@actsecurity/iam-lens 0.1.156

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (383) hide show
  1. package/LICENSE.txt +661 -0
  2. package/README.md +203 -0
  3. package/dist/cjs/cli.d.ts +3 -0
  4. package/dist/cjs/cli.d.ts.map +1 -0
  5. package/dist/cjs/cli.js +206 -0
  6. package/dist/cjs/cli.js.map +1 -0
  7. package/dist/cjs/collect/client.d.ts +550 -0
  8. package/dist/cjs/collect/client.d.ts.map +1 -0
  9. package/dist/cjs/collect/client.js +1119 -0
  10. package/dist/cjs/collect/client.js.map +1 -0
  11. package/dist/cjs/collect/collect.d.ts +44 -0
  12. package/dist/cjs/collect/collect.d.ts.map +1 -0
  13. package/dist/cjs/collect/collect.js +55 -0
  14. package/dist/cjs/collect/collect.js.map +1 -0
  15. package/dist/cjs/collect/inMemoryClient.d.ts +6 -0
  16. package/dist/cjs/collect/inMemoryClient.d.ts.map +1 -0
  17. package/dist/cjs/collect/inMemoryClient.js +11 -0
  18. package/dist/cjs/collect/inMemoryClient.js.map +1 -0
  19. package/dist/cjs/index.d.ts +13 -0
  20. package/dist/cjs/index.d.ts.map +1 -0
  21. package/dist/cjs/index.js +28 -0
  22. package/dist/cjs/index.js.map +1 -0
  23. package/dist/cjs/package.json +3 -0
  24. package/dist/cjs/principalCan/permission.d.ts +125 -0
  25. package/dist/cjs/principalCan/permission.d.ts.map +1 -0
  26. package/dist/cjs/principalCan/permission.js +1229 -0
  27. package/dist/cjs/principalCan/permission.js.map +1 -0
  28. package/dist/cjs/principalCan/permissionSet.d.ts +140 -0
  29. package/dist/cjs/principalCan/permissionSet.d.ts.map +1 -0
  30. package/dist/cjs/principalCan/permissionSet.js +437 -0
  31. package/dist/cjs/principalCan/permissionSet.js.map +1 -0
  32. package/dist/cjs/principalCan/principalCan.d.ts +26 -0
  33. package/dist/cjs/principalCan/principalCan.d.ts.map +1 -0
  34. package/dist/cjs/principalCan/principalCan.js +195 -0
  35. package/dist/cjs/principalCan/principalCan.js.map +1 -0
  36. package/dist/cjs/principalCan/principalConstraints.d.ts +147 -0
  37. package/dist/cjs/principalCan/principalConstraints.d.ts.map +1 -0
  38. package/dist/cjs/principalCan/principalConstraints.js +472 -0
  39. package/dist/cjs/principalCan/principalConstraints.js.map +1 -0
  40. package/dist/cjs/principalCan/resources/actions.d.ts +9 -0
  41. package/dist/cjs/principalCan/resources/actions.d.ts.map +1 -0
  42. package/dist/cjs/principalCan/resources/actions.js +27 -0
  43. package/dist/cjs/principalCan/resources/actions.js.map +1 -0
  44. package/dist/cjs/principalCan/resources/resourceTypes/iamRoles.d.ts +31 -0
  45. package/dist/cjs/principalCan/resources/resourceTypes/iamRoles.d.ts.map +1 -0
  46. package/dist/cjs/principalCan/resources/resourceTypes/iamRoles.js +114 -0
  47. package/dist/cjs/principalCan/resources/resourceTypes/iamRoles.js.map +1 -0
  48. package/dist/cjs/principalCan/resources/resourceTypes/kmsKeys.d.ts +30 -0
  49. package/dist/cjs/principalCan/resources/resourceTypes/kmsKeys.d.ts.map +1 -0
  50. package/dist/cjs/principalCan/resources/resourceTypes/kmsKeys.js +110 -0
  51. package/dist/cjs/principalCan/resources/resourceTypes/kmsKeys.js.map +1 -0
  52. package/dist/cjs/principalCan/resources/resourceTypes/s3Buckets.d.ts +18 -0
  53. package/dist/cjs/principalCan/resources/resourceTypes/s3Buckets.d.ts.map +1 -0
  54. package/dist/cjs/principalCan/resources/resourceTypes/s3Buckets.js +123 -0
  55. package/dist/cjs/principalCan/resources/resourceTypes/s3Buckets.js.map +1 -0
  56. package/dist/cjs/principalCan/resources/statements.d.ts +27 -0
  57. package/dist/cjs/principalCan/resources/statements.d.ts.map +1 -0
  58. package/dist/cjs/principalCan/resources/statements.js +119 -0
  59. package/dist/cjs/principalCan/resources/statements.js.map +1 -0
  60. package/dist/cjs/principalIndex/makePrincipalIndex.d.ts +8 -0
  61. package/dist/cjs/principalIndex/makePrincipalIndex.d.ts.map +1 -0
  62. package/dist/cjs/principalIndex/makePrincipalIndex.js +105 -0
  63. package/dist/cjs/principalIndex/makePrincipalIndex.js.map +1 -0
  64. package/dist/cjs/principals.d.ts +54 -0
  65. package/dist/cjs/principals.d.ts.map +1 -0
  66. package/dist/cjs/principals.js +143 -0
  67. package/dist/cjs/principals.js.map +1 -0
  68. package/dist/cjs/resources.d.ts +32 -0
  69. package/dist/cjs/resources.d.ts.map +1 -0
  70. package/dist/cjs/resources.js +71 -0
  71. package/dist/cjs/resources.js.map +1 -0
  72. package/dist/cjs/simulate/contextKeys.d.ts +68 -0
  73. package/dist/cjs/simulate/contextKeys.d.ts.map +1 -0
  74. package/dist/cjs/simulate/contextKeys.js +293 -0
  75. package/dist/cjs/simulate/contextKeys.js.map +1 -0
  76. package/dist/cjs/simulate/simulate.d.ts +72 -0
  77. package/dist/cjs/simulate/simulate.d.ts.map +1 -0
  78. package/dist/cjs/simulate/simulate.js +296 -0
  79. package/dist/cjs/simulate/simulate.js.map +1 -0
  80. package/dist/cjs/test-datasets/testClient.d.ts +17 -0
  81. package/dist/cjs/test-datasets/testClient.d.ts.map +1 -0
  82. package/dist/cjs/test-datasets/testClient.js +58 -0
  83. package/dist/cjs/test-datasets/testClient.js.map +1 -0
  84. package/dist/cjs/utils/arn.d.ts +22 -0
  85. package/dist/cjs/utils/arn.d.ts.map +1 -0
  86. package/dist/cjs/utils/arn.js +49 -0
  87. package/dist/cjs/utils/arn.js.map +1 -0
  88. package/dist/cjs/utils/bitset.d.ts +45 -0
  89. package/dist/cjs/utils/bitset.d.ts.map +1 -0
  90. package/dist/cjs/utils/bitset.js +149 -0
  91. package/dist/cjs/utils/bitset.js.map +1 -0
  92. package/dist/cjs/utils/dynamicImport.d.ts +31 -0
  93. package/dist/cjs/utils/dynamicImport.d.ts.map +1 -0
  94. package/dist/cjs/utils/dynamicImport.js +64 -0
  95. package/dist/cjs/utils/dynamicImport.js.map +1 -0
  96. package/dist/cjs/utils/packageVersion.d.ts +5 -0
  97. package/dist/cjs/utils/packageVersion.d.ts.map +1 -0
  98. package/dist/cjs/utils/packageVersion.js +25 -0
  99. package/dist/cjs/utils/packageVersion.js.map +1 -0
  100. package/dist/cjs/utils/readPackageFile.d.ts +3 -0
  101. package/dist/cjs/utils/readPackageFile.d.ts.map +1 -0
  102. package/dist/cjs/utils/readPackageFile.js +16 -0
  103. package/dist/cjs/utils/readPackageFile.js.map +1 -0
  104. package/dist/cjs/utils/s3Abac.d.ts +3 -0
  105. package/dist/cjs/utils/s3Abac.d.ts.map +1 -0
  106. package/dist/cjs/utils/s3Abac.js +5 -0
  107. package/dist/cjs/utils/s3Abac.js.map +1 -0
  108. package/dist/cjs/utils/stringOrFileArgument.d.ts +9 -0
  109. package/dist/cjs/utils/stringOrFileArgument.d.ts.map +1 -0
  110. package/dist/cjs/utils/stringOrFileArgument.js +25 -0
  111. package/dist/cjs/utils/stringOrFileArgument.js.map +1 -0
  112. package/dist/cjs/utils/sts.d.ts +2 -0
  113. package/dist/cjs/utils/sts.d.ts.map +1 -0
  114. package/dist/cjs/utils/sts.js +9 -0
  115. package/dist/cjs/utils/sts.js.map +1 -0
  116. package/dist/cjs/utils/testUtils.d.ts +56 -0
  117. package/dist/cjs/utils/testUtils.d.ts.map +1 -0
  118. package/dist/cjs/utils/testUtils.js +95 -0
  119. package/dist/cjs/utils/testUtils.js.map +1 -0
  120. package/dist/cjs/utils/workerScript.d.ts +8 -0
  121. package/dist/cjs/utils/workerScript.d.ts.map +1 -0
  122. package/dist/cjs/utils/workerScript.js +23 -0
  123. package/dist/cjs/utils/workerScript.js.map +1 -0
  124. package/dist/cjs/whoCan/WhoCanMainThreadWorker.d.ts +73 -0
  125. package/dist/cjs/whoCan/WhoCanMainThreadWorker.d.ts.map +1 -0
  126. package/dist/cjs/whoCan/WhoCanMainThreadWorker.js +80 -0
  127. package/dist/cjs/whoCan/WhoCanMainThreadWorker.js.map +1 -0
  128. package/dist/cjs/whoCan/WhoCanProcessor.d.ts +400 -0
  129. package/dist/cjs/whoCan/WhoCanProcessor.d.ts.map +1 -0
  130. package/dist/cjs/whoCan/WhoCanProcessor.js +1088 -0
  131. package/dist/cjs/whoCan/WhoCanProcessor.js.map +1 -0
  132. package/dist/cjs/whoCan/WhoCanWorker.d.ts +87 -0
  133. package/dist/cjs/whoCan/WhoCanWorker.d.ts.map +1 -0
  134. package/dist/cjs/whoCan/WhoCanWorker.js +201 -0
  135. package/dist/cjs/whoCan/WhoCanWorker.js.map +1 -0
  136. package/dist/cjs/whoCan/WhoCanWorkerThreadWorker.d.ts +2 -0
  137. package/dist/cjs/whoCan/WhoCanWorkerThreadWorker.d.ts.map +1 -0
  138. package/dist/cjs/whoCan/WhoCanWorkerThreadWorker.js +189 -0
  139. package/dist/cjs/whoCan/WhoCanWorkerThreadWorker.js.map +1 -0
  140. package/dist/cjs/whoCan/principalArnFilter.d.ts +84 -0
  141. package/dist/cjs/whoCan/principalArnFilter.d.ts.map +1 -0
  142. package/dist/cjs/whoCan/principalArnFilter.js +258 -0
  143. package/dist/cjs/whoCan/principalArnFilter.js.map +1 -0
  144. package/dist/cjs/whoCan/principalScope.d.ts +35 -0
  145. package/dist/cjs/whoCan/principalScope.d.ts.map +1 -0
  146. package/dist/cjs/whoCan/principalScope.js +104 -0
  147. package/dist/cjs/whoCan/principalScope.js.map +1 -0
  148. package/dist/cjs/whoCan/requestAnalysis.d.ts +73 -0
  149. package/dist/cjs/whoCan/requestAnalysis.d.ts.map +1 -0
  150. package/dist/cjs/whoCan/requestAnalysis.js +87 -0
  151. package/dist/cjs/whoCan/requestAnalysis.js.map +1 -0
  152. package/dist/cjs/whoCan/untrustingActions.d.ts +7 -0
  153. package/dist/cjs/whoCan/untrustingActions.d.ts.map +1 -0
  154. package/dist/cjs/whoCan/untrustingActions.js +30 -0
  155. package/dist/cjs/whoCan/untrustingActions.js.map +1 -0
  156. package/dist/cjs/whoCan/whoCan.d.ts +295 -0
  157. package/dist/cjs/whoCan/whoCan.d.ts.map +1 -0
  158. package/dist/cjs/whoCan/whoCan.js +574 -0
  159. package/dist/cjs/whoCan/whoCan.js.map +1 -0
  160. package/dist/cjs/whoCan/workerBootstrapPlugin.d.ts +17 -0
  161. package/dist/cjs/whoCan/workerBootstrapPlugin.d.ts.map +1 -0
  162. package/dist/cjs/whoCan/workerBootstrapPlugin.js +3 -0
  163. package/dist/cjs/whoCan/workerBootstrapPlugin.js.map +1 -0
  164. package/dist/cjs/workers/ArrayStreamingWorkQueue.d.ts +15 -0
  165. package/dist/cjs/workers/ArrayStreamingWorkQueue.d.ts.map +1 -0
  166. package/dist/cjs/workers/ArrayStreamingWorkQueue.js +35 -0
  167. package/dist/cjs/workers/ArrayStreamingWorkQueue.js.map +1 -0
  168. package/dist/cjs/workers/JobRunner.d.ts +47 -0
  169. package/dist/cjs/workers/JobRunner.d.ts.map +1 -0
  170. package/dist/cjs/workers/JobRunner.js +101 -0
  171. package/dist/cjs/workers/JobRunner.js.map +1 -0
  172. package/dist/cjs/workers/RingQueue.d.ts +14 -0
  173. package/dist/cjs/workers/RingQueue.d.ts.map +1 -0
  174. package/dist/cjs/workers/RingQueue.js +43 -0
  175. package/dist/cjs/workers/RingQueue.js.map +1 -0
  176. package/dist/cjs/workers/SharedArrayBufferMainCache.d.ts +10 -0
  177. package/dist/cjs/workers/SharedArrayBufferMainCache.d.ts.map +1 -0
  178. package/dist/cjs/workers/SharedArrayBufferMainCache.js +37 -0
  179. package/dist/cjs/workers/SharedArrayBufferMainCache.js.map +1 -0
  180. package/dist/cjs/workers/SharedArrayBufferWorkerCache.d.ts +10 -0
