@kensio/yulin 0.32.0 → 0.34.0

package/dist/service/acm/command/request-certificate/request-certificate-authorizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-certificate-authorizer.js","sourceRoot":"","sources":["../../../../../src/service/acm/command/request-certificate/request-certificate-authorizer.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAOzE;;;;;;GAMG;AACH,MAAM,OAAO,4BAA4B;IAC/B,MAAM,CAAU,MAAM,GAAG,wBAAwB,CAAC;IAEzC,GAAG,CAA0B;IAC7B,QAAQ,CAAS;IAElC,YAAY,UAAkD;QAC5D,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;QAC1B,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;IACtC,CAAC;IAED;;;;;OAKG;IACH,SAAS,CAAC,MAAqB;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAClC,MAAM,EAAE,4BAA4B,CAAC,MAAM;YAC3C,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM;SACP,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;gBACpC,MAAM,EAAE,4BAA4B,CAAC,MAAM;gBAC3C,QAAQ,EAAE,IAAI,CAAC,QAAQ;aACxB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}

package/dist/service/acm/command/request-certificate/request-certificate-validator.d.ts

@@ -0,0 +1,25 @@
+import type { SimRequestCertificateCommand } from "./request-certificate.cmd.js";
+/**
+ * Validates request-level invariants for ACM RequestCertificate.
+ *
+ * These checks occur before background sequencing and IAM authorization. This
+ * preserves ACM's input-error behavior: malformed requests fail as client
+ * errors rather than producing an authorization result, and no certificate
+ * state or background work can be created for an invalid request.
+ *
+ * Certificate construction is not performed here. RequestCertificateFactory
+ * remains responsible for translating a validated SDK command into a simulated
+ * certificate entity.
+ */
+export declare class RequestCertificateValidator {
+    /**
+     * Ensure the command has the required domain name and an allowed tag count.
+     *
+     * DomainName is the primary name represented by the resulting certificate.
+     * ACM rejects both an omitted value and an empty string. Tags are validated
+     * before certificate creation because the request limit applies to the whole
+     * request, not to an already-created certificate.
+     */
+    validate(command: SimRequestCertificateCommand): void;
+}
+//# sourceMappingURL=request-certificate-validator.d.ts.map

package/dist/service/acm/command/request-certificate/request-certificate-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-certificate-validator.d.ts","sourceRoot":"","sources":["../../../../../src/service/acm/command/request-certificate/request-certificate-validator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,8BAA8B,CAAC;AAMjF;;;;;;;;;;;GAWG;AACH,qBAAa,2BAA2B;IACtC;;;;;;;OAOG;IACH,QAAQ,CAAC,OAAO,EAAE,4BAA4B,GAAG,IAAI,CAepD;CACF"}

package/dist/service/acm/command/request-certificate/request-certificate-validator.js

@@ -0,0 +1,33 @@
+import { SimAcmInvalidArgsException as SimAcmInvalidArgumentsException, SimAcmTooManyTagsException, } from "../../error/sim-acm.error.js";
+/**
+ * Validates request-level invariants for ACM RequestCertificate.
+ *
+ * These checks occur before background sequencing and IAM authorization. This
+ * preserves ACM's input-error behavior: malformed requests fail as client
+ * errors rather than producing an authorization result, and no certificate
+ * state or background work can be created for an invalid request.
+ *
+ * Certificate construction is not performed here. RequestCertificateFactory
+ * remains responsible for translating a validated SDK command into a simulated
+ * certificate entity.
+ */
+export class RequestCertificateValidator {
+    /**
+     * Ensure the command has the required domain name and an allowed tag count.
+     *
+     * DomainName is the primary name represented by the resulting certificate.
+     * ACM rejects both an omitted value and an empty string. Tags are validated
+     * before certificate creation because the request limit applies to the whole
+     * request, not to an already-created certificate.
+     */
+    validate(command) {
+        if (command.input.DomainName === undefined ||
+            command.input.DomainName === "") {
+            throw new SimAcmInvalidArgumentsException("RequestCertificateCommand.input.DomainName required");
+        }
+        if ((command.input.Tags?.length ?? 0) > 50) {
+            throw new SimAcmTooManyTagsException("RequestCertificateCommand.input.Tags cannot contain more than 50 tags");
+        }
+    }
+}
+//# sourceMappingURL=request-certificate-validator.js.map

package/dist/service/acm/command/request-certificate/request-certificate-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-certificate-validator.js","sourceRoot":"","sources":["../../../../../src/service/acm/command/request-certificate/request-certificate-validator.ts"],"names":[],"mappings":"AACA,OAAO,EACL,0BAA0B,IAAI,+BAA+B,EAC7D,0BAA0B,GAC3B,MAAM,8BAA8B,CAAC;AAEtC;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,2BAA2B;IACtC;;;;;;;OAOG;IACH,QAAQ,CAAC,OAAqC;QAC5C,IACE,OAAO,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS;YACtC,OAAO,CAAC,KAAK,CAAC,UAAU,KAAK,EAAE,EAC/B,CAAC;YACD,MAAM,IAAI,+BAA+B,CACvC,qDAAqD,CACtD,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;YAC3C,MAAM,IAAI,0BAA0B,CAClC,uEAAuE,CACxE,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/service/acm/command/request-certificate/request-certificate.handler.d.ts

