aws-lambda-api-tools 0.1.28 → 0.1.29

package/bin/cli.js

@@ -1,2 +1,2 @@
 #!/usr/bin/env node
-"use strict";var o=require("commander"),a=require("path");o.program.name("aws-lambda-api-tools").description("CLI tools for AWS Lambda and API Gateway").version("0.1.5");o.program.command("create-gha-iam-stack").description("Create IAM stack for GitHub Actions OIDC authentication").option("--repo <owner/repo>","GitHub repository (owner/repo)",t,[]).option("--policy <name>","AWS managed policy name","AdministratorAccess").action(async r=>{r.repo.length===0&&(console.error("Error: at least one --repo argument is required"),process.exit(1)),process.argv=[process.argv[0],process.argv[1],...r.repo.map(e=>`--repo=${e}`),`--policy=${r.policy}`],require((0,a.join)(__dirname,"bootstrap-iam.js"))});function t(r,e){return e.concat([r])}o.program.parse();
+"use strict";var a=require("commander"),o=require("path");a.program.name("aws-lambda-api-tools").description("CLI tools for AWS Lambda and API Gateway").version("0.1.5");a.program.command("create-gha-iam-stack").description("Create IAM stack for GitHub Actions OIDC authentication").option("--repo <owner/repo>","GitHub repository to add (owner/repo)",m,[]).option("--remove-repo <owner/repo>","GitHub repository to remove (owner/repo)",s,[]).option("--policy <name>","AWS managed policy name","AdministratorAccess").option("--mode <mode>","Operation mode: merge (add new repos), replace (overwrite all), list (show current repos)","replace").option("--yes","Skip confirmation prompt",!1).option("--stack-name <name>","CloudFormation stack name","GithubActionsIam").option("--role-name <name>","IAM role name","GithubActionsRole").action(async e=>{if(e.mode==="list"){process.argv=[process.argv[0],process.argv[1],"--mode=list",`--stack-name=${e.stackName}`,`--role-name=${e.roleName}`],require((0,o.join)(__dirname,"bootstrap-iam.js"));return}if(e.repo.length>0&&e.removeRepo.length>0){process.argv=[process.argv[0],process.argv[1],...e.repo.map(r=>`--repo=${r}`),...e.removeRepo.map(r=>`--remove-repo=${r}`),`--policy=${e.policy}`,"--mode=mixed",`--stack-name=${e.stackName}`,`--role-name=${e.roleName}`,...e.yes?["--yes"]:[]],require((0,o.join)(__dirname,"bootstrap-iam.js"));return}if(e.removeRepo.length>0){process.argv=[process.argv[0],process.argv[1],...e.removeRepo.map(r=>`--remove-repo=${r}`),`--policy=${e.policy}`,"--mode=remove",`--stack-name=${e.stackName}`,`--role-name=${e.roleName}`,...e.yes?["--yes"]:[]],require((0,o.join)(__dirname,"bootstrap-iam.js"));return}e.repo.length===0&&(console.error("Error: at least one --repo argument is required (or use --mode=list to view current repos)"),process.exit(1)),["merge","replace"].includes(e.mode)||(console.error("Error: --mode must be one of: merge, replace, list"),process.exit(1)),process.argv=[process.argv[0],process.argv[1],...e.repo.map(r=>`--repo=${r}`),`--policy=${e.policy}`,`--mode=${e.mode}`,`--stack-name=${e.stackName}`,`--role-name=${e.roleName}`,...e.yes?["--yes"]:[]],require((0,o.join)(__dirname,"bootstrap-iam.js"))});function m(e,r){return r.concat([e])}function s(e,r){return r.concat([e])}a.program.parse();

package/dist/bin/bootstrap-iam.js

@@ -1,24 +1,98 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 const aws_cdk_lib_1 = require("aws-cdk-lib");
 const aws_iam_1 = require("aws-cdk-lib/aws-iam");
 const child_process_1 = require("child_process");
 const client_iam_1 = require("@aws-sdk/client-iam");
-console.log('Starting GitHub OIDC IAM setup...');
+const readline = __importStar(require("readline"));
+console.log('🚀 Starting GitHub OIDC IAM setup...\n');
 // Parse command line arguments
 const args = process.argv.slice(2);
 const repoArgs = args.filter(t => t.startsWith("--repo=")).map(t => t.split("=")[1]);
+const removeRepoArgs = args.filter(t => t.startsWith("--remove-repo=")).map(t => t.split("=")[1]);
 const policyArg = args.find(t => t.startsWith("--policy="));
-if (repoArgs.length === 0) {
-    console.error("Error: at least one --repo argument is required");
-    console.error("Usage: create-gha-iam-stack --repo=owner/repo-name [--repo=owner/another-repo] [--policy=PolicyName]");
-    console.error("Example: create-gha-iam-stack --repo=myorg/my-repo --repo=myorg/another-repo --policy=AdministratorAccess");
+const modeArg = args.find(t => t.startsWith("--mode="));
+const yesArg = args.find(t => t === "--yes");
+const stackNameArg = args.find(t => t.startsWith("--stack-name="));
+const roleNameArg = args.find(t => t.startsWith("--role-name="));
+const mode = modeArg ? modeArg.split("=")[1] : 'replace';
+const stackName = stackNameArg ? stackNameArg.split("=")[1] : 'GithubActionsIam';
+const roleName = roleNameArg ? roleNameArg.split("=")[1] : 'GithubActionsRole';
+// List mode doesn't require repos
+if (mode !== 'list' && repoArgs.length === 0 && removeRepoArgs.length === 0) {
+    console.error("❌ Error: at least one --repo or --remove-repo argument is required");
+    console.error("Usage: create-gha-iam-stack --repo=owner/repo-name [--repo=owner/another-repo] [--policy=PolicyName] [--mode=merge|replace|list]");
+    console.error("       create-gha-iam-stack --remove-repo=owner/repo-name [--remove-repo=owner/another-repo]");
+    console.error("       create-gha-iam-stack --repo=owner/new-repo --remove-repo=owner/old-repo");
