@kensio/yulin 0.34.0 → 0.34.2

package/dist/dist-hidden/service/iam/authorize/context/identity-policy-source/sim-iam-auth-z-id-pol-coordinator.d.ts

@@ -1,38 +0,0 @@
-import type { SimArn } from "../../../../aws/arn.js";
-import type { SimIamPolicy } from "../../../policy/sim-iam-policy.js";
-import type { SimIamRole, SimIamRoleName } from "../../../role/sim-iam-role.js";
-import type { SimIamUser, SimIamUsername } from "../../../user/sim-iam-user.js";
-import type { SimIamAuthZPolicySource } from "../sim-iam-auth-z-context.js";
-interface SimIamAuthZIdentityPolicySourceBuilderProps {
-    policies?: ReadonlyMap<SimArn, SimIamPolicy>;
-    roles?: ReadonlyMap<SimIamRoleName, SimIamRole>;
-    users?: ReadonlyMap<SimIamUsername, SimIamUser>;
-}
-/**
- * Coordinates identity-policy discovery for an authorization request.
- *
- * Principal lookup and policy conversion use separate collaborators because
- * they operate on different representations:
- *
- * - the owner resolver maps a principal ARN to an account-scoped role or user;
- * - the owner source builder converts that entity's stored policies into
- *   authorization sources.
- *
- * This class defines the workflow between those operations and handles callers
- * that have no matching IAM policy owner.
- */
-export declare class SimIamAuthZIdentityPolicyCoordinator {
-    private readonly ownerResolver;
-    private readonly ownerSourceBuilder;
-    constructor(props: SimIamAuthZIdentityPolicySourceBuilderProps);
-    /**
-     * Return identity-policy sources belonging to the principal ARN.
-     *
-     * Anonymous callers, service principals, and unknown IAM ARNs have no
-     * matching role or user. Those callers contribute no identity policies,
-     * though resource policies may still affect authorization.
-     */
-    build(principalArn: string | undefined): readonly SimIamAuthZPolicySource[];
-}
-export {};
-//# sourceMappingURL=sim-iam-auth-z-id-pol-coordinator.d.ts.map

package/dist/dist-hidden/service/iam/authorize/context/identity-policy-source/sim-iam-auth-z-id-pol-coordinator.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sim-iam-auth-z-id-pol-coordinator.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/authorize/context/identity-policy-source/sim-iam-auth-z-id-pol-coordinator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AACtE,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAChF,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAChF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAI5E,UAAU,2CAA2C;IACnD,QAAQ,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAC7C,KAAK,CAAC,EAAE,WAAW,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IAChD,KAAK,CAAC,EAAE,WAAW,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;CACjD;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,oCAAoC;IAC/C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAoC;IAClE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAyC;IAE5E,YAAY,KAAK,EAAE,2CAA2C,EAc7D;IAED;;;;;;OAMG;IACH,KAAK,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,uBAAuB,EAAE,CAI1E;CACF"}

package/dist/dist-hidden/service/iam/authorize/context/identity-policy-source/sim-iam-auth-z-id-pol-coordinator.js

@@ -1,41 +0,0 @@
-import { SimIamIdentityPolicyOwnerResolver } from "./sim-iam-id-pol-owner-resolver.js";
-import { SimIamIdentityPolicyOwnerSourceBuilder } from "./sim-iam-id-pol-owner-src-builder.js";
-/**
- * Coordinates identity-policy discovery for an authorization request.
- *
- * Principal lookup and policy conversion use separate collaborators because
- * they operate on different representations:
- *
- * - the owner resolver maps a principal ARN to an account-scoped role or user;
- * - the owner source builder converts that entity's stored policies into
- *   authorization sources.
- *
- * This class defines the workflow between those operations and handles callers
- * that have no matching IAM policy owner.
- */
-export class SimIamAuthZIdentityPolicyCoordinator {
-    ownerResolver;
-    ownerSourceBuilder;
-    constructor(props) {
-        const { policies = new Map(), roles = new Map(), users = new Map(), } = props;
-        this.ownerResolver = new SimIamIdentityPolicyOwnerResolver({
-            roles,
-            users,
-        });
-        this.ownerSourceBuilder = new SimIamIdentityPolicyOwnerSourceBuilder({
-            policies,
-        });
-    }
-    /**
-     * Return identity-policy sources belonging to the principal ARN.
-     *
-     * Anonymous callers, service principals, and unknown IAM ARNs have no
-     * matching role or user. Those callers contribute no identity policies,
-     * though resource policies may still affect authorization.
-     */
-    build(principalArn) {
-        const owner = this.ownerResolver.resolve(principalArn);
-        return owner === undefined ? [] : this.ownerSourceBuilder.build(owner);
-    }
-}
-//# sourceMappingURL=sim-iam-auth-z-id-pol-coordinator.js.map