  181. package/dist/cjs/workers/SharedArrayBufferWorkerCache.d.ts.map +1 -0
  182. package/dist/cjs/workers/SharedArrayBufferWorkerCache.js +49 -0
  183. package/dist/cjs/workers/SharedArrayBufferWorkerCache.js.map +1 -0
  184. package/dist/cjs/workers/StreamingWorkQueue.d.ts +18 -0
  185. package/dist/cjs/workers/StreamingWorkQueue.d.ts.map +1 -0
  186. package/dist/cjs/workers/StreamingWorkQueue.js +67 -0
  187. package/dist/cjs/workers/StreamingWorkQueue.js.map +1 -0
  188. package/dist/cjs/workers/buffers.d.ts +4 -0
  189. package/dist/cjs/workers/buffers.d.ts.map +1 -0
  190. package/dist/cjs/workers/buffers.js +26 -0
  191. package/dist/cjs/workers/buffers.js.map +1 -0
  192. package/dist/esm/cli.d.ts +3 -0
  193. package/dist/esm/cli.d.ts.map +1 -0
  194. package/dist/esm/cli.js +204 -0
  195. package/dist/esm/cli.js.map +1 -0
  196. package/dist/esm/collect/client.d.ts +550 -0
  197. package/dist/esm/collect/client.d.ts.map +1 -0
  198. package/dist/esm/collect/client.js +1114 -0
  199. package/dist/esm/collect/client.js.map +1 -0
  200. package/dist/esm/collect/collect.d.ts +44 -0
  201. package/dist/esm/collect/collect.d.ts.map +1 -0
  202. package/dist/esm/collect/collect.js +51 -0
  203. package/dist/esm/collect/collect.js.map +1 -0
  204. package/dist/esm/collect/inMemoryClient.d.ts +6 -0
  205. package/dist/esm/collect/inMemoryClient.d.ts.map +1 -0
  206. package/dist/esm/collect/inMemoryClient.js +8 -0
  207. package/dist/esm/collect/inMemoryClient.js.map +1 -0
  208. package/dist/esm/index.d.ts +13 -0
  209. package/dist/esm/index.d.ts.map +1 -0
  210. package/dist/esm/index.js +11 -0
  211. package/dist/esm/index.js.map +1 -0
  212. package/dist/esm/package.json +3 -0
  213. package/dist/esm/principalCan/permission.d.ts +125 -0
  214. package/dist/esm/principalCan/permission.d.ts.map +1 -0
  215. package/dist/esm/principalCan/permission.js +1212 -0
  216. package/dist/esm/principalCan/permission.js.map +1 -0
  217. package/dist/esm/principalCan/permissionSet.d.ts +140 -0
  218. package/dist/esm/principalCan/permissionSet.d.ts.map +1 -0
  219. package/dist/esm/principalCan/permissionSet.js +429 -0
  220. package/dist/esm/principalCan/permissionSet.js.map +1 -0
  221. package/dist/esm/principalCan/principalCan.d.ts +26 -0
  222. package/dist/esm/principalCan/principalCan.d.ts.map +1 -0
  223. package/dist/esm/principalCan/principalCan.js +193 -0
  224. package/dist/esm/principalCan/principalCan.js.map +1 -0
  225. package/dist/esm/principalCan/principalConstraints.d.ts +147 -0
  226. package/dist/esm/principalCan/principalConstraints.d.ts.map +1 -0
  227. package/dist/esm/principalCan/principalConstraints.js +456 -0
  228. package/dist/esm/principalCan/principalConstraints.js.map +1 -0
  229. package/dist/esm/principalCan/resources/actions.d.ts +9 -0
  230. package/dist/esm/principalCan/resources/actions.d.ts.map +1 -0
  231. package/dist/esm/principalCan/resources/actions.js +24 -0
  232. package/dist/esm/principalCan/resources/actions.js.map +1 -0
  233. package/dist/esm/principalCan/resources/resourceTypes/iamRoles.d.ts +31 -0
  234. package/dist/esm/principalCan/resources/resourceTypes/iamRoles.d.ts.map +1 -0
  235. package/dist/esm/principalCan/resources/resourceTypes/iamRoles.js +110 -0
  236. package/dist/esm/principalCan/resources/resourceTypes/iamRoles.js.map +1 -0
  237. package/dist/esm/principalCan/resources/resourceTypes/kmsKeys.d.ts +30 -0
  238. package/dist/esm/principalCan/resources/resourceTypes/kmsKeys.d.ts.map +1 -0
  239. package/dist/esm/principalCan/resources/resourceTypes/kmsKeys.js +106 -0
  240. package/dist/esm/principalCan/resources/resourceTypes/kmsKeys.js.map +1 -0
  241. package/dist/esm/principalCan/resources/resourceTypes/s3Buckets.d.ts +18 -0
  242. package/dist/esm/principalCan/resources/resourceTypes/s3Buckets.d.ts.map +1 -0
  243. package/dist/esm/principalCan/resources/resourceTypes/s3Buckets.js +120 -0
  244. package/dist/esm/principalCan/resources/resourceTypes/s3Buckets.js.map +1 -0
  245. package/dist/esm/principalCan/resources/statements.d.ts +27 -0
  246. package/dist/esm/principalCan/resources/statements.d.ts.map +1 -0
  247. package/dist/esm/principalCan/resources/statements.js +117 -0
  248. package/dist/esm/principalCan/resources/statements.js.map +1 -0
  249. package/dist/esm/principalIndex/makePrincipalIndex.d.ts +8 -0
  250. package/dist/esm/principalIndex/makePrincipalIndex.d.ts.map +1 -0
  251. package/dist/esm/principalIndex/makePrincipalIndex.js +104 -0
  252. package/dist/esm/principalIndex/makePrincipalIndex.js.map +1 -0
  253. package/dist/esm/principals.d.ts +54 -0
  254. package/dist/esm/principals.d.ts.map +1 -0
  255. package/dist/esm/principals.js +133 -0
  256. package/dist/esm/principals.js.map +1 -0
  257. package/dist/esm/resources.d.ts +32 -0
  258. package/dist/esm/resources.d.ts.map +1 -0
  259. package/dist/esm/resources.js +69 -0
  260. package/dist/esm/resources.js.map +1 -0
  261. package/dist/esm/simulate/contextKeys.d.ts +68 -0
  262. package/dist/esm/simulate/contextKeys.d.ts.map +1 -0
  263. package/dist/esm/simulate/contextKeys.js +287 -0
  264. package/dist/esm/simulate/contextKeys.js.map +1 -0
  265. package/dist/esm/simulate/simulate.d.ts +72 -0
  266. package/dist/esm/simulate/simulate.d.ts.map +1 -0
  267. package/dist/esm/simulate/simulate.js +295 -0
  268. package/dist/esm/simulate/simulate.js.map +1 -0
  269. package/dist/esm/test-datasets/testClient.d.ts +17 -0
  270. package/dist/esm/test-datasets/testClient.d.ts.map +1 -0
  271. package/dist/esm/test-datasets/testClient.js +56 -0
  272. package/dist/esm/test-datasets/testClient.js.map +1 -0
  273. package/dist/esm/utils/arn.d.ts +22 -0
  274. package/dist/esm/utils/arn.d.ts.map +1 -0
  275. package/dist/esm/utils/arn.js +43 -0
  276. package/dist/esm/utils/arn.js.map +1 -0
  277. package/dist/esm/utils/bitset.d.ts +45 -0
  278. package/dist/esm/utils/bitset.d.ts.map +1 -0
  279. package/dist/esm/utils/bitset.js +141 -0
  280. package/dist/esm/utils/bitset.js.map +1 -0
  281. package/dist/esm/utils/dynamicImport.d.ts +31 -0
  282. package/dist/esm/utils/dynamicImport.d.ts.map +1 -0
  283. package/dist/esm/utils/dynamicImport.js +60 -0
  284. package/dist/esm/utils/dynamicImport.js.map +1 -0
  285. package/dist/esm/utils/packageVersion.d.ts +5 -0
  286. package/dist/esm/utils/packageVersion.d.ts.map +1 -0
  287. package/dist/esm/utils/packageVersion.js +22 -0
  288. package/dist/esm/utils/packageVersion.js.map +1 -0
  289. package/dist/esm/utils/readPackageFile.d.ts +3 -0
  290. package/dist/esm/utils/readPackageFile.d.ts.map +1 -0
  291. package/dist/esm/utils/readPackageFile.js +15 -0
  292. package/dist/esm/utils/readPackageFile.js.map +1 -0
  293. package/dist/esm/utils/readPackageFileEsm.d.ts.map +1 -0
  294. package/dist/esm/utils/s3Abac.d.ts +3 -0
  295. package/dist/esm/utils/s3Abac.d.ts.map +1 -0
  296. package/dist/esm/utils/s3Abac.js +2 -0
  297. package/dist/esm/utils/s3Abac.js.map +1 -0
  298. package/dist/esm/utils/stringOrFileArgument.d.ts +9 -0
  299. package/dist/esm/utils/stringOrFileArgument.d.ts.map +1 -0
  300. package/dist/esm/utils/stringOrFileArgument.js +22 -0
  301. package/dist/esm/utils/stringOrFileArgument.js.map +1 -0
  302. package/dist/esm/utils/sts.d.ts +2 -0
  303. package/dist/esm/utils/sts.d.ts.map +1 -0
  304. package/dist/esm/utils/sts.js +6 -0
  305. package/dist/esm/utils/sts.js.map +1 -0
  306. package/dist/esm/utils/testUtils.d.ts +56 -0
  307. package/dist/esm/utils/testUtils.d.ts.map +1 -0
  308. package/dist/esm/utils/testUtils.js +90 -0
  309. package/dist/esm/utils/testUtils.js.map +1 -0
  310. package/dist/esm/utils/workerScript.d.ts +8 -0
  311. package/dist/esm/utils/workerScript.d.ts.map +1 -0
  312. package/dist/esm/utils/workerScript.js +18 -0
  313. package/dist/esm/utils/workerScript.js.map +1 -0
  314. package/dist/esm/utils/workerScriptEsm.d.ts.map +1 -0
  315. package/dist/esm/whoCan/WhoCanMainThreadWorker.d.ts +73 -0
  316. package/dist/esm/whoCan/WhoCanMainThreadWorker.d.ts.map +1 -0
  317. package/dist/esm/whoCan/WhoCanMainThreadWorker.js +81 -0
  318. package/dist/esm/whoCan/WhoCanMainThreadWorker.js.map +1 -0
  319. package/dist/esm/whoCan/WhoCanProcessor.d.ts +400 -0
  320. package/dist/esm/whoCan/WhoCanProcessor.d.ts.map +1 -0
  321. package/dist/esm/whoCan/WhoCanProcessor.js +1080 -0
  322. package/dist/esm/whoCan/WhoCanProcessor.js.map +1 -0
  323. package/dist/esm/whoCan/WhoCanWorker.d.ts +87 -0
  324. package/dist/esm/whoCan/WhoCanWorker.d.ts.map +1 -0
  325. package/dist/esm/whoCan/WhoCanWorker.js +198 -0
  326. package/dist/esm/whoCan/WhoCanWorker.js.map +1 -0
  327. package/dist/esm/whoCan/WhoCanWorkerThreadWorker.d.ts +2 -0
  328. package/dist/esm/whoCan/WhoCanWorkerThreadWorker.d.ts.map +1 -0
  329. package/dist/esm/whoCan/WhoCanWorkerThreadWorker.js +193 -0
  330. package/dist/esm/whoCan/WhoCanWorkerThreadWorker.js.map +1 -0
  331. package/dist/esm/whoCan/principalArnFilter.d.ts +84 -0
  332. package/dist/esm/whoCan/principalArnFilter.d.ts.map +1 -0
  333. package/dist/esm/whoCan/principalArnFilter.js +253 -0
  334. package/dist/esm/whoCan/principalArnFilter.js.map +1 -0
  335. package/dist/esm/whoCan/principalScope.d.ts +35 -0
  336. package/dist/esm/whoCan/principalScope.d.ts.map +1 -0
  337. package/dist/esm/whoCan/principalScope.js +102 -0
  338. package/dist/esm/whoCan/principalScope.js.map +1 -0
  339. package/dist/esm/whoCan/requestAnalysis.d.ts +73 -0
  340. package/dist/esm/whoCan/requestAnalysis.d.ts.map +1 -0
  341. package/dist/esm/whoCan/requestAnalysis.js +83 -0
  342. package/dist/esm/whoCan/requestAnalysis.js.map +1 -0
  343. package/dist/esm/whoCan/untrustingActions.d.ts +7 -0
  344. package/dist/esm/whoCan/untrustingActions.d.ts.map +1 -0
  345. package/dist/esm/whoCan/untrustingActions.js +27 -0
  346. package/dist/esm/whoCan/untrustingActions.js.map +1 -0
  347. package/dist/esm/whoCan/whoCan.d.ts +295 -0
  348. package/dist/esm/whoCan/whoCan.d.ts.map +1 -0
  349. package/dist/esm/whoCan/whoCan.js +571 -0
  350. package/dist/esm/whoCan/whoCan.js.map +1 -0
  351. package/dist/esm/whoCan/workerBootstrapPlugin.d.ts +17 -0
  352. package/dist/esm/whoCan/workerBootstrapPlugin.d.ts.map +1 -0
  353. package/dist/esm/whoCan/workerBootstrapPlugin.js +2 -0
  354. package/dist/esm/whoCan/workerBootstrapPlugin.js.map +1 -0
  355. package/dist/esm/workers/ArrayStreamingWorkQueue.d.ts +15 -0
  356. package/dist/esm/workers/ArrayStreamingWorkQueue.d.ts.map +1 -0
  357. package/dist/esm/workers/ArrayStreamingWorkQueue.js +31 -0
  358. package/dist/esm/workers/ArrayStreamingWorkQueue.js.map +1 -0
  359. package/dist/esm/workers/JobRunner.d.ts +47 -0
  360. package/dist/esm/workers/JobRunner.d.ts.map +1 -0
