@standards-kit/conform 0.1.0 → 0.2.0

package/dist/core/types.d.ts

@@ -0,0 +1,95 @@
+/**
+ * Shared types for standards-kit
+ */
+/** Severity levels for violations */
+export type Severity = "error" | "warning";
+/** Status for domain results */
+export type DomainStatus = "pass" | "fail" | "skip";
+/** A single violation found by a check */
+export interface Violation {
+    rule: string;
+    tool: string;
+    file?: string;
+    line?: number;
+    column?: number;
+    message: string;
+    code?: string;
+    severity: Severity;
+}
+/** Result of running a single check */
+export interface CheckResult {
+    name: string;
+    rule: string;
+    passed: boolean;
+    violations: Violation[];
+    skipped: boolean;
+    skipReason?: string;
+    duration?: number;
+}
+/** Result of running all checks in a domain */
+export interface DomainResult {
+    domain: string;
+    status: DomainStatus;
+    checks: CheckResult[];
+    violationCount: number;
+}
+/** Full result of conform check or conform audit */
+export interface FullResult {
+    version: string;
+    configPath: string;
+    domains: Record<string, DomainResult>;
+    summary: {
+        totalViolations: number;
+        exitCode: number;
+    };
+}
+/** Interface for tool runners (ESLint, Ruff, tsc, etc.) */
+export interface IToolRunner {
+    /** Display name of the tool */
+    readonly name: string;
+    /** Rule category (e.g., "code.linting") */
+    readonly rule: string;
+    /** Tool identifier for violations */
+    readonly toolId: string;
+    /** Config file patterns to look for */
+    readonly configFiles: string[];
+    /** Run the tool and return check results */
+    run(projectRoot: string): Promise<CheckResult>;
+    /** Audit that config exists without running the tool */
+    audit(projectRoot: string): Promise<CheckResult>;
+}
+/** Options for creating a violation */
+export interface ViolationOptions {
+    rule: string;
+    tool: string;
+    message: string;
+    severity: Severity;
+    file?: string;
+    line?: number;
+    column?: number;
+    code?: string;
+}
+/** Builder for creating Violation objects */
+export declare const ViolationBuilder: {
+    create(options: ViolationOptions): Violation;
+    error(rule: string, tool: string, message: string, code?: string): Violation;
+    warning(rule: string, tool: string, message: string, code?: string): Violation;
+};
+/** Builder for creating CheckResult objects */
+export declare const CheckResultBuilder: {
+    pass(name: string, rule: string, duration?: number): CheckResult;
+    fail(name: string, rule: string, violations: Violation[], duration?: number): CheckResult;
+    skip(name: string, rule: string, reason: string, duration?: number): CheckResult;
+    fromViolations(name: string, rule: string, violations: Violation[], duration?: number): CheckResult;
+};
+/** Builder for creating DomainResult objects */
+export declare const DomainResultBuilder: {
+    fromChecks(domain: string, checks: CheckResult[]): DomainResult;
+};
+export declare const ExitCode: {
+    readonly SUCCESS: 0;
+    readonly VIOLATIONS_FOUND: 1;
+    readonly CONFIG_ERROR: 2;
+    readonly RUNTIME_ERROR: 3;
+};
+export type ExitCodeType = (typeof ExitCode)[keyof typeof ExitCode];

package/dist/{src-KZRTG3EU.js → core-QRFGIQ42.js}

@@ -3,7 +3,7 @@ import {
   DomainResultBuilder,
   ExitCode,
   ViolationBuilder
-} from "./chunk-P7TIZJ4C.js";
+} from "./chunk-DXIYZR62.js";
 import {
   CONFIG_FILE_NAME,
   ConfigError,
@@ -20,7 +20,8 @@ import {
   mergeConfigs,
   parseRegistryUrl,
   resolveExtends
-} from "./chunk-KHO6NIAI.js";
+} from "./chunk-YGDEM6K5.js";
+import "./chunk-RHM53NLG.js";
 export {
   CONFIG_FILE_NAME,
   CheckResultBuilder,
@@ -42,4 +43,4 @@ export {
   parseRegistryUrl,
   resolveExtends
 };
-//# sourceMappingURL=src-KZRTG3EU.js.map
+//# sourceMappingURL=core-QRFGIQ42.js.map

package/dist/dependencies/index.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Core implementation of the conform dependencies command
+ */
+import type { DependenciesOptions, DependenciesResult } from "./types.js";
+export type { DependenciesOptions, DependenciesResult } from "./types.js";
+/**
+ * Get all dependencies for a project
+ */
+export declare function getDependencies(options?: Partial<DependenciesOptions>): Promise<DependenciesResult>;
+/**
+ * Run the dependencies command (CLI entry point)
+ */
+export declare function runDependencies(options: DependenciesOptions): Promise<void>;

package/dist/dependencies/mappings.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Built-in dependency mappings for tools
+ *
+ * Maps tool IDs to their known configuration file patterns.
+ * These patterns may include globs that need to be expanded.
+ */
+import type { ToolDependencyMapping } from "./types.js";
+/**
+ * Built-in dependency mappings for all supported tools.
+ * Keys match the toolId used in standards.toml config paths.
+ */
+export declare const BUILTIN_MAPPINGS: Record<string, ToolDependencyMapping>;
+/**
+ * Files that are always tracked regardless of which tools are enabled.
+ * These patterns may include globs.
+ */
+export declare const ALWAYS_TRACKED: string[];

package/dist/dependencies/output.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Output formatters for the conform dependencies command
+ */
+import type { DependenciesResult } from "./types.js";
+/**
+ * Format dependencies result as human-readable text
+ */
+export declare function formatDependenciesText(result: DependenciesResult): string;
+/**
+ * Format dependencies result as JSON
+ */
+export declare function formatDependenciesJson(result: DependenciesResult): string;

package/dist/dependencies/types.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Types for the conform dependencies command
+ */
+/** Options for the dependencies command */
+export interface DependenciesOptions {
+    /** Path to standards.toml config file */
+    config?: string;
+    /** Output format */
+    format: "text" | "json";
+    /** Filter to specific check (e.g., "eslint") */
+    check?: string;
+    /** Monorepo project path filter */
+    project?: string;
+}
+/** Result of dependency collection */
+export interface DependenciesResult {
+    /** Project path (relative, or "." for root) */
+    project: string;
+    /** Path to standards.toml */
+    checkTomlPath: string;
+    /** Map of tool ID to its dependency files (only existing files) */
+    dependencies: Record<string, string[]>;
+    /** Files that are always tracked (only existing files) */
+    alwaysTracked: string[];
+    /** Flattened list of all dependency files (deduplicated and sorted) */
+    allFiles: string[];
+}
+/** Tool dependency mapping configuration */
+export interface ToolDependencyMapping {
+    /** Tool identifier */
+    toolId: string;
+    /** Config file patterns (may include globs) */
+    configFiles: string[];
+}

package/dist/{dynamodb-5KVESCVJ.js → dynamodb-HQH3IMAI.js}

@@ -1,14 +1,10 @@
+import {
+  createClientFactory
+} from "./chunk-O745CMWG.js";
+
 // src/infra/checkers/dynamodb.ts
 import { DescribeTableCommand, DynamoDBClient } from "@aws-sdk/client-dynamodb";
-var clientCache = /* @__PURE__ */ new Map();
-function getClient(region) {
-  let client = clientCache.get(region);
-  if (!client) {
-    client = new DynamoDBClient({ region });
-    clientCache.set(region, client);
-  }
-  return client;
-}
+var getClient = createClientFactory(DynamoDBClient);
 var DynamoDBChecker = {
   async check(arn) {
     const { resourceType, resourceId, region, raw } = arn;
@@ -48,4 +44,4 @@ var DynamoDBChecker = {
 export {
   DynamoDBChecker
 };
-//# sourceMappingURL=dynamodb-5KVESCVJ.js.map
+//# sourceMappingURL=dynamodb-HQH3IMAI.js.map

