raindancers-cloudfront 0.0.0

package/lib/bicep/patterns/azureAdApplicationFederated.js

@@ -0,0 +1,317 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AzureAdApplicationFederated = exports.OidcAudience = void 0;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const core = __importStar(require("aws-cdk-lib"));
+const aws_cdk_lib_1 = require("aws-cdk-lib");
+const constructs_1 = require("constructs");
+const bicep = __importStar(require("../deploy"));
+const azure = __importStar(require("../resources/azure"));
+const graph = __importStar(require("../resources/graph"));
+/**
+ * Well-known OIDC audience values for common providers
+ */
+var OidcAudience;
+(function (OidcAudience) {
+    /** AWS Security Token Service */
+    OidcAudience["AWS_STS"] = "sts.amazonaws.com";
+    /** Azure AD Token Exchange for Workload Identity Federation */
+    OidcAudience["AZURE_AD_TOKEN_EXCHANGE"] = "api://AzureADTokenExchange";
+    /** Microsoft Graph API */
+    OidcAudience["MICROSOFT_GRAPH"] = "https://graph.microsoft.com";
+    /** Kubernetes default service account */
+    OidcAudience["KUBERNETES"] = "https://kubernetes.default.svc";
+})(OidcAudience || (exports.OidcAudience = OidcAudience = {}));
+class AzureAdApplicationFederated extends constructs_1.Construct {
+    constructor(scope, id, props) {
+        super(scope, id);
+        if (props.enableAwsSessionTagMapping && (!props.groups || props.groups.length === 0)) {
+            throw new Error('enableAwsSessionTagMapping requires groups to be defined. ' +
+                'Custom Claims Provider maps Azure AD groups/roles to AWS session tags.');
+        }
+        this.trustedTokenRequester = props.trustedTokenRequester;
+        const stack = core.Stack.of(this);
+        const cloudformationArn = `arn:aws:cloudformation:${stack.region}:${stack.account}:stack/${stack.stackName}`;
+        let claimsProviderResult;
+        const { template, outputKeys } = new bicep.BicepTemplateBuilder()
+            .withMetadata({
+            name: props.appName,
+            description: 'Azure AD Application with federated credentials for AWS integration',
+            cloudformation: {
+                stackArn: cloudformationArn,
+            },
+        })
+            .withExtensions(bicep.BicepExtension.MICROSOFT_GRAPH_STABLE)
+            .withResources(builder => {
+            claimsProviderResult = this.buildResources(builder, props);
+        })
+            .withOutputs({
+            appId: 'Application.appId',
+            tenantId: 'tenant().tenantId',
+            ...(props.enableAwsSessionTagMapping ? {
+                functionAppName: 'Functionapp.name',
+            } : {}),
+        })
+            .build();
+        const deployment = new bicep.BicepDeployment(this, 'Deployment', {
+            template: template.synthesize(),
+            resourceGroupName: props.resourceGroupName,
+            azureFederatedCredentials: props.deploymentCredentials,
+            cloudformationStackArn: cloudformationArn,
+            parameters: {
+                deploymentSpObjectId: props.deploymentCredentials.spObjectId,
+            },
+            functionCode: claimsProviderResult ? {
+                s3BucketName: claimsProviderResult.functionCodeAsset.s3BucketName,
+                s3ObjectKey: claimsProviderResult.functionCodeAsset.s3ObjectKey,
+            } : undefined,
+        });
+        if (claimsProviderResult) {
+            claimsProviderResult.functionCodeAsset.grantRead(deployment.lambdaRole);
+        }
+        this.outputs = {};
+        outputKeys.forEach(key => {
+            this.outputs[key] = deployment.getOutput(key);
+        });
+    }
+    buildResources(template, props) {
+        const appRoles = props.groups?.map((groupName) => {
+            const roleId = `guid('${groupName}-role')`;
+            return {
+                id: roleId,
+                displayName: groupName,
+                description: `${groupName} role for ${props.appName}`,
+                value: groupName,
+                allowedMemberTypes: [graph.AllowedMemberType.USER],
+                isEnabled: true,
+            };
+        }) || [];
+        const application = new graph.Application(template, 'application', {
+            displayName: props.appName,
+            redirectUris: props.redirectUris,
+            signInAudience: props.signInAudience ?? graph.SignInAudience.AZURE_AD_MY_ORG,
+            appRoles: appRoles,
+            optionalClaims: appRoles.length > 0 ? {
+                idToken: [
+                    {
+                        name: 'roles',
+                        essential: false,
+                    },
+                    ...(props.enableAwsSessionTagMapping ? [{
+                            name: 'https://aws.amazon.com/tags/principal_tags/Roles',
+                            essential: false,
+                            source: 'customClaimsProvider',
+                        }] : []),
+                ],
+            } : undefined,
+        });
+        const servicePrincipal = new graph.ServicePrincipal(template, 'servicePrincipal', {
+            application: application,
+            appRoleAssignmentRequired: false,
+        });
+        const federatedCredential = new graph.FederatedIdentityCredential(template, 'federatedCredential', {
+            application: application,
+            name: `${props.appName}-aws-credential`,
+            issuer: props.trustedTokenRequester.issuer,
+            subject: props.trustedTokenRequester.sub,
+            audiences: props.trustedTokenRequester.aud,
+            description: `Federated credential for ${props.appName} AWS integration`,
+        });
+        if (props.groups) {
+            props.groups.forEach((groupName) => {
+                const sanitizedName = this.sanitizeIdentifier(groupName);
+                const group = new graph.Group(template, `group${sanitizedName}`, {
+                    displayName: groupName,
+                    description: `${groupName} group for ${props.appName}`,
+                });
+                const appRoleId = `guid('${groupName}-role')`;
+                const assignment = new graph.AppRoleAssignment(template, `groupAssignment${sanitizedName}`, {
+                    resourceServicePrincipal: servicePrincipal,
+                    principal: group,
+                    appRoleId: appRoleId,
+                });
+                group.synthesize();
+                assignment.synthesize();
+            });
+        }
+        application.synthesize();
