@ledgerhq/revault-sdk 0.24.1 → 0.25.1

package/lib/bake.cjs

@@ -1,1079 +1,1273 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; } function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
-
-
-var _chunkLH4QQXUHcjs = require('./chunk-LH4QQXUH.cjs');
-
-
-var _chunk2WGM7EWAcjs = require('./chunk-2WGM7EWA.cjs');
-
-// src/bake/index.ts
-var _invariant = require('invariant'); var _invariant2 = _interopRequireDefault(_invariant);
-
-// src/bake/bake-pledge.ts
-
-
-// src/bake/utils.ts
-
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_chunk = require("./chunk-CKQMccvm.cjs");
+const require_utils = require("./utils-DbSFXp4c.cjs");
+const require_crypto = require("./crypto-BDBF_rfw.cjs");
+let invariant = require("invariant");
+invariant = require_chunk.__toESM(invariant);
+let lodash = require("lodash");
+lodash = require_chunk.__toESM(lodash);
+let ts_pattern = require("ts-pattern");
+let zod = require("zod");
+zod = require_chunk.__toESM(zod);
+//#region src/bake/utils.ts
 function createBakeLogHelpers(logger) {
-  return {
-    logTitle(title) {
-      logger.info(`:: ${title} ::`);
-    },
-    logStep(msg) {
-      logger.info(`=> ${msg}`);
-    },
-    logSubStep(msg) {
-      logger.info(`   -> ${msg}`);
-    }
-  };
+	return {
+		logTitle(title) {
+			logger.info(`:: ${title} ::`);
+		},
+		logStep(msg) {
+			logger.info(`=> ${msg}`);
+		},
+		logSubStep(msg) {
+			logger.info(`   -> ${msg}`);
+		}
+	};
 }
-var IS_REQUEST_STATE_END_STATE = {
-  // end states:
-  ABORTED: true,
-  BLOCKED: true,
-  EXECUTED: true,
-  EXPIRED: true,
-  FAILED: true,
-  STUCK: true,
-  // not end states:
-  EXECUTING: false,
-  INITIAL: false,
-  PENDING_APPROVAL: false
+const IS_REQUEST_STATE_END_STATE = {
+	ABORTED: true,
+	BLOCKED: true,
+	EXECUTED: true,
+	EXPIRED: true,
+	FAILED: true,
+	STUCK: true,
+	EXECUTING: false,
+	INITIAL: false,
+	PENDING_APPROVAL: false
 };
-var isEndState = (state) => IS_REQUEST_STATE_END_STATE[state];
-var DEFAULT_POLL_INTERVAL_MS = 250;
-var DEFAULT_TIMEOUT_MS = 6e4;
-var wait = (ms) => {
-  return new Promise((resolve) => setTimeout(resolve, ms));
+const isEndState = (state) => IS_REQUEST_STATE_END_STATE[state];
+const DEFAULT_POLL_INTERVAL_MS = 250;
+const DEFAULT_TIMEOUT_MS = 6e4;
+const wait = (ms) => {
+	return new Promise((resolve) => setTimeout(resolve, ms));
 };
+/**
+* Poll a request until its inflight field is false, indicating it has been processed by the system.
+* Returns the updated request once inflight is false.
+* Throws if the timeout is exceeded before inflight becomes false.
+*/
 async function waitForRequestInflightDone(client, request, logger, options) {
-  const { logSubStep } = createBakeLogHelpers(logger);
-  if (request.inflight === void 0) {
-    return request;
-  }
-  logSubStep(`Waiting for inflight request to be processed...`);
-  const timeoutMs = _nullishCoalesce(_optionalChain([options, 'optionalAccess', _3 => _3.timeoutMs]), () => ( DEFAULT_TIMEOUT_MS));
-  const deadline = Date.now() + timeoutMs;
-  const pollIntervalMs = _nullishCoalesce(_optionalChain([options, 'optionalAccess', _4 => _4.pollIntervalMs]), () => ( DEFAULT_POLL_INTERVAL_MS));
-  let updated = request;
-  while (Date.now() < deadline) {
-    await wait(pollIntervalMs);
-    updated = await client.requests.findById.query({ id: request.id });
-    if (updated.inflight === void 0) {
-      return updated;
-    }
-  }
-  throw new Error(
-    `Timed out waiting for request ${request.id} inflight to be processed (last inflight: ${JSON.stringify(
-      updated.inflight
-    )})`
-  );
+	const { logSubStep } = createBakeLogHelpers(logger);
+	if (request.inflight === void 0) return request;
+	logSubStep(`Waiting for inflight request to be processed...`);
+	const timeoutMs = options?.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+	const deadline = Date.now() + timeoutMs;
+	const pollIntervalMs = options?.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS;
+	let updated = request;
+	while (Date.now() < deadline) {
+		await wait(pollIntervalMs);
+		updated = await client.requests.findById.query({ id: request.id });
+		if (updated.inflight === void 0) return updated;
+	}
+	throw new Error(`Timed out waiting for request ${request.id} inflight to be processed (last inflight: ${JSON.stringify(updated.inflight)})`);
 }
+/**
+* Poll a request until it reaches a terminal state (EXECUTED, FAILED, etc.).
+*
+* Returns the request once it is no longer in EXECUTING/STUCK state.
+* Throws if the request reaches FAILED or STUCK state, or if the timeout is exceeded.
+*/
 async function waitForRequestExecuted(client, request, logger, options) {
-  const { logSubStep } = createBakeLogHelpers(logger);
-  if (isEndState(request.state)) {
-    if (request.state === "EXECUTED") {
-      return request;
-    }
-    throw new Error(`Request is in error state ${request.state}`);
-  }
-  const pollIntervalMs = _nullishCoalesce(_optionalChain([options, 'optionalAccess', _5 => _5.pollIntervalMs]), () => ( DEFAULT_POLL_INTERVAL_MS));
-  const timeoutMs = _nullishCoalesce(_optionalChain([options, 'optionalAccess', _6 => _6.timeoutMs]), () => ( DEFAULT_TIMEOUT_MS));
-  const deadline = Date.now() + timeoutMs;
-  logSubStep(`Waiting for request to be executed...`);
-  let updated = request;
-  while (Date.now() < deadline) {
-    await wait(pollIntervalMs);
-    updated = await client.requests.findById.query({ id: request.id });
-    if (isEndState(updated.state)) {
-      if (updated.state === "EXECUTED") {
-        return updated;
-      }
-      throw new Error(`Request is in error state ${updated.state}`);
-    }
-  }
-  throw new Error(
-    `Timed out waiting for request ${request.id} to reach a terminal state (last state: ${updated.state})`
-  );
+	const { logSubStep } = createBakeLogHelpers(logger);
+	if (isEndState(request.state)) {
+		if (request.state === "EXECUTED") return request;
+		throw new Error(`Request is in error state ${request.state}`);
+	}
+	const pollIntervalMs = options?.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS;
+	const timeoutMs = options?.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+	const deadline = Date.now() + timeoutMs;
+	logSubStep(`Waiting for request to be executed...`);
+	let updated = request;
+	while (Date.now() < deadline) {
+		await wait(pollIntervalMs);
+		updated = await client.requests.findById.query({ id: request.id });
+		if (isEndState(updated.state)) {
+			if (updated.state === "EXECUTED") return updated;
+			throw new Error(`Request is in error state ${updated.state}`);
+		}
+	}
+	throw new Error(`Timed out waiting for request ${request.id} to reach a terminal state (last state: ${updated.state})`);
 }
 async function approveRequest(request, approvers, logger) {
-  const { logSubStep } = createBakeLogHelpers(logger);
-  for (let i = 0; i < approvers.length; i++) {
-    logSubStep(`Collecting approval (${i + 1}/${approvers.length})...`);
-    const approver = approvers[i];
-    request = await approver.approve(request);
-    request = await waitForRequestInflightDone(approver.client, request, logger);
-  }
-  return waitForRequestExecuted(approvers[0].client, request, logger);
+	const { logSubStep } = createBakeLogHelpers(logger);
+	for (let i = 0; i < approvers.length; i++) {
+		logSubStep(`Collecting approval (${i + 1}/${approvers.length})...`);
+		const approver = approvers[i];
+		request = await approver.approve(request);
+		request = await waitForRequestInflightDone(approver.client, request, logger);
+	}
+	return waitForRequestExecuted(approvers[0].client, request, logger);
 }
 async function createAndApproveRequest(input, approvers, logger) {
-  const { logSubStep } = createBakeLogHelpers(logger);
-  const creator = approvers[0];
-  _invariant2.default.call(void 0, creator, "Need at least 1 user to create a request");
-  logSubStep(`Creating request of type ${input.type}...`);
-  const request = await creator.client.requests.create.mutate({ request: input });
-  return approveRequest(request, approvers, logger);
+	const { logSubStep } = createBakeLogHelpers(logger);
+	const creator = approvers[0];
+	(0, invariant.default)(creator, "Need at least 1 user to create a request");
+	logSubStep(`Creating request of type ${input.type}...`);
+	return approveRequest(await creator.client.requests.create.mutate({ request: input }), approvers, logger);
 }
 function stripUndefinedDeep(obj) {
-  if (Array.isArray(obj)) {
-    return obj.map(stripUndefinedDeep);
-  }
-  if (obj && typeof obj === "object") {
-    return Object.fromEntries(
-      Object.entries(obj).filter(([_2, v]) => v !== void 0).map(([k, v]) => [k, stripUndefinedDeep(v)])
-    );
-  }
-  return obj;
+	if (Array.isArray(obj)) return obj.map(stripUndefinedDeep);
+	if (obj && typeof obj === "object") return Object.fromEntries(Object.entries(obj).filter(([_, v]) => v !== void 0).map(([k, v]) => [k, stripUndefinedDeep(v)]));
+	return obj;
 }
-
-// src/bake/bake-pledge.ts
-var flattenApprovers = (groups) => {
-  return groups.reduce((acc, cur) => {
-    acc.push(...cur.userIds.slice(0, cur.quorum));
-    return acc;
-  }, []);
+//#endregion
+//#region src/bake/bake-pledge.ts
+const flattenApprovers = (groups) => {
+	return groups.reduce((acc, cur) => {
+		acc.push(...cur.userIds.slice(0, cur.quorum));
+		return acc;
+	}, []);
 };
 async function bakePledgeAdjustment(options, logger) {
-  const { pledgeAdjustment, engine } = options;
-  const getDeviceIndex = _chunkLH4QQXUHcjs.createDeviceIndexResolver.call(void 0, engine);
-  logger.info("Logging in with admin...");
-  const admin = await engine.withDeviceIndex(4).login();
-  logger.info("Fetching account, tradelink blueprint and network...");
-  const [matchingAccounts, blueprint, network] = await Promise.all([
-    _chunkLH4QQXUHcjs.fetchAll.call(void 0, admin.client.accounts.list.query, { name: pledgeAdjustment.account }),
-    admin.client.tradelink.getNetworkBlueprint.query(),
-    admin.client.tradelink.getNetwork.query()
-  ]);
-  const account = matchingAccounts.find((account2) => account2.name === pledgeAdjustment.account);
-  _invariant2.default.call(void 0, account, `Account ${pledgeAdjustment.account} not found`);
-  _invariant2.default.call(void 0, blueprint, "Tradelink blueprint is not created yet");
-  _invariant2.default.call(void 0, network, "Tradelink network is not created yet");
-  const exchange = network.exchanges.find((exchange2) => {
-    const blueprintExchange = blueprint.exchanges.find(
-      (blueprintExchange2) => blueprintExchange2.tradelinkId === exchange2.tradelinkId
-    );
-    _invariant2.default.call(void 0, blueprintExchange, `Exchange ${exchange2.tradelinkId} not found in blueprint`);
-    return blueprintExchange.name === pledgeAdjustment.exchange;
-  });
-  _invariant2.default.call(void 0, exchange, `Exchange ${pledgeAdjustment.exchange} not found in network`);
-  const governance = account.governance;
-  _invariant2.default.call(void 0, governance.type === "TRADELINK", "Account governance is not TRADELINK");
-  const assetManager = network.assetManagers.find((am) => am.id === governance.assetManagerId);
-  _invariant2.default.call(void 0, assetManager, `Asset manager ${governance.assetManagerId} not found in network`);
-  const exchangeIsConfiguredForAccount = !!governance.exchangeConfigs.find(
-    (e) => e.exchangeId === exchange.id
-  );
-  _invariant2.default.call(void 0, 
-    exchangeIsConfiguredForAccount,
-    `Exchange ${exchange.id} is not configured for account ${account.id}`
-  );
-  const approverIds = [
-    ...flattenApprovers(assetManager.groups),
-    ...flattenApprovers(exchange.groups)
-  ];
-  const approvers = await Promise.all(
-    approverIds.map(
-      (id) => admin.client.users.findById.query({ id }).then((user) => getDeviceIndex(user.deviceUserId)).then((index) => engine.withDeviceIndex(index).login())
-    )
-  );
-  await createAndApproveRequest(
-    {
-      type: "TRADELINK_ADJUST_PLEDGE",
-      data: {
-        accountId: account.id,
-        exchangeId: exchange.id,
-        amount: pledgeAdjustment.amount
-      }
-    },
-    approvers,
-    logger
-  );
-  logger.info(
-    `Successfully adjusted pledge for account ${pledgeAdjustment.account} on exchange ${pledgeAdjustment.exchange}`
-  );
+	const { pledgeAdjustment, engine } = options;
+	const getDeviceIndex = require_utils.createDeviceIndexResolver(engine);
+	logger.info("Logging in with admin...");
+	const admin = await engine.withDeviceIndex(4).login();
+	logger.info("Fetching account, tradelink blueprint and network...");
+	const [matchingAccounts, blueprint, network] = await Promise.all([
+		require_utils.fetchAll(admin.client.accounts.list.query, { name: pledgeAdjustment.account }),
+		admin.client.tradelink.getNetworkBlueprint.query(),
+		admin.client.tradelink.getNetwork.query()
