@kensio/yulin 1.0.0 → 1.2.0

package/dist/service/lambda/event-source/sim-lambda-event-source-role-permissions.js

@@ -1,24 +1,15 @@
 import { SimLambdaInvalidParameterValueException } from "../error/sim-lambda.error.js";
 /**
- * What a function's execution role has to be allowed to do on a queue for
- * Lambda to poll it.
- *
- * These are the three operations real Lambda checks when an SQS event source
- * mapping is created, and the three its poller performs afterwards.
- */
-const requiredQueueOperations = [
-    "ReceiveMessage",
-    "DeleteMessage",
-    "GetQueueAttributes",
-];
-/**
- * Checks that a function's execution role may poll the queue a mapping names.
+ * Checks that a function's execution role may poll the source a mapping names.
  *
  * Real Lambda refuses to create the mapping at all when the role cannot poll,
  * rather than creating one that silently delivers nothing, so this is checked
  * up front here too. The poller's own calls go through simulated IAM again
  * afterwards, as they do on AWS: this check is about failing early, not about
  * standing in for authorization.
+ *
+ * What has to be allowed comes from the event source, since the operations a
+ * poller performs are the source's own.
  */
 export class SimLambdaEventSourceRolePermissions {
     iam;
@@ -26,19 +17,20 @@ export class SimLambdaEventSourceRolePermissions {
         this.iam = properties.iam;
     }
     /**
-     * Refuse a mapping whose execution role cannot poll the queue.
+     * Refuse a mapping whose execution role cannot poll the event source.
      */
-    assertMayPoll(roleArn, queueArn) {
-        for (const operation of requiredQueueOperations) {
+    assertMayPoll(roleArn, eventSourceArn) {
+        for (const permission of eventSourceArn.pollingPermissions) {
             const decision = this.iam.authorize({
-                action: `sqs:${operation}`,
-                resource: queueArn,
+                action: permission.action,
+                resource: permission.resource,
                 caller: { kind: "arn", arn: roleArn },
             });
             if (decision.isDenied) {
-                throw new SimLambdaInvalidParameterValueException(`The provided execution role does not have permissions to call ` +
-                    `${operation} on SQS. Role ${roleArn} has no policy allowing ` +
-                    `sqs:${operation} on ${queueArn}`);
+                throw new SimLambdaInvalidParameterValueException("The provided execution role does not have permissions to call " +
+                    `${permission.operationName} on ${eventSourceArn.serviceLabel}. ` +
+                    `Role ${roleArn} has no policy allowing ` +
+                    `${permission.action} on ${permission.resource}`);
             }
         }
     }

package/dist/service/lambda/event-source/sim-lambda-event-source-role-permissions.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda-event-source-role-permissions.js","sourceRoot":"","sources":["../../../../src/service/lambda/event-source/sim-lambda-event-source-role-permissions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uCAAuC,EAAE,MAAM,8BAA8B,CAAC;AAEvF;;;;;;GAMG;AACH,MAAM,uBAAuB,GAAG;IAC9B,gBAAgB;IAChB,eAAe;IACf,oBAAoB;CACZ,CAAC;AAMX;;;;;;;;GAQG;AACH,MAAM,OAAO,mCAAmC;IAC7B,GAAG,CAA0B;IAE9C,YAAY,UAAyD;QACnE,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,OAAe,EAAE,QAAgB;QAC7C,KAAK,MAAM,SAAS,IAAI,uBAAuB,EAAE,CAAC;YAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;gBAClC,MAAM,EAAE,OAAO,SAAS,EAAE;gBAC1B,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE;aACtC,CAAC,CAAC;YAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBACtB,MAAM,IAAI,uCAAuC,CAC/C,gEAAgE;oBAC9D,GAAG,SAAS,iBAAiB,OAAO,0BAA0B;oBAC9D,OAAO,SAAS,OAAO,QAAQ,EAAE,CACpC,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"sim-lambda-event-source-role-permissions.js","sourceRoot":"","sources":["../../../../src/service/lambda/event-source/sim-lambda-event-source-role-permissions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uCAAuC,EAAE,MAAM,8BAA8B,CAAC;AAOvF;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,mCAAmC;IAC7B,GAAG,CAA0B;IAE9C,YAAY,UAAyD;QACnE,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,aAAa,CACX,OAAe,EACf,cAAuC;QAEvC,KAAK,MAAM,UAAU,IAAI,cAAc,CAAC,kBAAkB,EAAE,CAAC;YAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;gBAClC,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,QAAQ,EAAE,UAAU,CAAC,QAAQ;gBAC7B,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE;aACtC,CAAC,CAAC;YAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBACtB,MAAM,IAAI,uCAAuC,CAC/C,gEAAgE;oBAC9D,GAAG,UAAU,CAAC,aAAa,OAAO,cAAc,CAAC,YAAY,IAAI;oBACjE,QAAQ,OAAO,0BAA0B;oBACzC,GAAG,UAAU,CAAC,MAAM,OAAO,UAAU,CAAC,QAAQ,EAAE,CACnD,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/service/lambda/function/policy/sim-lambda-permission.d.ts

