@kensio/yulin 0.33.0 → 0.34.2

package/README.md

@@ -22,14 +22,64 @@ npm i -D @kensio/yulin
 - [ACM](./docs/services/acm "Simulated ACM docs")
 - [CloudFormation](./docs/services/cloudformation "Simulated CloudFormation docs")
 - [CloudFront](./docs/services/cloudfront "Simulated CloudFront docs")
+- [IAM](./docs/services/iam "Simulated IAM docs")
 - [Route53](./docs/services/route53 "Simulated Route53 docs")
 - [S3](./docs/services/s3 "Simulated S3 docs")
+- [STS](./docs/services/sts "Simulated STS docs")
 
 ## Usage
 
+### Intercept AWS SDK clients
+
+If your code uses the AWS SDK, you can intercept AWS SDK clients and route their Commands to
+simulated AWS services. Your implementation code uses the SDK as normal and never needs to know that
+it's dealing with a simulator behind the scenes:
+
+```typescript
+import {
+  CreateBucketCommand,
+  GetObjectCommand,
+  PutObjectCommand,
+  S3Client,
+} from "@aws-sdk/client-s3";
+import { SimSdk } from "@kensio/yulin/sdk";
+
+const simSdk = new SimSdk();
+simSdk.intercept(S3Client); // Intercepts every instance of the client class.
+
+// The code under test uses the AWS SDK as normal.
+const s3Client = new S3Client({ region: "eu-west-2" });
+await s3Client.send(new CreateBucketCommand({ Bucket: "foo-bucket" }));
+await s3Client.send(
+  new PutObjectCommand({
+    Bucket: "foo-bucket",
+    Key: "foo.txt",
+    Body: "Hello, world!",
+  }),
+);
+
+const output = await s3Client.send(
+  new GetObjectCommand({ Bucket: "foo-bucket", Key: "foo.txt" }),
+);
+console.log(await output.Body?.transformToString()); // "Hello, world!"
+
+simSdk.restoreAll(); // Or `using simSdk = new SimSdk();` to restore on scope exit.
+```
+
+You can intercept a client class, as above, or a single client instance. The simulated Account and
+Region scope is resolved per send: the Region comes from the sending client's configuration, and
+the Account from the ambient `simAws.runAs(...)` caller when one is set, falling back to the
+simulation defaults.
+
+Each `SimSdk` owns its own isolated simulated AWS, available as `simSdk.simAws` when a test needs
+to seed or inspect simulated state directly. To share state with an existing simulation, wrap it
+with `new SimSdk({ simAws })`.
+
+See the [simulated AWS SDK docs](./docs/sdk "Simulated AWS SDK docs") for full usage.
+
 ### Direct interaction with simulated AWS
 
-Create and interact directly with a simulated AWS:
+You can also create and interact directly with a simulated AWS:
 
 ```typescript
 import { SimAws } from "@kensio/yulin";

package/dist/command/command-handler.d.ts

@@ -1,4 +1,4 @@
 export interface CommandHandler<TCommand, TOutput> {
-    handle(cmd: TCommand): Promise<TOutput>;
+    handle(command: TCommand): Promise<TOutput>;
 }
 //# sourceMappingURL=command-handler.d.ts.map

package/dist/command/command-handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"command-handler.d.ts","sourceRoot":"","sources":["../../src/command/command-handler.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,cAAc,CAAC,QAAQ,EAAE,OAAO;IAC/C,MAAM,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACzC"}
+{"version":3,"file":"command-handler.d.ts","sourceRoot":"","sources":["../../src/command/command-handler.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,cAAc,CAAC,QAAQ,EAAE,OAAO;IAC/C,MAAM,CAAC,OAAO,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC7C"}

package/dist/sdk/client/sim-sdk-client.d.ts

@@ -0,0 +1,18 @@
+import { type AwsRegionName } from "../../service/aws/sim-aws-region.js";
+/**
+ * Identify the AWS service an intercepted SDK client belongs to.
+ *
+ * Real SDK clients carry the service identity in their resolved config, e.g.
+ * "S3" or "DynamoDB", which is more reliable than parsing class names.
+ */
+export declare function simSdkClientServiceId(client: unknown): string;
+/**
+ * Resolve the AWS Region an intercepted SDK client is configured for.
+ *
+ * Real SDK clients normalize the region to an async provider function. The
+ * fallback Region is used when the client has no region configured or its
+ * provider fails, so interception never depends on real environment or
+ * network region resolution.
