alchemy 2.0.0-beta.cli-platform-split-2 → 2.0.0-beta.pkg-setup-rc

package/lib/AWS/IAM/User.js

@@ -0,0 +1,289 @@
+import * as iam from "@distilled.cloud/aws/iam";
+import * as Effect from "effect/Effect";
+import { isResolved } from "../../Diff.js";
+import { createPhysicalName } from "../../PhysicalName.js";
+import * as Provider from "../../Provider.js";
+import { Resource } from "../../Resource.js";
+import { createInternalTags, createTagsList, diffTags, hasTags, } from "../../Tags.js";
+import { parsePolicyDocument, stringifyPolicyDocument, toTagRecord, } from "./common.js";
+/**
+ * An IAM user with optional inline policies, managed policies, and tags.
+ *
+ * `User` manages a long-lived IAM identity together with its attached managed
+ * policies, inline policies, permissions boundary, and tags.
+ *
+ * @section Creating IAM Users
+ * @example User with Managed Policies
+ * ```typescript
+ * const user = yield* User("AppUser", {
+ *   userName: "app-user",
+ *   managedPolicyArns: [
+ *     "arn:aws:iam::aws:policy/ReadOnlyAccess",
+ *   ],
+ * });
+ * ```
+ */
+export const User = Resource("AWS.IAM.User");
+export const UserProvider = () => Provider.effect(User, Effect.gen(function* () {
+    const toName = (id, props) => props.userName
+        ? Effect.succeed(props.userName)
+        : createPhysicalName({ id, maxLength: 64 });
+    const readManagedPolicies = Effect.fn(function* (userName) {
+        const listed = yield* iam.listAttachedUserPolicies({
+            UserName: userName,
+        });
+        return (listed.AttachedPolicies ?? [])
+            .map((policy) => policy.PolicyArn)
+            .filter((policyArn) => typeof policyArn === "string");
+    });
+    const readInlinePolicies = Effect.fn(function* (userName) {
+        const listed = yield* iam.listUserPolicies({
+            UserName: userName,
+        });
+        const entries = yield* Effect.all((listed.PolicyNames ?? []).map((policyName) => iam
+            .getUserPolicy({
+            UserName: userName,
+            PolicyName: policyName,
+        })
+            .pipe(Effect.map((response) => [
+            policyName,
+            parsePolicyDocument(response.PolicyDocument),
+        ]), Effect.catchTag("NoSuchEntityException", () => Effect.succeed([policyName, undefined])))));
+        return Object.fromEntries(entries.filter((entry) => entry[1] !== undefined));
+    });
+    const readTags = Effect.fn(function* (userName) {
+        const listed = yield* iam.listUserTags({
+            UserName: userName,
+        });
+        return toTagRecord(listed.Tags);
+    });
+    const syncManagedPolicies = Effect.fn(function* ({ userName, olds, news, }) {
+        const oldSet = new Set(olds);
+        const newSet = new Set(news);
+        for (const policyArn of news) {
+            if (!oldSet.has(policyArn)) {
+                yield* iam.attachUserPolicy({
+                    UserName: userName,
+                    PolicyArn: policyArn,
+                });
+            }
+        }
+        for (const policyArn of olds) {
+            if (!newSet.has(policyArn)) {
+                yield* iam
+                    .detachUserPolicy({
+                    UserName: userName,
+                    PolicyArn: policyArn,
+                })
+                    .pipe(Effect.catchTag("NoSuchEntityException", () => Effect.void));
+            }
+        }
+    });
+    const syncInlinePolicies = Effect.fn(function* ({ userName, olds, news, }) {
+        for (const [policyName, document] of Object.entries(news)) {
+            if (JSON.stringify(olds[policyName] ?? null) !==
+                JSON.stringify(document)) {
+                yield* iam.putUserPolicy({
+                    UserName: userName,
+                    PolicyName: policyName,
+                    PolicyDocument: stringifyPolicyDocument(document),
+                });
+            }
+        }
+        for (const policyName of Object.keys(olds)) {
+            if (!(policyName in news)) {
+                yield* iam
+                    .deleteUserPolicy({
+                    UserName: userName,
+                    PolicyName: policyName,
+                })
+                    .pipe(Effect.catchTag("NoSuchEntityException", () => Effect.void));
+            }
+        }
+    });
+    return {
+        stables: ["userArn", "userName", "userId"],
+        diff: Effect.fn(function* ({ id, olds, news }) {
+            if (!isResolved(news))
+                return;
+            if ((yield* toName(id, olds ?? {})) !==
+                (yield* toName(id, news))) {
+                return { action: "replace" };
+            }
+            if ((olds?.path ?? "/") !== (news.path ?? "/")) {
+                return { action: "replace" };
+            }
+        }),
+        read: Effect.fn(function* ({ id, olds, output }) {
+            const userName = output?.userName ?? (yield* toName(id, olds ?? {}));
+            const response = yield* iam
+                .getUser({
+                UserName: userName,
+            })
+                .pipe(Effect.catchTag("NoSuchEntityException", () => Effect.succeed(undefined)));
+            if (!response?.User?.Arn) {
+                return undefined;
+            }
+            const [managedPolicyArns, inlinePolicies, tags] = yield* Effect.all([
+                readManagedPolicies(userName),
+                readInlinePolicies(userName),
+                readTags(userName),
+            ]);
+            return {
+                userArn: response.User.Arn,
+                userName: response.User.UserName,
+                userId: response.User.UserId,
+                path: response.User.Path,
+                permissionsBoundary: response.User.PermissionsBoundary?.PermissionsBoundaryArn,
+                managedPolicyArns,
+                inlinePolicies,
+                tags,
+            };
+        }),
+        create: Effect.fn(function* ({ id, news, session }) {
+            const userName = yield* toName(id, news);
+            const tags = {
+                ...(yield* createInternalTags(id)),
