@kensio/yulin 0.35.0 → 0.37.0

package/dist/service/lambda/function/policy/sim-lambda-permission.js

@@ -0,0 +1,101 @@
+import { simLambdaPermissionPrincipal } from "./sim-lambda-permission-principal.js";
+/**
+ * The condition key a Function URL grant is conditioned on, so a permission
+ * granting `lambda:InvokeFunctionUrl` applies to the auth type it was granted
+ * for and not to another.
+ */
+export const simLambdaFunctionUrlAuthTypeConditionKey = "lambda:FunctionUrlAuthType";
+/**
+ * The condition key restricting an `lambda:InvokeFunction` grant to requests
+ * that arrived through the function's own URL.
+ *
+ * Nothing supplies a value for it, so a statement carrying it never matches.
+ * That is deliberate and is the safe direction: the simulator does not model
+ * the distinction, and refusing is better than granting the plain Invoke API
+ * something real AWS would only allow through the URL.
+ */
+export const simLambdaInvokedViaFunctionUrlConditionKey = "lambda:InvokedViaFunctionUrl";
+/**
+ * One statement of a simulated Lambda function's resource-based policy.
+ *
+ * `AddPermission` is a shorthand for writing a policy statement: it takes the
+ * parts and Lambda assembles the statement, which is what `GetPolicy` hands
+ * back. Modelling it as the permission rather than as a raw statement keeps
+ * that relationship, and keeps `RemovePermission` able to find a statement by
+ * its id.
+ */
+export class SimLambdaPermission {
+    statementId;
+    action;
+    principal;
+    resourceArn;
+    functionUrlAuthType;
+    sourceArn;
+    sourceAccount;
+    principalOrgId;
+    invokedViaFunctionUrl;
+    constructor(properties) {
+        this.statementId = properties.statementId;
+        this.action = properties.action;
+        this.principal = properties.principal;
+        this.resourceArn = properties.resourceArn;
+        this.functionUrlAuthType = properties.functionUrlAuthType;
+        this.sourceArn = properties.sourceArn;
+        this.sourceAccount = properties.sourceAccount;
+        this.principalOrgId = properties.principalOrgId;
+        this.invokedViaFunctionUrl = properties.invokedViaFunctionUrl;
+    }
+    /**
+     * The policy statement this permission expands into.
+     */
+    toStatement() {
+        const condition = this.condition();
+        return {
+            Sid: this.statementId,
+            Effect: "Allow",
+            Principal: simLambdaPermissionPrincipal(this.principal),
+            Action: this.action,
+            Resource: this.resourceArn,
+            ...(condition !== undefined && { Condition: condition }),
+        };
+    }
+    /**
+     * The condition block the qualifying properties expand into.
+     *
+     * Only `lambda:FunctionUrlAuthType` is given a value at request time, so it
+     * is the only one that can match. The rest are still written into the
+     * statement, because `GetPolicy` should report the permission that was
+     * granted; a statement carrying one of them simply never matches, which is
+     * the safe direction for a condition the simulator cannot evaluate.
+     */
+    condition() {
+        const stringEquals = this.stringEqualsConditions();
+        const condition = {};
+        if (Object.keys(stringEquals).length > 0) {
+            condition["StringEquals"] = stringEquals;
+        }
+        if (this.sourceArn !== undefined) {
+            condition["ArnLike"] = { "AWS:SourceArn": this.sourceArn };
+        }
+        if (this.invokedViaFunctionUrl !== undefined) {
+            condition["Bool"] = {
+                [simLambdaInvokedViaFunctionUrlConditionKey]: this.invokedViaFunctionUrl,
+            };
+        }
+        return Object.keys(condition).length === 0 ? undefined : condition;
+    }
+    stringEqualsConditions() {
+        return {
+            ...(this.functionUrlAuthType !== undefined && {
+                [simLambdaFunctionUrlAuthTypeConditionKey]: this.functionUrlAuthType,
+            }),
+            ...(this.sourceAccount !== undefined && {
+                "AWS:SourceAccount": this.sourceAccount,
+            }),
+            ...(this.principalOrgId !== undefined && {
+                "aws:PrincipalOrgID": this.principalOrgId,
+            }),
+        };
+    }
+}
+//# sourceMappingURL=sim-lambda-permission.js.map

package/dist/service/lambda/function/policy/sim-lambda-permission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-permission.js","sourceRoot":"","sources":["../../../../../src/service/lambda/function/policy/sim-lambda-permission.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AAEpF;;;;GAIG;AACH,MAAM,CAAC,MAAM,wCAAwC,GACnD,4BAA4B,CAAC;AAE/B;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,0CAA0C,GACrD,8BAA8B,CAAC;AAcjC;;;;;;;;GAQG;AACH,MAAM,OAAO,mBAAmB;IACd,WAAW,CAAS;IACpB,MAAM,CAAS;IACf,SAAS,CAAS;IAClB,WAAW,CAAS;IAEnB,mBAAmB,CAAsB;IACzC,SAAS,CAAsB;IAC/B,aAAa,CAAsB;IACnC,cAAc,CAAsB;IACpC,qBAAqB,CAAuB;IAE7D,YAAY,UAAyC;QACnD,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,mBAAmB,GAAG,UAAU,CAAC,mBAAmB,CAAC;QAC1D,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;QAC9C,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,cAAc,CAAC;QAChD,IAAI,CAAC,qBAAqB,GAAG,UAAU,CAAC,qBAAqB,CAAC;IAChE,CAAC;IAED;;OAEG;IACH,WAAW;QACT,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAEnC,OAAO;YACL,GAAG,EAAE,IAAI,CAAC,WAAW;YACrB,MAAM,EAAE,OAAO;YACf,SAAS,EAAE,4BAA4B,CAAC,IAAI,CAAC,SAAS,CAAC;YACvD,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ,EAAE,IAAI,CAAC,WAAW;YAC1B,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;SACzD,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACK,SAAS;QACf,MAAM,YAAY,GAAG,IAAI,CAAC,sBAAsB,EAAE,CAAC;QACnD,MAAM,SAAS,GAAyD,EAAE,CAAC;QAE3E,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzC,SAAS,CAAC,cAAc,CAAC,GAAG,YAAY,CAAC;QAC3C,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACjC,SAAS,CAAC,SAAS,CAAC,GAAG,EAAE,eAAe,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;QAC7D,CAAC;QAED,IAAI,IAAI,CAAC,qBAAqB,KAAK,SAAS,EAAE,CAAC;YAC7C,SAAS,CAAC,MAAM,CAAC,GAAG;gBAClB,CAAC,0CAA0C,CAAC,EAC1C,IAAI,CAAC,qBAAqB;aAC7B,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IACrE,CAAC;IAEO,sBAAsB;QAC5B,OAAO;YACL,GAAG,CAAC,IAAI,CAAC,mBAAmB,KAAK,SAAS,IAAI;gBAC5C,CAAC,wCAAwC,CAAC,EAAE,IAAI,CAAC,mBAAmB;aACrE,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS,IAAI;gBACtC,mBAAmB,EAAE,IAAI,CAAC,aAAa;aACxC,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,cAAc,KAAK,SAAS,IAAI;gBACvC,oBAAoB,EAAE,IAAI,CAAC,cAAc;aAC1C,CAAC;SACH,CAAC;IACJ,CAAC;CACF"}

