@kensio/yulin 0.32.0 → 0.34.0

package/dist/service/dynamodb/table/dynamodb-key-schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dynamodb-key-schema.d.ts","sourceRoot":"","sources":["../../../../src/service/dynamodb/table/dynamodb-key-schema.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,KAAK,EACV,0BAA0B,EAG3B,MAAM,6CAA6C,CAAC;AAGrD,KAAK,WAAW,GAAG,MAAM,GAAG,MAAM,CAAC;AAOnC;;GAEG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAS;IAC9C,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAqB;IAE3D,YAAY,gBAAgB,EAAE,0BAA0B,EAMvD;IAED,OAAO,CAAC,wBAAwB;IAWhC,OAAO,CAAC,gBAAgB;IAaxB;;OAEG;IACH,WAAW,CAAC,IAAI,EAAE,YAAY,GAAG,MAAM,CAiCtC;IAED;;OAEG;IACH,MAAM,CAAC,gBAAgB,CAAC,KAAK,EAAE,gBAAgB,GAAG,KAAK,IAAI,WAAW,CAErE;CACF"}
+{"version":3,"file":"dynamodb-key-schema.d.ts","sourceRoot":"","sources":["../../../../src/service/dynamodb/table/dynamodb-key-schema.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,IAAI,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AACnF,OAAO,KAAK,EACV,0BAA0B,EAG3B,MAAM,6CAA6C,CAAC;AAWrD;;GAEG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAS;IAC9C,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAqB;IAE3D,YAAY,gBAAgB,EAAE,0BAA0B,EAMvD;IAED;;OAEG;IACH,WAAW,CAAC,IAAI,EAAE,kBAAkB,GAAG,MAAM,CAiC5C;IAED;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAMxB,OAAO,CAAC,wBAAwB;IAWhC,OAAO,CAAC,gBAAgB;CAYzB"}

package/dist/service/dynamodb/table/dynamodb-key-schema.js

@@ -12,45 +12,45 @@ export class DynamoDbKeySchema {
         const rangeKey = this.keySchemaElement(createTableInput, "RANGE");
         this.rangeKeyAttributeName = rangeKey?.AttributeName;
     }
-    requiredKeySchemaElement(createTableInput, keyType) {
-        const keySchemaElement = this.keySchemaElement(createTableInput, keyType);
-        assertDefined(keySchemaElement, `DynamoDB Table ${keyType} key schema`);
-        return keySchemaElement;
-    }
-    keySchemaElement(createTableInput, keyType) {
-        return createTableInput.KeySchema?.find((keySchemaElement) => keySchemaElement.KeyType === keyType &&
-            keySchemaElement.AttributeName !== undefined);
-    }
     /**
      * Make a primary key string for an item based on this key schema.
      */
     makeItemKey(item) {
-        const partitionKeyAttr = item.attributes[this.hashKeyAttributeName];
-        assertDefined(partitionKeyAttr, `DynamoDB Item partition key ${this.hashKeyAttributeName} required`);
-        const partitionKey = partitionKeyAttr.value;
-        if (!DynamoDbKeySchema.canBeDynamoDbKey(partitionKey)) {
+        const partitionKeyAttribute = item.attributes[this.hashKeyAttributeName];
+        assertDefined(partitionKeyAttribute, `DynamoDB Item partition key ${this.hashKeyAttributeName} required`);
+        const partitionKey = partitionKeyAttribute.value;
+        if (!this.canBeDynamoDbKey(partitionKey)) {
             throw new TypeError(`DynamoDB Item partition key ${this.hashKeyAttributeName} must be string or number`);
         }
         const keyParts = {
             [this.hashKeyAttributeName]: partitionKey,
         };
         if (this.rangeKeyAttributeName !== undefined) {
-            const sortKeyAttr = item.attributes[this.rangeKeyAttributeName];
-            if (sortKeyAttr === undefined) {
+            const sortKeyAttribute = item.attributes[this.rangeKeyAttributeName];
+            if (sortKeyAttribute === undefined) {
                 throw new TypeError(`DynamoDB Item sort key ${this.rangeKeyAttributeName} is undefined`);
             }
-            if (!DynamoDbKeySchema.canBeDynamoDbKey(sortKeyAttr.value)) {
+            if (!this.canBeDynamoDbKey(sortKeyAttribute.value)) {
                 throw new TypeError(`DynamoDB Item sort key ${this.rangeKeyAttributeName} must be string or number`);
             }
-            keyParts[this.rangeKeyAttributeName] = sortKeyAttr.value;
+            keyParts[this.rangeKeyAttributeName] = sortKeyAttribute.value;
         }
         return jsonStringify(keyParts);
     }
     /**
      * Check if a given value can be used as a DynamoDB partition key or sort key.
      */
-    static canBeDynamoDbKey(value) {
+    canBeDynamoDbKey(value) {
         return typeof value === "string" || typeof value === "number";
     }
+    requiredKeySchemaElement(createTableInput, keyType) {
+        const keySchemaElement = this.keySchemaElement(createTableInput, keyType);
+        assertDefined(keySchemaElement, `DynamoDB Table ${keyType} key schema`);
+        return keySchemaElement;
+    }
+    keySchemaElement(createTableInput, keyType) {
+        return createTableInput.KeySchema?.find((keySchemaElement) => keySchemaElement.KeyType === keyType &&
+            keySchemaElement.AttributeName !== undefined);
+    }
 }
 //# sourceMappingURL=dynamodb-key-schema.js.map