  361. package/dist/esm/workers/JobRunner.js +94 -0
  362. package/dist/esm/workers/JobRunner.js.map +1 -0
  363. package/dist/esm/workers/RingQueue.d.ts +14 -0
  364. package/dist/esm/workers/RingQueue.d.ts.map +1 -0
  365. package/dist/esm/workers/RingQueue.js +36 -0
  366. package/dist/esm/workers/RingQueue.js.map +1 -0
  367. package/dist/esm/workers/SharedArrayBufferMainCache.d.ts +10 -0
  368. package/dist/esm/workers/SharedArrayBufferMainCache.d.ts.map +1 -0
  369. package/dist/esm/workers/SharedArrayBufferMainCache.js +34 -0
  370. package/dist/esm/workers/SharedArrayBufferMainCache.js.map +1 -0
  371. package/dist/esm/workers/SharedArrayBufferWorkerCache.d.ts +10 -0
  372. package/dist/esm/workers/SharedArrayBufferWorkerCache.d.ts.map +1 -0
  373. package/dist/esm/workers/SharedArrayBufferWorkerCache.js +46 -0
  374. package/dist/esm/workers/SharedArrayBufferWorkerCache.js.map +1 -0
  375. package/dist/esm/workers/StreamingWorkQueue.d.ts +18 -0
  376. package/dist/esm/workers/StreamingWorkQueue.d.ts.map +1 -0
  377. package/dist/esm/workers/StreamingWorkQueue.js +61 -0
  378. package/dist/esm/workers/StreamingWorkQueue.js.map +1 -0
  379. package/dist/esm/workers/buffers.d.ts +4 -0
  380. package/dist/esm/workers/buffers.d.ts.map +1 -0
  381. package/dist/esm/workers/buffers.js +21 -0
  382. package/dist/esm/workers/buffers.js.map +1 -0
  383. package/package.json +132 -0
@@ -0,0 +1 @@
1
+ {"version":3,"file":"WhoCanProcessor.js","sourceRoot":"","sources":["../../../src/whoCan/WhoCanProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuB,MAAM,0BAA0B,CAAA;AAC9D,OAAO,EAAwB,MAAM,yBAAyB,CAAA;AAC9D,OAAO,EAAkB,YAAY,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAClF,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAA;AACvC,OAAO,EAA4B,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAClF,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AACvD,OAAO,EAAE,uBAAuB,EAAE,4BAA4B,EAAE,MAAM,iBAAiB,CAAA;AACvF,OAAO,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAA;AACrC,OAAO,EAAuB,MAAM,oBAAoB,CAAA;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAC9D,OAAO,EAAE,0BAA0B,EAAE,MAAM,0CAA0C,CAAA;AACrF,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAA;AACrE,OAAO,EAAE,kCAAkC,EAAE,MAAM,6BAA6B,CAAA;AAChF,OAAO,EAAuB,MAAM,mBAAmB,CAAA;AACvD,OAAO,EAAE,2BAA2B,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AACxF,OAAO,EAA6B,MAAM,sBAAsB,CAAA;AAChE,OAAO,EAKL,gBAAgB,EAChB,oCAAoC,EACpC,qBAAqB,EACrB,iBAAiB,EAClB,MAAM,aAAa,CAAA;AACpB,OAAO,EACL,gBAAgB,EAChB,YAAY,EACZ,YAAY,EACZ,kBAAkB,EACnB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAA;AACzF,OAAO,EAAE,mDAAmD,EAAE,MAAM,wBAAwB,CAAA;AAC5F,OAAO,EAA8B,MAAM,4BAA4B,CAAA;AACvE,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAA;AA0PtC,iFAAiF;AACjF,UAAU;AACV,iFAAiF;AAEjF,IAAI,aAAa,GAAG,CAAC,CAAA;AAErB;;;;GAIG;AACH,SAAS,iBAAiB;IACxB,OAAO,OAAO,EAAE,aAAa,EAAE,CAAA;AACjC,CAAC;AAED;;;;;GAKG;AACH,SAAS,kBAAkB,CAAC,aAAiC;IAC3D,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,aAAa,IAAI,CAAC,EAAE,CAAC;QAC5D,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAA;IAClC,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC,CAAA;AACxC,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,eAAe;IA6B1B,YACE,OAAiB,EACjB,aAA+B,EAC/B,MAA6B,EAC7B,gBAAyC;QA7BnC,eAAU,GAAG,KAAK,CAAA;QAClB,gBAAW,GAAG,KAAK,CAAA;QAE3B,kBAAkB;QACV,oBAAe,GAAuB,EAAE,CAAA;QACxC,uBAAkB,GAAa,EAAE,CAAA;QACjC,kBAAa,GAAG,IAAI,GAAG,EAAwB,CAAA;QAC/C,yBAAoB,GAAG,KAAK,CAAA;QAC5B,aAAQ,GAAG,KAAK,CAAA;QAKxB,wBAAwB;QAChB,gBAAW,GAA8D,EAAE,CAAA;QAiBjF,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QACtB,IAAI,CAAC,aAAa,GAAG,aAAa,CAAA;QAClC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAA;IAC1C,CAAC;IAED;;;;;;OAMG;IACK,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,OAAiB;QACtD,wDAAwD;QACxD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAC3B,CAAC,MAAM,EAAE,EAAE,CACT,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACpC,MAAM,SAAS,GAAG,CAAC,GAAQ,EAAE,EAAE;gBAC7B,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBACzB,OAAO,EAAE,CAAA;oBACT,OAAO,EAAE,CAAA;gBACX,CAAC;qBAAM,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;oBACvC,OAAO,EAAE,CAAA;oBACT,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;gBAC1D,CAAC;YACH,CAAC,CAAA;YACD,MAAM,OAAO,GAAG,CAAC,GAAU,EAAE,EAAE;gBAC7B,OAAO,EAAE,CAAA;gBACT,MAAM,CAAC,IAAI,KAAK,CAAC,gCAAgC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;YAClE,CAAC,CAAA;YACD,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE;gBAC9B,OAAO,EAAE,CAAA;gBACT,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;oBACf,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,IAAI,iBAAiB,CAAC,CAAC,CAAA;gBACrE,CAAC;YACH,CAAC,CAAA;YACD,MAAM,OAAO,GAAG,GAAG,EAAE;gBACnB,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;gBAChC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;gBAC5B,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;YAC5B,CAAC,CAAA;YACD,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;YAC/B,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;YAC3B,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAC3B,CAAC,CAAC,CACL,CAAA;QAED,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QAC9B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,iEAAiE;YACjE,wEAAwE;YACxE,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAA;YAC3D,MAAM,GAAG,CAAA;QACX,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAA6B;QAC/C,MAAM,UAAU,GAAG,kBAAkB,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAA;QACnE,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,EAAE,oBAAoB,IAAI,EAAE,CAAA;QACtE,MAAM,qBAAqB,GAAG,MAAM,CAAC,MAAM,EAAE,qBAAqB,IAAI,EAAE,CAAA;QACxE,MAAM,UAAU,GAAG,mBAAmB,CAAC,oCAAoC,CAAC,CAAA;QAE5E,IAAI,CAAC,CAAC,UAAU,IAAI,UAAU,KAAK,CAAC,CAAC,IAAI,qBAAqB,IAAI,CAAC,EAAE,CAAC;YACpE,MAAM,IAAI,KAAK,CACb,mGAAmG,CACpG,CAAA;QACH,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,UAAU;YACzB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE;gBAC7C,OAAO,IAAI,MAAM,CAAC,UAAU,EAAE;oBAC5B,UAAU,EAAE;wBACV,cAAc,EAAE,MAAM,CAAC,cAAc;wBACrC,SAAS,EAAE,MAAM,CAAC,SAAS;wBAC3B,WAAW,EAAE,oBAAoB;wBACjC,cAAc,EAAE,MAAM,CAAC,cAAc;wBACrC,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;wBAC/C,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;wBAC/C,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;qBACpD;iBACF,CAAC,CAAA;YACJ,CAAC,CAAC,CAAA;QAEN,uEAAuE;QACvE,6EAA6E;QAC7E,uEAAuE;QACvE,4EAA4E;QAC5E,0CAA0C;QAC1C,MAAM,WAAW,GAAG,IAAI,0BAA0B,CAAC,OAAO,CAAC,CAAA;QAE3D,qEAAqE;QACrE,sEAAsE;QACtE,+DAA+D;QAC/D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,eAAe,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAA;QAClD,CAAC;QAED,MAAM,aAAa,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,SAAS,EAAE;YACpF,aAAa,EAAE,WAAW;YAC1B,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;SAChD,CAAC,CAAA;QAEF,MAAM,sBAAsB,GAC1B,MAAM,CAAC,MAAM,EAAE,sBAAsB,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC,CAAC,CAAA;QAExF,MAAM,gBAAgB,GAAG,IAAI,iBAAiB,CAC5C,sBAAsB,EACtB,OAAO,EACP,KAAK,IAAI,EAAE,GAAE,CAAC,CACf,CAAA;QAED,MAAM,SAAS,GAAG,IAAI,eAAe,CAAC,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAA;QACvF,SAAS,CAAC,8BAA8B,EAAE,CAAA;QAE1C,gEAAgE;QAChE,oEAAoE;QACpE,qEAAqE;QACrE,YAAY;QACZ,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;QACvC,CAAC;QAED,SAAS,CAAC,sBAAsB,EAAE,CAAA;QAClC,OAAO,SAAS,CAAA;IAClB,CAAC;IAED;;;;;;;;;;OAUG;IACH,aAAa,CAAC,OAA+B;QAC3C,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;QACvD,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAA;QACjF,CAAC;QAED,MAAM,SAAS,GAAG,iBAAiB,EAAE,CAAA;QACrC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAA;QACjD,IAAI,CAAC,iBAAiB,EAAE,CAAA;QACxB,OAAO,SAAS,CAAA;IAClB,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,WAAW;QACf,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;QACvD,CAAC;QAED,sCAAsC;QACtC,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YAClB,OAAM;QACR,CAAC;QAED,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAA;QAEpB,IAAI,CAAC;YACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC1C,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAA;YAC5C,CAAC,CAAC,CAAA;QACJ,CAAC;gBAAS,CAAC;YACT,6DAA6D;YAC7D,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAClC,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAA;YACvB,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,QAAQ;QACZ,qEAAqE;QACrE,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC,eAAe,CAAA;QAC7B,CAAC;QAED,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,EAAE,CAAA;QAC7C,OAAO,IAAI,CAAC,eAAe,CAAA;IAC7B,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,eAAe;QAC3B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAA;QAEtB,yDAAyD;QACzD,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvC,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,KAAK,EAAG,CAAA;YAC/C,MAAM,KAAK,GAAuB;gBAChC,MAAM,EAAE,UAAU;gBAClB,SAAS,EAAE,SAAS,CAAC,SAAS;gBAC9B,OAAO,EAAE,SAAS,CAAC,OAAO;gBAC1B,KAAK,EAAE,IAAI,KAAK,CAAC,iEAAiE,CAAC;aACpF,CAAA;YACD,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAA;YAC3C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,CAAC,uBAAuB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;YAChD,CAAC;QACH,CAAC;QAED,kFAAkF;QAClF,IAAI,IAAI,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAClC,IAAI,IAAI,CAAC,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACzC,OAAO,EAAE,CAAA;gBACX,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;gBAC7D,CAAC;YACH,CAAC,CAAC,CAAA;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,OAAM;QACR,CAAC;QAED,2BAA2B;QAC3B,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC1B,MAAM,IAAI,CAAC,gBAAgB,CAAC,aAAa,EAAE,CAAA;YAC3C,IAAI,CAAC,gBAAgB,GAAG,SAAS,CAAA;QACnC,CAAC;QAED,+BAA+B;QAC/B,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YACjD,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBACnC,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE;oBAC3B,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;wBAC5B,MAAM,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAA;oBAC1C,CAAC;gBACH,CAAC,CAAC,CAAA;gBACF,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;oBACtB,MAAM;yBACH,SAAS,EAAE;yBACX,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;yBACrB,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAA;gBAC3B,CAAC,CAAC,CAAA;gBACF,MAAM,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAA;YAC5C,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QAEF,MAAM,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;QACjC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAA;IACzB,CAAC;IAED,6EAA6E;IAC7E,4BAA4B;IAC5B,6EAA6E;IAE7E;;;;;OAKG;IACK,8BAA8B;QACpC,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAQ,EAAE,EAAE;gBAChC,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;YACvC,CAAC,CAAC,CAAA;YACF,