package/dist/dynamodb-HQH3IMAI.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/infra/checkers/dynamodb.ts"],"sourcesContent":["/**\n * DynamoDB resource checker\n */\n\nimport { DescribeTableCommand, DynamoDBClient } from \"@aws-sdk/client-dynamodb\";\n\nimport type { ParsedArn, ResourceCheckResult } from \"../types.js\";\nimport { createClientFactory } from \"./client-factory.js\";\nimport type { ResourceChecker } from \"./types.js\";\n\n/**\n * Get or create a DynamoDB client for a region\n */\nconst getClient = createClientFactory(DynamoDBClient);\n\n/**\n * DynamoDB table checker\n */\nexport const DynamoDBChecker: ResourceChecker = {\n  async check(arn: ParsedArn): Promise<ResourceCheckResult> {\n    const { resourceType, resourceId, region, raw } = arn;\n\n    // Extract table name (might be \"table-name\" or \"table-name/index/index-name\")\n    const tableName = resourceId.split(\"/\")[0];\n\n    const client = getClient(region);\n\n    try {\n      await client.send(new DescribeTableCommand({ TableName: tableName }));\n      return {\n        arn: raw,\n        exists: true,\n        service: \"dynamodb\",\n        resourceType,\n        resourceId,\n      };\n    } catch (error) {\n      const err = error as Error & { name?: string };\n\n      if (err.name === \"ResourceNotFoundException\") {\n        return {\n          arn: raw,\n          exists: false,\n          service: \"dynamodb\",\n          resourceType,\n          resourceId,\n        };\n      }\n\n      return {\n        arn: raw,\n        exists: false,\n        error: err.message || \"Unknown error\",\n        service: \"dynamodb\",\n        resourceType,\n        resourceId,\n      };\n    }\n  },\n};\n"],"mappings":";;;;;AAIA,SAAS,sBAAsB,sBAAsB;AASrD,IAAM,YAAY,oBAAoB,cAAc;AAK7C,IAAM,kBAAmC;AAAA,EAC9C,MAAM,MAAM,KAA8C;AACxD,UAAM,EAAE,cAAc,YAAY,QAAQ,IAAI,IAAI;AAGlD,UAAM,YAAY,WAAW,MAAM,GAAG,EAAE,CAAC;AAEzC,UAAM,SAAS,UAAU,MAAM;AAE/B,QAAI;AACF,YAAM,OAAO,KAAK,IAAI,qBAAqB,EAAE,WAAW,UAAU,CAAC,CAAC;AACpE,aAAO;AAAA,QACL,KAAK;AAAA,QACL,QAAQ;AAAA,QACR,SAAS;AAAA,QACT;AAAA,QACA;AAAA,MACF;AAAA,IACF,SAAS,OAAO;AACd,YAAM,MAAM;AAEZ,UAAI,IAAI,SAAS,6BAA6B;AAC5C,eAAO;AAAA,UACL,KAAK;AAAA,UACL,QAAQ;AAAA,UACR,SAAS;AAAA,UACT;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAEA,aAAO;AAAA,QACL,KAAK;AAAA,QACL,QAAQ;AAAA,QACR,OAAO,IAAI,WAAW;AAAA,QACtB,SAAS;AAAA,QACT;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;","names":[]}

package/dist/{ec2-HKPE6GZV.js → ec2-AEPT735A.js}

@@ -1,3 +1,7 @@
+import {
+  createClientFactory
+} from "./chunk-O745CMWG.js";
+
 // src/infra/checkers/ec2.ts
 import {
   DescribeInstancesCommand,
@@ -5,15 +9,7 @@ import {
   DescribeKeyPairsCommand,
   EC2Client
 } from "@aws-sdk/client-ec2";
-var clientCache = /* @__PURE__ */ new Map();
-function getClient(region) {
-  let client = clientCache.get(region);
-  if (!client) {
-    client = new EC2Client({ region });
-    clientCache.set(region, client);
-  }
-  return client;
-}
+var getClient = createClientFactory(EC2Client);
 async function checkInstance(client, arn) {
   const { resourceId, raw } = arn;
   try {
@@ -148,4 +144,4 @@ var EC2Checker = {
 export {
   EC2Checker
 };
-//# sourceMappingURL=ec2-HKPE6GZV.js.map
+//# sourceMappingURL=ec2-AEPT735A.js.map

