@kensio/yulin 0.34.2 → 0.36.0

package/dist/service/lambda/function/url/sim-lambda-function-url-host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-function-url-host.js","sourceRoot":"","sources":["../../../../../src/service/lambda/function/url/sim-lambda-function-url-host.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,YAAY,CAAC;AAEvD;;GAEG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,QAAQ,CAAC;AAOhD;;GAEG;AACH,MAAM,UAAU,wBAAwB,CACtC,UAA8C;IAE9C,OAAO,GAAG,+BAA+B,CAAC,UAAU,CAAC,IAAI,uBAAuB,EAAE,CAAC;AACrF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,+BAA+B,CAC7C,UAA8C;IAE9C,OAAO,GAAG,UAAU,CAAC,KAAK,IAAI,0BAA0B,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;AACtF,CAAC"}

package/dist/service/lambda/function/url/sim-lambda-function-url-store.d.ts

@@ -0,0 +1,45 @@
+import type { SimLambdaFunction } from "../sim-lambda-function.js";
+import { type SimLambdaFunctionUrlFactoryProperties } from "./sim-lambda-function-url-factory.js";
+import type { SimLambdaFunctionUrl, SimLambdaFunctionUrlAuthType, SimLambdaFunctionUrlId, SimLambdaFunctionUrlInvokeMode } from "./sim-lambda-function-url.js";
+interface CreateSimLambdaFunctionUrlProperties {
+    readonly simFunction: SimLambdaFunction;
+    readonly authType?: SimLambdaFunctionUrlAuthType | undefined;
+    readonly invokeMode?: SimLambdaFunctionUrlInvokeMode | undefined;
+}
+/**
+ * Function URL state for one Account/Region scope of simulated Lambda.
+ *
+ * Each function has at most one Function URL, so URLs are held by function
+ * name.
+ */
+export declare class SimLambdaFunctionUrlStore {
+    private readonly functionUrls;
+    private readonly factory;
+    constructor(properties: SimLambdaFunctionUrlFactoryProperties);
+    /**
+     * Get a function's Function URL, if it has one.
+     */
+    get(functionName: string): SimLambdaFunctionUrl | undefined;
+    /**
+     * Get a function's Function URL, or fail as AWS does when it has none.
+     */
+    require(simFunction: SimLambdaFunction): SimLambdaFunctionUrl;
+    /**
+     * Get every Function URL a function has, which is either none or one.
+     */
+    allForFunction(functionName: string): readonly SimLambdaFunctionUrl[];
+    /**
+     * Find a Function URL by the id in its hostname.
+     */
+    byUrlId(urlId: SimLambdaFunctionUrlId): SimLambdaFunctionUrl | undefined;
+    /**
+     * Create a Function URL for a function that does not have one.
+     */
+    create(properties: CreateSimLambdaFunctionUrlProperties): SimLambdaFunctionUrl;
+    /**
+     * Delete a function's Function URL, so its hostname stops resolving.
+     */
+    delete(simFunction: SimLambdaFunction): void;
+}
+export {};
+//# sourceMappingURL=sim-lambda-function-url-store.d.ts.map

package/dist/service/lambda/function/url/sim-lambda-function-url-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-function-url-store.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/function/url/sim-lambda-function-url-store.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,iBAAiB,EAElB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAEL,KAAK,qCAAqC,EAC3C,MAAM,sCAAsC,CAAC;AAC9C,OAAO,KAAK,EACV,oBAAoB,EACpB,4BAA4B,EAC5B,sBAAsB,EACtB,8BAA8B,EAE/B,MAAM,8BAA8B,CAAC;AACtC,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAC;IACxC,QAAQ,CAAC,QAAQ,CAAC,EAAE,4BAA4B,GAAG,SAAS,CAAC;IAC7D,QAAQ,CAAC,UAAU,CAAC,EAAE,8BAA8B,GAAG,SAAS,CAAC;CAClE;AAED;;;;;GAKG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAsC;IACnE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA8B;IAItD,YAAY,UAAU,EAAE,qCAAqC,EAE5D;IAED;;OAEG;IACH,GAAG,CAAC,YAAY,EAAE,MAAM,GAAG,oBAAoB,GAAG,SAAS,CAE1D;IAED;;OAEG;IACH,OAAO,CAAC,WAAW,EAAE,iBAAiB,GAAG,oBAAoB,CAU5D;IAED;;OAEG;IACH,cAAc,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,oBAAoB,EAAE,CAQpE;IAED;;OAEG;IACH,OAAO,CAAC,KAAK,EAAE,sBAAsB,GAAG,oBAAoB,GAAG,SAAS,CAIvE;IAED;;OAEG;IACH,MAAM,CACJ,UAAU,EAAE,oCAAoC,GAC/C,oBAAoB,CAatB;IAED;;OAEG;IACH,MAAM,CAAC,WAAW,EAAE,iBAAiB,GAAG,IAAI,CAK3C;CACF"}

