@cloud-copilot/iam-collect 0.1.15 → 0.1.17

package/dist/cjs/syncs/organizations/organizations.js

@@ -0,0 +1,347 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OrganizationSync = void 0;
+exports.getOrganizationDetails = getOrganizationDetails;
+exports.getOrganizationRoot = getOrganizationRoot;
+exports.getTagsForOu = getTagsForOu;
+exports.getTagsForAccount = getTagsForAccount;
+exports.getChildOrgUnits = getChildOrgUnits;
+exports.getAccountsForParent = getAccountsForParent;
+const client_organizations_1 = require("@aws-sdk/client-organizations");
+const ClientPool_js_1 = require("../../aws/ClientPool.js");
+const client_tools_js_1 = require("../../utils/client-tools.js");
+const typedSync_js_1 = require("../typedSync.js");
+exports.OrganizationSync = {
+    awsService: 'organizations',
+    name: 'organization',
+    global: true,
+    execute: async function (accountId, region, credentials, storage, endpoint, syncOptions) {
+        const organizationClient = ClientPool_js_1.AwsClientPool.defaultInstance.client(client_organizations_1.OrganizationsClient, credentials, region, endpoint);
+        const organization = await getOrganizationDetails(organizationClient);
+        if (!organization) {
+            return;
+        }
+        const organizationId = organization.Id;
+        const root = await getOrganizationRoot(organizationClient);
+        if (!root) {
+            return;
+        }
+        const features = root.PolicyTypes?.reduce((acc, type) => {
+            acc[type.Type] = type.Status === client_organizations_1.PolicyTypeStatus.ENABLED;
+            return acc;
+        }, {}) || {};
+        const scpsEnabled = !!features[client_organizations_1.PolicyType.SERVICE_CONTROL_POLICY];
+        const rcpsEnabled = !!features[client_organizations_1.PolicyType.RESOURCE_CONTROL_POLICY];
+        const allAccounts = {};
+        const allOus = {};
+        const ouDetails = {};
+        allOus[root.Id] = {
+            parent: undefined,
+            scps: await getPoliciesForTarget(organizationClient, root.Id, client_organizations_1.PolicyType.SERVICE_CONTROL_POLICY, scpsEnabled),
+            rcps: await getPoliciesForTarget(organizationClient, root.Id, client_organizations_1.PolicyType.RESOURCE_CONTROL_POLICY, rcpsEnabled)
+        };
+        ouDetails[root.Id] = await getOuDetails(organizationClient, root);
+        const structure = {
+            [root.Id]: {
+                children: {},
+                accounts: []
+            }
+        };
+        // const children = await getChildOrgUnits(organizationClient, root.Id!)
+        const parents = [structure];
+        let parent = parents.pop();
+        while (parent) {
+            for (const key in parent) {
+                // Get structure information
+                const children = await getChildOrgUnits(organizationClient, key);
+                for (const child of children) {
+                    ouDetails[child.Id] = await getOuDetails(organizationClient, child);
+                    const childId = child.Id;
+                    allOus[childId] = {
+                        parent: key,
+                        scps: await getPoliciesForTarget(organizationClient, root.Id, client_organizations_1.PolicyType.SERVICE_CONTROL_POLICY, scpsEnabled),
+                        rcps: await getPoliciesForTarget(organizationClient, root.Id, client_organizations_1.PolicyType.RESOURCE_CONTROL_POLICY, rcpsEnabled)
+                    };
+                    parent[key].children ||= {};
+                    parent[key].children[childId] = {
+                        children: undefined,
+                        accounts: undefined
+                    };
+                }
+                const accounts = await getAccountsForParent(organizationClient, key);
+                if (accounts.length > 0) {
+                    parent[key].accounts = [];
+                }
+                for (const account of accounts) {
+                    let accountTags = await getTagsForAccount(organizationClient, account.Id);
+                    if (Object.keys(accountTags).length === 0) {
+                        accountTags = undefined;
+                    }
+                    allAccounts[account.Id] = {
+                        ou: key,
+                        scps: await getPoliciesForTarget(organizationClient, account.Id, client_organizations_1.PolicyType.SERVICE_CONTROL_POLICY, scpsEnabled),
+                        rcps: await getPoliciesForTarget(organizationClient, account.Id, client_organizations_1.PolicyType.RESOURCE_CONTROL_POLICY, rcpsEnabled),
+                        tags: accountTags
+                    };
+                    parent[key].accounts.push(account.Arn);
+                }
+                // parent[key].accounts = accounts.map((a) => a.Arn!)
+                if (parent[key].children) {
+                    parents.push(parent[key].children);
+                }
+            }
+            parent = parents.pop();
+        }
+        storage.saveOrganizationMetadata(organizationId, 'structure', structure);
+        storage.saveOrganizationMetadata(organizationId, 'metadata', {
+            id: organizationId,
+            arn: organization.Arn,
+            rootOu: root.Id,
+            rootAccountArn: organization.MasterAccountArn,
+            rootAccountId: organization.MasterAccountId,
+            features
+        });
+        storage.saveOrganizationMetadata(organizationId, 'accounts', allAccounts);
+        storage.saveOrganizationMetadata(organizationId, 'ous', allOus);
+        // Sync OUs
+        const persistedOus = await storage.listOrganizationalUnits(organizationId);
+        const newOus = new Set(Object.keys(ouDetails));
+        const deletedOus = persistedOus.filter((ou) => !newOus.has(ou));
+        for (const ouToDelete of deletedOus) {
+            await storage.deleteOrganizationalUnit(organizationId, ouToDelete);
+        }
+        for (const ouId of Object.keys(ouDetails)) {
+            const ou = ouDetails[ouId];
+            await storage.saveOrganizationalUnitMetadata(organizationId, ouId, 'metadata', ou.metadata);
+            await storage.saveOrganizationalUnitMetadata(organizationId, ouId, 'tags', ou.tags);
+        }
+        // Sync policies
+        await syncPolicies(organizationId, organizationClient, storage, client_organizations_1.PolicyType.SERVICE_CONTROL_POLICY, 'scps', scpsEnabled);
+        await syncPolicies(organizationId, organizationClient, storage, client_organizations_1.PolicyType.RESOURCE_CONTROL_POLICY, 'rcps', rcpsEnabled);
+        // Sync organization resource policy
+        await syncOrganizationResourcePolicy(organizationClient, storage, organizationId);
+    }
+};
+/**
+ * Get the details of an organization or an account.
+ *
+ * @param client The OrganizationsClient to use
+ * @returns the details of the organization the account belongs to or undefined if the account is not part of an organization or does not have permission.