+                ...news.tags,
+            };
+            const created = yield* iam
+                .createUser({
+                UserName: userName,
+                Path: news.path,
+                PermissionsBoundary: news.permissionsBoundary,
+                Tags: createTagsList(tags),
+            })
+                .pipe(Effect.catchTag("EntityAlreadyExistsException", () => iam
+                .getUser({
+                UserName: userName,
+            })
+                .pipe(Effect.filterOrFail((existing) => hasTags(tags, existing.User?.Tags), () => new Error(`User '${userName}' already exists and is not managed by alchemy`)))));
+            yield* syncManagedPolicies({
+                userName,
+                olds: [],
+                news: news.managedPolicyArns ?? [],
+            });
+            yield* syncInlinePolicies({
+                userName,
+                olds: {},
+                news: news.inlinePolicies ?? {},
+            });
+            yield* session.note(created.User?.Arn ?? userName);
+            return {
+                userArn: created.User?.Arn ?? userName,
+                userName,
+                userId: created.User?.UserId,
+                path: created.User?.Path ?? news.path ?? "/",
+                permissionsBoundary: created.User?.PermissionsBoundary?.PermissionsBoundaryArn ??
+                    news.permissionsBoundary,
+                managedPolicyArns: news.managedPolicyArns ?? [],
+                inlinePolicies: news.inlinePolicies ?? {},
+                tags,
+            };
+        }),
+        update: Effect.fn(function* ({ id, news, olds, output, session }) {
+            if (news.permissionsBoundary !== olds.permissionsBoundary) {
+                if (news.permissionsBoundary) {
+                    yield* iam.putUserPermissionsBoundary({
+                        UserName: output.userName,
+                        PermissionsBoundary: news.permissionsBoundary,
+                    });
+                }
+                else if (olds.permissionsBoundary) {
+                    yield* iam
+                        .deleteUserPermissionsBoundary({
+                        UserName: output.userName,
+                    })
+                        .pipe(Effect.catchTag("NoSuchEntityException", () => Effect.void));
+                }
+            }
+            yield* syncManagedPolicies({
+                userName: output.userName,
+                olds: olds.managedPolicyArns ?? [],
+                news: news.managedPolicyArns ?? [],
+            });
+            yield* syncInlinePolicies({
+                userName: output.userName,
+                olds: olds.inlinePolicies ?? {},
+                news: news.inlinePolicies ?? {},
+            });
+            const oldTags = {
+                ...(yield* createInternalTags(id)),
+                ...olds.tags,
+            };
+            const newTags = {
+                ...(yield* createInternalTags(id)),
+                ...news.tags,
+            };
+            const { removed, upsert } = diffTags(oldTags, newTags);
+            if (upsert.length > 0) {
+                yield* iam.tagUser({
+                    UserName: output.userName,
+                    Tags: upsert,
+                });
+            }
+            if (removed.length > 0) {
+                yield* iam.untagUser({
+                    UserName: output.userName,
+                    TagKeys: removed,
+                });
+            }
+            const user = yield* iam.getUser({
+                UserName: output.userName,
+            });
+            yield* session.note(output.userArn);
+            return {
+                userArn: user.User?.Arn ?? output.userArn,
+                userName: user.User?.UserName ?? output.userName,
+                userId: user.User?.UserId ?? output.userId,
+                path: user.User?.Path ?? output.path,
+                permissionsBoundary: user.User?.PermissionsBoundary?.PermissionsBoundaryArn ??
+                    news.permissionsBoundary,
+                managedPolicyArns: news.managedPolicyArns ?? [],
+                inlinePolicies: news.inlinePolicies ?? {},
+                tags: newTags,
+            };
+        }),
+        delete: Effect.fn(function* ({ output }) {
+            yield* iam
+                .deleteUserPermissionsBoundary({
+                UserName: output.userName,
+            })
+                .pipe(Effect.catchTag("NoSuchEntityException", () => Effect.void));
+            const inlinePolicies = yield* iam
+                .listUserPolicies({
+                UserName: output.userName,
+            })
+                .pipe(Effect.catchTag("NoSuchEntityException", () => Effect.succeed(undefined)));
+            for (const policyName of inlinePolicies?.PolicyNames ?? []) {
+                yield* iam
+                    .deleteUserPolicy({
+                    UserName: output.userName,
+                    PolicyName: policyName,
+                })
+                    .pipe(Effect.catchTag("NoSuchEntityException", () => Effect.void));
+            }
+            const attachedPolicies = yield* iam
+                .listAttachedUserPolicies({
+                UserName: output.userName,
+            })
+                .pipe(Effect.catchTag("NoSuchEntityException", () => Effect.succeed(undefined)));
+            for (const policy of attachedPolicies?.AttachedPolicies ?? []) {
+                if (policy.PolicyArn) {
+                    yield* iam
+                        .detachUserPolicy({
+                        UserName: output.userName,
+                        PolicyArn: policy.PolicyArn,
+                    })
+                        .pipe(Effect.catchTag("NoSuchEntityException", () => Effect.void));
+                }
+            }
+            yield* iam
+                .deleteUser({
+                UserName: output.userName,
+            })
+                .pipe(Effect.catchTag("NoSuchEntityException", () => Effect.void));
+        }),
+    };
+}));
+//# sourceMappingURL=User.js.map

