@kensio/yulin 0.34.2 → 0.36.0

package/dist/service/lambda/command/get-policy/get-policy.handler.d.ts

@@ -0,0 +1,35 @@
+import type { CommandHandler } from "../../../../command/command-handler.js";
+import type { BackgroundScheduler } from "../../../../util/background/background.js";
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimLambdaFunctionLookup } from "../../function/url/sim-lambda-function-lookup.js";
+import type { SimGetPolicyCommand, SimGetPolicyCommandOutput } from "./get-policy.command.js";
+interface GetPolicyCommandHandlerProperties {
+    readonly functions: SimLambdaFunctionLookup;
+    readonly iam: SimIamInterServiceAuthZ;
+    readonly background: BackgroundScheduler;
+}
+interface GetPolicyCommandHandlerOptions {
+    readonly caller?: SimAwsCaller;
+}
+/**
+ * Simulated Lambda GetPolicyCommand handler.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/lambda/command/GetPolicyCommand/
+ */
+export declare class GetPolicyCommandHandler implements CommandHandler<SimGetPolicyCommand, SimGetPolicyCommandOutput> {
+    private readonly functions;
+    private readonly authorizer;
+    private readonly background;
+    constructor(properties: GetPolicyCommandHandlerProperties);
+    /**
+     * Read a sim Lambda function's resource policy.
+     *
+     * A function that has been granted nothing has no policy at all, which real
+     * Lambda reports as the policy not being found rather than as an empty
+     * document.
+     */
+    handle(command: SimGetPolicyCommand, options?: GetPolicyCommandHandlerOptions): Promise<SimGetPolicyCommandOutput>;
+}
+export {};
+//# sourceMappingURL=get-policy.handler.d.ts.map

package/dist/service/lambda/command/get-policy/get-policy.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-policy.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/command/get-policy/get-policy.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AAErF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAEtG,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kDAAkD,CAAC;AAEhG,OAAO,KAAK,EACV,mBAAmB,EACnB,yBAAyB,EAC1B,MAAM,yBAAyB,CAAC;AAEjC,UAAU,iCAAiC;IACzC,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAC;IAC5C,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;IACtC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;CAC1C;AAED,UAAU,8BAA8B;IACtC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;GAIG;AACH,qBAAa,uBAAwB,YAAW,cAAc,CAC5D,mBAAmB,EACnB,yBAAyB,CAC1B;IACC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA0B;IACpD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAwB;IACnD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,UAAU,EAAE,iCAAiC,EAOxD;IAED;;;;;;OAMG;IACG,MAAM,CACV,OAAO,EAAE,mBAAmB,EAC5B,OAAO,CAAC,EAAE,8BAA8B,GACvC,OAAO,CAAC,yBAAyB,CAAC,CAyBpC;CACF"}

package/dist/service/lambda/command/get-policy/get-policy.handler.js

@@ -0,0 +1,45 @@
+import { assertDefined } from "../../../../util/type-guard/defined.js";
+import { SimLambdaResourceNotFoundException } from "../../error/sim-lambda.error.js";
+import { FunctionUrlAuthorizer } from "../function-url/function-url-authorizer.js";
+/**
+ * Simulated Lambda GetPolicyCommand handler.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/lambda/command/GetPolicyCommand/
+ */
+export class GetPolicyCommandHandler {
+    functions;
+    authorizer;
+    background;
+    constructor(properties) {
+        this.functions = properties.functions;
+        this.authorizer = new FunctionUrlAuthorizer({
+            iam: properties.iam,
+            action: "lambda:GetPolicy",
+        });
+        this.background = properties.background;
+    }
+    /**
+     * Read a sim Lambda function's resource policy.
+     *
+     * A function that has been granted nothing has no policy at all, which real
+     * Lambda reports as the policy not being found rather than as an empty
+     * document.
+     */
+    async handle(command, options) {
+        assertDefined(command.input.FunctionName, "GetPolicyCommand.input.FunctionName required");
+        await this.background.sequence();
+        const functionName = command.input.FunctionName;
+        const functionArn = this.functions.functionArn(functionName);
+        this.authorizer.authorize(functionArn, options?.caller);
+        const { resourcePolicy } = this.functions.require(functionName);
+        if (resourcePolicy.isEmpty()) {
+            throw new SimLambdaResourceNotFoundException(`The resource you requested does not exist. Resource: ${functionArn}`);
+        }
+        return {
+            $metadata: {},
+            Policy: JSON.stringify(resourcePolicy.document()),
+            RevisionId: resourcePolicy.revisionId,
+        };
+    }
+}
+//# sourceMappingURL=get-policy.handler.js.map

package/dist/service/lambda/command/get-policy/get-policy.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-policy.handler.js","sourceRoot":"","sources":["../../../../../src/service/lambda/command/get-policy/get-policy.handler.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAGvE,OAAO,EAAE,kCAAkC,EAAE,MAAM,iCAAiC,CAAC;AAErF,OAAO,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AAgBnF;;;;GAIG;AACH,MAAM,OAAO,uBAAuB;IAIjB,SAAS,CAA0B;IACnC,UAAU,CAAwB;IAClC,UAAU,CAAsB;IAEjD,YAAY,UAA6C;QACvD,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,UAAU,GAAG,IAAI,qBAAqB,CAAC;YAC1C,GAAG,EAAE,UAAU,CAAC,GAAG;YACnB,MAAM,EAAE,kBAAkB;SAC3B,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;IAC1C,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,MAAM,CACV,OAA4B,EAC5B,OAAwC;QAExC,aAAa,CACX,OAAO,CAAC,KAAK,CAAC,YAAY,EAC1B,8CAA8C,CAC/C,CAAC;QAEF,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC;QAChD,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;QAC7D,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAExD,MAAM,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAEhE,IAAI,cAAc,CAAC,OAAO,EAAE,EAAE,CAAC;YAC7B,MAAM,IAAI,kCAAkC,CAC1C,wDAAwD,WAAW,EAAE,CACtE,CAAC;QACJ,CAAC;QAED,OAAO;YACL,SAAS,EAAE,EAAE;YACb,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC;YACjD,UAAU,EAAE,cAAc,CAAC,UAAU;SACtC,CAAC;IACJ,CAAC;CACF"}

