@kensio/yulin 0.45.0 → 1.0.0

package/dist/service/dynamodb/time-to-live/{sim-dynamodb-table-expiry.d.ts → sim-dynamodb-table-time-to-live.d.ts}

@@ -1,26 +1,45 @@
 import type { BackgroundScheduler } from "../../../util/background/background.js";
+import type { SimDynamoDbTimeToLiveDescription } from "../command/time-to-live/time-to-live.types.js";
 import type { SimDynamoDbItem } from "../item/sim-dynamodb-item.js";
 import type { SimDynamoDbTableItems } from "../table/sim-dynamodb-table-items.js";
-import type { SimDynamoDbTimeToLive } from "./sim-dynamodb-time-to-live.js";
-interface SimDynamoDbTableExpiryProperties {
+import type { SimDynamoDbTimeToLiveSpecification } from "./sim-dynamodb-time-to-live-specification.js";
+interface SimDynamoDbTableTimeToLiveProperties {
+    readonly tableName: string;
     readonly items: SimDynamoDbTableItems;
-    readonly timeToLive: SimDynamoDbTimeToLive;
     readonly background: BackgroundScheduler;
 }
 /**
- * Removes a table's items once their time to live has run out.
+ * One table's time to live, and the item removals it drives.
  *
- * The removal is scheduled on the simulation's clock rather than the host's, so
+ * The setting and what acts on it are held together, because switching the
+ * setting on is what gives the items already on the table a deletion window.
+ *
+ * A removal is scheduled on the simulation's clock rather than the host's, so
  * moving simulated time past an item's deletion window is what takes it away.
  * That is what lets one `advanceBy` expire a table's sessions alongside
  * whatever else the same advance causes elsewhere in the simulation, rather
  * than the test having to ask for the expiry separately.
  */
-export declare class SimDynamoDbTableExpiry {
+export declare class SimDynamoDbTableTimeToLive {
     private readonly items;
     private readonly timeToLive;
     private readonly background;
-    constructor(properties: SimDynamoDbTableExpiryProperties);
+    constructor(properties: SimDynamoDbTableTimeToLiveProperties);
+    /**
+     * Take an UpdateTimeToLive on this table.
+     *
+     * Switching it on reaches the items already there as well as the ones written
+     * afterwards, since their TTL attributes were only inert while it was off.
+     */
+    update(specification: SimDynamoDbTimeToLiveSpecification, at: Date): void;
+    /**
+     * Finish an UpdateTimeToLive, moving it off ENABLING or DISABLING.
+     */
+    settle(): Promise<void>;
+    /**
+     * Describe this table's time to live the way DynamoDB reports it.
+     */
+    description(): SimDynamoDbTimeToLiveDescription;
     /**
      * Arrange for an item to be gone once its deletion window runs out.
      *
@@ -39,7 +58,7 @@ export declare class SimDynamoDbTableExpiry {
      * Switching time to live on gives meaning to TTL attributes that were inert
      * while it was off, so the items that already carry one are scheduled too.
      */
-    scheduleForAll(): void;
+    private scheduleForAll;
     /**
      * Remove an item, if it is still the expired item that was scheduled.
      *
@@ -52,4 +71,4 @@ export declare class SimDynamoDbTableExpiry {
     private removeIfExpired;
 }
 export {};
-//# sourceMappingURL=sim-dynamodb-table-expiry.d.ts.map
+//# sourceMappingURL=sim-dynamodb-table-time-to-live.d.ts.map

package/dist/service/dynamodb/time-to-live/sim-dynamodb-table-time-to-live.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-dynamodb-table-time-to-live.d.ts","sourceRoot":"","sources":["../../../../src/service/dynamodb/time-to-live/sim-dynamodb-table-time-to-live.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAClF,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,+CAA+C,CAAC;AACtG,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAGlF,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,8CAA8C,CAAC;AAEvG,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAC;IACtC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;CAC1C;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,0BAA0B;IACrC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAwB;IAC9C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAwB;IACnD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,UAAU,EAAE,oCAAoC,EAI3D;IAED;;;;;OAKG;IACH,MAAM,CAAC,aAAa,EAAE,kCAAkC,EAAE,EAAE,EAAE,IAAI,GAAG,IAAI,CAGxE;IAED;;OAEG;IACH,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAItB;IAED;;OAEG;IACH,WAAW,IAAI,gCAAgC,CAE9C;IAED;;;;;;;;;;OAUG;IACH,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,IAAI,CAsBpD;IAED;;;;;OAKG;IACH,OAAO,CAAC,cAAc;IAMtB;;;;;;;;OAQG;IACH,OAAO,CAAC,eAAe;CAsBxB"}

package/dist/service/dynamodb/time-to-live/{sim-dynamodb-table-expiry.js → sim-dynamodb-table-time-to-live.js}

@@ -1,22 +1,49 @@
 import { simDynamoDbItemDeletionInstant } from "./sim-dynamodb-item-expiry.js";
+import { SimDynamoDbTimeToLive } from "./sim-dynamodb-time-to-live.js";
 /**
- * Removes a table's items once their time to live has run out.
+ * One table's time to live, and the item removals it drives.
  *
- * The removal is scheduled on the simulation's clock rather than the host's, so
+ * The setting and what acts on it are held together, because switching the
+ * setting on is what gives the items already on the table a deletion window.
+ *
+ * A removal is scheduled on the simulation's clock rather than the host's, so
  * moving simulated time past an item's deletion window is what takes it away.
  * That is what lets one `advanceBy` expire a table's sessions alongside
  * whatever else the same advance causes elsewhere in the simulation, rather
  * than the test having to ask for the expiry separately.
  */
-export class SimDynamoDbTableExpiry {
+export class SimDynamoDbTableTimeToLive {
     items;
     timeToLive;
     background;
     constructor(properties) {
         this.items = properties.items;
-        this.timeToLive = properties.timeToLive;
+        this.timeToLive = new SimDynamoDbTimeToLive(properties.tableName);
         this.background = properties.background;
     }
+    /**
+     * Take an UpdateTimeToLive on this table.
+     *
+     * Switching it on reaches the items already there as well as the ones written
+     * afterwards, since their TTL attributes were only inert while it was off.
+     */
+    update(specification, at) {
+        this.timeToLive.update(specification, at);
+        this.scheduleForAll();
+    }
+    /**
+     * Finish an UpdateTimeToLive, moving it off ENABLING or DISABLING.
+     */
+    settle() {
+        this.timeToLive.settle();
+        return Promise.resolve();
+    }
+    /**
+     * Describe this table's time to live the way DynamoDB reports it.
+     */
+    description() {
+        return this.timeToLive.description();
+    }
     /**
      * Arrange for an item to be gone once its deletion window runs out.
      *
@@ -79,4 +106,4 @@ export class SimDynamoDbTableExpiry {
         this.items.remove(key);
     }
 }
-//# sourceMappingURL=sim-dynamodb-table-expiry.js.map
+//# sourceMappingURL=sim-dynamodb-table-time-to-live.js.map

