@cloud-copilot/iam-simulate 0.1.12 → 0.1.14

package/dist/esm/condition/numeric/NumericGreaterThan.js.map

@@ -1 +1 @@
-{"version":3,"file":"NumericGreaterThan.js","sourceRoot":"","sources":["../../../../src/condition/numeric/NumericGreaterThan.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9C,MAAM,CAAC,MAAM,kBAAkB,GAA0B;IACvD,IAAI,EAAE,oBAAoB;IAE1B,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE;QAC3C,OAAO,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE;YACrC,OAAO,cAAc,CAAC,WAAW,EAAE,QAAQ,EAAE,CAAC,YAAY,EAAE,UAAU,EAAE,EAAE;gBACxE,OAAO,YAAY,GAAG,UAAU,CAAA;YAClC,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;IACJ,CAAC;IACD,eAAe,EAAE,KAAK;IACtB,eAAe,EAAE,KAAK;CACvB,CAAA"}
+{"version":3,"file":"NumericGreaterThan.js","sourceRoot":"","sources":["../../../../src/condition/numeric/NumericGreaterThan.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9C,MAAM,CAAC,MAAM,kBAAkB,GAA0B;IACvD,IAAI,EAAE,oBAAoB;IAC1B,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE;QAC3C,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE;YAC9C,OAAO,cAAc,CAAC,WAAW,EAAE,QAAQ,EAAE,CAAC,YAAY,EAAE,UAAU,EAAE,EAAE;gBACxE,OAAO,YAAY,GAAG,UAAU,CAAA;YAClC,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QAEF,OAAO;YACL,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;YAClD,QAAQ;SACT,CAAA;IACH,CAAC;IACD,eAAe,EAAE,KAAK;IACtB,eAAe,EAAE,KAAK;IACtB,UAAU,EAAE,KAAK;CAClB,CAAA"}

package/dist/esm/condition/numeric/NumericGreaterThanEquals.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"NumericGreaterThanEquals.d.ts","sourceRoot":"","sources":["../../../../src/condition/numeric/NumericGreaterThanEquals.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,eAAO,MAAM,wBAAwB,EAAE,qBAYtC,CAAA"}
+{"version":3,"file":"NumericGreaterThanEquals.d.ts","sourceRoot":"","sources":["../../../../src/condition/numeric/NumericGreaterThanEquals.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,eAAO,MAAM,wBAAwB,EAAE,qBAkBtC,CAAA"}

package/dist/esm/condition/numeric/NumericGreaterThanEquals.js

@@ -2,13 +2,18 @@ import { checkIfNumeric } from "./numeric.js";
 export const NumericGreaterThanEquals = {
     name: 'NumericGreaterThanEquals',
     matches: (request, keyValue, policyValues) => {
-        return policyValues.some(policyValue => {
+        const explains = policyValues.map(policyValue => {
             return checkIfNumeric(policyValue, keyValue, (policyNumber, testNumber) => {
                 return policyNumber >= testNumber;
             });
         });
+        return {
+            matches: explains.some(explain => explain.matches),
+            explains
+        };
     },
     allowsVariables: false,
-    allowsWildcards: false
+    allowsWildcards: false,
+    isNegative: false
 };
 //# sourceMappingURL=NumericGreaterThanEquals.js.map

package/dist/esm/condition/numeric/NumericGreaterThanEquals.js.map

@@ -1 +1 @@
-{"version":3,"file":"NumericGreaterThanEquals.js","sourceRoot":"","sources":["../../../../src/condition/numeric/NumericGreaterThanEquals.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9C,MAAM,CAAC,MAAM,wBAAwB,GAA0B;IAC7D,IAAI,EAAE,0BAA0B;IAEhC,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE;QAC3C,OAAO,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE;YACrC,OAAO,cAAc,CAAC,WAAW,EAAE,QAAQ,EAAE,CAAC,YAAY,EAAE,UAAU,EAAE,EAAE;gBACxE,OAAO,YAAY,IAAI,UAAU,CAAA;YACnC,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;IACJ,CAAC;IACD,eAAe,EAAE,KAAK;IACtB,eAAe,EAAE,KAAK;CACvB,CAAA"}
+{"version":3,"file":"NumericGreaterThanEquals.js","sourceRoot":"","sources":["../../../../src/condition/numeric/NumericGreaterThanEquals.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9C,MAAM,CAAC,MAAM,wBAAwB,GAA0B;IAC7D,IAAI,EAAE,0BAA0B;IAEhC,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE;QAC3C,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE;YAC9C,OAAO,cAAc,CAAC,WAAW,EAAE,QAAQ,EAAE,CAAC,YAAY,EAAE,UAAU,EAAE,EAAE;gBACxE,OAAO,YAAY,IAAI,UAAU,CAAA;YACnC,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QAEF,OAAO;YACL,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;YAClD,QAAQ;SACT,CAAA;IACH,CAAC;IACD,eAAe,EAAE,KAAK;IACtB,eAAe,EAAE,KAAK;IACtB,UAAU,EAAE,KAAK;CAClB,CAAA"}

package/dist/esm/condition/numeric/NumericLessThan.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"NumericLessThan.d.ts","sourceRoot":"","sources":["../../../../src/condition/numeric/NumericLessThan.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,eAAO,MAAM,eAAe,EAAE,qBAY7B,CAAA"}
+{"version":3,"file":"NumericLessThan.d.ts","sourceRoot":"","sources":["../../../../src/condition/numeric/NumericLessThan.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,eAAO,MAAM,eAAe,EAAE,qBAkB7B,CAAA"}

package/dist/esm/condition/numeric/NumericLessThan.js

@@ -2,13 +2,18 @@ import { checkIfNumeric } from "./numeric.js";
 export const NumericLessThan = {
     name: 'NumericLessThan',
     matches: (request, keyValue, policyValues) => {
-        return policyValues.some(policyValue => {
+        const explains = policyValues.map(policyValue => {
             return checkIfNumeric(policyValue, keyValue, (policyNumber, testNumber) => {
                 return policyNumber > testNumber;
             });
         });
+        return {
+            matches: explains.some(explain => explain.matches),
+            explains
+        };
     },
     allowsVariables: false,
-    allowsWildcards: false
+    allowsWildcards: false,
+    isNegative: false
 };
 //# sourceMappingURL=NumericLessThan.js.map