package/dist/ec2-AEPT735A.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/infra/checkers/ec2.ts"],"sourcesContent":["/**\n * EC2 resource checker\n *\n * Supports:\n * - Instances\n * - Security groups\n * - Key pairs\n */\n\nimport {\n  DescribeInstancesCommand,\n  DescribeSecurityGroupsCommand,\n  DescribeKeyPairsCommand,\n  EC2Client,\n} from \"@aws-sdk/client-ec2\";\n\nimport type { ParsedArn, ResourceCheckResult } from \"../types.js\";\nimport { createClientFactory } from \"./client-factory.js\";\nimport type { ResourceChecker } from \"./types.js\";\n\n/**\n * Get or create an EC2 client for a region\n */\nconst getClient = createClientFactory(EC2Client);\n\n/**\n * Check if an EC2 instance exists\n */\nasync function checkInstance(\n  client: EC2Client,\n  arn: ParsedArn\n): Promise<ResourceCheckResult> {\n  const { resourceId, raw } = arn;\n\n  try {\n    const response = await client.send(\n      new DescribeInstancesCommand({ InstanceIds: [resourceId] })\n    );\n\n    const instance = response.Reservations?.[0]?.Instances?.[0];\n    const exists = !!instance && instance.State?.Name !== \"terminated\";\n\n    return {\n      arn: raw,\n      exists,\n      service: \"ec2\",\n      resourceType: \"instance\",\n      resourceId,\n    };\n  } catch (error) {\n    const err = error as Error & { name?: string };\n\n    if (err.name === \"InvalidInstanceID.NotFound\") {\n      return {\n        arn: raw,\n        exists: false,\n        service: \"ec2\",\n        resourceType: \"instance\",\n        resourceId,\n      };\n    }\n\n    return {\n      arn: raw,\n      exists: false,\n      error: err.message || \"Unknown error\",\n      service: \"ec2\",\n      resourceType: \"instance\",\n      resourceId,\n    };\n  }\n}\n\n/**\n * Check if an EC2 security group exists\n */\nasync function checkSecurityGroup(\n  client: EC2Client,\n  arn: ParsedArn\n): Promise<ResourceCheckResult> {\n  const { resourceId, raw } = arn;\n\n  try {\n    const response = await client.send(\n      new DescribeSecurityGroupsCommand({ GroupIds: [resourceId] })\n    );\n\n    const securityGroup = response.SecurityGroups?.[0];\n    const exists = !!securityGroup;\n\n    return {\n      arn: raw,\n      exists,\n      service: \"ec2\",\n      resourceType: \"security-group\",\n      resourceId,\n    };\n  } catch (error) {\n    const err = error as Error & { name?: string };\n\n    if (err.name === \"InvalidGroup.NotFound\") {\n      return {\n        arn: raw,\n        exists: false,\n        service: \"ec2\",\n        resourceType: \"security-group\",\n        resourceId,\n      };\n    }\n\n    return {\n      arn: raw,\n      exists: false,\n      error: err.message || \"Unknown error\",\n      service: \"ec2\",\n      resourceType: \"security-group\",\n      resourceId,\n    };\n  }\n}\n\n/**\n * Check if an EC2 key pair exists\n */\nasync function checkKeyPair(\n  client: EC2Client,\n  arn: ParsedArn\n): Promise<ResourceCheckResult> {\n  const { resourceId, raw } = arn;\n\n  try {\n    const response = await client.send(\n      new DescribeKeyPairsCommand({ KeyNames: [resourceId] })\n    );\n\n    const keyPair = response.KeyPairs?.[0];\n    const exists = !!keyPair;\n\n    return {\n      arn: raw,\n      exists,\n      service: \"ec2\",\n      resourceType: \"key-pair\",\n      resourceId,\n    };\n  } catch (error) {\n    const err = error as Error & { name?: string };\n\n    if (err.name === \"InvalidKeyPair.NotFound\") {\n      return {\n        arn: raw,\n        exists: false,\n        service: \"ec2\",\n        resourceType: \"key-pair\",\n        resourceId,\n      };\n    }\n\n    return {\n      arn: raw,\n      exists: false,\n      error: err.message || \"Unknown error\",\n      service: \"ec2\",\n      resourceType: \"key-pair\",\n      resourceId,\n    };\n  }\n}\n\n/**\n * EC2 resource checker\n */\nexport const EC2Checker: ResourceChecker = {\n  async check(arn: ParsedArn): Promise<ResourceCheckResult> {\n    const { resourceType, resourceId, region, raw } = arn;\n    const client = getClient(region);\n\n    switch (resourceType) {\n      case \"instance\":\n        return checkInstance(client, arn);\n\n      case \"security-group\":\n        return checkSecurityGroup(client, arn);\n\n      case \"key-pair\":\n        return checkKeyPair(client, arn);\n\n      default:\n        return {\n          arn: raw,\n          exists: false,\n          error: `Unsupported EC2 resource type: ${resourceType}`,\n          service: \"ec2\",\n          resourceType,\n          resourceId,\n        };\n    }\n  },\n};\n"],"mappings":";;;;;AASA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AASP,IAAM,YAAY,oBAAoB,SAAS;AAK/C,eAAe,cACb,QACA,KAC8B;AAC9B,QAAM,EAAE,YAAY,IAAI,IAAI;AAE5B,MAAI;AACF,UAAM,WAAW,MAAM,OAAO;AAAA,MAC5B,IAAI,yBAAyB,EAAE,aAAa,CAAC,UAAU,EAAE,CAAC;AAAA,IAC5D;AAEA,UAAM,WAAW,SAAS,eAAe,CAAC,GAAG,YAAY,CAAC;AAC1D,UAAM,SAAS,CAAC,CAAC,YAAY,SAAS,OAAO,SAAS;AAEtD,WAAO;AAAA,MACL,KAAK;AAAA,MACL;AAAA,MACA,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,UAAM,MAAM;AAEZ,QAAI,IAAI,SAAS,8BAA8B;AAC7C,aAAO;AAAA,QACL,KAAK;AAAA,QACL,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,cAAc;AAAA,QACd;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,OAAO,IAAI,WAAW;AAAA,MACtB,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF;AACF;AAKA,eAAe,mBACb,QACA,KAC8B;AAC9B,QAAM,EAAE,YAAY,IAAI,IAAI;AAE5B,MAAI;AACF,UAAM,WAAW,MAAM,OAAO;AAAA,MAC5B,IAAI,8BAA8B,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC;AAAA,IAC9D;AAEA,UAAM,gBAAgB,SAAS,iBAAiB,CAAC;AACjD,UAAM,SAAS,CAAC,CAAC;AAEjB,WAAO;AAAA,MACL,KAAK;AAAA,MACL;AAAA,MACA,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,UAAM,MAAM;AAEZ,QAAI,IAAI,SAAS,yBAAyB;AACxC,aAAO;AAAA,QACL,KAAK;AAAA,QACL,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,cAAc;AAAA,QACd;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,OAAO,IAAI,WAAW;AAAA,MACtB,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF;AACF;AAKA,eAAe,aACb,QACA,KAC8B;AAC9B,QAAM,EAAE,YAAY,IAAI,IAAI;AAE5B,MAAI;AACF,UAAM,WAAW,MAAM,OAAO;AAAA,MAC5B,IAAI,wBAAwB,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC;AAAA,IACxD;AAEA,UAAM,UAAU,SAAS,WAAW,CAAC;AACrC,UAAM,SAAS,CAAC,CAAC;AAEjB,WAAO;AAAA,MACL,KAAK;AAAA,MACL;AAAA,MACA,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,UAAM,MAAM;AAEZ,QAAI,IAAI,SAAS,2BAA2B;AAC1C,aAAO;AAAA,QACL,KAAK;AAAA,QACL,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,cAAc;AAAA,QACd;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,OAAO,IAAI,WAAW;AAAA,MACtB,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF;AACF;AAKO,IAAM,aAA8B;AAAA,EACzC,MAAM,MAAM,KAA8C;AACxD,UAAM,EAAE,cAAc,YAAY,QAAQ,IAAI,IAAI;AAClD,UAAM,SAAS,UAAU,MAAM;AAE/B,YAAQ,cAAc;AAAA,MACpB,KAAK;AACH,eAAO,cAAc,QAAQ,GAAG;AAAA,MAElC,KAAK;AACH,eAAO,mBAAmB,QAAQ,GAAG;AAAA,MAEvC,KAAK;AACH,eAAO,aAAa,QAAQ,GAAG;AAAA,MAEjC;AACE,eAAO;AAAA,UACL,KAAK;AAAA,UACL,QAAQ;AAAA,UACR,OAAO,kCAAkC,YAAY;AAAA,UACrD,SAAS;AAAA,UACT;AAAA,UACA;AAAA,QACF;AAAA,IACJ;AAAA,EACF;AACF;","names":[]}

package/dist/{ecs-OS3NJZTA.js → ecs-UHKCH5A7.js}

@@ -1,3 +1,7 @@
+import {
+  createClientFactory
+} from "./chunk-O745CMWG.js";
+
 // src/infra/checkers/ecs.ts
 import {
   DescribeClustersCommand,
@@ -5,15 +9,7 @@ import {
   DescribeTaskDefinitionCommand,
   ECSClient
 } from "@aws-sdk/client-ecs";
-var clientCache = /* @__PURE__ */ new Map();
-function getClient(region) {
-  let client = clientCache.get(region);
-  if (!client) {
-    client = new ECSClient({ region });
-    clientCache.set(region, client);
-  }
-  return client;
-}
+var getClient = createClientFactory(ECSClient);
 async function checkCluster(client, arn) {
   const { resourceId, raw } = arn;
   try {
@@ -138,4 +134,4 @@ var ECSChecker = {
 export {
   ECSChecker
 };
-//# sourceMappingURL=ecs-OS3NJZTA.js.map
+//# sourceMappingURL=ecs-UHKCH5A7.js.map

