alchemy 2.0.0-beta.4 → 2.0.0-beta.41

package/bin/exec.ts

@@ -0,0 +1,4 @@
+import { exec } from "alchemy/Cli";
+import { runMain } from "alchemy/Util/PlatformServices";
+
+exec().pipe(runMain);

package/lib/AWS/ACM/Certificate.d.ts

@@ -0,0 +1,115 @@
+import { Region as AwsRegion } from "@distilled.cloud/aws/Region";
+import * as acm from "@distilled.cloud/aws/acm";
+import * as Provider from "../../Provider.ts";
+import { Resource } from "../../Resource.ts";
+import type { Providers } from "../Providers.ts";
+export interface CertificateProps {
+    /**
+     * Primary domain name for the certificate.
+     */
+    domainName: string;
+    /**
+     * Additional domain names to include on the certificate.
+     */
+    subjectAlternativeNames?: string[];
+    /**
+     * Validation method for the certificate request.
+     * @default "DNS"
+     */
+    validationMethod?: acm.ValidationMethod;
+    /**
+     * Route 53 hosted zone used to auto-create DNS validation records.
+     *
+     * When provided together with `validationMethod: "DNS"`, the certificate
+     * provider will upsert the validation records and wait for issuance.
+     */
+    hostedZoneId?: string;
+    /**
+     * Requested key algorithm.
+     */
+    keyAlgorithm?: acm.KeyAlgorithm;
+    /**
+     * Certificate transparency logging preference.
+     */
+    certificateTransparencyLoggingPreference?: "ENABLED" | "DISABLED" | undefined;
+    /**
+     * User-defined tags to apply to the certificate.
+     */
+    tags?: Record<string, string>;
+}
+export interface Certificate extends Resource<"AWS.ACM.Certificate", CertificateProps, {
+    /**
+     * ARN of the certificate.
+     */
+    certificateArn: string;
+    /**
+     * Primary domain name of the certificate.
+     */
+    domainName: string;
+    /**
+     * Additional subject alternative names on the certificate.
+     */
+    subjectAlternativeNames: string[];
+    /**
+     * Current ACM certificate status.
+     */
+    status: acm.CertificateStatus | undefined;
+    /**
+     * ACM-managed domain validation details, including DNS validation records.
+     */
+    domainValidationOptions: acm.DomainValidation[];
+    /**
+     * Requested validation method.
+     */
+    validationMethod: acm.ValidationMethod | undefined;
+    /**
+     * Requested key algorithm.
+     */
+    keyAlgorithm: acm.KeyAlgorithm | undefined;
+    /**
+     * Route 53 hosted zone used for automatic DNS validation, when configured.
+     */
+    hostedZoneId: string | undefined;
+    /**
+     * Current tags on the certificate.
+     */
+    tags: Record<string, string>;
+    /**
+     * Certificate issue timestamp, when issued.
+     */
+    issuedAt: Date | undefined;
+    /**
+     * Certificate expiration timestamp, when issued.
+     */
+    notAfter: Date | undefined;
+}, never, Providers> {
+}
+/**
+ * An ACM certificate for CloudFront and other AWS endpoints.
+ *
+ * `Certificate` requests an ACM certificate in `us-east-1`, which is the
+ * region required for CloudFront viewer certificates. When `hostedZoneId` is
+ * provided for DNS validation, the provider creates or updates the Route 53
+ * validation records and waits for the certificate to be issued.
+ *
+ * @section Requesting Certificates
+ * @example DNS-Validated Certificate
+ * ```typescript
+ * const cert = yield* Certificate("WebsiteCertificate", {
+ *   domainName: "www.example.com",
+ *   hostedZoneId: "Z1234567890",
+ * });
+ * ```
+ *
+ * @example Certificate With SANs
+ * ```typescript
+ * const cert = yield* Certificate("WebsiteCertificate", {
+ *   domainName: "example.com",
+ *   subjectAlternativeNames: ["www.example.com"],
+ *   hostedZoneId: "Z1234567890",
+ * });
+ * ```
+ */
+export declare const Certificate: import("../../Resource.ts").ResourceClass<Certificate>;
+export declare const CertificateProvider: () => import("effect/Layer").Layer<Provider.Provider<Certificate>, never, import("effect/unstable/http/HttpClient").HttpClient | import("../../Stage.ts").Stage | import("../../Stack.ts").Stack | AwsRegion | import("@distilled.cloud/aws/Credentials").Credentials>;
+//# sourceMappingURL=Certificate.d.ts.map

package/lib/AWS/ACM/Certificate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Certificate.d.ts","sourceRoot":"","sources":["../../../src/AWS/ACM/Certificate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,KAAK,GAAG,MAAM,0BAA0B,CAAC;AAKhD,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAQjD,MAAM,WAAW,gBAAgB;IAC/B;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB;;OAEG;IACH,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;IACnC;;;OAGG;IACH,gBAAgB,CAAC,EAAE,GAAG,CAAC,gBAAgB,CAAC;IACxC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;OAEG;IACH,YAAY,CAAC,EAAE,GAAG,CAAC,YAAY,CAAC;IAChC;;OAEG;IACH,wCAAwC,CAAC,EAAE,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;IAC9E;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,WAAY,SAAQ,QAAQ,CAC3C,qBAAqB,EACrB,gBAAgB,EAChB;IACE;;OAEG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB;;OAEG;IACH,uBAAuB,EAAE,MAAM,EAAE,CAAC;IAClC;;OAEG;IACH,MAAM,EAAE,GAAG,CAAC,iBAAiB,GAAG,SAAS,CAAC;IAC1C;;OAEG;IACH,uBAAuB,EAAE,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAChD;;OAEG;IACH,gBAAgB,EAAE,GAAG,CAAC,gBAAgB,GAAG,SAAS,CAAC;IACnD;;OAEG;IACH,YAAY,EAAE,GAAG,CAAC,YAAY,GAAG,SAAS,CAAC;IAC3C;;OAEG;IACH,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B;;OAEG;IACH,QAAQ,EAAE,IAAI,GAAG,SAAS,CAAC;IAC3B;;OAEG;IACH,QAAQ,EAAE,IAAI,GAAG,SAAS,CAAC;CAC5B,EACD,KAAK,EACL,SAAS,CACV;CAAG;AAEJ;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,eAAO,MAAM,WAAW,wDAA+C,CAAC;AAExE,eAAO,MAAM,mBAAmB,wQA4U7B,CAAC"}

