alchemy 2.0.0-beta.34 → 2.0.0-beta.35

package/lib/AWS/AuthProvider.d.ts

@@ -1,11 +1,6 @@
 import * as Redacted from "effect/Redacted";
+import { CredentialsStore } from "../Auth/Credentials.ts";
 export declare const AWS_AUTH_PROVIDER_NAME = "AWS";
-/**
- * Layer that registers the AWS {@link AuthProvider} into the
- * {@link AuthProviders} registry when built. Include this in the AWS
- * `providers()` layer so `alchemy login` can discover it.
- */
-export declare const AwsAuth: import("effect/Layer").Layer<never, never, import("../index.ts").AuthProviders>;
 export type AwsAuthConfig = {
     method: "sso";
     ssoProfile: string;
@@ -30,4 +25,10 @@ export interface AwsResolvedCredentials {
         details?: string;
     };
 }
+/**
+ * Layer that registers the AWS {@link AuthProvider} into the
+ * {@link AuthProviders} registry when built. Include this in the AWS
+ * `providers()` layer so `alchemy login` can discover it.
+ */
+export declare const AwsAuth: import("effect/Layer").Layer<never, never, import("../index.ts").AuthProviders | CredentialsStore>;
 //# sourceMappingURL=AuthProvider.d.ts.map

package/lib/AWS/AuthProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AuthProvider.d.ts","sourceRoot":"","sources":["../../src/AWS/AuthProvider.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAuB5C,eAAO,MAAM,sBAAsB,QAAQ,CAAC;AAE5C;;;;GAIG;AACH,eAAO,MAAM,OAAO,iFASlB,CAAC;AAEH,MAAM,MAAM,aAAa,GACrB;IAAE,MAAM,EAAE,KAAK,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GACrC;IAAE,MAAM,EAAE,QAAQ,CAAA;CAAE,GACpB;IAAE,MAAM,EAAE,KAAK,CAAA;CAAE,CAAC;AAwBtB,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACvC,eAAe,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3C,YAAY,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE;QACN,IAAI,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;CACH"}
+{"version":3,"file":"AuthProvider.d.ts","sourceRoot":"","sources":["../../src/AWS/AuthProvider.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAS5C,OAAO,EAAE,gBAAgB,EAAmB,MAAM,wBAAwB,CAAC;AAS3E,eAAO,MAAM,sBAAsB,QAAQ,CAAC;AAE5C,MAAM,MAAM,aAAa,GACrB;IAAE,MAAM,EAAE,KAAK,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GACrC;IAAE,MAAM,EAAE,QAAQ,CAAA;CAAE,GACpB;IAAE,MAAM,EAAE,KAAK,CAAA;CAAE,CAAC;AAwBtB,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACvC,eAAe,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3C,YAAY,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE;QACN,IAAI,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;CACH;AA6DD;;;;GAIG;AACH,eAAO,MAAM,OAAO,oGA0QnB,CAAC"}