+        servicePrincipal.synthesize();
+        federatedCredential.synthesize();
+        if (!props.enableAwsSessionTagMapping) {
+            return undefined;
+        }
+        return this.buildCustomClaimsProvider(template, props);
+    }
+    buildCustomClaimsProvider(template, props) {
+        template.addStringParameter('location', 'Azure region for resources', "'australiaeast'");
+        template.addStringParameter('deploymentSpObjectId', 'Object ID of the SP deploying this template (needs Storage Blob Data Contributor)', '');
+        const namePrefix = props.appName.toLowerCase();
+        const uniqueSuffix = 'substring(uniqueString(resourceGroup().id), 0, 8)';
+        const managedIdentity = new azure.ManagedIdentity(template, 'managedIdentity', {
+            name: `'${namePrefix}-claims-identity-\${${uniqueSuffix}}'`,
+        });
+        const storageAccount = new azure.StorageAccount(template, 'storageAccount', {
+            name: `'${namePrefix}claims\${${uniqueSuffix}}'`,
+        });
+        const appServicePlan = new azure.AppServicePlan(template, 'appServicePlan', {
+            name: `'${namePrefix}-claims-plan-\${${uniqueSuffix}}'`,
+        });
+        const logAnalyticsWorkspace = new azure.LogAnalyticsWorkspace(template, 'logAnalyticsWorkspace', {
+            name: `'${namePrefix}-claims-logs-\${${uniqueSuffix}}'`,
+        });
+        const applicationInsights = new azure.ApplicationInsights(template, 'applicationInsights', {
+            name: `'${namePrefix}-claims-insights-\${${uniqueSuffix}}'`,
+            logAnalyticsWorkspace: logAnalyticsWorkspace,
+        });
+        const functionApp = new azure.FunctionApp(template, 'functionApp', {
+            name: `'${namePrefix}-claims-func-\${${uniqueSuffix}}'`,
+            managedIdentity: managedIdentity,
+            appServicePlan: appServicePlan,
+            storageAccount: storageAccount,
+            applicationInsights: applicationInsights,
+        });
+        const roleAssignment = new azure.RoleAssignment(template, 'managedIdentityContributor', {
+            name: `guid('${props.appName}-mi-contributor')`,
+            roleDefinitionId: azure.AzureBuiltInRole.WEBSITE_CONTRIBUTOR,
+            principalId: managedIdentity,
+        });
+        const spBlobRoleAssignment = new azure.RoleAssignment(template, 'deploymentSpBlobContributor', {
+            name: `guid('${props.appName}-sp-blob-contributor')`,
+            roleDefinitionId: azure.AzureBuiltInRole.STORAGE_BLOB_DATA_CONTRIBUTOR,
+            principalId: 'deploymentSpObjectId',
+        });
+        spBlobRoleAssignment.addDependency(storageAccount);
+        const functionCodeAsset = new aws_cdk_lib_1.aws_s3_assets.Asset(this, 'FunctionCodeAsset', {
+            path: path.join(__dirname, '..', 'azure-functions', 'custom-claims-provider'),
+            bundling: {
+                image: core.DockerImage.fromRegistry('python:3.12-slim'),
+                command: [
+                    'bash', '-c',
+                    'pip install -r /asset-input/requirements.txt -t /asset-output/ && cp /asset-input/function_app.py /asset-input/host.json /asset-input/requirements.txt /asset-output/',
+                ],
+            },
+        });
+        const functionAppRegistration = new graph.Application(template, 'functionAppRegistration', {
+            displayName: `${namePrefix}-claims-func-app`,
+            redirectUris: [],
+            requiredResourceAccess: [
+                {
+                    resourceAppId: graph.ResourceAppId.MICROSOFT_GRAPH,
+                    resourceAccess: [
+                        {
+                            id: graph.MicrosoftGraphPermission.CUSTOM_AUTH_EXT_RECEIVE_PAYLOAD,
+                            type: graph.PermissionType.ROLE,
+                        },
+                    ],
+                },
+            ],
+        });
+        const graphServicePrincipal = new graph.ExistingServicePrincipal(template, 'graphServicePrincipal', {
+            appId: '00000003-0000-0000-c000-000000000000',
+        });
+        const miPolicyReadPermission = new graph.AppRoleAssignment(template, 'miPolicyReadPermission', {
+            resourceServicePrincipal: graphServicePrincipal,
+            principal: `${managedIdentity.principalId}`,
+            appRoleId: '\'246dd0d5-5bd0-4def-940b-0421030a5b68\'',
+        });
+        const miPolicyPermission = new graph.AppRoleAssignment(template, 'miPolicyPermission', {
+            resourceServicePrincipal: graphServicePrincipal,
+            principal: `${managedIdentity.principalId}`,
+            appRoleId: '\'be74164b-cff1-491c-8741-e671cb536e13\'',
+        });
+        const miCustomAuthExtPermission = new graph.AppRoleAssignment(template, 'miCustomAuthExtPermission', {
+            resourceServicePrincipal: graphServicePrincipal,
+            principal: `${managedIdentity.principalId}`,
+            appRoleId: '\'c2667967-7050-4e7e-b059-4cbbb3811d03\'',
+        });
+        const miEventListenerPermission = new graph.AppRoleAssignment(template, 'miEventListenerPermission', {
+            resourceServicePrincipal: graphServicePrincipal,
+            principal: `${managedIdentity.principalId}`,
+            appRoleId: '\'0edf5e9e-4ce8-468a-8432-d08631d18c43\'',
+        });
+        const miAppReadWritePermission = new graph.AppRoleAssignment(template, 'miAppReadWritePermission', {
+            resourceServicePrincipal: graphServicePrincipal,
+            principal: `${managedIdentity.principalId}`,
+            appRoleId: `'${graph.MicrosoftGraphPermission.APPLICATION_READ_WRITE_ALL}'`,
+        });
+        const wireCustomClaimsExtension = new azure.DeploymentScript(template, 'wireCustomClaimsExtension', {
+            name: "'wire-custom-claims-extension'",
+            managedIdentity: managedIdentity,
+            scriptContent: fs.readFileSync(path.join(__dirname, 'scripts', 'wire-custom-claims-extension.sh'), 'utf8'),
+            environmentVariables: {
+                FUNCTION_HOSTNAME: 'Functionapp.properties.defaultHostName',
+                FUNCTION_APP_ID: 'Functionappregistration.appId',
+                CLF_APP_ID: 'Application.appId',
+                EXT_DISPLAY_NAME: `'${namePrefix}-claims-provider'`,
+            },
+        });
+        wireCustomClaimsExtension.addDependency(miPolicyReadPermission);
+        wireCustomClaimsExtension.addDependency(miPolicyPermission);
+        wireCustomClaimsExtension.addDependency(miCustomAuthExtPermission);
+        wireCustomClaimsExtension.addDependency(miEventListenerPermission);
