@kensio/yulin 0.42.0 → 0.44.0

package/dist/service/cognito/user-pool/user/sim-cognito-user-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-user-store.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/user/sim-cognito-user-store.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAEpE;;;;;;GAMG;AACH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAqC;IAE3D;;OAEG;IACH,IAAI,GAAG,IAAI,SAAS,cAAc,EAAE,CAEnC;IAED;;OAEG;IACH,IAAI,KAAK,IAAI,MAAM,CAElB;IAED;;OAEG;IACH,GAAG,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI,CAQ9B;IAED;;OAEG;IACH,MAAM,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI,CAEjC;IAED;;OAEG;IACH,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAEjD;IAED;;OAEG;IACH,OAAO,CAAC,QAAQ,EAAE,kBAAkB,GAAG,cAAc,CAQpD;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,cAAc;CAcvB"}

package/dist/service/cognito/user-pool/user/sim-cognito-user-store.js

@@ -0,0 +1,73 @@
+import { SimCognitoUsernameExistsException, SimCognitoUserNotFoundException, } from "../../error/sim-cognito.error.js";
+/**
+ * The users of one simulated user pool.
+ *
+ * Users are keyed by username, which is what every admin operation names one
+ * by. Usernames are case sensitive here, as they are on a pool created without
+ * a `UsernameConfiguration`, which this simulation refuses.
+ */
+export class SimCognitoUserStore {
+    users = new Map();
+    /**
+     * Every user in this pool, in creation order.
+     */
+    get all() {
+        return this.users.values().toArray();
+    }
+    /**
+     * How many users the pool holds.
+     */
+    get count() {
+        return this.users.size;
+    }
+    /**
+     * Store a newly created user, refusing a username the pool already holds.
+     */
+    add(user) {
+        if (this.users.has(user.username)) {
+            throw new SimCognitoUsernameExistsException(`User account ${user.username} already exists in this user pool.`);
+        }
+        this.users.set(user.username, user);
+    }
+    /**
+     * Forget a deleted user.
+     */
+    remove(user) {
+        this.users.delete(user.username);
+    }
+    /**
+     * Find a user by username.
+     */
+    find(username) {
+        return this.users.get(username);
+    }
+    /**
+     * Resolve a user by username, or refuse.
+     */
+    require(username) {
+        const found = this.find(username);
+        if (found === undefined) {
+            throw new SimCognitoUserNotFoundException(this.missingMessage(username));
+        }
+        return found;
+    }
+    /**
+     * Say why a username reached no user.
+     *
+     * A value that is some user's `sub` gets its own message. Real Cognito
+     * accepts a `sub` where an admin operation asks for a username, and this
+     * simulation resolves users by username only, so the refusal explains
+     * itself rather than looking like the user was never created.
+     */
+    missingMessage(username) {
+        const bySub = this.all.find((user) => user.sub === username);
+        if (bySub !== undefined) {
+            return (`User ${username} does not exist: that is the sub of user ` +
+                `${bySub.username}. Real Cognito also accepts a sub where an admin ` +
+                `operation asks for a username, and this simulation resolves users ` +
+                `by username only.`);
+        }
+        return `User ${username} does not exist.`;
+    }
+}
+//# sourceMappingURL=sim-cognito-user-store.js.map

package/dist/service/cognito/user-pool/user/sim-cognito-user-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-user-store.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/user/sim-cognito-user-store.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iCAAiC,EACjC,+BAA+B,GAChC,MAAM,kCAAkC,CAAC;AAI1C;;;;;;GAMG;AACH,MAAM,OAAO,mBAAmB;IACb,KAAK,GAAG,IAAI,GAAG,EAA0B,CAAC;IAE3D;;OAEG;IACH,IAAI,GAAG;QACL,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,IAAoB;QACtB,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,iCAAiC,CACzC,gBAAgB,IAAI,CAAC,QAAQ,oCAAoC,CAClE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,IAAoB;QACzB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,QAAgB;QACnB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,QAA4B;QAClC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAElC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,+BAA+B,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC3E,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;;;OAOG;IACK,cAAc,CAAC,QAA4B;QACjD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC;QAE7D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,CACL,QAAQ,QAAQ,2CAA2C;gBAC3D,GAAG,KAAK,CAAC,QAAQ,mDAAmD;gBACpE,oEAAoE;gBACpE,mBAAmB,CACpB,CAAC;QACJ,CAAC;QAED,OAAO,QAAQ,QAAQ,kBAAkB,CAAC;IAC5C,CAAC;CACF"}