@@ -4,11 +4,17 @@ import { type BackgroundScheduler } from "../../../../util/background/background
 import type { CommandHandler } from "../../../../command/command-handler.js";
 import type { SimRequestCertificateCommand, SimRequestCertificateCommandOutput } from "./request-certificate.cmd.js";
 import type { SimAcmCertificate } from "../../certificate/sim-acm-certificate.js";
-interface RequestCertificateCommandHandlerProps {
+import { type SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+interface RequestCertificateCommandHandlerProperties {
     readonly accountRegionScope: SimAwsAccountRegionScope;
     readonly certificates: Map<SimArn, SimAcmCertificate>;
+    readonly iam?: SimIamInterServiceAuthZ;
     readonly background?: BackgroundScheduler;
 }
+interface RequestCertificateCommandHandlerOptions {
+    readonly caller?: SimAwsCaller;
+}
 /**
  * Simulated ACM RequestCertificateCommand handler.
  *
@@ -16,13 +22,20 @@ interface RequestCertificateCommandHandlerProps {
  */
 export declare class RequestCertificateCommandHandler implements CommandHandler<SimRequestCertificateCommand, SimRequestCertificateCommandOutput> {
     private readonly certificates;
+    private readonly authorizer;
     private readonly background;
     private readonly certificateFactory;
-    constructor(props: RequestCertificateCommandHandlerProps);
+    private readonly validator;
+    constructor(properties: RequestCertificateCommandHandlerProperties);
     /**
-     * Request a simulated ACM certificate.
+     * Validate, authorize, create, and schedule issuance of a certificate.
+     *
+     * Validation precedes authorization so malformed SDK requests retain ACM's
+     * client-error behavior. Authorization precedes factory use and Map mutation,
+     * preventing an unauthorized caller from allocating certificate state or
+     * scheduling a certificate issuance task.
      */
-    handle(cmd: SimRequestCertificateCommand): Promise<SimRequestCertificateCommandOutput>;
+    handle(command: SimRequestCertificateCommand, options?: RequestCertificateCommandHandlerOptions): Promise<SimRequestCertificateCommandOutput>;
 }
 export {};
 //# sourceMappingURL=request-certificate.handler.d.ts.map

package/dist/service/acm/command/request-certificate/request-certificate.handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"request-certificate.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/acm/command/request-certificate/request-certificate.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,KAAK,EACV,4BAA4B,EAC5B,kCAAkC,EACnC,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAOlF,UAAU,qCAAqC;IAC7C,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;IACtD,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACtD,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED;;;;GAIG;AACH,qBAAa,gCAAiC,YAAW,cAAc,CACrE,4BAA4B,EAC5B,kCAAkC,CACnC;IACC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAiC;IAC9D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA4B;IAE/D,YAAY,KAAK,EAAE,qCAAqC,EAYvD;IAED;;OAEG;IACG,MAAM,CACV,GAAG,EAAE,4BAA4B,GAChC,OAAO,CAAC,kCAAkC,CAAC,CA+B7C;CACF"}
+{"version":3,"file":"request-certificate.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/acm/command/request-certificate/request-certificate.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,KAAK,EACV,4BAA4B,EAC5B,kCAAkC,EACnC,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAIlF,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,wDAAwD,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAE1E,UAAU,0CAA0C;IAClD,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;IACtD,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACtD,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED,UAAU,uCAAuC;IAC/C,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;GAIG;AACH,qBAAa,gCAAiC,YAAW,cAAc,CACrE,4BAA4B,EAC5B,kCAAkC,CACnC;IACC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAiC;IAC9D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+B;IAC1D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA4B;IAC/D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAqC;IAE/D,YAAY,UAAU,EAAE,0CAA0C,EAiBjE;IAED;;;;;;;OAOG;IACG,MAAM,CACV,OAAO,EAAE,4BAA4B,EACrC,OAAO,CAAC,EAAE,uCAAuC,GAChD,OAAO,CAAC,kCAAkC,CAAC,CAuB7C;CACF"}

package/dist/service/acm/command/request-certificate/request-certificate.handler.js

@@ -1,6 +1,8 @@
 import { BackgroundTasks, } from "../../../../util/background/background.js";
-import { SimAcmInvalidArgsException, SimAcmTooManyTagsException, } from "../../error/sim-acm.error.js";
+import { RequestCertificateAuthorizer } from "./request-certificate-authorizer.js";
 import { RequestCertificateFactory } from "./request-cert-factory.js";
+import { RequestCertificateValidator } from "./request-certificate-validator.js";
+import { SimIamAllowAllAuth, } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
 /**
  * Simulated ACM RequestCertificateCommand handler.
  *
@@ -8,29 +10,36 @@ import { RequestCertificateFactory } from "./request-cert-factory.js";
  */
 export class RequestCertificateCommandHandler {
     certificates;
+    authorizer;
     background;
     certificateFactory;
-    constructor(props) {
-        const { accountRegionScope, certificates, background = new BackgroundTasks(), } = props;
+    validator = new RequestCertificateValidator();
+    constructor(properties) {
+        const { accountRegionScope, certificates, iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), } = properties;
         this.certificates = certificates;
+        this.authorizer = new RequestCertificateAuthorizer({
+            iam,
+            resource: `arn:aws:acm:${accountRegionScope.regionName}:${accountRegionScope.accountId}:certificate/*`,
+        });
         this.background = background;
         this.certificateFactory = new RequestCertificateFactory({
             accountRegionScope,
         });
     }
     /**
-     * Request a simulated ACM certificate.
+     * Validate, authorize, create, and schedule issuance of a certificate.
+     *
+     * Validation precedes authorization so malformed SDK requests retain ACM's
+     * client-error behavior. Authorization precedes factory use and Map mutation,
+     * preventing an unauthorized caller from allocating certificate state or
+     * scheduling a certificate issuance task.
      */
-    async handle(cmd) {
-        if (cmd.input.DomainName === undefined || cmd.input.DomainName === "") {
-            throw new SimAcmInvalidArgsException("RequestCertificateCommand.input.DomainName required");
-        }
-        if ((cmd.input.Tags?.length ?? 0) > 50) {
-            throw new SimAcmTooManyTagsException("RequestCertificateCommand.input.Tags cannot contain more than 50 tags");
-        }
+    async handle(command, options) {
+        this.validator.validate(command);
         // Allow for potential non-deterministic sequencing of async events.
         await this.background.sequence();
-        const certificate = this.certificateFactory.makeCertificate(cmd, this.certificates.size);
+        this.authorizer.authorize(options?.caller);
+        const certificate = this.certificateFactory.makeCertificate(command, this.certificates.size);
         const { certificateArn } = certificate;
         this.certificates.set(certificateArn, certificate);
         // Schedule background task to issue the sim Certificate.