+        wireCustomClaimsExtension.addDependency(miAppReadWritePermission);
+        managedIdentity.synthesize();
+        storageAccount.synthesize();
+        appServicePlan.synthesize();
+        logAnalyticsWorkspace.synthesize();
+        applicationInsights.synthesize();
+        functionApp.synthesize();
+        roleAssignment.synthesize();
+        spBlobRoleAssignment.synthesize();
+        functionAppRegistration.synthesize();
+        graphServicePrincipal.synthesize();
+        miPolicyReadPermission.synthesize();
+        miPolicyPermission.synthesize();
+        miCustomAuthExtPermission.synthesize();
+        miEventListenerPermission.synthesize();
+        miAppReadWritePermission.synthesize();
+        wireCustomClaimsExtension.synthesize();
+        return {
+            functionCodeAsset: functionCodeAsset,
+        };
+    }
+    sanitizeIdentifier(name) {
+        return name
+            .split(/[-_\s]+/)
+            .map(word => word.charAt(0).toUpperCase() + word.slice(1).toLowerCase())
+            .join('')
+            .replace(/[^a-zA-Z0-9]/g, '')
+            .replace(/^[0-9]/, '_$&');
+    }
+}
+exports.AzureAdApplicationFederated = AzureAdApplicationFederated;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiYXp1cmVBZEFwcGxpY2F0aW9uRmVkZXJhdGVkLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vc3JjL2JpY2VwL3BhdHRlcm5zL2F6dXJlQWRBcHBsaWNhdGlvbkZlZGVyYXRlZC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7QUFBQSx1Q0FBeUI7QUFDekIsMkNBQTZCO0FBQzdCLGtEQUFvQztBQUNwQyw2Q0FFcUI7QUFDckIsMkNBQXVDO0FBQ3ZDLGlEQUFtQztBQUNuQywwREFBNEM7QUFDNUMsMERBQTRDO0FBRTVDOztHQUVHO0FBQ0gsSUFBWSxZQVNYO0FBVEQsV0FBWSxZQUFZO0lBQ3RCLGlDQUFpQztJQUNqQyw2Q0FBNkIsQ0FBQTtJQUM3QiwrREFBK0Q7SUFDL0Qsc0VBQXNELENBQUE7SUFDdEQsMEJBQTBCO0lBQzFCLCtEQUErQyxDQUFBO0lBQy9DLHlDQUF5QztJQUN6Qyw2REFBNkMsQ0FBQTtBQUMvQyxDQUFDLEVBVFcsWUFBWSw0QkFBWixZQUFZLFFBU3ZCO0FBb0NELE1BQWEsMkJBQTRCLFNBQVEsc0JBQVM7SUFNeEQsWUFBWSxLQUFnQixFQUFFLEVBQVUsRUFBRSxLQUF1QztRQUMvRSxLQUFLLENBQUMsS0FBSyxFQUFFLEVBQUUsQ0FBQyxDQUFDO1FBRWpCLElBQUksS0FBSyxDQUFDLDBCQUEwQixJQUFJLENBQUMsQ0FBQyxLQUFLLENBQUMsTUFBTSxJQUFJLEtBQUssQ0FBQyxNQUFNLENBQUMsTUFBTSxLQUFLLENBQUMsQ0FBQyxFQUFFLENBQUM7WUFDckYsTUFBTSxJQUFJLEtBQUssQ0FDYiw0REFBNEQ7Z0JBQzVELHdFQUF3RSxDQUN6RSxDQUFDO1FBQ0osQ0FBQztRQUVELElBQUksQ0FBQyxxQkFBcUIsR0FBRyxLQUFLLENBQUMscUJBQXFCLENBQUM7UUFFekQsTUFBTSxLQUFLLEdBQUcsSUFBSSxDQUFDLEtBQUssQ0FBQyxFQUFFLENBQUMsSUFBSSxDQUFDLENBQUM7UUFDbEMsTUFBTSxpQkFBaUIsR0FBRywwQkFBMEIsS0FBSyxDQUFDLE1BQU0sSUFBSSxLQUFLLENBQUMsT0FBTyxVQUFVLEtBQUssQ0FBQyxTQUFTLEVBQUUsQ0FBQztRQUU3RyxJQUFJLG9CQUF1RSxDQUFDO1FBRTVFLE1BQU0sRUFBRSxRQUFRLEVBQUUsVUFBVSxFQUFFLEdBQUcsSUFBSSxLQUFLLENBQUMsb0JBQW9CLEVBQUU7YUFDOUQsWUFBWSxDQUFDO1lBQ1osSUFBSSxFQUFFLEtBQUssQ0FBQyxPQUFPO1lBQ25CLFdBQVcsRUFBRSxxRUFBcUU7WUFDbEYsY0FBYyxFQUFFO2dCQUNkLFFBQVEsRUFBRSxpQkFBaUI7YUFDNUI7U0FDRixDQUFDO2FBQ0QsY0FBYyxDQUFDLEtBQUssQ0FBQyxjQUFjLENBQUMsc0JBQXNCLENBQUM7YUFDM0QsYUFBYSxDQUFDLE9BQU8sQ0FBQyxFQUFFO1lBQ3ZCLG9CQUFvQixHQUFHLElBQUksQ0FBQyxjQUFjLENBQUMsT0FBTyxFQUFFLEtBQUssQ0FBQyxDQUFDO1FBQzdELENBQUMsQ0FBQzthQUNELFdBQVcsQ0FBQztZQUNYLEtBQUssRUFBRSxtQkFBbUI7WUFDMUIsUUFBUSxFQUFFLG1CQUFtQjtZQUM3QixHQUFHLENBQUMsS0FBSyxDQUFDLDBCQUEwQixDQUFDLENBQUMsQ0FBQztnQkFDckMsZUFBZSxFQUFFLGtCQUFrQjthQUNwQyxDQUFDLENBQUMsQ0FBQyxFQUFFLENBQUM7U0FDUixDQUFDO2FBQ0QsS0FBSyxFQUFFLENBQUM7UUFFWCxNQUFNLFVBQVUsR0FBRyxJQUFJLEtBQUssQ0FBQyxlQUFlLENBQUMsSUFBSSxFQUFFLFlBQVksRUFBRTtZQUMvRCxRQUFRLEVBQUUsUUFBUSxDQUFDLFVBQVUsRUFBRTtZQUMvQixpQkFBaUIsRUFBRSxLQUFLLENBQUMsaUJBQWlCO1lBQzFDLHlCQUF5QixFQUFFLEtBQUssQ0FBQyxxQkFBcUI7WUFDdEQsc0JBQXNCLEVBQUUsaUJBQWlCO1lBQ3pDLFVBQVUsRUFBRTtnQkFDVixvQkFBb0IsRUFBRSxLQUFLLENBQUMscUJBQXFCLENBQUMsVUFBVTthQUM3RDtZQUNELFlBQVksRUFBRSxvQkFBb0IsQ0FBQyxDQUFDLENBQUM7Z0JBQ25DLFlBQVksRUFBRSxvQkFBb0IsQ0FBQyxpQkFBaUIsQ0FBQyxZQUFZO2dCQUNqRSxXQUFXLEVBQUUsb0JBQW9CLENBQUMsaUJBQWlCLENBQUMsV0FBVzthQUNoRSxDQUFDLENBQUMsQ0FBQyxTQUFTO1NBQ2QsQ0FBQyxDQUFDO1FBRUgsSUFBSSxvQkFBb0IsRUFBRSxDQUFDO1lBQ3pCLG9CQUFvQixDQUFDLGlCQUFpQixDQUFDLFNBQVMsQ0FBQyxVQUFVLENBQUMsVUFBVSxDQUFDLENBQUM7UUFDMUUsQ0FBQztRQUVELElBQUksQ0FBQyxPQUFPLEdBQUcsRUFBRSxDQUFDO1FBQ2xCLFVBQVUsQ0FBQyxPQUFPLENBQUMsR0FBRyxDQUFDLEVBQUU7WUFDdkIsSUFBSSxDQUFDLE9BQU8sQ0FBQyxHQUFHLENBQUMsR0FBRyxVQUFVLENBQUMsU0FBUyxDQUFDLEdBQUcsQ0FBQyxDQUFDO1FBQ2hELENBQUMsQ0FBQyxDQUFDO0lBQ0wsQ0FBQztJQUVPLGNBQWMsQ0FDcEIsUUFBNkIsRUFDN0IsS0FBdUM7UUFFdkMsTUFBTSxRQUFRLEdBQUcsS0FBSyxDQUFDLE1BQU0sRUFBRSxHQUFHLENBQUMsQ0FBQyxTQUFTLEVBQUUsRUFBRTtZQUMvQyxNQUFNLE1BQU0sR0FBRyxTQUFTLFNBQVMsU0FBUyxDQUFDO1lBQzNDLE9BQU87Z0JBQ0wsRUFBRSxFQUFFLE1BQU07Z0JBQ1YsV0FBVyxFQUFFLFNBQVM7Z0JBQ3RCLFdBQVcsRUFBRSxHQUFHLFNBQVMsYUFBYSxLQUFLLENBQUMsT0FBTyxFQUFFO2dCQUNyRCxLQUFLLEVBQUUsU0FBUztnQkFDaEIsa0JBQWtCLEVBQUUsQ0FBQyxLQUFLLENBQUMsaUJBQWlCLENBQUMsSUFBSSxDQUFDO2dCQUNsRCxTQUFTLEVBQUUsSUFBSTthQUNoQixDQUFDO1FBQ0osQ0FBQyxDQUFDLElBQUksRUFBRSxDQUFDO1FBRVQsTUFBTSxXQUFXLEdBQUcsSUFBSSxLQUFLLENBQUMsV0FBVyxDQUFDLFFBQVEsRUFBRSxhQUFhLEVBQUU7WUFDakUsV0FBVyxFQUFFLEtBQUssQ0FBQyxPQUFPO1lBQzFCLFlBQVksRUFBRSxLQUFLLENBQUMsWUFBWTtZQUNoQyxjQUFjLEVBQUUsS0FBSyxDQUFDLGNBQWMsSUFBSSxLQUFLLENBQUMsY0FBYyxDQUFDLGVBQWU7WUFDNUUsUUFBUSxFQUFFLFFBQVE7WUFDbEIsY0FBYyxFQUFFLFFBQVEsQ0FBQyxNQUFNLEdBQUcsQ0FBQyxDQUFDLENBQUMsQ0FBQztnQkFDcEMsT0FBTyxFQUFFO29CQUNQO3dCQUNFLElBQUksRUFBRSxPQUFPO3dCQUNiLFNBQVMsRUFBRSxLQUFLO3FCQUNqQjtvQkFDRCxHQUFHLENBQUMsS0FBSyxDQUFDLDBCQUEwQixDQUFDLENBQUMsQ0FBQyxDQUFDOzRCQUN0QyxJQUFJLEVBQUUsa0RBQWtEOzRCQUN4RCxTQUFTLEVBQUUsS0FBSzs0QkFDaEIsTUFBTSxFQUFFLHNCQUFzQjt5QkFDL0IsQ0FBQyxDQUFDLENBQUMsQ0FBQyxFQUFFLENBQUM7aUJBQ1Q7YUFDRixDQUFDLENBQUMsQ0FBQyxTQUFTO1NBQ2QsQ0FBQyxDQUFDO1FBRUgsTUFBTSxnQkFBZ0IsR0FBRyxJQUFJLEtBQUssQ0FBQyxnQkFBZ0IsQ0FBQyxRQUFRLEVBQUUsa0JBQWtCLEVBQUU7WUFDaEYsV0FBVyxFQUFFLFdBQVc7WUFDeEIseUJBQXlCLEVBQUUsS0FBSztTQUNqQyxDQUFDLENBQUM7UUFFSCxNQUFNLG1CQUFtQixHQUFHLElBQUksS0FBSyxDQUFDLDJCQUEyQixDQUFDLFFBQVEsRUFBRSxxQkFBcUIsRUFBRTtZQUNqRyxXQUFXLEVBQUUsV0FBVztZQUN4QixJQUFJLEVBQUUsR0FBRyxLQUFLLENBQUMsT0FBTyxpQkFBaUI7WUFDdkMsTUFBTSxFQUFFLEtBQUssQ0FBQyxxQkFBcUIsQ0FBQyxNQUFNO1lBQzFDLE9BQU8sRUFBRSxLQUFLLENBQUMscUJBQXFCLENBQUMsR0FBRztZQUN4QyxTQUFTLEVBQUUsS0FBSyxDQUFDLHFCQUFxQixDQUFDLEdBQUc7WUFDMUMsV0FBVyxFQUFFLDRCQUE0QixLQUFLLENBQUMsT0FBTyxrQkFBa0I7U0FDekUsQ0FBQyxDQUFDO1FBRUgsSUFBSSxLQUFLLENBQUMsTUFBTSxFQUFFLENBQUM7WUFDakIsS0FBSyxDQUFDLE1BQU0sQ0FBQyxPQUFPLENBQUMsQ0FBQyxTQUFTLEVBQUUsRUFBRTtnQkFDakMsTUFBTSxhQUFhLEdBQUcsSUFBSSxDQUFDLGtCQUFrQixDQUFDLFNBQVMsQ0FBQyxDQUFDO2dCQUV6RCxNQUFNLEtBQUssR0FBRyxJQUFJLEtBQUssQ0FBQyxLQUFLLENBQUMsUUFBUSxFQUFFLFFBQVEsYUFBYSxFQUFFLEVBQUU7b0JBQy9ELFdBQVcsRUFBRSxTQUFTO29CQUN0QixXQUFXLEVBQUUsR0FBRyxTQUFTLGNBQWMsS0FBSyxDQUFDLE9BQU8sRUFBRTtpQkFDdkQsQ0FBQyxDQUFDO2dCQUVILE1BQU0sU0FBUyxHQUFHLFNBQVMsU0FBUyxTQUFTLENBQUM7Z0JBRTlDLE1BQU0sVUFBVSxHQUFHLElBQUksS0FBSyxDQUFDLGlCQUFpQixDQUFDLFFBQVEsRUFBRSxrQkFBa0IsYUFBYSxFQUFFLEVBQUU7b0JBQzFGLHdCQUF3QixFQUFFLGdCQUFnQjtvQkFDMUMsU0FBUyxFQUFFLEtBQUs7b0JBQ2hCLFNBQVMsRUFBRSxTQUFTO2lCQUNyQixDQUFDLENBQUM7Z0JBRUgsS0FBSyxDQUFDLFVBQVUsRUFBRSxDQUFDO2dCQUNuQixVQUFVLENBQUMsVUFBVSxFQUFFLENBQUM7WUFDMUIsQ0FBQyxDQUFDLENBQUM7UUFDTCxDQUFDO1FBRUQsV0FBVyxDQUFDLFVBQVUsRUFBRSxDQUFDO1FBQ3pCLGdCQUFnQixDQUFDLFVBQVUsRUFBRSxDQUFDO1FBQzlCLG1CQUFtQixDQUFDLFVBQVUsRUFBRSxDQUFDO1FBRWpDLElBQUksQ0FBQyxLQUFLLENBQUMsMEJBQTBCLEVBQUUsQ0FBQztZQUN0QyxPQUFPLFNBQVMsQ0FBQztRQUNuQixDQUFDO1FBRUQsT0FBTyxJQUFJLENBQUMseUJBQXlCLENBQUMsUUFBUSxFQUFFLEtBQUssQ0FBQyxDQUFDO0lBQ3pELENBQUM7SUFFTyx5QkFBeUIsQ0FDL0IsUUFBNkIsRUFDN0IsS0FBdUM7UUFFdkMsUUFBUSxDQUFDLGtCQUFrQixDQUFDLFVBQVUsRUFBRSw0QkFBNEIsRUFBRSxpQkFBaUIsQ0FBQyxDQUFDO1FBQ3pGLFFBQVEsQ0FBQyxrQkFBa0IsQ0FBQyxzQkFBc0IsRUFBRSxtRkFBbUYsRUFBRSxFQUFFLENBQUMsQ0FBQztRQUU3SSxNQUFNLFVBQVUsR0FBRyxLQUFLLENBQUMsT0FBTyxDQUFDLFdBQVcsRUFBRSxDQUFDO1FBQy9DLE1BQU0sWUFBWSxHQUFHLG1EQUFtRCxDQUFDO1FBRXpFLE1BQU0sZUFBZSxHQUFHLElBQUksS0FBSyxDQUFDLGVBQWUsQ0FBQyxRQUFRLEVBQUUsaUJBQWlCLEVBQUU7WUFDN0UsSUFBSSxFQUFFLElBQUksVUFBVSx1QkFBdUIsWUFBWSxJQUFJO1NBQzVELENBQUMsQ0FBQztRQUVILE1BQU0sY0FBYyxHQUFHLElBQUksS0FBSyxDQUFDLGNBQWMsQ0FBQyxRQUFRLEVBQUUsZ0JBQWdCLEVBQUU7WUFDMUUsSUFBSSxFQUFFLElBQUksVUFBVSxZQUFZLFlBQVksSUFBSTtTQUNqRCxDQUFDLENBQUM7UUFFSCxNQUFNLGNBQWMsR0FBRyxJQUFJLEtBQUssQ0FBQyxjQUFjLENBQUMsUUFBUSxFQUFFLGdCQUFnQixFQUFFO1lBQzFFLElBQUksRUFBRSxJQUFJLFVBQVUsbUJBQW1CLFlBQVksSUFBSTtTQUN4RCxDQUFDLENBQUM7UUFFSCxNQUFNLHFCQUFxQixHQUFHLElBQUksS0FBSyxDQUFDLHFCQUFxQixDQUFDLFFBQVEsRUFBRSx1QkFBdUIsRUFBRTtZQUMvRixJQUFJLEVBQUUsSUFBSSxVQUFVLG1CQUFtQixZQUFZLElBQUk7U0FDeEQsQ0FBQyxDQUFDO1FBRUgsTUFBTSxtQkFBbUIsR0FBRyxJQUFJLEtBQUssQ0FBQyxtQkFBbUIsQ0FBQyxRQUFRLEVBQUUscUJBQXFCLEVBQUU7WUFDekYsSUFBSSxFQUFFLElBQUksVUFBVSx1QkFBdUIsWUFBWSxJQUFJO1lBQzNELHFCQUFxQixFQUFFLHFCQUFxQjtTQUM3QyxDQUFDLENBQUM7UUFFSCxNQUFNLFdBQVcsR0FBRyxJQUFJLEtBQUssQ0FBQyxXQUFXLENBQUMsUUFBUSxFQUFFLGFBQWEsRUFBRTtZQUNqRSxJQUFJLEVBQUUsSUFBSSxVQUFVLG1CQUFtQixZQUFZLElBQUk7WUFDdkQsZUFBZSxFQUFFLGVBQWU7WUFDaEMsY0FBYyxFQUFFLGNBQWM7WUFDOUIsY0FBYyxFQUFFLGNBQWM7WUFDOUIsbUJBQW1CLEVBQUUsbUJBQW1CO1NBQ3pDLENBQUMsQ0FBQztRQUVILE1BQU0sY0FBYyxHQUFHLElBQUksS0FBSyxDQUFDLGNBQWMsQ0FBQyxRQUFRLEVBQUUsNEJBQTRCLEVBQUU7WUFDdEYsSUFBSSxFQUFFLFNBQVMsS0FBSyxDQUFDLE9BQU8sbUJBQW1CO1lBQy9DLGdCQUFnQixFQUFFLEtBQUssQ0FBQyxnQkFBZ0IsQ0FBQyxtQkFBbUI7WUFDNUQsV0FBVyxFQUFFLGVBQWU7U0FDN0IsQ0FBQyxDQUFDO1FBRUgsTUFBTSxvQkFBb0IsR0FBRyxJQUFJLEtBQUssQ0FBQyxjQUFjLENBQUMsUUFBUSxFQUFFLDZCQUE2QixFQUFFO1lBQzdGLElBQUksRUFBRSxTQUFTLEtBQUssQ0FBQyxPQUFPLHdCQUF3QjtZQUNwRCxnQkFBZ0IsRUFBRSxLQUFLLENBQUMsZ0JBQWdCLENBQUMsNkJBQTZCO1lBQ3RFLFdBQVcsRUFBRSxzQkFBc0I7U0FDcEMsQ0FBQyxDQUFDO1FBQ0gsb0JBQW9CLENBQUMsYUFBYSxDQUFDLGNBQWMsQ0FBQyxDQUFDO1FBRW5ELE1BQU0saUJBQWlCLEdBQUcsSUFBSSwyQkFBUSxDQUFDLEtBQUssQ0FBQyxJQUFJLEVBQUUsbUJBQW1CLEVBQUU7WUFDdEUsSUFBSSxFQUFFLElBQUksQ0FBQyxJQUFJLENBQUMsU0FBUyxFQUFFLElBQUksRUFBRSxpQkFBaUIsRUFBRSx3QkFBd0IsQ0FBQztZQUM3RSxRQUFRLEVBQUU7Z0JBQ1IsS0FBSyxFQUFFLElBQUksQ0FBQyxXQUFXLENBQUMsWUFBWSxDQUFDLGtCQUFrQixDQUFDO2dCQUN4RCxPQUFPLEVBQUU7b0JBQ1AsTUFBTSxFQUFFLElBQUk7b0JBQ1osdUtBQXVLO2lCQUN4SzthQUNGO1NBQ0YsQ0FBQyxDQUFDO1FBRUgsTUFBTSx1QkFBdUIsR0FBRyxJQUFJLEtBQUssQ0FBQyxXQUFXLENBQUMsUUFBUSxFQUFFLHlCQUF5QixFQUFFO1lBQ3pGLFdBQVcsRUFBRSxHQUFHLFVBQVUsa0JBQWtCO1lBQzVDLFlBQVksRUFBRSxFQUFFO1lBQ2hCLHNCQUFzQixFQUFFO2dCQUN0QjtvQkFDRSxhQUFhLEVBQUUsS0FBSyxDQUFDLGFBQWEsQ0FBQyxlQUFlO29CQUNsRCxjQUFjLEVBQUU7d0JBQ2Q7NEJBQ0UsRUFBRSxFQUFFLEtBQUssQ0FBQyx3QkFBd0IsQ0FBQywrQkFBK0I7NEJBQ2xFLElBQUksRUFBRSxLQUFLLENBQUMsY0FBYyxDQUFDLElBQUk7eUJBQ2hDO3FCQUNGO2lCQUNGO2FBQ0Y7U0FDRixDQUFDLENBQUM7UUFFSCxNQUFNLHFCQUFxQixHQUFHLElBQUksS0FBSyxDQUFDLHdCQUF3QixDQUFDLFFBQVEsRUFBRSx1QkFBdUIsRUFBRTtZQUNsRyxLQUFLLEVBQUUsc0NBQXNDO1NBQzlDLENBQUMsQ0FBQztRQUVILE1BQU0sc0JBQXNCLEdBQUcsSUFBSSxLQUFLLENBQUMsaUJBQWlCLENBQUMsUUFBUSxFQUFFLHdCQUF3QixFQUFFO1lBQzdGLHdCQUF3QixFQUFFLHFCQUFxQjtZQUMvQyxTQUFTLEVBQUUsR0FBRyxlQUFlLENBQUMsV0FBVyxFQUFFO1lBQzNDLFNBQVMsRUFBRSwwQ0FBMEM7U0FDdEQsQ0FBQyxDQUFDO1FBRUgsTUFBTSxrQkFBa0IsR0FBRyxJQUFJLEtBQUssQ0FBQyxpQkFBaUIsQ0FBQyxRQUFRLEVBQUUsb0JBQW9CLEVBQUU7WUFDckYsd0JBQXdCLEVBQUUscUJBQXFCO1lBQy9DLFNBQVMsRUFBRSxHQUFHLGVBQWUsQ0FBQyxXQUFXLEVBQUU7WUFDM0MsU0FBUyxFQUFFLDBDQUEwQztTQUN0RCxDQUFDLENBQUM7UUFFSCxNQUFNLHlCQUF5QixHQUFHLElBQUksS0FBSyxDQUFDLGlCQUFpQixDQUFDLFFBQVEsRUFBRSwyQkFBMkIsRUFBRTtZQUNuRyx3QkFBd0IsRUFBRSxxQkFBcUI7WUFDL0MsU0FBUyxFQUFFLEdBQUcsZUFBZSxDQUFDLFdBQVcsRUFBRTtZQUMzQyxTQUFTLEVBQUUsMENBQTBDO1NBQ3RELENBQUMsQ0FBQztRQUVILE1BQU0seUJBQXlCLEdBQUcsSUFBSSxLQUFLLENBQUMsaUJBQWlCLENBQUMsUUFBUSxFQUFFLDJCQUEyQixFQUFFO1lBQ25HLHdCQUF3QixFQUFFLHFCQUFxQjtZQUMvQyxTQUFTLEVBQUUsR0FBRyxlQUFlLENBQUMsV0FBVyxFQUFFO1lBQzNDLFNBQVMsRUFBRSwwQ0FBMEM7U0FDdEQsQ0FBQyxDQUFDO1FBRUgsTUFBTSx3QkFBd0IsR0FBRyxJQUFJLEtBQUssQ0FBQyxpQkFBaUIsQ0FBQyxRQUFRLEVBQUUsMEJBQTBCLEVBQUU7WUFDakcsd0JBQXdCLEVBQUUscUJBQXFCO1lBQy9DLFNBQVMsRUFBRSxHQUFHLGVBQWUsQ0FBQyxXQUFXLEVBQUU7WUFDM0MsU0FBUyxFQUFFLElBQUksS0FBSyxDQUFDLHdCQUF3QixDQUFDLDBCQUEwQixHQUFHO1NBQzVFLENBQUMsQ0FBQztRQUVILE1BQU0seUJBQXlCLEdBQUcsSUFBSSxLQUFLLENBQUMsZ0JBQWdCLENBQUMsUUFBUSxFQUFFLDJCQUEyQixFQUFFO1lBQ2xHLElBQUksRUFBRSxnQ0FBZ0M7WUFDdEMsZUFBZSxFQUFFLGVBQWU7WUFDaEMsYUFBYSxFQUFFLEVBQUUsQ0FBQyxZQUFZLENBQUMsSUFBSSxDQUFDLElBQUksQ0FBQyxTQUFTLEVBQUUsU0FBUyxFQUFFLGlDQUFpQyxDQUFDLEVBQUUsTUFBTSxDQUFDO1lBQzFHLG9CQUFvQixFQUFFO2dCQUNwQixpQkFBaUIsRUFBRSx3Q0FBd0M7Z0JBQzNELGVBQWUsRUFBRSwrQkFBK0I7Z0JBQ2hELFVBQVUsRUFBRSxtQkFBbUI7Z0JBQy9CLGdCQUFnQixFQUFFLElBQUksVUFBVSxtQkFBbUI7YUFDcEQ7U0FDRixDQUFDLENBQUM7UUFDSCx5QkFBeUIsQ0FBQyxhQUFhLENBQUMsc0JBQXNCLENBQUMsQ0FBQztRQUNoRSx5QkFBeUIsQ0FBQyxhQUFhLENBQUMsa0JBQWtCLENBQUMsQ0FBQztRQUM1RCx5QkFBeUIsQ0FBQyxhQUFhLENBQUMseUJBQXlCLENBQUMsQ0FBQztRQUNuRSx5QkFBeUIsQ0FBQyxhQUFhLENBQUMseUJBQXlCLENBQUMsQ0FBQztRQUNuRSx5QkFBeUIsQ0FBQyxhQUFhLENBQUMsd0JBQXdCLENBQUMsQ0FBQztRQUVsRSxlQUFlLENBQUMsVUFBVSxFQUFFLENBQUM7UUFDN0IsY0FBYyxDQUFDLFVBQVUsRUFBRSxDQUFDO1FBQzVCLGNBQWMsQ0FBQyxVQUFVLEVBQUUsQ0FBQztRQUM1QixxQkFBcUIsQ0FBQyxVQUFVLEVBQUUsQ0FBQztRQUNuQyxtQkFBbUIsQ0FBQyxVQUFVLEVBQUUsQ0FBQztRQUNqQyxXQUFXLENBQUMsVUFBVSxFQUFFLENBQUM7UUFDekIsY0FBYyxDQUFDLFVBQVUsRUFBRSxDQUFDO1FBQzVCLG9CQUFvQixDQUFDLFVBQVUsRUFBRSxDQUFDO1FBQ2xDLHVCQUF1QixDQUFDLFVBQVUsRUFBRSxDQUFDO1FBQ3JDLHFCQUFxQixDQUFDLFVBQVUsRUFBRSxDQUFDO1FBQ25DLHNCQUFzQixDQUFDLFVBQVUsRUFBRSxDQUFDO1FBQ3BDLGtCQUFrQixDQUFDLFVBQVUsRUFBRSxDQUFDO1FBQ2hDLHlCQUF5QixDQUFDLFVBQVUsRUFBRSxDQUFDO1FBQ3ZDLHlCQUF5QixDQUFDLFVBQVUsRUFBRSxDQUFDO1FBQ3ZDLHdCQUF3QixDQUFDLFVBQVUsRUFBRSxDQUFDO1FBQ3RDLHlCQUF5QixDQUFDLFVBQVUsRUFBRSxDQUFDO1FBRXZDLE9BQU87WUFDTCxpQkFBaUIsRUFBRSxpQkFBaUI7U0FDckMsQ0FBQztJQUNKLENBQUM7SUFFTyxrQkFBa0IsQ0FBQyxJQUFZO1FBQ3