@kensio/yulin 0.32.0 → 0.34.0

package/dist/service/cloudfront/command/create-distribution/create-distribution.cmd.d.ts

@@ -1,101 +0,0 @@
-import type { SimResponseMetadata } from "../../../aws/metadata/response-metadata.type.js";
-/**
- * Minimal structural sim CloudFront CreateDistribution command.
- */
-export interface SimCreateDistributionCommand {
-    readonly input: SimCreateDistributionCommandInput;
-}
-/**
- * Minimal structural sim CloudFront CreateDistribution input.
- */
-export interface SimCreateDistributionCommandInput {
-    readonly DistributionConfig?: SimCloudFrontDistributionConfig | undefined;
-}
-/**
- * Minimal structural sim CloudFront CreateDistribution output.
- */
-export interface SimCreateDistributionCommandOutput {
-    readonly Distribution?: {
-        readonly Id?: string | undefined;
-        readonly ARN?: string | undefined;
-        readonly Status?: string | undefined;
-        readonly LastModifiedTime?: Date | undefined;
-        readonly InProgressInvalidationBatches?: number | undefined;
-        readonly DomainName?: string | undefined;
-        readonly DistributionConfig?: SimCloudFrontDistributionConfig | undefined;
-    } | undefined;
-    readonly Location?: string | undefined;
-    readonly $metadata: SimResponseMetadata;
-}
-/**
- * Minimal structural sim CloudFront DistributionConfig.
- */
-export interface SimCloudFrontDistributionConfig {
-    readonly Aliases?: {
-        readonly Items?: readonly string[] | undefined;
-    } | undefined;
-    readonly Origins?: {
-        readonly Items?: readonly SimCloudFrontOriginConfig[] | undefined;
-    } | undefined;
-    readonly DefaultCacheBehavior?: SimCloudFrontDefaultCacheBehaviorConfig | undefined;
-    readonly CacheBehaviors?: {
-        readonly Items?: readonly SimCloudFrontCacheBehaviorConfig[] | undefined;
-    } | undefined;
-}
-/**
- * Minimal structural sim CloudFront Origin config.
- */
-export interface SimCloudFrontOriginConfig {
-    readonly Id?: string | undefined;
-    readonly DomainName?: string | undefined;
-    readonly OriginPath?: string | undefined;
-    readonly S3OriginConfig?: object | undefined;
-}
-/**
- * Minimal structural sim CloudFront default cache behavior config.
- */
-export interface SimCloudFrontDefaultCacheBehaviorConfig {
-    readonly TargetOriginId?: string | undefined;
-    readonly AllowedMethods?: SimCloudFrontAllowedMethods | undefined;
-    readonly ViewerProtocolPolicy?: SimCloudFrontViewerProtocolPolicy | undefined;
-    readonly FunctionAssociations?: SimCloudFrontFunctionAssociations | undefined;
-}
-/**
- * Minimal structural sim CloudFront cache behavior config.
- */
-export interface SimCloudFrontCacheBehaviorConfig extends SimCloudFrontDefaultCacheBehaviorConfig {
-    readonly PathPattern?: string | undefined;
-    readonly FunctionAssociations?: SimCloudFrontFunctionAssociations | undefined;
-}
-/**
- * Minimal structural sim CloudFront function associations list.
- */
-export interface SimCloudFrontFunctionAssociations {
-    readonly Quantity?: number | undefined;
-    readonly Items?: readonly SimCloudFrontFunctionAssociation[] | undefined;
-}
-/**
- * Minimal structural sim CloudFront function association.
- */
-export interface SimCloudFrontFunctionAssociation {
-    readonly EventType?: "viewer-request" | "viewer-response" | "origin-request" | "origin-response" | undefined;
-    readonly FunctionARN?: string | undefined;
-}
-/**
- * Minimal structural sim CloudFront allowed methods list.
- */
-export interface SimCloudFrontAllowedMethods {
-    readonly Items?: readonly string[] | undefined;
-    readonly CachedMethods?: SimCloudFrontMethodList | undefined;
-}
-/**
- * Minimal structural sim CloudFront method list.
- */
-export interface SimCloudFrontMethodList {
-    readonly Items?: readonly string[] | undefined;
-}
-/**
- * Minimal structural sim CloudFront viewer protocol policy.
- */
-export type SimCloudFrontViewerProtocolPolicy = "allow-all" | "redirect-to-https" | "https-only";
-//# sourceMappingURL=create-distribution.cmd.d.ts.map

