@venturekit/infra 0.0.48 → 0.0.51

package/dist/cdk/shared/internal-routes.js

@@ -0,0 +1,127 @@
+/**
+ * Internal routes between ventures (`internal` intent) — the IAM side.
+ *
+ * Callee: one pair secret per declared caller (`internal.callers`), readable
+ * by the callee's functions, which verify each call with it, and rotated on
+ * a schedule (`internal.rotationDays`). Caller (`internal.calls`): the right
+ * to invoke the callee's internal route functions and to read the pair
+ * secret the callee minted for it — nothing of the callee's other functions
+ * or secrets. A venture may list itself on both sides: its own containers
+ * (`services`) call its internal routes the same way.
+ */
+import * as cdk from 'aws-cdk-lib';
+import * as iam from 'aws-cdk-lib/aws-iam';
+import * as lambda from 'aws-cdk-lib/aws-lambda';
+import * as secretsmanager from 'aws-cdk-lib/aws-secretsmanager';
+import { INTERNAL_ROUTE_PREFIX, internalCallerSecretName } from '@venturekit/core';
+/** Default days between two rotations of a pair secret. */
+export const DEFAULT_PAIR_ROTATION_DAYS = 30;
+/** The name prefix of a venture's internal route functions (`<project>-<stage>-route-internal-…`). */
+function internalRoutePrefix(project, stage) {
+    return `${project}-${stage}-route-${INTERNAL_ROUTE_PREFIX.slice(1)}-`;
+}
+/** What a caller venture's roles need to call `internal.calls`. */
+export function internalCallStatements(scope, project, stage, internal) {
+    const calls = [...new Set(internal?.calls ?? [])];
+    if (calls.length === 0)
+        return [];
+    const { partition, region, account } = cdk.Stack.of(scope);
+    for (const callee of calls) {
+        // Names past 56 chars are clamped with a hash, so the prefix must fit for the wildcard to hold.
+        if (internalRoutePrefix(callee, stage).length > 56) {
+            throw new Error(`[venturekit] internal.calls '${callee}': '${internalRoutePrefix(callee, stage)}' is too long to grant by prefix (56 chars max)`);
+        }
+    }
+    return [
+        new iam.PolicyStatement({
+            sid: 'InvokeInternalRoutes',
+            actions: ['lambda:InvokeFunction'],
+            resources: calls.map((callee) => `arn:${partition}:lambda:${region}:${account}:function:${internalRoutePrefix(callee, stage)}*`),
+        }),
+        new iam.PolicyStatement({
+            sid: 'ReadInternalPairSecrets',
+            actions: ['secretsmanager:GetSecretValue'],
+            resources: calls.map((callee) => `arn:${partition}:secretsmanager:${region}:${account}:secret:${internalCallerSecretName(callee, stage, project)}-*`),
+        }),
+    ];
+}
+/**
+ * The rotation step for a pair secret: a new `current`, the old one kept as
+ * `previous` — so a caller still signing with it is accepted until the next
+ * rotation, while callers and callees re-read the keyring (`@venturekit/runtime`
+ * `internal-callers.ts`). Secrets Manager's four-step protocol; `setSecret`
+ * and `testSecret` have nothing to do (no external system holds the key).
+ */
+const ROTATION_HANDLER = `
+const { SecretsManagerClient, GetSecretValueCommand, PutSecretValueCommand, DescribeSecretCommand, UpdateSecretVersionStageCommand } = require('@aws-sdk/client-secrets-manager');
+const { randomBytes } = require('crypto');
+const sm = new SecretsManagerClient({});
+const currentKey = (s) => { try { const j = JSON.parse(s); return j.current || j.value || s; } catch { return s; } };
+exports.handler = async ({ SecretId, ClientRequestToken, Step }) => {
+  const meta = await sm.send(new DescribeSecretCommand({ SecretId }));
+  const versions = meta.VersionIdsToStages || {};
+  if (!versions[ClientRequestToken]) throw new Error('unknown version ' + ClientRequestToken);
+  if (Step === 'createSecret') {
+    try {
+      await sm.send(new GetSecretValueCommand({ SecretId, VersionId: ClientRequestToken, VersionStage: 'AWSPENDING' }));
+      return;
+    } catch (e) {
+      if (e.name !== 'ResourceNotFoundException') throw e;
+    }
+    const current = await sm.send(new GetSecretValueCommand({ SecretId, VersionStage: 'AWSCURRENT' }));
+    const next = { current: randomBytes(32).toString('hex'), previous: currentKey(current.SecretString || '') };
+    await sm.send(new PutSecretValueCommand({ SecretId, ClientRequestToken, SecretString: JSON.stringify(next), VersionStages: ['AWSPENDING'] }));
+  } else if (Step === 'finishSecret') {
+    if ((versions[ClientRequestToken] || []).includes('AWSCURRENT')) return;
+    const currentVersion = Object.keys(versions).find((v) => versions[v].includes('AWSCURRENT'));
+    await sm.send(new UpdateSecretVersionStageCommand({ SecretId, VersionStage: 'AWSCURRENT', MoveToVersionId: ClientRequestToken, RemoveFromVersionId: currentVersion }));
+  }
+};
+`;
+/**
+ * The callee's pair secrets, one per `internal.callers` entry, each rotated
+ * every `internal.rotationDays` (default {@link DEFAULT_PAIR_ROTATION_DAYS};
+ * `false` turns rotation off). Returns them keyed by caller; the caller of
+ * this helper grants its functions read and hands them the ARNs
+ * (`VENTURE_INTERNAL_CALLER_SECRET_ARNS`).
+ */
+export function createInternalCallerSecrets(scope, project, stage, internal, retain) {
+    const secrets = new Map();
+    const callers = [...new Set(internal?.callers ?? [])];
+    if (callers.length === 0)
+        return secrets;
+    const rotationDays = internal?.rotationDays ?? DEFAULT_PAIR_ROTATION_DAYS;
+    if (rotationDays !== false && (!Number.isInteger(rotationDays) || rotationDays < 1 || rotationDays > 365)) {
+        throw new Error(`[venturekit] internal.rotationDays must be a whole number of days from 1 to 365, or false (got ${String(rotationDays)})`);
+    }
+    const rotator = rotationDays === false
+        ? undefined
+        : new lambda.Function(scope, 'InternalPairSecretRotation', {
+            runtime: lambda.Runtime.NODEJS_22_X,
+            handler: 'index.handler',
+            code: lambda.Code.fromInline(ROTATION_HANDLER),
+            timeout: cdk.Duration.seconds(30),
+            description: `Rotates ${project}-${stage}'s internal-route pair secrets`,
+        });
+    for (const caller of callers) {
+        const secret = new secretsmanager.Secret(scope, `InternalCallerSecret-${caller}`, {
+            secretName: internalCallerSecretName(project, stage, caller),
+            description: `Pair secret: ${caller} → ${project} internal routes (${stage})`,
+            generateSecretString: { secretStringTemplate: '{}', generateStringKey: 'value', passwordLength: 64, excludePunctuation: true },
+            removalPolicy: retain ? cdk.RemovalPolicy.RETAIN : cdk.RemovalPolicy.DESTROY,
+        });
+        if (rotator && rotationDays !== false) {
+            secret.addRotationSchedule(`InternalCallerSecretRotation-${caller}`, {
+                rotationLambda: rotator,
+                automaticallyAfter: cdk.Duration.days(rotationDays),
+            });
+            rotator.addToRolePolicy(new iam.PolicyStatement({
+                actions: ['secretsmanager:DescribeSecret', 'secretsmanager:GetSecretValue', 'secretsmanager:PutSecretValue', 'secretsmanager:UpdateSecretVersionStage'],
+                resources: [secret.secretArn],
+            }));
+        }
+        secrets.set(caller, secret);
+    }
+    return secrets;
+}
+//# sourceMappingURL=internal-routes.js.map

package/dist/cdk/shared/internal-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"internal-routes.js","sourceRoot":"","sources":["../../../src/cdk/shared/internal-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,GAAG,MAAM,aAAa,CAAC;AACnC,OAAO,KAAK,GAAG,MAAM,qBAAqB,CAAC;AAC3C,OAAO,KAAK,MAAM,MAAM,wBAAwB,CAAC;AACjD,OAAO,KAAK,cAAc,MAAM,gCAAgC,CAAC;AAEjE,OAAO,EAAE,qBAAqB,EAAE,wBAAwB,EAAuB,MAAM,kBAAkB,CAAC;AAExG,2DAA2D;AAC3D,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,CAAC;AAE7C,sGAAsG;AACtG,SAAS,mBAAmB,CAAC,OAAe,EAAE,KAAa;IACzD,OAAO,GAAG,OAAO,IAAI,KAAK,UAAU,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC;AACxE,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,sBAAsB,CAAC,KAAgB,EAAE,OAAe,EAAE,KAAa,EAAE,QAAoC;IAC3H,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;IAClD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAClC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;IAC3D,KAAK,MAAM,MAAM,IAAI,KAAK,EAAE,CAAC;QAC3B,gGAAgG;QAChG,IAAI,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,gCAAgC,MAAM,OAAO,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACpJ,CAAC;IACH,CAAC;IACD,OAAO;QACL,IAAI,GAAG,CAAC,eAAe,CAAC;YACtB,GAAG,EAAE,sBAAsB;YAC3B,OAAO,EAAE,CAAC,uBAAuB,CAAC;YAClC,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,SAAS,WAAW,MAAM,IAAI,OAAO,aAAa,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC;SACjI,CAAC;QACF,IAAI,GAAG,CAAC,eAAe,CAAC;YACtB,GAAG,EAAE,yBAAyB;YAC9B,OAAO,EAAE,CAAC,+BAA+B,CAAC;YAC1C,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,SAAS,mBAAmB,MAAM,IAAI,OAAO,WAAW,wBAAwB,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC;SACtJ,CAAC;KACH,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,gBAAgB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;CAyBxB,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CACzC,KAAgB,EAChB,OAAe,EACf,KAAa,EACb,QAAoC,EACpC,MAAe;IAEf,MAAM,OAAO,GAAG,IAAI,GAAG,EAAiC,CAAC;IACzD,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;IACtD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IACzC,MAAM,YAAY,GAAG,QAAQ,EAAE,YAAY,IAAI,0BAA0B,CAAC;IAC1E,IAAI,YAAY,KAAK,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,YAAY,GAAG,CAAC,IAAI,YAAY,GAAG,GAAG,CAAC,EAAE,CAAC;QAC1G,MAAM,IAAI,KAAK,CAAC,kGAAkG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IAC7I,CAAC;IACD,MAAM,OAAO,GACX,YAAY,KAAK,KAAK;QACpB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,4BAA4B,EAAE;YACvD,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW;YACnC,OAAO,EAAE,eAAe;YACxB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC;YAC9C,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACjC,WAAW,EAAE,WAAW,OAAO,IAAI,KAAK,gCAAgC;SACzE,CAAC,CAAC;IACT,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,KAAK,EAAE,wBAAwB,MAAM,EAAE,EAAE;YAChF,UAAU,EAAE,wBAAwB,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC;YAC5D,WAAW,EAAE,gBAAgB,MAAM,MAAM,OAAO,qBAAqB,KAAK,GAAG;YAC7E,oBAAoB,EAAE,EAAE,oBAAoB,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,cAAc,EAAE,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE;YAC9H,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,OAAO;SAC7E,CAAC,CAAC;QACH,IAAI,OAAO,IAAI,YAAY,KAAK,KAAK,EAAE,CAAC;YACtC,MAAM,CAAC,mBAAmB,CAAC,gCAAgC,MAAM,EAAE,EAAE;gBACnE,cAAc,EAAE,OAAO;gBACvB,kBAAkB,EAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC;aACpD,CAAC,CAAC;YACH,OAAO,CAAC,eAAe,CACrB,IAAI,GAAG,CAAC,eAAe,CAAC;gBACtB,OAAO,EAAE,CAAC,+BAA+B,EAAE,+BAA+B,EAAE,+BAA+B,EAAE,yCAAyC,CAAC;gBACvJ,SAAS,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC;aAC9B,CAAC,CACH,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/cdk/shared/lambda-helpers.d.ts

