@kensio/yulin 0.35.0 → 0.36.0

package/dist/service/lambda/serve/response/sim-lambda-url-response-builder.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Turns a Function URL handler result into the HTTP response the client sees.
+ *
+ * Real Lambda accepts two shapes here: a structured response carrying a
+ * statusCode, or any other value, which it wraps in a 200 JSON response. Both
+ * are supported so handlers written either way behave as they would on AWS.
+ */
+export declare class SimLambdaUrlResponseBuilder {
+    private readonly bodyEncoding;
+    /**
+     * Build the HTTP response for one handler result.
+     */
+    build(result: unknown): Response;
+    /**
+     * Whether the handler returned a structured HTTP response rather than a
+     * value to be JSON-encoded.
+     */
+    private isStructuredResult;
+    private structuredResponse;
+}
+//# sourceMappingURL=sim-lambda-url-response-builder.d.ts.map

package/dist/service/lambda/serve/response/sim-lambda-url-response-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-url-response-builder.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/serve/response/sim-lambda-url-response-builder.ts"],"names":[],"mappings":"AAQA;;;;;;GAMG;AACH,qBAAa,2BAA2B;IACtC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAkC;IAE/D;;OAEG;IACH,KAAK,CAAC,MAAM,EAAE,OAAO,GAAG,QAAQ,CAS/B;IAED;;;OAGG;IACH,OAAO,CAAC,kBAAkB;IAW1B,OAAO,CAAC,kBAAkB;CAkC3B"}

package/dist/service/lambda/serve/response/sim-lambda-url-response-builder.js

@@ -0,0 +1,57 @@
+import { SimLambdaUrlBodyEncoding } from "../event/sim-lambda-url-body-encoding.js";
+const jsonContentType = "application/json";
+/**
+ * Turns a Function URL handler result into the HTTP response the client sees.
+ *
+ * Real Lambda accepts two shapes here: a structured response carrying a
+ * statusCode, or any other value, which it wraps in a 200 JSON response. Both
+ * are supported so handlers written either way behave as they would on AWS.
+ */
+export class SimLambdaUrlResponseBuilder {
+    bodyEncoding = new SimLambdaUrlBodyEncoding();
+    /**
+     * Build the HTTP response for one handler result.
+     */
+    build(result) {
+        if (this.isStructuredResult(result)) {
+            return this.structuredResponse(result);
+        }
+        return Response.json(result ?? null, {
+            status: 200,
+            headers: { "content-type": jsonContentType },
+        });
+    }
+    /**
+     * Whether the handler returned a structured HTTP response rather than a
+     * value to be JSON-encoded.
+     */
+    isStructuredResult(result) {
+        return (typeof result === "object" &&
+            result !== null &&
+            "statusCode" in result &&
+            typeof result.statusCode === "number");
+    }
+    structuredResponse(result) {
+        const headers = new Headers();
+        const resultHeaders = Object.entries(result.headers ?? {});
+        const resultCookies = result.cookies ?? [];
+        for (const [name, value] of resultHeaders) {
+            headers.set(name, String(value));
+        }
+        for (const cookie of resultCookies) {
+            headers.append("set-cookie", cookie);
+        }
+        if (!headers.has("content-type")) {
+            headers.set("content-type", jsonContentType);
+        }
+        const body = this.bodyEncoding.decode(result.body ?? "", result.isBase64Encoded ?? false);
+        return new Response(
+        // An empty body is sent as no body at all, so statuses that must not
+        // carry one, such as 204, stay valid responses.
+        body.length === 0 ? null : body, {
+            status: result.statusCode,
+            headers,
+        });
+    }
+}
+//# sourceMappingURL=sim-lambda-url-response-builder.js.map

package/dist/service/lambda/serve/response/sim-lambda-url-response-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-url-response-builder.js","sourceRoot":"","sources":["../../../../../src/service/lambda/serve/response/sim-lambda-url-response-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AAMpF,MAAM,eAAe,GAAG,kBAAkB,CAAC;AAE3C;;;;;;GAMG;AACH,MAAM,OAAO,2BAA2B;IACrB,YAAY,GAAG,IAAI,wBAAwB,EAAE,CAAC;IAE/D;;OAEG;IACH,KAAK,CAAC,MAAe;QACnB,IAAI,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACzC,CAAC;QAED,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,EAAE;YACnC,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE,cAAc,EAAE,eAAe,EAAE;SAC7C,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACK,kBAAkB,CACxB,MAAe;QAEf,OAAO,CACL,OAAO,MAAM,KAAK,QAAQ;YAC1B,MAAM,KAAK,IAAI;YACf,YAAY,IAAI,MAAM;YACtB,OAAQ,MAAqC,CAAC,UAAU,KAAK,QAAQ,CACtE,CAAC;IACJ,CAAC;IAEO,kBAAkB,CACxB,MAA4C;QAE5C,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;QAC9B,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QAC3D,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;QAE3C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,aAAa,EAAE,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACnC,CAAC;QAED,KAAK,MAAM,MAAM,IAAI,aAAa,EAAE,CAAC;YACnC,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACvC,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CACnC,MAAM,CAAC,IAAI,IAAI,EAAE,EACjB,MAAM,CAAC,eAAe,IAAI,KAAK,CAChC,CAAC;QAEF,OAAO,IAAI,QAAQ;QACjB,qEAAqE;QACrE,gDAAgD;QAChD,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAC/B;YACE,MAAM,EAAE,MAAM,CAAC,UAAU;YACzB,OAAO;SACR,CACF,CAAC;IACJ,CAAC;CACF"}

