@kensio/yulin 0.47.0 → 1.1.0

package/dist/service/s3/notification/destination/lambda/sim-s3-notification-functions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-notification-functions.d.ts","sourceRoot":"","sources":["../../../../../../src/service/s3/notification/destination/lambda/sim-s3-notification-functions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,uCAAuC,CAAC;AAEjG;;;;;;GAMG;AACH,MAAM,WAAW,0BAA0B;IACzC;;;;;;OAMG;IACH,aAAa,CACX,OAAO,EAAE,mCAAmC,GAC3C,MAAM,GAAG,SAAS,CAAC;IAEtB;;OAEG;IACH,MAAM,CACJ,OAAO,EAAE,mCAAmC,EAC5C,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB"}

package/dist/service/s3/notification/destination/lambda/sim-s3-notification-functions.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sim-s3-notification-functions.js.map

package/dist/service/s3/notification/destination/lambda/sim-s3-notification-functions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-notification-functions.js","sourceRoot":"","sources":["../../../../../../src/service/s3/notification/destination/lambda/sim-s3-notification-functions.ts"],"names":[],"mappings":""}

package/dist/service/s3/notification/destination/sim-s3-notification-destination-check.d.ts

@@ -0,0 +1,20 @@
+import type { SimS3NotificationConfiguration } from "../../bucket/notification/sim-s3-notification-configuration.js";
+import type { SimS3Bucket } from "../../bucket/sim-s3-bucket.js";
+import type { SimS3NotificationDestinations } from "./sim-s3-notification-destination.js";
+/**
+ * Checks that a Bucket can actually reach the destinations a configuration
+ * names.
+ *
+ * Real S3 validates the destinations as part of the call that applies the
+ * configuration, so a function that does not allow `s3.amazonaws.com` to invoke
+ * it is refused there rather than accepted and never delivered to.
+ */
+export declare class SimS3NotificationDestinationCheck {
+    private readonly destinations;
+    constructor(destinations: SimS3NotificationDestinations);
+    /**
+     * Refuse a configuration naming a destination this Bucket cannot notify.
+     */
+    check(bucket: SimS3Bucket, configuration: SimS3NotificationConfiguration): void;
+}
+//# sourceMappingURL=sim-s3-notification-destination-check.d.ts.map

package/dist/service/s3/notification/destination/sim-s3-notification-destination-check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-notification-destination-check.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/notification/destination/sim-s3-notification-destination-check.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,gEAAgE,CAAC;AACrH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,sCAAsC,CAAC;AAE1F;;;;;;;GAOG;AACH,qBAAa,iCAAiC;IAC5C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAgC;IAE7D,YAAY,YAAY,EAAE,6BAA6B,EAEtD;IAED;;OAEG;IACH,KAAK,CACH,MAAM,EAAE,WAAW,EACnB,aAAa,EAAE,8BAA8B,GAC5C,IAAI,CAWN;CACF"}

package/dist/service/s3/notification/destination/sim-s3-notification-destination-check.js

@@ -0,0 +1,30 @@
+import { simS3BucketArn } from "../../bucket/sim-s3-bucket-arn.js";
+/**
+ * Checks that a Bucket can actually reach the destinations a configuration
+ * names.
+ *
+ * Real S3 validates the destinations as part of the call that applies the
+ * configuration, so a function that does not allow `s3.amazonaws.com` to invoke
+ * it is refused there rather than accepted and never delivered to.
+ */
+export class SimS3NotificationDestinationCheck {
+    destinations;
+    constructor(destinations) {
+        this.destinations = destinations;
+    }
+    /**
+     * Refuse a configuration naming a destination this Bucket cannot notify.
+     */
+    check(bucket, configuration) {
+        const request = {
+            bucketArn: simS3BucketArn(bucket.bucketName),
+            bucketOwnerAccountId: bucket.getAccountRegionScope().accountId,
+        };
+        for (const notification of configuration.lambdaNotifications) {
+            this.destinations
+                .resolve(notification.functionArn)
+                .validate({ ...request, destinationArn: notification.functionArn });
+        }
+    }
+}
+//# sourceMappingURL=sim-s3-notification-destination-check.js.map