package/dist/dist-hidden/service/iam/authorize/context/identity-policy-source/sim-iam-auth-z-id-pol-coordinator.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sim-iam-auth-z-id-pol-coordinator.js","sourceRoot":"","sources":["../../../../../../src/service/iam/authorize/context/identity-policy-source/sim-iam-auth-z-id-pol-coordinator.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,iCAAiC,EAAE,MAAM,oCAAoC,CAAC;AACvF,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAQ/F;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,oCAAoC;IAC9B,aAAa,CAAoC;IACjD,kBAAkB,CAAyC;IAE5E,YAAY,KAAkD;QAC5D,MAAM,EACJ,QAAQ,GAAG,IAAI,GAAG,EAAE,EACpB,KAAK,GAAG,IAAI,GAAG,EAAE,EACjB,KAAK,GAAG,IAAI,GAAG,EAAE,GAClB,GAAG,KAAK,CAAC;QAEV,IAAI,CAAC,aAAa,GAAG,IAAI,iCAAiC,CAAC;YACzD,KAAK;YACL,KAAK;SACN,CAAC,CAAC;QACH,IAAI,CAAC,kBAAkB,GAAG,IAAI,sCAAsC,CAAC;YACnE,QAAQ;SACT,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,YAAgC;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAEvD,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACzE,CAAC;CACF"}

package/dist/dist-hidden/service/iam/authorize/context/identity-policy-source/sim-iam-auth-z-id-pol-src-builder.d.ts

@@ -1,69 +0,0 @@
-import type { SimArn } from "../../../../aws/arn.js";
-import type { SimIamPolicy } from "../../../policy/sim-iam-policy.js";
-import type { SimIamRole, SimIamRoleName } from "../../../role/sim-iam-role.js";
-import type { SimIamAuthZPolicySource } from "../sim-iam-auth-z-context.js";
-interface SimIamAuthZIdentityPolicySourceBuilderProps {
-    policies: ReadonlyMap<SimArn, SimIamPolicy>;
-    roles: ReadonlyMap<SimIamRoleName, SimIamRole>;
-}
-/**
- * Builds identity policy sources for an IAM authorization context.
- *
- * IAM identity authorization can collect policy documents from more than one
- * storage location. Roles may carry inline policies directly on the role, and
- * they may reference managed policies by ARN. Keeping that lookup and document
- * conversion here prevents SimIamAuthZContextBuilder from mixing context
- * assembly with role-specific policy resolution.
- *
- * The builder currently supports IAM roles because the simulator only has role
- * identity-policy authorization wired through this path. If user or
- * assumed-role identity policies are added later, this class is the narrow
- * extension point for resolving those principal shapes.
- */
-export declare class SimIamAuthZIdentityPolicySourceBuilder {
-    private readonly policies;
-    private readonly roles;
-    constructor(props: SimIamAuthZIdentityPolicySourceBuilderProps);
-    /**
-     * Return the policy sources attached to the principal ARN.
-     *
-     * The incoming principal ARN is optional because some authorization checks
-     * are made without an IAM identity. In that case there are no identity
-     * policies to evaluate, but resource policies may still contribute to the
-     * final decision.
-     */
-    build(principalArn: string | undefined): readonly SimIamAuthZPolicySource[];
-    /**
-     * Resolve a principal ARN to the simulated IAM role that owns the identity
-     * policies.
-     *
-     * Roles are keyed by role name in the IAM store, while authorization input
-     * uses a principal ARN. The scan bridges those two representations without
-     * changing the storage map used by command handlers.
-     */
-    private principalRole;
-    /**
-     * Convert inline role policies into authorization policy sources.
-     *
-     * Inline policies are stored on the role as serialized JSON documents. The
-     * authorizer consumes parsed policy documents, so this step is the boundary
-     * where role storage format becomes authorization input format.
-     */
-    private inlinePolicySources;
-    /**
-     * Resolve attached managed policy ARNs and convert each available policy
-     * document into an authorization source.
-     *
-     * Missing policy ARNs are ignored here because policy attachment state can be
-     * represented independently of policy document storage in the simulator. A
-     * missing document contributes no statements to the authorization decision.
-     */
-    private attachedPolicySources;
-    /**
-     * Convert one managed policy into a policy source when it has a default
-     * policy document available for evaluation.
-     */
-    private managedPolicySource;
-}
-export {};
-//# sourceMappingURL=sim-iam-auth-z-id-pol-src-builder.d.ts.map

package/dist/dist-hidden/service/iam/authorize/context/identity-policy-source/sim-iam-auth-z-id-pol-src-builder.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sim-iam-auth-z-id-pol-src-builder.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/authorize/context/identity-policy-source/sim-iam-auth-z-id-pol-src-builder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AACtE,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAEhF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAE5E,UAAU,2CAA2C;IACnD,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAC5C,KAAK,EAAE,WAAW,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;CAChD;AAED;;;;;;;;;;;;;GAaG;AACH,qBAAa,sCAAsC;IACjD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAoC;IAC7D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA0C;IAEhE,YAAY,KAAK,EAAE,2CAA2C,EAG7D;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,uBAAuB,EAAE,CAW1E;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,aAAa;IAUrB;;;;;;OAMG;IACH,OAAO,CAAC,mBAAmB;IAY3B;;;;;;;OAOG;IACH,OAAO,CAAC,qBAAqB;IAS7B;;;OAGG;IACH,OAAO,CAAC,mBAAmB;CAgB5B"}

package/dist/dist-hidden/service/iam/authorize/context/identity-policy-source/sim-iam-auth-z-id-pol-src-builder.js

