alchemy 2.0.0-beta.30 → 2.0.0-beta.31

package/lib/AWS/IAM/ServiceSpecificCredential.js.map

@@ -1 +1 @@
-{"version":3,"file":"ServiceSpecificCredential.js","sourceRoot":"","sources":["../../../src/AWS/IAM/ServiceSpecificCredential.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,0BAA0B,CAAC;AAChD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAyC/C;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,QAAQ,CAC/C,mCAAmC,CACpC,CAAC;AAEF,MAAM,CAAC,MAAM,iCAAiC,GAAG,GAAG,EAAE,CACpD,QAAQ,CAAC,OAAO,CAAC,yBAAyB,EAAE;IAC1C,OAAO,EAAE,CAAC,6BAA6B,CAAC;IACxC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;QACvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO;QAC9B,IACE,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ;YAC/B,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW;YACrC,IAAI,CAAC,iBAAiB,KAAK,IAAI,CAAC,iBAAiB,EACjD,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;QACxC,CAAC;IACH,CAAC,CAAC;IACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;QACnC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,8BAA8B,CAAC;YACvD,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,WAAW,EAAE,MAAM,CAAC,WAAW;SAChC,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,CAAC,0BAA0B,EAAE,IAAI,CACtD,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,2BAA2B;YACjC,MAAM,CAAC,2BAA2B,CACrC,CAAC;QACF,IAAI,CAAC,QAAQ,EAAE,2BAA2B,EAAE,CAAC;YAC3C,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO;YACL,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,2BAA2B,EAAE,QAAQ,CAAC,2BAA2B;YACjE,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,eAAe,EAAE,QAAQ,CAAC,eAAe;YACzC,sBAAsB,EAAE,QAAQ,CAAC,sBAAsB;YACvD,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,uBAAuB,EAAE,MAAM,CAAC,uBAAuB;SACxD,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;QAC5C,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,+BAA+B,CAAC;YACzD,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;SAC1C,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,OAAO,CAAC,yBAAyB,CAAC;QACrD,IAAI,CAAC,UAAU,EAAE,2BAA2B,EAAE,CAAC;YAC7C,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CACP,2DAA2D,CAC5D,CACF,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,UAAU,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;YACnE,KAAK,CAAC,CAAC,GAAG,CAAC,+BAA+B,CAAC;gBACzC,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,2BAA2B,EAAE,UAAU,CAAC,2BAA2B;gBACnE,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,2BAA2B,CAAC,CAAC;QAC5D,OAAO;YACL,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,WAAW,EAAE,UAAU,CAAC,WAAW;YACnC,2BAA2B,EAAE,UAAU,CAAC,2BAA2B;YACnE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,UAAU,CAAC,MAAM;YACxC,UAAU,EAAE,UAAU,CAAC,UAAU;YACjC,cAAc,EAAE,UAAU,CAAC,cAAc;YACzC,eAAe,EAAE,UAAU,CAAC,eAAe;YAC3C,sBAAsB,EAAE,UAAU,CAAC,sBAAsB;YACzD,eAAe,EAAE,gBAAgB,CAAC,UAAU,CAAC,eAAe,CAAC;YAC7D,uBAAuB,EAAE,gBAAgB,CACvC,UAAU,CAAC,uBAAuB,CACnC;SACF,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;QACpD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC;QAC5C,IAAI,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;YAC7B,KAAK,CAAC,CAAC,GAAG,CAAC,+BAA+B,CAAC;gBACzC,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,2BAA2B,EAAE,MAAM,CAAC,2BAA2B;gBAC/D,MAAM,EAAE,MAAM;aACf,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC;QACxD,OAAO;YACL,GAAG,MAAM;YACT,MAAM;SACP,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;QACrC,KAAK,CAAC,CAAC,GAAG;aACP,+BAA+B,CAAC;YAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,2BAA2B,EAAE,MAAM,CAAC,2BAA2B;SAChE,CAAC;aACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACvE,CAAC,CAAC;CACH,CAAC,CAAC"}
+{"version":3,"file":"ServiceSpecificCredential.js","sourceRoot":"","sources":["../../../src/AWS/IAM/ServiceSpecificCredential.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,0BAA0B,CAAC;AAChD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAyC/C;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,QAAQ,CAC/C,mCAAmC,CACpC,CAAC;AAEF,MAAM,CAAC,MAAM,iCAAiC,GAAG,GAAG,EAAE,CACpD,QAAQ,CAAC,OAAO,CAAC,yBAAyB,EAAE;IAC1C,OAAO,EAAE,CAAC,6BAA6B,CAAC;IACxC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;QACvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO;QAC9B,IACE,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ;YAC/B,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW;YACrC,IAAI,CAAC,iBAAiB,KAAK,IAAI,CAAC,iBAAiB,EACjD,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;QACxC,CAAC;IACH,CAAC,CAAC;IACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;QACnC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,8BAA8B,CAAC;YACvD,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,WAAW,EAAE,MAAM,CAAC,WAAW;SAChC,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,CAAC,0BAA0B,EAAE,IAAI,CACtD,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,2BAA2B;YACjC,MAAM,CAAC,2BAA2B,CACrC,CAAC;QACF,IAAI,CAAC,QAAQ,EAAE,2BAA2B,EAAE,CAAC;YAC3C,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO;YACL,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,2BAA2B,EAAE,QAAQ,CAAC,2BAA2B;YACjE,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,eAAe,EAAE,QAAQ,CAAC,eAAe;YACzC,sBAAsB,EAAE,QAAQ,CAAC,sBAAsB;YACvD,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,uBAAuB,EAAE,MAAM,CAAC,uBAAuB;SACxD,CAAC;IACJ,CAAC,CAAC;IACF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;QACvD,iEAAiE;QACjE,6DAA6D;QAC7D,6DAA6D;QAC7D,kEAAkE;QAClE,uBAAuB;QACvB,MAAM,QAAQ,GAAG,MAAM;YACrB,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG;iBACP,8BAA8B,CAAC;gBAC9B,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,WAAW,EAAE,MAAM,CAAC,WAAW;aAChC,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACf,CAAC,CAAC,0BAA0B,EAAE,IAAI,CAChC,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,2BAA2B;gBACjC,MAAM,CAAC,2BAA2B,CACrC,CACF,EACD,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAC5C,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAC1B,CACF;YACL,CAAC,CAAC,SAAS,CAAC;QAEd,2DAA2D;QAC3D,8DAA8D;QAC9D,mBAAmB;QACnB,IAAI,YAAY,GACd,QAAQ,EAAE,2BAA2B;YACrC,MAAM,EAAE,2BAA2B,CAAC;QACtC,IAAI,QAAQ,GAAG,QAAQ,EAAE,QAAQ,IAAI,MAAM,EAAE,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC;QACvE,IAAI,WAAW,GACb,QAAQ,EAAE,WAAW,IAAI,MAAM,EAAE,WAAW,IAAI,IAAI,CAAC,WAAW,CAAC;QACnE,IAAI,UAAU,GAAG,QAAQ,EAAE,UAAU,IAAI,MAAM,EAAE,UAAU,CAAC;QAC5D,IAAI,cAAc,GAAG,QAAQ,EAAE,cAAc,IAAI,MAAM,EAAE,cAAc,CAAC;QACxE,IAAI,eAAe,GACjB,QAAQ,EAAE,eAAe,IAAI,MAAM,EAAE,eAAe,CAAC;QACvD,IAAI,sBAAsB,GACxB,QAAQ,EAAE,sBAAsB,IAAI,MAAM,EAAE,sBAAsB,CAAC;QACrE,IAAI,eAAe,GAAG,MAAM,EAAE,eAAe,CAAC;QAC9C,IAAI,uBAAuB,GAAG,MAAM,EAAE,uBAAuB,CAAC;QAC9D,IAAI,cAAc,GAAG,QAAQ,EAAE,MAAM,IAAI,MAAM,EAAE,MAAM,CAAC;QAExD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,+BAA+B,CAAC;gBACzD,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;aAC1C,CAAC,CAAC;YACH,MAAM,UAAU,GAAG,OAAO,CAAC,yBAAyB,CAAC;YACrD,IAAI,CAAC,UAAU,EAAE,2BAA2B,EAAE,CAAC;gBAC7C,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CACP,2DAA2D,CAC5D,CACF,CAAC;YACJ,CAAC;YACD,YAAY,GAAG,UAAU,CAAC,2BAA2B,CAAC;YACtD,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;YAC/B,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;YACrC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;YACnC,cAAc,GAAG,UAAU,CAAC,cAAc,CAAC;YAC3C,eAAe,GAAG,UAAU,CAAC,eAAe,CAAC;YAC7C,sBAAsB,GAAG,UAAU,CAAC,sBAAsB,CAAC;YAC3D,eAAe,GAAG,gBAAgB,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;YAC/D,uBAAuB,GAAG,gBAAgB,CACxC,UAAU,CAAC,uBAAuB,CACnC,CAAC;YACF,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC;QACrC,CAAC;QAED,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CACP,uCAAuC,IAAI,CAAC,QAAQ,aAAa,CAClE,CACF,CAAC;QACJ,CAAC;QAED,iEAAiE;QACjE,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,IAAI,cAAc,IAAI,QAAQ,CAAC;QAChE,IAAI,aAAa,KAAK,cAAc,EAAE,CAAC;YACrC,KAAK,CAAC,CAAC,GAAG,CAAC,+BAA+B,CAAC;gBACzC,QAAQ,EAAE,QAAQ;gBAClB,2BAA2B,EAAE,YAAY;gBACzC,MAAM,EAAE,aAAa;aACtB,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAClC,OAAO;YACL,QAAQ;YACR,WAAW;YACX,2BAA2B,EAAE,YAAY;YACzC,MAAM,EAAE,aAAa;YACrB,UAAU;YACV,cAAc;YACd,eAAe;YACf,sBAAsB;YACtB,eAAe;YACf,uBAAuB;SACxB,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;QACrC,KAAK,CAAC,CAAC,GAAG;aACP,+BAA+B,CAAC;YAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,2BAA2B,EAAE,MAAM,CAAC,2BAA2B;SAChE,CAAC;aACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACvE,CAAC,CAAC;CACH,CAAC,CAAC"}

