alchemy 2.0.0-beta.cli-platform-split → 2.0.0-beta.pkg-setup-rc

package/lib/AWS/EC2/RouteTableAssociation.js

@@ -0,0 +1,128 @@
+import * as ec2 from "@distilled.cloud/aws/ec2";
+import * as Effect from "effect/Effect";
+import * as Schedule from "effect/Schedule";
+import { isResolved } from "../../Diff.js";
+import * as Provider from "../../Provider.js";
+import { Resource } from "../../Resource.js";
+export const RouteTableAssociationId = (id) => `rtbassoc-${id}`;
+export const RouteTableAssociation = Resource("AWS.EC2.RouteTableAssociation");
+export const RouteTableAssociationProvider = () => Provider.effect(RouteTableAssociation, Effect.gen(function* () {
+    return {
+        stables: ["associationId", "subnetId", "gatewayId"],
+        diff: Effect.fn(function* ({ news, olds }) {
+            if (!isResolved(news))
+                return;
+            // Subnet/Gateway change requires replacement (use ReplaceRouteTableAssociation internally)
+            if (olds.subnetId !== news.subnetId) {
+                return { action: "replace" };
+            }
+            if (olds.gatewayId !== news.gatewayId) {
+                return { action: "replace" };
+            }
+            // Route table change can be done via ReplaceRouteTableAssociation
+        }),
+        create: Effect.fn(function* ({ news, session }) {
+            // Call AssociateRouteTable
+            const result = yield* ec2
+                .associateRouteTable({
+                RouteTableId: news.routeTableId,
+                SubnetId: news.subnetId,
+                GatewayId: news.gatewayId,
+                DryRun: false,
+            })
+                .pipe(Effect.retry({
+                // Retry if route table or subnet/gateway is not yet available
+                while: (e) => e._tag === "InvalidRouteTableID.NotFound" ||
+                    e._tag === "InvalidSubnetID.NotFound",
+                schedule: Schedule.exponential(100),
+            }));
+            const associationId = result.AssociationId;
+            yield* session.note(`Route table association created: ${associationId}`);
+            // Wait for association to be associated
+            yield* waitForAssociationState(news.routeTableId, associationId, "associated", session);
+            // Return attributes
+            return {
+                associationId,
+                routeTableId: news.routeTableId,
+                subnetId: news.subnetId,
+                gatewayId: news.gatewayId,
+                associationState: {
+                    state: result.AssociationState?.State ?? "associated",
+                    statusMessage: result.AssociationState?.StatusMessage,
+                },
+            };
+        }),
+        update: Effect.fn(function* ({ news, olds, output, session }) {
+            // If route table changed, use ReplaceRouteTableAssociation
+            if (news.routeTableId !== olds.routeTableId) {
+                const result = yield* ec2.replaceRouteTableAssociation({
+                    AssociationId: output.associationId,
+                    RouteTableId: news.routeTableId,
+                    DryRun: false,
+                });
+                const newAssociationId = result.NewAssociationId;
+                yield* session.note(`Route table association replaced: ${newAssociationId}`);
+                // Wait for new association to be associated
+                yield* waitForAssociationState(news.routeTableId, newAssociationId, "associated", session);
+                return {
+                    associationId: newAssociationId,
+                    routeTableId: news.routeTableId,
+                    subnetId: news.subnetId,
+                    gatewayId: news.gatewayId,
+                    associationState: {
+                        state: result.AssociationState?.State ?? "associated",
+                        statusMessage: result.AssociationState?.StatusMessage,
+                    },
+                };
+            }
+            // No changes needed
+            return output;
+        }),
+        delete: Effect.fn(function* ({ output, session }) {
+            yield* session.note(`Deleting route table association: ${output.associationId}`);
+            // Disassociate the route table
+            yield* ec2
+                .disassociateRouteTable({
+                AssociationId: output.associationId,
+                DryRun: false,
+            })
+                .pipe(Effect.tapError(Effect.log), Effect.catchTag("InvalidAssociationID.NotFound", () => Effect.void));
+            yield* session.note(`Route table association ${output.associationId} deleted successfully`);
+        }),
+    };
+}));
+/**
+ * Wait for association to reach a specific state
+ */
+const waitForAssociationState = (routeTableId, associationId, targetState, session) => Effect.retry(Effect.gen(function* () {
+    const result = yield* ec2
+        .describeRouteTables({ RouteTableIds: [routeTableId] })
