alchemy 2.0.0-beta.cli-platform-split-2 → 2.0.0-beta.pkg-setup-rc

package/lib/AWS/Organizations/OrganizationalUnit.js

@@ -0,0 +1,148 @@
+import * as organizations from "@distilled.cloud/aws/organizations";
+import * as Effect from "effect/Effect";
+import { isResolved } from "../../Diff.js";
+import * as Provider from "../../Provider.js";
+import { Resource } from "../../Resource.js";
+import { collectPages, createName, ensureOwnedByAlchemy, readResourceTags, retryOrganizations, updateResourceTags, } from "./common.js";
+/**
+ * An AWS Organizations organizational unit.
+ *
+ * @section Creating OUs
+ * @example Nested OU
+ * ```typescript
+ * const workloads = yield* OrganizationalUnit("Workloads", {
+ *   parentId: root.rootId,
+ *   name: "workloads",
+ * });
+ * ```
+ */
+export const OrganizationalUnit = Resource("AWS.Organizations.OrganizationalUnit");
+export const OrganizationalUnitProvider = () => Provider.effect(OrganizationalUnit, Effect.gen(function* () {
+    return {
+        stables: ["ouId", "ouArn"],
+        diff: Effect.fn(function* ({ id, olds, news }) {
+            if (!isResolved(news))
+                return;
+            const oldName = yield* toName(id, olds ?? {});
+            const newName = yield* toName(id, news ?? {});
+            if (olds?.parentId !== news?.parentId) {
+                return { action: "replace" };
+            }
+            if (oldName !== newName) {
+                return { action: "update" };
+            }
+        }),
+        read: Effect.fn(function* ({ id, olds, output }) {
+            if (output?.ouId) {
+                return yield* readOUById(output.ouId);
+            }
+            const parentId = olds?.parentId;
+            if (!parentId) {
+                return undefined;
+            }
+            return yield* readOUByParentAndName({
+                parentId,
+                name: yield* toName(id, olds ?? {}),
+            });
+        }),
+        create: Effect.fn(function* ({ id, news, session }) {
+            const name = yield* toName(id, news);
+            const existing = yield* readOUByParentAndName({
+                parentId: news.parentId,
+                name,
+            });
+            if (existing) {
+                yield* ensureOwnedByAlchemy(id, existing.ouId, existing.tags, "organizational unit");
+            }
+            else {
+                yield* retryOrganizations(organizations
+                    .createOrganizationalUnit({
+                    ParentId: news.parentId,
+                    Name: name,
+                })
+                    .pipe(Effect.catchTag("DuplicateOrganizationalUnitException", () => Effect.void)));
+            }
+            const created = yield* readOUByParentAndName({
+                parentId: news.parentId,
+                name,
+            });
+            if (!created) {
+                return yield* Effect.fail(new Error(`organizational unit '${name}' not found after create`));
+            }
+            const tags = yield* updateResourceTags({
+                id,
+                resourceId: created.ouId,
+                olds: created.tags,
+                news: news.tags,
+            });
+            yield* session.note(created.ouArn);
+            return {
+                ...created,
+                tags,
+            };
+        }),
+        update: Effect.fn(function* ({ id, news, olds, output, session }) {
+            const newName = yield* toName(id, news);
+            if (output.name !== newName) {
+                yield* retryOrganizations(organizations.updateOrganizationalUnit({
+                    OrganizationalUnitId: output.ouId,
+                    Name: newName,
+                }));
+            }
+            const tags = yield* updateResourceTags({
+                id,
+                resourceId: output.ouId,
+                olds: olds.tags,
+                news: news.tags,
+            });
+            const updated = yield* readOUById(output.ouId);
+            if (!updated) {
+                return yield* Effect.fail(new Error(`organizational unit '${output.ouId}' not found after update`));
+            }
+            yield* session.note(output.ouArn);
+            return {
+                ...updated,
+                tags,
+            };
+        }),
+        delete: Effect.fn(function* ({ output }) {
+            yield* retryOrganizations(organizations
+                .deleteOrganizationalUnit({
+                OrganizationalUnitId: output.ouId,
+            })
+                .pipe(Effect.catchTag("OrganizationalUnitNotFoundException", () => Effect.void)));
+        }),
+    };
+}));
+const toName = (id, props = {}) => createName(id, props.name, 128);
+const listOUsForParent = (parentId) => collectPages((NextToken) => organizations.listOrganizationalUnitsForParent({
+    ParentId: parentId,
+    NextToken,
+}), (page) => page.OrganizationalUnits).pipe(retryOrganizations);
+const readParentId = (childId) => collectPages((NextToken) => organizations.listParents({ ChildId: childId, NextToken }), (page) => page.Parents).pipe(retryOrganizations, Effect.map((parents) => parents[0]?.Id));
+const readOUById = Effect.fn(function* (ouId) {
+    const described = yield* retryOrganizations(organizations
+        .describeOrganizationalUnit({
+        OrganizationalUnitId: ouId,
+    })
+        .pipe(Effect.map((response) => response.OrganizationalUnit), Effect.catchTag("OrganizationalUnitNotFoundException", () => Effect.succeed(undefined))));
+    if (!described?.Id || !described.Arn || !described.Name) {
+        return undefined;
+    }
+    const [parentId, tags] = yield* Effect.all([
+        readParentId(described.Id).pipe(Effect.catchTag("ChildNotFoundException", () => Effect.succeed(undefined))),
+        readResourceTags(described.Id).pipe(Effect.catchTag("TargetNotFoundException", () => Effect.succeed({}))),
+    ]);
+    return {
+        ouId: described.Id,
+        ouArn: described.Arn,
+        name: described.Name,
+        parentId,
+        tags,
+    };
+});
+const readOUByParentAndName = Effect.fn(function* ({ parentId, name, }) {
+    const match = (yield* listOUsForParent(parentId)).find((ou) => ou.Name === name);
+    return match?.Id ? yield* readOUById(match.Id) : undefined;
+});
+//# sourceMappingURL=OrganizationalUnit.js.map

