@actsecurity/iam-simulate 0.1.173

package/dist/cjs/principal/principal.d.ts

@@ -0,0 +1,61 @@
+import { type Principal, type Statement } from '@actsecurity/iam-policy';
+import { type SimulationParameters } from '../core_engine/CoreSimulatorEngine.js';
+import { type PrincipalExplain, type StatementExplain } from '../explain/statementExplain.js';
+import { type AwsRequest } from '../request/request.js';
+interface PrincipalAnalysis {
+    explain: PrincipalExplain;
+    ignoredRoleSessionName?: boolean;
+}
+export type PrincipalMatchResult = 'Match' | 'NoMatch' | 'AccountLevelMatch' | 'SessionRoleMatch' | 'SessionUserMatch';
+/**
+ * Check to see if a request matches a Principal element in an IAM policy statement
+ *
+ * @param request the request to check
+ * @param principal the list of principals in the Principal element of the Statement
+ * @returns if the request matches the Principal element, and if so, how it matches
+ */
+export declare function requestMatchesPrincipal(request: AwsRequest, principal: Principal[], simulationParameters: SimulationParameters, allowOrDeny: 'Allow' | 'Deny'): {
+    matches: PrincipalMatchResult;
+    explains: PrincipalExplain[];
+    ignoredRoleSessionName?: boolean;
+};
+/**
+ * Check to see if a request matches a NotPrincipal element in an IAM policy statement
+ *
+ * @param request the request to check
+ * @param notPrincipal the list of principals in the NotPrincipal element of the Statement
+ * @returns
+ */
+export declare function requestMatchesNotPrincipal(request: AwsRequest, notPrincipal: Principal[], simulationParameters: SimulationParameters, allowOrDeny: 'Allow' | 'Deny'): {
+    matches: PrincipalMatchResult;
+    explains: PrincipalExplain[];
+};
+/**
+ * Check to see if a request matches a principal statement
+ *
+ * @param request the request to check
+ * @param principalStatement the principal statement to check the request against
+ * @returns if the request matches the principal statement, and if so, how it matches
+ */
+export declare function requestMatchesPrincipalStatement(request: AwsRequest, principalStatement: Principal, simulationParameters: SimulationParameters, allowOrDeny: 'Allow' | 'Deny'): PrincipalAnalysis;
+/**
+ * Get a user ARN from a federated user ARN
+ *
+ * @param federatedUserArn the federated user ARN
+ * @returns the user ARN for the federated user ARN
+ */
+export declare function userArnFromFederatedUserArn(federatedUserArn: string): string;
+/**
+ * Check if a request matches the Resource or NotResource elements of a statement.
+ *
+ * @param request the request to check
+ * @param statement the statement to check against
+ * @returns true if the request matches the resources in the statement, false otherwise
+ */
+export declare function requestMatchesStatementPrincipals(request: AwsRequest, statement: Statement, simulationParameters: SimulationParameters): {
+    matches: PrincipalMatchResult;
+    details: Pick<StatementExplain, 'principals' | 'notPrincipals' | 'noPrincipalElement'>;
+    ignoredRoleSessionName?: boolean;
+};
+export {};
+//# sourceMappingURL=principal.d.ts.map

package/dist/cjs/principal/principal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"principal.d.ts","sourceRoot":"","sources":["../../../src/principal/principal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,SAAS,EAAE,KAAK,SAAS,EAAE,MAAM,yBAAyB,CAAA;AAQxE,OAAO,EAAE,KAAK,oBAAoB,EAAE,MAAM,uCAAuC,CAAA;AACjF,OAAO,EAAE,KAAK,gBAAgB,EAAE,KAAK,gBAAgB,EAAE,MAAM,gCAAgC,CAAA;AAC7F,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAGvD,UAAU,iBAAiB;IACzB,OAAO,EAAE,gBAAgB,CAAA;IACzB,sBAAsB,CAAC,EAAE,OAAO,CAAA;CACjC;AAcD,MAAM,MAAM,oBAAoB,GAC9B,OAAO,GAAG,SAAS,GAAG,mBAAmB,GAAG,kBAAkB,GAAG,kBAAkB,CAAA;AAErF;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,UAAU,EACnB,SAAS,EAAE,SAAS,EAAE,EACtB,oBAAoB,EAAE,oBAAoB,EAC1C,WAAW,EAAE,OAAO,GAAG,MAAM,GAC5B;IACD,OAAO,EAAE,oBAAoB,CAAA;IAC7B,QAAQ,EAAE,gBAAgB,EAAE,CAAA;IAC5B,sBAAsB,CAAC,EAAE,OAAO,CAAA;CACjC,CA6DA;AAED;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,UAAU,EACnB,YAAY,EAAE,SAAS,EAAE,EACzB,oBAAoB,EAAE,oBAAoB,EAC1C,WAAW,EAAE,OAAO,GAAG,MAAM,GAC5B;IAAE,OAAO,EAAE,oBAAoB,CAAC;IAAC,QAAQ,EAAE,gBAAgB,EAAE,CAAA;CAAE,CAyCjE;AAED;;;;;;GAMG;AACH,wBAAgB,gCAAgC,CAC9C,OAAO,EAAE,UAAU,EACnB,kBAAkB,EAAE,SAAS,EAC7B,oBAAoB,EAAE,oBAAoB,EAC1C,WAAW,EAAE,OAAO,GAAG,MAAM,GAC5B,iBAAiB,CAyKnB;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,gBAAgB,EAAE,MAAM,GAAG,MAAM,CAK5E;AAoED;;;;;;GAMG;AACH,wBAAgB,iCAAiC,CAC/C,OAAO,EAAE,UAAU,EACnB,SAAS,EAAE,SAAS,EACpB,oBAAoB,EAAE,oBAAoB,GACzC;IACD,OAAO,EAAE,oBAAoB,CAAA;IAC7B,OAAO,EAAE,IAAI,CAAC,gBAAgB,EAAE,YAAY,GAAG,eAAe,GAAG,oBAAoB,CAAC,CAAA;IACtF,sBAAsB,CAAC,EAAE,OAAO,CAAA;CACjC,CAmBA"}