+ */
+async function getOrganizationDetails(client) {
+    const command = new client_organizations_1.DescribeOrganizationCommand();
+    try {
+        const response = await (0, client_tools_js_1.runAndCatch404)(() => client.send(command));
+        if (!response) {
+            return undefined;
+        }
+        return response.Organization;
+    }
+    catch (e) {
+        if (e.name === 'AWSOrganizationsNotInUseException') {
+            return undefined;
+        }
+    }
+    return undefined;
+}
+/**
+ * Get the root Organizational Unit for an organization
+ *
+ * @param client The OrganizationsClient to use
+ * @returns the root Organizational Unit for the organization if it exists
+ */
+async function getOrganizationRoot(client) {
+    return (0, client_tools_js_1.runAndCatchAccessDenied)(async () => {
+        const roots = await (0, typedSync_js_1.paginateResource)(client, client_organizations_1.ListRootsCommand, 'Roots', {
+            inputKey: 'NextToken',
+            outputKey: 'NextToken'
+        }, {});
+        return roots.at(0);
+    });
+}
+/**
+ * Get the tags for an Organizational Unit
+ *
+ * @param client The OrganizationsClient to use
+ * @param ouId The AWS id of the Organizational Unit to get the tags for
+ * @returns The tags for the Organizational Unit
+ */
+async function getTagsForOu(client, ouId) {
+    return getTags(client, ouId);
+}
+/**
+ * Get the tags for an account
+ * @param client The OrganizationsClient to use
+ * @param accountId The AWS id of the account to get the tags for
+ * @returns The tags for the account
+ */
+async function getTagsForAccount(client, accountId) {
+    return getTags(client, accountId);
+}
+/**
+ * Get the tags for a resource in AWS Organizations
+ *
+ * @param client The OrganizationsClient to use
+ * @param resourceId The AWS id of the resource to get the tags for
+ * @returns The tags for the resource
+ */
+async function getTags(client, resourceId) {
+    const command = new client_organizations_1.ListTagsForResourceCommand({ ResourceId: resourceId });
+    const response = await (0, client_tools_js_1.runAndCatch404)(() => client.send(command));
+    if (!response) {
+        return {};
+    }
+    return (response.Tags || [])?.reduce((acc, tag) => {
+        acc[tag.Key] = tag.Value;
+        return acc;
+    }, {});
+}
+/**
+ * Get the organizational units for a parent organizational unit
+ *
+ * @param client The OrganizationsClient to use
+ * @param parentId The AWS id of the parent organizational unit
+ * @returns The organizational units directly under the parent
+ */
+async function getChildOrgUnits(client, parentId) {
+    return await (0, typedSync_js_1.paginateResource)(client, client_organizations_1.ListOrganizationalUnitsForParentCommand, 'OrganizationalUnits', { inputKey: 'NextToken', outputKey: 'NextToken' }, { ParentId: parentId });
+}
+/**
+ * Get the accounts for a parent organizational unit
+ *
+ * @param client The OrganizationsClient to use
+ * @param parentId The AWS id of the parent organizational unit
+ * @returns The accounts directly under the parent
+ */
+async function getAccountsForParent(client, parentId) {
+    const accounts = await (0, typedSync_js_1.paginateResource)(client, client_organizations_1.ListAccountsForParentCommand, 'Accounts', {
+        inputKey: 'NextToken',
+        outputKey: 'NextToken'
+    }, { ParentId: parentId });
+    return accounts;
+}
+/**
+ * Get the details of an Organizational Unit (OU).
+ *
+ * @param organizationClient the OrganizationsClient to use
+ * @param ou the Organizational Unit to get the details for
+ * @returns an object containing the OU's tags and metadata
+ */
+async function getOuDetails(organizationClient, ou) {
+    return {
+        tags: await getTagsForOu(organizationClient, ou.Id),
+        metadata: {
+            arn: ou.Arn,
+            name: ou.Name
+        }
+    };
+}
+/**
+ * Get the policies for a target
+ *
+ * @param client the OrganizationsClient to use
+ * @param targetId the id of the target to get the policies for
+ * @param policyType the type of policy to get
+ * @param enabled whether the policy type is enabled
+ * @returns the Arns of the policies for the target
+ */
+async function getPoliciesForTarget(client, targetId, policyType, enabled) {
+    if (!enabled) {
+        return [];
+    }
+    const policies = await (0, typedSync_js_1.paginateResource)(client, client_organizations_1.ListPoliciesForTargetCommand, 'Policies', { inputKey: 'NextToken', outputKey: 'NextToken' }, {
+        TargetId: targetId,
+        Filter: policyType
+    });
+    return policies.map((policy) => policy.Arn);
+}
+/**
+ * Sync the policies for an organization and a specific policy type.
+ *
+ * @param organizationId the id of the organization to sync policies for
+ * @param organizationClient the OrganizationsClient to use
+ * @param storage the AwsIamStore to use for persistence
+ * @param policyType the type of policy to sync (e.g., SERVICE_CONTROL_POLICY, RESOURCE_CONTROL_POLICY)
+ * @param fileType the type of policy file to sync to storage (e.g., 'scps', 'rcps')
+ * @param enabled whether the policy type is enabled in the organization
+ */
+async function syncPolicies(organizationId, organizationClient, storage, policyType, fileType, enabled) {
+    const existingPolicies = await storage.listOrganizationPolicies(organizationId, fileType);
+    if (!enabled) {
+        for (const policyId of existingPolicies) {
+            await storage.deleteOrganizationPolicy(organizationId, fileType, policyId);
+        }
+        return;
+    }
+    const policies = await (0, typedSync_js_1.paginateResource)(organizationClient, client_organizations_1.ListPoliciesCommand, 'Policies', { inputKey: 'NextToken', outputKey: 'NextToken' }, {
+        Filter: policyType
+    });
+    const newPolicyIds = new Set(policies.map((p) => p.Id));
+    const policiesToDelete = existingPolicies.filter((id) => !newPolicyIds.has(id));
+    for (const policyToDelete of policiesToDelete) {
+        await storage.deleteOrganizationPolicy(organizationId, fileType, policyToDelete);
+    }
+    for (const policy of policies) {
+        const metadata = {
+            arn: policy.Arn,
+            name: policy.Name,
+            description: policy.Description,
+            awsManaged: policy.AwsManaged
+        };
+        await storage.saveOrganizationPolicyMetadata(organizationId, fileType, policy.Id, 'metadata', metadata);
+        const content = await getPolicyContent(organizationClient, policy.Id);
+        await storage.saveOrganizationPolicyMetadata(organizationId, fileType, policy.Id, 'policy', content);
+        const tags = await getTags(organizationClient, policy.Id);
+        await storage.saveOrganizationPolicyMetadata(organizationId, fileType, policy.Id, 'tags', tags);
+    }
+}
+/**
+ * Get the content of a policy by its ID.