package/dist/service/cloudfront/command/create-distribution/create-distribution.cmd.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"create-distribution.cmd.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/command/create-distribution/create-distribution.cmd.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAE3F;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,KAAK,EAAE,iCAAiC,CAAC;CACnD;AAED;;GAEG;AACH,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,kBAAkB,CAAC,EAAE,+BAA+B,GAAG,SAAS,CAAC;CAC3E;AAED;;GAEG;AACH,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,YAAY,CAAC,EAClB;QACE,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACjC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACrC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;QAC7C,QAAQ,CAAC,6BAA6B,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC5D,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACzC,QAAQ,CAAC,kBAAkB,CAAC,EAC1B,+BAA+B,GAAG,SAAS,CAAC;KAC/C,GACD,SAAS,CAAC;IACd,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;GAEG;AACH,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,OAAO,CAAC,EACb;QACE,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;KAChD,GACD,SAAS,CAAC;IACd,QAAQ,CAAC,OAAO,CAAC,EACb;QACE,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,yBAAyB,EAAE,GAAG,SAAS,CAAC;KACnE,GACD,SAAS,CAAC;IACd,QAAQ,CAAC,oBAAoB,CAAC,EAC5B,uCAAuC,GAAG,SAAS,CAAC;IACtD,QAAQ,CAAC,cAAc,CAAC,EACpB;QACE,QAAQ,CAAC,KAAK,CAAC,EACb,SAAS,gCAAgC,EAAE,GAAG,SAAS,CAAC;KAC3D,GACD,SAAS,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC9C;AAED;;GAEG;AACH,MAAM,WAAW,uCAAuC;IACtD,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,cAAc,CAAC,EAAE,2BAA2B,GAAG,SAAS,CAAC;IAClE,QAAQ,CAAC,oBAAoB,CAAC,EAAE,iCAAiC,GAAG,SAAS,CAAC;IAC9E,QAAQ,CAAC,oBAAoB,CAAC,EAAE,iCAAiC,GAAG,SAAS,CAAC;CAC/E;AAED;;GAEG;AACH,MAAM,WAAW,gCAAiC,SAAQ,uCAAuC;IAC/F,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,oBAAoB,CAAC,EAAE,iCAAiC,GAAG,SAAS,CAAC;CAC/E;AAED;;GAEG;AACH,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,gCAAgC,EAAE,GAAG,SAAS,CAAC;CAC1E;AAED;;GAEG;AACH,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,SAAS,CAAC,EACf,gBAAgB,GAChB,iBAAiB,GACjB,gBAAgB,GAChB,iBAAiB,GACjB,SAAS,CAAC;IACd,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3C;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,aAAa,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAC;CAC9D;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;CAChD;AAED;;GAEG;AACH,MAAM,MAAM,iCAAiC,GAC3C,WAAW,GAAG,mBAAmB,GAAG,YAAY,CAAC"}

package/dist/service/cloudfront/command/create-function/create-function.cmd.d.ts

@@ -1,44 +0,0 @@
-/**
- * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/cloudfront/command/CreateFunctionCommand/
- */
-import type { SimArn } from "../../../aws/arn.js";
-import type { SimResponseMetadata } from "../../../aws/metadata/response-metadata.type.js";
-/**
- * Minimal structural sim CloudFront CreateFunction command.
- */
-export interface SimCreateFunctionCommand {
-    readonly input: SimCreateFunctionCommandInput;
-}
-/**
- * Minimal structural sim CloudFront CreateFunction input.
- */
-export interface SimCreateFunctionCommandInput {
-    readonly Name?: string | undefined;
-    FunctionConfig?: {
-        Comment?: string | undefined;
-        Runtime?: "cloudfront-js-1.0" | "cloudfront-js-2.0" | undefined;
-    } | undefined;
-    FunctionCode?: Uint8Array | undefined;
-}
-/**
- * Minimal structural sim CloudFront CreateFunction output.
- */
-export interface SimCreateFunctionCommandOutput {
-    readonly $metadata: SimResponseMetadata;
-    FunctionSummary: SimCloudFrontFunctionSummary;
-    FunctionMetadata: SimCloudFrontFunctionMetadata;
-}
-/**
- * Minimal structural sim CloudFront Function summary.
- */
-export interface SimCloudFrontFunctionSummary {
-    Name: string;
-    Status: string;
-}
-/**
- * Minimal structural sim CloudFront Function metadata.
- */
-export interface SimCloudFrontFunctionMetadata {
-    FunctionARN: SimArn;
-}
-//# sourceMappingURL=create-function.cmd.d.ts.map

