@cloud-copilot/iam-simulate 0.1.0

package/dist/cjs/principal/principal.d.ts

@@ -0,0 +1,30 @@
+import { Principal } from "@cloud-copilot/iam-policy";
+import { AwsRequest } from "../request/request.js";
+export type PrincipalMatchResult = 'Match' | 'NoMatch' | 'AccountLevelMatch';
+/**
+ * Check to see if a request matches a Principal element in an IAM policy statement
+ *
+ * @param request the request to check
+ * @param principal the list of principals in the Principal element of the Statement
+ * @returns if the request matches the Principal element, and if so, how it matches
+ */
+export declare function requestMatchesPrincipal(request: AwsRequest, principal: Principal[]): PrincipalMatchResult;
+/**
+ * Check to see if a request matches a NotPrincipal element in an IAM policy statement
+ *
+ * @param request the request to check
+ * @param notPrincipal the list of principals in the NotPrincipal element of the Statement
+ * @returns
+ */
+export declare function requestMatchesNotPrincipal(request: AwsRequest, notPrincipal: Principal[]): PrincipalMatchResult;
+/**
+ * Check to see if a request matches a principal statement
+ *
+ * @param request the request to check
+ * @param principalStatement the principal statement to check the request against
+ * @returns if the request matches the principal statement, and if so, how it matches
+ */
+export declare function requestMatchesPrincipalStatement(request: AwsRequest, principalStatement: Principal): PrincipalMatchResult;
+export declare function isAssumedRoleArn(principal: string): boolean;
+export declare function roleArnFromAssumedRoleArn(assumedRoleArn: string): string;
+//# sourceMappingURL=principal.d.ts.map

package/dist/cjs/principal/principal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"principal.d.ts","sourceRoot":"","sources":["../../../src/principal/principal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AA4CnD,MAAM,MAAM,oBAAoB,GAAG,OAAO,GAAG,SAAS,GAAG,mBAAmB,CAAA;AAE5E;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,oBAAoB,CAWzG;AAED;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,oBAAoB,CAiB/G;AAED;;;;;;GAMG;AACH,wBAAgB,gCAAgC,CAAC,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,SAAS,GAAG,oBAAoB,CAgDzH;AAID,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAE3D;AAED,wBAAgB,yBAAyB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAKxE"}

package/dist/cjs/principal/principal.js

@@ -0,0 +1,107 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.requestMatchesPrincipal = requestMatchesPrincipal;
+exports.requestMatchesNotPrincipal = requestMatchesNotPrincipal;
+exports.requestMatchesPrincipalStatement = requestMatchesPrincipalStatement;
+exports.isAssumedRoleArn = isAssumedRoleArn;
+exports.roleArnFromAssumedRoleArn = roleArnFromAssumedRoleArn;
+/**
+ * Check to see if a request matches a Principal element in an IAM policy statement
+ *
+ * @param request the request to check
+ * @param principal the list of principals in the Principal element of the Statement
+ * @returns if the request matches the Principal element, and if so, how it matches
+ */
+function requestMatchesPrincipal(request, principal) {
+    const matches = principal.map(principalStatement => requestMatchesPrincipalStatement(request, principalStatement));
+    if (matches.includes('Match')) {
+        return 'Match';
+    }
+    if (matches.includes('AccountLevelMatch')) {
+        return 'AccountLevelMatch';
+    }
+    return 'NoMatch';
+}
+/**
+ * Check to see if a request matches a NotPrincipal element in an IAM policy statement
+ *
+ * @param request the request to check
+ * @param notPrincipal the list of principals in the NotPrincipal element of the Statement
+ * @returns
+ */
+function requestMatchesNotPrincipal(request, notPrincipal) {
+    const matches = notPrincipal.map(principalStatement => requestMatchesPrincipalStatement(request, principalStatement));
+    if (matches.includes('Match')) {
+        return 'NoMatch';
+    }
+    /**
+     * Need to do research on this. If there is an account level match on a NotPrincipal, does that
+     * mean it tentatively matches the NotPrincipal, or does it mean it does not match the NotPrincipal?
+     *
+     * We need to test this.
+     */
+    if (matches.includes('AccountLevelMatch')) {
+        return 'NoMatch';
+    }
+    return 'Match';
+}
+/**
+ * Check to see if a request matches a principal statement
+ *
+ * @param request the request to check
+ * @param principalStatement the principal statement to check the request against
+ * @returns if the request matches the principal statement, and if so, how it matches
+ */
+function requestMatchesPrincipalStatement(request, principalStatement) {
+    if (principalStatement.isServicePrincipal()) {
+        if (principalStatement.service() === request.principal.value()) {
+            return 'Match';
+        }
+        return 'NoMatch';
+    }
+    if (principalStatement.isCanonicalUserPrincipal()) {
+        if (principalStatement.canonicalUser() === request.principal.value()) {
+            return 'Match';
+        }
+        return 'NoMatch';
+    }
+    if (principalStatement.isFederatedPrincipal()) {
+        if (principalStatement.federated() === request.principal.value()) {
+            return 'Match';
+        }
+        return 'NoMatch';
+    }
+    if (principalStatement.isWildcardPrincipal()) {
+        return 'Match';
+    }
+    if (principalStatement.isAccountPrincipal()) {
+        if (principalStatement.accountId() === request.principal.accountId()) {
+            return 'AccountLevelMatch';
+        }
+        return 'NoMatch';
+    }
+    if (principalStatement.isAwsPrincipal()) {
+        if (isAssumedRoleArn(request.principal.value())) {
+            const sessionArn = request.principal.value();
+            const roleArn = roleArnFromAssumedRoleArn(sessionArn);
+            if (principalStatement.arn() === roleArn || principalStatement.arn() === sessionArn) {
+                return 'Match';
+            }
+        }
+        if (principalStatement.arn() === request.principal.value()) {
+            return 'Match';
+        }
+    }
+    return 'NoMatch';
+}
+const assumedRoleArnRegex = /^arn:aws:sts::\d{12}:assumed-role\/.*$/;
+function isAssumedRoleArn(principal) {
+    return assumedRoleArnRegex.test(principal);
+}
+function roleArnFromAssumedRoleArn(assumedRoleArn) {
+    const stsParts = assumedRoleArn.split(':');
+    const resourceParts = stsParts.at(-1).split('/');
+    const rolePathAndName = resourceParts.slice(1, -1).join('/');
+    return `arn:aws:iam::${stsParts[4]}:role/${rolePathAndName}`;
+}
+//# sourceMappingURL=principal.js.map