+        .pipe(Effect.catchTag("InvalidRouteTableID.NotFound", () => Effect.succeed({
+        RouteTables: [],
+    })));
+    const routeTable = result.RouteTables?.[0];
+    if (!routeTable) {
+        return yield* Effect.fail(new Error("Route table not found"));
+    }
+    const association = routeTable.Associations?.find((a) => a.RouteTableAssociationId === associationId);
+    if (!association) {
+        // Association might not exist yet, retry
+        return yield* Effect.fail(new Error("Association not found"));
+    }
+    if (association.AssociationState?.State === targetState) {
+        return;
+    }
+    if (association.AssociationState?.State === "failed") {
+        return yield* Effect.fail(new Error(`Association failed: ${association.AssociationState.StatusMessage}`));
+    }
+    // Still in progress, fail to trigger retry
+    return yield* Effect.fail(new Error(`Association state: ${association.AssociationState?.State}`));
+}), {
+    schedule: Schedule.fixed(1000).pipe(
+    // Check every second
+    Schedule.both(Schedule.recurs(30)), // Max 30 seconds
+    Schedule.tapOutput(([, attempt]) => session
+        ? session.note(`Waiting for association to be ${targetState}... (${attempt + 1}s)`)
+        : Effect.void)),
+});
+//# sourceMappingURL=RouteTableAssociation.js.map

package/lib/AWS/EC2/RouteTableAssociation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RouteTableAssociation.js","sourceRoot":"","sources":["../../../src/AWS/EC2/RouteTableAssociation.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,GAAG,MAAM,0BAA0B,CAAC;AAChD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAG5C,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAO7C,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACrC,EAAM,EAC4B,EAAE,CACpC,YAAY,EAAE,EAAsC,CAAC;AAyDvD,MAAM,CAAC,MAAM,qBAAqB,GAAG,QAAQ,CAC3C,+BAA+B,CAChC,CAAC;AAEF,MAAM,CAAC,MAAM,6BAA6B,GAAG,GAAG,EAAE,CAChD,QAAQ,CAAC,MAAM,CACb,qBAAqB,EACrB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO;QACL,OAAO,EAAE,CAAC,eAAe,EAAE,UAAU,EAAE,WAAW,CAAC;QACnD,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;YACvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO;YAC9B,2FAA2F;YAC3F,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACpC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YAC/B,CAAC;YACD,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;gBACtC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YAC/B,CAAC;YACD,kEAAkE;QACpE,CAAC,CAAC;QAEF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;YAC5C,2BAA2B;YAC3B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG;iBACtB,mBAAmB,CAAC;gBACnB,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,MAAM,EAAE,KAAK;aACd,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,KAAK,CAAC;gBACX,8DAA8D;gBAC9D,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CACX,CAAC,CAAC,IAAI,KAAK,8BAA8B;oBACzC,CAAC,CAAC,IAAI,KAAK,0BAA0B;gBACvC,QAAQ,EAAE,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC;aACpC,CAAC,CACH,CAAC;YAEJ,MAAM,aAAa,GACjB,MAAM,CAAC,aAAyC,CAAC;YACnD,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CACjB,oCAAoC,aAAa,EAAE,CACpD,CAAC;YAEF,wCAAwC;YACxC,KAAK,CAAC,CAAC,uBAAuB,CAC5B,IAAI,CAAC,YAAY,EACjB,aAAa,EACb,YAAY,EACZ,OAAO,CACR,CAAC;YAEF,oBAAoB;YACpB,OAAO;gBACL,aAAa;gBACb,YAAY,EAAE,IAAI,CAAC,YAA4B;gBAC/C,QAAQ,EAAE,IAAI,CAAC,QAAgC;gBAC/C,SAAS,EAAE,IAAI,CAAC,SAA+B;gBAC/C,gBAAgB,EAAE;oBAChB,KAAK,EAAE,MAAM,CAAC,gBAAgB,EAAE,KAAK,IAAI,YAAY;oBACrD,aAAa,EAAE,MAAM,CAAC,gBAAgB,EAAE,aAAa;iBACtD;aACF,CAAC;QACJ,CAAC,CAAC;QAEF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;YAC1D,2DAA2D;YAC3D,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY,EAAE,CAAC;gBAC5C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,4BAA4B,CAAC;oBACrD,aAAa,EAAE,MAAM,CAAC,aAAa;oBACnC,YAAY,EAAE,IAAI,CAAC,YAAY;oBAC/B,MAAM,EAAE,KAAK;iBACd,CAAC,CAAC;gBAEH,MAAM,gBAAgB,GACpB,MAAM,CAAC,gBAA4C,CAAC;gBACtD,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CACjB,qCAAqC,gBAAgB,EAAE,CACxD,CAAC;gBAEF,4CAA4C;gBAC5C,KAAK,CAAC,CAAC,uBAAuB,CAC5B,IAAI,CAAC,YAAY,EACjB,gBAAgB,EAChB,YAAY,EACZ,OAAO,CACR,CAAC;gBAEF,OAAO;oBACL,aAAa,EAAE,gBAAgB;oBAC/B,YAAY,EAAE,IAAI,CAAC,YAA4B;oBAC/C,QAAQ,EAAE,IAAI,CAAC,QAAgC;oBAC/C,SAAS,EAAE,IAAI,CAAC,SAA+B;oBAC/C,gBAAgB,EAAE;wBAChB,KAAK,EAAE,MAAM,CAAC,gBAAgB,EAAE,KAAK,IAAI,YAAY;wBACrD,aAAa,EAAE,MAAM,CAAC,gBAAgB,EAAE,aAAa;qBACtD;iBACF,CAAC;YACJ,CAAC;YAED,oBAAoB;YACpB,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC;QAEF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;YAC9C,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CACjB,qCAAqC,MAAM,CAAC,aAAa,EAAE,CAC5D,CAAC;YAEF,+BAA+B;YAC/B,KAAK,CAAC,CAAC,GAAG;iBACP,sBAAsB,CAAC;gBACtB,aAAa,EAAE,MAAM,CAAC,aAAa;gBACnC,MAAM,EAAE,KAAK;aACd,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,EAC3B,MAAM,CAAC,QAAQ,CACb,+BAA+B,EAC/B,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAClB,CACF,CAAC;YAEJ,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CACjB,2BAA2B,MAAM,CAAC,aAAa,uBAAuB,CACvE,CAAC;QACJ,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC;AAEJ;;GAEG