@cloud-copilot/iam-collect 0.1.131 → 0.1.133

package/dist/cjs/awsConfigClients/clients/AwsConfigBackupClient.js

@@ -0,0 +1,98 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AwsConfigBackupClient = void 0;
+const client_backup_1 = require("@aws-sdk/client-backup");
+const AbstractClient_js_1 = require("../../customClients/AbstractClient.js");
+const json_js_1 = require("../../utils/json.js");
+const AwsConfigClientContext_js_1 = require("../AwsConfigClientContext.js");
+const awsConfigUtils_js_1 = require("../awsConfigUtils.js");
+/**
+ * AWS Config-based Backup client implementation
+ */
+class AwsConfigBackupClient extends AbstractClient_js_1.AbstractClient {
+    static clientName = client_backup_1.BackupClient.name;
+    constructor(options, customContext) {
+        super(options, customContext);
+    }
+    /**
+     * Register all Backup command implementations
+     */
+    registerCommands() {
+        this.registerCommand(AwsConfigGetBackupVaultAccessPolicyCommand);
+        this.registerCommand(AwsConfigListBackupVaultsCommand);
+        this.registerCommand(AwsConfigListTagsCommand);
+    }
+}
+exports.AwsConfigBackupClient = AwsConfigBackupClient;
+/**
+ * Config-based implementation of Backup ListBackupVaultsCommand
+ * Retrieves backup vault list from AWS Config
+ */
+const AwsConfigListBackupVaultsCommand = (0, AwsConfigClientContext_js_1.awsConfigCommand)({
+    command: client_backup_1.ListBackupVaultsCommand,
+    execute: async (input, context) => {
+        const query = `
+      SELECT
+        resourceName,
+        arn,
+        configuration.BackupVaultName,
+        configuration.BackupVaultArn,
+        configuration.EncryptionKeyArn,
+        configuration.AccessPolicy,
+        resourceCreationTime,
+        tags
+      WHERE
+        resourceType = 'AWS::Backup::BackupVault'
+        AND awsRegion = '${context.region}'
+        AND accountId = '${context.accountId}'
+        AND ${awsConfigUtils_js_1.resourceStatusWhereClause}
+    `;
+        const results = await (0, awsConfigUtils_js_1.executeConfigQuery)(query, context);
+        // Transform Config results to match AWS SDK format
+        const vaultList = results
+            .map((resultString) => {
+            const { configItem, configuration, tags } = (0, awsConfigUtils_js_1.parseConfigItem)(resultString);
+            // Cache data that will be needed by other commands
+            const vaultName = configuration?.BackupVaultName || configItem.resourceName;
+            context.putCache(vaultName, 'configuration', configuration);
+            context.putCache(configItem.arn, 'tags', tags);
+            return {
+                BackupVaultName: vaultName,
+                BackupVaultArn: configuration?.BackupVaultArn || configItem.arn,
+                EncryptionKeyArn: configuration?.EncryptionKeyArn
+            };
+        })
+            .filter((vault) => vault.BackupVaultName); // Filter out any malformed entries
+        return {
+            BackupVaultList: vaultList,
+            NextToken: undefined // Config doesn't support pagination in this context
+        };
+    }
+});
+/**
+ * Config-based implementation of Backup GetBackupVaultAccessPolicyCommand
+ * Uses configuration.AccessPolicy from AWS Config BackupVault resource
+ */
+const AwsConfigGetBackupVaultAccessPolicyCommand = (0, AwsConfigClientContext_js_1.awsConfigCommand)({
+    command: client_backup_1.GetBackupVaultAccessPolicyCommand,
+    execute: async (input, context) => {
+        const configuration = context.getCache(input.BackupVaultName, 'configuration');
+        return {
+            BackupVaultName: input.BackupVaultName,
+            BackupVaultArn: configuration.BackupVaultArn,
+            Policy: (0, json_js_1.stringifyIfPresent)(configuration?.AccessPolicy)
+        };
+    }
+});
+/**
+ * Config-based implementation of Backup ListTagsCommand
+ * Retrieves tags for a specific backup vault from AWS Config
+ */
+const AwsConfigListTagsCommand = (0, AwsConfigClientContext_js_1.awsConfigCommand)({
+    command: client_backup_1.ListTagsCommand,
+    execute: async (input, context) => {
+        const tags = context.getCache(input.ResourceArn, 'tags');
+        return { Tags: tags };
+    }
+});
+//# sourceMappingURL=AwsConfigBackupClient.js.map

