@cloud-copilot/iam-policy 0.0.1 → 0.0.2

package/dist/conditions/conditionOperation.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ConditionOperationImpl = void 0;
+const ifExistsSlice = 'IfExists'.length * -1;
+class ConditionOperationImpl {
+    op;
+    constructor(op) {
+        this.op = op;
+    }
+    setOperator() {
+        if (!this.op.includes(':')) {
+            return undefined;
+        }
+        return this.op.split(':').at(0);
+    }
+    isIfExists() {
+        return this.op.endsWith('IfExists');
+    }
+    baseOperator() {
+        const base = this.op.split(':').at(-1);
+        if (base?.endsWith('IfExists')) {
+            return base.slice(0, ifExistsSlice);
+        }
+        return base;
+    }
+    value() {
+        return this.op;
+    }
+}
+exports.ConditionOperationImpl = ConditionOperationImpl;
+//# sourceMappingURL=conditionOperation.js.map

package/dist/conditions/conditionOperation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conditionOperation.js","sourceRoot":"","sources":["../../src/conditions/conditionOperation.ts"],"names":[],"mappings":";;;AA2BA,MAAM,aAAa,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;AAE5C,MAAa,sBAAsB;IACJ;IAA7B,YAA6B,EAAU;QAAV,OAAE,GAAF,EAAE,CAAQ;IAAG,CAAC;IAEpC,WAAW;QAChB,IAAG,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,OAAO,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAgB,CAAA;IAChD,CAAC;IAEM,UAAU;QACf,OAAO,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAA;IACrC,CAAC;IAEM,YAAY;QACjB,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAA;QACvC,IAAG,IAAI,EAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAA;QACrC,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAEM,KAAK;QACV,OAAO,IAAI,CAAC,EAAE,CAAA;IAChB,CAAC;CAEF;AA1BD,wDA0BC"}

package/dist/esm/conditions/condition.d.ts

@@ -1,5 +1,6 @@
+import { ConditionOperation } from "./conditionOperation.js";
 export interface Condition {
-    operation(): string;
+    operation(): ConditionOperation;
     conditionKey(): string;
     conditionValues(): string[];
 }
@@ -8,7 +9,7 @@ export declare class ConditionImpl implements Condition {
     private readonly key;
     private readonly values;
     constructor(op: string, key: string, values: string | string[]);
-    operation(): string;
+    operation(): ConditionOperation;
     conditionKey(): string;
     conditionValues(): string[];
 }

package/dist/esm/conditions/condition.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"condition.d.ts","sourceRoot":"","sources":["../../../src/conditions/condition.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,SAAS;IACxB,SAAS,IAAI,MAAM,CAAA;IACnB,YAAY,IAAI,MAAM,CAAA;IACtB,eAAe,IAAI,MAAM,EAAE,CAAA;CAC5B;AAED,qBAAa,aAAc,YAAW,SAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,EAAE;IAAU,OAAO,CAAC,QAAQ,CAAC,GAAG;IAAU,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAjE,EAAE,EAAE,MAAM,EAAmB,GAAG,EAAE,MAAM,EAAmB,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE;IAE1G,SAAS,IAAI,MAAM;IAInB,YAAY,IAAI,MAAM;IAItB,eAAe,IAAI,MAAM,EAAE;CAGnC"}
+{"version":3,"file":"condition.d.ts","sourceRoot":"","sources":["../../../src/conditions/condition.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAA0B,MAAM,yBAAyB,CAAA;AAEpF,MAAM,WAAW,SAAS;IACxB,SAAS,IAAI,kBAAkB,CAAA;IAC/B,YAAY,IAAI,MAAM,CAAA;IACtB,eAAe,IAAI,MAAM,EAAE,CAAA;CAC5B;AAED,qBAAa,aAAc,YAAW,SAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,EAAE;IAAU,OAAO,CAAC,QAAQ,CAAC,GAAG;IAAU,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAjE,EAAE,EAAE,MAAM,EAAmB,GAAG,EAAE,MAAM,EAAmB,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE;IAE1G,SAAS,IAAI,kBAAkB;IAI/B,YAAY,IAAI,MAAM;IAItB,eAAe,IAAI,MAAM,EAAE;CAGnC"}