+ *
+ * @param organizationClient the OrganizationsClient to use
+ * @param policyId the ID of the policy to get the content for
+ * @returns the content of the policy as a parsed JSON object, or undefined if the policy does not exist or has no content
+ */
+async function getPolicyContent(organizationClient, policyId) {
+    const command = new client_organizations_1.DescribePolicyCommand({ PolicyId: policyId });
+    const response = await (0, client_tools_js_1.runAndCatch404)(() => organizationClient.send(command));
+    if (response?.Policy?.Content) {
+        return JSON.parse(response.Policy.Content);
+    }
+    return undefined;
+}
+/**
+ * Sync the organization resource policy.
+ *
+ * @param organizationClient the OrganizationsClient to use
+ * @param storage the AwsIamStore to use for persistence
+ * @param organizationId the id of the organization to sync the resource policy for
+ */
+async function syncOrganizationResourcePolicy(organizationClient, storage, organizationId) {
+    const policy = await getOrganizationResourcePolicy(organizationClient, organizationId);
+    await storage.saveOrganizationMetadata(organizationId, 'policy', policy);
+}
+/**
+ * Get the resource policy for an organization.
+ *
+ * @param organizationClient the OrganizationsClient to use
+ * @param organizationId the id of the organization to get the resource policy for
+ * @returns the resource policy as a parsed JSON object, or undefined if the policy does not exist or has no content
+ */
+async function getOrganizationResourcePolicy(organizationClient, organizationId) {
+    const command = new client_organizations_1.DescribeResourcePolicyCommand({ PolicyId: organizationId });
+    try {
+        const response = await organizationClient.send(command);
+        if (response?.ResourcePolicy?.Content) {
+            return JSON.parse(response.ResourcePolicy.Content);
+        }
+        return undefined;
+    }
+    catch (error) {
+        if (error.name === 'ResourcePolicyNotFoundException') {
+            return undefined;
+        }
+        throw error;
+    }
+}
+//# sourceMappingURL=organizations.js.map

package/dist/cjs/syncs/organizations/organizations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizations.js","sourceRoot":"","sources":["../../../../src/syncs/organizations/organizations.ts"],"names":[],"mappings":";;;AAgQA,wDAiBC;AAQD,kDAcC;AASD,oCAKC;AAQD,8CAKC;AAmCD,4CAWC;AASD,oDAeC;AAxYD,wEAiBsC;AAEtC,2DAAuD;AAEvD,iEAAqF;AAErF,kDAAkD;AA8BrC,QAAA,gBAAgB,GAAS;IACpC,UAAU,EAAE,eAAe;IAC3B,IAAI,EAAE,cAAc;IACpB,MAAM,EAAE,IAAI;IACZ,OAAO,EAAE,KAAK,WACZ,SAAiB,EACjB,MAAc,EACd,WAA8C,EAC9C,OAAoB,EACpB,QAA4B,EAC5B,WAAwB;QAExB,MAAM,kBAAkB,GAAG,6BAAa,CAAC,eAAe,CAAC,MAAM,CAC7D,0CAAmB,EACnB,WAAW,EACX,MAAM,EACN,QAAQ,CACT,CAAA;QAED,MAAM,YAAY,GAAG,MAAM,sBAAsB,CAAC,kBAAkB,CAAC,CAAA;QACrE,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAM;QACR,CAAC;QACD,MAAM,cAAc,GAAG,YAAY,CAAC,EAAG,CAAA;QAEvC,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC,kBAAkB,CAAC,CAAA;QAC1D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAM;QACR,CAAC;QAED,MAAM,QAAQ,GACZ,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE;YACrC,GAAG,CAAC,IAAI,CAAC,IAAK,CAAC,GAAG,IAAI,CAAC,MAAM,KAAK,uCAAgB,CAAC,OAAO,CAAA;YAC1D,OAAO,GAAG,CAAA;QACZ,CAAC,EAAE,EAAc,CAAC,IAAK,EAAe,CAAA;QAExC,MAAM,WAAW,GAAG,CAAC,CAAC,QAAQ,CAAC,iCAAU,CAAC,sBAAsB,CAAC,CAAA;QACjE,MAAM,WAAW,GAAG,CAAC,CAAC,QAAQ,CAAC,iCAAU,CAAC,uBAAuB,CAAC,CAAA;QAElE,MAAM,WAAW,GAAsB,EAAE,CAAA;QACzC,MAAM,MAAM,GAOR,EAAE,CAAA;QAEN,MAAM,SAAS,GAA8B,EAAE,CAAA;QAE/C,MAAM,CAAC,IAAI,CAAC,EAAG,CAAC,GAAG;YACjB,MAAM,EAAE,SAAS;YACjB,IAAI,EAAE,MAAM,oBAAoB,CAC9B,kBAAkB,EAClB,IAAI,CAAC,EAAG,EACR,iCAAU,CAAC,sBAAsB,EACjC,WAAW,CACZ;YACD,IAAI,EAAE,MAAM,oBAAoB,CAC9B,kBAAkB,EAClB,IAAI,CAAC,EAAG,EACR,iCAAU,CAAC,uBAAuB,EAClC,WAAW,CACZ;SACF,CAAA;QACD,SAAS,CAAC,IAAI,CAAC,EAAG,CAAC,GAAG,MAAM,YAAY,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAA;QAElE,MAAM,SAAS,GAAiB;YAC9B,CAAC,IAAI,CAAC,EAAG,CAAC,EAAE;gBACV,QAAQ,EAAE,EAAE;gBACZ,QAAQ,EAAE,EAAE;aACb;SACF,CAAA;QAED,wEAAwE;QACxE,MAAM,OAAO,GAAmB,CAAC,SAAS,CAAC,CAAA;QAE3C,IAAI,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAA;QAC1B,OAAO,MAAM,EAAE,CAAC;YACd,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;gBACzB,4BAA4B;gBAC5B,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAA;gBAChE,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;oBAC7B,SAAS,CAAC,KAAK,CAAC,EAAG,CAAC,GAAG,MAAM,YAAY,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAA;oBAEpE,MAAM,OAAO,GAAG,KAAK,CAAC,EAAG,CAAA;oBACzB,MAAM,CAAC,OAAO,CAAC,GAAG;wBAChB,MAAM,EAAE,GAAG;wBACX,IAAI,EAAE,MAAM,oBAAoB,CAC9B,kBAAkB,EAClB,IAAI,CAAC,EAAG,EACR,iCAAU,CAAC,sBAAsB,EACjC,WAAW,CACZ;wBACD,IAAI,EAAE,MAAM,oBAAoB,CAC9B,kBAAkB,EAClB,IAAI,CAAC,EAAG,EACR,iCAAU,CAAC,uBAAuB,EAClC,WAAW,CACZ;qBACF,CAAA;oBACD,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,KAAK,EAAE,CAAA;oBAC3B,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG;wBAC9B,QAAQ,EAAE,SAAS;wBACnB,QAAQ,EAAE,SAAS;qBACpB,CAAA;gBACH,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAA;gBACpE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACxB,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,GAAG,EAAE,CAAA;gBAC3B,CAAC;gBACD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;oBAC/B,IAAI,WAAW,GAAuC,MAAM,iBAAiB,CAC3E,kBAAkB,EAClB,OAAO,CAAC,EAAG,CACZ,CAAA;oBACD,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;wBAC1C,WAAW,GAAG,SAAS,CAAA;oBACzB,CAAC;oBACD,WAAW,CAAC,OAAO,CAAC,EAAG,CAAC,GAAG;wBACzB,EAAE,EAAE,GAAG;wBACP,IAAI,EAAE,MAAM,oBAAoB,CAC9B,kBAAkB,EAClB,OAAO,CAAC,EAAG,EACX,iCAAU,CAAC,sBAAsB,EACjC,WAAW,CACZ;wBACD,IAAI,EAAE,MAAM,oBAAoB,CAC9B,kBAAkB,EAClB,OAAO,CAAC,EAAG,EACX,iCAAU,CAAC,uBAAuB,EAClC,WAAW,CACZ;wBACD,IAAI,EAAE,WAAW;qBAClB,CAAA;oBACD,MAAM,CAAC,GAAG,CAAC,CAAC,QAAS,CAAC,IAAI,CAAC,OAAO,CAAC,GAAI,CAAC,CAAA;gBAC1C,CAAC;gBAED,qDAAqD;gBACrD,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;oBACzB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAA;gBACpC,CAAC;YACH,CAAC;YAED,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAA;QACxB,CAAC;QAED,OAAO,CAAC,wBAAwB,CAAC,cAAc,EAAE,WAAW,EAAE,SAAS,CAAC,CAAA;QACxE,OAAO,CAAC,wBAAwB,CAAC,cAAc,EAAE,UAAU,EAAE;YAC3D,EAAE,EAAE,cAAc;YAClB,GAAG,EAAE,YAAY,CAAC,GAAG;YACrB,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,cAAc,EAAE,YAAY,CAAC,gBAAgB;YAC7C,aAAa,EAAE,YAAY,CAAC,eAAe;YAC3C,QAAQ;SACT,CAAC,CAAA;QACF,OAAO,CAAC,wBAAwB,CAAC,cAAc,EAAE,UAAU,EAAE,WAAW,CAAC,CAAA;QACzE,OAAO,CAAC,wBAAwB,CAAC,cAAc,EAAE,KAAK,EAAE,MAAM,CAAC,CAAA;QAE/D,WAAW;QACX,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,uBAAuB,CAAC,cAAc,CAAC,CAAA;QAC1E,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAA;QAC9C,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;QAC/D,KAAK,MAAM,UAAU,IAAI,UAAU,EAAE,CAAC;YACpC,MAAM,OAAO,CAAC,wBAAwB,CAAC,cAAc,EAAE,UAAU,CAAC,CAAA;QACpE,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1C,MAAM,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;YAC1B,MAAM,OAAO,CAAC,8BAA8B,CAAC,cAAc,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAA;YAC3F,MAAM,OAAO,CAAC,8BAA8B,CAAC,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,CAAA;QACrF,CAAC;QAED,gBAAgB;QAChB,MAAM,YAAY,CAChB,cAAc,EACd,kBAAkB,EAClB,OAAO,EACP,iCAAU,CAAC,sBAAsB,EACjC,MAAM,EACN,WAAW,CACZ,CAAA;QAED,MAAM,YAAY,CAChB,cAAc,EACd,kBAAkB,EAClB,OAAO,EACP,iCAAU,CAAC,uBAAuB,EAClC,MAAM,EACN,WAAW,CACZ,CAAA;QAED,oCAAoC;QACpC,MAAM,8BAA8B,CAAC,kBAAkB,EAAE,OAAO,EAAE,cAAc,CAAC,CAAA;IACnF,CAAC;CACF,CAAA;AAED;;;;;GAKG;AACI,KAAK,UAAU,sBAAsB,CAC1C,MAA2B;IAE3B,MAAM,OAAO,GAAG,IAAI,kDAA2B,EAAE,CAAA;IACjD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,IAAA,gCAAc,EAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;QACjE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,SAAS,CAAA;QAClB,CAAC;QAED,OAAO,QAAQ,CAAC,YAAY,CAAA;IAC9B,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,IAAI,CAAC,CAAC,IAAI,KAAK,mCAAmC,EAAE,CAAC;YACnD,OAAO,SAAS,CAAA;QAClB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,mBAAmB,CAAC,MAA2B;IACnE,OAAO,IAAA,yCAAuB,EAAC,KAAK,IAAI,EAAE;QACxC,MAAM,KAAK,GAAG,MAAM,IAAA,+BAAgB,EAClC,MAAM,EACN,uCAAgB,EAChB,OAAO,EACP;YACE,QAAQ,EAAE,WAAW;YACrB,SAAS,EAAE,WAAW;SACvB,EACD,EAAE,CACH,CAAA;QACD,OAAO,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IACpB,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,YAAY,CAChC,MAA2B,EAC3B,IAAY;IAEZ,OAAO,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;AAC9B,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,iBAAiB,CACrC,MAA2B,EAC3B,SAAiB;IAEjB,OAAO,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;AACnC,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,OAAO,CACpB,MAA2B,EAC3B,UAAkB;IAElB,MAAM,OAAO,GAAG,IAAI,iDAA0B,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAA;IAC1E,MAAM,QAAQ,GAAG,MAAM,IAAA,gCAAc,EAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;IACjE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,EAAE,CAAA;IACX,CAAC;IAED,OAAO,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,MAAM,CAClC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACX,GAAG,CAAC,GAAG,CAAC,GAAI,CAAC,GAAG,GAAG,CAAC,KAAM,CAAA;QAC1B,OAAO,GAAG,CAAA;IACZ,CAAC,EACD,EAA4B,CAC7B,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,gBAAgB,CACpC,MAA2B,EAC3B,QAAgB;IAEhB,OAAO,MAAM,IAAA,+BAAgB,EAC3B,MAAM,EACN,8DAAuC,EACvC,qBAAqB,EACrB,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,EACjD,EAAE,QAAQ,EAAE,QAAQ,EAAE,CACvB,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,oBAAoB,CACxC,MAA2B,EAC3B,QAAgB;IAEhB,MAAM,QAAQ,GAAG,MAAM,IAAA,+BAAgB,EACrC,MAAM,EACN,mDAA4B,EAC5B,UAAU,EACV;QACE,QAAQ,EAAE,WAAW;QACrB,SAAS,EAAE,WAAW;KACvB,EACD,EAAE,QAAQ,EAAE,QAAQ,EAAE,CACvB,CAAA;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,YAAY,CACzB,kBAAuC,EACvC,EAAsB;IAEtB,OAAO;QACL,IAAI,EAAE,MAAM,YAAY,CAAC,kBAAkB,EAAE,EAAE,CAAC,EAAG,CAAC;QACpD,QAAQ,EAAE;YACR,GAAG,EAAE,EAAE,CAAC,GAAI;YACZ,IAAI,EAAE,EAAE,CAAC,IAAK;SACf;KACF,CAAA;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,oBAAoB,CACjC,MAA2B,EAC3B,QAAgB,EAChB,UAAsB,EACtB,OAAgB;IAEhB,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,CAAA;IACX,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,IAAA,+BAAgB,EACrC,MAAM,EACN,mDAA4B,EAC5B,UAAU,EACV,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,EACjD;QACE,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,UAAU;KACnB,CACF,CAAA;IAED,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAI,CAAC,CAAA;AAC9C,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,YAAY,CACzB,cAAsB,EACtB,kBAAuC,EACvC,OAAoB,EACpB,UAAsB,EACtB,QAAgC,EAChC,OAAgB;IAEhB,MAAM,gBAAgB,GAAG,MAAM,OAAO,CAAC,wBAAwB,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAA;IACzF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,KAAK,MAAM,QAAQ,IAAI,gBAAgB,EAAE,CAAC;YACxC,MAAM,OAAO,CAAC,wBAAwB,CAAC,cAAc,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAA;QAC5E,CAAC;QACD,OAAM;IACR,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,IAAA,+BAAgB,EACrC,kBAAkB,EAClB,0CAAmB,EACnB,UAAU,EACV,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,EACjD;QACE,MAAM,EAAE,UAAU;KACnB,CACF,CAAA;IAED,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAG,CAAC,CAAC,CAAA;IACxD,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;IAC/E,KAAK,MAAM,cAAc,IAAI,gBAAgB,EAAE,CAAC;QAC9C,MAAM,OAAO,CAAC,wBAAwB,CAAC,cAAc,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAA;IAClF,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG;YACf,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAA;QACD,MAAM,OAAO,CAAC,8BAA8B,CAC1C,cAAc,EACd,