@kensio/yulin 0.35.0 → 0.36.0

package/dist/service/aws/factory/sim-aws-service-factory.d.ts

@@ -10,7 +10,11 @@ import { SimS3 } from "../../s3/sim-s3.js";
 import { SimAcm } from "../../acm/sim-acm.js";
 import type { SimIam } from "../../iam/index.js";
 import { SimIamRegistry } from "../../iam/registry/sim-iam-registry.js";
+import { SimIamAccessKeyRegistry } from "../../iam/registry/sim-iam-access-key-registry.js";
+import { SimIamSigV4Verifier } from "../../iam/sigv4/sim-iam-sigv4-verifier.js";
+import { SimAwsRequestCallerResolver } from "../../iam/request/sim-aws-request-caller-resolver.js";
 import { SimLambda } from "../../lambda/index.js";
+import { SimLambdaUrlRegistry } from "../../lambda/registry/sim-lambda-url-registry.js";
 import { SimSts } from "../../sts/sim-sts.js";
 interface SimAwsServiceFactoryProperties {
     readonly simAws: SimAws;
@@ -46,6 +50,37 @@ export declare class SimAwsServiceFactory {
      * instance so cross-account services can resolve Account-owned IAM state.
      */
     readonly iamRegistry: SimIamRegistry;
+    /**
+     * Shared index of which Account owns each simulated access key.
+     *
+     * A SigV4 signed request names an access key but not an Account, so this is
+     * what lets a signature be traced back to the IAM that issued it.
+     * @internal
+     */
+    readonly accessKeyRegistry: SimIamAccessKeyRegistry;
+    /**
+     * Verifies SigV4 signatures made with any access key in this simulation.
+     * @internal
+     */
+    readonly signedRequests: SimIamSigV4Verifier;
+    /**
+     * Resolves the principal behind an HTTP request into this simulation.
+     *
+     * This is the single request authentication boundary: everything arriving
+     * over HTTP, including the in-process `SimAwsHttp.fetch()` path, gets its
+     * caller from here.
+     * @internal
+     */
+    readonly requestCallers: SimAwsRequestCallerResolver;
+    /**
+     * Shared simulated Lambda Function URL registry.
+     *
+     * This maps Function URL ids to the Accounts that own them, so the
+     * localhost serving layer can route a Function URL request to the right
+     * Account/Region scope from the request hostname alone.
+     * @internal
+     */
+    readonly lambdaUrlRegistry: SimLambdaUrlRegistry;
     private readonly simAws;
     private readonly background;
     /**

package/dist/service/aws/factory/sim-aws-service-factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-service-factory.d.ts","sourceRoot":"","sources":["../../../../src/service/aws/factory/sim-aws-service-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,wCAAwC,CAAC;AAChD,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,oCAAoC,CAAC;AACvF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uDAAuD,CAAC;AAC9F,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AACxE,OAAO,EAAE,WAAW,IAAI,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC3E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAG3C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAI9C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AACxE,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAGlD,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAE9C,UAAU,8BAA8B;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,mBAAmB,GAAG,mBAAmB,CAAC;CAChE;AAED;;;;;;;;;;;;;GAaG;AACH,qBAAa,oBAAoB;IAC/B;;;;;;OAMG;IACH,SAAgB,kBAAkB,wBAA+B;IAEjE;;;;;OAKG;IACH,SAAgB,WAAW,iBAAwB;IAEnD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA4C;IAEvE;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAwB;IAEpD;;;;;OAKG;IACH,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA4B;IAE5D;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA6B;IAExD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA4B;IAE5D,YAAY,UAAU,EAAE,8BAA8B,EAWrD;IAED;;OAEG;IACH,SAAS,CAAC,KAAK,EAAE,4BAA4B,GAAG,MAAM,CAiBrD;IAED;;OAEG;IACH,oBAAoB,CAAC,KAAK,EAAE,4BAA4B,GAAG,iBAAiB,CAO3E;IAED;;OAEG;IACH,gBAAgB,CAAC,KAAK,EAAE,4BAA4B,GAAG,aAAa,CAEnE;IAED;;OAEG;IACH,cAAc,CAAC,KAAK,EAAE,4BAA4B,GAAG,iBAAiB,CAQrE;IAED;;OAEG;IACH,SAAS,CAAC,KAAK,EAAE,4BAA4B,GAAG,MAAM,CAErD;IAED;;;;;;;;OAQG;IACH,YAAY,CAAC,KAAK,EAAE,4BAA4B,GAAG,SAAS,CAc3D;IAED;;OAEG;IACH,aAAa,CAAC,KAAK,EAAE,4BAA4B,GAAG,UAAU,CAE7D;IAED;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,4BAA4B,GAAG,KAAK,CASnD;IAED;;OAEG;IACH,SAAS,CAAC,KAAK,EAAE,4BAA4B,GAAG,MAAM,CAQrD;CACF"}
+{"version":3,"file":"sim-aws-service-factory.d.ts","sourceRoot":"","sources":["../../../../src/service/aws/factory/sim-aws-service-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,wCAAwC,CAAC;AAChD,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,oCAAoC,CAAC;AACvF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uDAAuD,CAAC;AAC9F,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AACxE,OAAO,EAAE,WAAW,IAAI,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC3E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAG3C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAI9C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AACxE,OAAO,EAAE,uBAAuB,EAAE,MAAM,mDAAmD,CAAC;AAE5F,OAAO,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AAChF,OAAO,EAAE,2BAA2B,EAAE,MAAM,sDAAsD,CAAC;AACnG,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,oBAAoB,EAAE,MAAM,kDAAkD,CAAC;AAGxF,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAE9C,UAAU,8BAA8B;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,mBAAmB,GAAG,mBAAmB,CAAC;CAChE;AAED;;;;;;;;;;;;;GAaG;AACH,qBAAa,oBAAoB;IAC/B;;;;;;OAMG;IACH,SAAgB,kBAAkB,wBAA+B;IAEjE;;;;;OAKG;IACH,SAAgB,WAAW,iBAAwB;IAEnD;;;;;;OAMG;IACH,SAAgB,iBAAiB,0BAAiC;IAElE;;;OAGG;IACH,SAAgB,cAAc,sBAK3B;IAEH;;;;;;;OAOG;IACH,SAAgB,cAAc,8BAE3B;IAEH;;;;;;;OAOG;IACH,SAAgB,iBAAiB,uBAA8B;IAE/D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA4C;IAEvE;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAwB;IAEpD;;;;;OAKG;IACH,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA4B;IAE5D;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA6B;IAExD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA4B;IAE5D,YAAY,UAAU,EAAE,8BAA8B,EAYrD;IAED;;OAEG;IACH,SAAS,CAAC,KAAK,EAAE,4BAA4B,GAAG,MAAM,CAiBrD;IAED;;OAEG;IACH,oBAAoB,CAAC,KAAK,EAAE,4BAA4B,GAAG,iBAAiB,CAO3E;IAED;;OAEG;IACH,gBAAgB,CAAC,KAAK,EAAE,4BAA4B,GAAG,aAAa,CAEnE;IAED;;OAEG;IACH,cAAc,CAAC,KAAK,EAAE,4BAA4B,GAAG,iBAAiB,CAQrE;IAED;;OAEG;IACH,SAAS,CAAC,KAAK,EAAE,4BAA4B,GAAG,MAAM,CAErD;IAED;;;;;;;;OAQG;IACH,YAAY,CAAC,KAAK,EAAE,4BAA4B,GAAG,SAAS,CAe3D;IAED;;OAEG;IACH,aAAa,CAAC,KAAK,EAAE,4BAA4B,GAAG,UAAU,CAE7D;IAED;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,4BAA4B,GAAG,KAAK,CASnD;IAED;;OAEG;IACH,SAAS,CAAC,KAAK,EAAE,4BAA4B,GAAG,MAAM,CAQrD;CACF"}