package/dist/cjs/awsConfigClients/clients/AwsConfigBackupClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigBackupClient.js","sourceRoot":"","sources":["../../../../src/awsConfigClients/clients/AwsConfigBackupClient.ts"],"names":[],"mappings":";;;AAAA,0DAK+B;AAE/B,6EAAsE;AACtE,iDAAwD;AACxD,4EAAuF;AACvF,4DAI6B;AAE7B;;GAEG;AACH,MAAa,qBAAsB,SAAQ,kCAAsC;IAC/E,MAAM,CAAU,UAAU,GAAG,4BAAY,CAAC,IAAI,CAAA;IAE9C,YACE,OAGC,EACD,aAAqC;QAErC,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;IAC/B,CAAC;IAED;;OAEG;IACO,gBAAgB;QACxB,IAAI,CAAC,eAAe,CAAC,0CAA0C,CAAC,CAAA;QAChE,IAAI,CAAC,eAAe,CAAC,gCAAgC,CAAC,CAAA;QACtD,IAAI,CAAC,eAAe,CAAC,wBAAwB,CAAC,CAAA;IAChD,CAAC;;AApBH,sDAqBC;AAED;;;GAGG;AACH,MAAM,gCAAgC,GAAG,IAAA,4CAAgB,EAAC;IACxD,OAAO,EAAE,uCAAuB;IAChC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,KAAK,GAAG;;;;;;;;;;;;2BAYS,OAAO,CAAC,MAAM;2BACd,OAAO,CAAC,SAAS;cAC9B,6CAAyB;KAClC,CAAA;QAED,MAAM,OAAO,GAAG,MAAM,IAAA,sCAAkB,EAAC,KAAK,EAAE,OAAO,CAAC,CAAA;QAExD,mDAAmD;QACnD,MAAM,SAAS,GAAG,OAAO;aACtB,GAAG,CAAC,CAAC,YAAoB,EAAE,EAAE;YAC5B,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,IAAA,mCAAe,EAAC,YAAY,CAAC,CAAA;YAEzE,mDAAmD;YACnD,MAAM,SAAS,GAAG,aAAa,EAAE,eAAe,IAAI,UAAU,CAAC,YAAY,CAAA;YAC3E,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE,eAAe,EAAE,aAAa,CAAC,CAAA;YAC3D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;YAE9C,OAAO;gBACL,eAAe,EAAE,SAAS;gBAC1B,cAAc,EAAE,aAAa,EAAE,cAAc,IAAI,UAAU,CAAC,GAAG;gBAC/D,gBAAgB,EAAE,aAAa,EAAE,gBAAgB;aAClD,CAAA;QACH,CAAC,CAAC;aACD,MAAM,CAAC,CAAC,KAAU,EAAE,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,CAAA,CAAC,mCAAmC;QAEpF,OAAO;YACL,eAAe,EAAE,SAAS;YAC1B,SAAS,EAAE,SAAS,CAAC,oDAAoD;SAC1E,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,0CAA0C,GAAG,IAAA,4CAAgB,EAAC;IAClE,OAAO,EAAE,iDAAiC;IAC1C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,eAAgB,EAAE,eAAe,CAAC,CAAA;QAE/E,OAAO;YACL,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,cAAc,EAAE,aAAa,CAAC,cAAc;YAC5C,MAAM,EAAE,IAAA,4BAAkB,EAAC,aAAa,EAAE,YAAY,CAAC;SACxD,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,wBAAwB,GAAG,IAAA,4CAAgB,EAAC;IAChD,OAAO,EAAE,+BAAe;IACxB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAY,EAAE,MAAM,CAAC,CAAA;QAEzD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;IACvB,CAAC;CACF,CAAC,CAAA"}

package/dist/cjs/awsConfigClients/clients/AwsConfigDynamoDBClient.d.ts

@@ -0,0 +1,21 @@
+import { AwsCredentialIdentityWithMetaData } from '../../aws/coreAuth.js';
+import { AbstractClient } from '../../customClients/AbstractClient.js';
+import { AwsConfigClientContext } from '../AwsConfigClientContext.js';
+/**
+ * AWS Config-based DynamoDB client implementation
+ *
+ * Since policies are not available in AWS Config, this client provides limited functionality
+ * and returns empty results for all operations.
+ */
+export declare class AwsConfigDynamoDBClient extends AbstractClient<AwsConfigClientContext> {
+    static readonly clientName: string;
+    constructor(options: {
+        credentials: AwsCredentialIdentityWithMetaData;
+        region: string | undefined;
+    }, customContext: AwsConfigClientContext);
+    /**
+     * Register all DynamoDB command implementations
+     */
+    protected registerCommands(): void;
+}
+//# sourceMappingURL=AwsConfigDynamoDBClient.d.ts.map

package/dist/cjs/awsConfigClients/clients/AwsConfigDynamoDBClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigDynamoDBClient.d.ts","sourceRoot":"","sources":["../../../../src/awsConfigClients/clients/AwsConfigDynamoDBClient.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,iCAAiC,EAAE,MAAM,uBAAuB,CAAA;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAA;AACtE,OAAO,EAAE,sBAAsB,EAAoB,MAAM,8BAA8B,CAAA;AAEvF;;;;;GAKG;AACH,qBAAa,uBAAwB,SAAQ,cAAc,CAAC,sBAAsB,CAAC;IACjF,MAAM,CAAC,QAAQ,CAAC,UAAU,SAAsB;gBAG9C,OAAO,EAAE;QACP,WAAW,EAAE,iCAAiC,CAAA;QAC9C,MAAM,EAAE,MAAM,GAAG,SAAS,CAAA;KAC3B,EACD,aAAa,EAAE,sBAAsB;IAKvC;;OAEG;IACH,SAAS,CAAC,gBAAgB,IAAI,IAAI;CAInC"}