package/dist/esm/conditions/condition.js

@@ -1,3 +1,4 @@
+import { ConditionOperationImpl } from "./conditionOperation.js";
 export class ConditionImpl {
     constructor(op, key, values) {
         this.op = op;
@@ -5,7 +6,7 @@ export class ConditionImpl {
         this.values = values;
     }
     operation() {
-        return this.op;
+        return new ConditionOperationImpl(this.op);
     }
     conditionKey() {
         return this.key;

package/dist/esm/conditions/condition.js.map

@@ -1 +1 @@
-{"version":3,"file":"condition.js","sourceRoot":"","sources":["../../../src/conditions/condition.ts"],"names":[],"mappings":"AAMA,MAAM,OAAO,aAAa;IACxB,YAA6B,EAAU,EAAmB,GAAW,EAAmB,MAAyB;QAApF,OAAE,GAAF,EAAE,CAAQ;QAAmB,QAAG,GAAH,GAAG,CAAQ;QAAmB,WAAM,GAAN,MAAM,CAAmB;IAAG,CAAC;IAE9G,SAAS;QACd,OAAO,IAAI,CAAC,EAAE,CAAA;IAChB,CAAC;IAEM,YAAY;QACjB,OAAO,IAAI,CAAC,GAAG,CAAA;IACjB,CAAC;IAEM,eAAe;QACpB,OAAO,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAA;IACtE,CAAC;CACF"}
+{"version":3,"file":"condition.js","sourceRoot":"","sources":["../../../src/conditions/condition.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,sBAAsB,EAAE,MAAM,yBAAyB,CAAA;AAQpF,MAAM,OAAO,aAAa;IACxB,YAA6B,EAAU,EAAmB,GAAW,EAAmB,MAAyB;QAApF,OAAE,GAAF,EAAE,CAAQ;QAAmB,QAAG,GAAH,GAAG,CAAQ;QAAmB,WAAM,GAAN,MAAM,CAAmB;IAAG,CAAC;IAE9G,SAAS;QACd,OAAO,IAAI,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAC5C,CAAC;IAEM,YAAY;QACjB,OAAO,IAAI,CAAC,GAAG,CAAA;IACjB,CAAC;IAEM,eAAe;QACpB,OAAO,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAA;IACtE,CAAC;CACF"}

package/dist/esm/conditions/conditionOperation.d.ts

@@ -0,0 +1,31 @@
+export type SetOperator = 'ForAllValues' | 'ForAnyValue';
+/**
+ * ConditionOperation is a string that represents the operation of a condition.
+ */
+export interface ConditionOperation {
+    /**
+     * Returns the set modifier if present.
+     */
+    setOperator(): SetOperator | undefined;
+    /**
+     * Returns the base operator of the condition without the set modifier or IfExists.
+     */
+    baseOperator(): string;
+    /**
+     * Returns true if the condition operation ends with IfExists.
+     */
+    isIfExists(): boolean;
+    /**
+     * Returns the raw string of the condition operation.
+     */
+    value(): string;
+}
+export declare class ConditionOperationImpl implements ConditionOperation {
+    private readonly op;
+    constructor(op: string);
+    setOperator(): SetOperator | undefined;
+    isIfExists(): boolean;
+    baseOperator(): string;
+    value(): string;
+}
+//# sourceMappingURL=conditionOperation.d.ts.map

package/dist/esm/conditions/conditionOperation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"conditionOperation.d.ts","sourceRoot":"","sources":["../../../src/conditions/conditionOperation.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,WAAW,GAAG,cAAc,GAAG,aAAa,CAAA;AAExD;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC;;OAEG;IACH,WAAW,IAAI,WAAW,GAAG,SAAS,CAAA;IAEtC;;OAEG;IACH,YAAY,IAAI,MAAM,CAAA;IAEtB;;OAEG;IACH,UAAU,IAAI,OAAO,CAAA;IAErB;;OAEG;IACH,KAAK,IAAI,MAAM,CAAA;CAChB;AAID,qBAAa,sBAAuB,YAAW,kBAAkB;IACnD,OAAO,CAAC,QAAQ,CAAC,EAAE;gBAAF,EAAE,EAAE,MAAM;IAEhC,WAAW,IAAI,WAAW,GAAG,SAAS;IAOtC,UAAU,IAAI,OAAO;IAIrB,YAAY,IAAI,MAAM;IAQtB,KAAK,IAAI,MAAM;CAIvB"}

