@kensio/yulin 0.34.2 → 0.36.0

package/dist/service/lambda/function/policy/sim-lambda-permission-principal.d.ts

@@ -0,0 +1,11 @@
+import type { SimIamPolicyDocumentPrincipal } from "../../../iam/policy/sim-iam-policy.js";
+/**
+ * Convert an AddPermission `Principal` into the policy Principal it becomes.
+ *
+ * Real Lambda accepts a shorthand here that IAM policy documents do not: an
+ * Account id, a service name, an ARN, or `*`. AddPermission expands whichever
+ * was given into the corresponding policy form, and `GetPolicy` returns the
+ * expanded document, so the same expansion happens here.
+ */
+export declare function simLambdaPermissionPrincipal(principal: string): SimIamPolicyDocumentPrincipal;
+//# sourceMappingURL=sim-lambda-permission-principal.d.ts.map

package/dist/service/lambda/function/policy/sim-lambda-permission-principal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-permission-principal.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/function/policy/sim-lambda-permission-principal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,uCAAuC,CAAC;AAI3F;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAC1C,SAAS,EAAE,MAAM,GAChB,6BAA6B,CAc/B"}

package/dist/service/lambda/function/policy/sim-lambda-permission-principal.js

@@ -0,0 +1,22 @@
+const accountIdPattern = /^\d{12}$/u;
+/**
+ * Convert an AddPermission `Principal` into the policy Principal it becomes.
+ *
+ * Real Lambda accepts a shorthand here that IAM policy documents do not: an
+ * Account id, a service name, an ARN, or `*`. AddPermission expands whichever
+ * was given into the corresponding policy form, and `GetPolicy` returns the
+ * expanded document, so the same expansion happens here.
+ */
+export function simLambdaPermissionPrincipal(principal) {
+    if (principal === "*") {
+        return "*";
+    }
+    if (accountIdPattern.test(principal)) {
+        return { AWS: `arn:aws:iam::${principal}:root` };
+    }
+    if (principal.startsWith("arn:")) {
+        return { AWS: principal };
+    }
+    return { Service: principal };
+}
+//# sourceMappingURL=sim-lambda-permission-principal.js.map

package/dist/service/lambda/function/policy/sim-lambda-permission-principal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-permission-principal.js","sourceRoot":"","sources":["../../../../../src/service/lambda/function/policy/sim-lambda-permission-principal.ts"],"names":[],"mappings":"AAEA,MAAM,gBAAgB,GAAG,WAAW,CAAC;AAErC;;;;;;;GAOG;AACH,MAAM,UAAU,4BAA4B,CAC1C,SAAiB;IAEjB,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;QACtB,OAAO,GAAG,CAAC;IACb,CAAC;IAED,IAAI,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACrC,OAAO,EAAE,GAAG,EAAE,gBAAgB,SAAS,OAAO,EAAE,CAAC;IACnD,CAAC;IAED,IAAI,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;IAC5B,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AAChC,CAAC"}

package/dist/service/lambda/function/policy/sim-lambda-permission.d.ts

@@ -0,0 +1,66 @@
+import type { SimIamPolicyDocumentStatement } from "../../../iam/policy/sim-iam-policy.js";
+/**
+ * The condition key a Function URL grant is conditioned on, so a permission
+ * granting `lambda:InvokeFunctionUrl` applies to the auth type it was granted
+ * for and not to another.
+ */
+export declare const simLambdaFunctionUrlAuthTypeConditionKey = "lambda:FunctionUrlAuthType";
+/**
+ * The condition key restricting an `lambda:InvokeFunction` grant to requests
+ * that arrived through the function's own URL.
+ *
+ * Nothing supplies a value for it, so a statement carrying it never matches.
+ * That is deliberate and is the safe direction: the simulator does not model
+ * the distinction, and refusing is better than granting the plain Invoke API
+ * something real AWS would only allow through the URL.
+ */
+export declare const simLambdaInvokedViaFunctionUrlConditionKey = "lambda:InvokedViaFunctionUrl";
+interface SimLambdaPermissionProperties {
+    readonly statementId: string;
+    readonly action: string;
+    readonly principal: string;
+    readonly resourceArn: string;
+    readonly functionUrlAuthType?: string | undefined;
+    readonly sourceArn?: string | undefined;
+    readonly sourceAccount?: string | undefined;
+    readonly principalOrgId?: string | undefined;
+    readonly invokedViaFunctionUrl?: boolean | undefined;
+}
+/**
+ * One statement of a simulated Lambda function's resource-based policy.
+ *
+ * `AddPermission` is a shorthand for writing a policy statement: it takes the
+ * parts and Lambda assembles the statement, which is what `GetPolicy` hands
+ * back. Modelling it as the permission rather than as a raw statement keeps
+ * that relationship, and keeps `RemovePermission` able to find a statement by
+ * its id.
+ */
+export declare class SimLambdaPermission {
+    readonly statementId: string;
+    readonly action: string;
+    readonly principal: string;
+    readonly resourceArn: string;
+    private readonly functionUrlAuthType?;
+    private readonly sourceArn?;
+    private readonly sourceAccount?;
+    private readonly principalOrgId?;
+    private readonly invokedViaFunctionUrl?;
+    constructor(properties: SimLambdaPermissionProperties);
+    /**
+     * The policy statement this permission expands into.
+     */
+    toStatement(): SimIamPolicyDocumentStatement;
+    /**
+     * The condition block the qualifying properties expand into.
+     *
+     * Only `lambda:FunctionUrlAuthType` is given a value at request time, so it
+     * is the only one that can match. The rest are still written into the
+     * statement, because `GetPolicy` should report the permission that was
+     * granted; a statement carrying one of them simply never matches, which is
+     * the safe direction for a condition the simulator cannot evaluate.
+     */
+    private condition;
+    private stringEqualsConditions;
+}
+export {};
+//# sourceMappingURL=sim-lambda-permission.d.ts.map