package/dist/service/cognito/user-pool/user/sim-cognito-user.d.ts

@@ -0,0 +1,98 @@
+import type { SimClock } from "../../../../util/clock/sim-clock.js";
+import type { SimCognitoAttributeType, SimCognitoUserAttributes } from "./sim-cognito-user-attributes.js";
+import { SimCognitoUserPassword } from "./sim-cognito-user-password.js";
+import { SimCognitoUserStatus } from "./sim-cognito-user-status.js";
+import type { SimCognitoUsername } from "./sim-cognito-username.js";
+interface SimCognitoUserProperties {
+    readonly username: SimCognitoUsername;
+    readonly sub: string;
+    readonly attributes: SimCognitoUserAttributes;
+    readonly password?: SimCognitoUserPassword | undefined;
+    readonly clock: SimClock;
+}
+/**
+ * One simulated Cognito user.
+ *
+ * The user's `sub` is a UUID Cognito allocates, and is not the username. Code
+ * that keys on the wrong one works only while the two happen to match, which
+ * they never do on a real pool.
+ *
+ * A user starts in `FORCE_CHANGE_PASSWORD`, because `AdminCreateUser` is the
+ * only way to make one here. That is the status that stops a user signing in
+ * with the temporary password it was given.
+ */
+export declare class SimCognitoUser {
+    readonly username: SimCognitoUsername;
+    readonly sub: string;
+    readonly creationDate: Date;
+    private readonly clock;
+    private readonly userAttributes;
+    private userStatus;
+    private userPassword;
+    private isEnabled;
+    private modifiedDate;
+    constructor(properties: SimCognitoUserProperties);
+    /**
+     * When the user last changed.
+     */
+    get lastModifiedDate(): Date;
+    /**
+     * Where the user is in the status lifecycle.
+     */
+    get status(): SimCognitoUserStatus;
+    /**
+     * Whether the user may authenticate at all.
+     *
+     * A disabled user keeps its password and its attributes, and neither real
+     * Cognito nor this simulation signs it in. A refresh is refused too, so
+     * disabling a user ends the sessions it has rather than only stopping new
+     * ones.
+     */
+    get enabled(): boolean;
+    /**
+     * The user's attributes, with the `sub` Cognito allocated among them.
+     *
+     * Real Cognito reports `sub` alongside the attributes a request set, which
+     * is where most code reads a user's identifier from.
+     */
+    get attributes(): readonly SimCognitoAttributeType[];
+    /**
+     * The user's attributes by name, without the `sub` Cognito allocated.
+     *
+     * This is what an id token's claims are built from: every attribute there
+     * has a value, and the sub is a claim of its own.
+     */
+    get attributeValues(): ReadonlyMap<string, string>;
+    /**
+     * Set the password an admin gave this user.
+     *
+     * A permanent password is the user's own, and confirms it. A temporary one
+     * leaves the user in `FORCE_CHANGE_PASSWORD`, having to replace it through
+     * the `NEW_PASSWORD_REQUIRED` challenge before it can sign in normally.
+     */
+    setPassword(password: string, permanent: boolean | undefined): void;
+    /**
+     * Whether a candidate password is this user's.
+     *
+     * A user with no password at all matches nothing. `AdminCreateUser` leaves
+     * one that way when the request named no `TemporaryPassword`: real Cognito
+     * generates one and sends it to the user, and nothing here delivers a
+     * message for the user to read it from.
+     */
+    hasPassword(candidate: string | undefined): boolean;
+    /**
+     * Apply an attribute update to this user.
+     */
+    updateAttributes(requested: readonly SimCognitoAttributeType[] | undefined): void;
+    /**
+     * Let the user authenticate again.
+     */
+    enable(): void;
+    /**
+     * Stop the user authenticating.
+     */
+    disable(): void;
+    private touch;
+}
+export {};
+//# sourceMappingURL=sim-cognito-user.d.ts.map

package/dist/service/cognito/user-pool/user/sim-cognito-user.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-user.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/user/sim-cognito-user.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,KAAK,EACV,uBAAuB,EACvB,wBAAwB,EACzB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAEpE,UAAU,wBAAwB;IAChC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,UAAU,EAAE,wBAAwB,CAAC;IAC9C,QAAQ,CAAC,QAAQ,CAAC,EAAE,sBAAsB,GAAG,SAAS,CAAC;IACvD,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED;;;;;;;;;;GAUG;AACH,qBAAa,cAAc;IACzB,SAAgB,QAAQ,EAAE,kBAAkB,CAAC;IAC7C,SAAgB,GAAG,EAAE,MAAM,CAAC;IAC5B,SAAgB,YAAY,EAAE,IAAI,CAAC;IAEnC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IACjC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA2B;IAC1D,OAAO,CAAC,UAAU,CAA4C;IAC9D,OAAO,CAAC,YAAY,CAAqC;IACzD,OAAO,CAAC,SAAS,CAAQ;IACzB,OAAO,CAAC,YAAY,CAAO;IAE3B,YAAY,UAAU,EAAE,wBAAwB,EAQ/C;IAED;;OAEG;IACH,IAAI,gBAAgB,IAAI,IAAI,CAE3B;IAED;;OAEG;IACH,IAAI,MAAM,IAAI,oBAAoB,CAEjC;IAED;;;;;;;OAOG;IACH,IAAI,OAAO,IAAI,OAAO,CAErB;IAED;;;;;OAKG;IACH,IAAI,UAAU,IAAI,SAAS,uBAAuB,EAAE,CAEnD;IAED;;;;;OAKG;IACH,IAAI,eAAe,IAAI,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAEjD;IAED;;;;;;OAMG;IACH,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,GAAG,SAAS,GAAG,IAAI,CAIlE;IAED;;;;;;;OAOG;IACH,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAElD;IAED;;OAEG;IACH,gBAAgB,CACd,SAAS,EAAE,SAAS,uBAAuB,EAAE,GAAG,SAAS,GACxD,IAAI,CAGN;IAED;;OAEG;IACH,MAAM,IAAI,IAAI,CAGb;IAED;;OAEG;IACH,OAAO,IAAI,IAAI,CAGd;IAED,OAAO,CAAC,KAAK;CAGd"}