package/lib/AWS/ACM/Certificate.js

@@ -0,0 +1,271 @@
+import { Region as AwsRegion } from "@distilled.cloud/aws/Region";
+import * as acm from "@distilled.cloud/aws/acm";
+import * as route53 from "@distilled.cloud/aws/route-53";
+import * as Effect from "effect/Effect";
+import * as Schedule from "effect/Schedule";
+import { deepEqual, isResolved } from "../../Diff.js";
+import * as Provider from "../../Provider.js";
+import { Resource } from "../../Resource.js";
+import { createInternalTags, createTagsList, diffTags, hasAlchemyTags, } from "../../Tags.js";
+/**
+ * An ACM certificate for CloudFront and other AWS endpoints.
+ *
+ * `Certificate` requests an ACM certificate in `us-east-1`, which is the
+ * region required for CloudFront viewer certificates. When `hostedZoneId` is
+ * provided for DNS validation, the provider creates or updates the Route 53
+ * validation records and waits for the certificate to be issued.
+ *
+ * @section Requesting Certificates
+ * @example DNS-Validated Certificate
+ * ```typescript
+ * const cert = yield* Certificate("WebsiteCertificate", {
+ *   domainName: "www.example.com",
+ *   hostedZoneId: "Z1234567890",
+ * });
+ * ```
+ *
+ * @example Certificate With SANs
+ * ```typescript
+ * const cert = yield* Certificate("WebsiteCertificate", {
+ *   domainName: "example.com",
+ *   subjectAlternativeNames: ["www.example.com"],
+ *   hostedZoneId: "Z1234567890",
+ * });
+ * ```
+ */
+export const Certificate = Resource("AWS.ACM.Certificate");
+export const CertificateProvider = () => Provider.effect(Certificate, Effect.gen(function* () {
+    const describeCertificate = Effect.fn(function* (certificateArn) {
+        return yield* withAcmRegion(acm.describeCertificate({ CertificateArn: certificateArn }).pipe(Effect.map((response) => response.Certificate), Effect.catchTag("ResourceNotFoundException", () => Effect.succeed(undefined))));
+    });
+    const listCertificateTags = Effect.fn(function* (certificateArn) {
+        return yield* withAcmRegion(acm.listTagsForCertificate({ CertificateArn: certificateArn }).pipe(Effect.map((response) => toTagRecord(response.Tags)), Effect.catchTag("ResourceNotFoundException", () => Effect.succeed({}))));
+    });
+    const findManagedCertificate = Effect.fn(function* (id, props) {
+        const listed = yield* withAcmRegion(acm.listCertificates({
+            Includes: {
+                keyTypes: props.keyAlgorithm ? [props.keyAlgorithm] : undefined,
+            },
+        }));
+        const summaries = listed.CertificateSummaryList?.filter((summary) => summary.DomainName === props.domainName) ?? [];
+        for (const summary of summaries) {
+            if (!summary.CertificateArn) {
+                continue;
+            }
+            const detail = yield* describeCertificate(summary.CertificateArn);
+            if (!detail?.CertificateArn) {
+                continue;
+            }
+            if (detail.DomainName !== props.domainName ||
+                JSON.stringify(normalizeSanList(detail.SubjectAlternativeNames)) !==
+                    JSON.stringify(normalizeSanList(props.subjectAlternativeNames))) {
+                continue;
+            }
+            const tags = yield* listCertificateTags(detail.CertificateArn);
+            if (yield* hasAlchemyTags(id, tags)) {
+                return detail;
+            }
+        }
+        return undefined;
+    });
+    const waitForValidationRecords = Effect.fn(function* (certificateArn) {
+        return yield* describeCertificate(certificateArn).pipe(Effect.flatMap((detail) => {
+            const validations = detail?.DomainValidationOptions ?? [];
+            if (validations.length === 0 ||
+                validations.some((option) => option.ResourceRecord === undefined)) {
+                return Effect.fail(new Error("CertificateValidationRecordPending"));
+            }
+            return Effect.succeed(detail);
+        }), Effect.retry({
+            while: (error) => error instanceof Error &&
+                error.message === "CertificateValidationRecordPending",
+            schedule: Schedule.fixed("2 seconds").pipe(Schedule.both(Schedule.recurs(60))),
+        }));
+    });
+    const waitForIssued = Effect.fn(function* (certificateArn) {
+        return yield* describeCertificate(certificateArn).pipe(Effect.flatMap((detail) => {
+            if (!detail?.CertificateArn) {
+                return Effect.fail(new Error("CertificateNotFound"));
+            }
+            if (detail.Status === "ISSUED") {
+                return Effect.succeed(detail);
+            }
+            if (isTerminalFailure(detail.Status)) {
+                return Effect.fail(new Error(`Certificate issuance failed with status ${detail.Status}${detail.FailureReason ? ` (${detail.FailureReason})` : ""}`));
+            }
+            return Effect.fail(new Error("CertificatePendingValidation"));
+        }), Effect.retry({
+            while: (error) => error instanceof Error &&
+                error.message === "CertificatePendingValidation",
+            schedule: Schedule.fixed("10 seconds").pipe(Schedule.both(Schedule.recurs(60))),
+        }));
+    });
+    const waitForChange = Effect.fn(function* (changeId) {
+        return yield* route53.getChange({ Id: changeId }).pipe(Effect.map((response) => response.ChangeInfo), Effect.flatMap((changeInfo) => changeInfo.Status === "INSYNC"
+            ? Effect.succeed(changeInfo)
+            : Effect.fail(new Error("Route53ChangePending"))), Effect.retry({
+            while: (error) => error instanceof Error &&
+                error.message === "Route53ChangePending",
+            schedule: Schedule.fixed("2 seconds").pipe(Schedule.both(Schedule.recurs(60))),
+        }));
+    });
+    const upsertValidationRecords = Effect.fn(function* (hostedZoneId, certificate) {
+        const changes = (certificate.DomainValidationOptions ?? [])
+            .flatMap((option) => option.ResourceRecord ? [option.ResourceRecord] : [])
+            .map((record) => ({
+            Action: "UPSERT",
+            ResourceRecordSet: {
+                Name: record.Name,
+                Type: record.Type,
+                TTL: 60,
+                ResourceRecords: [{ Value: record.Value }],
+            },
+        }));
+        if (changes.length === 0) {
+            return;
+        }
+        const response = yield* route53.changeResourceRecordSets({
+            HostedZoneId: normalizeHostedZoneId(hostedZoneId),
+            ChangeBatch: {
+                Comment: "Alchemy ACM DNS validation",
+                Changes: changes,
+            },
+        });
+        yield* waitForChange(response.ChangeInfo.Id);
+    });
+    return {
+        stables: ["certificateArn"],
+        diff: Effect.fn(function* ({ olds, news: _news }) {
+            if (!isResolved(_news))
+                return undefined;
+            const news = _news;
+            if (olds.domainName !== news.domainName ||
+                !deepEqual(normalizeSanList(olds.subjectAlternativeNames), normalizeSanList(news.subjectAlternativeNames)) ||
