@cloud-copilot/iam-simulate 0.1.12 → 0.1.14

package/dist/cjs/condition/numeric/numeric.js

@@ -33,9 +33,24 @@ function parseNumber(value) {
 function checkIfNumeric(policyValue, testValue, check) {
     const policyNumber = parseNumber(policyValue);
     const testNumber = parseNumber(testValue);
-    if ((0, util_js_1.isNotDefined)(policyNumber) || (0, util_js_1.isNotDefined)(testNumber)) {
-        return false;
+    if ((0, util_js_1.isNotDefined)(policyNumber)) {
+        return {
+            value: policyValue,
+            matches: false,
+            errors: [`${policyValue} is not a number`]
+        };
     }
-    return check(policyNumber, testNumber);
+    if ((0, util_js_1.isNotDefined)(testNumber)) {
+        return {
+            value: policyValue,
+            matches: false,
+            errors: [`request value '${testValue}' is not a number`]
+        };
+    }
+    const matches = check(policyNumber, testNumber);
+    return {
+        value: policyValue,
+        matches,
+    };
 }
 //# sourceMappingURL=numeric.js.map

package/dist/cjs/condition/numeric/numeric.js.map

@@ -1 +1 @@
-{"version":3,"file":"numeric.js","sourceRoot":"","sources":["../../../../src/condition/numeric/numeric.ts"],"names":[],"mappings":";;AAQA,kCAYC;AAUD,wCAOC;AArCD,2CAA4C;AAE5C;;;;;GAKG;AACH,SAAgB,WAAW,CAAC,KAAa;IACvC,IAAI,MAAM,GAAuB,SAAS,CAAA;IAC1C,IAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAA;IAC5B,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IAC9B,CAAC;IACD,IAAG,IAAA,sBAAY,EAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACzC,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,cAAc,CAAC,WAAmB,EAAE,SAAiB,EAAE,KAA0D;IAC/H,MAAM,YAAY,GAAG,WAAW,CAAC,WAAW,CAAC,CAAA;IAC7C,MAAM,UAAU,GAAG,WAAW,CAAC,SAAS,CAAC,CAAA;IACzC,IAAG,IAAA,sBAAY,EAAC,YAAY,CAAC,IAAI,IAAA,sBAAY,EAAC,UAAU,CAAC,EAAE,CAAC;QAC1D,OAAO,KAAK,CAAA;IACd,CAAC;IACD,OAAO,KAAK,CAAC,YAAY,EAAE,UAAU,CAAC,CAAA;AACxC,CAAC"}
+{"version":3,"file":"numeric.js","sourceRoot":"","sources":["../../../../src/condition/numeric/numeric.ts"],"names":[],"mappings":";;AASA,kCAYC;AAUD,wCAuBC;AArDD,2CAA4C;AAE5C;;;;;GAKG;AACH,SAAgB,WAAW,CAAC,KAAa;IACvC,IAAI,MAAM,GAAuB,SAAS,CAAA;IAC1C,IAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAA;IAC5B,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IAC9B,CAAC;IACD,IAAG,IAAA,sBAAY,EAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACzC,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,cAAc,CAAC,WAAmB,EAAE,SAAiB,EAAE,KAA0D;IAC/H,MAAM,YAAY,GAAG,WAAW,CAAC,WAAW,CAAC,CAAA;IAC7C,MAAM,UAAU,GAAG,WAAW,CAAC,SAAS,CAAC,CAAA;IACzC,IAAG,IAAA,sBAAY,EAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,OAAO;YACL,KAAK,EAAE,WAAW;YAClB,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,CAAC,GAAG,WAAW,kBAAkB,CAAC;SAC3C,CAAA;IACH,CAAC;IACD,IAAG,IAAA,sBAAY,EAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,OAAO;YACL,KAAK,EAAE,WAAW;YAClB,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,CAAC,kBAAkB,SAAS,mBAAmB,CAAC;SACzD,CAAA;IACH,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,YAAY,EAAE,UAAU,CAAC,CAAA;IAC/C,OAAO;QACL,KAAK,EAAE,WAAW;QAClB,OAAO;KACR,CAAA;AACH,CAAC"}

package/dist/cjs/condition/string/StringEquals.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"StringEquals.d.ts","sourceRoot":"","sources":["../../../../src/condition/string/StringEquals.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAEpE,eAAO,MAAM,YAAY,EAAE,qBAQ1B,CAAA"}
+{"version":3,"file":"StringEquals.d.ts","sourceRoot":"","sources":["../../../../src/condition/string/StringEquals.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,eAAO,MAAM,YAAY,EAAE,qBA+B1B,CAAA"}

