@kensio/yulin 0.34.0 → 0.34.2

package/dist/dist-hidden/service/s3/command/create-bucket/create-bucket.handler.js

@@ -1,68 +0,0 @@
-import { SimS3Bucket } from "../../bucket/sim-s3-bucket.js";
-import { assertDefined } from "../../../../util/type-guard/defined.js";
-import { BackgroundTasks, } from "../../../../util/background/background.js";
-import { SimS3BucketNameAvailability } from "../../bucket/name-availability/sim-s3-bucket-name-availability.js";
-import { validateS3BucketName } from "../../bucket/validate/validate-s3-bucket-name.js";
-import { SimIamAllowAllAuth, } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
-import { SimIamAccessDenied } from "../../../iam/error/sim-iam.error.js";
-/**
- * S3 CreateBucketCommand handler.
- *
- * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/s3/command/CreateBucketCommand/
- */
-export class CreateBucketCommandHandler {
-    accountRegionScope;
-    buckets;
-    s3GlobalRegistry;
-    iam;
-    background;
-    constructor(props) {
-        const { accountRegionScope, buckets, s3GlobalRegistry, iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), } = props;
-        this.accountRegionScope = accountRegionScope;
-        this.buckets = buckets;
-        this.s3GlobalRegistry = s3GlobalRegistry;
-        this.iam = iam;
-        this.background = background;
-    }
-    /**
-     * Handle creation of a new S3 Bucket.
-     */
-    async handle(cmd, opts) {
-        assertDefined(cmd.input.Bucket, "CreateBucketCommand.input.Bucket required");
-        // Allow for potential non-deterministic sequencing of async events.
-        await this.background.sequence();
-        const bucketName = cmd.input.Bucket;
-        validateS3BucketName(bucketName);
-        const resource = `arn:aws:s3:::${bucketName}`;
-        const decision = this.iam.authorize({
-            action: "s3:CreateBucket",
-            resource,
-            caller: opts?.caller,
-        });
-        if (decision.isDenied) {
-            throw new SimIamAccessDenied({
-                principal: decision.caller.principal,
-                action: "s3:CreateBucket",
-                resource,
-            });
-        }
-        const simS3BucketNameAvailability = new SimS3BucketNameAvailability({
-            accountRegionScope: this.accountRegionScope,
-            buckets: this.buckets,
-            s3GlobalRegistry: this.s3GlobalRegistry,
-        });
-        simS3BucketNameAvailability.ensureCanCreateBucketNamed(bucketName);
-        const bucket = new SimS3Bucket({
-            bucketName,
-            accountRegionScope: this.accountRegionScope,
-        });
-        this.buckets.set(bucketName, bucket);
-        this.s3GlobalRegistry.registerBucket(bucketName, this.accountRegionScope);
-        return {
-            BucketArn: resource,
-            Location: `/${bucketName}`,
-            $metadata: {},
-        };
-    }
-}
-//# sourceMappingURL=create-bucket.handler.js.map

package/dist/dist-hidden/service/s3/command/create-bucket/create-bucket.handler.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"create-bucket.handler.js","sourceRoot":"","sources":["../../../../../src/service/s3/command/create-bucket/create-bucket.handler.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAGvE,OAAO,EAEL,eAAe,GAChB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,2BAA2B,EAAE,MAAM,mEAAmE,CAAC;AAChH,OAAO,EAAE,oBAAoB,EAAE,MAAM,kDAAkD,CAAC;AACxF,OAAO,EACL,kBAAkB,GAEnB,MAAM,wDAAwD,CAAC;AAEhE,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAczE;;;;GAIG;AACH,MAAM,OAAO,0BAA0B;IAIpB,kBAAkB,CAA2B;IAC7C,OAAO,CAA2B;IAClC,gBAAgB,CAAsB;IACtC,GAAG,CAA0B;IAC7B,UAAU,CAAsB;IAEjD,YAAY,KAAsC;QAChD,MAAM,EACJ,kBAAkB,EAClB,OAAO,EACP,gBAAgB,EAChB,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,KAAK,CAAC;QACV,IAAI,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;QAC7C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;QACzC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,GAA2B,EAC3B,IAAwC;QAExC,aAAa,CACX,GAAG,CAAC,KAAK,CAAC,MAAM,EAChB,2CAA2C,CAC5C,CAAC;QAEF,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC;QACpC,oBAAoB,CAAC,UAAU,CAAC,CAAC;QAEjC,MAAM,QAAQ,GAAG,gBAAgB,UAAU,EAAE,CAAC;QAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAClC,MAAM,EAAE,iBAAiB;YACzB,QAAQ;YACR,MAAM,EAAE,IAAI,EAAE,MAAM;SACrB,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;gBACpC,MAAM,EAAE,iBAAiB;gBACzB,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;QAED,MAAM,2BAA2B,GAAG,IAAI,2BAA2B,CAAC;YAClE,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;SACxC,CAAC,CAAC;QACH,2BAA2B,CAAC,0BAA0B,CAAC,UAAU,CAAC,CAAC;QAEnE,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC;YAC7B,UAAU;YACV,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;SAC5C,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACrC,IAAI,CAAC,gBAAgB,CAAC,cAAc,CAAC,UAAU,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAE1E,OAAO;YACL,SAAS,EAAE,QAAQ;YACnB,QAAQ,EAAE,IAAI,UAAU,EAAE;YAC1B,SAAS,EAAE,EAAE;SACd,CAAC;IACJ,CAAC;CACF"}

package/dist/dist-hidden/service/s3/command/get-object/get-object-authorizer.d.ts