package/dist/service/lambda/serve/sim-lambda-controller.d.ts

@@ -0,0 +1,42 @@
+import type { SimAwsServiceController, SimAwsServiceRequest } from "../../../serve/controller/sim-service-controller.js";
+import { SimAws } from "../../aws/sim-aws.js";
+import { SimLambdaUrlRouter } from "./sim-lambda-url-router.js";
+interface SimLambdaServiceControllerProperties {
+    readonly simAws?: SimAws;
+    readonly router?: SimLambdaUrlRouter;
+}
+/**
+ * Localhost HTTP controller for simulated Lambda Function URLs.
+ *
+ * A NONE auth URL is invokable by anyone on real AWS, so the request is not
+ * attributed to a simulated principal. An AWS_IAM URL is invokable only by a
+ * caller allowed `lambda:InvokeFunctionUrl` on the function, evaluated against
+ * the principal resolved at the HTTP boundary.
+ *
+ * Either way the function itself runs as its execution Role, as it does for
+ * any other invocation. Who invoked it and what it runs as are separate
+ * questions on real Lambda, and stay separate here.
+ */
+export declare class SimLambdaServiceController implements SimAwsServiceController {
+    private readonly router;
+    private readonly eventBuilder;
+    private readonly responseBuilder;
+    private readonly errorResponse;
+    constructor(properties?: SimLambdaServiceControllerProperties);
+    /**
+     * Handle an HTTP request routed to a simulated Lambda Function URL.
+     */
+    handleRequest(serviceRequest: SimAwsServiceRequest): Promise<Response>;
+    /**
+     * Invoke through an `AWS_IAM` Function URL, if the caller may.
+     *
+     * The caller was resolved at the HTTP boundary, from a signature or from a
+     * named principal, and is anonymous when the request offered neither.
+     * Anonymous owns no policies, so an unsigned request is refused by the same
+     * evaluation that admits a permitted one, rather than by a special case.
+     */
+    private invokeAuthenticated;
+    private invoke;
+}
+export {};
+//# sourceMappingURL=sim-lambda-controller.d.ts.map

package/dist/service/lambda/serve/sim-lambda-controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-controller.d.ts","sourceRoot":"","sources":["../../../../src/service/lambda/serve/sim-lambda-controller.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,uBAAuB,EACvB,oBAAoB,EACrB,MAAM,qDAAqD,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAI9C,OAAO,EAEL,kBAAkB,EACnB,MAAM,4BAA4B,CAAC;AAIpC,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,kBAAkB,CAAC;CACtC;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,0BAA2B,YAAW,uBAAuB;IACxE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;IAC5C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA2B;IACxD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAqC;IACrE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAmC;IAEjE,YAAY,UAAU,GAAE,oCAAyC,EAQhE;IAED;;OAEG;IACG,aAAa,CAAC,cAAc,EAAE,oBAAoB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAc3E;IAED;;;;;;;OAOG;YACW,mBAAmB;YAkBnB,MAAM;CAqBrB"}

package/dist/service/lambda/serve/sim-lambda-controller.js

@@ -0,0 +1,82 @@
+import { SimAws } from "../../aws/sim-aws.js";
+import { SimLambdaUrlEventBuilder } from "./event/sim-lambda-url-event-builder.js";
+import { SimLambdaUrlErrorResponse } from "./response/sim-lambda-url-error-response.js";
+import { SimLambdaUrlResponseBuilder } from "./response/sim-lambda-url-response-builder.js";
+import { SimLambdaUrlRouter, } from "./sim-lambda-url-router.js";
+import { SimLambdaUrlAuthorizer } from "./auth/sim-lambda-url-authorizer.js";
+/**
+ * Localhost HTTP controller for simulated Lambda Function URLs.
+ *
+ * A NONE auth URL is invokable by anyone on real AWS, so the request is not
+ * attributed to a simulated principal. An AWS_IAM URL is invokable only by a
+ * caller allowed `lambda:InvokeFunctionUrl` on the function, evaluated against
+ * the principal resolved at the HTTP boundary.
+ *
+ * Either way the function itself runs as its execution Role, as it does for
+ * any other invocation. Who invoked it and what it runs as are separate
+ * questions on real Lambda, and stay separate here.
+ */
+export class SimLambdaServiceController {
+    router;
+    eventBuilder;
+    responseBuilder = new SimLambdaUrlResponseBuilder();
+    errorResponse = new SimLambdaUrlErrorResponse();
+    constructor(properties = {}) {
+        const { simAws = new SimAws() } = properties;
+        this.router = properties.router ?? new SimLambdaUrlRouter({ simAws });
+        // Taken from the router rather than from properties, so a supplied router
+        // and the event timestamps always belong to the same simulation.
+        this.eventBuilder = new SimLambdaUrlEventBuilder({
+            clock: this.router.simAws,
+        });
+    }
+    /**
+     * Handle an HTTP request routed to a simulated Lambda Function URL.
+     */
+    async handleRequest(serviceRequest) {
+        const route = this.router.route(serviceRequest.target);
+        if (route === undefined) {
+            return this.errorResponse.notFound();
+        }
+        if (route.functionUrl.authType === "NONE") {
+            // A NONE URL is invokable by anyone on real AWS, so the request is not
+            // attributed to a principal and the event describes no caller.
+            return await this.invoke(route, serviceRequest.request);
+        }
+        return await this.invokeAuthenticated(route, serviceRequest);
+    }
+    /**
+     * Invoke through an `AWS_IAM` Function URL, if the caller may.
+     *
+     * The caller was resolved at the HTTP boundary, from a signature or from a
+     * named principal, and is anonymous when the request offered neither.
+     * Anonymous owns no policies, so an unsigned request is refused by the same
+     * evaluation that admits a permitted one, rather than by a special case.
+     */
+    async invokeAuthenticated(route, serviceRequest) {
+        const { caller } = serviceRequest;
+        const decision = new SimLambdaUrlAuthorizer({ iam: route.iam }).authorize({
+            simFunction: route.simFunction,
+            functionUrl: route.functionUrl,
+            caller: caller.toCaller(),
+        });
+        if (decision.isDenied) {
+            return this.errorResponse.forbidden();
+        }
+        return await this.invoke(route, serviceRequest.request, caller);
+    }
+    async invoke(route, request, authenticatedCaller) {
+        try {
+            const event = await this.eventBuilder.build(request, route.functionUrl, authenticatedCaller);
+            return this.responseBuilder.build(await route.simFunction.invoke(event));
+        }
+        catch {
+            // Real Function URLs report an unhandled function error as a bad
+            // gateway, with the error itself only visible in the function's logs.
+            // Reading the request body can fail the same way, so building the event
+            // is inside this too.
+            return this.errorResponse.internalServerError();
+        }
+    }
+}
+//# sourceMappingURL=sim-lambda-controller.js.map