;AACH,MAAM,uBAAuB,GAAG,CAC9B,YAAoB,EACpB,aAAqB,EACrB,WAImB,EACnB,OAAiC,EACjC,EAAE,CACF,MAAM,CAAC,KAAK,CACV,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG;SACtB,mBAAmB,CAAC,EAAE,aAAa,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC;SACtD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE,CACnD,MAAM,CAAC,OAAO,CAAC;QACb,WAAW,EAAE,EAAE;KACiB,CAAC,CACpC,CACF,CAAC;IAEJ,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,WAAW,GAAG,UAAU,CAAC,YAAY,EAAE,IAAI,CAC/C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,uBAAuB,KAAK,aAAa,CACnD,CAAC;IAEF,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,yCAAyC;QACzC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC;IAChE,CAAC;IAED,IAAI,WAAW,CAAC,gBAAgB,EAAE,KAAK,KAAK,WAAW,EAAE,CAAC;QACxD,OAAO;IACT,CAAC;IAED,IAAI,WAAW,CAAC,gBAAgB,EAAE,KAAK,KAAK,QAAQ,EAAE,CAAC;QACrD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CACP,uBAAuB,WAAW,CAAC,gBAAgB,CAAC,aAAa,EAAE,CACpE,CACF,CAAC;IACJ,CAAC;IAED,2CAA2C;IAC3C,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CAAC,sBAAsB,WAAW,CAAC,gBAAgB,EAAE,KAAK,EAAE,CAAC,CACvE,CAAC;AACJ,CAAC,CAAC,EACF;IACE,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI;IACjC,qBAAqB;IACrB,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,iBAAiB;IACrD,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,EAAE,CACjC,OAAO;QACL,CAAC,CAAC,OAAO,CAAC,IAAI,CACV,iCAAiC,WAAW,QAAQ,OAAO,GAAG,CAAC,IAAI,CACpE;QACH,CAAC,CAAC,MAAM,CAAC,IAAI,CAChB,CACF;CACF,CACF,CAAC"}

package/lib/AWS/EC2/SecurityGroup.d.ts

@@ -0,0 +1,140 @@
+import { Region } from "@distilled.cloud/aws/Region";
+import * as Provider from "../../Provider.ts";
+import { Resource } from "../../Resource.ts";
+import type { Providers } from "../Providers.ts";
+import type { AccountID } from "../Account.ts";
+import { Account } from "../Account.ts";
+import type { RegionID } from "../Region.ts";
+import type { VpcId } from "./Vpc.ts";
+export type SecurityGroupId<ID extends string = string> = `sg-${ID}`;
+export declare const SecurityGroupId: <ID extends string>(id: ID) => ID & SecurityGroupId<ID>;
+export type SecurityGroupArn<GroupId extends SecurityGroupId = SecurityGroupId> = `arn:aws:ec2:${RegionID}:${AccountID}:security-group/${GroupId}`;
+/**
+ * Ingress or egress rule for a security group.
+ */
+export interface SecurityGroupRuleData {
+    /**
+     * The IP protocol name or number.
+     * Use -1 to specify all protocols.
+     */
+    ipProtocol: string;
+    /**
+     * The start of the port range.
+     * For ICMP, use the ICMP type number.
+     */
+    fromPort?: number;
+    /**
+     * The end of the port range.
+     * For ICMP, use the ICMP code.
+     */
+    toPort?: number;
+    /**
+     * IPv4 CIDR ranges to allow.
+     */
+    cidrIpv4?: string;
+    /**
+     * IPv6 CIDR ranges to allow.
+     */
+    cidrIpv6?: string;
+    /**
+     * ID of a security group to allow traffic from/to.
+     */
+    referencedGroupId?: SecurityGroupId;
+    /**
+     * ID of a prefix list.
+     */
+    prefixListId?: string;
+    /**
+     * Description for the rule.
+     */
+    description?: string;
+}
+export interface SecurityGroupProps {
+    /**
+     * The VPC to create the security group in.
+     */
+    vpcId: VpcId;
+    /**
+     * The name of the security group.
+     * If not provided, a name will be generated.
+     */
+    groupName?: string;
+    /**
+     * A description for the security group.
+     * @default "Managed by Alchemy"
+     */
+    description?: string;
+    /**
+     * Inbound rules for the security group.
+     */
+    ingress?: SecurityGroupRuleData[];
+    /**
+     * Outbound rules for the security group.
+     * If not specified, allows all outbound traffic by default.
+     */
+    egress?: SecurityGroupRuleData[];
+    /**
+     * Tags to assign to the security group.
+     */
+    tags?: Record<string, string>;
+}
+export interface SecurityGroup extends Resource<"AWS.EC2.SecurityGroup", SecurityGroupProps, {
+    /**
+     * The ID of the security group.
+     */
+    groupId: SecurityGroupId;
+    /**
+     * The Amazon Resource Name (ARN) of the security group.
+     */
+    groupArn: SecurityGroupArn;
+    /**
+     * The name of the security group.
+     */
+    groupName: string;
+    /**
+     * The description of the security group.
+     */
+    description: string;
+    /**
+     * The ID of the VPC for the security group.
+     */
+    vpcId: VpcId;
+    /**
+     * The ID of the AWS account that owns the security group.
+     */
+    ownerId: string;
+    /**
+     * The inbound rules associated with the security group.
+     */
+    ingressRules?: Array<{
+        securityGroupRuleId: string;
+        ipProtocol: string;
+        fromPort?: number;
+        toPort?: number;
+        cidrIpv4?: string;
+        cidrIpv6?: string;
+        referencedGroupId?: string;
+        prefixListId?: string;
+        description?: string;
+        isEgress: false;
+    }>;
+    /**
+     * The outbound rules associated with the security group.
