@kensio/yulin 0.47.0 → 1.0.0

package/dist/service/cognito/user-pool/sim-cognito-user-pool-factory.js

@@ -4,6 +4,7 @@ import { SimCognitoPasswordPolicy, } from "./sim-cognito-password-policy.js";
 import { SimCognitoUserPool } from "./sim-cognito-user-pool.js";
 import { SimCognitoUserPoolArn } from "./sim-cognito-user-pool-arn.js";
 import { makeSimCognitoUserPoolId } from "./sim-cognito-user-pool-id.js";
+import { SimCognitoUnsimulatedPoolSettings, } from "./sim-cognito-unsimulated-pool-settings.js";
 /**
  * Builds simulated user pools, including their id, ARN and defaults.
  *
@@ -37,6 +38,7 @@ export class SimCognitoUserPoolFactory {
             }),
             passwordPolicy: new SimCognitoPasswordPolicy(properties.policies?.PasswordPolicy),
             deletionProtection: new SimCognitoDeletionProtection(properties.deletionProtection),
+            unsimulatedSettings: new SimCognitoUnsimulatedPoolSettings(properties.unsimulatedSettings ?? {}),
             createdDate: this.clock.now(),
         });
     }

package/dist/service/cognito/user-pool/sim-cognito-user-pool-factory.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-pool-factory.js","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool-factory.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AACpF,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EACL,wBAAwB,GAEzB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAezE;;;;;;GAMG;AACH,MAAM,OAAO,yBAAyB;IACnB,kBAAkB,CAA2B;IAC7C,KAAK,CAA0B;IAC/B,KAAK,CAAW;IAEjC,YAAY,UAA+C;QACzD,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;QACxD,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,UAA4C;QAC/C,MAAM,UAAU,GAAG,wBAAwB,CACzC,IAAI,CAAC,kBAAkB,CAAC,UAAU,EAClC,IAAI,CAAC,KAAK,CAAC,GAAG,CACf,CAAC;QAEF,OAAO,IAAI,kBAAkB,CAAC;YAC5B,EAAE,EAAE,UAAU;YACd,GAAG,EAAE,IAAI,qBAAqB,CAAC;gBAC7B,UAAU;gBACV,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;aAC5C,CAAC;YACF,IAAI,EAAE,IAAI,cAAc,CAAC;gBACvB,KAAK,EAAE,UAAU;gBACjB,KAAK,EAAE,UAAU,CAAC,IAAI;aACvB,CAAC;YACF,cAAc,EAAE,IAAI,wBAAwB,CAC1C,UAAU,CAAC,QAAQ,EAAE,cAAc,CACpC;YACD,kBAAkB,EAAE,IAAI,4BAA4B,CAClD,UAAU,CAAC,kBAAkB,CAC9B;YACD,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;SAC9B,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-user-pool-factory.js","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool-factory.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AACpF,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EACL,wBAAwB,GAEzB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EACL,iCAAiC,GAElC,MAAM,4CAA4C,CAAC;AAsBpD;;;;;;GAMG;AACH,MAAM,OAAO,yBAAyB;IACnB,kBAAkB,CAA2B;IAC7C,KAAK,CAA0B;IAC/B,KAAK,CAAW;IAEjC,YAAY,UAA+C;QACzD,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;QACxD,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,UAA4C;QAC/C,MAAM,UAAU,GAAG,wBAAwB,CACzC,IAAI,CAAC,kBAAkB,CAAC,UAAU,EAClC,IAAI,CAAC,KAAK,CAAC,GAAG,CACf,CAAC;QAEF,OAAO,IAAI,kBAAkB,CAAC;YAC5B,EAAE,EAAE,UAAU;YACd,GAAG,EAAE,IAAI,qBAAqB,CAAC;gBAC7B,UAAU;gBACV,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;aAC5C,CAAC;YACF,IAAI,EAAE,IAAI,cAAc,CAAC;gBACvB,KAAK,EAAE,UAAU;gBACjB,KAAK,EAAE,UAAU,CAAC,IAAI;aACvB,CAAC;YACF,cAAc,EAAE,IAAI,wBAAwB,CAC1C,UAAU,CAAC,QAAQ,EAAE,cAAc,CACpC;YACD,kBAAkB,EAAE,IAAI,4BAA4B,CAClD,UAAU,CAAC,kBAAkB,CAC9B;YACD,mBAAmB,EAAE,IAAI,iCAAiC,CACxD,UAAU,CAAC,mBAAmB,IAAI,EAAE,CACrC;YACD,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;SAC9B,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/cognito/user-pool/sim-cognito-user-pool.d.ts

@@ -8,6 +8,7 @@ import type { SimCognitoName } from "./sim-cognito-name.js";
 import type { SimCognitoPasswordPolicy } from "./sim-cognito-password-policy.js";
 import type { SimCognitoUserPoolArn } from "./sim-cognito-user-pool-arn.js";
 import type { SimCognitoUserPoolId } from "./sim-cognito-user-pool-id.js";
+import type { SimCognitoUnsimulatedPoolSettings } from "./sim-cognito-unsimulated-pool-settings.js";
 import { SimCognitoSigningKey, type SimCognitoJwks } from "./token/sim-cognito-signing-key.js";
 import type { SimCognitoUser } from "./user/sim-cognito-user.js";
 import type { SimCognitoUsername } from "./user/sim-cognito-username.js";
@@ -17,6 +18,7 @@ interface SimCognitoUserPoolProperties {
     readonly name: SimCognitoName;
     readonly passwordPolicy: SimCognitoPasswordPolicy;
     readonly deletionProtection: SimCognitoDeletionProtection;
+    readonly unsimulatedSettings: SimCognitoUnsimulatedPoolSettings;
     readonly createdDate: Date;
 }
 /**
@@ -33,6 +35,11 @@ export declare class SimCognitoUserPool {
     readonly name: string;
     readonly passwordPolicy: SimCognitoPasswordPolicy;
     readonly deletionProtection: SimCognitoDeletionProtection;
+    /**
+     * What the pool was created with and nothing here acts on, kept so a
+     * described pool reports it.
+     */
+    readonly unsimulatedSettings: SimCognitoUnsimulatedPoolSettings;
     readonly creationDate: Date;
     /**
      * The sign-ins part way through this pool, and the tokens it has issued.