JDLE9BQU8sSUFBSTthQUNSLEtBQUssQ0FBQyxTQUFTLENBQUM7YUFDaEIsR0FBRyxDQUFDLElBQUksQ0FBQyxFQUFFLENBQUMsSUFBSSxDQUFDLE1BQU0sQ0FBQyxDQUFDLENBQUMsQ0FBQyxXQUFXLEVBQUUsR0FBRyxJQUFJLENBQUMsS0FBSyxDQUFDLENBQUMsQ0FBQyxDQUFDLFdBQVcsRUFBRSxDQUFDO2FBQ3ZFLElBQUksQ0FBQyxFQUFFLENBQUM7YUFDUixPQUFPLENBQUMsZUFBZSxFQUFFLEVBQUUsQ0FBQzthQUM1QixPQUFPLENBQUMsUUFBUSxFQUFFLEtBQUssQ0FBQyxDQUFDO0lBQzlCLENBQUM7Q0FDRjtBQXZURCxrRUF1VEMiLCJzb3VyY2VzQ29udGVudCI6WyJpbXBvcnQgKiBhcyBmcyBmcm9tICdmcyc7XG5pbXBvcnQgKiBhcyBwYXRoIGZyb20gJ3BhdGgnO1xuaW1wb3J0ICogYXMgY29yZSBmcm9tICdhd3MtY2RrLWxpYic7XG5pbXBvcnQge1xuICBhd3NfczNfYXNzZXRzIGFzIHMzYXNzZXRzLFxufSBmcm9tICdhd3MtY2RrLWxpYic7XG5pbXBvcnQgeyBDb25zdHJ1Y3QgfSBmcm9tICdjb25zdHJ1Y3RzJztcbmltcG9ydCAqIGFzIGJpY2VwIGZyb20gJy4uL2RlcGxveSc7XG5pbXBvcnQgKiBhcyBhenVyZSBmcm9tICcuLi9yZXNvdXJjZXMvYXp1cmUnO1xuaW1wb3J0ICogYXMgZ3JhcGggZnJvbSAnLi4vcmVzb3VyY2VzL2dyYXBoJztcblxuLyoqXG4gKiBXZWxsLWtub3duIE9JREMgYXVkaWVuY2UgdmFsdWVzIGZvciBjb21tb24gcHJvdmlkZXJzXG4gKi9cbmV4cG9ydCBlbnVtIE9pZGNBdWRpZW5jZSB7XG4gIC8qKiBBV1MgU2VjdXJpdHkgVG9rZW4gU2VydmljZSAqL1xuICBBV1NfU1RTID0gJ3N0cy5hbWF6b25hd3MuY29tJyxcbiAgLyoqIEF6dXJlIEFEIFRva2VuIEV4Y2hhbmdlIGZvciBXb3JrbG9hZCBJZGVudGl0eSBGZWRlcmF0aW9uICovXG4gIEFaVVJFX0FEX1RPS0VOX0VYQ0hBTkdFID0gJ2FwaTovL0F6dXJlQURUb2tlbkV4Y2hhbmdlJyxcbiAgLyoqIE1pY3Jvc29mdCBHcmFwaCBBUEkgKi9cbiAgTUlDUk9TT0ZUX0dSQVBIID0gJ2h0dHBzOi8vZ3JhcGgubWljcm9zb2Z0LmNvbScsXG4gIC8qKiBLdWJlcm5ldGVzIGRlZmF1bHQgc2VydmljZSBhY2NvdW50ICovXG4gIEtVQkVSTkVURVMgPSAnaHR0cHM6Ly9rdWJlcm5ldGVzLmRlZmF1bHQuc3ZjJyxcbn1cblxuLyoqXG4gKiBDb25maWd1cmF0aW9uIGZvciBleHRlcm5hbCBpZGVudGl0eSB0cnVzdGVkIHRvIHJlcXVlc3QgdG9rZW5zXG4gKi9cbmV4cG9ydCBpbnRlcmZhY2UgVHJ1c3RlZFRva2VuUmVxdWVzdGVyQ29uZmlnIHtcbiAgLyoqIE9JREMgaXNzdWVyIFVSTCB0aGF0IEF6dXJlIEFEIHRydXN0cyAqL1xuICByZWFkb25seSBpc3N1ZXI6IHN0cmluZztcbiAgLyoqIFN1YmplY3QgKHN1YikgY2xhaW0gaWRlbnRpZnlpbmcgdGhlIHRydXN0ZWQgd29ya2xvYWQgKi9cbiAgcmVhZG9ubHkgc3ViOiBzdHJpbmc7XG4gIC8qKiBBdWRpZW5jZSAoYXVkKSB2YWx1ZXMgZm9yIHRva2VuIHZhbGlkYXRpb24gLSB1c2UgT2lkY0F1ZGllbmNlIGVudW0gb3IgY3VzdG9tIHN0cmluZ3MgKi9cbiAgcmVhZG9ubHkgYXVkOiBzdHJpbmdbXTtcbn1cblxuLyoqXG4gKiBQcm9wZXJ0aWVzIGZvciBBenVyZSBBRCBhcHBsaWNhdGlvbiB3aXRoIGZlZGVyYXRlZCBjcmVkZW50aWFscy5cbiAqL1xuZXhwb3J0IGludGVyZmFjZSBBenVyZUFkQXBwbGljYXRpb25GZWRlcmF0ZWRQcm9wcyB7XG4gIC8qKiBOYW1lIG9mIHRoZSBBenVyZSBBRCBhcHBsaWNhdGlvbiAqL1xuICByZWFkb25seSBhcHBOYW1lOiBzdHJpbmc7XG4gIC8qKiBSZWRpcmVjdCBVUklzIGZvciBPQXV0aCBjYWxsYmFja3MgKi9cbiAgcmVhZG9ubHkgcmVkaXJlY3RVcmlzOiBzdHJpbmdbXTtcbiAgLyoqIFN1cHBvcnRlZCBhY2NvdW50IHR5cGVzIGZvciBzaWduLWluIChkZWZhdWx0cyB0byBzaW5nbGUgdGVuYW50KSAqL1xuICByZWFkb25seSBzaWduSW5BdWRpZW5jZT86IGdyYXBoLlNpZ25JbkF1ZGllbmNlO1xuICAvKiogQXp1cmUgcmVzb3VyY2UgZ3JvdXAgbmFtZSAqL1xuICByZWFkb25seSByZXNvdXJjZUdyb3VwTmFtZTogc3RyaW5nO1xuICAvKiogQXp1cmUgQUQgZ3JvdXBzIHRvIGNyZWF0ZSAqL1xuICByZWFkb25seSBncm91cHM/OiBzdHJpbmdbXTtcbiAgLyoqIEF6dXJlIGZlZGVyYXRlZCBjcmVkZW50aWFscyBmb3IgZGVwbG95bWVudCAqL1xuICByZWFkb25seSBkZXBsb3ltZW50Q3JlZGVudGlhbHM6IGJpY2VwLkF6dXJlRmVkZXJhdGVkQ3JlZGVudGlhbHM7XG4gIC8qKiBFeHRlcm5hbCBpZGVudGl0eSB0cnVzdGVkIHRvIHJlcXVlc3QgdG9rZW5zICovXG4gIHJlYWRvbmx5IHRydXN0ZWRUb2tlblJlcXVlc3RlcjogVHJ1c3RlZFRva2VuUmVxdWVzdGVyQ29uZmlnO1xuICAvKiogRW5hYmxlIEFXUyBzZXNzaW9uIHRhZyBtYXBwaW5nIHZpYSBDdXN0b20gQ2xhaW1zIFByb3ZpZGVyIChyZXF1aXJlcyBncm91cHMgdG8gYmUgZGVmaW5lZCkgKi9cbiAgcmVhZG9ubHkgZW5hYmxlQXdzU2Vzc2lvblRhZ01hcHBpbmc/OiBib29sZWFuO1xufVxuXG5leHBvcnQgY2xhc3MgQXp1cmVBZEFwcGxpY2F0aW9uRmVkZXJhdGVkIGV4dGVuZHMgQ29uc3RydWN0IHtcbiAgLyoqIEFsbCBkZXBsb3ltZW50IG91dHB1dHMgKi9cbiAgcHVibGljIHJlYWRvbmx5IG91dHB1dHM6IFJlY29yZDxzdHJpbmcsIHN0cmluZz47XG4gIC8qKiBUcnVzdGVkIHRva2VuIHJlcXVlc3RlciBjb25maWd1cmF0aW9uICovXG4gIHB1YmxpYyByZWFkb25seSB0cnVzdGVkVG9rZW5SZXF1ZXN0ZXI6IFRydXN0ZWRUb2tlblJlcXVlc3RlckNvbmZpZztcblxuICBjb25zdHJ1Y3RvcihzY29wZTogQ29uc3RydWN0LCBpZDogc3RyaW5nLCBwcm9wczogQXp1cmVBZEFwcGxpY2F0aW9uRmVkZXJhdGVkUHJvcHMpIHtcbiAgICBzdXBlcihzY29wZSwgaWQpO1xuXG4gICAgaWYgKHByb3BzLmVuYWJsZUF3c1Nlc3Npb25UYWdNYXBwaW5nICYmICghcHJvcHMuZ3JvdXBzIHx8IHByb3BzLmdyb3Vwcy5sZW5ndGggPT09IDApKSB7XG4gICAgICB0aHJvdyBuZXcgRXJyb3IoXG4gICAgICAgICdlbmFibGVBd3NTZXNzaW9uVGFnTWFwcGluZyByZXF1aXJlcyBncm91cHMgdG8gYmUgZGVmaW5lZC4gJyArXG4gICAgICAgICdDdXN0b20gQ2xhaW1zIFByb3ZpZGVyIG1hcHMgQXp1cmUgQUQgZ3JvdXBzL3JvbGVzIHRvIEFXUyBzZXNzaW9uIHRhZ3MuJyxcbiAgICAgICk7XG4gICAgfVxuXG4gICAgdGhpcy50cnVzdGVkVG9rZW5SZXF1ZXN0ZXIgPSBwcm9wcy50cnVzdGVkVG9rZW5SZXF1ZXN0ZXI7XG5cbiAgICBjb25zdCBzdGFjayA9IGNvcmUuU3RhY2sub2YodGhpcyk7XG4gICAgY29uc3QgY2xvdWRmb3JtYXRpb25Bcm4gPSBgYXJuOmF3czpjbG91ZGZvcm1hdGlvbjoke3N0YWNrLnJlZ2lvbn06JHtzdGFjay5hY2NvdW50fTpzdGFjay8ke3N0YWNrLnN0YWNrTmFtZX1gO1xuXG4gICAgbGV0IGNsYWltc1Byb3ZpZGVyUmVzdWx0OiB7IGZ1bmN0aW9uQ29kZUFzc2V0OiBzM2Fzc2V0cy5Bc3NldCB9IHwgdW5kZWZpbmVkO1xuXG4gICAgY29uc3QgeyB0ZW1wbGF0ZSwgb3V0cHV0S2V5cyB9ID0gbmV3IGJpY2VwLkJpY2VwVGVtcGxhdGVCdWlsZGVyKClcbiAgICAgIC53aXRoTWV0YWRhdGEoe1xuICAgICAgICBuYW1lOiBwcm9wcy5hcHBOYW1lLFxuICAgICAgICBkZXNjcmlwdGlvbjogJ0F6dXJlIEFEIEFwcGxpY2F0aW9uIHdpdGggZmVkZXJhdGVkIGNyZWRlbnRpYWxzIGZvciBBV1MgaW50ZWdyYXRpb24nLFxuICAgICAgICBjbG91ZGZvcm1hdGlvbjoge1xuICAgICAgICAgIHN0YWNrQXJuOiBjbG91ZGZvcm1hdGlvbkFybixcbiAgICAgICAgfSxcbiAgICAgIH0pXG4gICAgICAud2l0aEV4dGVuc2lvbnMoYmljZXAuQmljZXBFeHRlbnNpb24uTUlDUk9TT0ZUX0dSQVBIX1NUQUJMRSlcbiAgICAgIC53aXRoUmVzb3VyY2VzKGJ1aWxkZXIgPT4ge1xuICAgICAgICBjbGFpbXNQcm92aWRlclJlc3VsdCA9IHRoaXMuYnVpbGRSZXNvdXJjZXMoYnVpbGRlciwgcHJvcHMpO1xuICAgICAgfSlcbiAgICAgIC53aXRoT3V0cHV0cyh7XG4gICAgICAgIGFwcElkOiAnQXBwbGljYXRpb24uYXBwSWQnLFxuICAgICAgICB0ZW5hbnRJZDogJ3RlbmFudCgpLnRlbmFudElkJyxcbiAgICAgICAgLi4uKHByb3BzLmVuYWJsZUF3c1Nlc3Npb25UYWdNYXBwaW5nID8ge1xuICAgICAgICAgIGZ1bmN0aW9uQXBwTmFtZTogJ0Z1bmN0aW9uYXBwLm5hbWUnLFxuICAgICAgICB9IDoge30pLFxuICAgICAgfSlcbiAgICAgIC5idWlsZCgpO1xuXG4gICAgY29uc3QgZGVwbG95bWVudCA9IG5ldyBiaWNlcC5CaWNlcERlcGxveW1lbnQodGhpcywgJ0RlcGxveW1lbnQnLCB7XG4gICAgICB0ZW1wbGF0ZTogdGVtcGxhdGUuc3ludGhlc2l6ZSgpLFxuICAgICAgcmVzb3VyY2VHcm91cE5hbWU6IHByb3BzLnJlc291cmNlR3JvdXBOYW1lLFxuICAgICAgYXp1cmVGZWRlcmF0ZWRDcmVkZW50aWFsczogcHJvcHMuZGVwbG95bWVudENyZWRlbnRpYWxzLFxuICAgICAgY2xvdWRmb3JtYXRpb25TdGFja0FybjogY2xvdWRmb3JtYXRpb25Bcm4sXG4gICAgICBwYXJhbWV0ZXJzOiB7XG4gICAgICAgIGRlcGxveW1lbnRTcE9iamVjdElkOiBwcm9wcy5kZXBsb3ltZW50Q3JlZGVudGlhbHMuc3BPYmplY3RJZCxcbiAgICAgIH0sXG4gICAgICBmdW5jdGlvbkNvZGU6IGNsYWltc1Byb3ZpZGVyUmVzdWx0ID8ge1xuICAgICAgICBzM0J1Y2tldE5hbWU6IGNsYWltc1Byb3ZpZGVyUmVzdWx0LmZ1bmN0aW9uQ29kZUFzc2V0LnMzQnVja2V0TmFtZSxcbiAgICAgICAgczNPYmplY3RLZXk6IGNsYWltc1Byb3ZpZGVyUmVzdWx0LmZ1bmN0aW9uQ29kZUFzc2V0LnMzT2JqZWN0S2V5LFxuICAgICAgfSA6IHVuZGVmaW5lZCxcbiAgICB9KTtcblxuICAgIGlmIChjbGFpbXNQcm92aWRlclJlc3VsdCkge1xuICAgICAgY2xhaW1zUHJvdmlkZXJSZXN1bHQuZnVuY3Rpb25Db2RlQXNzZXQuZ3JhbnRSZWFkKGRlcGxveW1lbnQubGFtYmRhUm9sZSk7XG4gICAgfVxuXG4gICAgdGhpcy5vdXRwdXRzID0ge307XG4gICAgb3V0cHV0S2V5cy5mb3JFYWNoKGtleSA9PiB7XG4gICAgICB0aGlzLm91dHB1dHNba2V5XSA9IGRlcGxveW1lbnQuZ2V0T3V0cHV0KGtleSk7XG4gICAgfSk7XG4gIH1cblxuICBwcml2YXRlIGJ1aWxkUmVzb3VyY2VzKFxuICAgIHRlbXBsYXRlOiBiaWNlcC5CaWNlcFRlbXBsYXRlLFxuICAgIHByb3BzOiBBenVyZUFkQXBwbGljYXRpb25GZWRlcmF0ZWRQcm9wcyxcbiAgKTogeyBmdW5jdGlvbkNvZGVBc3NldDogczNhc3NldHMuQXNzZXQgfSB8IHVuZGVmaW5lZCB7XG4gICAgY29uc3QgYXBwUm9sZXMgPSBwcm9wcy5ncm91cHM/Lm1hcCgoZ3JvdXBOYW1lKSA9PiB7XG4gICAgICBjb25zdCByb2xlSWQgPSBgZ3VpZCgnJHtncm91cE5hbWV9LXJvbGUnKWA7XG4gICAgICByZXR1cm4ge1xuICAgICAgICBpZDogcm9sZUlkLFxuICAgICAgICBkaXNwbGF5TmFtZTogZ3JvdXBOYW1lLFxuICAgICAgICBkZXNjcmlwdGlvbjogYCR7Z3JvdXBOYW1lfSByb2xlIGZvciAke3Byb3BzLmFwcE5hbWV9YCxcbiAgICAgICAgdmFsdWU6IGdyb3VwTmFtZSxcbiAgICAgICAgYWxsb3dlZE1lbWJlclR5cGVzOiBbZ3JhcGguQWxsb3dlZE1lbWJlclR5cGUuVVNFUl0sXG4gICAgICAgIGlzRW5hYmxlZDogdHJ1ZSxcbiAgICAgIH07XG4gICAgfSkgfHwgW107XG5cbiAgICBjb25zdCBhcHBsaWNhdGlvbiA9IG5ldyBncmFwaC5BcHBsaWNhdGlvbih0ZW1wbGF0ZSwgJ2FwcGxpY2F0aW9uJywge1xuICAgICAgZGlzcGxheU5hbWU6IHByb3BzLmFwcE5hbWUsXG4gICAgICByZWRpcmVjdFVyaXM6IHByb3BzLnJlZGlyZWN0VXJpcyxcbiAgICAgIHNpZ25JbkF1ZGllbmNlOiBwcm9wcy5zaWduSW5BdWRpZW5jZSA/PyBncmFwaC5TaWduSW5BdWRpZW5jZS5BWlVSRV9BRF9NWV9PUkcsXG4gICAgICBhcHBSb2xlczogYXBwUm9sZXMsXG4gICAgICBvcHRpb25hbENsYWltczogYXBwUm9sZXMubGVuZ3RoID4gMCA/IHtcbiAgICAgICAgaWRUb2tlbjogW1xuICAgICAgICAgIHtcbiAgICAgICAgICAgIG5hbWU6ICdyb2xlcycsXG4gICAgICAgICAgICBlc3NlbnRpYWw6IGZhbHNlLFxuICAgICAgICAgIH0sXG4gICAgICAgICAgLi4uKHByb3BzLmVuYWJsZUF3c1Nlc3Npb25UYWdNYXBwaW5nID8gW3tcbiAgICAgICAgICAgIG5hbWU6ICdodHRwczovL2F3cy5hbWF6b24uY29tL3RhZ3MvcHJpbmNpcGFsX3RhZ3MvUm9sZXMnLFxuICAgICAgICAgICAgZXNzZW50aWFsOiBmYWxzZSxcbiAgICAgICAgICAgIHNvdXJjZTogJ2N1c3RvbUNsYWltc1Byb3ZpZGVyJyxcbiAgICAgICAgICB9XSA6IFtdKSxcbiAgICAgICAgXSxcbiAgICAgIH0gOiB1bmRlZmluZWQsXG4gICAgfSk7XG5cbiAgICBjb25zdCBzZXJ2aWNlUHJpbmNpcGFsID0gbmV3IGdyYXBoLlNlcnZpY2VQcmluY2lwYWwodGVtcGxhdGUsICdzZXJ2aWNlUHJpbmNpcGFsJywge1xuICAgICAgYXBwbGljYXRpb246IGFwcGxpY2F0aW9uLFxuICAgICAgYXBwUm9sZUFzc2lnbm1lbnRSZXF1aXJlZDogZmFsc2UsXG4gICAgfSk7XG5cbiAgICBjb25zdCBmZWRlcmF0ZWRDcmVkZW50aWFsID0gbmV3IGdyYXBoLkZlZGVyYXRlZElkZW50aXR5Q3JlZGVudGlhbCh0ZW1wbGF0ZSwgJ2ZlZGVyYXRlZENyZWRlbnRpYWwnLCB7XG4gICAgICBhcHBsaWNhdGlvbjogYXBwbGljYXRpb24sXG4gICAgICBuYW1lOiBgJHtwcm9wcy5hcHBOYW1lfS1hd3MtY3JlZGVudGlhbGAsXG4gICAgICBpc3N1ZXI6IHByb3BzLnRydXN0ZWRUb2tlblJlcXVlc3Rlci5pc3N1ZXIsXG4gICAgICBzdWJqZWN0OiBwcm9wcy50cnVzdGVkVG9rZW5SZXF1ZXN0ZXIuc3ViLFxuICAgICAgYXVkaWVuY2VzOiBwcm9wcy50cnVzdGVkVG9rZW5SZXF1ZXN0ZXIuYXVkLFxuICAgICAgZGVzY3JpcHRpb246IGBGZWRlcmF0ZWQgY3JlZGVudGlhbCBmb3IgJHtwcm9wcy5hcHBOYW1lfSBBV1MgaW50ZWdyYXRpb25gLFxuICAgIH0pO1xuXG4gICAgaWYgKHByb3BzLmdyb3Vwcykge1xuICAgICAgcHJvcHMuZ3JvdXBzLmZvckVhY2goKGdyb3VwTmFtZSkgPT4ge1xuICAgICAgICBjb25zdCBzYW5pdGl6ZWROYW1lID0gdGhpcy5zYW5pdGl6ZUlkZW50aWZpZXIoZ3JvdXBOYW1lKTtcblxuICAgICAgICBjb25zdCBncm91cCA9IG5ldyBncmFwaC5Hcm91cCh0ZW1wbGF0ZSwgYGdyb3VwJHtzYW5pdGl6ZWROYW1lfWAsIHtcbiAgICAgICAgICBkaXNwbGF5TmFtZTogZ3JvdXBOYW1lLFxuICAgICAgICAgIGRlc2NyaXB0aW9uOiBgJHtncm91cE5hbWV9IGdyb3VwIGZvciAke3Byb3BzLmFwcE5hbWV9YCxcbiAgICAgICAgfSk7XG5cbiAgICAgICAgY29uc3QgYXBwUm9sZUlkID0gYGd1aWQoJyR7Z3JvdXBOYW1lfS1yb2xlJylgO1xuXG4gICAgICAgIGNvbnN0IGFzc2lnbm1lbnQgPSBuZXcgZ3JhcGguQXBwUm9sZUFzc2lnbm1lbnQodGVtcGxhdGUsIGBncm91cEFzc2lnbm1lbnQke3Nhbml0aXplZE5hbWV9YCwge1xuICAgICAgICAgIHJlc291cmNlU2VydmljZVByaW5jaXBhbDogc2VydmljZVByaW5jaXBhbCxcbiAgICAgICAgICBwcmluY2lwYWw6IGdyb3VwLFxuICAgICAgICAgIGFwcFJvbGVJZDogYXBwUm9sZUlkLFxuICAgICAgICB9KTtcblxuICAgICAgICBncm91cC5zeW50aGVzaXplKCk7XG4gICAgICAgIGFzc2lnbm1lbnQuc3ludGhlc2l6ZSgpO1xuICAgICAgfSk7XG4gICAgfVxuXG4gICAgYXBwbGljYXRpb24uc3ludGhlc2l6ZSgpO1xuICAgIHNlcnZpY2VQcmluY2lwYWwuc3ludGhlc2l6ZSgpO1xuICAgIGZlZGVyYXRlZENyZWRlbnRpYWwuc3ludGhlc2l6ZSgpO1xuXG4gICAgaWYgKCFwcm9wcy5lbmFibGVBd3NTZXNzaW9uVGFnTWFwcGluZykge1xuICAgICAgcmV0dXJuIHVuZGVmaW5lZDtcbiAgICB9XG5cbiAgICByZXR1cm4gdGhpcy5idWlsZEN1c3RvbUNsYWltc1Byb3ZpZGVyKHRlbXBsYXRlLCBwcm9wcyk7XG4gIH1cblxuICBwcml2YXRlIGJ1aWxkQ3VzdG9tQ2xhaW1zUHJvdmlkZXIoXG4gICAgdGVtcGxhdGU6IGJpY2VwLkJpY2VwVGVtcGxhdGUsXG4gICAgcHJvcHM6IEF6dXJlQWRBcHBsaWNhdGlvbkZlZGVyYXRlZFByb3BzLFxuICApOiB7IGZ1bmN0aW9uQ29kZUFzc2V0OiBzM2Fzc2V0cy5Bc3NldCB9IHtcbiAgICB0ZW1wbGF0ZS5hZGRTdHJpbmdQYXJhbWV0ZXIoJ2xvY2F0aW9uJywgJ0F6dXJlIHJlZ2lvbiBmb3IgcmVzb3VyY2VzJywgXCInYXVzdHJhbGlhZWFzdCdcIik7XG4gICAgdGVtcGxhdGUuYWRkU3RyaW5nUGFyYW1ldGVyKCdkZXBsb3ltZW50U3BPYmplY3RJZCcsICdPYmplY3QgSUQgb2YgdGhlIFNQIGRlcGxveWluZyB0aGlzIHRlbXBsYXRlIChuZWVkcyBTdG9yYWdlIEJsb2IgRGF0YSBDb250cmlidXRvciknLCAnJyk7XG5cbiAgICBjb25zdCBuYW1lUHJlZml4ID0gcHJvcHMuYXBwTmFtZS50b0xvd2VyQ2FzZSgpO1xuICAgIGNvbnN0IHVuaXF1ZVN1ZmZpeCA9ICdzdWJzdHJpbmcodW5pcXVlU3RyaW5nKHJlc291cmNlR3JvdXAoKS5pZCksIDAsIDgpJztcblxuICAgIGNvbnN0IG1hbmFnZWRJZGVudGl0eSA9IG5ldyBhenVyZS5NYW5hZ2VkSWRlbnRpdHkodGVtcGxhdGUsICdtYW5hZ2VkSWRlbnRpdHknLCB7XG4gICAgICBuYW1lOiBgJyR7bmFtZVByZWZpeH0tY2xhaW1zLWlkZW50aXR5LVxcJHske3VuaXF1ZVN1ZmZpeH19J2AsXG4gICAgfSk7XG5cbiAgICBjb25zdCBzdG9yYWdlQWNjb3VudCA9IG5ldyBhenVyZS5TdG9yYWdlQWNjb3VudCh0ZW1wbGF0ZSwgJ3N0b3JhZ2VBY2NvdW50Jywge1xuICAgICAgbmFtZTogYCcke25hbWVQcmVmaXh9Y2xhaW1zXFwkeyR7dW5pcXVlU3VmZml4fX0nYCxcbiAgICB9KTtcblxuICAgIGNvbnN0IGFwcFNlcnZpY2VQbGFuID0gbmV3IGF6dXJlLkFwcFNlcnZpY2VQbGFuKHRlbXBsYXRlLCAnYXBwU2VydmljZVBsYW4nLCB7XG4gICAgICBuYW1lOiBgJyR7bmFtZVByZWZpeH0tY2xhaW1zLXBsYW4tXFwkeyR7dW5pcXVlU3VmZml4fX0nYCxcbiAgICB9KTtcblxuICAgIGNvbnN0IGxvZ0FuYWx5dGljc1dvcmtzcGFjZSA9IG5ldyBhenVyZS5Mb2dBbmFseXRpY3NXb3Jrc3BhY2UodGVtcGxhdGUsICdsb2dBbmFseXRpY3NXb3Jrc3BhY2UnLCB7XG4gICAgICBuYW1lOiBgJyR7bmFtZVByZWZpeH0tY2xhaW1zLWxvZ3MtXFwkeyR7dW5pcXVlU3VmZml4fX0nYCxcbiAgICB9KTtcblxuICAgIGNvbnN0IGFwcGxpY2F0aW9uSW5zaWdodHMgPSBuZXcgYXp1cmUuQXBwbGljYXRpb25JbnNpZ2h0cyh0ZW1wbGF0ZSwgJ2FwcGxpY2F0aW9uSW5zaWdodHMnLCB7XG4gICAgICBuYW1lOiBgJyR7bmFtZVByZWZpeH0tY2xhaW1zLWluc2lnaHRzLVxcJHske3VuaXF1ZVN1ZmZpeH19J2AsXG4gICAgICBsb2dBbmFseXRpY3NXb3Jrc3BhY2U6IGxvZ0FuYWx5dGljc1dvcmtzcGFjZSxcbiAgICB9KTtcblxuICAgIGNvbnN0IGZ1bmN0aW9uQXBwID0gbmV3IGF6dXJlLkZ1bmN0aW9uQXBwKHRlbXBsYXRlLCAnZnVuY3Rpb25BcHAnLCB7XG4gICAgICBuYW1lOiBgJyR7bmFtZVByZWZpeH0tY2xhaW1zLWZ1bmMtXFwkeyR7dW5pcXVlU3VmZml4fX0nYCxcbiAgICAgIG1hbmFnZWRJZGVudGl0eTogbWFuYWdlZElkZW50aXR5LFxuICAgICAgYXBwU2VydmljZVBsYW46IGFwcFNlcnZpY2VQbGFuLFxuICAgICAgc3RvcmFnZUFjY291bnQ6IHN0b3JhZ2VBY2NvdW50LFxuICAgICAgYXBwbGljYXRpb25JbnNpZ2h0czogYXBwbGljYXRpb25JbnNpZ2h0cyxcbiAgICB9KTtcblxuICAgIGNvbnN0IHJvbGVBc3NpZ25tZW50ID0gbmV3IGF6dXJlLlJvbGVBc3NpZ25tZW50KHRlbXBsYXRlLCAnbWFuYWdlZElkZW50aXR5Q29udHJpYnV0b3InLCB7XG4gICAgICBuYW1lOiBgZ3VpZCgnJHtwcm9wcy5hcHBOYW1lfS1taS1jb250cmlidXRvcicpYCxcbiAgICAgIHJvbGVEZWZpbml0aW9uSWQ6IGF6dXJlLkF6dXJlQnVpbHRJblJvbGUuV0VCU0lURV9DT05UUklCVVRPUixcbiAgICAgIHByaW5jaXBhbElkOiBtYW5hZ2VkSWRlbnRpdHksXG4gICAgfSk7XG5cbiAgICBjb