@kensio/yulin 0.34.0 → 0.35.0

package/dist/dist-hidden/service/iam/credential/session/sim-iam-session-manager.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sim-iam-session-manager.js","sourceRoot":"","sources":["../../../../../src/service/iam/credential/session/sim-iam-session-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAOrD,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,iCAAiC,EAAE,MAAM,6CAA6C,CAAC;AAsBhG;;;;;GAKG;AACH,MAAM,OAAO,oBAAoB;IACd,KAAK,CAA0C;IAC/C,kBAAkB,CAA2B;IAC7C,mBAAmB,CAAmC;IACtD,gBAAgB,CAAoC;IAErE,YAAY,KAAgC;QAC1C,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QACzB,IAAI,CAAC,kBAAkB,GAAG,KAAK,CAAC,kBAAkB,CAAC;QACnD,IAAI,CAAC,mBAAmB,GAAG,KAAK,CAAC,mBAAmB,CAAC;QACrD,IAAI,CAAC,gBAAgB,GAAG,IAAI,iCAAiC,CAC3D,KAAK,CAAC,SAAS,CAChB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,iBAAiB,CACf,KAAmC;QAEnC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACvC,MAAM,WAAW,GAAG,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,CAAC;QACxD,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QACtE,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC;YAChC,SAAS;YACT,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,IAAI;YACJ,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,YAAY,EAAE,WAAW,CAAC,YAAY;YACtC,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B,CAAC,CAAC;QAEH,IAAI,CAAC,kBAAkB,CAAC,iBAAiB,CACvC,IAAI,eAAe,CAAC;YAClB,WAAW,EAAE,WAAW,CAAC,WAAW;YACpC,eAAe,EAAE,WAAW,CAAC,eAAe;YAC5C,SAAS;YACT,uBAAuB,EAAE;gBACvB,IAAI,EAAE,KAAK;gBACX,GAAG,EAAE,IAAI,CAAC,GAAG;aACd;YACD,OAAO;YACP,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B,CAAC,CACH,CAAC;QAEF,OAAO;YACL,WAAW;YACX,OAAO;SACR,CAAC;IACJ,CAAC;IAEO,IAAI,CAAC,QAAwB;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAEtC,kBAAkB;QAClB,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,gBAAgB,QAAQ,iBAAiB,CAAC,CAAC;QAC7D,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/dist-hidden/service/iam/credential/session/sim-iam-session.d.ts

@@ -1,33 +0,0 @@
-import type { SimArnPrincipal, SimAwsPrincipal } from "../../../aws/caller/sim-aws-caller.js";
-import type { SimIamRole } from "../../role/sim-iam-role.js";
-interface SimIamSessionProps {
-    readonly principal: SimArnPrincipal;
-    readonly sourcePrincipal: SimAwsPrincipal;
-    readonly role: SimIamRole;
-    readonly sessionName: string;
-    readonly sessionToken: string;
-    readonly createDate: Date;
-    readonly expiration: Date;
-}
-/**
- * A temporary simulated AWS session.
- *
- * A session retains both the assumed-role request principal and the underlying
- * IAM Role whose identity policies apply to requests made with the session.
- */
-export declare class SimIamSession {
-    readonly principal: SimArnPrincipal;
-    readonly sourcePrincipal: SimAwsPrincipal;
-    readonly role: SimIamRole;
-    readonly sessionName: string;
-    readonly sessionToken: string;
-    readonly createDate: Date;
-    readonly expiration: Date;
-    constructor(props: SimIamSessionProps);
-    /**
-     * Whether this session has expired at the supplied time.
-     */
-    isExpired(now: Date): boolean;
-}
-export {};
-//# sourceMappingURL=sim-iam-session.d.ts.map

package/dist/dist-hidden/service/iam/credential/session/sim-iam-session.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sim-iam-session.d.ts","sourceRoot":"","sources":["../../../../../src/service/iam/credential/session/sim-iam-session.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EAChB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAE7D,UAAU,kBAAkB;IAC1B,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAC1C,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC;CAC3B;AAED;;;;;GAKG;AACH,qBAAa,aAAa;IACxB,SAAgB,SAAS,EAAE,eAAe,CAAC;IAC3C,SAAgB,eAAe,EAAE,eAAe,CAAC;IACjD,SAAgB,IAAI,EAAE,UAAU,CAAC;IACjC,SAAgB,WAAW,EAAE,MAAM,CAAC;IACpC,SAAgB,YAAY,EAAE,MAAM,CAAC;IACrC,SAAgB,UAAU,EAAE,IAAI,CAAC;IACjC,SAAgB,UAAU,EAAE,IAAI,CAAC;IAEjC,YAAY,KAAK,EAAE,kBAAkB,EAoBpC;IAED;;OAEG;IACH,SAAS,CAAC,GAAG,EAAE,IAAI,GAAG,OAAO,CAE5B;CACF"}

