@standards-kit/conform 0.1.0

package/dist/lambda-NFB5UILT.js

@@ -0,0 +1,60 @@
+// src/infra/checkers/lambda.ts
+import { GetFunctionCommand, LambdaClient } from "@aws-sdk/client-lambda";
+var clientCache = /* @__PURE__ */ new Map();
+function getClient(region) {
+  let client = clientCache.get(region);
+  if (!client) {
+    client = new LambdaClient({ region });
+    clientCache.set(region, client);
+  }
+  return client;
+}
+var LambdaChecker = {
+  async check(arn) {
+    const { resourceType, resourceId, region, raw } = arn;
+    if (resourceType !== "function") {
+      return {
+        arn: raw,
+        exists: false,
+        error: `Unsupported Lambda resource type: ${resourceType}`,
+        service: "lambda",
+        resourceType,
+        resourceId
+      };
+    }
+    const client = getClient(region);
+    try {
+      await client.send(new GetFunctionCommand({ FunctionName: resourceId }));
+      return {
+        arn: raw,
+        exists: true,
+        service: "lambda",
+        resourceType: "function",
+        resourceId
+      };
+    } catch (error) {
+      const err = error;
+      if (err.name === "ResourceNotFoundException") {
+        return {
+          arn: raw,
+          exists: false,
+          service: "lambda",
+          resourceType: "function",
+          resourceId
+        };
+      }
+      return {
+        arn: raw,
+        exists: false,
+        error: err.message || "Unknown error",
+        service: "lambda",
+        resourceType: "function",
+        resourceId
+      };
+    }
+  }
+};
+export {
+  LambdaChecker
+};
+//# sourceMappingURL=lambda-NFB5UILT.js.map

package/dist/lambda-NFB5UILT.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/infra/checkers/lambda.ts"],"sourcesContent":["/**\n * Lambda resource checker\n */\n\nimport { GetFunctionCommand, LambdaClient } from \"@aws-sdk/client-lambda\";\n\nimport type { ParsedArn, ResourceCheckResult } from \"../types.js\";\nimport type { ResourceChecker } from \"./types.js\";\n\n/**\n * Cache of Lambda clients by region\n */\nconst clientCache = new Map<string, LambdaClient>();\n\n/**\n * Get or create a Lambda client for a region\n */\nfunction getClient(region: string): LambdaClient {\n  let client = clientCache.get(region);\n  if (!client) {\n    client = new LambdaClient({ region });\n    clientCache.set(region, client);\n  }\n  return client;\n}\n\n/**\n * Lambda function checker\n */\nexport const LambdaChecker: ResourceChecker = {\n  async check(arn: ParsedArn): Promise<ResourceCheckResult> {\n    const { resourceType, resourceId, region, raw } = arn;\n\n    // Only check functions (not layers for now)\n    if (resourceType !== \"function\") {\n      return {\n        arn: raw,\n        exists: false,\n        error: `Unsupported Lambda resource type: ${resourceType}`,\n        service: \"lambda\",\n        resourceType,\n        resourceId,\n      };\n    }\n\n    const client = getClient(region);\n\n    try {\n      await client.send(new GetFunctionCommand({ FunctionName: resourceId }));\n      return {\n        arn: raw,\n        exists: true,\n        service: \"lambda\",\n        resourceType: \"function\",\n        resourceId,\n      };\n    } catch (error) {\n      const err = error as Error & { name?: string };\n\n      if (err.name === \"ResourceNotFoundException\") {\n        return {\n          arn: raw,\n          exists: false,\n          service: \"lambda\",\n          resourceType: \"function\",\n          resourceId,\n        };\n      }\n\n      return {\n        arn: raw,\n        exists: false,\n        error: err.message || \"Unknown error\",\n        service: \"lambda\",\n        resourceType: \"function\",\n        resourceId,\n      };\n    }\n  },\n};\n"],"mappings":";AAIA,SAAS,oBAAoB,oBAAoB;AAQjD,IAAM,cAAc,oBAAI,IAA0B;AAKlD,SAAS,UAAU,QAA8B;AAC/C,MAAI,SAAS,YAAY,IAAI,MAAM;AACnC,MAAI,CAAC,QAAQ;AACX,aAAS,IAAI,aAAa,EAAE,OAAO,CAAC;AACpC,gBAAY,IAAI,QAAQ,MAAM;AAAA,EAChC;AACA,SAAO;AACT;AAKO,IAAM,gBAAiC;AAAA,EAC5C,MAAM,MAAM,KAA8C;AACxD,UAAM,EAAE,cAAc,YAAY,QAAQ,IAAI,IAAI;AAGlD,QAAI,iBAAiB,YAAY;AAC/B,aAAO;AAAA,QACL,KAAK;AAAA,QACL,QAAQ;AAAA,QACR,OAAO,qCAAqC,YAAY;AAAA,QACxD,SAAS;AAAA,QACT;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,SAAS,UAAU,MAAM;AAE/B,QAAI;AACF,YAAM,OAAO,KAAK,IAAI,mBAAmB,EAAE,cAAc,WAAW,CAAC,CAAC;AACtE,aAAO;AAAA,QACL,KAAK;AAAA,QACL,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,cAAc;AAAA,QACd;AAAA,MACF;AAAA,IACF,SAAS,OAAO;AACd,YAAM,MAAM;AAEZ,UAAI,IAAI,SAAS,6BAA6B;AAC5C,eAAO;AAAA,UACL,KAAK;AAAA,UACL,QAAQ;AAAA,UACR,SAAS;AAAA,UACT,cAAc;AAAA,UACd;AAAA,QACF;AAAA,MACF;AAEA,aAAO;AAAA,QACL,KAAK;AAAA,QACL,QAAQ;AAAA,QACR,OAAO,IAAI,WAAW;AAAA,QACtB,SAAS;AAAA,QACT,cAAc;AAAA,QACd;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;","names":[]}

package/dist/manifest-7AIL2FK2.js

@@ -0,0 +1,23 @@
+import {
+  ManifestError,
+  detectAccountFromResource,
+  formatAccountKey,
+  getAllResources,
+  isLegacyManifest,
+  isMultiAccountManifest,
+  normalizeManifest,
+  parseAccountKey,
+  readManifest
+} from "./chunk-M7G73Q6P.js";
+export {
+  ManifestError,
+  detectAccountFromResource,
+  formatAccountKey,
+  getAllResources,
+  isLegacyManifest,
+  isMultiAccountManifest,
+  normalizeManifest,
+  parseAccountKey,
+  readManifest
+};
+//# sourceMappingURL=manifest-7AIL2FK2.js.map

package/dist/manifest-7AIL2FK2.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/mcp-O5O7XVFG.js

