alchemy 2.0.0-beta.4 → 2.0.0-beta.41

package/lib/AWS/IdentityCenter/Group.js

@@ -0,0 +1,145 @@
+import * as identitystore from "@distilled.cloud/aws/identitystore";
+import * as Effect from "effect/Effect";
+import { isResolved } from "../../Diff.js";
+import * as Provider from "../../Provider.js";
+import { Resource } from "../../Resource.js";
+import { listGroups, resolveIdentityStoreId, retryIdentityCenter, } from "./common.js";
+/**
+ * A group in the IAM Identity Center identity store.
+ *
+ * @section Creating Groups
+ * @example Platform Engineers
+ * ```typescript
+ * const engineers = yield* Group("PlatformEngineers", {
+ *   displayName: "platform-engineers",
+ *   description: "Platform engineering team",
+ * });
+ * ```
+ */
+export const Group = Resource("AWS.IdentityCenter.Group");
+export const GroupProvider = () => Provider.effect(Group, Effect.gen(function* () {
+    return {
+        stables: ["identityStoreId", "groupId"],
+        diff: Effect.fn(function* ({ olds, news }) {
+            if (!isResolved(news))
+                return;
+            if (olds?.identityStoreId !== news.identityStoreId) {
+                return { action: "replace" };
+            }
+        }),
+        read: Effect.fn(function* ({ olds, output }) {
+            if (output?.groupId && output.identityStoreId) {
+                return yield* readGroupById(output.identityStoreId, output.groupId);
+            }
+            if (!olds) {
+                return undefined;
+            }
+            return yield* readGroupByDisplayName(olds);
+        }),
+        reconcile: Effect.fn(function* ({ news, output, session }) {
+            const identityStoreId = output?.identityStoreId ?? (yield* resolveIdentityStoreId(news));
+            // Observe — find the group by id (if we already have one) or
+            // by display name. We never trust `output.groupId` blindly: a
+            // group deleted out of band shows up as missing here.
+            let existing = (output?.groupId
+                ? yield* readGroupById(identityStoreId, output.groupId)
+                : undefined) ??
+                (yield* readGroupByDisplayName({
+                    ...news,
+                    identityStoreId,
+                }));
+            // Ensure — create the group if missing.
+            if (!existing) {
+                const response = yield* retryIdentityCenter(identitystore.createGroup({
+                    IdentityStoreId: identityStoreId,
+                    DisplayName: news.displayName,
+                    Description: news.description,
+                }));
+                existing =
+                    (response.GroupId
+                        ? yield* readGroupById(identityStoreId, response.GroupId)
+                        : undefined) ??
+                        (yield* readGroupByDisplayName({
+                            ...news,
+                            identityStoreId,
+                        }));
+                if (!existing) {
+                    return yield* Effect.fail(new Error(`group '${news.displayName}' not found after create`));
+                }
+                yield* session.note(existing.groupId);
+                return existing;
+            }
+            // Sync mutable attributes — `updateGroup` overwrites
+            // displayName and description in one call. We diff against
+            // observed cloud state so adoption converges.
+            const operations = [];
+            if (existing.displayName !== news.displayName) {
+                operations.push({
+                    AttributePath: "DisplayName",
+                    AttributeValue: news.displayName,
+                });
+            }
+            const desiredDescription = news.description ?? "";
+            if ((existing.description ?? "") !== desiredDescription) {
+                operations.push({
+                    AttributePath: "Description",
+                    AttributeValue: desiredDescription,
+                });
+            }
+            if (operations.length > 0) {
+                yield* retryIdentityCenter(identitystore.updateGroup({
+                    IdentityStoreId: existing.identityStoreId,
+                    GroupId: existing.groupId,
+                    Operations: operations,
+                }));
+                const updated = yield* readGroupById(existing.identityStoreId, existing.groupId);
+                if (!updated) {
+                    return yield* Effect.fail(new Error(`group '${existing.groupId}' not found after update`));
+                }
+                yield* session.note(updated.groupId);
+                return updated;
+            }
+            yield* session.note(existing.groupId);
+            return existing;
+        }),
+        delete: Effect.fn(function* ({ output }) {
+            yield* retryIdentityCenter(identitystore
+                .deleteGroup({
+                IdentityStoreId: output.identityStoreId,
+                GroupId: output.groupId,
+            })
+                .pipe(Effect.catchTag("ResourceNotFoundException", () => Effect.void)));
+        }),
+    };
+}));
+const readGroupById = Effect.fn(function* (identityStoreId, groupId) {
+    const response = yield* retryIdentityCenter(identitystore
+        .describeGroup({
+        IdentityStoreId: identityStoreId,
+        GroupId: groupId,
+    })
+        .pipe(Effect.catchTag("ResourceNotFoundException", () => Effect.succeed(undefined))));
+    if (!response?.GroupId || !response.IdentityStoreId) {
+        return undefined;
+    }
+    return {
+        identityStoreId: response.IdentityStoreId,
+        groupId: response.GroupId,
+        displayName: response.DisplayName,
+        description: response.Description,
+        createdAt: response.CreatedAt,
+        updatedAt: response.UpdatedAt,
+    };
+});
+const readGroupByDisplayName = Effect.fn(function* ({ identityStoreId, instanceArn, displayName, }) {
+    const resolvedIdentityStoreId = yield* resolveIdentityStoreId({
+        identityStoreId,
+        instanceArn,
+    });
+    const groups = yield* listGroups(resolvedIdentityStoreId);
+    const match = groups.find((group) => group.DisplayName === displayName);
+    return match?.GroupId
+        ? yield* readGroupById(resolvedIdentityStoreId, match.GroupId)
+        : undefined;
+});
+//# sourceMappingURL=Group.js.map