package/dist/service/cognito/user-pool/user/sim-cognito-user.js

@@ -0,0 +1,122 @@
+import { SimCognitoUserPassword } from "./sim-cognito-user-password.js";
+import { SimCognitoUserStatus } from "./sim-cognito-user-status.js";
+/**
+ * One simulated Cognito user.
+ *
+ * The user's `sub` is a UUID Cognito allocates, and is not the username. Code
+ * that keys on the wrong one works only while the two happen to match, which
+ * they never do on a real pool.
+ *
+ * A user starts in `FORCE_CHANGE_PASSWORD`, because `AdminCreateUser` is the
+ * only way to make one here. That is the status that stops a user signing in
+ * with the temporary password it was given.
+ */
+export class SimCognitoUser {
+    username;
+    sub;
+    creationDate;
+    clock;
+    userAttributes;
+    userStatus = SimCognitoUserStatus.forceChangePassword;
+    userPassword;
+    isEnabled = true;
+    modifiedDate;
+    constructor(properties) {
+        this.username = properties.username;
+        this.sub = properties.sub;
+        this.userAttributes = properties.attributes;
+        this.userPassword = properties.password;
+        this.clock = properties.clock;
+        this.creationDate = this.clock.now();
+        this.modifiedDate = this.creationDate;
+    }
+    /**
+     * When the user last changed.
+     */
+    get lastModifiedDate() {
+        return this.modifiedDate;
+    }
+    /**
+     * Where the user is in the status lifecycle.
+     */
+    get status() {
+        return this.userStatus;
+    }
+    /**
+     * Whether the user may authenticate at all.
+     *
+     * A disabled user keeps its password and its attributes, and neither real
+     * Cognito nor this simulation signs it in. A refresh is refused too, so
+     * disabling a user ends the sessions it has rather than only stopping new
+     * ones.
+     */
+    get enabled() {
+        return this.isEnabled;
+    }
+    /**
+     * The user's attributes, with the `sub` Cognito allocated among them.
+     *
+     * Real Cognito reports `sub` alongside the attributes a request set, which
+     * is where most code reads a user's identifier from.
+     */
+    get attributes() {
+        return [{ Name: "sub", Value: this.sub }, ...this.userAttributes.entries];
+    }
+    /**
+     * The user's attributes by name, without the `sub` Cognito allocated.
+     *
+     * This is what an id token's claims are built from: every attribute there
+     * has a value, and the sub is a claim of its own.
+     */
+    get attributeValues() {
+        return this.userAttributes.values;
+    }
+    /**
+     * Set the password an admin gave this user.
+     *
+     * A permanent password is the user's own, and confirms it. A temporary one
+     * leaves the user in `FORCE_CHANGE_PASSWORD`, having to replace it through
+     * the `NEW_PASSWORD_REQUIRED` challenge before it can sign in normally.
+     */
+    setPassword(password, permanent) {
+        this.userPassword = new SimCognitoUserPassword(password);
+        this.userStatus = SimCognitoUserStatus.afterPasswordSet(permanent);
+        this.touch();
+    }
+    /**
+     * Whether a candidate password is this user's.
+     *
+     * A user with no password at all matches nothing. `AdminCreateUser` leaves
+     * one that way when the request named no `TemporaryPassword`: real Cognito
+     * generates one and sends it to the user, and nothing here delivers a
+     * message for the user to read it from.
+     */
+    hasPassword(candidate) {
+        return this.userPassword?.matches(candidate) ?? false;
+    }
+    /**
+     * Apply an attribute update to this user.
+     */
+    updateAttributes(requested) {
+        this.userAttributes.update(requested);
+        this.touch();
+    }
+    /**
+     * Let the user authenticate again.
+     */
+    enable() {
+        this.isEnabled = true;
+        this.touch();
+    }
+    /**
+     * Stop the user authenticating.
+     */
+    disable() {
+        this.isEnabled = false;
+        this.touch();
+    }
+    touch() {
+        this.modifiedDate = this.clock.now();
+    }
+}
+//# sourceMappingURL=sim-cognito-user.js.map