package/dist/service/lambda/function/policy/sim-lambda-permission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-permission.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/function/policy/sim-lambda-permission.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAGV,6BAA6B,EAC9B,MAAM,uCAAuC,CAAC;AAG/C;;;;GAIG;AACH,eAAO,MAAM,wCAAwC,+BACvB,CAAC;AAE/B;;;;;;;;GAQG;AACH,eAAO,MAAM,0CAA0C,iCACvB,CAAC;AAEjC,UAAU,6BAA6B;IACrC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CACtD;AAED;;;;;;;;GAQG;AACH,qBAAa,mBAAmB;IAC9B,SAAgB,WAAW,EAAE,MAAM,CAAC;IACpC,SAAgB,MAAM,EAAE,MAAM,CAAC;IAC/B,SAAgB,SAAS,EAAE,MAAM,CAAC;IAClC,SAAgB,WAAW,EAAE,MAAM,CAAC;IAEpC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAqB;IAC1D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAqB;IAChD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAqB;IACpD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAqB;IACrD,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAsB;IAE7D,YAAY,UAAU,EAAE,6BAA6B,EAUpD;IAED;;OAEG;IACH,WAAW,IAAI,6BAA6B,CAW3C;IAED;;;;;;;;OAQG;IACH,OAAO,CAAC,SAAS;IAsBjB,OAAO,CAAC,sBAAsB;CAa/B"}

package/dist/service/lambda/function/policy/sim-lambda-permission.js

@@ -0,0 +1,101 @@
+import { simLambdaPermissionPrincipal } from "./sim-lambda-permission-principal.js";
+/**
+ * The condition key a Function URL grant is conditioned on, so a permission
+ * granting `lambda:InvokeFunctionUrl` applies to the auth type it was granted
+ * for and not to another.
+ */
+export const simLambdaFunctionUrlAuthTypeConditionKey = "lambda:FunctionUrlAuthType";
+/**
+ * The condition key restricting an `lambda:InvokeFunction` grant to requests
+ * that arrived through the function's own URL.
+ *
+ * Nothing supplies a value for it, so a statement carrying it never matches.
+ * That is deliberate and is the safe direction: the simulator does not model
+ * the distinction, and refusing is better than granting the plain Invoke API
+ * something real AWS would only allow through the URL.
+ */
+export const simLambdaInvokedViaFunctionUrlConditionKey = "lambda:InvokedViaFunctionUrl";
+/**
+ * One statement of a simulated Lambda function's resource-based policy.
+ *
+ * `AddPermission` is a shorthand for writing a policy statement: it takes the
+ * parts and Lambda assembles the statement, which is what `GetPolicy` hands
+ * back. Modelling it as the permission rather than as a raw statement keeps
+ * that relationship, and keeps `RemovePermission` able to find a statement by
+ * its id.
+ */
+export class SimLambdaPermission {
+    statementId;
+    action;
+    principal;
+    resourceArn;
+    functionUrlAuthType;
+    sourceArn;
+    sourceAccount;
+    principalOrgId;
+    invokedViaFunctionUrl;
+    constructor(properties) {
+        this.statementId = properties.statementId;
+        this.action = properties.action;
+        this.principal = properties.principal;
+        this.resourceArn = properties.resourceArn;
+        this.functionUrlAuthType = properties.functionUrlAuthType;
+        this.sourceArn = properties.sourceArn;
+        this.sourceAccount = properties.sourceAccount;
+        this.principalOrgId = properties.principalOrgId;
+        this.invokedViaFunctionUrl = properties.invokedViaFunctionUrl;
+    }
+    /**
+     * The policy statement this permission expands into.
+     */
+    toStatement() {
+        const condition = this.condition();
+        return {
+            Sid: this.statementId,
+            Effect: "Allow",
+            Principal: simLambdaPermissionPrincipal(this.principal),
+            Action: this.action,
+            Resource: this.resourceArn,
+            ...(condition !== undefined && { Condition: condition }),
+        };
+    }
+    /**
+     * The condition block the qualifying properties expand into.
+     *
+     * Only `lambda:FunctionUrlAuthType` is given a value at request time, so it
+     * is the only one that can match. The rest are still written into the
+     * statement, because `GetPolicy` should report the permission that was
+     * granted; a statement carrying one of them simply never matches, which is
+     * the safe direction for a condition the simulator cannot evaluate.
+     */
+    condition() {
+        const stringEquals = this.stringEqualsConditions();
+        const condition = {};
+        if (Object.keys(stringEquals).length > 0) {
+            condition["StringEquals"] = stringEquals;
+        }
+        if (this.sourceArn !== undefined) {
+            condition["ArnLike"] = { "AWS:SourceArn": this.sourceArn };
+        }
+        if (this.invokedViaFunctionUrl !== undefined) {
+            condition["Bool"] = {
+                [simLambdaInvokedViaFunctionUrlConditionKey]: this.invokedViaFunctionUrl,
+            };
+        }
+        return Object.keys(condition).length === 0 ? undefined : condition;
+    }
+    stringEqualsConditions() {
+        return {
+            ...(this.functionUrlAuthType !== undefined && {
+                [simLambdaFunctionUrlAuthTypeConditionKey]: this.functionUrlAuthType,
+            }),
+            ...(this.sourceAccount !== undefined && {
+                "AWS:SourceAccount": this.sourceAccount,
+            }),
+            ...(this.principalOrgId !== undefined && {
+                "aws:PrincipalOrgID": this.principalOrgId,
+            }),
+        };
+    }
+}
+//# sourceMappingURL=sim-lambda-permission.js.map