package/dist/cjs/principal/principal.js

@@ -0,0 +1,357 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.requestMatchesPrincipal = requestMatchesPrincipal;
+exports.requestMatchesNotPrincipal = requestMatchesNotPrincipal;
+exports.requestMatchesPrincipalStatement = requestMatchesPrincipalStatement;
+exports.userArnFromFederatedUserArn = userArnFromFederatedUserArn;
+exports.requestMatchesStatementPrincipals = requestMatchesStatementPrincipals;
+const iam_utils_1 = require("@actsecurity/iam-utils");
+const requestPrincipal_js_1 = require("../request/requestPrincipal.js");
+/**
+ * Check to see if a request matches a Principal element in an IAM policy statement
+ *
+ * @param request the request to check
+ * @param principal the list of principals in the Principal element of the Statement
+ * @returns if the request matches the Principal element, and if so, how it matches
+ */
+function requestMatchesPrincipal(request, principal, simulationParameters, allowOrDeny) {
+    const analyses = principal.map((principalStatement) => requestMatchesPrincipalStatement(request, principalStatement, simulationParameters, allowOrDeny));
+    const explains = analyses.map((a) => a.explain);
+    const anyIgnore = analyses.some((any) => any.ignoredRoleSessionName);
+    const ignoredRoleSessionName = anyIgnore ? true : undefined;
+    // First check if any principal match without ignoring the role session name
+    if (analyses.some((anys) => anys.explain.matches === 'Match' && !anys.ignoredRoleSessionName)) {
+        return {
+            matches: 'Match',
+            explains,
+            ignoredRoleSessionName
+        };
+    }
+    if (explains.some((exp) => exp.matches === 'SessionUserMatch')) {
+        return {
+            matches: 'SessionUserMatch',
+            explains,
+            ignoredRoleSessionName
+        };
+    }
+    if (explains.some((exp) => exp.matches === 'SessionRoleMatch')) {
+        return {
+            matches: 'SessionRoleMatch',
+            explains,
+            ignoredRoleSessionName
+        };
+    }
+    // If there was a match, in Discovery mode, return a match and check for ignoredRoleSessionName
+    if (simulationParameters.simulationMode === 'Discovery' &&
+        analyses.some((any) => any.explain.matches === 'Match')) {
+        // The session role name could have been ignored in any statement
+        return {
+            matches: 'Match',
+            explains,
+            ignoredRoleSessionName
+        };
+    }
+    if (explains.some((exp) => exp.matches === 'AccountLevelMatch')) {
+        return {
+            matches: 'AccountLevelMatch',
+            explains,
+            ignoredRoleSessionName
+        };
+    }
+    return {
+        matches: 'NoMatch',
+        explains,
+        ignoredRoleSessionName
+    };
+}
+/**
+ * Check to see if a request matches a NotPrincipal element in an IAM policy statement
+ *
+ * @param request the request to check
+ * @param notPrincipal the list of principals in the NotPrincipal element of the Statement
+ * @returns
+ */
+function requestMatchesNotPrincipal(request, notPrincipal, simulationParameters, allowOrDeny) {
+    // const matches = notPrincipal.map(principalStatement => requestMatchesPrincipalStatement(request, principalStatement))
+    const analyses = notPrincipal.map((principalStatement) => {
+        const analysis = requestMatchesPrincipalStatement(request, principalStatement, simulationParameters, allowOrDeny);
+        /**
+         * Need to do research on this. If there is an account level match on a NotPrincipal, does that
+         * mean it tentatively matches the NotPrincipal, or does it mean it does not match the NotPrincipal?
+         *
+         * We need to test this.
+         */
+        // Invert the match result for NotPrincipal
+        if (analysis.explain.matches === 'Match' ||
+            analysis.explain.matches === 'AccountLevelMatch' ||
+            analysis.explain.matches === 'SessionRoleMatch' ||
+            analysis.explain.matches === 'SessionUserMatch') {
+            analysis.explain.matches = 'NoMatch';
+        }
+        else {
+            analysis.explain.matches = 'Match';
+        }
+        return analysis;
+    });
+    if (analyses.some((exp) => exp.explain.matches === 'NoMatch')) {
+        return {
+            matches: 'NoMatch',
+            explains: analyses.map((a) => a.explain)
+        };
+    }
+    return {
+        matches: 'Match',
+        explains: analyses.map((a) => a.explain)
+    };
+}
+/**
+ * Check to see if a request matches a principal statement
+ *
+ * @param request the request to check
+ * @param principalStatement the principal statement to check the request against
+ * @returns if the request matches the principal statement, and if so, how it matches
+ */
+function requestMatchesPrincipalStatement(request, principalStatement, simulationParameters, allowOrDeny) {
+    const requestPrincipal = request.principal;
+    if (requestPrincipal.isAnonymous()) {
+        return {
+            explain: {
+                matches: principalStatement.isWildcardPrincipal() ? 'Match' : 'NoMatch',
+                principal: principalStatement.value()
+            }
+        };
+    }
+    (0, requestPrincipal_js_1.assertAuthenticatedRequestPrincipal)(requestPrincipal);
+    if (principalStatement.isServicePrincipal()) {
+        if (principalStatement.service() === requestPrincipal.value()) {
+            return {
+                explain: {
+                    matches: 'Match',
+                    principal: principalStatement.value()
+                }
+            };
+        }
+        return {
+            explain: {
+                matches: 'NoMatch',
+                principal: principalStatement.value()
+            }
+        };
+    }
+    if (principalStatement.isCanonicalUserPrincipal()) {
+        if (principalStatement.canonicalUser() === requestPrincipal.value()) {
+            return {
+                explain: {
+                    matches: 'Match',
+                    principal: principalStatement.value()
+                }
+            };
+        }
+        return {
+            explain: {
+                matches: 'NoMatch',
+                principal: principalStatement.value()
+            }
+        };
+    }
+    if (principalStatement.isFederatedPrincipal()) {
+        if (principalStatement.federated() === requestPrincipal.value()) {
+            return {
+                explain: {
+                    matches: 'Match',
+                    principal: principalStatement.value()
+                }
+            };
+        }
+        return {
+            explain: {
+                matches: 'NoMatch',
+                principal: principalStatement.value()
+            }
+        };
+    }
+    if (principalStatement.isWildcardPrincipal()) {
+        return {
+            explain: {
+                matches: 'Match',
+                principal: principalStatement.value()
+            }
+        };
+    }
+    if (principalStatement.isAccountPrincipal()) {
+        if (principalStatement.accountId() === requestPrincipal.accountId()) {
+            return {
+                explain: {