package/dist/cjs/awsConfigClients/clients/AwsConfigDynamoDBClient.js

@@ -0,0 +1,60 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AwsConfigDynamoDBClient = void 0;
+const client_dynamodb_1 = require("@aws-sdk/client-dynamodb");
+const AbstractClient_js_1 = require("../../customClients/AbstractClient.js");
+const AwsConfigClientContext_js_1 = require("../AwsConfigClientContext.js");
+/**
+ * AWS Config-based DynamoDB client implementation
+ *
+ * Since policies are not available in AWS Config, this client provides limited functionality
+ * and returns empty results for all operations.
+ */
+class AwsConfigDynamoDBClient extends AbstractClient_js_1.AbstractClient {
+    static clientName = client_dynamodb_1.DynamoDBClient.name;
+    constructor(options, customContext) {
+        super(options, customContext);
+    }
+    /**
+     * Register all DynamoDB command implementations
+     */
+    registerCommands() {
+        this.registerCommand(AwsConfigListTablesCommand);
+        this.registerCommand(AwsConfigListTagsOfResourceCommand);
+    }
+}
+exports.AwsConfigDynamoDBClient = AwsConfigDynamoDBClient;
+/**
+ * Config-based implementation of DynamoDB ListTablesCommand
+ *
+ * Note: DynamoDB resource policies are not available in AWS Config.
+ * Without policy data, this service provides no meaningful value for IAM analysis.
+ * Returning empty result to indicate no actionable data available.
+ */
+const AwsConfigListTablesCommand = (0, AwsConfigClientContext_js_1.awsConfigCommand)({
+    command: client_dynamodb_1.ListTablesCommand,
+    execute: async (input, context) => {
+        // Note: DynamoDB resource policies are not available in AWS Config.
+        // Without policy data, this service provides no meaningful value for IAM analysis.
+        return {
+            TableNames: [] // Empty - no actionable data without policies
+        };
+    }
+});
+/**
+ * Config-based implementation of DynamoDB ListTagsOfResourceCommand
+ *
+ * Note: DynamoDB resource policies are not available in AWS Config.
+ * Without policy data, tag information provides no meaningful value for IAM analysis.
+ * Returning empty result to indicate no actionable data available.
+ */
+const AwsConfigListTagsOfResourceCommand = (0, AwsConfigClientContext_js_1.awsConfigCommand)({
+    command: client_dynamodb_1.ListTagsOfResourceCommand,
+    execute: async (input, context) => {
+        // Note: Without resource policies, tag information provides no IAM analysis value
+        return {
+            Tags: [] // Empty - no actionable data without policies
+        };
+    }
+});
+//# sourceMappingURL=AwsConfigDynamoDBClient.js.map

package/dist/cjs/awsConfigClients/clients/AwsConfigDynamoDBClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigDynamoDBClient.js","sourceRoot":"","sources":["../../../../src/awsConfigClients/clients/AwsConfigDynamoDBClient.ts"],"names":[],"mappings":";;;AAAA,8DAIiC;AAEjC,6EAAsE;AACtE,4EAAuF;AAEvF;;;;;GAKG;AACH,MAAa,uBAAwB,SAAQ,kCAAsC;IACjF,MAAM,CAAU,UAAU,GAAG,gCAAc,CAAC,IAAI,CAAA;IAEhD,YACE,OAGC,EACD,aAAqC;QAErC,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;IAC/B,CAAC;IAED;;OAEG;IACO,gBAAgB;QACxB,IAAI,CAAC,eAAe,CAAC,0BAA0B,CAAC,CAAA;QAChD,IAAI,CAAC,eAAe,CAAC,kCAAkC,CAAC,CAAA;IAC1D,CAAC;;AAnBH,0DAoBC;AAED;;;;;;GAMG;AACH,MAAM,0BAA0B,GAAG,IAAA,4CAAgB,EAAC;IAClD,OAAO,EAAE,mCAAiB;IAC1B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,oEAAoE;QACpE,mFAAmF;QACnF,OAAO;YACL,UAAU,EAAE,EAAE,CAAC,8CAA8C;SAC9D,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;;;;;GAMG;AACH,MAAM,kCAAkC,GAAG,IAAA,4CAAgB,EAAC;IAC1D,OAAO,EAAE,2CAAyB;IAClC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,kFAAkF;QAClF,OAAO;YACL,IAAI,EAAE,EAAE,CAAC,8CAA8C;SACxD,CAAA;IACH,CAAC;CACF,CAAC,CAAA"}

package/dist/cjs/awsConfigClients/clients/AwsConfigEC2Client.d.ts

@@ -0,0 +1,18 @@
+import { AwsCredentialIdentityWithMetaData } from '../../aws/coreAuth.js';
+import { AbstractClient } from '../../customClients/AbstractClient.js';
+import { AwsConfigClientContext } from '../AwsConfigClientContext.js';
+/**
+ * AWS Config-based EC2 client implementation
+ */
+export declare class AwsConfigEC2Client extends AbstractClient<AwsConfigClientContext> {
+    static readonly clientName: string;
+    constructor(options: {
+        credentials: AwsCredentialIdentityWithMetaData;
+        region: string | undefined;
+    }, customContext: AwsConfigClientContext);
+    /**
+     * Register all EC2 command implementations
+     */
+    protected registerCommands(): void;
+}
+//# sourceMappingURL=AwsConfigEC2Client.d.ts.map

package/dist/cjs/awsConfigClients/clients/AwsConfigEC2Client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigEC2Client.d.ts","sourceRoot":"","sources":["../../../../src/awsConfigClients/clients/AwsConfigEC2Client.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iCAAiC,EAAE,MAAM,uBAAuB,CAAA;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAA;AACtE,OAAO,EAAE,sBAAsB,EAAoB,MAAM,8BAA8B,CAAA;AAOvF;;GAEG;AACH,qBAAa,kBAAmB,SAAQ,cAAc,CAAC,sBAAsB,CAAC;IAC5E,MAAM,CAAC,QAAQ,CAAC,UAAU,SAAiB;gBAGzC,OAAO,EAAE;QACP,WAAW,EAAE,iCAAiC,CAAA;QAC9C,MAAM,EAAE,MAAM,GAAG,SAAS,CAAA;KAC3B,EACD,aAAa,EAAE,sBAAsB;IAKvC;;OAEG;IACH,SAAS,CAAC,gBAAgB,IAAI,IAAI;CAGnC"}

