@actsecurity/iam-policy 0.1.109

package/dist/cjs/utils.js

@@ -0,0 +1,100 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isAllWildcards = isAllWildcards;
+exports.delimitedSegmentAt = delimitedSegmentAt;
+exports.lastDelimitedSegment = lastDelimitedSegment;
+exports.delimitedSegmentRemainder = delimitedSegmentRemainder;
+exports.caseInsensitiveEquals = caseInsensitiveEquals;
+exports.caseInsensitiveEndsWith = caseInsensitiveEndsWith;
+/**
+ * Checks if a string is all wildcards(*)
+ *
+ * @param value The value to check if it is a wildcard
+ * @returns True if the value is all wildcards, false otherwise
+ */
+function isAllWildcards(value) {
+    return value.match(/^\*+$/) !== null;
+}
+/**
+ * Returns the segment at the requested zero-based index without allocating an
+ * array for every segment in the value.
+ *
+ * @param value - the delimited string to read from
+ * @param delimiter - the delimiter that separates segments
+ * @param segmentIndex - the zero-based segment index to return
+ * @returns the requested segment, or undefined when the index is not present
+ */
+function delimitedSegmentAt(value, delimiter, segmentIndex) {
+    let segmentStart = 0;
+    for (let currentIndex = 0; currentIndex < segmentIndex; currentIndex++) {
+        const delimiterIndex = value.indexOf(delimiter, segmentStart);
+        if (delimiterIndex === -1) {
+            return undefined;
+        }
+        segmentStart = delimiterIndex + delimiter.length;
+    }
+    const segmentEnd = value.indexOf(delimiter, segmentStart);
+    if (segmentEnd === -1) {
+        return value.slice(segmentStart);
+    }
+    return value.slice(segmentStart, segmentEnd);
+}
+/**
+ * Returns the last segment of a delimited string without allocating an array for
+ * all preceding segments.
+ *
+ * @param value - the delimited string to read from
+ * @param delimiter - the delimiter that separates segments
+ * @returns the final segment after the last delimiter, or the whole value if no delimiter exists
+ */
+function lastDelimitedSegment(value, delimiter) {
+    const delimiterIndex = value.lastIndexOf(delimiter);
+    if (delimiterIndex === -1) {
+        return value;
+    }
+    return value.slice(delimiterIndex + delimiter.length);
+}
+/**
+ * Returns the remainder of a delimited string starting at the requested
+ * zero-based segment index.
+ *
+ * @param value - the delimited string to read from
+ * @param delimiter - the delimiter that separates segments
+ * @param segmentIndex - the zero-based segment index where the remainder starts
+ * @returns the substring starting at the requested segment, or undefined when the segment is not present
+ */
+function delimitedSegmentRemainder(value, delimiter, segmentIndex) {
+    let segmentStart = 0;
+    for (let currentIndex = 0; currentIndex < segmentIndex; currentIndex++) {
+        const delimiterIndex = value.indexOf(delimiter, segmentStart);
+        if (delimiterIndex === -1) {
+            return undefined;
+        }
+        segmentStart = delimiterIndex + delimiter.length;
+    }
+    return value.slice(segmentStart);
+}
+const caseInsensitiveCompareOptions = { sensitivity: 'accent' };
+/**
+ * Compares two strings without case sensitivity and without lowercasing either
+ * value first.
+ *
+ * @param first - the first string to compare
+ * @param second - the second string to compare
+ * @returns true when both strings match case-insensitively
+ */
+function caseInsensitiveEquals(first, second) {
+    return first.localeCompare(second, undefined, caseInsensitiveCompareOptions) === 0;
+}
+/**
+ * Checks whether a value ends with a suffix without case sensitivity and
+ * without lowercasing the value first.
+ *
+ * @param value - the value to check
+ * @param suffix - the suffix to compare against the end of the value
+ * @returns true when the value ends with the suffix case-insensitively
+ */
+function caseInsensitiveEndsWith(value, suffix) {
+    return caseInsensitiveEquals(value.slice(suffix.length * -1), suffix);
+}
+//# sourceMappingURL=utils.js.map

package/dist/cjs/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../src/utils.ts"],"names":[],"mappings":";;AAMA,wCAEC;AAWD,gDAmBC;AAUD,oDAMC;AAWD,8DAcC;AAYD,sDAEC;AAUD,0DAEC;AAzGD;;;;;GAKG;AACH,SAAgB,cAAc,CAAC,KAAa;IAC1C,OAAO,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,CAAA;AACtC,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,kBAAkB,CAChC,KAAa,EACb,SAAiB,EACjB,YAAoB;IAEpB,IAAI,YAAY,GAAG,CAAC,CAAA;IACpB,KAAK,IAAI,YAAY,GAAG,CAAC,EAAE,YAAY,GAAG,YAAY,EAAE,YAAY,EAAE,EAAE,CAAC;QACvE,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,YAAY,CAAC,CAAA;QAC7D,IAAI,cAAc,KAAK,CAAC,CAAC,EAAE,CAAC;YAC1B,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,YAAY,GAAG,cAAc,GAAG,SAAS,CAAC,MAAM,CAAA;IAClD,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,YAAY,CAAC,CAAA;IACzD,IAAI,UAAU,KAAK,CAAC,CAAC,EAAE,CAAC;QACtB,OAAO,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;IAClC,CAAC;IACD,OAAO,KAAK,CAAC,KAAK,CAAC,YAAY,EAAE,UAAU,CAAC,CAAA;AAC9C,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,oBAAoB,CAAC,KAAa,EAAE,SAAiB;IACnE,MAAM,cAAc,GAAG,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC,CAAA;IACnD,IAAI,cAAc,KAAK,CAAC,CAAC,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAA;IACd,CAAC;IACD,OAAO,KAAK,CAAC,KAAK,CAAC,cAAc,GAAG,SAAS,CAAC,MAAM,CAAC,CAAA;AACvD,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,yBAAyB,CACvC,KAAa,EACb,SAAiB,EACjB,YAAoB;IAEpB,IAAI,YAAY,GAAG,CAAC,CAAA;IACpB,KAAK,IAAI,YAAY,GAAG,CAAC,EAAE,YAAY,GAAG,YAAY,EAAE,YAAY,EAAE,EAAE,CAAC;QACvE,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,YAAY,CAAC,CAAA;QAC7D,IAAI,cAAc,KAAK,CAAC,CAAC,EAAE,CAAC;YAC1B,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,YAAY,GAAG,cAAc,GAAG,SAAS,CAAC,MAAM,CAAA;IAClD,CAAC;IACD,OAAO,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;AAClC,CAAC;AAED,MAAM,6BAA6B,GAAyB,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAA;AAErF;;;;;;;GAOG;AACH,SAAgB,qBAAqB,CAAC,KAAa,EAAE,MAAc;IACjE,OAAO,KAAK,CAAC,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,6BAA6B,CAAC,KAAK,CAAC,CAAA;AACpF,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,uBAAuB,CAAC,KAAa,EAAE,MAAc;IACnE,OAAO,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;AACvE,CAAC"}

