@mtndev/cli 0.0.0-dev-20260626045346 → 0.0.0-dev-20260914234436

package/cjs/__chunks/YRHFKTW2.cjs

@@ -0,0 +1,63 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireWildcard(obj) { if (obj && obj.__esModule) { return obj; } else { var newObj = {}; if (obj != null) { for (var key in obj) { if (Object.prototype.hasOwnProperty.call(obj, key)) { newObj[key] = obj[key]; } } } newObj.default = obj; return newObj; } } function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } }
+
+
+var _GUL36IFZcjs = require('./GUL36IFZ.cjs');
+
+// src/commands/aws/ses/send-email/utils.js
+var _crypto = require('crypto');
+function defaultBody() {
+  const token = _crypto.randomBytes.call(void 0, 16).toString("hex");
+  const sentAt = (/* @__PURE__ */ new Date()).toISOString();
+  return `MTN CLI test email \u2014 random token: ${token} \u2014 sent at ${sentAt}`;
+}
+async function sendViaApi(params) {
+  const { to, from, subject, body, region, profile } = params;
+  const { SESClient, SendEmailCommand } = await Promise.resolve().then(() => _interopRequireWildcard(require("@aws-sdk/client-ses")));
+  const { fromNodeProviderChain } = await Promise.resolve().then(() => _interopRequireWildcard(require("@aws-sdk/credential-providers")));
+  const client = new SESClient({
+    region,
+    credentials: fromNodeProviderChain(profile ? { profile } : {})
+  });
+  const command = new SendEmailCommand({
+    Source: from,
+    Destination: { ToAddresses: [to] },
+    Message: {
+      Subject: { Data: subject },
+      Body: { Text: { Data: body } }
+    }
+  });
+  const result = await client.send(command);
+  return result.MessageId;
+}
+async function sendViaSmtp(params) {
+  const { to, from, subject, body, region, accessKeyId } = params;
+  const user = _nullishCoalesce(process.env.SES_SMTP_USER, () => ( accessKeyId));
+  let pass = process.env.SES_SMTP_PASSWORD;
+  if (!pass) {
+    const secret = process.env.AWS_SECRET_ACCESS_KEY;
+    if (secret) {
+      pass = _GUL36IFZcjs.calculateSmtpPassword.call(void 0, { secretAccessKey: secret, region });
+    }
+  }
+  if (!user || !pass) {
+    throw new Error(
+      "SMTP transport requires SES_SMTP_USER and SES_SMTP_PASSWORD, or AWS_SECRET_ACCESS_KEY (plus --access-key-id) to derive the SMTP password."
+    );
+  }
+  const nodemailerModule = await Promise.resolve().then(() => _interopRequireWildcard(require("nodemailer")));
+  const nodemailer = _nullishCoalesce(nodemailerModule.default, () => ( nodemailerModule));
+  const transporter = nodemailer.createTransport({
+    host: _GUL36IFZcjs.smtpEndpoint.call(void 0, region),
+    port: 587,
+    secure: false,
+    auth: { user, pass }
+  });
+  const info = await transporter.sendMail({ from, to, subject, text: body });
+  return info.messageId;
+}
+
+
+
+
+
+exports.defaultBody = defaultBody; exports.sendViaApi = sendViaApi; exports.sendViaSmtp = sendViaSmtp;

package/cjs/commands/aws/ec2/allow-ip/handler.cjs

@@ -0,0 +1,12 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+var _WHGN5PZIcjs = require('../../../../__chunks/WHGN5PZI.cjs');
+require('../../../../__chunks/B5ENMOCD.cjs');
+require('../../../../__chunks/G5K4PVIL.cjs');
+require('../../../../__chunks/R3GUC7O7.cjs');
+require('../../../../__chunks/NT2XXAI6.cjs');
+require('../../../../__chunks/WOYF2L6T.cjs');
+require('../../../../__chunks/CMUD7LLN.cjs');
+
+
+exports.allowIpCommand = _WHGN5PZIcjs.allowIpCommand;