package/lib/AWS/IAM/User.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"User.js","sourceRoot":"","sources":["../../../src/AWS/IAM/User.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,0BAA0B,CAAC;AAChD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,QAAQ,EACR,OAAO,GACR,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,mBAAmB,EACnB,uBAAuB,EACvB,WAAW,GACZ,MAAM,aAAa,CAAC;AA+CrB;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG,QAAQ,CAAO,cAAc,CAAC,CAAC;AAEnD,MAAM,CAAC,MAAM,YAAY,GAAG,GAAG,EAAE,CAC/B,QAAQ,CAAC,MAAM,CACb,IAAI,EACJ,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,CAAC,EAAU,EAAE,KAAgB,EAAE,EAAE,CAC9C,KAAK,CAAC,QAAQ;QACZ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;QAChC,CAAC,CAAC,kBAAkB,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;IAEhD,MAAM,mBAAmB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,QAAgB;QAC/D,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,wBAAwB,CAAC;YACjD,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAC;QACH,OAAO,CAAC,MAAM,CAAC,gBAAgB,IAAI,EAAE,CAAC;aACnC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC;aACjC,MAAM,CACL,CAAC,SAAS,EAAuB,EAAE,CAAC,OAAO,SAAS,KAAK,QAAQ,CAClE,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,MAAM,kBAAkB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,QAAgB;QAC9D,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC;YACzC,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAC/B,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAC5C,GAAG;aACA,aAAa,CAAC;YACb,QAAQ,EAAE,QAAQ;YAClB,UAAU,EAAE,UAAU;SACvB,CAAC;aACD,IAAI,CACH,MAAM,CAAC,GAAG,CACR,CAAC,QAAQ,EAAE,EAAE,CACX;YACE,UAAU;YACV,mBAAmB,CAAC,QAAQ,CAAC,cAAc,CAAC;SACpC,CACb,EACD,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAC5C,MAAM,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,SAAS,CAAU,CAAC,CACjD,CACF,CACJ,CACF,CAAC;QACF,OAAO,MAAM,CAAC,WAAW,CACvB,OAAO,CAAC,MAAM,CACZ,CAAC,KAAK,EAAqC,EAAE,CAC3C,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CACzB,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,QAAgB;QACpD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC;YACrC,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAC;QACH,OAAO,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,MAAM,mBAAmB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAC/C,QAAQ,EACR,IAAI,EACJ,IAAI,GAKL;QACC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7B,KAAK,MAAM,SAAS,IAAI,IAAI,EAAE,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC3B,KAAK,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC;oBAC1B,QAAQ,EAAE,QAAQ;oBAClB,SAAS,EAAE,SAAS;iBACrB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,KAAK,MAAM,SAAS,IAAI,IAAI,EAAE,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC3B,KAAK,CAAC,CAAC,GAAG;qBACP,gBAAgB,CAAC;oBAChB,QAAQ,EAAE,QAAQ;oBAClB,SAAS,EAAE,SAAS;iBACrB,CAAC;qBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAC5D,CAAC;YACN,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,kBAAkB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAC9C,QAAQ,EACR,IAAI,EACJ,IAAI,GAKL;QACC,KAAK,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1D,IACE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC;gBACxC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EACxB,CAAC;gBACD,KAAK,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC;oBACvB,QAAQ,EAAE,QAAQ;oBAClB,UAAU,EAAE,UAAU;oBACtB,cAAc,EAAE,uBAAuB,CAAC,QAAQ,CAAC;iBAClD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC,CAAC,UAAU,IAAI,IAAI,CAAC,EAAE,CAAC;gBAC1B,KAAK,CAAC,CAAC,GAAG;qBACP,gBAAgB,CAAC;oBAChB,QAAQ,EAAE,QAAQ;oBAClB,UAAU,EAAE,UAAU;iBACvB,CAAC;qBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAC5D,CAAC;YACN,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,CAAC;QAC1C,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;YAC3C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO;YAC9B,IACE,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,IAAK,EAAgB,CAAC,CAAC;gBAC9C,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,EACzB,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;YACD,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;gBAC/C,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;QACH,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;YAC7C,MAAM,QAAQ,GACZ,MAAM,EAAE,QAAQ,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,IAAK,EAAgB,CAAC,CAAC,CAAC;YACrE,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,GAAG;iBACxB,OAAO,CAAC;gBACP,QAAQ,EAAE,QAAQ;aACnB,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAC5C,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAC1B,CACF,CAAC;YACJ,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;gBACzB,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,CAAC,iBAAiB,EAAE,cAAc,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;gBAClE,mBAAmB,CAAC,QAAQ,CAAC;gBAC7B,kBAAkB,CAAC,QAAQ,CAAC;gBAC5B,QAAQ,CAAC,QAAQ,CAAC;aACnB,CAAC,CAAC;YACH,OAAO;gBACL,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG;gBAC1B,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ;gBAChC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM;gBAC5B,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI;gBACxB,mBAAmB,EACjB,QAAQ,CAAC,IAAI,CAAC,mBAAmB,EAAE,sBAAsB;gBAC3D,iBAAiB;gBACjB,cAAc;gBACd,IAAI;aACL,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;YAChD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACzC,MAAM,IAAI,GAAG;gBACX,GAAG,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;gBAClC,GAAG,IAAI,CAAC,IAAI;aACb,CAAC;YACF,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,GAAG;iBACvB,UAAU,CAAC;gBACV,QAAQ,EAAE,QAAQ;gBAClB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;gBAC7C,IAAI,EAAE,cAAc,CAAC,IAAI,CAAC;aAC3B,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE,CACnD,GAAG;iBACA,OAAO,CAAC;gBACP,QAAQ,EAAE,QAAQ;aACnB,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,YAAY,CACjB,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,EAChD,GAAG,EAAE,CACH,IAAI,KAAK,CACP,SAAS,QAAQ,gDAAgD,CAClE,CACJ,CACF,CACJ,CACF,CAAC;YAEJ,KAAK,CAAC,CAAC,mBAAmB,CAAC;gBACzB,QAAQ;gBACR,IAAI,EAAE,EAAE;gBACR,IAAI,EAAE,IAAI,CAAC,iBAAiB,IAAI,EAAE;aACnC,CAAC,CAAC;YACH,KAAK,CAAC,CAAC,kBAAkB,CAAC;gBACxB,QAAQ;gBACR,IAAI,EAAE,EAAE;gBACR,IAAI,EAAE,IAAI,CAAC,cAAc,IAAI,EAAE;aAChC,CAAC,CAAC;YAEH,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,IAAI,QAAQ,CAAC,CAAC;YACnD,OAAO;gBACL,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,IAAI,QAAQ;gBACtC,QAAQ;gBACR,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM;gBAC5B,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,GAAG;gBAC5C,mBAAmB,EACjB,OAAO,CAAC,IAAI,EAAE,mBAAmB,EAAE,sBAAsB;oBACzD,IAAI,CAAC,mBAAmB;gBAC1B,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,IAAI,EAAE;gBAC/C,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,EAAE;gBACzC,IAAI;aACL,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;YAC9D,IAAI,IAAI,CAAC,mBAAmB,KAAK,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBAC1D,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;oBAC7B,KAAK,CAAC,CAAC,GAAG,CAAC,0BAA0B,CAAC;wBACpC,QAAQ,EAAE,MAAM,CAAC,QAAQ;wBACzB,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;qBAC9C,CAAC,CAAC;gBACL,CAAC;qBAAM,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;oBACpC,KAAK,CAAC,CAAC,GAAG;yBACP,6BAA6B,CAAC;wBAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;qBAC1B,CAAC;yBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAC5D,CAAC;gBACN,CAAC;YACH,CAAC;YAED,KAAK,CAAC,CAAC,mBAAmB,CAAC;gBACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,IAAI,EAAE,IAAI,CAAC,iBAAiB,IAAI,EAAE;gBAClC,IAAI,EAAE,IAAI,CAAC,iBAAiB,IAAI,EAAE;aACnC,CAAC,CAAC;YACH,KAAK,CAAC,CAAC,kBAAkB,CAAC;gBACxB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,IAAI,EAAE,IAAI,CAAC,cAAc,IAAI,EAAE;gBAC/B,IAAI,EAAE,IAAI,CAAC,cAAc,IAAI,EAAE;aAChC,CAAC,CAAC;YAEH,MAAM,OAAO,GAAG;gBACd,GAAG,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;gBAClC,GAAG,IAAI,CAAC,IAAI;aACb,CAAC;YACF,MAAM,OAAO,GAAG;gBACd,GAAG,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;gBAClC,GAAG,IAAI,CAAC,IAAI;aACb,CAAC;YACF,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACvD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,KAAK,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;oBACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,MAAM;iBACb,CAAC,CAAC;YACL,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC;oBACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,OAAO,EAAE,OAAO;iBACjB,CAAC,CAAC;YACL,CAAC;YAED,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;gBAC9B,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,CAAC,CAAC;YAEH,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACpC,OAAO;gBACL,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,MAAM,CAAC,OAAO;gBACzC,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,IAAI,MAAM,CAAC,QAAQ;gBAChD,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,IAAI,MAAM,CAAC,MAAM;gBAC1C,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,MAAM,CAAC,IAAI;gBACpC,mBAAmB,EACjB,IAAI,CAAC,IAAI,EAAE,mBAAmB,EAAE,sBAAsB;oBACtD,IAAI,CAAC,mBAAmB;gBAC1B,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,IAAI,EAAE;gBAC/C,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,EAAE;gBACzC,IAAI,EAAE,OAAO;aACd,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACrC,KAAK,CAAC,CAAC,GAAG;iBACP,6BAA6B,CAAC;gBAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,CAAC;iBACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YAErE,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,GAAG;iBAC9B,gBAAgB,CAAC;gBAChB,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAC5C,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAC1B,CACF,CAAC;YACJ,KAAK,MAAM,UAAU,IAAI,cAAc,EAAE,WAAW,IAAI,EAAE,EAAE,CAAC;gBAC3D,KAAK,CAAC,CAAC,GAAG;qBACP,gBAAgB,CAAC;oBAChB,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,UAAU,EAAE,UAAU;iBACvB,CAAC;qBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAC5D,CAAC;YACN,CAAC;YAED,MAAM,gBAAgB,GAAG,KAAK,CAAC,CAAC,GAAG;iBAChC,wBAAwB,CAAC;gBACxB,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAC5C,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAC1B,CACF,CAAC;YACJ,KAAK,MAAM,MAAM,IAAI,gBAAgB,EAAE,gBAAgB,IAAI,EAAE,EAAE,CAAC;gBAC9D,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;oBACrB,KAAK,CAAC,CAAC,GAAG;yBACP,gBAAgB,CAAC;wBAChB,QAAQ,EAAE,MAAM,CAAC,QAAQ;wBACzB,SAAS,EAAE,MAAM,CAAC,SAAS;qBAC5B,CAAC;yBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAC5D,CAAC;gBACN,CAAC;YACH,CAAC;YAED,KAAK,CAAC,CAAC,GAAG;iBACP,UAAU,CAAC;gBACV,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,CAAC;iBACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACvE,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}