package/dist/service/lambda/command/invoke/invoke-authorizer.d.ts

@@ -1,5 +1,6 @@
 import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
 import type { SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimLambdaFunction } from "../../function/sim-lambda-function.js";
 interface InvokeAuthorizerProperties {
     readonly iam: SimIamInterServiceAuthZ;
 }
@@ -8,6 +9,10 @@ interface InvokeAuthorizerProperties {
  *
  * AWS maps the Invoke API operation to the lambda:InvokeFunction IAM action.
  * The resource is the function ARN being invoked.
+ *
+ * The function's own resource-based policy is evaluated alongside the caller's
+ * identity policies, so a permission added with AddPermission allows an
+ * invocation the caller's own policies do not, which is the whole point of one.
  */
 export declare class InvokeAuthorizer {
     private static readonly action;
@@ -18,9 +23,10 @@ export declare class InvokeAuthorizer {
      *
      * The caller is passed through unchanged so sim IAM can distinguish an
      * omitted caller, which defaults to Account root, from an explicit anonymous
-     * caller.
+     * caller. The function is optional because a request naming one that does not
+     * exist is still authorized first, as it is on AWS.
      */
-    authorize(functionArn: string, caller?: SimAwsCaller): void;
+    authorize(functionArn: string, caller?: SimAwsCaller, simFunction?: SimLambdaFunction): void;
 }
 export {};
 //# sourceMappingURL=invoke-authorizer.d.ts.map

package/dist/service/lambda/command/invoke/invoke-authorizer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"invoke-authorizer.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/command/invoke/invoke-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAGtG,UAAU,0BAA0B;IAClC,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;CACvC;AAED;;;;;GAKG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAA2B;IAEzD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA0B;IAE9C,YAAY,UAAU,EAAE,0BAA0B,EAEjD;IAED;;;;;;OAMG;IACH,SAAS,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,YAAY,GAAG,IAAI,CAc1D;CACF"}
+{"version":3,"file":"invoke-authorizer.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/command/invoke/invoke-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAEtG,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAG/E,UAAU,0BAA0B;IAClC,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;CACvC;AAED;;;;;;;;;GASG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAA2B;IAEzD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA0B;IAE9C,YAAY,UAAU,EAAE,0BAA0B,EAEjD;IAED;;;;;;;OAOG;IACH,SAAS,CACP,WAAW,EAAE,MAAM,EACnB,MAAM,CAAC,EAAE,YAAY,EACrB,WAAW,CAAC,EAAE,iBAAiB,GAC9B,IAAI,CAeN;CACF"}

package/dist/service/lambda/command/invoke/invoke-authorizer.js

@@ -1,9 +1,14 @@
 import { SimIamAccessDenied } from "../../../iam/error/sim-iam.error.js";
+import { simLambdaResourcePolicies } from "../authorize/sim-lambda-resource-policies.js";
 /**
  * Applies IAM authorization to a Lambda Invoke request.
  *
  * AWS maps the Invoke API operation to the lambda:InvokeFunction IAM action.
  * The resource is the function ARN being invoked.
+ *
+ * The function's own resource-based policy is evaluated alongside the caller's
+ * identity policies, so a permission added with AddPermission allows an
+ * invocation the caller's own policies do not, which is the whole point of one.
  */
 export class InvokeAuthorizer {
     static action = "lambda:InvokeFunction";
@@ -16,13 +21,15 @@ export class InvokeAuthorizer {
      *
      * The caller is passed through unchanged so sim IAM can distinguish an
      * omitted caller, which defaults to Account root, from an explicit anonymous
-     * caller.
+     * caller. The function is optional because a request naming one that does not
+     * exist is still authorized first, as it is on AWS.
      */
-    authorize(functionArn, caller) {
+    authorize(functionArn, caller, simFunction) {
         const decision = this.iam.authorize({
             action: InvokeAuthorizer.action,
             resource: functionArn,
             caller,
+            resourcePolicies: simLambdaResourcePolicies(simFunction),
         });
         if (decision.isDenied) {
             throw new SimIamAccessDenied({

package/dist/service/lambda/command/invoke/invoke-authorizer.js.map

@@ -1 +1 @@
-{"version":3,"file":"invoke-authorizer.js","sourceRoot":"","sources":["../../../../../src/service/lambda/command/invoke/invoke-authorizer.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAMzE;;;;;GAKG;AACH,MAAM,OAAO,gBAAgB;IACnB,MAAM,CAAU,MAAM,GAAG,uBAAuB,CAAC;IAExC,GAAG,CAA0B;IAE9C,YAAY,UAAsC;QAChD,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;;;;;OAMG;IACH,SAAS,CAAC,WAAmB,EAAE,MAAqB;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAClC,MAAM,EAAE,gBAAgB,CAAC,MAAM;YAC/B,QAAQ,EAAE,WAAW;YACrB,MAAM;SACP,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;gBACpC,MAAM,EAAE,gBAAgB,CAAC,MAAM;gBAC/B,QAAQ,EAAE,WAAW;aACtB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"invoke-authorizer.js","sourceRoot":"","sources":["../../../../../src/service/lambda/command/invoke/invoke-authorizer.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAEzE,OAAO,EAAE,yBAAyB,EAAE,MAAM,8CAA8C,CAAC;AAMzF;;;;;;;;;GASG;AACH,MAAM,OAAO,gBAAgB;IACnB,MAAM,CAAU,MAAM,GAAG,uBAAuB,CAAC;IAExC,GAAG,CAA0B;IAE9C,YAAY,UAAsC;QAChD,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;;;;;;OAOG;IACH,SAAS,CACP,WAAmB,EACnB,MAAqB,EACrB,WAA+B;QAE/B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAClC,MAAM,EAAE,gBAAgB,CAAC,MAAM;YAC/B,QAAQ,EAAE,WAAW;YACrB,MAAM;YACN,gBAAgB,EAAE,yBAAyB,CAAC,WAAW,CAAC;SACzD,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;gBACpC,MAAM,EAAE,gBAAgB,CAAC,MAAM;gBAC/B,QAAQ,EAAE,WAAW;aACtB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}