@@ -0,0 +1,204 @@
+import {
+  composeGuidelines,
+  fetchStandardsRepo,
+  fetchStandardsRepoFromSource,
+  getGuidelinesDir,
+  getRulesetsDir,
+  listRulesets,
+  loadAllGuidelines,
+  loadGuideline,
+  loadRuleset,
+  matchGuidelines,
+  toListItems
+} from "./chunk-RXA4FO7L.js";
+import "./chunk-P7TIZJ4C.js";
+import {
+  loadConfigAsync
+} from "./chunk-KHO6NIAI.js";
+
+// src/mcp/server.ts
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+
+// src/mcp/tools/get-guideline.ts
+import { z } from "zod";
+var getGuidelineInputSchema = {
+  id: z.string().describe('Guideline ID (e.g., "auth", "database", "typescript")')
+};
+function createGetGuidelineHandler(source) {
+  return async (args) => {
+    const repoPath = source ? await fetchStandardsRepoFromSource(source) : await fetchStandardsRepo();
+    const guidelinesDir = getGuidelinesDir(repoPath);
+    const guideline = loadGuideline(guidelinesDir, args.id);
+    if (!guideline) {
+      return {
+        content: [
+          {
+            type: "text",
+            text: `Guideline not found: ${args.id}`
+          }
+        ],
+        isError: true
+      };
+    }
+    const header = `# ${guideline.title}
+
+**Category:** ${guideline.category} | **Priority:** ${guideline.priority}
+**Tags:** ${guideline.tags.join(", ")}
+
+---
+
+`;
+    return {
+      content: [
+        {
+          type: "text",
+          text: header + guideline.content
+        }
+      ]
+    };
+  };
+}
+
+// src/mcp/tools/get-ruleset.ts
+import { z as z2 } from "zod";
+var getRulesetInputSchema = {
+  id: z2.string().describe('Ruleset ID (e.g., "typescript-production", "python-internal")')
+};
+function createGetRulesetHandler(source) {
+  return async (args) => {
+    const repoPath = source ? await fetchStandardsRepoFromSource(source) : await fetchStandardsRepo();
+    const rulesetsDir = getRulesetsDir(repoPath);
+    const ruleset = loadRuleset(rulesetsDir, args.id);
+    if (!ruleset) {
+      const available = listRulesets(rulesetsDir);
+      return {
+        content: [
+          {
+            type: "text",
+            text: `Ruleset not found: ${args.id}
+
+Available rulesets:
+${available.map((r) => `- ${r}`).join("\n")}`
+          }
+        ],
+        isError: true
+      };
+    }
+    return {
+      content: [
+        {
+          type: "text",
+          text: `# Ruleset: ${ruleset.id}
+
+\`\`\`toml
+${ruleset.content}
+\`\`\``
+        }
+      ]
+    };
+  };
+}
+
+// src/mcp/tools/get-standards.ts
+import { z as z3 } from "zod";
+var getStandardsInputSchema = {
+  context: z3.string().describe(
+    'Context string describing the task or technology stack (e.g., "python fastapi llm postgresql")'
+  ),
+  limit: z3.number().optional().describe("Maximum number of guidelines to return (default: 5)")
+};
+function createGetStandardsHandler(source) {
+  return async (args) => {
+    const repoPath = source ? await fetchStandardsRepoFromSource(source) : await fetchStandardsRepo();
+    const guidelinesDir = getGuidelinesDir(repoPath);
+    const guidelines = loadAllGuidelines(guidelinesDir);
+    const limit = args.limit ?? 5;
+    const matches = matchGuidelines(guidelines, args.context, limit);
+    const composed = composeGuidelines(matches);
+    const summary = matches.length > 0 ? `Found ${matches.length} matching guideline(s) for context: "${args.context}"
+
+Matched guidelines (by relevance):
+${matches.map((m) => `- ${m.guideline.title} (score: ${m.score.toFixed(1)})`).join("\n")}
+
+---
+
+` : "";
+    return {
+      content: [
+        {
+          type: "text",
+          text: summary + composed
+        }
+      ]
+    };
+  };
+}
+
+// src/mcp/tools/list-guidelines.ts
+import { z as z4 } from "zod";
+var listGuidelinesInputSchema = {
+  category: z4.string().optional().describe("Optional category filter (e.g., 'security', 'infrastructure')")
+};
+function createListGuidelinesHandler(source) {
+  return async (args) => {
+    const repoPath = source ? await fetchStandardsRepoFromSource(source) : await fetchStandardsRepo();
+    const guidelinesDir = getGuidelinesDir(repoPath);
+    let guidelines = loadAllGuidelines(guidelinesDir);
+    if (args.category) {
+      const categoryLower = args.category.toLowerCase();
+      guidelines = guidelines.filter((g) => g.category.toLowerCase() === categoryLower);
+    }
+    const items = toListItems(guidelines);
+    return {
+      content: [
+        {
+          type: "text",
+          text: JSON.stringify(items, null, 2)
+        }
+      ]
+    };
+  };
+}
+
+// src/mcp/server.ts
+function createServer(options = {}) {
+  const server = new McpServer({
+    name: "cm-standards",
+    version: "1.0.0"
+  });
+  const { standardsSource } = options;
+  server.registerTool("get_standards", {
+    description: "Get composed coding standards matching a context string. Use this to fetch relevant guidelines for a specific technology stack or task.",
+    inputSchema: getStandardsInputSchema
+  }, createGetStandardsHandler(standardsSource));
+  server.registerTool("list_guidelines", {
+    description: "List all available coding guidelines with optional category filter.",
+    inputSchema: listGuidelinesInputSchema
+  }, createListGuidelinesHandler(standardsSource));
+  server.registerTool("get_guideline", {
+    description: "Get a single coding guideline by its ID.",
+    inputSchema: getGuidelineInputSchema
+  }, createGetGuidelineHandler(standardsSource));
+  server.registerTool("get_ruleset", {
+    description: "Get a tool configuration ruleset by ID (e.g., typescript-production, python-internal).",
+    inputSchema: getRulesetInputSchema
+  }, createGetRulesetHandler(standardsSource));
+  return server;
+}
+async function startServer() {
+  let standardsSource;
+  try {
+    const { config } = await loadConfigAsync();
+    standardsSource = config.mcp?.standards?.source;
+  } catch {
+  }
+  const server = createServer({ standardsSource });
+  const transport = new StdioServerTransport();
+  await server.connect(transport);
+}
+export {
+  createServer,
+  startServer
+};
+//# sourceMappingURL=mcp-O5O7XVFG.js.map