package/dist/service/cognito/user-pool/sim-cognito-user-pool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-pool.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AACzF,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,6CAA6C,CAAC;AAE9F,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAE7E,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AACzF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AACjF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAC5E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EACL,oBAAoB,EACpB,KAAK,cAAc,EACpB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAEjE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AAEzE,UAAU,4BAA4B;IACpC,QAAQ,CAAC,EAAE,EAAE,oBAAoB,CAAC;IAClC,QAAQ,CAAC,GAAG,EAAE,qBAAqB,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,cAAc,EAAE,wBAAwB,CAAC;IAClD,QAAQ,CAAC,kBAAkB,EAAE,4BAA4B,CAAC;IAC1D,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC;CAC5B;AAED;;;;;;GAMG;AACH,qBAAa,kBAAkB;;IAC7B,SAAgB,EAAE,EAAE,oBAAoB,CAAC;IACzC,SAAgB,GAAG,EAAE,qBAAqB,CAAC;IAC3C,SAAgB,IAAI,EAAE,MAAM,CAAC;IAC7B,SAAgB,cAAc,EAAE,wBAAwB,CAAC;IACzD,SAAgB,kBAAkB,EAAE,4BAA4B,CAAC;IACjE,SAAgB,YAAY,EAAE,IAAI,CAAC;IAEnC;;OAEG;IACH,SAAgB,IAAI,qBAA4B;IAEhD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAuC;IACnE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA6B;IACvD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA8B;IAIzD,YAAY,UAAU,EAAE,4BAA4B,EAOnD;IAED;;;;;OAKG;IACH,IAAI,SAAS,IAAI,MAAM,CAItB;IAED;;;;;;OAMG;IACH,IAAI,YAAY,IAAI,MAAM,CAEzB;IAED;;;;;OAKG;IACH,IAAI,UAAU,IAAI,oBAAoB,CAIrC;IAED;;;;;;;;OAQG;IACH,IAAI,IAAI,cAAc,CAErB;IAED;;;;;OAKG;IACH,IAAI,gBAAgB,IAAI,IAAI,CAE3B;IAED;;OAEG;IACH,IAAI,OAAO,IAAI,SAAS,wBAAwB,EAAE,CAEjD;IAED;;OAEG;IACH,IAAI,SAAS,IAAI,GAAG,CAAC,MAAM,CAAC,CAE3B;IAED;;OAEG;IACH,SAAS,CAAC,MAAM,EAAE,wBAAwB,GAAG,IAAI,CAEhD;IAED;;OAEG;IACH,YAAY,CAAC,MAAM,EAAE,wBAAwB,GAAG,IAAI,CAEnD;IAED;;OAEG;IACH,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,wBAAwB,GAAG,SAAS,CAEjE;IAED;;OAEG;IACH,aAAa,CACX,QAAQ,EAAE,0BAA0B,GACnC,wBAAwB,CAE1B;IAED;;OAEG;IACH,IAAI,KAAK,IAAI,SAAS,cAAc,EAAE,CAErC;IAED;;OAEG;IACH,IAAI,SAAS,IAAI,MAAM,CAEtB;IAED;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI,CAElC;IAED;;;;;;;OAOG;IACH,UAAU,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI,CAIrC;IAED;;OAEG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAErD;IAED;;OAEG;IACH,WAAW,CAAC,QAAQ,EAAE,kBAAkB,GAAG,cAAc,CAExD;IAED;;OAEG;IACH,IAAI,MAAM,IAAI,SAAS,eAAe,EAAE,CAEvC;IAED;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI,CAErC;IAED;;OAEG;IACH,WAAW,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI,CAExC;IAED;;OAEG;IACH,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAExD;IAED;;OAEG;IACH,YAAY,CAAC,SAAS,EAAE,mBAAmB,GAAG,eAAe,CAE5D;IAED;;OAEG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,eAAe,EAAE,CAErD;CACF"}
+{"version":3,"file":"sim-cognito-user-pool.d.ts","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AACzF,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,6CAA6C,CAAC;AAE9F,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAE7E,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AACzF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AACjF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAC5E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,4CAA4C,CAAC;AACpG,OAAO,EACL,oBAAoB,EACpB,KAAK,cAAc,EACpB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAEjE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AAEzE,UAAU,4BAA4B;IACpC,QAAQ,CAAC,EAAE,EAAE,oBAAoB,CAAC;IAClC,QAAQ,CAAC,GAAG,EAAE,qBAAqB,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,cAAc,EAAE,wBAAwB,CAAC;IAClD,QAAQ,CAAC,kBAAkB,EAAE,4BAA4B,CAAC;IAC1D,QAAQ,CAAC,mBAAmB,EAAE,iCAAiC,CAAC;IAChE,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC;CAC5B;AAED;;;;;;GAMG;AACH,qBAAa,kBAAkB;;IAC7B,SAAgB,EAAE,EAAE,oBAAoB,CAAC;IACzC,SAAgB,GAAG,EAAE,qBAAqB,CAAC;IAC3C,SAAgB,IAAI,EAAE,MAAM,CAAC;IAC7B,SAAgB,cAAc,EAAE,wBAAwB,CAAC;IACzD,SAAgB,kBAAkB,EAAE,4BAA4B,CAAC;IAEjE;;;OAGG;IACH,SAAgB,mBAAmB,EAAE,iCAAiC,CAAC;IAEvE,SAAgB,YAAY,EAAE,IAAI,CAAC;IAEnC;;OAEG;IACH,SAAgB,IAAI,qBAA4B;IAEhD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAuC;IACnE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA6B;IACvD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA8B;IAIzD,YAAY,UAAU,EAAE,4BAA4B,EAQnD;IAED;;;;;OAKG;IACH,IAAI,SAAS,IAAI,MAAM,CAItB;IAED;;;;;;OAMG;IACH,IAAI,YAAY,IAAI,MAAM,CAEzB;IAED;;;;;OAKG;IACH,IAAI,UAAU,IAAI,oBAAoB,CAIrC;IAED;;;;;;;;OAQG;IACH,IAAI,IAAI,cAAc,CAErB;IAED;;;;;OAKG;IACH,IAAI,gBAAgB,IAAI,IAAI,CAE3B;IAED;;OAEG;IACH,IAAI,OAAO,IAAI,SAAS,wBAAwB,EAAE,CAEjD;IAED;;OAEG;IACH,IAAI,SAAS,IAAI,GAAG,CAAC,MAAM,CAAC,CAE3B;IAED;;OAEG;IACH,SAAS,CAAC,MAAM,EAAE,wBAAwB,GAAG,IAAI,CAEhD;IAED;;OAEG;IACH,YAAY,CAAC,MAAM,EAAE,wBAAwB,GAAG,IAAI,CAEnD;IAED;;OAEG;IACH,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,wBAAwB,GAAG,SAAS,CAEjE;IAED;;OAEG;IACH,aAAa,CACX,QAAQ,EAAE,0BAA0B,GACnC,wBAAwB,CAE1B;IAED;;OAEG;IACH,IAAI,KAAK,IAAI,SAAS,cAAc,EAAE,CAErC;IAED;;OAEG;IACH,IAAI,SAAS,IAAI,MAAM,CAEtB;IAED;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI,CAElC;IAED;;;;;;;OAOG;IACH,UAAU,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI,CAIrC;IAED;;OAEG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAErD;IAED;;OAEG;IACH,WAAW,CAAC,QAAQ,EAAE,kBAAkB,GAAG,cAAc,CAExD;IAED;;OAEG;IACH,IAAI,MAAM,IAAI,SAAS,eAAe,EAAE,CAEvC;IAED;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI,CAErC;IAED;;OAEG;IACH,WAAW,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI,CAExC;IAED;;OAEG;IACH,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAExD;IAED;;OAEG;IACH,YAAY,CAAC,SAAS,EAAE,mBAAmB,GAAG,eAAe,CAE5D;IAED;;OAEG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,eAAe,EAAE,CAErD;CACF"}

package/dist/service/cognito/user-pool/sim-cognito-user-pool.js

@@ -16,6 +16,11 @@ export class SimCognitoUserPool {
     name;
     passwordPolicy;
     deletionProtection;
+    /**
+     * What the pool was created with and nothing here acts on, kept so a
+     * described pool reports it.
+     */
+    unsimulatedSettings;
     creationDate;
     /**
      * The sign-ins part way through this pool, and the tokens it has issued.
@@ -31,6 +36,7 @@ export class SimCognitoUserPool {
         this.name = properties.name.value;
         this.passwordPolicy = properties.passwordPolicy;
         this.deletionProtection = properties.deletionProtection;
+        this.unsimulatedSettings = properties.unsimulatedSettings;
         this.creationDate = properties.createdDate;
     }
     /**