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACzB,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;oBACrB,IAAI,CAAC,mBAAmB,CAAC,IAAI,KAAK,CAAC,iBAAiB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;gBACrE,CAAC;YACH,CAAC,CAAC,CAAA;YACF,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;gBACzB,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;oBACnC,IAAI,CAAC,mBAAmB,CAAC,IAAI,KAAK,CAAC,wCAAwC,IAAI,EAAE,CAAC,CAAC,CAAA;gBACrF,CAAC;YACH,CAAC,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACK,mBAAmB,CAAC,GAAQ,EAAE,MAAc;QAClD,IAAI,GAAG,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAA;YACvC,MAAM,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;QACpE,CAAC;aAAM,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACjC,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAA;QAC1F,CAAC;aAAM,IAAI,GAAG,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;YAC3C,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,CAAA;QACpF,CAAC;aAAM,IAAI,GAAG,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;YAC5C,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,UAAU,CAAC,CAAA;QAC7D,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,sBAAsB;QAC5B,MAAM,qBAAqB,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,qBAAqB,IAAI,EAAE,CAAA;QAC7E,IAAI,qBAAqB,IAAI,CAAC,EAAE,CAAC;YAC/B,OAAM;QACR,CAAC;QAED,MAAM,EAAE,mBAAmB,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC,MAAM,CAAA;QAE3D,IAAI,CAAC,gBAAgB,GAAG,kCAAkC,CACxD,GAAG,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAChC,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,SAAS,EAAE,MAAM,CAAC,EACrE,CAAC,SAAS,EAAE,aAAa,EAAE,EAAE;YAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;YAC/C,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBAC5B,OAAO,KAAK,CAAC,mBAAmB,EAAE,CAAC,aAAa,CAAC,IAAI,KAAK,CAAA;YAC5D,CAAC;YACD,OAAO,KAAK,CAAA;QACd,CAAC,EACD,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,uBAAuB,CAAC,SAAS,EAAE,MAAM,CAAC,EACtE,IAAI,CAAC,aAAa,EAClB,cAAc,EACd,mBAAmB,IAAI,KAAK,EAC5B,qBAAqB,CACtB,CAAA;IACH,CAAC;IAED,6EAA6E;IAC7E,iCAAiC;IACjC,6EAA6E;IAE7E;;;;;;;OAOG;IACK,mBAAmB;QACzB,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAChD,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;YAC/C,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO;gBAAE,SAAQ;YAErC,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,CAAA;YACtC,IAAI,IAAI,EAAE,CAAC;gBACT,OAAO,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,CAAA;YAC/B,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAA;IAClB,CAAC;IAED;;;OAGG;IACK,yBAAyB;QAC/B,IAAI,CAAC,gBAAgB,EAAE,mBAAmB,EAAE,CAAA;QAC5C,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,MAAM,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAA;QAC/C,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,iBAAiB;IACjB,6EAA6E;IAE7E;;;;OAIG;IACK,iBAAiB;QACvB,IAAI,IAAI,CAAC,oBAAoB;YAAE,OAAM;QACrC,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAA;QAEhC,0DAA0D;QAC1D,KAAK,IAAI,CAAC,gBAAgB,EAAE,CAAA;IAC9B,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,gBAAgB;QAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,qBAAqB,IAAI,EAAE,CAAA;QAEjE,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,kBAAkB,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;gBACrF,IAAI,IAAI,CAAC,UAAU;oBAAE,MAAK;gBAE1B,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,KAAK,EAAG,CAAA;gBAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAA;gBAEhD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;gBAClD,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;gBAEjD,oDAAoD;gBACpD,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAA;YACpC,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,oBAAoB,GAAG,KAAK,CAAA;QACnC,CAAC;QAED,2CAA2C;QAC3C,IAAI,CAAC,SAAS,EAAE,CAAA;IAClB,CAAC;IAED;;;;;OAKG;IACK,kBAAkB,CAAC,SAA2B;QACpD,OAAO;YACL,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,mBAAmB,EAAE,KAAK;YAC1B,SAAS,EAAE,IAAI,kBAAkB,EAAkB;YACnD,OAAO,EAAE,CAAC;YACV,SAAS,EAAE,CAAC;YACZ,sBAAsB,EAAE,CAAC;YACzB,OAAO,EAAE,EAAE;YACX,kBAAkB,EAAE,EAAE;YACtB,gBAAgB,EAAE,EAAE;YACpB,qBAAqB,EAAE,EAAE;YACzB,2BAA2B,EAAE,EAAE;YAC/B,kBAAkB,EAAE,KAAK;YACzB,WAAW,EAAE,EAAE;YACf,eAAe,EAAE,CAAC;YAClB,mBAAmB,EAAE,SAAS,CAAC,OAAO,CAAC,mBAAmB;YAC1D,wBAAwB,EAAE,CAAC;YAC3B,OAAO,EAAE,KAAK;YACd,eAAe,EAAE,KAAK;YACtB,gBAAgB,EAAE,EAAE;SACrB,CAAA;IACH,CAAC;IAED,6EAA6E;IAC7E,cAAc;IACd,6EAA6E;IAE7E;;;;;;OAMG;IACK,sBAAsB,CAAC,KAAmB;QAChD,KAAK,CAAC,sBAAsB,EAAE,CAAA;QAE9B,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;YAC5B,UAAU,EAAE,EAAE;YACd,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAA;gBAC1C,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;gBACvF,CAAC;wBAAS,CAAC;oBACT,KAAK,CAAC,sBAAsB,EAAE,CAAA;oBAC9B,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAA;gBACpC,CAAC;YACH,CAAC;SACF,CAAC,CAAA;IACJ,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,sBAAsB,CAAC,KAAmB;QACtD,IAAI,KAAK,CAAC,OAAO;YAAE,OAAM;QAEzB,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAA;QACzB,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAA;QAC5B,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,CAAA;QAExC,IAAI,CAAC,OAAO,CAAC,eAAe,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAA;QACxF,CAAC;QAED,MAAM,eAAe,GACnB,OAAO,CAAC,eAAe,IAAI,CAAC,MAAM,uBAAuB,CAAC,aAAa,EAAE,QAAS,CAAC,CAAC,CAAA;QAEtF,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CACb,+CAA+C,QAAQ,0DAA0D,CAClH,CAAA;QACH,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC;YACrC,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B,CAAC,CAAA;QACF,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAA;QACzE,CAAC;QAED,MAAM,iBAAiB,GAAG,MAAM,mDAAmD,EAAE,CAAA;QAErF,IAAI,cAAc,GAAkD,SAAS,CAAA;QAC7E,IAAI,QAAQ,EAAE,CAAC;YACb,cAAc,GAAG,MAAM,4BAA4B,CAAC,aAAa,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAA;YAC7F,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAA;YACrC,IACE,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;gBAC5D,WAAW,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC/D,CAAC,cAAc,EACf,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,sCAAsC,QAAQ,iDAAiD,CAChG,CAAA;YACH,CAAC;YAED,IAAI,cAAc,IAAI,cAAc,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvD,GAAG,CAAC,KAAK,CAAC;oBACR,qCAAqC,EAAE,IAAI;oBAC3C,MAAM,EAAE,cAAc,CAAC,MAAM;oBAC7B,QAAQ,EAAE,QAAQ;iBACnB,CAAC,CAAA;gBACF,MAAM,IAAI,KAAK,CACb,uBAAuB,QAAQ,2DAA2D,CAC3F,CAAA;YACH,CAAC;QACH,CAAC;QAED,MAAM,eAAe,GAAG,MAAM,oCAAoC,CAChE,cAAc,EACd,eAAe,EACf,aAAa,CACd,CAAA;QAED,MAAM,kBAAkB,GAAG,uBAAuB,CAAC,cAAc,CAAC,CAAA;QAClE,MAAM,cAAc,GAAG,MAAM,qBAAqB,CAAC,aAAa,EAAE,eAAe,CAAC,CAAA;QAElF,8CAA8C;QAC9C,KAAK,CAAC,gBAAgB,GAAG,cAAc,CAAC,gBAAgB,CAAA;QACxD,KAAK,CAAC,qBAAqB,GAAG,cAAc,CAAC,qBAAqB,CAAA;QAClE,KAAK,CAAC,2BAA2B,GAAG,cAAc,CAAC,2BAA2B,CAAA;QAC9E,KAAK,CAAC,kBAAkB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,WAAW,CAAA;QAEvF,6EAA6E;QAC7E,gFAAgF;QAChF,8EAA8E;QAC9E,MAAM,YAAY,GAAG,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC;YACpE,CAAC,CAAC,cAAc,CAAC,QAAQ;YACzB,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAA;QAEjD,IAAI,iBAAiB,GAAG,YAAY,CAAA;QACpC,IAAI,mBAAmB,GAAG,eAAe,CAAC,kBAAkB,CAAA;QAC5D,IAAI,4BAA4B,GAAG,IAAI,CAAA;QAEvC,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,aAAa,EAAE,OAAO,CAAC,cAAc,CAAC,CAAA;YACnF,MAAM,YAAY,GAAG,2BAA2B,CAC9C,YAAY,EACZ,eAAe,CAAC,kBAAkB,EAClC,eAAe,CAAC,WAAW,EAC3B,QAAQ,CAAC,QAAQ,EACjB,QAAQ,CAAC,UAAU,CACpB,CAAA;YACD,iBAAiB,GAAG,YAAY,CAAC,QAAQ,CAAA;YACzC,mBAAmB,GAAG,YAAY,CAAC,UAAU,CAAA;YAC7C,4BAA4B,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;QACvE,CAAC;QAED,0EAA0E;QAC1E,6EAA6E;QAC7E,0EAA0E;QAC1E,6CAA6C;QAC7C,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,mBAAmB,CAAC,CAAA;QAEzD,uEAAuE;QACvE,MAAM,oBAAoB,GACxB,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,IAAI,CAAC,MAAM,aAAa,CAAC,oBAAoB,EAAE,CAAC,CAAA;QAEnF,IAAI,oBAAoB,EAAE,CAAC;YACzB,+DAA+D;YAC/D,KAAK,CAAC,sBAAsB,EAAE,CAAA;YAC9B,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;gBAC5B,UAAU,EAAE,EAAE;gBACd,OAAO,EAAE,KAAK,IAAI,EAAE;oBAClB,IAAI,CAAC;wBACH,IAAI,KAAK,CAAC,OAAO;4BAAE,OAAM;wBAEzB,gEAAgE;wBAChE,yDAAyD;wBACzD,MAAM,8BAA8B,GAClC,4BAA4B,IAAI,CAAC,eAAe,CAAC,8BAA8B;4BAC7E,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,eAAe,CAAC;4BACxD,CAAC,CAAC,iBAAiB,CAAA;wBAEvB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;4BAC7B,MAAM,YAAY,GAAG,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAA;4BAChE,MAAM,cAAc,GAClB,4BAA4B,IAAI,eAAe,CAAC,2BAA2B;gCACzE,CAAC,CAAC,eAAe;gCACjB,CAAC,CAAC,SAAS,CAAA;4BAEf,MAAM,uBAAuB,GAAG,YAAY;gCAC1C,CAAC,CAAC,8BAA8B;gCAChC,CAAC,CAAC,iBAAiB,CAAA;4BAErB,MAAM,iBAAiB,GAAG,MAAM,aAAa,CAAC,8BAA8B,CAC1E,cAAc,EACd,uBAAuB,EACvB,MAAM,CACP,CAAA;4BACD,KAAK,MAAM,SAAS,IAAI,iBAAiB,IAAI,EAAE,EAAE,CAAC;gCAChD,IAAI,oBAAoB,CAAC,GAAG,CAAC,SAAS,CAAC;oCAAE,SAAQ;gCACjD,IACE,kBAAkB;oCAClB,CAAC,kBAAkB,CAAC,SAAS,CAAC;oCAC9B,CAAC,sBAAsB,CAAC,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,kBAAkB,CAAC,EAC/E,CAAC;oCACD,SAAQ;gCACV,CAAC;gCACD,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC;oCACtB,QAAQ;oCACR,MAAM;oCACN,SAAS;oCACT,eAAe;oCACf,iBAAiB,EAAE,KAAK,CAAC,OAAO,CAAC,iBAAiB;oCAClD,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB;iCAChD,CAAC,CAAA;gCACF,KAAK,CAAC,OAAO,EAAE,CAAA;4BACjB,CAAC;wBACH,CAAC;wBAED,IAAI,CAAC,yBAAyB,EAAE,CAAA;oBAClC,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;oBACvF,CAAC;4BAAS,CAAC;wBACT,KAAK,CAAC,sBAAsB,EAAE,CAAA;wBAC9B,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAA;oBACpC,CAAC;gBACH,CAAC;aACF,CAAC,CAAA;QACJ,CAAC;aAAM,CAAC;YACN,4DAA4D;YAC5D,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;gBACxC,KAAK,CAAC,sBAAsB,EAAE,CAAA;gBAC9B,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;oBAC5B,UAAU,EAAE,EAAE;oBACd,OAAO,EAAE,KAAK,IAAI,EAAE;wBAClB,IAAI,CAAC;4BACH,IAAI,KAAK,CAAC,OAAO;gCAAE,OAAM;4BAEzB,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAA;4BACzE,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gCACnC,IAAI,oBAAoB,CAAC,GAAG,CAAC,SAAS,CAAC;oCAAE,SAAQ;gCACjD,MAAM,UAAU,GAAG,CAAC,kBAAkB,IAAI,kBAAkB,CAAC,SAAS,CAAC,CAAA;gCACvE,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;oCAC7B,IACE,CAAC,UAAU;wCACX,CAAC,sBAAsB,CAAC,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,kBAAmB,CAAC,EAChF,CAAC;wCACD,SAAQ;oCACV,CAAC;oCACD,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC;wCACtB,QAAQ;wCACR,MAAM;wCACN,SAAS;wCACT,eAAe;wCACf,iBAAiB,EAAE,KAAK,CAAC,OAAO,CAAC,iBAAiB;wCAClD,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB;qCAChD,CAAC,CAAA;oCACF,KAAK,CAAC,OAAO,EAAE,CAAA;gCACjB,CAAC;4BACH,CAAC;4BAED,IAAI,CAAC,yBAAyB,EAAE,CAAA;wBAClC,CAAC;wBAAC,OAAO,GAAG,EAAE,CAAC;4BACb,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;wBACvF,CAAC;gCAAS,CAAC;4BACT,KAAK,CAAC,sBAAsB,EAAE,CAAA;4BAC9B,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAA;wBACpC,CAAC;oBACH,CAAC;iBACF,