package/dist/service/dynamodb/time-to-live/sim-dynamodb-table-time-to-live.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-dynamodb-table-time-to-live.js","sourceRoot":"","sources":["../../../../src/service/dynamodb/time-to-live/sim-dynamodb-table-time-to-live.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,8BAA8B,EAAE,MAAM,+BAA+B,CAAC;AAC/E,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AASvE;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,0BAA0B;IACpB,KAAK,CAAwB;IAC7B,UAAU,CAAwB;IAClC,UAAU,CAAsB;IAEjD,YAAY,UAAgD;QAC1D,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,UAAU,GAAG,IAAI,qBAAqB,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAClE,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;IAC1C,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,aAAiD,EAAE,EAAQ;QAChE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QAC1C,IAAI,CAAC,cAAc,EAAE,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,MAAM;QACJ,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;QAEzB,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,WAAW;QACT,OAAO,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;IACvC,CAAC;IAED;;;;;;;;;;OAUG;IACH,WAAW,CAAC,GAAW,EAAE,IAAqB;QAC5C,MAAM,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC,oBAAoB,EAAE,CAAC;QAE7D,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO;QACT,CAAC;QAED,MAAM,EAAE,GAAG,8BAA8B,CACvC,IAAI,EACJ,aAAa,EACb,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,CACtB,CAAC;QAEF,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YACrB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,EAAE,GAAkB,EAAE;YACjD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;YAE1B,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACK,cAAc;QACpB,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAC/C,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACK,eAAe,CAAC,GAAW;QACjC,MAAM,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC,oBAAoB,EAAE,CAAC;QAE7D,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEjC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO;QACT,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC;QAClC,MAAM,EAAE,GAAG,8BAA8B,CAAC,IAAI,EAAE,aAAa,EAAE,GAAG,CAAC,CAAC;QAEpE,IAAI,EAAE,KAAK,SAAS,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;YACrD,OAAO;QACT,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;CACF"}

package/dist/service/dynamodb/time-to-live/sim-dynamodb-time-to-live.d.ts

@@ -6,7 +6,8 @@ import type { SimDynamoDbTimeToLiveSpecification } from "./sim-dynamodb-time-to-
  * An update moves the status to ENABLING or DISABLING and the scheduled work
  * settles it on ENABLED or DISABLED, which is the same two-step the table's own
  * status goes through. Nothing here expires anything: this is what a table
- * expires items by, and `SimDynamoDbTableExpiry` is what acts on it.
+ * expires items by, and `SimDynamoDbTableTimeToLive` is what holds it and acts
+ * on it.
  */
 export declare class SimDynamoDbTimeToLive {
     #private;

package/dist/service/dynamodb/time-to-live/sim-dynamodb-time-to-live.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-dynamodb-time-to-live.d.ts","sourceRoot":"","sources":["../../../../src/service/dynamodb/time-to-live/sim-dynamodb-time-to-live.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,gCAAgC,EAChC,2BAA2B,EAC5B,MAAM,+CAA+C,CAAC;AAEvD,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,8CAA8C,CAAC;AAOvG;;;;;;;GAOG;AACH,qBAAa,qBAAqB;;IAChC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IAKnC,YAAY,SAAS,EAAE,MAAM,EAE5B;IAED;;OAEG;IACH,IAAI,MAAM,IAAI,2BAA2B,CAExC;IAED;;;;;OAKG;IACH,oBAAoB,IAAI,MAAM,GAAG,SAAS,CAMzC;IAED;;;OAGG;IACH,MAAM,CAAC,aAAa,EAAE,kCAAkC,EAAE,EAAE,EAAE,IAAI,GAAG,IAAI,CAOxE;IAED;;;;;;OAMG;IACH,MAAM,IAAI,IAAI,CAWb;IAED;;OAEG;IACH,WAAW,IAAI,gCAAgC,CAK9C;IAED;;OAEG;IACH,OAAO,CAAC,SAAS;IAQjB;;;;;;;;OAQG;IACH,OAAO,CAAC,aAAa;IAYrB;;OAEG;IACH,OAAO,KAAK,IAAI,GAEf;IAED;;;;;OAKG;IACH,OAAO,CAAC,eAAe;CAiBxB"}
+{"version":3,"file":"sim-dynamodb-time-to-live.d.ts","sourceRoot":"","sources":["../../../../src/service/dynamodb/time-to-live/sim-dynamodb-time-to-live.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,gCAAgC,EAChC,2BAA2B,EAC5B,MAAM,+CAA+C,CAAC;AAEvD,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,8CAA8C,CAAC;AAOvG;;;;;;;;GAQG;AACH,qBAAa,qBAAqB;;IAChC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IAKnC,YAAY,SAAS,EAAE,MAAM,EAE5B;IAED;;OAEG;IACH,IAAI,MAAM,IAAI,2BAA2B,CAExC;IAED;;;;;OAKG;IACH,oBAAoB,IAAI,MAAM,GAAG,SAAS,CAMzC;IAED;;;OAGG;IACH,MAAM,CAAC,aAAa,EAAE,kCAAkC,EAAE,EAAE,EAAE,IAAI,GAAG,IAAI,CAOxE;IAED;;;;;;OAMG;IACH,MAAM,IAAI,IAAI,CAWb;IAED;;OAEG;IACH,WAAW,IAAI,gCAAgC,CAK9C;IAED;;OAEG;IACH,OAAO,CAAC,SAAS;IAQjB;;;;;;;;OAQG;IACH,OAAO,CAAC,aAAa;IAYrB;;OAEG;IACH,OAAO,KAAK,IAAI,GAEf;IAED;;;;;OAKG;IACH,OAAO,CAAC,eAAe;CAiBxB"}

package/dist/service/dynamodb/time-to-live/sim-dynamodb-time-to-live.js

@@ -9,7 +9,8 @@ const updateWindowMilliseconds = 60 * 60 * 1000;
  * An update moves the status to ENABLING or DISABLING and the scheduled work
  * settles it on ENABLED or DISABLED, which is the same two-step the table's own
  * status goes through. Nothing here expires anything: this is what a table
- * expires items by, and `SimDynamoDbTableExpiry` is what acts on it.
+ * expires items by, and `SimDynamoDbTableTimeToLive` is what holds it and acts
+ * on it.
  */
 export class SimDynamoDbTimeToLive {
     tableName;