package/dist/service/cognito/user-pool/sim-cognito-user-pool.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cognito-user-pool.js","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAGrE,OAAO,EAAE,6BAA6B,EAAE,MAAM,gDAAgD,CAAC;AAG/F,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAM1E,OAAO,EACL,oBAAoB,GAErB,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAYvE;;;;;;GAMG;AACH,MAAM,OAAO,kBAAkB;IACb,EAAE,CAAuB;IACzB,GAAG,CAAwB;IAC3B,IAAI,CAAS;IACb,cAAc,CAA2B;IACzC,kBAAkB,CAA+B;IACjD,YAAY,CAAO;IAEnC;;OAEG;IACa,IAAI,GAAG,IAAI,kBAAkB,EAAE,CAAC;IAE/B,WAAW,GAAG,IAAI,6BAA6B,EAAE,CAAC;IAClD,SAAS,GAAG,IAAI,mBAAmB,EAAE,CAAC;IACtC,UAAU,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAEzD,WAAW,CAAmC;IAE9C,YAAY,UAAwC;QAClD,IAAI,CAAC,EAAE,GAAG,UAAU,CAAC,EAAE,CAAC;QACxB,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;QAC1B,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAClC,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,cAAc,CAAC;QAChD,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;QACxD,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,WAAW,CAAC;IAC7C,CAAC;IAED;;;;;OAKG;IACH,IAAI,SAAS;QACX,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAE3C,OAAO,uBAAuB,MAAM,CAAC,UAAU,CAAC,kBAAkB,IAAI,CAAC,EAAE,EAAE,CAAC;IAC9E,CAAC;IAED;;;;;;OAMG;IACH,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAChD,CAAC;IAED;;;;;OAKG;IACH,IAAI,UAAU;QACZ,IAAI,CAAC,WAAW,KAAK,oBAAoB,CAAC,QAAQ,EAAE,CAAC;QAErD,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED;;;;;;;;OAQG;IACH,IAAI;QACF,OAAO,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC;IACjD,CAAC;IAED;;;;;OAKG;IACH,IAAI,gBAAgB;QAClB,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,MAAgC;QACxC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,MAAgC;QAC3C,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,QAAgB;QACzB,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,aAAa,CACX,QAAoC;QAEpC,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,IAAoB;QAC1B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED;;;;;;;OAOG;IACH,UAAU,CAAC,IAAoB;QAC7B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,QAAgB;QACvB,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,QAA4B;QACtC,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,KAAsB;QAC7B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,KAAsB;QAChC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,SAAiB;QACzB,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,SAA8B;QACzC,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,QAAgB;QACvB,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3C,CAAC;CACF"}
+{"version":3,"file":"sim-cognito-user-pool.js","sourceRoot":"","sources":["../../../../src/service/cognito/user-pool/sim-cognito-user-pool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAGrE,OAAO,EAAE,6BAA6B,EAAE,MAAM,gDAAgD,CAAC;AAG/F,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAO1E,OAAO,EACL,oBAAoB,GAErB,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAavE;;;;;;GAMG;AACH,MAAM,OAAO,kBAAkB;IACb,EAAE,CAAuB;IACzB,GAAG,CAAwB;IAC3B,IAAI,CAAS;IACb,cAAc,CAA2B;IACzC,kBAAkB,CAA+B;IAEjE;;;OAGG;IACa,mBAAmB,CAAoC;IAEvD,YAAY,CAAO;IAEnC;;OAEG;IACa,IAAI,GAAG,IAAI,kBAAkB,EAAE,CAAC;IAE/B,WAAW,GAAG,IAAI,6BAA6B,EAAE,CAAC;IAClD,SAAS,GAAG,IAAI,mBAAmB,EAAE,CAAC;IACtC,UAAU,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAEzD,WAAW,CAAmC;IAE9C,YAAY,UAAwC;QAClD,IAAI,CAAC,EAAE,GAAG,UAAU,CAAC,EAAE,CAAC;QACxB,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;QAC1B,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAClC,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,cAAc,CAAC;QAChD,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;QACxD,IAAI,CAAC,mBAAmB,GAAG,UAAU,CAAC,mBAAmB,CAAC;QAC1D,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,WAAW,CAAC;IAC7C,CAAC;IAED;;;;;OAKG;IACH,IAAI,SAAS;QACX,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAE3C,OAAO,uBAAuB,MAAM,CAAC,UAAU,CAAC,kBAAkB,IAAI,CAAC,EAAE,EAAE,CAAC;IAC9E,CAAC;IAED;;;;;;OAMG;IACH,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAChD,CAAC;IAED;;;;;OAKG;IACH,IAAI,UAAU;QACZ,IAAI,CAAC,WAAW,KAAK,oBAAoB,CAAC,QAAQ,EAAE,CAAC;QAErD,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED;;;;;;;;OAQG;IACH,IAAI;QACF,OAAO,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC;IACjD,CAAC;IAED;;;;;OAKG;IACH,IAAI,gBAAgB;QAClB,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,MAAgC;QACxC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,MAAgC;QAC3C,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,QAAgB;QACzB,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,aAAa,CACX,QAAoC;QAEpC,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,IAAoB;QAC1B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED;;;;;;;OAOG;IACH,UAAU,CAAC,IAAoB;QAC7B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,QAAgB;QACvB,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,QAA4B;QACtC,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,KAAsB;QAC7B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,KAAsB;QAChC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,SAAiB;QACzB,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,SAA8B;QACzC,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,QAAgB;QACvB,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3C,CAAC;CACF"}

package/dist/service/iam/authorize/match/condition/arn/equals/sim-iam-arn-equals.d.ts

@@ -0,0 +1,14 @@
+import { SimIamScalarStringConditionOperator } from "../../string/sim-iam-scalar-string-condition-operator.js";
+/**
+ * IAM `ArnEquals` condition operator.
+ *
+ * AWS documents `ArnEquals` and `ArnLike` as behaving identically: both
+ * compare the six components of an ARN separately, and both accept `*` and `?`
+ * wildcards in any of them. So a policy written with either operator is
+ * evaluated the same way here, rather than `ArnEquals` being the exact-string
+ * comparison its name suggests.
+ */
+export declare class SimIamArnEquals extends SimIamScalarStringConditionOperator {
+    protected valueMatches(actual: string, expected: string): boolean;
+}
+//# sourceMappingURL=sim-iam-arn-equals.d.ts.map

package/dist/service/iam/authorize/match/condition/arn/equals/sim-iam-arn-equals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-arn-equals.d.ts","sourceRoot":"","sources":["../../../../../../../../src/service/iam/authorize/match/condition/arn/equals/sim-iam-arn-equals.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mCAAmC,EAAE,MAAM,0DAA0D,CAAC;AAE/G;;;;;;;;GAQG;AACH,qBAAa,eAAgB,SAAQ,mCAAmC;IACtE,UAAmB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEzE;CACF"}

package/dist/service/iam/authorize/match/condition/arn/equals/sim-iam-arn-equals.js

@@ -0,0 +1,17 @@
+import { simIamArnMatch } from "../../../../sim-iam-arn-match.js";
+import { SimIamScalarStringConditionOperator } from "../../string/sim-iam-scalar-string-condition-operator.js";
+/**
+ * IAM `ArnEquals` condition operator.
+ *
+ * AWS documents `ArnEquals` and `ArnLike` as behaving identically: both
+ * compare the six components of an ARN separately, and both accept `*` and `?`
+ * wildcards in any of them. So a policy written with either operator is
+ * evaluated the same way here, rather than `ArnEquals` being the exact-string
+ * comparison its name suggests.
+ */
+export class SimIamArnEquals extends SimIamScalarStringConditionOperator {
+    valueMatches(actual, expected) {
+        return simIamArnMatch(expected, actual);
+    }
+}
+//# sourceMappingURL=sim-iam-arn-equals.js.map

package/dist/service/iam/authorize/match/condition/arn/equals/sim-iam-arn-equals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-arn-equals.js","sourceRoot":"","sources":["../../../../../../../../src/service/iam/authorize/match/condition/arn/equals/sim-iam-arn-equals.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EAAE,mCAAmC,EAAE,MAAM,0DAA0D,CAAC;AAE/G;;;;;;;;GAQG;AACH,MAAM,OAAO,eAAgB,SAAQ,mCAAmC;IACnD,YAAY,CAAC,MAAc,EAAE,QAAgB;QAC9D,OAAO,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1C,CAAC;CACF"}

package/dist/service/iam/authorize/match/condition/arn/like/sim-iam-arn-like.d.ts

@@ -0,0 +1,13 @@
+import { SimIamScalarStringConditionOperator } from "../../string/sim-iam-scalar-string-condition-operator.js";
+/**
+ * IAM `ArnLike` condition operator.
+ *
+ * This is `StringLike` over an ARN, with the wildcards confined to the
+ * component they are written in. It is what `AddPermission` writes a
+ * `SourceArn` under, so it is the operator an invoking service's grant is
+ * evaluated with.
+ */
+export declare class SimIamArnLike extends SimIamScalarStringConditionOperator {
+    protected valueMatches(actual: string, expected: string): boolean;
+}
+//# sourceMappingURL=sim-iam-arn-like.d.ts.map

package/dist/service/iam/authorize/match/condition/arn/like/sim-iam-arn-like.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-arn-like.d.ts","sourceRoot":"","sources":["../../../../../../../../src/service/iam/authorize/match/condition/arn/like/sim-iam-arn-like.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mCAAmC,EAAE,MAAM,0DAA0D,CAAC;AAE/G;;;;;;;GAOG;AACH,qBAAa,aAAc,SAAQ,mCAAmC;IACpE,UAAmB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEzE;CACF"}

package/dist/service/iam/authorize/match/condition/arn/like/sim-iam-arn-like.js

@@ -0,0 +1,16 @@
+import { simIamArnMatch } from "../../../../sim-iam-arn-match.js";
+import { SimIamScalarStringConditionOperator } from "../../string/sim-iam-scalar-string-condition-operator.js";
+/**
+ * IAM `ArnLike` condition operator.
+ *
+ * This is `StringLike` over an ARN, with the wildcards confined to the
+ * component they are written in. It is what `AddPermission` writes a
+ * `SourceArn` under, so it is the operator an invoking service's grant is
+ * evaluated with.
+ */
+export class SimIamArnLike extends SimIamScalarStringConditionOperator {
+    valueMatches(actual, expected) {
+        return simIamArnMatch(expected, actual);
+    }
+}
+//# sourceMappingURL=sim-iam-arn-like.js.map

package/dist/service/iam/authorize/match/condition/arn/like/sim-iam-arn-like.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-arn-like.js","sourceRoot":"","sources":["../../../../../../../../src/service/iam/authorize/match/condition/arn/like/sim-iam-arn-like.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EAAE,mCAAmC,EAAE,MAAM,0DAA0D,CAAC;AAE/G;;;;;;;GAOG;AACH,MAAM,OAAO,aAAc,SAAQ,mCAAmC;IACjD,YAAY,CAAC,MAAc,EAAE,QAAgB;QAC9D,OAAO,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1C,CAAC;CACF"}

package/dist/service/iam/authorize/match/condition/sim-iam-condition-operator-parser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-iam-condition-operator-parser.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/authorize/match/condition/sim-iam-condition-operator-parser.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAoC/E;;;;;GAKG;AACH,qBAAa,6BAA6B;IACxC;;OAEG;IACH,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,uBAAuB,GAAG,SAAS,CAE1D;CACF"}
+{"version":3,"file":"sim-iam-condition-operator-parser.d.ts","sourceRoot":"","sources":["../../../../../../src/service/iam/authorize/match/condition/sim-iam-condition-operator-parser.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAwC/E;;;;;GAKG;AACH,qBAAa,6BAA6B;IACxC;;OAEG;IACH,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,uBAAuB,GAAG,SAAS,CAE1D;CACF"}

package/dist/service/iam/authorize/match/condition/sim-iam-condition-operator-parser.js

