alchemy 2.0.0-beta.74 → 2.0.0-beta.76

package/lib/AWS/CloudFront/KvRoutesUpdate.js.map

@@ -1 +1 @@
-{"version":3,"file":"KvRoutesUpdate.js","sourceRoot":"","sources":["../../../src/AWS/CloudFront/KvRoutesUpdate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,+CAA+C,CAAC;AACrE,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAE5C,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAI7C,OAAO,EACL,YAAY,EACZ,UAAU,EACV,uBAAuB,EACvB,oBAAoB,EACpB,eAAe,GAChB,MAAM,aAAa,CAAC;AAsCrB;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,QAAQ,CACpC,+BAA+B,CAChC,CAAC;AAEF,MAAM,UAAU,GAAG,IAAI,CAAC;AAExB,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,EAAE,CACzC,QAAQ,CAAC,MAAM,CACb,cAAc,EACd,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAa,EAAE,OAAe;QACnE,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,GAAG;aACnB,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;aACvC,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE,CAChD,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAC1B,CACF,CAAC;QAEJ,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,EAAE,MAAM,EAAE,EAAc,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACjD,CAAC;QAED,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAE/B,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;YAC9D,MAAM,KAAK,GAAW,MAAM,CAAC,KAAK,CAAC;YACnC,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC/B,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;oBACjC,MAAM,EAAE,KAAK;oBACb,GAAG,EAAE,GAAG,OAAO,IAAI,CAAC,EAAE;iBACvB,CAAC,CAAC;gBACH,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;YAC5C,CAAC;YACD,OAAO;gBACL,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAa;gBAC/C,QAAQ,EAAE,KAAK;aAChB,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,MAAkB,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EACnC,KAAa,EACb,IAAY,EACZ,OAAe,EACf,MAAgB,EAChB,WAAmB;QAEnB,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAgC,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAmC,EAAE,CAAC;QAEnD,IAAI,UAAU,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;YACnC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC;YAC7D,IAAI,CAAC,IAAI,CAAC;gBACR,GAAG,EAAE,OAAO;gBACZ,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;aAC7C,CAAC,CAAC;YACH,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC;gBACpC,IAAI,CAAC,IAAI,CAAC;oBACR,GAAG,EAAE,GAAG,OAAO,IAAI,CAAC,EAAE;oBACtB,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,GAAG,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,UAAU,CAAC;iBAC9D,CAAC,CAAC;YACL,CAAC;YACD,IAAI,WAAW,GAAG,UAAU,EAAE,CAAC;gBAC7B,KAAK,IAAI,CAAC,GAAG,UAAU,EAAE,CAAC,GAAG,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC;oBAC9C,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,OAAO,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC3C,CAAC;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;YAC/C,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;gBACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC;oBACrC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,OAAO,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC3C,CAAC;YACH,CAAC;QACH,CAAC;QAED,KAAK,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;YACpB,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;YACxC,OAAO,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;SAClD,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EACnC,KAAa,EACb,IAAY,EACZ,OAAe,EACf,WAAmB;QAEnB,MAAM,OAAO,GAAmC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;QACnE,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;YACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC;gBACrC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,OAAO,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;QACD,KAAK,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;YACpB,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,OAAO;SACjB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,CACf,KAA0B,EAK1B,EAAE,CACF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,OAAO,GAAG,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;QAClD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC;QACzD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,KAAK,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QACzD,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACnE,CAAC;IACH,CAAC,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,KAAK,CAAC;QACX,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,KAAK,CAAC,IAAI,KAAK,qBAAqB;YACpC,uBAAuB,CAAC,KAAK,CAAC;QAChC,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC;YACrB,QAAQ,CAAC,WAAW,CAAC,YAAY,CAAC;YAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;SACpB,CAAC;KACH,CAAC,CACH,CAAC;IAEJ,MAAM,WAAW,GAAG,CAClB,KAAa,EACb,OAAe,EACf,UAAkB,EAClB,aAAiC,EAKjC,EAAE,CACF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC9D,MAAM,QAAQ,GACZ,aAAa,KAAK,SAAS;YACzB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,aAAa,CAAC;YAC3C,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YACnC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC5B,CAAC;QACD,KAAK,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,KAAK,CAAC;QACX,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,KAAK,CAAC,IAAI,KAAK,qBAAqB;YACpC,uBAAuB,CAAC,KAAK,CAAC;QAChC,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC;YACrB,QAAQ,CAAC,WAAW,CAAC,YAAY,CAAC;YAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;SACpB,CAAC;KACH,CAAC,CACH,CAAC;IAEJ,OAAO;QACL,oEAAoE;QACpE,yEAAyE;QACzE,yEAAyE;QACzE,iEAAiE;QACjE,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9B,IAAI,EAAE,eAAe,CACnB,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YAC7B,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CACH;QACD,SAAS,EAAE,eAAe,CACxB,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;YACnC,OAAO,KAAK,CAAC,CAAC,oBAAoB,CAChC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAClB,0DAA0D;gBAC1D,wDAAwD;gBACxD,wDAAwD;gBACxD,sDAAsD;gBACtD,aAAa;gBACb,MAAM,aAAa,GACjB,MAAM,KAAK,SAAS;oBACpB,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK;wBAC1B,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS;wBACnC,MAAM,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC;gBAE7B,IAAI,aAAa,EAAE,CAAC;oBAClB,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC1B,CAAC;gBAED,yDAAyD;gBACzD,uDAAuD;gBACvD,uDAAuD;gBACvD,yDAAyD;gBACzD,wBAAwB;gBACxB,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;gBAChD,MAAM,aAAa,GACjB,CAAC,aAAa,IAAI,MAAM,KAAK,SAAS;oBACpC,CAAC,CAAC,MAAM,CAAC,KAAK;oBACd,CAAC,CAAC,SAAS,CAAC;gBAChB,KAAK,CAAC,CAAC,WAAW,CAChB,IAAI,CAAC,KAAK,EACV,OAAO,EACP,IAAI,CAAC,KAAK,EACV,aAAa,CACd,CAAC;gBAEF,OAAO;oBACL,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,GAAG,EAAE,IAAI,CAAC,GAAG;oBACb,KAAK,EAAE,IAAI,CAAC,KAAK;iBAClB,CAAC;YACJ,CAAC,CAAC,CACH,CAAC;QACJ,CAAC,CAAC,CACH;QACD,MAAM,EAAE,eAAe,CACrB,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YAC7B,KAAK,CAAC,CAAC,oBAAoB,CACzB,QAAQ,CAAC;gBACP,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,KAAK,EAAE,MAAM,CAAC,KAAK;aACpB,CAAC,CACH,CAAC,IAAI,CACJ,MAAM,CAAC,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAChE,CAAC;QACJ,CAAC,CAAC,CACH;KACF,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}