package/dist/service/dynamodb/time-to-live/sim-dynamodb-time-to-live.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-dynamodb-time-to-live.js","sourceRoot":"","sources":["../../../../src/service/dynamodb/time-to-live/sim-dynamodb-time-to-live.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,8BAA8B,EAAE,MAAM,4BAA4B,CAAC;AAG5E;;GAEG;AACH,MAAM,wBAAwB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEhD;;;;;;;GAOG;AACH,MAAM,OAAO,qBAAqB;IACf,SAAS,CAAS;IACnC,OAAO,GAAgC,UAAU,CAAC;IAClD,cAAc,CAAqB;IACnC,UAAU,CAAmB;IAE7B,YAAY,SAAiB;QAC3B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;;;;;OAKG;IACH,oBAAoB;QAClB,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,IAAI,CAAC,cAAc,CAAC;QAC7B,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,aAAiD,EAAE,EAAQ;QAChE,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;QAEzB,IAAI,CAAC,cAAc,GAAG,aAAa,CAAC,aAAa,CAAC;QAClD,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IACvD,CAAC;IAED;;;;;;OAMG;IACH,MAAM;QACJ,IAAI,IAAI,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;YAChC,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;YAEzB,OAAO;QACT,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;YACjC,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC;YAC1B,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;QAClC,CAAC;IACH,CAAC;IAED;;OAEG;IACH,WAAW;QACT,OAAO;YACL,gBAAgB,EAAE,IAAI,CAAC,OAAO;YAC9B,aAAa,EAAE,IAAI,CAAC,cAAc;SACnC,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,SAAS,CAAC,OAAgB;QAChC,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IAED;;;;;;;;OAQG;IACK,aAAa,CAAC,OAAgB;QACpC,IAAI,OAAO,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YAC1B,OAAO;QACT,CAAC;QAED,MAAM,IAAI,8BAA8B,CACtC,yBAAyB,IAAI,CAAC,SAAS,cAAc;YACnD,GAAG,IAAI,CAAC,OAAO,oDAAoD;YACnE,gCAAgC,CACnC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,IAAY,IAAI;QACd,OAAO,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,KAAK,UAAU,CAAC;IACnE,CAAC;IAED;;;;;OAKG;IACK,eAAe,CAAC,EAAQ;QAC9B,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QAEzD,IAAI,OAAO,IAAI,wBAAwB,EAAE,CAAC;YACxC,OAAO;QACT,CAAC;QAED,MAAM,IAAI,8BAA8B,CACtC,yBAAyB,IAAI,CAAC,SAAS,uBAAuB;YAC5D,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,2BAA2B;YAC3D,qCAAqC,CACxC,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-dynamodb-time-to-live.js","sourceRoot":"","sources":["../../../../src/service/dynamodb/time-to-live/sim-dynamodb-time-to-live.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,8BAA8B,EAAE,MAAM,4BAA4B,CAAC;AAG5E;;GAEG;AACH,MAAM,wBAAwB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEhD;;;;;;;;GAQG;AACH,MAAM,OAAO,qBAAqB;IACf,SAAS,CAAS;IACnC,OAAO,GAAgC,UAAU,CAAC;IAClD,cAAc,CAAqB;IACnC,UAAU,CAAmB;IAE7B,YAAY,SAAiB;QAC3B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;;;;;OAKG;IACH,oBAAoB;QAClB,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,IAAI,CAAC,cAAc,CAAC;QAC7B,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,aAAiD,EAAE,EAAQ;QAChE,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;QAEzB,IAAI,CAAC,cAAc,GAAG,aAAa,CAAC,aAAa,CAAC;QAClD,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IACvD,CAAC;IAED;;;;;;OAMG;IACH,MAAM;QACJ,IAAI,IAAI,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;YAChC,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;YAEzB,OAAO;QACT,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;YACjC,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC;YAC1B,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;QAClC,CAAC;IACH,CAAC;IAED;;OAEG;IACH,WAAW;QACT,OAAO;YACL,gBAAgB,EAAE,IAAI,CAAC,OAAO;YAC9B,aAAa,EAAE,IAAI,CAAC,cAAc;SACnC,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,SAAS,CAAC,OAAgB;QAChC,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IAED;;;;;;;;OAQG;IACK,aAAa,CAAC,OAAgB;QACpC,IAAI,OAAO,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YAC1B,OAAO;QACT,CAAC;QAED,MAAM,IAAI,8BAA8B,CACtC,yBAAyB,IAAI,CAAC,SAAS,cAAc;YACnD,GAAG,IAAI,CAAC,OAAO,oDAAoD;YACnE,gCAAgC,CACnC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,IAAY,IAAI;QACd,OAAO,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,KAAK,UAAU,CAAC;IACnE,CAAC;IAED;;;;;OAKG;IACK,eAAe,CAAC,EAAQ;QAC9B,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QAEzD,IAAI,OAAO,IAAI,wBAAwB,EAAE,CAAC;YACxC,OAAO;QACT,CAAC;QAED,MAAM,IAAI,8BAA8B,CACtC,yBAAyB,IAAI,CAAC,SAAS,uBAAuB;YAC5D,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,2BAA2B;YAC3D,qCAAqC,CACxC,CAAC;IACJ,CAAC;CACF"}

package/dist/service/iam/authorize/match/condition/arn/equals/sim-iam-arn-equals.d.ts

@@ -0,0 +1,14 @@
+import { SimIamScalarStringConditionOperator } from "../../string/sim-iam-scalar-string-condition-operator.js";
+/**
+ * IAM `ArnEquals` condition operator.
+ *
+ * AWS documents `ArnEquals` and `ArnLike` as behaving identically: both
+ * compare the six components of an ARN separately, and both accept `*` and `?`
+ * wildcards in any of them. So a policy written with either operator is
+ * evaluated the same way here, rather than `ArnEquals` being the exact-string
+ * comparison its name suggests.
+ */
+export declare class SimIamArnEquals extends SimIamScalarStringConditionOperator {
+    protected valueMatches(actual: string, expected: string): boolean;
+}
+//# sourceMappingURL=sim-iam-arn-equals.d.ts.map

package/dist/service/iam/authorize/match/condition/arn/equals/sim-iam-arn-equals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-arn-equals.d.ts","sourceRoot":"","sources":["../../../../../../../../src/service/iam/authorize/match/condition/arn/equals/sim-iam-arn-equals.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mCAAmC,EAAE,MAAM,0DAA0D,CAAC;AAE/G;;;;;;;;GAQG;AACH,qBAAa,eAAgB,SAAQ,mCAAmC;IACtE,UAAmB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEzE;CACF"}

package/dist/service/iam/authorize/match/condition/arn/equals/sim-iam-arn-equals.js

@@ -0,0 +1,17 @@
+import { simIamArnMatch } from "../../../../sim-iam-arn-match.js";
+import { SimIamScalarStringConditionOperator } from "../../string/sim-iam-scalar-string-condition-operator.js";
+/**
+ * IAM `ArnEquals` condition operator.
+ *
+ * AWS documents `ArnEquals` and `ArnLike` as behaving identically: both
+ * compare the six components of an ARN separately, and both accept `*` and `?`
+ * wildcards in any of them. So a policy written with either operator is
+ * evaluated the same way here, rather than `ArnEquals` being the exact-string
+ * comparison its name suggests.
+ */
+export class SimIamArnEquals extends SimIamScalarStringConditionOperator {
+    valueMatches(actual, expected) {
+        return simIamArnMatch(expected, actual);
+    }
+}
+//# sourceMappingURL=sim-iam-arn-equals.js.map

package/dist/service/iam/authorize/match/condition/arn/equals/sim-iam-arn-equals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-arn-equals.js","sourceRoot":"","sources":["../../../../../../../../src/service/iam/authorize/match/condition/arn/equals/sim-iam-arn-equals.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EAAE,mCAAmC,EAAE,MAAM,0DAA0D,CAAC;AAE/G;;;;;;;;GAQG;AACH,MAAM,OAAO,eAAgB,SAAQ,mCAAmC;IACnD,YAAY,CAAC,MAAc,EAAE,QAAgB;QAC9D,OAAO,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1C,CAAC;CACF"}

package/dist/service/iam/authorize/match/condition/arn/like/sim-iam-arn-like.d.ts

@@ -0,0 +1,13 @@
+import { SimIamScalarStringConditionOperator } from "../../string/sim-iam-scalar-string-condition-operator.js";
+/**
+ * IAM `ArnLike` condition operator.
+ *
+ * This is `StringLike` over an ARN, with the wildcards confined to the
+ * component they are written in. It is what `AddPermission` writes a
+ * `SourceArn` under, so it is the operator an invoking service's grant is
+ * evaluated with.
+ */
+export declare class SimIamArnLike extends SimIamScalarStringConditionOperator {
+    protected valueMatches(actual: string, expected: string): boolean;
+}
+//# sourceMappingURL=sim-iam-arn-like.d.ts.map

package/dist/service/iam/authorize/match/condition/arn/like/sim-iam-arn-like.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-arn-like.d.ts","sourceRoot":"","sources":["../../../../../../../../src/service/iam/authorize/match/condition/arn/like/sim-iam-arn-like.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mCAAmC,EAAE,MAAM,0DAA0D,CAAC;AAE/G;;;;;;;GAOG;AACH,qBAAa,aAAc,SAAQ,mCAAmC;IACpE,UAAmB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEzE;CACF"}

package/dist/service/iam/authorize/match/condition/arn/like/sim-iam-arn-like.js

@@ -0,0 +1,16 @@
+import { simIamArnMatch } from "../../../../sim-iam-arn-match.js";
+import { SimIamScalarStringConditionOperator } from "../../string/sim-iam-scalar-string-condition-operator.js";
+/**
+ * IAM `ArnLike` condition operator.
+ *
+ * This is `StringLike` over an ARN, with the wildcards confined to the
+ * component they are written in. It is what `AddPermission` writes a
+ * `SourceArn` under, so it is the operator an invoking service's grant is
+ * evaluated with.
+ */
+export class SimIamArnLike extends SimIamScalarStringConditionOperator {
+    valueMatches(actual, expected) {
+        return simIamArnMatch(expected, actual);
+    }
+}
+//# sourceMappingURL=sim-iam-arn-like.js.map

package/dist/service/iam/authorize/match/condition/arn/like/sim-iam-arn-like.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-arn-like.js","sourceRoot":"","sources":["../../../../../../../../src/service/iam/authorize/match/condition/arn/like/sim-iam-arn-like.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EAAE,mCAAmC,EAAE,MAAM,0DAA0D,CAAC;AAE/G;;;;;;;GAOG;AACH,MAAM,OAAO,aAAc,SAAQ,mCAAmC;IACjD,YAAY,CAAC,MAAc,EAAE,QAAgB;QAC9D,OAAO,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1C,CAAC;CACF"}

package/dist/service/iam/authorize/match/condition/sim-iam-condition-operator-parser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-iam-condition-operator-parser.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/authorize/match/condition/sim-iam-condition-operator-parser.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAoC/E;;;;;GAKG;AACH,qBAAa,6BAA6B;IACxC;;OAEG;IACH,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,uBAAuB,GAAG,SAAS,CAE1D;CACF"}
+{"version":3,"file":"sim-iam-condition-operator-parser.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/authorize/match/condition/sim-iam-condition-operator-parser.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAwC/E;;;;;GAKG;AACH,qBAAa,6BAA6B;IACxC;;OAEG;IACH,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,uBAAuB,GAAG,SAAS,CAE1D;CACF"}

package/dist/service/iam/authorize/match/condition/sim-iam-condition-operator-parser.js

@@ -5,7 +5,11 @@ import { SimIamForAnyValueStringLike } from "./string/any-value/sim-iam-for-any-
 import { SimIamStringEquals } from "./string/equals/sim-iam-string-equals.js";
 import { SimIamStringLike } from "./string/like/sim-iam-string-like.js";
 import { SimIamNumericLessThanEquals } from "./numeric/less-than-equals/sim-iam-number-lte.js";
+import { SimIamArnEquals } from "./arn/equals/sim-iam-arn-equals.js";
+import { SimIamArnLike } from "./arn/like/sim-iam-arn-like.js";
 const operatorFactories = new Map([
+    ["ArnEquals", () => new SimIamArnEquals()],
+    ["ArnLike", () => new SimIamArnLike()],
     [
         "NumericLessThanEquals",
         () => new SimIamNumericLessThanEquals(),

package/dist/service/iam/authorize/match/condition/sim-iam-condition-operator-parser.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-iam-condition-operator-parser.js","sourceRoot":"","sources":["../../../../../../src/service/iam/authorize/match/condition/sim-iam-condition-operator-parser.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,8BAA8B,EAAE,MAAM,6DAA6D,CAAC;AAC7G,OAAO,EAAE,4BAA4B,EAAE,MAAM,2DAA2D,CAAC;AACzG,OAAO,EAAE,6BAA6B,EAAE,MAAM,2DAA2D,CAAC;AAC1G,OAAO,EAAE,2BAA2B,EAAE,MAAM,yDAAyD,CAAC;AACtG,OAAO,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AACxE,OAAO,EAAE,2BAA2B,EAAE,MAAM,kDAAkD,CAAC;AAI/F,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAyC;IACxE;QACE,uBAAuB;QACvB,GAA4B,EAAE,CAAC,IAAI,2BAA2B,EAAE;KACjE;IACD,CAAC,cAAc,EAAE,GAA4B,EAAE,CAAC,IAAI,kBAAkB,EAAE,CAAC;IACzE,CAAC,YAAY,EAAE,GAA4B,EAAE,CAAC,IAAI,gBAAgB,EAAE,CAAC;IACrE;QACE,0BAA0B;QAC1B,GAA4B,EAAE,CAAC,IAAI,6BAA6B,EAAE;KACnE;IACD;QACE,wBAAwB;QACxB,GAA4B,EAAE,CAAC,IAAI,2BAA2B,EAAE;KACjE;IACD;QACE,2BAA2B;QAC3B,GAA4B,EAAE,CAAC,IAAI,8BAA8B,EAAE;KACpE;IACD;QACE,yBAAyB;QACzB,GAA4B,EAAE,CAAC,IAAI,4BAA4B,EAAE;KAClE;CACF,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,OAAO,6BAA6B;IACxC;;OAEG;IACH,KAAK,CAAC,OAAe;QACnB,OAAO,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;IAC5C,CAAC;CACF"}
+{"version":3,"file":"sim-iam-condition-operator-parser.js","sourceRoot":"","sources":["../../../../../../src/service/iam/authorize/match/condition/sim-iam-condition-operator-parser.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,8BAA8B,EAAE,MAAM,6DAA6D,CAAC;AAC7G,OAAO,EAAE,4BAA4B,EAAE,MAAM,2DAA2D,CAAC;AACzG,OAAO,EAAE,6BAA6B,EAAE,MAAM,2DAA2D,CAAC;AAC1G,OAAO,EAAE,2BAA2B,EAAE,MAAM,yDAAyD,CAAC;AACtG,OAAO,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AACxE,OAAO,EAAE,2BAA2B,EAAE,MAAM,kDAAkD,CAAC;AAC/F,OAAO,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAI/D,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAyC;IACxE,CAAC,WAAW,EAAE,GAA4B,EAAE,CAAC,IAAI,eAAe,EAAE,CAAC;IACnE,CAAC,SAAS,EAAE,GAA4B,EAAE,CAAC,IAAI,aAAa,EAAE,CAAC;IAC/D;QACE,uBAAuB;QACvB,GAA4B,EAAE,CAAC,IAAI,2BAA2B,EAAE;KACjE;IACD,CAAC,cAAc,EAAE,GAA4B,EAAE,CAAC,IAAI,kBAAkB,EAAE,CAAC;IACzE,CAAC,YAAY,EAAE,GAA4B,EAAE,CAAC,IAAI,gBAAgB,EAAE,CAAC;IACrE;QACE,0BAA0B;QAC1B,GAA4B,EAAE,CAAC,IAAI,6BAA6B,EAAE;KACnE;IACD;QACE,wBAAwB;QACxB,GAA4B,EAAE,CAAC,IAAI,2BAA2B,EAAE;KACjE;IACD;QACE,2BAA2B;QAC3B,GAA4B,EAAE,CAAC,IAAI,8BAA8B,EAAE;KACpE;IACD;QACE,yBAAyB;QACzB,GAA4B,EAAE,CAAC,IAAI,4BAA4B,EAAE;KAClE;CACF,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,OAAO,6BAA6B;IACxC;;OAEG;IACH,KAAK,CAAC,OAAe;QACnB,OAAO,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;IAC5C,CAAC;CACF"}

package/dist/service/iam/authorize/match/sim-iam-policy-principal-matcher.d.ts

@@ -51,6 +51,10 @@ export declare class SimIamPolicyPrincipalMatcher {
     private awsPatternMatches;
     /**
      * Compare a service principal pattern with the resolved caller.
+     *
+     * A service principal has no ARN and no Account, so this is a direct grant
+     * or nothing: there is no Account for a statement to delegate to. It is what
+     * admits an API Gateway integration invoking a Lambda function.
      */
     private servicePatternMatches;
     /**