package/lib/AWS/IAM/SigningCertificate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SigningCertificate.d.ts","sourceRoot":"","sources":["../../../src/AWS/IAM/SigningCertificate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,0BAA0B,CAAC;AAGhD,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD,MAAM,WAAW,uBAAuB;IACtC;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;OAEG;IACH,eAAe,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,MAAM,CAAC,EAAE,GAAG,CAAC,UAAU,CAAC;CACzB;AAED,MAAM,WAAW,kBAAmB,SAAQ,QAAQ,CAClD,4BAA4B,EAC5B,uBAAuB,EACvB;IACE,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,GAAG,CAAC,UAAU,CAAC;IACvB,UAAU,EAAE,IAAI,GAAG,SAAS,CAAC;CAC9B,EACD,KAAK,EACL,SAAS,CACV;CAAG;AAEJ;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,kBAAkB,+DAE9B,CAAC;AAEF,eAAO,MAAM,0BAA0B,gPAgFnC,CAAC"}
+{"version":3,"file":"SigningCertificate.d.ts","sourceRoot":"","sources":["../../../src/AWS/IAM/SigningCertificate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,0BAA0B,CAAC;AAGhD,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD,MAAM,WAAW,uBAAuB;IACtC;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;OAEG;IACH,eAAe,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,MAAM,CAAC,EAAE,GAAG,CAAC,UAAU,CAAC;CACzB;AAED,MAAM,WAAW,kBAAmB,SAAQ,QAAQ,CAClD,4BAA4B,EAC5B,uBAAuB,EACvB;IACE,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,GAAG,CAAC,UAAU,CAAC;IACvB,UAAU,EAAE,IAAI,GAAG,SAAS,CAAC;CAC9B,EACD,KAAK,EACL,SAAS,CACV;CAAG;AAEJ;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,kBAAkB,+DAE9B,CAAC;AAEF,eAAO,MAAM,0BAA0B,gPA0FnC,CAAC"}

package/lib/AWS/IAM/SigningCertificate.js

@@ -52,41 +52,41 @@ export const SigningCertificateProvider = () => Provider.succeed(SigningCertific
             uploadDate: cert.UploadDate,
         };
     }),
-    create: Effect.fn(function* ({ news, session }) {
-        const created = yield* iam.uploadSigningCertificate({
-            UserName: news.userName,
-            CertificateBody: news.certificateBody,
-        });
-        if (news.status !== undefined &&
-            created.Certificate.Status !== news.status) {
-            yield* iam.updateSigningCertificate({
+    reconcile: Effect.fn(function* ({ news, output, session }) {
+        // Observe — certificate ids are AWS-generated; we can only locate
+        // the live entry via the prior output. The certificate body is
+        // immutable (`diff` triggers replacement on body change), so a
+        // missing entry always means we need to upload.
+        const observed = output
+            ? yield* iam
+                .listSigningCertificates({ UserName: output.userName })
+                .pipe(Effect.map((r) => r.Certificates.find((entry) => entry.CertificateId === output.certificateId)), Effect.catchTag("NoSuchEntityException", () => Effect.succeed(undefined)))
+            : undefined;
+        // Ensure — upload when missing.
+        let cert = observed;
+        if (!cert?.CertificateId) {
+            const uploaded = yield* iam.uploadSigningCertificate({
                 UserName: news.userName,
-                CertificateId: created.Certificate.CertificateId,
-                Status: news.status,
+                CertificateBody: news.certificateBody,
             });
+            cert = uploaded.Certificate;
         }
-        yield* session.note(created.Certificate.CertificateId);
-        return {
-            userName: created.Certificate.UserName,
-            certificateId: created.Certificate.CertificateId,
-            certificateBody: created.Certificate.CertificateBody,
-            status: news.status ?? created.Certificate.Status,
-            uploadDate: created.Certificate.UploadDate,
-        };
-    }),
-    update: Effect.fn(function* ({ news, output, session }) {
-        const status = news.status ?? output.status;
-        if (status !== output.status) {
+        // Sync — apply the desired status when it differs.
+        const desiredStatus = news.status ?? cert.Status;
+        if (desiredStatus !== cert.Status) {
             yield* iam.updateSigningCertificate({
-                UserName: output.userName,
-                CertificateId: output.certificateId,
-                Status: status,
+                UserName: news.userName,
+                CertificateId: cert.CertificateId,
+                Status: desiredStatus,
             });
         }
-        yield* session.note(output.certificateId);
+        yield* session.note(cert.CertificateId);
         return {
-            ...output,
-            status,
+            userName: cert.UserName,
+            certificateId: cert.CertificateId,
+            certificateBody: cert.CertificateBody,
+            status: desiredStatus,
+            uploadDate: cert.UploadDate,
         };
     }),
     delete: Effect.fn(function* ({ output }) {

package/lib/AWS/IAM/SigningCertificate.js.map

@@ -1 +1 @@
-{"version":3,"file":"SigningCertificate.js","sourceRoot":"","sources":["../../../src/AWS/IAM/SigningCertificate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,0BAA0B,CAAC;AAChD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAiC7C;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,QAAQ,CACxC,4BAA4B,CAC7B,CAAC;AAEF,MAAM,CAAC,MAAM,0BAA0B,GAAG,GAAG,EAAE,CAC7C,QAAQ,CAAC,OAAO,CAAC,kBAAkB,EAAE;IACnC,OAAO,EAAE,CAAC,eAAe,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;QACvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO;QAC9B,IACE,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ;YAC/B,IAAI,CAAC,eAAe,KAAK,IAAI,CAAC,eAAe,EAC7C,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;QACxC,CAAC;IACH,CAAC,CAAC;IACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;QACnC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,uBAAuB,CAAC;YAChD,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,CACnC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,aAAa,KAAK,MAAM,CAAC,aAAa,CACxD,CAAC;QACF,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE,CAAC;YACzB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;QAC5C,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,wBAAwB,CAAC;YAClD,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,eAAe,EAAE,IAAI,CAAC,eAAe;SACtC,CAAC,CAAC;QACH,IACE,IAAI,CAAC,MAAM,KAAK,SAAS;YACzB,OAAO,CAAC,WAAW,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAC1C,CAAC;YACD,KAAK,CAAC,CAAC,GAAG,CAAC,wBAAwB,CAAC;gBAClC,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,aAAa,EAAE,OAAO,CAAC,WAAW,CAAC,aAAa;gBAChD,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;QACvD,OAAO;YACL,QAAQ,EAAE,OAAO,CAAC,WAAW,CAAC,QAAQ;YACtC,aAAa,EAAE,OAAO,CAAC,WAAW,CAAC,aAAa;YAChD,eAAe,EAAE,OAAO,CAAC,WAAW,CAAC,eAAe;YACpD,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,WAAW,CAAC,MAAM;YACjD,UAAU,EAAE,OAAO,CAAC,WAAW,CAAC,UAAU;SAC3C,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;QACpD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC;QAC5C,IAAI,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;YAC7B,KAAK,CAAC,CAAC,GAAG,CAAC,wBAAwB,CAAC;gBAClC,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,aAAa,EAAE,MAAM,CAAC,aAAa;gBACnC,MAAM,EAAE,MAAM;aACf,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAC1C,OAAO;YACL,GAAG,MAAM;YACT,MAAM;SACP,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;QACrC,KAAK,CAAC,CAAC,GAAG;aACP,wBAAwB,CAAC;YACxB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,aAAa,EAAE,MAAM,CAAC,aAAa;SACpC,CAAC;aACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACvE,CAAC,CAAC;CACH,CAAC,CAAC"}
+{"version":3,"file":"SigningCertificate.js","sourceRoot":"","sources":["../../../src/AWS/IAM/SigningCertificate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,0BAA0B,CAAC;AAChD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAiC7C;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,QAAQ,CACxC,4BAA4B,CAC7B,CAAC;AAEF,MAAM,CAAC,MAAM,0BAA0B,GAAG,GAAG,EAAE,CAC7C,QAAQ,CAAC,OAAO,CAAC,kBAAkB,EAAE;IACnC,OAAO,EAAE,CAAC,eAAe,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;QACvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO;QAC9B,IACE,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ;YAC/B,IAAI,CAAC,eAAe,KAAK,IAAI,CAAC,eAAe,EAC7C,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;QACxC,CAAC;IACH,CAAC,CAAC;IACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;QACnC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,uBAAuB,CAAC;YAChD,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,CACnC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,aAAa,KAAK,MAAM,CAAC,aAAa,CACxD,CAAC;QACF,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE,CAAC;YACzB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC;IACJ,CAAC,CAAC;IACF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;QACvD,kEAAkE;QAClE,+DAA+D;QAC/D,+DAA+D;QAC/D,gDAAgD;QAChD,MAAM,QAAQ,GAAG,MAAM;YACrB,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG;iBACP,uBAAuB,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;iBACtD,IAAI,CACH,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACf,CAAC,CAAC,YAAY,CAAC,IAAI,CACjB,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,aAAa,KAAK,MAAM,CAAC,aAAa,CACxD,CACF,EACD,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAC5C,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAC1B,CACF;YACL,CAAC,CAAC,SAAS,CAAC;QAEd,gCAAgC;QAChC,IAAI,IAAI,GAAG,QAAQ,CAAC;QACpB,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,wBAAwB,CAAC;gBACnD,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,eAAe,EAAE,IAAI,CAAC,eAAe;aACtC,CAAC,CAAC;YACH,IAAI,GAAG,QAAQ,CAAC,WAAW,CAAC;QAC9B,CAAC;QAED,mDAAmD;QACnD,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC;QACjD,IAAI,aAAa,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;YAClC,KAAK,CAAC,CAAC,GAAG,CAAC,wBAAwB,CAAC;gBAClC,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,MAAM,EAAE,aAAa;aACtB,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACxC,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,MAAM,EAAE,aAAa;YACrB,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;QACrC,KAAK,CAAC,CAAC,GAAG;aACP,wBAAwB,CAAC;YACxB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,aAAa,EAAE,MAAM,CAAC,aAAa;SACpC,CAAC;aACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACvE,CAAC,CAAC;CACH,CAAC,CAAC"}