package/cjs/commands/aws/ec2/allow-ip/handler.d.ts

@@ -0,0 +1,6 @@
+/**
+ * `aws ec2 allow-ip` handler: update or create a named roaming SSH rule for the
+ * caller's current public IP on a chosen EC2 instance's security group.
+ * @param {unknown} options
+ */
+export function allowIpCommand(options: unknown): Promise<void>;

package/cjs/commands/aws/ec2/allow-ip/index.cjs

@@ -0,0 +1,55 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});require('../../../../__chunks/FU4VP2LN.cjs');
+
+
+var _WHGN5PZIcjs = require('../../../../__chunks/WHGN5PZI.cjs');
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+var _B5ENMOCDcjs = require('../../../../__chunks/B5ENMOCD.cjs');
+
+
+
+
+
+var _G5K4PVILcjs = require('../../../../__chunks/G5K4PVIL.cjs');
+require('../../../../__chunks/R3GUC7O7.cjs');
+require('../../../../__chunks/NT2XXAI6.cjs');
+require('../../../../__chunks/WOYF2L6T.cjs');
+require('../../../../__chunks/CMUD7LLN.cjs');
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+exports.DEFAULT_REGION = _G5K4PVILcjs.DEFAULT_REGION; exports.DEFAULT_ROAMING_NAME = _G5K4PVILcjs.DEFAULT_ROAMING_NAME; exports.SSH_PORT = _G5K4PVILcjs.SSH_PORT; exports.allowIpCommand = _WHGN5PZIcjs.allowIpCommand; exports.allowIpOptionsSchema = _G5K4PVILcjs.allowIpOptionsSchema; exports.authorizeRule = _B5ENMOCDcjs.authorizeRule; exports.describeSecurityGroups = _B5ENMOCDcjs.describeSecurityGroups; exports.extractRoamingFirstName = _B5ENMOCDcjs.extractRoamingFirstName; exports.getCurrentPublicIp = _B5ENMOCDcjs.getCurrentPublicIp; exports.getSecurityGroupDetails = _B5ENMOCDcjs.getSecurityGroupDetails; exports.instanceLabel = _B5ENMOCDcjs.instanceLabel; exports.listEnabledRegions = _B5ENMOCDcjs.listEnabledRegions; exports.listInstances = _B5ENMOCDcjs.listInstances; exports.listSshIngressRules = _B5ENMOCDcjs.listSshIngressRules; exports.printSshRules = _B5ENMOCDcjs.printSshRules; exports.resolveRoamingRule = _B5ENMOCDcjs.resolveRoamingRule; exports.revokeRule = _B5ENMOCDcjs.revokeRule; exports.roamingRuleDescription = _B5ENMOCDcjs.roamingRuleDescription; exports.ruleAlreadyAllowsIp = _B5ENMOCDcjs.ruleAlreadyAllowsIp; exports.securityGroupLabel = _B5ENMOCDcjs.securityGroupLabel; exports.sshRuleLabel = _B5ENMOCDcjs.sshRuleLabel;

package/cjs/commands/aws/ec2/allow-ip/index.d.ts

@@ -0,0 +1,3 @@
+export * from "./handler.js";
+export * from "./schema.js";
+export * from "./utils.js";

package/cjs/commands/aws/ec2/allow-ip/schema.cjs

@@ -0,0 +1,13 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+
+
+
+var _G5K4PVILcjs = require('../../../../__chunks/G5K4PVIL.cjs');
+require('../../../../__chunks/WOYF2L6T.cjs');
+
+
+
+
+
+exports.DEFAULT_REGION = _G5K4PVILcjs.DEFAULT_REGION; exports.DEFAULT_ROAMING_NAME = _G5K4PVILcjs.DEFAULT_ROAMING_NAME; exports.SSH_PORT = _G5K4PVILcjs.SSH_PORT; exports.allowIpOptionsSchema = _G5K4PVILcjs.allowIpOptionsSchema;