@@ -1,101 +0,0 @@
-import { jsonParse } from "../../../../../util/type-guard/json.js";
-/**
- * Builds identity policy sources for an IAM authorization context.
- *
- * IAM identity authorization can collect policy documents from more than one
- * storage location. Roles may carry inline policies directly on the role, and
- * they may reference managed policies by ARN. Keeping that lookup and document
- * conversion here prevents SimIamAuthZContextBuilder from mixing context
- * assembly with role-specific policy resolution.
- *
- * The builder currently supports IAM roles because the simulator only has role
- * identity-policy authorization wired through this path. If user or
- * assumed-role identity policies are added later, this class is the narrow
- * extension point for resolving those principal shapes.
- */
-export class SimIamAuthZIdentityPolicySourceBuilder {
-    policies;
-    roles;
-    constructor(props) {
-        this.policies = props.policies;
-        this.roles = props.roles;
-    }
-    /**
-     * Return the policy sources attached to the principal ARN.
-     *
-     * The incoming principal ARN is optional because some authorization checks
-     * are made without an IAM identity. In that case there are no identity
-     * policies to evaluate, but resource policies may still contribute to the
-     * final decision.
-     */
-    build(principalArn) {
-        const principalRole = this.principalRole(principalArn);
-        if (principalRole === undefined) {
-            return [];
-        }
-        return [
-            ...this.inlinePolicySources(principalRole),
-            ...this.attachedPolicySources(principalRole),
-        ];
-    }
-    /**
-     * Resolve a principal ARN to the simulated IAM role that owns the identity
-     * policies.
-     *
-     * Roles are keyed by role name in the IAM store, while authorization input
-     * uses a principal ARN. The scan bridges those two representations without
-     * changing the storage map used by command handlers.
-     */
-    principalRole(principalArn) {
-        if (principalArn === undefined) {
-            return undefined;
-        }
-        return [...this.roles.values()].find((role) => role.arn === principalArn);
-    }
-    /**
-     * Convert inline role policies into authorization policy sources.
-     *
-     * Inline policies are stored on the role as serialized JSON documents. The
-     * authorizer consumes parsed policy documents, so this step is the boundary
-     * where role storage format becomes authorization input format.
-     */
-    inlinePolicySources(role) {
-        return [...role.inlinePolicies.entries()].map(([policyName, policyDocument]) => ({
-            sourceType: "identity-inline",
-            policyName,
-            document: jsonParse(policyDocument),
-        }));
-    }
-    /**
-     * Resolve attached managed policy ARNs and convert each available policy
-     * document into an authorization source.
-     *
-     * Missing policy ARNs are ignored here because policy attachment state can be
-     * represented independently of policy document storage in the simulator. A
-     * missing document contributes no statements to the authorization decision.
-     */
-    attachedPolicySources(role) {
-        return [...role.attachedPolicyArns]
-            .map((policyArn) => this.policies.get(policyArn))
-            .filter((policy) => policy !== undefined)
-            .flatMap((policy) => this.managedPolicySource(policy));
-    }
-    /**
-     * Convert one managed policy into a policy source when it has a default
-     * policy document available for evaluation.
-     */
-    managedPolicySource(policy) {
-        if (policy.policyDocument === undefined) {
-            return [];
-        }
-        return [
-            {
-                sourceType: "identity-managed",
-                policyArn: policy.arn,
-                policyName: policy.policyName,
-                document: jsonParse(policy.policyDocument),
-            },
-        ];
-    }
-}
-//# sourceMappingURL=sim-iam-auth-z-id-pol-src-builder.js.map

