@kensio/yulin 0.35.0 → 0.37.0

package/dist/service/lambda/command/remove-permission/remove-permission.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remove-permission.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/command/remove-permission/remove-permission.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAE3F;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,KAAK,EAAE,+BAA+B,CAAC;CACjD;AAED;;GAEG;AACH,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3C;AAED;;GAEG;AACH,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC"}

package/dist/service/lambda/command/remove-permission/remove-permission.command.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=remove-permission.command.js.map

package/dist/service/lambda/command/remove-permission/remove-permission.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remove-permission.command.js","sourceRoot":"","sources":["../../../../../src/service/lambda/command/remove-permission/remove-permission.command.ts"],"names":[],"mappings":""}

package/dist/service/lambda/command/remove-permission/remove-permission.handler.d.ts

@@ -0,0 +1,31 @@
+import type { CommandHandler } from "../../../../command/command-handler.js";
+import type { BackgroundScheduler } from "../../../../util/background/background.js";
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimLambdaFunctionLookup } from "../../function/url/sim-lambda-function-lookup.js";
+import type { SimRemovePermissionCommand, SimRemovePermissionCommandOutput } from "./remove-permission.command.js";
+interface RemovePermissionCommandHandlerProperties {
+    readonly functions: SimLambdaFunctionLookup;
+    readonly iam: SimIamInterServiceAuthZ;
+    readonly background: BackgroundScheduler;
+}
+interface RemovePermissionCommandHandlerOptions {
+    readonly caller?: SimAwsCaller;
+}
+/**
+ * Simulated Lambda RemovePermissionCommand handler.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/lambda/command/RemovePermissionCommand/
+ */
+export declare class RemovePermissionCommandHandler implements CommandHandler<SimRemovePermissionCommand, SimRemovePermissionCommandOutput> {
+    private readonly functions;
+    private readonly authorizer;
+    private readonly background;
+    constructor(properties: RemovePermissionCommandHandlerProperties);
+    /**
+     * Revoke a permission from a sim Lambda function's resource policy.
+     */
+    handle(command: SimRemovePermissionCommand, options?: RemovePermissionCommandHandlerOptions): Promise<SimRemovePermissionCommandOutput>;
+}
+export {};
+//# sourceMappingURL=remove-permission.handler.d.ts.map

package/dist/service/lambda/command/remove-permission/remove-permission.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remove-permission.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/command/remove-permission/remove-permission.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AAErF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AACtG,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kDAAkD,CAAC;AAEhG,OAAO,KAAK,EACV,0BAA0B,EAC1B,gCAAgC,EACjC,MAAM,gCAAgC,CAAC;AAExC,UAAU,wCAAwC;IAChD,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAC;IAC5C,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;IACtC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;CAC1C;AAED,UAAU,qCAAqC;IAC7C,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;GAIG;AACH,qBAAa,8BAA+B,YAAW,cAAc,CACnE,0BAA0B,EAC1B,gCAAgC,CACjC;IACC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA0B;IACpD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAwB;IACnD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,UAAU,EAAE,wCAAwC,EAO/D;IAED;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,0BAA0B,EACnC,OAAO,CAAC,EAAE,qCAAqC,GAC9C,OAAO,CAAC,gCAAgC,CAAC,CAwB3C;CACF"}

package/dist/service/lambda/command/remove-permission/remove-permission.handler.js

@@ -0,0 +1,36 @@
+import { assertDefined } from "../../../../util/type-guard/defined.js";
+import { FunctionUrlAuthorizer } from "../function-url/function-url-authorizer.js";
+/**
+ * Simulated Lambda RemovePermissionCommand handler.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/lambda/command/RemovePermissionCommand/
+ */
+export class RemovePermissionCommandHandler {
+    functions;
+    authorizer;
+    background;
+    constructor(properties) {
+        this.functions = properties.functions;
+        this.authorizer = new FunctionUrlAuthorizer({
+            iam: properties.iam,
+            action: "lambda:RemovePermission",
+        });
+        this.background = properties.background;
+    }
+    /**
+     * Revoke a permission from a sim Lambda function's resource policy.
+     */
+    async handle(command, options) {
+        const { input } = command;
+        assertDefined(input.FunctionName, "RemovePermissionCommand.input.FunctionName required");
+        assertDefined(input.StatementId, "RemovePermissionCommand.input.StatementId required");
+        await this.background.sequence();
+        const functionName = input.FunctionName;
+        this.authorizer.authorize(this.functions.functionArn(functionName), options?.caller);
+        this.functions
+            .require(functionName)
+            .resourcePolicy.remove(input.StatementId);
+        return { $metadata: {} };
+    }
+}
+//# sourceMappingURL=remove-permission.handler.js.map