package/dist/service/s3/notification/destination/sim-s3-notification-destination-check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-notification-destination-check.js","sourceRoot":"","sources":["../../../../../src/service/s3/notification/destination/sim-s3-notification-destination-check.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAKnE;;;;;;;GAOG;AACH,MAAM,OAAO,iCAAiC;IAC3B,YAAY,CAAgC;IAE7D,YAAY,YAA2C;QACrD,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,KAAK,CACH,MAAmB,EACnB,aAA6C;QAE7C,MAAM,OAAO,GAAG;YACd,SAAS,EAAE,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC;YAC5C,oBAAoB,EAAE,MAAM,CAAC,qBAAqB,EAAE,CAAC,SAAS;SAC/D,CAAC;QAEF,KAAK,MAAM,YAAY,IAAI,aAAa,CAAC,mBAAmB,EAAE,CAAC;YAC7D,IAAI,CAAC,YAAY;iBACd,OAAO,CAAC,YAAY,CAAC,WAAW,CAAC;iBACjC,QAAQ,CAAC,EAAE,GAAG,OAAO,EAAE,cAAc,EAAE,YAAY,CAAC,WAAW,EAAE,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;CACF"}

package/dist/service/s3/notification/destination/sim-s3-notification-destination.d.ts

@@ -0,0 +1,50 @@
+import type { SimS3ObjectEvent } from "../event/sim-s3-object-event.js";
+/**
+ * What a destination needs to know about the Bucket asking it a question.
+ *
+ * The Bucket ARN and the owning Account are both carried because a destination
+ * decides whether S3 may reach it from the resource policy on its own side, and
+ * that policy is usually written for one Bucket in one Account.
+ */
+export interface SimS3NotificationDestinationRequest {
+    readonly destinationArn: string;
+    readonly bucketArn: string;
+    readonly bucketOwnerAccountId: string;
+}
+/**
+ * A destination being asked to take one event.
+ */
+export interface SimS3NotificationDeliveryRequest extends SimS3NotificationDestinationRequest {
+    readonly configurationId: string;
+    readonly event: SimS3ObjectEvent;
+}
+/**
+ * Somewhere simulated S3 can send an Object event.
+ *
+ * Validation and delivery are the same per-destination question asked at two
+ * moments, which is why one object owns both. Real S3 checks the destination
+ * when the configuration is applied and checks it again for every event, so a
+ * permission removed afterwards stops delivery rather than being remembered
+ * from configuration time.
+ */
+export interface SimS3NotificationDestination {
+    /**
+     * Refuse a destination the Bucket cannot notify, when the configuration
+     * naming it is applied.
+     */
+    validate(request: SimS3NotificationDestinationRequest): void;
+    /**
+     * Deliver one event, refusing if the destination no longer admits S3.
+     */
+    deliver(request: SimS3NotificationDeliveryRequest): Promise<void>;
+}
+/**
+ * The destinations one simulated S3 scope can reach.
+ */
+export interface SimS3NotificationDestinations {
+    /**
+     * The destination an ARN names, refusing an ARN S3 cannot notify.
+     */
+    resolve(destinationArn: string): SimS3NotificationDestination;
+}
+//# sourceMappingURL=sim-s3-notification-destination.d.ts.map

package/dist/service/s3/notification/destination/sim-s3-notification-destination.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-notification-destination.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/notification/destination/sim-s3-notification-destination.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAExE;;;;;;GAMG;AACH,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;CACvC;AAED;;GAEG;AACH,MAAM,WAAW,gCAAiC,SAAQ,mCAAmC;IAC3F,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC;CAClC;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,4BAA4B;IAC3C;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE,mCAAmC,GAAG,IAAI,CAAC;IAE7D;;OAEG;IACH,OAAO,CAAC,OAAO,EAAE,gCAAgC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnE;AAED;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC5C;;OAEG;IACH,OAAO,CAAC,cAAc,EAAE,MAAM,GAAG,4BAA4B,CAAC;CAC/D"}

package/dist/service/s3/notification/destination/sim-s3-notification-destination.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sim-s3-notification-destination.js.map

package/dist/service/s3/notification/destination/sim-s3-notification-destination.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-notification-destination.js","sourceRoot":"","sources":["../../../../../src/service/s3/notification/destination/sim-s3-notification-destination.ts"],"names":[],"mappings":""}

package/dist/service/s3/notification/destination/sim-s3-service-notification-destinations.d.ts