package/dist/esm/condition/numeric/NumericLessThan.js.map

@@ -1 +1 @@
-{"version":3,"file":"NumericLessThan.js","sourceRoot":"","sources":["../../../../src/condition/numeric/NumericLessThan.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9C,MAAM,CAAC,MAAM,eAAe,GAA0B;IACpD,IAAI,EAAE,iBAAiB;IAEvB,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE;QAC3C,OAAO,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE;YACrC,OAAO,cAAc,CAAC,WAAW,EAAE,QAAQ,EAAE,CAAC,YAAY,EAAE,UAAU,EAAE,EAAE;gBACxE,OAAO,YAAY,GAAG,UAAU,CAAA;YAClC,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;IACJ,CAAC;IACD,eAAe,EAAE,KAAK;IACtB,eAAe,EAAE,KAAK;CACvB,CAAA"}
+{"version":3,"file":"NumericLessThan.js","sourceRoot":"","sources":["../../../../src/condition/numeric/NumericLessThan.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9C,MAAM,CAAC,MAAM,eAAe,GAA0B;IACpD,IAAI,EAAE,iBAAiB;IAEvB,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE;QAC3C,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE;YAC9C,OAAO,cAAc,CAAC,WAAW,EAAE,QAAQ,EAAE,CAAC,YAAY,EAAE,UAAU,EAAE,EAAE;gBACxE,OAAO,YAAY,GAAG,UAAU,CAAA;YAClC,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QAEF,OAAO;YACL,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;YAClD,QAAQ;SACT,CAAA;IACH,CAAC;IACD,eAAe,EAAE,KAAK;IACtB,eAAe,EAAE,KAAK;IACtB,UAAU,EAAE,KAAK;CAClB,CAAA"}

package/dist/esm/condition/numeric/NumericLessThanEquals.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"NumericLessThanEquals.d.ts","sourceRoot":"","sources":["../../../../src/condition/numeric/NumericLessThanEquals.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,eAAO,MAAM,qBAAqB,EAAE,qBAYnC,CAAA"}
+{"version":3,"file":"NumericLessThanEquals.d.ts","sourceRoot":"","sources":["../../../../src/condition/numeric/NumericLessThanEquals.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,eAAO,MAAM,qBAAqB,EAAE,qBAkBnC,CAAA"}

package/dist/esm/condition/numeric/NumericLessThanEquals.js

@@ -2,13 +2,18 @@ import { checkIfNumeric } from "./numeric.js";
 export const NumericLessThanEquals = {
     name: 'NumericLessThanEquals',
     matches: (request, keyValue, policyValues) => {
-        return policyValues.some(policyValue => {
+        const explains = policyValues.map(policyValue => {
             return checkIfNumeric(policyValue, keyValue, (policyNumber, testNumber) => {
                 return policyNumber >= testNumber;
             });
         });
+        return {
+            matches: explains.some(explain => explain.matches),
+            explains
+        };
     },
     allowsVariables: false,
-    allowsWildcards: false
+    allowsWildcards: false,
+    isNegative: false
 };
 //# sourceMappingURL=NumericLessThanEquals.js.map

package/dist/esm/condition/numeric/NumericLessThanEquals.js.map

@@ -1 +1 @@
-{"version":3,"file":"NumericLessThanEquals.js","sourceRoot":"","sources":["../../../../src/condition/numeric/NumericLessThanEquals.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9C,MAAM,CAAC,MAAM,qBAAqB,GAA0B;IAC1D,IAAI,EAAE,uBAAuB;IAE7B,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE;QAC3C,OAAO,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE;YACrC,OAAO,cAAc,CAAC,WAAW,EAAE,QAAQ,EAAE,CAAC,YAAY,EAAE,UAAU,EAAE,EAAE;gBACxE,OAAO,YAAY,IAAI,UAAU,CAAA;YACnC,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;IACJ,CAAC;IACD,eAAe,EAAE,KAAK;IACtB,eAAe,EAAE,KAAK;CACvB,CAAA"}
+{"version":3,"file":"NumericLessThanEquals.js","sourceRoot":"","sources":["../../../../src/condition/numeric/NumericLessThanEquals.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9C,MAAM,CAAC,MAAM,qBAAqB,GAA0B;IAC1D,IAAI,EAAE,uBAAuB;IAE7B,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE;QAC3C,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE;YAC9C,OAAO,cAAc,CAAC,WAAW,EAAE,QAAQ,EAAE,CAAC,YAAY,EAAE,UAAU,EAAE,EAAE;gBACxE,OAAO,YAAY,IAAI,UAAU,CAAA;YACnC,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QAEF,OAAO;YACL,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;YAClD,QAAQ;SACT,CAAA;IACH,CAAC;IACD,eAAe,EAAE,KAAK;IACtB,eAAe,EAAE,KAAK;IACtB,UAAU,EAAE,KAAK;CAClB,CAAA"}

package/dist/esm/condition/numeric/NumericNotEquals.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"NumericNotEquals.d.ts","sourceRoot":"","sources":["../../../../src/condition/numeric/NumericNotEquals.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,eAAO,MAAM,gBAAgB,EAAE,qBAsB9B,CAAA"}
+{"version":3,"file":"NumericNotEquals.d.ts","sourceRoot":"","sources":["../../../../src/condition/numeric/NumericNotEquals.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,eAAO,MAAM,gBAAgB,EAAE,qBAiB9B,CAAA"}