+                    matches: 'AccountLevelMatch',
+                    principal: principalStatement.value()
+                }
+            };
+        }
+        return {
+            explain: {
+                matches: 'NoMatch',
+                principal: principalStatement.value()
+            }
+        };
+    }
+    if (principalStatement.isAwsPrincipal()) {
+        if ((0, iam_utils_1.isAssumedRoleArn)(requestPrincipal.value())) {
+            const sessionArn = requestPrincipal.value();
+            if (roleArnMatchesAssumedRoleSession(principalStatement.arn(), sessionArn)) {
+                return {
+                    explain: {
+                        matches: 'SessionRoleMatch',
+                        principal: principalStatement.value(),
+                        roleForSessionArn: principalStatement.arn()
+                    }
+                };
+            }
+        }
+        else if ((0, iam_utils_1.isFederatedUserArn)(requestPrincipal.value())) {
+            const sessionArn = requestPrincipal.value();
+            const userArn = userArnFromFederatedUserArn(sessionArn);
+            if (principalStatement.arn() === userArn) {
+                return {
+                    explain: {
+                        matches: 'SessionUserMatch',
+                        principal: principalStatement.value(),
+                        userForSessionArn: userArn
+                    }
+                };
+            }
+        }
+        if (principalStatement.arn() === requestPrincipal.value()) {
+            return {
+                explain: {
+                    matches: 'Match',
+                    principal: principalStatement.value()
+                }
+            };
+        }
+        /*
+          If:
+            - The simulation mode is Discovery
+            - The principal in the statement is an assumed role ARN
+            - The principal in the request is a Role or assumed role ARN
+            - The base role ARN of the principal in the request matches the base role ARN in the statement
+          Then:
+            - Return a Match for the principal if Allow, or NoMatch if Deny
+            - Indicate that the role session name was ignored for evaluation purposes
+        */
+        if (simulationParameters.simulationMode === 'Discovery' &&
+            (0, iam_utils_1.isAssumedRoleArn)(principalStatement.arn())) {
+            const requestRoleArn = requestPrincipal.value();
+            let roleMatchesSession = false;
+            if ((0, iam_utils_1.isIamRoleArn)(requestRoleArn)) {
+                roleMatchesSession = roleArnMatchesAssumedRoleSession(requestRoleArn, principalStatement.arn());
+            }
+            else if ((0, iam_utils_1.isAssumedRoleArn)(requestRoleArn)) {
+                const principalRoleArn = (0, iam_utils_1.convertAssumedRoleArnToRoleArn)(principalStatement.arn());
+                roleMatchesSession = principalRoleArn === (0, iam_utils_1.convertAssumedRoleArnToRoleArn)(requestRoleArn);
+            }
+            if (roleMatchesSession) {
+                const discoveryMatch = allowOrDeny === 'Allow' ? 'Match' : 'NoMatch';
+                return {
+                    explain: {
+                        matches: discoveryMatch,
+                        principal: principalStatement.value()
+                    },
+                    ignoredRoleSessionName: true // This is a role session match with the session name ignored
+                };
+            }
+        }
+    }
+    return {
+        explain: {
+            matches: 'NoMatch',
+            principal: principalStatement.value()
+        }
+    };
+}
+/**
+ * Get a user ARN from a federated user ARN
+ *
+ * @param federatedUserArn the federated user ARN
+ * @returns the user ARN for the federated user ARN
+ */
+function userArnFromFederatedUserArn(federatedUserArn) {
+    const stsParts = federatedUserArn.split(':');
+    const resource = stsParts.at(-1);
+    const username = resource.slice(resource.indexOf('/') + 1);
+    return `arn:${stsParts[1]}:iam::${stsParts[4]}:user/${username}`;
+}
+/**
+ * Get the final segment from a slash-delimited path.
+ *
+ * @param path the slash-delimited path to inspect
+ * @returns the final path segment, or undefined if the path is undefined or empty
+ */
+function lastPathSegment(path) {
+    if (!path) {
+        return undefined;
+    }
+    const lastSlashIndex = path.lastIndexOf('/');
+    if (lastSlashIndex === -1) {
+        return path;
+    }
+    return path.slice(lastSlashIndex + 1);
+}
+/**
+ * Get the first segment from a slash-delimited path.
+ *
+ * @param path the slash-delimited path to inspect
+ * @returns the first path segment, or undefined if the path is undefined, empty, or has no slash
+ */
+function firstPathSegment(path) {
+    if (!path) {
+        return undefined;
+    }
+    const firstSlashIndex = path.indexOf('/');
+    if (firstSlashIndex === -1) {
+        return undefined;
+    }
+    return path.slice(0, firstSlashIndex);
+}
+/**
+ * Check whether an IAM role ARN represents the role for an assumed-role session ARN.
+ *
+ * @param roleArn the IAM role ARN to compare
+ * @param sessionArn the assumed-role session ARN to compare
+ * @returns true if the role ARN and session ARN have the same partition, account, and role name
+ */
+function roleArnMatchesAssumedRoleSession(roleArn, sessionArn) {
+    if (!(0, iam_utils_1.isIamRoleArn)(roleArn) || !(0, iam_utils_1.isAssumedRoleArn)(sessionArn)) {
+        return false;
+    }
+    const roleArnParts = (0, iam_utils_1.splitArnParts)(roleArn);
+    const sessionArnParts = (0, iam_utils_1.splitArnParts)(sessionArn);
+    if (roleArnParts.partition !== sessionArnParts.partition ||
+        roleArnParts.accountId !== sessionArnParts.accountId) {
+        return false;
+    }
+    const roleName = lastPathSegment(roleArnParts.resourcePath);
+    const sessionRoleName = firstPathSegment(sessionArnParts.resourcePath);
+    if (!roleName || !sessionRoleName) {
+        return false;
+    }
+    return roleName.localeCompare(sessionRoleName, 'en', { sensitivity: 'base' }) === 0;
+}
+/**
+ * Check if a request matches the Resource or NotResource elements of a statement.
+ *
+ * @param request the request to check
+ * @param statement the statement to check against
+ * @returns true if the request matches the resources in the statement, false otherwise
+ */
+function requestMatchesStatementPrincipals(request, statement, simulationParameters) {
+    if (statement.isPrincipalStatement()) {
+        const { matches, explains, ignoredRoleSessionName } = requestMatchesPrincipal(request, statement.principals(), simulationParameters, statement.effect());
+        return { matches, details: { principals: explains }, ignoredRoleSessionName };
+    }
+    else if (statement.isNotPrincipalStatement()) {
+        const { matches, explains } = requestMatchesNotPrincipal(request, statement.notPrincipals(), simulationParameters, statement.effect());
+        return { matches, details: { notPrincipals: explains } };
+    }
+    return { matches: 'NoMatch', details: { noPrincipalElement: true } };
+}
+//# sourceMappingURL=principal.js.map