@@ -0,0 +1,36 @@
+import type { SimS3NotificationDestination, SimS3NotificationDestinations } from "./sim-s3-notification-destination.js";
+interface SimS3ServiceNotificationDestinationsProperties {
+    readonly lambda: SimS3NotificationDestination;
+}
+/**
+ * The destinations of one simulated S3 scope, keyed on the service an ARN
+ * names.
+ *
+ * An ARN's service segment is the only thing that decides which destination
+ * takes it, so the lookup is a map rather than a chain of checks, and a service
+ * this simulator has no destination for is refused by name.
+ */
+export declare class SimS3ServiceNotificationDestinations implements SimS3NotificationDestinations {
+    private readonly byService;
+    constructor(properties: SimS3ServiceNotificationDestinationsProperties);
+    /**
+     * The destination an ARN names.
+     */
+    resolve(destinationArn: string): SimS3NotificationDestination;
+}
+/**
+ * The destinations a simulated S3 built on its own has, which is none.
+ *
+ * A standalone SimS3 owns its own background scheduler, so nothing could wait
+ * for a delivery it made even if it could make one. Refusing when the
+ * configuration is applied says so at the point the mistake was made, rather
+ * than leaving a configured Bucket that never notifies anything.
+ */
+export declare class SimS3NoNotificationDestinations implements SimS3NotificationDestinations {
+    /**
+     * Refuse every destination, explaining how to get one.
+     */
+    resolve(destinationArn: string): never;
+}
+export {};
+//# sourceMappingURL=sim-s3-service-notification-destinations.d.ts.map

package/dist/service/s3/notification/destination/sim-s3-service-notification-destinations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-service-notification-destinations.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/notification/destination/sim-s3-service-notification-destinations.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,4BAA4B,EAC5B,6BAA6B,EAC9B,MAAM,sCAAsC,CAAC;AAE9C,UAAU,8CAA8C;IACtD,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC;CAC/C;AAED;;;;;;;GAOG;AACH,qBAAa,oCAAqC,YAAW,6BAA6B;IACxF,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAoD;IAE9E,YAAY,UAAU,EAAE,8CAA8C,EAErE;IAED;;OAEG;IACH,OAAO,CAAC,cAAc,EAAE,MAAM,GAAG,4BAA4B,CAc5D;CACF;AAED;;;;;;;GAOG;AACH,qBAAa,+BAAgC,YAAW,6BAA6B;IACnF;;OAEG;IACH,OAAO,CAAC,cAAc,EAAE,MAAM,GAAG,KAAK,CAOrC;CACF"}

package/dist/service/s3/notification/destination/sim-s3-service-notification-destinations.js

@@ -0,0 +1,48 @@
+import { SimS3NotImplemented } from "../../error/sim-s3.error.js";
+/**
+ * The destinations of one simulated S3 scope, keyed on the service an ARN
+ * names.
+ *
+ * An ARN's service segment is the only thing that decides which destination
+ * takes it, so the lookup is a map rather than a chain of checks, and a service
+ * this simulator has no destination for is refused by name.
+ */
+export class SimS3ServiceNotificationDestinations {
+    byService;
+    constructor(properties) {
+        this.byService = new Map([["lambda", properties.lambda]]);
+    }
+    /**
+     * The destination an ARN names.
+     */
+    resolve(destinationArn) {
+        const service = destinationArn.split(":", 3)[2];
+        const destination = service === undefined ? undefined : this.byService.get(service);
+        if (destination === undefined) {
+            throw new SimS3NotImplemented(`Simulated S3 cannot notify ${destinationArn}. It notifies a Lambda ` +
+                "function; SQS queue, SNS topic and EventBridge destinations are " +
+                "not simulated.");
+        }
+        return destination;
+    }
+}
+/**
+ * The destinations a simulated S3 built on its own has, which is none.
+ *
+ * A standalone SimS3 owns its own background scheduler, so nothing could wait
+ * for a delivery it made even if it could make one. Refusing when the
+ * configuration is applied says so at the point the mistake was made, rather
+ * than leaving a configured Bucket that never notifies anything.
+ */
+export class SimS3NoNotificationDestinations {
+    /**
+     * Refuse every destination, explaining how to get one.
+     */
+    resolve(destinationArn) {
+        throw new SimS3NotImplemented(`Cannot notify ${destinationArn}: this SimS3 was constructed on its ` +
+            "own, so it has no other simulated services to notify and no shared " +
+            "background scheduler to deliver on. Reach simulated S3 through " +
+            "SimAws to configure Bucket event notifications.");
+    }
+}
+//# sourceMappingURL=sim-s3-service-notification-destinations.js.map

