@cloud-copilot/iam-policy 0.0.1

package/dist/cjs/statements/statement.d.ts

@@ -0,0 +1,146 @@
+import { Action } from "../actions/action.js";
+import { Condition } from "../conditions/condition.js";
+import { Principal } from "../principals/principal.js";
+import { Resource } from "../resources/resource.js";
+/**
+ * Represents a statement in an IAM policy
+ */
+export interface Statement {
+    /**
+     * The optional Sid (Statement ID) for a statement
+     */
+    sid(): string | undefined;
+    /**
+     * The effect of the statement, either 'Allow' or 'Deny'
+     */
+    effect(): string;
+    /**
+     * Is the statement an Allow statement
+     */
+    isAllow(): boolean;
+    /**
+     * Is the statement a Deny statement
+     */
+    isDeny(): boolean;
+    /**
+     * The conditions for the statement
+     */
+    conditions(): Condition[];
+    /**
+     * Does the statement have a Principal
+     */
+    isPrincipalStatement(): this is PrincipalStatement;
+    /**
+     * Does the statement have a NotPrincipal
+     */
+    isNotPrincipalStatement(): this is NotPrincipalStatement;
+    /**
+     * Does the statement have an Action
+     */
+    isActionStatement(): this is ActionStatement;
+    /**
+     * Does the statement have a NotAction
+     */
+    isNotActionStatement(): this is NotActionStatement;
+    /**
+     * Does the statement have a Resource
+     */
+    isResourceStatement(): this is ResourceStatement;
+    /**
+     * Does the statement have a NotResource
+     */
+    isNotResourceStatement(): this is NotResourceStatement;
+}
+/**
+ * Represents a statement in an IAM policy that has Action
+ */
+export interface ActionStatement extends Statement {
+    /**
+     * The actions for the statement
+     */
+    actions(): Action[];
+}
+/**
+ * Represents a statement in an IAM policy that has NotAction
+ */
+export interface NotActionStatement extends Statement {
+    /**
+     * The not actions for the statement
+     */
+    notActions(): Action[];
+}
+/**
+ * Represents a statement in an IAM policy that has Resource
+ */
+export interface ResourceStatement extends Statement {
+    /**
+     * The resources for the statement
+     */
+    resources(): Resource[];
+    /**
+     * Is the resource element exactly a single wildcard: `"*"`
+     */
+    hasSingleResourceWildcard(): boolean;
+}
+/**
+ * Represents a statement in an IAM policy that has NotResource
+ */
+export interface NotResourceStatement extends Statement {
+    /**
+     * The not resources for the statement
+     */
+    notResources(): Resource[];
+}
+/**
+ * Represents a statement in an IAM policy that has Principal
+ */
+export interface PrincipalStatement extends Statement {
+    /**
+     * The principals for the statement
+     */
+    principals(): Principal[];
+}
+/**
+ * Represents a statement in an IAM policy that has NotPrincipal
+ */
+export interface NotPrincipalStatement extends Statement {
+    /**
+     * The not principals for the statement
+     */
+    notPrincipals(): Principal[];
+}
+/**
+ * Implementation of the Statement interface and all its sub-interfaces
+ */
+export declare class StatementImpl implements Statement, ActionStatement, NotActionStatement, ResourceStatement, NotResourceStatement, PrincipalStatement {
+    private readonly statementObject;
+    constructor(statementObject: any);
+    sid(): string | undefined;
+    effect(): string;
+    isAllow(): boolean;
+    isDeny(): boolean;
+    isPrincipalStatement(): this is PrincipalStatement;
+    isNotPrincipalStatement(): this is NotPrincipalStatement;
+    principals(): Principal[];
+    notPrincipals(): Principal[];
+    /**
+     * Parse the principal object into PrincipalImpl objects.
+     *
+     * This is non trivial and we don't want to implement this in each function.
+     *
+     * @param principals the Principal or NotPrincipal object ot parse
+     * @returns the backing principals for a Principal or NotPrincipal object
+     */
+    private parsePrincipalObject;
+    isActionStatement(): this is ActionStatement;
+    isNotActionStatement(): this is NotActionStatement;
+    actions(): Action[];
+    notActions(): Action[];
+    isResourceStatement(): this is ResourceStatement;
+    isNotResourceStatement(): this is NotResourceStatement;
+    resources(): Resource[];
+    notResources(): Resource[];
+    hasSingleResourceWildcard(): boolean;
+    conditions(): Condition[];
+}
+//# sourceMappingURL=statement.d.ts.map