package/dist/cjs/condition/string/StringEquals.js

@@ -2,13 +2,34 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.StringEquals = void 0;
 const util_js_1 = require("../../util.js");
+const conditionUtil_js_1 = require("../conditionUtil.js");
 exports.StringEquals = {
     name: 'StringEquals',
     matches: (request, keyValue, policyValues) => {
-        const patterns = policyValues.map(value => (0, util_js_1.convertIamStringToRegex)(value, request, { replaceWildcards: false }));
-        return patterns.some(pattern => pattern.test(keyValue));
+        const explains = policyValues.map((value) => {
+            const { pattern, errors } = (0, util_js_1.convertIamString)(value, request, { replaceWildcards: false });
+            if (errors && errors.length > 0) {
+                return {
+                    value,
+                    matches: false,
+                    errors
+                };
+            }
+            const matches = pattern.test(keyValue);
+            return {
+                value,
+                matches,
+                resolvedValue: (0, conditionUtil_js_1.resolvedValue)(value, request),
+            };
+        });
+        const overallMatch = explains.some(explain => explain.matches);
+        return {
+            matches: overallMatch,
+            explains
+        };
     },
     allowsVariables: true,
-    allowsWildcards: false
+    allowsWildcards: false,
+    isNegative: false
 };
 //# sourceMappingURL=StringEquals.js.map

package/dist/cjs/condition/string/StringEquals.js.map

@@ -1 +1 @@
-{"version":3,"file":"StringEquals.js","sourceRoot":"","sources":["../../../../src/condition/string/StringEquals.ts"],"names":[],"mappings":";;;AAAA,2CAAwD;AAG3C,QAAA,YAAY,GAA0B;IACjD,IAAI,EAAE,cAAc;IACpB,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE;QAC3C,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,IAAA,iCAAuB,EAAC,KAAK,EAAE,OAAO,EAAE,EAAC,gBAAgB,EAAE,KAAK,EAAC,CAAC,CAAC,CAAA;QAC9G,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAA;IACzD,CAAC;IACD,eAAe,EAAE,IAAI;IACrB,eAAe,EAAE,KAAK;CACvB,CAAA"}
+{"version":3,"file":"StringEquals.js","sourceRoot":"","sources":["../../../../src/condition/string/StringEquals.ts"],"names":[],"mappings":";;;AACA,2CAAiD;AAEjD,0DAAoD;AAEvC,QAAA,YAAY,GAA0B;IACjD,IAAI,EAAE,cAAc;IACpB,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE;QAC3C,MAAM,QAAQ,GAA4B,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACnE,MAAM,EAAC,OAAO,EAAE,MAAM,EAAC,GAAG,IAAA,0BAAgB,EAAC,KAAK,EAAE,OAAO,EAAE,EAAC,gBAAgB,EAAE,KAAK,EAAC,CAAC,CAAA;YACrF,IAAG,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC/B,OAAO;oBACL,KAAK;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM;iBACP,CAAA;YACH,CAAC;YAED,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YACtC,OAAO;gBACL,KAAK;gBACL,OAAO;gBACP,aAAa,EAAE,IAAA,gCAAa,EAAC,KAAK,EAAE,OAAO,CAAC;aAC7C,CAAA;QACH,CAAC,CAAC,CAAA;QAGF,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QAC9D,OAAO;YACL,OAAO,EAAE,YAAY;YACrB,QAAQ;SACT,CAAA;IACH,CAAC;IACD,eAAe,EAAE,IAAI;IACrB,eAAe,EAAE,KAAK;IACtB,UAAU,EAAE,KAAK;CAClB,CAAA"}

package/dist/cjs/condition/string/StringEqualsIgnoreCase.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"StringEqualsIgnoreCase.d.ts","sourceRoot":"","sources":["../../../../src/condition/string/StringEqualsIgnoreCase.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAEpE,eAAO,MAAM,sBAAsB,EAAE,qBAWpC,CAAA"}
+{"version":3,"file":"StringEqualsIgnoreCase.d.ts","sourceRoot":"","sources":["../../../../src/condition/string/StringEqualsIgnoreCase.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,eAAO,MAAM,sBAAsB,EAAE,qBA+BpC,CAAA"}

