@actsecurity/iam-simulate 0.1.173

package/dist/esm/analysis/allowedConditions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"allowedConditions.js","sourceRoot":"","sources":["../../../src/analysis/allowedConditions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkB,MAAM,yBAAyB,CAAA;AACxD,OAAO,EASN,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAA0B,MAAM,yBAAyB,CAAA;AAEhE;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CACtC,SAA4B,EAC5B,UAAgD,EAChD,aAAsB;IAEtB,OAAO,4BAA4B,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,aAAa,CAAC,CAAA;AAClF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,6BAA6B,CAC3C,SAA4B,EAC5B,UAAgD,EAChD,aAAsB;IAEtB,IAAI,CAAC,SAAS,CAAC,iBAAiB,IAAI,SAAS,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7E,OAAO,KAAK,CAAC,+BAA+B,CAAC,CAAA;IAC/C,CAAC;IAED,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,EAAE,UAAU,EAAE,aAAa,CAAC,CAAA;IACvE,OAAO,EAAE,CAAC,SAAS,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAA;AAC/F,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAC7B,SAAoB,EACpB,MAA8B;IAE9B,MAAM,EAAE,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,CAAA;IACxC,MAAM,GAAG,GAAG,SAAS,CAAC,YAAY,EAAE,CAAA;IACpC,MAAM,MAAM,GAAG,SAAS,CAAC,eAAe,EAAE,CAAA;IAC1C,OAAO,oBAAoB,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;AACtD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,GAAG,CAAC,WAAyC;IAC3D,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAA;IAC1D,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,KAAK,OAAO,CAAC,EAAE,CAAC;QAC5D,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,KAAK,OAAO,CAAE,CAAA;IACjE,CAAC;IACD,MAAM,aAAa,GAAG,MAAM,CAC1B,QAAQ;SACL,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,KAAK,QAAQ,CAAC;SACjD,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAChB,IAAI,CAAC,aAAa,KAAK,OAAO,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CACrF,CACJ,CAAA;IACD,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,MAAM,EAAE,CAAA;IACjB,CAAC;IACD,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,aAAa,CAAC,CAAC,CAAC,CAAA;IACzB,CAAC;IACD,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,CAAA;AAC/E,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,EAAE,CAAC,WAAyC;IAC1D,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAA;IAC1D,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC7D,OAAO,MAAM,EAAE,CAAA;IACjB,CAAC;IACD,MAAM,YAAY,GAAG,MAAM,CACzB,QAAQ;SACL,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,KAAK,OAAO,CAAC;SAChD,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAChB,IAAI,CAAC,aAAa,KAAK,OAAO,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CACpF,CACJ,CAAA;IACD,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC,mBAAmB,CAAC,CAAA;IACnC,CAAC;IACD,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,YAAY,CAAC,CAAC,CAAC,CAAA;IACxB,CAAC;IACD,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,EAAE,CAAA;AAC7E,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,UAAsC,EACtC,cAAsB,EACtB,MAAc;IAEd,IAAI,cAAc,KAAK,WAAW,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAC3D,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,OAAO,gBAAgB,CAAC,UAAU,CAAC,CAAA;AACrC,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,QAAsC,EACtC,oBAA6B;IAE7B,OAAO,oBAAoB,CAAC,CAAC,CAAC,uBAAuB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAA;AACvF,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,QAAsC;IAEtC,OAAO,uBAAuB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAA;AACtD,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,QAAsC;IAEtC,OAAO,uBAAuB,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAA;AAChE,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,QAAsC;IAEtC,OAAO,uBAAuB,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAA;AAC5D,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,UAA+B;IAE/B,OAAO,yBAAyB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAA;AAC1D,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAQxC;IACC,OAAO;QACL,GAAG,qBAAqB,CAAC,KAAK,CAAC,eAAe,EAAE,SAAS,CAAC;QAC1D,GAAG,kCAAkC,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC;QAC/D,GAAG,kCAAkC,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC;QAC/D,GAAG,qBAAqB,CAAC,KAAK,CAAC,gBAAgB,EAAE,UAAU,CAAC;QAC5D,GAAG,6BAA6B,CAAC,KAAK,CAAC,gBAAgB,CAAC;QACxD,GAAG,qBAAqB,CAAC,KAAK,CAAC,0BAA0B,EAAE,oBAAoB,CAAC;QAChF,GAAG,qBAAqB,CAAC,KAAK,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;KACnE,CAAA;AACH,CAAC;AAED,SAAS,uBAAuB,CAC9B,QAAsC,EACtC,UAAgD;IAEhD,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/C,OAAO,KAAK,CAAC,mBAAmB,CAAC,CAAA;IACnC,CAAC;IACD,OAAO,yBAAyB,CAAC,QAAQ,CAAC,eAAe,EAAE,UAAU,CAAC,CAAA;AACxE,CAAC;AAED,SAAS,yBAAyB,CAChC,UAA+B,EAC/B,UAAgD;IAEhD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC,mBAAmB,CAAC,CAAA;IACnC,CAAC;IACD,OAAO,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,wBAAwB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC,CAAA;AAC3F,CAAC;AAED,SAAS,qBAAqB,CAC5B,QAAsC,EACtC,UAAgD;IAEhD,OAAO,6BAA6B,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAC/D,6BAA6B,CAAC,SAAS,EAAE,UAAU,CAAC,CACrD,CAAA;AACH,CAAC;AAED,SAAS,6BAA6B,CACpC,QAAsC;IAEtC,OAAO,6BAA6B,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAC/D,6BAA6B,CAAC,SAAS,EAAE,UAAU,CAAC,CACrD,CAAA;AACH,CAAC;AAED,SAAS,kCAAkC,CACzC,QAA+C,EAC/C,UAAyB;IAEzB,OAAO,CAAC,QAAQ,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CACjD,6BAA6B,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAClD,6BAA6B,CAAC,SAAS,EAAE,UAAU,EAAE,EAAE,CAAC,aAAa,CAAC,CACvE,CACF,CAAA;AACH,CAAC;AAED,SAAS,6BAA6B,CACpC,QAC+F;IAE/F,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,cAAc,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,EAAE,mBAAmB,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAC3F,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,iBAAiB,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAC9F,CAAA;AACH,CAAC;AAED,SAAS,4BAA4B,CACnC,SAA4B,EAC5B,UAAgD,EAChD,QAAiB,EACjB,aAAsB;IAEtB,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,EAAE,UAAU,EAAE,aAAa,CAAC,CAAA;IACvE,MAAM,UAAU,GAAG,SAAS,CAAC,iBAAiB,IAAI,EAAE,CAAA;IACpD,MAAM,oBAAoB,GAAiC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CACtF,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,CAC3C,CAAA;IACD,MAAM,iBAAiB,GAAG,qBAAqB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;IAClE,IAAI,iBAAiB,EAAE,CAAC;QACtB,oBAAoB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;IAC9C,CAAC;IACD,OAAO,GAAG,CAAC,oBAAoB,CAAC,CAAA;AAClC,CAAC;AAED,SAAS,kBAAkB,CACzB,SAA4B,EAC5B,UAAgD,EAChD,aAAsB;IAEtB,MAAM,GAAG,GAAG,SAAS,CAAC,SAAS,CAAC,GAAG,EAAE,CAAA;IACrC,OAAO;QACL,UAAU;QACV,MAAM,EAAE,SAAS,CAAC,SAAS,CAAC,MAAM,EAAsB;QACxD,gBAAgB,EAAE,SAAS,CAAC,QAAQ;QACpC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpC,cAAc,EAAE,SAAS,CAAC,SAAS,CAAC,KAAK,EAAE;KAC5C,CAAA;AACH,CAAC;AAED,SAAS,aAAa,CACpB,SAAoB,EACpB,MAA8B,EAC9B,QAAiB;IAEjB,OAAO;QACL,aAAa,EAAE,WAAW;QAC1B,EAAE,EAAE,SAAS,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE;QACjC,GAAG,EAAE,SAAS,CAAC,YAAY,EAAE;QAC7B,MAAM,EAAE,SAAS,CAAC,eAAe,EAAE;QACnC,OAAO,EAAE,CAAC,MAAM,CAAC;QACjB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjD,CAAA;AACH,CAAC;AAED,SAAS,qBAAqB,CAC5B,SAA4B,EAC5B,MAA8B;IAE9B,IAAI,CAAC,SAAS,CAAC,sBAAsB,EAAE,CAAC;QACtC,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,MAAM,KAAK,GAAG,iBAAiB,CAAC,SAAS,CAAC;SACvC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,6BAA6B,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;SAClE,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CAAA;IAEvD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,OAAO;QACL,aAAa,EAAE,aAAa;QAC5B,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QACvC,OAAO,EAAE,CAAC,MAAM,CAAC;KAClB,CAAA;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,SAA4B;IACrD,MAAM,UAAU,GAAG,SAAS,CAAC,OAAO,CAAC,UAAU,IAAI,SAAS,CAAC,OAAO,CAAC,aAAa,CAAA;IAClF,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAA;AAC9D,CAAC;AAED,SAAS,6BAA6B,CAAC,GAAW;IAChD,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IACtC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QAC3C,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,OAAO,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;AAClC,CAAC;AAED,SAAS,oBAAoB,CAC3B,EAAU,EACV,GAAW,EACX,MAAgB,EAChB,MAA8B;IAE9B,MAAM,WAAW,GAAG,oBAAoB,CAAC,EAAE,CAAC,CAAA;IAC5C,MAAM,WAAW,GAAG,UAAU,CAAC,EAAE,CAAC,CAAA;IAClC,MAAM,IAAI,GAAG,qBAAqB,CAAC,EAAE,CAAC,CAAA;IAEtC,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,eAAe,GAAG,YAAY,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,CAAA;QAC9D,MAAM,YAAY,GAAG,oBAAoB,CAAC,eAAe,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;QAC/E,IAAI,0CAA0C,CAAC,IAAI,CAAC,EAAE,CAAC;YACrD,OAAO,YAAY,CAAA;QACrB,CAAC;QACD,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,EAAE,YAAY,CAAC,CAAC,CAAA;IAClE,CAAC;IAED,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM,EAAE,CAAC;QACnE,OAAO,IAAI,CACT,oBAAoB,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,CAAC,EACxD,GAAG,EACH,iBAAiB,CAAC,MAAM,CAAC,EACzB,MAAM,CACP,CAAA;IACH,CAAC;IAED,IAAI,WAAW,KAAK,cAAc,EAAE,CAAC;QACnC,OAAO,GAAG,CAAC;YACT,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;YACpC,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC;SACxF,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,WAAW,KAAK,aAAa,EAAE,CAAC;QAClC,OAAO,EAAE,CAAC;YACR,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;YACnC,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC;SACzF,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;AAC5D,CAAC;AAED,SAAS,IAAI,CACX,EAAU,EACV,GAAW,EACX,MAAgB,EAChB,MAA8B;IAE9B,OAAO;QACL,aAAa,EAAE,WAAW;QAC1B,EAAE;QACF,GAAG;QACH,MAAM;QACN,OAAO,EAAE,CAAC,MAAM,CAAC;QACjB,QAAQ,EAAE,IAAI;KACf,CAAA;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,EAAU;IACtC,MAAM,MAAM,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;IAC5E,IAAI,MAAM,KAAK,cAAc,EAAE,CAAC;QAC9B,OAAO,cAAc,CAAA;IACvB,CAAC;IACD,IAAI,MAAM,KAAK,aAAa,EAAE,CAAC;QAC7B,OAAO,aAAa,CAAA;IACtB,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,qBAAqB,CAAC,EAAU;IACvC,OAAO,EAAE;SACN,KAAK,CAAC,GAAG,CAAC;SACV,EAAE,CAAC,CAAC,CAAC,CAAE;SACP,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAA;AAC9B,CAAC;AAED,SAAS,UAAU,CAAC,EAAU;IAC5B,OAAO,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AAC9B,CAAC;AAED,SAAS,oBAAoB,CAC3B,UAAkB,EAClB,IAAY,EACZ,WAAuD,EACvD,WAAoB;IAEpB,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM,EAAE,CAAC;QACnE,OAAO,YAAY,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,CAAC,CAAA;IACrD,CAAC;IACD,OAAO,UAAU,CAAA;AACnB,CAAC;AAED,SAAS,0CAA0C,CAAC,IAAY;IAC9D,OAAO,IAAI,GAAG,CAAC;QACb,iBAAiB;QACjB,2BAA2B;QAC3B,eAAe;QACf,cAAc;QACd,YAAY;QACZ,kBAAkB;QAClB,eAAe;QACf,cAAc;QACd,iBAAiB;KAClB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAA;AAC5B,CAAC;AAED,SAAS,YAAY,CACnB,IAAY,EACZ,WAAuD,EACvD,QAAiB;IAEjB,MAAM,EAAE,GAAG,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;IACrE,OAAO,WAAW,CAAC,CAAC,CAAC,GAAG,WAAW,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;AAClD,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY;IACtC,MAAM,GAAG,GAA2B;QAClC,YAAY,EAAE,iBAAiB;QAC/B,eAAe,EAAE,cAAc;QAC/B,sBAAsB,EAAE,2BAA2B;QACnD,yBAAyB,EAAE,wBAAwB;QACnD,UAAU,EAAE,eAAe;QAC3B,aAAa,EAAE,YAAY;QAC3B,SAAS,EAAE,cAAc;QACzB,YAAY,EAAE,WAAW;QACzB,OAAO,EAAE,YAAY;QACrB,UAAU,EAAE,SAAS;QACrB,aAAa,EAAE,kBAAkB;QACjC,gBAAgB,EAAE,eAAe;QACjC,eAAe,EAAE,0BAA0B;QAC3C,qBAAqB,EAAE,oBAAoB;QAC3C,kBAAkB,EAAE,uBAAuB;QAC3C,wBAAwB,EAAE,iBAAiB;QAC3C,UAAU,EAAE,eAAe;QAC3B,aAAa,EAAE,YAAY;QAC3B,YAAY,EAAE,uBAAuB;QACrC,kBAAkB,EAAE,iBAAiB;QACrC,eAAe,EAAE,oBAAoB;QACrC,qBAAqB,EAAE,cAAc;QACrC,SAAS,EAAE,cAAc;QACzB,YAAY,EAAE,WAAW;QACzB,YAAY,EAAE,iBAAiB;QAC/B,eAAe,EAAE,cAAc;KAChC,CAAA;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,OAAO,IAAI,EAAE,CAAA;AACjD,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY;IACzC,MAAM,SAAS,GAA2B;QACxC,YAAY,EAAE,cAAc;QAC5B,eAAe,EAAE,iBAAiB;QAClC,sBAAsB,EAAE,wBAAwB;QAChD,yBAAyB,EAAE,2BAA2B;QACtD,UAAU,EAAE,YAAY;QACxB,aAAa,EAAE,eAAe;QAC9B,SAAS,EAAE,WAAW;QACtB,YAAY,EAAE,cAAc;QAC5B,OAAO,EAAE,SAAS;QAClB,UAAU,EAAE,YAAY;QACxB,aAAa,EAAE,eAAe;QAC9B,gBAAgB,EAAE,kBAAkB;QACpC,eAAe,EAAE,iBAAiB;QAClC,qBAAqB,EAAE,uBAAuB;QAC9C,kBAAkB,EAAE,oBAAoB;QACxC,wBAAwB,EAAE,0BAA0B;QACpD,UAAU,EAAE,YAAY;QACxB,aAAa,EAAE,eAAe;QAC9B,YAAY,EAAE,cAAc;QAC5B,kBAAkB,EAAE,oBAAoB;QACxC,eAAe,EAAE,iBAAiB;QAClC,qBAAqB,EAAE,uBAAuB;QAC9C,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,MAAM;QACZ,SAAS,EAAE,WAAW;QACtB,YAAY,EAAE,cAAc;QAC5B,YAAY,EAAE,cAAc;QAC5B,eAAe,EAAE,iBAAiB;KACnC,CAAA;IACD,OAAO,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,IAAI,CAAA;AAC9C,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAgB;IACzC,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA;AACnF,CAAC;AAED,SAAS,gBAAgB,CACvB,UAAsC;IAEtC,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAA;IACvC,OAAO,UAAU,CAAC,aAAa,KAAK,QAAQ,IAAI,UAAU,CAAC,aAAa,KAAK,OAAO;QAClF,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,UAAU,CAAA;AAChB,CAAC;AAED,SAAS,QAAQ,CAAC,UAAsC;IACtD,IAAI,UAAU,CAAC,aAAa,KAAK,OAAO,EAAE,CAAC;QACzC,OAAO,UAAU,CAAA;IACnB,CAAC;IACD,OAAO,UAAU,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAA;AAC/F,CAAC;AAED,MAAM,UAAU,MAAM;IACpB,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAA;AACpC,CAAC;AAED,MAAM,UAAU,KAAK,CACnB,MAA6D;IAE7D,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,CAAA;AAC3C,CAAC;AAED,SAAS,MAAM,CAAC,WAAyC;IACvD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,MAAM,MAAM,GAAiC,EAAE,CAAA;IAC/C,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAA;QACtC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACnB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YACb,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QACzB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/esm/analysis/analyzeResults.d.ts

