alchemy 2.0.0-beta.test-export-fix-4 → 2.0.0-cli-bundle-fix.1

package/lib/AWS/Organizations/Account.js

@@ -0,0 +1,182 @@
+import * as accountManagement from "@distilled.cloud/aws/account";
+import * as organizations from "@distilled.cloud/aws/organizations";
+import * as Effect from "effect/Effect";
+import * as Schedule from "effect/Schedule";
+import { isResolved } from "../../Diff.js";
+import * as Provider from "../../Provider.js";
+import { Resource } from "../../Resource.js";
+import { collectPages, ensureOwnedByAlchemy, readResourceTags, retryOrganizations, updateResourceTags, } from "./common.js";
+/**
+ * A member account created and managed by AWS Organizations.
+ */
+export const Account = Resource("AWS.Organizations.Account");
+export const AccountProvider = () => Provider.effect(Account, Effect.gen(function* () {
+    return {
+        stables: ["accountId", "accountArn", "joinedMethod", "joinedTimestamp"],
+        diff: Effect.fn(function* ({ olds, news }) {
+            if (!isResolved(news))
+                return;
+            if (olds?.email !== news.email) {
+                return { action: "replace" };
+            }
+            if (olds?.name !== news.name) {
+                return { action: "update" };
+            }
+        }),
+        read: Effect.fn(function* ({ olds, output }) {
+            if (output?.accountId) {
+                return yield* readAccountById(output.accountId);
+            }
+            if (!olds) {
+                return undefined;
+            }
+            return yield* readAccountByNameOrEmail({
+                name: olds.name,
+                email: olds.email,
+            });
+        }),
+        create: Effect.fn(function* ({ id, news, session }) {
+            const existing = yield* readAccountByNameOrEmail({
+                name: news.name,
+                email: news.email,
+            });
+            if (existing) {
+                yield* ensureOwnedByAlchemy(id, existing.accountId, existing.tags, "account");
+            }
+            else {
+                const createResponse = yield* retryOrganizations(organizations.createAccount({
+                    Email: news.email,
+                    AccountName: news.name,
+                    RoleName: news.roleName,
+                    IamUserAccessToBilling: news.iamUserAccessToBilling,
+                }));
+                const requestId = createResponse.CreateAccountStatus?.Id;
+                if (requestId) {
+                    const status = yield* waitForCreateAccount(requestId);
+                    yield* session.note(status.AccountId ?? requestId);
+                }
+            }
+            let created = yield* readAccountByNameOrEmail({
+                name: news.name,
+                email: news.email,
+            });
+            if (!created) {
+                return yield* Effect.fail(new Error(`account '${news.name}' not found after create`));
+            }
+            if (created.parentId !== news.parentId && created.parentId) {
+                yield* retryOrganizations(organizations.moveAccount({
+                    AccountId: created.accountId,
+                    SourceParentId: created.parentId,
+                    DestinationParentId: news.parentId,
+                }));
+                created = (yield* readAccountById(created.accountId)) ?? created;
+            }
+            const tags = yield* updateResourceTags({
+                id,
+                resourceId: created.accountId,
+                olds: created.tags,
+                news: news.tags,
+            });
+            yield* session.note(created.accountArn);
+            return {
+                ...created,
+                tags,
+            };
+        }),
+        update: Effect.fn(function* ({ id, news, olds, output, session }) {
+            if (output.name !== news.name) {
+                yield* retryAccountManagement(accountManagement.putAccountName({
+                    AccountId: output.accountId,
+                    AccountName: news.name,
+                }));
+            }
+            if (output.parentId && output.parentId !== news.parentId) {
+                yield* retryOrganizations(organizations.moveAccount({
+                    AccountId: output.accountId,
+                    SourceParentId: output.parentId,
+                    DestinationParentId: news.parentId,
+                }));
+            }
+            const tags = yield* updateResourceTags({
+                id,
+                resourceId: output.accountId,
+                olds: olds.tags,
+                news: news.tags,
+            });
+            const updated = yield* readAccountById(output.accountId);
+            if (!updated) {
+                return yield* Effect.fail(new Error(`account '${output.accountId}' not found after update`));
+            }
+            yield* session.note(output.accountArn);
+            return {
+                ...updated,
+                tags,
+            };
+        }),
+        delete: Effect.fn(function* ({ output }) {
+            yield* retryOrganizations(organizations
+                .removeAccountFromOrganization({
+                AccountId: output.accountId,
+            })
+                .pipe(Effect.catchTags({
+                AccountNotFoundException: () => Effect.void,
+                AWSOrganizationsNotInUseException: () => Effect.void,
+            })));
+        }),
+    };
+}));
+const listAccounts = () => collectPages((NextToken) => organizations.listAccounts({ NextToken }), (page) => page.Accounts).pipe(retryOrganizations);
+const readParentId = (childId) => collectPages((NextToken) => organizations.listParents({ ChildId: childId, NextToken }), (page) => page.Parents).pipe(retryOrganizations, Effect.map((parents) => parents[0]?.Id), Effect.catchTag("ChildNotFoundException", () => Effect.succeed(undefined)));
+const readAccountById = Effect.fn(function* (accountId) {
+    const described = yield* retryOrganizations(organizations.describeAccount({ AccountId: accountId }).pipe(Effect.map((response) => response.Account), Effect.catchTag("AccountNotFoundException", () => Effect.succeed(undefined))));
+    if (!described?.Id || !described.Arn) {
+        return undefined;
+    }
+    const [parentId, tags] = yield* Effect.all([
+        readParentId(described.Id),
+        readResourceTags(described.Id).pipe(Effect.catchTag("TargetNotFoundException", () => Effect.succeed({}))),
+    ]);
+    return {
+        accountId: described.Id,
+        accountArn: described.Arn,
+        name: described.Name,
+        email: described.Email,
+        parentId,
+        status: described.Status,
+        state: described.State,
+        joinedMethod: described.JoinedMethod,
+        joinedTimestamp: described.JoinedTimestamp,
+        tags,
+    };
+});
+const readAccountByNameOrEmail = Effect.fn(function* ({ name, email, }) {
+    const accounts = yield* listAccounts();
+    const match = accounts.find((candidate) => candidate.Name === name || candidate.Email === email);
+    return match?.Id ? yield* readAccountById(match.Id) : undefined;
+});
+const waitForCreateAccount = (requestId) => Effect.gen(function* () {
+    const status = yield* retryOrganizations(organizations
+        .describeCreateAccountStatus({
+        CreateAccountRequestId: requestId,
+    })
+        .pipe(Effect.map((response) => response.CreateAccountStatus)));
+    if (!status?.State || status.State === "IN_PROGRESS") {
+        return yield* Effect.fail({ _tag: "CreateAccountInProgress" });
+    }
+    if (status.State === "FAILED") {
+        return yield* Effect.fail(new Error(`account creation failed: ${status.FailureReason ?? "unknown failure"}`));
+    }
+    if (!status.AccountId) {
+        return yield* Effect.fail(new Error("account creation succeeded without AccountId"));
+    }
+    return status;
+}).pipe(Effect.retry({
+    while: (error) => error?._tag === "CreateAccountInProgress",
+    schedule: Schedule.spaced("2 seconds").pipe(Schedule.both(Schedule.recurs(120))),
+}));
+const retryAccountManagement = (effect) => effect.pipe(Effect.retry({
+    while: (error) => error?._tag === "TooManyRequestsException" ||
+        error?._tag === "InternalServerException",
+    schedule: Schedule.exponential(200).pipe(Schedule.both(Schedule.recurs(8))),
+}));
+//# sourceMappingURL=Account.js.map