package/dist/service/lambda/function/url/sim-lambda-function-url-store.js

@@ -0,0 +1,72 @@
+import { SimLambdaResourceConflictException, SimLambdaResourceNotFoundException, } from "../../error/sim-lambda.error.js";
+import { SimLambdaFunctionUrlFactory, } from "./sim-lambda-function-url-factory.js";
+/**
+ * Function URL state for one Account/Region scope of simulated Lambda.
+ *
+ * Each function has at most one Function URL, so URLs are held by function
+ * name.
+ */
+export class SimLambdaFunctionUrlStore {
+    functionUrls = new Map();
+    factory;
+    // The store's construction inputs are exactly the factory's: it holds URL
+    // state and forwards the wiring straight through.
+    constructor(properties) {
+        this.factory = new SimLambdaFunctionUrlFactory(properties);
+    }
+    /**
+     * Get a function's Function URL, if it has one.
+     */
+    get(functionName) {
+        return this.functionUrls.get(functionName);
+    }
+    /**
+     * Get a function's Function URL, or fail as AWS does when it has none.
+     */
+    require(simFunction) {
+        const functionUrl = this.get(simFunction.name);
+        if (functionUrl === undefined) {
+            throw new SimLambdaResourceNotFoundException(`Function URL config not found for function: ${simFunction.arn}`);
+        }
+        return functionUrl;
+    }
+    /**
+     * Get every Function URL a function has, which is either none or one.
+     */
+    allForFunction(functionName) {
+        const functionUrl = this.get(functionName);
+        if (functionUrl === undefined) {
+            return [];
+        }
+        return [functionUrl];
+    }
+    /**
+     * Find a Function URL by the id in its hostname.
+     */
+    byUrlId(urlId) {
+        return this.functionUrls
+            .values()
+            .find((functionUrl) => functionUrl.urlId === urlId);
+    }
+    /**
+     * Create a Function URL for a function that does not have one.
+     */
+    create(properties) {
+        const { simFunction } = properties;
+        if (this.get(simFunction.name) !== undefined) {
+            throw new SimLambdaResourceConflictException(`FunctionUrlConfig exists for this Lambda function: ${simFunction.arn}`);
+        }
+        const functionUrl = this.factory.make(properties);
+        this.functionUrls.set(simFunction.name, functionUrl);
+        return functionUrl;
+    }
+    /**
+     * Delete a function's Function URL, so its hostname stops resolving.
+     */
+    delete(simFunction) {
+        const functionUrl = this.require(simFunction);
+        this.functionUrls.delete(functionUrl.functionName);
+        this.factory.forget(functionUrl);
+    }
+}
+//# sourceMappingURL=sim-lambda-function-url-store.js.map

package/dist/service/lambda/function/url/sim-lambda-function-url-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-function-url-store.js","sourceRoot":"","sources":["../../../../../src/service/lambda/function/url/sim-lambda-function-url-store.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kCAAkC,EAClC,kCAAkC,GACnC,MAAM,iCAAiC,CAAC;AAKzC,OAAO,EACL,2BAA2B,GAE5B,MAAM,sCAAsC,CAAC;AAc9C;;;;;GAKG;AACH,MAAM,OAAO,yBAAyB;IACnB,YAAY,GAA4B,IAAI,GAAG,EAAE,CAAC;IAClD,OAAO,CAA8B;IAEtD,0EAA0E;IAC1E,kDAAkD;IAClD,YAAY,UAAiD;QAC3D,IAAI,CAAC,OAAO,GAAG,IAAI,2BAA2B,CAAC,UAAU,CAAC,CAAC;IAC7D,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,YAAoB;QACtB,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,YAAqC,CAAC,CAAC;IACtE,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,WAA8B;QACpC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAE/C,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,kCAAkC,CAC1C,+CAA+C,WAAW,CAAC,GAAG,EAAE,CACjE,CAAC;QACJ,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,YAAoB;QACjC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAE3C,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,CAAC,WAAW,CAAC,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,KAA6B;QACnC,OAAO,IAAI,CAAC,YAAY;aACrB,MAAM,EAAE;aACR,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,MAAM,CACJ,UAAgD;QAEhD,MAAM,EAAE,WAAW,EAAE,GAAG,UAAU,CAAC;QAEnC,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YAC7C,MAAM,IAAI,kCAAkC,CAC1C,sDAAsD,WAAW,CAAC,GAAG,EAAE,CACxE,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAErD,OAAO,WAAW,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,WAA8B;QACnC,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAE9C,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACnC,CAAC;CACF"}