package/dist/dist-hidden/service/iam/credential/session/sim-iam-session.js

@@ -1,40 +0,0 @@
-/**
- * A temporary simulated AWS session.
- *
- * A session retains both the assumed-role request principal and the underlying
- * IAM Role whose identity policies apply to requests made with the session.
- */
-export class SimIamSession {
-    principal;
-    sourcePrincipal;
-    role;
-    sessionName;
-    sessionToken;
-    createDate;
-    expiration;
-    constructor(props) {
-        if (props.sessionName.length === 0) {
-            throw new Error("Sim IAM session name must not be empty");
-        }
-        if (props.sessionToken.length === 0) {
-            throw new Error("Sim IAM session token must not be empty");
-        }
-        if (props.expiration.getTime() <= props.createDate.getTime()) {
-            throw new Error("Sim IAM session expiration must follow its creation");
-        }
-        this.principal = props.principal;
-        this.sourcePrincipal = props.sourcePrincipal;
-        this.role = props.role;
-        this.sessionName = props.sessionName;
-        this.sessionToken = props.sessionToken;
-        this.createDate = new Date(props.createDate);
-        this.expiration = new Date(props.expiration);
-    }
-    /**
-     * Whether this session has expired at the supplied time.
-     */
-    isExpired(now) {
-        return now.getTime() >= this.expiration.getTime();
-    }
-}
-//# sourceMappingURL=sim-iam-session.js.map

package/dist/dist-hidden/service/iam/credential/session/sim-iam-session.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sim-iam-session.js","sourceRoot":"","sources":["../../../../../src/service/iam/credential/session/sim-iam-session.ts"],"names":[],"mappings":"AAgBA;;;;;GAKG;AACH,MAAM,OAAO,aAAa;IACR,SAAS,CAAkB;IAC3B,eAAe,CAAkB;IACjC,IAAI,CAAa;IACjB,WAAW,CAAS;IACpB,YAAY,CAAS;IACrB,UAAU,CAAO;IACjB,UAAU,CAAO;IAEjC,YAAY,KAAyB;QACnC,IAAI,KAAK,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QAED,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,CAAC;QAED,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzE,CAAC;QAED,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;QACjC,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC,eAAe,CAAC;QAC7C,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACvB,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;QACrC,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;QACvC,IAAI,CAAC,UAAU,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC7C,IAAI,CAAC,UAAU,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,GAAS;QACjB,OAAO,GAAG,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;IACpD,CAAC;CACF"}

package/dist/dist-hidden/service/iam/credential/sim-iam-access-key.d.ts

@@ -1,44 +0,0 @@
-import type { SimAwsPrincipal } from "../../aws/caller/sim-aws-caller.js";
-import type { SimIamCredentialIdentity } from "./sim-aws-credentials.js";
-import type { SimIamSession } from "./session/sim-iam-session.js";
-export type SimIamAccessKeyStatus = "Active" | "Inactive";
-interface SimIamAccessKeyProps {
-    readonly accessKeyId: string;
-    readonly secretAccessKey: string;
-    readonly principal: SimAwsPrincipal;
-    readonly identityPolicyPrincipal?: SimAwsPrincipal | undefined;
-    readonly session?: SimIamSession | undefined;
-    readonly createDate?: Date | undefined;
-    readonly status?: SimIamAccessKeyStatus | undefined;
-}
-/**
- * A simulated AWS access key associated with an authenticated principal.
- *
- * Access keys can represent either long-lived credentials or temporary
- * credentials backed by a session.
- */
-export declare class SimIamAccessKey {
-    readonly accessKeyId: string;
-    readonly secretAccessKey: string;
-    readonly principal: SimAwsPrincipal;
-    readonly identityPolicyPrincipal: SimAwsPrincipal;
-    readonly session?: SimIamSession | undefined;
-    readonly createDate: Date;
-    status: SimIamAccessKeyStatus;
-    constructor(props: SimIamAccessKeyProps);
-    /**
-     * Whether a secret access key matches this access key.
-     */
-    matchesSecretAccessKey(secretAccessKey: string): boolean;
-    /**
-     * Whether a session token matches this access key's temporary session.
-     */
-    matchesSessionToken(sessionToken: string | undefined): boolean;
-    /**
-     * Return the authenticated identity represented by this access key.
-     */
-    identity(): SimIamCredentialIdentity;
-    private secretsMatch;
-}
-export {};
-//# sourceMappingURL=sim-iam-access-key.d.ts.map

package/dist/dist-hidden/service/iam/credential/sim-iam-access-key.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sim-iam-access-key.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/credential/sim-iam-access-key.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACzE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAElE,MAAM,MAAM,qBAAqB,GAAG,QAAQ,GAAG,UAAU,CAAC;AAE1D,UAAU,oBAAoB;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IAC/D,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,UAAU,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,MAAM,CAAC,EAAE,qBAAqB,GAAG,SAAS,CAAC;CACrD;AAED;;;;;GAKG;AACH,qBAAa,eAAe;IAC1B,SAAgB,WAAW,EAAE,MAAM,CAAC;IACpC,SAAgB,eAAe,EAAE,MAAM,CAAC;IACxC,SAAgB,SAAS,EAAE,eAAe,CAAC;IAC3C,SAAgB,uBAAuB,EAAE,eAAe,CAAC;IACzD,SAAgB,OAAO,CAAC,EAAE,aAAa,GAAG,SAAS,CAAC;IACpD,SAAgB,UAAU,EAAE,IAAI,CAAC;IAC1B,MAAM,EAAE,qBAAqB,CAAC;IAErC,YAAY,KAAK,EAAE,oBAAoB,EAStC;IAED;;OAEG;IACH,sBAAsB,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAEvD;IAED;;OAEG;IACH,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAM7D;IAED;;OAEG;IACH,QAAQ,IAAI,wBAAwB,CAOnC;IAED,OAAO,CAAC,YAAY;CAMrB"}