package/dist/service/dynamodb/table/dynamodb-key-schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"dynamodb-key-schema.js","sourceRoot":"","sources":["../../../../src/service/dynamodb/table/dynamodb-key-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAQpE,OAAO,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AASjE;;GAEG;AACH,MAAM,OAAO,iBAAiB;IACX,oBAAoB,CAAS;IAC7B,qBAAqB,CAAqB;IAE3D,YAAY,gBAA4C;QACtD,MAAM,OAAO,GAAG,IAAI,CAAC,wBAAwB,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;QACxE,IAAI,CAAC,oBAAoB,GAAG,OAAO,CAAC,aAAa,CAAC;QAElD,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;QAClE,IAAI,CAAC,qBAAqB,GAAG,QAAQ,EAAE,aAAa,CAAC;IACvD,CAAC;IAEO,wBAAwB,CAC9B,gBAA4C,EAC5C,OAA2B;QAE3B,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;QAE1E,aAAa,CAAC,gBAAgB,EAAE,kBAAkB,OAAO,aAAa,CAAC,CAAC;QAExE,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAEO,gBAAgB,CACtB,gBAA4C,EAC5C,OAA2B;QAE3B,OAAO,gBAAgB,CAAC,SAAS,EAAE,IAAI,CACrC,CACE,gBAAgB,EACyC,EAAE,CAC3D,gBAAgB,CAAC,OAAO,KAAK,OAAO;YACpC,gBAAgB,CAAC,aAAa,KAAK,SAAS,CAC/C,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,IAAkB;QAC5B,MAAM,gBAAgB,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACpE,aAAa,CACX,gBAAgB,EAChB,+BAA+B,IAAI,CAAC,oBAAoB,WAAW,CACpE,CAAC;QACF,MAAM,YAAY,GAAG,gBAAgB,CAAC,KAAK,CAAC;QAC5C,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,YAAY,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,SAAS,CACjB,+BAA+B,IAAI,CAAC,oBAAoB,2BAA2B,CACpF,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAgC;YAC5C,CAAC,IAAI,CAAC,oBAAoB,CAAC,EAAE,YAAY;SAC1C,CAAC;QAEF,IAAI,IAAI,CAAC,qBAAqB,KAAK,SAAS,EAAE,CAAC;YAC7C,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;YAChE,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;gBAC9B,MAAM,IAAI,SAAS,CACjB,0BAA0B,IAAI,CAAC,qBAAqB,eAAe,CACpE,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3D,MAAM,IAAI,SAAS,CACjB,0BAA0B,IAAI,CAAC,qBAAqB,2BAA2B,CAChF,CAAC;YACJ,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,qBAAqB,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC;QAC3D,CAAC;QAED,OAAO,aAAa,CAAC,QAAQ,CAAC,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,gBAAgB,CAAC,KAAuB;QAC7C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC;IAChE,CAAC;CACF"}
+{"version":3,"file":"dynamodb-key-schema.js","sourceRoot":"","sources":["../../../../src/service/dynamodb/table/dynamodb-key-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAQpE,OAAO,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AAUjE;;GAEG;AACH,MAAM,OAAO,iBAAiB;IACX,oBAAoB,CAAS;IAC7B,qBAAqB,CAAqB;IAE3D,YAAY,gBAA4C;QACtD,MAAM,OAAO,GAAG,IAAI,CAAC,wBAAwB,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;QACxE,IAAI,CAAC,oBAAoB,GAAG,OAAO,CAAC,aAAa,CAAC;QAElD,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;QAClE,IAAI,CAAC,qBAAqB,GAAG,QAAQ,EAAE,aAAa,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,IAAwB;QAClC,MAAM,qBAAqB,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACzE,aAAa,CACX,qBAAqB,EACrB,+BAA+B,IAAI,CAAC,oBAAoB,WAAW,CACpE,CAAC;QACF,MAAM,YAAY,GAAG,qBAAqB,CAAC,KAAK,CAAC;QACjD,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,SAAS,CACjB,+BAA+B,IAAI,CAAC,oBAAoB,2BAA2B,CACpF,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAsC;YAClD,CAAC,IAAI,CAAC,oBAAoB,CAAC,EAAE,YAAY;SAC1C,CAAC;QAEF,IAAI,IAAI,CAAC,qBAAqB,KAAK,SAAS,EAAE,CAAC;YAC7C,MAAM,gBAAgB,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;YACrE,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;gBACnC,MAAM,IAAI,SAAS,CACjB,0BAA0B,IAAI,CAAC,qBAAqB,eAAe,CACpE,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;gBACnD,MAAM,IAAI,SAAS,CACjB,0BAA0B,IAAI,CAAC,qBAAqB,2BAA2B,CAChF,CAAC;YACJ,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,qBAAqB,CAAC,GAAG,gBAAgB,CAAC,KAAK,CAAC;QAChE,CAAC;QAED,OAAO,aAAa,CAAC,QAAQ,CAAC,CAAC;IACjC,CAAC;IAED;;OAEG;IACK,gBAAgB,CACtB,KAA4B;QAE5B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC;IAChE,CAAC;IAEO,wBAAwB,CAC9B,gBAA4C,EAC5C,OAAiC;QAEjC,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;QAE1E,aAAa,CAAC,gBAAgB,EAAE,kBAAkB,OAAO,aAAa,CAAC,CAAC;QAExE,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAEO,gBAAgB,CACtB,gBAA4C,EAC5C,OAAiC;QAEjC,OAAO,gBAAgB,CAAC,SAAS,EAAE,IAAI,CACrC,CACE,gBAAgB,EAC+C,EAAE,CACjE,gBAAgB,CAAC,OAAO,KAAK,OAAO;YACpC,gBAAgB,CAAC,aAAa,KAAK,SAAS,CAC/C,CAAC;IACJ,CAAC;CACF"}

package/dist/service/dynamodb/table/dynamodb-table-create-input.d.ts

@@ -1,6 +1,6 @@
 import type { SimCreateTableCommand } from "../command/create-table/create-table.cmd.js";
-import { DynamoDbKeySchema } from "./dynamodb-key-schema.js";
-import type { DynamoDbTableName } from "./sim-dynamodb-table.js";
+import { DynamoDbKeySchema as DynamoDatabaseKeySchema } from "./dynamodb-key-schema.js";
+import type { DynamoDbTableName as DynamoDatabaseTableName } from "./sim-dynamodb-table.js";
 /**
  * Extract and validate DynamoDB table creation input.
  */
@@ -10,10 +10,10 @@ export declare class DynamoDbTableCreateInput {
     /**
      * Extract the table name.
      */
-    tableName(): DynamoDbTableName;
+    tableName(): DynamoDatabaseTableName;
     /**
      * Build the key schema.
      */
-    keySchema(): DynamoDbKeySchema;
+    keySchema(): DynamoDatabaseKeySchema;
 }
 //# sourceMappingURL=dynamodb-table-create-input.d.ts.map

package/dist/service/dynamodb/table/dynamodb-table-create-input.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dynamodb-table-create-input.d.ts","sourceRoot":"","sources":["../../../../src/service/dynamodb/table/dynamodb-table-create-input.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,6CAA6C,CAAC;AACzF,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAEjE;;GAEG;AACH,qBAAa,wBAAwB;IACvB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAA1C,YAA6B,aAAa,EAAE,qBAAqB,EAEhE;IAED;;OAEG;IACH,SAAS,IAAI,iBAAiB,CAO7B;IAED;;OAEG;IACH,SAAS,IAAI,iBAAiB,CAS7B;CACF"}
+{"version":3,"file":"dynamodb-table-create-input.d.ts","sourceRoot":"","sources":["../../../../src/service/dynamodb/table/dynamodb-table-create-input.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,6CAA6C,CAAC;AACzF,OAAO,EAAE,iBAAiB,IAAI,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AACxF,OAAO,KAAK,EAAE,iBAAiB,IAAI,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAE5F;;GAEG;AACH,qBAAa,wBAAwB;IACvB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAA1C,YAA6B,aAAa,EAAE,qBAAqB,EAEhE;IAED;;OAEG;IACH,SAAS,IAAI,uBAAuB,CAOnC;IAED;;OAEG;IACH,SAAS,IAAI,uBAAuB,CASnC;CACF"}