package/dist/dist-hidden/service/iam/authorize/context/identity-policy-source/sim-iam-auth-z-id-pol-src-builder.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sim-iam-auth-z-id-pol-src-builder.js","sourceRoot":"","sources":["../../../../../../src/service/iam/authorize/context/identity-policy-source/sim-iam-auth-z-id-pol-src-builder.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,SAAS,EAAE,MAAM,wCAAwC,CAAC;AAQnE;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,sCAAsC;IAChC,QAAQ,CAAoC;IAC5C,KAAK,CAA0C;IAEhE,YAAY,KAAkD;QAC5D,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QAC/B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC3B,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,YAAgC;QACpC,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QAEvD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO;YACL,GAAG,IAAI,CAAC,mBAAmB,CAAC,aAAa,CAAC;YAC1C,GAAG,IAAI,CAAC,qBAAqB,CAAC,aAAa,CAAC;SAC7C,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACK,aAAa,CACnB,YAAgC;QAEhC,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,KAAK,YAAY,CAAC,CAAC;IAC5E,CAAC;IAED;;;;;;OAMG;IACK,mBAAmB,CACzB,IAAgB;QAEhB,OAAO,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAC3C,CAAC,CAAC,UAAU,EAAE,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC;YACjC,UAAU,EAAE,iBAAiB;YAC7B,UAAU;YACV,QAAQ,EAAE,SAAS,CAAC,cAAc,CAAC;SACpC,CAAC,CACH,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACK,qBAAqB,CAC3B,IAAgB;QAEhB,OAAO,CAAC,GAAG,IAAI,CAAC,kBAAkB,CAAC;aAChC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;aAChD,MAAM,CAAC,CAAC,MAAM,EAA0B,EAAE,CAAC,MAAM,KAAK,SAAS,CAAC;aAChE,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED;;;OAGG;IACK,mBAAmB,CACzB,MAAoB;QAEpB,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YACxC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO;YACL;gBACE,UAAU,EAAE,kBAAkB;gBAC9B,SAAS,EAAE,MAAM,CAAC,GAAG;gBACrB,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,QAAQ,EAAE,SAAS,CAAC,MAAM,CAAC,cAAc,CAAC;aAC3C;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/dist-hidden/service/iam/authorize/context/identity-policy-source/sim-iam-id-pol-owner-resolver.d.ts

@@ -1,54 +0,0 @@
-import type { SimIamRole, SimIamRoleName } from "../../../role/sim-iam-role.js";
-import type { SimIamUser, SimIamUsername } from "../../../user/sim-iam-user.js";
-/**
- * An IAM entity that can own identity-based policies.
- *
- * Roles and users expose the same policy storage properties, so callers can
- * process a resolved owner without branching on the principal type.
- */
-export type SimIamIdentityPolicyOwner = SimIamRole | SimIamUser;
-interface SimIamIdentityPolicyOwnerResolverProps {
-    readonly roles: ReadonlyMap<SimIamRoleName, SimIamRole>;
-    readonly users: ReadonlyMap<SimIamUsername, SimIamUser>;
-}
-/**
- * Resolves an authenticated principal ARN to the IAM entity whose identity
- * policies apply to that principal.
- *
- * Authorization requests contain a principal ARN, while IAM stores roles and
- * users in maps keyed by their names. This resolver owns the conversion between
- * those representations. Keeping that lookup separate allows policy-source
- * construction to work with a resolved owner instead of knowing how each
- * principal type is stored.
- *
- * Temporary assumed-role credentials supply the underlying role ARN as their
- * identity-policy principal before reaching this resolver. As a result, this
- * class only needs to match IAM role and user ARNs; it does not parse STS
- * assumed-role ARNs or inspect session state.
- */
-export declare class SimIamIdentityPolicyOwnerResolver {
-    private readonly roles;
-    private readonly users;
-    constructor(props: SimIamIdentityPolicyOwnerResolverProps);
-    /**
-     * Find the role or user whose ARN exactly matches the supplied principal ARN.
-     *
-     * An absent ARN represents a caller without an IAM identity, such as an
-     * anonymous or service principal. Such callers have no role or user identity
-     * policies, so resolution returns undefined.
-     *
-     * Exact ARN comparison also preserves account isolation: an entity with the
-     * same name in another account has a different ARN and cannot be selected.
-     */
-    resolve(principalArn: string | undefined): SimIamIdentityPolicyOwner | undefined;
-    /**
-     * Search account-scoped role state for the matching principal ARN.
-     */
-    private role;
-    /**
-     * Search account-scoped user state for the matching principal ARN.
-     */
-    private user;
-}
-export {};
-//# sourceMappingURL=sim-iam-id-pol-owner-resolver.d.ts.map

package/dist/dist-hidden/service/iam/authorize/context/identity-policy-source/sim-iam-id-pol-owner-resolver.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sim-iam-id-pol-owner-resolver.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/authorize/context/identity-policy-source/sim-iam-id-pol-owner-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAChF,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAEhF;;;;;GAKG;AACH,MAAM,MAAM,yBAAyB,GAAG,UAAU,GAAG,UAAU,CAAC;AAEhE,UAAU,sCAAsC;IAC9C,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IACxD,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;CACzD;AAED;;;;;;;;;;;;;;GAcG;AACH,qBAAa,iCAAiC;IAC5C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA0C;IAChE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA0C;IAEhE,YAAY,KAAK,EAAE,sCAAsC,EAGxD;IAED;;;;;;;;;OASG;IACH,OAAO,CACL,YAAY,EAAE,MAAM,GAAG,SAAS,GAC/B,yBAAyB,GAAG,SAAS,CAMvC;IAED;;OAEG;IACH,OAAO,CAAC,IAAI;IAIZ;;OAEG;IACH,OAAO,CAAC,IAAI;CAGb"}

package/dist/dist-hidden/service/iam/authorize/context/identity-policy-source/sim-iam-id-pol-owner-resolver.js

