@venturekit/infra 0.0.50 → 0.0.51

package/dist/cdk/shared/internal-routes.js

@@ -0,0 +1,127 @@
+/**
+ * Internal routes between ventures (`internal` intent) — the IAM side.
+ *
+ * Callee: one pair secret per declared caller (`internal.callers`), readable
+ * by the callee's functions, which verify each call with it, and rotated on
+ * a schedule (`internal.rotationDays`). Caller (`internal.calls`): the right
+ * to invoke the callee's internal route functions and to read the pair
+ * secret the callee minted for it — nothing of the callee's other functions
+ * or secrets. A venture may list itself on both sides: its own containers
+ * (`services`) call its internal routes the same way.
+ */
+import * as cdk from 'aws-cdk-lib';
+import * as iam from 'aws-cdk-lib/aws-iam';
+import * as lambda from 'aws-cdk-lib/aws-lambda';
+import * as secretsmanager from 'aws-cdk-lib/aws-secretsmanager';
+import { INTERNAL_ROUTE_PREFIX, internalCallerSecretName } from '@venturekit/core';
+/** Default days between two rotations of a pair secret. */
+export const DEFAULT_PAIR_ROTATION_DAYS = 30;
+/** The name prefix of a venture's internal route functions (`<project>-<stage>-route-internal-…`). */
+function internalRoutePrefix(project, stage) {
+    return `${project}-${stage}-route-${INTERNAL_ROUTE_PREFIX.slice(1)}-`;
+}
+/** What a caller venture's roles need to call `internal.calls`. */
+export function internalCallStatements(scope, project, stage, internal) {
+    const calls = [...new Set(internal?.calls ?? [])];
+    if (calls.length === 0)
+        return [];
+    const { partition, region, account } = cdk.Stack.of(scope);
+    for (const callee of calls) {
+        // Names past 56 chars are clamped with a hash, so the prefix must fit for the wildcard to hold.
+        if (internalRoutePrefix(callee, stage).length > 56) {
+            throw new Error(`[venturekit] internal.calls '${callee}': '${internalRoutePrefix(callee, stage)}' is too long to grant by prefix (56 chars max)`);
+        }
+    }
+    return [
+        new iam.PolicyStatement({
+            sid: 'InvokeInternalRoutes',
+            actions: ['lambda:InvokeFunction'],
+            resources: calls.map((callee) => `arn:${partition}:lambda:${region}:${account}:function:${internalRoutePrefix(callee, stage)}*`),
+        }),
+        new iam.PolicyStatement({
+            sid: 'ReadInternalPairSecrets',
+            actions: ['secretsmanager:GetSecretValue'],
+            resources: calls.map((callee) => `arn:${partition}:secretsmanager:${region}:${account}:secret:${internalCallerSecretName(callee, stage, project)}-*`),
+        }),
+    ];
+}
+/**
+ * The rotation step for a pair secret: a new `current`, the old one kept as
+ * `previous` — so a caller still signing with it is accepted until the next
+ * rotation, while callers and callees re-read the keyring (`@venturekit/runtime`
+ * `internal-callers.ts`). Secrets Manager's four-step protocol; `setSecret`
+ * and `testSecret` have nothing to do (no external system holds the key).
+ */
+const ROTATION_HANDLER = `
+const { SecretsManagerClient, GetSecretValueCommand, PutSecretValueCommand, DescribeSecretCommand, UpdateSecretVersionStageCommand } = require('@aws-sdk/client-secrets-manager');
+const { randomBytes } = require('crypto');
+const sm = new SecretsManagerClient({});
+const currentKey = (s) => { try { const j = JSON.parse(s); return j.current || j.value || s; } catch { return s; } };
+exports.handler = async ({ SecretId, ClientRequestToken, Step }) => {
+  const meta = await sm.send(new DescribeSecretCommand({ SecretId }));
+  const versions = meta.VersionIdsToStages || {};
+  if (!versions[ClientRequestToken]) throw new Error('unknown version ' + ClientRequestToken);
+  if (Step === 'createSecret') {
+    try {
+      await sm.send(new GetSecretValueCommand({ SecretId, VersionId: ClientRequestToken, VersionStage: 'AWSPENDING' }));
+      return;
+    } catch (e) {
+      if (e.name !== 'ResourceNotFoundException') throw e;
+    }
+    const current = await sm.send(new GetSecretValueCommand({ SecretId, VersionStage: 'AWSCURRENT' }));
+    const next = { current: randomBytes(32).toString('hex'), previous: currentKey(current.SecretString || '') };
+    await sm.send(new PutSecretValueCommand({ SecretId, ClientRequestToken, SecretString: JSON.stringify(next), VersionStages: ['AWSPENDING'] }));
+  } else if (Step === 'finishSecret') {
+    if ((versions[ClientRequestToken] || []).includes('AWSCURRENT')) return;
+    const currentVersion = Object.keys(versions).find((v) => versions[v].includes('AWSCURRENT'));
+    await sm.send(new UpdateSecretVersionStageCommand({ SecretId, VersionStage: 'AWSCURRENT', MoveToVersionId: ClientRequestToken, RemoveFromVersionId: currentVersion }));
+  }
+};
+`;
+/**
+ * The callee's pair secrets, one per `internal.callers` entry, each rotated
+ * every `internal.rotationDays` (default {@link DEFAULT_PAIR_ROTATION_DAYS};
+ * `false` turns rotation off). Returns them keyed by caller; the caller of
+ * this helper grants its functions read and hands them the ARNs
+ * (`VENTURE_INTERNAL_CALLER_SECRET_ARNS`).
+ */
+export function createInternalCallerSecrets(scope, project, stage, internal, retain) {
+    const secrets = new Map();
+    const callers = [...new Set(internal?.callers ?? [])];
+    if (callers.length === 0)
+        return secrets;
+    const rotationDays = internal?.rotationDays ?? DEFAULT_PAIR_ROTATION_DAYS;
+    if (rotationDays !== false && (!Number.isInteger(rotationDays) || rotationDays < 1 || rotationDays > 365)) {
+        throw new Error(`[venturekit] internal.rotationDays must be a whole number of days from 1 to 365, or false (got ${String(rotationDays)})`);
+    }
+    const rotator = rotationDays === false
+        ? undefined
+        : new lambda.Function(scope, 'InternalPairSecretRotation', {
+            runtime: lambda.Runtime.NODEJS_22_X,
+            handler: 'index.handler',
+            code: lambda.Code.fromInline(ROTATION_HANDLER),
+            timeout: cdk.Duration.seconds(30),
+            description: `Rotates ${project}-${stage}'s internal-route pair secrets`,
+        });
+    for (const caller of callers) {
+        const secret = new secretsmanager.Secret(scope, `InternalCallerSecret-${caller}`, {
+            secretName: internalCallerSecretName(project, stage, caller),
+            description: `Pair secret: ${caller} → ${project} internal routes (${stage})`,
+            generateSecretString: { secretStringTemplate: '{}', generateStringKey: 'value', passwordLength: 64, excludePunctuation: true },
+            removalPolicy: retain ? cdk.RemovalPolicy.RETAIN : cdk.RemovalPolicy.DESTROY,
+        });
+        if (rotator && rotationDays !== false) {
+            secret.addRotationSchedule(`InternalCallerSecretRotation-${caller}`, {
+                rotationLambda: rotator,
+                automaticallyAfter: cdk.Duration.days(rotationDays),
+            });
+            rotator.addToRolePolicy(new iam.PolicyStatement({
+                actions: ['secretsmanager:DescribeSecret', 'secretsmanager:GetSecretValue', 'secretsmanager:PutSecretValue', 'secretsmanager:UpdateSecretVersionStage'],
+                resources: [secret.secretArn],
+            }));
+        }
+        secrets.set(caller, secret);
+    }
+    return secrets;
+}
+//# sourceMappingURL=internal-routes.js.map

package/dist/cdk/shared/internal-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"internal-routes.js","sourceRoot":"","sources":["../../../src/cdk/shared/internal-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,GAAG,MAAM,aAAa,CAAC;AACnC,OAAO,KAAK,GAAG,MAAM,qBAAqB,CAAC;AAC3C,OAAO,KAAK,MAAM,MAAM,wBAAwB,CAAC;AACjD,OAAO,KAAK,cAAc,MAAM,gCAAgC,CAAC;AAEjE,OAAO,EAAE,qBAAqB,EAAE,wBAAwB,EAAuB,MAAM,kBAAkB,CAAC;AAExG,2DAA2D;AAC3D,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,CAAC;AAE7C,sGAAsG;AACtG,SAAS,mBAAmB,CAAC,OAAe,EAAE,KAAa;IACzD,OAAO,GAAG,OAAO,IAAI,KAAK,UAAU,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC;AACxE,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,sBAAsB,CAAC,KAAgB,EAAE,OAAe,EAAE,KAAa,EAAE,QAAoC;IAC3H,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;IAClD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAClC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;IAC3D,KAAK,MAAM,MAAM,IAAI,KAAK,EAAE,CAAC;QAC3B,gGAAgG;QAChG,IAAI,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,gCAAgC,MAAM,OAAO,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACpJ,CAAC;IACH,CAAC;IACD,OAAO;QACL,IAAI,GAAG,CAAC,eAAe,CAAC;YACtB,GAAG,EAAE,sBAAsB;YAC3B,OAAO,EAAE,CAAC,uBAAuB,CAAC;YAClC,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,SAAS,WAAW,MAAM,IAAI,OAAO,aAAa,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC;SACjI,CAAC;QACF,IAAI,GAAG,CAAC,eAAe,CAAC;YACtB,GAAG,EAAE,yBAAyB;YAC9B,OAAO,EAAE,CAAC,+BAA+B,CAAC;YAC1C,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,SAAS,mBAAmB,MAAM,IAAI,OAAO,WAAW,wBAAwB,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC;SACtJ,CAAC;KACH,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,gBAAgB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;CAyBxB,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CACzC,KAAgB,EAChB,OAAe,EACf,KAAa,EACb,QAAoC,EACpC,MAAe;IAEf,MAAM,OAAO,GAAG,IAAI,GAAG,EAAiC,CAAC;IACzD,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;IACtD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IACzC,MAAM,YAAY,GAAG,QAAQ,EAAE,YAAY,IAAI,0BAA0B,CAAC;IAC1E,IAAI,YAAY,KAAK,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,YAAY,GAAG,CAAC,IAAI,YAAY,GAAG,GAAG,CAAC,EAAE,CAAC;QAC1G,MAAM,IAAI,KAAK,CAAC,kGAAkG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IAC7I,CAAC;IACD,MAAM,OAAO,GACX,YAAY,KAAK,KAAK;QACpB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,4BAA4B,EAAE;YACvD,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW;YACnC,OAAO,EAAE,eAAe;YACxB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC;YAC9C,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACjC,WAAW,EAAE,WAAW,OAAO,IAAI,KAAK,gCAAgC;SACzE,CAAC,CAAC;IACT,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,KAAK,EAAE,wBAAwB,MAAM,EAAE,EAAE;YAChF,UAAU,EAAE,wBAAwB,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC;YAC5D,WAAW,EAAE,gBAAgB,MAAM,MAAM,OAAO,qBAAqB,KAAK,GAAG;YAC7E,oBAAoB,EAAE,EAAE,oBAAoB,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,cAAc,EAAE,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE;YAC9H,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,OAAO;SAC7E,CAAC,CAAC;QACH,IAAI,OAAO,IAAI,YAAY,KAAK,KAAK,EAAE,CAAC;YACtC,MAAM,CAAC,mBAAmB,CAAC,gCAAgC,MAAM,EAAE,EAAE;gBACnE,cAAc,EAAE,OAAO;gBACvB,kBAAkB,EAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC;aACpD,CAAC,CAAC;YACH,OAAO,CAAC,eAAe,CACrB,IAAI,GAAG,CAAC,eAAe,CAAC;gBACtB,OAAO,EAAE,CAAC,+BAA+B,EAAE,+BAA+B,EAAE,+BAA+B,EAAE,yCAAyC,CAAC;gBACvJ,SAAS,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC;aAC9B,CAAC,CACH,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/cdk/shared/lambda-helpers.d.ts