package/dist/cjs/statements/statement.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"statement.d.ts","sourceRoot":"","sources":["../../../src/statements/statement.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAc,MAAM,sBAAsB,CAAA;AACzD,OAAO,EAAE,SAAS,EAAiB,MAAM,4BAA4B,CAAA;AACrE,OAAO,EAAE,SAAS,EAAgC,MAAM,4BAA4B,CAAA;AACpF,OAAO,EAAE,QAAQ,EAAgB,MAAM,0BAA0B,CAAA;AAEjE;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB;;OAEG;IACH,GAAG,IAAI,MAAM,GAAG,SAAS,CAAA;IAEzB;;OAEG;IACH,MAAM,IAAI,MAAM,CAAA;IAEhB;;OAEG;IACH,OAAO,IAAI,OAAO,CAAA;IAElB;;OAEG;IACH,MAAM,IAAI,OAAO,CAAA;IAEjB;;OAEG;IACH,UAAU,IAAI,SAAS,EAAE,CAAA;IAEzB;;OAEG;IACH,oBAAoB,IAAI,IAAI,IAAI,kBAAkB,CAAA;IAElD;;OAEG;IACH,uBAAuB,IAAI,IAAI,IAAI,qBAAqB,CAAA;IAExD;;OAEG;IACH,iBAAiB,IAAI,IAAI,IAAI,eAAe,CAAA;IAE5C;;OAEG;IACH,oBAAoB,IAAI,IAAI,IAAI,kBAAkB,CAAA;IAElD;;OAEG;IACH,mBAAmB,IAAI,IAAI,IAAI,iBAAiB,CAAA;IAEhD;;OAEG;IACH,sBAAsB,IAAI,IAAI,IAAI,oBAAoB,CAAA;CACvD;AAED;;GAEG;AACH,MAAM,WAAW,eAAgB,SAAQ,SAAS;IAChD;;OAEG;IACH,OAAO,IAAI,MAAM,EAAE,CAAA;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAmB,SAAQ,SAAS;IAEnD;;OAEG;IACH,UAAU,IAAI,MAAM,EAAE,CAAA;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAkB,SAAQ,SAAS;IAClD;;OAEG;IACH,SAAS,IAAI,QAAQ,EAAE,CAAA;IAEvB;;OAEG;IACH,yBAAyB,IAAI,OAAO,CAAA;CACrC;AAED;;GAEG;AACH,MAAM,WAAW,oBAAqB,SAAQ,SAAS;IACrD;;OAEG;IACH,YAAY,IAAI,QAAQ,EAAE,CAAA;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,kBAAmB,SAAQ,SAAS;IACnD;;OAEG;IACH,UAAU,IAAI,SAAS,EAAE,CAAA;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,qBAAsB,SAAQ,SAAS;IAEtD;;OAEG;IACH,aAAa,IAAI,SAAS,EAAE,CAAA;CAC7B;AAED;;GAEG;AACH,qBAAa,aAAc,YAAW,SAAS,EAAE,eAAe,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,kBAAkB;IACnI,OAAO,CAAC,QAAQ,CAAC,eAAe;gBAAf,eAAe,EAAE,GAAG;IAE1C,GAAG,IAAI,MAAM,GAAG,SAAS;IAIzB,MAAM,IAAI,MAAM;IAIhB,OAAO,IAAI,OAAO;IAIlB,MAAM,IAAI,OAAO;IAIjB,oBAAoB,IAAI,IAAI,IAAI,kBAAkB;IAIlD,uBAAuB,IAAI,IAAI,IAAI,qBAAqB;IAIxD,UAAU,IAAI,SAAS,EAAE;IAOzB,aAAa,IAAI,SAAS,EAAE;IAOnC;;;;;;;OAOG;IACH,OAAO,CAAC,oBAAoB;IAcrB,iBAAiB,IAAI,IAAI,IAAI,eAAe;IAI5C,oBAAoB,IAAI,IAAI,IAAI,kBAAkB;IAIlD,OAAO,IAAI,MAAM,EAAE;IAOnB,UAAU,IAAI,MAAM,EAAE;IAOtB,mBAAmB,IAAI,IAAI,IAAI,iBAAiB;IAIhD,sBAAsB,IAAI,IAAI,IAAI,oBAAoB;IAItD,SAAS,IAAI,QAAQ,EAAE;IAOvB,YAAY,IAAI,QAAQ,EAAE;IAO1B,yBAAyB,IAAI,OAAO;IAOpC,UAAU,IAAI,SAAS,EAAE;CAWjC"}

