alchemy 2.0.0-beta.55 → 2.0.0-beta.56

package/lib/Cloudflare/ResourceSharing/Share.js

@@ -0,0 +1,254 @@
+import * as resourceSharing from "@distilled.cloud/cloudflare/resource-sharing";
+import * as Effect from "effect/Effect";
+import * as Predicate from "effect/Predicate";
+import * as Stream from "effect/Stream";
+import { isResolved } from "../../Diff.js";
+import { createPhysicalName } from "../../PhysicalName.js";
+import * as Provider from "../../Provider.js";
+import { Resource } from "../../Resource.js";
+import { CloudflareEnvironment } from "../CloudflareEnvironment.js";
+const ShareTypeId = "Cloudflare.ResourceSharing.Share";
+/**
+ * A Cloudflare resource share — shares account-level configuration (gateway
+ * policies, custom rulesets, IdP federation grants, …) with another account
+ * or organization.
+ *
+ * The create API requires at least one recipient and one resource, so both
+ * are seeded inline. Post-create changes to those arrays are reconciled
+ * through the recipient/resource sub-APIs; only `name` is mutable on the
+ * share itself. Deletion is asynchronous (`active → deleting → deleted`).
+ *
+ * @section Creating a Share
+ * @example Share a gateway policy with another account
+ * ```typescript
+ * const policy = yield* Cloudflare.GatewayRule("BlockPhishing", {
+ *   action: "block",
+ *   traffic: 'dns.fqdn == "phishing.example"',
+ *   filters: ["dns"],
+ * });
+ *
+ * const share = yield* Cloudflare.Share("PolicyShare", {
+ *   recipients: [{ accountId: "<recipient-account-id>" }],
+ *   resources: [
+ *     { resourceType: "gateway-policy", resourceId: policy.ruleId },
+ *   ],
+ * });
+ * ```
+ *
+ * @section Updating a Share
+ * @example Rename in place
+ * ```typescript
+ * const share = yield* Cloudflare.Share("PolicyShare", {
+ *   name: "security-baseline-v2",
+ *   recipients: [{ accountId: "<recipient-account-id>" }],
+ *   resources: [
+ *     { resourceType: "gateway-policy", resourceId: policy.ruleId },
+ *   ],
+ * });
+ * ```
+ *
+ * @see https://developers.cloudflare.com/fundamentals/manage-account-resources/
+ */
+export const Share = Resource(ShareTypeId);
+/**
+ * Returns true if the given value is a Share resource.
+ */
+export const isShare = (value) => Predicate.hasProperty(value, "Type") && value.Type === ShareTypeId;
+export const ShareProvider = () => Provider.succeed(Share, {
+    stables: ["shareId", "accountId", "organizationId", "created"],
+    // Account collection — enumerate every share this account sends
+    // (the ones we own and can delete), exhaustively paginated, mapped
+    // into the same Attributes shape `read` returns. Deleted shares are
+    // excluded since they no longer exist.
+    list: Effect.fn(function* () {
+        const { accountId } = yield* yield* CloudflareEnvironment;
+        return yield* resourceSharing.listResourceSharings
+            .pages({ accountId, kind: "sent", perPage: 50 })
+            .pipe(Stream.runCollect, Effect.map((chunk) => Array.from(chunk).flatMap((page) => (page.result ?? [])
+            .filter((s) => s.status !== "deleted")
+            .map((s) => toAttributes(s, accountId)))));
+    }),
+    diff: Effect.fn(function* ({ news, output }) {
+        if (!isResolved(news))
+            return undefined;
+        const { accountId } = yield* yield* CloudflareEnvironment;
+        if ((output?.accountId ?? accountId) !== accountId) {
+            return { action: "replace" };
+        }
+        return undefined;
+    }),
+    read: Effect.fn(function* ({ id, olds, output }) {
+        const { accountId } = yield* yield* CloudflareEnvironment;
+        const acct = output?.accountId ?? accountId;
+        if (output?.shareId) {
+            const observed = yield* getShare(acct, output.shareId);
+            return observed ? toAttributes(observed, acct) : undefined;
+        }
+        // Cold read — recover from lost state by matching the deterministic
+        // physical name among shares we sent. Names are not unique on
+        // Cloudflare's side; an exact match is the best identity we have.
+        const name = yield* createShareName(id, olds?.name);
+        const match = yield* findByName(acct, name);
+        return match ? toAttributes(match, acct) : undefined;
+    }),
+    reconcile: Effect.fn(function* ({ id, news, output }) {
+        const { accountId } = yield* yield* CloudflareEnvironment;
+        const name = yield* createShareName(id, news.name);
+        const desiredRecipients = news.recipients.map((r) => ({
+            accountId: r.accountId,
+            organizationId: r.organizationId,
+        }));
+        const desiredResources = news.resources.map((r) => ({
+            resourceType: r.resourceType,
+            resourceId: r.resourceId,
+            resourceAccountId: r.resourceAccountId ?? accountId,
+            meta: r.meta ?? {},
+        }));
+        // Observe — the shareId cached on `output` is a hint, not a
+        // guarantee: a missing (or fully deleted) share falls through and
+        // we recreate.