@@ -1,24 +0,0 @@
-import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
-import type { SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
-import type { SimS3Bucket } from "../../bucket/sim-s3-bucket.js";
-interface GetObjectAuthorizerProps {
-    readonly iam: SimIamInterServiceAuthZ;
-}
-/**
- * Applies IAM authorization to an S3 GetObject request.
- *
- * GetObject is authorized against the target Object ARN rather than the Bucket
- * ARN. An omitted caller is passed through to sim IAM so Account root fallback
- * behavior remains owned by IAM.
- */
-export declare class GetObjectAuthorizer {
-    private static readonly action;
-    private readonly iam;
-    constructor(props: GetObjectAuthorizerProps);
-    /**
-     * Ensure the caller may read the requested S3 Object.
-     */
-    authorize(bucket: SimS3Bucket, key: string, caller?: SimAwsCaller): void;
-}
-export {};
-//# sourceMappingURL=get-object-authorizer.d.ts.map

package/dist/dist-hidden/service/s3/command/get-object/get-object-authorizer.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"get-object-authorizer.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/command/get-object/get-object-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAEtG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAEjE,UAAU,wBAAwB;IAChC,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;CACvC;AAED;;;;;;GAMG;AACH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAkB;IAEhD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA0B;IAE9C,YAAY,KAAK,EAAE,wBAAwB,EAE1C;IAED;;OAEG;IACH,SAAS,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,YAAY,GAAG,IAAI,CA0BvE;CACF"}

package/dist/dist-hidden/service/s3/command/get-object/get-object-authorizer.js

@@ -1,44 +0,0 @@
-import { SimIamAccessDenied } from "../../../iam/error/sim-iam.error.js";
-/**
- * Applies IAM authorization to an S3 GetObject request.
- *
- * GetObject is authorized against the target Object ARN rather than the Bucket
- * ARN. An omitted caller is passed through to sim IAM so Account root fallback
- * behavior remains owned by IAM.
- */
-export class GetObjectAuthorizer {
-    static action = "s3:GetObject";
-    iam;
-    constructor(props) {
-        this.iam = props.iam;
-    }
-    /**
-     * Ensure the caller may read the requested S3 Object.
-     */
-    authorize(bucket, key, caller) {
-        const resource = `arn:aws:s3:::${bucket.bucketName}/${key}`;
-        const policy = bucket.getPolicy();
-        const decision = this.iam.authorize({
-            action: GetObjectAuthorizer.action,
-            resource,
-            caller,
-            resourcePolicies: policy === undefined
-                ? []
-                : [
-                    {
-                        document: policy,
-                        policyName: "BucketPolicy",
-                        resourceArn: `arn:aws:s3:::${bucket.bucketName}`,
-                    },
-                ],
-        });
-        if (decision.isDenied) {
-            throw new SimIamAccessDenied({
-                principal: decision.caller.principal,
-                action: GetObjectAuthorizer.action,
-                resource,
-            });
-        }
-    }
-}
-//# sourceMappingURL=get-object-authorizer.js.map

package/dist/dist-hidden/service/s3/command/get-object/get-object-authorizer.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"get-object-authorizer.js","sourceRoot":"","sources":["../../../../../src/service/s3/command/get-object/get-object-authorizer.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAOzE;;;;;;GAMG;AACH,MAAM,OAAO,mBAAmB;IACtB,MAAM,CAAU,MAAM,GAAG,cAAc,CAAC;IAE/B,GAAG,CAA0B;IAE9C,YAAY,KAA+B;QACzC,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,MAAmB,EAAE,GAAW,EAAE,MAAqB;QAC/D,MAAM,QAAQ,GAAG,gBAAgB,MAAM,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;QAC5D,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAClC,MAAM,EAAE,mBAAmB,CAAC,MAAM;YAClC,QAAQ;YACR,MAAM;YACN,gBAAgB,EACd,MAAM,KAAK,SAAS;gBAClB,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC;oBACE;wBACE,QAAQ,EAAE,MAAM;wBAChB,UAAU,EAAE,cAAc;wBAC1B,WAAW,EAAE,gBAAgB,MAAM,CAAC,UAAU,EAAE;qBACjD;iBACF;SACR,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;gBACpC,MAAM,EAAE,mBAAmB,CAAC,MAAM;gBAClC,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}