+ */
+export declare function simSdkClientRegionName(client: unknown, fallback: AwsRegionName): Promise<AwsRegionName>;
+//# sourceMappingURL=sim-sdk-client.d.ts.map

package/dist/sdk/client/sim-sdk-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sdk-client.d.ts","sourceRoot":"","sources":["../../../src/sdk/client/sim-sdk-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,aAAa,EACnB,MAAM,qCAAqC,CAAC;AAe7C;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAS7D;AAED;;;;;;;GAOG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,OAAO,EACf,QAAQ,EAAE,aAAa,GACtB,OAAO,CAAC,aAAa,CAAC,CAgBxB"}

package/dist/sdk/client/sim-sdk-client.js

@@ -0,0 +1,62 @@
+import { AWS_REGION_NAMES, } from "../../service/aws/sim-aws-region.js";
+import { isRecord } from "../../util/type-guard/record.js";
+import { SimSdkInvalidClientError } from "../error/sim-sdk.error.js";
+/**
+ * Get the resolved config of an SDK client, if it has one.
+ */
+function clientConfig(client) {
+    if (!isRecord(client)) {
+        return undefined;
+    }
+    const config = client["config"];
+    return isRecord(config) ? config : undefined;
+}
+/**
+ * Identify the AWS service an intercepted SDK client belongs to.
+ *
+ * Real SDK clients carry the service identity in their resolved config, e.g.
+ * "S3" or "DynamoDB", which is more reliable than parsing class names.
+ */
+export function simSdkClientServiceId(client) {
+    const serviceId = clientConfig(client)?.["serviceId"];
+    if (typeof serviceId !== "string" || serviceId.length === 0) {
+        throw new SimSdkInvalidClientError("Intercepted SDK client has no config.serviceId to identify its AWS " +
+            "service");
+    }
+    return serviceId;
+}
+/**
+ * Resolve the AWS Region an intercepted SDK client is configured for.
+ *
+ * Real SDK clients normalize the region to an async provider function. The
+ * fallback Region is used when the client has no region configured or its
+ * provider fails, so interception never depends on real environment or
+ * network region resolution.
+ */
+export async function simSdkClientRegionName(client, fallback) {
+    const region = clientConfig(client)?.["region"];
+    if (typeof region === "string") {
+        return toAwsRegionName(region);
+    }
+    if (typeof region !== "function") {
+        return fallback;
+    }
+    let resolved;
+    try {
+        resolved = await region();
+    }
+    catch {
+        return fallback;
+    }
+    return typeof resolved === "string" ? toAwsRegionName(resolved) : fallback;
+}
+/**
+ * Validate that a client-configured region string is a known AWS Region.
+ */
+function toAwsRegionName(value) {
+    if (!AWS_REGION_NAMES.includes(value)) {
+        throw new SimSdkInvalidClientError(`Intercepted SDK client Region ${value} is not a known AWS Region`);
+    }
+    return value;
+}
+//# sourceMappingURL=sim-sdk-client.js.map

package/dist/sdk/client/sim-sdk-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sdk-client.js","sourceRoot":"","sources":["../../../src/sdk/client/sim-sdk-client.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,GAEjB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAC3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAErE;;GAEG;AACH,SAAS,YAAY,CAAC,MAAe;IACnC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACtB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChC,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAe;IACnD,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC;IACtD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,wBAAwB,CAChC,qEAAqE;YACnE,SAAS,CACZ,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAAe,EACf,QAAuB;IAEvB,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,UAAU,EAAE,CAAC;QACjC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,IAAI,QAAiB,CAAC;IACtB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAO,MAAwB,EAAE,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC7E,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,KAAa;IACpC,IAAI,CAAE,gBAAsC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,wBAAwB,CAChC,iCAAiC,KAAK,4BAA4B,CACnE,CAAC;IACJ,CAAC;IACD,OAAO,KAAsB,CAAC;AAChC,CAAC"}

package/dist/sdk/error/sim-sdk.error.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Base class for simulated AWS SDK errors.
+ */
+export declare class SimSdkError extends Error {
+}
+/**
+ * The intercepted client is not usable for simulated AWS SDK routing.
+ */
+export declare class SimSdkInvalidClientError extends SimSdkError {
+    readonly name = "SimSdkInvalidClientError";
+}
+/**
+ * The intercepted client belongs to an AWS service without simulated AWS SDK
+ * interception support.
+ */
+export declare class SimSdkUnknownServiceError extends SimSdkError {
+    readonly name = "SimSdkUnknownServiceError";
+}
+/**
+ * The intercepted SDK Command is not supported by the simulated AWS service.
+ */
+export declare class SimSdkUnsupportedCommandError extends SimSdkError {
+    readonly name = "SimSdkUnsupportedCommandError";
+}
+/**
+ * The SDK Command is excluded by an interception's Command allow list.
+ */
+export declare class SimSdkCommandNotInterceptedError extends SimSdkError {
+    readonly name = "SimSdkCommandNotInterceptedError";
+}
+/**
+ * The SDK client instance or client class is already intercepted.
+ *
+ * Multiple simultaneous interceptions of the same client could only ever be
+ * confusing, so the existing interception must be restored first.