package/dist/esm/condition/numeric/NumericNotEquals.js

@@ -1,26 +1,19 @@
-import { isDefined, isNotDefined } from "../../util.js";
-import { parseNumber } from "./numeric.js";
+import { checkIfNumeric } from "./numeric.js";
 export const NumericNotEquals = {
     name: 'NumericNotEquals',
     matches: (request, keyValue, policyValues) => {
-        //How does this behave with malformed numbers
-        // return !NumericEquals.matches(request, keyValue, policyValues)
-        // const numericMatch =  policyValues.some(policyValue => {
-        //   return checkIfNumeric(policyValue, keyValue, (policyNumber, testNumber) => {
-        //     return policyNumber == testNumber
-        //   })
-        // })
-        const requestValue = parseNumber(keyValue);
-        if (isNotDefined(requestValue)) {
-            return false;
-        }
-        const policyNumbers = policyValues.map(value => parseNumber(value)).filter(value => isDefined(value));
-        if (policyNumbers.length === 0) {
-            return false;
-        }
-        return !policyNumbers.some(policyNumber => policyNumber == requestValue);
+        const explains = policyValues.map(policyValue => {
+            return checkIfNumeric(policyValue, keyValue, (policyNumber, testNumber) => {
+                return policyNumber != testNumber;
+            });
+        });
+        return {
+            matches: !explains.some(explain => !explain.matches),
+            explains
+        };
     },
     allowsVariables: false,
-    allowsWildcards: false
+    allowsWildcards: false,
+    isNegative: true
 };
 //# sourceMappingURL=NumericNotEquals.js.map

package/dist/esm/condition/numeric/NumericNotEquals.js.map

@@ -1 +1 @@
-{"version":3,"file":"NumericNotEquals.js","sourceRoot":"","sources":["../../../../src/condition/numeric/NumericNotEquals.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAExD,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,MAAM,CAAC,MAAM,gBAAgB,GAA0B;IACrD,IAAI,EAAE,kBAAkB;IACxB,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE;QAC3C,6CAA6C;QAC7C,iEAAiE;QACjE,2DAA2D;QAC3D,iFAAiF;QACjF,wCAAwC;QACxC,OAAO;QACP,KAAK;QACL,MAAM,YAAY,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAA;QAC1C,IAAG,YAAY,CAAC,YAAY,CAAC,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAA;QACd,CAAC;QACD,MAAM,aAAa,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAA;QACrG,IAAG,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAA;QACd,CAAC;QACD,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,YAAY,IAAI,YAAY,CAAC,CAAA;IAC1E,CAAC;IACD,eAAe,EAAE,KAAK;IACtB,eAAe,EAAE,KAAK;CACvB,CAAA"}
+{"version":3,"file":"NumericNotEquals.js","sourceRoot":"","sources":["../../../../src/condition/numeric/NumericNotEquals.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9C,MAAM,CAAC,MAAM,gBAAgB,GAA0B;IACrD,IAAI,EAAE,kBAAkB;IACxB,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE;QAC3C,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE;YAC9C,OAAO,cAAc,CAAC,WAAW,EAAE,QAAQ,EAAE,CAAC,YAAY,EAAE,UAAU,EAAE,EAAE;gBACxE,OAAO,YAAY,IAAI,UAAU,CAAA;YACnC,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QAEF,OAAO;YACL,OAAO,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;YACpD,QAAQ;SACT,CAAA;IACH,CAAC;IACD,eAAe,EAAE,KAAK;IACtB,eAAe,EAAE,KAAK;IACtB,UAAU,EAAE,IAAI;CACjB,CAAA"}

package/dist/esm/condition/numeric/numeric.d.ts

@@ -1,3 +1,4 @@
+import { ConditionValueExplain } from "../../explain/statementExplain.js";
 /**
  * Parse a string to a number, returns undefined if the string is not a number
  *
@@ -13,5 +14,5 @@ export declare function parseNumber(value: string): number | undefined;
  * @param check
  * @returns
  */
-export declare function checkIfNumeric(policyValue: string, testValue: string, check: (policyValue: number, testValue: number) => boolean): boolean;
+export declare function checkIfNumeric(policyValue: string, testValue: string, check: (policyValue: number, testValue: number) => boolean): ConditionValueExplain;
 //# sourceMappingURL=numeric.d.ts.map

package/dist/esm/condition/numeric/numeric.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"numeric.d.ts","sourceRoot":"","sources":["../../../../src/condition/numeric/numeric.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAY7D;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,GAAG,OAAO,CAO1I"}
+{"version":3,"file":"numeric.d.ts","sourceRoot":"","sources":["../../../../src/condition/numeric/numeric.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAA;AAGzE;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAY7D;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,GAAG,qBAAqB,CAuBxJ"}

package/dist/esm/condition/numeric/numeric.js

@@ -29,9 +29,24 @@ export function parseNumber(value) {
 export function checkIfNumeric(policyValue, testValue, check) {
     const policyNumber = parseNumber(policyValue);
     const testNumber = parseNumber(testValue);
-    if (isNotDefined(policyNumber) || isNotDefined(testNumber)) {
-        return false;
+    if (isNotDefined(policyNumber)) {
+        return {
+            value: policyValue,
+            matches: false,
+            errors: [`${policyValue} is not a number`]
+        };
     }
-    return check(policyNumber, testNumber);
+    if (isNotDefined(testNumber)) {
+        return {
+            value: policyValue,
+            matches: false,
+            errors: [`request value '${testValue}' is not a number`]
+        };
+    }
+    const matches = check(policyNumber, testNumber);
+    return {
+        value: policyValue,
+        matches,
+    };
 }
 //# sourceMappingURL=numeric.js.map