package/dist/service/iam/authorize/match/sim-iam-policy-principal-matcher.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-iam-policy-principal-matcher.d.ts","sourceRoot":"","sources":["../../../../../src/service/iam/authorize/match/sim-iam-policy-principal-matcher.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,+CAA+C,CAAC;AACjG,OAAO,KAAK,EACV,kBAAkB,EAClB,uBAAuB,EACxB,MAAM,sCAAsC,CAAC;AAE9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAEpE;;;;;;;;;;;;;;GAcG;AACH,qBAAa,4BAA4B;IAC3B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAApC,YAA6B,OAAO,EAAE,kBAAkB,EAAI;IAE5D;;;;;;;;OAQG;IACH,OAAO,CACL,MAAM,EAAE,uBAAuB,EAC/B,SAAS,EAAE,2BAA2B,GACrC,oBAAoB,CAqBtB;IAED;;;;;;OAMG;IACH,OAAO,CAAC,YAAY;IAiCpB;;OAEG;IACH,OAAO,CAAC,UAAU;IAOlB;;;;;;OAMG;IACH,OAAO,CAAC,iBAAiB;IAyBzB;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAa7B;;;;;OAKG;IACH,OAAO,CAAC,kBAAkB;CAQ3B"}
+{"version":3,"file":"sim-iam-policy-principal-matcher.d.ts","sourceRoot":"","sources":["../../../../../src/service/iam/authorize/match/sim-iam-policy-principal-matcher.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,+CAA+C,CAAC;AACjG,OAAO,KAAK,EACV,kBAAkB,EAClB,uBAAuB,EACxB,MAAM,sCAAsC,CAAC;AAE9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAEpE;;;;;;;;;;;;;;GAcG;AACH,qBAAa,4BAA4B;IAC3B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAApC,YAA6B,OAAO,EAAE,kBAAkB,EAAI;IAE5D;;;;;;;;OAQG;IACH,OAAO,CACL,MAAM,EAAE,uBAAuB,EAC/B,SAAS,EAAE,2BAA2B,GACrC,oBAAoB,CAqBtB;IAED;;;;;;OAMG;IACH,OAAO,CAAC,YAAY;IAgCpB;;OAEG;IACH,OAAO,CAAC,UAAU;IAOlB;;;;;;OAMG;IACH,OAAO,CAAC,iBAAiB;IAyBzB;;;;;;OAMG;IACH,OAAO,CAAC,qBAAqB;IAW7B;;;;;OAKG;IACH,OAAO,CAAC,kBAAkB;CAQ3B"}

package/dist/service/iam/authorize/match/sim-iam-policy-principal-matcher.js

@@ -63,7 +63,6 @@ export class SimIamPolicyPrincipalMatcher {
             if (type === "AWS") {
                 return this.firstMatch(patterns, (pattern) => this.awsPatternMatches(pattern));
             }
-            /* v8 ignore if -- service principals not yet fully supported */
             if (type === "Service") {
                 return this.firstMatch(patterns, (pattern) => this.servicePatternMatches(pattern));
             }
@@ -101,11 +100,13 @@ export class SimIamPolicyPrincipalMatcher {
     }
     /**
      * Compare a service principal pattern with the resolved caller.
+     *
+     * A service principal has no ARN and no Account, so this is a direct grant
+     * or nothing: there is no Account for a statement to delegate to. It is what
+     * admits an API Gateway integration invoking a Lambda function.
      */
     servicePatternMatches(pattern) {
-        /* v8 ignore next -- service principals not yet fully supported */
         const service = this.context.caller.service;
-        /* v8 ignore next -- service principals not yet fully supported */
         return SimIamPrincipalMatch.direct().when(service !== undefined &&
             simIamWildcardMatch(pattern, service, {
                 caseSensitive: true,

package/dist/service/iam/authorize/match/sim-iam-policy-principal-matcher.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-iam-policy-principal-matcher.js","sourceRoot":"","sources":["../../../../../src/service/iam/authorize/match/sim-iam-policy-principal-matcher.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAEpE;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,4BAA4B;IACV,OAAO;IAApC,YAA6B,OAA2B;uBAA3B,OAAO;IAAuB,CAAC;IAE5D;;;;;;;;OAQG;IACH,OAAO,CACL,MAA+B,EAC/B,SAAsC;QAEtC,IAAI,MAAM,CAAC,UAAU,KAAK,UAAU,IAAI,MAAM,CAAC,UAAU,KAAK,OAAO,EAAE,CAAC;YACtE,OAAO,oBAAoB,CAAC,MAAM,EAAE,CAAC,IAAI,CACvC,SAAS,CAAC,SAAS,KAAK,SAAS;gBAC/B,SAAS,CAAC,YAAY,KAAK,SAAS,CACvC,CAAC;QACJ,CAAC;QAED,IAAI,SAAS,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAChD,CAAC;QAED,IAAI,SAAS,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACzC,uEAAuE;YACvE,4DAA4D;YAC5D,OAAO,oBAAoB,CAAC,MAAM,EAAE,CAAC,IAAI,CACvC,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,OAAO,CACnD,CAAC;QACJ,CAAC;QAED,OAAO,oBAAoB,CAAC,IAAI,EAAE,CAAC;IACrC,CAAC;IAED;;;;;;OAMG;IACK,YAAY,CAClB,SAAwC;QAExC,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC3C,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC,KAAa,EAAE,EAAE,CAClD,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAC9B,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE;YACnE,MAAM,QAAQ,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YAEhE,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;gBACnB,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAC3C,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAChC,CAAC;YACJ,CAAC;YAED,gEAAgE;YAChE,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAC3C,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,CACpC,CAAC;YACJ,CAAC;YAED,OAAO,oBAAoB,CAAC,IAAI,EAAE,CAAC;QACrC,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,UAAU,CAChB,MAAoB,EACpB,KAAyC;QAEzC,OAAO,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzE,CAAC;IAED;;;;;;OAMG;IACK,iBAAiB,CAAC,OAAe;QACvC,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;YACpB,OAAO,oBAAoB,CAAC,MAAM,EAAE,CAAC;QACvC,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QACnC,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,oBAAoB,CAAC,IAAI,EAAE,CAAC;QACrC,CAAC;QAED,MAAM,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAE5D,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;YACrC,OAAO,oBAAoB,CAAC,iBAAiB,EAAE,CAAC,IAAI,CAClD,MAAM,CAAC,SAAS,KAAK,kBAAkB,CACxC,CAAC;QACJ,CAAC;QAED,OAAO,oBAAoB,CAAC,MAAM,EAAE,CAAC,IAAI,CACvC,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,EAAE;YACvC,aAAa,EAAE,IAAI;SACpB,CAAC,CACH,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,qBAAqB,CAAC,OAAe;QAC3C,kEAAkE;QAClE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;QAE5C,kEAAkE;QAClE,OAAO,oBAAoB,CAAC,MAAM,EAAE,CAAC,IAAI,CACvC,OAAO,KAAK,SAAS;YACnB,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE;gBACpC,aAAa,EAAE,IAAI;aACpB,CAAC,CACL,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACK,kBAAkB,CAAC,OAAe;QACxC,IAAI,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,MAAM,KAAK,GAAG,+BAA+B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5D,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;CACF"}
+{"version":3,"file":"sim-iam-policy-principal-matcher.js","sourceRoot":"","sources":["../../../../../src/service/iam/authorize/match/sim-iam-policy-principal-matcher.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAEpE;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,4BAA4B;IACV,OAAO;IAApC,YAA6B,OAA2B;uBAA3B,OAAO;IAAuB,CAAC;IAE5D;;;;;;;;OAQG;IACH,OAAO,CACL,MAA+B,EAC/B,SAAsC;QAEtC,IAAI,MAAM,CAAC,UAAU,KAAK,UAAU,IAAI,MAAM,CAAC,UAAU,KAAK,OAAO,EAAE,CAAC;YACtE,OAAO,oBAAoB,CAAC,MAAM,EAAE,CAAC,IAAI,CACvC,SAAS,CAAC,SAAS,KAAK,SAAS;gBAC/B,SAAS,CAAC,YAAY,KAAK,SAAS,CACvC,CAAC;QACJ,CAAC;QAED,IAAI,SAAS,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAChD,CAAC;QAED,IAAI,SAAS,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACzC,uEAAuE;YACvE,4DAA4D;YAC5D,OAAO,oBAAoB,CAAC,MAAM,EAAE,CAAC,IAAI,CACvC,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,OAAO,CACnD,CAAC;QACJ,CAAC;QAED,OAAO,oBAAoB,CAAC,IAAI,EAAE,CAAC;IACrC,CAAC;IAED;;;;;;OAMG;IACK,YAAY,CAClB,SAAwC;QAExC,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC3C,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC,KAAa,EAAE,EAAE,CAClD,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAC9B,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE;YACnE,MAAM,QAAQ,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YAEhE,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;gBACnB,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAC3C,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAChC,CAAC;YACJ,CAAC;YAED,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAC3C,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,CACpC,CAAC;YACJ,CAAC;YAED,OAAO,oBAAoB,CAAC,IAAI,EAAE,CAAC;QACrC,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,UAAU,CAChB,MAAoB,EACpB,KAAyC;QAEzC,OAAO,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzE,CAAC;IAED;;;;;;OAMG;IACK,iBAAiB,CAAC,OAAe;QACvC,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;YACpB,OAAO,oBAAoB,CAAC,MAAM,EAAE,CAAC;QACvC,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QACnC,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,oBAAoB,CAAC,IAAI,EAAE,CAAC;QACrC,CAAC;QAED,MAAM,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAE5D,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;YACrC,OAAO,oBAAoB,CAAC,iBAAiB,EAAE,CAAC,IAAI,CAClD,MAAM,CAAC,SAAS,KAAK,kBAAkB,CACxC,CAAC;QACJ,CAAC;QAED,OAAO,oBAAoB,CAAC,MAAM,EAAE,CAAC,IAAI,CACvC,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,EAAE;YACvC,aAAa,EAAE,IAAI;SACpB,CAAC,CACH,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACK,qBAAqB,CAAC,OAAe;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;QAE5C,OAAO,oBAAoB,CAAC,MAAM,EAAE,CAAC,IAAI,CACvC,OAAO,KAAK,SAAS;YACnB,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE;gBACpC,aAAa,EAAE,IAAI;aACpB,CAAC,CACL,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACK,kBAAkB,CAAC,OAAe;QACxC,IAAI,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,MAAM,KAAK,GAAG,+BAA+B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5D,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;CACF"}