package/lib/AWS/IAM/User.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"User.d.ts","sourceRoot":"","sources":["../../../src/AWS/IAM/User.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAOjD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAOlD,MAAM,WAAW,SAAS;IACxB;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B;;OAEG;IACH,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAChD;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,IAAK,SAAQ,QAAQ,CACpC,cAAc,EACd,SAAS,EACT;IACE,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,mBAAmB,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC/C,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B,EACD,KAAK,EACL,SAAS,CACV;CAAG;AAEJ;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,IAAI,iDAAiC,CAAC;AAEnD,eAAO,MAAM,YAAY,oSAoWtB,CAAC"}
+{"version":3,"file":"User.d.ts","sourceRoot":"","sources":["../../../src/AWS/IAM/User.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAOjD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAOlD,MAAM,WAAW,SAAS;IACxB;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B;;OAEG;IACH,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAChD;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,IAAK,SAAQ,QAAQ,CACpC,cAAc,EACd,SAAS,EACT;IACE,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,mBAAmB,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC/C,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B,EACD,KAAK,EACL,SAAS,CACV;CAAG;AAEJ;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,IAAI,iDAAiC,CAAC;AAEnD,eAAO,MAAM,YAAY,oSA0VtB,CAAC"}

package/lib/AWS/IAM/User.js

@@ -140,108 +140,92 @@ export const UserProvider = () => Provider.effect(User, Effect.gen(function* ()
                 tags,
             };
         }),
-        create: Effect.fn(function* ({ id, news, session }) {
-            const userName = yield* toName(id, news);
-            const tags = {
+        reconcile: Effect.fn(function* ({ id, news, output, session }) {
+            const userName = output?.userName ?? (yield* toName(id, news));
+            const desiredTags = {
                 ...(yield* createInternalTags(id)),
                 ...news.tags,
             };
-            const created = yield* iam
-                .createUser({
-                UserName: userName,
-                Path: news.path,
-                PermissionsBoundary: news.permissionsBoundary,
-                Tags: createTagsList(tags),
-            })
-                .pipe(Effect.catchTag("EntityAlreadyExistsException", () => iam
-                .getUser({
-                UserName: userName,
-            })
-                .pipe(Effect.filterOrFail((existing) => hasTags(tags, existing.User?.Tags), () => new Error(`User '${userName}' already exists and is not managed by alchemy`)))));
-            yield* syncManagedPolicies({
-                userName,
-                olds: [],
-                news: news.managedPolicyArns ?? [],
-            });
-            yield* syncInlinePolicies({
-                userName,
-                olds: {},
-                news: news.inlinePolicies ?? {},
-            });
-            yield* session.note(created.User?.Arn ?? userName);
-            return {
-                userArn: created.User?.Arn ?? userName,
-                userName,
-                userId: created.User?.UserId,
-                path: created.User?.Path ?? news.path ?? "/",
-                permissionsBoundary: created.User?.PermissionsBoundary?.PermissionsBoundaryArn ??
-                    news.permissionsBoundary,
-                managedPolicyArns: news.managedPolicyArns ?? [],
-                inlinePolicies: news.inlinePolicies ?? {},
-                tags,
-            };
-        }),
-        update: Effect.fn(function* ({ id, news, olds, output, session }) {
-            if (news.permissionsBoundary !== olds.permissionsBoundary) {
+            // Observe — read the live user (or absence).
+            const observedResponse = yield* iam
+                .getUser({ UserName: userName })
+                .pipe(Effect.catchTag("NoSuchEntityException", () => Effect.succeed(undefined)));
+            let observedUser = observedResponse?.User;
+            // Ensure — create the user when missing. On race, verify
+            // ownership tags before adopting.
+            if (!observedUser?.Arn) {
+                const created = yield* iam
+                    .createUser({
+                    UserName: userName,
+                    Path: news.path,
+                    PermissionsBoundary: news.permissionsBoundary,
+                    Tags: createTagsList(desiredTags),
+                })
+                    .pipe(Effect.catchTag("EntityAlreadyExistsException", () => iam.getUser({ UserName: userName }).pipe(Effect.filterOrFail((existing) => hasTags(desiredTags, existing.User?.Tags), () => new Error(`User '${userName}' already exists and is not managed by alchemy`)))));
+                observedUser = created.User;
+            }
+            // Sync permissions boundary against observed.
+            const observedBoundary = observedUser?.PermissionsBoundary?.PermissionsBoundaryArn;
+            if (news.permissionsBoundary !== observedBoundary) {
                 if (news.permissionsBoundary) {
                     yield* iam.putUserPermissionsBoundary({
-                        UserName: output.userName,
+                        UserName: userName,
                         PermissionsBoundary: news.permissionsBoundary,
                     });
                 }
-                else if (olds.permissionsBoundary) {
+                else if (observedBoundary) {
                     yield* iam
                         .deleteUserPermissionsBoundary({
-                        UserName: output.userName,
+                        UserName: userName,
                     })
                         .pipe(Effect.catchTag("NoSuchEntityException", () => Effect.void));
                 }
             }
+            // Sync managed and inline policies — observe live state and
+            // apply only the delta.
+            const [observedManagedPolicies, observedInlinePolicies] = yield* Effect.all([
+                readManagedPolicies(userName),
+                readInlinePolicies(userName),
+            ]);
             yield* syncManagedPolicies({
-                userName: output.userName,
-                olds: olds.managedPolicyArns ?? [],
+                userName,
+                olds: observedManagedPolicies,
                 news: news.managedPolicyArns ?? [],
             });
             yield* syncInlinePolicies({
-                userName: output.userName,
-                olds: olds.inlinePolicies ?? {},
+                userName,
+                olds: observedInlinePolicies,
                 news: news.inlinePolicies ?? {},
             });
-            const oldTags = {
-                ...(yield* createInternalTags(id)),
-                ...olds.tags,
-            };
-            const newTags = {
-                ...(yield* createInternalTags(id)),
-                ...news.tags,
-            };
-            const { removed, upsert } = diffTags(oldTags, newTags);
+            // Sync tags against the cloud's actual tags.
+            const observedTags = yield* readTags(userName);
+            const { removed, upsert } = diffTags(observedTags, desiredTags);
             if (upsert.length > 0) {
                 yield* iam.tagUser({
-                    UserName: output.userName,
+                    UserName: userName,
                     Tags: upsert,
                 });
             }
             if (removed.length > 0) {
                 yield* iam.untagUser({
-                    UserName: output.userName,
+                    UserName: userName,
                     TagKeys: removed,
                 });
             }
-            const user = yield* iam.getUser({
-                UserName: output.userName,
-            });
-            yield* session.note(output.userArn);
+            // Re-read for fresh attributes after all mutations.
+            const user = yield* iam.getUser({ UserName: userName });
+            const userArn = user.User?.Arn ?? observedUser?.Arn ?? userName;
+            yield* session.note(userArn);
             return {
-                userArn: user.User?.Arn ?? output.userArn,
-                userName: user.User?.UserName ?? output.userName,
-                userId: user.User?.UserId ?? output.userId,
-                path: user.User?.Path ?? output.path,
+                userArn,
+                userName: user.User?.UserName ?? userName,
+                userId: user.User?.UserId ?? observedUser?.UserId,
+                path: user.User?.Path ?? observedUser?.Path ?? news.path ?? "/",
                 permissionsBoundary: user.User?.PermissionsBoundary?.PermissionsBoundaryArn ??
                     news.permissionsBoundary,
                 managedPolicyArns: news.managedPolicyArns ?? [],
                 inlinePolicies: news.inlinePolicies ?? {},
-                tags: newTags,
+                tags: desiredTags,
             };
         }),
         delete: Effect.fn(function* ({ output }) {