package/dist/cjs/validate/testutil.d.ts

@@ -0,0 +1,3 @@
+import { type ValidationError } from './validate.js';
+export declare function sortErrors(errors: ValidationError[]): ValidationError[];
+//# sourceMappingURL=testutil.d.ts.map

package/dist/cjs/validate/testutil.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"testutil.d.ts","sourceRoot":"","sources":["../../../src/validate/testutil.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,eAAe,CAAA;AAEpD,wBAAgB,UAAU,CAAC,MAAM,EAAE,eAAe,EAAE,GAAG,eAAe,EAAE,CAcvE"}

package/dist/cjs/validate/testutil.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sortErrors = sortErrors;
+function sortErrors(errors) {
+    return errors.sort((a, b) => {
+        if (a.path < b.path) {
+            return -1;
+        }
+        else if (a.path > b.path) {
+            return 1;
+        }
+        else if (a.message < b.message) {
+            return -1;
+        }
+        else if (a.message > b.message) {
+            return 1;
+        }
+        return 0;
+    });
+}
+//# sourceMappingURL=testutil.js.map

package/dist/cjs/validate/testutil.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"testutil.js","sourceRoot":"","sources":["../../../src/validate/testutil.ts"],"names":[],"mappings":";;AAEA,gCAcC;AAdD,SAAgB,UAAU,CAAC,MAAyB;IAClD,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAC1B,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACpB,OAAO,CAAC,CAAC,CAAA;QACX,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YAC3B,OAAO,CAAC,CAAA;QACV,CAAC;aAAM,IAAI,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;YACjC,OAAO,CAAC,CAAC,CAAA;QACX,CAAC;aAAM,IAAI,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;YACjC,OAAO,CAAC,CAAA;QACV,CAAC;QAED,OAAO,CAAC,CAAA;IACV,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/cjs/validate/validate.d.ts

@@ -0,0 +1,16 @@
+export interface ValidationError {
+    message: string;
+    path: string;
+}
+export interface ValidationCallbacks {
+    validateVersion?: (version: any, path: string) => ValidationError[];
+    validateStatement?: (statement: any, path: string) => ValidationError[];
+    validateAction?: (action: string, path: string) => ValidationError[];
+    validateNotAction?: (notAction: string, path: string) => ValidationError[];
+    validatePrincipal?: (principal: any, path: string) => ValidationError[];
+    validateNotPrincipal?: (notPrincipal: any, path: string) => ValidationError[];
+    validateResource?: (resource: string, path: string) => ValidationError[];
+    validateNotResource?: (notResource: string, path: string) => ValidationError[];
+}
+export declare function validatePolicySyntax(policyDocument: any, validationCallbacks?: ValidationCallbacks): ValidationError[];
+//# sourceMappingURL=validate.d.ts.map

package/dist/cjs/validate/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../../src/validate/validate.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;CACb;AAsCD,MAAM,WAAW,mBAAmB;IAClC,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,KAAK,eAAe,EAAE,CAAA;IACnE,iBAAiB,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,KAAK,eAAe,EAAE,CAAA;IACvE,cAAc,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,eAAe,EAAE,CAAA;IACpE,iBAAiB,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,eAAe,EAAE,CAAA;IAC1E,iBAAiB,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,KAAK,eAAe,EAAE,CAAA;IACvE,oBAAoB,CAAC,EAAE,CAAC,YAAY,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,KAAK,eAAe,EAAE,CAAA;IAC7E,gBAAgB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,eAAe,EAAE,CAAA;IACxE,mBAAmB,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,eAAe,EAAE,CAAA;CAC/E;AAED,wBAAgB,oBAAoB,CAClC,cAAc,EAAE,GAAG,EACnB,mBAAmB,GAAE,mBAAwB,GAC5C,eAAe,EAAE,CAuCnB"}