package/dist/service/iam/authorize/sim-iam-arn-match.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Match an ARN against an ARN pattern, as the `ArnLike` and `ArnEquals`
+ * condition operators do.
+ *
+ * AWS compares each of the six colon-delimited components separately, and a
+ * wildcard in one of them stays inside it: `arn:aws:s3:*` does not match an
+ * ARN whose Account or resource happen to make the rest of the string fit. A
+ * pattern with fewer components than an ARN has therefore matches nothing,
+ * which is stricter than comparing the two as plain strings would be.
+ */
+export declare function simIamArnMatch(pattern: string, value: string): boolean;
+//# sourceMappingURL=sim-iam-arn-match.d.ts.map

package/dist/service/iam/authorize/sim-iam-arn-match.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-arn-match.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/authorize/sim-iam-arn-match.ts"],"names":[],"mappings":"AAUA;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAetE"}

package/dist/service/iam/authorize/sim-iam-arn-match.js

@@ -0,0 +1,45 @@
+import { simIamWildcardMatch } from "./sim-iam-wildcard.js";
+/**
+ * The number of colon-delimited components an ARN has.
+ *
+ * The last of them is the resource, which may itself contain colons, so
+ * anything past the fifth colon belongs to it.
+ */
+const arnComponentCount = 6;
+/**
+ * Match an ARN against an ARN pattern, as the `ArnLike` and `ArnEquals`
+ * condition operators do.
+ *
+ * AWS compares each of the six colon-delimited components separately, and a
+ * wildcard in one of them stays inside it: `arn:aws:s3:*` does not match an
+ * ARN whose Account or resource happen to make the rest of the string fit. A
+ * pattern with fewer components than an ARN has therefore matches nothing,
+ * which is stricter than comparing the two as plain strings would be.
+ */
+export function simIamArnMatch(pattern, value) {
+    const patternComponents = arnComponents(pattern);
+    const valueComponents = arnComponents(value);
+    if (patternComponents.length !== valueComponents.length) {
+        return false;
+    }
+    // The two have the same number of components, so the fallback below stands
+    // in for a component that cannot be missing.
+    return patternComponents.every((component, index) => simIamWildcardMatch(component, valueComponents.at(index) ?? "", {
+        caseSensitive: true,
+    }));
+}
+/**
+ * Split an ARN into its six components, leaving any colons in the resource
+ * component where they are.
+ */
+function arnComponents(arn) {
+    const components = arn.split(":");
+    if (components.length <= arnComponentCount) {
+        return components;
+    }
+    return [
+        ...components.slice(0, arnComponentCount - 1),
+        components.slice(arnComponentCount - 1).join(":"),
+    ];
+}
+//# sourceMappingURL=sim-iam-arn-match.js.map

package/dist/service/iam/authorize/sim-iam-arn-match.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-arn-match.js","sourceRoot":"","sources":["../../../../src/service/iam/authorize/sim-iam-arn-match.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAE5D;;;;;GAKG;AACH,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAE5B;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,KAAa;IAC3D,MAAM,iBAAiB,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,eAAe,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IAE7C,IAAI,iBAAiB,CAAC,MAAM,KAAK,eAAe,CAAC,MAAM,EAAE,CAAC;QACxD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,2EAA2E;IAC3E,6CAA6C;IAC7C,OAAO,iBAAiB,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,CAClD,mBAAmB,CAAC,SAAS,EAAE,eAAe,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE;QAC9D,aAAa,EAAE,IAAI;KACpB,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,aAAa,CAAC,GAAW;IAChC,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAElC,IAAI,UAAU,CAAC,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAC3C,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,OAAO;QACL,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,GAAG,CAAC,CAAC;QAC7C,UAAU,CAAC,KAAK,CAAC,iBAAiB,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;KAClD,CAAC;AACJ,CAAC"}

package/dist/service/iam/command/role/list-roles/list-roles.handler.js

@@ -42,8 +42,8 @@ export class ListRolesCommandHandler {
             .toArray()
             .toSorted((a, b) => a.arn.localeCompare(b.arn));
         return roles.filter((role) => {
-            return !(command.input.PathPrefix !== undefined &&
-                !role.path.startsWith(command.input.PathPrefix));
+            return (command.input.PathPrefix === undefined ||
+                role.path.startsWith(command.input.PathPrefix));
         });
     }
 }