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;QAED,uEAAuE;QACvE,yEAAyE;QACzE,4EAA4E;QAC5E,kDAAkD;QAClD,KAAK,MAAM,SAAS,IAAI,oBAAoB,EAAE,CAAC;YAC7C,KAAK,CAAC,sBAAsB,EAAE,CAAA;YAC9B,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;gBAC5B,UAAU,EAAE,EAAE;gBACd,OAAO,EAAE,KAAK,IAAI,EAAE;oBAClB,IAAI,CAAC;wBACH,IAAI,KAAK,CAAC,OAAO;4BAAE,OAAM;wBAEzB,IAAI,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC;4BAClC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gCAC7B,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC;oCACtB,QAAQ;oCACR,MAAM;oCACN,SAAS;oCACT,eAAe;oCACf,iBAAiB,EAAE,KAAK,CAAC,OAAO,CAAC,iBAAiB;oCAClD,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB;iCAChD,CAAC,CAAA;gCACF,KAAK,CAAC,OAAO,EAAE,CAAA;4BACjB,CAAC;wBACH,CAAC;6BAAM,IACL,YAAY,CAAC,SAAS,CAAC;4BACvB,YAAY,CAAC,SAAS,CAAC;4BACvB,gBAAgB,CAAC,SAAS,CAAC,EAC3B,CAAC;4BACD,MAAM,iBAAiB,GAAG,MAAM,aAAa,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAA;4BAC5E,IAAI,CAAC,iBAAiB,EAAE,CAAC;gCACvB,KAAK,CAAC,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;4BAC1C,CAAC;iCAAM,CAAC;gCACN,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;oCAC7B,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC;wCACtB,QAAQ;wCACR,MAAM;wCACN,SAAS;wCACT,eAAe,EAAE,iBAAiB;wCAClC,eAAe;wCACf,iBAAiB,EAAE,KAAK,CAAC,OAAO,CAAC,iBAAiB;wCAClD,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB;qCAChD,CAAC,CAAA;oCACF,KAAK,CAAC,OAAO,EAAE,CAAA;gCACjB,CAAC;4BACH,CAAC;wBACH,CAAC;6BAAM,CAAC;4BACN,KAAK,CAAC,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;wBAC1C,CAAC;wBAED,IAAI,CAAC,yBAAyB,EAAE,CAAA;oBAClC,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;oBACvF,CAAC;4BAAS,CAAC;wBACT,KAAK,CAAC,sBAAsB,EAAE,CAAA;wBAC9B,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAA;oBACpC,CAAC;gBACH,CAAC;aACF,CAAC,CAAA;QACJ,CAAC;QAED,gFAAgF;QAChF,sFAAsF;QACtF,KAAK,CAAC,mBAAmB,GAAG,IAAI,CAAA;QAEhC,mDAAmD;QACnD,IAAI,CAAC,yBAAyB,EAAE,CAAA;IAClC,CAAC;IAED,6EAA6E;IAC7E,6BAA6B;IAC7B,6EAA6E;IAE7E;;;;;;OAMG;IACK,sBAAsB,CAC5B,SAAiB,EACjB,MAAqE,EACrE,6BAAsC,KAAK;QAE3C,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QAC/C,IAAI,CAAC,KAAK;YAAE,OAAM;QAElB,KAAK,CAAC,SAAS,EAAE,CAAA;QAEjB,IAAI,0BAA0B,EAAE,CAAC;YAC/B,KAAK,CAAC,wBAAwB,EAAE,CAAA;QAClC,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClB,oEAAoE;YACpE,yDAAyD;YACzD,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAA;YAClC,OAAM;QACR,CAAC;QAED,KAAK,CAAC,eAAe,EAAE,CAAA;QAEvB,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAClD,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAClC,CAAC;aAAM,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YACxC,GAAG,CAAC,KAAK,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;YAC/D,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACrC,CAAC;QAED,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAA;IACpC,CAAC;IAED;;;;;;;;OAQG;IACK,sBAAsB,CAC5B,SAAiB,EACjB,OAAe,EACf,aAAmC,EACnC,MAAc;QAEd,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QAC/C,MAAM,aAAa,GACjB,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,EAAE,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;QAEzF,IAAI,CAAC,aAAa,IAAI,KAAK,EAAE,CAAC;YAC5B,mEAAmE;YACnE,KAAK,CAAC,wBAAwB,EAAE,CAAA;YAChC,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAA;QACpC,CAAC;QAED,MAAM,CAAC,WAAW,CAAC;YACjB,IAAI,EAAE,wBAAwB;YAC9B,OAAO;YACP,aAAa;SACd,CAAC,CAAA;IACJ,CAAC;IAED;;;;;;OAMG;IACK,uBAAuB,CAAC,SAAiB,EAAE,UAA4B;QAC7E,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QAC/C,IAAI,CAAC,KAAK;YAAE,OAAM;QAElB,IAAI,KAAK,CAAC,wBAAwB,GAAG,CAAC,EAAE,CAAC;YACvC,KAAK,CAAC,wBAAwB,EAAE,CAAA;QAClC,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACnB,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QACpC,CAAC;QAED,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAA;IACpC,CAAC;IAED,6EAA6E;IAC7E,oCAAoC;IACpC,6EAA6E;IAE7E;;;;;OAKG;IACK,sBAAsB,CAAC,KAAmB;QAChD,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClB,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAA;YAC7B,OAAM;QACR,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,mBAAmB;YAAE,OAAM;QACtC,IAAI,KAAK,CAAC,sBAAsB,GAAG,CAAC;YAAE,OAAM;QAC5C,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,SAAS;YAAE,OAAM;QAC7C,IAAI,KAAK,CAAC,wBAAwB,GAAG,CAAC;YAAE,OAAM;QAE9C,oCAAoC;QACpC,IAAI,KAAK,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtC,IAAI,CAAC,oBAAoB,CACvB,KAAK,EACL,IAAI,KAAK,CACP,kBAAkB,KAAK,CAAC,gBAAgB,CAAC,MAAM,wCAAwC,CACxF,CACF,CAAA;QACH,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAA;QACpC,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACK,sBAAsB,CAAC,KAAmB;QAChD,IAAI,KAAK,CAAC,OAAO;YAAE,OAAM;QACzB,KAAK,CAAC,OAAO,GAAG,IAAI,CAAA;QAEpB,MAAM,MAAM,GAAmB;YAC7B,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;YAClD,2BAA2B,EAAE,KAAK,CAAC,2BAA2B;YAC9D,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,WAAW,EAAE,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;SACvE,CAAA;QAED,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACvB,iBAAiB,CAAC,MAAM,CAAC,CAAA;QAC3B,CAAC;QAED,KAAK,IAAI,CAAC,+BAA+B,CAAC,KAAK,EAAE;YAC/C,MAAM,EAAE,WAAW;YACnB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,MAAM;SACP,CAAC,CAAA;IACJ,CAAC;IAED;;;;;;;;OAQG;IACK,oBAAoB,CAAC,KAAmB,EAAE,KAAY;QAC5D,IAAI,KAAK,CAAC,OAAO;YAAE,OAAM;QACzB,KAAK,CAAC,OAAO,GAAG,IAAI,CAAA;QAEpB,4EAA4E;QAC5E,4DAA4D;QAC5D,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,MAAM,IAAI,CAAC,qBAAqB,CAAC;gBAC/B,MAAM,EAAE,UAAU;gBAClB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,KAAK;aACN,CAAC,CAAA;YACF,KAAK,CAAC,eAAe,GAAG,IAAI,CAAA;YAC5B,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAA;QAC/B,CAAC,CAAC,EAAE,CAAA;IACN,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,qBAAqB,CAAC,KAAyB;QAC3D,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAA;QAC3C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,uBAAuB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;QAChD,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,+BAA+B,CAC3C,KAAmB,EACnB,KAAyB;QAEzB,MAAM,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAA;QACvC,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAA;IACnC,CAAC;IAED;;;;;;;OAOG;IACK,iBAAiB,CAAC,KAAmB;QAC3C,IAAI,CAAC,KAAK,CAAC,OAAO;YAAE,OAAM;QAC1B,IAAI,CAAC,KAAK,CAAC,eAAe;YAAE,OAAM;QAClC,IAAI,KAAK,CAAC,sBAAsB,GAAG,CAAC;YAAE,OAAM;QAC5C,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,SAAS;YAAE,OAAM;QAC7C,IAAI,KAAK,CAAC,wBAAwB,GAAG,CAAC;YAAE,OAAM;QAE9C,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAA;IACnC,CAAC;IAED;;;;;OAKG;IACK,qBAAqB,CAAC,KAAmB;QAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;QAC5D,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;YACf,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;QACxC,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;QAE1C,IAAI,CAAC,iBAAiB,EAAE,CAAA;QACxB,IAAI,CAAC,SAAS,EAAE,CAAA;IAClB,CAAC;IAED,6EAA6E;IAC7E,gBAAgB;IAChB,6EAA6E;IAE7E;;;;OAIG;IACK,MAAM;QACZ,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,kBAAkB,CAAC,MAAM,KAAK,CAAC,CAAA;IAClF,CAAC;IAED;;;OAGG;IACK,SAAS;QACf,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAAE,OAAM;QAC1B,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;YAAE,OAAM;QAEzC,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QAC1C,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;YAChC,CAAC;QACH,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,MAAM,CAAC,OAAO,EAAE,CAAA;YAClB,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACK,KAAK,CAAC,uBAAuB,CAAC,KAAyB,EAAE,GAAY;QAC3E,MAAM,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;QACjE,IAAI,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YACpC,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;YACrD,CAAC;YAAC,MAAM,CAAC;gBACP,uDAAuD;YACzD,CAAC;QACH,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,IAAI,CAAC,gFAAgF,EAAE;gBACzF,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,KAAK;aACN,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,mBAAmB,CAAC,KAAY;QACtC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAA;QACvB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAA;QACtB,IAAI,CAAC,UAAU,GAAG,KAAK,CAAA;QAEvB,gDAAgD;QAChD,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,MAAM,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QACpC,CAAC;QAED,uCAAuC;QACvC,KAAK,MAAM,SAAS,IAAI,CAAC,GAAG,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACrD,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;YAC/C,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBAC5B,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;YACzC,CAAC;QACH,CAAC;QAED,8BAA8B;QAC9B,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvC,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,KAAK,EAAG,CAAA;YAC/C,MAAM,KAAK,GAAuB;gBAChC,MAAM,EAAE,UAAU;gBAClB,SAAS,EAAE,SAAS,CAAC,SAAS;gBAC9B,OAAO,EAAE,SAAS,CAAC,OAAO;gBAC1B,KAAK;aACN,CAAA;YACD,KAAK,IAAI,CAAC,MAAM;iBACb,gBAAgB,CAAC,KAAK,CAAC;iBACvB,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,uBAAuB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;iBACxD,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QACpB,CAAC;QAED,0BAA0B;QAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QAC1C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACtB,CAAC;IACH,CAAC;CACF"}
@@ -0,0 +1,87 @@
1
+ import { type EvaluationResult, type RequestAnalysis } from '@actsecurity/iam-simulate';
2
+ import type { Job } from '@actsecurity/job';
3
+ import { IamCollectClient } from '../collect/client.js';
4
+ import type { S3AbacOverride } from '../utils/s3Abac.js';
5
+ import type { WhoCanAllowed } from './whoCan.js';
6
+ export interface WhoCanWorkItem {
7
+ resource: string | undefined;
8
+ resourceAccount: string | undefined;
9
+ action: string;
10
+ principal: string;
11
+ resultPrincipal?: string | undefined;
12
+ strictContextKeys: string[] | undefined;
13
+ collectDenyDetails: boolean;
14
+ }
15
+ /**
16
+ * Execution result when the principal is allowed access.
17
+ */
18
+ export interface AllowedWhoCanExecutionResult {
19
+ type: 'allowed';
20
+ workItem: WhoCanWorkItem;
21
+ allowed: WhoCanAllowed;
22
+ }
23
+ /**
24
+ * Execution result when the principal is denied access, without detailed analysis.
25
+ */
26
+ export interface DeniedWhoCanExecutionResult {
27
+ type: 'denied';
28
+ workItem: WhoCanWorkItem;
29
+ }
30
+ /**
31
+ * Execution result when the principal is denied access for a single resource pattern,
32
+ * with detailed analysis included.
33
+ */
34
+ export interface DeniedSingleWhoCanExecutionResult {
35
+ type: 'denied_single';
36
+ workItem: WhoCanWorkItem;
37
+ analysis: RequestAnalysis;
38
+ }
39
+ /**
40
+ * Details about a denied resource pattern, including the analysis for why it was denied.
41
+ */
42
+ export interface WhoCanDenyResourceDetails {
43
+ /**
44
+ * The resource pattern that was tested.