@@ -46,20 +46,7 @@ export declare function inlineStubLambdaCode(): lambda.Code;
 export declare function toLambdaRuntime(envConfig: EnvConfig): lambda.Runtime;
 export declare function toLambdaArchitecture(envConfig: EnvConfig): lambda.Architecture;
 export declare function toLogRetention(days: number): logs.RetentionDays;
-/**
- * Tiny non-cryptographic 6-char hex hash. Used only to disambiguate
- * Lambda function names that would otherwise overflow the 64-char
- * limit; collision risk is acceptable because the truncated prefix
- * already encodes most of the route path.
- */
-export declare function shortHash(input: string): string;
-/**
- * Cap a Lambda function name at the AWS hard limit (64 chars). When
- * the natural name overflows, replace the trailing portion with a
- * 6-char hash of the original — preserving the first 56 chars so
- * operators can still recognize the resource by prefix.
- */
-export declare function clampLambdaFunctionName(rawName: string): string;
+export { shortHash, clampLambdaFunctionName } from '@venturekit/core';
 /**
  * Physical name for a Lambda's pre-created LogGroup:
  *

package/dist/cdk/shared/lambda-helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"lambda-helpers.d.ts","sourceRoot":"","sources":["../../../src/cdk/shared/lambda-helpers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAOH,OAAO,KAAK,MAAM,MAAM,wBAAwB,CAAC;AACjD,OAAO,KAAK,IAAI,MAAM,sBAAsB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAuBlD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,4BAA4B,CAC1C,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,eAAe,GAAE,SAAS,MAAM,EAAO,GACtC,MAAM,CAAC,IAAI,CAkBb;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAAC,IAAI,CAIlD;AAID,wBAAgB,eAAe,CAAC,SAAS,EAAE,SAAS,GAAG,MAAM,CAAC,OAAO,CAWpE;AAED,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,SAAS,GAAG,MAAM,CAAC,YAAY,CAI9E;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC,aAAa,CAiB/D;AAID;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAM/C;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAI/D;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,SAAS,EAChB,YAAY,EAAE,MAAM,GACnB,MAAM,CAOR;AAID;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE,MAAM,GACf,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC,CAwB9C"}
+{"version":3,"file":"lambda-helpers.d.ts","sourceRoot":"","sources":["../../../src/cdk/shared/lambda-helpers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAOH,OAAO,KAAK,MAAM,MAAM,wBAAwB,CAAC;AACjD,OAAO,KAAK,IAAI,MAAM,sBAAsB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAuBlD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,4BAA4B,CAC1C,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,eAAe,GAAE,SAAS,MAAM,EAAO,GACtC,MAAM,CAAC,IAAI,CAkBb;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAAC,IAAI,CAIlD;AAID,wBAAgB,eAAe,CAAC,SAAS,EAAE,SAAS,GAAG,MAAM,CAAC,OAAO,CAWpE;AAED,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,SAAS,GAAG,MAAM,CAAC,YAAY,CAI9E;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC,aAAa,CAiB/D;AAKD,OAAO,EAAE,SAAS,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAEtE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,SAAS,EAChB,YAAY,EAAE,MAAM,GACnB,MAAM,CAOR;AAID;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE,MAAM,GACf,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC,CAwB9C"}

package/dist/cdk/shared/lambda-helpers.js

@@ -134,30 +134,8 @@ export function toLogRetention(days) {
     return logs.RetentionDays.INFINITE;
 }
 // ─── Naming helpers ─────────────────────────────────────────────────
-/**
- * Tiny non-cryptographic 6-char hex hash. Used only to disambiguate
- * Lambda function names that would otherwise overflow the 64-char
- * limit; collision risk is acceptable because the truncated prefix
- * already encodes most of the route path.
- */
-export function shortHash(input) {
-    let h = 5381;
-    for (let i = 0; i < input.length; i++) {
-        h = ((h << 5) + h + input.charCodeAt(i)) | 0;
-    }
-    return (h >>> 0).toString(16).padStart(6, '0').slice(0, 6);
-}
-/**
- * Cap a Lambda function name at the AWS hard limit (64 chars). When
- * the natural name overflows, replace the trailing portion with a
- * 6-char hash of the original — preserving the first 56 chars so
- * operators can still recognize the resource by prefix.
- */
-export function clampLambdaFunctionName(rawName) {
-    return rawName.length <= 64
-        ? rawName
-        : `${rawName.slice(0, 56)}-${shortHash(rawName)}`;
-}
+// One implementation with the runtime (which invokes internal routes by name): `@venturekit/core`.
+export { shortHash, clampLambdaFunctionName } from '@venturekit/core';
 /**
  * Physical name for a Lambda's pre-created LogGroup:
  *

package/dist/cdk/shared/lambda-helpers.js.map

@@ -1 +1 @@
-{"version":3,"file":"lambda-helpers.js","sourceRoot":"","sources":["../../../src/cdk/shared/lambda-helpers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AACvC,OAAO,KAAK,GAAG,MAAM,aAAa,CAAC;AACnC,OAAO,KAAK,MAAM,MAAM,wBAAwB,CAAC;AACjD,OAAO,KAAK,IAAI,MAAM,sBAAsB,CAAC;AAI7C,uEAAuE;AAEvE;;;;;;;GAOG;AACH,IAAI,aAAmD,CAAC;AACxD,SAAS,WAAW;IAClB,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,eAAe,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvD,aAAa,GAAG,eAAe,CAAC,SAAS,CAA6B,CAAC;IACzE,CAAC;IACD,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,uEAAuE;AAEvE;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,4BAA4B,CAC1C,WAAmB,EACnB,UAAkB,EAClB,kBAAqC,EAAE;IAEvC,MAAM,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC;IAC5E,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAE9C,WAAW,EAAE,CAAC,SAAS,CAAC;QACtB,WAAW,EAAE,CAAC,WAAW,CAAC;QAC1B,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,QAAQ;QAChB,OAAO;QACP,oEAAoE;QACpE,oDAAoD;QACpD,QAAQ,EAAE,CAAC,YAAY,EAAE,GAAG,eAAe,CAAC;QAC5C,aAAa,EAAE,UAAU;QACzB,QAAQ,EAAE,OAAO;KAClB,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;AACvC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB;IAClC,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,CAC3B,4EAA4E,CAC7E,CAAC;AACJ,CAAC;AAED,sEAAsE;AAEtE,MAAM,UAAU,eAAe,CAAC,SAAoB;IAClD,QAAQ,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACjC,KAAK,YAAY;YACf,OAAO,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC;QACpC,KAAK,YAAY;YACf,OAAO,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC;QACpC,KAAK,YAAY;YACf,OAAO,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC;QACpC;YACE,OAAO,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC;IACtC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,SAAoB;IACvD,OAAO,SAAS,CAAC,MAAM,CAAC,YAAY,KAAK,QAAQ;QAC/C,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM;QAC5B,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,IAAI,IAAI,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;IACjD,IAAI,IAAI,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC;IACpD,IAAI,IAAI,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC;IACnD,IAAI,IAAI,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC;IAClD,IAAI,IAAI,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC;IACpD,IAAI,IAAI,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC;IACpD,IAAI,IAAI,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC;IACrD,IAAI,IAAI,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC;IACvD,IAAI,IAAI,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC;IACvD,IAAI,IAAI,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC;IACvD,IAAI,IAAI,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC;IACtD,IAAI,IAAI,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC;IACpD,IAAI,IAAI,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC;IAC3D,IAAI,IAAI,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC;IAC3D,IAAI,IAAI,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC;IACrD,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC;AACrC,CAAC;AAED,uEAAuE;AAEvE;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,IAAI,CAAC,GAAG,IAAI,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAAe;IACrD,OAAO,OAAO,CAAC,MAAM,IAAI,EAAE;QACzB,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;AACtD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAgB,EAChB,YAAoB;IAEpB,MAAM,SAAS,GAAG,GAAG,CAAC,EAAE,CAAC,MAAM,CAC7B,CAAC,EACD,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAC/C,CAAC;IACF,MAAM,UAAU,GAAG,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC;IAClE,OAAO,eAAe,YAAY,IAAI,UAAU,EAAE,CAAC;AACrD,CAAC;AAED,uEAAuE;AAEvE;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,qBAAqB,CACnC,GAAW,EACX,OAAgB;IAEhB,MAAM,IAAI,GAAG,OAAO,IAAI,GAAG,CAAC;IAC5B,MAAM,OAAO,GAAiD,EAAE,CAAC;IAEjE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IAExC,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC,GAAG,qBAAqB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;YACvD,SAAS;QACX,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,SAAS;QAC7C,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,SAAS;QAC3C,IAAI,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,SAAS;QACzD,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,YAAY;aACtB,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;aACzB,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC1B,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"lambda-helpers.js","sourceRoot":"","sources":["../../../src/cdk/shared/lambda-helpers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AACvC,OAAO,KAAK,GAAG,MAAM,aAAa,CAAC;AACnC,OAAO,KAAK,MAAM,MAAM,wBAAwB,CAAC;AACjD,OAAO,KAAK,IAAI,MAAM,sBAAsB,CAAC;AAI7C,uEAAuE;AAEvE;;;;;;;GAOG;AACH,IAAI,aAAmD,CAAC;AACxD,SAAS,WAAW;IAClB,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,eAAe,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvD,aAAa,GAAG,eAAe,CAAC,SAAS,CAA6B,CAAC;IACzE,CAAC;IACD,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,uEAAuE;AAEvE;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,4BAA4B,CAC1C,WAAmB,EACnB,UAAkB,EAClB,kBAAqC,EAAE;IAEvC,MAAM,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC;IAC5E,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAE9C,WAAW,EAAE,CAAC,SAAS,CAAC;QACtB,WAAW,EAAE,CAAC,WAAW,CAAC;QAC1B,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,QAAQ;QAChB,OAAO;QACP,oEAAoE;QACpE,oDAAoD;QACpD,QAAQ,EAAE,CAAC,YAAY,EAAE,GAAG,eAAe,CAAC;QAC5C,aAAa,EAAE,UAAU;QACzB,QAAQ,EAAE,OAAO;KAClB,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;AACvC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB;IAClC,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,CAC3B,4EAA4E,CAC7E,CAAC;AACJ,CAAC;AAED,sEAAsE;AAEtE,MAAM,UAAU,eAAe,CAAC,SAAoB;IAClD,QAAQ,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACjC,KAAK,YAAY;YACf,OAAO,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC;QACpC,KAAK,YAAY;YACf,OAAO,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC;QACpC,KAAK,YAAY;YACf,OAAO,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC;QACpC;YACE,OAAO,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC;IACtC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,SAAoB;IACvD,OAAO,SAAS,CAAC,MAAM,CAAC,YAAY,KAAK,QAAQ;QAC/C,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM;QAC5B,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,IAAI,IAAI,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;IACjD,IAAI,IAAI,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC;IACpD,IAAI,IAAI,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC;IACnD,IAAI,IAAI,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC;IAClD,IAAI,IAAI,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC;IACpD,IAAI,IAAI,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC;IACpD,IAAI,IAAI,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC;IACrD,IAAI,IAAI,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC;IACvD,IAAI,IAAI,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC;IACvD,IAAI,IAAI,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC;IACvD,IAAI,IAAI,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC;IACtD,IAAI,IAAI,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC;IACpD,IAAI,IAAI,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC;IAC3D,IAAI,IAAI,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC;IAC3D,IAAI,IAAI,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC;IACrD,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC;AACrC,CAAC;AAED,uEAAuE;AAEvE,mGAAmG;AACnG,OAAO,EAAE,SAAS,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAEtE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAgB,EAChB,YAAoB;IAEpB,MAAM,SAAS,GAAG,GAAG,CAAC,EAAE,CAAC,MAAM,CAC7B,CAAC,EACD,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAC/C,CAAC;IACF,MAAM,UAAU,GAAG,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC;IAClE,OAAO,eAAe,YAAY,IAAI,UAAU,EAAE,CAAC;AACrD,CAAC;AAED,uEAAuE;AAEvE;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,qBAAqB,CACnC,GAAW,EACX,OAAgB;IAEhB,MAAM,IAAI,GAAG,OAAO,IAAI,GAAG,CAAC;IAC5B,MAAM,OAAO,GAAiD,EAAE,CAAC;IAEjE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IAExC,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC,GAAG,qBAAqB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;YACvD,SAAS;QACX,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,SAAS;QAC7C,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,SAAS;QAC3C,IAAI,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,SAAS;QACzD,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,YAAY;aACtB,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;aACzB,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC1B,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/cdk/shared/ssm-keys.d.ts