package/dist/service/cognito/user-pool/user/sim-cognito-user.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-user.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/user/sim-cognito-user.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAWpE;;;;;;;;;;GAUG;AACH,MAAM,OAAO,cAAc;IACT,QAAQ,CAAqB;IAC7B,GAAG,CAAS;IACZ,YAAY,CAAO;IAElB,KAAK,CAAW;IAChB,cAAc,CAA2B;IAClD,UAAU,GAAG,oBAAoB,CAAC,mBAAmB,CAAC;IACtD,YAAY,CAAqC;IACjD,SAAS,GAAG,IAAI,CAAC;IACjB,YAAY,CAAO;IAE3B,YAAY,UAAoC;QAC9C,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;QAC1B,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,UAAU,CAAC;QAC5C,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,QAAQ,CAAC;QACxC,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACrC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,IAAI,gBAAgB;QAClB,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED;;;;;;;OAOG;IACH,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED;;;;;OAKG;IACH,IAAI,UAAU;QACZ,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;IAC5E,CAAC;IAED;;;;;OAKG;IACH,IAAI,eAAe;QACjB,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;IACpC,CAAC;IAED;;;;;;OAMG;IACH,WAAW,CAAC,QAAgB,EAAE,SAA8B;QAC1D,IAAI,CAAC,YAAY,GAAG,IAAI,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QACzD,IAAI,CAAC,UAAU,GAAG,oBAAoB,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACnE,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;IAED;;;;;;;OAOG;IACH,WAAW,CAAC,SAA6B;QACvC,OAAO,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,gBAAgB,CACd,SAAyD;QAEzD,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;IAED;;OAEG;IACH,MAAM;QACJ,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;IAED;;OAEG;IACH,OAAO;QACL,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACvB,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;IAEO,KAAK;QACX,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IACvC,CAAC;CACF"}

package/dist/service/cognito/user-pool/user/sim-cognito-username.d.ts

@@ -0,0 +1,10 @@
+import type { Brand } from "../../../../util/brand.type.js";
+export type SimCognitoUsername = Brand<string, "SimCognitoUsername">;
+/**
+ * Read a requested username, or refuse a malformed one.
+ *
+ * A username is the identifier every admin operation names a user by, and it
+ * takes the same form as a group name, which is where the rule lives.
+ */
+export declare function requireSimCognitoUsername(value: string | undefined): SimCognitoUsername;
+//# sourceMappingURL=sim-cognito-username.d.ts.map

package/dist/service/cognito/user-pool/user/sim-cognito-username.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-username.d.ts","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/user/sim-cognito-username.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,gCAAgC,CAAC;AAG5D,MAAM,MAAM,kBAAkB,GAAG,KAAK,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;AAErE;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,GAAG,SAAS,GACxB,kBAAkB,CAGpB"}

package/dist/service/cognito/user-pool/user/sim-cognito-username.js

@@ -0,0 +1,12 @@
+import { SimCognitoIdentifier } from "../sim-cognito-identifier.js";
+/**
+ * Read a requested username, or refuse a malformed one.
+ *
+ * A username is the identifier every admin operation names a user by, and it
+ * takes the same form as a group name, which is where the rule lives.
+ */
+export function requireSimCognitoUsername(value) {
+    return new SimCognitoIdentifier({ field: "Username", subject: "user", value })
+        .value;
+}
+//# sourceMappingURL=sim-cognito-username.js.map

package/dist/service/cognito/user-pool/user/sim-cognito-username.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cognito-username.js","sourceRoot":"","sources":["../../../../../src/service/cognito/user-pool/user/sim-cognito-username.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAIpE;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CACvC,KAAyB;IAEzB,OAAO,IAAI,oBAAoB,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;SAC3E,KAA2B,CAAC;AACjC,CAAC"}