@@ -46,20 +46,7 @@ export declare function inlineStubLambdaCode(): lambda.Code;
 export declare function toLambdaRuntime(envConfig: EnvConfig): lambda.Runtime;
 export declare function toLambdaArchitecture(envConfig: EnvConfig): lambda.Architecture;
 export declare function toLogRetention(days: number): logs.RetentionDays;
-/**
- * Tiny non-cryptographic 6-char hex hash. Used only to disambiguate
- * Lambda function names that would otherwise overflow the 64-char
- * limit; collision risk is acceptable because the truncated prefix
- * already encodes most of the route path.
- */
-export declare function shortHash(input: string): string;
-/**
- * Cap a Lambda function name at the AWS hard limit (64 chars). When
- * the natural name overflows, replace the trailing portion with a
- * 6-char hash of the original — preserving the first 56 chars so
- * operators can still recognize the resource by prefix.
- */
-export declare function clampLambdaFunctionName(rawName: string): string;
+export { shortHash, clampLambdaFunctionName } from '@venturekit/core';
 /**
  * Physical name for a Lambda's pre-created LogGroup:
  *

package/dist/cdk/shared/lambda-helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"lambda-helpers.d.ts","sourceRoot":"","sources":["../../../src/cdk/shared/lambda-helpers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAOH,OAAO,KAAK,MAAM,MAAM,wBAAwB,CAAC;AACjD,OAAO,KAAK,IAAI,MAAM,sBAAsB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAuBlD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,4BAA4B,CAC1C,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,eAAe,GAAE,SAAS,MAAM,EAAO,GACtC,MAAM,CAAC,IAAI,CAkBb;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAAC,IAAI,CAIlD;AAID,wBAAgB,eAAe,CAAC,SAAS,EAAE,SAAS,GAAG,MAAM,CAAC,OAAO,CAWpE;AAED,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,SAAS,GAAG,MAAM,CAAC,YAAY,CAI9E;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC,aAAa,CAiB/D;AAID;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAM/C;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAI/D;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,SAAS,EAChB,YAAY,EAAE,MAAM,GACnB,MAAM,CAOR;AAID;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE,MAAM,GACf,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC,CAwB9C"}
+{"version":3,"file":"lambda-helpers.d.ts","sourceRoot":"","sources":["../../../src/cdk/shared/lambda-helpers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAOH,OAAO,KAAK,MAAM,MAAM,wBAAwB,CAAC;AACjD,OAAO,KAAK,IAAI,MAAM,sBAAsB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAuBlD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,4BAA4B,CAC1C,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,eAAe,GAAE,SAAS,MAAM,EAAO,GACtC,MAAM,CAAC,IAAI,CAkBb;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAAC,IAAI,CAIlD;AAID,wBAAgB,eAAe,CAAC,SAAS,EAAE,SAAS,GAAG,MAAM,CAAC,OAAO,CAWpE;AAED,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,SAAS,GAAG,MAAM,CAAC,YAAY,CAI9E;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC,aAAa,CAiB/D;AAKD,OAAO,EAAE,SAAS,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAEtE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,SAAS,EAChB,YAAY,EAAE,MAAM,GACnB,MAAM,CAOR;AAID;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE,MAAM,GACf,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC,CAwB9C"}

package/dist/cdk/shared/lambda-helpers.js

@@ -134,30 +134,8 @@ export function toLogRetention(days) {
     return logs.RetentionDays.INFINITE;
 }
 // ─── Naming helpers ─────────────────────────────────────────────────
-/**
- * Tiny non-cryptographic 6-char hex hash. Used only to disambiguate
- * Lambda function names that would otherwise overflow the 64-char
- * limit; collision risk is acceptable because the truncated prefix
- * already encodes most of the route path.
- */
-export function shortHash(input) {
-    let h = 5381;
-    for (let i = 0; i < input.length; i++) {
-        h = ((h << 5) + h + input.charCodeAt(i)) | 0;
-    }
-    return (h >>> 0).toString(16).padStart(6, '0').slice(0, 6);
-}
-/**
- * Cap a Lambda function name at the AWS hard limit (64 chars). When
- * the natural name overflows, replace the trailing portion with a
- * 6-char hash of the original — preserving the first 56 chars so
- * operators can still recognize the resource by prefix.
- */
-export function clampLambdaFunctionName(rawName) {
-    return rawName.length <= 64
-        ? rawName
-        : `${rawName.slice(0, 56)}-${shortHash(rawName)}`;
-}
+// One implementation with the runtime (which invokes internal routes by name): `@venturekit/core`.
+export { shortHash, clampLambdaFunctionName } from '@venturekit/core';
 /**
  * Physical name for a Lambda's pre-created LogGroup:
  *

package/dist/cdk/shared/lambda-helpers.js.map

@@ -1 +1 @@
-{"version":3,"file":"lambda-helpers.js","sourceRoot":"","sources":["../../../src/cdk/shared/lambda-helpers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AACvC,OAAO,KAAK,GAAG,MAAM,aAAa,CAAC;AACnC,OAAO,KAAK,MAAM,MAAM,wBAAwB,CAAC;AACjD,OAAO,KAAK,IAAI,MAAM,sBAAsB,CAAC;AAI7C,uEAAuE;AAEvE;;;;;;;GAOG;AACH,IAAI,aAAmD,CAAC;AACxD,SAAS,WAAW;IAClB,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,eAAe,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvD,aAAa,GAAG,eAAe,CAAC,SAAS,CAA6B,CAAC;IACzE,CAAC;IACD,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,uEAAuE;AAEvE;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,4BAA4B,CAC1C,WAAmB,EACnB,UAAkB,EAClB,kBAAqC,EAAE;IAEvC,MAAM,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC;IAC5E,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAE9C,WAAW,EAAE,CAAC,SAAS,CAAC;QACtB,WAAW,EAAE,CAAC,WAAW,CAAC;QAC1B,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,QAAQ;QAChB,OAAO;QACP,oEAAoE;QACpE,oDAAoD;QACpD,QAAQ,EAAE,CAAC,YAAY,EAAE,GAAG,eAAe,CAAC;QAC5C,aAAa,EAAE,UAAU;QACzB,QAAQ,EAAE,OAAO;KAClB,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;AACvC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB;IAClC,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,CAC3B,4EAA4E,CAC7E,CAAC;AACJ,CAAC;AAED,sEAAsE;AAEtE,MAAM,UAAU,eAAe,CAAC,SAAoB;IAClD,QAAQ,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACjC,KAAK,YAAY;YACf,OAAO,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC;QACpC,KAAK,YAAY;YACf,OAAO,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC;QACpC,KAAK,YAAY;YACf,OAAO,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC;QACpC;YACE,OAAO,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC;IACtC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,SAAoB;IACvD,OAAO,SAAS,CAAC,MAAM,CAAC,YAAY,KAAK,QAAQ;QAC/C,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM;QAC5B,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,IAAI,IAAI,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;IACjD,IAAI,IAAI,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC;IACpD,IAAI,IAAI,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC;IACnD,IAAI,IAAI,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC;IAClD,IAAI,IAAI,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC;IACpD,IAAI,IAAI,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC;IACpD,IAAI,IAAI,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC;IACrD,IAAI,IAAI,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC;IACvD,IAAI,IAAI,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC;IACvD,IAAI,IAAI,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC;IACvD,IAAI,IAAI,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC;IACtD,IAAI,IAAI,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC;IACpD,IAAI,IAAI,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC;IAC3D,IAAI,IAAI,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC;IAC3D,IAAI,IAAI,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC;IACrD,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC;AACrC,CAAC;AAED,uEAAuE;AAEvE;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,IAAI,CAAC,GAAG,IAAI,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAAe;IACrD,OAAO,OAAO,CAAC,MAAM,IAAI,EAAE;QACzB,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;AACtD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAgB,EAChB,YAAoB;IAEpB,MAAM,SAAS,GAAG,GAAG,CAAC,EAAE,CAAC,MAAM,CAC7B,CAAC,EACD,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAC/C,CAAC;IACF,MAAM,UAAU,GAAG,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC;IAClE,OAAO,eAAe,YAAY,IAAI,UAAU,EAAE,CAAC;AACrD,CAAC;AAED,uEAAuE;AAEvE;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,qBAAqB,CACnC,GAAW,EACX,OAAgB;IAEhB,MAAM,IAAI,GAAG,OAAO,IAAI,GAAG,CAAC;IAC5B,MAAM,OAAO,GAAiD,EAAE,CAAC;IAEjE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IAExC,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC,GAAG,qBAAqB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;YACvD,SAAS;QACX,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,SAAS;QAC7C,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,SAAS;QAC3C,IAAI,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,SAAS;QACzD,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,YAAY;aACtB,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;aACzB,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC1B,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"lambda-helpers.js","sourceRoot":"","sources":["../../../src/cdk/shared/lambda-helpers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AACvC,OAAO,KAAK,GAAG,MAAM,aAAa,CAAC;AACnC,OAAO,KAAK,MAAM,MAAM,wBAAwB,CAAC;AACjD,OAAO,KAAK,IAAI,MAAM,sBAAsB,CAAC;AAI7C,uEAAuE;AAEvE;;;;;;;GAOG;AACH,IAAI,aAAmD,CAAC;AACxD,SAAS,WAAW;IAClB,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,eAAe,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvD,aAAa,GAAG,eAAe,CAAC,SAAS,CAA6B,CAAC;IACzE,CAAC;IACD,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,uEAAuE;AAEvE;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,4BAA4B,CAC1C,WAAmB,EACnB,UAAkB,EAClB,kBAAqC,EAAE;IAEvC,MAAM,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC;IAC5E,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAE9C,WAAW,EAAE,CAAC,SAAS,CAAC;QACtB,WAAW,EAAE,CAAC,WAAW,CAAC;QAC1B,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,QAAQ;QAChB,OAAO;QACP,oEAAoE;QACpE,oDAAoD;QACpD,QAAQ,EAAE,CAAC,YAAY,EAAE,GAAG,eAAe,CAAC;QAC5C,aAAa,EAAE,UAAU;QACzB,QAAQ,EAAE,OAAO;KAClB,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;AACvC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB;IAClC,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,CAC3B,4EAA4E,CAC7E,CAAC;AACJ,CAAC;AAED,sEAAsE;AAEtE,MAAM,UAAU,eAAe,CAAC,SAAoB;IAClD,QAAQ,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACjC,KAAK,YAAY;YACf,OAAO,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC;QACpC,KAAK,YAAY;YACf,OAAO,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC;QACpC,KAAK,YAAY;YACf,OAAO,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC;QACpC;YACE,OAAO,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC;IACtC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,SAAoB;IACvD,OAAO,SAAS,CAAC,MAAM,CAAC,YAAY,KAAK,QAAQ;QAC/C,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM;QAC5B,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,IAAI,IAAI,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;IACjD,IAAI,IAAI,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC;IACpD,IAAI,IAAI,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC;IACnD,IAAI,IAAI,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC;IAClD,IAAI,IAAI,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC;IACpD,IAAI,IAAI,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC;IACpD,IAAI,IAAI,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC;IACrD,IAAI,IAAI,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC;IACvD,IAAI,IAAI,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC;IACvD,IAAI,IAAI,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC;IACvD,IAAI,IAAI,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC;IACtD,IAAI,IAAI,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC;IACpD,IAAI,IAAI,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC;IAC3D,IAAI,IAAI,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC;IAC3D,IAAI,IAAI,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC;IACrD,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC;AACrC,CAAC;AAED,uEAAuE;AAEvE,mGAAmG;AACnG,OAAO,EAAE,SAAS,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAEtE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAgB,EAChB,YAAoB;IAEpB,MAAM,SAAS,GAAG,GAAG,CAAC,EAAE,CAAC,MAAM,CAC7B,CAAC,EACD,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAC/C,CAAC;IACF,MAAM,UAAU,GAAG,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC;IAClE,OAAO,eAAe,YAAY,IAAI,UAAU,EAAE,CAAC;AACrD,CAAC;AAED,uEAAuE;AAEvE;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,qBAAqB,CACnC,GAAW,EACX,OAAgB;IAEhB,MAAM,IAAI,GAAG,OAAO,IAAI,GAAG,CAAC;IAC5B,MAAM,OAAO,GAAiD,EAAE,CAAC;IAEjE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IAExC,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC,GAAG,qBAAqB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;YACvD,SAAS;QACX,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,SAAS;QAC7C,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,SAAS;QAC3C,IAAI,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,SAAS;QACzD,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,YAAY;aACtB,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;aACzB,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC1B,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/cdk/shared/otel-layer.d.ts

