@actsecurity/iam-collect 0.1.215

package/dist/esm/jobs/jobRunner.d.ts

@@ -0,0 +1,62 @@
+import { type Job, type JobResult } from './jobQueue.js';
+/**
+ * Job runner that allows running jobs as they are created.
+ * This will wait for jobs to be added to it and run them up the
+ * maximum concurrency.
+ *
+ * Results are available via `getResults()`.
+ */
+export declare class JobRunner<T = void, P = Record<string, unknown>> {
+    private concurrency;
+    private queue;
+    private results;
+    private activeJobs;
+    private waitingResolvers;
+    private workers;
+    private isAcceptingWork;
+    private workAvailablePromise;
+    private resolveWorkAvailable;
+    /**
+     * Create a new runner with the specified concurrency.
+     *
+     * @param concurrency - The maximum number of jobs to run concurrently.
+     */
+    constructor(concurrency: number);
+    private worker;
+    private waitForWorkAvailable;
+    private ensureWorkers;
+    private notifyWorkersOfNewWork;
+    private checkIfIdle;
+    /**
+     * Add a job to the queue
+     */
+    enqueue(job: Job<T, P>): void;
+    /**
+     * Add multiple jobs to the queue
+     */
+    enqueueAll(jobs: Job<T, P>[]): void;
+    /**
+     * Returns a promise that resolves when all queued work is complete
+     */
+    waitForIdle(): Promise<void>;
+    /**
+     * Get all results accumulated so far
+     */
+    getResults(): JobResult<T, P>[];
+    /**
+     * Shutdown the queue - no new jobs will be accepted, but existing jobs will complete.
+     *
+     * Returns when a promise that resolves when all jobs have been processed and
+     * are available in `getResults()`.
+     */
+    finishAllWork(): Promise<void>;
+    /**
+     * Get the current queue length
+     */
+    get queueLength(): number;
+    /**
+     * Get the number of currently active jobs
+     */
+    get activeJobCount(): number;
+}
+//# sourceMappingURL=jobRunner.d.ts.map

package/dist/esm/jobs/jobRunner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jobRunner.d.ts","sourceRoot":"","sources":["../../../src/jobs/jobRunner.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,GAAG,EAAmB,KAAK,SAAS,EAAE,MAAM,eAAe,CAAA;AAEzE;;;;;;GAMG;AAEH,qBAAa,SAAS,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAe9C,OAAO,CAAC,WAAW;IAd/B,OAAO,CAAC,KAAK,CAAkB;IAC/B,OAAO,CAAC,OAAO,CAAwB;IACvC,OAAO,CAAC,UAAU,CAAI;IACtB,OAAO,CAAC,gBAAgB,CAAqB;IAC7C,OAAO,CAAC,OAAO,CAAsB;IACrC,OAAO,CAAC,eAAe,CAAO;IAC9B,OAAO,CAAC,oBAAoB,CAA6B;IACzD,OAAO,CAAC,oBAAoB,CAA4B;IAExD;;;;OAIG;gBACiB,WAAW,EAAE,MAAM;YAEzB,MAAM;IAsCpB,OAAO,CAAC,oBAAoB;IAS5B,OAAO,CAAC,aAAa;IAQrB,OAAO,CAAC,sBAAsB;IAS9B,OAAO,CAAC,WAAW;IAQnB;;OAEG;IACH,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI;IAS7B;;OAEG;IACH,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI;IAInC;;OAEG;IACH,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC;IAW5B;;OAEG;IACH,UAAU,IAAI,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;IAI/B;;;;;OAKG;IACG,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;IASpC;;OAEG;IACH,IAAI,WAAW,IAAI,MAAM,CAExB;IAED;;OAEG;IACH,IAAI,cAAc,IAAI,MAAM,CAE3B;CACF"}