package/dist/service/iam/policy/sim-iam-policy-document.factory.d.ts

@@ -0,0 +1,43 @@
+import { MappedFactory } from "@kensio/part-factory";
+import type { SimIamPolicyDocument } from "./sim-iam-policy.js";
+/**
+ * Builds the JSON string an IAM policy document is supplied as.
+ *
+ * A test states only the part of the statement it is about. The Version, and
+ * an Allow effect, come from the defaults, since a test that has to spell them
+ * out every time buries the Action and Resource it actually cares about.
+ *
+ * ```typescript
+ * await simAws.iam().putRolePolicy(
+ *   new PutRolePolicyCommand({
+ *     RoleName: "FunctionInvoker",
+ *     PolicyName: "InvokePolicy",
+ *     PolicyDocument: simIamPolicyDocumentFactory.make({
+ *       Statement: { Action: "lambda:InvokeFunction", Resource: functionArn },
+ *     }),
+ *   }),
+ * );
+ * ```
+ *
+ * This is equally the shape of a trust policy, a resource policy or a key
+ * policy, so the one factory covers all of them:
+ *
+ * ```typescript
+ * simIamPolicyDocumentFactory.make({
+ *   Statement: {
+ *     Principal: { AWS: `arn:aws:iam::${accountId}:root` },
+ *     Action: "sts:AssumeRole",
+ *   },
+ * });
+ * ```
+ *
+ * There is no default Principal. Leaving it out keeps a statement that names
+ * one from merging with a default that names another.
+ *
+ * The default `Effect: "Allow"` only reaches a single-statement override. A
+ * multi-statement policy overrides `Statement` with an array, which replaces
+ * the default rather than merging into each entry, so every statement in an
+ * array needs its own `Effect`.
+ */
+export declare const simIamPolicyDocumentFactory: MappedFactory<SimIamPolicyDocument, string, undefined>;
+//# sourceMappingURL=sim-iam-policy-document.factory.d.ts.map

package/dist/service/iam/policy/sim-iam-policy-document.factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-policy-document.factory.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/policy/sim-iam-policy-document.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAEhE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,eAAO,MAAM,2BAA2B,wDASvC,CAAC"}

package/dist/service/iam/policy/sim-iam-policy-document.factory.js

@@ -0,0 +1,46 @@
+import { MappedFactory } from "@kensio/part-factory";
+import { jsonStringify } from "../../../util/type-guard/json.js";
+/**
+ * Builds the JSON string an IAM policy document is supplied as.
+ *
+ * A test states only the part of the statement it is about. The Version, and
+ * an Allow effect, come from the defaults, since a test that has to spell them
+ * out every time buries the Action and Resource it actually cares about.
+ *
+ * ```typescript
+ * await simAws.iam().putRolePolicy(
+ *   new PutRolePolicyCommand({
+ *     RoleName: "FunctionInvoker",
+ *     PolicyName: "InvokePolicy",
+ *     PolicyDocument: simIamPolicyDocumentFactory.make({
+ *       Statement: { Action: "lambda:InvokeFunction", Resource: functionArn },
+ *     }),
+ *   }),
+ * );
+ * ```
+ *
+ * This is equally the shape of a trust policy, a resource policy or a key
+ * policy, so the one factory covers all of them:
+ *
+ * ```typescript
+ * simIamPolicyDocumentFactory.make({
+ *   Statement: {
+ *     Principal: { AWS: `arn:aws:iam::${accountId}:root` },
+ *     Action: "sts:AssumeRole",
+ *   },
+ * });
+ * ```
+ *
+ * There is no default Principal. Leaving it out keeps a statement that names
+ * one from merging with a default that names another.
+ *
+ * The default `Effect: "Allow"` only reaches a single-statement override. A
+ * multi-statement policy overrides `Statement` with an array, which replaces
+ * the default rather than merging into each entry, so every statement in an
+ * array needs its own `Effect`.
+ */
+export const simIamPolicyDocumentFactory = new MappedFactory(() => ({
+    Version: "2012-10-17",
+    Statement: { Effect: "Allow" },
+}), (document) => jsonStringify(document));
+//# sourceMappingURL=sim-iam-policy-document.factory.js.map

package/dist/service/iam/policy/sim-iam-policy-document.factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-policy-document.factory.js","sourceRoot":"","sources":["../../../../src/service/iam/policy/sim-iam-policy-document.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AAGjE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,IAAI,aAAa,CAI1D,GAAG,EAAE,CAAC,CAAC;IACL,OAAO,EAAE,YAAY;IACrB,SAAS,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;CAC/B,CAAC,EACF,CAAC,QAAQ,EAAE,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,CACtC,CAAC"}

package/dist/service/iam/policy/sim-iam-policy.factory.d.ts

@@ -2,5 +2,5 @@ import { DynamicFactory } from "@kensio/part-factory";
 /**
  * Generates fake IAM managed policy records.
  */
-export declare const simIamPolicyFactory: DynamicFactory<import("./sim-iam-policy.js").SimIamManagedPolicy>;
+export declare const simIamPolicyFactory: DynamicFactory<import("./sim-iam-policy.js").SimIamManagedPolicy, undefined>;
 //# sourceMappingURL=sim-iam-policy.factory.d.ts.map

package/dist/service/iam/policy/sim-iam-policy.factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-iam-policy.factory.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/policy/sim-iam-policy.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAKtD;;GAEG;AACH,eAAO,MAAM,mBAAmB,mEAqB9B,CAAC"}
+{"version":3,"file":"sim-iam-policy.factory.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/policy/sim-iam-policy.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAKtD;;GAEG;AACH,eAAO,MAAM,mBAAmB,8EAqB9B,CAAC"}