+        const observed = output?.shareId
+            ? yield* getShare(output.accountId ?? accountId, output.shareId)
+            : undefined;
+        if (!observed) {
+            // Ensure — greenfield (or out-of-band delete): the create API
+            // requires both arrays, so seed them inline. Share names are not
+            // unique so there is no AlreadyExists race to tolerate.
+            const created = yield* resourceSharing.createResourceSharing({
+                accountId,
+                name,
+                recipients: desiredRecipients,
+                resources: desiredResources,
+            });
+            return toAttributes(created, accountId);
+        }
+        const acct = output?.accountId ?? accountId;
+        // Sync name — the only share-level mutable field.
+        if (observed.name !== name) {
+            yield* resourceSharing.updateResourceSharing({
+                accountId: acct,
+                shareId: observed.id,
+                name,
+            });
+        }
+        // Sync recipients — diff observed cloud state against desired and
+        // apply add/remove deltas through the recipient sub-API.
+        const observedRecipients = yield* resourceSharing.listRecipients({
+            accountId: acct,
+            shareId: observed.id,
+            perPage: 50,
+        });
+        const liveRecipients = observedRecipients.result.filter((r) => r.associationStatus !== "disassociated");
+        for (const desired of desiredRecipients) {
+            const match = liveRecipients.find((r) => r.accountId === (desired.accountId ?? desired.organizationId));
+            if (!match) {
+                yield* resourceSharing.createRecipient({
+                    pathAccountId: acct,
+                    shareId: observed.id,
+                    bodyAccountId: desired.accountId,
+                    organizationId: desired.organizationId,
+                });
+            }
+        }
+        for (const live of liveRecipients) {
+            const wanted = desiredRecipients.some((d) => (d.accountId ?? d.organizationId) === live.accountId);
+            if (!wanted) {
+                yield* resourceSharing
+                    .deleteRecipient({
+                    accountId: acct,
+                    shareId: observed.id,
+                    recipientId: live.id,
+                })
+                    .pipe(Effect.catchTag("ShareRecipientNotFound", () => Effect.void));
+            }
+        }
+        // Sync resources — keyed by (resourceType, resourceId): create
+        // missing entries, update `meta` in place, delete extras.
+        const observedResources = yield* resourceSharing.listResources({
+            accountId: acct,
+            shareId: observed.id,
+            perPage: 50,
+        });
+        const liveResources = observedResources.result.filter((r) => r.status !== "deleted" && r.status !== "deleting");
+        for (const desired of desiredResources) {
+            const match = liveResources.find((r) => r.resourceType === desired.resourceType &&
+                r.resourceId === desired.resourceId);
+            if (!match) {
+                yield* resourceSharing.createResource({
+                    accountId: acct,
+                    shareId: observed.id,
+                    resourceType: desired.resourceType,
+                    resourceId: desired.resourceId,
+                    resourceAccountId: desired.resourceAccountId,
+                    meta: desired.meta,
+                });
+            }
+            else if (JSON.stringify(match.meta ?? {}) !==
+                JSON.stringify(desired.meta ?? {})) {
+                yield* resourceSharing.updateResource({
+                    accountId: acct,
+                    shareId: observed.id,
+                    shareResourceId: match.id,
+                    meta: desired.meta,
+                });
+            }
+        }
+        for (const live of liveResources) {
+            const wanted = desiredResources.some((d) => d.resourceType === live.resourceType &&
+                d.resourceId === live.resourceId);
+            if (!wanted) {
+                yield* resourceSharing
+                    .deleteResource({
+                    accountId: acct,
+                    shareId: observed.id,
+                    shareResourceId: live.id,
+                })
+                    .pipe(Effect.catchTag("ShareResourceNotFound", () => Effect.void));
+            }
+        }
+        // Return — re-read for fresh attributes after the sub-API syncs.
+        const fresh = yield* getShare(acct, observed.id);
+        return fresh ? toAttributes(fresh, acct) : toAttributes(observed, acct);
+    }),
+    delete: Effect.fn(function* ({ output }) {
+        // Deletion is asynchronous (`active → deleting → deleted`); the
+        // DELETE call itself is idempotent against a missing share.
+        yield* resourceSharing
+            .deleteResourceSharing({
+            accountId: output.accountId,
+            shareId: output.shareId,
+        })
+            .pipe(Effect.catchTag("ShareNotFound", () => Effect.void));
+    }),
+});
+/**
+ * Read a share by id, mapping "gone" (`ShareNotFound`, Cloudflare error code
+ * 1004 / HTTP 404) and the terminal `deleted` status to `undefined`.
+ */
+const getShare = (accountId, shareId) => resourceSharing.getResourceSharing({ accountId, shareId }).pipe(Effect.map((share) => share.status === "deleted" ? undefined : share), Effect.catchTag("ShareNotFound", () => Effect.succeed(undefined)));
+/**
+ * Find a sent share by exact name. If several shares carry the same name,
+ * pick the oldest for determinism.