@@ -0,0 +1,99 @@
+import { type BlockedReason, type RequestAnalysis } from '../evaluate.js';
+/**
+ * Analyze a RequestAnalysis to see if the request was allowed by identity policies.
+ *
+ * @param requestAnalysis the request analysis
+ * @returns true if the request was allowed by identity policies, false otherwise
+ */
+export declare function isAllowedByIdentityPolicies(requestAnalysis: RequestAnalysis): boolean;
+export type DenialPolicyType = BlockedReason;
+export type RequestDenial = {
+    /**
+     * The type of policy that caused the denial.
+     */
+    policyType: DenialPolicyType;
+    /**
+     * This denial blocks a request that otherwise could have been allowed.
+     */
+    blocking?: true;
+    /**
+     * The identifier of the policy that caused the denial, if applicable. This could be a
+     * policy identifier or an organizational unit identifier for SCPs and RCPs.
+     */
+    identifier?: string;
+    /**
+     * The type of denial.
+     */
+    denialType: 'Implicit';
+} | {
+    /**
+     * The type of policy that caused the denial.
+     */
+    policyType: DenialPolicyType;
+    /**
+     * This denial blocks a request that otherwise could have been allowed.
+     */
+    blocking?: true;
+    /**
+     * The identifier of the policy that caused the denial. May be undefined, for example
+     * in a resource policy.
+     */
+    policyIdentifier?: string;
+    /**
+     * The statement ID (Sid) of the denying policy statement, if present. This corresponds
+     * to the Sid field in the AWS IAM policy statement and may be absent if the statement
+     * does not define a Sid.
+     */
+    statementId?: string | undefined;
+    /**
+     * The 1-based index of the denying statement within the policy, if applicable. This is useful when the statement does not have a Sid.
+     */
+    statementIndex: number;
+    /**
+     * The type of denial.
+     */
+    denialType: 'Explicit';
+};
+export type RequestGrant = {
+    policyType: 'identity' | 'pb' | 'vpce';
+    policyIdentifier: string;
+    statementId?: string | undefined;
+    statementIndex: number;
+} | {
+    policyType: 'resource';
+    statementId?: string | undefined;
+    statementIndex: number;
+} | {
+    policyType: 'scp' | 'rcp';
+    orgIdentifier: string;
+    policyIdentifier: string;
+    statementId?: string | undefined;
+    statementIndex: number;
+};
+/**
+ * Find the policy statements that caused a request to be denied.
+ * Analyzes the RequestAnalysis and returns the specific reasons why the request was denied.
+ *
+ * For an implicit denial, it returns:
+ * - the policy type (identity, resource, scp, rcp, permission boundary, endpoint policy)
+ * - the identifier, if applicable for an Organizational Unit identifier for SCPs.
+ *
+ * For an explicit denial, it returns:
+ * - the policy type (identity, resource, scp, rcp, permission boundary, endpoint policy)
+ * - the policy identifier, if applicable for a managed policy or an SCP
+ * - the statement ID (Sid), if the denying statement has one
+ * - the statement index (1-based) of the denying statement
+ *
+ * @param requestAnalysis the request analysis
+ * @returns a list of RequestDenial objects describing the reasons for denial
+ */
+export declare function getDenialReasons(requestAnalysis: RequestAnalysis): RequestDenial[];
+/**
+ * Find the policy statements that granted access for an allowed request.
+ * Analyzes the RequestAnalysis and returns the specific grants that allowed the request.
+ *
+ * @param requestAnalysis the request analysis
+ * @returns a list of RequestGrant objects describing which policies granted access
+ */
+export declare function getGrantReasons(requestAnalysis: RequestAnalysis): RequestGrant[];
+//# sourceMappingURL=analyzeResults.d.ts.map

package/dist/esm/analysis/analyzeResults.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"analyzeResults.d.ts","sourceRoot":"","sources":["../../../src/analysis/analyzeResults.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,aAAa,EAIlB,KAAK,eAAe,EAGrB,MAAM,gBAAgB,CAAA;AAEvB;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,eAAe,EAAE,eAAe,GAAG,OAAO,CAOrF;AAED,MAAM,MAAM,gBAAgB,GAAG,aAAa,CAAA;AAE5C,MAAM,MAAM,aAAa,GACrB;IACE;;OAEG;IACH,UAAU,EAAE,gBAAgB,CAAA;IAE5B;;OAEG;IACH,QAAQ,CAAC,EAAE,IAAI,CAAA;IAEf;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;IAEnB;;OAEG;IACH,UAAU,EAAE,UAAU,CAAA;CACvB,GACD;IACE;;OAEG;IACH,UAAU,EAAE,gBAAgB,CAAA;IAE5B;;OAEG;IACH,QAAQ,CAAC,EAAE,IAAI,CAAA;IAEf;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAEzB;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAEhC;;OAEG;IACH,cAAc,EAAE,MAAM,CAAA;IAEtB;;OAEG;IACH,UAAU,EAAE,UAAU,CAAA;CACvB,CAAA;AAEL,MAAM,MAAM,YAAY,GACpB;IACE,UAAU,EAAE,UAAU,GAAG,IAAI,GAAG,MAAM,CAAA;IACtC,gBAAgB,EAAE,MAAM,CAAA;IACxB,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAChC,cAAc,EAAE,MAAM,CAAA;CACvB,GACD;IACE,UAAU,EAAE,UAAU,CAAA;IACtB,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAChC,cAAc,EAAE,MAAM,CAAA;CACvB,GACD;IACE,UAAU,EAAE,KAAK,GAAG,KAAK,CAAA;IACzB,aAAa,EAAE,MAAM,CAAA;IACrB,gBAAgB,EAAE,MAAM,CAAA;IACxB,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAChC,cAAc,EAAE,MAAM,CAAA;CACvB,CAAA;AAEL;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,gBAAgB,CAAC,eAAe,EAAE,eAAe,GAAG,aAAa,EAAE,CAqClF;AAiGD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,eAAe,EAAE,eAAe,GAAG,YAAY,EAAE,CAehF"}