package/dist/service/iam/role/sim-iam-role.factory.d.ts

@@ -3,5 +3,5 @@ import type { SimIamRole } from "./sim-iam-role.js";
 /**
  * Generates fake IAM Role records.
  */
-export declare const simIamRoleFactory: DynamicFactory<SimIamRole>;
+export declare const simIamRoleFactory: DynamicFactory<SimIamRole, undefined>;
 //# sourceMappingURL=sim-iam-role.factory.d.ts.map

package/dist/service/iam/role/sim-iam-role.factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-iam-role.factory.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/role/sim-iam-role.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAItD,OAAO,KAAK,EAAE,UAAU,EAAkB,MAAM,mBAAmB,CAAC;AAEpE;;GAEG;AACH,eAAO,MAAM,iBAAiB,4BAqB5B,CAAC"}
+{"version":3,"file":"sim-iam-role.factory.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/role/sim-iam-role.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAItD,OAAO,KAAK,EAAE,UAAU,EAAkB,MAAM,mBAAmB,CAAC;AAEpE;;GAEG;AACH,eAAO,MAAM,iBAAiB,uCAqB5B,CAAC"}

package/dist/service/lambda/cfn/event-source-mapping/sim-cfn-lambda-event-source-mapping-creator.d.ts

@@ -0,0 +1,26 @@
+import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
+import type { SimLambdaEventSourceMapping } from "../../event-source/sim-lambda-event-source-mapping.js";
+import type { SimLambda } from "../../sim-lambda.js";
+interface SimCfnLambdaEventSourceMappingCreatorProperties {
+    readonly lambda: SimLambda;
+}
+/**
+ * Creates simulated event source mappings from CloudFormation Resources.
+ *
+ * This is what CDK's `fn.addEventSource(new SqsEventSource(queue))` emits, so a
+ * synthesized template is the usual way a mapping comes into existence outside
+ * a direct SDK call. The mapping is created through the ordinary
+ * CreateEventSourceMapping command, so a template deploying one gets the same
+ * execution-role check an SDK caller would.
+ */
+export declare class SimCfnLambdaEventSourceMappingCreator {
+    private readonly lambda;
+    constructor(properties: SimCfnLambdaEventSourceMappingCreatorProperties);
+    /**
+     * Create a mapping from an AWS::Lambda::EventSourceMapping Resource.
+     */
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): Promise<SimLambdaEventSourceMapping>;
+}
+export {};
+//# sourceMappingURL=sim-cfn-lambda-event-source-mapping-creator.d.ts.map

package/dist/service/lambda/cfn/event-source-mapping/sim-cfn-lambda-event-source-mapping-creator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-lambda-event-source-mapping-creator.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/cfn/event-source-mapping/sim-cfn-lambda-event-source-mapping-creator.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAClH,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,uDAAuD,CAAC;AACzG,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAGrD,UAAU,+CAA+C;IACvD,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;CAC5B;AAED;;;;;;;;GAQG;AACH,qBAAa,qCAAqC;IAChD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAY;IAEnC,YAAY,UAAU,EAAE,+CAA+C,EAEtE;IAED;;OAEG;IACG,MAAM,CACV,QAAQ,EAAE,cAAc,EACxB,UAAU,EAAE,yBAAyB,GACpC,OAAO,CAAC,2BAA2B,CAAC,CAiBtC;CACF"}

package/dist/service/lambda/cfn/event-source-mapping/sim-cfn-lambda-event-source-mapping-creator.js

@@ -0,0 +1,33 @@
+import { assertDefined } from "../../../../util/type-guard/defined.js";
+import { SimCfnLambdaEventSourceMappingProperties } from "./sim-cfn-lambda-event-source-mapping-properties.js";
+/**
+ * Creates simulated event source mappings from CloudFormation Resources.
+ *
+ * This is what CDK's `fn.addEventSource(new SqsEventSource(queue))` emits, so a
+ * synthesized template is the usual way a mapping comes into existence outside
+ * a direct SDK call. The mapping is created through the ordinary
+ * CreateEventSourceMapping command, so a template deploying one gets the same
+ * execution-role check an SDK caller would.
+ */
+export class SimCfnLambdaEventSourceMappingCreator {
+    lambda;
+    constructor(properties) {
+        this.lambda = properties.lambda;
+    }
+    /**
+     * Create a mapping from an AWS::Lambda::EventSourceMapping Resource.
+     */
+    async create(resource, properties) {
+        const created = await this.lambda.createEventSourceMapping({
+            input: new SimCfnLambdaEventSourceMappingProperties({
+                resource,
+                properties,
+            }).createInput(),
+        });
+        const mapping = this.lambda.getSimEventSourceMapping(created.UUID);
+        assertDefined(mapping, `Sim Lambda event source mapping ${resource.logicalId} after ` +
+            "CloudFormation creation");
+        return mapping;
+    }
+}
+//# sourceMappingURL=sim-cfn-lambda-event-source-mapping-creator.js.map