+	]);
+	const account = matchingAccounts.find((account) => account.name === pledgeAdjustment.account);
+	(0, invariant.default)(account, `Account ${pledgeAdjustment.account} not found`);
+	(0, invariant.default)(blueprint, "Tradelink blueprint is not created yet");
+	(0, invariant.default)(network, "Tradelink network is not created yet");
+	const exchange = network.exchanges.find((exchange) => {
+		const blueprintExchange = blueprint.exchanges.find((blueprintExchange) => blueprintExchange.tradelinkId === exchange.tradelinkId);
+		(0, invariant.default)(blueprintExchange, `Exchange ${exchange.tradelinkId} not found in blueprint`);
+		return blueprintExchange.name === pledgeAdjustment.exchange;
+	});
+	(0, invariant.default)(exchange, `Exchange ${pledgeAdjustment.exchange} not found in network`);
+	const governance = account.governance;
+	(0, invariant.default)(governance.type === "TRADELINK", "Account governance is not TRADELINK");
+	const assetManager = network.assetManagers.find((am) => am.id === governance.assetManagerId);
+	(0, invariant.default)(assetManager, `Asset manager ${governance.assetManagerId} not found in network`);
+	(0, invariant.default)(!!governance.exchangeConfigs.find((e) => e.exchangeId === exchange.id), `Exchange ${exchange.id} is not configured for account ${account.id}`);
+	const approverIds = [...flattenApprovers(assetManager.groups), ...flattenApprovers(exchange.groups)];
+	const approvers = await Promise.all(approverIds.map((id) => admin.client.users.findById.query({ id }).then((user) => getDeviceIndex(user.deviceUserId)).then((index) => engine.withDeviceIndex(index).login())));
+	await createAndApproveRequest({
+		type: "TRADELINK_ADJUST_PLEDGE",
+		data: {
+			accountId: account.id,
+			exchangeId: exchange.id,
+			amount: pledgeAdjustment.amount
+		}
+	}, approvers, logger);
+	logger.info(`Successfully adjusted pledge for account ${pledgeAdjustment.account} on exchange ${pledgeAdjustment.exchange}`);
 }
-
-// src/bake/bake-tradelink-organization.ts
+//#endregion
+//#region src/bake/bake-tradelink-organization.ts
 async function bakeTradelinkOrganization(options, logger) {
-  const { tradelink, engine, rootAuthToken, networkBlueprint } = options;
-  const { logStep } = createBakeLogHelpers(logger);
-  const rootClient = engine.createClient({ rootAuthToken });
-  if (tradelink.exchanges) {
-    logStep("Creating Tradelink organization exchanges...");
-    const existingOrgExchanges = await rootClient.tradelink.root.listOrgExchanges.query();
-    for (const orgExchange of tradelink.exchanges) {
-      const existingOrgExchange = existingOrgExchanges.find((e) => e.name === orgExchange.name);
-      if (existingOrgExchange) {
-        logger.info(
-          `[SKIPPED] Organization exchange ${existingOrgExchange.name} (${existingOrgExchange.code}) already exists`
-        );
-      } else {
-        await rootClient.tradelink.root.createOrgExchange.mutate({
-          code: orgExchange.code,
-          name: orgExchange.name,
-          logoUrl: orgExchange.logo
-        });
-        logger.info(`Created organization exchange ${orgExchange.name} (${orgExchange.code})`);
-      }
-    }
-  }
-  if (tradelink.assetManagers) {
-    logStep("Creating Tradelink organization asset managers...");
-    const existingAssetManagers = await rootClient.tradelink.root.listOrgAssetManagers.query();
-    for (const orgAssetManager of tradelink.assetManagers) {
-      const existingOrgAssetManager = existingAssetManagers.find(
-        (e) => e.name === orgAssetManager.name
-      );
-      if (existingOrgAssetManager) {
-        logger.info(
-          `[SKIPPED] Organization asset manager ${existingOrgAssetManager.name} (${existingOrgAssetManager.code}) already exists`
-        );
-      } else {
-        await rootClient.tradelink.root.createOrgAssetManager.mutate({
-          code: orgAssetManager.code,
-          name: orgAssetManager.name,
-          logoUrl: orgAssetManager.logo
-        });
-        logger.info(
-          `Created organization asset manager ${orgAssetManager.name} (${orgAssetManager.code})`
-        );
-      }
-    }
-  }
-  if (tradelink.custodians) {
-    logStep("Creating Tradelink organization custodians...");
-    const existingCustodians = await rootClient.tradelink.root.listOrgCustodians.query();
-    for (const orgCustodian of tradelink.custodians) {
-      const existingOrgCustodian = existingCustodians.find((e) => e.name === orgCustodian.name);
-      if (existingOrgCustodian) {
-        logger.info(
-          `[SKIPPED] Organization custodian ${existingOrgCustodian.name} (${existingOrgCustodian.code}) already exists`
-        );
-      } else {
-        await rootClient.tradelink.root.createOrgCustodian.mutate({
-          code: orgCustodian.code,
-          name: orgCustodian.name,
-          logoUrl: orgCustodian.logo
-        });
-        logger.info(`Created organization custodian ${orgCustodian.name} (${orgCustodian.code})`);
-      }
-    }
-  }
-  if (networkBlueprint) {
-    logStep("Creating Tradelink network blueprint...");
-    const { workspaceName, blueprint } = networkBlueprint;
-    const existingBlueprints = await rootClient.tradelink.root.listNetworkBlueprints.query();
-    const existingBlueprint = existingBlueprints.find((e) => e.workspaceName === workspaceName);
-    if (existingBlueprint) {
-      logger.info(`[SKIPPED] Network blueprint for ${workspaceName} workspace already exists`);
-    } else {
-      await rootClient.tradelink.root.createNetworkBlueprint.mutate({
-        workspaceName,
-        custodian: { name: blueprint.custodian },
-        exchanges: blueprint.exchanges.map((_2) => ({ name: _2 })),
-        assetManagers: blueprint.assetManagers.map((_2) => ({ name: _2 }))
-      });
-      logger.info(`Created network blueprint for ${networkBlueprint.workspaceName} workspace`);
-    }
-  }
+	const { tradelink, engine, rootAuthToken, networkBlueprint } = options;
+	const { logStep } = createBakeLogHelpers(logger);
+	const rootClient = engine.createClient({ rootAuthToken });
+	/* v8 ignore else - TODO bake empty tradelink org -- @preserve */
+	if (tradelink.exchanges) {
+		logStep("Creating Tradelink organization exchanges...");
+		const existingOrgExchanges = await rootClient.tradelink.root.listOrgExchanges.query();
+		for (const orgExchange of tradelink.exchanges) {
+			const existingOrgExchange = existingOrgExchanges.find((e) => e.name === orgExchange.name);
+			if (existingOrgExchange) logger.info(`[SKIPPED] Organization exchange ${existingOrgExchange.name} (${existingOrgExchange.code}) already exists`);
+			else {
+				await rootClient.tradelink.root.createOrgExchange.mutate({
+					code: orgExchange.code,
+					name: orgExchange.name,
+					logoUrl: orgExchange.logo
+				});
+				logger.info(`Created organization exchange ${orgExchange.name} (${orgExchange.code})`);
+			}
+		}
+	}
+	/* v8 ignore else -- @preserve */
+	if (tradelink.assetManagers) {
+		logStep("Creating Tradelink organization asset managers...");
+		const existingAssetManagers = await rootClient.tradelink.root.listOrgAssetManagers.query();
+		for (const orgAssetManager of tradelink.assetManagers) {
+			const existingOrgAssetManager = existingAssetManagers.find((e) => e.name === orgAssetManager.name);
+			if (existingOrgAssetManager) logger.info(`[SKIPPED] Organization asset manager ${existingOrgAssetManager.name} (${existingOrgAssetManager.code}) already exists`);
+			else {
+				await rootClient.tradelink.root.createOrgAssetManager.mutate({
+					code: orgAssetManager.code,
+					name: orgAssetManager.name,
+					logoUrl: orgAssetManager.logo
+				});
+				logger.info(`Created organization asset manager ${orgAssetManager.name} (${orgAssetManager.code})`);
+			}
+		}
+	}
+	/* v8 ignore else -- @preserve */
+	if (tradelink.custodians) {
+		logStep("Creating Tradelink organization custodians...");
+		const existingCustodians = await rootClient.tradelink.root.listOrgCustodians.query();
+		for (const orgCustodian of tradelink.custodians) {
+			const existingOrgCustodian = existingCustodians.find((e) => e.name === orgCustodian.name);
+			if (existingOrgCustodian) logger.info(`[SKIPPED] Organization custodian ${existingOrgCustodian.name} (${existingOrgCustodian.code}) already exists`);
+			else {
+				await rootClient.tradelink.root.createOrgCustodian.mutate({
+					code: orgCustodian.code,
+					name: orgCustodian.name,
+					logoUrl: orgCustodian.logo
+				});
+				logger.info(`Created organization custodian ${orgCustodian.name} (${orgCustodian.code})`);
+			}
+		}
+	}
+	/* v8 ignore else -- @preserve */
+	if (networkBlueprint) {
+		logStep("Creating Tradelink network blueprint...");
+		const { workspaceName, blueprint } = networkBlueprint;
+		if ((await rootClient.tradelink.root.listNetworkBlueprints.query()).find((e) => e.workspaceName === workspaceName)) logger.info(`[SKIPPED] Network blueprint for ${workspaceName} workspace already exists`);
+		else {
+			await rootClient.tradelink.root.createNetworkBlueprint.mutate({
+				workspaceName,
+				custodian: { name: blueprint.custodian },
+				exchanges: blueprint.exchanges.map((_) => ({ name: _ })),
+				assetManagers: blueprint.assetManagers.map((_) => ({ name: _ }))
+			});
+			logger.info(`Created network blueprint for ${networkBlueprint.workspaceName} workspace`);
+		}
+	}
 }
-
-// src/bake/bake-workspace.ts
-
-var _lodash = require('lodash'); var _lodash2 = _interopRequireDefault(_lodash);
-var _tspattern = require('ts-pattern');
+//#endregion
+//#region src/bake/bake-workspace.ts
 async function bakeWorkspace(options, logger) {
-  const { workspace, engine, workspaceName } = options;
-  const workspaceEngine = engine.withWorkspace(workspaceName);
-  const { logTitle, logStep, logSubStep } = createBakeLogHelpers(logger);
-  const findDeviceIndex = _chunkLH4QQXUHcjs.createDeviceIndexResolver.call(void 0, workspaceEngine);
-  logger.info("Authenticating with two admins...");
-  const [admin1, admin2] = await Promise.all([
-    workspaceEngine.withDeviceIndex(4).login(),
-    workspaceEngine.withDeviceIndex(5).login()
-  ]);
-  logger.info("Fetching existing data...");
-  const [
-    existingUsers,
-    existingGroups,
-    existingWhitelists,
-    existingPolicies,
-    existingAccounts,
-    tradelinkNetworkBlueprint
-  ] = await Promise.all([
-    _chunkLH4QQXUHcjs.fetchAll.call(void 0, admin1.client.users.list.query, { status: "ACTIVE" }),
-    _chunkLH4QQXUHcjs.fetchAll.call(void 0, admin1.client.groups.list.query, { status: "ACTIVE" }),
-    _chunkLH4QQXUHcjs.fetchAll.call(void 0, admin1.client.whitelists.list.query, { status: "ACTIVE" }),
-    _chunkLH4QQXUHcjs.fetchAll.call(void 0, admin1.client.policies.list.query, { isPrivate: false }),
-    _chunkLH4QQXUHcjs.fetchAll.call(void 0, admin1.client.accounts.list.query, { status: "ACTIVE" }),
-    admin1.client.tradelink.getNetworkBlueprint.query()
-  ]);
-  const tradelinkOrgExchangesByName = _lodash2.default.keyBy(_optionalChain([tradelinkNetworkBlueprint, 'optionalAccess', _7 => _7.exchanges]), "name");
-  const tradelinkOrgAssetManagersByName = _lodash2.default.keyBy(_optionalChain([tradelinkNetworkBlueprint, 'optionalAccess', _8 => _8.assetManagers]), "name");
-  let existingTradelinkNetwork = await admin1.client.tradelink.getNetwork.query();
-  const existingPsdUsers = existingUsers.filter((user) => user.deviceType === "PSD");
-  const existingApiUsers = existingUsers.filter((user) => user.deviceType === "API");
-  const usersWithDeviceIndex = await resolveDevicesIndexes(existingPsdUsers);
-  if (workspace.users) {
-    logTitle("Users");
-    if (workspace.users.admins) {
-      for (const deviceIndex of workspace.users.admins) {
-        await createUser("ADMIN", deviceIndex);
-      }
-    }
-    if (workspace.users.operators) {
-      for (const deviceIndex of workspace.users.operators) {
-        await createUser("OPERATOR", deviceIndex);
-      }
-    }
-    if (workspace.users.api) {
-      for (const apiUser of workspace.users.api) {
-        await createApiUser(apiUser);
-      }
-    }
-  }
-  if (workspace.workspaceRules) {
-    logTitle("Workspace Rules");
-    for (const workspaceRule of workspace.workspaceRules) {
-      await createWorkspaceRule(workspaceRule);
-    }
-  }
-  if (workspace.groups) {
-    logTitle("Groups");
-    for (const group of workspace.groups) {
-      await createGroup(group);
-    }
-  }
-  if (workspace.whitelists) {
-    logTitle("Whitelists");
-    await createWhitelists(workspace.whitelists);
-  }
-  if (workspace.policies) {
-    logTitle("Policies");
-    for (const policy of workspace.policies) {
-      await createPolicy(policy);
-    }
-  }
-  if (workspace.tradelink) {
-    logTitle("Tradelink");
-    await createTradelink(workspace.tradelink);