package/dist/service/lambda/command/invoke/invoke-dispatcher.d.ts

@@ -1,6 +1,6 @@
 import { type BackgroundScheduler } from "../../../../util/background/background.js";
 import type { SimLambdaFunction } from "../../function/sim-lambda-function.js";
-import type { SimInvokeCommand, SimInvokeCommandOutput } from "./invoke.cmd.js";
+import type { SimInvokeCommand, SimInvokeCommandOutput } from "./invoke.command.js";
 interface SimLambdaInvocationDispatcherProperties {
     background?: BackgroundScheduler;
 }

package/dist/service/lambda/command/invoke/invoke-dispatcher.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"invoke-dispatcher.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/command/invoke/invoke-dispatcher.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAM/E,OAAO,KAAK,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAEhF,UAAU,uCAAuC;IAC/C,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAClC;AAED;;;GAGG;AACH,qBAAa,6BAA6B;IACxC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,UAAU,GAAE,uCAA4C,EAGnE;IAED;;OAEG;IACG,QAAQ,CACZ,WAAW,EAAE,iBAAiB,EAC9B,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,sBAAsB,CAAC,CAejC;YAEa,eAAe;IAyB7B,OAAO,CAAC,uBAAuB;CAehC"}
+{"version":3,"file":"invoke-dispatcher.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/command/invoke/invoke-dispatcher.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAM/E,OAAO,KAAK,EACV,gBAAgB,EAChB,sBAAsB,EACvB,MAAM,qBAAqB,CAAC;AAE7B,UAAU,uCAAuC;IAC/C,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAClC;AAED;;;GAGG;AACH,qBAAa,6BAA6B;IACxC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,UAAU,GAAE,uCAA4C,EAGnE;IAED;;OAEG;IACG,QAAQ,CACZ,WAAW,EAAE,iBAAiB,EAC9B,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,sBAAsB,CAAC,CAejC;YAEa,eAAe;IAyB7B,OAAO,CAAC,uBAAuB;CAehC"}

package/dist/service/lambda/command/invoke/invoke-dispatcher.js.map

@@ -1 +1 @@
-{"version":3,"file":"invoke-dispatcher.js","sourceRoot":"","sources":["../../../../../src/service/lambda/command/invoke/invoke-dispatcher.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,eAAe,GAChB,MAAM,2CAA2C,CAAC;AAEnD,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,aAAa,GACd,MAAM,qBAAqB,CAAC;AAO7B;;;GAGG;AACH,MAAM,OAAO,6BAA6B;IACvB,UAAU,CAAsB;IAEjD,YAAY,UAAU,GAA4C,EAAE;QAClE,MAAM,EAAE,UAAU,GAAG,IAAI,eAAe,EAAE,EAAE,GAAG,UAAU,CAAC;QAC1D,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ,CACZ,WAA8B,EAC9B,OAAyB;QAEzB,MAAM,cAAc,GAAG,OAAO,CAAC,KAAK,CAAC,cAAc,IAAI,iBAAiB,CAAC;QAEzE,QAAQ,cAAc,EAAE,CAAC;YACvB,KAAK,iBAAiB,EAAE,CAAC;gBACvB,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YAC1D,CAAC;YACD,KAAK,OAAO,EAAE,CAAC;gBACb,IAAI,CAAC,uBAAuB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;gBACnD,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;YAC5C,CAAC;YACD,KAAK,QAAQ,EAAE,CAAC;gBACd,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;YAC5C,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,eAAe,CAC3B,WAA8B,EAC9B,OAAyB;QAEzB,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAEtD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC/C,OAAO;gBACL,SAAS,EAAE,EAAE;gBACb,UAAU,EAAE,GAAG;gBACf,eAAe,EAAE,SAAS;gBAC1B,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC;aAC/B,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,SAAS,EAAE,EAAE;gBACb,UAAU,EAAE,GAAG;gBACf,eAAe,EAAE,SAAS;gBAC1B,aAAa,EAAE,WAAW;gBAC1B,OAAO,EAAE,oBAAoB,CAAC,KAAK,CAAC;aACrC,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,uBAAuB,CAC7B,WAA8B,EAC9B,OAAyB;QAEzB,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAEtD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE;YAClC,IAAI,CAAC;gBACH,MAAM,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAClC,CAAC;YAAC,MAAM,CAAC;gBACP,qEAAqE;gBACrE,6DAA6D;YAC/D,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"invoke-dispatcher.js","sourceRoot":"","sources":["../../../../../src/service/lambda/command/invoke/invoke-dispatcher.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,eAAe,GAChB,MAAM,2CAA2C,CAAC;AAEnD,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,aAAa,GACd,MAAM,qBAAqB,CAAC;AAU7B;;;GAGG;AACH,MAAM,OAAO,6BAA6B;IACvB,UAAU,CAAsB;IAEjD,YAAY,UAAU,GAA4C,EAAE;QAClE,MAAM,EAAE,UAAU,GAAG,IAAI,eAAe,EAAE,EAAE,GAAG,UAAU,CAAC;QAC1D,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ,CACZ,WAA8B,EAC9B,OAAyB;QAEzB,MAAM,cAAc,GAAG,OAAO,CAAC,KAAK,CAAC,cAAc,IAAI,iBAAiB,CAAC;QAEzE,QAAQ,cAAc,EAAE,CAAC;YACvB,KAAK,iBAAiB,EAAE,CAAC;gBACvB,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YAC1D,CAAC;YACD,KAAK,OAAO,EAAE,CAAC;gBACb,IAAI,CAAC,uBAAuB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;gBACnD,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;YAC5C,CAAC;YACD,KAAK,QAAQ,EAAE,CAAC;gBACd,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;YAC5C,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,eAAe,CAC3B,WAA8B,EAC9B,OAAyB;QAEzB,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAEtD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC/C,OAAO;gBACL,SAAS,EAAE,EAAE;gBACb,UAAU,EAAE,GAAG;gBACf,eAAe,EAAE,SAAS;gBAC1B,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC;aAC/B,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,SAAS,EAAE,EAAE;gBACb,UAAU,EAAE,GAAG;gBACf,eAAe,EAAE,SAAS;gBAC1B,aAAa,EAAE,WAAW;gBAC1B,OAAO,EAAE,oBAAoB,CAAC,KAAK,CAAC;aACrC,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,uBAAuB,CAC7B,WAA8B,EAC9B,OAAyB;QAEzB,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAEtD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE;YAClC,IAAI,CAAC;gBACH,MAAM,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAClC,CAAC;YAAC,MAAM,CAAC;gBACP,qEAAqE;gBACrE,6DAA6D;YAC/D,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/lambda/command/invoke/invoke-payload.d.ts