package/dist/service/lambda/command/remove-permission/remove-permission.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remove-permission.handler.js","sourceRoot":"","sources":["../../../../../src/service/lambda/command/remove-permission/remove-permission.handler.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAIvE,OAAO,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AAgBnF;;;;GAIG;AACH,MAAM,OAAO,8BAA8B;IAIxB,SAAS,CAA0B;IACnC,UAAU,CAAwB;IAClC,UAAU,CAAsB;IAEjD,YAAY,UAAoD;QAC9D,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,UAAU,GAAG,IAAI,qBAAqB,CAAC;YAC1C,GAAG,EAAE,UAAU,CAAC,GAAG;YACnB,MAAM,EAAE,yBAAyB;SAClC,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,OAAmC,EACnC,OAA+C;QAE/C,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAC1B,aAAa,CACX,KAAK,CAAC,YAAY,EAClB,qDAAqD,CACtD,CAAC;QACF,aAAa,CACX,KAAK,CAAC,WAAW,EACjB,oDAAoD,CACrD,CAAC;QAEF,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;QACxC,IAAI,CAAC,UAAU,CAAC,SAAS,CACvB,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,YAAY,CAAC,EACxC,OAAO,EAAE,MAAM,CAChB,CAAC;QAEF,IAAI,CAAC,SAAS;aACX,OAAO,CAAC,YAAY,CAAC;aACrB,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAE5C,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC3B,CAAC;CACF"}

package/dist/service/lambda/command/sim-lambda-command.types.d.ts

@@ -0,0 +1,19 @@
+/**
+ * The SDK command input and output types simulated Lambda handles.
+ *
+ * Each command owns its own structural types beside its handler. They are
+ * gathered here so the SimLambda facade, which needs every one of them to
+ * declare its methods, names one module rather than one per command.
+ */
+export type { SimAddPermissionCommand, SimAddPermissionCommandOutput, } from "./add-permission/add-permission.command.js";
+export type { SimCreateFunctionCommand, SimCreateFunctionCommandOutput, } from "./create-function/create-function.command.js";
+export type { SimCreateFunctionUrlConfigCommand, SimCreateFunctionUrlConfigCommandOutput, } from "./create-function-url-config/create-function-url-config.command.js";
+export type { SimDeleteFunctionUrlConfigCommand, SimDeleteFunctionUrlConfigCommandOutput, } from "./delete-function-url-config/delete-function-url-config.command.js";
+export type { SimGetFunctionCommand, SimGetFunctionCommandOutput, } from "./get-function/get-function.command.js";
+export type { SimGetFunctionUrlConfigCommand, SimGetFunctionUrlConfigCommandOutput, } from "./get-function-url-config/get-function-url-config.command.js";
+export type { SimGetPolicyCommand, SimGetPolicyCommandOutput, } from "./get-policy/get-policy.command.js";
+export type { SimInvokeCommand, SimInvokeCommandOutput, } from "./invoke/invoke.command.js";
+export type { SimListFunctionUrlConfigsCommand, SimListFunctionUrlConfigsCommandOutput, } from "./list-function-url-configs/list-function-url-configs.command.js";
+export type { SimRemovePermissionCommand, SimRemovePermissionCommandOutput, } from "./remove-permission/remove-permission.command.js";
+export type { SimUpdateFunctionUrlConfigCommand, SimUpdateFunctionUrlConfigCommandOutput, } from "./update-function-url-config/update-function-url-config.command.js";
+//# sourceMappingURL=sim-lambda-command.types.d.ts.map

package/dist/service/lambda/command/sim-lambda-command.types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-command.types.d.ts","sourceRoot":"","sources":["../../../../src/service/lambda/command/sim-lambda-command.types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,YAAY,EACV,uBAAuB,EACvB,6BAA6B,GAC9B,MAAM,4CAA4C,CAAC;AACpD,YAAY,EACV,wBAAwB,EACxB,8BAA8B,GAC/B,MAAM,8CAA8C,CAAC;AACtD,YAAY,EACV,iCAAiC,EACjC,uCAAuC,GACxC,MAAM,oEAAoE,CAAC;AAC5E,YAAY,EACV,iCAAiC,EACjC,uCAAuC,GACxC,MAAM,oEAAoE,CAAC;AAC5E,YAAY,EACV,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,wCAAwC,CAAC;AAChD,YAAY,EACV,8BAA8B,EAC9B,oCAAoC,GACrC,MAAM,8DAA8D,CAAC;AACtE,YAAY,EACV,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,oCAAoC,CAAC;AAC5C,YAAY,EACV,gBAAgB,EAChB,sBAAsB,GACvB,MAAM,4BAA4B,CAAC;AACpC,YAAY,EACV,gCAAgC,EAChC,sCAAsC,GACvC,MAAM,kEAAkE,CAAC;AAC1E,YAAY,EACV,0BAA0B,EAC1B,gCAAgC,GACjC,MAAM,kDAAkD,CAAC;AAC1D,YAAY,EACV,iCAAiC,EACjC,uCAAuC,GACxC,MAAM,oEAAoE,CAAC"}

package/dist/service/lambda/command/sim-lambda-command.types.js

@@ -0,0 +1,9 @@
+/**
+ * The SDK command input and output types simulated Lambda handles.
+ *
+ * Each command owns its own structural types beside its handler. They are
+ * gathered here so the SimLambda facade, which needs every one of them to
+ * declare its methods, names one module rather than one per command.
+ */
+export {};
+//# sourceMappingURL=sim-lambda-command.types.js.map

package/dist/service/lambda/command/sim-lambda-command.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-command.types.js","sourceRoot":"","sources":["../../../../src/service/lambda/command/sim-lambda-command.types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG"}

package/dist/service/lambda/command/update-function-url-config/update-function-url-config.command.d.ts