package/dist/dist-hidden/service/iam/credential/sim-iam-access-key.js

@@ -1,57 +0,0 @@
-import { createHash, timingSafeEqual } from "node:crypto";
-/**
- * A simulated AWS access key associated with an authenticated principal.
- *
- * Access keys can represent either long-lived credentials or temporary
- * credentials backed by a session.
- */
-export class SimIamAccessKey {
-    accessKeyId;
-    secretAccessKey;
-    principal;
-    identityPolicyPrincipal;
-    session;
-    createDate;
-    status;
-    constructor(props) {
-        this.accessKeyId = props.accessKeyId;
-        this.secretAccessKey = props.secretAccessKey;
-        this.principal = props.principal;
-        this.identityPolicyPrincipal =
-            props.identityPolicyPrincipal ?? props.principal;
-        this.session = props.session;
-        this.createDate = new Date(props.createDate ?? Date.now());
-        this.status = props.status ?? "Active";
-    }
-    /**
-     * Whether a secret access key matches this access key.
-     */
-    matchesSecretAccessKey(secretAccessKey) {
-        return this.secretsMatch(secretAccessKey, this.secretAccessKey);
-    }
-    /**
-     * Whether a session token matches this access key's temporary session.
-     */
-    matchesSessionToken(sessionToken) {
-        return (this.session !== undefined &&
-            sessionToken !== undefined &&
-            this.secretsMatch(sessionToken, this.session.sessionToken));
-    }
-    /**
-     * Return the authenticated identity represented by this access key.
-     */
-    identity() {
-        return {
-            principal: this.principal,
-            identityPolicyPrincipal: this.identityPolicyPrincipal,
-            role: this.session?.role,
-            session: this.session,
-        };
-    }
-    secretsMatch(actual, expected) {
-        const actualHash = createHash("sha256").update(actual).digest();
-        const expectedHash = createHash("sha256").update(expected).digest();
-        return timingSafeEqual(actualHash, expectedHash);
-    }
-}
-//# sourceMappingURL=sim-iam-access-key.js.map

package/dist/dist-hidden/service/iam/credential/sim-iam-access-key.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sim-iam-access-key.js","sourceRoot":"","sources":["../../../../src/service/iam/credential/sim-iam-access-key.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAkB1D;;;;;GAKG;AACH,MAAM,OAAO,eAAe;IACV,WAAW,CAAS;IACpB,eAAe,CAAS;IACxB,SAAS,CAAkB;IAC3B,uBAAuB,CAAkB;IACzC,OAAO,CAA6B;IACpC,UAAU,CAAO;IAC1B,MAAM,CAAwB;IAErC,YAAY,KAA2B;QACrC,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;QACrC,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC,eAAe,CAAC;QAC7C,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;QACjC,IAAI,CAAC,uBAAuB;YAC1B,KAAK,CAAC,uBAAuB,IAAI,KAAK,CAAC,SAAS,CAAC;QACnD,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QAC7B,IAAI,CAAC,UAAU,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,QAAQ,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,sBAAsB,CAAC,eAAuB;QAC5C,OAAO,IAAI,CAAC,YAAY,CAAC,eAAe,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACH,mBAAmB,CAAC,YAAgC;QAClD,OAAO,CACL,IAAI,CAAC,OAAO,KAAK,SAAS;YAC1B,YAAY,KAAK,SAAS;YAC1B,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAC3D,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,uBAAuB,EAAE,IAAI,CAAC,uBAAuB;YACrD,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI;YACxB,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC;IACJ,CAAC;IAEO,YAAY,CAAC,MAAc,EAAE,QAAgB;QACnD,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;QAChE,MAAM,YAAY,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC;QAEpE,OAAO,eAAe,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IACnD,CAAC;CACF"}

package/dist/dist-hidden/service/iam/credential/sim-iam-credential-registry.d.ts

@@ -1,21 +0,0 @@
-import type { SimAwsCredentials, SimIamCredentialIdentity } from "./sim-aws-credentials.js";
-import type { SimIamAccessKey } from "./sim-iam-access-key.js";
-/**
- * Stores and authenticates simulated IAM access keys.
- *
- * The registry is deliberately agnostic about the principal type represented
- * by an access key. Temporary sessions and future IAM-user access keys share
- * the same lookup and authentication behavior.
- */
-export declare class SimIamCredentialRegistry {
-    private readonly accessKeys;
-    /**
-     * Register a new simulated access key.
-     */
-    registerAccessKey(accessKey: SimIamAccessKey): void;
-    /**
-     * Authenticate credentials and resolve their simulated AWS identity.
-     */
-    resolve(credentials: SimAwsCredentials, now?: Date): SimIamCredentialIdentity;
-}
-//# sourceMappingURL=sim-iam-credential-registry.d.ts.map

package/dist/dist-hidden/service/iam/credential/sim-iam-credential-registry.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sim-iam-credential-registry.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/credential/sim-iam-credential-registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,iBAAiB,EACjB,wBAAwB,EACzB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAM/D;;;;;;GAMG;AACH,qBAAa,wBAAwB;IACnC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsC;IAEjE;;OAEG;IACH,iBAAiB,CAAC,SAAS,EAAE,eAAe,GAAG,IAAI,CAMlD;IAED;;OAEG;IACH,OAAO,CACL,WAAW,EAAE,iBAAiB,EAC9B,GAAG,GAAE,IAAiB,GACrB,wBAAwB,CAgE1B;CACF"}