package/dist/cjs/awsConfigClients/clients/AwsConfigEC2Client.js

@@ -0,0 +1,61 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AwsConfigEC2Client = void 0;
+const client_ec2_1 = require("@aws-sdk/client-ec2");
+const AbstractClient_js_1 = require("../../customClients/AbstractClient.js");
+const AwsConfigClientContext_js_1 = require("../AwsConfigClientContext.js");
+const awsConfigUtils_js_1 = require("../awsConfigUtils.js");
+/**
+ * AWS Config-based EC2 client implementation
+ */
+class AwsConfigEC2Client extends AbstractClient_js_1.AbstractClient {
+    static clientName = client_ec2_1.EC2Client.name;
+    constructor(options, customContext) {
+        super(options, customContext);
+    }
+    /**
+     * Register all EC2 command implementations
+     */
+    registerCommands() {
+        this.registerCommand(AwsConfigDescribeVpcEndpointsCommand);
+    }
+}
+exports.AwsConfigEC2Client = AwsConfigEC2Client;
+/**
+ * Config-based implementation of EC2 DescribeVpcEndpointsCommand
+ * Retrieves VPC endpoint information including endpoint policies from AWS Config
+ */
+const AwsConfigDescribeVpcEndpointsCommand = (0, AwsConfigClientContext_js_1.awsConfigCommand)({
+    command: client_ec2_1.DescribeVpcEndpointsCommand,
+    execute: async (input, context) => {
+        let query = `
+      SELECT
+        configuration.vpcEndpointId,
+        configuration.vpcEndpointType,
+        configuration.serviceName,
+        configuration.policyDocument
+      WHERE
+        resourceType = 'AWS::EC2::VPCEndpoint'
+        AND awsRegion = '${context.region}'
+        AND accountId = '${context.accountId}'
+        AND ${awsConfigUtils_js_1.resourceStatusWhereClause}
+    `;
+        const results = await (0, awsConfigUtils_js_1.executeConfigQuery)(query, context);
+        // Transform Config results to match AWS SDK format with only essential fields
+        const vpcEndpoints = results.map((resultString) => {
+            const { configItem } = (0, awsConfigUtils_js_1.parseConfigItem)(resultString);
+            const config = configItem.configuration || {};
+            return {
+                VpcEndpointId: config.vpcEndpointId,
+                VpcEndpointType: config.vpcEndpointType,
+                ServiceName: config.serviceName,
+                PolicyDocument: config.policyDocument // The endpoint policy as a string
+            };
+        });
+        return {
+            VpcEndpoints: vpcEndpoints,
+            NextToken: undefined // Config doesn't support pagination in this context
+        };
+    }
+});
+//# sourceMappingURL=AwsConfigEC2Client.js.map

package/dist/cjs/awsConfigClients/clients/AwsConfigEC2Client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigEC2Client.js","sourceRoot":"","sources":["../../../../src/awsConfigClients/clients/AwsConfigEC2Client.ts"],"names":[],"mappings":";;;AAAA,oDAA4E;AAE5E,6EAAsE;AACtE,4EAAuF;AACvF,4DAI6B;AAE7B;;GAEG;AACH,MAAa,kBAAmB,SAAQ,kCAAsC;IAC5E,MAAM,CAAU,UAAU,GAAG,sBAAS,CAAC,IAAI,CAAA;IAE3C,YACE,OAGC,EACD,aAAqC;QAErC,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;IAC/B,CAAC;IAED;;OAEG;IACO,gBAAgB;QACxB,IAAI,CAAC,eAAe,CAAC,oCAAoC,CAAC,CAAA;IAC5D,CAAC;;AAlBH,gDAmBC;AAED;;;GAGG;AACH,MAAM,oCAAoC,GAAG,IAAA,4CAAgB,EAAC;IAC5D,OAAO,EAAE,wCAA2B;IACpC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,IAAI,KAAK,GAAG;;;;;;;;2BAQW,OAAO,CAAC,MAAM;2BACd,OAAO,CAAC,SAAS;cAC9B,6CAAyB;KAClC,CAAA;QAED,MAAM,OAAO,GAAG,MAAM,IAAA,sCAAkB,EAAC,KAAK,EAAE,OAAO,CAAC,CAAA;QAExD,8EAA8E;QAC9E,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,YAAoB,EAAE,EAAE;YACxD,MAAM,EAAE,UAAU,EAAE,GAAG,IAAA,mCAAe,EAAC,YAAY,CAAC,CAAA;YACpD,MAAM,MAAM,GAAG,UAAU,CAAC,aAAa,IAAI,EAAE,CAAA;YAE7C,OAAO;gBACL,aAAa,EAAE,MAAM,CAAC,aAAa;gBACnC,eAAe,EAAE,MAAM,CAAC,eAAe;gBACvC,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,cAAc,EAAE,MAAM,CAAC,cAAc,CAAC,kCAAkC;aACzE,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,OAAO;YACL,YAAY,EAAE,YAAY;YAC1B,SAAS,EAAE,SAAS,CAAC,oDAAoD;SAC1E,CAAA;IACH,CAAC;CACF,CAAC,CAAA"}

