rds-database-auto-start-preventer 0.2.6 → 0.3.0

package/lib/funcs/auto-start-prevent.predicates.d.ts

@@ -0,0 +1,251 @@
+/**
+ * Pure helpers for the RDS auto-start prevent Lambda.
+ * No AWS SDK, Durable context, env, or clock dependencies.
+ */
+/**
+ * Detail payload of an RDS auto-start event from EventBridge.
+ */
+export interface RdsAutoStartDetail {
+    /** Event ID: RDS-EVENT-0154 (DB instance) or RDS-EVENT-0153 (DB cluster). */
+    EventID: 'RDS-EVENT-0154' | 'RDS-EVENT-0153';
+    /** Resource type that emitted the event. */
+    SourceType: 'DB_INSTANCE' | 'CLUSTER';
+    /** ARN of the DB instance or cluster. */
+    SourceArn: string;
+    /** DB instance or cluster identifier from the event. */
+    SourceIdentifier: string;
+}
+/**
+ * RDS auto-start event as received from EventBridge.
+ */
+export interface RdsAutoStartEvent {
+    'detail-type': 'RDS DB Instance Event' | 'RDS DB Cluster Event';
+    'source': 'aws.rds';
+    'detail': RdsAutoStartDetail;
+}
+/**
+ * Tag-based filter parameters for the handler.
+ */
+export interface AutoStartParams {
+    /** Tag key to match on the resource. */
+    tagKey: string;
+    /** Allowed tag values; the resource is processed only when its tag value is in this list. */
+    tagValues: string[];
+}
+/**
+ * Slack credentials stored in Secrets Manager.
+ */
+export interface SlackSecret {
+    /** Slack bot or user OAuth token. */
+    token: string;
+    /** Channel ID or name to post notifications to. */
+    channel: string;
+}
+/**
+ * Normalized handler input: EventBridge event and tag filter parameters.
+ */
+export interface AutoStartPreventInput {
+    event: RdsAutoStartEvent;
+    params: AutoStartParams;
+}
+/**
+ * Handler result when no stop action was taken.
+ */
+export interface NoOpResult {
+    action: 'no-op';
+    reason: 'tag not matched or not found' | 'already stopped';
+    status: string;
+}
+/**
+ * Handler result when this invocation called StopDB* and the resource reached `stopped`.
+ */
+export interface StoppedResult {
+    action: 'stopped';
+    finalStatus: string;
+    account: string;
+    region: string;
+    identifier: string;
+}
+/**
+ * AWS-style tag (Key/Value).
+ */
+export interface Tag {
+    Key?: string;
+    Value?: string;
+}
+/**
+ * State snapshot while waiting on RDS describe APIs.
+ */
+export interface WaitState {
+    /** Current DB instance or cluster status. */
+    status: string;
+    /** DB instance or cluster identifier. */
+    identifier: string;
+    /** Tags from the describe response; present on the first wait check only. */
+    tags?: Tag[];
+}
+/** Continue waiting with a delay. */
+export interface ContinueWait {
+    shouldContinue: true;
+    delay: {
+        minutes: number;
+    };
+}
+/** Stop waiting. */
+export interface StopWait {
+    shouldContinue: false;
+}
+/** Result of a durable waitStrategy. */
+export type WaitStrategyResult = ContinueWait | StopWait;
+/**
+ * RDS statuses that indicate an in-progress transition.
+ * The handler waits every 5 minutes while the resource remains in one of these states.
+ */
+export declare const TRANSITIONAL_STATUSES: Set<string>;
+/**
+ * Returns true when the status is transitional and waiting should continue.
+ *
+ * @param status - Current DB instance or cluster status.
+ * @returns Whether the status is transitional.
+ */
+export declare const isTransitionalStatus: (status: string) => boolean;
+/**
+ * Type guard for Slack credentials returned by `secretFetcher.getSecretValue`.
+ *
+ * aws-lambda-secret-fetcher ^0.7 parses SecretString with quiet-json-parser and
+ * falls back to the raw string on invalid JSON, so callers must validate shape.
+ *
+ * @param value - Value returned from the secret fetcher.
+ * @returns Whether value is a SlackSecret with non-empty token and channel.
+ */
+export declare const isSlackSecret: (value: unknown) => value is SlackSecret;
+/**
+ * Type guard: input is `{ event, params }` as produced by the EventBridge target.
+ *
+ * @param input - Raw Lambda invocation payload.
+ * @returns Whether input has non-null event and params.
+ */
+export declare const isAutoStartPreventInput: (input: unknown) => input is AutoStartPreventInput;
+/**
+ * Normalizes invocation input to {@link AutoStartPreventInput}.
+ *
+ * @param input - `{ event, params }` from EventBridge InputTransformer (or the same shape on direct Invoke).
+ * @returns Event plus tag filter parameters.
+ * @throws When the payload is not `{ event, params }`.
+ */
+export declare const normalizeInput: (input: unknown) => AutoStartPreventInput;
+/**
+ * Returns true if the resource has a tag with the given key and a value in the allowed list.
+ *
+ * @param params - Tag key and allowed values.
+ * @param tags - Resource tag list (e.g. from DescribeDBInstances / DescribeDBClusters).
+ * @returns Whether the tag matches.
+ */
+export declare const matchTag: (params: AutoStartParams, tags?: Tag[]) => boolean;
+/**
+ * Whether the EventBridge detail identifies a supported DB instance auto-start event.
+ *
+ * @param detailType - EventBridge detail-type.
+ * @param detail - RDS event detail.
+ * @returns True for RDS-EVENT-0154 on a DB instance.
+ */
+export declare const isDbInstanceAutoStart: (detailType: RdsAutoStartEvent["detail-type"], detail: RdsAutoStartDetail) => boolean;
+/**
+ * Whether the EventBridge detail identifies a supported DB cluster auto-start event.
+ *
+ * @param detailType - EventBridge detail-type.
+ * @param detail - RDS event detail.
+ * @returns True for RDS-EVENT-0153 on a cluster.
+ */
+export declare const isDbClusterAutoStart: (detailType: RdsAutoStartEvent["detail-type"], detail: RdsAutoStartDetail) => boolean;
+/**
+ * Wait strategy while describing until the resource leaves transitional statuses.
+ *
+ * @param state - Latest wait state.
+ * @returns Continue every 5 minutes while transitional; otherwise stop.
+ */
+export declare const waitStrategyUntilStable: (state: WaitState) => WaitStrategyResult;
+/**
+ * Wait strategy after StopDB* until the resource reaches `stopped`.
+ *
+ * @param state - Latest wait state.
+ * @returns Stop when `stopped`; continue while transitional.
+ * @throws When the status is neither stopped nor transitional.
+ */
+export declare const waitStrategyUntilStopped: (state: WaitState) => WaitStrategyResult;
+/**
+ * Decision after the first describe and a successful tag match.
+ */
+export type AfterTagMatchDecision = {
+    kind: 'stop';
+} | {
+    kind: 'no-op';
+    result: NoOpResult;
+} | {
+    kind: 'error';
+    message: string;
+};
+/**
+ * Decides the next action when tags matched and StopDB* has not been called yet.
+ *
+ * @param status - Status from the first describe after leaving transitional states.
+ * @returns Stop when `available`; no-op when already `stopped`; otherwise error.
+ */
+export declare const decideAfterTagMatch: (status: string) => AfterTagMatchDecision;
+/**
+ * Builds the no-op result used when tags do not match.
+ *
+ * @param status - Current resource status.
+ * @returns No-op result with tag mismatch reason.
+ */
+export declare const tagMismatchNoOp: (status: string) => NoOpResult;
+/**
+ * Parses region and account from an RDS resource ARN (`arn:aws:rds:region:account:...`).
+ *
+ * @param sourceArn - SourceArn from the RDS event detail.
+ * @returns Region and account id segments.
+ */
+export declare const parseRdsSourceArn: (sourceArn: string) => {
+    region: string;
+    account: string;
+};
+/**
+ * Arguments for the Slack stop-success notification.
+ */
+export interface SlackStopNotificationArgs {
+    channel: string;
+    sourceType: RdsAutoStartDetail['SourceType'];
+    sourceIdentifier: string;
+    account: string;
+    region: string;
+}
+/**
+ * Builds the Slack `chat.postMessage` payload after a successful stop.
+ *
+ * @param args - Channel and resource identity fields.
+ * @returns Arguments suitable for `WebClient.chat.postMessage`.
+ */
+export declare const buildSlackStopNotification: (args: SlackStopNotificationArgs) => {
+    channel: string;
+    attachments: {
+        color: string;
+        pretext: string;
+        fields: {
+            title: string;
+            value: string;
+            short: boolean;
+        }[];
+    }[];
+};
+/**
+ * Builds the success result after StopDB* reached `stopped`.
+ *
+ * @param args - Final status and identity fields.
+ * @returns StoppedResult for the handler return value.
