@cloud-copilot/iam-simulate 0.1.12 → 0.1.14

package/dist/cjs/condition/boolean/Bool.js

@@ -5,16 +5,45 @@ const util_js_1 = require("../../util.js");
 exports.Bool = {
     name: 'Bool',
     matches: (request, keyValue, policyValues) => {
-        return policyValues.some(policyValue => {
-            const pattern = (0, util_js_1.convertIamStringToRegex)(policyValue, request, { replaceWildcards: false });
-            const lowercasePattern = pattern.source.toLowerCase();
-            if (lowercasePattern != '^true$' && lowercasePattern != '^false$') {
-                return false;
+        const explains = policyValues.map(policyValue => {
+            const { pattern, errors } = (0, util_js_1.convertIamString)(policyValue, request, { replaceWildcards: false });
+            if (errors && errors.length > 0) {
+                return {
+                    value: policyValue,
+                    matches: false,
+                    errors
+                };
             }
-            return new RegExp(pattern, 'i').test(keyValue);
+            const resolvedValue = (0, util_js_1.convertIamString)(policyValue, request, { replaceWildcards: false, convertToRegex: false });
+            const lowercaseResolvedValue = resolvedValue.toLowerCase();
+            if (lowercaseResolvedValue != 'true' && lowercaseResolvedValue != 'false') {
+                return {
+                    matches: false,
+                    value: policyValue,
+                    errors: ['Invalid boolean pattern'],
+                    resolvedValue: resolvedValue == policyValue ? undefined : resolvedValue
+                };
+            }
+            if (keyValue.toLowerCase() != 'true' && keyValue.toLowerCase() != 'false') {
+                return {
+                    matches: false,
+                    value: policyValue,
+                    errors: [`request value '${keyValue}' is not a boolean`],
+                };
+            }
+            return {
+                matches: new RegExp(pattern, 'i').test(keyValue),
+                value: policyValue,
+                resolvedValue: resolvedValue == policyValue ? undefined : resolvedValue
+            };
         });
+        return {
+            matches: explains.some(explain => explain.matches),
+            explains
+        };
     },
     allowsVariables: true,
-    allowsWildcards: false
+    allowsWildcards: false,
+    isNegative: false
 };
 //# sourceMappingURL=Bool.js.map

package/dist/cjs/condition/boolean/Bool.js.map

@@ -1 +1 @@
-{"version":3,"file":"Bool.js","sourceRoot":"","sources":["../../../../src/condition/boolean/Bool.ts"],"names":[],"mappings":";;;AAAA,2CAAwD;AAG3C,QAAA,IAAI,GAA0B;IACzC,IAAI,EAAE,MAAM;IACZ,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE;QAC3C,OAAO,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE;YACrC,MAAM,OAAO,GAAG,IAAA,iCAAuB,EAAC,WAAW,EAAE,OAAO,EAAE,EAAC,gBAAgB,EAAE,KAAK,EAAC,CAAC,CAAA;YACxF,MAAM,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,CAAA;YACrD,IAAG,gBAAgB,IAAI,QAAQ,IAAI,gBAAgB,IAAI,SAAS,EAAE,CAAC;gBACjE,OAAO,KAAK,CAAA;YACd,CAAC;YACD,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAChD,CAAC,CAAC,CAAA;IACJ,CAAC;IACD,eAAe,EAAE,IAAI;IACrB,eAAe,EAAE,KAAK;CACvB,CAAA"}
+{"version":3,"file":"Bool.js","sourceRoot":"","sources":["../../../../src/condition/boolean/Bool.ts"],"names":[],"mappings":";;;AACA,2CAAiD;AAGpC,QAAA,IAAI,GAA0B;IACzC,IAAI,EAAE,MAAM;IACZ,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE;QAE3C,MAAM,QAAQ,GAA4B,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE;YACvE,MAAM,EAAC,OAAO,EAAE,MAAM,EAAC,GAAG,IAAA,0BAAgB,EAAC,WAAW,EAAE,OAAO,EAAE,EAAC,gBAAgB,EAAE,KAAK,EAAC,CAAC,CAAA;YAC3F,IAAG,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC/B,OAAO;oBACL,KAAK,EAAE,WAAW;oBAClB,OAAO,EAAE,KAAK;oBACd,MAAM;iBACP,CAAA;YACH,CAAC;YAED,MAAM,aAAa,GAAG,IAAA,0BAAgB,EAAC,WAAW,EAAE,OAAO,EAAE,EAAC,gBAAgB,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAC,CAAC,CAAA;YAC9G,MAAM,sBAAsB,GAAG,aAAa,CAAC,WAAW,EAAE,CAAA;YAE1D,IAAG,sBAAsB,IAAI,MAAM,IAAI,sBAAsB,IAAI,OAAO,EAAE,CAAC;gBACzE,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,WAAW;oBAClB,MAAM,EAAE,CAAC,yBAAyB,CAAC;oBACnC,aAAa,EAAE,aAAa,IAAI,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa;iBACxE,CAAA;YACH,CAAC;YAED,IAAG,QAAQ,CAAC,WAAW,EAAE,IAAI,MAAM,IAAI,QAAQ,CAAC,WAAW,EAAE,IAAI,OAAO,EAAE,CAAC;gBACzE,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,WAAW;oBAClB,MAAM,EAAE,CAAC,kBAAkB,QAAQ,oBAAoB,CAAC;iBACzD,CAAA;YACH,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,IAAI,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAChD,KAAK,EAAE,WAAW;gBAClB,aAAa,EAAE,aAAa,IAAI,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa;aACxE,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,OAAO;YACL,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;YAClD,QAAQ;SACT,CAAA;IACH,CAAC;IACD,eAAe,EAAE,IAAI;IACrB,eAAe,EAAE,KAAK;IACtB,UAAU,EAAE,KAAK;CAClB,CAAA"}