+ */
+const findByName = (accountId, name) => resourceSharing
+    .listResourceSharings({ accountId, kind: "sent", perPage: 50 })
+    .pipe(Effect.map((list) => list.result
+    .filter((s) => s.name === name && s.status !== "deleted")
+    .sort((a, b) => a.created.localeCompare(b.created))
+    .at(0)));
+const createShareName = (id, name) => Effect.gen(function* () {
+    return name ?? (yield* createPhysicalName({ id, lowercase: true }));
+});
+const toAttributes = (share, accountId) => ({
+    shareId: share.id,
+    accountId,
+    name: share.name,
+    // Distilled widens generated string enums to open unions (`string & {}`).
+    status: share.status,
+    targetType: share.targetType,
+    kind: (share.kind ?? "sent"),
+    organizationId: share.organizationId,
+    created: share.created,
+    modified: share.modified,
+});
+//# sourceMappingURL=Share.js.map

package/lib/Cloudflare/ResourceSharing/Share.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Share.js","sourceRoot":"","sources":["../../../src/Cloudflare/ResourceSharing/Share.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,eAAe,MAAM,8CAA8C,CAAC;AAChF,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,SAAS,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,MAAM,WAAW,GAAG,kCAA2C,CAAC;AAmIhE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG,QAAQ,CAAQ,WAAW,CAAC,CAAC;AAElD;;GAEG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,KAAc,EAAkB,EAAE,CACxD,SAAS,CAAC,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC;AAErE,MAAM,CAAC,MAAM,aAAa,GAAG,GAAG,EAAE,CAChC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE;IACtB,OAAO,EAAE,CAAC,SAAS,EAAE,WAAW,EAAE,gBAAgB,EAAE,SAAS,CAAC;IAC9D,gEAAgE;IAChE,mEAAmE;IACnE,oEAAoE;IACpE,uCAAuC;IACvC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC;QACvB,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC;QAC1D,OAAO,KAAK,CAAC,CAAC,eAAe,CAAC,oBAAoB;aAC/C,KAAK,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;aAC/C,IAAI,CACH,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACnB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CACjC,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;aAChB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC;aACrC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAC1C,CACF,CACF,CAAC;IACN,CAAC,CAAC;IACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QACzC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QACxC,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC;QAC1D,IAAI,CAAC,MAAM,EAAE,SAAS,IAAI,SAAS,CAAC,KAAK,SAAS,EAAE,CAAC;YACnD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;QACxC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QAC7C,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC;QAC1D,MAAM,IAAI,GAAG,MAAM,EAAE,SAAS,IAAI,SAAS,CAAC;QAE5C,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YACpB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;YACvD,OAAO,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7D,CAAC;QACD,oEAAoE;QACpE,8DAA8D;QAC9D,kEAAkE;QAClE,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC5C,OAAO,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACvD,CAAC,CAAC;IACF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QAClD,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC;QAC1D,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACnD,MAAM,iBAAiB,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACpD,SAAS,EAAE,CAAC,CAAC,SAA+B;YAC5C,cAAc,EAAE,CAAC,CAAC,cAAoC;SACvD,CAAC,CAAC,CAAC;QACJ,MAAM,gBAAgB,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAClD,YAAY,EAAE,CAAC,CAAC,YAAY;YAC5B,UAAU,EAAE,CAAC,CAAC,UAAoB;YAClC,iBAAiB,EAAG,CAAC,CAAC,iBAA4B,IAAI,SAAS;YAC/D,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE;SACnB,CAAC,CAAC,CAAC;QAEJ,4DAA4D;QAC5D,kEAAkE;QAClE,eAAe;QACf,MAAM,QAAQ,GAAG,MAAM,EAAE,OAAO;YAC9B,CAAC,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,IAAI,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC;YAChE,CAAC,CAAC,SAAS,CAAC;QAEd,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,8DAA8D;YAC9D,iEAAiE;YACjE,wDAAwD;YACxD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,qBAAqB,CAAC;gBAC3D,SAAS;gBACT,IAAI;gBACJ,UAAU,EAAE,iBAAiB;gBAC7B,SAAS,EAAE,gBAAgB;aAC5B,CAAC,CAAC;YACH,OAAO,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,EAAE,SAAS,IAAI,SAAS,CAAC;QAE5C,kDAAkD;QAClD,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAC3B,KAAK,CAAC,CAAC,eAAe,CAAC,qBAAqB,CAAC;gBAC3C,SAAS,EAAE,IAAI;gBACf,OAAO,EAAE,QAAQ,CAAC,EAAE;gBACpB,IAAI;aACL,CAAC,CAAC;QACL,CAAC;QAED,kEAAkE;QAClE,yDAAyD;QACzD,MAAM,kBAAkB,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,cAAc,CAAC;YAC/D,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,QAAQ,CAAC,EAAE;YACpB,OAAO,EAAE,EAAE;SACZ,CAAC,CAAC;QACH,MAAM,cAAc,GAAG,kBAAkB,CAAC,MAAM,CAAC,MAAM,CACrD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,iBAAiB,KAAK,eAAe,CAC/C,