package/dist/service/lambda/function/sim-lambda-function.d.ts

@@ -3,6 +3,8 @@ import type { SimAwsRunAsOwner } from "../../aws/caller/sim-aws-run-as-context.j
 import type { SimAwsAccountRegionScope } from "../../aws/sim-aws-account-region-scope.js";
 import { type SimLambdaExecutableCode } from "./code/sim-lambda-executable-code.js";
 import { SimLambdaEnvironment } from "./environment/sim-lambda-environment.js";
+import { SimLambdaFunctionPolicy } from "./policy/sim-lambda-function-policy.js";
+import { type SimClock } from "../../../util/clock/sim-clock.js";
 import { type SimLambdaHandler } from "./sim-lambda-handler.type.js";
 export type SimLambdaFunctionName = Brand<string, "SimLambdaFunctionName">;
 export declare const DEFAULT_SIM_LAMBDA_TIMEOUT_SECONDS = 3;
@@ -50,6 +52,12 @@ interface SimLambdaFunctionProperties {
     memorySizeMb?: number | undefined;
     environment?: SimLambdaEnvironment | undefined;
     runAsOwner?: SimAwsRunAsOwner;
+    /**
+     * Clock this function's invocations measure their remaining time against. A
+     * function built standalone, outside a SimAws instance, falls back to the
+     * real clock.
+     */
+    clock?: SimClock | undefined;
 }
 /**
  * Simulated Lambda function resource.
@@ -70,9 +78,19 @@ export declare class SimLambdaFunction {
     readonly timeoutSeconds: number;
     readonly memorySizeMb: number;
     readonly environment: SimLambdaEnvironment;
+    /**
+     * This function's resource-based policy, which says who may act on it.
+     *
+     * It lives on the function because that is what it belongs to: it survives
+     * as long as the function does, and it is the only thing that can allow a
+     * principal from another Account, whose own policies this Account never
+     * sees.
+     */
+    readonly resourcePolicy: SimLambdaFunctionPolicy;
     private readonly code;
     private readonly runAsOwner;
     private readonly runner;
+    private readonly clock;
     constructor(properties: SimLambdaFunctionProperties);
     /**
      * Get the current state of this sim Lambda function.

package/dist/service/lambda/function/sim-lambda-function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda-function.d.ts","sourceRoot":"","sources":["../../../../src/service/lambda/function/sim-lambda-function.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4CAA4C,CAAC;AAGnF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAC1F,OAAO,EACL,KAAK,uBAAuB,EAE7B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AAG/E,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,8BAA8B,CAAC;AAEtC,MAAM,MAAM,qBAAqB,GAAG,KAAK,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;AAE3E,eAAO,MAAM,kCAAkC,IAAI,CAAC;AACpD,eAAO,MAAM,iCAAiC,MAAM,CAAC;AAErD,MAAM,MAAM,oBAAoB,GAAG,GAAG,CACpC,qBAAqB,EACrB,iBAAiB,CAClB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAChC,SAAS,GAAG,QAAQ,GAAG,UAAU,GAAG,QAAQ,CAAC;AAE/C;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAC9B,kBAAkB,MAAM,IAAI,MAAM,aAAa,MAAM,EAAE,CAAC;AAE1D;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,wBAAwB,EAC/B,IAAI,EAAE,MAAM,GACX,oBAAoB,CAEtB;AAED;;;GAGG;AACH,MAAM,WAAW,8BAA8B;IAC7C,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,oBAAoB,CAAC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,sBAAsB,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,WAAW,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,GAAG,SAAS,CAAC;CACjE;AAED,UAAU,2BAA2B;IACnC,IAAI,EAAE,qBAAqB,GAAG,MAAM,CAAC;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,kBAAkB,CAAC,EAAE,wBAAwB,CAAC;IACvD,eAAe,CAAC,EAAE,gBAAgB,CAAC;IACnC,IAAI,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAC;IAC3C,KAAK,CAAC,EAAE,sBAAsB,CAAC;IAC/B,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,WAAW,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC;IAC/C,UAAU,CAAC,EAAE,gBAAgB,CAAC;CAC/B;AAED;;;;;;;GAOG;AACH,qBAAa,iBAAiB;;IAC5B,SAAgB,IAAI,EAAE,qBAAqB,CAAC;IAC5C,SAAgB,OAAO,EAAE,MAAM,CAAC;IAChC,SAAgB,kBAAkB,EAAE,wBAAwB,CAAC;IAC7D,SAAgB,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,SAAgB,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,SAAgB,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,SAAgB,cAAc,EAAE,MAAM,CAAC;IACvC,SAAgB,YAAY,EAAE,MAAM,CAAC;IACrC,SAAgB,WAAW,EAAE,oBAAoB,CAAC;IAGlD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA0B;IAC/C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmB;IAC9C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgC;IAEvD,YAAY,UAAU,EAAE,2BAA2B,EAkClD;IAED;;OAEG;IACH,IAAI,KAAK,IAAI,sBAAsB,CAElC;IAED;;OAEG;IACH,IAAI,GAAG,IAAI,oBAAoB,CAE9B;IAED;;OAEG;IACH,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAGxB;IAED;;OAEG;IACH,aAAa,IAAI,8BAA8B,CAc9C;IAED;;;;;;;;;;;OAWG;IACG,MAAM,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAqB7C;CACF"}
+{"version":3,"file":"sim-lambda-function.d.ts","sourceRoot":"","sources":["../../../../src/service/lambda/function/sim-lambda-function.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4CAA4C,CAAC;AAGnF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAC1F,OAAO,EACL,KAAK,uBAAuB,EAE7B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AAC/E,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AAGjF,OAAO,EAAE,KAAK,QAAQ,EAAgB,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,8BAA8B,CAAC;AAEtC,MAAM,MAAM,qBAAqB,GAAG,KAAK,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;AAE3E,eAAO,MAAM,kCAAkC,IAAI,CAAC;AACpD,eAAO,MAAM,iCAAiC,MAAM,CAAC;AAErD,MAAM,MAAM,oBAAoB,GAAG,GAAG,CACpC,qBAAqB,EACrB,iBAAiB,CAClB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAChC,SAAS,GAAG,QAAQ,GAAG,UAAU,GAAG,QAAQ,CAAC;AAE/C;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAC9B,kBAAkB,MAAM,IAAI,MAAM,aAAa,MAAM,EAAE,CAAC;AAE1D;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,wBAAwB,EAC/B,IAAI,EAAE,MAAM,GACX,oBAAoB,CAEtB;AAED;;;GAGG;AACH,MAAM,WAAW,8BAA8B;IAC7C,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,oBAAoB,CAAC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,sBAAsB,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,WAAW,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,GAAG,SAAS,CAAC;CACjE;AAED,UAAU,2BAA2B;IACnC,IAAI,EAAE,qBAAqB,GAAG,MAAM,CAAC;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,kBAAkB,CAAC,EAAE,wBAAwB,CAAC;IACvD,eAAe,CAAC,EAAE,gBAAgB,CAAC;IACnC,IAAI,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAC;IAC3C,KAAK,CAAC,EAAE,sBAAsB,CAAC;IAC/B,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,WAAW,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC;IAC/C,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B;;;;OAIG;IACH,KAAK,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;CAC9B;AAED;;;;;;;GAOG;AACH,qBAAa,iBAAiB;;IAC5B,SAAgB,IAAI,EAAE,qBAAqB,CAAC;IAC5C,SAAgB,OAAO,EAAE,MAAM,CAAC;IAChC,SAAgB,kBAAkB,EAAE,wBAAwB,CAAC;IAC7D,SAAgB,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,SAAgB,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,SAAgB,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,SAAgB,cAAc,EAAE,MAAM,CAAC;IACvC,SAAgB,YAAY,EAAE,MAAM,CAAC;IACrC,SAAgB,WAAW,EAAE,oBAAoB,CAAC;IAClD;;;;;;;OAOG;IACH,SAAgB,cAAc,0BAAiC;IAG/D,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA0B;IAC/C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmB;IAC9C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgC;IACvD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IAEjC,YAAY,UAAU,EAAE,2BAA2B,EAoClD;IAED;;OAEG;IACH,IAAI,KAAK,IAAI,sBAAsB,CAElC;IAED;;OAEG;IACH,IAAI,GAAG,IAAI,oBAAoB,CAE9B;IAED;;OAEG;IACH,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAGxB;IAED;;OAEG;IACH,aAAa,IAAI,8BAA8B,CAc9C;IAED;;;;;;;;;;;OAWG;IACG,MAAM,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAsB7C;CACF"}