package/lib/AWS/IdentityCenter/Group.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Group.js","sourceRoot":"","sources":["../../../src/AWS/IdentityCenter/Group.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,aAAa,MAAM,oCAAoC,CAAC;AACpE,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,OAAO,EACL,UAAU,EACV,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,aAAa,CAAC;AAqCrB;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG,QAAQ,CAAQ,0BAA0B,CAAC,CAAC;AAEjE,MAAM,CAAC,MAAM,aAAa,GAAG,GAAG,EAAE,CAChC,QAAQ,CAAC,MAAM,CACb,KAAK,EACL,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO;QACL,OAAO,EAAE,CAAC,iBAAiB,EAAE,SAAS,CAAC;QACvC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;YACvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO;YAC9B,IAAI,IAAI,EAAE,eAAe,KAAK,IAAI,CAAC,eAAe,EAAE,CAAC;gBACnD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;QACH,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;YACzC,IAAI,MAAM,EAAE,OAAO,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;gBAC9C,OAAO,KAAK,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;YACtE,CAAC;YAED,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,SAAS,CAAC;YACnB,CAAC;YAED,OAAO,KAAK,CAAC,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAC7C,CAAC,CAAC;QACF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;YACvD,MAAM,eAAe,GACnB,MAAM,EAAE,eAAe,IAAI,CAAC,KAAK,CAAC,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC;YAEnE,6DAA6D;YAC7D,8DAA8D;YAC9D,sDAAsD;YACtD,IAAI,QAAQ,GACV,CAAC,MAAM,EAAE,OAAO;gBACd,CAAC,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,eAAe,EAAE,MAAM,CAAC,OAAO,CAAC;gBACvD,CAAC,CAAC,SAAS,CAAC;gBACd,CAAC,KAAK,CAAC,CAAC,sBAAsB,CAAC;oBAC7B,GAAG,IAAI;oBACP,eAAe;iBAChB,CAAC,CAAC,CAAC;YAEN,wCAAwC;YACxC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,mBAAmB,CACzC,aAAa,CAAC,WAAW,CAAC;oBACxB,eAAe,EAAE,eAAe;oBAChC,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;iBAC9B,CAAC,CACH,CAAC;gBAEF,QAAQ;oBACN,CAAC,QAAQ,CAAC,OAAO;wBACf,CAAC,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,eAAe,EAAE,QAAQ,CAAC,OAAO,CAAC;wBACzD,CAAC,CAAC,SAAS,CAAC;wBACd,CAAC,KAAK,CAAC,CAAC,sBAAsB,CAAC;4BAC7B,GAAG,IAAI;4BACP,eAAe;yBAChB,CAAC,CAAC,CAAC;gBAEN,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CAAC,UAAU,IAAI,CAAC,WAAW,0BAA0B,CAAC,CAChE,CAAC;gBACJ,CAAC;gBAED,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBACtC,OAAO,QAAQ,CAAC;YAClB,CAAC;YAED,qDAAqD;YACrD,2DAA2D;YAC3D,8CAA8C;YAC9C,MAAM,UAAU,GAGV,EAAE,CAAC;YACT,IAAI,QAAQ,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;gBAC9C,UAAU,CAAC,IAAI,CAAC;oBACd,aAAa,EAAE,aAAa;oBAC5B,cAAc,EAAE,IAAI,CAAC,WAAW;iBACjC,CAAC,CAAC;YACL,CAAC;YACD,MAAM,kBAAkB,GAAG,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;YAClD,IAAI,CAAC,QAAQ,CAAC,WAAW,IAAI,EAAE,CAAC,KAAK,kBAAkB,EAAE,CAAC;gBACxD,UAAU,CAAC,IAAI,CAAC;oBACd,aAAa,EAAE,aAAa;oBAC5B,cAAc,EAAE,kBAAkB;iBACnC,CAAC,CAAC;YACL,CAAC;YAED,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1B,KAAK,CAAC,CAAC,mBAAmB,CACxB,aAAa,CAAC,WAAW,CAAC;oBACxB,eAAe,EAAE,QAAQ,CAAC,eAAe;oBACzC,OAAO,EAAE,QAAQ,CAAC,OAAO;oBACzB,UAAU,EAAE,UAAU;iBACvB,CAAC,CACH,CAAC;gBAEF,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,aAAa,CAClC,QAAQ,CAAC,eAAe,EACxB,QAAQ,CAAC,OAAO,CACjB,CAAC;gBACF,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CAAC,UAAU,QAAQ,CAAC,OAAO,0BAA0B,CAAC,CAChE,CAAC;gBACJ,CAAC;gBACD,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBACrC,OAAO,OAAO,CAAC;YACjB,CAAC;YAED,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACtC,OAAO,QAAQ,CAAC;QAClB,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACrC,KAAK,CAAC,CAAC,mBAAmB,CACxB,aAAa;iBACV,WAAW,CAAC;gBACX,eAAe,EAAE,MAAM,CAAC,eAAe;gBACvC,OAAO,EAAE,MAAM,CAAC,OAAO;aACxB,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAChE,CACJ,CAAC;QACJ,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC;AAEJ,MAAM,aAAa,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EACvC,eAAuB,EACvB,OAAe;IAEf,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,mBAAmB,CACzC,aAAa;SACV,aAAa,CAAC;QACb,eAAe,EAAE,eAAe;QAChC,OAAO,EAAE,OAAO;KACjB,CAAC;SACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE,CAChD,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAC1B,CACF,CACJ,CAAC;IAEF,IAAI,CAAC,QAAQ,EAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC;QACpD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO;QACL,eAAe,EAAE,QAAQ,CAAC,eAAe;QACzC,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,WAAW,EAAE,QAAQ,CAAC,WAAiC;QACvD,WAAW,EAAE,QAAQ,CAAC,WAAiC;QACvD,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,SAAS,EAAE,QAAQ,CAAC,SAAS;KACA,CAAC;AAClC,CAAC,CAAC,CAAC;AAEH,MAAM,sBAAsB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAClD,eAAe,EACf,WAAW,EACX,WAAW,GACyD;IACpE,MAAM,uBAAuB,GAAG,KAAK,CAAC,CAAC,sBAAsB,CAAC;QAC5D,eAAe;QACf,WAAW;KACZ,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,uBAAuB,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC;IACxE,OAAO,KAAK,EAAE,OAAO;QACnB,CAAC,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,uBAAuB,EAAE,KAAK,CAAC,OAAO,CAAC;QAC9D,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC,CAAC,CAAC"}