@@ -15,6 +15,16 @@ export declare const simLambdaFunctionUrlAuthTypeConditionKey = "lambda:Function
  * something real AWS would only allow through the URL.
  */
 export declare const simLambdaInvokedViaFunctionUrlConditionKey = "lambda:InvokedViaFunctionUrl";
+/**
+ * The condition key naming what a simulated service is invoking the function
+ * for, such as the API Gateway route a request matched.
+ */
+export declare const simLambdaSourceArnConditionKey = "AWS:SourceArn";
+/**
+ * The condition key naming the Account the invoking simulated service resource
+ * belongs to.
+ */
+export declare const simLambdaSourceAccountConditionKey = "AWS:SourceAccount";
 interface SimLambdaPermissionProperties {
     readonly statementId: string;
     readonly action: string;
@@ -54,8 +64,9 @@ export declare class SimLambdaPermission {
      * The condition block the qualifying properties expand into.
      *
      * `lambda:FunctionUrlAuthType` is given a value when a Function URL is
-     * invoked, and `AWS:SourceArn` when an API Gateway HTTP API integration
-     * invokes the function. The rest are still written into the statement,
+     * invoked, and `AWS:SourceArn` and `AWS:SourceAccount` when a simulated
+     * service invokes the function. `aws:PrincipalOrgID` and
+     * `lambda:InvokedViaFunctionUrl` are still written into the statement,
      * because `GetPolicy` should report the permission that was granted; a
      * statement carrying one of them simply never matches, which is the safe
      * direction for a condition the simulator cannot evaluate.

