alchemy-effect 0.0.0 → 0.1.0

package/lib/aws/credentials.js

@@ -0,0 +1,170 @@
+import { fromContainerMetadata as _fromContainerMetadata, fromEnv as _fromEnv, fromHttp as _fromHttp, fromIni as _fromIni, fromInstanceMetadata as _fromInstanceMetadata, fromNodeProviderChain as _fromNodeProviderChain, fromProcess as _fromProcess, fromTokenFile as _fromTokenFile, fromWebToken as _fromWebToken, } from "@aws-sdk/credential-providers";
+import { FileSystem, HttpClient } from "@effect/platform";
+import * as ini from "@smithy/shared-ini-file-loader";
+import {} from "@smithy/types";
+import * as Console from "effect/Console";
+import * as Context from "effect/Context";
+import * as Data from "effect/Data";
+import * as Effect from "effect/Effect";
+import * as Layer from "effect/Layer";
+import * as Option from "effect/Option";
+import * as Redacted from "effect/Redacted";
+import { createHash } from "node:crypto";
+import * as path from "node:path";
+import { parseIni, parseSSOSessionData } from "./parse-ini.js";
+import { AwsProfile } from "./profile.js";
+export class Credentials extends Context.Tag("AWS::Credentials")() {
+}
+export const fromAwsCredentialIdentity = (identity) => Credentials.of({
+    accessKeyId: Redacted.make(identity.accessKeyId),
+    secretAccessKey: Redacted.make(identity.secretAccessKey),
+    sessionToken: identity.sessionToken
+        ? Redacted.make(identity.sessionToken)
+        : undefined,
+    expiration: identity.expiration?.getTime(),
+});
+const createLayer = (provider) => Layer.effect(Credentials, Effect.gen(function* () {
+    return fromAwsCredentialIdentity(yield* Effect.promise(() => provider({})()));
+}));
+export const fromCredentials = (credentials) => Layer.succeed(Credentials, fromAwsCredentialIdentity(credentials));
+export const fromEnv = () => createLayer(_fromEnv);
+export const fromChain = () => createLayer(() => _fromNodeProviderChain());
+// export const fromSSO = () => createLayer(_fromSSO);
+export const fromIni = () => createLayer(_fromIni);
+export const fromContainerMetadata = () => createLayer(_fromContainerMetadata);
+export const fromHttp = () => createLayer(_fromHttp);
+export const fromInstanceMetadata = (...parameters) => createLayer(() => _fromInstanceMetadata(...parameters));
+export const fromProcess = () => createLayer(_fromProcess);
+export const fromTokenFile = () => createLayer(_fromTokenFile);
+export const fromWebToken = (...parameters) => createLayer(() => _fromWebToken(...parameters));
+export const ssoRegion = (region) => Layer.succeed(SsoRegion, region);
+/**
+ * The time window (5 mins) that SDK will treat the SSO token expires in before the defined expiration date in token.
+ * This is needed because server side may have invalidated the token before the defined expiration date.
+ */
+const EXPIRE_WINDOW_MS = 5 * 60 * 1000;
+const REFRESH_MESSAGE = `To refresh this SSO session run 'aws sso login' with the corresponding profile.`;
+export class SsoRegion extends Context.Tag("AWS::SsoRegion")() {
+}
+export class SsoStartUrl extends Context.Tag("AWS::SsoStartUrl")() {
+}
+export class ProfileNotFound extends Data.TaggedError("Alchemy::AWS::ProfileNotFound") {
+}
+export class ConflictingSSORegion extends Data.TaggedError("Alchemy::AWS::ConflictingSSORegion") {
+}
+export class ConflictingSSOStartUrl extends Data.TaggedError("Alchemy::AWS::ConflictingSSOStartUrl") {
+}
+export class InvalidSSOProfile extends Data.TaggedError("Alchemy::AWS::InvalidSSOProfile") {
+}
+export class InvalidSSOToken extends Data.TaggedError("Alchemy::AWS::InvalidSSOToken") {
+}
+export class ExpiredSSOToken extends Data.TaggedError("Alchemy::AWS::ExpiredSSOToken") {
+}
+export const fromSSO = () => Layer.effect(Credentials, Effect.gen(function* () {
+    const client = yield* HttpClient.HttpClient;
+    const fs = yield* FileSystem.FileSystem;
+    const profileName = Option.getOrElse(yield* Effect.serviceOption(AwsProfile), () => "default");
+    const profiles = yield* Effect.promise(() => ini.parseKnownFiles({ profile: profileName }));
+    const profile = profiles[profileName];
+    if (!profile) {
+        yield* Effect.fail(new ProfileNotFound({
+            message: `Profile ${profileName} not found`,
+            profile: profileName,
+        }));
+    }
+    const awsDir = path.join(ini.getHomeDir(), ".aws");
+    const configPath = path.join(awsDir, "config");
+    const cachePath = path.join(awsDir, "sso", "cache");
+    if (profile.sso_session) {
+        const ssoRegion = Option.getOrUndefined(yield* Effect.serviceOption(SsoRegion));
+        const ssoStartUrl = Option.getOrElse(yield* Effect.serviceOption(SsoStartUrl), () => profile.sso_start_url);
+        const ssoSessions = yield* fs.readFileString(configPath).pipe(Effect.flatMap((config) => Effect.promise(async () => parseIni(config))), Effect.map(parseSSOSessionData));