package/lib/AWS/IdentityCenter/Instance.d.ts

@@ -0,0 +1,65 @@
+import * as Provider from "../../Provider.ts";
+import { Resource } from "../../Resource.ts";
+import type { Providers } from "../Providers.ts";
+export interface InstanceProps {
+    /**
+     * Explicit instance ARN to adopt.
+     */
+    instanceArn?: string;
+    /**
+     * Friendly instance name.
+     *
+     * When `mode` is `"account"`, this name is passed to `CreateInstance`.
+     * When `mode` is `"existing"`, it is used only for discovery.
+     */
+    name?: string;
+    /**
+     * How Alchemy should satisfy this resource.
+     *
+     * `existing` adopts a visible instance and fails if none is found.
+     * `account` creates an account instance when no visible instance matches.
+     *
+     * Organization instances cannot currently be enabled via public API, so
+     * organization-management-account deployments should use `existing`.
+     *
+     * @default "existing"
+     */
+    mode?: "existing" | "account";
+}
+export interface Instance extends Resource<"AWS.IdentityCenter.Instance", InstanceProps, {
+    instanceArn: string;
+    identityStoreId: string;
+    ownerAccountId: string | undefined;
+    name: string | undefined;
+    status: string | undefined;
+    statusReason: string | undefined;
+    createdDate: Date | undefined;
+    mode: "existing" | "account";
+}, never, Providers> {
+}
+/**
+ * An IAM Identity Center instance visible to the current account.
+ *
+ * Use `mode: "existing"` to adopt a pre-enabled organization instance. Use
+ * `mode: "account"` only for standalone or member-account account instances.
+ *
+ * @section Discovering Existing Instances
+ * @example Adopt An Existing Instance
+ * ```typescript
+ * const instance = yield* Instance("IdentityCenter", {
+ *   mode: "existing",
+ * });
+ * ```
+ *
+ * @section Creating Account Instances
+ * @example Create A Member Account Instance
+ * ```typescript
+ * const instance = yield* Instance("IdentityCenter", {
+ *   mode: "account",
+ *   name: "customer-a",
+ * });
+ * ```
+ */
+export declare const Instance: import("../../Resource.ts").ResourceClass<Instance>;
+export declare const InstanceProvider: () => import("effect/Layer").Layer<Provider.Provider<Instance>, never, import("effect/unstable/http/HttpClient").HttpClient | import("@distilled.cloud/aws/Region").Region | import("@distilled.cloud/aws/Credentials").Credentials>;
+//# sourceMappingURL=Instance.d.ts.map

package/lib/AWS/IdentityCenter/Instance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Instance.d.ts","sourceRoot":"","sources":["../../../src/AWS/IdentityCenter/Instance.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAQjD,MAAM,WAAW,aAAa;IAC5B;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;;;;;;OAUG;IACH,IAAI,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;CAC/B;AAED,MAAM,WAAW,QAAS,SAAQ,QAAQ,CACxC,6BAA6B,EAC7B,aAAa,EACb;IACE,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,WAAW,EAAE,IAAI,GAAG,SAAS,CAAC;IAC9B,IAAI,EAAE,UAAU,GAAG,SAAS,CAAC;CAC9B,EACD,KAAK,EACL,SAAS,CACV;CAAG;AAEJ;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,QAAQ,qDAAoD,CAAC;AAE1E,eAAO,MAAM,gBAAgB,sOAkG1B,CAAC"}