package/dist/service/lambda/serve/sim-lambda-controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-controller.js","sourceRoot":"","sources":["../../../../src/service/lambda/serve/sim-lambda-controller.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AACnF,OAAO,EAAE,yBAAyB,EAAE,MAAM,6CAA6C,CAAC;AACxF,OAAO,EAAE,2BAA2B,EAAE,MAAM,+CAA+C,CAAC;AAC5F,OAAO,EAEL,kBAAkB,GACnB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAQ7E;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,0BAA0B;IACpB,MAAM,CAAqB;IAC3B,YAAY,CAA2B;IACvC,eAAe,GAAG,IAAI,2BAA2B,EAAE,CAAC;IACpD,aAAa,GAAG,IAAI,yBAAyB,EAAE,CAAC;IAEjE,YAAY,UAAU,GAAyC,EAAE;QAC/D,MAAM,EAAE,MAAM,GAAG,IAAI,MAAM,EAAE,EAAE,GAAG,UAAU,CAAC;QAC7C,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,IAAI,IAAI,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QACtE,0EAA0E;QAC1E,iEAAiE;QACjE,IAAI,CAAC,YAAY,GAAG,IAAI,wBAAwB,CAAC;YAC/C,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;SAC1B,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,cAAoC;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAEvD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC;QACvC,CAAC;QAED,IAAI,KAAK,CAAC,WAAW,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;YAC1C,uEAAuE;YACvE,+DAA+D;YAC/D,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC;QAC1D,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IAC/D,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,mBAAmB,CAC/B,KAAgC,EAChC,cAAoC;QAEpC,MAAM,EAAE,MAAM,EAAE,GAAG,cAAc,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAI,sBAAsB,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,SAAS,CAAC;YACxE,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;SAC1B,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC;QACxC,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAClE,CAAC;IAEO,KAAK,CAAC,MAAM,CAClB,KAAgC,EAChC,OAAgB,EAChB,mBAAyC;QAEzC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CACzC,OAAO,EACP,KAAK,CAAC,WAAW,EACjB,mBAAmB,CACpB,CAAC;YAEF,OAAO,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3E,CAAC;QAAC,MAAM,CAAC;YACP,iEAAiE;YACjE,sEAAsE;YACtE,wEAAwE;YACxE,sBAAsB;YACtB,OAAO,IAAI,CAAC,aAAa,CAAC,mBAAmB,EAAE,CAAC;QAClD,CAAC;IACH,CAAC;CACF"}

package/dist/service/lambda/serve/sim-lambda-url-router.d.ts

@@ -0,0 +1,44 @@
+import type { SimAwsServiceTarget } from "../../../serve/controller/sim-service-controller.js";
+import { SimAws } from "../../aws/sim-aws.js";
+import type { SimLambdaFunction } from "../function/sim-lambda-function.js";
+import type { SimLambdaFunctionUrl } from "../function/url/sim-lambda-function-url.js";
+import type { SimLambdaUrlRegistry } from "../registry/sim-lambda-url-registry.js";
+import type { SimIamInterServiceAuthZ } from "../../iam/authorize/sim-iam-inter-service-auth-z.js";
+export interface SimLambdaFunctionUrlRoute {
+    readonly functionUrl: SimLambdaFunctionUrl;
+    readonly simFunction: SimLambdaFunction;
+    /**
+     * IAM of the Account that owns the function, which is what an `AWS_IAM`
+     * Function URL evaluates its invoke permission against.
+     */
+    readonly iam: SimIamInterServiceAuthZ;
+}
+interface SimLambdaUrlRouterProperties {
+    readonly simAws?: SimAws;
+    readonly urlRegistry?: SimLambdaUrlRegistry;
+}
+/**
+ * Routes a served Function URL request to the function behind it.
+ *
+ * The request hostname gives the URL id and the region, but not the Account.
+ * The registry supplies that missing hop, and the Account/Region scope it
+ * names owns the Function URL and the function.
+ */
+export declare class SimLambdaUrlRouter {
+    /**
+     * The simulation this router routes within.
+     *
+     * Exposed so collaborators that need the same simulation, such as the clock
+     * stamping invocation events, take it from here rather than being given a
+     * second SimAws that could be a different one.
+     */
+    readonly simAws: SimAws;
+    private readonly urlRegistry;
+    constructor(properties?: SimLambdaUrlRouterProperties);
+    /**
+     * Find the Function URL and function a request target addresses.
+     */
+    route(target: SimAwsServiceTarget): SimLambdaFunctionUrlRoute | undefined;
+}
+export {};
+//# sourceMappingURL=sim-lambda-url-router.d.ts.map

