@kensio/yulin 1.0.0 → 1.1.0

package/dist/service/s3/command/put-object/put-object.handler.js

@@ -14,11 +14,13 @@ export class PutObjectCommandHandler {
     authorizer;
     objectBuilder = new PutObjectBuilder();
     background;
+    notifications;
     constructor(properties) {
         const { buckets, iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), } = properties;
         this.buckets = buckets;
         this.authorizer = new PutObjectAuthorizer({ iam });
         this.background = background;
+        this.notifications = properties.notifications;
     }
     /**
      * Simulate putting an Object into an S3 Bucket.
@@ -42,9 +44,12 @@ export class PutObjectCommandHandler {
         }
         // Allow for potential non-deterministic sequencing of async events.
         await this.background.sequence();
-        this.authorizer.authorize(bucket, command.input.Key, options?.caller);
+        const caller = this.authorizer.authorize(bucket, command.input.Key, options?.caller);
         const object = this.objectBuilder.build(command);
         await bucket.putObject(object);
+        // Every write path funnels through here, so this one call covers the SDK,
+        // an intercepted SDK client and the REST endpoint alike.
+        this.notifications.objectCreated({ bucket, object, caller });
         return {
             $metadata: {},
         };

package/dist/service/s3/command/put-object/put-object.handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"put-object.handler.js","sourceRoot":"","sources":["../../../../../src/service/s3/command/put-object/put-object.handler.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AACvE,OAAO,EAEL,eAAe,GAChB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EACL,kBAAkB,GAEnB,MAAM,wDAAwD,CAAC;AAEhE,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAY3D;;;;GAIG;AACH,MAAM,OAAO,uBAAuB;IAIjB,OAAO,CAAoC;IAC3C,UAAU,CAAsB;IAChC,aAAa,GAAG,IAAI,gBAAgB,EAAE,CAAC;IACvC,UAAU,CAAsB;IAEjD,YAAY,UAA6C;QACvD,MAAM,EACJ,OAAO,EACP,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,UAAU,CAAC;QACf,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,UAAU,GAAG,IAAI,mBAAmB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,MAAM,CACV,OAA4B,EAC5B,OAAwC;QAExC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,+BAA+B,CAAC,CAAC;QACrE,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,4BAA4B,CAAC,CAAC;QAE/D,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,MAAyB,CAAC;QAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,iBAAiB,CAAC,sBAAsB,UAAU,EAAE,CAAC,CAAC;QAClE,CAAC;QAED,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAEtE,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAE/B,OAAO;YACL,SAAS,EAAE,EAAE;SACd,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"put-object.handler.js","sourceRoot":"","sources":["../../../../../src/service/s3/command/put-object/put-object.handler.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AACvE,OAAO,EAEL,eAAe,GAChB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EACL,kBAAkB,GAEnB,MAAM,wDAAwD,CAAC;AAEhE,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAc3D;;;;GAIG;AACH,MAAM,OAAO,uBAAuB;IAIjB,OAAO,CAAoC;IAC3C,UAAU,CAAsB;IAChC,aAAa,GAAG,IAAI,gBAAgB,EAAE,CAAC;IACvC,UAAU,CAAsB;IAChC,aAAa,CAAsB;IAEpD,YAAY,UAA6C;QACvD,MAAM,EACJ,OAAO,EACP,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,UAAU,CAAC;QACf,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,UAAU,GAAG,IAAI,mBAAmB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;IAChD,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,MAAM,CACV,OAA4B,EAC5B,OAAwC;QAExC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,+BAA+B,CAAC,CAAC;QACrE,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,4BAA4B,CAAC,CAAC;QAE/D,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,MAAyB,CAAC;QAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,iBAAiB,CAAC,sBAAsB,UAAU,EAAE,CAAC,CAAC;QAClE,CAAC;QAED,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CACtC,MAAM,EACN,OAAO,CAAC,KAAK,CAAC,GAAG,EACjB,OAAO,EAAE,MAAM,CAChB,CAAC;QAEF,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAE/B,0EAA0E;QAC1E,yDAAyD;QACzD,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAE7D,OAAO;YACL,SAAS,EAAE,EAAE;SACd,CAAC;IACJ,CAAC;CACF"}

package/dist/service/s3/command/sim-s3-bucket-command-state.d.ts

@@ -0,0 +1,23 @@
+import type { BackgroundScheduler } from "../../../util/background/background.js";
+import type { SimIamInterServiceAuthZ } from "../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimS3Bucket, SimS3BucketName } from "../bucket/sim-s3-bucket.js";
+import type { SimS3NotificationDestinations } from "../notification/destination/sim-s3-notification-destination.js";
+import type { SimS3ObjectNotifier } from "../notification/sim-s3-object-notifier.js";
+/**
+ * The state and collaborators every Bucket-scoped command handler is built
+ * with.
+ *
+ * Each command area holds one of these and hands it straight to the handler it
+ * runs, so the same Bucket map, IAM and background scheduler are shared across
+ * every command of one simulated S3 scope. The notifier is shared for the same
+ * reason and one more: sequence numbers and the delivery ceiling only mean
+ * anything if every Object command counts into the same one.
+ */
+export interface SimS3BucketCommandState {
+    readonly buckets: Map<SimS3BucketName, SimS3Bucket>;
+    readonly iam: SimIamInterServiceAuthZ;
+    readonly background: BackgroundScheduler;
+    readonly notificationDestinations: SimS3NotificationDestinations;
+    readonly notifications: SimS3ObjectNotifier;
+}
+//# sourceMappingURL=sim-s3-bucket-command-state.d.ts.map

package/dist/service/s3/command/sim-s3-bucket-command-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-bucket-command-state.d.ts","sourceRoot":"","sources":["../../../../src/service/s3/command/sim-s3-bucket-command-state.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAClF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qDAAqD,CAAC;AACnG,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC/E,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,gEAAgE,CAAC;AACpH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AAErF;;;;;;;;;GASG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IACpD,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;IACtC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;IACzC,QAAQ,CAAC,wBAAwB,EAAE,6BAA6B,CAAC;IACjE,QAAQ,CAAC,aAAa,EAAE,mBAAmB,CAAC;CAC7C"}