@@ -1,4 +1,4 @@
-import type { SimInvokePayload } from "./invoke.cmd.js";
+import type { SimInvokePayload } from "./invoke.command.js";
 /**
  * Parse an Invoke request payload into the handler invocation event.
  *

package/dist/service/lambda/command/invoke/invoke-payload.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"invoke-payload.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/command/invoke/invoke-payload.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAcxD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,gBAAgB,GAAG,SAAS,GACpC,OAAO,CAkBT;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,OAAO,GAAG,UAAU,CAEzD;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,UAAU,CAW/D"}
+{"version":3,"file":"invoke-payload.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/command/invoke/invoke-payload.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAc5D;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,gBAAgB,GAAG,SAAS,GACpC,OAAO,CAkBT;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,OAAO,GAAG,UAAU,CAEzD;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,UAAU,CAW/D"}

package/dist/service/lambda/command/invoke/invoke.command.d.ts

@@ -0,0 +1,38 @@
+/**
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/lambda/command/InvokeCommand/
+ */
+import type { Readable } from "node:stream";
+import type { SimResponseMetadata } from "../../../aws/metadata/response-metadata.type.js";
+/**
+ * Minimal structural sim Lambda Invoke command.
+ */
+export interface SimInvokeCommand {
+    readonly input: SimInvokeCommandInput;
+}
+export type SimLambdaInvocationType = "RequestResponse" | "Event" | "DryRun";
+/**
+ * Minimal supported sim Lambda Invoke payload type.
+ * This allows for the different types that Payload could be in the real SDK
+ * command, even though only string and Uint8Array payloads are supported.
+ */
+export type SimInvokePayload = string | ArrayBuffer | ArrayBufferView | Uint8Array | Buffer | Blob | Readable | ReadableStream<Uint8Array>;
+/**
+ * Minimal structural sim Lambda Invoke input.
+ */
+export interface SimInvokeCommandInput {
+    readonly FunctionName?: string | undefined;
+    readonly InvocationType?: SimLambdaInvocationType | undefined;
+    readonly Payload?: SimInvokePayload | undefined;
+    readonly Qualifier?: string | undefined;
+}
+/**
+ * Minimal structural sim Lambda Invoke output.
+ */
+export interface SimInvokeCommandOutput {
+    readonly $metadata: SimResponseMetadata;
+    StatusCode: number;
+    ExecutedVersion?: string | undefined;
+    FunctionError?: string | undefined;
+    Payload?: Uint8Array | undefined;
+}
+//# sourceMappingURL=invoke.command.d.ts.map

package/dist/service/lambda/command/invoke/invoke.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invoke.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/command/invoke/invoke.command.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAE3F;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAC;CACvC;AAED,MAAM,MAAM,uBAAuB,GAAG,iBAAiB,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE7E;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GACxB,MAAM,GACN,WAAW,GACX,eAAe,GACf,UAAU,GACV,MAAM,GACN,IAAI,GACJ,QAAQ,GACR,cAAc,CAAC,UAAU,CAAC,CAAC;AAE/B;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,cAAc,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAC;IAC9D,QAAQ,CAAC,OAAO,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACzC;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;IACxC,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,OAAO,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;CAClC"}

package/dist/service/lambda/command/invoke/invoke.command.js

@@ -0,0 +1,5 @@
+/**
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/lambda/command/InvokeCommand/
+ */
+export {};
+//# sourceMappingURL=invoke.command.js.map

package/dist/service/lambda/command/invoke/invoke.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invoke.command.js","sourceRoot":"","sources":["../../../../../src/service/lambda/command/invoke/invoke.command.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/service/lambda/command/invoke/invoke.handler.d.ts

@@ -4,7 +4,7 @@ import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
 import type { SimAwsAccountRegionScope } from "../../../aws/sim-aws-account-region-scope.js";
 import { type SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
 import { type SimLambdaFunctionMap } from "../../function/sim-lambda-function.js";
-import type { SimInvokeCommand, SimInvokeCommandOutput } from "./invoke.cmd.js";
+import type { SimInvokeCommand, SimInvokeCommandOutput } from "./invoke.command.js";
 interface InvokeCommandHandlerProperties {
     accountRegionScope: SimAwsAccountRegionScope;
     functions: SimLambdaFunctionMap;

package/dist/service/lambda/command/invoke/invoke.handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"invoke.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/command/invoke/invoke.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AAEnD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,wDAAwD,CAAC;AAEhE,OAAO,EACL,KAAK,oBAAoB,EAG1B,MAAM,uCAAuC,CAAC;AAG/C,OAAO,KAAK,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAEhF,UAAU,8BAA8B;IACtC,kBAAkB,EAAE,wBAAwB,CAAC;IAC7C,SAAS,EAAE,oBAAoB,CAAC;IAChC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IAC9B,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAClC;AAED,UAAU,2BAA2B;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;GAIG;AACH,qBAAa,oBAAqB,YAAW,cAAc,CACzD,gBAAgB,EAChB,sBAAsB,CACvB;IACC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA2B;IAC9D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAuB;IACjD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmB;IAC9C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAgC;IAE3D,YAAY,UAAU,EAAE,8BAA8B,EAYrD;IAED;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,gBAAgB,EACzB,OAAO,CAAC,EAAE,2BAA2B,GACpC,OAAO,CAAC,sBAAsB,CAAC,CAyBjC;CACF"}
+{"version":3,"file":"invoke.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/command/invoke/invoke.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AAEnD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,wDAAwD,CAAC;AAEhE,OAAO,EACL,KAAK,oBAAoB,EAG1B,MAAM,uCAAuC,CAAC;AAG/C,OAAO,KAAK,EACV,gBAAgB,EAChB,sBAAsB,EACvB,MAAM,qBAAqB,CAAC;AAE7B,UAAU,8BAA8B;IACtC,kBAAkB,EAAE,wBAAwB,CAAC;IAC7C,SAAS,EAAE,oBAAoB,CAAC;IAChC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IAC9B,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAClC;AAED,UAAU,2BAA2B;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;GAIG;AACH,qBAAa,oBAAqB,YAAW,cAAc,CACzD,gBAAgB,EAChB,sBAAsB,CACvB;IACC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA2B;IAC9D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAuB;IACjD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmB;IAC9C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAgC;IAE3D,YAAY,UAAU,EAAE,8BAA8B,EAYrD;IAED;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,gBAAgB,EACzB,OAAO,CAAC,EAAE,2BAA2B,GACpC,OAAO,CAAC,sBAAsB,CAAC,CA6BjC;CACF"}