package/dist/ecs-UHKCH5A7.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/infra/checkers/ecs.ts"],"sourcesContent":["/**\n * ECS resource checker\n *\n * Supports:\n * - Clusters\n * - Services\n * - Task definitions\n */\n\nimport {\n  DescribeClustersCommand,\n  DescribeServicesCommand,\n  DescribeTaskDefinitionCommand,\n  ECSClient,\n} from \"@aws-sdk/client-ecs\";\n\nimport type { ParsedArn, ResourceCheckResult } from \"../types.js\";\nimport { createClientFactory } from \"./client-factory.js\";\nimport type { ResourceChecker } from \"./types.js\";\n\n/**\n * Get or create an ECS client for a region\n */\nconst getClient = createClientFactory(ECSClient);\n\n/**\n * Check if an ECS cluster exists\n */\nasync function checkCluster(\n  client: ECSClient,\n  arn: ParsedArn\n): Promise<ResourceCheckResult> {\n  const { resourceId, raw } = arn;\n\n  try {\n    const response = await client.send(\n      new DescribeClustersCommand({ clusters: [raw] })\n    );\n\n    const cluster = response.clusters?.[0];\n    const exists = cluster?.status === \"ACTIVE\";\n\n    return {\n      arn: raw,\n      exists,\n      service: \"ecs\",\n      resourceType: \"cluster\",\n      resourceId,\n    };\n  } catch (error) {\n    const err = error as Error;\n    return {\n      arn: raw,\n      exists: false,\n      error: err.message || \"Unknown error\",\n      service: \"ecs\",\n      resourceType: \"cluster\",\n      resourceId,\n    };\n  }\n}\n\n/**\n * Check if an ECS service exists\n *\n * Service ARN format: arn:aws:ecs:region:account:service/cluster/service-name\n */\nasync function checkService(\n  client: ECSClient,\n  arn: ParsedArn\n): Promise<ResourceCheckResult> {\n  const { resourceId, raw, accountId, region } = arn;\n\n  // resourceId format: cluster-name/service-name\n  const parts = resourceId.split(\"/\");\n  if (parts.length < 2) {\n    return {\n      arn: raw,\n      exists: false,\n      error: \"Invalid service ARN format\",\n      service: \"ecs\",\n      resourceType: \"service\",\n      resourceId,\n    };\n  }\n\n  const clusterName = parts[0];\n  const serviceName = parts[1];\n  const clusterArn = `arn:aws:ecs:${region}:${accountId}:cluster/${clusterName}`;\n\n  try {\n    const response = await client.send(\n      new DescribeServicesCommand({\n        cluster: clusterArn,\n        services: [serviceName],\n      })\n    );\n\n    const service = response.services?.[0];\n    const exists = service?.status === \"ACTIVE\";\n\n    return {\n      arn: raw,\n      exists,\n      service: \"ecs\",\n      resourceType: \"service\",\n      resourceId,\n    };\n  } catch (error) {\n    const err = error as Error;\n    return {\n      arn: raw,\n      exists: false,\n      error: err.message || \"Unknown error\",\n      service: \"ecs\",\n      resourceType: \"service\",\n      resourceId,\n    };\n  }\n}\n\n/**\n * Check if an ECS task definition exists\n *\n * Task definition ARN format: arn:aws:ecs:region:account:task-definition/name:revision\n * or: arn:aws:ecs:region:account:task-definition/name (latest)\n */\nasync function checkTaskDefinition(\n  client: ECSClient,\n  arn: ParsedArn\n): Promise<ResourceCheckResult> {\n  const { resourceId, raw } = arn;\n\n  try {\n    const response = await client.send(\n      new DescribeTaskDefinitionCommand({ taskDefinition: raw })\n    );\n\n    const taskDef = response.taskDefinition;\n    const exists = taskDef?.status === \"ACTIVE\";\n\n    return {\n      arn: raw,\n      exists,\n      service: \"ecs\",\n      resourceType: \"task-definition\",\n      resourceId,\n    };\n  } catch (error) {\n    const err = error as Error;\n    return {\n      arn: raw,\n      exists: false,\n      error: err.message || \"Unknown error\",\n      service: \"ecs\",\n      resourceType: \"task-definition\",\n      resourceId,\n    };\n  }\n}\n\n/**\n * ECS resource checker\n */\nexport const ECSChecker: ResourceChecker = {\n  async check(arn: ParsedArn): Promise<ResourceCheckResult> {\n    const { resourceType, resourceId, region, raw } = arn;\n    const client = getClient(region);\n\n    switch (resourceType) {\n      case \"cluster\":\n        return checkCluster(client, arn);\n\n      case \"service\":\n        return checkService(client, arn);\n\n      case \"task-definition\":\n        return checkTaskDefinition(client, arn);\n\n      default:\n        return {\n          arn: raw,\n          exists: false,\n          error: `Unsupported ECS resource type: ${resourceType}`,\n          service: \"ecs\",\n          resourceType,\n          resourceId,\n        };\n    }\n  },\n};\n"],"mappings":";;;;;AASA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AASP,IAAM,YAAY,oBAAoB,SAAS;AAK/C,eAAe,aACb,QACA,KAC8B;AAC9B,QAAM,EAAE,YAAY,IAAI,IAAI;AAE5B,MAAI;AACF,UAAM,WAAW,MAAM,OAAO;AAAA,MAC5B,IAAI,wBAAwB,EAAE,UAAU,CAAC,GAAG,EAAE,CAAC;AAAA,IACjD;AAEA,UAAM,UAAU,SAAS,WAAW,CAAC;AACrC,UAAM,SAAS,SAAS,WAAW;AAEnC,WAAO;AAAA,MACL,KAAK;AAAA,MACL;AAAA,MACA,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,UAAM,MAAM;AACZ,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,OAAO,IAAI,WAAW;AAAA,MACtB,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF;AACF;AAOA,eAAe,aACb,QACA,KAC8B;AAC9B,QAAM,EAAE,YAAY,KAAK,WAAW,OAAO,IAAI;AAG/C,QAAM,QAAQ,WAAW,MAAM,GAAG;AAClC,MAAI,MAAM,SAAS,GAAG;AACpB,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,OAAO;AAAA,MACP,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF;AAEA,QAAM,cAAc,MAAM,CAAC;AAC3B,QAAM,cAAc,MAAM,CAAC;AAC3B,QAAM,aAAa,eAAe,MAAM,IAAI,SAAS,YAAY,WAAW;AAE5E,MAAI;AACF,UAAM,WAAW,MAAM,OAAO;AAAA,MAC5B,IAAI,wBAAwB;AAAA,QAC1B,SAAS;AAAA,QACT,UAAU,CAAC,WAAW;AAAA,MACxB,CAAC;AAAA,IACH;AAEA,UAAM,UAAU,SAAS,WAAW,CAAC;AACrC,UAAM,SAAS,SAAS,WAAW;AAEnC,WAAO;AAAA,MACL,KAAK;AAAA,MACL;AAAA,MACA,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,UAAM,MAAM;AACZ,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,OAAO,IAAI,WAAW;AAAA,MACtB,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF;AACF;AAQA,eAAe,oBACb,QACA,KAC8B;AAC9B,QAAM,EAAE,YAAY,IAAI,IAAI;AAE5B,MAAI;AACF,UAAM,WAAW,MAAM,OAAO;AAAA,MAC5B,IAAI,8BAA8B,EAAE,gBAAgB,IAAI,CAAC;AAAA,IAC3D;AAEA,UAAM,UAAU,SAAS;AACzB,UAAM,SAAS,SAAS,WAAW;AAEnC,WAAO;AAAA,MACL,KAAK;AAAA,MACL;AAAA,MACA,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,UAAM,MAAM;AACZ,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,OAAO,IAAI,WAAW;AAAA,MACtB,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF;AACF;AAKO,IAAM,aAA8B;AAAA,EACzC,MAAM,MAAM,KAA8C;AACxD,UAAM,EAAE,cAAc,YAAY,QAAQ,IAAI,IAAI;AAClD,UAAM,SAAS,UAAU,MAAM;AAE/B,YAAQ,cAAc;AAAA,MACpB,KAAK;AACH,eAAO,aAAa,QAAQ,GAAG;AAAA,MAEjC,KAAK;AACH,eAAO,aAAa,QAAQ,GAAG;AAAA,MAEjC,KAAK;AACH,eAAO,oBAAoB,QAAQ,GAAG;AAAA,MAExC;AACE,eAAO;AAAA,UACL,KAAK;AAAA,UACL,QAAQ;AAAA,UACR,OAAO,kCAAkC,YAAY;AAAA,UACrD,SAAS;AAAA,UACT;AAAA,UACA;AAAA,QACF;AAAA,IACJ;AAAA,EACF;AACF;","names":[]}

package/dist/{elasticache-7TCRHYYM.js → elasticache-5Y6K7GKJ.js}

@@ -1,3 +1,7 @@
+import {
+  createClientFactory
+} from "./chunk-O745CMWG.js";
+
 // src/infra/checkers/elasticache.ts
 import {
   DescribeCacheClustersCommand,
@@ -5,15 +9,7 @@ import {
   DescribeReplicationGroupsCommand,
   ElastiCacheClient
 } from "@aws-sdk/client-elasticache";
-var clientCache = /* @__PURE__ */ new Map();
-function getClient(region) {
-  let client = clientCache.get(region);
-  if (!client) {
-    client = new ElastiCacheClient({ region });
-    clientCache.set(region, client);
-  }
-  return client;
-}
+var getClient = createClientFactory(ElastiCacheClient);
 async function checkCacheCluster(client, arn) {
   const { resourceId, raw } = arn;
   try {
@@ -148,4 +144,4 @@ var ElastiCacheChecker = {
 export {
   ElastiCacheChecker
 };
-//# sourceMappingURL=elasticache-7TCRHYYM.js.map
+//# sourceMappingURL=elasticache-5Y6K7GKJ.js.map