package/dist/dist-hidden/service/iam/credential/sim-iam-credential-registry.js

@@ -1,75 +0,0 @@
-import { SimIamDuplicateAccessKey, SimIamInvalidCredentials, } from "./error/sim-iam-credential.error.js";
-/**
- * Stores and authenticates simulated IAM access keys.
- *
- * The registry is deliberately agnostic about the principal type represented
- * by an access key. Temporary sessions and future IAM-user access keys share
- * the same lookup and authentication behavior.
- */
-export class SimIamCredentialRegistry {
-    accessKeys = new Map();
-    /**
-     * Register a new simulated access key.
-     */
-    registerAccessKey(accessKey) {
-        if (this.accessKeys.has(accessKey.accessKeyId)) {
-            throw new SimIamDuplicateAccessKey(accessKey.accessKeyId);
-        }
-        this.accessKeys.set(accessKey.accessKeyId, accessKey);
-    }
-    /**
-     * Authenticate credentials and resolve their simulated AWS identity.
-     */
-    resolve(credentials, now = new Date()) {
-        const accessKey = this.accessKeys.get(credentials.accessKeyId);
-        if (accessKey === undefined) {
-            throw new SimIamInvalidCredentials({
-                accessKeyId: credentials.accessKeyId,
-                reason: "unknown-access-key",
-            });
-        }
-        if (accessKey.status !== "Active") {
-            throw new SimIamInvalidCredentials({
-                accessKeyId: credentials.accessKeyId,
-                reason: "inactive-access-key",
-                accessKeyStatus: accessKey.status,
-            });
-        }
-        if (!accessKey.matchesSecretAccessKey(credentials.secretAccessKey)) {
-            throw new SimIamInvalidCredentials({
-                accessKeyId: credentials.accessKeyId,
-                reason: "secret-access-key-mismatch",
-            });
-        }
-        if (accessKey.session !== undefined &&
-            credentials.sessionToken === undefined) {
-            throw new SimIamInvalidCredentials({
-                accessKeyId: credentials.accessKeyId,
-                reason: "session-token-missing",
-            });
-        }
-        if (accessKey.session === undefined &&
-            credentials.sessionToken !== undefined) {
-            throw new SimIamInvalidCredentials({
-                accessKeyId: credentials.accessKeyId,
-                reason: "session-token-unexpected",
-            });
-        }
-        if (accessKey.session !== undefined &&
-            !accessKey.matchesSessionToken(credentials.sessionToken)) {
-            throw new SimIamInvalidCredentials({
-                accessKeyId: credentials.accessKeyId,
-                reason: "session-token-mismatch",
-            });
-        }
-        if (accessKey.session?.isExpired(now) === true) {
-            throw new SimIamInvalidCredentials({
-                accessKeyId: credentials.accessKeyId,
-                reason: "expired-session",
-                expiration: accessKey.session.expiration,
-            });
-        }
-        return accessKey.identity();
-    }
-}
-//# sourceMappingURL=sim-iam-credential-registry.js.map

package/dist/dist-hidden/service/iam/credential/sim-iam-credential-registry.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sim-iam-credential-registry.js","sourceRoot":"","sources":["../../../../src/service/iam/credential/sim-iam-credential-registry.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,qCAAqC,CAAC;AAE7C;;;;;;GAMG;AACH,MAAM,OAAO,wBAAwB;IAClB,UAAU,GAAG,IAAI,GAAG,EAA2B,CAAC;IAEjE;;OAEG;IACH,iBAAiB,CAAC,SAA0B;QAC1C,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,wBAAwB,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAC5D,CAAC;QAED,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,OAAO,CACL,WAA8B,EAC9B,GAAG,GAAS,IAAI,IAAI,EAAE;QAEtB,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QAE/D,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,IAAI,wBAAwB,CAAC;gBACjC,WAAW,EAAE,WAAW,CAAC,WAAW;gBACpC,MAAM,EAAE,oBAAoB;aAC7B,CAAC,CAAC;QACL,CAAC;QAED,IAAI,SAAS,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAClC,MAAM,IAAI,wBAAwB,CAAC;gBACjC,WAAW,EAAE,WAAW,CAAC,WAAW;gBACpC,MAAM,EAAE,qBAAqB;gBAC7B,eAAe,EAAE,SAAS,CAAC,MAAM;aAClC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,sBAAsB,CAAC,WAAW,CAAC,eAAe,CAAC,EAAE,CAAC;YACnE,MAAM,IAAI,wBAAwB,CAAC;gBACjC,WAAW,EAAE,WAAW,CAAC,WAAW;gBACpC,MAAM,EAAE,4BAA4B;aACrC,CAAC,CAAC;QACL,CAAC;QAED,IACE,SAAS,CAAC,OAAO,KAAK,SAAS;YAC/B,WAAW,CAAC,YAAY,KAAK,SAAS,EACtC,CAAC;YACD,MAAM,IAAI,wBAAwB,CAAC;gBACjC,WAAW,EAAE,WAAW,CAAC,WAAW;gBACpC,MAAM,EAAE,uBAAuB;aAChC,CAAC,CAAC;QACL,CAAC;QAED,IACE,SAAS,CAAC,OAAO,KAAK,SAAS;YAC/B,WAAW,CAAC,YAAY,KAAK,SAAS,EACtC,CAAC;YACD,MAAM,IAAI,wBAAwB,CAAC;gBACjC,WAAW,EAAE,WAAW,CAAC,WAAW;gBACpC,MAAM,EAAE,0BAA0B;aACnC,CAAC,CAAC;QACL,CAAC;QAED,IACE,SAAS,CAAC,OAAO,KAAK,SAAS;YAC/B,CAAC,SAAS,CAAC,mBAAmB,CAAC,WAAW,CAAC,YAAY,CAAC,EACxD,CAAC;YACD,MAAM,IAAI,wBAAwB,CAAC;gBACjC,WAAW,EAAE,WAAW,CAAC,WAAW;gBACpC,MAAM,EAAE,wBAAwB;aACjC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;YAC/C,MAAM,IAAI,wBAAwB,CAAC;gBACjC,WAAW,EAAE,WAAW,CAAC,WAAW;gBACpC,MAAM,EAAE,iBAAiB;gBACzB,UAAU,EAAE,SAAS,CAAC,OAAO,CAAC,UAAU;aACzC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,SAAS,CAAC,QAAQ,EAAE,CAAC;IAC9B,CAAC;CACF"}