package/dist/cjs/statements/statement.js

@@ -0,0 +1,121 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.StatementImpl = void 0;
+const action_js_1 = require("../actions/action.js");
+const condition_js_1 = require("../conditions/condition.js");
+const principal_js_1 = require("../principals/principal.js");
+const resource_js_1 = require("../resources/resource.js");
+/**
+ * Implementation of the Statement interface and all its sub-interfaces
+ */
+class StatementImpl {
+    statementObject;
+    constructor(statementObject) {
+        this.statementObject = statementObject;
+    }
+    sid() {
+        return this.statementObject.Sid;
+    }
+    effect() {
+        return this.statementObject.Effect;
+    }
+    isAllow() {
+        return this.effect() === 'Allow';
+    }
+    isDeny() {
+        return this.effect() === 'Deny';
+    }
+    isPrincipalStatement() {
+        return this.statementObject.Principal !== undefined;
+    }
+    isNotPrincipalStatement() {
+        return this.statementObject.NotPrincipal !== undefined;
+    }
+    principals() {
+        if (!this.isPrincipalStatement()) {
+            throw new Error('Called principals on a statement without Principal, use isPrincipalStatement before calling principals');
+        }
+        return this.parsePrincipalObject(this.statementObject.Principal);
+    }
+    notPrincipals() {
+        if (!this.isNotPrincipalStatement()) {
+            throw new Error('Called notPrincipals on a statement without NotPrincipal, use isNotPrincipalStatement before calling notPrincipals');
+        }
+        return this.parsePrincipalObject(this.statementObject.NotPrincipal);
+    }
+    /**
+     * Parse the principal object into PrincipalImpl objects.
+     *
+     * This is non trivial and we don't want to implement this in each function.
+     *
+     * @param principals the Principal or NotPrincipal object ot parse
+     * @returns the backing principals for a Principal or NotPrincipal object
+     */
+    parsePrincipalObject(principals) {
+        if (typeof principals === 'string') {
+            return [new principal_js_1.PrincipalImpl('AWS', principals)];
+        }
+        return Object.entries(principals).map(([principalType, principalValue]) => {
+            if (typeof principalValue === 'string') {
+                return new principal_js_1.PrincipalImpl(principalType, principalValue);
+            }
+            return Object.entries(principalValue).map(([key, value]) => {
+                return new principal_js_1.PrincipalImpl(principalType, value);
+            });
+        }).flat();
+    }
+    isActionStatement() {
+        return this.statementObject.Action !== undefined;
+    }
+    isNotActionStatement() {
+        return this.statementObject.NotAction !== undefined;
+    }
+    actions() {
+        if (!this.isActionStatement()) {
+            throw new Error('Called actions on a statement without Action, use isActionStatement before calling actions');
+        }
+        return [this.statementObject.Action].flat().map((action) => new action_js_1.ActionImpl(action));
+    }
+    notActions() {
+        if (!this.isNotActionStatement()) {
+            throw new Error('Called notActions on a statement without NotAction, use isNotActionStatement before calling notActions');
+        }
+        return [this.statementObject.NotAction].flat().map((action) => new action_js_1.ActionImpl(action));
+    }
+    isResourceStatement() {
+        return this.statementObject.Resource !== undefined;
+    }
+    isNotResourceStatement() {
+        return this.statementObject.NotResource !== undefined;
+    }
+    resources() {
+        if (!this.isResourceStatement()) {
+            throw new Error('Called resources on a statement without Resource, use isResourceStatement before calling resources');
+        }
+        return [this.statementObject.Resource].flat().map((resource) => new resource_js_1.ResourceImpl(resource));
+    }
+    notResources() {
+        if (!this.isNotResourceStatement()) {
+            throw new Error('Called notResources on a statement without NotResource, use isNotResourceStatement before calling notResources');
+        }
+        return [this.statementObject.NotResource].flat().map((resource) => new resource_js_1.ResourceImpl(resource));
+    }
+    hasSingleResourceWildcard() {
+        if (!this.isResourceStatement()) {
+            throw new Error('Called hasSingleResourceWildcard on a statement without Resource, use isResourceStatement before calling hasSingleResourceWildcard');
+        }
+        return this.isResourceStatement() && this.statementObject.Resource === '*';
+    }
+    conditions() {
+        if (!this.statementObject.Condition) {
+            return [];
+        }
+        return Object.entries(this.statementObject.Condition).map(([opKey, opValue]) => {
+            return Object.entries(opValue).map(([condKey, condValue]) => {
+                return new condition_js_1.ConditionImpl(opKey, condKey, condValue);
+            });
+        }).flat();
+    }
+}
+exports.StatementImpl = StatementImpl;
+//# sourceMappingURL=statement.js.map