package/dist/cjs/condition/string/StringEqualsIgnoreCase.js

@@ -2,16 +2,34 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.StringEqualsIgnoreCase = void 0;
 const util_js_1 = require("../../util.js");
+const conditionUtil_js_1 = require("../conditionUtil.js");
 exports.StringEqualsIgnoreCase = {
     name: 'StringEqualsIgnoreCase',
     matches: (request, keyValue, policyValues) => {
-        const patterns = policyValues.map(value => {
-            const pattern = (0, util_js_1.convertIamStringToRegex)(value, request, { replaceWildcards: false });
-            return new RegExp(pattern, 'i');
+        const explains = policyValues.map((value) => {
+            const { pattern, errors } = (0, util_js_1.convertIamString)(value, request, { replaceWildcards: false });
+            if (errors && errors.length > 0) {
+                return {
+                    value,
+                    matches: false,
+                    errors
+                };
+            }
+            const matches = new RegExp(pattern, 'i').test(keyValue);
+            return {
+                value,
+                matches,
+                resolvedValue: (0, conditionUtil_js_1.resolvedValue)(value, request),
+            };
         });
-        return patterns.some(pattern => pattern.test(keyValue));
+        const overallMatch = explains.some(explain => explain.matches);
+        return {
+            matches: overallMatch,
+            explains
+        };
     },
     allowsVariables: true,
-    allowsWildcards: false
+    allowsWildcards: false,
+    isNegative: false
 };
 //# sourceMappingURL=StringEqualsIgnoreCase.js.map

package/dist/cjs/condition/string/StringEqualsIgnoreCase.js.map

@@ -1 +1 @@
-{"version":3,"file":"StringEqualsIgnoreCase.js","sourceRoot":"","sources":["../../../../src/condition/string/StringEqualsIgnoreCase.ts"],"names":[],"mappings":";;;AAAA,2CAAwD;AAG3C,QAAA,sBAAsB,GAA0B;IAC3D,IAAI,EAAE,wBAAwB;IAC9B,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE;QAC3C,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;YACxC,MAAM,OAAO,GAAG,IAAA,iCAAuB,EAAC,KAAK,EAAE,OAAO,EAAE,EAAC,gBAAgB,EAAE,KAAK,EAAC,CAAC,CAAA;YAClF,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;QACjC,CAAC,CAAC,CAAA;QACF,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAA;IACzD,CAAC;IACD,eAAe,EAAE,IAAI;IACrB,eAAe,EAAE,KAAK;CACvB,CAAA"}
+{"version":3,"file":"StringEqualsIgnoreCase.js","sourceRoot":"","sources":["../../../../src/condition/string/StringEqualsIgnoreCase.ts"],"names":[],"mappings":";;;AACA,2CAAiD;AAEjD,0DAAoD;AAEvC,QAAA,sBAAsB,GAA0B;IAC3D,IAAI,EAAE,wBAAwB;IAC9B,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE;QAC3C,MAAM,QAAQ,GAA4B,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACnE,MAAM,EAAC,OAAO,EAAE,MAAM,EAAC,GAAG,IAAA,0BAAgB,EAAC,KAAK,EAAE,OAAO,EAAE,EAAC,gBAAgB,EAAE,KAAK,EAAC,CAAC,CAAA;YACrF,IAAG,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC/B,OAAO;oBACL,KAAK;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM;iBACP,CAAA;YACH,CAAC;YAED,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YACvD,OAAO;gBACL,KAAK;gBACL,OAAO;gBACP,aAAa,EAAE,IAAA,gCAAa,EAAC,KAAK,EAAE,OAAO,CAAC;aAC7C,CAAA;QACH,CAAC,CAAC,CAAA;QAGF,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QAC9D,OAAO;YACL,OAAO,EAAE,YAAY;YACrB,QAAQ;SACT,CAAA;IACH,CAAC;IACD,eAAe,EAAE,IAAI;IACrB,eAAe,EAAE,KAAK;IACtB,UAAU,EAAE,KAAK;CAClB,CAAA"}

package/dist/cjs/condition/string/StringLike.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"StringLike.d.ts","sourceRoot":"","sources":["../../../../src/condition/string/StringLike.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAEpE,eAAO,MAAM,UAAU,EAAE,qBAQxB,CAAA"}
+{"version":3,"file":"StringLike.d.ts","sourceRoot":"","sources":["../../../../src/condition/string/StringLike.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,eAAO,MAAM,UAAU,EAAE,qBAgCxB,CAAA"}