package/lib/AWS/AuthProvider.js

@@ -9,22 +9,10 @@ import { ChildProcess } from "effect/unstable/process";
 import * as NodeCrypto from "node:crypto";
 import * as NodeOs from "node:os";
 import { AuthError, AuthProviderLayer, } from "../Auth/AuthProvider.js";
-import { deleteCredentials, displayRedacted, readCredentials, writeCredentials, } from "../Auth/Credentials.js";
+import { CredentialsStore, displayRedacted } from "../Auth/Credentials.js";
 import { getEnv, getEnvRedacted, getEnvRedactedRequired, retryOnce, } from "../Auth/Env.js";
 import * as Clank from "../Util/Clank.js";
 export const AWS_AUTH_PROVIDER_NAME = "AWS";
-/**
- * Layer that registers the AWS {@link AuthProvider} into the
- * {@link AuthProviders} registry when built. Include this in the AWS
- * `providers()` layer so `alchemy login` can discover it.
- */
-export const AwsAuth = AuthProviderLayer()(AWS_AUTH_PROVIDER_NAME, {
-    configure: (profileName, ctx) => configureCredentials(profileName, ctx),
-    login: (profileName, config) => login(profileName, config),
-    logout: (profileName, config) => logout(profileName, config),
-    prettyPrint: (profileName, config) => prettyPrint(profileName, config),
-    read: (profileName, config) => resolveCredentials(profileName, config),
-});
 const options = [
     {
         value: "sso",
@@ -56,64 +44,10 @@ const runSsoCommand = (command, ssoProfile) => Effect.gen(function* () {
         }));
     }
 }).pipe(Effect.scoped);
-const resolveCredentials = (profileName, config) => Match.value(config)
-    .pipe(Match.when({ method: "env" }, Effect.fnUntraced(function* () {
-    const accessKeyId = yield* getEnvRedactedRequired("AWS_ACCESS_KEY_ID");
-    const secretAccessKey = yield* getEnvRedactedRequired("AWS_SECRET_ACCESS_KEY");
-    const sessionToken = yield* getEnvRedacted("AWS_SESSION_TOKEN");
-    const region = yield* (getEnv("AWS_REGION") ?? getEnv("AWS_DEFAULT_REGION") ?? undefined);
-    return {
-        accessKeyId,
-        secretAccessKey,
-        sessionToken,
-        region,
-        source: { type: "env" },
-    };
-})), Match.when({ method: "stored" }, () => readCredentials(profileName, "aws").pipe(Effect.flatMap((creds) => creds == null
-    ? Effect.fail(new AuthError({
-        message: "AWS stored credentials not found. Run: alchemy-effect login --configure",
-    }))
-    : Effect.succeed({
-        accessKeyId: Redacted.make(creds.accessKeyId),
-        secretAccessKey: Redacted.make(creds.secretAccessKey),
-        sessionToken: creds.sessionToken
-            ? Redacted.make(creds.sessionToken)
-            : undefined,
-        region: creds.region,
-        source: { type: "stored" },
-    })))), Match.when({ method: "sso" }, (config) => Effect.gen(function* () {
-    const auth = yield* DistilledAuth.Default;
-    const creds = yield* auth
-        .loadProfileCredentials(config.ssoProfile)
-        .pipe(Effect.mapError((e) => new AuthError({
-        message: "failed to load credentials",
-        cause: e,
-    })));
-    const profile = yield* auth
-        .loadProfile(config.ssoProfile)
-        .pipe(Effect.catch(() => Effect.succeed(undefined)));
-    return {
-        accessKeyId: creds.accessKeyId,
-        secretAccessKey: creds.secretAccessKey,
-        sessionToken: creds.sessionToken,
-        region: profile?.region,
-        source: { type: "sso", details: config.ssoProfile },
-    };
-})), Match.exhaustive)
-    .pipe(Effect.mapError((e) => new AuthError({ message: "login failed", cause: e })));
-const prettyPrint = (profileName, config) => resolveCredentials(profileName, config).pipe(Effect.tap((creds) => Effect.all([
-    Console.log(`  accessKeyId:     ${displayRedacted(creds.accessKeyId)}`),
-    Console.log(`  secretAccessKey: ${displayRedacted(creds.secretAccessKey)}`),
-    creds.sessionToken
-        ? Console.log(`  sessionToken:    ${displayRedacted(creds.sessionToken)}`)
-        : Effect.void,
-    creds.region
-        ? Console.log(`  region:          ${creds.region}`)
-        : Effect.void,
-    Console.log(
-    //@ts-expect-error
-    `  source: ${creds.source.details ? `${creds.source.type} - ${creds.source.details}` : creds.source.type}`),
-])), Effect.catch((e) => Console.error(`  Failed to retrieve credentials: ${e}`)));
+const loginSSO = (config) => Clank.info(`AWS SSO: running 'aws sso login --profile ${config.ssoProfile}'...`).pipe(Effect.andThen(runSsoCommand("login", config.ssoProfile)), Effect.matchEffect({
+    onSuccess: () => Clank.success("AWS SSO: login complete"),
+    onFailure: (e) => Clank.warn(`AWS SSO: login faield: \`${e.message}\``),
+}));
 /**
  * `aws sso logout` only clears AWS CLI's own caches — it does not know about the
  * `<sha1(sso_session)>.credentials.json` file that `@distilled.cloud/aws`
@@ -133,70 +67,145 @@ const clearDistilledSsoCache = (ssoProfile) => Effect.gen(function* () {
     const cacheFile = path.join(NodeOs.homedir(), ".aws", "sso", "cache", `${hash}.credentials.json`);
     yield* fs.remove(cacheFile).pipe(Effect.catch(() => Effect.void));
 }).pipe(Effect.catch(() => Effect.void));
-const logout = (profileName, config) => Match.value(config).pipe(Match.when({ method: "env" }, () => Effect.void), Match.when({ method: "sso" }, (config) => Clank.info(`AWS: running 'aws sso logout --profile ${config.ssoProfile}'...`).pipe(Effect.zip(runSsoCommand("logout", config.ssoProfile)), Effect.zip(clearDistilledSsoCache(config.ssoProfile)), Effect.match({
-    onSuccess: () => Clank.success("AWS: SSO logout complete"),
-    onFailure: (e) => Clank.warn(`AWS: SSO logout failed: \`${e.message}\``),
-}))), Match.when({ method: "stored" }, () => deleteCredentials(profileName, "aws").pipe(Effect.andThen(Clank.success("AWS: stored credentials removed")))), Match.exhaustive);
-const login = (profileName, config) => Match.value(config)
-    .pipe(Match.when({ method: "env" }, () => Effect.void), Match.when({ method: "sso" }, (config) => DistilledAuth.loadProfileCredentials(config.ssoProfile).pipe(Effect.matchEffect({
-    onSuccess: () => Clank.info(`AWS: SSO profile '${config.ssoProfile}' already has valid credentials`),
-    onFailure: () => loginSSO(config),
-}))), Match.when({ method: "stored" }, () => readCredentials(profileName, "aws").pipe(Effect.flatMap((creds) => creds == null ? loginStored(profileName) : Effect.void))), Match.exhaustive)
-    .pipe(Effect.mapError((e) => new AuthError({ message: "login failed", cause: e })));
-const configureCredentials = (profileName, ctx) => Effect.gen(function* () {
-    if (ctx.ci) {
-        return { method: "env" };
-    }
-    return yield* configureInteractive(profileName);
-}).pipe(Effect.mapError((e) => new AuthError({
-    message: "failed to configure credentials",
-    cause: e,
-})));
-const configureInteractive = (profileName) => Clank.select({
-    message: "AWS authentication method",
-    options,
-}).pipe(Effect.flatMap((method) => Match.value(method).pipe(Match.when("env", () => Effect.succeed({ method: "env" })), Match.when("sso", () => Effect.gen(function* () {
-    const ssoProfile = yield* Clank.text({
-        message: "AWS profile name (from ~/.aws/config)",
-        placeholder: "default",
-        defaultValue: "default",
+/**
+ * Layer that registers the AWS {@link AuthProvider} into the
+ * {@link AuthProviders} registry when built. Include this in the AWS
+ * `providers()` layer so `alchemy login` can discover it.
+ */
+export const AwsAuth = AuthProviderLayer()(AWS_AUTH_PROVIDER_NAME, Effect.gen(function* () {
+    const store = yield* CredentialsStore;
+    const loginStored = Effect.fnUntraced(function* (profileName) {
+        const accessKeyId = yield* Clank.text({
+            message: "AWS Access Key ID",
+            validate: (v) => (v.length === 0 ? "Required" : undefined),
+        }).pipe(retryOnce);
+        const secretAccessKey = yield* Clank.password({
+            message: "AWS Secret Access Key",
+            validate: (v) => (v.length === 0 ? "Required" : undefined),
+        }).pipe(retryOnce);
+        const sessionToken = yield* Clank.text({