package/dist/esm/jobs/jobRunner.js

@@ -0,0 +1,153 @@
+import { log } from '@cloud-copilot/log';
+import {} from './jobQueue.js';
+/**
+ * Job runner that allows running jobs as they are created.
+ * This will wait for jobs to be added to it and run them up the
+ * maximum concurrency.
+ *
+ * Results are available via `getResults()`.
+ */
+export class JobRunner {
+    /**
+     * Create a new runner with the specified concurrency.
+     *
+     * @param concurrency - The maximum number of jobs to run concurrently.
+     */
+    constructor(concurrency) {
+        this.concurrency = concurrency;
+        this.queue = [];
+        this.results = [];
+        this.activeJobs = 0;
+        this.waitingResolvers = [];
+        this.workers = [];
+        this.isAcceptingWork = true;
+        this.workAvailablePromise = null;
+        this.resolveWorkAvailable = null;
+    }
+    async worker(workerId) {
+        while (this.isAcceptingWork || this.queue.length > 0) {
+            const job = this.queue.shift();
+            if (!job) {
+                if (!this.isAcceptingWork) {
+                    // No longer accepting work and no jobs left, exit immediately
+                    return;
+                }
+                // No work available, wait for new work to be added
+                await this.waitForWorkAvailable();
+                continue;
+            }
+            this.activeJobs++;
+            const context = { workerId };
+            const startTime = Date.now();
+            const interval = setInterval(() => {
+                log.warn(`Long-running job detected.`, { minutes: Math.floor((Date.now() - startTime) / 60000) }, { ...context, ...job.properties });
+            }, 60000);
+            try {
+                const value = await job.execute({ ...context, properties: job.properties });
+                this.results.push({ status: 'fulfilled', value, properties: job.properties });
+            }
+            catch (reason) {
+                this.results.push({ status: 'rejected', reason, properties: job.properties });
+            }
+            finally {
+                clearInterval(interval);
+                this.activeJobs--;
+                this.checkIfIdle();
+            }
+        }
+    }
+    waitForWorkAvailable() {
+        if (!this.workAvailablePromise) {
+            this.workAvailablePromise = new Promise((resolve) => {
+                this.resolveWorkAvailable = resolve;
+            });
+        }
+        return this.workAvailablePromise;
+    }
+    ensureWorkers() {
+        if (this.workers.length === 0 && this.isAcceptingWork) {
+            for (let i = 0; i < this.concurrency; i++) {
+                this.workers.push(this.worker(i + 1));
+            }
+        }
+    }
+    notifyWorkersOfNewWork() {
+        // Wake up waiting workers
+        if (this.resolveWorkAvailable) {
+            this.resolveWorkAvailable();
+            this.workAvailablePromise = null;
+            this.resolveWorkAvailable = null;
+        }
+    }
+    checkIfIdle() {
+        if (this.activeJobs === 0 && this.queue.length === 0) {
+            // Notify all waiting resolvers
+            this.waitingResolvers.forEach((resolve) => resolve());
+            this.waitingResolvers = [];
+        }
+    }
+    /**
+     * Add a job to the queue
+     */
+    enqueue(job) {
+        if (!this.isAcceptingWork) {
+            throw new Error('Cannot enqueue jobs after shutdown');
+        }
+        this.queue.push(job);
+        this.ensureWorkers();
+        this.notifyWorkersOfNewWork();
+    }
+    /**
+     * Add multiple jobs to the queue
+     */
+    enqueueAll(jobs) {
+        jobs.forEach((job) => this.enqueue(job));
+    }
+    /**
+     * Returns a promise that resolves when all queued work is complete
+     */
+    waitForIdle() {
+        // log.debug('waitForIdle called', this.activeJobs, this.queue.length)
+        return new Promise((resolve) => {
+            if (this.activeJobs === 0 && this.queue.length === 0) {
+                resolve();
+            }
+            else {
+                this.waitingResolvers.push(resolve);
+            }
+        });
+    }
+    /**
+     * Get all results accumulated so far
+     */
+    getResults() {
+        return this.results;
+    }
+    /**
+     * Shutdown the queue - no new jobs will be accepted, but existing jobs will complete.
+     *
+     * Returns when a promise that resolves when all jobs have been processed and
+     * are available in `getResults()`.
+     */
+    async finishAllWork() {
+        this.isAcceptingWork = false;
+        // Wake up any sleeping workers so they can process remaining jobs or exit
+        this.notifyWorkersOfNewWork();
+        // Check if we're already idle and notify any waiting resolvers
+        await Promise.all(this.workers);
+        this.workers = [];
+    }
+    /**
+     * Get the current queue length
+     */
+    get queueLength() {
+        return this.queue.length;
+    }
+    /**
+     * Get the number of currently active jobs
+     */
+    get activeJobCount() {
+        return this.activeJobs;
+    }
+}
+//# sourceMappingURL=jobRunner.js.map