package/dist/service/cloudfront/command/create-function/create-function.cmd.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"create-function.cmd.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/command/create-function/create-function.cmd.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAE3F;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,KAAK,EAAE,6BAA6B,CAAC;CAC/C;AAED;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,cAAc,CAAC,EACX;QACE,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC7B,OAAO,CAAC,EAAE,mBAAmB,GAAG,mBAAmB,GAAG,SAAS,CAAC;KACjE,GACD,SAAS,CAAC;IACd,YAAY,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;CACvC;AAED;;GAEG;AACH,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;IACxC,eAAe,EAAE,4BAA4B,CAAC;IAC9C,gBAAgB,EAAE,6BAA6B,CAAC;CACjD;AAED;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC5C,WAAW,EAAE,MAAM,CAAC;CACrB"}

package/dist/service/cloudfront/command/get-distribution/get-distribution.cmd.d.ts

@@ -1,30 +0,0 @@
-import type { SimCloudFrontDistributionConfig } from "../create-distribution/create-distribution.cmd.js";
-import type { SimResponseMetadata } from "../../../aws/metadata/response-metadata.type.js";
-/**
- * Minimal structural sim CloudFront GetDistribution command.
- */
-export interface SimGetDistributionCommand {
-    readonly input: SimGetDistributionCommandInput;
-}
-/**
- * Minimal structural sim CloudFront GetDistribution input.
- */
-export interface SimGetDistributionCommandInput {
-    readonly Id?: string | undefined;
-}
-/**
- * Minimal structural sim CloudFront GetDistribution output.
- */
-export interface SimGetDistributionCommandOutput {
-    readonly Distribution?: {
-        readonly Id?: string | undefined;
-        readonly ARN?: string | undefined;
-        readonly Status?: string | undefined;
-        readonly LastModifiedTime?: Date | undefined;
-        readonly InProgressInvalidationBatches?: number | undefined;
-        readonly DomainName?: string | undefined;
-        readonly DistributionConfig?: SimCloudFrontDistributionConfig | undefined;
-    } | undefined;
-    readonly $metadata: SimResponseMetadata;
-}
-//# sourceMappingURL=get-distribution.cmd.d.ts.map

package/dist/service/cloudfront/command/get-distribution/get-distribution.cmd.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"get-distribution.cmd.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/command/get-distribution/get-distribution.cmd.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,mDAAmD,CAAC;AACzG,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAE3F;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,KAAK,EAAE,8BAA8B,CAAC;CAChD;AAED;;GAEG;AACH,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,YAAY,CAAC,EAClB;QACE,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACjC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACrC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;QAC7C,QAAQ,CAAC,6BAA6B,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC5D,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACzC,QAAQ,CAAC,kBAAkB,CAAC,EAC1B,+BAA+B,GAAG,SAAS,CAAC;KAC/C,GACD,SAAS,CAAC;IACd,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC"}

package/dist/service/iam/authorize/context/sim-iam-auth-z-caller-context-builder.d.ts

@@ -1,48 +0,0 @@
-import type { SimAwsCallerContext, SimAwsPrincipal } from "../../../aws/caller/sim-aws-caller.js";
-import type { SimIamAuthZPolicySource } from "./sim-iam-auth-z-context.js";
-interface SimIamAuthZCallerContext {
-    readonly callerPrincipal: SimAwsPrincipal | undefined;
-    readonly rootPolicySources: readonly SimIamAuthZPolicySource[];
-}
-/**
- * Resolves the caller principal and any policy sources implied by that caller.
- *
- * Authorization requests may omit a caller, provide an anonymous caller,
- * provide a principal ARN, or provide a complete principal object. This builder
- * applies those cases consistently before identity and resource policies are
- * collected.
- *
- * The configured default principal represents the simulated account root. It is
- * used only when the request omits a caller. An explicit anonymous caller does
- * not fall back to root, allowing services to evaluate unauthenticated
- * requests.
- *
- * Root access is modelled as an inline identity policy because the authorizer
- * evaluates all permissions through policy sources. Keeping that policy here
- * ties it to the rule that identifies the default root principal rather than to
- * general authorization-context assembly.
- */
-export declare class SimIamAuthZCallerContextBuilder {
-    private readonly defaultCallerPrincipal?;
-    constructor(defaultCallerPrincipal?: SimAwsPrincipal);
-    /**
-     * Resolve request caller data and add the simulated root policy when
-     * applicable.
-     */
-    build(caller: SimAwsCallerContext | undefined): SimIamAuthZCallerContext;
-    /**
-     * Convert the caller representation used by simulated AWS services into the
-     * principal representation consumed by IAM authorization.
-     */
-    private callerPrincipal;
-    /**
-     * Give the configured account-root principal unrestricted identity access.
-     *
-     * Comparing ARNs rather than object identity ensures that an explicitly
-     * supplied principal object for the same root ARN receives the same simulated
-     * root permissions as an omitted caller.
-     */
-    private rootPolicySources;
-}
-export {};
-//# sourceMappingURL=sim-iam-auth-z-caller-context-builder.d.ts.map