package/lib/AWS/Organizations/OrganizationalUnit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OrganizationalUnit.js","sourceRoot":"","sources":["../../../src/AWS/Organizations/OrganizationalUnit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,aAAa,MAAM,oCAAoC,CAAC;AACpE,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,OAAO,EACL,YAAY,EACZ,UAAU,EACV,oBAAoB,EACpB,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,aAAa,CAAC;AAkCrB;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,QAAQ,CACxC,sCAAsC,CACvC,CAAC;AAEF,MAAM,CAAC,MAAM,0BAA0B,GAAG,GAAG,EAAE,CAC7C,QAAQ,CAAC,MAAM,CACb,kBAAkB,EAClB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO;QACL,OAAO,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;QAC1B,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;YAC3C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO;YAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;YAC9C,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;YAE9C,IAAI,IAAI,EAAE,QAAQ,KAAK,IAAI,EAAE,QAAQ,EAAE,CAAC;gBACtC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;YAED,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;gBACxB,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAW,CAAC;YACvC,CAAC;QACH,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;YAC7C,IAAI,MAAM,EAAE,IAAI,EAAE,CAAC;gBACjB,OAAO,KAAK,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACxC,CAAC;YAED,MAAM,QAAQ,GAAG,IAAI,EAAE,QAAQ,CAAC;YAChC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,SAAS,CAAC;YACnB,CAAC;YAED,OAAO,KAAK,CAAC,CAAC,qBAAqB,CAAC;gBAClC,QAAQ;gBACR,IAAI,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC;aACpC,CAAC,CAAC;QACL,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;YAChD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACrC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,qBAAqB,CAAC;gBAC5C,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,IAAI;aACL,CAAC,CAAC;YAEH,IAAI,QAAQ,EAAE,CAAC;gBACb,KAAK,CAAC,CAAC,oBAAoB,CACzB,EAAE,EACF,QAAQ,CAAC,IAAI,EACb,QAAQ,CAAC,IAAI,EACb,qBAAqB,CACtB,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,CAAC,kBAAkB,CACvB,aAAa;qBACV,wBAAwB,CAAC;oBACxB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,IAAI,EAAE,IAAI;iBACX,CAAC;qBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,sCAAsC,EACtC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAClB,CACF,CACJ,CAAC;YACJ,CAAC;YAED,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,qBAAqB,CAAC;gBAC3C,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,IAAI;aACL,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CAAC,wBAAwB,IAAI,0BAA0B,CAAC,CAClE,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC;gBACrC,EAAE;gBACF,UAAU,EAAE,OAAO,CAAC,IAAI;gBACxB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,IAAI,EAAE,IAAI,CAAC,IAAI;aAChB,CAAC,CAAC;YAEH,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACnC,OAAO;gBACL,GAAG,OAAO;gBACV,IAAI;aACL,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;YAC9D,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACxC,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC5B,KAAK,CAAC,CAAC,kBAAkB,CACvB,aAAa,CAAC,wBAAwB,CAAC;oBACrC,oBAAoB,EAAE,MAAM,CAAC,IAAI;oBACjC,IAAI,EAAE,OAAO;iBACd,CAAC,CACH,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC;gBACrC,EAAE;gBACF,UAAU,EAAE,MAAM,CAAC,IAAI;gBACvB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;aAChB,CAAC,CAAC;YAEH,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CACP,wBAAwB,MAAM,CAAC,IAAI,0BAA0B,CAC9D,CACF,CAAC;YACJ,CAAC;YAED,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAClC,OAAO;gBACL,GAAG,OAAO;gBACV,IAAI;aACL,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACrC,KAAK,CAAC,CAAC,kBAAkB,CACvB,aAAa;iBACV,wBAAwB,CAAC;gBACxB,oBAAoB,EAAE,MAAM,CAAC,IAAI;aAClC,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,qCAAqC,EACrC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAClB,CACF,CACJ,CAAC;QACJ,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC;AAEJ,MAAM,MAAM,GAAG,CAAC,EAAU,EAAE,QAA2B,EAAE,EAAE,EAAE,CAC3D,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAElC,MAAM,gBAAgB,GAAG,CAAC,QAAgB,EAAE,EAAE,CAC5C,YAAY,CACV,CAAC,SAAS,EAAE,EAAE,CACZ,aAAa,CAAC,gCAAgC,CAAC;IAC7C,QAAQ,EAAE,QAAQ;IAClB,SAAS;CACV,CAAC,EACJ,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,mBAAmB,CACnC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;AAE7B,MAAM,YAAY,GAAG,CAAC,OAAe,EAAE,EAAE,CACvC,YAAY,CACV,CAAC,SAAS,EAAE,EAAE,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,EACzE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CACvB,CAAC,IAAI,CACJ,kBAAkB,EAClB,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CACxC,CAAC;AAEJ,MAAM,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,IAAY;IAClD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,kBAAkB,CACzC,aAAa;SACV,0BAA0B,CAAC;QAC1B,oBAAoB,EAAE,IAAI;KAC3B,CAAC;SACD,IAAI,CACH,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EACrD,MAAM,CAAC,QAAQ,CAAC,qCAAqC,EAAE,GAAG,EAAE,CAC1D,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAC1B,CACF,CACJ,CAAC;IAEF,IAAI,CAAC,SAAS,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QACxD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;QACzC,YAAY,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,IAAI,CAC7B,MAAM,CAAC,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE,CAC7C,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAC1B,CACF;QACD,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,IAAI,CACjC,MAAM,CAAC,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CACrE;KACF,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,SAAS,CAAC,EAAE;QAClB,KAAK,EAAE,SAAS,CAAC,GAAG;QACpB,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,QAAQ;QACR,IAAI;KACsC,CAAC;AAC/C,CAAC,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EACjD,QAAQ,EACR,IAAI,GAIL;IACC,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CACpD,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,KAAK,IAAI,CACzB,CAAC;IACF,OAAO,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7D,CAAC,CAAC,CAAC"}

