npm - @prism-d1/cli - Versions diffs - 1.0.95 → 1.0.96 - Mend

@prism-d1/cli 1.0.95 → 1.0.96

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (28) hide show

package/dist/src/commands/bedrock-protection/scan-account.d.ts.map +1 -1
package/dist/src/commands/bedrock-protection/scan-account.js +12 -10
package/dist/src/commands/bedrock-protection/scan-account.js.map +1 -1
package/dist/src/commands/bedrock-protection/scan-org.d.ts +23 -0
package/dist/src/commands/bedrock-protection/scan-org.d.ts.map +1 -0
package/dist/src/commands/bedrock-protection/scan-org.js +328 -0
package/dist/src/commands/bedrock-protection/scan-org.js.map +1 -0
package/dist/src/utils/audit-bedrock.d.ts +6 -5
package/dist/src/utils/audit-bedrock.d.ts.map +1 -1
package/dist/src/utils/audit-bedrock.js +13 -13
package/dist/src/utils/audit-bedrock.js.map +1 -1
package/dist/src/utils/audit-iam.d.ts +5 -4
package/dist/src/utils/audit-iam.d.ts.map +1 -1
package/dist/src/utils/audit-iam.js +13 -13
package/dist/src/utils/audit-iam.js.map +1 -1
package/dist/src/utils/audit-org.d.ts +80 -0
package/dist/src/utils/audit-org.d.ts.map +1 -0
package/dist/src/utils/audit-org.js +304 -0
package/dist/src/utils/audit-org.js.map +1 -0
package/dist/src/utils/aws.d.ts +33 -2
package/dist/src/utils/aws.d.ts.map +1 -1
package/dist/src/utils/aws.js +47 -5
package/dist/src/utils/aws.js.map +1 -1
package/dist/src/utils/exec.d.ts +12 -1
package/dist/src/utils/exec.d.ts.map +1 -1
package/dist/src/utils/exec.js +23 -2
package/dist/src/utils/exec.js.map +1 -1
package/package.json +1 -1