package/dist/dist-hidden/service/s3/command/get-object/get-object.handler.d.ts

@@ -1,40 +0,0 @@
-import type { CommandHandler } from "../../../../command/command-handler.js";
-import type { SimGetObjectCommand, SimGetObjectCommandOutput } from "./get-object.cmd.js";
-import type { SimS3Bucket, SimS3BucketName } from "../../bucket/sim-s3-bucket.js";
-import { type BackgroundScheduler } from "../../../../util/background/background.js";
-import { type SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
-import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
-interface GetObjectCommandHandlerProps {
-    readonly buckets: Map<SimS3BucketName, SimS3Bucket>;
-    readonly iam?: SimIamInterServiceAuthZ;
-    readonly background?: BackgroundScheduler;
-}
-interface GetObjectCommandHandlerOptions {
-    readonly caller?: SimAwsCaller;
-}
-/**
- * Simulated S3 GetObjectCommand handler.
- *
- * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/s3/command/GetObjectCommand/
- */
-export declare class GetObjectCommandHandler implements CommandHandler<SimGetObjectCommand, SimGetObjectCommandOutput> {
-    private readonly buckets;
-    private readonly authorizer;
-    private readonly loader;
-    private readonly background;
-    constructor(props: GetObjectCommandHandlerProps);
-    /**
-     * Coordinate validation, Bucket resolution, authorization, and Object loading.
-     *
-     * The order of these stages is significant:
-     *
-     * - validation reports malformed requests before service processing;
-     * - Bucket resolution preserves the existing NoSuchBucket behavior;
-     * - authorization occurs before key lookup so denied callers cannot determine
-     *   whether an Object exists;
-     * - the loader performs storage access only after authorization succeeds.
-     */
-    handle(cmd: SimGetObjectCommand, opts?: GetObjectCommandHandlerOptions): Promise<SimGetObjectCommandOutput>;
-}
-export {};
-//# sourceMappingURL=get-object.handler.d.ts.map

package/dist/dist-hidden/service/s3/command/get-object/get-object.handler.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"get-object.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/command/get-object/get-object.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,KAAK,EACV,mBAAmB,EACnB,yBAAyB,EAC1B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EACV,WAAW,EACX,eAAe,EAChB,MAAM,+BAA+B,CAAC;AAGvC,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,wDAAwD,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAI1E,UAAU,4BAA4B;IACpC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IACpD,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED,UAAU,8BAA8B;IACtC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;GAIG;AACH,qBAAa,uBAAwB,YAAW,cAAc,CAC5D,mBAAmB,EACnB,yBAAyB,CAC1B;IACC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoC;IAC5D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyB;IAChD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,KAAK,EAAE,4BAA4B,EAS9C;IAED;;;;;;;;;;OAUG;IACG,MAAM,CACV,GAAG,EAAE,mBAAmB,EACxB,IAAI,CAAC,EAAE,8BAA8B,GACpC,OAAO,CAAC,yBAAyB,CAAC,CAgBpC;CACF"}

package/dist/dist-hidden/service/s3/command/get-object/get-object.handler.js

@@ -1,48 +0,0 @@
-import { assertDefined } from "../../../../util/type-guard/defined.js";
-import { SimS3NoSuchBucket } from "../../error/sim-s3.error.js";
-import { BackgroundTasks, } from "../../../../util/background/background.js";
-import { SimIamAllowAllAuth, } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
-import { GetObjectAuthorizer } from "./get-object-authorizer.js";
-import { GetObjectLoader } from "./get-object-loader.js";
-/**
- * Simulated S3 GetObjectCommand handler.
- *
- * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/s3/command/GetObjectCommand/
- */
-export class GetObjectCommandHandler {
-    buckets;
-    authorizer;
-    loader = new GetObjectLoader();
-    background;
-    constructor(props) {
-        const { buckets, iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), } = props;
-        this.buckets = buckets;
-        this.authorizer = new GetObjectAuthorizer({ iam });
-        this.background = background;
-    }
-    /**
-     * Coordinate validation, Bucket resolution, authorization, and Object loading.
-     *
-     * The order of these stages is significant:
-     *
-     * - validation reports malformed requests before service processing;
-     * - Bucket resolution preserves the existing NoSuchBucket behavior;
-     * - authorization occurs before key lookup so denied callers cannot determine
-     *   whether an Object exists;
-     * - the loader performs storage access only after authorization succeeds.
-     */
-    async handle(cmd, opts) {
-        assertDefined(cmd.input.Bucket, "GetObjectCommand.input.Bucket");
-        assertDefined(cmd.input.Key, "GetObjectCommand.input.Key");
-        const bucketName = cmd.input.Bucket;
-        const bucket = this.buckets.get(bucketName);
-        if (bucket === undefined) {
-            throw new SimS3NoSuchBucket(`No S3 Bucket named ${bucketName}`);
-        }
-        // Complete request sequencing before authorization and storage access.
-        await this.background.sequence();
-        this.authorizer.authorize(bucket, cmd.input.Key, opts?.caller);
-        return await this.loader.load(bucket, cmd.input.Key);
-    }
-}
-//# sourceMappingURL=get-object.handler.js.map