package/dist/cjs/validate/validate.js

@@ -0,0 +1,361 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validatePolicySyntax = validatePolicySyntax;
+const utils_js_1 = require("../utils.js");
+const serviceRegex = /^[a-zA-Z0-9-]+$/;
+const actionRegex = /^[a-zA-Z0-9*\?, \-]+$/;
+const allowedPolicyKeys = new Set(['Version', 'Statement', 'Id']);
+const allowedStatementKeys = new Set([
+    'Sid',
+    'Effect',
+    'Action',
+    'NotAction',
+    'Resource',
+    'NotResource',
+    'Principal',
+    'NotPrincipal',
+    'Condition'
+]);
+const allowedPrincipalKeys = new Set(['AWS', 'Service', 'Federated', 'CanonicalUser']);
+const validConditionOperatorPattern = /^[a-zA-Z0-9:]+$/;
+const allowedSetOperators = ['ForAllValues', 'ForAnyValue'];
+/**
+ * Checks whether a condition set operator is one of the IAM set operator names,
+ * ignoring case without normalizing the candidate string first.
+ *
+ * @param setOperator - the condition set operator to check
+ * @returns true when the set operator is allowed
+ */
+function isAllowedSetOperator(setOperator) {
+    for (const allowedSetOperator of allowedSetOperators) {
+        if ((0, utils_js_1.caseInsensitiveEquals)(setOperator, allowedSetOperator)) {
+            return true;
+        }
+    }
+    return false;
+}
+function validatePolicySyntax(policyDocument, validationCallbacks = {}) {
+    const allErrors = [];
+    if (typeof policyDocument !== 'object') {
+        return [
+            { path: '', message: `Policy must be an object, received type ${typeof policyDocument}` }
+        ];
+    }
+    else if (Array.isArray(policyDocument)) {
+        return [{ path: '', message: 'Policy must be an object, received an array' }];
+    }
+    allErrors.push(...validateKeys(policyDocument, allowedPolicyKeys, ''));
+    if (validationCallbacks.validateVersion) {
+        allErrors.push(...validationCallbacks.validateVersion(policyDocument.Version, ''));
+    }
+    else {
+        allErrors.push(...validatePolicyVersion(policyDocument.Version));
+    }
+    allErrors.push(...validateDataTypeIfExists(policyDocument.Id, 'Id', 'string'));
+    if (!policyDocument.Statement) {
+        allErrors.push({
+            path: '',
+            message: 'Statement is required'
+        });
+    }
+    allErrors.push(...validateTypeOrArrayOfTypeIfExists(policyDocument.Statement, 'Statement', ['object']));
+    if (typeof policyDocument.Statement === 'object' && !Array.isArray(policyDocument.Statement)) {
+        allErrors.push(...validateStatement(policyDocument.Statement, 'Statement', validationCallbacks));
+    }
+    else if (Array.isArray(policyDocument.Statement)) {
+        for (let i = 0; i < policyDocument.Statement.length; i++) {
+            allErrors.push(...validateStatement(policyDocument.Statement[i], `Statement[${i}]`, validationCallbacks));
+        }
+    }
+    return allErrors;
+}
+function validatePolicyVersion(version) {
+    if (version === undefined || version === null) {
+        return [];
+    }
+    if (typeof version !== 'string') {
+        return [
+            {
+                path: 'Version',
+                message: `Version must be a string if present`
+            }
+        ];
+    }
+    if (version === '2012-10-17' || version === '2008-10-17') {
+        return [];
+    }
+    return [
+        {
+            path: 'Version',
+            message: `Version must be either "2012-10-17" or "2008-10-17"`
+        }
+    ];
+}
+function validateStatement(statement, path, validationCallbacks) {
+    const statementErrors = [];
+    statementErrors.push(...validateKeys(statement, allowedStatementKeys, path));
+    statementErrors.push(...validateDataTypeIfExists(statement.Sid, `${path}.Sid`, 'string'));
+    if (!statement.Effect) {
+        statementErrors.push({
+            path: `${path}`,
+            message: `Effect must be present and exactly "Allow" or "Deny"`
+        });
+    }
+    else if (statement.Effect !== 'Allow' && statement.Effect !== 'Deny') {
+        statementErrors.push({
+            path: `${path}.Effect`,
+            message: `Effect must be present and exactly "Allow" or "Deny"`
+        });
+    }
+    statementErrors.push(...(validationCallbacks.validateStatement?.(statement, path) || []));
+    statementErrors.push(...validateOnlyOneOf(statement, path, 'Action', 'NotAction'));
+    statementErrors.push(...validateOnlyOneOf(statement, path, 'Resource', 'NotResource'));
+    statementErrors.push(...validateOnlyOneOf(statement, path, 'Principal', 'NotPrincipal'));
+    statementErrors.push(...validateTypeOrArrayOfTypeIfExists(statement.Action, `${path}.Action`, 'string'));
+    statementErrors.push(...validateTypeOrArrayOfTypeIfExists(statement.NotAction, `${path}.NotAction`, 'string'));
+    statementErrors.push(...validateActionIfPresent(statement.Action, `${path}.Action`));
+    statementErrors.push(...validateActionIfPresent(statement.NotAction, `${path}.NotAction`));
+    statementErrors.push(...validateStringOrArrayStringCallback(statement, 'Action', path, validationCallbacks.validateAction));
+    statementErrors.push(...validateStringOrArrayStringCallback(statement, 'NotAction', path, validationCallbacks.validateNotAction));
+    statementErrors.push(...validateResource(statement.Resource, `${path}.Resource`));
+    statementErrors.push(...validateResource(statement.NotResource, `${path}.NotResource`));
+    statementErrors.push(...validateDataTypeIfExists(statement.Principal, `${path}.Principal`, ['string', 'object']));
+    statementErrors.push(...validateDataTypeIfExists(statement.NotPrincipal, `${path}.NotPrincipal`, [
+        'string',
+        'object'
+    ]));
+    statementErrors.push(...validatePrincipal(statement.Principal, `${path}.Principal`));
+    statementErrors.push(...validatePrincipal(statement.NotPrincipal, `${path}.NotPrincipal`));
+    //TODO: If the condition key exists but there is no value, it is an error
+    statementErrors.push(...validateCondition(statement.Condition, `${path}.Condition`));
+    return statementErrors;
+}
+function validatePrincipal(principal, path) {
+    const principalErrors = [];
+    if (principal === undefined || typeof principal === 'string') {
+        return [];
+    }
+    if (typeof principal === 'object') {
+        principalErrors.push(...validateKeys(principal, allowedPrincipalKeys, path));
+        principalErrors.push(...validateTypeOrArrayOfTypeIfExists(principal.AWS, `${path}.AWS`, 'string'));
+        principalErrors.push(...validateTypeOrArrayOfTypeIfExists(principal.Service, `${path}.Service`, 'string'));
+        principalErrors.push(...validateTypeOrArrayOfTypeIfExists(principal.Federated, `${path}.Federated`, 'string'));
+        principalErrors.push(...validateTypeOrArrayOfTypeIfExists(principal.CanonicalUser, `${path}.CanonicalUser`, 'string'));
+    }
+    return principalErrors;
+}
+function validateResource(resource, path) {
+    if (resource === undefined) {
+        return [];
+    }
+    if (typeof resource === 'string') {
+        return [];
+    }
+    else if (Array.isArray(resource)) {
+        const validationErrors = [];
+        for (let i = 0; i < resource.length; i++) {
+            if (typeof resource[i] !== 'string') {
+                validationErrors.push({