package/lib/AWS/Organizations/Policy.d.ts

@@ -0,0 +1,47 @@
+import * as organizations from "@distilled.cloud/aws/organizations";
+import * as Provider from "../../Provider.ts";
+import { Resource } from "../../Resource.ts";
+import type { Providers } from "../Providers.ts";
+import type { PolicyDocument } from "../IAM/Policy.ts";
+export type PolicyId = string;
+export type PolicyArn = string;
+export interface PolicyProps {
+    /**
+     * Policy name. If omitted, Alchemy generates one.
+     */
+    name?: string;
+    /**
+     * Policy description.
+     * @default ""
+     */
+    description?: string;
+    /**
+     * Organizations policy type.
+     */
+    type: organizations.PolicyType;
+    /**
+     * Typed policy document.
+     */
+    document: PolicyDocument;
+    /**
+     * Optional tags applied to the policy.
+     */
+    tags?: Record<string, string>;
+}
+export interface Policy extends Resource<"AWS.Organizations.Policy", PolicyProps, {
+    policyId: PolicyId;
+    policyArn: PolicyArn;
+    name: string;
+    description: string | undefined;
+    type: organizations.PolicyType | undefined;
+    awsManaged: boolean | undefined;
+    document: PolicyDocument;
+    tags: Record<string, string>;
+}, never, Providers> {
+}
+/**
+ * An AWS Organizations policy such as an SCP or tag policy.
+ */
+export declare const Policy: import("../../Resource.ts").ResourceClass<Policy>;
+export declare const PolicyProvider: () => import("effect/Layer").Layer<Provider.Provider<Policy>, never, import("effect/unstable/http/HttpClient").HttpClient | import("../../Stage.ts").Stage | import("../../Stack.ts").Stack | import("@distilled.cloud/aws/Region").Region | import("@distilled.cloud/aws/Credentials").Credentials>;
+//# sourceMappingURL=Policy.d.ts.map

package/lib/AWS/Organizations/Policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Policy.d.ts","sourceRoot":"","sources":["../../../src/AWS/Organizations/Policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,aAAa,MAAM,oCAAoC,CAAC;AAGpE,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAUvD,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC;AAC9B,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC;AAE/B,MAAM,WAAW,WAAW;IAC1B;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;OAEG;IACH,IAAI,EAAE,aAAa,CAAC,UAAU,CAAC;IAC/B;;OAEG;IACH,QAAQ,EAAE,cAAc,CAAC;IACzB;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,MAAO,SAAQ,QAAQ,CACtC,0BAA0B,EAC1B,WAAW,EACX;IACE,QAAQ,EAAE,QAAQ,CAAC;IACnB,SAAS,EAAE,SAAS,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,IAAI,EAAE,aAAa,CAAC,UAAU,GAAG,SAAS,CAAC;IAC3C,UAAU,EAAE,OAAO,GAAG,SAAS,CAAC;IAChC,QAAQ,EAAE,cAAc,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B,EACD,KAAK,EACL,SAAS,CACV;CAAG;AAEJ;;GAEG;AACH,eAAO,MAAM,MAAM,mDAA+C,CAAC;AAEnE,eAAO,MAAM,cAAc,sSAgIxB,CAAC"}