+        const session = ssoSessions[profile.sso_session];
+        if (ssoRegion && ssoRegion !== session.sso_region) {
+            yield* Effect.fail(new ConflictingSSORegion({
+                message: `Conflicting SSO region`,
+                ssoRegion: ssoRegion,
+                profile: profile.sso_session,
+            }));
+        }
+        if (ssoStartUrl && ssoStartUrl !== session.sso_start_url) {
+            yield* Effect.fail(new ConflictingSSOStartUrl({
+                message: `Conflicting SSO start url`,
+                ssoStartUrl: ssoStartUrl,
+                profile: profile.sso_session,
+            }));
+        }
+        profile.sso_region = session.sso_region;
+        profile.sso_start_url = session.sso_start_url;
+        const ssoFields = [
+            "sso_start_url",
+            "sso_account_id",
+            "sso_region",
+            "sso_role_name",
+        ];
+        const missingFields = ssoFields.filter((field) => !profile[field]);
+        if (missingFields.length > 0) {
+            yield* Effect.fail(new InvalidSSOProfile({
+                profile: profileName,
+                missingFields,
+                message: `Profile is configured with invalid SSO credentials. Required parameters "sso_account_id", ` +
+                    `"sso_region", "sso_role_name", "sso_start_url". Got ${Object.keys(profile).join(", ")}\nReference: https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html`,
+            }));
+        }
+        const hasher = createHash("sha1");
+        const cacheName = hasher.update(profile.sso_session).digest("hex");
+        const ssoTokenFilepath = path.join(cachePath, `${cacheName}.json`);
+        const cachedCredsFilePath = path.join(cachePath, `${cacheName}.credentials.json`);
+        const cachedCreds = yield* fs.readFileString(cachedCredsFilePath).pipe(Effect.map((text) => JSON.parse(text)), Effect.catchAll(() => Effect.void));
+        const isExpired = (expiry) => {
+            return (expiry === undefined ||
+                new Date(expiry).getTime() - Date.now() <= EXPIRE_WINDOW_MS);
+        };
+        if (cachedCreds && !isExpired(cachedCreds.expiry)) {
+            return Credentials.of({
+                accessKeyId: Redacted.make(cachedCreds.accessKeyId),
+                secretAccessKey: Redacted.make(cachedCreds.secretAccessKey),
+                sessionToken: cachedCreds.sessionToken
+                    ? Redacted.make(cachedCreds.sessionToken)
+                    : undefined,
+                expiration: cachedCreds.expiry,
+            });
+        }
+        const ssoToken = yield* fs.readFileString(ssoTokenFilepath).pipe(Effect.map((text) => JSON.parse(text)), Effect.catchAll(() => Effect.fail(new InvalidSSOToken({
+            message: `The SSO session token associated with profile=${profileName} was not found or is invalid. ${REFRESH_MESSAGE}`,
+            sso_session: profile.sso_session,
+        }))));
+        if (isExpired(ssoToken.expiresAt)) {
+            yield* Console.log(`The SSO session token associated with profile=${profileName} was not found or is invalid. ${REFRESH_MESSAGE}`);
+            yield* Effect.fail(new ExpiredSSOToken({
+                message: `The SSO session token associated with profile=${profileName} was not found or is invalid. ${REFRESH_MESSAGE}`,
+                profile: profileName,
+            }));
+        }
+        const response = yield* client.get(`https://portal.sso.${profile.sso_region}.amazonaws.com/federation/credentials?account_id=${profile.sso_account_id}&role_name=${profile.sso_role_name}`, {
+            headers: {
+                "User-Agent": "alchemy.run",
+                "Content-Type": "application/json",
+                "x-amz-sso_bearer_token": ssoToken.accessToken,
+            },
+        });
+        const credentials = (yield* response.json).roleCredentials;
+        yield* fs.writeFileString(cachedCredsFilePath, JSON.stringify({
+            accessKeyId: credentials.accessKeyId,
+            secretAccessKey: credentials.secretAccessKey,
+            sessionToken: credentials.sessionToken,
+            expiry: credentials.expiration,
+        }));
+        return Credentials.of({
+            accessKeyId: Redacted.make(credentials.accessKeyId),
+            secretAccessKey: Redacted.make(credentials.secretAccessKey),
+            sessionToken: Redacted.make(credentials.sessionToken),
+            expiration: credentials.expiration,
+        });
+    }
+    return yield* Effect.fail(new ProfileNotFound({
+        message: `Profile ${profileName} not found`,
+        profile: profileName,
+    }));
+}));
+//# sourceMappingURL=credentials.js.map