-  }
-  if (workspace.accounts) {
-    logTitle("Accounts");
-    for (const account of workspace.accounts) {
-      await createAccount(account, workspace);
-    }
-  }
-  async function createWhitelists(whitelists) {
-    for (const whitelist of whitelists) {
-      await createWhitelist(whitelist);
-    }
-    async function createWhitelist(whitelist) {
-      const existing = existingWhitelists.find((w) => w.name === whitelist.name);
-      if (existing) {
-        logger.info(`[SKIPPED] Whitelist "${whitelist.name}" already exists`);
-        return;
-      }
-      const input = {
-        type: "CREATE_WHITELIST",
-        data: whitelist
-      };
-      const req = await createAndApproveRequest(input, [admin1, admin2], logger);
-      logSubStep(`Whitelist "${whitelist.name}" has been created`);
-      const createdWhitelist = await admin1.client.whitelists.findById.query({ id: req.targetId });
-      existingWhitelists.push(createdWhitelist);
-    }
-  }
-  function govRuleFromManifest(rule) {
-    return {
-      operationType: rule.type,
-      reviewSteps: rule.steps.map((step) => {
-        if ("group" in step) {
-          return {
-            quorum: step.quorum,
-            groupId: groupIdFromName(step.group)
-          };
-        }
-        return {
-          quorum: step.quorum,
-          userIds: step.members.map(userIdFromDeviceIndexOrName)
-        };
-      }),
-      threshold: rule.threshold,
-      whitelistIds: _optionalChain([rule, 'access', _9 => _9.whitelistNames, 'optionalAccess', _10 => _10.map, 'call', _11 => _11(whitelistIdFromName)])
-    };
-  }
-  function rawSigningRuleFromManifest(rule) {
-    return {
-      operationType: rule.type,
-      // RAW_SIGNING only supports steps with userIds (no groups)
-      reviewSteps: rule.steps.map((step) => ({
-        quorum: step.quorum,
-        userIds: step.members.map(userIdFromDeviceIndexOrName)
-      }))
-    };
-  }
-  async function createAccount(account, workspace2) {
-    let req = null;
-    const existing = existingAccounts.find(
-      (a) => a.currency === account.currency && a.index === account.index && (_nullishCoalesce(a.contractAddress, () => ( null))) === (_nullishCoalesce(account.contractAddress, () => ( null)))
-    );
-    const governance = _tspattern.match.call(void 0, account.governance).with({ type: "TRADELINK" }, (gov) => ({
-      type: "TRADELINK",
-      assetManagerId: assetManagerIdFromName(gov.assetManager),
-      exchangeConfigs: gov.exchanges.map((exchangeConfig) => ({
-        exchangeId: exchangeIdFromName(exchangeConfig.name),
-        repledgeAuthorized: exchangeConfig.repledgeAuthorized === true,
-        needsAssetManagerApprovalForSettlements: exchangeConfig.needsAssetManagerApprovalForSettlements === true
-      }))
-    })).with({ type: "RAW_SIGNING" }, (gov) => ({
-      type: "RAW_SIGNING",
-      policy: { rules: gov.rules.map(rawSigningRuleFromManifest) }
-    })).with({ type: "CLASSIC" }, (gov) => ({
-      type: "CLASSIC",
-      policy: { rules: gov.rules.map(govRuleFromManifest) }
-    })).with({ type: "POLICY" }, (gov) => ({
-      type: "CLASSIC",
-      policy: { policyId: policyIdFromName(gov.policy) }
-    })).exhaustive();
-    const accountData = {
-      name: account.name,
-      currency: account.currency,
-      contractAddress: _nullishCoalesce(account.contractAddress, () => ( null)),
-      tokenIdentifier: _nullishCoalesce(account.tokenIdentifier, () => ( null)),
-      index: account.index,
-      governance
-    };
-    const createInput = {
-      type: "CREATE_ACCOUNT",
-      data: accountData
-    };
-    if (existing) {
-      const editInput = {
-        type: "EDIT_ACCOUNT",
-        targetId: existing.id,
-        data: { name: accountData.name, governance }
-      };
-      const previousAccountRequests = await admin1.client.requests.list.query({
-        type: ["CREATE_ACCOUNT", "EDIT_ACCOUNT"],
-        targetId: existing.id,
-        state: "EXECUTED",
-        sortBy: "createdAt",
-        sortOrder: "desc"
-      });
-      if (_optionalChain([previousAccountRequests, 'optionalAccess', _12 => _12.results]) && previousAccountRequests.results.length > 0) {
-        const stateRequest = _optionalChain([previousAccountRequests, 'access', _13 => _13.results, 'optionalAccess', _14 => _14[0]]);
-        _invariant2.default.call(void 0, 
-          stateRequest && (stateRequest.type === "EDIT_ACCOUNT" || stateRequest.type === "CREATE_ACCOUNT"),
-          "State request should be an edit account request"
-        );
-        if (_lodash2.default.isEqual(
-          stripUndefinedDeep(accountData.governance),
-          stripUndefinedDeep(stateRequest.data.governance)
-        ) && accountData.name === stateRequest.data.name) {
-          logger.info(`[SKIPPED] Account "${account.name}" has not changed`);
-          await activateHederaAccount(account, workspace2, existing.id);
-          return;
-        }
-        req = await createAndApproveRequest(editInput, [admin1, admin2], logger);
-        logger.info(`[EDITED] Account "${account.name}" has been edited`);
-        return;
-      }
-    } else {
-      logStep(`Creating account "${account.name}"`);
-      req = await createAndApproveRequest(createInput, [admin1, admin2], logger);
-      const createdAccount = await admin1.client.accounts.findById.query({ id: req.targetId });
-      existingAccounts.push(createdAccount);
-    }
-    if (account.governance.type === "TRADELINK" && req) {
-      logStep(`Activating tradelink account "${account.name}"`);
-      const assetManagerId = assetManagerIdFromName(account.governance.assetManager);
-      const assetManager = _optionalChain([existingTradelinkNetwork, 'optionalAccess', _15 => _15.assetManagers, 'access', _16 => _16.find, 'call', _17 => _17(
-        (assetManager2) => assetManager2.id === assetManagerId
-      )]);
-      _invariant2.default.call(void 0, assetManager, `Asset manager for account exists`);
-      const loggedAssetManagerOperators = await Promise.all(
-        assetManager.groups.flatMap(
-          ({ quorum, userIds }) => userIds.slice(0, quorum).map((userId) => {
-            const deviceIndex = _optionalChain([usersWithDeviceIndex, 'access', _18 => _18.find, 'call', _19 => _19((o) => o.user.id === userId), 'optionalAccess', _20 => _20.deviceIndex]);
-            return workspaceEngine.withDeviceIndex(deviceIndex).login();
-          })
-        )
-      );
-      await createAndApproveRequest(
-        { type: "TRADELINK_ACTIVATE_ACCOUNT", targetId: req.targetId, data: null },
-        loggedAssetManagerOperators,
-        logger
-      );
-    }
-    if (_optionalChain([req, 'optionalAccess', _21 => _21.targetId])) {
-      await activateHederaAccount(account, workspace2, req.targetId);
-    }
-    logSubStep(`Account ${account.name} has been created`);
-  }
-  async function activateHederaAccount(account, workspace2, accountId) {
-    if (account.currency === "hedera" && account.contractAddress === void 0 && workspace2.hederaData && accountId) {
-      const salt = engine.__options.salt;
-      const hederaAccountsForSalt = workspace2.hederaData[salt];
-      const hederaAccountData = _optionalChain([hederaAccountsForSalt, 'optionalAccess', _22 => _22.find, 'call', _23 => _23(
-        (h) => h.index === account.index && h.activate
-      )]);
-      if (hederaAccountData) {
-        try {
-          await admin1.client.accounts.hedera.activateAccount.mutate({
-            id: accountId,
-            onchainId: hederaAccountData.onChainId
-          });
-          logSubStep(`Hedera account "${account.name}" has been activated`);
-        } catch (error) {
-          logger.warning(`Activation for "${account.name}" failed: ${error}`);
-        }
-      }
-    }
-  }
-  async function createUser(role, deviceIndex) {
-    const userEngine = workspaceEngine.withDeviceIndex(deviceIndex);
-    const deviceId = await userEngine.device.getDeviceUserId();
-    const existing = existingUsers.find((user) => user.deviceUserId === deviceId);
-    if (existing) {
-      logger.info(`[SKIPPED] User with device index ${deviceIndex} already exists`);
-      return;
-    }
-    const name = `${role === "ADMIN" ? "Admin" : "Operator"} ${deviceIndex}`;
-    logStep(`Creating ${name}`);
-    logSubStep("Creating invitation...");
-    let registration = await admin1.client.userRegistrations.invite.mutate({
-      name,
-      role,
-      deviceUserId: deviceId,
-      psdModel: "STAX"
-    });
-    logSubStep("Completing registration...");
-    registration = await userEngine.register(registration);
-    logSubStep("Creating request...");
-    let req = await admin1.client.requests.create.mutate({
-      request: {
-        type: "CREATE_PSD_USER",
-        data: { registrationId: registration.id }
-      }
-    });
-    req = await approveRequest(req, [admin1, admin2], logger);
-    logSubStep(`${name} has been created`);
-    const createdUser = await admin1.client.users.findById.query({ id: req.targetId });
-    existingUsers.push(createdUser);
-    usersWithDeviceIndex.push({ user: createdUser, deviceIndex });
-  }
-  async function createApiUser(apiUser) {
-    const pubKey = _nullishCoalesce(apiUser.pubKey, () => ( _chunk2WGM7EWAcjs.genKeys.call(void 0, apiUser.name).hexPubKey));
-    const existing = existingApiUsers.find(
-      (user) => user.pubKey === pubKey || user.name === apiUser.name
-    );
-    if (existing) {
-      logger.info(
-        `[SKIPPED] API user already exists with name "${apiUser.name}" or public key "${pubKey}"`
-      );
-      return;
-    }
-    logStep(`Creating API user "${apiUser.name}"...`);
-    logSubStep("Creating request...");
-    let req = await admin1.client.requests.create.mutate({
-      request: {
-        type: "CREATE_API_USER",
-        data: {
-          name: apiUser.name,
-          role: apiUser.role,
-          pubKey,
-          viewAll: apiUser.viewAll
-        }
-      }
-    });
-    req = await approveRequest(req, [admin1, admin2], logger);
-    logSubStep(`API user "${apiUser.name}" has been created`);
-    logSubStep("Generating credentials...");
-    const credentials = await admin1.client.users.resetApiUserCredentials.mutate({
-      id: req.targetId
-    });
-    logSubStep(
-      `API user "${apiUser.name}" credentials have been generated: apiKeyId=${credentials.apiKeyId}, apiKeySecret=${credentials.apiKeySecret}`
-    );
-    const createdUser = await admin1.client.users.findById.query({ id: req.targetId });
-    existingApiUsers.push(createdUser);
-  }
-  async function createGroup(group) {
-    const existing = existingGroups.find((g) => g.name === group.name);
-    if (existing) {
-      logger.info(`[SKIPPED] Group "${group.name}" already exists`);
-      return;
-    }
-    logStep(`Creating group ${group.name}...`);
-    const members = group.members.map(userIdFromDeviceIndexOrName);
-    logSubStep("Creating request...");
-    let request = await admin1.client.requests.create.mutate({
-      request: {
-        type: "CREATE_GROUP",
-        data: {
-          name: group.name,
-          description: "",
-          members
-        }
-      }
-    });
-    request = await approveRequest(request, [admin1, admin2], logger);
-    logSubStep(`${group.name} has been created`);
-    const createdGroup = await admin1.client.groups.findById.query({ id: request.targetId });
-    existingGroups.push(createdGroup);
-  }
-  async function createPolicy(policy) {
-    const existing = existingPolicies.find((p) => p.name === policy.name);
-    if (existing) {
-      logger.info(`[SKIPPED] Policy "${policy.name}" already exists`);
-      return;
-    }
-    logStep(`Creating policy ${policy.name}...`);
-    logSubStep("Creating request...");
-    let request = await admin1.client.requests.create.mutate({
-      request: {
-        type: "CREATE_POLICY",
-        data: {
-          name: policy.name,
-          currency: policy.currency,
-          description: "",
-          govRules: policy.rules.map(govRuleFromManifest)
-        }
-      }
-    });
-    request = await approveRequest(request, [admin1, admin2], logger);
-    logSubStep(`${policy.name} has been created`);
-    const createdPolicy = await admin1.client.policies.findById.query({ id: request.targetId });
-    existingPolicies.push(createdPolicy);
-  }
-  async function createWorkspaceRule(workspaceRule) {
-    const { permission, quorum, members } = workspaceRule;
-    logStep(`Editing workspace rule for ${permission}...`);
-    const userIds = members.map(userIdFromDeviceIndexOrName);
-    logSubStep("Creating request...");
-    const input = {
-      type: "EDIT_WORKSPACE_RULE",
-      data: {
-        permission,
-        reviewConfig: [{ quorum, userIds }]
-      }
-    };