package/dist/service/lambda/function/sim-lambda-function.js

@@ -2,8 +2,10 @@ import { simAwsRunAsContext } from "../../aws/caller/sim-aws-run-as-context.js";
 import { simAwsAccountRegionScopeFactory } from "../../aws/sim-aws-account-region-scope.factory.js";
 import { SimLambdaHandlerReferenceCode, } from "./code/sim-lambda-executable-code.js";
 import { SimLambdaEnvironment } from "./environment/sim-lambda-environment.js";
+import { SimLambdaFunctionPolicy } from "./policy/sim-lambda-function-policy.js";
 import { SimLambdaHandlerRunner } from "./invoke/sim-lambda-handler-runner.js";
 import { SimLambdaInvokeContextBuilder } from "./invoke/sim-lambda-invoke-context-builder.js";
+import { SimRealClock } from "../../../util/clock/sim-clock.js";
 import { defaultLambdaHandler, } from "./sim-lambda-handler.type.js";
 export const DEFAULT_SIM_LAMBDA_TIMEOUT_SECONDS = 3;
 export const DEFAULT_SIM_LAMBDA_MEMORY_SIZE_MB = 128;
@@ -31,12 +33,23 @@ export class SimLambdaFunction {
     timeoutSeconds;
     memorySizeMb;
     environment;
+    /**
+     * This function's resource-based policy, which says who may act on it.
+     *
+     * It lives on the function because that is what it belongs to: it survives
+     * as long as the function does, and it is the only thing that can allow a
+     * principal from another Account, whose own policies this Account never
+     * sees.
+     */
+    resourcePolicy = new SimLambdaFunctionPolicy();
     #state;
     code;
     runAsOwner;
     runner = new SimLambdaHandlerRunner();
+    clock;
     constructor(properties) {
-        const { name, roleArn, accountRegionScope = simAwsAccountRegionScopeFactory.make(), handlerFunction = defaultLambdaHandler, code, state = "Pending", handlerName, runtimeName, description, timeoutSeconds = DEFAULT_SIM_LAMBDA_TIMEOUT_SECONDS, memorySizeMb = DEFAULT_SIM_LAMBDA_MEMORY_SIZE_MB, environment, runAsOwner = this, } = properties;
+        const { name, roleArn, accountRegionScope = simAwsAccountRegionScopeFactory.make(), handlerFunction = defaultLambdaHandler, code, state = "Pending", handlerName, runtimeName, description, timeoutSeconds = DEFAULT_SIM_LAMBDA_TIMEOUT_SECONDS, memorySizeMb = DEFAULT_SIM_LAMBDA_MEMORY_SIZE_MB, environment, runAsOwner = this, clock = new SimRealClock(), } = properties;
+        this.clock = clock;
         this.name = name;
         this.roleArn = roleArn;
         this.accountRegionScope = accountRegionScope;
@@ -111,6 +124,7 @@ export class SimLambdaFunction {
             invokedFunctionArn: this.arn,
             timeoutSeconds: this.timeoutSeconds,
             memorySizeMb: this.memorySizeMb,
+            clock: this.clock,
         });
         return await simAwsRunAsContext.run(this.runAsOwner, { kind: "arn", arn: this.roleArn }, async () => await this.environment.runWith(async () => await this.runner.run(this.code.handlerFunction(), event, contextBuilder)));
     }