package/lib/AWS/IAM/User.js.map

@@ -1 +1 @@
-{"version":3,"file":"User.js","sourceRoot":"","sources":["../../../src/AWS/IAM/User.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,0BAA0B,CAAC;AAChD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,QAAQ,EACR,OAAO,GACR,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,mBAAmB,EACnB,uBAAuB,EACvB,WAAW,GACZ,MAAM,aAAa,CAAC;AA+CrB;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG,QAAQ,CAAO,cAAc,CAAC,CAAC;AAEnD,MAAM,CAAC,MAAM,YAAY,GAAG,GAAG,EAAE,CAC/B,QAAQ,CAAC,MAAM,CACb,IAAI,EACJ,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,CAAC,EAAU,EAAE,KAAgB,EAAE,EAAE,CAC9C,KAAK,CAAC,QAAQ;QACZ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;QAChC,CAAC,CAAC,kBAAkB,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;IAEhD,MAAM,mBAAmB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,QAAgB;QAC/D,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,wBAAwB,CAAC;YACjD,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAC;QACH,OAAO,CAAC,MAAM,CAAC,gBAAgB,IAAI,EAAE,CAAC;aACnC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC;aACjC,MAAM,CACL,CAAC,SAAS,EAAuB,EAAE,CAAC,OAAO,SAAS,KAAK,QAAQ,CAClE,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,MAAM,kBAAkB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,QAAgB;QAC9D,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC;YACzC,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAC/B,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAC5C,GAAG;aACA,aAAa,CAAC;YACb,QAAQ,EAAE,QAAQ;YAClB,UAAU,EAAE,UAAU;SACvB,CAAC;aACD,IAAI,CACH,MAAM,CAAC,GAAG,CACR,CAAC,QAAQ,EAAE,EAAE,CACX;YACE,UAAU;YACV,mBAAmB,CAAC,QAAQ,CAAC,cAAc,CAAC;SACpC,CACb,EACD,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAC5C,MAAM,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,SAAS,CAAU,CAAC,CACjD,CACF,CACJ,CACF,CAAC;QACF,OAAO,MAAM,CAAC,WAAW,CACvB,OAAO,CAAC,MAAM,CACZ,CAAC,KAAK,EAAqC,EAAE,CAC3C,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CACzB,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,QAAgB;QACpD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC;YACrC,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAC;QACH,OAAO,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,MAAM,mBAAmB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAC/C,QAAQ,EACR,IAAI,EACJ,IAAI,GAKL;QACC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7B,KAAK,MAAM,SAAS,IAAI,IAAI,EAAE,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC3B,KAAK,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC;oBAC1B,QAAQ,EAAE,QAAQ;oBAClB,SAAS,EAAE,SAAS;iBACrB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,KAAK,MAAM,SAAS,IAAI,IAAI,EAAE,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC3B,KAAK,CAAC,CAAC,GAAG;qBACP,gBAAgB,CAAC;oBAChB,QAAQ,EAAE,QAAQ;oBAClB,SAAS,EAAE,SAAS;iBACrB,CAAC;qBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAC5D,CAAC;YACN,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,kBAAkB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAC9C,QAAQ,EACR,IAAI,EACJ,IAAI,GAKL;QACC,KAAK,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1D,IACE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC;gBACxC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EACxB,CAAC;gBACD,KAAK,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC;oBACvB,QAAQ,EAAE,QAAQ;oBAClB,UAAU,EAAE,UAAU;oBACtB,cAAc,EAAE,uBAAuB,CAAC,QAAQ,CAAC;iBAClD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC,CAAC,UAAU,IAAI,IAAI,CAAC,EAAE,CAAC;gBAC1B,KAAK,CAAC,CAAC,GAAG;qBACP,gBAAgB,CAAC;oBAChB,QAAQ,EAAE,QAAQ;oBAClB,UAAU,EAAE,UAAU;iBACvB,CAAC;qBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAC5D,CAAC;YACN,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,CAAC;QAC1C,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;YAC3C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO;YAC9B,IACE,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,IAAK,EAAgB,CAAC,CAAC;gBAC9C,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,EACzB,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;YACD,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;gBAC/C,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;QACH,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;YAC7C,MAAM,QAAQ,GACZ,MAAM,EAAE,QAAQ,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,IAAK,EAAgB,CAAC,CAAC,CAAC;YACrE,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,GAAG;iBACxB,OAAO,CAAC;gBACP,QAAQ,EAAE,QAAQ;aACnB,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAC5C,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAC1B,CACF,CAAC;YACJ,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;gBACzB,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,CAAC,iBAAiB,EAAE,cAAc,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;gBAClE,mBAAmB,CAAC,QAAQ,CAAC;gBAC7B,kBAAkB,CAAC,QAAQ,CAAC;gBAC5B,QAAQ,CAAC,QAAQ,CAAC;aACnB,CAAC,CAAC;YACH,OAAO;gBACL,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG;gBAC1B,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ;gBAChC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM;gBAC5B,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI;gBACxB,mBAAmB,EACjB,QAAQ,CAAC,IAAI,CAAC,mBAAmB,EAAE,sBAAsB;gBAC3D,iBAAiB;gBACjB,cAAc;gBACd,IAAI;aACL,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;YAChD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACzC,MAAM,IAAI,GAAG;gBACX,GAAG,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;gBAClC,GAAG,IAAI,CAAC,IAAI;aACb,CAAC;YACF,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,GAAG;iBACvB,UAAU,CAAC;gBACV,QAAQ,EAAE,QAAQ;gBAClB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;gBAC7C,IAAI,EAAE,cAAc,CAAC,IAAI,CAAC;aAC3B,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE,CACnD,GAAG;iBACA,OAAO,CAAC;gBACP,QAAQ,EAAE,QAAQ;aACnB,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,YAAY,CACjB,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,EAChD,GAAG,EAAE,CACH,IAAI,KAAK,CACP,SAAS,QAAQ,gDAAgD,CAClE,CACJ,CACF,CACJ,CACF,CAAC;YAEJ,KAAK,CAAC,CAAC,mBAAmB,CAAC;gBACzB,QAAQ;gBACR,IAAI,EAAE,EAAE;gBACR,IAAI,EAAE,IAAI,CAAC,iBAAiB,IAAI,EAAE;aACnC,CAAC,CAAC;YACH,KAAK,CAAC,CAAC,kBAAkB,CAAC;gBACxB,QAAQ;gBACR,IAAI,EAAE,EAAE;gBACR,IAAI,EAAE,IAAI,CAAC,cAAc,IAAI,EAAE;aAChC,CAAC,CAAC;YAEH,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,IAAI,QAAQ,CAAC,CAAC;YACnD,OAAO;gBACL,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,IAAI,QAAQ;gBACtC,QAAQ;gBACR,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM;gBAC5B,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,GAAG;gBAC5C,mBAAmB,EACjB,OAAO,CAAC,IAAI,EAAE,mBAAmB,EAAE,sBAAsB;oBACzD,IAAI,CAAC,mBAAmB;gBAC1B,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,IAAI,EAAE;gBAC/C,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,EAAE;gBACzC,IAAI;aACL,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;YAC9D,IAAI,IAAI,CAAC,mBAAmB,KAAK,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBAC1D,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;oBAC7B,KAAK,CAAC,CAAC,GAAG,CAAC,0BAA0B,CAAC;wBACpC,QAAQ,EAAE,MAAM,CAAC,QAAQ;wBACzB,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;qBAC9C,CAAC,CAAC;gBACL,CAAC;qBAAM,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;oBACpC,KAAK,CAAC,CAAC,GAAG;yBACP,6BAA6B,CAAC;wBAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;qBAC1B,CAAC;yBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAC5D,CAAC;gBACN,CAAC;YACH,CAAC;YAED,KAAK,CAAC,CAAC,mBAAmB,CAAC;gBACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,IAAI,EAAE,IAAI,CAAC,iBAAiB,IAAI,EAAE;gBAClC,IAAI,EAAE,IAAI,CAAC,iBAAiB,IAAI,EAAE;aACnC,CAAC,CAAC;YACH,KAAK,CAAC,CAAC,kBAAkB,CAAC;gBACxB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,IAAI,EAAE,IAAI,CAAC,cAAc,IAAI,EAAE;gBAC/B,IAAI,EAAE,IAAI,CAAC,cAAc,IAAI,EAAE;aAChC,CAAC,CAAC;YAEH,MAAM,OAAO,GAAG;gBACd,GAAG,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;gBAClC,GAAG,IAAI,CAAC,IAAI;aACb,CAAC;YACF,MAAM,OAAO,GAAG;gBACd,GAAG,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;gBAClC,GAAG,IAAI,CAAC,IAAI;aACb,CAAC;YACF,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACvD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,KAAK,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;oBACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,MAAM;iBACb,CAAC,CAAC;YACL,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC;oBACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,OAAO,EAAE,OAAO;iBACjB,CAAC,CAAC;YACL,CAAC;YAED,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;gBAC9B,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,CAAC,CAAC;YAEH,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACpC,OAAO;gBACL,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,MAAM,CAAC,OAAO;gBACzC,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,IAAI,MAAM,CAAC,QAAQ;gBAChD,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,IAAI,MAAM,CAAC,MAAM;gBAC1C,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,MAAM,CAAC,IAAI;gBACpC,mBAAmB,EACjB,IAAI,CAAC,IAAI,EAAE,mBAAmB,EAAE,sBAAsB;oBACtD,IAAI,CAAC,mBAAmB;gBAC1B,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,IAAI,EAAE;gBAC/C,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,EAAE;gBACzC,IAAI,EAAE,OAAO;aACd,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACrC,KAAK,CAAC,CAAC,GAAG;iBACP,6BAA6B,CAAC;gBAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,CAAC;iBACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YAErE,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,GAAG;iBAC9B,gBAAgB,CAAC;gBAChB,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAC5C,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAC1B,CACF,CAAC;YACJ,KAAK,MAAM,UAAU,IAAI,cAAc,EAAE,WAAW,IAAI,EAAE,EAAE,CAAC;gBAC3D,KAAK,CAAC,CAAC,GAAG;qBACP,gBAAgB,CAAC;oBAChB,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,UAAU,EAAE,UAAU;iBACvB,CAAC;qBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAC5D,CAAC;YACN,CAAC;YAED,MAAM,gBAAgB,GAAG,KAAK,CAAC,CAAC,GAAG;iBAChC,wBAAwB,CAAC;gBACxB,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAC5C,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAC1B,CACF,CAAC;YACJ,KAAK,MAAM,MAAM,IAAI,gBAAgB,EAAE,gBAAgB,IAAI,EAAE,EAAE,CAAC;gBAC9D,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;oBACrB,KAAK,CAAC,CAAC,GAAG;yBACP,gBAAgB,CAAC;wBAChB,QAAQ,EAAE,MAAM,CAAC,QAAQ;wBACzB,SAAS,EAAE,MAAM,CAAC,SAAS;qBAC5B,CAAC;yBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAC5D,CAAC;gBACN,CAAC;YACH,CAAC;YAED,KAAK,CAAC,CAAC,GAAG;iBACP,UAAU,CAAC;gBACV,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,CAAC;iBACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACvE,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}
