alchemy 2.0.0-beta.cli-platform-split → 2.0.0-beta.pkg-setup-rc

package/lib/AWS/SecretsManager/Secret.js

@@ -0,0 +1,206 @@
+import * as secretsmanager from "@distilled.cloud/aws/secrets-manager";
+import * as Effect from "effect/Effect";
+import * as Redacted from "effect/Redacted";
+import { isResolved } from "../../Diff.js";
+import { createPhysicalName } from "../../PhysicalName.js";
+import * as Provider from "../../Provider.js";
+import { Resource } from "../../Resource.js";
+import { createInternalTags, diffTags } from "../../Tags.js";
+/**
+ * An AWS Secrets Manager secret.
+ *
+ * `Secret` owns the lifecycle of the secret metadata and current value. It can
+ * store a caller-provided value or generate a password-backed JSON payload for
+ * downstream resources such as Aurora clusters and RDS proxies.
+ *
+ * @section Creating Secrets
+ * @example Static Secret String
+ * ```typescript
+ * const secret = yield* Secret("DbSecret", {
+ *   secretString: Redacted.make(JSON.stringify({
+ *     username: "app",
+ *     password: "super-secret",
+ *   })),
+ * });
+ * ```
+ *
+ * @example Generated Password Secret
+ * ```typescript
+ * const secret = yield* Secret("DbSecret", {
+ *   generateSecretString: {
+ *     secretStringTemplate: JSON.stringify({ username: "app" }),
+ *     generateStringKey: "password",
+ *     PasswordLength: 32,
+ *   },
+ * });
+ * ```
+ */
+export const Secret = Resource("AWS.SecretsManager.Secret");
+const toTagRecord = (tags) => Object.fromEntries((tags ?? [])
+    .filter((tag) => typeof tag.Key === "string" && typeof tag.Value === "string")
+    .map((tag) => [tag.Key, tag.Value]));
+export const SecretProvider = () => Provider.effect(Secret, Effect.gen(function* () {
+    const toSecretName = (id, props) => props.name
+        ? Effect.succeed(props.name)
+        : createPhysicalName({ id, maxLength: 512 });
+    const createValue = Effect.fn(function* (props) {
+        if (props.secretBinary !== undefined) {
+            return { SecretBinary: props.secretBinary };
+        }
+        if (props.secretString !== undefined) {
+            return { SecretString: props.secretString };
+        }
+        if (props.generateSecretString) {
+            const { secretStringTemplate = "{}", generateStringKey = "password", ...request } = props.generateSecretString;
+            const password = yield* secretsmanager.getRandomPassword(request);
+            const generated = password.RandomPassword
+                ? typeof password.RandomPassword === "string"
+                    ? password.RandomPassword
+                    : Redacted.value(password.RandomPassword)
+                : "";
+            const template = JSON.parse(secretStringTemplate);
+            return {
+                SecretString: JSON.stringify({
+                    ...template,
+                    [generateStringKey]: generated,
+                }),
+            };
+        }
+        return {};
+    });
+    const readSecret = Effect.fn(function* (secretId) {
+        return yield* secretsmanager
+            .describeSecret({
+            SecretId: secretId,
+        })
+            .pipe(Effect.catchTag("ResourceNotFoundException", () => Effect.succeed(undefined)));
+    });
+    return {
+        stables: ["secretArn", "secretName"],
+        diff: Effect.fn(function* ({ id, olds, news }) {
+            if (!isResolved(news))
+                return undefined;
+            if ((yield* toSecretName(id, olds ?? {})) !==
+                (yield* toSecretName(id, news ?? {}))) {
+                return { action: "replace" };
+            }
+        }),
+        read: Effect.fn(function* ({ id, olds, output }) {
+            const secretName = output?.secretName ?? (yield* toSecretName(id, olds ?? {}));
+            const described = yield* readSecret(output?.secretArn ?? secretName);
+            if (!described?.ARN || !described.Name) {
+                return undefined;
+            }
+            return {
+                secretArn: described.ARN,
+                secretName: described.Name,
+                versionId: output?.versionId,
+                description: described.Description,
+                kmsKeyId: described.KmsKeyId,
+                tags: toTagRecord(described.Tags),
+            };
+        }),
+        create: Effect.fn(function* ({ id, news, session }) {
+            const secretName = yield* toSecretName(id, news);
+            const tags = {
+                ...(yield* createInternalTags(id)),
+                ...news.tags,
+            };
+            const created = yield* secretsmanager
+                .createSecret({
+                Name: secretName,
+                Description: news.description,
+                KmsKeyId: news.kmsKeyId,
+                Tags: Object.entries(tags).map(([Key, Value]) => ({
+                    Key,
+                    Value,
+                })),
+                ...(yield* createValue(news)),
+            })
+                .pipe(Effect.catchTag("ResourceExistsException", () => Effect.gen(function* () {
+                const existing = yield* secretsmanager.describeSecret({
+                    SecretId: secretName,
+                });
+                if (!existing.ARN || !existing.Name) {
+                    return yield* Effect.fail(new Error(`Secret '${secretName}' already exists but could not be described`));
+                }
+                if (news.secretString !== undefined ||
+                    news.secretBinary !== undefined ||
+                    news.generateSecretString !== undefined) {
+                    const updated = yield* secretsmanager.updateSecret({
+                        SecretId: secretName,
+                        Description: news.description,
+                        KmsKeyId: news.kmsKeyId,
+                        ...(yield* createValue(news)),
+                    });
+                    return {
+                        ARN: existing.ARN,
+                        Name: existing.Name,
+                        VersionId: updated.VersionId,
+                    };
+                }
+                return {
+                    ARN: existing.ARN,
+                    Name: existing.Name,
+                    VersionId: undefined,
+                };
+            })));
+            yield* session.note(created.ARN ?? secretName);
+            return {
+                secretArn: created.ARN ?? secretName,
+                secretName: created.Name ?? secretName,
+                versionId: created.VersionId,
+                description: news.description,
+                kmsKeyId: news.kmsKeyId,
+                tags,
+            };
+        }),
+        update: Effect.fn(function* ({ id, news, olds, output, session }) {
+            const updateRequest = {
+                SecretId: output.secretArn,
+                Description: news.description,
+                KmsKeyId: news.kmsKeyId,
+                ...(yield* createValue(news)),
+            };
+            const updated = yield* secretsmanager.updateSecret(updateRequest);
+            const oldTags = {
+                ...(yield* createInternalTags(id)),
+                ...olds.tags,
+            };
+            const newTags = {
+                ...(yield* createInternalTags(id)),
+                ...news.tags,
+            };
+            const { removed, upsert } = diffTags(oldTags, newTags);
+            if (upsert.length > 0) {
+                yield* secretsmanager.tagResource({
+                    SecretId: output.secretArn,
+                    Tags: upsert,
+                });
+            }
+            if (removed.length > 0) {
+                yield* secretsmanager.untagResource({
+                    SecretId: output.secretArn,
+                    TagKeys: removed,
+                });
+            }
+            yield* session.note(output.secretArn);
+            return {
+                ...output,
+                versionId: updated.VersionId ?? output.versionId,
+                description: news.description,
+                kmsKeyId: news.kmsKeyId,
+                tags: newTags,
+            };
+        }),
+        delete: Effect.fn(function* ({ output }) {
+            yield* secretsmanager
+                .deleteSecret({
+                SecretId: output.secretArn,
+                ForceDeleteWithoutRecovery: true,
+            })
+                .pipe(Effect.catchTag("ResourceNotFoundException", () => Effect.void));
+        }),
+    };
+}));
+//# sourceMappingURL=Secret.js.map