package/dist/cjs/condition/condition.d.ts

@@ -1,6 +1,49 @@
 import { Condition } from '@cloud-copilot/iam-policy';
+import { ConditionExplain, StatementExplain } from '../explain/statementExplain.js';
 import { AwsRequest } from '../request/request';
-export type ConditionMatchResult = 'Match' | 'NoMatch' | 'Unknown';
-export declare function requestMatchesConditions(request: AwsRequest, conditions: Condition[]): ConditionMatchResult;
-export declare function singleConditionMatchesRequest(request: AwsRequest, condition: Condition): ConditionMatchResult;
+import { ContextKey } from '../requestContext.js';
+import { BaseConditionOperator } from './BaseConditionOperator.js';
+export type ConditionMatchResult = 'Match' | 'NoMatch';
+/**
+ * Evaluate a set of conditions against a request
+ *
+ * @param request the request to test
+ * @param conditions the conditions to test
+ * @returns Match if all conditions match, NoMatch if any do not. Also returns all the details of the evaluation
+ */
+export declare function requestMatchesConditions(request: AwsRequest, conditions: Condition[]): {
+    matches: ConditionMatchResult;
+    details: Pick<StatementExplain, 'conditions'>;
+};
+/**
+ * Checks to see if a single condition matches a request
+ *
+ * @param request the request to test
+ * @param condition the condition to test
+ * @returns the result of evaluating the condition
+ */
+export declare function singleConditionMatchesRequest(request: AwsRequest, condition: Condition): ConditionExplain;
+export declare function singleValueMatch(request: AwsRequest, condition: Condition, baseOperation: BaseConditionOperator, keyValue: ContextKey | undefined): ConditionExplain;
+/**
+ * Tests a condition with a ForAllValues set operator
+ *
+ * @param request the request to test
+ * @param condition the condition with ForAllValues set operator
+ * @param keyExists whether the key exists in the request
+ * @param keyValue the value of the key in the request
+ * @param baseOperation the base operation to test the key against
+ * @returns the result of evaluating the ForAllValues set operator
+ */
+export declare function forAllValuesMatch(request: AwsRequest, condition: Condition, keyValue: ContextKey | undefined, baseOperation: BaseConditionOperator): ConditionExplain;
+/**
+ * Test a condition with a ForAnyValue set operator
+ *
+ * @param request the request to test
+ * @param condition the condition with ForAnyValue set operator
+ * @param keyExists whether the key exists in the request
+ * @param keyValue the value of the key in the request
+ * @param baseOperation the base operation to test the key against
+ * @returns the result of evaluating the ForAnyValue set operator
+ */
+export declare function forAnyValueMatch(request: AwsRequest, condition: Condition, keyValue: ContextKey | undefined, baseOperation: BaseConditionOperator): ConditionExplain;
 //# sourceMappingURL=condition.d.ts.map

package/dist/cjs/condition/condition.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"condition.d.ts","sourceRoot":"","sources":["../../../src/condition/condition.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AA4BhD,MAAM,MAAM,oBAAoB,GAAG,OAAO,GAAG,SAAS,GAAG,SAAS,CAAA;AAiBlE,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,oBAAoB,CAW3G;AAED,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,GAAG,oBAAoB,CAiE7G"}
+{"version":3,"file":"condition.d.ts","sourceRoot":"","sources":["../../../src/condition/condition.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAyB,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAC3G,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAKlD,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAuBnE,MAAM,MAAM,oBAAoB,GAAG,OAAO,GAAG,SAAS,CAAA;AAiBtD;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG;IAAE,OAAO,EAAE,oBAAoB,CAAC;IAAC,OAAO,EAAE,IAAI,CAAC,gBAAgB,EAAE,YAAY,CAAC,CAAA;CAAE,CASvK;AAED;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,GAAG,gBAAgB,CAuBzG;AA0BD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,UAAU,EACnB,SAAS,EAAE,SAAS,EACpB,aAAa,EAAE,qBAAqB,EACpC,QAAQ,EAAE,UAAU,GAAG,SAAS,GAAG,gBAAgB,CA8CnF;AAED;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,UAAU,EACnB,SAAS,EAAE,SAAS,EACpB,QAAQ,EAAE,UAAU,GAAG,SAAS,EAChC,aAAa,EAAE,qBAAqB,GAAG,gBAAgB,CA+ExF;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,UAAU,EACnB,SAAS,EAAE,SAAS,EACpB,QAAQ,EAAE,UAAU,GAAG,SAAS,EAChC,aAAa,EAAE,qBAAqB,GAAG,gBAAgB,CAiEvF"}