QAAQ,EACR,MAAM,CAAC,EAAG,EACV,UAAU,EACV,QAAQ,CACT,CAAA;QACD,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,kBAAkB,EAAE,MAAM,CAAC,EAAG,CAAC,CAAA;QACtE,MAAM,OAAO,CAAC,8BAA8B,CAC1C,cAAc,EACd,QAAQ,EACR,MAAM,CAAC,EAAG,EACV,QAAQ,EACR,OAAO,CACR,CAAA;QAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,kBAAkB,EAAE,MAAM,CAAC,EAAG,CAAC,CAAA;QAC1D,MAAM,OAAO,CAAC,8BAA8B,CAAC,cAAc,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;IAClG,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,gBAAgB,CAC7B,kBAAuC,EACvC,QAAgB;IAEhB,MAAM,OAAO,GAAG,IAAI,4CAAqB,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAA;IACjE,MAAM,QAAQ,GAAG,MAAM,IAAA,gCAAc,EAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;IAC7E,IAAI,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAC5C,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,8BAA8B,CAC3C,kBAAuC,EACvC,OAAoB,EACpB,cAAsB;IAEtB,MAAM,MAAM,GAAG,MAAM,6BAA6B,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAA;IACtF,MAAM,OAAO,CAAC,wBAAwB,CAAC,cAAc,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;AAC1E,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,6BAA6B,CAC1C,kBAAuC,EACvC,cAAsB;IAEtB,MAAM,OAAO,GAAG,IAAI,oDAA6B,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAA;IAC/E,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACvD,IAAI,QAAQ,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,OAAO,CAAC,CAAA;QACpD,CAAC;QACD,OAAO,SAAS,CAAA;IAClB,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,IAAI,KAAK,CAAC,IAAI,KAAK,iCAAiC,EAAE,CAAC;YACrD,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC"}

package/dist/cjs/syncs/syncMap.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"syncMap.d.ts","sourceRoot":"","sources":["../../../src/syncs/syncMap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAK3C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAsBhC;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,EAAE,CAMpE;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,EAAE,CAMtE"}
+{"version":3,"file":"syncMap.d.ts","sourceRoot":"","sources":["../../../src/syncs/syncMap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAM3C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AA4BhC;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,EAAE,CAMpE;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,EAAE,CAMtE"}

package/dist/cjs/syncs/syncMap.js

@@ -5,8 +5,15 @@ exports.getRegionalSyncsForService = getRegionalSyncsForService;
 const authorizationDetails_js_1 = require("./iam/authorizationDetails.js");
 const key_js_1 = require("./kms/key.js");
 const lambda_js_1 = require("./lambda/lambda.js");
+const organizations_js_1 = require("./organizations/organizations.js");
 const buckets_js_1 = require("./s3/buckets.js");
-const allSyncs = [authorizationDetails_js_1.AuthorizationDetailsSync, key_js_1.KeySync, lambda_js_1.LambdaSync, buckets_js_1.S3GeneralPurposeBucketSync];
+const allSyncs = [
+    authorizationDetails_js_1.AuthorizationDetailsSync,
+    key_js_1.KeySync,
+    lambda_js_1.LambdaSync,
+    organizations_js_1.OrganizationSync,
+    buckets_js_1.S3GeneralPurposeBucketSync
+];
 const syncMap = new Map();
 for (const sync of allSyncs) {
     const service = sync.awsService;

package/dist/cjs/syncs/syncMap.js.map

@@ -1 +1 @@
-{"version":3,"file":"syncMap.js","sourceRoot":"","sources":["../../../src/syncs/syncMap.ts"],"names":[],"mappings":";;AAiCA,4DAMC;AAQD,gEAMC;AApDD,2EAAwE;AACxE,yCAAsC;AACtC,kDAA+C;AAC/C,gDAA4D;AAG5D,MAAM,QAAQ,GAAG,CAAC,kDAAwB,EAAE,gBAAO,EAAE,sBAAU,EAAE,uCAA0B,CAAC,CAAA;AAE5F,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoD,CAAA;AAE3E,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAA;IAC/B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE;YACnB,QAAQ,EAAE,EAAE;YACZ,MAAM,EAAE,EAAE;SACX,CAAC,CAAA;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAE,CAAA;IACnC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACzB,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC3B,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,wBAAwB,CAAC,OAAmB;IAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAClC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAA;AACrB,CAAC;AAED;;;;;GAKG;AACH,SAAgB,0BAA0B,CAAC,OAAmB;IAC5D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAClC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,KAAK,CAAC,QAAQ,CAAA;AACvB,CAAC"}
+{"version":3,"file":"syncMap.js","sourceRoot":"","sources":["../../../src/syncs/syncMap.ts"],"names":[],"mappings":";;AAwCA,4DAMC;AAQD,gEAMC;AA3DD,2EAAwE;AACxE,yCAAsC;AACtC,kDAA+C;AAC/C,uEAAmE;AACnE,gDAA4D;AAG5D,MAAM,QAAQ,GAAG;IACf,kDAAwB;IACxB,gBAAO;IACP,sBAAU;IACV,mCAAgB;IAChB,uCAA0B;CAC3B,CAAA;AAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoD,CAAA;AAE3E,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAA;IAC/B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE;YACnB,QAAQ,EAAE,EAAE;YACZ,MAAM,EAAE,EAAE;SACX,CAAC,CAAA;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAE,CAAA;IACnC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACzB,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC3B,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,wBAAwB,CAAC,OAAmB;IAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAClC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAA;AACrB,CAAC;AAED;;;;;GAKG;AACH,SAAgB,0BAA0B,CAAC,OAAmB;IAC5D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAClC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,KAAK,CAAC,QAAQ,CAAA;AACvB,CAAC"}

package/dist/esm/persistence/AwsIamStore.d.ts

@@ -25,6 +25,7 @@ export interface ResourceTypeParts {
      */
     resourceType?: string;
 }
+export type OrganizationPolicyType = 'scps' | 'rcps';
 /**
  * An interface for persisting AWS resource metadata.