package/lib/AWS/SecretsManager/Secret.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Secret.js","sourceRoot":"","sources":["../../../src/AWS/SecretsManager/Secret.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,cAAc,MAAM,sCAAsC,CAAC;AACvE,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,OAAO,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AA8D7D;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,QAAQ,CAAS,2BAA2B,CAAC,CAAC;AAEpE,MAAM,WAAW,GAAG,CAClB,IAAyD,EACjC,EAAE,CAC1B,MAAM,CAAC,WAAW,CAChB,CAAC,IAAI,IAAI,EAAE,CAAC;KACT,MAAM,CACL,CAAC,GAAG,EAAyC,EAAE,CAC7C,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAC/D;KACA,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CACtC,CAAC;AAEJ,MAAM,CAAC,MAAM,cAAc,GAAG,GAAG,EAAE,CACjC,QAAQ,CAAC,MAAM,CACb,MAAM,EACN,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,YAAY,GAAG,CAAC,EAAU,EAAE,KAAkB,EAAE,EAAE,CACtD,KAAK,CAAC,IAAI;QACR,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;QAC5B,CAAC,CAAC,kBAAkB,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IAEjD,MAAM,WAAW,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAkB;QACzD,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACrC,OAAO,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAW,CAAC;QACvD,CAAC;QAED,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACrC,OAAO,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAW,CAAC;QACvD,CAAC;QAED,IAAI,KAAK,CAAC,oBAAoB,EAAE,CAAC;YAC/B,MAAM,EACJ,oBAAoB,GAAG,IAAI,EAC3B,iBAAiB,GAAG,UAAU,EAC9B,GAAG,OAAO,EACX,GAAG,KAAK,CAAC,oBAAoB,CAAC;YAC/B,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;YAClE,MAAM,SAAS,GAAG,QAAQ,CAAC,cAAc;gBACvC,CAAC,CAAC,OAAO,QAAQ,CAAC,cAAc,KAAK,QAAQ;oBAC3C,CAAC,CAAC,QAAQ,CAAC,cAAc;oBACzB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC;gBAC3C,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAG/C,CAAC;YACF,OAAO;gBACL,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC;oBAC3B,GAAG,QAAQ;oBACX,CAAC,iBAAiB,CAAC,EAAE,SAAS;iBAC/B,CAAC;aACM,CAAC;QACb,CAAC;QAED,OAAO,EAAW,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,QAAgB;QACtD,OAAO,KAAK,CAAC,CAAC,cAAc;aACzB,cAAc,CAAC;YACd,QAAQ,EAAE,QAAQ;SACnB,CAAC;aACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE,CAChD,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAC1B,CACF,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC;QACpC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;YAC3C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,SAAS,CAAC;YACxC,IACE,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;gBACrC,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,EACrC,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;QACH,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;YAC7C,MAAM,UAAU,GACd,MAAM,EAAE,UAAU,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;YAC9D,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,SAAS,IAAI,UAAU,CAAC,CAAC;YACrE,IAAI,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;gBACvC,OAAO,SAAS,CAAC;YACnB,CAAC;YAED,OAAO;gBACL,SAAS,EAAE,SAAS,CAAC,GAAG;gBACxB,UAAU,EAAE,SAAS,CAAC,IAAI;gBAC1B,SAAS,EAAE,MAAM,EAAE,SAAS;gBAC5B,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,QAAQ,EAAE,SAAS,CAAC,QAAQ;gBAC5B,IAAI,EAAE,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC;aAClC,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;YAChD,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACjD,MAAM,IAAI,GAAG;gBACX,GAAG,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;gBAClC,GAAG,IAAI,CAAC,IAAI;aACb,CAAC;YAEF,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,cAAc;iBAClC,YAAY,CAAC;gBACZ,IAAI,EAAE,UAAU;gBAChB,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;oBAChD,GAAG;oBACH,KAAK;iBACN,CAAC,CAAC;gBACH,GAAG,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;aAC9B,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE,CAC9C,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAClB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,cAAc,CAAC;oBACpD,QAAQ,EAAE,UAAU;iBACrB,CAAC,CAAC;gBACH,IAAI,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;oBACpC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CACP,WAAW,UAAU,6CAA6C,CACnE,CACF,CAAC;gBACJ,CAAC;gBAED,IACE,IAAI,CAAC,YAAY,KAAK,SAAS;oBAC/B,IAAI,CAAC,YAAY,KAAK,SAAS;oBAC/B,IAAI,CAAC,oBAAoB,KAAK,SAAS,EACvC,CAAC;oBACD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,YAAY,CAAC;wBACjD,QAAQ,EAAE,UAAU;wBACpB,WAAW,EAAE,IAAI,CAAC,WAAW;wBAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,GAAG,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;qBAC9B,CAAC,CAAC;oBACH,OAAO;wBACL,GAAG,EAAE,QAAQ,CAAC,GAAG;wBACjB,IAAI,EAAE,QAAQ,CAAC,IAAI;wBACnB,SAAS,EAAE,OAAO,CAAC,SAAS;qBAC7B,CAAC;gBACJ,CAAC;gBAED,OAAO;oBACL,GAAG,EAAE,QAAQ,CAAC,GAAG;oBACjB,IAAI,EAAE,QAAQ,CAAC,IAAI;oBACnB,SAAS,EAAE,SAAS;iBACrB,CAAC;YACJ,CAAC,CAAC,CACH,CACF,CAAC;YAEJ,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,UAAU,CAAC,CAAC;YAC/C,OAAO;gBACL,SAAS,EAAE,OAAO,CAAC,GAAG,IAAI,UAAU;gBACpC,UAAU,EAAE,OAAO,CAAC,IAAI,IAAI,UAAU;gBACtC,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,IAAI;aACL,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;YAC9D,MAAM,aAAa,GAAuC;gBACxD,QAAQ,EAAE,MAAM,CAAC,SAAS;gBAC1B,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,GAAG,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;aAC9B,CAAC;YAEF,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;YAElE,MAAM,OAAO,GAAG;gBACd,GAAG,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;gBAClC,GAAG,IAAI,CAAC,IAAI;aACb,CAAC;YACF,MAAM,OAAO,GAAG;gBACd,GAAG,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;gBAClC,GAAG,IAAI,CAAC,IAAI;aACb,CAAC;YACF,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAEvD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,KAAK,CAAC,CAAC,cAAc,CAAC,WAAW,CAAC;oBAChC,QAAQ,EAAE,MAAM,CAAC,SAAS;oBAC1B,IAAI,EAAE,MAAM;iBACb,CAAC,CAAC;YACL,CAAC;YAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,KAAK,CAAC,CAAC,cAAc,CAAC,aAAa,CAAC;oBAClC,QAAQ,EAAE,MAAM,CAAC,SAAS;oBAC1B,OAAO,EAAE,OAAO;iBACjB,CAAC,CAAC;YACL,CAAC;YAED,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACtC,OAAO;gBACL,GAAG,MAAM;gBACT,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS;gBAChD,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,IAAI,EAAE,OAAO;aACd,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACrC,KAAK,CAAC,CAAC,cAAc;iBAClB,YAAY,CAAC;gBACZ,QAAQ,EAAE,MAAM,CAAC,SAAS;gBAC1B,0BAA0B,EAAE,IAAI;aACjC,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAChE,CAAC;QACN,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}