package/lib/AWS/IAM/VirtualMFADevice.d.ts

@@ -0,0 +1,64 @@
+import * as Redacted from "effect/Redacted";
+import * as Provider from "../../Provider.ts";
+import { Resource } from "../../Resource.ts";
+import type { Providers } from "../Providers.ts";
+export interface VirtualMFADeviceProps {
+    /**
+     * Name of the virtual MFA device. If omitted, a deterministic name is generated.
+     */
+    virtualMFADeviceName?: string;
+    /**
+     * Optional IAM path prefix.
+     * @default "/"
+     */
+    path?: string;
+    /**
+     * Optional user to activate the device for.
+     */
+    userName?: string;
+    /**
+     * First authentication code used when activating the device.
+     */
+    authenticationCode1?: string;
+    /**
+     * Second authentication code used when activating the device.
+     */
+    authenticationCode2?: string;
+    /**
+     * User-defined tags.
+     */
+    tags?: Record<string, string>;
+}
+export interface VirtualMFADevice extends Resource<"AWS.IAM.VirtualMFADevice", VirtualMFADeviceProps, {
+    serialNumber: string;
+    userName: string | undefined;
+    enableDate: Date | undefined;
+    base32StringSeed: Redacted.Redacted<Uint8Array<ArrayBufferLike>> | undefined;
+    qrCodePNG: Redacted.Redacted<Uint8Array<ArrayBufferLike>> | undefined;
+    tags: Record<string, string>;
+}, never, Providers> {
+}
+/**
+ * An IAM virtual MFA device.
+ *
+ * `VirtualMFADevice` creates a software MFA device and can optionally activate
+ * it for a user during creation when the initial authentication codes are
+ * provided.
+ *
+ * @section Managing MFA Devices
+ * @example Create and Activate a Virtual MFA Device
+ * ```typescript
+ * const user = yield* User("AdminUser", {
+ *   userName: "admin-user",
+ * });
+ *
+ * const device = yield* VirtualMFADevice("AdminMfa", {
+ *   userName: user.userName,
+ *   authenticationCode1: "123456",
+ *   authenticationCode2: "654321",
+ * });
+ * ```
+ */
+export declare const VirtualMFADevice: import("../../Resource.ts").ResourceClass<VirtualMFADevice>;
+export declare const VirtualMFADeviceProvider: () => import("effect/Layer").Layer<Provider.Provider<VirtualMFADevice>, never, import("effect/unstable/http/HttpClient").HttpClient | import("../../Stage.ts").Stage | import("../../Stack.ts").Stack | import("@distilled.cloud/aws/Region").Region | import("@distilled.cloud/aws/Credentials").Credentials>;
+//# sourceMappingURL=VirtualMFADevice.d.ts.map

package/lib/AWS/IAM/VirtualMFADevice.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"VirtualMFADevice.d.ts","sourceRoot":"","sources":["../../../src/AWS/IAM/VirtualMFADevice.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAG5C,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAIjD,MAAM,WAAW,qBAAqB;IACpC;;OAEG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B;;OAEG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,gBAAiB,SAAQ,QAAQ,CAChD,0BAA0B,EAC1B,qBAAqB,EACrB;IACE,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,UAAU,EAAE,IAAI,GAAG,SAAS,CAAC;IAC7B,gBAAgB,EACZ,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,GAC9C,SAAS,CAAC;IACd,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,GAAG,SAAS,CAAC;IACtE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B,EACD,KAAK,EACL,SAAS,CACV;CAAG;AAEJ;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,gBAAgB,6DAE5B,CAAC;AAEF,eAAO,MAAM,wBAAwB,gTAsLlC,CAAC"}