package/dist/service/aws/factory/sim-aws-service-factory.js

@@ -9,7 +9,12 @@ import { SimRoute53AcmDnsRecords } from "../../acm/validation/sim-route53-acm-dn
 import { SimAcmRegistry } from "../../acm/registry/sim-acm-registry.js";
 import { SimRoute53Registry } from "../../route53/registry/sim-route53-registry.js";
 import { SimIamRegistry } from "../../iam/registry/sim-iam-registry.js";
+import { SimIamAccessKeyRegistry } from "../../iam/registry/sim-iam-access-key-registry.js";
+import { SimIamGlobalCredentialResolver } from "../../iam/registry/sim-iam-global-credential-resolver.js";
+import { SimIamSigV4Verifier } from "../../iam/sigv4/sim-iam-sigv4-verifier.js";
+import { SimAwsRequestCallerResolver } from "../../iam/request/sim-aws-request-caller-resolver.js";
 import { SimLambda } from "../../lambda/index.js";
+import { SimLambdaUrlRegistry } from "../../lambda/registry/sim-lambda-url-registry.js";
 import { SimS3LambdaCodeStore } from "../../lambda/function/code/store/sim-s3-lambda-code-store.js";
 import { SimSdkLambdaVmModuleProvider } from "../../lambda/function/code/vm/sdk/sim-sdk-lambda-vm-module-provider.js";
 import { SimSts } from "../../sts/sim-sts.js";
@@ -43,6 +48,44 @@ export class SimAwsServiceFactory {
      * instance so cross-account services can resolve Account-owned IAM state.
      */
     iamRegistry = new SimIamRegistry();
+    /**
+     * Shared index of which Account owns each simulated access key.
+     *
+     * A SigV4 signed request names an access key but not an Account, so this is
+     * what lets a signature be traced back to the IAM that issued it.
+     * @internal
+     */
+    accessKeyRegistry = new SimIamAccessKeyRegistry();
+    /**
+     * Verifies SigV4 signatures made with any access key in this simulation.
+     * @internal
+     */
+    signedRequests = new SimIamSigV4Verifier({
+        credentials: new SimIamGlobalCredentialResolver({
+            accessKeys: this.accessKeyRegistry,
+            iam: this.iamRegistry,
+        }),
+    });
+    /**
+     * Resolves the principal behind an HTTP request into this simulation.
+     *
+     * This is the single request authentication boundary: everything arriving
+     * over HTTP, including the in-process `SimAwsHttp.fetch()` path, gets its
+     * caller from here.
+     * @internal
+     */
+    requestCallers = new SimAwsRequestCallerResolver({
+        signedRequests: this.signedRequests,
+    });
+    /**
+     * Shared simulated Lambda Function URL registry.
+     *
+     * This maps Function URL ids to the Accounts that own them, so the
+     * localhost serving layer can route a Function URL request to the right
+     * Account/Region scope from the request hostname alone.
+     * @internal
+     */
+    lambdaUrlRegistry = new SimLambdaUrlRegistry();
     simAws;
     background;
     /**
@@ -79,6 +122,7 @@ export class SimAwsServiceFactory {
             cloudFrontRegistry: this.cloudFrontRegistry,
             route53Registry: this.route53Registry,
             iamRegistry: this.iamRegistry,
+            accessKeyRegistry: this.accessKeyRegistry,
         });
     }
     /**
@@ -149,6 +193,7 @@ export class SimAwsServiceFactory {
             iam,
             background: this.background,
             runAsOwner: this.simAws,
+            urlRegistry: this.lambdaUrlRegistry,
             codeStore: new SimS3LambdaCodeStore({ s3: scope.s3() }),
             vmSdkModuleProvider: new SimSdkLambdaVmModuleProvider({
                 simAws: this.simAws,