+ */
+export declare class SimSdkAlreadyInterceptedError extends SimSdkError {
+    readonly name = "SimSdkAlreadyInterceptedError";
+}
+/**
+ * The intercepted SDK client send was called with an unsupported callback
+ * argument.
+ */
+export declare class SimSdkCallbackNotSupportedError extends SimSdkError {
+    readonly name = "SimSdkCallbackNotSupportedError";
+}
+/**
+ * A simulated SDK stream body was consumed more than once.
+ */
+export declare class SimSdkStreamAlreadyConsumedError extends SimSdkError {
+    readonly name = "SimSdkStreamAlreadyConsumedError";
+}
+//# sourceMappingURL=sim-sdk.error.d.ts.map

package/dist/sdk/error/sim-sdk.error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sdk.error.d.ts","sourceRoot":"","sources":["../../../src/sdk/error/sim-sdk.error.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,qBAAa,WAAY,SAAQ,KAAK;CAAG;AAEzC;;GAEG;AACH,qBAAa,wBAAyB,SAAQ,WAAW;IACvD,SAAyB,IAAI,8BAA8B;CAC5D;AAED;;;GAGG;AACH,qBAAa,yBAA0B,SAAQ,WAAW;IACxD,SAAyB,IAAI,+BAA+B;CAC7D;AAED;;GAEG;AACH,qBAAa,6BAA8B,SAAQ,WAAW;IAC5D,SAAyB,IAAI,mCAAmC;CACjE;AAED;;GAEG;AACH,qBAAa,gCAAiC,SAAQ,WAAW;IAC/D,SAAyB,IAAI,sCAAsC;CACpE;AAED;;;;;GAKG;AACH,qBAAa,6BAA8B,SAAQ,WAAW;IAC5D,SAAyB,IAAI,mCAAmC;CACjE;AAED;;;GAGG;AACH,qBAAa,+BAAgC,SAAQ,WAAW;IAC9D,SAAyB,IAAI,qCAAqC;CACnE;AAED;;GAEG;AACH,qBAAa,gCAAiC,SAAQ,WAAW;IAC/D,SAAyB,IAAI,sCAAsC;CACpE"}

package/dist/sdk/error/sim-sdk.error.js

@@ -0,0 +1,53 @@
+/**
+ * Base class for simulated AWS SDK errors.
+ */
+export class SimSdkError extends Error {
+}
+/**
+ * The intercepted client is not usable for simulated AWS SDK routing.
+ */
+export class SimSdkInvalidClientError extends SimSdkError {
+    name = "SimSdkInvalidClientError";
+}
+/**
+ * The intercepted client belongs to an AWS service without simulated AWS SDK
+ * interception support.
+ */
+export class SimSdkUnknownServiceError extends SimSdkError {
+    name = "SimSdkUnknownServiceError";
+}
+/**
+ * The intercepted SDK Command is not supported by the simulated AWS service.
+ */
+export class SimSdkUnsupportedCommandError extends SimSdkError {
+    name = "SimSdkUnsupportedCommandError";
+}
+/**
+ * The SDK Command is excluded by an interception's Command allow list.
+ */
+export class SimSdkCommandNotInterceptedError extends SimSdkError {
+    name = "SimSdkCommandNotInterceptedError";
+}
+/**
+ * The SDK client instance or client class is already intercepted.
+ *
+ * Multiple simultaneous interceptions of the same client could only ever be
+ * confusing, so the existing interception must be restored first.
+ */
+export class SimSdkAlreadyInterceptedError extends SimSdkError {
+    name = "SimSdkAlreadyInterceptedError";
+}
+/**
+ * The intercepted SDK client send was called with an unsupported callback
+ * argument.
+ */
+export class SimSdkCallbackNotSupportedError extends SimSdkError {
+    name = "SimSdkCallbackNotSupportedError";
+}
+/**
+ * A simulated SDK stream body was consumed more than once.