@@ -0,0 +1,23 @@
+/**
+ * AWS Lambda Layer for OpenTelemetry (Node.js) — `lambda.otel`.
+ *
+ * The AWS-published `AWSOpenTelemetryDistroJs` layer per region, as listed
+ * on https://aws-otel.github.io/docs/getting-started/lambda (versions as
+ * of October 2026). Newer versions ship regularly: pin another one with
+ * `lambda.otel.layerArn`.
+ *
+ * With the layer, `AWS_LAMBDA_EXEC_WRAPPER=/opt/otel-instrument` starts
+ * the OpenTelemetry SDK before the handler loads; X-Ray active tracing
+ * carries the spans; `OTEL_AWS_APPLICATION_SIGNALS_ENABLED` turns
+ * CloudWatch Application Signals on or off.
+ */
+/** The AWS OpenTelemetry layer ARN for `region`, or `undefined` when AWS publishes none there. */
+export declare function defaultOtelLayerArn(region: string): string | undefined;
+/** The environment the layer reads. */
+export declare function otelEnvironment(options: {
+    serviceName: string;
+    applicationSignals: boolean;
+}): Record<string, string>;
+/** The managed policy Application Signals needs on the execution role. */
+export declare const APPLICATION_SIGNALS_POLICY = "CloudWatchLambdaApplicationSignalsExecutionRolePolicy";
+//# sourceMappingURL=otel-layer.d.ts.map

package/dist/cdk/shared/otel-layer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"otel-layer.d.ts","sourceRoot":"","sources":["../../../src/cdk/shared/otel-layer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAmDH,kGAAkG;AAClG,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAQtE;AAED,uCAAuC;AACvC,wBAAgB,eAAe,CAAC,OAAO,EAAE;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,OAAO,CAAC;CAC7B,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAMzB;AAED,0EAA0E;AAC1E,eAAO,MAAM,0BAA0B,0DAA0D,CAAC"}

package/dist/cdk/shared/otel-layer.js

@@ -0,0 +1,77 @@
+/**
+ * AWS Lambda Layer for OpenTelemetry (Node.js) — `lambda.otel`.
+ *
+ * The AWS-published `AWSOpenTelemetryDistroJs` layer per region, as listed
+ * on https://aws-otel.github.io/docs/getting-started/lambda (versions as
+ * of October 2026). Newer versions ship regularly: pin another one with
+ * `lambda.otel.layerArn`.
+ *
+ * With the layer, `AWS_LAMBDA_EXEC_WRAPPER=/opt/otel-instrument` starts
+ * the OpenTelemetry SDK before the handler loads; X-Ray active tracing
+ * carries the spans; `OTEL_AWS_APPLICATION_SIGNALS_ENABLED` turns
+ * CloudWatch Application Signals on or off.
+ */
+const SHARED_ACCOUNT = '615299751070';
+/** Regions served from AWS's shared layer account, at their current version. */
+const SHARED_REGIONS = {
+    'us-east-1': 16,
+    'us-east-2': 16,
+    'us-west-1': 16,
+    'us-west-2': 16,
+    'ca-central-1': 16,
+    'sa-east-1': 16,
+    'eu-central-1': 16,
+    'eu-north-1': 16,
+    'eu-west-1': 16,
+    'eu-west-2': 16,
+    'eu-west-3': 16,
+    'ap-northeast-1': 16,
+    'ap-northeast-2': 16,
+    'ap-northeast-3': 16,
+    'ap-south-1': 16,
+    'ap-southeast-1': 16,
+    'ap-southeast-2': 16,
+};
+/** Opt-in and newer regions, each with its own layer account. */
+const OWN_ACCOUNT_REGIONS = {
+    'af-south-1': { account: '904233096616', version: 16 },
+    'ap-east-1': { account: '888577020596', version: 16 },
+    'ap-east-2': { account: '412664885777', version: 5 },
+    'ap-south-2': { account: '796973505492', version: 16 },
+    'ap-southeast-3': { account: '039612877180', version: 16 },
+    'ap-southeast-4': { account: '713881805771', version: 16 },
+    'ap-southeast-5': { account: '152034782359', version: 9 },
+    'ap-southeast-6': { account: '313828097273', version: 4 },
+    'ap-southeast-7': { account: '980416031188', version: 9 },
+    'ca-west-1': { account: '595944127152', version: 9 },
+    'eu-central-2': { account: '156041407956', version: 16 },
+    'eu-south-1': { account: '257394471194', version: 16 },
+    'eu-south-2': { account: '490004653786', version: 16 },
+    'il-central-1': { account: '746669239226', version: 16 },
+    'me-central-1': { account: '739275441131', version: 16 },
+    'me-south-1': { account: '980921751758', version: 12 },
+    'mx-central-1': { account: '610118373846', version: 9 },
+    'cn-north-1': { account: '440179912924', version: 9, partition: 'aws-cn' },
+    'cn-northwest-1': { account: '440180067931', version: 9, partition: 'aws-cn' },
+};
+/** The AWS OpenTelemetry layer ARN for `region`, or `undefined` when AWS publishes none there. */
+export function defaultOtelLayerArn(region) {
+    const shared = SHARED_REGIONS[region];
+    if (shared !== undefined)
+        return `arn:aws:lambda:${region}:${SHARED_ACCOUNT}:layer:AWSOpenTelemetryDistroJs:${shared}`;
+    const own = OWN_ACCOUNT_REGIONS[region];
+    if (own)
+        return `arn:${own.partition ?? 'aws'}:lambda:${region}:${own.account}:layer:AWSOpenTelemetryDistroJs:${own.version}`;
+    return undefined;
+}
+/** The environment the layer reads. */
+export function otelEnvironment(options) {
+    return {
+        AWS_LAMBDA_EXEC_WRAPPER: '/opt/otel-instrument',
+        OTEL_SERVICE_NAME: options.serviceName,
+        OTEL_AWS_APPLICATION_SIGNALS_ENABLED: options.applicationSignals ? 'true' : 'false',
+    };
+}
+/** The managed policy Application Signals needs on the execution role. */
+export const APPLICATION_SIGNALS_POLICY = 'CloudWatchLambdaApplicationSignalsExecutionRolePolicy';
+//# sourceMappingURL=otel-layer.js.map

package/dist/cdk/shared/otel-layer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"otel-layer.js","sourceRoot":"","sources":["../../../src/cdk/shared/otel-layer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,MAAM,cAAc,GAAG,cAAc,CAAC;AAEtC,gFAAgF;AAChF,MAAM,cAAc,GAA2B;IAC7C,WAAW,EAAE,EAAE;IACf,WAAW,EAAE,EAAE;IACf,WAAW,EAAE,EAAE;IACf,WAAW,EAAE,EAAE;IACf,cAAc,EAAE,EAAE;IAClB,WAAW,EAAE,EAAE;IACf,cAAc,EAAE,EAAE;IAClB,YAAY,EAAE,EAAE;IAChB,WAAW,EAAE,EAAE;IACf,WAAW,EAAE,EAAE;IACf,WAAW,EAAE,EAAE;IACf,gBAAgB,EAAE,EAAE;IACpB,gBAAgB,EAAE,EAAE;IACpB,gBAAgB,EAAE,EAAE;IACpB,YAAY,EAAE,EAAE;IAChB,gBAAgB,EAAE,EAAE;IACpB,gBAAgB,EAAE,EAAE;CACrB,CAAC;AAEF,iEAAiE;AACjE,MAAM,mBAAmB,GAGrB;IACF,YAAY,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,EAAE,EAAE;IACtD,WAAW,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,EAAE,EAAE;IACrD,WAAW,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,EAAE;IACpD,YAAY,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,EAAE,EAAE;IACtD,gBAAgB,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,EAAE,EAAE;IAC1D,gBAAgB,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,EAAE,EAAE;IAC1D,gBAAgB,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,EAAE;IACzD,gBAAgB,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,EAAE;IACzD,gBAAgB,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,EAAE;IACzD,WAAW,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,EAAE;IACpD,cAAc,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,EAAE,EAAE;IACxD,YAAY,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,EAAE,EAAE;IACtD,YAAY,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,EAAE,EAAE;IACtD,cAAc,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,EAAE,EAAE;IACxD,cAAc,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,EAAE,EAAE;IACxD,YAAY,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,EAAE,EAAE;IACtD,cAAc,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,EAAE;IACvD,YAAY,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE;IAC1E,gBAAgB,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE;CAC/E,CAAC;AAEF,kGAAkG;AAClG,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,MAAM,KAAK,SAAS;QACtB,OAAO,kBAAkB,MAAM,IAAI,cAAc,mCAAmC,MAAM,EAAE,CAAC;IAC/F,MAAM,GAAG,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,GAAG;QACL,OAAO,OAAO,GAAG,CAAC,SAAS,IAAI,KAAK,WAAW,MAAM,IAAI,GAAG,CAAC,OAAO,mCAAmC,GAAG,CAAC,OAAO,EAAE,CAAC;IACvH,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,uCAAuC;AACvC,MAAM,UAAU,eAAe,CAAC,OAG/B;IACC,OAAO;QACL,uBAAuB,EAAE,sBAAsB;QAC/C,iBAAiB,EAAE,OAAO,CAAC,WAAW;QACtC,oCAAoC,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;KACpF,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,MAAM,CAAC,MAAM,0BAA0B,GAAG,uDAAuD,CAAC"}