package/dist/esm/conditions/conditionOperation.js

@@ -0,0 +1,26 @@
+const ifExistsSlice = 'IfExists'.length * -1;
+export class ConditionOperationImpl {
+    constructor(op) {
+        this.op = op;
+    }
+    setOperator() {
+        if (!this.op.includes(':')) {
+            return undefined;
+        }
+        return this.op.split(':').at(0);
+    }
+    isIfExists() {
+        return this.op.endsWith('IfExists');
+    }
+    baseOperator() {
+        const base = this.op.split(':').at(-1);
+        if (base?.endsWith('IfExists')) {
+            return base.slice(0, ifExistsSlice);
+        }
+        return base;
+    }
+    value() {
+        return this.op;
+    }
+}
+//# sourceMappingURL=conditionOperation.js.map

package/dist/esm/conditions/conditionOperation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conditionOperation.js","sourceRoot":"","sources":["../../../src/conditions/conditionOperation.ts"],"names":[],"mappings":"AA2BA,MAAM,aAAa,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;AAE5C,MAAM,OAAO,sBAAsB;IACjC,YAA6B,EAAU;QAAV,OAAE,GAAF,EAAE,CAAQ;IAAG,CAAC;IAEpC,WAAW;QAChB,IAAG,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,OAAO,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAgB,CAAA;IAChD,CAAC;IAEM,UAAU;QACf,OAAO,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAA;IACrC,CAAC;IAEM,YAAY;QACjB,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAA;QACvC,IAAG,IAAI,EAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAA;QACrC,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAEM,KAAK;QACV,OAAO,IAAI,CAAC,EAAE,CAAA;IAChB,CAAC;CAEF"}

package/dist/esm/index.d.ts

@@ -1,5 +1,6 @@
 export type { Action, ActionType, ServiceAction, WildcardAction } from './actions/action.js';
 export type { Condition } from './conditions/condition.js';
+export type { ConditionOperation, SetOperator } from './conditions/conditionOperation.js';
 export { loadPolicy } from './parser.js';
 export type { Policy } from './policies/policy.js';
 export type { Principal, PrincipalType } from './principals/principal.js';

package/dist/esm/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAC5F,YAAY,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAA;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,YAAY,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAClD,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAA;AACzE,YAAY,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAA;AACvD,YAAY,EAAE,eAAe,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAC5F,YAAY,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAA;AAC1D,YAAY,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAA;AACzF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,YAAY,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAClD,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAA;AACzE,YAAY,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAA;AACvD,YAAY,EAAE,eAAe,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAA"}

package/dist/esm/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA"}

package/dist/index.d.ts

@@ -0,0 +1,9 @@
+export type { Action, ActionType, ServiceAction, WildcardAction } from './actions/action.js';
+export type { Condition } from './conditions/condition.js';
+export type { ConditionOperation, SetOperator } from './conditions/conditionOperation.js';
+export { loadPolicy } from './parser.js';
+export type { Policy } from './policies/policy.js';
+export type { Principal, PrincipalType } from './principals/principal.js';
+export type { Resource } from './resources/resource.js';
+export type { ActionStatement, NotActionStatement, NotPrincipalStatement, NotResourceStatement, PrincipalStatement, ResourceStatement, Statement } from './statements/statement.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAC5F,YAAY,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAA;AAC1D,YAAY,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAA;AACzF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,YAAY,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAClD,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAA;AACzE,YAAY,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAA;AACvD,YAAY,EAAE,eAAe,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAA"}

package/dist/index.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.loadPolicy = void 0;
+var parser_js_1 = require("./parser.js");
+Object.defineProperty(exports, "loadPolicy", { enumerable: true, get: function () { return parser_js_1.loadPolicy; } });
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAGA,yCAAwC;AAA/B,uGAAA,UAAU,OAAA"}