@@ -0,0 +1,29 @@
+/**
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/lambda/command/UpdateFunctionUrlConfigCommand/
+ */
+import type { SimResponseMetadata } from "../../../aws/metadata/response-metadata.type.js";
+import type { SimLambdaFunctionUrlAuthType, SimLambdaFunctionUrlConfiguration, SimLambdaFunctionUrlInvokeMode } from "../../function/url/sim-lambda-function-url.js";
+/**
+ * Minimal structural sim Lambda UpdateFunctionUrlConfig command.
+ */
+export interface SimUpdateFunctionUrlConfigCommand {
+    readonly input: SimUpdateFunctionUrlConfigCommandInput;
+}
+/**
+ * Minimal structural sim Lambda UpdateFunctionUrlConfig input.
+ *
+ * Omitted values leave that part of the configuration as it is, as on real
+ * Lambda.
+ */
+export interface SimUpdateFunctionUrlConfigCommandInput {
+    readonly FunctionName?: string | undefined;
+    readonly AuthType?: SimLambdaFunctionUrlAuthType | undefined;
+    readonly InvokeMode?: SimLambdaFunctionUrlInvokeMode | undefined;
+}
+/**
+ * Minimal structural sim Lambda UpdateFunctionUrlConfig output.
+ */
+export interface SimUpdateFunctionUrlConfigCommandOutput extends SimLambdaFunctionUrlConfiguration {
+    readonly $metadata: SimResponseMetadata;
+}
+//# sourceMappingURL=update-function-url-config.command.d.ts.map

package/dist/service/lambda/command/update-function-url-config/update-function-url-config.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-function-url-config.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/command/update-function-url-config/update-function-url-config.command.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,KAAK,EACV,4BAA4B,EAC5B,iCAAiC,EACjC,8BAA8B,EAC/B,MAAM,+CAA+C,CAAC;AAEvD;;GAEG;AACH,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,KAAK,EAAE,sCAAsC,CAAC;CACxD;AAED;;;;;GAKG;AACH,MAAM,WAAW,sCAAsC;IACrD,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,QAAQ,CAAC,EAAE,4BAA4B,GAAG,SAAS,CAAC;IAC7D,QAAQ,CAAC,UAAU,CAAC,EAAE,8BAA8B,GAAG,SAAS,CAAC;CAClE;AAED;;GAEG;AACH,MAAM,WAAW,uCAAwC,SAAQ,iCAAiC;IAChG,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC"}

package/dist/service/lambda/command/update-function-url-config/update-function-url-config.command.js

@@ -0,0 +1,5 @@
+/**
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/lambda/command/UpdateFunctionUrlConfigCommand/
+ */
+export {};
+//# sourceMappingURL=update-function-url-config.command.js.map

package/dist/service/lambda/command/update-function-url-config/update-function-url-config.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-function-url-config.command.js","sourceRoot":"","sources":["../../../../../src/service/lambda/command/update-function-url-config/update-function-url-config.command.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/service/lambda/command/update-function-url-config/update-function-url-config.handler.d.ts

@@ -0,0 +1,35 @@
+import type { CommandHandler } from "../../../../command/command-handler.js";
+import { type BackgroundScheduler } from "../../../../util/background/background.js";
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import { type SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimLambdaFunctionLookup } from "../../function/url/sim-lambda-function-lookup.js";
+import type { SimLambdaFunctionUrlStore } from "../../function/url/sim-lambda-function-url-store.js";
+import type { SimUpdateFunctionUrlConfigCommand, SimUpdateFunctionUrlConfigCommandOutput } from "./update-function-url-config.command.js";
+interface UpdateFunctionUrlConfigCommandHandlerProperties {
+    functionUrls: SimLambdaFunctionUrlStore;
+    functions: SimLambdaFunctionLookup;
+    iam?: SimIamInterServiceAuthZ;
+    background?: BackgroundScheduler;
+}
+interface UpdateFunctionUrlConfigCommandHandlerOptions {
+    readonly caller?: SimAwsCaller;
+}
+/**
+ * Simulated Lambda UpdateFunctionUrlConfigCommand handler.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/lambda/command/UpdateFunctionUrlConfigCommand/
+ */
+export declare class UpdateFunctionUrlConfigCommandHandler implements CommandHandler<SimUpdateFunctionUrlConfigCommand, SimUpdateFunctionUrlConfigCommandOutput> {
+    private readonly functionUrls;
+    private readonly functions;
+    private readonly authorizer;
+    private readonly background;
+    private readonly inputParser;
+    constructor(properties: UpdateFunctionUrlConfigCommandHandlerProperties);
+    /**
+     * Update the Function URL configuration for a sim Lambda function.
+     */
+    handle(command: SimUpdateFunctionUrlConfigCommand, options?: UpdateFunctionUrlConfigCommandHandlerOptions): Promise<SimUpdateFunctionUrlConfigCommandOutput>;
+}
+export {};
+//# sourceMappingURL=update-function-url-config.handler.d.ts.map

package/dist/service/lambda/command/update-function-url-config/update-function-url-config.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-function-url-config.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/command/update-function-url-config/update-function-url-config.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AAEnD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,wDAAwD,CAAC;AAChE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kDAAkD,CAAC;AAChG,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,qDAAqD,CAAC;AAGrG,OAAO,KAAK,EACV,iCAAiC,EACjC,uCAAuC,EACxC,MAAM,yCAAyC,CAAC;AAEjD,UAAU,+CAA+C;IACvD,YAAY,EAAE,yBAAyB,CAAC;IACxC,SAAS,EAAE,uBAAuB,CAAC;IACnC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IAC9B,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAClC;AAED,UAAU,4CAA4C;IACpD,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;GAIG;AACH,qBAAa,qCAAsC,YAAW,cAAc,CAC1E,iCAAiC,EACjC,uCAAuC,CACxC;IACC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA4B;IACzD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA0B;IACpD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAwB;IACnD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAgC;IAE5D,YAAY,UAAU,EAAE,+CAA+C,EActE;IAED;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,iCAAiC,EAC1C,OAAO,CAAC,EAAE,4CAA4C,GACrD,OAAO,CAAC,uCAAuC,CAAC,CA4BlD;CACF"}

package/dist/service/lambda/command/update-function-url-config/update-function-url-config.handler.js

@@ -0,0 +1,48 @@
+import { BackgroundTasks, } from "../../../../util/background/background.js";
+import { assertDefined } from "../../../../util/type-guard/defined.js";
+import { SimIamAllowAllAuth, } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import { FunctionUrlAuthorizer } from "../function-url/function-url-authorizer.js";
+import { FunctionUrlInputParser } from "../function-url/function-url-input.js";
+/**
+ * Simulated Lambda UpdateFunctionUrlConfigCommand handler.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/lambda/command/UpdateFunctionUrlConfigCommand/
+ */
+export class UpdateFunctionUrlConfigCommandHandler {
+    functionUrls;
+    functions;
+    authorizer;
+    background;
+    inputParser = new FunctionUrlInputParser();
+    constructor(properties) {
+        const { functionUrls, functions, iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), } = properties;
+        this.functionUrls = functionUrls;
+        this.functions = functions;
+        this.authorizer = new FunctionUrlAuthorizer({
+            iam,
+            action: "lambda:UpdateFunctionUrlConfig",
+        });
+        this.background = background;
+    }
+    /**
+     * Update the Function URL configuration for a sim Lambda function.
+     */
+    async handle(command, options) {
+        assertDefined(command.input.FunctionName, "UpdateFunctionUrlConfigCommand.input.FunctionName required");
+        // Allow for potential non-deterministic sequencing of async events.
+        await this.background.sequence();
+        const functionName = command.input.FunctionName;
+        this.authorizer.authorize(this.functions.functionArn(functionName), options?.caller);
+        const simFunction = this.functions.require(functionName);
+        const functionUrl = this.functionUrls.require(simFunction);
+        functionUrl.update({
+            authType: this.inputParser.parseOptionalAuthType(command.input.AuthType),
+            invokeMode: this.inputParser.parseOptionalInvokeMode(command.input.InvokeMode),
+        });
+        return {
+            $metadata: {},
+            ...functionUrl.configuration(),
+        };
+    }
+}
+//# sourceMappingURL=update-function-url-config.handler.js.map

package/dist/service/lambda/command/update-function-url-config/update-function-url-config.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-function-url-config.handler.js","sourceRoot":"","sources":["../../../../../src/service/lambda/command/update-function-url-config/update-function-url-config.handler.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,eAAe,GAChB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAEvE,OAAO,EACL,kBAAkB,GAEnB,MAAM,wDAAwD,CAAC;AAGhE,OAAO,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AACnF,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAiB/E;;;;GAIG;AACH,MAAM,OAAO,qCAAqC;IAI/B,YAAY,CAA4B;IACxC,SAAS,CAA0B;IACnC,UAAU,CAAwB;IAClC,UAAU,CAAsB;IAChC,WAAW,GAAG,IAAI,sBAAsB,EAAE,CAAC;IAE5D,YAAY,UAA2D;QACrE,MAAM,EACJ,YAAY,EACZ,SAAS,EACT,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,UAAU,CAAC;QACf,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,UAAU,GAAG,IAAI,qBAAqB,CAAC;YAC1C,GAAG;YACH,MAAM,EAAE,gCAAgC;SACzC,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,OAA0C,EAC1C,OAAsD;QAEtD,aAAa,CACX,OAAO,CAAC,KAAK,CAAC,YAAY,EAC1B,4DAA4D,CAC7D,CAAC;QAEF,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC;QAChD,IAAI,CAAC,UAAU,CAAC,SAAS,CACvB,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,YAAY,CAAC,EACxC,OAAO,EAAE,MAAM,CAChB,CAAC;QACF,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAEzD,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC3D,WAAW,CAAC,MAAM,CAAC;YACjB,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,qBAAqB,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;YACxE,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,uBAAuB,CAClD,OAAO,CAAC,KAAK,CAAC,UAAU,CACzB;SACF,CAAC,CAAC;QAEH,OAAO;YACL,SAAS,EAAE,EAAE;YACb,GAAG,WAAW,CAAC,aAAa,EAAE;SAC/B,CAAC;IACJ,CAAC;CACF"}

package/dist/service/lambda/function/invoke/sim-lambda-invoke-context-builder.d.ts

@@ -1,9 +1,16 @@
 import type { SimLambdaCallback, SimLambdaContext } from "../sim-lambda-handler.type.js";
+import { type SimClock } from "../../../../util/clock/sim-clock.js";
 interface SimLambdaInvokeContextBuilderProperties {
     readonly functionName: string;
     readonly invokedFunctionArn: string;
     readonly timeoutSeconds: number;
     readonly memorySizeMb: number;
+    /**
+     * Clock measuring how much of the invocation timeout is left. Reading the
+     * remaining time from the simulation's clock means a stopped clock leaves a
+     * handler with a constant budget, rather than one that drains in real time.
+     */
+    readonly clock?: SimClock | undefined;
 }
 /**
  * Builds the AWS-like invocation context passed to a sim Lambda handler.