-    await createAndApproveRequest(input, [admin1, admin2], logger);
-    logSubStep(`Workspace rule for "${permission}" has been edited`);
-  }
-  async function createTradelink(tradelink) {
-    if (tradelink.custodian) {
-      if (existingTradelinkNetwork === null) {
-        logStep("Creating custodian config...");
-        const { settlement, withdraw, arbitration } = tradelink.custodian;
-        const data = {
-          settlement: settlement.map(tradelinkReviewStepFromManifest),
-          withdraw: withdraw.map(tradelinkReviewStepFromManifest),
-          arbitration: arbitration.map(tradelinkReviewStepFromManifest)
-        };
-        logSubStep("Creating request...");
-        const request = await admin1.client.requests.create.mutate({
-          request: {
-            type: "TRADELINK_CREATE_CUSTODIAN",
-            data
-          }
-        });
-        await approveRequest(request, [admin1, admin2], logger);
-        logSubStep("Tradelink custodian config has been created");
-        existingTradelinkNetwork = await admin1.client.tradelink.getNetwork.query();
-      } else {
-        logger.info("[SKIPPED] Custodian config already exists");
-      }
-      const networkBlueprint = await admin1.client.tradelink.getNetworkBlueprint.query();
-      if (networkBlueprint !== null) {
-        if (tradelink.exchanges !== void 0) {
-          await createTradelinkExchanges(networkBlueprint, tradelink.exchanges);
-        }
-        if (tradelink.assetManagers !== void 0) {
-          await createTradelinkAssetManagers(networkBlueprint, tradelink.assetManagers);
-        }
-      } else {
-        logger.error(
-          "Will not create exchanges and asset managers because there is no network blueprint for current workspace"
-        );
-      }
-    }
-  }
-  async function createTradelinkExchanges(networkBlueprint, exchanges) {
-    _invariant2.default.call(void 0, existingTradelinkNetwork !== null, "Network should exist");
-    const blueprintExchanges = networkBlueprint.exchanges;
-    for (const exchange of exchanges) {
-      const blueprintExchange = blueprintExchanges.find(({ name }) => name === exchange.name);
-      _invariant2.default.call(void 0, 
-        blueprintExchange !== void 0,
-        `Exchange ${exchange.name} does not exist in network blueprint`
-      );
-      const exchangeId = blueprintExchange.tradelinkId;
-      logStep(`Creating exchange ${exchange.name}...`);
-      if (existingTradelinkNetwork.exchanges.find(({ tradelinkId }) => tradelinkId === exchangeId) !== void 0) {
-        logger.info(`[SKIPPED] Exchange "${exchange.name}" already exists`);
-        continue;
-      }
-      logSubStep("Creating request...");
-      const request = await admin1.client.requests.create.mutate({
-        request: {
-          type: "TRADELINK_CREATE_EXCHANGE",
-          data: {
-            tradelinkId: exchangeId,
-            groups: exchange.groups.map(tradelinkReviewStepFromManifest),
-            whitelist: exchange.whitelist
-          }
-        }
-      });
-      const loggedExchangeOperators = await Promise.all(
-        exchange.groups.flatMap(
-          ({ quorum, members }) => members.slice(0, quorum).map((deviceIndex) => workspaceEngine.withDeviceIndex(deviceIndex).login())
-        )
-      );
-      await approveRequest(request, [admin1, admin2, ...loggedExchangeOperators], logger);
-      existingTradelinkNetwork = await admin1.client.tradelink.getNetwork.query();
-      _invariant2.default.call(void 0, existingTradelinkNetwork !== null, "Tradelink network exists");
-    }
-  }
-  async function createTradelinkAssetManagers(networkBlueprint, assetManagers) {
-    _invariant2.default.call(void 0, existingTradelinkNetwork !== null, "Network should exist");
-    const blueprintAssetManagers = networkBlueprint.assetManagers;
-    for (const assetManager of assetManagers) {
-      const blueprintAssetManager = blueprintAssetManagers.find(
-        ({ name }) => name === assetManager.name
-      );
-      _invariant2.default.call(void 0, 
-        blueprintAssetManager !== void 0,
-        `AssetManager ${assetManager.name} does not exist in network blueprint`
-      );
-      const assetManagerId = blueprintAssetManager.tradelinkId;
-      logStep(`Creating assetManager ${assetManager.name}...`);
-      if (existingTradelinkNetwork.assetManagers.find(
-        ({ tradelinkId }) => tradelinkId === assetManagerId
-      ) !== void 0) {
-        logger.info(`[SKIPPED] Asset manager "${assetManager.name}" already exists`);
-        continue;
-      }
-      logSubStep("Creating request...");
-      const request = await admin1.client.requests.create.mutate({
-        request: {
-          type: "TRADELINK_CREATE_ASSET_MANAGER",
-          data: {
-            tradelinkId: assetManagerId,
-            groups: assetManager.groups.map(tradelinkReviewStepFromManifest),
-            whitelist: assetManager.whitelist
-          }
-        }
-      });
-      const loggedAssetManagerOperators = await Promise.all(
-        assetManager.groups.flatMap(
-          ({ quorum, members }) => members.slice(0, quorum).map((deviceIndex) => workspaceEngine.withDeviceIndex(deviceIndex).login())
-        )
-      );
-      await approveRequest(request, [admin1, admin2, ...loggedAssetManagerOperators], logger);
-      existingTradelinkNetwork = await admin1.client.tradelink.getNetwork.query();
-      _invariant2.default.call(void 0, existingTradelinkNetwork !== null, "Tradelink network exists");
-    }
-  }
-  async function resolveDevicesIndexes(users) {
-    const usersWithDeviceIndex2 = await users.reduce(
-      (acc, cur) => acc.then(async (acc2) => {
-        acc2.push(await withDeviceIndex(cur));
-        return acc2;
-      }),
-      Promise.resolve([])
-    );
-    return usersWithDeviceIndex2;
-  }
-  async function withDeviceIndex(user) {
-    _invariant2.default.call(void 0, user.deviceUserId, `User ${user.id} does not have any device user id`);
-    const deviceIndex = await findDeviceIndex(user.deviceUserId);
-    return { user, deviceIndex };
-  }
-  function userIdFromDeviceIndex(deviceIndex) {
-    const corresponding = usersWithDeviceIndex.find((o) => o.deviceIndex === deviceIndex);
-    _invariant2.default.call(void 0, corresponding, `No user with device index ${deviceIndex}`);
-    return corresponding.user.id;
-  }
-  function userIdFromUserName(name) {
-    const user = existingApiUsers.find((u) => u.name === name);
-    _invariant2.default.call(void 0, user, `User ${name} not found`);
-    return user.id;
-  }
-  function userIdFromDeviceIndexOrName(identifier) {
-    if (typeof identifier === "number") {
-      return userIdFromDeviceIndex(identifier);
-    }
-    return userIdFromUserName(identifier);
-  }
-  function groupIdFromName(groupName) {
-    const group = existingGroups.find((g) => g.name === groupName);
-    _invariant2.default.call(void 0, group, `Group ${groupName} not found`);
-    return group.id;
-  }
-  function policyIdFromName(policyName) {
-    const policy = existingPolicies.find((g) => g.name === policyName);
-    _invariant2.default.call(void 0, policy, `Policy ${policyName} not found`);
-    return policy.id;
-  }
-  function whitelistIdFromName(whitelistName) {
-    const whitelist = existingWhitelists.find((w) => w.name === whitelistName);
-    _invariant2.default.call(void 0, whitelist, `Whitelist ${whitelistName} not found`);
-    return whitelist.id;
-  }
-  function assetManagerIdFromName(assetManagerName) {
-    const orgAssetManager = tradelinkOrgAssetManagersByName[assetManagerName];
-    _invariant2.default.call(void 0, 
-      orgAssetManager,
-      `Can't find Tradelink organization asset manager ${assetManagerName}`
-    );
-    const assetManager = _optionalChain([existingTradelinkNetwork, 'optionalAccess', _24 => _24.assetManagers, 'access', _25 => _25.find, 'call', _26 => _26(
-      (assetManager2) => assetManager2.tradelinkId === orgAssetManager.tradelinkId
-    )]);
-    _invariant2.default.call(void 0, assetManager, `Can't find Tradelink assetManager ${assetManagerName}`);
-    return assetManager.id;
-  }
-  function exchangeIdFromName(exchangeName) {
-    const exchange = _optionalChain([existingTradelinkNetwork, 'optionalAccess', _27 => _27.exchanges, 'access', _28 => _28.find, 'call', _29 => _29((exchange2) => {
-      const orgExchange = tradelinkOrgExchangesByName[exchangeName];
-      _invariant2.default.call(void 0, orgExchange, `Can't find Tradelink organization exchange ${exchange2.tradelinkId}`);
-      return orgExchange.name === exchangeName;
-    })]);
-    _invariant2.default.call(void 0, exchange, `Can't find Tradelink exchange ${exchangeName}`);
-    return exchange.id;
-  }
-  function tradelinkReviewStepFromManifest({
-    members,
-    quorum
-  }) {
-    return {
-      userIds: members.map(userIdFromDeviceIndex),
-      quorum
-    };
-  }
+	const { workspace, engine, workspaceName } = options;
+	const workspaceEngine = engine.withWorkspace(workspaceName);
+	const { logTitle, logStep, logSubStep } = createBakeLogHelpers(logger);
+	const findDeviceIndex = require_utils.createDeviceIndexResolver(workspaceEngine);
+	logger.info("Authenticating with two admins...");
+	const [admin1, admin2] = await Promise.all([workspaceEngine.withDeviceIndex(4).login(), workspaceEngine.withDeviceIndex(5).login()]);
+	logger.info("Fetching existing data...");
+	const [existingUsers, existingGroups, existingWhitelists, existingPolicies, existingAccounts, existingEntities, tradelinkNetworkBlueprint] = await Promise.all([
+		require_utils.fetchAll(admin1.client.users.list.query, { status: "ACTIVE" }),
+		require_utils.fetchAll(admin1.client.groups.list.query, { status: "ACTIVE" }),
+		require_utils.fetchAll(admin1.client.whitelists.list.query, { status: "ACTIVE" }),
+		require_utils.fetchAll(admin1.client.policies.list.query, { isPrivate: false }),
+		require_utils.fetchAll(admin1.client.accounts.list.query, { status: "ACTIVE" }),
+		require_utils.fetchAll(admin1.client.entities.list.query, { status: "ACTIVE" }),
+		admin1.client.tradelink.getNetworkBlueprint.query()
+	]);
+	const tradelinkOrgExchangesByName = lodash.default.keyBy(tradelinkNetworkBlueprint?.exchanges, "name");
+	const tradelinkOrgAssetManagersByName = lodash.default.keyBy(tradelinkNetworkBlueprint?.assetManagers, "name");
+	let existingTradelinkNetwork = await admin1.client.tradelink.getNetwork.query();
+	const existingPsdUsers = existingUsers.filter((user) => user.deviceType === "PSD");
+	const existingApiUsers = existingUsers.filter((user) => user.deviceType === "API");
+	const usersWithDeviceIndex = await resolveDevicesIndexes(existingPsdUsers);
+	if (workspace.users) {
+		logTitle("Users");
+		if (workspace.users.admins) for (const deviceIndex of workspace.users.admins) await createUser("ADMIN", deviceIndex);
+		/* v8 ignore else -- @preserve */
+		if (workspace.users.operators) for (const deviceIndex of workspace.users.operators) await createUser("OPERATOR", deviceIndex);
+		if (workspace.users.api) for (const apiUser of workspace.users.api) await createApiUser(apiUser);
+	}
+	if (workspace.workspaceRules) {
+		logTitle("Workspace Rules");
+		for (const workspaceRule of workspace.workspaceRules) await createWorkspaceRule(workspaceRule);
+	}
+	if (workspace.groups) {
+		logTitle("Groups");
+		for (const group of workspace.groups) await createGroup(group);
+	}
+	if (workspace.whitelists) {
+		logTitle("Whitelists");
+		await createWhitelists(workspace.whitelists);
+	}
+	if (workspace.policies) {
+		logTitle("Policies");
+		for (const policy of workspace.policies) await createPolicy(policy);
+	}
+	if (workspace.tradelink) {
+		logTitle("Tradelink");
+		await createTradelink(workspace.tradelink);
+	}
+	if (workspace.accounts) {
+		logTitle("Accounts");
+		for (const account of workspace.accounts) await createAccount(account, workspace);
+	}
+	if (workspace.entities) {
+		logTitle("Entities");
+		for (const entity of workspace.entities) await createEntity(entity);
+	}
+	async function editDomainObjectIfNeeded(params) {
+		const previousRequests = await admin1.client.requests.list.query({
+			type: params.requestTypes,
+			targetId: params.existingId,
+			state: "EXECUTED",
+			sortBy: "createdAt",
+			sortOrder: "desc",
+			pageSize: 1
+		});
+		if (previousRequests?.results && previousRequests.results.length > 0) {
+			const stateRequest = previousRequests.results[0];
+			(0, invariant.default)(stateRequest && params.requestTypes.includes(stateRequest.type), `State request should be a ${params.requestTypes[0]} or ${params.requestTypes[1]} request`);
+			const lastData = params.extractLastData(stateRequest.data);
+			if (lodash.default.isEqual(stripUndefinedDeep(params.editData), stripUndefinedDeep(lastData))) {