package/dist/esm/condition/numeric/numeric.js.map

@@ -1 +1 @@
-{"version":3,"file":"numeric.js","sourceRoot":"","sources":["../../../../src/condition/numeric/numeric.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAE5C;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,IAAI,MAAM,GAAuB,SAAS,CAAA;IAC1C,IAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAA;IAC5B,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IAC9B,CAAC;IACD,IAAG,YAAY,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACzC,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,WAAmB,EAAE,SAAiB,EAAE,KAA0D;IAC/H,MAAM,YAAY,GAAG,WAAW,CAAC,WAAW,CAAC,CAAA;IAC7C,MAAM,UAAU,GAAG,WAAW,CAAC,SAAS,CAAC,CAAA;IACzC,IAAG,YAAY,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1D,OAAO,KAAK,CAAA;IACd,CAAC;IACD,OAAO,KAAK,CAAC,YAAY,EAAE,UAAU,CAAC,CAAA;AACxC,CAAC"}
+{"version":3,"file":"numeric.js","sourceRoot":"","sources":["../../../../src/condition/numeric/numeric.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAE5C;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,IAAI,MAAM,GAAuB,SAAS,CAAA;IAC1C,IAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAA;IAC5B,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IAC9B,CAAC;IACD,IAAG,YAAY,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACzC,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,WAAmB,EAAE,SAAiB,EAAE,KAA0D;IAC/H,MAAM,YAAY,GAAG,WAAW,CAAC,WAAW,CAAC,CAAA;IAC7C,MAAM,UAAU,GAAG,WAAW,CAAC,SAAS,CAAC,CAAA;IACzC,IAAG,YAAY,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,OAAO;YACL,KAAK,EAAE,WAAW;YAClB,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,CAAC,GAAG,WAAW,kBAAkB,CAAC;SAC3C,CAAA;IACH,CAAC;IACD,IAAG,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,OAAO;YACL,KAAK,EAAE,WAAW;YAClB,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,CAAC,kBAAkB,SAAS,mBAAmB,CAAC;SACzD,CAAA;IACH,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,YAAY,EAAE,UAAU,CAAC,CAAA;IAC/C,OAAO;QACL,KAAK,EAAE,WAAW;QAClB,OAAO;KACR,CAAA;AACH,CAAC"}

package/dist/esm/condition/string/StringEquals.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"StringEquals.d.ts","sourceRoot":"","sources":["../../../../src/condition/string/StringEquals.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAEpE,eAAO,MAAM,YAAY,EAAE,qBAQ1B,CAAA"}
+{"version":3,"file":"StringEquals.d.ts","sourceRoot":"","sources":["../../../../src/condition/string/StringEquals.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,eAAO,MAAM,YAAY,EAAE,qBA+B1B,CAAA"}

package/dist/esm/condition/string/StringEquals.js

@@ -1,11 +1,32 @@
-import { convertIamStringToRegex } from "../../util.js";
+import { convertIamString } from "../../util.js";
+import { resolvedValue } from "../conditionUtil.js";
 export const StringEquals = {
     name: 'StringEquals',
     matches: (request, keyValue, policyValues) => {
-        const patterns = policyValues.map(value => convertIamStringToRegex(value, request, { replaceWildcards: false }));
-        return patterns.some(pattern => pattern.test(keyValue));
+        const explains = policyValues.map((value) => {
+            const { pattern, errors } = convertIamString(value, request, { replaceWildcards: false });
+            if (errors && errors.length > 0) {
+                return {
+                    value,
+                    matches: false,
+                    errors
+                };
+            }
+            const matches = pattern.test(keyValue);
+            return {
+                value,
+                matches,
+                resolvedValue: resolvedValue(value, request),
+            };
+        });
+        const overallMatch = explains.some(explain => explain.matches);
+        return {
+            matches: overallMatch,
+            explains
+        };
     },
     allowsVariables: true,
-    allowsWildcards: false
+    allowsWildcards: false,
+    isNegative: false
 };
 //# sourceMappingURL=StringEquals.js.map

package/dist/esm/condition/string/StringEquals.js.map

@@ -1 +1 @@
-{"version":3,"file":"StringEquals.js","sourceRoot":"","sources":["../../../../src/condition/string/StringEquals.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAGxD,MAAM,CAAC,MAAM,YAAY,GAA0B;IACjD,IAAI,EAAE,cAAc;IACpB,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE;QAC3C,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,uBAAuB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAC,gBAAgB,EAAE,KAAK,EAAC,CAAC,CAAC,CAAA;QAC9G,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAA;IACzD,CAAC;IACD,eAAe,EAAE,IAAI;IACrB,eAAe,EAAE,KAAK;CACvB,CAAA"}
+{"version":3,"file":"StringEquals.js","sourceRoot":"","sources":["../../../../src/condition/string/StringEquals.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEjD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,MAAM,CAAC,MAAM,YAAY,GAA0B;IACjD,IAAI,EAAE,cAAc;IACpB,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE;QAC3C,MAAM,QAAQ,GAA4B,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACnE,MAAM,EAAC,OAAO,EAAE,MAAM,EAAC,GAAG,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAC,gBAAgB,EAAE,KAAK,EAAC,CAAC,CAAA;YACrF,IAAG,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC/B,OAAO;oBACL,KAAK;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM;iBACP,CAAA;YACH,CAAC;YAED,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YACtC,OAAO;gBACL,KAAK;gBACL,OAAO;gBACP,aAAa,EAAE,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC;aAC7C,CAAA;QACH,CAAC,CAAC,CAAA;QAGF,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QAC9D,OAAO;YACL,OAAO,EAAE,YAAY;YACrB,QAAQ;SACT,CAAA;IACH,CAAC;IACD,eAAe,EAAE,IAAI;IACrB,eAAe,EAAE,KAAK;IACtB,UAAU,EAAE,KAAK;CAClB,CAAA"}

package/dist/esm/condition/string/StringEqualsIgnoreCase.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"StringEqualsIgnoreCase.d.ts","sourceRoot":"","sources":["../../../../src/condition/string/StringEqualsIgnoreCase.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAEpE,eAAO,MAAM,sBAAsB,EAAE,qBAWpC,CAAA"}
+{"version":3,"file":"StringEqualsIgnoreCase.d.ts","sourceRoot":"","sources":["../../../../src/condition/string/StringEqualsIgnoreCase.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,eAAO,MAAM,sBAAsB,EAAE,qBA+BpC,CAAA"}