package/dist/service/lambda/function/policy/sim-lambda-permission.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda-permission.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/function/policy/sim-lambda-permission.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAGV,6BAA6B,EAC9B,MAAM,uCAAuC,CAAC;AAG/C;;;;GAIG;AACH,eAAO,MAAM,wCAAwC,+BACvB,CAAC;AAE/B;;;;;;;;GAQG;AACH,eAAO,MAAM,0CAA0C,iCACvB,CAAC;AAEjC,UAAU,6BAA6B;IACrC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CACtD;AAED;;;;;;;;GAQG;AACH,qBAAa,mBAAmB;IAC9B,SAAgB,WAAW,EAAE,MAAM,CAAC;IACpC,SAAgB,MAAM,EAAE,MAAM,CAAC;IAC/B,SAAgB,SAAS,EAAE,MAAM,CAAC;IAClC,SAAgB,WAAW,EAAE,MAAM,CAAC;IAEpC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAqB;IAC1D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAqB;IAChD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAqB;IACpD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAqB;IACrD,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAsB;IAE7D,YAAY,UAAU,EAAE,6BAA6B,EAUpD;IAED;;OAEG;IACH,WAAW,IAAI,6BAA6B,CAW3C;IAED;;;;;;;;;OASG;IACH,OAAO,CAAC,SAAS;IAsBjB,OAAO,CAAC,sBAAsB;CAa/B"}
+{"version":3,"file":"sim-lambda-permission.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/function/policy/sim-lambda-permission.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAGV,6BAA6B,EAC9B,MAAM,uCAAuC,CAAC;AAG/C;;;;GAIG;AACH,eAAO,MAAM,wCAAwC,+BACvB,CAAC;AAE/B;;;;;;;;GAQG;AACH,eAAO,MAAM,0CAA0C,iCACvB,CAAC;AAEjC;;;GAGG;AACH,eAAO,MAAM,8BAA8B,kBAAkB,CAAC;AAE9D;;;GAGG;AACH,eAAO,MAAM,kCAAkC,sBAAsB,CAAC;AAEtE,UAAU,6BAA6B;IACrC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CACtD;AAED;;;;;;;;GAQG;AACH,qBAAa,mBAAmB;IAC9B,SAAgB,WAAW,EAAE,MAAM,CAAC;IACpC,SAAgB,MAAM,EAAE,MAAM,CAAC;IAC/B,SAAgB,SAAS,EAAE,MAAM,CAAC;IAClC,SAAgB,WAAW,EAAE,MAAM,CAAC;IAEpC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAqB;IAC1D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAqB;IAChD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAqB;IACpD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAqB;IACrD,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAsB;IAE7D,YAAY,UAAU,EAAE,6BAA6B,EAUpD;IAED;;OAEG;IACH,WAAW,IAAI,6BAA6B,CAW3C;IAED;;;;;;;;;;OAUG;IACH,OAAO,CAAC,SAAS;IAwBjB,OAAO,CAAC,sBAAsB;CAa/B"}

package/dist/service/lambda/function/policy/sim-lambda-permission.js

@@ -15,6 +15,16 @@ export const simLambdaFunctionUrlAuthTypeConditionKey = "lambda:FunctionUrlAuthT
  * something real AWS would only allow through the URL.
  */
 export const simLambdaInvokedViaFunctionUrlConditionKey = "lambda:InvokedViaFunctionUrl";
+/**
+ * The condition key naming what a simulated service is invoking the function
+ * for, such as the API Gateway route a request matched.
+ */
+export const simLambdaSourceArnConditionKey = "AWS:SourceArn";
+/**
+ * The condition key naming the Account the invoking simulated service resource
+ * belongs to.
+ */
+export const simLambdaSourceAccountConditionKey = "AWS:SourceAccount";
 /**
  * One statement of a simulated Lambda function's resource-based policy.
  *
@@ -63,8 +73,9 @@ export class SimLambdaPermission {
      * The condition block the qualifying properties expand into.
      *
      * `lambda:FunctionUrlAuthType` is given a value when a Function URL is
-     * invoked, and `AWS:SourceArn` when an API Gateway HTTP API integration
-     * invokes the function. The rest are still written into the statement,
+     * invoked, and `AWS:SourceArn` and `AWS:SourceAccount` when a simulated
+     * service invokes the function. `aws:PrincipalOrgID` and
+     * `lambda:InvokedViaFunctionUrl` are still written into the statement,
      * because `GetPolicy` should report the permission that was granted; a
      * statement carrying one of them simply never matches, which is the safe
      * direction for a condition the simulator cannot evaluate.
@@ -76,7 +87,9 @@ export class SimLambdaPermission {
             condition["StringEquals"] = stringEquals;
         }
         if (this.sourceArn !== undefined) {
-            condition["ArnLike"] = { "AWS:SourceArn": this.sourceArn };
+            condition["ArnLike"] = {
+                [simLambdaSourceArnConditionKey]: this.sourceArn,
+            };
         }
         if (this.invokedViaFunctionUrl !== undefined) {
             condition["Bool"] = {
@@ -91,7 +104,7 @@ export class SimLambdaPermission {
                 [simLambdaFunctionUrlAuthTypeConditionKey]: this.functionUrlAuthType,
             }),
             ...(this.sourceAccount !== undefined && {
-                "AWS:SourceAccount": this.sourceAccount,
+                [simLambdaSourceAccountConditionKey]: this.sourceAccount,
             }),
             ...(this.principalOrgId !== undefined && {
                 "aws:PrincipalOrgID": this.principalOrgId,