+{"version":3,"file":"User.js","sourceRoot":"","sources":["../../../src/AWS/IAM/User.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,0BAA0B,CAAC;AAChD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,QAAQ,EACR,OAAO,GACR,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,mBAAmB,EACnB,uBAAuB,EACvB,WAAW,GACZ,MAAM,aAAa,CAAC;AA+CrB;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG,QAAQ,CAAO,cAAc,CAAC,CAAC;AAEnD,MAAM,CAAC,MAAM,YAAY,GAAG,GAAG,EAAE,CAC/B,QAAQ,CAAC,MAAM,CACb,IAAI,EACJ,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,CAAC,EAAU,EAAE,KAAgB,EAAE,EAAE,CAC9C,KAAK,CAAC,QAAQ;QACZ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;QAChC,CAAC,CAAC,kBAAkB,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;IAEhD,MAAM,mBAAmB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,QAAgB;QAC/D,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,wBAAwB,CAAC;YACjD,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAC;QACH,OAAO,CAAC,MAAM,CAAC,gBAAgB,IAAI,EAAE,CAAC;aACnC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC;aACjC,MAAM,CACL,CAAC,SAAS,EAAuB,EAAE,CAAC,OAAO,SAAS,KAAK,QAAQ,CAClE,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,MAAM,kBAAkB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,QAAgB;QAC9D,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC;YACzC,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAC/B,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAC5C,GAAG;aACA,aAAa,CAAC;YACb,QAAQ,EAAE,QAAQ;YAClB,UAAU,EAAE,UAAU;SACvB,CAAC;aACD,IAAI,CACH,MAAM,CAAC,GAAG,CACR,CAAC,QAAQ,EAAE,EAAE,CACX;YACE,UAAU;YACV,mBAAmB,CAAC,QAAQ,CAAC,cAAc,CAAC;SACpC,CACb,EACD,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAC5C,MAAM,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,SAAS,CAAU,CAAC,CACjD,CACF,CACJ,CACF,CAAC;QACF,OAAO,MAAM,CAAC,WAAW,CACvB,OAAO,CAAC,MAAM,CACZ,CAAC,KAAK,EAAqC,EAAE,CAC3C,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CACzB,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,QAAgB;QACpD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC;YACrC,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAC;QACH,OAAO,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,MAAM,mBAAmB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAC/C,QAAQ,EACR,IAAI,EACJ,IAAI,GAKL;QACC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7B,KAAK,MAAM,SAAS,IAAI,IAAI,EAAE,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC3B,KAAK,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC;oBAC1B,QAAQ,EAAE,QAAQ;oBAClB,SAAS,EAAE,SAAS;iBACrB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,KAAK,MAAM,SAAS,IAAI,IAAI,EAAE,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC3B,KAAK,CAAC,CAAC,GAAG;qBACP,gBAAgB,CAAC;oBAChB,QAAQ,EAAE,QAAQ;oBAClB,SAAS,EAAE,SAAS;iBACrB,CAAC;qBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAC5D,CAAC;YACN,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,kBAAkB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAC9C,QAAQ,EACR,IAAI,EACJ,IAAI,GAKL;QACC,KAAK,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1D,IACE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC;gBACxC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EACxB,CAAC;gBACD,KAAK,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC;oBACvB,QAAQ,EAAE,QAAQ;oBAClB,UAAU,EAAE,UAAU;oBACtB,cAAc,EAAE,uBAAuB,CAAC,QAAQ,CAAC;iBAClD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC,CAAC,UAAU,IAAI,IAAI,CAAC,EAAE,CAAC;gBAC1B,KAAK,CAAC,CAAC,GAAG;qBACP,gBAAgB,CAAC;oBAChB,QAAQ,EAAE,QAAQ;oBAClB,UAAU,EAAE,UAAU;iBACvB,CAAC;qBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAC5D,CAAC;YACN,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,CAAC;QAC1C,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;YAC3C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO;YAC9B,IACE,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,IAAK,EAAgB,CAAC,CAAC;gBAC9C,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,EACzB,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;YACD,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;gBAC/C,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;QACH,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;YAC7C,MAAM,QAAQ,GACZ,MAAM,EAAE,QAAQ,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,IAAK,EAAgB,CAAC,CAAC,CAAC;YACrE,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,GAAG;iBACxB,OAAO,CAAC;gBACP,QAAQ,EAAE,QAAQ;aACnB,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAC5C,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAC1B,CACF,CAAC;YACJ,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;gBACzB,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,CAAC,iBAAiB,EAAE,cAAc,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;gBAClE,mBAAmB,CAAC,QAAQ,CAAC;gBAC7B,kBAAkB,CAAC,QAAQ,CAAC;gBAC5B,QAAQ,CAAC,QAAQ,CAAC;aACnB,CAAC,CAAC;YACH,OAAO;gBACL,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG;gBAC1B,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ;gBAChC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM;gBAC5B,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI;gBACxB,mBAAmB,EACjB,QAAQ,CAAC,IAAI,CAAC,mBAAmB,EAAE,sBAAsB;gBAC3D,iBAAiB;gBACjB,cAAc;gBACd,IAAI;aACL,CAAC;QACJ,CAAC,CAAC;QACF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;YAC3D,MAAM,QAAQ,GAAG,MAAM,EAAE,QAAQ,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;YAC/D,MAAM,WAAW,GAAG;gBAClB,GAAG,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;gBAClC,GAAG,IAAI,CAAC,IAAI;aACb,CAAC;YAEF,6CAA6C;YAC7C,MAAM,gBAAgB,GAAG,KAAK,CAAC,CAAC,GAAG;iBAChC,OAAO,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;iBAC/B,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAC5C,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAC1B,CACF,CAAC;YACJ,IAAI,YAAY,GAAG,gBAAgB,EAAE,IAAI,CAAC;YAE1C,yDAAyD;YACzD,kCAAkC;YAClC,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC;gBACvB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,GAAG;qBACvB,UAAU,CAAC;oBACV,QAAQ,EAAE,QAAQ;oBAClB,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;oBAC7C,IAAI,EAAE,cAAc,CAAC,WAAW,CAAC;iBAClC,CAAC;qBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE,CACnD,GAAG,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,CACtC,MAAM,CAAC,YAAY,CACjB,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,EACvD,GAAG,EAAE,CACH,IAAI,KAAK,CACP,SAAS,QAAQ,gDAAgD,CAClE,CACJ,CACF,CACF,CACF,CAAC;gBACJ,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;YAC9B,CAAC;YAED,8CAA8C;YAC9C,MAAM,gBAAgB,GACpB,YAAY,EAAE,mBAAmB,EAAE,sBAAsB,CAAC;YAC5D,IAAI,IAAI,CAAC,mBAAmB,KAAK,gBAAgB,EAAE,CAAC;gBAClD,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;oBAC7B,KAAK,CAAC,CAAC,GAAG,CAAC,0BAA0B,CAAC;wBACpC,QAAQ,EAAE,QAAQ;wBAClB,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;qBAC9C,CAAC,CAAC;gBACL,CAAC;qBAAM,IAAI,gBAAgB,EAAE,CAAC;oBAC5B,KAAK,CAAC,CAAC,GAAG;yBACP,6BAA6B,CAAC;wBAC7B,QAAQ,EAAE,QAAQ;qBACnB,CAAC;yBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAC5D,CAAC;gBACN,CAAC;YACH,CAAC;YAED,4DAA4D;YAC5D,wBAAwB;YACxB,MAAM,CAAC,uBAAuB,EAAE,sBAAsB,CAAC,GACrD,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;gBAChB,mBAAmB,CAAC,QAAQ,CAAC;gBAC7B,kBAAkB,CAAC,QAAQ,CAAC;aAC7B,CAAC,CAAC;YACL,KAAK,CAAC,CAAC,mBAAmB,CAAC;gBACzB,QAAQ;gBACR,IAAI,EAAE,uBAAuB;gBAC7B,IAAI,EAAE,IAAI,CAAC,iBAAiB,IAAI,EAAE;aACnC,CAAC,CAAC;YACH,KAAK,CAAC,CAAC,kBAAkB,CAAC;gBACxB,QAAQ;gBACR,IAAI,EAAE,sBAAsB;gBAC5B,IAAI,EAAE,IAAI,CAAC,cAAc,IAAI,EAAE;aAChC,CAAC,CAAC;YAEH,6CAA6C;YAC7C,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC/C,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;YAChE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,KAAK,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;oBACjB,QAAQ,EAAE,QAAQ;oBAClB,IAAI,EAAE,MAAM;iBACb,CAAC,CAAC;YACL,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC;oBACnB,QAAQ,EAAE,QAAQ;oBAClB,OAAO,EAAE,OAAO;iBACjB,CAAC,CAAC;YACL,CAAC;YAED,oDAAoD;YACpD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;YACxD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,YAAY,EAAE,GAAG,IAAI,QAAQ,CAAC;YAEhE,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC7B,OAAO;gBACL,OAAO;gBACP,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,IAAI,QAAQ;gBACzC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,IAAI,YAAY,EAAE,MAAM;gBACjD,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,YAAY,EAAE,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,GAAG;gBAC/D,mBAAmB,EACjB,IAAI,CAAC,IAAI,EAAE,mBAAmB,EAAE,sBAAsB;oBACtD,IAAI,CAAC,mBAAmB;gBAC1B,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,IAAI,EAAE;gBAC/C,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,EAAE;gBACzC,IAAI,EAAE,WAAW;aAClB,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACrC,KAAK,CAAC,CAAC,GAAG;iBACP,6BAA6B,CAAC;gBAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,CAAC;iBACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YAErE,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,GAAG;iBAC9B,gBAAgB,CAAC;gBAChB,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAC5C,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAC1B,CACF,CAAC;YACJ,KAAK,MAAM,UAAU,IAAI,cAAc,EAAE,WAAW,IAAI,EAAE,EAAE,CAAC;gBAC3D,KAAK,CAAC,CAAC,GAAG;qBACP,gBAAgB,CAAC;oBAChB,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,UAAU,EAAE,UAAU;iBACvB,CAAC;qBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAC5D,CAAC;YACN,CAAC;YAED,MAAM,gBAAgB,GAAG,KAAK,CAAC,CAAC,GAAG;iBAChC,wBAAwB,CAAC;gBACxB,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAC5C,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAC1B,CACF,CAAC;YACJ,KAAK,MAAM,MAAM,IAAI,gBAAgB,EAAE,gBAAgB,IAAI,EAAE,EAAE,CAAC;gBAC9D,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;oBACrB,KAAK,CAAC,CAAC,GAAG;yBACP,gBAAgB,CAAC;wBAChB,QAAQ,EAAE,MAAM,CAAC,QAAQ;wBACzB,SAAS,EAAE,MAAM,CAAC,SAAS;qBAC5B,CAAC;yBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAC5D,CAAC;gBACN,CAAC;YACH,CAAC;YAED,KAAK,CAAC,CAAC,GAAG;iBACP,UAAU,CAAC;gBACV,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,CAAC;iBACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACvE,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}