package/dist/service/iam/command/role/list-roles/list-roles.handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"list-roles.handler.js","sourceRoot":"","sources":["../../../../../../src/service/iam/command/role/list-roles/list-roles.handler.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,eAAe,GAChB,MAAM,8CAA8C,CAAC;AAMtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAO/D;;;;GAIG;AACH,MAAM,OAAO,uBAAuB;IAIjB,KAAK,CAAkC;IACvC,UAAU,CAAsB;IAChC,SAAS,GAAG,IAAI,kBAAkB,EAAE,CAAC;IAEtD,YAAY,UAA6C;QACvD,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,eAAe,EAAE,EAAE,GAAG,UAAU,CAAC;QAEjE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,OAA4B;QAE5B,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAC9B,KAAK,EACL,OAAO,CAAC,KAAK,CAAC,QAAQ,EACtB,OAAO,CAAC,KAAK,CAAC,MAAM,CACrB,CAAC;QAEF,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBAC/B,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,UAAU,EAAE,IAAI,CAAC,YAAY;gBAC7B,wBAAwB,EAAE,IAAI,CAAC,wBAAwB;gBACvD,WAAW,EAAE,IAAI,CAAC,WAAW;aAC9B,CAAC,CAAC;YACH,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC;IACJ,CAAC;IAEO,aAAa,CAAC,OAA4B;QAChD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK;aACrB,MAAM,EAAE;aACR,OAAO,EAAE;aACT,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAElD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;YAC3B,OAAO,CAAC,CACN,OAAO,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS;gBACtC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAChD,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"list-roles.handler.js","sourceRoot":"","sources":["../../../../../../src/service/iam/command/role/list-roles/list-roles.handler.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,eAAe,GAChB,MAAM,8CAA8C,CAAC;AAMtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAO/D;;;;GAIG;AACH,MAAM,OAAO,uBAAuB;IAIjB,KAAK,CAAkC;IACvC,UAAU,CAAsB;IAChC,SAAS,GAAG,IAAI,kBAAkB,EAAE,CAAC;IAEtD,YAAY,UAA6C;QACvD,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,eAAe,EAAE,EAAE,GAAG,UAAU,CAAC;QAEjE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,OAA4B;QAE5B,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAC9B,KAAK,EACL,OAAO,CAAC,KAAK,CAAC,QAAQ,EACtB,OAAO,CAAC,KAAK,CAAC,MAAM,CACrB,CAAC;QAEF,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBAC/B,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,UAAU,EAAE,IAAI,CAAC,YAAY;gBAC7B,wBAAwB,EAAE,IAAI,CAAC,wBAAwB;gBACvD,WAAW,EAAE,IAAI,CAAC,WAAW;aAC9B,CAAC,CAAC;YACH,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC;IACJ,CAAC;IAEO,aAAa,CAAC,OAA4B;QAChD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK;aACrB,MAAM,EAAE;aACR,OAAO,EAAE;aACT,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAElD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;YAC3B,OAAO,CACL,OAAO,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS;gBACtC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAC/C,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/lambda/function/policy/sim-lambda-permission.d.ts

@@ -53,11 +53,12 @@ export declare class SimLambdaPermission {
     /**
      * The condition block the qualifying properties expand into.
      *
-     * Only `lambda:FunctionUrlAuthType` is given a value at request time, so it
-     * is the only one that can match. The rest are still written into the
-     * statement, because `GetPolicy` should report the permission that was
-     * granted; a statement carrying one of them simply never matches, which is
-     * the safe direction for a condition the simulator cannot evaluate.
+     * `lambda:FunctionUrlAuthType` is given a value when a Function URL is
+     * invoked, and `AWS:SourceArn` when an API Gateway HTTP API integration
+     * invokes the function. The rest are still written into the statement,
+     * because `GetPolicy` should report the permission that was granted; a
+     * statement carrying one of them simply never matches, which is the safe
+     * direction for a condition the simulator cannot evaluate.
      */
     private condition;
     private stringEqualsConditions;

package/dist/service/lambda/function/policy/sim-lambda-permission.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda-permission.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/function/policy/sim-lambda-permission.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAGV,6BAA6B,EAC9B,MAAM,uCAAuC,CAAC;AAG/C;;;;GAIG;AACH,eAAO,MAAM,wCAAwC,+BACvB,CAAC;AAE/B;;;;;;;;GAQG;AACH,eAAO,MAAM,0CAA0C,iCACvB,CAAC;AAEjC,UAAU,6BAA6B;IACrC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CACtD;AAED;;;;;;;;GAQG;AACH,qBAAa,mBAAmB;IAC9B,SAAgB,WAAW,EAAE,MAAM,CAAC;IACpC,SAAgB,MAAM,EAAE,MAAM,CAAC;IAC/B,SAAgB,SAAS,EAAE,MAAM,CAAC;IAClC,SAAgB,WAAW,EAAE,MAAM,CAAC;IAEpC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAqB;IAC1D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAqB;IAChD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAqB;IACpD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAqB;IACrD,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAsB;IAE7D,YAAY,UAAU,EAAE,6BAA6B,EAUpD;IAED;;OAEG;IACH,WAAW,IAAI,6BAA6B,CAW3C;IAED;;;;;;;;OAQG;IACH,OAAO,CAAC,SAAS;IAsBjB,OAAO,CAAC,sBAAsB;CAa/B"}
+{"version":3,"file":"sim-lambda-permission.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/function/policy/sim-lambda-permission.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAGV,6BAA6B,EAC9B,MAAM,uCAAuC,CAAC;AAG/C;;;;GAIG;AACH,eAAO,MAAM,wCAAwC,+BACvB,CAAC;AAE/B;;;;;;;;GAQG;AACH,eAAO,MAAM,0CAA0C,iCACvB,CAAC;AAEjC,UAAU,6BAA6B;IACrC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CACtD;AAED;;;;;;;;GAQG;AACH,qBAAa,mBAAmB;IAC9B,SAAgB,WAAW,EAAE,MAAM,CAAC;IACpC,SAAgB,MAAM,EAAE,MAAM,CAAC;IAC/B,SAAgB,SAAS,EAAE,MAAM,CAAC;IAClC,SAAgB,WAAW,EAAE,MAAM,CAAC;IAEpC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAqB;IAC1D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAqB;IAChD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAqB;IACpD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAqB;IACrD,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAsB;IAE7D,YAAY,UAAU,EAAE,6BAA6B,EAUpD;IAED;;OAEG;IACH,WAAW,IAAI,6BAA6B,CAW3C;IAED;;;;;;;;;OASG;IACH,OAAO,CAAC,SAAS;IAsBjB,OAAO,CAAC,sBAAsB;CAa/B"}

package/dist/service/lambda/function/policy/sim-lambda-permission.js

@@ -62,11 +62,12 @@ export class SimLambdaPermission {
     /**
      * The condition block the qualifying properties expand into.
      *
-     * Only `lambda:FunctionUrlAuthType` is given a value at request time, so it
-     * is the only one that can match. The rest are still written into the
-     * statement, because `GetPolicy` should report the permission that was
-     * granted; a statement carrying one of them simply never matches, which is
-     * the safe direction for a condition the simulator cannot evaluate.
+     * `lambda:FunctionUrlAuthType` is given a value when a Function URL is
+     * invoked, and `AWS:SourceArn` when an API Gateway HTTP API integration
+     * invokes the function. The rest are still written into the statement,
+     * because `GetPolicy` should report the permission that was granted; a
+     * statement carrying one of them simply never matches, which is the safe
+     * direction for a condition the simulator cannot evaluate.
      */
     condition() {
         const stringEquals = this.stringEqualsConditions();