+    console.error("       create-gha-iam-stack --mode=list");
+    console.error("Example: create-gha-iam-stack --repo=myorg/my-repo --repo=myorg/another-repo --policy=AdministratorAccess --mode=merge");
+    console.error("Example: create-gha-iam-stack --remove-repo=myorg/old-repo");
+    console.error("Example: create-gha-iam-stack --repo=myorg/new-repo --remove-repo=myorg/old-repo");
+    console.error("Example: create-gha-iam-stack --mode=list");
     process.exit(1);
 }
-const repoNames = repoArgs;
+const requestedRepos = repoArgs;
+const reposToRemove = removeRepoArgs;
 const policyName = policyArg ? policyArg.split("=")[1] : "AdministratorAccess";
-console.log(`Configuring for repositories: ${repoNames.join(", ")}`);
-console.log(`Using policy: ${policyName}`);
+const skipConfirmation = yesArg !== undefined;
+// Utility function to prompt for confirmation
+function promptConfirmation(message) {
+    if (skipConfirmation) {
+        return Promise.resolve(true);
+    }
+    const rl = readline.createInterface({
+        input: process.stdin,
+        output: process.stdout
+    });
+    return new Promise((resolve) => {
+        rl.question(`${message} (y/n): `, (answer) => {
+            rl.close();
+            resolve(answer.toLowerCase() === 'y' || answer.toLowerCase() === 'yes');
+        });
+    });
+}
+// Extract repos from existing trust policy
+function extractReposFromTrustPolicy(trustPolicy) {
+    try {
+        const statements = trustPolicy.Statement || [];
+        for (const statement of statements) {
+            if (statement.Condition?.StringLike?.['token.actions.githubusercontent.com:sub']) {
+                const subs = statement.Condition.StringLike['token.actions.githubusercontent.com:sub'];
+                const subArray = Array.isArray(subs) ? subs : [subs];
+                return subArray
+                    .map((sub) => sub.replace('repo:', '').replace(':*', ''))
+                    .filter((repo) => repo.length > 0);
+            }
+        }
+    }
+    catch (error) {
+        console.warn('⚠️  Could not parse trust policy:', error);
+    }
+    return [];
+}
 // Check if GitHub OIDC provider already exists
 async function checkOidcProviderExists() {
     try {
@@ -31,7 +105,7 @@ async function checkOidcProviderExists() {
             return true;
         }
         else {
-            console.log('ℹ️  No existing GitHub OIDC provider found');
+            console.log('ℹ️  No existing GitHub OIDC provider found - will create new one');
             return false;
         }
     }
@@ -40,17 +114,98 @@ async function checkOidcProviderExists() {
         return false;
     }
 }
+// Check for existing IAM role and get current repos
+async function getExistingRepos() {
+    try {
+        const iamClient = new client_iam_1.IAMClient({ region: process.env.AWS_REGION || 'us-east-1' });
+        const command = new client_iam_1.GetRoleCommand({ RoleName: roleName });
+        const response = await iamClient.send(command);
+        if (response.Role?.AssumeRolePolicyDocument) {
+            const trustPolicyJson = decodeURIComponent(response.Role.AssumeRolePolicyDocument);
+            const trustPolicy = JSON.parse(trustPolicyJson);
+            const existingRepos = extractReposFromTrustPolicy(trustPolicy);
+            if (existingRepos.length > 0) {
+                console.log(`\n✅ Found existing IAM role: ${roleName}`);
+                console.log(`📋 Current repositories (${existingRepos.length}):`);
+                existingRepos.forEach(repo => console.log(`   - ${repo}`));
+                return existingRepos;
+            }
+        }
+    }
+    catch (error) {
+        if (error instanceof client_iam_1.NoSuchEntityException || error.name === 'NoSuchEntity') {
+            console.log(`\nℹ️  No existing IAM role found - will create new role: ${roleName}`);
+        }
+        else {
+            console.warn('⚠️  Could not check for existing role:', error);
+        }
+    }
+    return [];
+}
+// Calculate final repos list based on mode
+function calculateFinalRepos(existing, requested, toRemove, mode) {
+    const existingSet = new Set(existing);
+    const requestedSet = new Set(requested);
+    const toRemoveSet = new Set(toRemove);
+    switch (mode) {
+        case 'merge':
+            return Array.from(new Set([...existing, ...requested])).sort();
+        case 'remove':
+            return existing.filter(repo => !requestedSet.has(repo)).sort();
+        case 'mixed':
+            // Start with existing, remove specified repos, then add new ones
+            const afterRemoval = existing.filter(repo => !toRemoveSet.has(repo));
+            return Array.from(new Set([...afterRemoval, ...requested])).sort();
+        case 'replace':
+        default:
+            return requested.sort();
+    }
+}
+// Show diff of changes
+function showDiff(existing, final, requested, mode) {
+    const existingSet = new Set(existing);
+    const finalSet = new Set(final);
+    const requestedSet = new Set(requested);
+    const added = final.filter(repo => !existingSet.has(repo));
+    const removed = existing.filter(repo => !finalSet.has(repo));
+    const unchanged = final.filter(repo => existingSet.has(repo));