package/lib/AWS/Organizations/Account.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Account.js","sourceRoot":"","sources":["../../../src/AWS/Organizations/Account.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,iBAAiB,MAAM,8BAA8B,CAAC;AAClE,OAAO,KAAK,aAAa,MAAM,oCAAoC,CAAC;AACpE,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,OAAO,EACL,YAAY,EACZ,oBAAoB,EACpB,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,aAAa,CAAC;AAmDrB;;GAEG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,QAAQ,CAAU,2BAA2B,CAAC,CAAC;AAEtE,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,EAAE,CAClC,QAAQ,CAAC,MAAM,CACb,OAAO,EACP,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO;QACL,OAAO,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,cAAc,EAAE,iBAAiB,CAAC;QACvE,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;YACvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO;YAC9B,IAAI,IAAI,EAAE,KAAK,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC/B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;YACD,IAAI,IAAI,EAAE,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC7B,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAW,CAAC;YACvC,CAAC;QACH,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;YACzC,IAAI,MAAM,EAAE,SAAS,EAAE,CAAC;gBACtB,OAAO,KAAK,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAClD,CAAC;YAED,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,SAAS,CAAC;YACnB,CAAC;YAED,OAAO,KAAK,CAAC,CAAC,wBAAwB,CAAC;gBACrC,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,KAAK,EAAE,IAAI,CAAC,KAAK;aAClB,CAAC,CAAC;QACL,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;YAChD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,wBAAwB,CAAC;gBAC/C,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,KAAK,EAAE,IAAI,CAAC,KAAK;aAClB,CAAC,CAAC;YAEH,IAAI,QAAQ,EAAE,CAAC;gBACb,KAAK,CAAC,CAAC,oBAAoB,CACzB,EAAE,EACF,QAAQ,CAAC,SAAS,EAClB,QAAQ,CAAC,IAAI,EACb,SAAS,CACV,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAC9C,aAAa,CAAC,aAAa,CAAC;oBAC1B,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,WAAW,EAAE,IAAI,CAAC,IAAI;oBACtB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,sBAAsB,EAAE,IAAI,CAAC,sBAAsB;iBACpD,CAAC,CACH,CAAC;gBAEF,MAAM,SAAS,GAAG,cAAc,CAAC,mBAAmB,EAAE,EAAE,CAAC;gBACzD,IAAI,SAAS,EAAE,CAAC;oBACd,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;oBACtD,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,SAAS,CAAC,CAAC;gBACrD,CAAC;YACH,CAAC;YAED,IAAI,OAAO,GAAG,KAAK,CAAC,CAAC,wBAAwB,CAAC;gBAC5C,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,KAAK,EAAE,IAAI,CAAC,KAAK;aAClB,CAAC,CAAC;YAEH,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CAAC,YAAY,IAAI,CAAC,IAAI,0BAA0B,CAAC,CAC3D,CAAC;YACJ,CAAC;YAED,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;gBAC3D,KAAK,CAAC,CAAC,kBAAkB,CACvB,aAAa,CAAC,WAAW,CAAC;oBACxB,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,cAAc,EAAE,OAAO,CAAC,QAAQ;oBAChC,mBAAmB,EAAE,IAAI,CAAC,QAAQ;iBACnC,CAAC,CACH,CAAC;gBACF,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,OAAO,CAAC;YACnE,CAAC;YAED,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC;gBACrC,EAAE;gBACF,UAAU,EAAE,OAAO,CAAC,SAAS;gBAC7B,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,IAAI,EAAE,IAAI,CAAC,IAAI;aAChB,CAAC,CAAC;YAEH,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YACxC,OAAO;gBACL,GAAG,OAAO;gBACV,IAAI;aACL,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;YAC9D,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC9B,KAAK,CAAC,CAAC,sBAAsB,CAC3B,iBAAiB,CAAC,cAAc,CAAC;oBAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,WAAW,EAAE,IAAI,CAAC,IAAI;iBACvB,CAAC,CACH,CAAC;YACJ,CAAC;YAED,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACzD,KAAK,CAAC,CAAC,kBAAkB,CACvB,aAAa,CAAC,WAAW,CAAC;oBACxB,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,cAAc,EAAE,MAAM,CAAC,QAAQ;oBAC/B,mBAAmB,EAAE,IAAI,CAAC,QAAQ;iBACnC,CAAC,CACH,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC;gBACrC,EAAE;gBACF,UAAU,EAAE,MAAM,CAAC,SAAS;gBAC5B,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;aAChB,CAAC,CAAC;YAEH,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACzD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CAAC,YAAY,MAAM,CAAC,SAAS,0BAA0B,CAAC,CAClE,CAAC;YACJ,CAAC;YAED,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACvC,OAAO;gBACL,GAAG,OAAO;gBACV,IAAI;aACL,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACrC,KAAK,CAAC,CAAC,kBAAkB,CACvB,aAAa;iBACV,6BAA6B,CAAC;gBAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;aAC5B,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,SAAS,CAAC;gBACf,wBAAwB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI;gBAC3C,iCAAiC,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI;aACrD,CAAC,CACH,CACJ,CAAC;QACJ,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC;AAEJ,MAAM,YAAY,GAAG,GAAG,EAAE,CACxB,YAAY,CACV,CAAC,SAAS,EAAE,EAAE,CAAC,aAAa,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,CAAC,EACxD,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CACxB,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;AAE7B,MAAM,YAAY,GAAG,CAAC,OAAe,EAAE,EAAE,CACvC,YAAY,CACV,CAAC,SAAS,EAAE,EAAE,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,EACzE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CACvB,CAAC,IAAI,CACJ,kBAAkB,EAClB,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EACvC,MAAM,CAAC,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAC3E,CAAC;AAEJ,MAAM,eAAe,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,SAAiB;IAC5D,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,kBAAkB,CACzC,aAAa,CAAC,eAAe,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,CAC1D,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,EAC1C,MAAM,CAAC,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE,CAC/C,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAC1B,CACF,CACF,CAAC;IAEF,IAAI,CAAC,SAAS,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC;QACrC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;QACzC,YAAY,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1B,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,IAAI,CACjC,MAAM,CAAC,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CACrE;KACF,CAAC,CAAC;IAEH,OAAO;QACL,SAAS,EAAE,SAAS,CAAC,EAAE;QACvB,UAAU,EAAE,SAAS,CAAC,GAAG;QACzB,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,KAAK,EAAE,SAAS,CAAC,KAAK;QACtB,QAAQ;QACR,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,KAAK,EAAE,SAAS,CAAC,KAAK;QACtB,YAAY,EAAE,SAAS,CAAC,YAAY;QACpC,eAAe,EAAE,SAAS,CAAC,eAAe;QAC1C,IAAI;KAC2B,CAAC;AACpC,CAAC,CAAC,CAAC;AAEH,MAAM,wBAAwB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EACpD,IAAI,EACJ,KAAK,GACgC;IACrC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,YAAY,EAAE,CAAC;IACvC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CACzB,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,IAAI,IAAI,SAAS,CAAC,KAAK,KAAK,KAAK,CACpE,CAAC;IACF,OAAO,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAClE,CAAC,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG,CAAC,SAAiB,EAAE,EAAE,CACjD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,kBAAkB,CACtC,aAAa;SACV,2BAA2B,CAAC;QAC3B,sBAAsB,EAAE,SAAS;KAClC,CAAC;SACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAChE,CAAC;IAEF,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,MAAM,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;QACrD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,yBAAkC,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CACP,4BAA4B,MAAM,CAAC,aAAa,IAAI,iBAAiB,EAAE,CACxE,CACF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACtB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAC1D,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,KAAK,CAAC;IACX,KAAK,EAAE,CAAC,KAAU,EAAE,EAAE,CAAC,KAAK,EAAE,IAAI,KAAK,yBAAyB;IAChE,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CACzC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CACpC;CACF,CAAC,CACH,CAAC;AAEJ,MAAM,sBAAsB,GAAG,CAAU,MAA8B,EAAE,EAAE,CACzE,MAAM,CAAC,IAAI,CACT,MAAM,CAAC,KAAK,CAAC;IACX,KAAK,EAAE,CAAC,KAAU,EAAE,EAAE,CACpB,KAAK,EAAE,IAAI,KAAK,0BAA0B;QAC1C,KAAK,EAAE,IAAI,KAAK,yBAAyB;IAC3C,QAAQ,EAAE,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,CACtC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAClC;CACF,CAAC,CACH,CAAC"}