package/dist/cjs/condition/condition.js

@@ -2,6 +2,9 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.requestMatchesConditions = requestMatchesConditions;
 exports.singleConditionMatchesRequest = singleConditionMatchesRequest;
+exports.singleValueMatch = singleValueMatch;
+exports.forAllValuesMatch = forAllValuesMatch;
+exports.forAnyValueMatch = forAnyValueMatch;
 const ArnEquals_js_1 = require("./arn/ArnEquals.js");
 const ArnLike_js_1 = require("./arn/ArnLike.js");
 const ArnNotEquals_js_1 = require("./arn/ArnNotEquals.js");
@@ -40,22 +43,33 @@ const baseOperations = {};
 for (const operator of allOperators) {
     baseOperations[operator.name.toLowerCase()] = operator;
 }
+/**
+ * Evaluate a set of conditions against a request
+ *
+ * @param request the request to test
+ * @param conditions the conditions to test
+ * @returns Match if all conditions match, NoMatch if any do not. Also returns all the details of the evaluation
+ */
 function requestMatchesConditions(request, conditions) {
     const results = conditions.map(condition => singleConditionMatchesRequest(request, condition));
-    const unknowns = results.filter(result => result === 'Unknown');
-    if (unknowns.length > 0) {
-        return 'Unknown';
-    }
-    const noMatches = results.filter(result => result === 'NoMatch');
-    if (noMatches.length > 0) {
-        return 'NoMatch';
-    }
-    return 'Match';
+    const nonMatch = results.some(result => !result.matches);
+    return {
+        matches: nonMatch ? 'NoMatch' : 'Match',
+        details: {
+            conditions: results
+        }
+    };
 }
+/**
+ * Checks to see if a single condition matches a request
+ *
+ * @param request the request to test
+ * @param condition the condition to test
+ * @returns the result of evaluating the condition
+ */
 function singleConditionMatchesRequest(request, condition) {
     const key = condition.conditionKey();
-    const policyValues = condition.conditionValues();
-    const baseOperation = baseOperations[condition.operation().baseOperator().toLowerCase()]?.matches;
+    const baseOperation = baseOperations[condition.operation().baseOperator().toLowerCase()];
     const keyExists = request.contextKeyExists(key);
     const keyValue = keyExists ? request.getContextKeyValue(key) : undefined;
     if (condition.operation().value().toLowerCase() == 'null' || condition.operation().baseOperator()?.toLowerCase() == 'null') {
@@ -64,60 +78,240 @@ function singleConditionMatchesRequest(request, condition) {
     if (condition.operation().setOperator()) {
         const setOperator = condition.operation().setOperator();
         if (setOperator === 'ForAnyValue') {
-            if (!keyExists || !keyValue || !keyValue.isArrayValue()) {
-                return 'NoMatch';
-            }
-            if (!baseOperation) {
-                return 'Unknown';
-            }
-            //Do the loop
-            const anyMatch = keyValue.values.some(value => {
-                return baseOperation(request, value, policyValues);
-            });
-            return anyMatch ? 'Match' : 'NoMatch';
+            return forAnyValueMatch(request, condition, keyValue, baseOperation);
         }
         else if (setOperator === 'ForAllValues') {
-            if (!keyExists) {
-                return 'Match';
-            }
-            if (!keyValue || !keyValue.isArrayValue()) {
-                return 'NoMatch';
-            }
-            if (!baseOperation) {
-                return 'Unknown';
-            }
-            //Do the loop
-            const anyNotMatch = keyValue.values.some(value => {
-                return !baseOperation(request, value, policyValues);
-            });
-            return anyNotMatch ? 'NoMatch' : 'Match';
+            return forAllValuesMatch(request, condition, keyValue, baseOperation);
         }
         else {
             throw new Error(`Unknown set operator: ${setOperator}`);
         }
     }
-    if (condition.operation().isIfExists() || condition.operation().baseOperator().toLowerCase().includes('not')) {
+    return singleValueMatch(request, condition, baseOperation, keyValue);
+}
+/**
+ * Tests a condition with a null operator
+ *
+ * @param condition the condition to test
+ * @param keyExists whether the key exists in the request
+ * @returns the result of evaluating the null operator
+ */
+function testNull(condition, keyExists) {
+    const goalValue = keyExists ? 'false' : 'true';
+    const conditionValues = condition.conditionValues().map(value => {
+        return {
+            value,
+            matches: value.toLowerCase() === goalValue
+        };
+    });
+    return {
+        operator: condition.operation().value(),
+        conditionKeyValue: condition.conditionKey(),
+        values: conditionValues,
+        matches: conditionValues.some(value => value.matches)
+    };
+}
+function singleValueMatch(request, condition, baseOperation, keyValue) {
+    const isNotOperator = condition.operation().baseOperator().toLowerCase().includes('not');
+    if (condition.operation().isIfExists() || isNotOperator) {
         //Check if it exists, return true if it doesn't
         //Double check what happens here if the key is not a valid key or is of the wrong type
-        if (!keyExists) {
-            return 'Match';
+        if (!keyValue) {
+            return {
+                operator: condition.operation().value(),
+                conditionKeyValue: condition.conditionKey(),
+                values: [],
+                matches: true,
+                matchedBecauseMissing: true
+            };
         }
     }
     if (!keyValue || !keyValue.isStringValue()) {
         //Set operator is required for a multi-value key
-        return 'NoMatch';
+        return {
+            operator: condition.operation().value(),
+            conditionKeyValue: condition.conditionKey(),
+            values: [],
+            matches: false,
+            failedBecauseMissing: !keyValue,
+            failedBecauseArray: keyValue?.isArrayValue(),
+        };
     }
     if (!baseOperation) {
-        return 'Unknown';
+        return {
+            operator: condition.operation().value(),
+            conditionKeyValue: condition.conditionKey(),
+            values: [],
+            matches: false,
+            missingOperator: true
+        };
     }
-    const matches = baseOperation(request, keyValue.value, policyValues);
-    return matches ? 'Match' : 'NoMatch';
+    const { matches, explains } = baseOperation.matches(request, keyValue.value, condition.conditionValues());
+    return {
+        matches,
+        operator: condition.operation().value(),
+        conditionKeyValue: condition.conditionKey(),
+        values: condition.valueIsArray() ? explains : explains[0]
+    };
 }
-function testNull(condition, keyExists) {
-    const lowerCaseValues = condition.conditionValues().map(value => value.toLowerCase());
-    if (keyExists) {
-        return lowerCaseValues.includes('false') ? 'Match' : 'NoMatch';
+/**
+ * Tests a condition with a ForAllValues set operator
+ *
+ * @param request the request to test
+ * @param condition the condition with ForAllValues set operator
+ * @param keyExists whether the key exists in the request
+ * @param keyValue the value of the key in the request
+ * @param baseOperation the base operation to test the key against
+ * @returns the result of evaluating the ForAllValues set operator
+ */
+function forAllValuesMatch(request, condition, keyValue, baseOperation) {
+    if (!keyValue) {
+        return {
+            operator: condition.operation().value(),
+            conditionKeyValue: condition.conditionKey(),
+            values: [],
+            matches: true,
+            matchedBecauseMissing: true
+        };
+        // return 'Match'
+    }
+    if (!keyValue || !keyValue.isArrayValue()) {
+        return {
+            operator: condition.operation().value(),
+            conditionKeyValue: condition.conditionKey(),
+            values: [],
+            matches: false,
+            failedBecauseMissing: !keyValue,
+            failedBecauseNotArray: !!keyValue && !keyValue.isArrayValue()
+        };
+        // return 'NoMatch'
+    }
+    if (!baseOperation) {
+        //TODO: This should return a nomatch rather than throw an error
+        return {
+            operator: condition.operation().value(),
+            conditionKeyValue: condition.conditionKey(),
+            values: [],
+            matches: false,
+            missingOperator: true
+        };
+    }
+    const valueExplains = keyValue.values.map(value => {
+        const { matches, explains } = baseOperation.matches(request, value, condition.conditionValues());
+        return {
+            requestValue: value,
+            matches,
+            explains
+        };
+    });
+    const anyNonMatches = valueExplains.some(valueExplain => !valueExplain.matches);
+    const overallMatch = !anyNonMatches;
+    const unmatchedValues = [];
+    const explains = {};
+    for (const valueExplain of valueExplains) {
+        if (!baseOperation.isNegative && !valueExplain.matches) {
+            unmatchedValues.push(valueExplain.requestValue);
+        }
+        else if (baseOperation.isNegative && valueExplain.matches) {
+            unmatchedValues.push(valueExplain.requestValue);
+        }
+        for (const explain of valueExplain.explains) {
+            let theExplain = explains[explain.value];
+            if (!theExplain) {
+                explains[explain.value] = {
+                    value: explain.value,
+                    matches: overallMatch
+                };
+                theExplain = explains[explain.value];
+            }
+            if (explain.matches && !baseOperation.isNegative) {
+                theExplain.matchingValues = theExplain.matchingValues || [];
+                theExplain.matchingValues.push(valueExplain.requestValue);
+            }
+            else if (!explain.matches && baseOperation.isNegative) {
+                theExplain.negativeMatchingValues = theExplain.negativeMatchingValues || [];
+                theExplain.negativeMatchingValues.push(valueExplain.requestValue);
+            }
+        }
+    }
+    return {
+        operator: condition.operation().value(),
+        conditionKeyValue: condition.conditionKey(),
+        values: Object.values(explains),
+        matches: overallMatch,
+        unmatchedValues
+    };
+}
+/**
+ * Test a condition with a ForAnyValue set operator
+ *
+ * @param request the request to test
+ * @param condition the condition with ForAnyValue set operator
+ * @param keyExists whether the key exists in the request
+ * @param keyValue the value of the key in the request
+ * @param baseOperation the base operation to test the key against
+ * @returns the result of evaluating the ForAnyValue set operator
+ */
+function forAnyValueMatch(request, condition, keyValue, baseOperation) {
+    if (!keyValue || !keyValue.isArrayValue()) {
+        return {
+            operator: condition.operation().value(),
+            conditionKeyValue: condition.conditionKey(),
+            values: [],
+            matches: false,
+            failedBecauseMissing: !keyValue,
+            failedBecauseNotArray: keyValue && !keyValue.isArrayValue()
+        };
+        // return 'NoMatch'
+    }
+    if (!baseOperation) {
+        return {
+            operator: condition.operation().value(),
+            conditionKeyValue: condition.conditionKey(),
+            values: [],
+            matches: false,
+            missingOperator: true
+        };
+    }
+    const valueExplains = keyValue.values.map(value => {
+        const { matches, explains } = baseOperation.matches(request, value, condition.conditionValues());
+        return {
+            requestValue: value,
+            matches,
+            explains
+        };
+    });
+    const overallMatch = valueExplains.some(valueExplain => valueExplain.matches);
+    const unmatchedValues = [];
+    const explains = {};
+    for (const valueExplain of valueExplains) {
+        if (!baseOperation.isNegative && !valueExplain.matches) {
+            unmatchedValues.push(valueExplain.requestValue);
+        }
+        else if (baseOperation.isNegative && valueExplain.matches) {
+            unmatchedValues.push(valueExplain.requestValue);
+        }
+        for (const explain of valueExplain.explains) {
+            let theExplain = explains[explain.value];
+            if (!theExplain) {
+                explains[explain.value] = {
+                    value: explain.value,
+                    matches: overallMatch
+                };
+                theExplain = explains[explain.value];
+            }
+            if (explain.matches) {
+                theExplain.matchingValues = theExplain.matchingValues || [];
+                theExplain.matchingValues.push(valueExplain.requestValue);
+            }
+        }
     }
-    return lowerCaseValues.includes('true') ? 'Match' : 'NoMatch';
+    return {
+        operator: condition.operation().value(),
+        conditionKeyValue: condition.conditionKey(),
+        values: Object.values(explains),
+        matches: overallMatch,
+        unmatchedValues
+    };
 }
 //# sourceMappingURL=condition.js.map