package/dist/service/aws/factory/sim-aws-service-factory.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-service-factory.js","sourceRoot":"","sources":["../../../../src/service/aws/factory/sim-aws-service-factory.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uDAAuD,CAAC;AAE9F,OAAO,EAAE,WAAW,IAAI,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE3E,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAC/E,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,uBAAuB,EAAE,MAAM,qDAAqD,CAAC;AAC9F,OAAO,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AACxE,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AAEpF,OAAO,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AACxE,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,oBAAoB,EAAE,MAAM,8DAA8D,CAAC;AACpG,OAAO,EAAE,4BAA4B,EAAE,MAAM,wEAAwE,CAAC;AACtH,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAO9C;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,oBAAoB;IAC/B;;;;;;OAMG;IACa,kBAAkB,GAAG,IAAI,qBAAqB,EAAE,CAAC;IAEjE;;;;;OAKG;IACa,WAAW,GAAG,IAAI,cAAc,EAAE,CAAC;IAElC,MAAM,CAAS;IACf,UAAU,CAA4C;IAEvE;;;;;;OAMG;IACc,WAAW,GAAG,IAAI,cAAc,EAAE,CAAC;IAEpD;;;;;OAKG;IACc,eAAe,GAAG,IAAI,kBAAkB,EAAE,CAAC;IAE5D;;;;;;OAMG;IACc,UAAU,GAAG,IAAI,mBAAmB,EAAE,CAAC;IAEvC,eAAe,CAA4B;IAE5D,YAAY,UAA0C;QACpD,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,eAAe,GAAG,IAAI,yBAAyB,CAAC;YACnD,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,UAAU,EAAE,UAAU,CAAC,UAAU;YACjC,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,KAAmC;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAElC,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC;YACrB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,GAAG;YACH,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,yEAAyE;YACzE,4CAA4C;YAC5C,UAAU,EAAE,IAAI,uBAAuB,CAAC;gBACtC,eAAe,EAAE,IAAI,CAAC,eAAe;aACtC,CAAC;SACH,CAAC,CAAC;QAEH,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;QAEzD,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;OAEG;IACH,oBAAoB,CAAC,KAAmC;QACtD,OAAO,IAAI,iBAAiB,CAAC;YAC3B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;YAC1B,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,KAAmC;QAClD,OAAO,IAAI,CAAC,eAAe,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,KAAmC;QAChD,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAElC,OAAO,IAAI,iBAAiB,CAAC;YAC3B,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,GAAG;YACH,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,KAAmC;QAC3C,OAAO,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;IAED;;;;;;;;OAQG;IACH,YAAY,CAAC,KAAmC;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAElC,OAAO,IAAI,SAAS,CAAC;YACnB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,GAAG;YACH,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU,EAAE,IAAI,CAAC,MAAM;YACvB,SAAS,EAAE,IAAI,oBAAoB,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;YACvD,mBAAmB,EAAE,IAAI,4BAA4B,CAAC;gBACpD,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,UAAU,EAAE,KAAK,CAAC,kBAAkB,CAAC,UAAU;aAChD,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,KAAmC;QAC/C,OAAO,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IACnD,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,KAAmC;QAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAElC,OAAO,IAAI,KAAK,CAAC;YACf,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,gBAAgB,EAAE,IAAI,CAAC,UAAU;YACjC,GAAG;YACH,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,KAAmC;QAC3C,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAEtB,OAAO,IAAI,MAAM,CAAC;YAChB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"sim-aws-service-factory.js","sourceRoot":"","sources":["../../../../src/service/aws/factory/sim-aws-service-factory.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uDAAuD,CAAC;AAE9F,OAAO,EAAE,WAAW,IAAI,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE3E,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAC/E,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,uBAAuB,EAAE,MAAM,qDAAqD,CAAC;AAC9F,OAAO,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AACxE,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AAEpF,OAAO,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AACxE,OAAO,EAAE,uBAAuB,EAAE,MAAM,mDAAmD,CAAC;AAC5F,OAAO,EAAE,8BAA8B,EAAE,MAAM,0DAA0D,CAAC;AAC1G,OAAO,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AAChF,OAAO,EAAE,2BAA2B,EAAE,MAAM,sDAAsD,CAAC;AACnG,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,oBAAoB,EAAE,MAAM,kDAAkD,CAAC;AACxF,OAAO,EAAE,oBAAoB,EAAE,MAAM,8DAA8D,CAAC;AACpG,OAAO,EAAE,4BAA4B,EAAE,MAAM,wEAAwE,CAAC;AACtH,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAO9C;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,oBAAoB;IAC/B;;;;;;OAMG;IACa,kBAAkB,GAAG,IAAI,qBAAqB,EAAE,CAAC;IAEjE;;;;;OAKG;IACa,WAAW,GAAG,IAAI,cAAc,EAAE,CAAC;IAEnD;;;;;;OAMG;IACa,iBAAiB,GAAG,IAAI,uBAAuB,EAAE,CAAC;IAElE;;;OAGG;IACa,cAAc,GAAG,IAAI,mBAAmB,CAAC;QACvD,WAAW,EAAE,IAAI,8BAA8B,CAAC;YAC9C,UAAU,EAAE,IAAI,CAAC,iBAAiB;YAClC,GAAG,EAAE,IAAI,CAAC,WAAW;SACtB,CAAC;KACH,CAAC,CAAC;IAEH;;;;;;;OAOG;IACa,cAAc,GAAG,IAAI,2BAA2B,CAAC;QAC/D,cAAc,EAAE,IAAI,CAAC,cAAc;KACpC,CAAC,CAAC;IAEH;;;;;;;OAOG;IACa,iBAAiB,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAE9C,MAAM,CAAS;IACf,UAAU,CAA4C;IAEvE;;;;;;OAMG;IACc,WAAW,GAAG,IAAI,cAAc,EAAE,CAAC;IAEpD;;;;;OAKG;IACc,eAAe,GAAG,IAAI,kBAAkB,EAAE,CAAC;IAE5D;;;;;;OAMG;IACc,UAAU,GAAG,IAAI,mBAAmB,EAAE,CAAC;IAEvC,eAAe,CAA4B;IAE5D,YAAY,UAA0C;QACpD,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,eAAe,GAAG,IAAI,yBAAyB,CAAC;YACnD,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,UAAU,EAAE,UAAU,CAAC,UAAU;YACjC,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;SAC1C,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,KAAmC;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAElC,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC;YACrB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,GAAG;YACH,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,yEAAyE;YACzE,4CAA4C;YAC5C,UAAU,EAAE,IAAI,uBAAuB,CAAC;gBACtC,eAAe,EAAE,IAAI,CAAC,eAAe;aACtC,CAAC;SACH,CAAC,CAAC;QAEH,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;QAEzD,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;OAEG;IACH,oBAAoB,CAAC,KAAmC;QACtD,OAAO,IAAI,iBAAiB,CAAC;YAC3B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;YAC1B,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,KAAmC;QAClD,OAAO,IAAI,CAAC,eAAe,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,KAAmC;QAChD,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAElC,OAAO,IAAI,iBAAiB,CAAC;YAC3B,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,GAAG;YACH,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,KAAmC;QAC3C,OAAO,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;IAED;;;;;;;;OAQG;IACH,YAAY,CAAC,KAAmC;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAElC,OAAO,IAAI,SAAS,CAAC;YACnB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,GAAG;YACH,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU,EAAE,IAAI,CAAC,MAAM;YACvB,WAAW,EAAE,IAAI,CAAC,iBAAiB;YACnC,SAAS,EAAE,IAAI,oBAAoB,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;YACvD,mBAAmB,EAAE,IAAI,4BAA4B,CAAC;gBACpD,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,UAAU,EAAE,KAAK,CAAC,kBAAkB,CAAC,UAAU;aAChD,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,KAAmC;QAC/C,OAAO,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IACnD,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,KAAmC;QAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAElC,OAAO,IAAI,KAAK,CAAC;YACf,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,gBAAgB,EAAE,IAAI,CAAC,UAAU;YACjC,GAAG;YACH,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,KAAmC;QAC3C,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAEtB,OAAO,IAAI,MAAM,CAAC;YAChB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/aws/sim-aws-properties.d.ts

@@ -0,0 +1,36 @@
+import type { BackgroundCompleter, BackgroundScheduler } from "../../util/background/background.js";
+import type { SimClock } from "../../util/clock/sim-clock.js";
+import type { SimIamSigV4ExpectedScope } from "../iam/sigv4/sim-iam-sigv4-expected-scope.js";
+import type { SimAwsAccountId } from "./sim-aws-account.js";
+import type { AwsRegionName } from "./sim-aws-region.js";
+/**
+ * Everything caller resolution needs besides the request itself.
+ */
+export interface SimAwsRequestCallerOptions {
+    /**
+     * The request body, already buffered by whoever received the request.
+     */
+    readonly body?: Uint8Array | undefined;
+    /**
+     * The service and Region a signature should have been scoped to, when the
+     * receiving endpoint is known.
+     */
+    readonly expectedScope?: SimIamSigV4ExpectedScope | undefined;
+}
+/**
+ * How one simulated AWS environment is set up.
+ */
+export interface SimAwsProperties {
+    readonly defaultAccountId?: SimAwsAccountId;
+    readonly defaultRegionName?: AwsRegionName;
+    readonly background?: BackgroundScheduler & BackgroundCompleter;
+    /**
+     * Clock this simulation's timestamps start from, defaulting to the real
+     * system clock. Simulated time is layered over it, so `clock()` can still
+     * freeze, set and advance from wherever it reads. Ignored when an
+     * already-built background scheduler is supplied, as that scheduler carries
+     * its own clock and time control is refused.
+     */
+    readonly clock?: SimClock;
+}
+//# sourceMappingURL=sim-aws-properties.d.ts.map

package/dist/service/aws/sim-aws-properties.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-aws-properties.d.ts","sourceRoot":"","sources":["../../../src/service/aws/sim-aws-properties.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AAC9D,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC;;OAEG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IACvC;;;OAGG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,wBAAwB,GAAG,SAAS,CAAC;CAC/D;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,eAAe,CAAC;IAC5C,QAAQ,CAAC,iBAAiB,CAAC,EAAE,aAAa,CAAC;IAC3C,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,GAAG,mBAAmB,CAAC;IAChE;;;;;;OAMG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC;CAC3B"}