package/lib/AWS/Organizations/DelegatedAdministrator.d.ts

@@ -0,0 +1,29 @@
+import * as organizations from "@distilled.cloud/aws/organizations";
+import * as Provider from "../../Provider.ts";
+import { Resource } from "../../Resource.ts";
+import type { Providers } from "../Providers.ts";
+export interface DelegatedAdministratorProps {
+    /**
+     * Member account registered as delegated administrator.
+     */
+    accountId: string;
+    /**
+     * Service principal delegated to the account.
+     */
+    servicePrincipal: string;
+}
+export interface DelegatedAdministrator extends Resource<"AWS.Organizations.DelegatedAdministrator", DelegatedAdministratorProps, {
+    accountId: string;
+    accountArn: string | undefined;
+    accountName: organizations.DelegatedAdministrator["Name"] | undefined;
+    accountEmail: organizations.DelegatedAdministrator["Email"] | undefined;
+    servicePrincipal: string;
+    delegationEnabledDate: Date | undefined;
+}, never, Providers> {
+}
+/**
+ * Registers a delegated administrator account for a trusted AWS service.
+ */
+export declare const DelegatedAdministrator: import("../../Resource.ts").ResourceClass<DelegatedAdministrator>;
+export declare const DelegatedAdministratorProvider: () => import("effect/Layer").Layer<Provider.Provider<DelegatedAdministrator>, never, import("effect/unstable/http/HttpClient").HttpClient | import("@distilled.cloud/aws/Region").Region | import("@distilled.cloud/aws/Credentials").Credentials>;
+//# sourceMappingURL=DelegatedAdministrator.d.ts.map

package/lib/AWS/Organizations/DelegatedAdministrator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DelegatedAdministrator.d.ts","sourceRoot":"","sources":["../../../src/AWS/Organizations/DelegatedAdministrator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,aAAa,MAAM,oCAAoC,CAAC;AAGpE,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAGjD,MAAM,WAAW,2BAA2B;IAC1C;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,sBAAuB,SAAQ,QAAQ,CACtD,0CAA0C,EAC1C,2BAA2B,EAC3B;IACE,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,WAAW,EAAE,aAAa,CAAC,sBAAsB,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IACtE,YAAY,EAAE,aAAa,CAAC,sBAAsB,CAAC,OAAO,CAAC,GAAG,SAAS,CAAC;IACxE,gBAAgB,EAAE,MAAM,CAAC;IACzB,qBAAqB,EAAE,IAAI,GAAG,SAAS,CAAC;CACzC,EACD,KAAK,EACL,SAAS,CACV;CAAG;AAEJ;;GAEG;AACH,eAAO,MAAM,sBAAsB,mEAElC,CAAC;AAEF,eAAO,MAAM,8BAA8B,oPA0ExC,CAAC"}