+ */
+export class SimSdkStreamAlreadyConsumedError extends SimSdkError {
+    name = "SimSdkStreamAlreadyConsumedError";
+}
+//# sourceMappingURL=sim-sdk.error.js.map

package/dist/sdk/error/sim-sdk.error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sdk.error.js","sourceRoot":"","sources":["../../../src/sdk/error/sim-sdk.error.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,OAAO,WAAY,SAAQ,KAAK;CAAG;AAEzC;;GAEG;AACH,MAAM,OAAO,wBAAyB,SAAQ,WAAW;IAC9B,IAAI,GAAG,0BAA0B,CAAC;CAC5D;AAED;;;GAGG;AACH,MAAM,OAAO,yBAA0B,SAAQ,WAAW;IAC/B,IAAI,GAAG,2BAA2B,CAAC;CAC7D;AAED;;GAEG;AACH,MAAM,OAAO,6BAA8B,SAAQ,WAAW;IACnC,IAAI,GAAG,+BAA+B,CAAC;CACjE;AAED;;GAEG;AACH,MAAM,OAAO,gCAAiC,SAAQ,WAAW;IACtC,IAAI,GAAG,kCAAkC,CAAC;CACpE;AAED;;;;;GAKG;AACH,MAAM,OAAO,6BAA8B,SAAQ,WAAW;IACnC,IAAI,GAAG,+BAA+B,CAAC;CACjE;AAED;;;GAGG;AACH,MAAM,OAAO,+BAAgC,SAAQ,WAAW;IACrC,IAAI,GAAG,iCAAiC,CAAC;CACnE;AAED;;GAEG;AACH,MAAM,OAAO,gCAAiC,SAAQ,WAAW;IACtC,IAAI,GAAG,kCAAkC,CAAC;CACpE"}

package/dist/sdk/index.d.ts

@@ -0,0 +1,10 @@
+export { SimSdk } from "./sim-sdk.js";
+export type { SimSdkCommandType, SimSdkInterceptOptions, SimSdkInterceptTarget, } from "./sim-sdk.js";
+export { SimSdkInterception } from "./sim-sdk-interception.js";
+export type { SimSdkCommand, SimSdkCommandContext, SimSdkCommandRoute, SimSdkCommandRouter, } from "./router/sim-sdk-command-router.type.js";
+export { simSdkCallerOptions } from "./router/sim-sdk-caller-options.js";
+export type { SimSdkCallerOptions } from "./router/sim-sdk-caller-options.js";
+export { simSdkStreamBody } from "./stream/sim-sdk-stream-body.js";
+export type { SimSdkStreamBody, SimSdkStreamBodyMethods, } from "./stream/sim-sdk-stream-body.js";
+export { SimSdkError, SimSdkAlreadyInterceptedError, SimSdkCallbackNotSupportedError, SimSdkCommandNotInterceptedError, SimSdkInvalidClientError, SimSdkStreamAlreadyConsumedError, SimSdkUnknownServiceError, SimSdkUnsupportedCommandError, } from "./error/sim-sdk.error.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/sdk/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/sdk/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,YAAY,EACV,iBAAiB,EACjB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,YAAY,EACV,aAAa,EACb,oBAAoB,EACpB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,YAAY,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,YAAY,EACV,gBAAgB,EAChB,uBAAuB,GACxB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,WAAW,EACX,6BAA6B,EAC7B,+BAA+B,EAC/B,gCAAgC,EAChC,wBAAwB,EACxB,gCAAgC,EAChC,yBAAyB,EACzB,6BAA6B,GAC9B,MAAM,0BAA0B,CAAC"}

package/dist/sdk/index.js

@@ -0,0 +1,6 @@
+export { SimSdk } from "./sim-sdk.js";
+export { SimSdkInterception } from "./sim-sdk-interception.js";
+export { simSdkCallerOptions } from "./router/sim-sdk-caller-options.js";
+export { simSdkStreamBody } from "./stream/sim-sdk-stream-body.js";
+export { SimSdkError, SimSdkAlreadyInterceptedError, SimSdkCallbackNotSupportedError, SimSdkCommandNotInterceptedError, SimSdkInvalidClientError, SimSdkStreamAlreadyConsumedError, SimSdkUnknownServiceError, SimSdkUnsupportedCommandError, } from "./error/sim-sdk.error.js";
+//# sourceMappingURL=index.js.map

package/dist/sdk/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/sdk/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAMtC,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAO/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAEzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAKnE,OAAO,EACL,WAAW,EACX,6BAA6B,EAC7B,+BAA+B,EAC/B,gCAAgC,EAChC,wBAAwB,EACxB,gCAAgC,EAChC,yBAAyB,EACzB,6BAA6B,GAC9B,MAAM,0BAA0B,CAAC"}

package/dist/sdk/module/sim-sdk-module-client-interceptor.d.ts

@@ -0,0 +1,55 @@
+import type { AwsRegionName } from "../../service/aws/sim-aws-region.js";
+import { type SimSdkSendHandler } from "../send-patch.js";
+interface SimSdkModuleClientInterceptorProperties {
+    readonly sendHandler: SimSdkSendHandler;
+    readonly defaultRegionName?: AwsRegionName | undefined;
+}
+/**
+ * Intercepts the SDK client classes exported by an AWS SDK package module.
+ *
+ * Client classes are wrapped so every instance constructed from the wrapped
+ * module gets a per-instance simulated send patch. The patch shadows send as
+ * an own property on the instance, so the real class prototype is never
+ * modified and nothing leaks to code using the module directly.
+ *
+ * All other exports, such as Command classes, error classes and constants,
+ * pass through untouched by identity, so instanceof checks and command
+ * construction behave exactly as with the real module.
+ */
+export declare class SimSdkModuleClientInterceptor {
+    private readonly sendHandler;
+    private readonly defaultRegionName;
+    constructor(properties: SimSdkModuleClientInterceptorProperties);
+    /**
+     * Build an intercepted copy of a module's exports.