package/dist/service/aws/sim-aws-properties.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sim-aws-properties.js.map

package/dist/service/aws/sim-aws-properties.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-aws-properties.js","sourceRoot":"","sources":["../../../src/service/aws/sim-aws-properties.ts"],"names":[],"mappings":""}

package/dist/service/aws/sim-aws-timekeeping.d.ts

@@ -0,0 +1,33 @@
+import { type BackgroundCompleter, type BackgroundScheduler } from "../../util/background/background.js";
+import type { SimClock } from "../../util/clock/sim-clock.js";
+import { SimClockControl } from "../../util/clock/sim-clock-control.js";
+interface SimAwsTimekeepingProperties {
+    readonly clock?: SimClock | undefined;
+    readonly background?: (BackgroundScheduler & BackgroundCompleter) | undefined;
+}
+/**
+ * Thrown when time control is asked of a simulation that does not own its clock.
+ */
+export declare class SimAwsTimeNotControllable extends Error {
+    constructor();
+}
+/**
+ * How one simulation keeps time: the scheduler its work runs on, and control
+ * over the clock that scheduler reads.
+ *
+ * Normally a simulation builds both, so its time can be moved. A caller who
+ * supplies a ready-made background scheduler is supplying its clock too, and
+ * that clock is not this simulation's to move, so time control is refused
+ * rather than silently doing nothing.
+ */
+export declare class SimAwsTimekeeping {
+    readonly background: BackgroundScheduler & BackgroundCompleter;
+    private readonly control;
+    constructor(properties?: SimAwsTimekeepingProperties);
+    /**
+     * Get control over this simulation's clock.
+     */
+    clockControl(): SimClockControl;
+}
+export {};
+//# sourceMappingURL=sim-aws-timekeeping.d.ts.map

package/dist/service/aws/sim-aws-timekeeping.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-aws-timekeeping.d.ts","sourceRoot":"","sources":["../../../src/service/aws/sim-aws-timekeeping.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EAEzB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AAGxE,UAAU,2BAA2B;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,mBAAmB,GAAG,mBAAmB,CAAC,GAAG,SAAS,CAAC;CAC/E;AAED;;GAEG;AACH,qBAAa,yBAA0B,SAAQ,KAAK;IAClD,cAMC;CACF;AAED;;;;;;;;GAQG;AACH,qBAAa,iBAAiB;IAC5B,SAAgB,UAAU,EAAE,mBAAmB,GAAG,mBAAmB,CAAC;IAEtE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA8B;IAEtD,YAAY,UAAU,GAAE,2BAAgC,EAevD;IAED;;OAEG;IACH,YAAY,IAAI,eAAe,CAM9B;CACF"}

package/dist/service/aws/sim-aws-timekeeping.js

@@ -0,0 +1,49 @@
+import { BackgroundTasks, } from "../../util/background/background.js";
+import { SimClockControl } from "../../util/clock/sim-clock-control.js";
+import { SimControllableClock } from "../../util/clock/sim-controllable-clock.js";
+/**
+ * Thrown when time control is asked of a simulation that does not own its clock.
+ */
+export class SimAwsTimeNotControllable extends Error {
+    constructor() {
+        super("This SimAws cannot control its own time because it was constructed with a background scheduler, which brings its own clock. " +
+            "Construct SimAws without a background scheduler, passing a clock instead if it needs a starting instant.");
+        this.name = "SimAwsTimeNotControllable";
+    }
+}
+/**
+ * How one simulation keeps time: the scheduler its work runs on, and control
+ * over the clock that scheduler reads.
+ *
+ * Normally a simulation builds both, so its time can be moved. A caller who
+ * supplies a ready-made background scheduler is supplying its clock too, and
+ * that clock is not this simulation's to move, so time control is refused
+ * rather than silently doing nothing.
+ */
+export class SimAwsTimekeeping {
+    background;
+    control;
+    constructor(properties = {}) {
+        if (properties.background !== undefined) {
+            this.background = properties.background;
+            this.control = undefined;
+            return;
+        }
+        // Simulated time is layered over whatever clock was supplied, so a
+        // simulation started at a fixed instant is still free to move from there.
+        const clock = new SimControllableClock({ base: properties.clock });
+        const background = new BackgroundTasks({ clock });
+        this.background = background;
+        this.control = new SimClockControl({ clock, background });
+    }
+    /**
+     * Get control over this simulation's clock.
+     */
+    clockControl() {
+        if (this.control === undefined) {
+            throw new SimAwsTimeNotControllable();
+        }
+        return this.control;
+    }
+}
+//# sourceMappingURL=sim-aws-timekeeping.js.map

package/dist/service/aws/sim-aws-timekeeping.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-aws-timekeeping.js","sourceRoot":"","sources":["../../../src/service/aws/sim-aws-timekeeping.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,eAAe,GAChB,MAAM,qCAAqC,CAAC;AAE7C,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,4CAA4C,CAAC;AAOlF;;GAEG;AACH,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAClD;QACE,KAAK,CACH,8HAA8H;YAC5H,0GAA0G,CAC7G,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,iBAAiB;IACZ,UAAU,CAA4C;IAErD,OAAO,CAA8B;IAEtD,YAAY,UAAU,GAAgC,EAAE;QACtD,IAAI,UAAU,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACxC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;YACxC,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;YAEzB,OAAO;QACT,CAAC;QAED,mEAAmE;QACnE,0EAA0E;QAC1E,MAAM,KAAK,GAAG,IAAI,oBAAoB,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,IAAI,eAAe,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAElD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,OAAO,GAAG,IAAI,eAAe,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACH,YAAY;QACV,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,IAAI,yBAAyB,EAAE,CAAC;QACxC,CAAC;QAED,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;CACF"}