package/dist/src/utils/audit-bedrock.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"audit-bedrock.js","sourceRoot":"","sources":["../../../src/utils/audit-bedrock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAG/B;;;;;;;;;GASG;AAEH;;;;;;;;;;;;;GAaG;AACH,MAAM,aAAa,GAAG,CAAC,SAAS,CAAC,CAAC;AAClC,MAAM,iBAAiB,GAAG,CAAC,aAAa,CAAC,CAAC;AAE1C,SAAS,YAAY,CAAC,MAAW,EAAE,KAAe;IAChD,0EAA0E;IAC1E,6EAA6E;IAC7E,0EAA0E;IAC1E,yEAAyE;IACzE,uBAAuB;IACvB,MAAM,OAAO,GAAG,MAAM,EAAE,WAAW,CAAC;IACpC,IAAI,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;QACnD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5D,CAAC;IACD,IAAI,MAAM,EAAE,gBAAgB,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,WAAW,EAAE,CAAC;QACnE,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5D,CAAC;IACD,4EAA4E;IAC5E,0EAA0E;IAC1E,aAAa;IACb,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,YAAY,CAAC,MAAW;IAC/B,OAAO,MAAM,EAAE,UAAU,KAAK,MAAM,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAA2B,EAAE,SAAiB;IACzE,8EAA8E;IAC9E,mDAAmD;IACnD,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,SAAS,EAAE,kBAAkB,EAAE,cAAc,EAAE,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;IAErF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,OAAO,EAAE,eAAe,EAAE,EAAE,EAAE,QAAQ,EAAE;gBACtC,CAAC,gBAAgB,EAAE,kCAAkC,CAAC;gBACtD,CAAC,oBAAoB,EAAE,sDAAsD,CAAC;aAC/E,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;gBACtB,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK;gBAC7B,MAAM,EAAE,eAAwB,EAAE,QAAQ,EAAE,MAAe;gBAC3D,MAAM,EAAE,2BAA2B,GAAG,CAAC,SAAS,IAAI,eAAe,IAAI;gBACvE,WAAW,EAAE,2CAA2C;aACzD,CAAC,CAAC,EAAE,CAAC;IACR,CAAC;IAED,MAAM,OAAO,GAAU,GAAG,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC;IAE/C,oEAAoE;IACpE,MAAM,QAAQ,GAAG,CAAC,KAAe,EAAE,EAAE,CACnC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,KAAK,IAAI,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACtG,4EAA4E;IAC5E,6EAA6E;IAC7E,MAAM,SAAS,GAAG,CAAC,KAAe,EAAE,EAAE,CACpC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;SACxE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,UAAU,gBAAgB,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC;IAChE,MAAM,UAAU,GAAG,OAAO;SACvB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,aAAa,CAAC,KAAK,SAAS,IAAI,YAAY,CAAC,CAAC,CAAC,CAAC;SAC9E,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAE5B,MAAM,OAAO,GAAG,QAAQ,CAAC,aAAa,CAAC,CAAC;IACxC,MAAM,WAAW,GAAG,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IAChD,MAAM,gBAAgB,GAAG,SAAS,CAAC,aAAa,CAAC,CAAC;IAClD,MAAM,oBAAoB,GAAG,SAAS,CAAC,iBAAiB,CAAC,CAAC;IAE1D,OAAO,EAAE,eAAe,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE;YAC9E;gBACE,EAAE,EAAE,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,kCAAkC;gBACnF,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM;gBAC1D,MAAM,EAAE,OAAO,CAAC,MAAM;oBACpB,CAAC,CAAC,eAAe,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;oBACtC,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;wBACpB,CAAC,CAAC,gGAAgG;wBAClG,CAAC,CAAC,gBAAgB,CAAC,MAAM;4BACvB,CAAC,CAAC,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,mJAAmJ;4BACnL,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,4EAA4E,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,MAAM,mEAAmE,CAAC,CAAC,CAAC,EAAE,GAAG;gBAC1N,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gGAAgG;aAC3I;YACD;gBACE,EAAE,EAAE,oBAAoB,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,sDAAsD;gBAC3G,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM;gBAC9D,MAAM,EAAE,WAAW,CAAC,MAAM;oBACxB,CAAC,CAAC,eAAe,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;oBAC1C,CAAC,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,iFAAiF,CAAC,CAAC,CAAC,EAAE,CAAC;0BACtJ,sYAAsY;gBAC5Y,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,sIAAsI;aACrL;SACF,EAAE,CAAC;AACN,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAA2B,EAC3B,SAAiB,EACjB,eAAyB;IAEzB,MAAM,EAAE,GAAG,iBAAiB,CAAC;IAC7B,MAAM,KAAK,GAAG,yCAAyC,CAAC;IAExD,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,4EAA4E;QAC5E,2EAA2E;QAC3E,eAAe;QACf,OAAO;YACL,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK;YAC7B,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM;YACzC,MAAM,EAAE,wJAAwJ;SACjK,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,SAAS,EAAE,2CAA2C,EAAE,cAAc,EAAE,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;IAC9G,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,OAAO;YACL,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK;YAC7B,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM;YACzC,MAAM,EAAE,wCAAwC,GAAG,CAAC,SAAS,IAAI,eAAe,+BAA+B,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB;YAC1J,WAAW,EAAE,kHAAkH;SAChI,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAU,GAAG,CAAC,IAAI,EAAE,6BAA6B,IAAI,EAAE,CAAC;IACvE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,IAAI,QAAQ,GAAG,CAAC,CAAC;IAEjB,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC;QAC3D,MAAM,aAAa,GAAU,KAAK,EAAE,aAAa,IAAI,EAAE,CAAC;QACxD,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAEhE,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,GAAG,CAAC;gBACf,SAAS,EAAE,uCAAuC;gBAClD,cAAc,EAAE,SAAS,EAAE,eAAe,EAAE,IAAI;gBAChD,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;aACpC,EAAE,OAAO,CAAC,CAAC;YACZ,IAAI,IAAI,CAAC,EAAE;gBAAE,WAAW,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACpE,CAAC;QACD,IAAI,WAAW,KAAK,CAAC;YAAE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;;YAAM,QAAQ,EAAE,CAAC;IAClE,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,EAAE,GAAG,YAAY,CAAC,CAAC;IAC5C,OAAO;QACL,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK;QAC7B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM;QACzD,MAAM,EAAE,MAAM,CAAC,MAAM;YACnB,CAAC,CAAC;gBACE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC,CAAC,EAAE;gBACjF,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC,CAAC,EAAE;aAC1F,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;kBAC1B,iIAAiI;YACrI,CAAC,CAAC,OAAO,QAAQ,oEAAoE;QACvF,WAAW,EAAE,MAAM,CAAC,MAAM;YACxB,CAAC,CAAC,gJAAgJ;YAClJ,CAAC,CAAC,SAAS;KACd,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,aAAa,GAAG,mEAAmE,CAAC;AAE1F,MAAM,UAAU,cAAc,CAAC,OAA2B,EAAE,MAAc;IAAgB,MAAM,GAAG,GAAc,EAAE,CAAC;IAElH,wEAAwE;IACxE,4EAA4E;IAC5E,6EAA6E;IAC7E,0EAA0E;IAC1E,kBAAkB;IAClB,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,sBAAsB,CAAC,EAAE,OAAO,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,CAAC,EAAE,CAAC,EAAE,IAAI,gCAAgC,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;IAE3E,GAAG,CAAC,IAAI,CAAC;QACP,EAAE,EAAE,uBAAuB,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,uBAAuB;QAClF,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe;QAC9D,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,UAAU;YAChB,CAAC,CAAC,6IAA6I;YAC/I,CAAC,CAAC,EAAE,CAAC,EAAE;gBACL,CAAC,CAAC,2BAA2B;gBAC7B,CAAC,CAAC,2CAA2C,EAAE,CAAC,SAAS,IAAI,eAAe,IAAI;QACpF,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC,8IAA8I,CAAC,CAAC,CAAC,SAAS;KACrL,CAAC,CAAC;IAEH,IAAI,UAAU,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACzB,GAAG,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,aAAa;YAClE,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ;YAC3C,MAAM,EAAE,UAAU;gBAChB,CAAC,CAAC,oDAAoD;gBACtD,CAAC,CAAC,oCAAoC,EAAE,CAAC,SAAS,IAAI,eAAe,IAAI;SAC5E,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,QAAQ,GAAU,EAAE,CAAC,IAAI,EAAE,eAAe,IAAI,EAAE,CAAC;QACvD,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC;QAC7E,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAC1C,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;QAClF,MAAM,QAAQ,GAAG,CAAC,GAAG,WAAW,EAAE,GAAG,aAAa,CAAC,CAAC;QAEpD,2EAA2E;QAC3E,uEAAuE;QACvE,yEAAyE;QACzE,sEAAsE;QACtE,EAAE;QACF,6EAA6E;QAC7E,4EAA4E;QAC5E,6EAA6E;QAC7E,kDAAkD;QAClD,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,2BAA2B,CAAC,EAAE,OAAO,CAAC,CAAC;QAC/D,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;QAChE,MAAM,UAAU,GAAG,IAAI,CAAC,EAAE;YACxB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,oBAAoB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CACtD,CAAC,CAAC,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1E,CAAC,CAAC,IAAI,CAAC;QAET,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QACrH,GAAG,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,aAAa;YAClE,MAAM,EAAE,QAAQ,EAAE,QAAQ;YAC1B,MAAM,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAC3B,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;oBACtB,CAAC,CAAC,iMAAiM;oBACnM,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,4CAA4C,CAAC;gBACnE,CAAC,CAAC,UAAU,KAAK,IAAI;oBACnB,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,sEAAsE,IAAI,CAAC,SAAS,IAAI,eAAe,qDAAqD;oBAChL,CAAC,CAAC,UAAU;wBACV,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,yBAAyB,WAAW,CAAC,MAAM,uBAAuB,aAAa,CAAC,MAAM,wDAAwD;wBAClK,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,iJAAiJ;YAC3K,WAAW,EAAE,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS;gBACxC,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;oBACrB,CAAC,CAAC,sLAAsL;oBACxL,CAAC,CAAC,uGAAuG;SAC9G,CAAC,CAAC;IACL,CAAC;IAED,4EAA4E;IAC5E,uEAAuE;IACvE,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,YAAY,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;IACnF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,GAAG,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,0BAA0B,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,+CAA+C;YAC7G,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ;YAC3C,MAAM,EAAE,4BAA4B,MAAM,KAAK,MAAM,CAAC,SAAS,IAAI,eAAe,IAAI;SACvF,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,aAAa,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,aAAa,CAAC,CAAC;QAC1G,GAAG,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,0BAA0B,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,+CAA+C;YAC7G,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ;YAClE,MAAM,EAAE,aAAa,CAAC,MAAM;gBAC1B,CAAC,CAAC,GAAG,aAAa,CAAC,MAAM,qCAAqC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;gBAClI,CAAC,CAAC,uCAAuC,MAAM,0LAA0L;YAC3O,WAAW,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iIAAiI;SAClL,CAAC,CAAC;IACL,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAA2B,EAAE,MAAc;IAC1E,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,SAAS,EAAE,oCAAoC,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;IAC/F,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACX,OAAO;YACL,EAAE,EAAE,wBAAwB,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,oCAAoC;YACjG,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM;YACzC,MAAM,EAAE,4CAA4C,MAAM,KAAK,EAAE,CAAC,SAAS,IAAI,eAAe,IAAI;SACnG,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAU,EAAE,CAAC,IAAI,EAAE,yBAAyB,IAAI,EAAE,CAAC;IAC5D,OAAO;QACL,EAAE,EAAE,wBAAwB,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,oCAAoC;QACjG,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QACpC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM;QACxC,MAAM,EAAE,GAAG,CAAC,MAAM;YAChB,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,qBAAqB,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,oBAAoB,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,oDAAoD;YAC9K,CAAC,CAAC,4CAA4C,MAAM,8EAA8E;QACpI,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,+FAA+F,CAAC,CAAC,CAAC,SAAS;KACtI,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAA2B,EAAE,MAAc;IACxE,8EAA8E;IAC9E,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,SAAS,EAAE,4CAA4C,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;IACxG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,OAAO;YACL,EAAE,EAAE,0BAA0B,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,kCAAkC;YAChG,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ;YAC3C,MAAM,EAAE,+CAA+C,MAAM,KAAK,GAAG,CAAC,SAAS,IAAI,eAAe,IAAI;SACvG,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC;IACpC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,gBAAgB,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC1E,OAAO;QACL,EAAE,EAAE,0BAA0B,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,kCAAkC;QAChG,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ;QACxD,MAAM,EAAE,UAAU;YAChB,CAAC,CAAC,cAAc,MAAM,KAAK,CAAC,GAAG,CAAC,gBAAgB,IAAI,YAAY,EAAE,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI;YACvH,CAAC,CAAC,UAAU,MAAM,sMAAsM;QAC1N,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,yKAAyK;KAChN,CAAC;AACJ,CAAC"}
1	+ {"version":3,"file":"audit-bedrock.js","sourceRoot":"","sources":["../../../src/utils/audit-bedrock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAa,MAAM,UAAU,CAAC;AAG1C;;;;;;;;;GASG;AAEH;;;;;;;;;;;;;GAaG;AACH,MAAM,aAAa,GAAG,CAAC,SAAS,CAAC,CAAC;AAClC,MAAM,iBAAiB,GAAG,CAAC,aAAa,CAAC,CAAC;AAE1C,SAAS,YAAY,CAAC,MAAW,EAAE,KAAe;IAChD,0EAA0E;IAC1E,6EAA6E;IAC7E,0EAA0E;IAC1E,yEAAyE;IACzE,uBAAuB;IACvB,MAAM,OAAO,GAAG,MAAM,EAAE,WAAW,CAAC;IACpC,IAAI,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;QACnD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5D,CAAC;IACD,IAAI,MAAM,EAAE,gBAAgB,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,WAAW,EAAE,CAAC;QACnE,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5D,CAAC;IACD,4EAA4E;IAC5E,0EAA0E;IAC1E,aAAa;IACb,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,YAAY,CAAC,MAAW;IAC/B,OAAO,MAAM,EAAE,UAAU,KAAK,MAAM,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAA6B,EAAE,SAAiB;IAC3E,8EAA8E;IAC9E,mDAAmD;IACnD,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,SAAS,EAAE,kBAAkB,EAAE,cAAc,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;IAEpF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,OAAO,EAAE,eAAe,EAAE,EAAE,EAAE,QAAQ,EAAE;gBACtC,CAAC,gBAAgB,EAAE,kCAAkC,CAAC;gBACtD,CAAC,oBAAoB,EAAE,sDAAsD,CAAC;aAC/E,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;gBACtB,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK;gBAC7B,MAAM,EAAE,eAAwB,EAAE,QAAQ,EAAE,MAAe;gBAC3D,MAAM,EAAE,2BAA2B,GAAG,CAAC,SAAS,IAAI,eAAe,IAAI;gBACvE,WAAW,EAAE,2CAA2C;aACzD,CAAC,CAAC,EAAE,CAAC;IACR,CAAC;IAED,MAAM,OAAO,GAAU,GAAG,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC;IAE/C,oEAAoE;IACpE,MAAM,QAAQ,GAAG,CAAC,KAAe,EAAE,EAAE,CACnC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,KAAK,IAAI,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACtG,4EAA4E;IAC5E,6EAA6E;IAC7E,MAAM,SAAS,GAAG,CAAC,KAAe,EAAE,EAAE,CACpC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;SACxE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,UAAU,gBAAgB,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC;IAChE,MAAM,UAAU,GAAG,OAAO;SACvB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,aAAa,CAAC,KAAK,SAAS,IAAI,YAAY,CAAC,CAAC,CAAC,CAAC;SAC9E,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAE5B,MAAM,OAAO,GAAG,QAAQ,CAAC,aAAa,CAAC,CAAC;IACxC,MAAM,WAAW,GAAG,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IAChD,MAAM,gBAAgB,GAAG,SAAS,CAAC,aAAa,CAAC,CAAC;IAClD,MAAM,oBAAoB,GAAG,SAAS,CAAC,iBAAiB,CAAC,CAAC;IAE1D,OAAO,EAAE,eAAe,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE;YAC9E;gBACE,EAAE,EAAE,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,kCAAkC;gBACnF,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM;gBAC1D,MAAM,EAAE,OAAO,CAAC,MAAM;oBACpB,CAAC,CAAC,eAAe,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;oBACtC,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;wBACpB,CAAC,CAAC,gGAAgG;wBAClG,CAAC,CAAC,gBAAgB,CAAC,MAAM;4BACvB,CAAC,CAAC,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,mJAAmJ;4BACnL,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,4EAA4E,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,MAAM,mEAAmE,CAAC,CAAC,CAAC,EAAE,GAAG;gBAC1N,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gGAAgG;aAC3I;YACD;gBACE,EAAE,EAAE,oBAAoB,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,sDAAsD;gBAC3G,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM;gBAC9D,MAAM,EAAE,WAAW,CAAC,MAAM;oBACxB,CAAC,CAAC,eAAe,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;oBAC1C,CAAC,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,iFAAiF,CAAC,CAAC,CAAC,EAAE,CAAC;0BACtJ,sYAAsY;gBAC5Y,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,sIAAsI;aACrL;SACF,EAAE,CAAC;AACN,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,mBAAmB,CACjC,MAA6B,EAC7B,SAAiB,EACjB,eAAyB;IAEzB,MAAM,EAAE,GAAG,iBAAiB,CAAC;IAC7B,MAAM,KAAK,GAAG,yCAAyC,CAAC;IAExD,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,4EAA4E;QAC5E,2EAA2E;QAC3E,eAAe;QACf,OAAO;YACL,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK;YAC7B,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM;YACzC,MAAM,EAAE,wJAAwJ;SACjK,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,SAAS,EAAE,2CAA2C,EAAE,cAAc,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;IAC7G,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,OAAO;YACL,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK;YAC7B,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM;YACzC,MAAM,EAAE,wCAAwC,GAAG,CAAC,SAAS,IAAI,eAAe,+BAA+B,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB;YAC1J,WAAW,EAAE,kHAAkH;SAChI,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAU,GAAG,CAAC,IAAI,EAAE,6BAA6B,IAAI,EAAE,CAAC;IACvE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,IAAI,QAAQ,GAAG,CAAC,CAAC;IAEjB,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC;QAC3D,MAAM,aAAa,GAAU,KAAK,EAAE,aAAa,IAAI,EAAE,CAAC;QACxD,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAEhE,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,GAAG,CAAC;gBACf,SAAS,EAAE,uCAAuC;gBAClD,cAAc,EAAE,SAAS,EAAE,eAAe,EAAE,IAAI;gBAChD,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;aACpC,EAAE,MAAM,CAAC,CAAC;YACX,IAAI,IAAI,CAAC,EAAE;gBAAE,WAAW,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACpE,CAAC;QACD,IAAI,WAAW,KAAK,CAAC;YAAE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;;YAAM,QAAQ,EAAE,CAAC;IAClE,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,EAAE,GAAG,YAAY,CAAC,CAAC;IAC5C,OAAO;QACL,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK;QAC7B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM;QACzD,MAAM,EAAE,MAAM,CAAC,MAAM;YACnB,CAAC,CAAC;gBACE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC,CAAC,EAAE;gBACjF,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC,CAAC,EAAE;aAC1F,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;kBAC1B,iIAAiI;YACrI,CAAC,CAAC,OAAO,QAAQ,oEAAoE;QACvF,WAAW,EAAE,MAAM,CAAC,MAAM;YACxB,CAAC,CAAC,gJAAgJ;YAClJ,CAAC,CAAC,SAAS;KACd,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,aAAa,GAAG,mEAAmE,CAAC;AAE1F,MAAM,UAAU,cAAc,CAAC,MAA6B,EAAE,MAAc;IAAgB,MAAM,GAAG,GAAc,EAAE,CAAC;IAEpH,wEAAwE;IACxE,4EAA4E;IAC5E,6EAA6E;IAC7E,0EAA0E;IAC1E,kBAAkB;IAClB,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,sBAAsB,CAAC,EAAE,MAAM,CAAC,CAAC;IACvD,MAAM,UAAU,GAAG,CAAC,EAAE,CAAC,EAAE,IAAI,gCAAgC,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;IAE3E,GAAG,CAAC,IAAI,CAAC;QACP,EAAE,EAAE,uBAAuB,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,uBAAuB;QAClF,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe;QAC9D,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,UAAU;YAChB,CAAC,CAAC,6IAA6I;YAC/I,CAAC,CAAC,EAAE,CAAC,EAAE;gBACL,CAAC,CAAC,2BAA2B;gBAC7B,CAAC,CAAC,2CAA2C,EAAE,CAAC,SAAS,IAAI,eAAe,IAAI;QACpF,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC,8IAA8I,CAAC,CAAC,CAAC,SAAS;KACrL,CAAC,CAAC;IAEH,IAAI,UAAU,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACzB,GAAG,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,aAAa;YAClE,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ;YAC3C,MAAM,EAAE,UAAU;gBAChB,CAAC,CAAC,oDAAoD;gBACtD,CAAC,CAAC,oCAAoC,EAAE,CAAC,SAAS,IAAI,eAAe,IAAI;SAC5E,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,QAAQ,GAAU,EAAE,CAAC,IAAI,EAAE,eAAe,IAAI,EAAE,CAAC;QACvD,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC;QAC7E,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAC1C,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;QAClF,MAAM,QAAQ,GAAG,CAAC,GAAG,WAAW,EAAE,GAAG,aAAa,CAAC,CAAC;QAEpD,2EAA2E;QAC3E,uEAAuE;QACvE,yEAAyE;QACzE,sEAAsE;QACtE,EAAE;QACF,6EAA6E;QAC7E,4EAA4E;QAC5E,6EAA6E;QAC7E,kDAAkD;QAClD,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,2BAA2B,CAAC,EAAE,MAAM,CAAC,CAAC;QAC9D,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;QAChE,MAAM,UAAU,GAAG,IAAI,CAAC,EAAE;YACxB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,oBAAoB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CACtD,CAAC,CAAC,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1E,CAAC,CAAC,IAAI,CAAC;QAET,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QACrH,GAAG,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,aAAa;YAClE,MAAM,EAAE,QAAQ,EAAE,QAAQ;YAC1B,MAAM,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAC3B,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;oBACtB,CAAC,CAAC,iMAAiM;oBACnM,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,4CAA4C,CAAC;gBACnE,CAAC,CAAC,UAAU,KAAK,IAAI;oBACnB,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,sEAAsE,IAAI,CAAC,SAAS,IAAI,eAAe,qDAAqD;oBAChL,CAAC,CAAC,UAAU;wBACV,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,yBAAyB,WAAW,CAAC,MAAM,uBAAuB,aAAa,CAAC,MAAM,wDAAwD;wBAClK,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,iJAAiJ;YAC3K,WAAW,EAAE,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS;gBACxC,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;oBACrB,CAAC,CAAC,sLAAsL;oBACxL,CAAC,CAAC,uGAAuG;SAC9G,CAAC,CAAC;IACL,CAAC;IAED,4EAA4E;IAC5E,uEAAuE;IACvE,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,YAAY,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;IAClF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,GAAG,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,0BAA0B,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,+CAA+C;YAC7G,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ;YAC3C,MAAM,EAAE,4BAA4B,MAAM,KAAK,MAAM,CAAC,SAAS,IAAI,eAAe,IAAI;SACvF,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,aAAa,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,aAAa,CAAC,CAAC;QAC1G,GAAG,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,0BAA0B,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,+CAA+C;YAC7G,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ;YAClE,MAAM,EAAE,aAAa,CAAC,MAAM;gBAC1B,CAAC,CAAC,GAAG,aAAa,CAAC,MAAM,qCAAqC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;gBAClI,CAAC,CAAC,uCAAuC,MAAM,0LAA0L;YAC3O,WAAW,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iIAAiI;SAClL,CAAC,CAAC;IACL,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAA6B,EAAE,MAAc;IAC5E,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,SAAS,EAAE,oCAAoC,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;IAC9F,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACX,OAAO;YACL,EAAE,EAAE,wBAAwB,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,oCAAoC;YACjG,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM;YACzC,MAAM,EAAE,4CAA4C,MAAM,KAAK,EAAE,CAAC,SAAS,IAAI,eAAe,IAAI;SACnG,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAU,EAAE,CAAC,IAAI,EAAE,yBAAyB,IAAI,EAAE,CAAC;IAC5D,OAAO;QACL,EAAE,EAAE,wBAAwB,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,oCAAoC;QACjG,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QACpC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM;QACxC,MAAM,EAAE,GAAG,CAAC,MAAM;YAChB,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,qBAAqB,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,oBAAoB,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,oDAAoD;YAC9K,CAAC,CAAC,4CAA4C,MAAM,8EAA8E;QACpI,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,+FAA+F,CAAC,CAAC,CAAC,SAAS;KACtI,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAA6B,EAAE,MAAc;IAC1E,8EAA8E;IAC9E,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,SAAS,EAAE,4CAA4C,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;IACvG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,OAAO;YACL,EAAE,EAAE,0BAA0B,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,kCAAkC;YAChG,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ;YAC3C,MAAM,EAAE,+CAA+C,MAAM,KAAK,GAAG,CAAC,SAAS,IAAI,eAAe,IAAI;SACvG,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC;IACpC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,gBAAgB,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC1E,OAAO;QACL,EAAE,EAAE,0BAA0B,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,kCAAkC;QAChG,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ;QACxD,MAAM,EAAE,UAAU;YAChB,CAAC,CAAC,cAAc,MAAM,KAAK,CAAC,GAAG,CAAC,gBAAgB,IAAI,YAAY,EAAE,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI;YACvH,CAAC,CAAC,UAAU,MAAM,sMAAsM;QAC1N,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,yKAAyK;KAChN,CAAC;AACJ,CAAC"}