+                (olds.validationMethod ?? defaultValidationMethod) !==
+                    (news.validationMethod ?? defaultValidationMethod) ||
+                olds.hostedZoneId !== news.hostedZoneId ||
+                olds.keyAlgorithm !== news.keyAlgorithm ||
+                olds.certificateTransparencyLoggingPreference !==
+                    news.certificateTransparencyLoggingPreference) {
+                return { action: "replace" };
+            }
+        }),
+        read: Effect.fn(function* ({ id, olds, output }) {
+            const certificate = output?.certificateArn
+                ? yield* describeCertificate(output.certificateArn)
+                : yield* findManagedCertificate(id, olds);
+            if (!certificate?.CertificateArn) {
+                return undefined;
+            }
+            const tags = yield* listCertificateTags(certificate.CertificateArn);
+            return toAttrs(olds, certificate, tags);
+        }),
+        reconcile: Effect.fn(function* ({ id, instanceId, news, output, session, }) {
+            const internalTags = yield* createInternalTags(id);
+            const desiredTags = { ...internalTags, ...news.tags };
+            // Observe — find the live certificate. Domain + SAN combo plus
+            // alchemy-owned tags identify a certificate uniquely; if we have
+            // a cached ARN, prefer that as the fast path. ACM certificates
+            // can't be renamed, and most fields trigger replace via diff,
+            // so the only real ensure path is "request if no managed
+            // certificate exists".
+            let certificate = output?.certificateArn
+                ? yield* describeCertificate(output.certificateArn)
+                : undefined;
+            if (!certificate?.CertificateArn) {
+                certificate = yield* findManagedCertificate(id, news);
+            }
+            // Ensure — request a new certificate if none exists. The
+            // `IdempotencyToken` (derived from `instanceId`) makes the
+            // request safe to retry.
+            if (!certificate?.CertificateArn) {
+                certificate = yield* withAcmRegion(acm
+                    .requestCertificate({
+                    DomainName: news.domainName,
+                    SubjectAlternativeNames: news.subjectAlternativeNames,
+                    ValidationMethod: news.validationMethod ?? defaultValidationMethod,
+                    KeyAlgorithm: news.keyAlgorithm,
+                    Options: news.certificateTransparencyLoggingPreference
+                        ? {
+                            CertificateTransparencyLoggingPreference: news.certificateTransparencyLoggingPreference,
+                        }
+                        : undefined,
+                    IdempotencyToken: instanceId
+                        .replaceAll(/[^a-zA-Z0-9]/g, "")
+                        .slice(0, 32),
+                    Tags: createTagsList(desiredTags),
+                })
+                    .pipe(Effect.flatMap((response) => response.CertificateArn
+                    ? describeCertificate(response.CertificateArn).pipe(Effect.map((detail) => detail))
+                    : Effect.fail(new Error("requestCertificate returned no certificate ARN")))));
+            }
+            if (!certificate?.CertificateArn) {
+                return yield* Effect.fail(new Error("Failed to obtain ACM certificate"));
+            }
+            const certificateArn = certificate.CertificateArn;
+            yield* session.note(certificateArn);
+            // Sync DNS validation. If the user wired a hostedZoneId, ensure
+            // validation records are upserted and the cert reaches `ISSUED`.
+            // For an already-issued cert this is mostly a fast-path: we only
+            // wait for validation records when the cert isn't already issued.
+            const shouldAutoValidate = (news.validationMethod ?? defaultValidationMethod) === "DNS" &&
+                news.hostedZoneId !== undefined;
+            if (shouldAutoValidate && certificate.Status !== "ISSUED") {
+                const withRecords = yield* waitForValidationRecords(certificateArn);
+                yield* upsertValidationRecords(news.hostedZoneId, withRecords);
+                certificate = yield* waitForIssued(certificateArn);
+            }
+            // Sync tags — diff observed cloud tags against desired so
+            // adoption rewrites ownership tags correctly.
+            const observedTags = yield* listCertificateTags(certificateArn);
+            const { removed, upsert } = diffTags(observedTags, desiredTags);
+            if (upsert.length > 0) {
+                yield* withAcmRegion(acm.addTagsToCertificate({
+                    CertificateArn: certificateArn,
+                    Tags: upsert,
+                }));
+            }
+            if (removed.length > 0) {
+                yield* withAcmRegion(acm.removeTagsFromCertificate({
+                    CertificateArn: certificateArn,
+                    Tags: removed.map((Key) => ({ Key })),
+                }));
+            }
+            // Re-read so the returned attributes reflect any tag mutation.
+            const finalTags = yield* listCertificateTags(certificateArn);
+            return toAttrs(news, certificate, finalTags);
+        }),
+        delete: Effect.fn(function* ({ output }) {
+            yield* withAcmRegion(acm
+                .deleteCertificate({
+                CertificateArn: output.certificateArn,
+            })
+                .pipe(Effect.catchTag("ResourceNotFoundException", () => Effect.void)));
+        }),
+    };
+}));
+const ACM_REGION = "us-east-1";
+const defaultValidationMethod = "DNS";
+const withAcmRegion = (effect) => effect.pipe(Effect.provideService(AwsRegion, ACM_REGION));
+const normalizeHostedZoneId = (hostedZoneId) => hostedZoneId.replace(/^\/hostedzone\//, "");
+const normalizeSanList = (names) => [...(names ?? [])].sort((a, b) => a.localeCompare(b));
+const toTagRecord = (tags) => Object.fromEntries((tags ?? [])
+    .filter((tag) => typeof tag.Key === "string" && typeof tag.Value === "string")
+    .map((tag) => [tag.Key, tag.Value]));
+const toAttrs = (props, detail, tags) => ({
+    certificateArn: detail.CertificateArn,
+    domainName: detail.DomainName ?? props.domainName,
+    subjectAlternativeNames: detail.SubjectAlternativeNames ?? [],
+    status: detail.Status,
+    domainValidationOptions: detail.DomainValidationOptions ?? [],
+    validationMethod: props.validationMethod ?? defaultValidationMethod,
+    keyAlgorithm: detail.KeyAlgorithm ?? props.keyAlgorithm,
+    hostedZoneId: props.hostedZoneId
+        ? normalizeHostedZoneId(props.hostedZoneId)
+        : undefined,
+    tags,
+    issuedAt: detail.IssuedAt,
+    notAfter: detail.NotAfter,
+});
+const isTerminalFailure = (status) => status === "FAILED" || status === "VALIDATION_TIMED_OUT";
+//# sourceMappingURL=Certificate.js.map