package/dist/mcp-O5O7XVFG.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/mcp/server.ts","../src/mcp/tools/get-guideline.ts","../src/mcp/tools/get-ruleset.ts","../src/mcp/tools/get-standards.ts","../src/mcp/tools/list-guidelines.ts"],"sourcesContent":["/**\n * MCP Server for coding standards\n */\nimport { McpServer } from \"@modelcontextprotocol/sdk/server/mcp.js\";\nimport { StdioServerTransport } from \"@modelcontextprotocol/sdk/server/stdio.js\";\n\nimport { loadConfigAsync } from \"@standards-kit/core\";\nimport {\n  createGetGuidelineHandler,\n  getGuidelineInputSchema,\n  createGetRulesetHandler,\n  getRulesetInputSchema,\n  createGetStandardsHandler,\n  getStandardsInputSchema,\n  createListGuidelinesHandler,\n  listGuidelinesInputSchema,\n} from \"./tools/index.js\";\n\n/** Options for creating the MCP server */\nexport interface CreateServerOptions {\n  /** Standards repository source (e.g., \"github:owner/repo\" or local path) */\n  standardsSource?: string;\n}\n\n/**\n * Create and configure the MCP server with all tools registered.\n */\nexport function createServer(options: CreateServerOptions = {}): McpServer {\n  const server = new McpServer({\n    name: \"cm-standards\",\n    version: \"1.0.0\",\n  });\n\n  const { standardsSource } = options;\n\n  // Register get_standards tool - smart context matching\n  server.registerTool(\"get_standards\", {\n    description:\n      \"Get composed coding standards matching a context string. Use this to fetch relevant guidelines for a specific technology stack or task.\",\n    inputSchema: getStandardsInputSchema,\n  }, createGetStandardsHandler(standardsSource));\n\n  // Register list_guidelines tool\n  server.registerTool(\"list_guidelines\", {\n    description: \"List all available coding guidelines with optional category filter.\",\n    inputSchema: listGuidelinesInputSchema,\n  }, createListGuidelinesHandler(standardsSource));\n\n  // Register get_guideline tool\n  server.registerTool(\"get_guideline\", {\n    description: \"Get a single coding guideline by its ID.\",\n    inputSchema: getGuidelineInputSchema,\n  }, createGetGuidelineHandler(standardsSource));\n\n  // Register get_ruleset tool\n  server.registerTool(\"get_ruleset\", {\n    description:\n      \"Get a tool configuration ruleset by ID (e.g., typescript-production, python-internal).\",\n    inputSchema: getRulesetInputSchema,\n  }, createGetRulesetHandler(standardsSource));\n\n  return server;\n}\n\n/**\n * Start the MCP server with stdio transport.\n * Loads configuration from standards.toml to get the standards source.\n */\nexport async function startServer(): Promise<void> {\n  let standardsSource: string | undefined;\n\n  // Try to load config to get standards source\n  try {\n    const { config } = await loadConfigAsync();\n    standardsSource = config.mcp?.standards?.source;\n  } catch {\n    // Config not found or invalid, use defaults\n  }\n\n  const server = createServer({ standardsSource });\n  const transport = new StdioServerTransport();\n  await server.connect(transport);\n}\n","/**\n * MCP tool: get_guideline\n * Gets a single coding guideline by ID\n */\nimport { z } from \"zod\";\n\nimport {\n  fetchStandardsRepo,\n  fetchStandardsRepoFromSource,\n  getGuidelinesDir,\n  loadGuideline,\n} from \"../standards/index.js\";\n\n/** Input schema for get_guideline tool */\nexport const getGuidelineInputSchema = {\n  id: z.string().describe('Guideline ID (e.g., \"auth\", \"database\", \"typescript\")'),\n};\n\n/** Handler result type - must have index signature for MCP SDK */\ninterface HandlerResult {\n  [x: string]: unknown;\n  content: { type: \"text\"; text: string }[];\n  isError?: boolean;\n}\n\n/**\n * Create a get_guideline handler with optional custom source.\n * @param source - Optional standards source (e.g., \"github:owner/repo\" or local path)\n */\nexport function createGetGuidelineHandler(\n  source?: string\n): (args: { id: string }) => Promise<HandlerResult> {\n  return async (args) => {\n    const repoPath = source\n      ? await fetchStandardsRepoFromSource(source)\n      : await fetchStandardsRepo();\n    const guidelinesDir = getGuidelinesDir(repoPath);\n    const guideline = loadGuideline(guidelinesDir, args.id);\n\n    if (!guideline) {\n      return {\n        content: [\n          {\n            type: \"text\",\n            text: `Guideline not found: ${args.id}`,\n          },\n        ],\n        isError: true,\n      };\n    }\n\n    // Return full markdown content with frontmatter info\n    const header = `# ${guideline.title}\\n\\n**Category:** ${guideline.category} | **Priority:** ${guideline.priority}\\n**Tags:** ${guideline.tags.join(\", \")}\\n\\n---\\n\\n`;\n\n    return {\n      content: [\n        {\n          type: \"text\",\n          text: header + guideline.content,\n        },\n      ],\n    };\n  };\n}\n","/**\n * MCP tool: get_ruleset\n * Gets a tool configuration ruleset by ID\n */\nimport { z } from \"zod\";\n\nimport {\n  fetchStandardsRepo,\n  fetchStandardsRepoFromSource,\n  getRulesetsDir,\n  loadRuleset,\n  listRulesets,\n} from \"../standards/index.js\";\n\n/** Input schema for get_ruleset tool */\nexport const getRulesetInputSchema = {\n  id: z.string().describe('Ruleset ID (e.g., \"typescript-production\", \"python-internal\")'),\n};\n\n/** Handler result type - must have index signature for MCP SDK */\ninterface HandlerResult {\n  [x: string]: unknown;\n  content: { type: \"text\"; text: string }[];\n  isError?: boolean;\n}\n\n/**\n * Create a get_ruleset handler with optional custom source.\n * @param source - Optional standards source (e.g., \"github:owner/repo\" or local path)\n */\nexport function createGetRulesetHandler(\n  source?: string\n): (args: { id: string }) => Promise<HandlerResult> {\n  return async (args) => {\n    const repoPath = source\n      ? await fetchStandardsRepoFromSource(source)\n      : await fetchStandardsRepo();\n    const rulesetsDir = getRulesetsDir(repoPath);\n    const ruleset = loadRuleset(rulesetsDir, args.id);\n\n    if (!ruleset) {\n      const available = listRulesets(rulesetsDir);\n      return {\n        content: [\n          {\n            type: \"text\",\n            text: `Ruleset not found: ${args.id}\\n\\nAvailable rulesets:\\n${available.map((r) => `- ${r}`).join(\"\\n\")}`,\n          },\n        ],\n        isError: true,\n      };\n    }\n\n    return {\n      content: [\n        {\n          type: \"text\",\n          text: `# Ruleset: ${ruleset.id}\\n\\n\\`\\`\\`toml\\n${ruleset.content}\\n\\`\\`\\``,\n        },\n      ],\n    };\n  };\n}\n","/**\n * MCP tool: get_standards\n * Gets composed coding standards matching a context string\n */\nimport { z } from \"zod\";\n\nimport {\n  fetchStandardsRepo,\n  fetchStandardsRepoFromSource,\n  getGuidelinesDir,\n  loadAllGuidelines,\n  matchGuidelines,\n  composeGuidelines,\n} from \"../standards/index.js\";\n\n/** Input schema for get_standards tool */\nexport const getStandardsInputSchema = {\n  context: z\n    .string()\n    .describe(\n      'Context string describing the task or technology stack (e.g., \"python fastapi llm postgresql\")'\n    ),\n  limit: z.number().optional().describe(\"Maximum number of guidelines to return (default: 5)\"),\n};\n\n/** Handler result type - must have index signature for MCP SDK */\ninterface HandlerResult {\n  [x: string]: unknown;\n  content: { type: \"text\"; text: string }[];\n}\n\n/**\n * Create a get_standards handler with optional custom source.