package/dist/service/iam/authorize/context/sim-iam-auth-z-caller-context-builder.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sim-iam-auth-z-caller-context-builder.d.ts","sourceRoot":"","sources":["../../../../../src/service/iam/authorize/context/sim-iam-auth-z-caller-context-builder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,eAAe,EAChB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAE3E,UAAU,wBAAwB;IAChC,QAAQ,CAAC,eAAe,EAAE,eAAe,GAAG,SAAS,CAAC;IACtD,QAAQ,CAAC,iBAAiB,EAAE,SAAS,uBAAuB,EAAE,CAAC;CAChE;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,+BAA+B;IAC1C,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAA8B;IAEtE,YAAY,sBAAsB,CAAC,EAAE,eAAe,EAEnD;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,EAAE,mBAAmB,GAAG,SAAS,GAAG,wBAAwB,CAOvE;IAED;;;OAGG;IACH,OAAO,CAAC,eAAe;IAgBvB;;;;;;OAMG;IACH,OAAO,CAAC,iBAAiB;CAyB1B"}

package/dist/service/iam/authorize/context/sim-iam-auth-z-caller-context-builder.js

@@ -1,78 +0,0 @@
-/**
- * Resolves the caller principal and any policy sources implied by that caller.
- *
- * Authorization requests may omit a caller, provide an anonymous caller,
- * provide a principal ARN, or provide a complete principal object. This builder
- * applies those cases consistently before identity and resource policies are
- * collected.
- *
- * The configured default principal represents the simulated account root. It is
- * used only when the request omits a caller. An explicit anonymous caller does
- * not fall back to root, allowing services to evaluate unauthenticated
- * requests.
- *
- * Root access is modelled as an inline identity policy because the authorizer
- * evaluates all permissions through policy sources. Keeping that policy here
- * ties it to the rule that identifies the default root principal rather than to
- * general authorization-context assembly.
- */
-export class SimIamAuthZCallerContextBuilder {
-    defaultCallerPrincipal;
-    constructor(defaultCallerPrincipal) {
-        this.defaultCallerPrincipal = defaultCallerPrincipal;
-    }
-    /**
-     * Resolve request caller data and add the simulated root policy when
-     * applicable.
-     */
-    build(caller) {
-        const callerPrincipal = this.callerPrincipal(caller);
-        return {
-            callerPrincipal,
-            rootPolicySources: this.rootPolicySources(callerPrincipal),
-        };
-    }
-    /**
-     * Convert the caller representation used by simulated AWS services into the
-     * principal representation consumed by IAM authorization.
-     */
-    callerPrincipal(caller) {
-        if (caller?.kind === "anonymous") {
-            return undefined;
-        }
-        if (typeof caller?.principal === "string") {
-            return {
-                arn: caller.principal,
-            };
-        }
-        return caller?.principal ?? this.defaultCallerPrincipal;
-    }
-    /**
-     * Give the configured account-root principal unrestricted identity access.
-     *
-     * Comparing ARNs rather than object identity ensures that an explicitly
-     * supplied principal object for the same root ARN receives the same simulated
-     * root permissions as an omitted caller.
-     */
-    rootPolicySources(callerPrincipal) {
-        if (this.defaultCallerPrincipal === undefined ||
-            callerPrincipal?.arn !== this.defaultCallerPrincipal.arn) {
-            return [];
-        }
-        return [
-            {
-                sourceType: "identity-inline",
-                policyName: "SimAwsAccountRootAccess",
-                document: {
-                    Version: "2012-10-17",
-                    Statement: {
-                        Effect: "Allow",
-                        Action: "*",
-                        Resource: "*",
-                    },
-                },
-            },
-        ];
-    }
-}
-//# sourceMappingURL=sim-iam-auth-z-caller-context-builder.js.map