package/lib/AWS/IAM/VirtualMFADevice.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"VirtualMFADevice.d.ts","sourceRoot":"","sources":["../../../src/AWS/IAM/VirtualMFADevice.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAG5C,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAIjD,MAAM,WAAW,qBAAqB;IACpC;;OAEG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B;;OAEG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,gBAAiB,SAAQ,QAAQ,CAChD,0BAA0B,EAC1B,qBAAqB,EACrB;IACE,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,UAAU,EAAE,IAAI,GAAG,SAAS,CAAC;IAC7B,gBAAgB,EACZ,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,GAC9C,SAAS,CAAC;IACd,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,GAAG,SAAS,CAAC;IACtE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B,EACD,KAAK,EACL,SAAS,CACV;CAAG;AAEJ;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,gBAAgB,6DAE5B,CAAC;AAEF,eAAO,MAAM,wBAAwB,gTAsLlC,CAAC"}
+{"version":3,"file":"VirtualMFADevice.d.ts","sourceRoot":"","sources":["../../../src/AWS/IAM/VirtualMFADevice.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAG5C,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAIjD,MAAM,WAAW,qBAAqB;IACpC;;OAEG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B;;OAEG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,gBAAiB,SAAQ,QAAQ,CAChD,0BAA0B,EAC1B,qBAAqB,EACrB;IACE,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,UAAU,EAAE,IAAI,GAAG,SAAS,CAAC;IAC7B,gBAAgB,EACZ,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,GAC9C,SAAS,CAAC;IACd,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,GAAG,SAAS,CAAC;IACtE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B,EACD,KAAK,EACL,SAAS,CACV;CAAG;AAEJ;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,gBAAgB,6DAE5B,CAAC;AAEF,eAAO,MAAM,wBAAwB,gTA0MlC,CAAC"}

package/lib/AWS/IAM/VirtualMFADevice.js

@@ -93,78 +93,88 @@ export const VirtualMFADeviceProvider = () => Provider.effect(VirtualMFADevice,
                 tags: toTagRecord(tags.Tags),
             };
         }),
-        create: Effect.fn(function* ({ id, news, session }) {
-            const deviceName = yield* toName(id, news);
-            const tags = {
+        reconcile: Effect.fn(function* ({ id, news, output, session }) {
+            const desiredTags = {
                 ...(yield* createInternalTags(id)),
                 ...news.tags,
             };
-            const created = yield* iam.createVirtualMFADevice({
-                Path: news.path,
-                VirtualMFADeviceName: deviceName,
-                Tags: createTagsList(tags),
-            });
-            if (!created.VirtualMFADevice.SerialNumber) {
-                return yield* Effect.fail(new Error(`createVirtualMFADevice returned no serial number`));
-            }
-            if (news.userName &&
-                news.authenticationCode1 &&
-                news.authenticationCode2) {
-                yield* iam.enableMFADevice({
-                    UserName: news.userName,
-                    SerialNumber: created.VirtualMFADevice.SerialNumber,
-                    AuthenticationCode1: news.authenticationCode1,
-                    AuthenticationCode2: news.authenticationCode2,
+            // Observe — virtual MFA devices have AWS-generated serial
+            // numbers, so we can only locate the existing device when we
+            // already have its serial from a prior output.
+            const observed = output
+                ? yield* readDevice({
+                    serialNumber: output.serialNumber,
+                    userName: output.userName,
+                })
+                : undefined;
+            // Ensure — create the device when missing. The seed and QR
+            // code are only returned on creation, so on adoption the best
+            // we can do is preserve the existing redacted values.
+            let serialNumber = observed?.SerialNumber ?? output?.serialNumber;
+            let base32StringSeed = output?.base32StringSeed;
+            let qrCodePNG = output?.qrCodePNG;
+            if (!observed?.SerialNumber) {
+                const deviceName = yield* toName(id, news);
+                const created = yield* iam.createVirtualMFADevice({
+                    Path: news.path,
+                    VirtualMFADeviceName: deviceName,
+                    Tags: createTagsList(desiredTags),
                 });
+                if (!created.VirtualMFADevice.SerialNumber) {
+                    return yield* Effect.fail(new Error(`createVirtualMFADevice returned no serial number`));
+                }
+                serialNumber = created.VirtualMFADevice.SerialNumber;
+                base32StringSeed = toRedactedBytes(created.VirtualMFADevice.Base32StringSeed);
+                qrCodePNG = toRedactedBytes(created.VirtualMFADevice.QRCodePNG);
+                // The device was just created, so it is unassigned. Activate
+                // it for the user when activation codes are provided. After
+                // first activation the codes lose their meaning (`diff`
+                // triggers replacement on code change).
+                if (news.userName &&
+                    news.authenticationCode1 &&
+                    news.authenticationCode2) {
+                    yield* iam.enableMFADevice({
+                        UserName: news.userName,
+                        SerialNumber: serialNumber,
+                        AuthenticationCode1: news.authenticationCode1,
+                        AuthenticationCode2: news.authenticationCode2,
+                    });
+                }
             }
-            const response = yield* readDevice({
-                serialNumber: created.VirtualMFADevice.SerialNumber,
-                userName: news.userName,
+            if (!serialNumber) {
+                return yield* Effect.fail(new Error(`Virtual MFA device has no serial number`));
+            }
+            // Sync tags against the cloud's actual tags.
+            const observedTagsResp = yield* iam.listMFADeviceTags({
+                SerialNumber: serialNumber,
             });
-            yield* session.note(created.VirtualMFADevice.SerialNumber);
-            return {
-                serialNumber: created.VirtualMFADevice.SerialNumber,
-                userName: response?.UserName ?? news.userName,
-                enableDate: response?.EnableDate,
-                base32StringSeed: toRedactedBytes(created.VirtualMFADevice.Base32StringSeed),
-                qrCodePNG: toRedactedBytes(created.VirtualMFADevice.QRCodePNG),
-                tags,
-            };
-        }),
-        update: Effect.fn(function* ({ id, news, olds, output, session }) {
-            const oldTags = {
-                ...(yield* createInternalTags(id)),
-                ...olds.tags,
-            };
-            const newTags = {
-                ...(yield* createInternalTags(id)),
-                ...news.tags,
-            };
-            const { removed, upsert } = diffTags(oldTags, newTags);
+            const observedTags = toTagRecord(observedTagsResp.Tags);
+            const { removed, upsert } = diffTags(observedTags, desiredTags);
             if (upsert.length > 0) {
                 yield* iam.tagMFADevice({
-                    SerialNumber: output.serialNumber,
+                    SerialNumber: serialNumber,
                     Tags: upsert,
                 });
             }
             if (removed.length > 0) {
                 yield* iam.untagMFADevice({
-                    SerialNumber: output.serialNumber,
+                    SerialNumber: serialNumber,
                     TagKeys: removed,
                 });
             }
-            const response = yield* readDevice({
-                serialNumber: output.serialNumber,
-                userName: output.userName,
+            // Re-read for fresh `EnableDate` / `UserName` after activation.
+            const fresh = yield* readDevice({
+                serialNumber,
+                userName: news.userName ?? output?.userName,
             });
-            yield* session.note(output.serialNumber);
+            yield* session.note(serialNumber);
             return {
-                serialNumber: output.serialNumber,
-                userName: response?.UserName ?? output.userName,
-                enableDate: response?.EnableDate ?? output.enableDate,
-                base32StringSeed: output.base32StringSeed,
-                qrCodePNG: output.qrCodePNG,
-                tags: newTags,
+                serialNumber,
+                userName: fresh?.UserName ?? news.userName ?? output?.userName,
+                enableDate: fresh?.EnableDate ?? output?.enableDate,
+                base32StringSeed,
+                qrCodePNG,
+                tags: desiredTags,
             };
         }),
         delete: Effect.fn(function* ({ output }) {