package/dist/service/lambda/function/url/sim-lambda-function-url.d.ts

@@ -0,0 +1,103 @@
+import type { Brand } from "../../../../util/brand.type.js";
+import type { SimAwsAccountRegionScope } from "../../../aws/sim-aws-account-region-scope.js";
+import type { SimLambdaFunctionName } from "../sim-lambda-function.js";
+import { type SimClock } from "../../../../util/clock/sim-clock.js";
+/**
+ * The id AWS allocates for one Function URL, which is the leading DNS label of
+ * the URL it hands out.
+ */
+export type SimLambdaFunctionUrlId = Brand<string, "SimLambdaFunctionUrlId">;
+/**
+ * Function URL authentication types.
+ *
+ * NONE makes the URL publicly invokable. AWS_IAM admits only a caller allowed
+ * `lambda:InvokeFunctionUrl` on the function, resolved from a SigV4 signature
+ * or from a named principal at the HTTP boundary.
+ */
+export type SimLambdaFunctionUrlAuthType = "NONE" | "AWS_IAM";
+/**
+ * Function URL invocation modes. Only BUFFERED responses are simulated.
+ */
+export type SimLambdaFunctionUrlInvokeMode = "BUFFERED" | "RESPONSE_STREAM";
+/**
+ * Allocate a Function URL id in the shape real Lambda uses: 32 lowercase
+ * alphanumeric characters, forming one DNS label.
+ */
+export declare function makeSimLambdaFunctionUrlId(): SimLambdaFunctionUrlId;
+interface SimLambdaFunctionUrlProperties {
+    readonly urlId: SimLambdaFunctionUrlId;
+    readonly functionName: SimLambdaFunctionName;
+    readonly functionArn: string;
+    readonly accountRegionScope: SimAwsAccountRegionScope;
+    readonly authType?: SimLambdaFunctionUrlAuthType | undefined;
+    readonly invokeMode?: SimLambdaFunctionUrlInvokeMode | undefined;
+    /**
+     * Clock stamping this Function URL's creation and last modified times. A
+     * Function URL built standalone, outside a SimAws instance, falls back to the
+     * real clock.
+     */
+    readonly clock?: SimClock | undefined;
+}
+/**
+ * Minimal structural Function URL configuration, as returned by the
+ * CreateFunctionUrlConfig, GetFunctionUrlConfig and UpdateFunctionUrlConfig
+ * commands.
+ */
+export interface SimLambdaFunctionUrlConfiguration {
+    FunctionUrl: string;
+    FunctionArn: string;
+    AuthType: SimLambdaFunctionUrlAuthType;
+    InvokeMode: SimLambdaFunctionUrlInvokeMode;
+    CreationTime: string;
+    LastModifiedTime: string;
+}
+/**
+ * Simulated Lambda Function URL resource.
+ *
+ * A Function URL is the HTTP endpoint for one function. The id is the routing
+ * key: it is the leading label of the endpoint hostname, so the localhost
+ * serving layer can find the function from nothing but the request Host.
+ */
+export declare class SimLambdaFunctionUrl {
+    #private;
+    readonly urlId: SimLambdaFunctionUrlId;
+    readonly functionName: SimLambdaFunctionName;
+    readonly functionArn: string;
+    readonly accountRegionScope: SimAwsAccountRegionScope;
+    readonly creationTime: string;
+    private readonly clock;
+    constructor(properties: SimLambdaFunctionUrlProperties);
+    /**
+     * Get the authentication type for this Function URL.
+     */
+    get authType(): SimLambdaFunctionUrlAuthType;
+    /**
+     * Get the invocation mode for this Function URL.
+     */
+    get invokeMode(): SimLambdaFunctionUrlInvokeMode;
+    /**
+     * Get the endpoint hostname for this Function URL.
+     */
+    get hostname(): string;
+    /**
+     * Get the endpoint URL for this Function URL, with the trailing slash real
+     * Lambda includes.
+     */
+    get url(): string;
+    /**
+     * Apply an update to this Function URL's configuration.
+     *
+     * Omitted values are left as they are, as real UpdateFunctionUrlConfig does.
+     */
+    update(properties: {
+        readonly authType?: SimLambdaFunctionUrlAuthType | undefined;
+        readonly invokeMode?: SimLambdaFunctionUrlInvokeMode | undefined;
+    }): void;
+    /**
+     * Get the AWS-like configuration for this Function URL.
+     */
+    configuration(): SimLambdaFunctionUrlConfiguration;
+}
+export type SimLambdaFunctionUrlMap = Map<SimLambdaFunctionName, SimLambdaFunctionUrl>;
+export {};
+//# sourceMappingURL=sim-lambda-function-url.d.ts.map

package/dist/service/lambda/function/url/sim-lambda-function-url.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-function-url.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/function/url/sim-lambda-function-url.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,gCAAgC,CAAC;AAC5D,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAEvE,OAAO,EACL,KAAK,QAAQ,EAEd,MAAM,qCAAqC,CAAC;AAE7C;;;GAGG;AACH,MAAM,MAAM,sBAAsB,GAAG,KAAK,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;AAE7E;;;;;;GAMG;AACH,MAAM,MAAM,4BAA4B,GAAG,MAAM,GAAG,SAAS,CAAC;AAE9D;;GAEG;AACH,MAAM,MAAM,8BAA8B,GAAG,UAAU,GAAG,iBAAiB,CAAC;AAE5E;;;GAGG;AACH,wBAAgB,0BAA0B,IAAI,sBAAsB,CAEnE;AAED,UAAU,8BAA8B;IACtC,QAAQ,CAAC,KAAK,EAAE,sBAAsB,CAAC;IACvC,QAAQ,CAAC,YAAY,EAAE,qBAAqB,CAAC;IAC7C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;IACtD,QAAQ,CAAC,QAAQ,CAAC,EAAE,4BAA4B,GAAG,SAAS,CAAC;IAC7D,QAAQ,CAAC,UAAU,CAAC,EAAE,8BAA8B,GAAG,SAAS,CAAC;IACjE;;;;OAIG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;CACvC;AAED;;;;GAIG;AACH,MAAM,WAAW,iCAAiC;IAChD,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,4BAA4B,CAAC;IACvC,UAAU,EAAE,8BAA8B,CAAC;IAC3C,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;GAMG;AACH,qBAAa,oBAAoB;;IAC/B,SAAgB,KAAK,EAAE,sBAAsB,CAAC;IAC9C,SAAgB,YAAY,EAAE,qBAAqB,CAAC;IACpD,SAAgB,WAAW,EAAE,MAAM,CAAC;IACpC,SAAgB,kBAAkB,EAAE,wBAAwB,CAAC;IAC7D,SAAgB,YAAY,EAAE,MAAM,CAAC;IAKrC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IAEjC,YAAY,UAAU,EAAE,8BAA8B,EAqBrD;IAED;;OAEG;IACH,IAAI,QAAQ,IAAI,4BAA4B,CAE3C;IAED;;OAEG;IACH,IAAI,UAAU,IAAI,8BAA8B,CAE/C;IAED;;OAEG;IACH,IAAI,QAAQ,IAAI,MAAM,CAKrB;IAED;;;OAGG;IACH,IAAI,GAAG,IAAI,MAAM,CAEhB;IAED;;;;OAIG;IACH,MAAM,CAAC,UAAU,EAAE;QACjB,QAAQ,CAAC,QAAQ,CAAC,EAAE,4BAA4B,GAAG,SAAS,CAAC;QAC7D,QAAQ,CAAC,UAAU,CAAC,EAAE,8BAA8B,GAAG,SAAS,CAAC;KAClE,GAAG,IAAI,CAIP;IAED;;OAEG;IACH,aAAa,IAAI,iCAAiC,CASjD;CACF;AAED,MAAM,MAAM,uBAAuB,GAAG,GAAG,CACvC,qBAAqB,EACrB,oBAAoB,CACrB,CAAC"}