package/lib/AWS/SecretsManager/index.d.ts

@@ -0,0 +1,7 @@
+export * from "./DescribeSecret.ts";
+export * from "./GetSecretValue.ts";
+export * from "./GetRandomPassword.ts";
+export * from "./ListSecrets.ts";
+export * from "./PutSecretValue.ts";
+export * from "./Secret.ts";
+//# sourceMappingURL=index.d.ts.map

package/lib/AWS/SecretsManager/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/AWS/SecretsManager/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,wBAAwB,CAAC;AACvC,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,aAAa,CAAC"}

package/lib/AWS/SecretsManager/index.js

@@ -0,0 +1,7 @@
+export * from "./DescribeSecret.js";
+export * from "./GetSecretValue.js";
+export * from "./GetRandomPassword.js";
+export * from "./ListSecrets.js";
+export * from "./PutSecretValue.js";
+export * from "./Secret.js";
+//# sourceMappingURL=index.js.map

package/lib/AWS/SecretsManager/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/AWS/SecretsManager/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,wBAAwB,CAAC;AACvC,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,aAAa,CAAC"}

package/lib/AWS/StageConfig.d.ts

@@ -0,0 +1,25 @@
+import type { AwsCredentialIdentity } from "@smithy/types";
+import * as Config from "effect/Config";
+import * as Context from "effect/Context";
+import * as Effect from "effect/Effect";
+import * as Layer from "effect/Layer";
+import type { AccountID } from "./Account.ts";
+import { type RegionID } from "./Region.ts";
+export declare const AWS_PROFILE: Config.Config<string>;
+declare const StageConfig_base: Context.ServiceClass<StageConfig, "AWS::StageConfig", {
+    account?: AccountID;
+    region?: RegionID;
+    profile?: string;
+    credentials?: AwsCredentialIdentity;
+    endpoint?: string;
+}>;
+export declare class StageConfig extends StageConfig_base {
+}
+export declare const DefaultStageConfig: Layer.Layer<StageConfig, never, import("effect/FileSystem").FileSystem | import("effect/Path").Path | import("effect/unstable/http/HttpClient").HttpClient>;
+export declare const loadDefaultStageConfig: () => Effect.Effect<{
+    profile: string;
+    account: string;
+    region: string;
+}, Config.ConfigError | import("@distilled.cloud/aws/Credentials").CredentialsError, import("effect/FileSystem").FileSystem | import("effect/Path").Path | import("effect/unstable/http/HttpClient").HttpClient>;
+export {};
+//# sourceMappingURL=StageConfig.d.ts.map

package/lib/AWS/StageConfig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"StageConfig.d.ts","sourceRoot":"","sources":["../../src/AWS/StageConfig.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAC3D,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAC1C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAc,KAAK,QAAQ,EAAE,MAAM,aAAa,CAAC;AAExD,eAAO,MAAM,WAAW,uBAEvB,CAAC;;cAKY,SAAS;aACV,QAAQ;cACP,MAAM;kBACF,qBAAqB;eACxB,MAAM;;AAPrB,qBAAa,WAAY,SAAQ,gBASV;CAAG;AAE1B,eAAO,MAAM,kBAAkB,6JAGZ,CAAC;AAEpB,eAAO,MAAM,sBAAsB;;;;gNAc/B,CAAC"}

package/lib/AWS/StageConfig.js

@@ -0,0 +1,23 @@
+import * as Auth from "@distilled.cloud/aws/Auth";
+import * as Config from "effect/Config";
+import * as Context from "effect/Context";
+import * as Effect from "effect/Effect";
+import * as Layer from "effect/Layer";
+import { AWS_REGION } from "./Region.js";
+export const AWS_PROFILE = Config.string("AWS_PROFILE").pipe(Config.withDefault("default"));
+export class StageConfig extends Context.Service()("AWS::StageConfig") {
+}
+export const DefaultStageConfig = Layer.effect(StageConfig, Effect.suspend(() => loadDefaultStageConfig())).pipe(Layer.orDie);
+export const loadDefaultStageConfig = () => Effect.gen(function* () {
+    const profileName = yield* AWS_PROFILE;
+    const profile = yield* Auth.loadProfile(profileName);
+    if (!profile.sso_account_id) {
+        return yield* Effect.die(`AWS SSO Profile '${profileName}' is missing sso_account_id configuration`);
+    }
+    return {
+        profile: profileName,
+        account: profile.sso_account_id,
+        region: profile.region ?? (yield* AWS_REGION),
+    };
+});
+//# sourceMappingURL=StageConfig.js.map

package/lib/AWS/StageConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"StageConfig.js","sourceRoot":"","sources":["../../src/AWS/StageConfig.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,2BAA2B,CAAC;AAElD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAC1C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAEtC,OAAO,EAAE,UAAU,EAAiB,MAAM,aAAa,CAAC;AAExD,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAC1D,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAC9B,CAAC;AAEF,MAAM,OAAO,WAAY,SAAQ,OAAO,CAAC,OAAO,EAS7C,CAAC,kBAAkB,CAAC;CAAG;AAE1B,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,CAAC,MAAM,CAC5C,WAAW,EACX,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,sBAAsB,EAAE,CAAC,CAC/C,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAEpB,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,EAAE,CACzC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC;IACvC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;IACrD,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CACtB,oBAAoB,WAAW,2CAA2C,CAC3E,CAAC;IACJ,CAAC;IACD,OAAO;QACL,OAAO,EAAE,WAAW;QACpB,OAAO,EAAE,OAAO,CAAC,cAAc;QAC/B,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC;KAC9C,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/lib/AWS/Website/AssetDeployment.d.ts