package/dist/cjs/statements/statement.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"statement.js","sourceRoot":"","sources":["../../../src/statements/statement.ts"],"names":[],"mappings":";;;AAAA,oDAAyD;AACzD,6DAAqE;AACrE,6DAAoF;AACpF,0DAAiE;AAiIjE;;GAEG;AACH,MAAa,aAAa;IACK;IAA7B,YAA6B,eAAoB;QAApB,oBAAe,GAAf,eAAe,CAAK;IAAG,CAAC;IAE9C,GAAG;QACR,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,CAAA;IACjC,CAAC;IAEM,MAAM;QACX,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,CAAA;IACpC,CAAC;IAEM,OAAO;QACZ,OAAO,IAAI,CAAC,MAAM,EAAE,KAAK,OAAO,CAAA;IAClC,CAAC;IAEM,MAAM;QACX,OAAO,IAAI,CAAC,MAAM,EAAE,KAAK,MAAM,CAAA;IACjC,CAAC;IAEM,oBAAoB;QACzB,OAAO,IAAI,CAAC,eAAe,CAAC,SAAS,KAAK,SAAS,CAAC;IACtD,CAAC;IAEM,uBAAuB;QAC5B,OAAO,IAAI,CAAC,eAAe,CAAC,YAAY,KAAK,SAAS,CAAC;IACzD,CAAC;IAEM,UAAU;QACf,IAAG,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,wGAAwG,CAAC,CAAA;QAC3H,CAAC;QACD,OAAO,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAA;IAClE,CAAC;IAEM,aAAa;QAClB,IAAG,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,oHAAoH,CAAC,CAAA;QACvI,CAAC;QACD,OAAO,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,CAAA;IACrE,CAAC;IAED;;;;;;;OAOG;IACK,oBAAoB,CAAC,UAAe;QAC1C,IAAG,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;YAClC,OAAO,CAAC,IAAI,4BAAa,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAA;QAC/C,CAAC;QACD,OAAO,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa,EAAE,cAAc,CAAC,EAAE,EAAE;YACxE,IAAG,OAAO,cAAc,KAAK,QAAQ,EAAE,CAAC;gBACtC,OAAO,IAAI,4BAAa,CAAC,aAA8B,EAAE,cAAc,CAAC,CAAA;YAC1E,CAAC;YACD,OAAO,MAAM,CAAC,OAAO,CAAC,cAAqB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;gBAChE,OAAO,IAAI,4BAAa,CAAC,aAA8B,EAAE,KAAe,CAAC,CAAA;YAC3E,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IACX,CAAC;IAEM,iBAAiB;QACtB,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,KAAK,SAAS,CAAC;IACnD,CAAC;IAEM,oBAAoB;QACzB,OAAO,IAAI,CAAC,eAAe,CAAC,SAAS,KAAK,SAAS,CAAC;IACtD,CAAC;IAEM,OAAO;QACZ,IAAG,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,4FAA4F,CAAC,CAAA;QAC/G,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,MAAW,EAAE,EAAE,CAAC,IAAI,sBAAU,CAAC,MAAM,CAAC,CAAC,CAAA;IAC1F,CAAC;IAEM,UAAU;QACf,IAAG,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,wGAAwG,CAAC,CAAA;QAC3H,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,MAAW,EAAE,EAAE,CAAC,IAAI,sBAAU,CAAC,MAAM,CAAC,CAAC,CAAA;IAC7F,CAAC;IAEM,mBAAmB;QACxB,OAAO,IAAI,CAAC,eAAe,CAAC,QAAQ,KAAK,SAAS,CAAC;IACrD,CAAC;IAEM,sBAAsB;QAC3B,OAAO,IAAI,CAAC,eAAe,CAAC,WAAW,KAAK,SAAS,CAAC;IACxD,CAAC;IAEM,SAAS;QACd,IAAG,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,oGAAoG,CAAC,CAAA;QACvH,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,QAAa,EAAE,EAAE,CAAC,IAAI,0BAAY,CAAC,QAAQ,CAAC,CAAC,CAAA;IAClG,CAAC;IAEM,YAAY;QACjB,IAAG,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,gHAAgH,CAAC,CAAA;QACnI,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,QAAa,EAAE,EAAE,CAAC,IAAI,0BAAY,CAAC,QAAQ,CAAC,CAAC,CAAA;IACrG,CAAC;IAEM,yBAAyB;QAC9B,IAAG,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,oIAAoI,CAAC,CAAA;QACvJ,CAAC;QACD,OAAO,IAAI,CAAC,mBAAmB,EAAE,IAAI,IAAI,CAAC,eAAe,CAAC,QAAQ,KAAK,GAAG,CAAA;IAC5E,CAAC;IAEM,UAAU;QACf,IAAG,CAAC,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,CAAC;YACnC,OAAO,EAAE,CAAA;QACX,CAAC;QAED,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,EAAE;YAC7E,OAAO,MAAM,CAAC,OAAO,CAAC,OAAc,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,EAAE;gBACjE,OAAO,IAAI,4BAAa,CAAC,KAAK,EAAE,OAAO,EAAE,SAA8B,CAAC,CAAA;YAC1E,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IACX,CAAC;CACF;AA7HD,sCA6HC"}

package/dist/cjs/utils.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Checks if a string is all wildcards(*)
+ *
+ * @param value The value to check if it is a wildcard
+ * @returns True if the value is all wildcards, false otherwise
+ */
+export declare function isAllWildcards(value: string): boolean;
+//# sourceMappingURL=utils.d.ts.map