package/dist/service/aws/sim-aws.d.ts

@@ -1,10 +1,10 @@
 import { type SimAwsAccount, type SimAwsAccountId } from "./sim-aws-account.js";
-import { type BackgroundCompleter, type BackgroundScheduler } from "../../util/background/background.js";
 import { type AwsRegionName, type SimAwsRegion } from "./sim-aws-region.js";
 import type { SimAwsAccountRegionContainer } from "./sim-aws-account-region-scope.js";
 import type { SimS3 } from "../s3/sim-s3.js";
 import type { SimCloudFront } from "../cloudfront/sim-cloudfront.js";
 import type { SimCloudFrontRegistry } from "../cloudfront/registry/sim-cloud-front-registry.js";
+import type { SimLambdaUrlRegistry } from "../lambda/registry/sim-lambda-url-registry.js";
 import type { SimDynamoDb as SimDynamoDatabase } from "../dynamodb/index.js";
 import type { SimCloudFormation } from "../cloudformation/index.js";
 import type { SimRoute53 } from "../route53/index.js";
@@ -15,11 +15,10 @@ import type { SimIamRegistry } from "../iam/registry/sim-iam-registry.js";
 import type { SimLambda } from "../lambda/index.js";
 import type { SimSts } from "../sts/sim-sts.js";
 import type { SimAwsPrincipal } from "./caller/sim-aws-caller.js";
-interface SimAwsProperties {
-    readonly defaultAccountId?: SimAwsAccountId;
-    readonly defaultRegionName?: AwsRegionName;
-    readonly background?: BackgroundScheduler & BackgroundCompleter;
-}
+import type { SimClockControl } from "../../util/clock/sim-clock-control.js";
+import type { SimAwsProperties, SimAwsRequestCallerOptions } from "./sim-aws-properties.js";
+import type { SimIamCredentialIdentity } from "../iam/credential/sim-aws-credentials.js";
+import type { SimAwsRequestCaller } from "../iam/request/sim-aws-request-caller.js";
 /**
  * Top-level container for simulated AWS.
  * Contains Account scopes, Region scopes, Account/Region scopes, and built-in
@@ -39,7 +38,60 @@ export declare class SimAws {
     readonly iamRegistry: SimIamRegistry;
     private readonly background;
     private readonly scopes;
+    private readonly timekeeping;
     constructor(properties?: SimAwsProperties);
+    /**
+     * Get the current time in this simulated AWS environment.
+     *
+     * Every simulated timestamp comes from here, so this is what a simulation
+     * means by "now", which is not necessarily what the host clock means by it.
+     */
+    now(): Date;
+    /**
+     * Control this simulated AWS environment's clock.
+     *
+     * Time can be frozen, set to an instant, or advanced by a duration, so
+     * behaviour that only happens once time passes — a temporary session
+     * expiring, for one — can be tested without waiting for it and without
+     * replacing the clock for the whole process:
+     *
+     * ```typescript
+     * await simAws.clock().advanceBy({ minutes: 20 });
+     * ```
+     *
+     * Advancing runs whatever falls due during the interval and returns once the
+     * simulation has settled, so the next line can assert. The clock belongs to
+     * this instance alone: moving it never disturbs another SimAws, or the real
+     * clock.
+     */
+    clock(): SimClockControl;
+    /**
+     * Verify the SigV4 signature on an HTTP request and resolve who signed it.
+     *
+     * This answers the question an HTTP request cannot otherwise answer: which
+     * simulated principal made it. The resulting identity is what IAM
+     * authorization already knows how to work with.
+     *
+     * Verification spans every Account, because a signature names an access key
+     * and not an Account. The body is passed separately, since a request body can
+     * only be read once and whoever serves the request needs the same bytes.
+     *
+     * Throws a SimIamSigV4Error carrying the AWS error code real AWS would use.
+     */
+    verifySignedRequest(request: Request, body?: Uint8Array): SimIamCredentialIdentity;
+    /**
+     * Work out which simulated principal an HTTP request is made by.
+     *
+     * This is the request authentication boundary every served request passes
+     * through, exposed so it can be used directly. An `x-sim-aws-caller` header
+     * names a principal outright, an AWS4-HMAC-SHA256 signature is verified, and
+     * a request offering neither is anonymous rather than the Account root.
+     *
+     * The body is passed separately for the same reason it is on
+     * `verifySignedRequest`: a request body can only be read once, and whoever
+     * serves the request needs the same bytes.
+     */
+    resolveRequestCaller(request: Request, options?: SimAwsRequestCallerOptions): SimAwsRequestCaller;
     /**
      * Get a simulated AWS Account.
      */
@@ -96,6 +148,15 @@ export declare class SimAws {
      * @internal
      */
     cloudFrontRegistry(): SimCloudFrontRegistry;
+    /**
+     * Get the shared simulated Lambda Function URL registry.
+     *
+     * This is intended for Lambda controller wiring, so serving a Function URL
+     * request resolves the owning Account from the same registry the Function
+     * URL commands register ids in.
+     * @internal
+     */
+    lambdaUrlRegistry(): SimLambdaUrlRegistry;
     /**
      * Run a function with an ambient simulated caller for this SimAws instance.
      *
@@ -114,5 +175,4 @@ export declare class SimAws {
      */
     backgroundTasksComplete(): Promise<void>;
 }
-export {};
 //# sourceMappingURL=sim-aws.d.ts.map

package/dist/service/aws/sim-aws.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws.d.ts","sourceRoot":"","sources":["../../../src/service/aws/sim-aws.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,eAAe,EACrB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EAEzB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,KAAK,aAAa,EAElB,KAAK,YAAY,EAClB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAC;AACtF,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oDAAoD,CAAC;AAChG,OAAO,KAAK,EAAE,WAAW,IAAI,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAC7E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAE5E,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAGlE,UAAU,gBAAgB;IACxB,QAAQ,CAAC,gBAAgB,CAAC,EAAE,eAAe,CAAC;IAC5C,QAAQ,CAAC,iBAAiB,CAAC,EAAE,aAAa,CAAC;IAC3C,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,GAAG,mBAAmB,CAAC;CACjE;AAED;;;;GAIG;AACH,qBAAa,MAAM;IACjB,SAAgB,gBAAgB,EAAE,eAAe,CAAC;IAClD,SAAgB,iBAAiB,EAAE,aAAa,CAAC;IACjD;;;OAGG;IACH,SAAgB,cAAc,EAAE,oBAAoB,CAAC;IAErD;;OAEG;IACH,SAAgB,WAAW,EAAE,cAAc,CAAC;IAE5C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA4C;IACvE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAsB;IAE7C,YAAY,UAAU,GAAE,gBAAqB,EAgB5C;IAED;;OAEG;IACH,OAAO,CACL,SAAS,GAAE,eAAe,GAAG,MAA8B,GAC1D,aAAa,CAEf;IAED;;OAEG;IACH,MAAM,CAAC,UAAU,GAAE,aAAsC,GAAG,YAAY,CAEvE;IAED;;OAEG;IACH,kBAAkB,CAChB,SAAS,GAAE,eAAuC,EAClD,UAAU,GAAE,aAAsC,GACjD,4BAA4B,CAE9B;IAED;;OAEG;IACH,GAAG,IAAI,MAAM,CAEZ;IAED;;OAEG;IACH,cAAc,IAAI,iBAAiB,CAElC;IAED;;OAEG;IACH,UAAU,IAAI,aAAa,CAE1B;IAED;;OAEG;IACH,QAAQ,IAAI,iBAAiB,CAE5B;IAED;;OAEG;IACH,GAAG,IAAI,MAAM,CAEZ;IAED;;OAEG;IACH,MAAM,IAAI,SAAS,CAElB;IAED;;OAEG;IACH,OAAO,IAAI,UAAU,CAEpB;IAED;;OAEG;IACH,EAAE,IAAI,KAAK,CAEV;IAED;;OAEG;IACH,GAAG,IAAI,MAAM,CAEZ;IAED;;;;;;OAMG;IACH,kBAAkB,IAAI,qBAAqB,CAE1C;IAED;;;;;;;;;;;OAWG;IACG,KAAK,CAAC,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,GAAG,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAEzE;IAED;;OAEG;IACG,uBAAuB,IAAI,OAAO,CAAC,IAAI,CAAC,CAE7C;CACF"}
+{"version":3,"file":"sim-aws.d.ts","sourceRoot":"","sources":["../../../src/service/aws/sim-aws.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,eAAe,EACrB,MAAM,sBAAsB,CAAC;AAK9B,OAAO,EACL,KAAK,aAAa,EAElB,KAAK,YAAY,EAClB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAC;AACtF,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oDAAoD,CAAC;AAChG,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+CAA+C,CAAC;AAC1F,OAAO,KAAK,EAAE,WAAW,IAAI,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAC7E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAE5E,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAElE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AAE7E,OAAO,KAAK,EACV,gBAAgB,EAChB,0BAA0B,EAC3B,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AAEzF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AAEpF;;;;GAIG;AACH,qBAAa,MAAM;IACjB,SAAgB,gBAAgB,EAAE,eAAe,CAAC;IAClD,SAAgB,iBAAiB,EAAE,aAAa,CAAC;IACjD;;;OAGG;IACH,SAAgB,cAAc,EAAE,oBAAoB,CAAC;IAErD;;OAEG;IACH,SAAgB,WAAW,EAAE,cAAc,CAAC;IAE5C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA4C;IACvE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAsB;IAC7C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAoB;IAEhD,YAAY,UAAU,GAAE,gBAAqB,EAwB5C;IAED;;;;;OAKG;IACH,GAAG,IAAI,IAAI,CAEV;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,IAAI,eAAe,CAEvB;IAED;;;;;;;;;;;;OAYG;IACH,mBAAmB,CACjB,OAAO,EAAE,OAAO,EAChB,IAAI,CAAC,EAAE,UAAU,GAChB,wBAAwB,CAI1B;IAED;;;;;;;;;;;OAWG;IACH,oBAAoB,CAClB,OAAO,EAAE,OAAO,EAChB,OAAO,GAAE,0BAA+B,GACvC,mBAAmB,CAKrB;IAED;;OAEG;IACH,OAAO,CACL,SAAS,GAAE,eAAe,GAAG,MAA8B,GAC1D,aAAa,CAEf;IAED;;OAEG;IACH,MAAM,CAAC,UAAU,GAAE,aAAsC,GAAG,YAAY,CAEvE;IAED;;OAEG;IACH,kBAAkB,CAChB,SAAS,GAAE,eAAuC,EAClD,UAAU,GAAE,aAAsC,GACjD,4BAA4B,CAE9B;IAED;;OAEG;IACH,GAAG,IAAI,MAAM,CAEZ;IAED;;OAEG;IACH,cAAc,IAAI,iBAAiB,CAElC;IAED;;OAEG;IACH,UAAU,IAAI,aAAa,CAE1B;IAED;;OAEG;IACH,QAAQ,IAAI,iBAAiB,CAE5B;IAED;;OAEG;IACH,GAAG,IAAI,MAAM,CAEZ;IAED;;OAEG;IACH,MAAM,IAAI,SAAS,CAElB;IAED;;OAEG;IACH,OAAO,IAAI,UAAU,CAEpB;IAED;;OAEG;IACH,EAAE,IAAI,KAAK,CAEV;IAED;;OAEG;IACH,GAAG,IAAI,MAAM,CAEZ;IAED;;;;;;OAMG;IACH,kBAAkB,IAAI,qBAAqB,CAE1C;IAED;;;;;;;OAOG;IACH,iBAAiB,IAAI,oBAAoB,CAExC;IAED;;;;;;;;;;;OAWG;IACG,KAAK,CAAC,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,GAAG,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAEzE;IAED;;OAEG;IACG,uBAAuB,IAAI,OAAO,CAAC,IAAI,CAAC,CAE7C;CACF"}