\n * @param source - Optional standards source (e.g., \"github:owner/repo\" or local path)\n */\nexport function createGetStandardsHandler(\n  source?: string\n): (args: { context: string; limit?: number }) => Promise<HandlerResult> {\n  return async (args) => {\n    const repoPath = source\n      ? await fetchStandardsRepoFromSource(source)\n      : await fetchStandardsRepo();\n    const guidelinesDir = getGuidelinesDir(repoPath);\n    const guidelines = loadAllGuidelines(guidelinesDir);\n\n    const limit = args.limit ?? 5;\n    const matches = matchGuidelines(guidelines, args.context, limit);\n\n    const composed = composeGuidelines(matches);\n\n    // Add summary header\n    const summary =\n      matches.length > 0\n        ? `Found ${matches.length} matching guideline(s) for context: \"${args.context}\"\\n\\nMatched guidelines (by relevance):\\n${matches.map((m) => `- ${m.guideline.title} (score: ${m.score.toFixed(1)})`).join(\"\\n\")}\\n\\n---\\n\\n`\n        : \"\";\n\n    return {\n      content: [\n        {\n          type: \"text\",\n          text: summary + composed,\n        },\n      ],\n    };\n  };\n}\n","/**\n * MCP tool: list_guidelines\n * Lists all available coding guidelines with optional category filter\n */\nimport { z } from \"zod\";\n\nimport {\n  fetchStandardsRepo,\n  fetchStandardsRepoFromSource,\n  getGuidelinesDir,\n  loadAllGuidelines,\n  toListItems,\n} from \"../standards/index.js\";\n\n/** Input schema for list_guidelines tool */\nexport const listGuidelinesInputSchema = {\n  category: z.string().optional().describe(\"Optional category filter (e.g., 'security', 'infrastructure')\"),\n};\n\n/** Handler result type - must have index signature for MCP SDK */\ninterface HandlerResult {\n  [x: string]: unknown;\n  content: { type: \"text\"; text: string }[];\n}\n\n/**\n * Create a list_guidelines handler with optional custom source.\n * @param source - Optional standards source (e.g., \"github:owner/repo\" or local path)\n */\nexport function createListGuidelinesHandler(\n  source?: string\n): (args: { category?: string }) => Promise<HandlerResult> {\n  return async (args) => {\n    const repoPath = source\n      ? await fetchStandardsRepoFromSource(source)\n      : await fetchStandardsRepo();\n    const guidelinesDir = getGuidelinesDir(repoPath);\n    let guidelines = loadAllGuidelines(guidelinesDir);\n\n    // Filter by category if provided\n    if (args.category) {\n      const categoryLower = args.category.toLowerCase();\n      guidelines = guidelines.filter((g) => g.category.toLowerCase() === categoryLower);\n    }\n\n    const items = toListItems(guidelines);\n\n    return {\n      content: [\n        {\n          type: \"text\",\n          text: JSON.stringify(items, null, 2),\n        },\n      ],\n    };\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAGA,SAAS,iBAAiB;AAC1B,SAAS,4BAA4B;;;ACArC,SAAS,SAAS;AAUX,IAAM,0BAA0B;AAAA,EACrC,IAAI,EAAE,OAAO,EAAE,SAAS,uDAAuD;AACjF;AAaO,SAAS,0BACd,QACkD;AAClD,SAAO,OAAO,SAAS;AACrB,UAAM,WAAW,SACb,MAAM,6BAA6B,MAAM,IACzC,MAAM,mBAAmB;AAC7B,UAAM,gBAAgB,iBAAiB,QAAQ;AAC/C,UAAM,YAAY,cAAc,eAAe,KAAK,EAAE;AAEtD,QAAI,CAAC,WAAW;AACd,aAAO;AAAA,QACL,SAAS;AAAA,UACP;AAAA,YACE,MAAM;AAAA,YACN,MAAM,wBAAwB,KAAK,EAAE;AAAA,UACvC;AAAA,QACF;AAAA,QACA,SAAS;AAAA,MACX;AAAA,IACF;AAGA,UAAM,SAAS,KAAK,UAAU,KAAK;AAAA;AAAA,gBAAqB,UAAU,QAAQ,oBAAoB,UAAU,QAAQ;AAAA,YAAe,UAAU,KAAK,KAAK,IAAI,CAAC;AAAA;AAAA;AAAA;AAAA;AAExJ,WAAO;AAAA,MACL,SAAS;AAAA,QACP;AAAA,UACE,MAAM;AAAA,UACN,MAAM,SAAS,UAAU;AAAA,QAC3B;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;;;AC3DA,SAAS,KAAAA,UAAS;AAWX,IAAM,wBAAwB;AAAA,EACnC,IAAIC,GAAE,OAAO,EAAE,SAAS,+DAA+D;AACzF;AAaO,SAAS,wBACd,QACkD;AAClD,SAAO,OAAO,SAAS;AACrB,UAAM,WAAW,SACb,MAAM,6BAA6B,MAAM,IACzC,MAAM,mBAAmB;AAC7B,UAAM,cAAc,eAAe,QAAQ;AAC3C,UAAM,UAAU,YAAY,aAAa,KAAK,EAAE;AAEhD,QAAI,CAAC,SAAS;AACZ,YAAM,YAAY,aAAa,WAAW;AAC1C,aAAO;AAAA,QACL,SAAS;AAAA,UACP;AAAA,YACE,MAAM;AAAA,YACN,MAAM,sBAAsB,KAAK,EAAE;AAAA;AAAA;AAAA,EAA4B,UAAU,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,EAAE,KAAK,IAAI,CAAC;AAAA,UAC1G;AAAA,QACF;AAAA,QACA,SAAS;AAAA,MACX;AAAA,IACF;AAEA,WAAO;AAAA,MACL,SAAS;AAAA,QACP;AAAA,UACE,MAAM;AAAA,UACN,MAAM,cAAc,QAAQ,EAAE;AAAA;AAAA;AAAA,EAAmB,QAAQ,OAAO;AAAA;AAAA,QAClE;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;;;AC1DA,SAAS,KAAAC,UAAS;AAYX,IAAM,0BAA0B;AAAA,EACrC,SAASC,GACN,OAAO,EACP;AAAA,IACC;AAAA,EACF;AAAA,EACF,OAAOA,GAAE,OAAO,EAAE,SAAS,EAAE,SAAS,qDAAqD;AAC7F;AAYO,SAAS,0BACd,QACuE;AACvE,SAAO,OAAO,SAAS;AACrB,UAAM,WAAW,SACb,MAAM,6BAA6B,MAAM,IACzC,MAAM,mBAAmB;AAC7B,UAAM,gBAAgB,iBAAiB,QAAQ;AAC/C,UAAM,aAAa,kBAAkB,aAAa;AAElD,UAAM,QAAQ,KAAK,SAAS;AAC5B,UAAM,UAAU,gBAAgB,YAAY,KAAK,SAAS,KAAK;AAE/D,UAAM,WAAW,kBAAkB,OAAO;AAG1C,UAAM,UACJ,QAAQ,SAAS,IACb,SAAS,QAAQ,MAAM,wCAAwC,KAAK,OAAO;AAAA;AAAA;AAAA,EAA4C,QAAQ,IAAI,CAAC,MAAM,KAAK,EAAE,UAAU,KAAK,YAAY,EAAE,MAAM,QAAQ,CAAC,CAAC,GAAG,EAAE,KAAK,IAAI,CAAC;AAAA;AAAA;AAAA;AAAA,IAC7M;AAEN,WAAO;AAAA,MACL,SAAS;AAAA,QACP;AAAA,UACE,MAAM;AAAA,UACN,MAAM,UAAU;AAAA,QAClB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;;;AC7DA,SAAS,KAAAC,UAAS;AAWX,IAAM,4BAA4B;AAAA,EACvC,UAAUC,GAAE,OAAO,EAAE,SAAS,EAAE,SAAS,+DAA+D;AAC1G;AAYO,SAAS,4BACd,QACyD;AACzD,SAAO,OAAO,SAAS;AACrB,UAAM,WAAW,SACb,MAAM,6BAA6B,MAAM,IACzC,MAAM,mBAAmB;AAC7B,UAAM,gBAAgB,iBAAiB,QAAQ;AAC/C,QAAI,aAAa,kBAAkB,aAAa;AAGhD,QAAI,KAAK,UAAU;AACjB,YAAM,gBAAgB,KAAK,SAAS,YAAY;AAChD,mBAAa,WAAW,OAAO,CAAC,MAAM,EAAE,SAAS,YAAY,MAAM,aAAa;AAAA,IAClF;AAEA,UAAM,QAAQ,YAAY,UAAU;AAEpC,WAAO;AAAA,MACL,SAAS;AAAA,QACP;AAAA,UACE,MAAM;AAAA,UACN,MAAM,KAAK,UAAU,OAAO,MAAM,CAAC;AAAA,QACrC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;;;AJ7BO,SAAS,aAAa,UAA+B,CAAC,GAAc;AACzE,QAAM,SAAS,IAAI,UAAU;AAAA,IAC3B,MAAM;AAAA,IACN,SAAS;AAAA,EACX,CAAC;AAED,QAAM,EAAE,gBAAgB,IAAI;AAG5B,SAAO,aAAa,iBAAiB;AAAA,IACnC,aACE;AAAA,IACF,aAAa;AAAA,EACf,GAAG,0BAA0B,eAAe,CAAC;AAG7C,SAAO,aAAa,mBAAmB;AAAA,IACrC,aAAa;AAAA,IACb,aAAa;AAAA,EACf,GAAG,4BAA4B,eAAe,CAAC;AAG/C,SAAO,aAAa,iBAAiB;AAAA,IACnC,aAAa;AAAA,IACb,aAAa;AAAA,EACf,GAAG,0BAA0B,eAAe,CAAC;AAG7C,SAAO,aAAa,eAAe;AAAA,IACjC,aACE;AAAA,IACF,aAAa;AAAA,EACf,GAAG,wBAAwB,eAAe,CAAC;AAE3C,SAAO;AACT;AAMA,eAAsB,cAA6B;AACjD,MAAI;AAGJ,MAAI;AACF,UAAM,EAAE,OAAO,IAAI,MAAM,gBAAgB;AACzC,sBAAkB,OAAO,KAAK,WAAW;AAAA,EAC3C,QAAQ;AAAA,EAER;AAEA,QAAM,SAAS,aAAa,EAAE,gBAAgB,CAAC;AAC/C,QAAM,YAAY,IAAI,qBAAqB;AAC3C,QAAM,OAAO,QAAQ,SAAS;AAChC;","names":["z","z","z","z","z","z"]}