package/dist/parser.d.ts

@@ -0,0 +1,9 @@
+import { PolicyImpl } from "./policies/policy.js";
+/**
+ * Load a Policy from a policy document
+ *
+ * @param policyDocument the policy document JSON object
+ * @returns the Policy object for the backing policy document
+ */
+export declare function loadPolicy(policyDocument: any): PolicyImpl;
+//# sourceMappingURL=parser.d.ts.map

package/dist/parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parser.d.ts","sourceRoot":"","sources":["../src/parser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAElD;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,cAAc,EAAE,GAAG,cAE7C"}

package/dist/parser.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.loadPolicy = loadPolicy;
+const policy_js_1 = require("./policies/policy.js");
+/**
+ * Load a Policy from a policy document
+ *
+ * @param policyDocument the policy document JSON object
+ * @returns the Policy object for the backing policy document
+ */
+function loadPolicy(policyDocument) {
+    return new policy_js_1.PolicyImpl(policyDocument);
+}
+//# sourceMappingURL=parser.js.map

package/dist/parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parser.js","sourceRoot":"","sources":["../src/parser.ts"],"names":[],"mappings":";;AAQA,gCAEC;AAVD,oDAAkD;AAElD;;;;;GAKG;AACH,SAAgB,UAAU,CAAC,cAAmB;IAC1C,OAAO,IAAI,sBAAU,CAAC,cAAc,CAAC,CAAC;AAC1C,CAAC"}

package/dist/policies/policy.d.ts

@@ -0,0 +1,14 @@
+import { Statement } from '../statements/statement.js';
+export interface Policy {
+    version(): string | undefined;
+    id(): string | undefined;
+    statements(): Statement[];
+}
+export declare class PolicyImpl {
+    private readonly policyObject;
+    constructor(policyObject: any);
+    version(): string | undefined;
+    id(): string | undefined;
+    statements(): Statement[];
+}
+//# sourceMappingURL=policy.d.ts.map

package/dist/policies/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/policies/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAiB,MAAM,4BAA4B,CAAA;AAErE,MAAM,WAAW,MAAM;IACrB,OAAO,IAAI,MAAM,GAAG,SAAS,CAAA;IAC7B,EAAE,IAAI,MAAM,GAAG,SAAS,CAAA;IACxB,UAAU,IAAI,SAAS,EAAE,CAAA;CAC1B;AAED,qBAAa,UAAU;IACT,OAAO,CAAC,QAAQ,CAAC,YAAY;gBAAZ,YAAY,EAAE,GAAG;IAEvC,OAAO,IAAI,MAAM,GAAG,SAAS;IAI7B,EAAE,IAAI,MAAM,GAAG,SAAS;IAIxB,UAAU,IAAI,SAAS,EAAE;CAGjC"}

package/dist/policies/policy.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PolicyImpl = void 0;
+const statement_js_1 = require("../statements/statement.js");
+class PolicyImpl {
+    policyObject;
+    constructor(policyObject) {
+        this.policyObject = policyObject;
+    }
+    version() {
+        return this.policyObject.Version;
+    }
+    id() {
+        return this.policyObject.Id;
+    }
+    statements() {
+        return [this.policyObject.Statement].flat().map((statement) => new statement_js_1.StatementImpl(statement));
+    }
+}
+exports.PolicyImpl = PolicyImpl;
+//# sourceMappingURL=policy.js.map

package/dist/policies/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/policies/policy.ts"],"names":[],"mappings":";;;AAAA,6DAAqE;AAQrE,MAAa,UAAU;IACQ;IAA7B,YAA6B,YAAiB;QAAjB,iBAAY,GAAZ,YAAY,CAAK;IAAG,CAAC;IAE3C,OAAO;QACZ,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,CAAA;IAClC,CAAC;IAEM,EAAE;QACP,OAAO,IAAI,CAAC,YAAY,CAAC,EAAE,CAAA;IAC7B,CAAC;IAEM,UAAU;QACf,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,SAAc,EAAE,EAAE,CAAC,IAAI,4BAAa,CAAC,SAAS,CAAC,CAAC,CAAA;IACnG,CAAC;CACF;AAdD,gCAcC"}

package/dist/policies/policy.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=policy.test.d.ts.map

