@actsecurity/iam-collect 0.1.215

package/dist/esm/utils/client-tools.js

@@ -0,0 +1,106 @@
+import {} from '../services.js';
+import { log } from '@cloud-copilot/log';
+/**
+ *
+ * @param operation The operation to run.
+ * @returns If successful, returns the result of operation. If operation returns a 404, returns undefined.
+ * @throws If operation returns a non 404 error, rethrows that error.
+ */
+export async function runAndCatch404(operation) {
+    try {
+        const result = await operation();
+        return result;
+    }
+    catch (e) {
+        if (e['$metadata']?.httpStatusCode == 404) {
+            return undefined;
+        }
+        throw e;
+    }
+}
+/**
+ *
+ * @param operation The operation to run.
+ * @returns If successful, returns the result of operation. If operation returns a 404, returns undefined.
+ * @throws If operation returns a non 400 error, rethrows that error.
+ */
+export async function runAndCatchAccessDenied(operation, onError) {
+    try {
+        const result = await operation();
+        return result;
+    }
+    catch (e) {
+        const errorName = e.name;
+        if (errorName == 'AccessDeniedException' ||
+            errorName == 'AccessDenied' ||
+            errorName == 'AuthorizationErrorException') {
+            if (onError) {
+                return onError(e);
+            }
+            return undefined;
+        }
+        throw e;
+    }
+}
+export async function runAndCatchAccessDeniedWithLog(arn, awsService, resourceType, field, operation) {
+    return runAndCatchAccessDenied(operation, async (error) => {
+        log.warn(`Access denied for ${field} in ${arn}`, error, {
+            accessDenied: true,
+            arn,
+            field,
+            resourceType,
+            awsService
+        });
+        return undefined;
+    });
+}
+/**
+ * Run an operation and catch a specific error by name. Return undefined if the error matches, otherwise rethrow the error.
+ *
+ * @param errorName the name of the error to catch
+ * @param operation the operation to run
+ * @returns If successful, returns the result of operation. If operation throws an error with the specified name, returns undefined.
+ * @throws If operation throws an error with a different name, rethrows that error.
+ */
+export async function runAndCatchError(errorName, operation, onError) {
+    try {
+        const result = await operation();
+        return result;
+    }
+    catch (e) {
+        if (e.name == errorName) {
+            if (onError) {
+                return onError(e);
+            }
+            return undefined;
+        }
+        throw e;
+    }
+}
+const DNS_RETRY_DELAY = 1500;
+/**
+ * Retry a function that may fail due to DNS resolution issues.
+ *
+ * @param fn the function to retry
+ * @param tries the number of times to retry the function
+ * @returns the result of the function if successful, otherwise throws the last error encountered
+ */
+export async function withDnsRetry(fn, tries = 5) {
+    let last;
+    for (let i = 0; i < tries; i++) {
+        try {
+            return await fn();
+        }
+        catch (e) {
+            const m = e?.message || '';
+            if (m.startsWith('getaddrinfo')) {
+                await new Promise((r) => setTimeout(r, DNS_RETRY_DELAY + Math.random() * DNS_RETRY_DELAY));
+                last = e;
+                continue;
+            }
+            throw e;
+        }
+    }
+    throw last;
+}
+//# sourceMappingURL=client-tools.js.map