package/dist/cjs/utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../src/utils.ts"],"names":[],"mappings":"AACA;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAErD"}

package/dist/cjs/utils.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isAllWildcards = isAllWildcards;
+/**
+ * Checks if a string is all wildcards(*)
+ *
+ * @param value The value to check if it is a wildcard
+ * @returns True if the value is all wildcards, false otherwise
+ */
+function isAllWildcards(value) {
+    return value.match(/^\**$/) !== null;
+}
+//# sourceMappingURL=utils.js.map

package/dist/cjs/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../src/utils.ts"],"names":[],"mappings":";;AAOA,wCAEC;AARD;;;;;GAKG;AACH,SAAgB,cAAc,CAAC,KAAa;IAC1C,OAAO,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,CAAA;AACtC,CAAC"}

package/dist/esm/actions/action.d.ts

@@ -0,0 +1,51 @@
+export type ActionType = 'service' | 'wildcard';
+/**
+ * An Action string in an IAM policy
+ */
+export interface Action {
+    /**
+     * The type of actions
+     */
+    type(): ActionType;
+    /**
+     * The raw string of the action
+     */
+    value(): string;
+    /**
+     * Whether the action is a wildcard action: `"*"`
+     */
+    isWildcardAction(): boolean;
+    /**
+     * Whether the action is a service action: `"service:Action"`
+     */
+    isServiceAction(): boolean;
+}
+/**
+ * A wildcard action: `"*"`
+ */
+export interface WildcardAction extends Action {
+}
+/**
+ * A service action: `"service:Action"`
+ */
+export interface ServiceAction extends Action {
+    /**
+     * The service of the action
+     */
+    service(): string;
+    /**
+     * The action within the service
+     */
+    action(): string;
+}
+export declare class ActionImpl implements Action, WildcardAction, ServiceAction {
+    private readonly rawValue;
+    constructor(rawValue: string);
+    type(): ActionType;
+    value(): string;
+    isWildcardAction(): this is WildcardAction;
+    isServiceAction(): this is ServiceAction;
+    service(): string;
+    action(): string;
+}
+//# sourceMappingURL=action.d.ts.map

package/dist/esm/actions/action.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"action.d.ts","sourceRoot":"","sources":["../../../src/actions/action.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,UAAU,CAAA;AAE/C;;GAEG;AACH,MAAM,WAAW,MAAM;IACrB;;OAEG;IACH,IAAI,IAAI,UAAU,CAAA;IAElB;;OAEG;IACH,KAAK,IAAI,MAAM,CAAA;IAEf;;OAEG;IACH,gBAAgB,IAAI,OAAO,CAAA;IAE3B;;OAEG;IACH,eAAe,IAAI,OAAO,CAAA;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,cAAe,SAAQ,MAAM;CAC7C;AAED;;GAEG;AACH,MAAM,WAAW,aAAc,SAAQ,MAAM;IAC3C;;OAEG;IACH,OAAO,IAAI,MAAM,CAAA;IAEjB;;OAEG;IACH,MAAM,IAAI,MAAM,CAAA;CACjB;AAED,qBAAa,UAAW,YAAW,MAAM,EAAG,cAAc,EAAE,aAAa;IAC3D,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,MAAM;IAEtC,IAAI,IAAI,UAAU;IAOlB,KAAK,IAAI,MAAM;IAIf,gBAAgB,IAAI,IAAI,IAAI,cAAc;IAI1C,eAAe,IAAI,IAAI,IAAI,aAAa;IAIxC,OAAO,IAAI,MAAM;IAIjB,MAAM,IAAI,MAAM;CAGxB"}

package/dist/esm/actions/action.js

@@ -0,0 +1,28 @@
+import { isAllWildcards } from "../utils.js";
+export class ActionImpl {
+    constructor(rawValue) {
+        this.rawValue = rawValue;
+    }
+    type() {
+        if (isAllWildcards(this.rawValue)) {
+            return 'wildcard';
+        }
+        return 'service';
+    }
+    value() {
+        return this.rawValue;
+    }
+    isWildcardAction() {
+        return this.type() === 'wildcard';
+    }
+    isServiceAction() {
+        return this.type() === 'service';
+    }
+    service() {
+        return this.rawValue.split(':')[0];
+    }
+    action() {
+        return this.rawValue.split(':')[1];
+    }
+}
+//# sourceMappingURL=action.js.map