package/dist/service/dynamodb/table/dynamodb-table-create-input.js

@@ -1,5 +1,5 @@
 import { assertDefined } from "../../../util/type-guard/defined.js";
-import { DynamoDbKeySchema } from "./dynamodb-key-schema.js";
+import { DynamoDbKeySchema as DynamoDatabaseKeySchema } from "./dynamodb-key-schema.js";
 /**
  * Extract and validate DynamoDB table creation input.
  */
@@ -24,7 +24,7 @@ export class DynamoDbTableCreateInput {
             this.createCommand.input.KeySchema.length === 0) {
             throw new Error("Table KeySchema is not defined");
         }
-        return new DynamoDbKeySchema(this.createCommand.input);
+        return new DynamoDatabaseKeySchema(this.createCommand.input);
     }
 }
 //# sourceMappingURL=dynamodb-table-create-input.js.map

package/dist/service/dynamodb/table/dynamodb-table-create-input.js.map

@@ -1 +1 @@
-{"version":3,"file":"dynamodb-table-create-input.js","sourceRoot":"","sources":["../../../../src/service/dynamodb/table/dynamodb-table-create-input.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAEpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAG7D;;GAEG;AACH,MAAM,OAAO,wBAAwB;IACN,aAAa;IAA1C,YAA6B,aAAoC;6BAApC,aAAa;QACxC,EAAE;IACJ,CAAC;IAED;;OAEG;IACH,SAAS;QACP,aAAa,CACX,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,EAClC,+BAA+B,CAChC,CAAC;QAEF,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,SAA8B,CAAC;IACjE,CAAC;IAED;;OAEG;IACH,SAAS;QACP,IACE,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS;YAChD,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAC/C,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,CAAC;QAED,OAAO,IAAI,iBAAiB,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IACzD,CAAC;CACF"}
+{"version":3,"file":"dynamodb-table-create-input.js","sourceRoot":"","sources":["../../../../src/service/dynamodb/table/dynamodb-table-create-input.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAEpE,OAAO,EAAE,iBAAiB,IAAI,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAGxF;;GAEG;AACH,MAAM,OAAO,wBAAwB;IACN,aAAa;IAA1C,YAA6B,aAAoC;6BAApC,aAAa;QACxC,EAAE;IACJ,CAAC;IAED;;OAEG;IACH,SAAS;QACP,aAAa,CACX,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,EAClC,+BAA+B,CAChC,CAAC;QAEF,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,SAAoC,CAAC;IACvE,CAAC;IAED;;OAEG;IACH,SAAS;QACP,IACE,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS;YAChD,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAC/C,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,CAAC;QAED,OAAO,IAAI,uBAAuB,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IAC/D,CAAC;CACF"}

package/dist/service/dynamodb/table/sim-dynamodb-table.d.ts

@@ -1,10 +1,10 @@
 import type { Brand } from "../../../util/brand.type.js";
 import { type SimArn, type SimArnComponents } from "../../aws/arn.js";
-import type { DynamoDbItem } from "../item/dynamodb-item.js";
+import type { DynamoDbItem as DynamoDatabaseItem } from "../item/dynamodb-item.js";
 import { type BackgroundScheduler } from "../../../util/background/background.js";
-import type { SimCreateTableCommand, SimDynamoDbTableStatus } from "../command/create-table/create-table.cmd.js";
+import type { SimCreateTableCommand, SimDynamoDbTableStatus as SimDynamoDatabaseTableStatus } from "../command/create-table/create-table.cmd.js";
 export type DynamoDbTableName = Brand<string, "DynamoDbTableName">;
-interface SimDynamoDbTableProps {
+interface SimDynamoDatabaseTableProperties {
     readonly createCommand: SimCreateTableCommand;
     readonly arn?: SimArn;
     readonly background?: BackgroundScheduler;
@@ -19,7 +19,7 @@ export declare class SimDynamoDbTable {
     readonly arn: SimArn;
     private readonly background;
     private readonly items;
-    constructor(props: SimDynamoDbTableProps);
+    constructor(properties: SimDynamoDatabaseTableProperties);
     /**
      * Simulate the table entering ACTIVE status.
      */
@@ -27,11 +27,11 @@ export declare class SimDynamoDbTable {
     /**
      * Get the current table status.
      */
-    get status(): SimDynamoDbTableStatus;
+    get status(): SimDynamoDatabaseTableStatus;
     /**
      * Put an item into the table.
      */
-    putItem(item: DynamoDbItem): Promise<void>;
+    putItem(item: DynamoDatabaseItem): Promise<void>;
 }
 /**
  * Generate a fake simulated DynamoDB Table ARN.