package/dist/esm/utils/client-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-tools.js","sourceRoot":"","sources":["../../../src/utils/client-tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmB,MAAM,gBAAgB,CAAA;AAChD,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAA;AAExC;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,SAAuC;IAEvC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAA;QAChC,OAAO,MAAM,CAAA;IACf,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,IAAI,CAAC,CAAC,WAAW,CAAC,EAAE,cAAc,IAAI,GAAG,EAAE,CAAC;YAC1C,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,MAAM,CAAC,CAAA;IACT,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,SAAuC,EACvC,OAAgD;IAEhD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAA;QAChC,OAAO,MAAM,CAAA;IACf,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,MAAM,SAAS,GAAG,CAAC,CAAC,IAAI,CAAA;QAExB,IACE,SAAS,IAAI,uBAAuB;YACpC,SAAS,IAAI,cAAc;YAC3B,SAAS,IAAI,6BAA6B,EAC1C,CAAC;YACD,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,OAAO,CAAC,CAAC,CAAC,CAAA;YACnB,CAAC;YACD,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,MAAM,CAAC,CAAA;IACT,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,GAAW,EACX,UAAsB,EACtB,YAAoB,EACpB,KAAa,EACb,SAAuC;IAEvC,OAAO,uBAAuB,CAAC,SAAS,EAAE,KAAK,EAAE,KAAU,EAAE,EAAE;QAC7D,GAAG,CAAC,IAAI,CAAC,qBAAqB,KAAK,OAAO,GAAG,EAAE,EAAE,KAAK,EAAE;YACtD,YAAY,EAAE,IAAI;YAClB,GAAG;YACH,KAAK;YACL,YAAY;YACZ,UAAU;SACX,CAAC,CAAA;QACF,OAAO,SAAS,CAAA;IAClB,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;GAOG;AAEH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,SAAiB,EACjB,SAAuC,EACvC,OAAgD;IAEhD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAA;QAChC,OAAO,MAAM,CAAA;IACf,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,IAAI,CAAC,CAAC,IAAI,IAAI,SAAS,EAAE,CAAC;YACxB,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,OAAO,CAAC,CAAC,CAAC,CAAA;YACnB,CAAC;YACD,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,MAAM,CAAC,CAAA;IACT,CAAC;AACH,CAAC;AAED,MAAM,eAAe,GAAG,IAAK,CAAA;AAE7B;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAI,EAAoB,EAAE,KAAK,GAAG,CAAC;IACnE,IAAI,IAAI,CAAA;IACR,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,EAAE,CAAA;QACnB,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,MAAM,CAAC,GAAG,CAAC,EAAE,OAAO,IAAI,EAAE,CAAA;YAC1B,IAAI,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;gBAChC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,eAAe,CAAC,CAAC,CAAA;gBAC1F,IAAI,GAAG,CAAC,CAAA;gBACR,SAAQ;YACV,CAAC;YACD,MAAM,CAAC,CAAA;QACT,CAAC;IACH,CAAC;IACD,MAAM,IAAI,CAAA;AACZ,CAAC"}

package/dist/esm/utils/json.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Parse a JSON string if it is present, otherwise return undefined.
+ *
+ * @param value the JSON string to parse, or undefined if not present
+ * @returns the parsed JSON object, or undefined if value is undefined
+ */
+export declare function parseIfPresent(value: string | undefined): any;
+/**
+ * Stringify a value to JSON if it is present, otherwise return undefined.
+ *
+ * @param value the value to stringify, or undefined if not present
+ * @returns the JSON string or undefined
+ */
+export declare function stringifyIfPresent(value: any): string | undefined;
+/**
+ * Consistently stringify a JSON object with predictable key ordering.
+ * This includes consistently ordering array elements.
+ *
+ * IAM policy documents have special predictable key ordering for better semantic readability.
+ *
+ * This intentionally does not handle custom classes or circular references.
+ *
+ * @param node the JSON object to stringify
+ * @param spacer the string to use for one level of indentation
+ * @param startingSpaces the current indentation string
+ * @returns the consistently stringified JSON, or undefined if the input was undefined
+ */
+export declare function consistentStringify(node: any, spacer?: string, startingSpaces?: string): string;
+//# sourceMappingURL=json.d.ts.map

package/dist/esm/utils/json.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"json.d.ts","sourceRoot":"","sources":["../../../src/utils/json.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,GAAG,CAK7D;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,GAAG,GAAG,MAAM,GAAG,SAAS,CAQjE;AAkCD;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,GAAG,EACT,MAAM,GAAE,MAAa,EACrB,cAAc,GAAE,MAAW,GAC1B,MAAM,CA+CR"}