+                    message: `Resource must be a string or array of strings, found type ${typeof resource[i]}`,
+                    path: `${path}[${i}]`
+                });
+            }
+        }
+        return validationErrors;
+    }
+    return [
+        {
+            path,
+            message: `Must be a string or array of strings`
+        }
+    ];
+}
+function validateActionIfPresent(action, path) {
+    if (action === undefined || action === null) {
+        return [];
+    }
+    //Type errors are caught elsewhere
+    if (typeof action === 'string') {
+        return validateActionString(action, path);
+    }
+    else if (Array.isArray(action)) {
+        const actionErrors = [];
+        for (let i = 0; i < action.length; i++) {
+            const value = action[i];
+            if (typeof value === 'string') {
+                actionErrors.push(...validateActionString(action[i], `${path}[${i}]`));
+            }
+        }
+        return actionErrors;
+    }
+    return [];
+}
+function validateActionString(string, path) {
+    if (string === '*') {
+        return [];
+    }
+    const trimmedString = string.trim();
+    const firstColonIndex = trimmedString.indexOf(':');
+    if (firstColonIndex === -1 || trimmedString.indexOf(':', firstColonIndex + 1) !== -1) {
+        return [
+            {
+                path,
+                message: `Action must be a wildcard (*) or have 2 segments`
+            }
+        ];
+    }
+    const service = trimmedString.slice(0, firstColonIndex);
+    const action = trimmedString.slice(firstColonIndex + 1);
+    const errors = [];
+    if (!serviceRegex.test(service)) {
+        errors.push({
+            path,
+            message: `Service can only contain letters, numbers, and hyphens`
+        });
+    }
+    if (action.length > 0 && !actionRegex.test(action)) {
+        errors.push({
+            path,
+            message: `Action can only contain letters, numbers, asterisks, question marks, commas, hyphens, and spaces`
+        });
+    }
+    return errors;
+}
+function validateCondition(condition, path) {
+    const conditionErrors = [];
+    if (condition === undefined || condition === null) {
+        return [];
+    }
+    conditionErrors.push(...validateDataTypeIfExists(condition, path, 'object'));
+    if (typeof condition !== 'object') {
+        return conditionErrors;
+    }
+    else if (Array.isArray(condition)) {
+        conditionErrors.push({
+            message: 'Condition must be an object, found an array',
+            path
+        });
+        return conditionErrors;
+    }
+    const conditionOperators = Object.keys(condition);
+    for (const operator of conditionOperators) {
+        //If not valid pattern
+        if (!validConditionOperatorPattern.test(operator)) {
+            conditionErrors.push({
+                path: `${path}.#${operator}`,
+                message: `Condition operator is invalid`
+            });
+        }
+        const firstColonIndex = operator.indexOf(':');
+        if (firstColonIndex !== -1 && operator.indexOf(':', firstColonIndex + 1) !== -1) {
+            conditionErrors.push({
+                path: `${path}.#${operator}`,
+                message: `Condition operator is invalid`
+            });
+        }
+        else if (firstColonIndex !== -1) {
+            const setOperator = (0, utils_js_1.delimitedSegmentAt)(operator, ':', 0);
+            if (!isAllowedSetOperator(setOperator)) {
+                conditionErrors.push({
+                    path: `${path}.#${operator}`,
+                    message: `Condition set operator must be either ForAllValues or ForAnyValue`
+                });
+            }
+        }
+        conditionErrors.push(...validateDataTypeIfExists(condition[operator], `${path}.${operator}`, 'object'));
+        if (Array.isArray(condition[operator])) {
+            conditionErrors.push({
+                message: 'Condition operator must be an object, found an array',
+                path: `${path}.${operator}`
+            });
+        }
+        if (typeof condition[operator] === 'object' && !Array.isArray(condition[operator])) {
+            const conditionKeys = Object.keys(condition[operator]);
+            for (const key of conditionKeys) {
+                conditionErrors.push(...validateTypeOrArrayOfTypeIfExists(condition[operator][key], `${path}.${operator}.${key}`, ['string', 'boolean', 'number']));
+            }
+        }
+    }
+    return conditionErrors;
+}
+function validateKeys(object, allowedKeys, path) {
+    const keyErrors = [];
+    for (const key of Object.keys(object)) {
+        if (!allowedKeys.has(key)) {
+            keyErrors.push({
+                message: `Invalid key ${key}`,
+                path: `${path}.#${key}`
+            });
+        }
+        else if (object[key] === undefined || object[key] === null) {
+            keyErrors.push({
+                message: `If present, ${key} cannot be null or undefined`,
+                path: `${path}.${key}`
+            });
+        }
+    }
+    return keyErrors;
+}
+function validateTypeOrArrayOfTypeIfExists(value, path, allowedTypes) {
+    if (value === undefined) {
+        return [];
+    }
+    allowedTypes = Array.isArray(allowedTypes) ? allowedTypes : [allowedTypes];
+    const arrayOfTypeErrors = [];
+    if (!Array.isArray(value)) {
+        return validateDataTypeIfExists(value, path, allowedTypes);
+    }
+    else {
+        for (let i = 0; i < value.length; i++) {
+            arrayOfTypeErrors.push(...validateDataTypeIfExists(value[i], `${path}[${i}]`, allowedTypes));
+        }
+    }
+    return arrayOfTypeErrors;
+}
+function validateDataTypeIfExists(value, path, allowedDataTypes) {
+    if (value === undefined) {
+        return [];
+    }
+    allowedDataTypes = Array.isArray(allowedDataTypes) ? allowedDataTypes : [allowedDataTypes];
+    const errors = [];
+    const foundDataType = typeof value;
+    if (!allowedDataTypes.includes(foundDataType)) {
+        errors.push({
+            message: `Found data type ${foundDataType} allowed type(s) are ${allowedDataTypes.join(', ')}`,
+            path
+        });
+    }
+    return errors;
+}
+function validateOnlyOneOf(value, path, firstKey, secondKey) {
+    const keys = Object.keys(value);
+    if (keys.includes(firstKey) && keys.includes(secondKey)) {
+        return [
+            {
+                message: `Only one of ${firstKey} or ${secondKey} is allowed, found both`,
+                path
+            }
+        ];
+    }
+    return [];
+}
+function validateStringOrArrayStringCallback(statement, fieldName, path, callback) {
+    if (statement === undefined || !statement[fieldName] || !callback) {
+        return [];
+    }
+    const value = statement[fieldName];
+    path = `${path}.${fieldName}`;
+    if (typeof value === 'string') {
+        return callback(value, path);
+    }
+    else if (Array.isArray(value)) {
+        const errors = [];
+        for (let i = 0; i < value.length; i++) {
+            errors.push(...callback(value[i], `${path}[${i}]`));
+        }
+        return errors;
+    }
+    //If it's not a string or string array that is caught elsewhere
+    return [];
+}
+//# sourceMappingURL=validate.js.map