package/lib/AWS/Organizations/DelegatedAdministrator.js

@@ -0,0 +1,86 @@
+import * as organizations from "@distilled.cloud/aws/organizations";
+import * as Effect from "effect/Effect";
+import { isResolved } from "../../Diff.js";
+import * as Provider from "../../Provider.js";
+import { Resource } from "../../Resource.js";
+import { collectPages, retryOrganizations } from "./common.js";
+/**
+ * Registers a delegated administrator account for a trusted AWS service.
+ */
+export const DelegatedAdministrator = Resource("AWS.Organizations.DelegatedAdministrator");
+export const DelegatedAdministratorProvider = () => Provider.effect(DelegatedAdministrator, Effect.gen(function* () {
+    return {
+        stables: ["accountId", "servicePrincipal"],
+        diff: Effect.fn(function* ({ olds, news }) {
+            if (!isResolved(news))
+                return;
+            if (olds?.accountId !== news.accountId ||
+                olds?.servicePrincipal !== news.servicePrincipal) {
+                return { action: "replace" };
+            }
+        }),
+        read: Effect.fn(function* ({ olds, output }) {
+            return yield* readDelegatedAdministrator({
+                accountId: output?.accountId ?? olds.accountId,
+                servicePrincipal: output?.servicePrincipal ?? olds.servicePrincipal,
+            });
+        }),
+        create: Effect.fn(function* ({ news, session }) {
+            if (!(yield* readDelegatedAdministrator(news))) {
+                yield* retryOrganizations(organizations
+                    .registerDelegatedAdministrator({
+                    AccountId: news.accountId,
+                    ServicePrincipal: news.servicePrincipal,
+                })
+                    .pipe(Effect.catchTag("AccountAlreadyRegisteredException", () => Effect.void)));
+            }
+            const state = yield* readDelegatedAdministrator(news);
+            if (!state) {
+                return yield* Effect.fail(new Error(`delegated administrator '${news.accountId}' for '${news.servicePrincipal}' not found after create`));
+            }
+            yield* session.note(`${state.accountId}:${state.servicePrincipal}`);
+            return state;
+        }),
+        update: Effect.fn(function* ({ output, session }) {
+            yield* session.note(`${output.accountId}:${output.servicePrincipal}`);
+            return output;
+        }),
+        delete: Effect.fn(function* ({ output }) {
+            if (!(yield* readDelegatedAdministrator({
+                accountId: output.accountId,
+                servicePrincipal: output.servicePrincipal,
+            }))) {
+                return;
+            }
+            yield* retryOrganizations(organizations.deregisterDelegatedAdministrator({
+                AccountId: output.accountId,
+                ServicePrincipal: output.servicePrincipal,
+            }));
+        }),
+    };
+}));
+const readDelegatedAdministrator = Effect.fn(function* ({ accountId, servicePrincipal, }) {
+    const [delegatedServices, delegatedAdmins] = yield* Effect.all([
+        retryOrganizations(collectPages((NextToken) => organizations.listDelegatedServicesForAccount({
+            AccountId: accountId,
+            NextToken,
+        }), (page) => page.DelegatedServices)),
+        retryOrganizations(collectPages((NextToken) => organizations.listDelegatedAdministrators({
+            ServicePrincipal: servicePrincipal,
+            NextToken,
+        }), (page) => page.DelegatedAdministrators)),
+    ]);
+    const service = delegatedServices.find((candidate) => candidate.ServicePrincipal === servicePrincipal);
+    const account = delegatedAdmins.find((candidate) => candidate.Id === accountId);
+    return service && account
+        ? {
+            accountId,
+            accountArn: account.Arn,
+            accountName: account.Name,
+            accountEmail: account.Email,
+            servicePrincipal,
+            delegationEnabledDate: service.DelegationEnabledDate ?? account.DelegationEnabledDate,
+        }
+        : undefined;
+});
+//# sourceMappingURL=DelegatedAdministrator.js.map