@@ -5,7 +5,11 @@ import { SimIamForAnyValueStringLike } from "./string/any-value/sim-iam-for-any-
 import { SimIamStringEquals } from "./string/equals/sim-iam-string-equals.js";
 import { SimIamStringLike } from "./string/like/sim-iam-string-like.js";
 import { SimIamNumericLessThanEquals } from "./numeric/less-than-equals/sim-iam-number-lte.js";
+import { SimIamArnEquals } from "./arn/equals/sim-iam-arn-equals.js";
+import { SimIamArnLike } from "./arn/like/sim-iam-arn-like.js";
 const operatorFactories = new Map([
+    ["ArnEquals", () => new SimIamArnEquals()],
+    ["ArnLike", () => new SimIamArnLike()],
     [
         "NumericLessThanEquals",
         () => new SimIamNumericLessThanEquals(),

package/dist/service/iam/authorize/match/condition/sim-iam-condition-operator-parser.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-iam-condition-operator-parser.js","sourceRoot":"","sources":["../../../../../../src/service/iam/authorize/match/condition/sim-iam-condition-operator-parser.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,8BAA8B,EAAE,MAAM,6DAA6D,CAAC;AAC7G,OAAO,EAAE,4BAA4B,EAAE,MAAM,2DAA2D,CAAC;AACzG,OAAO,EAAE,6BAA6B,EAAE,MAAM,2DAA2D,CAAC;AAC1G,OAAO,EAAE,2BAA2B,EAAE,MAAM,yDAAyD,CAAC;AACtG,OAAO,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AACxE,OAAO,EAAE,2BAA2B,EAAE,MAAM,kDAAkD,CAAC;AAI/F,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAyC;IACxE;QACE,uBAAuB;QACvB,GAA4B,EAAE,CAAC,IAAI,2BAA2B,EAAE;KACjE;IACD,CAAC,cAAc,EAAE,GAA4B,EAAE,CAAC,IAAI,kBAAkB,EAAE,CAAC;IACzE,CAAC,YAAY,EAAE,GAA4B,EAAE,CAAC,IAAI,gBAAgB,EAAE,CAAC;IACrE;QACE,0BAA0B;QAC1B,GAA4B,EAAE,CAAC,IAAI,6BAA6B,EAAE;KACnE;IACD;QACE,wBAAwB;QACxB,GAA4B,EAAE,CAAC,IAAI,2BAA2B,EAAE;KACjE;IACD;QACE,2BAA2B;QAC3B,GAA4B,EAAE,CAAC,IAAI,8BAA8B,EAAE;KACpE;IACD;QACE,yBAAyB;QACzB,GAA4B,EAAE,CAAC,IAAI,4BAA4B,EAAE;KAClE;CACF,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,OAAO,6BAA6B;IACxC;;OAEG;IACH,KAAK,CAAC,OAAe;QACnB,OAAO,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;IAC5C,CAAC;CACF"}
+{"version":3,"file":"sim-iam-condition-operator-parser.js","sourceRoot":"","sources":["../../../../../../src/service/iam/authorize/match/condition/sim-iam-condition-operator-parser.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,8BAA8B,EAAE,MAAM,6DAA6D,CAAC;AAC7G,OAAO,EAAE,4BAA4B,EAAE,MAAM,2DAA2D,CAAC;AACzG,OAAO,EAAE,6BAA6B,EAAE,MAAM,2DAA2D,CAAC;AAC1G,OAAO,EAAE,2BAA2B,EAAE,MAAM,yDAAyD,CAAC;AACtG,OAAO,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AACxE,OAAO,EAAE,2BAA2B,EAAE,MAAM,kDAAkD,CAAC;AAC/F,OAAO,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAI/D,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAyC;IACxE,CAAC,WAAW,EAAE,GAA4B,EAAE,CAAC,IAAI,eAAe,EAAE,CAAC;IACnE,CAAC,SAAS,EAAE,GAA4B,EAAE,CAAC,IAAI,aAAa,EAAE,CAAC;IAC/D;QACE,uBAAuB;QACvB,GAA4B,EAAE,CAAC,IAAI,2BAA2B,EAAE;KACjE;IACD,CAAC,cAAc,EAAE,GAA4B,EAAE,CAAC,IAAI,kBAAkB,EAAE,CAAC;IACzE,CAAC,YAAY,EAAE,GAA4B,EAAE,CAAC,IAAI,gBAAgB,EAAE,CAAC;IACrE;QACE,0BAA0B;QAC1B,GAA4B,EAAE,CAAC,IAAI,6BAA6B,EAAE;KACnE;IACD;QACE,wBAAwB;QACxB,GAA4B,EAAE,CAAC,IAAI,2BAA2B,EAAE;KACjE;IACD;QACE,2BAA2B;QAC3B,GAA4B,EAAE,CAAC,IAAI,8BAA8B,EAAE;KACpE;IACD;QACE,yBAAyB;QACzB,GAA4B,EAAE,CAAC,IAAI,4BAA4B,EAAE;KAClE;CACF,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,OAAO,6BAA6B;IACxC;;OAEG;IACH,KAAK,CAAC,OAAe;QACnB,OAAO,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;IAC5C,CAAC;CACF"}

package/dist/service/iam/authorize/match/sim-iam-policy-principal-matcher.d.ts

@@ -51,6 +51,10 @@ export declare class SimIamPolicyPrincipalMatcher {
     private awsPatternMatches;
     /**
      * Compare a service principal pattern with the resolved caller.
+     *
+     * A service principal has no ARN and no Account, so this is a direct grant
+     * or nothing: there is no Account for a statement to delegate to. It is what
+     * admits an API Gateway integration invoking a Lambda function.
      */
     private servicePatternMatches;
     /**

package/dist/service/iam/authorize/match/sim-iam-policy-principal-matcher.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-iam-policy-principal-matcher.d.ts","sourceRoot":"","sources":["../../../../../src/service/iam/authorize/match/sim-iam-policy-principal-matcher.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,+CAA+C,CAAC;AACjG,OAAO,KAAK,EACV,kBAAkB,EAClB,uBAAuB,EACxB,MAAM,sCAAsC,CAAC;AAE9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAEpE;;;;;;;;;;;;;;GAcG;AACH,qBAAa,4BAA4B;IAC3B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAApC,YAA6B,OAAO,EAAE,kBAAkB,EAAI;IAE5D;;;;;;;;OAQG;IACH,OAAO,CACL,MAAM,EAAE,uBAAuB,EAC/B,SAAS,EAAE,2BAA2B,GACrC,oBAAoB,CAqBtB;IAED;;;;;;OAMG;IACH,OAAO,CAAC,YAAY;IAiCpB;;OAEG;IACH,OAAO,CAAC,UAAU;IAOlB;;;;;;OAMG;IACH,OAAO,CAAC,iBAAiB;IAyBzB;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAa7B;;;;;OAKG;IACH,OAAO,CAAC,kBAAkB;CAQ3B"}
+{"version":3,"file":"sim-iam-policy-principal-matcher.d.ts","sourceRoot":"","sources":["../../../../../src/service/iam/authorize/match/sim-iam-policy-principal-matcher.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,+CAA+C,CAAC;AACjG,OAAO,KAAK,EACV,kBAAkB,EAClB,uBAAuB,EACxB,MAAM,sCAAsC,CAAC;AAE9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAEpE;;;;;;;;;;;;;;GAcG;AACH,qBAAa,4BAA4B;IAC3B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAApC,YAA6B,OAAO,EAAE,kBAAkB,EAAI;IAE5D;;;;;;;;OAQG;IACH,OAAO,CACL,MAAM,EAAE,uBAAuB,EAC/B,SAAS,EAAE,2BAA2B,GACrC,oBAAoB,CAqBtB;IAED;;;;;;OAMG;IACH,OAAO,CAAC,YAAY;IAgCpB;;OAEG;IACH,OAAO,CAAC,UAAU;IAOlB;;;;;;OAMG;IACH,OAAO,CAAC,iBAAiB;IAyBzB;;;;;;OAMG;IACH,OAAO,CAAC,qBAAqB;IAW7B;;;;;OAKG;IACH,OAAO,CAAC,kBAAkB;CAQ3B"}