package/dist/service/lambda/function/url/sim-lambda-function-url.js

@@ -0,0 +1,92 @@
+import { faker } from "@faker-js/faker";
+import { simLambdaFunctionUrlHost } from "./sim-lambda-function-url-host.js";
+import { SimRealClock, } from "../../../../util/clock/sim-clock.js";
+/**
+ * Allocate a Function URL id in the shape real Lambda uses: 32 lowercase
+ * alphanumeric characters, forming one DNS label.
+ */
+export function makeSimLambdaFunctionUrlId() {
+    return faker.helpers.fromRegExp(/[a-z0-9]{32}/);
+}
+/**
+ * Simulated Lambda Function URL resource.
+ *
+ * A Function URL is the HTTP endpoint for one function. The id is the routing
+ * key: it is the leading label of the endpoint hostname, so the localhost
+ * serving layer can find the function from nothing but the request Host.
+ */
+export class SimLambdaFunctionUrl {
+    urlId;
+    functionName;
+    functionArn;
+    accountRegionScope;
+    creationTime;
+    #authType;
+    #invokeMode;
+    #lastModifiedTime;
+    clock;
+    constructor(properties) {
+        const { urlId, functionName, functionArn, accountRegionScope, authType = "NONE", invokeMode = "BUFFERED", clock = new SimRealClock(), } = properties;
+        this.clock = clock;
+        this.urlId = urlId;
+        this.functionName = functionName;
+        this.functionArn = functionArn;
+        this.accountRegionScope = accountRegionScope;
+        this.#authType = authType;
+        this.#invokeMode = invokeMode;
+        this.creationTime = clock.now().toISOString();
+        this.#lastModifiedTime = this.creationTime;
+    }
+    /**
+     * Get the authentication type for this Function URL.
+     */
+    get authType() {
+        return this.#authType;
+    }
+    /**
+     * Get the invocation mode for this Function URL.
+     */
+    get invokeMode() {
+        return this.#invokeMode;
+    }
+    /**
+     * Get the endpoint hostname for this Function URL.
+     */
+    get hostname() {
+        return simLambdaFunctionUrlHost({
+            urlId: this.urlId,
+            regionName: this.accountRegionScope.regionName,
+        });
+    }
+    /**
+     * Get the endpoint URL for this Function URL, with the trailing slash real
+     * Lambda includes.
+     */
+    get url() {
+        return `https://${this.hostname}/`;
+    }
+    /**
+     * Apply an update to this Function URL's configuration.
+     *
+     * Omitted values are left as they are, as real UpdateFunctionUrlConfig does.
+     */
+    update(properties) {
+        this.#authType = properties.authType ?? this.#authType;
+        this.#invokeMode = properties.invokeMode ?? this.#invokeMode;
+        this.#lastModifiedTime = this.clock.now().toISOString();
+    }
+    /**
+     * Get the AWS-like configuration for this Function URL.
+     */
+    configuration() {
+        return {
+            FunctionUrl: this.url,
+            FunctionArn: this.functionArn,
+            AuthType: this.#authType,
+            InvokeMode: this.#invokeMode,
+            CreationTime: this.creationTime,
+            LastModifiedTime: this.#lastModifiedTime,
+        };
+    }
+}
+//# sourceMappingURL=sim-lambda-function-url.js.map

package/dist/service/lambda/function/url/sim-lambda-function-url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-function-url.js","sourceRoot":"","sources":["../../../../../src/service/lambda/function/url/sim-lambda-function-url.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAKxC,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAC7E,OAAO,EAEL,YAAY,GACb,MAAM,qCAAqC,CAAC;AAsB7C;;;GAGG;AACH,MAAM,UAAU,0BAA0B;IACxC,OAAO,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,cAAc,CAA2B,CAAC;AAC5E,CAAC;AA+BD;;;;;;GAMG;AACH,MAAM,OAAO,oBAAoB;IACf,KAAK,CAAyB;IAC9B,YAAY,CAAwB;IACpC,WAAW,CAAS;IACpB,kBAAkB,CAA2B;IAC7C,YAAY,CAAS;IAErC,SAAS,CAA+B;IACxC,WAAW,CAAiC;IAC5C,iBAAiB,CAAS;IACT,KAAK,CAAW;IAEjC,YAAY,UAA0C;QACpD,MAAM,EACJ,KAAK,EACL,YAAY,EACZ,WAAW,EACX,kBAAkB,EAClB,QAAQ,GAAG,MAAM,EACjB,UAAU,GAAG,UAAU,EACvB,KAAK,GAAG,IAAI,YAAY,EAAE,GAC3B,GAAG,UAAU,CAAC;QAEf,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QAEnB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;QAC7C,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;QAC1B,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC;QAC9B,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;QAC9C,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,YAAY,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,IAAI,QAAQ;QACV,OAAO,wBAAwB,CAAC;YAC9B,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,UAAU,EAAE,IAAI,CAAC,kBAAkB,CAAC,UAAU;SAC/C,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,IAAI,GAAG;QACL,OAAO,WAAW,IAAI,CAAC,QAAQ,GAAG,CAAC;IACrC,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,UAGN;QACC,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC;QACvD,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,UAAU,IAAI,IAAI,CAAC,WAAW,CAAC;QAC7D,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;IAC1D,CAAC;IAED;;OAEG;IACH,aAAa;QACX,OAAO;YACL,WAAW,EAAE,IAAI,CAAC,GAAG;YACrB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,QAAQ,EAAE,IAAI,CAAC,SAAS;YACxB,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,gBAAgB,EAAE,IAAI,CAAC,iBAAiB;SACzC,CAAC;IACJ,CAAC;CACF"}