package/cjs/commands/aws/ec2/allow-ip/schema.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Default region checked first before prompting.
+ */
+export const DEFAULT_REGION: "us-east-1";
+/**
+ * SSH port managed by this command.
+ */
+export const SSH_PORT: 22;
+/**
+ * Fallback first name when one cannot be derived from the profile/IAM user.
+ */
+export const DEFAULT_ROAMING_NAME: "Declan";
+/**
+ * Zod schema for `aws ec2 allow-ip` options.
+ */
+export const allowIpOptionsSchema: z.ZodObject<{
+    profile: z.ZodOptional<z.ZodString>;
+    region: z.ZodOptional<z.ZodString>;
+    ruleName: z.ZodOptional<z.ZodString>;
+    verbose: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+}, "strip", z.ZodTypeAny, {
+    verbose: boolean;
+    profile?: string | undefined;
+    region?: string | undefined;
+    ruleName?: string | undefined;
+}, {
+    profile?: string | undefined;
+    region?: string | undefined;
+    verbose?: boolean | undefined;
+    ruleName?: string | undefined;
+}>;
+export type AllowIpOptions = z.infer<typeof allowIpOptionsSchema>;
+import { z } from "zod";

package/cjs/commands/aws/ec2/allow-ip/utils.cjs

@@ -0,0 +1,39 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+var _B5ENMOCDcjs = require('../../../../__chunks/B5ENMOCD.cjs');
+require('../../../../__chunks/G5K4PVIL.cjs');
+require('../../../../__chunks/R3GUC7O7.cjs');
+require('../../../../__chunks/WOYF2L6T.cjs');
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+exports.authorizeRule = _B5ENMOCDcjs.authorizeRule; exports.describeSecurityGroups = _B5ENMOCDcjs.describeSecurityGroups; exports.extractRoamingFirstName = _B5ENMOCDcjs.extractRoamingFirstName; exports.getCurrentPublicIp = _B5ENMOCDcjs.getCurrentPublicIp; exports.getSecurityGroupDetails = _B5ENMOCDcjs.getSecurityGroupDetails; exports.instanceLabel = _B5ENMOCDcjs.instanceLabel; exports.listEnabledRegions = _B5ENMOCDcjs.listEnabledRegions; exports.listInstances = _B5ENMOCDcjs.listInstances; exports.listSshIngressRules = _B5ENMOCDcjs.listSshIngressRules; exports.printSshRules = _B5ENMOCDcjs.printSshRules; exports.resolveRoamingRule = _B5ENMOCDcjs.resolveRoamingRule; exports.revokeRule = _B5ENMOCDcjs.revokeRule; exports.roamingRuleDescription = _B5ENMOCDcjs.roamingRuleDescription; exports.ruleAlreadyAllowsIp = _B5ENMOCDcjs.ruleAlreadyAllowsIp; exports.securityGroupLabel = _B5ENMOCDcjs.securityGroupLabel; exports.sshRuleLabel = _B5ENMOCDcjs.sshRuleLabel;