+{"version":3,"file":"KvRoutesUpdate.js","sourceRoot":"","sources":["../../../src/AWS/CloudFront/KvRoutesUpdate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,+CAA+C,CAAC;AACrE,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAE5C,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAI7C,OAAO,EACL,YAAY,EACZ,UAAU,EACV,uBAAuB,EACvB,sBAAsB,EACtB,oBAAoB,EACpB,eAAe,GAChB,MAAM,aAAa,CAAC;AAsCrB;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,QAAQ,CACpC,+BAA+B,CAChC,CAAC;AAEF,MAAM,UAAU,GAAG,IAAI,CAAC;AAExB,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,EAAE,CACzC,QAAQ,CAAC,MAAM,CACb,cAAc,EACd,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAa,EAAE,OAAe;QACnE,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,GAAG;aACnB,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;aACvC,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE,CAChD,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAC1B,CACF,CAAC;QAEJ,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,EAAE,MAAM,EAAE,EAAc,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACjD,CAAC;QAED,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAE/B,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;YAC9D,MAAM,KAAK,GAAW,MAAM,CAAC,KAAK,CAAC;YACnC,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC/B,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;oBACjC,MAAM,EAAE,KAAK;oBACb,GAAG,EAAE,GAAG,OAAO,IAAI,CAAC,EAAE;iBACvB,CAAC,CAAC;gBACH,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;YAC5C,CAAC;YACD,OAAO;gBACL,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAa;gBAC/C,QAAQ,EAAE,KAAK;aAChB,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,MAAkB,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EACnC,KAAa,EACb,IAAY,EACZ,OAAe,EACf,MAAgB,EAChB,WAAmB;QAEnB,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAgC,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAmC,EAAE,CAAC;QAEnD,IAAI,UAAU,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;YACnC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC;YAC7D,IAAI,CAAC,IAAI,CAAC;gBACR,GAAG,EAAE,OAAO;gBACZ,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;aAC7C,CAAC,CAAC;YACH,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC;gBACpC,IAAI,CAAC,IAAI,CAAC;oBACR,GAAG,EAAE,GAAG,OAAO,IAAI,CAAC,EAAE;oBACtB,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,GAAG,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,UAAU,CAAC;iBAC9D,CAAC,CAAC;YACL,CAAC;YACD,IAAI,WAAW,GAAG,UAAU,EAAE,CAAC;gBAC7B,KAAK,IAAI,CAAC,GAAG,UAAU,EAAE,CAAC,GAAG,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC;oBAC9C,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,OAAO,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC3C,CAAC;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;YAC/C,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;gBACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC;oBACrC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,OAAO,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC3C,CAAC;YACH,CAAC;QACH,CAAC;QAED,KAAK,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;YACpB,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;YACxC,OAAO,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;SAClD,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EACnC,KAAa,EACb,IAAY,EACZ,OAAe,EACf,WAAmB;QAEnB,MAAM,OAAO,GAAmC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;QACnE,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;YACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC;gBACrC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,OAAO,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;QACD,KAAK,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;YACpB,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,OAAO;SACjB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,CACf,KAA0B,EAK1B,EAAE,CACF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,OAAO,GAAG,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;QAClD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC;QACzD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,KAAK,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QACzD,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACnE,CAAC;IACH,CAAC,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,KAAK,CAAC;QACX,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,KAAK,CAAC,IAAI,KAAK,qBAAqB;YACpC,uBAAuB,CAAC,KAAK,CAAC;QAChC,QAAQ,EAAE,sBAAsB;KACjC,CAAC,CACH,CAAC;IAEJ,MAAM,WAAW,GAAG,CAClB,KAAa,EACb,OAAe,EACf,UAAkB,EAClB,aAAiC,EAKjC,EAAE,CACF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC9D,MAAM,QAAQ,GACZ,aAAa,KAAK,SAAS;YACzB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,aAAa,CAAC;YAC3C,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YACnC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC5B,CAAC;QACD,KAAK,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,KAAK,CAAC;QACX,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,KAAK,CAAC,IAAI,KAAK,qBAAqB;YACpC,uBAAuB,CAAC,KAAK,CAAC;QAChC,QAAQ,EAAE,sBAAsB;KACjC,CAAC,CACH,CAAC;IAEJ,OAAO;QACL,oEAAoE;QACpE,yEAAyE;QACzE,yEAAyE;QACzE,iEAAiE;QACjE,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9B,IAAI,EAAE,eAAe,CACnB,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YAC7B,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CACH;QACD,SAAS,EAAE,eAAe,CACxB,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;YACnC,OAAO,KAAK,CAAC,CAAC,oBAAoB,CAChC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAClB,0DAA0D;gBAC1D,wDAAwD;gBACxD,wDAAwD;gBACxD,sDAAsD;gBACtD,aAAa;gBACb,MAAM,aAAa,GACjB,MAAM,KAAK,SAAS;oBACpB,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK;wBAC1B,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS;wBACnC,MAAM,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC;gBAE7B,IAAI,aAAa,EAAE,CAAC;oBAClB,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC1B,CAAC;gBAED,yDAAyD;gBACzD,uDAAuD;gBACvD,uDAAuD;gBACvD,yDAAyD;gBACzD,wBAAwB;gBACxB,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;gBAChD,MAAM,aAAa,GACjB,CAAC,aAAa,IAAI,MAAM,KAAK,SAAS;oBACpC,CAAC,CAAC,MAAM,CAAC,KAAK;oBACd,CAAC,CAAC,SAAS,CAAC;gBAChB,KAAK,CAAC,CAAC,WAAW,CAChB,IAAI,CAAC,KAAK,EACV,OAAO,EACP,IAAI,CAAC,KAAK,EACV,aAAa,CACd,CAAC;gBAEF,OAAO;oBACL,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,GAAG,EAAE,IAAI,CAAC,GAAG;oBACb,KAAK,EAAE,IAAI,CAAC,KAAK;iBAClB,CAAC;YACJ,CAAC,CAAC,CACH,CAAC;QACJ,CAAC,CAAC,CACH;QACD,MAAM,EAAE,eAAe,CACrB,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YAC7B,KAAK,CAAC,CAAC,oBAAoB,CACzB,QAAQ,CAAC;gBACP,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,KAAK,EAAE,MAAM,CAAC,KAAK;aACpB,CAAC,CACH,CAAC,IAAI,CACJ,MAAM,CAAC,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAChE,CAAC;QACJ,CAAC,CAAC,CACH;KACF,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}