package/lib/AWS/IAM/VirtualMFADevice.js

@@ -0,0 +1,187 @@
+import * as iam from "@distilled.cloud/aws/iam";
+import * as Effect from "effect/Effect";
+import * as Redacted from "effect/Redacted";
+import { isResolved } from "../../Diff.js";
+import { createPhysicalName } from "../../PhysicalName.js";
+import * as Provider from "../../Provider.js";
+import { Resource } from "../../Resource.js";
+import { createInternalTags, createTagsList, diffTags } from "../../Tags.js";
+import { toRedactedBytes, toTagRecord } from "./common.js";
+/**
+ * An IAM virtual MFA device.
+ *
+ * `VirtualMFADevice` creates a software MFA device and can optionally activate
+ * it for a user during creation when the initial authentication codes are
+ * provided.
+ *
+ * @section Managing MFA Devices
+ * @example Create and Activate a Virtual MFA Device
+ * ```typescript
+ * const user = yield* User("AdminUser", {
+ *   userName: "admin-user",
+ * });
+ *
+ * const device = yield* VirtualMFADevice("AdminMfa", {
+ *   userName: user.userName,
+ *   authenticationCode1: "123456",
+ *   authenticationCode2: "654321",
+ * });
+ * ```
+ */
+export const VirtualMFADevice = Resource("AWS.IAM.VirtualMFADevice");
+export const VirtualMFADeviceProvider = () => Provider.effect(VirtualMFADevice, Effect.gen(function* () {
+    const toName = (id, props) => props.virtualMFADeviceName
+        ? Effect.succeed(props.virtualMFADeviceName)
+        : createPhysicalName({ id, maxLength: 226 });
+    const readDevice = Effect.fn(function* ({ serialNumber, userName, }) {
+        if (!userName) {
+            const listed = yield* iam.listVirtualMFADevices({
+                AssignmentStatus: "Unassigned",
+            });
+            const device = listed.VirtualMFADevices.find((entry) => entry.SerialNumber === serialNumber);
+            return device
+                ? {
+                    SerialNumber: device.SerialNumber,
+                    UserName: device.User?.UserName,
+                    EnableDate: device.EnableDate,
+                }
+                : undefined;
+        }
+        return yield* iam
+            .getMFADevice({
+            SerialNumber: serialNumber,
+            UserName: userName,
+        })
+            .pipe(Effect.catchTag("NoSuchEntityException", () => Effect.succeed(undefined)));
+    });
+    return {
+        stables: ["serialNumber"],
+        diff: Effect.fn(function* ({ id, olds, news }) {
+            if (!isResolved(news))
+                return;
+            if ((yield* toName(id, olds ?? {})) !==
+                (yield* toName(id, news)) ||
+                (olds.path ?? "/") !== (news.path ?? "/") ||
+                (olds.userName ?? undefined) !== (news.userName ?? undefined) ||
+                (olds.authenticationCode1 ?? undefined) !==
+                    (news.authenticationCode1 ?? undefined) ||
+                (olds.authenticationCode2 ?? undefined) !==
+                    (news.authenticationCode2 ?? undefined)) {
+                return { action: "replace" };
+            }
+        }),
+        read: Effect.fn(function* ({ output }) {
+            if (!output) {
+                return undefined;
+            }
+            const response = yield* readDevice({
+                serialNumber: output.serialNumber,
+                userName: output.userName,
+            });
+            if (!response?.SerialNumber) {
+                return undefined;
+            }
+            const tags = yield* iam.listMFADeviceTags({
+                SerialNumber: output.serialNumber,
+            });
+            return {
+                serialNumber: response.SerialNumber,
+                userName: response.UserName ?? output.userName,
+                enableDate: response.EnableDate,
+                base32StringSeed: output.base32StringSeed,
+                qrCodePNG: output.qrCodePNG,
+                tags: toTagRecord(tags.Tags),
+            };
+        }),
+        create: Effect.fn(function* ({ id, news, session }) {
+            const deviceName = yield* toName(id, news);
+            const tags = {
+                ...(yield* createInternalTags(id)),
+                ...news.tags,
+            };
+            const created = yield* iam.createVirtualMFADevice({
+                Path: news.path,
+                VirtualMFADeviceName: deviceName,
+                Tags: createTagsList(tags),
+            });
+            if (!created.VirtualMFADevice.SerialNumber) {
+                return yield* Effect.fail(new Error(`createVirtualMFADevice returned no serial number`));
+            }
+            if (news.userName &&
+                news.authenticationCode1 &&
+                news.authenticationCode2) {
+                yield* iam.enableMFADevice({
+                    UserName: news.userName,
+                    SerialNumber: created.VirtualMFADevice.SerialNumber,
+                    AuthenticationCode1: news.authenticationCode1,
+                    AuthenticationCode2: news.authenticationCode2,
+                });
+            }
+            const response = yield* readDevice({
+                serialNumber: created.VirtualMFADevice.SerialNumber,
+                userName: news.userName,
+            });
+            yield* session.note(created.VirtualMFADevice.SerialNumber);
+            return {
+                serialNumber: created.VirtualMFADevice.SerialNumber,
+                userName: response?.UserName ?? news.userName,
+                enableDate: response?.EnableDate,
+                base32StringSeed: toRedactedBytes(created.VirtualMFADevice.Base32StringSeed),
+                qrCodePNG: toRedactedBytes(created.VirtualMFADevice.QRCodePNG),
+                tags,
+            };
+        }),
+        update: Effect.fn(function* ({ id, news, olds, output, session }) {
+            const oldTags = {
+                ...(yield* createInternalTags(id)),
+                ...olds.tags,
+            };
+            const newTags = {
+                ...(yield* createInternalTags(id)),
+                ...news.tags,
+            };
+            const { removed, upsert } = diffTags(oldTags, newTags);
+            if (upsert.length > 0) {
+                yield* iam.tagMFADevice({
+                    SerialNumber: output.serialNumber,
+                    Tags: upsert,
+                });
+            }
+            if (removed.length > 0) {
+                yield* iam.untagMFADevice({
+                    SerialNumber: output.serialNumber,
+                    TagKeys: removed,
+                });
+            }
+            const response = yield* readDevice({
+                serialNumber: output.serialNumber,
+                userName: output.userName,
+            });
+            yield* session.note(output.serialNumber);
+            return {
+                serialNumber: output.serialNumber,
+                userName: response?.UserName ?? output.userName,
+                enableDate: response?.EnableDate ?? output.enableDate,
+                base32StringSeed: output.base32StringSeed,
+                qrCodePNG: output.qrCodePNG,
+                tags: newTags,
+            };
+        }),
+        delete: Effect.fn(function* ({ output }) {
+            if (output.userName) {
+                yield* iam
+                    .deactivateMFADevice({
+                    UserName: output.userName,
+                    SerialNumber: output.serialNumber,
+                })
+                    .pipe(Effect.catchTag("NoSuchEntityException", () => Effect.void));
+            }
+            yield* iam
+                .deleteVirtualMFADevice({
+                SerialNumber: output.serialNumber,
+            })
+                .pipe(Effect.catchTag("NoSuchEntityException", () => Effect.void));
+        }),
+    };
+}));
+//# sourceMappingURL=VirtualMFADevice.js.map