  * Implementations can be backed by S3 or the local file system.
@@ -91,5 +92,103 @@ export interface AwsIamStore {
      * @param desiredResources - The list of resource arns that should exist.
      */
     syncResourceList(accountId: string, options: ResourceTypeParts, desiredResources: string[]): Promise<void>;
+    /**
+     * Save metadata for an AWS Organization
+     *
+     * @param organizationId - The AWS organization ID.
+     * @param metadataType - The type of metadata to save (e.g., "metadata").
+     * @param data - The metadata content to save an an object.
+     */
+    saveOrganizationMetadata(organizationId: string, metadataType: string, data: any): Promise<void>;
+    /**
+     * Delete metadata for an AWS Organization
+     *
+     * @param organizationId - The AWS organization ID.
+     * @param metadataType - The type of metadata to delete (e.g., "metadata").
+     */
+    deleteOrganizationMetadata(organizationId: string, metadataType: string): Promise<void>;
+    /**
+     * List the Organizational Units (OUs) that have been saved for a given organization.
+     *
+     * @param organizationId - The AWS organization ID.
+     */
+    listOrganizationalUnits(organizationId: string): Promise<string[]>;
+    /**
+     * Save metadata for an Organizational Unit (OU) within an AWS Organization.
+     *
+     * @param organizationId - The AWS organization ID.
+     * @param ouId - The AWS ID of the Organizational Unit.
+     * @param metadataType - The type of metadata to save (e.g., "metadata").
+     * @param data - The metadata content to save as an object.
+     */
+    saveOrganizationalUnitMetadata(organizationId: string, ouId: string, metadataType: string, data: any): Promise<void>;
+    /**
+     * Delete metadata for an Organizational Unit (OU) within an AWS Organization.
+     *
+     * @param organizationId - The AWS organization ID.
+     * @param ouId - The AWS ID of the Organizational Unit.
+     * @param metadataType - The type of metadata to delete (e.g., "metadata").
+     */
+    deleteOrganizationalUnitMetadata(organizationId: string, ouId: string, metadataType: string): Promise<void>;
+    /**
+     * Get metadata for an Organizational Unit (OU) within an AWS Organization.
+     *
+     * @param organizationId - The AWS organization ID.
+     * @param ouId - The AWS ID of the Organizational Unit.
+     * @param metadataType - The type of metadata to retrieve (e.g., "metadata").
+     * @param defaultValue - The default value to return if the metadata is not found.
+     */
+    getOrganizationalUnitMetadata<T, D extends T>(organizationId: string, ouId: string, metadataType: string, defaultValue?: D): Promise<D extends undefined ? T | undefined : T>;
+    /**
+     * Delete an Organizational Unit (OU) from an AWS Organization.
+     *
+     * @param organizationId - The AWS organization ID.
+     * @param ouId - The AWS ID of the Organizational Unit.
+     */
+    deleteOrganizationalUnit(organizationId: string, ouId: string): Promise<void>;
+    /**
+     * Delete metadata for an Organization Policy.
+     *
+     * @param organizationId the AWS organization ID
+     * @param policyType the type of policy (e.g., "scps", "rcps")
+     * @param policyId the ID of the policy to delete metadata for
+     * @param metadataType the type of metadata to delete (e.g., "metadata")
+     */
+    deleteOrganizationPolicyMetadata(organizationId: string, policyType: OrganizationPolicyType, policyId: string, metadataType: string): Promise<void>;
+    /**
+     *
+     * @param organizationId the AWS organization ID
+     * @param policyType the type of policy (e.g., "scps", "rcps")
+     * @param policyId the ID of the policy to save metadata for
+     * @param metadataType the type of metadata to save (e.g., "metadata")
+     * @param data the content to save
+     */
+    saveOrganizationPolicyMetadata(organizationId: string, policyType: OrganizationPolicyType, policyId: string, metadataType: string, data: any): Promise<void>;
+    /**
+     * Get metadata for an Organization Policy.
+     *
+     * @param organizationId the AWS organization ID
+     * @param policyType the type of policy (e.g., "scps", "rcps")
+     * @param policyId the ID of the policy to retrieve metadata for
+     * @param metadataType the type of metadata to retrieve (e.g., "metadata")
+     * @param defaultValue the default value to return if the metadata is not found
+     */
+    getOrganizationPolicyMetadata<T, D extends T>(organizationId: string, policyType: OrganizationPolicyType, policyId: string, metadataType: string, defaultValue?: D): Promise<D extends undefined ? T | undefined : T>;
+    /**
+     * Delete an Organization Policy.