package/dist/src/utils/audit-iam.d.ts CHANGED Viewed

@@ -1,6 +1,7 @@
+import { AwsTarget } from './aws.js';
 import { Finding } from './audit.js';
-export declare function auditRoot(profile?: string): Finding[];
-export declare function auditPasswordPolicy(profile?: string): Finding;
-export declare function auditUsers(profile: string | undefined, maxKeyAge: number, unusedDays: number): Finding[];
-export declare function auditUserPolicies(profile?: string): Finding;
+export declare function auditRoot(target?: AwsTarget): Finding[];
+export declare function auditPasswordPolicy(target?: AwsTarget): Finding;
+export declare function auditUsers(target: AwsTarget | undefined, maxKeyAge: number, unusedDays: number): Finding[];
+export declare function auditUserPolicies(target?: AwsTarget): Finding;
 //# sourceMappingURL=audit-iam.d.ts.map

package/dist/src/utils/audit-iam.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"audit-iam.d.ts","sourceRoot":"","sources":["../../../src/utils/audit-iam.ts"],"names":[],"mappings":"~~AACA~~,OAAO,EAAE,OAAO,EAAY,MAAM,YAAY,CAAC;AAwE/C,wBAAgB,SAAS,CAAC,~~OAAO~~,CAAC,EAAE,~~MAAM~~,GAAG,OAAO,EAAE,~~CA6CrD~~;AAED,wBAAgB,mBAAmB,CAAC,~~OAAO~~,CAAC,EAAE,~~MAAM~~,GAAG,OAAO,~~CAmC7D~~;AAED,wBAAgB,UAAU,CAAC,~~OAAO~~,EAAE,~~MAAM~~,GAAG,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,EAAE,~~CA2ExG~~;AAED,wBAAgB,iBAAiB,CAAC,~~OAAO~~,CAAC,EAAE,~~MAAM~~,GAAG,OAAO,~~CAgC3D~~"}
1	+ {"version":3,"file":"audit-iam.d.ts","sourceRoot":"","sources":["../../../src/utils/audit-iam.ts"],"names":[],"mappings":"AAAA,OAAO,EAAO,SAAS,EAAa,MAAM,UAAU,CAAC;AACrD,OAAO,EAAE,OAAO,EAAY,MAAM,YAAY,CAAC;AAwE/C,wBAAgB,SAAS,CAAC,MAAM,CAAC,EAAE,SAAS,GAAG,OAAO,EAAE,CA6CvD;AAED,wBAAgB,mBAAmB,CAAC,MAAM,CAAC,EAAE,SAAS,GAAG,OAAO,CAmC/D;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,SAAS,GAAG,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,EAAE,CA2E1G;AAED,wBAAgB,iBAAiB,CAAC,MAAM,CAAC,EAAE,SAAS,GAAG,OAAO,CAgC7D"}