package/dist/esm/jobs/jobRunner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jobRunner.js","sourceRoot":"","sources":["../../../src/jobs/jobRunner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAA;AACxC,OAAO,EAA6C,MAAM,eAAe,CAAA;AAEzE;;;;;;GAMG;AAEH,MAAM,OAAO,SAAS;IAUpB;;;;OAIG;IACH,YAAoB,WAAmB;QAAnB,gBAAW,GAAX,WAAW,CAAQ;QAd/B,UAAK,GAAgB,EAAE,CAAA;QACvB,YAAO,GAAsB,EAAE,CAAA;QAC/B,eAAU,GAAG,CAAC,CAAA;QACd,qBAAgB,GAAmB,EAAE,CAAA;QACrC,YAAO,GAAoB,EAAE,CAAA;QAC7B,oBAAe,GAAG,IAAI,CAAA;QACtB,yBAAoB,GAAyB,IAAI,CAAA;QACjD,yBAAoB,GAAwB,IAAI,CAAA;IAOd,CAAC;IAEnC,KAAK,CAAC,MAAM,CAAC,QAAgB;QACnC,OAAO,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAA;YAC9B,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;oBAC1B,8DAA8D;oBAC9D,OAAM;gBACR,CAAC;gBACD,mDAAmD;gBACnD,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAA;gBACjC,SAAQ;YACV,CAAC;YAED,IAAI,CAAC,UAAU,EAAE,CAAA;YACjB,MAAM,OAAO,GAAe,EAAE,QAAQ,EAAE,CAAA;YAExC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YAC5B,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE;gBAChC,GAAG,CAAC,IAAI,CACN,4BAA4B,EAC5B,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,KAAK,CAAC,EAAE,EACzD,EAAE,GAAG,OAAO,EAAE,GAAG,GAAG,CAAC,UAAU,EAAE,CAClC,CAAA;YACH,CAAC,EAAE,KAAM,CAAC,CAAA;YAEV,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAA;gBAC3E,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAA;YAC/E,CAAC;YAAC,OAAO,MAAM,EAAE,CAAC;gBAChB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAA;YAC/E,CAAC;oBAAS,CAAC;gBACT,aAAa,CAAC,QAAQ,CAAC,CAAA;gBACvB,IAAI,CAAC,UAAU,EAAE,CAAA;gBACjB,IAAI,CAAC,WAAW,EAAE,CAAA;YACpB,CAAC;QACH,CAAC;IACH,CAAC;IAEO,oBAAoB;QAC1B,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC/B,IAAI,CAAC,oBAAoB,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBACxD,IAAI,CAAC,oBAAoB,GAAG,OAAO,CAAA;YACrC,CAAC,CAAC,CAAA;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,oBAAoB,CAAA;IAClC,CAAC;IAEO,aAAa;QACnB,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACtD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC1C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;YACvC,CAAC;QACH,CAAC;IACH,CAAC;IAEO,sBAAsB;QAC5B,0BAA0B;QAC1B,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC9B,IAAI,CAAC,oBAAoB,EAAE,CAAA;YAC3B,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAA;YAChC,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAA;QAClC,CAAC;IACH,CAAC;IAEO,WAAW;QACjB,IAAI,IAAI,CAAC,UAAU,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrD,+BAA+B;YAC/B,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAA;YACrD,IAAI,CAAC,gBAAgB,GAAG,EAAE,CAAA;QAC5B,CAAC;IACH,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,GAAc;QACpB,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;QACvD,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACpB,IAAI,CAAC,aAAa,EAAE,CAAA;QACpB,IAAI,CAAC,sBAAsB,EAAE,CAAA;IAC/B,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,IAAiB;QAC1B,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAA;IAC1C,CAAC;IAED;;OAEG;IACH,WAAW;QACT,sEAAsE;QACtE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,IAAI,IAAI,CAAC,UAAU,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACrD,OAAO,EAAE,CAAA;YACX,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YACrC,CAAC;QACH,CAAC,CAAC,CAAA;IACJ,CAAC;IAED;;OAEG;IACH,UAAU;QACR,OAAO,IAAI,CAAC,OAAO,CAAA;IACrB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,aAAa;QACjB,IAAI,CAAC,eAAe,GAAG,KAAK,CAAA;QAC5B,0EAA0E;QAC1E,IAAI,CAAC,sBAAsB,EAAE,CAAA;QAC7B,+DAA+D;QAC/D,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC/B,IAAI,CAAC,OAAO,GAAG,EAAE,CAAA;IACnB,CAAC;IAED;;OAEG;IACH,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAA;IAC1B,CAAC;IAED;;OAEG;IACH,IAAI,cAAc;QAChB,OAAO,IAAI,CAAC,UAAU,CAAA;IACxB,CAAC;CACF"}

package/dist/esm/jobs/util.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Calculate the default concurrency level for downloading.
+ *
+ * @returns The default concurrency level based on the number of CPU cores.
+ */
+export declare function defaultConcurrency(): number;
+//# sourceMappingURL=util.d.ts.map

package/dist/esm/jobs/util.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"util.d.ts","sourceRoot":"","sources":["../../../src/jobs/util.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,CAG3C"}

package/dist/esm/jobs/util.js

@@ -0,0 +1,11 @@
+import { cpus } from 'os';
+/**
+ * Calculate the default concurrency level for downloading.
+ *
+ * @returns The default concurrency level based on the number of CPU cores.
+ */
+export function defaultConcurrency() {
+    const numCpus = cpus().length || 1;
+    return Math.min(50, Math.max(1, numCpus * 2));
+}
+//# sourceMappingURL=util.js.map

package/dist/esm/jobs/util.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"util.js","sourceRoot":"","sources":["../../../src/jobs/util.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,IAAI,CAAA;AAEzB;;;;GAIG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,OAAO,GAAG,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,CAAA;IAClC,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAA;AAC/C,CAAC"}