@@ -76,6 +76,14 @@
  * databases / caches / Lambdas live in it.
  */
 export declare const networkKeys: {
+    /** The VPC's CIDR block (ventures joining the VPC import it with the subnets). */
+    readonly vpcCidr: (project: string, stage: string) => string;
+    /**
+     * The INTERNAL CLIENTS security group: every Lambda of every venture in
+     * this VPC is a member, and the VPC's internal service ports (`expose:
+     * 'vpc'`) admit it — not the whole address range.
+     */
+    readonly internalClientsSecurityGroupId: (project: string, stage: string) => string;
     readonly vpcId: (project: string, stage: string) => string;
     /**
      * Comma-joined private subnet IDs (subnets where Lambdas + RDS run).
@@ -120,6 +128,14 @@ export declare const dataKeys: {
      * URL transparently.
      */
     readonly rdsSecretArn: (project: string, stage: string, dbId: string) => string;
+    /**
+     * ARN of the least-privilege app login secret (`{username,password}`)
+     * functions connect with — present once the migration runner provisions
+     * the roles. The master secret stays with the runner and operators.
+     */
+    /** Secret ARN of the SYSTEM login (only `logins.system.functions` read it). */
+    readonly rdsSystemSecretArn: (project: string, stage: string, dbId: string) => string;
+    readonly rdsAppSecretArn: (project: string, stage: string, dbId: string) => string;
     /**
      * Security Group ID for the RDS instance. The app stack creates its
      * own Lambda SG locally and `rdsSg.connections.allowFrom(lambdaSg,
@@ -167,6 +183,8 @@ export declare const dataKeys: {
     readonly cachePort: (project: string, stage: string, cacheId: string) => string;
     /** ElastiCache security group ID — for the cross-stack ingress pattern. */
     readonly cacheSecurityGroupId: (project: string, stage: string, cacheId: string) => string;
+    /** Secrets Manager ARN of a cache's AUTH token (`{"token":…}`). */
+    readonly cacheAuthSecretArn: (project: string, stage: string, cacheId: string) => string;
 };
 export declare const identityKeys: {
     /** Cognito User Pool ID for an `auth` intent. */
@@ -239,10 +257,10 @@ export declare const configKeys: {
     readonly whatsappVerifyTokenSecretArn: (project: string, stage: string, notifyId: string) => string;
     /**
      * ARN of the payment-provider credential Secret for a `billing`
-     * intent. Holds one JSON document — for Zazu,
+     * intent. Holds one JSON document — for Manza,
      * `{apiKey, accountId, webhookSecret}` — that a DevOps engineer
      * populates after the first deploy. The app stack reads this to grant
-     * `secretsmanager:GetSecretValue` and to inject `ZAZU_SECRET_ARN`.
+     * `secretsmanager:GetSecretValue` and to inject `MANZA_SECRET_ARN`.
      */
     readonly billingSecretArn: (project: string, stage: string, billingId: string) => string;
 };
@@ -372,6 +390,14 @@ export declare const servicesKeys: {
  */
 export declare const ssmKeys: {
     readonly network: {
+        /** The VPC's CIDR block (ventures joining the VPC import it with the subnets). */
+        readonly vpcCidr: (project: string, stage: string) => string;
+        /**
+         * The INTERNAL CLIENTS security group: every Lambda of every venture in
+         * this VPC is a member, and the VPC's internal service ports (`expose:
+         * 'vpc'`) admit it — not the whole address range.
+         */
+        readonly internalClientsSecurityGroupId: (project: string, stage: string) => string;
         readonly vpcId: (project: string, stage: string) => string;
         /**
          * Comma-joined private subnet IDs (subnets where Lambdas + RDS run).
@@ -416,6 +442,14 @@ export declare const ssmKeys: {
          * URL transparently.
          */
         readonly rdsSecretArn: (project: string, stage: string, dbId: string) => string;
+        /**
+         * ARN of the least-privilege app login secret (`{username,password}`)
+         * functions connect with — present once the migration runner provisions
+         * the roles. The master secret stays with the runner and operators.
+         */
+        /** Secret ARN of the SYSTEM login (only `logins.system.functions` read it). */
+        readonly rdsSystemSecretArn: (project: string, stage: string, dbId: string) => string;
+        readonly rdsAppSecretArn: (project: string, stage: string, dbId: string) => string;
         /**
          * Security Group ID for the RDS instance. The app stack creates its
          * own Lambda SG locally and `rdsSg.connections.allowFrom(lambdaSg,
@@ -463,6 +497,8 @@ export declare const ssmKeys: {
         readonly cachePort: (project: string, stage: string, cacheId: string) => string;
         /** ElastiCache security group ID — for the cross-stack ingress pattern. */
         readonly cacheSecurityGroupId: (project: string, stage: string, cacheId: string) => string;
+        /** Secrets Manager ARN of a cache's AUTH token (`{"token":…}`). */
+        readonly cacheAuthSecretArn: (project: string, stage: string, cacheId: string) => string;
     };
     readonly identity: {
         /** Cognito User Pool ID for an `auth` intent. */
@@ -535,10 +571,10 @@ export declare const ssmKeys: {
         readonly whatsappVerifyTokenSecretArn: (project: string, stage: string, notifyId: string) => string;
         /**
          * ARN of the payment-provider credential Secret for a `billing`
-         * intent. Holds one JSON document — for Zazu,
+         * intent. Holds one JSON document — for Manza,
          * `{apiKey, accountId, webhookSecret}` — that a DevOps engineer
          * populates after the first deploy. The app stack reads this to grant
-         * `secretsmanager:GetSecretValue` and to inject `ZAZU_SECRET_ARN`.
+         * `secretsmanager:GetSecretValue` and to inject `MANZA_SECRET_ARN`.
          */
         readonly billingSecretArn: (project: string, stage: string, billingId: string) => string;
     };
@@ -663,4 +699,14 @@ export declare const ssmKeys: {
     };
 };
 export type SsmKeys = typeof ssmKeys;
+/**
+ * Internal routes (`internal` intent): the pair secret a callee minted for
+ * each caller venture. The caller's `vk deploy` reads it to check the pair
+ * exists before deploying (`verifyInternalCalls` in `@venturekit/cli`).
+ */
+export declare const internalKeys: {
+    readonly callerSecretArn: (callee: string, stage: string, caller: string) => string;
+    /** The comma-separated ventures allowed to call (`internal.callers`). */
+    readonly callers: (callee: string, stage: string) => string;
+};
 //# sourceMappingURL=ssm-keys.d.ts.map

package/dist/cdk/shared/ssm-keys.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ssm-keys.d.ts","sourceRoot":"","sources":["../../../src/cdk/shared/ssm-keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuEG;AAYH;;;;GAIG;AACH,eAAO,MAAM,WAAW;8BACL,MAAM,SAAS,MAAM,KAAG,MAAM;IAG/C;;;;;;OAMG;yCACyB,MAAM,SAAS,MAAM,KAAG,MAAM;IAG1D,sEAAsE;wCAC3C,MAAM,SAAS,MAAM,KAAG,MAAM;IAGzD;;;;OAIG;0CAC0B,MAAM,SAAS,MAAM,KAAG,MAAM;IAG3D;;;;;OAKG;0CAC0B,MAAM,SAAS,MAAM,KAAG,MAAM;CAEnD,CAAC;AAIX,eAAO,MAAM,QAAQ;IACnB;;;;;;OAMG;oCACoB,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;IAGnE,yEAAyE;gCACtD,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;IAG/D;;;;;;OAMG;qCACqB,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;IAGpE;;;;;;OAMG;2CAC2B,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;IAG1E,2EAA2E;wCAChD,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;IAGvE;;;;;OAKG;4CAC4B,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;IAG3E;;;;OAIG;sCACsB,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;IAGrE,8DAA8D;mCACxC,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;IAGtE,4DAA4D;kCACvC,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;IAGrE;;;;OAIG;kCACkB,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;IAGrE,uEAAuE;wCAC5C,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;IAG1E,4CAA4C;uCAClB,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;IAOzE;;;;OAIG;sCACsB,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;IAGxE,qDAAqD;kCAChC,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;IAGpE,2EAA2E;6CAC3C,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;CAEvE,CAAC;AAIX,eAAO,MAAM,YAAY;IACvB,iDAAiD;mCAC3B,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;IAGpE,4EAA4E;oCACrD,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;IAGrE;;;;;;OAMG;wCACwB,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;IAGzE;;;;;;OAMG;2CAEQ,MAAM,SACR,MAAM,UACL,MAAM,YACJ,MAAM,KACf,MAAM;IAGT;;;;;;;OAOG;8CAC8B,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;CAEvE,CAAC;AAIX,eAAO,MAAM,UAAU;IACrB;;;;;OAKG;kCACkB,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;IAGrE;;;;OAIG;6CAC6B,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;IAGhF,2EAA2E;mDACrC,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;IAGtF;;;;OAIG;+CAC+B,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;IAGlF;;;;;;OAMG;6CAC6B,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;IAGhF;;;;;;OAMG;qDACqC,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;IAGxF;;;;;;OAMG;yCACyB,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;CAErE,CAAC;AAIX,eAAO,MAAM,aAAa;IACxB,yDAAyD;iCACrC,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;IAGnE,gEAAgE;iCAC5C,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;IAGnE,oEAAoE;oCAC7C,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;IAGtE;;;;;OAKG;sDACsC,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;IAGxF,iEAAiE;+CAC/B,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;IAGlF,qCAAqC;2CACP,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;IAG9E;;;;;;OAMG;qCACqB,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;IAGxE,8EAA8E;oCACvD,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;CAE/D,CAAC;AAIX,eAAO,MAAM,QAAQ;IACnB,uDAAuD;8BACtC,MAAM,SAAS,MAAM,KAAG,MAAM;IAG/C;;;;OAIG;oCACoB,MAAM,SAAS,MAAM,KAAG,MAAM;IAGrD;;;;OAIG;wCACwB,MAAM,SAAS,MAAM,KAAG,MAAM;IAGzD;;;;OAIG;4CAC4B,MAAM,SAAS,MAAM,KAAG,MAAM;IAG7D;;;;;;;;OAQG;yCACyB,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;IAG7E;;;;OAIG;iDACiC,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;CAE7E,CAAC;AAIX,eAAO,MAAM,WAAW;IACtB,iGAAiG;oCAC1E,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;IAGrE,sFAAsF;6CACtD,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;IAG9E;;;;OAIG;gDACgC,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;IAGjF,mGAAmG;4CACpE,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;IAG7E,oHAAoH;kCAC/F,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;IAGnE,mHAAmH;oDAC5E,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;IAGrF,oIAAoI;4CACrG,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;IAG7E,0FAA0F;wCAC/D,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;IAGzE,mFAAmF;sCAC1D,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;CAE/D,CAAC;AAIX,eAAO,MAAM,YAAY;IACvB,mFAAmF;oCAC5D,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;IAGxE,8DAA8D;qCACtC,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;IAGzE;;;;OAIG;4BACY,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;IAGhE,+HAA+H;kCAC1G,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;IAGtE,0FAA0F;4CAC3D,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;IAGhF,uFAAuF;sCAC9D,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;IAG1E;;;;OAIG;4CAC4B,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;IAGhF,qFAAqF;oCAC9D,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;IAGxE,oGAAoG;6BACpF,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;CAEzD,CAAC;AAIX;;;;GAIG;AACH,eAAO,MAAM,OAAO;;kCA/bD,MAAM,SAAS,MAAM,KAAG,MAAM;QAG/C;;;;;;WAMG;6CACyB,MAAM,SAAS,MAAM,KAAG,MAAM;QAG1D,sEAAsE;4CAC3C,MAAM,SAAS,MAAM,KAAG,MAAM;QAGzD;;;;WAIG;8CAC0B,MAAM,SAAS,MAAM,KAAG,MAAM;QAG3D;;;;;WAKG;8CAC0B,MAAM,SAAS,MAAM,KAAG,MAAM;;;QAO3D;;;;;;WAMG;wCACoB,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;QAGnE,yEAAyE;oCACtD,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;QAG/D;;;;;;WAMG;yCACqB,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;QAGpE;;;;;;WAMG;+CAC2B,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;QAG1E,2EAA2E;4CAChD,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;QAGvE;;;;;WAKG;gDAC4B,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;QAG3E;;;;WAIG;0CACsB,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;QAGrE,8DAA8D;uCACxC,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;QAGtE,4DAA4D;sCACvC,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;QAGrE;;;;WAIG;sCACkB,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;QAGrE,uEAAuE;4CAC5C,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;QAG1E,4CAA4C;2CAClB,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;QAOzE;;;;WAIG;0CACsB,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;QAGxE,qDAAqD;sCAChC,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;QAGpE,2EAA2E;iDAC3C,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;;;QAO/E,iDAAiD;uCAC3B,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;QAGpE,4EAA4E;wCACrD,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;QAGrE;;;;;;WAMG;4CACwB,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;QAGzE;;;;;;WAMG;+CAEQ,MAAM,SACR,MAAM,UACL,MAAM,YACJ,MAAM,KACf,MAAM;QAGT;;;;;;;WAOG;kDAC8B,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;;;QAO/E;;;;;WAKG;sCACkB,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;QAGrE;;;;WAIG;iDAC6B,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;QAGhF,2EAA2E;uDACrC,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;QAGtF;;;;WAIG;mDAC+B,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;QAGlF;;;;;;WAMG;iDAC6B,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;QAGhF;;;;;;WAMG;yDACqC,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;QAGxF;;;;;;WAMG;6CACyB,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;;;QAO7E,yDAAyD;qCACrC,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;QAGnE,gEAAgE;qCAC5C,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;QAGnE,oEAAoE;wCAC7C,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;QAGtE;;;;;WAKG;0DACsC,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;QAGxF,iEAAiE;mDAC/B,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;QAGlF,qCAAqC;+CACP,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;QAG9E;;;;;;WAMG;yCACqB,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;QAGxE,8EAA8E;wCACvD,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;;;QAOvE,uDAAuD;kCACtC,MAAM,SAAS,MAAM,KAAG,MAAM;QAG/C;;;;WAIG;wCACoB,MAAM,SAAS,MAAM,KAAG,MAAM;QAGrD;;;;WAIG;4CACwB,MAAM,SAAS,MAAM,KAAG,MAAM;QAGzD;;;;WAIG;gDAC4B,MAAM,SAAS,MAAM,KAAG,MAAM;QAG7D;;;;;;;;WAQG;6CACyB,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;QAG7E;;;;WAIG;qDACiC,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;;;QAOrF,iGAAiG;wCAC1E,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;QAGrE,sFAAsF;iDACtD,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;QAG9E;;;;WAIG;oDACgC,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;QAGjF,mGAAmG;gDACpE,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;QAG7E,oHAAoH;sCAC/F,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;QAGnE,mHAAmH;wDAC5E,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;QAGrF,oIAAoI;gDACrG,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;QAG7E,0FAA0F;4CAC/D,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;QAGzE,mFAAmF;0CAC1D,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;;;QAOvE,mFAAmF;wCAC5D,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;QAGxE,8DAA8D;yCACtC,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;QAGzE;;;;WAIG;gCACY,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;QAGhE,+HAA+H;sCAC1G,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;QAGtE,0FAA0F;gDAC3D,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;QAGhF,uFAAuF;0CAC9D,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;QAG1E;;;;WAIG;gDAC4B,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;QAGhF,qFAAqF;wCAC9D,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;QAGxE,oGAAoG;iCACpF,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;;CAoBzD,CAAC;AAEX,MAAM,MAAM,OAAO,GAAG,OAAO,OAAO,CAAC"}
+{"version":3,"file":"ssm-keys.d.ts","sourceRoot":"","sources":["../../../src/cdk/shared/ssm-keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuEG;AAYH;;;;GAIG;AACH,eAAO,MAAM,WAAW;IACtB,kFAAkF;gCAC/D,MAAM,SAAS,MAAM,KAAG,MAAM;IACjD;;;;OAIG;uDACuC,MAAM,SAAS,MAAM,KAAG,MAAM;8BAEvD,MAAM,SAAS,MAAM,KAAG,MAAM;IAG/C;;;;;;OAMG;yCACyB,MAAM,SAAS,MAAM,KAAG,MAAM;IAG1D,sEAAsE;wCAC3C,MAAM,SAAS,MAAM,KAAG,MAAM;IAGzD;;;;OAIG;0CAC0B,MAAM,SAAS,MAAM,KAAG,MAAM;IAG3D;;;;;OAKG;0CAC0B,MAAM,SAAS,MAAM,KAAG,MAAM;CAEnD,CAAC;AAIX,eAAO,MAAM,QAAQ;IACnB;;;;;;OAMG;oCACoB,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;IAGnE,yEAAyE;gCACtD,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;IAG/D;;;;;;OAMG;qCACqB,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;IAGpE;;;;OAIG;IACH,+EAA+E;2CACjD,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;wCAG/C,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;IAGvE;;;;;;OAMG;2CAC2B,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;IAG1E,2EAA2E;wCAChD,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;IAGvE;;;;;OAKG;4CAC4B,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;IAG3E;;;;OAIG;sCACsB,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;IAGrE,8DAA8D;mCACxC,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;IAGtE,4DAA4D;kCACvC,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;IAGrE;;;;OAIG;kCACkB,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;IAGrE,uEAAuE;wCAC5C,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;IAG1E,4CAA4C;uCAClB,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;IAOzE;;;;OAIG;sCACsB,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;IAGxE,qDAAqD;kCAChC,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;IAGpE,2EAA2E;6CAC3C,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;IAG/E,mEAAmE;2CACrC,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;CAErE,CAAC;AAIX,eAAO,MAAM,YAAY;IACvB,iDAAiD;mCAC3B,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;IAGpE,4EAA4E;oCACrD,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;IAGrE;;;;;;OAMG;wCACwB,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;IAGzE;;;;;;OAMG;2CAEQ,MAAM,SACR,MAAM,UACL,MAAM,YACJ,MAAM,KACf,MAAM;IAGT;;;;;;;OAOG;8CAC8B,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;CAEvE,CAAC;AAIX,eAAO,MAAM,UAAU;IACrB;;;;;OAKG;kCACkB,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;IAGrE;;;;OAIG;6CAC6B,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;IAGhF,2EAA2E;mDACrC,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;IAGtF;;;;OAIG;+CAC+B,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;IAGlF;;;;;;OAMG;6CAC6B,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;IAGhF;;;;;;OAMG;qDACqC,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;IAGxF;;;;;;OAMG;yCACyB,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;CAErE,CAAC;AAIX,eAAO,MAAM,aAAa;IACxB,yDAAyD;iCACrC,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;IAGnE,gEAAgE;iCAC5C,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;IAGnE,oEAAoE;oCAC7C,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;IAGtE;;;;;OAKG;sDACsC,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;IAGxF,iEAAiE;+CAC/B,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;IAGlF,qCAAqC;2CACP,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;IAG9E;;;;;;OAMG;qCACqB,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;IAGxE,8EAA8E;oCACvD,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;CAE/D,CAAC;AAIX,eAAO,MAAM,QAAQ;IACnB,uDAAuD;8BACtC,MAAM,SAAS,MAAM,KAAG,MAAM;IAG/C;;;;OAIG;oCACoB,MAAM,SAAS,MAAM,KAAG,MAAM;IAGrD;;;;OAIG;wCACwB,MAAM,SAAS,MAAM,KAAG,MAAM;IAGzD;;;;OAIG;4CAC4B,MAAM,SAAS,MAAM,KAAG,MAAM;IAG7D;;;;;;;;OAQG;yCACyB,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;IAG7E;;;;OAIG;iDACiC,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;CAE7E,CAAC;AAIX,eAAO,MAAM,WAAW;IACtB,iGAAiG;oCAC1E,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;IAGrE,sFAAsF;6CACtD,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;IAG9E;;;;OAIG;gDACgC,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;IAGjF,mGAAmG;4CACpE,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;IAG7E,oHAAoH;kCAC/F,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;IAGnE,mHAAmH;oDAC5E,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;IAGrF,oIAAoI;4CACrG,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;IAG7E,0FAA0F;wCAC/D,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;IAGzE,mFAAmF;sCAC1D,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;CAE/D,CAAC;AAIX,eAAO,MAAM,YAAY;IACvB,mFAAmF;oCAC5D,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;IAGxE,8DAA8D;qCACtC,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;IAGzE;;;;OAIG;4BACY,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;IAGhE,+HAA+H;kCAC1G,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;IAGtE,0FAA0F;4CAC3D,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;IAGhF,uFAAuF;sCAC9D,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;IAG1E;;;;OAIG;4CAC4B,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;IAGhF,qFAAqF;oCAC9D,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;IAGxE,oGAAoG;6BACpF,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;CAEzD,CAAC;AAIX;;;;GAIG;AACH,eAAO,MAAM,OAAO;;QAxdlB,kFAAkF;oCAC/D,MAAM,SAAS,MAAM,KAAG,MAAM;QACjD;;;;WAIG;2DACuC,MAAM,SAAS,MAAM,KAAG,MAAM;kCAEvD,MAAM,SAAS,MAAM,KAAG,MAAM;QAG/C;;;;;;WAMG;6CACyB,MAAM,SAAS,MAAM,KAAG,MAAM;QAG1D,sEAAsE;4CAC3C,MAAM,SAAS,MAAM,KAAG,MAAM;QAGzD;;;;WAIG;8CAC0B,MAAM,SAAS,MAAM,KAAG,MAAM;QAG3D;;;;;WAKG;8CAC0B,MAAM,SAAS,MAAM,KAAG,MAAM;;;QAO3D;;;;;;WAMG;wCACoB,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;QAGnE,yEAAyE;oCACtD,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;QAG/D;;;;;;WAMG;yCACqB,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;QAGpE;;;;WAIG;QACH,+EAA+E;+CACjD,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;4CAG/C,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;QAGvE;;;;;;WAMG;+CAC2B,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;QAG1E,2EAA2E;4CAChD,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;QAGvE;;;;;WAKG;gDAC4B,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;QAG3E;;;;WAIG;0CACsB,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAG,MAAM;QAGrE,8DAA8D;uCACxC,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;QAGtE,4DAA4D;sCACvC,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;QAGrE;;;;WAIG;sCACkB,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;QAGrE,uEAAuE;4CAC5C,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;QAG1E,4CAA4C;2CAClB,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;QAOzE;;;;WAIG;0CACsB,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;QAGxE,qDAAqD;sCAChC,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;QAGpE,2EAA2E;iDAC3C,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;QAG/E,mEAAmE;+CACrC,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;;;QAO7E,iDAAiD;uCAC3B,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;QAGpE,4EAA4E;wCACrD,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;QAGrE;;;;;;WAMG;4CACwB,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;QAGzE;;;;;;WAMG;+CAEQ,MAAM,SACR,MAAM,UACL,MAAM,YACJ,MAAM,KACf,MAAM;QAGT;;;;;;;WAOG;kDAC8B,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;;;QAO/E;;;;;WAKG;sCACkB,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;QAGrE;;;;WAIG;iDAC6B,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;QAGhF,2EAA2E;uDACrC,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;QAGtF;;;;WAIG;mDAC+B,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;QAGlF;;;;;;WAMG;iDAC6B,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;QAGhF;;;;;;WAMG;yDACqC,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;QAGxF;;;;;;WAMG;6CACyB,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;;;QAO7E,yDAAyD;qCACrC,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;QAGnE,gEAAgE;qCAC5C,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;QAGnE,oEAAoE;wCAC7C,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;QAGtE;;;;;WAKG;0DACsC,MAAM,SAAS,MAAM,WAAW,MAAM,KAAG,MAAM;QAGxF,iEAAiE;mDAC/B,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;QAGlF,qCAAqC;+CACP,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;QAG9E;;;;;;WAMG;yCACqB,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;QAGxE,8EAA8E;wCACvD,MAAM,SAAS,MAAM,YAAY,MAAM,KAAG,MAAM;;;QAOvE,uDAAuD;kCACtC,MAAM,SAAS,MAAM,KAAG,MAAM;QAG/C;;;;WAIG;wCACoB,MAAM,SAAS,MAAM,KAAG,MAAM;QAGrD;;;;WAIG;4CACwB,MAAM,SAAS,MAAM,KAAG,MAAM;QAGzD;;;;WAIG;gDAC4B,MAAM,SAAS,MAAM,KAAG,MAAM;QAG7D;;;;;;;;WAQG;6CACyB,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;QAG7E;;;;WAIG;qDACiC,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;;;QAOrF,iGAAiG;wCAC1E,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;QAGrE,sFAAsF;iDACtD,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;QAG9E;;;;WAIG;oDACgC,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;QAGjF,mGAAmG;gDACpE,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;QAG7E,oHAAoH;sCAC/F,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;QAGnE,mHAAmH;wDAC5E,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;QAGrF,oIAAoI;gDACrG,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;QAG7E,0FAA0F;4CAC/D,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;QAGzE,mFAAmF;0CAC1D,MAAM,SAAS,MAAM,UAAU,MAAM,KAAG,MAAM;;;QAOvE,mFAAmF;wCAC5D,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;QAGxE,8DAA8D;yCACtC,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;QAGzE;;;;WAIG;gCACY,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;QAGhE,+HAA+H;sCAC1G,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;QAGtE,0FAA0F;gDAC3D,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;QAGhF,uFAAuF;0CAC9D,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;QAG1E;;;;WAIG;gDAC4B,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;QAGhF,qFAAqF;wCAC9D,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;QAGxE,oGAAoG;iCACpF,MAAM,SAAS,MAAM,aAAa,MAAM,KAAG,MAAM;;CAoBzD,CAAC;AAEX,MAAM,MAAM,OAAO,GAAG,OAAO,OAAO,CAAC;AAErC;;;;GAIG;AACH,eAAO,MAAM,YAAY;uCACG,MAAM,SAAS,MAAM,UAAU,MAAM;IAE/D,yEAAyE;+BACvD,MAAM,SAAS,MAAM;CAC/B,CAAC"}