package/dist/elasticache-5Y6K7GKJ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/infra/checkers/elasticache.ts"],"sourcesContent":["/**\n * ElastiCache resource checker\n *\n * Supports:\n * - Cache clusters\n * - Subnet groups\n * - Replication groups\n */\n\nimport {\n  DescribeCacheClustersCommand,\n  DescribeCacheSubnetGroupsCommand,\n  DescribeReplicationGroupsCommand,\n  ElastiCacheClient,\n} from \"@aws-sdk/client-elasticache\";\n\nimport type { ParsedArn, ResourceCheckResult } from \"../types.js\";\nimport { createClientFactory } from \"./client-factory.js\";\nimport type { ResourceChecker } from \"./types.js\";\n\n/**\n * Get or create an ElastiCache client for a region\n */\nconst getClient = createClientFactory(ElastiCacheClient);\n\n/**\n * Check if an ElastiCache cluster exists\n */\nasync function checkCacheCluster(\n  client: ElastiCacheClient,\n  arn: ParsedArn\n): Promise<ResourceCheckResult> {\n  const { resourceId, raw } = arn;\n\n  try {\n    const response = await client.send(\n      new DescribeCacheClustersCommand({ CacheClusterId: resourceId })\n    );\n\n    const cluster = response.CacheClusters?.[0];\n    const exists = !!cluster && cluster.CacheClusterStatus !== \"deleting\";\n\n    return {\n      arn: raw,\n      exists,\n      service: \"elasticache\",\n      resourceType: \"cluster\",\n      resourceId,\n    };\n  } catch (error) {\n    const err = error as Error & { name?: string };\n\n    if (err.name === \"CacheClusterNotFoundFault\") {\n      return {\n        arn: raw,\n        exists: false,\n        service: \"elasticache\",\n        resourceType: \"cluster\",\n        resourceId,\n      };\n    }\n\n    return {\n      arn: raw,\n      exists: false,\n      error: err.message || \"Unknown error\",\n      service: \"elasticache\",\n      resourceType: \"cluster\",\n      resourceId,\n    };\n  }\n}\n\n/**\n * Check if an ElastiCache subnet group exists\n */\nasync function checkSubnetGroup(\n  client: ElastiCacheClient,\n  arn: ParsedArn\n): Promise<ResourceCheckResult> {\n  const { resourceId, raw } = arn;\n\n  try {\n    const response = await client.send(\n      new DescribeCacheSubnetGroupsCommand({ CacheSubnetGroupName: resourceId })\n    );\n\n    const subnetGroup = response.CacheSubnetGroups?.[0];\n    const exists = !!subnetGroup;\n\n    return {\n      arn: raw,\n      exists,\n      service: \"elasticache\",\n      resourceType: \"subnetgroup\",\n      resourceId,\n    };\n  } catch (error) {\n    const err = error as Error & { name?: string };\n\n    if (err.name === \"CacheSubnetGroupNotFoundFault\") {\n      return {\n        arn: raw,\n        exists: false,\n        service: \"elasticache\",\n        resourceType: \"subnetgroup\",\n        resourceId,\n      };\n    }\n\n    return {\n      arn: raw,\n      exists: false,\n      error: err.message || \"Unknown error\",\n      service: \"elasticache\",\n      resourceType: \"subnetgroup\",\n      resourceId,\n    };\n  }\n}\n\n/**\n * Check if an ElastiCache replication group exists\n */\nasync function checkReplicationGroup(\n  client: ElastiCacheClient,\n  arn: ParsedArn\n): Promise<ResourceCheckResult> {\n  const { resourceId, raw } = arn;\n\n  try {\n    const response = await client.send(\n      new DescribeReplicationGroupsCommand({ ReplicationGroupId: resourceId })\n    );\n\n    const replicationGroup = response.ReplicationGroups?.[0];\n    const exists = !!replicationGroup && replicationGroup.Status !== \"deleting\";\n\n    return {\n      arn: raw,\n      exists,\n      service: \"elasticache\",\n      resourceType: \"replicationgroup\",\n      resourceId,\n    };\n  } catch (error) {\n    const err = error as Error & { name?: string };\n\n    if (err.name === \"ReplicationGroupNotFoundFault\") {\n      return {\n        arn: raw,\n        exists: false,\n        service: \"elasticache\",\n        resourceType: \"replicationgroup\",\n        resourceId,\n      };\n    }\n\n    return {\n      arn: raw,\n      exists: false,\n      error: err.message || \"Unknown error\",\n      service: \"elasticache\",\n      resourceType: \"replicationgroup\",\n      resourceId,\n    };\n  }\n}\n\n/**\n * ElastiCache resource checker\n */\nexport const ElastiCacheChecker: ResourceChecker = {\n  async check(arn: ParsedArn): Promise<ResourceCheckResult> {\n    const { resourceType, resourceId, region, raw } = arn;\n    const client = getClient(region);\n\n    switch (resourceType) {\n      case \"cluster\":\n        return checkCacheCluster(client, arn);\n\n      case \"subnetgroup\":\n        return checkSubnetGroup(client, arn);\n\n      case \"replicationgroup\":\n        return checkReplicationGroup(client, arn);\n\n      default:\n        return {\n          arn: raw,\n          exists: false,\n          error: `Unsupported ElastiCache resource type: ${resourceType}`,\n          service: \"elasticache\",\n          resourceType,\n          resourceId,\n        };\n    }\n  },\n};\n"],"mappings":";;;;;AASA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AASP,IAAM,YAAY,oBAAoB,iBAAiB;AAKvD,eAAe,kBACb,QACA,KAC8B;AAC9B,QAAM,EAAE,YAAY,IAAI,IAAI;AAE5B,MAAI;AACF,UAAM,WAAW,MAAM,OAAO;AAAA,MAC5B,IAAI,6BAA6B,EAAE,gBAAgB,WAAW,CAAC;AAAA,IACjE;AAEA,UAAM,UAAU,SAAS,gBAAgB,CAAC;AAC1C,UAAM,SAAS,CAAC,CAAC,WAAW,QAAQ,uBAAuB;AAE3D,WAAO;AAAA,MACL,KAAK;AAAA,MACL;AAAA,MACA,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,UAAM,MAAM;AAEZ,QAAI,IAAI,SAAS,6BAA6B;AAC5C,aAAO;AAAA,QACL,KAAK;AAAA,QACL,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,cAAc;AAAA,QACd;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,OAAO,IAAI,WAAW;AAAA,MACtB,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF;AACF;AAKA,eAAe,iBACb,QACA,KAC8B;AAC9B,QAAM,EAAE,YAAY,IAAI,IAAI;AAE5B,MAAI;AACF,UAAM,WAAW,MAAM,OAAO;AAAA,MAC5B,IAAI,iCAAiC,EAAE,sBAAsB,WAAW,CAAC;AAAA,IAC3E;AAEA,UAAM,cAAc,SAAS,oBAAoB,CAAC;AAClD,UAAM,SAAS,CAAC,CAAC;AAEjB,WAAO;AAAA,MACL,KAAK;AAAA,MACL;AAAA,MACA,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,UAAM,MAAM;AAEZ,QAAI,IAAI,SAAS,iCAAiC;AAChD,aAAO;AAAA,QACL,KAAK;AAAA,QACL,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,cAAc;AAAA,QACd;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,OAAO,IAAI,WAAW;AAAA,MACtB,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF;AACF;AAKA,eAAe,sBACb,QACA,KAC8B;AAC9B,QAAM,EAAE,YAAY,IAAI,IAAI;AAE5B,MAAI;AACF,UAAM,WAAW,MAAM,OAAO;AAAA,MAC5B,IAAI,iCAAiC,EAAE,oBAAoB,WAAW,CAAC;AAAA,IACzE;AAEA,UAAM,mBAAmB,SAAS,oBAAoB,CAAC;AACvD,UAAM,SAAS,CAAC,CAAC,oBAAoB,iBAAiB,WAAW;AAEjE,WAAO;AAAA,MACL,KAAK;AAAA,MACL;AAAA,MACA,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,UAAM,MAAM;AAEZ,QAAI,IAAI,SAAS,iCAAiC;AAChD,aAAO;AAAA,QACL,KAAK;AAAA,QACL,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,cAAc;AAAA,QACd;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,OAAO,IAAI,WAAW;AAAA,MACtB,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF;AACF;AAKO,IAAM,qBAAsC;AAAA,EACjD,MAAM,MAAM,KAA8C;AACxD,UAAM,EAAE,cAAc,YAAY,QAAQ,IAAI,IAAI;AAClD,UAAM,SAAS,UAAU,MAAM;AAE/B,YAAQ,cAAc;AAAA,MACpB,KAAK;AACH,eAAO,kBAAkB,QAAQ,GAAG;AAAA,MAEtC,KAAK;AACH,eAAO,iBAAiB,QAAQ,GAAG;AAAA,MAErC,KAAK;AACH,eAAO,sBAAsB,QAAQ,GAAG;AAAA,MAE1C;AACE,eAAO;AAAA,UACL,KAAK;AAAA,UACL,QAAQ;AAAA,UACR,OAAO,0CAA0C,YAAY;AAAA,UAC7D,SAAS;AAAA,UACT;AAAA,UACA;AAAA,QACF;AAAA,IACJ;AAAA,EACF;AACF;","names":[]}