package/dist/cjs/principal/principal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"principal.js","sourceRoot":"","sources":["../../../src/principal/principal.ts"],"names":[],"mappings":";;AAwCA,0DAsEC;AASD,gEA8CC;AASD,4EA8KC;AAQD,kEAKC;AA2ED,8EA2BC;AA9cD,sDAM+B;AAI/B,wEAAoF;AAsBpF;;;;;;GAMG;AACH,SAAgB,uBAAuB,CACrC,OAAmB,EACnB,SAAsB,EACtB,oBAA0C,EAC1C,WAA6B;IAM7B,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,kBAAkB,EAAE,EAAE,CACpD,gCAAgC,CAAC,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,WAAW,CAAC,CACjG,CAAA;IAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;IAC/C,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAA;IACpE,MAAM,sBAAsB,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;IAE3D,4EAA4E;IAC5E,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,EAAE,CAAC;QAC9F,OAAO;YACL,OAAO,EAAE,OAAO;YAChB,QAAQ;YACR,sBAAsB;SACvB,CAAA;IACH,CAAC;IAED,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,KAAK,kBAAkB,CAAC,EAAE,CAAC;QAC/D,OAAO;YACL,OAAO,EAAE,kBAAkB;YAC3B,QAAQ;YACR,sBAAsB;SACvB,CAAA;IACH,CAAC;IAED,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,KAAK,kBAAkB,CAAC,EAAE,CAAC;QAC/D,OAAO;YACL,OAAO,EAAE,kBAAkB;YAC3B,QAAQ;YACR,sBAAsB;SACvB,CAAA;IACH,CAAC;IAED,+FAA+F;IAC/F,IACE,oBAAoB,CAAC,cAAc,KAAK,WAAW;QACnD,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,EACvD,CAAC;QACD,iEAAiE;QAEjE,OAAO;YACL,OAAO,EAAE,OAAO;YAChB,QAAQ;YACR,sBAAsB;SACvB,CAAA;IACH,CAAC;IAED,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,KAAK,mBAAmB,CAAC,EAAE,CAAC;QAChE,OAAO;YACL,OAAO,EAAE,mBAAmB;YAC5B,QAAQ;YACR,sBAAsB;SACvB,CAAA;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE,SAAS;QAClB,QAAQ;QACR,sBAAsB;KACvB,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,0BAA0B,CACxC,OAAmB,EACnB,YAAyB,EACzB,oBAA0C,EAC1C,WAA6B;IAE7B,wHAAwH;IACxH,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,kBAAkB,EAAE,EAAE;QACvD,MAAM,QAAQ,GAAG,gCAAgC,CAC/C,OAAO,EACP,kBAAkB,EAClB,oBAAoB,EACpB,WAAW,CACZ,CAAA;QACD;;;;;WAKG;QAEH,2CAA2C;QAC3C,IACE,QAAQ,CAAC,OAAO,CAAC,OAAO,KAAK,OAAO;YACpC,QAAQ,CAAC,OAAO,CAAC,OAAO,KAAK,mBAAmB;YAChD,QAAQ,CAAC,OAAO,CAAC,OAAO,KAAK,kBAAkB;YAC/C,QAAQ,CAAC,OAAO,CAAC,OAAO,KAAK,kBAAkB,EAC/C,CAAC;YACD,QAAQ,CAAC,OAAO,CAAC,OAAO,GAAG,SAAS,CAAA;QACtC,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,OAAO,CAAC,OAAO,GAAG,OAAO,CAAA;QACpC,CAAC;QACD,OAAO,QAAQ,CAAA;IACjB,CAAC,CAAC,CAAA;IAEF,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,EAAE,CAAC;QAC9D,OAAO;YACL,OAAO,EAAE,SAAS;YAClB,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;SACzC,CAAA;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE,OAAO;QAChB,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;KACzC,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,gCAAgC,CAC9C,OAAmB,EACnB,kBAA6B,EAC7B,oBAA0C,EAC1C,WAA6B;IAE7B,MAAM,gBAAgB,GAAG,OAAO,CAAC,SAAS,CAAA;IAC1C,IAAI,gBAAgB,CAAC,WAAW,EAAE,EAAE,CAAC;QACnC,OAAO;YACL,OAAO,EAAE;gBACP,OAAO,EAAE,kBAAkB,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;gBACvE,SAAS,EAAE,kBAAkB,CAAC,KAAK,EAAE;aACtC;SACF,CAAA;IACH,CAAC;IACD,IAAA,yDAAmC,EAAC,gBAAgB,CAAC,CAAA;IAErD,IAAI,kBAAkB,CAAC,kBAAkB,EAAE,EAAE,CAAC;QAC5C,IAAI,kBAAkB,CAAC,OAAO,EAAE,KAAK,gBAAgB,CAAC,KAAK,EAAE,EAAE,CAAC;YAC9D,OAAO;gBACL,OAAO,EAAE;oBACP,OAAO,EAAE,OAAO;oBAChB,SAAS,EAAE,kBAAkB,CAAC,KAAK,EAAE;iBACtC;aACF,CAAA;QACH,CAAC;QACD,OAAO;YACL,OAAO,EAAE;gBACP,OAAO,EAAE,SAAS;gBAClB,SAAS,EAAE,kBAAkB,CAAC,KAAK,EAAE;aACtC;SACF,CAAA;IACH,CAAC;IAED,IAAI,kBAAkB,CAAC,wBAAwB,EAAE,EAAE,CAAC;QAClD,IAAI,kBAAkB,CAAC,aAAa,EAAE,KAAK,gBAAgB,CAAC,KAAK,EAAE,EAAE,CAAC;YACpE,OAAO;gBACL,OAAO,EAAE;oBACP,OAAO,EAAE,OAAO;oBAChB,SAAS,EAAE,kBAAkB,CAAC,KAAK,EAAE;iBACtC;aACF,CAAA;QACH,CAAC;QACD,OAAO;YACL,OAAO,EAAE;gBACP,OAAO,EAAE,SAAS;gBAClB,SAAS,EAAE,kBAAkB,CAAC,KAAK,EAAE;aACtC;SACF,CAAA;IACH,CAAC;IAED,IAAI,kBAAkB,CAAC,oBAAoB,EAAE,EAAE,CAAC;QAC9C,IAAI,kBAAkB,CAAC,SAAS,EAAE,KAAK,gBAAgB,CAAC,KAAK,EAAE,EAAE,CAAC;YAChE,OAAO;gBACL,OAAO,EAAE;oBACP,OAAO,EAAE,OAAO;oBAChB,SAAS,EAAE,kBAAkB,CAAC,KAAK,EAAE;iBACtC;aACF,CAAA;QACH,CAAC;QACD,OAAO;YACL,OAAO,EAAE;gBACP,OAAO,EAAE,SAAS;gBAClB,SAAS,EAAE,kBAAkB,CAAC,KAAK,EAAE;aACtC;SACF,CAAA;IACH,CAAC;IAED,IAAI,kBAAkB,CAAC,mBAAmB,EAAE,EAAE,CAAC;QAC7C,OAAO;YACL,OAAO,EAAE;gBACP,OAAO,EAAE,OAAO;gBAChB,SAAS,EAAE,kBAAkB,CAAC,KAAK,EAAE;aACtC;SACF,CAAA;IACH,CAAC;IAED,IAAI,kBAAkB,CAAC,kBAAkB,EAAE,EAAE,CAAC;QAC5C,IAAI,kBAAkB,CAAC,SAAS,EAAE,KAAK,gBAAgB,CAAC,SAAS,EAAE,EAAE,CAAC;YACpE,OAAO;gBACL,OAAO,EAAE;oBACP,OAAO,EAAE,mBAAmB;oBAC5B,SAAS,EAAE,kBAAkB,CAAC,KAAK,EAAE;iBACtC;aACF,CAAA;QACH,CAAC;QACD,OAAO;YACL,OAAO,EAAE;gBACP,OAAO,EAAE,SAAS;gBAClB,SAAS,EAAE,kBAAkB,CAAC,KAAK,EAAE;aACtC;SACF,CAAA;IACH,CAAC;IAED,IAAI,kBAAkB,CAAC,cAAc,EAAE,EAAE,CAAC;QACxC,IAAI,IAAA,4BAAgB,EAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC;YAC/C,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,EAAE,CAAA;YAC3C,IAAI,gCAAgC,CAAC,kBAAkB,CAAC,GAAG,EAAE,EAAE,UAAU,CAAC,EAAE,CAAC;gBAC3E,OAAO;oBACL,OAAO,EAAE;wBACP,OAAO,EAAE,kBAAkB;wBAC3B,SAAS,EAAE,kBAAkB,CAAC,KAAK,EAAE;wBACrC,iBAAiB,EAAE,kBAAkB,CAAC,GAAG,EAAE;qBAC5C;iBACF,CAAA;YACH,CAAC;QACH,CAAC;aAAM,IAAI,IAAA,8BAAkB,EAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC;YACxD,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,EAAE,CAAA;YAC3C,MAAM,OAAO,GAAG,2BAA2B,CAAC,UAAU,CAAC,CAAA;YACvD,IAAI,kBAAkB,CAAC,GAAG,EAAE,KAAK,OAAO,EAAE,CAAC;gBACzC,OAAO;oBACL,OAAO,EAAE;wBACP,OAAO,EAAE,kBAAkB;wBAC3B,SAAS,EAAE,kBAAkB,CAAC,KAAK,EAAE;wBACrC,iBAAiB,EAAE,OAAO;qBAC3B;iBACF,CAAA;YACH,CAAC;QACH,CAAC;QAED,IAAI,kBAAkB,CAAC,GAAG,EAAE,KAAK,gBAAgB,CAAC,KAAK,EAAE,EAAE,CAAC;YAC1D,OAAO;gBACL,OAAO,EAAE;oBACP,OAAO,EAAE,OAAO;oBAChB,SAAS,EAAE,kBAAkB,CAAC,KAAK,EAAE;iBACtC;aACF,CAAA;QACH,CAAC;QAED;;;;;;;;;UASE;QACF,IACE,oBAAoB,CAAC,cAAc,KAAK,WAAW;YACnD,IAAA,4BAAgB,EAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,EAC1C,CAAC;YACD,MAAM,cAAc,GAAG,gBAAgB,CAAC,KAAK,EAAE,CAAA;YAC/C,IAAI,kBAAkB,GAAG,KAAK,CAAA;YAC9B,IAAI,IAAA,wBAAY,EAAC,cAAc,CAAC,EAAE,CAAC;gBACjC,kBAAkB,GAAG,gCAAgC,CACnD,cAAc,EACd,kBAAkB,CAAC,GAAG,EAAE,CACzB,CAAA;YACH,CAAC;iBAAM,IAAI,IAAA,4BAAgB,EAAC,cAAc,CAAC,EAAE,CAAC;gBAC5C,MAAM,gBAAgB,GAAG,IAAA,0CAA8B,EAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,CAAA;gBACjF,kBAAkB,GAAG,gBAAgB,KAAK,IAAA,0CAA8B,EAAC,cAAc,CAAC,CAAA;YAC1F,CAAC;YAED,IAAI,kBAAkB,EAAE,CAAC;gBACvB,MAAM,cAAc,GAAG,WAAW,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAA;gBACpE,OAAO;oBACL,OAAO,EAAE;wBACP,OAAO,EAAE,cAAc;wBACvB,SAAS,EAAE,kBAAkB,CAAC,KAAK,EAAE;qBACtC;oBACD,sBAAsB,EAAE,IAAI,CAAC,6DAA6D;iBAC3F,CAAA;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE;YACP,OAAO,EAAE,SAAS;YAClB,SAAS,EAAE,kBAAkB,CAAC,KAAK,EAAE;SACtC;KACF,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,2BAA2B,CAAC,gBAAwB;IAClE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC5C,MAAM,QAAQ,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAA;IACjC,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;IAC1D,OAAO,OAAO,QAAQ,CAAC,CAAC,CAAC,SAAS,QAAQ,CAAC,CAAC,CAAC,SAAS,QAAQ,EAAE,CAAA;AAClE,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe,CAAC,IAAwB;IAC/C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,MAAM,cAAc,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;IAC5C,IAAI,cAAc,KAAK,CAAC,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAA;IACb,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,cAAc,GAAG,CAAC,CAAC,CAAA;AACvC,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,IAAwB;IAChD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACzC,IAAI,eAAe,KAAK,CAAC,CAAC,EAAE,CAAC;QAC3B,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAA;AACvC,CAAC;AAED;;;;;;GAMG;AACH,SAAS,gCAAgC,CAAC,OAAe,EAAE,UAAkB;IAC3E,IAAI,CAAC,IAAA,wBAAY,EAAC,OAAO,CAAC,IAAI,CAAC,IAAA,4BAAgB,EAAC,UAAU,CAAC,EAAE,CAAC;QAC5D,OAAO,KAAK,CAAA;IACd,CAAC;IAED,MAAM,YAAY,GAAG,IAAA,yBAAa,EAAC,OAAO,CAAC,CAAA;IAC3C,MAAM,eAAe,GAAG,IAAA,yBAAa,EAAC,UAAU,CAAC,CAAA;IACjD,IACE,YAAY,CAAC,SAAS,KAAK,eAAe,CAAC,SAAS;QACpD,YAAY,CAAC,SAAS,KAAK,eAAe,CAAC,SAAS,EACpD,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAED,MAAM,QAAQ,GAAG,eAAe,CAAC,YAAY,CAAC,YAAY,CAAC,CAAA;IAC3D,MAAM,eAAe,GAAG,gBAAgB,CAAC,eAAe,CAAC,YAAY,CAAC,CAAA;IACtE,IAAI,CAAC,QAAQ,IAAI,CAAC,eAAe,EAAE,CAAC;QAClC,OAAO,KAAK,CAAA;IACd,CAAC;IAED,OAAO,QAAQ,CAAC,aAAa,CAAC,eAAe,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,CAAA;AACrF,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,iCAAiC,CAC/C,OAAmB,EACnB,SAAoB,EACpB,oBAA0C;IAM1C,IAAI,SAAS,CAAC,oBAAoB,EAAE,EAAE,CAAC;QACrC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,sBAAsB,EAAE,GAAG,uBAAuB,CAC3E,OAAO,EACP,SAAS,CAAC,UAAU,EAAE,EACtB,oBAAoB,EACpB,SAAS,CAAC,MAAM,EAAsB,CACvC,CAAA;QACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,sBAAsB,EAAE,CAAA;IAC/E,CAAC;SAAM,IAAI,SAAS,CAAC,uBAAuB,EAAE,EAAE,CAAC;QAC/C,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,0BAA0B,CACtD,OAAO,EACP,SAAS,CAAC,aAAa,EAAE,EACzB,oBAAoB,EACpB,SAAS,CAAC,MAAM,EAAsB,CACvC,CAAA;QACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,QAAQ,EAAE,EAAE,CAAA;IAC1D,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE,EAAE,CAAA;AACtE,CAAC"}