package/dist/service/s3/command/sim-s3-bucket-command-state.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sim-s3-bucket-command-state.js.map

package/dist/service/s3/command/sim-s3-bucket-command-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-bucket-command-state.js","sourceRoot":"","sources":["../../../../src/service/s3/command/sim-s3-bucket-command-state.ts"],"names":[],"mappings":""}

package/dist/service/s3/command/sim-s3-command.types.d.ts

@@ -6,12 +6,16 @@
  */
 export type { SimCreateBucketCommand, SimCreateBucketCommandOutput, } from "./create-bucket/create-bucket.command.js";
 export type { SimDeleteBucketPolicyCommand, SimDeleteBucketPolicyCommandOutput, } from "./delete-bucket-policy/delete-bucket-policy.command.js";
+export type { SimDeleteObjectCommand, SimDeleteObjectCommandOutput, } from "./delete-object/delete-object.command.js";
+export type { SimDeleteObjectsCommand, SimDeleteObjectsCommandOutput, } from "./delete-objects/delete-objects.command.js";
 export type { SimDeletePublicAccessBlockCommand, SimDeletePublicAccessBlockCommandOutput, } from "./delete-public-access-block/delete-public-access-block.command.js";
 export type { SimGetBucketPolicyCommand, SimGetBucketPolicyCommandOutput, } from "./get-bucket-policy/get-bucket-policy.command.js";
+export type { SimGetBucketNotificationConfigurationCommand, SimGetBucketNotificationConfigurationCommandOutput, } from "./get-bucket-notification-configuration/get-bucket-notification-configuration.command.js";
 export type { SimGetObjectCommand, SimGetObjectCommandOutput, } from "./get-object/get-object.command.js";
 export type { SimGetPublicAccessBlockCommand, SimGetPublicAccessBlockCommandOutput, } from "./get-public-access-block/get-public-access-block.command.js";
 export type { SimListBucketsCommand, SimListBucketsCommandOutput, } from "./list-buckets/list-buckets.command.js";
 export type { SimListObjectsCommand, SimListObjectsCommandOutput, } from "./list-objects/list-objects.command.js";
+export type { SimPutBucketNotificationConfigurationCommand, SimPutBucketNotificationConfigurationCommandOutput, } from "./put-bucket-notification-configuration/put-bucket-notification-configuration.command.js";
 export type { SimPutBucketPolicyCommand, SimPutBucketPolicyCommandOutput, } from "./put-bucket-policy/put-bucket-policy.command.js";
 export type { SimPutBucketWebsiteCommand, SimPutBucketWebsiteCommandOutput, } from "./put-bucket-website/put-bucket-website.command.js";
 export type { SimPutObjectCommand, SimPutObjectCommandOutput, } from "./put-object/put-object.command.js";

package/dist/service/s3/command/sim-s3-command.types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-s3-command.types.d.ts","sourceRoot":"","sources":["../../../../src/service/s3/command/sim-s3-command.types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,YAAY,EACV,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,0CAA0C,CAAC;AAClD,YAAY,EACV,4BAA4B,EAC5B,kCAAkC,GACnC,MAAM,wDAAwD,CAAC;AAChE,YAAY,EACV,iCAAiC,EACjC,uCAAuC,GACxC,MAAM,oEAAoE,CAAC;AAC5E,YAAY,EACV,yBAAyB,EACzB,+BAA+B,GAChC,MAAM,kDAAkD,CAAC;AAC1D,YAAY,EACV,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,oCAAoC,CAAC;AAC5C,YAAY,EACV,8BAA8B,EAC9B,oCAAoC,GACrC,MAAM,8DAA8D,CAAC;AACtE,YAAY,EACV,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,wCAAwC,CAAC;AAChD,YAAY,EACV,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,wCAAwC,CAAC;AAChD,YAAY,EACV,yBAAyB,EACzB,+BAA+B,GAChC,MAAM,kDAAkD,CAAC;AAC1D,YAAY,EACV,0BAA0B,EAC1B,gCAAgC,GACjC,MAAM,oDAAoD,CAAC;AAC5D,YAAY,EACV,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,oCAAoC,CAAC;AAC5C,YAAY,EACV,8BAA8B,EAC9B,oCAAoC,GACrC,MAAM,8DAA8D,CAAC"}
+{"version":3,"file":"sim-s3-command.types.d.ts","sourceRoot":"","sources":["../../../../src/service/s3/command/sim-s3-command.types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,YAAY,EACV,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,0CAA0C,CAAC;AAClD,YAAY,EACV,4BAA4B,EAC5B,kCAAkC,GACnC,MAAM,wDAAwD,CAAC;AAChE,YAAY,EACV,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,0CAA0C,CAAC;AAClD,YAAY,EACV,uBAAuB,EACvB,6BAA6B,GAC9B,MAAM,4CAA4C,CAAC;AACpD,YAAY,EACV,iCAAiC,EACjC,uCAAuC,GACxC,MAAM,oEAAoE,CAAC;AAC5E,YAAY,EACV,yBAAyB,EACzB,+BAA+B,GAChC,MAAM,kDAAkD,CAAC;AAC1D,YAAY,EACV,4CAA4C,EAC5C,kDAAkD,GACnD,MAAM,0FAA0F,CAAC;AAClG,YAAY,EACV,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,oCAAoC,CAAC;AAC5C,YAAY,EACV,8BAA8B,EAC9B,oCAAoC,GACrC,MAAM,8DAA8D,CAAC;AACtE,YAAY,EACV,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,wCAAwC,CAAC;AAChD,YAAY,EACV,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,wCAAwC,CAAC;AAChD,YAAY,EACV,4CAA4C,EAC5C,kDAAkD,GACnD,MAAM,0FAA0F,CAAC;AAClG,YAAY,EACV,yBAAyB,EACzB,+BAA+B,GAChC,MAAM,kDAAkD,CAAC;AAC1D,YAAY,EACV,0BAA0B,EAC1B,gCAAgC,GACjC,MAAM,oDAAoD,CAAC;AAC5D,YAAY,EACV,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,oCAAoC,CAAC;AAC5C,YAAY,EACV,8BAA8B,EAC9B,oCAAoC,GACrC,MAAM,8DAA8D,CAAC"}