package/dist/esm/condition/string/StringEqualsIgnoreCase.js

@@ -1,14 +1,32 @@
-import { convertIamStringToRegex } from "../../util.js";
+import { convertIamString } from "../../util.js";
+import { resolvedValue } from "../conditionUtil.js";
 export const StringEqualsIgnoreCase = {
     name: 'StringEqualsIgnoreCase',
     matches: (request, keyValue, policyValues) => {
-        const patterns = policyValues.map(value => {
-            const pattern = convertIamStringToRegex(value, request, { replaceWildcards: false });
-            return new RegExp(pattern, 'i');
+        const explains = policyValues.map((value) => {
+            const { pattern, errors } = convertIamString(value, request, { replaceWildcards: false });
+            if (errors && errors.length > 0) {
+                return {
+                    value,
+                    matches: false,
+                    errors
+                };
+            }
+            const matches = new RegExp(pattern, 'i').test(keyValue);
+            return {
+                value,
+                matches,
+                resolvedValue: resolvedValue(value, request),
+            };
         });
-        return patterns.some(pattern => pattern.test(keyValue));
+        const overallMatch = explains.some(explain => explain.matches);
+        return {
+            matches: overallMatch,
+            explains
+        };
     },
     allowsVariables: true,
-    allowsWildcards: false
+    allowsWildcards: false,
+    isNegative: false
 };
 //# sourceMappingURL=StringEqualsIgnoreCase.js.map

package/dist/esm/condition/string/StringEqualsIgnoreCase.js.map

@@ -1 +1 @@
-{"version":3,"file":"StringEqualsIgnoreCase.js","sourceRoot":"","sources":["../../../../src/condition/string/StringEqualsIgnoreCase.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAGxD,MAAM,CAAC,MAAM,sBAAsB,GAA0B;IAC3D,IAAI,EAAE,wBAAwB;IAC9B,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE;QAC3C,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;YACxC,MAAM,OAAO,GAAG,uBAAuB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAC,gBAAgB,EAAE,KAAK,EAAC,CAAC,CAAA;YAClF,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;QACjC,CAAC,CAAC,CAAA;QACF,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAA;IACzD,CAAC;IACD,eAAe,EAAE,IAAI;IACrB,eAAe,EAAE,KAAK;CACvB,CAAA"}
+{"version":3,"file":"StringEqualsIgnoreCase.js","sourceRoot":"","sources":["../../../../src/condition/string/StringEqualsIgnoreCase.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEjD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,MAAM,CAAC,MAAM,sBAAsB,GAA0B;IAC3D,IAAI,EAAE,wBAAwB;IAC9B,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE;QAC3C,MAAM,QAAQ,GAA4B,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACnE,MAAM,EAAC,OAAO,EAAE,MAAM,EAAC,GAAG,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAC,gBAAgB,EAAE,KAAK,EAAC,CAAC,CAAA;YACrF,IAAG,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC/B,OAAO;oBACL,KAAK;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM;iBACP,CAAA;YACH,CAAC;YAED,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YACvD,OAAO;gBACL,KAAK;gBACL,OAAO;gBACP,aAAa,EAAE,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC;aAC7C,CAAA;QACH,CAAC,CAAC,CAAA;QAGF,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QAC9D,OAAO;YACL,OAAO,EAAE,YAAY;YACrB,QAAQ;SACT,CAAA;IACH,CAAC;IACD,eAAe,EAAE,IAAI;IACrB,eAAe,EAAE,KAAK;IACtB,UAAU,EAAE,KAAK;CAClB,CAAA"}

package/dist/esm/condition/string/StringLike.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"StringLike.d.ts","sourceRoot":"","sources":["../../../../src/condition/string/StringLike.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAEpE,eAAO,MAAM,UAAU,EAAE,qBAQxB,CAAA"}
+{"version":3,"file":"StringLike.d.ts","sourceRoot":"","sources":["../../../../src/condition/string/StringLike.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,eAAO,MAAM,UAAU,EAAE,qBAgCxB,CAAA"}

package/dist/esm/condition/string/StringLike.js

@@ -1,11 +1,32 @@
-import { convertIamStringToRegex } from "../../util.js";
+import { convertIamString } from "../../util.js";
+import { resolvedValue } from "../conditionUtil.js";
 export const StringLike = {
     name: 'StringLike',
     matches: (request, keyValue, policyValues) => {
-        const patterns = policyValues.map(value => convertIamStringToRegex(value, request, { replaceWildcards: true }));
-        return patterns.some(pattern => pattern.test(keyValue));
+        const explains = policyValues.map((value) => {
+            const { pattern, errors } = convertIamString(value, request, { replaceWildcards: true });
+            if (errors && errors.length > 0) {
+                return {
+                    value,
+                    matches: false,
+                    errors
+                };
+            }
+            const matches = pattern.test(keyValue);
+            return {
+                value,
+                matches,
+                resolvedValue: resolvedValue(value, request),
+            };
+        });
+        const overallMatch = explains.some(explain => explain.matches);
+        return {
+            matches: overallMatch,
+            explains
+        };
     },
     allowsVariables: true,
-    allowsWildcards: true
+    allowsWildcards: true,
+    isNegative: false
 };
 //# sourceMappingURL=StringLike.js.map