+     */
+    egressRules?: Array<{
+        securityGroupRuleId: string;
+        ipProtocol: string;
+        fromPort?: number;
+        toPort?: number;
+        cidrIpv4?: string;
+        cidrIpv6?: string;
+        referencedGroupId?: string;
+        prefixListId?: string;
+        description?: string;
+        isEgress: true;
+    }>;
+}, never, Providers> {
+}
+export declare const SecurityGroup: import("../../Resource.ts").ResourceClass<SecurityGroup>;
+export declare const SecurityGroupProvider: () => import("effect/Layer").Layer<Provider.Provider<SecurityGroup>, never, import("effect/unstable/http/HttpClient").HttpClient | import("../../Stage.ts").Stage | import("../../Stack.ts").Stack | Region | Account | import("@distilled.cloud/aws/Credentials").Credentials>;
+//# sourceMappingURL=SecurityGroup.d.ts.map

package/lib/AWS/EC2/SecurityGroup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecurityGroup.d.ts","sourceRoot":"","sources":["../../../src/AWS/EC2/SecurityGroup.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAC;AAKrD,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC;AAEtC,MAAM,MAAM,eAAe,CAAC,EAAE,SAAS,MAAM,GAAG,MAAM,IAAI,MAAM,EAAE,EAAE,CAAC;AACrE,eAAO,MAAM,eAAe,GAAI,EAAE,SAAS,MAAM,EAC/C,IAAI,EAAE,KACL,EAAE,GAAG,eAAe,CAAC,EAAE,CAA2C,CAAC;AAEtE,MAAM,MAAM,gBAAgB,CAC1B,OAAO,SAAS,eAAe,GAAG,eAAe,IAC/C,eAAe,QAAQ,IAAI,SAAS,mBAAmB,OAAO,EAAE,CAAC;AAErE;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC;;;OAGG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,iBAAiB,CAAC,EAAE,eAAe,CAAC;IAEpC;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC;;OAEG;IACH,KAAK,EAAE,KAAK,CAAC;IAEb;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;OAEG;IACH,OAAO,CAAC,EAAE,qBAAqB,EAAE,CAAC;IAElC;;;OAGG;IACH,MAAM,CAAC,EAAE,qBAAqB,EAAE,CAAC;IAEjC;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,aAAc,SAAQ,QAAQ,CAC7C,uBAAuB,EACvB,kBAAkB,EAClB;IACE;;OAEG;IACH,OAAO,EAAE,eAAe,CAAC;IAEzB;;OAEG;IACH,QAAQ,EAAE,gBAAgB,CAAC;IAE3B;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;IAEpB;;OAEG;IACH,KAAK,EAAE,KAAK,CAAC;IAEb;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAEhB;;OAEG;IACH,YAAY,CAAC,EAAE,KAAK,CAAC;QACnB,mBAAmB,EAAE,MAAM,CAAC;QAC5B,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,EAAE,KAAK,CAAC;KACjB,CAAC,CAAC;IAEH;;OAEG;IACH,WAAW,CAAC,EAAE,KAAK,CAAC;QAClB,mBAAmB,EAAE,MAAM,CAAC;QAC5B,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,EAAE,IAAI,CAAC;KAChB,CAAC,CAAC;CACJ,EACD,KAAK,EACL,SAAS,CACV;CAAG;AACJ,eAAO,MAAM,aAAa,0DAAmD,CAAC;AAE9E,eAAO,MAAM,qBAAqB,iRA0X/B,CAAC"}

package/lib/AWS/EC2/SecurityGroup.js

@@ -0,0 +1,300 @@
+import * as ec2 from "@distilled.cloud/aws/ec2";
+import { Region } from "@distilled.cloud/aws/Region";
+import * as Effect from "effect/Effect";
+import * as Schedule from "effect/Schedule";
+import { isResolved } from "../../Diff.js";
+import { createPhysicalName } from "../../PhysicalName.js";
+import * as Provider from "../../Provider.js";
+import { Resource } from "../../Resource.js";
+import { createInternalTags, createTagsList, diffTags } from "../../Tags.js";
+import { Account } from "../Account.js";
+export const SecurityGroupId = (id) => `sg-${id}`;
+export const SecurityGroup = Resource("AWS.EC2.SecurityGroup");
+export const SecurityGroupProvider = () => Provider.effect(SecurityGroup, Effect.gen(function* () {
+    const region = yield* Region;
+    const accountId = yield* Account;
+    const createTags = Effect.fn(function* (id, tags) {
+        return {
+            Name: id,
+            ...(yield* createInternalTags(id)),
+            ...tags,
+        };
+    });
+    const createGroupName = (id, name) => Effect.gen(function* () {
+        if (name)
+            return name;
+        return yield* createPhysicalName({ id, maxLength: 255 });
+    });
+    const describeSecurityGroup = (groupId) => ec2.describeSecurityGroups({ GroupIds: [groupId] }).pipe(Effect.map((r) => r.SecurityGroups?.[0]), Effect.flatMap((sg) => sg
+        ? Effect.succeed(sg)
+        : Effect.fail(new Error(`Security Group ${groupId} not found`))));
+    const describeSecurityGroupRules = (groupId) => ec2.describeSecurityGroupRules({
+        Filters: [{ Name: "group-id", Values: [groupId] }],
+    });
+    const toAttrs = (sg, rules) => ({
+        groupId: sg.GroupId,
+        groupArn: `arn:aws:ec2:${region}:${accountId}:security-group/${sg.GroupId}`,
+        groupName: sg.GroupName,
+        description: sg.Description,
+        vpcId: sg.VpcId,
+        ownerId: sg.OwnerId,
+        ingressRules: rules
+            .filter((r) => !r.IsEgress)
+            .map((r) => ({
+            securityGroupRuleId: r.SecurityGroupRuleId,
+            ipProtocol: r.IpProtocol,
+            fromPort: r.FromPort,
+            toPort: r.ToPort,
+            cidrIpv4: r.CidrIpv4,
+            cidrIpv6: r.CidrIpv6,
+            referencedGroupId: r.ReferencedGroupInfo?.GroupId,
+            prefixListId: r.PrefixListId,
+            description: r.Description,
+            isEgress: false,
+        })),
+        egressRules: rules
+            .filter((r) => r.IsEgress)
+            .map((r) => ({
+            securityGroupRuleId: r.SecurityGroupRuleId,
+            ipProtocol: r.IpProtocol,
+            fromPort: r.FromPort,
+            toPort: r.ToPort,
+            cidrIpv4: r.CidrIpv4,
+            cidrIpv6: r.CidrIpv6,
+            referencedGroupId: r.ReferencedGroupInfo?.GroupId,
+            prefixListId: r.PrefixListId,
+            description: r.Description,
+            isEgress: true,