package/dist/cjs/condition/string/StringLike.js

@@ -2,13 +2,34 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.StringLike = void 0;
 const util_js_1 = require("../../util.js");
+const conditionUtil_js_1 = require("../conditionUtil.js");
 exports.StringLike = {
     name: 'StringLike',
     matches: (request, keyValue, policyValues) => {
-        const patterns = policyValues.map(value => (0, util_js_1.convertIamStringToRegex)(value, request, { replaceWildcards: true }));
-        return patterns.some(pattern => pattern.test(keyValue));
+        const explains = policyValues.map((value) => {
+            const { pattern, errors } = (0, util_js_1.convertIamString)(value, request, { replaceWildcards: true });
+            if (errors && errors.length > 0) {
+                return {
+                    value,
+                    matches: false,
+                    errors
+                };
+            }
+            const matches = pattern.test(keyValue);
+            return {
+                value,
+                matches,
+                resolvedValue: (0, conditionUtil_js_1.resolvedValue)(value, request),
+            };
+        });
+        const overallMatch = explains.some(explain => explain.matches);
+        return {
+            matches: overallMatch,
+            explains
+        };
     },
     allowsVariables: true,
-    allowsWildcards: true
+    allowsWildcards: true,
+    isNegative: false
 };
 //# sourceMappingURL=StringLike.js.map

package/dist/cjs/condition/string/StringLike.js.map

@@ -1 +1 @@
-{"version":3,"file":"StringLike.js","sourceRoot":"","sources":["../../../../src/condition/string/StringLike.ts"],"names":[],"mappings":";;;AAAA,2CAAwD;AAG3C,QAAA,UAAU,GAA0B;IAC/C,IAAI,EAAE,YAAY;IAClB,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE;QAC3C,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,IAAA,iCAAuB,EAAC,KAAK,EAAE,OAAO,EAAE,EAAC,gBAAgB,EAAE,IAAI,EAAC,CAAC,CAAC,CAAA;QAC7G,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAA;IACzD,CAAC;IACD,eAAe,EAAE,IAAI;IACrB,eAAe,EAAE,IAAI;CACtB,CAAA"}
+{"version":3,"file":"StringLike.js","sourceRoot":"","sources":["../../../../src/condition/string/StringLike.ts"],"names":[],"mappings":";;;AACA,2CAAiD;AAEjD,0DAAoD;AAEvC,QAAA,UAAU,GAA0B;IAC/C,IAAI,EAAE,YAAY;IAClB,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE;QAC3C,MAAM,QAAQ,GAA4B,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACnE,MAAM,EAAC,OAAO,EAAE,MAAM,EAAC,GAAG,IAAA,0BAAgB,EAAC,KAAK,EAAE,OAAO,EAAE,EAAC,gBAAgB,EAAE,IAAI,EAAC,CAAC,CAAA;YACpF,IAAG,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC/B,OAAO;oBACL,KAAK;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM;iBACP,CAAA;YACH,CAAC;YAED,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YACtC,OAAO;gBACL,KAAK;gBACL,OAAO;gBACP,aAAa,EAAE,IAAA,gCAAa,EAAC,KAAK,EAAE,OAAO,CAAC;aAC7C,CAAA;QACH,CAAC,CAAC,CAAA;QAGF,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QAC9D,OAAO;YACL,OAAO,EAAE,YAAY;YACrB,QAAQ;SACT,CAAA;IAEH,CAAC;IACD,eAAe,EAAE,IAAI;IACrB,eAAe,EAAE,IAAI;IACrB,UAAU,EAAE,KAAK;CAClB,CAAA"}

package/dist/cjs/condition/string/StringNotEquals.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"StringNotEquals.d.ts","sourceRoot":"","sources":["../../../../src/condition/string/StringNotEquals.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAEpE,eAAO,MAAM,eAAe,EAAE,qBAQ7B,CAAA"}
+{"version":3,"file":"StringNotEquals.d.ts","sourceRoot":"","sources":["../../../../src/condition/string/StringNotEquals.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,eAAO,MAAM,eAAe,EAAE,qBA8B7B,CAAA"}