package/lib/aws/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/aws/credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,IAAI,sBAAsB,EAC/C,OAAO,IAAI,QAAQ,EACnB,QAAQ,IAAI,SAAS,EACrB,OAAO,IAAI,QAAQ,EACnB,oBAAoB,IAAI,qBAAqB,EAC7C,qBAAqB,IAAI,sBAAsB,EAC/C,WAAW,IAAI,YAAY,EAC3B,aAAa,IAAI,cAAc,EAC/B,YAAY,IAAI,aAAa,GAC9B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,KAAK,GAAG,MAAM,gCAAgC,CAAC;AACtD,OAAO,EAGN,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAC1C,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAC1C,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AACpC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,MAAM,OAAO,WAAY,SAAQ,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAQ7D;CAAG;AAEN,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,QAA+B,EAAE,EAAE,CAC3E,WAAW,CAAC,EAAE,CAAC;IACb,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;IAChD,eAAe,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC;IACxD,YAAY,EAAE,QAAQ,CAAC,YAAY;QACjC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;QACtC,CAAC,CAAC,SAAS;IACb,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,OAAO,EAAE;CAC3C,CAAC,CAAC;AAEL,MAAM,WAAW,GAAG,CAAC,QAAuD,EAAE,EAAE,CAC9E,KAAK,CAAC,MAAM,CACV,WAAW,EACX,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO,yBAAyB,CAC9B,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAC5C,CAAC;AACJ,CAAC,CAAC,CACH,CAAC;AAEJ,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,WAAkC,EAAE,EAAE,CACpE,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,yBAAyB,CAAC,WAAW,CAAC,CAAC,CAAC;AAErE,MAAM,CAAC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;AAEnD,MAAM,CAAC,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,sBAAsB,EAAE,CAAC,CAAC;AAE3E,sDAAsD;AAEtD,MAAM,CAAC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;AAEnD,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,sBAAsB,CAAC,CAAC;AAE/E,MAAM,CAAC,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;AAErD,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,GAAG,UAAoD,EACvD,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,qBAAqB,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC;AAE7D,MAAM,CAAC,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;AAE3D,MAAM,CAAC,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;AAE/D,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,GAAG,UAA4C,EAAE,EAAE,CAC9E,WAAW,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC;AAElD,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,MAAc,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;AAE9E;;;GAGG;AACH,MAAM,gBAAgB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAEvC,MAAM,eAAe,GAAG,iFAAiF,CAAC;AAE1G,MAAM,OAAO,SAAU,SAAQ,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAGzD;CAAG;AACN,MAAM,OAAO,WAAY,SAAQ,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAG7D;CAAG;AAEN,MAAM,OAAO,eAAgB,SAAQ,IAAI,CAAC,WAAW,CACnD,+BAA+B,CAI/B;CAAG;AAEL,MAAM,OAAO,oBAAqB,SAAQ,IAAI,CAAC,WAAW,CACxD,oCAAoC,CAKpC;CAAG;AAEL,MAAM,OAAO,sBAAuB,SAAQ,IAAI,CAAC,WAAW,CAC1D,sCAAsC,CAKtC;CAAG;AAEL,MAAM,OAAO,iBAAkB,SAAQ,IAAI,CAAC,WAAW,CACrD,iCAAiC,CAKjC;CAAG;AAEL,MAAM,OAAO,eAAgB,SAAQ,IAAI,CAAC,WAAW,CACnD,+BAA+B,CAI/B;CAAG;AAEL,MAAM,OAAO,eAAgB,SAAQ,IAAI,CAAC,WAAW,CACnD,+BAA+B,CAI/B;CAAG;AAkBL,MAAM,CAAC,MAAM,OAAO,GAAG,GAAG,EAAE,CAC1B,KAAK,CAAC,MAAM,CACV,WAAW,EACX,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;IAC5C,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;IACxC,MAAM,WAAW,GAAG,MAAM,CAAC,SAAS,CAClC,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,EACvC,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;IAEF,MAAM,QAAQ,GAEV,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAC7B,GAAG,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAC9C,CAAC;IAEF,MAAM,OAAO,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;IAEtC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAChB,IAAI,eAAe,CAAC;YAClB,OAAO,EAAE,WAAW,WAAW,YAAY;YAC3C,OAAO,EAAE,WAAW;SACrB,CAAC,CACH,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,MAAM,CAAC,CAAC;IACnD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAEpD,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACxB,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CACrC,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,CACvC,CAAC;QACF,MAAM,WAAW,GAAG,MAAM,CAAC,SAAS,CAClC,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,EACxC,GAAG,EAAE,CAAC,OAAO,CAAC,aAAa,CAC5B,CAAC;QAEF,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,IAAI,CAC3D,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CACxB,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAC7C,EACD,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAChC,CAAC;QACF,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACjD,IAAI,SAAS,IAAI,SAAS,KAAK,OAAO,CAAC,UAAU,EAAE,CAAC;YAClD,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAChB,IAAI,oBAAoB,CAAC;gBACvB,OAAO,EAAE,wBAAwB;gBACjC,SAAS,EAAE,SAAS;gBACpB,OAAO,EAAE,OAAO,CAAC,WAAW;aAC7B,CAAC,CACH,CAAC;QACJ,CAAC;QACD,IAAI,WAAW,IAAI,WAAW,KAAK,OAAO,CAAC,aAAa,EAAE,CAAC;YACzD,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAChB,IAAI,sBAAsB,CAAC;gBACzB,OAAO,EAAE,2BAA2B;gBACpC,WAAW,EAAE,WAAW;gBACxB,OAAO,EAAE,OAAO,CAAC,WAAW;aAC7B,CAAC,CACH,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACxC,OAAO,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;QAE9C,MAAM,SAAS,GAAG;YAChB,eAAe;YACf,gBAAgB;YAChB,YAAY;YACZ,eAAe;SAC8B,CAAC;QAChD,MAAM,aAAa,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QACnE,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAChB,IAAI,iBAAiB,CAAC;gBACpB,OAAO,EAAE,WAAW;gBACpB,aAAa;gBACb,OAAO,EACL,4FAA4F;oBAC5F,uDAAuD,MAAM,CAAC,IAAI,CAChE,OAAO,CACR,CAAC,IAAI,CACJ,IAAI,CACL,sFAAsF;aAC1F,CAAC,CACH,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnE,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,SAAS,OAAO,CAAC,CAAC;QACnE,MAAM,mBAAmB,GAAG,IAAI,CAAC,IAAI,CACnC,SAAS,EACT,GAAG,SAAS,mBAAmB,CAChC,CAAC;QAEF,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,mBAAmB,CAAC,CAAC,IAAI,CACpE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EACtC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CACnC,CAAC;QAEF,MAAM,SAAS,GAAG,CAAC,MAAmC,EAAE,EAAE;YACxD,OAAO,CACL,MAAM,KAAK,SAAS;gBACpB,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,gBAAgB,CAC5D,CAAC;QACJ,CAAC,CAAC;QAEF,IAAI,WAAW,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,OAAO,WAAW,CAAC,EAAE,CAAC;gBACpB,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC;gBACnD,eAAe,EAAE,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC;gBAC3D,YAAY,EAAE,WAAW,CAAC,YAAY;oBACpC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC;oBACzC,CAAC,CAAC,SAAS;gBACb,UAAU,EAAE,WAAW,CAAC,MAAM;aAC/B,CAAC,CAAC;QACL,CAAC;QAED,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAC9D,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAa,CAAC,EAClD,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CACnB,MAAM,CAAC,IAAI,CACT,IAAI,eAAe,CAAC;YAClB,OAAO,EAAE,iDAAiD,WAAW,iCAAiC,eAAe,EAAE;YACvH,WAAW,EAAE,OAAO,CAAC,WAAY;SAClC,CAAC,CACH,CACF,CACF,CAAC;QAEF,IAAI,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAClC,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAChB,iDAAiD,WAAW,iCAAiC,eAAe,EAAE,CAC/G,CAAC;YACF,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAChB,IAAI,eAAe,CAAC;gBAClB,OAAO,EAAE,iDAAiD,WAAW,iCAAiC,eAAe,EAAE;gBACvH,OAAO,EAAE,WAAW;aACrB,CAAC,CACH,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAChC,sBAAsB,OAAO,CAAC,UAAU,oDAAoD,OAAO,CAAC,cAAc,cAAc,OAAO,CAAC,aAAa,EAAE,EACvJ;YACE,OAAO,EAAE;gBACP,YAAY,EAAE,aAAa;gBAC3B,cAAc,EAAE,kBAAkB;gBAClC,wBAAwB,EAAE,QAAQ,CAAC,WAAW;aAC/C;SACF,CACF,CAAC;QAEF,MAAM,WAAW,GACf,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAQtB,CAAC,eAAe,CAAC;QAElB,KAAK,CAAC,CAAC,EAAE,CAAC,eAAe,CACvB,mBAAmB,EACnB,IAAI,CAAC,SAAS,CAAC;YACb,WAAW,EAAE,WAAW,CAAC,WAAW;YACpC,eAAe,EAAE,WAAW,CAAC,eAAe;YAC5C,YAAY,EAAE,WAAW,CAAC,YAAY;YACtC,MAAM,EAAE,WAAW,CAAC,UAAU;SAC/B,CAAC,CACH,CAAC;QAEF,OAAO,WAAW,CAAC,EAAE,CAAC;YACpB,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC;YACnD,eAAe,EAAE,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC;YAC3D,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC;YACrD,UAAU,EAAE,WAAW,CAAC,UAAU;SACnC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,eAAe,CAAC;QAClB,OAAO,EAAE,WAAW,WAAW,YAAY;QAC3C,OAAO,EAAE,WAAW;KACrB,CAAC,CACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}