package/dist/service/s3/command/sim-s3-request-options.d.ts

@@ -0,0 +1,11 @@
+import type { SimAwsCaller } from "../../aws/caller/sim-aws-caller.js";
+/**
+ * The per-request options every simulated S3 command accepts.
+ *
+ * This lives beside the commands rather than on the service facade so a command
+ * area can name it without importing the facade back.
+ */
+export interface SimS3RequestOptions {
+    readonly caller?: SimAwsCaller;
+}
+//# sourceMappingURL=sim-s3-request-options.d.ts.map

package/dist/service/s3/command/sim-s3-request-options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-request-options.d.ts","sourceRoot":"","sources":["../../../../src/service/s3/command/sim-s3-request-options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAEvE;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC"}

package/dist/service/s3/command/sim-s3-request-options.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sim-s3-request-options.js.map

package/dist/service/s3/command/sim-s3-request-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-request-options.js","sourceRoot":"","sources":["../../../../src/service/s3/command/sim-s3-request-options.ts"],"names":[],"mappings":""}

package/dist/service/s3/error/sim-s3-notification.error.d.ts

@@ -0,0 +1,24 @@
+/**
+ * A destination that would not take an event when it was offered one.
+ *
+ * This is not an AWS API error: nothing is waiting for it, because real S3
+ * never reports a failed delivery to whoever wrote the Object. It exists so
+ * the delivery outcome can say why nothing arrived, rather than the event
+ * simply disappearing.
+ */
+export declare class SimS3NotificationNotPermitted extends Error {
+    readonly name = "SimS3NotificationNotPermitted";
+}
+/**
+ * The simulation delivered more notifications than it is willing to.
+ *
+ * A handler that writes back into the Bucket that triggered it is a loop, and
+ * in process it is a loop with nothing to slow it down: `backgroundTasksComplete()`
+ * drains until there is no work left, so the test hangs with no stack to read.
+ * This is the one delivery failure allowed to escape its background task, so
+ * the loop surfaces as a named failure instead.
+ */
+export declare class SimS3NotificationDeliveryLimit extends Error {
+    readonly name = "SimS3NotificationDeliveryLimit";
+}
+//# sourceMappingURL=sim-s3-notification.error.d.ts.map

package/dist/service/s3/error/sim-s3-notification.error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-notification.error.d.ts","sourceRoot":"","sources":["../../../../src/service/s3/error/sim-s3-notification.error.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,qBAAa,6BAA8B,SAAQ,KAAK;IACtD,SAAyB,IAAI,mCAAmC;CACjE;AAED;;;;;;;;GAQG;AACH,qBAAa,8BAA+B,SAAQ,KAAK;IACvD,SAAyB,IAAI,oCAAoC;CAClE"}

package/dist/service/s3/error/sim-s3-notification.error.js

@@ -0,0 +1,24 @@
+/**
+ * A destination that would not take an event when it was offered one.
+ *
+ * This is not an AWS API error: nothing is waiting for it, because real S3
+ * never reports a failed delivery to whoever wrote the Object. It exists so
+ * the delivery outcome can say why nothing arrived, rather than the event
+ * simply disappearing.
+ */
+export class SimS3NotificationNotPermitted extends Error {
+    name = "SimS3NotificationNotPermitted";
+}
+/**
+ * The simulation delivered more notifications than it is willing to.
+ *
+ * A handler that writes back into the Bucket that triggered it is a loop, and
+ * in process it is a loop with nothing to slow it down: `backgroundTasksComplete()`
+ * drains until there is no work left, so the test hangs with no stack to read.
+ * This is the one delivery failure allowed to escape its background task, so
+ * the loop surfaces as a named failure instead.
+ */
+export class SimS3NotificationDeliveryLimit extends Error {
+    name = "SimS3NotificationDeliveryLimit";
+}
+//# sourceMappingURL=sim-s3-notification.error.js.map

package/dist/service/s3/error/sim-s3-notification.error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-notification.error.js","sourceRoot":"","sources":["../../../../src/service/s3/error/sim-s3-notification.error.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,OAAO,6BAA8B,SAAQ,KAAK;IAC7B,IAAI,GAAG,+BAA+B,CAAC;CACjE;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,8BAA+B,SAAQ,KAAK;IAC9B,IAAI,GAAG,gCAAgC,CAAC;CAClE"}

package/dist/service/s3/error/sim-s3.error.d.ts

@@ -59,6 +59,38 @@ export declare class SimS3BucketAlreadyOwnedByYou extends SimS3Error {
     readonly name = "BucketAlreadyOwnedByYou";
     constructor(message: string);
 }
+/**
+ * Simulated S3 MalformedXML error.
+ *
+ * Real S3 answers this when the request document is not one it accepts, which
+ * is how a DeleteObjects request naming no Objects, or more than a thousand of
+ * them, is refused.
+ */
+export declare class SimS3MalformedXml extends SimS3Error {
+    readonly name = "MalformedXML";
+    constructor(message: string);
+}
+/**
+ * Simulated S3 InvalidArgument error.
+ *
+ * Real S3 answers this when a request argument is not one it accepts, which is
+ * how a notification configuration with overlapping filters, a repeated
+ * configuration id or an unusable destination is refused.
+ */
+export declare class SimS3InvalidArgument extends SimS3Error {
+    readonly name = "InvalidArgument";
+    constructor(message: string);
+}
+/**
+ * Simulated S3 NotImplemented error.
+ *
+ * Something real S3 does that the simulator refuses rather than approximates.
+ * Real S3 uses the same code for a request it will not carry out.
+ */
+export declare class SimS3NotImplemented extends SimS3Error {
+    readonly name = "NotImplemented";
+    constructor(message: string);
+}
 /**
  * Simulated S3 InvalidBucketName error.
  */