45
+ */
46
+ pattern: string;
47
+ /**
48
+ * The type of resource for the pattern.
49
+ */
50
+ resourceType: string;
51
+ /**
52
+ * The analysis explaining why the request was denied.
53
+ */
54
+ analysis: RequestAnalysis;
55
+ }
56
+ /**
57
+ * Execution result when the principal is denied access for a wildcard resource,
58
+ * with detailed analysis for each denied pattern.
59
+ */
60
+ export interface DeniedWildcardWhoCanExecutionResult {
61
+ type: 'denied_wildcard';
62
+ workItem: WhoCanWorkItem;
63
+ overallResult: EvaluationResult;
64
+ deniedPatterns: WhoCanDenyResourceDetails[];
65
+ }
66
+ /**
67
+ * The result of executing a whoCan work item.
68
+ * Contains either the allowed result or the deny analysis (but not both).
69
+ */
70
+ export type WhoCanExecutionResult = AllowedWhoCanExecutionResult | DeniedWhoCanExecutionResult | DeniedSingleWhoCanExecutionResult | DeniedWildcardWhoCanExecutionResult;
71
+ /**
72
+ * Union type for denied execution results that include detailed analysis.
73
+ */
74
+ export type DeniedWhoCanExecutionResultWithDetails = DeniedSingleWhoCanExecutionResult | DeniedWildcardWhoCanExecutionResult;
75
+ /**
76
+ * The possible values for the `type` discriminator of a WhoCanExecutionResult.
77
+ */
78
+ export type WhoCanExecutionResultType = WhoCanExecutionResult['type'];
79
+ export declare function createJobForWhoCanWorkItem(workItem: WhoCanWorkItem, collectClient: IamCollectClient, whoCanOptions: WhoCanOptions): Job<WhoCanExecutionResult, Record<string, unknown>>;
80
+ export interface WhoCanOptions {
81
+ s3AbacOverride?: S3AbacOverride;
82
+ collectDenyDetails?: boolean;
83
+ collectGrantDetails?: boolean;
84
+ strictContextKeys?: string[];
85
+ }
86
+ export declare function executeWhoCan(workItem: WhoCanWorkItem, collectClient: IamCollectClient, whoCanOptions: WhoCanOptions): Promise<WhoCanExecutionResult>;
87
+ //# sourceMappingURL=WhoCanWorker.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"WhoCanWorker.d.ts","sourceRoot":"","sources":["../../../src/whoCan/WhoCanWorker.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,gBAAgB,EAGrB,KAAK,eAAe,EAErB,MAAM,2BAA2B,CAAA;AAClC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAA;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AAEvD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,KAAK,EAAE,aAAa,EAAgC,MAAM,aAAa,CAAA;AAG9E,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,eAAe,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;IACjB,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACpC,iBAAiB,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IACvC,kBAAkB,EAAE,OAAO,CAAA;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,IAAI,EAAE,SAAS,CAAA;IACf,QAAQ,EAAE,cAAc,CAAA;IACxB,OAAO,EAAE,aAAa,CAAA;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,QAAQ,CAAA;IACd,QAAQ,EAAE,cAAc,CAAA;CACzB;AAED;;;GAGG;AACH,MAAM,WAAW,iCAAiC;IAChD,IAAI,EAAE,eAAe,CAAA;IACrB,QAAQ,EAAE,cAAc,CAAA;IACxB,QAAQ,EAAE,eAAe,CAAA;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC;;OAEG;IACH,OAAO,EAAE,MAAM,CAAA;IACf;;OAEG;IACH,YAAY,EAAE,MAAM,CAAA;IACpB;;OAEG;IACH,QAAQ,EAAE,eAAe,CAAA;CAC1B;AAED;;;GAGG;AACH,MAAM,WAAW,mCAAmC;IAClD,IAAI,EAAE,iBAAiB,CAAA;IACvB,QAAQ,EAAE,cAAc,CAAA;IACxB,aAAa,EAAE,gBAAgB,CAAA;IAC/B,cAAc,EAAE,yBAAyB,EAAE,CAAA;CAC5C;AAED;;;GAGG;AACH,MAAM,MAAM,qBAAqB,GAC7B,4BAA4B,GAC5B,2BAA2B,GAC3B,iCAAiC,GACjC,mCAAmC,CAAA;AAEvC;;GAEG;AACH,MAAM,MAAM,sCAAsC,GAChD,iCAAiC,GAAG,mCAAmC,CAAA;AAEzE;;GAEG;AACH,MAAM,MAAM,yBAAyB,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAA;AAErE,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,cAAc,EACxB,aAAa,EAAE,gBAAgB,EAC/B,aAAa,EAAE,aAAa,GAC3B,GAAG,CAAC,qBAAqB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAOrD;AAED,MAAM,WAAW,aAAa;IAC5B,cAAc,CAAC,EAAE,cAAc,CAAA;IAC/B,kBAAkB,CAAC,EAAE,OAAO,CAAA;IAC5B,mBAAmB,CAAC,EAAE,OAAO,CAAA;IAC7B,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;CAC7B;AAED,wBAAsB,aAAa,CACjC,QAAQ,EAAE,cAAc,EACxB,aAAa,EAAE,gBAAgB,EAC/B,aAAa,EAAE,aAAa,GAC3B,OAAO,CAAC,qBAAqB,CAAC,CAqFhC"}
@@ -0,0 +1,198 @@
1
+ import { iamActionDetails } from '@actsecurity/iam-data';
2
+ import { getGrantReasons } from '@actsecurity/iam-simulate';
3
+ import { IamCollectClient } from '../collect/client.js';
4
+ import { simulateRequest } from '../simulate/simulate.js';
5
+ import { log } from '@actsecurity/log';
6
+ export function createJobForWhoCanWorkItem(workItem, collectClient, whoCanOptions) {
7
+ return {
8
+ properties: {},
9
+ execute: async (context) => {
10
+ return executeWhoCan(workItem, collectClient, whoCanOptions);
11
+ }
12
+ };
13
+ }
14
+ export async function executeWhoCan(workItem, collectClient, whoCanOptions) {
15
+ const { principal, resource, resourceAccount, action } = workItem;
16
+ const [service, serviceAction] = action.split(':');
17
+ const discoveryResult = await simulateRequest({
18
+ principal,
19
+ resourceArn: resource,
20
+ resourceAccount: resourceAccount,
21
+ action,
22
+ customContextKeys: {},
23
+ simulationMode: 'Discovery',
24
+ s3AbacOverride: whoCanOptions.s3AbacOverride,
25
+ additionalStrictContextKeys: whoCanOptions.strictContextKeys
26
+ }, collectClient);
27
+ if (discoveryResult.result.resultType === 'error') {
28
+ log.error({
29
+ mode: 'discovery',
30
+ simulationErrors: true,
31
+ errors: discoveryResult.result.errors,
32
+ resource
33
+ });
34
+ throw new Error('Discovery simulation failed: ' + JSON.stringify(discoveryResult.result.errors));
35
+ }
36
+ const actionType = await getActionLevel(service, serviceAction);
37
+ if (discoveryResult?.result.overallResult === 'Allowed') {
38
+ const strictResult = await simulateRequest({
39
+ principal,
40
+ resourceArn: resource,
41
+ resourceAccount,
42
+ action,
43
+ customContextKeys: {},
44
+ simulationMode: 'Strict',
45
+ s3AbacOverride: whoCanOptions.s3AbacOverride,
46
+ additionalStrictContextKeys: whoCanOptions.strictContextKeys
47
+ }, collectClient);
48
+ if (strictResult.result.resultType === 'error') {
49
+ log.error({
50
+ mode: 'strict',
51
+ simulationErrors: true,
52
+ errors: strictResult.result.errors,
53
+ resource
54
+ });
55
+ throw new Error('Strict simulation failed: ' + JSON.stringify(strictResult.result.errors));
56
+ }
57
+ if (strictResult?.result.overallResult === 'Allowed') {
58
+ return mapSimulationResultToWhoCanExecutionResult(workItem, service, serviceAction, actionType, strictResult.result, !!whoCanOptions.collectDenyDetails, !!whoCanOptions.collectGrantDetails);
59
+ }
60
+ }
61
+ else {
62
+ return mapSimulationResultToWhoCanExecutionResult(workItem, service, serviceAction, actionType, discoveryResult.result, !!whoCanOptions.collectDenyDetails, !!whoCanOptions.collectGrantDetails);
63
+ }
64
+ return mapSimulationResultToWhoCanExecutionResult(workItem, service, serviceAction, actionType, discoveryResult.result, !!whoCanOptions.collectDenyDetails, !!whoCanOptions.collectGrantDetails);
65
+ }
66
+ /**
67
+ * Get the action level for a specific service action, will fail if the service or action does not exist.
68
+ *
69
+ * @param service the service the action belongs to
70
+ * @param action the action to get the level for
71
+ * @returns the access level of the action, e.g. 'Read', 'Write', 'List', 'Tagging', 'Permissions management', 'Other'
72
+ */
73
+ async function getActionLevel(service, action) {
74
+ const details = await iamActionDetails(service, action);
75
+ return details.accessLevel;
76
+ }
77
+ /**
78
+ * Return an allowed-condition expression only when it represents a meaningful
79
+ * access constraint for whoCan output.
80
+ *
81
+ * @param conditions the allowed-condition expression returned by iam-simulate
82
+ * @returns the expression when it is meaningful, otherwise undefined
83
+ */
84
+ function meaningfulAllowedConditions(conditions) {
85
+ if (!conditions || conditions.conditionType === 'always') {
86
+ return undefined;
87
+ }
88
+ return conditions;
89
+ }
90
+ /**
91
+ * Return ignored discovery-condition diagnostics only when at least one policy
92
+ * bucket contains ignored allow or deny condition entries.
93
+ *
94
+ * @param ignoredConditions the ignored-condition diagnostics returned by iam-simulate
95
+ * @returns the diagnostics when non-empty, otherwise undefined
96
+ */
97
+ function nonEmptyIgnoredConditions(ignoredConditions) {
98
+ if (!ignoredConditions) {
99
+ return undefined;
100
+ }
101
+ for (const conditionBucket of Object.values(ignoredConditions)) {
102
+ // IgnoredConditions buckets are shaped as optional allow/deny arrays per policy type.