package/dist/service/iam/authorize/context/sim-iam-auth-z-caller-context-builder.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sim-iam-auth-z-caller-context-builder.js","sourceRoot":"","sources":["../../../../../src/service/iam/authorize/context/sim-iam-auth-z-caller-context-builder.ts"],"names":[],"mappings":"AAWA;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,OAAO,+BAA+B;IACzB,sBAAsB,CAA+B;IAEtE,YAAY,sBAAwC;QAClD,IAAI,CAAC,sBAAsB,GAAG,sBAAsB,CAAC;IACvD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAuC;QAC3C,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAErD,OAAO;YACL,eAAe;YACf,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,CAAC,eAAe,CAAC;SAC3D,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,eAAe,CACrB,MAAuC;QAEvC,IAAI,MAAM,EAAE,IAAI,KAAK,WAAW,EAAE,CAAC;YACjC,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,OAAO,MAAM,EAAE,SAAS,KAAK,QAAQ,EAAE,CAAC;YAC1C,OAAO;gBACL,GAAG,EAAE,MAAM,CAAC,SAAS;aACtB,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,EAAE,SAAS,IAAI,IAAI,CAAC,sBAAsB,CAAC;IAC1D,CAAC;IAED;;;;;;OAMG;IACK,iBAAiB,CACvB,eAA4C;QAE5C,IACE,IAAI,CAAC,sBAAsB,KAAK,SAAS;YACzC,eAAe,EAAE,GAAG,KAAK,IAAI,CAAC,sBAAsB,CAAC,GAAG,EACxD,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO;YACL;gBACE,UAAU,EAAE,iBAAiB;gBAC7B,UAAU,EAAE,yBAAyB;gBACrC,QAAQ,EAAE;oBACR,OAAO,EAAE,YAAY;oBACrB,SAAS,EAAE;wBACT,MAAM,EAAE,OAAO;wBACf,MAAM,EAAE,GAAG;wBACX,QAAQ,EAAE,GAAG;qBACd;iBACF;aACF;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/service/iam/authorize/context/sim-iam-auth-z-context-builder.d.ts

@@ -1,74 +0,0 @@
-import type { SimArn } from "../../../aws/arn.js";
-import type { SimAwsCallerContext, SimAwsPrincipal } from "../../../aws/caller/sim-aws-caller.js";
-import type { SimIamPolicy, SimIamPolicyDocument } from "../../policy/sim-iam-policy.js";
-import type { SimIamRole, SimIamRoleName } from "../../role/sim-iam-role.js";
-import type { SimIamAuthZContext } from "./sim-iam-auth-z-context.js";
-export interface SimIamResourcePolicyInput {
-    readonly document: SimIamPolicyDocument;
-    readonly policyName?: string | undefined;
-    readonly resourceArn?: string | undefined;
-}
-/**
- * Entry-point input for sim IAM allow/deny authorization.
- */
-export interface SimIamAuthorizationInput {
-    readonly action: string;
-    readonly resource: string;
-    /**
-     * Simulated request caller context.
-     *
-     * If omitted, authorization defaults to the root principal of the sim Account
-     * owning the sim IAM instance. An explicit anonymous caller suppresses that
-     * fallback and is evaluated without an authenticated principal.
-     */
-    readonly caller?: SimAwsCallerContext | undefined;
-    /**
-     * Resource policies supplied by the service that owns the target resource.
-     *
-     * Resource policies are not loaded from IAM's managed-policy store. They are
-     * supplied by the target service, such as an S3 Bucket policy or other
-     * service-level resource policy.
-     */
-    readonly resourcePolicies?: readonly SimIamResourcePolicyInput[] | undefined;
-}
-/**
- * Builds the authorization context consumed by SimIamAuthorizer.
- *
- * This class keeps the final context assembly in one place: action, resource,
- * caller principal, identity policy sources, and resource policy sources are
- * combined into the shape expected by the authorizer.
- *
- * Role identity-policy resolution is delegated to
- * SimIamAuthZIdentityPolicySourceBuilder. That helper owns the details of
- * finding a principal role, reading inline policies from the role, resolving
- * attached managed policy ARNs, and parsing stored policy documents.
- *
- * Resource policies are supplied by the service that owns the target resource.
- * They are passed through the authorization input rather than loaded from the
- * IAM role or managed-policy stores.
- *
- * Permissions boundaries, session policies, SCPs, and role trust-policy
- * assume-role semantics are not part of this context assembly path yet. Add
- * those concerns through separate policy-source builders so this class stays
- * focused on composing the authorization request.
- */
-export declare class SimIamAuthZContextBuilder {
-    private readonly callerContextBuilder;
-    private readonly identityPolicySourceBuilder;
-    constructor(policies: ReadonlyMap<SimArn, SimIamPolicy>, roles: ReadonlyMap<SimIamRoleName, SimIamRole>, defaultCallerPrincipal?: SimAwsPrincipal);
-    /**
-     * Build the context consumed by SimIamAuthorizer.
-     */
-    build(input: SimIamAuthorizationInput): SimIamAuthZContext;
-    /**
-     * Convert resource policies supplied by the resource-owning service into
-     * authorization policy sources.
-     *
-     * Resource policies are not stored in the IAM role or managed-policy maps.
-     * They arrive with the authorization request because ownership depends on the
-     * target service, such as S3 bucket policies or other service-level policy
-     * documents.
-     */
-    private resourcePolicySources;
-}
-//# sourceMappingURL=sim-iam-auth-z-context-builder.d.ts.map