+ */
+export declare const buildStoppedResult: (args: {
+    finalStatus: string;
+    account: string;
+    region: string;
+    identifier: string;
+}) => StoppedResult;

package/lib/funcs/auto-start-prevent.predicates.js

@@ -0,0 +1,253 @@
+"use strict";
+/**
+ * Pure helpers for the RDS auto-start prevent Lambda.
+ * No AWS SDK, Durable context, env, or clock dependencies.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildStoppedResult = exports.buildSlackStopNotification = exports.parseRdsSourceArn = exports.tagMismatchNoOp = exports.decideAfterTagMatch = exports.waitStrategyUntilStopped = exports.waitStrategyUntilStable = exports.isDbClusterAutoStart = exports.isDbInstanceAutoStart = exports.matchTag = exports.normalizeInput = exports.isAutoStartPreventInput = exports.isSlackSecret = exports.isTransitionalStatus = exports.TRANSITIONAL_STATUSES = void 0;
+/**
+ * RDS statuses that indicate an in-progress transition.
+ * The handler waits every 5 minutes while the resource remains in one of these states.
+ */
+exports.TRANSITIONAL_STATUSES = new Set([
+    'starting',
+    'configuring-enhanced-monitoring',
+    'backing-up',
+    'modifying',
+    'stopping',
+]);
+/**
+ * Returns true when the status is transitional and waiting should continue.
+ *
+ * @param status - Current DB instance or cluster status.
+ * @returns Whether the status is transitional.
+ */
+const isTransitionalStatus = (status) => exports.TRANSITIONAL_STATUSES.has(status);
+exports.isTransitionalStatus = isTransitionalStatus;
+/**
+ * Type guard for Slack credentials returned by `secretFetcher.getSecretValue`.
+ *
+ * aws-lambda-secret-fetcher ^0.7 parses SecretString with quiet-json-parser and
+ * falls back to the raw string on invalid JSON, so callers must validate shape.
+ *
+ * @param value - Value returned from the secret fetcher.
+ * @returns Whether value is a SlackSecret with non-empty token and channel.
+ */
+const isSlackSecret = (value) => {
+    if (typeof value !== 'object' || value == null) {
+        return false;
+    }
+    if (!('token' in value) || !('channel' in value)) {
+        return false;
+    }
+    return typeof value.token === 'string' &&
+        value.token.length > 0 &&
+        typeof value.channel === 'string' &&
+        value.channel.length > 0;
+};
+exports.isSlackSecret = isSlackSecret;
+/**
+ * Type guard: input is `{ event, params }` as produced by the EventBridge target.
+ *
+ * @param input - Raw Lambda invocation payload.
+ * @returns Whether input has non-null event and params.
+ */
+const isAutoStartPreventInput = (input) => {
+    if (typeof input !== 'object' || input == null) {
+        return false;
+    }
+    if (!('event' in input) || !('params' in input)) {
+        return false;
+    }
+    return input.event != null && input.params != null;
+};
+exports.isAutoStartPreventInput = isAutoStartPreventInput;
+/**
+ * Normalizes invocation input to {@link AutoStartPreventInput}.
+ *
+ * @param input - `{ event, params }` from EventBridge InputTransformer (or the same shape on direct Invoke).
+ * @returns Event plus tag filter parameters.
+ * @throws When the payload is not `{ event, params }`.
+ */
+const normalizeInput = (input) => {
+    if ((0, exports.isAutoStartPreventInput)(input)) {
+        return input;
+    }
+    throw new Error('Invalid input: expected { event, params }.');
+};
+exports.normalizeInput = normalizeInput;
+/**
+ * Returns true if the resource has a tag with the given key and a value in the allowed list.
+ *
+ * @param params - Tag key and allowed values.
+ * @param tags - Resource tag list (e.g. from DescribeDBInstances / DescribeDBClusters).
+ * @returns Whether the tag matches.
+ */
+const matchTag = (params, tags) => {
+    if (!tags || tags.length === 0) {
+        return false;
+    }
+    const value = tags.find(t => t.Key === params.tagKey)?.Value;
+    if (!value) {
+        return false;
+    }
+    return params.tagValues.includes(value);
+};
+exports.matchTag = matchTag;
+/**
+ * Whether the EventBridge detail identifies a supported DB instance auto-start event.
+ *
+ * @param detailType - EventBridge detail-type.
+ * @param detail - RDS event detail.
+ * @returns True for RDS-EVENT-0154 on a DB instance.
+ */
+const isDbInstanceAutoStart = (detailType, detail) => detailType === 'RDS DB Instance Event' &&
+    detail.SourceType === 'DB_INSTANCE' &&
+    detail.EventID === 'RDS-EVENT-0154';
+exports.isDbInstanceAutoStart = isDbInstanceAutoStart;
+/**
+ * Whether the EventBridge detail identifies a supported DB cluster auto-start event.
+ *
+ * @param detailType - EventBridge detail-type.
+ * @param detail - RDS event detail.
+ * @returns True for RDS-EVENT-0153 on a cluster.
+ */
+const isDbClusterAutoStart = (detailType, detail) => detailType === 'RDS DB Cluster Event' &&
+    detail.SourceType === 'CLUSTER' &&
+    detail.EventID === 'RDS-EVENT-0153';
+exports.isDbClusterAutoStart = isDbClusterAutoStart;
+/**
+ * Wait strategy while describing until the resource leaves transitional statuses.
+ *
+ * @param state - Latest wait state.
+ * @returns Continue every 5 minutes while transitional; otherwise stop.
+ */
+const waitStrategyUntilStable = (state) => {
+    if ((0, exports.isTransitionalStatus)(state.status)) {
+        return { shouldContinue: true, delay: { minutes: 5 } };
+    }
+    return { shouldContinue: false };
+};
+exports.waitStrategyUntilStable = waitStrategyUntilStable;
+/**
+ * Wait strategy after StopDB* until the resource reaches `stopped`.
+ *
+ * @param state - Latest wait state.
+ * @returns Stop when `stopped`; continue while transitional.
+ * @throws When the status is neither stopped nor transitional.
+ */
+const waitStrategyUntilStopped = (state) => {
+    if (state.status === 'stopped') {
+        return { shouldContinue: false };
+    }
+    if ((0, exports.isTransitionalStatus)(state.status)) {
+        return { shouldContinue: true, delay: { minutes: 5 } };
+    }
+    throw new Error(`Unexpected status while waiting for stop: ${state.status}`);
+};
+exports.waitStrategyUntilStopped = waitStrategyUntilStopped;
+/**
+ * Decides the next action when tags matched and StopDB* has not been called yet.
+ *
+ * @param status - Status from the first describe after leaving transitional states.
+ * @returns Stop when `available`; no-op when already `stopped`; otherwise error.
+ */
+const decideAfterTagMatch = (status) => {
+    if (status === 'available') {
+        return { kind: 'stop' };
+    }
+    if (status === 'stopped') {
+        return {
+            kind: 'no-op',
+            result: {
+                action: 'no-op',
+                reason: 'already stopped',
+                status,
+            },
+        };
+    }
+    return {
+        kind: 'error',
+        message: `DB status is not stopped after processing: ${status}`,
+    };
+};
+exports.decideAfterTagMatch = decideAfterTagMatch;
+/**
+ * Builds the no-op result used when tags do not match.
+ *
+ * @param status - Current resource status.
+ * @returns No-op result with tag mismatch reason.
+ */
+const tagMismatchNoOp = (status) => ({
+    action: 'no-op',
+    reason: 'tag not matched or not found',
+    status,
+});
+exports.tagMismatchNoOp = tagMismatchNoOp;
+/**
+ * Parses region and account from an RDS resource ARN (`arn:aws:rds:region:account:...`).
+ *
+ * @param sourceArn - SourceArn from the RDS event detail.
+ * @returns Region and account id segments.
+ */
+const parseRdsSourceArn = (sourceArn) => {
+    const parts = sourceArn.split(':');
+    return {
+        region: parts[3] ?? '',
+        account: parts[4] ?? '',
+    };
+};
+exports.parseRdsSourceArn = parseRdsSourceArn;
+/**
+ * Builds the Slack `chat.postMessage` payload after a successful stop.
+ *
+ * @param args - Channel and resource identity fields.
+ * @returns Arguments suitable for `WebClient.chat.postMessage`.
+ */
+const buildSlackStopNotification = (args) => ({
+    channel: args.channel,
+    attachments: [
+        {
+            color: '#36a64f',
+            pretext: `😴 Successfully stopped the automatically running RDS ${args.sourceType} ${args.sourceIdentifier}.`,
+            fields: [
+                {
+                    title: 'Account',
+                    value: args.account,
+                    short: true,
+                },
+                {
+                    title: 'Region',
+                    value: args.region,
+                    short: true,
+                },
+                {
+                    title: 'Type',
+                    value: args.sourceType,
+                    short: true,
+                },
+                {
+                    title: 'Identifier',
+                    value: args.sourceIdentifier,
+                    short: true,
+                },
+            ],
+        },
+    ],
+});
+exports.buildSlackStopNotification = buildSlackStopNotification;
+/**
+ * Builds the success result after StopDB* reached `stopped`.