103
+ if ((conditionBucket.allow?.length ?? 0) > 0 || (conditionBucket.deny?.length ?? 0) > 0) {
104
+ return ignoredConditions;
105
+ }
106
+ }
107
+ return undefined;
108
+ }
109
+ function mapSimulationResultToWhoCanExecutionResult(workItem, service, action, actionType, simulationResponse, collectDenyDetails, collectGrantDetails) {
110
+ const { principal, resultPrincipal } = workItem;
111
+ if (simulationResponse.overallResult === 'Allowed') {
112
+ // Build allowed result
113
+ const allowed = {
114
+ principal: resultPrincipal ?? principal,
115
+ service,
116
+ action,
117
+ level: actionType.toLowerCase()
118
+ };
119
+ if (simulationResponse.resultType === 'single') {
120
+ const analysis = simulationResponse.result.analysis;
121
+ const conditions = meaningfulAllowedConditions(analysis.conditions);
122
+ if (conditions) {
123
+ allowed.conditions = conditions;
124
+ }
125
+ const ignoredConditions = nonEmptyIgnoredConditions(analysis.ignoredConditions);
126
+ if (ignoredConditions) {
127
+ allowed.ignoredConditions = ignoredConditions;
128
+ }
129
+ if (analysis.ignoredRoleSessionName) {
130
+ allowed.dependsOnSessionName = true;
131
+ }
132
+ if (simulationResponse.result.resourceType) {
133
+ allowed.resourceType = simulationResponse.result.resourceType;
134
+ }
135
+ if (collectGrantDetails) {
136
+ allowed.details = getGrantReasons(analysis);
137
+ }
138
+ }
139
+ else {
140
+ // Wildcard result - collect allowed patterns with per-pattern grant details
141
+ const allowedPatterns = [];
142
+ for (const r of simulationResponse.results) {
143
+ if (r.analysis.result === 'Allowed') {
144
+ const conditions = meaningfulAllowedConditions(r.analysis.conditions);
145
+ const ignoredConditions = nonEmptyIgnoredConditions(r.analysis.ignoredConditions);
146
+ allowedPatterns.push({
147
+ pattern: r.resourcePattern,
148
+ resourceType: r.resourceType,
149
+ ...(conditions && { conditions }),
150
+ ...(ignoredConditions && { ignoredConditions }),
151
+ dependsOnSessionName: r.analysis.ignoredRoleSessionName ? true : undefined,
152
+ ...(collectGrantDetails && { details: getGrantReasons(r.analysis) })
153
+ });
154
+ }
155
+ }
156
+ if (allowedPatterns.length > 0) {
157
+ allowed.allowedPatterns = allowedPatterns;
158
+ }
159
+ }
160
+ return {
161
+ type: 'allowed',
162
+ workItem,
163
+ allowed
164
+ };
165
+ }
166
+ // Denied result
167
+ if (!collectDenyDetails) {
168
+ // If we don't need to collect deny details, we can return a simple denied result without analysis
169
+ return {
170
+ type: 'denied',
171
+ workItem
172
+ };
173
+ }
174
+ if (simulationResponse.resultType === 'single') {
175
+ return {
176
+ type: 'denied_single',
177
+ workItem,
178
+ analysis: simulationResponse.result.analysis
179
+ };
180
+ }
181
+ else {
182
+ // Wildcard denial - collect denied patterns
183
+ const deniedPatterns = simulationResponse.results
184
+ .filter((r) => r.analysis.result !== 'Allowed')
185
+ .map((r) => ({
186
+ pattern: r.resourcePattern,
187
+ resourceType: r.resourceType,
188
+ analysis: r.analysis
189
+ }));
190
+ return {
191
+ type: 'denied_wildcard',
192
+ overallResult: simulationResponse.overallResult,
193
+ workItem,
194
+ deniedPatterns
195
+ };
196
+ }
197
+ }
198
+ //# sourceMappingURL=WhoCanWorker.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"WhoCanWorker.js","sourceRoot":"","sources":["../../../src/whoCan/WhoCanWorker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AACxD,OAAO,EAGL,eAAe,EAIhB,MAAM,2BAA2B,CAAA;AAElC,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AAGzD,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAA;AAyFtC,MAAM,UAAU,0BAA0B,CACxC,QAAwB,EACxB,aAA+B,EAC/B,aAA4B;IAE5B,OAAO;QACL,UAAU,EAAE,EAAE;QACd,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACzB,OAAO,aAAa,CAAC,QAAQ,EAAE,aAAa,EAAE,aAAa,CAAC,CAAA;QAC9D,CAAC;KACF,CAAA;AACH,CAAC;AASD,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,QAAwB,EACxB,aAA+B,EAC/B,aAA4B;IAE5B,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAA;IACjE,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAClD,MAAM,eAAe,GAAG,MAAM,eAAe,CAC3C;QACE,SAAS;QACT,WAAW,EAAE,QAAQ;QACrB,eAAe,EAAE,eAAe;QAChC,MAAM;QACN,iBAAiB,EAAE,EAAE;QACrB,cAAc,EAAE,WAAW;QAC3B,cAAc,EAAE,aAAa,CAAC,cAAc;QAC5C,2BAA2B,EAAE,aAAa,CAAC,iBAAiB;KAC7D,EACD,aAAa,CACd,CAAA;IAED,IAAI,eAAe,CAAC,MAAM,CAAC,UAAU,KAAK,OAAO,EAAE,CAAC;QAClD,GAAG,CAAC,KAAK,CAAC;YACR,IAAI,EAAE,WAAW;YACjB,gBAAgB,EAAE,IAAI;YACtB,MAAM,EAAE,eAAe,CAAC,MAAM,CAAC,MAAM;YACrC,QAAQ;SACT,CAAC,CAAA;QACF,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;IAClG,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;IAC/D,IAAI,eAAe,EAAE,MAAM,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACxD,MAAM,YAAY,GAAG,MAAM,eAAe,CACxC;YACE,SAAS;YACT,WAAW,EAAE,QAAQ;YACrB,eAAe;YACf,MAAM;YACN,iBAAiB,EAAE,EAAE;YACrB,cAAc,EAAE,QAAQ;YACxB,cAAc,EAAE,aAAa,CAAC,cAAc;YAC5C,2BAA2B,EAAE,aAAa,CAAC,iBAAiB;SAC7D,EACD,aAAa,CACd,CAAA;QAED,IAAI,YAAY,CAAC,MAAM,CAAC,UAAU,KAAK,OAAO,EAAE,CAAC;YAC/C,GAAG,CAAC,KAAK,CAAC;gBACR,IAAI,EAAE,QAAQ;gBACd,gBAAgB,EAAE,IAAI;gBACtB,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM;gBAClC,QAAQ;aACT,CAAC,CAAA;YACF,MAAM,IAAI,KAAK,CAAC,4BAA4B,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;QAC5F,CAAC;QAED,IAAI,YAAY,EAAE,MAAM,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACrD,OAAO,0CAA0C,CAC/C,QAAQ,EACR,OAAO,EACP,aAAa,EACb,UAAU,EACV,YAAY,CAAC,MAAM,EACnB,CAAC,CAAC,aAAa,CAAC,kBAAkB,EAClC,CAAC,CAAC,aAAa,CAAC,mBAAmB,CACpC,CAAA;QACH,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,0CAA0C,CAC/C,QAAQ,EACR,OAAO,EACP,aAAa,EACb,UAAU,EACV,eAAe,CAAC,MAAM,EACtB,CAAC,CAAC,aAAa,CAAC,kBAAkB,EAClC,CAAC,CAAC,aAAa,CAAC,mBAAmB,CACpC,CAAA;IACH,CAAC;IAED,OAAO,0CAA0C,CAC/C,QAAQ,EACR,OAAO,EACP,aAAa,EACb,UAAU,EACV,eAAe,CAAC,MAAM,EACtB,CAAC,CAAC,aAAa,CAAC,kBAAkB,EAClC,CAAC,CAAC,aAAa,CAAC,mBAAmB,CACpC,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,cAAc,CAAC,OAAe,EAAE,MAAc;IAC3D,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IACvD,OAAO,OAAO,CAAC,WAAW,CAAA;AAC5B,CAAC;AAED;;;;;;GAMG;AACH,SAAS,2BAA2B,CAClC,UAAkD;IAElD,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;QACzD,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,OAAO,UAAU,CAAA;AACnB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,yBAAyB,CAChC,iBAAgD;IAEhD,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,KAAK,MAAM,eAAe,IAAI,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC/D,sFAAsF;QACtF,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YACxF,OAAO,iBAAiB,CAAA;QAC1B,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,0CAA0C,CACjD,QAAwB,EACxB,OAAe,EACf,MAAc,EACd,UAAkB,EAClB,kBAAkD,EAClD,kBAA2B,EAC3B,mBAA4B;IAE5B,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE,GAAG,QAAQ,CAAA;IAE/C,IAAI,kBAAkB,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACnD,uBAAuB;QACvB,MAAM,OAAO,GAAkB;YAC7B,SAAS,EAAE,eAAe,IAAI,SAAS;YACvC,OAAO;YACP,MAAM;YACN,KAAK,EAAE,UAAU,CAAC,WAAW,EAAE;SAChC,CAAA;QAED,IAAI,kBAAkB,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;YAC/C,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAA;YACnD,MAAM,UAAU,GAAG,2BAA2B,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAA;YACnE,IAAI,UAAU,EAAE,CAAC;gBACf,OAAO,CAAC,UAAU,GAAG,UAAU,CAAA;YACjC,CAAC;YAED,MAAM,iBAAiB,GAAG,yBAAyB,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAA;YAC/E,IAAI,iBAAiB,EAAE,CAAC;gBACtB,OAAO,CAAC,iBAAiB,GAAG,iBAAiB,CAAA;YAC/C,CAAC;YAED,IAAI,QAAQ,CAAC,sBAAsB,EAAE,CAAC;gBACpC,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAA;YACrC,CAAC;YACD,IAAI,kBAAkB,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;gBAC3C,OAAO,CAAC,YAAY,GAAG,kBAAkB,CAAC,MAAM,CAAC,YAAY,CAAA;YAC/D,CAAC;YAED,IAAI,mBAAmB,EAAE,CAAC;gBACxB,OAAO,CAAC,OAAO,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAA;YAC7C,CAAC;QACH,CAAC;aAAM,CAAC;YACN,4EAA4E;YAC5E,MAAM,eAAe,GAAmC,EAAE,CAAA;YAC1D,KAAK,MAAM,CAAC,IAAI,kBAAkB,CAAC,OAAO,EAAE,CAAC;gBAC3C,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBACpC,MAAM,UAAU,GAAG,2BAA2B,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAA;oBACrE,MAAM,iBAAiB,GAAG,yBAAyB,CAAC,CAAC,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAA;oBACjF,eAAe,CAAC,IAAI,CAAC;wBACnB,OAAO,EAAE,CAAC,CAAC,eAAe;wBAC1B,YAAY,EAAE,CAAC,CAAC,YAAY;wBAC5B,GAAG,CAAC,UAAU,IAAI,EAAE,UAAU,EAAE,CAAC;wBACjC,GAAG,CAAC,iBAAiB,IAAI,EAAE,iBAAiB,EAAE,CAAC;wBAC/C,oBAAoB,EAAE,CAAC,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;wBAC1E,GAAG,CAAC,mBAAmB,IAAI,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;qBACrE,CAAC,CAAA;gBACJ,CAAC;YACH,CAAC;YACD,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC/B,OAAO,CAAC,eAAe,GAAG,eAAe,CAAA;YAC3C,CAAC;QACH,CAAC;QAED,OAAO;YACL,IAAI,EAAE,SAAS;YACf,QAAQ;YACR,OAAO;SACR,CAAA;IACH,CAAC;IAED,gBAAgB;IAChB,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,kGAAkG;QAClG,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,QAAQ;SACT,CAAA;IACH,CAAC;IAED,IAAI,kBAAkB,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC/C,OAAO;YACL,IAAI,EAAE,eAAe;YACrB,QAAQ;YACR,QAAQ,EAAE,kBAAkB,CAAC,MAAM,CAAC,QAAQ;SAC7C,CAAA;IACH,CAAC;SAAM,CAAC;QACN,4CAA4C;QAC5C,MAAM,cAAc,GAAgC,kBAAkB,CAAC,OAAO;aAC3E,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC;aAC9C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACX,OAAO,EAAE,CAAC,CAAC,eAAe;YAC1B,YAAY,EAAE,CAAC,CAAC,YAAY;YAC5B,QAAQ,EAAE,CAAC,CAAC,QAAQ;SACrB,CAAC,CAAC,CAAA;QAEL,OAAO;YACL,IAAI,EAAE,iBAAiB;YACvB,aAAa,EAAE,kBAAkB,CAAC,aAAa;YAC/C,QAAQ;YACR,cAAc;SACf,CAAA;IACH,CAAC;AACH,CAAC"}
@@ -0,0 +1,2 @@
1
+ export {};
2
+ //# sourceMappingURL=WhoCanWorkerThreadWorker.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"WhoCanWorkerThreadWorker.d.ts","sourceRoot":"","sources":["../../../src/whoCan/WhoCanWorkerThreadWorker.ts"],"names":[],"mappings":""}
@@ -0,0 +1,193 @@
1
+ // Worker thread entry point for whoCan simulations.
2
+ // Lifetime-scoped: a single PullBasedJobRunner is created at init and
3
+ // processes work items until 'finishWork' is received from the main thread.
4
+ import {} from '@actsecurity/iam-collect';
5
+ import { parentPort, threadId, workerData } from 'worker_threads';
6
+ import { getCollectClient } from '../collect/collect.js';
7
+ import { dynamicImport } from '../utils/dynamicImport.js';
8
+ import {} from '../utils/s3Abac.js';
9
+ import { PullBasedJobRunner } from '../workers/JobRunner.js';
10
+ import { SharedArrayBufferWorkerCache } from '../workers/SharedArrayBufferWorkerCache.js';
11
+ import { convertToDenialDetails, toLightRequestAnalysis } from './requestAnalysis.js';
12
+ import { executeWhoCan } from './WhoCanWorker.js';
13
+ import {} from './workerBootstrapPlugin.js';
14
+ if (!parentPort) {
15
+ throw new Error('Must be run as a worker thread');
16
+ }
17
+ // Get config from the main thread
18
+ const { concurrency, collectConfigs, partition, s3AbacOverride, collectGrantDetails, clientFactoryPlugin, workerBootstrapPlugin } = workerData;
19
+ // Pending task requests from workers, keyed by workerId
20
+ const taskPromises = {};
21
+ // Pending deny details checks, keyed by a unique id for each check
22
+ let denyDetailsCheckId = 0;
23
+ const pendingDenyDetailsChecks = {};
24
+ /**
25
+ * Runs the consumer-provided bootstrap plugin if one was specified.
26
+ * Called before any other worker initialization.
27
+ */
28
+ async function runBootstrapPlugin() {
29
+ if (!workerBootstrapPlugin)
30
+ return;
31
+ const mod = await dynamicImport(workerBootstrapPlugin.module);
32
+ const factory = mod[workerBootstrapPlugin.factoryExport];
33
+ if (!factory) {
34
+ throw new Error(`Bootstrap export '${workerBootstrapPlugin.factoryExport}' not found in module '${workerBootstrapPlugin.module}'`);
35
+ }
36
+ else if (typeof factory !== 'function') {
37
+ throw new Error(`Bootstrap export '${workerBootstrapPlugin.factoryExport}' in module '${workerBootstrapPlugin.module}' is not a function`);
38
+ }
39
+ await factory({ data: workerBootstrapPlugin.data, threadId, isMainThread: false });
40
+ }
41
+ /**
42
+ * Creates the lifetime-scoped PullBasedJobRunner. The runner starts
43
+ * immediately and processes work items until finishAllWork() is called.
44
+ *
45
+ * @param collectClient - Promise for the collect client, resolved during bootstrap.
46
+ * @returns the PullBasedJobRunner instance.