package/dist/service/acm/command/request-certificate/request-certificate.handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"request-certificate.handler.js","sourceRoot":"","sources":["../../../../../src/service/acm/command/request-certificate/request-certificate.handler.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,eAAe,GAChB,MAAM,2CAA2C,CAAC;AAOnD,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAQtE;;;;GAIG;AACH,MAAM,OAAO,gCAAgC;IAI1B,YAAY,CAAiC;IAC7C,UAAU,CAAsB;IAChC,kBAAkB,CAA4B;IAE/D,YAAY,KAA4C;QACtD,MAAM,EACJ,kBAAkB,EAClB,YAAY,EACZ,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,KAAK,CAAC;QAEV,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,kBAAkB,GAAG,IAAI,yBAAyB,CAAC;YACtD,kBAAkB;SACnB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,GAAiC;QAEjC,IAAI,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,EAAE,EAAE,CAAC;YACtE,MAAM,IAAI,0BAA0B,CAClC,qDAAqD,CACtD,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;YACvC,MAAM,IAAI,0BAA0B,CAClC,uEAAuE,CACxE,CAAC;QACJ,CAAC;QAED,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,eAAe,CACzD,GAAG,EACH,IAAI,CAAC,YAAY,CAAC,IAAI,CACvB,CAAC;QACF,MAAM,EAAE,cAAc,EAAE,GAAG,WAAW,CAAC;QAEvC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QAEnD,yDAAyD;QACzD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC;QAEpD,OAAO;YACL,SAAS,EAAE,EAAE;YACb,cAAc,EAAE,cAAc;SAC/B,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"request-certificate.handler.js","sourceRoot":"","sources":["../../../../../src/service/acm/command/request-certificate/request-certificate.handler.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,eAAe,GAChB,MAAM,2CAA2C,CAAC;AAOnD,OAAO,EAAE,4BAA4B,EAAE,MAAM,qCAAqC,CAAC;AACnF,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AACjF,OAAO,EACL,kBAAkB,GAEnB,MAAM,wDAAwD,CAAC;AAchE;;;;GAIG;AACH,MAAM,OAAO,gCAAgC;IAI1B,YAAY,CAAiC;IAC7C,UAAU,CAA+B;IACzC,UAAU,CAAsB;IAChC,kBAAkB,CAA4B;IAC9C,SAAS,GAAG,IAAI,2BAA2B,EAAE,CAAC;IAE/D,YAAY,UAAsD;QAChE,MAAM,EACJ,kBAAkB,EAClB,YAAY,EACZ,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,UAAU,CAAC;QAEf,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,UAAU,GAAG,IAAI,4BAA4B,CAAC;YACjD,GAAG;YACH,QAAQ,EAAE,eAAe,kBAAkB,CAAC,UAAU,IAAI,kBAAkB,CAAC,SAAS,gBAAgB;SACvG,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,kBAAkB,GAAG,IAAI,yBAAyB,CAAC;YACtD,kBAAkB;SACnB,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,MAAM,CACV,OAAqC,EACrC,OAAiD;QAEjD,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAEjC,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAE3C,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,eAAe,CACzD,OAAO,EACP,IAAI,CAAC,YAAY,CAAC,IAAI,CACvB,CAAC;QACF,MAAM,EAAE,cAAc,EAAE,GAAG,WAAW,CAAC;QAEvC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QAEnD,yDAAyD;QACzD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC;QAEpD,OAAO;YACL,SAAS,EAAE,EAAE;YACb,cAAc,EAAE,cAAc;SAC/B,CAAC;IACJ,CAAC;CACF"}

package/dist/service/acm/sdk/sim-acm-sdk-command-router.d.ts

@@ -0,0 +1,18 @@
+import { type SimSdkCommandRoute, type SimSdkCommandRouter } from "../../../sdk/index.js";
+import type { SimAcm } from "../sim-acm.js";
+/**
+ * Routes intercepted SDK Commands to one scoped simulated ACM instance.
+ */
+export declare class SimAcmSdkCommandRouter implements SimSdkCommandRouter {
+    private readonly routes;
+    constructor(simAcm: SimAcm);
+    /**
+     * The SDK Command names simulated ACM can handle.
+     */
+    supportedCommandNames(): readonly string[];
+    /**
+     * Get the route for an SDK Command name, if simulated ACM supports it.
+     */
+    route(commandName: string): SimSdkCommandRoute | undefined;
+}
+//# sourceMappingURL=sim-acm-sdk-command-router.d.ts.map

package/dist/service/acm/sdk/sim-acm-sdk-command-router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-acm-sdk-command-router.d.ts","sourceRoot":"","sources":["../../../../src/service/acm/sdk/sim-acm-sdk-command-router.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACzB,MAAM,uBAAuB,CAAC;AAI/B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAE5C;;GAEG;AACH,qBAAa,sBAAuB,YAAW,mBAAmB;IAChE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0C;IAEjE,YAAY,MAAM,EAAE,MAAM,EA2BzB;IAED;;OAEG;IACH,qBAAqB,IAAI,SAAS,MAAM,EAAE,CAEzC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAEzD;CACF"}

package/dist/service/acm/sdk/sim-acm-sdk-command-router.js

@@ -0,0 +1,36 @@
+import { simSdkCallerOptions, } from "../../../sdk/index.js";
+/**
+ * Routes intercepted SDK Commands to one scoped simulated ACM instance.
+ */
+export class SimAcmSdkCommandRouter {
+    routes;
+    constructor(simAcm) {
+        this.routes = new Map([
+            [
+                "DescribeCertificateCommand",
+                async (command, context) => await simAcm.describeCertificate(command, simSdkCallerOptions(context)),
+            ],
+            [
+                "ListCertificatesCommand",
+                async (command, context) => await simAcm.listCertificates(command, simSdkCallerOptions(context)),
+            ],
+            [
+                "RequestCertificateCommand",
+                async (command, context) => await simAcm.requestCertificate(command, simSdkCallerOptions(context)),
+            ],
+        ]);
+    }
+    /**
+     * The SDK Command names simulated ACM can handle.
+     */
+    supportedCommandNames() {
+        return this.routes.keys().toArray();
+    }
+    /**
+     * Get the route for an SDK Command name, if simulated ACM supports it.
+     */
+    route(commandName) {
+        return this.routes.get(commandName);
+    }
+}
+//# sourceMappingURL=sim-acm-sdk-command-router.js.map