package/dist/service/lambda/cfn/event-source-mapping/sim-cfn-lambda-event-source-mapping-creator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-lambda-event-source-mapping-creator.js","sourceRoot":"","sources":["../../../../../src/service/lambda/cfn/event-source-mapping/sim-cfn-lambda-event-source-mapping-creator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAKvE,OAAO,EAAE,wCAAwC,EAAE,MAAM,qDAAqD,CAAC;AAM/G;;;;;;;;GAQG;AACH,MAAM,OAAO,qCAAqC;IAC/B,MAAM,CAAY;IAEnC,YAAY,UAA2D;QACrE,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,QAAwB,EACxB,UAAqC;QAErC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC;YACzD,KAAK,EAAE,IAAI,wCAAwC,CAAC;gBAClD,QAAQ;gBACR,UAAU;aACX,CAAC,CAAC,WAAW,EAAE;SACjB,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAEnE,aAAa,CACX,OAAO,EACP,mCAAmC,QAAQ,CAAC,SAAS,SAAS;YAC5D,yBAAyB,CAC5B,CAAC;QAEF,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}

package/dist/service/lambda/cfn/event-source-mapping/sim-cfn-lambda-event-source-mapping-properties.d.ts

@@ -0,0 +1,28 @@
+import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
+import type { SimCreateEventSourceMappingCommandInput } from "../../command/event-source-mapping/event-source-mapping.command.js";
+interface SimCfnLambdaEventSourceMappingPropertiesProperties {
+    readonly resource: SimCfnResource;
+    readonly properties: SimCfnTemplateValueRecord;
+}
+/**
+ * Reads an AWS::Lambda::EventSourceMapping Resource into the input
+ * CreateEventSourceMapping takes.
+ *
+ * Nothing about batch sizes or event source ARNs is decided here: the command
+ * validates those, so a mapping a template deployed is the same thing an SDK
+ * caller would have got.
+ */
+export declare class SimCfnLambdaEventSourceMappingProperties {
+    private readonly resource;
+    private readonly properties;
+    private readonly parser;
+    constructor(properties: SimCfnLambdaEventSourceMappingPropertiesProperties);
+    /**
+     * The create input this Resource asks for, refusing what is not simulated.
+     */
+    createInput(): SimCreateEventSourceMappingCommandInput;
+    private functionResponseTypes;
+}
+export {};
+//# sourceMappingURL=sim-cfn-lambda-event-source-mapping-properties.d.ts.map

package/dist/service/lambda/cfn/event-source-mapping/sim-cfn-lambda-event-source-mapping-properties.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-lambda-event-source-mapping-properties.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/cfn/event-source-mapping/sim-cfn-lambda-event-source-mapping-properties.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAClH,OAAO,KAAK,EAAE,uCAAuC,EAAE,MAAM,oEAAoE,CAAC;AAMlI,UAAU,kDAAkD;IAC1D,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC;CAChD;AAED;;;;;;;GAOG;AACH,qBAAa,wCAAwC;IACnD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAC1C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA4B;IACvD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoC;IAE3D,YAAY,UAAU,EAAE,kDAAkD,EAGzE;IAED;;OAEG;IACH,WAAW,IAAI,uCAAuC,CAoCrD;IAED,OAAO,CAAC,qBAAqB;CAQ9B"}

package/dist/service/lambda/cfn/event-source-mapping/sim-cfn-lambda-event-source-mapping-properties.js

@@ -0,0 +1,38 @@
+import { SimCfnLambdaPropertyParser } from "../function/sim-cfn-lambda-property-parser.js";
+import { assertSimulatedEventSourceMappingProperties } from "./sim-cfn-lambda-event-source-mapping-property-rules.js";
+import { simCfnLambdaTargetFunctionName } from "../function/sim-cfn-lambda-target-function.js";
+/**
+ * Reads an AWS::Lambda::EventSourceMapping Resource into the input
+ * CreateEventSourceMapping takes.
+ *
+ * Nothing about batch sizes or event source ARNs is decided here: the command
+ * validates those, so a mapping a template deployed is the same thing an SDK
+ * caller would have got.
+ */
+export class SimCfnLambdaEventSourceMappingProperties {
+    resource;
+    properties;
+    parser = new SimCfnLambdaPropertyParser();
+    constructor(properties) {
+        this.resource = properties.resource;
+        this.properties = properties.properties;
+    }
+    /**
+     * The create input this Resource asks for, refusing what is not simulated.
+     */
+    createInput() {
+        assertSimulatedEventSourceMappingProperties(this.resource.logicalId, this.properties);
+        return {
+            EventSourceArn: this.parser.requiredString(this.resource, this.properties["EventSourceArn"], "EventSourceArn"),
+            FunctionName: simCfnLambdaTargetFunctionName(this.parser.requiredString(this.resource, this.properties["FunctionName"], "FunctionName")),
+            BatchSize: this.parser.optionalNumber(this.resource, this.properties["BatchSize"], "BatchSize"),
+            Enabled: this.parser.optionalBoolean(this.resource, this.properties["Enabled"], "Enabled"),
+            MaximumBatchingWindowInSeconds: this.parser.optionalNumber(this.resource, this.properties["MaximumBatchingWindowInSeconds"], "MaximumBatchingWindowInSeconds"),
+            FunctionResponseTypes: this.functionResponseTypes(),
+        };
+    }
+    functionResponseTypes() {
+        return this.parser.optionalStringList(this.resource, this.properties["FunctionResponseTypes"], "FunctionResponseTypes");
+    }
+}
+//# sourceMappingURL=sim-cfn-lambda-event-source-mapping-properties.js.map