package/dist/cjs/principal/principal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"principal.js","sourceRoot":"","sources":["../../../src/principal/principal.ts"],"names":[],"mappings":";;AAsDA,0DAWC;AASD,gEAiBC;AASD,4EAgDC;AAID,4CAEC;AAED,8DAKC;AAlHD;;;;;;GAMG;AACH,SAAgB,uBAAuB,CAAC,OAAmB,EAAE,SAAsB;IACjF,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC,gCAAgC,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC,CAAA;IAClH,IAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7B,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,IAAG,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACzC,OAAO,mBAAmB,CAAA;IAC5B,CAAC;IAED,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,0BAA0B,CAAC,OAAmB,EAAE,YAAyB;IACvF,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC,gCAAgC,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC,CAAA;IACrH,IAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7B,OAAO,SAAS,CAAA;IAClB,CAAC;IAED;;;;;OAKG;IACH,IAAG,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACzC,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,gCAAgC,CAAC,OAAmB,EAAE,kBAA6B;IACjG,IAAG,kBAAkB,CAAC,kBAAkB,EAAE,EAAE,CAAC;QAC3C,IAAG,kBAAkB,CAAC,OAAO,EAAE,KAAK,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;YAC9D,OAAO,OAAO,CAAA;QAChB,CAAC;QACD,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,IAAG,kBAAkB,CAAC,wBAAwB,EAAE,EAAE,CAAC;QACjD,IAAG,kBAAkB,CAAC,aAAa,EAAE,KAAK,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;YACpE,OAAO,OAAO,CAAA;QAChB,CAAC;QACD,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,IAAG,kBAAkB,CAAC,oBAAoB,EAAE,EAAE,CAAC;QAC7C,IAAG,kBAAkB,CAAC,SAAS,EAAE,KAAK,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;YAChE,OAAO,OAAO,CAAA;QAChB,CAAC;QACD,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,IAAG,kBAAkB,CAAC,mBAAmB,EAAE,EAAE,CAAC;QAC5C,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,IAAG,kBAAkB,CAAC,kBAAkB,EAAE,EAAE,CAAC;QAC3C,IAAG,kBAAkB,CAAC,SAAS,EAAE,KAAK,OAAO,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,CAAC;YACpE,OAAO,mBAAmB,CAAA;QAC5B,CAAC;QACD,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,IAAG,kBAAkB,CAAC,cAAc,EAAE,EAAE,CAAC;QACvC,IAAG,gBAAgB,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC;YAC/C,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,CAAA;YAC5C,MAAM,OAAO,GAAG,yBAAyB,CAAC,UAAU,CAAC,CAAA;YACrD,IAAG,kBAAkB,CAAC,GAAG,EAAE,KAAM,OAAO,IAAI,kBAAkB,CAAC,GAAG,EAAE,KAAK,UAAU,EAAE,CAAC;gBACpF,OAAO,OAAO,CAAA;YAChB,CAAC;QACH,CAAC;QAED,IAAG,kBAAkB,CAAC,GAAG,EAAE,KAAK,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;YAC1D,OAAO,OAAO,CAAA;QAChB,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,MAAM,mBAAmB,GAAG,wCAAwC,CAAA;AAEpE,SAAgB,gBAAgB,CAAC,SAAiB;IAChD,OAAO,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;AAC5C,CAAC;AAED,SAAgB,yBAAyB,CAAC,cAAsB;IAC9D,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC1C,MAAM,aAAa,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACjD,MAAM,eAAe,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC5D,OAAO,gBAAgB,QAAQ,CAAC,CAAC,CAAC,SAAS,eAAe,EAAE,CAAA;AAC9D,CAAC"}