package/lib/aws/iam.d.ts

@@ -0,0 +1,23 @@
+import * as Context from "effect/Context";
+import { IAM } from "itty-aws/iam";
+declare const IAMClient_base: Context.TagClass<IAMClient, "AWS::IAM::Client", IAM>;
+export declare class IAMClient extends IAMClient_base {
+}
+export declare const client: () => import("effect/Layer").Layer<IAMClient, never, import("./credentials.ts").Credentials | import("./region.ts").Region>;
+export interface PolicyDocument {
+    Version: "2012-10-17";
+    Statement: PolicyStatement[];
+}
+export interface PolicyStatement {
+    Effect: "Allow" | "Deny";
+    Sid?: string;
+    Action: string[];
+    Resource: string | string[];
+    Condition?: Record<string, Record<string, string | string[]>>;
+    Principal?: Record<string, string | string[]>;
+    NotPrincipal?: Record<string, string | string[]>;
+    NotAction?: string[];
+    NotResource?: string[];
+}
+export {};
+//# sourceMappingURL=iam.d.ts.map

package/lib/aws/iam.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"iam.d.ts","sourceRoot":"","sources":["../../src/aws/iam.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;;AAGnC,qBAAa,SAAU,SAAQ,cAG5B;CAAG;AAEN,eAAO,MAAM,MAAM,6HAGlB,CAAC;AAEF,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,YAAY,CAAC;IACtB,SAAS,EAAE,eAAe,EAAE,CAAC;CAC9B;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC;IAC9D,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;IAC9C,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;IACjD,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB"}

package/lib/aws/iam.js

@@ -0,0 +1,7 @@
+import * as Context from "effect/Context";
+import { IAM } from "itty-aws/iam";
+import { createAWSServiceClientLayer } from "./client.js";
+export class IAMClient extends Context.Tag("AWS::IAM::Client")() {
+}
+export const client = createAWSServiceClientLayer(IAMClient, IAM);
+//# sourceMappingURL=iam.js.map

package/lib/aws/iam.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"iam.js","sourceRoot":"","sources":["../../src/aws/iam.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC;AAE1D,MAAM,OAAO,SAAU,SAAQ,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAG3D;CAAG;AAEN,MAAM,CAAC,MAAM,MAAM,GAAG,2BAA2B,CAC/C,SAAS,EACT,GAAG,CACJ,CAAC"}

package/lib/aws/index.d.ts

@@ -0,0 +1,22 @@
+import * as Layer from "effect/Layer";
+import * as Account from "./account.ts";
+import * as Credentials from "./credentials.ts";
+import * as IAM from "./iam.ts";
+import * as Lambda from "./lambda/index.ts";
+export * from "./profile.ts";
+export type * as Alchemy from "../index.ts";
+export * as Account from "./account.ts";
+export * as Credentials from "./credentials.ts";
+export * as IAM from "./iam.ts";
+export * as Lambda from "./lambda/index.ts";
+export * as Region from "./region.ts";
+export * as S3 from "./s3.ts";
+export * as SQS from "./sqs/index.ts";
+export * as STS from "./sts.ts";
+export declare const providers: Layer.Layer<unknown, never, Lambda.Alchemy.Alchemy.App | Lambda.Alchemy.Region.Region | import("@effect/platform/FileSystem").FileSystem | Account.AccountID | IAM.IAMClient | Lambda.Alchemy.Alchemy.DotAlchemy | Credentials.Credentials>;
+export declare const bindings: Layer.Layer<Lambda.Alchemy.Alchemy.Bind<Lambda.Function, Lambda.Alchemy.SQS.Consume<Lambda.Alchemy.SQS.Queue<string, Lambda.Alchemy.SQS.QueueProps<any>>>, "QueueEventSource"> | Lambda.Alchemy.Alchemy.Bind<Lambda.Function, Lambda.Alchemy.SQS.SendMessage<Lambda.Alchemy.SQS.Queue<string, Lambda.Alchemy.SQS.QueueProps<any>>>, "AWS.SQS.SendMessage">, never, never>;
+export declare const clients: Layer.Layer<Lambda.FunctionClient | IAM.IAMClient | Lambda.Alchemy.SQS.QueueClient | Lambda.Alchemy.STS.STSClient | Lambda.Alchemy.S3.S3Client, never, Lambda.Alchemy.Region.Region | Credentials.Credentials>;
+export declare const defaultProviders: Layer.Layer<unknown, Account.FailedToGetAccount, Lambda.Alchemy.Alchemy.App | Lambda.Alchemy.Region.Region | import("@effect/platform/FileSystem").FileSystem | Lambda.Alchemy.Alchemy.DotAlchemy | Credentials.Credentials>;
+export declare const live: Layer.Layer<unknown, import("@effect/platform/Error").PlatformError | Account.FailedToGetAccount | Lambda.Alchemy.Region.EnvironmentVariableNotSet | import("@effect/platform/HttpClientError").HttpClientError | Credentials.InvalidSSOToken | Credentials.ProfileNotFound | Credentials.ConflictingSSORegion | Credentials.ConflictingSSOStartUrl | Credentials.InvalidSSOProfile | Credentials.ExpiredSSOToken, Lambda.Alchemy.Alchemy.App | import("@effect/platform/FileSystem").FileSystem | Lambda.Alchemy.Alchemy.DotAlchemy | import("@effect/platform/HttpClient").HttpClient>;
+export default live;
+//# sourceMappingURL=index.d.ts.map

package/lib/aws/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/aws/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,OAAO,MAAM,cAAc,CAAC;AACxC,OAAO,KAAK,WAAW,MAAM,kBAAkB,CAAC;AAChD,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAChC,OAAO,KAAK,MAAM,MAAM,mBAAmB,CAAC;AAO5C,cAAc,cAAc,CAAC;AAE7B,YAAY,KAAK,OAAO,MAAM,aAAa,CAAC;AAE5C,OAAO,KAAK,OAAO,MAAM,cAAc,CAAC;AACxC,OAAO,KAAK,WAAW,MAAM,kBAAkB,CAAC;AAChD,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAChC,OAAO,KAAK,MAAM,MAAM,mBAAmB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,GAAG,MAAM,gBAAgB,CAAC;AACtC,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAEhC,eAAO,MAAM,SAAS,6OAGrB,CAAC;AAEF,eAAO,MAAM,QAAQ,2WAIpB,CAAC;AAEF,eAAO,MAAM,OAAO,gNAMnB,CAAC;AAEF,eAAO,MAAM,gBAAgB,8NAI5B,CAAC;AAEF,eAAO,MAAM,IAAI,0jBAGhB,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/lib/aws/index.js