package/lib/AWS/Organizations/Policy.js

@@ -0,0 +1,130 @@
+import * as organizations from "@distilled.cloud/aws/organizations";
+import * as Effect from "effect/Effect";
+import { isResolved } from "../../Diff.js";
+import * as Provider from "../../Provider.js";
+import { Resource } from "../../Resource.js";
+import { collectPages, createName, ensureOwnedByAlchemy, readResourceTags, retryOrganizations, updateResourceTags, } from "./common.js";
+/**
+ * An AWS Organizations policy such as an SCP or tag policy.
+ */
+export const Policy = Resource("AWS.Organizations.Policy");
+export const PolicyProvider = () => Provider.effect(Policy, Effect.gen(function* () {
+    return {
+        stables: ["policyId", "policyArn"],
+        diff: Effect.fn(function* ({ id, olds, news }) {
+            if (!isResolved(news))
+                return;
+            if (olds?.type !== news.type) {
+                return { action: "replace" };
+            }
+            const oldName = yield* toName(id, olds ?? {});
+            const newName = yield* toName(id, news);
+            if (oldName !== newName) {
+                return { action: "replace" };
+            }
+        }),
+        read: Effect.fn(function* ({ id, olds, output }) {
+            if (output?.policyId) {
+                return yield* readPolicyById(output.policyId);
+            }
+            if (!olds) {
+                return undefined;
+            }
+            return yield* readPolicyByName({
+                type: olds.type,
+                name: yield* toName(id, olds),
+            });
+        }),
+        create: Effect.fn(function* ({ id, news, session }) {
+            const name = yield* toName(id, news);
+            const existing = yield* readPolicyByName({
+                type: news.type,
+                name,
+            });
+            if (existing) {
+                yield* ensureOwnedByAlchemy(id, existing.policyId, existing.tags, "policy");
+            }
+            else {
+                yield* retryOrganizations(organizations
+                    .createPolicy({
+                    Name: name,
+                    Description: news.description ?? "",
+                    Type: news.type,
+                    Content: JSON.stringify(news.document),
+                })
+                    .pipe(Effect.catchTag("DuplicatePolicyException", () => Effect.void)));
+            }
+            const created = yield* readPolicyByName({
+                type: news.type,
+                name,
+            });
+            if (!created) {
+                return yield* Effect.fail(new Error(`policy '${name}' not found after create`));
+            }
+            const tags = yield* updateResourceTags({
+                id,
+                resourceId: created.policyId,
+                olds: created.tags,
+                news: news.tags,
+            });
+            yield* session.note(created.policyArn);
+            return {
+                ...created,
+                tags,
+            };
+        }),
+        update: Effect.fn(function* ({ id, news, olds, output, session }) {
+            yield* retryOrganizations(organizations.updatePolicy({
+                PolicyId: output.policyId,
+                Name: output.name,
+                Description: news.description ?? "",
+                Content: JSON.stringify(news.document),
+            }));
+            const tags = yield* updateResourceTags({
+                id,
+                resourceId: output.policyId,
+                olds: olds.tags,
+                news: news.tags,
+            });
+            const updated = yield* readPolicyById(output.policyId);
+            if (!updated) {
+                return yield* Effect.fail(new Error(`policy '${output.policyId}' not found after update`));
+            }
+            yield* session.note(output.policyArn);
+            return {
+                ...updated,
+                tags,
+            };
+        }),
+        delete: Effect.fn(function* ({ output }) {
+            yield* retryOrganizations(organizations
+                .deletePolicy({ PolicyId: output.policyId })
+                .pipe(Effect.catchTag("PolicyNotFoundException", () => Effect.void)));
+        }),
+    };
+}));
+const toName = (id, props = {}) => createName(id, props.name, 128);
+const readPolicyById = Effect.fn(function* (policyId) {
+    const described = yield* retryOrganizations(organizations.describePolicy({ PolicyId: policyId }).pipe(Effect.map((response) => response.Policy), Effect.catchTag("PolicyNotFoundException", () => Effect.succeed(undefined))));
+    const summary = described?.PolicySummary;
+    if (!summary?.Id || !summary.Arn || !summary.Name) {
+        return undefined;
+    }
+    const tags = yield* readResourceTags(summary.Id).pipe(Effect.catchTag("TargetNotFoundException", () => Effect.succeed({})));
+    return {
+        policyId: summary.Id,
+        policyArn: summary.Arn,
+        name: summary.Name,
+        description: summary.Description,
+        type: summary.Type,
+        awsManaged: summary.AwsManaged,
+        document: JSON.parse(described?.Content ?? "{}"),
+        tags,
+    };
+});
+const readPolicyByName = Effect.fn(function* ({ type, name, }) {
+    const policies = yield* retryOrganizations(collectPages((NextToken) => organizations.listPolicies({ Filter: type, NextToken }), (page) => page.Policies));
+    const match = policies.find((policy) => policy.Name === name);
+    return match?.Id ? yield* readPolicyById(match.Id) : undefined;
+});
+//# sourceMappingURL=Policy.js.map