package/dist/cjs/validate/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../../src/validate/validate.ts"],"names":[],"mappings":";;AAsDA,oDA0CC;AAhGD,0CAAuE;AAOvE,MAAM,YAAY,GAAG,iBAAiB,CAAA;AACtC,MAAM,WAAW,GAAG,uBAAuB,CAAA;AAE3C,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC,CAAA;AACjE,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;IACnC,KAAK;IACL,QAAQ;IACR,QAAQ;IACR,WAAW;IACX,UAAU;IACV,aAAa;IACb,WAAW;IACX,cAAc;IACd,WAAW;CACZ,CAAC,CAAA;AACF,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC,CAAA;AACtF,MAAM,6BAA6B,GAAG,iBAAiB,CAAA;AACvD,MAAM,mBAAmB,GAAG,CAAC,cAAc,EAAE,aAAa,CAAU,CAAA;AAGpE;;;;;;GAMG;AACH,SAAS,oBAAoB,CAAC,WAAmB;IAC/C,KAAK,MAAM,kBAAkB,IAAI,mBAAmB,EAAE,CAAC;QACrD,IAAI,IAAA,gCAAqB,EAAC,WAAW,EAAE,kBAAkB,CAAC,EAAE,CAAC;YAC3D,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAaD,SAAgB,oBAAoB,CAClC,cAAmB,EACnB,sBAA2C,EAAE;IAE7C,MAAM,SAAS,GAAsB,EAAE,CAAA;IACvC,IAAI,OAAO,cAAc,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO;YACL,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,2CAA2C,OAAO,cAAc,EAAE,EAAE;SAC1F,CAAA;IACH,CAAC;SAAM,IAAI,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QACzC,OAAO,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,6CAA6C,EAAE,CAAC,CAAA;IAC/E,CAAC;IAED,SAAS,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,cAAc,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC,CAAA;IAEtE,IAAI,mBAAmB,CAAC,eAAe,EAAE,CAAC;QACxC,SAAS,CAAC,IAAI,CAAC,GAAG,mBAAmB,CAAC,eAAe,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAA;IACpF,CAAC;SAAM,CAAC;QACN,SAAS,CAAC,IAAI,CAAC,GAAG,qBAAqB,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAA;IAClE,CAAC;IAED,SAAS,CAAC,IAAI,CAAC,GAAG,wBAAwB,CAAC,cAAc,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAA;IAC9E,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,CAAC;QAC9B,SAAS,CAAC,IAAI,CAAC;YACb,IAAI,EAAE,EAAE;YACR,OAAO,EAAE,uBAAuB;SACjC,CAAC,CAAA;IACJ,CAAC;IACD,SAAS,CAAC,IAAI,CACZ,GAAG,iCAAiC,CAAC,cAAc,CAAC,SAAS,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CACxF,CAAA;IACD,IAAI,OAAO,cAAc,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7F,SAAS,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,cAAc,CAAC,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,CAAC,CAAA;IAClG,CAAC;SAAM,IAAI,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC;QACnD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,cAAc,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACzD,SAAS,CAAC,IAAI,CACZ,GAAG,iBAAiB,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAC1F,CAAA;QACH,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAY;IACzC,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QAC9C,OAAO,EAAE,CAAA;IACX,CAAC;IACD,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO;YACL;gBACE,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,qCAAqC;aAC/C;SACF,CAAA;IACH,CAAC;IAED,IAAI,OAAO,KAAK,YAAY,IAAI,OAAO,KAAK,YAAY,EAAE,CAAC;QACzD,OAAO,EAAE,CAAA;IACX,CAAC;IAED,OAAO;QACL;YACE,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,qDAAqD;SAC/D;KACF,CAAA;AACH,CAAC;AAED,SAAS,iBAAiB,CACxB,SAAc,EACd,IAAY,EACZ,mBAAwC;IAExC,MAAM,eAAe,GAAsB,EAAE,CAAA;IAC7C,eAAe,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,SAAS,EAAE,oBAAoB,EAAE,IAAI,CAAC,CAAC,CAAA;IAC5E,eAAe,CAAC,IAAI,CAAC,GAAG,wBAAwB,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,IAAI,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAA;IAEzF,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;QACtB,eAAe,CAAC,IAAI,CAAC;YACnB,IAAI,EAAE,GAAG,IAAI,EAAE;YACf,OAAO,EAAE,sDAAsD;SAChE,CAAC,CAAA;IACJ,CAAC;SAAM,IAAI,SAAS,CAAC,MAAM,KAAK,OAAO,IAAI,SAAS,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QACvE,eAAe,CAAC,IAAI,CAAC;YACnB,IAAI,EAAE,GAAG,IAAI,SAAS;YACtB,OAAO,EAAE,sDAAsD;SAChE,CAAC,CAAA;IACJ,CAAC;IACD,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,iBAAiB,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;IAEzF,eAAe,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAA;IAClF,eAAe,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC,CAAA;IACtF,eAAe,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC,CAAA;IAExF,eAAe,CAAC,IAAI,CAClB,GAAG,iCAAiC,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,IAAI,SAAS,EAAE,QAAQ,CAAC,CACnF,CAAA;IACD,eAAe,CAAC,IAAI,CAClB,GAAG,iCAAiC,CAAC,SAAS,CAAC,SAAS,EAAE,GAAG,IAAI,YAAY,EAAE,QAAQ,CAAC,CACzF,CAAA;IAED,eAAe,CAAC,IAAI,CAAC,GAAG,uBAAuB,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,IAAI,SAAS,CAAC,CAAC,CAAA;IACpF,eAAe,CAAC,IAAI,CAAC,GAAG,uBAAuB,CAAC,SAAS,CAAC,SAAS,EAAE,GAAG,IAAI,YAAY,CAAC,CAAC,CAAA;IAE1F,eAAe,CAAC,IAAI,CAClB,GAAG,mCAAmC,CACpC,SAAS,EACT,QAAQ,EACR,IAAI,EACJ,mBAAmB,CAAC,cAAc,CACnC,CACF,CAAA;IACD,eAAe,CAAC,IAAI,CAClB,GAAG,mCAAmC,CACpC,SAAS,EACT,WAAW,EACX,IAAI,EACJ,mBAAmB,CAAC,iBAAiB,CACtC,CACF,CAAA;IAED,eAAe,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,SAAS,CAAC,QAAQ,EAAE,GAAG,IAAI,WAAW,CAAC,CAAC,CAAA;IACjF,eAAe,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,SAAS,CAAC,WAAW,EAAE,GAAG,IAAI,cAAc,CAAC,CAAC,CAAA;IAEvF,eAAe,CAAC,IAAI,CAClB,GAAG,wBAAwB,CAAC,SAAS,CAAC,SAAS,EAAE,GAAG,IAAI,YAAY,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAC5F,CAAA;IACD,eAAe,CAAC,IAAI,CAClB,GAAG,wBAAwB,CAAC,SAAS,CAAC,YAAY,EAAE,GAAG,IAAI,eAAe,EAAE;QAC1E,QAAQ;QACR,QAAQ;KACT,CAAC,CACH,CAAA;IACD,eAAe,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,SAAS,CAAC,SAAS,EAAE,GAAG,IAAI,YAAY,CAAC,CAAC,CAAA;IACpF,eAAe,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,SAAS,CAAC,YAAY,EAAE,GAAG,IAAI,eAAe,CAAC,CAAC,CAAA;IAE1F,yEAAyE;IACzE,eAAe,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,SAAS,CAAC,SAAS,EAAE,GAAG,IAAI,YAAY,CAAC,CAAC,CAAA;IACpF,OAAO,eAAe,CAAA;AACxB,CAAC;AAED,SAAS,iBAAiB,CAAC,SAAc,EAAE,IAAY;IACrD,MAAM,eAAe,GAAsB,EAAE,CAAA;IAE7C,IAAI,SAAS,KAAK,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC7D,OAAO,EAAE,CAAA;IACX,CAAC;IACD,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAClC,eAAe,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,SAAS,EAAE,oBAAoB,EAAE,IAAI,CAAC,CAAC,CAAA;QAC5E,eAAe,CAAC,IAAI,CAClB,GAAG,iCAAiC,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,IAAI,MAAM,EAAE,QAAQ,CAAC,CAC7E,CAAA;QACD,eAAe,CAAC,IAAI,CAClB,GAAG,iCAAiC,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,UAAU,EAAE,QAAQ,CAAC,CACrF,CAAA;QACD,eAAe,CAAC,IAAI,CAClB,GAAG,iCAAiC,CAAC,SAAS,CAAC,SAAS,EAAE,GAAG,IAAI,YAAY,EAAE,QAAQ,CAAC,CACzF,CAAA;QACD,eAAe,CAAC,IAAI,CAClB,GAAG,iCAAiC,CAClC,SAAS,CAAC,aAAa,EACvB,GAAG,IAAI,gBAAgB,EACvB,QAAQ,CACT,CACF,CAAA;IACH,CAAC;IAED,OAAO,eAAe,CAAA;AACxB,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAa,EAAE,IAAY;IACnD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,EAAE,CAAA;IACX,CAAC;IACD,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,OAAO,EAAE,CAAA;IACX,CAAC;SAAM,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnC,MAAM,gBAAgB,GAAsB,EAAE,CAAA;QAC9C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACzC,IAAI,OAAO,QAAQ,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACpC,gBAAgB,CAAC,IAAI,CAAC;oBACpB,OAAO,EAAE,6DAA6D,OAAO,QAAQ,CAAC,CAAC,CAAC,EAAE;oBAC1F,IAAI,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG;iBACtB,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;QACD,OAAO,gBAAgB,CAAA;IACzB,CAAC;IACD,OAAO;QACL;YACE,IAAI;YACJ,OAAO,EAAE,sCAAsC;SAChD;KACF,CAAA;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,MAAW,EAAE,IAAY;IACxD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAC5C,OAAO,EAAE,CAAA;IACX,CAAC;IACD,kCAAkC;IAClC,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,oBAAoB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IAC3C,CAAC;SAAM,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,MAAM,YAAY,GAAsB,EAAE,CAAA;QAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;YACvB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,YAAY,CAAC,IAAI,CAAC,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;YACxE,CAAC;QACH,CAAC;QACD,OAAO,YAAY,CAAA;IACrB,CAAC;IACD,OAAO,EAAE,CAAA;AACX,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAc,EAAE,IAAY;IACxD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,EAAE,CAAA;IACX,CAAC;IACD,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,EAAE,CAAA;IACnC,MAAM,eAAe,GAAG,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAClD,IAAI,eAAe,KAAK,CAAC,CAAC,IAAI,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACrF,OAAO;YACL;gBACE,IAAI;gBACJ,OAAO,EAAE,kDAAkD;aAC5D;SACF,CAAA;IACH,CAAC;IAED,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAA;IACvD,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,eAAe,GAAG,CAAC,CAAC,CAAA;IACvD,MAAM,MAAM,GAAsB,EAAE,CAAA;IACpC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC;YACV,IAAI;YACJ,OAAO,EAAE,wDAAwD;SAClE,CAAC,CAAA;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACnD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI;YACJ,OAAO,EAAE,kGAAkG;SAC5G,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,iBAAiB,CAAC,SAAc,EAAE,IAAY;IACrD,MAAM,eAAe,GAAsB,EAAE,CAAA;IAC7C,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QAClD,OAAO,EAAE,CAAA;IACX,CAAC;IACD,eAAe,CAAC