package/dist/service/lambda/index.d.ts

@@ -4,4 +4,5 @@ export { SimSdkLambdaVmModuleProvider } from "./function/code/vm/sdk/sim-sdk-lam
 export { makeLambdaZipFileInput } from "./function/code/lambda-zip-file-input.js";
 export { makeLambdaCodeZip, type LambdaCodeZipFiles, } from "./function/code/make-lambda-code-zip.js";
 export type { SimLambdaCallback, SimLambdaContext, SimLambdaHandler, } from "./function/sim-lambda-handler.type.js";
+export type { SimLambdaFunctionUrlEvent, SimLambdaFunctionUrlResult, } from "./serve/event/sim-lambda-url-event.type.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/service/lambda/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/service/lambda/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EACL,8BAA8B,EAC9B,KAAK,4BAA4B,GAClC,MAAM,6DAA6D,CAAC;AACrE,OAAO,EAAE,4BAA4B,EAAE,MAAM,6DAA6D,CAAC;AAC3G,OAAO,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AAClF,OAAO,EACL,iBAAiB,EACjB,KAAK,kBAAkB,GACxB,MAAM,yCAAyC,CAAC;AACjD,YAAY,EACV,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,uCAAuC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/service/lambda/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EACL,8BAA8B,EAC9B,KAAK,4BAA4B,GAClC,MAAM,6DAA6D,CAAC;AACrE,OAAO,EAAE,4BAA4B,EAAE,MAAM,6DAA6D,CAAC;AAC3G,OAAO,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AAClF,OAAO,EACL,iBAAiB,EACjB,KAAK,kBAAkB,GACxB,MAAM,yCAAyC,CAAC;AACjD,YAAY,EACV,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,uCAAuC,CAAC;AAC/C,YAAY,EACV,yBAAyB,EACzB,0BAA0B,GAC3B,MAAM,4CAA4C,CAAC"}

package/dist/service/lambda/registry/sim-lambda-url-registry.d.ts

@@ -0,0 +1,31 @@
+import type { SimAwsAccountId } from "../../aws/sim-aws-account.js";
+import { type SimLambdaFunctionUrlId } from "../function/url/sim-lambda-function-url.js";
+/**
+ * Simulated Lambda cross-Account registry of Function URL ids.
+ *
+ * A served Function URL request carries its region in the hostname, but not
+ * the Account. Simulated Lambda state is per Account/Region, so the serving
+ * layer needs a way to get from a URL id to the Account that owns it. This
+ * registry is that lookup, which is why URL ids are allocated here and are
+ * unique across every Account and Region of one simulated AWS environment.
+ */
+export declare class SimLambdaUrlRegistry {
+    private readonly functionUrlAccountIds;
+    /**
+     * Allocate a Function URL id that is unique in this simulated AWS.
+     */
+    allocateFunctionUrlId(): SimLambdaFunctionUrlId;
+    /**
+     * Register a Function URL id to the Account that owns it.
+     */
+    registerFunctionUrl(urlId: SimLambdaFunctionUrlId, accountId: SimAwsAccountId): void;
+    /**
+     * Forget a Function URL id, so its hostname stops resolving.
+     */
+    deregisterFunctionUrl(urlId: SimLambdaFunctionUrlId): void;
+    /**
+     * Get the Account that owns a Function URL id, if it is registered.
+     */
+    accountIdForFunctionUrl(urlId: SimLambdaFunctionUrlId): SimAwsAccountId | undefined;
+}
+//# sourceMappingURL=sim-lambda-url-registry.d.ts.map

package/dist/service/lambda/registry/sim-lambda-url-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-url-registry.d.ts","sourceRoot":"","sources":["../../../../src/service/lambda/registry/sim-lambda-url-registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAEL,KAAK,sBAAsB,EAC5B,MAAM,4CAA4C,CAAC;AAEpD;;;;;;;;GAQG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAGlC;IAEJ;;OAEG;IACH,qBAAqB,IAAI,sBAAsB,CAS9C;IAED;;OAEG;IACH,mBAAmB,CACjB,KAAK,EAAE,sBAAsB,EAC7B,SAAS,EAAE,eAAe,GACzB,IAAI,CAEN;IAED;;OAEG;IACH,qBAAqB,CAAC,KAAK,EAAE,sBAAsB,GAAG,IAAI,CAEzD;IAED;;OAEG;IACH,uBAAuB,CACrB,KAAK,EAAE,sBAAsB,GAC5B,eAAe,GAAG,SAAS,CAE7B;CACF"}