package/dist/service/lambda/command/invoke/invoke.handler.js

@@ -32,8 +32,11 @@ export class InvokeCommandHandler {
         // Allow for potential non-deterministic sequencing of async events.
         await this.background.sequence();
         const functionArn = simLambdaFunctionArn(this.accountRegionScope, command.input.FunctionName);
-        this.authorizer.authorize(functionArn, options?.caller);
         const simFunction = this.functions.get(command.input.FunctionName);
+        // Looked up before authorizing, because the function's own resource policy
+        // is part of what decides the answer, but still reported as missing only
+        // after authorization, as AWS orders the two.
+        this.authorizer.authorize(functionArn, options?.caller, simFunction);
         if (simFunction === undefined) {
             throw new SimLambdaResourceNotFoundException(`Function not found: ${functionArn}`);
         }

package/dist/service/lambda/command/invoke/invoke.handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"invoke.handler.js","sourceRoot":"","sources":["../../../../../src/service/lambda/command/invoke/invoke.handler.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,eAAe,GAChB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAGvE,OAAO,EACL,kBAAkB,GAEnB,MAAM,wDAAwD,CAAC;AAChE,OAAO,EAAE,kCAAkC,EAAE,MAAM,iCAAiC,CAAC;AACrF,OAAO,EAGL,oBAAoB,GACrB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,6BAA6B,EAAE,MAAM,wBAAwB,CAAC;AAcvE;;;;GAIG;AACH,MAAM,OAAO,oBAAoB;IAId,kBAAkB,CAA2B;IAC7C,SAAS,CAAuB;IAChC,UAAU,CAAmB;IAC7B,UAAU,CAAsB;IAChC,UAAU,CAAgC;IAE3D,YAAY,UAA0C;QACpD,MAAM,EACJ,kBAAkB,EAClB,SAAS,EACT,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,UAAU,CAAC;QACf,IAAI,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;QAC7C,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,UAAU,GAAG,IAAI,gBAAgB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,UAAU,GAAG,IAAI,6BAA6B,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;IACtE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,OAAyB,EACzB,OAAqC;QAErC,aAAa,CACX,OAAO,CAAC,KAAK,CAAC,YAAY,EAC1B,2CAA2C,CAC5C,CAAC;QAEF,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,MAAM,WAAW,GAAG,oBAAoB,CACtC,IAAI,CAAC,kBAAkB,EACvB,OAAO,CAAC,KAAK,CAAC,YAAY,CAC3B,CAAC;QACF,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAExD,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CACpC,OAAO,CAAC,KAAK,CAAC,YAAqC,CACpD,CAAC;QACF,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,kCAAkC,CAC1C,uBAAuB,WAAW,EAAE,CACrC,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC9D,CAAC;CACF"}
+{"version":3,"file":"invoke.handler.js","sourceRoot":"","sources":["../../../../../src/service/lambda/command/invoke/invoke.handler.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,eAAe,GAChB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAGvE,OAAO,EACL,kBAAkB,GAEnB,MAAM,wDAAwD,CAAC;AAChE,OAAO,EAAE,kCAAkC,EAAE,MAAM,iCAAiC,CAAC;AACrF,OAAO,EAGL,oBAAoB,GACrB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,6BAA6B,EAAE,MAAM,wBAAwB,CAAC;AAiBvE;;;;GAIG;AACH,MAAM,OAAO,oBAAoB;IAId,kBAAkB,CAA2B;IAC7C,SAAS,CAAuB;IAChC,UAAU,CAAmB;IAC7B,UAAU,CAAsB;IAChC,UAAU,CAAgC;IAE3D,YAAY,UAA0C;QACpD,MAAM,EACJ,kBAAkB,EAClB,SAAS,EACT,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,UAAU,CAAC;QACf,IAAI,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;QAC7C,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,UAAU,GAAG,IAAI,gBAAgB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,UAAU,GAAG,IAAI,6BAA6B,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;IACtE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,OAAyB,EACzB,OAAqC;QAErC,aAAa,CACX,OAAO,CAAC,KAAK,CAAC,YAAY,EAC1B,2CAA2C,CAC5C,CAAC;QAEF,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,MAAM,WAAW,GAAG,oBAAoB,CACtC,IAAI,CAAC,kBAAkB,EACvB,OAAO,CAAC,KAAK,CAAC,YAAY,CAC3B,CAAC;QACF,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CACpC,OAAO,CAAC,KAAK,CAAC,YAAqC,CACpD,CAAC;QAEF,2EAA2E;QAC3E,yEAAyE;QACzE,8CAA8C;QAC9C,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;QAErE,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,kCAAkC,CAC1C,uBAAuB,WAAW,EAAE,CACrC,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC9D,CAAC;CACF"}

package/dist/service/lambda/command/list-function-url-configs/list-function-url-configs.command.d.ts