package/dist/service/lambda/serve/sim-lambda-url-router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-url-router.d.ts","sourceRoot":"","sources":["../../../../src/service/lambda/serve/sim-lambda-url-router.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qDAAqD,CAAC;AAC/F,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,KAAK,EACV,oBAAoB,EAErB,MAAM,4CAA4C,CAAC;AACpD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AACnF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qDAAqD,CAAC;AAEnG,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,WAAW,EAAE,oBAAoB,CAAC;IAC3C,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAC;IACxC;;;OAGG;IACH,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;CACvC;AAED,UAAU,4BAA4B;IACpC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,oBAAoB,CAAC;CAC7C;AAED;;;;;;GAMG;AACH,qBAAa,kBAAkB;IAC7B;;;;;;OAMG;IACH,SAAgB,MAAM,EAAE,MAAM,CAAC;IAE/B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAuB;IAEnD,YAAY,UAAU,GAAE,4BAAiC,EAIxD;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,EAAE,mBAAmB,GAAG,yBAAyB,GAAG,SAAS,CAwBxE;CACF"}

package/dist/service/lambda/serve/sim-lambda-url-router.js

@@ -0,0 +1,47 @@
+import { SimAws } from "../../aws/sim-aws.js";
+/**
+ * Routes a served Function URL request to the function behind it.
+ *
+ * The request hostname gives the URL id and the region, but not the Account.
+ * The registry supplies that missing hop, and the Account/Region scope it
+ * names owns the Function URL and the function.
+ */
+export class SimLambdaUrlRouter {
+    /**
+     * The simulation this router routes within.
+     *
+     * Exposed so collaborators that need the same simulation, such as the clock
+     * stamping invocation events, take it from here rather than being given a
+     * second SimAws that could be a different one.
+     */
+    simAws;
+    urlRegistry;
+    constructor(properties = {}) {
+        this.simAws = properties.simAws ?? new SimAws();
+        this.urlRegistry =
+            properties.urlRegistry ?? this.simAws.lambdaUrlRegistry();
+    }
+    /**
+     * Find the Function URL and function a request target addresses.
+     */
+    route(target) {
+        const urlId = target.resourceName;
+        const accountId = this.urlRegistry.accountIdForFunctionUrl(urlId);
+        if (accountId === undefined) {
+            return undefined;
+        }
+        const scope = this.simAws.accountRegionScope(accountId, target.regionName);
+        const lambda = scope.lambda();
+        const functionUrl = lambda.getSimFunctionUrlById(urlId);
+        if (functionUrl === undefined) {
+            return undefined;
+        }
+        const simFunction = lambda.getSimFunctionByName(functionUrl.functionName);
+        /* v8 ignore if -- defensive check: a URL cannot outlive its function */
+        if (simFunction === undefined) {
+            return undefined;
+        }
+        return { functionUrl, simFunction, iam: scope.iam() };
+    }
+}
+//# sourceMappingURL=sim-lambda-url-router.js.map

package/dist/service/lambda/serve/sim-lambda-url-router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-url-router.js","sourceRoot":"","sources":["../../../../src/service/lambda/serve/sim-lambda-url-router.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAwB9C;;;;;;GAMG;AACH,MAAM,OAAO,kBAAkB;IAC7B;;;;;;OAMG;IACa,MAAM,CAAS;IAEd,WAAW,CAAuB;IAEnD,YAAY,UAAU,GAAiC,EAAE;QACvD,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAChD,IAAI,CAAC,WAAW;YACd,UAAU,CAAC,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;IAC9D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAA2B;QAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,YAAsC,CAAC;QAC5D,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC;QAElE,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;QAC3E,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QAC9B,MAAM,WAAW,GAAG,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;QAExD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,CAAC,oBAAoB,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;QAE1E,wEAAwE;QACxE,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC;IACxD,CAAC;CACF"}