package/dist/cjs/request/request.d.ts

@@ -0,0 +1,66 @@
+import { type ContextKey, type RequestContext } from '../requestContext.js';
+import { type SimulationRequestPrincipal } from '../simulation_engine/simulation.js';
+import { type RequestAction } from './requestAction.js';
+import { type RequestPrincipal } from './requestPrincipal.js';
+import { type RequestResource } from './requestResource.js';
+/**
+ * A request to be evaluated by the policy engine
+ */
+export interface AwsRequest {
+    principal: RequestPrincipal;
+    /**
+     * The action to be performed
+     */
+    action: RequestAction;
+    /**
+     * The resource to be acted upon
+     */
+    resource: RequestResource;
+    /**
+     * Whether the action is a wildcard-only action, meaning it does not support
+     * resource-level permissions and must use "*" as the resource. When true,
+     * only a literal "*" policy resource will match a "*" request resource;
+     * specific ARNs in the policy will not match.
+     */
+    wildcardOnlyAction: boolean;
+    /**
+     * The context of the request
+     */
+    context: RequestContext;
+    /**
+     * Checks to see if a context key is valid for the request and
+     * exists in the context
+     *
+     * @param key the key to check for existence
+     * @returns true if the key is valid for the request and exists in the request context.
+     */
+    contextKeyExists(key: string): boolean;
+    /**
+     * Gets the value of a context key, if it is valid for the request and exist, otherwise throws an error
+     * @param key the key to get the value of
+     *
+     * @returns the value of the context key
+     */
+    getContextKeyValue(key: string): ContextKey;
+}
+export declare class AwsRequestImpl implements AwsRequest {
+    readonly principalInput: SimulationRequestPrincipal;
+    readonly resourceIdentifier: {
+        resource: string;
+        accountId: string;
+    };
+    readonly actionString: string;
+    readonly context: RequestContext;
+    readonly wildcardOnlyAction: boolean;
+    private readonly requestPrincipal;
+    constructor(principalInput: SimulationRequestPrincipal, resourceIdentifier: {
+        resource: string;
+        accountId: string;
+    }, actionString: string, context: RequestContext, wildcardOnlyAction?: boolean);
+    get action(): RequestAction;
+    get resource(): RequestResource;
+    get principal(): RequestPrincipal;
+    contextKeyExists(key: string): boolean;
+    getContextKeyValue(key: string): ContextKey;
+}
+//# sourceMappingURL=request.d.ts.map

package/dist/cjs/request/request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request.d.ts","sourceRoot":"","sources":["../../../src/request/request.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,UAAU,EAAE,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAC3E,OAAO,EAAE,KAAK,0BAA0B,EAAE,MAAM,oCAAoC,CAAA;AACpF,OAAO,EAAE,KAAK,aAAa,EAAqB,MAAM,oBAAoB,CAAA;AAC1E,OAAO,EAA6B,KAAK,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AACxF,OAAO,EAAE,KAAK,eAAe,EAAuB,MAAM,sBAAsB,CAAA;AAEhF;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,gBAAgB,CAAA;IAE3B;;OAEG;IACH,MAAM,EAAE,aAAa,CAAA;IAErB;;OAEG;IACH,QAAQ,EAAE,eAAe,CAAA;IAEzB;;;;;OAKG;IACH,kBAAkB,EAAE,OAAO,CAAA;IAE3B;;OAEG;IACH,OAAO,EAAE,cAAc,CAAA;IAEvB;;;;;;OAMG;IACH,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;IAEtC;;;;;OAKG;IACH,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAAA;CAC5C;AAED,qBAAa,cAAe,YAAW,UAAU;aAK7B,cAAc,EAAE,0BAA0B;aAC1C,kBAAkB,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE;aAC3D,YAAY,EAAE,MAAM;aACpB,OAAO,EAAE,cAAc;IAPzC,SAAgB,kBAAkB,EAAE,OAAO,CAAA;IAC3C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAkB;gBAGjC,cAAc,EAAE,0BAA0B,EAC1C,kBAAkB,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,EAC3D,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,cAAc,EACvC,kBAAkB,CAAC,EAAE,OAAO;IAM9B,IAAI,MAAM,IAAI,aAAa,CAE1B;IAED,IAAI,QAAQ,IAAI,eAAe,CAK9B;IAED,IAAI,SAAS,IAAI,gBAAgB,CAEhC;IAEM,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAItC,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU;CAMnD"}