package/dist/rds-KLG5O5SI.js

@@ -0,0 +1,151 @@
+// src/infra/checkers/rds.ts
+import {
+  DescribeDBInstancesCommand,
+  DescribeDBClustersCommand,
+  DescribeDBSubnetGroupsCommand,
+  RDSClient
+} from "@aws-sdk/client-rds";
+var clientCache = /* @__PURE__ */ new Map();
+function getClient(region) {
+  let client = clientCache.get(region);
+  if (!client) {
+    client = new RDSClient({ region });
+    clientCache.set(region, client);
+  }
+  return client;
+}
+async function checkDBInstance(client, arn) {
+  const { resourceId, raw } = arn;
+  try {
+    const response = await client.send(
+      new DescribeDBInstancesCommand({ DBInstanceIdentifier: resourceId })
+    );
+    const instance = response.DBInstances?.[0];
+    const exists = !!instance && instance.DBInstanceStatus !== "deleting";
+    return {
+      arn: raw,
+      exists,
+      service: "rds",
+      resourceType: "db",
+      resourceId
+    };
+  } catch (error) {
+    const err = error;
+    if (err.name === "DBInstanceNotFoundFault") {
+      return {
+        arn: raw,
+        exists: false,
+        service: "rds",
+        resourceType: "db",
+        resourceId
+      };
+    }
+    return {
+      arn: raw,
+      exists: false,
+      error: err.message || "Unknown error",
+      service: "rds",
+      resourceType: "db",
+      resourceId
+    };
+  }
+}
+async function checkDBCluster(client, arn) {
+  const { resourceId, raw } = arn;
+  try {
+    const response = await client.send(
+      new DescribeDBClustersCommand({ DBClusterIdentifier: resourceId })
+    );
+    const cluster = response.DBClusters?.[0];
+    const exists = !!cluster && cluster.Status !== "deleting";
+    return {
+      arn: raw,
+      exists,
+      service: "rds",
+      resourceType: "cluster",
+      resourceId
+    };
+  } catch (error) {
+    const err = error;
+    if (err.name === "DBClusterNotFoundFault") {
+      return {
+        arn: raw,
+        exists: false,
+        service: "rds",
+        resourceType: "cluster",
+        resourceId
+      };
+    }
+    return {
+      arn: raw,
+      exists: false,
+      error: err.message || "Unknown error",
+      service: "rds",
+      resourceType: "cluster",
+      resourceId
+    };
+  }
+}
+async function checkDBSubnetGroup(client, arn) {
+  const { resourceId, raw } = arn;
+  try {
+    const response = await client.send(
+      new DescribeDBSubnetGroupsCommand({ DBSubnetGroupName: resourceId })
+    );
+    const subnetGroup = response.DBSubnetGroups?.[0];
+    const exists = !!subnetGroup;
+    return {
+      arn: raw,
+      exists,
+      service: "rds",
+      resourceType: "subgrp",
+      resourceId
+    };
+  } catch (error) {
+    const err = error;
+    if (err.name === "DBSubnetGroupNotFoundFault") {
+      return {
+        arn: raw,
+        exists: false,
+        service: "rds",
+        resourceType: "subgrp",
+        resourceId
+      };
+    }
+    return {
+      arn: raw,
+      exists: false,
+      error: err.message || "Unknown error",
+      service: "rds",
+      resourceType: "subgrp",
+      resourceId
+    };
+  }
+}
+var RDSChecker = {
+  async check(arn) {
+    const { resourceType, resourceId, region, raw } = arn;
+    const client = getClient(region);
+    switch (resourceType) {
+      case "db":
+        return checkDBInstance(client, arn);
+      case "cluster":
+        return checkDBCluster(client, arn);
+      case "subgrp":
+        return checkDBSubnetGroup(client, arn);
+      default:
+        return {
+          arn: raw,
+          exists: false,
+          error: `Unsupported RDS resource type: ${resourceType}`,
+          service: "rds",
+          resourceType,
+          resourceId
+        };
+    }
+  }
+};
+export {
+  RDSChecker
+};
+//# sourceMappingURL=rds-KLG5O5SI.js.map