package/dist/service/aws/sim-aws.js

@@ -1,9 +1,10 @@
 import { DEFAULT_SIM_AWS_ACCOUNT_ID, } from "./sim-aws-account.js";
-import { BackgroundTasks, } from "../../util/background/background.js";
 import { DEFAULT_SIM_AWS_REGION_NAME, } from "./sim-aws-region.js";
 import { SimAwsServiceFactory } from "./factory/sim-aws-service-factory.js";
 import { SimAwsScopeRegistry } from "./scope/sim-aws-scope-registry.js";
 import { simAwsRunAsContext } from "./caller/sim-aws-run-as-context.js";
+import { SimAwsTimekeeping } from "./sim-aws-timekeeping.js";
+import { simIamSigV4SignedRequest } from "../iam/sigv4/sim-iam-sigv4-signed-request.js";
 /**
  * Top-level container for simulated AWS.
  * Contains Account scopes, Region scopes, Account/Region scopes, and built-in
@@ -23,10 +24,17 @@ export class SimAws {
     iamRegistry;
     background;
     scopes;
+    timekeeping;
     constructor(properties = {}) {
-        const { defaultAccountId = DEFAULT_SIM_AWS_ACCOUNT_ID, defaultRegionName = DEFAULT_SIM_AWS_REGION_NAME, background = new BackgroundTasks(), } = properties;
+        const { defaultAccountId = DEFAULT_SIM_AWS_ACCOUNT_ID, defaultRegionName = DEFAULT_SIM_AWS_REGION_NAME, clock, background: suppliedBackground, } = properties;
+        const timekeeping = new SimAwsTimekeeping({
+            clock,
+            background: suppliedBackground,
+        });
+        const background = timekeeping.background;
         this.defaultAccountId = defaultAccountId;
         this.defaultRegionName = defaultRegionName;
+        this.timekeeping = timekeeping;
         this.background = background;
         this.serviceFactory = new SimAwsServiceFactory({
             simAws: this,
@@ -35,6 +43,66 @@ export class SimAws {
         this.iamRegistry = this.serviceFactory.iamRegistry;
         this.scopes = new SimAwsScopeRegistry({ simAws: this });
     }
+    /**
+     * Get the current time in this simulated AWS environment.
+     *
+     * Every simulated timestamp comes from here, so this is what a simulation
+     * means by "now", which is not necessarily what the host clock means by it.
+     */
+    now() {
+        return this.background.now();
+    }
+    /**
+     * Control this simulated AWS environment's clock.
+     *
+     * Time can be frozen, set to an instant, or advanced by a duration, so
+     * behaviour that only happens once time passes — a temporary session
+     * expiring, for one — can be tested without waiting for it and without
+     * replacing the clock for the whole process:
+     *
+     * ```typescript
+     * await simAws.clock().advanceBy({ minutes: 20 });
+     * ```
+     *
+     * Advancing runs whatever falls due during the interval and returns once the
+     * simulation has settled, so the next line can assert. The clock belongs to
+     * this instance alone: moving it never disturbs another SimAws, or the real
+     * clock.
+     */
+    clock() {
+        return this.timekeeping.clockControl();
+    }
+    /**
+     * Verify the SigV4 signature on an HTTP request and resolve who signed it.
+     *
+     * This answers the question an HTTP request cannot otherwise answer: which
+     * simulated principal made it. The resulting identity is what IAM
+     * authorization already knows how to work with.
+     *
+     * Verification spans every Account, because a signature names an access key
+     * and not an Account. The body is passed separately, since a request body can
+     * only be read once and whoever serves the request needs the same bytes.
+     *
+     * Throws a SimIamSigV4Error carrying the AWS error code real AWS would use.
+     */
+    verifySignedRequest(request, body) {
+        return this.serviceFactory.signedRequests.verify(simIamSigV4SignedRequest(request, body));
+    }
+    /**
+     * Work out which simulated principal an HTTP request is made by.
+     *
+     * This is the request authentication boundary every served request passes
+     * through, exposed so it can be used directly. An `x-sim-aws-caller` header
+     * names a principal outright, an AWS4-HMAC-SHA256 signature is verified, and
+     * a request offering neither is anonymous rather than the Account root.
+     *
+     * The body is passed separately for the same reason it is on
+     * `verifySignedRequest`: a request body can only be read once, and whoever
+     * serves the request needs the same bytes.
+     */
+    resolveRequestCaller(request, options = {}) {
+        return this.serviceFactory.requestCallers.resolve(simIamSigV4SignedRequest(request, options.body), options.expectedScope);
+    }
     /**
      * Get a simulated AWS Account.
      */
@@ -117,6 +185,17 @@ export class SimAws {
     cloudFrontRegistry() {
         return this.serviceFactory.cloudFrontRegistry;
     }
+    /**
+     * Get the shared simulated Lambda Function URL registry.
+     *
+     * This is intended for Lambda controller wiring, so serving a Function URL
+     * request resolves the owning Account from the same registry the Function
+     * URL commands register ids in.
+     * @internal
+     */
+    lambdaUrlRegistry() {
+        return this.serviceFactory.lambdaUrlRegistry;
+    }
     /**
      * Run a function with an ambient simulated caller for this SimAws instance.
      *