package/dist/service/lambda/function/policy/sim-lambda-permission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-permission.js","sourceRoot":"","sources":["../../../../../src/service/lambda/function/policy/sim-lambda-permission.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AAEpF;;;;GAIG;AACH,MAAM,CAAC,MAAM,wCAAwC,GACnD,4BAA4B,CAAC;AAE/B;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,0CAA0C,GACrD,8BAA8B,CAAC;AAcjC;;;;;;;;GAQG;AACH,MAAM,OAAO,mBAAmB;IACd,WAAW,CAAS;IACpB,MAAM,CAAS;IACf,SAAS,CAAS;IAClB,WAAW,CAAS;IAEnB,mBAAmB,CAAsB;IACzC,SAAS,CAAsB;IAC/B,aAAa,CAAsB;IACnC,cAAc,CAAsB;IACpC,qBAAqB,CAAuB;IAE7D,YAAY,UAAyC;QACnD,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,mBAAmB,GAAG,UAAU,CAAC,mBAAmB,CAAC;QAC1D,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;QAC9C,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,cAAc,CAAC;QAChD,IAAI,CAAC,qBAAqB,GAAG,UAAU,CAAC,qBAAqB,CAAC;IAChE,CAAC;IAED;;OAEG;IACH,WAAW;QACT,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAEnC,OAAO;YACL,GAAG,EAAE,IAAI,CAAC,WAAW;YACrB,MAAM,EAAE,OAAO;YACf,SAAS,EAAE,4BAA4B,CAAC,IAAI,CAAC,SAAS,CAAC;YACvD,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ,EAAE,IAAI,CAAC,WAAW;YAC1B,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;SACzD,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACK,SAAS;QACf,MAAM,YAAY,GAAG,IAAI,CAAC,sBAAsB,EAAE,CAAC;QACnD,MAAM,SAAS,GAAyD,EAAE,CAAC;QAE3E,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzC,SAAS,CAAC,cAAc,CAAC,GAAG,YAAY,CAAC;QAC3C,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACjC,SAAS,CAAC,SAAS,CAAC,GAAG,EAAE,eAAe,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;QAC7D,CAAC;QAED,IAAI,IAAI,CAAC,qBAAqB,KAAK,SAAS,EAAE,CAAC;YAC7C,SAAS,CAAC,MAAM,CAAC,GAAG;gBAClB,CAAC,0CAA0C,CAAC,EAC1C,IAAI,CAAC,qBAAqB;aAC7B,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IACrE,CAAC;IAEO,sBAAsB;QAC5B,OAAO;YACL,GAAG,CAAC,IAAI,CAAC,mBAAmB,KAAK,SAAS,IAAI;gBAC5C,CAAC,wCAAwC,CAAC,EAAE,IAAI,CAAC,mBAAmB;aACrE,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS,IAAI;gBACtC,mBAAmB,EAAE,IAAI,CAAC,aAAa;aACxC,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,cAAc,KAAK,SAAS,IAAI;gBACvC,oBAAoB,EAAE,IAAI,CAAC,cAAc;aAC1C,CAAC;SACH,CAAC;IACJ,CAAC;CACF"}

package/dist/service/lambda/function/sim-lambda-function.d.ts

@@ -2,6 +2,9 @@ import type { Brand } from "../../../util/brand.type.js";
 import type { SimAwsRunAsOwner } from "../../aws/caller/sim-aws-run-as-context.js";
 import type { SimAwsAccountRegionScope } from "../../aws/sim-aws-account-region-scope.js";
 import { type SimLambdaExecutableCode } from "./code/sim-lambda-executable-code.js";
+import { SimLambdaEnvironment } from "./environment/sim-lambda-environment.js";
+import { SimLambdaFunctionPolicy } from "./policy/sim-lambda-function-policy.js";
+import { type SimClock } from "../../../util/clock/sim-clock.js";
 import { type SimLambdaHandler } from "./sim-lambda-handler.type.js";
 export type SimLambdaFunctionName = Brand<string, "SimLambdaFunctionName">;
 export declare const DEFAULT_SIM_LAMBDA_TIMEOUT_SECONDS = 3;
@@ -31,6 +34,9 @@ export interface SimLambdaFunctionConfiguration {
     Handler?: string | undefined;
     Runtime?: string | undefined;
     Description?: string | undefined;
+    Environment?: {
+        Variables: Record<string, string>;
+    } | undefined;
 }
 interface SimLambdaFunctionProperties {
     name: SimLambdaFunctionName | string;
@@ -44,7 +50,14 @@ interface SimLambdaFunctionProperties {
     description?: string | undefined;
     timeoutSeconds?: number | undefined;
     memorySizeMb?: number | undefined;
+    environment?: SimLambdaEnvironment | undefined;
     runAsOwner?: SimAwsRunAsOwner;
+    /**
+     * Clock this function's invocations measure their remaining time against. A
+     * function built standalone, outside a SimAws instance, falls back to the
+     * real clock.
+     */
+    clock?: SimClock | undefined;
 }
 /**
  * Simulated Lambda function resource.
@@ -64,9 +77,20 @@ export declare class SimLambdaFunction {
     readonly description: string | undefined;
     readonly timeoutSeconds: number;
     readonly memorySizeMb: number;
+    readonly environment: SimLambdaEnvironment;
+    /**
+     * This function's resource-based policy, which says who may act on it.
+     *
+     * It lives on the function because that is what it belongs to: it survives
+     * as long as the function does, and it is the only thing that can allow a
+     * principal from another Account, whose own policies this Account never
+     * sees.
+     */
+    readonly resourcePolicy: SimLambdaFunctionPolicy;
     private readonly code;
     private readonly runAsOwner;
     private readonly runner;
+    private readonly clock;
     constructor(properties: SimLambdaFunctionProperties);
     /**
      * Get the current state of this sim Lambda function.
@@ -89,8 +113,9 @@ export declare class SimLambdaFunction {
      *
      * The handler runs with this function's execution Role as the ambient
      * simulated caller for the run-as owner, which is the owning SimAws
-     * instance when the function was created through one. Cold-start module
-     * imports also run as the execution Role, as on real Lambda.
+     * instance when the function was created through one, and with this
+     * function's own environment variables. Cold-start module imports also run
+     * as the execution Role and with the same environment, as on real Lambda.
      *
      * Resolves with the handler result, or rejects with the handler or
      * Runtime.* cold-start error.