package/lib/AWS/CloudFront/common.d.ts

@@ -1,11 +1,22 @@
 import { Region as AwsRegion } from "@distilled.cloud/aws/Region";
 import * as kvs from "@distilled.cloud/aws/cloudfront-keyvaluestore";
+import * as Duration from "effect/Duration";
 import * as Effect from "effect/Effect";
 import * as Redacted from "effect/Redacted";
+import * as Schedule from "effect/Schedule";
 export declare const KVS_REGION: "us-east-1";
 export declare const extractValue: (v: string | Redacted.Redacted<string>) => string;
 export declare const withKvsRegion: <A, E, R>(effect: Effect.Effect<A, E, R>) => Effect.Effect<A, E, Exclude<R, AwsRegion>>;
 export declare const withKvsRegionFn: <Args extends any[], A, E, R>(fn: (...args: Args) => Effect.Effect<A, E, R>) => (...args: Args) => Effect.Effect<A, E, Exclude<R, AwsRegion>>;
+/**
+ * Bounded KVS retry: exponential backoff with the per-attempt delay capped
+ * at 2s and at most 24 recurrences (~45s worst case). NEVER use a bare
+ * `Schedule.max([Schedule.exponential(...), Schedule.recurs(n)])` for KVS
+ * retries — `recurs` bounds the COUNT, not the TIME, and an uncapped
+ * exponential makes the tail attempts wait minutes-to-hours (24 attempts
+ * at 100ms doubling total ~19 days), which reads as a silent hang.
+ */
+export declare const cappedKvsRetrySchedule: Schedule.Schedule<Duration.Duration, unknown, never, never>;
 export declare const retryForKvsReadiness: <A, E, R>(effect: Effect.Effect<A, E, R>) => Effect.Effect<A, E, R>;
 export declare const getKvsEtag: (store: string) => Effect.Effect<string, kvs.DescribeKeyValueStoreError, import("@distilled.cloud/aws/Credentials").Credentials | import("effect/unstable/http/HttpClient").HttpClient>;
 export declare const isKvsPreconditionFailed: (err: kvs.ValidationException) => boolean;

package/lib/AWS/CloudFront/common.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../../../src/AWS/CloudFront/common.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,KAAK,GAAG,MAAM,+CAA+C,CAAC;AAErE,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAK5C,eAAO,MAAM,UAAU,EAAG,WAAoB,CAAC;AAE/C,eAAO,MAAM,YAAY,MAAO,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAG,MACtB,CAAC;AAEhD,eAAO,MAAM,aAAa,GAAI,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,+CAIM,CAAC;AAE5E,eAAO,MAAM,eAAe,GACzB,IAAI,SAAS,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,MACtB,CAAC,GAAG,IAAI,EAAE,IAAI,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,eAErC,IAAI,+CACc,CAAC;AAoB/B,eAAO,MAAM,oBAAoB,GAAI,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,2BAMzE,CAAC;AAEJ,eAAO,MAAM,UAAU,yLAGrB,CAAC;AAEH,eAAO,MAAM,uBAAuB,QAAS,GAAG,CAAC,mBAAmB,YAEtB,CAAC"}
+{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../../../src/AWS/CloudFront/common.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,KAAK,GAAG,MAAM,+CAA+C,CAAC;AACrE,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAI5C,eAAO,MAAM,UAAU,EAAG,WAAoB,CAAC;AAE/C,eAAO,MAAM,YAAY,MAAO,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAG,MACtB,CAAC;AAEhD,eAAO,MAAM,aAAa,GAAI,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,+CAIM,CAAC;AAE5E,eAAO,MAAM,eAAe,GACzB,IAAI,SAAS,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,MACtB,CAAC,GAAG,IAAI,EAAE,IAAI,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,eAErC,IAAI,+CACc,CAAC;AAO/B;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,6DAWlC,CAAC;AAEF,eAAO,MAAM,oBAAoB,GAAI,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,2BAMzE,CAAC;AAEJ,eAAO,MAAM,UAAU,yLAGrB,CAAC;AAEH,eAAO,MAAM,uBAAuB,QAAS,GAAG,CAAC,mBAAmB,YAEtB,CAAC"}

package/lib/AWS/CloudFront/common.js

@@ -18,7 +18,15 @@ const isKvsNotReady = (error) => {
     const tag = error._tag;
     return tag === "ResourceNotFoundException" || tag === "ConflictException";
 };
-const cappedKvsRetrySchedule = Schedule.max([
+/**
+ * Bounded KVS retry: exponential backoff with the per-attempt delay capped
+ * at 2s and at most 24 recurrences (~45s worst case). NEVER use a bare
+ * `Schedule.max([Schedule.exponential(...), Schedule.recurs(n)])` for KVS
+ * retries — `recurs` bounds the COUNT, not the TIME, and an uncapped
+ * exponential makes the tail attempts wait minutes-to-hours (24 attempts
+ * at 100ms doubling total ~19 days), which reads as a silent hang.
+ */
+export const cappedKvsRetrySchedule = Schedule.max([
     Schedule.exponential("100 millis"),
     Schedule.recurs(24),
 ]).pipe(Schedule.modifyDelay(({ duration }) => Effect.succeed(Duration.isGreaterThan(duration, Duration.seconds(2))

package/lib/AWS/CloudFront/common.js.map

@@ -1 +1 @@
-{"version":3,"file":"common.js","sourceRoot":"","sources":["../../../src/AWS/CloudFront/common.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,KAAK,GAAG,MAAM,+CAA+C,CAAC;AACrE,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAE5C,6EAA6E;AAC7E,oDAAoD;AACpD,MAAM,CAAC,MAAM,UAAU,GAAG,WAAoB,CAAC;AAE/C,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAqC,EAAU,EAAE,CAC5E,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAEhD,MAAM,CAAC,MAAM,aAAa,GAAG,CAAU,MAA8B,EAAE,EAAE;AACvE,wEAAwE;AACxE,0EAA0E;AAC1E,iFAAiF;AACjF,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;AAE5E,MAAM,CAAC,MAAM,eAAe,GAC1B,CACE,EAA6C,EAC7C,EAAE,CACJ,CAAC,GAAG,IAAU,EAAE,EAAE,CAChB,aAAa,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;AAE/B,MAAM,aAAa,GAAG,CAAC,KAAc,EAAE,EAAE;IACvC,MAAM,GAAG,GAAI,KAA2B,CAAC,IAAI,CAAC;IAC9C,OAAO,GAAG,KAAK,2BAA2B,IAAI,GAAG,KAAK,mBAAmB,CAAC;AAC5E,CAAC,CAAC;AAEF,MAAM,sBAAsB,GAAG,QAAQ,CAAC,GAAG,CAAC;IAC1C,QAAQ,CAAC,WAAW,CAAC,YAAY,CAAC;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;CACpB,CAAC,CAAC,IAAI,CACL,QAAQ,CAAC,WAAW,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CACpC,MAAM,CAAC,OAAO,CACZ,QAAQ,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACnD,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IACrB,CAAC,CAAC,QAAQ,CACb,CACF,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAU,MAA8B,EAAE,EAAE,CAC9E,MAAM,CAAC,IAAI,CACT,MAAM,CAAC,KAAK,CAAC;IACX,KAAK,EAAE,aAAa;IACpB,QAAQ,EAAE,sBAAsB;CACjC,CAAC,CACH,CAAC;AAEJ,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAa;IAC1D,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACrE,OAAO,QAAQ,CAAC,IAAI,CAAC;AACvB,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,GAA4B,EAAE,EAAE,CACtE,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;IAC/B,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC"}
+{"version":3,"file":"common.js","sourceRoot":"","sources":["../../../src/AWS/CloudFront/common.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,KAAK,GAAG,MAAM,+CAA+C,CAAC;AACrE,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAE5C,6EAA6E;AAC7E,oDAAoD;AACpD,MAAM,CAAC,MAAM,UAAU,GAAG,WAAoB,CAAC;AAE/C,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAqC,EAAU,EAAE,CAC5E,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAEhD,MAAM,CAAC,MAAM,aAAa,GAAG,CAAU,MAA8B,EAAE,EAAE;AACvE,wEAAwE;AACxE,0EAA0E;AAC1E,iFAAiF;AACjF,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;AAE5E,MAAM,CAAC,MAAM,eAAe,GAC1B,CACE,EAA6C,EAC7C,EAAE,CACJ,CAAC,GAAG,IAAU,EAAE,EAAE,CAChB,aAAa,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;AAE/B,MAAM,aAAa,GAAG,CAAC,KAAc,EAAE,EAAE;IACvC,MAAM,GAAG,GAAI,KAA2B,CAAC,IAAI,CAAC;IAC9C,OAAO,GAAG,KAAK,2BAA2B,IAAI,GAAG,KAAK,mBAAmB,CAAC;AAC5E,CAAC,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,QAAQ,CAAC,GAAG,CAAC;IACjD,QAAQ,CAAC,WAAW,CAAC,YAAY,CAAC;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;CACpB,CAAC,CAAC,IAAI,CACL,QAAQ,CAAC,WAAW,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CACpC,MAAM,CAAC,OAAO,CACZ,QAAQ,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACnD,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IACrB,CAAC,CAAC,QAAQ,CACb,CACF,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAU,MAA8B,EAAE,EAAE,CAC9E,MAAM,CAAC,IAAI,CACT,MAAM,CAAC,KAAK,CAAC;IACX,KAAK,EAAE,aAAa;IACpB,QAAQ,EAAE,sBAAsB;CACjC,CAAC,CACH,CAAC;AAEJ,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAa;IAC1D,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACrE,OAAO,QAAQ,CAAC,IAAI,CAAC;AACvB,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,GAA4B,EAAE,EAAE,CACtE,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;IAC/B,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC"}