package/dist/{elb-PEDLXW5R.js → elb-CN6ELVM5.js}

@@ -1,3 +1,7 @@
+import {
+  createClientFactory
+} from "./chunk-O745CMWG.js";
+
 // src/infra/checkers/elb.ts
 import {
   DescribeLoadBalancersCommand,
@@ -5,15 +9,7 @@ import {
   DescribeListenersCommand,
   ElasticLoadBalancingV2Client
 } from "@aws-sdk/client-elastic-load-balancing-v2";
-var clientCache = /* @__PURE__ */ new Map();
-function getClient(region) {
-  let client = clientCache.get(region);
-  if (!client) {
-    client = new ElasticLoadBalancingV2Client({ region });
-    clientCache.set(region, client);
-  }
-  return client;
-}
+var getClient = createClientFactory(ElasticLoadBalancingV2Client);
 async function checkLoadBalancer(client, arn) {
   const { resourceId, raw } = arn;
   try {
@@ -148,4 +144,4 @@ var ELBChecker = {
 export {
   ELBChecker
 };
-//# sourceMappingURL=elb-PEDLXW5R.js.map
+//# sourceMappingURL=elb-CN6ELVM5.js.map

package/dist/elb-CN6ELVM5.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/infra/checkers/elb.ts"],"sourcesContent":["/**\n * Elastic Load Balancing v2 resource checker\n *\n * Supports:\n * - Load balancers (ALB, NLB, GLB)\n * - Target groups\n * - Listeners\n */\n\nimport {\n  DescribeLoadBalancersCommand,\n  DescribeTargetGroupsCommand,\n  DescribeListenersCommand,\n  ElasticLoadBalancingV2Client,\n} from \"@aws-sdk/client-elastic-load-balancing-v2\";\n\nimport type { ParsedArn, ResourceCheckResult } from \"../types.js\";\nimport { createClientFactory } from \"./client-factory.js\";\nimport type { ResourceChecker } from \"./types.js\";\n\n/**\n * Get or create an ELBv2 client for a region\n */\nconst getClient = createClientFactory(ElasticLoadBalancingV2Client);\n\n/**\n * Check if a load balancer exists\n */\nasync function checkLoadBalancer(\n  client: ElasticLoadBalancingV2Client,\n  arn: ParsedArn\n): Promise<ResourceCheckResult> {\n  const { resourceId, raw } = arn;\n\n  try {\n    const response = await client.send(\n      new DescribeLoadBalancersCommand({ LoadBalancerArns: [raw] })\n    );\n\n    const loadBalancer = response.LoadBalancers?.[0];\n    const exists =\n      !!loadBalancer &&\n      loadBalancer.State?.Code !== \"failed\" &&\n      loadBalancer.State?.Code !== \"active_impaired\";\n\n    return {\n      arn: raw,\n      exists,\n      service: \"elasticloadbalancing\",\n      resourceType: \"loadbalancer\",\n      resourceId,\n    };\n  } catch (error) {\n    const err = error as Error & { name?: string };\n\n    if (err.name === \"LoadBalancerNotFoundException\") {\n      return {\n        arn: raw,\n        exists: false,\n        service: \"elasticloadbalancing\",\n        resourceType: \"loadbalancer\",\n        resourceId,\n      };\n    }\n\n    return {\n      arn: raw,\n      exists: false,\n      error: err.message || \"Unknown error\",\n      service: \"elasticloadbalancing\",\n      resourceType: \"loadbalancer\",\n      resourceId,\n    };\n  }\n}\n\n/**\n * Check if a target group exists\n */\nasync function checkTargetGroup(\n  client: ElasticLoadBalancingV2Client,\n  arn: ParsedArn\n): Promise<ResourceCheckResult> {\n  const { resourceId, raw } = arn;\n\n  try {\n    const response = await client.send(\n      new DescribeTargetGroupsCommand({ TargetGroupArns: [raw] })\n    );\n\n    const targetGroup = response.TargetGroups?.[0];\n    const exists = !!targetGroup;\n\n    return {\n      arn: raw,\n      exists,\n      service: \"elasticloadbalancing\",\n      resourceType: \"targetgroup\",\n      resourceId,\n    };\n  } catch (error) {\n    const err = error as Error & { name?: string };\n\n    if (err.name === \"TargetGroupNotFoundException\") {\n      return {\n        arn: raw,\n        exists: false,\n        service: \"elasticloadbalancing\",\n        resourceType: \"targetgroup\",\n        resourceId,\n      };\n    }\n\n    return {\n      arn: raw,\n      exists: false,\n      error: err.message || \"Unknown error\",\n      service: \"elasticloadbalancing\",\n      resourceType: \"targetgroup\",\n      resourceId,\n    };\n  }\n}\n\n/**\n * Check if a listener exists\n */\nasync function checkListener(\n  client: ElasticLoadBalancingV2Client,\n  arn: ParsedArn\n): Promise<ResourceCheckResult> {\n  const { resourceId, raw } = arn;\n\n  try {\n    const response = await client.send(\n      new DescribeListenersCommand({ ListenerArns: [raw] })\n    );\n\n    const listener = response.Listeners?.[0];\n    const exists = !!listener;\n\n    return {\n      arn: raw,\n      exists,\n      service: \"elasticloadbalancing\",\n      resourceType: \"listener\",\n      resourceId,\n    };\n  } catch (error) {\n    const err = error as Error & { name?: string };\n\n    if (err.name === \"ListenerNotFoundException\") {\n      return {\n        arn: raw,\n        exists: false,\n        service: \"elasticloadbalancing\",\n        resourceType: \"listener\",\n        resourceId,\n      };\n    }\n\n    return {\n      arn: raw,\n      exists: false,\n      error: err.message || \"Unknown error\",\n      service: \"elasticloadbalancing\",\n      resourceType: \"listener\",\n      resourceId,\n    };\n  }\n}\n\n/**\n * Elastic Load Balancing resource checker\n */\nexport const ELBChecker: ResourceChecker = {\n  async check(arn: ParsedArn): Promise<ResourceCheckResult> {\n    const { resourceType, resourceId, region, raw } = arn;\n    const client = getClient(region);\n\n    switch (resourceType) {\n      case \"loadbalancer\":\n        return checkLoadBalancer(client, arn);\n\n      case \"targetgroup\":\n        return checkTargetGroup(client, arn);\n\n      case \"listener\":\n        return checkListener(client, arn);\n\n      default:\n        return {\n          arn: raw,\n          exists: false,\n          error: `Unsupported ELB resource type: ${resourceType}`,\n          service: \"elasticloadbalancing\",\n          resourceType,\n          resourceId,\n        };\n    }\n  },\n};\n"],"mappings":";;;;;AASA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AASP,IAAM,YAAY,oBAAoB,4BAA4B;AAKlE,eAAe,kBACb,QACA,KAC8B;AAC9B,QAAM,EAAE,YAAY,IAAI,IAAI;AAE5B,MAAI;AACF,UAAM,WAAW,MAAM,OAAO;AAAA,MAC5B,IAAI,6BAA6B,EAAE,kBAAkB,CAAC,GAAG,EAAE,CAAC;AAAA,IAC9D;AAEA,UAAM,eAAe,SAAS,gBAAgB,CAAC;AAC/C,UAAM,SACJ,CAAC,CAAC,gBACF,aAAa,OAAO,SAAS,YAC7B,aAAa,OAAO,SAAS;AAE/B,WAAO;AAAA,MACL,KAAK;AAAA,MACL;AAAA,MACA,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,UAAM,MAAM;AAEZ,QAAI,IAAI,SAAS,iCAAiC;AAChD,aAAO;AAAA,QACL,KAAK;AAAA,QACL,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,cAAc;AAAA,QACd;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,OAAO,IAAI,WAAW;AAAA,MACtB,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF;AACF;AAKA,eAAe,iBACb,QACA,KAC8B;AAC9B,QAAM,EAAE,YAAY,IAAI,IAAI;AAE5B,MAAI;AACF,UAAM,WAAW,MAAM,OAAO;AAAA,MAC5B,IAAI,4BAA4B,EAAE,iBAAiB,CAAC,GAAG,EAAE,CAAC;AAAA,IAC5D;AAEA,UAAM,cAAc,SAAS,eAAe,CAAC;AAC7C,UAAM,SAAS,CAAC,CAAC;AAEjB,WAAO;AAAA,MACL,KAAK;AAAA,MACL;AAAA,MACA,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,UAAM,MAAM;AAEZ,QAAI,IAAI,SAAS,gCAAgC;AAC/C,aAAO;AAAA,QACL,KAAK;AAAA,QACL,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,cAAc;AAAA,QACd;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,OAAO,IAAI,WAAW;AAAA,MACtB,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF;AACF;AAKA,eAAe,cACb,QACA,KAC8B;AAC9B,QAAM,EAAE,YAAY,IAAI,IAAI;AAE5B,MAAI;AACF,UAAM,WAAW,MAAM,OAAO;AAAA,MAC5B,IAAI,yBAAyB,EAAE,cAAc,CAAC,GAAG,EAAE,CAAC;AAAA,IACtD;AAEA,UAAM,WAAW,SAAS,YAAY,CAAC;AACvC,UAAM,SAAS,CAAC,CAAC;AAEjB,WAAO;AAAA,MACL,KAAK;AAAA,MACL;AAAA,MACA,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,UAAM,MAAM;AAEZ,QAAI,IAAI,SAAS,6BAA6B;AAC5C,aAAO;AAAA,QACL,KAAK;AAAA,QACL,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,cAAc;AAAA,QACd;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,OAAO,IAAI,WAAW;AAAA,MACtB,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF;AACF;AAKO,IAAM,aAA8B;AAAA,EACzC,MAAM,MAAM,KAA8C;AACxD,UAAM,EAAE,cAAc,YAAY,QAAQ,IAAI,IAAI;AAClD,UAAM,SAAS,UAAU,MAAM;AAE/B,YAAQ,cAAc;AAAA,MACpB,KAAK;AACH,eAAO,kBAAkB,QAAQ,GAAG;AAAA,MAEtC,KAAK;AACH,eAAO,iBAAiB,QAAQ,GAAG;AAAA,MAErC,KAAK;AACH,eAAO,cAAc,QAAQ,GAAG;AAAA,MAElC;AACE,eAAO;AAAA,UACL,KAAK;AAAA,UACL,QAAQ;AAAA,UACR,OAAO,kCAAkC,YAAY;AAAA,UACrD,SAAS;AAAA,UACT;AAAA,UACA;AAAA,QACF;AAAA,IACJ;AAAA,EACF;AACF;","names":[]}