package/dist/cdk/shared/ssm-keys.js

@@ -83,6 +83,14 @@ function base(project, stage) {
  * databases / caches / Lambdas live in it.
  */
 export const networkKeys = {
+    /** The VPC's CIDR block (ventures joining the VPC import it with the subnets). */
+    vpcCidr: (project, stage) => `${base(project, stage)}/network/vpc-cidr`,
+    /**
+     * The INTERNAL CLIENTS security group: every Lambda of every venture in
+     * this VPC is a member, and the VPC's internal service ports (`expose:
+     * 'vpc'`) admit it — not the whole address range.
+     */
+    internalClientsSecurityGroupId: (project, stage) => `${base(project, stage)}/network/internal-clients-sg-id`,
     vpcId: (project, stage) => `${base(project, stage)}/network/vpc-id`,
     /**
      * Comma-joined private subnet IDs (subnets where Lambdas + RDS run).
@@ -128,6 +136,14 @@ export const dataKeys = {
      * URL transparently.
      */
     rdsSecretArn: (project, stage, dbId) => `${base(project, stage)}/data/rds/${dbId}/secret-arn`,
+    /**
+     * ARN of the least-privilege app login secret (`{username,password}`)
+     * functions connect with — present once the migration runner provisions
+     * the roles. The master secret stays with the runner and operators.
+     */
+    /** Secret ARN of the SYSTEM login (only `logins.system.functions` read it). */
+    rdsSystemSecretArn: (project, stage, dbId) => `${base(project, stage)}/data/rds/${dbId}/system-secret-arn`,
+    rdsAppSecretArn: (project, stage, dbId) => `${base(project, stage)}/data/rds/${dbId}/app-secret-arn`,
     /**
      * Security Group ID for the RDS instance. The app stack creates its
      * own Lambda SG locally and `rdsSg.connections.allowFrom(lambdaSg,
@@ -178,6 +194,8 @@ export const dataKeys = {
     cachePort: (project, stage, cacheId) => `${base(project, stage)}/data/cache/${cacheId}/port`,
     /** ElastiCache security group ID — for the cross-stack ingress pattern. */
     cacheSecurityGroupId: (project, stage, cacheId) => `${base(project, stage)}/data/cache/${cacheId}/security-group-id`,
+    /** Secrets Manager ARN of a cache's AUTH token (`{"token":…}`). */
+    cacheAuthSecretArn: (project, stage, cacheId) => `${base(project, stage)}/data/cache/${cacheId}/auth-secret-arn`,
 };
 // ─── Identity tier ──────────────────────────────────────────────────
 export const identityKeys = {
@@ -252,10 +270,10 @@ export const configKeys = {
     whatsappVerifyTokenSecretArn: (project, stage, notifyId) => `${base(project, stage)}/config/notify/${notifyId}/whatsapp-verify-token-secret-arn`,
     /**
      * ARN of the payment-provider credential Secret for a `billing`
-     * intent. Holds one JSON document — for Zazu,
+     * intent. Holds one JSON document — for Manza,
      * `{apiKey, accountId, webhookSecret}` — that a DevOps engineer
      * populates after the first deploy. The app stack reads this to grant
-     * `secretsmanager:GetSecretValue` and to inject `ZAZU_SECRET_ARN`.
+     * `secretsmanager:GetSecretValue` and to inject `MANZA_SECRET_ARN`.
      */
     billingSecretArn: (project, stage, billingId) => `${base(project, stage)}/config/billing/${billingId}/secret-arn`,
 };
@@ -398,4 +416,14 @@ export const ssmKeys = {
     compute: computeKeys,
     services: servicesKeys,
 };
+/**
+ * Internal routes (`internal` intent): the pair secret a callee minted for
+ * each caller venture. The caller's `vk deploy` reads it to check the pair
+ * exists before deploying (`verifyInternalCalls` in `@venturekit/cli`).
+ */
+export const internalKeys = {
+    callerSecretArn: (callee, stage, caller) => `/venturekit/${callee}/${stage}/internal/callers/${caller}/secret-arn`,
+    /** The comma-separated ventures allowed to call (`internal.callers`). */
+    callers: (callee, stage) => `/venturekit/${callee}/${stage}/internal/callers-list`,
+};
 //# sourceMappingURL=ssm-keys.js.map