package/lib/AWS/Cognito/ManagedLoginBranding.d.ts

@@ -0,0 +1,108 @@
+import * as Provider from "../../Provider.ts";
+import { Resource } from "../../Resource.ts";
+import type { Providers } from "../Providers.ts";
+/**
+ * An image asset (logo, favicon, background, …) attached to a managed login
+ * branding style, per color mode.
+ */
+export interface ManagedLoginBrandingAsset {
+    /** Which slot of the managed login pages the asset fills. */
+    category: "FAVICON_ICO" | "FAVICON_SVG" | "EMAIL_GRAPHIC" | "SMS_GRAPHIC" | "AUTH_APP_GRAPHIC" | "PASSWORD_GRAPHIC" | "PASSKEY_GRAPHIC" | "PAGE_HEADER_LOGO" | "PAGE_HEADER_BACKGROUND" | "PAGE_FOOTER_LOGO" | "PAGE_FOOTER_BACKGROUND" | "PAGE_BACKGROUND" | "FORM_BACKGROUND" | "FORM_LOGO" | "IDP_BUTTON_ICON";
+    /** The color scheme the asset applies to. */
+    colorMode: "LIGHT" | "DARK" | "DYNAMIC";
+    /** The file type of the asset. */
+    extension: "ICO" | "JPEG" | "PNG" | "SVG" | "WEBP";
+    /** The image file, as bytes (max 2 MB). */
+    bytes?: Uint8Array;
+    /** For `IDP_BUTTON_ICON` assets, the identity provider the icon is for. */
+    resourceId?: string;
+}
+export interface ManagedLoginBrandingProps {
+    /**
+     * The ID of the user pool the branding style belongs to. Changing this
+     * triggers a replacement.
+     */
+    userPoolId: string;
+    /**
+     * The ID of the app client the branding style is assigned to. Each app
+     * client can have exactly one style. Changing this triggers a
+     * replacement.
+     */
+    clientId: string;
+    /**
+     * Apply Cognito's default branding instead of custom `settings` /
+     * `assets`. This is what makes a fresh pool's managed login pages render
+     * without a one-time console step.
+     * @default true when neither `settings` nor `assets` is provided
+     */
+    useCognitoProvidedValues?: boolean;
+    /**
+     * The branding settings JSON document (colors, component styles, …) in
+     * the shape produced by the managed login branding designer / returned by
+     * `DescribeManagedLoginBranding`.
+     */
+    settings?: Record<string, unknown>;
+    /**
+     * Image assets for the branding style (logos, favicons, backgrounds),
+     * one per category + color mode.
+     */
+    assets?: ManagedLoginBrandingAsset[];
+}
+export interface ManagedLoginBranding extends Resource<"AWS.Cognito.ManagedLoginBranding", ManagedLoginBrandingProps, {
+    /** The generated ID of the branding style. */
+    managedLoginBrandingId: string;
+    /** The ID of the user pool the style belongs to. */
+    userPoolId: string;
+    /** The ID of the app client the style is assigned to. */
+    clientId: string;
+}, never, Providers> {
+}
+/**
+ * A managed login branding style for an Amazon Cognito user pool app
+ * client. Assigning a style (even just Cognito's provided defaults) is what
+ * activates the hosted managed login pages — a `UserPoolDomain` with
+ * `managedLoginVersion: 2` serves them end-to-end without any console step.
+ * ### Activating Managed Login
+ * **Example:** Default Branding for a Hosted Login Domain
+ * ```typescript
+ * import * as Cognito from "alchemy/AWS/Cognito";
+ *
+ * const pool = yield* Cognito.UserPool("Users", {});
+ * const client = yield* Cognito.UserPoolClient("Web", {
+ *   userPoolId: pool.userPoolId,
+ *   callbackUrls: ["https://example.com/callback"],
+ *   allowedOAuthFlowsUserPoolClient: true,
+ *   allowedOAuthFlows: ["code"],
+ *   allowedOAuthScopes: ["openid", "email"],
+ * });
+ * const domain = yield* Cognito.UserPoolDomain("AuthDomain", {
+ *   userPoolId: pool.userPoolId,
+ *   managedLoginVersion: 2,
+ * });
+ * yield* Cognito.ManagedLoginBranding("Branding", {
+ *   userPoolId: pool.userPoolId,
+ *   clientId: client.clientId,
+ * });
+ * ```
+ *
+ * ### Custom Branding
+ * **Example:** Custom Settings and a Logo Asset
+ * ```typescript
+ * yield* Cognito.ManagedLoginBranding("Branding", {
+ *   userPoolId: pool.userPoolId,
+ *   clientId: client.clientId,
+ *   settings: brandingSettings, // designer-exported JSON document
+ *   assets: [{
+ *     category: "FORM_LOGO",
+ *     colorMode: "LIGHT",
+ *     extension: "PNG",
+ *     bytes: logoBytes,
+ *   }],
+ * });
+ * ```
+ *
+ * @resource
+ */
+export declare const ManagedLoginBranding: import("../../Resource.ts").ResourceClass<ManagedLoginBranding>;
+export declare const ManagedLoginBrandingProvider: () => import("effect/Layer").Layer<Provider.Provider<ManagedLoginBranding>, never, import("@distilled.cloud/aws/Credentials").Credentials | import("effect/unstable/http/HttpClient").HttpClient>;
+//# sourceMappingURL=ManagedLoginBranding.d.ts.map