package/dist/dist-hidden/service/s3/command/get-object/get-object.handler.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"get-object.handler.js","sourceRoot":"","sources":["../../../../../src/service/s3/command/get-object/get-object.handler.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAEL,eAAe,GAChB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EACL,kBAAkB,GAEnB,MAAM,wDAAwD,CAAC;AAEhE,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAYzD;;;;GAIG;AACH,MAAM,OAAO,uBAAuB;IAIjB,OAAO,CAAoC;IAC3C,UAAU,CAAsB;IAChC,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IAC/B,UAAU,CAAsB;IAEjD,YAAY,KAAmC;QAC7C,MAAM,EACJ,OAAO,EACP,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,KAAK,CAAC;QACV,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,UAAU,GAAG,IAAI,mBAAmB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,MAAM,CACV,GAAwB,EACxB,IAAqC;QAErC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,+BAA+B,CAAC,CAAC;QACjE,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,4BAA4B,CAAC,CAAC;QAE3D,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,MAAyB,CAAC;QACvD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,iBAAiB,CAAC,sBAAsB,UAAU,EAAE,CAAC,CAAC;QAClE,CAAC;QAED,uEAAuE;QACvE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAE/D,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACvD,CAAC;CACF"}

package/dist/dist-hidden/service/s3/command/list-buckets/list-buckets-authorizer.d.ts

@@ -1,34 +0,0 @@
-import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
-import type { SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
-interface ListBucketsAuthorizerProps {
-    readonly iam: SimIamInterServiceAuthZ;
-}
-/**
- * Applies IAM authorization to an S3 ListBuckets request.
- *
- * AWS maps the ListBuckets API operation to the S3:ListAllMyBuckets IAM
- * action. Despite the action name, this permission does not use individual
- * Bucket ARNs. AWS documents it as an account-level listing permission whose
- * resource is "*".
- *
- * Authorization therefore applies to the complete operation. An allowed caller
- * receives the account's Bucket listing, subject to request pagination and
- * prefix filtering. A denied caller receives AccessDenied rather than a
- * filtered or empty result.
- */
-export declare class ListBucketsAuthorizer {
-    private static readonly action;
-    private static readonly resource;
-    private readonly iam;
-    constructor(props: ListBucketsAuthorizerProps);
-    /**
-     * Ensure the caller may list the simulated Account's S3 Buckets.
-     *
-     * The caller is passed through unchanged so sim IAM can distinguish an
-     * omitted caller, which defaults to Account root, from an explicit anonymous
-     * caller, which has no identity policy permissions.
-     */
-    authorize(caller?: SimAwsCaller): void;
-}
-export {};
-//# sourceMappingURL=list-buckets-authorizer.d.ts.map

package/dist/dist-hidden/service/s3/command/list-buckets/list-buckets-authorizer.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"list-buckets-authorizer.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/command/list-buckets/list-buckets-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAGtG,UAAU,0BAA0B;IAClC,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;CACvC;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAyB;IACvD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAO;IAEvC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA0B;IAE9C,YAAY,KAAK,EAAE,0BAA0B,EAE5C;IAED;;;;;;OAMG;IACH,SAAS,CAAC,MAAM,CAAC,EAAE,YAAY,GAAG,IAAI,CAcrC;CACF"}

package/dist/dist-hidden/service/s3/command/list-buckets/list-buckets-authorizer.js

@@ -1,44 +0,0 @@
-import { SimIamAccessDenied } from "../../../iam/error/sim-iam.error.js";
-/**
- * Applies IAM authorization to an S3 ListBuckets request.
- *
- * AWS maps the ListBuckets API operation to the S3:ListAllMyBuckets IAM
- * action. Despite the action name, this permission does not use individual
- * Bucket ARNs. AWS documents it as an account-level listing permission whose
- * resource is "*".
- *
- * Authorization therefore applies to the complete operation. An allowed caller
- * receives the account's Bucket listing, subject to request pagination and
- * prefix filtering. A denied caller receives AccessDenied rather than a
- * filtered or empty result.
- */
-export class ListBucketsAuthorizer {
-    static action = "s3:ListAllMyBuckets";
-    static resource = "*";
-    iam;
-    constructor(props) {
-        this.iam = props.iam;
-    }
-    /**
-     * Ensure the caller may list the simulated Account's S3 Buckets.
-     *
-     * The caller is passed through unchanged so sim IAM can distinguish an
-     * omitted caller, which defaults to Account root, from an explicit anonymous
-     * caller, which has no identity policy permissions.
-     */
-    authorize(caller) {
-        const decision = this.iam.authorize({
-            action: ListBucketsAuthorizer.action,
-            resource: ListBucketsAuthorizer.resource,
-            caller,
-        });
-        if (decision.isDenied) {
-            throw new SimIamAccessDenied({
-                principal: decision.caller.principal,
-                action: ListBucketsAuthorizer.action,
-                resource: ListBucketsAuthorizer.resource,
-            });
-        }
-    }
-}
-//# sourceMappingURL=list-buckets-authorizer.js.map