package/dist/service/lambda/function/invoke/sim-lambda-invoke-context-builder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda-invoke-context-builder.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/function/invoke/sim-lambda-invoke-context-builder.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,iBAAiB,EACjB,gBAAgB,EACjB,MAAM,+BAA+B,CAAC;AAEvC,UAAU,uCAAuC;IAC/C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED;;;;;GAKG;AACH,qBAAa,6BAA6B;IAEtC,OAAO,CAAC,QAAQ,CAAC,UAAU;IAD7B,YACmB,UAAU,EAAE,uCAAuC,EAClE;IAEJ;;OAEG;IACH,KAAK,CAAC,QAAQ,EAAE,iBAAiB,GAAG,gBAAgB,CA2BnD;CACF"}
+{"version":3,"file":"sim-lambda-invoke-context-builder.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/function/invoke/sim-lambda-invoke-context-builder.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,iBAAiB,EACjB,gBAAgB,EACjB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,KAAK,QAAQ,EAEd,MAAM,qCAAqC,CAAC;AAE7C,UAAU,uCAAuC;IAC/C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B;;;;OAIG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;CACvC;AAED;;;;;GAKG;AACH,qBAAa,6BAA6B;IAEtC,OAAO,CAAC,QAAQ,CAAC,UAAU;IAD7B,YACmB,UAAU,EAAE,uCAAuC,EAClE;IAEJ;;OAEG;IACH,KAAK,CAAC,QAAQ,EAAE,iBAAiB,GAAG,gBAAgB,CAmCnD;CACF"}

package/dist/service/lambda/function/invoke/sim-lambda-invoke-context-builder.js

@@ -1,4 +1,5 @@
 import { randomUUID } from "node:crypto";
+import { SimRealClock, } from "../../../../util/clock/sim-clock.js";
 /**
  * Builds the AWS-like invocation context passed to a sim Lambda handler.
  *
@@ -14,8 +15,8 @@ export class SimLambdaInvokeContextBuilder {
      * Build the context for one invocation.
      */
     build(callback) {
-        const { functionName, invokedFunctionArn, timeoutSeconds, memorySizeMb } = this.properties;
-        const startedAtMs = Date.now();
+        const { functionName, invokedFunctionArn, timeoutSeconds, memorySizeMb, clock = new SimRealClock(), } = this.properties;
+        const startedAtMs = clock.now().getTime();
         const awsRequestId = randomUUID();
         return {
             callbackWaitsForEmptyEventLoop: true,
@@ -26,7 +27,7 @@ export class SimLambdaInvokeContextBuilder {
             awsRequestId,
             logGroupName: `/aws/lambda/${functionName}`,
             logStreamName: `[$LATEST]${awsRequestId}`,
-            getRemainingTimeInMillis: () => Math.max(0, timeoutSeconds * 1000 - (Date.now() - startedAtMs)),
+            getRemainingTimeInMillis: () => Math.max(0, timeoutSeconds * 1000 - (clock.now().getTime() - startedAtMs)),
             done: (error, result) => {
                 callback(error ?? null, result);
             },

package/dist/service/lambda/function/invoke/sim-lambda-invoke-context-builder.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda-invoke-context-builder.js","sourceRoot":"","sources":["../../../../../src/service/lambda/function/invoke/sim-lambda-invoke-context-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAazC;;;;;GAKG;AACH,MAAM,OAAO,6BAA6B;IAErB,UAAU;IAD7B,YACmB,UAAmD;0BAAnD,UAAU;IAC1B,CAAC;IAEJ;;OAEG;IACH,KAAK,CAAC,QAA2B;QAC/B,MAAM,EAAE,YAAY,EAAE,kBAAkB,EAAE,cAAc,EAAE,YAAY,EAAE,GACtE,IAAI,CAAC,UAAU,CAAC;QAClB,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC/B,MAAM,YAAY,GAAG,UAAU,EAAE,CAAC;QAElC,OAAO;YACL,8BAA8B,EAAE,IAAI;YACpC,YAAY;YACZ,eAAe,EAAE,SAAS;YAC1B,kBAAkB;YAClB,eAAe,EAAE,MAAM,CAAC,YAAY,CAAC;YACrC,YAAY;YACZ,YAAY,EAAE,eAAe,YAAY,EAAE;YAC3C,aAAa,EAAE,YAAY,YAAY,EAAE;YACzC,wBAAwB,EAAE,GAAW,EAAE,CACrC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,cAAc,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC,CAAC;YACjE,IAAI,EAAE,CAAC,KAAa,EAAE,MAAgB,EAAQ,EAAE;gBAC9C,QAAQ,CAAC,KAAK,IAAI,IAAI,EAAE,MAAM,CAAC,CAAC;YAClC,CAAC;YACD,IAAI,EAAE,CAAC,KAAqB,EAAQ,EAAE;gBACpC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAClB,CAAC;YACD,OAAO,EAAE,CAAC,eAAwB,EAAQ,EAAE;gBAC1C,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;YAClC,CAAC;SACF,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-lambda-invoke-context-builder.js","sourceRoot":"","sources":["../../../../../src/service/lambda/function/invoke/sim-lambda-invoke-context-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAKzC,OAAO,EAEL,YAAY,GACb,MAAM,qCAAqC,CAAC;AAe7C;;;;;GAKG;AACH,MAAM,OAAO,6BAA6B;IAErB,UAAU;IAD7B,YACmB,UAAmD;0BAAnD,UAAU;IAC1B,CAAC;IAEJ;;OAEG;IACH,KAAK,CAAC,QAA2B;QAC/B,MAAM,EACJ,YAAY,EACZ,kBAAkB,EAClB,cAAc,EACd,YAAY,EACZ,KAAK,GAAG,IAAI,YAAY,EAAE,GAC3B,GAAG,IAAI,CAAC,UAAU,CAAC;QACpB,MAAM,WAAW,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;QAC1C,MAAM,YAAY,GAAG,UAAU,EAAE,CAAC;QAElC,OAAO;YACL,8BAA8B,EAAE,IAAI;YACpC,YAAY;YACZ,eAAe,EAAE,SAAS;YAC1B,kBAAkB;YAClB,eAAe,EAAE,MAAM,CAAC,YAAY,CAAC;YACrC,YAAY;YACZ,YAAY,EAAE,eAAe,YAAY,EAAE;YAC3C,aAAa,EAAE,YAAY,YAAY,EAAE;YACzC,wBAAwB,EAAE,GAAW,EAAE,CACrC,IAAI,CAAC,GAAG,CACN,CAAC,EACD,cAAc,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,WAAW,CAAC,CAC9D;YACH,IAAI,EAAE,CAAC,KAAa,EAAE,MAAgB,EAAQ,EAAE;gBAC9C,QAAQ,CAAC,KAAK,IAAI,IAAI,EAAE,MAAM,CAAC,CAAC;YAClC,CAAC;YACD,IAAI,EAAE,CAAC,KAAqB,EAAQ,EAAE;gBACpC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAClB,CAAC;YACD,OAAO,EAAE,CAAC,eAAwB,EAAQ,EAAE;gBAC1C,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;YAClC,CAAC;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/service/lambda/function/policy/sim-lambda-function-policy.d.ts