package/lib/AWS/Cognito/ManagedLoginBranding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ManagedLoginBranding.d.ts","sourceRoot":"","sources":["../../../src/AWS/Cognito/ManagedLoginBranding.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACxC,6DAA6D;IAC7D,QAAQ,EACJ,aAAa,GACb,aAAa,GACb,eAAe,GACf,aAAa,GACb,kBAAkB,GAClB,kBAAkB,GAClB,iBAAiB,GACjB,kBAAkB,GAClB,wBAAwB,GACxB,kBAAkB,GAClB,wBAAwB,GACxB,iBAAiB,GACjB,iBAAiB,GACjB,WAAW,GACX,iBAAiB,CAAC;IACtB,6CAA6C;IAC7C,SAAS,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;IACxC,kCAAkC;IAClC,SAAS,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,KAAK,GAAG,MAAM,CAAC;IACnD,2CAA2C;IAC3C,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,2EAA2E;IAC3E,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,yBAAyB;IACxC;;;OAGG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;OAKG;IACH,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC;;;OAGG;IACH,MAAM,CAAC,EAAE,yBAAyB,EAAE,CAAC;CACtC;AAED,MAAM,WAAW,oBAAqB,SAAQ,QAAQ,CACpD,kCAAkC,EAClC,yBAAyB,EACzB;IACE,8CAA8C;IAC9C,sBAAsB,EAAE,MAAM,CAAC;IAC/B,oDAAoD;IACpD,UAAU,EAAE,MAAM,CAAC;IACnB,yDAAyD;IACzD,QAAQ,EAAE,MAAM,CAAC;CAClB,EACD,KAAK,EACL,SAAS,CACV;CAAG;AAEJ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AACH,eAAO,MAAM,oBAAoB,iEAEhC,CAAC;AAqDF,eAAO,MAAM,4BAA4B,mMAsJtC,CAAC"}

package/lib/AWS/Cognito/ManagedLoginBranding.js

@@ -0,0 +1,200 @@
+import * as cip from "@distilled.cloud/aws/cognito-identity-provider";
+import * as Effect from "effect/Effect";
+import * as Schedule from "effect/Schedule";
+import { isResolved } from "../../Diff.js";
+import * as Provider from "../../Provider.js";
+import { Resource } from "../../Resource.js";
+/**
+ * A managed login branding style for an Amazon Cognito user pool app
+ * client. Assigning a style (even just Cognito's provided defaults) is what
+ * activates the hosted managed login pages — a `UserPoolDomain` with
+ * `managedLoginVersion: 2` serves them end-to-end without any console step.
+ * ### Activating Managed Login
+ * **Example:** Default Branding for a Hosted Login Domain
+ * ```typescript
+ * import * as Cognito from "alchemy/AWS/Cognito";
+ *
+ * const pool = yield* Cognito.UserPool("Users", {});
+ * const client = yield* Cognito.UserPoolClient("Web", {
+ *   userPoolId: pool.userPoolId,
+ *   callbackUrls: ["https://example.com/callback"],
+ *   allowedOAuthFlowsUserPoolClient: true,
+ *   allowedOAuthFlows: ["code"],
+ *   allowedOAuthScopes: ["openid", "email"],
+ * });
+ * const domain = yield* Cognito.UserPoolDomain("AuthDomain", {
+ *   userPoolId: pool.userPoolId,
+ *   managedLoginVersion: 2,
+ * });
+ * yield* Cognito.ManagedLoginBranding("Branding", {
+ *   userPoolId: pool.userPoolId,
+ *   clientId: client.clientId,
+ * });
+ * ```
+ *
+ * ### Custom Branding
+ * **Example:** Custom Settings and a Logo Asset
+ * ```typescript
+ * yield* Cognito.ManagedLoginBranding("Branding", {
+ *   userPoolId: pool.userPoolId,
+ *   clientId: client.clientId,
+ *   settings: brandingSettings, // designer-exported JSON document
+ *   assets: [{
+ *     category: "FORM_LOGO",
+ *     colorMode: "LIGHT",
+ *     extension: "PNG",
+ *     bytes: logoBytes,
+ *   }],
+ * });
+ * ```
+ *
+ * @resource
+ */
+export const ManagedLoginBranding = Resource("AWS.Cognito.ManagedLoginBranding");
+const toWireAssets = (assets) => assets?.map((asset) => ({
+    Category: asset.category,
+    ColorMode: asset.colorMode,
+    Extension: asset.extension,
+    Bytes: asset.bytes,
+    ResourceId: asset.resourceId,
+}));
+/** Canonicalize an asset list for order-insensitive comparison; bytes are
+ * folded to base64. */
+const canonicalAssets = (assets) => (assets ?? [])
+    .map((asset) => [
+    asset.Category,
+    asset.ColorMode,
+    asset.Extension,
+    asset.ResourceId ?? "",
+    asset.Bytes === undefined
+        ? ""
+        : Buffer.from(asset.Bytes).toString("base64"),
+].join(":"))
+    .sort()
+    .join(",");
+/**
+ * Whether the style should carry Cognito's provided default values: an
+ * explicit prop wins, otherwise defaults to `true` exactly when no custom
+ * settings/assets are declared.
+ */
+const desiredUseProvidedValues = (news) => news.useCognitoProvidedValues ??
+    (news.settings === undefined && news.assets === undefined);
+/**
+ * Bounded retry over the concurrent-modification window (branding updates
+ * can race domain/pool operations). Explicitly typed so the conditional
+ * `Retry.Return` type never leaks into declaration emit.
+ */
+const retryWhileConcurrent = (self) => Effect.retry(self, {
+    while: (e) => e._tag === "ConcurrentModificationException",
+    schedule: Schedule.max([Schedule.fixed("2 seconds"), Schedule.recurs(10)]),
+});
+export const ManagedLoginBrandingProvider = () => Provider.effect(ManagedLoginBranding, Effect.gen(function* () {
+    const describeById = Effect.fn(function* (userPoolId, managedLoginBrandingId) {
+        return yield* cip
+            .describeManagedLoginBranding({
+            UserPoolId: userPoolId,
+            ManagedLoginBrandingId: managedLoginBrandingId,
+        })
+            .pipe(Effect.map((r) => r.ManagedLoginBranding), Effect.catchTag("ResourceNotFoundException", () => Effect.succeed(undefined)));