package/dist/src/utils/audit-iam.js CHANGED Viewed

@@ -7,14 +7,14 @@ import { aws, daysSince } from './aws.js';
  * This is the only non-read AWS call in the command. It produces a report
  * artifact and modifies no resource.
  */
-function credentialReport(profile) {
-    let got = aws(['iam', 'get-credential-report'], profile);
+function credentialReport(target) {
+    let got = aws(['iam', 'get-credential-report'], target);
     if (!got.ok && got.errorCode === 'ReportNotPresent') {
-        const gen = aws(['iam', 'generate-credential-report'], profile);
+        const gen = aws(['iam', 'generate-credential-report'], target);
         if (!gen.ok)
             return { error: gen.errorCode || 'generate-credential-report failed' };
         for (let i = 0; i < 10 && !got.ok; i++) {
-            got = aws(['iam', 'get-credential-report'], profile);
+            got = aws(['iam', 'get-credential-report'], target);
             if (!got.ok && got.errorCode !== 'ReportNotPresent')
                 break;
         }
@@ -47,12 +47,12 @@ function credentialReport(profile) {
     }
     return rows;
 }
-export function auditRoot(profile) {
+export function auditRoot(target) {
     const out = [];
     // GetAccountSummary answers the two most severe questions in one call and
     // needs no credential report. AccountMFAEnabled and AccountAccessKeysPresent
     // both describe the ROOT user specifically.
-    const summary = aws(['iam', 'get-account-summary'], profile);
+    const summary = aws(['iam', 'get-account-summary'], target);
     const map = summary.ok ? (summary.json?.SummaryMap ?? null) : null;
     if (!map) {
         out.push({
@@ -88,8 +88,8 @@ export function auditRoot(profile) {
     });
     return out;
 }
-export function auditPasswordPolicy(profile) {
-    const pol = aws(['iam', 'get-account-password-policy'], profile);
+export function auditPasswordPolicy(target) {
+    const pol = aws(['iam', 'get-account-password-policy'], target);
     // NoSuchEntity is the API saying "no policy set", which means AWS defaults
     // apply. That is a finding, not an error -- treating it as an error hides it.
     if (!pol.ok && pol.errorCode === 'NoSuchEntity') {
@@ -126,9 +126,9 @@ export function auditPasswordPolicy(profile) {
         remediation: weak.length ? 'Raise minimum length to 14+, require complexity, enable reuse prevention.' : undefined,
     };
 }
-export function auditUsers(profile, maxKeyAge, unusedDays) {
+export function auditUsers(target, maxKeyAge, unusedDays) {
     const out = [];
-    const report = credentialReport(profile);
+    const report = credentialReport(target);
     if ('error' in report) {
         for (const [id, title, sev] of [
             ['access-key-age', 'Long-lived access keys', 'HIGH'],
@@ -201,8 +201,8 @@ export function auditUsers(profile, maxKeyAge, unusedDays) {
     });
     return out;
 }
-export function auditUserPolicies(profile) {
-    const list = aws(['iam', 'list-users', '--query', 'Users[].UserName'], profile);
+export function auditUserPolicies(target) {
+    const list = aws(['iam', 'list-users', '--query', 'Users[].UserName'], target);
     if (!list.ok) {
         return {
             id: 'user-admin-policy', category: 'users', title: 'AdministratorAccess on IAM users',
@@ -214,7 +214,7 @@ export function auditUserPolicies(profile) {
     const admins = [];
     let unchecked = 0;
     for (const name of names) {
-        const att = aws(['iam', 'list-attached-user-policies', '--user-name', name], profile);
+        const att = aws(['iam', 'list-attached-user-policies', '--user-name', name], target);
         if (!att.ok) {
             unchecked++;
             continue;