package/dist/cdk/shared/ssm-keys.d.ts

@@ -76,6 +76,14 @@
  * databases / caches / Lambdas live in it.
  */
 export declare const networkKeys: {
+    /** The VPC's CIDR block (ventures joining the VPC import it with the subnets). */
+    readonly vpcCidr: (project: string, stage: string) => string;
+    /**
+     * The INTERNAL CLIENTS security group: every Lambda of every venture in
+     * this VPC is a member, and the VPC's internal service ports (`expose:
+     * 'vpc'`) admit it — not the whole address range.
+     */
+    readonly internalClientsSecurityGroupId: (project: string, stage: string) => string;
     readonly vpcId: (project: string, stage: string) => string;
     /**
      * Comma-joined private subnet IDs (subnets where Lambdas + RDS run).
@@ -120,6 +128,14 @@ export declare const dataKeys: {
      * URL transparently.
      */
     readonly rdsSecretArn: (project: string, stage: string, dbId: string) => string;
+    /**
+     * ARN of the least-privilege app login secret (`{username,password}`)
+     * functions connect with — present once the migration runner provisions
+     * the roles. The master secret stays with the runner and operators.
+     */
+    /** Secret ARN of the SYSTEM login (only `logins.system.functions` read it). */
+    readonly rdsSystemSecretArn: (project: string, stage: string, dbId: string) => string;
+    readonly rdsAppSecretArn: (project: string, stage: string, dbId: string) => string;
     /**
      * Security Group ID for the RDS instance. The app stack creates its
      * own Lambda SG locally and `rdsSg.connections.allowFrom(lambdaSg,
@@ -167,6 +183,8 @@ export declare const dataKeys: {
     readonly cachePort: (project: string, stage: string, cacheId: string) => string;
     /** ElastiCache security group ID — for the cross-stack ingress pattern. */
     readonly cacheSecurityGroupId: (project: string, stage: string, cacheId: string) => string;
+    /** Secrets Manager ARN of a cache's AUTH token (`{"token":…}`). */
+    readonly cacheAuthSecretArn: (project: string, stage: string, cacheId: string) => string;
 };
 export declare const identityKeys: {
     /** Cognito User Pool ID for an `auth` intent. */
@@ -239,10 +257,10 @@ export declare const configKeys: {
     readonly whatsappVerifyTokenSecretArn: (project: string, stage: string, notifyId: string) => string;
     /**
      * ARN of the payment-provider credential Secret for a `billing`
-     * intent. Holds one JSON document — for Zazu,
+     * intent. Holds one JSON document — for Manza,
      * `{apiKey, accountId, webhookSecret}` — that a DevOps engineer
      * populates after the first deploy. The app stack reads this to grant
-     * `secretsmanager:GetSecretValue` and to inject `ZAZU_SECRET_ARN`.
+     * `secretsmanager:GetSecretValue` and to inject `MANZA_SECRET_ARN`.
      */
     readonly billingSecretArn: (project: string, stage: string, billingId: string) => string;
 };
@@ -372,6 +390,14 @@ export declare const servicesKeys: {
  */
 export declare const ssmKeys: {
     readonly network: {
+        /** The VPC's CIDR block (ventures joining the VPC import it with the subnets). */
+        readonly vpcCidr: (project: string, stage: string) => string;
+        /**
+         * The INTERNAL CLIENTS security group: every Lambda of every venture in
+         * this VPC is a member, and the VPC's internal service ports (`expose:
+         * 'vpc'`) admit it — not the whole address range.
+         */
+        readonly internalClientsSecurityGroupId: (project: string, stage: string) => string;
         readonly vpcId: (project: string, stage: string) => string;
         /**
          * Comma-joined private subnet IDs (subnets where Lambdas + RDS run).
@@ -416,6 +442,14 @@ export declare const ssmKeys: {
          * URL transparently.
          */
         readonly rdsSecretArn: (project: string, stage: string, dbId: string) => string;
+        /**
+         * ARN of the least-privilege app login secret (`{username,password}`)
+         * functions connect with — present once the migration runner provisions
+         * the roles. The master secret stays with the runner and operators.
+         */
+        /** Secret ARN of the SYSTEM login (only `logins.system.functions` read it). */
+        readonly rdsSystemSecretArn: (project: string, stage: string, dbId: string) => string;
+        readonly rdsAppSecretArn: (project: string, stage: string, dbId: string) => string;
         /**
          * Security Group ID for the RDS instance. The app stack creates its
          * own Lambda SG locally and `rdsSg.connections.allowFrom(lambdaSg,
@@ -463,6 +497,8 @@ export declare const ssmKeys: {
         readonly cachePort: (project: string, stage: string, cacheId: string) => string;
         /** ElastiCache security group ID — for the cross-stack ingress pattern. */
         readonly cacheSecurityGroupId: (project: string, stage: string, cacheId: string) => string;
+        /** Secrets Manager ARN of a cache's AUTH token (`{"token":…}`). */
+        readonly cacheAuthSecretArn: (project: string, stage: string, cacheId: string) => string;
     };
     readonly identity: {
         /** Cognito User Pool ID for an `auth` intent. */
@@ -535,10 +571,10 @@ export declare const ssmKeys: {
         readonly whatsappVerifyTokenSecretArn: (project: string, stage: string, notifyId: string) => string;
         /**
          * ARN of the payment-provider credential Secret for a `billing`
-         * intent. Holds one JSON document — for Zazu,
+         * intent. Holds one JSON document — for Manza,
          * `{apiKey, accountId, webhookSecret}` — that a DevOps engineer
          * populates after the first deploy. The app stack reads this to grant
-         * `secretsmanager:GetSecretValue` and to inject `ZAZU_SECRET_ARN`.
+         * `secretsmanager:GetSecretValue` and to inject `MANZA_SECRET_ARN`.
          */
         readonly billingSecretArn: (project: string, stage: string, billingId: string) => string;
     };
@@ -663,4 +699,14 @@ export declare const ssmKeys: {
     };
 };
 export type SsmKeys = typeof ssmKeys;
+/**
+ * Internal routes (`internal` intent): the pair secret a callee minted for
+ * each caller venture. The caller's `vk deploy` reads it to check the pair
+ * exists before deploying (`verifyInternalCalls` in `@venturekit/cli`).
+ */
+export declare const internalKeys: {
+    readonly callerSecretArn: (callee: string, stage: string, caller: string) => string;
+    /** The comma-separated ventures allowed to call (`internal.callers`). */
+    readonly callers: (callee: string, stage: string) => string;
+};
 //# sourceMappingURL=ssm-keys.d.ts.map