package/lib/AWS/Organizations/Policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Policy.js","sourceRoot":"","sources":["../../../src/AWS/Organizations/Policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,aAAa,MAAM,oCAAoC,CAAC;AACpE,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAG7C,OAAO,EACL,YAAY,EACZ,UAAU,EACV,oBAAoB,EACpB,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,aAAa,CAAC;AA8CrB;;GAEG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,QAAQ,CAAS,0BAA0B,CAAC,CAAC;AAEnE,MAAM,CAAC,MAAM,cAAc,GAAG,GAAG,EAAE,CACjC,QAAQ,CAAC,MAAM,CACb,MAAM,EACN,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO;QACL,OAAO,EAAE,CAAC,UAAU,EAAE,WAAW,CAAC;QAClC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;YAC3C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO;YAC9B,IAAI,IAAI,EAAE,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC7B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;YAED,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;YAC9C,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACxC,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;gBACxB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;QACH,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;YAC7C,IAAI,MAAM,EAAE,QAAQ,EAAE,CAAC;gBACrB,OAAO,KAAK,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAChD,CAAC;YAED,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,SAAS,CAAC;YACnB,CAAC;YAED,OAAO,KAAK,CAAC,CAAC,gBAAgB,CAAC;gBAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC;aAC9B,CAAC,CAAC;QACL,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;YAChD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACrC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,gBAAgB,CAAC;gBACvC,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI;aACL,CAAC,CAAC;YAEH,IAAI,QAAQ,EAAE,CAAC;gBACb,KAAK,CAAC,CAAC,oBAAoB,CACzB,EAAE,EACF,QAAQ,CAAC,QAAQ,EACjB,QAAQ,CAAC,IAAI,EACb,QAAQ,CACT,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,CAAC,kBAAkB,CACvB,aAAa;qBACV,YAAY,CAAC;oBACZ,IAAI,EAAE,IAAI;oBACV,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE;oBACnC,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC;iBACvC,CAAC;qBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,0BAA0B,EAC1B,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAClB,CACF,CACJ,CAAC;YACJ,CAAC;YAED,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,gBAAgB,CAAC;gBACtC,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI;aACL,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CAAC,WAAW,IAAI,0BAA0B,CAAC,CACrD,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC;gBACrC,EAAE;gBACF,UAAU,EAAE,OAAO,CAAC,QAAQ;gBAC5B,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,IAAI,EAAE,IAAI,CAAC,IAAI;aAChB,CAAC,CAAC;YAEH,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACvC,OAAO;gBACL,GAAG,OAAO;gBACV,IAAI;aACL,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;YAC9D,KAAK,CAAC,CAAC,kBAAkB,CACvB,aAAa,CAAC,YAAY,CAAC;gBACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE;gBACnC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC;aACvC,CAAC,CACH,CAAC;YAEF,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC;gBACrC,EAAE;gBACF,UAAU,EAAE,MAAM,CAAC,QAAQ;gBAC3B,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;aAChB,CAAC,CAAC;YAEH,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACvD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CAAC,WAAW,MAAM,CAAC,QAAQ,0BAA0B,CAAC,CAChE,CAAC;YACJ,CAAC;YAED,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACtC,OAAO;gBACL,GAAG,OAAO;gBACV,IAAI;aACL,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACrC,KAAK,CAAC,CAAC,kBAAkB,CACvB,aAAa;iBACV,YAAY,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;iBAC3C,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAC9D,CACJ,CAAC;QACJ,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC;AAEJ,MAAM,MAAM,GAAG,CAAC,EAAU,EAAE,QAA2B,EAAE,EAAE,EAAE,CAC3D,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAElC,MAAM,cAAc,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,QAAgB;IAC1D,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,kBAAkB,CACzC,aAAa,CAAC,cAAc,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,CACvD,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,EACzC,MAAM,CAAC,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE,CAC9C,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAC1B,CACF,CACF,CAAC;IAEF,MAAM,OAAO,GAAG,SAAS,EAAE,aAAa,CAAC;IACzC,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAClD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CACnD,MAAM,CAAC,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CACrE,CAAC;IAEF,OAAO;QACL,QAAQ,EAAE,OAAO,CAAC,EAAE;QACpB,SAAS,EAAE,OAAO,CAAC,GAAG;QACtB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,IAAI,IAAI,CAAmB;QAClE,IAAI;KAC0B,CAAC;AACnC,CAAC,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAC5C,IAAI,EACJ,IAAI,GAIL;IACC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,kBAAkB,CACxC,YAAY,CACV,CAAC,SAAS,EAAE,EAAE,CAAC,aAAa,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EACtE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CACxB,CACF,CAAC;IAEF,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC9D,OAAO,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACjE,CAAC,CAAC,CAAC"}

package/lib/AWS/Organizations/PolicyAttachment.d.ts

@@ -0,0 +1,28 @@
+import * as organizations from "@distilled.cloud/aws/organizations";
+import * as Provider from "../../Provider.ts";
+import { Resource } from "../../Resource.ts";
+import type { Providers } from "../Providers.ts";
+export interface PolicyAttachmentProps {
+    /**
+     * Policy to attach.
+     */
+    policyId: string;
+    /**
+     * Target root, OU, or account ID.
+     */
+    targetId: string;
+}
+export interface PolicyAttachment extends Resource<"AWS.Organizations.PolicyAttachment", PolicyAttachmentProps, {
+    policyId: string;
+    targetId: string;
+    targetArn: string | undefined;
+    targetName: string | undefined;
+    targetType: organizations.TargetType | undefined;
+}, never, Providers> {
+}
+/**
+ * Attaches an Organizations policy to a root, OU, or account.
+ */
+export declare const PolicyAttachment: import("../../Resource.ts").ResourceClass<PolicyAttachment>;
+export declare const PolicyAttachmentProvider: () => import("effect/Layer").Layer<Provider.Provider<PolicyAttachment>, never, import("effect/unstable/http/HttpClient").HttpClient | import("@distilled.cloud/aws/Region").Region | import("@distilled.cloud/aws/Credentials").Credentials>;
+//# sourceMappingURL=PolicyAttachment.d.ts.map

package/lib/AWS/Organizations/PolicyAttachment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PolicyAttachment.d.ts","sourceRoot":"","sources":["../../../src/AWS/Organizations/PolicyAttachment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,aAAa,MAAM,oCAAoC,CAAC;AAGpE,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAGjD,MAAM,WAAW,qBAAqB;IACpC;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,gBAAiB,SAAQ,QAAQ,CAChD,oCAAoC,EACpC,qBAAqB,EACrB;IACE,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,UAAU,EAAE,aAAa,CAAC,UAAU,GAAG,SAAS,CAAC;CAClD,EACD,KAAK,EACL,SAAS,CACV;CAAG;AAEJ;;GAEG;AACH,eAAO,MAAM,gBAAgB,6DAE5B,CAAC;AAEF,eAAO,MAAM,wBAAwB,8OAsElC,CAAC"}