package/dist/src/utils/audit-iam.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"audit-iam.js","sourceRoot":"","sources":["../../../src/utils/audit-iam.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAwB1C;;;;;;;GAOG;AACH,SAAS,gBAAgB,CAAC,OAAgB;IACxC,IAAI,GAAG,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,uBAAuB,CAAC,EAAE,OAAO,CAAC,CAAC;IAEzD,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,SAAS,KAAK,kBAAkB,EAAE,CAAC;QACpD,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,4BAA4B,CAAC,EAAE,OAAO,CAAC,CAAC;QAChE,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,SAAS,IAAI,mCAAmC,EAAE,CAAC;QACpF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,GAAG,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,uBAAuB,CAAC,EAAE,OAAO,CAAC,CAAC;YACrD,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,SAAS,KAAK,kBAAkB;gBAAE,MAAM;QAC7D,CAAC;IACH,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,SAAS,IAAI,8BAA8B,EAAE,CAAC;IAE/E,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC;IAC9B,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC;IAE/D,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAEnD,MAAM,IAAI,GAAc,EAAE,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1B,MAAM,EAAE,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC,IAAI,CAAC;YACR,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC;YAChB,eAAe,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,MAAM;YAClD,SAAS,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,MAAM;YACtC,gBAAgB,EAAE,EAAE,CAAC,oBAAoB,CAAC;YAC1C,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACvB,CAAC;gBACD,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,KAAK,MAAM;gBAC/C,WAAW,EAAE,EAAE,CAAC,cAAc,CAAC,eAAe,CAAC;gBAC/C,QAAQ,EAAE,EAAE,CAAC,cAAc,CAAC,iBAAiB,CAAC;aAC/C,CAAC,CAAC;SACJ,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,OAAgB;IACxC,MAAM,GAAG,GAAc,EAAE,CAAC;IAE1B,0EAA0E;IAC1E,6EAA6E;IAC7E,4CAA4C;IAC5C,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,qBAAqB,CAAC,EAAE,OAAO,CAAC,CAAC;IAC7D,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAEnE,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,GAAG,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB;YAC3D,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,UAAU;YAC7C,MAAM,EAAE,uCAAuC,OAAO,CAAC,SAAS,IAAI,eAAe,IAAI;YACvF,WAAW,EAAE,yCAAyC;SACvD,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB;YACnE,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,UAAU;YAC7C,MAAM,EAAE,uCAAuC,OAAO,CAAC,SAAS,IAAI,eAAe,IAAI;SACxF,CAAC,CAAC;QACH,OAAO,GAAG,CAAC;IACb,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,CAAC,iBAAiB,KAAK,CAAC,CAAC;IAC5C,GAAG,CAAC,IAAI,CAAC;QACP,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB;QAC3D,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU;QACvD,MAAM,EAAE,OAAO;YACb,CAAC,CAAC,8BAA8B;YAChC,CAAC,CAAC,+HAA+H;QACnI,WAAW,EAAE,gMAAgM;KAC9M,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,GAAG,CAAC,wBAAwB,KAAK,CAAC,CAAC;IACpD,GAAG,CAAC,IAAI,CAAC;QACP,EAAE,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB;QACnE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU;QACxD,MAAM,EAAE,QAAQ;YACd,CAAC,CAAC,4GAA4G;YAC9G,CAAC,CAAC,sBAAsB;QAC1B,WAAW,EAAE,4DAA4D;KAC1E,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAgB;IAClD,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,6BAA6B,CAAC,EAAE,OAAO,CAAC,CAAC;IAEjE,2EAA2E;IAC3E,8EAA8E;IAC9E,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,SAAS,KAAK,cAAc,EAAE,CAAC;QAChD,OAAO;YACL,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,yBAAyB;YAC3E,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ;YAClC,MAAM,EAAE,yGAAyG;YACjH,WAAW,EAAE,2IAA2I;SACzJ,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,OAAO;YACL,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,yBAAyB;YAC3E,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ;YAC3C,MAAM,EAAE,uCAAuC,GAAG,CAAC,SAAS,IAAI,eAAe,IAAI;SACpF,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,cAAc,IAAI,EAAE,CAAC;IACzC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,CAAC,CAAC,CAAC,qBAAqB,IAAI,CAAC,CAAC,GAAG,EAAE;QAAE,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,qBAAqB,IAAI,OAAO,SAAS,CAAC,CAAC;IACzH,IAAI,CAAC,CAAC,CAAC,cAAc;QAAE,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACzD,IAAI,CAAC,CAAC,CAAC,cAAc;QAAE,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACzD,IAAI,CAAC,CAAC,CAAC,0BAA0B,IAAI,CAAC,CAAC,CAAC,0BAA0B;QAAE,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACzG,IAAI,CAAC,CAAC,CAAC,uBAAuB;QAAE,IAAI,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAE3E,OAAO;QACL,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,yBAAyB;QAC3E,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ;QACzD,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,yBAAyB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,4BAA4B;QAChG,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,2EAA2E,CAAC,CAAC,CAAC,SAAS;KACnH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,OAA2B,EAAE,SAAiB,EAAE,UAAkB;IAC3F,MAAM,GAAG,GAAc,EAAE,CAAC;IAC1B,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAEzC,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;QACtB,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI;YAC7B,CAAC,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,CAAC;YACpD,CAAC,qBAAqB,EAAE,2BAA2B,EAAE,MAAM,CAAC;YAC5D,CAAC,oBAAoB,EAAE,oBAAoB,EAAE,QAAQ,CAAC;SAClB,EAAE,CAAC;YACvC,GAAG,CAAC,IAAI,CAAC;gBACP,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK;gBAC5B,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,GAAG;gBACtC,MAAM,EAAE,kCAAkC,MAAM,CAAC,KAAK,IAAI;gBAC1D,WAAW,EAAE,8EAA8E;aAC5F,CAAC,CAAC;QACL,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,sEAAsE;IACtE,oEAAoE;IACpE,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC;IAEhE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,CAAC,CAAC,MAAM;gBAAE,SAAS;YACxB,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;YACrC,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,GAAG,SAAS;gBAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IACD,GAAG,CAAC,IAAI,CAAC;QACP,EAAE,EAAE,gBAAgB,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,wBAAwB;QACxE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM;QACxD,MAAM,EAAE,KAAK,CAAC,MAAM;YAClB,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,6BAA6B,SAAS,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,6JAA6J;YACtR,CAAC,CAAC,sCAAsC,SAAS,IAAI;QACvD,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,wJAAwJ,CAAC,CAAC,CAAC,SAAS;KACjM,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACxF,GAAG,CAAC,IAAI,CAAC;QACP,EAAE,EAAE,qBAAqB,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,2BAA2B;QAChF,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM;QACxD,MAAM,EAAE,KAAK,CAAC,MAAM;YAClB,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,+CAA+C,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG;YAC/H,CAAC,CAAC,qCAAqC;QACzC,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,sHAAsH,CAAC,CAAC,CAAC,SAAS;KAC/J,CAAC,CAAC;IAEH,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,eAAe,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;YACxC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,UAAU;gBAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;QAC9E,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,CAAC,CAAC,MAAM;gBAAE,SAAS;YACxB,+DAA+D;YAC/D,0CAA0C;YAC1C,MAAM,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;YAC5D,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,UAAU;gBAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IACD,GAAG,CAAC,IAAI,CAAC;QACP,EAAE,EAAE,oBAAoB,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,oBAAoB;QACxE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ;QAC3D,MAAM,EAAE,MAAM,CAAC,MAAM;YACnB,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,gCAAgC,UAAU,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,oHAAoH;YACpP,CAAC,CAAC,2CAA2C,UAAU,IAAI;QAC7D,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,iFAAiF,CAAC,CAAC,CAAC,SAAS;KAC3H,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAgB;IAChD,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,kBAAkB,CAAC,EAAE,OAAO,CAAC,CAAC;IAChF,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,mBAAmB,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,kCAAkC;YACrF,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM;YACzC,MAAM,EAAE,yBAAyB,IAAI,CAAC,SAAS,IAAI,eAAe,IAAI;SACvE,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAa,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAClE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,6BAA6B,EAAE,aAAa,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;QACtF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YAAC,SAAS,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC;QACvC,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,EAAE,gBAAgB,IAAI,EAAE,CAAC;QAClD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,qBAAqB,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3F,CAAC;IAED,OAAO;QACL,EAAE,EAAE,mBAAmB,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,kCAAkC;QACrF,4EAA4E;QAC5E,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM;QACzE,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,MAAM,CAAC,MAAM;YACnB,CAAC,CAAC,gDAAgD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,uEAAuE;YAC1I,CAAC,CAAC,SAAS,GAAG,CAAC;gBACb,CAAC,CAAC,WAAW,KAAK,CAAC,MAAM,GAAG,SAAS,IAAI,KAAK,CAAC,MAAM,WAAW,SAAS,mDAAmD;gBAC5H,CAAC,CAAC,WAAW,KAAK,CAAC,MAAM,qDAAqD;QAClF,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,uFAAuF,CAAC,CAAC,CAAC,SAAS;KACjI,CAAC;AACJ,CAAC"}
1	+ {"version":3,"file":"audit-iam.js","sourceRoot":"","sources":["../../../src/utils/audit-iam.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAa,SAAS,EAAE,MAAM,UAAU,CAAC;AAwBrD;;;;;;;GAOG;AACH,SAAS,gBAAgB,CAAC,MAAkB;IAC1C,IAAI,GAAG,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,uBAAuB,CAAC,EAAE,MAAM,CAAC,CAAC;IAExD,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,SAAS,KAAK,kBAAkB,EAAE,CAAC;QACpD,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,4BAA4B,CAAC,EAAE,MAAM,CAAC,CAAC;QAC/D,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,SAAS,IAAI,mCAAmC,EAAE,CAAC;QACpF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,GAAG,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,uBAAuB,CAAC,EAAE,MAAM,CAAC,CAAC;YACpD,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,SAAS,KAAK,kBAAkB;gBAAE,MAAM;QAC7D,CAAC;IACH,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,SAAS,IAAI,8BAA8B,EAAE,CAAC;IAE/E,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC;IAC9B,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC;IAE/D,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAEnD,MAAM,IAAI,GAAc,EAAE,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1B,MAAM,EAAE,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC,IAAI,CAAC;YACR,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC;YAChB,eAAe,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,MAAM;YAClD,SAAS,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,MAAM;YACtC,gBAAgB,EAAE,EAAE,CAAC,oBAAoB,CAAC;YAC1C,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACvB,CAAC;gBACD,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,KAAK,MAAM;gBAC/C,WAAW,EAAE,EAAE,CAAC,cAAc,CAAC,eAAe,CAAC;gBAC/C,QAAQ,EAAE,EAAE,CAAC,cAAc,CAAC,iBAAiB,CAAC;aAC/C,CAAC,CAAC;SACJ,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,MAAkB;IAC1C,MAAM,GAAG,GAAc,EAAE,CAAC;IAE1B,0EAA0E;IAC1E,6EAA6E;IAC7E,4CAA4C;IAC5C,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,qBAAqB,CAAC,EAAE,MAAM,CAAC,CAAC;IAC5D,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAEnE,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,GAAG,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB;YAC3D,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,UAAU;YAC7C,MAAM,EAAE,uCAAuC,OAAO,CAAC,SAAS,IAAI,eAAe,IAAI;YACvF,WAAW,EAAE,yCAAyC;SACvD,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB;YACnE,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,UAAU;YAC7C,MAAM,EAAE,uCAAuC,OAAO,CAAC,SAAS,IAAI,eAAe,IAAI;SACxF,CAAC,CAAC;QACH,OAAO,GAAG,CAAC;IACb,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,CAAC,iBAAiB,KAAK,CAAC,CAAC;IAC5C,GAAG,CAAC,IAAI,CAAC;QACP,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB;QAC3D,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU;QACvD,MAAM,EAAE,OAAO;YACb,CAAC,CAAC,8BAA8B;YAChC,CAAC,CAAC,+HAA+H;QACnI,WAAW,EAAE,gMAAgM;KAC9M,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,GAAG,CAAC,wBAAwB,KAAK,CAAC,CAAC;IACpD,GAAG,CAAC,IAAI,CAAC;QACP,EAAE,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB;QACnE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU;QACxD,MAAM,EAAE,QAAQ;YACd,CAAC,CAAC,4GAA4G;YAC9G,CAAC,CAAC,sBAAsB;QAC1B,WAAW,EAAE,4DAA4D;KAC1E,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAkB;IACpD,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,6BAA6B,CAAC,EAAE,MAAM,CAAC,CAAC;IAEhE,2EAA2E;IAC3E,8EAA8E;IAC9E,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,SAAS,KAAK,cAAc,EAAE,CAAC;QAChD,OAAO;YACL,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,yBAAyB;YAC3E,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ;YAClC,MAAM,EAAE,yGAAyG;YACjH,WAAW,EAAE,2IAA2I;SACzJ,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,OAAO;YACL,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,yBAAyB;YAC3E,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ;YAC3C,MAAM,EAAE,uCAAuC,GAAG,CAAC,SAAS,IAAI,eAAe,IAAI;SACpF,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,cAAc,IAAI,EAAE,CAAC;IACzC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,CAAC,CAAC,CAAC,qBAAqB,IAAI,CAAC,CAAC,GAAG,EAAE;QAAE,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,qBAAqB,IAAI,OAAO,SAAS,CAAC,CAAC;IACzH,IAAI,CAAC,CAAC,CAAC,cAAc;QAAE,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACzD,IAAI,CAAC,CAAC,CAAC,cAAc;QAAE,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACzD,IAAI,CAAC,CAAC,CAAC,0BAA0B,IAAI,CAAC,CAAC,CAAC,0BAA0B;QAAE,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACzG,IAAI,CAAC,CAAC,CAAC,uBAAuB;QAAE,IAAI,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAE3E,OAAO;QACL,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,yBAAyB;QAC3E,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ;QACzD,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,yBAAyB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,4BAA4B;QAChG,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,2EAA2E,CAAC,CAAC,CAAC,SAAS;KACnH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAA6B,EAAE,SAAiB,EAAE,UAAkB;IAC7F,MAAM,GAAG,GAAc,EAAE,CAAC;IAC1B,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAExC,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;QACtB,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI;YAC7B,CAAC,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,CAAC;YACpD,CAAC,qBAAqB,EAAE,2BAA2B,EAAE,MAAM,CAAC;YAC5D,CAAC,oBAAoB,EAAE,oBAAoB,EAAE,QAAQ,CAAC;SAClB,EAAE,CAAC;YACvC,GAAG,CAAC,IAAI,CAAC;gBACP,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK;gBAC5B,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,GAAG;gBACtC,MAAM,EAAE,kCAAkC,MAAM,CAAC,KAAK,IAAI;gBAC1D,WAAW,EAAE,8EAA8E;aAC5F,CAAC,CAAC;QACL,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,sEAAsE;IACtE,oEAAoE;IACpE,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC;IAEhE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,CAAC,CAAC,MAAM;gBAAE,SAAS;YACxB,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;YACrC,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,GAAG,SAAS;gBAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IACD,GAAG,CAAC,IAAI,CAAC;QACP,EAAE,EAAE,gBAAgB,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,wBAAwB;QACxE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM;QACxD,MAAM,EAAE,KAAK,CAAC,MAAM;YAClB,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,6BAA6B,SAAS,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,6JAA6J;YACtR,CAAC,CAAC,sCAAsC,SAAS,IAAI;QACvD,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,wJAAwJ,CAAC,CAAC,CAAC,SAAS;KACjM,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACxF,GAAG,CAAC,IAAI,CAAC;QACP,EAAE,EAAE,qBAAqB,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,2BAA2B;QAChF,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM;QACxD,MAAM,EAAE,KAAK,CAAC,MAAM;YAClB,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,+CAA+C,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG;YAC/H,CAAC,CAAC,qCAAqC;QACzC,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,sHAAsH,CAAC,CAAC,CAAC,SAAS;KAC/J,CAAC,CAAC;IAEH,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,eAAe,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;YACxC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,UAAU;gBAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;QAC9E,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,CAAC,CAAC,MAAM;gBAAE,SAAS;YACxB,+DAA+D;YAC/D,0CAA0C;YAC1C,MAAM,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;YAC5D,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,UAAU;gBAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IACD,GAAG,CAAC,IAAI,CAAC;QACP,EAAE,EAAE,oBAAoB,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,oBAAoB;QACxE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ;QAC3D,MAAM,EAAE,MAAM,CAAC,MAAM;YACnB,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,gCAAgC,UAAU,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,oHAAoH;YACpP,CAAC,CAAC,2CAA2C,UAAU,IAAI;QAC7D,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,iFAAiF,CAAC,CAAC,CAAC,SAAS;KAC3H,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAkB;IAClD,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,kBAAkB,CAAC,EAAE,MAAM,CAAC,CAAC;IAC/E,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,mBAAmB,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,kCAAkC;YACrF,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM;YACzC,MAAM,EAAE,yBAAyB,IAAI,CAAC,SAAS,IAAI,eAAe,IAAI;SACvE,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAa,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAClE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,6BAA6B,EAAE,aAAa,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QACrF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YAAC,SAAS,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC;QACvC,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,EAAE,gBAAgB,IAAI,EAAE,CAAC;QAClD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,qBAAqB,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3F,CAAC;IAED,OAAO;QACL,EAAE,EAAE,mBAAmB,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,kCAAkC;QACrF,4EAA4E;QAC5E,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM;QACzE,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,MAAM,CAAC,MAAM;YACnB,CAAC,CAAC,gDAAgD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,uEAAuE;YAC1I,CAAC,CAAC,SAAS,GAAG,CAAC;gBACb,CAAC,CAAC,WAAW,KAAK,CAAC,MAAM,GAAG,SAAS,IAAI,KAAK,CAAC,MAAM,WAAW,SAAS,mDAAmD;gBAC5H,CAAC,CAAC,WAAW,KAAK,CAAC,MAAM,qDAAqD;QAClF,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,uFAAuF,CAAC,CAAC,CAAC,SAAS;KACjI,CAAC;AACJ,CAAC"}