package/dist/service/acm/sdk/sim-acm-sdk-command-router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-acm-sdk-command-router.js","sourceRoot":"","sources":["../../../../src/service/acm/sdk/sim-acm-sdk-command-router.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,GAGpB,MAAM,uBAAuB,CAAC;AAM/B;;GAEG;AACH,MAAM,OAAO,sBAAsB;IAChB,MAAM,CAA0C;IAEjE,YAAY,MAAc;QACxB,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,CAA6B;YAChD;gBACE,4BAA4B;gBAC5B,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,mBAAmB,CAC9B,OAAwC,EACxC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,yBAAyB;gBACzB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,gBAAgB,CAC3B,OAAqC,EACrC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,2BAA2B;gBAC3B,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,kBAAkB,CAC7B,OAAuC,EACvC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;SACF,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,qBAAqB;QACnB,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAmB;QACvB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACtC,CAAC;CACF"}

package/dist/service/acm/sim-acm.d.ts

@@ -5,8 +5,15 @@ import type { SimAcmCertificate } from "./certificate/sim-acm-certificate.js";
 import type { SimDescribeCertificateCommand, SimDescribeCertificateCommandOutput } from "./command/describe-certificate/describe-certificate.cmd.js";
 import type { SimListCertificatesCommand, SimListCertificatesCommandOutput } from "./command/list-certificates/list-certificates.cmd.js";
 import { SimAcmCfnResourceFactory } from "./cfn/sim-cfn-acm-resource-factory.js";
-interface SimAcmProps {
+import type { SimAwsCaller } from "../aws/caller/sim-aws-caller.js";
+import { type SimIamInterServiceAuthZ } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimSdkCommandRouter } from "../../sdk/router/sim-sdk-command-router.type.js";
+export interface SimAcmRequestOptions {
+    readonly caller?: SimAwsCaller;
+}
+interface SimAcmProperties {
     readonly accountRegionScope?: SimAwsAccountRegionScope;
+    readonly iam?: SimIamInterServiceAuthZ;
     readonly background?: BackgroundScheduler;
 }
 /**
@@ -15,25 +22,31 @@ interface SimAcmProps {
 export declare class SimAcm {
     readonly certificates: Map<`arn:aws:${string}:${string}:${string}:${string}/${string}`, SimAcmCertificate>;
     private readonly accountRegionScope;
+    private readonly iam;
     private readonly background;
     private readonly cfnFactory;
-    constructor(props?: SimAcmProps);
+    private readonly sdkRouter;
+    constructor(properties?: SimAcmProperties);
     /**
      * Handle a Describe Certificate Command from the SDK.
      */
-    describeCertificate(cmd: SimDescribeCertificateCommand): Promise<SimDescribeCertificateCommandOutput>;
+    describeCertificate(command: SimDescribeCertificateCommand, options?: SimAcmRequestOptions): Promise<SimDescribeCertificateCommandOutput>;
     /**
      * Handle a List Certificates Command from the SDK.
      */
-    listCertificates(cmd: SimListCertificatesCommand): Promise<SimListCertificatesCommandOutput>;
+    listCertificates(command: SimListCertificatesCommand, options?: SimAcmRequestOptions): Promise<SimListCertificatesCommandOutput>;
     /**
      * Handle a Request Certificate Command from the SDK.
      */
-    requestCertificate(cmd: SimRequestCertificateCommand): Promise<SimRequestCertificateCommandOutput>;
+    requestCertificate(command: SimRequestCertificateCommand, options?: SimAcmRequestOptions): Promise<SimRequestCertificateCommandOutput>;
     /**
      * Get this service's CloudFormation Resource factory.
      */
     cfnResourceFactory(): SimAcmCfnResourceFactory;
+    /**
+     * Get this service's SDK Command router for SDK client interception.
+     */
+    sdkCommandRouter(): SimSdkCommandRouter;
 }
 export {};
 //# sourceMappingURL=sim-acm.d.ts.map