+    });
+    const describeByClient = Effect.fn(function* (userPoolId, clientId) {
+        return yield* cip
+            .describeManagedLoginBrandingByClient({
+            UserPoolId: userPoolId,
+            ClientId: clientId,
+        })
+            .pipe(Effect.map((r) => r.ManagedLoginBranding), Effect.catchTag("ResourceNotFoundException", () => Effect.succeed(undefined)));
+    });
+    return ManagedLoginBranding.Provider.of({
+        stables: ["managedLoginBrandingId", "userPoolId", "clientId"],
+        // Sub-resource keyed entirely by its user pool (userPoolId) with no
+        // global enumeration API of its own — nuke reaches it through the
+        // parent's deletion, so enumeration returns empty per the
+        // ProviderService doctrine.
+        list: () => Effect.succeed([]),
+        read: Effect.fn(function* ({ olds, output }) {
+            const userPoolId = output?.userPoolId ?? olds?.userPoolId;
+            const clientId = output?.clientId ?? olds?.clientId;
+            if (userPoolId === undefined)
+                return undefined;
+            const observed = output?.managedLoginBrandingId !== undefined
+                ? yield* describeById(userPoolId, output.managedLoginBrandingId)
+                : clientId !== undefined
+                    ? yield* describeByClient(userPoolId, clientId)
+                    : undefined;
+            if (observed?.ManagedLoginBrandingId === undefined)
+                return undefined;
+            return {
+                managedLoginBrandingId: observed.ManagedLoginBrandingId,
+                userPoolId,
+                clientId: clientId,
+            };
+        }),
+        diff: Effect.fn(function* ({ news, olds }) {
+            if (!isResolved(news))
+                return undefined;
+            if (olds?.userPoolId !== news?.userPoolId ||
+                olds?.clientId !== news?.clientId) {
+                return { action: "replace" };
+            }
+        }),
+        reconcile: Effect.fn(function* ({ news, output, session }) {
+            const { userPoolId, clientId } = news;
+            const useProvided = desiredUseProvidedValues(news);
+            // 1. OBSERVE — output.managedLoginBrandingId is only a cache;
+            //    fall back to the by-client lookup so state loss converges.
+            let observed = output?.managedLoginBrandingId !== undefined
+                ? yield* describeById(userPoolId, output.managedLoginBrandingId)
+                : undefined;
+            if (observed === undefined) {
+                observed = yield* describeByClient(userPoolId, clientId);
+            }
+            // 2. ENSURE — create when missing; a branding created out-of-band
+            //    (or by a concurrent run) for the same client surfaces as
+            //    ManagedLoginBrandingExistsException and is taken over.
+            if (observed === undefined) {
+                observed = yield* cip
+                    .createManagedLoginBranding({
+                    UserPoolId: userPoolId,
+                    ClientId: clientId,
+                    UseCognitoProvidedValues: useProvided,
+                    Settings: news.settings,
+                    Assets: toWireAssets(news.assets),
+                })
+                    .pipe(Effect.map((r) => r.ManagedLoginBranding), Effect.catchTag("ManagedLoginBrandingExistsException", () => describeByClient(userPoolId, clientId)));
+            }
+            const managedLoginBrandingId = observed?.ManagedLoginBrandingId;
+            // 3. SYNC — diff observed style against desired; skip the update
+            //    entirely on no-op.
+            const drift = (observed?.UseCognitoProvidedValues ?? false) !== useProvided ||
+                (news.settings !== undefined &&
+                    JSON.stringify(news.settings) !==
+                        JSON.stringify(observed?.Settings)) ||
+                (news.assets !== undefined &&
+                    canonicalAssets(toWireAssets(news.assets)) !==
+                        canonicalAssets(observed?.Assets));
+            if (drift) {
+                yield* cip
+                    .updateManagedLoginBranding({
+                    UserPoolId: userPoolId,
+                    ManagedLoginBrandingId: managedLoginBrandingId,
+                    UseCognitoProvidedValues: useProvided,
+                    Settings: news.settings,
+                    Assets: toWireAssets(news.assets),
+                })
+                    .pipe(retryWhileConcurrent);
+            }
+            yield* session.note(managedLoginBrandingId);
+            return { managedLoginBrandingId, userPoolId, clientId };
+        }),
+        delete: Effect.fn(function* ({ output }) {
+            yield* cip
+                .deleteManagedLoginBranding({
+                UserPoolId: output.userPoolId,
+                ManagedLoginBrandingId: output.managedLoginBrandingId,
+            })
+                .pipe(Effect.catchTag("ResourceNotFoundException", () => Effect.void), retryWhileConcurrent);
+        }),
+    });
+}));
+//# sourceMappingURL=ManagedLoginBranding.js.map