+            message: "AWS Session Token (optional — press Enter or Esc to skip)",
+            placeholder: "(none)",
+        }).pipe(Effect.catch(() => Effect.succeed("")));
+        const region = yield* Clank.text({
+            message: "AWS Region",
+            placeholder: "us-east-1",
+            defaultValue: "us-east-1",
+        }).pipe(retryOnce);
+        yield* store.write(profileName, "aws", {
+            accessKeyId,
+            secretAccessKey,
+            sessionToken,
+            region,
+        });
+        yield* Clank.success("AWS credentials saved.");
+        return { method: "stored" };
     });
-    const config = {
-        method: "sso",
-        ssoProfile: ssoProfile ?? "default",
+    const configureInteractive = (profileName) => Clank.select({
+        message: "AWS authentication method",
+        options,
+    }).pipe(Effect.flatMap((method) => Match.value(method).pipe(Match.when("env", () => Effect.succeed({ method: "env" })), Match.when("sso", () => Effect.gen(function* () {
+        const ssoProfile = yield* Clank.text({
+            message: "AWS profile name (from ~/.aws/config)",
+            placeholder: "default",
+            defaultValue: "default",
+        });
+        const config = {
+            method: "sso",
+            ssoProfile: ssoProfile ?? "default",
+        };
+        yield* loginSSO(config);
+        return config;
+    })), Match.when("stored", () => loginStored(profileName)), Match.exhaustive)));
+    const configureCredentials = (profileName, ctx) => Effect.gen(function* () {
+        if (ctx.ci) {
+            return { method: "env" };
+        }
+        return yield* configureInteractive(profileName);
+    }).pipe(Effect.mapError((e) => new AuthError({
+        message: "failed to configure credentials",
+        cause: e,
+    })));
+    const resolveCredentials = (profileName, config) => Match.value(config)
+        .pipe(Match.when({ method: "env" }, Effect.fnUntraced(function* () {
+        const accessKeyId = yield* getEnvRedactedRequired("AWS_ACCESS_KEY_ID");
+        const secretAccessKey = yield* getEnvRedactedRequired("AWS_SECRET_ACCESS_KEY");
+        const sessionToken = yield* getEnvRedacted("AWS_SESSION_TOKEN");
+        const region = yield* (getEnv("AWS_REGION") ??
+            getEnv("AWS_DEFAULT_REGION") ??
+            undefined);
+        return {
+            accessKeyId,
+            secretAccessKey,
+            sessionToken,
+            region,
+            source: { type: "env" },
+        };
+    })), Match.when({ method: "stored" }, () => store.read(profileName, "aws").pipe(Effect.flatMap((creds) => creds == null
+        ? Effect.fail(new AuthError({
+            message: "AWS stored credentials not found. Run: alchemy-effect login --configure",
+        }))
+        : Effect.succeed({
+            accessKeyId: Redacted.make(creds.accessKeyId),
+            secretAccessKey: Redacted.make(creds.secretAccessKey),
+            sessionToken: creds.sessionToken
+                ? Redacted.make(creds.sessionToken)
+                : undefined,
+            region: creds.region,
+            source: { type: "stored" },
+        })))), Match.when({ method: "sso" }, (config) => Effect.gen(function* () {
+        const auth = yield* DistilledAuth.Default;
+        const creds = yield* auth
+            .loadProfileCredentials(config.ssoProfile)
+            .pipe(Effect.mapError((e) => new AuthError({
+            message: "failed to load credentials",
+            cause: e,
+        })));
+        const profile = yield* auth
+            .loadProfile(config.ssoProfile)
+            .pipe(Effect.catch(() => Effect.succeed(undefined)));
+        return {
+            accessKeyId: creds.accessKeyId,
+            secretAccessKey: creds.secretAccessKey,
+            sessionToken: creds.sessionToken,
+            region: profile?.region,
+            source: { type: "sso", details: config.ssoProfile },
+        };
+    })), Match.exhaustive)
+        .pipe(Effect.mapError((e) => new AuthError({ message: "login failed", cause: e })));
+    const prettyPrint = (profileName, config) => resolveCredentials(profileName, config).pipe(Effect.tap((creds) => Effect.all([
+        Console.log(`  accessKeyId:     ${displayRedacted(creds.accessKeyId)}`),
+        Console.log(`  secretAccessKey: ${displayRedacted(creds.secretAccessKey)}`),
+        creds.sessionToken
+            ? Console.log(`  sessionToken:    ${displayRedacted(creds.sessionToken)}`)
+            : Effect.void,
+        creds.region
+            ? Console.log(`  region:          ${creds.region}`)
+            : Effect.void,
+        Console.log(
+        //@ts-expect-error
+        `  source: ${creds.source.details ? `${creds.source.type} - ${creds.source.details}` : creds.source.type}`),
+    ])), Effect.catch((e) => Console.error(`  Failed to retrieve credentials: ${e}`)));
+    const logout = (profileName, config) => Match.value(config).pipe(Match.when({ method: "env" }, () => Effect.void), Match.when({ method: "sso" }, (config) => Clank.info(`AWS: running 'aws sso logout --profile ${config.ssoProfile}'...`).pipe(Effect.zip(runSsoCommand("logout", config.ssoProfile)), Effect.zip(clearDistilledSsoCache(config.ssoProfile)), Effect.match({
+        onSuccess: () => Clank.success("AWS: SSO logout complete"),
+        onFailure: (e) => Clank.warn(`AWS: SSO logout failed: \`${e.message}\``),
+    }))), Match.when({ method: "stored" }, () => store
+        .delete(profileName, "aws")
+        .pipe(Effect.andThen(Clank.success("AWS: stored credentials removed")))), Match.exhaustive);
+    const login = (profileName, config) => Match.value(config)
+        .pipe(Match.when({ method: "env" }, () => Effect.void), Match.when({ method: "sso" }, (config) => DistilledAuth.loadProfileCredentials(config.ssoProfile).pipe(Effect.matchEffect({
+        onSuccess: () => Clank.info(`AWS: SSO profile '${config.ssoProfile}' already has valid credentials`),
+        onFailure: () => loginSSO(config),
+    }))), Match.when({ method: "stored" }, () => store
+        .read(profileName, "aws")
+        .pipe(Effect.flatMap((creds) => creds == null ? loginStored(profileName) : Effect.void))), Match.exhaustive)
+        .pipe(Effect.mapError((e) => new AuthError({ message: "login failed", cause: e })));
+    return {
+        configure: configureCredentials,
+        login,
+        logout,
+        prettyPrint,
+        read: resolveCredentials,
     };
-    yield* loginSSO(config);
-    return config;
-})), Match.when("stored", () => loginStored(profileName)), Match.exhaustive)));
-const loginSSO = (config) => Clank.info(`AWS SSO: running 'aws sso login --profile ${config.ssoProfile}'...`).pipe(Effect.andThen(runSsoCommand("login", config.ssoProfile)), Effect.matchEffect({
-    onSuccess: () => Clank.success("AWS SSO: login complete"),
-    onFailure: (e) => Clank.warn(`AWS SSO: login faield: \`${e.message}\``),
 }));
-const loginStored = Effect.fnUntraced(function* (profileName) {
-    const accessKeyId = yield* Clank.text({
-        message: "AWS Access Key ID",
-        validate: (v) => (v.length === 0 ? "Required" : undefined),
-    }).pipe(retryOnce);
-    const secretAccessKey = yield* Clank.password({
-        message: "AWS Secret Access Key",
-        validate: (v) => (v.length === 0 ? "Required" : undefined),
-    }).pipe(retryOnce);
-    const sessionToken = yield* Clank.text({
-        message: "AWS Session Token (optional — press Enter or Esc to skip)",
-        placeholder: "(none)",
-    }).pipe(Effect.catch(() => Effect.succeed("")));
-    const region = yield* Clank.text({
-        message: "AWS Region",
-        placeholder: "us-east-1",
-        defaultValue: "us-east-1",
-    }).pipe(retryOnce);
-    yield* writeCredentials(profileName, "aws", {
-        accessKeyId,
-        secretAccessKey,
-        sessionToken,
-        region,
-    });
-    yield* Clank.success("AWS credentials saved.");
-    return { method: "stored" };
-});
 //# sourceMappingURL=AuthProvider.js.map