package/dist/esm/mergeSqlite/mergeSqlite.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Merge one or more SQLite databases (created with the same schema as SqliteAwsIamStore)
+ * into a single target database. If the target DB does not exist, it will be created.
+ *
+ * Does not reindex the target database.
+ *
+ * The function is safe to call repeatedly with different source sets against the
+ * same target. We use INSERT OR REPLACE so primary keys prevent duplication while
+ * allowing newer rows to overwrite older ones.
+ *
+ * @param targetPath - The path to the target SQLite database file. If this does not exist it is created.
+ * @param sourcePaths - An array of paths to the source SQLite database files.
+ */
+export declare function mergeSqliteDatabases(targetPath: string, sourcePaths: string[]): Promise<void>;
+//# sourceMappingURL=mergeSqlite.d.ts.map

package/dist/esm/mergeSqlite/mergeSqlite.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mergeSqlite.d.ts","sourceRoot":"","sources":["../../../src/mergeSqlite/mergeSqlite.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;GAYG;AACH,wBAAsB,oBAAoB,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,iBA0CnF"}

package/dist/esm/mergeSqlite/mergeSqlite.js

@@ -0,0 +1,55 @@
+import DatabaseConstructor from 'better-sqlite3';
+import { iamCollectVersion } from '../config/packageVersion.js';
+import { SqliteAwsIamStore } from '../persistence/sqlite/SqliteAwsIamStore.js';
+/**
+ * Merge one or more SQLite databases (created with the same schema as SqliteAwsIamStore)
+ * into a single target database. If the target DB does not exist, it will be created.
+ *
+ * Does not reindex the target database.
+ *
+ * The function is safe to call repeatedly with different source sets against the
+ * same target. We use INSERT OR REPLACE so primary keys prevent duplication while
+ * allowing newer rows to overwrite older ones.
+ *
+ * @param targetPath - The path to the target SQLite database file. If this does not exist it is created.
+ * @param sourcePaths - An array of paths to the source SQLite database files.
+ */
+export async function mergeSqliteDatabases(targetPath, sourcePaths) {
+    const TargetDB = new DatabaseConstructor(targetPath);
+    try {
+        const version = iamCollectVersion();
+        // Ensure the target has the required schema. This mirrors SqliteAwsIamStore.init()
+        const schema = SqliteAwsIamStore.schemaSql(version);
+        TargetDB.exec(schema);
+        const attach = TargetDB.prepare('ATTACH ? AS src');
+        const detach = TargetDB.prepare('DETACH src');
+        const tables = [
+            'resource_metadata',
+            'account_metadata',
+            'organization_metadata',
+            'organizational_unit_metadata',
+            'organization_policy_metadata',
+            'ram_resources'
+        ];
+        for (const srcPath of sourcePaths) {
+            // One transaction per source file keeps memory low and performance high
+            const tx = TargetDB.transaction(() => {
+                attach.run(srcPath);
+                for (const t of tables) {
+                    // Use OR REPLACE so repeated merges do not duplicate and newer data wins on PK
+                    TargetDB.exec(`INSERT OR REPLACE INTO main.${t} SELECT * FROM src.${t}`);
+                }
+            });
+            try {
+                tx(); // execute transaction for this source
+            }
+            finally {
+                detach.run(); // detach outside transaction to avoid lock
+            }
+        }
+    }
+    finally {
+        TargetDB.close();
+    }
+}
+//# sourceMappingURL=mergeSqlite.js.map

package/dist/esm/mergeSqlite/mergeSqlite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mergeSqlite.js","sourceRoot":"","sources":["../../../src/mergeSqlite/mergeSqlite.ts"],"names":[],"mappings":"AAAA,OAAO,mBAAmB,MAAM,gBAAgB,CAAA;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,4CAA4C,CAAA;AAE9E;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,UAAkB,EAAE,WAAqB;IAClF,MAAM,QAAQ,GAAG,IAAI,mBAAmB,CAAC,UAAU,CAAC,CAAA;IAEpD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAA;QACnC,mFAAmF;QACnF,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;QAEnD,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAErB,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAA;QAClD,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,CAAA;QAE7C,MAAM,MAAM,GAAG;YACb,mBAAmB;YACnB,kBAAkB;YAClB,uBAAuB;YACvB,8BAA8B;YAC9B,8BAA8B;YAC9B,eAAe;SACP,CAAA;QAEV,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;YAClC,wEAAwE;YACxE,MAAM,EAAE,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,EAAE;gBACnC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;gBAEnB,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;oBACvB,+EAA+E;oBAC/E,QAAQ,CAAC,IAAI,CAAC,+BAA+B,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAA;gBAC1E,CAAC;YACH,CAAC,CAAC,CAAA;YAEF,IAAI,CAAC;gBACH,EAAE,EAAE,CAAA,CAAC,sCAAsC;YAC7C,CAAC;oBAAS,CAAC;gBACT,MAAM,CAAC,GAAG,EAAE,CAAA,CAAC,2CAA2C;YAC1D,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,QAAQ,CAAC,KAAK,EAAE,CAAA;IAClB,CAAC;AACH,CAAC"}