package/dist/service/lambda/registry/sim-lambda-url-registry.js

@@ -0,0 +1,43 @@
+import { makeSimLambdaFunctionUrlId, } from "../function/url/sim-lambda-function-url.js";
+/**
+ * Simulated Lambda cross-Account registry of Function URL ids.
+ *
+ * A served Function URL request carries its region in the hostname, but not
+ * the Account. Simulated Lambda state is per Account/Region, so the serving
+ * layer needs a way to get from a URL id to the Account that owns it. This
+ * registry is that lookup, which is why URL ids are allocated here and are
+ * unique across every Account and Region of one simulated AWS environment.
+ */
+export class SimLambdaUrlRegistry {
+    functionUrlAccountIds = new Map();
+    /**
+     * Allocate a Function URL id that is unique in this simulated AWS.
+     */
+    allocateFunctionUrlId() {
+        let urlId = makeSimLambdaFunctionUrlId();
+        while (this.functionUrlAccountIds.has(urlId)) {
+            /* v8 ignore next -- does not happen in practice */
+            urlId = makeSimLambdaFunctionUrlId();
+        }
+        return urlId;
+    }
+    /**
+     * Register a Function URL id to the Account that owns it.
+     */
+    registerFunctionUrl(urlId, accountId) {
+        this.functionUrlAccountIds.set(urlId, accountId);
+    }
+    /**
+     * Forget a Function URL id, so its hostname stops resolving.
+     */
+    deregisterFunctionUrl(urlId) {
+        this.functionUrlAccountIds.delete(urlId);
+    }
+    /**
+     * Get the Account that owns a Function URL id, if it is registered.
+     */
+    accountIdForFunctionUrl(urlId) {
+        return this.functionUrlAccountIds.get(urlId);
+    }
+}
+//# sourceMappingURL=sim-lambda-url-registry.js.map

package/dist/service/lambda/registry/sim-lambda-url-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-url-registry.js","sourceRoot":"","sources":["../../../../src/service/lambda/registry/sim-lambda-url-registry.ts"],"names":[],"mappings":"AACA,OAAO,EACL,0BAA0B,GAE3B,MAAM,4CAA4C,CAAC;AAEpD;;;;;;;;GAQG;AACH,MAAM,OAAO,oBAAoB;IACd,qBAAqB,GAAG,IAAI,GAAG,EAG7C,CAAC;IAEJ;;OAEG;IACH,qBAAqB;QACnB,IAAI,KAAK,GAAG,0BAA0B,EAAE,CAAC;QAEzC,OAAO,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7C,mDAAmD;YACnD,KAAK,GAAG,0BAA0B,EAAE,CAAC;QACvC,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,mBAAmB,CACjB,KAA6B,EAC7B,SAA0B;QAE1B,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACnD,CAAC;IAED;;OAEG;IACH,qBAAqB,CAAC,KAA6B;QACjD,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC;IAED;;OAEG;IACH,uBAAuB,CACrB,KAA6B;QAE7B,OAAO,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;CACF"}

package/dist/service/lambda/sdk/sim-lambda-sdk-command-router.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda-sdk-command-router.d.ts","sourceRoot":"","sources":["../../../../src/service/lambda/sdk/sim-lambda-sdk-command-router.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACzB,MAAM,uBAAuB,CAAC;AAI/B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAElD;;GAEG;AACH,qBAAa,yBAA0B,YAAW,mBAAmB;IACnE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0C;IAEjE,YAAY,SAAS,EAAE,SAAS,EA2B/B;IAED;;OAEG;IACH,qBAAqB,IAAI,SAAS,MAAM,EAAE,CAEzC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAEzD;CACF"}
+{"version":3,"file":"sim-lambda-sdk-command-router.d.ts","sourceRoot":"","sources":["../../../../src/service/lambda/sdk/sim-lambda-sdk-command-router.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACzB,MAAM,uBAAuB,CAAC;AAY/B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAElD;;GAEG;AACH,qBAAa,yBAA0B,YAAW,mBAAmB;IACnE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0C;IAEjE,YAAY,SAAS,EAAE,SAAS,EA2F/B;IAED;;OAEG;IACH,qBAAqB,IAAI,SAAS,MAAM,EAAE,CAEzC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAEzD;CACF"}

package/dist/service/lambda/sdk/sim-lambda-sdk-command-router.js

@@ -18,6 +18,38 @@ export class SimLambdaSdkCommandRouter {
                 "InvokeCommand",
                 async (command, context) => await simLambda.invoke(command, simSdkCallerOptions(context)),
             ],
+            [
+                "CreateFunctionUrlConfigCommand",
+                async (command, context) => await simLambda.createFunctionUrlConfig(command, simSdkCallerOptions(context)),
+            ],
+            [
+                "GetFunctionUrlConfigCommand",
+                async (command, context) => await simLambda.getFunctionUrlConfig(command, simSdkCallerOptions(context)),
+            ],
+            [
+                "UpdateFunctionUrlConfigCommand",
+                async (command, context) => await simLambda.updateFunctionUrlConfig(command, simSdkCallerOptions(context)),
+            ],
+            [
+                "DeleteFunctionUrlConfigCommand",
+                async (command, context) => await simLambda.deleteFunctionUrlConfig(command, simSdkCallerOptions(context)),
+            ],
+            [
+                "AddPermissionCommand",
+                async (command, context) => await simLambda.addPermission(command, simSdkCallerOptions(context)),
+            ],
+            [
+                "RemovePermissionCommand",
+                async (command, context) => await simLambda.removePermission(command, simSdkCallerOptions(context)),
+            ],
+            [
+                "GetPolicyCommand",
+                async (command, context) => await simLambda.getPolicy(command, simSdkCallerOptions(context)),
+            ],
+            [
+                "ListFunctionUrlConfigsCommand",
+                async (command, context) => await simLambda.listFunctionUrlConfigs(command, simSdkCallerOptions(context)),
+            ],
         ]);
     }
     /**