package/lib/AWS/Cognito/ManagedLoginBranding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ManagedLoginBranding.js","sourceRoot":"","sources":["../../../src/AWS/Cognito/ManagedLoginBranding.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,gDAAgD,CAAC;AACtE,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAkF7C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,QAAQ,CAC1C,kCAAkC,CACnC,CAAC;AAEF,MAAM,YAAY,GAAG,CACnB,MAA+C,EAClB,EAAE,CAC/B,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;IACxB,SAAS,EAAE,KAAK,CAAC,SAAS;IAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;IAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;IAClB,UAAU,EAAE,KAAK,CAAC,UAAU;CAC7B,CAAC,CAAC,CAAC;AAEN;uBACuB;AACvB,MAAM,eAAe,GAAG,CAAC,MAAmC,EAAE,EAAE,CAC9D,CAAC,MAAM,IAAI,EAAE,CAAC;KACX,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACb;IACE,KAAK,CAAC,QAAQ;IACd,KAAK,CAAC,SAAS;IACf,KAAK,CAAC,SAAS;IACf,KAAK,CAAC,UAAU,IAAI,EAAE;IACtB,KAAK,CAAC,KAAK,KAAK,SAAS;QACvB,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;CAChD,CAAC,IAAI,CAAC,GAAG,CAAC,CACZ;KACA,IAAI,EAAE;KACN,IAAI,CAAC,GAAG,CAAC,CAAC;AAEf;;;;GAIG;AACH,MAAM,wBAAwB,GAAG,CAAC,IAA+B,EAAE,EAAE,CACnE,IAAI,CAAC,wBAAwB;IAC7B,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;AAE7D;;;;GAIG;AACH,MAAM,oBAAoB,GAAG,CAC3B,IAA4B,EACJ,EAAE,CAC1B,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE;IACjB,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,iCAAiC;IAC1D,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;CAC3E,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,4BAA4B,GAAG,GAAG,EAAE,CAC/C,QAAQ,CAAC,MAAM,CACb,oBAAoB,EACpB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,YAAY,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EACtC,UAAkB,EAClB,sBAA8B;QAE9B,OAAO,KAAK,CAAC,CAAC,GAAG;aACd,4BAA4B,CAAC;YAC5B,UAAU,EAAE,UAAU;YACtB,sBAAsB,EAAE,sBAAsB;SAC/C,CAAC;aACD,IAAI,CACH,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,oBAAoB,CAAC,EACzC,MAAM,CAAC,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE,CAChD,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAC1B,CACF,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,MAAM,gBAAgB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAC1C,UAAkB,EAClB,QAAgB;QAEhB,OAAO,KAAK,CAAC,CAAC,GAAG;aACd,oCAAoC,CAAC;YACpC,UAAU,EAAE,UAAU;YACtB,QAAQ,EAAE,QAAQ;SACnB,CAAC;aACD,IAAI,CACH,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,oBAAoB,CAAC,EACzC,MAAM,CAAC,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE,CAChD,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAC1B,CACF,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,OAAO,oBAAoB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtC,OAAO,EAAE,CAAC,wBAAwB,EAAE,YAAY,EAAE,UAAU,CAAC;QAE7D,oEAAoE;QACpE,kEAAkE;QAClE,0DAA0D;QAC1D,4BAA4B;QAC5B,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAE9B,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;YACzC,MAAM,UAAU,GAAG,MAAM,EAAE,UAAU,IAAI,IAAI,EAAE,UAAU,CAAC;YAC1D,MAAM,QAAQ,GAAG,MAAM,EAAE,QAAQ,IAAI,IAAI,EAAE,QAAQ,CAAC;YACpD,IAAI,UAAU,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YAC/C,MAAM,QAAQ,GACZ,MAAM,EAAE,sBAAsB,KAAK,SAAS;gBAC1C,CAAC,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,sBAAsB,CAAC;gBAChE,CAAC,CAAC,QAAQ,KAAK,SAAS;oBACtB,CAAC,CAAC,KAAK,CAAC,CAAC,gBAAgB,CAAC,UAAU,EAAE,QAAQ,CAAC;oBAC/C,CAAC,CAAC,SAAS,CAAC;YAClB,IAAI,QAAQ,EAAE,sBAAsB,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YACrE,OAAO;gBACL,sBAAsB,EAAE,QAAQ,CAAC,sBAAsB;gBACvD,UAAU;gBACV,QAAQ,EAAE,QAAS;aACpB,CAAC;QACJ,CAAC,CAAC;QAEF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;YACvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,SAAS,CAAC;YACxC,IACE,IAAI,EAAE,UAAU,KAAK,IAAI,EAAE,UAAU;gBACrC,IAAI,EAAE,QAAQ,KAAK,IAAI,EAAE,QAAQ,EACjC,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;QACH,CAAC,CAAC;QAEF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;YACvD,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;YACtC,MAAM,WAAW,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;YAEnD,8DAA8D;YAC9D,gEAAgE;YAChE,IAAI,QAAQ,GACV,MAAM,EAAE,sBAAsB,KAAK,SAAS;gBAC1C,CAAC,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,sBAAsB,CAAC;gBAChE,CAAC,CAAC,SAAS,CAAC;YAChB,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,QAAQ,GAAG,KAAK,CAAC,CAAC,gBAAgB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YAC3D,CAAC;YAED,kEAAkE;YAClE,8DAA8D;YAC9D,4DAA4D;YAC5D,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,QAAQ,GAAG,KAAK,CAAC,CAAC,GAAG;qBAClB,0BAA0B,CAAC;oBAC1B,UAAU,EAAE,UAAU;oBACtB,QAAQ,EAAE,QAAQ;oBAClB,wBAAwB,EAAE,WAAW;oBACrC,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC;iBAClC,CAAC;qBACD,IAAI,CACH,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,oBAAoB,CAAC,EACzC,MAAM,CAAC,QAAQ,CAAC,qCAAqC,EAAE,GAAG,EAAE,CAC1D,gBAAgB,CAAC,UAAU,EAAE,QAAQ,CAAC,CACvC,CACF,CAAC;YACN,CAAC;YAED,MAAM,sBAAsB,GAAG,QAAQ,EAAE,sBAAuB,CAAC;YAEjE,iEAAiE;YACjE,wBAAwB;YACxB,MAAM,KAAK,GACT,CAAC,QAAQ,EAAE,wBAAwB,IAAI,KAAK,CAAC,KAAK,WAAW;gBAC7D,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS;oBAC1B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC;wBAC3B,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;gBACvC,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS;oBACxB,eAAe,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;wBACxC,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;YACzC,IAAI,KAAK,EAAE,CAAC;gBACV,KAAK,CAAC,CAAC,GAAG;qBACP,0BAA0B,CAAC;oBAC1B,UAAU,EAAE,UAAU;oBACtB,sBAAsB,EAAE,sBAAsB;oBAC9C,wBAAwB,EAAE,WAAW;oBACrC,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC;iBAClC,CAAC;qBACD,IAAI,CAAC,oBAAoB,CAAC,CAAC;YAChC,CAAC;YAED,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;YAC5C,OAAO,EAAE,sBAAsB,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;QAC1D,CAAC,CAAC;QAEF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACrC,KAAK,CAAC,CAAC,GAAG;iBACP,0BAA0B,CAAC;gBAC1B,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,sBAAsB,EAAE,MAAM,CAAC,sBAAsB;aACtD,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAC/D,oBAAoB,CACrB,CAAC;QACN,CAAC,CAAC;KACH,CAAC,CAAC;AACL,CAAC,CAAC,CACH,CAAC"}