package/dist/esm/analysis/analyzeResults.js

@@ -0,0 +1,183 @@
+import {} from '../evaluate.js';
+/**
+ * Analyze a RequestAnalysis to see if the request was allowed by identity policies.
+ *
+ * @param requestAnalysis the request analysis
+ * @returns true if the request was allowed by identity policies, false otherwise
+ */
+export function isAllowedByIdentityPolicies(requestAnalysis) {
+    const identityAnalysis = requestAnalysis.identityAnalysis;
+    if (!identityAnalysis) {
+        return false;
+    }
+    return identityAnalysis.result === 'Allowed';
+}
+/**
+ * Find the policy statements that caused a request to be denied.
+ * Analyzes the RequestAnalysis and returns the specific reasons why the request was denied.
+ *
+ * For an implicit denial, it returns:
+ * - the policy type (identity, resource, scp, rcp, permission boundary, endpoint policy)
+ * - the identifier, if applicable for an Organizational Unit identifier for SCPs.
+ *
+ * For an explicit denial, it returns:
+ * - the policy type (identity, resource, scp, rcp, permission boundary, endpoint policy)
+ * - the policy identifier, if applicable for a managed policy or an SCP
+ * - the statement ID (Sid), if the denying statement has one
+ * - the statement index (1-based) of the denying statement
+ *
+ * @param requestAnalysis the request analysis
+ * @returns a list of RequestDenial objects describing the reasons for denial
+ */
+export function getDenialReasons(requestAnalysis) {
+    const denials = [];
+    const overallResult = requestAnalysis.result;
+    const blockedBy = new Set(requestAnalysis.blockedBy ?? []);
+    addSimplePolicyDenials(requestAnalysis.identityAnalysis, 'identity', overallResult, blockedBy, denials);
+    addSimplePolicyDenials(requestAnalysis.resourceAnalysis, 'resource', overallResult, blockedBy, denials);
+    addOuPolicyDenials(requestAnalysis.scpAnalysis, 'scp', overallResult, blockedBy, denials);
+    addOuPolicyDenials(requestAnalysis.rcpAnalysis, 'rcp', overallResult, blockedBy, denials);
+    addSimplePolicyDenials(requestAnalysis.permissionBoundaryAnalysis, 'pb', overallResult, blockedBy, denials);
+    addSimplePolicyDenials(requestAnalysis.endpointAnalysis, 'vpce', overallResult, blockedBy, denials);
+    return denials;
+}
+/**
+ * Helper for identity-style policies (identity, resource, permissionBoundary, endpoint).
+ * Adds denial reasons from a simple policy analysis.
+ */
+function addSimplePolicyDenials(analysis, policyType, overallResult, blockedBy, denials) {
+    if (!analysis)
+        return;
+    const isBlocking = blockedBy.has(policyType);
+    const blocking = isBlocking ? { blocking: true } : {};
+    if (analysis.result === 'ImplicitlyDenied' &&
+        (isBlocking || overallResult === 'ImplicitlyDenied')) {
+        denials.push({
+            policyType,
+            denialType: 'Implicit',
+            ...blocking
+        });
+    }
+    else if (analysis.result === 'ExplicitlyDenied' &&
+        (isBlocking || overallResult === 'ExplicitlyDenied')) {
+        for (const stmt of analysis.denyStatements) {
+            const sid = stmt.statement.sid();
+            denials.push({
+                policyType,
+                ...blocking,
+                policyIdentifier: stmt.policyId,
+                ...(sid ? { statementId: sid } : {}),
+                statementIndex: stmt.statement.index(),
+                denialType: 'Explicit'
+            });
+        }
+    }
+}
+/**
+ * Helper for OU-based policies (scp, rcp).
+ * Adds denial reasons from an organizational policy analysis.
+ */
+function addOuPolicyDenials(analysis, policyType, overallResult, blockedBy, denials) {
+    if (!analysis)
+        return;
+    const isBlocking = blockedBy.has(policyType);
+    const blocking = isBlocking ? { blocking: true } : {};
+    if (analysis.result === 'ImplicitlyDenied' &&
+        (isBlocking || overallResult === 'ImplicitlyDenied')) {
+        for (const ou of analysis.ouAnalysis) {
+            if (ou.result === 'ImplicitlyDenied') {
+                denials.push({
+                    policyType,
+                    identifier: ou.orgIdentifier,
+                    denialType: 'Implicit',
+                    ...blocking
+                });
+            }
+        }
+    }
+    else if (analysis.result === 'ExplicitlyDenied' &&
+        (isBlocking || overallResult === 'ExplicitlyDenied')) {
+        for (const ou of analysis.ouAnalysis) {
+            if (ou.result === 'ExplicitlyDenied') {
+                for (const stmt of ou.denyStatements) {
+                    const sid = stmt.statement.sid();
+                    denials.push({
+                        policyType,
+                        policyIdentifier: stmt.policyId,
+                        ...(sid ? { statementId: sid } : {}),
+                        statementIndex: stmt.statement.index(),
+                        ...blocking,
+                        denialType: 'Explicit'
+                    });
+                }
+            }
+        }
+    }
+}
+/**
+ * Find the policy statements that granted access for an allowed request.
+ * Analyzes the RequestAnalysis and returns the specific grants that allowed the request.
+ *
+ * @param requestAnalysis the request analysis
+ * @returns a list of RequestGrant objects describing which policies granted access
+ */
+export function getGrantReasons(requestAnalysis) {
+    if (requestAnalysis.result !== 'Allowed') {
+        return [];
+    }
+    const grantDetails = [];
+    addSimplePolicyGrants(requestAnalysis.identityAnalysis, 'identity', grantDetails);
+    addSimplePolicyGrants(requestAnalysis.resourceAnalysis, 'resource', grantDetails);
+    addSimplePolicyGrants(requestAnalysis.permissionBoundaryAnalysis, 'pb', grantDetails);
+    addSimplePolicyGrants(requestAnalysis.endpointAnalysis, 'vpce', grantDetails);
+    addOuPolicyGrants(requestAnalysis.scpAnalysis, 'scp', grantDetails);
+    addOuPolicyGrants(requestAnalysis.rcpAnalysis, 'rcp', grantDetails);
+    return grantDetails;
+}
+/**
+ * Helper for simple policy grants (identity, resource, pb, vpce).
+ */
+function addSimplePolicyGrants(analysis, policyType, grants) {
+    if (analysis?.result !== 'Allowed' && analysis?.result !== 'AllowedForAccount')
+        return;
+    for (const stmt of analysis.allowStatements) {
+        const sid = stmt.statement.sid();
+        if (policyType === 'resource') {
+            grants.push({
+                policyType: 'resource',
+                ...(sid ? { statementId: sid } : {}),
+                statementIndex: stmt.statement.index()
+            });
+        }
+        else {
+            grants.push({
+                policyType,
+                policyIdentifier: stmt.policyId,
+                ...(sid ? { statementId: sid } : {}),
+                statementIndex: stmt.statement.index()
+            });
+        }
+    }
+}
+/**
+ * Helper for OU-based policy grants (scp, rcp).
+ */
+function addOuPolicyGrants(analysis, policyType, grants) {
+    if (!analysis)
+        return;
+    for (const ou of analysis.ouAnalysis) {
+        if (ou.result !== 'Allowed')
+            continue;
+        for (const stmt of ou.allowStatements) {
+            const sid = stmt.statement.sid();
+            grants.push({
+                policyType,
+                orgIdentifier: ou.orgIdentifier,
+                policyIdentifier: stmt.policyId,
+                ...(sid ? { statementId: sid } : {}),
+                statementIndex: stmt.statement.index()
+            });
+        }
+    }
+}
+//# sourceMappingURL=analyzeResults.js.map