package/dist/service/lambda/function/sim-lambda-function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda-function.d.ts","sourceRoot":"","sources":["../../../../src/service/lambda/function/sim-lambda-function.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4CAA4C,CAAC;AAGnF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAC1F,OAAO,EACL,KAAK,uBAAuB,EAE7B,MAAM,sCAAsC,CAAC;AAG9C,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,8BAA8B,CAAC;AAEtC,MAAM,MAAM,qBAAqB,GAAG,KAAK,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;AAE3E,eAAO,MAAM,kCAAkC,IAAI,CAAC;AACpD,eAAO,MAAM,iCAAiC,MAAM,CAAC;AAErD,MAAM,MAAM,oBAAoB,GAAG,GAAG,CACpC,qBAAqB,EACrB,iBAAiB,CAClB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAChC,SAAS,GAAG,QAAQ,GAAG,UAAU,GAAG,QAAQ,CAAC;AAE/C;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAC9B,kBAAkB,MAAM,IAAI,MAAM,aAAa,MAAM,EAAE,CAAC;AAE1D;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,wBAAwB,EAC/B,IAAI,EAAE,MAAM,GACX,oBAAoB,CAEtB;AAED;;;GAGG;AACH,MAAM,WAAW,8BAA8B;IAC7C,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,oBAAoB,CAAC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,sBAAsB,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAClC;AAED,UAAU,2BAA2B;IACnC,IAAI,EAAE,qBAAqB,GAAG,MAAM,CAAC;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,kBAAkB,CAAC,EAAE,wBAAwB,CAAC;IACvD,eAAe,CAAC,EAAE,gBAAgB,CAAC;IACnC,IAAI,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAC;IAC3C,KAAK,CAAC,EAAE,sBAAsB,CAAC;IAC/B,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,UAAU,CAAC,EAAE,gBAAgB,CAAC;CAC/B;AAED;;;;;;;GAOG;AACH,qBAAa,iBAAiB;;IAC5B,SAAgB,IAAI,EAAE,qBAAqB,CAAC;IAC5C,SAAgB,OAAO,EAAE,MAAM,CAAC;IAChC,SAAgB,kBAAkB,EAAE,wBAAwB,CAAC;IAC7D,SAAgB,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,SAAgB,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,SAAgB,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,SAAgB,cAAc,EAAE,MAAM,CAAC;IACvC,SAAgB,YAAY,EAAE,MAAM,CAAC;IAGrC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA0B;IAC/C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmB;IAC9C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgC;IAEvD,YAAY,UAAU,EAAE,2BAA2B,EA0BlD;IAED;;OAEG;IACH,IAAI,KAAK,IAAI,sBAAsB,CAElC;IAED;;OAEG;IACH,IAAI,GAAG,IAAI,oBAAoB,CAE9B;IAED;;OAEG;IACH,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAGxB;IAED;;OAEG;IACH,aAAa,IAAI,8BAA8B,CAa9C;IAED;;;;;;;;;;OAUG;IACG,MAAM,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAkB7C;CACF"}
+{"version":3,"file":"sim-lambda-function.d.ts","sourceRoot":"","sources":["../../../../src/service/lambda/function/sim-lambda-function.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4CAA4C,CAAC;AAGnF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAC1F,OAAO,EACL,KAAK,uBAAuB,EAE7B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AAC/E,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AAGjF,OAAO,EAAE,KAAK,QAAQ,EAAgB,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,8BAA8B,CAAC;AAEtC,MAAM,MAAM,qBAAqB,GAAG,KAAK,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;AAE3E,eAAO,MAAM,kCAAkC,IAAI,CAAC;AACpD,eAAO,MAAM,iCAAiC,MAAM,CAAC;AAErD,MAAM,MAAM,oBAAoB,GAAG,GAAG,CACpC,qBAAqB,EACrB,iBAAiB,CAClB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAChC,SAAS,GAAG,QAAQ,GAAG,UAAU,GAAG,QAAQ,CAAC;AAE/C;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAC9B,kBAAkB,MAAM,IAAI,MAAM,aAAa,MAAM,EAAE,CAAC;AAE1D;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,wBAAwB,EAC/B,IAAI,EAAE,MAAM,GACX,oBAAoB,CAEtB;AAED;;;GAGG;AACH,MAAM,WAAW,8BAA8B;IAC7C,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,oBAAoB,CAAC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,sBAAsB,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,WAAW,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,GAAG,SAAS,CAAC;CACjE;AAED,UAAU,2BAA2B;IACnC,IAAI,EAAE,qBAAqB,GAAG,MAAM,CAAC;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,kBAAkB,CAAC,EAAE,wBAAwB,CAAC;IACvD,eAAe,CAAC,EAAE,gBAAgB,CAAC;IACnC,IAAI,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAC;IAC3C,KAAK,CAAC,EAAE,sBAAsB,CAAC;IAC/B,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,WAAW,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC;IAC/C,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B;;;;OAIG;IACH,KAAK,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;CAC9B;AAED;;;;;;;GAOG;AACH,qBAAa,iBAAiB;;IAC5B,SAAgB,IAAI,EAAE,qBAAqB,CAAC;IAC5C,SAAgB,OAAO,EAAE,MAAM,CAAC;IAChC,SAAgB,kBAAkB,EAAE,wBAAwB,CAAC;IAC7D,SAAgB,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,SAAgB,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,SAAgB,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,SAAgB,cAAc,EAAE,MAAM,CAAC;IACvC,SAAgB,YAAY,EAAE,MAAM,CAAC;IACrC,SAAgB,WAAW,EAAE,oBAAoB,CAAC;IAClD;;;;;;;OAOG;IACH,SAAgB,cAAc,0BAAiC;IAG/D,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA0B;IAC/C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmB;IAC9C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgC;IACvD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IAEjC,YAAY,UAAU,EAAE,2BAA2B,EAoClD;IAED;;OAEG;IACH,IAAI,KAAK,IAAI,sBAAsB,CAElC;IAED;;OAEG;IACH,IAAI,GAAG,IAAI,oBAAoB,CAE9B;IAED;;OAEG;IACH,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAGxB;IAED;;OAEG;IACH,aAAa,IAAI,8BAA8B,CAc9C;IAED;;;;;;;;;;;OAWG;IACG,MAAM,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAsB7C;CACF"}