package/dist/esm/utils/json.js

@@ -0,0 +1,117 @@
+/**
+ * Parse a JSON string if it is present, otherwise return undefined.
+ *
+ * @param value the JSON string to parse, or undefined if not present
+ * @returns the parsed JSON object, or undefined if value is undefined
+ */
+export function parseIfPresent(value) {
+    if (value === undefined || value === null || value.trim() === '') {
+        return undefined;
+    }
+    return JSON.parse(value);
+}
+/**
+ * Stringify a value to JSON if it is present, otherwise return undefined.
+ *
+ * @param value the value to stringify, or undefined if not present
+ * @returns the JSON string or undefined
+ */
+export function stringifyIfPresent(value) {
+    if (value === undefined) {
+        return undefined;
+    }
+    if (typeof value === 'string') {
+        return value;
+    }
+    return JSON.stringify(value);
+}
+/**
+ * Keys that should be ordered predictably in IAM policy documents.
+ */
+const predictableIamKeys = {
+    Version: 1,
+    Statement: 2,
+    Sid: 3,
+    Effect: 4,
+    Action: 5,
+    Principal: 6,
+    Resource: 7,
+    Condition: 8
+};
+/**
+ * Comparator function to sort IAM keys predictably.
+ *
+ * @param a the first key
+ * @param b the second key
+ * @returns the comparison result using predictable IAM key order, or standard system order otherwise
+ */
+function iamComparator(a, b) {
+    const aRank = predictableIamKeys[a];
+    const bRank = predictableIamKeys[b];
+    if (aRank !== undefined && bRank !== undefined) {
+        return aRank - bRank;
+    }
+    return a.localeCompare(b);
+}
+/**
+ * Consistently stringify a JSON object with predictable key ordering.
+ * This includes consistently ordering array elements.
+ *
+ * IAM policy documents have special predictable key ordering for better semantic readability.
+ *
+ * This intentionally does not handle custom classes or circular references.
+ *
+ * @param node the JSON object to stringify
+ * @param spacer the string to use for one level of indentation
+ * @param startingSpaces the current indentation string
+ * @returns the consistently stringified JSON, or undefined if the input was undefined
+ */
+export function consistentStringify(node, spacer = '  ', startingSpaces = '') {
+    if (node === undefined) {
+        return undefined;
+    }
+    if (node && node.toJSON && typeof node.toJSON === 'function') {
+        node = node.toJSON();
+    }
+    if (typeof node === 'number')
+        return isFinite(node) ? '' + node : 'null';
+    if (typeof node !== 'object')
+        return JSON.stringify(node);
+    if (Array.isArray(node)) {
+        if (node.length === 0)
+            return '[]';
+        const arrayValues = node.map((v) => consistentStringify(v, spacer, startingSpaces + spacer) || 'null');
+        arrayValues.sort();
+        let out = '[';
+        for (let i = 0; i < arrayValues.length; i++) {
+            if (arrayValues[i] === undefined) {
+                continue;
+            }
+            if (i > 0) {
+                out += ',';
+            }
+            out += `\n${startingSpaces + spacer}${arrayValues[i]}`;
+        }
+        return out + `\n${startingSpaces}]`;
+    }
+    if (node === null)
+        return 'null';
+    const keys = Object.keys(node).sort(iamComparator);
+    if (keys.length === 0)
+        return '{}';
+    const keySpace = startingSpaces + spacer;
+    let out = `{\n`;
+    let valuePrinted = false;
+    for (let i = 0; i < keys.length; i++) {
+        const key = keys[i];
+        const value = consistentStringify(node[key], spacer, startingSpaces + spacer);
+        if (!value)
+            continue;
+        if (valuePrinted)
+            out += ',\n';
+        out += keySpace + JSON.stringify(key) + ': ' + value;
+        valuePrinted = true;
+    }
+    return out + `\n${startingSpaces}}`;
+}
+//# sourceMappingURL=json.js.map