+    console.log(`\n📊 Operation: ${mode.toUpperCase()}`);
+    console.log(`\n📝 Summary:`);
+    console.log(`   Total repositories: ${existing.length} → ${final.length}`);
+    if (added.length > 0) {
+        console.log(`\n✨ Adding (${added.length}):`);
+        added.forEach(repo => console.log(`   + ${repo}`));
+    }
+    if (removed.length > 0) {
+        console.log(`\n🗑️  Removing (${removed.length}):`);
+        removed.forEach(repo => console.log(`   - ${repo}`));
+    }
+    if (unchanged.length > 0) {
+        console.log(`\n✓  Unchanged (${unchanged.length}):`);
+        unchanged.forEach(repo => console.log(`     ${repo}`));
+    }
+    // Show which requested repos already exist (for merge/mixed modes)
+    if ((mode === 'merge' || mode === 'mixed') && requestedSet.size > added.length) {
+        const alreadyExists = requested.filter(repo => existingSet.has(repo));
+        if (alreadyExists.length > 0) {
+            console.log(`\nℹ️  Already exist (${alreadyExists.length}):`);
+            alreadyExists.forEach(repo => console.log(`     ${repo}`));
+        }
+    }
+    console.log(`\n📦 Final repository list (${final.length}):`);
+    final.forEach(repo => console.log(`   • ${repo}`));
+}
 const app = new aws_cdk_lib_1.App();
 class GithubActionsIamStack extends aws_cdk_lib_1.Stack {
     constructor(scope, id, props) {
         super(scope, id, props);
-        console.log('Setting up OIDC Provider...');
+        const { finalRepos = [], createOidcProvider = false } = props || {};
         // Reference existing OIDC provider or create new one
         const accountId = aws_cdk_lib_1.Stack.of(this).account;
         const githubOidcProviderArn = `arn:aws:iam::${accountId}:oidc-provider/token.actions.githubusercontent.com`;
         // Create OIDC provider only if it doesn't exist
-        if (props?.createOidcProvider) {
-            console.log('Creating new OIDC Provider...');
+        if (createOidcProvider) {
+            console.log('\n🔐 Creating new OIDC Provider...');
             new aws_iam_1.CfnOIDCProvider(this, "GithubOidcProvider", {
                 url: "https://token.actions.githubusercontent.com",
                 clientIdList: ["sts.amazonaws.com"],
@@ -60,17 +215,15 @@ class GithubActionsIamStack extends aws_cdk_lib_1.Stack {
                 ]
             });
         }
-        else {
-            console.log('Using existing OIDC Provider');
-        }
-        console.log('Creating IAM Role...');
+        console.log(`\n👤 Creating/Updating IAM Role: ${roleName}...`);
         const deploymentRole = new aws_iam_1.Role(this, "GithubActionsRole", {
+            roleName: roleName,
             assumedBy: new aws_iam_1.WebIdentityPrincipal(githubOidcProviderArn, {
                 StringEquals: {
                     "token.actions.githubusercontent.com:aud": "sts.amazonaws.com"
                 },
                 StringLike: {
-                    "token.actions.githubusercontent.com:sub": repoNames.map(repo => `repo:${repo}:*`)
+                    "token.actions.githubusercontent.com:sub": finalRepos.map(repo => `repo:${repo}:*`)
                 }
             }),
             managedPolicies: [
@@ -81,28 +234,83 @@ class GithubActionsIamStack extends aws_cdk_lib_1.Stack {
             value: deploymentRole.roleArn,
             description: "ARN of role to use in GitHub Actions"
         });
+        new aws_cdk_lib_1.CfnOutput(this, "RoleName", {
+            value: deploymentRole.roleName,
+            description: "Name of the IAM role"
+        });
+        new aws_cdk_lib_1.CfnOutput(this, "PolicyName", {
+            value: policyName,
+            description: "AWS managed policy attached to the role"
+        });
+        new aws_cdk_lib_1.CfnOutput(this, "RepositoryCount", {
+            value: finalRepos.length.toString(),
+            description: "Number of repositories with access"
+        });
     }
 }
 // Main execution
 async function main() {
-    console.log('Checking for existing OIDC provider...');
+    // LIST MODE - Just show current repos and exit
+    if (mode === 'list') {
+        console.log(`📋 Stack: ${stackName}`);
+        console.log(`👤 Role: ${roleName}\n`);
+        const existingRepos = await getExistingRepos();
+        if (existingRepos.length === 0) {
+            console.log('ℹ️  No repositories found in trust policy (or role does not exist)\n');
+            process.exit(0);
+        }
+        console.log(`\n✅ Current repositories in trust policy (${existingRepos.length}):\n`);
+        existingRepos.forEach((repo, idx) => console.log(`   ${idx + 1}. ${repo}`));
+        console.log('');
+        process.exit(0);
+    }
+    // MODIFY MODE (merge/replace/remove/mixed)
+    if (requestedRepos.length > 0) {
+        console.log(`📋 Repositories to add (${requestedRepos.length}):`);
+        requestedRepos.forEach(repo => console.log(`   + ${repo}`));
+    }
+    if (reposToRemove.length > 0) {
+        console.log(`🗑️  Repositories to remove (${reposToRemove.length}):`);
+        reposToRemove.forEach(repo => console.log(`   - ${repo}`));
+    }
+    console.log(`🔑 Policy: ${policyName}`);
+    console.log(`🎯 Mode: ${mode}`);
+    // Check for existing setup
+    const existingRepos = await getExistingRepos();