,IAAI,CAAC,GAAG,wBAAwB,CAAC,SAAS,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAA;IAC5E,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO,eAAe,CAAA;IACxB,CAAC;SAAM,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACpC,eAAe,CAAC,IAAI,CAAC;YACnB,OAAO,EAAE,6CAA6C;YACtD,IAAI;SACL,CAAC,CAAA;QACF,OAAO,eAAe,CAAA;IACxB,CAAC;IAED,MAAM,kBAAkB,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACjD,KAAK,MAAM,QAAQ,IAAI,kBAAkB,EAAE,CAAC;QAC1C,sBAAsB;QACtB,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClD,eAAe,CAAC,IAAI,CAAC;gBACnB,IAAI,EAAE,GAAG,IAAI,KAAK,QAAQ,EAAE;gBAC5B,OAAO,EAAE,+BAA+B;aACzC,CAAC,CAAA;QACJ,CAAC;QACD,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAC7C,IAAI,eAAe,KAAK,CAAC,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAChF,eAAe,CAAC,IAAI,CAAC;gBACnB,IAAI,EAAE,GAAG,IAAI,KAAK,QAAQ,EAAE;gBAC5B,OAAO,EAAE,+BAA+B;aACzC,CAAC,CAAA;QACJ,CAAC;aAAM,IAAI,eAAe,KAAK,CAAC,CAAC,EAAE,CAAC;YAClC,MAAM,WAAW,GAAG,IAAA,6BAAkB,EAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAE,CAAA;YACzD,IAAI,CAAC,oBAAoB,CAAC,WAAW,CAAC,EAAE,CAAC;gBACvC,eAAe,CAAC,IAAI,CAAC;oBACnB,IAAI,EAAE,GAAG,IAAI,KAAK,QAAQ,EAAE;oBAC5B,OAAO,EAAE,mEAAmE;iBAC7E,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;QAED,eAAe,CAAC,IAAI,CAClB,GAAG,wBAAwB,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,GAAG,IAAI,IAAI,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAClF,CAAA;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YACvC,eAAe,CAAC,IAAI,CAAC;gBACnB,OAAO,EAAE,sDAAsD;gBAC/D,IAAI,EAAE,GAAG,IAAI,IAAI,QAAQ,EAAE;aAC5B,CAAC,CAAA;QACJ,CAAC;QAED,IAAI,OAAO,SAAS,CAAC,QAAQ,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YACnF,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAA;YACtD,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;gBAChC,eAAe,CAAC,IAAI,CAClB,GAAG,iCAAiC,CAClC,SAAS,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,EACxB,GAAG,IAAI,IAAI,QAAQ,IAAI,GAAG,EAAE,EAC5B,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAChC,CACF,CAAA;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,eAAe,CAAA;AACxB,CAAC;AAED,SAAS,YAAY,CAAC,MAAW,EAAE,WAAwB,EAAE,IAAY;IACvE,MAAM,SAAS,GAAsB,EAAE,CAAA;IAEvC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,SAAS,CAAC,IAAI,CAAC;gBACb,OAAO,EAAE,eAAe,GAAG,EAAE;gBAC7B,IAAI,EAAE,GAAG,IAAI,KAAK,GAAG,EAAE;aACxB,CAAC,CAAA;QACJ,CAAC;aAAM,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;YAC7D,SAAS,CAAC,IAAI,CAAC;gBACb,OAAO,EAAE,eAAe,GAAG,8BAA8B;gBACzD,IAAI,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE;aACvB,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,iCAAiC,CACxC,KAAU,EACV,IAAY,EACZ,YAA+C;IAE/C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,EAAE,CAAA;IACX,CAAC;IAED,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAA;IAC1E,MAAM,iBAAiB,GAAsB,EAAE,CAAA;IAC/C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,wBAAwB,CAAC,KAAK,EAAE,IAAI,EAAE,YAAY,CAAC,CAAA;IAC5D,CAAC;SAAM,CAAC;QACN,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,iBAAiB,CAAC,IAAI,CAAC,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,CAAA;QAC9F,CAAC;IACH,CAAC;IAED,OAAO,iBAAiB,CAAA;AAC1B,CAAC;AAED,SAAS,wBAAwB,CAC/B,KAAU,EACV,IAAY,EACZ,gBAAmD;IAEnD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,EAAE,CAAA;IACX,CAAC;IAED,gBAAgB,GAAG,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAA;IAC1F,MAAM,MAAM,GAAsB,EAAE,CAAA;IACpC,MAAM,aAAa,GAAG,OAAO,KAAK,CAAA;IAClC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,aAA+B,CAAC,EAAE,CAAC;QAChE,MAAM,CAAC,IAAI,CAAC;YACV,OAAO,EAAE,mBAAmB,aAAa,wBAAwB,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YAC9F,IAAI;SACL,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,iBAAiB,CACxB,KAAU,EACV,IAAY,EACZ,QAAgB,EAChB,SAAiB;IAEjB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC/B,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACxD,OAAO;YACL;gBACE,OAAO,EAAE,eAAe,QAAQ,OAAO,SAAS,yBAAyB;gBACzE,IAAI;aACL;SACF,CAAA;IACH,CAAC;IAED,OAAO,EAAE,CAAA;AACX,CAAC;AAED,SAAS,mCAAmC,CAC1C,SAAc,EACd,SAAiB,EACjB,IAAY,EACZ,QAA6D;IAE7D,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClE,OAAO,EAAE,CAAA;IACX,CAAC;IACD,MAAM,KAAK,GAAG,SAAS,CAAC,SAAS,CAAC,CAAA;IAClC,IAAI,GAAG,GAAG,IAAI,IAAI,SAAS,EAAE,CAAA;IAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;IAC9B,CAAC;SAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,MAAM,GAAsB,EAAE,CAAA;QACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;QACrD,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;IACD,+DAA+D;IAC/D,OAAO,EAAE,CAAA;AACX,CAAC"}