package/dist/esm/utils/json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json.js","sourceRoot":"","sources":["../../../src/utils/json.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,KAAyB;IACtD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACjE,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;AAC1B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAU;IAC3C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAA;IACd,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;AAC9B,CAAC;AAED;;GAEG;AACH,MAAM,kBAAkB,GAA2B;IACjD,OAAO,EAAE,CAAC;IACV,SAAS,EAAE,CAAC;IACZ,GAAG,EAAE,CAAC;IACN,MAAM,EAAE,CAAC;IACT,MAAM,EAAE,CAAC;IACT,SAAS,EAAE,CAAC;IACZ,QAAQ,EAAE,CAAC;IACX,SAAS,EAAE,CAAC;CACb,CAAA;AAED;;;;;;GAMG;AACH,SAAS,aAAa,CAAC,CAAS,EAAE,CAAS;IACzC,MAAM,KAAK,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAA;IACnC,MAAM,KAAK,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAA;IAEnC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/C,OAAO,KAAK,GAAG,KAAK,CAAA;IACtB,CAAC;IAED,OAAO,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAA;AAC3B,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,mBAAmB,CACjC,IAAS,EACT,SAAiB,IAAI,EACrB,iBAAyB,EAAE;IAE3B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,SAAgB,CAAA;IACzB,CAAC;IAED,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAC7D,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,CAAA;IACtB,CAAC;IACD,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,CAAA;IACxE,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;IAEzD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA;QAClC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAC1B,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,CAAC,EAAE,MAAM,EAAE,cAAc,GAAG,MAAM,CAAC,IAAI,MAAM,CACzE,CAAA;QACD,WAAW,CAAC,IAAI,EAAE,CAAA;QAClB,IAAI,GAAG,GAAG,GAAG,CAAA;QACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5C,IAAI,WAAW,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;gBACjC,SAAQ;YACV,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACV,GAAG,IAAI,GAAG,CAAA;YACZ,CAAC;YACD,GAAG,IAAI,KAAK,cAAc,GAAG,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,EAAE,CAAA;QACxD,CAAC;QAED,OAAO,GAAG,GAAG,KAAK,cAAc,GAAG,CAAA;IACrC,CAAC;IAED,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,MAAM,CAAA;IAEhC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;IAClD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAClC,MAAM,QAAQ,GAAG,cAAc,GAAG,MAAM,CAAA;IACxC,IAAI,GAAG,GAAG,KAAK,CAAA;IACf,IAAI,YAAY,GAAG,KAAK,CAAA;IACxB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;QACnB,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,cAAc,GAAG,MAAM,CAAC,CAAA;QAC7E,IAAI,CAAC,KAAK;YAAE,SAAQ;QACpB,IAAI,YAAY;YAAE,GAAG,IAAI,KAAK,CAAA;QAC9B,GAAG,IAAI,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,KAAK,CAAA;QACpD,YAAY,GAAG,IAAI,CAAA;IACrB,CAAC;IACD,OAAO,GAAG,GAAG,KAAK,cAAc,GAAG,CAAA;AACrC,CAAC"}

package/dist/esm/utils/promise.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Just chill for a bit. Used for testing.
+ *
+ * @param milliseconds the number of milliseconds to sleep
+ * @returns A promise that resolves after the specified time
+ */
+export declare function sleep(milliseconds: number): Promise<unknown>;
+//# sourceMappingURL=promise.d.ts.map

package/dist/esm/utils/promise.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"promise.d.ts","sourceRoot":"","sources":["../../../src/utils/promise.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,wBAAgB,KAAK,CAAC,YAAY,EAAE,MAAM,oBAEzC"}

package/dist/esm/utils/promise.js

@@ -0,0 +1,10 @@
+/**
+ * Just chill for a bit. Used for testing.
+ *
+ * @param milliseconds the number of milliseconds to sleep
+ * @returns A promise that resolves after the specified time
+ */
+export function sleep(milliseconds) {
+    return new Promise((resolve) => setTimeout(resolve, milliseconds));
+}
+//# sourceMappingURL=promise.js.map

package/dist/esm/utils/promise.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"promise.js","sourceRoot":"","sources":["../../../src/utils/promise.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,UAAU,KAAK,CAAC,YAAoB;IACxC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAA;AACpE,CAAC"}

package/dist/esm/utils/readPackageFile.d.ts

@@ -0,0 +1,3 @@
+import { type PackageFileReader } from '@actsecurity/cli';
+export declare function getPackageFileReader(): PackageFileReader;
+//# sourceMappingURL=readPackageFileEsm.d.ts.map