package/dist/esm/condition/string/StringLike.js.map

@@ -1 +1 @@
-{"version":3,"file":"StringLike.js","sourceRoot":"","sources":["../../../../src/condition/string/StringLike.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAGxD,MAAM,CAAC,MAAM,UAAU,GAA0B;IAC/C,IAAI,EAAE,YAAY;IAClB,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE;QAC3C,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,uBAAuB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAC,gBAAgB,EAAE,IAAI,EAAC,CAAC,CAAC,CAAA;QAC7G,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAA;IACzD,CAAC;IACD,eAAe,EAAE,IAAI;IACrB,eAAe,EAAE,IAAI;CACtB,CAAA"}
+{"version":3,"file":"StringLike.js","sourceRoot":"","sources":["../../../../src/condition/string/StringLike.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEjD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,MAAM,CAAC,MAAM,UAAU,GAA0B;IAC/C,IAAI,EAAE,YAAY;IAClB,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE;QAC3C,MAAM,QAAQ,GAA4B,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACnE,MAAM,EAAC,OAAO,EAAE,MAAM,EAAC,GAAG,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAC,gBAAgB,EAAE,IAAI,EAAC,CAAC,CAAA;YACpF,IAAG,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC/B,OAAO;oBACL,KAAK;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM;iBACP,CAAA;YACH,CAAC;YAED,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YACtC,OAAO;gBACL,KAAK;gBACL,OAAO;gBACP,aAAa,EAAE,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC;aAC7C,CAAA;QACH,CAAC,CAAC,CAAA;QAGF,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QAC9D,OAAO;YACL,OAAO,EAAE,YAAY;YACrB,QAAQ;SACT,CAAA;IAEH,CAAC;IACD,eAAe,EAAE,IAAI;IACrB,eAAe,EAAE,IAAI;IACrB,UAAU,EAAE,KAAK;CAClB,CAAA"}

package/dist/esm/condition/string/StringNotEquals.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"StringNotEquals.d.ts","sourceRoot":"","sources":["../../../../src/condition/string/StringNotEquals.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAEpE,eAAO,MAAM,eAAe,EAAE,qBAQ7B,CAAA"}
+{"version":3,"file":"StringNotEquals.d.ts","sourceRoot":"","sources":["../../../../src/condition/string/StringNotEquals.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,eAAO,MAAM,eAAe,EAAE,qBA8B7B,CAAA"}

package/dist/esm/condition/string/StringNotEquals.js

@@ -1,11 +1,32 @@
-import { convertIamStringToRegex } from "../../util.js";
+import { convertIamString } from "../../util.js";
+import { resolvedValue } from "../conditionUtil.js";
 export const StringNotEquals = {
     name: 'StringNotEquals',
     matches: (request, keyValue, policyValues) => {
-        const patterns = policyValues.map(value => convertIamStringToRegex(value, request, { replaceWildcards: false }));
-        return !patterns.some(pattern => pattern.test(keyValue));
+        const explains = policyValues.map((value) => {
+            const { pattern, errors } = convertIamString(value, request, { replaceWildcards: false });
+            if (errors && errors.length > 0) {
+                return {
+                    value,
+                    matches: false,
+                    errors
+                };
+            }
+            const matches = !pattern.test(keyValue);
+            return {
+                value,
+                matches,
+                resolvedValue: resolvedValue(value, request),
+            };
+        });
+        const overallMatch = !explains.some(explain => !explain.matches);
+        return {
+            matches: overallMatch,
+            explains
+        };
     },
     allowsVariables: true,
-    allowsWildcards: false
+    allowsWildcards: false,
+    isNegative: true
 };
 //# sourceMappingURL=StringNotEquals.js.map

package/dist/esm/condition/string/StringNotEquals.js.map

@@ -1 +1 @@
-{"version":3,"file":"StringNotEquals.js","sourceRoot":"","sources":["../../../../src/condition/string/StringNotEquals.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAGxD,MAAM,CAAC,MAAM,eAAe,GAA0B;IACpD,IAAI,EAAE,iBAAiB;IACvB,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE;QAC3C,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,uBAAuB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAC,gBAAgB,EAAE,KAAK,EAAC,CAAC,CAAC,CAAA;QAC9G,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAA;IAC1D,CAAC;IACD,eAAe,EAAE,IAAI;IACrB,eAAe,EAAE,KAAK;CACvB,CAAA"}
+{"version":3,"file":"StringNotEquals.js","sourceRoot":"","sources":["../../../../src/condition/string/StringNotEquals.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEjD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,MAAM,CAAC,MAAM,eAAe,GAA0B;IACpD,IAAI,EAAE,iBAAiB;IACvB,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE;QAC3C,MAAM,QAAQ,GAA4B,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACnE,MAAM,EAAC,OAAO,EAAE,MAAM,EAAC,GAAG,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAC,gBAAgB,EAAE,KAAK,EAAC,CAAC,CAAA;YACrF,IAAG,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC/B,OAAO;oBACL,KAAK;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM;iBACP,CAAA;YACH,CAAC;YAED,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YACvC,OAAO;gBACL,KAAK;gBACL,OAAO;gBACP,aAAa,EAAE,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC;aAC7C,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,MAAM,YAAY,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QAChE,OAAO;YACL,OAAO,EAAE,YAAY;YACrB,QAAQ;SACT,CAAA;IACH,CAAC;IACD,eAAe,EAAE,IAAI;IACrB,eAAe,EAAE,KAAK;IACtB,UAAU,EAAE,IAAI;CACjB,CAAA"}

package/dist/esm/condition/string/StringNotEqualsIgnoreCase.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"StringNotEqualsIgnoreCase.d.ts","sourceRoot":"","sources":["../../../../src/condition/string/StringNotEqualsIgnoreCase.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,eAAO,MAAM,yBAAyB,EAAE,qBAOvC,CAAA"}
+{"version":3,"file":"StringNotEqualsIgnoreCase.d.ts","sourceRoot":"","sources":["../../../../src/condition/string/StringNotEqualsIgnoreCase.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,eAAO,MAAM,yBAAyB,EAAE,qBA8BvC,CAAA"}

package/dist/esm/condition/string/StringNotEqualsIgnoreCase.js

@@ -1,10 +1,32 @@
-import { StringEqualsIgnoreCase } from "./StringEqualsIgnoreCase.js";
+import { convertIamString } from "../../util.js";
+import { resolvedValue } from "../conditionUtil.js";
 export const StringNotEqualsIgnoreCase = {
     name: 'StringNotEqualsIgnoreCase',
     matches: (request, keyValue, policyValues) => {
-        return !StringEqualsIgnoreCase.matches(request, keyValue, policyValues);
+        const explains = policyValues.map((value) => {
+            const { pattern, errors } = convertIamString(value, request, { replaceWildcards: false });
+            if (errors && errors.length > 0) {
+                return {
+                    value,
+                    matches: false,
+                    errors
+                };
+            }
+            const matches = !new RegExp(pattern, 'i').test(keyValue);
+            return {
+                value,
+                matches,
+                resolvedValue: resolvedValue(value, request),
+            };
+        });
+        const overallMatch = !explains.some(explain => !explain.matches);
+        return {
+            matches: overallMatch,
+            explains
+        };
     },
     allowsVariables: true,
-    allowsWildcards: false
+    allowsWildcards: false,
+    isNegative: true
 };
 //# sourceMappingURL=StringNotEqualsIgnoreCase.js.map