package/lib/AWS/AuthProvider.js.map

@@ -1 +1 @@
-{"version":3,"file":"AuthProvider.js","sourceRoot":"","sources":["../../src/AWS/AuthProvider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,aAAa,MAAM,2BAA2B,CAAC;AAC3D,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAC1C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,UAAU,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AACpC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,KAAK,UAAU,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,MAAM,MAAM,SAAS,CAAC;AAClC,OAAO,EACL,SAAS,EACT,iBAAiB,GAElB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,iBAAiB,EACjB,eAAe,EACf,eAAe,EACf,gBAAgB,GACjB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,MAAM,EACN,cAAc,EACd,sBAAsB,EACtB,SAAS,GACV,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,KAAK,MAAM,kBAAkB,CAAC;AAE1C,MAAM,CAAC,MAAM,sBAAsB,GAAG,KAAK,CAAC;AAE5C;;;;GAIG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,iBAAiB,EAGrC,CAAC,sBAAsB,EAAE;IAC1B,SAAS,EAAE,CAAC,WAAW,EAAE,GAAG,EAAE,EAAE,CAAC,oBAAoB,CAAC,WAAW,EAAE,GAAG,CAAC;IACvE,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC;IAC1D,MAAM,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC;IAC5D,WAAW,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,WAAW,EAAE,MAAM,CAAC;IACtE,IAAI,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,CAAC,kBAAkB,CAAC,WAAW,EAAE,MAAM,CAAC;CACvE,CAAC,CAAC;AAOH,MAAM,OAAO,GAIR;IACH;QACE,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,uDAAuD;KAC9D;IACD;QACE,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,uBAAuB;QAC9B,IAAI,EAAE,2CAA2C;KAClD;IACD;QACE,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,QAAQ;QACf,IAAI,EAAE,kCAAkC;KACzC;CACF,CAAC;AAoBF,MAAM,aAAa,GAAG,CAAC,OAA2B,EAAE,UAAkB,EAAE,EAAE,CACxE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,IAAI,CACrC,KAAK,EACL,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,CAAC,EACzC;QACE,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE,SAAS;QACjB,MAAM,EAAE,SAAS;KAClB,CACF,CAAC;IACF,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;IACpC,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;QACf,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAChB,IAAI,SAAS,CAAC;YACZ,OAAO,EAAE,WAAW,OAAO,qBAAqB,IAAI,EAAE;SACvD,CAAC,CACH,CAAC;IACJ,CAAC;AACH,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAEzB,MAAM,kBAAkB,GAAG,CAAC,WAAmB,EAAE,MAAqB,EAAE,EAAE,CACxE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;KAChB,IAAI,CACH,KAAK,CAAC,IAAI,CACR,EAAE,MAAM,EAAE,KAAK,EAAE,EACjB,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;IACzB,MAAM,WAAW,GACf,KAAK,CAAC,CAAC,sBAAsB,CAAC,mBAAmB,CAAC,CAAC;IACrD,MAAM,eAAe,GAAG,KAAK,CAAC,CAAC,sBAAsB,CACnD,uBAAuB,CACxB,CAAC;IACF,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,mBAAmB,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CACpB,MAAM,CAAC,YAAY,CAAC,IAAI,MAAM,CAAC,oBAAoB,CAAC,IAAI,SAAS,CAClE,CAAC;IACF,OAAO;QACL,WAAW;QACX,eAAe;QACf,YAAY;QACZ,MAAM;QACN,MAAM,EAAE,EAAE,IAAI,EAAE,KAAc,EAAE;KACjC,CAAC;AACJ,CAAC,CAAC,CACH,EACD,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,CACpC,eAAe,CAAuB,WAAW,EAAE,KAAK,CAAC,CAAC,IAAI,CAC5D,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CACvB,KAAK,IAAI,IAAI;IACX,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,IAAI,SAAS,CAAC;QACZ,OAAO,EACL,yEAAyE;KAC5E,CAAC,CACH;IACH,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;QACb,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;QAC7C,eAAe,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC;QACrD,YAAY,EAAE,KAAK,CAAC,YAAY;YAC9B,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC;YACnC,CAAC,CAAC,SAAS;QACb,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,MAAM,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE;KACpC,CAAC,CACP,CACF,CACF,EACD,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,CACvC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC;IAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,IAAI;SACtB,sBAAsB,CAAC,MAAM,CAAC,UAAU,CAAC;SACzC,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,CAAC,EAAE,EAAE,CACJ,IAAI,SAAS,CAAC;QACZ,OAAO,EAAE,4BAA4B;QACrC,KAAK,EAAE,CAAC;KACT,CAAC,CACL,CACF,CAAC;IACJ,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,IAAI;SACxB,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC;SAC9B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACvD,OAAO;QACL,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,MAAM,EAAE,OAAO,EAAE,MAAM;QACvB,MAAM,EAAE,EAAE,IAAI,EAAE,KAAc,EAAE,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE;KAC7D,CAAC;AACJ,CAAC,CAAC,CACH,EACD,KAAK,CAAC,UAAU,CACjB;KACA,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAC5D,CACF,CAAC;AAEN,MAAM,WAAW,GAAG,CAAC,WAAmB,EAAE,MAAqB,EAAE,EAAE,CACjE,kBAAkB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,IAAI,CAC1C,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACnB,MAAM,CAAC,GAAG,CAAC;IACT,OAAO,CAAC,GAAG,CAAC,sBAAsB,eAAe,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;IACvE,OAAO,CAAC,GAAG,CACT,sBAAsB,eAAe,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAC/D;IACD,KAAK,CAAC,YAAY;QAChB,CAAC,CAAC,OAAO,CAAC,GAAG,CACT,sBAAsB,eAAe,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAC5D;QACH,CAAC,CAAC,MAAM,CAAC,IAAI;IACf,KAAK,CAAC,MAAM;QACV,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,CAAC,MAAM,EAAE,CAAC;QACnD,CAAC,CAAC,MAAM,CAAC,IAAI;IACf,OAAO,CAAC,GAAG;IACT,kBAAkB;IAClB,aAAa,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAC3G;CACF,CAAC,CACH,EACD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CACjB,OAAO,CAAC,KAAK,CAAC,qCAAqC,CAAC,EAAE,CAAC,CACxD,CACF,CAAC;AAEJ;;;;;;GAMG;AACH,MAAM,sBAAsB,GAAG,CAAC,UAAkB,EAAE,EAAE,CACpD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC;IAC1C,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;IACpD,MAAM,UAAU,GAAI,OAAoC,CAAC,WAAW,CAAC;IACrE,IAAI,CAAC,UAAU;QAAE,OAAO;IACxB,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;IACxC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;IAC9B,MAAM,IAAI,GAAG,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5E,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CACzB,MAAM,CAAC,OAAO,EAAE,EAChB,MAAM,EACN,KAAK,EACL,OAAO,EACP,GAAG,IAAI,mBAAmB,CAC3B,CAAC;IACF,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;AACpE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;AAE3C,MAAM,MAAM,GAAG,CAAC,WAAmB,EAAE,MAAqB,EAAE,EAAE,CAC5D,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CACtB,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAChD,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,CACvC,KAAK,CAAC,IAAI,CACR,0CAA0C,MAAM,CAAC,UAAU,MAAM,CAClE,CAAC,IAAI,CACJ,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,EACtD,MAAM,CAAC,GAAG,CAAC,sBAAsB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,EACrD,MAAM,CAAC,KAAK,CAAC;IACX,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,0BAA0B,CAAC;IAC1D,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CACf,KAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC,OAAO,IAAI,CAAC;CACzD,CAAC,CACH,CACF,EACD,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,CACpC,iBAAiB,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,IAAI,CACxC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC,CACjE,CACF,EACD,KAAK,CAAC,UAAU,CACjB,CAAC;AAEJ,MAAM,KAAK,GAAG,CAAC,WAAmB,EAAE,MAAqB,EAAE,EAAE,CAC3D,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;KAChB,IAAI,CACH,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAChD,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,CACvC,aAAa,CAAC,sBAAsB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAC1D,MAAM,CAAC,WAAW,CAAC;IACjB,SAAS,EAAE,GAAG,EAAE,CACd,KAAK,CAAC,IAAI,CACR,qBAAqB,MAAM,CAAC,UAAU,iCAAiC,CACxE;IACH,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC;CAClC,CAAC,CACH,CACF,EACD,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,CACpC,eAAe,CAAuB,WAAW,EAAE,KAAK,CAAC,CAAC,IAAI,CAC5D,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CACvB,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CACvD,CACF,CACF,EACD,KAAK,CAAC,UAAU,CACjB;KACA,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAC5D,CACF,CAAC;AAEN,MAAM,oBAAoB,GAAG,CAAC,WAAmB,EAAE,GAAqB,EAAE,EAAE,CAC1E,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;QACX,OAAO,EAAE,MAAM,EAAE,KAAc,EAAE,CAAC;IACpC,CAAC;IACD,OAAO,KAAK,CAAC,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC;AAClD,CAAC,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,QAAQ,CACb,CAAC,CAAC,EAAE,EAAE,CACJ,IAAI,SAAS,CAAC;IACZ,OAAO,EAAE,iCAAiC;IAC1C,KAAK,EAAE,CAAC;CACT,CAAC,CACL,CACF,CAAC;AAEJ,MAAM,oBAAoB,GAAG,CAAC,WAAmB,EAAE,EAAE,CACnD,KAAK,CAAC,MAAM,CAAC;IACX,OAAO,EAAE,2BAA2B;IACpC,OAAO;CACR,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CACxB,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CACtB,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAc,EAAE,CAAC,CAAC,EACnE,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CACrB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;QACnC,OAAO,EAAE,uCAAuC;QAChD,WAAW,EAAE,SAAS;QACtB,YAAY,EAAE,SAAS;KACxB,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG;QACb,MAAM,EAAE,KAAc;QACtB,UAAU,EAAE,UAAU,IAAI,SAAS;KACpC,CAAC;IAEF,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAExB,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC,CACH,EACD,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,EACpD,KAAK,CAAC,UAAU,CACjB,CACF,CACF,CAAC;AAEJ,MAAM,QAAQ,GAAG,CAAC,MAAiD,EAAE,EAAE,CACrE,KAAK,CAAC,IAAI,CACR,6CAA6C,MAAM,CAAC,UAAU,MAAM,CACrE,CAAC,IAAI,CACJ,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,EACzD,MAAM,CAAC,WAAW,CAAC;IACjB,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,yBAAyB,CAAC;IACzD,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC,OAAO,IAAI,CAAC;CACxE,CAAC,CACH,CAAC;AAEJ,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,WAAmB;IAClE,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;QACpC,OAAO,EAAE,mBAAmB;QAC5B,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;KAC3D,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAEnB,MAAM,eAAe,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC5C,OAAO,EAAE,uBAAuB;QAChC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;KAC3D,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAEnB,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;QACrC,OAAO,EAAE,2DAA2D;QACpE,WAAW,EAAE,QAAQ;KACtB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAEhD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;QAC/B,OAAO,EAAE,YAAY;QACrB,WAAW,EAAE,WAAW;QACxB,YAAY,EAAE,WAAW;KAC1B,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAEnB,KAAK,CAAC,CAAC,gBAAgB,CAAuB,WAAW,EAAE,KAAK,EAAE;QAChE,WAAW;QACX,eAAe;QACf,YAAY;QACZ,MAAM;KACP,CAAC,CAAC;IACH,KAAK,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAE/C,OAAO,EAAE,MAAM,EAAE,QAAiB,EAAE,CAAC;AACvC,CAAC,CAAC,CAAC"}