     const oidcExists = await checkOidcProviderExists();
-    console.log('Creating CloudFormation stack...');
-    new GithubActionsIamStack(app, "GithubActionsIam", {
-        createOidcProvider: !oidcExists
+    // Calculate final repos list
+    const finalRepos = calculateFinalRepos(existingRepos, requestedRepos, reposToRemove, mode);
+    // Show diff
+    showDiff(existingRepos, finalRepos, requestedRepos, mode);
+    // Validation
+    if (finalRepos.length === 0) {
+        console.error('\n❌ Error: Final repository list is empty. Cannot proceed.');
+        process.exit(1);
+    }
+    // Prompt for confirmation
+    const confirmed = await promptConfirmation('\n❓ Do you want to proceed with these changes?');
+    if (!confirmed) {
+        console.log('\n❌ Operation cancelled by user');
+        process.exit(0);
+    }
+    console.log('\n✅ Confirmed - proceeding with deployment...');
+    // Create/update stack
+    new GithubActionsIamStack(app, stackName, {
+        createOidcProvider: !oidcExists,
+        finalRepos: finalRepos
     });
-    console.log('Synthesizing CloudFormation template...');
+    console.log('\n🔨 Synthesizing CloudFormation template...');
     const assembly = app.synth();
     // Execute the deployment
-    console.log('Starting deployment...');
+    console.log('\n🚀 Starting deployment...');
     try {
         const cdkCommand = [
             'cdk deploy',
-            'GithubActionsIam',
+            stackName,
             '--require-approval never',
             `--app "${assembly.directory}"`,
         ].join(' ');
-        console.log(`Executing: ${cdkCommand}`);
+        console.log(`\n💻 Executing: ${cdkCommand}\n`);
         (0, child_process_1.execSync)(cdkCommand, {
             stdio: 'inherit',
             env: {
@@ -110,16 +318,20 @@ async function main() {
                 AWS_REGION: process.env.AWS_REGION || 'us-east-1',
             }
         });
-        console.log('✅ Deployment completed successfully!');
+        console.log('\n✅ Deployment completed successfully!');
+        console.log('\n📋 Next steps:');
+        console.log('   1. Copy the Role ARN from the output above');
+        console.log('   2. Add it as a secret named \'AWS_ROLE_ARN\' in each repository');
+        console.log('   3. Verify the GitHub Actions workflows can assume the role\n');
     }
     catch (error) {
-        console.error('❌ Deployment failed:', error);
+        console.error('\n❌ Deployment failed:', error);
         process.exit(1);
     }
 }
 // Run the main function
 main().catch(error => {
-    console.error('❌ Setup failed:', error);
+    console.error('\n❌ Setup failed:', error);
     process.exit(1);
 });
 //# sourceMappingURL=bootstrap-iam.js.map

package/dist/bin/bootstrap-iam.js.map

@@ -1 +1 @@
-{"version":3,"file":"bootstrap-iam.js","sourceRoot":"","sources":["../../src/bin/bootstrap-iam.ts"],"names":[],"mappings":";;AAAA,6CAAgE;AAChE,iDAAwH;AACxH,iDAAyC;AACzC,oDAAmF;AAEnF,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;AAEjD,+BAA+B;AAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACrF,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC;AAE5D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE;IACzB,OAAO,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACjE,OAAO,CAAC,KAAK,CAAC,sGAAsG,CAAC,CAAC;IACtH,OAAO,CAAC,KAAK,CAAC,2GAA2G,CAAC,CAAC;IAC3H,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;CACjB;AAED,MAAM,SAAS,GAAG,QAAQ,CAAC;AAC3B,MAAM,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC;AAE/E,OAAO,CAAC,GAAG,CAAC,iCAAiC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACrE,OAAO,CAAC,GAAG,CAAC,iBAAiB,UAAU,EAAE,CAAC,CAAC;AAE3C,+CAA+C;AAC/C,KAAK,UAAU,uBAAuB;IACpC,IAAI;QACF,MAAM,SAAS,GAAG,IAAI,sBAAS,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,WAAW,EAAE,CAAC,CAAC;QACnF,MAAM,OAAO,GAAG,IAAI,8CAAiC,CAAC,EAAE,CAAC,CAAC;QAC1D,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAE/C,MAAM,cAAc,GAAG,QAAQ,CAAC,yBAAyB,EAAE,IAAI,CAC7D,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,qCAAqC,CAAC,CAC1E,CAAC;QAEF,IAAI,cAAc,EAAE;YAClB,OAAO,CAAC,GAAG,CAAC,0CAA0C,cAAc,CAAC,GAAG,EAAE,CAAC,CAAC;YAC5E,OAAO,IAAI,CAAC;SACb;aAAM;YACL,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;YAC1D,OAAO,KAAK,CAAC;SACd;KACF;IAAC,OAAO,KAAK,EAAE;QACd,OAAO,CAAC,GAAG,CAAC,iDAAiD,EAAE,KAAK,CAAC,CAAC;QACtE,OAAO,KAAK,CAAC;KACd;AACH,CAAC;AAED,MAAM,GAAG,GAAG,IAAI,iBAAG,EAAE,CAAC;AAEtB,MAAM,qBAAsB,SAAQ,mBAAK;IACvC,YAAY,KAAU,EAAE,EAAU,EAAE,KAAqD;QACvF,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;QAExB,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;QAC3C,qDAAqD;QACrD,MAAM,SAAS,GAAG,mBAAK,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC;QACzC,MAAM,qBAAqB,GAAG,gBAAgB,SAAS,oDAAoD,CAAC;QAE5G,gDAAgD;QAChD,IAAI,KAAK,EAAE,kBAAkB,EAAE;YAC7B,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;YAC7C,IAAI,yBAAe,CAAC,IAAI,EAAE,oBAAoB,EAAE;gBAC9C,GAAG,EAAE,6CAA6C;gBAClD,YAAY,EAAE,CAAC,mBAAmB,CAAC;gBACnC,cAAc,EAAE;oBACd,0CAA0C;oBAC1C,0CAA0C;iBAC3C;aACF,CAAC,CAAC;SACJ;aAAM;YACL,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;SAC7C;QAED,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;QACpC,MAAM,cAAc,GAAG,IAAI,cAAI,CAAC,IAAI,EAAE,mBAAmB,EAAE;YACzD,SAAS,EAAE,IAAI,8BAAoB,CACjC,qBAAqB,EACrB;gBACE,YAAY,EAAE;oBACZ,yCAAyC,EAAE,mBAAmB;iBAC/D;gBACD,UAAU,EAAE;oBACV,yCAAyC,EAAE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,IAAI,IAAI,CAAC;iBACnF;aACF,CACF;YACD,eAAe,EAAE;gBACf,uBAAa,CAAC,wBAAwB,CAAC,UAAW,CAAC;aACpD;SACF,CAAC,CAAC;QAEH,IAAI,uBAAS,CAAC,IAAI,EAAE,SAAS,EAAE;YAC7B,KAAK,EAAE,cAAc,CAAC,OAAO;YAC7B,WAAW,EAAE,sCAAsC;SACpD,CAAC,CAAC;IACL,CAAC;CACF;AAED,iBAAiB;AACjB,KAAK,UAAU,IAAI;IACjB,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,MAAM,uBAAuB,EAAE,CAAC;IAEnD,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;IAChD,IAAI,qBAAqB,CAAC,GAAG,EAAE,kBAAkB,EAAE;QACjD,kBAAkB,EAAE,CAAC,UAAU;KAChC,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,EAAE,CAAC;IAE7B,yBAAyB;IACzB,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACtC,IAAI;QACF,MAAM,UAAU,GAAG;YACjB,YAAY;YACZ,kBAAkB;YAClB,0BAA0B;YAC1B,UAAU,QAAQ,CAAC,SAAS,GAAG;SAChC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEZ,OAAO,CAAC,GAAG,CAAC,cAAc,UAAU,EAAE,CAAC,CAAC;QAExC,IAAA,wBAAQ,EAAC,UAAU,EAAE;YACnB,KAAK,EAAE,SAAS;YAChB,GAAG,EAAE;gBACH,GAAG,OAAO,CAAC,GAAG;gBACd,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,WAAW;aAClD;SACF,CAAC,CAAC;QAEH,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;KACrD;IAAC,OAAO,KAAK,EAAE;QACd,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;QAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;KACjB;AACH,CAAC;AAED,wBAAwB;AACxB,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;IACxC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"bootstrap-iam.js","sourceRoot":"","sources":["../../src/bin/bootstrap-iam.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAAA,6CAAgE;AAChE,iDAAiG;AACjG,iDAAyC;AACzC,oDAA0H;AAC1H,mDAAqC;AAErC,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;AAEtD,+BAA+B;AAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACrF,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClG,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC;AAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;AACxD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC;AAC7C,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC;AACnE,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC;AAEjE,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAsD,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9G,MAAM,SAAS,GAAG,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC;AACjF,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC;AAE/E,kCAAkC;AAClC,IAAI,IAAI,KAAK,MAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE;IAC3E,OAAO,CAAC,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACpF,OAAO,CAAC,KAAK,CAAC,kIAAkI,CAAC,CAAC;IAClJ,OAAO,CAAC,KAAK,CAAC,8FAA8F,CAAC,CAAC;IAC9G,OAAO,CAAC,KAAK,CAAC,gFAAgF,CAAC,CAAC;IAChG,OAAO,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;IACzD,OAAO,CAAC,KAAK,CAAC,wHAAwH,CAAC,CAAC;IACxI,OAAO,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAC5E,OAAO,CAAC,KAAK,CAAC,kFAAkF,CAAC,CAAC;IAClG,OAAO,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;CACjB;AAED,MAAM,cAAc,GAAG,QAAQ,CAAC;AAChC,MAAM,aAAa,GAAG,cAAc,CAAC;AACrC,MAAM,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC;AAC/E,MAAM,gBAAgB,GAAG,MAAM,KAAK,SAAS,CAAC;AAE9C,8CAA8C;AAC9C,SAAS,kBAAkB,CAAC,OAAe;IACzC,IAAI,gBAAgB,EAAE;QACpB,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;KAC9B;IAED,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC;QAClC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;IAEH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,EAAE,CAAC,QAAQ,CAAC,GAAG,OAAO,UAAU,EAAE,CAAC,MAAM,EAAE,EAAE;YAC3C,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,GAAG,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,2CAA2C;AAC3C,SAAS,2BAA2B,CAAC,WAAgB;IACnD,IAAI;QACF,MAAM,UAAU,GAAG,WAAW,CAAC,SAAS,IAAI,EAAE,CAAC;QAC/C,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE;YAClC,IAAI,SAAS,CAAC,SAAS,EAAE,UAAU,EAAE,CAAC,yCAAyC,CAAC,EAAE;gBAChF,MAAM,IAAI,GAAG,SAAS,CAAC,SAAS,CAAC,UAAU,CAAC,yCAAyC,CAAC,CAAC;gBACvF,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACrD,OAAO,QAAQ;qBACZ,GAAG,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;qBAChE,MAAM,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;aAC9C;SACF;KACF;IAAC,OAAO,KAAK,EAAE;QACd,OAAO,CAAC,IAAI,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAAC;KAC1D;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,+CAA+C;AAC/C,KAAK,UAAU,uBAAuB;IACpC,IAAI;QACF,MAAM,SAAS,GAAG,IAAI,sBAAS,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,WAAW,EAAE,CAAC,CAAC;QACnF,MAAM,OAAO,GAAG,IAAI,8CAAiC,CAAC,EAAE,CAAC,CAAC;QAC1D,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAE/C,MAAM,cAAc,GAAG,QAAQ,CAAC,yBAAyB,EAAE,IAAI,CAC7D,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,qCAAqC,CAAC,CAC1E,CAAC;QAEF,IAAI,cAAc,EAAE;YAClB,OAAO,CAAC,GAAG,CAAC,0CAA0C,cAAc,CAAC,GAAG,EAAE,CAAC,CAAC;YAC5E,OAAO,IAAI,CAAC;SACb;aAAM;YACL,OAAO,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAC;YAChF,OAAO,KAAK,CAAC;SACd;KACF;IAAC,OAAO,KAAK,EAAE;QACd,OAAO,CAAC,GAAG,CAAC,iDAAiD,EAAE,KAAK,CAAC,CAAC;QACtE,OAAO,KAAK,CAAC;KACd;AACH,CAAC;AAED,oDAAoD;AACpD,KAAK,UAAU,gBAAgB;IAC7B,IAAI;QACF,MAAM,SAAS,GAAG,IAAI,sBAAS,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,WAAW,EAAE,CAAC,CAAC;QACnF,MAAM,OAAO,GAAG,IAAI,2BAAc,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAE/C,IAAI,QAAQ,CAAC,IAAI,EAAE,wBAAwB,EAAE;YAC3C,MAAM,eAAe,GAAG,