package/dist/esm/package.json

@@ -0,0 +1,3 @@
+{
+    "type": "module"
+}

package/dist/esm/persistence/AwsIamStore.d.ts

@@ -0,0 +1,303 @@
+/**
+ * Controls how storage clients serialize non-string JSON data before persistence.
+ */
+export interface StorageClientOptions {
+    /**
+     * The JSON serialization mode to use for non-string values.
+     *
+     * `consistent` uses deterministic serialization for stable stored output.
+     * `passthrough` uses standard JSON.stringify formatting without deterministic reordering.
+     *
+     * Defaults to `consistent`.
+     */
+    jsonSerialization?: 'consistent' | 'passthrough';
+}
+/**
+ * The parts of the a resource type that can be used for categories.
+ */
+export interface ResourceTypeParts {
+    /**
+     * The AWS partition (e.g., "aws", "aws-cn", "aws-gov").
+     */
+    partition?: string;
+    /**
+     * Optional AWS account ID. This can be used to specify a particular account.
+     */
+    account?: string;
+    /**
+     * The AWS service (e.g., "iam", "s3", "ec2").
+     */
+    service: string;
+    /**
+     * For regional services, this should be specified.
+     */
+    region?: string;
+    /**
+     * The type of resource being referenced (e.g., "roles", "users", "buckets").
+     *
+     * Optional for for legacy resource types like s3 buckets or sqs queues where the resource type is not explicitly defined in the ARN.
+     */
+    resourceType?: string;
+    /**
+     * Specific metadata to filter the resources by.
+     */
+    metadata?: Record<string, string>;
+}
+export type OrganizationPolicyType = 'scps' | 'rcps' | 's3-policies';
+/**
+ * An interface for persisting AWS resource metadata.
+ * Implementations can be backed by S3 or the local file system.
+ */
+export interface AwsIamStore {
+    /**
+     * Saves metadata for a given AWS resource.
+     *
+     * If the data is any form of empty content (undefined, null, empty string, empty object, or empty array)
+     * then the data will not be persisted and the existing metadata for that key will be deleted instead.
+     *
+     * @param accountId - The AWS account ID where the resource exists.
+     * @param arn - The ARN of the resource.
+     * @param metadataType - A key representing the metadata type (e.g., "trust-policy", "inline-policies").
+     * @param data - The metadata content to save (as a string or Buffer).
+     */
+    saveResourceMetadata(accountId: string, arn: string, metadataType: string, data: string | any): Promise<void>;
+    /**
+     * Retrieves a list of metadata types for a given AWS resource.
+     *
+     * @param accountId - The AWS account ID where the resource exists.
+     * @param arn - The ARN of the resource.
+     * @returns An array of metadata types (e.g., ["trust-policy", "inline-policies"]).
+     */
+    listResourceMetadata(accountId: string, arn: string): Promise<string[]>;
+    /**
+     * Retrieves metadata for a given AWS resource.
+     *
+     * @param accountId - The AWS account ID where the resource exists.
+     * @param arn - The ARN of the resource.
+     * @param metadataType - The key representing the metadata type.
+     * @returns The content of the metadata, as a string.
+     */
+    getResourceMetadata<T, D extends T>(accountId: string, arn: string, metadataType: string, defaultValue?: D): Promise<D extends undefined ? T | undefined : T>;
+    /**
+     * Deletes metadata for a given AWS resource.
+     *
+     * @param accountId - The AWS account ID where the resource exists.
+     * @param arn - The ARN of the resource.
+     * @param metadataType - The metadata type to delete.
+     */
+    deleteResourceMetadata(accountId: string, arn: string, metadataType: string): Promise<void>;
+    /**
+     * Deletes all data for a given AWS resource
+     *
+     * @param accountId - The AWS account ID where the resource exists.
+     * @param arn - The ARN of the resource.
+     */
+    deleteResource(accountId: string, arn: string): Promise<void>;
+    /**
+     * Lists resources based on partition, account, service, region, and resource type.
+     *
+     * @param accountId - The AWS account ID to list resources for.
+     * @param options - the resource type parts to list resources for.
+     * @returns A list of resource identifiers (e.g., role names or ARNs).
+     */
+    listResources(accountId: string, options: ResourceTypeParts): Promise<string[]>;
+    /**
+     * Find all metadata for resource that meet a given set of criteria.
+     */
+    findResourceMetadata<T>(accountId: string, options: ResourceTypeParts): Promise<T[]>;
+    /**
+     * Synchronizes the list of stored resources with the provided list.
+     * This method can be used to remove resources that no longer exist in the account.