package/lib/AWS/IdentityCenter/Instance.js

@@ -0,0 +1,119 @@
+import * as ssoAdmin from "@distilled.cloud/aws/sso-admin";
+import * as Effect from "effect/Effect";
+import { isResolved } from "../../Diff.js";
+import * as Provider from "../../Provider.js";
+import { Resource } from "../../Resource.js";
+import { listInstances, resolveInstance, retryIdentityCenter, toInstanceAttributes, } from "./common.js";
+/**
+ * An IAM Identity Center instance visible to the current account.
+ *
+ * Use `mode: "existing"` to adopt a pre-enabled organization instance. Use
+ * `mode: "account"` only for standalone or member-account account instances.
+ *
+ * @section Discovering Existing Instances
+ * @example Adopt An Existing Instance
+ * ```typescript
+ * const instance = yield* Instance("IdentityCenter", {
+ *   mode: "existing",
+ * });
+ * ```
+ *
+ * @section Creating Account Instances
+ * @example Create A Member Account Instance
+ * ```typescript
+ * const instance = yield* Instance("IdentityCenter", {
+ *   mode: "account",
+ *   name: "customer-a",
+ * });
+ * ```
+ */
+export const Instance = Resource("AWS.IdentityCenter.Instance");
+export const InstanceProvider = () => Provider.effect(Instance, Effect.gen(function* () {
+    return {
+        stables: ["instanceArn", "identityStoreId", "ownerAccountId", "mode"],
+        diff: Effect.fn(function* ({ olds, news }) {
+            if (!isResolved(news))
+                return;
+            if (olds?.instanceArn !== news.instanceArn ||
+                olds?.mode !== news.mode ||
+                olds?.name !== news.name) {
+                return { action: "replace" };
+            }
+        }),
+        read: Effect.fn(function* ({ olds, output }) {
+            const mode = output?.mode ?? olds?.mode ?? "existing";
+            const instance = yield* readInstance({
+                instanceArn: output?.instanceArn ?? olds?.instanceArn,
+                name: olds?.name,
+            });
+            return instance ? { ...instance, mode } : undefined;
+        }),
+        reconcile: Effect.fn(function* ({ news, output, session }) {
+            const mode = output?.mode ?? news.mode ?? "existing";
+            // Observe — try to find a visible instance, preferring an
+            // explicit ARN (from output or props) and otherwise scanning
+            // the account.
+            const existing = yield* readInstance({
+                instanceArn: output?.instanceArn ?? news.instanceArn,
+                name: news.name,
+            });
+            if (existing) {
+                yield* session.note(existing.instanceArn);
+                return {
+                    ...existing,
+                    mode,
+                };
+            }
+            // Ensure — for `existing` mode we cannot create one; fail.
+            // Organization instances must be enabled manually in the
+            // management account.
+            if (mode !== "account") {
+                return yield* Effect.fail(new Error("No visible Identity Center instance was found. Organization instances must be enabled manually in the management account before Alchemy can adopt them."));
+            }
+            // Ensure — `account` mode creates an account instance.
+            const response = yield* retryIdentityCenter(ssoAdmin.createInstance({
+                Name: news.name,
+            }));
+            const created = yield* readInstance({
+                instanceArn: response.InstanceArn,
+                name: news.name,
+            });
+            if (!created) {
+                return yield* Effect.fail(new Error("failed to resolve Identity Center instance after create"));
+            }
+            yield* session.note(created.instanceArn);
+            return {
+                ...created,
+                mode,
+            };
+        }),
+        delete: Effect.fn(function* ({ output }) {
+            if (output.mode !== "account") {
+                return;
+            }
+            const existing = yield* readInstance({
+                instanceArn: output.instanceArn,
+            });
+            if (!existing) {
+                return;
+            }
+            yield* retryIdentityCenter(ssoAdmin.deleteInstance({
+                InstanceArn: output.instanceArn,
+            }));
+        }),
+    };
+}));
+const readInstance = Effect.fn(function* ({ instanceArn, name, }) {
+    if (instanceArn) {
+        const instance = yield* resolveInstance(instanceArn).pipe(Effect.catch(() => Effect.succeed(undefined)));
+        return instance ? toInstanceAttributes(instance) : undefined;
+    }
+    const instances = yield* listInstances();
+    const match = instances.find((instance) => instance.Name === name) ??
+        (instances.length === 1 ? instances[0] : undefined) ??
+        instances.find((instance) => instance.Status === "ACTIVE");
+    return match?.InstanceArn && match.IdentityStoreId
+        ? toInstanceAttributes(match)
+        : undefined;
+});
+//# sourceMappingURL=Instance.js.map