package/dist/policies/policy.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.test.d.ts","sourceRoot":"","sources":["../../src/policies/policy.test.ts"],"names":[],"mappings":""}

package/dist/policies/policy.test.js

@@ -0,0 +1,74 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const policy_js_1 = require("./policy.js");
+(0, vitest_1.describe)("PolicyImpl", () => {
+    (0, vitest_1.describe)("version", () => {
+        (0, vitest_1.it)("should return the version", () => {
+            // Given a policy object
+            const policyObject = {
+                Version: "2012-10-17"
+            };
+            // When a PolicyImpl is created
+            const policy = new policy_js_1.PolicyImpl(policyObject);
+            // Then the version should be the version
+            (0, vitest_1.expect)(policy.version()).toBe(policyObject.Version);
+        });
+    });
+    (0, vitest_1.describe)("id", () => {
+        (0, vitest_1.it)("should return the id", () => {
+            // Given a policy object
+            const policyObject = {
+                Id: "MyPolicy"
+            };
+            // When a PolicyImpl is created
+            const policy = new policy_js_1.PolicyImpl(policyObject);
+            // Then the id should be the id
+            (0, vitest_1.expect)(policy.id()).toBe(policyObject.Id);
+        });
+    });
+    (0, vitest_1.describe)("statements", () => {
+        (0, vitest_1.it)('should return the statement when there is only one statement', () => {
+            // Given a policy object with a single statement in an object
+            const policyObject = {
+                Statement: {
+                    Sid: 'Lonely',
+                    Effect: "Allow",
+                    Action: "s3:GetObject",
+                    Resource: "arn:aws:s3:::my_corporate_bucket/*"
+                }
+            };
+            // When a PolicyImpl is created
+            const policy = new policy_js_1.PolicyImpl(policyObject);
+            // Then the statements should be an array with one statement
+            (0, vitest_1.expect)(policy.statements().length).toBe(1);
+            (0, vitest_1.expect)(policy.statements()[0].sid()).toBe('Lonely');
+        });
+        (0, vitest_1.it)('should return the statements when there are multiple statements', () => {
+            // Given a policy object with multiple statements in an array
+            const policyObject = {
+                Statement: [
+                    {
+                        Sid: 'First',
+                        Effect: "Allow",
+                        Action: "s3:GetObject",
+                        Resource: "arn:aws:s3:::my_corporate_bucket/*"
+                    },
+                    {
+                        Sid: 'Second',
+                        Effect: "Deny",
+                        Action: "s3:GetObject",
+                        Resource: "arn:aws:s3:::my_corporate_bucket/secret_plans.txt"
+                    }
+                ]
+            };
+            // When a PolicyImpl is created
+            const policy = new policy_js_1.PolicyImpl(policyObject);
+            // Then the statements should be an array with two statements
+            (0, vitest_1.expect)(policy.statements().length).toBe(2);
+            (0, vitest_1.expect)(policy.statements()[0].sid()).toBe('First');
+            (0, vitest_1.expect)(policy.statements()[1].sid()).toBe('Second');
+        });
+    });
+});
+//# sourceMappingURL=policy.test.js.map