package/lib/AWS/IAM/VirtualMFADevice.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"VirtualMFADevice.js","sourceRoot":"","sources":["../../../src/AWS/IAM/VirtualMFADevice.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,0BAA0B,CAAC;AAChD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AA+C3D;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,QAAQ,CACtC,0BAA0B,CAC3B,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAAG,EAAE,CAC3C,QAAQ,CAAC,MAAM,CACb,gBAAgB,EAChB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,CAAC,EAAU,EAAE,KAA4B,EAAE,EAAE,CAC1D,KAAK,CAAC,oBAAoB;QACxB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC;QAC5C,CAAC,CAAC,kBAAkB,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IAEjD,MAAM,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EACtC,YAAY,EACZ,QAAQ,GAIT;QACC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC;gBAC9C,gBAAgB,EAAE,YAAY;aAC/B,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAC1C,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,KAAK,YAAY,CAC/C,CAAC;YACF,OAAO,MAAM;gBACX,CAAC,CAAC;oBACE,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ;oBAC/B,UAAU,EAAE,MAAM,CAAC,UAAU;iBAC9B;gBACH,CAAC,CAAC,SAAS,CAAC;QAChB,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,GAAG;aACd,YAAY,CAAC;YACZ,YAAY,EAAE,YAAY;YAC1B,QAAQ,EAAE,QAAQ;SACnB,CAAC;aACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAC5C,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAC1B,CACF,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,CAAC,cAAc,CAAC;QACzB,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;YAC3C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO;YAC9B,IACE,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,IAAK,EAA4B,CAAC,CAAC;gBACxD,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;gBAC3B,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC;gBACzC,CAAC,IAAI,CAAC,QAAQ,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,IAAI,SAAS,CAAC;gBAC7D,CAAC,IAAI,CAAC,mBAAmB,IAAI,SAAS,CAAC;oBACrC,CAAC,IAAI,CAAC,mBAAmB,IAAI,SAAS,CAAC;gBACzC,CAAC,IAAI,CAAC,mBAAmB,IAAI,SAAS,CAAC;oBACrC,CAAC,IAAI,CAAC,mBAAmB,IAAI,SAAS,CAAC,EACzC,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;QACH,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACnC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC;gBACjC,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,EAAE,YAAY,EAAE,CAAC;gBAC5B,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC;gBACxC,YAAY,EAAE,MAAM,CAAC,YAAY;aAClC,CAAC,CAAC;YACH,OAAO;gBACL,YAAY,EAAE,QAAQ,CAAC,YAAY;gBACnC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ;gBAC9C,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;gBACzC,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;aAC7B,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;YAChD,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YAC3C,MAAM,IAAI,GAAG;gBACX,GAAG,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;gBAClC,GAAG,IAAI,CAAC,IAAI;aACb,CAAC;YACF,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,sBAAsB,CAAC;gBAChD,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,oBAAoB,EAAE,UAAU;gBAChC,IAAI,EAAE,cAAc,CAAC,IAAI,CAAC;aAC3B,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,YAAY,EAAE,CAAC;gBAC3C,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAC9D,CAAC;YACJ,CAAC;YACD,IACE,IAAI,CAAC,QAAQ;gBACb,IAAI,CAAC,mBAAmB;gBACxB,IAAI,CAAC,mBAAmB,EACxB,CAAC;gBACD,KAAK,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC;oBACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,YAAY,EAAE,OAAO,CAAC,gBAAgB,CAAC,YAAY;oBACnD,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;oBAC7C,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;iBAC9C,CAAC,CAAC;YACL,CAAC;YACD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC;gBACjC,YAAY,EAAE,OAAO,CAAC,gBAAgB,CAAC,YAAY;gBACnD,QAAQ,EAAE,IAAI,CAAC,QAAQ;aACxB,CAAC,CAAC;YACH,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;YAC3D,OAAO;gBACL,YAAY,EAAE,OAAO,CAAC,gBAAgB,CAAC,YAAY;gBACnD,QAAQ,EAAE,QAAQ,EAAE,QAAQ,IAAI,IAAI,CAAC,QAAQ;gBAC7C,UAAU,EAAE,QAAQ,EAAE,UAAU;gBAChC,gBAAgB,EAAE,eAAe,CAC/B,OAAO,CAAC,gBAAgB,CAAC,gBAAgB,CAC1C;gBACD,SAAS,EAAE,eAAe,CAAC,OAAO,CAAC,gBAAgB,CAAC,SAAS,CAAC;gBAC9D,IAAI;aACL,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;YAC9D,MAAM,OAAO,GAAG;gBACd,GAAG,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;gBAClC,GAAG,IAAI,CAAC,IAAI;aACb,CAAC;YACF,MAAM,OAAO,GAAG;gBACd,GAAG,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;gBAClC,GAAG,IAAI,CAAC,IAAI;aACb,CAAC;YACF,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACvD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,KAAK,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC;oBACtB,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,IAAI,EAAE,MAAM;iBACb,CAAC,CAAC;YACL,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,KAAK,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC;oBACxB,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,OAAO,EAAE,OAAO;iBACjB,CAAC,CAAC;YACL,CAAC;YACD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC;gBACjC,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,CAAC,CAAC;YACH,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YACzC,OAAO;gBACL,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,IAAI,MAAM,CAAC,QAAQ;gBAC/C,UAAU,EAAE,QAAQ,EAAE,UAAU,IAAI,MAAM,CAAC,UAAU;gBACrD,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;gBACzC,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,IAAI,EAAE,OAAO;aACd,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACrC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpB,KAAK,CAAC,CAAC,GAAG;qBACP,mBAAmB,CAAC;oBACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,YAAY,EAAE,MAAM,CAAC,YAAY;iBAClC,CAAC;qBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAC5D,CAAC;YACN,CAAC;YACD,KAAK,CAAC,CAAC,GAAG;iBACP,sBAAsB,CAAC;gBACtB,YAAY,EAAE,MAAM,CAAC,YAAY;aAClC,CAAC;iBACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACvE,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}

package/lib/AWS/IAM/common.d.ts

@@ -0,0 +1,20 @@
+import type * as iam from "@distilled.cloud/aws/iam";
+import * as Redacted from "effect/Redacted";
+import type { PolicyDocument } from "./Policy.ts";
+export declare const toTagRecord: (tags: Array<{
+    Key?: string;
+    Value?: string;
+}> | undefined) => Record<string, string>;
+export declare const parsePolicyDocument: (value: string | undefined) => PolicyDocument | undefined;
+export declare const stringifyPolicyDocument: (value: PolicyDocument) => string;
+export declare const normalizeIamPath: (value: string | undefined) => string;
+export declare const policyArnFromParts: ({ accountId, path, policyName, }: {
+    accountId: string;
+    path: string | undefined;
+    policyName: string;
+}) => string;
+export declare const oldestNondefaultPolicyVersion: (versions: iam.PolicyVersion[] | undefined) => iam.PolicyVersion;
+export declare const toRedactedString: (value: string | Redacted.Redacted<string> | undefined) => Redacted.Redacted<string> | undefined;
+export declare const toRedactedBytes: (value: Uint8Array<ArrayBufferLike> | Redacted.Redacted<Uint8Array<ArrayBufferLike>> | undefined) => Redacted.Redacted<Uint8Array<ArrayBufferLike>> | undefined;
+export declare const unwrapRedactedString: (value: string | Redacted.Redacted<string>) => string;
+//# sourceMappingURL=common.d.ts.map