package/dist/cjs/request/request.d.ts

@@ -0,0 +1,50 @@
+import { ContextKey, RequestContext } from "../requestContext.js";
+import { RequestAction } from "./requestAction.js";
+import { RequestPrincipal } from "./requestPrincipal.js";
+import { RequestResource } from "./requestResource.js";
+/**
+ * A request to be evaluated by the policy engine
+ */
+export interface AwsRequest {
+    principal: RequestPrincipal;
+    /**
+     * The action to be performed
+     */
+    action: RequestAction;
+    /**
+     * The resource to be acted upon
+     */
+    resource?: RequestResource;
+    /**
+     * The context of the request
+     */
+    context: RequestContext;
+    /**
+     * Checks to see if a context key is valid for the request and
+     * exists in the context
+     *
+     * @param key the key to check for existence
+     * @returns true if the key is valid for the request and exists in the request context.
+     */
+    contextKeyExists(key: string): boolean;
+    /**
+     * Gets the value of a context key, if it is valid for the request and exist, otherwise throws an error
+     * @param key the key to get the value of
+     *
+     * @returns the value of the context key
+     */
+    getContextKeyValue(key: string): ContextKey;
+}
+export declare class AwsRequestImpl implements AwsRequest {
+    readonly principalString: string;
+    readonly resourceString: string | undefined;
+    readonly actionString: string;
+    readonly context: RequestContext;
+    constructor(principalString: string, resourceString: string | undefined, actionString: string, context: RequestContext);
+    get action(): RequestAction;
+    get resource(): RequestResource;
+    get principal(): RequestPrincipal;
+    contextKeyExists(key: string): boolean;
+    getContextKeyValue(key: string): ContextKey;
+}
+//# sourceMappingURL=request.d.ts.map

package/dist/cjs/request/request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request.d.ts","sourceRoot":"","sources":["../../../src/request/request.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAAE,aAAa,EAAqB,MAAM,oBAAoB,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAwB,MAAM,uBAAuB,CAAC;AAC/E,OAAO,EAAE,eAAe,EAAuB,MAAM,sBAAsB,CAAC;AAE5E;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,gBAAgB,CAAC;IAE5B;;OAEG;IACH,MAAM,EAAE,aAAa,CAAC;IAEtB;;OAEG;IACH,QAAQ,CAAC,EAAE,eAAe,CAAC;IAE3B;;OAEG;IACH,OAAO,EAAE,cAAc,CAAA;IAEvB;;;;;;OAMG;IACH,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IAEvC;;;;;OAKG;IACH,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAAC;CAC7C;AAED,qBAAa,cAAe,YAAW,UAAU;aAEnB,eAAe,EAAE,MAAM;aACvB,cAAc,EAAE,MAAM,GAAG,SAAS;aAClC,YAAY,EAAE,MAAM;aACpB,OAAO,EAAE,cAAc;gBAHvB,eAAe,EAAE,MAAM,EACvB,cAAc,EAAE,MAAM,GAAG,SAAS,EAClC,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,cAAc;IAInD,IAAI,MAAM,IAAI,aAAa,CAE1B;IAED,IAAI,QAAQ,IAAI,eAAe,CAK9B;IAED,IAAI,SAAS,IAAI,gBAAgB,CAEhC;IAGM,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAKtC,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU;CAMnD"}