+        })),
+    });
+    const toIpPermission = (rule) => ({
+        IpProtocol: rule.ipProtocol,
+        FromPort: rule.fromPort,
+        ToPort: rule.toPort,
+        IpRanges: rule.cidrIpv4
+            ? [{ CidrIp: rule.cidrIpv4, Description: rule.description }]
+            : undefined,
+        Ipv6Ranges: rule.cidrIpv6
+            ? [{ CidrIpv6: rule.cidrIpv6, Description: rule.description }]
+            : undefined,
+        UserIdGroupPairs: rule.referencedGroupId
+            ? [
+                {
+                    GroupId: rule.referencedGroupId,
+                    Description: rule.description,
+                },
+            ]
+            : undefined,
+        PrefixListIds: rule.prefixListId
+            ? [
+                {
+                    PrefixListId: rule.prefixListId,
+                    Description: rule.description,
+                },
+            ]
+            : undefined,
+    });
+    return {
+        stables: ["groupId", "groupArn", "ownerId"],
+        read: Effect.fn(function* ({ output }) {
+            if (!output)
+                return undefined;
+            const sg = yield* describeSecurityGroup(output.groupId);
+            const rulesResult = yield* describeSecurityGroupRules(output.groupId);
+            return toAttrs(sg, rulesResult.SecurityGroupRules ?? []);
+        }),
+        diff: Effect.fn(function* ({ id, news, olds, output }) {
+            if (!isResolved(news))
+                return;
+            // VPC change requires replacement
+            if (news.vpcId !== olds.vpcId) {
+                return { action: "replace" };
+            }
+            // Group name change requires replacement
+            const newGroupName = yield* createGroupName(id, news.groupName);
+            const oldGroupName = output?.groupName
+                ? output.groupName
+                : yield* createGroupName(id, olds.groupName);
+            if (newGroupName !== oldGroupName) {
+                return { action: "replace" };
+            }
+            // Other changes can be updated in-place
+        }),
+        create: Effect.fn(function* ({ id, news, session }) {
+            const groupName = yield* createGroupName(id, news.groupName);
+            yield* session.note(`Creating Security Group: ${groupName}`);
+            const result = yield* ec2.createSecurityGroup({
+                GroupName: groupName,
+                Description: news.description ?? "Managed by Alchemy",
+                VpcId: news.vpcId,
+                TagSpecifications: [
+                    {
+                        ResourceType: "security-group",
+                        Tags: createTagsList(yield* createTags(id, news.tags)),
+                    },
+                ],
+                DryRun: false,
+            });
+            const groupId = result.GroupId;
+            yield* session.note(`Security Group created: ${groupId}`);
+            // Revoke the default egress rule if we have custom egress rules
+            if (news.egress && news.egress.length > 0) {
+                yield* ec2
+                    .revokeSecurityGroupEgress({
+                    GroupId: groupId,
+                    IpPermissions: [
+                        {
+                            IpProtocol: "-1",
+                            IpRanges: [{ CidrIp: "0.0.0.0/0" }],
+                        },
+                    ],
+                    DryRun: false,
+                })
+                    .pipe(Effect.catchTag("InvalidPermission.NotFound", () => Effect.void));
+            }
+            // Add ingress rules
+            if (news.ingress && news.ingress.length > 0) {
+                yield* ec2.authorizeSecurityGroupIngress({
+                    GroupId: groupId,
+                    IpPermissions: news.ingress.map(toIpPermission),
+                    DryRun: false,
+                });
+                yield* session.note(`Added ${news.ingress.length} ingress rules`);
+            }
+            // Add egress rules
+            if (news.egress && news.egress.length > 0) {
+                yield* ec2.authorizeSecurityGroupEgress({
+                    GroupId: groupId,
+                    IpPermissions: news.egress.map(toIpPermission),
+                    DryRun: false,
+                });
+                yield* session.note(`Added ${news.egress.length} egress rules`);
+            }
+            // Fetch the final state
+            const sg = yield* describeSecurityGroup(groupId);
+            const rulesResult = yield* describeSecurityGroupRules(groupId);
+            return toAttrs(sg, rulesResult.SecurityGroupRules ?? []);
+        }),
+        update: Effect.fn(function* ({ id, news, olds, output, session }) {
+            const groupId = output.groupId;
+            // Handle description update (requires modifying the group)
+            if (news.description !== olds.description) {
+                yield* ec2.modifySecurityGroupRules({
+                    GroupId: groupId,
+                    // Description can't actually be changed after creation in EC2
+                    // This is a no-op but we log it
+                    SecurityGroupRules: [],
+                });
+            }
+            // Handle tag updates
+            const newTags = yield* createTags(id, news.tags);
+            const oldTags = (yield* ec2
+                .describeTags({
+                Filters: [
+                    { Name: "resource-id", Values: [groupId] },