+				logger.info(`[SKIPPED] ${params.entityType} "${params.entityName}" has not changed`);
+				return "skipped";
+			}
+		}
+		logStep(`Editing ${params.entityType.toLowerCase()} "${params.entityName}"...`);
+		await createAndApproveRequest(params.editInput, [admin1, admin2], logger);
+		logger.info(`[EDITED] ${params.entityType} "${params.entityName}" has been edited`);
+		return "edited";
+	}
+	async function createWhitelists(whitelists) {
+		for (const whitelist of whitelists) await createWhitelist(whitelist);
+		async function createWhitelist(whitelist) {
+			const existing = existingWhitelists.find((w) => w.name === whitelist.name);
+			const normalizeAddresses = (addresses) => addresses.map(({ destinationTags, ...rest }) => ({
+				...rest,
+				...destinationTags?.length ? { destinationTags } : {}
+			}));
+			const whitelistEditData = {
+				name: whitelist.name,
+				addresses: normalizeAddresses(whitelist.addresses)
+			};
+			if (existing) {
+				await editDomainObjectIfNeeded({
+					entityType: "Whitelist",
+					entityName: whitelist.name,
+					existingId: existing.id,
+					editInput: {
+						type: "EDIT_WHITELIST",
+						targetId: existing.id,
+						data: {
+							name: whitelist.name,
+							addresses: whitelist.addresses
+						}
+					},
+					editData: whitelistEditData,
+					requestTypes: ["CREATE_WHITELIST", "EDIT_WHITELIST"],
+					extractLastData: (data) => ({
+						name: data.name,
+						addresses: normalizeAddresses(data.addresses)
+					})
+				});
+				return;
+			}
+			const req = await createAndApproveRequest({
+				type: "CREATE_WHITELIST",
+				data: {
+					...whitelist,
+					description: whitelist.description ?? null
+				}
+			}, [admin1, admin2], logger);
+			logSubStep(`Whitelist "${whitelist.name}" has been created`);
+			const createdWhitelist = await admin1.client.whitelists.findById.query({ id: req.targetId });
+			existingWhitelists.push(createdWhitelist);
+		}
+	}
+	function govRuleFromManifest(rule) {
+		return {
+			operationType: rule.type,
+			reviewSteps: rule.steps.map((step) => {
+				if ("group" in step) return {
+					quorum: step.quorum,
+					groupId: groupIdFromName(step.group)
+				};
+				return {
+					quorum: step.quorum,
+					userIds: step.members.map(userIdFromDeviceIndexOrName)
+				};
+			}),
+			threshold: rule.threshold,
+			whitelistIds: rule.whitelistNames?.map(whitelistIdFromName)
+		};
+	}
+	function rawSigningRuleFromManifest(rule) {
+		return {
+			operationType: rule.type,
+			reviewSteps: rule.steps.map((step) => ({
+				quorum: step.quorum,
+				userIds: step.members.map(userIdFromDeviceIndexOrName)
+			}))
+		};
+	}
+	async function createAccount(account, workspace) {
+		const existing = existingAccounts.find((a) => a.currency === account.currency && a.index === account.index && (a.contractAddress ?? null) === (account.contractAddress ?? null));
+		const governance = (0, ts_pattern.match)(account.governance).with({ type: "TRADELINK" }, (gov) => ({
+			type: "TRADELINK",
+			assetManagerId: assetManagerIdFromName(gov.assetManager),
+			exchangeConfigs: gov.exchanges.map((exchangeConfig) => ({
+				exchangeId: exchangeIdFromName(exchangeConfig.name),
+				repledgeAuthorized: exchangeConfig.repledgeAuthorized === true,
+				needsAssetManagerApprovalForSettlements: exchangeConfig.needsAssetManagerApprovalForSettlements === true
+			}))
+		})).with({ type: "RAW_SIGNING" }, (gov) => ({
+			type: "RAW_SIGNING",
+			policy: { rules: gov.rules.map(rawSigningRuleFromManifest) }
+		})).with({ type: "CLASSIC" }, (gov) => ({
+			type: "CLASSIC",
+			policy: { rules: gov.rules.map(govRuleFromManifest) }
+		})).with({ type: "POLICY" }, (gov) => ({
+			type: "CLASSIC",
+			policy: { policyId: policyIdFromName(gov.policy) }
+		})).exhaustive();
+		const accountData = {
+			name: account.name,
+			currency: account.currency,
+			contractAddress: account.contractAddress ?? null,
+			tokenIdentifier: account.tokenIdentifier ?? null,
+			index: account.index,
+			governance
+		};
+		if (existing) {
+			const editData = {
+				name: accountData.name,
+				governance
+			};
+			if (await editDomainObjectIfNeeded({
+				entityType: "Account",
+				entityName: account.name,
+				existingId: existing.id,
+				editInput: {
+					type: "EDIT_ACCOUNT",
+					targetId: existing.id,
+					data: editData
+				},
+				editData,
+				requestTypes: ["CREATE_ACCOUNT", "EDIT_ACCOUNT"],
+				extractLastData: (data) => ({
+					name: data.name,
+					governance: data.governance
+				})
+			}) === "skipped") await activateHederaAccount(account, workspace, existing.id);
+			return;
+		}
+		logStep(`Creating account "${account.name}"`);
+		const req = await createAndApproveRequest({
+			type: "CREATE_ACCOUNT",
+			data: accountData
+		}, [admin1, admin2], logger);
+		const createdAccount = await admin1.client.accounts.findById.query({ id: req.targetId });
+		existingAccounts.push(createdAccount);
+		if (account.governance.type === "TRADELINK") {
+			logStep(`Activating tradelink account "${account.name}"`);
+			const assetManagerId = assetManagerIdFromName(account.governance.assetManager);
+			const assetManager = existingTradelinkNetwork?.assetManagers.find((assetManager) => assetManager.id === assetManagerId);
+			(0, invariant.default)(assetManager, `Asset manager for account exists`);
+			const loggedAssetManagerOperators = await Promise.all(assetManager.groups.flatMap(({ quorum, userIds }) => userIds.slice(0, quorum).map((userId) => {
+				const deviceIndex = usersWithDeviceIndex.find((o) => o.user.id === userId)?.deviceIndex;
+				return workspaceEngine.withDeviceIndex(deviceIndex).login();
+			})));
+			await createAndApproveRequest({
+				type: "TRADELINK_ACTIVATE_ACCOUNT",
+				targetId: req.targetId,
+				data: null
+			}, loggedAssetManagerOperators, logger);
+		}
+		if (req.targetId) await activateHederaAccount(account, workspace, req.targetId);
+		logSubStep(`Account ${account.name} has been created`);
+	}
+	async function activateHederaAccount(account, workspace, accountId) {
+		if (account.currency === "hedera" && account.contractAddress === void 0 && workspace.hederaData && accountId) {
+			const salt = engine.__options.salt;
+			const hederaAccountData = workspace.hederaData[salt]?.find((h) => h.index === account.index && h.activate);
+			if (hederaAccountData) try {
+				await admin1.client.accounts.hedera.activateAccount.mutate({
+					id: accountId,
+					onchainId: hederaAccountData.onChainId
+				});
+				logSubStep(`Hedera account "${account.name}" has been activated`);
+			} catch (error) {
+				logger.warning(`Activation for "${account.name}" failed: ${error}`);
+			}
+		}
+	}
+	async function createUser(role, deviceIndex) {
+		const userEngine = workspaceEngine.withDeviceIndex(deviceIndex);
+		const deviceId = await userEngine.device.getDeviceUserId();
+		if (existingUsers.find((user) => user.deviceUserId === deviceId)) {
+			logger.info(`[SKIPPED] User with device index ${deviceIndex} already exists`);
+			return;
+		}
+		const name = `${role === "ADMIN" ? "Admin" : "Operator"} ${deviceIndex}`;
+		logStep(`Creating ${name}`);
+		logSubStep("Creating invitation...");
+		let registration = await admin1.client.userRegistrations.invite.mutate({
+			name,
+			role,
+			deviceUserId: deviceId,
+			psdModel: "STAX"
+		});
+		logSubStep("Completing registration...");
+		registration = await userEngine.register(registration);
+		logSubStep("Creating request...");
+		let req = await admin1.client.requests.create.mutate({ request: {
+			type: "CREATE_PSD_USER",
+			data: { registrationId: registration.id }
+		} });
+		req = await approveRequest(req, [admin1, admin2], logger);
+		logSubStep(`${name} has been created`);
+		const createdUser = await admin1.client.users.findById.query({ id: req.targetId });
+		existingUsers.push(createdUser);
+		usersWithDeviceIndex.push({
+			user: createdUser,
+			deviceIndex
+		});
+	}
+	async function createApiUser(apiUser) {
+		const pubKey = apiUser.pubKey ?? require_crypto.genKeys(apiUser.name).hexPubKey;
+		if (existingApiUsers.find((user) => user.pubKey === pubKey || user.name === apiUser.name)) {
+			logger.info(`[SKIPPED] API user already exists with name "${apiUser.name}" or public key "${pubKey}"`);
+			return;
+		}
+		logStep(`Creating API user "${apiUser.name}"...`);
+		logSubStep("Creating request...");
+		let req = await admin1.client.requests.create.mutate({ request: {
+			type: "CREATE_API_USER",
+			data: {
+				name: apiUser.name,
+				role: apiUser.role,
+				pubKey,
+				viewAll: apiUser.viewAll
+			}
+		} });
+		req = await approveRequest(req, [admin1, admin2], logger);
+		logSubStep(`API user "${apiUser.name}" has been created`);
+		logSubStep("Generating credentials...");
+		const credentials = await admin1.client.users.resetApiUserCredentials.mutate({ id: req.targetId });
+		logSubStep(`API user "${apiUser.name}" credentials have been generated: apiKeyId=${credentials.apiKeyId}, apiKeySecret=${credentials.apiKeySecret}`);
+		const createdUser = await admin1.client.users.findById.query({ id: req.targetId });
+		existingApiUsers.push(createdUser);
+	}
+	async function createGroup(group) {
+		const existing = existingGroups.find((g) => g.name === group.name);
+		const members = group.members.map(userIdFromDeviceIndexOrName);
+		const groupData = {
+			name: group.name,
+			description: "",
+			members
+		};
+		if (existing) {
+			await editDomainObjectIfNeeded({
+				entityType: "Group",
+				entityName: group.name,
+				existingId: existing.id,
+				editInput: {
+					type: "EDIT_GROUP",
+					targetId: existing.id,
+					data: groupData
+				},
+				editData: groupData,
+				requestTypes: ["CREATE_GROUP", "EDIT_GROUP"],
+				extractLastData: (data) => ({
+					...data,
+					description: data.description ?? ""
+				})
+			});
+			return;
+		}
+		logStep(`Creating group ${group.name}...`);
+		logSubStep("Creating request...");
+		let request = await admin1.client.requests.create.mutate({ request: {
+			type: "CREATE_GROUP",
+			data: groupData
+		} });
+		request = await approveRequest(request, [admin1, admin2], logger);
+		logSubStep(`${group.name} has been created`);
+		const createdGroup = await admin1.client.groups.findById.query({ id: request.targetId });
+		existingGroups.push(createdGroup);
+	}
+	async function createPolicy(policy) {
+		const existing = existingPolicies.find((p) => p.name === policy.name);
+		const policyEditData = {
+			name: policy.name,
+			description: "",
+			govRules: policy.rules.map(govRuleFromManifest)
+		};
+		if (existing) {
+			await editDomainObjectIfNeeded({
+				entityType: "Policy",
+				entityName: policy.name,
+				existingId: existing.id,
+				editInput: {
+					type: "EDIT_POLICY",
+					targetId: existing.id,
+					data: policyEditData
+				},
+				editData: policyEditData,
+				requestTypes: ["CREATE_POLICY", "EDIT_POLICY"],
+				extractLastData: (data) => ({
+					name: data.name,
+					description: data.description ?? "",
+					govRules: data.govRules
+				})
+			});
+			return;
+		}
+		logStep(`Creating policy ${policy.name}...`);
+		logSubStep("Creating request...");
+		let request = await admin1.client.requests.create.mutate({ request: {
+			type: "CREATE_POLICY",
+			data: {
+				...policyEditData,
+				currency: policy.currency
+			}
+		} });
+		request = await approveRequest(request, [admin1, admin2], logger);
+		logSubStep(`${policy.name} has been created`);
+		const createdPolicy = await admin1.client.policies.findById.query({ id: request.targetId });
+		existingPolicies.push(createdPolicy);
+	}
+	async function createWorkspaceRule(workspaceRule) {
+		const { permission, quorum, members } = workspaceRule;
+		logStep(`Editing workspace rule for ${permission}...`);
+		const userIds = members.map(userIdFromDeviceIndexOrName);
+		logSubStep("Creating request...");
+		await createAndApproveRequest({
+			type: "EDIT_WORKSPACE_RULE",
+			data: {
+				permission,
+				reviewConfig: [{
+					quorum,
+					userIds
+				}]
+			}
+		}, [admin1, admin2], logger);
+		logSubStep(`Workspace rule for "${permission}" has been edited`);
+	}
+	async function createEntity(entity) {
+		const existing = existingEntities.find((e) => e.name === entity.name);
+		const accountIds = (entity.accounts ?? []).map(accountIdFromName);
+		const memberIds = (entity.members ?? []).map(userIdFromUserName);
+		const entityEditData = {
+			name: entity.name,
+			accountIds,
+			memberIds
+		};
+		if (existing) {
+			await editDomainObjectIfNeeded({
+				entityType: "Entity",
+				entityName: entity.name,
+				existingId: existing.id,
+				editInput: {
+					type: "EDIT_ENTITY",
+					targetId: existing.id,
+					data: entityEditData
+				},
+				editData: entityEditData,
+				requestTypes: ["CREATE_ENTITY", "EDIT_ENTITY"],
+				extractLastData: (data) => ({