@@ -0,0 +1,79 @@
+import * as Provider from "../../Provider.ts";
+import { Resource } from "../../Resource.ts";
+import type { Providers } from "../Providers.ts";
+import type { WebsiteTextEncoding } from "./shared.ts";
+export interface AssetFileOption {
+    /**
+     * Glob or globs of files to match.
+     */
+    files: string | string[];
+    /**
+     * Override `Content-Type` for matched files.
+     */
+    contentType?: string;
+    /**
+     * Override `Cache-Control` for matched files.
+     */
+    cacheControl?: string;
+    /**
+     * Optional glob or globs excluded from this rule.
+     */
+    ignore?: string | string[];
+}
+export interface AssetDeploymentProps {
+    /**
+     * Destination bucket.
+     */
+    bucket: {
+        bucketName: string;
+    };
+    /**
+     * Local directory to upload.
+     */
+    sourcePath: string;
+    /**
+     * Optional key prefix within the bucket.
+     */
+    prefix?: string;
+    /**
+     * Remove old files under the prefix that are not part of the current deploy.
+     * @default false
+     */
+    purge?: boolean;
+    /**
+     * Optional per-file overrides.
+     */
+    fileOptions?: AssetFileOption[];
+    /**
+     * Character encoding applied to inferred text-based asset content types.
+     * @default "utf-8"
+     */
+    textEncoding?: WebsiteTextEncoding;
+}
+export interface AssetDeployment extends Resource<"AWS.Website.AssetDeployment", AssetDeploymentProps, {
+    bucketName: string;
+    prefix: string;
+    version: string;
+    fileCount: number;
+}, never, Providers> {
+}
+/**
+ * Upload a local directory into S3 with website-friendly defaults.
+ *
+ * `AssetDeployment` is a helper resource for website hosting. It uploads all
+ * files in a directory, infers content types, applies cache-control defaults,
+ * and can optionally purge stale files under a prefix.
+ *
+ * @section Deploying Files
+ * @example Upload A Build Directory
+ * ```typescript
+ * const files = yield* AssetDeployment("WebsiteFiles", {
+ *   bucket,
+ *   sourcePath: "./dist",
+ *   prefix: "_assets",
+ * });
+ * ```
+ */
+export declare const AssetDeployment: import("../../Resource.ts").ResourceClass<AssetDeployment>;
+export declare const AssetDeploymentProvider: () => import("effect/Layer").Layer<Provider.Provider<AssetDeployment>, never, import("effect/unstable/http/HttpClient").HttpClient | import("@distilled.cloud/aws/Region").Region | import("@distilled.cloud/aws/Credentials").Credentials>;
+//# sourceMappingURL=AssetDeployment.d.ts.map

package/lib/AWS/Website/AssetDeployment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AssetDeployment.d.ts","sourceRoot":"","sources":["../../../src/AWS/Website/AssetDeployment.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAEvD,MAAM,WAAW,eAAe;IAC9B;;OAEG;IACH,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACzB;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,MAAM,EAAE;QACN,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC;IACF;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;OAEG;IACH,WAAW,CAAC,EAAE,eAAe,EAAE,CAAC;IAChC;;;OAGG;IACH,YAAY,CAAC,EAAE,mBAAmB,CAAC;CACpC;AAED,MAAM,WAAW,eAAgB,SAAQ,QAAQ,CAC/C,6BAA6B,EAC7B,oBAAoB,EACpB;IACE,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB,EACD,KAAK,EACL,SAAS,CACV;CAAG;AAEJ;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,eAAe,4DAE3B,CAAC;AAKF,eAAO,MAAM,uBAAuB,6OA2FjC,CAAC"}