package/dist/esm/analysis/analyzeResults.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"analyzeResults.js","sourceRoot":"","sources":["../../../src/analysis/analyzeResults.ts"],"names":[],"mappings":"AAAA,OAAO,EAQN,MAAM,gBAAgB,CAAA;AAEvB;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CAAC,eAAgC;IAC1E,MAAM,gBAAgB,GAAG,eAAe,CAAC,gBAAgB,CAAA;IACzD,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,OAAO,KAAK,CAAA;IACd,CAAC;IAED,OAAO,gBAAgB,CAAC,MAAM,KAAK,SAAS,CAAA;AAC9C,CAAC;AAkFD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,gBAAgB,CAAC,eAAgC;IAC/D,MAAM,OAAO,GAAoB,EAAE,CAAA;IACnC,MAAM,aAAa,GAAG,eAAe,CAAC,MAAM,CAAA;IAC5C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,SAAS,IAAI,EAAE,CAAC,CAAA;IAE1D,sBAAsB,CACpB,eAAe,CAAC,gBAAgB,EAChC,UAAU,EACV,aAAa,EACb,SAAS,EACT,OAAO,CACR,CAAA;IACD,sBAAsB,CACpB,eAAe,CAAC,gBAAgB,EAChC,UAAU,EACV,aAAa,EACb,SAAS,EACT,OAAO,CACR,CAAA;IACD,kBAAkB,CAAC,eAAe,CAAC,WAAW,EAAE,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,CAAC,CAAA;IACzF,kBAAkB,CAAC,eAAe,CAAC,WAAW,EAAE,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,CAAC,CAAA;IACzF,sBAAsB,CACpB,eAAe,CAAC,0BAA0B,EAC1C,IAAI,EACJ,aAAa,EACb,SAAS,EACT,OAAO,CACR,CAAA;IACD,sBAAsB,CACpB,eAAe,CAAC,gBAAgB,EAChC,MAAM,EACN,aAAa,EACb,SAAS,EACT,OAAO,CACR,CAAA;IAED,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;;GAGG;AACH,SAAS,sBAAsB,CAC7B,QAAyD,EACzD,UAA4B,EAC5B,aAA+B,EAC/B,SAA6B,EAC7B,OAAwB;IAExB,IAAI,CAAC,QAAQ;QAAE,OAAM;IAErB,MAAM,UAAU,GAAG,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;IAC5C,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IAE9D,IACE,QAAQ,CAAC,MAAM,KAAK,kBAAkB;QACtC,CAAC,UAAU,IAAI,aAAa,KAAK,kBAAkB,CAAC,EACpD,CAAC;QACD,OAAO,CAAC,IAAI,CAAC;YACX,UAAU;YACV,UAAU,EAAE,UAAU;YACtB,GAAG,QAAQ;SACZ,CAAC,CAAA;IACJ,CAAC;SAAM,IACL,QAAQ,CAAC,MAAM,KAAK,kBAAkB;QACtC,CAAC,UAAU,IAAI,aAAa,KAAK,kBAAkB,CAAC,EACpD,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,cAAc,EAAE,CAAC;YAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAA;YAChC,OAAO,CAAC,IAAI,CAAC;gBACX,UAAU;gBACV,GAAG,QAAQ;gBACX,gBAAgB,EAAE,IAAI,CAAC,QAAQ;gBAC/B,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE;gBACtC,UAAU,EAAE,UAAU;aACvB,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,kBAAkB,CACzB,QAA+C,EAC/C,UAA4B,EAC5B,aAA+B,EAC/B,SAA6B,EAC7B,OAAwB;IAExB,IAAI,CAAC,QAAQ;QAAE,OAAM;IAErB,MAAM,UAAU,GAAG,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;IAC5C,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IAE9D,IACE,QAAQ,CAAC,MAAM,KAAK,kBAAkB;QACtC,CAAC,UAAU,IAAI,aAAa,KAAK,kBAAkB,CAAC,EACpD,CAAC;QACD,KAAK,MAAM,EAAE,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;YACrC,IAAI,EAAE,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;gBACrC,OAAO,CAAC,IAAI,CAAC;oBACX,UAAU;oBACV,UAAU,EAAE,EAAE,CAAC,aAAa;oBAC5B,UAAU,EAAE,UAAU;oBACtB,GAAG,QAAQ;iBACZ,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;IACH,CAAC;SAAM,IACL,QAAQ,CAAC,MAAM,KAAK,kBAAkB;QACtC,CAAC,UAAU,IAAI,aAAa,KAAK,kBAAkB,CAAC,EACpD,CAAC;QACD,KAAK,MAAM,EAAE,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;YACrC,IAAI,EAAE,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;gBACrC,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,cAAc,EAAE,CAAC;oBACrC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAA;oBAChC,OAAO,CAAC,IAAI,CAAC;wBACX,UAAU;wBACV,gBAAgB,EAAE,IAAI,CAAC,QAAQ;wBAC/B,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACpC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE;wBACtC,GAAG,QAAQ;wBACX,UAAU,EAAE,UAAU;qBACvB,CAAC,CAAA;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,eAAgC;IAC9D,IAAI,eAAe,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACzC,OAAO,EAAE,CAAA;IACX,CAAC;IAED,MAAM,YAAY,GAAmB,EAAE,CAAA;IAEvC,qBAAqB,CAAC,eAAe,CAAC,gBAAgB,EAAE,UAAU,EAAE,YAAY,CAAC,CAAA;IACjF,qBAAqB,CAAC,eAAe,CAAC,gBAAgB,EAAE,UAAU,EAAE,YAAY,CAAC,CAAA;IACjF,qBAAqB,CAAC,eAAe,CAAC,0BAA0B,EAAE,IAAI,EAAE,YAAY,CAAC,CAAA;IACrF,qBAAqB,CAAC,eAAe,CAAC,gBAAgB,EAAE,MAAM,EAAE,YAAY,CAAC,CAAA;IAC7E,iBAAiB,CAAC,eAAe,CAAC,WAAW,EAAE,KAAK,EAAE,YAAY,CAAC,CAAA;IACnE,iBAAiB,CAAC,eAAe,CAAC,WAAW,EAAE,KAAK,EAAE,YAAY,CAAC,CAAA;IAEnE,OAAO,YAAY,CAAA;AACrB,CAAC;AAED;;GAEG;AACH,SAAS,qBAAqB,CAC5B,QAAyD,EACzD,UAAmD,EACnD,MAAsB;IAEtB,IAAI,QAAQ,EAAE,MAAM,KAAK,SAAS,IAAI,QAAQ,EAAE,MAAM,KAAK,mBAAmB;QAAE,OAAM;IACtF,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,eAAe,EAAE,CAAC;QAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAA;QAChC,IAAI,UAAU,KAAK,UAAU,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC;gBACV,UAAU,EAAE,UAAU;gBACtB,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE;aACvC,CAAC,CAAA;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC;gBACV,UAAU;gBACV,gBAAgB,EAAE,IAAI,CAAC,QAAQ;gBAC/B,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE;aACvC,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CACxB,QAA+C,EAC/C,UAAyB,EACzB,MAAsB;IAEtB,IAAI,CAAC,QAAQ;QAAE,OAAM;IACrB,KAAK,MAAM,EAAE,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;QACrC,IAAI,EAAE,CAAC,MAAM,KAAK,SAAS;YAAE,SAAQ;QACrC,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,eAAe,EAAE,CAAC;YACtC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAA;YAChC,MAAM,CAAC,IAAI,CAAC;gBACV,UAAU;gBACV,aAAa,EAAE,EAAE,CAAC,aAAa;gBAC/B,gBAAgB,EAAE,IAAI,CAAC,QAAQ;gBAC/B,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE;aACvC,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/esm/condition/BaseConditionOperator.d.ts