package/lib/AWS/Organizations/DelegatedAdministrator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DelegatedAdministrator.js","sourceRoot":"","sources":["../../../src/AWS/Organizations/DelegatedAdministrator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,aAAa,MAAM,oCAAoC,CAAC;AACpE,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AA4B/D;;GAEG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,QAAQ,CAC5C,0CAA0C,CAC3C,CAAC;AAEF,MAAM,CAAC,MAAM,8BAA8B,GAAG,GAAG,EAAE,CACjD,QAAQ,CAAC,MAAM,CACb,sBAAsB,EACtB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO;QACL,OAAO,EAAE,CAAC,WAAW,EAAE,kBAAkB,CAAC;QAC1C,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;YACvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO;YAC9B,IACE,IAAI,EAAE,SAAS,KAAK,IAAI,CAAC,SAAS;gBAClC,IAAI,EAAE,gBAAgB,KAAK,IAAI,CAAC,gBAAgB,EAChD,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;QACH,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;YACzC,OAAO,KAAK,CAAC,CAAC,0BAA0B,CAAC;gBACvC,SAAS,EAAE,MAAM,EAAE,SAAS,IAAI,IAAK,CAAC,SAAS;gBAC/C,gBAAgB,EACd,MAAM,EAAE,gBAAgB,IAAI,IAAK,CAAC,gBAAgB;aACrD,CAAC,CAAC;QACL,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;YAC5C,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBAC/C,KAAK,CAAC,CAAC,kBAAkB,CACvB,aAAa;qBACV,8BAA8B,CAAC;oBAC9B,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;iBACxC,CAAC;qBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,mCAAmC,EACnC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAClB,CACF,CACJ,CAAC;YACJ,CAAC;YAED,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAC;YACtD,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CACP,4BAA4B,IAAI,CAAC,SAAS,UAAU,IAAI,CAAC,gBAAgB,0BAA0B,CACpG,CACF,CAAC;YACJ,CAAC;YAED,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC;YACpE,OAAO,KAAK,CAAC;QACf,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;YAC9C,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC;YACtE,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;YACrC,IACE,CAAC,CAAC,KAAK,CAAC,CAAC,0BAA0B,CAAC;gBAClC,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;aAC1C,CAAC,CAAC,EACH,CAAC;gBACD,OAAO;YACT,CAAC;YAED,KAAK,CAAC,CAAC,kBAAkB,CACvB,aAAa,CAAC,gCAAgC,CAAC;gBAC7C,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;aAC1C,CAAC,CACH,CAAC;QACJ,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC;AAEJ,MAAM,0BAA0B,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EACtD,SAAS,EACT,gBAAgB,GACY;IAC5B,MAAM,CAAC,iBAAiB,EAAE,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;QAC7D,kBAAkB,CAChB,YAAY,CACV,CAAC,SAAS,EAAE,EAAE,CACZ,aAAa,CAAC,+BAA+B,CAAC;YAC5C,SAAS,EAAE,SAAS;YACpB,SAAS;SACV,CAAC,EACJ,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,iBAAiB,CACjC,CACF;QACD,kBAAkB,CAChB,YAAY,CACV,CAAC,SAAS,EAAE,EAAE,CACZ,aAAa,CAAC,2BAA2B,CAAC;YACxC,gBAAgB,EAAE,gBAAgB;YAClC,SAAS;SACV,CAAC,EACJ,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,uBAAuB,CACvC,CACF;KACF,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CACpC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,gBAAgB,KAAK,gBAAgB,CAC/D,CAAC;IACF,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAClC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,SAAS,CAC1C,CAAC;IAEF,OAAO,OAAO,IAAI,OAAO;QACvB,CAAC,CAAE;YACC,SAAS;YACT,UAAU,EAAE,OAAO,CAAC,GAAG;YACvB,WAAW,EAAE,OAAO,CAAC,IAAI;YACzB,YAAY,EAAE,OAAO,CAAC,KAAK;YAC3B,gBAAgB;YAChB,qBAAqB,EACnB,OAAO,CAAC,qBAAqB,IAAI,OAAO,CAAC,qBAAqB;SACjB;QACnD,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC,CAAC,CAAC"}

package/lib/AWS/Organizations/Organization.d.ts

@@ -0,0 +1,41 @@
+import * as organizations from "@distilled.cloud/aws/organizations";
+import * as Provider from "../../Provider.ts";
+import { Resource } from "../../Resource.ts";
+import type { Providers } from "../Providers.ts";
+export type OrganizationId = string;
+export type OrganizationArn = string;
+export interface OrganizationProps {
+    /**
+     * Organization feature set.
+     * `ALL` unlocks the full AWS Organizations feature set.
+     * @default "ALL"
+     */
+    featureSet?: organizations.OrganizationFeatureSet;
+}
+export interface Organization extends Resource<"AWS.Organizations.Organization", OrganizationProps, {
+    organizationId: OrganizationId;
+    organizationArn: OrganizationArn;
+    featureSet: organizations.OrganizationFeatureSet | undefined;
+    managementAccountArn: string | undefined;
+    managementAccountId: string | undefined;
+    managementAccountEmail: organizations.Organization["MasterAccountEmail"] | undefined;
+    availablePolicyTypes: organizations.PolicyTypeSummary[];
+}, never, Providers> {
+}
+/**
+ * The AWS Organization for the current management account.
+ *
+ * This is a singleton-style resource. If an organization already exists,
+ * Alchemy adopts and reconciles it instead of creating a second one.
+ *
+ * @section Creating An Organization
+ * @example Full Features Organization
+ * ```typescript
+ * const organization = yield* Organization("Org", {
+ *   featureSet: "ALL",
+ * });
+ * ```
+ */
+export declare const Organization: import("../../Resource.ts").ResourceClass<Organization>;
+export declare const OrganizationProvider: () => import("effect/Layer").Layer<Provider.Provider<Organization>, never, import("effect/unstable/http/HttpClient").HttpClient | import("@distilled.cloud/aws/Region").Region | import("@distilled.cloud/aws/Credentials").Credentials>;
+//# sourceMappingURL=Organization.d.ts.map

package/lib/AWS/Organizations/Organization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Organization.d.ts","sourceRoot":"","sources":["../../../src/AWS/Organizations/Organization.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,aAAa,MAAM,oCAAoC,CAAC;AAEpE,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAGjD,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC;AACpC,MAAM,MAAM,eAAe,GAAG,MAAM,CAAC;AAErC,MAAM,WAAW,iBAAiB;IAChC;;;;OAIG;IACH,UAAU,CAAC,EAAE,aAAa,CAAC,sBAAsB,CAAC;CACnD;AAED,MAAM,WAAW,YAAa,SAAQ,QAAQ,CAC5C,gCAAgC,EAChC,iBAAiB,EACjB;IACE,cAAc,EAAE,cAAc,CAAC;IAC/B,eAAe,EAAE,eAAe,CAAC;IACjC,UAAU,EAAE,aAAa,CAAC,sBAAsB,GAAG,SAAS,CAAC;IAC7D,oBAAoB,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,mBAAmB,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,sBAAsB,EAClB,aAAa,CAAC,YAAY,CAAC,oBAAoB,CAAC,GAChD,SAAS,CAAC;IACd,oBAAoB,EAAE,aAAa,CAAC,iBAAiB,EAAE,CAAC;CACzD,EACD,KAAK,EACL,SAAS,CACV;CAAG;AAEJ;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,YAAY,yDAExB,CAAC;AAEF,eAAO,MAAM,oBAAoB,0OAqE9B,CAAC"}