package/dist/cjs/condition/string/StringNotEquals.js

@@ -2,13 +2,34 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.StringNotEquals = void 0;
 const util_js_1 = require("../../util.js");
+const conditionUtil_js_1 = require("../conditionUtil.js");
 exports.StringNotEquals = {
     name: 'StringNotEquals',
     matches: (request, keyValue, policyValues) => {
-        const patterns = policyValues.map(value => (0, util_js_1.convertIamStringToRegex)(value, request, { replaceWildcards: false }));
-        return !patterns.some(pattern => pattern.test(keyValue));
+        const explains = policyValues.map((value) => {
+            const { pattern, errors } = (0, util_js_1.convertIamString)(value, request, { replaceWildcards: false });
+            if (errors && errors.length > 0) {
+                return {
+                    value,
+                    matches: false,
+                    errors
+                };
+            }
+            const matches = !pattern.test(keyValue);
+            return {
+                value,
+                matches,
+                resolvedValue: (0, conditionUtil_js_1.resolvedValue)(value, request),
+            };
+        });
+        const overallMatch = !explains.some(explain => !explain.matches);
+        return {
+            matches: overallMatch,
+            explains
+        };
     },
     allowsVariables: true,
-    allowsWildcards: false
+    allowsWildcards: false,
+    isNegative: true
 };
 //# sourceMappingURL=StringNotEquals.js.map

package/dist/cjs/condition/string/StringNotEquals.js.map

@@ -1 +1 @@
-{"version":3,"file":"StringNotEquals.js","sourceRoot":"","sources":["../../../../src/condition/string/StringNotEquals.ts"],"names":[],"mappings":";;;AAAA,2CAAwD;AAG3C,QAAA,eAAe,GAA0B;IACpD,IAAI,EAAE,iBAAiB;IACvB,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE;QAC3C,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,IAAA,iCAAuB,EAAC,KAAK,EAAE,OAAO,EAAE,EAAC,gBAAgB,EAAE,KAAK,EAAC,CAAC,CAAC,CAAA;QAC9G,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAA;IAC1D,CAAC;IACD,eAAe,EAAE,IAAI;IACrB,eAAe,EAAE,KAAK;CACvB,CAAA"}
+{"version":3,"file":"StringNotEquals.js","sourceRoot":"","sources":["../../../../src/condition/string/StringNotEquals.ts"],"names":[],"mappings":";;;AACA,2CAAiD;AAEjD,0DAAoD;AAEvC,QAAA,eAAe,GAA0B;IACpD,IAAI,EAAE,iBAAiB;IACvB,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE;QAC3C,MAAM,QAAQ,GAA4B,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACnE,MAAM,EAAC,OAAO,EAAE,MAAM,EAAC,GAAG,IAAA,0BAAgB,EAAC,KAAK,EAAE,OAAO,EAAE,EAAC,gBAAgB,EAAE,KAAK,EAAC,CAAC,CAAA;YACrF,IAAG,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC/B,OAAO;oBACL,KAAK;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM;iBACP,CAAA;YACH,CAAC;YAED,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YACvC,OAAO;gBACL,KAAK;gBACL,OAAO;gBACP,aAAa,EAAE,IAAA,gCAAa,EAAC,KAAK,EAAE,OAAO,CAAC;aAC7C,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,MAAM,YAAY,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QAChE,OAAO;YACL,OAAO,EAAE,YAAY;YACrB,QAAQ;SACT,CAAA;IACH,CAAC;IACD,eAAe,EAAE,IAAI;IACrB,eAAe,EAAE,KAAK;IACtB,UAAU,EAAE,IAAI;CACjB,CAAA"}

package/dist/cjs/condition/string/StringNotEqualsIgnoreCase.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"StringNotEqualsIgnoreCase.d.ts","sourceRoot":"","sources":["../../../../src/condition/string/StringNotEqualsIgnoreCase.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,eAAO,MAAM,yBAAyB,EAAE,qBAOvC,CAAA"}
+{"version":3,"file":"StringNotEqualsIgnoreCase.d.ts","sourceRoot":"","sources":["../../../../src/condition/string/StringNotEqualsIgnoreCase.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,eAAO,MAAM,yBAAyB,EAAE,qBA8BvC,CAAA"}