+     *
+     * @param organizationId the AWS organization ID
+     * @param policyType the type of policy (e.g., "scps", "rcps")
+     * @param policyId the ID of the policy to delete
+     */
+    deleteOrganizationPolicy(organizationId: string, policyType: OrganizationPolicyType, policyId: string): Promise<void>;
+    /**
+     * List the Organization Policies for a given organization and type
+     *
+     * @param organizationId the AWS organization ID
+     * @param policyType the type of policy (e.g., "scps", "rcps")
+     * @returns An array of policy IDs
+     */
+    listOrganizationPolicies(organizationId: string, policyType: OrganizationPolicyType): Promise<string[]>;
 }
 //# sourceMappingURL=AwsIamStore.d.ts.map

package/dist/esm/persistence/AwsIamStore.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AwsIamStore.d.ts","sourceRoot":"","sources":["../../../src/persistence/AwsIamStore.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAElB;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAEhB;;OAEG;IACH,OAAO,EAAE,MAAM,CAAA;IAEf;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IAEf;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;;;;;;;OAUG;IACH,oBAAoB,CAClB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,MAAM,GAAG,GAAG,GACjB,OAAO,CAAC,IAAI,CAAC,CAAA;IAEhB;;;;;;OAMG;IACH,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAEvE;;;;;;;OAOG;IACH,mBAAmB,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,EAChC,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,YAAY,EAAE,MAAM,EACpB,YAAY,CAAC,EAAE,CAAC,GACf,OAAO,CAAC,CAAC,SAAS,SAAS,GAAG,CAAC,GAAG,SAAS,GAAG,CAAC,CAAC,CAAA;IAEnD;;;;;;OAMG;IACH,sBAAsB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAE3F;;;;;OAKG;IACH,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAE7D;;;;;;OAMG;IACH,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAE/E;;;;;;;OAOG;IACH,gBAAgB,CACd,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,iBAAiB,EAC1B,gBAAgB,EAAE,MAAM,EAAE,GACzB,OAAO,CAAC,IAAI,CAAC,CAAA;CACjB"}
+{"version":3,"file":"AwsIamStore.d.ts","sourceRoot":"","sources":["../../../src/persistence/AwsIamStore.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAElB;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAEhB;;OAEG;IACH,OAAO,EAAE,MAAM,CAAA;IAEf;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IAEf;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,MAAM,sBAAsB,GAAG,MAAM,GAAG,MAAM,CAAA;AAEpD;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;;;;;;;OAUG;IACH,oBAAoB,CAClB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,MAAM,GAAG,GAAG,GACjB,OAAO,CAAC,IAAI,CAAC,CAAA;IAEhB;;;;;;OAMG;IACH,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAEvE;;;;;;;OAOG;IACH,mBAAmB,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,EAChC,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,YAAY,EAAE,MAAM,EACpB,YAAY,CAAC,EAAE,CAAC,GACf,OAAO,CAAC,CAAC,SAAS,SAAS,GAAG,CAAC,GAAG,SAAS,GAAG,CAAC,CAAC,CAAA;IAEnD;;;;;;OAMG;IACH,sBAAsB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAE3F;;;;;OAKG;IACH,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAE7D;;;;;;OAMG;IACH,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAE/E;;;;;;;OAOG;IACH,gBAAgB,CACd,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,iBAAiB,EAC1B,gBAAgB,EAAE,MAAM,EAAE,GACzB,OAAO,CAAC,IAAI,CAAC,CAAA;IAEhB;;;;;;OAMG;IACH,wBAAwB,CAAC,cAAc,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEhG;;;;;OAKG;IACH,0BAA0B,CAAC,cAAc,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEvF;;;;OAIG;IACH,uBAAuB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAElE;;;;;;;OAOG;IACH,8BAA8B,CAC5B,cAAc,EAAE,MAAM,EACtB,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,GAAG,GACR,OAAO,CAAC,IAAI,CAAC,CAAA;IAEhB;;;;;;OAMG;IACH,gCAAgC,CAC9B,cAAc,EAAE,MAAM,EACtB,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC,CAAA;IAEhB;;;;;;;OAOG;IACH,6BAA6B,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,EAC1C,cAAc,EAAE,MAAM,EACtB,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,EACpB,YAAY,CAAC,EAAE,CAAC,GACf,OAAO,CAAC,CAAC,SAAS,SAAS,GAAG,CAAC,GAAG,SAAS,GAAG,CAAC,CAAC,CAAA;IAEnD;;;;;OAKG;IACH,wBAAwB,CAAC,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAE7E;;;;;;;OAOG;IACH,gCAAgC,CAC9B,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,sBAAsB,EAClC,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC,CAAA;IAEhB;;;;;;;OAOG;IACH,8BAA8B,CAC5B,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,sBAAsB,EAClC,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,GAAG,GACR,OAAO,CAAC,IAAI,CAAC,CAAA;IAEhB;;;;;;;;OAQG;IACH,6BAA6B,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,EAC1C,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,sBAAsB,EAClC,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,EACpB,YAAY,CAAC,EAAE,CAAC,GACf,OAAO,CAAC,CAAC,SAAS,SAAS,GAAG,CAAC,GAAG,SAAS,GAAG,CAAC,CAAC,CAAA;IAEnD;;;;;;OAMG;IACH,wBAAwB,CACtB,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,sBAAsB,EAClC,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC,CAAA;IAEhB;;;;;;OAMG;IACH,wBAAwB,CACtB,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,sBAAsB,GACjC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;CACrB"}

package/dist/esm/persistence/file/FileSystemAwsIamStore.d.ts

@@ -1,10 +1,18 @@
-import { AwsIamStore, ResourceTypeParts } from '../AwsIamStore.js';
+import { AwsIamStore, OrganizationPolicyType, ResourceTypeParts } from '../AwsIamStore.js';
 import { FileSystemAdapter } from './FileSystemAdapter.js';
 export declare class FileSystemAwsIamStore implements AwsIamStore {
     private readonly baseFolder;
     private readonly partition;
     private fsAdapter;
     constructor(baseFolder: string, partition: string, fsAdapter?: FileSystemAdapter);
+    private organizationPath;
+    private organizationMetadataPath;
+    private organizationalUnitsPath;
+    private organizationalUnitPath;
+    private organizationPoliciesPath;
+    private organizationPolicyPath;
+    private organizationPolicyMetadataPath;
+    private organizationalUnitMetadataPath;
     private accountPath;
     private buildResourcePath;
     private buildMetadataPath;
@@ -15,5 +23,39 @@ export declare class FileSystemAwsIamStore implements AwsIamStore {
     deleteResource(accountId: string, arn: string): Promise<void>;
     listResources(accountId: string, options: ResourceTypeParts): Promise<string[]>;
     syncResourceList(accountId: string, options: ResourceTypeParts, desiredResources: string[]): Promise<void>;
+    saveOrganizationMetadata(organizationId: string, metadataType: string, data: any): Promise<void>;
+    deleteOrganizationMetadata(organizationId: string, metadataType: string): Promise<void>;
+    listOrganizationalUnits(organizationId: string): Promise<string[]>;
+    deleteOrganizationalUnitMetadata(organizationId: string, ouId: string, metadataType: string): Promise<void>;
+    saveOrganizationalUnitMetadata(organizationId: string, ouId: string, metadataType: string, data: any): Promise<void>;
+    getOrganizationalUnitMetadata<T, D extends T>(organizationId: string, ouId: string, metadataType: string, defaultValue?: D): Promise<D extends undefined ? T | undefined : T>;
+    deleteOrganizationalUnit(organizationId: string, ouId: string): Promise<void>;
+    deleteOrganizationPolicyMetadata(organizationId: string, policyType: OrganizationPolicyType, policyId: string, metadataType: string): Promise<void>;
+    saveOrganizationPolicyMetadata(organizationId: string, policyType: OrganizationPolicyType, policyId: string, metadataType: string, data: any): Promise<void>;
+    getOrganizationPolicyMetadata<T, D extends T>(organizationId: string, policyType: OrganizationPolicyType, policyId: string, metadataType: string, defaultValue?: D): Promise<D extends undefined ? T | undefined : T>;
+    deleteOrganizationPolicy(organizationId: string, policyType: OrganizationPolicyType, policyId: string): Promise<void>;
+    listOrganizationPolicies(organizationId: string, policyType: OrganizationPolicyType): Promise<string[]>;
+    /**
+     * Checks if a given content value is empty.