package/lib/AWS/Organizations/Organization.js

@@ -0,0 +1,91 @@
+import * as organizations from "@distilled.cloud/aws/organizations";
+import * as Effect from "effect/Effect";
+import * as Provider from "../../Provider.js";
+import { Resource } from "../../Resource.js";
+import { retryOrganizations } from "./common.js";
+/**
+ * The AWS Organization for the current management account.
+ *
+ * This is a singleton-style resource. If an organization already exists,
+ * Alchemy adopts and reconciles it instead of creating a second one.
+ *
+ * @section Creating An Organization
+ * @example Full Features Organization
+ * ```typescript
+ * const organization = yield* Organization("Org", {
+ *   featureSet: "ALL",
+ * });
+ * ```
+ */
+export const Organization = Resource("AWS.Organizations.Organization");
+export const OrganizationProvider = () => Provider.effect(Organization, Effect.gen(function* () {
+    return {
+        stables: ["organizationId", "organizationArn", "managementAccountId"],
+        diff: Effect.fn(function* () { }),
+        read: Effect.fn(function* () {
+            const org = yield* readOrganization();
+            return org?.Id && org.Arn ? toAttrs(org) : undefined;
+        }),
+        create: Effect.fn(function* ({ news, session }) {
+            const desiredFeatureSet = news.featureSet ?? "ALL";
+            const existing = yield* readOrganization();
+            const org = existing
+                ? yield* ensureFeatureSet({
+                    desired: desiredFeatureSet,
+                    current: existing,
+                })
+                : yield* retryOrganizations(organizations.createOrganization({
+                    FeatureSet: desiredFeatureSet,
+                })).pipe(Effect.map((response) => response.Organization), Effect.catchTag("AlreadyInOrganizationException", () => readOrganization()));
+            if (!org?.Id || !org.Arn) {
+                return yield* Effect.fail(new Error("failed to resolve organization after create"));
+            }
+            yield* session.note(org.Arn);
+            return toAttrs(org);
+        }),
+        update: Effect.fn(function* ({ news, output, session }) {
+            const current = yield* readOrganization();
+            if (!current?.Id || !current.Arn) {
+                return yield* Effect.fail(new Error("organization not found during update"));
+            }
+            const updated = yield* ensureFeatureSet({
+                desired: news.featureSet,
+                current,
+            });
+            yield* session.note(output.organizationArn);
+            return toAttrs(updated);
+        }),
+        delete: Effect.fn(function* () {
+            yield* retryOrganizations(organizations
+                .deleteOrganization({})
+                .pipe(Effect.catchTag("AWSOrganizationsNotInUseException", () => Effect.void)));
+        }),
+    };
+}));
+const toAttrs = (org) => ({
+    organizationId: org.Id ?? "",
+    organizationArn: org.Arn ?? "",
+    featureSet: org.FeatureSet,
+    managementAccountArn: org.MasterAccountArn,
+    managementAccountId: org.MasterAccountId,
+    managementAccountEmail: org.MasterAccountEmail,
+    availablePolicyTypes: org.AvailablePolicyTypes ?? [],
+});
+const readOrganization = () => retryOrganizations(organizations.describeOrganization({}).pipe(Effect.map((response) => response.Organization), Effect.catchTag("AWSOrganizationsNotInUseException", () => Effect.succeed(undefined))));
+const ensureFeatureSet = Effect.fn(function* ({ desired, current, }) {
+    const desiredFeatureSet = desired ?? "ALL";
+    if (current.FeatureSet === desiredFeatureSet) {
+        return current;
+    }
+    if (desiredFeatureSet === "ALL" &&
+        current.FeatureSet === "CONSOLIDATED_BILLING") {
+        yield* retryOrganizations(organizations.enableAllFeatures({}));
+        const updated = yield* readOrganization();
+        if (updated?.FeatureSet === "ALL") {
+            return updated;
+        }
+        return yield* Effect.fail(new Error("Organization upgrade to ALL features requires handshake completion before deployment can converge"));
+    }
+    return yield* Effect.fail(new Error(`Organization feature set cannot be changed from '${current.FeatureSet}' to '${desiredFeatureSet}'`));
+});
+//# sourceMappingURL=Organization.js.map

package/lib/AWS/Organizations/Organization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Organization.js","sourceRoot":"","sources":["../../../src/AWS/Organizations/Organization.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,aAAa,MAAM,oCAAoC,CAAC;AACpE,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAgCjD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,QAAQ,CAClC,gCAAgC,CACjC,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,EAAE,CACvC,QAAQ,CAAC,MAAM,CACb,YAAY,EACZ,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO;QACL,OAAO,EAAE,CAAC,gBAAgB,EAAE,iBAAiB,EAAE,qBAAqB,CAAC;QACrE,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAK,CAAC,CAAC;QAChC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC;YACvB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,gBAAgB,EAAE,CAAC;YACtC,OAAO,GAAG,EAAE,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACvD,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;YAC5C,MAAM,iBAAiB,GAAG,IAAI,CAAC,UAAU,IAAI,KAAK,CAAC;YACnD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,gBAAgB,EAAE,CAAC;YAC3C,MAAM,GAAG,GAAG,QAAQ;gBAClB,CAAC,CAAC,KAAK,CAAC,CAAC,gBAAgB,CAAC;oBACtB,OAAO,EAAE,iBAAiB;oBAC1B,OAAO,EAAE,QAAQ;iBAClB,CAAC;gBACJ,CAAC,CAAC,KAAK,CAAC,CAAC,kBAAkB,CACvB,aAAa,CAAC,kBAAkB,CAAC;oBAC/B,UAAU,EAAE,iBAAiB;iBAC9B,CAAC,CACH,CAAC,IAAI,CACJ,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,EAC/C,MAAM,CAAC,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE,CACrD,gBAAgB,EAAE,CACnB,CACF,CAAC;YAEN,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;gBACzB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CAAC,6CAA6C,CAAC,CACzD,CAAC;YACJ,CAAC;YAED,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC7B,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;QACtB,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;YACpD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,gBAAgB,EAAE,CAAC;YAC1C,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;gBACjC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAClD,CAAC;YACJ,CAAC;YAED,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,gBAAgB,CAAC;gBACtC,OAAO,EAAE,IAAI,CAAC,UAAU;gBACxB,OAAO;aACR,CAAC,CAAC;YAEH,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YAC5C,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC;QAC1B,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC;YACzB,KAAK,CAAC,CAAC,kBAAkB,CACvB,aAAa;iBACV,kBAAkB,CAAC,EAAE,CAAC;iBACtB,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,mCAAmC,EACnC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAClB,CACF,CACJ,CAAC;QACJ,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC;AAEJ,MAAM,OAAO,GAAG,CACd,GAA+B,EACH,EAAE,CAAC,CAAC;IAChC,cAAc,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE;IAC5B,eAAe,EAAE,GAAG,CAAC,GAAG,IAAI,EAAE;IAC9B,UAAU,EAAE,GAAG,CAAC,UAAU;IAC1B,oBAAoB,EAAE,GAAG,CAAC,gBAAgB;IAC1C,mBAAmB,EAAE,GAAG,CAAC,eAAe;IACxC,sBAAsB,EAAE,GAAG,CAAC,kBAAkB;IAC9C,oBAAoB,EAAE,GAAG,CAAC,oBAAoB,IAAI,EAAE;CACrD,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,GAAG,EAAE,CAC5B,kBAAkB,CAChB,aAAa,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,IAAI,CACzC,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,EAC/C,MAAM,CAAC,QAAQ,CAAC,mCAAmC,EAAE,GAAG,EAAE,CACxD,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAC1B,CACF,CACF,CAAC;AAEJ,MAAM,gBAAgB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAC5C,OAAO,EACP,OAAO,GAIR;IACC,MAAM,iBAAiB,GAAG,OAAO,IAAI,KAAK,CAAC;IAC3C,IAAI,OAAO,CAAC,UAAU,KAAK,iBAAiB,EAAE,CAAC;QAC7C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IACE,iBAAiB,KAAK,KAAK;QAC3B,OAAO,CAAC,UAAU,KAAK,sBAAsB,EAC7C,CAAC;QACD,KAAK,CAAC,CAAC,kBAAkB,CAAC,aAAa,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC;QAE/D,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,gBAAgB,EAAE,CAAC;QAC1C,IAAI,OAAO,EAAE,UAAU,KAAK,KAAK,EAAE,CAAC;YAClC,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CACP,mGAAmG,CACpG,CACF,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CACP,oDAAoD,OAAO,CAAC,UAAU,SAAS,iBAAiB,GAAG,CACpG,CACF,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/lib/AWS/Organizations/OrganizationResourcePolicy.d.ts