package/dist/esm/utils/readPackageFile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"readPackageFile.d.ts","sourceRoot":"","sources":["../../../src/utils/readPackageFile.ts"],"names":[],"mappings":"AAAA,OAAO,EAA2B,KAAK,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AASlF,wBAAgB,oBAAoB,IAAI,iBAAiB,CAKxD"}

package/dist/esm/utils/readPackageFile.js

@@ -0,0 +1,15 @@
+import { createPackageFileReader } from '@actsecurity/cli';
+let levels = 3;
+//@ts-ignore
+if (import.meta.url.includes('src')) {
+    levels = 2;
+}
+let fileReader = undefined;
+export function getPackageFileReader() {
+    if (!fileReader) {
+        //@ts-ignore
+        fileReader = createPackageFileReader(import.meta.url, levels);
+    }
+    return fileReader;
+}
+//# sourceMappingURL=readPackageFileEsm.js.map

package/dist/esm/utils/readPackageFile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"readPackageFileEsm.js","sourceRoot":"","sources":["../../../src/utils/readPackageFileEsm.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAA0B,MAAM,kBAAkB,CAAA;AAElF,IAAI,MAAM,GAAG,CAAC,CAAA;AACd,YAAY;AACZ,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IACpC,MAAM,GAAG,CAAC,CAAA;AACZ,CAAC;AAED,IAAI,UAAU,GAAkC,SAAS,CAAA;AAEzD,MAAM,UAAU,oBAAoB;IAClC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,YAAY;QACZ,UAAU,GAAG,uBAAuB,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;IAC/D,CAAC;IACD,OAAO,UAAU,CAAA;AACnB,CAAC"}

package/dist/esm/utils/readPackageFileEsm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"readPackageFileEsm.d.ts","sourceRoot":"","sources":["../../../src/utils/readPackageFileEsm.ts"],"names":[],"mappings":"AAAA,OAAO,EAA2B,KAAK,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAUlF,wBAAgB,oBAAoB,IAAI,iBAAiB,CAMxD"}

package/dist/esm/utils/strings.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Generates a random string of a given length
+ *
+ * @param length The length of the string you would like to generate
+ * @returns
+ */
+export declare function randomCharacters(length?: number): string;
+/**
+ * Generate a short hash of the input string using SHA-256.
+ * The resulting hash is truncated to 8 characters.
+ *
+ * @param input The input string to hash.
+ * @returns A short hash string.
+ */
+export declare function shortHash(input: string): Promise<string>;
+//# sourceMappingURL=strings.d.ts.map

package/dist/esm/utils/strings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"strings.d.ts","sourceRoot":"","sources":["../../../src/utils/strings.ts"],"names":[],"mappings":"AAGA;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,GAAE,MAAU,GAAG,MAAM,CAQ3D;AAED;;;;;;GAMG;AACH,wBAAsB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAU9D"}

package/dist/esm/utils/strings.js

@@ -0,0 +1,32 @@
+import crypto from 'crypto';
+const characters = '0123456789abcdefghijklmnopqrstuvwxyz';
+/**
+ * Generates a random string of a given length
+ *
+ * @param length The length of the string you would like to generate
+ * @returns
+ */
+export function randomCharacters(length = 5) {
+    let result = '';
+    for (let i = 0; i < length; i++) {
+        const randomIndex = Math.floor(Math.random() * characters.length);
+        result += characters[randomIndex];
+    }
+    return result;
+}
+/**
+ * Generate a short hash of the input string using SHA-256.
+ * The resulting hash is truncated to 8 characters.
+ *
+ * @param input The input string to hash.
+ * @returns A short hash string.
+ */
+export async function shortHash(input) {
+    const encoder = new TextEncoder();
+    const data = encoder.encode(input);
+    const hashBuffer = await crypto.subtle.digest('SHA-256', data);
+    const hashArray = new Uint8Array(hashBuffer);
+    let base64 = Buffer.from(hashArray).toString('base64');
+    return base64.slice(0, 8);
+}
+//# sourceMappingURL=strings.js.map