package/dist/cdk/shared/ssm-keys.js.map

@@ -1 +1 @@
-{"version":3,"file":"ssm-keys.js","sourceRoot":"","sources":["../../../src/cdk/shared/ssm-keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuEG;AAEH,6DAA6D;AAC7D,MAAM,IAAI,GAAG,aAAa,CAAC;AAE3B,yEAAyE;AACzE,SAAS,IAAI,CAAC,OAAe,EAAE,KAAa;IAC1C,OAAO,GAAG,IAAI,IAAI,OAAO,IAAI,KAAK,EAAE,CAAC;AACvC,CAAC;AAED,wEAAwE;AAExE;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,KAAK,EAAE,CAAC,OAAe,EAAE,KAAa,EAAU,EAAE,CAChD,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,iBAAiB;IAE1C;;;;;;OAMG;IACH,gBAAgB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAU,EAAE,CAC3D,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,6BAA6B;IAEtD,sEAAsE;IACtE,eAAe,EAAE,CAAC,OAAe,EAAE,KAAa,EAAU,EAAE,CAC1D,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,4BAA4B;IAErD;;;;OAIG;IACH,iBAAiB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAU,EAAE,CAC5D,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,8BAA8B;IAEvD;;;;;OAKG;IACH,iBAAiB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAU,EAAE,CAC5D,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,6BAA6B;CAC9C,CAAC;AAEX,uEAAuE;AAEvE,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB;;;;;;OAMG;IACH,WAAW,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,IAAY,EAAU,EAAE,CACpE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,IAAI,WAAW;IAErD,yEAAyE;IACzE,OAAO,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,IAAY,EAAU,EAAE,CAChE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,IAAI,OAAO;IAEjD;;;;;;OAMG;IACH,YAAY,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,IAAY,EAAU,EAAE,CACrE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,IAAI,aAAa;IAEvD;;;;;;OAMG;IACH,kBAAkB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,IAAY,EAAU,EAAE,CAC3E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,IAAI,oBAAoB;IAE9D,2EAA2E;IAC3E,eAAe,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,IAAY,EAAU,EAAE,CACxE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,IAAI,gBAAgB;IAE1D;;;;;OAKG;IACH,mBAAmB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,IAAY,EAAU,EAAE,CAC5E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,IAAI,oBAAoB;IAE9D;;;;OAIG;IACH,aAAa,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,IAAY,EAAU,EAAE,CACtE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,IAAI,cAAc;IAExD,8DAA8D;IAC9D,UAAU,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CACvE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,iBAAiB,QAAQ,cAAc;IAEhE,4DAA4D;IAC5D,SAAS,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CACtE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,iBAAiB,QAAQ,aAAa;IAE/D;;;;OAIG;IACH,SAAS,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CACtE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,iBAAiB,QAAQ,aAAa;IAE/D,uEAAuE;IACvE,eAAe,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,OAAe,EAAU,EAAE,CAC3E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,gBAAgB,OAAO,aAAa;IAE7D,4CAA4C;IAC5C,cAAc,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,OAAe,EAAU,EAAE,CAC1E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,gBAAgB,OAAO,YAAY;IAE5D,+DAA+D;IAC/D,8DAA8D;IAC9D,gEAAgE;IAEhE;;;;OAIG;IACH,aAAa,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,OAAe,EAAU,EAAE,CACzE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,eAAe,OAAO,WAAW;IAE1D,qDAAqD;IACrD,SAAS,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,OAAe,EAAU,EAAE,CACrE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,eAAe,OAAO,OAAO;IAEtD,2EAA2E;IAC3E,oBAAoB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,OAAe,EAAU,EAAE,CAChF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,eAAe,OAAO,oBAAoB;CAC3D,CAAC;AAEX,uEAAuE;AAEvE,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,iDAAiD;IACjD,UAAU,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CACrE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,MAAM,eAAe;IAE3D,4EAA4E;IAC5E,WAAW,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CACtE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,MAAM,gBAAgB;IAE5D;;;;;;OAMG;IACH,eAAe,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CAC1E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,MAAM,YAAY;IAExD;;;;;;OAMG;IACH,kBAAkB,EAAE,CAClB,OAAe,EACf,KAAa,EACb,MAAc,EACd,QAAgB,EACR,EAAE,CACV,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,MAAM,cAAc,QAAQ,aAAa;IAE/E;;;;;;;OAOG;IACH,qBAAqB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CAChF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,MAAM,4BAA4B;CAChE,CAAC;AAEX,sEAAsE;AAEtE,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB;;;;;OAKG;IACH,SAAS,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CACtE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,mBAAmB,QAAQ,MAAM;IAE1D;;;;OAIG;IACH,oBAAoB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CACjF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,kBAAkB,QAAQ,mBAAmB;IAEtE,2EAA2E;IAC3E,0BAA0B,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CACvF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,kBAAkB,QAAQ,yBAAyB;IAE5E;;;;OAIG;IACH,sBAAsB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CACnF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,kBAAkB,QAAQ,4BAA4B;IAE/E;;;;;;OAMG;IACH,oBAAoB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CACjF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,kBAAkB,QAAQ,0BAA0B;IAE7E;;;;;;OAMG;IACH,4BAA4B,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CACzF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,kBAAkB,QAAQ,mCAAmC;IAEtF;;;;;;OAMG;IACH,gBAAgB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,SAAiB,EAAU,EAAE,CAC9E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,mBAAmB,SAAS,aAAa;CAC1D,CAAC;AAEX,uEAAuE;AAEvE,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,yDAAyD;IACzD,QAAQ,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,OAAe,EAAU,EAAE,CACpE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,qBAAqB,OAAO,MAAM;IAE3D,gEAAgE;IAChE,QAAQ,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,OAAe,EAAU,EAAE,CACpE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,qBAAqB,OAAO,MAAM;IAE3D,oEAAoE;IACpE,WAAW,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,OAAe,EAAU,EAAE,CACvE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,qBAAqB,OAAO,UAAU;IAE/D;;;;;OAKG;IACH,6BAA6B,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,OAAe,EAAU,EAAE,CACzF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,qBAAqB,OAAO,6BAA6B;IAElF,iEAAiE;IACjE,sBAAsB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CACnF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,qBAAqB,QAAQ,qBAAqB;IAE3E,qCAAqC;IACrC,kBAAkB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CAC/E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,qBAAqB,QAAQ,iBAAiB;IAEvE;;;;;;OAMG;IACH,YAAY,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CACzE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,qBAAqB,QAAQ,WAAW;IAEjE,8EAA8E;IAC9E,WAAW,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CACxE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,qBAAqB,QAAQ,UAAU;CACxD,CAAC;AAEX,uEAAuE;AAEvE,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,uDAAuD;IACvD,KAAK,EAAE,CAAC,OAAe,EAAE,KAAa,EAAU,EAAE,CAChD,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,cAAc;IAEvC;;;;OAIG;IACH,WAAW,EAAE,CAAC,OAAe,EAAE,KAAa,EAAU,EAAE,CACtD,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,oBAAoB;IAE7C;;;;OAIG;IACH,eAAe,EAAE,CAAC,OAAe,EAAE,KAAa,EAAU,EAAE,CAC1D,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,yBAAyB;IAElD;;;;OAIG;IACH,mBAAmB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAU,EAAE,CAC9D,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,8BAA8B;IAEvD;;;;;;;;OAQG;IACH,gBAAgB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,SAAiB,EAAU,EAAE,CAC9E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,iBAAiB,SAAS,aAAa;IAEhE;;;;OAIG;IACH,wBAAwB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,SAAiB,EAAU,EAAE,CACtF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,iBAAiB,SAAS,sBAAsB;CACjE,CAAC;AAEX,sEAAsE;AAEtE,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,iGAAiG;IACjG,WAAW,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CACtE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,MAAM,eAAe;IAE1D,sFAAsF;IACtF,oBAAoB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CAC/E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,MAAM,yBAAyB;IAEpE;;;;OAIG;IACH,uBAAuB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CAClF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,MAAM,6BAA6B;IAExE,mGAAmG;IACnG,mBAAmB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CAC9E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,MAAM,yBAAyB;IAEpE,oHAAoH;IACpH,SAAS,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CACpE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,MAAM,YAAY;IAEvD,mHAAmH;IACnH,2BAA2B,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CACtF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,MAAM,kCAAkC;IAE7E,oIAAoI;IACpI,mBAAmB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CAC9E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,MAAM,wBAAwB;IAEnE,0FAA0F;IAC1F,eAAe,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CAC1E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,MAAM,oBAAoB;IAE/D,mFAAmF;IACnF,aAAa,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CACxE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,MAAM,kBAAkB;CACrD,CAAC;AAEX,sEAAsE;AAEtE,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,mFAAmF;IACnF,WAAW,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,SAAiB,EAAU,EAAE,CACzE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,SAAS,eAAe;IAE9D,8DAA8D;IAC9D,YAAY,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,SAAiB,EAAU,EAAE,CAC1E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,SAAS,iBAAiB;IAEhE;;;;OAIG;IACH,GAAG,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,SAAiB,EAAU,EAAE,CACjE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,SAAS,MAAM;IAErD,+HAA+H;IAC/H,SAAS,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,SAAiB,EAAU,EAAE,CACvE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,SAAS,YAAY;IAE3D,0FAA0F;IAC1F,mBAAmB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,SAAiB,EAAU,EAAE,CACjF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,SAAS,yBAAyB;IAExE,uFAAuF;IACvF,aAAa,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,SAAiB,EAAU,EAAE,CAC3E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,SAAS,kBAAkB;IAEjE;;;;OAIG;IACH,mBAAmB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,SAAiB,EAAU,EAAE,CACjF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,SAAS,wBAAwB;IAEvE,qFAAqF;IACrF,WAAW,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,SAAiB,EAAU,EAAE,CACzE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,SAAS,eAAe;IAE9D,oGAAoG;IACpG,IAAI,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,SAAiB,EAAU,EAAE,CAClE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,SAAS,OAAO;CAC9C,CAAC;AAEX,uEAAuE;AAEvE;;;;GAIG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG;IACrB,OAAO,EAAE,WAAW;IACpB,IAAI,EAAE,QAAQ;IACd,QAAQ,EAAE,YAAY;IACtB,MAAM,EAAE,UAAU;IAClB,SAAS,EAAE,aAAa;IACxB,IAAI,EAAE,QAAQ;IACd,OAAO,EAAE,WAAW;IACpB,QAAQ,EAAE,YAAY;CACd,CAAC"}
+{"version":3,"file":"ssm-keys.js","sourceRoot":"","sources":["../../../src/cdk/shared/ssm-keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuEG;AAEH,6DAA6D;AAC7D,MAAM,IAAI,GAAG,aAAa,CAAC;AAE3B,yEAAyE;AACzE,SAAS,IAAI,CAAC,OAAe,EAAE,KAAa;IAC1C,OAAO,GAAG,IAAI,IAAI,OAAO,IAAI,KAAK,EAAE,CAAC;AACvC,CAAC;AAED,wEAAwE;AAExE;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,kFAAkF;IAClF,OAAO,EAAE,CAAC,OAAe,EAAE,KAAa,EAAU,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,mBAAmB;IAC/F;;;;OAIG;IACH,8BAA8B,EAAE,CAAC,OAAe,EAAE,KAAa,EAAU,EAAE,CACzE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,iCAAiC;IAC1D,KAAK,EAAE,CAAC,OAAe,EAAE,KAAa,EAAU,EAAE,CAChD,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,iBAAiB;IAE1C;;;;;;OAMG;IACH,gBAAgB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAU,EAAE,CAC3D,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,6BAA6B;IAEtD,sEAAsE;IACtE,eAAe,EAAE,CAAC,OAAe,EAAE,KAAa,EAAU,EAAE,CAC1D,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,4BAA4B;IAErD;;;;OAIG;IACH,iBAAiB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAU,EAAE,CAC5D,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,8BAA8B;IAEvD;;;;;OAKG;IACH,iBAAiB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAU,EAAE,CAC5D,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,6BAA6B;CAC9C,CAAC;AAEX,uEAAuE;AAEvE,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB;;;;;;OAMG;IACH,WAAW,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,IAAY,EAAU,EAAE,CACpE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,IAAI,WAAW;IAErD,yEAAyE;IACzE,OAAO,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,IAAY,EAAU,EAAE,CAChE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,IAAI,OAAO;IAEjD;;;;;;OAMG;IACH,YAAY,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,IAAY,EAAU,EAAE,CACrE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,IAAI,aAAa;IAEvD;;;;OAIG;IACH,+EAA+E;IAC/E,kBAAkB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,IAAY,EAAU,EAAE,CAC3E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,IAAI,oBAAoB;IAE9D,eAAe,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,IAAY,EAAU,EAAE,CACxE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,IAAI,iBAAiB;IAE3D;;;;;;OAMG;IACH,kBAAkB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,IAAY,EAAU,EAAE,CAC3E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,IAAI,oBAAoB;IAE9D,2EAA2E;IAC3E,eAAe,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,IAAY,EAAU,EAAE,CACxE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,IAAI,gBAAgB;IAE1D;;;;;OAKG;IACH,mBAAmB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,IAAY,EAAU,EAAE,CAC5E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,IAAI,oBAAoB;IAE9D;;;;OAIG;IACH,aAAa,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,IAAY,EAAU,EAAE,CACtE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,IAAI,cAAc;IAExD,8DAA8D;IAC9D,UAAU,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CACvE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,iBAAiB,QAAQ,cAAc;IAEhE,4DAA4D;IAC5D,SAAS,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CACtE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,iBAAiB,QAAQ,aAAa;IAE/D;;;;OAIG;IACH,SAAS,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CACtE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,iBAAiB,QAAQ,aAAa;IAE/D,uEAAuE;IACvE,eAAe,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,OAAe,EAAU,EAAE,CAC3E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,gBAAgB,OAAO,aAAa;IAE7D,4CAA4C;IAC5C,cAAc,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,OAAe,EAAU,EAAE,CAC1E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,gBAAgB,OAAO,YAAY;IAE5D,+DAA+D;IAC/D,8DAA8D;IAC9D,gEAAgE;IAEhE;;;;OAIG;IACH,aAAa,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,OAAe,EAAU,EAAE,CACzE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,eAAe,OAAO,WAAW;IAE1D,qDAAqD;IACrD,SAAS,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,OAAe,EAAU,EAAE,CACrE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,eAAe,OAAO,OAAO;IAEtD,2EAA2E;IAC3E,oBAAoB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,OAAe,EAAU,EAAE,CAChF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,eAAe,OAAO,oBAAoB;IAEnE,mEAAmE;IACnE,kBAAkB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,OAAe,EAAU,EAAE,CAC9E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,eAAe,OAAO,kBAAkB;CACzD,CAAC;AAEX,uEAAuE;AAEvE,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,iDAAiD;IACjD,UAAU,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CACrE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,MAAM,eAAe;IAE3D,4EAA4E;IAC5E,WAAW,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CACtE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,MAAM,gBAAgB;IAE5D;;;;;;OAMG;IACH,eAAe,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CAC1E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,MAAM,YAAY;IAExD;;;;;;OAMG;IACH,kBAAkB,EAAE,CAClB,OAAe,EACf,KAAa,EACb,MAAc,EACd,QAAgB,EACR,EAAE,CACV,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,MAAM,cAAc,QAAQ,aAAa;IAE/E;;;;;;;OAOG;IACH,qBAAqB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CAChF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,MAAM,4BAA4B;CAChE,CAAC;AAEX,sEAAsE;AAEtE,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB;;;;;OAKG;IACH,SAAS,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CACtE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,mBAAmB,QAAQ,MAAM;IAE1D;;;;OAIG;IACH,oBAAoB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CACjF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,kBAAkB,QAAQ,mBAAmB;IAEtE,2EAA2E;IAC3E,0BAA0B,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CACvF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,kBAAkB,QAAQ,yBAAyB;IAE5E;;;;OAIG;IACH,sBAAsB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CACnF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,kBAAkB,QAAQ,4BAA4B;IAE/E;;;;;;OAMG;IACH,oBAAoB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CACjF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,kBAAkB,QAAQ,0BAA0B;IAE7E;;;;;;OAMG;IACH,4BAA4B,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CACzF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,kBAAkB,QAAQ,mCAAmC;IAEtF;;;;;;OAMG;IACH,gBAAgB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,SAAiB,EAAU,EAAE,CAC9E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,mBAAmB,SAAS,aAAa;CAC1D,CAAC;AAEX,uEAAuE;AAEvE,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,yDAAyD;IACzD,QAAQ,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,OAAe,EAAU,EAAE,CACpE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,qBAAqB,OAAO,MAAM;IAE3D,gEAAgE;IAChE,QAAQ,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,OAAe,EAAU,EAAE,CACpE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,qBAAqB,OAAO,MAAM;IAE3D,oEAAoE;IACpE,WAAW,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,OAAe,EAAU,EAAE,CACvE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,qBAAqB,OAAO,UAAU;IAE/D;;;;;OAKG;IACH,6BAA6B,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,OAAe,EAAU,EAAE,CACzF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,qBAAqB,OAAO,6BAA6B;IAElF,iEAAiE;IACjE,sBAAsB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CACnF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,qBAAqB,QAAQ,qBAAqB;IAE3E,qCAAqC;IACrC,kBAAkB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CAC/E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,qBAAqB,QAAQ,iBAAiB;IAEvE;;;;;;OAMG;IACH,YAAY,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CACzE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,qBAAqB,QAAQ,WAAW;IAEjE,8EAA8E;IAC9E,WAAW,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,QAAgB,EAAU,EAAE,CACxE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,qBAAqB,QAAQ,UAAU;CACxD,CAAC;AAEX,uEAAuE;AAEvE,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,uDAAuD;IACvD,KAAK,EAAE,CAAC,OAAe,EAAE,KAAa,EAAU,EAAE,CAChD,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,cAAc;IAEvC;;;;OAIG;IACH,WAAW,EAAE,CAAC,OAAe,EAAE,KAAa,EAAU,EAAE,CACtD,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,oBAAoB;IAE7C;;;;OAIG;IACH,eAAe,EAAE,CAAC,OAAe,EAAE,KAAa,EAAU,EAAE,CAC1D,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,yBAAyB;IAElD;;;;OAIG;IACH,mBAAmB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAU,EAAE,CAC9D,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,8BAA8B;IAEvD;;;;;;;;OAQG;IACH,gBAAgB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,SAAiB,EAAU,EAAE,CAC9E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,iBAAiB,SAAS,aAAa;IAEhE;;;;OAIG;IACH,wBAAwB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,SAAiB,EAAU,EAAE,CACtF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,iBAAiB,SAAS,sBAAsB;CACjE,CAAC;AAEX,sEAAsE;AAEtE,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,iGAAiG;IACjG,WAAW,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CACtE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,MAAM,eAAe;IAE1D,sFAAsF;IACtF,oBAAoB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CAC/E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,MAAM,yBAAyB;IAEpE;;;;OAIG;IACH,uBAAuB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CAClF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,MAAM,6BAA6B;IAExE,mGAAmG;IACnG,mBAAmB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CAC9E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,MAAM,yBAAyB;IAEpE,oHAAoH;IACpH,SAAS,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CACpE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,MAAM,YAAY;IAEvD,mHAAmH;IACnH,2BAA2B,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CACtF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,MAAM,kCAAkC;IAE7E,oIAAoI;IACpI,mBAAmB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CAC9E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,MAAM,wBAAwB;IAEnE,0FAA0F;IAC1F,eAAe,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CAC1E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,MAAM,oBAAoB;IAE/D,mFAAmF;IACnF,aAAa,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc,EAAU,EAAE,CACxE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,MAAM,kBAAkB;CACrD,CAAC;AAEX,sEAAsE;AAEtE,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,mFAAmF;IACnF,WAAW,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,SAAiB,EAAU,EAAE,CACzE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,SAAS,eAAe;IAE9D,8DAA8D;IAC9D,YAAY,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,SAAiB,EAAU,EAAE,CAC1E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,SAAS,iBAAiB;IAEhE;;;;OAIG;IACH,GAAG,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,SAAiB,EAAU,EAAE,CACjE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,SAAS,MAAM;IAErD,+HAA+H;IAC/H,SAAS,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,SAAiB,EAAU,EAAE,CACvE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,SAAS,YAAY;IAE3D,0FAA0F;IAC1F,mBAAmB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,SAAiB,EAAU,EAAE,CACjF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,SAAS,yBAAyB;IAExE,uFAAuF;IACvF,aAAa,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,SAAiB,EAAU,EAAE,CAC3E,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,SAAS,kBAAkB;IAEjE;;;;OAIG;IACH,mBAAmB,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,SAAiB,EAAU,EAAE,CACjF,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,SAAS,wBAAwB;IAEvE,qFAAqF;IACrF,WAAW,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,SAAiB,EAAU,EAAE,CACzE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,SAAS,eAAe;IAE9D,oGAAoG;IACpG,IAAI,EAAE,CAAC,OAAe,EAAE,KAAa,EAAE,SAAiB,EAAU,EAAE,CAClE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,SAAS,OAAO;CAC9C,CAAC;AAEX,uEAAuE;AAEvE;;;;GAIG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG;IACrB,OAAO,EAAE,WAAW;IACpB,IAAI,EAAE,QAAQ;IACd,QAAQ,EAAE,YAAY;IACtB,MAAM,EAAE,UAAU;IAClB,SAAS,EAAE,aAAa;IACxB,IAAI,EAAE,QAAQ;IACd,OAAO,EAAE,WAAW;IACpB,QAAQ,EAAE,YAAY;CACd,CAAC;AAIX;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,eAAe,EAAE,CAAC,MAAc,EAAE,KAAa,EAAE,MAAc,EAAE,EAAE,CACjE,eAAe,MAAM,IAAI,KAAK,qBAAqB,MAAM,aAAa;IACxE,yEAAyE;IACzE,OAAO,EAAE,CAAC,MAAc,EAAE,KAAa,EAAE,EAAE,CAAC,eAAe,MAAM,IAAI,KAAK,wBAAwB;CAC1F,CAAC"}