package/lib/AWS/ACM/Certificate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Certificate.js","sourceRoot":"","sources":["../../../src/AWS/ACM/Certificate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,KAAK,GAAG,MAAM,0BAA0B,CAAC;AAChD,OAAO,KAAK,OAAO,MAAM,+BAA+B,CAAC;AACzD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,QAAQ,EACR,cAAc,GACf,MAAM,eAAe,CAAC;AA0FvB;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,QAAQ,CAAc,qBAAqB,CAAC,CAAC;AAExE,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,EAAE,CACtC,QAAQ,CAAC,MAAM,CACb,WAAW,EACX,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,mBAAmB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,cAAsB;QACrE,OAAO,KAAK,CAAC,CAAC,aAAa,CACzB,GAAG,CAAC,mBAAmB,CAAC,EAAE,cAAc,EAAE,cAAc,EAAE,CAAC,CAAC,IAAI,CAC9D,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,EAC9C,MAAM,CAAC,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE,CAChD,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAC1B,CACF,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,mBAAmB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,cAAsB;QACrE,OAAO,KAAK,CAAC,CAAC,aAAa,CACzB,GAAG,CAAC,sBAAsB,CAAC,EAAE,cAAc,EAAE,cAAc,EAAE,CAAC,CAAC,IAAI,CACjE,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EACpD,MAAM,CAAC,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE,CAChD,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CACnB,CACF,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,sBAAsB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAChD,EAAU,EACV,KAAuB;QAEvB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,aAAa,CACjC,GAAG,CAAC,gBAAgB,CAAC;YACnB,QAAQ,EAAE;gBACR,QAAQ,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;aAChE;SACK,CAAC,CACV,CAAC;QAEF,MAAM,SAAS,GACb,MAAM,CAAC,sBAAsB,EAAE,MAAM,CACnC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CACrD,IAAI,EAAE,CAAC;QAEV,KAAK,MAAM,OAAO,IAAI,SAAS,EAAE,CAAC;YAChC,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;gBAC5B,SAAS;YACX,CAAC;YACD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;YAClE,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;gBAC5B,SAAS;YACX,CAAC;YACD,IACE,MAAM,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;gBACtC,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC;oBAC9D,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,EACjE,CAAC;gBACD,SAAS;YACX,CAAC;YACD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;YAC/D,IAAI,KAAK,CAAC,CAAC,cAAc,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC;gBACpC,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,MAAM,wBAAwB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAClD,cAAsB;QAEtB,OAAO,KAAK,CAAC,CAAC,mBAAmB,CAAC,cAAc,CAAC,CAAC,IAAI,CACpD,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;YACxB,MAAM,WAAW,GAAG,MAAM,EAAE,uBAAuB,IAAI,EAAE,CAAC;YAC1D,IACE,WAAW,CAAC,MAAM,KAAK,CAAC;gBACxB,WAAW,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,cAAc,KAAK,SAAS,CAAC,EACjE,CAAC;gBACD,OAAO,MAAM,CAAC,IAAI,CAChB,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAChD,CAAC;YACJ,CAAC;YACD,OAAO,MAAM,CAAC,OAAO,CAAC,MAAO,CAAC,CAAC;QACjC,CAAC,CAAC,EACF,MAAM,CAAC,KAAK,CAAC;YACX,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,KAAK,YAAY,KAAK;gBACtB,KAAK,CAAC,OAAO,KAAK,oCAAoC;YACxD,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,CACxC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CACnC;SACF,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,aAAa,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,cAAsB;QAC/D,OAAO,KAAK,CAAC,CAAC,mBAAmB,CAAC,cAAc,CAAC,CAAC,IAAI,CACpD,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;YACxB,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;gBAC5B,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC;YACvD,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC/B,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAChC,CAAC;YACD,IAAI,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;gBACrC,OAAO,MAAM,CAAC,IAAI,CAChB,IAAI,KAAK,CACP,2CAA2C,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACtH,CACF,CAAC;YACJ,CAAC;YACD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAC;QAChE,CAAC,CAAC,EACF,MAAM,CAAC,KAAK,CAAC;YACX,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,KAAK,YAAY,KAAK;gBACtB,KAAK,CAAC,OAAO,KAAK,8BAA8B;YAClD,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CACzC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CACnC;SACF,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,aAAa,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,QAAgB;QACzD,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,CACpD,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,EAC7C,MAAM,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE,CAC5B,UAAU,CAAC,MAAM,KAAK,QAAQ;YAC5B,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;YAC5B,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CACnD,EACD,MAAM,CAAC,KAAK,CAAC;YACX,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,KAAK,YAAY,KAAK;gBACtB,KAAK,CAAC,OAAO,KAAK,sBAAsB;YAC1C,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,CACxC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CACnC;SACF,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,uBAAuB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EACjD,YAAoB,EACpB,WAAkC;QAElC,MAAM,OAAO,GAAG,CAAC,WAAW,CAAC,uBAAuB,IAAI,EAAE,CAAC;aACxD,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAClB,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CACrD;aACA,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAChB,MAAM,EAAE,QAAiB;YACzB,iBAAiB,EAAE;gBACjB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,GAAG,EAAE,EAAE;gBACP,eAAe,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;aAC3C;SACF,CAAC,CAAC,CAAC;QAEN,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC;YACvD,YAAY,EAAE,qBAAqB,CAAC,YAAY,CAAC;YACjD,WAAW,EAAE;gBACX,OAAO,EAAE,4BAA4B;gBACrC,OAAO,EAAE,OAAO;aACjB;SACF,CAAC,CAAC;QAEH,KAAK,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,CAAC,gBAAgB,CAAC;QAC3B,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE;YAC9C,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;gBAAE,OAAO,SAAS,CAAC;YACzC,MAAM,IAAI,GAAG,KAAoB,CAAC;YAClC,IACE,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU;gBACnC,CAAC,SAAS,CACR,gBAAgB,CAAC,IAAI,CAAC,uBAAuB,CAAC,EAC9C,gBAAgB,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAC/C;gBACD,CAAC,IAAI,CAAC,gBAAgB,IAAI,uBAAuB,CAAC;oBAChD,CAAC,IAAI,CAAC,gBAAgB,IAAI,uBAAuB,CAAC;gBACpD,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY;gBACvC,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY;gBACvC,IAAI,CAAC,wCAAwC;oBAC3C,IAAI,CAAC,wCAAwC,EAC/C,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;QACH,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;YAC7C,MAAM,WAAW,GAAG,MAAM,EAAE,cAAc;gBACxC,CAAC,CAAC,KAAK,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,cAAc,CAAC;gBACnD,CAAC,CAAC,KAAK,CAAC,CAAC,sBAAsB,CAAC,EAAE,EAAE,IAAK,CAAC,CAAC;YAE7C,IAAI,CAAC,WAAW,EAAE,cAAc,EAAE,CAAC;gBACjC,OAAO,SAAS,CAAC;YACnB,CAAC;YAED,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;YACpE,OAAO,OAAO,CAAC,IAAK,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;QAC3C,CAAC,CAAC;QACF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAC9B,EAAE,EACF,UAAU,EACV,IAAI,EACJ,MAAM,EACN,OAAO,GACR;YACC,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;YACnD,MAAM,WAAW,GAAG,EAAE,GAAG,YAAY,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAEtD,+DAA+D;YAC/D,iEAAiE;YACjE,+DAA+D;YAC/D,8DAA8D;YAC9D,yDAAyD;YACzD,uBAAuB;YACvB,IAAI,WAAW,GAAG,MAAM,EAAE,cAAc;gBACtC,CAAC,CAAC,KAAK,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,cAAc,CAAC;gBACnD,CAAC,CAAC,SAAS,CAAC;YACd,IAAI,CAAC,WAAW,EAAE,cAAc,EAAE,CAAC;gBACjC,WAAW,GAAG,KAAK,CAAC,CAAC,sBAAsB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACxD,CAAC;YAED,yDAAyD;YACzD,2DAA2D;YAC3D,yBAAyB;YACzB,IAAI,CAAC,WAAW,EAAE,cAAc,EAAE,CAAC;gBACjC,WAAW,GAAG,KAAK,CAAC,CAAC,aAAa,CAChC,GAAG;qBACA,kBAAkB,CAAC;oBAClB,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,uBAAuB,EAAE,IAAI,CAAC,uBAAuB;oBACrD,gBAAgB,EACd,IAAI,CAAC,gBAAgB,IAAI,uBAAuB;oBAClD,YAAY,EAAE,IAAI,CAAC,YAAY;oBAC/B,OAAO,EAAE,IAAI,CAAC,wCAAwC;wBACpD,CAAC,CAAC;4BACE,wCAAwC,EACtC,IAAI,CAAC,wCAAwC;yBAChD;wBACH,CAAC,CAAC,SAAS;oBACb,gBAAgB,EAAE,UAAU;yBACzB,UAAU,CAAC,eAAe,EAAE,EAAE,CAAC;yBAC/B,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;oBACf,IAAI,EAAE,cAAc,CAAC,WAAW,CAAC;iBAClC,CAAC;qBACD,IAAI,CACH,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAC1B,QAAQ,CAAC,cAAc;oBACrB,CAAC,CAAC,mBAAmB,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,IAAI,CAC/C,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAO,CAAC,CAChC;oBACH,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,IAAI,KAAK,CACP,gDAAgD,CACjD,CACF,CACN,CACF,CACJ,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,WAAW,EAAE,cAAc,EAAE,CAAC;gBACjC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAC9C,CAAC;YACJ,CAAC;YAED,MAAM,cAAc,GAAG,WAAW,CAAC,cAAc,CAAC;YAClD,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAEpC,gEAAgE;YAChE,iEAAiE;YACjE,iEAAiE;YACjE,kEAAkE;YAClE,MAAM,kBAAkB,GACtB,CAAC,IAAI,CAAC,gBAAgB,IAAI,uBAAuB,CAAC,KAAK,KAAK;gBAC5D,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC;YAElC,IAAI,kBAAkB,IAAI,WAAW,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC1D,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,wBAAwB,CAAC,cAAc,CAAC,CAAC;gBACpE,KAAK,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,YAAa,EAAE,WAAW,CAAC,CAAC;gBAChE,WAAW,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC;YACrD,CAAC;YAED,0DAA0D;YAC1D,8CAA8C;YAC9C,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC,cAAc,CAAC,CAAC;YAChE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;YAEhE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,KAAK,CAAC,CAAC,aAAa,CAClB,GAAG,CAAC,oBAAoB,CAAC;oBACvB,cAAc,EAAE,cAAc;oBAC9B,IAAI,EAAE,MAAM;iBACb,CAAC,CACH,CAAC;YACJ,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,KAAK,CAAC,CAAC,aAAa,CAClB,GAAG,CAAC,yBAAyB,CAAC;oBAC5B,cAAc,EAAE,cAAc;oBAC9B,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;iBACtC,CAAC,CACH,CAAC;YACJ,CAAC;YAED,+DAA+D;YAC/D,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC,cAAc,CAAC,CAAC;YAC7D,OAAO,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;QAC/C,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACrC,KAAK,CAAC,CAAC,aAAa,CAClB,GAAG;iBACA,iBAAiB,CAAC;gBACjB,cAAc,EAAE,MAAM,CAAC,cAAc;aACtC,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAChE,CACJ,CAAC;QACJ,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC;AAEJ,MAAM,UAAU,GAAG,WAAoB,CAAC;AACxC,MAAM,uBAAuB,GAAG,KAAc,CAAC;AAE/C,MAAM,aAAa,GAAG,CAAU,MAA8B,EAAE,EAAE,CAChE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,SAAS,EAAE,UAAiB,CAAC,CAAC,CAAC;AAEnE,MAAM,qBAAqB,GAAG,CAAC,YAAoB,EAAE,EAAE,CACrD,YAAY,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;AAE9C,MAAM,gBAAgB,GAAG,CAAC,KAA2B,EAAE,EAAE,CACvD,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;AAExD,MAAM,WAAW,GAAG,CAAC,IAA2B,EAAE,EAAE,CAClD,MAAM,CAAC,WAAW,CAChB,CAAC,IAAI,IAAI,EAAE,CAAC;KACT,MAAM,CACL,CAAC,GAAG,EAAyC,EAAE,CAC7C,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAC/D;KACA,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CACtC,CAAC;AAEJ,MAAM,OAAO,GAAG,CACd,KAAuB,EACvB,MAA6B,EAC7B,IAA4B,EAC5B,EAAE,CAAC,CAAC;IACJ,cAAc,EAAE,MAAM,CAAC,cAAe;IACtC,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,KAAK,CAAC,UAAU;IACjD,uBAAuB,EAAE,MAAM,CAAC,uBAAuB,IAAI,EAAE;IAC7D,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,uBAAuB,EAAE,MAAM,CAAC,uBAAuB,IAAI,EAAE;IAC7D,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,IAAI,uBAAuB;IACnE,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,KAAK,CAAC,YAAY;IACvD,YAAY,EAAE,KAAK,CAAC,YAAY;QAC9B,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,YAAY,CAAC;QAC3C,CAAC,CAAC,SAAS;IACb,IAAI;IACJ,QAAQ,EAAE,MAAM,CAAC,QAAQ;IACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;CAC1B,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,CAAC,MAAyC,EAAE,EAAE,CACtE,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,sBAAsB,CAAC"}