@@ -1,52 +0,0 @@
-/**
- * Resolves an authenticated principal ARN to the IAM entity whose identity
- * policies apply to that principal.
- *
- * Authorization requests contain a principal ARN, while IAM stores roles and
- * users in maps keyed by their names. This resolver owns the conversion between
- * those representations. Keeping that lookup separate allows policy-source
- * construction to work with a resolved owner instead of knowing how each
- * principal type is stored.
- *
- * Temporary assumed-role credentials supply the underlying role ARN as their
- * identity-policy principal before reaching this resolver. As a result, this
- * class only needs to match IAM role and user ARNs; it does not parse STS
- * assumed-role ARNs or inspect session state.
- */
-export class SimIamIdentityPolicyOwnerResolver {
-    roles;
-    users;
-    constructor(props) {
-        this.roles = props.roles;
-        this.users = props.users;
-    }
-    /**
-     * Find the role or user whose ARN exactly matches the supplied principal ARN.
-     *
-     * An absent ARN represents a caller without an IAM identity, such as an
-     * anonymous or service principal. Such callers have no role or user identity
-     * policies, so resolution returns undefined.
-     *
-     * Exact ARN comparison also preserves account isolation: an entity with the
-     * same name in another account has a different ARN and cannot be selected.
-     */
-    resolve(principalArn) {
-        if (principalArn === undefined) {
-            return undefined;
-        }
-        return this.role(principalArn) ?? this.user(principalArn);
-    }
-    /**
-     * Search account-scoped role state for the matching principal ARN.
-     */
-    role(principalArn) {
-        return this.roles.values().find((role) => role.arn === principalArn);
-    }
-    /**
-     * Search account-scoped user state for the matching principal ARN.
-     */
-    user(principalArn) {
-        return this.users.values().find((user) => user.arn === principalArn);
-    }
-}
-//# sourceMappingURL=sim-iam-id-pol-owner-resolver.js.map

package/dist/dist-hidden/service/iam/authorize/context/identity-policy-source/sim-iam-id-pol-owner-resolver.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sim-iam-id-pol-owner-resolver.js","sourceRoot":"","sources":["../../../../../../src/service/iam/authorize/context/identity-policy-source/sim-iam-id-pol-owner-resolver.ts"],"names":[],"mappings":"AAgBA;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,iCAAiC;IAC3B,KAAK,CAA0C;IAC/C,KAAK,CAA0C;IAEhE,YAAY,KAA6C;QACvD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QACzB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC3B,CAAC;IAED;;;;;;;;;OASG;IACH,OAAO,CACL,YAAgC;QAEhC,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACK,IAAI,CAAC,YAAoB;QAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,KAAK,YAAY,CAAC,CAAC;IACvE,CAAC;IAED;;OAEG;IACK,IAAI,CAAC,YAAoB;QAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,KAAK,YAAY,CAAC,CAAC;IACvE,CAAC;CACF"}

package/dist/dist-hidden/service/iam/authorize/context/identity-policy-source/sim-iam-id-pol-owner-src-builder.d.ts

@@ -1,51 +0,0 @@
-import type { SimArn } from "../../../../aws/arn.js";
-import type { SimIamPolicy } from "../../../policy/sim-iam-policy.js";
-import type { SimIamAuthZPolicySource } from "../sim-iam-auth-z-context.js";
-import type { SimIamIdentityPolicyOwner } from "./sim-iam-id-pol-owner-resolver.js";
-interface SimIamIdentityPolicyOwnerSourceBuilderProps {
-    readonly policies: ReadonlyMap<SimArn, SimIamPolicy>;
-}
-/**
- * Converts policies stored on an IAM role or user into authorization sources.
- *
- * IAM owners store inline policy documents directly and refer to managed
- * policies by ARN. Authorization evaluation uses one common policy-source
- * representation for both forms. This class owns the translation from those
- * storage models to that representation.
- *
- * Owner resolution remains outside this class. Callers must first identify the
- * role or user whose policies apply to the authenticated principal.
- */
-export declare class SimIamIdentityPolicyOwnerSourceBuilder {
-    private readonly policies;
-    constructor(props: SimIamIdentityPolicyOwnerSourceBuilderProps);
-    /**
-     * Build all available inline and managed policy sources for an IAM owner.
-     */
-    build(owner: SimIamIdentityPolicyOwner): readonly SimIamAuthZPolicySource[];
-    /**
-     * Parse policy documents stored directly on the role or user.
-     *
-     * Inline policy names come from the owning entity, so each generated source
-     * retains the name needed for authorization diagnostics.
-     */
-    private inlinePolicySources;
-    /**
-     * Resolve attached policy ARNs through the account-scoped policy store.
-     *
-     * Attachment state and policy storage can exist independently in the
-     * simulator. An ARN with no corresponding stored policy contributes no
-     * authorization statements.
-     */
-    private attachedPolicySources;
-    /**
-     * Convert a managed policy when it has a document available for evaluation.
-     *
-     * A managed policy record without a document contributes no source. This
-     * matches missing attached policies: neither case supplies statements to the
-     * authorization decision.
-     */
-    private managedPolicySource;
-}
-export {};
-//# sourceMappingURL=sim-iam-id-pol-owner-src-builder.d.ts.map