package/dist/cjs/request/request.js

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AwsRequestImpl = void 0;
+const requestAction_js_1 = require("./requestAction.js");
+const requestPrincipal_js_1 = require("./requestPrincipal.js");
+const requestResource_js_1 = require("./requestResource.js");
+class AwsRequestImpl {
+    principalString;
+    resourceString;
+    actionString;
+    context;
+    constructor(principalString, resourceString, actionString, context) {
+        this.principalString = principalString;
+        this.resourceString = resourceString;
+        this.actionString = actionString;
+        this.context = context;
+    }
+    get action() {
+        return new requestAction_js_1.RequestActionImpl(this.actionString);
+    }
+    get resource() {
+        if (this.resourceString === undefined) {
+            throw new Error('Resource is undefined');
+        }
+        return new requestResource_js_1.ResourceRequestImpl(this.resourceString);
+    }
+    get principal() {
+        return new requestPrincipal_js_1.RequestPrincipalImpl(this.principalString);
+    }
+    contextKeyExists(key) {
+        return this.context.contextKeyExists(key);
+    }
+    getContextKeyValue(key) {
+        if (!this.contextKeyExists(key)) {
+            throw new Error(`Invalid context key: ${key}`);
+        }
+        return this.context.contextKeyValue(key);
+    }
+}
+exports.AwsRequestImpl = AwsRequestImpl;
+//# sourceMappingURL=request.js.map

package/dist/cjs/request/request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request.js","sourceRoot":"","sources":["../../../src/request/request.ts"],"names":[],"mappings":";;;AACA,yDAAsE;AACtE,+DAA+E;AAC/E,6DAA4E;AAyC5E,MAAa,cAAc;IAEG;IACA;IACA;IACA;IAH5B,YAA4B,eAAuB,EACvB,cAAkC,EAClC,YAAoB,EACpB,OAAuB;QAHvB,oBAAe,GAAf,eAAe,CAAQ;QACvB,mBAAc,GAAd,cAAc,CAAoB;QAClC,iBAAY,GAAZ,YAAY,CAAQ;QACpB,YAAO,GAAP,OAAO,CAAgB;IAEnD,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,oCAAiB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAClD,CAAC;IAED,IAAI,QAAQ;QACV,IAAG,IAAI,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAA;QAC1C,CAAC;QACD,OAAO,IAAI,wCAAmB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACtD,CAAC;IAED,IAAI,SAAS;QACX,OAAO,IAAI,0CAAoB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACxD,CAAC;IAGM,gBAAgB,CAAC,GAAW;QACjC,OAAO,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC5C,CAAC;IAGM,kBAAkB,CAAC,GAAW;QACnC,IAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,wBAAwB,GAAG,EAAE,CAAC,CAAA;QAChD,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;IAC3C,CAAC;CACF;AApCD,wCAoCC"}

package/dist/cjs/request/requestAction.d.ts

@@ -0,0 +1,27 @@
+/**
+ * A service action: `"service:Action"`
+ */
+export interface RequestAction {
+    /**
+     * The raw string value of the action
+     */
+    value(): string;
+    /**
+     * The service of the action
+     *
+     * Guaranteed to be lowercase
+     */
+    service(): string;
+    /**
+     * The action within the service
+     */
+    action(): string;
+}
+export declare class RequestActionImpl implements RequestAction {
+    private readonly rawValue;
+    constructor(rawValue: string);
+    value(): string;
+    service(): string;
+    action(): string;
+}
+//# sourceMappingURL=requestAction.d.ts.map

package/dist/cjs/request/requestAction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"requestAction.d.ts","sourceRoot":"","sources":["../../../src/request/requestAction.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B;;OAEG;IACH,KAAK,IAAI,MAAM,CAAA;IAEf;;;;OAIG;IACH,OAAO,IAAI,MAAM,CAAA;IAEjB;;OAEG;IACH,MAAM,IAAI,MAAM,CAAA;CACjB;AAED,qBAAa,iBAAkB,YAAW,aAAa;IACzC,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,MAAM;IAEtC,KAAK,IAAI,MAAM;IAIf,OAAO,IAAI,MAAM;IAIjB,MAAM,IAAI,MAAM;CAGxB"}

