@standards-kit/conform 0.1.3 → 0.2.0

package/dist/{cloudwatch-KSZ4A256.js → cloudwatch-3LTDYG6G.js}

@@ -1,14 +1,10 @@
+import {
+  createClientFactory
+} from "./chunk-O745CMWG.js";
+
 // src/infra/checkers/cloudwatch.ts
 import { CloudWatchLogsClient, DescribeLogGroupsCommand } from "@aws-sdk/client-cloudwatch-logs";
-var clientCache = /* @__PURE__ */ new Map();
-function getClient(region) {
-  let client = clientCache.get(region);
-  if (!client) {
-    client = new CloudWatchLogsClient({ region });
-    clientCache.set(region, client);
-  }
-  return client;
-}
+var getClient = createClientFactory(CloudWatchLogsClient);
 var CloudWatchLogsChecker = {
   async check(arn) {
     const { resourceId, region, raw } = arn;
@@ -53,4 +49,4 @@ var CloudWatchLogsChecker = {
 export {
   CloudWatchLogsChecker
 };
-//# sourceMappingURL=cloudwatch-KSZ4A256.js.map
+//# sourceMappingURL=cloudwatch-3LTDYG6G.js.map

package/dist/cloudwatch-3LTDYG6G.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/infra/checkers/cloudwatch.ts"],"sourcesContent":["/**\n * CloudWatch Logs resource checker\n */\n\nimport { CloudWatchLogsClient, DescribeLogGroupsCommand } from \"@aws-sdk/client-cloudwatch-logs\";\n\nimport type { ParsedArn, ResourceCheckResult } from \"../types.js\";\nimport { createClientFactory } from \"./client-factory.js\";\nimport type { ResourceChecker } from \"./types.js\";\n\n/**\n * Get or create a CloudWatch Logs client for a region\n */\nconst getClient = createClientFactory(CloudWatchLogsClient);\n\n/**\n * CloudWatch Logs log group checker\n */\nexport const CloudWatchLogsChecker: ResourceChecker = {\n  async check(arn: ParsedArn): Promise<ResourceCheckResult> {\n    const { resourceId, region, raw } = arn;\n\n    const client = getClient(region);\n\n    try {\n      // DescribeLogGroups filters by prefix, so we need to check the results\n      const response = await client.send(\n        new DescribeLogGroupsCommand({\n          logGroupNamePrefix: resourceId,\n          limit: 1,\n        })\n      );\n\n      // Check if we found an exact match\n      const found = response.logGroups?.some((lg) => lg.logGroupName === resourceId);\n\n      return {\n        arn: raw,\n        exists: Boolean(found),\n        service: \"logs\",\n        resourceType: \"log-group\",\n        resourceId,\n      };\n    } catch (error) {\n      const err = error as Error & { name?: string };\n\n      if (err.name === \"ResourceNotFoundException\") {\n        return {\n          arn: raw,\n          exists: false,\n          service: \"logs\",\n          resourceType: \"log-group\",\n          resourceId,\n        };\n      }\n\n      return {\n        arn: raw,\n        exists: false,\n        error: err.message || \"Unknown error\",\n        service: \"logs\",\n        resourceType: \"log-group\",\n        resourceId,\n      };\n    }\n  },\n};\n"],"mappings":";;;;;AAIA,SAAS,sBAAsB,gCAAgC;AAS/D,IAAM,YAAY,oBAAoB,oBAAoB;AAKnD,IAAM,wBAAyC;AAAA,EACpD,MAAM,MAAM,KAA8C;AACxD,UAAM,EAAE,YAAY,QAAQ,IAAI,IAAI;AAEpC,UAAM,SAAS,UAAU,MAAM;AAE/B,QAAI;AAEF,YAAM,WAAW,MAAM,OAAO;AAAA,QAC5B,IAAI,yBAAyB;AAAA,UAC3B,oBAAoB;AAAA,UACpB,OAAO;AAAA,QACT,CAAC;AAAA,MACH;AAGA,YAAM,QAAQ,SAAS,WAAW,KAAK,CAAC,OAAO,GAAG,iBAAiB,UAAU;AAE7E,aAAO;AAAA,QACL,KAAK;AAAA,QACL,QAAQ,QAAQ,KAAK;AAAA,QACrB,SAAS;AAAA,QACT,cAAc;AAAA,QACd;AAAA,MACF;AAAA,IACF,SAAS,OAAO;AACd,YAAM,MAAM;AAEZ,UAAI,IAAI,SAAS,6BAA6B;AAC5C,eAAO;AAAA,UACL,KAAK;AAAA,UACL,QAAQ;AAAA,UACR,SAAS;AAAA,UACT,cAAc;AAAA,UACd;AAAA,QACF;AAAA,MACF;AAEA,aAAO;AAAA,QACL,KAAK;AAAA,QACL,QAAQ;AAAA,QACR,OAAO,IAAI,WAAW;AAAA,QACtB,SAAS;AAAA,QACT,cAAc;AAAA,QACd;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;","names":[]}

package/dist/constants.d.ts

@@ -0,0 +1,69 @@
+/**
+ * Centralized constants for the conform package.
+ * Consolidates all hardcoded values for easier maintenance and configuration.
+ */
+/**
+ * Timeout values in milliseconds
+ */
+export declare const TIMEOUTS: {
+    /** Git clone/pull operation timeout (30 seconds) */
+    readonly git: 30000;
+    /** Standard code tool execution timeout (5 minutes) */
+    readonly codeTool: number;
+    /** Extended timeout for longer operations like coverage runs (10 minutes) */
+    readonly codeToolExtended: number;
+    /** Quick operation timeout for version checks, etc (30 seconds) */
+    readonly quick: 30000;
+    /** Gitleaks version check timeout (10 seconds) */
+    readonly versionCheck: 10000;
+};
+/**
+ * AWS configuration defaults
+ */
+export declare const AWS_DEFAULTS: {
+    /** Default region for global AWS services (IAM, S3 global operations) */
+    readonly globalRegion: "us-east-1";
+};
+/**
+ * GitHub API configuration
+ */
+export declare const GITHUB_API: {
+    /** Base URL for GitHub API (can be overridden via GITHUB_API_URL env var for GitHub Enterprise) */
+    readonly baseUrl: string;
+    /** Number of items per page for pagination */
+    readonly perPage: 100;
+};
+/**
+ * Standards repository defaults
+ */
+export declare const STANDARDS_REPO: {
+    /** Default owner for standards repository (can be overridden via STANDARDS_REPO_OWNER env var) */
+    readonly owner: string;
+    /** Default repository name (can be overridden via STANDARDS_REPO_NAME env var) */
+    readonly repo: string;
+};
+/**
+ * Cache directory configuration
+ */
+export declare const CACHE: {
+    /** Base directory name for standards cache (can be overridden via CM_STANDARDS_CACHE_DIR env var) */
+    readonly standardsCacheDir: string;
+    /** Base directory name for registry cache */
+    readonly registryCacheDir: "conform-registry-cache";
+};
+/**
+ * Concurrency limits
+ */
+export declare const CONCURRENCY: {
+    /** Default concurrency for infrastructure resource checks */
+    readonly infraScan: 10;
+};
+/**
+ * Default threshold values
+ */
+export declare const DEFAULTS: {
+    /** Default backup max age in hours */
+    readonly backupMaxAgeHours: 24;
+    /** Default code coverage minimum threshold */
+    readonly coverageMinThreshold: 80;
+};