CAAC;QACF,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;YACxC,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAC/B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,cAAc,CAAC,CACrE,CAAC;YACF,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,KAAK,CAAC,CAAC,eAAe,CAAC,eAAe,CAAC;oBACrC,aAAa,EAAE,IAAI;oBACnB,OAAO,EAAE,QAAQ,CAAC,EAAE;oBACpB,aAAa,EAAE,OAAO,CAAC,SAAS;oBAChC,cAAc,EAAE,OAAO,CAAC,cAAc;iBACvC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;YAClC,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CACnC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,cAAc,CAAC,KAAK,IAAI,CAAC,SAAS,CAC5D,CAAC;YACF,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,KAAK,CAAC,CAAC,eAAe;qBACnB,eAAe,CAAC;oBACf,SAAS,EAAE,IAAI;oBACf,OAAO,EAAE,QAAQ,CAAC,EAAE;oBACpB,WAAW,EAAE,IAAI,CAAC,EAAE;iBACrB,CAAC;qBACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YACxE,CAAC;QACH,CAAC;QAED,+DAA+D;QAC/D,0DAA0D;QAC1D,MAAM,iBAAiB,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,aAAa,CAAC;YAC7D,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,QAAQ,CAAC,EAAE;YACpB,OAAO,EAAE,EAAE;SACZ,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,iBAAiB,CAAC,MAAM,CAAC,MAAM,CACnD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU,CACzD,CAAC;QACF,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAC9B,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,YAAY,KAAK,OAAO,CAAC,YAAY;gBACvC,CAAC,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU,CACtC,CAAC;YACF,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,KAAK,CAAC,CAAC,eAAe,CAAC,cAAc,CAAC;oBACpC,SAAS,EAAE,IAAI;oBACf,OAAO,EAAE,QAAQ,CAAC,EAAE;oBACpB,YAAY,EAAE,OAAO,CAAC,YAAY;oBAClC,UAAU,EAAE,OAAO,CAAC,UAAU;oBAC9B,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;oBAC5C,IAAI,EAAE,OAAO,CAAC,IAAI;iBACnB,CAAC,CAAC;YACL,CAAC;iBAAM,IACL,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;gBAChC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,EAClC,CAAC;gBACD,KAAK,CAAC,CAAC,eAAe,CAAC,cAAc,CAAC;oBACpC,SAAS,EAAE,IAAI;oBACf,OAAO,EAAE,QAAQ,CAAC,EAAE;oBACpB,eAAe,EAAE,KAAK,CAAC,EAAE;oBACzB,IAAI,EAAE,OAAO,CAAC,IAAI;iBACnB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAClC,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY;gBACpC,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU,CACnC,CAAC;YACF,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,KAAK,CAAC,CAAC,eAAe;qBACnB,cAAc,CAAC;oBACd,SAAS,EAAE,IAAI;oBACf,OAAO,EAAE,QAAQ,CAAC,EAAE;oBACpB,eAAe,EAAE,IAAI,CAAC,EAAE;iBACzB,CAAC;qBACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;QAED,iEAAiE;QACjE,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QACjD,OAAO,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC1E,CAAC,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;QACrC,gEAAgE;QAChE,4DAA4D;QAC5D,KAAK,CAAC,CAAC,eAAe;aACnB,qBAAqB,CAAC;YACrB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,CAAC;aACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/D,CAAC,CAAC;CACH,CAAC,CAAC;AAIL;;;GAGG;AACH,MAAM,QAAQ,GAAG,CAAC,SAAiB,EAAE,OAAe,EAAE,EAAE,CACtD,eAAe,CAAC,kBAAkB,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,CAC7D,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAA6B,EAAE,CAC9C,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAC/C,EACD,MAAM,CAAC,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAClE,CAAC;AAEJ;;;GAGG;AACH,MAAM,UAAU,GAAG,CAAC,SAAiB,EAAE,IAAY,EAAE,EAAE,CACrD,eAAe;KACZ,oBAAoB,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;KAC9D,IAAI,CACH,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAClB,IAAI,CAAC,MAAM;KACR,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC;KACxD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;KAClD,EAAE,CAAC,CAAC,CAAC,CACT,CACF,CAAC;AAEN,MAAM,eAAe,GAAG,CAAC,EAAU,EAAE,IAAwB,EAAE,EAAE,CAC/D,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACtE,CAAC,CAAC,CAAC;AAEL,MAAM,YAAY,GAAG,CACnB,KAGkE,EAClE,SAAiB,EACA,EAAE,CAAC,CAAC;IACrB,OAAO,EAAE,KAAK,CAAC,EAAE;IACjB,SAAS;IACT,IAAI,EAAE,KAAK,CAAC,IAAI;IAChB,0EAA0E;IAC1E,MAAM,EAAE,KAAK,CAAC,MAAqB;IACnC,UAAU,EAAE,KAAK,CAAC,UAAwC;IAC1D,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,IAAI,MAAM,CAAwB;IACnD,cAAc,EAAE,KAAK,CAAC,cAAc;IACpC,OAAO,EAAE,KAAK,CAAC,OAAO;IACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;CACzB,CAAC,CAAC"}

package/lib/Cloudflare/ResourceSharing/ShareRecipient.d.ts

@@ -0,0 +1,96 @@
+import * as Provider from "../../Provider.ts";
+import { Resource } from "../../Resource.ts";
+import { CloudflareEnvironment } from "../CloudflareEnvironment.ts";
+import type { Providers } from "../Providers.ts";
+declare const ShareRecipientTypeId: "Cloudflare.ResourceSharing.ShareRecipient";
+type ShareRecipientTypeId = typeof ShareRecipientTypeId;
+/**
+ * Association status of a share recipient. Association is eventually
+ * consistent — a new recipient transitions `associating → associated`.