package/dist/cjs/condition/string/StringNotEqualsIgnoreCase.js

@@ -1,13 +1,35 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.StringNotEqualsIgnoreCase = void 0;
-const StringEqualsIgnoreCase_js_1 = require("./StringEqualsIgnoreCase.js");
+const util_js_1 = require("../../util.js");
+const conditionUtil_js_1 = require("../conditionUtil.js");
 exports.StringNotEqualsIgnoreCase = {
     name: 'StringNotEqualsIgnoreCase',
     matches: (request, keyValue, policyValues) => {
-        return !StringEqualsIgnoreCase_js_1.StringEqualsIgnoreCase.matches(request, keyValue, policyValues);
+        const explains = policyValues.map((value) => {
+            const { pattern, errors } = (0, util_js_1.convertIamString)(value, request, { replaceWildcards: false });
+            if (errors && errors.length > 0) {
+                return {
+                    value,
+                    matches: false,
+                    errors
+                };
+            }
+            const matches = !new RegExp(pattern, 'i').test(keyValue);
+            return {
+                value,
+                matches,
+                resolvedValue: (0, conditionUtil_js_1.resolvedValue)(value, request),
+            };
+        });
+        const overallMatch = !explains.some(explain => !explain.matches);
+        return {
+            matches: overallMatch,
+            explains
+        };
     },
     allowsVariables: true,
-    allowsWildcards: false
+    allowsWildcards: false,
+    isNegative: true
 };
 //# sourceMappingURL=StringNotEqualsIgnoreCase.js.map

package/dist/cjs/condition/string/StringNotEqualsIgnoreCase.js.map

@@ -1 +1 @@
-{"version":3,"file":"StringNotEqualsIgnoreCase.js","sourceRoot":"","sources":["../../../../src/condition/string/StringNotEqualsIgnoreCase.ts"],"names":[],"mappings":";;;AACA,2EAAqE;AAExD,QAAA,yBAAyB,GAA0B;IAC9D,IAAI,EAAE,2BAA2B;IACjC,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE;QAC3C,OAAO,CAAC,kDAAsB,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAA;IACzE,CAAC;IACD,eAAe,EAAE,IAAI;IACrB,eAAe,EAAE,KAAK;CACvB,CAAA"}
+{"version":3,"file":"StringNotEqualsIgnoreCase.js","sourceRoot":"","sources":["../../../../src/condition/string/StringNotEqualsIgnoreCase.ts"],"names":[],"mappings":";;;AACA,2CAAiD;AAEjD,0DAAoD;AAEvC,QAAA,yBAAyB,GAA0B;IAC9D,IAAI,EAAE,2BAA2B;IACjC,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE;QACzC,MAAM,QAAQ,GAA4B,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACnE,MAAM,EAAC,OAAO,EAAE,MAAM,EAAC,GAAG,IAAA,0BAAgB,EAAC,KAAK,EAAE,OAAO,EAAE,EAAC,gBAAgB,EAAE,KAAK,EAAC,CAAC,CAAA;YACrF,IAAG,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC/B,OAAO;oBACL,KAAK;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM;iBACP,CAAA;YACH,CAAC;YAED,MAAM,OAAO,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YACxD,OAAO;gBACL,KAAK;gBACL,OAAO;gBACP,aAAa,EAAE,IAAA,gCAAa,EAAC,KAAK,EAAE,OAAO,CAAC;aAC7C,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,MAAM,YAAY,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QAChE,OAAO;YACL,OAAO,EAAE,YAAY;YACrB,QAAQ;SACT,CAAA;IACH,CAAC;IACH,eAAe,EAAE,IAAI;IACrB,eAAe,EAAE,KAAK;IACtB,UAAU,EAAE,IAAI;CACjB,CAAA"}

package/dist/cjs/condition/string/StringNotLike.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"StringNotLike.d.ts","sourceRoot":"","sources":["../../../../src/condition/string/StringNotLike.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,eAAO,MAAM,aAAa,EAAE,qBAO3B,CAAA"}
+{"version":3,"file":"StringNotLike.d.ts","sourceRoot":"","sources":["../../../../src/condition/string/StringNotLike.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,eAAO,MAAM,aAAa,EAAE,qBAgC3B,CAAA"}

package/dist/cjs/condition/string/StringNotLike.js

@@ -1,13 +1,35 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.StringNotLike = void 0;
-const StringLike_js_1 = require("./StringLike.js");
+const util_js_1 = require("../../util.js");
+const conditionUtil_js_1 = require("../conditionUtil.js");
 exports.StringNotLike = {
     name: 'StringNotLike',
     matches: (request, keyValue, policyValues) => {
-        return !StringLike_js_1.StringLike.matches(request, keyValue, policyValues);
+        const explains = policyValues.map((value) => {
+            const { pattern, errors } = (0, util_js_1.convertIamString)(value, request, { replaceWildcards: true });
+            if (errors && errors.length > 0) {
+                return {
+                    value,
+                    matches: false,
+                    errors
+                };
+            }
+            const matches = !pattern.test(keyValue);
+            return {
+                value,
+                matches,
+                resolvedValue: (0, conditionUtil_js_1.resolvedValue)(value, request),
+            };
+        });
+        const overallMatch = !explains.some(explain => !explain.matches);
+        return {
+            matches: overallMatch,
+            explains
+        };
     },
     allowsVariables: true,
-    allowsWildcards: true
+    allowsWildcards: true,
+    isNegative: true
 };
 //# sourceMappingURL=StringNotLike.js.map