package/dist/service/iam/authorize/match/sim-iam-policy-principal-matcher.js

@@ -63,7 +63,6 @@ export class SimIamPolicyPrincipalMatcher {
             if (type === "AWS") {
                 return this.firstMatch(patterns, (pattern) => this.awsPatternMatches(pattern));
             }
-            /* v8 ignore if -- service principals not yet fully supported */
             if (type === "Service") {
                 return this.firstMatch(patterns, (pattern) => this.servicePatternMatches(pattern));
             }
@@ -101,11 +100,13 @@ export class SimIamPolicyPrincipalMatcher {
     }
     /**
      * Compare a service principal pattern with the resolved caller.
+     *
+     * A service principal has no ARN and no Account, so this is a direct grant
+     * or nothing: there is no Account for a statement to delegate to. It is what
+     * admits an API Gateway integration invoking a Lambda function.
      */
     servicePatternMatches(pattern) {
-        /* v8 ignore next -- service principals not yet fully supported */
         const service = this.context.caller.service;
-        /* v8 ignore next -- service principals not yet fully supported */
         return SimIamPrincipalMatch.direct().when(service !== undefined &&
             simIamWildcardMatch(pattern, service, {
                 caseSensitive: true,

package/dist/service/iam/authorize/match/sim-iam-policy-principal-matcher.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-iam-policy-principal-matcher.js","sourceRoot":"","sources":["../../../../../src/service/iam/authorize/match/sim-iam-policy-principal-matcher.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAEpE;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,4BAA4B;IACV,OAAO;IAApC,YAA6B,OAA2B;uBAA3B,OAAO;IAAuB,CAAC;IAE5D;;;;;;;;OAQG;IACH,OAAO,CACL,MAA+B,EAC/B,SAAsC;QAEtC,IAAI,MAAM,CAAC,UAAU,KAAK,UAAU,IAAI,MAAM,CAAC,UAAU,KAAK,OAAO,EAAE,CAAC;YACtE,OAAO,oBAAoB,CAAC,MAAM,EAAE,CAAC,IAAI,CACvC,SAAS,CAAC,SAAS,KAAK,SAAS;gBAC/B,SAAS,CAAC,YAAY,KAAK,SAAS,CACvC,CAAC;QACJ,CAAC;QAED,IAAI,SAAS,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAChD,CAAC;QAED,IAAI,SAAS,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACzC,uEAAuE;YACvE,4DAA4D;YAC5D,OAAO,oBAAoB,CAAC,MAAM,EAAE,CAAC,IAAI,CACvC,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,OAAO,CACnD,CAAC;QACJ,CAAC;QAED,OAAO,oBAAoB,CAAC,IAAI,EAAE,CAAC;IACrC,CAAC;IAED;;;;;;OAMG;IACK,YAAY,CAClB,SAAwC;QAExC,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC3C,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC,KAAa,EAAE,EAAE,CAClD,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAC9B,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE;YACnE,MAAM,QAAQ,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YAEhE,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;gBACnB,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAC3C,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAChC,CAAC;YACJ,CAAC;YAED,gEAAgE;YAChE,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAC3C,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,CACpC,CAAC;YACJ,CAAC;YAED,OAAO,oBAAoB,CAAC,IAAI,EAAE,CAAC;QACrC,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,UAAU,CAChB,MAAoB,EACpB,KAAyC;QAEzC,OAAO,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzE,CAAC;IAED;;;;;;OAMG;IACK,iBAAiB,CAAC,OAAe;QACvC,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;YACpB,OAAO,oBAAoB,CAAC,MAAM,EAAE,CAAC;QACvC,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QACnC,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,oBAAoB,CAAC,IAAI,EAAE,CAAC;QACrC,CAAC;QAED,MAAM,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAE5D,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;YACrC,OAAO,oBAAoB,CAAC,iBAAiB,EAAE,CAAC,IAAI,CAClD,MAAM,CAAC,SAAS,KAAK,kBAAkB,CACxC,CAAC;QACJ,CAAC;QAED,OAAO,oBAAoB,CAAC,MAAM,EAAE,CAAC,IAAI,CACvC,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,EAAE;YACvC,aAAa,EAAE,IAAI;SACpB,CAAC,CACH,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,qBAAqB,CAAC,OAAe;QAC3C,kEAAkE;QAClE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;QAE5C,kEAAkE;QAClE,OAAO,oBAAoB,CAAC,MAAM,EAAE,CAAC,IAAI,CACvC,OAAO,KAAK,SAAS;YACnB,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE;gBACpC,aAAa,EAAE,IAAI;aACpB,CAAC,CACL,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACK,kBAAkB,CAAC,OAAe;QACxC,IAAI,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,MAAM,KAAK,GAAG,+BAA+B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5D,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;CACF"}
+{"version":3,"file":"sim-iam-policy-principal-matcher.js","sourceRoot":"","sources":["../../../../../src/service/iam/authorize/match/sim-iam-policy-principal-matcher.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAEpE;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,4BAA4B;IACV,OAAO;IAApC,YAA6B,OAA2B;uBAA3B,OAAO;IAAuB,CAAC;IAE5D;;;;;;;;OAQG;IACH,OAAO,CACL,MAA+B,EAC/B,SAAsC;QAEtC,IAAI,MAAM,CAAC,UAAU,KAAK,UAAU,IAAI,MAAM,CAAC,UAAU,KAAK,OAAO,EAAE,CAAC;YACtE,OAAO,oBAAoB,CAAC,MAAM,EAAE,CAAC,IAAI,CACvC,SAAS,CAAC,SAAS,KAAK,SAAS;gBAC/B,SAAS,CAAC,YAAY,KAAK,SAAS,CACvC,CAAC;QACJ,CAAC;QAED,IAAI,SAAS,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAChD,CAAC;QAED,IAAI,SAAS,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACzC,uEAAuE;YACvE,4DAA4D;YAC5D,OAAO,oBAAoB,CAAC,MAAM,EAAE,CAAC,IAAI,CACvC,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,OAAO,CACnD,CAAC;QACJ,CAAC;QAED,OAAO,oBAAoB,CAAC,IAAI,EAAE,CAAC;IACrC,CAAC;IAED;;;;;;OAMG;IACK,YAAY,CAClB,SAAwC;QAExC,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC3C,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC,KAAa,EAAE,EAAE,CAClD,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAC9B,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE;YACnE,MAAM,QAAQ,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YAEhE,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;gBACnB,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAC3C,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAChC,CAAC;YACJ,CAAC;YAED,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAC3C,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,CACpC,CAAC;YACJ,CAAC;YAED,OAAO,oBAAoB,CAAC,IAAI,EAAE,CAAC;QACrC,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,UAAU,CAChB,MAAoB,EACpB,KAAyC;QAEzC,OAAO,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzE,CAAC;IAED;;;;;;OAMG;IACK,iBAAiB,CAAC,OAAe;QACvC,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;YACpB,OAAO,oBAAoB,CAAC,MAAM,EAAE,CAAC;QACvC,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QACnC,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,oBAAoB,CAAC,IAAI,EAAE,CAAC;QACrC,CAAC;QAED,MAAM,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAE5D,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;YACrC,OAAO,oBAAoB,CAAC,iBAAiB,EAAE,CAAC,IAAI,CAClD,MAAM,CAAC,SAAS,KAAK,kBAAkB,CACxC,CAAC;QACJ,CAAC;QAED,OAAO,oBAAoB,CAAC,MAAM,EAAE,CAAC,IAAI,CACvC,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,EAAE;YACvC,aAAa,EAAE,IAAI;SACpB,CAAC,CACH,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACK,qBAAqB,CAAC,OAAe;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;QAE5C,OAAO,oBAAoB,CAAC,MAAM,EAAE,CAAC,IAAI,CACvC,OAAO,KAAK,SAAS;YACnB,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE;gBACpC,aAAa,EAAE,IAAI;aACpB,CAAC,CACL,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACK,kBAAkB,CAAC,OAAe;QACxC,IAAI,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,MAAM,KAAK,GAAG,+BAA+B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5D,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;CACF"}

package/dist/service/iam/authorize/sim-iam-arn-match.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Match an ARN against an ARN pattern, as the `ArnLike` and `ArnEquals`
+ * condition operators do.
+ *
+ * AWS compares each of the six colon-delimited components separately, and a
+ * wildcard in one of them stays inside it: `arn:aws:s3:*` does not match an
+ * ARN whose Account or resource happen to make the rest of the string fit. A
+ * pattern with fewer components than an ARN has therefore matches nothing,
+ * which is stricter than comparing the two as plain strings would be.
+ */
+export declare function simIamArnMatch(pattern: string, value: string): boolean;
+//# sourceMappingURL=sim-iam-arn-match.d.ts.map