@@ -0,0 +1,22 @@
+import * as Provider from "../../Provider.ts";
+import { Resource } from "../../Resource.ts";
+import type { Providers } from "../Providers.ts";
+import type { PolicyDocument } from "../IAM/Policy.ts";
+export interface OrganizationResourcePolicyProps {
+    /**
+     * Typed resource policy document for the organization.
+     */
+    document: PolicyDocument;
+}
+export interface OrganizationResourcePolicy extends Resource<"AWS.Organizations.OrganizationResourcePolicy", OrganizationResourcePolicyProps, {
+    resourcePolicyId: string;
+    resourcePolicyArn: string;
+    document: PolicyDocument;
+}, never, Providers> {
+}
+/**
+ * The singleton AWS Organizations resource policy.
+ */
+export declare const OrganizationResourcePolicy: import("../../Resource.ts").ResourceClass<OrganizationResourcePolicy>;
+export declare const OrganizationResourcePolicyProvider: () => import("effect/Layer").Layer<Provider.Provider<OrganizationResourcePolicy>, never, import("effect/unstable/http/HttpClient").HttpClient | import("@distilled.cloud/aws/Region").Region | import("@distilled.cloud/aws/Credentials").Credentials>;
+//# sourceMappingURL=OrganizationResourcePolicy.d.ts.map

package/lib/AWS/Organizations/OrganizationResourcePolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OrganizationResourcePolicy.d.ts","sourceRoot":"","sources":["../../../src/AWS/Organizations/OrganizationResourcePolicy.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAGvD,MAAM,WAAW,+BAA+B;IAC9C;;OAEG;IACH,QAAQ,EAAE,cAAc,CAAC;CAC1B;AAED,MAAM,WAAW,0BAA2B,SAAQ,QAAQ,CAC1D,8CAA8C,EAC9C,+BAA+B,EAC/B;IACE,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE,cAAc,CAAC;CAC1B,EACD,KAAK,EACL,SAAS,CACV;CAAG;AAEJ;;GAEG;AACH,eAAO,MAAM,0BAA0B,uEAEtC,CAAC;AAsBF,eAAO,MAAM,kCAAkC,wPA0D5C,CAAC"}

package/lib/AWS/Organizations/OrganizationResourcePolicy.js

@@ -0,0 +1,56 @@
+import * as organizations from "@distilled.cloud/aws/organizations";
+import * as Effect from "effect/Effect";
+import * as Provider from "../../Provider.js";
+import { Resource } from "../../Resource.js";
+import { retryOrganizations } from "./common.js";
+/**
+ * The singleton AWS Organizations resource policy.
+ */
+export const OrganizationResourcePolicy = Resource("AWS.Organizations.OrganizationResourcePolicy");
+const readResourcePolicy = () => retryOrganizations(organizations.describeResourcePolicy({}).pipe(Effect.map((response) => response.ResourcePolicy), Effect.catchTag("ResourcePolicyNotFoundException", () => Effect.succeed(undefined)), Effect.map((policy) => {
+    const summary = policy?.ResourcePolicySummary;
+    return summary?.Id && summary.Arn
+        ? {
+            resourcePolicyId: summary.Id,
+            resourcePolicyArn: summary.Arn,
+            document: JSON.parse(policy?.Content ?? "{}"),
+        }
+        : undefined;
+})));
+export const OrganizationResourcePolicyProvider = () => Provider.effect(OrganizationResourcePolicy, Effect.gen(function* () {
+    return {
+        stables: ["resourcePolicyId", "resourcePolicyArn"],
+        diff: Effect.fn(function* () { }),
+        read: Effect.fn(function* () {
+            return yield* readResourcePolicy();
+        }),
+        create: Effect.fn(function* ({ news, session }) {
+            yield* retryOrganizations(organizations.putResourcePolicy({
+                Content: JSON.stringify(news.document),
+            }));
+            const state = yield* readResourcePolicy();
+            if (!state) {
+                return yield* Effect.fail(new Error("organization resource policy not found after create"));
+            }
+            yield* session.note(state.resourcePolicyArn);
+            return state;
+        }),
+        update: Effect.fn(function* ({ news, output, session }) {
+            yield* retryOrganizations(organizations.putResourcePolicy({
+                Content: JSON.stringify(news.document),
+            }));
+            const state = yield* readResourcePolicy();
+            if (!state) {
+                return yield* Effect.fail(new Error("organization resource policy not found after update"));
+            }
+            yield* session.note(output.resourcePolicyArn);
+            return state;
+        }),
+        delete: Effect.fn(function* () {
+            yield* retryOrganizations(organizations
+                .deleteResourcePolicy({})
+                .pipe(Effect.catchTag("ResourcePolicyNotFoundException", () => Effect.void)));
+        }),
+    };
+}));
+//# sourceMappingURL=OrganizationResourcePolicy.js.map