@@ -0,0 +1,47 @@
+import type { SimIamPolicyDocument } from "../../../iam/policy/sim-iam-policy.js";
+import type { SimLambdaPermission } from "./sim-lambda-permission.js";
+/**
+ * A simulated Lambda function's resource-based policy.
+ *
+ * This is the other half of Lambda authorization. An identity policy says what
+ * a principal may do; this says who may act on the function, which is the only
+ * way a principal in another Account can be allowed anything at all, since its
+ * own Account's policies are not evaluated here.
+ *
+ * Statements are keyed by their `StatementId`, because that is how
+ * `AddPermission` and `RemovePermission` address them.
+ */
+export declare class SimLambdaFunctionPolicy {
+    #private;
+    private readonly permissions;
+    /**
+     * The revision the policy is currently at, which changes with every grant
+     * and revocation.
+     */
+    get revisionId(): string;
+    /**
+     * Whether this function has no resource policy at all.
+     *
+     * Real Lambda has no empty policy: a function either has one or `GetPolicy`
+     * reports that it does not.
+     */
+    isEmpty(): boolean;
+    /**
+     * The permission a statement id names, if this policy has one.
+     */
+    get(statementId: string): SimLambdaPermission | undefined;
+    /**
+     * Grant a permission, refusing a statement id already in use.
+     */
+    add(permission: SimLambdaPermission): void;
+    /**
+     * Revoke a permission by its statement id, failing as AWS does when no
+     * statement has it.
+     */
+    remove(statementId: string): void;
+    /**
+     * The policy document, in the shape `GetPolicy` returns and IAM evaluates.
+     */
+    document(): SimIamPolicyDocument;
+}
+//# sourceMappingURL=sim-lambda-function-policy.d.ts.map

package/dist/service/lambda/function/policy/sim-lambda-function-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-function-policy.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/function/policy/sim-lambda-function-policy.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAKlF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAOtE;;;;;;;;;;GAUG;AACH,qBAAa,uBAAuB;;IAClC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA0C;IAGtE;;;OAGG;IACH,IAAI,UAAU,IAAI,MAAM,CAEvB;IAED;;;;;OAKG;IACH,OAAO,IAAI,OAAO,CAEjB;IAED;;OAEG;IACH,GAAG,CAAC,WAAW,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS,CAExD;IAED;;OAEG;IACH,GAAG,CAAC,UAAU,EAAE,mBAAmB,GAAG,IAAI,CAWzC;IAED;;;OAGG;IACH,MAAM,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAQhC;IAED;;OAEG;IACH,QAAQ,IAAI,oBAAoB,CAS/B;CACF"}