package/dist/dist-hidden/service/iam/index.d.ts

@@ -1,2 +0,0 @@
-export { SimIam } from "./sim-iam.js";
-//# sourceMappingURL=index.d.ts.map

package/dist/dist-hidden/service/iam/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/service/iam/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC"}

package/dist/dist-hidden/service/iam/index.js

@@ -1,2 +0,0 @@
-export { SimIam } from "./sim-iam.js";
-//# sourceMappingURL=index.js.map

package/dist/dist-hidden/service/iam/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/service/iam/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC"}

package/dist/dist-hidden/service/iam/policy/parse/sim-iam-doc-parser.d.ts

@@ -1,31 +0,0 @@
-import type { SimIamPolicyDocument, SimIamPolicyDocumentCondition, SimIamPolicyDocumentPrincipal, SimIamPolicyDocumentStatement } from "../sim-iam-policy.js";
-export interface SimIamParsedPolicyDocument {
-    readonly statements: readonly SimIamParsedPolicyStatement[];
-}
-export interface SimIamParsedPolicyStatement {
-    readonly source: SimIamPolicyDocumentStatement;
-    readonly sid?: string | undefined;
-    readonly effect: "Allow" | "Deny";
-    readonly actions?: readonly string[] | undefined;
-    readonly notActions?: readonly string[] | undefined;
-    readonly resources?: readonly string[] | undefined;
-    readonly notResources?: readonly string[] | undefined;
-    readonly principal?: SimIamPolicyDocumentPrincipal | undefined;
-    readonly notPrincipal?: SimIamPolicyDocumentPrincipal | undefined;
-    readonly condition?: SimIamPolicyDocumentCondition | undefined;
-}
-/**
- * Parse raw IAM policy document shapes into a form convenient for evaluation.
- *
- * IAM policy JSON commonly allows either a single value or an array. The decision
- * engine should not need to care which source shape was used.
- */
-export declare class SimIamPolicyDocumentParser {
-    /**
-     * Parse a sim IAM Policy Document into a form convenient for evaluation.
-     */
-    parse(policy: SimIamPolicyDocument): SimIamParsedPolicyDocument;
-    private parseStatement;
-    private stringList;
-}
-//# sourceMappingURL=sim-iam-doc-parser.d.ts.map

package/dist/dist-hidden/service/iam/policy/parse/sim-iam-doc-parser.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sim-iam-doc-parser.d.ts","sourceRoot":"","sources":["../../../../../src/service/iam/policy/parse/sim-iam-doc-parser.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,oBAAoB,EACpB,6BAA6B,EAC7B,6BAA6B,EAC7B,6BAA6B,EAC9B,MAAM,sBAAsB,CAAC;AAG9B,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,UAAU,EAAE,SAAS,2BAA2B,EAAE,CAAC;CAC7D;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,MAAM,EAAE,6BAA6B,CAAC;IAC/C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC;IAClC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACpD,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACnD,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACtD,QAAQ,CAAC,SAAS,CAAC,EAAE,6BAA6B,GAAG,SAAS,CAAC;IAC/D,QAAQ,CAAC,YAAY,CAAC,EAAE,6BAA6B,GAAG,SAAS,CAAC;IAClE,QAAQ,CAAC,SAAS,CAAC,EAAE,6BAA6B,GAAG,SAAS,CAAC;CAChE;AAED;;;;;GAKG;AACH,qBAAa,0BAA0B;IACrC;;OAEG;IACH,KAAK,CAAC,MAAM,EAAE,oBAAoB,GAAG,0BAA0B,CAM9D;IAED,OAAO,CAAC,cAAc;IAiBtB,OAAO,CAAC,UAAU;CAanB"}

package/dist/dist-hidden/service/iam/policy/parse/sim-iam-doc-parser.factory.d.ts