package/lib/AWS/IdentityCenter/Instance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Instance.js","sourceRoot":"","sources":["../../../src/AWS/IdentityCenter/Instance.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gCAAgC,CAAC;AAC3D,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,OAAO,EACL,aAAa,EACb,eAAe,EACf,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,aAAa,CAAC;AA6CrB;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,QAAQ,CAAW,6BAA6B,CAAC,CAAC;AAE1E,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,EAAE,CACnC,QAAQ,CAAC,MAAM,CACb,QAAQ,EACR,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO;QACL,OAAO,EAAE,CAAC,aAAa,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,CAAC;QACrE,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;YACvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO;YAC9B,IACE,IAAI,EAAE,WAAW,KAAK,IAAI,CAAC,WAAW;gBACtC,IAAI,EAAE,IAAI,KAAK,IAAI,CAAC,IAAI;gBACxB,IAAI,EAAE,IAAI,KAAK,IAAI,CAAC,IAAI,EACxB,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;QACH,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;YACzC,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI,UAAU,CAAC;YACtD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC;gBACnC,WAAW,EAAE,MAAM,EAAE,WAAW,IAAI,IAAI,EAAE,WAAW;gBACrD,IAAI,EAAE,IAAI,EAAE,IAAI;aACjB,CAAC,CAAC;YACH,OAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACtD,CAAC,CAAC;QACF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;YACvD,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,UAAU,CAAC;YAErD,0DAA0D;YAC1D,6DAA6D;YAC7D,eAAe;YACf,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC;gBACnC,WAAW,EAAE,MAAM,EAAE,WAAW,IAAI,IAAI,CAAC,WAAW;gBACpD,IAAI,EAAE,IAAI,CAAC,IAAI;aAChB,CAAC,CAAC;YACH,IAAI,QAAQ,EAAE,CAAC;gBACb,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;gBAC1C,OAAO;oBACL,GAAG,QAAQ;oBACX,IAAI;iBACL,CAAC;YACJ,CAAC;YAED,2DAA2D;YAC3D,yDAAyD;YACzD,sBAAsB;YACtB,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CACP,yJAAyJ,CAC1J,CACF,CAAC;YACJ,CAAC;YAED,uDAAuD;YACvD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,mBAAmB,CACzC,QAAQ,CAAC,cAAc,CAAC;gBACtB,IAAI,EAAE,IAAI,CAAC,IAAI;aAChB,CAAC,CACH,CAAC;YAEF,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC;gBAClC,WAAW,EAAE,QAAQ,CAAC,WAAW;gBACjC,IAAI,EAAE,IAAI,CAAC,IAAI;aAChB,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CACP,yDAAyD,CAC1D,CACF,CAAC;YACJ,CAAC;YAED,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YACzC,OAAO;gBACL,GAAG,OAAO;gBACV,IAAI;aACL,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACrC,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC9B,OAAO;YACT,CAAC;YAED,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC;gBACnC,WAAW,EAAE,MAAM,CAAC,WAAW;aAChC,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO;YACT,CAAC;YAED,KAAK,CAAC,CAAC,mBAAmB,CACxB,QAAQ,CAAC,cAAc,CAAC;gBACtB,WAAW,EAAE,MAAM,CAAC,WAAW;aAChC,CAAC,CACH,CAAC;QACJ,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC;AAEJ,MAAM,YAAY,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EACxC,WAAW,EACX,IAAI,GACwC;IAC5C,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC,IAAI,CACvD,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAC9C,CAAC;QACF,OAAO,QAAQ,CAAC,CAAC,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/D,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,aAAa,EAAE,CAAC;IACzC,MAAM,KAAK,GACT,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC;QACpD,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACnD,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;IAE7D,OAAO,KAAK,EAAE,WAAW,IAAI,KAAK,CAAC,eAAe;QAChD,CAAC,CAAC,oBAAoB,CAAC,KAAK,CAAC;QAC7B,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC,CAAC,CAAC"}

package/lib/AWS/IdentityCenter/PermissionSet.d.ts

@@ -0,0 +1,52 @@
+import * as Provider from "../../Provider.ts";
+import { Resource } from "../../Resource.ts";
+import type { Providers } from "../Providers.ts";
+export interface PermissionSetProps {
+    /**
+     * Explicit IAM Identity Center instance ARN.
+     * If omitted, Alchemy adopts the only visible instance.
+     */
+    instanceArn?: string;
+    /**
+     * Permission set name.
+     */
+    name: string;
+    /**
+     * Optional human-readable description.
+     */
+    description?: string;
+    /**
+     * Optional ISO-8601 session duration such as `PT8H`.
+     */
+    sessionDuration?: string;
+    /**
+     * Optional relay state passed to supported applications.
+     */
+    relayState?: string;
+}
+export interface PermissionSet extends Resource<"AWS.IdentityCenter.PermissionSet", PermissionSetProps, {
+    instanceArn: string;
+    permissionSetArn: string;
+    name: string;
+    description: string | undefined;
+    sessionDuration: string | undefined;
+    relayState: string | undefined;
+    createdDate: Date | undefined;
+}, never, Providers> {
+}
+/**
+ * An IAM Identity Center permission set.
+ *
+ * @section Creating Permission Sets
+ * @example Administrator Access
+ * ```typescript
+ * const admin = yield* PermissionSet("AdministratorAccess", {
+ *   name: "AdministratorAccess",
+ *   description: "Administrator access for platform engineers",
+ *   sessionDuration: "PT8H",
+ * });
+ * ```
+ */
+export declare const PermissionSet: import("../../Resource.ts").ResourceClass<PermissionSet>;
+export declare const PermissionSetProvider: () => import("effect/Layer").Layer<Provider.Provider<PermissionSet>, never, import("effect/unstable/http/HttpClient").HttpClient | import("@distilled.cloud/aws/Region").Region | import("@distilled.cloud/aws/Credentials").Credentials>;
+//# sourceMappingURL=PermissionSet.d.ts.map

package/lib/AWS/IdentityCenter/PermissionSet.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PermissionSet.d.ts","sourceRoot":"","sources":["../../../src/AWS/IdentityCenter/PermissionSet.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAGjD,MAAM,WAAW,kBAAkB;IACjC;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,aAAc,SAAQ,QAAQ,CAC7C,kCAAkC,EAClC,kBAAkB,EAClB;IACE,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,WAAW,EAAE,IAAI,GAAG,SAAS,CAAC;CAC/B,EACD,KAAK,EACL,SAAS,CACV;CAAG;AAEJ;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,aAAa,0DAEzB,CAAC;AAEF,eAAO,MAAM,qBAAqB,2OAwI/B,CAAC"}