+ */
+export type ShareRecipientAssociationStatus = "associating" | "associated" | "disassociating" | "disassociated";
+export type ShareRecipientProps = {
+    /**
+     * The share the recipient is added to. Changing the share triggers a
+     * replacement.
+     */
+    shareId: string;
+    /**
+     * Recipient account identifier. Exactly one of `accountId` /
+     * `organizationId` must be set. Changing it triggers a replacement.
+     */
+    accountId?: string;
+    /**
+     * Recipient organization identifier. Exactly one of `accountId` /
+     * `organizationId` must be set. Changing it triggers a replacement.
+     */
+    organizationId?: string;
+};
+export type ShareRecipientAttributes = {
+    /**
+     * Share recipient identifier tag. Stable for the life of the recipient.
+     */
+    recipientId: string;
+    /**
+     * The Cloudflare account that owns (sends) the share.
+     */
+    accountId: string;
+    /**
+     * The share the recipient belongs to.
+     */
+    shareId: string;
+    /**
+     * The recipient account identifier reported by Cloudflare.
+     */
+    recipientAccountId: string;
+    /**
+     * Association status of the recipient. Eventually consistent —
+     * `associating` settles to `associated`.
+     */
+    associationStatus: ShareRecipientAssociationStatus;
+    /**
+     * When the recipient was created.
+     */
+    created: string;
+    /**
+     * When the recipient was last modified.
+     */
+    modified: string;
+};
+export type ShareRecipient = Resource<ShareRecipientTypeId, ShareRecipientProps, ShareRecipientAttributes, never, Providers>;
+/**
+ * A recipient on an existing Cloudflare share — grants another account or
+ * organization access to the share's resources.
+ *
+ * This is an existence-only resource: there is no update API, so every prop
+ * change triggers a replacement. Association is eventually consistent
+ * (`associating → associated`). Do not manage the same recipient both inline
+ * on `Share.recipients` and through this resource.
+ *
+ * @section Adding a Recipient
+ * @example Share with another account
+ * ```typescript
+ * const recipient = yield* Cloudflare.ShareRecipient("Partner", {
+ *   shareId: share.shareId,
+ *   accountId: "<recipient-account-id>",
+ * });
+ * ```
+ *
+ * @example Share with an organization
+ * ```typescript
+ * const recipient = yield* Cloudflare.ShareRecipient("Org", {
+ *   shareId: share.shareId,
+ *   organizationId: "<recipient-organization-id>",
+ * });
+ * ```
+ *
+ * @see https://developers.cloudflare.com/fundamentals/manage-account-resources/
+ */
+export declare const ShareRecipient: import("../../Resource.ts").ResourceClass<ShareRecipient>;
+/**
+ * Returns true if the given value is a ShareRecipient resource.
+ */
+export declare const isShareRecipient: (value: unknown) => value is ShareRecipient;
+export declare const ShareRecipientProvider: () => import("effect/Layer").Layer<Provider.Provider<ShareRecipient>, never, CloudflareEnvironment | import("@distilled.cloud/cloudflare").Credentials | import("effect/unstable/http/HttpClient").HttpClient>;
+export {};
+//# sourceMappingURL=ShareRecipient.d.ts.map

package/lib/Cloudflare/ResourceSharing/ShareRecipient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ShareRecipient.d.ts","sourceRoot":"","sources":["../../../src/Cloudflare/ResourceSharing/ShareRecipient.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD,QAAA,MAAM,oBAAoB,EACxB,2CAAoD,CAAC;AACvD,KAAK,oBAAoB,GAAG,OAAO,oBAAoB,CAAC;AAExD;;;GAGG;AACH,MAAM,MAAM,+BAA+B,GACvC,aAAa,GACb,YAAY,GACZ,gBAAgB,GAChB,eAAe,CAAC;AAEpB,MAAM,MAAM,mBAAmB,GAAG;IAChC;;;OAGG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;OAEG;IACH,kBAAkB,EAAE,MAAM,CAAC;IAC3B;;;OAGG;IACH,iBAAiB,EAAE,+BAA+B,CAAC;IACnD;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG,QAAQ,CACnC,oBAAoB,EACpB,mBAAmB,EACnB,wBAAwB,EACxB,KAAK,EACL,SAAS,CACV,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,eAAO,MAAM,cAAc,2DAAiD,CAAC;AAE7E;;GAEG;AACH,eAAO,MAAM,gBAAgB,UAAW,OAAO,KAAG,KAAK,IAAI,cACkB,CAAC;AAE9E,eAAO,MAAM,sBAAsB,gNAiJ/B,CAAC"}

package/lib/Cloudflare/ResourceSharing/ShareRecipient.js

@@ -0,0 +1,173 @@
+import * as resourceSharing from "@distilled.cloud/cloudflare/resource-sharing";
+import * as Effect from "effect/Effect";
+import * as Predicate from "effect/Predicate";
+import * as Stream from "effect/Stream";
+import { isResolved } from "../../Diff.js";
+import * as Provider from "../../Provider.js";
+import { Resource } from "../../Resource.js";
+import { CloudflareEnvironment } from "../CloudflareEnvironment.js";
+const ShareRecipientTypeId = "Cloudflare.ResourceSharing.ShareRecipient";
+/**
+ * A recipient on an existing Cloudflare share — grants another account or
+ * organization access to the share's resources.