package/dist/policies/policy.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.test.js","sourceRoot":"","sources":["../../src/policies/policy.test.ts"],"names":[],"mappings":";;AAAA,mCAA8C;AAC9C,2CAAyC;AAGzC,IAAA,iBAAQ,EAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,IAAA,iBAAQ,EAAC,SAAS,EAAE,GAAG,EAAE;QACvB,IAAA,WAAE,EAAC,2BAA2B,EAAE,GAAG,EAAE;YACnC,wBAAwB;YACxB,MAAM,YAAY,GAAG;gBACnB,OAAO,EAAE,YAAY;aACtB,CAAA;YAED,+BAA+B;YAC/B,MAAM,MAAM,GAAG,IAAI,sBAAU,CAAC,YAAY,CAAC,CAAC;YAE5C,yCAAyC;YACzC,IAAA,eAAM,EAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAA;IAEF,IAAA,iBAAQ,EAAC,IAAI,EAAE,GAAG,EAAE;QAClB,IAAA,WAAE,EAAC,sBAAsB,EAAE,GAAG,EAAE;YAC9B,wBAAwB;YACxB,MAAM,YAAY,GAAG;gBACnB,EAAE,EAAE,UAAU;aACf,CAAA;YAED,+BAA+B;YAC/B,MAAM,MAAM,GAAG,IAAI,sBAAU,CAAC,YAAY,CAAC,CAAC;YAE5C,+BAA+B;YAC/B,IAAA,eAAM,EAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAA;IAEF,IAAA,iBAAQ,EAAC,YAAY,EAAE,GAAG,EAAE;QAC1B,IAAA,WAAE,EAAC,8DAA8D,EAAE,GAAG,EAAE;YACtE,6DAA6D;YAC7D,MAAM,YAAY,GAAG;gBACnB,SAAS,EAAE;oBACT,GAAG,EAAE,QAAQ;oBACb,MAAM,EAAE,OAAO;oBACf,MAAM,EAAE,cAAc;oBACtB,QAAQ,EAAE,oCAAoC;iBAC/C;aACF,CAAA;YAED,+BAA+B;YAC/B,MAAM,MAAM,GAAG,IAAI,sBAAU,CAAC,YAAY,CAAC,CAAC;YAE5C,4DAA4D;YAC5D,IAAA,eAAM,EAAC,MAAM,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC3C,IAAA,eAAM,EAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtD,CAAC,CAAC,CAAA;QAEF,IAAA,WAAE,EAAC,iEAAiE,EAAE,GAAG,EAAE;YACzE,6DAA6D;YAC7D,MAAM,YAAY,GAAG;gBACnB,SAAS,EAAE;oBACT;wBACE,GAAG,EAAE,OAAO;wBACZ,MAAM,EAAE,OAAO;wBACf,MAAM,EAAE,cAAc;wBACtB,QAAQ,EAAE,oCAAoC;qBAC/C;oBACD;wBACE,GAAG,EAAE,QAAQ;wBACb,MAAM,EAAE,MAAM;wBACd,MAAM,EAAE,cAAc;wBACtB,QAAQ,EAAE,mDAAmD;qBAC9D;iBACF;aACF,CAAA;YAED,+BAA+B;YAC/B,MAAM,MAAM,GAAG,IAAI,sBAAU,CAAC,YAAY,CAAC,CAAC;YAE5C,6DAA6D;YAC7D,IAAA,eAAM,EAAC,MAAM,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC3C,IAAA,eAAM,EAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACnD,IAAA,eAAM,EAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtD,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/principals/principal.d.ts

@@ -0,0 +1,21 @@
+export type PrincipalType = 'AWS' | 'Service' | 'Federated' | 'CanonicalUser';
+export interface Principal {
+    type(): PrincipalType;
+    value(): string;
+}
+export declare class PrincipalImpl {
+    private readonly principalType;
+    private readonly principalId;
+    constructor(principalType: PrincipalType, principalId: string);
+    value(): string;
+    type(): PrincipalType;
+}
+export declare class AwsPrincipal extends PrincipalImpl {
+}
+export declare class ServicePrincipal extends PrincipalImpl {
+}
+export declare class FederatedPrincipal extends PrincipalImpl {
+}
+export declare class CanonicalUserPrincipal extends PrincipalImpl {
+}
+//# sourceMappingURL=principal.d.ts.map

package/dist/principals/principal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"principal.d.ts","sourceRoot":"","sources":["../../src/principals/principal.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,aAAa,GAAG,KAAK,GAAG,SAAS,GAAG,WAAW,GAAG,eAAe,CAAA;AAE7E,MAAM,WAAW,SAAS;IACxB,IAAI,IAAI,aAAa,CAAA;IACrB,KAAK,IAAI,MAAM,CAAA;CAChB;AAED,qBAAa,aAAa;IACZ,OAAO,CAAC,QAAQ,CAAC,aAAa;IAAiB,OAAO,CAAC,QAAQ,CAAC,WAAW;gBAA1D,aAAa,EAAE,aAAa,EAAmB,WAAW,EAAE,MAAM;IAExF,KAAK,IAAI,MAAM;IAIf,IAAI,IAAI,aAAa;CAG7B;AAGD,qBAAa,YAAa,SAAQ,aAAa;CAC9C;AAGD,qBAAa,gBAAiB,SAAQ,aAAa;CAClD;AAGD,qBAAa,kBAAmB,SAAQ,aAAa;CACpD;AAGD,qBAAa,sBAAuB,SAAQ,aAAa;CACxD"}