package/dist/service/dynamodb/table/sim-dynamodb-table.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-dynamodb-table.d.ts","sourceRoot":"","sources":["../../../../src/service/dynamodb/table/sim-dynamodb-table.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,EAEL,KAAK,MAAM,EACX,KAAK,gBAAgB,EACtB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,wCAAwC,CAAC;AAChD,OAAO,KAAK,EACV,qBAAqB,EACrB,sBAAsB,EACvB,MAAM,6CAA6C,CAAC;AAGrD,MAAM,MAAM,iBAAiB,GAAG,KAAK,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;AAEnE,UAAU,qBAAqB;IAC7B,QAAQ,CAAC,aAAa,EAAE,qBAAqB,CAAC;IAC9C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED;;GAEG;AACH,qBAAa,gBAAgB;;IAC3B,SAAgB,gBAAgB,EAAE,IAAI,CAAC;IAEvC,SAAgB,SAAS,EAAE,iBAAiB,CAAC;IAC7C,SAAgB,GAAG,EAAE,MAAM,CAAC;IAE5B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAIjD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAmC;IAEzD,YAAY,KAAK,EAAE,qBAAqB,EAcvC;IAED;;OAEG;IACH,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAGxB;IAED;;OAEG;IACH,IAAW,MAAM,IAAI,sBAAsB,CAE1C;IAED;;OAEG;IACI,OAAO,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAOhD;CACF;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CACrC,SAAS,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,SAAS,GAAG,cAAc,CAAC,GACzE,MAAM,CAMR"}
+{"version":3,"file":"sim-dynamodb-table.d.ts","sourceRoot":"","sources":["../../../../src/service/dynamodb/table/sim-dynamodb-table.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,EAEL,KAAK,MAAM,EACX,KAAK,gBAAgB,EACtB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,KAAK,EAAE,YAAY,IAAI,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AACnF,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,wCAAwC,CAAC;AAChD,OAAO,KAAK,EACV,qBAAqB,EACrB,sBAAsB,IAAI,4BAA4B,EACvD,MAAM,6CAA6C,CAAC;AAGrD,MAAM,MAAM,iBAAiB,GAAG,KAAK,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;AAEnE,UAAU,gCAAgC;IACxC,QAAQ,CAAC,aAAa,EAAE,qBAAqB,CAAC;IAC9C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED;;GAEG;AACH,qBAAa,gBAAgB;;IAC3B,SAAgB,gBAAgB,EAAE,IAAI,CAAC;IAEvC,SAAgB,SAAS,EAAE,iBAAiB,CAAC;IAC7C,SAAgB,GAAG,EAAE,MAAM,CAAC;IAE5B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAIjD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAyC;IAE/D,YAAY,UAAU,EAAE,gCAAgC,EAcvD;IAED;;OAEG;IACH,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAGxB;IAED;;OAEG;IACH,IAAW,MAAM,IAAI,4BAA4B,CAEhD;IAED;;OAEG;IACI,OAAO,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAOtD;CACF;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CACrC,SAAS,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,SAAS,GAAG,cAAc,CAAC,GACzE,MAAM,CAMR"}

package/dist/service/dynamodb/table/sim-dynamodb-table.js

@@ -1,6 +1,6 @@
 import { makeSimArn, } from "../../aws/arn.js";
 import { BackgroundTasks, } from "../../../util/background/background.js";
-import { DynamoDbTableCreateInput } from "./dynamodb-table-create-input.js";
+import { DynamoDbTableCreateInput as DynamoDatabaseTableCreateInput } from "./dynamodb-table-create-input.js";
 /**
  * Simulated DynamoDB Table.
  */
@@ -12,9 +12,9 @@ export class SimDynamoDbTable {
     #keySchema;
     #status = "CREATING";
     items = new Map();
-    constructor(props) {
-        const { createCommand, arn = makeSimDynamoDbTableArn(), background = new BackgroundTasks(), } = props;
-        const createInput = new DynamoDbTableCreateInput(createCommand);
+    constructor(properties) {
+        const { createCommand, arn = makeSimDynamoDbTableArn(), background = new BackgroundTasks(), } = properties;
+        const createInput = new DynamoDatabaseTableCreateInput(createCommand);
         this.arn = arn;
         this.background = background;
         this.tableName = createInput.tableName();

package/dist/service/dynamodb/table/sim-dynamodb-table.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-dynamodb-table.js","sourceRoot":"","sources":["../../../../src/service/dynamodb/table/sim-dynamodb-table.ts"],"names":[],"mappings":"AACA,OAAO,EACL,UAAU,GAGX,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EAEL,eAAe,GAChB,MAAM,wCAAwC,CAAC;AAKhD,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAU5E;;GAEG;AACH,MAAM,OAAO,gBAAgB;IACX,gBAAgB,CAAO;IAEvB,SAAS,CAAoB;IAC7B,GAAG,CAAS;IAEX,UAAU,CAAsB;IACxC,UAAU,CAAoB;IACvC,OAAO,GAA2B,UAAU,CAAC;IAE5B,KAAK,GAAG,IAAI,GAAG,EAAwB,CAAC;IAEzD,YAAY,KAA4B;QACtC,MAAM,EACJ,aAAa,EACb,GAAG,GAAG,uBAAuB,EAAE,EAC/B,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,KAAK,CAAC;QACV,MAAM,WAAW,GAAG,IAAI,wBAAwB,CAAC,aAAa,CAAC,CAAC;QAEhE,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAE7B,IAAI,CAAC,SAAS,GAAG,WAAW,CAAC,SAAS,EAAE,CAAC;QACzC,IAAI,CAAC,gBAAgB,GAAG,IAAI,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,UAAU,GAAG,WAAW,CAAC,SAAS,EAAE,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,IAAI,CAAC,OAAO,GAAG,QAAQ,CAAC;QACxB,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,IAAW,MAAM;QACf,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;;OAEG;IACI,OAAO,CAAC,IAAkB;QAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,EAAE;YAC5B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAChC,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CACrC,SAA0E;IAE1E,OAAO,UAAU,CAAC;QAChB,OAAO,EAAE,UAAU;QACnB,YAAY,EAAE,OAAO;QACrB,GAAG,SAAS;KACb,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"sim-dynamodb-table.js","sourceRoot":"","sources":["../../../../src/service/dynamodb/table/sim-dynamodb-table.ts"],"names":[],"mappings":"AACA,OAAO,EACL,UAAU,GAGX,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EAEL,eAAe,GAChB,MAAM,wCAAwC,CAAC;AAKhD,OAAO,EAAE,wBAAwB,IAAI,8BAA8B,EAAE,MAAM,kCAAkC,CAAC;AAU9G;;GAEG;AACH,MAAM,OAAO,gBAAgB;IACX,gBAAgB,CAAO;IAEvB,SAAS,CAAoB;IAC7B,GAAG,CAAS;IAEX,UAAU,CAAsB;IACxC,UAAU,CAA0B;IAC7C,OAAO,GAAiC,UAAU,CAAC;IAElC,KAAK,GAAG,IAAI,GAAG,EAA8B,CAAC;IAE/D,YAAY,UAA4C;QACtD,MAAM,EACJ,aAAa,EACb,GAAG,GAAG,uBAAuB,EAAE,EAC/B,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,UAAU,CAAC;QACf,MAAM,WAAW,GAAG,IAAI,8BAA8B,CAAC,aAAa,CAAC,CAAC;QAEtE,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAE7B,IAAI,CAAC,SAAS,GAAG,WAAW,CAAC,SAAS,EAAE,CAAC;QACzC,IAAI,CAAC,gBAAgB,GAAG,IAAI,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,UAAU,GAAG,WAAW,CAAC,SAAS,EAAE,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,IAAI,CAAC,OAAO,GAAG,QAAQ,CAAC;QACxB,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,IAAW,MAAM;QACf,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;;OAEG;IACI,OAAO,CAAC,IAAwB;QACrC,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,EAAE;YAC5B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAChC,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CACrC,SAA0E;IAE1E,OAAO,UAAU,CAAC;QAChB,OAAO,EAAE,UAAU;QACnB,YAAY,EAAE,OAAO;QACrB,GAAG,SAAS;KACb,CAAC,CAAC;AACL,CAAC"}

package/dist/service/iam/authorize/context/identity-policy-source/sim-iam-auth-z-id-pol-coordinator.d.ts