package/dist/dist-hidden/service/s3/command/list-buckets/list-buckets-authorizer.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"list-buckets-authorizer.js","sourceRoot":"","sources":["../../../../../src/service/s3/command/list-buckets/list-buckets-authorizer.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAMzE;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,qBAAqB;IACxB,MAAM,CAAU,MAAM,GAAG,qBAAqB,CAAC;IAC/C,MAAM,CAAU,QAAQ,GAAG,GAAG,CAAC;IAEtB,GAAG,CAA0B;IAE9C,YAAY,KAAiC;QAC3C,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;IACvB,CAAC;IAED;;;;;;OAMG;IACH,SAAS,CAAC,MAAqB;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAClC,MAAM,EAAE,qBAAqB,CAAC,MAAM;YACpC,QAAQ,EAAE,qBAAqB,CAAC,QAAQ;YACxC,MAAM;SACP,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;gBACpC,MAAM,EAAE,qBAAqB,CAAC,MAAM;gBACpC,QAAQ,EAAE,qBAAqB,CAAC,QAAQ;aACzC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}

package/dist/dist-hidden/service/s3/command/list-buckets/list-buckets-page-builder.d.ts

@@ -1,65 +0,0 @@
-import type { SimListBucketsCommandInput, SimListBucketsCommandOutput } from "./list-buckets.cmd.js";
-import type { SimS3Bucket, SimS3BucketName } from "../../bucket/sim-s3-bucket.js";
-interface ListBucketsPageBuilderProps {
-    readonly buckets: ReadonlyMap<SimS3BucketName, SimS3Bucket>;
-}
-type ListBucketsPage = Omit<SimListBucketsCommandOutput, "$metadata">;
-/**
- * Builds one page of an S3 ListBuckets response.
- *
- * IAM authorization remains in the command handler because it controls whether
- * Bucket state may be read at all. This class handles the data operations that
- * happen after authorization: stable ordering, prefix filtering, continuation
- * token interpretation, page selection, and generation of the next token.
- *
- * Continuation tokens encode the final Bucket name from the previous page. Since
- * Bucket names are globally unique and the collection is sorted by name, that
- * name provides a stable position from which to continue. If the referenced
- * Bucket is absent, listing restarts at the beginning rather than producing a
- * negative array index.
- */
-export declare class ListBucketsPageBuilder {
-    private readonly buckets;
-    constructor(props: ListBucketsPageBuilderProps);
-    /**
-     * Build the response fields for one ListBuckets page.
-     *
-     * Response metadata is owned by the command handler, so it is not included in
-     * this result. Keeping protocol metadata outside this class lets the pagination
-     * logic remain focused on Bucket collection state and request parameters.
-     */
-    build(input: SimListBucketsCommandInput): ListBucketsPage;
-    /**
-     * Return Buckets in the name order used by continuation tokens.
-     *
-     * A new array is sorted so listing cannot change insertion order in the
-     * service's Bucket map. Prefix filtering happens after sorting, preserving the
-     * same relative order for filtered and unfiltered requests.
-     */
-    private matchingBuckets;
-    /**
-     * Find the first Bucket to include after a continuation token.
-     *
-     * The token identifies the last Bucket returned by the preceding page, so the
-     * next page starts one position later. A missing or unknown token position maps
-     * to index zero, matching the previous handler behavior.
-     */
-    private startIndex;
-    /**
-     * Create a token only when another Bucket remains after this page.
-     *
-     * Empty pages have no final Bucket from which to form a token. A final page
-     * also omits the token so callers can detect completion.
-     */
-    private nextContinuationToken;
-    /**
-     * Encode a Bucket name as an opaque URL-safe continuation token.
-     */
-    private makeContinuationToken;
-    /**
-     * Recover the Bucket name represented by a continuation token.
-     */
-    private parseContinuationToken;
-}
-export {};
-//# sourceMappingURL=list-buckets-page-builder.d.ts.map

package/dist/dist-hidden/service/s3/command/list-buckets/list-buckets-page-builder.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"list-buckets-page-builder.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/command/list-buckets/list-buckets-page-builder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,0BAA0B,EAC1B,2BAA2B,EAC5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EACV,WAAW,EACX,eAAe,EAChB,MAAM,+BAA+B,CAAC;AAEvC,UAAU,2BAA2B;IACnC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;CAC7D;AAED,KAAK,eAAe,GAAG,IAAI,CAAC,2BAA2B,EAAE,WAAW,CAAC,CAAC;AAEtE;;;;;;;;;;;;;GAaG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA4C;IAEpE,YAAY,KAAK,EAAE,2BAA2B,EAE7C;IAED;;;;;;OAMG;IACH,KAAK,CAAC,KAAK,EAAE,0BAA0B,GAAG,eAAe,CAoBxD;IAED;;;;;;OAMG;IACH,OAAO,CAAC,eAAe;IASvB;;;;;;OAMG;IACH,OAAO,CAAC,UAAU;IAgBlB;;;;;OAKG;IACH,OAAO,CAAC,qBAAqB;IAa7B;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAI7B;;OAEG;IACH,OAAO,CAAC,sBAAsB;CAG/B"}

package/dist/dist-hidden/service/s3/command/list-buckets/list-buckets-page-builder.js