package/cjs/commands/aws/ec2/allow-ip/utils.d.ts

@@ -0,0 +1,189 @@
+/**
+ * @typedef {Object} Ec2Instance
+ * @property {string} instanceId
+ * @property {string} name
+ * @property {string} state
+ * @property {string} instanceType
+ * @property {string | null} publicIp
+ * @property {string[]} securityGroupIds
+ */
+/**
+ * @typedef {Object} SecurityGroup
+ * @property {string} groupId
+ * @property {string} groupName
+ * @property {string} description
+ */
+/**
+ * @typedef {Object} SshIngressRule
+ * @property {string} cidrIp
+ * @property {string} description
+ * @property {number} fromPort
+ * @property {number} toPort
+ * @property {string} ipProtocol
+ */
+/**
+ * Determine the caller's current public IPv4 address.
+ * @returns {Promise<string>}
+ */
+export function getCurrentPublicIp(): Promise<string>;
+/**
+ * List regions that are opted-in / enabled for the profile.
+ * @param {{ profile?: string; region: string; verbose?: boolean }} params
+ * @returns {string[]}
+ */
+export function listEnabledRegions(params: {
+    profile?: string;
+    region: string;
+    verbose?: boolean;
+}): string[];
+/**
+ * List non-terminated EC2 instances in a region.
+ * @param {{ profile?: string; region: string; verbose?: boolean }} params
+ * @returns {Ec2Instance[]}
+ */
+export function listInstances(params: {
+    profile?: string;
+    region: string;
+    verbose?: boolean;
+}): Ec2Instance[];
+/**
+ * Describe security groups by id.
+ * @param {{ profile?: string; region: string; groupIds: string[]; verbose?: boolean }} params
+ * @returns {SecurityGroup[]}
+ */
+export function describeSecurityGroups(params: {
+    profile?: string;
+    region: string;
+    groupIds: string[];
+    verbose?: boolean;
+}): SecurityGroup[];
+/**
+ * Load full details for a single security group.
+ * @param {{ profile?: string; region: string; groupId: string; verbose?: boolean }} params
+ * @returns {any | null}
+ */
+export function getSecurityGroupDetails(params: {
+    profile?: string;
+    region: string;
+    groupId: string;
+    verbose?: boolean;
+}): any | null;
+/**
+ * Extract single-host SSH ingress rules (port 22, /32) from a security group.
+ * @param {any} securityGroup
+ * @returns {SshIngressRule[]}
+ */
+export function listSshIngressRules(securityGroup: any): SshIngressRule[];
+/**
+ * Derive a first name from the IAM ARN or profile (md-{name}-...).
+ * @param {{ profile?: string; identity: { Arn?: string } }} params
+ * @returns {string}
+ */
+export function extractRoamingFirstName(params: {
+    profile?: string;
+    identity: {
+        Arn?: string;
+    };
+}): string;
+/**
+ * @param {string} firstName
+ * @returns {string}
+ */
+export function roamingRuleDescription(firstName: string): string;
+/**
+ * Find an existing rule whose description matches the roaming rule name.
+ * @param {SshIngressRule[]} sshRules
+ * @param {string} ruleDescription
+ * @returns {SshIngressRule | null}
+ */
+export function resolveRoamingRule(sshRules: SshIngressRule[], ruleDescription: string): SshIngressRule | null;
+/**
+ * Find an existing rule that already allows the given CIDR.
+ * @param {SshIngressRule[]} sshRules
+ * @param {string} newCidr
+ * @returns {SshIngressRule | null}
+ */
+export function ruleAlreadyAllowsIp(sshRules: SshIngressRule[], newCidr: string): SshIngressRule | null;
+/**
+ * Authorize a new SSH ingress rule.
+ * @param {{
+ *   profile?: string;
+ *   region: string;
+ *   groupId: string;
+ *   cidrIp: string;
+ *   description: string;
+ *   fromPort?: number;
+ *   toPort?: number;
+ *   ipProtocol?: string;
+ *   verbose?: boolean;
+ * }} params
+ */
+export function authorizeRule(params: {
+    profile?: string;
+    region: string;
+    groupId: string;
+    cidrIp: string;
+    description: string;
+    fromPort?: number;
+    toPort?: number;
+    ipProtocol?: string;
+    verbose?: boolean;
+}): void;
+/**
+ * Revoke an existing SSH ingress rule.
+ * @param {{
+ *   profile?: string;
+ *   region: string;
+ *   groupId: string;
+ *   rule: SshIngressRule;
+ *   verbose?: boolean;
+ * }} params
+ */
+export function revokeRule(params: {
+    profile?: string;
+    region: string;
+    groupId: string;
+    rule: SshIngressRule;
+    verbose?: boolean;
+}): void;
+/**
+ * @param {Ec2Instance} instance
+ * @returns {string}
+ */
+export function instanceLabel(instance: Ec2Instance): string;
+/**
+ * @param {SecurityGroup} group
+ * @returns {string}
+ */
+export function securityGroupLabel(group: SecurityGroup): string;
+/**
+ * @param {SshIngressRule} rule
+ * @returns {string}
+ */
+export function sshRuleLabel(rule: SshIngressRule): string;
+/**
+ * Print single-host SSH rules using the given logger.
+ * @param {SshIngressRule[]} sshRules
+ * @param {(message: string) => void} [log]
+ */
+export function printSshRules(sshRules: SshIngressRule[], log?: (message: string) => void): void;
+export type Ec2Instance = {
+    instanceId: string;
+    name: string;
+    state: string;
+    instanceType: string;
+    publicIp: string | null;
+    securityGroupIds: string[];
+};
+export type SecurityGroup = {
+    groupId: string;
+    groupName: string;
+    description: string;
+};
+export type SshIngressRule = {
+    cidrIp: string;
+    description: string;
+    fromPort: number;
+    toPort: number;
+    ipProtocol: string;
+};