package/dist/cjs/awsConfigClients/clients/AwsConfigEcrClient.d.ts

@@ -0,0 +1,18 @@
+import { AwsCredentialIdentityWithMetaData } from '../../aws/coreAuth.js';
+import { AbstractClient } from '../../customClients/AbstractClient.js';
+import { AwsConfigClientContext } from '../AwsConfigClientContext.js';
+/**
+ * Config-based ECR client implementation
+ */
+export declare class AwsConfigEcrClient extends AbstractClient<AwsConfigClientContext> {
+    static readonly clientName: string;
+    constructor(options: {
+        credentials: AwsCredentialIdentityWithMetaData;
+        region: string | undefined;
+    }, customContext: AwsConfigClientContext);
+    /**
+     * Register all ECR command implementations
+     */
+    protected registerCommands(): void;
+}
+//# sourceMappingURL=AwsConfigEcrClient.d.ts.map

package/dist/cjs/awsConfigClients/clients/AwsConfigEcrClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigEcrClient.d.ts","sourceRoot":"","sources":["../../../../src/awsConfigClients/clients/AwsConfigEcrClient.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,iCAAiC,EAAE,MAAM,uBAAuB,CAAA;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAA;AAEtE,OAAO,EAAE,sBAAsB,EAAoB,MAAM,8BAA8B,CAAA;AAOvF;;GAEG;AACH,qBAAa,kBAAmB,SAAQ,cAAc,CAAC,sBAAsB,CAAC;IAC5E,MAAM,CAAC,QAAQ,CAAC,UAAU,SAAiB;gBAGzC,OAAO,EAAE;QACP,WAAW,EAAE,iCAAiC,CAAA;QAC9C,MAAM,EAAE,MAAM,GAAG,SAAS,CAAA;KAC3B,EACD,aAAa,EAAE,sBAAsB;IAKvC;;OAEG;IACH,SAAS,CAAC,gBAAgB,IAAI,IAAI;CAMnC"}

package/dist/cjs/awsConfigClients/clients/AwsConfigEcrClient.js

@@ -0,0 +1,122 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AwsConfigEcrClient = void 0;
+const client_ecr_1 = require("@aws-sdk/client-ecr");
+const AbstractClient_js_1 = require("../../customClients/AbstractClient.js");
+const json_js_1 = require("../../utils/json.js");
+const AwsConfigClientContext_js_1 = require("../AwsConfigClientContext.js");
+const awsConfigUtils_js_1 = require("../awsConfigUtils.js");
+/**
+ * Config-based ECR client implementation
+ */
+class AwsConfigEcrClient extends AbstractClient_js_1.AbstractClient {
+    static clientName = client_ecr_1.ECRClient.name;
+    constructor(options, customContext) {
+        super(options, customContext);
+    }
+    /**
+     * Register all ECR command implementations
+     */
+    registerCommands() {
+        this.registerCommand(AwsConfigDescribeRepositoriesCommand);
+        this.registerCommand(AwsConfigGetRepositoryPolicyCommand);
+        this.registerCommand(AwsConfigListTagsForResourceCommand);
+        this.registerCommand(AwsConfigGetRegistryPolicyCommand);
+    }
+}
+exports.AwsConfigEcrClient = AwsConfigEcrClient;
+/**
+ * Config-based implementation of ECR GetRegistryPolicyCommand
+ * Uses AWS::ECR::RegistryPolicy resource type from Config
+ */
+const AwsConfigGetRegistryPolicyCommand = (0, AwsConfigClientContext_js_1.awsConfigCommand)({
+    command: client_ecr_1.GetRegistryPolicyCommand,
+    execute: async (input, context) => {
+        const query = `
+      SELECT
+        configuration.PolicyText
+      WHERE
+        resourceType = 'AWS::ECR::RegistryPolicy'
+        AND accountId = '${context.accountId}'
+        AND awsRegion = '${context.region}'
+        AND ${awsConfigUtils_js_1.resourceStatusWhereClause}
+    `;
+        const results = await (0, awsConfigUtils_js_1.executeConfigQuery)(query, context);
+        if (results.length === 0) {
+            // Return undefined when no registry policy is configured
+            return {
+                policyText: undefined
+            };
+        }
+        const { configuration } = (0, awsConfigUtils_js_1.parseConfigItem)(results[0]);
+        return {
+            policyText: configuration?.PolicyText ? JSON.stringify(configuration.PolicyText) : undefined
+        };
+    }
+});
+/**
+ * Config-based implementation of ECR DescribeRepositoriesCommand
+ *
+ * Note: Without repository policies, repository listing provides no meaningful IAM analysis value.
+ * ECR is primarily used for policy analysis, but policies are not available in Config.
+ * Returning empty result to indicate no actionable data available.
+ */
+const AwsConfigDescribeRepositoriesCommand = (0, AwsConfigClientContext_js_1.awsConfigCommand)({
+    command: client_ecr_1.DescribeRepositoriesCommand,
+    execute: async (input, context) => {
+        const sql = `
+    SELECT
+      resourceId,
+      arn,
+      configuration.RepositoryName,
+      configuration.RepositoryPolicyText,
+      tags
+    WHERE
+      resourceType = 'AWS::ECR::Repository'
+      AND awsRegion = '${context.region}'
+      AND accountId = '${context.accountId}'
+      AND ${awsConfigUtils_js_1.resourceStatusWhereClause}
+    `;
+        const results = await (0, awsConfigUtils_js_1.executeConfigQuery)(sql, context);
+        const repositories = results.map((resultString) => {
+            const { configItem, configuration, tags } = (0, awsConfigUtils_js_1.parseConfigItem)(resultString);
+            // Cache data that will be needed by other commands
+            context.putCache(configItem.resourceId, 'configuration', configuration);
+            // Also cache by ARN for ListTagsForResourceCommand
+            context.putCache(configItem.arn, 'configuration', configuration);
+            return {
+                repositoryName: configuration.RepositoryName
+            };
+        });
+        return {
+            repositories
+        };
+    }
+});
+/**
+ * Config-based implementation of ECR GetRepositoryPolicyCommand
+ *
+ */
+const AwsConfigGetRepositoryPolicyCommand = (0, AwsConfigClientContext_js_1.awsConfigCommand)({
+    command: client_ecr_1.GetRepositoryPolicyCommand,
+    execute: async (input, context) => {
+        const configuration = context.getCache(input.repositoryName, 'configuration');
+        return {
+            policyText: (0, json_js_1.stringifyIfPresent)(configuration?.RepositoryPolicyText)
+        };
+    }
+});
+/**
+ * Config-based implementation of ECR ListTagsForResourceCommand
+ *
+ */
+const AwsConfigListTagsForResourceCommand = (0, AwsConfigClientContext_js_1.awsConfigCommand)({
+    command: client_ecr_1.ListTagsForResourceCommand,
+    execute: async (input, context) => {
+        const tags = context.getCache(input.resourceArn, 'tags');
+        return {
+            tags: tags
+        };
+    }
+});
+//# sourceMappingURL=AwsConfigEcrClient.js.map