package/dist/esm/utils/strings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"strings.js","sourceRoot":"","sources":["../../../src/utils/strings.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAA;AAE3B,MAAM,UAAU,GAAG,sCAAsC,CAAA;AACzD;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,SAAiB,CAAC;IACjD,IAAI,MAAM,GAAG,EAAE,CAAA;IACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAChC,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,CAAA;QACjE,MAAM,IAAI,UAAU,CAAC,WAAW,CAAC,CAAA;IACnC,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,KAAa;IAC3C,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAA;IACjC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAElC,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;IAC9D,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,CAAA;IAE5C,IAAI,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;IAEtD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AAC3B,CAAC"}

package/dist/esm/utils/tags.d.ts

@@ -0,0 +1,22 @@
+export interface UpperTagLike {
+    Key?: string;
+    Value?: string;
+}
+export interface LowerTagLike {
+    key?: string;
+    value?: string;
+}
+export interface TagKeyValue {
+    TagKey: string | undefined;
+    TagValue: string | undefined;
+}
+export type Tags = UpperTagLike[] | LowerTagLike[] | TagKeyValue[] | Record<string, string>;
+/**
+ * Converts a Tags object to a Record<string, string> object. Use it to even out the
+ * differences in tag formats between different services.
+ *
+ * @param tags The tags to convert
+ * @returns Returns a Record<string, string> object or undefined if the tags are undefined.
+ */
+export declare function convertTagsToRecord(tags: Tags | undefined): Record<string, string> | undefined;
+//# sourceMappingURL=tags.d.ts.map

package/dist/esm/utils/tags.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tags.d.ts","sourceRoot":"","sources":["../../../src/utils/tags.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,GAAG,SAAS,CAAA;IAC1B,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAA;CAC7B;AAED,MAAM,MAAM,IAAI,GAAG,YAAY,EAAE,GAAG,YAAY,EAAE,GAAG,WAAW,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;AAoB3F;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,IAAI,GAAG,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CA2B9F"}

package/dist/esm/utils/tags.js

@@ -0,0 +1,47 @@
+/**
+ * Checks if a tag is an UpperTagLike object.
+ */
+function isUpperTagLike(tag) {
+    return tag.Key !== undefined;
+}
+/**
+ * Checks if a tag is a LowerTagLike object.
+ */
+function isLowerTagLike(tag) {
+    return tag.key !== undefined;
+}
+function isTagKeyValueLike(tag) {
+    return tag.TagKey !== undefined;
+}
+/**
+ * Converts a Tags object to a Record<string, string> object. Use it to even out the
+ * differences in tag formats between different services.
+ *
+ * @param tags The tags to convert
+ * @returns Returns a Record<string, string> object or undefined if the tags are undefined.
+ */
+export function convertTagsToRecord(tags) {
+    if (!tags) {
+        return undefined;
+    }
+    if (!Array.isArray(tags)) {
+        return tags;
+    }
+    const record = tags.reduce((acc, tag) => {
+        if (isUpperTagLike(tag) && tag.Key) {
+            acc[tag.Key] = tag.Value || '';
+        }
+        else if (isLowerTagLike(tag) && tag.key) {
+            acc[tag.key] = tag.value || '';
+        }
+        else if (isTagKeyValueLike(tag)) {
+            acc[tag.TagKey || ''] = tag.TagValue || '';
+        }
+        return acc;
+    }, {});
+    if (Object.keys(record).length === 0) {
+        return undefined;
+    }
+    return record;
+}
+//# sourceMappingURL=tags.js.map