package/dist/core/schema.d.ts

@@ -4,6 +4,22 @@ declare const DEFAULT_FORBIDDEN_FILES_IGNORE: string[];
 export { DEFAULT_FORBIDDEN_FILES_IGNORE };
 /** Full standards.toml schema */
 export declare const configSchema: z.ZodObject<{
+    metadata: z.ZodOptional<z.ZodObject<{
+        tier: z.ZodEnum<["production", "internal", "prototype"]>;
+        project: z.ZodOptional<z.ZodString>;
+        organisation: z.ZodOptional<z.ZodString>;
+        status: z.ZodDefault<z.ZodOptional<z.ZodEnum<["active", "pre-release", "deprecated"]>>>;
+    }, "strict", z.ZodTypeAny, {
+        status: "active" | "pre-release" | "deprecated";
+        tier: "production" | "internal" | "prototype";
+        project?: string | undefined;
+        organisation?: string | undefined;
+    }, {
+        tier: "production" | "internal" | "prototype";
+        status?: "active" | "pre-release" | "deprecated" | undefined;
+        project?: string | undefined;
+        organisation?: string | undefined;
+    }>>;
     extends: z.ZodOptional<z.ZodObject<{
         registry: z.ZodString;
         rulesets: z.ZodArray<z.ZodString, "many">;
@@ -1442,6 +1458,12 @@ export declare const configSchema: z.ZodObject<{
             } | undefined;
         } | undefined;
     } | undefined;
+    metadata?: {
+        status: "active" | "pre-release" | "deprecated";
+        tier: "production" | "internal" | "prototype";
+        project?: string | undefined;
+        organisation?: string | undefined;
+    } | undefined;
     extends?: {
         registry: string;
         rulesets: string[];
@@ -1681,6 +1703,12 @@ export declare const configSchema: z.ZodObject<{
             } | undefined;
         } | undefined;
     } | undefined;
+    metadata?: {
+        tier: "production" | "internal" | "prototype";
+        status?: "active" | "pre-release" | "deprecated" | undefined;
+        project?: string | undefined;
+        organisation?: string | undefined;
+    } | undefined;
     extends?: {
         registry: string;
         rulesets: string[];

package/dist/{core-KB2W6SE2.js → core-QRFGIQ42.js}

@@ -20,7 +20,8 @@ import {
   mergeConfigs,
   parseRegistryUrl,
   resolveExtends
-} from "./chunk-PZ2NVKI7.js";
+} from "./chunk-YGDEM6K5.js";
+import "./chunk-RHM53NLG.js";
 export {
   CONFIG_FILE_NAME,
   CheckResultBuilder,
@@ -42,4 +43,4 @@ export {
   parseRegistryUrl,
   resolveExtends
 };
-//# sourceMappingURL=core-KB2W6SE2.js.map
+//# sourceMappingURL=core-QRFGIQ42.js.map

package/dist/{dynamodb-5KVESCVJ.js → dynamodb-HQH3IMAI.js}

@@ -1,14 +1,10 @@
+import {
+  createClientFactory
+} from "./chunk-O745CMWG.js";
+
 // src/infra/checkers/dynamodb.ts
 import { DescribeTableCommand, DynamoDBClient } from "@aws-sdk/client-dynamodb";
-var clientCache = /* @__PURE__ */ new Map();
-function getClient(region) {
-  let client = clientCache.get(region);
-  if (!client) {
-    client = new DynamoDBClient({ region });
-    clientCache.set(region, client);
-  }
-  return client;
-}
+var getClient = createClientFactory(DynamoDBClient);
 var DynamoDBChecker = {
   async check(arn) {
     const { resourceType, resourceId, region, raw } = arn;
@@ -48,4 +44,4 @@ var DynamoDBChecker = {
 export {
   DynamoDBChecker
 };
-//# sourceMappingURL=dynamodb-5KVESCVJ.js.map
+//# sourceMappingURL=dynamodb-HQH3IMAI.js.map

package/dist/dynamodb-HQH3IMAI.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/infra/checkers/dynamodb.ts"],"sourcesContent":["/**\n * DynamoDB resource checker\n */\n\nimport { DescribeTableCommand, DynamoDBClient } from \"@aws-sdk/client-dynamodb\";\n\nimport type { ParsedArn, ResourceCheckResult } from \"../types.js\";\nimport { createClientFactory } from \"./client-factory.js\";\nimport type { ResourceChecker } from \"./types.js\";\n\n/**\n * Get or create a DynamoDB client for a region\n */\nconst getClient = createClientFactory(DynamoDBClient);\n\n/**\n * DynamoDB table checker\n */\nexport const DynamoDBChecker: ResourceChecker = {\n  async check(arn: ParsedArn): Promise<ResourceCheckResult> {\n    const { resourceType, resourceId, region, raw } = arn;\n\n    // Extract table name (might be \"table-name\" or \"table-name/index/index-name\")\n    const tableName = resourceId.split(\"/\")[0];\n\n    const client = getClient(region);\n\n    try {\n      await client.send(new DescribeTableCommand({ TableName: tableName }));\n      return {\n        arn: raw,\n        exists: true,\n        service: \"dynamodb\",\n        resourceType,\n        resourceId,\n      };\n    } catch (error) {\n      const err = error as Error & { name?: string };\n\n      if (err.name === \"ResourceNotFoundException\") {\n        return {\n          arn: raw,\n          exists: false,\n          service: \"dynamodb\",\n          resourceType,\n          resourceId,\n        };\n      }\n\n      return {\n        arn: raw,\n        exists: false,\n        error: err.message || \"Unknown error\",\n        service: \"dynamodb\",\n        resourceType,\n        resourceId,\n      };\n    }\n  },\n};\n"],"mappings":";;;;;AAIA,SAAS,sBAAsB,sBAAsB;AASrD,IAAM,YAAY,oBAAoB,cAAc;AAK7C,IAAM,kBAAmC;AAAA,EAC9C,MAAM,MAAM,KAA8C;AACxD,UAAM,EAAE,cAAc,YAAY,QAAQ,IAAI,IAAI;AAGlD,UAAM,YAAY,WAAW,MAAM,GAAG,EAAE,CAAC;AAEzC,UAAM,SAAS,UAAU,MAAM;AAE/B,QAAI;AACF,YAAM,OAAO,KAAK,IAAI,qBAAqB,EAAE,WAAW,UAAU,CAAC,CAAC;AACpE,aAAO;AAAA,QACL,KAAK;AAAA,QACL,QAAQ;AAAA,QACR,SAAS;AAAA,QACT;AAAA,QACA;AAAA,MACF;AAAA,IACF,SAAS,OAAO;AACd,YAAM,MAAM;AAEZ,UAAI,IAAI,SAAS,6BAA6B;AAC5C,eAAO;AAAA,UACL,KAAK;AAAA,UACL,QAAQ;AAAA,UACR,SAAS;AAAA,UACT;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAEA,aAAO;AAAA,QACL,KAAK;AAAA,QACL,QAAQ;AAAA,QACR,OAAO,IAAI,WAAW;AAAA,QACtB,SAAS;AAAA,QACT;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;","names":[]}

package/dist/{ec2-HKPE6GZV.js → ec2-AEPT735A.js}

@@ -1,3 +1,7 @@
+import {
+  createClientFactory
+} from "./chunk-O745CMWG.js";
+
 // src/infra/checkers/ec2.ts
 import {
   DescribeInstancesCommand,
@@ -5,15 +9,7 @@ import {
   DescribeKeyPairsCommand,
   EC2Client
 } from "@aws-sdk/client-ec2";
-var clientCache = /* @__PURE__ */ new Map();
-function getClient(region) {
-  let client = clientCache.get(region);
-  if (!client) {
-    client = new EC2Client({ region });
-    clientCache.set(region, client);
-  }
-  return client;
-}
+var getClient = createClientFactory(EC2Client);
 async function checkInstance(client, arn) {
   const { resourceId, raw } = arn;
   try {
@@ -148,4 +144,4 @@ var EC2Checker = {
 export {
   EC2Checker
 };
-//# sourceMappingURL=ec2-HKPE6GZV.js.map
+//# sourceMappingURL=ec2-AEPT735A.js.map