+                    { Name: "resource-type", Values: ["security-group"] },
+                ],
+            })
+                .pipe(Effect.map((r) => Object.fromEntries(r.Tags?.map((t) => [t.Key, t.Value]) ?? [])))) ?? {};
+            const { removed, upsert } = diffTags(oldTags, newTags);
+            if (removed.length > 0) {
+                yield* ec2.deleteTags({
+                    Resources: [groupId],
+                    Tags: removed.map((key) => ({ Key: key })),
+                    DryRun: false,
+                });
+            }
+            if (upsert.length > 0) {
+                yield* ec2.createTags({
+                    Resources: [groupId],
+                    Tags: upsert,
+                    DryRun: false,
+                });
+                yield* session.note("Updated tags");
+            }
+            // Handle rule updates - simple approach: revoke all, then add all
+            // Get current rules
+            const currentRulesResult = yield* describeSecurityGroupRules(groupId);
+            const currentRules = currentRulesResult.SecurityGroupRules ?? [];
+            // Revoke existing ingress rules (except default)
+            const currentIngress = currentRules.filter((r) => !r.IsEgress);
+            if (currentIngress.length > 0) {
+                yield* ec2
+                    .revokeSecurityGroupIngress({
+                    GroupId: groupId,
+                    SecurityGroupRuleIds: currentIngress.map((r) => r.SecurityGroupRuleId),
+                    DryRun: false,
+                })
+                    .pipe(Effect.catchTag("InvalidPermission.NotFound", () => Effect.void));
+            }
+            // Revoke existing egress rules
+            const currentEgress = currentRules.filter((r) => r.IsEgress);
+            if (currentEgress.length > 0) {
+                yield* ec2
+                    .revokeSecurityGroupEgress({
+                    GroupId: groupId,
+                    SecurityGroupRuleIds: currentEgress.map((r) => r.SecurityGroupRuleId),
+                    DryRun: false,
+                })
+                    .pipe(Effect.catchTag("InvalidPermission.NotFound", () => Effect.void));
+            }
+            // Add new ingress rules
+            if (news.ingress && news.ingress.length > 0) {
+                yield* ec2.authorizeSecurityGroupIngress({
+                    GroupId: groupId,
+                    IpPermissions: news.ingress.map(toIpPermission),
+                    DryRun: false,
+                });
+                yield* session.note(`Updated ingress rules (${news.ingress.length} rules)`);
+            }
+            // Add new egress rules (or restore default)
+            if (news.egress && news.egress.length > 0) {
+                yield* ec2.authorizeSecurityGroupEgress({
+                    GroupId: groupId,
+                    IpPermissions: news.egress.map(toIpPermission),
+                    DryRun: false,
+                });
+                yield* session.note(`Updated egress rules (${news.egress.length} rules)`);
+            }
+            else {
+                // Restore default egress rule
+                yield* ec2.authorizeSecurityGroupEgress({
+                    GroupId: groupId,
+                    IpPermissions: [
+                        {
+                            IpProtocol: "-1",
+                            IpRanges: [{ CidrIp: "0.0.0.0/0" }],
+                        },
+                    ],
+                    DryRun: false,
+                });
+            }
+            // Fetch the final state
+            const sg = yield* describeSecurityGroup(groupId);
+            const rulesResult = yield* describeSecurityGroupRules(groupId);
+            return toAttrs(sg, rulesResult.SecurityGroupRules ?? []);
+        }),
+        delete: Effect.fn(function* ({ output, session }) {
+            const groupId = output.groupId;
+            yield* session.note(`Deleting Security Group: ${groupId}`);
+            yield* ec2
+                .deleteSecurityGroup({
+                GroupId: groupId,
+                DryRun: false,
+            })
+                .pipe(Effect.catchTag("InvalidGroup.NotFound", () => Effect.void), 
+            // Retry on dependency violations (e.g., ENIs still using the security group)
+            Effect.retry({
+                while: (e) => {
+                    return (e._tag === "DependencyViolation" ||
+                        (e._tag === "ValidationError" &&
+                            e.message?.includes("DependencyViolation")));
+                },
+                schedule: Schedule.fixed(5000).pipe(Schedule.both(Schedule.recurs(30)), // Up to ~2.5 minutes
+                Schedule.tapOutput(([, attempt]) => session.note(`Waiting for dependencies to clear... (attempt ${attempt + 1})`))),
+            }));
+            yield* session.note(`Security Group ${groupId} deleted`);
+        }),
+    };
+}));
+//# sourceMappingURL=SecurityGroup.js.map