+ *
+ * This is an existence-only resource: there is no update API, so every prop
+ * change triggers a replacement. Association is eventually consistent
+ * (`associating → associated`). Do not manage the same recipient both inline
+ * on `Share.recipients` and through this resource.
+ *
+ * @section Adding a Recipient
+ * @example Share with another account
+ * ```typescript
+ * const recipient = yield* Cloudflare.ShareRecipient("Partner", {
+ *   shareId: share.shareId,
+ *   accountId: "<recipient-account-id>",
+ * });
+ * ```
+ *
+ * @example Share with an organization
+ * ```typescript
+ * const recipient = yield* Cloudflare.ShareRecipient("Org", {
+ *   shareId: share.shareId,
+ *   organizationId: "<recipient-organization-id>",
+ * });
+ * ```
+ *
+ * @see https://developers.cloudflare.com/fundamentals/manage-account-resources/
+ */
+export const ShareRecipient = Resource(ShareRecipientTypeId);
+/**
+ * Returns true if the given value is a ShareRecipient resource.
+ */
+export const isShareRecipient = (value) => Predicate.hasProperty(value, "Type") && value.Type === ShareRecipientTypeId;
+export const ShareRecipientProvider = () => Provider.succeed(ShareRecipient, {
+    stables: [
+        "recipientId",
+        "accountId",
+        "shareId",
+        "recipientAccountId",
+        "created",
+    ],
+    diff: Effect.fn(function* ({ olds, news, output }) {
+        if (!isResolved(news))
+            return undefined;
+        const { accountId } = yield* yield* CloudflareEnvironment;
+        if ((output?.accountId ?? accountId) !== accountId) {
+            return { action: "replace" };
+        }
+        // No update API — every identity change is a replacement. By diff
+        // time both sides are resolved strings.
+        const oldShareId = output?.shareId ?? olds?.shareId;
+        if (typeof oldShareId === "string" &&
+            typeof news.shareId === "string" &&
+            oldShareId !== news.shareId) {
+            return { action: "replace" };
+        }
+        const oldTarget = output?.recipientAccountId ??
+            olds?.accountId ??
+            olds?.organizationId;
+        const newTarget = news.accountId ??
+            news.organizationId;
+        if (typeof oldTarget === "string" &&
+            typeof newTarget === "string" &&
+            oldTarget !== newTarget) {
+            return { action: "replace" };
+        }
+        return undefined;
+    }),
+    read: Effect.fn(function* ({ olds, output }) {
+        const { accountId } = yield* yield* CloudflareEnvironment;
+        const acct = output?.accountId ?? accountId;
+        const shareId = output?.shareId ?? olds?.shareId;
+        if (shareId === undefined)
+            return undefined;
+        if (output?.recipientId) {
+            const observed = yield* getRecipient(acct, shareId, output.recipientId);
+            return observed ? toAttributes(observed, acct, shareId) : undefined;
+        }
+        // Cold read — recover from lost state by matching the recipient
+        // account/organization id among the share's recipients.
+        const target = olds?.accountId ??
+            olds?.organizationId;
+        if (target === undefined)
+            return undefined;
+        const match = yield* findRecipient(acct, shareId, target);
+        return match ? toAttributes(match, acct, shareId) : undefined;
+    }),
+    reconcile: Effect.fn(function* ({ news, output }) {
+        const { accountId } = yield* yield* CloudflareEnvironment;
+        const acct = output?.accountId ?? accountId;
+        const shareId = news.shareId;
+        const targetAccountId = news.accountId;
+        const targetOrganizationId = news.organizationId;
+        // Observe — the recipientId cached on `output` is a hint; fall
+        // through to a natural-key lookup so an AlreadyExists race converges
+        // instead of failing, then to create. Existence-only resource: there
+        // is no sync step.
+        const observed = (output?.recipientId
+            ? yield* getRecipient(acct, shareId, output.recipientId)
+            : undefined) ??
+            (yield* findRecipient(acct, shareId, targetAccountId ?? targetOrganizationId ?? ""));
+        if (observed) {
+            return toAttributes(observed, acct, shareId);
+        }
+        // Ensure — greenfield (or out-of-band delete).
+        const created = yield* resourceSharing.createRecipient({
+            pathAccountId: acct,
+            shareId,
+            bodyAccountId: targetAccountId,
+            organizationId: targetOrganizationId,
+        });
+        return toAttributes(created, acct, shareId);
+    }),
+    delete: Effect.fn(function* ({ output }) {
+        // Disassociation is eventually consistent; the DELETE call is
+        // idempotent against a missing recipient.