package/dist/service/lambda/function/policy/sim-lambda-permission.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda-permission.js","sourceRoot":"","sources":["../../../../../src/service/lambda/function/policy/sim-lambda-permission.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AAEpF;;;;GAIG;AACH,MAAM,CAAC,MAAM,wCAAwC,GACnD,4BAA4B,CAAC;AAE/B;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,0CAA0C,GACrD,8BAA8B,CAAC;AAcjC;;;;;;;;GAQG;AACH,MAAM,OAAO,mBAAmB;IACd,WAAW,CAAS;IACpB,MAAM,CAAS;IACf,SAAS,CAAS;IAClB,WAAW,CAAS;IAEnB,mBAAmB,CAAsB;IACzC,SAAS,CAAsB;IAC/B,aAAa,CAAsB;IACnC,cAAc,CAAsB;IACpC,qBAAqB,CAAuB;IAE7D,YAAY,UAAyC;QACnD,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,mBAAmB,GAAG,UAAU,CAAC,mBAAmB,CAAC;QAC1D,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;QAC9C,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,cAAc,CAAC;QAChD,IAAI,CAAC,qBAAqB,GAAG,UAAU,CAAC,qBAAqB,CAAC;IAChE,CAAC;IAED;;OAEG;IACH,WAAW;QACT,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAEnC,OAAO;YACL,GAAG,EAAE,IAAI,CAAC,WAAW;YACrB,MAAM,EAAE,OAAO;YACf,SAAS,EAAE,4BAA4B,CAAC,IAAI,CAAC,SAAS,CAAC;YACvD,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ,EAAE,IAAI,CAAC,WAAW;YAC1B,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;SACzD,CAAC;IACJ,CAAC;IAED;;;;;;;;;OASG;IACK,SAAS;QACf,MAAM,YAAY,GAAG,IAAI,CAAC,sBAAsB,EAAE,CAAC;QACnD,MAAM,SAAS,GAAyD,EAAE,CAAC;QAE3E,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzC,SAAS,CAAC,cAAc,CAAC,GAAG,YAAY,CAAC;QAC3C,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACjC,SAAS,CAAC,SAAS,CAAC,GAAG,EAAE,eAAe,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;QAC7D,CAAC;QAED,IAAI,IAAI,CAAC,qBAAqB,KAAK,SAAS,EAAE,CAAC;YAC7C,SAAS,CAAC,MAAM,CAAC,GAAG;gBAClB,CAAC,0CAA0C,CAAC,EAC1C,IAAI,CAAC,qBAAqB;aAC7B,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IACrE,CAAC;IAEO,sBAAsB;QAC5B,OAAO;YACL,GAAG,CAAC,IAAI,CAAC,mBAAmB,KAAK,SAAS,IAAI;gBAC5C,CAAC,wCAAwC,CAAC,EAAE,IAAI,CAAC,mBAAmB;aACrE,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS,IAAI;gBACtC,mBAAmB,EAAE,IAAI,CAAC,aAAa;aACxC,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,cAAc,KAAK,SAAS,IAAI;gBACvC,oBAAoB,EAAE,IAAI,CAAC,cAAc;aAC1C,CAAC;SACH,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-lambda-permission.js","sourceRoot":"","sources":["../../../../../src/service/lambda/function/policy/sim-lambda-permission.