package/dist/cdk/shared/websocket-construct.d.ts

@@ -110,8 +110,16 @@ export interface AttachWebSocketApiProps {
     envConfig: EnvConfig;
     /** Shared Lambda execution role. The ws Lambdas attach to this. */
     lambdaRole: iam.Role;
+    /** Per-route execution role (default `lambdaRole`) — e.g. a system-database-login role. */
+    roleFor?: (routeKey: string) => iam.Role;
+    /** Per-route env on top of `baseEnvVars` (e.g. the system login's secret). */
+    envFor?: (routeKey: string) => Record<string, string>;
+    /** Other roles a route may run as: they get the same table / connection grants. */
+    extraRoles?: iam.Role[];
     /** Shared Lambda SG when a VPC is imported; otherwise undefined. */
     lambdaSecurityGroup?: ec2.ISecurityGroup;
+    /** More groups every handler joins (the VPC's internal clients group). */
+    extraSecurityGroups?: ec2.ISecurityGroup[];
     /** Imported VPC; ws Lambdas attach to the same private subnets. */
     vpc?: ec2.IVpc;
     /**

package/dist/cdk/shared/websocket-construct.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"websocket-construct.d.ts","sourceRoot":"","sources":["../../../src/cdk/shared/websocket-construct.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AAGH,OAAO,KAAK,GAAG,MAAM,qBAAqB,CAAC;AAC3C,OAAO,KAAK,GAAG,MAAM,qBAAqB,CAAC;AAC3C,OAAO,KAAK,MAAM,MAAM,wBAAwB,CAAC;AAEjD,OAAO,KAAK,QAAQ,MAAM,0BAA0B,CAAC;AACrD,OAAO,KAAK,YAAY,MAAM,8BAA8B,CAAC;AAE7D,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAQhE,OAAO,EAAE,KAAK,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAM3D;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,uDAAuD;IACvD,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC;IAEtB,qCAAqC;IACrC,GAAG,EAAE,YAAY,CAAC,YAAY,CAAC;IAE/B,qFAAqF;IACrF,KAAK,EAAE,YAAY,CAAC,cAAc,CAAC;IAEnC;;;;;;;;;;;;;;OAcG;IACH,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEhC,uDAAuD;IACvD,iBAAiB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;CACjD;AAED;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB;IACtC,oDAAoD;IACpD,WAAW,EAAE,MAAM,CAAC;IAEpB,yEAAyE;IACzE,KAAK,EAAE,MAAM,CAAC;IAEd;;;;;OAKG;IACH,SAAS,EAAE,SAAS,CAAC;IAErB,mEAAmE;IACnE,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC;IAErB,oEAAoE;IACpE,mBAAmB,CAAC,EAAE,GAAG,CAAC,cAAc,CAAC;IAEzC,mEAAmE;IACnE,GAAG,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC;IAEf;;;;;OAKG;IACH,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEpC;;;OAGG;IACH,YAAY,EAAE,OAAO,CAAC;IAEtB;;;;;OAKG;IACH,iBAAiB,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC;IAExD;;;;;OAKG;IACH,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAE5B;;;;OAIG;IACH,cAAc,EAAE,OAAO,CAAC;IAExB;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;CAC1B;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,SAAS,EAChB,KAAK,EAAE,uBAAuB,GAC7B,mBAAmB,CAmRrB"}
+{"version":3,"file":"websocket-construct.d.ts","sourceRoot":"","sources":["../../../src/cdk/shared/websocket-construct.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AAGH,OAAO,KAAK,GAAG,MAAM,qBAAqB,CAAC;AAC3C,OAAO,KAAK,GAAG,MAAM,qBAAqB,CAAC;AAC3C,OAAO,KAAK,MAAM,MAAM,wBAAwB,CAAC;AAEjD,OAAO,KAAK,QAAQ,MAAM,0BAA0B,CAAC;AACrD,OAAO,KAAK,YAAY,MAAM,8BAA8B,CAAC;AAE7D,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAQhE,OAAO,EAAE,KAAK,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAM3D;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,uDAAuD;IACvD,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC;IAEtB,qCAAqC;IACrC,GAAG,EAAE,YAAY,CAAC,YAAY,CAAC;IAE/B,qFAAqF;IACrF,KAAK,EAAE,YAAY,CAAC,cAAc,CAAC;IAEnC;;;;;;;;;;;;;;OAcG;IACH,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEhC,uDAAuD;IACvD,iBAAiB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;CACjD;AAED;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB;IACtC,oDAAoD;IACpD,WAAW,EAAE,MAAM,CAAC;IAEpB,yEAAyE;IACzE,KAAK,EAAE,MAAM,CAAC;IAEd;;;;;OAKG;IACH,SAAS,EAAE,SAAS,CAAC;IAErB,mEAAmE;IACnE,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC;IACrB,2FAA2F;IAC3F,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC;IACzC,8EAA8E;IAC9E,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtD,mFAAmF;IACnF,UAAU,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;IAExB,oEAAoE;IACpE,mBAAmB,CAAC,EAAE,GAAG,CAAC,cAAc,CAAC;IACzC,0EAA0E;IAC1E,mBAAmB,CAAC,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC;IAE3C,mEAAmE;IACnE,GAAG,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC;IAEf;;;;;OAKG;IACH,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEpC;;;OAGG;IACH,YAAY,EAAE,OAAO,CAAC;IAEtB;;;;;OAKG;IACH,iBAAiB,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC;IAExD;;;;;OAKG;IACH,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAE5B;;;;OAIG;IACH,cAAc,EAAE,OAAO,CAAC;IAExB;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;CAC1B;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,SAAS,EAChB,KAAK,EAAE,uBAAuB,GAC7B,mBAAmB,CAsRrB"}