package/dist/src/utils/audit-org.d.ts ADDED Viewed

@@ -0,0 +1,80 @@
+import { AwsTarget } from './aws.js';
+import { Finding } from './audit.js';
+/**
+ * Organization-level preventive and detective guardrails.
+ *
+ * The account checks elsewhere in this group are all *descriptive*: they read
+ * the current state and report it. These two families are different in kind, and
+ * ARCC frames the pairing directly (SAX-08 Outcome 2, preventative/detective
+ * control symmetry):
+ *
+ *   - **SCPs are preventive.** They stop the action before it happens, and they
+ *     bind even a compromised admin, which is the one thing IAM hygiene cannot
+ *     promise. For LLMjacking specifically, a region-scoped deny is the single
+ *     highest-leverage control available: a stolen key can call `InvokeModel` in
+ *     any enabled region, so restricting Bedrock to the regions you actually use
+ *     shrinks the reachable surface by an order of magnitude at no running cost.
+ *
+ *   - **Config rules are detective and continuous.** `scan-account` and
+ *     `scan-org` are point-in-time samples; a rule evaluates on every
+ *     configuration change. Without them, a key created the day after an audit
+ *     goes unnoticed until the next one.
+ *
+ * ## What these checks can and cannot establish
+ *
+ * They detect that a policy **exists and is attached**. They do NOT prove
+ * enforcement. SCP evaluation involves inheritance from every ancestor, implicit
+ * deny, `NotAction`, condition keys and principal-tag exemptions, so a
+ * structural read can be satisfied by a policy that exempts the very principals
+ * that matter. ARCC names "insufficient testing leading to unexpected blocking"
+ * and supplies a live test-script pattern for exactly this reason. Every finding
+ * here therefore says "appears to" and points at live verification -- reporting
+ * an SCP as proof of enforcement would be a worse failure than reporting none.
+ */
+interface Statement {
+    Effect?: string;
+    Action?: string | string[];
+    NotAction?: string | string[];
+    Condition?: Record<string, Record<string, string | string[]>>;
+}
+/** Names of policies containing a Deny that covers any of `actions`. */
+export declare function policiesDenying(policies: Array<{
+    name: string;
+    statements: Statement[];
+}>, actions: string[]): string[];
+/**
+ * Names of policies whose Deny is region-conditioned in a way that would
+ * constrain Bedrock.
+ *
+ * The common shape is a broad `Deny *` with
+ * `StringNotEquals: { "aws:RequestedRegion": [...] }` -- everything outside the
+ * listed regions is refused. A Bedrock-specific variant denies `bedrock:*` under
+ * the same condition. Both count; a region condition that cannot reach Bedrock
+ * (e.g. `Action: s3:*`) does not.
+ */
+export declare function policiesRestrictingBedrockRegion(policies: Array<{
+    name: string;
+    statements: Statement[];
+}>): string[];
+/**
+ * Expand each audited target to itself plus every ancestor up to the root.
+ *
+ * SCPs INHERIT downward: a policy attached to the root constrains every account
+ * in every OU beneath it. Judging attachment against the audited OU alone
+ * therefore ignores the most common place guardrails actually live, and would
+ * report a root-attached Bedrock region deny as absent -- a false FAIL on the
+ * highest-leverage control in this file. Verified against a live org where two
+ * of four customer SCPs sat at the root and were invisible to the OU-only view.
+ */
+export declare function expandToAncestors(target: AwsTarget | undefined, scopeTargetIds: string[]): {
+    ids: string[];
+    errors: string[];
+};
+/**
+ * @param scopeTargetIds Root and OU ids in scope, so attachment is judged
+ *        against what is actually being audited rather than the org at large.
+ */
+export declare function auditServiceControlPolicies(target: AwsTarget | undefined, scopeTargetIds: string[]): Finding[];
+export declare function auditConfigRules(target: AwsTarget | undefined): Finding[];
+export {};
+//# sourceMappingURL=audit-org.d.ts.map

package/dist/src/utils/audit-org.d.ts.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"audit-org.d.ts","sourceRoot":"","sources":["../../../src/utils/audit-org.ts"],"names":[],"mappings":"AAAA,OAAO,EAAO,SAAS,EAAE,MAAM,UAAU,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAErC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,UAAU,SAAS;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC;CAC/D;AA6BD,wEAAwE;AACxE,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,SAAS,EAAE,CAAA;CAAE,CAAC,EAC1D,OAAO,EAAE,MAAM,EAAE,GAChB,MAAM,EAAE,CAMV;AAED;;;;;;;;;GASG;AACH,wBAAgB,gCAAgC,CAC9C,QAAQ,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,SAAS,EAAE,CAAA;CAAE,CAAC,GACzD,MAAM,EAAE,CAWV;AAKD;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,SAAS,GAAG,SAAS,EAC7B,cAAc,EAAE,MAAM,EAAE,GACvB;IAAE,GAAG,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CAsBrC;AAgBD;;;GAGG;AACH,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,SAAS,GAAG,SAAS,EAC7B,cAAc,EAAE,MAAM,EAAE,GACvB,OAAO,EAAE,CAsJX;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,OAAO,EAAE,CAsDzE"}