package/dist/service/acm/sim-acm.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-acm.d.ts","sourceRoot":"","sources":["../../../src/service/acm/sim-acm.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAEvF,OAAO,KAAK,EACV,4BAA4B,EAC5B,kCAAkC,EACnC,MAAM,0DAA0D,CAAC;AAElE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AAC9E,OAAO,KAAK,EACV,6BAA6B,EAC7B,mCAAmC,EACpC,MAAM,4DAA4D,CAAC;AAEpE,OAAO,KAAK,EACV,0BAA0B,EAC1B,gCAAgC,EACjC,MAAM,sDAAsD,CAAC;AAE9D,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AAGjF,UAAU,WAAW;IACnB,QAAQ,CAAC,kBAAkB,CAAC,EAAE,wBAAwB,CAAC;IACvD,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED;;GAEG;AACH,qBAAa,MAAM;IACjB,SAAgB,YAAY,sFAAwC;IAEpE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA2B;IAC9D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAExB;IAEH,YAAY,KAAK,GAAE,WAAgB,EAQlC;IAED;;OAEG;IACG,mBAAmB,CACvB,GAAG,EAAE,6BAA6B,GACjC,OAAO,CAAC,mCAAmC,CAAC,CAM9C;IAED;;OAEG;IACG,gBAAgB,CACpB,GAAG,EAAE,0BAA0B,GAC9B,OAAO,CAAC,gCAAgC,CAAC,CAM3C;IAED;;OAEG;IACG,kBAAkB,CACtB,GAAG,EAAE,4BAA4B,GAChC,OAAO,CAAC,kCAAkC,CAAC,CAO7C;IAED;;OAEG;IACH,kBAAkB,IAAI,wBAAwB,CAE7C;CACF"}
+{"version":3,"file":"sim-acm.d.ts","sourceRoot":"","sources":["../../../src/service/acm/sim-acm.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAEvF,OAAO,KAAK,EACV,4BAA4B,EAC5B,kCAAkC,EACnC,MAAM,0DAA0D,CAAC;AAElE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AAC9E,OAAO,KAAK,EACV,6BAA6B,EAC7B,mCAAmC,EACpC,MAAM,4DAA4D,CAAC;AAEpE,OAAO,KAAK,EACV,0BAA0B,EAC1B,gCAAgC,EACjC,MAAM,sDAAsD,CAAC;AAE9D,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AAEjF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,kDAAkD,CAAC;AAE1D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAE3F,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED,UAAU,gBAAgB;IACxB,QAAQ,CAAC,kBAAkB,CAAC,EAAE,wBAAwB,CAAC;IACvD,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED;;GAEG;AACH,qBAAa,MAAM;IACjB,SAAgB,YAAY,sFAAwC;IAEpE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA2B;IAC9D,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA0B;IAC9C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAExB;IACH,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAoC;IAE9D,YAAY,UAAU,GAAE,gBAAqB,EAU5C;IAED;;OAEG;IACG,mBAAmB,CACvB,OAAO,EAAE,6BAA6B,EACtC,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,mCAAmC,CAAC,CAO9C;IAED;;OAEG;IACG,gBAAgB,CACpB,OAAO,EAAE,0BAA0B,EACnC,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,gCAAgC,CAAC,CAO3C;IAED;;OAEG;IACG,kBAAkB,CACtB,OAAO,EAAE,4BAA4B,EACrC,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,kCAAkC,CAAC,CAQ7C;IAED;;OAEG;IACH,kBAAkB,IAAI,wBAAwB,CAE7C;IAED;;OAEG;IACH,gBAAgB,IAAI,mBAAmB,CAEtC;CACF"}

package/dist/service/acm/sim-acm.js

@@ -4,51 +4,59 @@ import { DescribeCertificateCommandHandler } from "./command/describe-certificat
 import { ListCertificatesCommandHandler } from "./command/list-certificates/list-certificates.handler.js";
 import { SimAcmCfnResourceFactory } from "./cfn/sim-cfn-acm-resource-factory.js";
 import { simAwsAccountRegionScopeFactory } from "../aws/sim-aws-account-region-scope.factory.js";
+import { SimIamAllowAllAuth, } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
+import { SimAcmSdkCommandRouter } from "./sdk/sim-acm-sdk-command-router.js";
 /**
  * Simulated ACM. Handles SDK commands. Emulates AWS behaviour and state.
  */
 export class SimAcm {
     certificates = new Map();
     accountRegionScope;
+    iam;
     background;
     cfnFactory = new SimAcmCfnResourceFactory({
         acm: this,
     });
-    constructor(props = {}) {
-        const { accountRegionScope = simAwsAccountRegionScopeFactory.make(), background = new BackgroundTasks(), } = props;
+    sdkRouter = new SimAcmSdkCommandRouter(this);
+    constructor(properties = {}) {
+        const { accountRegionScope = simAwsAccountRegionScopeFactory.make(), iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), } = properties;
         this.accountRegionScope = accountRegionScope;
+        this.iam = iam;
         this.background = background;
     }
     /**
      * Handle a Describe Certificate Command from the SDK.
      */
-    async describeCertificate(cmd) {
+    async describeCertificate(command, options) {
         const handler = new DescribeCertificateCommandHandler({
             certificates: this.certificates,
+            iam: this.iam,
             background: this.background,
         });
-        return await handler.handle(cmd);
+        return await handler.handle(command, options);
     }
     /**
      * Handle a List Certificates Command from the SDK.
      */
-    async listCertificates(cmd) {
+    async listCertificates(command, options) {
         const handler = new ListCertificatesCommandHandler({
             certificates: this.certificates,
+            iam: this.iam,
             background: this.background,
         });
-        return await handler.handle(cmd);
+        return await handler.handle(command, options);
     }
     /**
      * Handle a Request Certificate Command from the SDK.
      */
-    async requestCertificate(cmd) {
+    async requestCertificate(command, options) {
         const handler = new RequestCertificateCommandHandler({
             accountRegionScope: this.accountRegionScope,
             certificates: this.certificates,
+            iam: this.iam,
             background: this.background,
         });
-        return await handler.handle(cmd);
+        return await handler.handle(command, options);
     }
     /**
      * Get this service's CloudFormation Resource factory.
@@ -56,5 +64,11 @@ export class SimAcm {
     cfnResourceFactory() {
         return this.cfnFactory;
     }
+    /**
+     * Get this service's SDK Command router for SDK client interception.
+     */
+    sdkCommandRouter() {
+        return this.sdkRouter;
+    }
 }
 //# sourceMappingURL=sim-acm.js.map