package/dist/service/s3/notification/destination/sim-s3-service-notification-destinations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-service-notification-destinations.js","sourceRoot":"","sources":["../../../../../src/service/s3/notification/destination/sim-s3-service-notification-destinations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAUlE;;;;;;;GAOG;AACH,MAAM,OAAO,oCAAoC;IAC9B,SAAS,CAAoD;IAE9E,YAAY,UAA0D;QACpE,IAAI,CAAC,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,cAAsB;QAC5B,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChD,MAAM,WAAW,GACf,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAElE,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,mBAAmB,CAC3B,8BAA8B,cAAc,yBAAyB;gBACnE,kEAAkE;gBAClE,gBAAgB,CACnB,CAAC;QACJ,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,+BAA+B;IAC1C;;OAEG;IACH,OAAO,CAAC,cAAsB;QAC5B,MAAM,IAAI,mBAAmB,CAC3B,iBAAiB,cAAc,sCAAsC;YACnE,qEAAqE;YACrE,iEAAiE;YACjE,iDAAiD,CACpD,CAAC;IACJ,CAAC;CACF"}

package/dist/service/s3/notification/event/sim-s3-event-principal.d.ts

@@ -0,0 +1,13 @@
+import type { SimAwsResolvedCaller } from "../../../aws/caller/sim-aws-caller-resolver.js";
+/**
+ * The principal an event says caused it.
+ *
+ * Real S3 puts the unique id of the IAM entity here, the `AIDA...` or
+ * `AROA...` form. Simulated IAM has no unique-id namespace: it carries ARNs,
+ * which is also what a test would assert on. The ARN goes in rather than an
+ * invented AIDA-shaped string, and the divergence is recorded in the usage
+ * docs. `src/serve/payload-2/sim-payload-2-event.type.ts` does the same thing
+ * for the same reason.
+ */
+export declare function simS3EventPrincipalId(caller: SimAwsResolvedCaller): string;
+//# sourceMappingURL=sim-s3-event-principal.d.ts.map

package/dist/service/s3/notification/event/sim-s3-event-principal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-event-principal.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/notification/event/sim-s3-event-principal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gDAAgD,CAAC;AAE3F;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,oBAAoB,GAAG,MAAM,CAU1E"}

package/dist/service/s3/notification/event/sim-s3-event-principal.js

@@ -0,0 +1,20 @@
+/**
+ * The principal an event says caused it.
+ *
+ * Real S3 puts the unique id of the IAM entity here, the `AIDA...` or
+ * `AROA...` form. Simulated IAM has no unique-id namespace: it carries ARNs,
+ * which is also what a test would assert on. The ARN goes in rather than an
+ * invented AIDA-shaped string, and the divergence is recorded in the usage
+ * docs. `src/serve/payload-2/sim-payload-2-event.type.ts` does the same thing
+ * for the same reason.
+ */
+export function simS3EventPrincipalId(caller) {
+    if (caller.arn !== undefined) {
+        return caller.arn;
+    }
+    if (caller.service !== undefined) {
+        return caller.service;
+    }
+    return "anonymous";
+}
+//# sourceMappingURL=sim-s3-event-principal.js.map

package/dist/service/s3/notification/event/sim-s3-event-principal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-event-principal.js","sourceRoot":"","sources":["../../../../../src/service/s3/notification/event/sim-s3-event-principal.ts"],"names":[],"mappings":"AAEA;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAA4B;IAChE,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,MAAM,CAAC,GAAG,CAAC;IACpB,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC"}

package/dist/service/s3/notification/event/sim-s3-event-records.d.ts

@@ -0,0 +1,21 @@
+import type { SimS3ObjectEvent } from "./sim-s3-object-event.js";
+/**
+ * The event structure version this simulator emits.
+ *
+ * AWS increments the minor version whenever it adds a field or an event type,
+ * and the major version only for a change that breaks a consumer. Consumers
+ * are advised to compare the major for equality and treat the minor as a floor,
+ * so a test should assert on the major rather than on this whole string.
+ *
+ * https://docs.aws.amazon.com/AmazonS3/latest/userguide/notification-content-structure.html
+ */
+export declare const SIM_S3_EVENT_VERSION = "2.5";
+/**
+ * The `Records` document a destination receives for one Object event.
+ *
+ * One event produces one record. Real S3 batches nothing for a Lambda
+ * destination either: a function configured for a Bucket is invoked once per
+ * event, with an array holding the single record.
+ */
+export declare function simS3EventRecordsDocument(event: SimS3ObjectEvent, configurationId: string): object;
+//# sourceMappingURL=sim-s3-event-records.d.ts.map

package/dist/service/s3/notification/event/sim-s3-event-records.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-event-records.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/notification/event/sim-s3-event-records.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAEjE;;;;;;;;;GASG;AACH,eAAO,MAAM,oBAAoB,QAAQ,CAAC;AAQ1C;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,gBAAgB,EACvB,eAAe,EAAE,MAAM,GACtB,MAAM,CAmCR"}