package/dist/cdk/shared/ssm-keys.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ssm-keys.d.ts","sourceRoot":"","sources":["../../../src/cdk/shared/ssm-keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuEG;AAYH;;;;GAIG;AACH,eAAO,MAAM,WAAW;8BACL,MAAM,SAAS,MAAM,KAAG,MAAM;IAG/C;;;;;;OAMG;yCACyB,MAAM,SAAS,MAAM,KAAG,MAAM;IAG1D,sEAAsE;wCAC3C,MAAM,SAAS,MAAM,KAAG,MAAM;IAGzD;;;;OAIG;0CAC0B,MAAM,SAAS,MAAM,KAAG,MAAM;IAG3D;;;;;OAKG;0CAC0B,MAAM,SAAS,MAAM,KAAG,MAAM;CAEnD,CAAC;AAIX,eAAO,MAAM,QAAQ;IACnB;;;;;;OAMG;oCACoB,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;IAGnE,yEAAyE;gCACtD,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;IAG/D;;;;;;OAMG;qCACqB,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;IAGpE;;;;;;OAMG;2CAC2B,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;IAG1E,2EAA2E;wCAChD,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;IAGvE;;;;;OAKG;4CAC4B,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;IAG3E;;;;OAIG;sCACsB,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;IAGrE,8DAA8D;mCACxC,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;IAGtE,4DAA4D;kCACvC,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;IAGrE;;;;OAIG;kCACkB,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;IAGrE,uEAAuE;wCAC5C,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;IAG1E,4CAA4C;uCAClB,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;IAOzE;;;;OAIG;sCACsB,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;IAGxE,qDAAqD;kCAChC,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;IAGpE,2EAA2E;6CAC3C,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;CAEvE,CAAC;AAIX,eAAO,MAAM,YAAY;IACvB,iDAAiD;mCAC3B,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;IAGpE,4EAA4E;oCACrD,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;IAGrE;;;;;;OAMG;wCACwB,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;IAGzE;;;;;;OAMG;2CAEQ,MAAM,SACR,MAAM,UACL,MAAM,YACJ,MAAM,KACf,MAAM;IAGT;;;;;;;OAOG;8CAC8B,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;CAEvE,CAAC;AAIX,eAAO,MAAM,UAAU;IACrB;;;;;OAKG;kCACkB,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;IAGrE;;;;OAIG;6CAC6B,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;IAGhF,2EAA2E;mDACrC,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;IAGtF;;;;OAIG;+CAC+B,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;IAGlF;;;;;;OAMG;6CAC6B,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;IAGhF;;;;;;OAMG;qDACqC,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;IAGxF;;;;;;OAMG;yCACyB,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;CAErE,CAAC;AAIX,eAAO,MAAM,aAAa;IACxB,yDAAyD;iCACrC,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;IAGnE,gEAAgE;iCAC5C,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;IAGnE,oEAAoE;oCAC7C,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;IAGtE;;;;;OAKG;sDACsC,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;IAGxF,iEAAiE;+CAC/B,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;IAGlF,qCAAqC;2CACP,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;IAG9E;;;;;;OAMG;qCACqB,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;IAGxE,8EAA8E;oCACvD,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;CAE/D,CAAC;AAIX,eAAO,MAAM,QAAQ;IACnB,uDAAuD;8BACtC,MAAM,SAAS,MAAM,KAAG,MAAM;IAG/C;;;;OAIG;oCACoB,MAAM,SAAS,MAAM,KAAG,MAAM;IAGrD;;;;OAIG;wCACwB,MAAM,SAAS,MAAM,KAAG,MAAM;IAGzD;;;;OAIG;4CAC4B,MAAM,SAAS,MAAM,KAAG,MAAM;IAG7D;;;;;;;;OAQG;yCACyB,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;IAG7E;;;;OAIG;iDACiC,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;CAE7E,CAAC;AAIX,eAAO,MAAM,WAAW;IACtB,iGAAiG;oCAC1E,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;IAGrE,sFAAsF;6CACtD,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;IAG9E;;;;OAIG;gDACgC,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;IAGjF,mGAAmG;4CACpE,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;IAG7E,oHAAoH;kCAC/F,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;IAGnE,mHAAmH;oDAC5E,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;IAGrF,oIAAoI;4CACrG,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;IAG7E,0FAA0F;wCAC/D,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;IAGzE,mFAAmF;sCAC1D,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;CAE/D,CAAC;AAIX,eAAO,MAAM,YAAY;IACvB,mFAAmF;oCAC5D,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;IAGxE,8DAA8D;qCACtC,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;IAGzE;;;;OAIG;4BACY,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;IAGhE,+HAA+H;kCAC1G,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;IAGtE,0FAA0F;4CAC3D,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;IAGhF,uFAAuF;sCAC9D,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;IAG1E;;;;OAIG;4CAC4B,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;IAGhF,qFAAqF;oCAC9D,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;IAGxE,oGAAoG;6BACpF,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;CAEzD,CAAC;AAIX;;;;GAIG;AACH,eAAO,MAAM,OAAO;;kCA/bD,MAAM,SAAS,MAAM,KAAG,MAAM;QAG/C;;;;;;WAMG;6CACyB,MAAM,SAAS,MAAM,KAAG,MAAM;QAG1D,sEAAsE;4CAC3C,MAAM,SAAS,MAAM,KAAG,MAAM;QAGzD;;;;WAIG;8CAC0B,MAAM,SAAS,MAAM,KAAG,MAAM;QAG3D;;;;;WAKG;8CAC0B,MAAM,SAAS,MAAM,KAAG,MAAM;;;QAO3D;;;;;;WAMG;wCACoB,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;QAGnE,yEAAyE;oCACtD,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;QAG/D;;;;;;WAMG;yCACqB,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;QAGpE;;;;;;WAMG;+CAC2B,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;QAG1E,2EAA2E;4CAChD,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;QAGvE;;;;;WAKG;gDAC4B,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;QAG3E;;;;WAIG;0CACsB,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;QAGrE,8DAA8D;uCACxC,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;QAGtE,4DAA4D;sCACvC,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;QAGrE;;;;WAIG;sCACkB,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;QAGrE,uEAAuE;4CAC5C,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;QAG1E,4CAA4C;2CAClB,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;QAOzE;;;;WAIG;0CACsB,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;QAGxE,qDAAqD;sCAChC,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;QAGpE,2EAA2E;iDAC3C,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;;;QAO/E,iDAAiD;uCAC3B,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;QAGpE,4EAA4E;wCACrD,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;QAGrE;;;;;;WAMG;4CACwB,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;QAGzE;;;;;;WAMG;+CAEQ,MAAM,SACR,MAAM,UACL,MAAM,YACJ,MAAM,KACf,MAAM;QAGT;;;;;;;WAOG;kDAC8B,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;;;QAO/E;;;;;WAKG;sCACkB,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;QAGrE;;;;WAIG;iDAC6B,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;QAGhF,2EAA2E;uDACrC,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;QAGtF;;;;WAIG;mDAC+B,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;QAGlF;;;;;;WAMG;iDAC6B,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;QAGhF;;;;;;WAMG;yDACqC,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;QAGxF;;;;;;WAMG;6CACyB,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;;;QAO7E,yDAAyD;qCACrC,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;QAGnE,gEAAgE;qCAC5C,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;QAGnE,oEAAoE;wCAC7C,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;QAGtE;;;;;WAKG;0DACsC,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;QAGxF,iEAAiE;mDAC/B,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;QAGlF,qCAAqC;+CACP,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;QAG9E;;;;;;WAMG;yCACqB,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;QAGxE,8EAA8E;wCACvD,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;;;QAOvE,uDAAuD;kCACtC,MAAM,SAAS,MAAM,KAAG,MAAM;QAG/C;;;;WAIG;wCACoB,MAAM,SAAS,MAAM,KAAG,MAAM;QAGrD;;;;WAIG;4CACwB,MAAM,SAAS,MAAM,KAAG,MAAM;QAGzD;;;;WAIG;gDAC4B,MAAM,SAAS,MAAM,KAAG,MAAM;QAG7D;;;;;;;;WAQG;6CACyB,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;QAG7E;;;;WAIG;qDACiC,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;;;QAOrF,iGAAiG;wCAC1E,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;QAGrE,sFAAsF;iDACtD,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;QAG9E;;;;WAIG;oDACgC,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;QAGjF,mGAAmG;gDACpE,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;QAG7E,oHAAoH;sCAC/F,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;QAGnE,mHAAmH;wDAC5E,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;QAGrF,oIAAoI;gDACrG,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;QAG7E,0FAA0F;4CAC/D,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;QAGzE,mFAAmF;0CAC1D,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;;;QAOvE,mFAAmF;wCAC5D,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;QAGxE,8DAA8D;yCACtC,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;QAGzE;;;;WAIG;gCACY,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;QAGhE,+HAA+H;sCAC1G,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;QAGtE,0FAA0F;gDAC3D,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;QAGhF,uFAAuF;0CAC9D,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;QAG1E;;;;WAIG;gDAC4B,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;QAGhF,qFAAqF;wCAC9D,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;QAGxE,oGAAoG;iCACpF,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;;CAoBzD,CAAC;AAEX,MAAM,MAAM,OAAO,GAAG,OAAO,OAAO,CAAC"}
+{"version":3,"file":"ssm-keys.d.ts","sourceRoot":"","sources":["../../../src/cdk/shared/ssm-keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuEG;AAYH;;;;GAIG;AACH,eAAO,MAAM,WAAW;IACtB,kFAAkF;gCAC/D,MAAM,SAAS,MAAM,KAAG,MAAM;IACjD;;;;OAIG;uDACuC,MAAM,SAAS,MAAM,KAAG,MAAM;8BAEvD,MAAM,SAAS,MAAM,KAAG,MAAM;IAG/C;;;;;;OAMG;yCACyB,MAAM,SAAS,MAAM,KAAG,MAAM;IAG1D,sEAAsE;wCAC3C,MAAM,SAAS,MAAM,KAAG,MAAM;IAGzD;;;;OAIG;0CAC0B,MAAM,SAAS,MAAM,KAAG,MAAM;IAG3D;;;;;OAKG;0CAC0B,MAAM,SAAS,MAAM,KAAG,MAAM;CAEnD,CAAC;AAIX,eAAO,MAAM,QAAQ;IACnB;;;;;;OAMG;oCACoB,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;IAGnE,yEAAyE;gCACtD,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;IAG/D;;;;;;OAMG;qCACqB,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;IAGpE;;;;OAIG;IACH,+EAA+E;2CACjD,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;wCAG/C,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;IAGvE;;;;;;OAMG;2CAC2B,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;IAG1E,2EAA2E;wCAChD,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;IAGvE;;;;;OAKG;4CAC4B,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;IAG3E;;;;OAIG;sCACsB,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;IAGrE,8DAA8D;mCACxC,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;IAGtE,4DAA4D;kCACvC,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;IAGrE;;;;OAIG;kCACkB,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;IAGrE,uEAAuE;wCAC5C,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;IAG1E,4CAA4C;uCAClB,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;IAOzE;;;;OAIG;sCACsB,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;IAGxE,qDAAqD;kCAChC,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;IAGpE,2EAA2E;6CAC3C,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;IAG/E,mEAAmE;2CACrC,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;CAErE,CAAC;AAIX,eAAO,MAAM,YAAY;IACvB,iDAAiD;mCAC3B,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;IAGpE,4EAA4E;oCACrD,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;IAGrE;;;;;;OAMG;wCACwB,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;IAGzE;;;;;;OAMG;2CAEQ,MAAM,SACR,MAAM,UACL,MAAM,YACJ,MAAM,KACf,MAAM;IAGT;;;;;;;OAOG;8CAC8B,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;CAEvE,CAAC;AAIX,eAAO,MAAM,UAAU;IACrB;;;;;OAKG;kCACkB,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;IAGrE;;;;OAIG;6CAC6B,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;IAGhF,2EAA2E;mDACrC,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;IAGtF;;;;OAIG;+CAC+B,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;IAGlF;;;;;;OAMG;6CAC6B,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;IAGhF;;;;;;OAMG;qDACqC,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;IAGxF;;;;;;OAMG;yCACyB,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;CAErE,CAAC;AAIX,eAAO,MAAM,aAAa;IACxB,yDAAyD;iCACrC,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;IAGnE,gEAAgE;iCAC5C,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;IAGnE,oEAAoE;oCAC7C,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;IAGtE;;;;;OAKG;sDACsC,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;IAGxF,iEAAiE;+CAC/B,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;IAGlF,qCAAqC;2CACP,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;IAG9E;;;;;;OAMG;qCACqB,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;IAGxE,8EAA8E;oCACvD,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;CAE/D,CAAC;AAIX,eAAO,MAAM,QAAQ;IACnB,uDAAuD;8BACtC,MAAM,SAAS,MAAM,KAAG,MAAM;IAG/C;;;;OAIG;oCACoB,MAAM,SAAS,MAAM,KAAG,MAAM;IAGrD;;;;OAIG;wCACwB,MAAM,SAAS,MAAM,KAAG,MAAM;IAGzD;;;;OAIG;4CAC4B,MAAM,SAAS,MAAM,KAAG,MAAM;IAG7D;;;;;;;;OAQG;yCACyB,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;IAG7E;;;;OAIG;iDACiC,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;CAE7E,CAAC;AAIX,eAAO,MAAM,WAAW;IACtB,iGAAiG;oCAC1E,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;IAGrE,sFAAsF;6CACtD,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;IAG9E;;;;OAIG;gDACgC,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;IAGjF,mGAAmG;4CACpE,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;IAG7E,oHAAoH;kCAC/F,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;IAGnE,mHAAmH;oDAC5E,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;IAGrF,oIAAoI;4CACrG,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;IAG7E,0FAA0F;wCAC/D,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;IAGzE,mFAAmF;sCAC1D,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;CAE/D,CAAC;AAIX,eAAO,MAAM,YAAY;IACvB,mFAAmF;oCAC5D,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;IAGxE,8DAA8D;qCACtC,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;IAGzE;;;;OAIG;4BACY,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;IAGhE,+HAA+H;kCAC1G,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;IAGtE,0FAA0F;4CAC3D,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;IAGhF,uFAAuF;sCAC9D,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;IAG1E;;;;OAIG;4CAC4B,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;IAGhF,qFAAqF;oCAC9D,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;IAGxE,oGAAoG;6BACpF,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;CAEzD,CAAC;AAIX;;;;GAIG;AACH,eAAO,MAAM,OAAO;;QAxdlB,kFAAkF;oCAC/D,MAAM,SAAS,MAAM,KAAG,MAAM;QACjD;;;;WAIG;2DACuC,MAAM,SAAS,MAAM,KAAG,MAAM;kCAEvD,MAAM,SAAS,MAAM,KAAG,MAAM;QAG/C;;;;;;WAMG;6CACyB,MAAM,SAAS,MAAM,KAAG,MAAM;QAG1D,sEAAsE;4CAC3C,MAAM,SAAS,MAAM,KAAG,MAAM;QAGzD;;;;WAIG;8CAC0B,MAAM,SAAS,MAAM,KAAG,MAAM;QAG3D;;;;;WAKG;8CAC0B,MAAM,SAAS,MAAM,KAAG,MAAM;;;QAO3D;;;;;;WAMG;wCACoB,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;QAGnE,yEAAyE;oCACtD,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;QAG/D;;;;;;WAMG;yCACqB,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;QAGpE;;;;WAIG;QACH,+EAA+E;+CACjD,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;4CAG/C,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;QAGvE;;;;;;WAMG;+CAC2B,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;QAG1E,2EAA2E;4CAChD,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;QAGvE;;;;;WAKG;gDAC4B,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;QAG3E;;;;WAIG;0CACsB,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;QAGrE,8DAA8D;uCACxC,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;QAGtE,4DAA4D;sCACvC,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;QAGrE;;;;WAIG;sCACkB,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;QAGrE,uEAAuE;4CAC5C,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;QAG1E,4CAA4C;2CAClB,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;QAOzE;;;;WAIG;0CACsB,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;QAGxE,qDAAqD;sCAChC,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;QAGpE,2EAA2E;iDAC3C,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;QAG/E,mEAAmE;+CACrC,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;;;QAO7E,iDAAiD;uCAC3B,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;QAGpE,4EAA4E;wCACrD,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;QAGrE;;;;;;WAMG;4CACwB,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;QAGzE;;;;;;WAMG;+CAEQ,MAAM,SACR,MAAM,UACL,MAAM,YACJ,MAAM,KACf,MAAM;QAGT;;;;;;;WAOG;kDAC8B,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;;;QAO/E;;;;;WAKG;sCACkB,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;QAGrE;;;;WAIG;iDAC6B,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;QAGhF,2EAA2E;uDACrC,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;QAGtF;;;;WAIG;mDAC+B,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;QAGlF;;;;;;WAMG;iDAC6B,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;QAGhF;;;;;;WAMG;yDACqC,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;QAGxF;;;;;;WAMG;6CACyB,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;;;QAO7E,yDAAyD;qCACrC,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;QAGnE,gEAAgE;qCAC5C,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;QAGnE,oEAAoE;wCAC7C,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;QAGtE;;;;;WAKG;0DACsC,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;QAGxF,iEAAiE;mDAC/B,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;QAGlF,qCAAqC;+CACP,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;QAG9E;;;;;;WAMG;yCACqB,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;QAGxE,8EAA8E;wCACvD,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;;;QAOvE,uDAAuD;kCACtC,MAAM,SAAS,MAAM,KAAG,MAAM;QAG/C;;;;WAIG;wCACoB,MAAM,SAAS,MAAM,KAAG,MAAM;QAGrD;;;;WAIG;4CACwB,MAAM,SAAS,MAAM,KAAG,MAAM;QAGzD;;;;WAIG;gDAC4B,MAAM,SAAS,MAAM,KAAG,MAAM;QAG7D;;;;;;;;WAQG;6CACyB,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;QAG7E;;;;WAIG;qDACiC,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;;;QAOrF,iGAAiG;wCAC1E,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;QAGrE,sFAAsF;iDACtD,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;QAG9E;;;;WAIG;oDACgC,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;QAGjF,mGAAmG;gDACpE,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;QAG7E,oHAAoH;sCAC/F,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;QAGnE,mHAAmH;wDAC5E,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;QAGrF,oIAAoI;gDACrG,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;QAG7E,0FAA0F;4CAC/D,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;QAGzE,mFAAmF;0CAC1D,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;;;QAOvE,mFAAmF;wCAC5D,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;QAGxE,8DAA8D;yCACtC,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;QAGzE;;;;WAIG;gCACY,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;QAGhE,+HAA+H;sCAC1G,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;QAGtE,0FAA0F;gDAC3D,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;QAGhF,uFAAuF;0CAC9D,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;QAG1E;;;;WAIG;gDAC4B,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;QAGhF,qFAAqF;wCAC9D,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;QAGxE,oGAAoG;iCACpF,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;;CAoBzD,CAAC;AAEX,MAAM,MAAM,OAAO,GAAG,OAAO,OAAO,CAAC;AAErC;;;;GAIG;AACH,eAAO,MAAM,YAAY;uCACG,MAAM,SAAS,MAAM,UAAU,MAAM;IAE/D,yEAAyE;+BACvD,MAAM,SAAS,MAAM;CAC/B,CAAC"}