package/lib/AWS/Organizations/PolicyAttachment.js

@@ -0,0 +1,73 @@
+import * as organizations from "@distilled.cloud/aws/organizations";
+import * as Effect from "effect/Effect";
+import { isResolved } from "../../Diff.js";
+import * as Provider from "../../Provider.js";
+import { Resource } from "../../Resource.js";
+import { collectPages, retryOrganizations } from "./common.js";
+/**
+ * Attaches an Organizations policy to a root, OU, or account.
+ */
+export const PolicyAttachment = Resource("AWS.Organizations.PolicyAttachment");
+export const PolicyAttachmentProvider = () => Provider.effect(PolicyAttachment, Effect.gen(function* () {
+    return {
+        stables: ["policyId", "targetId"],
+        diff: Effect.fn(function* ({ olds, news }) {
+            if (!isResolved(news))
+                return;
+            if (olds?.policyId !== news.policyId ||
+                olds?.targetId !== news.targetId) {
+                return { action: "replace" };
+            }
+        }),
+        read: Effect.fn(function* ({ olds, output }) {
+            return yield* readAttachment({
+                policyId: output?.policyId ?? olds.policyId,
+                targetId: output?.targetId ?? olds.targetId,
+            });
+        }),
+        create: Effect.fn(function* ({ news, session }) {
+            yield* retryOrganizations(organizations
+                .attachPolicy({
+                PolicyId: news.policyId,
+                TargetId: news.targetId,
+            })
+                .pipe(Effect.catchTag("DuplicatePolicyAttachmentException", () => Effect.void)));
+            const state = yield* readAttachment(news);
+            if (!state) {
+                return yield* Effect.fail(new Error(`policy attachment '${news.policyId}' -> '${news.targetId}' not found after create`));
+            }
+            yield* session.note(`${state.policyId}:${state.targetId}`);
+            return state;
+        }),
+        update: Effect.fn(function* ({ output, session }) {
+            yield* session.note(`${output.policyId}:${output.targetId}`);
+            return output;
+        }),
+        delete: Effect.fn(function* ({ output }) {
+            yield* retryOrganizations(organizations
+                .detachPolicy({
+                PolicyId: output.policyId,
+                TargetId: output.targetId,
+            })
+                .pipe(Effect.catchTags({
+                PolicyNotAttachedException: () => Effect.void,
+                PolicyNotFoundException: () => Effect.void,
+                TargetNotFoundException: () => Effect.void,
+            })));
+        }),
+    };
+}));
+const readAttachment = Effect.fn(function* ({ policyId, targetId, }) {
+    const targets = yield* retryOrganizations(collectPages((NextToken) => organizations.listTargetsForPolicy({ PolicyId: policyId, NextToken }), (page) => page.Targets));
+    const target = targets.find((candidate) => candidate.TargetId === targetId);
+    return target
+        ? {
+            policyId,
+            targetId,
+            targetArn: target.Arn,
+            targetName: target.Name,
+            targetType: target.Type,
+        }
+        : undefined;
+});
+//# sourceMappingURL=PolicyAttachment.js.map

package/lib/AWS/Organizations/PolicyAttachment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PolicyAttachment.js","sourceRoot":"","sources":["../../../src/AWS/Organizations/PolicyAttachment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,aAAa,MAAM,oCAAoC,CAAC;AACpE,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AA2B/D;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,QAAQ,CACtC,oCAAoC,CACrC,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAAG,EAAE,CAC3C,QAAQ,CAAC,MAAM,CACb,gBAAgB,EAChB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO;QACL,OAAO,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC;QACjC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;YACvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO;YAC9B,IACE,IAAI,EAAE,QAAQ,KAAK,IAAI,CAAC,QAAQ;gBAChC,IAAI,EAAE,QAAQ,KAAK,IAAI,CAAC,QAAQ,EAChC,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;QACH,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;YACzC,OAAO,KAAK,CAAC,CAAC,cAAc,CAAC;gBAC3B,QAAQ,EAAE,MAAM,EAAE,QAAQ,IAAI,IAAK,CAAC,QAAQ;gBAC5C,QAAQ,EAAE,MAAM,EAAE,QAAQ,IAAI,IAAK,CAAC,QAAQ;aAC7C,CAAC,CAAC;QACL,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;YAC5C,KAAK,CAAC,CAAC,kBAAkB,CACvB,aAAa;iBACV,YAAY,CAAC;gBACZ,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;aACxB,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,oCAAoC,EACpC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAClB,CACF,CACJ,CAAC;YAEF,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CACP,sBAAsB,IAAI,CAAC,QAAQ,SAAS,IAAI,CAAC,QAAQ,0BAA0B,CACpF,CACF,CAAC;YACJ,CAAC;YAED,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC3D,OAAO,KAAK,CAAC;QACf,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;YAC9C,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC7D,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACrC,KAAK,CAAC,CAAC,kBAAkB,CACvB,aAAa;iBACV,YAAY,CAAC;gBACZ,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,SAAS,CAAC;gBACf,0BAA0B,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI;gBAC7C,uBAAuB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI;gBAC1C,uBAAuB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI;aAC3C,CAAC,CACH,CACJ,CAAC;QACJ,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC;AAEJ,MAAM,cAAc,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAC1C,QAAQ,EACR,QAAQ,GACc;IACtB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,kBAAkB,CACvC,YAAY,CACV,CAAC,SAAS,EAAE,EAAE,CACZ,aAAa,CAAC,oBAAoB,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EACvE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CACvB,CACF,CAAC;IAEF,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;IAC5E,OAAO,MAAM;QACX,CAAC,CAAE;YACC,QAAQ;YACR,QAAQ;YACR,SAAS,EAAE,MAAM,CAAC,GAAG;YACrB,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,UAAU,EAAE,MAAM,CAAC,IAAI;SACkB;QAC7C,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC,CAAC,CAAC"}