package/dist/cjs/condition/string/StringNotLike.js.map

@@ -1 +1 @@
-{"version":3,"file":"StringNotLike.js","sourceRoot":"","sources":["../../../../src/condition/string/StringNotLike.ts"],"names":[],"mappings":";;;AACA,mDAA6C;AAEhC,QAAA,aAAa,GAA0B;IAClD,IAAI,EAAE,eAAe;IACrB,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE;QAC3C,OAAO,CAAC,0BAAU,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAA;IAC7D,CAAC;IACD,eAAe,EAAE,IAAI;IACrB,eAAe,EAAE,IAAI;CACtB,CAAA"}
+{"version":3,"file":"StringNotLike.js","sourceRoot":"","sources":["../../../../src/condition/string/StringNotLike.ts"],"names":[],"mappings":";;;AACA,2CAAiD;AAEjD,0DAAoD;AAEvC,QAAA,aAAa,GAA0B;IAClD,IAAI,EAAE,eAAe;IACrB,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE;QACzC,MAAM,QAAQ,GAA4B,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACnE,MAAM,EAAC,OAAO,EAAE,MAAM,EAAC,GAAG,IAAA,0BAAgB,EAAC,KAAK,EAAE,OAAO,EAAE,EAAC,gBAAgB,EAAE,IAAI,EAAC,CAAC,CAAA;YACpF,IAAG,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC/B,OAAO;oBACL,KAAK;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM;iBACP,CAAA;YACH,CAAC;YAED,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YACvC,OAAO;gBACL,KAAK;gBACL,OAAO;gBACP,aAAa,EAAE,IAAA,gCAAa,EAAC,KAAK,EAAE,OAAO,CAAC;aAC7C,CAAA;QACH,CAAC,CAAC,CAAA;QAGF,MAAM,YAAY,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QAChE,OAAO;YACL,OAAO,EAAE,YAAY;YACrB,QAAQ;SACT,CAAA;IAEH,CAAC;IACH,eAAe,EAAE,IAAI;IACrB,eAAe,EAAE,IAAI;IACrB,UAAU,EAAE,IAAI;CACjB,CAAA"}

package/dist/cjs/core_engine/coreSimulatorEngine.d.ts

@@ -1,9 +1,7 @@
 import { Policy } from "@cloud-copilot/iam-policy";
-import { EvaluationResult } from "../evaluate.js";
+import { IdentityAnalysis, RequestAnalysis, ResourceAnalysis, ScpAnalysis } from "../evaluate.js";
 import { AwsRequest } from "../request/request.js";
-import { SCPAnalysis } from "../SCPAnalysis.js";
 import { ServiceAuthorizer } from "../services/ServiceAuthorizer.js";
-import { StatementAnalysis } from "../StatementAnalysis.js";
 /**
  * A set of service control policies for each level of an organization tree
  */
@@ -38,6 +36,10 @@ export interface AuthorizationRequest {
      * The resource policy that applies to the resource being accessed.
      */
     resourcePolicy: Policy | undefined;
+    /**
+     * The permission boundaries that apply to the principal making the request.
+     */
+    permissionBoundaries: Policy[] | undefined;
 }
 /**
  * Authorizes a request.
@@ -47,7 +49,7 @@ export interface AuthorizationRequest {
  * @param request the request to authorize
  * @returns the result of the authorization
  */
-export declare function authorize(request: AuthorizationRequest): EvaluationResult;
+export declare function authorize(request: AuthorizationRequest): RequestAnalysis;
 /**
  * Get the appropriate service authorizer for the request. Some services have specific authorization logic in
  * them. If there is no service specific authorizer, a default one will be used.
@@ -63,7 +65,7 @@ export declare function getServiceAuthorizer(request: AuthorizationRequest): Ser
  * @param request the request to analyze against
  * @returns an array of statement analysis results
  */
-export declare function analyzeIdentityPolicies(identityPolicies: Policy[], request: AwsRequest): StatementAnalysis[];
+export declare function analyzeIdentityPolicies(identityPolicies: Policy[], request: AwsRequest): IdentityAnalysis;
 /**
  * Analyzes a set of service control policies and the statements within them.
  *
@@ -71,7 +73,7 @@ export declare function analyzeIdentityPolicies(identityPolicies: Policy[], requ
  * @param request the request to analyze against
  * @returns an array of SCP analysis results
  */
-export declare function analyzeServiceControlPolicies(serviceControlPolicies: ServiceControlPolicies[], request: AwsRequest): SCPAnalysis[];
+export declare function analyzeServiceControlPolicies(serviceControlPolicies: ServiceControlPolicies[], request: AwsRequest): ScpAnalysis;
 /**
  * Analyze a resource policy and return the results
  *
@@ -79,5 +81,6 @@ export declare function analyzeServiceControlPolicies(serviceControlPolicies: Se
  * @param request the request to analyze against
  * @returns an array of statement analysis results
  */
-export declare function analyzeResourcePolicy(resourcePolicy: Policy, request: AwsRequest): StatementAnalysis[];
+export declare function analyzeResourcePolicy(resourcePolicy: Policy | undefined, request: AwsRequest): ResourceAnalysis;
+export declare function analyzePermissionBoundaryPolicies(permissionBoundaries: Policy[] | undefined, request: AwsRequest): IdentityAnalysis | undefined;
 //# sourceMappingURL=coreSimulatorEngine.d.ts.map