+{"version":3,"file":"AuthProvider.js","sourceRoot":"","sources":["../../src/AWS/AuthProvider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,aAAa,MAAM,2BAA2B,CAAC;AAC3D,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAC1C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,UAAU,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AACpC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,KAAK,UAAU,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,MAAM,MAAM,SAAS,CAAC;AAClC,OAAO,EACL,SAAS,EACT,iBAAiB,GAElB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC3E,OAAO,EACL,MAAM,EACN,cAAc,EACd,sBAAsB,EACtB,SAAS,GACV,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,KAAK,MAAM,kBAAkB,CAAC;AAE1C,MAAM,CAAC,MAAM,sBAAsB,GAAG,KAAK,CAAC;AAO5C,MAAM,OAAO,GAIR;IACH;QACE,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,uDAAuD;KAC9D;IACD;QACE,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,uBAAuB;QAC9B,IAAI,EAAE,2CAA2C;KAClD;IACD;QACE,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,QAAQ;QACf,IAAI,EAAE,kCAAkC;KACzC;CACF,CAAC;AAoBF,MAAM,aAAa,GAAG,CAAC,OAA2B,EAAE,UAAkB,EAAE,EAAE,CACxE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,IAAI,CACrC,KAAK,EACL,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,CAAC,EACzC;QACE,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE,SAAS;QACjB,MAAM,EAAE,SAAS;KAClB,CACF,CAAC;IACF,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;IACpC,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;QACf,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAChB,IAAI,SAAS,CAAC;YACZ,OAAO,EAAE,WAAW,OAAO,qBAAqB,IAAI,EAAE;SACvD,CAAC,CACH,CAAC;IACJ,CAAC;AACH,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAEzB,MAAM,QAAQ,GAAG,CAAC,MAAiD,EAAE,EAAE,CACrE,KAAK,CAAC,IAAI,CACR,6CAA6C,MAAM,CAAC,UAAU,MAAM,CACrE,CAAC,IAAI,CACJ,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,EACzD,MAAM,CAAC,WAAW,CAAC;IACjB,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,yBAAyB,CAAC;IACzD,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC,OAAO,IAAI,CAAC;CACxE,CAAC,CACH,CAAC;AAEJ;;;;;;GAMG;AACH,MAAM,sBAAsB,GAAG,CAAC,UAAkB,EAAE,EAAE,CACpD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC;IAC1C,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;IACpD,MAAM,UAAU,GAAI,OAAoC,CAAC,WAAW,CAAC;IACrE,IAAI,CAAC,UAAU;QAAE,OAAO;IACxB,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;IACxC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;IAC9B,MAAM,IAAI,GAAG,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5E,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CACzB,MAAM,CAAC,OAAO,EAAE,EAChB,MAAM,EACN,KAAK,EACL,OAAO,EACP,GAAG,IAAI,mBAAmB,CAC3B,CAAC;IACF,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;AACpE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;AAE3C;;;;GAIG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,iBAAiB,EAGrC,CACD,sBAAsB,EACtB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,gBAAgB,CAAC;IAEtC,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,WAAmB;QAClE,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;YACpC,OAAO,EAAE,mBAAmB;YAC5B,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;SAC3D,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAEnB,MAAM,eAAe,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC;YAC5C,OAAO,EAAE,uBAAuB;YAChC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;SAC3D,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAEnB,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;YACrC,OAAO,EAAE,2DAA2D;YACpE,WAAW,EAAE,QAAQ;SACtB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAEhD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;YAC/B,OAAO,EAAE,YAAY;YACrB,WAAW,EAAE,WAAW;YACxB,YAAY,EAAE,WAAW;SAC1B,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAEnB,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAuB,WAAW,EAAE,KAAK,EAAE;YAC3D,WAAW;YACX,eAAe;YACf,YAAY;YACZ,MAAM;SACP,CAAC,CAAC;QACH,KAAK,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;QAE/C,OAAO,EAAE,MAAM,EAAE,QAAiB,EAAE,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,MAAM,oBAAoB,GAAG,CAAC,WAAmB,EAAE,EAAE,CACnD,KAAK,CAAC,MAAM,CAAC;QACX,OAAO,EAAE,2BAA2B;QACpC,OAAO;KACR,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CACxB,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CACtB,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAc,EAAE,CAAC,CAAC,EACnE,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CACrB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;YACnC,OAAO,EAAE,uCAAuC;YAChD,WAAW,EAAE,SAAS;YACtB,YAAY,EAAE,SAAS;SACxB,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG;YACb,MAAM,EAAE,KAAc;YACtB,UAAU,EAAE,UAAU,IAAI,SAAS;SACpC,CAAC;QAEF,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAExB,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CACH,EACD,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,EACpD,KAAK,CAAC,UAAU,CACjB,CACF,CACF,CAAC;IAEJ,MAAM,oBAAoB,GAAG,CAAC,WAAmB,EAAE,GAAqB,EAAE,EAAE,CAC1E,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;YACX,OAAO,EAAE,MAAM,EAAE,KAAc,EAAE,CAAC;QACpC,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,QAAQ,CACb,CAAC,CAAC,EAAE,EAAE,CACJ,IAAI,SAAS,CAAC;QACZ,OAAO,EAAE,iCAAiC;QAC1C,KAAK,EAAE,CAAC;KACT,CAAC,CACL,CACF,CAAC;IAEJ,MAAM,kBAAkB,GAAG,CAAC,WAAmB,EAAE,MAAqB,EAAE,EAAE,CACxE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;SAChB,IAAI,CACH,KAAK,CAAC,IAAI,CACR,EAAE,MAAM,EAAE,KAAK,EAAE,EACjB,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;QACzB,MAAM,WAAW,GACf,KAAK,CAAC,CAAC,sBAAsB,CAAC,mBAAmB,CAAC,CAAC;QACrD,MAAM,eAAe,GAAG,KAAK,CAAC,CAAC,sBAAsB,CACnD,uBAAuB,CACxB,CAAC;QACF,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,mBAAmB,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CACpB,MAAM,CAAC,YAAY,CAAC;YAClB,MAAM,CAAC,oBAAoB,CAAC;YAC5B,SAAS,CACZ,CAAC;QACF,OAAO;YACL,WAAW;YACX,eAAe;YACf,YAAY;YACZ,MAAM;YACN,MAAM,EAAE,EAAE,IAAI,EAAE,KAAc,EAAE;SACjC,CAAC;IACJ,CAAC,CAAC,CACH,EACD,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,CACpC,KAAK,CAAC,IAAI,CAAuB,WAAW,EAAE,KAAK,CAAC,CAAC,IAAI,CACvD,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CACvB,KAAK,IAAI,IAAI;QACX,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,IAAI,SAAS,CAAC;YACZ,OAAO,EACL,yEAAyE;SAC5E,CAAC,CACH;QACH,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;YACb,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;YAC7C,eAAe,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC;YACrD,YAAY,EAAE,KAAK,CAAC,YAAY;gBAC9B,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC;gBACnC,CAAC,CAAC,SAAS;YACb,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE;SACpC,CAAC,CACP,CACF,CACF,EACD,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,CACvC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC;QAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,IAAI;aACtB,sBAAsB,CAAC,MAAM,CAAC,UAAU,CAAC;aACzC,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,CAAC,EAAE,EAAE,CACJ,IAAI,SAAS,CAAC;YACZ,OAAO,EAAE,4BAA4B;YACrC,KAAK,EAAE,CAAC;SACT,CAAC,CACL,CACF,CAAC;QACJ,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,IAAI;aACxB,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC;aAC9B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACvD,OAAO;YACL,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,MAAM,EAAE,OAAO,EAAE,MAAM;YACvB,MAAM,EAAE,EAAE,IAAI,EAAE,KAAc,EAAE,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE;SAC7D,CAAC;IACJ,CAAC,CAAC,CACH,EACD,KAAK,CAAC,UAAU,CACjB;SACA,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAC5D,CACF,CAAC;IAEN,MAAM,WAAW,GAAG,CAAC,WAAmB,EAAE,MAAqB,EAAE,EAAE,CACjE,kBAAkB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,IAAI,CAC1C,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACnB,MAAM,CAAC,GAAG,CAAC;QACT,OAAO,CAAC,GAAG,CACT,sBAAsB,eAAe,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAC3D;QACD,OAAO,CAAC,GAAG,CACT,sBAAsB,eAAe,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAC/D;QACD,KAAK,CAAC,YAAY;YAChB,CAAC,CAAC,OAAO,CAAC,GAAG,CACT,sBAAsB,eAAe,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAC5D;YACH,CAAC,CAAC,MAAM,CAAC,IAAI;QACf,KAAK,CAAC,MAAM;YACV,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,CAAC,MAAM,EAAE,CAAC;YACnD,CAAC,CAAC,MAAM,CAAC,IAAI;QACf,OAAO,CAAC,GAAG;QACT,kBAAkB;QAClB,aAAa,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAC3G;KACF,CAAC,CACH,EACD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CACjB,OAAO,CAAC,KAAK,CAAC,qCAAqC,CAAC,EAAE,CAAC,CACxD,CACF,CAAC;IAEJ,MAAM,MAAM,GAAG,CAAC,WAAmB,EAAE,MAAqB,EAAE,EAAE,CAC5D,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CACtB,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAChD,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,CACvC,KAAK,CAAC,IAAI,CACR,0CAA0C,MAAM,CAAC,UAAU,MAAM,CAClE,CAAC,IAAI,CACJ,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,EACtD,MAAM,CAAC,GAAG,CAAC,sBAAsB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,EACrD,MAAM,CAAC,KAAK,CAAC;QACX,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,0BAA0B,CAAC;QAC1D,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CACf,KAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC,OAAO,IAAI,CAAC;KACzD,CAAC,CACH,CACF,EACD,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,CACpC,KAAK;SACF,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC;SAC1B,IAAI,CACH,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC,CACjE,CACJ,EACD,KAAK,CAAC,UAAU,CACjB,CAAC;IAEJ,MAAM,KAAK,GAAG,CAAC,WAAmB,EAAE,MAAqB,EAAE,EAAE,CAC3D,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;SAChB,IAAI,CACH,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAChD,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,CACvC,aAAa,CAAC,sBAAsB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAC1D,MAAM,CAAC,WAAW,CAAC;QACjB,SAAS,EAAE,GAAG,EAAE,CACd,KAAK,CAAC,IAAI,CACR,qBAAqB,MAAM,CAAC,UAAU,iCAAiC,CACxE;QACH,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC;KAClC,CAAC,CACH,CACF,EACD,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,CACpC,KAAK;SACF,IAAI,CAAuB,WAAW,EAAE,KAAK,CAAC;SAC9C,IAAI,CACH,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CACvB,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CACvD,CACF,CACJ,EACD,KAAK,CAAC,UAAU,CACjB;SACA,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAC5D,CACF,CAAC;IAEN,OAAO;QACL,SAAS,EAAE,oBAAoB;QAC/B,KAAK;QACL,MAAM;QACN,WAAW;QACX,IAAI,EAAE,kBAAkB;KACzB,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}