package/lib/AWS/IAM/VirtualMFADevice.js.map

@@ -1 +1 @@
-{"version":3,"file":"VirtualMFADevice.js","sourceRoot":"","sources":["../../../src/AWS/IAM/VirtualMFADevice.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,0BAA0B,CAAC;AAChD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AA+C3D;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,QAAQ,CACtC,0BAA0B,CAC3B,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAAG,EAAE,CAC3C,QAAQ,CAAC,MAAM,CACb,gBAAgB,EAChB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,CAAC,EAAU,EAAE,KAA4B,EAAE,EAAE,CAC1D,KAAK,CAAC,oBAAoB;QACxB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC;QAC5C,CAAC,CAAC,kBAAkB,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IAEjD,MAAM,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EACtC,YAAY,EACZ,QAAQ,GAIT;QACC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC;gBAC9C,gBAAgB,EAAE,YAAY;aAC/B,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAC1C,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,KAAK,YAAY,CAC/C,CAAC;YACF,OAAO,MAAM;gBACX,CAAC,CAAC;oBACE,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ;oBAC/B,UAAU,EAAE,MAAM,CAAC,UAAU;iBAC9B;gBACH,CAAC,CAAC,SAAS,CAAC;QAChB,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,GAAG;aACd,YAAY,CAAC;YACZ,YAAY,EAAE,YAAY;YAC1B,QAAQ,EAAE,QAAQ;SACnB,CAAC;aACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAC5C,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAC1B,CACF,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,CAAC,cAAc,CAAC;QACzB,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;YAC3C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO;YAC9B,IACE,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,IAAK,EAA4B,CAAC,CAAC;gBACxD,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;gBAC3B,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC;gBACzC,CAAC,IAAI,CAAC,QAAQ,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,IAAI,SAAS,CAAC;gBAC7D,CAAC,IAAI,CAAC,mBAAmB,IAAI,SAAS,CAAC;oBACrC,CAAC,IAAI,CAAC,mBAAmB,IAAI,SAAS,CAAC;gBACzC,CAAC,IAAI,CAAC,mBAAmB,IAAI,SAAS,CAAC;oBACrC,CAAC,IAAI,CAAC,mBAAmB,IAAI,SAAS,CAAC,EACzC,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;QACH,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACnC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC;gBACjC,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,EAAE,YAAY,EAAE,CAAC;gBAC5B,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC;gBACxC,YAAY,EAAE,MAAM,CAAC,YAAY;aAClC,CAAC,CAAC;YACH,OAAO;gBACL,YAAY,EAAE,QAAQ,CAAC,YAAY;gBACnC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ;gBAC9C,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;gBACzC,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;aAC7B,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;YAChD,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YAC3C,MAAM,IAAI,GAAG;gBACX,GAAG,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;gBAClC,GAAG,IAAI,CAAC,IAAI;aACb,CAAC;YACF,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,sBAAsB,CAAC;gBAChD,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,oBAAoB,EAAE,UAAU;gBAChC,IAAI,EAAE,cAAc,CAAC,IAAI,CAAC;aAC3B,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,YAAY,EAAE,CAAC;gBAC3C,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAC9D,CAAC;YACJ,CAAC;YACD,IACE,IAAI,CAAC,QAAQ;gBACb,IAAI,CAAC,mBAAmB;gBACxB,IAAI,CAAC,mBAAmB,EACxB,CAAC;gBACD,KAAK,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC;oBACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,YAAY,EAAE,OAAO,CAAC,gBAAgB,CAAC,YAAY;oBACnD,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;oBAC7C,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;iBAC9C,CAAC,CAAC;YACL,CAAC;YACD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC;gBACjC,YAAY,EAAE,OAAO,CAAC,gBAAgB,CAAC,YAAY;gBACnD,QAAQ,EAAE,IAAI,CAAC,QAAQ;aACxB,CAAC,CAAC;YACH,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;YAC3D,OAAO;gBACL,YAAY,EAAE,OAAO,CAAC,gBAAgB,CAAC,YAAY;gBACnD,QAAQ,EAAE,QAAQ,EAAE,QAAQ,IAAI,IAAI,CAAC,QAAQ;gBAC7C,UAAU,EAAE,QAAQ,EAAE,UAAU;gBAChC,gBAAgB,EAAE,eAAe,CAC/B,OAAO,CAAC,gBAAgB,CAAC,gBAAgB,CAC1C;gBACD,SAAS,EAAE,eAAe,CAAC,OAAO,CAAC,gBAAgB,CAAC,SAAS,CAAC;gBAC9D,IAAI;aACL,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;YAC9D,MAAM,OAAO,GAAG;gBACd,GAAG,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;gBAClC,GAAG,IAAI,CAAC,IAAI;aACb,CAAC;YACF,MAAM,OAAO,GAAG;gBACd,GAAG,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;gBAClC,GAAG,IAAI,CAAC,IAAI;aACb,CAAC;YACF,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACvD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,KAAK,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC;oBACtB,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,IAAI,EAAE,MAAM;iBACb,CAAC,CAAC;YACL,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,KAAK,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC;oBACxB,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,OAAO,EAAE,OAAO;iBACjB,CAAC,CAAC;YACL,CAAC;YACD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC;gBACjC,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,CAAC,CAAC;YACH,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YACzC,OAAO;gBACL,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,IAAI,MAAM,CAAC,QAAQ;gBAC/C,UAAU,EAAE,QAAQ,EAAE,UAAU,IAAI,MAAM,CAAC,UAAU;gBACrD,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;gBACzC,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,IAAI,EAAE,OAAO;aACd,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACrC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpB,KAAK,CAAC,CAAC,GAAG;qBACP,mBAAmB,CAAC;oBACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,YAAY,EAAE,MAAM,CAAC,YAAY;iBAClC,CAAC;qBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAC5D,CAAC;YACN,CAAC;YACD,KAAK,CAAC,CAAC,GAAG;iBACP,sBAAsB,CAAC;gBACtB,YAAY,EAAE,MAAM,CAAC,YAAY;aAClC,CAAC;iBACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACvE,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}
+{"version":3,"file":"VirtualMFADevice.js","sourceRoot":"","sources":["../../../src/AWS/IAM/VirtualMFADevice.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,0BAA0B,CAAC;AAChD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AA+C3D;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,QAAQ,CACtC,0BAA0B,CAC3B,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAAG,EAAE,CAC3C,QAAQ,CAAC,MAAM,CACb,gBAAgB,EAChB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,CAAC,EAAU,EAAE,KAA4B,EAAE,EAAE,CAC1D,KAAK,CAAC,oBAAoB;QACxB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC;QAC5C,CAAC,CAAC,kBAAkB,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IAEjD,MAAM,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EACtC,YAAY,EACZ,QAAQ,GAIT;QACC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC;gBAC9C,gBAAgB,EAAE,YAAY;aAC/B,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAC1C,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,KAAK,YAAY,CAC/C,CAAC;YACF,OAAO,MAAM;gBACX,CAAC,CAAC;oBACE,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ;oBAC/B,UAAU,EAAE,MAAM,CAAC,UAAU;iBAC9B;gBACH,CAAC,CAAC,SAAS,CAAC;QAChB,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,GAAG;aACd,YAAY,CAAC;YACZ,YAAY,EAAE,YAAY;YAC1B,QAAQ,EAAE,QAAQ;SACnB,CAAC;aACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAC5C,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAC1B,CACF,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,CAAC,cAAc,CAAC;QACzB,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;YAC3C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO;YAC9B,IACE,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,IAAK,EAA4B,CAAC,CAAC;gBACxD,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;gBAC3B,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC;gBACzC,CAAC,IAAI,CAAC,QAAQ,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,IAAI,SAAS,CAAC;gBAC7D,CAAC,IAAI,CAAC,mBAAmB,IAAI,SAAS,CAAC;oBACrC,CAAC,IAAI,CAAC,mBAAmB,IAAI,SAAS,CAAC;gBACzC,CAAC,IAAI,CAAC,mBAAmB,IAAI,SAAS,CAAC;oBACrC,CAAC,IAAI,CAAC,mBAAmB,IAAI,SAAS,CAAC,EACzC,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;QACH,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACnC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC;gBACjC,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,EAAE,YAAY,EAAE,CAAC;gBAC5B,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC;gBACxC,YAAY,EAAE,MAAM,CAAC,YAAY;aAClC,CAAC,CAAC;YACH,OAAO;gBACL,YAAY,EAAE,QAAQ,CAAC,YAAY;gBACnC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ;gBAC9C,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;gBACzC,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;aAC7B,CAAC;QACJ,CAAC,CAAC;QACF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;YAC3D,MAAM,WAAW,GAAG;gBAClB,GAAG,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;gBAClC,GAAG,IAAI,CAAC,IAAI;aACb,CAAC;YAEF,0DAA0D;YAC1D,6DAA6D;YAC7D,+CAA+C;YAC/C,MAAM,QAAQ,GAAG,MAAM;gBACrB,CAAC,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC;oBAChB,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ;iBAC1B,CAAC;gBACJ,CAAC,CAAC,SAAS,CAAC;YAEd,2DAA2D;YAC3D,8DAA8D;YAC9D,sDAAsD;YACtD,IAAI,YAAY,GAAG,QAAQ,EAAE,YAAY,IAAI,MAAM,EAAE,YAAY,CAAC;YAClE,IAAI,gBAAgB,GAAG,MAAM,EAAE,gBAAgB,CAAC;YAChD,IAAI,SAAS,GAAG,MAAM,EAAE,SAAS,CAAC;YAElC,IAAI,CAAC,QAAQ,EAAE,YAAY,EAAE,CAAC;gBAC5B,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;gBAC3C,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,sBAAsB,CAAC;oBAChD,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,oBAAoB,EAAE,UAAU;oBAChC,IAAI,EAAE,cAAc,CAAC,WAAW,CAAC;iBAClC,CAAC,CAAC;gBACH,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,YAAY,EAAE,CAAC;oBAC3C,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAC9D,CAAC;gBACJ,CAAC;gBACD,YAAY,GAAG,OAAO,CAAC,gBAAgB,CAAC,YAAY,CAAC;gBACrD,gBAAgB,GAAG,eAAe,CAChC,OAAO,CAAC,gBAAgB,CAAC,gBAAgB,CAC1C,CAAC;gBACF,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;gBAEhE,6DAA6D;gBAC7D,4DAA4D;gBAC5D,wDAAwD;gBACxD,wCAAwC;gBACxC,IACE,IAAI,CAAC,QAAQ;oBACb,IAAI,CAAC,mBAAmB;oBACxB,IAAI,CAAC,mBAAmB,EACxB,CAAC;oBACD,KAAK,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC;wBACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,YAAY,EAAE,YAAY;wBAC1B,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;wBAC7C,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;qBAC9C,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CAAC,yCAAyC,CAAC,CACrD,CAAC;YACJ,CAAC;YAED,6CAA6C;YAC7C,MAAM,gBAAgB,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC;gBACpD,YAAY,EAAE,YAAY;aAC3B,CAAC,CAAC;YACH,MAAM,YAAY,GAAG,WAAW,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;YACxD,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;YAChE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,KAAK,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC;oBACtB,YAAY,EAAE,YAAY;oBAC1B,IAAI,EAAE,MAAM;iBACb,CAAC,CAAC;YACL,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,KAAK,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC;oBACxB,YAAY,EAAE,YAAY;oBAC1B,OAAO,EAAE,OAAO;iBACjB,CAAC,CAAC;YACL,CAAC;YAED,gEAAgE;YAChE,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC;gBAC9B,YAAY;gBACZ,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,MAAM,EAAE,QAAQ;aAC5C,CAAC,CAAC;YAEH,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAClC,OAAO;gBACL,YAAY;gBACZ,QAAQ,EAAE,KAAK,EAAE,QAAQ,IAAI,IAAI,CAAC,QAAQ,IAAI,MAAM,EAAE,QAAQ;gBAC9D,UAAU,EAAE,KAAK,EAAE,UAAU,IAAI,MAAM,EAAE,UAAU;gBACnD,gBAAgB;gBAChB,SAAS;gBACT,IAAI,EAAE,WAAW;aAClB,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACrC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpB,KAAK,CAAC,CAAC,GAAG;qBACP,mBAAmB,CAAC;oBACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,YAAY,EAAE,MAAM,CAAC,YAAY;iBAClC,CAAC;qBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAC5D,CAAC;YACN,CAAC;YACD,KAAK,CAAC,CAAC,GAAG;iBACP,sBAAsB,CAAC;gBACtB,YAAY,EAAE,MAAM,CAAC,YAAY;aAClC,CAAC;iBACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACvE,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}