47
+ */
48
+ function createJobRunner(collectClient) {
49
+ return new PullBasedJobRunner(concurrency, async (workerId) => {
50
+ return new Promise((resolve) => {
51
+ parentPort.postMessage({ type: 'requestTask', workerId });
52
+ taskPromises[workerId] = resolve;
53
+ });
54
+ }, (taggedTask) => {
55
+ const { requestId, ...workItem } = taggedTask;
56
+ return {
57
+ properties: { requestId, collectDenyDetails: workItem.collectDenyDetails },
58
+ execute: async () => {
59
+ return executeWhoCan(workItem, collectClient, {
60
+ s3AbacOverride,
61
+ collectDenyDetails: workItem.collectDenyDetails,
62
+ collectGrantDetails,
63
+ strictContextKeys: workItem.strictContextKeys
64
+ });
65
+ }
66
+ };
67
+ }, async (result) => {
68
+ const { requestId, collectDenyDetails } = result.properties;
69
+ if (result.status === 'fulfilled') {
70
+ const executionResult = result.value;
71
+ if (executionResult.type === 'allowed') {
72
+ parentPort.postMessage({
73
+ type: 'result',
74
+ requestId,
75
+ result: {
76
+ status: 'fulfilled',
77
+ value: executionResult.allowed,
78
+ properties: {}
79
+ }
80
+ });
81
+ }
82
+ else {
83
+ // Check if deny details check will follow
84
+ const hasDetails = executionResult.type === 'denied_single' || executionResult.type === 'denied_wildcard';
85
+ const denyDetailsCheckWillFollow = collectDenyDetails && hasDetails;
86
+ // Post count-only result for denied simulations
87
+ parentPort.postMessage({
88
+ type: 'result',
89
+ requestId,
90
+ denyDetailsCheckWillFollow,
91
+ result: {
92
+ status: 'fulfilled',
93
+ value: undefined,
94
+ properties: {}
95
+ }
96
+ });
97
+ if (denyDetailsCheckWillFollow) {
98
+ const lightAnalysis = toLightRequestAnalysis(executionResult);
99
+ const checkId = denyDetailsCheckId++;
100
+ parentPort.postMessage({
101
+ type: 'checkDenyDetails',
102
+ requestId,
103
+ checkId,
104
+ workItem: executionResult.workItem,
105
+ lightAnalysis
106
+ });
107
+ const shouldInclude = await new Promise((resolve) => {
108
+ pendingDenyDetailsChecks[checkId] = resolve;
109
+ });
110
+ if (shouldInclude) {
111
+ parentPort.postMessage({
112
+ type: 'denyDetailsResult',
113
+ requestId,
114
+ denyDetail: convertToDenialDetails(executionResult)
115
+ });
116
+ }
117
+ }
118
+ }
119
+ }
120
+ else {
121
+ // Error case — pass through with requestId
122
+ parentPort.postMessage({
123
+ type: 'result',
124
+ requestId,
125
+ result: result
126
+ });
127
+ }
128
+ });
129
+ }
130
+ /**
131
+ * Async entry point for the worker. Initializes bootstrap, collect client,
132
+ * message handler, and job runner in the correct order.
133
+ */
134
+ async function main() {
135
+ // 1. Run bootstrap plugin if present
136
+ await runBootstrapPlugin();
137
+ // 2. Start creating the collect client (resolves asynchronously — the
138
+ // shared-cache bridge is already installed on the main thread so cache
139
+ // messages will be served during startup)
140
+ const collectClientPromise = await getCollectClient(collectConfigs, partition, {
141
+ cacheProvider: new SharedArrayBufferWorkerCache(parentPort),
142
+ clientFactoryPlugin
143
+ });
144
+ // 3. Signal ready (tells main thread bootstrap + client init succeeded)
145
+ parentPort.postMessage({ type: 'ready' });
146
+ // 4. Wait for 'start' from the main thread. The main thread sends this
147
+ // after installing its lifetime message listeners, so that requestTask
148
+ // messages emitted by the job runner are not dropped.
149
+ await new Promise((resolve) => {
150
+ const onStart = (msg) => {
151
+ if (msg.type === 'start') {
152
+ parentPort.off('message', onStart);
153
+ resolve();
154
+ }
155
+ };
156
+ parentPort.on('message', onStart);
157
+ });
158
+ // 5. Install message handler (must be ready before runner pulls tasks).
159
+ // jobRunner is assigned after the handler is installed but before the
160
+ // runner constructor fires its first requestTask, so the closure is safe.
161
+ let jobRunner;
162
+ parentPort.on('message', (msg) => {
163
+ if (msg.type === 'task' && msg.workerId in taskPromises) {
164
+ // Task delivered from main thread (may be undefined if nothing is ready)
165
+ taskPromises[msg.workerId](msg.task);
166
+ delete taskPromises[msg.workerId];
167
+ }
168
+ else if (msg.type === 'workAvailable') {
169
+ jobRunner.notifyWorkAvailable();
170
+ }
171
+ else if (msg.type === 'finishWork') {
172
+ jobRunner.finishAllWork().then(() => {
173
+ parentPort.postMessage({ type: 'finished' });
174
+ });
175
+ }
176
+ else if (msg.type === 'denyDetailsCheckResult') {
177
+ const checkId = msg.checkId;
178
+ const resolveFn = pendingDenyDetailsChecks[checkId];
179
+ if (resolveFn) {
180
+ resolveFn(msg.shouldInclude);
181
+ delete pendingDenyDetailsChecks[checkId];
182
+ }
183
+ }
184
+ });
185
+ // 6. Create job runner (constructor eagerly starts pulling tasks)
186
+ jobRunner = createJobRunner(collectClientPromise);
187
+ }
188
+ void main().catch((err) => {
189
+ // Post explicit error so main thread doesn't depend on unhandled-rejection behavior.
190
+ parentPort.postMessage({ type: 'startupError', error: String(err) });
191
+ process.exit(1);
192
+ });
193
+ //# sourceMappingURL=WhoCanWorkerThreadWorker.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"WhoCanWorkerThreadWorker.js","sourceRoot":"","sources":["../../../src/whoCan/WhoCanWorkerThreadWorker.ts"],"names":[],"mappings":"AAAA,oDAAoD;AACpD,sEAAsE;AACtE,4EAA4E;AAC5E,OAAO,EAAuB,MAAM,0BAA0B,CAAA;AAC9D,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AACjE,OAAO,EAA4B,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAClF,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAA;AACzD,OAAO,EAAuB,MAAM,oBAAoB,CAAA;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAC5D,OAAO,EAAE,4BAA4B,EAAE,MAAM,4CAA4C,CAAA;AACzF,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAA;AACrF,OAAO,EAAE,aAAa,EAAmD,MAAM,mBAAmB,CAAA;AAClG,OAAO,EAA8B,MAAM,4BAA4B,CAAA;AAGvE,IAAI,CAAC,UAAU,EAAE,CAAC;IAChB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;AACnD,CAAC;AAED,kCAAkC;AAClC,MAAM,EACJ,WAAW,EACX,cAAc,EACd,SAAS,EACT,cAAc,EACd,mBAAmB,EACnB,mBAAmB,EACnB,qBAAqB,EACtB,GAAG,UAQH,CAAA;AAuBD,wDAAwD;AACxD,MAAM,YAAY,GAAuC,EAAE,CAAA;AAE3D,mEAAmE;AACnE,IAAI,kBAAkB,GAAG,CAAC,CAAA;AAC1B,MAAM,wBAAwB,GAAqD,EAAE,CAAA;AAErF;;;GAGG;AACH,KAAK,UAAU,kBAAkB;IAC/B,IAAI,CAAC,qBAAqB;QAAE,OAAM;IAElC,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAA;IAC7D,MAAM,OAAO,GAAG,GAAG,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAAA;IAExD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,qBAAqB,qBAAqB,CAAC,aAAa,0BAA0B,qBAAqB,CAAC,MAAM,GAAG,CAClH,CAAA;IACH,CAAC;SAAM,IAAI,OAAO,OAAO,KAAK,UAAU,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CACb,qBAAqB,qBAAqB,CAAC,aAAa,gBAAgB,qBAAqB,CAAC,MAAM,qBAAqB,CAC1H,CAAA;IACH,CAAC;IAED,MAAM,OAAO,CAAC,EAAE,IAAI,EAAE,qBAAqB,CAAC,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAc,EAAE,CAAC,CAAA;AAC7F,CAAC;AAED;;;;;;GAMG;AACH,SAAS,eAAe,CAAC,aAA+B;IACtD,OAAO,IAAI,kBAAkB,CAC3B,WAAW,EACX,KAAK,EAAE,QAAQ,EAAE,EAAE;QACjB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,UAAW,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC,CAAA;YAC1D,YAAY,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAA;QAClC,CAAC,CAAC,CAAA;IACJ,CAAC,EACD,CAAC,UAAU,EAAE,EAAE;QACb,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,EAAE,GAAG,UAAU,CAAA;QAC7C,OAAO;YACL,UAAU,EAAE,EAAE,SAAS,EAAE,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB,EAAE;YAC1E,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,OAAO,aAAa,CAAC,QAAQ,EAAE,aAAa,EAAE;oBAC5C,cAAc;oBACd,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;oBAC/C,mBAAmB;oBACnB,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;iBAC9C,CAAC,CAAA;YACJ,CAAC;SACF,CAAA;IACH,CAAC,EACD,KAAK,EAAE,MAAM,EAAE,EAAE;QACf,MAAM,EAAE,SAAS,EAAE,kBAAkB,EAAE,GAAG,MAAM,CAAC,UAAU,CAAA;QAE3D,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAClC,MAAM,eAAe,GAAG,MAAM,CAAC,KAAK,CAAA;YAEpC,IAAI,eAAe,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvC,UAAW,CAAC,WAAW,CAAC;oBACtB,IAAI,EAAE,QAAQ;oBACd,SAAS;oBACT,MAAM,EAAE;wBACN,MAAM,EAAE,WAAW;wBACnB,KAAK,EAAE,eAAe,CAAC,OAAO;wBAC9B,UAAU,EAAE,EAAE;qBACf;iBACF,CAAC,CAAA;YACJ,CAAC;iBAAM,CAAC;gBACN,0CAA0C;gBAC1C,MAAM,UAAU,GACd,eAAe,CAAC,IAAI,KAAK,eAAe,IAAI,eAAe,CAAC,IAAI,KAAK,iBAAiB,CAAA;gBACxF,MAAM,0BAA0B,GAAG,kBAAkB,IAAI,UAAU,CAAA;gBAEnE,gDAAgD;gBAChD,UAAW,CAAC,WAAW,CAAC;oBACtB,IAAI,EAAE,QAAQ;oBACd,SAAS;oBACT,0BAA0B;oBAC1B,MAAM,EAAE;wBACN,MAAM,EAAE,WAAW;wBACnB,KAAK,EAAE,SAAS;wBAChB,UAAU,EAAE,EAAE;qBACf;iBACF,CAAC,CAAA;gBAEF,IAAI,0BAA0B,EAAE,CAAC;oBAC/B,MAAM,aAAa,GAAG,sBAAsB,CAAC,eAAe,CAAC,CAAA;oBAC7D,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAA;oBAEpC,UAAW,CAAC,WAAW,CAAC;wBACtB,IAAI,EAAE,kBAAkB;wBACxB,SAAS;wBACT,OAAO;wBACP,QAAQ,EAAE,eAAe,CAAC,QAAQ;wBAClC,aAAa;qBACd,CAAC,CAAA;oBAEF,MAAM,aAAa,GAAG,MAAM,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,EAAE;wBAC3D,wBAAwB,CAAC,OAAO,CAAC,GAAG,OAAO,CAAA;oBAC7C,CAAC,CAAC,CAAA;oBAEF,IAAI,aAAa,EAAE,CAAC;wBAClB,UAAW,CAAC,WAAW,CAAC;4BACtB,IAAI,EAAE,mBAAmB;4BACzB,SAAS;4BACT,UAAU,EAAE,sBAAsB,CAAC,eAAe,CAAC;yBACpD,CAAC,CAAA;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,2CAA2C;YAC3C,UAAW,CAAC,WAAW,CAAC;gBACtB,IAAI,EAAE,QAAQ;gBACd,SAAS;gBACT,MAAM,EAAE,MAAM;aACf,CAAC,CAAA;QACJ,CAAC;IACH,CAAC,CACF,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,IAAI;IACjB,qCAAqC;IACrC,MAAM,kBAAkB,EAAE,CAAA;IAE1B,sEAAsE;IACtE,0EAA0E;IAC1E,6CAA6C;IAC7C,MAAM,oBAAoB,GAAG,MAAM,gBAAgB,CAAC,cAAc,EAAE,SAAS,EAAE;QAC7E,aAAa,EAAE,IAAI,4BAA4B,CAAC,UAAW,CAAC;QAC5D,mBAAmB;KACpB,CAAC,CAAA;IAEF,wEAAwE;IACxE,UAAW,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;IAE1C,uEAAuE;IACvE,0EAA0E;IAC1E,yDAAyD;IACzD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,MAAM,OAAO,GAAG,CAAC,GAAQ,EAAE,EAAE;YAC3B,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBACzB,UAAW,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;gBACnC,OAAO,EAAE,CAAA;YACX,CAAC;QACH,CAAC,CAAA;QACD,UAAW,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;IACpC,CAAC,CAAC,CAAA;IAEF,wEAAwE;IACxE,yEAAyE;IACzE,6EAA6E;IAC7E,IAAI,SAA2F,CAAA;IAE/F,UAAW,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE;QAChC,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,IAAI,YAAY,EAAE,CAAC;YACxD,yEAAyE;YACzE,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YACpC,OAAO,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QACnC,CAAC;aAAM,IAAI,GAAG,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YACxC,SAAS,CAAC,mBAAmB,EAAE,CAAA;QACjC,CAAC;aAAM,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YACrC,SAAS,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;gBAClC,UAAW,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAA;YAC/C,CAAC,CAAC,CAAA;QACJ,CAAC;aAAM,IAAI,GAAG,CAAC,IAAI,KAAK,wBAAwB,EAAE,CAAC;YACjD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAiB,CAAA;YACrC,MAAM,SAAS,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAA;YACnD,IAAI,SAAS,EAAE,CAAC;gBACd,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;gBAC5B,OAAO,wBAAwB,CAAC,OAAO,CAAC,CAAA;YAC1C,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,kEAAkE;IAClE,SAAS,GAAG,eAAe,CAAC,oBAAoB,CAAC,CAAA;AACnD,CAAC;AAED,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACxB,qFAAqF;IACrF,UAAW,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IACrE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC,CAAC,CAAA"}