package/dist/cjs/request/requestAction.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RequestActionImpl = void 0;
+class RequestActionImpl {
+    rawValue;
+    constructor(rawValue) {
+        this.rawValue = rawValue;
+    }
+    value() {
+        return this.rawValue;
+    }
+    service() {
+        return this.rawValue.split(':')[0].toLowerCase();
+    }
+    action() {
+        return this.rawValue.split(':')[1];
+    }
+}
+exports.RequestActionImpl = RequestActionImpl;
+//# sourceMappingURL=requestAction.js.map

package/dist/cjs/request/requestAction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"requestAction.js","sourceRoot":"","sources":["../../../src/request/requestAction.ts"],"names":[],"mappings":";;;AAsBA,MAAa,iBAAiB;IACC;IAA7B,YAA6B,QAAgB;QAAhB,aAAQ,GAAR,QAAQ,CAAQ;IAAG,CAAC;IAE1C,KAAK;QACV,OAAO,IAAI,CAAC,QAAQ,CAAA;IACtB,CAAC;IAEM,OAAO;QACZ,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAA;IACnD,CAAC;IAEM,MAAM;QACX,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IACpC,CAAC;CACF;AAdD,8CAcC"}

package/dist/cjs/request/requestPrincipal.d.ts

@@ -0,0 +1,20 @@
+/**
+ * A principal in a request
+ */
+export interface RequestPrincipal {
+    /**
+     * The raw string of the principal
+     */
+    value(): string;
+    /**
+     * The account id of the principal, if the principal is an ARN that has an account ID, otherwise undefined
+     */
+    accountId(): string | undefined;
+}
+export declare class RequestPrincipalImpl implements RequestPrincipal {
+    private readonly rawValue;
+    constructor(rawValue: string);
+    accountId(): string | undefined;
+    value(): string;
+}
+//# sourceMappingURL=requestPrincipal.d.ts.map

package/dist/cjs/request/requestPrincipal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"requestPrincipal.d.ts","sourceRoot":"","sources":["../../../src/request/requestPrincipal.ts"],"names":[],"mappings":"AACA;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAE/B;;OAEG;IACH,KAAK,IAAI,MAAM,CAAC;IAEhB;;OAEG;IACH,SAAS,IAAI,MAAM,GAAG,SAAS,CAAC;CAEjC;AAED,qBAAa,oBAAqB,YAAW,gBAAgB;IAC/C,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,MAAM;IAE7C,SAAS,IAAI,MAAM,GAAG,SAAS;IAIxB,KAAK,IAAI,MAAM;CAGvB"}

package/dist/cjs/request/requestPrincipal.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RequestPrincipalImpl = void 0;
+class RequestPrincipalImpl {
+    rawValue;
+    constructor(rawValue) {
+        this.rawValue = rawValue;
+    }
+    accountId() {
+        return this.value().split(":").at(4);
+    }
+    value() {
+        return this.rawValue;
+    }
+}
+exports.RequestPrincipalImpl = RequestPrincipalImpl;
+//# sourceMappingURL=requestPrincipal.js.map

package/dist/cjs/request/requestPrincipal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"requestPrincipal.js","sourceRoot":"","sources":["../../../src/request/requestPrincipal.ts"],"names":[],"mappings":";;;AAkBA,MAAa,oBAAoB;IACF;IAA7B,YAA6B,QAAgB;QAAhB,aAAQ,GAAR,QAAQ,CAAQ;IAAG,CAAC;IAEjD,SAAS;QACP,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC;IAEM,KAAK;QACV,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;CACF;AAVD,oDAUC"}

package/dist/cjs/request/requestResource.d.ts

@@ -0,0 +1,37 @@
+export interface RequestResource {
+    /**
+     * The raw string of the resource
+     */
+    value(): string;
+    /**
+     * The partition of the ARN
+     */
+    partition(): string;
+    /**
+     * The service of the ARN
+     */
+    service(): string;
+    /**
+     * The region of the ARN
+     */
+    region(): string;
+    /**
+     * The account of the ARN
+     */
+    account(): string;
+    /**
+     * The resource of the ARN
+     */
+    resource(): string;
+}
+export declare class ResourceRequestImpl implements RequestResource {
+    private readonly rawValue;
+    constructor(rawValue: string);
+    partition(): string;
+    service(): string;
+    region(): string;
+    account(): string;
+    resource(): string;
+    value(): string;
+}
+//# sourceMappingURL=requestResource.d.ts.map