@@ -0,0 +1,28 @@
+import * as Layer from "effect/Layer";
+import * as Account from "./account.js";
+import * as Credentials from "./credentials.js";
+import * as IAM from "./iam.js";
+import * as Lambda from "./lambda/index.js";
+import * as Region from "./region.js";
+import * as S3 from "./s3.js";
+import * as SQS from "./sqs/index.js";
+import * as STS from "./sts.js";
+// TODO(sam): should this be named?
+export * from "./profile.js";
+export * as Account from "./account.js";
+export * as Credentials from "./credentials.js";
+export * as IAM from "./iam.js";
+export * as Lambda from "./lambda/index.js";
+export * as Region from "./region.js";
+export * as S3 from "./s3.js";
+export * as SQS from "./sqs/index.js";
+export * as STS from "./sts.js";
+export const providers = Layer.merge(Layer.provide(Lambda.functionProvider(), Lambda.client()), Layer.provide(SQS.queueProvider(), SQS.client()));
+export const bindings = Layer.mergeAll(
+//
+SQS.sendMessageFromLambdaFunction(), SQS.consumeFromLambdaFunction());
+export const clients = Layer.mergeAll(STS.client(), IAM.client(), S3.client(), SQS.client(), Lambda.client());
+export const defaultProviders = providers.pipe(Layer.provideMerge(bindings), Layer.provideMerge(Account.fromIdentity()), Layer.provide(clients));
+export const live = defaultProviders.pipe(Layer.provide(Region.fromEnv()), Layer.provide(Credentials.fromSSO()));
+export default live;
+//# sourceMappingURL=index.js.map

package/lib/aws/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/aws/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,OAAO,MAAM,cAAc,CAAC;AACxC,OAAO,KAAK,WAAW,MAAM,kBAAkB,CAAC;AAChD,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAChC,OAAO,KAAK,MAAM,MAAM,mBAAmB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,GAAG,MAAM,gBAAgB,CAAC;AACtC,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAEhC,mCAAmC;AACnC,cAAc,cAAc,CAAC;AAI7B,OAAO,KAAK,OAAO,MAAM,cAAc,CAAC;AACxC,OAAO,KAAK,WAAW,MAAM,kBAAkB,CAAC;AAChD,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAChC,OAAO,KAAK,MAAM,MAAM,mBAAmB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,GAAG,MAAM,gBAAgB,CAAC;AACtC,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAEhC,MAAM,CAAC,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAClC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,EACzD,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CACjD,CAAC;AAEF,MAAM,CAAC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ;AACpC,EAAE;AACF,GAAG,CAAC,6BAA6B,EAAE,EACnC,GAAG,CAAC,yBAAyB,EAAE,CAChC,CAAC;AAEF,MAAM,CAAC,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CACnC,GAAG,CAAC,MAAM,EAAE,EACZ,GAAG,CAAC,MAAM,EAAE,EACZ,EAAE,CAAC,MAAM,EAAE,EACX,GAAG,CAAC,MAAM,EAAE,EACZ,MAAM,CAAC,MAAM,EAAE,CAChB,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,SAAS,CAAC,IAAI,CAC5C,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,EAC5B,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,EAC1C,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CACvB,CAAC;AAEF,MAAM,CAAC,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CACvC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,EAC/B,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CACrC,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/lib/aws/lambda/consume.d.ts

@@ -0,0 +1,17 @@
+import type { Context as LambdaContext, SQSBatchResponse, SQSEvent } from "aws-lambda";
+import * as Effect from "effect/Effect";
+import * as SQS from "../sqs/index.ts";
+import * as Lambda from "./function.ts";
+export declare const consume: <Q extends SQS.Queue, ID extends string, Req>(id: ID, { queue, handle, }: {
+    queue: Q;
+    handle: (this: unknown, event: SQS.QueueEvent<Q["props"]["schema"]["Type"]>, context: LambdaContext) => Effect.Effect<SQSBatchResponse | void, never, Req>;
+}) => <const Props extends Lambda.FunctionProps<Req>>({ bindings, ...props }: Props) => import("alchemy-effect").Service<ID, Lambda.Function & {
+    provider: import("alchemy-effect").ResourceTags<Lambda.Function>;
+}, (event: SQSEvent, context: LambdaContext) => Effect.Effect<{
+    batchItemFailures: SQS.lambda.SQSBatchItemFailure[];
+}, never, Req | SQS.Consume<import("alchemy-effect").Instance<Q>>>, Omit<Props, "bindings"> & {
+    readonly bindings: import("alchemy-effect").Policy<Lambda.Function, Extract<Req, import("alchemy-effect").Capability<string, unknown, unknown>> | SQS.Consume<import("alchemy-effect").Instance<Q>>, unknown>;
+}, Lambda.FunctionAttr<Extract<Lambda.FunctionProps<any> & Omit<Props, "bindings"> & {
+    readonly bindings: import("alchemy-effect").Policy<Lambda.Function, Extract<Req, import("alchemy-effect").Capability<string, unknown, unknown>> | SQS.Consume<import("alchemy-effect").Instance<Q>>, unknown>;
+}, Lambda.FunctionProps<any>>>>;
+//# sourceMappingURL=consume.d.ts.map