package/dist/service/lambda/function/policy/sim-lambda-function-policy.js

@@ -0,0 +1,79 @@
+import { randomUUID } from "node:crypto";
+import { SimLambdaResourceConflictException, SimLambdaResourceNotFoundException, } from "../../error/sim-lambda.error.js";
+/**
+ * The name real Lambda gives a function's resource policy document.
+ */
+const policyId = "default";
+/**
+ * A simulated Lambda function's resource-based policy.
+ *
+ * This is the other half of Lambda authorization. An identity policy says what
+ * a principal may do; this says who may act on the function, which is the only
+ * way a principal in another Account can be allowed anything at all, since its
+ * own Account's policies are not evaluated here.
+ *
+ * Statements are keyed by their `StatementId`, because that is how
+ * `AddPermission` and `RemovePermission` address them.
+ */
+export class SimLambdaFunctionPolicy {
+    permissions = new Map();
+    #revisionId = randomUUID();
+    /**
+     * The revision the policy is currently at, which changes with every grant
+     * and revocation.
+     */
+    get revisionId() {
+        return this.#revisionId;
+    }
+    /**
+     * Whether this function has no resource policy at all.
+     *
+     * Real Lambda has no empty policy: a function either has one or `GetPolicy`
+     * reports that it does not.
+     */
+    isEmpty() {
+        return this.permissions.size === 0;
+    }
+    /**
+     * The permission a statement id names, if this policy has one.
+     */
+    get(statementId) {
+        return this.permissions.get(statementId);
+    }
+    /**
+     * Grant a permission, refusing a statement id already in use.
+     */
+    add(permission) {
+        if (this.permissions.has(permission.statementId)) {
+            throw new SimLambdaResourceConflictException(`The statement id (${permission.statementId}) provided already ` +
+                `exists. Please provide a new statement id, or remove the ` +
+                `existing statement.`);
+        }
+        this.permissions.set(permission.statementId, permission);
+        this.#revisionId = randomUUID();
+    }
+    /**
+     * Revoke a permission by its statement id, failing as AWS does when no
+     * statement has it.
+     */
+    remove(statementId) {
+        if (!this.permissions.delete(statementId)) {
+            throw new SimLambdaResourceNotFoundException(`Statement ${statementId} is not found in resource policy.`);
+        }
+        this.#revisionId = randomUUID();
+    }
+    /**
+     * The policy document, in the shape `GetPolicy` returns and IAM evaluates.
+     */
+    document() {
+        return {
+            Version: "2012-10-17",
+            Id: policyId,
+            Statement: this.permissions
+                .values()
+                .map((permission) => permission.toStatement())
+                .toArray(),
+        };
+    }
+}
+//# sourceMappingURL=sim-lambda-function-policy.js.map

package/dist/service/lambda/function/policy/sim-lambda-function-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-function-policy.js","sourceRoot":"","sources":["../../../../../src/service/lambda/function/policy/sim-lambda-function-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EACL,kCAAkC,EAClC,kCAAkC,GACnC,MAAM,iCAAiC,CAAC;AAGzC;;GAEG;AACH,MAAM,QAAQ,GAAG,SAAS,CAAC;AAE3B;;;;;;;;;;GAUG;AACH,MAAM,OAAO,uBAAuB;IACjB,WAAW,GAAG,IAAI,GAAG,EAA+B,CAAC;IACtE,WAAW,GAAG,UAAU,EAAE,CAAC;IAE3B;;;OAGG;IACH,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED;;;;;OAKG;IACH,OAAO;QACL,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,WAAmB;QACrB,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC3C,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,UAA+B;QACjC,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,kCAAkC,CAC1C,qBAAqB,UAAU,CAAC,WAAW,qBAAqB;gBAC9D,2DAA2D;gBAC3D,qBAAqB,CACxB,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;QACzD,IAAI,CAAC,WAAW,GAAG,UAAU,EAAE,CAAC;IAClC,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,WAAmB;QACxB,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,kCAAkC,CAC1C,aAAa,WAAW,mCAAmC,CAC5D,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,WAAW,GAAG,UAAU,EAAE,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO;YACL,OAAO,EAAE,YAAY;YACrB,EAAE,EAAE,QAAQ;YACZ,SAAS,EAAE,IAAI,CAAC,WAAW;iBACxB,MAAM,EAAE;iBACR,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;iBAC7C,OAAO,EAAE;SACb,CAAC;IACJ,CAAC;CACF"}

package/dist/service/lambda/function/policy/sim-lambda-permission-principal.d.ts

@@ -0,0 +1,11 @@
+import type { SimIamPolicyDocumentPrincipal } from "../../../iam/policy/sim-iam-policy.js";
+/**
+ * Convert an AddPermission `Principal` into the policy Principal it becomes.
+ *
+ * Real Lambda accepts a shorthand here that IAM policy documents do not: an
+ * Account id, a service name, an ARN, or `*`. AddPermission expands whichever
+ * was given into the corresponding policy form, and `GetPolicy` returns the
+ * expanded document, so the same expansion happens here.
+ */
+export declare function simLambdaPermissionPrincipal(principal: string): SimIamPolicyDocumentPrincipal;
+//# sourceMappingURL=sim-lambda-permission-principal.d.ts.map

package/dist/service/lambda/function/policy/sim-lambda-permission-principal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-permission-principal.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/function/policy/sim-lambda-permission-principal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,uCAAuC,CAAC;AAI3F;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAC1C,SAAS,EAAE,MAAM,GAChB,6BAA6B,CAc/B"}

package/dist/service/lambda/function/policy/sim-lambda-permission-principal.js

@@ -0,0 +1,22 @@
+const accountIdPattern = /^\d{12}$/u;
+/**
+ * Convert an AddPermission `Principal` into the policy Principal it becomes.
+ *
+ * Real Lambda accepts a shorthand here that IAM policy documents do not: an
+ * Account id, a service name, an ARN, or `*`. AddPermission expands whichever
+ * was given into the corresponding policy form, and `GetPolicy` returns the
+ * expanded document, so the same expansion happens here.
+ */
+export function simLambdaPermissionPrincipal(principal) {
+    if (principal === "*") {
+        return "*";
+    }
+    if (accountIdPattern.test(principal)) {
+        return { AWS: `arn:aws:iam::${principal}:root` };
+    }
+    if (principal.startsWith("arn:")) {
+        return { AWS: principal };
+    }
+    return { Service: principal };
+}
+//# sourceMappingURL=sim-lambda-permission-principal.js.map