package/dist/esm/condition/string/StringNotEqualsIgnoreCase.js.map

@@ -1 +1 @@
-{"version":3,"file":"StringNotEqualsIgnoreCase.js","sourceRoot":"","sources":["../../../../src/condition/string/StringNotEqualsIgnoreCase.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAErE,MAAM,CAAC,MAAM,yBAAyB,GAA0B;IAC9D,IAAI,EAAE,2BAA2B;IACjC,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE;QAC3C,OAAO,CAAC,sBAAsB,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAA;IACzE,CAAC;IACD,eAAe,EAAE,IAAI;IACrB,eAAe,EAAE,KAAK;CACvB,CAAA"}
+{"version":3,"file":"StringNotEqualsIgnoreCase.js","sourceRoot":"","sources":["../../../../src/condition/string/StringNotEqualsIgnoreCase.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEjD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,MAAM,CAAC,MAAM,yBAAyB,GAA0B;IAC9D,IAAI,EAAE,2BAA2B;IACjC,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE;QACzC,MAAM,QAAQ,GAA4B,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACnE,MAAM,EAAC,OAAO,EAAE,MAAM,EAAC,GAAG,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAC,gBAAgB,EAAE,KAAK,EAAC,CAAC,CAAA;YACrF,IAAG,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC/B,OAAO;oBACL,KAAK;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM;iBACP,CAAA;YACH,CAAC;YAED,MAAM,OAAO,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YACxD,OAAO;gBACL,KAAK;gBACL,OAAO;gBACP,aAAa,EAAE,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC;aAC7C,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,MAAM,YAAY,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QAChE,OAAO;YACL,OAAO,EAAE,YAAY;YACrB,QAAQ;SACT,CAAA;IACH,CAAC;IACH,eAAe,EAAE,IAAI;IACrB,eAAe,EAAE,KAAK;IACtB,UAAU,EAAE,IAAI;CACjB,CAAA"}

package/dist/esm/condition/string/StringNotLike.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"StringNotLike.d.ts","sourceRoot":"","sources":["../../../../src/condition/string/StringNotLike.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,eAAO,MAAM,aAAa,EAAE,qBAO3B,CAAA"}
+{"version":3,"file":"StringNotLike.d.ts","sourceRoot":"","sources":["../../../../src/condition/string/StringNotLike.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,eAAO,MAAM,aAAa,EAAE,qBAgC3B,CAAA"}

package/dist/esm/condition/string/StringNotLike.js

@@ -1,10 +1,32 @@
-import { StringLike } from "./StringLike.js";
+import { convertIamString } from "../../util.js";
+import { resolvedValue } from "../conditionUtil.js";
 export const StringNotLike = {
     name: 'StringNotLike',
     matches: (request, keyValue, policyValues) => {
-        return !StringLike.matches(request, keyValue, policyValues);
+        const explains = policyValues.map((value) => {
+            const { pattern, errors } = convertIamString(value, request, { replaceWildcards: true });
+            if (errors && errors.length > 0) {
+                return {
+                    value,
+                    matches: false,
+                    errors
+                };
+            }
+            const matches = !pattern.test(keyValue);
+            return {
+                value,
+                matches,
+                resolvedValue: resolvedValue(value, request),
+            };
+        });
+        const overallMatch = !explains.some(explain => !explain.matches);
+        return {
+            matches: overallMatch,
+            explains
+        };
     },
     allowsVariables: true,
-    allowsWildcards: true
+    allowsWildcards: true,
+    isNegative: true
 };
 //# sourceMappingURL=StringNotLike.js.map

package/dist/esm/condition/string/StringNotLike.js.map

@@ -1 +1 @@
-{"version":3,"file":"StringNotLike.js","sourceRoot":"","sources":["../../../../src/condition/string/StringNotLike.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE7C,MAAM,CAAC,MAAM,aAAa,GAA0B;IAClD,IAAI,EAAE,eAAe;IACrB,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE;QAC3C,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAA;IAC7D,CAAC;IACD,eAAe,EAAE,IAAI;IACrB,eAAe,EAAE,IAAI;CACtB,CAAA"}
+{"version":3,"file":"StringNotLike.js","sourceRoot":"","sources":["../../../../src/condition/string/StringNotLike.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEjD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,MAAM,CAAC,MAAM,aAAa,GAA0B;IAClD,IAAI,EAAE,eAAe;IACrB,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE;QACzC,MAAM,QAAQ,GAA4B,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACnE,MAAM,EAAC,OAAO,EAAE,MAAM,EAAC,GAAG,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAC,gBAAgB,EAAE,IAAI,EAAC,CAAC,CAAA;YACpF,IAAG,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC/B,OAAO;oBACL,KAAK;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM;iBACP,CAAA;YACH,CAAC;YAED,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YACvC,OAAO;gBACL,KAAK;gBACL,OAAO;gBACP,aAAa,EAAE,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC;aAC7C,CAAA;QACH,CAAC,CAAC,CAAA;QAGF,MAAM,YAAY,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QAChE,OAAO;YACL,OAAO,EAAE,YAAY;YACrB,QAAQ;SACT,CAAA;IAEH,CAAC;IACH,eAAe,EAAE,IAAI;IACrB,eAAe,EAAE,IAAI;IACrB,UAAU,EAAE,IAAI;CACjB,CAAA"}