package/cjs/commands/aws/iam/admin-group.cjs

@@ -0,0 +1,15 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+
+
+
+
+var _T2A7TN4Fcjs = require('../../../__chunks/T2A7TN4F.cjs');
+require('../../../__chunks/R3GUC7O7.cjs');
+
+
+
+
+
+
+exports.ADMIN_GROUP_NAME = _T2A7TN4Fcjs.ADMIN_GROUP_NAME; exports.groupUserNames = _T2A7TN4Fcjs.groupUserNames; exports.listVaultProfiles = _T2A7TN4Fcjs.listVaultProfiles; exports.resolveAdminScanProfiles = _T2A7TN4Fcjs.resolveAdminScanProfiles; exports.resolveProfileScan = _T2A7TN4Fcjs.resolveProfileScan;

package/cjs/commands/aws/iam/admin-group.d.ts

@@ -0,0 +1,55 @@
+/**
+ * A function bound to a profile's working credential mode (direct or aws-vault).
+ * @typedef {(args: string[], options?: { expectJson?: boolean }) => any} ProfileRunner
+ */
+/**
+ * List aws-vault profiles that have stored credentials.
+ * @returns {string[]}
+ */
+export function listVaultProfiles(): string[];
+/**
+ * Resolve which profiles to scan for admin-group commands.
+ * Uses `--profile`, then `AWS_PROFILE`, for a single profile unless `--all` is set.
+ * @param {{ profile?: string; all?: boolean }} params
+ * @returns {string[]}
+ */
+export function resolveAdminScanProfiles({ profile, all }: {
+    profile?: string;
+    all?: boolean;
+}): string[];
+/**
+ * @param {{ Users?: Array<{ UserName: string }> }} group
+ * @returns {string[]}
+ */
+export function groupUserNames(group: {
+    Users?: Array<{
+        UserName: string;
+    }>;
+}): string[];
+/**
+ * Resolve a working credential runner for a profile and read the admin group.
+ * Tries stored credentials first, then falls back to `aws-vault exec`.
+ * The returned `run` reuses whichever mode worked, so callers can perform
+ * follow-up mutations (e.g. remove-user-from-group) with the same credentials.
+ * @param {{ profile: string; verbose?: boolean }} params
+ * @returns {{ accountId: string; arn: string; users: string[]; run: ProfileRunner } | null} Null when the profile is skipped
+ */
+export function resolveProfileScan(params: {
+    profile: string;
+    verbose?: boolean;
+}): {
+    accountId: string;
+    arn: string;
+    users: string[];
+    run: ProfileRunner;
+} | null;
+/**
+ * The IAM group that grants break-glass admin access and should normally be empty.
+ */
+export const ADMIN_GROUP_NAME: "acl-admin-do-not-use";
+/**
+ * A function bound to a profile's working credential mode (direct or aws-vault).
+ */
+export type ProfileRunner = (args: string[], options?: {
+    expectJson?: boolean;
+}) => any;