@@ -0,0 +1,38 @@
+import type { SimArn } from "../../../../aws/arn.js";
+import type { SimIamPolicy } from "../../../policy/sim-iam-policy.js";
+import type { SimIamRole, SimIamRoleName } from "../../../role/sim-iam-role.js";
+import type { SimIamUser, SimIamUsername } from "../../../user/sim-iam-user.js";
+import type { SimIamAuthZPolicySource } from "../sim-iam-auth-z-context.js";
+interface SimIamAuthZIdentityPolicySourceBuilderProperties {
+    policies?: ReadonlyMap<SimArn, SimIamPolicy>;
+    roles?: ReadonlyMap<SimIamRoleName, SimIamRole>;
+    users?: ReadonlyMap<SimIamUsername, SimIamUser>;
+}
+/**
+ * Coordinates identity-policy discovery for an authorization request.
+ *
+ * Principal lookup and policy conversion use separate collaborators because
+ * they operate on different representations:
+ *
+ * - the owner resolver maps a principal ARN to an account-scoped role or user;
+ * - the owner source builder converts that entity's stored policies into
+ *   authorization sources.
+ *
+ * This class defines the workflow between those operations and handles callers
+ * that have no matching IAM policy owner.
+ */
+export declare class SimIamAuthZIdentityPolicyCoordinator {
+    private readonly ownerResolver;
+    private readonly ownerSourceBuilder;
+    constructor(properties: SimIamAuthZIdentityPolicySourceBuilderProperties);
+    /**
+     * Return identity-policy sources belonging to the principal ARN.
+     *
+     * Anonymous callers, service principals, and unknown IAM ARNs have no
+     * matching role or user. Those callers contribute no identity policies,
+     * though resource policies may still affect authorization.
+     */
+    build(principalArn: string | undefined): readonly SimIamAuthZPolicySource[];
+}
+export {};
+//# sourceMappingURL=sim-iam-auth-z-id-pol-coordinator.d.ts.map

package/dist/service/iam/authorize/context/identity-policy-source/sim-iam-auth-z-id-pol-coordinator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-auth-z-id-pol-coordinator.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/authorize/context/identity-policy-source/sim-iam-auth-z-id-pol-coordinator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AACtE,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAChF,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAChF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAI5E,UAAU,gDAAgD;IACxD,QAAQ,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAC7C,KAAK,CAAC,EAAE,WAAW,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IAChD,KAAK,CAAC,EAAE,WAAW,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;CACjD;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,oCAAoC;IAC/C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAoC;IAClE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAyC;IAE5E,YAAY,UAAU,EAAE,gDAAgD,EAcvE;IAED;;;;;;OAMG;IACH,KAAK,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,uBAAuB,EAAE,CAI1E;CACF"}

package/dist/service/iam/authorize/context/identity-policy-source/sim-iam-auth-z-id-pol-coordinator.js

@@ -0,0 +1,41 @@
+import { SimIamIdentityPolicyOwnerResolver } from "./sim-iam-id-pol-owner-resolver.js";
+import { SimIamIdentityPolicyOwnerSourceBuilder } from "./sim-iam-id-pol-owner-src-builder.js";
+/**
+ * Coordinates identity-policy discovery for an authorization request.
+ *
+ * Principal lookup and policy conversion use separate collaborators because
+ * they operate on different representations:
+ *
+ * - the owner resolver maps a principal ARN to an account-scoped role or user;
+ * - the owner source builder converts that entity's stored policies into
+ *   authorization sources.
+ *
+ * This class defines the workflow between those operations and handles callers
+ * that have no matching IAM policy owner.
+ */
+export class SimIamAuthZIdentityPolicyCoordinator {
+    ownerResolver;
+    ownerSourceBuilder;
+    constructor(properties) {
+        const { policies = new Map(), roles = new Map(), users = new Map(), } = properties;
+        this.ownerResolver = new SimIamIdentityPolicyOwnerResolver({
+            roles,
+            users,
+        });
+        this.ownerSourceBuilder = new SimIamIdentityPolicyOwnerSourceBuilder({
+            policies,
+        });
+    }
+    /**
+     * Return identity-policy sources belonging to the principal ARN.
+     *
+     * Anonymous callers, service principals, and unknown IAM ARNs have no
+     * matching role or user. Those callers contribute no identity policies,
+     * though resource policies may still affect authorization.
+     */
+    build(principalArn) {
+        const owner = this.ownerResolver.resolve(principalArn);
+        return owner === undefined ? [] : this.ownerSourceBuilder.build(owner);
+    }
+}
+//# sourceMappingURL=sim-iam-auth-z-id-pol-coordinator.js.map

package/dist/service/iam/authorize/context/identity-policy-source/sim-iam-auth-z-id-pol-coordinator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-auth-z-id-pol-coordinator.js","sourceRoot":"","sources":["../../../../../../src/service/iam/authorize/context/identity-policy-source/sim-iam-auth-z-id-pol-coordinator.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,iCAAiC,EAAE,MAAM,oCAAoC,CAAC;AACvF,OAAO,EAAE,sCAAsC,EAAE,MAAM,uCAAuC,CAAC;AAQ/F;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,oCAAoC;IAC9B,aAAa,CAAoC;IACjD,kBAAkB,CAAyC;IAE5E,YAAY,UAA4D;QACtE,MAAM,EACJ,QAAQ,GAAG,IAAI,GAAG,EAAE,EACpB,KAAK,GAAG,IAAI,GAAG,EAAE,EACjB,KAAK,GAAG,IAAI,GAAG,EAAE,GAClB,GAAG,UAAU,CAAC;QAEf,IAAI,CAAC,aAAa,GAAG,IAAI,iCAAiC,CAAC;YACzD,KAAK;YACL,KAAK;SACN,CAAC,CAAC;QACH,IAAI,CAAC,kBAAkB,GAAG,IAAI,sCAAsC,CAAC;YACnE,QAAQ;SACT,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,YAAgC;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAEvD,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACzE,CAAC;CACF"}

package/dist/service/iam/authorize/context/identity-policy-source/sim-iam-id-pol-owner-resolver.d.ts