package/dist/dist-hidden/service/iam/authorize/context/identity-policy-source/sim-iam-id-pol-owner-src-builder.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sim-iam-id-pol-owner-src-builder.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/authorize/context/identity-policy-source/sim-iam-id-pol-owner-src-builder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AAEtE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAC5E,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAEpF,UAAU,2CAA2C;IACnD,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;CACtD;AAED;;;;;;;;;;GAUG;AACH,qBAAa,sCAAsC;IACjD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAoC;IAE7D,YAAY,KAAK,EAAE,2CAA2C,EAE7D;IAED;;OAEG;IACH,KAAK,CAAC,KAAK,EAAE,yBAAyB,GAAG,SAAS,uBAAuB,EAAE,CAK1E;IAED;;;;;OAKG;IACH,OAAO,CAAC,mBAAmB;IAU3B;;;;;;OAMG;IACH,OAAO,CAAC,qBAAqB;IAS7B;;;;;;OAMG;IACH,OAAO,CAAC,mBAAmB;CAgB5B"}

package/dist/dist-hidden/service/iam/authorize/context/identity-policy-source/sim-iam-id-pol-owner-src-builder.js

@@ -1,74 +0,0 @@
-import { jsonParse } from "../../../../../util/type-guard/json.js";
-/**
- * Converts policies stored on an IAM role or user into authorization sources.
- *
- * IAM owners store inline policy documents directly and refer to managed
- * policies by ARN. Authorization evaluation uses one common policy-source
- * representation for both forms. This class owns the translation from those
- * storage models to that representation.
- *
- * Owner resolution remains outside this class. Callers must first identify the
- * role or user whose policies apply to the authenticated principal.
- */
-export class SimIamIdentityPolicyOwnerSourceBuilder {
-    policies;
-    constructor(props) {
-        this.policies = props.policies;
-    }
-    /**
-     * Build all available inline and managed policy sources for an IAM owner.
-     */
-    build(owner) {
-        return [
-            ...this.inlinePolicySources(owner),
-            ...this.attachedPolicySources(owner),
-        ];
-    }
-    /**
-     * Parse policy documents stored directly on the role or user.
-     *
-     * Inline policy names come from the owning entity, so each generated source
-     * retains the name needed for authorization diagnostics.
-     */
-    inlinePolicySources(owner) {
-        return [...owner.inlinePolicies].map(([policyName, policyDocument]) => ({
-            sourceType: "identity-inline",
-            policyName,
-            document: jsonParse(policyDocument),
-        }));
-    }
-    /**
-     * Resolve attached policy ARNs through the account-scoped policy store.
-     *
-     * Attachment state and policy storage can exist independently in the
-     * simulator. An ARN with no corresponding stored policy contributes no
-     * authorization statements.
-     */
-    attachedPolicySources(owner) {
-        return [...owner.attachedPolicyArns]
-            .map((policyArn) => this.policies.get(policyArn))
-            .filter((policy) => policy !== undefined)
-            .flatMap((policy) => this.managedPolicySource(policy));
-    }
-    /**
-     * Convert a managed policy when it has a document available for evaluation.
-     *
-     * A managed policy record without a document contributes no source. This
-     * matches missing attached policies: neither case supplies statements to the
-     * authorization decision.
-     */
-    managedPolicySource(policy) {
-        if (policy.policyDocument === undefined) {
-            return [];
-        }
-        return [
-            {
-                sourceType: "identity-managed",
-                policyArn: policy.arn,
-                policyName: policy.policyName,
-                document: jsonParse(policy.policyDocument),
-            },
-        ];
-    }
-}
-//# sourceMappingURL=sim-iam-id-pol-owner-src-builder.js.map