package/dist/cjs/condition/condition.js.map

@@ -1 +1 @@
-{"version":3,"file":"condition.js","sourceRoot":"","sources":["../../../src/condition/condition.ts"],"names":[],"mappings":";;AA8CA,4DAWC;AAED,sEAiEC;AA1HD,qDAA+C;AAC/C,iDAA2C;AAC3C,2DAAqD;AACrD,uDAAiD;AAEjD,8DAAwD;AACxD,+CAAyC;AACzC,wDAAkD;AAClD,kEAA4D;AAC5D,8EAAwE;AACxE,4DAAsD;AACtD,wEAAkE;AAClE,8DAAwD;AACxD,2DAAqD;AACrD,iEAA2D;AAC3D,iEAA2D;AAC3D,2EAAqE;AACrE,uFAAiF;AACjF,qEAA+D;AAC/D,uEAAiE;AACjE,8DAAwD;AACxD,kFAA4E;AAC5E,0DAAoD;AACpD,oEAA8D;AAC9D,wFAAkF;AAClF,gEAA0D;AAI1D,MAAM,YAAY,GAAG;IACnB,8BAAY,EAAE,oCAAe,EAAE,kDAAsB,EAAE,wDAAyB,EAAE,0BAAU,EAAE,gCAAa;IAC3G,gCAAa,EAAE,sCAAgB,EAAE,oCAAe,EAAE,sCAAgB,EAAE,0CAAkB,EAAE,sDAAwB;IAChH,0BAAU,EAAE,gCAAa,EAAE,8BAAY,EAAE,0CAAkB,EAAE,oCAAe,EAAE,gDAAqB;IACnG,cAAI;IACJ,8BAAY;IACZ,wBAAS,EAAE,8BAAY;IACvB,oBAAO,EAAE,wBAAS,EAAE,0BAAU,EAAE,8BAAY;CAC7C,CAAA;AAED,MAAM,cAAc,GAA6C,EAAE,CAAA;AACnE,KAAI,MAAM,QAAQ,IAAI,YAAY,EAAE,CAAC;IACnC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,GAAG,QAAQ,CAAA;AACxD,CAAC;AAED,SAAgB,wBAAwB,CAAC,OAAmB,EAAE,UAAuB;IACnF,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,6BAA6B,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAA;IAC9F,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,KAAK,SAAS,CAAC,CAAA;IAC/D,IAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,KAAK,SAAS,CAAC,CAAA;IAChE,IAAG,SAAS,CAAC,MAAM,GAAG,CAAC,EAAG,CAAC;QACzB,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,SAAgB,6BAA6B,CAAC,OAAmB,EAAE,SAAoB;IACrF,MAAM,GAAG,GAAG,SAAS,CAAC,YAAY,EAAE,CAAA;IACpC,MAAM,YAAY,GAAG,SAAS,CAAC,eAAe,EAAE,CAAA;IAChD,MAAM,aAAa,GAAG,cAAc,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,YAAY,EAAE,CAAC,WAAW,EAAE,CAAC,EAAE,OAAO,CAAA;IACjG,MAAM,SAAS,GAAG,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAA;IAC/C,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAExE,IAAG,SAAS,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,IAAI,MAAM,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC,YAAY,EAAE,EAAE,WAAW,EAAE,IAAI,MAAM,EAAE,CAAC;QAC1H,OAAO,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;IACvC,CAAC;IAED,IAAG,SAAS,CAAC,SAAS,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QACvC,MAAM,WAAW,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC,WAAW,EAAE,CAAA;QACvD,IAAG,WAAW,KAAK,aAAa,EAAE,CAAC;YACjC,IAAG,CAAC,SAAS,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC;gBACvD,OAAO,SAAS,CAAA;YAClB,CAAC;YAED,IAAG,CAAC,aAAa,EAAE,CAAC;gBAClB,OAAO,SAAS,CAAA;YAClB,CAAC;YACD,aAAa;YACb,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;gBAC5C,OAAO,aAAa,CAAC,OAAO,EAAE,KAAK,EAAE,YAAY,CAAC,CAAA;YACpD,CAAC,CAAC,CAAA;YACF,OAAO,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAA;QACvC,CAAC;aAAM,IAAI,WAAW,KAAK,cAAc,EAAE,CAAC;YAC1C,IAAG,CAAC,SAAS,EAAE,CAAC;gBACd,OAAO,OAAO,CAAA;YAChB,CAAC;YACD,IAAG,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC;gBACzC,OAAO,SAAS,CAAA;YAClB,CAAC;YACD,IAAG,CAAC,aAAa,EAAE,CAAC;gBAClB,OAAO,SAAS,CAAA;YAClB,CAAC;YACD,aAAa;YACb,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;gBAC/C,OAAO,CAAC,aAAa,CAAC,OAAO,EAAE,KAAK,EAAE,YAAY,CAAC,CAAA;YACrD,CAAC,CAAC,CAAA;YAEF,OAAO,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAA;QAC1C,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,yBAAyB,WAAW,EAAE,CAAC,CAAA;QACzD,CAAC;IACH,CAAC;IAED,IAAG,SAAS,CAAC,SAAS,EAAE,CAAC,UAAU,EAAE,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC,YAAY,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5G,+CAA+C;QAC/C,sFAAsF;QACtF,IAAG,CAAC,SAAS,EAAE,CAAC;YACd,OAAO,OAAO,CAAA;QAChB,CAAC;IACH,CAAC;IAED,IAAG,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,EAAE,CAAC;QAC1C,gDAAgD;QAChD,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,IAAG,CAAC,aAAa,EAAE,CAAC;QAClB,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC,CAAA;IACpE,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAA;AACtC,CAAC;AAED,SAAS,QAAQ,CAAC,SAAoB,EAAE,SAAkB;IACxD,MAAM,eAAe,GAAG,SAAS,CAAC,eAAe,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAA;IACrF,IAAG,SAAS,EAAE,CAAC;QACb,OAAO,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAA;IAChE,CAAC;IAED,OAAO,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAA;AAC/D,CAAC"}