package/lib/AWS/Bootstrap.d.ts

@@ -22,9 +22,9 @@ export declare const lookupAssetsBucket: Effect.Effect<Option.Option<string>, s3
 export declare const bootstrap: () => Effect.Effect<{
     bucketName: string;
     created: boolean;
-}, import("@distilled.cloud/aws/Errors").UnknownAwsError | import("@distilled.cloud/aws/Errors").AccessDeniedException | import("@distilled.cloud/aws/Errors").ExpiredTokenException | import("@distilled.cloud/aws/Errors").IncompleteSignature | import("@distilled.cloud/aws/Errors").InternalFailure | import("@distilled.cloud/aws/Errors").MalformedHttpRequestException | import("@distilled.cloud/aws/Errors").NotAuthorized | import("@distilled.cloud/aws/Errors").OptInRequired | import("@distilled.cloud/aws/Errors").RequestAbortedException | import("@distilled.cloud/aws/Errors").RequestEntityTooLargeException | import("@distilled.cloud/aws/Errors").RequestExpired | import("@distilled.cloud/aws/Errors").RequestTimeoutException | import("@distilled.cloud/aws/Errors").ServiceUnavailable | import("@distilled.cloud/aws/Errors").ThrottlingException | import("@distilled.cloud/aws/Errors").UnrecognizedClientException | import("@distilled.cloud/aws/Errors").UnknownOperationException | import("@distilled.cloud/aws/Errors").ValidationError | import("@distilled.cloud/aws/Errors").ValidationException | import("@distilled.cloud/aws/Errors").OperationAborted | import("@distilled.cloud/aws/Errors").EndpointError | import("@distilled.cloud/aws/Errors").NoMatchingRuleError | s3.RequestLimitExceeded | s3.RequestError | s3.NoSuchBucket | s3.PermanentRedirect | s3.BucketAlreadyExists | s3.IllegalLocationConstraintException | s3.InvalidArgument | s3.InvalidBucketName | s3.InvalidLocationConstraint | s3.NotFound | s3.ParseError, import("effect/unstable/http/HttpClient").HttpClient | Region | import("@distilled.cloud/aws/Credentials").Credentials | AWSEnvironment>;
+}, import("@distilled.cloud/aws/Errors").UnknownAwsError | import("@distilled.cloud/aws/Errors").AccessDeniedException | import("@distilled.cloud/aws/Errors").ExpiredTokenException | import("@distilled.cloud/aws/Errors").IncompleteSignature | import("@distilled.cloud/aws/Errors").InternalFailure | import("@distilled.cloud/aws/Errors").MalformedHttpRequestException | import("@distilled.cloud/aws/Errors").NotAuthorized | import("@distilled.cloud/aws/Errors").OptInRequired | import("@distilled.cloud/aws/Errors").RequestAbortedException | import("@distilled.cloud/aws/Errors").RequestEntityTooLargeException | import("@distilled.cloud/aws/Errors").RequestExpired | import("@distilled.cloud/aws/Errors").RequestTimeoutException | import("@distilled.cloud/aws/Errors").ServiceUnavailable | import("@distilled.cloud/aws/Errors").ThrottlingException | import("@distilled.cloud/aws/Errors").UnrecognizedClientException | import("@distilled.cloud/aws/Errors").UnknownOperationException | import("@distilled.cloud/aws/Errors").ValidationError | import("@distilled.cloud/aws/Errors").ValidationException | import("@distilled.cloud/aws/Errors").OperationAborted | import("@distilled.cloud/aws/Errors").EndpointError | import("@distilled.cloud/aws/Errors").NoMatchingRuleError | s3.RequestLimitExceeded | s3.SlowDown | s3.RequestError | s3.NoSuchBucket | s3.PermanentRedirect | s3.BucketAlreadyExists | s3.IllegalLocationConstraintException | s3.InvalidArgument | s3.InvalidBucketName | s3.InvalidLocationConstraint | s3.NotFound | s3.ParseError, import("effect/unstable/http/HttpClient").HttpClient | Region | import("@distilled.cloud/aws/Credentials").Credentials | AWSEnvironment>;
 export declare const destroyBootstrap: () => Effect.Effect<{
     bucketNames: string[];
     destroyed: number;
-}, import("@distilled.cloud/aws/Errors").UnknownAwsError | import("@distilled.cloud/aws/Errors").AccessDeniedException | import("@distilled.cloud/aws/Errors").ExpiredTokenException | import("@distilled.cloud/aws/Errors").IncompleteSignature | import("@distilled.cloud/aws/Errors").InternalFailure | import("@distilled.cloud/aws/Errors").MalformedHttpRequestException | import("@distilled.cloud/aws/Errors").NotAuthorized | import("@distilled.cloud/aws/Errors").OptInRequired | import("@distilled.cloud/aws/Errors").RequestAbortedException | import("@distilled.cloud/aws/Errors").RequestEntityTooLargeException | import("@distilled.cloud/aws/Errors").RequestExpired | import("@distilled.cloud/aws/Errors").RequestTimeoutException | import("@distilled.cloud/aws/Errors").ServiceUnavailable | import("@distilled.cloud/aws/Errors").ThrottlingException | import("@distilled.cloud/aws/Errors").UnrecognizedClientException | import("@distilled.cloud/aws/Errors").UnknownOperationException | import("@distilled.cloud/aws/Errors").ValidationError | import("@distilled.cloud/aws/Errors").ValidationException | import("@distilled.cloud/aws/Errors").OperationAborted | import("@distilled.cloud/aws/Errors").EndpointError | import("@distilled.cloud/aws/Errors").NoMatchingRuleError | s3.RequestLimitExceeded | s3.RequestError | s3.NoSuchBucket | s3.PermanentRedirect | s3.BucketNotEmpty, import("effect/unstable/http/HttpClient").HttpClient | Region | import("@distilled.cloud/aws/Credentials").Credentials>;
+}, import("@distilled.cloud/aws/Errors").UnknownAwsError | import("@distilled.cloud/aws/Errors").AccessDeniedException | import("@distilled.cloud/aws/Errors").ExpiredTokenException | import("@distilled.cloud/aws/Errors").IncompleteSignature | import("@distilled.cloud/aws/Errors").InternalFailure | import("@distilled.cloud/aws/Errors").MalformedHttpRequestException | import("@distilled.cloud/aws/Errors").NotAuthorized | import("@distilled.cloud/aws/Errors").OptInRequired | import("@distilled.cloud/aws/Errors").RequestAbortedException | import("@distilled.cloud/aws/Errors").RequestEntityTooLargeException | import("@distilled.cloud/aws/Errors").RequestExpired | import("@distilled.cloud/aws/Errors").RequestTimeoutException | import("@distilled.cloud/aws/Errors").ServiceUnavailable | import("@distilled.cloud/aws/Errors").ThrottlingException | import("@distilled.cloud/aws/Errors").UnrecognizedClientException | import("@distilled.cloud/aws/Errors").UnknownOperationException | import("@distilled.cloud/aws/Errors").ValidationError | import("@distilled.cloud/aws/Errors").ValidationException | import("@distilled.cloud/aws/Errors").OperationAborted | import("@distilled.cloud/aws/Errors").EndpointError | import("@distilled.cloud/aws/Errors").NoMatchingRuleError | s3.RequestLimitExceeded | s3.SlowDown | s3.RequestError | s3.NoSuchBucket | s3.PermanentRedirect | s3.BucketNotEmpty, import("effect/unstable/http/HttpClient").HttpClient | Region | import("@distilled.cloud/aws/Credentials").Credentials>;
 //# sourceMappingURL=Bootstrap.d.ts.map

package/lib/AWS/Bootstrap.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Bootstrap.d.ts","sourceRoot":"","sources":["../../src/AWS/Bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAC;AAErD,OAAO,KAAK,EAAE,MAAM,yBAAyB,CAAC;AAC9C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAElD;;GAEG;AACH,eAAO,MAAM,iBAAiB,2BAA2B,CAAC;AAE1D;;GAEG;AACH,eAAO,MAAM,wBAAwB,kCAAkC,CAAC;AAiDxE,eAAO,MAAM,mBAAmB,sKA4C9B,CAAC;AAEH,eAAO,MAAM,kBAAkB,mLAM7B,CAAC;AAoFH;;;;;GAKG;AACH,eAAO,MAAM,SAAS;;;6nDA6CpB,CAAC;AAEH,eAAO,MAAM,gBAAgB;;;s9CAqB3B,CAAC"}
+{"version":3,"file":"Bootstrap.d.ts","sourceRoot":"","sources":["../../src/AWS/Bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAC;AAErD,OAAO,KAAK,EAAE,MAAM,yBAAyB,CAAC;AAC9C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAElD;;GAEG;AACH,eAAO,MAAM,iBAAiB,2BAA2B,CAAC;AAE1D;;GAEG;AACH,eAAO,MAAM,wBAAwB,kCAAkC,CAAC;AAiDxE,eAAO,MAAM,mBAAmB,sKA4C9B,CAAC;AAEH,eAAO,MAAM,kBAAkB,mLAM7B,CAAC;AAoFH;;;;;GAKG;AACH,eAAO,MAAM,SAAS;;;2oDA6CpB,CAAC;AAEH,eAAO,MAAM,gBAAgB;;;o+CAqB3B,CAAC"}

package/lib/AWS/EC2/hosted.d.ts

@@ -137,6 +137,6 @@ export declare const createEc2HostedSupport: ({ accountId, region, stackName, st
     cleanupHostedRuntime: (args_0: {
         output: Ec2HostedCleanupState;
         session?: Pick<ScopedPlanStatusSession, "note">;
-    }) => Effect.Effect<void, import("@distilled.cloud/aws/Errors").CommonErrors | s3.RequestLimitExceeded | s3.NoSuchBucket | s3.PermanentRedirect | iam.InvalidInputException | iam.ServiceFailureException | iam.ConcurrentModificationException | iam.LimitExceededException | iam.DeleteConflictException | iam.UnmodifiableEntityException, import("effect/unstable/http/HttpClient").HttpClient | import("@distilled.cloud/aws/Region").Region | import("@distilled.cloud/aws/Credentials").Credentials>;
+    }) => Effect.Effect<void, import("@distilled.cloud/aws/Errors").CommonErrors | s3.RequestLimitExceeded | s3.SlowDown | s3.NoSuchBucket | s3.PermanentRedirect | iam.InvalidInputException | iam.ServiceFailureException | iam.ConcurrentModificationException | iam.LimitExceededException | iam.DeleteConflictException | iam.UnmodifiableEntityException, import("effect/unstable/http/HttpClient").HttpClient | import("@distilled.cloud/aws/Region").Region | import("@distilled.cloud/aws/Credentials").Credentials>;
 };
 //# sourceMappingURL=hosted.d.ts.map