package/dist/service/acm/sim-acm.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-acm.js","sourceRoot":"","sources":["../../../src/service/acm/sim-acm.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,eAAe,GAChB,MAAM,qCAAqC,CAAC;AAO7C,OAAO,EAAE,gCAAgC,EAAE,MAAM,8DAA8D,CAAC;AAMhH,OAAO,EAAE,iCAAiC,EAAE,MAAM,gEAAgE,CAAC;AAKnH,OAAO,EAAE,8BAA8B,EAAE,MAAM,0DAA0D,CAAC;AAC1G,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AACjF,OAAO,EAAE,+BAA+B,EAAE,MAAM,gDAAgD,CAAC;AAOjG;;GAEG;AACH,MAAM,OAAO,MAAM;IACD,YAAY,GAAG,IAAI,GAAG,EAA6B,CAAC;IAEnD,kBAAkB,CAA2B;IAC7C,UAAU,CAAsB;IAChC,UAAU,GAAG,IAAI,wBAAwB,CAAC;QACzD,GAAG,EAAE,IAAI;KACV,CAAC,CAAC;IAEH,YAAY,KAAK,GAAgB,EAAE;QACjC,MAAM,EACJ,kBAAkB,GAAG,+BAA+B,CAAC,IAAI,EAAE,EAC3D,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,KAAK,CAAC;QAEV,IAAI,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;QAC7C,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB,CACvB,GAAkC;QAElC,MAAM,OAAO,GAAG,IAAI,iCAAiC,CAAC;YACpD,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CACpB,GAA+B;QAE/B,MAAM,OAAO,GAAG,IAAI,8BAA8B,CAAC;YACjD,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CACtB,GAAiC;QAEjC,MAAM,OAAO,GAAG,IAAI,gCAAgC,CAAC;YACnD,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;CACF"}
+{"version":3,"file":"sim-acm.js","sourceRoot":"","sources":["../../../src/service/acm/sim-acm.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,eAAe,GAChB,MAAM,qCAAqC,CAAC;AAO7C,OAAO,EAAE,gCAAgC,EAAE,MAAM,8DAA8D,CAAC;AAMhH,OAAO,EAAE,iCAAiC,EAAE,MAAM,gEAAgE,CAAC;AAKnH,OAAO,EAAE,8BAA8B,EAAE,MAAM,0DAA0D,CAAC;AAC1G,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AACjF,OAAO,EAAE,+BAA+B,EAAE,MAAM,gDAAgD,CAAC;AAEjG,OAAO,EACL,kBAAkB,GAEnB,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAa7E;;GAEG;AACH,MAAM,OAAO,MAAM;IACD,YAAY,GAAG,IAAI,GAAG,EAA6B,CAAC;IAEnD,kBAAkB,CAA2B;IAC7C,GAAG,CAA0B;IAC7B,UAAU,CAAsB;IAChC,UAAU,GAAG,IAAI,wBAAwB,CAAC;QACzD,GAAG,EAAE,IAAI;KACV,CAAC,CAAC;IACc,SAAS,GAAG,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAE9D,YAAY,UAAU,GAAqB,EAAE;QAC3C,MAAM,EACJ,kBAAkB,GAAG,+BAA+B,CAAC,IAAI,EAAE,EAC3D,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,UAAU,CAAC;QAEf,IAAI,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;QAC7C,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB,CACvB,OAAsC,EACtC,OAA8B;QAE9B,MAAM,OAAO,GAAG,IAAI,iCAAiC,CAAC;YACpD,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CACpB,OAAmC,EACnC,OAA8B;QAE9B,MAAM,OAAO,GAAG,IAAI,8BAA8B,CAAC;YACjD,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CACtB,OAAqC,EACrC,OAA8B;QAE9B,MAAM,OAAO,GAAG,IAAI,gCAAgC,CAAC;YACnD,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,gBAAgB;QACd,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;CACF"}

package/dist/service/aws/caller/sim-aws-run-as-context.d.ts

@@ -0,0 +1,39 @@
+import type { SimAwsPrincipal } from "./sim-aws-caller.js";
+/**
+ * The SimAws instance an ambient caller belongs to.
+ *
+ * Each SimAws instance is its own isolated simulated AWS universe, with its
+ * own Accounts and IAM state, so ambient callers are tracked per instance: a
+ * caller only has meaning within the SimAws it was set for, and a run-as on
+ * one SimAws never affects what another SimAws observes. The owner is typed
+ * as a bare object because only its identity is used, as a key; this also
+ * keeps this module free of a runtime SimAws dependency.
+ */
+export type SimAwsRunAsOwner = object;
+/**
+ * Ambient simulated caller context, tracked with Node.js asynchronous context
+ * tracking.
+ *
+ * The caller is the simulated principal, such as an IAM Role, that simulated
+ * AWS operations are attributed to while the run executes: the simulated
+ * answer to "who is making these AWS calls?". It is ambient in that it
+ * applies to everything called during the run, without being passed
+ * explicitly.
+ *
+ * Callers are keyed by owning SimAws instance. Nested runs stack: the
+ * innermost caller wins for its own SimAws, a run for a different SimAws
+ * leaves this one's caller visible throughout, and each SimAws gets its
+ * previous caller back when a nested run completes.
+ */
+export declare const simAwsRunAsContext: {
+    /**
+     * Run a function with an ambient caller for one owning SimAws instance.
+     */
+    run<T>(owner: SimAwsRunAsOwner, caller: SimAwsPrincipal, run: () => Promise<T>): Promise<T>;
+    /**
+     * Get the current ambient caller for one owning SimAws instance, if a run
+     * is active for it.
+     */
+    currentCaller(owner: SimAwsRunAsOwner): SimAwsPrincipal | undefined;
+};
+//# sourceMappingURL=sim-aws-run-as-context.d.ts.map

package/dist/service/aws/caller/sim-aws-run-as-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-aws-run-as-context.d.ts","sourceRoot":"","sources":["../../../../src/service/aws/caller/sim-aws-run-as-context.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D;;;;;;;;;GASG;AACH,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAStC;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,kBAAkB;IAC7B;;OAEG;IACG,GAAG,CAAC,CAAC,SACF,gBAAgB,UACf,eAAe,OAClB,MAAM,OAAO,CAAC,CAAC,CAAC,GACpB,OAAO,CAAC,CAAC,CAAC;IAMb;;;OAGG;IACH,aAAa,QAAQ,gBAAgB,GAAG,eAAe,GAAG,SAAS;CAGpE,CAAC"}