package/dist/service/s3/error/sim-s3.error.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-s3.error.d.ts","sourceRoot":"","sources":["../../../../src/service/s3/error/sim-s3.error.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;;GAEG;AACH,qBAAa,UAAW,SAAQ,KAAK;aAGjB,SAAS,EAAE,kBAAkB;IAF/C,YACE,OAAO,EAAE,MAAM,EACC,SAAS,GAAE,kBAAuB,EAGnD;CACF;AAED;;GAEG;AACH,qBAAa,iBAAkB,SAAQ,UAAU;IAC/C,SAAyB,IAAI,kBAAkB;IAE/C,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;GAEG;AACH,qBAAa,cAAe,SAAQ,UAAU;IAC5C,SAAyB,IAAI,eAAe;IAE5C,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;GAKG;AACH,qBAAa,uBAAwB,SAAQ,UAAU;IACrD,SAAyB,IAAI,wBAAwB;IAErD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;GAKG;AACH,qBAAa,iBAAkB,SAAQ,UAAU;IAC/C,SAAyB,IAAI,kBAAkB;IAE/C,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;GAEG;AACH,qBAAa,wBAAyB,SAAQ,UAAU;IACtD,SAAyB,IAAI,yBAAyB;IAEtD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;GAEG;AACH,qBAAa,4BAA6B,SAAQ,UAAU;IAC1D,SAAyB,IAAI,6BAA6B;IAE1D,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;GAEG;AACH,qBAAa,sBAAuB,SAAQ,UAAU;IACpD,SAAyB,IAAI,uBAAuB;IAEpD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF"}
+{"version":3,"file":"sim-s3.error.d.ts","sourceRoot":"","sources":["../../../../src/service/s3/error/sim-s3.error.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;;GAEG;AACH,qBAAa,UAAW,SAAQ,KAAK;aAGjB,SAAS,EAAE,kBAAkB;IAF/C,YACE,OAAO,EAAE,MAAM,EACC,SAAS,GAAE,kBAAuB,EAGnD;CACF;AAED;;GAEG;AACH,qBAAa,iBAAkB,SAAQ,UAAU;IAC/C,SAAyB,IAAI,kBAAkB;IAE/C,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;GAEG;AACH,qBAAa,cAAe,SAAQ,UAAU;IAC5C,SAAyB,IAAI,eAAe;IAE5C,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;GAKG;AACH,qBAAa,uBAAwB,SAAQ,UAAU;IACrD,SAAyB,IAAI,wBAAwB;IAErD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;GAKG;AACH,qBAAa,iBAAkB,SAAQ,UAAU;IAC/C,SAAyB,IAAI,kBAAkB;IAE/C,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;GAEG;AACH,qBAAa,wBAAyB,SAAQ,UAAU;IACtD,SAAyB,IAAI,yBAAyB;IAEtD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;GAEG;AACH,qBAAa,4BAA6B,SAAQ,UAAU;IAC1D,SAAyB,IAAI,6BAA6B;IAE1D,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;;GAMG;AACH,qBAAa,iBAAkB,SAAQ,UAAU;IAC/C,SAAyB,IAAI,kBAAkB;IAE/C,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;;GAMG;AACH,qBAAa,oBAAqB,SAAQ,UAAU;IAClD,SAAyB,IAAI,qBAAqB;IAElD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;GAKG;AACH,qBAAa,mBAAoB,SAAQ,UAAU;IACjD,SAAyB,IAAI,oBAAoB;IAEjD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;GAEG;AACH,qBAAa,sBAAuB,SAAQ,UAAU;IACpD,SAAyB,IAAI,uBAAuB;IAEpD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF"}

package/dist/service/s3/error/sim-s3.error.js

@@ -68,6 +68,44 @@ export class SimS3BucketAlreadyOwnedByYou extends SimS3Error {
         super(message, { httpStatusCode: 409 });
     }
 }
+/**
+ * Simulated S3 MalformedXML error.
+ *
+ * Real S3 answers this when the request document is not one it accepts, which
+ * is how a DeleteObjects request naming no Objects, or more than a thousand of
+ * them, is refused.
+ */
+export class SimS3MalformedXml extends SimS3Error {
+    name = "MalformedXML";
+    constructor(message) {
+        super(message, { httpStatusCode: 400 });
+    }
+}
+/**
+ * Simulated S3 InvalidArgument error.
+ *
+ * Real S3 answers this when a request argument is not one it accepts, which is
+ * how a notification configuration with overlapping filters, a repeated
+ * configuration id or an unusable destination is refused.
+ */
+export class SimS3InvalidArgument extends SimS3Error {
+    name = "InvalidArgument";
+    constructor(message) {
+        super(message, { httpStatusCode: 400 });
+    }
+}
+/**
+ * Simulated S3 NotImplemented error.
+ *
+ * Something real S3 does that the simulator refuses rather than approximates.
+ * Real S3 uses the same code for a request it will not carry out.
+ */
+export class SimS3NotImplemented extends SimS3Error {
+    name = "NotImplemented";
+    constructor(message) {
+        super(message, { httpStatusCode: 501 });
+    }
+}
 /**
  * Simulated S3 InvalidBucketName error.
  */