package/dist/service/lambda/function/sim-lambda-function.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda-function.js","sourceRoot":"","sources":["../../../../src/service/lambda/function/sim-lambda-function.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,4CAA4C,CAAC;AAChF,OAAO,EAAE,+BAA+B,EAAE,MAAM,mDAAmD,CAAC;AAEpG,OAAO,EAEL,6BAA6B,GAC9B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AAC/E,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,EAAE,6BAA6B,EAAE,MAAM,+CAA+C,CAAC;AAC9F,OAAO,EACL,oBAAoB,GAErB,MAAM,8BAA8B,CAAC;AAItC,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC;AACpD,MAAM,CAAC,MAAM,iCAAiC,GAAG,GAAG,CAAC;AAgBrD;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAA+B,EAC/B,IAAY;IAEZ,OAAO,kBAAkB,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,SAAS,aAAa,IAAI,EAAE,CAAC;AAClF,CAAC;AAoCD;;;;;;;GAOG;AACH,MAAM,OAAO,iBAAiB;IACZ,IAAI,CAAwB;IAC5B,OAAO,CAAS;IAChB,kBAAkB,CAA2B;IAC7C,WAAW,CAAqB;IAChC,WAAW,CAAqB;IAChC,WAAW,CAAqB;IAChC,cAAc,CAAS;IACvB,YAAY,CAAS;IACrB,WAAW,CAAuB;IAElD,MAAM,CAAyB;IACd,IAAI,CAA0B;IAC9B,UAAU,CAAmB;IAC7B,MAAM,GAAG,IAAI,sBAAsB,EAAE,CAAC;IAEvD,YAAY,UAAuC;QACjD,MAAM,EACJ,IAAI,EACJ,OAAO,EACP,kBAAkB,GAAG,+BAA+B,CAAC,IAAI,EAAE,EAC3D,eAAe,GAAG,oBAAoB,EACtC,IAAI,EACJ,KAAK,GAAG,SAAS,EACjB,WAAW,EACX,WAAW,EACX,WAAW,EACX,cAAc,GAAG,kCAAkC,EACnD,YAAY,GAAG,iCAAiC,EAChD,WAAW,EACX,UAAU,GAAG,IAAI,GAClB,GAAG,UAAU,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,IAA6B,CAAC;QAC1C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;QAC7C,IAAI,CAAC,IAAI,GAAG,IAAI,IAAI,IAAI,6BAA6B,CAAC,eAAe,CAAC,CAAC;QACvE,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,WAAW;YACd,WAAW;gBACX,IAAI,oBAAoB,CAAC;oBACvB,YAAY,EAAE,IAAI;oBAClB,UAAU,EAAE,kBAAkB,CAAC,UAAU;oBACzC,YAAY;iBACb,CAAC,CAAC;QACL,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,IAAI,GAAG;QACL,OAAO,oBAAoB,CAAC,IAAI,CAAC,kBAAkB,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC;QACvB,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,aAAa;QACX,OAAO;YACL,YAAY,EAAE,IAAI,CAAC,IAAI;YACvB,WAAW,EAAE,IAAI,CAAC,GAAG;YACrB,IAAI,EAAE,IAAI,CAAC,OAAO;YAClB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,OAAO,EAAE,SAAS;YAClB,OAAO,EAAE,IAAI,CAAC,cAAc;YAC5B,UAAU,EAAE,IAAI,CAAC,YAAY;YAC7B,OAAO,EAAE,IAAI,CAAC,WAAW;YACzB,OAAO,EAAE,IAAI,CAAC,WAAW;YACzB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE;SAC9C,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,MAAM,CAAC,KAAc;QACzB,MAAM,cAAc,GAAG,IAAI,6BAA6B,CAAC;YACvD,YAAY,EAAE,IAAI,CAAC,IAAI;YACvB,kBAAkB,EAAE,IAAI,CAAC,GAAG;YAC5B,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,YAAY,EAAE,IAAI,CAAC,YAAY;SAChC,CAAC,CAAC;QAEH,OAAO,MAAM,kBAAkB,CAAC,GAAG,CACjC,IAAI,CAAC,UAAU,EACf,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,EAClC,KAAK,IAAI,EAAE,CACT,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAC5B,KAAK,IAAI,EAAE,CACT,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CACnB,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAC3B,KAAK,EACL,cAAc,CACf,CACJ,CACJ,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-lambda-function.js","sourceRoot":"","sources":["../../../../src/service/lambda/function/sim-lambda-function.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,4CAA4C,CAAC;AAChF,OAAO,EAAE,+BAA+B,EAAE,MAAM,mDAAmD,CAAC;AAEpG,OAAO,EAEL,6BAA6B,GAC9B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AAC/E,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACjF,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,EAAE,6BAA6B,EAAE,MAAM,+CAA+C,CAAC;AAC9F,OAAO,EAAiB,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EACL,oBAAoB,GAErB,MAAM,8BAA8B,CAAC;AAItC,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC;AACpD,MAAM,CAAC,MAAM,iCAAiC,GAAG,GAAG,CAAC;AAgBrD;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAA+B,EAC/B,IAAY;IAEZ,OAAO,kBAAkB,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,SAAS,aAAa,IAAI,EAAE,CAAC;AAClF,CAAC;AA0CD;;;;;;;GAOG;AACH,MAAM,OAAO,iBAAiB;IACZ,IAAI,CAAwB;IAC5B,OAAO,CAAS;IAChB,kBAAkB,CAA2B;IAC7C,WAAW,CAAqB;IAChC,WAAW,CAAqB;IAChC,WAAW,CAAqB;IAChC,cAAc,CAAS;IACvB,YAAY,CAAS;IACrB,WAAW,CAAuB;IAClD;;;;;;;OAOG;IACa,cAAc,GAAG,IAAI,uBAAuB,EAAE,CAAC;IAE/D,MAAM,CAAyB;IACd,IAAI,CAA0B;IAC9B,UAAU,CAAmB;IAC7B,MAAM,GAAG,IAAI,sBAAsB,EAAE,CAAC;IACtC,KAAK,CAAW;IAEjC,YAAY,UAAuC;QACjD,MAAM,EACJ,IAAI,EACJ,OAAO,EACP,kBAAkB,GAAG,+BAA+B,CAAC,IAAI,EAAE,EAC3D,eAAe,GAAG,oBAAoB,EACtC,IAAI,EACJ,KAAK,GAAG,SAAS,EACjB,WAAW,EACX,WAAW,EACX,WAAW,EACX,cAAc,GAAG,kCAAkC,EACnD,YAAY,GAAG,iCAAiC,EAChD,WAAW,EACX,UAAU,GAAG,IAAI,EACjB,KAAK,GAAG,IAAI,YAAY,EAAE,GAC3B,GAAG,UAAU,CAAC;QACf,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,IAAI,GAAG,IAA6B,CAAC;QAC1C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;QAC7C,IAAI,CAAC,IAAI,GAAG,IAAI,IAAI,IAAI,6BAA6B,CAAC,eAAe,CAAC,CAAC;QACvE,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,WAAW;YACd,WAAW;gBACX,IAAI,oBAAoB,CAAC;oBACvB,YAAY,EAAE,IAAI;oBAClB,UAAU,EAAE,kBAAkB,CAAC,UAAU;oBACzC,YAAY;iBACb,CAAC,CAAC;QACL,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,IAAI,GAAG;QACL,OAAO,oBAAoB,CAAC,IAAI,CAAC,kBAAkB,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC;QACvB,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,aAAa;QACX,OAAO;YACL,YAAY,EAAE,IAAI,CAAC,IAAI;YACvB,WAAW,EAAE,IAAI,CAAC,GAAG;YACrB,IAAI,EAAE,IAAI,CAAC,OAAO;YAClB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,OAAO,EAAE,SAAS;YAClB,OAAO,EAAE,IAAI,CAAC,cAAc;YAC5B,UAAU,EAAE,IAAI,CAAC,YAAY;YAC7B,OAAO,EAAE,IAAI,CAAC,WAAW;YACzB,OAAO,EAAE,IAAI,CAAC,WAAW;YACzB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE;SAC9C,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,MAAM,CAAC,KAAc;QACzB,MAAM,cAAc,GAAG,IAAI,6BAA6B,CAAC;YACvD,YAAY,EAAE,IAAI,CAAC,IAAI;YACvB,kBAAkB,EAAE,IAAI,CAAC,GAAG;YAC5B,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC,CAAC;QAEH,OAAO,MAAM,kBAAkB,CAAC,GAAG,CACjC,IAAI,CAAC,UAAU,EACf,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,EAClC,KAAK,IAAI,EAAE,CACT,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAC5B,KAAK,IAAI,EAAE,CACT,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CACnB,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAC3B,KAAK,EACL,cAAc,CACf,CACJ,CACJ,CAAC;IACJ,CAAC;CACF"}