package/dist/rds-KLG5O5SI.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/infra/checkers/rds.ts"],"sourcesContent":["/**\n * RDS resource checker\n *\n * Supports:\n * - DB instances\n * - DB clusters (Aurora)\n * - DB subnet groups\n */\n\nimport {\n  DescribeDBInstancesCommand,\n  DescribeDBClustersCommand,\n  DescribeDBSubnetGroupsCommand,\n  RDSClient,\n} from \"@aws-sdk/client-rds\";\n\nimport type { ParsedArn, ResourceCheckResult } from \"../types.js\";\nimport type { ResourceChecker } from \"./types.js\";\n\n/**\n * Cache of RDS clients by region\n */\nconst clientCache = new Map<string, RDSClient>();\n\n/**\n * Get or create an RDS client for a region\n */\nfunction getClient(region: string): RDSClient {\n  let client = clientCache.get(region);\n  if (!client) {\n    client = new RDSClient({ region });\n    clientCache.set(region, client);\n  }\n  return client;\n}\n\n/**\n * Check if an RDS DB instance exists\n */\nasync function checkDBInstance(\n  client: RDSClient,\n  arn: ParsedArn\n): Promise<ResourceCheckResult> {\n  const { resourceId, raw } = arn;\n\n  try {\n    const response = await client.send(\n      new DescribeDBInstancesCommand({ DBInstanceIdentifier: resourceId })\n    );\n\n    const instance = response.DBInstances?.[0];\n    const exists = !!instance && instance.DBInstanceStatus !== \"deleting\";\n\n    return {\n      arn: raw,\n      exists,\n      service: \"rds\",\n      resourceType: \"db\",\n      resourceId,\n    };\n  } catch (error) {\n    const err = error as Error & { name?: string };\n\n    if (err.name === \"DBInstanceNotFoundFault\") {\n      return {\n        arn: raw,\n        exists: false,\n        service: \"rds\",\n        resourceType: \"db\",\n        resourceId,\n      };\n    }\n\n    return {\n      arn: raw,\n      exists: false,\n      error: err.message || \"Unknown error\",\n      service: \"rds\",\n      resourceType: \"db\",\n      resourceId,\n    };\n  }\n}\n\n/**\n * Check if an RDS DB cluster exists (Aurora)\n */\nasync function checkDBCluster(\n  client: RDSClient,\n  arn: ParsedArn\n): Promise<ResourceCheckResult> {\n  const { resourceId, raw } = arn;\n\n  try {\n    const response = await client.send(\n      new DescribeDBClustersCommand({ DBClusterIdentifier: resourceId })\n    );\n\n    const cluster = response.DBClusters?.[0];\n    const exists = !!cluster && cluster.Status !== \"deleting\";\n\n    return {\n      arn: raw,\n      exists,\n      service: \"rds\",\n      resourceType: \"cluster\",\n      resourceId,\n    };\n  } catch (error) {\n    const err = error as Error & { name?: string };\n\n    if (err.name === \"DBClusterNotFoundFault\") {\n      return {\n        arn: raw,\n        exists: false,\n        service: \"rds\",\n        resourceType: \"cluster\",\n        resourceId,\n      };\n    }\n\n    return {\n      arn: raw,\n      exists: false,\n      error: err.message || \"Unknown error\",\n      service: \"rds\",\n      resourceType: \"cluster\",\n      resourceId,\n    };\n  }\n}\n\n/**\n * Check if an RDS DB subnet group exists\n */\nasync function checkDBSubnetGroup(\n  client: RDSClient,\n  arn: ParsedArn\n): Promise<ResourceCheckResult> {\n  const { resourceId, raw } = arn;\n\n  try {\n    const response = await client.send(\n      new DescribeDBSubnetGroupsCommand({ DBSubnetGroupName: resourceId })\n    );\n\n    const subnetGroup = response.DBSubnetGroups?.[0];\n    const exists = !!subnetGroup;\n\n    return {\n      arn: raw,\n      exists,\n      service: \"rds\",\n      resourceType: \"subgrp\",\n      resourceId,\n    };\n  } catch (error) {\n    const err = error as Error & { name?: string };\n\n    if (err.name === \"DBSubnetGroupNotFoundFault\") {\n      return {\n        arn: raw,\n        exists: false,\n        service: \"rds\",\n        resourceType: \"subgrp\",\n        resourceId,\n      };\n    }\n\n    return {\n      arn: raw,\n      exists: false,\n      error: err.message || \"Unknown error\",\n      service: \"rds\",\n      resourceType: \"subgrp\",\n      resourceId,\n    };\n  }\n}\n\n/**\n * RDS resource checker\n */\nexport const RDSChecker: ResourceChecker = {\n  async check(arn: ParsedArn): Promise<ResourceCheckResult> {\n    const { resourceType, resourceId, region, raw } = arn;\n    const client = getClient(region);\n\n    switch (resourceType) {\n      case \"db\":\n        return checkDBInstance(client, arn);\n\n      case \"cluster\":\n        return checkDBCluster(client, arn);\n\n      case \"subgrp\":\n        return checkDBSubnetGroup(client, arn);\n\n      default:\n        return {\n          arn: raw,\n          exists: false,\n          error: `Unsupported RDS resource type: ${resourceType}`,\n          