package/dist/ec2-AEPT735A.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/infra/checkers/ec2.ts"],"sourcesContent":["/**\n * EC2 resource checker\n *\n * Supports:\n * - Instances\n * - Security groups\n * - Key pairs\n */\n\nimport {\n  DescribeInstancesCommand,\n  DescribeSecurityGroupsCommand,\n  DescribeKeyPairsCommand,\n  EC2Client,\n} from \"@aws-sdk/client-ec2\";\n\nimport type { ParsedArn, ResourceCheckResult } from \"../types.js\";\nimport { createClientFactory } from \"./client-factory.js\";\nimport type { ResourceChecker } from \"./types.js\";\n\n/**\n * Get or create an EC2 client for a region\n */\nconst getClient = createClientFactory(EC2Client);\n\n/**\n * Check if an EC2 instance exists\n */\nasync function checkInstance(\n  client: EC2Client,\n  arn: ParsedArn\n): Promise<ResourceCheckResult> {\n  const { resourceId, raw } = arn;\n\n  try {\n    const response = await client.send(\n      new DescribeInstancesCommand({ InstanceIds: [resourceId] })\n    );\n\n    const instance = response.Reservations?.[0]?.Instances?.[0];\n    const exists = !!instance && instance.State?.Name !== \"terminated\";\n\n    return {\n      arn: raw,\n      exists,\n      service: \"ec2\",\n      resourceType: \"instance\",\n      resourceId,\n    };\n  } catch (error) {\n    const err = error as Error & { name?: string };\n\n    if (err.name === \"InvalidInstanceID.NotFound\") {\n      return {\n        arn: raw,\n        exists: false,\n        service: \"ec2\",\n        resourceType: \"instance\",\n        resourceId,\n      };\n    }\n\n    return {\n      arn: raw,\n      exists: false,\n      error: err.message || \"Unknown error\",\n      service: \"ec2\",\n      resourceType: \"instance\",\n      resourceId,\n    };\n  }\n}\n\n/**\n * Check if an EC2 security group exists\n */\nasync function checkSecurityGroup(\n  client: EC2Client,\n  arn: ParsedArn\n): Promise<ResourceCheckResult> {\n  const { resourceId, raw } = arn;\n\n  try {\n    const response = await client.send(\n      new DescribeSecurityGroupsCommand({ GroupIds: [resourceId] })\n    );\n\n    const securityGroup = response.SecurityGroups?.[0];\n    const exists = !!securityGroup;\n\n    return {\n      arn: raw,\n      exists,\n      service: \"ec2\",\n      resourceType: \"security-group\",\n      resourceId,\n    };\n  } catch (error) {\n    const err = error as Error & { name?: string };\n\n    if (err.name === \"InvalidGroup.NotFound\") {\n      return {\n        arn: raw,\n        exists: false,\n        service: \"ec2\",\n        resourceType: \"security-group\",\n        resourceId,\n      };\n    }\n\n    return {\n      arn: raw,\n      exists: false,\n      error: err.message || \"Unknown error\",\n      service: \"ec2\",\n      resourceType: \"security-group\",\n      resourceId,\n    };\n  }\n}\n\n/**\n * Check if an EC2 key pair exists\n */\nasync function checkKeyPair(\n  client: EC2Client,\n  arn: ParsedArn\n): Promise<ResourceCheckResult> {\n  const { resourceId, raw } = arn;\n\n  try {\n    const response = await client.send(\n      new DescribeKeyPairsCommand({ KeyNames: [resourceId] })\n    );\n\n    const keyPair = response.KeyPairs?.[0];\n    const exists = !!keyPair;\n\n    return {\n      arn: raw,\n      exists,\n      service: \"ec2\",\n      resourceType: \"key-pair\",\n      resourceId,\n    };\n  } catch (error) {\n    const err = error as Error & { name?: string };\n\n    if (err.name === \"InvalidKeyPair.NotFound\") {\n      return {\n        arn: raw,\n        exists: false,\n        service: \"ec2\",\n        resourceType: \"key-pair\",\n        resourceId,\n      };\n    }\n\n    return {\n      arn: raw,\n      exists: false,\n      error: err.message || \"Unknown error\",\n      service: \"ec2\",\n      resourceType: \"key-pair\",\n      resourceId,\n    };\n  }\n}\n\n/**\n * EC2 resource checker\n */\nexport const EC2Checker: ResourceChecker = {\n  async check(arn: ParsedArn): Promise<ResourceCheckResult> {\n    const { resourceType, resourceId, region, raw } = arn;\n    const client = getClient(region);\n\n    switch (resourceType) {\n      case \"instance\":\n        return checkInstance(client, arn);\n\n      case \"security-group\":\n        return checkSecurityGroup(client, arn);\n\n      case \"key-pair\":\n        return checkKeyPair(client, arn);\n\n      default:\n        return {\n          arn: raw,\n          exists: false,\n          error: `Unsupported EC2 resource type: ${resourceType}`,\n          service: \"ec2\",\n          resourceType,\n          resourceId,\n        };\n    }\n  },\n};\n"],"mappings":";;;;;AASA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AASP,IAAM,YAAY,oBAAoB,SAAS;AAK/C,eAAe,cACb,QACA,KAC8B;AAC9B,QAAM,EAAE,YAAY,IAAI,IAAI;AAE5B,MAAI;AACF,UAAM,WAAW,MAAM,OAAO;AAAA,MAC5B,IAAI,yBAAyB,EAAE,aAAa,CAAC,UAAU,EAAE,CAAC;AAAA,IAC5D;AAEA,UAAM,WAAW,SAAS,eAAe,CAAC,GAAG,YAAY,CAAC;AAC1D,UAAM,SAAS,CAAC,CAAC,YAAY,SAAS,OAAO,SAAS;AAEtD,WAAO;AAAA,MACL,KAAK;AAAA,MACL;AAAA,MACA,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,UAAM,MAAM;AAEZ,QAAI,IAAI,SAAS,8BAA8B;AAC7C,aAAO;AAAA,QACL,KAAK;AAAA,QACL,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,cAAc;AAAA,QACd;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,OAAO,IAAI,WAAW;AAAA,MACtB,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF;AACF;AAKA,eAAe,mBACb,QACA,KAC8B;AAC9B,QAAM,EAAE,YAAY,IAAI,IAAI;AAE5B,MAAI;AACF,UAAM,WAAW,MAAM,OAAO;AAAA,MAC5B,IAAI,8BAA8B,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC;AAAA,IAC9D;AAEA,UAAM,gBAAgB,SAAS,iBAAiB,CAAC;AACjD,UAAM,SAAS,CAAC,CAAC;AAEjB,WAAO;AAAA,MACL,KAAK;AAAA,MACL;AAAA,MACA,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,UAAM,MAAM;AAEZ,QAAI,IAAI,SAAS,yBAAyB;AACxC,aAAO;AAAA,QACL,KAAK;AAAA,QACL,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,cAAc;AAAA,QACd;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,OAAO,IAAI,WAAW;AAAA,MACtB,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF;AACF;AAKA,eAAe,aACb,QACA,KAC8B;AAC9B,QAAM,EAAE,YAAY,IAAI,IAAI;AAE5B,MAAI;AACF,UAAM,WAAW,MAAM,OAAO;AAAA,MAC5B,IAAI,wBAAwB,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC;AAAA,IACxD;AAEA,UAAM,UAAU,SAAS,WAAW,CAAC;AACrC,UAAM,SAAS,CAAC,CAAC;AAEjB,WAAO;AAAA,MACL,KAAK;AAAA,MACL;AAAA,MACA,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,UAAM,MAAM;AAEZ,QAAI,IAAI,SAAS,2BAA2B;AAC1C,aAAO;AAAA,QACL,KAAK;AAAA,QACL,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,cAAc;AAAA,QACd;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,OAAO,IAAI,WAAW;AAAA,MACtB,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF;AACF;AAKO,IAAM,aAA8B;AAAA,EACzC,MAAM,MAAM,KAA8C;AACxD,UAAM,EAAE,cAAc,YAAY,QAAQ,IAAI,IAAI;AAClD,UAAM,SAAS,UAAU,MAAM;AAE/B,YAAQ,cAAc;AAAA,MACpB,KAAK;AACH,eAAO,cAAc,QAAQ,GAAG;AAAA,MAElC,KAAK;AACH,eAAO,mBAAmB,QAAQ,GAAG;AAAA,MAEvC,KAAK;AACH,eAAO,aAAa,QAAQ,GAAG;AAAA,MAEjC;AACE,eAAO;AAAA,UACL,KAAK;AAAA,UACL,QAAQ;AAAA,UACR,OAAO,kCAAkC,YAAY;AAAA,UACrD,SAAS;AAAA,UACT;AAAA,UACA;AAAA,QACF;AAAA,IACJ;AAAA,EACF;AACF;","names":[]}