package/dist/service/s3/error/sim-s3.error.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-s3.error.js","sourceRoot":"","sources":["../../../../src/service/s3/error/sim-s3.error.ts"],"names":[],"mappings":"AAOA;;GAEG;AACH,MAAM,OAAO,UAAW,SAAQ,KAAK;IAGjB,SAAS;IAF3B,YACE,OAAe,EACC,SAAS,GAAuB,EAAE;QAElD,KAAK,CAAC,OAAO,CAAC,CAAC;yBAFC,SAAS;IAG3B,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,iBAAkB,SAAQ,UAAU;IACtB,IAAI,GAAG,cAAc,CAAC;IAE/C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,cAAe,SAAQ,UAAU;IACnB,IAAI,GAAG,WAAW,CAAC;IAE5C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,uBAAwB,SAAQ,UAAU;IAC5B,IAAI,GAAG,oBAAoB,CAAC;IAErD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,iBAAkB,SAAQ,UAAU;IACtB,IAAI,GAAG,cAAc,CAAC;IAE/C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,wBAAyB,SAAQ,UAAU;IAC7B,IAAI,GAAG,qBAAqB,CAAC;IAEtD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,4BAA6B,SAAQ,UAAU;IACjC,IAAI,GAAG,yBAAyB,CAAC;IAE1D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,sBAAuB,SAAQ,UAAU;IAC3B,IAAI,GAAG,mBAAmB,CAAC;IAEpD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF"}
+{"version":3,"file":"sim-s3.error.js","sourceRoot":"","sources":["../../../../src/service/s3/error/sim-s3.error.ts"],"names":[],"mappings":"AAOA;;GAEG;AACH,MAAM,OAAO,UAAW,SAAQ,KAAK;IAGjB,SAAS;IAF3B,YACE,OAAe,EACC,SAAS,GAAuB,EAAE;QAElD,KAAK,CAAC,OAAO,CAAC,CAAC;yBAFC,SAAS;IAG3B,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,iBAAkB,SAAQ,UAAU;IACtB,IAAI,GAAG,cAAc,CAAC;IAE/C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,cAAe,SAAQ,UAAU;IACnB,IAAI,GAAG,WAAW,CAAC;IAE5C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,uBAAwB,SAAQ,UAAU;IAC5B,IAAI,GAAG,oBAAoB,CAAC;IAErD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,iBAAkB,SAAQ,UAAU;IACtB,IAAI,GAAG,cAAc,CAAC;IAE/C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,wBAAyB,SAAQ,UAAU;IAC7B,IAAI,GAAG,qBAAqB,CAAC;IAEtD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,4BAA6B,SAAQ,UAAU;IACjC,IAAI,GAAG,yBAAyB,CAAC;IAE1D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,iBAAkB,SAAQ,UAAU;IACtB,IAAI,GAAG,cAAc,CAAC;IAE/C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,oBAAqB,SAAQ,UAAU;IACzB,IAAI,GAAG,iBAAiB,CAAC;IAElD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,mBAAoB,SAAQ,UAAU;IACxB,IAAI,GAAG,gBAAgB,CAAC;IAEjD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,sBAAuB,SAAQ,UAAU;IAC3B,IAAI,GAAG,mBAAmB,CAAC;IAEpD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF"}

package/dist/service/s3/index.d.ts

@@ -1,2 +1,3 @@
 export { SimS3 } from "./sim-s3.js";
+export type { SimS3NotificationDeliveryFailure } from "./notification/sim-s3-notification-failures.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/service/s3/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/service/s3/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/service/s3/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,YAAY,EAAE,gCAAgC,EAAE,MAAM,gDAAgD,CAAC"}

package/dist/service/s3/notification/destination/lambda/sim-aws-s3-notification-functions.d.ts

@@ -0,0 +1,48 @@
+import type { SimAws } from "../../../../aws/sim-aws.js";
+import type { SimS3NotificationDestinationRequest } from "../sim-s3-notification-destination.js";
+import type { SimS3NotificationFunctions } from "./sim-s3-notification-functions.js";
+/**
+ * The service principal S3 invokes a Lambda function as.
+ */
+export declare const simS3ServicePrincipal = "s3.amazonaws.com";
+interface SimAwsS3NotificationFunctionsProperties {
+    readonly simAws: SimAws;
+}
+/**
+ * The simulated Lambda functions of one simulated AWS instance, as S3
+ * notification destinations.
+ *
+ * Functions are looked up when a configuration is applied or an event is
+ * delivered, never when this is built. Simulated Lambda already reaches
+ * simulated S3 while it is being constructed, for function code in a Bucket, so
+ * reaching back the other way at construction time would be a cycle with no
+ * bottom to it.
+ */
+export declare class SimAwsS3NotificationFunctions implements SimS3NotificationFunctions {
+    private readonly simAws;
+    constructor(properties: SimAwsS3NotificationFunctionsProperties);
+    /**
+     * Why S3 may not invoke the function, or nothing when it may.
+     *
+     * Whether a service may invoke a function is Lambda's own rule, so the
+     * decision is made there. What S3 adds is which Bucket is calling, supplied
+     * as the source ARN and source Account, so a permission granted for one
+     * Bucket does not open the function to another.
+     */
+    invokeRefusal(request: SimS3NotificationDestinationRequest): string | undefined;
+    /**
+     * Invoke the function with the event document.
+     *
+     * The function is invoked directly rather than through an Invoke command,
+     * because S3 is already inside the background task that stands for the
+     * asynchronous invocation real S3 makes, and because a handler failure has
+     * to reach the delivery outcome rather than being swallowed as an
+     * asynchronous invocation error.
+     */
+    invoke(request: SimS3NotificationDestinationRequest, event: object): Promise<void>;
+    private findFunction;
+    private iam;
+    private scope;
+}
+export {};
+//# sourceMappingURL=sim-aws-s3-notification-functions.d.ts.map

package/dist/service/s3/notification/destination/lambda/sim-aws-s3-notification-functions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-aws-s3-notification-functions.d.ts","sourceRoot":"","sources":["../../../../../../src/service/s3/notification/destination/lambda/sim-aws-s3-notification-functions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAIzD,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,uCAAuC,CAAC;AAEjG,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAErF;;GAEG;AACH,eAAO,MAAM,qBAAqB,qBAAqB,CAAC;AAExD,UAAU,uCAAuC;IAC/C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;;GASG;AACH,qBAAa,6BAA8B,YAAW,0BAA0B;IAC9E,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAEhC,YAAY,UAAU,EAAE,uCAAuC,EAE9D;IAED;;;;;;;OAOG;IACH,aAAa,CACX,OAAO,EAAE,mCAAmC,GAC3C,MAAM,GAAG,SAAS,CA0BpB;IAED;;;;;;;;OAQG;IACG,MAAM,CACV,OAAO,EAAE,mCAAmC,EAC5C,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CAWf;IAED,OAAO,CAAC,YAAY;IAMpB,OAAO,CAAC,GAAG;IAIX,OAAO,CAAC,KAAK;CAKd"}

package/dist/service/s3/notification/destination/lambda/sim-aws-s3-notification-functions.js