25zdCBzcEJsb2JSb2xlQXNzaWdubWVudCA9IG5ldyBhenVyZS5Sb2xlQXNzaWdubWVudCh0ZW1wbGF0ZSwgJ2RlcGxveW1lbnRTcEJsb2JDb250cmlidXRvcicsIHtcbiAgICAgIG5hbWU6IGBndWlkKCcke3Byb3BzLmFwcE5hbWV9LXNwLWJsb2ItY29udHJpYnV0b3InKWAsXG4gICAgICByb2xlRGVmaW5pdGlvbklkOiBhenVyZS5BenVyZUJ1aWx0SW5Sb2xlLlNUT1JBR0VfQkxPQl9EQVRBX0NPTlRSSUJVVE9SLFxuICAgICAgcHJpbmNpcGFsSWQ6ICdkZXBsb3ltZW50U3BPYmplY3RJZCcsXG4gICAgfSk7XG4gICAgc3BCbG9iUm9sZUFzc2lnbm1lbnQuYWRkRGVwZW5kZW5jeShzdG9yYWdlQWNjb3VudCk7XG5cbiAgICBjb25zdCBmdW5jdGlvbkNvZGVBc3NldCA9IG5ldyBzM2Fzc2V0cy5Bc3NldCh0aGlzLCAnRnVuY3Rpb25Db2RlQXNzZXQnLCB7XG4gICAgICBwYXRoOiBwYXRoLmpvaW4oX19kaXJuYW1lLCAnLi4nLCAnYXp1cmUtZnVuY3Rpb25zJywgJ2N1c3RvbS1jbGFpbXMtcHJvdmlkZXInKSxcbiAgICAgIGJ1bmRsaW5nOiB7XG4gICAgICAgIGltYWdlOiBjb3JlLkRvY2tlckltYWdlLmZyb21SZWdpc3RyeSgncHl0aG9uOjMuMTItc2xpbScpLFxuICAgICAgICBjb21tYW5kOiBbXG4gICAgICAgICAgJ2Jhc2gnLCAnLWMnLFxuICAgICAgICAgICdwaXAgaW5zdGFsbCAtciAvYXNzZXQtaW5wdXQvcmVxdWlyZW1lbnRzLnR4dCAtdCAvYXNzZXQtb3V0cHV0LyAmJiBjcCAvYXNzZXQtaW5wdXQvZnVuY3Rpb25fYXBwLnB5IC9hc3NldC1pbnB1dC9ob3N0Lmpzb24gL2Fzc2V0LWlucHV0L3JlcXVpcmVtZW50cy50eHQgL2Fzc2V0LW91dHB1dC8nLFxuICAgICAgICBdLFxuICAgICAgfSxcbiAgICB9KTtcblxuICAgIGNvbnN0IGZ1bmN0aW9uQXBwUmVnaXN0cmF0aW9uID0gbmV3IGdyYXBoLkFwcGxpY2F0aW9uKHRlbXBsYXRlLCAnZnVuY3Rpb25BcHBSZWdpc3RyYXRpb24nLCB7XG4gICAgICBkaXNwbGF5TmFtZTogYCR7bmFtZVByZWZpeH0tY2xhaW1zLWZ1bmMtYXBwYCxcbiAgICAgIHJlZGlyZWN0VXJpczogW10sXG4gICAgICByZXF1aXJlZFJlc291cmNlQWNjZXNzOiBbXG4gICAgICAgIHtcbiAgICAgICAgICByZXNvdXJjZUFwcElkOiBncmFwaC5SZXNvdXJjZUFwcElkLk1JQ1JPU09GVF9HUkFQSCxcbiAgICAgICAgICByZXNvdXJjZUFjY2VzczogW1xuICAgICAgICAgICAge1xuICAgICAgICAgICAgICBpZDogZ3JhcGguTWljcm9zb2Z0R3JhcGhQZXJtaXNzaW9uLkNVU1RPTV9BVVRIX0VYVF9SRUNFSVZFX1BBWUxPQUQsXG4gICAgICAgICAgICAgIHR5cGU6IGdyYXBoLlBlcm1pc3Npb25UeXBlLlJPTEUsXG4gICAgICAgICAgICB9LFxuICAgICAgICAgIF0sXG4gICAgICAgIH0sXG4gICAgICBdLFxuICAgIH0pO1xuXG4gICAgY29uc3QgZ3JhcGhTZXJ2aWNlUHJpbmNpcGFsID0gbmV3IGdyYXBoLkV4aXN0aW5nU2VydmljZVByaW5jaXBhbCh0ZW1wbGF0ZSwgJ2dyYXBoU2VydmljZVByaW5jaXBhbCcsIHtcbiAgICAgIGFwcElkOiAnMDAwMDAwMDMtMDAwMC0wMDAwLWMwMDAtMDAwMDAwMDAwMDAwJyxcbiAgICB9KTtcblxuICAgIGNvbnN0IG1pUG9saWN5UmVhZFBlcm1pc3Npb24gPSBuZXcgZ3JhcGguQXBwUm9sZUFzc2lnbm1lbnQodGVtcGxhdGUsICdtaVBvbGljeVJlYWRQZXJtaXNzaW9uJywge1xuICAgICAgcmVzb3VyY2VTZXJ2aWNlUHJpbmNpcGFsOiBncmFwaFNlcnZpY2VQcmluY2lwYWwsXG4gICAgICBwcmluY2lwYWw6IGAke21hbmFnZWRJZGVudGl0eS5wcmluY2lwYWxJZH1gLFxuICAgICAgYXBwUm9sZUlkOiAnXFwnMjQ2ZGQwZDUtNWJkMC00ZGVmLTk0MGItMDQyMTAzMGE1YjY4XFwnJyxcbiAgICB9KTtcblxuICAgIGNvbnN0IG1pUG9saWN5UGVybWlzc2lvbiA9IG5ldyBncmFwaC5BcHBSb2xlQXNzaWdubWVudCh0ZW1wbGF0ZSwgJ21pUG9saWN5UGVybWlzc2lvbicsIHtcbiAgICAgIHJlc291cmNlU2VydmljZVByaW5jaXBhbDogZ3JhcGhTZXJ2aWNlUHJpbmNpcGFsLFxuICAgICAgcHJpbmNpcGFsOiBgJHttYW5hZ2VkSWRlbnRpdHkucHJpbmNpcGFsSWR9YCxcbiAgICAgIGFwcFJvbGVJZDogJ1xcJ2JlNzQxNjRiLWNmZjEtNDkxYy04NzQxLWU2NzFjYjUzNmUxM1xcJycsXG4gICAgfSk7XG5cbiAgICBjb25zdCBtaUN1c3RvbUF1dGhFeHRQZXJtaXNzaW9uID0gbmV3IGdyYXBoLkFwcFJvbGVBc3NpZ25tZW50KHRlbXBsYXRlLCAnbWlDdXN0b21BdXRoRXh0UGVybWlzc2lvbicsIHtcbiAgICAgIHJlc291cmNlU2VydmljZVByaW5jaXBhbDogZ3JhcGhTZXJ2aWNlUHJpbmNpcGFsLFxuICAgICAgcHJpbmNpcGFsOiBgJHttYW5hZ2VkSWRlbnRpdHkucHJpbmNpcGFsSWR9YCxcbiAgICAgIGFwcFJvbGVJZDogJ1xcJ2MyNjY3OTY3LTcwNTAtNGU3ZS1iMDU5LTRjYmJiMzgxMWQwM1xcJycsXG4gICAgfSk7XG5cbiAgICBjb25zdCBtaUV2ZW50TGlzdGVuZXJQZXJtaXNzaW9uID0gbmV3IGdyYXBoLkFwcFJvbGVBc3NpZ25tZW50KHRlbXBsYXRlLCAnbWlFdmVudExpc3RlbmVyUGVybWlzc2lvbicsIHtcbiAgICAgIHJlc291cmNlU2VydmljZVByaW5jaXBhbDogZ3JhcGhTZXJ2aWNlUHJpbmNpcGFsLFxuICAgICAgcHJpbmNpcGFsOiBgJHttYW5hZ2VkSWRlbnRpdHkucHJpbmNpcGFsSWR9YCxcbiAgICAgIGFwcFJvbGVJZDogJ1xcJzBlZGY1ZTllLTRjZTgtNDY4YS04NDMyLWQwODYzMWQxOGM0M1xcJycsXG4gICAgfSk7XG5cbiAgICBjb25zdCBtaUFwcFJlYWRXcml0ZVBlcm1pc3Npb24gPSBuZXcgZ3JhcGguQXBwUm9sZUFzc2lnbm1lbnQodGVtcGxhdGUsICdtaUFwcFJlYWRXcml0ZVBlcm1pc3Npb24nLCB7XG4gICAgICByZXNvdXJjZVNlcnZpY2VQcmluY2lwYWw6IGdyYXBoU2VydmljZVByaW5jaXBhbCxcbiAgICAgIHByaW5jaXBhbDogYCR7bWFuYWdlZElkZW50aXR5LnByaW5jaXBhbElkfWAsXG4gICAgICBhcHBSb2xlSWQ6IGAnJHtncmFwaC5NaWNyb3NvZnRHcmFwaFBlcm1pc3Npb24uQVBQTElDQVRJT05fUkVBRF9XUklURV9BTEx9J2AsXG4gICAgfSk7XG5cbiAgICBjb25zdCB3aXJlQ3VzdG9tQ2xhaW1zRXh0ZW5zaW9uID0gbmV3IGF6dXJlLkRlcGxveW1lbnRTY3JpcHQodGVtcGxhdGUsICd3aXJlQ3VzdG9tQ2xhaW1zRXh0ZW5zaW9uJywge1xuICAgICAgbmFtZTogXCInd2lyZS1jdXN0b20tY2xhaW1zLWV4dGVuc2lvbidcIixcbiAgICAgIG1hbmFnZWRJZGVudGl0eTogbWFuYWdlZElkZW50aXR5LFxuICAgICAgc2NyaXB0Q29udGVudDogZnMucmVhZEZpbGVTeW5jKHBhdGguam9pbihfX2Rpcm5hbWUsICdzY3JpcHRzJywgJ3dpcmUtY3VzdG9tLWNsYWltcy1leHRlbnNpb24uc2gnKSwgJ3V0ZjgnKSxcbiAgICAgIGVudmlyb25tZW50VmFyaWFibGVzOiB7XG4gICAgICAgIEZVTkNUSU9OX0hPU1ROQU1FOiAnRnVuY3Rpb25hcHAucHJvcGVydGllcy5kZWZhdWx0SG9zdE5hbWUnLFxuICAgICAgICBGVU5DVElPTl9BUFBfSUQ6ICdGdW5jdGlvbmFwcHJlZ2lzdHJhdGlvbi5hcHBJZCcsXG4gICAgICAgIENMRl9BUFBfSUQ6ICdBcHBsaWNhdGlvbi5hcHBJZCcsXG4gICAgICAgIEVYVF9ESVNQTEFZX05BTUU6IGAnJHtuYW1lUHJlZml4fS1jbGFpbXMtcHJvdmlkZXInYCxcbiAgICAgIH0sXG4gICAgfSk7XG4gICAgd2lyZUN1c3RvbUNsYWltc0V4dGVuc2lvbi5hZGREZXBlbmRlbmN5KG1pUG9saWN5UmVhZFBlcm1pc3Npb24pO1xuICAgIHdpcmVDdXN0b21DbGFpbXNFeHRlbnNpb24uYWRkRGVwZW5kZW5jeShtaVBvbGljeVBlcm1pc3Npb24pO1xuICAgIHdpcmVDdXN0b21DbGFpbXNFeHRlbnNpb24uYWRkRGVwZW5kZW5jeShtaUN1c3RvbUF1dGhFeHRQZXJtaXNzaW9uKTtcbiAgICB3aXJlQ3VzdG9tQ2xhaW1zRXh0ZW5zaW9uLmFkZERlcGVuZGVuY3kobWlFdmVudExpc3RlbmVyUGVybWlzc2lvbik7XG4gICAgd2lyZUN1c3RvbUNsYWltc0V4dGVuc2lvbi5hZGREZXBlbmRlbmN5KG1pQXBwUmVhZFdyaXRlUGVybWlzc2lvbik7XG5cbiAgICBtYW5hZ2VkSWRlbnRpdHkuc3ludGhlc2l6ZSgpO1xuICAgIHN0b3JhZ2VBY2NvdW50LnN5bnRoZXNpemUoKTtcbiAgICBhcHBTZXJ2aWNlUGxhbi5zeW50aGVzaXplKCk7XG4gICAgbG9nQW5hbHl0aWNzV29ya3NwYWNlLnN5bnRoZXNpemUoKTtcbiAgICBhcHBsaWNhdGlvbkluc2lnaHRzLnN5bnRoZXNpemUoKTtcbiAgICBmdW5jdGlvbkFwcC5zeW50aGVzaXplKCk7XG4gICAgcm9sZUFzc2lnbm1lbnQuc3ludGhlc2l6ZSgpO1xuICAgIHNwQmxvYlJvbGVBc3NpZ25tZW50LnN5bnRoZXNpemUoKTtcbiAgICBmdW5jdGlvbkFwcFJlZ2lzdHJhdGlvbi5zeW50aGVzaXplKCk7XG4gICAgZ3JhcGhTZXJ2aWNlUHJpbmNpcGFsLnN5bnRoZXNpemUoKTtcbiAgICBtaVBvbGljeVJlYWRQZXJtaXNzaW9uLnN5bnRoZXNpemUoKTtcbiAgICBtaVBvbGljeVBlcm1pc3Npb24uc3ludGhlc2l6ZSgpO1xuICAgIG1pQ3VzdG9tQXV0aEV4dFBlcm1pc3Npb24uc3ludGhlc2l6ZSgpO1xuICAgIG1pRXZlbnRMaXN0ZW5lclBlcm1pc3Npb24uc3ludGhlc2l6ZSgpO1xuICAgIG1pQXBwUmVhZFdyaXRlUGVybWlzc2lvbi5zeW50aGVzaXplKCk7XG4gICAgd2lyZUN1c3RvbUNsYWltc0V4dGVuc2lvbi5zeW50aGVzaXplKCk7XG5cbiAgICByZXR1cm4ge1xuICAgICAgZnVuY3Rpb25Db2RlQXNzZXQ6IGZ1bmN0aW9uQ29kZUFzc2V0LFxuICAgIH07XG4gIH1cblxuICBwcml2YXRlIHNhbml0aXplSWRlbnRpZmllcihuYW1lOiBzdHJpbmcpOiBzdHJpbmcge1xuICAgIHJldHVybiBuYW1lXG4gICAgICAuc3BsaXQoL1stX1xcc10rLylcbiAgICAgIC5tYXAod29yZCA9PiB3b3JkLmNoYXJBdCgwKS50b1VwcGVyQ2FzZSgpICsgd29yZC5zbGljZSgxKS50b0xvd2VyQ2FzZSgpKVxuICAgICAgLmpvaW4oJycpXG4gICAgICAucmVwbGFjZSgvW15hLXpBLVowLTldL2csICcnKVxuICAgICAgLnJlcGxhY2UoL15bMC05XS8sICdfJCYnKTtcbiAgfVxufVxuIl19