package/lib/aws/lambda/consume.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consume.d.ts","sourceRoot":"","sources":["../../../src/aws/lambda/consume.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,OAAO,IAAI,aAAa,EACxB,gBAAgB,EAChB,QAAQ,EACT,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,KAAK,GAAG,MAAM,iBAAiB,CAAC;AACvC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,eAAO,MAAM,OAAO,GACjB,CAAC,SAAS,GAAG,CAAC,KAAK,EAAE,EAAE,SAAS,MAAM,EAAE,GAAG,EAC1C,IAAI,EAAE,EACN,oBAGG;IACD,KAAK,EAAE,CAAC,CAAC;IACT,MAAM,EAAE,CACN,IAAI,EAAE,OAAO,EACb,KAAK,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,EACnD,OAAO,EAAE,aAAa,KACnB,MAAM,CAAC,MAAM,CAAC,gBAAgB,GAAG,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;CACzD,MAEF,KAAK,CAAC,KAAK,SAAS,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,wBAG7C,KAAK;;;;;;;;+BAiC+D,CAAC"}

package/lib/aws/lambda/consume.js

@@ -0,0 +1,30 @@
+import { declare } from "alchemy-effect";
+import * as Effect from "effect/Effect";
+import * as S from "effect/Schema";
+import * as SQS from "../sqs/index.js";
+import * as Lambda from "./function.js";
+export const consume = (id, { queue, handle, }) => ({ bindings, ...props }) => Lambda.Function(id, {
+    handle: Effect.fn(function* (event, context) {
+        yield* declare();
+        const records = yield* Effect.all(event.Records.map(Effect.fn(function* (record) {
+            return {
+                ...record,
+                body: yield* S.validate(queue.props.schema)(record.body).pipe(Effect.catchAll(() => Effect.void)),
+            };
+        })));
+        const response = yield* handle({
+            Records: records.filter((record) => record.body !== undefined),
+        }, context);
+        return {
+            batchItemFailures: [
+                ...(response?.batchItemFailures ?? []),
+                ...records
+                    .filter((record) => record.body === undefined)
+                    .map((failed) => ({
+                    itemIdentifier: failed.messageId,
+                })),
+            ],
+        };
+    }),
+})({ ...props, bindings: bindings.and(SQS.QueueEventSource(queue)) });
+//# sourceMappingURL=consume.js.map

package/lib/aws/lambda/consume.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consume.js","sourceRoot":"","sources":["../../../src/aws/lambda/consume.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAMzC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,CAAC,MAAM,eAAe,CAAC;AACnC,OAAO,KAAK,GAAG,MAAM,iBAAiB,CAAC;AACvC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,MAAM,CAAC,MAAM,OAAO,GAClB,CACE,EAAM,EACN,EACE,KAAK,EACL,MAAM,GAQP,EACD,EAAE,CACJ,CAAgD,EAC9C,QAAQ,EACR,GAAG,KAAK,EACF,EAAE,EAAE,CACV,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE;IAClB,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAe,EAAE,OAAsB;QAClE,KAAK,CAAC,CAAC,OAAO,EAAwB,CAAC;QACvC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAC/B,KAAK,CAAC,OAAO,CAAC,GAAG,CACf,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM;YACzB,OAAO;gBACL,GAAG,MAAM;gBACT,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAC3D,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CACnC;aACF,CAAC;QACJ,CAAC,CAAC,CACH,CACF,CAAC;QACF,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM,CAC5B;YACE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC;SAC/D,EACD,OAAO,CACR,CAAC;QACF,OAAO;YACL,iBAAiB,EAAE;gBACjB,GAAG,CAAC,QAAQ,EAAE,iBAAiB,IAAI,EAAE,CAAC;gBACtC,GAAG,OAAO;qBACP,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC;qBAC7C,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;oBAChB,cAAc,EAAE,MAAM,CAAC,SAAS;iBACjC,CAAC,CAAC;aACN;SACyB,CAAC;IAC/B,CAAC,CAAC;CACH,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC"}

package/lib/aws/lambda/function.client.d.ts

@@ -0,0 +1,8 @@
+import * as Context from "effect/Context";
+import { Lambda as LambdaClient } from "itty-aws/lambda";
+declare const FunctionClient_base: Context.TagClass<FunctionClient, "AWS::Lambda::Function.Client", LambdaClient>;
+export declare class FunctionClient extends FunctionClient_base {
+}
+export declare const client: () => import("effect/Layer").Layer<FunctionClient, never, import("../credentials.ts").Credentials | import("../region.ts").Region>;
+export {};
+//# sourceMappingURL=function.client.d.ts.map

package/lib/aws/lambda/function.client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"function.client.d.ts","sourceRoot":"","sources":["../../../src/aws/lambda/function.client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAE1C,OAAO,EAAE,MAAM,IAAI,YAAY,EAAE,MAAM,iBAAiB,CAAC;;AAGzD,qBAAa,cAAe,SAAQ,mBAGjC;CAAG;AAEN,eAAO,MAAM,MAAM,oIAGY,CAAC"}

package/lib/aws/lambda/function.client.js

@@ -0,0 +1,7 @@
+import * as Context from "effect/Context";
+import { Lambda as LambdaClient } from "itty-aws/lambda";
+import { createAWSServiceClientLayer } from "../client.js";
+export class FunctionClient extends Context.Tag("AWS::Lambda::Function.Client")() {
+}
+export const client = createAWSServiceClientLayer(FunctionClient, LambdaClient);
+//# sourceMappingURL=function.client.js.map

package/lib/aws/lambda/function.client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"function.client.js","sourceRoot":"","sources":["../../../src/aws/lambda/function.client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAE1C,OAAO,EAAE,MAAM,IAAI,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAAE,2BAA2B,EAAE,MAAM,cAAc,CAAC;AAE3D,MAAM,OAAO,cAAe,SAAQ,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,EAG5E;CAAG;AAEN,MAAM,CAAC,MAAM,MAAM,GAAG,2BAA2B,CAG/C,cAAc,EAAE,YAAY,CAAC,CAAC"}