package/dist/service/lambda/function/sim-lambda-function.js

@@ -1,8 +1,11 @@
 import { simAwsRunAsContext } from "../../aws/caller/sim-aws-run-as-context.js";
 import { simAwsAccountRegionScopeFactory } from "../../aws/sim-aws-account-region-scope.factory.js";
 import { SimLambdaHandlerReferenceCode, } from "./code/sim-lambda-executable-code.js";
+import { SimLambdaEnvironment } from "./environment/sim-lambda-environment.js";
+import { SimLambdaFunctionPolicy } from "./policy/sim-lambda-function-policy.js";
 import { SimLambdaHandlerRunner } from "./invoke/sim-lambda-handler-runner.js";
 import { SimLambdaInvokeContextBuilder } from "./invoke/sim-lambda-invoke-context-builder.js";
+import { SimRealClock } from "../../../util/clock/sim-clock.js";
 import { defaultLambdaHandler, } from "./sim-lambda-handler.type.js";
 export const DEFAULT_SIM_LAMBDA_TIMEOUT_SECONDS = 3;
 export const DEFAULT_SIM_LAMBDA_MEMORY_SIZE_MB = 128;
@@ -29,12 +32,24 @@ export class SimLambdaFunction {
     description;
     timeoutSeconds;
     memorySizeMb;
+    environment;
+    /**
+     * This function's resource-based policy, which says who may act on it.
+     *
+     * It lives on the function because that is what it belongs to: it survives
+     * as long as the function does, and it is the only thing that can allow a
+     * principal from another Account, whose own policies this Account never
+     * sees.
+     */
+    resourcePolicy = new SimLambdaFunctionPolicy();
     #state;
     code;
     runAsOwner;
     runner = new SimLambdaHandlerRunner();
+    clock;
     constructor(properties) {
-        const { name, roleArn, accountRegionScope = simAwsAccountRegionScopeFactory.make(), handlerFunction = defaultLambdaHandler, code, state = "Pending", handlerName, runtimeName, description, timeoutSeconds = DEFAULT_SIM_LAMBDA_TIMEOUT_SECONDS, memorySizeMb = DEFAULT_SIM_LAMBDA_MEMORY_SIZE_MB, runAsOwner = this, } = properties;
+        const { name, roleArn, accountRegionScope = simAwsAccountRegionScopeFactory.make(), handlerFunction = defaultLambdaHandler, code, state = "Pending", handlerName, runtimeName, description, timeoutSeconds = DEFAULT_SIM_LAMBDA_TIMEOUT_SECONDS, memorySizeMb = DEFAULT_SIM_LAMBDA_MEMORY_SIZE_MB, environment, runAsOwner = this, clock = new SimRealClock(), } = properties;
+        this.clock = clock;
         this.name = name;
         this.roleArn = roleArn;
         this.accountRegionScope = accountRegionScope;
@@ -45,6 +60,13 @@ export class SimLambdaFunction {
         this.description = description;
         this.timeoutSeconds = timeoutSeconds;
         this.memorySizeMb = memorySizeMb;
+        this.environment =
+            environment ??
+                new SimLambdaEnvironment({
+                    functionName: name,
+                    regionName: accountRegionScope.regionName,
+                    memorySizeMb,
+                });
         this.runAsOwner = runAsOwner;
     }
     /**
@@ -81,6 +103,7 @@ export class SimLambdaFunction {
             Handler: this.handlerName,
             Runtime: this.runtimeName,
             Description: this.description,
+            Environment: this.environment.configuration(),
         };
     }
     /**
@@ -88,8 +111,9 @@ export class SimLambdaFunction {
      *
      * The handler runs with this function's execution Role as the ambient
      * simulated caller for the run-as owner, which is the owning SimAws
-     * instance when the function was created through one. Cold-start module
-     * imports also run as the execution Role, as on real Lambda.
+     * instance when the function was created through one, and with this
+     * function's own environment variables. Cold-start module imports also run
+     * as the execution Role and with the same environment, as on real Lambda.
      *
      * Resolves with the handler result, or rejects with the handler or
      * Runtime.* cold-start error.
@@ -100,8 +124,9 @@ export class SimLambdaFunction {
             invokedFunctionArn: this.arn,
             timeoutSeconds: this.timeoutSeconds,
             memorySizeMb: this.memorySizeMb,
+            clock: this.clock,
         });
-        return await simAwsRunAsContext.run(this.runAsOwner, { kind: "arn", arn: this.roleArn }, async () => await this.runner.run(this.code.handlerFunction(), event, contextBuilder));
+        return await simAwsRunAsContext.run(this.runAsOwner, { kind: "arn", arn: this.roleArn }, async () => await this.environment.runWith(async () => await this.runner.run(this.code.handlerFunction(), event, contextBuilder)));
     }
 }
 //# sourceMappingURL=sim-lambda-function.js.map