+     *
+     * @param content The content to check.
+     * @returns true if the content is empty, false otherwise.
+     */
+    private isEmptyContent;
+    /**
+     * Read the content of a file or return a default value if the file does not exist.
+     *
+     * @param filePath the path to the file
+     * @param defaultValue the default value to return if the file does not exist
+     * @returns the content of the file or the default value
+     */
+    private contentOrDefault;
+    /**
+     * Either saves the provided data to a file or deletes the file if the data is empty.
+     *
+     * @param filePath the path to the file
+     * @param data the data to save in the file
+     */
+    private saveOrDeleteFile;
 }
 //# sourceMappingURL=FileSystemAwsIamStore.d.ts.map

package/dist/esm/persistence/file/FileSystemAwsIamStore.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"FileSystemAwsIamStore.d.ts","sourceRoot":"","sources":["../../../../src/persistence/file/FileSystemAwsIamStore.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AAElE,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAE1D,qBAAa,qBAAsB,YAAW,WAAW;IAIrD,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,SAAS;IAJ5B,OAAO,CAAC,SAAS,CAAmB;gBAGjB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,EAClC,SAAS,CAAC,EAAE,iBAAiB;IAS/B,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,iBAAiB;IAIzB,OAAO,CAAC,iBAAiB;IAKnB,oBAAoB,CACxB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,MAAM,GAAG,GAAG,GACjB,OAAO,CAAC,IAAI,CAAC;IAsBV,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAcvE,mBAAmB,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,EACtC,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,YAAY,EAAE,MAAM,EACpB,YAAY,CAAC,EAAE,CAAC,GACf,OAAO,CAAC,CAAC,SAAS,SAAS,GAAG,CAAC,GAAG,SAAS,GAAG,CAAC,CAAC;IAS7C,sBAAsB,CAC1B,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC;IAKV,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK7D,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAS/E,gBAAgB,CACpB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,iBAAiB,EAC1B,gBAAgB,EAAE,MAAM,EAAE,GACzB,OAAO,CAAC,IAAI,CAAC;CA4BjB"}
+{"version":3,"file":"FileSystemAwsIamStore.d.ts","sourceRoot":"","sources":["../../../../src/persistence/file/FileSystemAwsIamStore.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AAE1F,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAE1D,qBAAa,qBAAsB,YAAW,WAAW;IAIrD,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,SAAS;IAJ5B,OAAO,CAAC,SAAS,CAAmB;gBAGjB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,EAClC,SAAS,CAAC,EAAE,iBAAiB;IAM/B,OAAO,CAAC,gBAAgB;IAIxB,OAAO,CAAC,wBAAwB;IAIhC,OAAO,CAAC,uBAAuB;IAI/B,OAAO,CAAC,sBAAsB;IAI9B,OAAO,CAAC,wBAAwB;IAOhC,OAAO,CAAC,sBAAsB;IAQ9B,OAAO,CAAC,8BAA8B;IAYtC,OAAO,CAAC,8BAA8B;IAWtC,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,iBAAiB;IAIzB,OAAO,CAAC,iBAAiB;IAKnB,oBAAoB,CACxB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,MAAM,GAAG,GAAG,GACjB,OAAO,CAAC,IAAI,CAAC;IAKV,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAYvE,mBAAmB,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,EACtC,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,YAAY,EAAE,MAAM,EACpB,YAAY,CAAC,EAAE,CAAC,GACf,OAAO,CAAC,CAAC,SAAS,SAAS,GAAG,CAAC,GAAG,SAAS,GAAG,CAAC,CAAC;IAK7C,sBAAsB,CAC1B,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC;IAKV,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK7D,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAK/E,gBAAgB,CACpB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,iBAAiB,EAC1B,gBAAgB,EAAE,MAAM,EAAE,GACzB,OAAO,CAAC,IAAI,CAAC;IAsBV,wBAAwB,CAC5B,cAAc,EAAE,MAAM,EACtB,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,GAAG,GACR,OAAO,CAAC,IAAI,CAAC;IAKV,0BAA0B,CAAC,cAAc,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKvF,uBAAuB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAKlE,gCAAgC,CACpC,cAAc,EAAE,MAAM,EACtB,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC;IAKV,8BAA8B,CAClC,cAAc,EAAE,MAAM,EACtB,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,GAAG,GACR,OAAO,CAAC,IAAI,CAAC;IAKV,6BAA6B,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,EAChD,cAAc,EAAE,MAAM,EACtB,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,EACpB,YAAY,CAAC,EAAE,CAAC,GACf,OAAO,CAAC,CAAC,SAAS,SAAS,GAAG,CAAC,GAAG,SAAS,GAAG,CAAC,CAAC;IAK7C,wBAAwB,CAAC,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK7E,gCAAgC,CACpC,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,sBAAsB,EAClC,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC;IAUV,8BAA8B,CAClC,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,sBAAsB,EAClC,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,GAAG,GACR,OAAO,CAAC,IAAI,CAAC;IAUV,6BAA6B,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,EAChD,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,sBAAsB,EAClC,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,EACpB,YAAY,CAAC,EAAE,CAAC,GACf,OAAO,CAAC,CAAC,SAAS,SAAS,GAAG,CAAC,GAAG,SAAS,GAAG,CAAC,CAAC;IAU7C,wBAAwB,CAC5B,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,sBAAsB,EAClC,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC;IAKV,wBAAwB,CAC5B,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,sBAAsB,GACjC,OAAO,CAAC,MAAM,EAAE,CAAC;IAKpB;;;;;OAKG;IACH,OAAO,CAAC,cAAc;IAYtB;;;;;;OAMG;YACW,gBAAgB;IAW9B;;;;;OAKG;YACW,gBAAgB;CAY/B"}