service: \"rds\",\n          resourceType,\n          resourceId,\n        };\n    }\n  },\n};\n"],"mappings":";AASA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAQP,IAAM,cAAc,oBAAI,IAAuB;AAK/C,SAAS,UAAU,QAA2B;AAC5C,MAAI,SAAS,YAAY,IAAI,MAAM;AACnC,MAAI,CAAC,QAAQ;AACX,aAAS,IAAI,UAAU,EAAE,OAAO,CAAC;AACjC,gBAAY,IAAI,QAAQ,MAAM;AAAA,EAChC;AACA,SAAO;AACT;AAKA,eAAe,gBACb,QACA,KAC8B;AAC9B,QAAM,EAAE,YAAY,IAAI,IAAI;AAE5B,MAAI;AACF,UAAM,WAAW,MAAM,OAAO;AAAA,MAC5B,IAAI,2BAA2B,EAAE,sBAAsB,WAAW,CAAC;AAAA,IACrE;AAEA,UAAM,WAAW,SAAS,cAAc,CAAC;AACzC,UAAM,SAAS,CAAC,CAAC,YAAY,SAAS,qBAAqB;AAE3D,WAAO;AAAA,MACL,KAAK;AAAA,MACL;AAAA,MACA,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,UAAM,MAAM;AAEZ,QAAI,IAAI,SAAS,2BAA2B;AAC1C,aAAO;AAAA,QACL,KAAK;AAAA,QACL,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,cAAc;AAAA,QACd;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,OAAO,IAAI,WAAW;AAAA,MACtB,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF;AACF;AAKA,eAAe,eACb,QACA,KAC8B;AAC9B,QAAM,EAAE,YAAY,IAAI,IAAI;AAE5B,MAAI;AACF,UAAM,WAAW,MAAM,OAAO;AAAA,MAC5B,IAAI,0BAA0B,EAAE,qBAAqB,WAAW,CAAC;AAAA,IACnE;AAEA,UAAM,UAAU,SAAS,aAAa,CAAC;AACvC,UAAM,SAAS,CAAC,CAAC,WAAW,QAAQ,WAAW;AAE/C,WAAO;AAAA,MACL,KAAK;AAAA,MACL;AAAA,MACA,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,UAAM,MAAM;AAEZ,QAAI,IAAI,SAAS,0BAA0B;AACzC,aAAO;AAAA,QACL,KAAK;AAAA,QACL,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,cAAc;AAAA,QACd;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,OAAO,IAAI,WAAW;AAAA,MACtB,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF;AACF;AAKA,eAAe,mBACb,QACA,KAC8B;AAC9B,QAAM,EAAE,YAAY,IAAI,IAAI;AAE5B,MAAI;AACF,UAAM,WAAW,MAAM,OAAO;AAAA,MAC5B,IAAI,8BAA8B,EAAE,mBAAmB,WAAW,CAAC;AAAA,IACrE;AAEA,UAAM,cAAc,SAAS,iBAAiB,CAAC;AAC/C,UAAM,SAAS,CAAC,CAAC;AAEjB,WAAO;AAAA,MACL,KAAK;AAAA,MACL;AAAA,MACA,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,UAAM,MAAM;AAEZ,QAAI,IAAI,SAAS,8BAA8B;AAC7C,aAAO;AAAA,QACL,KAAK;AAAA,QACL,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,cAAc;AAAA,QACd;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,OAAO,IAAI,WAAW;AAAA,MACtB,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF;AACF;AAKO,IAAM,aAA8B;AAAA,EACzC,MAAM,MAAM,KAA8C;AACxD,UAAM,EAAE,cAAc,YAAY,QAAQ,IAAI,IAAI;AAClD,UAAM,SAAS,UAAU,MAAM;AAE/B,YAAQ,cAAc;AAAA,MACpB,KAAK;AACH,eAAO,gBAAgB,QAAQ,GAAG;AAAA,MAEpC,KAAK;AACH,eAAO,eAAe,QAAQ,GAAG;AAAA,MAEnC,KAAK;AACH,eAAO,mBAAmB,QAAQ,GAAG;AAAA,MAEvC;AACE,eAAO;AAAA,UACL,KAAK;AAAA,UACL,QAAQ;AAAA,UACR,OAAO,kCAAkC,YAAY;AAAA,UACrD,SAAS;AAAA,UACT;AAAA,UACA;AAAA,QACF;AAAA,IACJ;AAAA,EACF;AACF;","names":[]}

package/dist/registry-V65CC7IN.js

@@ -0,0 +1,15 @@
+import {
+  fetchRegistry,
+  loadRuleset,
+  mergeConfigs,
+  parseRegistryUrl,
+  resolveExtends
+} from "./chunk-KHO6NIAI.js";
+export {
+  fetchRegistry,
+  loadRuleset,
+  mergeConfigs,
+  parseRegistryUrl,
+  resolveExtends
+};
+//# sourceMappingURL=registry-V65CC7IN.js.map

package/dist/registry-V65CC7IN.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/s3-2DH7PRVR.js

@@ -0,0 +1,49 @@
+// src/infra/checkers/s3.ts
+import { HeadBucketCommand, S3Client } from "@aws-sdk/client-s3";
+var clientCache = /* @__PURE__ */ new Map();
+function getClient(region) {
+  const effectiveRegion = region || "us-east-1";
+  let client = clientCache.get(effectiveRegion);
+  if (!client) {
+    client = new S3Client({
+      region: effectiveRegion,
+      followRegionRedirects: true
+    });
+    clientCache.set(effectiveRegion, client);
+  }
+  return client;
+}
+var S3Checker = {
+  async check(arn) {
+    const { resourceType, resourceId, raw } = arn;
+    if (resourceType === "object") {
+      const bucketName = resourceId.split("/")[0];
+      return checkBucket(bucketName, arn.region, raw);
+    }
+    return checkBucket(resourceId, arn.region, raw);
+  }
+};
+function bucketResult(arn, bucketName, exists, error) {
+  return { arn, exists, error, service: "s3", resourceType: "bucket", resourceId: bucketName };
+}
+function isBucketNotFound(err) {
+  const httpStatus = err.$metadata?.httpStatusCode;
+  return err.name === "NotFound" || err.name === "NoSuchBucket" || httpStatus === 404 || err.name === "Forbidden" || err.name === "AccessDenied" || httpStatus === 403;
+}
+async function checkBucket(bucketName, region, arn) {
+  const client = getClient(region);
+  try {
+    await client.send(new HeadBucketCommand({ Bucket: bucketName }));
+    return bucketResult(arn, bucketName, true);
+  } catch (error) {
+    const err = error;
+    if (isBucketNotFound(err)) {
+      return bucketResult(arn, bucketName, false);
+    }
+    return bucketResult(arn, bucketName, false, err.message || "Unknown error");
+  }
+}
+export {
+  S3Checker
+};
+//# sourceMappingURL=s3-2DH7PRVR.js.map