package/dist/service/lambda/sim-lambda.d.ts

@@ -8,9 +8,9 @@ import type { SimCfnServiceResourceFactory } from "../cloudformation/resource/fa
 import type { SimLambdaCodeStore } from "./function/code/store/sim-lambda-code-store.js";
 import type { SimLambdaVmSdkModuleProvider } from "./function/code/vm/sdk/sim-lambda-vm-sdk-module-provider.js";
 import type { SimLambdaFunction, SimLambdaFunctionName } from "./function/sim-lambda-function.js";
-import type { SimCreateFunctionCommand, SimCreateFunctionCommandOutput } from "./command/create-function/create-function.command.js";
-import type { SimGetFunctionCommand, SimGetFunctionCommandOutput } from "./command/get-function/get-function.command.js";
-import type { SimInvokeCommand, SimInvokeCommandOutput } from "./command/invoke/invoke.command.js";
+import type { SimAddPermissionCommand, SimAddPermissionCommandOutput, SimCreateFunctionCommand, SimCreateFunctionCommandOutput, SimCreateFunctionUrlConfigCommand, SimCreateFunctionUrlConfigCommandOutput, SimDeleteFunctionUrlConfigCommand, SimDeleteFunctionUrlConfigCommandOutput, SimGetFunctionCommand, SimGetFunctionCommandOutput, SimGetFunctionUrlConfigCommand, SimGetFunctionUrlConfigCommandOutput, SimGetPolicyCommand, SimGetPolicyCommandOutput, SimInvokeCommand, SimInvokeCommandOutput, SimListFunctionUrlConfigsCommand, SimListFunctionUrlConfigsCommandOutput, SimRemovePermissionCommand, SimRemovePermissionCommandOutput, SimUpdateFunctionUrlConfigCommand, SimUpdateFunctionUrlConfigCommandOutput } from "./command/sim-lambda-command.types.js";
+import type { SimLambdaFunctionUrl, SimLambdaFunctionUrlId } from "./function/url/sim-lambda-function-url.js";
+import { SimLambdaUrlRegistry } from "./registry/sim-lambda-url-registry.js";
 export interface SimLambdaRequestOptions {
     readonly caller?: SimAwsCaller;
 }
@@ -21,18 +21,18 @@ interface SimLambdaProperties {
     readonly runAsOwner?: SimAwsRunAsOwner;
     readonly codeStore?: SimLambdaCodeStore;
     readonly vmSdkModuleProvider?: SimLambdaVmSdkModuleProvider;
+    readonly urlRegistry?: SimLambdaUrlRegistry;
 }
 /**
  * Simulated Lambda. Handles SDK commands. Emulates AWS behaviour and state.
  */
 export declare class SimLambda {
     private readonly functions;
-    private readonly accountRegionScope;
-    private readonly iam;
-    private readonly background;
-    private readonly runAsOwner;
-    private readonly codeStore;
-    private readonly vmSdkModuleProvider;
+    private readonly functionUrls;
+    private readonly functionLookup;
+    private readonly functionCommands;
+    private readonly functionUrlCommands;
+    private readonly permissionCommands;
     /**
      * Shared across function creations so a conflicting environment variable is
      * only reported once for this simulated Lambda.
@@ -53,10 +53,53 @@ export declare class SimLambda {
      * Handle an Invoke Command from the SDK.
      */
     invoke(command: SimInvokeCommand, options?: SimLambdaRequestOptions): Promise<SimInvokeCommandOutput>;
+    /**
+     * Handle a Create Function Url Config Command from the SDK.
+     */
+    createFunctionUrlConfig(command: SimCreateFunctionUrlConfigCommand, options?: SimLambdaRequestOptions): Promise<SimCreateFunctionUrlConfigCommandOutput>;
+    /**
+     * Handle a Get Function Url Config Command from the SDK.
+     */
+    getFunctionUrlConfig(command: SimGetFunctionUrlConfigCommand, options?: SimLambdaRequestOptions): Promise<SimGetFunctionUrlConfigCommandOutput>;
+    /**
+     * Handle an Update Function Url Config Command from the SDK.
+     */
+    updateFunctionUrlConfig(command: SimUpdateFunctionUrlConfigCommand, options?: SimLambdaRequestOptions): Promise<SimUpdateFunctionUrlConfigCommandOutput>;
+    /**
+     * Handle a Delete Function Url Config Command from the SDK.
+     */
+    deleteFunctionUrlConfig(command: SimDeleteFunctionUrlConfigCommand, options?: SimLambdaRequestOptions): Promise<SimDeleteFunctionUrlConfigCommandOutput>;
+    /**
+     * Handle a List Function Url Configs Command from the SDK.
+     */
+    listFunctionUrlConfigs(command: SimListFunctionUrlConfigsCommand, options?: SimLambdaRequestOptions): Promise<SimListFunctionUrlConfigsCommandOutput>;
+    /**
+     * Handle an Add Permission Command from the SDK.
+     */
+    addPermission(command: SimAddPermissionCommand, options?: SimLambdaRequestOptions): Promise<SimAddPermissionCommandOutput>;
+    /**
+     * Handle a Remove Permission Command from the SDK.
+     */
+    removePermission(command: SimRemovePermissionCommand, options?: SimLambdaRequestOptions): Promise<SimRemovePermissionCommandOutput>;
+    /**
+     * Handle a Get Policy Command from the SDK.
+     */
+    getPolicy(command: SimGetPolicyCommand, options?: SimLambdaRequestOptions): Promise<SimGetPolicyCommandOutput>;
     /**
      * Get a simulated Lambda function instance by name.
      */
     getSimFunctionByName(functionName: SimLambdaFunctionName | string): SimLambdaFunction | undefined;
+    /**
+     * Get a simulated Lambda function's Function URL, if it has one.
+     */
+    getSimFunctionUrl(functionName: SimLambdaFunctionName | string): SimLambdaFunctionUrl | undefined;
+    /**
+     * Get a simulated Lambda Function URL by the id in its hostname.
+     *
+     * This is how the localhost serving layer finds the Function URL a request
+     * was addressed to, once the registry has named the owning Account.
+     */
+    getSimFunctionUrlById(urlId: SimLambdaFunctionUrlId): SimLambdaFunctionUrl | undefined;
     /**
      * Get this service's CloudFormation Resource factory.
      */