package/dist/service/aws/sim-aws.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws.js","sourceRoot":"","sources":["../../../src/service/aws/sim-aws.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,GAG3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAGL,eAAe,GAChB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAEL,2BAA2B,GAE5B,MAAM,qBAAqB,CAAC;AAQ7B,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAC5E,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAOxE,OAAO,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAQxE;;;;GAIG;AACH,MAAM,OAAO,MAAM;IACD,gBAAgB,CAAkB;IAClC,iBAAiB,CAAgB;IACjD;;;OAGG;IACa,cAAc,CAAuB;IAErD;;OAEG;IACa,WAAW,CAAiB;IAE3B,UAAU,CAA4C;IACtD,MAAM,CAAsB;IAE7C,YAAY,UAAU,GAAqB,EAAE;QAC3C,MAAM,EACJ,gBAAgB,GAAG,0BAA0B,EAC7C,iBAAiB,GAAG,2BAA2B,EAC/C,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,UAAU,CAAC;QAEf,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;QACzC,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;QAC3C,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,cAAc,GAAG,IAAI,oBAAoB,CAAC;YAC7C,MAAM,EAAE,IAAI;YACZ,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC;QACnD,IAAI,CAAC,MAAM,GAAG,IAAI,mBAAmB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED;;OAEG;IACH,OAAO,CACL,SAAS,GAA6B,IAAI,CAAC,gBAAgB;QAE3D,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,SAA4B,CAAC,CAAC;IAC3D,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,UAAU,GAAkB,IAAI,CAAC,iBAAiB;QACvD,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,kBAAkB,CAChB,SAAS,GAAoB,IAAI,CAAC,gBAAgB,EAClD,UAAU,GAAkB,IAAI,CAAC,iBAAiB;QAElD,OAAO,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAC/D,CAAC;IAED;;OAEG;IACH,GAAG;QACD,OAAO,IAAI,CAAC,kBAAkB,EAAE,CAAC,GAAG,EAAE,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,OAAO,IAAI,CAAC,kBAAkB,EAAE,CAAC,cAAc,EAAE,CAAC;IACpD,CAAC;IAED;;OAEG;IACH,UAAU;QACR,OAAO,IAAI,CAAC,kBAAkB,EAAE,CAAC,UAAU,EAAE,CAAC;IAChD,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO,IAAI,CAAC,kBAAkB,EAAE,CAAC,QAAQ,EAAE,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,GAAG;QACD,OAAO,IAAI,CAAC,kBAAkB,EAAE,CAAC,GAAG,EAAE,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,MAAM;QACJ,OAAO,IAAI,CAAC,kBAAkB,EAAE,CAAC,MAAM,EAAE,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,OAAO;QACL,OAAO,IAAI,CAAC,kBAAkB,EAAE,CAAC,OAAO,EAAE,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,EAAE;QACA,OAAO,IAAI,CAAC,kBAAkB,EAAE,CAAC,EAAE,EAAE,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,GAAG;QACD,OAAO,IAAI,CAAC,kBAAkB,EAAE,CAAC,GAAG,EAAE,CAAC;IACzC,CAAC;IAED;;;;;;OAMG;IACH,kBAAkB;QAChB,OAAO,IAAI,CAAC,cAAc,CAAC,kBAAkB,CAAC;IAChD,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,KAAK,CAAI,MAAuB,EAAE,GAAqB;QAC3D,OAAO,MAAM,kBAAkB,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IACzD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,uBAAuB;QAC3B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;IACnC,CAAC;CACF"}
+{"version":3,"file":"sim-aws.js","sourceRoot":"","sources":["../../../src/service/aws/sim-aws.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,GAG3B,MAAM,sBAAsB,CAAC;AAK9B,OAAO,EAEL,2BAA2B,GAE5B,MAAM,qBAAqB,CAAC;AAS7B,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAC5E,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAOxE,OAAO,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAExE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAM7D,OAAO,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAGxF;;;;GAIG;AACH,MAAM,OAAO,MAAM;IACD,gBAAgB,CAAkB;IAClC,iBAAiB,CAAgB;IACjD;;;OAGG;IACa,cAAc,CAAuB;IAErD;;OAEG;IACa,WAAW,CAAiB;IAE3B,UAAU,CAA4C;IACtD,MAAM,CAAsB;IAC5B,WAAW,CAAoB;IAEhD,YAAY,UAAU,GAAqB,EAAE;QAC3C,MAAM,EACJ,gBAAgB,GAAG,0BAA0B,EAC7C,iBAAiB,GAAG,2BAA2B,EAC/C,KAAK,EACL,UAAU,EAAE,kBAAkB,GAC/B,GAAG,UAAU,CAAC;QAEf,MAAM,WAAW,GAAG,IAAI,iBAAiB,CAAC;YACxC,KAAK;YACL,UAAU,EAAE,kBAAkB;SAC/B,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,WAAW,CAAC,UAAU,CAAC;QAE1C,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;QACzC,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;QAC3C,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,cAAc,GAAG,IAAI,oBAAoB,CAAC;YAC7C,MAAM,EAAE,IAAI;YACZ,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC;QACnD,IAAI,CAAC,MAAM,GAAG,IAAI,mBAAmB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED;;;;;OAKG;IACH,GAAG;QACD,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC;IAC/B,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK;QACH,OAAO,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC;IACzC,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,mBAAmB,CACjB,OAAgB,EAChB,IAAiB;QAEjB,OAAO,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,MAAM,CAC9C,wBAAwB,CAAC,OAAO,EAAE,IAAI,CAAC,CACxC,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;OAWG;IACH,oBAAoB,CAClB,OAAgB,EAChB,OAAO,GAA+B,EAAE;QAExC,OAAO,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,OAAO,CAC/C,wBAAwB,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,EAC/C,OAAO,CAAC,aAAa,CACtB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,OAAO,CACL,SAAS,GAA6B,IAAI,CAAC,gBAAgB;QAE3D,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,SAA4B,CAAC,CAAC;IAC3D,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,UAAU,GAAkB,IAAI,CAAC,iBAAiB;QACvD,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,kBAAkB,CAChB,SAAS,GAAoB,IAAI,CAAC,gBAAgB,EAClD,UAAU,GAAkB,IAAI,CAAC,iBAAiB;QAElD,OAAO,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAC/D,CAAC;IAED;;OAEG;IACH,GAAG;QACD,OAAO,IAAI,CAAC,kBAAkB,EAAE,CAAC,GAAG,EAAE,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,OAAO,IAAI,CAAC,kBAAkB,EAAE,CAAC,cAAc,EAAE,CAAC;IACpD,CAAC;IAED;;OAEG;IACH,UAAU;QACR,OAAO,IAAI,CAAC,kBAAkB,EAAE,CAAC,UAAU,EAAE,CAAC;IAChD,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO,IAAI,CAAC,kBAAkB,EAAE,CAAC,QAAQ,EAAE,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,GAAG;QACD,OAAO,IAAI,CAAC,kBAAkB,EAAE,CAAC,GAAG,EAAE,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,MAAM;QACJ,OAAO,IAAI,CAAC,kBAAkB,EAAE,CAAC,MAAM,EAAE,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,OAAO;QACL,OAAO,IAAI,CAAC,kBAAkB,EAAE,CAAC,OAAO,EAAE,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,EAAE;QACA,OAAO,IAAI,CAAC,kBAAkB,EAAE,CAAC,EAAE,EAAE,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,GAAG;QACD,OAAO,IAAI,CAAC,kBAAkB,EAAE,CAAC,GAAG,EAAE,CAAC;IACzC,CAAC;IAED;;;;;;OAMG;IACH,kBAAkB;QAChB,OAAO,IAAI,CAAC,cAAc,CAAC,kBAAkB,CAAC;IAChD,CAAC;IAED;;;;;;;OAOG;IACH,iBAAiB;QACf,OAAO,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC;IAC/C,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,KAAK,CAAI,MAAuB,EAAE,GAAqB;QAC3D,OAAO,MAAM,kBAAkB,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IACzD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,uBAAuB;QAC3B,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;IACnC,CAAC;CACF"}