package/dist/service/s3/notification/event/sim-s3-event-records.js

@@ -0,0 +1,90 @@
+import { randomUUID } from "node:crypto";
+/**
+ * The event structure version this simulator emits.
+ *
+ * AWS increments the minor version whenever it adds a field or an event type,
+ * and the major version only for a change that breaks a consumer. Consumers
+ * are advised to compare the major for equality and treat the minor as a floor,
+ * so a test should assert on the major rather than on this whole string.
+ *
+ * https://docs.aws.amazon.com/AmazonS3/latest/userguide/notification-content-structure.html
+ */
+export const SIM_S3_EVENT_VERSION = "2.5";
+/**
+ * The event schema version inside the `s3` block, which is separate from the
+ * message version and has not moved off 1.0.
+ */
+const s3SchemaVersion = "1.0";
+/**
+ * The `Records` document a destination receives for one Object event.
+ *
+ * One event produces one record. Real S3 batches nothing for a Lambda
+ * destination either: a function configured for a Bucket is invoked once per
+ * event, with an array holding the single record.
+ */
+export function simS3EventRecordsDocument(event, configurationId) {
+    return {
+        Records: [
+            {
+                eventVersion: SIM_S3_EVENT_VERSION,
+                eventSource: "aws:s3",
+                awsRegion: event.regionName,
+                eventTime: event.eventTime.toISOString(),
+                // The record names the event type without the "s3:" prefix the
+                // configuration uses.
+                eventName: event.eventName.replace("s3:", ""),
+                userIdentity: { principalId: event.principalId },
+                requestParameters: { sourceIPAddress: simS3EventSourceIpAddress },
+                responseElements: {
+                    "x-amz-request-id": simS3EventRequestId(),
+                    "x-amz-id-2": simS3EventRequestId(),
+                },
+                s3: {
+                    s3SchemaVersion,
+                    configurationId,
+                    bucket: {
+                        name: event.bucketName,
+                        ownerIdentity: { principalId: event.ownerAccountId },
+                        arn: event.bucketArn,
+                    },
+                    object: {
+                        key: simS3EventObjectKey(event.key),
+                        ...(event.size !== undefined && { size: event.size }),
+                        ...(event.eTag !== undefined && { eTag: event.eTag }),
+                        sequencer: event.sequencer,
+                    },
+                },
+            },
+        ],
+    };
+}
+/**
+ * The address a simulated request came from.
+ *
+ * A request to simulated S3 is made in this process, so the loopback address
+ * is the honest answer. A test asserting on it is asserting on the simulator
+ * rather than on anything AWS would report, which is why the Limitations
+ * section says so.
+ */
+const simS3EventSourceIpAddress = "127.0.0.1";
+/**
+ * A request id for one event.
+ *
+ * Real S3 puts the ids of the request that caused the event here, so AWS
+ * Support can trace it. The simulator has no such ids, so these are generated
+ * per event and match nothing: they are present because the field is, not
+ * because they mean anything.
+ */
+function simS3EventRequestId() {
+    return randomUUID().replaceAll("-", "").toUpperCase();
+}
+/**
+ * The object key as a record carries it.
+ *
+ * Real S3 form-URL-encodes the key, so a space becomes a plus sign, while the
+ * slashes that make up a key prefix stay as they are.
+ */
+function simS3EventObjectKey(key) {
+    return encodeURIComponent(key).replaceAll("%20", "+").replaceAll("%2F", "/");
+}
+//# sourceMappingURL=sim-s3-event-records.js.map