@@ -1,94 +0,0 @@
-/**
- * Builds one page of an S3 ListBuckets response.
- *
- * IAM authorization remains in the command handler because it controls whether
- * Bucket state may be read at all. This class handles the data operations that
- * happen after authorization: stable ordering, prefix filtering, continuation
- * token interpretation, page selection, and generation of the next token.
- *
- * Continuation tokens encode the final Bucket name from the previous page. Since
- * Bucket names are globally unique and the collection is sorted by name, that
- * name provides a stable position from which to continue. If the referenced
- * Bucket is absent, listing restarts at the beginning rather than producing a
- * negative array index.
- */
-export class ListBucketsPageBuilder {
-    buckets;
-    constructor(props) {
-        this.buckets = props.buckets;
-    }
-    /**
-     * Build the response fields for one ListBuckets page.
-     *
-     * Response metadata is owned by the command handler, so it is not included in
-     * this result. Keeping protocol metadata outside this class lets the pagination
-     * logic remain focused on Bucket collection state and request parameters.
-     */
-    build(input) {
-        const matchingBuckets = this.matchingBuckets(input.Prefix);
-        const startIndex = this.startIndex(matchingBuckets, input.ContinuationToken);
-        const maxBuckets = input.MaxBuckets ?? 10_000;
-        const page = matchingBuckets.slice(startIndex, startIndex + maxBuckets);
-        return {
-            Buckets: page.map((bucket) => ({
-                Name: bucket.bucketName,
-            })),
-            ContinuationToken: this.nextContinuationToken(page, startIndex, matchingBuckets.length),
-            Prefix: input.Prefix,
-        };
-    }
-    /**
-     * Return Buckets in the name order used by continuation tokens.
-     *
-     * A new array is sorted so listing cannot change insertion order in the
-     * service's Bucket map. Prefix filtering happens after sorting, preserving the
-     * same relative order for filtered and unfiltered requests.
-     */
-    matchingBuckets(prefix) {
-        const buckets = this.buckets.values().toArray();
-        buckets.sort((a, b) => a.bucketName.localeCompare(b.bucketName));
-        return prefix === undefined
-            ? buckets
-            : buckets.filter((bucket) => bucket.bucketName.startsWith(prefix));
-    }
-    /**
-     * Find the first Bucket to include after a continuation token.
-     *
-     * The token identifies the last Bucket returned by the preceding page, so the
-     * next page starts one position later. A missing or unknown token position maps
-     * to index zero, matching the previous handler behavior.
-     */
-    startIndex(buckets, continuationToken) {
-        if (continuationToken === undefined) {
-            return 0;
-        }
-        const startBucketName = this.parseContinuationToken(continuationToken);
-        return Math.max(0, buckets.findIndex((bucket) => bucket.bucketName === startBucketName) + 1);
-    }
-    /**
-     * Create a token only when another Bucket remains after this page.
-     *
-     * Empty pages have no final Bucket from which to form a token. A final page
-     * also omits the token so callers can detect completion.
-     */
-    nextContinuationToken(page, startIndex, matchingBucketCount) {
-        const lastBucket = page.at(-1);
-        const hasMoreBuckets = startIndex + page.length < matchingBucketCount;
-        return hasMoreBuckets && lastBucket !== undefined
-            ? this.makeContinuationToken(lastBucket.bucketName)
-            : undefined;
-    }
-    /**
-     * Encode a Bucket name as an opaque URL-safe continuation token.
-     */
-    makeContinuationToken(bucketName) {
-        return Buffer.from(bucketName, "utf8").toString("base64url");
-    }
-    /**
-     * Recover the Bucket name represented by a continuation token.
-     */
-    parseContinuationToken(token) {
-        return Buffer.from(token, "base64url").toString("utf8");
-    }
-}
-//# sourceMappingURL=list-buckets-page-builder.js.map