package/dist/{ecs-OS3NJZTA.js → ecs-UHKCH5A7.js}

@@ -1,3 +1,7 @@
+import {
+  createClientFactory
+} from "./chunk-O745CMWG.js";
+
 // src/infra/checkers/ecs.ts
 import {
   DescribeClustersCommand,
@@ -5,15 +9,7 @@ import {
   DescribeTaskDefinitionCommand,
   ECSClient
 } from "@aws-sdk/client-ecs";
-var clientCache = /* @__PURE__ */ new Map();
-function getClient(region) {
-  let client = clientCache.get(region);
-  if (!client) {
-    client = new ECSClient({ region });
-    clientCache.set(region, client);
-  }
-  return client;
-}
+var getClient = createClientFactory(ECSClient);
 async function checkCluster(client, arn) {
   const { resourceId, raw } = arn;
   try {
@@ -138,4 +134,4 @@ var ECSChecker = {
 export {
   ECSChecker
 };
-//# sourceMappingURL=ecs-OS3NJZTA.js.map
+//# sourceMappingURL=ecs-UHKCH5A7.js.map

package/dist/ecs-UHKCH5A7.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/infra/checkers/ecs.ts"],"sourcesContent":["/**\n * ECS resource checker\n *\n * Supports:\n * - Clusters\n * - Services\n * - Task definitions\n */\n\nimport {\n  DescribeClustersCommand,\n  DescribeServicesCommand,\n  DescribeTaskDefinitionCommand,\n  ECSClient,\n} from \"@aws-sdk/client-ecs\";\n\nimport type { ParsedArn, ResourceCheckResult } from \"../types.js\";\nimport { createClientFactory } from \"./client-factory.js\";\nimport type { ResourceChecker } from \"./types.js\";\n\n/**\n * Get or create an ECS client for a region\n */\nconst getClient = createClientFactory(ECSClient);\n\n/**\n * Check if an ECS cluster exists\n */\nasync function checkCluster(\n  client: ECSClient,\n  arn: ParsedArn\n): Promise<ResourceCheckResult> {\n  const { resourceId, raw } = arn;\n\n  try {\n    const response = await client.send(\n      new DescribeClustersCommand({ clusters: [raw] })\n    );\n\n    const cluster = response.clusters?.[0];\n    const exists = cluster?.status === \"ACTIVE\";\n\n    return {\n      arn: raw,\n      exists,\n      service: \"ecs\",\n      resourceType: \"cluster\",\n      resourceId,\n    };\n  } catch (error) {\n    const err = error as Error;\n    return {\n      arn: raw,\n      exists: false,\n      error: err.message || \"Unknown error\",\n      service: \"ecs\",\n      resourceType: \"cluster\",\n      resourceId,\n    };\n  }\n}\n\n/**\n * Check if an ECS service exists\n *\n * Service ARN format: arn:aws:ecs:region:account:service/cluster/service-name\n */\nasync function checkService(\n  client: ECSClient,\n  arn: ParsedArn\n): Promise<ResourceCheckResult> {\n  const { resourceId, raw, accountId, region } = arn;\n\n  // resourceId format: cluster-name/service-name\n  const parts = resourceId.split(\"/\");\n  if (parts.length < 2) {\n    return {\n      arn: raw,\n      exists: false,\n      error: \"Invalid service ARN format\",\n      service: \"ecs\",\n      resourceType: \"service\",\n      resourceId,\n    };\n  }\n\n  const clusterName = parts[0];\n  const serviceName = parts[1];\n  const clusterArn = `arn:aws:ecs:${region}:${accountId}:cluster/${clusterName}`;\n\n  try {\n    const response = await client.send(\n      new DescribeServicesCommand({\n        cluster: clusterArn,\n        services: [serviceName],\n      })\n    );\n\n    const service = response.services?.[0];\n    const exists = service?.status === \"ACTIVE\";\n\n    return {\n      arn: raw,\n      exists,\n      service: \"ecs\",\n      resourceType: \"service\",\n      resourceId,\n    };\n  } catch (error) {\n    const err = error as Error;\n    return {\n      arn: raw,\n      exists: false,\n      error: err.message || \"Unknown error\",\n      service: \"ecs\",\n      resourceType: \"service\",\n      resourceId,\n    };\n  }\n}\n\n/**\n * Check if an ECS task definition exists\n *\n * Task definition ARN format: arn:aws:ecs:region:account:task-definition/name:revision\n * or: arn:aws:ecs:region:account:task-definition/name (latest)\n */\nasync function checkTaskDefinition(\n  client: ECSClient,\n  arn: ParsedArn\n): Promise<ResourceCheckResult> {\n  const { resourceId, raw } = arn;\n\n  try {\n    const response = await client.send(\n      new DescribeTaskDefinitionCommand({ taskDefinition: raw })\n    );\n\n    const taskDef = response.taskDefinition;\n    const exists = taskDef?.status === \"ACTIVE\";\n\n    return {\n      arn: raw,\n      exists,\n      service: \"ecs\",\n      resourceType: \"task-definition\",\n      resourceId,\n    };\n  } catch (error) {\n    const err = error as Error;\n    return {\n      arn: raw,\n      exists: false,\n      error: err.message || \"Unknown error\",\n      service: \"ecs\",\n      resourceType: \"task-definition\",\n      resourceId,\n    };\n  }\n}\n\n/**\n * ECS resource checker\n */\nexport const ECSChecker: ResourceChecker = {\n  async check(arn: ParsedArn): Promise<ResourceCheckResult> {\n    const { resourceType, resourceId, region, raw } = arn;\n    const client = getClient(region);\n\n    switch (resourceType) {\n      case \"cluster\":\n        return checkCluster(client, arn);\n\n      case \"service\":\n        return checkService(client, arn);\n\n      case \"task-definition\":\n        return checkTaskDefinition(client, arn);\n\n      default:\n        return {\n          arn: raw,\n          exists: false,\n          error: `Unsupported ECS resource type: ${resourceType}`,\n          service: \"ecs\",\n          resourceType,\n          resourceId,\n        };\n    }\n  },\n};\n"],"mappings":";;;;;AASA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AASP,IAAM,YAAY,oBAAoB,SAAS;AAK/C,eAAe,aACb,QACA,KAC8B;AAC9B,QAAM,EAAE,YAAY,IAAI,IAAI;AAE5B,MAAI;AACF,UAAM,WAAW,MAAM,OAAO;AAAA,MAC5B,IAAI,wBAAwB,EAAE,UAAU,CAAC,GAAG,EAAE,CAAC;AAAA,IACjD;AAEA,UAAM,UAAU,SAAS,WAAW,CAAC;AACrC,UAAM,SAAS,SAAS,WAAW;AAEnC,WAAO;AAAA,MACL,KAAK;AAAA,MACL;AAAA,MACA,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,UAAM,MAAM;AACZ,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,OAAO,IAAI,WAAW;AAAA,MACtB,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF;AACF;AAOA,eAAe,aACb,QACA,KAC8B;AAC9B,QAAM,EAAE,YAAY,KAAK,WAAW,OAAO,IAAI;AAG/C,QAAM,QAAQ,WAAW,MAAM,GAAG;AAClC,MAAI,MAAM,SAAS,GAAG;AACpB,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,OAAO;AAAA,MACP,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF;AAEA,QAAM,cAAc,MAAM,CAAC;AAC3B,QAAM,cAAc,MAAM,CAAC;AAC3B,QAAM,aAAa,eAAe,MAAM,IAAI,SAAS,YAAY,WAAW;AAE5E,MAAI;AACF,UAAM,WAAW,MAAM,OAAO;AAAA,MAC5B,IAAI,wBAAwB;AAAA,QAC1B,SAAS;AAAA,QACT,UAAU,CAAC,WAAW;AAAA,MACxB,CAAC;AAAA,IACH;AAEA,UAAM,UAAU,SAAS,WAAW,CAAC;AACrC,UAAM,SAAS,SAAS,WAAW;AAEnC,WAAO;AAAA,MACL,KAAK;AAAA,MACL;AAAA,MACA,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,UAAM,MAAM;AACZ,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,OAAO,IAAI,WAAW;AAAA,MACtB,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF;AACF;AAQA,eAAe,oBACb,QACA,KAC8B;AAC9B,QAAM,EAAE,YAAY,IAAI,IAAI;AAE5B,MAAI;AACF,UAAM,WAAW,MAAM,OAAO;AAAA,MAC5B,IAAI,8BAA8B,EAAE,gBAAgB,IAAI,CAAC;AAAA,IAC3D;AAEA,UAAM,UAAU,SAAS;AACzB,UAAM,SAAS,SAAS,WAAW;AAEnC,WAAO;AAAA,MACL,KAAK;AAAA,MACL;AAAA,MACA,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,UAAM,MAAM;AACZ,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,OAAO,IAAI,WAAW;AAAA,MACtB,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF;AACF;AAKO,IAAM,aAA8B;AAAA,EACzC,MAAM,MAAM,KAA8C;AACxD,UAAM,EAAE,cAAc,YAAY,QAAQ,IAAI,IAAI;AAClD,UAAM,SAAS,UAAU,MAAM;AAE/B,YAAQ,cAAc;AAAA,MACpB,KAAK;AACH,eAAO,aAAa,QAAQ,GAAG;AAAA,MAEjC,KAAK;AACH,eAAO,aAAa,QAAQ,GAAG;AAAA,MAEjC,KAAK;AACH,eAAO,oBAAoB,QAAQ,GAAG;AAAA,MAExC;AACE,eAAO;AAAA,UACL,KAAK;AAAA,UACL,QAAQ;AAAA,UACR,OAAO,kCAAkC,YAAY;AAAA,UACrD,SAAS;AAAA,UACT;AAAA,UACA;AAAA,QACF;AAAA,IACJ;AAAA,EACF;AACF;","names":[]}