package/dist/service/lambda/function/url/sim-lambda-function-lookup.d.ts

@@ -0,0 +1,30 @@
+import type { SimAwsAccountRegionScope } from "../../../aws/sim-aws-account-region-scope.js";
+import { type SimLambdaFunction, type SimLambdaFunctionArn, type SimLambdaFunctionMap } from "../sim-lambda-function.js";
+interface SimLambdaFunctionLookupProperties {
+    readonly accountRegionScope: SimAwsAccountRegionScope;
+    readonly functions: SimLambdaFunctionMap;
+}
+/**
+ * Finds functions by name in one Account/Region scope, failing the way AWS
+ * does when the name belongs to no function.
+ *
+ * Commands that act on something belonging to a function, such as its
+ * Function URL, need this check before they can say anything about the thing
+ * itself.
+ */
+export declare class SimLambdaFunctionLookup {
+    private readonly accountRegionScope;
+    private readonly functions;
+    constructor(properties: SimLambdaFunctionLookupProperties);
+    /**
+     * Build the ARN a function has, or would have, in this scope.
+     */
+    functionArn(functionName: string): SimLambdaFunctionArn;
+    /**
+     * Get a function by name, or fail as AWS does when there is no such
+     * function.
+     */
+    require(functionName: string): SimLambdaFunction;
+}
+export {};
+//# sourceMappingURL=sim-lambda-function-lookup.d.ts.map

package/dist/service/lambda/function/url/sim-lambda-function-lookup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-function-lookup.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/function/url/sim-lambda-function-lookup.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAE7F,OAAO,EACL,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EAG1B,MAAM,2BAA2B,CAAC;AAEnC,UAAU,iCAAiC;IACzC,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;IACtD,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;CAC1C;AAED;;;;;;;GAOG;AACH,qBAAa,uBAAuB;IAClC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA2B;IAC9D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAuB;IAEjD,YAAY,UAAU,EAAE,iCAAiC,EAGxD;IAED;;OAEG;IACH,WAAW,CAAC,YAAY,EAAE,MAAM,GAAG,oBAAoB,CAEtD;IAED;;;OAGG;IACH,OAAO,CAAC,YAAY,EAAE,MAAM,GAAG,iBAAiB,CAY/C;CACF"}

package/dist/service/lambda/function/url/sim-lambda-function-lookup.js

@@ -0,0 +1,36 @@
+import { SimLambdaResourceNotFoundException } from "../../error/sim-lambda.error.js";
+import { simLambdaFunctionArn, } from "../sim-lambda-function.js";
+/**
+ * Finds functions by name in one Account/Region scope, failing the way AWS
+ * does when the name belongs to no function.
+ *
+ * Commands that act on something belonging to a function, such as its
+ * Function URL, need this check before they can say anything about the thing
+ * itself.
+ */
+export class SimLambdaFunctionLookup {
+    accountRegionScope;
+    functions;
+    constructor(properties) {
+        this.accountRegionScope = properties.accountRegionScope;
+        this.functions = properties.functions;
+    }
+    /**
+     * Build the ARN a function has, or would have, in this scope.
+     */
+    functionArn(functionName) {
+        return simLambdaFunctionArn(this.accountRegionScope, functionName);
+    }
+    /**
+     * Get a function by name, or fail as AWS does when there is no such
+     * function.
+     */
+    require(functionName) {
+        const simFunction = this.functions.get(functionName);
+        if (simFunction === undefined) {
+            throw new SimLambdaResourceNotFoundException(`Function not found: ${this.functionArn(functionName)}`);
+        }
+        return simFunction;
+    }
+}
+//# sourceMappingURL=sim-lambda-function-lookup.js.map

package/dist/service/lambda/function/url/sim-lambda-function-lookup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-function-lookup.js","sourceRoot":"","sources":["../../../../../src/service/lambda/function/url/sim-lambda-function-lookup.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kCAAkC,EAAE,MAAM,iCAAiC,CAAC;AACrF,OAAO,EAKL,oBAAoB,GACrB,MAAM,2BAA2B,CAAC;AAOnC;;;;;;;GAOG;AACH,MAAM,OAAO,uBAAuB;IACjB,kBAAkB,CAA2B;IAC7C,SAAS,CAAuB;IAEjD,YAAY,UAA6C;QACvD,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;QACxD,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,YAAoB;QAC9B,OAAO,oBAAoB,CAAC,IAAI,CAAC,kBAAkB,EAAE,YAAY,CAAC,CAAC;IACrE,CAAC;IAED;;;OAGG;IACH,OAAO,CAAC,YAAoB;QAC1B,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CACpC,YAAqC,CACtC,CAAC;QAEF,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,kCAAkC,CAC1C,uBAAuB,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE,CACxD,CAAC;QACJ,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;CACF"}