@@ -0,0 +1,54 @@
+import type { SimIamRole, SimIamRoleName } from "../../../role/sim-iam-role.js";
+import type { SimIamUser, SimIamUsername } from "../../../user/sim-iam-user.js";
+/**
+ * An IAM entity that can own identity-based policies.
+ *
+ * Roles and users expose the same policy storage properties, so callers can
+ * process a resolved owner without branching on the principal type.
+ */
+export type SimIamIdentityPolicyOwner = SimIamRole | SimIamUser;
+interface SimIamIdentityPolicyOwnerResolverProperties {
+    readonly roles: ReadonlyMap<SimIamRoleName, SimIamRole>;
+    readonly users: ReadonlyMap<SimIamUsername, SimIamUser>;
+}
+/**
+ * Resolves an authenticated principal ARN to the IAM entity whose identity
+ * policies apply to that principal.
+ *
+ * Authorization requests contain a principal ARN, while IAM stores roles and
+ * users in maps keyed by their names. This resolver owns the conversion between
+ * those representations. Keeping that lookup separate allows policy-source
+ * construction to work with a resolved owner instead of knowing how each
+ * principal type is stored.
+ *
+ * Temporary assumed-role credentials supply the underlying role ARN as their
+ * identity-policy principal before reaching this resolver. As a result, this
+ * class only needs to match IAM role and user ARNs; it does not parse STS
+ * assumed-role ARNs or inspect session state.
+ */
+export declare class SimIamIdentityPolicyOwnerResolver {
+    private readonly roles;
+    private readonly users;
+    constructor(properties: SimIamIdentityPolicyOwnerResolverProperties);
+    /**
+     * Find the role or user whose ARN exactly matches the supplied principal ARN.
+     *
+     * An absent ARN represents a caller without an IAM identity, such as an
+     * anonymous or service principal. Such callers have no role or user identity
+     * policies, so resolution returns undefined.
+     *
+     * Exact ARN comparison also preserves account isolation: an entity with the
+     * same name in another account has a different ARN and cannot be selected.
+     */
+    resolve(principalArn: string | undefined): SimIamIdentityPolicyOwner | undefined;
+    /**
+     * Search account-scoped role state for the matching principal ARN.
+     */
+    private role;
+    /**
+     * Search account-scoped user state for the matching principal ARN.
+     */
+    private user;
+}
+export {};
+//# sourceMappingURL=sim-iam-id-pol-owner-resolver.d.ts.map

package/dist/service/iam/authorize/context/identity-policy-source/sim-iam-id-pol-owner-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-id-pol-owner-resolver.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/authorize/context/identity-policy-source/sim-iam-id-pol-owner-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAChF,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAEhF;;;;;GAKG;AACH,MAAM,MAAM,yBAAyB,GAAG,UAAU,GAAG,UAAU,CAAC;AAEhE,UAAU,2CAA2C;IACnD,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IACxD,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;CACzD;AAED;;;;;;;;;;;;;;GAcG;AACH,qBAAa,iCAAiC;IAC5C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA0C;IAChE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA0C;IAEhE,YAAY,UAAU,EAAE,2CAA2C,EAGlE;IAED;;;;;;;;;OASG;IACH,OAAO,CACL,YAAY,EAAE,MAAM,GAAG,SAAS,GAC/B,yBAAyB,GAAG,SAAS,CAMvC;IAED;;OAEG;IACH,OAAO,CAAC,IAAI;IAIZ;;OAEG;IACH,OAAO,CAAC,IAAI;CAGb"}

package/dist/service/iam/authorize/context/identity-policy-source/sim-iam-id-pol-owner-resolver.js

@@ -0,0 +1,52 @@
+/**
+ * Resolves an authenticated principal ARN to the IAM entity whose identity
+ * policies apply to that principal.
+ *
+ * Authorization requests contain a principal ARN, while IAM stores roles and
+ * users in maps keyed by their names. This resolver owns the conversion between
+ * those representations. Keeping that lookup separate allows policy-source
+ * construction to work with a resolved owner instead of knowing how each
+ * principal type is stored.
+ *
+ * Temporary assumed-role credentials supply the underlying role ARN as their
+ * identity-policy principal before reaching this resolver. As a result, this
+ * class only needs to match IAM role and user ARNs; it does not parse STS
+ * assumed-role ARNs or inspect session state.
+ */
+export class SimIamIdentityPolicyOwnerResolver {
+    roles;
+    users;
+    constructor(properties) {
+        this.roles = properties.roles;
+        this.users = properties.users;
+    }
+    /**
+     * Find the role or user whose ARN exactly matches the supplied principal ARN.
+     *
+     * An absent ARN represents a caller without an IAM identity, such as an
+     * anonymous or service principal. Such callers have no role or user identity
+     * policies, so resolution returns undefined.
+     *
+     * Exact ARN comparison also preserves account isolation: an entity with the
+     * same name in another account has a different ARN and cannot be selected.
+     */
+    resolve(principalArn) {
+        if (principalArn === undefined) {
+            return undefined;
+        }
+        return this.role(principalArn) ?? this.user(principalArn);
+    }
+    /**
+     * Search account-scoped role state for the matching principal ARN.
+     */
+    role(principalArn) {
+        return this.roles.values().find((role) => role.arn === principalArn);
+    }
+    /**
+     * Search account-scoped user state for the matching principal ARN.
+     */
+    user(principalArn) {
+        return this.users.values().find((user) => user.arn === principalArn);
+    }
+}
+//# sourceMappingURL=sim-iam-id-pol-owner-resolver.js.map

package/dist/service/iam/authorize/context/identity-policy-source/sim-iam-id-pol-owner-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-id-pol-owner-resolver.js","sourceRoot":"","sources":["../../../../../../src/service/iam/authorize/context/identity-policy-source/sim-iam-id-pol-owner-resolver.ts"],"names":[],"mappings":"AAgBA;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,iCAAiC;IAC3B,KAAK,CAA0C;IAC/C,KAAK,CAA0C;IAEhE,YAAY,UAAuD;QACjE,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAChC,CAAC;IAED;;;;;;;;;OASG;IACH,OAAO,CACL,YAAgC;QAEhC,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACK,IAAI,CAAC,YAAoB;QAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,KAAK,YAAY,CAAC,CAAC;IACvE,CAAC;IAED;;OAEG;IACK,IAAI,CAAC,YAAoB;QAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,KAAK,YAAY,CAAC,CAAC;IACvE,CAAC;CACF"}

package/dist/service/iam/authorize/context/identity-policy-source/sim-iam-id-pol-owner-src-builder.d.ts