+        yield* resourceSharing
+            .deleteRecipient({
+            accountId: output.accountId,
+            shareId: output.shareId,
+            recipientId: output.recipientId,
+        })
+            .pipe(Effect.catchTag("ShareRecipientNotFound", () => Effect.void));
+    }),
+    list: Effect.fn(function* () {
+        const { accountId } = yield* yield* CloudflareEnvironment;
+        // Parent fan-out: recipients are keyed by their parent Share, which is
+        // account-scoped. Enumerate the account's owned (sent) shares, then list
+        // recipients within each share with bounded concurrency.
+        const shareIds = yield* resourceSharing.listResourceSharings
+            .pages({ accountId, kind: "sent" })
+            .pipe(Stream.runCollect, Effect.map((chunk) => Array.from(chunk).flatMap((page) => (page.result ?? []).map((share) => share.id))), 
+        // The account cannot enumerate shares — nothing to list.
+        Effect.catchTag("Forbidden", () => Effect.succeed([])));
+        const rows = yield* Effect.forEach(shareIds, (shareId) => resourceSharing.listRecipients.pages({ accountId, shareId }).pipe(Stream.runCollect, Effect.map((chunk) => Array.from(chunk).flatMap((page) => (page.result ?? [])
+            // Disassociated recipients are "gone" — match `read`.
+            .filter((r) => r.associationStatus !== "disassociated")
+            .map((r) => toAttributes(r, accountId, shareId)))), 
+        // The share vanished mid-enumeration or isn't ours — skip it.
+        Effect.catchTag(["ShareNotFound", "Forbidden"], () => Effect.succeed([]))), { concurrency: 10 });
+        return rows.flat();
+    }),
+});
+/**
+ * Read a recipient by id, mapping "gone" (`ShareRecipientNotFound`, HTTP
+ * 404) and the terminal `disassociated` status to `undefined`.
+ */
+const getRecipient = (accountId, shareId, recipientId) => resourceSharing.getRecipient({ accountId, shareId, recipientId }).pipe(Effect.map((recipient) => recipient.associationStatus === "disassociated" ? undefined : recipient), Effect.catchTag("ShareRecipientNotFound", () => Effect.succeed(undefined)));
+/**
+ * Find a live recipient by its account/organization id. A missing share
+ * surfaces as `ShareNotFound` — treat it as "no recipient".
+ */
+const findRecipient = (accountId, shareId, target) => resourceSharing.listRecipients({ accountId, shareId, perPage: 50 }).pipe(Effect.map((list) => list.result.find((r) => r.accountId === target && r.associationStatus !== "disassociated")), Effect.catchTag("ShareNotFound", () => Effect.succeed(undefined)));
+const toAttributes = (recipient, accountId, shareId) => ({
+    recipientId: recipient.id,
+    accountId,
+    shareId,
+    recipientAccountId: recipient.accountId,
+    // Distilled widens generated string enums to open unions (`string & {}`).
+    associationStatus: recipient.associationStatus,
+    created: recipient.created,
+    modified: recipient.modified,
+});
+//# sourceMappingURL=ShareRecipient.js.map

package/lib/Cloudflare/ResourceSharing/ShareRecipient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ShareRecipient.js","sourceRoot":"","sources":["../../../src/Cloudflare/ResourceSharing/ShareRecipient.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,eAAe,MAAM,8CAA8C,CAAC;AAChF,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,SAAS,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,MAAM,oBAAoB,GACxB,2CAAoD,CAAC;AAuEvD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,QAAQ,CAAiB,oBAAoB,CAAC,CAAC;AAE7E;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,KAAc,EAA2B,EAAE,CAC1E,SAAS,CAAC,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB,CAAC;AAE9E,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,EAAE,CACzC,QAAQ,CAAC,OAAO,CAAC,cAAc,EAAE;IAC/B,OAAO,EAAE;QACP,aAAa;QACb,WAAW;QACX,SAAS;QACT,oBAAoB;QACpB,SAAS;KACV;IACD,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE;QAC/C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QACxC,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC;QAC1D,IAAI,CAAC,MAAM,EAAE,SAAS,IAAI,SAAS,CAAC,KAAK,SAAS,EAAE,CAAC;YACnD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;QACxC,CAAC;QACD,kEAAkE;QAClE,wCAAwC;QACxC,MAAM,UAAU,GAAG,MAAM,EAAE,OAAO,IAAI,IAAI,EAAE,OAAO,CAAC;QACpD,IACE,OAAO,UAAU,KAAK,QAAQ;YAC9B,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;YAChC,UAAU,KAAK,IAAI,CAAC,OAAO,EAC3B,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;QACxC,CAAC;QACD,MAAM,SAAS,GACb,MAAM,EAAE,kBAAkB;YACzB,IAAI,EAAE,SAAgC;YACtC,IAAI,EAAE,cAAqC,CAAC;QAC