+     *
+     * The source exports object is never mutated: the host module registry
+     * caches it process-wide, so mutation would leak interception into code
+     * importing the module normally.
+     */
+    interceptModule(moduleExports: object): object;
+    private interceptExport;
+    /**
+     * SDK v3 client classes inherit send from the smithy Client base class, so
+     * a prototype-chain check finds clients while Command classes and other
+     * function exports pass through.
+     */
+    private isClientClass;
+    /**
+     * Wrap a client class so constructed instances are send-patched.
+     *
+     * Reflect.construct with the incoming new target preserves subclassing and
+     * instanceof against the real class.
+     */
+    private wrapClientClass;
+    /**
+     * Default the client configuration region, as the real Lambda runtime does
+     * by supplying AWS_REGION to the SDK's environment region provider.
+     *
+     * An explicit region in the constructed configuration always wins.
+     */
+    private regionDefaultedArguments;
+    private isConfigurationObject;
+}
+export {};
+//# sourceMappingURL=sim-sdk-module-client-interceptor.d.ts.map

package/dist/sdk/module/sim-sdk-module-client-interceptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sdk-module-client-interceptor.d.ts","sourceRoot":"","sources":["../../../src/sdk/module/sim-sdk-module-client-interceptor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,EAAoB,KAAK,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAO5E,UAAU,uCAAuC;IAC/C,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAC;IACxC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,aAAa,GAAG,SAAS,CAAC;CACxD;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,6BAA6B;IACxC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAoB;IAChD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAA4B;IAE9D,YAAY,UAAU,EAAE,uCAAuC,EAG9D;IAED;;;;;;OAMG;IACH,eAAe,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAO7C;IAED,OAAO,CAAC,eAAe;IAOvB;;;;OAIG;IACH,OAAO,CAAC,aAAa;IAQrB;;;;;OAKG;IACH,OAAO,CAAC,eAAe;IAwBvB;;;;;OAKG;IACH,OAAO,CAAC,wBAAwB;IAiBhC,OAAO,CAAC,qBAAqB;CAQ9B"}

package/dist/sdk/module/sim-sdk-module-client-interceptor.js

@@ -0,0 +1,97 @@
+import { installSendPatch } from "../send-patch.js";
+/**
+ * Intercepts the SDK client classes exported by an AWS SDK package module.
+ *
+ * Client classes are wrapped so every instance constructed from the wrapped
+ * module gets a per-instance simulated send patch. The patch shadows send as
+ * an own property on the instance, so the real class prototype is never
+ * modified and nothing leaks to code using the module directly.
+ *
+ * All other exports, such as Command classes, error classes and constants,
+ * pass through untouched by identity, so instanceof checks and command
+ * construction behave exactly as with the real module.
+ */
+export class SimSdkModuleClientInterceptor {
+    sendHandler;
+    defaultRegionName;
+    constructor(properties) {
+        this.sendHandler = properties.sendHandler;
+        this.defaultRegionName = properties.defaultRegionName;
+    }
+    /**
+     * Build an intercepted copy of a module's exports.
+     *
+     * The source exports object is never mutated: the host module registry
+     * caches it process-wide, so mutation would leak interception into code
+     * importing the module normally.
+     */
+    interceptModule(moduleExports) {
+        const intercepted = {};
+        for (const [exportName, exportValue] of Object.entries(moduleExports)) {
+            // eslint-disable-next-line security/detect-object-injection -- copying the module's own export names verbatim.
+            intercepted[exportName] = this.interceptExport(exportValue);
+        }
+        return intercepted;
+    }
+    interceptExport(exportValue) {
+        if (this.isClientClass(exportValue)) {
+            return this.wrapClientClass(exportValue);
+        }
+        return exportValue;
+    }
+    /**
+     * SDK v3 client classes inherit send from the smithy Client base class, so
+     * a prototype-chain check finds clients while Command classes and other
+     * function exports pass through.
+     */
+    isClientClass(value) {
+        if (typeof value !== "function") {
+            return false;
+        }
+        const prototype = value.prototype;
+        return typeof prototype?.send === "function";
+    }
+    /**
+     * Wrap a client class so constructed instances are send-patched.
+     *
+     * Reflect.construct with the incoming new target preserves subclassing and
+     * instanceof against the real class.
+     */
+    wrapClientClass(clientClass) {
+        const sendHandler = this.sendHandler;
+        const configureArguments = (constructorArguments) => this.regionDefaultedArguments(constructorArguments);
+        return new Proxy(clientClass, {
+            construct(target, constructorArguments, newTarget) {
+                const instance = Reflect.construct(target, configureArguments(constructorArguments), newTarget);
+                installSendPatch(instance, sendHandler);
+                return instance;
+            },
+        });
+    }
+    /**
+     * Default the client configuration region, as the real Lambda runtime does
+     * by supplying AWS_REGION to the SDK's environment region provider.
+     *
+     * An explicit region in the constructed configuration always wins.