package/dist/esm/utils/tags.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tags.js","sourceRoot":"","sources":["../../../src/utils/tags.ts"],"names":[],"mappings":"AAiBA;;GAEG;AACH,SAAS,cAAc,CAAC,GAA8C;IACpE,OAAQ,GAAoB,CAAC,GAAG,KAAK,SAAS,CAAA;AAChD,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,GAA8C;IACpE,OAAQ,GAAoB,CAAC,GAAG,KAAK,SAAS,CAAA;AAChD,CAAC;AAED,SAAS,iBAAiB,CAAC,GAA8C;IACvE,OAAQ,GAAmB,CAAC,MAAM,KAAK,SAAS,CAAA;AAClD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAsB;IACxD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CACxB,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACX,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC;YACnC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE,CAAA;QAChC,CAAC;aAAM,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC;YAC1C,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE,CAAA;QAChC,CAAC;aAAM,IAAI,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;YAClC,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,GAAG,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAA;QAC5C,CAAC;QAED,OAAO,GAAG,CAAA;IACZ,CAAC,EACD,EAA4B,CAC7B,CAAA;IAED,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrC,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/esm/utils/types.d.ts

@@ -0,0 +1,2 @@
+export declare function isDefined<T>(value: T | undefined): value is T;
+//# sourceMappingURL=types.d.ts.map

package/dist/esm/utils/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/utils/types.ts"],"names":[],"mappings":"AAAA,wBAAgB,SAAS,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,SAAS,GAAG,KAAK,IAAI,CAAC,CAE7D"}

package/dist/esm/utils/types.js

@@ -0,0 +1,4 @@
+export function isDefined(value) {
+    return value !== undefined && value !== null;
+}
+//# sourceMappingURL=types.js.map

package/dist/esm/utils/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/utils/types.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,SAAS,CAAI,KAAoB;IAC/C,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,CAAA;AAC9C,CAAC"}