package/lib/AWS/Website/AssetDeployment.js

@@ -0,0 +1,202 @@
+import * as s3 from "@distilled.cloud/aws/s3";
+import * as Duration from "effect/Duration";
+import * as Effect from "effect/Effect";
+import * as Schedule from "effect/Schedule";
+import { createHash } from "node:crypto";
+import { readdir, readFile } from "node:fs/promises";
+import path from "node:path";
+import * as Provider from "../../Provider.js";
+import { Resource } from "../../Resource.js";
+/**
+ * Upload a local directory into S3 with website-friendly defaults.
+ *
+ * `AssetDeployment` is a helper resource for website hosting. It uploads all
+ * files in a directory, infers content types, applies cache-control defaults,
+ * and can optionally purge stale files under a prefix.
+ *
+ * @section Deploying Files
+ * @example Upload A Build Directory
+ * ```typescript
+ * const files = yield* AssetDeployment("WebsiteFiles", {
+ *   bucket,
+ *   sourcePath: "./dist",
+ *   prefix: "_assets",
+ * });
+ * ```
+ */
+export const AssetDeployment = Resource("AWS.Website.AssetDeployment");
+const defaultHtmlCacheControl = "max-age=0,no-cache,no-store,must-revalidate";
+const defaultAssetCacheControl = "max-age=31536000,public,immutable";
+export const AssetDeploymentProvider = () => Provider.effect(AssetDeployment, Effect.gen(function* () {
+    const sync = Effect.fn(function* (news) {
+        const bucketName = news.bucket.bucketName;
+        const prefix = normalizePrefix(news.prefix);
+        const root = news.sourcePath;
+        const files = yield* Effect.tryPromise(() => walk(root));
+        const hash = createHash("sha256");
+        const desiredKeys = new Set();
+        for (const relativePath of files.sort((a, b) => a.localeCompare(b))) {
+            const body = yield* Effect.tryPromise(() => readFile(path.join(root, relativePath)));
+            const normalizedRelativePath = toPosix(relativePath);
+            const key = prefix
+                ? `${prefix}/${normalizedRelativePath}`
+                : normalizedRelativePath;
+            const options = getFileOptions(normalizedRelativePath, news.fileOptions, news.textEncoding);
+            hash.update(normalizedRelativePath);
+            hash.update(body);
+            hash.update(options.contentType);
+            hash.update(options.cacheControl);
+            desiredKeys.add(key);
+            yield* s3.putObject({
+                Bucket: bucketName,
+                Key: key,
+                Body: body,
+                ContentType: options.contentType,
+                CacheControl: options.cacheControl,
+            });
+        }
+        if (news.purge ?? false) {
+            const existingKeys = yield* listKeys(bucketName, prefix ? `${prefix}/` : prefix);
+            const staleKeys = existingKeys.filter((key) => !desiredKeys.has(key));
+            yield* deleteKeys(bucketName, staleKeys);
+        }
+        return {
+            bucketName,
+            prefix,
+            version: hash.digest("hex"),
+            fileCount: files.length,
+        };
+    });
+    return {
+        read: Effect.fn(function* ({ output }) {
+            return output;
+        }),
+        create: Effect.fn(function* ({ news, session }) {
+            const output = yield* retryForBucketReadiness(sync(news));
+            yield* session.note(`Uploaded ${output.fileCount} file(s) to s3://${output.bucketName}/${output.prefix}`);
+            return output;
+        }),
+        update: Effect.fn(function* ({ news, session }) {
+            const output = yield* retryForBucketReadiness(sync(news));
+            yield* session.note(`Uploaded ${output.fileCount} file(s) to s3://${output.bucketName}/${output.prefix}`);
+            return output;
+        }),
+        delete: Effect.fn(function* ({ olds, output }) {
+            if (!(olds.purge ?? false)) {
+                return;
+            }
+            const prefix = output.prefix ? `${output.prefix}/` : output.prefix;
+            yield* retryForBucketReadiness(Effect.gen(function* () {
+                const existingKeys = yield* listKeys(output.bucketName, prefix);
+                yield* deleteKeys(output.bucketName, existingKeys);
+            })).pipe(Effect.catchTag("NoSuchBucket", () => Effect.void));
+        }),
+    };