package/dist/src/utils/audit-org.js ADDED Viewed

@@ -0,0 +1,304 @@
+import { aws } from './aws.js';
+function asArray(v) {
+    if (!v)
+        return [];
+    return Array.isArray(v) ? v : [v];
+}
+/**
+ * IAM action glob matching. `bedrock:*` covers
+ * `bedrock:CreateProvisionedModelThroughput`; a bare `*` covers everything.
+ * Without this, a broad deny would read as no coverage at all.
+ */
+function actionMatches(pattern, action) {
+    if (pattern === '*')
+        return true;
+    const rx = new RegExp('^' + pattern.split('*').map((s) => s.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')).join('.*') + '$', 'i');
+    return rx.test(action);
+}
+function parseStatements(content) {
+    try {
+        const doc = JSON.parse(content);
+        const st = doc?.Statement;
+        if (!st)
+            return [];
+        return Array.isArray(st) ? st : [st];
+    }
+    catch {
+        return [];
+    }
+}
+/** Names of policies containing a Deny that covers any of `actions`. */
+export function policiesDenying(policies, actions) {
+    return policies.filter((p) => p.statements.some((s) => {
+        if (s.Effect !== 'Deny')
+            return false;
+        const pats = asArray(s.Action);
+        return actions.some((a) => pats.some((pat) => actionMatches(pat, a)));
+    })).map((p) => p.name);
+}
+/**
+ * Names of policies whose Deny is region-conditioned in a way that would
+ * constrain Bedrock.
+ *
+ * The common shape is a broad `Deny *` with
+ * `StringNotEquals: { "aws:RequestedRegion": [...] }` -- everything outside the
+ * listed regions is refused. A Bedrock-specific variant denies `bedrock:*` under
+ * the same condition. Both count; a region condition that cannot reach Bedrock
+ * (e.g. `Action: s3:*`) does not.
+ */
+export function policiesRestrictingBedrockRegion(policies) {
+    return policies.filter((p) => p.statements.some((s) => {
+        if (s.Effect !== 'Deny')
+            return false;
+        const cond = s.Condition ?? {};
+        const mentionsRegion = Object.values(cond).some((kv) => Object.keys(kv).some((k) => k.toLowerCase() === 'aws:requestedregion'));
+        if (!mentionsRegion)
+            return false;
+        const pats = asArray(s.Action);
+        // Must be able to reach a Bedrock call to be relevant here.
+        return pats.some((pat) => actionMatches(pat, 'bedrock:InvokeModel'));
+    })).map((p) => p.name);
+}
+const ENFORCEMENT_CAVEAT = 'Detected structurally, not proven: inheritance, NotAction and principal-tag exemptions can neutralise a policy that reads correctly. Confirm with a live call from a representative role.';
+/**
+ * Expand each audited target to itself plus every ancestor up to the root.
+ *
+ * SCPs INHERIT downward: a policy attached to the root constrains every account
+ * in every OU beneath it. Judging attachment against the audited OU alone
+ * therefore ignores the most common place guardrails actually live, and would
+ * report a root-attached Bedrock region deny as absent -- a false FAIL on the
+ * highest-leverage control in this file. Verified against a live org where two
+ * of four customer SCPs sat at the root and were invisible to the OU-only view.
+ */
+export function expandToAncestors(target, scopeTargetIds) {
+    const ids = new Set(scopeTargetIds);
+    const errors = [];
+    for (const start of scopeTargetIds) {
+        let child = start;
+        // Bounded rather than while(true): OU nesting is capped at 5 levels, and a
+        // cycle here would otherwise hang the audit.
+        for (let depth = 0; depth < 10; depth++) {
+            if (/^r-/.test(child))
+                break;
+            const parents = aws(['organizations', 'list-parents', '--child-id', child], target);
+            if (!parents.ok) {
+                errors.push(`${child}: could not resolve parents (${parents.errorCode || 'unknown error'}), so inherited SCPs may be missed`);
+                break;
+            }
+            const p = (parents.json?.Parents ?? [])[0];
+            if (!p?.Id)
+                break;
+            ids.add(p.Id);
+            child = p.Id;
+        }
+    }
+    return { ids: [...ids], errors };
+}
+/**
+ * Managed Config rule identifiers that continuously assert what the IAM checks
+ * in this audit only sample. Keyed by the check they correspond to, so the
+ * output can name the gap in terms the reader already recognises.
+ */
+const IAM_CONFIG_RULES = [
+    ['ACCESS_KEYS_ROTATED', 'access-key-age'],
+    ['IAM_USER_UNUSED_CREDENTIALS_CHECK', 'unused-credentials'],
+    ['ROOT_ACCOUNT_MFA_ENABLED', 'root-mfa'],
+    ['MFA_ENABLED_FOR_IAM_CONSOLE_ACCESS', 'console-user-no-mfa'],
+    ['IAM_PASSWORD_POLICY', 'password-policy'],
+    ['IAM_USER_NO_POLICIES_CHECK', 'user-admin-policy'],
+];
+/**
+ * @param scopeTargetIds Root and OU ids in scope, so attachment is judged
+ *        against what is actually being audited rather than the org at large.
+ */
+export function auditServiceControlPolicies(target, scopeTargetIds) {
+    const out = [];
+    // SCPs must be enabled on the root before any can take effect. This gates the
+    // rest, the same way Cost Explorer gates the anomaly check.
+    const roots = aws(['organizations', 'list-roots'], target);
+    if (!roots.ok) {
+        return [{
+                id: 'scp-enabled', category: 'preventive', title: 'Service Control Policies enabled',
+                status: 'INDETERMINATE', severity: 'HIGH',
+                detail: `Could not read organization roots (${roots.errorCode || 'unknown error'}).`,
+                remediation: 'Grant organizations:ListRoots and re-run.',
+            }];
+    }
+    const rootList = roots.json?.Roots ?? [];
+    const scpEnabled = rootList.some((r) => (r.PolicyTypes ?? [])
+        .some((p) => p.Type === 'SERVICE_CONTROL_POLICY' && p.Status === 'ENABLED'));
+    out.push({
+        id: 'scp-enabled', category: 'preventive', title: 'Service Control Policies enabled',
+        status: scpEnabled ? 'PASS' : 'FAIL', severity: 'HIGH',
+        detail: scpEnabled
+            ? 'SERVICE_CONTROL_POLICY is enabled on the organization root.'
+            : 'SERVICE_CONTROL_POLICY is not enabled, so no preventive guardrail can exist at any level. Every control in this organization is therefore detective — it can tell you a stolen key was used, never refuse the call.',
+        remediation: scpEnabled ? undefined : 'Enable the SERVICE_CONTROL_POLICY type on the root (Organizations → Policies). Enabling it alone changes nothing: FullAWSAccess stays attached and no action is newly denied.',
+    });
+    if (!scpEnabled) {
+        for (const [id, title] of [
+            ['scp-attached', 'SCPs attached to the audited scope'],
+            ['scp-bedrock-region', 'SCP restricting which regions Bedrock can be used in'],
+            ['scp-bedrock-provisioned-throughput', 'SCP denying Provisioned Throughput creation'],
+            ['scp-detection-tamper', 'SCP preventing tampering with detection'],
+        ]) {
+            out.push({
+                id, category: 'preventive', title,
+                status: 'INDETERMINATE', severity: 'MEDIUM',
+                detail: 'Cannot be evaluated while Service Control Policies are disabled.',
+            });
+        }
+        return out;
+    }
+    // Include every ancestor: SCPs attached above the audited OU still apply to it.
+    const { ids: effectiveTargets, errors: ancestorErrors } = expandToAncestors(target, scopeTargetIds);
+    const list = aws(['organizations', 'list-policies', '--filter', 'SERVICE_CONTROL_POLICY'], target);
+    if (!list.ok) {
+        for (const [id, title] of [
+            ['scp-attached', 'SCPs attached to the audited scope'],
+            ['scp-bedrock-region', 'SCP restricting which regions Bedrock can be used in'],
+            ['scp-bedrock-provisioned-throughput', 'SCP denying Provisioned Throughput creation'],
+            ['scp-detection-tamper', 'SCP preventing tampering with detection'],
+        ]) {
+            out.push({
+                id, category: 'preventive', title,
+                status: 'INDETERMINATE', severity: 'MEDIUM',
+                detail: `Could not list SCPs (${list.errorCode || 'unknown error'}).`,
+                remediation: 'Grant organizations:ListPolicies, DescribePolicy and ListTargetsForPolicy, then re-run.',
+            });
+        }
+        return out;
+    }
+    // FullAWSAccess is attached everywhere by default and allows everything, so it
+    // is never evidence of a guardrail. Excluding it keeps the attachment check
+    // from passing on AWS's own default.
+    const customer = (list.json?.Policies ?? []).filter((p) => p.AwsManaged !== true);
+    const policies = [];
+    let unreadable = 0;
+    for (const p of customer) {
+        const desc = aws(['organizations', 'describe-policy', '--policy-id', p.Id], target);
+        const targets = aws(['organizations', 'list-targets-for-policy', '--policy-id', p.Id], target);
+        if (!desc.ok || !targets.ok) {
+            unreadable++;
+            continue;
+        }
+        policies.push({
+            name: p.Name ?? p.Id,
+            id: p.Id,
+            statements: parseStatements(desc.json?.Policy?.Content ?? ''),
+            targets: (targets.json?.Targets ?? []).map((t) => t.TargetId),
+        });
+    }
+    // An SCP attached nowhere in the audited scope constrains nothing there --
+    // the same shape as a budget with no subscriber, and just as easy to mistake
+    // for protection.
+    const inScope = policies.filter((p) => p.targets.some((t) => effectiveTargets.includes(t)));
+    out.push({
+        id: 'scp-attached', category: 'preventive', title: 'SCPs attached to the audited scope',
+        status: inScope.length ? 'PASS' : 'FAIL', severity: 'HIGH',
+        detail: inScope.length
+            ? `${inScope.length} customer-managed SCP(s) apply to the audited scope (including inheritance from ${effectiveTargets.length - scopeTargetIds.length} ancestor target(s)): ${inScope.map((p) => p.name).join(', ')}.`
+            : customer.length === 0
+                ? 'No customer-managed SCPs exist. Only AWS\'s default FullAWSAccess is attached, which allows everything.'
+                : `${customer.length} customer-managed SCP(s) exist but none is attached to the audited target(s) or any ancestor, so none constrains the accounts in scope.`,
+        remediation: inScope.length ? undefined : 'Attach the relevant SCP to the root or the OUs being audited. An unattached policy is inert.',
+    });
+    // Region restriction: the highest-leverage preventive control for LLMjacking.
+    const regionScoped = policiesRestrictingBedrockRegion(inScope);
+    out.push({
+        id: 'scp-bedrock-region', category: 'preventive', title: 'SCP restricting which regions Bedrock can be used in',
+        status: regionScoped.length ? 'PASS' : 'FAIL', severity: 'MEDIUM',
+        detail: regionScoped.length
+            ? `${regionScoped.join(', ')} denies Bedrock-reaching actions outside an allowed region set. ${ENFORCEMENT_CAVEAT}`
+            : 'No in-scope SCP constrains Bedrock by region. A stolen credential can call InvokeModel in every enabled region, so spend is not bounded by the regions you actually operate in — and per-region CloudWatch alarms and Provisioned Throughput checks all miss activity elsewhere.',
+        remediation: regionScoped.length ? undefined : 'Add a Deny on `*` (or `bedrock:*`) with StringNotEquals on aws:RequestedRegion listing only the regions you use. This is the cheapest large reduction in blast radius available, and it costs nothing to run.',
+    });
+    const ptDenied = policiesDenying(inScope, ['bedrock:CreateProvisionedModelThroughput']);
+    out.push({
+        id: 'scp-bedrock-provisioned-throughput', category: 'preventive', title: 'SCP denying Provisioned Throughput creation',
+        status: ptDenied.length ? 'PASS' : 'FAIL', severity: 'MEDIUM',
+        detail: ptDenied.length
+            ? `${ptDenied.join(', ')} denies bedrock:CreateProvisionedModelThroughput. ${ENFORCEMENT_CAVEAT}`
+            : 'No in-scope SCP denies bedrock:CreateProvisionedModelThroughput. It is the largest single commitment available in Bedrock — billed monthly whether used or not — and one API call creates it.',
+        remediation: ptDenied.length ? undefined : 'Deny bedrock:CreateProvisionedModelThroughput org-wide and exempt only the accounts that genuinely need it. Most organizations need it nowhere.',
+    });
+    // Protecting the detection layer the rest of this audit depends on.
+    const tamperActions = ['cloudtrail:StopLogging', 'config:DeleteConfigRule', 'guardduty:DeleteDetector'];
+    const tamperDenied = policiesDenying(inScope, tamperActions);
+    out.push({
+        id: 'scp-detection-tamper', category: 'preventive', title: 'SCP preventing tampering with detection',
+        status: tamperDenied.length ? 'PASS' : 'FAIL', severity: 'HIGH',
+        detail: tamperDenied.length
+            ? `${tamperDenied.join(', ')} denies at least one of CloudTrail/Config/GuardDuty teardown. ${ENFORCEMENT_CAVEAT}`
+            : 'No in-scope SCP prevents stopping CloudTrail, deleting Config rules or disabling GuardDuty. An attacker who reaches an admin credential can therefore remove the evidence trail before running up spend, which defeats every detective control this audit recommends.',
+        remediation: tamperDenied.length ? undefined : 'Deny cloudtrail:StopLogging/DeleteTrail, config:Delete*, guardduty:DeleteDetector org-wide. Nothing legitimate needs them from a member account.',
+    });
+    for (const e of ancestorErrors) {
+        out.push({
+            id: 'scp-inheritance-resolved', category: 'preventive', title: 'SCP inheritance fully resolved',
+            status: 'INDETERMINATE', severity: 'MEDIUM',
+            detail: e,
+            remediation: 'Grant organizations:ListParents and re-run; without it an inherited guardrail can read as absent.',
+        });
+    }
+    if (unreadable > 0) {
+        out.push({
+            id: 'scp-readable', category: 'preventive', title: 'All SCPs readable',
+            status: 'INDETERMINATE', severity: 'MEDIUM',
+            detail: `${unreadable} of ${customer.length} customer-managed SCP(s) could not be read, so the SCP findings above are based on a partial view.`,
+            remediation: 'Grant organizations:DescribePolicy and ListTargetsForPolicy, then re-run.',
+        });
+    }
+    return out;
+}
+export function auditConfigRules(target) {
+    const rules = aws(['configservice', 'describe-organization-config-rules'], target);
+    if (!rules.ok) {
+        // Config not being enabled for the org is a legitimate state, and distinct
+        // from a permissions problem. Both are reported, neither as a pass.
+        const notEnabled = /OrganizationAccessDenied|NoAvailableOrganization|AccessDenied/i.test(rules.errorCode || rules.raw);
+        return [{
+                id: 'config-org-rules', category: 'detective', title: 'Organization Config rules deployed',
+                status: 'INDETERMINATE', severity: 'MEDIUM',
+                detail: notEnabled
+                    ? `Could not read organization Config rules (${rules.errorCode || 'access denied'}). Either AWS Config is not enabled for the organization, or trusted access / delegated administration is not configured.`
+                    : `Could not read organization Config rules (${rules.errorCode || 'unknown error'}).`,
+                remediation: 'Enable trusted access for config.amazonaws.com in Organizations, or grant config:DescribeOrganizationConfigRules, then re-run.',
+            }, {
+                id: 'config-iam-coverage', category: 'detective', title: 'Continuous coverage of the IAM hygiene checks',
+                status: 'INDETERMINATE', severity: 'MEDIUM',
+                detail: 'Cannot be evaluated without the organization Config rule list.',
+            }];
+    }
+    const list = rules.json?.OrganizationConfigRules ?? [];
+    const out = [];
+    out.push({
+        id: 'config-org-rules', category: 'detective', title: 'Organization Config rules deployed',
+        status: list.length ? 'PASS' : 'FAIL', severity: 'MEDIUM',
+        detail: list.length
+            ? `${list.length} organization Config rule(s) deployed.`
+            : 'No organization Config rules. This audit is a point-in-time sample; without continuous rules, a key created the day after a run goes unnoticed until the next one.',
+        remediation: list.length ? undefined : 'Deploy an Organization Conformance Pack with the IAM managed rules. They evaluate on every configuration change rather than when someone remembers to audit.',
+    });
+    // Which of this audit's own IAM checks have a continuous equivalent deployed.
+    const deployed = new Set();
+    for (const r of list) {
+        const id = r?.OrganizationManagedRuleMetadata?.RuleIdentifier;
+        if (id)
+            deployed.add(String(id).toUpperCase());
+    }
+    const missing = IAM_CONFIG_RULES.filter(([ruleId]) => !deployed.has(ruleId));
+    const present = IAM_CONFIG_RULES.filter(([ruleId]) => deployed.has(ruleId));
+    out.push({
+        id: 'config-iam-coverage', category: 'detective', title: 'Continuous coverage of the IAM hygiene checks',
+        status: missing.length === 0 ? 'PASS' : list.length === 0 ? 'FAIL' : 'FAIL',
+        severity: 'MEDIUM',
+        detail: missing.length === 0
+            ? `All ${IAM_CONFIG_RULES.length} IAM hygiene checks have a continuously-evaluating Config rule: ${present.map(([r]) => r).join(', ')}.`
+            : `${missing.length} of ${IAM_CONFIG_RULES.length} IAM checks in this audit have no continuous equivalent. Sampled here but not monitored: ${missing.map(([, check]) => check).join(', ')}.${present.length ? ` Covered: ${present.map(([, check]) => check).join(', ')}.` : ''}`,
+        remediation: missing.length === 0 ? undefined
+            : `Deploy the matching managed rules org-wide: ${missing.map(([r]) => r).join(', ')}. Note the ordering pitfall — a Config rule evaluates nothing until the configuration recorder is running in the target accounts.`,
+    });
+    return out;
+}
+//# sourceMappingURL=audit-org.js.map