package/dist/cjs/validate/validateTypes.d.ts

@@ -0,0 +1,53 @@
+import { type ValidationError } from './validate.js';
+/**
+ * Validates an Identity Policy attached to an IAM role or user, or managed policy
+ *
+ * @param policy the policy to validate
+ * @returns an array of validation errors
+ */
+export declare function validateIdentityPolicy(policy: any): ValidationError[];
+/**
+ * Validates a Service Control Policy (SCP)
+ *
+ * @param policy the policy to validate
+ * @returns an array of validation errors
+ */
+export declare function validateServiceControlPolicy(policy: any): ValidationError[];
+/**
+ * Validates a Resource Policy attached to an S3 bucket, SQS queue, or other resource. \
+ *
+ * This is very generic and will not be able to validate all resource policies.
+ *
+ * @param policy the policy to validate
+ * @returns an array of validation errors
+ */
+export declare function validateResourcePolicy(policy: any): ValidationError[];
+/**
+ * Validates a Resource Control Policy (RCP)
+ *
+ * @param policy the policy to validate
+ * @returns an array of validation errors
+ */
+export declare function validateResourceControlPolicy(policy: any): ValidationError[];
+/**
+ * Validates a Trust Policy attached to a role
+ *
+ * @param policy the policy to validate
+ * @returns an array of validation errors
+ */
+export declare function validateTrustPolicy(policy: any): ValidationError[];
+/**
+ * Validates an VPC Endpoint Policy
+ *
+ * @param policy the policy to validate
+ * @returns an array of validation errors
+ */
+export declare function validateEndpointPolicy(policy: any): ValidationError[];
+/**
+ * Validates a session policy
+ *
+ * @param policy the policy to validate
+ * @returns an array of validation errors
+ */
+export declare function validateSessionPolicy(policy: any): ValidationError[];
+//# sourceMappingURL=validateTypes.d.ts.map

package/dist/cjs/validate/validateTypes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validateTypes.d.ts","sourceRoot":"","sources":["../../../src/validate/validateTypes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,KAAK,eAAe,EAAE,MAAM,eAAe,CAAA;AAE1E;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,GAAG,GAAG,eAAe,EAAE,CAarE;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,GAAG,GAAG,eAAe,EAAE,CAe3E;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,GAAG,GAAG,eAAe,EAAE,CASrE;AAED;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,GAAG,GAAG,eAAe,EAAE,CAoD5E;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,GAAG,GAAG,eAAe,EAAE,CAelE;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,GAAG,GAAG,eAAe,EAAE,CAkBrE;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,GAAG,GAAG,eAAe,EAAE,CAapE"}