package/lib/AWS/IdentityCenter/AccountAssignment.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AccountAssignment.d.ts","sourceRoot":"","sources":["../../../src/AWS/IdentityCenter/AccountAssignment.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAGjD,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;OAEG;IACH,gBAAgB,EAAE,MAAM,CAAC;IACzB;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;OAEG;IACH,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC;IAChC;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,iBAAkB,SAAQ,QAAQ,CACjD,sCAAsC,EACtC,sBAAsB,EACtB;IACE,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,aAAa,CAAC;CAC3B,EACD,KAAK,EACL,SAAS,CACV;CAAG;AAEJ;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,iBAAiB,8DAE7B,CAAC;AAEF,eAAO,MAAM,yBAAyB,+OAwHnC,CAAC"}
+{"version":3,"file":"AccountAssignment.d.ts","sourceRoot":"","sources":["../../../src/AWS/IdentityCenter/AccountAssignment.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAGjD,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;OAEG;IACH,gBAAgB,EAAE,MAAM,CAAC;IACzB;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;OAEG;IACH,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC;IAChC;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,iBAAkB,SAAQ,QAAQ,CACjD,sCAAsC,EACtC,sBAAsB,EACtB;IACE,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,aAAa,CAAC;CAC3B,EACD,KAAK,EACL,SAAS,CACV;CAAG;AAEJ;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,iBAAiB,8DAE7B,CAAC;AAEF,eAAO,MAAM,yBAAyB,+OA0HnC,CAAC"}

package/lib/AWS/IdentityCenter/AccountAssignment.js

@@ -58,12 +58,20 @@ export const AccountAssignmentProvider = () => Provider.effect(AccountAssignment
             }
             return yield* readAssignment(olds);
         }),
-        create: Effect.fn(function* ({ news, session }) {
-            const existing = yield* readAssignment(news);
+        reconcile: Effect.fn(function* ({ news, output, session }) {
+            // Observe — look up the assignment between (principal,
+            // permissionSet, target). All identifying fields are stable;
+            // diff() forces a replace on any change, so this reconcile is
+            // existence-only.
+            const existing = yield* readAssignment({
+                ...news,
+                instanceArn: output?.instanceArn ?? news.instanceArn,
+            });
             if (existing) {
                 yield* session.note(`${existing.targetId}:${existing.permissionSetArn}:${existing.principalId}`);
                 return existing;
             }
+            // Ensure — create the assignment if missing.
             const instance = yield* resolveInstance(news.instanceArn);
             const response = yield* retryIdentityCenter(ssoAdmin.createAccountAssignment({
                 InstanceArn: instance.InstanceArn,
@@ -87,10 +95,6 @@ export const AccountAssignmentProvider = () => Provider.effect(AccountAssignment
             yield* session.note(`${created.targetId}:${created.permissionSetArn}:${created.principalId}`);
             return created;
         }),
-        update: Effect.fn(function* ({ output, session }) {
-            yield* session.note(`${output.targetId}:${output.permissionSetArn}:${output.principalId}`);
-            return output;
-        }),
         delete: Effect.fn(function* ({ output }) {
             if (!(yield* readAssignment(output))) {
                 return;