package/dist/cjs/request/requestResource.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"requestResource.d.ts","sourceRoot":"","sources":["../../../src/request/requestResource.ts"],"names":[],"mappings":"AACA,MAAM,WAAW,eAAe;IAC9B;;OAEG;IACH,KAAK,IAAI,MAAM,CAAA;IAEf;;OAEG;IACH,SAAS,IAAI,MAAM,CAAA;IAEnB;;OAEG;IACH,OAAO,IAAI,MAAM,CAAA;IAEjB;;OAEG;IACH,MAAM,IAAI,MAAM,CAAA;IAEhB;;OAEG;IACH,OAAO,IAAI,MAAM,CAAA;IAEjB;;OAEG;IACH,QAAQ,IAAI,MAAM,CAAA;CACnB;AAGD,qBAAa,mBAAoB,YAAW,eAAe;IAC7C,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,MAAM;IAE7C,SAAS,IAAI,MAAM;IAInB,OAAO,IAAI,MAAM;IAIjB,MAAM,IAAI,MAAM;IAIhB,OAAO,IAAI,MAAM;IAIjB,QAAQ,IAAI,MAAM;IAIlB,KAAK,IAAI,MAAM;CAGhB"}

package/dist/cjs/request/requestResource.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ResourceRequestImpl = void 0;
+class ResourceRequestImpl {
+    rawValue;
+    constructor(rawValue) {
+        this.rawValue = rawValue;
+    }
+    partition() {
+        return this.value().split(":").at(1);
+    }
+    service() {
+        return this.value().split(":").at(2);
+    }
+    region() {
+        return this.value().split(":").at(3);
+    }
+    account() {
+        return this.value().split(":").at(4);
+    }
+    resource() {
+        return this.value().split(":").slice(5).join(":");
+    }
+    value() {
+        return this.rawValue;
+    }
+}
+exports.ResourceRequestImpl = ResourceRequestImpl;
+//# sourceMappingURL=requestResource.js.map

package/dist/cjs/request/requestResource.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"requestResource.js","sourceRoot":"","sources":["../../../src/request/requestResource.ts"],"names":[],"mappings":";;;AAkCA,MAAa,mBAAmB;IACD;IAA7B,YAA6B,QAAgB;QAAhB,aAAQ,GAAR,QAAQ,CAAQ;IAAG,CAAC;IAEjD,SAAS;QACP,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,CAAA;IACvC,CAAC;IAED,OAAO;QACL,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,CAAA;IACvC,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,CAAA;IACvC,CAAC;IAED,OAAO;QACL,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,CAAA;IACvC,CAAC;IAED,QAAQ;QACN,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACnD,CAAC;IAED,KAAK;QACH,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;CACF;AA1BD,kDA0BC"}

package/dist/cjs/request/requestSupplementalData.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Supplemental data for the request
+ */
+export interface RequestSupplementalData {
+    contextKeysForAction: string[];
+    contextKeysForResource: string[];
+    contextKeysForPrincipal: string[];
+    contextKeyValidForRequest: (key: string) => boolean;
+}
+export declare class RequestSupplementalDataImpl implements RequestSupplementalData {
+    readonly contextKeysForAction: string[];
+    readonly contextKeysForResource: string[];
+    readonly contextKeysForPrincipal: string[];
+    private allActions;
+    constructor(contextKeysForAction: string[], contextKeysForResource: string[], contextKeysForPrincipal: string[]);
+    contextKeyValidForRequest(key: string): boolean;
+}
+export declare const MockRequestSupplementalData: RequestSupplementalData;
+//# sourceMappingURL=requestSupplementalData.d.ts.map

package/dist/cjs/request/requestSupplementalData.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"requestSupplementalData.d.ts","sourceRoot":"","sources":["../../../src/request/requestSupplementalData.ts"],"names":[],"mappings":"AACA;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,sBAAsB,EAAE,MAAM,EAAE,CAAC;IACjC,uBAAuB,EAAE,MAAM,EAAE,CAAC;IAClC,yBAAyB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;CACrD;AAED,qBAAa,2BAA4B,YAAW,uBAAuB;aAI7C,oBAAoB,EAAE,MAAM,EAAE;aAC9B,sBAAsB,EAAE,MAAM,EAAE;aAChC,uBAAuB,EAAE,MAAM,EAAE;IAJ7D,OAAO,CAAC,UAAU,CAA0B;gBAEhB,oBAAoB,EAAE,MAAM,EAAE,EAC9B,sBAAsB,EAAE,MAAM,EAAE,EAChC,uBAAuB,EAAE,MAAM,EAAE;IAY7D,yBAAyB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;CAMhD;AAED,eAAO,MAAM,2BAA2B,EAAE,uBAKzC,CAAA"}