package/dist/{elasticache-7TCRHYYM.js → elasticache-5Y6K7GKJ.js}

@@ -1,3 +1,7 @@
+import {
+  createClientFactory
+} from "./chunk-O745CMWG.js";
+
 // src/infra/checkers/elasticache.ts
 import {
   DescribeCacheClustersCommand,
@@ -5,15 +9,7 @@ import {
   DescribeReplicationGroupsCommand,
   ElastiCacheClient
 } from "@aws-sdk/client-elasticache";
-var clientCache = /* @__PURE__ */ new Map();
-function getClient(region) {
-  let client = clientCache.get(region);
-  if (!client) {
-    client = new ElastiCacheClient({ region });
-    clientCache.set(region, client);
-  }
-  return client;
-}
+var getClient = createClientFactory(ElastiCacheClient);
 async function checkCacheCluster(client, arn) {
   const { resourceId, raw } = arn;
   try {
@@ -148,4 +144,4 @@ var ElastiCacheChecker = {
 export {
   ElastiCacheChecker
 };
-//# sourceMappingURL=elasticache-7TCRHYYM.js.map
+//# sourceMappingURL=elasticache-5Y6K7GKJ.js.map

package/dist/elasticache-5Y6K7GKJ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/infra/checkers/elasticache.ts"],"sourcesContent":["/**\n * ElastiCache resource checker\n *\n * Supports:\n * - Cache clusters\n * - Subnet groups\n * - Replication groups\n */\n\nimport {\n  DescribeCacheClustersCommand,\n  DescribeCacheSubnetGroupsCommand,\n  DescribeReplicationGroupsCommand,\n  ElastiCacheClient,\n} from \"@aws-sdk/client-elasticache\";\n\nimport type { ParsedArn, ResourceCheckResult } from \"../types.js\";\nimport { createClientFactory } from \"./client-factory.js\";\nimport type { ResourceChecker } from \"./types.js\";\n\n/**\n * Get or create an ElastiCache client for a region\n */\nconst getClient = createClientFactory(ElastiCacheClient);\n\n/**\n * Check if an ElastiCache cluster exists\n */\nasync function checkCacheCluster(\n  client: ElastiCacheClient,\n  arn: ParsedArn\n): Promise<ResourceCheckResult> {\n  const { resourceId, raw } = arn;\n\n  try {\n    const response = await client.send(\n      new DescribeCacheClustersCommand({ CacheClusterId: resourceId })\n    );\n\n    const cluster = response.CacheClusters?.[0];\n    const exists = !!cluster && cluster.CacheClusterStatus !== \"deleting\";\n\n    return {\n      arn: raw,\n      exists,\n      service: \"elasticache\",\n      resourceType: \"cluster\",\n      resourceId,\n    };\n  } catch (error) {\n    const err = error as Error & { name?: string };\n\n    if (err.name === \"CacheClusterNotFoundFault\") {\n      return {\n        arn: raw,\n        exists: false,\n        service: \"elasticache\",\n        resourceType: \"cluster\",\n        resourceId,\n      };\n    }\n\n    return {\n      arn: raw,\n      exists: false,\n      error: err.message || \"Unknown error\",\n      service: \"elasticache\",\n      resourceType: \"cluster\",\n      resourceId,\n    };\n  }\n}\n\n/**\n * Check if an ElastiCache subnet group exists\n */\nasync function checkSubnetGroup(\n  client: ElastiCacheClient,\n  arn: ParsedArn\n): Promise<ResourceCheckResult> {\n  const { resourceId, raw } = arn;\n\n  try {\n    const response = await client.send(\n      new DescribeCacheSubnetGroupsCommand({ CacheSubnetGroupName: resourceId })\n    );\n\n    const subnetGroup = response.CacheSubnetGroups?.[0];\n    const exists = !!subnetGroup;\n\n    return {\n      arn: raw,\n      exists,\n      service: \"elasticache\",\n      resourceType: \"subnetgroup\",\n      resourceId,\n    };\n  } catch (error) {\n    const err = error as Error & { name?: string };\n\n    if (err.name === \"CacheSubnetGroupNotFoundFault\") {\n      return {\n        arn: raw,\n        exists: false,\n        service: \"elasticache\",\n        resourceType: \"subnetgroup\",\n        resourceId,\n      };\n    }\n\n    return {\n      arn: raw,\n      exists: false,\n      error: err.message || \"Unknown error\",\n      service: \"elasticache\",\n      resourceType: \"subnetgroup\",\n      resourceId,\n    };\n  }\n}\n\n/**\n * Check if an ElastiCache replication group exists\n */\nasync function checkReplicationGroup(\n  client: ElastiCacheClient,\n  arn: ParsedArn\n): Promise<ResourceCheckResult> {\n  const { resourceId, raw } = arn;\n\n  try {\n    const response = await client.send(\n      new DescribeReplicationGroupsCommand({ ReplicationGroupId: resourceId })\n    );\n\n    const replicationGroup = response.ReplicationGroups?.[0];\n    const exists = !!replicationGroup && replicationGroup.Status !== \"deleting\";\n\n    return {\n      arn: raw,\n      exists,\n      service: \"elasticache\",\n      resourceType: \"replicationgroup\",\n      resourceId,\n    };\n  } catch (error) {\n    const err = error as Error & { name?: string };\n\n    if (err.name === \"ReplicationGroupNotFoundFault\") {\n      return {\n        arn: raw,\n        exists: false,\n        service: \"elasticache\",\n        resourceType: \"replicationgroup\",\n        resourceId,\n      };\n    }\n\n    return {\n      arn: raw,\n      exists: false,\n      error: err.message || \"Unknown error\",\n      service: \"elasticache\",\n      resourceType: \"replicationgroup\",\n      resourceId,\n    };\n  }\n}\n\n/**\n * ElastiCache resource checker\n */\nexport const ElastiCacheChecker: ResourceChecker = {\n  async check(arn: ParsedArn): Promise<ResourceCheckResult> {\n    const { resourceType, resourceId, region, raw } = arn;\n    const client = getClient(region);\n\n    switch (resourceType) {\n      case \"cluster\":\n        return checkCacheCluster(client, arn);\n\n      case \"subnetgroup\":\n        return checkSubnetGroup(client, arn);\n\n      case \"replicationgroup\":\n        return checkReplicationGroup(client, arn);\n\n      default:\n        return {\n          arn: raw,\n          exists: false,\n          error: `Unsupported ElastiCache resource type: ${resourceType}`,\n          service: \"elasticache\",\n          resourceType,\n          resourceId,\n        };\n    }\n  },\n};\n"],"mappings":";;;;;AASA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AASP,IAAM,YAAY,oBAAoB,iBAAiB;AAKvD,eAAe,kBACb,QACA,KAC8B;AAC9B,QAAM,EAAE,YAAY,IAAI,IAAI;AAE5B,MAAI;AACF,UAAM,WAAW,MAAM,OAAO;AAAA,MAC5B,IAAI,6BAA6B,EAAE,gBAAgB,WAAW,CAAC;AAAA,IACjE;AAEA,UAAM,UAAU,SAAS,gBAAgB,CAAC;AAC1C,UAAM,SAAS,CAAC,CAAC,WAAW,QAAQ,uBAAuB;AAE3D,WAAO;AAAA,MACL,KAAK;AAAA,MACL;AAAA,MACA,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,UAAM,MAAM;AAEZ,QAAI,IAAI,SAAS,6BAA6B;AAC5C,aAAO;AAAA,QACL,KAAK;AAAA,QACL,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,cAAc;AAAA,QACd;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,OAAO,IAAI,WAAW;AAAA,MACtB,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF;AACF;AAKA,eAAe,iBACb,QACA,KAC8B;AAC9B,QAAM,EAAE,YAAY,IAAI,IAAI;AAE5B,MAAI;AACF,UAAM,WAAW,MAAM,OAAO;AAAA,MAC5B,IAAI,iCAAiC,EAAE,sBAAsB,WAAW,CAAC;AAAA,IAC3E;AAEA,UAAM,cAAc,SAAS,oBAAoB,CAAC;AAClD,UAAM,SAAS,CAAC,CAAC;AAEjB,WAAO;AAAA,MACL,KAAK;AAAA,MACL;AAAA,MACA,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,UAAM,MAAM;AAEZ,QAAI,IAAI,SAAS,iCAAiC;AAChD,aAAO;AAAA,QACL,KAAK;AAAA,QACL,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,cAAc;AAAA,QACd;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,OAAO,IAAI,WAAW;AAAA,MACtB,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF;AACF;AAKA,eAAe,sBACb,QACA,KAC8B;AAC9B,QAAM,EAAE,YAAY,IAAI,IAAI;AAE5B,MAAI;AACF,UAAM,WAAW,MAAM,OAAO;AAAA,MAC5B,IAAI,iCAAiC,EAAE,oBAAoB,WAAW,CAAC;AAAA,IACzE;AAEA,UAAM,mBAAmB,SAAS,oBAAoB,CAAC;AACvD,UAAM,SAAS,CAAC,CAAC,oBAAoB,iBAAiB,WAAW;AAEjE,WAAO;AAAA,MACL,KAAK;AAAA,MACL;AAAA,MACA,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,UAAM,MAAM;AAEZ,QAAI,IAAI,SAAS,iCAAiC;AAChD,aAAO;AAAA,QACL,KAAK;AAAA,QACL,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,cAAc;AAAA,QACd;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,OAAO,IAAI,WAAW;AAAA,MACtB,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF;AACF;AAKO,IAAM,qBAAsC;AAAA,EACjD,MAAM,MAAM,KAA8C;AACxD,UAAM,EAAE,cAAc,YAAY,QAAQ,IAAI,IAAI;AAClD,UAAM,SAAS,UAAU,MAAM;AAE/B,YAAQ,cAAc;AAAA,MACpB,KAAK;AACH,eAAO,kBAAkB,QAAQ,GAAG;AAAA,MAEtC,KAAK;AACH,eAAO,iBAAiB,QAAQ,GAAG;AAAA,MAErC,KAAK;AACH,eAAO,sBAAsB,QAAQ,GAAG;AAAA,MAE1C;AACE,eAAO;AAAA,UACL,KAAK;AAAA,UACL,QAAQ;AAAA,UACR,OAAO,0CAA0C,YAAY;AAAA,UAC7D,SAAS;AAAA,UACT;AAAA,UACA;AAAA,QACF;AAAA,IACJ;AAAA,EACF;AACF;","names":[]}