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;YACnF,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;YAChD,MAAM,aAAa,GAAG,2BAA2B,CAAC,WAAW,CAAC,CAAC;YAE/D,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE;gBAC5B,OAAO,CAAC,GAAG,CAAC,gCAAgC,QAAQ,EAAE,CAAC,CAAC;gBACxD,OAAO,CAAC,GAAG,CAAC,4BAA4B,aAAa,CAAC,MAAM,IAAI,CAAC,CAAC;gBAClE,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC;gBAC3D,OAAO,aAAa,CAAC;aACtB;SACF;KACF;IAAC,OAAO,KAAK,EAAE;QACd,IAAI,KAAK,YAAY,kCAAqB,IAAK,KAAa,CAAC,IAAI,KAAK,cAAc,EAAE;YACpF,OAAO,CAAC,GAAG,CAAC,4DAA4D,QAAQ,EAAE,CAAC,CAAC;SACrF;aAAM;YACL,OAAO,CAAC,IAAI,CAAC,wCAAwC,EAAE,KAAK,CAAC,CAAC;SAC/D;KACF;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,2CAA2C;AAC3C,SAAS,mBAAmB,CAC1B,QAAkB,EAClB,SAAmB,EACnB,QAAkB,EAClB,IAAY;IAEZ,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IACxC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IAEtC,QAAQ,IAAI,EAAE;QACZ,KAAK,OAAO;YACV,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAEjE,KAAK,QAAQ;YACX,OAAO,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAEjE,KAAK,OAAO;YACV,iEAAiE;YACjE,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;YACrE,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,YAAY,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAErE,KAAK,SAAS,CAAC;QACf;YACE,OAAO,SAAS,CAAC,IAAI,EAAE,CAAC;KAC3B;AACH,CAAC;AAED,uBAAuB;AACvB,SAAS,QAAQ,CAAC,QAAkB,EAAE,KAAe,EAAE,SAAmB,EAAE,IAAY;IACtF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAChC,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IAExC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAE9D,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC7B,OAAO,CAAC,GAAG,CAAC,0BAA0B,QAAQ,CAAC,MAAM,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAE3E,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE;QACpB,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;QAC7C,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC;KACpD;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE;QACtB,OAAO,CAAC,GAAG,CAAC,oBAAoB,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC;QACpD,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC;KACtD;IAED,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE;QACxB,OAAO,CAAC,GAAG,CAAC,mBAAmB,SAAS,CAAC,MAAM,IAAI,CAAC,CAAC;QACrD,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC;KACxD;IAED,mEAAmE;IACnE,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,OAAO,CAAC,IAAI,YAAY,CAAC,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE;QAC9E,MAAM,aAAa,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACtE,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE;YAC5B,OAAO,CAAC,GAAG,CAAC,wBAAwB,aAAa,CAAC,MAAM,IAAI,CAAC,CAAC;YAC9D,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC;SAC5D;KACF;IAED,OAAO,CAAC,GAAG,CAAC,+BAA+B,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;IAC7D,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,GAAG,GAAG,IAAI,iBAAG,EAAE,CAAC;AAEtB,MAAM,qBAAsB,SAAQ,mBAAK;IACvC,YAAY,KAAU,EAAE,EAAU,EAAE,KAA2E;QAC7G,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;QAExB,MAAM,EAAE,UAAU,GAAG,EAAE,EAAE,kBAAkB,GAAG,KAAK,EAAE,GAAG,KAAK,IAAI,EAAE,CAAC;QAEpE,qDAAqD;QACrD,MAAM,SAAS,GAAG,mBAAK,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC;QACzC,MAAM,qBAAqB,GAAG,gBAAgB,SAAS,oDAAoD,CAAC;QAE5G,gDAAgD;QAChD,IAAI,kBAAkB,EAAE;YACtB,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;YAClD,IAAI,yBAAe,CAAC,IAAI,EAAE,oBAAoB,EAAE;gBAC9C,GAAG,EAAE,6CAA6C;gBAClD,YAAY,EAAE,CAAC,mBAAmB,CAAC;gBACnC,cAAc,EAAE;oBACd,0CAA0C;oBAC1C,0CAA0C;iBAC3C;aACF,CAAC,CAAC;SACJ;QAED,OAAO,CAAC,GAAG,CAAC,oCAAoC,QAAQ,KAAK,CAAC,CAAC;QAC/D,MAAM,cAAc,GAAG,IAAI,cAAI,CAAC,IAAI,EAAE,mBAAmB,EAAE;YACzD,QAAQ,EAAE,QAAQ;YAClB,SAAS,EAAE,IAAI,8BAAoB,CACjC,qBAAqB,EACrB;gBACE,YAAY,EAAE;oBACZ,yCAAyC,EAAE,mBAAmB;iBAC/D;gBACD,UAAU,EAAE;oBACV,yCAAyC,EAAE,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,IAAI,IAAI,CAAC;iBACpF;aACF,CACF;YACD,eAAe,EAAE;gBACf,uBAAa,CAAC,wBAAwB,CAAC,UAAU,CAAC;aACnD;SACF,CAAC,CAAC;QAEH,IAAI,uBAAS,CAAC,IAAI,EAAE,SAAS,EAAE;YAC7B,KAAK,EAAE,cAAc,CAAC,OAAO;YAC7B,WAAW,EAAE,sCAAsC;SACpD,CAAC,CAAC;QAEH,IAAI,uBAAS,CAAC,IAAI,EAAE,UAAU,EAAE;YAC9B,KAAK,EAAE,cAAc,CAAC,QAAQ;YAC9B,WAAW,EAAE,sBAAsB;SACpC,CAAC,CAAC;QAEH,IAAI,uBAAS,CAAC,IAAI,EAAE,YAAY,EAAE;YAChC,KAAK,EAAE,UAAU;YACjB,WAAW,EAAE,yCAAyC;SACvD,CAAC,CAAC;QAEH,IAAI,uBAAS,CAAC,IAAI,EAAE,iBAAiB,EAAE;YACrC,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,QAAQ,EAAE;YACnC,WAAW,EAAE,oCAAoC;SAClD,CAAC,CAAC;IACL,CAAC;CACF;AAED,iBAAiB;AACjB,KAAK,UAAU,IAAI;IACjB,+CAA+C;IAC/C,IAAI,IAAI,KAAK,MAAM,EAAE;QACnB,OAAO,CAAC,GAAG,CAAC,aAAa,SAAS,EAAE,CAAC,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,YAAY,QAAQ,IAAI,CAAC,CAAC;QAEtC,MAAM,aAAa,GAAG,MAAM,gBAAgB,EAAE,CAAC;QAE/C,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE;YAC9B,OAAO,CAAC,GAAG,CAAC,sEAAsE,CAAC,CAAC;YACpF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;SACjB;QAED,OAAO,CAAC,GAAG,CAAC,6CAA6C,aAAa,CAAC,MAAM,MAAM,CAAC,CAAC;QACrF,aAAa,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;QAC5E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;KACjB;IAED,2CAA2C;IAC3C,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE;QAC7B,OAAO,CAAC,GAAG,CAAC,2BAA2B,cAAc,CAAC,MAAM,IAAI,CAAC,CAAC;QAClE,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC;KAC7D;IACD,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE;QAC5B,OAAO,CAAC,GAAG,CAAC,gCAAgC,aAAa,CAAC,MAAM,IAAI,CAAC,CAAC;QACtE,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC;KAC5D;IACD,OAAO,CAAC,GAAG,CAAC,cAAc,UAAU,EAAE,CAAC,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IAEhC,2BAA2B;IAC3B,MAAM,aAAa,GAAG,MAAM,gBAAgB,EAAE,CAAC;IAC/C,MAAM,UAAU,GAAG,MAAM,uBAAuB,EAAE,CAAC;IAEnD,6BAA6B;IAC7B,MAAM,UAAU,GAAG,mBAAmB,CAAC,aAAa,EAAE,cAAc,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC;IAE3F,YAAY;IACZ,QAAQ,CAAC,aAAa,EAAE,UAAU,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAE1D,aAAa;IACb,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE;QAC3B,OAAO,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAC5E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;KACjB;IAED,0BAA0B;IAC1B,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,gDAAgD,CAAC,CAAC;IAE7F,IAAI,CAAC,SAAS,EAAE;QACd,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QAC/C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;KACjB;IAED,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;IAE7D,sBAAsB;IACtB,IAAI,qBAAqB,CAAC,GAAG,EAAE,SAAS,EAAE;QACxC,kBAAkB,EAAE,CAAC,UAAU;QAC/B,UAAU,EAAE,UAAU;KACvB,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,EAAE,CAAC;IAE7B,yBAAyB;IACzB,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;IAC3C,IAAI;QACF,MAAM,UAAU,GAAG;YACjB,YAAY;YACZ,SAAS;YACT,0BAA0B;YAC1B,UAAU,QAAQ,CAAC,SAAS,GAAG;SAChC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEZ,OAAO,CAAC,GAAG,CAAC,mBAAmB,UAAU,IAAI,CAAC,CAAC;QAE/C,IAAA,wBAAQ,EAAC,UAAU,EAAE;YACnB,KAAK,EAAE,SAAS;YAChB,GAAG,EAAE;gBACH,GAAG,OAAO,CAAC,GAAG;gBACd,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,WAAW;aAClD;SACF,CAAC,CAAC;QAEH,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,oEAAoE,CAAC,CAAC;QAClF,OAAO,CAAC,GAAG,CAAC,iEAAiE,CAAC,CAAC;KAChF;IAAC,OAAO,KAAK,EAAE;QACd,OAAO,CAAC,KAAK,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAC;QAC/C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;KACjB;AACH,CAAC;AAED,wBAAwB;AACxB,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;IAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/bin/cli.js

@@ -8,11 +8,64 @@ commander_1.program
     .version('0.1.5');
 commander_1.program.command('create-gha-iam-stack')
     .description('Create IAM stack for GitHub Actions OIDC authentication')
-    .option('--repo <owner/repo>', 'GitHub repository (owner/repo)', collect, [])
+    .option('--repo <owner/repo>', 'GitHub repository to add (owner/repo)', collect, [])
+    .option('--remove-repo <owner/repo>', 'GitHub repository to remove (owner/repo)', collectRemove, [])
     .option('--policy <name>', 'AWS managed policy name', 'AdministratorAccess')
+    .option('--mode <mode>', 'Operation mode: merge (add new repos), replace (overwrite all), list (show current repos)', 'replace')
+    .option('--yes', 'Skip confirmation prompt', false)
+    .option('--stack-name <name>', 'CloudFormation stack name', 'GithubActionsIam')
+    .option('--role-name <name>', 'IAM role name', 'GithubActionsRole')
     .action(async (options) => {
+    // List mode - no repos required
+    if (options.mode === 'list') {
+        process.argv = [
+            process.argv[0],
+            process.argv[1],
+            '--mode=list',
+            `--stack-name=${options.stackName}`,
+            `--role-name=${options.roleName}`,
+        ];
+        require((0, path_1.join)(__dirname, 'bootstrap-iam.js'));
+        return;
+    }
+    // Mixed mode - both --repo and --remove-repo specified
+    if (options.repo.length > 0 && options.removeRepo.length > 0) {
+        process.argv = [
+            process.argv[0],
+            process.argv[1],
+            ...options.repo.map((repo) => `--repo=${repo}`),
+            ...options.removeRepo.map((repo) => `--remove-repo=${repo}`),
+            `--policy=${options.policy}`,
+            '--mode=mixed',
+            `--stack-name=${options.stackName}`,
+            `--role-name=${options.roleName}`,
+            ...(options.yes ? ['--yes'] : [])
+        ];
+        require((0, path_1.join)(__dirname, 'bootstrap-iam.js'));
+        return;
+    }
+    // Pure remove mode - only --remove-repo specified
+    if (options.removeRepo.length > 0) {
+        process.argv = [
+            process.argv[0],
+            process.argv[1],
+            ...options.removeRepo.map((repo) => `--remove-repo=${repo}`),
+            `--policy=${options.policy}`,
+            '--mode=remove',
+            `--stack-name=${options.stackName}`,
+            `--role-name=${options.roleName}`,
+            ...(options.yes ? ['--yes'] : [])
+        ];
+        require((0, path_1.join)(__dirname, 'bootstrap-iam.js'));
+        return;
+    }
+    // Add/Replace mode - requires repos
     if (options.repo.length === 0) {
-        console.error('Error: at least one --repo argument is required');
+        console.error('Error: at least one --repo argument is required (or use --mode=list to view current repos)');
+        process.exit(1);
+    }
+    if (!['merge', 'replace'].includes(options.mode)) {
+        console.error('Error: --mode must be one of: merge, replace, list');
         process.exit(1);
     }
     // Convert Commander options to argv format for bootstrap script
@@ -20,7 +73,11 @@ commander_1.program.command('create-gha-iam-stack')