package/dist/service/iam/authorize/context/sim-iam-auth-z-context-builder.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sim-iam-auth-z-context-builder.d.ts","sourceRoot":"","sources":["../../../../../src/service/iam/authorize/context/sim-iam-auth-z-context-builder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,KAAK,EACV,mBAAmB,EACnB,eAAe,EAChB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,KAAK,EACV,YAAY,EACZ,oBAAoB,EACrB,MAAM,gCAAgC,CAAC;AACxC,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC7E,OAAO,KAAK,EACV,kBAAkB,EAEnB,MAAM,6BAA6B,CAAC;AAIrC,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;IACxC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3C;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B;;;;;;OAMG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;IAElD;;;;;;OAMG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,yBAAyB,EAAE,GAAG,SAAS,CAAC;CAC9E;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAkC;IACvE,OAAO,CAAC,QAAQ,CAAC,2BAA2B,CAAyC;IAErF,YACE,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC,EAC3C,KAAK,EAAE,WAAW,CAAC,cAAc,EAAE,UAAU,CAAC,EAC9C,sBAAsB,CAAC,EAAE,eAAe,EAOzC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK,EAAE,wBAAwB,GAAG,kBAAkB,CAezD;IAED;;;;;;;;OAQG;IACH,OAAO,CAAC,qBAAqB;CAU9B"}

package/dist/service/iam/authorize/context/sim-iam-auth-z-context-builder.js

@@ -1,66 +0,0 @@
-import { SimIamAuthZIdentityPolicySourceBuilder } from "./identity-policy-source/sim-iam-auth-z-id-pol-src-builder.js";
-import { SimIamAuthZCallerContextBuilder } from "./sim-iam-auth-z-caller-context-builder.js";
-/**
- * Builds the authorization context consumed by SimIamAuthorizer.
- *
- * This class keeps the final context assembly in one place: action, resource,
- * caller principal, identity policy sources, and resource policy sources are
- * combined into the shape expected by the authorizer.
- *
- * Role identity-policy resolution is delegated to
- * SimIamAuthZIdentityPolicySourceBuilder. That helper owns the details of
- * finding a principal role, reading inline policies from the role, resolving
- * attached managed policy ARNs, and parsing stored policy documents.
- *
- * Resource policies are supplied by the service that owns the target resource.
- * They are passed through the authorization input rather than loaded from the
- * IAM role or managed-policy stores.
- *
- * Permissions boundaries, session policies, SCPs, and role trust-policy
- * assume-role semantics are not part of this context assembly path yet. Add
- * those concerns through separate policy-source builders so this class stays
- * focused on composing the authorization request.
- */
-export class SimIamAuthZContextBuilder {
-    callerContextBuilder;
-    identityPolicySourceBuilder;
-    constructor(policies, roles, defaultCallerPrincipal) {
-        this.callerContextBuilder = new SimIamAuthZCallerContextBuilder(defaultCallerPrincipal);
-        this.identityPolicySourceBuilder =
-            new SimIamAuthZIdentityPolicySourceBuilder({ policies, roles });
-    }
-    /**
-     * Build the context consumed by SimIamAuthorizer.
-     */
-    build(input) {
-        const callerContext = this.callerContextBuilder.build(input.caller);
-        return {
-            identityPolicies: [
-                ...this.identityPolicySourceBuilder.build(callerContext.callerPrincipal?.arn),
-                ...callerContext.rootPolicySources,
-            ],
-            resourcePolicies: this.resourcePolicySources(input),
-            action: input.action,
-            resource: input.resource,
-            callerPrincipal: callerContext.callerPrincipal,
-        };
-    }
-    /**
-     * Convert resource policies supplied by the resource-owning service into
-     * authorization policy sources.
-     *
-     * Resource policies are not stored in the IAM role or managed-policy maps.
-     * They arrive with the authorization request because ownership depends on the
-     * target service, such as S3 bucket policies or other service-level policy
-     * documents.
-     */
-    resourcePolicySources(input) {
-        return (input.resourcePolicies ?? []).map((policy) => ({
-            sourceType: "resource",
-            document: policy.document,
-            policyName: policy.policyName,
-            resourceArn: policy.resourceArn,
-        }));
-    }
-}
-//# sourceMappingURL=sim-iam-auth-z-context-builder.js.map