package/dist/service/lambda/function/sim-lambda-function.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda-function.js","sourceRoot":"","sources":["../../../../src/service/lambda/function/sim-lambda-function.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,4CAA4C,CAAC;AAChF,OAAO,EAAE,+BAA+B,EAAE,MAAM,mDAAmD,CAAC;AAEpG,OAAO,EAEL,6BAA6B,GAC9B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,EAAE,6BAA6B,EAAE,MAAM,+CAA+C,CAAC;AAC9F,OAAO,EACL,oBAAoB,GAErB,MAAM,8BAA8B,CAAC;AAItC,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC;AACpD,MAAM,CAAC,MAAM,iCAAiC,GAAG,GAAG,CAAC;AAgBrD;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAA+B,EAC/B,IAAY;IAEZ,OAAO,kBAAkB,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,SAAS,aAAa,IAAI,EAAE,CAAC;AAClF,CAAC;AAkCD;;;;;;;GAOG;AACH,MAAM,OAAO,iBAAiB;IACZ,IAAI,CAAwB;IAC5B,OAAO,CAAS;IAChB,kBAAkB,CAA2B;IAC7C,WAAW,CAAqB;IAChC,WAAW,CAAqB;IAChC,WAAW,CAAqB;IAChC,cAAc,CAAS;IACvB,YAAY,CAAS;IAErC,MAAM,CAAyB;IACd,IAAI,CAA0B;IAC9B,UAAU,CAAmB;IAC7B,MAAM,GAAG,IAAI,sBAAsB,EAAE,CAAC;IAEvD,YAAY,UAAuC;QACjD,MAAM,EACJ,IAAI,EACJ,OAAO,EACP,kBAAkB,GAAG,+BAA+B,CAAC,IAAI,EAAE,EAC3D,eAAe,GAAG,oBAAoB,EACtC,IAAI,EACJ,KAAK,GAAG,SAAS,EACjB,WAAW,EACX,WAAW,EACX,WAAW,EACX,cAAc,GAAG,kCAAkC,EACnD,YAAY,GAAG,iCAAiC,EAChD,UAAU,GAAG,IAAI,GAClB,GAAG,UAAU,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,IAA6B,CAAC;QAC1C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;QAC7C,IAAI,CAAC,IAAI,GAAG,IAAI,IAAI,IAAI,6BAA6B,CAAC,eAAe,CAAC,CAAC;QACvE,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,IAAI,GAAG;QACL,OAAO,oBAAoB,CAAC,IAAI,CAAC,kBAAkB,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC;QACvB,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,aAAa;QACX,OAAO;YACL,YAAY,EAAE,IAAI,CAAC,IAAI;YACvB,WAAW,EAAE,IAAI,CAAC,GAAG;YACrB,IAAI,EAAE,IAAI,CAAC,OAAO;YAClB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,OAAO,EAAE,SAAS;YAClB,OAAO,EAAE,IAAI,CAAC,cAAc;YAC5B,UAAU,EAAE,IAAI,CAAC,YAAY;YAC7B,OAAO,EAAE,IAAI,CAAC,WAAW;YACzB,OAAO,EAAE,IAAI,CAAC,WAAW;YACzB,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B,CAAC;IACJ,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,MAAM,CAAC,KAAc;QACzB,MAAM,cAAc,GAAG,IAAI,6BAA6B,CAAC;YACvD,YAAY,EAAE,IAAI,CAAC,IAAI;YACvB,kBAAkB,EAAE,IAAI,CAAC,GAAG;YAC5B,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,YAAY,EAAE,IAAI,CAAC,YAAY;SAChC,CAAC,CAAC;QAEH,OAAO,MAAM,kBAAkB,CAAC,GAAG,CACjC,IAAI,CAAC,UAAU,EACf,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,EAClC,KAAK,IAAI,EAAE,CACT,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CACnB,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAC3B,KAAK,EACL,cAAc,CACf,CACJ,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-lambda-function.js","sourceRoot":"","sources":["../../../../src/service/lambda/function/sim-lambda-function.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,4CAA4C,CAAC;AAChF,OAAO,EAAE,+BAA+B,EAAE,MAAM,mDAAmD,CAAC;AAEpG,OAAO,EAEL,6BAA6B,GAC9B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AAC/E,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACjF,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,EAAE,6BAA6B,EAAE,MAAM,+CAA+C,CAAC;AAC9F,OAAO,EAAiB,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EACL,oBAAoB,GAErB,MAAM,8BAA8B,CAAC;AAItC,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC;AACpD,MAAM,CAAC,MAAM,iCAAiC,GAAG,GAAG,CAAC;AAgBrD;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAA+B,EAC/B,IAAY;IAEZ,OAAO,kBAAkB,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,SAAS,aAAa,IAAI,EAAE,CAAC;AAClF,CAAC;AA0CD;;;;;;;GAOG;AACH,MAAM,OAAO,iBAAiB;IACZ,IAAI,CAAwB;IAC5B,OAAO,CAAS;IAChB,kBAAkB,CAA2B;IAC7C,WAAW,CAAqB;IAChC,WAAW,CAAqB;IAChC,WAAW,CAAqB;IAChC,cAAc,CAAS;IACvB,YAAY,CAAS;IACrB,WAAW,CAAuB;IAClD;;;;;;;OAOG;IACa,cAAc,GAAG,IAAI,uBAAuB,EAAE,CAAC;IAE/D,MAAM,CAAyB;IACd,IAAI,CAA0B;IAC9B,UAAU,CAAmB;IAC7B,MAAM,GAAG,IAAI,sBAAsB,EAAE,CAAC;IACtC,KAAK,CAAW;IAEjC,YAAY,UAAuC;QACjD,MAAM,EACJ,IAAI,EACJ,OAAO,EACP,kBAAkB,GAAG,+BAA+B,CAAC,IAAI,EAAE,EAC3D,eAAe,GAAG,oBAAoB,EACtC,IAAI,EACJ,KAAK,GAAG,SAAS,EACjB,WAAW,EACX,WAAW,EACX,WAAW,EACX,cAAc,GAAG,kCAAkC,EACnD,YAAY,GAAG,iCAAiC,EAChD,WAAW,EACX,UAAU,GAAG,IAAI,EACjB,KAAK,GAAG,IAAI,YAAY,EAAE,GAC3B,GAAG,UAAU,CAAC;QACf,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,IAAI,GAAG,IAA6B,CAAC;QAC1C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;QAC7C,IAAI,CAAC,IAAI,GAAG,IAAI,IAAI,IAAI,6BAA6B,CAAC,eAAe,CAAC,CAAC;QACvE,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,WAAW;YACd,WAAW;gBACX,IAAI,oBAAoB,CAAC;oBACvB,YAAY,EAAE,IAAI;oBAClB,UAAU,EAAE,kBAAkB,CAAC,UAAU;oBACzC,YAAY;iBACb,CAAC,CAAC;QACL,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,IAAI,GAAG;QACL,OAAO,oBAAoB,CAAC,IAAI,CAAC,kBAAkB,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC;QACvB,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,aAAa;QACX,OAAO;YACL,YAAY,EAAE,IAAI,CAAC,IAAI;YACvB,WAAW,EAAE,IAAI,CAAC,GAAG;YACrB,IAAI,EAAE,IAAI,CAAC,OAAO;YAClB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,OAAO,EAAE,SAAS;YAClB,OAAO,EAAE,IAAI,CAAC,cAAc;YAC5B,UAAU,EAAE,IAAI,CAAC,YAAY;YAC7B,OAAO,EAAE,IAAI,CAAC,WAAW;YACzB,OAAO,EAAE,IAAI,CAAC,WAAW;YACzB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE;SAC9C,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,MAAM,CAAC,KAAc;QACzB,MAAM,cAAc,GAAG,IAAI,6BAA6B,CAAC;YACvD,YAAY,EAAE,IAAI,CAAC,IAAI;YACvB,kBAAkB,EAAE,IAAI,CAAC,GAAG;YAC5B,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC,CAAC;QAEH,OAAO,MAAM,kBAAkB,CAAC,GAAG,CACjC,IAAI,CAAC,UAAU,EACf,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,EAClC,KAAK,IAAI,EAAE,CACT,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAC5B,KAAK,IAAI,EAAE,CACT,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CACnB,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAC3B,KAAK,EACL,cAAc,CACf,CACJ,CACJ,CAAC;IACJ,CAAC;CACF"}

package/dist/service/lambda/function/url/sim-lambda-function-lookup.d.ts

@@ -0,0 +1,30 @@
+import type { SimAwsAccountRegionScope } from "../../../aws/sim-aws-account-region-scope.js";
+import { type SimLambdaFunction, type SimLambdaFunctionArn, type SimLambdaFunctionMap } from "../sim-lambda-function.js";
+interface SimLambdaFunctionLookupProperties {
+    readonly accountRegionScope: SimAwsAccountRegionScope;
+    readonly functions: SimLambdaFunctionMap;
+}
+/**
+ * Finds functions by name in one Account/Region scope, failing the way AWS
+ * does when the name belongs to no function.
+ *
+ * Commands that act on something belonging to a function, such as its
+ * Function URL, need this check before they can say anything about the thing
+ * itself.
+ */
+export declare class SimLambdaFunctionLookup {
+    private readonly accountRegionScope;
+    private readonly functions;
+    constructor(properties: SimLambdaFunctionLookupProperties);
+    /**
+     * Build the ARN a function has, or would have, in this scope.
+     */
+    functionArn(functionName: string): SimLambdaFunctionArn;
+    /**
+     * Get a function by name, or fail as AWS does when there is no such
+     * function.
+     */
+    require(functionName: string): SimLambdaFunction;
+}
+export {};
+//# sourceMappingURL=sim-lambda-function-lookup.d.ts.map