package/lib/AWS/Environment.d.ts

@@ -4,8 +4,13 @@ import * as Config from "effect/Config";
 import * as Context from "effect/Context";
 import * as Effect from "effect/Effect";
 import * as Layer from "effect/Layer";
+import * as Redacted from "effect/Redacted";
 export declare const AWS_PROFILE: Config.Config<string>;
 export declare const AWS_REGION: Config.Config<string>;
+export declare const AWS_ACCOUNT_ID: Config.Config<string>;
+export declare const AWS_ACCESS_KEY_ID: Config.Config<string>;
+export declare const AWS_SECRET_ACCESS_KEY: Config.Config<Redacted.Redacted<string>>;
+export declare const AWS_SESSION_TOKEN: Config.Config<Redacted.Redacted<string>>;
 export type AccountID = string;
 export type RegionID = string;
 declare const FailedToGetAccount_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
@@ -37,12 +42,29 @@ declare const AWSEnvironment_base: Context.ServiceClass<AWSEnvironment, "AWS::En
 export declare class AWSEnvironment extends AWSEnvironment_base {
 }
 /**
- * Build an `AWSEnvironment` from an SSO profile (`AWS_PROFILE` env var,
- * defaults to `"default"`). Uses the profile's `sso_account_id` and `region`,
- * and resolves credentials lazily via `aws sso login`.
+ * Build an `AWSEnvironment` from one of two sources, in priority order:
+ *
+ *   1. **Environment variables** — used when `AWS_ACCESS_KEY_ID` is set, as
+ *      it is on GitHub Actions runners after `aws-actions/configure-aws-credentials`
+ *      runs (OIDC), or whenever the user has exported static creds. Requires
+ *      `AWS_SECRET_ACCESS_KEY`, `AWS_REGION`, and `AWS_ACCOUNT_ID`. The role
+ *      ARN's account ID is exported by `configure-aws-credentials` as
+ *      `AWS_ACCOUNT_ID` when invoked with `output-credentials: true`.
+ *   2. **SSO profile** (`AWS_PROFILE`, default `"default"`) — used locally
+ *      when no static creds are exported. Reads the profile's
+ *      `sso_account_id` / `region` from `~/.aws/config` and refreshes
+ *      credentials lazily via `aws sso login`.
  */
 export declare const Default: Layer.Layer<AWSEnvironment, never, import("effect/Path").Path | import("effect/FileSystem").FileSystem | import("effect/unstable/http/HttpClient").HttpClient>;
 export declare const loadDefault: () => Effect.Effect<{
+    accountId: string;
+    region: string;
+    credentials: Effect.Effect<{
+        accessKeyId: Redacted.Redacted<string>;
+        secretAccessKey: Redacted.Redacted<string>;
+        sessionToken: Redacted.Redacted<string> | undefined;
+    }, never, never>;
+} | {
     profile: string;
     accountId: string;
     region: string;

package/lib/AWS/Environment.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Environment.d.ts","sourceRoot":"","sources":["../../src/AWS/Environment.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EACzB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAC3D,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAE1C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAGtC,eAAO,MAAM,WAAW,uBAEvB,CAAC;AAEF,eAAO,MAAM,UAAU,uBAA8B,CAAC;AAEtD,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC;AAC/B,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC;;;;AAE9B,qBAAa,kBAAmB,SAAQ,wBAEtC;IACA,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,KAAK,CAAC;CACd,CAAC;CAAG;AAEL;;;;;;;;;GASG;AACH,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,SAAS,CAAC;IACrB,MAAM,EAAE,QAAQ,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,CAAC;IAClE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;;AAED,qBAAa,cAAe,SAAQ,mBAGb;CAAG;AAE1B;;;;GAIG;AACH,eAAO,MAAM,OAAO,gKAGD,CAAC;AAEpB,eAAO,MAAM,WAAW;;;;;qKAsBpB,CAAC;AAEL,MAAM,WAAW,yBAAyB;IACxC,SAAS,EAAE,SAAS,CAAC;IACrB,MAAM,EAAE,QAAQ,CAAC;IACjB,WAAW,EAAE,qBAAqB,CAAC;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAQD;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe,GAC1B,OAAO,mBAAmB,GAAG,yBAAyB,8CAYrD,CAAC"}
+{"version":3,"file":"Environment.d.ts","sourceRoot":"","sources":["../../src/AWS/Environment.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EACzB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAC3D,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAE1C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAEtC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAE5C,eAAO,MAAM,WAAW,uBAEvB,CAAC;AAEF,eAAO,MAAM,UAAU,uBAA8B,CAAC;AACtD,eAAO,MAAM,cAAc,uBAAkC,CAAC;AAC9D,eAAO,MAAM,iBAAiB,uBAAqC,CAAC;AACpE,eAAO,MAAM,qBAAqB,0CAA2C,CAAC;AAC9E,eAAO,MAAM,iBAAiB,0CAAuC,CAAC;AAEtE,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC;AAC/B,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC;;;;AAE9B,qBAAa,kBAAmB,SAAQ,wBAEtC;IACA,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,KAAK,CAAC;CACd,CAAC;CAAG;AAEL;;;;;;;;;GASG;AACH,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,SAAS,CAAC;IACrB,MAAM,EAAE,QAAQ,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,CAAC;IAClE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;;AAED,qBAAa,cAAe,SAAQ,mBAGb;CAAG;AAE1B;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,OAAO,gKAGD,CAAC;AAEpB,eAAO,MAAM,WAAW;;;;;;;;;;;;;qKAkBpB,CAAC;AA8CL,MAAM,WAAW,yBAAyB;IACxC,SAAS,EAAE,SAAS,CAAC;IACrB,MAAM,EAAE,QAAQ,CAAC;IACjB,WAAW,EAAE,qBAAqB,CAAC;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAQD;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe,GAC1B,OAAO,mBAAmB,GAAG,yBAAyB,8CAYrD,CAAC"}

package/lib/AWS/Environment.js

@@ -6,19 +6,63 @@ import * as Data from "effect/Data";
 import * as Effect from "effect/Effect";
 import * as Layer from "effect/Layer";
 import * as Option from "effect/Option";
+import * as Redacted from "effect/Redacted";
 export const AWS_PROFILE = Config.string("AWS_PROFILE").pipe(Config.withDefault("default"));
 export const AWS_REGION = Config.string("AWS_REGION");
+export const AWS_ACCOUNT_ID = Config.string("AWS_ACCOUNT_ID");
+export const AWS_ACCESS_KEY_ID = Config.string("AWS_ACCESS_KEY_ID");
+export const AWS_SECRET_ACCESS_KEY = Config.redacted("AWS_SECRET_ACCESS_KEY");
+export const AWS_SESSION_TOKEN = Config.redacted("AWS_SESSION_TOKEN");
 export class FailedToGetAccount extends Data.TaggedError("AWS::Environment::FailedToGetAccount") {
 }
 export class AWSEnvironment extends Context.Service()("AWS::Environment") {
 }
 /**
- * Build an `AWSEnvironment` from an SSO profile (`AWS_PROFILE` env var,
- * defaults to `"default"`). Uses the profile's `sso_account_id` and `region`,
- * and resolves credentials lazily via `aws sso login`.
+ * Build an `AWSEnvironment` from one of two sources, in priority order:
+ *
+ *   1. **Environment variables** — used when `AWS_ACCESS_KEY_ID` is set, as
+ *      it is on GitHub Actions runners after `aws-actions/configure-aws-credentials`
+ *      runs (OIDC), or whenever the user has exported static creds. Requires
+ *      `AWS_SECRET_ACCESS_KEY`, `AWS_REGION`, and `AWS_ACCOUNT_ID`. The role
+ *      ARN's account ID is exported by `configure-aws-credentials` as
+ *      `AWS_ACCOUNT_ID` when invoked with `output-credentials: true`.
+ *   2. **SSO profile** (`AWS_PROFILE`, default `"default"`) — used locally
+ *      when no static creds are exported. Reads the profile's
+ *      `sso_account_id` / `region` from `~/.aws/config` and refreshes
+ *      credentials lazily via `aws sso login`.
  */
 export const Default = Layer.effect(AWSEnvironment, Effect.suspend(() => loadDefault())).pipe(Layer.orDie);
 export const loadDefault = () => Effect.gen(function* () {
+    // Env-credentials path only kicks in under CI (where
+    // `aws-actions/configure-aws-credentials` exports AWS_ACCESS_KEY_ID
+    // and friends). Locally we always go through SSO so a stray
+    // AWS_ACCESS_KEY_ID in the shell doesn't silently override the
+    // user's `~/.aws/config` profile.
+    const ci = yield* Config.boolean("CI").pipe(Config.withDefault(false));
+    if (ci) {
+        const accessKeyId = yield* AWS_ACCESS_KEY_ID.pipe(Config.option, Config.map(Option.getOrUndefined));
+        if (accessKeyId) {
+            return yield* loadFromEnv(accessKeyId);
+        }
+    }
+    return yield* loadFromSso();
+});
+const loadFromEnv = (accessKeyId) => Effect.gen(function* () {
+    const secretAccessKey = yield* AWS_SECRET_ACCESS_KEY;
+    const sessionToken = yield* AWS_SESSION_TOKEN.pipe(Config.option, Config.map(Option.getOrUndefined));
+    const region = yield* AWS_REGION;
+    const accountId = yield* AWS_ACCOUNT_ID;
+    return {
+        accountId,
+        region,
+        credentials: Effect.succeed({
+            accessKeyId: Redacted.make(accessKeyId),
+            secretAccessKey,
+            sessionToken,
+        }),
+    };
+});
+const loadFromSso = () => Effect.gen(function* () {
     const profileName = yield* AWS_PROFILE;
     const auth = yield* Auth.Default;
     const profile = yield* auth.loadProfile(profileName);