package/dist/service/iam/authorize/context/sim-iam-auth-z-context-builder.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sim-iam-auth-z-context-builder.js","sourceRoot":"","sources":["../../../../../src/service/iam/authorize/context/sim-iam-auth-z-context-builder.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,sCAAsC,EAAE,MAAM,+DAA+D,CAAC;AACvH,OAAO,EAAE,+BAA+B,EAAE,MAAM,4CAA4C,CAAC;AAkC7F;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,OAAO,yBAAyB;IACnB,oBAAoB,CAAkC;IACtD,2BAA2B,CAAyC;IAErF,YACE,QAA2C,EAC3C,KAA8C,EAC9C,sBAAwC;QAExC,IAAI,CAAC,oBAAoB,GAAG,IAAI,+BAA+B,CAC7D,sBAAsB,CACvB,CAAC;QACF,IAAI,CAAC,2BAA2B;YAC9B,IAAI,sCAAsC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IACpE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAA+B;QACnC,MAAM,aAAa,GAAG,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAEpE,OAAO;YACL,gBAAgB,EAAE;gBAChB,GAAG,IAAI,CAAC,2BAA2B,CAAC,KAAK,CACvC,aAAa,CAAC,eAAe,EAAE,GAAG,CACnC;gBACD,GAAG,aAAa,CAAC,iBAAiB;aACnC;YACD,gBAAgB,EAAE,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC;YACnD,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,eAAe,EAAE,aAAa,CAAC,eAAe;SAC/C,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACK,qBAAqB,CAC3B,KAA+B;QAE/B,OAAO,CAAC,KAAK,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACrD,UAAU,EAAE,UAAU;YACtB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,WAAW,EAAE,MAAM,CAAC,WAAW;SAChC,CAAC,CAAC,CAAC;IACN,CAAC;CACF"}

package/dist/service/iam/authorize/context/sim-iam-auth-z-context.d.ts

@@ -1,32 +0,0 @@
-import type { SimArn } from "../../../aws/arn.js";
-import type { SimAwsPrincipal } from "../../../aws/caller/sim-aws-caller.js";
-import type { SimIamPolicyDocument } from "../../policy/sim-iam-policy.js";
-export type SimIamAuthZPolicySourceType = "identity-inline" | "identity-managed" | "resource" | "trust" | "permissions-boundary" | "session";
-export interface SimIamAuthZPolicySource {
-    readonly sourceType: SimIamAuthZPolicySourceType;
-    readonly document: SimIamPolicyDocument;
-    readonly policyName?: string | undefined;
-    readonly policyArn?: SimArn | undefined;
-    readonly resourceArn?: string | undefined;
-}
-export interface SimIamAuthZContext {
-    /**
-     * Identity-based policies that grant permissions to the principal.
-     *
-     * This includes inline identity policies and attached managed policies.
-     */
-    readonly identityPolicies: readonly SimIamAuthZPolicySource[];
-    /**
-     * Resource-based policies owned by the target resource or service.
-     *
-     * Resource policies are not gathered from IAM's managed policy store.
-     */
-    readonly resourcePolicies: readonly SimIamAuthZPolicySource[];
-    readonly action: string;
-    readonly resource: string;
-    /**
-     * Resolved caller principal, if the simulated request has one.
-     */
-    readonly callerPrincipal?: SimAwsPrincipal | undefined;
-}
-//# sourceMappingURL=sim-iam-auth-z-context.d.ts.map

package/dist/service/iam/authorize/context/sim-iam-auth-z-context.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sim-iam-auth-z-context.d.ts","sourceRoot":"","sources":["../../../../../src/service/iam/authorize/context/sim-iam-auth-z-context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AAC7E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAE3E,MAAM,MAAM,2BAA2B,GACnC,iBAAiB,GACjB,kBAAkB,GAClB,UAAU,GACV,OAAO,GACP,sBAAsB,GACtB,SAAS,CAAC;AAEd,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,UAAU,EAAE,2BAA2B,CAAC;IACjD,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;IACxC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3C;AAED,MAAM,WAAW,kBAAkB;IACjC;;;;OAIG;IACH,QAAQ,CAAC,gBAAgB,EAAE,SAAS,uBAAuB,EAAE,CAAC;IAE9D;;;;OAIG;IACH,QAAQ,CAAC,gBAAgB,EAAE,SAAS,uBAAuB,EAAE,CAAC;IAE9D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B;;OAEG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;CACxD"}