package/dist/service/s3/notification/event/sim-s3-event-records.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-event-records.js","sourceRoot":"","sources":["../../../../../src/service/s3/notification/event/sim-s3-event-records.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,CAAC;AAE1C;;;GAGG;AACH,MAAM,eAAe,GAAG,KAAK,CAAC;AAE9B;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CACvC,KAAuB,EACvB,eAAuB;IAEvB,OAAO;QACL,OAAO,EAAE;YACP;gBACE,YAAY,EAAE,oBAAoB;gBAClC,WAAW,EAAE,QAAQ;gBACrB,SAAS,EAAE,KAAK,CAAC,UAAU;gBAC3B,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE;gBACxC,+DAA+D;gBAC/D,sBAAsB;gBACtB,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;gBAC7C,YAAY,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE;gBAChD,iBAAiB,EAAE,EAAE,eAAe,EAAE,yBAAyB,EAAE;gBACjE,gBAAgB,EAAE;oBAChB,kBAAkB,EAAE,mBAAmB,EAAE;oBACzC,YAAY,EAAE,mBAAmB,EAAE;iBACpC;gBACD,EAAE,EAAE;oBACF,eAAe;oBACf,eAAe;oBACf,MAAM,EAAE;wBACN,IAAI,EAAE,KAAK,CAAC,UAAU;wBACtB,aAAa,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,cAAc,EAAE;wBACpD,GAAG,EAAE,KAAK,CAAC,SAAS;qBACrB;oBACD,MAAM,EAAE;wBACN,GAAG,EAAE,mBAAmB,CAAC,KAAK,CAAC,GAAG,CAAC;wBACnC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;wBACrD,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;wBACrD,SAAS,EAAE,KAAK,CAAC,SAAS;qBAC3B;iBACF;aACF;SACF;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,yBAAyB,GAAG,WAAW,CAAC;AAE9C;;;;;;;GAOG;AACH,SAAS,mBAAmB;IAC1B,OAAO,UAAU,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AACxD,CAAC;AAED;;;;;GAKG;AACH,SAAS,mBAAmB,CAAC,GAAW;IACtC,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAC/E,CAAC"}

package/dist/service/s3/notification/event/sim-s3-object-etag.d.ts

@@ -0,0 +1,8 @@
+/**
+ * The ETag real S3 gives an Object uploaded in one part.
+ *
+ * It is the MD5 of the bytes, in hex. An Object uploaded in several parts gets
+ * a different form, which simulated S3 has no multipart upload to produce.
+ */
+export declare function simS3ObjectETag(body: Buffer): string;
+//# sourceMappingURL=sim-s3-object-etag.d.ts.map

package/dist/service/s3/notification/event/sim-s3-object-etag.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-object-etag.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/notification/event/sim-s3-object-etag.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEpD"}

package/dist/service/s3/notification/event/sim-s3-object-etag.js

@@ -0,0 +1,11 @@
+import { createHash } from "node:crypto";
+/**
+ * The ETag real S3 gives an Object uploaded in one part.
+ *
+ * It is the MD5 of the bytes, in hex. An Object uploaded in several parts gets
+ * a different form, which simulated S3 has no multipart upload to produce.
+ */
+export function simS3ObjectETag(body) {
+    return createHash("md5").update(body).digest("hex");
+}
+//# sourceMappingURL=sim-s3-object-etag.js.map

package/dist/service/s3/notification/event/sim-s3-object-etag.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-object-etag.js","sourceRoot":"","sources":["../../../../../src/service/s3/notification/event/sim-s3-object-etag.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACtD,CAAC"}

package/dist/service/s3/notification/event/sim-s3-object-event-builder.d.ts

@@ -0,0 +1,63 @@
+import type { SimClock } from "../../../../util/clock/sim-clock.js";
+import type { SimAwsResolvedCaller } from "../../../aws/caller/sim-aws-caller-resolver.js";
+import type { SimS3NotificationEvent } from "../../bucket/notification/sim-s3-notification-event.js";
+import type { SimS3Bucket } from "../../bucket/sim-s3-bucket.js";
+import type { SimS3Object } from "../../object/s3-object.js";
+import { SimS3ObjectEvent } from "./sim-s3-object-event.js";
+/**
+ * An Object a command has just stored.
+ */
+export interface SimS3ObjectCreatedInput {
+    readonly bucket: SimS3Bucket;
+    readonly object: SimS3Object;
+    readonly caller: SimAwsResolvedCaller;
+}
+/**
+ * An Object key a command has just removed.
+ */
+export interface SimS3ObjectRemovedInput {
+    readonly bucket: SimS3Bucket;
+    readonly key: string;
+    readonly caller: SimAwsResolvedCaller;
+}
+/**
+ * Something that happened to an Object, before any Bucket configuration has
+ * been consulted about it.
+ */
+export interface SimS3RaisedObjectEvent {
+    readonly bucket: SimS3Bucket;
+    readonly eventName: SimS3NotificationEvent;
+    readonly key: string;
+    readonly caller: SimAwsResolvedCaller;
+    readonly size?: number | undefined;
+    readonly eTag?: string | undefined;
+}
+interface SimS3ObjectEventBuilderProperties {
+    readonly clock: SimClock;
+}
+/**
+ * Turns something that happened to an Object into the event a destination is
+ * offered.
+ *
+ * The sequence numbers live here because they belong to the event rather than
+ * to any destination: every destination configured for one event gets the same
+ * one, and a later event on the same key gets a greater one.
+ */
+export declare class SimS3ObjectEventBuilder {
+    private readonly clock;
+    private readonly sequencers;
+    constructor(properties: SimS3ObjectEventBuilderProperties);
+    /**
+     * Build the event for an Object that was stored, which carries the Object's
+     * size and ETag.
+     */
+    forCreated(input: SimS3ObjectCreatedInput): SimS3ObjectEvent;
+    /**
+     * Build the event for an Object that was removed, which carries neither size
+     * nor ETag, because the Object they described is gone.
+     */
+    forRemoved(input: SimS3ObjectRemovedInput): SimS3ObjectEvent;
+    private build;
+}
+export {};
+//# sourceMappingURL=sim-s3-object-event-builder.d.ts.map