package/dist/service/lambda/sim-lambda.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda.d.ts","sourceRoot":"","sources":["../../../src/service/lambda/sim-lambda.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAEhF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AACvF,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,kDAAkD,CAAC;AAC1D,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,qEAAqE,CAAC;AAGxH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AACzF,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,6DAA6D,CAAC;AAEhH,OAAO,KAAK,EACV,iBAAiB,EAEjB,qBAAqB,EACtB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EACV,wBAAwB,EACxB,8BAA8B,EAC/B,MAAM,sDAAsD,CAAC;AAE9D,OAAO,KAAK,EACV,qBAAqB,EACrB,2BAA2B,EAC5B,MAAM,gDAAgD,CAAC;AAExD,OAAO,KAAK,EACV,gBAAgB,EAChB,sBAAsB,EACvB,MAAM,oCAAoC,CAAC;AAG5C,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED,UAAU,mBAAmB;IAC3B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,wBAAwB,CAAC;IACvD,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;IAC1C,QAAQ,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAC;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,kBAAkB,CAAC;IACxC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,4BAA4B,CAAC;CAC7D;AAED;;GAEG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAmC;IAE7D,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA2B;IAC9D,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA0B;IAC9C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmB;IAC9C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAiC;IAC3D,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CACO;IAC3C;;;OAGG;IACH,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAuC;IAE5E,OAAO,CAAC,QAAQ,CAAC,UAAU,CAEzB;IACF,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAuC;IAEjE,YAAY,UAAU,GAAE,mBAAwB,EAkB/C;IAED;;OAEG;IACG,cAAc,CAClB,OAAO,EAAE,wBAAwB,EACjC,OAAO,CAAC,EAAE,uBAAuB,GAChC,OAAO,CAAC,8BAA8B,CAAC,CAYzC;IAED;;OAEG;IACG,WAAW,CACf,OAAO,EAAE,qBAAqB,EAC9B,OAAO,CAAC,EAAE,uBAAuB,GAChC,OAAO,CAAC,2BAA2B,CAAC,CAQtC;IAED;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,gBAAgB,EACzB,OAAO,CAAC,EAAE,uBAAuB,GAChC,OAAO,CAAC,sBAAsB,CAAC,CAQjC;IAED;;OAEG;IACH,oBAAoB,CAClB,YAAY,EAAE,qBAAqB,GAAG,MAAM,GAC3C,iBAAiB,GAAG,SAAS,CAE/B;IAED;;OAEG;IACH,kBAAkB,IAAI,4BAA4B,CAEjD;IAED;;OAEG;IACH,gBAAgB,IAAI,mBAAmB,CAEtC;CACF"}
+{"version":3,"file":"sim-lambda.d.ts","sourceRoot":"","sources":["../../../src/service/lambda/sim-lambda.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAEhF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AACvF,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,kDAAkD,CAAC;AAC1D,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,qEAAqE,CAAC;AAExH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AACzF,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,6DAA6D,CAAC;AAGhH,OAAO,KAAK,EACV,iBAAiB,EAEjB,qBAAqB,EACtB,MAAM,mCAAmC,CAAC;AAG3C,OAAO,KAAK,EACV,uBAAuB,EACvB,6BAA6B,EAC7B,wBAAwB,EACxB,8BAA8B,EAC9B,iCAAiC,EACjC,uCAAuC,EACvC,iCAAiC,EACjC,uCAAuC,EACvC,qBAAqB,EACrB,2BAA2B,EAC3B,8BAA8B,EAC9B,oCAAoC,EACpC,mBAAmB,EACnB,yBAAyB,EACzB,gBAAgB,EAChB,sBAAsB,EACtB,gCAAgC,EAChC,sCAAsC,EACtC,0BAA0B,EAC1B,gCAAgC,EAChC,iCAAiC,EACjC,uCAAuC,EACxC,MAAM,uCAAuC,CAAC;AAG/C,OAAO,KAAK,EACV,oBAAoB,EACpB,sBAAsB,EACvB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAG7E,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED,UAAU,mBAAmB;IAC3B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,wBAAwB,CAAC;IACvD,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;IAC1C,QAAQ,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAC;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,kBAAkB,CAAC;IACxC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,4BAA4B,CAAC;IAC5D,QAAQ,CAAC,WAAW,CAAC,EAAE,oBAAoB,CAAC;CAC7C;AAED;;GAEG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAmC;IAC7D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA4B;IACzD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA0B;IACzD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA4B;IAC7D,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAA+B;IACnE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA8B;IAEjE;;;OAGG;IACH,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAuC;IAE5E,OAAO,CAAC,QAAQ,CAAC,UAAU,CAEzB;IACF,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAuC;IAEjE,YAAY,UAAU,GAAE,mBAAwB,EA8C/C;IAED;;OAEG;IACG,cAAc,CAClB,OAAO,EAAE,wBAAwB,EACjC,OAAO,CAAC,EAAE,uBAAuB,GAChC,OAAO,CAAC,8BAA8B,CAAC,CAEzC;IAED;;OAEG;IACG,WAAW,CACf,OAAO,EAAE,qBAAqB,EAC9B,OAAO,CAAC,EAAE,uBAAuB,GAChC,OAAO,CAAC,2BAA2B,CAAC,CAEtC;IAED;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,gBAAgB,EACzB,OAAO,CAAC,EAAE,uBAAuB,GAChC,OAAO,CAAC,sBAAsB,CAAC,CAEjC;IAED;;OAEG;IACG,uBAAuB,CAC3B,OAAO,EAAE,iCAAiC,EAC1C,OAAO,CAAC,EAAE,uBAAuB,GAChC,OAAO,CAAC,uCAAuC,CAAC,CAElD;IAED;;OAEG;IACG,oBAAoB,CACxB,OAAO,EAAE,8BAA8B,EACvC,OAAO,CAAC,EAAE,uBAAuB,GAChC,OAAO,CAAC,oCAAoC,CAAC,CAE/C;IAED;;OAEG;IACG,uBAAuB,CAC3B,OAAO,EAAE,iCAAiC,EAC1C,OAAO,CAAC,EAAE,uBAAuB,GAChC,OAAO,CAAC,uCAAuC,CAAC,CAElD;IAED;;OAEG;IACG,uBAAuB,CAC3B,OAAO,EAAE,iCAAiC,EAC1C,OAAO,CAAC,EAAE,uBAAuB,GAChC,OAAO,CAAC,uCAAuC,CAAC,CAElD;IAED;;OAEG;IACG,sBAAsB,CAC1B,OAAO,EAAE,gCAAgC,EACzC,OAAO,CAAC,EAAE,uBAAuB,GAChC,OAAO,CAAC,sCAAsC,CAAC,CAEjD;IAED;;OAEG;IACG,aAAa,CACjB,OAAO,EAAE,uBAAuB,EAChC,OAAO,CAAC,EAAE,uBAAuB,GAChC,OAAO,CAAC,6BAA6B,CAAC,CAExC;IAED;;OAEG;IACG,gBAAgB,CACpB,OAAO,EAAE,0BAA0B,EACnC,OAAO,CAAC,EAAE,uBAAuB,GAChC,OAAO,CAAC,gCAAgC,CAAC,CAE3C;IAED;;OAEG;IACG,SAAS,CACb,OAAO,EAAE,mBAAmB,EAC5B,OAAO,CAAC,EAAE,uBAAuB,GAChC,OAAO,CAAC,yBAAyB,CAAC,CAEpC;IAED;;OAEG;IACH,oBAAoB,CAClB,YAAY,EAAE,qBAAqB,GAAG,MAAM,GAC3C,iBAAiB,GAAG,SAAS,CAE/B;IAED;;OAEG;IACH,iBAAiB,CACf,YAAY,EAAE,qBAAqB,GAAG,MAAM,GAC3C,oBAAoB,GAAG,SAAS,CAElC;IAED;;;;;OAKG;IACH,qBAAqB,CACnB,KAAK,EAAE,sBAAsB,GAC5B,oBAAoB,GAAG,SAAS,CAElC;IAED;;OAEG;IACH,kBAAkB,IAAI,4BAA4B,CAEjD;IAED;;OAEG;IACH,gBAAgB,IAAI,mBAAmB,CAEtC;CACF"}