package/cjs/commands/aws/iam/break-glass/handler.cjs

@@ -0,0 +1,12 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+var _KU76LC42cjs = require('../../../../__chunks/KU76LC42.cjs');
+require('../../../../__chunks/UWHPE2GI.cjs');
+require('../../../../__chunks/T2A7TN4F.cjs');
+require('../../../../__chunks/R3GUC7O7.cjs');
+require('../../../../__chunks/NT2XXAI6.cjs');
+require('../../../../__chunks/WOYF2L6T.cjs');
+require('../../../../__chunks/CMUD7LLN.cjs');
+
+
+exports.breakGlassCommand = _KU76LC42cjs.breakGlassCommand;

package/cjs/commands/aws/iam/break-glass/handler.d.ts

@@ -0,0 +1,7 @@
+/**
+ * `aws iam break-glass` handler: grant break-glass admin access by adding a user
+ * to the acl-admin-do-not-use group for a single profile. Defaults to the
+ * caller's own IAM user when no --user is given.
+ * @param {unknown} options
+ */
+export function breakGlassCommand(options: unknown): Promise<void>;

package/cjs/commands/aws/iam/break-glass/index.cjs

@@ -0,0 +1,19 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});require('../../../../__chunks/BDU2UCE5.cjs');
+
+
+var _KU76LC42cjs = require('../../../../__chunks/KU76LC42.cjs');
+
+
+var _UWHPE2GIcjs = require('../../../../__chunks/UWHPE2GI.cjs');
+
+
+var _T2A7TN4Fcjs = require('../../../../__chunks/T2A7TN4F.cjs');
+require('../../../../__chunks/R3GUC7O7.cjs');
+require('../../../../__chunks/NT2XXAI6.cjs');
+require('../../../../__chunks/WOYF2L6T.cjs');
+require('../../../../__chunks/CMUD7LLN.cjs');
+
+
+
+
+exports.ADMIN_GROUP_NAME = _T2A7TN4Fcjs.ADMIN_GROUP_NAME; exports.breakGlassCommand = _KU76LC42cjs.breakGlassCommand; exports.breakGlassOptionsSchema = _UWHPE2GIcjs.breakGlassOptionsSchema;

package/cjs/commands/aws/iam/break-glass/index.d.ts

@@ -0,0 +1,2 @@
+export * from "./handler.js";
+export * from "./schema.js";

package/cjs/commands/aws/iam/break-glass/schema.cjs

@@ -0,0 +1,12 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+var _UWHPE2GIcjs = require('../../../../__chunks/UWHPE2GI.cjs');
+
+
+var _T2A7TN4Fcjs = require('../../../../__chunks/T2A7TN4F.cjs');
+require('../../../../__chunks/R3GUC7O7.cjs');
+require('../../../../__chunks/WOYF2L6T.cjs');
+
+
+
+exports.ADMIN_GROUP_NAME = _T2A7TN4Fcjs.ADMIN_GROUP_NAME; exports.breakGlassOptionsSchema = _UWHPE2GIcjs.breakGlassOptionsSchema;

package/cjs/commands/aws/iam/break-glass/schema.d.ts

@@ -0,0 +1,25 @@
+export { ADMIN_GROUP_NAME } from "../admin-group.js";
+/**
+ * Zod schema for `aws iam break-glass` options.
+ */
+export const breakGlassOptionsSchema: z.ZodObject<{
+    profile: z.ZodOptional<z.ZodString>;
+    user: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString, "many">>>;
+    yes: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    dryRun: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    verbose: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+}, "strip", z.ZodTypeAny, {
+    verbose: boolean;
+    yes: boolean;
+    user: string[];
+    dryRun: boolean;
+    profile?: string | undefined;
+}, {
+    profile?: string | undefined;
+    verbose?: boolean | undefined;
+    yes?: boolean | undefined;
+    user?: string[] | undefined;
+    dryRun?: boolean | undefined;
+}>;
+export type BreakGlassOptions = z.infer<typeof breakGlassOptionsSchema>;
+import { z } from "zod";