+{"version":3,"file":"condition.js","sourceRoot":"","sources":["../../../src/condition/condition.ts"],"names":[],"mappings":";;AAuDA,4DASC;AASD,sEAuBC;AA0BD,4CAiDC;AAYD,8CAkFC;AAYD,4CAoEC;AArVD,qDAA+C;AAC/C,iDAA2C;AAC3C,2DAAqD;AACrD,uDAAiD;AAEjD,8DAAwD;AACxD,+CAAyC;AACzC,wDAAkD;AAClD,kEAA4D;AAC5D,8EAAwE;AACxE,4DAAsD;AACtD,wEAAkE;AAClE,8DAAwD;AACxD,2DAAqD;AACrD,iEAA2D;AAC3D,iEAA2D;AAC3D,2EAAqE;AACrE,uFAAiF;AACjF,qEAA+D;AAC/D,uEAAiE;AACjE,8DAAwD;AACxD,kFAA4E;AAC5E,0DAAoD;AACpD,oEAA8D;AAC9D,wFAAkF;AAClF,gEAA0D;AAI1D,MAAM,YAAY,GAAG;IACnB,8BAAY,EAAE,oCAAe,EAAE,kDAAsB,EAAE,wDAAyB,EAAE,0BAAU,EAAE,gCAAa;IAC3G,gCAAa,EAAE,sCAAgB,EAAE,oCAAe,EAAE,sCAAgB,EAAE,0CAAkB,EAAE,sDAAwB;IAChH,0BAAU,EAAE,gCAAa,EAAE,8BAAY,EAAE,0CAAkB,EAAE,oCAAe,EAAE,gDAAqB;IACnG,cAAI;IACJ,8BAAY;IACZ,wBAAS,EAAE,8BAAY;IACvB,oBAAO,EAAE,wBAAS,EAAE,0BAAU,EAAE,8BAAY;CAC7C,CAAA;AAED,MAAM,cAAc,GAA6C,EAAE,CAAA;AACnE,KAAI,MAAM,QAAQ,IAAI,YAAY,EAAE,CAAC;IACnC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,GAAG,QAAQ,CAAA;AACxD,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,wBAAwB,CAAC,OAAmB,EAAE,UAAuB;IACnF,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,6BAA6B,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAA;IAC9F,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IACxD,OAAO;QACL,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;QACvC,OAAO,EAAE;YACP,UAAU,EAAE,OAAO;SACpB;KACF,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,6BAA6B,CAAC,OAAmB,EAAE,SAAoB;IACrF,MAAM,GAAG,GAAG,SAAS,CAAC,YAAY,EAAE,CAAA;IACpC,MAAM,aAAa,GAAG,cAAc,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,YAAY,EAAE,CAAC,WAAW,EAAE,CAAC,CAAA;IACxF,MAAM,SAAS,GAAG,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAA;IAC/C,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAExE,IAAG,SAAS,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,IAAI,MAAM,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC,YAAY,EAAE,EAAE,WAAW,EAAE,IAAI,MAAM,EAAE,CAAC;QAC1H,OAAO,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;IACvC,CAAC;IAED,IAAG,SAAS,CAAC,SAAS,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QACvC,MAAM,WAAW,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC,WAAW,EAAE,CAAA;QACvD,IAAG,WAAW,KAAK,aAAa,EAAE,CAAC;YACjC,OAAO,gBAAgB,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAA;QACtE,CAAC;aAAM,IAAI,WAAW,KAAK,cAAc,EAAE,CAAC;YAC1C,OAAO,iBAAiB,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAA;QACvE,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,yBAAyB,WAAW,EAAE,CAAC,CAAA;QACzD,CAAC;IACH,CAAC;IAED,OAAO,gBAAgB,CAAC,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAA;AAEtE,CAAC;AAED;;;;;;GAMG;AACH,SAAS,QAAQ,CAAC,SAAoB,EAAE,SAAkB;IACxD,MAAM,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAA;IAC9C,MAAM,eAAe,GAA4B,SAAS,CAAC,eAAe,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;QACvF,OAAO;YACL,KAAK;YACL,OAAO,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,SAAS;SAC3C,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,OAAO;QACL,QAAQ,EAAE,SAAS,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE;QACvC,iBAAiB,EAAE,SAAS,CAAC,YAAY,EAAE;QAC3C,MAAM,EAAE,eAAe;QACvB,OAAO,EAAE,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;KACtD,CAAA;AACH,CAAC;AAED,SAAgB,gBAAgB,CAAC,OAAmB,EACnB,SAAoB,EACpB,aAAoC,EACpC,QAAgC;IAC/D,MAAM,aAAa,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC,YAAY,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IACxF,IAAG,SAAS,CAAC,SAAS,EAAE,CAAC,UAAU,EAAE,IAAI,aAAa,EAAE,CAAC;QACvD,+CAA+C;QAC/C,sFAAsF;QACtF,IAAG,CAAC,QAAQ,EAAE,CAAC;YACb,OAAO;gBACL,QAAQ,EAAE,SAAS,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE;gBACvC,iBAAiB,EAAE,SAAS,CAAC,YAAY,EAAE;gBAC3C,MAAM,EAAE,EAAE;gBACV,OAAO,EAAE,IAAI;gBACb,qBAAqB,EAAE,IAAI;aAC5B,CAAA;QACH,CAAC;IACH,CAAC;IAED,IAAG,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,EAAE,CAAC;QAC1C,gDAAgD;QAChD,OAAO;YACL,QAAQ,EAAE,SAAS,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE;YACvC,iBAAiB,EAAE,SAAS,CAAC,YAAY,EAAE;YAC3C,MAAM,EAAE,EAAE;YACV,OAAO,EAAE,KAAK;YACd,oBAAoB,EAAE,CAAC,QAAQ;YAC/B,kBAAkB,EAAE,QAAQ,EAAE,YAAY,EAAE;SAC7C,CAAA;IACH,CAAC;IAED,IAAG,CAAC,aAAa,EAAE,CAAC;QAClB,OAAO;YACL,QAAQ,EAAE,SAAS,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE;YACvC,iBAAiB,EAAE,SAAS,CAAC,YAAY,EAAE;YAC3C,MAAM,EAAE,EAAE;YACV,OAAO,EAAE,KAAK;YACd,eAAe,EAAE,IAAI;SACtB,CAAA;IACH,CAAC;IAED,MAAM,EAAC,OAAO,EAAE,QAAQ,EAAC,GAAG,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,eAAe,EAAE,CAAC,CAAA;IAEvG,OAAO;QACL,OAAO;QACP,QAAQ,EAAE,SAAS,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE;QACvC,iBAAiB,EAAE,SAAS,CAAC,YAAY,EAAE;QAC3C,MAAM,EAAE,SAAS,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;KAC1D,CAAA;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,iBAAiB,CAAC,OAAmB,EACnB,SAAoB,EACpB,QAAgC,EAChC,aAAoC;IACpE,IAAG,CAAC,QAAQ,EAAE,CAAC;QACb,OAAO;YACL,QAAQ,EAAE,SAAS,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE;YACvC,iBAAiB,EAAE,SAAS,CAAC,YAAY,EAAE;YAC3C,MAAM,EAAE,EAAE;YACV,OAAO,EAAE,IAAI;YACb,qBAAqB,EAAE,IAAI;SAC5B,CAAA;QACD,iBAAiB;IACnB,CAAC;IACD,IAAG,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC;QACzC,OAAO;YACL,QAAQ,EAAE,SAAS