package/dist/{elb-PEDLXW5R.js → elb-CN6ELVM5.js}

@@ -1,3 +1,7 @@
+import {
+  createClientFactory
+} from "./chunk-O745CMWG.js";
+
 // src/infra/checkers/elb.ts
 import {
   DescribeLoadBalancersCommand,
@@ -5,15 +9,7 @@ import {
   DescribeListenersCommand,
   ElasticLoadBalancingV2Client
 } from "@aws-sdk/client-elastic-load-balancing-v2";
-var clientCache = /* @__PURE__ */ new Map();
-function getClient(region) {
-  let client = clientCache.get(region);
-  if (!client) {
-    client = new ElasticLoadBalancingV2Client({ region });
-    clientCache.set(region, client);
-  }
-  return client;
-}
+var getClient = createClientFactory(ElasticLoadBalancingV2Client);
 async function checkLoadBalancer(client, arn) {
   const { resourceId, raw } = arn;
   try {
@@ -148,4 +144,4 @@ var ELBChecker = {
 export {
   ELBChecker
 };
-//# sourceMappingURL=elb-PEDLXW5R.js.map
+//# sourceMappingURL=elb-CN6ELVM5.js.map

package/dist/elb-CN6ELVM5.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/infra/checkers/elb.ts"],"sourcesContent":["/**\n * Elastic Load Balancing v2 resource checker\n *\n * Supports:\n * - Load balancers (ALB, NLB, GLB)\n * - Target groups\n * - Listeners\n */\n\nimport {\n  DescribeLoadBalancersCommand,\n  DescribeTargetGroupsCommand,\n  DescribeListenersCommand,\n  ElasticLoadBalancingV2Client,\n} from \"@aws-sdk/client-elastic-load-balancing-v2\";\n\nimport type { ParsedArn, ResourceCheckResult } from \"../types.js\";\nimport { createClientFactory } from \"./client-factory.js\";\nimport type { ResourceChecker } from \"./types.js\";\n\n/**\n * Get or create an ELBv2 client for a region\n */\nconst getClient = createClientFactory(ElasticLoadBalancingV2Client);\n\n/**\n * Check if a load balancer exists\n */\nasync function checkLoadBalancer(\n  client: ElasticLoadBalancingV2Client,\n  arn: ParsedArn\n): Promise<ResourceCheckResult> {\n  const { resourceId, raw } = arn;\n\n  try {\n    const response = await client.send(\n      new DescribeLoadBalancersCommand({ LoadBalancerArns: [raw] })\n    );\n\n    const loadBalancer = response.LoadBalancers?.[0];\n    const exists =\n      !!loadBalancer &&\n      loadBalancer.State?.Code !== \"failed\" &&\n      loadBalancer.State?.Code !== \"active_impaired\";\n\n    return {\n      arn: raw,\n      exists,\n      service: \"elasticloadbalancing\",\n      resourceType: \"loadbalancer\",\n      resourceId,\n    };\n  } catch (error) {\n    const err = error as Error & { name?: string };\n\n    if (err.name === \"LoadBalancerNotFoundException\") {\n      return {\n        arn: raw,\n        exists: false,\n        service: \"elasticloadbalancing\",\n        resourceType: \"loadbalancer\",\n        resourceId,\n      };\n    }\n\n    return {\n      arn: raw,\n      exists: false,\n      error: err.message || \"Unknown error\",\n      service: \"elasticloadbalancing\",\n      resourceType: \"loadbalancer\",\n      resourceId,\n    };\n  }\n}\n\n/**\n * Check if a target group exists\n */\nasync function checkTargetGroup(\n  client: ElasticLoadBalancingV2Client,\n  arn: ParsedArn\n): Promise<ResourceCheckResult> {\n  const { resourceId, raw } = arn;\n\n  try {\n    const response = await client.send(\n      new DescribeTargetGroupsCommand({ TargetGroupArns: [raw] })\n    );\n\n    const targetGroup = response.TargetGroups?.[0];\n    const exists = !!targetGroup;\n\n    return {\n      arn: raw,\n      exists,\n      service: \"elasticloadbalancing\",\n      resourceType: \"targetgroup\",\n      resourceId,\n    };\n  } catch (error) {\n    const err = error as Error & { name?: string };\n\n    if (err.name === \"TargetGroupNotFoundException\") {\n      return {\n        arn: raw,\n        exists: false,\n        service: \"elasticloadbalancing\",\n        resourceType: \"targetgroup\",\n        resourceId,\n      };\n    }\n\n    return {\n      arn: raw,\n      exists: false,\n      error: err.message || \"Unknown error\",\n      service: \"elasticloadbalancing\",\n      resourceType: \"targetgroup\",\n      resourceId,\n    };\n  }\n}\n\n/**\n * Check if a listener exists\n */\nasync function checkListener(\n  client: ElasticLoadBalancingV2Client,\n  arn: ParsedArn\n): Promise<ResourceCheckResult> {\n  const { resourceId, raw } = arn;\n\n  try {\n    const response = await client.send(\n      new DescribeListenersCommand({ ListenerArns: [raw] })\n    );\n\n    const listener = response.Listeners?.