package/lib/AWS/IdentityCenter/PermissionSet.js

@@ -0,0 +1,163 @@
+import * as ssoAdmin from "@distilled.cloud/aws/sso-admin";
+import * as Effect from "effect/Effect";
+import * as Stream from "effect/Stream";
+import { isResolved } from "../../Diff.js";
+import * as Provider from "../../Provider.js";
+import { Resource } from "../../Resource.js";
+import { resolveInstance, retryIdentityCenter } from "./common.js";
+/**
+ * An IAM Identity Center permission set.
+ *
+ * @section Creating Permission Sets
+ * @example Administrator Access
+ * ```typescript
+ * const admin = yield* PermissionSet("AdministratorAccess", {
+ *   name: "AdministratorAccess",
+ *   description: "Administrator access for platform engineers",
+ *   sessionDuration: "PT8H",
+ * });
+ * ```
+ */
+export const PermissionSet = Resource("AWS.IdentityCenter.PermissionSet");
+export const PermissionSetProvider = () => Provider.effect(PermissionSet, Effect.gen(function* () {
+    return {
+        stables: ["permissionSetArn", "instanceArn"],
+        diff: Effect.fn(function* ({ olds, news }) {
+            if (!isResolved(news))
+                return;
+            if (olds?.instanceArn !== news.instanceArn ||
+                olds?.name !== news.name) {
+                return { action: "replace" };
+            }
+        }),
+        read: Effect.fn(function* ({ olds, output }) {
+            if (output?.permissionSetArn && output.instanceArn) {
+                return yield* readPermissionSetByArn({
+                    instanceArn: output.instanceArn,
+                    permissionSetArn: output.permissionSetArn,
+                });
+            }
+            if (!olds) {
+                return undefined;
+            }
+            return yield* readPermissionSetByName(olds);
+        }),
+        reconcile: Effect.fn(function* ({ news, output, session }) {
+            const instance = yield* resolveInstance(output?.instanceArn ?? news.instanceArn);
+            // Observe — find the permission set by ARN (when we already
+            // have one) or by name on the resolved instance.
+            let existing = (output?.permissionSetArn
+                ? yield* readPermissionSetByArn({
+                    instanceArn: instance.InstanceArn,
+                    permissionSetArn: output.permissionSetArn,
+                })
+                : undefined) ??
+                (yield* readPermissionSetByName({
+                    ...news,
+                    instanceArn: instance.InstanceArn,
+                }));
+            // Ensure — create the permission set if missing.
+            if (!existing) {
+                const response = yield* retryIdentityCenter(ssoAdmin.createPermissionSet({
+                    InstanceArn: instance.InstanceArn,
+                    Name: news.name,
+                    Description: news.description,
+                    SessionDuration: news.sessionDuration,
+                    RelayState: news.relayState,
+                }));
+                const createdArn = response.PermissionSet?.PermissionSetArn;
+                existing =
+                    (createdArn
+                        ? yield* readPermissionSetByArn({
+                            instanceArn: instance.InstanceArn,
+                            permissionSetArn: createdArn,
+                        })
+                        : undefined) ??
+                        (yield* readPermissionSetByName({
+                            ...news,
+                            instanceArn: instance.InstanceArn,
+                        }));
+                if (!existing) {
+                    return yield* Effect.fail(new Error(`permission set '${news.name}' not found after create`));
+                }
+                yield* session.note(existing.permissionSetArn);
+                return existing;
+            }
+            // Sync mutable attributes — `updatePermissionSet` overwrites
+            // description, sessionDuration, relayState. Diff against
+            // observed cloud state so adoption converges; only call when
+            // there's a real delta.
+            if ((existing.description ?? undefined) !== news.description ||
+                (existing.sessionDuration ?? undefined) !== news.sessionDuration ||
+                (existing.relayState ?? undefined) !== news.relayState) {
+                yield* retryIdentityCenter(ssoAdmin.updatePermissionSet({
+                    InstanceArn: existing.instanceArn,
+                    PermissionSetArn: existing.permissionSetArn,
+                    Description: news.description,
+                    SessionDuration: news.sessionDuration,
+                    RelayState: news.relayState,
+                }));
+                const updated = yield* readPermissionSetByArn({
+                    instanceArn: existing.instanceArn,
+                    permissionSetArn: existing.permissionSetArn,
+                });
+                if (!updated) {
+                    return yield* Effect.fail(new Error(`permission set '${existing.permissionSetArn}' not found after update`));
+                }
+                yield* session.note(updated.permissionSetArn);
+                return updated;
+            }
+            yield* session.note(existing.permissionSetArn);
+            return existing;
+        }),
+        delete: Effect.fn(function* ({ output }) {
+            yield* retryIdentityCenter(ssoAdmin
+                .deletePermissionSet({
+                InstanceArn: output.instanceArn,
+                PermissionSetArn: output.permissionSetArn,
+            })
+                .pipe(Effect.catchTag("ResourceNotFoundException", () => Effect.void)));
+        }),
+    };
+}));
+const readPermissionSetByArn = Effect.fn(function* ({ instanceArn, permissionSetArn, }) {
+    const response = yield* retryIdentityCenter(ssoAdmin
+        .describePermissionSet({
+        InstanceArn: instanceArn,
+        PermissionSetArn: permissionSetArn,
+    })
+        .pipe(Effect.catchTag("ResourceNotFoundException", () => Effect.succeed(undefined))));
+    const permissionSet = response?.PermissionSet;
+    if (!permissionSet?.PermissionSetArn || !permissionSet.Name) {
+        return undefined;
+    }
+    return {
+        instanceArn,
+        permissionSetArn: permissionSet.PermissionSetArn,
+        name: permissionSet.Name,
+        description: permissionSet.Description,
+        sessionDuration: permissionSet.SessionDuration,
+        relayState: permissionSet.RelayState,
+        createdDate: permissionSet.CreatedDate,
+    };
+});
+const readPermissionSetByName = Effect.fn(function* ({ instanceArn, name, }) {
+    const instance = yield* resolveInstance(instanceArn);
+    const arns = yield* ssoAdmin.listPermissionSets
+        .items({
+        InstanceArn: instance.InstanceArn,
+        MaxResults: 100,
+    })
+        .pipe(Stream.runCollect);
+    for (const permissionSetArn of arns) {
+        const permissionSet = yield* readPermissionSetByArn({
+            instanceArn: instance.InstanceArn,
+            permissionSetArn,
+        });
+        if (permissionSet?.name === name) {
+            return permissionSet;
+        }
+    }
+    return undefined;
+});
+//# sourceMappingURL=PermissionSet.js.map