package/lib/AWS/Organizations/OrganizationResourcePolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OrganizationResourcePolicy.js","sourceRoot":"","sources":["../../../src/AWS/Organizations/OrganizationResourcePolicy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,aAAa,MAAM,oCAAoC,CAAC;AACpE,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAG7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAqBjD;;GAEG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,QAAQ,CAChD,8CAA8C,CAC/C,CAAC;AAEF,MAAM,kBAAkB,GAAG,GAAG,EAAE,CAC9B,kBAAkB,CAChB,aAAa,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC,IAAI,CAC3C,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC,EACjD,MAAM,CAAC,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE,CACtD,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAC1B,EACD,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;IACpB,MAAM,OAAO,GAAG,MAAM,EAAE,qBAAqB,CAAC;IAC9C,OAAO,OAAO,EAAE,EAAE,IAAI,OAAO,CAAC,GAAG;QAC/B,CAAC,CAAE;YACC,gBAAgB,EAAE,OAAO,CAAC,EAAE;YAC5B,iBAAiB,EAAE,OAAO,CAAC,GAAG;YAC9B,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,IAAI,IAAI,CAAmB;SACZ;QACvD,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC,CAAC,CACH,CACF,CAAC;AAEJ,MAAM,CAAC,MAAM,kCAAkC,GAAG,GAAG,EAAE,CACrD,QAAQ,CAAC,MAAM,CACb,0BAA0B,EAC1B,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO;QACL,OAAO,EAAE,CAAC,kBAAkB,EAAE,mBAAmB,CAAC;QAClD,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAK,CAAC,CAAC;QAChC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC;YACvB,OAAO,KAAK,CAAC,CAAC,kBAAkB,EAAE,CAAC;QACrC,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;YAC5C,KAAK,CAAC,CAAC,kBAAkB,CACvB,aAAa,CAAC,iBAAiB,CAAC;gBAC9B,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC;aACvC,CAAC,CACH,CAAC;YAEF,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,kBAAkB,EAAE,CAAC;YAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CAAC,qDAAqD,CAAC,CACjE,CAAC;YACJ,CAAC;YAED,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;YAC7C,OAAO,KAAK,CAAC;QACf,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;YACpD,KAAK,CAAC,CAAC,kBAAkB,CACvB,aAAa,CAAC,iBAAiB,CAAC;gBAC9B,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC;aACvC,CAAC,CACH,CAAC;YAEF,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,kBAAkB,EAAE,CAAC;YAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CAAC,qDAAqD,CAAC,CACjE,CAAC;YACJ,CAAC;YAED,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;YAC9C,OAAO,KAAK,CAAC;QACf,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC;YACzB,KAAK,CAAC,CAAC,kBAAkB,CACvB,aAAa;iBACV,oBAAoB,CAAC,EAAE,CAAC;iBACxB,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,iCAAiC,EACjC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAClB,CACF,CACJ,CAAC;QACJ,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}

package/lib/AWS/Organizations/OrganizationalUnit.d.ts

@@ -0,0 +1,42 @@
+import * as Provider from "../../Provider.ts";
+import { Resource } from "../../Resource.ts";
+import type { Providers } from "../Providers.ts";
+export type OrganizationalUnitId = string;
+export type OrganizationalUnitArn = string;
+export interface OrganizationalUnitProps {
+    /**
+     * Parent root or OU ID.
+     */
+    parentId: string;
+    /**
+     * OU name. If omitted, Alchemy generates one.
+     */
+    name?: string;
+    /**
+     * Optional tags applied to the OU.
+     */
+    tags?: Record<string, string>;
+}
+export interface OrganizationalUnit extends Resource<"AWS.Organizations.OrganizationalUnit", OrganizationalUnitProps, {
+    ouId: OrganizationalUnitId;
+    ouArn: OrganizationalUnitArn;
+    name: string;
+    parentId: string | undefined;
+    tags: Record<string, string>;
+}, never, Providers> {
+}
+/**
+ * An AWS Organizations organizational unit.
+ *
+ * @section Creating OUs
+ * @example Nested OU
+ * ```typescript
+ * const workloads = yield* OrganizationalUnit("Workloads", {
+ *   parentId: root.rootId,
+ *   name: "workloads",
+ * });
+ * ```
+ */
+export declare const OrganizationalUnit: import("../../Resource.ts").ResourceClass<OrganizationalUnit>;
+export declare const OrganizationalUnitProvider: () => import("effect/Layer").Layer<Provider.Provider<OrganizationalUnit>, never, import("effect/unstable/http/HttpClient").HttpClient | import("../../Stage.ts").Stage | import("../../Stack.ts").Stack | import("@distilled.cloud/aws/Region").Region | import("@distilled.cloud/aws/Credentials").Credentials>;
+//# sourceMappingURL=OrganizationalUnit.d.ts.map

package/lib/AWS/Organizations/OrganizationalUnit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OrganizationalUnit.d.ts","sourceRoot":"","sources":["../../../src/AWS/Organizations/OrganizationalUnit.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAUjD,MAAM,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAC1C,MAAM,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAE3C,MAAM,WAAW,uBAAuB;IACtC;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,kBAAmB,SAAQ,QAAQ,CAClD,sCAAsC,EACtC,uBAAuB,EACvB;IACE,IAAI,EAAE,oBAAoB,CAAC;IAC3B,KAAK,EAAE,qBAAqB,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B,EACD,KAAK,EACL,SAAS,CACV;CAAG;AAEJ;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,kBAAkB,+DAE9B,CAAC;AAEF,eAAO,MAAM,0BAA0B,kTAwIpC,CAAC"}