package/dist/esm/core_engine/coreSimulatorEngine.d.ts

@@ -1,9 +1,7 @@
 import { Policy } from "@cloud-copilot/iam-policy";
-import { EvaluationResult } from "../evaluate.js";
+import { IdentityAnalysis, RequestAnalysis, ResourceAnalysis, ScpAnalysis } from "../evaluate.js";
 import { AwsRequest } from "../request/request.js";
-import { SCPAnalysis } from "../SCPAnalysis.js";
 import { ServiceAuthorizer } from "../services/ServiceAuthorizer.js";
-import { StatementAnalysis } from "../StatementAnalysis.js";
 /**
  * A set of service control policies for each level of an organization tree
  */
@@ -38,6 +36,10 @@ export interface AuthorizationRequest {
      * The resource policy that applies to the resource being accessed.
      */
     resourcePolicy: Policy | undefined;
+    /**
+     * The permission boundaries that apply to the principal making the request.
+     */
+    permissionBoundaries: Policy[] | undefined;
 }
 /**
  * Authorizes a request.
@@ -47,7 +49,7 @@ export interface AuthorizationRequest {
  * @param request the request to authorize
  * @returns the result of the authorization
  */
-export declare function authorize(request: AuthorizationRequest): EvaluationResult;
+export declare function authorize(request: AuthorizationRequest): RequestAnalysis;
 /**
  * Get the appropriate service authorizer for the request. Some services have specific authorization logic in
  * them. If there is no service specific authorizer, a default one will be used.
@@ -63,7 +65,7 @@ export declare function getServiceAuthorizer(request: AuthorizationRequest): Ser
  * @param request the request to analyze against
  * @returns an array of statement analysis results
  */
-export declare function analyzeIdentityPolicies(identityPolicies: Policy[], request: AwsRequest): StatementAnalysis[];
+export declare function analyzeIdentityPolicies(identityPolicies: Policy[], request: AwsRequest): IdentityAnalysis;
 /**
  * Analyzes a set of service control policies and the statements within them.
  *
@@ -71,7 +73,7 @@ export declare function analyzeIdentityPolicies(identityPolicies: Policy[], requ
  * @param request the request to analyze against
  * @returns an array of SCP analysis results
  */
-export declare function analyzeServiceControlPolicies(serviceControlPolicies: ServiceControlPolicies[], request: AwsRequest): SCPAnalysis[];
+export declare function analyzeServiceControlPolicies(serviceControlPolicies: ServiceControlPolicies[], request: AwsRequest): ScpAnalysis;
 /**
  * Analyze a resource policy and return the results
  *
@@ -79,5 +81,6 @@ export declare function analyzeServiceControlPolicies(serviceControlPolicies: Se
  * @param request the request to analyze against
  * @returns an array of statement analysis results
  */
-export declare function analyzeResourcePolicy(resourcePolicy: Policy, request: AwsRequest): StatementAnalysis[];
+export declare function analyzeResourcePolicy(resourcePolicy: Policy | undefined, request: AwsRequest): ResourceAnalysis;
+export declare function analyzePermissionBoundaryPolicies(permissionBoundaries: Policy[] | undefined, request: AwsRequest): IdentityAnalysis | undefined;
 //# sourceMappingURL=coreSimulatorEngine.d.ts.map

package/dist/esm/core_engine/coreSimulatorEngine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"coreSimulatorEngine.d.ts","sourceRoot":"","sources":["../../../src/core_engine/coreSimulatorEngine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAC;AAGnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAElD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEnD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC;;OAEG;IACH,aAAa,EAAE,MAAM,CAAC;IAEtB;;OAEG;IACH,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,OAAO,EAAE,UAAU,CAAC;IAEpB;;OAEG;IACH,gBAAgB,EAAE,MAAM,EAAE,CAAA;IAE1B;;;OAGG;IACH,sBAAsB,EAAE,sBAAsB,EAAE,CAAA;IAEhD;;OAEG;IACH,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC;AAID;;;;;;;GAOG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,oBAAoB,GAAG,gBAAgB,CAYzE;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,oBAAoB,GAAG,iBAAiB,CAMrF;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,gBAAgB,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,UAAU,GAAG,iBAAiB,EAAE,CAe5G;AAED;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAAC,sBAAsB,EAAE,sBAAsB,EAAE,EAAE,OAAO,EAAE,UAAU,GAAG,WAAW,EAAE,CAsBlI;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,GAAG,iBAAiB,EAAE,CAatG"}
+{"version":3,"file":"coreSimulatorEngine.d.ts","sourceRoot":"","sources":["../../../src/core_engine/coreSimulatorEngine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAa,MAAM,2BAA2B,CAAC;AAG9D,OAAO,EAAoB,gBAAgB,EAAiB,eAAe,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAGnI,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAGnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAGrE;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC;;OAEG;IACH,aAAa,EAAE,MAAM,CAAC;IAEtB;;OAEG;IACH,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,OAAO,EAAE,UAAU,CAAC;IAEpB;;OAEG;IACH,gBAAgB,EAAE,MAAM,EAAE,CAAA;IAE1B;;;OAGG;IACH,sBAAsB,EAAE,sBAAsB,EAAE,CAAA;IAEhD;;OAEG;IACH,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;IAEnC;;OAEG;IACH,oBAAoB,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;CAC5C;AAID;;;;;;;GAOG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,oBAAoB,GAAG,eAAe,CAcxE;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,oBAAoB,GAAG,iBAAiB,CAMrF;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,gBAAgB,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,UAAU,GAAG,gBAAgB,CA0CzG;AAED;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAAC,sBAAsB,EAAE,sBAAsB,EAAE,EAAE,OAAO,EAAE,UAAU,GAAG,WAAW,CAyDhI;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,cAAc,EAAE,MAAM,GAAG,SAAS,EAAE,OAAO,EAAE,UAAU,GAAG,gBAAgB,CAkD/G;AAGD,wBAAgB,iCAAiC,CAAC,oBAAoB,EAAE,MAAM,EAAE,GAAG,SAAS,EAAE,OAAO,EAAE,UAAU,GAAG,gBAAgB,GAAG,SAAS,CAM/I"}