW,CAAC,MAAM;QAC1B,IAAI,EAAE,WAAW,CAAC,IAAI;QACtB,gBAAgB,EAAE,WAAW,CAAC,iBAAiB;QAC/C,YAAY,EAAE,WAAW,CAAC,aAAa;QACvC,MAAM;QACN,QAAQ,EAAE,QAAQ;KACnB,CAAC,CAAC;AACL,CAAC,CACF,CAAC;AAeF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,GAAkB,EAClB,MAAc,EACd,iBAAyB,EACzB,YAAoB,EAAE,GAAG,EAAE,GAAG,IAAI;IAElC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,YAAY,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,wBAAwB;IAExD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,SAAS,EAAE,CAAC;QAC1C,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,GAAG,CAC5B,UAAU,MAAM,0BAA0B,iBAAiB,EAAE,CAC9D,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CACb,4CAA4C,QAAQ,CAAC,UAAU,EAAE,CAClE,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GACR,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CACvB,CAAC,MAAM,CAAC;QAET,yDAAyD;QACzD,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,CAAC;QAED,IACE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;YACjC,IAAI,CAAC,MAAM,KAAK,SAAS;YACzB,IAAI,CAAC,MAAM,KAAK,SAAS,EACzB,CAAC;YACD,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,CAAC;QAED,wBAAwB;QACxB,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,IAAI,KAAK,CACb,iDAAiD,SAAS,GAAG,IAAI,GAAG,EAAE,UAAU,CACjF,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,2BAA2B,CACxC,GAAkB,EAClB,MAAc,EACd,KAA2B;IAE3B,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,GAAG,CAC5B,UAAU,MAAM,mCAAmC,CACpD,CAAC;IAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,qCAAqC,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,SAAS,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAEvC,CAAC;IAEF,yDAAyD;IACzD,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;QACpC,gCAAgC;QAChC,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC3D,SAAS;QACX,CAAC;QAED,qCAAqC;QACrC,IACE,IAAI,CAAC,qBAAqB,KAAK,KAAK,CAAC,oBAAoB;YACzD,IAAI,CAAC,iBAAiB,KAAK,KAAK,CAAC,gBAAgB;YACjD,IAAI,CAAC,aAAa,KAAK,KAAK,CAAC,YAAY;YACzC,IAAI,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,IAAI,UAAU,CAAC,EACxC,CAAC;YACD,oEAAoE;YACpE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACtC,MAAM,eAAe,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;YAEzE,IAAI,eAAe,EAAE,CAAC;gBACpB,sFAAsF;gBACtF,IACE,KAAK,CAAC,kBAAkB;oBACxB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC,EAClE,CAAC;oBACD,SAAS;gBACX,CAAC;gBACD,MAAM,CAAC,GAAG,CACR,mCAAmC,IAAI,CAAC,EAAE,kCAAkC,CAC7E,CAAC;gBACF,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}