package/dist/service/s3/notification/event/sim-s3-object-event-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-object-event-builder.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/notification/event/sim-s3-object-event-builder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gDAAgD,CAAC;AAC3F,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wDAAwD,CAAC;AAErG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAI7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAE5D;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;CACvC;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;CACvC;AAED;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,sBAAsB,CAAC;IAC3C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC;AAED,UAAU,iCAAiC;IACzC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED;;;;;;;GAOG;AACH,qBAAa,uBAAuB;IAClC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IACjC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+B;IAE1D,YAAY,UAAU,EAAE,iCAAiC,EAExD;IAED;;;OAGG;IACH,UAAU,CAAC,KAAK,EAAE,uBAAuB,GAAG,gBAAgB,CAS3D;IAED;;;OAGG;IACH,UAAU,CAAC,KAAK,EAAE,uBAAuB,GAAG,gBAAgB,CAO3D;IAED,OAAO,CAAC,KAAK;CAmBd"}

package/dist/service/s3/notification/event/sim-s3-object-event-builder.js

@@ -0,0 +1,65 @@
+import { simS3BucketArn } from "../../bucket/sim-s3-bucket-arn.js";
+import { SimS3ObjectSequencers } from "../sim-s3-object-sequencers.js";
+import { simS3EventPrincipalId } from "./sim-s3-event-principal.js";
+import { simS3ObjectETag } from "./sim-s3-object-etag.js";
+import { SimS3ObjectEvent } from "./sim-s3-object-event.js";
+/**
+ * Turns something that happened to an Object into the event a destination is
+ * offered.
+ *
+ * The sequence numbers live here because they belong to the event rather than
+ * to any destination: every destination configured for one event gets the same
+ * one, and a later event on the same key gets a greater one.
+ */
+export class SimS3ObjectEventBuilder {
+    clock;
+    sequencers = new SimS3ObjectSequencers();
+    constructor(properties) {
+        this.clock = properties.clock;
+    }
+    /**
+     * Build the event for an Object that was stored, which carries the Object's
+     * size and ETag.
+     */
+    forCreated(input) {
+        return this.build({
+            bucket: input.bucket,
+            eventName: "s3:ObjectCreated:Put",
+            key: input.object.key,
+            caller: input.caller,
+            size: input.object.body.length,
+            eTag: simS3ObjectETag(input.object.body),
+        });
+    }
+    /**
+     * Build the event for an Object that was removed, which carries neither size
+     * nor ETag, because the Object they described is gone.
+     */
+    forRemoved(input) {
+        return this.build({
+            bucket: input.bucket,
+            eventName: "s3:ObjectRemoved:Delete",
+            key: input.key,
+            caller: input.caller,
+        });
+    }
+    build(raised) {
+        const scope = raised.bucket.getAccountRegionScope();
+        const bucketName = raised.bucket.bucketName;
+        return new SimS3ObjectEvent({
+            eventName: raised.eventName,
+            // The simulation's own clock, so a frozen clock produces a fixed time.
+            eventTime: this.clock.now(),
+            bucketName,
+            bucketArn: simS3BucketArn(bucketName),
+            regionName: scope.regionName,
+            ownerAccountId: scope.accountId,
+            principalId: simS3EventPrincipalId(raised.caller),
+            key: raised.key,
+            sequencer: this.sequencers.next(bucketName, raised.key),
+            size: raised.size,
+            eTag: raised.eTag,
+        });
+    }
+}
+//# sourceMappingURL=sim-s3-object-event-builder.js.map