package/lib/AWS/Environment.js.map

@@ -1 +1 @@
-{"version":3,"file":"Environment.js","sourceRoot":"","sources":["../../src/AWS/Environment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,2BAA2B,CAAC;AAClD,OAAO,EACL,yBAAyB,GAG1B,MAAM,kCAAkC,CAAC;AAE1C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAC1C,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AACpC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAC1D,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAC9B,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;AAKtD,MAAM,OAAO,kBAAmB,SAAQ,IAAI,CAAC,WAAW,CACtD,sCAAsC,CAItC;CAAG;AAoBL,MAAM,OAAO,cAAe,SAAQ,OAAO,CAAC,OAAO,EAGhD,CAAC,kBAAkB,CAAC;CAAG;AAE1B;;;;GAIG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CACjC,cAAc,EACd,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,CACpC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAEpB,MAAM,CAAC,MAAM,WAAW,GAAG,GAAG,EAAE,CAC9B,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC;IACvC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;IACjC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;IACrD,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CACtB,oBAAoB,WAAW,6BAA6B,CAC7D,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GACV,OAAO,CAAC,MAAM;QACd,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,IAAI,CACrB,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAChD,CAAC,CAAC;IACL,OAAO;QACL,OAAO,EAAE,WAAW;QACpB,SAAS,EAAE,OAAO,CAAC,cAAc;QACjC,MAAM;QACN,WAAW,EAAE,IAAI,CAAC,sBAAsB,CAAC,WAAW,CAAC;KACxB,CAAC;AAClC,CAAC,CAAC,CAAC;AAUL,MAAM,QAAQ,GAAG,CACf,KAAsD,EAClB,EAAE,CACtC,KAAK,CAAC,WAAW,IAAI,IAAI;IACzB,OAAQ,KAAK,CAAC,WAAqC,CAAC,WAAW,KAAK,QAAQ,CAAC;AAE/E;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,KAAsD,EACtD,EAAE,CACF,KAAK,CAAC,OAAO,CACX,cAAc,EACd,QAAQ,CAAC,KAAK,CAAC;IACb,CAAC,CAAC;QACE,GAAG,KAAK;QACR,WAAW,EAAE,MAAM,CAAC,OAAO,CACzB,yBAAyB,CAAC,KAAK,CAAC,WAAW,CAAC,CAC7C;KACF;IACH,CAAC,CAAC,KAAK,CACV,CAAC"}
+{"version":3,"file":"Environment.js","sourceRoot":"","sources":["../../src/AWS/Environment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,2BAA2B,CAAC;AAClD,OAAO,EACL,yBAAyB,GAG1B,MAAM,kCAAkC,CAAC;AAE1C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAC1C,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AACpC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAE5C,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAC1D,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAC9B,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;AACtD,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;AAC9D,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;AACpE,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC;AAC9E,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;AAKtE,MAAM,OAAO,kBAAmB,SAAQ,IAAI,CAAC,WAAW,CACtD,sCAAsC,CAItC;CAAG;AAoBL,MAAM,OAAO,cAAe,SAAQ,OAAO,CAAC,OAAO,EAGhD,CAAC,kBAAkB,CAAC;CAAG;AAE1B;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CACjC,cAAc,EACd,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,CACpC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAEpB,MAAM,CAAC,MAAM,WAAW,GAAG,GAAG,EAAE,CAC9B,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,qDAAqD;IACrD,oEAAoE;IACpE,4DAA4D;IAC5D,+DAA+D;IAC/D,kCAAkC;IAClC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;IACvE,IAAI,EAAE,EAAE,CAAC;QACP,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAC/C,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAClC,CAAC;QACF,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,KAAK,CAAC,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;AAC9B,CAAC,CAAC,CAAC;AAEL,MAAM,WAAW,GAAG,CAAC,WAAmB,EAAE,EAAE,CAC1C,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,eAAe,GAAG,KAAK,CAAC,CAAC,qBAAqB,CAAC;IACrD,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAChD,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAClC,CAAC;IACF,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC;IACjC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC;IACxC,OAAO;QACL,SAAS;QACT,MAAM;QACN,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC;YAC1B,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC;YACvC,eAAe;YACf,YAAY;SACiB,CAAC;KACH,CAAC;AAClC,CAAC,CAAC,CAAC;AAEL,MAAM,WAAW,GAAG,GAAG,EAAE,CACvB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC;IACvC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;IACjC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;IACrD,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CACtB,oBAAoB,WAAW,6BAA6B,CAC7D,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GACV,OAAO,CAAC,MAAM;QACd,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,IAAI,CACrB,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAChD,CAAC,CAAC;IACL,OAAO;QACL,OAAO,EAAE,WAAW;QACpB,SAAS,EAAE,OAAO,CAAC,cAAc;QACjC,MAAM;QACN,WAAW,EAAE,IAAI,CAAC,sBAAsB,CAAC,WAAW,CAAC;KACxB,CAAC;AAClC,CAAC,CAAC,CAAC;AAUL,MAAM,QAAQ,GAAG,CACf,KAAsD,EAClB,EAAE,CACtC,KAAK,CAAC,WAAW,IAAI,IAAI;IACzB,OAAQ,KAAK,CAAC,WAAqC,CAAC,WAAW,KAAK,QAAQ,CAAC;AAE/E;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,KAAsD,EACtD,EAAE,CACF,KAAK,CAAC,OAAO,CACX,cAAc,EACd,QAAQ,CAAC,KAAK,CAAC;IACb,CAAC,CAAC;QACE,GAAG,KAAK;QACR,WAAW,EAAE,MAAM,CAAC,OAAO,CACzB,yBAAyB,CAAC,KAAK,CAAC,WAAW,CAAC,CAC7C;KACF;IACH,CAAC,CAAC,KAAK,CACV,CAAC"}

package/lib/AWS/IAM/OpenIDConnectProvider.d.ts

@@ -1,20 +1,24 @@
 import * as Provider from "../../Provider.ts";
 import { Resource } from "../../Resource.ts";
-import type { Providers } from "../Providers.ts";
 import { AWSEnvironment } from "../Environment.ts";
+import type { Providers } from "../Providers.ts";
 export interface OpenIDConnectProviderProps {
     /**
      * The identity provider URL.
      */
     url: string;
     /**
-     * Client IDs allowed for the provider.
+     * Client IDs allowed for the provider. AWS rejects requests with an
+     * empty list, so the prop is typed as a non-empty tuple.
      */
-    clientIDList?: string[];
+    clientIDList?: [string, ...string[]];
     /**
-     * Certificate thumbprints for the provider.
+     * Certificate thumbprints for the provider. AWS auto-manages thumbprints
+     * for well-known IdPs (e.g. GitHub Actions), so this is optional — but
+     * `iam.updateOpenIDConnectProviderThumbprint` rejects an empty list, so
+     * the prop is typed as a non-empty tuple when supplied.
      */
-    thumbprintList?: string[];
+    thumbprintList?: [string, ...string[]];
     /**
      * User-defined tags to apply to the provider.
      */
@@ -24,7 +28,11 @@ export interface OpenIDConnectProvider extends Resource<"AWS.IAM.OpenIDConnectPr
     openIDConnectProviderArn: string;
     url: string;
     clientIDList: string[];
-    thumbprintList: string[];
+    /**
+     * Reflects the desired state — `undefined` when the user opted out of
+     * managing thumbprints (AWS auto-manages them for well-known IdPs).
+     */
+    thumbprintList: string[] | undefined;
     tags: Record<string, string>;
 }, never, Providers> {
 }

package/lib/AWS/IAM/OpenIDConnectProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"OpenIDConnectProvider.d.ts","sourceRoot":"","sources":["../../../src/AWS/IAM/OpenIDConnectProvider.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAGnD,MAAM,WAAW,0BAA0B;IACzC;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,qBAAsB,SAAQ,QAAQ,CACrD,+BAA+B,EAC/B,0BAA0B,EAC1B;IACE,wBAAwB,EAAE,MAAM,CAAC;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B,EACD,KAAK,EACL,SAAS,CACV;CAAG;AAEJ;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,qBAAqB,kEAEjC,CAAC;AAEF,eAAO,MAAM,6BAA6B,oQAqKvC,CAAC"}
+{"version":3,"file":"OpenIDConnectProvider.d.ts","sourceRoot":"","sources":["../../../src/AWS/IAM/OpenIDConnectProvider.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAGjD,MAAM,WAAW,0BAA0B;IACzC;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ;;;OAGG;IACH,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;IACrC;;;;;OAKG;IACH,cAAc,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;IACvC;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,qBAAsB,SAAQ,QAAQ,CACrD,+BAA+B,EAC/B,0BAA0B,EAC1B;IACE,wBAAwB,EAAE,MAAM,CAAC;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB;;;OAGG;IACH,cAAc,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IACrC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B,EACD,KAAK,EACL,SAAS,CACV;CAAG;AAEJ;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,qBAAqB,kEAEjC,CAAC;AAEF,eAAO,MAAM,6BAA6B,oQAwKvC,CAAC"}