package/lib/AWS/Cognito/UserPool.d.ts

@@ -98,9 +98,10 @@ export interface UserPoolSchemaAttribute {
 }
 /**
  * The user pool Lambda trigger slots that take a plain function ARN — the
- * string-valued keys of the pool's `LambdaConfig`. (`CustomSMSSender` /
- * `CustomEmailSender` take versioned config objects + a KMS key and are
- * out of scope for the trigger event source.)
+ * string-valued keys of the pool's `LambdaConfig`. The versioned custom
+ * sender slots are configured separately: `CustomEmailSender` through
+ * {@link UserPoolProps.customEmailSender} (+ `kmsKeyId`); `CustomSMSSender`
+ * is not modelled yet (an observed one is preserved, never cleared).
  */
 export type UserPoolTriggerName = "PreSignUp" | "PostConfirmation" | "PreAuthentication" | "PostAuthentication" | "CustomMessage" | "DefineAuthChallenge" | "CreateAuthChallenge" | "VerifyAuthChallengeResponse" | "PreTokenGeneration" | "UserMigration";
 /**
@@ -132,6 +133,93 @@ export declare class ConflictingUserPoolTrigger extends ConflictingUserPoolTrigg
     readonly functionArns: readonly string[];
 }> {
 }
+declare const InvalidUserPoolConfiguration_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "InvalidUserPoolConfiguration";
+} & Readonly<A>;
+/**
+ * The user pool's configuration is internally inconsistent (e.g. a custom
+ * email sender without the KMS key Cognito needs to encrypt the codes it
+ * hands to the function). Raised before any API call is made.
+ */
+export declare class InvalidUserPoolConfiguration extends InvalidUserPoolConfiguration_base<{
+    readonly reason: string;
+}> {
+}
+/**
+ * A first-factor sign-in method for choice-based authentication.
+ */
+export type UserPoolAuthFactor = "PASSWORD" | "EMAIL_OTP" | "SMS_OTP" | "WEB_AUTHN";
+/**
+ * The sign-in policy of the pool — which first-factor authentication
+ * methods users may start with (choice-based authentication). Requires the
+ * `ESSENTIALS` or `PLUS` feature tier.
+ */
+export interface UserPoolSignInPolicy {
+    /**
+     * First-factor sign-in methods the pool allows. `PASSWORD` is the
+     * classic username + password flow; `EMAIL_OTP` / `SMS_OTP` send a
+     * one-time code (email OTP is delivered through `customEmailSender` when
+     * one is configured); `WEB_AUTHN` is passkey sign-in.
+     * Passwordless factors require the `ESSENTIALS` or `PLUS` tier.
+     */
+    allowedFirstAuthFactors?: UserPoolAuthFactor[];
+}
+/**
+ * The `CustomEmailSender` Lambda trigger: Cognito invokes this function
+ * instead of sending email itself, passing the verification / OTP code
+ * encrypted with `kmsKeyId` (decrypt it with the AWS Encryption SDK).
+ * Requires {@link UserPoolProps.kmsKeyId}. The function must also grant
+ * `cognito-idp.amazonaws.com` invoke access (`AWS.Lambda.Permission`).
+ */
+export interface UserPoolCustomEmailSender {
+    /** ARN of the Lambda function that delivers the pool's email messages. */
+    lambdaArn: string;
+    /**
+     * The custom sender event version the function understands.
+     * @default "V1_0"
+     */
+    lambdaVersion?: "V1_0";
+}
+/**
+ * How the user pool delivers its email messages (verification codes, OTPs,
+ * invitations): either Cognito's built-in, rate-limited delivery
+ * (`COGNITO_DEFAULT`) or your own verified Amazon SES identity
+ * (`DEVELOPER`). With `DEVELOPER`, the SES identity's policy must grant
+ * `cognito-idp.amazonaws.com` permission to send
+ * (`SES.EmailIdentityPolicy`).
+ */
+export interface UserPoolEmailConfiguration {
+    /**
+     * Which sending account delivers the pool's email. `COGNITO_DEFAULT`
+     * uses Cognito's built-in delivery (limited daily volume);
+     * `DEVELOPER` sends through your own SES identity (`sourceArn`
+     * required) at your SES quota.
+     * @default "COGNITO_DEFAULT"
+     */
+    emailSendingAccount?: "COGNITO_DEFAULT" | "DEVELOPER";
+    /**
+     * ARN of a verified SES email identity (address or domain) in a
+     * supported region. Required when `emailSendingAccount` is `DEVELOPER`;
+     * with `COGNITO_DEFAULT` it customizes the FROM address while Cognito
+     * still handles delivery.
+     */
+    sourceArn?: string;
+    /**
+     * The FROM address, either bare (`no-reply@example.com`) or with a
+     * friendly display name (`"My App <no-reply@example.com>"`). Must be
+     * covered by the `sourceArn` identity.
+     */
+    from?: string;
+    /**
+     * The destination for replies to the pool's messages.
+     */
+    replyToEmailAddress?: string;
+    /**
+     * Name of an SES configuration set applied to email sent by the pool
+     * (event publishing, IP pool selection). `DEVELOPER` only.
+     */
+    configurationSet?: string;
+}
 /**
  * An account recovery mechanism with its priority (1 is highest).
  */
@@ -177,6 +265,13 @@ export interface UserPoolProps {
      * removing or changing a declared attribute triggers a replacement.
      */
     schema?: UserPoolSchemaAttribute[];
+    /**
+     * Choice-based authentication: the first-factor sign-in methods users may
+     * start with (`PASSWORD`, `EMAIL_OTP`, `SMS_OTP`, `WEB_AUTHN`). Requires
+     * the `ESSENTIALS` or `PLUS` tier when any passwordless factor is listed.
+     * When omitted the observed policy is left untouched.
+     */
+    signInPolicy?: UserPoolSignInPolicy;
     /**
      * Multi-factor authentication mode. `ON` requires SMS or TOTP setup for
      * every user; avoid SMS-based MFA unless the account has SNS spend
@@ -219,6 +314,31 @@ export interface UserPoolProps {
      * Permission and registers the runtime handler.
      */
     lambdaConfig?: UserPoolLambdaConfig;
+    /**
+     * Route the pool's email messages (sign-up / OTP / recovery codes,
+     * temporary passwords) through your own Lambda function instead of
+     * Cognito's built-in delivery. Requires `kmsKeyId`. Omitting this on an
+     * existing pool clears the custom sender (Cognito falls back to its own
+     * email delivery); ordinary triggers and the other pool settings are
+     * never affected by adding or removing it.
+     */
+    customEmailSender?: UserPoolCustomEmailSender;
+    /**
+     * How the pool delivers its email messages: Cognito's built-in delivery
+     * (`COGNITO_DEFAULT`, the service default) or a verified SES identity
+     * (`DEVELOPER`) — no custom sender Lambda required. When omitted, an
+     * observed email configuration is preserved rather than reset to the
+     * service default.
+     */
+    emailConfiguration?: UserPoolEmailConfiguration;
+    /**
+     * ARN of the symmetric KMS key Cognito uses to encrypt the codes it
+     * passes to the custom sender function(s) (`LambdaConfig.KMSKeyID`).
+     * The principal running the deploy must hold `kms:CreateGrant` on the
+     * key — Cognito creates a grant against it when the pool is configured —
+     * and the sender function's role needs `kms:Decrypt`.
+     */
+    kmsKeyId?: string;
     /**
      * Tags to apply to the user pool. Merged with internal Alchemy tags.
      */
@@ -276,6 +396,59 @@ export interface UserPool extends Resource<"AWS.Cognito.UserPool", UserPoolProps
  * });
  * ```
  *
+ * ### Sending Email Through SES
+ * **Example:** OTP and Verification Email from a Verified SES Identity
+ * ```typescript
+ * const identity = yield* SES.EmailIdentity("Sender", {
+ *   emailIdentity: "mail.example.com",
+ * });
+ * // allow Cognito to send through the identity
+ * yield* SES.EmailIdentityPolicy("CognitoSend", {
+ *   emailIdentity: identity.emailIdentity,
+ *   policyName: "cognito",
+ *   policy: {
+ *     Version: "2012-10-17",
+ *     Statement: [{
+ *       Effect: "Allow",
+ *       Principal: { Service: "cognito-idp.amazonaws.com" },
+ *       Action: ["ses:SendEmail", "ses:SendRawEmail"],
+ *       Resource: identity.identityArn,
+ *     }],
+ *   },
+ * });
+ * const pool = yield* Cognito.UserPool("Users", {
+ *   usernameAttributes: ["email"],
+ *   autoVerifiedAttributes: ["email"],
+ *   emailConfiguration: {
+ *     emailSendingAccount: "DEVELOPER",
+ *     sourceArn: identity.identityArn,
+ *     from: "My App <no-reply@mail.example.com>",
+ *     replyToEmailAddress: "support@example.com",
+ *   },
+ * });
+ * ```
+ *
+ * ### Email OTP with a Custom Email Sender
+ * **Example:** Passwordless Email OTP Delivered by Your Own Lambda
+ * ```typescript
+ * const key = yield* KMS.Key("CodeKey", {});
+ * const sender = yield* Lambda.Function("EmailSender", {
+ *   main: import.meta.url,
+ * });
+ * yield* Lambda.Permission("CognitoInvoke", {
+ *   functionName: sender.functionName,
+ *   action: "lambda:InvokeFunction",
+ *   principal: "cognito-idp.amazonaws.com",
+ * });
+ * const pool = yield* Cognito.UserPool("Auth", {
+ *   tier: "ESSENTIALS",
+ *   usernameAttributes: ["email"],
+ *   signInPolicy: { allowedFirstAuthFactors: ["PASSWORD", "EMAIL_OTP"] },
+ *   customEmailSender: { lambdaArn: sender.functionArn },
+ *   kmsKeyId: key.keyArn,
+ * });
+ * ```
+ *
  * ### App Clients and Auth
  * **Example:** Pool with an App Client
  * ```typescript