+					name: data.name,
+					accountIds: data.accountIds,
+					memberIds: data.memberIds
+				})
+			});
+			return;
+		}
+		logStep(`Creating entity "${entity.name}"...`);
+		const request = await createAndApproveRequest({
+			type: "CREATE_ENTITY",
+			data: entityEditData
+		}, [admin1, admin2], logger);
+		logSubStep(`Entity "${entity.name}" has been created`);
+		const createdEntity = await admin1.client.entities.findById.query({ id: request.targetId });
+		existingEntities.push(createdEntity);
+	}
+	async function createTradelink(tradelink) {
+		/* v8 ignore else -- @preserve */
+		if (tradelink.custodian) {
+			if (existingTradelinkNetwork === null) {
+				logStep("Creating custodian config...");
+				const { settlement, withdraw, arbitration } = tradelink.custodian;
+				const data = {
+					settlement: settlement.map(tradelinkReviewStepFromManifest),
+					withdraw: withdraw.map(tradelinkReviewStepFromManifest),
+					arbitration: arbitration.map(tradelinkReviewStepFromManifest)
+				};
+				logSubStep("Creating request...");
+				await approveRequest(await admin1.client.requests.create.mutate({ request: {
+					type: "TRADELINK_CREATE_CUSTODIAN",
+					data
+				} }), [admin1, admin2], logger);
+				logSubStep("Tradelink custodian config has been created");
+				existingTradelinkNetwork = await admin1.client.tradelink.getNetwork.query();
+			} else logger.info("[SKIPPED] Custodian config already exists");
+			const networkBlueprint = await admin1.client.tradelink.getNetworkBlueprint.query();
+			if (networkBlueprint !== null) {
+				/* v8 ignore else -- @preserve */
+				if (tradelink.exchanges !== void 0) await createTradelinkExchanges(networkBlueprint, tradelink.exchanges);
+				/* v8 ignore else -- @preserve */
+				if (tradelink.assetManagers !== void 0) await createTradelinkAssetManagers(networkBlueprint, tradelink.assetManagers);
+			} else logger.error("Will not create exchanges and asset managers because there is no network blueprint for current workspace");
+		}
+	}
+	async function createTradelinkExchanges(networkBlueprint, exchanges) {
+		(0, invariant.default)(existingTradelinkNetwork !== null, "Network should exist");
+		const blueprintExchanges = networkBlueprint.exchanges;
+		for (const exchange of exchanges) {
+			const blueprintExchange = blueprintExchanges.find(({ name }) => name === exchange.name);
+			(0, invariant.default)(blueprintExchange !== void 0, `Exchange ${exchange.name} does not exist in network blueprint`);
+			const exchangeId = blueprintExchange.tradelinkId;
+			logStep(`Creating exchange ${exchange.name}...`);
+			if (existingTradelinkNetwork.exchanges.find(({ tradelinkId }) => tradelinkId === exchangeId) !== void 0) {
+				logger.info(`[SKIPPED] Exchange "${exchange.name}" already exists`);
+				continue;
+			}
+			logSubStep("Creating request...");
+			await approveRequest(await admin1.client.requests.create.mutate({ request: {
+				type: "TRADELINK_CREATE_EXCHANGE",
+				data: {
+					tradelinkId: exchangeId,
+					groups: exchange.groups.map(tradelinkReviewStepFromManifest),
+					whitelist: exchange.whitelist
+				}
+			} }), [
+				admin1,
+				admin2,
+				...await Promise.all(exchange.groups.flatMap(({ quorum, members }) => members.slice(0, quorum).map((deviceIndex) => workspaceEngine.withDeviceIndex(deviceIndex).login())))
+			], logger);
+			existingTradelinkNetwork = await admin1.client.tradelink.getNetwork.query();
+			(0, invariant.default)(existingTradelinkNetwork !== null, "Tradelink network exists");
+		}
+	}
+	async function createTradelinkAssetManagers(networkBlueprint, assetManagers) {
+		(0, invariant.default)(existingTradelinkNetwork !== null, "Network should exist");
+		const blueprintAssetManagers = networkBlueprint.assetManagers;
+		for (const assetManager of assetManagers) {
+			const blueprintAssetManager = blueprintAssetManagers.find(({ name }) => name === assetManager.name);
+			(0, invariant.default)(blueprintAssetManager !== void 0, `AssetManager ${assetManager.name} does not exist in network blueprint`);
+			const assetManagerId = blueprintAssetManager.tradelinkId;
+			logStep(`Creating assetManager ${assetManager.name}...`);
+			if (existingTradelinkNetwork.assetManagers.find(({ tradelinkId }) => tradelinkId === assetManagerId) !== void 0) {
+				logger.info(`[SKIPPED] Asset manager "${assetManager.name}" already exists`);
+				continue;
+			}
+			logSubStep("Creating request...");
+			await approveRequest(await admin1.client.requests.create.mutate({ request: {
+				type: "TRADELINK_CREATE_ASSET_MANAGER",
+				data: {
+					tradelinkId: assetManagerId,
+					groups: assetManager.groups.map(tradelinkReviewStepFromManifest),
+					whitelist: assetManager.whitelist
+				}
+			} }), [
+				admin1,
+				admin2,
+				...await Promise.all(assetManager.groups.flatMap(({ quorum, members }) => members.slice(0, quorum).map((deviceIndex) => workspaceEngine.withDeviceIndex(deviceIndex).login())))
+			], logger);
+			existingTradelinkNetwork = await admin1.client.tradelink.getNetwork.query();
+			(0, invariant.default)(existingTradelinkNetwork !== null, "Tradelink network exists");
+		}
+	}
+	async function resolveDevicesIndexes(users) {
+		return await users.reduce((acc, cur) => acc.then(async (acc) => {
+			acc.push(await withDeviceIndex(cur));
+			return acc;
+		}), Promise.resolve([]));
+	}
+	async function withDeviceIndex(user) {
+		(0, invariant.default)(user.deviceUserId, `User ${user.id} does not have any device user id`);
+		return {
+			user,
+			deviceIndex: await findDeviceIndex(user.deviceUserId)
+		};
+	}
+	function userIdFromDeviceIndex(deviceIndex) {
+		const corresponding = usersWithDeviceIndex.find((o) => o.deviceIndex === deviceIndex);
+		(0, invariant.default)(corresponding, `No user with device index ${deviceIndex}`);
+		return corresponding.user.id;
+	}
+	function userIdFromUserName(name) {
+		const user = existingApiUsers.find((u) => u.name === name);
+		(0, invariant.default)(user, `User ${name} not found`);
+		return user.id;
+	}
+	function userIdFromDeviceIndexOrName(identifier) {
+		if (typeof identifier === "number") return userIdFromDeviceIndex(identifier);
+		return userIdFromUserName(identifier);
+	}
+	function groupIdFromName(groupName) {
+		const group = existingGroups.find((g) => g.name === groupName);
+		(0, invariant.default)(group, `Group ${groupName} not found`);
+		return group.id;
+	}
+	function policyIdFromName(policyName) {
+		const policy = existingPolicies.find((g) => g.name === policyName);
+		(0, invariant.default)(policy, `Policy ${policyName} not found`);
+		return policy.id;
+	}
+	function whitelistIdFromName(whitelistName) {
+		const whitelist = existingWhitelists.find((w) => w.name === whitelistName);
+		(0, invariant.default)(whitelist, `Whitelist ${whitelistName} not found`);
+		return whitelist.id;
+	}
+	function accountIdFromName(accountName) {
+		const account = existingAccounts.find((a) => a.name === accountName);
+		(0, invariant.default)(account, `Account "${accountName}" not found`);
+		return account.id;
+	}
+	function assetManagerIdFromName(assetManagerName) {
+		const orgAssetManager = tradelinkOrgAssetManagersByName[assetManagerName];
+		(0, invariant.default)(orgAssetManager, `Can't find Tradelink organization asset manager ${assetManagerName}`);
+		const assetManager = existingTradelinkNetwork?.assetManagers.find((assetManager) => assetManager.tradelinkId === orgAssetManager.tradelinkId);
+		(0, invariant.default)(assetManager, `Can't find Tradelink assetManager ${assetManagerName}`);
+		return assetManager.id;
+	}
+	function exchangeIdFromName(exchangeName) {
+		const exchange = existingTradelinkNetwork?.exchanges.find((exchange) => {
+			const orgExchange = tradelinkOrgExchangesByName[exchangeName];
+			(0, invariant.default)(orgExchange, `Can't find Tradelink organization exchange ${exchange.tradelinkId}`);
+			return orgExchange.name === exchangeName;
+		});
+		(0, invariant.default)(exchange, `Can't find Tradelink exchange ${exchangeName}`);
+		return exchange.id;
+	}
+	function tradelinkReviewStepFromManifest({ members, quorum }) {
+		return {
+			userIds: members.map(userIdFromDeviceIndex),
+			quorum
+		};
+	}
 }
-
-// src/bake/types.ts
-var _zod = require('zod'); var _zod2 = _interopRequireDefault(_zod);
-var zManifestUser = _zod2.default.number().meta({ description: "User device index" });
-var zManifestUserName = _zod2.default.string().meta({ description: "User name" });
-var zManifestApiUser = _zod2.default.object({
-  name: _zod2.default.string().meta({ description: "API user name" }),
-  role: _zod2.default.enum(["ADMIN", "OPERATOR"]).meta({ description: "API user role" }).default("OPERATOR"),
-  pubKey: _zod2.default.string().meta({
-    description: "API user public key. If not provided, one will be generated using the name as entropy"
-  }).optional(),
-  viewAll: _zod2.default.boolean().meta({ description: "Whether the API user can view all accounts" })
+//#endregion
+//#region src/bake/recipe-workspace.ts
+async function recipeWorkspace(options, logger) {
+	const { engine, workspaceName } = options;
+	const workspaceEngine = engine.withWorkspace(workspaceName);
+	const findDeviceIndex = require_utils.createDeviceIndexResolver(workspaceEngine);
+	logger.info("Authenticating with admin...");
+	const admin = await workspaceEngine.withDeviceIndex(4).login();
+	logger.info("Fetching existing data...");
+	const [existingUsers, existingGroups, existingWhitelists, publicPolicies, privatePolicies, existingAccounts, existingEntities, existingWorkspaceRules] = await Promise.all([
+		require_utils.fetchAll(admin.client.users.list.query, { status: "ACTIVE" }),
+		require_utils.fetchAll(admin.client.groups.list.query, { status: "ACTIVE" }),
+		require_utils.fetchAll(admin.client.whitelists.list.query, { status: "ACTIVE" }),
+		require_utils.fetchAll(admin.client.policies.list.query, { isPrivate: false }),
+		require_utils.fetchAll(admin.client.policies.list.query, { isPrivate: true }),
+		require_utils.fetchAll(admin.client.accounts.list.query, { status: "ACTIVE" }),
+		require_utils.fetchAll(admin.client.entities.list.query, { status: "ACTIVE" }),
+		admin.client.governance.listWorkspaceRules.query()
+	]);
+	const existingPolicies = [...publicPolicies, ...privatePolicies];
+	const existingPsdUsers = existingUsers.filter((user) => user.deviceType === "PSD");
+	const existingApiUsers = existingUsers.filter((user) => user.deviceType === "API");
+	logger.info("Resolving device indexes...");
+	const psdUsersWithIndex = await resolveDevicesIndexes(existingPsdUsers);
+	logger.info("Reading users...");
+	const adminIndexes = psdUsersWithIndex.filter((u) => u.user.role === "ADMIN").map((u) => u.deviceIndex);
+	const operatorIndexes = psdUsersWithIndex.filter((u) => u.user.role === "OPERATOR").map((u) => u.deviceIndex);
+	const apiUsers = existingApiUsers.map((user) => {
+		const role = (0, ts_pattern.match)(user.role).with("ADMIN", "OPERATOR", (role) => role).with("READ_ONLY_API_KEY", (role) => {
+			throw new Error(`Unexpected API user role "${role}" for user ${user.name}`);
+		}).exhaustive();
+		return {
+			name: user.name,
+			role,
+			pubKey: user.pubKey,
+			viewAll: user.legacyViewAll
+		};
+	});
+	logger.info("Reading groups...");
+	const groups = existingGroups.map((group) => ({
+		name: group.name,
+		members: group.members.map((member) => resolveUserIdentifier(member.id))
+	}));
+	logger.info("Reading whitelists...");
+	const whitelists = existingWhitelists.map((whitelist) => ({
+		name: whitelist.name,
+		description: whitelist.description ?? void 0,
+		type: "TRANSACTION",
+		addresses: whitelist.addresses.map((addr) => ({
+			name: addr.name,
+			currency: addr.currency,
+			address: addr.address,
+			...addr.destinationTags?.length ? { destinationTags: addr.destinationTags } : {}
+		}))
+	}));
+	logger.info("Reading policies...");
+	const policies = publicPolicies.map((policy) => ({
+		name: policy.name,
+		currency: policy.currency,
+		rules: policy.rules.map(govRuleToManifest)
+	}));
+	logger.info("Reading accounts...");
+	const accounts = existingAccounts.map((account) => {
+		const governance = (0, ts_pattern.match)(account.governance).with({ type: "CLASSIC" }, (gov) => {
+			const policy = existingPolicies.find((p) => p.id === gov.policyId);
+			(0, invariant.default)(policy, `Policy ${gov.policyId} not found for account ${account.name}`);
+			return policy.isPrivate ? {
+				type: "CLASSIC",
+				rules: policy.rules.map(govRuleToManifest)
+			} : {
+				type: "POLICY",
+				policy: policy.name
+			};
+		}).with({ type: "RAW_SIGNING" }, (gov) => {
+			const policy = existingPolicies.find((p) => p.id === gov.policyId);
+			(0, invariant.default)(policy, `Policy ${gov.policyId} not found for account ${account.name}`);
+			return {