@@ -1,7 +0,0 @@
-import { StaticFactory } from "@kensio/part-factory";
-import type { SimIamParsedPolicyStatement } from "./sim-iam-doc-parser.js";
-/**
- * Generates parsed IAM policy statements for tests.
- */
-export declare const simIamParsedPolicyStatementFactory: StaticFactory<SimIamParsedPolicyStatement>;
-//# sourceMappingURL=sim-iam-doc-parser.factory.d.ts.map

package/dist/dist-hidden/service/iam/policy/parse/sim-iam-doc-parser.factory.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sim-iam-doc-parser.factory.d.ts","sourceRoot":"","sources":["../../../../../src/service/iam/policy/parse/sim-iam-doc-parser.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AAE3E;;GAEG;AACH,eAAO,MAAM,kCAAkC,4CAU3C,CAAC"}

package/dist/dist-hidden/service/iam/policy/parse/sim-iam-doc-parser.factory.js

@@ -1,15 +0,0 @@
-import { StaticFactory } from "@kensio/part-factory";
-/**
- * Generates parsed IAM policy statements for tests.
- */
-export const simIamParsedPolicyStatementFactory = new StaticFactory({
-    source: {
-        Effect: "Allow",
-        Action: "s3:GetObject",
-        Resource: "arn:aws:s3:::test-bucket/test-key",
-    },
-    effect: "Allow",
-    actions: ["s3:GetObject"],
-    resources: ["arn:aws:s3:::test-bucket/test-key"],
-});
-//# sourceMappingURL=sim-iam-doc-parser.factory.js.map

package/dist/dist-hidden/service/iam/policy/parse/sim-iam-doc-parser.factory.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sim-iam-doc-parser.factory.js","sourceRoot":"","sources":["../../../../../src/service/iam/policy/parse/sim-iam-doc-parser.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAGrD;;GAEG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAC7C,IAAI,aAAa,CAA8B;IAC7C,MAAM,EAAE;QACN,MAAM,EAAE,OAAO;QACf,MAAM,EAAE,cAAc;QACtB,QAAQ,EAAE,mCAAmC;KAC9C;IACD,MAAM,EAAE,OAAO;IACf,OAAO,EAAE,CAAC,cAAc,CAAC;IACzB,SAAS,EAAE,CAAC,mCAAmC,CAAC;CACjD,CAAC,CAAC"}

package/dist/dist-hidden/service/iam/policy/parse/sim-iam-doc-parser.js

@@ -1,41 +0,0 @@
-import { simIamPolicyDocumentStatements } from "../sim-iam-pol-doc-statements.js";
-/**
- * Parse raw IAM policy document shapes into a form convenient for evaluation.
- *
- * IAM policy JSON commonly allows either a single value or an array. The decision
- * engine should not need to care which source shape was used.
- */
-export class SimIamPolicyDocumentParser {
-    /**
-     * Parse a sim IAM Policy Document into a form convenient for evaluation.
-     */
-    parse(policy) {
-        return {
-            statements: simIamPolicyDocumentStatements(policy).map((statement) => this.parseStatement(statement)),
-        };
-    }
-    parseStatement(statement) {
-        return {
-            source: statement,
-            sid: statement.Sid,
-            effect: statement.Effect,
-            actions: this.stringList(statement.Action),
-            notActions: this.stringList(statement.NotAction),
-            resources: this.stringList(statement.Resource),
-            notResources: this.stringList(statement.NotResource),
-            principal: statement.Principal,
-            notPrincipal: statement.NotPrincipal,
-            condition: statement.Condition,
-        };
-    }
-    stringList(value) {
-        if (value === undefined) {
-            return undefined;
-        }
-        if (typeof value === "string") {
-            return [value];
-        }
-        return [...value];
-    }
-}
-//# sourceMappingURL=sim-iam-doc-parser.js.map

package/dist/dist-hidden/service/iam/policy/parse/sim-iam-doc-parser.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sim-iam-doc-parser.js","sourceRoot":"","sources":["../../../../../src/service/iam/policy/parse/sim-iam-doc-parser.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,8BAA8B,EAAE,MAAM,kCAAkC,CAAC;AAmBlF;;;;;GAKG;AACH,MAAM,OAAO,0BAA0B;IACrC;;OAEG;IACH,KAAK,CAAC,MAA4B;QAChC,OAAO;YACL,UAAU,EAAE,8BAA8B,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CACnE,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAC/B;SACF,CAAC;IACJ,CAAC;IAEO,cAAc,CACpB,SAAwC;QAExC,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,GAAG,EAAE,SAAS,CAAC,GAAG;YAClB,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC;YAC1C,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,SAAS,CAAC;YAChD,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC;YAC9C,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,WAAW,CAAC;YACpD,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,SAAS,EAAE,SAAS,CAAC,SAAS;SAC/B,CAAC;IACJ,CAAC;IAEO,UAAU,CAChB,KAA6C;QAE7C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC;QAED,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;IACpB,CAAC;CACF"}

package/dist/dist-hidden/service/iam/policy/sim-iam-pol-doc-statements.d.ts

@@ -1,7 +0,0 @@
-import type { SimIamPolicyDocument, SimIamPolicyDocumentStatement } from "./sim-iam-policy.js";
-/**
- * Return the policy document statements as an array, regardless of whether the
- * source document used the single-statement or statement-array shape.
- */
-export declare function simIamPolicyDocumentStatements(policyDocument: SimIamPolicyDocument): readonly SimIamPolicyDocumentStatement[];
-//# sourceMappingURL=sim-iam-pol-doc-statements.d.ts.map

package/dist/dist-hidden/service/iam/policy/sim-iam-pol-doc-statements.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sim-iam-pol-doc-statements.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/policy/sim-iam-pol-doc-statements.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,oBAAoB,EACpB,6BAA6B,EAC9B,MAAM,qBAAqB,CAAC;AAI7B;;;GAGG;AACH,wBAAgB,8BAA8B,CAC5C,cAAc,EAAE,oBAAoB,GACnC,SAAS,6BAA6B,EAAE,CAgB1C"}