package/lib/AWS/Organizations/Root.d.ts

@@ -0,0 +1,38 @@
+import * as organizations from "@distilled.cloud/aws/organizations";
+import * as Provider from "../../Provider.ts";
+import { Resource } from "../../Resource.ts";
+import type { Providers } from "../Providers.ts";
+export type RootId = string;
+export type RootArn = string;
+export interface RootProps {
+    /**
+     * Optional root ID to import explicitly.
+     * If omitted, Alchemy adopts the single organization root.
+     */
+    rootId?: string;
+    /**
+     * Optional root name to match when multiple roots are ever supported.
+     */
+    name?: string;
+    /**
+     * Optional tags to apply to the imported root.
+     */
+    tags?: Record<string, string>;
+}
+export interface Root extends Resource<"AWS.Organizations.Root", RootProps, {
+    rootId: RootId;
+    rootArn: RootArn;
+    rootName: string;
+    policyTypes: organizations.PolicyTypeSummary[];
+    tags: Record<string, string>;
+}, never, Providers> {
+}
+/**
+ * The organization root.
+ *
+ * `Root` is an import-style resource. It discovers the existing root returned by
+ * AWS Organizations and can reconcile root tags.
+ */
+export declare const Root: import("../../Resource.ts").ResourceClass<Root>;
+export declare const RootProvider: () => import("effect/Layer").Layer<Provider.Provider<Root>, never, import("effect/unstable/http/HttpClient").HttpClient | import("../../Stage.ts").Stage | import("../../Stack.ts").Stack | import("@distilled.cloud/aws/Region").Region | import("@distilled.cloud/aws/Credentials").Credentials>;
+//# sourceMappingURL=Root.d.ts.map

package/lib/AWS/Organizations/Root.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Root.d.ts","sourceRoot":"","sources":["../../../src/AWS/Organizations/Root.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,aAAa,MAAM,oCAAoC,CAAC;AAGpE,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAQjD,MAAM,MAAM,MAAM,GAAG,MAAM,CAAC;AAC5B,MAAM,MAAM,OAAO,GAAG,MAAM,CAAC;AAE7B,MAAM,WAAW,SAAS;IACxB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,IAAK,SAAQ,QAAQ,CACpC,wBAAwB,EACxB,SAAS,EACT;IACE,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,aAAa,CAAC,iBAAiB,EAAE,CAAC;IAC/C,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B,EACD,KAAK,EACL,SAAS,CACV;CAAG;AAEJ;;;;;GAKG;AACH,eAAO,MAAM,IAAI,iDAA2C,CAAC;AAE7D,eAAO,MAAM,YAAY,oSAgEtB,CAAC"}

package/lib/AWS/Organizations/Root.js

@@ -0,0 +1,87 @@
+import * as organizations from "@distilled.cloud/aws/organizations";
+import * as Effect from "effect/Effect";
+import { isResolved } from "../../Diff.js";
+import * as Provider from "../../Provider.js";
+import { Resource } from "../../Resource.js";
+import { collectPages, readResourceTags, retryOrganizations, updateResourceTags, } from "./common.js";
+/**
+ * The organization root.
+ *
+ * `Root` is an import-style resource. It discovers the existing root returned by
+ * AWS Organizations and can reconcile root tags.
+ */
+export const Root = Resource("AWS.Organizations.Root");
+export const RootProvider = () => Provider.effect(Root, Effect.gen(function* () {
+    return {
+        stables: ["rootId", "rootArn"],
+        diff: Effect.fn(function* ({ olds, news }) {
+            if (!isResolved(news))
+                return;
+            if (olds?.rootId !== news?.rootId) {
+                return { action: "replace" };
+            }
+            if (olds?.name !== news?.name) {
+                return { action: "replace" };
+            }
+        }),
+        read: Effect.fn(function* ({ olds, output }) {
+            return yield* readRoot({
+                rootId: output?.rootId ?? olds?.rootId,
+                name: olds?.name,
+            });
+        }),
+        create: Effect.fn(function* ({ id, news, session }) {
+            const root = yield* readRoot(news);
+            if (!root) {
+                return yield* Effect.fail(new Error("organization root not found"));
+            }
+            const tags = yield* updateResourceTags({
+                id,
+                resourceId: root.rootId,
+                olds: root.tags,
+                news: news.tags,
+            });
+            yield* session.note(root.rootArn);
+            return {
+                ...root,
+                tags,
+            };
+        }),
+        update: Effect.fn(function* ({ id, news, olds, output, session }) {
+            const root = yield* readRoot({ rootId: output.rootId });
+            if (!root) {
+                return yield* Effect.fail(new Error(`organization root '${output.rootId}' not found`));
+            }
+            const tags = yield* updateResourceTags({
+                id,
+                resourceId: output.rootId,
+                olds: olds.tags,
+                news: news.tags,
+            });
+            yield* session.note(output.rootArn);
+            return {
+                ...root,
+                tags,
+            };
+        }),
+        delete: Effect.fn(function* () { }),
+    };
+}));
+const listRoots = () => collectPages((NextToken) => organizations.listRoots({ NextToken }), (page) => page.Roots);
+const readRoot = Effect.fn(function* ({ rootId, name, }) {
+    const roots = yield* retryOrganizations(listRoots());
+    const root = roots.find((candidate) => (rootId ? candidate.Id === rootId : true) &&
+        (name ? candidate.Name === name : true));
+    if (!root?.Id || !root.Arn || !root.Name) {
+        return undefined;
+    }
+    const tags = yield* readResourceTags(root.Id).pipe(Effect.catchTag("TargetNotFoundException", () => Effect.succeed({})));
+    return {
+        rootId: root.Id,
+        rootArn: root.Arn,
+        rootName: root.Name,
+        policyTypes: root.PolicyTypes ?? [],
+        tags,
+    };
+});
+//# sourceMappingURL=Root.js.map