package/dist/cdk/shared/ssm-keys.js

@@ -83,6 +83,14 @@ function base(project, stage) {
  * databases / caches / Lambdas live in it.
  */
 export const networkKeys = {
+    /** The VPC's CIDR block (ventures joining the VPC import it with the subnets). */
+    vpcCidr: (project, stage) => `${base(project, stage)}/network/vpc-cidr`,
+    /**
+     * The INTERNAL CLIENTS security group: every Lambda of every venture in
+     * this VPC is a member, and the VPC's internal service ports (`expose:
+     * 'vpc'`) admit it — not the whole address range.
+     */
+    internalClientsSecurityGroupId: (project, stage) => `${base(project, stage)}/network/internal-clients-sg-id`,
     vpcId: (project, stage) => `${base(project, stage)}/network/vpc-id`,
     /**
      * Comma-joined private subnet IDs (subnets where Lambdas + RDS run).
@@ -128,6 +136,14 @@ export const dataKeys = {
      * URL transparently.
      */
     rdsSecretArn: (project, stage, dbId) => `${base(project, stage)}/data/rds/${dbId}/secret-arn`,
+    /**
+     * ARN of the least-privilege app login secret (`{username,password}`)
+     * functions connect with — present once the migration runner provisions
+     * the roles. The master secret stays with the runner and operators.
+     */
+    /** Secret ARN of the SYSTEM login (only `logins.system.functions` read it). */
+    rdsSystemSecretArn: (project, stage, dbId) => `${base(project, stage)}/data/rds/${dbId}/system-secret-arn`,
+    rdsAppSecretArn: (project, stage, dbId) => `${base(project, stage)}/data/rds/${dbId}/app-secret-arn`,
     /**
      * Security Group ID for the RDS instance. The app stack creates its
      * own Lambda SG locally and `rdsSg.connections.allowFrom(lambdaSg,
@@ -178,6 +194,8 @@ export const dataKeys = {
     cachePort: (project, stage, cacheId) => `${base(project, stage)}/data/cache/${cacheId}/port`,
     /** ElastiCache security group ID — for the cross-stack ingress pattern. */
     cacheSecurityGroupId: (project, stage, cacheId) => `${base(project, stage)}/data/cache/${cacheId}/security-group-id`,
+    /** Secrets Manager ARN of a cache's AUTH token (`{"token":…}`). */
+    cacheAuthSecretArn: (project, stage, cacheId) => `${base(project, stage)}/data/cache/${cacheId}/auth-secret-arn`,
 };
 // ─── Identity tier ──────────────────────────────────────────────────
 export const identityKeys = {
@@ -252,10 +270,10 @@ export const configKeys = {
     whatsappVerifyTokenSecretArn: (project, stage, notifyId) => `${base(project, stage)}/config/notify/${notifyId}/whatsapp-verify-token-secret-arn`,
     /**
      * ARN of the payment-provider credential Secret for a `billing`
-     * intent. Holds one JSON document — for Zazu,
+     * intent. Holds one JSON document — for Manza,
      * `{apiKey, accountId, webhookSecret}` — that a DevOps engineer
      * populates after the first deploy. The app stack reads this to grant
-     * `secretsmanager:GetSecretValue` and to inject `ZAZU_SECRET_ARN`.
+     * `secretsmanager:GetSecretValue` and to inject `MANZA_SECRET_ARN`.
      */
     billingSecretArn: (project, stage, billingId) => `${base(project, stage)}/config/billing/${billingId}/secret-arn`,
 };
@@ -398,4 +416,14 @@ export const ssmKeys = {
     compute: computeKeys,
     services: servicesKeys,
 };
+/**
+ * Internal routes (`internal` intent): the pair secret a callee minted for
+ * each caller venture. The caller's `vk deploy` reads it to check the pair
+ * exists before deploying (`verifyInternalCalls` in `@venturekit/cli`).
+ */
+export const internalKeys = {
+    callerSecretArn: (callee, stage, caller) => `/venturekit/${callee}/${stage}/internal/callers/${caller}/secret-arn`,
+    /** The comma-separated ventures allowed to call (`internal.callers`). */
+    callers: (callee, stage) => `/venturekit/${callee}/${stage}/internal/callers-list`,
+};
 //# sourceMappingURL=ssm-keys.js.map