package/lib/bicep/patterns/index.d.ts

@@ -0,0 +1 @@
+export * from './azureAdApplicationFederated';

package/lib/bicep/patterns/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./azureAdApplicationFederated"), exports);
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi9zcmMvYmljZXAvcGF0dGVybnMvaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7Ozs7Ozs7Ozs7Ozs7OztBQUFBLGdFQUE4QyIsInNvdXJjZXNDb250ZW50IjpbImV4cG9ydCAqIGZyb20gJy4vYXp1cmVBZEFwcGxpY2F0aW9uRmVkZXJhdGVkJztcbiJdfQ==

package/lib/bicep/resources/azure/appServicePlan.d.ts

@@ -0,0 +1,11 @@
+import { BicepTemplate } from '../../deploy/template';
+import { BicepConstruct } from '../graph/bicepConstruct';
+export interface AppServicePlanProps {
+    readonly name: string;
+}
+export declare class AppServicePlan extends BicepConstruct {
+    private props;
+    readonly id: string;
+    constructor(template: BicepTemplate, resourceName: string, props: AppServicePlanProps);
+    synthesize(): void;
+}

package/lib/bicep/resources/azure/appServicePlan.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AppServicePlan = void 0;
+const bicepConstruct_1 = require("../graph/bicepConstruct");
+class AppServicePlan extends bicepConstruct_1.BicepConstruct {
+    constructor(template, resourceName, props) {
+        super(template, resourceName);
+        this.props = props;
+        const pascalName = this.toPascalCase(resourceName);
+        this.id = `${pascalName}.id`;
+    }
+    synthesize() {
+        this.template.addResource(this.resourceName, {
+            type: 'Microsoft.Web/serverfarms',
+            apiVersion: '2022-09-01',
+            name: this.props.name,
+            location: 'location',
+            sku: { name: 'Y1', tier: 'Dynamic' },
+            properties: { reserved: true },
+        });
+    }
+}
+exports.AppServicePlan = AppServicePlan;
+//# sourceMappingURL=data:application/json;base64,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

package/lib/bicep/resources/azure/applicationInsights.d.ts

@@ -0,0 +1,13 @@
+import { LogAnalyticsWorkspace } from './logAnalyticsWorkspace';
+import { BicepTemplate } from '../../deploy/template';
+import { BicepConstruct } from '../graph/bicepConstruct';
+export interface ApplicationInsightsProps {
+    readonly name: string;
+    readonly logAnalyticsWorkspace: LogAnalyticsWorkspace;
+}
+export declare class ApplicationInsights extends BicepConstruct {
+    private props;
+    readonly connectionString: string;
+    constructor(template: BicepTemplate, resourceName: string, props: ApplicationInsightsProps);
+    synthesize(): void;
+}

package/lib/bicep/resources/azure/applicationInsights.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ApplicationInsights = void 0;
+const bicepConstruct_1 = require("../graph/bicepConstruct");
+class ApplicationInsights extends bicepConstruct_1.BicepConstruct {
+    constructor(template, resourceName, props) {
+        super(template, resourceName);
+        this.props = props;
+        const pascalName = this.toPascalCase(resourceName);
+        this.connectionString = `${pascalName}.properties.ConnectionString`;
+    }
+    synthesize() {
+        this.template.addResource(this.resourceName, {
+            type: 'Microsoft.Insights/components',
+            apiVersion: '2020-02-02',
+            name: this.props.name,
+            location: 'location',
+            kind: 'web',
+            properties: {
+                Application_Type: 'web',
+                WorkspaceResourceId: `${this.props.logAnalyticsWorkspace.id}`,
+            },
+        });
+    }
+}
+exports.ApplicationInsights = ApplicationInsights;
+//# sourceMappingURL=data:application/json;base64,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

package/lib/bicep/resources/azure/deploymentScript.d.ts

@@ -0,0 +1,16 @@
+import { ManagedIdentity } from './managedIdentity';
+import { BicepTemplate } from '../../deploy/template';
+import { BicepConstruct } from '../graph/bicepConstruct';
+export interface DeploymentScriptProps {
+    readonly name: string;
+    readonly managedIdentity: ManagedIdentity;
+    readonly scriptContent: string;
+    readonly forceUpdateTag?: string;
+    readonly environmentVariables?: Record<string, string>;
+    readonly secureEnvironmentVariables?: Record<string, string>;
+}
+export declare class DeploymentScript extends BicepConstruct {
+    readonly props: DeploymentScriptProps;
+    constructor(template: BicepTemplate, resourceName: string, props: DeploymentScriptProps);
+    synthesize(): void;
+}

package/lib/bicep/resources/azure/deploymentScript.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DeploymentScript = void 0;
+const bicepConstruct_1 = require("../graph/bicepConstruct");
+class DeploymentScript extends bicepConstruct_1.BicepConstruct {
+    constructor(template, resourceName, props) {
+        super(template, resourceName);
+        this.props = props;
+    }
+    synthesize() {
+        const envVars = this.props.environmentVariables || {};
+        const secureEnvVars = this.props.secureEnvironmentVariables || {};
+        const envList = [
+            ...Object.entries(envVars).map(([name, value]) => ({ name: `'${name}'`, value: value })),
+            ...Object.entries(secureEnvVars).map(([name, value]) => ({ name: `'${name}'`, secureValue: value })),
+        ];
+        this.template.addResource(this.resourceName, {
+            type: 'Microsoft.Resources/deploymentScripts',
+            apiVersion: '2023-08-01',
+            name: this.props.name,
+            location: 'location',
+            kind: 'AzureCLI',
+            identity: {
+                type: 'UserAssigned',
+                userAssignedIdentities: {
+                    [`'\${${this.props.managedIdentity.id}}'`]: {},
+                },
+            },
+            properties: {
+                azCliVersion: "'2.67.0'",
+                retentionInterval: "'PT1H'",
+                timeout: "'PT10M'",
+                cleanupPreference: "'OnExpiration'",
+                forceUpdateTag: this.props.forceUpdateTag,
+                scriptContent: this.props.scriptContent,
+                environmentVariables: envList.length > 0 ? envList : undefined,
+            },
+            dependsOn: this.explicitDependencies.length > 0 ? this.explicitDependencies : undefined,
+        });
+    }
+}
+exports.DeploymentScript = DeploymentScript;
+//# sourceMappingURL=data:application/json;base64,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

package/lib/bicep/resources/azure/functionApp.d.ts

@@ -0,0 +1,20 @@
+import { ApplicationInsights } from './applicationInsights';
+import { AppServicePlan } from './appServicePlan';
+import { ManagedIdentity } from './managedIdentity';
+import { StorageAccount } from './storageAccount';
+import { BicepTemplate } from '../../deploy/template';
+import { BicepConstruct } from '../graph/bicepConstruct';
+export interface FunctionAppProps {
+    readonly name: string;
+    readonly managedIdentity: ManagedIdentity;
+    readonly appServicePlan: AppServicePlan;
+    readonly storageAccount: StorageAccount;
+    readonly applicationInsights?: ApplicationInsights;
+}
+export declare class FunctionApp extends BicepConstruct {
+    private props;
+    readonly name: string;
+    readonly defaultHostName: string;
+    constructor(template: BicepTemplate, resourceName: string, props: FunctionAppProps);
+    synthesize(): void;
+}