@@ -0,0 +1,78 @@
+import { SimLambdaServiceInvokeAuthorizer } from "../../../../lambda/command/authorize/sim-lambda-service-invoke-authorizer.js";
+import { SimS3NotificationFunctionArn } from "./sim-s3-notification-function-arn.js";
+/**
+ * The service principal S3 invokes a Lambda function as.
+ */
+export const simS3ServicePrincipal = "s3.amazonaws.com";
+/**
+ * The simulated Lambda functions of one simulated AWS instance, as S3
+ * notification destinations.
+ *
+ * Functions are looked up when a configuration is applied or an event is
+ * delivered, never when this is built. Simulated Lambda already reaches
+ * simulated S3 while it is being constructed, for function code in a Bucket, so
+ * reaching back the other way at construction time would be a cycle with no
+ * bottom to it.
+ */
+export class SimAwsS3NotificationFunctions {
+    simAws;
+    constructor(properties) {
+        this.simAws = properties.simAws;
+    }
+    /**
+     * Why S3 may not invoke the function, or nothing when it may.
+     *
+     * Whether a service may invoke a function is Lambda's own rule, so the
+     * decision is made there. What S3 adds is which Bucket is calling, supplied
+     * as the source ARN and source Account, so a permission granted for one
+     * Bucket does not open the function to another.
+     */
+    invokeRefusal(request) {
+        const arn = SimS3NotificationFunctionArn.parse(request.destinationArn);
+        const simFunction = this.findFunction(arn);
+        if (simFunction === undefined) {
+            return `${request.destinationArn} is not a simulated Lambda function.`;
+        }
+        const decision = new SimLambdaServiceInvokeAuthorizer({
+            iam: this.iam(arn),
+        }).authorize({
+            simFunction,
+            servicePrincipal: simS3ServicePrincipal,
+            sourceArn: request.bucketArn,
+            sourceAccount: request.bucketOwnerAccountId,
+        });
+        if (decision.isDenied) {
+            return (`The resource policy of ${request.destinationArn} does not allow ` +
+                `${simS3ServicePrincipal} to invoke it for ${request.bucketArn}. ` +
+                "Grant it with AddPermission.");
+        }
+        return undefined;
+    }
+    /**
+     * Invoke the function with the event document.
+     *
+     * The function is invoked directly rather than through an Invoke command,
+     * because S3 is already inside the background task that stands for the
+     * asynchronous invocation real S3 makes, and because a handler failure has
+     * to reach the delivery outcome rather than being swallowed as an
+     * asynchronous invocation error.
+     */
+    async invoke(request, event) {
+        const arn = SimS3NotificationFunctionArn.parse(request.destinationArn);
+        const simFunction = this.findFunction(arn);
+        if (simFunction === undefined) {
+            throw new Error(`${request.destinationArn} is not a simulated Lambda function.`);
+        }
+        await simFunction.invoke(event);
+    }
+    findFunction(arn) {
+        return this.scope(arn).lambda().getSimFunctionByName(arn.functionName);
+    }
+    iam(arn) {
+        return this.scope(arn).iam();
+    }
+    scope(arn) {
+        return this.simAws.accountRegionScope(arn.accountId, arn.regionName);
+    }
+}
+//# sourceMappingURL=sim-aws-s3-notification-functions.js.map

package/dist/service/s3/notification/destination/lambda/sim-aws-s3-notification-functions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-aws-s3-notification-functions.js","sourceRoot":"","sources":["../../../../../../src/service/s3/notification/destination/lambda/sim-aws-s3-notification-functions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gCAAgC,EAAE,MAAM,8EAA8E,CAAC;AAIhI,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AAGrF;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,kBAAkB,CAAC;AAMxD;;;;;;;;;GASG;AACH,MAAM,OAAO,6BAA6B;IACvB,MAAM,CAAS;IAEhC,YAAY,UAAmD;QAC7D,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAClC,CAAC;IAED;;;;;;;OAOG;IACH,aAAa,CACX,OAA4C;QAE5C,MAAM,GAAG,GAAG,4BAA4B,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QACvE,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAE3C,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,GAAG,OAAO,CAAC,cAAc,sCAAsC,CAAC;QACzE,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,gCAAgC,CAAC;YACpD,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;SACnB,CAAC,CAAC,SAAS,CAAC;YACX,WAAW;YACX,gBAAgB,EAAE,qBAAqB;YACvC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,aAAa,EAAE,OAAO,CAAC,oBAAoB;SAC5C,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,OAAO,CACL,0BAA0B,OAAO,CAAC,cAAc,kBAAkB;gBAClE,GAAG,qBAAqB,qBAAqB,OAAO,CAAC,SAAS,IAAI;gBAClE,8BAA8B,CAC/B,CAAC;QACJ,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,MAAM,CACV,OAA4C,EAC5C,KAAa;QAEb,MAAM,GAAG,GAAG,4BAA4B,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QACvE,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAE3C,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,CAAC,cAAc,sCAAsC,CAChE,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAEO,YAAY,CAClB,GAAiC;QAEjC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,oBAAoB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACzE,CAAC;IAEO,GAAG,CAAC,GAAiC;QAC3C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IAC/B,CAAC;IAEO,KAAK,CACX,GAAiC;QAEjC,OAAO,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;IACvE,CAAC;CACF"}

package/dist/service/s3/notification/destination/lambda/sim-s3-lambda-notification-destination.d.ts