@@ -0,0 +1,13 @@
+import { type ConditionValueExplain } from '../explain/statementExplain.js';
+import { type AwsRequest } from '../request/request.js';
+export interface BaseConditionOperator {
+    name: string;
+    matches: (request: AwsRequest, keyValue: string, policyValues: string[]) => {
+        matches: boolean;
+        explains: ConditionValueExplain[];
+    };
+    allowsVariables: boolean;
+    allowsWildcards: boolean;
+    isNegative: boolean;
+}
+//# sourceMappingURL=BaseConditionOperator.d.ts.map

package/dist/esm/condition/BaseConditionOperator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BaseConditionOperator.d.ts","sourceRoot":"","sources":["../../../src/condition/BaseConditionOperator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,qBAAqB,EAAE,MAAM,gCAAgC,CAAA;AAC3E,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAEvD,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,CACP,OAAO,EAAE,UAAU,EACnB,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,EAAE,KACnB;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,qBAAqB,EAAE,CAAA;KAAE,CAAA;IAC5D,eAAe,EAAE,OAAO,CAAA;IACxB,eAAe,EAAE,OAAO,CAAA;IACxB,UAAU,EAAE,OAAO,CAAA;CACpB"}

package/dist/esm/condition/BaseConditionOperator.js

@@ -0,0 +1,3 @@
+import {} from '../explain/statementExplain.js';
+import {} from '../request/request.js';
+//# sourceMappingURL=BaseConditionOperator.js.map

package/dist/esm/condition/BaseConditionOperator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BaseConditionOperator.js","sourceRoot":"","sources":["../../../src/condition/BaseConditionOperator.ts"],"names":[],"mappings":"AAAA,OAAO,EAA8B,MAAM,gCAAgC,CAAA;AAC3E,OAAO,EAAmB,MAAM,uBAAuB,CAAA"}

package/dist/esm/condition/arn/ArnEquals.d.ts

@@ -0,0 +1,3 @@
+import { type BaseConditionOperator } from '../BaseConditionOperator.js';
+export declare const ArnEquals: BaseConditionOperator;
+//# sourceMappingURL=ArnEquals.d.ts.map

package/dist/esm/condition/arn/ArnEquals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ArnEquals.d.ts","sourceRoot":"","sources":["../../../../src/condition/arn/ArnEquals.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,qBAAqB,EAAE,MAAM,6BAA6B,CAAA;AAGxE,eAAO,MAAM,SAAS,EAAE,qBAMvB,CAAA"}

package/dist/esm/condition/arn/ArnEquals.js

@@ -0,0 +1,10 @@
+import {} from '../BaseConditionOperator.js';
+import { ArnLike } from './ArnLike.js';
+export const ArnEquals = {
+    name: 'ArnEquals',
+    matches: ArnLike.matches,
+    allowsVariables: ArnLike.allowsVariables,
+    allowsWildcards: ArnLike.allowsWildcards,
+    isNegative: ArnLike.isNegative
+};
+//# sourceMappingURL=ArnEquals.js.map

package/dist/esm/condition/arn/ArnEquals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ArnEquals.js","sourceRoot":"","sources":["../../../../src/condition/arn/ArnEquals.ts"],"names":[],"mappings":"AAAA,OAAO,EAA8B,MAAM,6BAA6B,CAAA;AACxE,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAEtC,MAAM,CAAC,MAAM,SAAS,GAA0B;IAC9C,IAAI,EAAE,WAAW;IACjB,OAAO,EAAE,OAAO,CAAC,OAAO;IACxB,eAAe,EAAE,OAAO,CAAC,eAAe;IACxC,eAAe,EAAE,OAAO,CAAC,eAAe;IACxC,UAAU,EAAE,OAAO,CAAC,UAAU;CAC/B,CAAA"}

package/dist/esm/condition/arn/ArnLike.d.ts

@@ -0,0 +1,3 @@
+import { type BaseConditionOperator } from '../BaseConditionOperator.js';
+export declare const ArnLike: BaseConditionOperator;
+//# sourceMappingURL=ArnLike.d.ts.map

package/dist/esm/condition/arn/ArnLike.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ArnLike.d.ts","sourceRoot":"","sources":["../../../../src/condition/arn/ArnLike.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,qBAAqB,EAAE,MAAM,6BAA6B,CAAA;AAGxE,eAAO,MAAM,OAAO,EAAE,qBAarB,CAAA"}

package/dist/esm/condition/arn/ArnLike.js

@@ -0,0 +1,16 @@
+import {} from '../BaseConditionOperator.js';
+import { arnMatches } from './arn.js';
+export const ArnLike = {
+    name: 'ArnLike',
+    matches: (request, keyValue, policyValues) => {
+        const explains = policyValues.map((policyArn) => arnMatches(policyArn, keyValue, request, true));
+        return {
+            matches: explains.some((explain) => explain.matches),
+            explains
+        };
+    },
+    allowsVariables: true,
+    allowsWildcards: true,
+    isNegative: false
+};
+//# sourceMappingURL=ArnLike.js.map

package/dist/esm/condition/arn/ArnLike.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ArnLike.js","sourceRoot":"","sources":["../../../../src/condition/arn/ArnLike.ts"],"names":[],"mappings":"AAAA,OAAO,EAA8B,MAAM,6BAA6B,CAAA;AACxE,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AAErC,MAAM,CAAC,MAAM,OAAO,GAA0B;IAC5C,IAAI,EAAE,SAAS;IACf,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE;QAC3C,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAA;QAEhG,OAAO;YACL,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;YACpD,QAAQ;SACT,CAAA;IACH,CAAC;IACD,eAAe,EAAE,IAAI;IACrB,eAAe,EAAE,IAAI;IACrB,UAAU,EAAE,KAAK;CAClB,CAAA"}

package/dist/esm/condition/arn/ArnNotEquals.d.ts

@@ -0,0 +1,3 @@
+import { type BaseConditionOperator } from '../BaseConditionOperator.js';
+export declare const ArnNotEquals: BaseConditionOperator;
+//# sourceMappingURL=ArnNotEquals.d.ts.map