,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE;YACvC,iBAAiB,EAAE,SAAS,CAAC,YAAY,EAAE;YAC3C,MAAM,EAAE,EAAE;YACV,OAAO,EAAE,KAAK;YACd,oBAAoB,EAAE,CAAC,QAAQ;YAC/B,qBAAqB,EAAE,CAAC,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE;SAC9D,CAAA;QACD,mBAAmB;IACrB,CAAC;IACD,IAAG,CAAC,aAAa,EAAE,CAAC;QAClB,+DAA+D;QAC/D,OAAO;YACL,QAAQ,EAAE,SAAS,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE;YACvC,iBAAiB,EAAE,SAAS,CAAC,YAAY,EAAE;YAC3C,MAAM,EAAE,EAAE;YACV,OAAO,EAAE,KAAK;YACd,eAAe,EAAE,IAAI;SACtB,CAAA;IACH,CAAC;IAED,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;QAChD,MAAM,EAAC,OAAO,EAAE,QAAQ,EAAC,GAAG,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,eAAe,EAAE,CAAC,CAAA;QAC9F,OAAO;YACL,YAAY,EAAE,KAAK;YACnB,OAAO;YACP,QAAQ;SACT,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,MAAM,aAAa,GAAG,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAA;IAC/E,MAAM,YAAY,GAAG,CAAC,aAAa,CAAA;IACnC,MAAM,eAAe,GAAa,EAAE,CAAA;IAEpC,MAAM,QAAQ,GAA0C,EAAE,CAAA;IAC1D,KAAI,MAAM,YAAY,IAAI,aAAa,EAAE,CAAC;QACxC,IAAG,CAAC,aAAa,CAAC,UAAU,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YACtD,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,CAAA;QACjD,CAAC;aAAM,IAAG,aAAa,CAAC,UAAU,IAAI,YAAY,CAAC,OAAO,EAAE,CAAC;YAC3D,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,CAAA;QACjD,CAAC;QACD,KAAI,MAAM,OAAO,IAAI,YAAY,CAAC,QAAQ,EAAE,CAAC;YAC3C,IAAI,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;YACxC,IAAG,CAAC,UAAU,EAAE,CAAC;gBACf,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG;oBACxB,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,OAAO,EAAE,YAAY;iBACtB,CAAA;gBACD,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;YACtC,CAAC;YACD,IAAG,OAAO,CAAC,OAAO,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,CAAC;gBAChD,UAAU,CAAC,cAAc,GAAG,UAAU,CAAC,cAAc,IAAI,EAAE,CAAA;gBAC3D,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,CAAA;YAC3D,CAAC;iBAAM,IAAG,CAAC,OAAO,CAAC,OAAO,IAAI,aAAa,CAAC,UAAU,EAAC,CAAC;gBACtD,UAAU,CAAC,sBAAsB,GAAG,UAAU,CAAC,sBAAsB,IAAI,EAAE,CAAA;gBAC3E,UAAU,CAAC,sBAAsB,CAAC,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,CAAA;YACnE,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,SAAS,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE;QACvC,iBAAiB,EAAE,SAAS,CAAC,YAAY,EAAE;QAC3C,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC/B,OAAO,EAAE,YAAY;QACrB,eAAe;KAChB,CAAA;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,gBAAgB,CAAC,OAAmB,EACnB,SAAoB,EACpB,QAAgC,EAChC,aAAoC;IACnE,IAAG,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC;QACzC,OAAO;YACL,QAAQ,EAAE,SAAS,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE;YACvC,iBAAiB,EAAE,SAAS,CAAC,YAAY,EAAE;YAC3C,MAAM,EAAE,EAAE;YACV,OAAO,EAAE,KAAK;YACd,oBAAoB,EAAE,CAAC,QAAQ;YAC/B,qBAAqB,EAAE,QAAQ,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE;SAC5D,CAAA;QACD,mBAAmB;IACrB,CAAC;IAED,IAAG,CAAC,aAAa,EAAE,CAAC;QAClB,OAAO;YACL,QAAQ,EAAE,SAAS,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE;YACvC,iBAAiB,EAAE,SAAS,CAAC,YAAY,EAAE;YAC3C,MAAM,EAAE,EAAE;YACV,OAAO,EAAE,KAAK;YACd,eAAe,EAAE,IAAI;SACtB,CAAA;IACH,CAAC;IAED,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;QAChD,MAAM,EAAC,OAAO,EAAE,QAAQ,EAAC,GAAG,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,eAAe,EAAE,CAAC,CAAA;QAC9F,OAAO;YACL,YAAY,EAAE,KAAK;YACnB,OAAO;YACP,QAAQ;SACT,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,MAAM,YAAY,GAAG,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAA;IAC7E,MAAM,eAAe,GAAa,EAAE,CAAA;IAEpC,MAAM,QAAQ,GAA0C,EAAE,CAAA;IAC1D,KAAI,MAAM,YAAY,IAAI,aAAa,EAAE,CAAC;QACxC,IAAG,CAAC,aAAa,CAAC,UAAU,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YACtD,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,CAAA;QACjD,CAAC;aAAM,IAAG,aAAa,CAAC,UAAU,IAAI,YAAY,CAAC,OAAO,EAAE,CAAC;YAC3D,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,CAAA;QACjD,CAAC;QACD,KAAI,MAAM,OAAO,IAAI,YAAY,CAAC,QAAQ,EAAE,CAAC;YAC3C,IAAI,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;YACxC,IAAG,CAAC,UAAU,EAAE,CAAC;gBACf,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG;oBACxB,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,OAAO,EAAE,YAAY;iBACtB,CAAA;gBACD,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;YACtC,CAAC;YACD,IAAG,OAAO,CAAC,OAAO,EAAE,CAAC;gBACnB,UAAU,CAAC,cAAc,GAAG,UAAU,CAAC,cAAc,IAAI,EAAE,CAAA;gBAC3D,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,CAAA;YAC3D,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,SAAS,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE;QACvC,iBAAiB,EAAE,SAAS,CAAC,YAAY,EAAE;QAC3C,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC/B,OAAO,EAAE,YAAY;QACrB,eAAe;KAChB,CAAA;AACH,CAAC"}