/C,MAAM,SAAS,GACZ,IAAI,CAAC,SAAgC;YACrC,IAAI,CAAC,cAAqC,CAAC;QAC9C,IACE,OAAO,SAAS,KAAK,QAAQ;YAC7B,OAAO,SAAS,KAAK,QAAQ;YAC7B,SAAS,KAAK,SAAS,EACvB,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;QACxC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QACzC,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC;QAC1D,MAAM,IAAI,GAAG,MAAM,EAAE,SAAS,IAAI,SAAS,CAAC;QAC5C,MAAM,OAAO,GAAG,MAAM,EAAE,OAAO,IAAK,IAAI,EAAE,OAA8B,CAAC;QACzE,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAE5C,IAAI,MAAM,EAAE,WAAW,EAAE,CAAC;YACxB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;YACxE,OAAO,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACtE,CAAC;QACD,gEAAgE;QAChE,wDAAwD;QACxD,MAAM,MAAM,GACT,IAAI,EAAE,SAAgC;YACtC,IAAI,EAAE,cAAqC,CAAC;QAC/C,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1D,OAAO,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAChE,CAAC,CAAC;IACF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QAC9C,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC;QAC1D,MAAM,IAAI,GAAG,MAAM,EAAE,SAAS,IAAI,SAAS,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAiB,CAAC;QACvC,MAAM,eAAe,GAAG,IAAI,CAAC,SAA+B,CAAC;QAC7D,MAAM,oBAAoB,GAAG,IAAI,CAAC,cAAoC,CAAC;QAEvE,+DAA+D;QAC/D,qEAAqE;QACrE,qEAAqE;QACrE,mBAAmB;QACnB,MAAM,QAAQ,GACZ,CAAC,MAAM,EAAE,WAAW;YAClB,CAAC,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC;YACxD,CAAC,CAAC,SAAS,CAAC;YACd,CAAC,KAAK,CAAC,CAAC,aAAa,CACnB,IAAI,EACJ,OAAO,EACP,eAAe,IAAI,oBAAoB,IAAI,EAAE,CAC9C,CAAC,CAAC;QAEL,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,YAAY,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAC/C,CAAC;QAED,+CAA+C;QAC/C,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,eAAe,CAAC;YACrD,aAAa,EAAE,IAAI;YACnB,OAAO;YACP,aAAa,EAAE,eAAe;YAC9B,cAAc,EAAE,oBAAoB;SACrC,CAAC,CAAC;QACH,OAAO,YAAY,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC9C,CAAC,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;QACrC,8DAA8D;QAC9D,0CAA0C;QAC1C,KAAK,CAAC,CAAC,eAAe;aACnB,eAAe,CAAC;YACf,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,WAAW,EAAE,MAAM,CAAC,WAAW;SAChC,CAAC;aACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACxE,CAAC,CAAC;IACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC;QACvB,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC;QAC1D,uEAAuE;QACvE,yEAAyE;QACzE,yDAAyD;QACzD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,oBAAoB;aACzD,KAAK,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;aAClC,IAAI,CACH,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACnB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CACjC,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAC7C,CACF;QACD,yDAAyD;QACzD,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAc,CAAC,CAAC,CACnE,CAAC;QAEJ,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAChC,QAAQ,EACR,CAAC,OAAO,EAAE,EAAE,CACV,eAAe,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,CAC/D,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACnB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CACjC,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;YACjB,sDAAsD;aACrD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,iBAAiB,KAAK,eAAe,CAAC;aACtD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CACnD,CACF;QACD,8DAA8D;QAC9D,MAAM,CAAC,QAAQ,CAAC,CAAC,eAAe,EAAE,WAAW,CAAC,EAAE,GAAG,EAAE,CACnD,MAAM,CAAC,OAAO,CAAC,EAAgC,CAAC,CACjD,CACF,EACH,EAAE,WAAW,EAAE,EAAE,EAAE,CACpB,CAAC;QACF,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;IACrB,CAAC,CAAC;CACH,CAAC,CAAC;AAIL;;;GAGG;AACH,MAAM,YAAY,GAAG,CACnB,SAAiB,EACjB,OAAe,EACf,WAAmB,EACnB,EAAE,CACF,eAAe,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,IAAI,CACpE,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,EAAiC,EAAE,CACtD,SAAS,CAAC,iBAAiB,KAAK,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CACxE,EACD,MAAM,CAAC,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAC3E,CAAC;AAEJ;;;GAGG;AACH,MAAM,aAAa,GAAG,CAAC,SAAiB,EAAE,OAAe,EAAE,MAAc,EAAE,EAAE,CAC3E,eAAe,CAAC,cAAc,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CACtE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAClB,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,SAAS,KAAK,MAAM,IAAI,CAAC,CAAC,iBAAiB,KAAK,eAAe,CACpE,CACF,EACD,MAAM,CAAC,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAClE,CAAC;AAEJ,MAAM,YAAY,GAAG,CACnB,SAG4D,EAC5D,SAAiB,EACjB,OAAe,EACW,EAAE,CAAC,CAAC;IAC9B,WAAW,EAAE,SAAS,CAAC,EAAE;IACzB,SAAS;IACT,OAAO;IACP,kBAAkB,EAAE,SAAS,CAAC,SAAS;IACvC,0EAA0E;IAC1E,iBAAiB,EACf,SAAS,CAAC,iBAAoD;IAChE,OAAO,EAAE,SAAS,CAAC,OAAO;IAC1B,QAAQ,EAAE,SAAS,CAAC,QAAQ;CAC7B,CAAC,CAAC"}