+				type: "RAW_SIGNING",
+				rules: policy.rules.map((rule) => ({
+					type: "SIGN_DIGESTS",
+					steps: rule.reviewSteps.map((step) => {
+						(0, invariant.default)("userIds" in step, "RAW_SIGNING rules only support user steps");
+						return {
+							quorum: step.quorum,
+							members: step.userIds.map(resolveUserToDeviceIndexOrName)
+						};
+					})
+				}))
+			};
+		}).with({ type: "TRADELINK" }, (gov) => ({
+			type: "TRADELINK",
+			assetManager: resolveAssetManagerName(gov.assetManagerId),
+			exchanges: gov.exchangeConfigs.map((exchangeConfig) => ({
+				name: resolveExchangeName(exchangeConfig.exchangeId),
+				...exchangeConfig.repledgeAuthorized ? { repledgeAuthorized: true } : {},
+				...exchangeConfig.needsAssetManagerApprovalForSettlements ? { needsAssetManagerApprovalForSettlements: true } : {}
+			}))
+		})).exhaustive();
+		return {
+			name: account.name,
+			currency: account.currency,
+			index: account.index,
+			...account.contractAddress ? { contractAddress: account.contractAddress } : {},
+			...account.tokenIdentifier ? { tokenIdentifier: account.tokenIdentifier } : {},
+			governance
+		};
+	});
+	logger.info("Reading entities...");
+	const entities = existingEntities.map((entity) => ({
+		name: entity.name,
+		...entity.accountIds.length > 0 ? { accounts: entity.accountIds.map(accountNameFromId) } : {},
+		...entity.memberIds.length > 0 ? { members: entity.memberIds.map(userNameFromId) } : {}
+	}));
+	logger.info("Reading workspace rules...");
+	const workspaceRules = existingWorkspaceRules.results.filter((rule) => rule.permission !== "ROOT").map((rule) => {
+		(0, invariant.default)(rule.reviewSteps.length === 1, "Only one review step supported for workspace rules in manifest");
+		const step = rule.reviewSteps[0];
+		const quorum = step.quorum;
+		(0, invariant.default)(rule.permission !== "ROOT", "filtered out");
+		return {
+			permission: rule.permission,
+			quorum,
+			members: step.userIds.map(resolveUserToDeviceIndexOrName)
+		};
+	});
+	const workspace = {
+		users: {
+			...adminIndexes.length > 0 ? { admins: adminIndexes } : {},
+			...operatorIndexes.length > 0 ? { operators: operatorIndexes } : {},
+			...apiUsers.length > 0 ? { api: apiUsers } : {}
+		},
+		...groups.length > 0 ? { groups } : {},
+		...whitelists.length > 0 ? { whitelists } : {},
+		...policies.length > 0 ? { policies } : {},
+		...accounts.length > 0 ? { accounts } : {},
+		...entities.length > 0 ? { entities } : {},
+		...workspaceRules.length > 0 ? { workspaceRules } : {}
+	};
+	logger.info("Recipe completed");
+	return workspace;
+	async function resolveDevicesIndexes(users) {
+		const result = [];
+		for (const user of users) {
+			(0, invariant.default)(user.deviceUserId, `User ${user.id} does not have any device user id`);
+			const deviceIndex = await findDeviceIndex(user.deviceUserId);
+			result.push({
+				user,
+				deviceIndex
+			});
+		}
+		return result;
+	}
+	function resolveUserIdentifier(userId) {
+		const psdUser = psdUsersWithIndex.find((u) => u.user.id === userId);
+		if (psdUser) return psdUser.deviceIndex;
+		const apiUser = existingApiUsers.find((u) => u.id === userId);
+		if (apiUser) return apiUser.name;
+		throw new Error(`User ${userId} not found`);
+	}
+	function resolveUserToDeviceIndexOrName(userId) {
+		return resolveUserIdentifier(userId);
+	}
+	function validateGovernanceRuleType(value) {
+		(0, invariant.default)([
+			"SEND",
+			"STAKE",
+			"DEPLOY_CONTRACT",
+			"EXECUTE_CONTRACT",
+			"SIGN_MESSAGE",
+			"RECEIVE"
+		].includes(value), "Unexpected governance rule type: " + value);
+		return value;
+	}
+	function govRuleToManifest(rule) {
+		const operationType = validateGovernanceRuleType(rule.operationType);
+		const threshold = rule.threshold !== void 0 && (rule.threshold.min !== null || rule.threshold.max !== null) ? { threshold: {
+			min: rule.threshold.min,
+			max: rule.threshold.max
+		} } : {};
+		return {
+			type: operationType,
+			steps: rule.reviewSteps.map((step) => {
+				if ("groupId" in step) {
+					const group = existingGroups.find((g) => g.id === step.groupId);
+					(0, invariant.default)(group, `Group ${step.groupId} not found`);
+					return {
+						quorum: step.quorum,
+						group: group.name
+					};
+				}
+				return {
+					quorum: step.quorum,
+					members: step.userIds.map(resolveUserToDeviceIndexOrName)
+				};
+			}),
+			...threshold,
+			...rule.whitelistIds && rule.whitelistIds.length > 0 ? { whitelistNames: rule.whitelistIds.map(whitelistNameFromId) } : {}
+		};
+	}
+	function whitelistNameFromId(whitelistId) {
+		const whitelist = existingWhitelists.find((w) => w.id === whitelistId);
+		(0, invariant.default)(whitelist, `Whitelist ${whitelistId} not found`);
+		return whitelist.name;
+	}
+	function accountNameFromId(accountId) {
+		const account = existingAccounts.find((a) => a.id === accountId);
+		(0, invariant.default)(account, `Account ${accountId} not found`);
+		return account.name;
+	}
+	function userNameFromId(userId) {
+		const user = existingApiUsers.find((u) => u.id === userId);
+		(0, invariant.default)(user, `API user ${userId} not found`);
+		return user.name;
+	}
+	function resolveAssetManagerName(assetManagerId) {
+		return assetManagerId;
+	}
+	function resolveExchangeName(exchangeId) {
+		return exchangeId;
+	}
+}
+//#endregion
+//#region src/bake/recipe.ts
+async function recipeManifest(options, logger) {
+	return {
+		manifestVersion: 2,
+		workspace: await recipeWorkspace(options, logger)
+	};
+}
+//#endregion
+//#region src/bake/types.ts
+const zManifestUser = zod.default.number().meta({ description: "User device index" });
+const zManifestUserName = zod.default.string().meta({ description: "User name" });
+const zManifestApiUser = zod.default.object({
+	name: zod.default.string().meta({ description: "API user name" }),
+	role: zod.default.enum(["ADMIN", "OPERATOR"]).meta({ description: "API user role" }).default("OPERATOR"),
+	pubKey: zod.default.string().meta({ description: "API user public key. If not provided, one will be generated using the name as entropy" }).optional(),
+	viewAll: zod.default.boolean().meta({ description: "Whether the API user can view all accounts" })
 });
-var zManifestGroup = _zod2.default.object({
-  name: _zod2.default.string().meta({ description: "Group name" }),
-  members: _zod2.default.array(_zod2.default.union([zManifestUser, zManifestUserName])).meta({ description: "Group members" })
+const zManifestGroup = zod.default.object({
+	name: zod.default.string().meta({ description: "Group name" }),
+	members: zod.default.array(zod.default.union([zManifestUser, zManifestUserName])).meta({ description: "Group members" })
 }).strict().meta({ description: "Operators group" });
-var zManifestWhitelistAddress = _zod2.default.object({
-  name: _zod2.default.string().meta({ description: "Whitelist address name" }),
-  currency: _zod2.default.string().meta({ description: "Whitelist address currency" }),
-  address: _zod2.default.string().meta({ description: "Whitelist address" }),
-  destinationTags: _zod2.default.array(_zod2.default.string()).optional().meta({ description: "List of destination tags (applicable for Ripple currency)" })
+const zManifestWhitelistAddress = zod.default.object({
+	name: zod.default.string().meta({ description: "Whitelist address name" }),
+	currency: zod.default.string().meta({ description: "Whitelist address currency" }),
+	address: zod.default.string().meta({ description: "Whitelist address" }),
+	destinationTags: zod.default.array(zod.default.string()).optional().meta({ description: "List of destination tags (applicable for Ripple currency)" })
 }).strict();
-var zManifestWhitelist = _zod2.default.object({
-  name: _zod2.default.string().meta({ description: "Whitelist name" }),
-  description: _zod2.default.string().optional().default("").meta({ description: "Whitelist description" }),
-  type: _zod2.default.enum(["TRANSACTION", "SMART_CONTRACT"]).optional().default("TRANSACTION").meta({ description: "Whitelist type" }),
-  addresses: _zod2.default.array(zManifestWhitelistAddress).meta({ description: "Whitelist addresses" })
+const zManifestWhitelist = zod.default.object({
+	name: zod.default.string().meta({ description: "Whitelist name" }),
+	description: zod.default.string().optional().meta({ description: "Whitelist description" }),
+	type: zod.default.enum(["TRANSACTION", "SMART_CONTRACT"]).optional().default("TRANSACTION").meta({ description: "Whitelist type" }),
+	addresses: zod.default.array(zManifestWhitelistAddress).meta({ description: "Whitelist addresses" })
 }).strict().meta({ description: "Whitelist" });
-var zManifestGovernanceStepWithUsers = _zod2.default.object({
-  quorum: _zod2.default.number(),
-  members: _zod2.default.array(_zod2.default.union([zManifestUser, zManifestUserName]))
+const zManifestGovernanceStepWithUsers = zod.default.object({
+	quorum: zod.default.number(),
+	members: zod.default.array(zod.default.union([zManifestUser, zManifestUserName]))
 }).strict();
-var zManifestGovernanceStepWithGroup = _zod2.default.object({
-  quorum: _zod2.default.number(),
-  group: _zod2.default.string()
+const zManifestGovernanceStepWithGroup = zod.default.object({
+	quorum: zod.default.number(),
+	group: zod.default.string()
 }).strict();
-var zManifestGovernanceStep = _zod2.default.union([
-  zManifestGovernanceStepWithUsers,
-  zManifestGovernanceStepWithGroup
-]);
-var zManifestGovernanceRule = _zod2.default.object({
-  // TODO see if there is a way to import this from `api` package
-  // (the challenge there is that enums are not transpiled)
-  type: _zod2.default.enum([
-    "SEND",
-    "STAKE",
-    "DEPLOY_CONTRACT",
-    "EXECUTE_CONTRACT",
-    "SIGN_MESSAGE",
-    "RECEIVE"
-  ]),
-  steps: _zod2.default.array(zManifestGovernanceStep).min(1),
-  threshold: _zod2.default.object({
-    min: _zod2.default.string(),
-    max: _zod2.default.string()
-  }).optional(),
-  whitelistNames: _zod2.default.array(_zod2.default.string()).optional()
+const zManifestGovernanceStep = zod.default.union([zManifestGovernanceStepWithUsers, zManifestGovernanceStepWithGroup]);
+const zManifestGovernanceRule = zod.default.object({
+	type: zod.default.enum([
+		"SEND",
+		"STAKE",
+		"DEPLOY_CONTRACT",
+		"EXECUTE_CONTRACT",
+		"SIGN_MESSAGE",
+		"RECEIVE"
+	]),
+	steps: zod.default.array(zManifestGovernanceStep).min(1),
+	threshold: zod.default.object({
+		min: zod.default.string().nullable(),
+		max: zod.default.string().nullable()
+	}).optional(),
+	whitelistNames: zod.default.array(zod.default.string()).optional()
 }).strict();
-var zManifestPolicy = _zod2.default.object({
-  name: _zod2.default.string(),
-  currency: _zod2.default.string().nullable(),
-  rules: _zod2.default.array(zManifestGovernanceRule)
+const zManifestPolicy = zod.default.object({
+	name: zod.default.string(),
+	currency: zod.default.string().nullable(),
+	rules: zod.default.array(zManifestGovernanceRule)
 }).strict();
-var zManifestClassicAccountGovernance = _zod2.default.object({
-  type: _zod2.default.literal("CLASSIC"),
-  rules: _zod2.default.array(zManifestGovernanceRule)
+const zManifestClassicAccountGovernance = zod.default.object({
+	type: zod.default.literal("CLASSIC"),
+	rules: zod.default.array(zManifestGovernanceRule)
 }).strict();
-var zManifestClassicAccountGovernanceWithPolicy = _zod2.default.object({
-  type: _zod2.default.literal("POLICY"),
-  policy: _zod2.default.string()
+const zManifestClassicAccountGovernanceWithPolicy = zod.default.object({
+	type: zod.default.literal("POLICY"),
+	policy: zod.default.string()
 }).strict();
-var zManifestTradelinkExchangeConfig = _zod2.default.object({
-  name: _zod2.default.string().meta({ description: "Exchange name" }),
-  repledgeAuthorized: _zod2.default.boolean().optional().meta({ description: "Whether repledge is authorized" }),
-  needsAssetManagerApprovalForSettlements: _zod2.default.boolean().optional().meta({ description: "Whether asset manager pre approval is needed" })
+const zManifestTradelinkExchangeConfig = zod.default.object({
+	name: zod.default.string().meta({ description: "Exchange name" }),
+	repledgeAuthorized: zod.default.boolean().optional().meta({ description: "Whether repledge is authorized" }),
+	needsAssetManagerApprovalForSettlements: zod.default.boolean().optional().meta({ description: "Whether asset manager pre approval is needed" })
 }).strict();
-var zManifestTradelinkAccountGovernance = _zod2.default.object({
-  type: _zod2.default.literal("TRADELINK"),
-  assetManager: _zod2.default.string().meta({ description: "Asset manager name" }),
-  exchanges: _zod2.default.array(zManifestTradelinkExchangeConfig)
+const zManifestTradelinkAccountGovernance = zod.default.object({
+	type: zod.default.literal("TRADELINK"),