@@ -0,0 +1,25 @@
+/**
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/lambda/command/ListFunctionUrlConfigsCommand/
+ */
+import type { SimResponseMetadata } from "../../../aws/metadata/response-metadata.type.js";
+import type { SimLambdaFunctionUrlConfiguration } from "../../function/url/sim-lambda-function-url.js";
+/**
+ * Minimal structural sim Lambda ListFunctionUrlConfigs command.
+ */
+export interface SimListFunctionUrlConfigsCommand {
+    readonly input: SimListFunctionUrlConfigsCommandInput;
+}
+/**
+ * Minimal structural sim Lambda ListFunctionUrlConfigs input.
+ */
+export interface SimListFunctionUrlConfigsCommandInput {
+    readonly FunctionName?: string | undefined;
+}
+/**
+ * Minimal structural sim Lambda ListFunctionUrlConfigs output.
+ */
+export interface SimListFunctionUrlConfigsCommandOutput {
+    readonly $metadata: SimResponseMetadata;
+    FunctionUrlConfigs: SimLambdaFunctionUrlConfiguration[];
+}
+//# sourceMappingURL=list-function-url-configs.command.d.ts.map

package/dist/service/lambda/command/list-function-url-configs/list-function-url-configs.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-function-url-configs.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/command/list-function-url-configs/list-function-url-configs.command.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,+CAA+C,CAAC;AAEvG;;GAEG;AACH,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,KAAK,EAAE,qCAAqC,CAAC;CACvD;AAED;;GAEG;AACH,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5C;AAED;;GAEG;AACH,MAAM,WAAW,sCAAsC;IACrD,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;IACxC,kBAAkB,EAAE,iCAAiC,EAAE,CAAC;CACzD"}

package/dist/service/lambda/command/list-function-url-configs/list-function-url-configs.command.js

@@ -0,0 +1,5 @@
+/**
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/lambda/command/ListFunctionUrlConfigsCommand/
+ */
+export {};
+//# sourceMappingURL=list-function-url-configs.command.js.map

package/dist/service/lambda/command/list-function-url-configs/list-function-url-configs.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-function-url-configs.command.js","sourceRoot":"","sources":["../../../../../src/service/lambda/command/list-function-url-configs/list-function-url-configs.command.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/service/lambda/command/list-function-url-configs/list-function-url-configs.handler.d.ts

@@ -0,0 +1,37 @@
+import type { CommandHandler } from "../../../../command/command-handler.js";
+import { type BackgroundScheduler } from "../../../../util/background/background.js";
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import { type SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimLambdaFunctionLookup } from "../../function/url/sim-lambda-function-lookup.js";
+import type { SimLambdaFunctionUrlStore } from "../../function/url/sim-lambda-function-url-store.js";
+import type { SimListFunctionUrlConfigsCommand, SimListFunctionUrlConfigsCommandOutput } from "./list-function-url-configs.command.js";
+interface ListFunctionUrlConfigsCommandHandlerProperties {
+    functionUrls: SimLambdaFunctionUrlStore;
+    functions: SimLambdaFunctionLookup;
+    iam?: SimIamInterServiceAuthZ;
+    background?: BackgroundScheduler;
+}
+interface ListFunctionUrlConfigsCommandHandlerOptions {
+    readonly caller?: SimAwsCaller;
+}
+/**
+ * Simulated Lambda ListFunctionUrlConfigsCommand handler.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/lambda/command/ListFunctionUrlConfigsCommand/
+ */
+export declare class ListFunctionUrlConfigsCommandHandler implements CommandHandler<SimListFunctionUrlConfigsCommand, SimListFunctionUrlConfigsCommandOutput> {
+    private readonly functionUrls;
+    private readonly functions;
+    private readonly authorizer;
+    private readonly background;
+    constructor(properties: ListFunctionUrlConfigsCommandHandlerProperties);
+    /**
+     * List the Function URL configurations for a sim Lambda function.
+     *
+     * A function has at most one Function URL, so this returns either no
+     * configurations or one.
+     */
+    handle(command: SimListFunctionUrlConfigsCommand, options?: ListFunctionUrlConfigsCommandHandlerOptions): Promise<SimListFunctionUrlConfigsCommandOutput>;
+}
+export {};
+//# sourceMappingURL=list-function-url-configs.handler.d.ts.map

package/dist/service/lambda/command/list-function-url-configs/list-function-url-configs.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-function-url-configs.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/command/list-function-url-configs/list-function-url-configs.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AAEnD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,wDAAwD,CAAC;AAChE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kDAAkD,CAAC;AAChG,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,qDAAqD,CAAC;AAErG,OAAO,KAAK,EACV,gCAAgC,EAChC,sCAAsC,EACvC,MAAM,wCAAwC,CAAC;AAEhD,UAAU,8CAA8C;IACtD,YAAY,EAAE,yBAAyB,CAAC;IACxC,SAAS,EAAE,uBAAuB,CAAC;IACnC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IAC9B,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAClC;AAED,UAAU,2CAA2C;IACnD,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;GAIG;AACH,qBAAa,oCAAqC,YAAW,cAAc,CACzE,gCAAgC,EAChC,sCAAsC,CACvC;IACC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA4B;IACzD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA0B;IACpD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAwB;IACnD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,UAAU,EAAE,8CAA8C,EAcrE;IAED;;;;;OAKG;IACG,MAAM,CACV,OAAO,EAAE,gCAAgC,EACzC,OAAO,CAAC,EAAE,2CAA2C,GACpD,OAAO,CAAC,sCAAsC,CAAC,CAsBjD;CACF"}

package/dist/service/lambda/command/list-function-url-configs/list-function-url-configs.handler.js

@@ -0,0 +1,46 @@
+import { BackgroundTasks, } from "../../../../util/background/background.js";
+import { assertDefined } from "../../../../util/type-guard/defined.js";
+import { SimIamAllowAllAuth, } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import { FunctionUrlAuthorizer } from "../function-url/function-url-authorizer.js";
+/**
+ * Simulated Lambda ListFunctionUrlConfigsCommand handler.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/lambda/command/ListFunctionUrlConfigsCommand/
+ */
+export class ListFunctionUrlConfigsCommandHandler {
+    functionUrls;
+    functions;
+    authorizer;
+    background;
+    constructor(properties) {
+        const { functionUrls, functions, iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), } = properties;
+        this.functionUrls = functionUrls;
+        this.functions = functions;
+        this.authorizer = new FunctionUrlAuthorizer({
+            iam,
+            action: "lambda:ListFunctionUrlConfigs",
+        });
+        this.background = background;
+    }
+    /**
+     * List the Function URL configurations for a sim Lambda function.
+     *
+     * A function has at most one Function URL, so this returns either no
+     * configurations or one.
+     */
+    async handle(command, options) {
+        assertDefined(command.input.FunctionName, "ListFunctionUrlConfigsCommand.input.FunctionName required");
+        // Allow for potential non-deterministic sequencing of async events.
+        await this.background.sequence();
+        const functionName = command.input.FunctionName;
+        this.authorizer.authorize(this.functions.functionArn(functionName), options?.caller);
+        this.functions.require(functionName);
+        return {
+            $metadata: {},
+            FunctionUrlConfigs: this.functionUrls
+                .allForFunction(functionName)
+                .map((functionUrl) => functionUrl.configuration()),
+        };
+    }
+}
+//# sourceMappingURL=list-function-url-configs.handler.js.map