package/dist/service/lambda/function/url/sim-lambda-function-lookup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-function-lookup.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/function/url/sim-lambda-function-lookup.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAE7F,OAAO,EACL,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EAG1B,MAAM,2BAA2B,CAAC;AAEnC,UAAU,iCAAiC;IACzC,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;IACtD,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;CAC1C;AAED;;;;;;;GAOG;AACH,qBAAa,uBAAuB;IAClC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA2B;IAC9D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAuB;IAEjD,YAAY,UAAU,EAAE,iCAAiC,EAGxD;IAED;;OAEG;IACH,WAAW,CAAC,YAAY,EAAE,MAAM,GAAG,oBAAoB,CAEtD;IAED;;;OAGG;IACH,OAAO,CAAC,YAAY,EAAE,MAAM,GAAG,iBAAiB,CAY/C;CACF"}

package/dist/service/lambda/function/url/sim-lambda-function-lookup.js

@@ -0,0 +1,36 @@
+import { SimLambdaResourceNotFoundException } from "../../error/sim-lambda.error.js";
+import { simLambdaFunctionArn, } from "../sim-lambda-function.js";
+/**
+ * Finds functions by name in one Account/Region scope, failing the way AWS
+ * does when the name belongs to no function.
+ *
+ * Commands that act on something belonging to a function, such as its
+ * Function URL, need this check before they can say anything about the thing
+ * itself.
+ */
+export class SimLambdaFunctionLookup {
+    accountRegionScope;
+    functions;
+    constructor(properties) {
+        this.accountRegionScope = properties.accountRegionScope;
+        this.functions = properties.functions;
+    }
+    /**
+     * Build the ARN a function has, or would have, in this scope.
+     */
+    functionArn(functionName) {
+        return simLambdaFunctionArn(this.accountRegionScope, functionName);
+    }
+    /**
+     * Get a function by name, or fail as AWS does when there is no such
+     * function.
+     */
+    require(functionName) {
+        const simFunction = this.functions.get(functionName);
+        if (simFunction === undefined) {
+            throw new SimLambdaResourceNotFoundException(`Function not found: ${this.functionArn(functionName)}`);
+        }
+        return simFunction;
+    }
+}
+//# sourceMappingURL=sim-lambda-function-lookup.js.map

package/dist/service/lambda/function/url/sim-lambda-function-lookup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-function-lookup.js","sourceRoot":"","sources":["../../../../../src/service/lambda/function/url/sim-lambda-function-lookup.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kCAAkC,EAAE,MAAM,iCAAiC,CAAC;AACrF,OAAO,EAKL,oBAAoB,GACrB,MAAM,2BAA2B,CAAC;AAOnC;;;;;;;GAOG;AACH,MAAM,OAAO,uBAAuB;IACjB,kBAAkB,CAA2B;IAC7C,SAAS,CAAuB;IAEjD,YAAY,UAA6C;QACvD,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;QACxD,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,YAAoB;QAC9B,OAAO,oBAAoB,CAAC,IAAI,CAAC,kBAAkB,EAAE,YAAY,CAAC,CAAC;IACrE,CAAC;IAED;;;OAGG;IACH,OAAO,CAAC,YAAoB;QAC1B,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CACpC,YAAqC,CACtC,CAAC;QAEF,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,kCAAkC,CAC1C,uBAAuB,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE,CACxD,CAAC;QACJ,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;CACF"}

package/dist/service/lambda/function/url/sim-lambda-function-url-factory.d.ts

@@ -0,0 +1,37 @@
+import type { SimAwsAccountRegionScope } from "../../../aws/sim-aws-account-region-scope.js";
+import type { SimLambdaUrlRegistry } from "../../registry/sim-lambda-url-registry.js";
+import type { SimLambdaFunction } from "../sim-lambda-function.js";
+import { SimLambdaFunctionUrl, type SimLambdaFunctionUrlAuthType, type SimLambdaFunctionUrlInvokeMode } from "./sim-lambda-function-url.js";
+import { type SimClock } from "../../../../util/clock/sim-clock.js";
+export interface SimLambdaFunctionUrlFactoryProperties {
+    readonly accountRegionScope: SimAwsAccountRegionScope;
+    readonly urlRegistry: SimLambdaUrlRegistry;
+    readonly clock?: SimClock | undefined;
+}
+interface MakeSimLambdaFunctionUrlProperties {
+    readonly simFunction: SimLambdaFunction;
+    readonly authType?: SimLambdaFunctionUrlAuthType | undefined;
+    readonly invokeMode?: SimLambdaFunctionUrlInvokeMode | undefined;
+}
+/**
+ * Builds Function URLs, taking their ids from the cross-Account registry.
+ *
+ * Allocating and registering the id belong together: an id that is not
+ * registered names a URL the serving layer cannot route to.
+ */
+export declare class SimLambdaFunctionUrlFactory {
+    private readonly accountRegionScope;
+    private readonly urlRegistry;
+    private readonly clock;
+    constructor(properties: SimLambdaFunctionUrlFactoryProperties);
+    /**
+     * Make a registered Function URL for a function.
+     */
+    make(properties: MakeSimLambdaFunctionUrlProperties): SimLambdaFunctionUrl;
+    /**
+     * Forget a Function URL id, so its hostname stops resolving.
+     */
+    forget(functionUrl: SimLambdaFunctionUrl): void;
+}
+export {};
+//# sourceMappingURL=sim-lambda-function-url-factory.d.ts.map

package/dist/service/lambda/function/url/sim-lambda-function-url-factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-function-url-factory.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/function/url/sim-lambda-function-url-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACtF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EACL,oBAAoB,EACpB,KAAK,4BAA4B,EACjC,KAAK,8BAA8B,EACpC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,KAAK,QAAQ,EAEd,MAAM,qCAAqC,CAAC;AAE7C,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;IACtD,QAAQ,CAAC,WAAW,EAAE,oBAAoB,CAAC;IAC3C,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;CACvC;AAED,UAAU,kCAAkC;IAC1C,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAC;IACxC,QAAQ,CAAC,QAAQ,CAAC,EAAE,4BAA4B,GAAG,SAAS,CAAC;IAC7D,QAAQ,CAAC,UAAU,CAAC,EAAE,8BAA8B,GAAG,SAAS,CAAC;CAClE;AAED;;;;;GAKG;AACH,qBAAa,2BAA2B;IACtC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA2B;IAC9D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAuB;IACnD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IAEjC,YAAY,UAAU,EAAE,qCAAqC,EAI5D;IAED;;OAEG;IACH,IAAI,CAAC,UAAU,EAAE,kCAAkC,GAAG,oBAAoB,CAkBzE;IAED;;OAEG;IACH,MAAM,CAAC,WAAW,EAAE,oBAAoB,GAAG,IAAI,CAE9C;CACF"}