package/dist/esm/actions/action.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"action.js","sourceRoot":"","sources":["../../../src/actions/action.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAkD5C,MAAM,OAAO,UAAU;IACrB,YAA6B,QAAgB;QAAhB,aAAQ,GAAR,QAAQ,CAAQ;IAAG,CAAC;IAE1C,IAAI;QACT,IAAG,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjC,OAAO,UAAU,CAAA;QACnB,CAAC;QACD,OAAO,SAAS,CAAA;IAClB,CAAC;IAEM,KAAK;QACV,OAAO,IAAI,CAAC,QAAQ,CAAA;IACtB,CAAC;IAEM,gBAAgB;QACrB,OAAO,IAAI,CAAC,IAAI,EAAE,KAAK,UAAU,CAAA;IACnC,CAAC;IAEM,eAAe;QACpB,OAAO,IAAI,CAAC,IAAI,EAAE,KAAK,SAAS,CAAA;IAClC,CAAC;IAEM,OAAO;QACZ,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IACpC,CAAC;IAEM,MAAM;QACX,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IACpC,CAAC;CACF"}

package/dist/esm/conditions/condition.d.ts

@@ -0,0 +1,15 @@
+export interface Condition {
+    operation(): string;
+    conditionKey(): string;
+    conditionValues(): string[];
+}
+export declare class ConditionImpl implements Condition {
+    private readonly op;
+    private readonly key;
+    private readonly values;
+    constructor(op: string, key: string, values: string | string[]);
+    operation(): string;
+    conditionKey(): string;
+    conditionValues(): string[];
+}
+//# sourceMappingURL=condition.d.ts.map

package/dist/esm/conditions/condition.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"condition.d.ts","sourceRoot":"","sources":["../../../src/conditions/condition.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,SAAS;IACxB,SAAS,IAAI,MAAM,CAAA;IACnB,YAAY,IAAI,MAAM,CAAA;IACtB,eAAe,IAAI,MAAM,EAAE,CAAA;CAC5B;AAED,qBAAa,aAAc,YAAW,SAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,EAAE;IAAU,OAAO,CAAC,QAAQ,CAAC,GAAG;IAAU,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAjE,EAAE,EAAE,MAAM,EAAmB,GAAG,EAAE,MAAM,EAAmB,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE;IAE1G,SAAS,IAAI,MAAM;IAInB,YAAY,IAAI,MAAM;IAItB,eAAe,IAAI,MAAM,EAAE;CAGnC"}

package/dist/esm/conditions/condition.js

@@ -0,0 +1,17 @@
+export class ConditionImpl {
+    constructor(op, key, values) {
+        this.op = op;
+        this.key = key;
+        this.values = values;
+    }
+    operation() {
+        return this.op;
+    }
+    conditionKey() {
+        return this.key;
+    }
+    conditionValues() {
+        return typeof this.values === 'string' ? [this.values] : this.values;
+    }
+}
+//# sourceMappingURL=condition.js.map

package/dist/esm/conditions/condition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"condition.js","sourceRoot":"","sources":["../../../src/conditions/condition.ts"],"names":[],"mappings":"AAMA,MAAM,OAAO,aAAa;IACxB,YAA6B,EAAU,EAAmB,GAAW,EAAmB,MAAyB;QAApF,OAAE,GAAF,EAAE,CAAQ;QAAmB,QAAG,GAAH,GAAG,CAAQ;QAAmB,WAAM,GAAN,MAAM,CAAmB;IAAG,CAAC;IAE9G,SAAS;QACd,OAAO,IAAI,CAAC,EAAE,CAAA;IAChB,CAAC;IAEM,YAAY;QACjB,OAAO,IAAI,CAAC,GAAG,CAAA;IACjB,CAAC;IAEM,eAAe;QACpB,OAAO,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAA;IACtE,CAAC;CACF"}

package/dist/esm/index.d.ts

@@ -0,0 +1,8 @@
+export type { Action, ActionType, ServiceAction, WildcardAction } from './actions/action.js';
+export type { Condition } from './conditions/condition.js';
+export { loadPolicy } from './parser.js';
+export type { Policy } from './policies/policy.js';
+export type { Principal, PrincipalType } from './principals/principal.js';
+export type { Resource } from './resources/resource.js';
+export type { ActionStatement, NotActionStatement, NotPrincipalStatement, NotResourceStatement, PrincipalStatement, ResourceStatement, Statement } from './statements/statement.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/esm/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAC5F,YAAY,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAA;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,YAAY,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAClD,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAA;AACzE,YAAY,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAA;AACvD,YAAY,EAAE,eAAe,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAA"}

package/dist/esm/index.js

@@ -0,0 +1,2 @@
+export { loadPolicy } from './parser.js';
+//# sourceMappingURL=index.js.map

package/dist/esm/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA"}

package/dist/esm/package.json

@@ -0,0 +1,3 @@
+{
+    "type": "module"
+}

package/dist/esm/parser.d.ts

@@ -0,0 +1,9 @@
+import { PolicyImpl } from "./policies/policy.js";
+/**
+ * Load a Policy from a policy document
+ *
+ * @param policyDocument the policy document JSON object
+ * @returns the Policy object for the backing policy document
+ */
+export declare function loadPolicy(policyDocument: any): PolicyImpl;
+//# sourceMappingURL=parser.d.ts.map