package/dist/cjs/request/request.js

@@ -0,0 +1,42 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AwsRequestImpl = void 0;
+const requestAction_js_1 = require("./requestAction.js");
+const requestPrincipal_js_1 = require("./requestPrincipal.js");
+const requestResource_js_1 = require("./requestResource.js");
+class AwsRequestImpl {
+    principalInput;
+    resourceIdentifier;
+    actionString;
+    context;
+    wildcardOnlyAction;
+    requestPrincipal;
+    constructor(principalInput, resourceIdentifier, actionString, context, wildcardOnlyAction) {
+        this.principalInput = principalInput;
+        this.resourceIdentifier = resourceIdentifier;
+        this.actionString = actionString;
+        this.context = context;
+        this.wildcardOnlyAction = wildcardOnlyAction ?? false;
+        this.requestPrincipal = (0, requestPrincipal_js_1.requestPrincipalFromInput)(this.principalInput);
+    }
+    get action() {
+        return new requestAction_js_1.RequestActionImpl(this.actionString);
+    }
+    get resource() {
+        return new requestResource_js_1.ResourceRequestImpl(this.resourceIdentifier.resource, this.resourceIdentifier.accountId);
+    }
+    get principal() {
+        return this.requestPrincipal;
+    }
+    contextKeyExists(key) {
+        return this.context.contextKeyExists(key);
+    }
+    getContextKeyValue(key) {
+        if (!this.contextKeyExists(key)) {
+            throw new Error(`Invalid context key: ${key}`);
+        }
+        return this.context.contextKeyValue(key);
+    }
+}
+exports.AwsRequestImpl = AwsRequestImpl;
+//# sourceMappingURL=request.js.map

package/dist/cjs/request/request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request.js","sourceRoot":"","sources":["../../../src/request/request.ts"],"names":[],"mappings":";;;AAEA,yDAA0E;AAC1E,+DAAwF;AACxF,6DAAgF;AAiDhF,MAAa,cAAc;IAKP;IACA;IACA;IACA;IAPF,kBAAkB,CAAS;IAC1B,gBAAgB,CAAkB;IAEnD,YACkB,cAA0C,EAC1C,kBAA2D,EAC3D,YAAoB,EACpB,OAAuB,EACvC,kBAA4B;QAJZ,mBAAc,GAAd,cAAc,CAA4B;QAC1C,uBAAkB,GAAlB,kBAAkB,CAAyC;QAC3D,iBAAY,GAAZ,YAAY,CAAQ;QACpB,YAAO,GAAP,OAAO,CAAgB;QAGvC,IAAI,CAAC,kBAAkB,GAAG,kBAAkB,IAAI,KAAK,CAAA;QACrD,IAAI,CAAC,gBAAgB,GAAG,IAAA,+CAAyB,EAAC,IAAI,CAAC,cAAc,CAAC,CAAA;IACxE,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,oCAAiB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;IACjD,CAAC;IAED,IAAI,QAAQ;QACV,OAAO,IAAI,wCAAmB,CAC5B,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAChC,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAClC,CAAA;IACH,CAAC;IAED,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,gBAAgB,CAAA;IAC9B,CAAC;IAEM,gBAAgB,CAAC,GAAW;QACjC,OAAO,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAA;IAC3C,CAAC;IAEM,kBAAkB,CAAC,GAAW;QACnC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,wBAAwB,GAAG,EAAE,CAAC,CAAA;QAChD,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC,CAAA;IAC1C,CAAC;CACF;AAxCD,wCAwCC"}

package/dist/cjs/request/requestAction.d.ts

@@ -0,0 +1,27 @@
+/**
+ * A service action: `"service:Action"`
+ */
+export interface RequestAction {
+    /**
+     * The raw string value of the action
+     */
+    value(): string;
+    /**
+     * The service of the action
+     *
+     * Guaranteed to be lowercase
+     */
+    service(): string;
+    /**
+     * The action within the service
+     */
+    action(): string;
+}
+export declare class RequestActionImpl implements RequestAction {
+    private readonly rawValue;
+    constructor(rawValue: string);
+    value(): string;
+    service(): string;
+    action(): string;
+}
+//# sourceMappingURL=requestAction.d.ts.map

package/dist/cjs/request/requestAction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"requestAction.d.ts","sourceRoot":"","sources":["../../../src/request/requestAction.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B;;OAEG;IACH,KAAK,IAAI,MAAM,CAAA;IAEf;;;;OAIG;IACH,OAAO,IAAI,MAAM,CAAA;IAEjB;;OAEG;IACH,MAAM,IAAI,MAAM,CAAA;CACjB;AAED,qBAAa,iBAAkB,YAAW,aAAa;IACzC,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,MAAM;IAEtC,KAAK,IAAI,MAAM;IAIf,OAAO,IAAI,MAAM;IAIjB,MAAM,IAAI,MAAM;CAGxB"}

package/dist/cjs/request/requestAction.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RequestActionImpl = void 0;
+class RequestActionImpl {
+    rawValue;
+    constructor(rawValue) {
+        this.rawValue = rawValue;
+    }
+    value() {
+        return this.rawValue;
+    }
+    service() {
+        return this.rawValue.split(':')[0].toLowerCase();
+    }
+    action() {
+        return this.rawValue.split(':')[1];
+    }
+}
+exports.RequestActionImpl = RequestActionImpl;
+//# sourceMappingURL=requestAction.js.map

package/dist/cjs/request/requestAction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"requestAction.js","sourceRoot":"","sources":["../../../src/request/requestAction.ts"],"names":[],"mappings":";;;AAsBA,MAAa,iBAAiB;IACC;IAA7B,YAA6B,QAAgB;QAAhB,aAAQ,GAAR,QAAQ,CAAQ;IAAG,CAAC;IAE1C,KAAK;QACV,OAAO,IAAI,CAAC,QAAQ,CAAA;IACtB,CAAC;IAEM,OAAO;QACZ,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAA;IACnD,CAAC;IAEM,MAAM;QACX,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IACpC,CAAC;CACF;AAdD,8CAcC"}