package/dist/service/lambda/function/url/sim-lambda-function-url-factory.d.ts

@@ -0,0 +1,37 @@
+import type { SimAwsAccountRegionScope } from "../../../aws/sim-aws-account-region-scope.js";
+import type { SimLambdaUrlRegistry } from "../../registry/sim-lambda-url-registry.js";
+import type { SimLambdaFunction } from "../sim-lambda-function.js";
+import { SimLambdaFunctionUrl, type SimLambdaFunctionUrlAuthType, type SimLambdaFunctionUrlInvokeMode } from "./sim-lambda-function-url.js";
+import { type SimClock } from "../../../../util/clock/sim-clock.js";
+export interface SimLambdaFunctionUrlFactoryProperties {
+    readonly accountRegionScope: SimAwsAccountRegionScope;
+    readonly urlRegistry: SimLambdaUrlRegistry;
+    readonly clock?: SimClock | undefined;
+}
+interface MakeSimLambdaFunctionUrlProperties {
+    readonly simFunction: SimLambdaFunction;
+    readonly authType?: SimLambdaFunctionUrlAuthType | undefined;
+    readonly invokeMode?: SimLambdaFunctionUrlInvokeMode | undefined;
+}
+/**
+ * Builds Function URLs, taking their ids from the cross-Account registry.
+ *
+ * Allocating and registering the id belong together: an id that is not
+ * registered names a URL the serving layer cannot route to.
+ */
+export declare class SimLambdaFunctionUrlFactory {
+    private readonly accountRegionScope;
+    private readonly urlRegistry;
+    private readonly clock;
+    constructor(properties: SimLambdaFunctionUrlFactoryProperties);
+    /**
+     * Make a registered Function URL for a function.
+     */
+    make(properties: MakeSimLambdaFunctionUrlProperties): SimLambdaFunctionUrl;
+    /**
+     * Forget a Function URL id, so its hostname stops resolving.
+     */
+    forget(functionUrl: SimLambdaFunctionUrl): void;
+}
+export {};
+//# sourceMappingURL=sim-lambda-function-url-factory.d.ts.map

package/dist/service/lambda/function/url/sim-lambda-function-url-factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-function-url-factory.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/function/url/sim-lambda-function-url-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACtF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EACL,oBAAoB,EACpB,KAAK,4BAA4B,EACjC,KAAK,8BAA8B,EACpC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,KAAK,QAAQ,EAEd,MAAM,qCAAqC,CAAC;AAE7C,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;IACtD,QAAQ,CAAC,WAAW,EAAE,oBAAoB,CAAC;IAC3C,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;CACvC;AAED,UAAU,kCAAkC;IAC1C,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAC;IACxC,QAAQ,CAAC,QAAQ,CAAC,EAAE,4BAA4B,GAAG,SAAS,CAAC;IAC7D,QAAQ,CAAC,UAAU,CAAC,EAAE,8BAA8B,GAAG,SAAS,CAAC;CAClE;AAED;;;;;GAKG;AACH,qBAAa,2BAA2B;IACtC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA2B;IAC9D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAuB;IACnD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IAEjC,YAAY,UAAU,EAAE,qCAAqC,EAI5D;IAED;;OAEG;IACH,IAAI,CAAC,UAAU,EAAE,kCAAkC,GAAG,oBAAoB,CAkBzE;IAED;;OAEG;IACH,MAAM,CAAC,WAAW,EAAE,oBAAoB,GAAG,IAAI,CAE9C;CACF"}

package/dist/service/lambda/function/url/sim-lambda-function-url-factory.js

@@ -0,0 +1,42 @@
+import { SimLambdaFunctionUrl, } from "./sim-lambda-function-url.js";
+import { SimRealClock, } from "../../../../util/clock/sim-clock.js";
+/**
+ * Builds Function URLs, taking their ids from the cross-Account registry.
+ *
+ * Allocating and registering the id belong together: an id that is not
+ * registered names a URL the serving layer cannot route to.
+ */
+export class SimLambdaFunctionUrlFactory {
+    accountRegionScope;
+    urlRegistry;
+    clock;
+    constructor(properties) {
+        this.accountRegionScope = properties.accountRegionScope;
+        this.urlRegistry = properties.urlRegistry;
+        this.clock = properties.clock ?? new SimRealClock();
+    }
+    /**
+     * Make a registered Function URL for a function.
+     */
+    make(properties) {
+        const { simFunction, authType, invokeMode } = properties;
+        const urlId = this.urlRegistry.allocateFunctionUrlId();
+        this.urlRegistry.registerFunctionUrl(urlId, this.accountRegionScope.accountId);
+        return new SimLambdaFunctionUrl({
+            urlId,
+            functionName: simFunction.name,
+            functionArn: simFunction.arn,
+            accountRegionScope: this.accountRegionScope,
+            authType,
+            invokeMode,
+            clock: this.clock,
+        });
+    }
+    /**
+     * Forget a Function URL id, so its hostname stops resolving.
+     */
+    forget(functionUrl) {
+        this.urlRegistry.deregisterFunctionUrl(functionUrl.urlId);
+    }
+}
+//# sourceMappingURL=sim-lambda-function-url-factory.js.map

package/dist/service/lambda/function/url/sim-lambda-function-url-factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-function-url-factory.js","sourceRoot":"","sources":["../../../../../src/service/lambda/function/url/sim-lambda-function-url-factory.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,oBAAoB,GAGrB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAEL,YAAY,GACb,MAAM,qCAAqC,CAAC;AAc7C;;;;;GAKG;AACH,MAAM,OAAO,2BAA2B;IACrB,kBAAkB,CAA2B;IAC7C,WAAW,CAAuB;IAClC,KAAK,CAAW;IAEjC,YAAY,UAAiD;QAC3D,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;QACxD,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,IAAI,IAAI,YAAY,EAAE,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,UAA8C;QACjD,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,UAAU,CAAC;QACzD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,qBAAqB,EAAE,CAAC;QAEvD,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAClC,KAAK,EACL,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAClC,CAAC;QAEF,OAAO,IAAI,oBAAoB,CAAC;YAC9B,KAAK;YACL,YAAY,EAAE,WAAW,CAAC,IAAI;YAC9B,WAAW,EAAE,WAAW,CAAC,GAAG;YAC5B,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,QAAQ;YACR,UAAU;YACV,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,WAAiC;QACtC,IAAI,CAAC,WAAW,CAAC,qBAAqB,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAC5D,CAAC;CACF"}