@@ -0,0 +1,30 @@
+import type { SimS3NotificationDeliveryRequest, SimS3NotificationDestination, SimS3NotificationDestinationRequest } from "../sim-s3-notification-destination.js";
+import type { SimS3NotificationFunctions } from "./sim-s3-notification-functions.js";
+interface SimS3LambdaNotificationDestinationProperties {
+    readonly functions: SimS3NotificationFunctions;
+}
+/**
+ * A simulated Lambda function as somewhere S3 sends Object events.
+ *
+ * The same question is asked twice on purpose. Real S3 checks the function's
+ * resource policy when the configuration is applied, and checks it again for
+ * every event, so a permission removed afterwards stops delivery. Nothing is
+ * remembered from the first check.
+ */
+export declare class SimS3LambdaNotificationDestination implements SimS3NotificationDestination {
+    private readonly functions;
+    constructor(properties: SimS3LambdaNotificationDestinationProperties);
+    /**
+     * Refuse a function the Bucket may not invoke.
+     *
+     * Real S3 answers InvalidArgument for a destination it could not validate,
+     * which is what a missing `AddPermission` for `s3.amazonaws.com` produces.
+     */
+    validate(request: SimS3NotificationDestinationRequest): void;
+    /**
+     * Invoke the function with the event, if it still admits this Bucket.
+     */
+    deliver(request: SimS3NotificationDeliveryRequest): Promise<void>;
+}
+export {};
+//# sourceMappingURL=sim-s3-lambda-notification-destination.d.ts.map

package/dist/service/s3/notification/destination/lambda/sim-s3-lambda-notification-destination.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-lambda-notification-destination.d.ts","sourceRoot":"","sources":["../../../../../../src/service/s3/notification/destination/lambda/sim-s3-lambda-notification-destination.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,gCAAgC,EAChC,4BAA4B,EAC5B,mCAAmC,EACpC,MAAM,uCAAuC,CAAC;AAC/C,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAErF,UAAU,4CAA4C;IACpD,QAAQ,CAAC,SAAS,EAAE,0BAA0B,CAAC;CAChD;AAED;;;;;;;GAOG;AACH,qBAAa,kCAAmC,YAAW,4BAA4B;IACrF,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA6B;IAEvD,YAAY,UAAU,EAAE,4CAA4C,EAEnE;IAED;;;;;OAKG;IACH,QAAQ,CAAC,OAAO,EAAE,mCAAmC,GAAG,IAAI,CAQ3D;IAED;;OAEG;IACG,OAAO,CAAC,OAAO,EAAE,gCAAgC,GAAG,OAAO,CAAC,IAAI,CAAC,CAWtE;CACF"}

package/dist/service/s3/notification/destination/lambda/sim-s3-lambda-notification-destination.js

@@ -0,0 +1,40 @@
+import { SimS3InvalidArgument } from "../../../error/sim-s3.error.js";
+import { SimS3NotificationNotPermitted } from "../../../error/sim-s3-notification.error.js";
+import { simS3EventRecordsDocument } from "../../event/sim-s3-event-records.js";
+/**
+ * A simulated Lambda function as somewhere S3 sends Object events.
+ *
+ * The same question is asked twice on purpose. Real S3 checks the function's
+ * resource policy when the configuration is applied, and checks it again for
+ * every event, so a permission removed afterwards stops delivery. Nothing is
+ * remembered from the first check.
+ */
+export class SimS3LambdaNotificationDestination {
+    functions;
+    constructor(properties) {
+        this.functions = properties.functions;
+    }
+    /**
+     * Refuse a function the Bucket may not invoke.
+     *
+     * Real S3 answers InvalidArgument for a destination it could not validate,
+     * which is what a missing `AddPermission` for `s3.amazonaws.com` produces.
+     */
+    validate(request) {
+        const refusal = this.functions.invokeRefusal(request);
+        if (refusal !== undefined) {
+            throw new SimS3InvalidArgument(`Unable to validate the following destination configurations: ${refusal}`);
+        }
+    }
+    /**
+     * Invoke the function with the event, if it still admits this Bucket.
+     */
+    async deliver(request) {
+        const refusal = this.functions.invokeRefusal(request);
+        if (refusal !== undefined) {
+            throw new SimS3NotificationNotPermitted(refusal);
+        }
+        await this.functions.invoke(request, simS3EventRecordsDocument(request.event, request.configurationId));
+    }
+}
+//# sourceMappingURL=sim-s3-lambda-notification-destination.js.map

package/dist/service/s3/notification/destination/lambda/sim-s3-lambda-notification-destination.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-lambda-notification-destination.js","sourceRoot":"","sources":["../../../../../../src/service/s3/notification/destination/lambda/sim-s3-lambda-notification-destination.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAE,6BAA6B,EAAE,MAAM,6CAA6C,CAAC;AAC5F,OAAO,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAYhF;;;;;;;GAOG;AACH,MAAM,OAAO,kCAAkC;IAC5B,SAAS,CAA6B;IAEvD,YAAY,UAAwD;QAClE,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;IACxC,CAAC;IAED;;;;;OAKG;IACH,QAAQ,CAAC,OAA4C;QACnD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAEtD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,oBAAoB,CAC5B,gEAAgE,OAAO,EAAE,CAC1E,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CAAC,OAAyC;QACrD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAEtD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,6BAA6B,CAAC,OAAO,CAAC,CAAC;QACnD,CAAC;QAED,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CACzB,OAAO,EACP,yBAAyB,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,eAAe,CAAC,CAClE,CAAC;IACJ,CAAC;CACF"}

package/dist/service/s3/notification/destination/lambda/sim-s3-notification-function-arn.d.ts