package/lib/AWS/ACM/index.d.ts

@@ -0,0 +1,2 @@
+export { Certificate, CertificateProvider } from "./Certificate.ts";
+//# sourceMappingURL=index.d.ts.map

package/lib/AWS/ACM/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/AWS/ACM/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC"}

package/lib/AWS/ACM/index.js

@@ -0,0 +1,2 @@
+export { Certificate, CertificateProvider } from "./Certificate.js";
+//# sourceMappingURL=index.js.map

package/lib/AWS/ACM/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/AWS/ACM/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC"}

package/lib/AWS/ApiGateway/Account.d.ts

@@ -0,0 +1,34 @@
+import * as Provider from "../../Provider.ts";
+import { Resource } from "../../Resource.ts";
+import type { Providers } from "../Providers.ts";
+export interface AccountProps {
+    /**
+     * IAM role ARN for API Gateway to push logs to CloudWatch.
+     */
+    cloudwatchRoleArn?: string;
+}
+export interface Account extends Resource<"AWS.ApiGateway.Account", AccountProps, {
+    cloudwatchRoleArn: string | undefined;
+    /**
+     * True when this stack last applied a desired `cloudwatchRoleArn` (including clearing it).
+     * Used so destroy does not remove a role the stack never configured.
+     */
+    managesCloudwatchRoleArn: boolean;
+}, never, Providers> {
+}
+/**
+ * Account-level settings for Amazon API Gateway in the current region
+ * (CloudWatch logging role, etc.).
+ *
+ * @section Account settings
+ * @example Set logging role
+ * ```typescript
+ * yield* ApiGateway.Account("Account", {
+ *   cloudwatchRoleArn: role.roleArn,
+ * });
+ * ```
+ */
+declare const AccountResource: import("../../Resource.ts").ResourceClass<Account>;
+export { AccountResource as Account };
+export declare const AccountProvider: () => import("effect/Layer").Layer<Provider.Provider<Account>, never, import("effect/unstable/http/HttpClient").HttpClient | import("@distilled.cloud/aws/Region").Region | import("@distilled.cloud/aws/Credentials").Credentials>;
+//# sourceMappingURL=Account.d.ts.map