package/dist/src/utils/audit-org.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"audit-org.js","sourceRoot":"","sources":["../../../src/utils/audit-org.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAa,MAAM,UAAU,CAAC;AA0C1C,SAAS,OAAO,CAAC,CAAgC;IAC/C,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAClB,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpC,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,OAAe,EAAE,MAAc;IACpD,IAAI,OAAO,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,EAAE,GAAG,CAAC,CAAC;IAC3H,OAAO,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,EAAE,GAAG,GAAG,EAAE,SAAS,CAAC;QAC1B,IAAI,CAAC,EAAE;YAAE,OAAO,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,eAAe,CAC7B,QAA0D,EAC1D,OAAiB;IAEjB,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;QACpD,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,KAAK,CAAC;QACtC,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC/B,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gCAAgC,CAC9C,QAA0D;IAE1D,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;QACpD,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,KAAK,CAAC;QACtC,MAAM,IAAI,GAAG,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC;QAC/B,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CACrD,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,qBAAqB,CAAC,CAAC,CAAC;QAC1E,IAAI,CAAC,cAAc;YAAE,OAAO,KAAK,CAAC;QAClC,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC/B,4DAA4D;QAC5D,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,kBAAkB,GACtB,2LAA2L,CAAC;AAE9L;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAA6B,EAC7B,cAAwB;IAExB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAS,cAAc,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;QACnC,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,2EAA2E;QAC3E,6CAA6C;QAC7C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC;YACxC,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,MAAM;YAC7B,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,eAAe,EAAE,cAAc,EAAE,YAAY,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;YACpF,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;gBAChB,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,gCAAgC,OAAO,CAAC,SAAS,IAAI,eAAe,oCAAoC,CAAC,CAAC;gBAC9H,MAAM;YACR,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3C,IAAI,CAAC,CAAC,EAAE,EAAE;gBAAE,MAAM;YAClB,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACd,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;AACnC,CAAC;AAED;;;;GAIG;AACH,MAAM,gBAAgB,GAA4B;IAChD,CAAC,qBAAqB,EAAE,gBAAgB,CAAC;IACzC,CAAC,mCAAmC,EAAE,oBAAoB,CAAC;IAC3D,CAAC,0BAA0B,EAAE,UAAU,CAAC;IACxC,CAAC,oCAAoC,EAAE,qBAAqB,CAAC;IAC7D,CAAC,qBAAqB,EAAE,iBAAiB,CAAC;IAC1C,CAAC,4BAA4B,EAAE,mBAAmB,CAAC;CACpD,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,2BAA2B,CACzC,MAA6B,EAC7B,cAAwB;IAExB,MAAM,GAAG,GAAc,EAAE,CAAC;IAE1B,8EAA8E;IAC9E,4DAA4D;IAC5D,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,eAAe,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC;IAC3D,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,CAAC;gBACN,EAAE,EAAE,aAAa,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,kCAAkC;gBACpF,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM;gBACzC,MAAM,EAAE,sCAAsC,KAAK,CAAC,SAAS,IAAI,eAAe,IAAI;gBACpF,WAAW,EAAE,2CAA2C;aACzD,CAAC,CAAC;IACL,CAAC;IACD,MAAM,QAAQ,GAAU,KAAK,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;IAChD,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC;SAC1D,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,wBAAwB,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC;IAEpF,GAAG,CAAC,IAAI,CAAC;QACP,EAAE,EAAE,aAAa,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,kCAAkC;QACpF,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM;QACtD,MAAM,EAAE,UAAU;YAChB,CAAC,CAAC,6DAA6D;YAC/D,CAAC,CAAC,qNAAqN;QACzN,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,+KAA+K;KACtN,CAAC,CAAC;IAEH,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI;YACxB,CAAC,cAAc,EAAE,oCAAoC,CAAC;YACtD,CAAC,oBAAoB,EAAE,sDAAsD,CAAC;YAC9E,CAAC,oCAAoC,EAAE,6CAA6C,CAAC;YACrF,CAAC,sBAAsB,EAAE,yCAAyC,CAAC;SACpE,EAAE,CAAC;YACF,GAAG,CAAC,IAAI,CAAC;gBACP,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK;gBACjC,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ;gBAC3C,MAAM,EAAE,kEAAkE;aAC3E,CAAC,CAAC;QACL,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,gFAAgF;IAChF,MAAM,EAAE,GAAG,EAAE,gBAAgB,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,iBAAiB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAEpG,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,eAAe,EAAE,eAAe,EAAE,UAAU,EAAE,wBAAwB,CAAC,EAAE,MAAM,CAAC,CAAC;IACnG,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI;YACxB,CAAC,cAAc,EAAE,oCAAoC,CAAC;YACtD,CAAC,oBAAoB,EAAE,sDAAsD,CAAC;YAC9E,CAAC,oCAAoC,EAAE,6CAA6C,CAAC;YACrF,CAAC,sBAAsB,EAAE,yCAAyC,CAAC;SACpE,EAAE,CAAC;YACF,GAAG,CAAC,IAAI,CAAC;gBACP,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK;gBACjC,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ;gBAC3C,MAAM,EAAE,wBAAwB,IAAI,CAAC,SAAS,IAAI,eAAe,IAAI;gBACrE,WAAW,EAAE,yFAAyF;aACvG,CAAC,CAAC;QACL,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,+EAA+E;IAC/E,4EAA4E;IAC5E,qCAAqC;IACrC,MAAM,QAAQ,GAAU,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC;IAE9F,MAAM,QAAQ,GAAoF,EAAE,CAAC;IACrG,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,eAAe,EAAE,iBAAiB,EAAE,aAAa,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;QACpF,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,eAAe,EAAE,yBAAyB,EAAE,aAAa,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;QAC/F,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAAC,UAAU,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC;QACxD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE;YACpB,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,UAAU,EAAE,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,IAAI,EAAE,CAAC;YAC7D,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;SACnE,CAAC,CAAC;IACL,CAAC;IAED,2EAA2E;IAC3E,6EAA6E;IAC7E,kBAAkB;IAClB,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5F,GAAG,CAAC,IAAI,CAAC;QACP,EAAE,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,oCAAoC;QACvF,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM;QAC1D,MAAM,EAAE,OAAO,CAAC,MAAM;YACpB,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,mFAAmF,gBAAgB,CAAC,MAAM,GAAG,cAAc,CAAC,MAAM,yBAAyB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;YACtN,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;gBACrB,CAAC,CAAC,yGAAyG;gBAC3G,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,yIAAyI;QACjK,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,8FAA8F;KACzI,CAAC,CAAC;IAEH,8EAA8E;IAC9E,MAAM,YAAY,GAAG,gCAAgC,CAAC,OAAO,CAAC,CAAC;IAC/D,GAAG,CAAC,IAAI,CAAC;QACP,EAAE,EAAE,oBAAoB,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,sDAAsD;QAC/G,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ;QACjE,MAAM,EAAE,YAAY,CAAC,MAAM;YACzB,CAAC,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,mEAAmE,kBAAkB,EAAE;YACnH,CAAC,CAAC,kRAAkR;QACtR,WAAW,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,+MAA+M;KAC/P,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,EAAE,CAAC,0CAA0C,CAAC,CAAC,CAAC;IACxF,GAAG,CAAC,IAAI,CAAC;QACP,EAAE,EAAE,oCAAoC,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,6CAA6C;QACtH,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ;QAC7D,MAAM,EAAE,QAAQ,CAAC,MAAM;YACrB,CAAC,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,qDAAqD,kBAAkB,EAAE;YACjG,CAAC,CAAC,+LAA+L;QACnM,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iJAAiJ;KAC7L,CAAC,CAAC;IAEH,oEAAoE;IACpE,MAAM,aAAa,GAAG,CAAC,wBAAwB,EAAE,yBAAyB,EAAE,0BAA0B,CAAC,CAAC;IACxG,MAAM,YAAY,GAAG,eAAe,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAC7D,GAAG,CAAC,IAAI,CAAC;QACP,EAAE,EAAE,sBAAsB,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,yCAAyC;QACpG,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM;QAC/D,MAAM,EAAE,YAAY,CAAC,MAAM;YACzB,CAAC,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,iEAAiE,kBAAkB,EAAE;YACjH,CAAC,CAAC,uQAAuQ;QAC3Q,WAAW,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,kJAAkJ;KAClM,CAAC,CAAC;IAEH,KAAK,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;QAC/B,GAAG,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,0BAA0B,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,gCAAgC;YAC/F,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ;YAC3C,MAAM,EAAE,CAAC;YACT,WAAW,EAAE,mGAAmG;SACjH,CAAC,CAAC;IACL,CAAC;IAED,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;QACnB,GAAG,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,mBAAmB;YACtE,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ;YAC3C,MAAM,EAAE,GAAG,UAAU,OAAO,QAAQ,CAAC,MAAM,oGAAoG;YAC/I,WAAW,EAAE,2EAA2E;SACzF,CAAC,CAAC;IACL,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAA6B;IAC5D,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,eAAe,EAAE,oCAAoC,CAAC,EAAE,MAAM,CAAC,CAAC;IAEnF,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACd,2EAA2E;QAC3E,oEAAoE;QACpE,MAAM,UAAU,GAAG,gEAAgE,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC;QACvH,OAAO,CAAC;gBACN,EAAE,EAAE,kBAAkB,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,oCAAoC;gBAC1F,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ;gBAC3C,MAAM,EAAE,UAAU;oBAChB,CAAC,CAAC,6CAA6C,KAAK,CAAC,SAAS,IAAI,eAAe,2HAA2H;oBAC5M,CAAC,CAAC,6CAA6C,KAAK,CAAC,SAAS,IAAI,eAAe,IAAI;gBACvF,WAAW,EAAE,gIAAgI;aAC9I,EAAE;gBACD,EAAE,EAAE,qBAAqB,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,+CAA+C;gBACxG,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ;gBAC3C,MAAM,EAAE,gEAAgE;aACzE,CAAC,CAAC;IACL,CAAC;IAED,MAAM,IAAI,GAAU,KAAK,CAAC,IAAI,EAAE,uBAAuB,IAAI,EAAE,CAAC;IAC9D,MAAM,GAAG,GAAc,EAAE,CAAC;IAE1B,GAAG,CAAC,IAAI,CAAC;QACP,EAAE,EAAE,kBAAkB,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,oCAAoC;QAC1F,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ;QACzD,MAAM,EAAE,IAAI,CAAC,MAAM;YACjB,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,wCAAwC;YACxD,CAAC,CAAC,oKAAoK;QACxK,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,8JAA8J;KACtM,CAAC,CAAC;IAEH,8EAA8E;IAC9E,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,EAAE,GAAG,CAAC,EAAE,+BAA+B,EAAE,cAAc,CAAC;QAC9D,IAAI,EAAE;YAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7E,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IAE5E,GAAG,CAAC,IAAI,CAAC;QACP,EAAE,EAAE,qBAAqB,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,+CAA+C;QACxG,MAAM,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QAC3E,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC;YAC1B,CAAC,CAAC,OAAO,gBAAgB,CAAC,MAAM,mEAAmE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;YACxI,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,OAAO,gBAAgB,CAAC,MAAM,4FAA4F,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACnR,WAAW,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS;YAC3C,CAAC,CAAC,+CAA+C,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,mIAAmI;KACzN,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}