package/lib/AWS/Organizations/Root.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Root.js","sourceRoot":"","sources":["../../../src/AWS/Organizations/Root.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,aAAa,MAAM,oCAAoC,CAAC;AACpE,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,aAAa,CAAC;AAmCrB;;;;;GAKG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG,QAAQ,CAAO,wBAAwB,CAAC,CAAC;AAE7D,MAAM,CAAC,MAAM,YAAY,GAAG,GAAG,EAAE,CAC/B,QAAQ,CAAC,MAAM,CACb,IAAI,EACJ,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO;QACL,OAAO,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC;QAC9B,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;YACvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO;YAC9B,IAAI,IAAI,EAAE,MAAM,KAAK,IAAI,EAAE,MAAM,EAAE,CAAC;gBAClC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;YACD,IAAI,IAAI,EAAE,IAAI,KAAK,IAAI,EAAE,IAAI,EAAE,CAAC;gBAC9B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;QACH,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;YACzC,OAAO,KAAK,CAAC,CAAC,QAAQ,CAAC;gBACrB,MAAM,EAAE,MAAM,EAAE,MAAM,IAAI,IAAI,EAAE,MAAM;gBACtC,IAAI,EAAE,IAAI,EAAE,IAAI;aACjB,CAAC,CAAC;QACL,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;YAChD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAC;YACtE,CAAC;YAED,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC;gBACrC,EAAE;gBACF,UAAU,EAAE,IAAI,CAAC,MAAM;gBACvB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;aAChB,CAAC,CAAC;YAEH,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAClC,OAAO;gBACL,GAAG,IAAI;gBACP,IAAI;aACL,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;YAC9D,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YACxD,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CAAC,sBAAsB,MAAM,CAAC,MAAM,aAAa,CAAC,CAC5D,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC;gBACrC,EAAE;gBACF,UAAU,EAAE,MAAM,CAAC,MAAM;gBACzB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;aAChB,CAAC,CAAC;YAEH,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACpC,OAAO;gBACL,GAAG,IAAI;gBACP,IAAI;aACL,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAK,CAAC,CAAC;KACnC,CAAC;AACJ,CAAC,CAAC,CACH,CAAC;AAEJ,MAAM,SAAS,GAAG,GAAG,EAAE,CACrB,YAAY,CACV,CAAC,SAAS,EAAE,EAAE,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC,EACrD,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CACrB,CAAC;AAEJ,MAAM,QAAQ,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EACpC,MAAM,EACN,IAAI,GAIL;IACC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC,SAAS,EAAE,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CACrB,CAAC,SAAS,EAAE,EAAE,CACZ,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;QACzC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAC1C,CAAC;IAEF,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACzC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAChD,MAAM,CAAC,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CACrE,CAAC;IAEF,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,OAAO,EAAE,IAAI,CAAC,GAAG;QACjB,QAAQ,EAAE,IAAI,CAAC,IAAI;QACnB,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE;QACnC,IAAI;KACwB,CAAC;AACjC,CAAC,CAAC,CAAC"}

package/lib/AWS/Organizations/RootPolicyType.d.ts

@@ -0,0 +1,27 @@
+import * as organizations from "@distilled.cloud/aws/organizations";
+import * as Provider from "../../Provider.ts";
+import { Resource } from "../../Resource.ts";
+import type { Providers } from "../Providers.ts";
+export interface RootPolicyTypeProps {
+    /**
+     * Root that owns the enabled policy type.
+     */
+    rootId: string;
+    /**
+     * Policy type to enable on the root.
+     */
+    policyType: organizations.PolicyType;
+}
+export interface RootPolicyType extends Resource<"AWS.Organizations.RootPolicyType", RootPolicyTypeProps, {
+    rootId: string;
+    rootArn: string | undefined;
+    policyType: organizations.PolicyType;
+    status: organizations.PolicyTypeStatus | undefined;
+}, never, Providers> {
+}
+/**
+ * Enables a policy type on an organization root.
+ */
+export declare const RootPolicyType: import("../../Resource.ts").ResourceClass<RootPolicyType>;
+export declare const RootPolicyTypeProvider: () => import("effect/Layer").Layer<Provider.Provider<RootPolicyType>, never, import("effect/unstable/http/HttpClient").HttpClient | import("@distilled.cloud/aws/Region").Region | import("@distilled.cloud/aws/Credentials").Credentials>;
+//# sourceMappingURL=RootPolicyType.d.ts.map

package/lib/AWS/Organizations/RootPolicyType.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RootPolicyType.d.ts","sourceRoot":"","sources":["../../../src/AWS/Organizations/RootPolicyType.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,aAAa,MAAM,oCAAoC,CAAC;AAGpE,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAGjD,MAAM,WAAW,mBAAmB;IAClC;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;OAEG;IACH,UAAU,EAAE,aAAa,CAAC,UAAU,CAAC;CACtC;AAED,MAAM,WAAW,cAAe,SAAQ,QAAQ,CAC9C,kCAAkC,EAClC,mBAAmB,EACnB;IACE,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,UAAU,EAAE,aAAa,CAAC,UAAU,CAAC;IACrC,MAAM,EAAE,aAAa,CAAC,gBAAgB,GAAG,SAAS,CAAC;CACpD,EACD,KAAK,EACL,SAAS,CACV;CAAG;AAEJ;;GAEG;AACH,eAAO,MAAM,cAAc,2DAE1B,CAAC;AAEF,eAAO,MAAM,sBAAsB,4OAsEhC,CAAC"}