package/lib/AWS/IAM/common.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../../../src/AWS/IAM/common.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,GAAG,MAAM,0BAA0B,CAAC;AACrD,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD,eAAO,MAAM,WAAW,GACtB,MAAM,KAAK,CAAC;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG,SAAS,KACxD,MAAM,CAAC,MAAM,EAAE,MAAM,CAQrB,CAAC;AAUJ,eAAO,MAAM,mBAAmB,GAC9B,OAAO,MAAM,GAAG,SAAS,KACxB,cAAc,GAAG,SAOnB,CAAC;AAEF,eAAO,MAAM,uBAAuB,GAAI,OAAO,cAAc,WACtC,CAAC;AAExB,eAAO,MAAM,gBAAgB,GAAI,OAAO,MAAM,GAAG,SAAS,WAMzD,CAAC;AAEF,eAAO,MAAM,kBAAkB,GAAI,kCAIhC;IACD,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;CACpB,WAA6E,CAAC;AAE/E,eAAO,MAAM,6BAA6B,GACxC,UAAU,GAAG,CAAC,aAAa,EAAE,GAAG,SAAS,sBAMnC,CAAC;AAET,eAAO,MAAM,gBAAgB,GAC3B,OAAO,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,SAAS,KACpD,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,SAKlB,CAAC;AAEd,eAAO,MAAM,eAAe,GAC1B,OACI,UAAU,CAAC,eAAe,CAAC,GAC3B,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,GAC9C,SAAS,KACZ,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,GAAG,SAKvC,CAAC;AAEd,eAAO,MAAM,oBAAoB,GAC/B,OAAO,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,KACxC,MAAqE,CAAC"}

package/lib/AWS/IAM/common.js

@@ -0,0 +1,43 @@
+import * as Redacted from "effect/Redacted";
+export const toTagRecord = (tags) => Object.fromEntries((tags ?? [])
+    .filter((tag) => typeof tag.Key === "string" && typeof tag.Value === "string")
+    .map((tag) => [tag.Key, tag.Value]));
+const decodePolicyString = (value) => {
+    try {
+        return decodeURIComponent(value);
+    }
+    catch {
+        return value;
+    }
+};
+export const parsePolicyDocument = (value) => {
+    if (!value) {
+        return undefined;
+    }
+    const decoded = decodePolicyString(value);
+    return JSON.parse(decoded);
+};
+export const stringifyPolicyDocument = (value) => JSON.stringify(value);
+export const normalizeIamPath = (value) => {
+    const path = value ?? "/";
+    const withLeadingSlash = path.startsWith("/") ? path : `/${path}`;
+    return withLeadingSlash.endsWith("/")
+        ? withLeadingSlash
+        : `${withLeadingSlash}/`;
+};
+export const policyArnFromParts = ({ accountId, path, policyName, }) => `arn:aws:iam::${accountId}:policy${normalizeIamPath(path)}${policyName}`;
+export const oldestNondefaultPolicyVersion = (versions) => [...(versions ?? [])]
+    .filter((version) => !version.IsDefaultVersion && version.VersionId)
+    .sort((a, b) => (a.CreateDate?.getTime() ?? 0) - (b.CreateDate?.getTime() ?? 0))[0];
+export const toRedactedString = (value) => value === undefined
+    ? undefined
+    : typeof value === "string"
+        ? Redacted.make(value)
+        : value;
+export const toRedactedBytes = (value) => value === undefined
+    ? undefined
+    : value instanceof Uint8Array
+        ? Redacted.make(value)
+        : value;
+export const unwrapRedactedString = (value) => (typeof value === "string" ? value : Redacted.value(value));
+//# sourceMappingURL=common.js.map

package/lib/AWS/IAM/common.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.js","sourceRoot":"","sources":["../../../src/AWS/IAM/common.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAG5C,MAAM,CAAC,MAAM,WAAW,GAAG,CACzB,IAAyD,EACjC,EAAE,CAC1B,MAAM,CAAC,WAAW,CAChB,CAAC,IAAI,IAAI,EAAE,CAAC;KACT,MAAM,CACL,CAAC,GAAG,EAAyC,EAAE,CAC7C,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAC/D;KACA,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CACtC,CAAC;AAEJ,MAAM,kBAAkB,GAAG,CAAC,KAAa,EAAE,EAAE;IAC3C,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,KAAyB,EACG,EAAE;IAC9B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC1C,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAmB,CAAC;AAC/C,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,KAAqB,EAAE,EAAE,CAC/D,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAExB,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,KAAyB,EAAE,EAAE;IAC5D,MAAM,IAAI,GAAG,KAAK,IAAI,GAAG,CAAC;IAC1B,MAAM,gBAAgB,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;IAClE,OAAO,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC;QACnC,CAAC,CAAC,gBAAgB;QAClB,CAAC,CAAC,GAAG,gBAAgB,GAAG,CAAC;AAC7B,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,EACjC,SAAS,EACT,IAAI,EACJ,UAAU,GAKX,EAAE,EAAE,CAAC,gBAAgB,SAAS,UAAU,gBAAgB,CAAC,IAAI,CAAC,GAAG,UAAU,EAAE,CAAC;AAE/E,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAC3C,QAAyC,EACzC,EAAE,CACF,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;KAClB,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,IAAI,OAAO,CAAC,SAAS,CAAC;KACnE,IAAI,CACH,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAC1E,CAAC,CAAC,CAAC,CAAC;AAET,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,KAAqD,EACd,EAAE,CACzC,KAAK,KAAK,SAAS;IACjB,CAAC,CAAC,SAAS;IACX,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;QACtB,CAAC,CAAC,KAAK,CAAC;AAEd,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,KAGa,EAC+C,EAAE,CAC9D,KAAK,KAAK,SAAS;IACjB,CAAC,CAAC,SAAS;IACX,CAAC,CAAC,KAAK,YAAY,UAAU;QAC3B,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;QACtB,CAAC,CAAC,KAAK,CAAC;AAEd,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,KAAyC,EACjC,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC"}