package/dist/cjs/condition/conditionUtil.d.ts

@@ -0,0 +1,10 @@
+import { AwsRequest } from "../request/request.js";
+/**
+ * Get the resolved value of a condition string.
+ *
+ * @param value the string to resolve
+ * @param request the AWS request with context keys
+ * @returns if the resolved value is different from the input value, return the resolved value, otherwise return undefined
+ */
+export declare function resolvedValue(value: string, request: AwsRequest): string | undefined;
+//# sourceMappingURL=conditionUtil.d.ts.map

package/dist/cjs/condition/conditionUtil.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"conditionUtil.d.ts","sourceRoot":"","sources":["../../../src/condition/conditionUtil.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAGnD;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,GAAG,MAAM,GAAG,SAAS,CAIpF"}

package/dist/cjs/condition/conditionUtil.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolvedValue = resolvedValue;
+const util_js_1 = require("../util.js");
+/**
+ * Get the resolved value of a condition string.
+ *
+ * @param value the string to resolve
+ * @param request the AWS request with context keys
+ * @returns if the resolved value is different from the input value, return the resolved value, otherwise return undefined
+ */
+function resolvedValue(value, request) {
+    const resolvedValue = (0, util_js_1.convertIamString)(value, request, { replaceWildcards: false, convertToRegex: false });
+    return resolvedValue !== value ? resolvedValue : undefined;
+}
+//# sourceMappingURL=conditionUtil.js.map

package/dist/cjs/condition/conditionUtil.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conditionUtil.js","sourceRoot":"","sources":["../../../src/condition/conditionUtil.ts"],"names":[],"mappings":";;AAUA,sCAIC;AAbD,wCAA8C;AAE9C;;;;;;GAMG;AACH,SAAgB,aAAa,CAAC,KAAa,EAAE,OAAmB;IAC9D,MAAM,aAAa,GAAG,IAAA,0BAAgB,EAAC,KAAK,EAAE,OAAO,EAAE,EAAC,gBAAgB,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAC,CAAC,CAAA;IAExG,OAAO,aAAa,KAAK,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAA;AAC5D,CAAC"}

package/dist/cjs/condition/date/DateEquals.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"DateEquals.d.ts","sourceRoot":"","sources":["../../../../src/condition/date/DateEquals.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,eAAO,MAAM,UAAU,EAAE,qBAYxB,CAAA"}
+{"version":3,"file":"DateEquals.d.ts","sourceRoot":"","sources":["../../../../src/condition/date/DateEquals.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,eAAO,MAAM,UAAU,EAAE,qBAkBxB,CAAA"}

package/dist/cjs/condition/date/DateEquals.js

@@ -5,13 +5,18 @@ const date_js_1 = require("./date.js");
 exports.DateEquals = {
     name: 'DateEquals',
     matches: (request, keyValue, policyValues) => {
-        return policyValues.some(policyValue => {
+        const explains = policyValues.map(policyValue => {
             return (0, date_js_1.checkIfDate)(policyValue, keyValue, (policyEpoch, requestEpoch) => {
                 return policyEpoch == requestEpoch;
             });
         });
+        return {
+            matches: explains.some(explain => explain.matches),
+            explains
+        };
     },
     allowsVariables: false,
-    allowsWildcards: false
+    allowsWildcards: false,
+    isNegative: false
 };
 //# sourceMappingURL=DateEquals.js.map

package/dist/cjs/condition/date/DateEquals.js.map

@@ -1 +1 @@
-{"version":3,"file":"DateEquals.js","sourceRoot":"","sources":["../../../../src/condition/date/DateEquals.ts"],"names":[],"mappings":";;;AAEA,uCAAwC;AAE3B,QAAA,UAAU,GAA0B;IAC/C,IAAI,EAAE,YAAY;IAElB,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE;QAC3C,OAAO,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE;YACrC,OAAO,IAAA,qBAAW,EAAC,WAAW,EAAE,QAAQ,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,EAAE;gBACtE,OAAO,WAAW,IAAI,YAAY,CAAA;YACpC,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;IACJ,CAAC;IACD,eAAe,EAAE,KAAK;IACtB,eAAe,EAAE,KAAK;CACvB,CAAA"}
+{"version":3,"file":"DateEquals.js","sourceRoot":"","sources":["../../../../src/condition/date/DateEquals.ts"],"names":[],"mappings":";;;AAEA,uCAAwC;AAE3B,QAAA,UAAU,GAA0B;IAC/C,IAAI,EAAE,YAAY;IAElB,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE;QAC3C,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE;YAC9C,OAAO,IAAA,qBAAW,EAAC,WAAW,EAAE,QAAQ,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,EAAE;gBACtE,OAAO,WAAW,IAAI,YAAY,CAAA;YACpC,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QAEF,OAAO;YACL,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;YAClD,QAAQ;SACT,CAAA;IACH,CAAC;IACD,eAAe,EAAE,KAAK;IACtB,eAAe,EAAE,KAAK;IACtB,UAAU,EAAE,KAAK;CAClB,CAAA"}

