agent-claw: automated task changes

cdk/node_modules/aws-cdk-lib/aws-dynamodb/lib/private/principal-utils.d.ts

@@ -0,0 +1,12 @@
+import type { IPrincipal } from '../../../aws-iam';
+/**
+ * Returns true if the principal resolves to a Service principal in the policy document.
+ * Checks the policyFragment output to handle wrapped principals
+ * (e.g. PrincipalWithConditions, SessionTagsPrincipal).
+ */
+export declare function isServicePrincipal(principal: IPrincipal): boolean;
+/**
+ * Returns true if the principal is a service principal whose service name
+ * is NOT in the known-valid allowlist for DynamoDB resource policies.
+ */
+export declare function isUnsupportedServicePrincipal(principal: IPrincipal): boolean;