package/dist/esm/parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parser.d.ts","sourceRoot":"","sources":["../../src/parser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAElD;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,cAAc,EAAE,GAAG,cAE7C"}

package/dist/esm/parser.js

@@ -0,0 +1,11 @@
+import { PolicyImpl } from "./policies/policy.js";
+/**
+ * Load a Policy from a policy document
+ *
+ * @param policyDocument the policy document JSON object
+ * @returns the Policy object for the backing policy document
+ */
+export function loadPolicy(policyDocument) {
+    return new PolicyImpl(policyDocument);
+}
+//# sourceMappingURL=parser.js.map

package/dist/esm/parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parser.js","sourceRoot":"","sources":["../../src/parser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAElD;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,cAAmB;IAC1C,OAAO,IAAI,UAAU,CAAC,cAAc,CAAC,CAAC;AAC1C,CAAC"}

package/dist/esm/policies/policy.d.ts

@@ -0,0 +1,14 @@
+import { Statement } from '../statements/statement.js';
+export interface Policy {
+    version(): string | undefined;
+    id(): string | undefined;
+    statements(): Statement[];
+}
+export declare class PolicyImpl {
+    private readonly policyObject;
+    constructor(policyObject: any);
+    version(): string | undefined;
+    id(): string | undefined;
+    statements(): Statement[];
+}
+//# sourceMappingURL=policy.d.ts.map

package/dist/esm/policies/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../../src/policies/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAiB,MAAM,4BAA4B,CAAA;AAErE,MAAM,WAAW,MAAM;IACrB,OAAO,IAAI,MAAM,GAAG,SAAS,CAAA;IAC7B,EAAE,IAAI,MAAM,GAAG,SAAS,CAAA;IACxB,UAAU,IAAI,SAAS,EAAE,CAAA;CAC1B;AAED,qBAAa,UAAU;IACT,OAAO,CAAC,QAAQ,CAAC,YAAY;gBAAZ,YAAY,EAAE,GAAG;IAEvC,OAAO,IAAI,MAAM,GAAG,SAAS;IAI7B,EAAE,IAAI,MAAM,GAAG,SAAS;IAIxB,UAAU,IAAI,SAAS,EAAE;CAGjC"}

package/dist/esm/policies/policy.js

@@ -0,0 +1,16 @@
+import { StatementImpl } from '../statements/statement.js';
+export class PolicyImpl {
+    constructor(policyObject) {
+        this.policyObject = policyObject;
+    }
+    version() {
+        return this.policyObject.Version;
+    }
+    id() {
+        return this.policyObject.Id;
+    }
+    statements() {
+        return [this.policyObject.Statement].flat().map((statement) => new StatementImpl(statement));
+    }
+}
+//# sourceMappingURL=policy.js.map

package/dist/esm/policies/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../../src/policies/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAQrE,MAAM,OAAO,UAAU;IACrB,YAA6B,YAAiB;QAAjB,iBAAY,GAAZ,YAAY,CAAK;IAAG,CAAC;IAE3C,OAAO;QACZ,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,CAAA;IAClC,CAAC;IAEM,EAAE;QACP,OAAO,IAAI,CAAC,YAAY,CAAC,EAAE,CAAA;IAC7B,CAAC;IAEM,UAAU;QACf,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,SAAc,EAAE,EAAE,CAAC,IAAI,aAAa,CAAC,SAAS,CAAC,CAAC,CAAA;IACnG,CAAC;CACF"}

package/dist/esm/principals/principal.d.ts

@@ -0,0 +1,21 @@
+export type PrincipalType = 'AWS' | 'Service' | 'Federated' | 'CanonicalUser';
+export interface Principal {
+    type(): PrincipalType;
+    value(): string;
+}
+export declare class PrincipalImpl {
+    private readonly principalType;
+    private readonly principalId;
+    constructor(principalType: PrincipalType, principalId: string);
+    value(): string;
+    type(): PrincipalType;
+}
+export declare class AwsPrincipal extends PrincipalImpl {
+}
+export declare class ServicePrincipal extends PrincipalImpl {
+}
+export declare class FederatedPrincipal extends PrincipalImpl {
+}
+export declare class CanonicalUserPrincipal extends PrincipalImpl {
+}
+//# sourceMappingURL=principal.d.ts.map