package/dist/cdk/shared/websocket-construct.js

@@ -129,6 +129,8 @@ export function attachWebSocketApi(scope, props) {
     // No way to scope tighter without per-Lambda roles — same trade-off
     // documented in app-stack.ts's `applyImportedGrants`.
     table.grantReadWriteData(lambdaRole);
+    for (const role of props.extraRoles ?? [])
+        table.grantReadWriteData(role);
     // ─── WebSocket API + stage ─────────────────────────────────────
     // routeSelectionExpression is fixed at `$request.body.action` —
     // matches the runtime's two-phase auth contract where the client
@@ -154,6 +156,8 @@ export function attachWebSocketApi(scope, props) {
     // post to a connection via the API Gateway Management API. This is
     // what `connectionStore.postToConnection()` needs at runtime.
     api.grantManageConnections(lambdaRole);
+    for (const role of props.extraRoles ?? [])
+        api.grantManageConnections(role);
     // ─── Per-route Lambdas + WebSocketRoute integrations ──────────
     const lambdasByRouteKey = new Map();
     const lambdaConfig = envConfig.lambda;
@@ -180,6 +184,7 @@ export function attachWebSocketApi(scope, props) {
                 CONNECTIONS_TABLE: table.tableName,
                 VENTURE_WS_API_ID: api.apiId,
                 VENTURE_WS_STAGE: wsStage.stageName,
+                ...(props.envFor?.(route.routeKey) ?? {}),
             },
             logGroup: new logs.LogGroup(scope, `${resourceId}-logs`, {
                 // Per-stack-incarnation unique name — same recreate-race
@@ -195,12 +200,12 @@ export function attachWebSocketApi(scope, props) {
                 ? lambda.Tracing.ACTIVE
                 : lambda.Tracing.DISABLED,
             reservedConcurrentExecutions: lambdaConfig.reservedConcurrency,
-            role: lambdaRole,
+            role: props.roleFor?.(route.routeKey) ?? lambdaRole,
             ...(vpc && lambdaSecurityGroup
                 ? {
                     vpc,
                     vpcSubnets: { subnetType: ec2.SubnetType.PRIVATE_WITH_EGRESS },
-                    securityGroups: [lambdaSecurityGroup],
+                    securityGroups: [lambdaSecurityGroup, ...(props.extraSecurityGroups ?? [])],
                 }
                 : {}),
         });