+ *
+ * @param args - Final status and identity fields.
+ * @returns StoppedResult for the handler return value.
+ */
+const buildStoppedResult = (args) => ({
+    action: 'stopped',
+    finalStatus: args.finalStatus,
+    account: args.account,
+    region: args.region,
+    identifier: args.identifier,
+});
+exports.buildStoppedResult = buildStoppedResult;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiYXV0by1zdGFydC1wcmV2ZW50LnByZWRpY2F0ZXMuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvZnVuY3MvYXV0by1zdGFydC1wcmV2ZW50LnByZWRpY2F0ZXMudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IjtBQUFBOzs7R0FHRzs7O0FBMkdIOzs7R0FHRztBQUNVLFFBQUEscUJBQXFCLEdBQUcsSUFBSSxHQUFHLENBQUM7SUFDM0MsVUFBVTtJQUNWLGlDQUFpQztJQUNqQyxZQUFZO0lBQ1osV0FBVztJQUNYLFVBQVU7Q0FDWCxDQUFDLENBQUM7QUFFSDs7Ozs7R0FLRztBQUNJLE1BQU0sb0JBQW9CLEdBQUcsQ0FBQyxNQUFjLEVBQVcsRUFBRSxDQUM5RCw2QkFBcUIsQ0FBQyxHQUFHLENBQUMsTUFBTSxDQUFDLENBQUM7QUFEdkIsUUFBQSxvQkFBb0Isd0JBQ0c7QUFFcEM7Ozs7Ozs7O0dBUUc7QUFDSSxNQUFNLGFBQWEsR0FBRyxDQUFDLEtBQWMsRUFBd0IsRUFBRTtJQUNwRSxJQUFJLE9BQU8sS0FBSyxLQUFLLFFBQVEsSUFBSSxLQUFLLElBQUksSUFBSSxFQUFFLENBQUM7UUFDL0MsT0FBTyxLQUFLLENBQUM7SUFDZixDQUFDO0lBQ0QsSUFBSSxDQUFDLENBQUMsT0FBTyxJQUFJLEtBQUssQ0FBQyxJQUFJLENBQUMsQ0FBQyxTQUFTLElBQUksS0FBSyxDQUFDLEVBQUUsQ0FBQztRQUNqRCxPQUFPLEtBQUssQ0FBQztJQUNmLENBQUM7SUFDRCxPQUFPLE9BQU8sS0FBSyxDQUFDLEtBQUssS0FBSyxRQUFRO1FBQ3BDLEtBQUssQ0FBQyxLQUFLLENBQUMsTUFBTSxHQUFHLENBQUM7UUFDdEIsT0FBTyxLQUFLLENBQUMsT0FBTyxLQUFLLFFBQVE7UUFDakMsS0FBSyxDQUFDLE9BQU8sQ0FBQyxNQUFNLEdBQUcsQ0FBQyxDQUFDO0FBQzdCLENBQUMsQ0FBQztBQVhXLFFBQUEsYUFBYSxpQkFXeEI7QUFFRjs7Ozs7R0FLRztBQUNJLE1BQU0sdUJBQXVCLEdBQUcsQ0FBQyxLQUFjLEVBQWtDLEVBQUU7SUFDeEYsSUFBSSxPQUFPLEtBQUssS0FBSyxRQUFRLElBQUksS0FBSyxJQUFJLElBQUksRUFBRSxDQUFDO1FBQy9DLE9BQU8sS0FBSyxDQUFDO0lBQ2YsQ0FBQztJQUNELElBQUksQ0FBQyxDQUFDLE9BQU8sSUFBSSxLQUFLLENBQUMsSUFBSSxDQUFDLENBQUMsUUFBUSxJQUFJLEtBQUssQ0FBQyxFQUFFLENBQUM7UUFDaEQsT0FBTyxLQUFLLENBQUM7SUFDZixDQUFDO0lBQ0QsT0FBTyxLQUFLLENBQUMsS0FBSyxJQUFJLElBQUksSUFBSSxLQUFLLENBQUMsTUFBTSxJQUFJLElBQUksQ0FBQztBQUNyRCxDQUFDLENBQUM7QUFSVyxRQUFBLHVCQUF1QiwyQkFRbEM7QUFFRjs7Ozs7O0dBTUc7QUFDSSxNQUFNLGNBQWMsR0FBRyxDQUFDLEtBQWMsRUFBeUIsRUFBRTtJQUN0RSxJQUFJLElBQUEsK0JBQXVCLEVBQUMsS0FBSyxDQUFDLEVBQUUsQ0FBQztRQUNuQyxPQUFPLEtBQUssQ0FBQztJQUNmLENBQUM7SUFDRCxNQUFNLElBQUksS0FBSyxDQUFDLDRDQUE0QyxDQUFDLENBQUM7QUFDaEUsQ0FBQyxDQUFDO0FBTFcsUUFBQSxjQUFjLGtCQUt6QjtBQUVGOzs7Ozs7R0FNRztBQUNJLE1BQU0sUUFBUSxHQUFHLENBQUMsTUFBdUIsRUFBRSxJQUFZLEVBQVcsRUFBRTtJQUN6RSxJQUFJLENBQUMsSUFBSSxJQUFJLElBQUksQ0FBQyxNQUFNLEtBQUssQ0FBQyxFQUFFLENBQUM7UUFDL0IsT0FBTyxLQUFLLENBQUM7SUFDZixDQUFDO0lBQ0QsTUFBTSxLQUFLLEdBQUcsSUFBSSxDQUFDLElBQUksQ0FBQyxDQUFDLENBQUMsRUFBRSxDQUFDLENBQUMsQ0FBQyxHQUFHLEtBQUssTUFBTSxDQUFDLE1BQU0sQ0FBQyxFQUFFLEtBQUssQ0FBQztJQUM3RCxJQUFJLENBQUMsS0FBSyxFQUFFLENBQUM7UUFDWCxPQUFPLEtBQUssQ0FBQztJQUNmLENBQUM7SUFDRCxPQUFPLE1BQU0sQ0FBQyxTQUFTLENBQUMsUUFBUSxDQUFDLEtBQUssQ0FBQyxDQUFDO0FBQzFDLENBQUMsQ0FBQztBQVRXLFFBQUEsUUFBUSxZQVNuQjtBQUVGOzs7Ozs7R0FNRztBQUNJLE1BQU0scUJBQXFCLEdBQUcsQ0FDbkMsVUFBNEMsRUFDNUMsTUFBMEIsRUFDakIsRUFBRSxDQUNYLFVBQVUsS0FBSyx1QkFBdUI7SUFDdEMsTUFBTSxDQUFDLFVBQVUsS0FBSyxhQUFhO0lBQ25DLE1BQU0sQ0FBQyxPQUFPLEtBQUssZ0JBQWdCLENBQUM7QUFOekIsUUFBQSxxQkFBcUIseUJBTUk7QUFFdEM7Ozs7OztHQU1HO0FBQ0ksTUFBTSxvQkFBb0IsR0FBRyxDQUNsQyxVQUE0QyxFQUM1QyxNQUEwQixFQUNqQixFQUFFLENBQ1gsVUFBVSxLQUFLLHNCQUFzQjtJQUNyQyxNQUFNLENBQUMsVUFBVSxLQUFLLFNBQVM7SUFDL0IsTUFBTSxDQUFDLE9BQU8sS0FBSyxnQkFBZ0IsQ0FBQztBQU56QixRQUFBLG9CQUFvQix3QkFNSztBQUV0Qzs7Ozs7R0FLRztBQUNJLE1BQU0sdUJBQXVCLEdBQUcsQ0FBQyxLQUFnQixFQUFzQixFQUFFO0lBQzlFLElBQUksSUFBQSw0QkFBb0IsRUFBQyxLQUFLLENBQUMsTUFBTSxDQUFDLEVBQUUsQ0FBQztRQUN2QyxPQUFPLEVBQUUsY0FBYyxFQUFFLElBQUksRUFBRSxLQUFLLEVBQUUsRUFBRSxPQUFPLEVBQUUsQ0FBQyxFQUFFLEVBQUUsQ0FBQztJQUN6RCxDQUFDO0lBQ0QsT0FBTyxFQUFFLGNBQWMsRUFBRSxLQUFLLEVBQUUsQ0FBQztBQUNuQyxDQUFDLENBQUM7QUFMVyxRQUFBLHVCQUF1QiwyQkFLbEM7QUFFRjs7Ozs7O0dBTUc7QUFDSSxNQUFNLHdCQUF3QixHQUFHLENBQUMsS0FBZ0IsRUFBc0IsRUFBRTtJQUMvRSxJQUFJLEtBQUssQ0FBQyxNQUFNLEtBQUssU0FBUyxFQUFFLENBQUM7UUFDL0IsT0FBTyxFQUFFLGNBQWMsRUFBRSxLQUFLLEVBQUUsQ0FBQztJQUNuQyxDQUFDO0lBQ0QsSUFBSSxJQUFBLDRCQUFvQixFQUFDLEtBQUssQ0FBQyxNQUFNLENBQUMsRUFBRSxDQUFDO1FBQ3ZDLE9BQU8sRUFBRSxjQUFjLEVBQUUsSUFBSSxFQUFFLEtBQUssRUFBRSxFQUFFLE9BQU8sRUFBRSxDQUFDLEVBQUUsRUFBRSxDQUFDO0lBQ3pELENBQUM7SUFDRCxNQUFNLElBQUksS0FBSyxDQUFDLDZDQUE2QyxLQUFLLENBQUMsTUFBTSxFQUFFLENBQUMsQ0FBQztBQUMvRSxDQUFDLENBQUM7QUFSVyxRQUFBLHdCQUF3Qiw0QkFRbkM7QUFVRjs7Ozs7R0FLRztBQUNJLE1BQU0sbUJBQW1CLEdBQUcsQ0FBQyxNQUFjLEVBQXlCLEVBQUU7SUFDM0UsSUFBSSxNQUFNLEtBQUssV0FBVyxFQUFFLENBQUM7UUFDM0IsT0FBTyxFQUFFLElBQUksRUFBRSxNQUFNLEVBQUUsQ0FBQztJQUMxQixDQUFDO0lBQ0QsSUFBSSxNQUFNLEtBQUssU0FBUyxFQUFFLENBQUM7UUFDekIsT0FBTztZQUNMLElBQUksRUFBRSxPQUFPO1lBQ2IsTUFBTSxFQUFFO2dCQUNOLE1BQU0sRUFBRSxPQUFPO2dCQUNmLE1BQU0sRUFBRSxpQkFBaUI7Z0JBQ3pCLE1BQU07YUFDUDtTQUNGLENBQUM7SUFDSixDQUFDO0lBQ0QsT0FBTztRQUNMLElBQUksRUFBRSxPQUFPO1FBQ2IsT0FBTyxFQUFFLDhDQUE4QyxNQUFNLEVBQUU7S0FDaEUsQ0FBQztBQUNKLENBQUMsQ0FBQztBQWxCVyxRQUFBLG1CQUFtQix1QkFrQjlCO0FBRUY7Ozs7O0dBS0c7QUFDSSxNQUFNLGVBQWUsR0FBRyxDQUFDLE1BQWMsRUFBYyxFQUFFLENBQUMsQ0FBQztJQUM5RCxNQUFNLEVBQUUsT0FBTztJQUNmLE1BQU0sRUFBRSw4QkFBOEI7SUFDdEMsTUFBTTtDQUNQLENBQUMsQ0FBQztBQUpVLFFBQUEsZUFBZSxtQkFJekI7QUFFSDs7Ozs7R0FLRztBQUNJLE1BQU0saUJBQWlCLEdBQUcsQ0FBQyxTQUFpQixFQUF1QyxFQUFFO0lBQzFGLE1BQU0sS0FBSyxHQUFHLFNBQVMsQ0FBQyxLQUFLLENBQUMsR0FBRyxDQUFDLENBQUM7SUFDbkMsT0FBTztRQUNMLE1BQU0sRUFBRSxLQUFLLENBQUMsQ0FBQyxDQUFDLElBQUksRUFBRTtRQUN0QixPQUFPLEVBQUUsS0FBSyxDQUFDLENBQUMsQ0FBQyxJQUFJLEVBQUU7S0FDeEIsQ0FBQztBQUNKLENBQUMsQ0FBQztBQU5XLFFBQUEsaUJBQWlCLHFCQU01QjtBQWFGOzs7OztHQUtHO0FBQ0ksTUFBTSwwQkFBMEIsR0FBRyxDQUFDLElBQStCLEVBQUUsRUFBRSxDQUFDLENBQUM7SUFDOUUsT0FBTyxFQUFFLElBQUksQ0FBQyxPQUFPO0lBQ3JCLFdBQVcsRUFBRTtRQUNYO1lBQ0UsS0FBSyxFQUFFLFNBQVM7WUFDaEIsT0FBTyxFQUFFLHlEQUF5RCxJQUFJLENBQUMsVUFBVSxJQUFJLElBQUksQ0FBQyxnQkFBZ0IsR0FBRztZQUM3RyxNQUFNLEVBQUU7Z0JBQ047b0JBQ0UsS0FBSyxFQUFFLFNBQVM7b0JBQ2hCLEtBQUssRUFBRSxJQUFJLENBQUMsT0FBTztvQkFDbkIsS0FBSyxFQUFFLElBQUk7aUJBQ1o7Z0JBQ0Q7b0JBQ0UsS0FBSyxFQUFFLFFBQVE7b0JBQ2YsS0FBSyxFQUFFLElBQUksQ0FBQyxNQUFNO29CQUNsQixLQUFLLEVBQUUsSUFBSTtpQkFDWjtnQkFDRDtvQkFDRSxLQUFLLEVBQUUsTUFBTTtvQkFDYixLQUFLLEVBQUUsSUFBSSxDQUFDLFVBQVU7b0JBQ3RCLEtBQUssRUFBRSxJQUFJO2lCQUNaO2dCQUNEO29CQUNFLEtBQUssRUFBRSxZQUFZO29CQUNuQixLQUFLLEVBQUUsSUFBSSxDQUFDLGdCQUFnQjtvQkFDNUIsS0FBSyxFQUFFLElBQUk7aUJBQ1o7YUFDRjtTQUNGO0tBQ0Y7Q0FDRixDQUFDLENBQUM7QUE5QlUsUUFBQSwwQkFBMEIsOEJBOEJwQztBQUVIOzs7OztHQUtHO0FBQ0ksTUFBTSxrQkFBa0IsR0FBRyxDQUFDLElBS2xDLEVBQWlCLEVBQUUsQ0FBQyxDQUFDO0lBQ3BCLE1BQU0sRUFBRSxTQUFTO0lBQ2pCLFdBQVcsRUFBRSxJQUFJLENBQUMsV0FBVztJQUM3QixPQUFPLEVBQUUsSUFBSSxDQUFDLE9BQU87SUFDckIsTUFBTSxFQUFFLElBQUksQ0FBQyxNQUFNO0lBQ25CLFVBQVUsRUFBRSxJQUFJLENBQUMsVUFBVTtDQUM1QixDQUFDLENBQUM7QUFYVSxRQUFBLGtCQUFrQixzQkFXNUIiLCJzb3VyY2VzQ29udGVudCI6WyIvKipcbiAqIFB1cmUgaGVscGVycyBmb3IgdGhlIFJEUyBhdXRvLXN0YXJ0IHByZXZlbnQgTGFtYmRhLlxuICogTm8gQVdTIFNESywgRHVyYWJsZSBjb250ZXh0LCBlbnYsIG9yIGNsb2NrIGRlcGVuZGVuY2llcy5cbiAqL1xuXG4vKipcbiAqIERldGFpbCBwYXlsb2FkIG9mIGFuIFJEUyBhdXRvLXN0YXJ0IGV2ZW50IGZyb20gRXZlbnRCcmlkZ2UuXG4gKi9cbmV4cG9ydCBpbnRlcmZhY2UgUmRzQXV0b1N0YXJ0RGV0YWlsIHtcbiAgLyoqIEV2ZW50IElEOiBSRFMtRVZFTlQtMDE1NCAoREIgaW5zdGFuY2UpIG9yIFJEUy1FVkVOVC0wMTUzIChEQiBjbHVzdGVyKS4gKi9cbiAgRXZlbnRJRDogJ1JEUy1FVkVOVC0wMTU0JyB8ICdSRFMtRVZFTlQtMDE1Myc7XG4gIC8qKiBSZXNvdXJjZSB0eXBlIHRoYXQgZW1pdHRlZCB0aGUgZXZlbnQuICovXG4gIFNvdXJjZVR5cGU6ICdEQl9JTlNUQU5DRScgfCAnQ0xVU1RFUic7XG4gIC8qKiBBUk4gb2YgdGhlIERCIGluc3RhbmNlIG9yIGNsdXN0ZXIuICovXG4gIFNvdXJjZUFybjogc3RyaW5nO1xuICAvKiogREIgaW5zdGFuY2Ugb3IgY2x1c3RlciBpZGVudGlmaWVyIGZyb20gdGhlIGV2ZW50LiAqL1xuICBTb3VyY2VJZGVudGlmaWVyOiBzdHJpbmc7XG59XG5cbi8qKlxuICogUkRTIGF1dG8tc3RhcnQgZXZlbnQgYXMgcmVjZWl2ZWQgZnJvbSBFdmVudEJyaWRnZS5cbiAqL1xuZXhwb3J0IGludGVyZmFjZSBSZHNBdXRvU3RhcnRFdmVudCB7XG4gICdkZXRhaWwtdHlwZSc6ICdSRFMgREIgSW5zdGFuY2UgRXZlbnQnIHwgJ1JEUyBEQiBDbHVzdGVyIEV2ZW50JztcbiAgJ3NvdXJjZSc6ICdhd3MucmRzJztcbiAgJ2RldGFpbCc6IFJkc0F1dG9TdGFydERldGFpbDtcbn1cblxuLyoqXG4gKiBUYWctYmFzZWQgZmlsdGVyIHBhcmFtZXRlcnMgZm9yIHRoZSBoYW5kbGVyLlxuICovXG5leHBvcnQgaW50ZXJmYWNlIEF1dG9TdGFydFBhcmFtcyB7XG4gIC8qKiBUYWcga2V5IHRvIG1hdGNoIG9uIHRoZSByZXNvdXJjZS4gKi9cbiAgdGFnS2V5OiBzdHJpbmc7XG4gIC8qKiBBbGxvd2VkIHRhZyB2YWx1ZXM7IHRoZSByZXNvdXJjZSBpcyBwcm9jZXNzZWQgb25seSB3aGVuIGl0cyB0YWcgdmFsdWUgaXMgaW4gdGhpcyBsaXN0LiAqL1xuICB0YWdWYWx1ZXM6IHN0cmluZ1tdO1xufVxuXG4vKipcbiAqIFNsYWNrIGNyZWRlbnRpYWxzIHN0b3JlZCBpbiBTZWNyZXRzIE1hbmFnZXIuXG4gKi9cbmV4cG9ydCBpbnRlcmZhY2UgU2xhY2tTZWNyZXQge1xuICAvKiogU2xhY2sgYm90IG9yIHVzZXIgT0F1dGggdG9rZW4uICovXG4gIHRva2VuOiBzdHJpbmc7XG4gIC8qKiBDaGFubmVsIElEIG9yIG5hbWUgdG8gcG9zdCBub3RpZmljYXRpb25zIHRvLiAqL1xuICBjaGFubmVsOiBzdHJpbmc7XG59XG5cbi8qKlxuICogTm9ybWFsaXplZCBoYW5kbGVyIGlucHV0OiBFdmVudEJyaWRnZSBldmVudCBhbmQgdGFnIGZpbHRlciBwYXJhbWV0ZXJzLlxuICovXG5leHBvcnQgaW50ZXJmYWNlIEF1dG9TdGFydFByZXZlbnRJbnB1dCB7XG4gIGV2ZW50OiBSZHNBdXRvU3RhcnRFdmVudDtcbiAgcGFyYW1zOiBBdXRvU3RhcnRQYXJhbXM7XG59XG5cbi8qKlxuICogSGFuZGxlciByZXN1bHQgd2hlbiBubyBzdG9wIGFjdGlvbiB3YXMgdGFrZW4uXG4gKi9cbmV4cG9ydCBpbnRlcmZhY2UgTm9PcFJlc3VsdCB7XG4gIGFjdGlvbjogJ25vLW9wJztcbiAgcmVhc29uOiAndGFnIG5vdCBtYXRjaGVkIG9yIG5vdCBmb3VuZCcgfCAnYWxyZWFkeSBzdG9wcGVkJztcbiAgc3RhdHVzOiBzdHJpbmc7XG59XG5cbi8qKlxuICogSGFuZGxlciByZXN1bHQgd2hlbiB0aGlzIGludm9jYXRpb24gY2FsbGVkIFN0b3BEQiogYW5kIHRoZSByZXNvdXJjZSByZWFjaGVkIGBzdG9wcGVkYC5cbiAqL1xuZXhwb3J0IGludGVyZmFjZSBTdG9wcGVkUmVzdWx0IHtcbiAgYWN0aW9uOiAnc3RvcHBlZCc7XG4gIGZpbmFsU3RhdHVzOiBzdHJpbmc7XG4gIGFjY291bnQ6IHN0cmluZztcbiAgcmVnaW9uOiBzdHJpbmc7XG4gIGlkZW50aWZpZXI6IHN0cmluZztcbn1cblxuLyoqXG4gKiBBV1Mtc3R5bGUgdGFnIChLZXkvVmFsdWUpLlxuICovXG5leHBvcnQgaW50ZXJmYWNlIFRhZyB7XG4gIEtleT86IHN0cmluZztcbiAgVmFsdWU/OiBzdHJpbmc7XG59XG5cbi8qKlxuICogU3RhdGUgc25hcHNob3Qgd2hpbGUgd2FpdGluZyBvbiBSRFMgZGVzY3JpYmUgQVBJcy5cbiAqL1xuZXhwb3J0IGludGVyZmFjZSBXYWl0U3RhdGUge1xuICAvKiogQ3VycmVudCBEQiBpbnN0YW5jZSBvciBjbHVzdGVyIHN0YXR1cy4gKi9cbiAgc3RhdHVzOiBzdHJpbmc7XG4gIC8qKiBEQiBpbnN0YW5jZSBvciBjbHVzdGVyIGlkZW50aWZpZXIuICovXG4gIGlkZW50aWZpZXI6IHN0cmluZztcbiAgLyoqIFRhZ3MgZnJvbSB0aGUgZGVzY3JpYmUgcmVzcG9uc2U7IHByZXNlbnQgb24gdGhlIGZpcnN0IHdhaXQgY2hlY2sgb25seS4gKi9cbiAgdGFncz86IFRhZ1tdO1xufVxuXG4vKiogQ29udGludWUgd2FpdGluZyB3aXRoIGEgZGVsYXkuICovXG5leHBvcnQgaW50ZXJmYWNlIENvbnRpbnVlV2FpdCB7XG4gIHNob3VsZENvbnRpbnVlOiB0cnVlO1xuICBkZWxheTogeyBtaW51dGVzOiBudW1iZXIgfTtcbn1cblxuLyoqIFN0b3Agd2FpdGluZy4gKi9cbmV4cG9ydCBpbnRlcmZhY2UgU3RvcFdhaXQge1xuICBzaG91bGRDb250aW51ZTogZmFsc2U7XG59XG5cbi8qKiBSZXN1bHQgb2YgYSBkdXJhYmxlIHdhaXRTdHJhdGVneS4gKi9cbmV4cG9ydCB0eXBlIFdhaXRTdHJhdGVneVJlc3VsdCA9IENvbnRpbnVlV2FpdCB8IFN0b3BXYWl0O1xuXG4vKipcbiAqIFJEUyBzdGF0dXNlcyB0aGF0IGluZGljYXRlIGFuIGluLXByb2dyZXNzIHRyYW5zaXRpb24uXG4gKiBUaGUgaGFuZGxlciB3YWl0cyBldmVyeSA1IG1pbnV0ZXMgd2hpbGUgdGhlIHJlc291cmNlIHJlbWFpbnMgaW4gb25lIG9mIHRoZXNlIHN0YXRlcy5cbiAqL1xuZXhwb3J0IGNvbnN0IFRSQU5TSVRJT05BTF9TVEFUVVNFUyA9IG5ldyBTZXQoW1xuICAnc3RhcnRpbmcnLFxuICAnY29uZmlndXJpbmctZW5oYW5jZWQtbW9uaXRvcmluZycsXG4gICdiYWNraW5nLXVwJyxcbiAgJ21vZGlmeWluZycsXG4gICdzdG9wcGluZycsXG5dKTtcblxuLyoqXG4gKiBSZXR1cm5zIHRydWUgd2hlbiB0aGUgc3RhdHVzIGlzIHRyYW5zaXRpb25hbCBhbmQgd2FpdGluZyBzaG91bGQgY29udGludWUuXG4gKlxuICogQHBhcmFtIHN0YXR1cyAtIEN1cnJlbnQgREIgaW5zdGFuY2Ugb3IgY2x1c3RlciBzdGF0dXMuXG4gKiBAcmV0dXJucyBXaGV0aGVyIHRoZSBzdGF0dXMgaXMgdHJhbnNpdGlvbmFsLlxuICovXG5leHBvcnQgY29uc3QgaXNUcmFuc2l0aW9uYWxTdGF0dXMgPSAoc3RhdHVzOiBzdHJpbmcpOiBib29sZWFuID0+XG4gIFRSQU5TSVRJT05BTF9TVEFUVVNFUy5oYXMoc3RhdHVzKTtcblxuLyoqXG4gKiBUeXBlIGd1YXJkIGZvciBTbGFjayBjcmVkZW50aWFscyByZXR1cm5lZCBieSBgc2VjcmV0RmV0Y2hlci5nZXRTZWNyZXRWYWx1ZWAuXG4gKlxuICogYXdzLWxhbWJkYS1zZWNyZXQtZmV0Y2hlciBeMC43IHBhcnNlcyBTZWNyZXRTdHJpbmcgd2l0aCBxdWlldC1qc29uLXBhcnNlciBhbmRcbiAqIGZhbGxzIGJhY2sgdG8gdGhlIHJhdyBzdHJpbmcgb24gaW52YWxpZCBKU09OLCBzbyBjYWxsZXJzIG11c3QgdmFsaWRhdGUgc2hhcGUuXG4gKlxuICogQHBhcmFtIHZhbHVlIC0gVmFsdWUgcmV0dXJuZWQgZnJvbSB0aGUgc2VjcmV0IGZldGNoZXIuXG4gKiBAcmV0dXJucyBXaGV0aGVyIHZhbHVlIGlzIGEgU2xhY2tTZWNyZXQgd2l0aCBub24tZW1wdHkgdG9rZW4gYW5kIGNoYW5uZWwuXG4gKi9cbmV4cG9ydCBjb25zdCBpc1NsYWNrU2VjcmV0ID0gKHZhbHVlOiB1bmtub3duKTogdmFsdWUgaXMgU2xhY2tTZWNyZXQgPT4ge1xuICBpZiAodHlwZW9mIHZhbHVlICE9PSAnb2JqZWN0JyB8fCB2YWx1ZSA9PSBudWxsKSB7XG4gICAgcmV0dXJuIGZhbHNlO1xuICB9XG4gIGlmICghKCd0b2tlbicgaW4gdmFsdWUpIHx8ICEoJ2NoYW5uZWwnIGluIHZhbHVlKSkge1xuICAgIHJldHVybiBmYWxzZTtcbiAgfVxuICByZXR1cm4gdHlwZW9mIHZhbHVlLnRva2VuID09PSAnc3RyaW5nJyAmJlxuICAgIHZhbHVlLnRva2VuLmxlbmd0aCA+IDAgJiZcbiAgICB0eXBlb2YgdmFsdWUuY2hhbm5lbCA9PT0gJ3N0cmluZycgJiZcbiAgICB2YWx1ZS5jaGFubmVsLmxlbmd0aCA+IDA7XG59O1xuXG4vKipcbiAqIFR5cGUgZ3VhcmQ6IGlucHV0IGlzIGB7IGV2ZW50LCBwYXJhbXMgfWAgYXMgcHJvZHVjZWQgYnkgdGhlIEV2ZW50QnJpZGdlIHRhcmdldC5cbiAqXG4gKiBAcGFyYW0gaW5wdXQgLSBSYXcgTGFtYmRhIGludm9jYXRpb24gcGF5bG9hZC5cbiAqIEByZXR1cm5zIFdoZXRoZXIgaW5wdXQgaGFzIG5vbi1udWxsIGV2ZW50IGFuZCBwYXJhbXMuXG4gKi9cbmV4cG9ydCBjb25zdCBpc0F1dG9TdGFydFByZXZlbnRJbnB1dCA9IChpbnB1dDogdW5rbm93bik6IGlucHV0IGlzIEF1dG9TdGFydFByZXZlbnRJbnB1dCA9PiB7XG4gIGlmICh0eXBlb2YgaW5wdXQgIT09ICdvYmplY3QnIHx8IGlucHV0ID09IG51bGwpIHtcbiAgICByZXR1cm4gZmFsc2U7XG4gIH1cbiAgaWYgKCEoJ2V2ZW50JyBpbiBpbnB1dCkgfHwgISgncGFyYW1zJyBpbiBpbnB1dCkpIHtcbiAgICByZXR1cm4gZmFsc2U7XG4gIH1cbiAgcmV0dXJuIGlucHV0LmV2ZW50ICE9IG51bGwgJiYgaW5wdXQucGFyYW1zICE9IG51bGw7XG59O1xuXG4vKipcbiAqIE5vcm1hbGl6ZXMgaW52b2NhdGlvbiBpbnB1dCB0byB7QGxpbmsgQXV0b1N0YXJ0UHJldmVudElucHV0fS5cbiAqXG4gKiBAcGFyYW0gaW5wdXQgLSBgeyBldmVudCwgcGFyYW1zIH1gIGZyb20gRXZlbnRCcmlkZ2UgSW5wdXRUcmFuc2Zvcm1lciAob3IgdGhlIHNhbWUgc2hhcGUgb24gZGlyZWN0IEludm9rZSkuXG4gKiBAcmV0dXJucyBFdmVudCBwbHVzIHRhZyBmaWx0ZXIgcGFyYW1ldGVycy5cbiAqIEB0aHJvd3MgV2hlbiB0aGUgcGF5bG9hZCBpcyBub3QgYHsgZXZlbnQsIHBhcmFtcyB9YC5cbiAqL1xuZXhwb3J0IGNvbnN0IG5vcm1hbGl6ZUlucHV0ID0gKGlucHV0OiB1bmtub3duKTogQXV0b1N0YXJ0UHJldmVudElucHV0ID0+IHtcbiAgaWYgKGlzQXV0b1N0YXJ0UHJldmVudElucHV0KGlucHV0KSkge1xuICAgIHJldHVybiBpbnB1dDtcbiAgfVxuICB0aHJvdyBuZXcgRXJyb3IoJ0ludmFsaWQgaW5wdXQ6IGV4cGVjdGVkIHsgZXZlbnQsIHBhcmFtcyB9LicpO1xufTtcblxuLyoqXG4gKiBSZXR1cm5zIHRydWUgaWYgdGhlIHJlc291cmNlIGhhcyBhIHRhZyB3aXRoIHRoZSBnaXZlbiBrZXkgYW5kIGEgdmFsdWUgaW4gdGhlIGFsbG93ZWQgbGlzdC5cbiAqXG4gKiBAcGFyYW0gcGFyYW1zIC0gVGFnIGtleSBhbmQgYWxsb3dlZCB2YWx1ZXMuXG4gKiBAcGFyYW0gdGFncyAtIFJlc291cmNlIHRhZyBsaXN0IChlLmcuIGZyb20gRGVzY3JpYmVEQkluc3RhbmNlcyAvIERlc2NyaWJlREJDbHVzdGVycykuXG4gKiBAcmV0dXJucyBXaGV0aGVyIHRoZSB0YWcgbWF0Y2hlcy5cbiAqL1xuZXhwb3J0IGNvbnN0IG1hdGNoVGFnID0gKHBhcmFtczogQXV0b1N0YXJ0UGFyYW1zLCB0YWdzPzogVGFnW10pOiBib29sZWFuID0+IHtcbiAgaWYgKCF0YWdzIHx8IHRhZ3MubGVuZ3RoID09PSAwKSB7XG4gICAgcmV0dXJuIGZhbHNlO1xuICB9XG4gIGNvbnN0IHZhbHVlID0gdGFncy5maW5kKHQgPT4gdC5LZXkgPT09IHBhcmFtcy50YWdLZXkpPy5WYWx1ZTtcbiAgaWYgKCF2YWx1ZSkge1xuICAgIHJldHVybiBmYWxzZTtcbiAgfVxuICByZXR1cm4gcGFyYW1zLnRhZ1ZhbHVlcy5pbmNsdWRlcyh2YWx1ZSk7XG59O1xuXG4vKipcbiAqIFdoZXRoZXIgdGhlIEV2ZW50QnJpZGdlIGRldGFpbCBpZGVudGlmaWVzIGEgc3VwcG9ydGVkIERCIGluc3RhbmNlIGF1dG8tc3RhcnQgZXZlbnQuXG4gKlxuICogQHBhcmFtIGRldGFpbFR5cGUgLSBFdmVudEJyaWRnZSBkZXRhaWwtdHlwZS5cbiAqIEBwYXJhbSBkZXRhaWwgLSBSRFMgZXZlbnQgZGV0YWlsLlxuICogQHJldHVybnMgVHJ1ZSBmb3IgUkRTLUVWRU5ULTAxNTQgb24gYSBEQiBpbnN0YW5jZS5cbiAqL1xuZXhwb3J0IGNvbnN0IGlzRGJJbnN0YW5jZUF1dG9TdGFydCA9IChcbiAgZGV0YWlsVHlwZTogUmRzQXV0b1N0YXJ0RXZlbnRbJ2RldGFpbC10eXBlJ10sXG4gIGRldGFpbDogUmRzQXV0b1N0YXJ0RGV0YWlsLFxuKTogYm9vbGVhbiA9PlxuICBkZXRhaWxUeXBlID09PSAnUkRTIERCIEluc3RhbmNlIEV2ZW50JyAmJlxuICBkZXRhaWwuU291cmNlVHlwZSA9PT0gJ0RCX0lOU1RBTkNFJyAmJlxuICBkZXRhaWwuRXZlbnRJRCA9PT0gJ1JEUy1FVkVOVC0wMTU0JztcblxuLyoqXG4gKiBXaGV0aGVyIHRoZSBFdmVudEJyaWRnZSBkZXRhaWwgaWRlbnRpZmllcyBhIHN1cHBvcnRlZCBEQiBjbHVzdGVyIGF1dG8tc3RhcnQgZXZlbnQuXG4gKlxuICogQHBhcmFtIGRldGFpbFR5cGUgLSBFdmVudEJyaWRnZSBkZXRhaWwtdHlwZS5cbiAqIEBwYXJhbSBkZXRhaWwgLSBSRFMgZXZlbnQgZGV0YWlsLlxuICogQHJldHVybnMgVHJ1ZSBmb3IgUkRTLUVWRU5ULTAxNTMgb24gYSBjbHVzdGVyLlxuICovXG5leHBvcnQgY29uc3QgaXNEYkNsdXN0ZXJBdXRvU3RhcnQgPSAoXG4gIGRldGFpbFR5cGU6IFJkc0F1dG9TdGFydEV2ZW50WydkZXRhaWwtdHlwZSddLFxuICBkZXRhaWw6IFJkc0F1dG9TdGFydERldGFpbCxcbik6IGJvb2xlYW4gPT5cbiAgZGV0YWlsVHlwZSA9PT0gJ1JEUyBEQiBDbHVzdGVyIEV2ZW50JyAmJlxuICBkZXRhaWwuU291cmNlVHlwZSA9PT0gJ0NMVVNURVInICYmXG4gIGRldGFpbC5FdmVudElEID09PSAnUkRTLUVWRU5ULTAxNTMnO1xuXG4vKipcbiAqIFdhaXQgc3RyYXRlZ3kgd2hpbGUgZGVzY3JpYmluZyB1bnRpbCB0aGUgcmVzb3VyY2UgbGVhdmVzIHRyYW5zaXRpb25hbCBzdGF0dXNlcy5cbiAqXG4gKiBAcGFyYW0gc3RhdGUgLSBMYXRlc3Qgd2FpdCBzdGF0ZS5cbiAqIEByZXR1cm5zIENvbnRpbnVlIGV2ZXJ5IDUgbWludXRlcyB3aGlsZSB0cmFuc2l0aW9uYWw7IG90aGVyd2lzZSBzdG9wLlxuICovXG5leHBvcnQgY29uc3Qgd2FpdFN0cmF0ZWd5VW50aWxTdGFibGUgPSAoc3RhdGU6IFdhaXRTdGF0ZSk6IFdhaXRTdHJhdGVneVJlc3VsdCA9PiB7XG4gIGlmIChpc1RyYW5zaXRpb25hbFN0YXR1cyhzdGF0ZS5zdGF0dXMpKSB7XG4gICAgcmV0dXJuIHsgc2hvdWxkQ29udGludWU6IHRydWUsIGRlbGF5OiB7IG1pbnV0ZXM6IDUgfSB9O1xuICB9XG4gIHJldHVybiB7IHNob3VsZENvbnRpbnVlOiBmYWxzZSB9O1xufTtcblxuLyoqXG4gKiBXYWl0IHN0cmF0ZWd5IGFmdGVyIFN0b3BEQiogdW50aWwgdGhlIHJlc291cmNlIHJlYWNoZXMgYHN0b3BwZWRgLlxuICpcbiAqIEBwYXJhbSBzdGF0ZSAtIExhdGVzdCB3YWl0IHN0YXRlLlxuICogQHJldHVybnMgU3RvcCB3aGVuIGBzdG9wcGVkYDsgY29udGludWUgd2hpbGUgdHJhbnNpdGlvbmFsLlxuICogQHRocm93cyBXaGVuIHRoZSBzdGF0dXMgaXMgbmVpdGhlciBzdG9wcGVkIG5vciB0cmFuc2l0aW9uYWwuXG4gKi9cbmV4cG9ydCBjb25zdCB3YWl0U3RyYXRlZ3lVbnRpbFN0b3BwZWQgPSAoc3RhdGU6IFdhaXRTdGF0ZSk6IFdhaXRTdHJhdGVneVJlc3VsdCA9PiB7XG4gIGlmIChzdGF0ZS5zdGF0dXMgPT09ICdzdG9wcGVkJykge1xuICAgIHJldHVybiB7IHNob3VsZENvbnRpbnVlOiBmYWxzZSB9O1xuICB9XG4gIGlmIChpc1RyYW5zaXRpb25hbFN0YXR1cyhzdGF0ZS5zdGF0dXMpKSB7XG4gICAgcmV0dXJuIHsgc2hvdWxkQ29udGludWU6IHRydWUsIGRlbGF5OiB7IG1pbnV0ZXM6IDUgfSB9O1xuICB9XG4gIHRocm93IG5ldyBFcnJvcihgVW5leHBlY3RlZCBzdGF0dXMgd2hpbGUgd2FpdGluZyBmb3Igc3RvcDogJHtzdGF0ZS5zdGF0dXN9YCk7XG59O1xuXG4vKipcbiAqIERlY2lzaW9uIGFmdGVyIHRoZSBmaXJzdCBkZXNjcmliZSBhbmQgYSBzdWNjZXNzZnVsIHRhZyBtYXRjaC5cbiAqL1xuZXhwb3J0IHR5cGUgQWZ0ZXJUYWdNYXRjaERlY2lzaW9uID1cbiAgfCB7IGtpbmQ6ICdzdG9wJyB9XG4gIHwgeyBraW5kOiAnbm8tb3AnOyByZXN1bHQ6IE5vT3BSZXN1bHQgfVxuICB8IHsga2luZDogJ2Vycm9yJzsgbWVzc2FnZTogc3RyaW5nIH07XG5cbi8qKlxuICogRGVjaWRlcyB0aGUgbmV4dCBhY3Rpb24gd2hlbiB0YWdzIG1hdGNoZWQgYW5kIFN0b3BEQiogaGFzIG5vdCBiZWVuIGNhbGxlZCB5ZXQuXG4gKlxuICogQHBhcmFtIHN0YXR1cyAtIFN0YXR1cyBmcm9tIHRoZSBmaXJzdCBkZXNjcmliZSBhZnRlciBsZWF2aW5nIHRyYW5zaXRpb25hbCBzdGF0ZXMuXG4gKiBAcmV0dXJucyBTdG9wIHdoZW4gYGF2YWlsYWJsZWA7IG5vLW9wIHdoZW4gYWxyZWFkeSBgc3RvcHBlZGA7IG90aGVyd2lzZSBlcnJvci5cbiAqL1xuZXhwb3J0IGNvbnN0IGRlY2lkZUFmdGVyVGFnTWF0Y2ggPSAoc3RhdHVzOiBzdHJpbmcpOiBBZnRlclRhZ01hdGNoRGVjaXNpb24gPT4ge1xuICBpZiAoc3RhdHVzID09PSAnYXZhaWxhYmxlJykge1xuICAgIHJldHVybiB7IGtpbmQ6ICdzdG9wJyB9O1xuICB9XG4gIGlmIChzdGF0dXMgPT09ICdzdG9wcGVkJykge1xuICAgIHJldHVybiB7XG4gICAgICBraW5kOiAnbm8tb3AnLFxuICAgICAgcmVzdWx0OiB7XG4gICAgICAgIGFjdGlvbjogJ25vLW9wJyxcbiAgICAgICAgcmVhc29uOiAnYWxyZWFkeSBzdG9wcGVkJyxcbiAgICAgICAgc3RhdHVzLFxuICAgICAgfSxcbiAgICB9O1xuICB9XG4gIHJldHVybiB7XG4gICAga2luZDogJ2Vycm9yJyxcbiAgICBtZXNzYWdlOiBgREIgc3RhdHVzIGlzIG5vdCBzdG9wcGVkIGFmdGVyIHByb2Nlc3Npbmc6ICR7c3RhdHVzfWAsXG4gIH07XG59O1xuXG4vKipcbiAqIEJ1aWxkcyB0aGUgbm8tb3AgcmVzdWx0IHVzZWQgd2hlbiB0YWdzIGRvIG5vdCBtYXRjaC5cbiAqXG4gKiBAcGFyYW0gc3RhdHVzIC0gQ3VycmVudCByZXNvdXJjZSBzdGF0dXMuXG4gKiBAcmV0dXJucyBOby1vcCByZXN1bHQgd2l0aCB0YWcgbWlzbWF0Y2ggcmVhc29uLlxuICovXG5leHBvcnQgY29uc3QgdGFnTWlzbWF0Y2hOb09wID0gKHN0YXR1czogc3RyaW5nKTogTm9PcFJlc3VsdCA9PiAoe1xuICBhY3Rpb246ICduby1vcCcsXG4gIHJlYXNvbjogJ3RhZyBub3QgbWF0Y2hlZCBvciBub3QgZm91bmQnLFxuICBzdGF0dXMsXG59KTtcblxuLyoqXG4gKiBQYXJzZXMgcmVnaW9uIGFuZCBhY2NvdW50IGZyb20gYW4gUkRTIHJlc291cmNlIEFSTiAoYGFybjphd3M6cmRzOnJlZ2lvbjphY2NvdW50Oi4uLmApLlxuICpcbiAqIEBwYXJhbSBzb3VyY2VBcm4gLSBTb3VyY2VBcm4gZnJvbSB0aGUgUkRTIGV2ZW50IGRldGFpbC5cbiAqIEByZXR1cm5zIFJlZ2lvbiBhbmQgYWNjb3VudCBpZCBzZWdtZW50cy5cbiAqL1xuZXhwb3J0IGNvbnN0IHBhcnNlUmRzU291cmNlQXJuID0gKHNvdXJjZUFybjogc3RyaW5nKTogeyByZWdpb246IHN0cmluZzsgYWNjb3VudDogc3RyaW5nIH0gPT4ge1xuICBjb25zdCBwYXJ0cyA9IHNvdXJjZUFybi5zcGxpdCgnOicpO1xuICByZXR1cm4ge1xuICAgIHJlZ2lvbjogcGFydHNbM10gPz8gJycsXG4gICAgYWNjb3VudDogcGFydHNbNF0gPz8gJycsXG4gIH07XG59O1xuXG4vKipcbiAqIEFyZ3VtZW50cyBmb3IgdGhlIFNsYWNrIHN0b3Atc3VjY2VzcyBub3RpZmljYXRpb24uXG4gKi9cbmV4cG9ydCBpbnRlcmZhY2UgU2xhY2tTdG9wTm90aWZpY2F0aW9uQXJncyB7XG4gIGNoYW5uZWw6IHN0cmluZztcbiAgc291cmNlVHlwZTogUmRzQXV0b1N0YXJ0RGV0YWlsWydTb3VyY2VUeXBlJ107XG4gIHNvdXJjZUlkZW50aWZpZXI6IHN0cmluZztcbiAgYWNjb3VudDogc3RyaW5nO1xuICByZWdpb246IHN0cmluZztcbn1cblxuLyoqXG4gKiBCdWlsZHMgdGhlIFNsYWNrIGBjaGF0LnBvc3RNZXNzYWdlYCBwYXlsb2FkIGFmdGVyIGEgc3VjY2Vzc2Z1bCBzdG9wLlxuICpcbiAqIEBwYXJhbSBhcmdzIC0gQ2hhbm5lbCBhbmQgcmVzb3VyY2UgaWRlbnRpdHkgZmllbGRzLlxuICogQHJldHVybnMgQXJndW1lbnRzIHN1aXRhYmxlIGZvciBgV2ViQ2xpZW50LmNoYXQucG9zdE1lc3NhZ2VgLlxuICovXG5leHBvcnQgY29uc3QgYnVpbGRTbGFja1N0b3BOb3RpZmljYXRpb24gPSAoYXJnczogU2xhY2tTdG9wTm90aWZpY2F0aW9uQXJncykgPT4gKHtcbiAgY2hhbm5lbDogYXJncy5jaGFubmVsLFxuICBhdHRhY2htZW50czogW1xuICAgIHtcbiAgICAgIGNvbG9yOiAnIzM2YTY0ZicsXG4gICAgICBwcmV0ZXh0OiBg8J+YtCBTdWNjZXNzZnVsbHkgc3RvcHBlZCB0aGUgYXV0b21hdGljYWxseSBydW5uaW5nIFJEUyAke2FyZ3Muc291cmNlVHlwZX0gJHthcmdzLnNvdXJjZUlkZW50aWZpZXJ9LmAsXG4gICAgICBmaWVsZHM6IFtcbiAgICAgICAge1xuICAgICAgICAgIHRpdGxlOiAnQWNjb3VudCcsXG4gICAgICAgICAgdmFsdWU6IGFyZ3MuYWNjb3VudCxcbiAgICAgICAgICBzaG9ydDogdHJ1ZSxcbiAgICAgICAgfSxcbiAgICAgICAge1xuICAgICAgICAgIHRpdGxlOiAnUmVnaW9uJyxcbiAgICAgICAgICB2YWx1ZTogYXJncy5yZWdpb24sXG4gICAgICAgICAgc2hvcnQ6IHRydWUsXG4gICAgICAgIH0sXG4gICAgICAgIHtcbiAgICAgICAgICB0aXRsZTogJ1R5cGUnLFxuICAgICAgICAgIHZhbHVlOiBhcmdzLnNvdXJjZVR5cGUsXG4gICAgICAgICAgc2hvcnQ6IHRydWUsXG4gICAgICAgIH0sXG4gICAgICAgIHtcbiAgICAgICAgICB0aXRsZTogJ0lkZW50aWZpZXInLFxuICAgICAgICAgIHZhbHVlOiBhcmdzLnNvdXJjZUlkZW50aWZpZXIsXG4gICAgICAgICAgc2hvcnQ6IHRydWUsXG4gICAgICAgIH0sXG4gICAgICBdLFxuICAgIH0sXG4gIF0sXG59KTtcblxuLyoqXG4gKiBCdWlsZHMgdGhlIHN1Y2Nlc3MgcmVzdWx0IGFmdGVyIFN0b3BEQiogcmVhY2hlZCBgc3RvcHBlZGAuXG4gKlxuICogQHBhcmFtIGFyZ3MgLSBGaW5hbCBzdGF0dXMgYW5kIGlkZW50aXR5IGZpZWxkcy5cbiAqIEByZXR1cm5zIFN0b3BwZWRSZXN1bHQgZm9yIHRoZSBoYW5kbGVyIHJldHVybiB2YWx1ZS5cbiAqL1xuZXhwb3J0IGNvbnN0IGJ1aWxkU3RvcHBlZFJlc3VsdCA9IChhcmdzOiB7XG4gIGZpbmFsU3RhdHVzOiBzdHJpbmc7XG4gIGFjY291bnQ6IHN0cmluZztcbiAgcmVnaW9uOiBzdHJpbmc7XG4gIGlkZW50aWZpZXI6IHN0cmluZztcbn0pOiBTdG9wcGVkUmVzdWx0ID0+ICh7XG4gIGFjdGlvbjogJ3N0b3BwZWQnLFxuICBmaW5hbFN0YXR1czogYXJncy5maW5hbFN0YXR1cyxcbiAgYWNjb3VudDogYXJncy5hY2NvdW50LFxuICByZWdpb246IGFyZ3MucmVnaW9uLFxuICBpZGVudGlmaWVyOiBhcmdzLmlkZW50aWZpZXIsXG59KTtcbiJdfQ==

package/lib/stacks/rds-database-auto-start-prevent-stack.js

@@ -8,7 +8,7 @@ const rds_database_auto_start_preventer_1 = require("../constructs/rds-database-
  * CDK stack that deploys {@link RDSDatabaseAutoStartPreventer}.
  */
 class RDSDatabaseAutoStartPreventStack extends aws_cdk_lib_1.Stack {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "rds-database-auto-start-preventer.RDSDatabaseAutoStartPreventStack", version: "0.2.6" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "rds-database-auto-start-preventer.RDSDatabaseAutoStartPreventStack", version: "0.3.0" };
     /**
      * Creates the stack and the RDSDatabaseAutoStartPreventer construct.
      *

package/package.json

@@ -51,7 +51,7 @@
     "@typescript-eslint/eslint-plugin": "^8",
     "@typescript-eslint/parser": "^8",
     "aws-cdk-lib": "2.232.0",
-    "aws-lambda-secret-fetcher": "^0.5.1",
+    "aws-lambda-secret-fetcher": "^0.7.1",
     "aws-sdk-client-mock": "^4.1.0",
     "aws-sdk-client-mock-jest": "^4.1.0",
     "commit-and-tag-version": "^12",
@@ -62,15 +62,16 @@
     "eslint-plugin-import": "^2.32.0",
     "jest": "^30.4.2",
     "jest-junit": "^17",
-    "jsii": "~5.9.0",
+    "jsii": "6.0.x",
     "jsii-diff": "^1.139.0",
     "jsii-docgen": "^10.5.0",
     "jsii-pacmak": "^1.139.0",
-    "jsii-rosetta": "~5.9.0",
+    "jsii-rosetta": "6.0.x",
     "projen": "^0.101.31",
+    "strict-env-resolver": "^0.6.1",
     "ts-jest": "^29.4.12",
     "ts-node": "^10.9.2",
-    "typescript": "5.9.x"
+    "typescript": "6.0.x"
   },
   "peerDependencies": {
     "aws-cdk-lib": "^2.232.0",
@@ -87,8 +88,7 @@
   },
   "devEngines": {
     "packageManager": {
-      "name": "yarn",
-      "version": "1.22.22",
+      "name": "npm",
       "onFail": "ignore"
     }
   },
@@ -98,7 +98,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "0.2.6",
+  "version": "0.3.0",
   "jest": {
     "coverageProvider": "v8",
     "testMatch": [