package/lib/AWS/IdentityCenter/PermissionSet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PermissionSet.js","sourceRoot":"","sources":["../../../src/AWS/IdentityCenter/PermissionSet.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gCAAgC,CAAC;AAC3D,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AA0CnE;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,QAAQ,CACnC,kCAAkC,CACnC,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,EAAE,CACxC,QAAQ,CAAC,MAAM,CACb,aAAa,EACb,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO;QACL,OAAO,EAAE,CAAC,kBAAkB,EAAE,aAAa,CAAC;QAC5C,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;YACvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO;YAC9B,IACE,IAAI,EAAE,WAAW,KAAK,IAAI,CAAC,WAAW;gBACtC,IAAI,EAAE,IAAI,KAAK,IAAI,CAAC,IAAI,EACxB,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;QACH,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;YACzC,IAAI,MAAM,EAAE,gBAAgB,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBACnD,OAAO,KAAK,CAAC,CAAC,sBAAsB,CAAC;oBACnC,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;iBAC1C,CAAC,CAAC;YACL,CAAC;YAED,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,SAAS,CAAC;YACnB,CAAC;YAED,OAAO,KAAK,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAC9C,CAAC,CAAC;QACF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;YACvD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,eAAe,CACrC,MAAM,EAAE,WAAW,IAAI,IAAI,CAAC,WAAW,CACxC,CAAC;YAEF,4DAA4D;YAC5D,iDAAiD;YACjD,IAAI,QAAQ,GACV,CAAC,MAAM,EAAE,gBAAgB;gBACvB,CAAC,CAAC,KAAK,CAAC,CAAC,sBAAsB,CAAC;oBAC5B,WAAW,EAAE,QAAQ,CAAC,WAAY;oBAClC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;iBAC1C,CAAC;gBACJ,CAAC,CAAC,SAAS,CAAC;gBACd,CAAC,KAAK,CAAC,CAAC,uBAAuB,CAAC;oBAC9B,GAAG,IAAI;oBACP,WAAW,EAAE,QAAQ,CAAC,WAAW;iBAClC,CAAC,CAAC,CAAC;YAEN,iDAAiD;YACjD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,mBAAmB,CACzC,QAAQ,CAAC,mBAAmB,CAAC;oBAC3B,WAAW,EAAE,QAAQ,CAAC,WAAY;oBAClC,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,eAAe,EAAE,IAAI,CAAC,eAAe;oBACrC,UAAU,EAAE,IAAI,CAAC,UAAU;iBAC5B,CAAC,CACH,CAAC;gBAEF,MAAM,UAAU,GAAG,QAAQ,CAAC,aAAa,EAAE,gBAAgB,CAAC;gBAC5D,QAAQ;oBACN,CAAC,UAAU;wBACT,CAAC,CAAC,KAAK,CAAC,CAAC,sBAAsB,CAAC;4BAC5B,WAAW,EAAE,QAAQ,CAAC,WAAY;4BAClC,gBAAgB,EAAE,UAAU;yBAC7B,CAAC;wBACJ,CAAC,CAAC,SAAS,CAAC;wBACd,CAAC,KAAK,CAAC,CAAC,uBAAuB,CAAC;4BAC9B,GAAG,IAAI;4BACP,WAAW,EAAE,QAAQ,CAAC,WAAW;yBAClC,CAAC,CAAC,CAAC;gBAEN,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CACP,mBAAmB,IAAI,CAAC,IAAI,0BAA0B,CACvD,CACF,CAAC;gBACJ,CAAC;gBAED,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;gBAC/C,OAAO,QAAQ,CAAC;YAClB,CAAC;YAED,6DAA6D;YAC7D,yDAAyD;YACzD,6DAA6D;YAC7D,wBAAwB;YACxB,IACE,CAAC,QAAQ,CAAC,WAAW,IAAI,SAAS,CAAC,KAAK,IAAI,CAAC,WAAW;gBACxD,CAAC,QAAQ,CAAC,eAAe,IAAI,SAAS,CAAC,KAAK,IAAI,CAAC,eAAe;gBAChE,CAAC,QAAQ,CAAC,UAAU,IAAI,SAAS,CAAC,KAAK,IAAI,CAAC,UAAU,EACtD,CAAC;gBACD,KAAK,CAAC,CAAC,mBAAmB,CACxB,QAAQ,CAAC,mBAAmB,CAAC;oBAC3B,WAAW,EAAE,QAAQ,CAAC,WAAW;oBACjC,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;oBAC3C,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,eAAe,EAAE,IAAI,CAAC,eAAe;oBACrC,UAAU,EAAE,IAAI,CAAC,UAAU;iBAC5B,CAAC,CACH,CAAC;gBAEF,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,sBAAsB,CAAC;oBAC5C,WAAW,EAAE,QAAQ,CAAC,WAAW;oBACjC,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;iBAC5C,CAAC,CAAC;gBACH,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CACP,mBAAmB,QAAQ,CAAC,gBAAgB,0BAA0B,CACvE,CACF,CAAC;gBACJ,CAAC;gBACD,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;gBAC9C,OAAO,OAAO,CAAC;YACjB,CAAC;YAED,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;YAC/C,OAAO,QAAQ,CAAC;QAClB,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACrC,KAAK,CAAC,CAAC,mBAAmB,CACxB,QAAQ;iBACL,mBAAmB,CAAC;gBACnB,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;aAC1C,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAChE,CACJ,CAAC;QACJ,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC;AAEJ,MAAM,sBAAsB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAClD,WAAW,EACX,gBAAgB,GAIjB;IACC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,mBAAmB,CACzC,QAAQ;SACL,qBAAqB,CAAC;QACrB,WAAW,EAAE,WAAW;QACxB,gBAAgB,EAAE,gBAAgB;KACnC,CAAC;SACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE,CAChD,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAC1B,CACF,CACJ,CAAC;IAEF,MAAM,aAAa,GAAG,QAAQ,EAAE,aAAa,CAAC;IAC9C,IAAI,CAAC,aAAa,EAAE,gBAAgB,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;QAC5D,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO;QACL,WAAW;QACX,gBAAgB,EAAE,aAAa,CAAC,gBAAgB;QAChD,IAAI,EAAE,aAAa,CAAC,IAAI;QACxB,WAAW,EAAE,aAAa,CAAC,WAAW;QACtC,eAAe,EAAE,aAAa,CAAC,eAAe;QAC9C,UAAU,EAAE,aAAa,CAAC,UAAU;QACpC,WAAW,EAAE,aAAa,CAAC,WAAW;KACD,CAAC;AAC1C,CAAC,CAAC,CAAC;AAEH,MAAM,uBAAuB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EACnD,WAAW,EACX,IAAI,GAC6C;IACjD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,kBAAkB;SAC5C,KAAK,CAAC;QACL,WAAW,EAAE,QAAQ,CAAC,WAAY;QAClC,UAAU,EAAE,GAAG;KAChB,CAAC;SACD,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAE3B,KAAK,MAAM,gBAAgB,IAAI,IAAI,EAAE,CAAC;QACpC,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,sBAAsB,CAAC;YAClD,WAAW,EAAE,QAAQ,CAAC,WAAY;YAClC,gBAAgB;SACjB,CAAC,CAAC;QACH,IAAI,aAAa,EAAE,IAAI,KAAK,IAAI,EAAE,CAAC;YACjC,OAAO,aAAa,CAAC;QACvB,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC,CAAC"}