package/dist/dist-hidden/service/s3/command/list-buckets/list-buckets-page-builder.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"list-buckets-page-builder.js","sourceRoot":"","sources":["../../../../../src/service/s3/command/list-buckets/list-buckets-page-builder.ts"],"names":[],"mappings":"AAeA;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,sBAAsB;IAChB,OAAO,CAA4C;IAEpE,YAAY,KAAkC;QAC5C,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC/B,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,KAAiC;QACrC,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3D,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAChC,eAAe,EACf,KAAK,CAAC,iBAAiB,CACxB,CAAC;QACF,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,MAAM,CAAC;QAC9C,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,GAAG,UAAU,CAAC,CAAC;QAExE,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAC7B,IAAI,EAAE,MAAM,CAAC,UAAU;aACxB,CAAC,CAAC;YACH,iBAAiB,EAAE,IAAI,CAAC,qBAAqB,CAC3C,IAAI,EACJ,UAAU,EACV,eAAe,CAAC,MAAM,CACvB;YACD,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACK,eAAe,CAAC,MAAe;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;QAChD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;QAEjE,OAAO,MAAM,KAAK,SAAS;YACzB,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IACvE,CAAC;IAED;;;;;;OAMG;IACK,UAAU,CAChB,OAA+B,EAC/B,iBAA0B;QAE1B,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO,CAAC,CAAC;QACX,CAAC;QAED,MAAM,eAAe,GAAG,IAAI,CAAC,sBAAsB,CAAC,iBAAiB,CAAC,CAAC;QAEvE,OAAO,IAAI,CAAC,GAAG,CACb,CAAC,EACD,OAAO,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,KAAK,eAAe,CAAC,GAAG,CAAC,CACzE,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACK,qBAAqB,CAC3B,IAA4B,EAC5B,UAAkB,EAClB,mBAA2B;QAE3B,MAAM,UAAU,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,cAAc,GAAG,UAAU,GAAG,IAAI,CAAC,MAAM,GAAG,mBAAmB,CAAC;QAEtE,OAAO,cAAc,IAAI,UAAU,KAAK,SAAS;YAC/C,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,UAAU,CAAC,UAAU,CAAC;YACnD,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAED;;OAEG;IACK,qBAAqB,CAAC,UAAkB;QAC9C,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC/D,CAAC;IAED;;OAEG;IACK,sBAAsB,CAAC,KAAa;QAC1C,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1D,CAAC;CACF"}

package/dist/dist-hidden/service/s3/command/list-buckets/list-buckets.handler.d.ts

@@ -1,38 +0,0 @@
-import type { CommandHandler } from "../../../../command/command-handler.js";
-import type { SimListBucketsCommand, SimListBucketsCommandOutput } from "./list-buckets.cmd.js";
-import type { SimS3Bucket, SimS3BucketName } from "../../bucket/sim-s3-bucket.js";
-import { type BackgroundScheduler } from "../../../../util/background/background.js";
-import { type SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
-import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
-interface ListBucketsCommandHandlerProps {
-    readonly buckets: Map<SimS3BucketName, SimS3Bucket>;
-    readonly iam?: SimIamInterServiceAuthZ;
-    readonly background?: BackgroundScheduler;
-}
-interface ListBucketsCommandHandlerOptions {
-    readonly caller?: SimAwsCaller;
-}
-/**
- * Simulated S3 ListBucketsCommand handler.
- *
- * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/s3/command/ListBucketsCommand/
- */
-export declare class ListBucketsCommandHandler implements CommandHandler<SimListBucketsCommand, SimListBucketsCommandOutput> {
-    private readonly authorizer;
-    private readonly pageBuilder;
-    private readonly background;
-    constructor(props: ListBucketsCommandHandlerProps);
-    /**
-     * Simulate listing S3 Buckets.
-     *
-     * Authorization happens before the page builder reads Bucket state. AWS treats
-     * ListBuckets as one account-level operation and does not return a partial
-     * result containing only Bucket ARNs matched by the caller's policies.
-     *
-     * Once authorized, page construction is delegated so this handler remains
-     * focused on coordinating request-level concerns.
-     */
-    handle(cmd: SimListBucketsCommand, opts?: ListBucketsCommandHandlerOptions): Promise<SimListBucketsCommandOutput>;
-}
-export {};
-//# sourceMappingURL=list-buckets.handler.d.ts.map

package/dist/dist-hidden/service/s3/command/list-buckets/list-buckets.handler.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"list-buckets.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/command/list-buckets/list-buckets.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,KAAK,EACV,qBAAqB,EACrB,2BAA2B,EAC5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EACV,WAAW,EACX,eAAe,EAChB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,wDAAwD,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAI1E,UAAU,8BAA8B;IACtC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IACpD,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED,UAAU,gCAAgC;IACxC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;GAIG;AACH,qBAAa,yBAA0B,YAAW,cAAc,CAC9D,qBAAqB,EACrB,2BAA2B,CAC5B;IACC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAwB;IACnD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAyB;IACrD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,KAAK,EAAE,8BAA8B,EAShD;IAED;;;;;;;;;OASG;IACG,MAAM,CACV,GAAG,EAAE,qBAAqB,EAC1B,IAAI,CAAC,EAAE,gCAAgC,GACtC,OAAO,CAAC,2BAA2B,CAAC,CAUtC;CACF"}