package/dist/service/lambda/command/list-function-url-configs/list-function-url-configs.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-function-url-configs.handler.js","sourceRoot":"","sources":["../../../../../src/service/lambda/command/list-function-url-configs/list-function-url-configs.handler.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,eAAe,GAChB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAEvE,OAAO,EACL,kBAAkB,GAEnB,MAAM,wDAAwD,CAAC;AAGhE,OAAO,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AAiBnF;;;;GAIG;AACH,MAAM,OAAO,oCAAoC;IAI9B,YAAY,CAA4B;IACxC,SAAS,CAA0B;IACnC,UAAU,CAAwB;IAClC,UAAU,CAAsB;IAEjD,YAAY,UAA0D;QACpE,MAAM,EACJ,YAAY,EACZ,SAAS,EACT,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,UAAU,CAAC;QACf,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,UAAU,GAAG,IAAI,qBAAqB,CAAC;YAC1C,GAAG;YACH,MAAM,EAAE,+BAA+B;SACxC,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CACV,OAAyC,EACzC,OAAqD;QAErD,aAAa,CACX,OAAO,CAAC,KAAK,CAAC,YAAY,EAC1B,2DAA2D,CAC5D,CAAC;QAEF,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC;QAChD,IAAI,CAAC,UAAU,CAAC,SAAS,CACvB,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,YAAY,CAAC,EACxC,OAAO,EAAE,MAAM,CAChB,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAErC,OAAO;YACL,SAAS,EAAE,EAAE;YACb,kBAAkB,EAAE,IAAI,CAAC,YAAY;iBAClC,cAAc,CAAC,YAAY,CAAC;iBAC5B,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC;SACrD,CAAC;IACJ,CAAC;CACF"}

package/dist/service/lambda/command/permission/sim-lambda-permission-commands.d.ts

@@ -0,0 +1,40 @@
+import type { BackgroundScheduler } from "../../../../util/background/background.js";
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimLambdaFunctionLookup } from "../../function/url/sim-lambda-function-lookup.js";
+import type { SimAddPermissionCommand, SimAddPermissionCommandOutput } from "../add-permission/add-permission.command.js";
+import type { SimGetPolicyCommand, SimGetPolicyCommandOutput } from "../get-policy/get-policy.command.js";
+import type { SimRemovePermissionCommand, SimRemovePermissionCommandOutput } from "../remove-permission/remove-permission.command.js";
+interface SimLambdaPermissionCommandsProperties {
+    readonly functions: SimLambdaFunctionLookup;
+    readonly iam: SimIamInterServiceAuthZ;
+    readonly background: BackgroundScheduler;
+}
+interface SimLambdaPermissionCommandOptions {
+    readonly caller?: SimAwsCaller;
+}
+/**
+ * The resource-policy commands of one simulated Lambda scope.
+ *
+ * These three share the same collaborators and differ only in the handler they
+ * run, so grouping them keeps the SimLambda facade a thin delegation rather
+ * than three near-identical wiring blocks.
+ */
+export declare class SimLambdaPermissionCommands {
+    private readonly properties;
+    constructor(properties: SimLambdaPermissionCommandsProperties);
+    /**
+     * Grant a permission on a function.
+     */
+    add(command: SimAddPermissionCommand, options?: SimLambdaPermissionCommandOptions): Promise<SimAddPermissionCommandOutput>;
+    /**
+     * Revoke a permission from a function.
+     */
+    remove(command: SimRemovePermissionCommand, options?: SimLambdaPermissionCommandOptions): Promise<SimRemovePermissionCommandOutput>;
+    /**
+     * Read a function's resource policy.
+     */
+    getPolicy(command: SimGetPolicyCommand, options?: SimLambdaPermissionCommandOptions): Promise<SimGetPolicyCommandOutput>;
+}
+export {};
+//# sourceMappingURL=sim-lambda-permission-commands.d.ts.map

package/dist/service/lambda/command/permission/sim-lambda-permission-commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-permission-commands.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/command/permission/sim-lambda-permission-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AACrF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AACtG,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kDAAkD,CAAC;AAEhG,OAAO,KAAK,EACV,uBAAuB,EACvB,6BAA6B,EAC9B,MAAM,6CAA6C,CAAC;AAErD,OAAO,KAAK,EACV,mBAAmB,EACnB,yBAAyB,EAC1B,MAAM,qCAAqC,CAAC;AAE7C,OAAO,KAAK,EACV,0BAA0B,EAC1B,gCAAgC,EACjC,MAAM,mDAAmD,CAAC;AAE3D,UAAU,qCAAqC;IAC7C,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAC;IAC5C,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;IACtC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;CAC1C;AAED,UAAU,iCAAiC;IACzC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;;;GAMG;AACH,qBAAa,2BAA2B;IACtC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAwC;IAEnE,YAAY,UAAU,EAAE,qCAAqC,EAE5D;IAED;;OAEG;IACG,GAAG,CACP,OAAO,EAAE,uBAAuB,EAChC,OAAO,CAAC,EAAE,iCAAiC,GAC1C,OAAO,CAAC,6BAA6B,CAAC,CAKxC;IAED;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,0BAA0B,EACnC,OAAO,CAAC,EAAE,iCAAiC,GAC1C,OAAO,CAAC,gCAAgC,CAAC,CAK3C;IAED;;OAEG;IACG,SAAS,CACb,OAAO,EAAE,mBAAmB,EAC5B,OAAO,CAAC,EAAE,iCAAiC,GAC1C,OAAO,CAAC,yBAAyB,CAAC,CAKpC;CACF"}