+     */
+    regionDefaultedArguments(constructorArguments) {
+        if (this.defaultRegionName === undefined) {
+            return constructorArguments;
+        }
+        const [configuration, ...rest] = constructorArguments;
+        if (!this.isConfigurationObject(configuration)) {
+            return constructorArguments;
+        }
+        if (configuration?.["region"] !== undefined) {
+            return constructorArguments;
+        }
+        return [{ ...configuration, region: this.defaultRegionName }, ...rest];
+    }
+    isConfigurationObject(configuration) {
+        if (configuration === undefined) {
+            return true;
+        }
+        return typeof configuration === "object" && configuration !== null;
+    }
+}
+//# sourceMappingURL=sim-sdk-module-client-interceptor.js.map

package/dist/sdk/module/sim-sdk-module-client-interceptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sdk-module-client-interceptor.js","sourceRoot":"","sources":["../../../src/sdk/module/sim-sdk-module-client-interceptor.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAA0B,MAAM,kBAAkB,CAAC;AAY5E;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,6BAA6B;IACvB,WAAW,CAAoB;IAC/B,iBAAiB,CAA4B;IAE9D,YAAY,UAAmD;QAC7D,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,iBAAiB,GAAG,UAAU,CAAC,iBAAiB,CAAC;IACxD,CAAC;IAED;;;;;;OAMG;IACH,eAAe,CAAC,aAAqB;QACnC,MAAM,WAAW,GAA4B,EAAE,CAAC;QAChD,KAAK,MAAM,CAAC,UAAU,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;YACtE,+GAA+G;YAC/G,WAAW,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,WAAW,CAAC;IACrB,CAAC;IAEO,eAAe,CAAC,WAAoB;QAC1C,IAAI,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QAC3C,CAAC;QACD,OAAO,WAAW,CAAC;IACrB,CAAC;IAED;;;;OAIG;IACK,aAAa,CAAC,KAAc;QAClC,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE,CAAC;YAChC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,SAAS,GAAI,KAA4C,CAAC,SAAS,CAAC;QAC1E,OAAO,OAAO,SAAS,EAAE,IAAI,KAAK,UAAU,CAAC;IAC/C,CAAC;IAED;;;;;OAKG;IACK,eAAe,CACrB,WAAoC;QAEpC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACrC,MAAM,kBAAkB,GAAG,CAAC,oBAA+B,EAAa,EAAE,CACxE,IAAI,CAAC,wBAAwB,CAAC,oBAAoB,CAAC,CAAC;QAEtD,OAAO,IAAI,KAAK,CAAC,WAAW,EAAE;YAC5B,SAAS,CACP,MAA+B,EAC/B,oBAA+B,EAC/B,SAAmB;gBAEnB,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,CAChC,MAAM,EACN,kBAAkB,CAAC,oBAAoB,CAAC,EACxC,SAAS,CACA,CAAC;gBACZ,gBAAgB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;gBACxC,OAAO,QAAQ,CAAC;YAClB,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACK,wBAAwB,CAAC,oBAA+B;QAC9D,IAAI,IAAI,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACzC,OAAO,oBAAoB,CAAC;QAC9B,CAAC;QAED,MAAM,CAAC,aAAa,EAAE,GAAG,IAAI,CAAC,GAAG,oBAAoB,CAAC;QACtD,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,aAAa,CAAC,EAAE,CAAC;YAC/C,OAAO,oBAAoB,CAAC;QAC9B,CAAC;QAED,IAAI,aAAa,EAAE,CAAC,QAAQ,CAAC,KAAK,SAAS,EAAE,CAAC;YAC5C,OAAO,oBAAoB,CAAC;QAC9B,CAAC;QAED,OAAO,CAAC,EAAE,GAAG,aAAa,EAAE,MAAM,EAAE,IAAI,CAAC,iBAAiB,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC;IACzE,CAAC;IAEO,qBAAqB,CAC3B,aAAsB;QAEtB,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,OAAO,aAAa,KAAK,QAAQ,IAAI,aAAa,KAAK,IAAI,CAAC;IACrE,CAAC;CACF"}

package/dist/sdk/router/resolve-sim-sdk-command-router.d.ts

@@ -0,0 +1,16 @@
+import type { SimAwsAccountId } from "../../service/aws/sim-aws-account.js";
+import type { AwsRegionName } from "../../service/aws/sim-aws-region.js";
+import type { SimAws } from "../../service/aws/sim-aws.js";
+import type { SimSdkCommandRouter } from "./sim-sdk-command-router.type.js";
+/**
+ * Resolve the scoped simulated service SDK Command router for an intercepted
+ * client's AWS service.
+ *
+ * Mirrors the CloudFormation service resolver: the interception engine
+ * resolves the Account/Region scope and the service identity, then the scoped
+ * simulated service owns its own Command routing. Simulated services come
+ * into existence lazily here, on the first intercepted Command that reaches
+ * them.