package/lib/AWS/EC2/SecurityGroup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecurityGroup.js","sourceRoot":"","sources":["../../../src/AWS/EC2/SecurityGroup.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,0BAA0B,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAC;AACrD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAE7E,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAKxC,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,EAAM,EACoB,EAAE,CAAC,MAAM,EAAE,EAA8B,CAAC;AA8JtE,MAAM,CAAC,MAAM,aAAa,GAAG,QAAQ,CAAgB,uBAAuB,CAAC,CAAC;AAE9E,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,EAAE,CACxC,QAAQ,CAAC,MAAM,CACb,aAAa,EACb,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC;IAC7B,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC;IAEjC,MAAM,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EACpC,EAAU,EACV,IAA6B;QAE7B,OAAO;YACL,IAAI,EAAE,EAAE;YACR,GAAG,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;YAClC,GAAG,IAAI;SACR,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,eAAe,GAAG,CAAC,EAAU,EAAE,IAAwB,EAAE,EAAE,CAC/D,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QACtB,OAAO,KAAK,CAAC,CAAC,kBAAkB,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEL,MAAM,qBAAqB,GAAG,CAAC,OAAe,EAAE,EAAE,CAChD,GAAG,CAAC,sBAAsB,CAAC,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CACtD,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC,EACxC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CACpB,EAAE;QACA,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACpB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,kBAAkB,OAAO,YAAY,CAAC,CAAC,CAClE,CACF,CAAC;IAEJ,MAAM,0BAA0B,GAAG,CAAC,OAAe,EAAE,EAAE,CACrD,GAAG,CAAC,0BAA0B,CAAC;QAC7B,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;KACnD,CAAC,CAAC;IAEL,MAAM,OAAO,GAAG,CACd,EAAqB,EACrB,KAA8B,EACD,EAAE,CAAC,CAAC;QACjC,OAAO,EAAE,EAAE,CAAC,OAA0B;QACtC,QAAQ,EACN,eAAe,MAAM,IAAI,SAAS,mBAAmB,EAAE,CAAC,OAA0B,EAAsB;QAC1G,SAAS,EAAE,EAAE,CAAC,SAAU;QACxB,WAAW,EAAE,EAAE,CAAC,WAAY;QAC5B,KAAK,EAAE,EAAE,CAAC,KAAc;QACxB,OAAO,EAAE,EAAE,CAAC,OAAQ;QACpB,YAAY,EAAE,KAAK;aAChB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;aAC1B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACX,mBAAmB,EAAE,CAAC,CAAC,mBAAoB;YAC3C,UAAU,EAAE,CAAC,CAAC,UAAW;YACzB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,iBAAiB,EAAE,CAAC,CAAC,mBAAmB,EAAE,OAAO;YACjD,YAAY,EAAE,CAAC,CAAC,YAAY;YAC5B,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,QAAQ,EAAE,KAAc;SACzB,CAAC,CAAC;QACL,WAAW,EAAE,KAAK;aACf,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;aACzB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACX,mBAAmB,EAAE,CAAC,CAAC,mBAAoB;YAC3C,UAAU,EAAE,CAAC,CAAC,UAAW;YACzB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,iBAAiB,EAAE,CAAC,CAAC,mBAAmB,EAAE,OAAO;YACjD,YAAY,EAAE,CAAC,CAAC,YAAY;YAC5B,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,QAAQ,EAAE,IAAa;SACxB,CAAC,CAAC;KACN,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG,CACrB,IAA2B,EACT,EAAE,CAAC,CAAC;QACtB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACrB,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;YAC5D,CAAC,CAAC,SAAS;QACb,UAAU,EAAE,IAAI,CAAC,QAAQ;YACvB,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;YAC9D,CAAC,CAAC,SAAS;QACb,gBAAgB,EAAE,IAAI,CAAC,iBAAiB;YACtC,CAAC,CAAC;gBACE;oBACE,OAAO,EAAE,IAAI,CAAC,iBAA2B;oBACzC,WAAW,EAAE,IAAI,CAAC,WAAW;iBAC9B;aACF;YACH,CAAC,CAAC,SAAS;QACb,aAAa,EAAE,IAAI,CAAC,YAAY;YAC9B,CAAC,CAAC;gBACE;oBACE,YAAY,EAAE,IAAI,CAAC,YAAsB;oBACzC,WAAW,EAAE,IAAI,CAAC,WAAW;iBAC9B;aACF;YACH,CAAC,CAAC,SAAS;KACd,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC;QAE3C,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACnC,IAAI,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAC9B,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,qBAAqB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACxD,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,0BAA0B,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACtE,OAAO,OAAO,CAAC,EAAE,EAAE,WAAW,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;QAC3D,CAAC,CAAC;QAEF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE;YACnD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO;YAC9B,kCAAkC;YAClC,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC9B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YAC/B,CAAC;YAED,yCAAyC;YACzC,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YAChE,MAAM,YAAY,GAAG,MAAM,EAAE,SAAS;gBACpC,CAAC,CAAC,MAAM,CAAC,SAAS;gBAClB,CAAC,CAAC,KAAK,CAAC,CAAC,eAAe,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YAC/C,IAAI,YAAY,KAAK,YAAY,EAAE,CAAC;gBAClC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YAC/B,CAAC;YAED,wCAAwC;QAC1C,CAAC,CAAC;QAEF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;YAChD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YAE7D,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,4BAA4B,SAAS,EAAE,CAAC,CAAC;YAE7D,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC;gBAC5C,SAAS,EAAE,SAAS;gBACpB,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,oBAAoB;gBACrD,KAAK,EAAE,IAAI,CAAC,KAAe;gBAC3B,iBAAiB,EAAE;oBACjB;wBACE,YAAY,EAAE,gBAAgB;wBAC9B,IAAI,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;qBACvD;iBACF;gBACD,MAAM,EAAE,KAAK;aACd,CAAC,CAAC;YAEH,MAAM,OAAO,GAAG,MAAM,CAAC,OAA2B,CAAC;YACnD,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,2BAA2B,OAAO,EAAE,CAAC,CAAC;YAE1D,gEAAgE;YAChE,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1C,KAAK,CAAC,CAAC,GAAG;qBACP,yBAAyB,CAAC;oBACzB,OAAO,EAAE,OAAO;oBAChB,aAAa,EAAE;wBACb;4BACE,UAAU,EAAE,IAAI;4BAChB,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;yBACpC;qBACF;oBACD,MAAM,EAAE,KAAK;iBACd,CAAC;qBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,4BAA4B,EAC5B,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAClB,CACF,CAAC;YACN,CAAC;YAED,oBAAoB;YACpB,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5C,KAAK,CAAC,CAAC,GAAG,CAAC,6BAA6B,CAAC;oBACvC,OAAO,EAAE,OAAO;oBAChB,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;oBAC/C,MAAM,EAAE,KAAK;iBACd,CAAC,CAAC;gBACH,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