package/dist/service/lambda/function/policy/sim-lambda-permission.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda-permission.js","sourceRoot":"","sources":["../../../../../src/service/lambda/function/policy/sim-lambda-permission.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AAEpF;;;;GAIG;AACH,MAAM,CAAC,MAAM,wCAAwC,GACnD,4BAA4B,CAAC;AAE/B;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,0CAA0C,GACrD,8BAA8B,CAAC;AAcjC;;;;;;;;GAQG;AACH,MAAM,OAAO,mBAAmB;IACd,WAAW,CAAS;IACpB,MAAM,CAAS;IACf,SAAS,CAAS;IAClB,WAAW,CAAS;IAEnB,mBAAmB,CAAsB;IACzC,SAAS,CAAsB;IAC/B,aAAa,CAAsB;IACnC,cAAc,CAAsB;IACpC,qBAAqB,CAAuB;IAE7D,YAAY,UAAyC;QACnD,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,mBAAmB,GAAG,UAAU,CAAC,mBAAmB,CAAC;QAC1D,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;QAC9C,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,cAAc,CAAC;QAChD,IAAI,CAAC,qBAAqB,GAAG,UAAU,CAAC,qBAAqB,CAAC;IAChE,CAAC;IAED;;OAEG;IACH,WAAW;QACT,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAEnC,OAAO;YACL,GAAG,EAAE,IAAI,CAAC,WAAW;YACrB,MAAM,EAAE,OAAO;YACf,SAAS,EAAE,4BAA4B,CAAC,IAAI,CAAC,SAAS,CAAC;YACvD,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ,EAAE,IAAI,CAAC,WAAW;YAC1B,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;SACzD,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACK,SAAS;QACf,MAAM,YAAY,GAAG,IAAI,CAAC,sBAAsB,EAAE,CAAC;QACnD,MAAM,SAAS,GAAyD,EAAE,CAAC;QAE3E,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzC,SAAS,CAAC,cAAc,CAAC,GAAG,YAAY,CAAC;QAC3C,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACjC,SAAS,CAAC,SAAS,CAAC,GAAG,EAAE,eAAe,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;QAC7D,CAAC;QAED,IAAI,IAAI,CAAC,qBAAqB,KAAK,SAAS,EAAE,CAAC;YAC7C,SAAS,CAAC,MAAM,CAAC,GAAG;gBAClB,CAAC,0CAA0C,CAAC,EAC1C,IAAI,CAAC,qBAAqB;aAC7B,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IACrE,CAAC;IAEO,sBAAsB;QAC5B,OAAO;YACL,GAAG,CAAC,IAAI,CAAC,mBAAmB,KAAK,SAAS,IAAI;gBAC5C,CAAC,wCAAwC,CAAC,EAAE,IAAI,CAAC,mBAAmB;aACrE,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS,IAAI;gBACtC,mBAAmB,EAAE,IAAI,CAAC,aAAa;aACxC,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,cAAc,KAAK,SAAS,IAAI;gBACvC,oBAAoB,EAAE,IAAI,CAAC,cAAc;aAC1C,CAAC;SACH,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-lambda-permission.js","sourceRoot":"","sources":["../../../../../src/service/lambda/function/policy/sim-lambda-permission.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AAEpF;;;;GAIG;AACH,MAAM,CAAC,MAAM,wCAAwC,GACnD,4BAA4B,CAAC;AAE/B;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,0CAA0C,GACrD,8BAA8B,CAAC;AAcjC;;;;;;;;GAQG;AACH,MAAM,OAAO,mBAAmB;IACd,WAAW,CAAS;IACpB,MAAM,CAAS;IACf,SAAS,CAAS;IAClB,WAAW,CAAS;IAEnB,mBAAmB,CAAsB;IACzC,SAAS,CAAsB;IAC/B,aAAa,CAAsB;IACnC,cAAc,CAAsB;IACpC,qBAAqB,CAAuB;IAE7D,YAAY,UAAyC;QACnD,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,mBAAmB,GAAG,UAAU,CAAC,mBAAmB,CAAC;QAC1D,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;QAC9C,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,cAAc,CAAC;QAChD,IAAI,CAAC,qBAAqB,GAAG,UAAU,CAAC,qBAAqB,CAAC;IAChE,CAAC;IAED;;OAEG;IACH,WAAW;QACT,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAEnC,OAAO;YACL,GAAG,EAAE,IAAI,CAAC,WAAW;YACrB,MAAM,EAAE,OAAO;YACf,SAAS,EAAE,4BAA4B,CAAC,IAAI,CAAC,SAAS,CAAC;YACvD,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ,EAAE,IAAI,CAAC,WAAW;YAC1B,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;SACzD,CAAC;IACJ,CAAC;IAED;;;;;;;;;OASG;IACK,SAAS;QACf,MAAM,YAAY,GAAG,IAAI,CAAC,sBAAsB,EAAE,CAAC;QACnD,MAAM,SAAS,GAAyD,EAAE,CAAC;QAE3E,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzC,SAAS,CAAC,cAAc,CAAC,GAAG,YAAY,CAAC;QAC3C,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACjC,SAAS,CAAC,SAAS,CAAC,GAAG,EAAE,eAAe,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;QAC7D,CAAC;QAED,IAAI,IAAI,CAAC,qBAAqB,KAAK,SAAS,EAAE,CAAC;YAC7C,SAAS,CAAC,MAAM,CAAC,GAAG;gBAClB,CAAC,0CAA0C,CAAC,EAC1C,IAAI,CAAC,qBAAqB;aAC7B,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IACrE,CAAC;IAEO,sBAAsB;QAC5B,OAAO;YACL,GAAG,CAAC,IAAI,CAAC,mBAAmB,KAAK,SAAS,IAAI;gBAC5C,CAAC,wCAAwC,CAAC,EAAE,IAAI,CAAC,mBAAmB;aACrE,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS,IAAI;gBACtC,mBAAmB,EAAE,IAAI,CAAC,aAAa;aACxC,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,cAAc,KAAK,SAAS,IAAI;gBACvC,oBAAoB,EAAE,IAAI,CAAC,cAAc;aAC1C,CAAC;SACH,CAAC;IACJ,CAAC;CACF"}

package/dist/service/lambda/serve/event/sim-lambda-url-endpoint.d.ts

@@ -0,0 +1,13 @@
+import type { SimPayload2Endpoint } from "../../../../serve/payload-2/sim-payload-2-endpoint.js";
+import type { SimLambdaFunctionUrl } from "../../function/url/sim-lambda-function-url.js";
+/**
+ * Describe a Function URL as the endpoint a payload format 2.0 event names.
+ *
+ * A Function URL has no API Gateway resources behind it: real Lambda reports
+ * the URL id as the API id and puts `$default` in both the route key and the
+ * stage, whatever the request path was. There are no path parameters, because
+ * there is no route pattern to capture them, and no stage variables, because
+ * there is no stage to configure.
+ */
+export declare function simLambdaUrlEndpoint(functionUrl: SimLambdaFunctionUrl): SimPayload2Endpoint;
+//# sourceMappingURL=sim-lambda-url-endpoint.d.ts.map

package/dist/service/lambda/serve/event/sim-lambda-url-endpoint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-url-endpoint.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/serve/event/sim-lambda-url-endpoint.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uDAAuD,CAAC;AACjG,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+CAA+C,CAAC;AAE1F;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAClC,WAAW,EAAE,oBAAoB,GAChC,mBAAmB,CAQrB"}

package/dist/service/lambda/serve/event/sim-lambda-url-endpoint.js

@@ -0,0 +1,19 @@
+/**
+ * Describe a Function URL as the endpoint a payload format 2.0 event names.
+ *
+ * A Function URL has no API Gateway resources behind it: real Lambda reports
+ * the URL id as the API id and puts `$default` in both the route key and the
+ * stage, whatever the request path was. There are no path parameters, because
+ * there is no route pattern to capture them, and no stage variables, because
+ * there is no stage to configure.
+ */
+export function simLambdaUrlEndpoint(functionUrl) {
+    return {
+        apiId: functionUrl.urlId,
+        domainName: functionUrl.hostname,
+        domainPrefix: functionUrl.urlId,
+        routeKey: "$default",
+        stage: "$default",
+    };
+}
+//# sourceMappingURL=sim-lambda-url-endpoint.js.map

package/dist/service/lambda/serve/event/sim-lambda-url-endpoint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-url-endpoint.js","sourceRoot":"","sources":["../../../../../src/service/lambda/serve/event/sim-lambda-url-endpoint.ts"],"names":[],"mappings":"AAGA;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAClC,WAAiC;IAEjC,OAAO;QACL,KAAK,EAAE,WAAW,CAAC,KAAK;QACxB,UAAU,EAAE,WAAW,CAAC,QAAQ;QAChC,YAAY,EAAE,WAAW,CAAC,KAAK;QAC/B,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,UAAU;KAClB,CAAC;AACJ,CAAC"}