+	assetManager: zod.default.string().meta({ description: "Asset manager name" }),
+	exchanges: zod.default.array(zManifestTradelinkExchangeConfig)
 }).strict();
-var zManifestRawSigningGovernanceRule = _zod2.default.object({
-  type: _zod2.default.literal("SIGN_DIGESTS"),
-  steps: _zod2.default.array(zManifestGovernanceStepWithUsers).min(1)
+const zManifestRawSigningGovernanceRule = zod.default.object({
+	type: zod.default.literal("SIGN_DIGESTS"),
+	steps: zod.default.array(zManifestGovernanceStepWithUsers).min(1)
 }).strict();
-var zManifestRawSigningAccountGovernance = _zod2.default.object({
-  type: _zod2.default.literal("RAW_SIGNING"),
-  rules: _zod2.default.array(zManifestRawSigningGovernanceRule)
+const zManifestRawSigningAccountGovernance = zod.default.object({
+	type: zod.default.literal("RAW_SIGNING"),
+	rules: zod.default.array(zManifestRawSigningGovernanceRule)
 }).strict();
-var zManifestAccountGovernance = _zod2.default.discriminatedUnion("type", [
-  zManifestClassicAccountGovernance,
-  zManifestTradelinkAccountGovernance,
-  zManifestRawSigningAccountGovernance,
-  zManifestClassicAccountGovernanceWithPolicy
+const zManifestAccountGovernance = zod.default.discriminatedUnion("type", [
+	zManifestClassicAccountGovernance,
+	zManifestTradelinkAccountGovernance,
+	zManifestRawSigningAccountGovernance,
+	zManifestClassicAccountGovernanceWithPolicy
 ]);
-var zManifestAccount = _zod2.default.object({
-  name: _zod2.default.string(),
-  currency: _zod2.default.string(),
-  index: _zod2.default.number().nonnegative(),
-  contractAddress: _zod2.default.string().optional(),
-  tokenIdentifier: _zod2.default.string().optional(),
-  governance: zManifestAccountGovernance
+const zManifestAccount = zod.default.object({
+	name: zod.default.string(),
+	currency: zod.default.string(),
+	index: zod.default.number().nonnegative(),
+	contractAddress: zod.default.string().optional(),
+	tokenIdentifier: zod.default.string().optional(),
+	governance: zManifestAccountGovernance
 }).strict();
-var zManifestHederaData = _zod2.default.object({
-  index: _zod2.default.number(),
-  onChainId: _zod2.default.string(),
-  activate: _zod2.default.boolean().default(true)
+const zManifestEntity = zod.default.object({
+	name: zod.default.string().min(1).max(19).meta({ description: "Entity name" }),
+	accounts: zod.default.array(zod.default.string()).optional().meta({ description: "Account names to include in this entity" }),
+	members: zod.default.array(zod.default.string()).optional().meta({ description: "API operator names to include in this entity" })
+}).strict().meta({ description: "Entity" });
+const zManifestHederaData = zod.default.object({
+	index: zod.default.number(),
+	onChainId: zod.default.string(),
+	activate: zod.default.boolean().default(true)
 }).strict();
-var zManifestPledgeAdjustment = _zod2.default.object({
-  account: _zod2.default.string(),
-  exchange: _zod2.default.string(),
-  amount: _zod2.default.string()
+const zManifestPledgeAdjustment = zod.default.object({
+	account: zod.default.string(),
+	exchange: zod.default.string(),
+	amount: zod.default.string()
 }).strict();
-var zManifestTradelinkGroup = _zod2.default.object({
-  members: _zod2.default.array(zManifestUser),
-  quorum: _zod2.default.number()
+const zManifestTradelinkGroup = zod.default.object({
+	members: zod.default.array(zManifestUser),
+	quorum: zod.default.number()
 }).strict().meta({ description: "Tradelink group" });
-var zManifestTradelinkGroups = _zod2.default.array(zManifestTradelinkGroup);
-var zManifestTradelinkWhitelistAddress = _zod2.default.object({
-  name: _zod2.default.string().min(1),
-  currency: _zod2.default.string().min(1),
-  address: _zod2.default.string().min(1)
+const zManifestTradelinkGroups = zod.default.array(zManifestTradelinkGroup);
+const zManifestTradelinkWhitelistAddress = zod.default.object({
+	name: zod.default.string().min(1),
+	currency: zod.default.string().min(1),
+	address: zod.default.string().min(1)
 }).strict().meta({ description: "Tradelink whitelist address" });
-var zManifestTradelinkWhitelist = _zod2.default.array(zManifestTradelinkWhitelistAddress).meta({ description: "Tradelink whitelist" });
-var zManifestTradelinkEntity = _zod2.default.object({
-  name: _zod2.default.string(),
-  groups: zManifestTradelinkGroups,
-  whitelist: zManifestTradelinkWhitelist
+const zManifestTradelinkWhitelist = zod.default.array(zManifestTradelinkWhitelistAddress).meta({ description: "Tradelink whitelist" });
+const zManifestTradelinkEntity = zod.default.object({
+	name: zod.default.string(),
+	groups: zManifestTradelinkGroups,
+	whitelist: zManifestTradelinkWhitelist
 }).strict();
-var zManifestTradelinkCustodian = _zod2.default.object({
-  settlement: zManifestTradelinkGroups,
-  withdraw: zManifestTradelinkGroups,
-  arbitration: zManifestTradelinkGroups
+const zManifestTradelinkCustodian = zod.default.object({
+	settlement: zManifestTradelinkGroups,
+	withdraw: zManifestTradelinkGroups,
+	arbitration: zManifestTradelinkGroups
 }).strict();
-var zManifestTradelinkNetworkBlueprint = _zod2.default.object({
-  custodian: _zod2.default.string(),
-  exchanges: _zod2.default.array(_zod2.default.string()),
-  assetManagers: _zod2.default.array(_zod2.default.string())
+const zManifestTradelinkNetworkBlueprint = zod.default.object({
+	custodian: zod.default.string(),
+	exchanges: zod.default.array(zod.default.string()),
+	assetManagers: zod.default.array(zod.default.string())
 }).strict();
-var zManifestTradelinkNetwork = _zod2.default.object({
-  networkBlueprint: zManifestTradelinkNetworkBlueprint.optional(),
-  custodian: zManifestTradelinkCustodian.optional(),
-  exchanges: _zod2.default.array(zManifestTradelinkEntity).optional(),
-  assetManagers: _zod2.default.array(zManifestTradelinkEntity).optional()
+const zManifestTradelinkNetwork = zod.default.object({
+	networkBlueprint: zManifestTradelinkNetworkBlueprint.optional(),
+	custodian: zManifestTradelinkCustodian.optional(),
+	exchanges: zod.default.array(zManifestTradelinkEntity).optional(),
+	assetManagers: zod.default.array(zManifestTradelinkEntity).optional()
 }).strict().meta({ description: "Tradelink network configuration" });
-var zManifestWorkspaceRule = _zod2.default.object({
-  permission: _zod2.default.enum(["CREATE_ACCOUNT_WITH_POLICY"]),
-  quorum: _zod2.default.number().min(1),
-  members: _zod2.default.array(_zod2.default.union([zManifestUser, zManifestUserName]))
+const zManifestWorkspaceRule = zod.default.object({
+	permission: zod.default.enum(["CREATE_ACCOUNT_WITH_POLICY"]),
+	quorum: zod.default.number().min(1),
+	members: zod.default.array(zod.default.union([zManifestUser, zManifestUserName]))
 }).strict().meta({ description: "Workspace rule for granting permissions" });
-var zManifestWorkspace = _zod2.default.object({
-  tradelink: zManifestTradelinkNetwork.optional(),
-  users: _zod2.default.object({
-    admins: _zod2.default.array(zManifestUser).optional(),
-    operators: _zod2.default.array(zManifestUser).optional(),
-    api: _zod2.default.array(zManifestApiUser).optional()
-  }).optional(),
-  groups: _zod2.default.array(zManifestGroup).optional(),
-  whitelists: _zod2.default.array(zManifestWhitelist).optional(),
-  policies: _zod2.default.array(zManifestPolicy).optional(),
-  accounts: _zod2.default.array(zManifestAccount).optional(),
-  hederaData: _zod2.default.record(_zod2.default.string(), _zod2.default.array(zManifestHederaData)).optional(),
-  pledges: _zod2.default.array(zManifestPledgeAdjustment).optional(),
-  workspaceRules: _zod2.default.array(zManifestWorkspaceRule).optional()
+const zManifestWorkspace = zod.default.object({
+	tradelink: zManifestTradelinkNetwork.optional(),
+	users: zod.default.object({
+		admins: zod.default.array(zManifestUser).optional(),
+		operators: zod.default.array(zManifestUser).optional(),
+		api: zod.default.array(zManifestApiUser).optional()
+	}).optional(),
+	groups: zod.default.array(zManifestGroup).optional(),
+	whitelists: zod.default.array(zManifestWhitelist).optional(),
+	policies: zod.default.array(zManifestPolicy).optional(),
+	accounts: zod.default.array(zManifestAccount).optional(),
+	entities: zod.default.array(zManifestEntity).optional(),
+	hederaData: zod.default.record(zod.default.string(), zod.default.array(zManifestHederaData)).optional(),
+	pledges: zod.default.array(zManifestPledgeAdjustment).optional(),
+	workspaceRules: zod.default.array(zManifestWorkspaceRule).optional()
 }).strict().meta({ description: "Workspace configuration" });
-var zManifestTradelinkOrgEntity = _zod2.default.object({
-  name: _zod2.default.string(),
-  code: _zod2.default.string(),
-  logo: _zod2.default.string()
+const zManifestTradelinkOrgEntity = zod.default.object({
+	name: zod.default.string(),
+	code: zod.default.string(),
+	logo: zod.default.string()
 }).strict().meta({ description: "Tradelink organization entity" });
-var zManifestTradelinkOrg = _zod2.default.object({
-  exchanges: _zod2.default.array(zManifestTradelinkOrgEntity).optional(),
-  assetManagers: _zod2.default.array(zManifestTradelinkOrgEntity).optional(),
-  custodians: _zod2.default.array(zManifestTradelinkOrgEntity).optional()
+const zManifestTradelinkOrg = zod.default.object({
+	exchanges: zod.default.array(zManifestTradelinkOrgEntity).optional(),
+	assetManagers: zod.default.array(zManifestTradelinkOrgEntity).optional(),
+	custodians: zod.default.array(zManifestTradelinkOrgEntity).optional()
 }).strict().meta({ description: "Tradelink organization configuration" });
-var zManifest = _zod2.default.object({
-  manifestVersion: _zod2.default.literal(2),
-  tradelink: zManifestTradelinkOrg.optional(),
-  workspace: zManifestWorkspace.optional()
+const zManifest = zod.default.object({
+	manifestVersion: zod.default.literal(2),
+	tradelink: zManifestTradelinkOrg.optional(),
+	workspace: zManifestWorkspace.optional()
 }).strict();
-
-// src/bake/index.ts
+//#endregion
+//#region src/bake/index.ts
 async function bakeManifest(options, logger) {
-  const {
-    engine,
-    workspaceName,
-    rootAuthToken,
-    manifest: { tradelink, workspace }
-  } = options;
-  if (tradelink) {
-    _invariant2.default.call(void 0, rootAuthToken, `rootAuthToken is required to create Tradelink org entities`);
-    await bakeTradelinkOrganization(
-      {
-        engine,
-        tradelink,
-        rootAuthToken,
-        ..._optionalChain([workspace, 'optionalAccess', _30 => _30.tradelink, 'optionalAccess', _31 => _31.networkBlueprint]) && workspaceName ? { networkBlueprint: { blueprint: workspace.tradelink.networkBlueprint, workspaceName } } : {}
-      },
-      logger
-    );
-  }
-  if (workspace) {
-    _invariant2.default.call(void 0, workspaceName, `Can't bake workspace without specifying a workspace name`);
-    await bakeWorkspace({ engine, workspace, workspaceName }, logger);
-    if (workspace.pledges) {
-      const engineWithWorkspace = engine.withWorkspace(workspaceName);
-      for (const pledgeAdjustment of workspace.pledges) {
-        await bakePledgeAdjustment({ engine: engineWithWorkspace, pledgeAdjustment }, logger);
-      }
-    }
-  }
-  logger.info("Successfully baked");
+	const { engine, workspaceName, rootAuthToken, manifest: { tradelink, workspace } } = options;
+	if (tradelink) {
+		(0, invariant.default)(rootAuthToken, `rootAuthToken is required to create Tradelink org entities`);
+		await bakeTradelinkOrganization({
+			engine,
+			tradelink,
+			rootAuthToken,
+			...workspace?.tradelink?.networkBlueprint && workspaceName ? { networkBlueprint: {
+				blueprint: workspace.tradelink.networkBlueprint,
+				workspaceName
+			} } : {}
+		}, logger);
+	}
+	if (workspace) {
+		(0, invariant.default)(workspaceName, `Can't bake workspace without specifying a workspace name`);
+		await bakeWorkspace({
+			engine,
+			workspace,
+			workspaceName
+		}, logger);
+		if (workspace.pledges) {
+			const engineWithWorkspace = engine.withWorkspace(workspaceName);
+			for (const pledgeAdjustment of workspace.pledges) await bakePledgeAdjustment({
+				engine: engineWithWorkspace,
+				pledgeAdjustment
+			}, logger);
+		}
+	}
+	logger.info("Successfully baked");
 }
+//#endregion
+exports.bakeManifest = bakeManifest;
+exports.bakePledgeAdjustment = bakePledgeAdjustment;
+exports.createAndApproveRequest = createAndApproveRequest;
+exports.recipeManifest = recipeManifest;
+exports.zManifest = zManifest;
+exports.zManifestPolicy = zManifestPolicy;
 
-
-
-
-
-
-exports.bakeManifest = bakeManifest; exports.bakePledgeAdjustment = bakePledgeAdjustment; exports.createAndApproveRequest = createAndApproveRequest; exports.zManifest = zManifest; exports.zManifestPolicy = zManifestPolicy;
-/* v8 ignore else - TODO bake empty tradelink org -- @preserve */
-/* v8 ignore else -- @preserve */
 //# sourceMappingURL=bake.cjs.map