+     *
+     * @param accountId - The AWS account ID to list resources for.
+     * @param options - the resource type parts to sync in advance
+     * @param desiredResources - The list of resource arns that should exist.
+     */
+    syncResourceList(accountId: string, options: ResourceTypeParts, desiredResources: string[]): Promise<void>;
+    /**
+     * Delete metadata for an AWS Account
+     *
+     * @param accountId the AWS account ID
+     * @param metadataType the type of metadata to delete (e.g., "metadata")
+     */
+    deleteAccountMetadata(accountId: string, metadataType: string): Promise<void>;
+    /**
+     * Save metadata for an AWS Account
+     *
+     * @param accountId The AWS account ID.
+     * @param metadataType The type of metadata to save (e.g., "metadata").
+     * @param data - The metadata content to save as an object.
+     */
+    saveAccountMetadata(accountId: string, metadataType: string, data: any): Promise<void>;
+    /**
+     * Get metadata for an AWS Account
+     *
+     * @param accountId the AWS account ID
+     * @param metadataType the type of metadata to retrieve (e.g., "metadata")
+     * @param defaultValue the default value to return if the metadata is not found
+     */
+    getAccountMetadata<T, D extends T>(accountId: string, metadataType: string, defaultValue?: D): Promise<D extends undefined ? T | undefined : T>;
+    /**
+     * Get metadata for an AWS Organization
+     *
+     * @param organizationId the AWS organization ID
+     * @param metadataType the type of metadata to retrieve (e.g., "metadata")
+     * @param defaultValue the default value to return if the metadata is not found
+     */
+    getOrganizationMetadata<T, D extends T>(organizationId: string, metadataType: string, defaultValue?: D): Promise<D extends undefined ? T | undefined : T>;
+    /**
+     * Save metadata for an AWS Organization
+     *
+     * @param organizationId - The AWS organization ID.
+     * @param metadataType - The type of metadata to save (e.g., "metadata").
+     * @param data - The metadata content to save an an object.
+     */
+    saveOrganizationMetadata(organizationId: string, metadataType: string, data: any): Promise<void>;
+    /**
+     * Delete metadata for an AWS Organization
+     *
+     * @param organizationId - The AWS organization ID.
+     * @param metadataType - The type of metadata to delete (e.g., "metadata").
+     */
+    deleteOrganizationMetadata(organizationId: string, metadataType: string): Promise<void>;
+    /**
+     * List the Organizational Units (OUs) that have been saved for a given organization.
+     *
+     * @param organizationId - The AWS organization ID.
+     */
+    listOrganizationalUnits(organizationId: string): Promise<string[]>;
+    /**
+     * Save metadata for an Organizational Unit (OU) within an AWS Organization.
+     *
+     * @param organizationId - The AWS organization ID.
+     * @param ouId - The AWS ID of the Organizational Unit.
+     * @param metadataType - The type of metadata to save (e.g., "metadata").
+     * @param data - The metadata content to save as an object.
+     */
+    saveOrganizationalUnitMetadata(organizationId: string, ouId: string, metadataType: string, data: any): Promise<void>;
+    /**
+     * Delete metadata for an Organizational Unit (OU) within an AWS Organization.
+     *
+     * @param organizationId - The AWS organization ID.
+     * @param ouId - The AWS ID of the Organizational Unit.
+     * @param metadataType - The type of metadata to delete (e.g., "metadata").
+     */
+    deleteOrganizationalUnitMetadata(organizationId: string, ouId: string, metadataType: string): Promise<void>;
+    /**
+     * Get metadata for an Organizational Unit (OU) within an AWS Organization.
+     *
+     * @param organizationId - The AWS organization ID.
+     * @param ouId - The AWS ID of the Organizational Unit.
+     * @param metadataType - The type of metadata to retrieve (e.g., "metadata").
+     * @param defaultValue - The default value to return if the metadata is not found.
+     */
+    getOrganizationalUnitMetadata<T, D extends T>(organizationId: string, ouId: string, metadataType: string, defaultValue?: D): Promise<D extends undefined ? T | undefined : T>;
+    /**
+     * Delete an Organizational Unit (OU) from an AWS Organization.
+     *
+     * @param organizationId - The AWS organization ID.
+     * @param ouId - The AWS ID of the Organizational Unit.
+     */
+    deleteOrganizationalUnit(organizationId: string, ouId: string): Promise<void>;
+    /**
+     * Delete metadata for an Organization Policy.
+     *
+     * @param organizationId the AWS organization ID