package/lib/AWS/IdentityCenter/common.d.ts

@@ -0,0 +1,21 @@
+import * as identitystore from "@distilled.cloud/aws/identitystore";
+import * as ssoAdmin from "@distilled.cloud/aws/sso-admin";
+import * as Effect from "effect/Effect";
+export declare const retryIdentityCenter: <A, E, R>(effect: Effect.Effect<A, E, R>) => Effect.Effect<A, E, R>;
+export declare const listInstances: () => Effect.Effect<ssoAdmin.InstanceMetadata[], ssoAdmin.ListInstancesError, import("effect/unstable/http/HttpClient").HttpClient | import("@distilled.cloud/aws/Region").Region | import("@distilled.cloud/aws/Credentials").Credentials>;
+export declare const resolveInstance: (instanceArn?: string | undefined) => Effect.Effect<ssoAdmin.InstanceMetadata, Error, import("effect/unstable/http/HttpClient").HttpClient | import("@distilled.cloud/aws/Region").Region | import("@distilled.cloud/aws/Credentials").Credentials>;
+export declare const resolveIdentityStoreId: (args_0: {
+    identityStoreId?: string;
+    instanceArn?: string;
+}) => Effect.Effect<string, Error, import("effect/unstable/http/HttpClient").HttpClient | import("@distilled.cloud/aws/Region").Region | import("@distilled.cloud/aws/Credentials").Credentials>;
+export declare const toInstanceAttributes: (instance: ssoAdmin.InstanceMetadata) => {
+    instanceArn: string;
+    identityStoreId: string;
+    ownerAccountId: string | undefined;
+    name: string | undefined;
+    status: string | undefined;
+    statusReason: string | undefined;
+    createdDate: Date | undefined;
+};
+export declare const listGroups: (identityStoreId: string) => Effect.Effect<identitystore.Group[], identitystore.ListGroupsError, import("effect/unstable/http/HttpClient").HttpClient | import("@distilled.cloud/aws/Region").Region | import("@distilled.cloud/aws/Credentials").Credentials>;
+//# sourceMappingURL=common.d.ts.map

package/lib/AWS/IdentityCenter/common.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../../../src/AWS/IdentityCenter/common.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,aAAa,MAAM,oCAAoC,CAAC;AACpE,OAAO,KAAK,QAAQ,MAAM,gCAAgC,CAAC;AAC3D,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAIxC,eAAO,MAAM,mBAAmB,GAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,QAAQ,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,2BAWxE,CAAC;AAEJ,eAAO,MAAM,aAAa,6OAWxB,CAAC;AAEH,eAAO,MAAM,eAAe,qPA6B1B,CAAC;AAEH,eAAO,MAAM,sBAAsB;sBAIf,MAAM;kBACV,MAAM;gMAgBpB,CAAC;AAEH,eAAO,MAAM,oBAAoB,GAC/B,UAAU,QAAQ,CAAC,gBAAgB,KAClC;IACD,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,WAAW,EAAE,IAAI,GAAG,SAAS,CAAC;CAS9B,CAAC;AAEH,eAAO,MAAM,UAAU,gQAUrB,CAAC"}