package/dist/cjs/request/requestSupplementalData.js

@@ -0,0 +1,37 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MockRequestSupplementalData = exports.RequestSupplementalDataImpl = void 0;
+class RequestSupplementalDataImpl {
+    contextKeysForAction;
+    contextKeysForResource;
+    contextKeysForPrincipal;
+    allActions = new Set();
+    constructor(contextKeysForAction, contextKeysForResource, contextKeysForPrincipal) {
+        this.contextKeysForAction = contextKeysForAction;
+        this.contextKeysForResource = contextKeysForResource;
+        this.contextKeysForPrincipal = contextKeysForPrincipal;
+        for (const action of contextKeysForAction) {
+            this.allActions.add(action);
+        }
+        for (const resource of contextKeysForResource) {
+            this.allActions.add(resource);
+        }
+        for (const principal of contextKeysForPrincipal) {
+            this.allActions.add(...[principal]);
+        }
+    }
+    contextKeyValidForRequest(key) {
+        /*
+        Todo: Add a way to check if the key has a slash in it such as aws:RequestKeys or aws:ResourceTagKeys
+        */
+        return this.allActions.has(key);
+    }
+}
+exports.RequestSupplementalDataImpl = RequestSupplementalDataImpl;
+exports.MockRequestSupplementalData = {
+    contextKeysForAction: [],
+    contextKeysForResource: [],
+    contextKeysForPrincipal: [],
+    contextKeyValidForRequest: (key) => true
+};
+//# sourceMappingURL=requestSupplementalData.js.map

package/dist/cjs/request/requestSupplementalData.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"requestSupplementalData.js","sourceRoot":"","sources":["../../../src/request/requestSupplementalData.ts"],"names":[],"mappings":";;;AAWA,MAAa,2BAA2B;IAIV;IACA;IACA;IAJpB,UAAU,GAAgB,IAAI,GAAG,EAAE,CAAC;IAE5C,YAA4B,oBAA8B,EAC9B,sBAAgC,EAChC,uBAAiC;QAFjC,yBAAoB,GAApB,oBAAoB,CAAU;QAC9B,2BAAsB,GAAtB,sBAAsB,CAAU;QAChC,4BAAuB,GAAvB,uBAAuB,CAAU;QAC3D,KAAI,MAAM,MAAM,IAAI,oBAAoB,EAAE,CAAC;YACzC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAC7B,CAAC;QACD,KAAI,MAAM,QAAQ,IAAI,sBAAsB,EAAE,CAAC;YAC7C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QAC/B,CAAC;QACD,KAAI,MAAM,SAAS,IAAI,uBAAuB,EAAE,CAAC;YAC/C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAA;QACrC,CAAC;IACH,CAAC;IAED,yBAAyB,CAAC,GAAW;QACnC;;UAEE;QACF,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IACjC,CAAC;CACF;AAxBD,kEAwBC;AAEY,QAAA,2BAA2B,GAA4B;IAClE,oBAAoB,EAAE,EAAE;IACxB,sBAAsB,EAAE,EAAE;IAC1B,uBAAuB,EAAE,EAAE;IAC3B,yBAAyB,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,IAAI;CACjD,CAAA"}

package/dist/cjs/request.d.ts

@@ -0,0 +1,15 @@
+import { RequestContext } from "./requestContext.js";
+export interface Request {
+    principal: string;
+    action: string;
+    resource: string;
+    context: RequestContext;
+}
+export declare class RequestImpl implements Request {
+    readonly principal: string;
+    readonly resource: string;
+    readonly action: string;
+    readonly context: RequestContext;
+    constructor(principal: string, resource: string, action: string, context: RequestContext);
+}
+//# sourceMappingURL=request.d.ts.map

package/dist/cjs/request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request.d.ts","sourceRoot":"","sources":["../../src/request.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD,MAAM,WAAW,OAAO;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,cAAc,CAAA;CACxB;AAED,qBAAa,WAAY,YAAW,OAAO;aAEb,SAAS,EAAE,MAAM;aACjB,QAAQ,EAAE,MAAM;aAChB,MAAM,EAAE,MAAM;aACd,OAAO,EAAE,cAAc;gBAHvB,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,cAAc;CAGpD"}