package/dist/cjs/awsConfigClients/clients/AwsConfigEcrClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigEcrClient.js","sourceRoot":"","sources":["../../../../src/awsConfigClients/clients/AwsConfigEcrClient.ts"],"names":[],"mappings":";;;AAAA,oDAM4B;AAE5B,6EAAsE;AACtE,iDAAwD;AACxD,4EAAuF;AACvF,4DAI6B;AAE7B;;GAEG;AACH,MAAa,kBAAmB,SAAQ,kCAAsC;IAC5E,MAAM,CAAU,UAAU,GAAG,sBAAS,CAAC,IAAI,CAAA;IAE3C,YACE,OAGC,EACD,aAAqC;QAErC,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;IAC/B,CAAC;IAED;;OAEG;IACO,gBAAgB;QACxB,IAAI,CAAC,eAAe,CAAC,oCAAoC,CAAC,CAAA;QAC1D,IAAI,CAAC,eAAe,CAAC,mCAAmC,CAAC,CAAA;QACzD,IAAI,CAAC,eAAe,CAAC,mCAAmC,CAAC,CAAA;QACzD,IAAI,CAAC,eAAe,CAAC,iCAAiC,CAAC,CAAA;IACzD,CAAC;;AArBH,gDAsBC;AAED;;;GAGG;AACH,MAAM,iCAAiC,GAAG,IAAA,4CAAgB,EAAC;IACzD,OAAO,EAAE,qCAAwB;IACjC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,KAAK,GAAG;;;;;2BAKS,OAAO,CAAC,SAAS;2BACjB,OAAO,CAAC,MAAM;cAC3B,6CAAyB;KAClC,CAAA;QAED,MAAM,OAAO,GAAG,MAAM,IAAA,sCAAkB,EAAC,KAAK,EAAE,OAAO,CAAC,CAAA;QAExD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,yDAAyD;YACzD,OAAO;gBACL,UAAU,EAAE,SAAS;aACtB,CAAA;QACH,CAAC;QAED,MAAM,EAAE,aAAa,EAAE,GAAG,IAAA,mCAAe,EAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAA;QAErD,OAAO;YACL,UAAU,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;SAC7F,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;;;;;GAMG;AACH,MAAM,oCAAoC,GAAG,IAAA,4CAAgB,EAAC;IAC5D,OAAO,EAAE,wCAA2B;IACpC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,GAAG,GAAG;;;;;;;;;yBASS,OAAO,CAAC,MAAM;yBACd,OAAO,CAAC,SAAS;YAC9B,6CAAyB;KAChC,CAAA;QACD,MAAM,OAAO,GAAG,MAAM,IAAA,sCAAkB,EAAC,GAAG,EAAE,OAAO,CAAC,CAAA;QAEtD,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,YAAoB,EAAE,EAAE;YACxD,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,IAAA,mCAAe,EAAC,YAAY,CAAC,CAAA;YAEzE,mDAAmD;YACnD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,EAAE,eAAe,EAAE,aAAa,CAAC,CAAA;YACvE,mDAAmD;YACnD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,EAAE,eAAe,EAAE,aAAa,CAAC,CAAA;YAEhE,OAAO;gBACL,cAAc,EAAE,aAAa,CAAC,cAAc;aAC7C,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,OAAO;YACL,YAAY;SACb,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,mCAAmC,GAAG,IAAA,4CAAgB,EAAC;IAC3D,OAAO,EAAE,uCAA0B;IACnC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAe,EAAE,eAAe,CAAC,CAAA;QAE9E,OAAO;YACL,UAAU,EAAE,IAAA,4BAAkB,EAAC,aAAa,EAAE,oBAAoB,CAAC;SACpE,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,mCAAmC,GAAG,IAAA,4CAAgB,EAAC;IAC3D,OAAO,EAAE,uCAA0B;IACnC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAY,EAAE,MAAM,CAAC,CAAA;QAEzD,OAAO;YACL,IAAI,EAAE,IAAI;SACX,CAAA;IACH,CAAC;CACF,CAAC,CAAA"}