package/dist/principals/principal.js

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CanonicalUserPrincipal = exports.FederatedPrincipal = exports.ServicePrincipal = exports.AwsPrincipal = exports.PrincipalImpl = void 0;
+class PrincipalImpl {
+    principalType;
+    principalId;
+    constructor(principalType, principalId) {
+        this.principalType = principalType;
+        this.principalId = principalId;
+    }
+    value() {
+        return this.principalId;
+    }
+    type() {
+        return this.principalType;
+    }
+}
+exports.PrincipalImpl = PrincipalImpl;
+//AWS
+class AwsPrincipal extends PrincipalImpl {
+}
+exports.AwsPrincipal = AwsPrincipal;
+//Service
+class ServicePrincipal extends PrincipalImpl {
+}
+exports.ServicePrincipal = ServicePrincipal;
+//Federated
+class FederatedPrincipal extends PrincipalImpl {
+}
+exports.FederatedPrincipal = FederatedPrincipal;
+//CanonicalUser
+class CanonicalUserPrincipal extends PrincipalImpl {
+}
+exports.CanonicalUserPrincipal = CanonicalUserPrincipal;
+//# sourceMappingURL=principal.js.map

package/dist/principals/principal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"principal.js","sourceRoot":"","sources":["../../src/principals/principal.ts"],"names":[],"mappings":";;;AAOA,MAAa,aAAa;IACK;IAA+C;IAA5E,YAA6B,aAA4B,EAAmB,WAAmB;QAAlE,kBAAa,GAAb,aAAa,CAAe;QAAmB,gBAAW,GAAX,WAAW,CAAQ;IAAG,CAAC;IAE5F,KAAK;QACV,OAAO,IAAI,CAAC,WAAW,CAAA;IACzB,CAAC;IAEM,IAAI;QACT,OAAO,IAAI,CAAC,aAAa,CAAA;IAC3B,CAAC;CACF;AAVD,sCAUC;AAED,KAAK;AACL,MAAa,YAAa,SAAQ,aAAa;CAC9C;AADD,oCACC;AAED,SAAS;AACT,MAAa,gBAAiB,SAAQ,aAAa;CAClD;AADD,4CACC;AAED,WAAW;AACX,MAAa,kBAAmB,SAAQ,aAAa;CACpD;AADD,gDACC;AAED,eAAe;AACf,MAAa,sBAAuB,SAAQ,aAAa;CACxD;AADD,wDACC"}

package/dist/resources/resource.d.ts

@@ -0,0 +1,20 @@
+/**
+ * A resource string in an IAM policy
+ */
+export interface Resource {
+    /**
+     * The raw string of the resource
+     */
+    value(): string;
+    /**
+     * Whether the resource is all resources: `"*"`
+     */
+    isAllResources(): boolean;
+}
+export declare class ResourceImpl implements Resource {
+    private readonly rawValue;
+    constructor(rawValue: string);
+    value(): string;
+    isAllResources(): boolean;
+}
+//# sourceMappingURL=resource.d.ts.map

package/dist/resources/resource.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource.d.ts","sourceRoot":"","sources":["../../src/resources/resource.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB;;OAEG;IACH,KAAK,IAAI,MAAM,CAAA;IAEf;;OAEG;IACH,cAAc,IAAI,OAAO,CAAA;CAC1B;AAGD,qBAAa,YAAa,YAAW,QAAQ;IAC/B,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,MAAM;IAEtC,KAAK,IAAI,MAAM;IAIf,cAAc,IAAI,OAAO;CAGjC"}

package/dist/resources/resource.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ResourceImpl = void 0;
+const utils_js_1 = require("../utils.js");
+class ResourceImpl {
+    rawValue;
+    constructor(rawValue) {
+        this.rawValue = rawValue;
+    }
+    value() {
+        return this.rawValue;
+    }
+    isAllResources() {
+        return (0, utils_js_1.isAllWildcards)(this.rawValue);
+    }
+}
+exports.ResourceImpl = ResourceImpl;
+//# sourceMappingURL=resource.js.map