package/dist/service/lambda/cfn/event-source-mapping/sim-cfn-lambda-event-source-mapping-properties.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-lambda-event-source-mapping-properties.js","sourceRoot":"","sources":["../../../../../src/service/lambda/cfn/event-source-mapping/sim-cfn-lambda-event-source-mapping-properties.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,0BAA0B,EAAE,MAAM,+CAA+C,CAAC;AAC3F,OAAO,EAAE,2CAA2C,EAAE,MAAM,yDAAyD,CAAC;AACtH,OAAO,EAAE,8BAA8B,EAAE,MAAM,+CAA+C,CAAC;AAO/F;;;;;;;GAOG;AACH,MAAM,OAAO,wCAAwC;IAClC,QAAQ,CAAiB;IACzB,UAAU,CAA4B;IACtC,MAAM,GAAG,IAAI,0BAA0B,EAAE,CAAC;IAE3D,YAAY,UAA8D;QACxE,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,WAAW;QACT,2CAA2C,CACzC,IAAI,CAAC,QAAQ,CAAC,SAAS,EACvB,IAAI,CAAC,UAAU,CAChB,CAAC;QAEF,OAAO;YACL,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc,CACxC,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,EACjC,gBAAgB,CACjB;YACD,YAAY,EAAE,8BAA8B,CAC1C,IAAI,CAAC,MAAM,CAAC,cAAc,CACxB,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAC/B,cAAc,CACf,CACF;YACD,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc,CACnC,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAC5B,WAAW,CACZ;YACD,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,CAClC,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAC1B,SAAS,CACV;YACD,8BAA8B,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc,CACxD,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,UAAU,CAAC,gCAAgC,CAAC,EACjD,gCAAgC,CACjC;YACD,qBAAqB,EAAE,IAAI,CAAC,qBAAqB,EAAE;SACpD,CAAC;IACJ,CAAC;IAEO,qBAAqB;QAE3B,OAAO,IAAI,CAAC,MAAM,CAAC,kBAAkB,CACnC,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,UAAU,CAAC,uBAAuB,CAAC,EACxC,uBAAuB,CACgC,CAAC;IAC5D,CAAC;CACF"}

package/dist/service/lambda/cfn/event-source-mapping/sim-cfn-lambda-event-source-mapping-property-rules.d.ts

@@ -0,0 +1,17 @@
+import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
+/**
+ * Build the error a property of an AWS::Lambda::EventSourceMapping Resource is
+ * refused with.
+ *
+ * The wording matters: sim CloudFormation skips a Resource whose error reads as
+ * an unsupported Resource type, and skipping is the wrong answer for a mapping
+ * that cannot be created as the template asks. The stack would deploy with the
+ * queue and the function and nothing between them.
+ */
+export declare function eventSourceMappingPropertyError(logicalId: string, reason: string): Error;
+/**
+ * Refuse everything about an AWS::Lambda::EventSourceMapping Resource that is
+ * not simulated.
+ */
+export declare function assertSimulatedEventSourceMappingProperties(logicalId: string, properties: SimCfnTemplateValueRecord): void;
+//# sourceMappingURL=sim-cfn-lambda-event-source-mapping-property-rules.d.ts.map

package/dist/service/lambda/cfn/event-source-mapping/sim-cfn-lambda-event-source-mapping-property-rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-lambda-event-source-mapping-property-rules.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/cfn/event-source-mapping/sim-cfn-lambda-event-source-mapping-property-rules.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AA8ClH;;;;;;;;GAQG;AACH,wBAAgB,+BAA+B,CAC7C,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,GACb,KAAK,CAIP;AAED;;;GAGG;AACH,wBAAgB,2CAA2C,CACzD,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,yBAAyB,GACpC,IAAI,CAkBN"}