@@ -0,0 +1,24 @@
+import type { SimAwsAccountId } from "../../../../aws/sim-aws-account.js";
+import type { AwsRegionName } from "../../../../aws/sim-aws-region.js";
+/**
+ * The Lambda function ARN a notification configuration names.
+ *
+ * Lambda addresses a function with colons rather than a slash, so this reads
+ * the ARN itself rather than going through the shared ARN parser, which is
+ * built for the slash form.
+ */
+export declare class SimS3NotificationFunctionArn {
+    readonly regionName: AwsRegionName;
+    readonly accountId: SimAwsAccountId;
+    readonly functionName: string;
+    private constructor();
+    /**
+     * Read a Lambda function ARN, refusing anything else.
+     *
+     * A qualified ARN naming a version or an alias is refused rather than being
+     * read as the unqualified function, because simulated Lambda has neither and
+     * silently notifying `$LATEST` instead would be the wrong function.
+     */
+    static parse(arn: string): SimS3NotificationFunctionArn;
+}
+//# sourceMappingURL=sim-s3-notification-function-arn.d.ts.map

package/dist/service/s3/notification/destination/lambda/sim-s3-notification-function-arn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-notification-function-arn.d.ts","sourceRoot":"","sources":["../../../../../../src/service/s3/notification/destination/lambda/sim-s3-notification-function-arn.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAMvE;;;;;;GAMG;AACH,qBAAa,4BAA4B;IACvC,SAAgB,UAAU,EAAE,aAAa,CAAC;IAC1C,SAAgB,SAAS,EAAE,eAAe,CAAC;IAC3C,SAAgB,YAAY,EAAE,MAAM,CAAC;IAErC,OAAO,eAQN;IAED;;;;;;OAMG;IACH,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,4BAA4B,CAsCtD;CACF"}

package/dist/service/s3/notification/destination/lambda/sim-s3-notification-function-arn.js

@@ -0,0 +1,45 @@
+import { SimS3InvalidArgument, SimS3NotImplemented, } from "../../../error/sim-s3.error.js";
+/**
+ * The Lambda function ARN a notification configuration names.
+ *
+ * Lambda addresses a function with colons rather than a slash, so this reads
+ * the ARN itself rather than going through the shared ARN parser, which is
+ * built for the slash form.
+ */
+export class SimS3NotificationFunctionArn {
+    regionName;
+    accountId;
+    functionName;
+    constructor(regionName, accountId, functionName) {
+        this.regionName = regionName;
+        this.accountId = accountId;
+        this.functionName = functionName;
+    }
+    /**
+     * Read a Lambda function ARN, refusing anything else.
+     *
+     * A qualified ARN naming a version or an alias is refused rather than being
+     * read as the unqualified function, because simulated Lambda has neither and
+     * silently notifying `$LATEST` instead would be the wrong function.
+     */
+    static parse(arn) {
+        const [prefix, partition, service, region, accountId, resourceType, name, qualifier,] = arn.split(":");
+        if (prefix !== "arn" ||
+            partition !== "aws" ||
+            service !== "lambda" ||
+            resourceType !== "function" ||
+            region === undefined ||
+            accountId === undefined ||
+            name === undefined ||
+            name === "") {
+            throw new SimS3InvalidArgument(`${arn} is not a Lambda function ARN.`);
+        }
+        if (qualifier !== undefined) {
+            throw new SimS3NotImplemented(`Cannot notify ${arn}: simulated Lambda has no function versions or ` +
+                "aliases, so a qualified function ARN is refused rather than " +
+                "treated as the unqualified function.");
+        }
+        return new SimS3NotificationFunctionArn(region, accountId, name);
+    }
+}
+//# sourceMappingURL=sim-s3-notification-function-arn.js.map

package/dist/service/s3/notification/destination/lambda/sim-s3-notification-function-arn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-notification-function-arn.js","sourceRoot":"","sources":["../../../../../../src/service/s3/notification/destination/lambda/sim-s3-notification-function-arn.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,gCAAgC,CAAC;AAExC;;;;;;GAMG;AACH,MAAM,OAAO,4BAA4B;IACvB,UAAU,CAAgB;IAC1B,SAAS,CAAkB;IAC3B,YAAY,CAAS;IAErC,YACE,UAAyB,EACzB,SAA0B,EAC1B,YAAoB;QAEpB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;IACnC,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,KAAK,CAAC,GAAW;QACtB,MAAM,CACJ,MAAM,EACN,SAAS,EACT,OAAO,EACP,MAAM,EACN,SAAS,EACT,YAAY,EACZ,IAAI,EACJ,SAAS,EACV,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAEnB,IACE,MAAM,KAAK,KAAK;YAChB,SAAS,KAAK,KAAK;YACnB,OAAO,KAAK,QAAQ;YACpB,YAAY,KAAK,UAAU;YAC3B,MAAM,KAAK,SAAS;YACpB,SAAS,KAAK,SAAS;YACvB,IAAI,KAAK,SAAS;YAClB,IAAI,KAAK,EAAE,EACX,CAAC;YACD,MAAM,IAAI,oBAAoB,CAAC,GAAG,GAAG,gCAAgC,CAAC,CAAC;QACzE,CAAC;QAED,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,IAAI,mBAAmB,CAC3B,iBAAiB,GAAG,iDAAiD;gBACnE,8DAA8D;gBAC9D,sCAAsC,CACzC,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,4BAA4B,CACrC,MAAuB,EACvB,SAA4B,EAC5B,IAAI,CACL,CAAC;IACJ,CAAC;CACF"}

package/dist/service/s3/notification/destination/lambda/sim-s3-notification-functions.d.ts

@@ -0,0 +1,23 @@
+import type { SimS3NotificationDestinationRequest } from "../sim-s3-notification-destination.js";
+/**
+ * The narrow slice of simulated Lambda that S3 event notification needs.
+ *
+ * S3 asks two questions of a function: whether it may invoke it, and then to
+ * invoke it. Both are asked by ARN, because a notification configuration names
+ * a function by ARN and that ARN can name another Account or Region.
+ */
+export interface SimS3NotificationFunctions {
+    /**
+     * Why S3 may not invoke the function, or nothing when it may.
+     *
+     * A reason rather than a boolean, because both the configuration-time
+     * refusal and the delivery-time record repeat it back to whoever has to fix
+     * it.
+     */
+    invokeRefusal(request: SimS3NotificationDestinationRequest): string | undefined;
+    /**
+     * Invoke the function with an event document.
+     */
+    invoke(request: SimS3NotificationDestinationRequest, event: object): Promise<void>;
+}
+//# sourceMappingURL=sim-s3-notification-functions.d.ts.map