package/dist/cdk/shared/ssm-keys.js.map

@@ -1 +1 @@
-{"version":3,"file":"ssm-keys.js","sourceRoot":"","sources":["../../../src/cdk/shared/ssm-keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuEG;AAEH,6DAA6D;AAC7D,MAAM,IAAI,GAAG,aAAa,CAAC;AAE3B,yEAAyE;AACzE,SAAS,IAAI,CAAC,OAAe,EAAE,KAAa;IAC1C,OAAO,GAAG,IAAI,IAAI,OAAO,IAAI,KAAK,EAAE,CAAC;AACvC,CAAC;AAED,wEAAwE;AAExE;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,KAAK,EAAE,CAAC,OAAe,EAAE,KAAa,EAAU,EAAE,CAChD,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,iBAAiB;IAE1C;;;;;;OAMG;IACH,gBAAgB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAU,EAAE,CAC3D,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,6BAA6B;IAEtD,sEAAsE;IACtE,eAAe,EAAE,CAAC,OAAe,EAAE,KAAa,EAAU,EAAE,CAC1D,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,4BAA4B;IAErD;;;;OAIG;IACH,iBAAiB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAU,EAAE,CAC5D,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,8BAA8B;IAEvD;;;;;OAKG;IACH,iBAAiB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAU,EAAE,CAC5D,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,6BAA6B;CAC9C,CAAC;AAEX,uEAAuE;AAEvE,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB;;;;;;OAMG;IACH,WAAW,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,IAAY,EAAU,EAAE,CACpE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,IAAI,WAAW;IAErD,yEAAyE;IACzE,OAAO,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,IAAY,EAAU,EAAE,CAChE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,IAAI,OAAO;IAEjD;;;;;;OAMG;IACH,YAAY,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,IAAY,EAAU,EAAE,CACrE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,IAAI,aAAa;IAEvD;;;;;;OAMG;IACH,kBAAkB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,IAAY,EAAU,EAAE,CAC3E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,IAAI,oBAAoB;IAE9D,2EAA2E;IAC3E,eAAe,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,IAAY,EAAU,EAAE,CACxE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,IAAI,gBAAgB;IAE1D;;;;;OAKG;IACH,mBAAmB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,IAAY,EAAU,EAAE,CAC5E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,IAAI,oBAAoB;IAE9D;;;;OAIG;IACH,aAAa,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,IAAY,EAAU,EAAE,CACtE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,IAAI,cAAc;IAExD,8DAA8D;IAC9D,UAAU,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CACvE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,iBAAiB,QAAQ,cAAc;IAEhE,4DAA4D;IAC5D,SAAS,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CACtE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,iBAAiB,QAAQ,aAAa;IAE/D;;;;OAIG;IACH,SAAS,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CACtE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,iBAAiB,QAAQ,aAAa;IAE/D,uEAAuE;IACvE,eAAe,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,OAAe,EAAU,EAAE,CAC3E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,gBAAgB,OAAO,aAAa;IAE7D,4CAA4C;IAC5C,cAAc,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,OAAe,EAAU,EAAE,CAC1E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,gBAAgB,OAAO,YAAY;IAE5D,+DAA+D;IAC/D,8DAA8D;IAC9D,gEAAgE;IAEhE;;;;OAIG;IACH,aAAa,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,OAAe,EAAU,EAAE,CACzE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,eAAe,OAAO,WAAW;IAE1D,qDAAqD;IACrD,SAAS,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,OAAe,EAAU,EAAE,CACrE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,eAAe,OAAO,OAAO;IAEtD,2EAA2E;IAC3E,oBAAoB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,OAAe,EAAU,EAAE,CAChF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,eAAe,OAAO,oBAAoB;CAC3D,CAAC;AAEX,uEAAuE;AAEvE,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,iDAAiD;IACjD,UAAU,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CACrE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,MAAM,eAAe;IAE3D,4EAA4E;IAC5E,WAAW,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CACtE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,MAAM,gBAAgB;IAE5D;;;;;;OAMG;IACH,eAAe,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CAC1E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,MAAM,YAAY;IAExD;;;;;;OAMG;IACH,kBAAkB,EAAE,CAClB,OAAe,EACf,KAAa,EACb,MAAc,EACd,QAAgB,EACR,EAAE,CACV,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,MAAM,cAAc,QAAQ,aAAa;IAE/E;;;;;;;OAOG;IACH,qBAAqB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CAChF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,MAAM,4BAA4B;CAChE,CAAC;AAEX,sEAAsE;AAEtE,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB;;;;;OAKG;IACH,SAAS,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CACtE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,mBAAmB,QAAQ,MAAM;IAE1D;;;;OAIG;IACH,oBAAoB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CACjF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,kBAAkB,QAAQ,mBAAmB;IAEtE,2EAA2E;IAC3E,0BAA0B,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CACvF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,kBAAkB,QAAQ,yBAAyB;IAE5E;;;;OAIG;IACH,sBAAsB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CACnF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,kBAAkB,QAAQ,4BAA4B;IAE/E;;;;;;OAMG;IACH,oBAAoB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CACjF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,kBAAkB,QAAQ,0BAA0B;IAE7E;;;;;;OAMG;IACH,4BAA4B,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CACzF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,kBAAkB,QAAQ,mCAAmC;IAEtF;;;;;;OAMG;IACH,gBAAgB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,SAAiB,EAAU,EAAE,CAC9E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,mBAAmB,SAAS,aAAa;CAC1D,CAAC;AAEX,uEAAuE;AAEvE,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,yDAAyD;IACzD,QAAQ,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,OAAe,EAAU,EAAE,CACpE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,qBAAqB,OAAO,MAAM;IAE3D,gEAAgE;IAChE,QAAQ,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,OAAe,EAAU,EAAE,CACpE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,qBAAqB,OAAO,MAAM;IAE3D,oEAAoE;IACpE,WAAW,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,OAAe,EAAU,EAAE,CACvE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,qBAAqB,OAAO,UAAU;IAE/D;;;;;OAKG;IACH,6BAA6B,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,OAAe,EAAU,EAAE,CACzF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,qBAAqB,OAAO,6BAA6B;IAElF,iEAAiE;IACjE,sBAAsB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CACnF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,qBAAqB,QAAQ,qBAAqB;IAE3E,qCAAqC;IACrC,kBAAkB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CAC/E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,qBAAqB,QAAQ,iBAAiB;IAEvE;;;;;;OAMG;IACH,YAAY,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CACzE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,qBAAqB,QAAQ,WAAW;IAEjE,8EAA8E;IAC9E,WAAW,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CACxE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,qBAAqB,QAAQ,UAAU;CACxD,CAAC;AAEX,uEAAuE;AAEvE,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,uDAAuD;IACvD,KAAK,EAAE,CAAC,OAAe,EAAE,KAAa,EAAU,EAAE,CAChD,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,cAAc;IAEvC;;;;OAIG;IACH,WAAW,EAAE,CAAC,OAAe,EAAE,KAAa,EAAU,EAAE,CACtD,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,oBAAoB;IAE7C;;;;OAIG;IACH,eAAe,EAAE,CAAC,OAAe,EAAE,KAAa,EAAU,EAAE,CAC1D,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,yBAAyB;IAElD;;;;OAIG;IACH,mBAAmB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAU,EAAE,CAC9D,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,8BAA8B;IAEvD;;;;;;;;OAQG;IACH,gBAAgB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,SAAiB,EAAU,EAAE,CAC9E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,iBAAiB,SAAS,aAAa;IAEhE;;;;OAIG;IACH,wBAAwB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,SAAiB,EAAU,EAAE,CACtF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,iBAAiB,SAAS,sBAAsB;CACjE,CAAC;AAEX,sEAAsE;AAEtE,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,iGAAiG;IACjG,WAAW,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CACtE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,MAAM,eAAe;IAE1D,sFAAsF;IACtF,oBAAoB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CAC/E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,MAAM,yBAAyB;IAEpE;;;;OAIG;IACH,uBAAuB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CAClF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,MAAM,6BAA6B;IAExE,mGAAmG;IACnG,mBAAmB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CAC9E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,MAAM,yBAAyB;IAEpE,oHAAoH;IACpH,SAAS,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CACpE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,MAAM,YAAY;IAEvD,mHAAmH;IACnH,2BAA2B,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CACtF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,MAAM,kCAAkC;IAE7E,oIAAoI;IACpI,mBAAmB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CAC9E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,MAAM,wBAAwB;IAEnE,0FAA0F;IAC1F,eAAe,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CAC1E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,MAAM,oBAAoB;IAE/D,mFAAmF;IACnF,aAAa,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CACxE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,MAAM,kBAAkB;CACrD,CAAC;AAEX,sEAAsE;AAEtE,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,mFAAmF;IACnF,WAAW,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,SAAiB,EAAU,EAAE,CACzE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,SAAS,eAAe;IAE9D,8DAA8D;IAC9D,YAAY,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,SAAiB,EAAU,EAAE,CAC1E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,SAAS,iBAAiB;IAEhE;;;;OAIG;IACH,GAAG,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,SAAiB,EAAU,EAAE,CACjE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,SAAS,MAAM;IAErD,+HAA+H;IAC/H,SAAS,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,SAAiB,EAAU,EAAE,CACvE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,SAAS,YAAY;IAE3D,0FAA0F;IAC1F,mBAAmB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,SAAiB,EAAU,EAAE,CACjF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,SAAS,yBAAyB;IAExE,uFAAuF;IACvF,aAAa,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,SAAiB,EAAU,EAAE,CAC3E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,SAAS,kBAAkB;IAEjE;;;;OAIG;IACH,mBAAmB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,SAAiB,EAAU,EAAE,CACjF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,SAAS,wBAAwB;IAEvE,qFAAqF;IACrF,WAAW,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,SAAiB,EAAU,EAAE,CACzE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,SAAS,eAAe;IAE9D,oGAAoG;IACpG,IAAI,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,SAAiB,EAAU,EAAE,CAClE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,SAAS,OAAO;CAC9C,CAAC;AAEX,uEAAuE;AAEvE;;;;GAIG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG;IACrB,OAAO,EAAE,WAAW;IACpB,IAAI,EAAE,QAAQ;IACd,QAAQ,EAAE,YAAY;IACtB,MAAM,EAAE,UAAU;IAClB,SAAS,EAAE,aAAa;IACxB,IAAI,EAAE,QAAQ;IACd,OAAO,EAAE,WAAW;IACpB,QAAQ,EAAE,YAAY;CACd,CAAC"}