+ */
+export declare function resolveSimSdkCommandRouter(simAws: SimAws, serviceId: string, accountId: SimAwsAccountId | string, regionName: AwsRegionName): SimSdkCommandRouter;
+//# sourceMappingURL=resolve-sim-sdk-command-router.d.ts.map

package/dist/sdk/router/resolve-sim-sdk-command-router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-sim-sdk-command-router.d.ts","sourceRoot":"","sources":["../../../src/sdk/router/resolve-sim-sdk-command-router.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAC;AAC5E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,8BAA8B,CAAC;AAE3D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAE5E;;;;;;;;;GASG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,eAAe,GAAG,MAAM,EACnC,UAAU,EAAE,aAAa,GACxB,mBAAmB,CAsCrB"}

package/dist/sdk/router/resolve-sim-sdk-command-router.js

@@ -0,0 +1,48 @@
+import { SimSdkUnknownServiceError } from "../error/sim-sdk.error.js";
+/**
+ * Resolve the scoped simulated service SDK Command router for an intercepted
+ * client's AWS service.
+ *
+ * Mirrors the CloudFormation service resolver: the interception engine
+ * resolves the Account/Region scope and the service identity, then the scoped
+ * simulated service owns its own Command routing. Simulated services come
+ * into existence lazily here, on the first intercepted Command that reaches
+ * them.
+ */
+export function resolveSimSdkCommandRouter(simAws, serviceId, accountId, regionName) {
+    const scoped = simAws.account(accountId).region(regionName);
+    switch (serviceId) {
+        case "ACM": {
+            return scoped.acm().sdkCommandRouter();
+        }
+        case "CloudFormation": {
+            return scoped.cloudFormation().sdkCommandRouter();
+        }
+        case "CloudFront": {
+            return scoped.cloudFront().sdkCommandRouter();
+        }
+        case "DynamoDB": {
+            return scoped.dynamoDb().sdkCommandRouter();
+        }
+        case "IAM": {
+            return scoped.iam().sdkCommandRouter();
+        }
+        case "Lambda": {
+            return scoped.lambda().sdkCommandRouter();
+        }
+        case "Route 53": {
+            return scoped.route53().sdkCommandRouter();
+        }
+        case "S3": {
+            return scoped.s3().sdkCommandRouter();
+        }
+        case "STS": {
+            return scoped.sts().sdkCommandRouter();
+        }
+        default: {
+            throw new SimSdkUnknownServiceError(`Simulated AWS has no SDK interception support for service ` +
+                `${serviceId} yet`);
+        }
+    }
+}
+//# sourceMappingURL=resolve-sim-sdk-command-router.js.map

package/dist/sdk/router/resolve-sim-sdk-command-router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-sim-sdk-command-router.js","sourceRoot":"","sources":["../../../src/sdk/router/resolve-sim-sdk-command-router.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAGtE;;;;;;;;;GASG;AACH,MAAM,UAAU,0BAA0B,CACxC,MAAc,EACd,SAAiB,EACjB,SAAmC,EACnC,UAAyB;IAEzB,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAE5D,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,KAAK,EAAE,CAAC;YACX,OAAO,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAgB,EAAE,CAAC;QACzC,CAAC;QACD,KAAK,gBAAgB,EAAE,CAAC;YACtB,OAAO,MAAM,CAAC,cAAc,EAAE,CAAC,gBAAgB,EAAE,CAAC;QACpD,CAAC;QACD,KAAK,YAAY,EAAE,CAAC;YAClB,OAAO,MAAM,CAAC,UAAU,EAAE,CAAC,gBAAgB,EAAE,CAAC;QAChD,CAAC;QACD,KAAK,UAAU,EAAE,CAAC;YAChB,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC,gBAAgB,EAAE,CAAC;QAC9C,CAAC;QACD,KAAK,KAAK,EAAE,CAAC;YACX,OAAO,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAgB,EAAE,CAAC;QACzC,CAAC;QACD,KAAK,QAAQ,EAAE,CAAC;YACd,OAAO,MAAM,CAAC,MAAM,EAAE,CAAC,gBAAgB,EAAE,CAAC;QAC5C,CAAC;QACD,KAAK,UAAU,EAAE,CAAC;YAChB,OAAO,MAAM,CAAC,OAAO,EAAE,CAAC,gBAAgB,EAAE,CAAC;QAC7C,CAAC;QACD,KAAK,IAAI,EAAE,CAAC;YACV,OAAO,MAAM,CAAC,EAAE,EAAE,CAAC,gBAAgB,EAAE,CAAC;QACxC,CAAC;QACD,KAAK,KAAK,EAAE,CAAC;YACX,OAAO,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAgB,EAAE,CAAC;QACzC,CAAC;QACD,SAAS,CAAC;YACR,MAAM,IAAI,yBAAyB,CACjC,4DAA4D;gBAC1D,GAAG,SAAS,MAAM,CACrB,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/sdk/router/sim-sdk-caller-options.d.ts

@@ -0,0 +1,19 @@
+import type { SimAwsPrincipal } from "../../service/aws/caller/sim-aws-caller.js";
+import type { SimSdkCommandContext } from "./sim-sdk-command-router.type.js";
+/**
+ * Simulated service request options carrying the resolved caller.