         process.argv[0],
         process.argv[1],
         ...options.repo.map((repo) => `--repo=${repo}`),
-        `--policy=${options.policy}`
+        `--policy=${options.policy}`,
+        `--mode=${options.mode}`,
+        `--stack-name=${options.stackName}`,
+        `--role-name=${options.roleName}`,
+        ...(options.yes ? ['--yes'] : [])
     ];
     require((0, path_1.join)(__dirname, 'bootstrap-iam.js'));
 });
@@ -28,5 +85,9 @@ commander_1.program.command('create-gha-iam-stack')
 function collect(value, previous) {
     return previous.concat([value]);
 }
+// Helper function to collect multiple --remove-repo options
+function collectRemove(value, previous) {
+    return previous.concat([value]);
+}
 commander_1.program.parse();
 //# sourceMappingURL=cli.js.map

package/dist/bin/cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../src/bin/cli.ts"],"names":[],"mappings":";;AAAA,yCAAoC;AACpC,+BAA4B;AAE5B,mBAAO;KACJ,IAAI,CAAC,sBAAsB,CAAC;KAC5B,WAAW,CAAC,0CAA0C,CAAC;KACvD,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,mBAAO,CAAC,OAAO,CAAC,sBAAsB,CAAC;KACpC,WAAW,CAAC,yDAAyD,CAAC;KACtE,MAAM,CAAC,qBAAqB,EAAE,gCAAgC,EAAE,OAAO,EAAE,EAAE,CAAC;KAC5E,MAAM,CAAC,iBAAiB,EAAE,yBAAyB,EAAE,qBAAqB,CAAC;KAC3E,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IACxB,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE;QAC7B,OAAO,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;KACjB;IAED,gEAAgE;IAChE,OAAO,CAAC,IAAI,GAAG;QACb,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACf,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC;QACvD,YAAY,OAAO,CAAC,MAAM,EAAE;KAC7B,CAAC;IACF,OAAO,CAAC,IAAA,WAAI,EAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC,CAAC;AAC/C,CAAC,CAAC,CAAC;AAEL,qDAAqD;AACrD,SAAS,OAAO,CAAC,KAAa,EAAE,QAAkB;IAChD,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AAClC,CAAC;AAED,mBAAO,CAAC,KAAK,EAAE,CAAC"}
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../src/bin/cli.ts"],"names":[],"mappings":";;AAAA,yCAAoC;AACpC,+BAA4B;AAE5B,mBAAO;KACJ,IAAI,CAAC,sBAAsB,CAAC;KAC5B,WAAW,CAAC,0CAA0C,CAAC;KACvD,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,mBAAO,CAAC,OAAO,CAAC,sBAAsB,CAAC;KACpC,WAAW,CAAC,yDAAyD,CAAC;KACtE,MAAM,CAAC,qBAAqB,EAAE,uCAAuC,EAAE,OAAO,EAAE,EAAE,CAAC;KACnF,MAAM,CAAC,4BAA4B,EAAE,0CAA0C,EAAE,aAAa,EAAE,EAAE,CAAC;KACnG,MAAM,CAAC,iBAAiB,EAAE,yBAAyB,EAAE,qBAAqB,CAAC;KAC3E,MAAM,CAAC,eAAe,EAAE,2FAA2F,EAAE,SAAS,CAAC;KAC/H,MAAM,CAAC,OAAO,EAAE,0BAA0B,EAAE,KAAK,CAAC;KAClD,MAAM,CAAC,qBAAqB,EAAE,2BAA2B,EAAE,kBAAkB,CAAC;KAC9E,MAAM,CAAC,oBAAoB,EAAE,eAAe,EAAE,mBAAmB,CAAC;KAClE,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IACxB,gCAAgC;IAChC,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE;QAC3B,OAAO,CAAC,IAAI,GAAG;YACb,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;YACf,aAAa;YACb,gBAAgB,OAAO,CAAC,SAAS,EAAE;YACnC,eAAe,OAAO,CAAC,QAAQ,EAAE;SAClC,CAAC;QACF,OAAO,CAAC,IAAA,WAAI,EAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC,CAAC;QAC7C,OAAO;KACR;IAED,uDAAuD;IACvD,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE;QAC5D,OAAO,CAAC,IAAI,GAAG;YACb,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;YACf,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC;YACvD,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,iBAAiB,IAAI,EAAE,CAAC;YACpE,YAAY,OAAO,CAAC,MAAM,EAAE;YAC5B,cAAc;YACd,gBAAgB,OAAO,CAAC,SAAS,EAAE;YACnC,eAAe,OAAO,CAAC,QAAQ,EAAE;YACjC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SAClC,CAAC;QACF,OAAO,CAAC,IAAA,WAAI,EAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC,CAAC;QAC7C,OAAO;KACR;IAED,kDAAkD;IAClD,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE;QACjC,OAAO,CAAC,IAAI,GAAG;YACb,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;YACf,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,iBAAiB,IAAI,EAAE,CAAC;YACpE,YAAY,OAAO,CAAC,MAAM,EAAE;YAC5B,eAAe;YACf,gBAAgB,OAAO,CAAC,SAAS,EAAE;YACnC,eAAe,OAAO,CAAC,QAAQ,EAAE;YACjC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SAClC,CAAC;QACF,OAAO,CAAC,IAAA,WAAI,EAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC,CAAC;QAC7C,OAAO;KACR;IAED,oCAAoC;IACpC,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE;QAC7B,OAAO,CAAC,KAAK,CAAC,4FAA4F,CAAC,CAAC;QAC5G,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;KACjB;IAED,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;QAChD,OAAO,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;KACjB;IAED,gEAAgE;IAChE,OAAO,CAAC,IAAI,GAAG;QACb,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACf,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC;QACvD,YAAY,OAAO,CAAC,MAAM,EAAE;QAC5B,UAAU,OAAO,CAAC,IAAI,EAAE;QACxB,gBAAgB,OAAO,CAAC,SAAS,EAAE;QACnC,eAAe,OAAO,CAAC,QAAQ,EAAE;QACjC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAClC,CAAC;IACF,OAAO,CAAC,IAAA,WAAI,EAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC,CAAC;AAC/C,CAAC,CAAC,CAAC;AAEL,qDAAqD;AACrD,SAAS,OAAO,CAAC,KAAa,EAAE,QAAkB;IAChD,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AAClC,CAAC;AAED,4DAA4D;AAC5D,SAAS,aAAa,CAAC,KAAa,EAAE,QAAkB;IACtD,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AAClC,CAAC;AAED,mBAAO,CAAC,KAAK,EAAE,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aws-lambda-api-tools",
-  "version": "0.1.28",
+  "version": "0.1.29",
   "description": "",
   "main": "dist/index.js",
   "bin": {