package/dist/{iam-7H5HFWVQ.js → iam-YXMHK2MV.js}

@@ -1,8 +1,12 @@
+import {
+  AWS_DEFAULTS
+} from "./chunk-RHM53NLG.js";
+
 // src/infra/checkers/iam.ts
 import { GetPolicyCommand, GetRoleCommand, IAMClient } from "@aws-sdk/client-iam";
 var client = null;
 function getClient() {
-  client ??= new IAMClient({ region: "us-east-1" });
+  client ??= new IAMClient({ region: AWS_DEFAULTS.globalRegion });
   return client;
 }
 var IAMChecker = {
@@ -93,4 +97,4 @@ async function checkPolicy(policyArn) {
 export {
   IAMChecker
 };
-//# sourceMappingURL=iam-7H5HFWVQ.js.map
+//# sourceMappingURL=iam-YXMHK2MV.js.map

package/dist/iam-YXMHK2MV.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/infra/checkers/iam.ts"],"sourcesContent":["/**\n * IAM resource checker\n */\n\nimport { GetPolicyCommand, GetRoleCommand, IAMClient } from \"@aws-sdk/client-iam\";\n\nimport { AWS_DEFAULTS } from \"../../constants.js\";\nimport type { ParsedArn, ResourceCheckResult } from \"../types.js\";\nimport type { ResourceChecker } from \"./types.js\";\n\n/**\n * IAM is global, so we only need one client\n */\nlet client: IAMClient | null = null;\n\n/**\n * Get or create the IAM client\n */\nfunction getClient(): IAMClient {\n  // IAM is global, use the default global region\n  client ??= new IAMClient({ region: AWS_DEFAULTS.globalRegion });\n  return client;\n}\n\n/**\n * IAM resource checker (roles and policies)\n */\nexport const IAMChecker: ResourceChecker = {\n  async check(arn: ParsedArn): Promise<ResourceCheckResult> {\n    const { resourceType, resourceId, raw } = arn;\n\n    switch (resourceType) {\n      case \"role\":\n        return checkRole(resourceId, raw);\n      case \"policy\":\n        return checkPolicy(raw);\n      default:\n        return {\n          arn: raw,\n          exists: false,\n          error: `Unsupported IAM resource type: ${resourceType}`,\n          service: \"iam\",\n          resourceType,\n          resourceId,\n        };\n    }\n  },\n};\n\n/**\n * Check if an IAM role exists\n */\nasync function checkRole(roleName: string, arn: string): Promise<ResourceCheckResult> {\n  const iamClient = getClient();\n\n  try {\n    await iamClient.send(new GetRoleCommand({ RoleName: roleName }));\n    return {\n      arn,\n      exists: true,\n      service: \"iam\",\n      resourceType: \"role\",\n      resourceId: roleName,\n    };\n  } catch (error) {\n    const err = error as Error & { name?: string };\n\n    if (err.name === \"NoSuchEntityException\") {\n      return {\n        arn,\n        exists: false,\n        service: \"iam\",\n        resourceType: \"role\",\n        resourceId: roleName,\n      };\n    }\n\n    return {\n      arn,\n      exists: false,\n      error: err.message || \"Unknown error\",\n      service: \"iam\",\n      resourceType: \"role\",\n      resourceId: roleName,\n    };\n  }\n}\n\n/**\n * Check if an IAM policy exists\n */\nasync function checkPolicy(policyArn: string): Promise<ResourceCheckResult> {\n  const iamClient = getClient();\n\n  // Extract policy name from ARN for display\n  const policyName = policyArn.split(\"/\").pop() ?? policyArn;\n\n  try {\n    await iamClient.send(new GetPolicyCommand({ PolicyArn: policyArn }));\n    return {\n      arn: policyArn,\n      exists: true,\n      service: \"iam\",\n      resourceType: \"policy\",\n      resourceId: policyName,\n    };\n  } catch (error) {\n    const err = error as Error & { name?: string };\n\n    if (err.name === \"NoSuchEntityException\") {\n      return {\n        arn: policyArn,\n        exists: false,\n        service: \"iam\",\n        resourceType: \"policy\",\n        resourceId: policyName,\n      };\n    }\n\n    return {\n      arn: policyArn,\n      exists: false,\n      error: err.message || \"Unknown error\",\n      service: \"iam\",\n      resourceType: \"policy\",\n      resourceId: policyName,\n    };\n  }\n}\n"],"mappings":";;;;;AAIA,SAAS,kBAAkB,gBAAgB,iBAAiB;AAS5D,IAAI,SAA2B;AAK/B,SAAS,YAAuB;AAE9B,aAAW,IAAI,UAAU,EAAE,QAAQ,aAAa,aAAa,CAAC;AAC9D,SAAO;AACT;AAKO,IAAM,aAA8B;AAAA,EACzC,MAAM,MAAM,KAA8C;AACxD,UAAM,EAAE,cAAc,YAAY,IAAI,IAAI;AAE1C,YAAQ,cAAc;AAAA,MACpB,KAAK;AACH,eAAO,UAAU,YAAY,GAAG;AAAA,MAClC,KAAK;AACH,eAAO,YAAY,GAAG;AAAA,MACxB;AACE,eAAO;AAAA,UACL,KAAK;AAAA,UACL,QAAQ;AAAA,UACR,OAAO,kCAAkC,YAAY;AAAA,UACrD,SAAS;AAAA,UACT;AAAA,UACA;AAAA,QACF;AAAA,IACJ;AAAA,EACF;AACF;AAKA,eAAe,UAAU,UAAkB,KAA2C;AACpF,QAAM,YAAY,UAAU;AAE5B,MAAI;AACF,UAAM,UAAU,KAAK,IAAI,eAAe,EAAE,UAAU,SAAS,CAAC,CAAC;AAC/D,WAAO;AAAA,MACL;AAAA,MACA,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,cAAc;AAAA,MACd,YAAY;AAAA,IACd;AAAA,EACF,SAAS,OAAO;AACd,UAAM,MAAM;AAEZ,QAAI,IAAI,SAAS,yBAAyB;AACxC,aAAO;AAAA,QACL;AAAA,QACA,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,cAAc;AAAA,QACd,YAAY;AAAA,MACd;AAAA,IACF;AAEA,WAAO;AAAA,MACL;AAAA,MACA,QAAQ;AAAA,MACR,OAAO,IAAI,WAAW;AAAA,MACtB,SAAS;AAAA,MACT,cAAc;AAAA,MACd,YAAY;AAAA,IACd;AAAA,EACF;AACF;AAKA,eAAe,YAAY,WAAiD;AAC1E,QAAM,YAAY,UAAU;AAG5B,QAAM,aAAa,UAAU,MAAM,GAAG,EAAE,IAAI,KAAK;AAEjD,MAAI;AACF,UAAM,UAAU,KAAK,IAAI,iBAAiB,EAAE,WAAW,UAAU,CAAC,CAAC;AACnE,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,cAAc;AAAA,MACd,YAAY;AAAA,IACd;AAAA,EACF,SAAS,OAAO;AACd,UAAM,MAAM;AAEZ,QAAI,IAAI,SAAS,yBAAyB;AACxC,aAAO;AAAA,QACL,KAAK;AAAA,QACL,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,cAAc;AAAA,QACd,YAAY;AAAA,MACd;AAAA,IACF;AAEA,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,OAAO,IAAI,WAAW;AAAA,MACtB,SAAS;AAAA,MACT,cAAc;AAAA,MACd,YAAY;AAAA,IACd;AAAA,EACF;AACF;","names":[]}

package/dist/index.d.ts

@@ -0,0 +1,21 @@
+/**
+ * @standards-kit/conform - In-repo standards enforcement
+ */
+export type { CheckResult, DomainResult, DomainStatus, ExitCodeType, FullResult, IToolRunner, Severity, Violation, ViolationOptions, } from "./core/index.js";
+export { CheckResultBuilder, DomainResultBuilder, ExitCode, ViolationBuilder, } from "./core/index.js";
+export { type Config, ConfigError, configSchema, defaultConfig, findConfigFile, getProjectRoot, loadConfig, } from "./core/index.js";
+export { auditCodeConfig, BaseToolRunner, ESLintRunner, KnipRunner, NamingRunner, RuffRunner, runCodeChecks, TscRunner, TyRunner, VultureRunner, } from "./code/index.js";
+export { auditProcessConfig, BaseProcessToolRunner, HooksRunner, runProcessChecks, } from "./process/index.js";
+export { type RemoteRepoInfo, type ScanOptions, scanRepository, type ScanResult, validateProcess, type ValidateProcessOptions, type ValidateProcessResult, } from "./process/scan/index.js";
+export { formatJson, formatOutput, formatText, type OutputFormat } from "./output/index.js";
+export { type DependenciesOptions, type DependenciesResult, getDependencies, } from "./dependencies/index.js";
+export { formatTierResultJson, formatTierResultText, type Tier, type TierSourceDetail, VALID_TIERS, type ValidateTierOptions, type ValidateTierResult, validateTierRuleset, } from "./validate/index.js";
+export { createServer as createMcpServer, startServer as startMcpServer, type Guideline, type GuidelineFrontmatter, type GuidelineListItem, type Ruleset, } from "./mcp/index.js";
+export type { AccountId, AccountScanResult, Arn, CloudProvider, GcpResourcePath, InfraScanResult, InfraScanSummary, LegacyManifest, Manifest, ManifestAccount, MultiAccountManifest, ParsedArn, ParsedGcpResource, PulumiResource, PulumiStackExport, ResourceCheckResult, ResourceIdentifier, ScanInfraOptions, GenerateManifestOptions, } from "./infra/index.js";
+export { ArnSchema, AccountIdSchema, AccountKeySchema, CloudProviderSchema, GcpResourcePathSchema, InfraScanResultSchema, InfraScanSummarySchema, LegacyManifestSchema, ManifestAccountSchema, ManifestSchema, MultiAccountManifestSchema, ParsedArnSchema, ParsedGcpResourceSchema, PulumiResourceSchema, PulumiStackExportSchema, ResourceCheckResultSchema, ResourceIdentifierSchema, } from "./infra/index.js";
+export { isValidArnFormat, isValidGcpResourcePath, isValidAccountKey, isMultiAccountManifestSchema, isLegacyManifestSchema, validateArn, validateGcpResourcePath, validateAccountKey, validateManifest, validateMultiAccountManifest, validateLegacyManifest, validateStackExport, } from "./infra/index.js";
+export { ManifestError, isMultiAccountManifest, isLegacyManifest, parseAccountKey, formatAccountKey, normalizeManifest, detectAccountFromResource, getAllResources, } from "./infra/index.js";
+export { parseArn, isValidArn, parseGcpResource, isValidGcpResource, } from "./infra/index.js";
+export { SUPPORTED_SERVICES, isSupportedService, SUPPORTED_GCP_SERVICES, isSupportedGcpService, } from "./infra/index.js";
+export { DEFAULT_MANIFEST_NAME, generateManifestFromStdin, generateManifestFromFile, generateMultiAccountFromStdin, generateMultiAccountFromFile, generateWithMerge, mergeIntoManifest, parseStackExport, parseStackExportMultiAccount, readExistingManifest, writeManifest, } from "./infra/index.js";
+export { scanInfra } from "./infra/index.js";