package/dist/dist-hidden/service/iam/policy/sim-iam-pol-doc-statements.js

@@ -1,21 +0,0 @@
-import { SimIamMalformedPolicyDocument } from "../error/sim-iam.error.js";
-/**
- * Return the policy document statements as an array, regardless of whether the
- * source document used the single-statement or statement-array shape.
- */
-export function simIamPolicyDocumentStatements(policyDocument) {
-    const policyStatement = policyDocument.Statement;
-    // JSON parse can still produce null at runtime
-    // eslint-disable-next-line @typescript-eslint/no-unnecessary-condition
-    if (policyStatement === undefined || policyStatement === null) {
-        throw new SimIamMalformedPolicyDocument("IAM policy document must define Statement");
-    }
-    if (isSimIamPolicyStatementArray(policyStatement)) {
-        return policyStatement;
-    }
-    return [policyStatement];
-}
-function isSimIamPolicyStatementArray(policyStatement) {
-    return Array.isArray(policyStatement);
-}
-//# sourceMappingURL=sim-iam-pol-doc-statements.js.map

package/dist/dist-hidden/service/iam/policy/sim-iam-pol-doc-statements.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sim-iam-pol-doc-statements.js","sourceRoot":"","sources":["../../../../src/service/iam/policy/sim-iam-pol-doc-statements.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,MAAM,2BAA2B,CAAC;AAQ1E;;;GAGG;AACH,MAAM,UAAU,8BAA8B,CAC5C,cAAoC;IAEpC,MAAM,eAAe,GAAG,cAAc,CAAC,SAAS,CAAC;IAEjD,+CAA+C;IAC/C,uEAAuE;IACvE,IAAI,eAAe,KAAK,SAAS,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;QAC9D,MAAM,IAAI,6BAA6B,CACrC,2CAA2C,CAC5C,CAAC;IACJ,CAAC;IAED,IAAI,4BAA4B,CAAC,eAAe,CAAC,EAAE,CAAC;QAClD,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,OAAO,CAAC,eAAe,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,4BAA4B,CACnC,eAA2C;IAE3C,OAAO,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;AACxC,CAAC"}

package/dist/dist-hidden/service/iam/policy/sim-iam-policy-arn.d.ts

@@ -1,16 +0,0 @@
-import type { SimAwsAccountId } from "../../aws/sim-aws-account.js";
-import type { SimIamPolicyId, SimIamPolicyName } from "./sim-iam-policy.js";
-import type { SimArn } from "../../aws/arn.js";
-/**
- * Make a sim IAM policy ARN.
- */
-export declare function makeSimPolicyArn(props: {
-    readonly accountId: SimAwsAccountId;
-    readonly path: string;
-    readonly policyName: SimIamPolicyName;
-}): SimArn;
-/**
- * Make a sim IAM policy ID.
- */
-export declare function makeSimPolicyId(): SimIamPolicyId;
-//# sourceMappingURL=sim-iam-policy-arn.d.ts.map

package/dist/dist-hidden/service/iam/policy/sim-iam-policy-arn.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sim-iam-policy-arn.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/policy/sim-iam-policy-arn.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC5E,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAG/C;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE;IACtC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;CACvC,GAAG,MAAM,CAET;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI,cAAc,CAKhD"}

package/dist/dist-hidden/service/iam/policy/sim-iam-policy-arn.js

@@ -1,17 +0,0 @@
-import { faker } from "@faker-js/faker";
-/**
- * Make a sim IAM policy ARN.
- */
-export function makeSimPolicyArn(props) {
-    return `arn:aws:iam::${props.accountId}:policy${props.path}${props.policyName}`;
-}
-/**
- * Make a sim IAM policy ID.
- */
-export function makeSimPolicyId() {
-    return faker.string.alphanumeric({
-        length: 21,
-        casing: "upper",
-    });
-}
-//# sourceMappingURL=sim-iam-policy-arn.js.map

package/dist/dist-hidden/service/iam/policy/sim-iam-policy-arn.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sim-iam-policy-arn.js","sourceRoot":"","sources":["../../../../src/service/iam/policy/sim-iam-policy-arn.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAExC;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAIhC;IACC,OAAO,gBAAgB,KAAK,CAAC,SAAS,UAAU,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,UAAU,EAAY,CAAC;AAC5F,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe;IAC7B,OAAO,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC;QAC/B,MAAM,EAAE,EAAE;QACV,MAAM,EAAE,OAAO;KAChB,CAAmB,CAAC;AACvB,CAAC"}