package/dist/dist-hidden/service/iam/authorize/context/identity-policy-source/sim-iam-id-pol-owner-src-builder.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sim-iam-id-pol-owner-src-builder.js","sourceRoot":"","sources":["../../../../../../src/service/iam/authorize/context/identity-policy-source/sim-iam-id-pol-owner-src-builder.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,wCAAwC,CAAC;AAQnE;;;;;;;;;;GAUG;AACH,MAAM,OAAO,sCAAsC;IAChC,QAAQ,CAAoC;IAE7D,YAAY,KAAkD;QAC5D,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAgC;QACpC,OAAO;YACL,GAAG,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC;YAClC,GAAG,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC;SACrC,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACK,mBAAmB,CACzB,KAAgC;QAEhC,OAAO,CAAC,GAAG,KAAK,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC;YACtE,UAAU,EAAE,iBAAiB;YAC7B,UAAU;YACV,QAAQ,EAAE,SAAS,CAAC,cAAc,CAAC;SACpC,CAAC,CAAC,CAAC;IACN,CAAC;IAED;;;;;;OAMG;IACK,qBAAqB,CAC3B,KAAgC;QAEhC,OAAO,CAAC,GAAG,KAAK,CAAC,kBAAkB,CAAC;aACjC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;aAChD,MAAM,CAAC,CAAC,MAAM,EAA0B,EAAE,CAAC,MAAM,KAAK,SAAS,CAAC;aAChE,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED;;;;;;OAMG;IACK,mBAAmB,CACzB,MAAoB;QAEpB,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YACxC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO;YACL;gBACE,UAAU,EAAE,kBAAkB;gBAC9B,SAAS,EAAE,MAAM,CAAC,GAAG;gBACrB,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,QAAQ,EAAE,SAAS,CAAC,MAAM,CAAC,cAAc,CAAC;aAC3C;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/dist-hidden/service/iam/authorize/context/sim-iam-auth-z-context.factory.d.ts

@@ -1,11 +0,0 @@
-import { StaticFactory } from "@kensio/part-factory";
-import type { SimIamAuthZContext, SimIamAuthZResourcePolicySource } from "./sim-iam-auth-z-context.js";
-/**
- * Generates simulated IAM authorization contexts for tests.
- */
-export declare const simIamAuthZContextFactory: StaticFactory<SimIamAuthZContext>;
-/**
- * Generates simulated IAM resource-policy sources for tests.
- */
-export declare const simIamAuthZResourcePolicySourceFactory: StaticFactory<SimIamAuthZResourcePolicySource>;
-//# sourceMappingURL=sim-iam-auth-z-context.factory.d.ts.map

package/dist/dist-hidden/service/iam/authorize/context/sim-iam-auth-z-context.factory.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sim-iam-auth-z-context.factory.d.ts","sourceRoot":"","sources":["../../../../../src/service/iam/authorize/context/sim-iam-auth-z-context.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,KAAK,EACV,kBAAkB,EAClB,+BAA+B,EAChC,MAAM,6BAA6B,CAAC;AAErC;;GAEG;AACH,eAAO,MAAM,yBAAyB,mCAkBpC,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,sCAAsC,gDAW/C,CAAC"}

package/dist/dist-hidden/service/iam/authorize/context/sim-iam-auth-z-context.factory.js

@@ -1,38 +0,0 @@
-import { StaticFactory } from "@kensio/part-factory";
-/**
- * Generates simulated IAM authorization contexts for tests.
- */
-export const simIamAuthZContextFactory = new StaticFactory({
-    identityPolicies: [],
-    resourcePolicies: [],
-    action: "s3:GetObject",
-    resource: "arn:aws:s3:::test-bucket/test-key",
-    conditionContext: {},
-    caller: {
-        identityPolicyPrincipal: {
-            kind: "arn",
-            arn: "arn:aws:iam::123456789012:role/TestRole",
-        },
-        principal: {
-            kind: "arn",
-            arn: "arn:aws:iam::123456789012:role/TestRole",
-        },
-        arn: "arn:aws:iam::123456789012:role/TestRole",
-        accountId: "123456789012",
-    },
-});
-/**
- * Generates simulated IAM resource-policy sources for tests.
- */
-export const simIamAuthZResourcePolicySourceFactory = new StaticFactory({
-    sourceType: "resource",
-    document: {
-        Version: "2012-10-17",
-        Statement: {
-            Effect: "Allow",
-            Action: "s3:GetObject",
-            Resource: "arn:aws:s3:::test-bucket/test-key",
-        },
-    },
-});
-//# sourceMappingURL=sim-iam-auth-z-context.factory.js.map