package/lib/aws/lambda/function.d.ts

@@ -0,0 +1,38 @@
+import { Policy, Runtime, type Capability } from "alchemy-effect";
+import type * as IAM from "../iam.ts";
+export type { Context } from "aws-lambda";
+export interface FunctionProps<Req = any> {
+    functionName?: string;
+    functionArn?: string;
+    main: string;
+    handler?: string;
+    memory?: number;
+    runtime?: "nodejs20x" | "nodejs22x";
+    architecture?: "x86_64" | "arm64";
+    url?: boolean;
+    bindings: Policy<Function, Extract<Req, Capability>>;
+}
+export type FunctionAttr<Props extends FunctionProps = FunctionProps> = {
+    functionArn: string;
+    functionName: string;
+    functionUrl: Props["url"] extends true ? string : undefined;
+    roleName: string;
+    roleArn: string;
+    code: {
+        hash: string;
+    };
+};
+export interface Function extends Runtime<"AWS.Lambda.Function"> {
+    props: FunctionProps;
+    attr: FunctionAttr<Extract<this["props"], FunctionProps>>;
+    binding: {
+        env: {
+            [key: string]: string;
+        };
+        policyStatements: IAM.PolicyStatement[];
+    };
+}
+export declare const Function: Function & {
+    provider: import("alchemy-effect").ResourceTags<Function>;
+};
+//# sourceMappingURL=function.d.ts.map

package/lib/aws/lambda/function.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"function.d.ts","sourceRoot":"","sources":["../../../src/aws/lambda/function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAClE,OAAO,KAAK,KAAK,GAAG,MAAM,WAAW,CAAC;AAEtC,YAAY,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAE1C,MAAM,WAAW,aAAa,CAAC,GAAG,GAAG,GAAG;IACtC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,WAAW,GAAG,WAAW,CAAC;IACpC,YAAY,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC;IAClC,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC;CACtD;AAED,MAAM,MAAM,YAAY,CAAC,KAAK,SAAS,aAAa,GAAG,aAAa,IAAI;IACtE,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS,IAAI,GAAG,MAAM,GAAG,SAAS,CAAC;IAC5D,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE;QACJ,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;CACH,CAAC;AAEF,MAAM,WAAW,QAAS,SAAQ,OAAO,CAAC,qBAAqB,CAAC;IAC9D,KAAK,EAAE,aAAa,CAAC;IACrB,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC;IAC1D,OAAO,EAAE;QACP,GAAG,EAAE;YACH,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;SACvB,CAAC;QACF,gBAAgB,EAAE,GAAG,CAAC,eAAe,EAAE,CAAC;KACzC,CAAC;CACH;AACD,eAAO,MAAM,QAAQ;;CAA6C,CAAC"}

package/lib/aws/lambda/function.handler.d.ts

@@ -0,0 +1,7 @@
+import type { Capability } from "alchemy-effect";
+import type { Context as LambdaContext } from "aws-lambda";
+import * as Effect from "effect/Effect";
+type Handler = (event: any, context: LambdaContext) => Effect.Effect<any, any, never>;
+export declare const toHandler: <H extends Handler>(effect: Effect.Effect<H, any, Capability>) => (event: any, context: LambdaContext) => Promise<Effect.Effect.Success<ReturnType<H>>>;
+export {};
+//# sourceMappingURL=function.handler.d.ts.map

package/lib/aws/lambda/function.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"function.handler.d.ts","sourceRoot":"","sources":["../../../src/aws/lambda/function.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3D,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,KAAK,OAAO,GAAG,CACb,KAAK,EAAE,GAAG,EACV,OAAO,EAAE,aAAa,KACnB,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;AAiBpC,eAAO,MAAM,SAAS,GACnB,CAAC,SAAS,OAAO,EAAE,QAAQ,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,MACtD,OAAO,GAAG,EAAE,SAAS,aAAa,kDAGW,CAAC"}

package/lib/aws/lambda/function.handler.js

@@ -0,0 +1,8 @@
+import * as Effect from "effect/Effect";
+const memo = Symbol.for("alchemy::memo");
+// TODO(sam): is there a better way to lazily evaluate the Effect and cache the result?
+const resolveHandler = async (effect) => (effect[memo] ??= await Effect.runPromise(
+// safe to cast away the Capability requirements since they are phantoms
+effect));
+export const toHandler = (effect) => async (event, context) => Effect.runPromise((await resolveHandler(effect))(event, context));
+//# sourceMappingURL=function.handler.js.map

package/lib/aws/lambda/function.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"function.handler.js","sourceRoot":"","sources":["../../../src/aws/lambda/function.handler.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AASxC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;AAEzC,uFAAuF;AACvF,MAAM,cAAc,GAAG,KAAK,EAC1B,MAEC,EACD,EAAE,CACF,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,MAAM,MAAM,CAAC,UAAU;AACvC,wEAAwE;AACxE,MAA8B,CAC/B,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,SAAS,GACpB,CAAoB,MAAyC,EAAE,EAAE,CACjE,KAAK,EAAE,KAAU,EAAE,OAAsB,EAAE,EAAE,CAC3C,MAAM,CAAC,UAAU,CACf,CAAC,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CACE,CAAC"}

package/lib/aws/lambda/function.invoke.d.ts

@@ -0,0 +1,10 @@
+import * as Effect from "effect/Effect";
+import { $, Binding, type Capability } from "alchemy-effect";
+import { FunctionClient } from "./function.client.ts";
+import { Function } from "./function.ts";
+export interface InvokeFunction<Resource = unknown> extends Capability<"AWS.Lambda.InvokeFunction", Resource> {
+}
+export declare const InvokeFunction: (<F extends Function>(func: F) => Binding<Function, InvokeFunction<$<F>>>) & import("alchemy-effect").BindingDeclaration<Function, <F extends Function>(func: F) => Binding<Function, InvokeFunction<$<F>>>, "AWS.Lambda.InvokeFunction", InvokeFunction<Function>>;
+export declare const invoke: <F extends Function>(func: F, input: any) => Effect.Effect<import("itty-aws/lambda").InvocationResponse, import("itty-aws/lambda").EC2AccessDeniedException | import("itty-aws/lambda").EC2ThrottledException | import("itty-aws/lambda").EC2UnexpectedException | import("itty-aws/lambda").EFSIOException | import("itty-aws/lambda").EFSMountConnectivityException | import("itty-aws/lambda").EFSMountFailureException | import("itty-aws/lambda").EFSMountTimeoutException | import("itty-aws/lambda").ENILimitReachedException | import("itty-aws/lambda").InvalidParameterValueException | import("itty-aws/lambda").InvalidRequestContentException | import("itty-aws/lambda").InvalidRuntimeException | import("itty-aws/lambda").InvalidSecurityGroupIDException | import("itty-aws/lambda").InvalidSubnetIDException | import("itty-aws/lambda").InvalidZipFileException | import("itty-aws/lambda").KMSAccessDeniedException | import("itty-aws/lambda").KMSDisabledException | import("itty-aws/lambda").KMSInvalidStateException | import("itty-aws/lambda").KMSNotFoundException | import("itty-aws/lambda").RecursiveInvocationException | import("itty-aws/lambda").RequestTooLargeException | import("itty-aws/lambda").ResourceConflictException | import("itty-aws/lambda").ResourceNotFoundException | import("itty-aws/lambda").ResourceNotReadyException | import("itty-aws/lambda").ServiceException | import("itty-aws/lambda").SnapStartException | import("itty-aws/lambda").SnapStartNotReadyException | import("itty-aws/lambda").SnapStartTimeoutException | import("itty-aws/lambda").SubnetIPAddressLimitReachedException | import("itty-aws/lambda").TooManyRequestsException | import("itty-aws/lambda").UnsupportedMediaTypeException | import("itty-aws").CommonAwsError, FunctionClient | InvokeFunction<F>>;
+export declare const invokeFunctionFromLambda: import("effect/Layer").Layer<import("alchemy-effect").Bind<Function, InvokeFunction<Function>, "AWS.Lambda.InvokeFunction">, never, never>;
+//# sourceMappingURL=function.invoke.d.ts.map