package/dist/dist-hidden/service/iam/policy/sim-iam-policy.d.ts

@@ -1,52 +0,0 @@
-import type { JSONString } from "../../../util/type-guard/json.js";
-import type { Brand } from "../../../util/brand.type.js";
-import type { SimArn } from "../../aws/arn.js";
-export type SimIamPolicyName = Brand<string, "SimIamPolicyName">;
-export type SimIamPolicyId = Brand<string, "SimIamPolicyId">;
-export interface SimIamPolicyDocument {
-    readonly Version?: string | undefined;
-    readonly Id?: string | undefined;
-    readonly Statement?: SimIamPolicyDocumentStatement | readonly SimIamPolicyDocumentStatement[];
-}
-export interface SimIamPolicyDocumentStatement {
-    readonly Sid?: string | undefined;
-    readonly Effect: "Allow" | "Deny";
-    readonly Action?: string | readonly string[] | undefined;
-    readonly NotAction?: string | readonly string[] | undefined;
-    readonly Resource?: string | readonly string[] | undefined;
-    readonly NotResource?: string | readonly string[] | undefined;
-    readonly Principal?: SimIamPolicyDocumentPrincipal | undefined;
-    readonly NotPrincipal?: SimIamPolicyDocumentPrincipal | undefined;
-    readonly Condition?: SimIamPolicyDocumentCondition | undefined;
-}
-export type SimIamPolicyDocumentPrincipalObject = Readonly<Record<string, string | readonly string[]>>;
-export type SimIamPolicyDocumentPrincipal = string | readonly string[] | SimIamPolicyDocumentPrincipalObject;
-export type SimIamConditionValue = string | number | boolean | readonly string[];
-export type SimIamPolicyDocumentCondition = Readonly<Record<string, Readonly<Record<string, SimIamConditionValue>>>>;
-/**
- * IAM managed policy record.
- *
- * This represents customer-managed or AWS-managed IAM policy metadata and its
- * default policy document. Inline policies and resource policies are stored on
- * their owning identity/resource instead of in this global managed-policy
- * store.
- */
-export interface SimIamManagedPolicy {
-    readonly arn: SimArn;
-    readonly policyId: SimIamPolicyId;
-    readonly policyName: SimIamPolicyName;
-    readonly path: string;
-    readonly defaultVersionId: string;
-    readonly attachmentCount: number;
-    readonly permissionsBoundaryUsageCount: number;
-    readonly isAttachable: boolean;
-    readonly description?: string | undefined;
-    readonly createDate: Date;
-    readonly updateDate: Date;
-    readonly policyDocument?: JSONString<SimIamPolicyDocument> | undefined;
-}
-/**
- * Backwards-compatible alias while the IAM command handlers are migrated.
- */
-export type SimIamPolicy = SimIamManagedPolicy;
-//# sourceMappingURL=sim-iam-policy.d.ts.map

package/dist/dist-hidden/service/iam/policy/sim-iam-policy.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sim-iam-policy.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/policy/sim-iam-policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE/C,MAAM,MAAM,gBAAgB,GAAG,KAAK,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;AACjE,MAAM,MAAM,cAAc,GAAG,KAAK,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;AAE7D,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EACjB,6BAA6B,GAAG,SAAS,6BAA6B,EAAE,CAAC;CAC5E;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACzD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAC5D,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAC3D,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAC9D,QAAQ,CAAC,SAAS,CAAC,EAAE,6BAA6B,GAAG,SAAS,CAAC;IAC/D,QAAQ,CAAC,YAAY,CAAC,EAAE,6BAA6B,GAAG,SAAS,CAAC;IAClE,QAAQ,CAAC,SAAS,CAAC,EAAE,6BAA6B,GAAG,SAAS,CAAC;CAChE;AAED,MAAM,MAAM,mCAAmC,GAAG,QAAQ,CACxD,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAAC,CAC3C,CAAC;AAEF,MAAM,MAAM,6BAA6B,GACvC,MAAM,GAAG,SAAS,MAAM,EAAE,GAAG,mCAAmC,CAAC;AAEnE,MAAM,MAAM,oBAAoB,GAC9B,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,MAAM,EAAE,CAAC;AAEhD,MAAM,MAAM,6BAA6B,GAAG,QAAQ,CAClD,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAC/D,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,6BAA6B,EAAE,MAAM,CAAC;IAC/C,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC;IAC1B,QAAQ,CAAC,cAAc,CAAC,EAAE,UAAU,CAAC,oBAAoB,CAAC,GAAG,SAAS,CAAC;CACxE;AAED;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,mBAAmB,CAAC"}

package/dist/dist-hidden/service/iam/policy/sim-iam-policy.factory.d.ts

@@ -1,6 +0,0 @@
-import { DynamicFactory } from "@kensio/part-factory";
-/**
- * Generates fake IAM managed policy records.
- */
-export declare const simIamPolicyFactory: DynamicFactory<import("./sim-iam-policy.js").SimIamManagedPolicy>;
-//# sourceMappingURL=sim-iam-policy.factory.d.ts.map

package/dist/dist-hidden/service/iam/policy/sim-iam-policy.factory.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sim-iam-policy.factory.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/policy/sim-iam-policy.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAKtD;;GAEG;AACH,eAAO,MAAM,mBAAmB,mEAqB9B,CAAC"}

package/dist/dist-hidden/service/iam/policy/sim-iam-policy.factory.js

@@ -1,28 +0,0 @@
-import { DynamicFactory } from "@kensio/part-factory";
-import { makeSimPolicyArn, makeSimPolicyId } from "./sim-iam-policy-arn.js";
-import { makeSimAwsAccountId } from "../../aws/sim-aws-account.js";
-/**
- * Generates fake IAM managed policy records.
- */
-export const simIamPolicyFactory = new DynamicFactory(() => {
-    const now = new Date();
-    const policyName = "TestPolicy";
-    const path = "/";
-    return {
-        arn: makeSimPolicyArn({
-            accountId: makeSimAwsAccountId(),
-            path,
-            policyName,
-        }),
-        policyId: makeSimPolicyId(),
-        policyName,
-        path,
-        defaultVersionId: "v1",
-        attachmentCount: 0,
-        permissionsBoundaryUsageCount: 0,
-        isAttachable: true,
-        createDate: now,
-        updateDate: now,
-    };
-});
-//# sourceMappingURL=sim-iam-policy.factory.js.map