package/dist/service/iam/authorize/sim-iam-arn-match.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-arn-match.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/authorize/sim-iam-arn-match.ts"],"names":[],"mappings":"AAUA;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAetE"}

package/dist/service/iam/authorize/sim-iam-arn-match.js

@@ -0,0 +1,45 @@
+import { simIamWildcardMatch } from "./sim-iam-wildcard.js";
+/**
+ * The number of colon-delimited components an ARN has.
+ *
+ * The last of them is the resource, which may itself contain colons, so
+ * anything past the fifth colon belongs to it.
+ */
+const arnComponentCount = 6;
+/**
+ * Match an ARN against an ARN pattern, as the `ArnLike` and `ArnEquals`
+ * condition operators do.
+ *
+ * AWS compares each of the six colon-delimited components separately, and a
+ * wildcard in one of them stays inside it: `arn:aws:s3:*` does not match an
+ * ARN whose Account or resource happen to make the rest of the string fit. A
+ * pattern with fewer components than an ARN has therefore matches nothing,
+ * which is stricter than comparing the two as plain strings would be.
+ */
+export function simIamArnMatch(pattern, value) {
+    const patternComponents = arnComponents(pattern);
+    const valueComponents = arnComponents(value);
+    if (patternComponents.length !== valueComponents.length) {
+        return false;
+    }
+    // The two have the same number of components, so the fallback below stands
+    // in for a component that cannot be missing.
+    return patternComponents.every((component, index) => simIamWildcardMatch(component, valueComponents.at(index) ?? "", {
+        caseSensitive: true,
+    }));
+}
+/**
+ * Split an ARN into its six components, leaving any colons in the resource
+ * component where they are.
+ */
+function arnComponents(arn) {
+    const components = arn.split(":");
+    if (components.length <= arnComponentCount) {
+        return components;
+    }
+    return [
+        ...components.slice(0, arnComponentCount - 1),
+        components.slice(arnComponentCount - 1).join(":"),
+    ];
+}
+//# sourceMappingURL=sim-iam-arn-match.js.map

package/dist/service/iam/authorize/sim-iam-arn-match.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-arn-match.js","sourceRoot":"","sources":["../../../../src/service/iam/authorize/sim-iam-arn-match.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAE5D;;;;;GAKG;AACH,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAE5B;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,KAAa;IAC3D,MAAM,iBAAiB,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,eAAe,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IAE7C,IAAI,iBAAiB,CAAC,MAAM,KAAK,eAAe,CAAC,MAAM,EAAE,CAAC;QACxD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,2EAA2E;IAC3E,6CAA6C;IAC7C,OAAO,iBAAiB,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,CAClD,mBAAmB,CAAC,SAAS,EAAE,eAAe,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE;QAC9D,aAAa,EAAE,IAAI;KACpB,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,aAAa,CAAC,GAAW;IAChC,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAElC,IAAI,UAAU,CAAC,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAC3C,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,OAAO;QACL,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,GAAG,CAAC,CAAC;QAC7C,UAAU,CAAC,KAAK,CAAC,iBAAiB,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;KAClD,CAAC;AACJ,CAAC"}

package/dist/service/iam/command/role/list-roles/list-roles.handler.js

@@ -42,8 +42,8 @@ export class ListRolesCommandHandler {
             .toArray()
             .toSorted((a, b) => a.arn.localeCompare(b.arn));
         return roles.filter((role) => {
-            return !(command.input.PathPrefix !== undefined &&
-                !role.path.startsWith(command.input.PathPrefix));
+            return (command.input.PathPrefix === undefined ||
+                role.path.startsWith(command.input.PathPrefix));
         });
     }
 }

package/dist/service/iam/command/role/list-roles/list-roles.handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"list-roles.handler.js","sourceRoot":"","sources":["../../../../../../src/service/iam/command/role/list-roles/list-roles.handler.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,eAAe,GAChB,MAAM,8CAA8C,CAAC;AAMtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAO/D;;;;GAIG;AACH,MAAM,OAAO,uBAAuB;IAIjB,KAAK,CAAkC;IACvC,UAAU,CAAsB;IAChC,SAAS,GAAG,IAAI,kBAAkB,EAAE,CAAC;IAEtD,YAAY,UAA6C;QACvD,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,eAAe,EAAE,EAAE,GAAG,UAAU,CAAC;QAEjE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,OAA4B;QAE5B,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAC9B,KAAK,EACL,OAAO,CAAC,KAAK,CAAC,QAAQ,EACtB,OAAO,CAAC,KAAK,CAAC,MAAM,CACrB,CAAC;QAEF,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBAC/B,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,UAAU,EAAE,IAAI,CAAC,YAAY;gBAC7B,wBAAwB,EAAE,IAAI,CAAC,wBAAwB;gBACvD,WAAW,EAAE,IAAI,CAAC,WAAW;aAC9B,CAAC,CAAC;YACH,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC;IACJ,CAAC;IAEO,aAAa,CAAC,OAA4B;QAChD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK;aACrB,MAAM,EAAE;aACR,OAAO,EAAE;aACT,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAElD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;YAC3B,OAAO,CAAC,CACN,OAAO,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS;gBACtC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAChD,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"list-roles.handler.js","sourceRoot":"","sources":["../../../../../../src/service/iam/command/role/list-roles/list-roles.handler.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,eAAe,GAChB,MAAM,8CAA8C,CAAC;AAMtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAO/D;;;;GAIG;AACH,MAAM,OAAO,uBAAuB;IAIjB,KAAK,CAAkC;IACvC,UAAU,CAAsB;IAChC,SAAS,GAAG,IAAI,kBAAkB,EAAE,CAAC;IAEtD,YAAY,UAA6C;QACvD,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,eAAe,EAAE,EAAE,GAAG,UAAU,CAAC;QAEjE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,OAA4B;QAE5B,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAC9B,KAAK,EACL,OAAO,CAAC,KAAK,CAAC,QAAQ,EACtB,OAAO,CAAC,KAAK,CAAC,MAAM,CACrB,CAAC;QAEF,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBAC/B,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,UAAU,EAAE,IAAI,CAAC,YAAY;gBAC7B,wBAAwB,EAAE,IAAI,CAAC,wBAAwB;gBACvD,WAAW,EAAE,IAAI,CAAC,WAAW;aAC9B,CAAC,CAAC;YACH,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC;IACJ,CAAC;IAEO,aAAa,CAAC,OAA4B;QAChD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK;aACrB,MAAM,EAAE;aACR,OAAO,EAAE;aACT,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAElD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;YAC3B,OAAO,CACL,OAAO,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS;gBACtC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAC/C,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/lambda/function/policy/sim-lambda-permission.d.ts

@@ -53,11 +53,12 @@ export declare class SimLambdaPermission {
     /**
      * The condition block the qualifying properties expand into.
      *
-     * Only `lambda:FunctionUrlAuthType` is given a value at request time, so it
-     * is the only one that can match. The rest are still written into the
-     * statement, because `GetPolicy` should report the permission that was
-     * granted; a statement carrying one of them simply never matches, which is
-     * the safe direction for a condition the simulator cannot evaluate.
+     * `lambda:FunctionUrlAuthType` is given a value when a Function URL is
+     * invoked, and `AWS:SourceArn` when an API Gateway HTTP API integration
+     * invokes the function. The rest are still written into the statement,
+     * because `GetPolicy` should report the permission that was granted; a
+     * statement carrying one of them simply never matches, which is the safe
+     * direction for a condition the simulator cannot evaluate.
      */
     private condition;
     private stringEqualsConditions;