@@ -0,0 +1,51 @@
+import type { SimArn } from "../../../../aws/arn.js";
+import type { SimIamPolicy } from "../../../policy/sim-iam-policy.js";
+import type { SimIamAuthZPolicySource } from "../sim-iam-auth-z-context.js";
+import type { SimIamIdentityPolicyOwner } from "./sim-iam-id-pol-owner-resolver.js";
+interface SimIamIdentityPolicyOwnerSourceBuilderProperties {
+    readonly policies: ReadonlyMap<SimArn, SimIamPolicy>;
+}
+/**
+ * Converts policies stored on an IAM role or user into authorization sources.
+ *
+ * IAM owners store inline policy documents directly and refer to managed
+ * policies by ARN. Authorization evaluation uses one common policy-source
+ * representation for both forms. This class owns the translation from those
+ * storage models to that representation.
+ *
+ * Owner resolution remains outside this class. Callers must first identify the
+ * role or user whose policies apply to the authenticated principal.
+ */
+export declare class SimIamIdentityPolicyOwnerSourceBuilder {
+    private readonly policies;
+    constructor(properties: SimIamIdentityPolicyOwnerSourceBuilderProperties);
+    /**
+     * Build all available inline and managed policy sources for an IAM owner.
+     */
+    build(owner: SimIamIdentityPolicyOwner): readonly SimIamAuthZPolicySource[];
+    /**
+     * Parse policy documents stored directly on the role or user.
+     *
+     * Inline policy names come from the owning entity, so each generated source
+     * retains the name needed for authorization diagnostics.
+     */
+    private inlinePolicySources;
+    /**
+     * Resolve attached policy ARNs through the account-scoped policy store.
+     *
+     * Attachment state and policy storage can exist independently in the
+     * simulator. An ARN with no corresponding stored policy contributes no
+     * authorization statements.
+     */
+    private attachedPolicySources;
+    /**
+     * Convert a managed policy when it has a document available for evaluation.
+     *
+     * A managed policy record without a document contributes no source. This
+     * matches missing attached policies: neither case supplies statements to the
+     * authorization decision.
+     */
+    private managedPolicySource;
+}
+export {};
+//# sourceMappingURL=sim-iam-id-pol-owner-src-builder.d.ts.map

package/dist/service/iam/authorize/context/identity-policy-source/sim-iam-id-pol-owner-src-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-id-pol-owner-src-builder.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/authorize/context/identity-policy-source/sim-iam-id-pol-owner-src-builder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AAEtE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAC5E,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAEpF,UAAU,gDAAgD;IACxD,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;CACtD;AAED;;;;;;;;;;GAUG;AACH,qBAAa,sCAAsC;IACjD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAoC;IAE7D,YAAY,UAAU,EAAE,gDAAgD,EAEvE;IAED;;OAEG;IACH,KAAK,CAAC,KAAK,EAAE,yBAAyB,GAAG,SAAS,uBAAuB,EAAE,CAK1E;IAED;;;;;OAKG;IACH,OAAO,CAAC,mBAAmB;IAU3B;;;;;;OAMG;IACH,OAAO,CAAC,qBAAqB;IAS7B;;;;;;OAMG;IACH,OAAO,CAAC,mBAAmB;CAgB5B"}

package/dist/service/iam/authorize/context/identity-policy-source/sim-iam-id-pol-owner-src-builder.js

@@ -0,0 +1,74 @@
+import { jsonParse } from "../../../../../util/type-guard/json.js";
+/**
+ * Converts policies stored on an IAM role or user into authorization sources.
+ *
+ * IAM owners store inline policy documents directly and refer to managed
+ * policies by ARN. Authorization evaluation uses one common policy-source
+ * representation for both forms. This class owns the translation from those
+ * storage models to that representation.
+ *
+ * Owner resolution remains outside this class. Callers must first identify the
+ * role or user whose policies apply to the authenticated principal.
+ */
+export class SimIamIdentityPolicyOwnerSourceBuilder {
+    policies;
+    constructor(properties) {
+        this.policies = properties.policies;
+    }
+    /**
+     * Build all available inline and managed policy sources for an IAM owner.
+     */
+    build(owner) {
+        return [
+            ...this.inlinePolicySources(owner),
+            ...this.attachedPolicySources(owner),
+        ];
+    }
+    /**
+     * Parse policy documents stored directly on the role or user.
+     *
+     * Inline policy names come from the owning entity, so each generated source
+     * retains the name needed for authorization diagnostics.
+     */
+    inlinePolicySources(owner) {
+        return [...owner.inlinePolicies].map(([policyName, policyDocument]) => ({
+            sourceType: "identity-inline",
+            policyName,
+            document: jsonParse(policyDocument),
+        }));
+    }
+    /**
+     * Resolve attached policy ARNs through the account-scoped policy store.
+     *
+     * Attachment state and policy storage can exist independently in the
+     * simulator. An ARN with no corresponding stored policy contributes no
+     * authorization statements.
+     */
+    attachedPolicySources(owner) {
+        return [...owner.attachedPolicyArns]
+            .map((policyArn) => this.policies.get(policyArn))
+            .filter((policy) => policy !== undefined)
+            .flatMap((policy) => this.managedPolicySource(policy));
+    }
+    /**
+     * Convert a managed policy when it has a document available for evaluation.
+     *
+     * A managed policy record without a document contributes no source. This
+     * matches missing attached policies: neither case supplies statements to the
+     * authorization decision.
+     */
+    managedPolicySource(policy) {
+        if (policy.policyDocument === undefined) {
+            return [];
+        }
+        return [
+            {
+                sourceType: "identity-managed",
+                policyArn: policy.arn,
+                policyName: policy.policyName,
+                document: jsonParse(policy.policyDocument),
+            },
+        ];
+    }
+}
+//# sourceMappingURL=sim-iam-id-pol-owner-src-builder.js.map