package/dist/cjs/awsConfigClients/clients/AwsConfigEfsClient.d.ts

@@ -0,0 +1,18 @@
+import { AwsCredentialIdentityWithMetaData } from '../../aws/coreAuth.js';
+import { AbstractClient } from '../../customClients/AbstractClient.js';
+import { AwsConfigClientContext } from '../AwsConfigClientContext.js';
+/**
+ * AWS Config-based EFS client implementation
+ */
+export declare class AwsConfigEfsClient extends AbstractClient<AwsConfigClientContext> {
+    static readonly clientName: string;
+    constructor(options: {
+        credentials: AwsCredentialIdentityWithMetaData;
+        region: string | undefined;
+    }, customContext: AwsConfigClientContext);
+    /**
+     * Register all EFS command implementations
+     */
+    protected registerCommands(): void;
+}
+//# sourceMappingURL=AwsConfigEfsClient.d.ts.map

package/dist/cjs/awsConfigClients/clients/AwsConfigEfsClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigEfsClient.d.ts","sourceRoot":"","sources":["../../../../src/awsConfigClients/clients/AwsConfigEfsClient.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,iCAAiC,EAAE,MAAM,uBAAuB,CAAA;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAA;AAEtE,OAAO,EAAE,sBAAsB,EAAoB,MAAM,8BAA8B,CAAA;AAOvF;;GAEG;AACH,qBAAa,kBAAmB,SAAQ,cAAc,CAAC,sBAAsB,CAAC;IAC5E,MAAM,CAAC,QAAQ,CAAC,UAAU,SAAiB;gBAGzC,OAAO,EAAE;QACP,WAAW,EAAE,iCAAiC,CAAA;QAC9C,MAAM,EAAE,MAAM,GAAG,SAAS,CAAA;KAC3B,EACD,aAAa,EAAE,sBAAsB;IAKvC;;OAEG;IACH,SAAS,CAAC,gBAAgB,IAAI,IAAI;CAInC"}

package/dist/cjs/awsConfigClients/clients/AwsConfigEfsClient.js

@@ -0,0 +1,89 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AwsConfigEfsClient = void 0;
+const client_efs_1 = require("@aws-sdk/client-efs");
+const AbstractClient_js_1 = require("../../customClients/AbstractClient.js");
+const json_js_1 = require("../../utils/json.js");
+const AwsConfigClientContext_js_1 = require("../AwsConfigClientContext.js");
+const awsConfigUtils_js_1 = require("../awsConfigUtils.js");
+/**
+ * AWS Config-based EFS client implementation
+ */
+class AwsConfigEfsClient extends AbstractClient_js_1.AbstractClient {
+    static clientName = client_efs_1.EFSClient.name;
+    constructor(options, customContext) {
+        super(options, customContext);
+    }
+    /**
+     * Register all EFS command implementations
+     */
+    registerCommands() {
+        this.registerCommand(AwsConfigDescribeFileSystemsCommand);
+        this.registerCommand(AwsConfigDescribeFileSystemPolicyCommand);
+    }
+}
+exports.AwsConfigEfsClient = AwsConfigEfsClient;
+/**
+ * Config-based implementation of EFS DescribeFileSystemPolicyCommand
+ * Uses configuration.FileSystemPolicy from AWS Config
+ */
+const AwsConfigDescribeFileSystemPolicyCommand = (0, AwsConfigClientContext_js_1.awsConfigCommand)({
+    command: client_efs_1.DescribeFileSystemPolicyCommand,
+    execute: async (input, context) => {
+        const configuration = context.getCache(input.FileSystemId, 'configuration');
+        return {
+            FileSystemId: input.FileSystemId,
+            Policy: (0, json_js_1.stringifyIfPresent)(configuration?.FileSystemPolicy)
+        };
+    }
+});
+/**
+ * Config-based implementation of EFS DescribeFileSystemsCommand
+ * Retrieves file system information from AWS Config with minimal required fields
+ */
+const AwsConfigDescribeFileSystemsCommand = (0, AwsConfigClientContext_js_1.awsConfigCommand)({
+    command: client_efs_1.DescribeFileSystemsCommand,
+    execute: async (input, context) => {
+        let query = `
+      SELECT
+        resourceId,
+        arn,
+        configuration.Name,
+        configuration.AvailabilityZoneId,
+        configuration.KmsKeyId,
+        configuration.Encrypted,
+        configuration.CreationTime,
+        configuration.FileSystemPolicy,
+        tags
+      WHERE
+        resourceType = 'AWS::EFS::FileSystem'
+        AND awsRegion = '${context.region}'
+        AND accountId = '${context.accountId}'
+        AND ${awsConfigUtils_js_1.resourceStatusWhereClause}
+    `;
+        // Add specific file system ID filter if provided
+        if (input.FileSystemId) {
+            query += ` AND resourceId = '${input.FileSystemId}'`;
+        }
+        const results = await (0, awsConfigUtils_js_1.executeConfigQuery)(query, context);
+        // Transform Config results to match AWS SDK format with minimal required fields
+        const fileSystems = results.map((resultString) => {
+            const { configItem, configuration, tags } = (0, awsConfigUtils_js_1.parseConfigItem)(resultString);
+            // Cache data that will be needed by other commands
+            context.putCache(configItem.resourceId, 'configuration', configuration);
+            return {
+                FileSystemId: configItem.resourceId,
+                FileSystemArn: configItem.arn,
+                Name: configuration.Name,
+                Encrypted: configuration.Encrypted || false,
+                KmsKeyId: configuration.KmsKeyId,
+                AvailabilityZoneId: configuration.AvailabilityZoneId,
+                Tags: tags
+            };
+        });
+        return {
+            FileSystems: fileSystems
+        };
+    }
+});
+//# sourceMappingURL=AwsConfigEfsClient.js.map