package/dist/esm/principals/principal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"principal.d.ts","sourceRoot":"","sources":["../../../src/principals/principal.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,aAAa,GAAG,KAAK,GAAG,SAAS,GAAG,WAAW,GAAG,eAAe,CAAA;AAE7E,MAAM,WAAW,SAAS;IACxB,IAAI,IAAI,aAAa,CAAA;IACrB,KAAK,IAAI,MAAM,CAAA;CAChB;AAED,qBAAa,aAAa;IACZ,OAAO,CAAC,QAAQ,CAAC,aAAa;IAAiB,OAAO,CAAC,QAAQ,CAAC,WAAW;gBAA1D,aAAa,EAAE,aAAa,EAAmB,WAAW,EAAE,MAAM;IAExF,KAAK,IAAI,MAAM;IAIf,IAAI,IAAI,aAAa;CAG7B;AAGD,qBAAa,YAAa,SAAQ,aAAa;CAC9C;AAGD,qBAAa,gBAAiB,SAAQ,aAAa;CAClD;AAGD,qBAAa,kBAAmB,SAAQ,aAAa;CACpD;AAGD,qBAAa,sBAAuB,SAAQ,aAAa;CACxD"}

package/dist/esm/principals/principal.js

@@ -0,0 +1,25 @@
+export class PrincipalImpl {
+    constructor(principalType, principalId) {
+        this.principalType = principalType;
+        this.principalId = principalId;
+    }
+    value() {
+        return this.principalId;
+    }
+    type() {
+        return this.principalType;
+    }
+}
+//AWS
+export class AwsPrincipal extends PrincipalImpl {
+}
+//Service
+export class ServicePrincipal extends PrincipalImpl {
+}
+//Federated
+export class FederatedPrincipal extends PrincipalImpl {
+}
+//CanonicalUser
+export class CanonicalUserPrincipal extends PrincipalImpl {
+}
+//# sourceMappingURL=principal.js.map

package/dist/esm/principals/principal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"principal.js","sourceRoot":"","sources":["../../../src/principals/principal.ts"],"names":[],"mappings":"AAOA,MAAM,OAAO,aAAa;IACxB,YAA6B,aAA4B,EAAmB,WAAmB;QAAlE,kBAAa,GAAb,aAAa,CAAe;QAAmB,gBAAW,GAAX,WAAW,CAAQ;IAAG,CAAC;IAE5F,KAAK;QACV,OAAO,IAAI,CAAC,WAAW,CAAA;IACzB,CAAC;IAEM,IAAI;QACT,OAAO,IAAI,CAAC,aAAa,CAAA;IAC3B,CAAC;CACF;AAED,KAAK;AACL,MAAM,OAAO,YAAa,SAAQ,aAAa;CAC9C;AAED,SAAS;AACT,MAAM,OAAO,gBAAiB,SAAQ,aAAa;CAClD;AAED,WAAW;AACX,MAAM,OAAO,kBAAmB,SAAQ,aAAa;CACpD;AAED,eAAe;AACf,MAAM,OAAO,sBAAuB,SAAQ,aAAa;CACxD"}

package/dist/esm/resources/resource.d.ts

@@ -0,0 +1,20 @@
+/**
+ * A resource string in an IAM policy
+ */
+export interface Resource {
+    /**
+     * The raw string of the resource
+     */
+    value(): string;
+    /**
+     * Whether the resource is all resources: `"*"`
+     */
+    isAllResources(): boolean;
+}
+export declare class ResourceImpl implements Resource {
+    private readonly rawValue;
+    constructor(rawValue: string);
+    value(): string;
+    isAllResources(): boolean;
+}
+//# sourceMappingURL=resource.d.ts.map

package/dist/esm/resources/resource.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource.d.ts","sourceRoot":"","sources":["../../../src/resources/resource.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB;;OAEG;IACH,KAAK,IAAI,MAAM,CAAA;IAEf;;OAEG;IACH,cAAc,IAAI,OAAO,CAAA;CAC1B;AAGD,qBAAa,YAAa,YAAW,QAAQ;IAC/B,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,MAAM;IAEtC,KAAK,IAAI,MAAM;IAIf,cAAc,IAAI,OAAO;CAGjC"}

package/dist/esm/resources/resource.js

@@ -0,0 +1,13 @@
+import { isAllWildcards } from "../utils.js";
+export class ResourceImpl {
+    constructor(rawValue) {
+        this.rawValue = rawValue;
+    }
+    value() {
+        return this.rawValue;
+    }
+    isAllResources() {
+        return isAllWildcards(this.rawValue);
+    }
+}
+//# sourceMappingURL=resource.js.map

package/dist/esm/resources/resource.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource.js","sourceRoot":"","sources":["../../../src/resources/resource.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAkB7C,MAAM,OAAO,YAAY;IACvB,YAA6B,QAAgB;QAAhB,aAAQ,GAAR,QAAQ,CAAQ;IAAG,CAAC;IAE1C,KAAK;QACV,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAEM,cAAc;QACnB,OAAO,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACtC,CAAC;CACF"}