+ *
+ * Structurally compatible with each simulated service's own request options,
+ * such as SimS3RequestOptions and SimDynamoDbRequestOptions.
+ */
+export interface SimSdkCallerOptions {
+    readonly caller: SimAwsPrincipal;
+}
+/**
+ * Build service request options from a routed Command's context, so service
+ * routers can pass the resolved caller through to simulated operations in one
+ * expression. Returns undefined when no caller applies, preserving each
+ * operation's default-caller behaviour.
+ */
+export declare function simSdkCallerOptions(context: SimSdkCommandContext): SimSdkCallerOptions | undefined;
+//# sourceMappingURL=sim-sdk-caller-options.d.ts.map

package/dist/sdk/router/sim-sdk-caller-options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sdk-caller-options.d.ts","sourceRoot":"","sources":["../../../src/sdk/router/sim-sdk-caller-options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAClF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAE7E;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;CAClC;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,oBAAoB,GAC5B,mBAAmB,GAAG,SAAS,CAEjC"}

package/dist/sdk/router/sim-sdk-caller-options.js

@@ -0,0 +1,10 @@
+/**
+ * Build service request options from a routed Command's context, so service
+ * routers can pass the resolved caller through to simulated operations in one
+ * expression. Returns undefined when no caller applies, preserving each
+ * operation's default-caller behaviour.
+ */
+export function simSdkCallerOptions(context) {
+    return context.caller === undefined ? undefined : { caller: context.caller };
+}
+//# sourceMappingURL=sim-sdk-caller-options.js.map

package/dist/sdk/router/sim-sdk-caller-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sdk-caller-options.js","sourceRoot":"","sources":["../../../src/sdk/router/sim-sdk-caller-options.ts"],"names":[],"mappings":"AAaA;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAA6B;IAE7B,OAAO,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;AAC/E,CAAC"}

package/dist/sdk/router/sim-sdk-command-router.type.d.ts

@@ -0,0 +1,44 @@
+import type { SimAwsPrincipal } from "../../service/aws/caller/sim-aws-caller.js";
+/**
+ * Minimal structural SDK Command shape as received by interception.
+ */
+export interface SimSdkCommand {
+    readonly input?: unknown;
+}
+/**
+ * Per-send context resolved by the interception engine for a routed Command.
+ */
+export interface SimSdkCommandContext {
+    /**
+     * The most accurate simulated caller the engine could resolve for this
+     * send, such as the ambient SimAws.runAs principal, when one applies.
+     * Routes pass it through to the simulated service operation so IAM
+     * authorization applies to the caller rather than the Account root
+     * default.
+     */
+    readonly caller?: SimAwsPrincipal | undefined;
+}
+/**
+ * Route one intercepted SDK Command to a simulated service operation.
+ */
+export type SimSdkCommandRoute = (command: SimSdkCommand, context: SimSdkCommandContext) => Promise<unknown>;
+/**
+ * Routes intercepted SDK Commands to the operations of one scoped simulated
+ * AWS service instance.
+ *
+ * Each simulated service owns its router implementation, next to its
+ * CloudFormation resource factory: the SDK interception engine routes, but
+ * never knows service Command schemas.
+ */
+export interface SimSdkCommandRouter {
+    /**
+     * The SDK Command names this simulated service can handle.
+     */
+    supportedCommandNames(): readonly string[];
+    /**
+     * Get the route for an SDK Command name, if the simulated service supports
+     * it.
+     */
+    route(commandName: string): SimSdkCommandRoute | undefined;
+}
+//# sourceMappingURL=sim-sdk-command-router.type.d.ts.map

package/dist/sdk/router/sim-sdk-command-router.type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sdk-command-router.type.d.ts","sourceRoot":"","sources":["../../../src/sdk/router/sim-sdk-command-router.type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAElF;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;;;;OAMG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;CAC/C;AAED;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG,CAC/B,OAAO,EAAE,aAAa,EACtB,OAAO,EAAE,oBAAoB,KAC1B,OAAO,CAAC,OAAO,CAAC,CAAC;AAEtB;;;;;;;GAOG;AACH,MAAM,WAAW,mBAAmB;IAClC;;OAEG;IACH,qBAAqB,IAAI,SAAS,MAAM,EAAE,CAAC;IAE3C;;;OAGG;IACH,KAAK,CAAC,WAAW,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAAC;CAC5D"}

package/dist/sdk/router/sim-sdk-command-router.type.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sim-sdk-command-router.type.js.map