package/dist/service/aws/caller/sim-aws-run-as-context.js

@@ -0,0 +1,35 @@
+import { AsyncLocalStorage } from "node:async_hooks";
+const storage = new AsyncLocalStorage();
+/**
+ * Ambient simulated caller context, tracked with Node.js asynchronous context
+ * tracking.
+ *
+ * The caller is the simulated principal, such as an IAM Role, that simulated
+ * AWS operations are attributed to while the run executes: the simulated
+ * answer to "who is making these AWS calls?". It is ambient in that it
+ * applies to everything called during the run, without being passed
+ * explicitly.
+ *
+ * Callers are keyed by owning SimAws instance. Nested runs stack: the
+ * innermost caller wins for its own SimAws, a run for a different SimAws
+ * leaves this one's caller visible throughout, and each SimAws gets its
+ * previous caller back when a nested run completes.
+ */
+export const simAwsRunAsContext = {
+    /**
+     * Run a function with an ambient caller for one owning SimAws instance.
+     */
+    async run(owner, caller, run) {
+        const callers = new Map(storage.getStore());
+        callers.set(owner, caller);
+        return await storage.run(callers, run);
+    },
+    /**
+     * Get the current ambient caller for one owning SimAws instance, if a run
+     * is active for it.
+     */
+    currentCaller(owner) {
+        return storage.getStore()?.get(owner);
+    },
+};
+//# sourceMappingURL=sim-aws-run-as-context.js.map

package/dist/service/aws/caller/sim-aws-run-as-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-aws-run-as-context.js","sourceRoot":"","sources":["../../../../src/service/aws/caller/sim-aws-run-as-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAoBrD,MAAM,OAAO,GAAG,IAAI,iBAAiB,EAAsB,CAAC;AAE5D;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC;;OAEG;IACH,KAAK,CAAC,GAAG,CACP,KAAuB,EACvB,MAAuB,EACvB,GAAqB;QAErB,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC3B,OAAO,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACzC,CAAC;IAED;;;OAGG;IACH,aAAa,CAAC,KAAuB;QACnC,OAAO,OAAO,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC;CACF,CAAC"}

package/dist/service/aws/factory/sim-aws-account-service-cache.d.ts

@@ -7,7 +7,7 @@ import { SimRoute53 } from "../../route53/index.js";
 import type { SimRoute53Registry } from "../../route53/registry/sim-route53-registry.js";
 import { SimIam } from "../../iam/index.js";
 import type { SimIamRegistry } from "../../iam/registry/sim-iam-registry.js";
-interface SimAwsAccountServiceCacheProps {
+interface SimAwsAccountServiceCacheProperties {
     readonly simAws: SimAws;
     readonly background: BackgroundScheduler & BackgroundCompleter;
     readonly cloudFrontRegistry: SimCloudFrontRegistry;
@@ -48,7 +48,7 @@ export declare class SimAwsAccountServiceCache {
      * in the same account from colliding in this single memo.
      */
     private readonly services;
-    constructor(props: SimAwsAccountServiceCacheProps);
+    constructor(properties: SimAwsAccountServiceCacheProperties);
     /**
      * Create or get simulated CloudFront for an Account scope.
      */

package/dist/service/aws/factory/sim-aws-account-service-cache.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-account-service-cache.d.ts","sourceRoot":"","sources":["../../../../src/service/aws/factory/sim-aws-account-service-cache.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,wCAAwC,CAAC;AAChD,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,oCAAoC,CAAC;AACvF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uDAAuD,CAAC;AAEnG,OAAO,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AACzF,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAI7E,UAAU,8BAA8B;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,mBAAmB,GAAG,mBAAmB,CAAC;IAC/D,QAAQ,CAAC,kBAAkB,EAAE,qBAAqB,CAAC;IACnD,QAAQ,CAAC,eAAe,EAAE,kBAAkB,CAAC;IAC7C,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAC;CACtC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA4C;IACvE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAwB;IAC3D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAiB;IAC7C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAqB;IAErD;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmD;IAE5E,YAAY,KAAK,EAAE,8BAA8B,EAMhD;IAED;;OAEG;IACH,gBAAgB,CAAC,KAAK,EAAE,4BAA4B,GAAG,aAAa,CAWnE;IAED;;OAEG;IACH,SAAS,CAAC,KAAK,EAAE,4BAA4B,GAAG,MAAM,CAUrD;IAED;;OAEG;IACH,aAAa,CAAC,KAAK,EAAE,4BAA4B,GAAG,UAAU,CAS7D;CACF"}
+{"version":3,"file":"sim-aws-account-service-cache.d.ts","sourceRoot":"","sources":["../../../../src/service/aws/factory/sim-aws-account-service-cache.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,wCAAwC,CAAC;AAChD,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,oCAAoC,CAAC;AACvF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uDAAuD,CAAC;AAEnG,OAAO,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AACzF,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAI7E,UAAU,mCAAmC;IAC3C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,mBAAmB,GAAG,mBAAmB,CAAC;IAC/D,QAAQ,CAAC,kBAAkB,EAAE,qBAAqB,CAAC;IACnD,QAAQ,CAAC,eAAe,EAAE,kBAAkB,CAAC;IAC7C,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAC;CACtC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA4C;IACvE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAwB;IAC3D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAiB;IAC7C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAqB;IAErD;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmD;IAE5E,YAAY,UAAU,EAAE,mCAAmC,EAM1D;IAED;;OAEG;IACH,gBAAgB,CAAC,KAAK,EAAE,4BAA4B,GAAG,aAAa,CAcnE;IAED;;OAEG;IACH,SAAS,CAAC,KAAK,EAAE,4BAA4B,GAAG,MAAM,CAcrD;IAED;;OAEG;IACH,aAAa,CAAC,KAAK,EAAE,4BAA4B,GAAG,UAAU,CAY7D;CACF"}