+     * @param policyType the type of policy (e.g., "scps", "rcps")
+     * @param policyId the ID of the policy to delete metadata for
+     * @param metadataType the type of metadata to delete (e.g., "metadata")
+     */
+    deleteOrganizationPolicyMetadata(organizationId: string, policyType: OrganizationPolicyType, policyId: string, metadataType: string): Promise<void>;
+    /**
+     *
+     * @param organizationId the AWS organization ID
+     * @param policyType the type of policy (e.g., "scps", "rcps")
+     * @param policyId the ID of the policy to save metadata for
+     * @param metadataType the type of metadata to save (e.g., "metadata")
+     * @param data the content to save
+     */
+    saveOrganizationPolicyMetadata(organizationId: string, policyType: OrganizationPolicyType, policyId: string, metadataType: string, data: any): Promise<void>;
+    /**
+     * Get metadata for an Organization Policy.
+     *
+     * @param organizationId the AWS organization ID
+     * @param policyType the type of policy (e.g., "scps", "rcps")
+     * @param policyId the ID of the policy to retrieve metadata for
+     * @param metadataType the type of metadata to retrieve (e.g., "metadata")
+     * @param defaultValue the default value to return if the metadata is not found
+     */
+    getOrganizationPolicyMetadata<T, D extends T>(organizationId: string, policyType: OrganizationPolicyType, policyId: string, metadataType: string, defaultValue?: D): Promise<D extends undefined ? T | undefined : T>;
+    /**
+     * Delete an Organization Policy.
+     *
+     * @param organizationId the AWS organization ID
+     * @param policyType the type of policy (e.g., "scps", "rcps")
+     * @param policyId the ID of the policy to delete
+     */
+    deleteOrganizationPolicy(organizationId: string, policyType: OrganizationPolicyType, policyId: string): Promise<void>;
+    /**
+     * List the Organization Policies for a given organization and type
+     *
+     * @param organizationId the AWS organization ID
+     * @param policyType the type of policy (e.g., "scps", "rcps")
+     * @returns An array of policy IDs
+     */
+    listOrganizationPolicies(organizationId: string, policyType: OrganizationPolicyType): Promise<string[]>;
+    /**
+     * Synchronizes RAM resource information for a given account and region.
+     * Any records not matching the provided ARNs will be deleted.
+     *
+     * @param accountId - The AWS account ID.
+     * @param region - The AWS region, can be undefined or empty for global resources.
+     * @param arns - The list of resource ARNs that should exist on disk.
+     */
+    syncRamResources(accountId: string, region: string | undefined, arns: string[]): Promise<void>;
+    /**
+     * Saves or overwrites a RAM resource information for the specified ARN.
+     *
+     * @param accountId - The AWS account ID.
+     * @param arn - The ARN of the resource.
+     * @param data - The policy content to save (object or JSON string).
+     */
+    saveRamResource(accountId: string, arn: string, data: any): Promise<void>;
+    /**
+     * Retrieves a stored RAM resource for the given ARN.
+     *
+     * @param accountId - The AWS account ID.
+     * @param arn - The ARN of the resource.
+     * @param defaultValue - The default value to return if the resource is not found.
+     * @returns The resource data if found, otherwise the default value if provided, otherwise undefined
+     */
+    getRamResource<T, D extends T>(accountId: string, arn: string, defaultValue?: D): Promise<D extends undefined ? T | undefined : T>;
+    /**
+     * List the account IDs that have directories in the store
+     */
+    listAccountIds(): Promise<string[]>;
+    /**
+     * Get an index for a given index name.
+     *
+     * @param indexName the name of the index to retrieve
+     * @param defaultValue the default value to return if the index is not found
+     * @return the index data and lock ID
+     */
+    getIndex<T>(indexName: string, defaultValue: T): Promise<{
+        data: T;
+        lockId: string;
+    }>;
+    /**
+     * Save an index with an optimistic locking check
+     *
+     * @param indexName the name of the index to save
+     * @param data the index data to save
+     * @param lockId the lock ID to use for optimistic locking
+     * @return true if the index was saved successfully, false if there was an optimistic locking failure
+     */
+    saveIndex<T>(indexName: string, data: T, lockId: string): Promise<boolean>;
+    /**
+     * Execute a batch of write operations together.
+     *
+     * @param fn - Async function containing write operations to batch
+     */
+    writeBatch(fn: () => Promise<void>): Promise<void>;
+}
+//# sourceMappingURL=AwsIamStore.d.ts.map