package/dist/cjs/request.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RequestImpl = void 0;
+class RequestImpl {
+    principal;
+    resource;
+    action;
+    context;
+    constructor(principal, resource, action, context) {
+        this.principal = principal;
+        this.resource = resource;
+        this.action = action;
+        this.context = context;
+    }
+}
+exports.RequestImpl = RequestImpl;
+//# sourceMappingURL=request.js.map

package/dist/cjs/request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request.js","sourceRoot":"","sources":["../../src/request.ts"],"names":[],"mappings":";;;AASA,MAAa,WAAW;IAEM;IACA;IACA;IACA;IAH5B,YAA4B,SAAiB,EACjB,QAAgB,EAChB,MAAc,EACd,OAAuB;QAHvB,cAAS,GAAT,SAAS,CAAQ;QACjB,aAAQ,GAAR,QAAQ,CAAQ;QAChB,WAAM,GAAN,MAAM,CAAQ;QACd,YAAO,GAAP,OAAO,CAAgB;IAEnD,CAAC;CACF;AARD,kCAQC"}

package/dist/cjs/requestContext.d.ts

@@ -0,0 +1,63 @@
+/**
+ * The context metadata available in a request
+ */
+export interface RequestContext {
+    /**
+     * Check if a context key exists in a request
+     * @param name the name of the context key to check for, case insensitive
+     * @returns true if the context key exists, false otherwise
+     */
+    contextKeyExists: (name: string) => boolean;
+    /**
+     * Get the value of a context key in a request
+     *
+     * @param name the name of the context key to get the value of, case insensitive
+     * @returns the value of the context key
+     */
+    contextKeyValue: (name: string) => ContextKey;
+}
+/**
+ * A context key in a request
+ */
+export interface ContextKey {
+    /**
+     * The name of the context key
+     */
+    name: string;
+    /**
+     * Check if the context key is a string value
+     */
+    isStringValue(): this is StringContextKey;
+    /**
+     * Check if the context key is an array value
+     */
+    isArrayValue(): this is ArrayContextKey;
+}
+export interface StringContextKey extends ContextKey {
+    /**
+     * The value of the context key if it is a string
+     */
+    value: string;
+}
+export interface ArrayContextKey extends ContextKey {
+    /**
+     * The array of values of the context key if it is an array
+     */
+    values: string[];
+}
+export declare class RequestContextImpl implements RequestContext {
+    private context;
+    constructor(values: Record<string, string | string[]>);
+    contextKeyExists(name: string): boolean;
+    contextKeyValue(name: string): ContextKey;
+}
+export declare class ContextKeyImpl implements ContextKey, StringContextKey, ArrayContextKey {
+    name: string;
+    private _val;
+    constructor(name: string, _val: string | string[]);
+    isStringValue(): this is StringContextKey;
+    isArrayValue(): this is ArrayContextKey;
+    get values(): string[];
+    get value(): string;
+}
+//# sourceMappingURL=requestContext.d.ts.map

package/dist/cjs/requestContext.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"requestContext.d.ts","sourceRoot":"","sources":["../../src/requestContext.ts"],"names":[],"mappings":"AACA;;GAEG;AACH,MAAM,WAAW,cAAc;IAE7B;;;;OAIG;IACH,gBAAgB,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IAE5C;;;;;OAKG;IACH,eAAe,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,UAAU,CAAC;CAC/C;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;OAEG;IACH,aAAa,IAAI,IAAI,IAAI,gBAAgB,CAAC;IAE1C;;OAEG;IACH,YAAY,IAAI,IAAI,IAAI,eAAe,CAAC;CACzC;AAED,MAAM,WAAW,gBAAiB,SAAQ,UAAU;IAElD;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,eAAgB,SAAQ,UAAU;IAEjD;;OAEG;IAEH,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,qBAAa,kBAAmB,YAAW,cAAc;IACvD,OAAO,CAAC,OAAO,CAAsC;gBAEzC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAO9C,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAIvC,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU;CAIjD;AAED,qBAAa,cAAe,YAAW,UAAU,EAAE,gBAAgB,EAAE,eAAe;IAC/D,IAAI,EAAE,MAAM;IAAE,OAAO,CAAC,IAAI;gBAA1B,IAAI,EAAE,MAAM,EAAU,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE;IAEhE,aAAa,IAAI,IAAI,IAAI,gBAAgB;IAGzC,YAAY,IAAI,IAAI,IAAI,eAAe;IAIvC,IAAI,MAAM,IAAI,MAAM,EAAE,CAKrB;IAED,IAAI,KAAK,IAAI,MAAM,CAKlB;CACF"}