package/dist/cdk/shared/websocket-construct.js.map

@@ -1 +1 @@
-{"version":3,"file":"websocket-construct.js","sourceRoot":"","sources":["../../../src/cdk/shared/websocket-construct.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AAEH,OAAO,KAAK,GAAG,MAAM,aAAa,CAAC;AAEnC,OAAO,KAAK,GAAG,MAAM,qBAAqB,CAAC;AAC3C,OAAO,KAAK,MAAM,MAAM,wBAAwB,CAAC;AACjD,OAAO,KAAK,IAAI,MAAM,sBAAsB,CAAC;AAC7C,OAAO,KAAK,QAAQ,MAAM,0BAA0B,CAAC;AACrD,OAAO,KAAK,YAAY,MAAM,8BAA8B,CAAC;AAC7D,OAAO,KAAK,wBAAwB,MAAM,2CAA2C,CAAC;AAGtF,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,cAAc,EACd,uBAAuB,EACvB,kBAAkB,GACnB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,4BAA4B,EAC5B,6BAA6B,GAC9B,MAAM,qBAAqB,CAAC;AAmH7B;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAgB,EAChB,KAA8B;IAE9B,MAAM,EACJ,WAAW,EACX,KAAK,EACL,SAAS,EACT,UAAU,EACV,mBAAmB,EACnB,GAAG,EACH,WAAW,EACX,iBAAiB,EACjB,MAAM,EACN,cAAc,EACd,OAAO,GACR,GAAG,KAAK,CAAC;IAEV,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,qEAAqE;YACrE,iEAAiE;YACjE,6DAA6D,CAC9D,CAAC;IACJ,CAAC;IAED,kEAAkE;IAClE,+DAA+D;IAC/D,uEAAuE;IACvE,gEAAgE;IAChE,kEAAkE;IAClE,qEAAqE;IACrE,EAAE;IACF,kEAAkE;IAClE,mEAAmE;IACnE,qEAAqE;IACrE,mEAAmE;IACnE,EAAE;IACF,wEAAwE;IACxE,+DAA+D;IAC/D,6DAA6D;IAC7D,qDAAqD;IACrD,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,oBAAoB,EAAE;QAC5D,SAAS,EAAE,GAAG,WAAW,IAAI,KAAK,iBAAiB;QACnD,YAAY,EAAE;YACZ,IAAI,EAAE,cAAc;YACpB,IAAI,EAAE,QAAQ,CAAC,aAAa,CAAC,MAAM;SACpC;QACD,WAAW,EAAE,QAAQ,CAAC,WAAW,CAAC,eAAe;QACjD,mBAAmB,EAAE,KAAK;QAC1B,kEAAkE;QAClE,kEAAkE;QAClE,gEAAgE;QAChE,2DAA2D;QAC3D,aAAa,EAAE,GAAG,CAAC,aAAa,CAAC,OAAO;QACxC,gEAAgE;QAChE,2CAA2C;QAC3C,mBAAmB,EAAE,KAAK;KAC3B,CAAC,CAAC;IAEH,KAAK,CAAC,uBAAuB,CAAC;QAC5B,SAAS,EAAE,cAAc;QACzB,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,CAAC,aAAa,CAAC,MAAM,EAAE;QACrE,+DAA+D;QAC/D,iEAAiE;QACjE,yDAAyD;QACzD,8CAA8C;QAC9C,cAAc,EAAE,QAAQ,CAAC,cAAc,CAAC,GAAG;KAC5C,CAAC,CAAC;IAEH,KAAK,CAAC,uBAAuB,CAAC;QAC5B,SAAS,EAAE,gBAAgB;QAC3B,YAAY,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,CAAC,aAAa,CAAC,MAAM,EAAE;QACvE,cAAc,EAAE,QAAQ,CAAC,cAAc,CAAC,GAAG;KAC5C,CAAC,CAAC;IAEH,mEAAmE;IACnE,+DAA+D;IAC/D,mEAAmE;IACnE,oEAAoE;IACpE,sDAAsD;IACtD,KAAK,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAErC,kEAAkE;IAClE,gEAAgE;IAChE,iEAAiE;IACjE,gEAAgE;IAChE,mEAAmE;IACnE,8DAA8D;IAC9D,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE;QACxD,OAAO,EAAE,GAAG,WAAW,IAAI,KAAK,KAAK;QACrC,WAAW,EAAE,GAAG,WAAW,IAAI,KAAK,yBAAyB;QAC7D,wBAAwB,EAAE,SAAS,CAAC,SAAS,CAAC,wBAAwB;KACvE,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,cAAc,CAAC,KAAK,EAAE,SAAS,EAAE;QAChE,YAAY,EAAE,GAAG;QACjB,SAAS,EAAE,KAAK;QAChB,UAAU,EAAE,IAAI;QAChB,iEAAiE;QACjE,8DAA8D;QAC9D,mEAAmE;QACnE,6DAA6D;QAC7D,wDAAwD;KACzD,CAAC,CAAC;IAEH,+DAA+D;IAC/D,mEAAmE;IACnE,8DAA8D;IAC9D,GAAG,CAAC,sBAAsB,CAAC,UAAU,CAAC,CAAC;IAEvC,iEAAiE;IACjE,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAA2B,CAAC;IAC7D,MAAM,YAAY,GAAG,SAAS,CAAC,MAAM,CAAC;IAEtC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC;QAC9B,MAAM,YAAY,GAAG,uBAAuB,CAC1C,GAAG,WAAW,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,CACxC,CAAC;QAEF,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,EAAE;YAChD,YAAY;YACZ,OAAO,EAAE,eAAe,CAAC,SAAS,CAAC;YACnC,YAAY,EAAE,oBAAoB,CAAC,SAAS,CAAC;YAC7C,OAAO,EAAE,YAAY;YACrB,IAAI,EAAE,iBAAiB,CAAC,KAAK,CAAC,WAAW,CAAC;YAC1C,UAAU,EAAE,YAAY,CAAC,QAAQ;YACjC,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,UAAU,CAAC;YACtD,WAAW,EAAE,aAAa,KAAK,CAAC,QAAQ,UAAU;YAClD,WAAW,EAAE;gBACX,GAAG,WAAW;gBACd,GAAG,YAAY,CAAC,oBAAoB;gBACpC,oDAAoD;gBACpD,2DAA2D;gBAC3D,0DAA0D;gBAC1D,yDAAyD;gBACzD,uCAAuC;gBACvC,iBAAiB,EAAE,KAAK,CAAC,SAAS;gBAClC,iBAAiB,EAAE,GAAG,CAAC,KAAK;gBAC5B,gBAAgB,EAAE,OAAO,CAAC,SAAS;aACpC;YACD,QAAQ,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,UAAU,OAAO,EAAE;gBACvD,yDAAyD;gBACzD,kDAAkD;gBAClD,yCAAyC;gBACzC,YAAY,EAAE,kBAAkB,CAAC,KAAK,EAAE,YAAY,CAAC;gBACrD,SAAS,EAAE,cAAc,CAAC,YAAY,CAAC,gBAAgB,CAAC;gBACxD,aAAa,EAAE,cAAc;oBAC3B,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,MAAM;oBAC1B,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,OAAO;aAC9B,CAAC;YACF,OAAO,EAAE,YAAY,CAAC,cAAc;gBAClC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM;gBACvB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ;YAC3B,4BAA4B,EAAE,YAAY,CAAC,mBAAmB;YAC9D,IAAI,EAAE,UAAU;YAChB,GAAG,CAAC,GAAG,IAAI,mBAAmB;gBAC5B,CAAC,CAAC;oBACE,GAAG;oBACH,UAAU,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,mBAAmB,EAAE;oBAC9D,cAAc,EAAE,CAAC,mBAAmB,CAAC;iBACtC;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;QAEH,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAE1C,sDAAsD;QACtD,8DAA8D;QAC9D,gEAAgE;QAChE,iCAAiC;QACjC,MAAM,WAAW,GAAG,IAAI,wBAAwB,CAAC,0BAA0B,CACzE,GAAG,UAAU,cAAc,EAC3B,EAAE,CACH,CAAC;QAEF,4DAA4D;QAC5D,gEAAgE;QAChE,8DAA8D;QAC9D,gBAAgB;QAChB,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,kEAAkE;IAClE,8DAA8D;IAC9D,qEAAqE;IACrE,qEAAqE;IACrE,2DAA2D;IAC3D,MAAM,SAAS,GAAG,OAAO,IAAI,EAAE,CAAC;IAChC,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,KAAK,MAAM,YAAY,IAAI,SAAS,EAAE,CAAC;QACrC,MAAM,kBAAkB,GAAG,GAAG,WAAW,IAAI,YAAY,CAAC,EAAE,EAAE,CAAC;QAC/D,0DAA0D;QAC1D,mEAAmE;QACnE,oDAAoD;QACpD,MAAM,GAAG,GACP,YAAY,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QAC3E,MAAM,UAAU,GAAG,4BAA4B,CAAC,KAAK,EAAE;YACrD,YAAY,EAAE,kBAAkB;YAChC,MAAM,EAAE,YAAY,CAAC,MAAM;YAC3B,cAAc,EAAE,YAAY,CAAC,cAAc;YAC3C,kBAAkB,EAAE,YAAY,CAAC,kBAAkB;YACnD,YAAY,EAAE,YAAY,CAAC,YAAY;YACvC,GAAG;YACH,4DAA4D;YAC5D,8DAA8D;YAC9D,MAAM,EAAE,cAAc;SACvB,CAAC,CAAC;QACH,iEAAiE;QACjE,2DAA2D;QAC3D,IAAI,CAAC,UAAU;YAAE,SAAS;QAC1B,cAAc,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAEzC,MAAM,aAAa,GAAG,IAAI,YAAY,CAAC,UAAU,CAC/C,KAAK,EACL,GAAG,kBAAkB,UAAU,EAC/B;YACE,GAAG;YACH,UAAU;YACV,KAAK,EAAE,OAAO;SACf,CACF,CAAC;QACF,2DAA2D;QAC3D,8CAA8C;QAC9C,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,YAA+B,CAAC;YACtE,UAAU,CAAC,UAAU,CAAC,cAAc,GAAG,GAAG,CAAC,iBAAiB,CAAC,MAAM,CAAC;YACpE,UAAU,CAAC,UAAU,CAAC,mBAAmB,GAAG,GAAG,CAAC,iBAAiB,CAAC,MAAM,CAAC;QAC3E,CAAC;QAED,mEAAmE;QACnE,mEAAmE;QACnE,oEAAoE;QACpE,+CAA+C;QAC/C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,6BAA6B,CAAC,KAAK,EAAE;gBACnC,YAAY,EAAE,kBAAkB;gBAChC,MAAM,EAAE,YAAY,CAAC,MAAM;gBAC3B,YAAY,EAAE,YAAY,CAAC,YAAa;gBACxC,UAAU;aACX,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,iEAAiE;IACjE,uEAAuE;IACvE,8DAA8D;IAC9D,8DAA8D;IAC9D,uDAAuD;IACvD,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;IAC1C,MAAM,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,gBAAgB,MAAM,gBAAgB,CAAC;IAClE,MAAM,OAAO,GAA2B;QACtC,iBAAiB,EAAE,KAAK,CAAC,SAAS;QAClC,iBAAiB,EAAE,GAAG,CAAC,KAAK;QAC5B,gBAAgB,EAAE,OAAO,CAAC,SAAS;QACnC,iBAAiB,EAAE,MAAM;QACzB,uBAAuB,EAAE,WAAW,MAAM,IAAI,OAAO,CAAC,SAAS,EAAE;KAClE,CAAC;IAEF,sEAAsE;IACtE,oEAAoE;IACpE,qEAAqE;IACrE,qEAAqE;IACrE,uEAAuE;IACvE,qEAAqE;IACrE,oEAAoE;IACpE,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,wBAAwB,GAAG,cAAc,CAAC,CAAC,CAAE,CAAC;IACxD,CAAC;IAED,OAAO;QACL,KAAK;QACL,GAAG;QACH,KAAK,EAAE,OAAO;QACd,OAAO;QACP,iBAAiB;KAClB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"websocket-construct.js","sourceRoot":"","sources":["../../../src/cdk/shared/websocket-construct.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AAEH,OAAO,KAAK,GAAG,MAAM,aAAa,CAAC;AAEnC,OAAO,KAAK,GAAG,MAAM,qBAAqB,CAAC;AAC3C,OAAO,KAAK,MAAM,MAAM,wBAAwB,CAAC;AACjD,OAAO,KAAK,IAAI,MAAM,sBAAsB,CAAC;AAC7C,OAAO,KAAK,QAAQ,MAAM,0BAA0B,CAAC;AACrD,OAAO,KAAK,YAAY,MAAM,8BAA8B,CAAC;AAC7D,OAAO,KAAK,wBAAwB,MAAM,2CAA2C,CAAC;AAGtF,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,cAAc,EACd,uBAAuB,EACvB,kBAAkB,GACnB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,4BAA4B,EAC5B,6BAA6B,GAC9B,MAAM,qBAAqB,CAAC;AA2H7B;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAgB,EAChB,KAA8B;IAE9B,MAAM,EACJ,WAAW,EACX,KAAK,EACL,SAAS,EACT,UAAU,EACV,mBAAmB,EACnB,GAAG,EACH,WAAW,EACX,iBAAiB,EACjB,MAAM,EACN,cAAc,EACd,OAAO,GACR,GAAG,KAAK,CAAC;IAEV,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,qEAAqE;YACrE,iEAAiE;YACjE,6DAA6D,CAC9D,CAAC;IACJ,CAAC;IAED,kEAAkE;IAClE,+DAA+D;IAC/D,uEAAuE;IACvE,gEAAgE;IAChE,kEAAkE;IAClE,qEAAqE;IACrE,EAAE;IACF,kEAAkE;IAClE,mEAAmE;IACnE,qEAAqE;IACrE,mEAAmE;IACnE,EAAE;IACF,wEAAwE;IACxE,+DAA+D;IAC/D,6DAA6D;IAC7D,qDAAqD;IACrD,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,oBAAoB,EAAE;QAC5D,SAAS,EAAE,GAAG,WAAW,IAAI,KAAK,iBAAiB;QACnD,YAAY,EAAE;YACZ,IAAI,EAAE,cAAc;YACpB,IAAI,EAAE,QAAQ,CAAC,aAAa,CAAC,MAAM;SACpC;QACD,WAAW,EAAE,QAAQ,CAAC,WAAW,CAAC,eAAe;QACjD,mBAAmB,EAAE,KAAK;QAC1B,kEAAkE;QAClE,kEAAkE;QAClE,gEAAgE;QAChE,2DAA2D;QAC3D,aAAa,EAAE,GAAG,CAAC,aAAa,CAAC,OAAO;QACxC,gEAAgE;QAChE,2CAA2C;QAC3C,mBAAmB,EAAE,KAAK;KAC3B,CAAC,CAAC;IAEH,KAAK,CAAC,uBAAuB,CAAC;QAC5B,SAAS,EAAE,cAAc;QACzB,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,CAAC,aAAa,CAAC,MAAM,EAAE;QACrE,+DAA+D;QAC/D,iEAAiE;QACjE,yDAAyD;QACzD,8CAA8C;QAC9C,cAAc,EAAE,QAAQ,CAAC,cAAc,CAAC,GAAG;KAC5C,CAAC,CAAC;IAEH,KAAK,CAAC,uBAAuB,CAAC;QAC5B,SAAS,EAAE,gBAAgB;QAC3B,YAAY,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,CAAC,aAAa,CAAC,MAAM,EAAE;QACvE,cAAc,EAAE,QAAQ,CAAC,cAAc,CAAC,GAAG;KAC5C,CAAC,CAAC;IAEH,mEAAmE;IACnE,+DAA+D;IAC/D,mEAAmE;IACnE,oEAAoE;IACpE,sDAAsD;IACtD,KAAK,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,UAAU,IAAI,EAAE;QAAE,KAAK,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAE1E,kEAAkE;IAClE,gEAAgE;IAChE,iEAAiE;IACjE,gEAAgE;IAChE,mEAAmE;IACnE,8DAA8D;IAC9D,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE;QACxD,OAAO,EAAE,GAAG,WAAW,IAAI,KAAK,KAAK;QACrC,WAAW,EAAE,GAAG,WAAW,IAAI,KAAK,yBAAyB;QAC7D,wBAAwB,EAAE,SAAS,CAAC,SAAS,CAAC,wBAAwB;KACvE,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,cAAc,CAAC,KAAK,EAAE,SAAS,EAAE;QAChE,YAAY,EAAE,GAAG;QACjB,SAAS,EAAE,KAAK;QAChB,UAAU,EAAE,IAAI;QAChB,iEAAiE;QACjE,8DAA8D;QAC9D,mEAAmE;QACnE,6DAA6D;QAC7D,wDAAwD;KACzD,CAAC,CAAC;IAEH,+DAA+D;IAC/D,mEAAmE;IACnE,8DAA8D;IAC9D,GAAG,CAAC,sBAAsB,CAAC,UAAU,CAAC,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,UAAU,IAAI,EAAE;QAAE,GAAG,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAE5E,iEAAiE;IACjE,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAA2B,CAAC;IAC7D,MAAM,YAAY,GAAG,SAAS,CAAC,MAAM,CAAC;IAEtC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC;QAC9B,MAAM,YAAY,GAAG,uBAAuB,CAC1C,GAAG,WAAW,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,CACxC,CAAC;QAEF,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,EAAE;YAChD,YAAY;YACZ,OAAO,EAAE,eAAe,CAAC,SAAS,CAAC;YACnC,YAAY,EAAE,oBAAoB,CAAC,SAAS,CAAC;YAC7C,OAAO,EAAE,YAAY;YACrB,IAAI,EAAE,iBAAiB,CAAC,KAAK,CAAC,WAAW,CAAC;YAC1C,UAAU,EAAE,YAAY,CAAC,QAAQ;YACjC,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,UAAU,CAAC;YACtD,WAAW,EAAE,aAAa,KAAK,CAAC,QAAQ,UAAU;YAClD,WAAW,EAAE;gBACX,GAAG,WAAW;gBACd,GAAG,YAAY,CAAC,oBAAoB;gBACpC,oDAAoD;gBACpD,2DAA2D;gBAC3D,0DAA0D;gBAC1D,yDAAyD;gBACzD,uCAAuC;gBACvC,iBAAiB,EAAE,KAAK,CAAC,SAAS;gBAClC,iBAAiB,EAAE,GAAG,CAAC,KAAK;gBAC5B,gBAAgB,EAAE,OAAO,CAAC,SAAS;gBACnC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;aAC1C;YACD,QAAQ,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,UAAU,OAAO,EAAE;gBACvD,yDAAyD;gBACzD,kDAAkD;gBAClD,yCAAyC;gBACzC,YAAY,EAAE,kBAAkB,CAAC,KAAK,EAAE,YAAY,CAAC;gBACrD,SAAS,EAAE,cAAc,CAAC,YAAY,CAAC,gBAAgB,CAAC;gBACxD,aAAa,EAAE,cAAc;oBAC3B,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,MAAM;oBAC1B,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,OAAO;aAC9B,CAAC;YACF,OAAO,EAAE,YAAY,CAAC,cAAc;gBAClC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM;gBACvB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ;YAC3B,4BAA4B,EAAE,YAAY,CAAC,mBAAmB;YAC9D,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,UAAU;YACnD,GAAG,CAAC,GAAG,IAAI,mBAAmB;gBAC5B,CAAC,CAAC;oBACE,GAAG;oBACH,UAAU,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,mBAAmB,EAAE;oBAC9D,cAAc,EAAE,CAAC,mBAAmB,EAAE,GAAG,CAAC,KAAK,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC;iBAC5E;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;QAEH,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAE1C,sDAAsD;QACtD,8DAA8D;QAC9D,gEAAgE;QAChE,iCAAiC;QACjC,MAAM,WAAW,GAAG,IAAI,wBAAwB,CAAC,0BAA0B,CACzE,GAAG,UAAU,cAAc,EAC3B,EAAE,CACH,CAAC;QAEF,4DAA4D;QAC5D,gEAAgE;QAChE,8DAA8D;QAC9D,gBAAgB;QAChB,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,kEAAkE;IAClE,8DAA8D;IAC9D,qEAAqE;IACrE,qEAAqE;IACrE,2DAA2D;IAC3D,MAAM,SAAS,GAAG,OAAO,IAAI,EAAE,CAAC;IAChC,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,KAAK,MAAM,YAAY,IAAI,SAAS,EAAE,CAAC;QACrC,MAAM,kBAAkB,GAAG,GAAG,WAAW,IAAI,YAAY,CAAC,EAAE,EAAE,CAAC;QAC/D,0DAA0D;QAC1D,mEAAmE;QACnE,oDAAoD;QACpD,MAAM,GAAG,GACP,YAAY,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QAC3E,MAAM,UAAU,GAAG,4BAA4B,CAAC,KAAK,EAAE;YACrD,YAAY,EAAE,kBAAkB;YAChC,MAAM,EAAE,YAAY,CAAC,MAAM;YAC3B,cAAc,EAAE,YAAY,CAAC,cAAc;YAC3C,kBAAkB,EAAE,YAAY,CAAC,kBAAkB;YACnD,YAAY,EAAE,YAAY,CAAC,YAAY;YACvC,GAAG;YACH,4DAA4D;YAC5D,8DAA8D;YAC9D,MAAM,EAAE,cAAc;SACvB,CAAC,CAAC;QACH,iEAAiE;QACjE,2DAA2D;QAC3D,IAAI,CAAC,UAAU;YAAE,SAAS;QAC1B,cAAc,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAEzC,MAAM,aAAa,GAAG,IAAI,YAAY,CAAC,UAAU,CAC/C,KAAK,EACL,GAAG,kBAAkB,UAAU,EAC/B;YACE,GAAG;YACH,UAAU;YACV,KAAK,EAAE,OAAO;SACf,CACF,CAAC;QACF,2DAA2D;QAC3D,8CAA8C;QAC9C,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,YAA+B,CAAC;YACtE,UAAU,CAAC,UAAU,CAAC,cAAc,GAAG,GAAG,CAAC,iBAAiB,CAAC,MAAM,CAAC;YACpE,UAAU,CAAC,UAAU,CAAC,mBAAmB,GAAG,GAAG,CAAC,iBAAiB,CAAC,MAAM,CAAC;QAC3E,CAAC;QAED,mEAAmE;QACnE,mEAAmE;QACnE,oEAAoE;QACpE,+CAA+C;QAC/C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,6BAA6B,CAAC,KAAK,EAAE;gBACnC,YAAY,EAAE,kBAAkB;gBAChC,MAAM,EAAE,YAAY,CAAC,MAAM;gBAC3B,YAAY,EAAE,YAAY,CAAC,YAAa;gBACxC,UAAU;aACX,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,iEAAiE;IACjE,uEAAuE;IACvE,8DAA8D;IAC9D,8DAA8D;IAC9D,uDAAuD;IACvD,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;IAC1C,MAAM,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,gBAAgB,MAAM,gBAAgB,CAAC;IAClE,MAAM,OAAO,GAA2B;QACtC,iBAAiB,EAAE,KAAK,CAAC,SAAS;QAClC,iBAAiB,EAAE,GAAG,CAAC,KAAK;QAC5B,gBAAgB,EAAE,OAAO,CAAC,SAAS;QACnC,iBAAiB,EAAE,MAAM;QACzB,uBAAuB,EAAE,WAAW,MAAM,IAAI,OAAO,CAAC,SAAS,EAAE;KAClE,CAAC;IAEF,sEAAsE;IACtE,oEAAoE;IACpE,qEAAqE;IACrE,qEAAqE;IACrE,uEAAuE;IACvE,qEAAqE;IACrE,oEAAoE;IACpE,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,wBAAwB,GAAG,cAAc,CAAC,CAAC,CAAE,CAAC;IACxD,CAAC;IAED,OAAO;QACL,KAAK;QACL,GAAG;QACH,KAAK,EAAE,OAAO;QACd,OAAO;QACP,iBAAiB;KAClB,CAAC;AACJ,CAAC"}