package/dist/dist-hidden/service/iam/authorize/context/sim-iam-auth-z-context.factory.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sim-iam-auth-z-context.factory.js","sourceRoot":"","sources":["../../../../../src/service/iam/authorize/context/sim-iam-auth-z-context.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAMrD;;GAEG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,IAAI,aAAa,CAAqB;IAC7E,gBAAgB,EAAE,EAAE;IACpB,gBAAgB,EAAE,EAAE;IACpB,MAAM,EAAE,cAAc;IACtB,QAAQ,EAAE,mCAAmC;IAC7C,gBAAgB,EAAE,EAAE;IACpB,MAAM,EAAE;QACN,uBAAuB,EAAE;YACvB,IAAI,EAAE,KAAK;YACX,GAAG,EAAE,yCAAyC;SAC/C;QACD,SAAS,EAAE;YACT,IAAI,EAAE,KAAK;YACX,GAAG,EAAE,yCAAyC;SAC/C;QACD,GAAG,EAAE,yCAAyC;QAC9C,SAAS,EAAE,cAAc;KAC1B;CACF,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,sCAAsC,GACjD,IAAI,aAAa,CAAkC;IACjD,UAAU,EAAE,UAAU;IACtB,QAAQ,EAAE;QACR,OAAO,EAAE,YAAY;QACrB,SAAS,EAAE;YACT,MAAM,EAAE,OAAO;YACf,MAAM,EAAE,cAAc;YACtB,QAAQ,EAAE,mCAAmC;SAC9C;KACF;CACF,CAAC,CAAC"}

package/dist/dist-hidden/service/iam/authorize/sim-iam-authorizer.d.ts

@@ -1,33 +0,0 @@
-import type { SimArn } from "../../aws/arn.js";
-import type { SimIamPolicy } from "../policy/sim-iam-policy.js";
-import type { SimIamRole, SimIamRoleName } from "../role/sim-iam-role.js";
-import { type SimIamAuthorizationInput } from "./context/sim-iam-auth-z-context-builder.js";
-import { SimIamPolicyDecision } from "./sim-iam-decision.js";
-import type { SimAwsPrincipal } from "../../aws/caller/sim-aws-caller.js";
-import type { SimIamUser, SimIamUsername } from "../user/sim-iam-user.js";
-import type { SimAwsCredentialIdentityResolver } from "../../aws/caller/sim-aws-caller-resolver.js";
-interface SimIamAuthorizerProps {
-    readonly policies: ReadonlyMap<SimArn, SimIamPolicy>;
-    readonly roles: ReadonlyMap<SimIamRoleName, SimIamRole>;
-    readonly users: ReadonlyMap<SimIamUsername, SimIamUser>;
-    readonly defaultCallerPrincipal: SimAwsPrincipal;
-    readonly credentialIdentityResolver: SimAwsCredentialIdentityResolver;
-}
-/**
- * Facade for simulated IAM authorization decisions.
- *
- * This class represents the service-facing entry point for IAM authorization.
- * It assembles the authorization context from IAM state and request input, while
- * each SimIamPolicyDecision instance keeps the state and diagnostics for one
- * evaluated authorization attempt.
- */
-export declare class SimIamAuthorizer {
-    private readonly contextBuilder;
-    constructor(props: SimIamAuthorizerProps);
-    /**
-     * Evaluate an IAM authorization request.
-     */
-    authorize(input: SimIamAuthorizationInput): SimIamPolicyDecision;
-}
-export {};
-//# sourceMappingURL=sim-iam-authorizer.d.ts.map

package/dist/dist-hidden/service/iam/authorize/sim-iam-authorizer.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sim-iam-authorizer.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/authorize/sim-iam-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC1E,OAAO,EAEL,KAAK,wBAAwB,EAC9B,MAAM,6CAA6C,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC1E,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,6CAA6C,CAAC;AAEpG,UAAU,qBAAqB;IAC7B,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACrD,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IACxD,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IACxD,QAAQ,CAAC,sBAAsB,EAAE,eAAe,CAAC;IACjD,QAAQ,CAAC,0BAA0B,EAAE,gCAAgC,CAAC;CACvE;AAED;;;;;;;GAOG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA4B;IAE3D,YAAY,KAAK,EAAE,qBAAqB,EAQvC;IAED;;OAEG;IACH,SAAS,CAAC,KAAK,EAAE,wBAAwB,GAAG,oBAAoB,CAE/D;CACF"}

package/dist/dist-hidden/service/iam/authorize/sim-iam-authorizer.js

@@ -1,23 +0,0 @@
-import { SimIamAuthZContextBuilder, } from "./context/sim-iam-auth-z-context-builder.js";
-import { SimIamPolicyDecision } from "./sim-iam-decision.js";
-/**
- * Facade for simulated IAM authorization decisions.
- *
- * This class represents the service-facing entry point for IAM authorization.
- * It assembles the authorization context from IAM state and request input, while
- * each SimIamPolicyDecision instance keeps the state and diagnostics for one
- * evaluated authorization attempt.
- */
-export class SimIamAuthorizer {
-    contextBuilder;
-    constructor(props) {
-        this.contextBuilder = new SimIamAuthZContextBuilder(props.policies, props.roles, props.users, props.defaultCallerPrincipal, props.credentialIdentityResolver);
-    }
-    /**
-     * Evaluate an IAM authorization request.
-     */
-    authorize(input) {
-        return new SimIamPolicyDecision(this.contextBuilder.build(input));
-    }
-}
-//# sourceMappingURL=sim-iam-authorizer.js.map