package/dist/s3-2DH7PRVR.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/infra/checkers/s3.ts"],"sourcesContent":["/**\n * S3 resource checker\n */\n\nimport { HeadBucketCommand, S3Client } from \"@aws-sdk/client-s3\";\n\nimport type { ParsedArn, ResourceCheckResult } from \"../types.js\";\nimport type { ResourceChecker } from \"./types.js\";\n\n/**\n * Cache of S3 clients by region\n */\nconst clientCache = new Map<string, S3Client>();\n\n/**\n * Get or create an S3 client for a region\n */\nfunction getClient(region: string): S3Client {\n  // S3 is global, but we use us-east-1 for global operations\n  const effectiveRegion = region || \"us-east-1\";\n\n  let client = clientCache.get(effectiveRegion);\n  if (!client) {\n    client = new S3Client({\n      region: effectiveRegion,\n      followRegionRedirects: true,\n    });\n    clientCache.set(effectiveRegion, client);\n  }\n  return client;\n}\n\n/**\n * S3 bucket checker\n */\nexport const S3Checker: ResourceChecker = {\n  async check(arn: ParsedArn): Promise<ResourceCheckResult> {\n    const { resourceType, resourceId, raw } = arn;\n\n    // Only check bucket existence (not individual objects)\n    if (resourceType === \"object\") {\n      // For objects, we'd need to check if the key exists, which is expensive\n      // For now, we just check if the bucket exists\n      const bucketName = resourceId.split(\"/\")[0];\n      return checkBucket(bucketName, arn.region, raw);\n    }\n\n    return checkBucket(resourceId, arn.region, raw);\n  },\n};\n\n/**\n * Create a bucket check result\n */\nfunction bucketResult(\n  arn: string,\n  bucketName: string,\n  exists: boolean,\n  error?: string\n): ResourceCheckResult {\n  return { arn, exists, error, service: \"s3\", resourceType: \"bucket\", resourceId: bucketName };\n}\n\n/**\n * Check if error indicates bucket doesn't exist (404 or 403)\n */\nfunction isBucketNotFound(err: Error & { name?: string; $metadata?: { httpStatusCode?: number } }): boolean {\n  const httpStatus = err.$metadata?.httpStatusCode;\n  // 404 = not found, 403 = access denied (S3 returns 403 for non-existent buckets to prevent enumeration)\n  return err.name === \"NotFound\" || err.name === \"NoSuchBucket\" || httpStatus === 404 ||\n         err.name === \"Forbidden\" || err.name === \"AccessDenied\" || httpStatus === 403;\n}\n\n/**\n * Check if an S3 bucket exists\n */\nasync function checkBucket(bucketName: string, region: string, arn: string): Promise<ResourceCheckResult> {\n  const client = getClient(region);\n\n  try {\n    await client.send(new HeadBucketCommand({ Bucket: bucketName }));\n    return bucketResult(arn, bucketName, true);\n  } catch (error) {\n    const err = error as Error & { name?: string; $metadata?: { httpStatusCode?: number } };\n    if (isBucketNotFound(err)) {\n      return bucketResult(arn, bucketName, false);\n    }\n    return bucketResult(arn, bucketName, false, err.message || \"Unknown error\");\n  }\n}\n"],"mappings":";AAIA,SAAS,mBAAmB,gBAAgB;AAQ5C,IAAM,cAAc,oBAAI,IAAsB;AAK9C,SAAS,UAAU,QAA0B;AAE3C,QAAM,kBAAkB,UAAU;AAElC,MAAI,SAAS,YAAY,IAAI,eAAe;AAC5C,MAAI,CAAC,QAAQ;AACX,aAAS,IAAI,SAAS;AAAA,MACpB,QAAQ;AAAA,MACR,uBAAuB;AAAA,IACzB,CAAC;AACD,gBAAY,IAAI,iBAAiB,MAAM;AAAA,EACzC;AACA,SAAO;AACT;AAKO,IAAM,YAA6B;AAAA,EACxC,MAAM,MAAM,KAA8C;AACxD,UAAM,EAAE,cAAc,YAAY,IAAI,IAAI;AAG1C,QAAI,iBAAiB,UAAU;AAG7B,YAAM,aAAa,WAAW,MAAM,GAAG,EAAE,CAAC;AAC1C,aAAO,YAAY,YAAY,IAAI,QAAQ,GAAG;AAAA,IAChD;AAEA,WAAO,YAAY,YAAY,IAAI,QAAQ,GAAG;AAAA,EAChD;AACF;AAKA,SAAS,aACP,KACA,YACA,QACA,OACqB;AACrB,SAAO,EAAE,KAAK,QAAQ,OAAO,SAAS,MAAM,cAAc,UAAU,YAAY,WAAW;AAC7F;AAKA,SAAS,iBAAiB,KAAkF;AAC1G,QAAM,aAAa,IAAI,WAAW;AAElC,SAAO,IAAI,SAAS,cAAc,IAAI,SAAS,kBAAkB,eAAe,OACzE,IAAI,SAAS,eAAe,IAAI,SAAS,kBAAkB,eAAe;AACnF;AAKA,eAAe,YAAY,YAAoB,QAAgB,KAA2C;AACxG,QAAM,SAAS,UAAU,MAAM;AAE/B,MAAI;AACF,UAAM,OAAO,KAAK,IAAI,kBAAkB,EAAE,QAAQ,WAAW,CAAC,CAAC;AAC/D,WAAO,aAAa,KAAK,YAAY,IAAI;AAAA,EAC3C,SAAS,OAAO;AACd,UAAM,MAAM;AACZ,QAAI,iBAAiB,GAAG,GAAG;AACzB,aAAO,aAAa,KAAK,YAAY,KAAK;AAAA,IAC5C;AACA,WAAO,aAAa,KAAK,YAAY,OAAO,IAAI,WAAW,eAAe;AAAA,EAC5E;AACF;","names":[]}