package/dist/service/lambda/function/policy/sim-lambda-permission.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda-permission.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/function/policy/sim-lambda-permission.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAGV,6BAA6B,EAC9B,MAAM,uCAAuC,CAAC;AAG/C;;;;GAIG;AACH,eAAO,MAAM,wCAAwC,+BACvB,CAAC;AAE/B;;;;;;;;GAQG;AACH,eAAO,MAAM,0CAA0C,iCACvB,CAAC;AAEjC,UAAU,6BAA6B;IACrC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CACtD;AAED;;;;;;;;GAQG;AACH,qBAAa,mBAAmB;IAC9B,SAAgB,WAAW,EAAE,MAAM,CAAC;IACpC,SAAgB,MAAM,EAAE,MAAM,CAAC;IAC/B,SAAgB,SAAS,EAAE,MAAM,CAAC;IAClC,SAAgB,WAAW,EAAE,MAAM,CAAC;IAEpC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAqB;IAC1D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAqB;IAChD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAqB;IACpD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAqB;IACrD,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAsB;IAE7D,YAAY,UAAU,EAAE,6BAA6B,EAUpD;IAED;;OAEG;IACH,WAAW,IAAI,6BAA6B,CAW3C;IAED;;;;;;;;OAQG;IACH,OAAO,CAAC,SAAS;IAsBjB,OAAO,CAAC,sBAAsB;CAa/B"}
+{"version":3,"file":"sim-lambda-permission.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/function/policy/sim-lambda-permission.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAGV,6BAA6B,EAC9B,MAAM,uCAAuC,CAAC;AAG/C;;;;GAIG;AACH,eAAO,MAAM,wCAAwC,+BACvB,CAAC;AAE/B;;;;;;;;GAQG;AACH,eAAO,MAAM,0CAA0C,iCACvB,CAAC;AAEjC,UAAU,6BAA6B;IACrC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CACtD;AAED;;;;;;;;GAQG;AACH,qBAAa,mBAAmB;IAC9B,SAAgB,WAAW,EAAE,MAAM,CAAC;IACpC,SAAgB,MAAM,EAAE,MAAM,CAAC;IAC/B,SAAgB,SAAS,EAAE,MAAM,CAAC;IAClC,SAAgB,WAAW,EAAE,MAAM,CAAC;IAEpC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAqB;IAC1D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAqB;IAChD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAqB;IACpD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAqB;IACrD,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAsB;IAE7D,YAAY,UAAU,EAAE,6BAA6B,EAUpD;IAED;;OAEG;IACH,WAAW,IAAI,6BAA6B,CAW3C;IAED;;;;;;;;;OASG;IACH,OAAO,CAAC,SAAS;IAsBjB,OAAO,CAAC,sBAAsB;CAa/B"}

package/dist/service/lambda/function/policy/sim-lambda-permission.js

@@ -62,11 +62,12 @@ export class SimLambdaPermission {
     /**
      * The condition block the qualifying properties expand into.
      *
-     * Only `lambda:FunctionUrlAuthType` is given a value at request time, so it
-     * is the only one that can match. The rest are still written into the
-     * statement, because `GetPolicy` should report the permission that was
-     * granted; a statement carrying one of them simply never matches, which is
-     * the safe direction for a condition the simulator cannot evaluate.
+     * `lambda:FunctionUrlAuthType` is given a value when a Function URL is
+     * invoked, and `AWS:SourceArn` when an API Gateway HTTP API integration
+     * invokes the function. The rest are still written into the statement,
+     * because `GetPolicy` should report the permission that was granted; a
+     * statement carrying one of them simply never matches, which is the safe
+     * direction for a condition the simulator cannot evaluate.
      */
     condition() {
         const stringEquals = this.stringEqualsConditions();

package/dist/service/lambda/function/policy/sim-lambda-permission.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda-permission.js","sourceRoot":"","sources":["../../../../../src/service/lambda/function/policy/sim-lambda-permission.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AAEpF;;;;GAIG;AACH,MAAM,CAAC,MAAM,wCAAwC,GACnD,4BAA4B,CAAC;AAE/B;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,0CAA0C,GACrD,8BAA8B,CAAC;AAcjC;;;;;;;;GAQG;AACH,MAAM,OAAO,mBAAmB;IACd,WAAW,CAAS;IACpB,MAAM,CAAS;IACf,SAAS,CAAS;IAClB,WAAW,CAAS;IAEnB,mBAAmB,CAAsB;IACzC,SAAS,CAAsB;IAC/B,aAAa,CAAsB;IACnC,cAAc,CAAsB;IACpC,qBAAqB,CAAuB;IAE7D,YAAY,UAAyC;QACnD,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,mBAAmB,GAAG,UAAU,CAAC,mBAAmB,CAAC;QAC1D,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;QAC9C,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,cAAc,CAAC;QAChD,IAAI,CAAC,qBAAqB,GAAG,UAAU,CAAC,qBAAqB,CAAC;IAChE,CAAC;IAED;;OAEG;IACH,WAAW;QACT,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAEnC,OAAO;YACL,GAAG,EAAE,IAAI,CAAC,WAAW;YACrB,MAAM,EAAE,OAAO;YACf,SAAS,EAAE,4BAA4B,CAAC,IAAI,CAAC,SAAS,CAAC;YACvD,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ,EAAE,IAAI,CAAC,WAAW;YAC1B,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;SACzD,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACK,SAAS;QACf,MAAM,YAAY,GAAG,IAAI,CAAC,sBAAsB,EAAE,CAAC;QACnD,MAAM,SAAS,GAAyD,EAAE,CAAC;QAE3E,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzC,SAAS,CAAC,cAAc,CAAC,GAAG,YAAY,CAAC;QAC3C,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACjC,SAAS,CAAC,SAAS,CAAC,GAAG,EAAE,eAAe,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;QAC7D,CAAC;QAED,IAAI,IAAI,CAAC,qBAAqB,KAAK,SAAS,EAAE,CAAC;YAC7C,SAAS,CAAC,MAAM,CAAC,GAAG;gBAClB,CAAC,0CAA0C,CAAC,EAC1C,IAAI,CAAC,qBAAqB;aAC7B,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IACrE,CAAC;IAEO,sBAAsB;QAC5B,OAAO;YACL,GAAG,CAAC,IAAI,CAAC,mBAAmB,KAAK,SAAS,IAAI;gBAC5C,CAAC,wCAAwC,CAAC,EAAE,IAAI,CAAC,mBAAmB;aACrE,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS,IAAI;gBACtC,mBAAmB,EAAE,IAAI,CAAC,aAAa;aACxC,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,cAAc,KAAK,SAAS,IAAI;gBACvC,oBAAoB,EAAE,IAAI,CAAC,cAAc;aAC1C,CAAC;SACH,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-lambda-permission.js","sourceRoot":"","sources":["../../../../../src/service/lambda/function/policy/sim-lambda-permission.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AAEpF;;;;GAIG;AACH,MAAM,CAAC,MAAM,wCAAwC,GACnD,4BAA4B,CAAC;AAE/B;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,0CAA0C,GACrD,8BAA8B,CAAC;AAcjC;;;;;;;;GAQG;AACH,MAAM,OAAO,mBAAmB;IACd,WAAW,CAAS;IACpB,MAAM,CAAS;IACf,SAAS,CAAS;IAClB,WAAW,CAAS;IAEnB,mBAAmB,CAAsB;IACzC,SAAS,CAAsB;IAC/B,aAAa,CAAsB;IACnC,cAAc,CAAsB;IACpC,qBAAqB,CAAuB;IAE7D,YAAY,UAAyC;QACnD,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,mBAAmB,GAAG,UAAU,CAAC,mBAAmB,CAAC;QAC1D,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;QAC9C,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,cAAc,CAAC;QAChD,IAAI,CAAC,qBAAqB,GAAG,UAAU,CAAC,qBAAqB,CAAC;IAChE,CAAC;IAED;;OAEG;IACH,WAAW;QACT,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAEnC,OAAO;YACL,GAAG,EAAE,IAAI,CAAC,WAAW;YACrB,MAAM,EAAE,OAAO;YACf,SAAS,EAAE,4BAA4B,CAAC,IAAI,CAAC,SAAS,CAAC;YACvD,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ,EAAE,IAAI,CAAC,WAAW;YAC1B,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;SACzD,CAAC;IACJ,CAAC;IAED;;;;;;;;;OASG;IACK,SAAS;QACf,MAAM,YAAY,GAAG,IAAI,CAAC,sBAAsB,EAAE,CAAC;QACnD,MAAM,SAAS,GAAyD,EAAE,CAAC;QAE3E,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzC,SAAS,CAAC,cAAc,CAAC,GAAG,YAAY,CAAC;QAC3C,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACjC,SAAS,CAAC,SAAS,CAAC,GAAG,EAAE,eAAe,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;QAC7D,CAAC;QAED,IAAI,IAAI,CAAC,qBAAqB,KAAK,SAAS,EAAE,CAAC;YAC7C,SAAS,CAAC,MAAM,CAAC,GAAG;gBAClB,CAAC,0CAA0C,CAAC,EAC1C,IAAI,CAAC,qBAAqB;aAC7B,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IACrE,CAAC;IAEO,sBAAsB;QAC5B,OAAO;YACL,GAAG,CAAC,IAAI,CAAC,mBAAmB,KAAK,SAAS,IAAI;gBAC5C,CAAC,wCAAwC,CAAC,EAAE,IAAI,CAAC,mBAAmB;aACrE,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS,IAAI;gBACtC,mBAAmB,EAAE,IAAI,CAAC,aAAa;aACxC,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,cAAc,KAAK,SAAS,IAAI;gBACvC,oBAAoB,EAAE,IAAI,CAAC,cAAc;aAC1C,CAAC;SACH,CAAC;IACJ,CAAC;CACF"}