package/dist/service/lambda/function/policy/sim-lambda-permission-principal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-permission-principal.js","sourceRoot":"","sources":["../../../../../src/service/lambda/function/policy/sim-lambda-permission-principal.ts"],"names":[],"mappings":"AAEA,MAAM,gBAAgB,GAAG,WAAW,CAAC;AAErC;;;;;;;GAOG;AACH,MAAM,UAAU,4BAA4B,CAC1C,SAAiB;IAEjB,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;QACtB,OAAO,GAAG,CAAC;IACb,CAAC;IAED,IAAI,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACrC,OAAO,EAAE,GAAG,EAAE,gBAAgB,SAAS,OAAO,EAAE,CAAC;IACnD,CAAC;IAED,IAAI,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;IAC5B,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AAChC,CAAC"}

package/dist/service/lambda/function/policy/sim-lambda-permission.d.ts

@@ -0,0 +1,66 @@
+import type { SimIamPolicyDocumentStatement } from "../../../iam/policy/sim-iam-policy.js";
+/**
+ * The condition key a Function URL grant is conditioned on, so a permission
+ * granting `lambda:InvokeFunctionUrl` applies to the auth type it was granted
+ * for and not to another.
+ */
+export declare const simLambdaFunctionUrlAuthTypeConditionKey = "lambda:FunctionUrlAuthType";
+/**
+ * The condition key restricting an `lambda:InvokeFunction` grant to requests
+ * that arrived through the function's own URL.
+ *
+ * Nothing supplies a value for it, so a statement carrying it never matches.
+ * That is deliberate and is the safe direction: the simulator does not model
+ * the distinction, and refusing is better than granting the plain Invoke API
+ * something real AWS would only allow through the URL.
+ */
+export declare const simLambdaInvokedViaFunctionUrlConditionKey = "lambda:InvokedViaFunctionUrl";
+interface SimLambdaPermissionProperties {
+    readonly statementId: string;
+    readonly action: string;
+    readonly principal: string;
+    readonly resourceArn: string;
+    readonly functionUrlAuthType?: string | undefined;
+    readonly sourceArn?: string | undefined;
+    readonly sourceAccount?: string | undefined;
+    readonly principalOrgId?: string | undefined;
+    readonly invokedViaFunctionUrl?: boolean | undefined;
+}
+/**
+ * One statement of a simulated Lambda function's resource-based policy.
+ *
+ * `AddPermission` is a shorthand for writing a policy statement: it takes the
+ * parts and Lambda assembles the statement, which is what `GetPolicy` hands
+ * back. Modelling it as the permission rather than as a raw statement keeps
+ * that relationship, and keeps `RemovePermission` able to find a statement by
+ * its id.
+ */
+export declare class SimLambdaPermission {
+    readonly statementId: string;
+    readonly action: string;
+    readonly principal: string;
+    readonly resourceArn: string;
+    private readonly functionUrlAuthType?;
+    private readonly sourceArn?;
+    private readonly sourceAccount?;
+    private readonly principalOrgId?;
+    private readonly invokedViaFunctionUrl?;
+    constructor(properties: SimLambdaPermissionProperties);
+    /**
+     * The policy statement this permission expands into.
+     */
+    toStatement(): SimIamPolicyDocumentStatement;
+    /**
+     * The condition block the qualifying properties expand into.
+     *
+     * Only `lambda:FunctionUrlAuthType` is given a value at request time, so it
+     * is the only one that can match. The rest are still written into the
+     * statement, because `GetPolicy` should report the permission that was
+     * granted; a statement carrying one of them simply never matches, which is
+     * the safe direction for a condition the simulator cannot evaluate.
+     */
+    private condition;
+    private stringEqualsConditions;
+}
+export {};
+//# sourceMappingURL=sim-lambda-permission.d.ts.map

package/dist/service/lambda/function/policy/sim-lambda-permission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-permission.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/function/policy/sim-lambda-permission.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAGV,6BAA6B,EAC9B,MAAM,uCAAuC,CAAC;AAG/C;;;;GAIG;AACH,eAAO,MAAM,wCAAwC,+BACvB,CAAC;AAE/B;;;;;;;;GAQG;AACH,eAAO,MAAM,0CAA0C,iCACvB,CAAC;AAEjC,UAAU,6BAA6B;IACrC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CACtD;AAED;;;;;;;;GAQG;AACH,qBAAa,mBAAmB;IAC9B,SAAgB,WAAW,EAAE,MAAM,CAAC;IACpC,SAAgB,MAAM,EAAE,MAAM,CAAC;IAC/B,SAAgB,SAAS,EAAE,MAAM,CAAC;IAClC,SAAgB,WAAW,EAAE,MAAM,CAAC;IAEpC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAqB;IAC1D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAqB;IAChD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAqB;IACpD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAqB;IACrD,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAsB;IAE7D,YAAY,UAAU,EAAE,6BAA6B,EAUpD;IAED;;OAEG;IACH,WAAW,IAAI,6BAA6B,CAW3C;IAED;;;;;;;;OAQG;IACH,OAAO,CAAC,SAAS;IAsBjB,OAAO,CAAC,sBAAsB;CAa/B"}