package/dist/service/lambda/command/permission/sim-lambda-permission-commands.js

@@ -0,0 +1,35 @@
+import { AddPermissionCommandHandler } from "../add-permission/add-permission.handler.js";
+import { GetPolicyCommandHandler } from "../get-policy/get-policy.handler.js";
+import { RemovePermissionCommandHandler } from "../remove-permission/remove-permission.handler.js";
+/**
+ * The resource-policy commands of one simulated Lambda scope.
+ *
+ * These three share the same collaborators and differ only in the handler they
+ * run, so grouping them keeps the SimLambda facade a thin delegation rather
+ * than three near-identical wiring blocks.
+ */
+export class SimLambdaPermissionCommands {
+    properties;
+    constructor(properties) {
+        this.properties = properties;
+    }
+    /**
+     * Grant a permission on a function.
+     */
+    async add(command, options) {
+        return await new AddPermissionCommandHandler(this.properties).handle(command, options);
+    }
+    /**
+     * Revoke a permission from a function.
+     */
+    async remove(command, options) {
+        return await new RemovePermissionCommandHandler(this.properties).handle(command, options);
+    }
+    /**
+     * Read a function's resource policy.
+     */
+    async getPolicy(command, options) {
+        return await new GetPolicyCommandHandler(this.properties).handle(command, options);
+    }
+}
+//# sourceMappingURL=sim-lambda-permission-commands.js.map

package/dist/service/lambda/command/permission/sim-lambda-permission-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-permission-commands.js","sourceRoot":"","sources":["../../../../../src/service/lambda/command/permission/sim-lambda-permission-commands.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,2BAA2B,EAAE,MAAM,6CAA6C,CAAC;AAK1F,OAAO,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAK9E,OAAO,EAAE,8BAA8B,EAAE,MAAM,mDAAmD,CAAC;AAgBnG;;;;;;GAMG;AACH,MAAM,OAAO,2BAA2B;IACrB,UAAU,CAAwC;IAEnE,YAAY,UAAiD;QAC3D,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,GAAG,CACP,OAAgC,EAChC,OAA2C;QAE3C,OAAO,MAAM,IAAI,2BAA2B,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CAClE,OAAO,EACP,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,OAAmC,EACnC,OAA2C;QAE3C,OAAO,MAAM,IAAI,8BAA8B,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CACrE,OAAO,EACP,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CACb,OAA4B,EAC5B,OAA2C;QAE3C,OAAO,MAAM,IAAI,uBAAuB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CAC9D,OAAO,EACP,OAAO,CACR,CAAC;IACJ,CAAC;CACF"}

package/dist/service/lambda/command/remove-permission/remove-permission.command.d.ts

@@ -0,0 +1,21 @@
+import type { SimResponseMetadata } from "../../../aws/metadata/response-metadata.type.js";
+/**
+ * Minimal structural sim Lambda RemovePermission command.
+ */
+export interface SimRemovePermissionCommand {
+    readonly input: SimRemovePermissionCommandInput;
+}
+/**
+ * Minimal structural sim Lambda RemovePermission input.
+ */
+export interface SimRemovePermissionCommandInput {
+    readonly FunctionName?: string | undefined;
+    readonly StatementId?: string | undefined;
+}
+/**
+ * Minimal structural sim Lambda RemovePermission output.
+ */
+export interface SimRemovePermissionCommandOutput {
+    readonly $metadata: SimResponseMetadata;
+}
+//# sourceMappingURL=remove-permission.command.d.ts.map

package/dist/service/lambda/command/remove-permission/remove-permission.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remove-permission.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/command/remove-permission/remove-permission.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAE3F;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,KAAK,EAAE,+BAA+B,CAAC;CACjD;AAED;;GAEG;AACH,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3C;AAED;;GAEG;AACH,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC"}

package/dist/service/lambda/command/remove-permission/remove-permission.command.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=remove-permission.command.js.map

package/dist/service/lambda/command/remove-permission/remove-permission.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remove-permission.command.js","sourceRoot":"","sources":["../../../../../src/service/lambda/command/remove-permission/remove-permission.command.ts"],"names":[],"mappings":""}

package/dist/service/lambda/command/remove-permission/remove-permission.handler.d.ts

@@ -0,0 +1,31 @@
+import type { CommandHandler } from "../../../../command/command-handler.js";
+import type { BackgroundScheduler } from "../../../../util/background/background.js";
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimLambdaFunctionLookup } from "../../function/url/sim-lambda-function-lookup.js";
+import type { SimRemovePermissionCommand, SimRemovePermissionCommandOutput } from "./remove-permission.command.js";
+interface RemovePermissionCommandHandlerProperties {
+    readonly functions: SimLambdaFunctionLookup;
+    readonly iam: SimIamInterServiceAuthZ;
+    readonly background: BackgroundScheduler;
+}
+interface RemovePermissionCommandHandlerOptions {
+    readonly caller?: SimAwsCaller;
+}
+/**
+ * Simulated Lambda RemovePermissionCommand handler.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/lambda/command/RemovePermissionCommand/
+ */
+export declare class RemovePermissionCommandHandler implements CommandHandler<SimRemovePermissionCommand, SimRemovePermissionCommandOutput> {
+    private readonly functions;
+    private readonly authorizer;
+    private readonly background;
+    constructor(properties: RemovePermissionCommandHandlerProperties);
+    /**
+     * Revoke a permission from a sim Lambda function's resource policy.
+     */
+    handle(command: SimRemovePermissionCommand, options?: RemovePermissionCommandHandlerOptions): Promise<SimRemovePermissionCommandOutput>;
+}
+export {};
+//# sourceMappingURL=remove-permission.handler.d.ts.map

package/dist/service/lambda/command/remove-permission/remove-permission.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remove-permission.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/command/remove-permission/remove-permission.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AAErF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AACtG,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kDAAkD,CAAC;AAEhG,OAAO,KAAK,EACV,0BAA0B,EAC1B,gCAAgC,EACjC,MAAM,gCAAgC,CAAC;AAExC,UAAU,wCAAwC;IAChD,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAC;IAC5C,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;IACtC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;CAC1C;AAED,UAAU,qCAAqC;IAC7C,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;GAIG;AACH,qBAAa,8BAA+B,YAAW,cAAc,CACnE,0BAA0B,EAC1B,gCAAgC,CACjC;IACC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA0B;IACpD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAwB;IACnD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,UAAU,EAAE,wCAAwC,EAO/D;IAED;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,0BAA0B,EACnC,OAAO,CAAC,EAAE,qCAAqC,GAC9C,OAAO,CAAC,gCAAgC,CAAC,CAwB3C;CACF"}