+}));
+const normalizePrefix = (prefix) => prefix ? prefix.replace(/^\/+|\/+$/g, "") : "";
+const toPosix = (value) => value.split(path.sep).join("/");
+const withCharset = (mimeType, textEncoding) => textEncoding === "none" ? mimeType : `${mimeType}; charset=${textEncoding}`;
+const inferContentType = (file, textEncoding = "utf-8") => {
+    const ext = path.extname(file).toLowerCase();
+    switch (ext) {
+        case ".html":
+            return withCharset("text/html", textEncoding);
+        case ".css":
+            return withCharset("text/css", textEncoding);
+        case ".js":
+        case ".mjs":
+            return withCharset("application/javascript", textEncoding);
+        case ".json":
+            return withCharset("application/json", textEncoding);
+        case ".svg":
+            return "image/svg+xml";
+        case ".png":
+            return "image/png";
+        case ".jpg":
+        case ".jpeg":
+            return "image/jpeg";
+        case ".gif":
+            return "image/gif";
+        case ".webp":
+            return "image/webp";
+        case ".ico":
+            return "image/x-icon";
+        case ".txt":
+            return withCharset("text/plain", textEncoding);
+        case ".xml":
+            return withCharset("application/xml", textEncoding);
+        case ".woff":
+            return "font/woff";
+        case ".woff2":
+            return "font/woff2";
+        default:
+            return "application/octet-stream";
+    }
+};
+const defaultCacheControlFor = (file) => path.extname(file).toLowerCase() === ".html"
+    ? defaultHtmlCacheControl
+    : defaultAssetCacheControl;
+const escapeRegex = (value) => value.replace(/[|\\{}()[\]^$+?.]/g, "\\$&");
+const globToRegExp = (glob) => new RegExp(`^${escapeRegex(toPosix(glob))
+    .replace(/\\\*\\\*/g, ".*")
+    .replace(/\\\*/g, "[^/]*")
+    .replace(/\\\?/g, ".")}$`);
+const matchesAny = (file, globs) => (Array.isArray(globs) ? globs : [globs]).some((glob) => globToRegExp(glob).test(file));
+const getFileOptions = (file, options, textEncoding) => {
+    const matched = [...(options ?? [])]
+        .reverse()
+        .find((option) => matchesAny(file, option.files) &&
+        !(option.ignore && matchesAny(file, option.ignore)));
+    return {
+        contentType: matched?.contentType ?? inferContentType(file, textEncoding ?? "utf-8"),
+        cacheControl: matched?.cacheControl ?? defaultCacheControlFor(file),
+    };
+};
+const walk = async (root, dir = "") => {
+    const entries = await readdir(path.join(root, dir), { withFileTypes: true });
+    const files = await Promise.all(entries.map(async (entry) => {
+        const relative = path.join(dir, entry.name);
+        if (entry.isDirectory()) {
+            return walk(root, relative);
+        }
+        return [relative];
+    }));
+    return files.flat();
+};
+const listKeys = Effect.fn(function* (bucketName, prefix) {
+    let continuationToken;
+    const keys = [];
+    do {
+        const response = yield* s3.listObjectsV2({
+            Bucket: bucketName,
+            Prefix: prefix || undefined,
+            ContinuationToken: continuationToken,
+        });
+        keys.push(...(response.Contents ?? []).flatMap((item) => item.Key ? [item.Key] : []));
+        continuationToken = response.NextContinuationToken;
+    } while (continuationToken);
+    return keys;
+});
+const deleteKeys = Effect.fn(function* (bucketName, keys) {
+    for (let i = 0; i < keys.length; i += 1000) {
+        const batch = keys.slice(i, i + 1000);
+        if (batch.length === 0) {
+            continue;
+        }
+        yield* s3.deleteObjects({
+            Bucket: bucketName,
+            Delete: {
+                Objects: batch.map((Key) => ({ Key })),
+                Quiet: true,
+            },
+        });
+    }
+});
+const isMissingBucket = (error) => error._tag === "NoSuchBucket";
+const retryForBucketReadiness = (effect) => effect.pipe(Effect.retry({
+    while: isMissingBucket,
+    schedule: Schedule.exponential("100 millis").pipe(Schedule.both(Schedule.recurs(30)), Schedule.map(([duration]) => Duration.isGreaterThan(duration, Duration.seconds(2))
+        ? Duration.seconds(2)
+        : duration)),
+}));
+//# sourceMappingURL=AssetDeployment.js.map