package/dist/service/cloudformation/cdk/assets/sim-cdk-asset-bytes.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Read the publishable bytes for one CDK cloud assembly file asset.
+ *
+ * CDK stages two shapes of file asset in a cloud assembly. A "file" asset is
+ * already a single file on disk, such as the stack template JSON or a prebuilt
+ * layer zip, and publishes byte for byte. A "zip" asset is a directory that the
+ * real `cdk-assets` publisher zips on its way to the staging bucket, so the
+ * simulated publisher zips it here, in memory.
+ */
+export declare function readSimCdkAssetBytes(sourcePath: string, packaging: string | undefined): Promise<Uint8Array>;
+//# sourceMappingURL=sim-cdk-asset-bytes.d.ts.map

package/dist/service/cloudformation/cdk/assets/sim-cdk-asset-bytes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cdk-asset-bytes.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudformation/cdk/assets/sim-cdk-asset-bytes.ts"],"names":[],"mappings":"AAIA;;;;;;;;GAQG;AACH,wBAAsB,oBAAoB,CACxC,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GAAG,SAAS,GAC5B,OAAO,CAAC,UAAU,CAAC,CAOrB"}

package/dist/service/cloudformation/cdk/assets/sim-cdk-asset-bytes.js

@@ -0,0 +1,57 @@
+import path from "node:path";
+import { readFile, readdir } from "node:fs/promises";
+import { SimZipArchiveBuilder } from "../../../../util/zip/zip-archive-builder.js";
+/**
+ * Read the publishable bytes for one CDK cloud assembly file asset.
+ *
+ * CDK stages two shapes of file asset in a cloud assembly. A "file" asset is
+ * already a single file on disk, such as the stack template JSON or a prebuilt
+ * layer zip, and publishes byte for byte. A "zip" asset is a directory that the
+ * real `cdk-assets` publisher zips on its way to the staging bucket, so the
+ * simulated publisher zips it here, in memory.
+ */
+export async function readSimCdkAssetBytes(sourcePath, packaging) {
+    if (packaging === "zip") {
+        return await zipSimCdkAssetDirectory(sourcePath);
+    }
+    // eslint-disable-next-line security/detect-non-literal-fs-filename
+    return await readFile(sourcePath);
+}
+/**
+ * Zip a CDK asset directory into Lambda-readable archive bytes.
+ *
+ * Entries are sorted so the same asset directory always produces the same
+ * archive bytes, as a content-addressed CDK asset should.
+ */
+async function zipSimCdkAssetDirectory(directoryPath) {
+    const archivePaths = await assetArchivePaths(directoryPath);
+    const files = await Promise.all(archivePaths.map(async (archivePath) => ({
+        archivePath,
+        // eslint-disable-next-line security/detect-non-literal-fs-filename
+        content: await readFile(path.join(directoryPath, archivePath)),
+    })));
+    const builder = new SimZipArchiveBuilder();
+    for (const file of files) {
+        builder.addFile(file.archivePath, file.content);
+    }
+    return builder.toBytes();
+}
+/**
+ * The archive-relative paths of every file in a CDK asset directory, in a
+ * stable order and using zip forward-slash separators.
+ */
+async function assetArchivePaths(directoryPath) {
+    // eslint-disable-next-line security/detect-non-literal-fs-filename
+    const entries = await readdir(directoryPath, {
+        recursive: true,
+        withFileTypes: true,
+    });
+    return entries
+        .filter((entry) => entry.isFile())
+        .map((entry) => path
+        .relative(directoryPath, path.join(entry.parentPath, entry.name))
+        .split(path.sep)
+        .join("/"))
+        .toSorted((left, right) => left.localeCompare(right));
+}
+//# sourceMappingURL=sim-cdk-asset-bytes.js.map

package/dist/service/cloudformation/cdk/assets/sim-cdk-asset-bytes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cdk-asset-bytes.js","sourceRoot":"","sources":["../../../../../src/service/cloudformation/cdk/assets/sim-cdk-asset-bytes.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAC;AAEnF;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,UAAkB,EAClB,SAA6B;IAE7B,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;QACxB,OAAO,MAAM,uBAAuB,CAAC,UAAU,CAAC,CAAC;IACnD,CAAC;IAED,mEAAmE;IACnE,OAAO,MAAM,QAAQ,CAAC,UAAU,CAAC,CAAC;AACpC,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,uBAAuB,CACpC,aAAqB;IAErB,MAAM,YAAY,GAAG,MAAM,iBAAiB,CAAC,aAAa,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7B,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;QACvC,WAAW;QACX,mEAAmE;QACnE,OAAO,EAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;KAC/D,CAAC,CAAC,CACJ,CAAC;IAEF,MAAM,OAAO,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC3C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAClD,CAAC;IAED,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;AAC3B,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,iBAAiB,CAC9B,aAAqB;IAErB,mEAAmE;IACnE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,aAAa,EAAE;QAC3C,SAAS,EAAE,IAAI;QACf,aAAa,EAAE,IAAI;KACpB,CAAC,CAAC;IAEH,OAAO,OAAO;SACX,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;SACjC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACb,IAAI;SACD,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;SAChE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC;SACf,IAAI,CAAC,GAAG,CAAC,CACb;SACA,QAAQ,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;AAC1D,CAAC"}