package/dist/esm/condition/arn/ArnNotEquals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ArnNotEquals.d.ts","sourceRoot":"","sources":["../../../../src/condition/arn/ArnNotEquals.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,qBAAqB,EAAE,MAAM,6BAA6B,CAAA;AAGxE,eAAO,MAAM,YAAY,EAAE,qBAM1B,CAAA"}

package/dist/esm/condition/arn/ArnNotEquals.js

@@ -0,0 +1,10 @@
+import {} from '../BaseConditionOperator.js';
+import { ArnNotLike } from './ArnNotLike.js';
+export const ArnNotEquals = {
+    name: 'ArnNotEquals',
+    matches: ArnNotLike.matches,
+    allowsVariables: ArnNotLike.allowsVariables,
+    allowsWildcards: ArnNotLike.allowsWildcards,
+    isNegative: ArnNotLike.isNegative
+};
+//# sourceMappingURL=ArnNotEquals.js.map

package/dist/esm/condition/arn/ArnNotEquals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ArnNotEquals.js","sourceRoot":"","sources":["../../../../src/condition/arn/ArnNotEquals.ts"],"names":[],"mappings":"AAAA,OAAO,EAA8B,MAAM,6BAA6B,CAAA;AACxE,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAE5C,MAAM,CAAC,MAAM,YAAY,GAA0B;IACjD,IAAI,EAAE,cAAc;IACpB,OAAO,EAAE,UAAU,CAAC,OAAO;IAC3B,eAAe,EAAE,UAAU,CAAC,eAAe;IAC3C,eAAe,EAAE,UAAU,CAAC,eAAe;IAC3C,UAAU,EAAE,UAAU,CAAC,UAAU;CAClC,CAAA"}

package/dist/esm/condition/arn/ArnNotLike.d.ts

@@ -0,0 +1,3 @@
+import { type BaseConditionOperator } from '../BaseConditionOperator.js';
+export declare const ArnNotLike: BaseConditionOperator;
+//# sourceMappingURL=ArnNotLike.d.ts.map

package/dist/esm/condition/arn/ArnNotLike.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ArnNotLike.d.ts","sourceRoot":"","sources":["../../../../src/condition/arn/ArnNotLike.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,qBAAqB,EAAE,MAAM,6BAA6B,CAAA;AAGxE,eAAO,MAAM,UAAU,EAAE,qBAexB,CAAA"}

package/dist/esm/condition/arn/ArnNotLike.js

@@ -0,0 +1,16 @@
+import {} from '../BaseConditionOperator.js';
+import { arnMatches } from './arn.js';
+export const ArnNotLike = {
+    name: 'ArnNotLike',
+    matches: (request, keyValue, policyValues) => {
+        const explains = policyValues.map((policyArn) => arnMatches(policyArn, keyValue, request, false));
+        return {
+            matches: !explains.some((explain) => !explain.matches),
+            explains
+        };
+    },
+    allowsVariables: true,
+    allowsWildcards: true,
+    isNegative: true
+};
+//# sourceMappingURL=ArnNotLike.js.map

package/dist/esm/condition/arn/ArnNotLike.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ArnNotLike.js","sourceRoot":"","sources":["../../../../src/condition/arn/ArnNotLike.ts"],"names":[],"mappings":"AAAA,OAAO,EAA8B,MAAM,6BAA6B,CAAA;AACxE,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AAErC,MAAM,CAAC,MAAM,UAAU,GAA0B;IAC/C,IAAI,EAAE,YAAY;IAClB,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE;QAC3C,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAC9C,UAAU,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,CAChD,CAAA;QAED,OAAO;YACL,OAAO,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;YACtD,QAAQ;SACT,CAAA;IACH,CAAC;IACD,eAAe,EAAE,IAAI;IACrB,eAAe,EAAE,IAAI;IACrB,UAAU,EAAE,IAAI;CACjB,CAAA"}

package/dist/esm/condition/arn/arn.d.ts

@@ -0,0 +1,12 @@
+import { type ConditionValueExplain } from '../../explain/statementExplain.js';
+import { type AwsRequest } from '../../request/request.js';
+/**
+ * Checks to see if a single ARN matches in ArnLike format
+ *
+ * @param policyArn the ARN to check against
+ * @param requestArn the ARN to check
+ * @param request the request to check
+ * @returns if the ARN matches
+ */
+export declare function arnMatches(policyArn: string, requestArn: string, request: AwsRequest, expectMatch: boolean): ConditionValueExplain;
+//# sourceMappingURL=arn.d.ts.map

package/dist/esm/condition/arn/arn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"arn.d.ts","sourceRoot":"","sources":["../../../../src/condition/arn/arn.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,qBAAqB,EAAE,MAAM,mCAAmC,CAAA;AAC9E,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,0BAA0B,CAAA;AAG1D;;;;;;;GAOG;AACH,wBAAgB,UAAU,CACxB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,UAAU,EACnB,WAAW,EAAE,OAAO,GACnB,qBAAqB,CAqEvB"}

package/dist/esm/condition/arn/arn.js

@@ -0,0 +1,70 @@
+import { splitArnParts } from '@actsecurity/iam-utils';
+import {} from '../../explain/statementExplain.js';
+import {} from '../../request/request.js';
+import { convertIamString, isNotDefined } from '../../util.js';
+/**
+ * Checks to see if a single ARN matches in ArnLike format
+ *
+ * @param policyArn the ARN to check against
+ * @param requestArn the ARN to check
+ * @param request the request to check
+ * @returns if the ARN matches
+ */
+export function arnMatches(policyArn, requestArn, request, expectMatch) {
+    const policyParts = splitArnParts(policyArn);
+    const requestParts = splitArnParts(requestArn);
+    // If any of the parts are missing, return false
+    if (isNotDefined(policyParts.partition) ||
+        isNotDefined(policyParts.service) ||
+        isNotDefined(policyParts.region) ||
+        isNotDefined(policyParts.accountId) ||
+        isNotDefined(policyParts.resource)) {
+        return {
+            matches: false,
+            value: policyArn,
+            errors: ['Invalid ARN']
+        };
+    }
+    const resolvedPolicyArn = [
+        'arn',
+        policyParts.partition,
+        policyParts.service,
+        policyParts.region,
+        policyParts.accountId,
+        policyParts.resource
+    ]
+        .map((part) => convertIamString(part, request, { convertToRegex: false, replaceWildcards: false }))
+        .join(':');
+    const resolvedValue = resolvedPolicyArn == policyArn ? undefined : resolvedPolicyArn;
+    // If any of the parts are missing, return false
+    if (isNotDefined(requestParts.partition) ||
+        isNotDefined(requestParts.service) ||
+        isNotDefined(requestParts.region) ||
+        isNotDefined(requestParts.accountId) ||
+        isNotDefined(requestParts.resource)) {
+        return {
+            matches: false,
+            value: policyArn,
+            resolvedValue,
+            errors: [`request ARN '${requestArn}' is not a valid ARN`]
+        };
+    }
+    const allErrors = [];
+    const replaceAndMatch = (policyPart, requestPart) => {
+        const { pattern, errors } = convertIamString(policyPart, request, { replaceWildcards: true });
+        allErrors.push(...(errors || []));
+        return pattern.test(requestPart);
+    };
+    const matches = replaceAndMatch(policyParts.partition, requestParts.partition) &&
+        replaceAndMatch(policyParts.service, requestParts.service) &&
+        replaceAndMatch(policyParts.region, requestParts.region) &&
+        replaceAndMatch(policyParts.accountId, requestParts.accountId) &&
+        replaceAndMatch(policyParts.resource, requestParts.resource);
+    return {
+        matches: matches == expectMatch && allErrors.length == 0,
+        value: policyArn,
+        resolvedValue,
+        errors: allErrors.length > 0 ? allErrors : undefined
+    };
+}
+//# sourceMappingURL=arn.js.map