package/dist/esm/persistence/AwsIamStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsIamStore.d.ts","sourceRoot":"","sources":["../../../src/persistence/AwsIamStore.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;;;;;OAOG;IACH,iBAAiB,CAAC,EAAE,YAAY,GAAG,aAAa,CAAA;CACjD;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAElB;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAEhB;;OAEG;IACH,OAAO,EAAE,MAAM,CAAA;IAEf;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IAEf;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IAErB;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAClC;AAED,MAAM,MAAM,sBAAsB,GAAG,MAAM,GAAG,MAAM,GAAG,aAAa,CAAA;AAEpE;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;;;;;;;OAUG;IACH,oBAAoB,CAClB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,MAAM,GAAG,GAAG,GACjB,OAAO,CAAC,IAAI,CAAC,CAAA;IAEhB;;;;;;OAMG;IACH,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAEvE;;;;;;;OAOG;IACH,mBAAmB,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,EAChC,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,YAAY,EAAE,MAAM,EACpB,YAAY,CAAC,EAAE,CAAC,GACf,OAAO,CAAC,CAAC,SAAS,SAAS,GAAG,CAAC,GAAG,SAAS,GAAG,CAAC,CAAC,CAAA;IAEnD;;;;;;OAMG;IACH,sBAAsB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAE3F;;;;;OAKG;IACH,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAE7D;;;;;;OAMG;IACH,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAE/E;;OAEG;IACH,oBAAoB,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAAA;IAEpF;;;;;;;OAOG;IACH,gBAAgB,CACd,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,iBAAiB,EAC1B,gBAAgB,EAAE,MAAM,EAAE,GACzB,OAAO,CAAC,IAAI,CAAC,CAAA;IAEhB;;;;;OAKG;IACH,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAE7E;;;;;;OAMG;IACH,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEtF;;;;;;OAMG;IACH,kBAAkB,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,EAC/B,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,EACpB,YAAY,CAAC,EAAE,CAAC,GACf,OAAO,CAAC,CAAC,SAAS,SAAS,GAAG,CAAC,GAAG,SAAS,GAAG,CAAC,CAAC,CAAA;IAEnD;;;;;;OAMG;IACH,uBAAuB,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,EACpC,cAAc,EAAE,MAAM,EACtB,YAAY,EAAE,MAAM,EACpB,YAAY,CAAC,EAAE,CAAC,GACf,OAAO,CAAC,CAAC,SAAS,SAAS,GAAG,CAAC,GAAG,SAAS,GAAG,CAAC,CAAC,CAAA;IAEnD;;;;;;OAMG;IACH,wBAAwB,CAAC,cAAc,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEhG;;;;;OAKG;IACH,0BAA0B,CAAC,cAAc,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEvF;;;;OAIG;IACH,uBAAuB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAElE;;;;;;;OAOG;IACH,8BAA8B,CAC5B,cAAc,EAAE,MAAM,EACtB,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,GAAG,GACR,OAAO,CAAC,IAAI,CAAC,CAAA;IAEhB;;;;;;OAMG;IACH,gCAAgC,CAC9B,cAAc,EAAE,MAAM,EACtB,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC,CAAA;IAEhB;;;;;;;OAOG;IACH,6BAA6B,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,EAC1C,cAAc,EAAE,MAAM,EACtB,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,EACpB,YAAY,CAAC,EAAE,CAAC,GACf,OAAO,CAAC,CAAC,SAAS,SAAS,GAAG,CAAC,GAAG,SAAS,GAAG,CAAC,CAAC,CAAA;IAEnD;;;;;OAKG;IACH,wBAAwB,CAAC,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAE7E;;;;;;;OAOG;IACH,gCAAgC,CAC9B,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,sBAAsB,EAClC,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC,CAAA;IAEhB;;;;;;;OAOG;IACH,8BAA8B,CAC5B,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,sBAAsB,EAClC,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,GAAG,GACR,OAAO,CAAC,IAAI,CAAC,CAAA;IAEhB;;;;;;;;OAQG;IACH,6BAA6B,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,EAC1C,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,sBAAsB,EAClC,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,EACpB,YAAY,CAAC,EAAE,CAAC,GACf,OAAO,CAAC,CAAC,SAAS,SAAS,GAAG,CAAC,GAAG,SAAS,GAAG,CAAC,CAAC,CAAA;IAEnD;;;;;;OAMG;IACH,wBAAwB,CACtB,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,sBAAsB,EAClC,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC,CAAA;IAEhB;;;;;;OAMG;IACH,wBAAwB,CACtB,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,sBAAsB,GACjC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAEpB;;;;;;;OAOG;IACH,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAE9F;;;;;;OAMG;IACH,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEzE;;;;;;;OAOG;IACH,cAAc,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,EAC3B,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,YAAY,CAAC,EAAE,CAAC,GACf,OAAO,CAAC,CAAC,SAAS,SAAS,GAAG,CAAC,GAAG,SAAS,GAAG,CAAC,CAAC,CAAA;IAEnD;;OAEG;IACH,cAAc,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAEnC;;;;;;OAMG;IACH,QAAQ,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,CAAC,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAErF;;;;;;;OAOG;IACH,SAAS,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAE1E;;;;OAIG;IACH,UAAU,CAAC,EAAE,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACnD"}

package/dist/esm/persistence/AwsIamStore.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=AwsIamStore.js.map

package/dist/esm/persistence/AwsIamStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsIamStore.js","sourceRoot":"","sources":["../../../src/persistence/AwsIamStore.ts"],"names":[],"mappings":""}