package/lib/AWS/Website/AssetDeployment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AssetDeployment.js","sourceRoot":"","sources":["../../../src/AWS/Website/AssetDeployment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,yBAAyB,CAAC;AAC9C,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAmE7C;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,QAAQ,CACrC,6BAA6B,CAC9B,CAAC;AAEF,MAAM,uBAAuB,GAAG,6CAA6C,CAAC;AAC9E,MAAM,wBAAwB,GAAG,mCAAmC,CAAC;AAErE,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,EAAE,CAC1C,QAAQ,CAAC,MAAM,CACb,eAAe,EACf,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,IAA0B;QAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;QAC1C,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QAClC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;QAEtC,KAAK,MAAM,YAAY,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,CACzC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CACxC,CAAC;YACF,MAAM,sBAAsB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;YACrD,MAAM,GAAG,GAAG,MAAM;gBAChB,CAAC,CAAC,GAAG,MAAM,IAAI,sBAAsB,EAAE;gBACvC,CAAC,CAAC,sBAAsB,CAAC;YAC3B,MAAM,OAAO,GAAG,cAAc,CAC5B,sBAAsB,EACtB,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,YAAY,CAClB,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;YACpC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAClB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAElC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAErB,KAAK,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC;gBAClB,MAAM,EAAE,UAAU;gBAClB,GAAG,EAAE,GAAG;gBACR,IAAI,EAAE,IAAI;gBACV,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,YAAY,EAAE,OAAO,CAAC,YAAY;aACnC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,IAAI,KAAK,EAAE,CAAC;YACxB,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,QAAQ,CAClC,UAAU,EACV,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,CAC/B,CAAC;YACF,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;YACtE,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO;YACL,UAAU;YACV,MAAM;YACN,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;YAC3B,SAAS,EAAE,KAAK,CAAC,MAAM;SACxB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACnC,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;YAC5C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAC1D,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CACjB,YAAY,MAAM,CAAC,SAAS,oBAAoB,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,MAAM,EAAE,CACrF,CAAC;YACF,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;YAC5C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAC1D,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CACjB,YAAY,MAAM,CAAC,SAAS,oBAAoB,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,MAAM,EAAE,CACrF,CAAC;YACF,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;YAC3C,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,EAAE,CAAC;gBAC3B,OAAO;YACT,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;YACnE,KAAK,CAAC,CAAC,uBAAuB,CAC5B,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAClB,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;gBAChE,KAAK,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;YACrD,CAAC,CAAC,CACH,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7D,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC;AAEJ,MAAM,eAAe,GAAG,CAAC,MAA0B,EAAE,EAAE,CACrD,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAEjD,MAAM,OAAO,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEnE,MAAM,WAAW,GAAG,CAAC,QAAgB,EAAE,YAAiC,EAAE,EAAE,CAC1E,YAAY,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,aAAa,YAAY,EAAE,CAAC;AAE9E,MAAM,gBAAgB,GAAG,CACvB,IAAY,EACZ,eAAoC,OAAO,EAC3C,EAAE;IACF,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7C,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,OAAO;YACV,OAAO,WAAW,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QAChD,KAAK,MAAM;YACT,OAAO,WAAW,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAC/C,KAAK,KAAK,CAAC;QACX,KAAK,MAAM;YACT,OAAO,WAAW,CAAC,wBAAwB,EAAE,YAAY,CAAC,CAAC;QAC7D,KAAK,OAAO;YACV,OAAO,WAAW,CAAC,kBAAkB,EAAE,YAAY,CAAC,CAAC;QACvD,KAAK,MAAM;YACT,OAAO,eAAe,CAAC;QACzB,KAAK,MAAM;YACT,OAAO,WAAW,CAAC;QACrB,KAAK,MAAM,CAAC;QACZ,KAAK,OAAO;YACV,OAAO,YAAY,CAAC;QACtB,KAAK,MAAM;YACT,OAAO,WAAW,CAAC;QACrB,KAAK,OAAO;YACV,OAAO,YAAY,CAAC;QACtB,KAAK,MAAM;YACT,OAAO,cAAc,CAAC;QACxB,KAAK,MAAM;YACT,OAAO,WAAW,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;QACjD,KAAK,MAAM;YACT,OAAO,WAAW,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC;QACtD,KAAK,OAAO;YACV,OAAO,WAAW,CAAC;QACrB,KAAK,QAAQ;YACX,OAAO,YAAY,CAAC;QACtB;YACE,OAAO,0BAA0B,CAAC;IACtC,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,sBAAsB,GAAG,CAAC,IAAY,EAAE,EAAE,CAC9C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,OAAO;IAC1C,CAAC,CAAC,uBAAuB;IACzB,CAAC,CAAC,wBAAwB,CAAC;AAE/B,MAAM,WAAW,GAAG,CAAC,KAAa,EAAE,EAAE,CACpC,KAAK,CAAC,OAAO,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC;AAE9C,MAAM,YAAY,GAAG,CAAC,IAAY,EAAE,EAAE,CACpC,IAAI,MAAM,CACR,IAAI,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;KAC3B,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC;KAC1B,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC;KACzB,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,CAC5B,CAAC;AAEJ,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,KAAwB,EAAE,EAAE,CAC5D,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CACrD,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAC9B,CAAC;AAEJ,MAAM,cAAc,GAAG,CACrB,IAAY,EACZ,OAAsC,EACtC,YAA6C,EAI7C,EAAE;IACF,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;SACjC,OAAO,EAAE;SACT,IAAI,CACH,CAAC,MAAM,EAAE,EAAE,CACT,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC;QAC9B,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CACtD,CAAC;IAEJ,OAAO;QACL,WAAW,EACT,OAAO,EAAE,WAAW,IAAI,gBAAgB,CAAC,IAAI,EAAE,YAAY,IAAI,OAAO,CAAC;QACzE,YAAY,EAAE,OAAO,EAAE,YAAY,IAAI,sBAAsB,CAAC,IAAI,CAAC;KACpE,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,IAAI,GAAG,KAAK,EAAE,IAAY,EAAE,GAAG,GAAG,EAAE,EAAqB,EAAE;IAC/D,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7E,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7B,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC9B,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpB,CAAC,CAAC,CACH,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC,CAAC;AAEF,MAAM,QAAQ,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,UAAkB,EAAE,MAAc;IACtE,IAAI,iBAAqC,CAAC;IAC1C,MAAM,IAAI,GAAa,EAAE,CAAC;IAE1B,GAAG,CAAC;QACF,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC;YACvC,MAAM,EAAE,UAAU;YAClB,MAAM,EAAE,MAAM,IAAI,SAAS;YAC3B,iBAAiB,EAAE,iBAAiB;SACrC,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CACP,GAAG,CAAC,QAAQ,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAC5C,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAC3B,CACF,CAAC;QACF,iBAAiB,GAAG,QAAQ,CAAC,qBAAqB,CAAC;IACrD,CAAC,QAAQ,iBAAiB,EAAE;IAE5B,OAAO,IAAI,CAAC;AACd,CAAC,CAAC,CAAC;AAEH,MAAM,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,UAAkB,EAAE,IAAc;IACxE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QACtC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,SAAS;QACX,CAAC;QACD,KAAK,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC;YACtB,MAAM,EAAE,UAAU;YAClB,MAAM,EAAE;gBACN,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;gBACtC,KAAK,EAAE,IAAI;aACZ;SACF,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,CAAC,KAAc,EAAE,EAAE,CACxC,KAA2B,CAAC,IAAI,KAAK,cAAc,CAAC;AAEvD,MAAM,uBAAuB,GAAG,CAAU,MAA8B,EAAE,EAAE,CAC1E,MAAM,CAAC,IAAI,CACT,MAAM,CAAC,KAAK,CAAC;IACX,KAAK,EAAE,eAAe;IACtB,QAAQ,EAAE,QAAQ,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,IAAI,CAC/C,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAClC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,CAC1B,QAAQ,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACnD,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QACrB,CAAC,CAAC,QAAQ,CACb,CACF;CACF,CAAC,CACH,CAAC"}