package/dist/service/lambda/function/url/sim-lambda-function-url-host.d.ts

@@ -0,0 +1,30 @@
+/**
+ * The DNS label real Lambda uses for Function URL endpoints, sitting between
+ * the URL id and the region:
+ *
+ *   <url-id>.lambda-url.<region>.on.aws
+ */
+export declare const lambdaFunctionUrlHostLabel = "lambda-url";
+/**
+ * The real AWS domain Function URL endpoints live under.
+ */
+export declare const lambdaFunctionUrlDomain = "on.aws";
+interface SimLambdaFunctionUrlHostProperties {
+    readonly urlId: string;
+    readonly regionName: string;
+}
+/**
+ * Build the real AWS endpoint hostname for a Function URL.
+ */
+export declare function simLambdaFunctionUrlHost(properties: SimLambdaFunctionUrlHostProperties): string;
+/**
+ * Build the logical hostname for a Function URL: the AWS endpoint hostname
+ * without the real AWS domain.
+ *
+ * This is the form Yulin serves on localhost, where the `.on.aws` tail is
+ * replaced by the local suffix, in the same way S3 endpoint hostnames drop
+ * `.amazonaws.com`.
+ */
+export declare function simLambdaFunctionUrlLogicalHost(properties: SimLambdaFunctionUrlHostProperties): string;
+export {};
+//# sourceMappingURL=sim-lambda-function-url-host.d.ts.map

package/dist/service/lambda/function/url/sim-lambda-function-url-host.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-function-url-host.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/function/url/sim-lambda-function-url-host.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,eAAe,CAAC;AAEvD;;GAEG;AACH,eAAO,MAAM,uBAAuB,WAAW,CAAC;AAEhD,UAAU,kCAAkC;IAC1C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,kCAAkC,GAC7C,MAAM,CAER;AAED;;;;;;;GAOG;AACH,wBAAgB,+BAA+B,CAC7C,UAAU,EAAE,kCAAkC,GAC7C,MAAM,CAER"}

package/dist/service/lambda/function/url/sim-lambda-function-url-host.js

@@ -0,0 +1,29 @@
+/**
+ * The DNS label real Lambda uses for Function URL endpoints, sitting between
+ * the URL id and the region:
+ *
+ *   <url-id>.lambda-url.<region>.on.aws
+ */
+export const lambdaFunctionUrlHostLabel = "lambda-url";
+/**
+ * The real AWS domain Function URL endpoints live under.
+ */
+export const lambdaFunctionUrlDomain = "on.aws";
+/**
+ * Build the real AWS endpoint hostname for a Function URL.
+ */
+export function simLambdaFunctionUrlHost(properties) {
+    return `${simLambdaFunctionUrlLogicalHost(properties)}.${lambdaFunctionUrlDomain}`;
+}
+/**
+ * Build the logical hostname for a Function URL: the AWS endpoint hostname
+ * without the real AWS domain.
+ *
+ * This is the form Yulin serves on localhost, where the `.on.aws` tail is
+ * replaced by the local suffix, in the same way S3 endpoint hostnames drop
+ * `.amazonaws.com`.
+ */
+export function simLambdaFunctionUrlLogicalHost(properties) {
+    return `${properties.urlId}.${lambdaFunctionUrlHostLabel}.${properties.regionName}`;
+}
+//# sourceMappingURL=sim-lambda-function-url-host.js.map

package/dist/service/lambda/function/url/sim-lambda-function-url-host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-function-url-host.js","sourceRoot":"","sources":["../../../../../src/service/lambda/function/url/sim-lambda-function-url-host.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,YAAY,CAAC;AAEvD;;GAEG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,QAAQ,CAAC;AAOhD;;GAEG;AACH,MAAM,UAAU,wBAAwB,CACtC,UAA8C;IAE9C,OAAO,GAAG,+BAA+B,CAAC,UAAU,CAAC,IAAI,uBAAuB,EAAE,CAAC;AACrF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,+BAA+B,CAC7C,UAA8C;IAE9C,OAAO,GAAG,UAAU,CAAC,KAAK,IAAI,0BAA0B,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;AACtF,CAAC"}

package/dist/service/lambda/function/url/sim-lambda-function-url-store.d.ts

@@ -0,0 +1,45 @@
+import type { SimLambdaFunction } from "../sim-lambda-function.js";
+import { type SimLambdaFunctionUrlFactoryProperties } from "./sim-lambda-function-url-factory.js";
+import type { SimLambdaFunctionUrl, SimLambdaFunctionUrlAuthType, SimLambdaFunctionUrlId, SimLambdaFunctionUrlInvokeMode } from "./sim-lambda-function-url.js";
+interface CreateSimLambdaFunctionUrlProperties {
+    readonly simFunction: SimLambdaFunction;
+    readonly authType?: SimLambdaFunctionUrlAuthType | undefined;
+    readonly invokeMode?: SimLambdaFunctionUrlInvokeMode | undefined;
+}
+/**
+ * Function URL state for one Account/Region scope of simulated Lambda.
+ *
+ * Each function has at most one Function URL, so URLs are held by function
+ * name.
+ */
+export declare class SimLambdaFunctionUrlStore {
+    private readonly functionUrls;
+    private readonly factory;
+    constructor(properties: SimLambdaFunctionUrlFactoryProperties);
+    /**
+     * Get a function's Function URL, if it has one.
+     */
+    get(functionName: string): SimLambdaFunctionUrl | undefined;
+    /**
+     * Get a function's Function URL, or fail as AWS does when it has none.
+     */
+    require(simFunction: SimLambdaFunction): SimLambdaFunctionUrl;
+    /**
+     * Get every Function URL a function has, which is either none or one.
+     */
+    allForFunction(functionName: string): readonly SimLambdaFunctionUrl[];
+    /**
+     * Find a Function URL by the id in its hostname.
+     */
+    byUrlId(urlId: SimLambdaFunctionUrlId): SimLambdaFunctionUrl | undefined;
+    /**
+     * Create a Function URL for a function that does not have one.
+     */
+    create(properties: CreateSimLambdaFunctionUrlProperties): SimLambdaFunctionUrl;
+    /**
+     * Delete a function's Function URL, so its hostname stops resolving.
+     */
+    delete(simFunction: SimLambdaFunction): void;
+}
+export {};
+//# sourceMappingURL=sim-lambda-function-url-store.d.ts.map