package/dist/resources/resource.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource.js","sourceRoot":"","sources":["../../src/resources/resource.ts"],"names":[],"mappings":";;;AAAA,0CAA6C;AAkB7C,MAAa,YAAY;IACM;IAA7B,YAA6B,QAAgB;QAAhB,aAAQ,GAAR,QAAQ,CAAQ;IAAG,CAAC;IAE1C,KAAK;QACV,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAEM,cAAc;QACnB,OAAO,IAAA,yBAAc,EAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACtC,CAAC;CACF;AAVD,oCAUC"}

package/dist/resources/resource.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=resource.test.d.ts.map

package/dist/resources/resource.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource.test.d.ts","sourceRoot":"","sources":["../../src/resources/resource.test.ts"],"names":[],"mappings":""}

package/dist/resources/resource.test.js

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const resource_js_1 = require("./resource.js");
+(0, vitest_1.describe)("ResourceImpl", () => {
+    (0, vitest_1.describe)("value", () => {
+        (0, vitest_1.it)("should return the value", () => {
+            // Given a resource string
+            const resourceString = "arn:aws:s3:::my_corporate_bucket/*";
+            // When a ResourceImpl is created
+            const resource = new resource_js_1.ResourceImpl(resourceString);
+            // Then the value should be the resource string
+            (0, vitest_1.expect)(resource.value()).toBe(resourceString);
+        });
+    });
+    (0, vitest_1.describe)("isAllResources", () => {
+        (0, vitest_1.it)("should return true when all resources", () => {
+            // Given a resource wildcard
+            const resourceString = "*";
+            // When a ResourceImpl is created
+            const resource = new resource_js_1.ResourceImpl(resourceString);
+            // Then the isAllResources should be true
+            (0, vitest_1.expect)(resource.isAllResources()).toBe(true);
+        });
+        (0, vitest_1.it)("should return false when not all resources", () => {
+            // Given a resource string
+            const resourceString = "arn:aws:s3:::my_corporate_bucket/*";
+            // When a ResourceImpl is created
+            const resource = new resource_js_1.ResourceImpl(resourceString);
+            // Then the isAllResources should be false
+            (0, vitest_1.expect)(resource.isAllResources()).toBe(false);
+        });
+    });
+});
+//# sourceMappingURL=resource.test.js.map

package/dist/resources/resource.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource.test.js","sourceRoot":"","sources":["../../src/resources/resource.test.ts"],"names":[],"mappings":";;AAAA,mCAA8C;AAC9C,+CAA6C;AAE7C,IAAA,iBAAQ,EAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,IAAA,iBAAQ,EAAC,OAAO,EAAE,GAAG,EAAE;QACrB,IAAA,WAAE,EAAC,yBAAyB,EAAE,GAAG,EAAE;YACjC,0BAA0B;YAC1B,MAAM,cAAc,GAAG,oCAAoC,CAAC;YAE5D,iCAAiC;YACjC,MAAM,QAAQ,GAAG,IAAI,0BAAY,CAAC,cAAc,CAAC,CAAC;YAElD,+CAA+C;YAC/C,IAAA,eAAM,EAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAA,iBAAQ,EAAC,gBAAgB,EAAE,GAAG,EAAE;QAC9B,IAAA,WAAE,EAAC,uCAAuC,EAAE,GAAG,EAAE;YAC/C,4BAA4B;YAC5B,MAAM,cAAc,GAAG,GAAG,CAAC;YAE3B,iCAAiC;YACjC,MAAM,QAAQ,GAAG,IAAI,0BAAY,CAAC,cAAc,CAAC,CAAC;YAElD,yCAAyC;YACzC,IAAA,eAAM,EAAC,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,4CAA4C,EAAE,GAAG,EAAE;YACpD,0BAA0B;YAC1B,MAAM,cAAc,GAAG,oCAAoC,CAAC;YAE5D,iCAAiC;YACjC,MAAM,QAAQ,GAAG,IAAI,0BAAY,CAAC,cAAc,CAAC,CAAC;YAElD,0CAA0C;YAC1C,IAAA,eAAM,EAAC,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAA"}