package/dist/esm/condition/arn/arn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"arn.js","sourceRoot":"","sources":["../../../../src/condition/arn/arn.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AACtD,OAAO,EAA8B,MAAM,mCAAmC,CAAA;AAC9E,OAAO,EAAmB,MAAM,0BAA0B,CAAA;AAC1D,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAE9D;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CACxB,SAAiB,EACjB,UAAkB,EAClB,OAAmB,EACnB,WAAoB;IAEpB,MAAM,WAAW,GAAG,aAAa,CAAC,SAAS,CAAC,CAAA;IAC5C,MAAM,YAAY,GAAG,aAAa,CAAC,UAAU,CAAC,CAAA;IAC9C,gDAAgD;IAChD,IACE,YAAY,CAAC,WAAW,CAAC,SAAS,CAAC;QACnC,YAAY,CAAC,WAAW,CAAC,OAAO,CAAC;QACjC,YAAY,CAAC,WAAW,CAAC,MAAM,CAAC;QAChC,YAAY,CAAC,WAAW,CAAC,SAAS,CAAC;QACnC,YAAY,CAAC,WAAW,CAAC,QAAQ,CAAC,EAClC,CAAC;QACD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,SAAS;YAChB,MAAM,EAAE,CAAC,aAAa,CAAC;SACxB,CAAA;IACH,CAAC;IAED,MAAM,iBAAiB,GAAG;QACxB,KAAK;QACL,WAAW,CAAC,SAAS;QACrB,WAAW,CAAC,OAAO;QACnB,WAAW,CAAC,MAAM;QAClB,WAAW,CAAC,SAAS;QACrB,WAAW,CAAC,QAAQ;KACrB;SACE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACZ,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC,CACpF;SACA,IAAI,CAAC,GAAG,CAAC,CAAA;IAEZ,MAAM,aAAa,GAAG,iBAAiB,IAAI,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAA;IAEpF,gDAAgD;IAChD,IACE,YAAY,CAAC,YAAY,CAAC,SAAS,CAAC;QACpC,YAAY,CAAC,YAAY,CAAC,OAAO,CAAC;QAClC,YAAY,CAAC,YAAY,CAAC,MAAM,CAAC;QACjC,YAAY,CAAC,YAAY,CAAC,SAAS,CAAC;QACpC,YAAY,CAAC,YAAY,CAAC,QAAQ,CAAC,EACnC,CAAC;QACD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,SAAS;YAChB,aAAa;YACb,MAAM,EAAE,CAAC,gBAAgB,UAAU,sBAAsB,CAAC;SAC3D,CAAA;IACH,CAAC;IAED,MAAM,SAAS,GAAa,EAAE,CAAA;IAC9B,MAAM,eAAe,GAAG,CAAC,UAAkB,EAAE,WAAmB,EAAW,EAAE;QAC3E,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAA;QAC7F,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAA;QACjC,OAAO,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IAClC,CAAC,CAAA;IAED,MAAM,OAAO,GACX,eAAe,CAAC,WAAW,CAAC,SAAS,EAAE,YAAY,CAAC,SAAS,CAAC;QAC9D,eAAe,CAAC,WAAW,CAAC,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC;QAC1D,eAAe,CAAC,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC;QACxD,eAAe,CAAC,WAAW,CAAC,SAAS,EAAE,YAAY,CAAC,SAAS,CAAC;QAC9D,eAAe,CAAC,WAAW,CAAC,QAAQ,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAA;IAE9D,OAAO;QACL,OAAO,EAAE,OAAO,IAAI,WAAW,IAAI,SAAS,CAAC,MAAM,IAAI,CAAC;QACxD,KAAK,EAAE,SAAS;QAChB,aAAa;QACb,MAAM,EAAE,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;KACrD,CAAA;AACH,CAAC"}

package/dist/esm/condition/binary/BinaryEquals.d.ts

@@ -0,0 +1,7 @@
+import { type BaseConditionOperator } from '../BaseConditionOperator.js';
+/**
+ * For Binary we don't really have the ability to accept binary
+ * values right now, so just do a string match.
+ */
+export declare const BinaryEquals: BaseConditionOperator;
+//# sourceMappingURL=BinaryEquals.d.ts.map

package/dist/esm/condition/binary/BinaryEquals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BinaryEquals.d.ts","sourceRoot":"","sources":["../../../../src/condition/binary/BinaryEquals.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,qBAAqB,EAAE,MAAM,6BAA6B,CAAA;AAGxE;;;GAGG;AACH,eAAO,MAAM,YAAY,EAAE,qBAmB1B,CAAA"}

package/dist/esm/condition/binary/BinaryEquals.js

@@ -0,0 +1,27 @@
+import {} from '../../explain/statementExplain.js';
+import {} from '../BaseConditionOperator.js';
+import { resolvedValue } from '../conditionUtil.js';
+/**
+ * For Binary we don't really have the ability to accept binary
+ * values right now, so just do a string match.
+ */
+export const BinaryEquals = {
+    name: 'BinaryEquals',
+    matches: (request, keyValue, policyValues) => {
+        const explains = policyValues.map((policyValue) => {
+            return {
+                value: policyValue,
+                matches: policyValue === keyValue,
+                resolvedValue: resolvedValue(policyValue, request)
+            };
+        });
+        return {
+            matches: explains.some((explain) => explain.matches),
+            explains
+        };
+    },
+    allowsVariables: true,
+    allowsWildcards: false,
+    isNegative: false
+};
+//# sourceMappingURL=BinaryEquals.js.map

package/dist/esm/condition/binary/BinaryEquals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BinaryEquals.js","sourceRoot":"","sources":["../../../../src/condition/binary/BinaryEquals.ts"],"names":[],"mappings":"AAAA,OAAO,EAA8B,MAAM,mCAAmC,CAAA;AAC9E,OAAO,EAA8B,MAAM,6BAA6B,CAAA;AACxE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAEnD;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAA0B;IACjD,IAAI,EAAE,cAAc;IACpB,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE;QAC3C,MAAM,QAAQ,GAA4B,YAAY,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE;YACzE,OAAO;gBACL,KAAK,EAAE,WAAW;gBAClB,OAAO,EAAE,WAAW,KAAK,QAAQ;gBACjC,aAAa,EAAE,aAAa,CAAC,WAAW,EAAE,OAAO,CAAC;aACnD,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,OAAO;YACL,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;YACpD,QAAQ;SACT,CAAA;IACH,CAAC;IACD,eAAe,EAAE,IAAI;IACrB,eAAe,EAAE,KAAK;IACtB,UAAU,EAAE,KAAK;CAClB,CAAA"}

package/dist/esm/condition/boolean/Bool.d.ts

@@ -0,0 +1,3 @@
+import { type BaseConditionOperator } from '../BaseConditionOperator.js';
+export declare const Bool: BaseConditionOperator;
+//# sourceMappingURL=Bool.d.ts.map

package/dist/esm/condition/boolean/Bool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Bool.d.ts","sourceRoot":"","sources":["../../../../src/condition/boolean/Bool.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,qBAAqB,EAAE,MAAM,6BAA6B,CAAA;AAExE,eAAO,MAAM,IAAI,EAAE,qBAqDlB,CAAA"}