package/lib/AWS/ApiGateway/Account.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Account.d.ts","sourceRoot":"","sources":["../../../src/AWS/ApiGateway/Account.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAGjD,MAAM,WAAW,YAAY;IAC3B;;OAEG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,OAAQ,SAAQ,QAAQ,CACvC,wBAAwB,EACxB,YAAY,EACZ;IACE,iBAAiB,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC;;;OAGG;IACH,wBAAwB,EAAE,OAAO,CAAC;CACnC,EACD,KAAK,EACL,SAAS,CACV;CAAG;AAEJ;;;;;;;;;;;GAWG;AACH,QAAA,MAAM,eAAe,oDAA8C,CAAC;AAEpE,OAAO,EAAE,eAAe,IAAI,OAAO,EAAE,CAAC;AAEtC,eAAO,MAAM,eAAe,qOAkGzB,CAAC"}

package/lib/AWS/ApiGateway/Account.js

@@ -0,0 +1,101 @@
+import * as ag from "@distilled.cloud/aws/api-gateway";
+import * as Effect from "effect/Effect";
+import { isResolved } from "../../Diff.js";
+import * as Provider from "../../Provider.js";
+import { Resource } from "../../Resource.js";
+import { retryOnApiStatusUpdating } from "./common.js";
+/**
+ * Account-level settings for Amazon API Gateway in the current region
+ * (CloudWatch logging role, etc.).
+ *
+ * @section Account settings
+ * @example Set logging role
+ * ```typescript
+ * yield* ApiGateway.Account("Account", {
+ *   cloudwatchRoleArn: role.roleArn,
+ * });
+ * ```
+ */
+const AccountResource = Resource("AWS.ApiGateway.Account");
+export { AccountResource as Account };
+export const AccountProvider = () => Provider.effect(AccountResource, Effect.gen(function* () {
+    return {
+        diff: Effect.fn(function* ({ news: newsIn, olds, output }) {
+            if (!isResolved(newsIn))
+                return;
+            const news = newsIn;
+            const prevManages = output?.managesCloudwatchRoleArn ?? false;
+            const nextManages = news.cloudwatchRoleArn !== undefined;
+            if (nextManages) {
+                if (news.cloudwatchRoleArn !== olds.cloudwatchRoleArn) {
+                    return { action: "update" };
+                }
+            }
+            else if (prevManages) {
+                return { action: "update" };
+            }
+        }),
+        read: Effect.fn(function* ({ output }) {
+            const a = yield* ag
+                .getAccount({})
+                .pipe(Effect.catchTag("NotFoundException", () => Effect.succeed(undefined)));
+            return {
+                cloudwatchRoleArn: a?.cloudwatchRoleArn,
+                managesCloudwatchRoleArn: output?.managesCloudwatchRoleArn ?? false,
+            };
+        }),
+        reconcile: Effect.fn(function* ({ news: newsIn, session }) {
+            if (!isResolved(newsIn)) {
+                return yield* Effect.die("Account props were not resolved");
+            }
+            const news = newsIn;
+            // Observe — read the current account-level CloudWatch role from
+            // API Gateway. The account settings resource is a singleton per
+            // region, so there is no `ensure` step: we always sync.
+            const observed = yield* ag
+                .getAccount({})
+                .pipe(Effect.catchTag("NotFoundException", () => Effect.succeed(undefined)));
+            const observedRoleArn = observed?.cloudwatchRoleArn;
+            // Sync the cloudwatchRoleArn — observed ↔ desired. We treat
+            // `undefined` desired as "do not manage the field" so the user
+            // can opt out without us clobbering whatever was already set
+            // out of band.
+            const manages = news.cloudwatchRoleArn !== undefined;
+            if (manages) {
+                const desired = news.cloudwatchRoleArn;
+                if (desired !== observedRoleArn) {
+                    yield* retryOnApiStatusUpdating(ag.updateAccount({
+                        patchOperations: desired
+                            ? [
+                                {
+                                    op: "replace",
+                                    path: "/cloudwatchRoleArn",
+                                    value: desired,
+                                },
+                            ]
+                            : [{ op: "remove", path: "/cloudwatchRoleArn" }],
+                    }));
+                    yield* session.note("Updated API Gateway account settings");
+                }
+            }
+            const final = yield* ag.getAccount({});
+            return {
+                cloudwatchRoleArn: final.cloudwatchRoleArn,
+                managesCloudwatchRoleArn: manages,
+            };
+        }),
+        delete: Effect.fn(function* ({ output, session }) {
+            if (output.managesCloudwatchRoleArn) {
+                yield* retryOnApiStatusUpdating(ag
+                    .updateAccount({
+                    patchOperations: [
+                        { op: "remove", path: "/cloudwatchRoleArn" },
+                    ],
+                })
+                    .pipe(Effect.catchTag("BadRequestException", () => Effect.void)));
+                yield* session.note("Cleared API Gateway account CloudWatch role");
+            }
+        }),
+    };
+}));
+//# sourceMappingURL=Account.js.map