package/dist/service/lambda/sdk/sim-lambda-sdk-command-router.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda-sdk-command-router.js","sourceRoot":"","sources":["../../../../src/service/lambda/sdk/sim-lambda-sdk-command-router.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,GAGpB,MAAM,uBAAuB,CAAC;AAM/B;;GAEG;AACH,MAAM,OAAO,yBAAyB;IACnB,MAAM,CAA0C;IAEjE,YAAY,SAAoB;QAC9B,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,CAA6B;YAChD;gBACE,uBAAuB;gBACvB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,SAAS,CAAC,cAAc,CAC5B,OAAmC,EACnC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,oBAAoB;gBACpB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,SAAS,CAAC,WAAW,CACzB,OAAgC,EAChC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,eAAe;gBACf,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,SAAS,CAAC,MAAM,CACpB,OAA2B,EAC3B,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;SACF,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,qBAAqB;QACnB,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAmB;QACvB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACtC,CAAC;CACF"}
+{"version":3,"file":"sim-lambda-sdk-command-router.js","sourceRoot":"","sources":["../../../../src/service/lambda/sdk/sim-lambda-sdk-command-router.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,GAGpB,MAAM,uBAAuB,CAAC;AAc/B;;GAEG;AACH,MAAM,OAAO,yBAAyB;IACnB,MAAM,CAA0C;IAEjE,YAAY,SAAoB;QAC9B,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,CAA6B;YAChD;gBACE,uBAAuB;gBACvB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,SAAS,CAAC,cAAc,CAC5B,OAAmC,EACnC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,oBAAoB;gBACpB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,SAAS,CAAC,WAAW,CACzB,OAAgC,EAChC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,eAAe;gBACf,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,SAAS,CAAC,MAAM,CACpB,OAA2B,EAC3B,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,gCAAgC;gBAChC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,SAAS,CAAC,uBAAuB,CACrC,OAA4C,EAC5C,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,6BAA6B;gBAC7B,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,SAAS,CAAC,oBAAoB,CAClC,OAAyC,EACzC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,gCAAgC;gBAChC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,SAAS,CAAC,uBAAuB,CACrC,OAA4C,EAC5C,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,gCAAgC;gBAChC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,SAAS,CAAC,uBAAuB,CACrC,OAA4C,EAC5C,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,sBAAsB;gBACtB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,SAAS,CAAC,aAAa,CAC3B,OAAkC,EAClC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,yBAAyB;gBACzB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,SAAS,CAAC,gBAAgB,CAC9B,OAAqC,EACrC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,kBAAkB;gBAClB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,SAAS,CAAC,SAAS,CACvB,OAA8B,EAC9B,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,+BAA+B;gBAC/B,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,SAAS,CAAC,sBAAsB,CACpC,OAA2C,EAC3C,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;SACF,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,qBAAqB;QACnB,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAmB;QACvB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACtC,CAAC;CACF"}

package/dist/service/lambda/serve/auth/sim-lambda-url-authorizer.d.ts

@@ -0,0 +1,46 @@
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimIamAuthorizationDecision, SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimLambdaFunction } from "../../function/sim-lambda-function.js";
+import type { SimLambdaFunctionUrl } from "../../function/url/sim-lambda-function-url.js";
+/**
+ * The IAM action a Function URL invocation is authorized against.
+ *
+ * This is deliberately not `lambda:InvokeFunction`, which is what the Invoke
+ * API maps to. Real AWS separates the two so a policy can grant the HTTP
+ * endpoint without granting the SDK operation, and a test asserting on that
+ * distinction should see it hold here.
+ */
+export declare const simLambdaInvokeFunctionUrlAction = "lambda:InvokeFunctionUrl";
+interface SimLambdaUrlAuthorizerProperties {
+    readonly iam: SimIamInterServiceAuthZ;
+}
+interface SimLambdaUrlAuthorizationInput {
+    readonly simFunction: SimLambdaFunction;
+    readonly functionUrl: SimLambdaFunctionUrl;
+    readonly caller: SimAwsCaller;
+}
+/**
+ * Decides whether a caller may invoke a Function URL.
+ *
+ * The answer is a decision rather than a thrown error, because a refusal is an
+ * ordinary HTTP outcome here: the endpoint answers 403 in the shape real Lambda
+ * does, with nothing to propagate to a caller in process.
+ *
+ * Both sides of Lambda authorization are evaluated: the caller's identity
+ * policies, and the function's own resource policy, which is the only thing
+ * that can allow a principal from another Account.
+ */
+export declare class SimLambdaUrlAuthorizer {
+    private readonly iam;
+    constructor(properties: SimLambdaUrlAuthorizerProperties);
+    /**
+     * Evaluate `lambda:InvokeFunctionUrl` for a caller against a Function URL.
+     *
+     * The URL's auth type is supplied as `lambda:FunctionUrlAuthType`, which is
+     * what a grant conditions on in practice: a permission granted for `AWS_IAM`
+     * should not also open a URL later switched to `NONE`.
+     */
+    authorize(input: SimLambdaUrlAuthorizationInput): SimIamAuthorizationDecision;
+}
+export {};
+//# sourceMappingURL=sim-lambda-url-authorizer.d.ts.map