,MAAM,gBAAgB,CAAC,CAAC;YACpE,CAAC;YAED,mBAAmB;YACnB,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1C,KAAK,CAAC,CAAC,GAAG,CAAC,4BAA4B,CAAC;oBACtC,OAAO,EAAE,OAAO;oBAChB,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC;oBAC9C,MAAM,EAAE,KAAK;iBACd,CAAC,CAAC;gBACH,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,MAAM,eAAe,CAAC,CAAC;YAClE,CAAC;YAED,wBAAwB;YACxB,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;YACjD,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,0BAA0B,CAAC,OAAO,CAAC,CAAC;YAC/D,OAAO,OAAO,CAAC,EAAE,EAAE,WAAW,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;QAC3D,CAAC,CAAC;QAEF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;YAC9D,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;YAE/B,2DAA2D;YAC3D,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;gBAC1C,KAAK,CAAC,CAAC,GAAG,CAAC,wBAAwB,CAAC;oBAClC,OAAO,EAAE,OAAO;oBAChB,8DAA8D;oBAC9D,gCAAgC;oBAChC,kBAAkB,EAAE,EAAE;iBACvB,CAAC,CAAC;YACL,CAAC;YAED,qBAAqB;YACrB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YACjD,MAAM,OAAO,GACX,CAAC,KAAK,CAAC,CAAC,GAAG;iBACR,YAAY,CAAC;gBACZ,OAAO,EAAE;oBACP,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE;oBAC1C,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,gBAAgB,CAAC,EAAE;iBACtD;aACF,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,GAAG,CACR,CAAC,CAAC,EAAE,EAAE,CACJ,MAAM,CAAC,WAAW,CAChB,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAI,EAAE,CAAC,CAAC,KAAM,CAAC,CAAC,IAAI,EAAE,CACnB,CAC9B,CACF,CAAC,IAAI,EAAE,CAAC;YAEb,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAEvD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,KAAK,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;oBACpB,SAAS,EAAE,CAAC,OAAO,CAAC;oBACpB,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;oBAC1C,MAAM,EAAE,KAAK;iBACd,CAAC,CAAC;YACL,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,KAAK,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;oBACpB,SAAS,EAAE,CAAC,OAAO,CAAC;oBACpB,IAAI,EAAE,MAAM;oBACZ,MAAM,EAAE,KAAK;iBACd,CAAC,CAAC;gBACH,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YACtC,CAAC;YAED,kEAAkE;YAClE,oBAAoB;YACpB,MAAM,kBAAkB,GAAG,KAAK,CAAC,CAAC,0BAA0B,CAAC,OAAO,CAAC,CAAC;YACtE,MAAM,YAAY,GAAG,kBAAkB,CAAC,kBAAkB,IAAI,EAAE,CAAC;YAEjE,iDAAiD;YACjD,MAAM,cAAc,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YAC/D,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9B,KAAK,CAAC,CAAC,GAAG;qBACP,0BAA0B,CAAC;oBAC1B,OAAO,EAAE,OAAO;oBAChB,oBAAoB,EAAE,cAAc,CAAC,GAAG,CACtC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,mBAAoB,CAC9B;oBACD,MAAM,EAAE,KAAK;iBACd,CAAC;qBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,4BAA4B,EAC5B,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAClB,CACF,CAAC;YACN,CAAC;YAED,+BAA+B;YAC/B,MAAM,aAAa,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YAC7D,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7B,KAAK,CAAC,CAAC,GAAG;qBACP,yBAAyB,CAAC;oBACzB,OAAO,EAAE,OAAO;oBAChB,oBAAoB,EAAE,aAAa,CAAC,GAAG,CACrC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,mBAAoB,CAC9B;oBACD,MAAM,EAAE,KAAK;iBACd,CAAC;qBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,4BAA4B,EAC5B,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAClB,CACF,CAAC;YACN,CAAC;YAED,wBAAwB;YACxB,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5C,KAAK,CAAC,CAAC,GAAG,CAAC,6BAA6B,CAAC;oBACvC,OAAO,EAAE,OAAO;oBAChB,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;oBAC/C,MAAM,EAAE,KAAK;iBACd,CAAC,CAAC;gBACH,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CACjB,0BAA0B,IAAI,CAAC,OAAO,CAAC,MAAM,SAAS,CACvD,CAAC;YACJ,CAAC;YAED,4CAA4C;YAC5C,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1C,KAAK,CAAC,CAAC,GAAG,CAAC,4BAA4B,CAAC;oBACtC,OAAO,EAAE,OAAO;oBAChB,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC;oBAC9C,MAAM,EAAE,KAAK;iBACd,CAAC,CAAC;gBACH,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CACjB,yBAAyB,IAAI,CAAC,MAAM,CAAC,MAAM,SAAS,CACrD,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,8BAA8B;gBAC9B,KAAK,CAAC,CAAC,GAAG,CAAC,4BAA4B,CAAC;oBACtC,OAAO,EAAE,OAAO;oBAChB,aAAa,EAAE;wBACb;4BACE,UAAU,EAAE,IAAI;4BAChB,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;yBACpC;qBACF;oBACD,MAAM,EAAE,KAAK;iBACd,CAAC,CAAC;YACL,CAAC;YAED,wBAAwB;YACxB,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;YACjD,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,0BAA0B,CAAC,OAAO,CAAC,CAAC;YAC/D,OAAO,OAAO,CAAC,EAAE,EAAE,WAAW,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;QAC3D,CAAC,CAAC;QAEF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;YAC9C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;YAE/B,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,4BAA4B,OAAO,EAAE,CAAC,CAAC;YAE3D,KAAK,CAAC,CAAC,GAAG;iBACP,mBAAmB,CAAC;gBACnB,OAAO,EAAE,OAAO;gBAChB,MAAM,EAAE,KAAK;aACd,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC;YAC3D,6EAA6E;YAC7E,MAAM,CAAC,KAAK,CAAC;gBACX,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE;oBACX,OAAO,CACL,CAAC,CAAC,IAAI,KAAK,qBAAqB;wBAChC,CAAC,CAAC,CAAC,IAAI,KAAK,iBAAiB;4BAC3B,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,qBAAqB,CAAC,CAAC,CAC9C,CAAC;gBACJ,CAAC;gBACD,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CACjC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,qBAAqB;gBACzD,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,EAAE,CACjC,OAAO,CAAC,IAAI,CACV,iDAAiD,OAAO,GAAG,CAAC,GAAG,CAChE,CACF,CACF;aACF,CAAC,CACH,CAAC;YAEJ,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,kBAAkB,OAAO,UAAU,CAAC,CAAC;QAC3D,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}