package/dist/service/aws/factory/sim-aws-account-service-cache.js

@@ -38,21 +38,23 @@ export class SimAwsAccountServiceCache {
      * in the same account from colliding in this single memo.
      */
     services = new Memo();
-    constructor(props) {
-        this.simAws = props.simAws;
-        this.background = props.background;
-        this.cloudFrontRegistry = props.cloudFrontRegistry;
-        this.iamRegistry = props.iamRegistry;
-        this.route53Registry = props.route53Registry;
+    constructor(properties) {
+        this.simAws = properties.simAws;
+        this.background = properties.background;
+        this.cloudFrontRegistry = properties.cloudFrontRegistry;
+        this.iamRegistry = properties.iamRegistry;
+        this.route53Registry = properties.route53Registry;
     }
     /**
      * Create or get simulated CloudFront for an Account scope.
      */
     createCloudFront(scope) {
+        const iam = this.createIam(scope);
         return this.services.getOrCreate(accountServiceCacheKey("cloudFront", scope.accountRegionScope.accountId), () => new SimCloudFront({
             accountRegionScope: scope.accountRegionScope,
             cloudFrontRegistry: this.cloudFrontRegistry,
             s3OriginResolver: makeSimCfS3OriginResolver(this.simAws, scope),
+            iam,
             background: this.background,
         }));
     }
@@ -60,17 +62,22 @@ export class SimAwsAccountServiceCache {
      * Create or get simulated IAM for an Account scope.
      */
     createIam(scope) {
-        return this.services.getOrCreate(accountServiceCacheKey("iam", scope.accountRegionScope.accountId), () => new SimIam({
-            accountRegionScope: scope.accountRegionScope,
-            background: this.background,
-            iamRegistry: this.iamRegistry,
-        }));
+        return this.services.getOrCreate(accountServiceCacheKey("iam", scope.accountRegionScope.accountId), () => {
+            const iam = new SimIam({
+                accountRegionScope: scope.accountRegionScope,
+                background: this.background,
+            });
+            this.iamRegistry.register(scope.accountRegionScope.accountId, iam);
+            return iam;
+        });
     }
     /**
      * Create or get simulated Route53 for an Account scope.
      */
     createRoute53(scope) {
+        const iam = this.createIam(scope);
         return this.services.getOrCreate(accountServiceCacheKey("route53", scope.accountRegionScope.accountId), () => new SimRoute53({
+            iam,
             background: this.background,
             route53Registry: this.route53Registry,
         }));

package/dist/service/aws/factory/sim-aws-account-service-cache.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-account-service-cache.js","sourceRoot":"","sources":["../../../../src/service/aws/factory/sim-aws-account-service-cache.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,yBAAyB,EAAE,MAAM,iEAAiE,CAAC;AAC5G,OAAO,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEpD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,OAAO,EAAE,IAAI,EAAE,MAAM,4BAA4B,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAUxE;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,OAAO,yBAAyB;IACnB,MAAM,CAAS;IACf,UAAU,CAA4C;IACtD,kBAAkB,CAAwB;IAC1C,WAAW,CAAiB;IAC5B,eAAe,CAAqB;IAErD;;;;;;OAMG;IACc,QAAQ,GAAG,IAAI,IAAI,EAAuC,CAAC;IAE5E,YAAY,KAAqC;QAC/C,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;QACnC,IAAI,CAAC,kBAAkB,GAAG,KAAK,CAAC,kBAAkB,CAAC;QACnD,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;QACrC,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC,eAAe,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,KAAmC;QAClD,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAC9B,sBAAsB,CAAC,YAAY,EAAE,KAAK,CAAC,kBAAkB,CAAC,SAAS,CAAC,EACxE,GAAG,EAAE,CACH,IAAI,aAAa,CAAC;YAChB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,gBAAgB,EAAE,yBAAyB,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC;YAC/D,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CACL,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,KAAmC;QAC3C,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAC9B,sBAAsB,CAAC,KAAK,EAAE,KAAK,CAAC,kBAAkB,CAAC,SAAS,CAAC,EACjE,GAAG,EAAE,CACH,IAAI,MAAM,CAAC;YACT,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B,CAAC,CACL,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,KAAmC;QAC/C,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAC9B,sBAAsB,CAAC,SAAS,EAAE,KAAK,CAAC,kBAAkB,CAAC,SAAS,CAAC,EACrE,GAAG,EAAE,CACH,IAAI,UAAU,CAAC;YACb,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,eAAe,EAAE,IAAI,CAAC,eAAe;SACtC,CAAC,CACL,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-aws-account-service-cache.js","sourceRoot":"","sources":["../../../../src/service/aws/factory/sim-aws-account-service-cache.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,yBAAyB,EAAE,MAAM,iEAAiE,CAAC;AAC5G,OAAO,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEpD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,OAAO,EAAE,IAAI,EAAE,MAAM,4BAA4B,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAUxE;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,OAAO,yBAAyB;IACnB,MAAM,CAAS;IACf,UAAU,CAA4C;IACtD,kBAAkB,CAAwB;IAC1C,WAAW,CAAiB;IAC5B,eAAe,CAAqB;IAErD;;;;;;OAMG;IACc,QAAQ,GAAG,IAAI,IAAI,EAAuC,CAAC;IAE5E,YAAY,UAA+C;QACzD,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;QACxD,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,eAAe,GAAG,UAAU,CAAC,eAAe,CAAC;IACpD,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,KAAmC;QAClD,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAElC,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAC9B,sBAAsB,CAAC,YAAY,EAAE,KAAK,CAAC,kBAAkB,CAAC,SAAS,CAAC,EACxE,GAAG,EAAE,CACH,IAAI,aAAa,CAAC;YAChB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,gBAAgB,EAAE,yBAAyB,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC;YAC/D,GAAG;YACH,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CACL,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,KAAmC;QAC3C,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAC9B,sBAAsB,CAAC,KAAK,EAAE,KAAK,CAAC,kBAAkB,CAAC,SAAS,CAAC,EACjE,GAAG,EAAE;YACH,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC;gBACrB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;gBAC5C,UAAU,EAAE,IAAI,CAAC,UAAU;aAC5B,CAAC,CAAC;YAEH,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,kBAAkB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;YAEnE,OAAO,GAAG,CAAC;QACb,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,KAAmC;QAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAElC,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAC9B,sBAAsB,CAAC,SAAS,EAAE,KAAK,CAAC,kBAAkB,CAAC,SAAS,CAAC,EACrE,GAAG,EAAE,CACH,IAAI,UAAU,CAAC;YACb,GAAG;YACH,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,eAAe,EAAE,IAAI,CAAC,eAAe;SACtC,CAAC,CACL,CAAC;IACJ,CAAC;CACF"}