package/dist/service/lambda/function/url/sim-lambda-function-url-factory.js

@@ -0,0 +1,42 @@
+import { SimLambdaFunctionUrl, } from "./sim-lambda-function-url.js";
+import { SimRealClock, } from "../../../../util/clock/sim-clock.js";
+/**
+ * Builds Function URLs, taking their ids from the cross-Account registry.
+ *
+ * Allocating and registering the id belong together: an id that is not
+ * registered names a URL the serving layer cannot route to.
+ */
+export class SimLambdaFunctionUrlFactory {
+    accountRegionScope;
+    urlRegistry;
+    clock;
+    constructor(properties) {
+        this.accountRegionScope = properties.accountRegionScope;
+        this.urlRegistry = properties.urlRegistry;
+        this.clock = properties.clock ?? new SimRealClock();
+    }
+    /**
+     * Make a registered Function URL for a function.
+     */
+    make(properties) {
+        const { simFunction, authType, invokeMode } = properties;
+        const urlId = this.urlRegistry.allocateFunctionUrlId();
+        this.urlRegistry.registerFunctionUrl(urlId, this.accountRegionScope.accountId);
+        return new SimLambdaFunctionUrl({
+            urlId,
+            functionName: simFunction.name,
+            functionArn: simFunction.arn,
+            accountRegionScope: this.accountRegionScope,
+            authType,
+            invokeMode,
+            clock: this.clock,
+        });
+    }
+    /**
+     * Forget a Function URL id, so its hostname stops resolving.
+     */
+    forget(functionUrl) {
+        this.urlRegistry.deregisterFunctionUrl(functionUrl.urlId);
+    }
+}
+//# sourceMappingURL=sim-lambda-function-url-factory.js.map

package/dist/service/lambda/function/url/sim-lambda-function-url-factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-function-url-factory.js","sourceRoot":"","sources":["../../../../../src/service/lambda/function/url/sim-lambda-function-url-factory.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,oBAAoB,GAGrB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAEL,YAAY,GACb,MAAM,qCAAqC,CAAC;AAc7C;;;;;GAKG;AACH,MAAM,OAAO,2BAA2B;IACrB,kBAAkB,CAA2B;IAC7C,WAAW,CAAuB;IAClC,KAAK,CAAW;IAEjC,YAAY,UAAiD;QAC3D,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;QACxD,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,IAAI,IAAI,YAAY,EAAE,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,UAA8C;QACjD,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,UAAU,CAAC;QACzD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,qBAAqB,EAAE,CAAC;QAEvD,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAClC,KAAK,EACL,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAClC,CAAC;QAEF,OAAO,IAAI,oBAAoB,CAAC;YAC9B,KAAK;YACL,YAAY,EAAE,WAAW,CAAC,IAAI;YAC9B,WAAW,EAAE,WAAW,CAAC,GAAG;YAC5B,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,QAAQ;YACR,UAAU;YACV,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,WAAiC;QACtC,IAAI,CAAC,WAAW,CAAC,qBAAqB,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAC5D,CAAC;CACF"}

package/dist/service/lambda/function/url/sim-lambda-function-url-host.d.ts

@@ -0,0 +1,30 @@
+/**
+ * The DNS label real Lambda uses for Function URL endpoints, sitting between
+ * the URL id and the region:
+ *
+ *   <url-id>.lambda-url.<region>.on.aws
+ */
+export declare const lambdaFunctionUrlHostLabel = "lambda-url";
+/**
+ * The real AWS domain Function URL endpoints live under.
+ */
+export declare const lambdaFunctionUrlDomain = "on.aws";
+interface SimLambdaFunctionUrlHostProperties {
+    readonly urlId: string;
+    readonly regionName: string;
+}
+/**
+ * Build the real AWS endpoint hostname for a Function URL.
+ */
+export declare function simLambdaFunctionUrlHost(properties: SimLambdaFunctionUrlHostProperties): string;
+/**
+ * Build the logical hostname for a Function URL: the AWS endpoint hostname
+ * without the real AWS domain.
+ *
+ * This is the form Yulin serves on localhost, where the `.on.aws` tail is
+ * replaced by the local suffix, in the same way S3 endpoint hostnames drop
+ * `.amazonaws.com`.
+ */
+export declare function simLambdaFunctionUrlLogicalHost(properties: SimLambdaFunctionUrlHostProperties): string;
+export {};
+//# sourceMappingURL=sim-lambda-function-url-host.d.ts.map

package/dist/service/lambda/function/url/sim-lambda-function-url-host.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-function-url-host.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/function/url/sim-lambda-function-url-host.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,eAAe,CAAC;AAEvD;;GAEG;AACH,eAAO,MAAM,uBAAuB,WAAW,CAAC;AAEhD,UAAU,kCAAkC;IAC1C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,kCAAkC,GAC7C,MAAM,CAER;AAED;;;;;;;GAOG;AACH,wBAAgB,+BAA+B,CAC7C,UAAU,EAAE,kCAAkC,GAC7C,MAAM,CAER"}

package/dist/service/lambda/function/url/sim-lambda-function-url-host.js

@@ -0,0 +1,29 @@
+/**
+ * The DNS label real Lambda uses for Function URL endpoints, sitting between
+ * the URL id and the region:
+ *
+ *   <url-id>.lambda-url.<region>.on.aws
+ */
+export const lambdaFunctionUrlHostLabel = "lambda-url";
+/**
+ * The real AWS domain Function URL endpoints live under.
+ */
+export const lambdaFunctionUrlDomain = "on.aws";
+/**
+ * Build the real AWS endpoint hostname for a Function URL.
+ */
+export function simLambdaFunctionUrlHost(properties) {
+    return `${simLambdaFunctionUrlLogicalHost(properties)}.${lambdaFunctionUrlDomain}`;
+}
+/**
+ * Build the logical hostname for a Function URL: the AWS endpoint hostname
+ * without the real AWS domain.
+ *
+ * This is the form Yulin serves on localhost, where the `.on.aws` tail is
+ * replaced by the local suffix, in the same way S3 endpoint hostnames drop
+ * `.amazonaws.com`.
+ */
+export function simLambdaFunctionUrlLogicalHost(properties) {
+    return `${properties.urlId}.${lambdaFunctionUrlHostLabel}.${properties.regionName}`;
+}
+//# sourceMappingURL=sim-lambda-function-url-host.js.map