package/dist/service/lambda/serve/auth/sim-lambda-url-authorizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-url-authorizer.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/serve/auth/sim-lambda-url-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EACV,2BAA2B,EAC3B,uBAAuB,EACxB,MAAM,wDAAwD,CAAC;AAGhE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+CAA+C,CAAC;AAE1F;;;;;;;GAOG;AACH,eAAO,MAAM,gCAAgC,6BAA6B,CAAC;AAE3E,UAAU,gCAAgC;IACxC,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;CACvC;AAED,UAAU,8BAA8B;IACtC,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAC;IACxC,QAAQ,CAAC,WAAW,EAAE,oBAAoB,CAAC;IAC3C,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;CAC/B;AAED;;;;;;;;;;GAUG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA0B;IAE9C,YAAY,UAAU,EAAE,gCAAgC,EAEvD;IAED;;;;;;OAMG;IACH,SAAS,CACP,KAAK,EAAE,8BAA8B,GACpC,2BAA2B,CAU7B;CACF"}

package/dist/service/lambda/serve/auth/sim-lambda-url-authorizer.js

@@ -0,0 +1,47 @@
+import { simLambdaResourcePolicies } from "../../command/authorize/sim-lambda-resource-policies.js";
+import { simLambdaFunctionUrlAuthTypeConditionKey } from "../../function/policy/sim-lambda-permission.js";
+/**
+ * The IAM action a Function URL invocation is authorized against.
+ *
+ * This is deliberately not `lambda:InvokeFunction`, which is what the Invoke
+ * API maps to. Real AWS separates the two so a policy can grant the HTTP
+ * endpoint without granting the SDK operation, and a test asserting on that
+ * distinction should see it hold here.
+ */
+export const simLambdaInvokeFunctionUrlAction = "lambda:InvokeFunctionUrl";
+/**
+ * Decides whether a caller may invoke a Function URL.
+ *
+ * The answer is a decision rather than a thrown error, because a refusal is an
+ * ordinary HTTP outcome here: the endpoint answers 403 in the shape real Lambda
+ * does, with nothing to propagate to a caller in process.
+ *
+ * Both sides of Lambda authorization are evaluated: the caller's identity
+ * policies, and the function's own resource policy, which is the only thing
+ * that can allow a principal from another Account.
+ */
+export class SimLambdaUrlAuthorizer {
+    iam;
+    constructor(properties) {
+        this.iam = properties.iam;
+    }
+    /**
+     * Evaluate `lambda:InvokeFunctionUrl` for a caller against a Function URL.
+     *
+     * The URL's auth type is supplied as `lambda:FunctionUrlAuthType`, which is
+     * what a grant conditions on in practice: a permission granted for `AWS_IAM`
+     * should not also open a URL later switched to `NONE`.
+     */
+    authorize(input) {
+        return this.iam.authorize({
+            action: simLambdaInvokeFunctionUrlAction,
+            resource: input.simFunction.arn,
+            caller: input.caller,
+            resourcePolicies: simLambdaResourcePolicies(input.simFunction),
+            conditionContext: {
+                [simLambdaFunctionUrlAuthTypeConditionKey]: input.functionUrl.authType,
+            },
+        });
+    }
+}
+//# sourceMappingURL=sim-lambda-url-authorizer.js.map

package/dist/service/lambda/serve/auth/sim-lambda-url-authorizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-url-authorizer.js","sourceRoot":"","sources":["../../../../../src/service/lambda/serve/auth/sim-lambda-url-authorizer.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,yBAAyB,EAAE,MAAM,yDAAyD,CAAC;AACpG,OAAO,EAAE,wCAAwC,EAAE,MAAM,gDAAgD,CAAC;AAI1G;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,0BAA0B,CAAC;AAY3E;;;;;;;;;;GAUG;AACH,MAAM,OAAO,sBAAsB;IAChB,GAAG,CAA0B;IAE9C,YAAY,UAA4C;QACtD,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;;;;;OAMG;IACH,SAAS,CACP,KAAqC;QAErC,OAAO,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YACxB,MAAM,EAAE,gCAAgC;YACxC,QAAQ,EAAE,KAAK,CAAC,WAAW,CAAC,GAAG;YAC/B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,gBAAgB,EAAE,yBAAyB,CAAC,KAAK,CAAC,WAAW,CAAC;YAC9D,gBAAgB,EAAE;gBAChB,CAAC,wCAAwC,CAAC,EAAE,KAAK,CAAC,WAAW,CAAC,QAAQ;aACvE;SACF,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/lambda/serve/event/sim-lambda-url-body-encoding.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Decides how a Function URL request or response body crosses the boundary
+ * between HTTP bytes and the string a handler event carries.
+ *
+ * Real Lambda passes text bodies through as UTF-8 strings and base64-encodes
+ * everything else, telling the handler which happened with isBase64Encoded.
+ */
+export declare class SimLambdaUrlBodyEncoding {
+    /**
+     * Whether a content type's body is passed to the handler as text.
+     *
+     * An absent content type is treated as binary, as Lambda does, because
+     * nothing says the bytes are decodable text.
+     */
+    isText(contentType: string | null): boolean;
+    /**
+     * Encode request body bytes for the handler event.
+     */
+    encode(bytes: Uint8Array, contentType: string | null): string;
+    /**
+     * Decode a handler's response body into the bytes sent to the client.
+     */
+    decode(body: string, isBase64Encoded: boolean): Uint8Array | string;
+}
+//# sourceMappingURL=sim-lambda-url-body-encoding.d.ts.map

package/dist/service/lambda/serve/event/sim-lambda-url-body-encoding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-url-body-encoding.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/serve/event/sim-lambda-url-body-encoding.ts"],"names":[],"mappings":"AAOA;;;;;;GAMG;AACH,qBAAa,wBAAwB;IACnC;;;;;OAKG;IACH,MAAM,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAgB1C;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAM5D;IAED;;OAEG;IACH,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,GAAG,UAAU,GAAG,MAAM,CAMlE;CACF"}