package/lib/aws/lambda/function.invoke.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"function.invoke.d.ts","sourceRoot":"","sources":["../../../src/aws/lambda/function.invoke.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,UAAU,EAAqB,MAAM,gBAAgB,CAAC;AAChF,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,MAAM,WAAW,cAAc,CAAC,QAAQ,GAAG,OAAO,CAChD,SAAQ,UAAU,CAAC,2BAA2B,EAAE,QAAQ,CAAC;CAAG;AAE9D,eAAO,MAAM,cAAc,IACxB,CAAC,SAAS,QAAQ,QAAQ,CAAC,KAAK,OAAO,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,2DAAvE,CAAC,SAAS,QAAQ,QAAQ,CAAC,KAAK,OAAO,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,wDAClC,CAAC;AAEzC,eAAO,MAAM,MAAM,GAAI,CAAC,SAAS,QAAQ,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,ysDAU1D,CAAC;AAEL,eAAO,MAAM,wBAAwB,4IAcnC,CAAC"}

package/lib/aws/lambda/function.invoke.js

@@ -0,0 +1,31 @@
+import * as Effect from "effect/Effect";
+import { $, Binding, declare, toEnvKey } from "alchemy-effect";
+import { FunctionClient } from "./function.client.js";
+import { Function } from "./function.js";
+export const InvokeFunction = Binding(Function, "AWS.Lambda.InvokeFunction");
+export const invoke = (func, input) => Effect.gen(function* () {
+    const lambda = yield* FunctionClient;
+    const functionArn = process.env[`${func.id}-functionArn`];
+    yield* declare();
+    return yield* lambda.invoke({
+        FunctionName: functionArn,
+        InvocationType: "RequestResponse",
+        Payload: JSON.stringify(input),
+    });
+});
+export const invokeFunctionFromLambda = InvokeFunction.provider.succeed({
+    attach: ({ source: func }) => ({
+        env: {
+            [toEnvKey(func.id, "FUNCTION_ARN")]: func.attr.functionArn,
+        },
+        policyStatements: [
+            {
+                Sid: "AWS.Lambda.InvokeFunction",
+                Effect: "Allow",
+                Action: ["lambda:InvokeFunction"],
+                Resource: [func.attr.functionArn],
+            },
+        ],
+    }),
+});
+//# sourceMappingURL=function.invoke.js.map

package/lib/aws/lambda/function.invoke.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"function.invoke.js","sourceRoot":"","sources":["../../../src/aws/lambda/function.invoke.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,EAAE,CAAC,EAAE,OAAO,EAAmB,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAChF,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAKzC,MAAM,CAAC,MAAM,cAAc,GAAG,OAAO,CAEnC,QAAQ,EAAE,2BAA2B,CAAC,CAAC;AAEzC,MAAM,CAAC,MAAM,MAAM,GAAG,CAAqB,IAAO,EAAE,KAAU,EAAE,EAAE,CAChE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC;IACrC,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,EAAE,cAAc,CAAE,CAAC;IAC3D,KAAK,CAAC,CAAC,OAAO,EAAqB,CAAC;IACpC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;QAC1B,YAAY,EAAE,WAAW;QACzB,cAAc,EAAE,iBAAiB;QACjC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;KAC/B,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,wBAAwB,GAAG,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC;IACtE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAC7B,GAAG,EAAE;YACH,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW;SAC3D;QACD,gBAAgB,EAAE;YAChB;gBACE,GAAG,EAAE,2BAA2B;gBAChC,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,CAAC,uBAAuB,CAAC;gBACjC,QAAQ,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC;aAClC;SACF;KACF,CAAC;CACH,CAAC,CAAC"}

package/lib/aws/lambda/function.js

@@ -0,0 +1,3 @@
+import { Policy, Runtime } from "alchemy-effect";
+export const Function = Runtime("AWS.Lambda.Function")();
+//# sourceMappingURL=function.js.map

package/lib/aws/lambda/function.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"function.js","sourceRoot":"","sources":["../../../src/aws/lambda/function.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,OAAO,EAAmB,MAAM,gBAAgB,CAAC;AAsClE,MAAM,CAAC,MAAM,QAAQ,GAAG,OAAO,CAAC,qBAAqB,CAAC,EAAY,CAAC"}

package/lib/aws/lambda/function.provider.d.ts

@@ -0,0 +1,9 @@
+import { FileSystem } from "@effect/platform";
+import { App, DotAlchemy } from "alchemy-effect";
+import { AccountID } from "../account.ts";
+import * as IAM from "../iam.ts";
+import { Region } from "../region.ts";
+import { FunctionClient } from "./function.client.ts";
+import { Function } from "./function.ts";
+export declare const functionProvider: () => import("effect/Layer").Layer<import("alchemy-effect").Provider<Function>, never, FunctionClient | App | Region | FileSystem.FileSystem | AccountID | IAM.IAMClient | DotAlchemy>;
+//# sourceMappingURL=function.provider.d.ts.map

package/lib/aws/lambda/function.provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"function.provider.d.ts","sourceRoot":"","sources":["../../../src/aws/lambda/function.provider.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAI9C,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAMjD,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,KAAK,GAAG,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAEtC,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAyC,MAAM,eAAe,CAAC;AAEhF,eAAO,MAAM,gBAAgB,wLA8hB1B,CAAC"}