package/package.json

@@ -0,0 +1,164 @@
+{
+  "name": "@actsecurity/iam-collect",
+  "version": "0.1.215",
+  "description": "Collect IAM information from AWS Accounts",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/cloud-copilot/iam-collect.git"
+  },
+  "exports": {
+    ".": {
+      "import": "./dist/esm/index.js",
+      "require": "./dist/cjs/index.js"
+    }
+  },
+  "files": [
+    "dist/**/*"
+  ],
+  "types": "dist/cjs/index.d.ts",
+  "bin": {
+    "iam-collect": "dist/esm/cli.js"
+  },
+  "scripts": {
+    "build": "npx tsc -p tsconfig.cjs.json && npx tsc -p tsconfig.esm.json && ./postbuild.sh",
+    "clean": "rm -rf dist",
+    "test": "npx vitest --run --coverage",
+    "release": "npm install && npm run clean && npm run build && npm test && npm run format-check && npm publish",
+    "format": "npx prettier --write src/ infrastructure_as_code/",
+    "format-check": "npx prettier --check src/"
+  },
+  "keywords": [
+    "AWS",
+    "IAM"
+  ],
+  "author": "David Kerber <dave@cloudcopilot.io>",
+  "license": "AGPL-3.0-or-later",
+  "bugs": {
+    "url": "https://github.com/cloud-copilot/iam-collect/issues"
+  },
+  "homepage": "https://github.com/cloud-copilot/iam-collect#readme",
+  "devDependencies": {
+    "@actsecurity/prettier-config": "^0.1.0",
+    "@semantic-release/changelog": "^6.0.3",
+    "@semantic-release/commit-analyzer": "^13.0.1",
+    "@semantic-release/exec": "^7.1.0",
+    "@semantic-release/git": "^10.0.1",
+    "@semantic-release/github": "^12.0.6",
+    "@semantic-release/npm": "^13.1.4",
+    "@semantic-release/release-notes-generator": "^14.0.3",
+    "@types/better-sqlite3": "^7.6.13",
+    "@types/node": "^22.5.0",
+    "@vitest/coverage-v8": "^4.0.18",
+    "aws-sdk-client-mock": "^4.1.0",
+    "semantic-release": "^25.0.3",
+    "typescript": "^5.7.2",
+    "vitest": "^4.0.18"
+  },
+  "prettier": "@actsecurity/prettier-config",
+  "release": {
+    "branches": [
+      "main"
+    ],
+    "plugins": [
+      [
+        "@semantic-release/commit-analyzer",
+        {
+          "releaseRules": [
+            {
+              "type": "feat",
+              "release": "patch"
+            },
+            {
+              "type": "fix",
+              "release": "patch"
+            },
+            {
+              "breaking": true,
+              "release": "patch"
+            },
+            {
+              "type": "*",
+              "release": "patch"
+            }
+          ]
+        }
+      ],
+      "@semantic-release/release-notes-generator",
+      "@semantic-release/changelog",
+      [
+        "@semantic-release/npm",
+        {
+          "npmPublish": true
+        }
+      ],
+      [
+        "@semantic-release/exec",
+        {
+          "prepareCmd": "echo \"/**\n * iam-collect version.\n * Generated by build, do not manually edit\n */\nexport const IAM_COLLECT_VERSION = '${nextRelease.version}'\" > src/config/version.ts",
+          "successCmd": "echo published=true >> $GITHUB_OUTPUT && echo version=${nextRelease.version} >> $GITHUB_OUTPUT && echo package_name=$(node -p \"require('./package.json').name\") >> $GITHUB_OUTPUT"          
+        }
+      ],
+      [
+        "@semantic-release/git",
+        {
+          "assets": [
+            "package.json",
+            "package-lock.json",
+            "CHANGELOG.md",
+            "src/config/version.ts"
+          ],
+          "message": "chore(release): ${nextRelease.version} [skip ci]"
+        }
+      ],
+      [
+        "@semantic-release/github",
+        {
+          "assets": []
+        }
+      ]
+    ]
+  },
+  "dependencies": {
+    "@aws-sdk/client-account": "^3.758.0",
+    "@aws-sdk/client-api-gateway": "^3.799.0",
+    "@aws-sdk/client-backup": "^3.812.0",
+    "@aws-sdk/client-config-service": "^3.886.0",
+    "@aws-sdk/client-dynamodb": "^3.788.0",
+    "@aws-sdk/client-dynamodb-streams": "^3.816.0",
+    "@aws-sdk/client-ec2": "^3.798.0",
+    "@aws-sdk/client-ecr": "^3.798.0",
+    "@aws-sdk/client-efs": "^3.806.0",
+    "@aws-sdk/client-eks": "^3.1085.0",
+    "@aws-sdk/client-eventbridge": "^3.873.0",
+    "@aws-sdk/client-glacier": "^3.799.0",
+    "@aws-sdk/client-glue": "^3.812.0",
+    "@aws-sdk/client-iam": "^3.777.0",
+    "@aws-sdk/client-kafka": "^3.876.0",
+    "@aws-sdk/client-kinesis": "^3.873.0",
+    "@aws-sdk/client-kms": "^3.782.0",
+    "@aws-sdk/client-lambda": "^3.782.0",
+    "@aws-sdk/client-opensearch": "^3.882.0",
+    "@aws-sdk/client-organizations": "^3.787.0",
+    "@aws-sdk/client-ram": "^3.806.0",
+    "@aws-sdk/client-s3": "^3.937.0",
+    "@aws-sdk/client-s3-control": "^3.787.0",
+    "@aws-sdk/client-s3outposts": "^3.817.0",
+    "@aws-sdk/client-s3tables": "^3.804.0",
+    "@aws-sdk/client-secrets-manager": "^3.787.0",
+    "@aws-sdk/client-sns": "^3.797.0",
+    "@aws-sdk/client-sqs": "^3.798.0",
+    "@aws-sdk/client-sso-admin": "^3.787.0",
+    "@aws-sdk/client-sts": "^3.772.0",
+    "@aws-sdk/credential-providers": "^3.772.0",
+    "@aws-sdk/types": "^3.734.0",
+    "@actsecurity/cli": "^0.2.5",
+    "@actsecurity/iam-policy": "^0.1.24",
+    "@actsecurity/iam-utils": "^0.1.56",
+    "@actsecurity/job": "^0.1.42",
+    "@actsecurity/log": "^0.1.39",
+    "@smithy/smithy-client": "^4.2.0",
+    "@smithy/util-retry": "^4.0.2",
+    "better-sqlite3": "^12.2.0",
+    "jsonc-parser": "^3.3.1"
+  }
+}