package/dist/dist-hidden/service/s3/command/list-buckets/list-buckets.handler.js

@@ -1,40 +0,0 @@
-import { BackgroundTasks, } from "../../../../util/background/background.js";
-import { SimIamAllowAllAuth, } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
-import { ListBucketsAuthorizer } from "./list-buckets-authorizer.js";
-import { ListBucketsPageBuilder } from "./list-buckets-page-builder.js";
-/**
- * Simulated S3 ListBucketsCommand handler.
- *
- * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/s3/command/ListBucketsCommand/
- */
-export class ListBucketsCommandHandler {
-    authorizer;
-    pageBuilder;
-    background;
-    constructor(props) {
-        const { buckets, iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), } = props;
-        this.authorizer = new ListBucketsAuthorizer({ iam });
-        this.pageBuilder = new ListBucketsPageBuilder({ buckets });
-        this.background = background;
-    }
-    /**
-     * Simulate listing S3 Buckets.
-     *
-     * Authorization happens before the page builder reads Bucket state. AWS treats
-     * ListBuckets as one account-level operation and does not return a partial
-     * result containing only Bucket ARNs matched by the caller's policies.
-     *
-     * Once authorized, page construction is delegated so this handler remains
-     * focused on coordinating request-level concerns.
-     */
-    async handle(cmd, opts) {
-        // Allow for potential non-deterministic sequencing of async events.
-        await this.background.sequence();
-        this.authorizer.authorize(opts?.caller);
-        return {
-            ...this.pageBuilder.build(cmd.input),
-            $metadata: {},
-        };
-    }
-}
-//# sourceMappingURL=list-buckets.handler.js.map

package/dist/dist-hidden/service/s3/command/list-buckets/list-buckets.handler.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"list-buckets.handler.js","sourceRoot":"","sources":["../../../../../src/service/s3/command/list-buckets/list-buckets.handler.ts"],"names":[],"mappings":"AASA,OAAO,EAEL,eAAe,GAChB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EACL,kBAAkB,GAEnB,MAAM,wDAAwD,CAAC;AAEhE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAYxE;;;;GAIG;AACH,MAAM,OAAO,yBAAyB;IAInB,UAAU,CAAwB;IAClC,WAAW,CAAyB;IACpC,UAAU,CAAsB;IAEjD,YAAY,KAAqC;QAC/C,MAAM,EACJ,OAAO,EACP,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,KAAK,CAAC;QACV,IAAI,CAAC,UAAU,GAAG,IAAI,qBAAqB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QACrD,IAAI,CAAC,WAAW,GAAG,IAAI,sBAAsB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,MAAM,CACV,GAA0B,EAC1B,IAAuC;QAEvC,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAExC,OAAO;YACL,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC;YACpC,SAAS,EAAE,EAAE;SACd,CAAC;IACJ,CAAC;CACF"}

package/dist/dist-hidden/service/s3/command/list-objects/list-objects-authorizer.d.ts

@@ -1,35 +0,0 @@
-import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
-import type { SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
-import type { SimS3Bucket } from "../../bucket/sim-s3-bucket.js";
-interface ListObjectsAuthorizerProps {
-    readonly iam: SimIamInterServiceAuthZ;
-}
-interface ListObjectsAuthorizationInput {
-    readonly bucket: SimS3Bucket;
-    readonly prefix?: string | undefined;
-    readonly maxKeys: number;
-    readonly caller?: SimAwsCaller | undefined;
-}
-/**
- * Applies IAM authorization to an S3 ListObjects request.
- *
- * AWS authorizes both ListObjects and ListObjectsV2 with the `s3:ListBucket`
- * action. The resource is the Bucket ARN because listing examines a Bucket's
- * key namespace rather than reading any individual Object.
- *
- * Prefix and maximum-result constraints are request attributes used by IAM
- * policies to limit which listings a principal may perform. They are supplied
- * as S3 condition keys so policy evaluation can distinguish, for example, a
- * permitted app prefix from a restricted private prefix.
- */
-export declare class ListObjectsAuthorizer {
-    private static readonly action;
-    private readonly iam;
-    constructor(props: ListObjectsAuthorizerProps);
-    /**
-     * Ensure the caller may list the requested portion of the Bucket namespace.
-     */
-    authorize(input: ListObjectsAuthorizationInput): void;
-}
-export {};
-//# sourceMappingURL=list-objects-authorizer.d.ts.map

package/dist/dist-hidden/service/s3/command/list-objects/list-objects-authorizer.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"list-objects-authorizer.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/command/list-objects/list-objects-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAEtG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAEjE,UAAU,0BAA0B;IAClC,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;CACvC;AAED,UAAU,6BAA6B;IACrC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,GAAG,SAAS,CAAC;CAC5C;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAmB;IAEjD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA0B;IAE9C,YAAY,KAAK,EAAE,0BAA0B,EAE5C;IAED;;OAEG;IACH,SAAS,CAAC,KAAK,EAAE,6BAA6B,GAAG,IAAI,CA8BpD;CACF"}