package/dist/service/iam/authorize/match/sim-iam-policy-statement-matcher.d.ts

@@ -1,68 +0,0 @@
-import type { SimIamAuthZContext, SimIamAuthZPolicySource } from "../context/sim-iam-auth-z-context.js";
-import type { SimIamParsedPolicyStatement } from "../../policy/parse/sim-iam-doc-parser.js";
-/**
- * Matches one parsed IAM policy statement against one authorization request.
- *
- * This class owns the statement-level matching rules so
- * `SimIamPolicyDecision` can stay focused on policy iteration and final
- * Deny/Allow/ImplicitDeny aggregation.
- *
- * The matcher currently covers the IAM dimensions supported by the simulator:
- *
- * - Principal and NotPrincipal for resource policies;
- * - Action and NotAction;
- * - Resource and NotResource.
- *
- * Conditions are not evaluated yet. A statement with a Condition is treated as
- * non-matching so the simulator does not grant access from a statement whose
- * condition semantics it cannot prove.
- */
-export declare class SimIamPolicyStatementMatcher {
-    private readonly context;
-    constructor(context: SimIamAuthZContext);
-    /**
-     * Check whether a parsed statement applies to the current request.
-     */
-    matches(policy: SimIamAuthZPolicySource, statement: SimIamParsedPolicyStatement): boolean;
-    /**
-     * Check the principal part of a statement.
-     *
-     * Identity policies do not carry Principal or NotPrincipal because they are
-     * already attached to the caller identity. Resource policies must name the
-     * caller with Principal, or exclude the caller with NotPrincipal.
-     */
-    private principalMatches;
-    /**
-     * Check every Principal shape supported by the parsed policy model.
-     *
-     * IAM allows Principal to be a string, an array, or an object keyed by
-     * principal type. The simulator currently recognizes AWS and Service
-     * principal objects because those are the forms used by supported services.
-     */
-    private principalValueMatches;
-    /**
-     * Match a single principal pattern against the caller ARN.
-     *
-     * The wildcard principal `*` matches anonymous and signed requests. Any other
-     * principal pattern requires a caller ARN because there is no stable value to
-     * compare when the request has no caller principal.
-     */
-    private principalPatternMatches;
-    /**
-     * Check Action or NotAction against the requested IAM action.
-     *
-     * AWS action names are case-insensitive, so wildcard matching follows that
-     * behavior. The parser guarantees one of Action or NotAction exists; the final
-     * throw protects future parser changes from producing invalid statements.
-     */
-    private actionMatches;
-    /**
-     * Check Resource or NotResource against the requested resource ARN.
-     *
-     * Resource ARNs are matched case-sensitively. This mirrors IAM's ARN matching
-     * behavior and prevents policies from matching resources that differ only by
-     * case.
-     */
-    private resourceMatches;
-}
-//# sourceMappingURL=sim-iam-policy-statement-matcher.d.ts.map

package/dist/service/iam/authorize/match/sim-iam-policy-statement-matcher.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sim-iam-policy-statement-matcher.d.ts","sourceRoot":"","sources":["../../../../../src/service/iam/authorize/match/sim-iam-policy-statement-matcher.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,kBAAkB,EAClB,uBAAuB,EACxB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,0CAA0C,CAAC;AAG5F;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,4BAA4B;IAC3B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAApC,YAA6B,OAAO,EAAE,kBAAkB,EAAI;IAE5D;;OAEG;IACH,OAAO,CACL,MAAM,EAAE,uBAAuB,EAC/B,SAAS,EAAE,2BAA2B,GACrC,OAAO,CAWT;IAED;;;;;;OAMG;IACH,OAAO,CAAC,gBAAgB;IAsBxB;;;;;;OAMG;IACH,OAAO,CAAC,qBAAqB;IA0B7B;;;;;;OAMG;IACH,OAAO,CAAC,uBAAuB;IAc/B;;;;;;OAMG;IACH,OAAO,CAAC,aAAa;IAuBrB;;;;;;OAMG;IACH,OAAO,CAAC,eAAe;CAsBxB"}