package/dist/service/iam/authorize/context/identity-policy-source/sim-iam-id-pol-owner-src-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-id-pol-owner-src-builder.js","sourceRoot":"","sources":["../../../../../../src/service/iam/authorize/context/identity-policy-source/sim-iam-id-pol-owner-src-builder.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,wCAAwC,CAAC;AAQnE;;;;;;;;;;GAUG;AACH,MAAM,OAAO,sCAAsC;IAChC,QAAQ,CAAoC;IAE7D,YAAY,UAA4D;QACtE,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAgC;QACpC,OAAO;YACL,GAAG,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC;YAClC,GAAG,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC;SACrC,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACK,mBAAmB,CACzB,KAAgC;QAEhC,OAAO,CAAC,GAAG,KAAK,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC;YACtE,UAAU,EAAE,iBAAiB;YAC7B,UAAU;YACV,QAAQ,EAAE,SAAS,CAAC,cAAc,CAAC;SACpC,CAAC,CAAC,CAAC;IACN,CAAC;IAED;;;;;;OAMG;IACK,qBAAqB,CAC3B,KAAgC;QAEhC,OAAO,CAAC,GAAG,KAAK,CAAC,kBAAkB,CAAC;aACjC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;aAChD,MAAM,CAAC,CAAC,MAAM,EAA0B,EAAE,CAAC,MAAM,KAAK,SAAS,CAAC;aAChE,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED;;;;;;OAMG;IACK,mBAAmB,CACzB,MAAoB;QAEpB,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YACxC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO;YACL;gBACE,UAAU,EAAE,kBAAkB;gBAC9B,SAAS,EAAE,MAAM,CAAC,GAAG;gBACrB,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,QAAQ,EAAE,SAAS,CAAC,MAAM,CAAC,cAAc,CAAC;aAC3C;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/service/iam/authorize/context/sim-iam-auth-z-context.factory.d.ts

@@ -1,5 +1,5 @@
 import { StaticFactory } from "@kensio/part-factory";
-import type { SimIamAuthZContext, SimIamAuthZPolicySource } from "./sim-iam-auth-z-context.js";
+import type { SimIamAuthZContext, SimIamAuthZResourcePolicySource } from "./sim-iam-auth-z-context.js";
 /**
  * Generates simulated IAM authorization contexts for tests.
  */
@@ -7,5 +7,5 @@ export declare const simIamAuthZContextFactory: StaticFactory<SimIamAuthZContext
 /**
  * Generates simulated IAM resource-policy sources for tests.
  */
-export declare const simIamAuthZResourcePolicySourceFactory: StaticFactory<SimIamAuthZPolicySource>;
+export declare const simIamAuthZResourcePolicySourceFactory: StaticFactory<SimIamAuthZResourcePolicySource>;
 //# sourceMappingURL=sim-iam-auth-z-context.factory.d.ts.map

package/dist/service/iam/authorize/context/sim-iam-auth-z-context.factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-iam-auth-z-context.factory.d.ts","sourceRoot":"","sources":["../../../../../src/service/iam/authorize/context/sim-iam-auth-z-context.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,KAAK,EACV,kBAAkB,EAClB,uBAAuB,EACxB,MAAM,6BAA6B,CAAC;AAErC;;GAEG;AACH,eAAO,MAAM,yBAAyB,mCAQpC,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,sCAAsC,wCAU/C,CAAC"}
+{"version":3,"file":"sim-iam-auth-z-context.factory.d.ts","sourceRoot":"","sources":["../../../../../src/service/iam/authorize/context/sim-iam-auth-z-context.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,KAAK,EACV,kBAAkB,EAClB,+BAA+B,EAChC,MAAM,6BAA6B,CAAC;AAErC;;GAEG;AACH,eAAO,MAAM,yBAAyB,mCAkBpC,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,sCAAsC,gDAW/C,CAAC"}

package/dist/service/iam/authorize/context/sim-iam-auth-z-context.factory.js

@@ -7,8 +7,18 @@ export const simIamAuthZContextFactory = new StaticFactory({
     resourcePolicies: [],
     action: "s3:GetObject",
     resource: "arn:aws:s3:::test-bucket/test-key",
-    callerPrincipal: {
+    conditionContext: {},
+    caller: {
+        identityPolicyPrincipal: {
+            kind: "arn",
+            arn: "arn:aws:iam::123456789012:role/TestRole",
+        },
+        principal: {
+            kind: "arn",
+            arn: "arn:aws:iam::123456789012:role/TestRole",
+        },
         arn: "arn:aws:iam::123456789012:role/TestRole",
+        accountId: "123456789012",
     },
 });
 /**
@@ -17,6 +27,7 @@ export const simIamAuthZContextFactory = new StaticFactory({
 export const simIamAuthZResourcePolicySourceFactory = new StaticFactory({
     sourceType: "resource",
     document: {
+        Version: "2012-10-17",
         Statement: {
             Effect: "Allow",
             Action: "s3:GetObject",

package/dist/service/iam/authorize/context/sim-iam-auth-z-context.factory.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-iam-auth-z-context.factory.js","sourceRoot":"","sources":["../../../../../src/service/iam/authorize/context/sim-iam-auth-z-context.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAMrD;;GAEG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,IAAI,aAAa,CAAqB;IAC7E,gBAAgB,EAAE,EAAE;IACpB,gBAAgB,EAAE,EAAE;IACpB,MAAM,EAAE,cAAc;IACtB,QAAQ,EAAE,mCAAmC;IAC7C,eAAe,EAAE;QACf,GAAG,EAAE,yCAAyC;KAC/C;CACF,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,sCAAsC,GACjD,IAAI,aAAa,CAA0B;IACzC,UAAU,EAAE,UAAU;IACtB,QAAQ,EAAE;QACR,SAAS,EAAE;YACT,MAAM,EAAE,OAAO;YACf,MAAM,EAAE,cAAc;YACtB,QAAQ,EAAE,mCAAmC;SAC9C;KACF;CACF,CAAC,CAAC"}
+{"version":3,"file":"sim-iam-auth-z-context.factory.js","sourceRoot":"","sources":["../../../../../src/service/iam/authorize/context/sim-iam-auth-z-context.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAMrD;;GAEG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,IAAI,aAAa,CAAqB;IAC7E,gBAAgB,EAAE,EAAE;IACpB,gBAAgB,EAAE,EAAE;IACpB,MAAM,EAAE,cAAc;IACtB,QAAQ,EAAE,mCAAmC;IAC7C,gBAAgB,EAAE,EAAE;IACpB,MAAM,EAAE;QACN,uBAAuB,EAAE;YACvB,IAAI,EAAE,KAAK;YACX,GAAG,EAAE,yCAAyC;SAC/C;QACD,SAAS,EAAE;YACT,IAAI,EAAE,KAAK;YACX,GAAG,EAAE,yCAAyC;SAC/C;QACD,GAAG,EAAE,yCAAyC;QAC9C,SAAS,EAAE,cAAc;KAC1B;CACF,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,sCAAsC,GACjD,IAAI,aAAa,CAAkC;IACjD,UAAU,EAAE,UAAU;IACtB,QAAQ,EAAE;QACR,OAAO,EAAE,YAAY;QACrB,SAAS,EAAE;YACT,MAAM,EAAE,OAAO;YACf,MAAM,EAAE,cAAc;YACtB,QAAQ,EAAE,mCAAmC;SAC9C;KACF;CACF,CAAC,CAAC"}