[0];\n    const exists = !!listener;\n\n    return {\n      arn: raw,\n      exists,\n      service: \"elasticloadbalancing\",\n      resourceType: \"listener\",\n      resourceId,\n    };\n  } catch (error) {\n    const err = error as Error & { name?: string };\n\n    if (err.name === \"ListenerNotFoundException\") {\n      return {\n        arn: raw,\n        exists: false,\n        service: \"elasticloadbalancing\",\n        resourceType: \"listener\",\n        resourceId,\n      };\n    }\n\n    return {\n      arn: raw,\n      exists: false,\n      error: err.message || \"Unknown error\",\n      service: \"elasticloadbalancing\",\n      resourceType: \"listener\",\n      resourceId,\n    };\n  }\n}\n\n/**\n * Elastic Load Balancing resource checker\n */\nexport const ELBChecker: ResourceChecker = {\n  async check(arn: ParsedArn): Promise<ResourceCheckResult> {\n    const { resourceType, resourceId, region, raw } = arn;\n    const client = getClient(region);\n\n    switch (resourceType) {\n      case \"loadbalancer\":\n        return checkLoadBalancer(client, arn);\n\n      case \"targetgroup\":\n        return checkTargetGroup(client, arn);\n\n      case \"listener\":\n        return checkListener(client, arn);\n\n      default:\n        return {\n          arn: raw,\n          exists: false,\n          error: `Unsupported ELB resource type: ${resourceType}`,\n          service: \"elasticloadbalancing\",\n          resourceType,\n          resourceId,\n        };\n    }\n  },\n};\n"],"mappings":";;;;;AASA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AASP,IAAM,YAAY,oBAAoB,4BAA4B;AAKlE,eAAe,kBACb,QACA,KAC8B;AAC9B,QAAM,EAAE,YAAY,IAAI,IAAI;AAE5B,MAAI;AACF,UAAM,WAAW,MAAM,OAAO;AAAA,MAC5B,IAAI,6BAA6B,EAAE,kBAAkB,CAAC,GAAG,EAAE,CAAC;AAAA,IAC9D;AAEA,UAAM,eAAe,SAAS,gBAAgB,CAAC;AAC/C,UAAM,SACJ,CAAC,CAAC,gBACF,aAAa,OAAO,SAAS,YAC7B,aAAa,OAAO,SAAS;AAE/B,WAAO;AAAA,MACL,KAAK;AAAA,MACL;AAAA,MACA,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,UAAM,MAAM;AAEZ,QAAI,IAAI,SAAS,iCAAiC;AAChD,aAAO;AAAA,QACL,KAAK;AAAA,QACL,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,cAAc;AAAA,QACd;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,OAAO,IAAI,WAAW;AAAA,MACtB,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF;AACF;AAKA,eAAe,iBACb,QACA,KAC8B;AAC9B,QAAM,EAAE,YAAY,IAAI,IAAI;AAE5B,MAAI;AACF,UAAM,WAAW,MAAM,OAAO;AAAA,MAC5B,IAAI,4BAA4B,EAAE,iBAAiB,CAAC,GAAG,EAAE,CAAC;AAAA,IAC5D;AAEA,UAAM,cAAc,SAAS,eAAe,CAAC;AAC7C,UAAM,SAAS,CAAC,CAAC;AAEjB,WAAO;AAAA,MACL,KAAK;AAAA,MACL;AAAA,MACA,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,UAAM,MAAM;AAEZ,QAAI,IAAI,SAAS,gCAAgC;AAC/C,aAAO;AAAA,QACL,KAAK;AAAA,QACL,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,cAAc;AAAA,QACd;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,OAAO,IAAI,WAAW;AAAA,MACtB,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF;AACF;AAKA,eAAe,cACb,QACA,KAC8B;AAC9B,QAAM,EAAE,YAAY,IAAI,IAAI;AAE5B,MAAI;AACF,UAAM,WAAW,MAAM,OAAO;AAAA,MAC5B,IAAI,yBAAyB,EAAE,cAAc,CAAC,GAAG,EAAE,CAAC;AAAA,IACtD;AAEA,UAAM,WAAW,SAAS,YAAY,CAAC;AACvC,UAAM,SAAS,CAAC,CAAC;AAEjB,WAAO;AAAA,MACL,KAAK;AAAA,MACL;AAAA,MACA,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,UAAM,MAAM;AAEZ,QAAI,IAAI,SAAS,6BAA6B;AAC5C,aAAO;AAAA,QACL,KAAK;AAAA,QACL,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,cAAc;AAAA,QACd;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,OAAO,IAAI,WAAW;AAAA,MACtB,SAAS;AAAA,MACT,cAAc;AAAA,MACd;AAAA,IACF;AAAA,EACF;AACF;AAKO,IAAM,aAA8B;AAAA,EACzC,MAAM,MAAM,KAA8C;AACxD,UAAM,EAAE,cAAc,YAAY,QAAQ,IAAI,IAAI;AAClD,UAAM,SAAS,UAAU,MAAM;AAE/B,YAAQ,cAAc;AAAA,MACpB,KAAK;AACH,eAAO,kBAAkB,QAAQ,GAAG;AAAA,MAEtC,KAAK;AACH,eAAO,iBAAiB,QAAQ,GAAG;AAAA,MAErC,KAAK;AACH,eAAO,cAAc,QAAQ,GAAG;AAAA,MAElC;AACE,eAAO;AAAA,UACL,KAAK;AAAA,UACL,QAAQ;AAAA,UACR,OAAO,kCAAkC,YAAY;AAAA,UACrD,SAAS;AAAA,UACT;AAAA,UACA;AAAA,QACF;AAAA,IACJ;AAAA,EACF;AACF;","names":[]}

package/dist/{iam-7H5HFWVQ.js → iam-YXMHK2MV.js}

@@ -1,8 +1,12 @@
+import {
+  AWS_DEFAULTS
+} from "./chunk-RHM53NLG.js";
+
 // src/infra/checkers/iam.ts
 import { GetPolicyCommand, GetRoleCommand, IAMClient } from "@aws-sdk/client-iam";
 var client = null;
 function getClient() {
-  client ??= new IAMClient({ region: "us-east-1" });
+  client ??= new IAMClient({ region: AWS_DEFAULTS.globalRegion });
   return client;
 }
 var IAMChecker = {
@@ -93,4 +97,4 @@ async function checkPolicy(policyArn) {
 export {
   IAMChecker
 };
-//# sourceMappingURL=iam-7H5HFWVQ.js.map
+//# sourceMappingURL=iam-YXMHK2MV.js.map