+{"version":3,"file":"ssm-keys.js","sourceRoot":"","sources":["../../../src/cdk/shared/ssm-keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuEG;AAEH,6DAA6D;AAC7D,MAAM,IAAI,GAAG,aAAa,CAAC;AAE3B,yEAAyE;AACzE,SAAS,IAAI,CAAC,OAAe,EAAE,KAAa;IAC1C,OAAO,GAAG,IAAI,IAAI,OAAO,IAAI,KAAK,EAAE,CAAC;AACvC,CAAC;AAED,wEAAwE;AAExE;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,kFAAkF;IAClF,OAAO,EAAE,CAAC,OAAe,EAAE,KAAa,EAAU,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,mBAAmB;IAC/F;;;;OAIG;IACH,8BAA8B,EAAE,CAAC,OAAe,EAAE,KAAa,EAAU,EAAE,CACzE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,iCAAiC;IAC1D,KAAK,EAAE,CAAC,OAAe,EAAE,KAAa,EAAU,EAAE,CAChD,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,iBAAiB;IAE1C;;;;;;OAMG;IACH,gBAAgB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAU,EAAE,CAC3D,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,6BAA6B;IAEtD,sEAAsE;IACtE,eAAe,EAAE,CAAC,OAAe,EAAE,KAAa,EAAU,EAAE,CAC1D,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,4BAA4B;IAErD;;;;OAIG;IACH,iBAAiB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAU,EAAE,CAC5D,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,8BAA8B;IAEvD;;;;;OAKG;IACH,iBAAiB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAU,EAAE,CAC5D,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,6BAA6B;CAC9C,CAAC;AAEX,uEAAuE;AAEvE,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB;;;;;;OAMG;IACH,WAAW,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,IAAY,EAAU,EAAE,CACpE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,IAAI,WAAW;IAErD,yEAAyE;IACzE,OAAO,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,IAAY,EAAU,EAAE,CAChE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,IAAI,OAAO;IAEjD;;;;;;OAMG;IACH,YAAY,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,IAAY,EAAU,EAAE,CACrE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,IAAI,aAAa;IAEvD;;;;OAIG;IACH,+EAA+E;IAC/E,kBAAkB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,IAAY,EAAU,EAAE,CAC3E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,IAAI,oBAAoB;IAE9D,eAAe,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,IAAY,EAAU,EAAE,CACxE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,IAAI,iBAAiB;IAE3D;;;;;;OAMG;IACH,kBAAkB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,IAAY,EAAU,EAAE,CAC3E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,IAAI,oBAAoB;IAE9D,2EAA2E;IAC3E,eAAe,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,IAAY,EAAU,EAAE,CACxE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,IAAI,gBAAgB;IAE1D;;;;;OAKG;IACH,mBAAmB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,IAAY,EAAU,EAAE,CAC5E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,IAAI,oBAAoB;IAE9D;;;;OAIG;IACH,aAAa,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,IAAY,EAAU,EAAE,CACtE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,IAAI,cAAc;IAExD,8DAA8D;IAC9D,UAAU,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CACvE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,iBAAiB,QAAQ,cAAc;IAEhE,4DAA4D;IAC5D,SAAS,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CACtE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,iBAAiB,QAAQ,aAAa;IAE/D;;;;OAIG;IACH,SAAS,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CACtE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,iBAAiB,QAAQ,aAAa;IAE/D,uEAAuE;IACvE,eAAe,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,OAAe,EAAU,EAAE,CAC3E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,gBAAgB,OAAO,aAAa;IAE7D,4CAA4C;IAC5C,cAAc,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,OAAe,EAAU,EAAE,CAC1E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,gBAAgB,OAAO,YAAY;IAE5D,+DAA+D;IAC/D,8DAA8D;IAC9D,gEAAgE;IAEhE;;;;OAIG;IACH,aAAa,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,OAAe,EAAU,EAAE,CACzE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,eAAe,OAAO,WAAW;IAE1D,qDAAqD;IACrD,SAAS,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,OAAe,EAAU,EAAE,CACrE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,eAAe,OAAO,OAAO;IAEtD,2EAA2E;IAC3E,oBAAoB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,OAAe,EAAU,EAAE,CAChF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,eAAe,OAAO,oBAAoB;IAEnE,mEAAmE;IACnE,kBAAkB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,OAAe,EAAU,EAAE,CAC9E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,eAAe,OAAO,kBAAkB;CACzD,CAAC;AAEX,uEAAuE;AAEvE,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,iDAAiD;IACjD,UAAU,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CACrE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,MAAM,eAAe;IAE3D,4EAA4E;IAC5E,WAAW,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CACtE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,MAAM,gBAAgB;IAE5D;;;;;;OAMG;IACH,eAAe,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CAC1E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,MAAM,YAAY;IAExD;;;;;;OAMG;IACH,kBAAkB,EAAE,CAClB,OAAe,EACf,KAAa,EACb,MAAc,EACd,QAAgB,EACR,EAAE,CACV,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,MAAM,cAAc,QAAQ,aAAa;IAE/E;;;;;;;OAOG;IACH,qBAAqB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CAChF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,MAAM,4BAA4B;CAChE,CAAC;AAEX,sEAAsE;AAEtE,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB;;;;;OAKG;IACH,SAAS,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CACtE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,mBAAmB,QAAQ,MAAM;IAE1D;;;;OAIG;IACH,oBAAoB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CACjF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,kBAAkB,QAAQ,mBAAmB;IAEtE,2EAA2E;IAC3E,0BAA0B,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CACvF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,kBAAkB,QAAQ,yBAAyB;IAE5E;;;;OAIG;IACH,sBAAsB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CACnF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,kBAAkB,QAAQ,4BAA4B;IAE/E;;;;;;OAMG;IACH,oBAAoB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CACjF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,kBAAkB,QAAQ,0BAA0B;IAE7E;;;;;;OAMG;IACH,4BAA4B,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CACzF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,kBAAkB,QAAQ,mCAAmC;IAEtF;;;;;;OAMG;IACH,gBAAgB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,SAAiB,EAAU,EAAE,CAC9E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,mBAAmB,SAAS,aAAa;CAC1D,CAAC;AAEX,uEAAuE;AAEvE,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,yDAAyD;IACzD,QAAQ,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,OAAe,EAAU,EAAE,CACpE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,qBAAqB,OAAO,MAAM;IAE3D,gEAAgE;IAChE,QAAQ,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,OAAe,EAAU,EAAE,CACpE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,qBAAqB,OAAO,MAAM;IAE3D,oEAAoE;IACpE,WAAW,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,OAAe,EAAU,EAAE,CACvE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,qBAAqB,OAAO,UAAU;IAE/D;;;;;OAKG;IACH,6BAA6B,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,OAAe,EAAU,EAAE,CACzF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,qBAAqB,OAAO,6BAA6B;IAElF,iEAAiE;IACjE,sBAAsB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CACnF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,qBAAqB,QAAQ,qBAAqB;IAE3E,qCAAqC;IACrC,kBAAkB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CAC/E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,qBAAqB,QAAQ,iBAAiB;IAEvE;;;;;;OAMG;IACH,YAAY,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CACzE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,qBAAqB,QAAQ,WAAW;IAEjE,8EAA8E;IAC9E,WAAW,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CACxE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,qBAAqB,QAAQ,UAAU;CACxD,CAAC;AAEX,uEAAuE;AAEvE,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,uDAAuD;IACvD,KAAK,EAAE,CAAC,OAAe,EAAE,KAAa,EAAU,EAAE,CAChD,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,cAAc;IAEvC;;;;OAIG;IACH,WAAW,EAAE,CAAC,OAAe,EAAE,KAAa,EAAU,EAAE,CACtD,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,oBAAoB;IAE7C;;;;OAIG;IACH,eAAe,EAAE,CAAC,OAAe,EAAE,KAAa,EAAU,EAAE,CAC1D,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,yBAAyB;IAElD;;;;OAIG;IACH,mBAAmB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAU,EAAE,CAC9D,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,8BAA8B;IAEvD;;;;;;;;OAQG;IACH,gBAAgB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,SAAiB,EAAU,EAAE,CAC9E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,iBAAiB,SAAS,aAAa;IAEhE;;;;OAIG;IACH,wBAAwB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,SAAiB,EAAU,EAAE,CACtF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,iBAAiB,SAAS,sBAAsB;CACjE,CAAC;AAEX,sEAAsE;AAEtE,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,iGAAiG;IACjG,WAAW,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CACtE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,MAAM,eAAe;IAE1D,sFAAsF;IACtF,oBAAoB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CAC/E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,MAAM,yBAAyB;IAEpE;;;;OAIG;IACH,uBAAuB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CAClF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,MAAM,6BAA6B;IAExE,mGAAmG;IACnG,mBAAmB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CAC9E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,MAAM,yBAAyB;IAEpE,oHAAoH;IACpH,SAAS,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CACpE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,MAAM,YAAY;IAEvD,mHAAmH;IACnH,2BAA2B,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CACtF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,MAAM,kCAAkC;IAE7E,oIAAoI;IACpI,mBAAmB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CAC9E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,MAAM,wBAAwB;IAEnE,0FAA0F;IAC1F,eAAe,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CAC1E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,MAAM,oBAAoB;IAE/D,mFAAmF;IACnF,aAAa,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CACxE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,MAAM,kBAAkB;CACrD,CAAC;AAEX,sEAAsE;AAEtE,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,mFAAmF;IACnF,WAAW,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,SAAiB,EAAU,EAAE,CACzE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,SAAS,eAAe;IAE9D,8DAA8D;IAC9D,YAAY,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,SAAiB,EAAU,EAAE,CAC1E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,SAAS,iBAAiB;IAEhE;;;;OAIG;IACH,GAAG,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,SAAiB,EAAU,EAAE,CACjE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,SAAS,MAAM;IAErD,+HAA+H;IAC/H,SAAS,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,SAAiB,EAAU,EAAE,CACvE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,SAAS,YAAY;IAE3D,0FAA0F;IAC1F,mBAAmB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,SAAiB,EAAU,EAAE,CACjF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,SAAS,yBAAyB;IAExE,uFAAuF;IACvF,aAAa,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,SAAiB,EAAU,EAAE,CAC3E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,SAAS,kBAAkB;IAEjE;;;;OAIG;IACH,mBAAmB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,SAAiB,EAAU,EAAE,CACjF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,SAAS,wBAAwB;IAEvE,qFAAqF;IACrF,WAAW,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,SAAiB,EAAU,EAAE,CACzE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,SAAS,eAAe;IAE9D,oGAAoG;IACpG,IAAI,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,SAAiB,EAAU,EAAE,CAClE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,SAAS,OAAO;CAC9C,CAAC;AAEX,uEAAuE;AAEvE;;;;GAIG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG;IACrB,OAAO,EAAE,WAAW;IACpB,IAAI,EAAE,QAAQ;IACd,QAAQ,EAAE,YAAY;IACtB,MAAM,EAAE,UAAU;IAClB,SAAS,EAAE,aAAa;IACxB,IAAI,EAAE,QAAQ;IACd,OAAO,EAAE,WAAW;IACpB,QAAQ,EAAE,YAAY;CACd,CAAC;AAIX;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,eAAe,EAAE,CAAC,MAAc,EAAE,KAAa,EAAE,MAAc,EAAE,EAAE,CACjE,eAAe,MAAM,IAAI,KAAK,qBAAqB,MAAM,aAAa;IACxE,yEAAyE;IACzE,OAAO,EAAE,CAAC,MAAc,EAAE,KAAa,EAAE,EAAE,CAAC,eAAe,MAAM,IAAI,KAAK,wBAAwB;CAC1F,CAAC"}

package/dist/cdk/shared/websocket-construct.d.ts

@@ -110,8 +110,16 @@ export interface AttachWebSocketApiProps {
     envConfig: EnvConfig;
     /** Shared Lambda execution role. The ws Lambdas attach to this. */
     lambdaRole: iam.Role;
+    /** Per-route execution role (default `lambdaRole`) — e.g. a system-database-login role. */
+    roleFor?: (routeKey: string) => iam.Role;
+    /** Per-route env on top of `baseEnvVars` (e.g. the system login's secret). */
+    envFor?: (routeKey: string) => Record<string, string>;
+    /** Other roles a route may run as: they get the same table / connection grants. */
+    extraRoles?: iam.Role[];
     /** Shared Lambda SG when a VPC is imported; otherwise undefined. */
     lambdaSecurityGroup?: ec2.ISecurityGroup;
+    /** More groups every handler joins (the VPC's internal clients group). */
+    extraSecurityGroups?: ec2.ISecurityGroup[];
     /** Imported VPC; ws Lambdas attach to the same private subnets. */
     vpc?: ec2.IVpc;
     /**