package/dist/cjs/awsConfigClients/clients/AwsConfigEfsClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigEfsClient.js","sourceRoot":"","sources":["../../../../src/awsConfigClients/clients/AwsConfigEfsClient.ts"],"names":[],"mappings":";;;AAAA,oDAK4B;AAE5B,6EAAsE;AACtE,iDAAwD;AACxD,4EAAuF;AACvF,4DAI6B;AAE7B;;GAEG;AACH,MAAa,kBAAmB,SAAQ,kCAAsC;IAC5E,MAAM,CAAU,UAAU,GAAG,sBAAS,CAAC,IAAI,CAAA;IAE3C,YACE,OAGC,EACD,aAAqC;QAErC,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;IAC/B,CAAC;IAED;;OAEG;IACO,gBAAgB;QACxB,IAAI,CAAC,eAAe,CAAC,mCAAmC,CAAC,CAAA;QACzD,IAAI,CAAC,eAAe,CAAC,wCAAwC,CAAC,CAAA;IAChE,CAAC;;AAnBH,gDAoBC;AAED;;;GAGG;AACH,MAAM,wCAAwC,GAAG,IAAA,4CAAgB,EAAC;IAChE,OAAO,EAAE,4CAA+B;IACxC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAa,EAAE,eAAe,CAAC,CAAA;QAE5E,OAAO;YACL,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,MAAM,EAAE,IAAA,4BAAkB,EAAC,aAAa,EAAE,gBAAgB,CAAC;SAC5D,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,mCAAmC,GAAG,IAAA,4CAAgB,EAAC;IAC3D,OAAO,EAAE,uCAA0B;IACnC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChC,IAAI,KAAK,GAAG;;;;;;;;;;;;;2BAaW,OAAO,CAAC,MAAM;2BACd,OAAO,CAAC,SAAS;cAC9B,6CAAyB;KAClC,CAAA;QAED,iDAAiD;QACjD,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;YACvB,KAAK,IAAI,sBAAsB,KAAK,CAAC,YAAY,GAAG,CAAA;QACtD,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAA,sCAAkB,EAAC,KAAK,EAAE,OAAO,CAAC,CAAA;QAExD,gFAAgF;QAChF,MAAM,WAAW,GAA4B,OAAO,CAAC,GAAG,CAAC,CAAC,YAAoB,EAAE,EAAE;YAChF,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,IAAA,mCAAe,EAAC,YAAY,CAAC,CAAA;YAEzE,mDAAmD;YACnD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,EAAE,eAAe,EAAE,aAAa,CAAC,CAAA;YAEvE,OAAO;gBACL,YAAY,EAAE,UAAU,CAAC,UAAU;gBACnC,aAAa,EAAE,UAAU,CAAC,GAAG;gBAC7B,IAAI,EAAE,aAAa,CAAC,IAAI;gBACxB,SAAS,EAAE,aAAa,CAAC,SAAS,IAAI,KAAK;gBAC3C,QAAQ,EAAE,aAAa,CAAC,QAAQ;gBAChC,kBAAkB,EAAE,aAAa,CAAC,kBAAkB;gBACpD,IAAI,EAAE,IAAI;aACc,CAAA;QAC5B,CAAC,CAAC,CAAA;QAEF,OAAO;YACL,WAAW,EAAE,WAAW;SACzB,CAAA;IACH,CAAC;CACF,CAAC,CAAA"}

package/dist/cjs/awsConfigClients/clients/AwsConfigEventBridgeClient.d.ts

@@ -0,0 +1,19 @@
+import { AwsCredentialIdentityWithMetaData } from '../../aws/coreAuth.js';
+import { AbstractClient } from '../../customClients/AbstractClient.js';
+import { AwsConfigClientContext } from '../AwsConfigClientContext.js';
+/**
+ * AWS Config-based EventBridge client implementation
+ *
+ */
+export declare class AwsConfigEventBridgeClient extends AbstractClient<AwsConfigClientContext> {
+    static readonly clientName: string;
+    constructor(options: {
+        credentials: AwsCredentialIdentityWithMetaData;
+        region: string | undefined;
+    }, customContext: AwsConfigClientContext);
+    /**
+     * Register all EventBridge command implementations
+     */
+    protected registerCommands(): void;
+}
+//# sourceMappingURL=AwsConfigEventBridgeClient.d.ts.map

package/dist/cjs/awsConfigClients/clients/AwsConfigEventBridgeClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AwsConfigEventBridgeClient.d.ts","sourceRoot":"","sources":["../../../../src/awsConfigClients/clients/AwsConfigEventBridgeClient.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,iCAAiC,EAAE,MAAM,uBAAuB,CAAA;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAA;AACtE,OAAO,EAAE,sBAAsB,EAAoB,MAAM,8BAA8B,CAAA;AAOvF;;;GAGG;AACH,qBAAa,0BAA2B,SAAQ,cAAc,CAAC,sBAAsB,CAAC;IACpF,MAAM,CAAC,QAAQ,CAAC,UAAU,SAAyB;gBAGjD,OAAO,EAAE;QACP,WAAW,EAAE,iCAAiC,CAAA;QAC9C,MAAM,EAAE,MAAM,GAAG,SAAS,CAAA;KAC3B,EACD,aAAa,EAAE,sBAAsB;IAKvC;;OAEG;IACH,SAAS,CAAC,gBAAgB,IAAI,IAAI;CAKnC"}