package/lib/AWS/ApiGateway/Account.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Account.js","sourceRoot":"","sources":["../../../src/AWS/ApiGateway/Account.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,kCAAkC,CAAC;AACvD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAE3C,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,OAAO,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAwBvD;;;;;;;;;;;GAWG;AACH,MAAM,eAAe,GAAG,QAAQ,CAAU,wBAAwB,CAAC,CAAC;AAEpE,OAAO,EAAE,eAAe,IAAI,OAAO,EAAE,CAAC;AAEtC,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,EAAE,CAClC,QAAQ,CAAC,MAAM,CACb,eAAe,EACf,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE;YACvD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,OAAO;YAChC,MAAM,IAAI,GAAG,MAAsB,CAAC;YACpC,MAAM,WAAW,GAAG,MAAM,EAAE,wBAAwB,IAAI,KAAK,CAAC;YAC9D,MAAM,WAAW,GAAG,IAAI,CAAC,iBAAiB,KAAK,SAAS,CAAC;YACzD,IAAI,WAAW,EAAE,CAAC;gBAChB,IAAI,IAAI,CAAC,iBAAiB,KAAK,IAAI,CAAC,iBAAiB,EAAE,CAAC;oBACtD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAW,CAAC;gBACvC,CAAC;YACH,CAAC;iBAAM,IAAI,WAAW,EAAE,CAAC;gBACvB,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAW,CAAC;YACvC,CAAC;QACH,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACnC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,EAAE;iBAChB,UAAU,CAAC,EAAE,CAAC;iBACd,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE,CACxC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAC1B,CACF,CAAC;YACJ,OAAO;gBACL,iBAAiB,EAAE,CAAC,EAAE,iBAAiB;gBACvC,wBAAwB,EAAE,MAAM,EAAE,wBAAwB,IAAI,KAAK;aACpE,CAAC;QACJ,CAAC,CAAC;QACF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;YACvD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBACxB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;YAC9D,CAAC;YACD,MAAM,IAAI,GAAG,MAAsB,CAAC;YAEpC,gEAAgE;YAChE,gEAAgE;YAChE,wDAAwD;YACxD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,EAAE;iBACvB,UAAU,CAAC,EAAE,CAAC;iBACd,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE,CACxC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAC1B,CACF,CAAC;YACJ,MAAM,eAAe,GAAG,QAAQ,EAAE,iBAAiB,CAAC;YAEpD,4DAA4D;YAC5D,+DAA+D;YAC/D,6DAA6D;YAC7D,eAAe;YACf,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,KAAK,SAAS,CAAC;YACrD,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC;gBACvC,IAAI,OAAO,KAAK,eAAe,EAAE,CAAC;oBAChC,KAAK,CAAC,CAAC,wBAAwB,CAC7B,EAAE,CAAC,aAAa,CAAC;wBACf,eAAe,EAAE,OAAO;4BACtB,CAAC,CAAC;gCACE;oCACE,EAAE,EAAE,SAAS;oCACb,IAAI,EAAE,oBAAoB;oCAC1B,KAAK,EAAE,OAAO;iCACf;6BACF;4BACH,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC;qBACnD,CAAC,CACH,CAAC;oBACF,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;gBAC9D,CAAC;YACH,CAAC;YAED,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;YACvC,OAAO;gBACL,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;gBAC1C,wBAAwB,EAAE,OAAO;aAClC,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;YAC9C,IAAI,MAAM,CAAC,wBAAwB,EAAE,CAAC;gBACpC,KAAK,CAAC,CAAC,wBAAwB,CAC7B,EAAE;qBACC,aAAa,CAAC;oBACb,eAAe,EAAE;wBACf,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,oBAAoB,EAAE;qBAC7C;iBACF,CAAC;qBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAC1D,CACJ,CAAC;gBACF,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;YACrE,CAAC;QACH,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}

package/lib/AWS/ApiGateway/ApiKey.d.ts

@@ -0,0 +1,68 @@
+import { Region } from "@distilled.cloud/aws/Region";
+import * as ag from "@distilled.cloud/aws/api-gateway";
+import * as Redacted from "effect/Redacted";
+import * as Provider from "../../Provider.ts";
+import { Resource } from "../../Resource.ts";
+import type { Providers } from "../Providers.ts";
+export interface ApiKeyProps {
+    /**
+     * Friendly name for the API key.
+     *
+     * If omitted, Alchemy generates a deterministic physical name from the
+     * stack, stage, logical ID, and instance ID.
+     */
+    name?: string;
+    /**
+     * Human-readable description shown in API Gateway.
+     */
+    description?: string;
+    /**
+     * Whether clients can use the key.
+     *
+     * @default true
+     */
+    enabled?: boolean;
+    /**
+     * Appends a distinct suffix to the generated key value when AWS generates it.
+     */
+    generateDistinctId?: boolean;
+    /**
+     * Write-only value when creating; never stored in resource state or outputs.
+     * Wrap with `Redacted.make` so state encoding preserves redaction.
+     */
+    value?: Redacted.Redacted<string>;
+    /**
+     * Stage associations to attach directly to this API key.
+     */
+    stageKeys?: ag.StageKey[];
+    /**
+     * External customer identifier associated with the key.
+     */
+    customerId?: string;
+    /**
+     * User-defined tags. Alchemy internal tags are merged automatically.
+     */
+    tags?: Record<string, string>;
+}
+export interface ApiKey extends Resource<"AWS.ApiGateway.ApiKey", ApiKeyProps, {
+    id: string;
+    name: string | undefined;
+    enabled: boolean | undefined;
+    tags: Record<string, string>;
+}, never, Providers> {
+}
+/**
+ * API Gateway API key for usage plans and `apiKeyRequired` methods.
+ *
+ * @section API keys
+ * @example Generated key
+ * ```typescript
+ * const key = yield* ApiGateway.ApiKey("PartnerKey", {
+ *   generateDistinctId: true,
+ * });
+ * ```
+ */
+declare const ApiKeyResource: import("../../Resource.ts").ResourceClass<ApiKey>;
+export { ApiKeyResource as ApiKey };
+export declare const ApiKeyProvider: () => import("effect/Layer").Layer<Provider.Provider<ApiKey>, never, import("effect/unstable/http/HttpClient").HttpClient | import("../../Stage.ts").Stage | import("../../Stack.ts").Stack | Region | import("@distilled.cloud/aws/Credentials").Credentials>;
+//# sourceMappingURL=ApiKey.d.ts.map