package/dist/cjs/condition/date/DateGreaterThan.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"DateGreaterThan.d.ts","sourceRoot":"","sources":["../../../../src/condition/date/DateGreaterThan.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,eAAO,MAAM,eAAe,EAAE,qBAY7B,CAAA"}
+{"version":3,"file":"DateGreaterThan.d.ts","sourceRoot":"","sources":["../../../../src/condition/date/DateGreaterThan.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,eAAO,MAAM,eAAe,EAAE,qBAkB7B,CAAA"}

package/dist/cjs/condition/date/DateGreaterThan.js

@@ -5,13 +5,18 @@ const date_js_1 = require("./date.js");
 exports.DateGreaterThan = {
     name: 'DateGreaterThan',
     matches: (request, keyValue, policyValues) => {
-        return policyValues.some(policyValue => {
+        const explains = policyValues.map(policyValue => {
             return (0, date_js_1.checkIfDate)(policyValue, keyValue, (policyEpoch, requestEpoch) => {
                 return policyEpoch < requestEpoch;
             });
         });
+        return {
+            matches: explains.some(explain => explain.matches),
+            explains
+        };
     },
     allowsVariables: false,
-    allowsWildcards: false
+    allowsWildcards: false,
+    isNegative: false
 };
 //# sourceMappingURL=DateGreaterThan.js.map

package/dist/cjs/condition/date/DateGreaterThan.js.map

@@ -1 +1 @@
-{"version":3,"file":"DateGreaterThan.js","sourceRoot":"","sources":["../../../../src/condition/date/DateGreaterThan.ts"],"names":[],"mappings":";;;AAEA,uCAAwC;AAE3B,QAAA,eAAe,GAA0B;IACpD,IAAI,EAAE,iBAAiB;IAEvB,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE;QAC3C,OAAO,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE;YACrC,OAAO,IAAA,qBAAW,EAAC,WAAW,EAAE,QAAQ,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,EAAE;gBACtE,OAAO,WAAW,GAAG,YAAY,CAAA;YACnC,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;IACJ,CAAC;IACD,eAAe,EAAE,KAAK;IACtB,eAAe,EAAE,KAAK;CACvB,CAAA"}
+{"version":3,"file":"DateGreaterThan.js","sourceRoot":"","sources":["../../../../src/condition/date/DateGreaterThan.ts"],"names":[],"mappings":";;;AAEA,uCAAwC;AAE3B,QAAA,eAAe,GAA0B;IACpD,IAAI,EAAE,iBAAiB;IAEvB,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE;QAC3C,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE;YAC9C,OAAO,IAAA,qBAAW,EAAC,WAAW,EAAE,QAAQ,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,EAAE;gBACtE,OAAO,WAAW,GAAG,YAAY,CAAA;YACnC,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QAEF,OAAO;YACL,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;YAClD,QAAQ;SACT,CAAA;IACH,CAAC;IACD,eAAe,EAAE,KAAK;IACtB,eAAe,EAAE,KAAK;IACtB,UAAU,EAAE,KAAK;CAClB,CAAA"}

package/dist/cjs/condition/date/DateGreaterThanEquals.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"DateGreaterThanEquals.d.ts","sourceRoot":"","sources":["../../../../src/condition/date/DateGreaterThanEquals.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,eAAO,MAAM,qBAAqB,EAAE,qBAYnC,CAAA"}
+{"version":3,"file":"DateGreaterThanEquals.d.ts","sourceRoot":"","sources":["../../../../src/condition/date/DateGreaterThanEquals.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,eAAO,MAAM,qBAAqB,EAAE,qBAkBnC,CAAA"}

package/dist/cjs/condition/date/DateGreaterThanEquals.js

@@ -5,13 +5,18 @@ const date_js_1 = require("./date.js");
 exports.DateGreaterThanEquals = {
     name: 'DateGreaterThanEquals',
     matches: (request, keyValue, policyValues) => {
-        return policyValues.some(policyValue => {
+        const explains = policyValues.map(policyValue => {
             return (0, date_js_1.checkIfDate)(policyValue, keyValue, (policyEpoch, requestEpoch) => {
                 return policyEpoch <= requestEpoch;
             });
         });
+        return {
+            matches: explains.some(explain => explain.matches),
+            explains
+        };
     },
     allowsVariables: false,
-    allowsWildcards: false
+    allowsWildcards: false,
+    isNegative: false
 };
 //# sourceMappingURL=DateGreaterThanEquals.js.map

package/dist/cjs/condition/date/DateGreaterThanEquals.js.map

@@ -1 +1 @@
-{"version":3,"file":"DateGreaterThanEquals.js","sourceRoot":"","sources":["../../../../src/condition/date/DateGreaterThanEquals.ts"],"names":[],"mappings":";;;AAEA,uCAAwC;AAE3B,QAAA,qBAAqB,GAA0B;IAC1D,IAAI,EAAE,uBAAuB;IAE7B,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE;QAC3C,OAAO,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE;YACrC,OAAO,IAAA,qBAAW,EAAC,WAAW,EAAE,QAAQ,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,EAAE;gBACtE,OAAO,WAAW,IAAI,YAAY,CAAA;YACpC,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;IACJ,CAAC;IACD,eAAe,EAAE,KAAK;IACtB,eAAe,EAAE,KAAK;CACvB,CAAA"}
+{"version":3,"file":"DateGreaterThanEquals.js","sourceRoot":"","sources":["../../../../src/condition/date/DateGreaterThanEquals.ts"],"names":[],"mappings":";;;AAEA,uCAAwC;AAE3B,QAAA,qBAAqB,GAA0B;IAC1D,IAAI,EAAE,uBAAuB;IAE7B,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE;QAC3C,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE;YAC9C,OAAO,IAAA,qBAAW,EAAC,WAAW,EAAE,QAAQ,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,EAAE;gBACtE,OAAO,WAAW,IAAI,YAAY,CAAA;YACpC,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QAEF,OAAO;YACL,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;YAClD,QAAQ;SACT,CAAA;IACH,CAAC;IACD,eAAe,EAAE,KAAK;IACtB,eAAe,EAAE,KAAK;IACtB,UAAU,EAAE,KAAK;CAClB,CAAA"}

package/dist/cjs/condition/date/DateLessThan.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"DateLessThan.d.ts","sourceRoot":"","sources":["../../../../src/condition/date/DateLessThan.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,eAAO,MAAM,YAAY,EAAE,qBAY1B,CAAA"}
+{"version":3,"file":"DateLessThan.d.ts","sourceRoot":"","sources":["../../../../src/condition/date/DateLessThan.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,eAAO,MAAM,YAAY,EAAE,qBAkB1B,CAAA"}