package/dist/service/lambda/serve/event/sim-lambda-url-endpoint.d.ts

@@ -0,0 +1,13 @@
+import type { SimPayload2Endpoint } from "../../../../serve/payload-2/sim-payload-2-endpoint.js";
+import type { SimLambdaFunctionUrl } from "../../function/url/sim-lambda-function-url.js";
+/**
+ * Describe a Function URL as the endpoint a payload format 2.0 event names.
+ *
+ * A Function URL has no API Gateway resources behind it: real Lambda reports
+ * the URL id as the API id and puts `$default` in both the route key and the
+ * stage, whatever the request path was. There are no path parameters, because
+ * there is no route pattern to capture them, and no stage variables, because
+ * there is no stage to configure.
+ */
+export declare function simLambdaUrlEndpoint(functionUrl: SimLambdaFunctionUrl): SimPayload2Endpoint;
+//# sourceMappingURL=sim-lambda-url-endpoint.d.ts.map

package/dist/service/lambda/serve/event/sim-lambda-url-endpoint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-url-endpoint.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/serve/event/sim-lambda-url-endpoint.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uDAAuD,CAAC;AACjG,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+CAA+C,CAAC;AAE1F;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAClC,WAAW,EAAE,oBAAoB,GAChC,mBAAmB,CAQrB"}

package/dist/service/lambda/serve/event/sim-lambda-url-endpoint.js

@@ -0,0 +1,19 @@
+/**
+ * Describe a Function URL as the endpoint a payload format 2.0 event names.
+ *
+ * A Function URL has no API Gateway resources behind it: real Lambda reports
+ * the URL id as the API id and puts `$default` in both the route key and the
+ * stage, whatever the request path was. There are no path parameters, because
+ * there is no route pattern to capture them, and no stage variables, because
+ * there is no stage to configure.
+ */
+export function simLambdaUrlEndpoint(functionUrl) {
+    return {
+        apiId: functionUrl.urlId,
+        domainName: functionUrl.hostname,
+        domainPrefix: functionUrl.urlId,
+        routeKey: "$default",
+        stage: "$default",
+    };
+}
+//# sourceMappingURL=sim-lambda-url-endpoint.js.map

package/dist/service/lambda/serve/event/sim-lambda-url-endpoint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-url-endpoint.js","sourceRoot":"","sources":["../../../../../src/service/lambda/serve/event/sim-lambda-url-endpoint.ts"],"names":[],"mappings":"AAGA;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAClC,WAAiC;IAEjC,OAAO;QACL,KAAK,EAAE,WAAW,CAAC,KAAK;QACxB,UAAU,EAAE,WAAW,CAAC,QAAQ;QAChC,YAAY,EAAE,WAAW,CAAC,KAAK;QAC/B,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,UAAU;KAClB,CAAC;AACJ,CAAC"}

package/dist/service/lambda/serve/event/sim-lambda-url-event.type.d.ts

@@ -1,103 +1,19 @@
+import type { SimPayload2Event, SimPayload2Result } from "../../../../serve/payload-2/sim-payload-2-event.type.js";
 /**
- * Lambda Function URL invocation event, in the API Gateway HTTP API payload
- * format 2.0 that real Function URLs use.
+ * Lambda Function URL invocation event.
  *
- * This is a minimal structural equivalent of the `aws-lambda` typings
- * package's `LambdaFunctionURLEvent`, so handlers typed against that package
- * can be invoked unchanged.
+ * Real Function URLs speak the API Gateway HTTP API payload format 2.0, so
+ * this is that event under the name Lambda users look for. A Function URL is
+ * always its own `$default` route on a `$default` stage, and has no route to
+ * capture path parameters from, so those fields of the shared event are the
+ * only ones a Function URL invocation never varies.
  */
-export interface SimLambdaFunctionUrlEvent {
-    version: "2.0";
-    routeKey: "$default";
-    rawPath: string;
-    rawQueryString: string;
-    cookies?: string[];
-    headers: Record<string, string>;
-    queryStringParameters?: Record<string, string>;
-    requestContext: SimLambdaFunctionUrlRequestContext;
-    body?: string;
-    isBase64Encoded: boolean;
-}
-/**
- * The requestContext block of a Function URL invocation event.
- */
-export interface SimLambdaFunctionUrlRequestContext {
-    accountId: string;
-    apiId: string;
-    authorizer?: SimLambdaFunctionUrlAuthorizerContext;
-    domainName: string;
-    domainPrefix: string;
-    http: SimLambdaFunctionUrlHttpContext;
-    requestId: string;
-    routeKey: "$default";
-    stage: "$default";
-    time: string;
-    timeEpoch: number;
-}
-/**
- * The requestContext.authorizer block, present only on an invocation a
- * Function URL authenticated.
- *
- * A `NONE` Function URL is invokable by anyone and has no caller to describe,
- * so real Lambda leaves this out entirely rather than filling it with blanks.
- */
-export interface SimLambdaFunctionUrlAuthorizerContext {
-    iam: SimLambdaFunctionUrlIamAuthorizer;
-}
-/**
- * The IAM caller of an `AWS_IAM` Function URL invocation.
- *
- * `userArn` and `accountId` describe the principal the request was attributed
- * to, which is what makes a handler able to behave differently for different
- * callers.
- *
- * `callerId` and `userId` carry the caller ARN rather than the opaque unique
- * id (`AIDA...`, `AROA...:session`) real AWS puts there: the simulator has no
- * unique-id namespace at the request boundary, and an ARN is what a test would
- * assert on anyway. `accessKey` is empty, as the simulator does not carry the
- * signing access key id past authentication. `cognitoIdentity` and
- * `principalOrgId` are always null, as neither is simulated.
- */
-export interface SimLambdaFunctionUrlIamAuthorizer {
-    accessKey: string;
-    accountId: string;
-    callerId: string;
-    cognitoIdentity: null;
-    principalOrgId: null;
-    userArn: string;
-    userId: string;
-}
-/**
- * The requestContext.http block of a Function URL invocation event.
- */
-export interface SimLambdaFunctionUrlHttpContext {
-    method: string;
-    path: string;
-    protocol: string;
-    sourceIp: string;
-    userAgent: string;
-}
+export type SimLambdaFunctionUrlEvent = SimPayload2Event;
 /**
  * Structured handler result for a Function URL invocation.
  *
  * A handler may also return any other value, in which case real Lambda infers
  * a 200 JSON response from it.
  */
-export interface SimLambdaFunctionUrlResult extends SimLambdaFunctionUrlResultBody {
-    statusCode?: number | undefined;
-}
-/**
- * A handler result that carries a status code, which is what makes real
- * Lambda treat it as an HTTP response rather than a value to JSON-encode.
- */
-export interface SimLambdaFunctionUrlStructuredResult extends SimLambdaFunctionUrlResultBody {
-    statusCode: number;
-}
-interface SimLambdaFunctionUrlResultBody {
-    headers?: Record<string, string | number | boolean> | undefined;
-    cookies?: string[] | undefined;
-    body?: string | undefined;
-    isBase64Encoded?: boolean | undefined;
-}
-export {};
+export type SimLambdaFunctionUrlResult = SimPayload2Result;
 //# sourceMappingURL=sim-lambda-url-event.type.d.ts.map

package/dist/service/lambda/serve/event/sim-lambda-url-event.type.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda-url-event.type.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/serve/event/sim-lambda-url-event.type.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,KAAK,CAAC;IACf,QAAQ,EAAE,UAAU,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,qBAAqB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/C,cAAc,EAAE,kCAAkC,CAAC;IACnD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,kCAAkC;IACjD,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,qCAAqC,CAAC;IACnD,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,+BAA+B,CAAC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,UAAU,CAAC;IACrB,KAAK,EAAE,UAAU,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,qCAAqC;IACpD,GAAG,EAAE,iCAAiC,CAAC;CACxC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,iCAAiC;IAChD,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,IAAI,CAAC;IACtB,cAAc,EAAE,IAAI,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,+BAA+B;IAC9C,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;GAKG;AACH,MAAM,WAAW,0BAA2B,SAAQ,8BAA8B;IAChF,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACjC;AAED;;;GAGG;AACH,MAAM,WAAW,oCAAqC,SAAQ,8BAA8B;IAC1F,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,UAAU,8BAA8B;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,GAAG,SAAS,CAAC;IAChE,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAC/B,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,eAAe,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CACvC"}
+{"version":3,"file":"sim-lambda-url-event.type.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/serve/event/sim-lambda-url-event.type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,gBAAgB,EAChB,iBAAiB,EAClB,MAAM,yDAAyD,CAAC;AAEjE;;;;;;;;GAQG;AACH,MAAM,MAAM,yBAAyB,GAAG,gBAAgB,CAAC;AAEzD;;;;;GAKG;AACH,MAAM,MAAM,0BAA0B,GAAG,iBAAiB,CAAC"}