package/dist/service/lambda/function/url/sim-lambda-function-url-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-function-url-store.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/function/url/sim-lambda-function-url-store.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,iBAAiB,EAElB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAEL,KAAK,qCAAqC,EAC3C,MAAM,sCAAsC,CAAC;AAC9C,OAAO,KAAK,EACV,oBAAoB,EACpB,4BAA4B,EAC5B,sBAAsB,EACtB,8BAA8B,EAE/B,MAAM,8BAA8B,CAAC;AACtC,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAC;IACxC,QAAQ,CAAC,QAAQ,CAAC,EAAE,4BAA4B,GAAG,SAAS,CAAC;IAC7D,QAAQ,CAAC,UAAU,CAAC,EAAE,8BAA8B,GAAG,SAAS,CAAC;CAClE;AAED;;;;;GAKG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAsC;IACnE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA8B;IAItD,YAAY,UAAU,EAAE,qCAAqC,EAE5D;IAED;;OAEG;IACH,GAAG,CAAC,YAAY,EAAE,MAAM,GAAG,oBAAoB,GAAG,SAAS,CAE1D;IAED;;OAEG;IACH,OAAO,CAAC,WAAW,EAAE,iBAAiB,GAAG,oBAAoB,CAU5D;IAED;;OAEG;IACH,cAAc,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,oBAAoB,EAAE,CAQpE;IAED;;OAEG;IACH,OAAO,CAAC,KAAK,EAAE,sBAAsB,GAAG,oBAAoB,GAAG,SAAS,CAIvE;IAED;;OAEG;IACH,MAAM,CACJ,UAAU,EAAE,oCAAoC,GAC/C,oBAAoB,CAatB;IAED;;OAEG;IACH,MAAM,CAAC,WAAW,EAAE,iBAAiB,GAAG,IAAI,CAK3C;CACF"}

package/dist/service/lambda/function/url/sim-lambda-function-url-store.js

@@ -0,0 +1,72 @@
+import { SimLambdaResourceConflictException, SimLambdaResourceNotFoundException, } from "../../error/sim-lambda.error.js";
+import { SimLambdaFunctionUrlFactory, } from "./sim-lambda-function-url-factory.js";
+/**
+ * Function URL state for one Account/Region scope of simulated Lambda.
+ *
+ * Each function has at most one Function URL, so URLs are held by function
+ * name.
+ */
+export class SimLambdaFunctionUrlStore {
+    functionUrls = new Map();
+    factory;
+    // The store's construction inputs are exactly the factory's: it holds URL
+    // state and forwards the wiring straight through.
+    constructor(properties) {
+        this.factory = new SimLambdaFunctionUrlFactory(properties);
+    }
+    /**
+     * Get a function's Function URL, if it has one.
+     */
+    get(functionName) {
+        return this.functionUrls.get(functionName);
+    }
+    /**
+     * Get a function's Function URL, or fail as AWS does when it has none.
+     */
+    require(simFunction) {
+        const functionUrl = this.get(simFunction.name);
+        if (functionUrl === undefined) {
+            throw new SimLambdaResourceNotFoundException(`Function URL config not found for function: ${simFunction.arn}`);
+        }
+        return functionUrl;
+    }
+    /**
+     * Get every Function URL a function has, which is either none or one.
+     */
+    allForFunction(functionName) {
+        const functionUrl = this.get(functionName);
+        if (functionUrl === undefined) {
+            return [];
+        }
+        return [functionUrl];
+    }
+    /**
+     * Find a Function URL by the id in its hostname.
+     */
+    byUrlId(urlId) {
+        return this.functionUrls
+            .values()
+            .find((functionUrl) => functionUrl.urlId === urlId);
+    }
+    /**
+     * Create a Function URL for a function that does not have one.
+     */
+    create(properties) {
+        const { simFunction } = properties;
+        if (this.get(simFunction.name) !== undefined) {
+            throw new SimLambdaResourceConflictException(`FunctionUrlConfig exists for this Lambda function: ${simFunction.arn}`);
+        }
+        const functionUrl = this.factory.make(properties);
+        this.functionUrls.set(simFunction.name, functionUrl);
+        return functionUrl;
+    }
+    /**
+     * Delete a function's Function URL, so its hostname stops resolving.
+     */
+    delete(simFunction) {
+        const functionUrl = this.require(simFunction);
+        this.functionUrls.delete(functionUrl.functionName);
+        this.factory.forget(functionUrl);
+    }
+}
+//# sourceMappingURL=sim-lambda-function-url-store.js.map

package/dist/service/lambda/function/url/sim-lambda-function-url-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-function-url-store.js","sourceRoot":"","sources":["../../../../../src/service/lambda/function/url/sim-lambda-function-url-store.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kCAAkC,EAClC,kCAAkC,GACnC,MAAM,iCAAiC,CAAC;AAKzC,OAAO,EACL,2BAA2B,GAE5B,MAAM,sCAAsC,CAAC;AAc9C;;;;;GAKG;AACH,MAAM,OAAO,yBAAyB;IACnB,YAAY,GAA4B,IAAI,GAAG,EAAE,CAAC;IAClD,OAAO,CAA8B;IAEtD,0EAA0E;IAC1E,kDAAkD;IAClD,YAAY,UAAiD;QAC3D,IAAI,CAAC,OAAO,GAAG,IAAI,2BAA2B,CAAC,UAAU,CAAC,CAAC;IAC7D,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,YAAoB;QACtB,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,YAAqC,CAAC,CAAC;IACtE,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,WAA8B;QACpC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAE/C,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,kCAAkC,CAC1C,+CAA+C,WAAW,CAAC,GAAG,EAAE,CACjE,CAAC;QACJ,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,YAAoB;QACjC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAE3C,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,CAAC,WAAW,CAAC,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,KAA6B;QACnC,OAAO,IAAI,CAAC,YAAY;aACrB,MAAM,EAAE;aACR,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,MAAM,CACJ,UAAgD;QAEhD,MAAM,EAAE,WAAW,EAAE,GAAG,UAAU,CAAC;QAEnC,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YAC7C,MAAM,IAAI,kCAAkC,CAC1C,sDAAsD,WAAW,CAAC,GAAG,EAAE,CACxE,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAErD,OAAO,WAAW,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,WAA8B;QACnC,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAE9C,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACnC,CAAC;CACF"}