package/dist/iam-YXMHK2MV.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/infra/checkers/iam.ts"],"sourcesContent":["/**\n * IAM resource checker\n */\n\nimport { GetPolicyCommand, GetRoleCommand, IAMClient } from \"@aws-sdk/client-iam\";\n\nimport { AWS_DEFAULTS } from \"../../constants.js\";\nimport type { ParsedArn, ResourceCheckResult } from \"../types.js\";\nimport type { ResourceChecker } from \"./types.js\";\n\n/**\n * IAM is global, so we only need one client\n */\nlet client: IAMClient | null = null;\n\n/**\n * Get or create the IAM client\n */\nfunction getClient(): IAMClient {\n  // IAM is global, use the default global region\n  client ??= new IAMClient({ region: AWS_DEFAULTS.globalRegion });\n  return client;\n}\n\n/**\n * IAM resource checker (roles and policies)\n */\nexport const IAMChecker: ResourceChecker = {\n  async check(arn: ParsedArn): Promise<ResourceCheckResult> {\n    const { resourceType, resourceId, raw } = arn;\n\n    switch (resourceType) {\n      case \"role\":\n        return checkRole(resourceId, raw);\n      case \"policy\":\n        return checkPolicy(raw);\n      default:\n        return {\n          arn: raw,\n          exists: false,\n          error: `Unsupported IAM resource type: ${resourceType}`,\n          service: \"iam\",\n          resourceType,\n          resourceId,\n        };\n    }\n  },\n};\n\n/**\n * Check if an IAM role exists\n */\nasync function checkRole(roleName: string, arn: string): Promise<ResourceCheckResult> {\n  const iamClient = getClient();\n\n  try {\n    await iamClient.send(new GetRoleCommand({ RoleName: roleName }));\n    return {\n      arn,\n      exists: true,\n      service: \"iam\",\n      resourceType: \"role\",\n      resourceId: roleName,\n    };\n  } catch (error) {\n    const err = error as Error & { name?: string };\n\n    if (err.name === \"NoSuchEntityException\") {\n      return {\n        arn,\n        exists: false,\n        service: \"iam\",\n        resourceType: \"role\",\n        resourceId: roleName,\n      };\n    }\n\n    return {\n      arn,\n      exists: false,\n      error: err.message || \"Unknown error\",\n      service: \"iam\",\n      resourceType: \"role\",\n      resourceId: roleName,\n    };\n  }\n}\n\n/**\n * Check if an IAM policy exists\n */\nasync function checkPolicy(policyArn: string): Promise<ResourceCheckResult> {\n  const iamClient = getClient();\n\n  // Extract policy name from ARN for display\n  const policyName = policyArn.split(\"/\").pop() ?? policyArn;\n\n  try {\n    await iamClient.send(new GetPolicyCommand({ PolicyArn: policyArn }));\n    return {\n      arn: policyArn,\n      exists: true,\n      service: \"iam\",\n      resourceType: \"policy\",\n      resourceId: policyName,\n    };\n  } catch (error) {\n    const err = error as Error & { name?: string };\n\n    if (err.name === \"NoSuchEntityException\") {\n      return {\n        arn: policyArn,\n        exists: false,\n        service: \"iam\",\n        resourceType: \"policy\",\n        resourceId: policyName,\n      };\n    }\n\n    return {\n      arn: policyArn,\n      exists: false,\n      error: err.message || \"Unknown error\",\n      service: \"iam\",\n      resourceType: \"policy\",\n      resourceId: policyName,\n    };\n  }\n}\n"],"mappings":";;;;;AAIA,SAAS,kBAAkB,gBAAgB,iBAAiB;AAS5D,IAAI,SAA2B;AAK/B,SAAS,YAAuB;AAE9B,aAAW,IAAI,UAAU,EAAE,QAAQ,aAAa,aAAa,CAAC;AAC9D,SAAO;AACT;AAKO,IAAM,aAA8B;AAAA,EACzC,MAAM,MAAM,KAA8C;AACxD,UAAM,EAAE,cAAc,YAAY,IAAI,IAAI;AAE1C,YAAQ,cAAc;AAAA,MACpB,KAAK;AACH,eAAO,UAAU,YAAY,GAAG;AAAA,MAClC,KAAK;AACH,eAAO,YAAY,GAAG;AAAA,MACxB;AACE,eAAO;AAAA,UACL,KAAK;AAAA,UACL,QAAQ;AAAA,UACR,OAAO,kCAAkC,YAAY;AAAA,UACrD,SAAS;AAAA,UACT;AAAA,UACA;AAAA,QACF;AAAA,IACJ;AAAA,EACF;AACF;AAKA,eAAe,UAAU,UAAkB,KAA2C;AACpF,QAAM,YAAY,UAAU;AAE5B,MAAI;AACF,UAAM,UAAU,KAAK,IAAI,eAAe,EAAE,UAAU,SAAS,CAAC,CAAC;AAC/D,WAAO;AAAA,MACL;AAAA,MACA,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,cAAc;AAAA,MACd,YAAY;AAAA,IACd;AAAA,EACF,SAAS,OAAO;AACd,UAAM,MAAM;AAEZ,QAAI,IAAI,SAAS,yBAAyB;AACxC,aAAO;AAAA,QACL;AAAA,QACA,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,cAAc;AAAA,QACd,YAAY;AAAA,MACd;AAAA,IACF;AAEA,WAAO;AAAA,MACL;AAAA,MACA,QAAQ;AAAA,MACR,OAAO,IAAI,WAAW;AAAA,MACtB,SAAS;AAAA,MACT,cAAc;AAAA,MACd,YAAY;AAAA,IACd;AAAA,EACF;AACF;AAKA,eAAe,YAAY,WAAiD;AAC1E,QAAM,YAAY,UAAU;AAG5B,QAAM,aAAa,UAAU,MAAM,GAAG,EAAE,IAAI,KAAK;AAEjD,MAAI;AACF,UAAM,UAAU,KAAK,IAAI,iBAAiB,EAAE,WAAW,UAAU,CAAC,CAAC;AACnE,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,cAAc;AAAA,MACd,YAAY;AAAA,IACd;AAAA,EACF,SAAS,OAAO;AACd,UAAM,MAAM;AAEZ,QAAI,IAAI,SAAS,yBAAyB;AACxC,aAAO;AAAA,QACL,KAAK;AAAA,QACL,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,cAAc;AAAA,QACd,YAAY;AAAA,MACd;AAAA,IACF;AAEA,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,OAAO,IAAI,WAAW;AAAA,MACtB,SAAS;AAAA,MACT,cAAc;AAAA,MACd,YAAY;AAAA,IACd;AAAA,EACF;AACF;","names":[]}

package/dist/index.d.ts

@@ -9,7 +9,7 @@ export { auditProcessConfig, BaseProcessToolRunner, HooksRunner, runProcessCheck
 export { type RemoteRepoInfo, type ScanOptions, scanRepository, type ScanResult, validateProcess, type ValidateProcessOptions, type ValidateProcessResult, } from "./process/scan/index.js";
 export { formatJson, formatOutput, formatText, type OutputFormat } from "./output/index.js";
 export { type DependenciesOptions, type DependenciesResult, getDependencies, } from "./dependencies/index.js";
-export { formatTierResultJson, formatTierResultText, type RepoMetadata, type Tier, type TierSourceDetail, VALID_TIERS, type ValidateTierOptions, type ValidateTierResult, validateTierRuleset, } from "./validate/index.js";
+export { formatTierResultJson, formatTierResultText, type Tier, type TierSourceDetail, VALID_TIERS, type ValidateTierOptions, type ValidateTierResult, validateTierRuleset, } from "./validate/index.js";
 export { createServer as createMcpServer, startServer as startMcpServer, type Guideline, type GuidelineFrontmatter, type GuidelineListItem, type Ruleset, } from "./mcp/index.js";
 export type { AccountId, AccountScanResult, Arn, CloudProvider, GcpResourcePath, InfraScanResult, InfraScanSummary, LegacyManifest, Manifest, ManifestAccount, MultiAccountManifest, ParsedArn, ParsedGcpResource, PulumiResource, PulumiStackExport, ResourceCheckResult, ResourceIdentifier, ScanInfraOptions, GenerateManifestOptions, } from "./infra/index.js";
 export { ArnSchema, AccountIdSchema, AccountKeySchema, CloudProviderSchema, GcpResourcePathSchema, InfraScanResultSchema, InfraScanSummarySchema, LegacyManifestSchema, ManifestAccountSchema, ManifestSchema, MultiAccountManifestSchema, ParsedArnSchema, ParsedGcpResourceSchema, PulumiResourceSchema, PulumiStackExportSchema, ResourceCheckResultSchema, ResourceIdentifierSchema, } from "./infra/index.js";