package/dist/service/s3/notification/event/sim-s3-object-event-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-object-event-builder.js","sourceRoot":"","sources":["../../../../../src/service/s3/notification/event/sim-s3-object-event-builder.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAGnE,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAqC5D;;;;;;;GAOG;AACH,MAAM,OAAO,uBAAuB;IACjB,KAAK,CAAW;IAChB,UAAU,GAAG,IAAI,qBAAqB,EAAE,CAAC;IAE1D,YAAY,UAA6C;QACvD,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAChC,CAAC;IAED;;;OAGG;IACH,UAAU,CAAC,KAA8B;QACvC,OAAO,IAAI,CAAC,KAAK,CAAC;YAChB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS,EAAE,sBAAsB;YACjC,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG;YACrB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM;YAC9B,IAAI,EAAE,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC;SACzC,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,UAAU,CAAC,KAA8B;QACvC,OAAO,IAAI,CAAC,KAAK,CAAC;YAChB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS,EAAE,yBAAyB;YACpC,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,MAA8B;QAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,qBAAqB,EAAE,CAAC;QACpD,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;QAE5C,OAAO,IAAI,gBAAgB,CAAC;YAC1B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,uEAAuE;YACvE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;YAC3B,UAAU;YACV,SAAS,EAAE,cAAc,CAAC,UAAU,CAAC;YACrC,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,cAAc,EAAE,KAAK,CAAC,SAAS;YAC/B,WAAW,EAAE,qBAAqB,CAAC,MAAM,CAAC,MAAM,CAAC;YACjD,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC;YACvD,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,IAAI,EAAE,MAAM,CAAC,IAAI;SAClB,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/s3/notification/event/sim-s3-object-event.d.ts

@@ -0,0 +1,42 @@
+import type { SimS3NotificationEvent } from "../../bucket/notification/sim-s3-notification-event.js";
+import type { AwsRegionName } from "../../../aws/sim-aws-region.js";
+interface SimS3ObjectEventProperties {
+    readonly eventName: SimS3NotificationEvent;
+    readonly eventTime: Date;
+    readonly bucketName: string;
+    readonly bucketArn: string;
+    readonly regionName: AwsRegionName;
+    readonly ownerAccountId: string;
+    readonly principalId: string;
+    readonly key: string;
+    readonly sequencer: string;
+    readonly size?: number | undefined;
+    readonly eTag?: string | undefined;
+}
+/**
+ * Something that happened to an Object, in terms no destination owns.
+ *
+ * The `Records` document an S3 event notification is delivered as is one
+ * serialisation of this rather than the thing itself, because a destination
+ * decides its own shape: an SNS topic wraps it, and EventBridge uses a
+ * different schema entirely.
+ *
+ * `size` and `eTag` describe an Object that exists, so a removal carries
+ * neither, as a real S3 removal record does not.
+ */
+export declare class SimS3ObjectEvent {
+    readonly eventName: SimS3NotificationEvent;
+    readonly eventTime: Date;
+    readonly bucketName: string;
+    readonly bucketArn: string;
+    readonly regionName: AwsRegionName;
+    readonly ownerAccountId: string;
+    readonly principalId: string;
+    readonly key: string;
+    readonly sequencer: string;
+    readonly size: number | undefined;
+    readonly eTag: string | undefined;
+    constructor(properties: SimS3ObjectEventProperties);
+}
+export {};
+//# sourceMappingURL=sim-s3-object-event.d.ts.map

package/dist/service/s3/notification/event/sim-s3-object-event.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-object-event.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/notification/event/sim-s3-object-event.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wDAAwD,CAAC;AACrG,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAEpE,UAAU,0BAA0B;IAClC,QAAQ,CAAC,SAAS,EAAE,sBAAsB,CAAC;IAC3C,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;IACnC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC;AAED;;;;;;;;;;GAUG;AACH,qBAAa,gBAAgB;IAC3B,SAAgB,SAAS,EAAE,sBAAsB,CAAC;IAClD,SAAgB,SAAS,EAAE,IAAI,CAAC;IAChC,SAAgB,UAAU,EAAE,MAAM,CAAC;IACnC,SAAgB,SAAS,EAAE,MAAM,CAAC;IAClC,SAAgB,UAAU,EAAE,aAAa,CAAC;IAC1C,SAAgB,cAAc,EAAE,MAAM,CAAC;IACvC,SAAgB,WAAW,EAAE,MAAM,CAAC;IACpC,SAAgB,GAAG,EAAE,MAAM,CAAC;IAC5B,SAAgB,SAAS,EAAE,MAAM,CAAC;IAClC,SAAgB,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,SAAgB,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAEzC,YAAY,UAAU,EAAE,0BAA0B,EAYjD;CACF"}