package/cjs/commands/aws/iam/check-admin/handler.cjs

@@ -0,0 +1,10 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+var _NLKJIUEXcjs = require('../../../../__chunks/NLKJIUEX.cjs');
+require('../../../../__chunks/X26XY2N6.cjs');
+require('../../../../__chunks/T2A7TN4F.cjs');
+require('../../../../__chunks/R3GUC7O7.cjs');
+require('../../../../__chunks/WOYF2L6T.cjs');
+
+
+exports.checkAdminCommand = _NLKJIUEXcjs.checkAdminCommand;

package/cjs/commands/aws/iam/check-admin/handler.d.ts

@@ -0,0 +1,5 @@
+/**
+ * `aws iam check-admin` handler: alert if anyone is a member of acl-admin-do-not-use.
+ * @param {unknown} options
+ */
+export function checkAdminCommand(options: unknown): Promise<void>;

package/cjs/commands/aws/iam/check-admin/index.cjs

@@ -0,0 +1,17 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});require('../../../../__chunks/TNSRDJPR.cjs');
+
+
+var _NLKJIUEXcjs = require('../../../../__chunks/NLKJIUEX.cjs');
+
+
+var _X26XY2N6cjs = require('../../../../__chunks/X26XY2N6.cjs');
+
+
+var _T2A7TN4Fcjs = require('../../../../__chunks/T2A7TN4F.cjs');
+require('../../../../__chunks/R3GUC7O7.cjs');
+require('../../../../__chunks/WOYF2L6T.cjs');
+
+
+
+
+exports.ADMIN_GROUP_NAME = _T2A7TN4Fcjs.ADMIN_GROUP_NAME; exports.checkAdminCommand = _NLKJIUEXcjs.checkAdminCommand; exports.checkAdminOptionsSchema = _X26XY2N6cjs.checkAdminOptionsSchema;

package/cjs/commands/aws/iam/check-admin/index.d.ts

@@ -0,0 +1,2 @@
+export * from "./handler.js";
+export * from "./schema.js";

package/cjs/commands/aws/iam/check-admin/schema.cjs

@@ -0,0 +1,12 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+var _X26XY2N6cjs = require('../../../../__chunks/X26XY2N6.cjs');
+
+
+var _T2A7TN4Fcjs = require('../../../../__chunks/T2A7TN4F.cjs');
+require('../../../../__chunks/R3GUC7O7.cjs');
+require('../../../../__chunks/WOYF2L6T.cjs');
+
+
+
+exports.ADMIN_GROUP_NAME = _T2A7TN4Fcjs.ADMIN_GROUP_NAME; exports.checkAdminOptionsSchema = _X26XY2N6cjs.checkAdminOptionsSchema;

package/cjs/commands/aws/iam/check-admin/schema.d.ts

@@ -0,0 +1,19 @@
+export { ADMIN_GROUP_NAME } from "../admin-group.js";
+/**
+ * Zod schema for `aws iam check-admin` options.
+ */
+export const checkAdminOptionsSchema: z.ZodObject<{
+    profile: z.ZodOptional<z.ZodString>;
+    all: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    verbose: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+}, "strip", z.ZodTypeAny, {
+    verbose: boolean;
+    all: boolean;
+    profile?: string | undefined;
+}, {
+    profile?: string | undefined;
+    verbose?: boolean | undefined;
+    all?: boolean | undefined;
+}>;
+export type CheckAdminOptions = z.infer<typeof checkAdminOptionsSchema>;
+import { z } from "zod";