package/dist/service/lambda/sim-lambda.js

@@ -2,22 +2,24 @@ import { BackgroundTasks, } from "../../util/background/background.js";
 import { simAwsAccountRegionScopeFactory } from "../aws/sim-aws-account-region-scope.factory.js";
 import { SimIamAllowAllAuth, } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
 import { SimLambdaCloudFormationResourceFactory } from "./cfn/sim-cfn-lambda-resource-factory.js";
-import { CreateFunctionCommandHandler } from "./command/create-function/create-function.handler.js";
 import { SimLambdaEnvironmentConflicts } from "./function/environment/sim-lambda-environment-conflicts.js";
-import { GetFunctionCommandHandler } from "./command/get-function/get-function.handler.js";
-import { InvokeCommandHandler } from "./command/invoke/invoke.handler.js";
+import { SimLambdaFunctionCommands } from "./command/function/sim-lambda-function-commands.js";
+import { SimLambdaFunctionUrlCommands } from "./command/function-url/sim-lambda-function-url-commands.js";
+import { SimLambdaPermissionCommands } from "./command/permission/sim-lambda-permission-commands.js";
+import { SimLambdaFunctionLookup } from "./function/url/sim-lambda-function-lookup.js";
+import { SimLambdaFunctionUrlStore } from "./function/url/sim-lambda-function-url-store.js";
+import { SimLambdaUrlRegistry } from "./registry/sim-lambda-url-registry.js";
 import { SimLambdaSdkCommandRouter } from "./sdk/sim-lambda-sdk-command-router.js";
 /**
  * Simulated Lambda. Handles SDK commands. Emulates AWS behaviour and state.
  */
 export class SimLambda {
     functions = new Map();
-    accountRegionScope;
-    iam;
-    background;
-    runAsOwner;
-    codeStore;
-    vmSdkModuleProvider;
+    functionUrls;
+    functionLookup;
+    functionCommands;
+    functionUrlCommands;
+    permissionCommands;
     /**
      * Shared across function creations so a conflicting environment variable is
      * only reported once for this simulated Lambda.
@@ -26,56 +28,110 @@ export class SimLambda {
     cfnFactory = new SimLambdaCloudFormationResourceFactory(this);
     sdkRouter = new SimLambdaSdkCommandRouter(this);
     constructor(properties = {}) {
-        const { accountRegionScope = simAwsAccountRegionScopeFactory.make(), iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), codeStore, vmSdkModuleProvider, } = properties;
-        this.accountRegionScope = accountRegionScope;
-        this.iam = iam;
-        this.background = background;
-        this.codeStore = codeStore;
-        this.vmSdkModuleProvider = vmSdkModuleProvider;
-        // Ambient execution-role callers are tracked per owning SimAws instance.
-        // A standalone SimLambda is its own little universe, so it owns its own
-        // ambient callers.
-        this.runAsOwner = properties.runAsOwner ?? this;
+        const { accountRegionScope = simAwsAccountRegionScopeFactory.make(), iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), codeStore, vmSdkModuleProvider, 
+        // A standalone SimLambda is not reachable over HTTP, so its own
+        // registry is enough; a SimAws-created one shares the environment-wide
+        // registry the serving layer routes with.
+        urlRegistry = new SimLambdaUrlRegistry(), } = properties;
+        this.functionLookup = new SimLambdaFunctionLookup({
+            accountRegionScope,
+            functions: this.functions,
+        });
+        this.functionUrls = new SimLambdaFunctionUrlStore({
+            accountRegionScope,
+            urlRegistry,
+            clock: background,
+        });
+        this.functionUrlCommands = new SimLambdaFunctionUrlCommands({
+            functionUrls: this.functionUrls,
+            functions: this.functionLookup,
+            iam,
+            background,
+        });
+        this.permissionCommands = new SimLambdaPermissionCommands({
+            functions: this.functionLookup,
+            iam,
+            background,
+        });
+        this.functionCommands = new SimLambdaFunctionCommands({
+            accountRegionScope,
+            functions: this.functions,
+            iam,
+            background,
+            // Ambient execution-role callers are tracked per owning SimAws instance.
+            // A standalone SimLambda is its own little universe, so it owns its own
+            // ambient callers.
+            runAsOwner: properties.runAsOwner ?? this,
+            environmentConflicts: this.environmentConflicts,
+            codeStore,
+            vmSdkModuleProvider,
+        });
     }
     /**
      * Handle a Create Function Command from the SDK.
      */
     async createFunction(command, options) {
-        const handler = new CreateFunctionCommandHandler({
-            accountRegionScope: this.accountRegionScope,
-            functions: this.functions,
-            runAsOwner: this.runAsOwner,
-            iam: this.iam,
-            background: this.background,
-            codeStore: this.codeStore,
-            vmSdkModuleProvider: this.vmSdkModuleProvider,
-            environmentConflicts: this.environmentConflicts,
-        });
-        return await handler.handle(command, options);
+        return await this.functionCommands.create(command, options);
     }
     /**
      * Handle a Get Function Command from the SDK.
      */
     async getFunction(command, options) {
-        const handler = new GetFunctionCommandHandler({
-            accountRegionScope: this.accountRegionScope,
-            functions: this.functions,
-            iam: this.iam,
-            background: this.background,
-        });
-        return await handler.handle(command, options);
+        return await this.functionCommands.get(command, options);
     }
     /**
      * Handle an Invoke Command from the SDK.
      */
     async invoke(command, options) {
-        const handler = new InvokeCommandHandler({
-            accountRegionScope: this.accountRegionScope,
-            functions: this.functions,
-            iam: this.iam,
-            background: this.background,
-        });
-        return await handler.handle(command, options);
+        return await this.functionCommands.invoke(command, options);
+    }
+    /**
+     * Handle a Create Function Url Config Command from the SDK.
+     */
+    async createFunctionUrlConfig(command, options) {
+        return await this.functionUrlCommands.create(command, options);
+    }
+    /**
+     * Handle a Get Function Url Config Command from the SDK.
+     */
+    async getFunctionUrlConfig(command, options) {
+        return await this.functionUrlCommands.get(command, options);
+    }
+    /**
+     * Handle an Update Function Url Config Command from the SDK.
+     */
+    async updateFunctionUrlConfig(command, options) {
+        return await this.functionUrlCommands.update(command, options);
+    }
+    /**
+     * Handle a Delete Function Url Config Command from the SDK.
+     */
+    async deleteFunctionUrlConfig(command, options) {
+        return await this.functionUrlCommands.delete(command, options);
+    }
+    /**
+     * Handle a List Function Url Configs Command from the SDK.
+     */
+    async listFunctionUrlConfigs(command, options) {
+        return await this.functionUrlCommands.list(command, options);
+    }
+    /**
+     * Handle an Add Permission Command from the SDK.
+     */
+    async addPermission(command, options) {
+        return await this.permissionCommands.add(command, options);
+    }
+    /**
+     * Handle a Remove Permission Command from the SDK.
+     */
+    async removePermission(command, options) {
+        return await this.permissionCommands.remove(command, options);
+    }
+    /**
+     * Handle a Get Policy Command from the SDK.
+     */
+    async getPolicy(command, options) {
+        return await this.permissionCommands.getPolicy(command, options);
     }
     /**
      * Get a simulated Lambda function instance by name.
@@ -83,6 +139,21 @@ export class SimLambda {
     getSimFunctionByName(functionName) {
         return this.functions.get(functionName);
     }
+    /**
+     * Get a simulated Lambda function's Function URL, if it has one.
+     */
+    getSimFunctionUrl(functionName) {
+        return this.functionUrls.get(functionName);
+    }
+    /**
+     * Get a simulated Lambda Function URL by the id in its hostname.
+     *
+     * This is how the localhost serving layer finds the Function URL a request
+     * was addressed to, once the registry has named the owning Account.
+     */
+    getSimFunctionUrlById(urlId) {
+        return this.functionUrls.byUrlId(urlId);
+    }
     /**
      * Get this service's CloudFormation Resource factory.
      */