package/dist/cjs/core_engine/coreSimulatorEngine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"coreSimulatorEngine.d.ts","sourceRoot":"","sources":["../../../src/core_engine/coreSimulatorEngine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAC;AAGnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAElD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEnD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC;;OAEG;IACH,aAAa,EAAE,MAAM,CAAC;IAEtB;;OAEG;IACH,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,OAAO,EAAE,UAAU,CAAC;IAEpB;;OAEG;IACH,gBAAgB,EAAE,MAAM,EAAE,CAAA;IAE1B;;;OAGG;IACH,sBAAsB,EAAE,sBAAsB,EAAE,CAAA;IAEhD;;OAEG;IACH,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC;AAID;;;;;;;GAOG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,oBAAoB,GAAG,gBAAgB,CAYzE;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,oBAAoB,GAAG,iBAAiB,CAMrF;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,gBAAgB,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,UAAU,GAAG,iBAAiB,EAAE,CAe5G;AAED;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAAC,sBAAsB,EAAE,sBAAsB,EAAE,EAAE,OAAO,EAAE,UAAU,GAAG,WAAW,EAAE,CAsBlI;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,GAAG,iBAAiB,EAAE,CAatG"}
+{"version":3,"file":"coreSimulatorEngine.d.ts","sourceRoot":"","sources":["../../../src/core_engine/coreSimulatorEngine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAa,MAAM,2BAA2B,CAAC;AAG9D,OAAO,EAAoB,gBAAgB,EAAiB,eAAe,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAGnI,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAGnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAGrE;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC;;OAEG;IACH,aAAa,EAAE,MAAM,CAAC;IAEtB;;OAEG;IACH,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,OAAO,EAAE,UAAU,CAAC;IAEpB;;OAEG;IACH,gBAAgB,EAAE,MAAM,EAAE,CAAA;IAE1B;;;OAGG;IACH,sBAAsB,EAAE,sBAAsB,EAAE,CAAA;IAEhD;;OAEG;IACH,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;IAEnC;;OAEG;IACH,oBAAoB,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;CAC5C;AAID;;;;;;;GAOG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,oBAAoB,GAAG,eAAe,CAcxE;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,oBAAoB,GAAG,iBAAiB,CAMrF;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,gBAAgB,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,UAAU,GAAG,gBAAgB,CA0CzG;AAED;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAAC,sBAAsB,EAAE,sBAAsB,EAAE,EAAE,OAAO,EAAE,UAAU,GAAG,WAAW,CAyDhI;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,cAAc,EAAE,MAAM,GAAG,SAAS,EAAE,OAAO,EAAE,UAAU,GAAG,gBAAgB,CAkD/G;AAGD,wBAAgB,iCAAiC,CAAC,oBAAoB,EAAE,MAAM,EAAE,GAAG,SAAS,EAAE,OAAO,EAAE,UAAU,GAAG,gBAAgB,GAAG,SAAS,CAM/I"}