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AAEpF;;;;GAIG;AACH,MAAM,CAAC,MAAM,wCAAwC,GACnD,4BAA4B,CAAC;AAE/B;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,0CAA0C,GACrD,8BAA8B,CAAC;AAEjC;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,eAAe,CAAC;AAE9D;;;GAGG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,mBAAmB,CAAC;AActE;;;;;;;;GAQG;AACH,MAAM,OAAO,mBAAmB;IACd,WAAW,CAAS;IACpB,MAAM,CAAS;IACf,SAAS,CAAS;IAClB,WAAW,CAAS;IAEnB,mBAAmB,CAAsB;IACzC,SAAS,CAAsB;IAC/B,aAAa,CAAsB;IACnC,cAAc,CAAsB;IACpC,qBAAqB,CAAuB;IAE7D,YAAY,UAAyC;QACnD,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,mBAAmB,GAAG,UAAU,CAAC,mBAAmB,CAAC;QAC1D,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;QAC9C,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,cAAc,CAAC;QAChD,IAAI,CAAC,qBAAqB,GAAG,UAAU,CAAC,qBAAqB,CAAC;IAChE,CAAC;IAED;;OAEG;IACH,WAAW;QACT,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAEnC,OAAO;YACL,GAAG,EAAE,IAAI,CAAC,WAAW;YACrB,MAAM,EAAE,OAAO;YACf,SAAS,EAAE,4BAA4B,CAAC,IAAI,CAAC,SAAS,CAAC;YACvD,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ,EAAE,IAAI,CAAC,WAAW;YAC1B,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;SACzD,CAAC;IACJ,CAAC;IAED;;;;;;;;;;OAUG;IACK,SAAS;QACf,MAAM,YAAY,GAAG,IAAI,CAAC,sBAAsB,EAAE,CAAC;QACnD,MAAM,SAAS,GAAyD,EAAE,CAAC;QAE3E,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzC,SAAS,CAAC,cAAc,CAAC,GAAG,YAAY,CAAC;QAC3C,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACjC,SAAS,CAAC,SAAS,CAAC,GAAG;gBACrB,CAAC,8BAA8B,CAAC,EAAE,IAAI,CAAC,SAAS;aACjD,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,qBAAqB,KAAK,SAAS,EAAE,CAAC;YAC7C,SAAS,CAAC,MAAM,CAAC,GAAG;gBAClB,CAAC,0CAA0C,CAAC,EAC1C,IAAI,CAAC,qBAAqB;aAC7B,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IACrE,CAAC;IAEO,sBAAsB;QAC5B,OAAO;YACL,GAAG,CAAC,IAAI,CAAC,mBAAmB,KAAK,SAAS,IAAI;gBAC5C,CAAC,wCAAwC,CAAC,EAAE,IAAI,CAAC,mBAAmB;aACrE,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS,IAAI;gBACtC,CAAC,kCAAkC,CAAC,EAAE,IAAI,CAAC,aAAa;aACzD,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,cAAc,KAAK,SAAS,IAAI;gBACvC,oBAAoB,EAAE,IAAI,CAAC,cAAc;aAC1C,CAAC;SACH,CAAC;IACJ,CAAC;CACF"}

package/dist/service/s3/bucket/notification/sim-s3-lambda-notification.d.ts

@@ -0,0 +1,21 @@
+import type { SimS3LambdaFunctionConfigurationInput } from "../../command/put-bucket-notification-configuration/put-bucket-notification-configuration.command.js";
+import type { SimS3NotificationDestinationService } from "../../notification/destination/sim-s3-notification-destination.js";
+import { SimS3Notification } from "./sim-s3-notification.js";
+/**
+ * One Lambda function destination in a Bucket's notification configuration.
+ */
+export declare class SimS3LambdaNotification extends SimS3Notification {
+    /**
+     * The kind of destination this configuration was declared for.
+     */
+    readonly destinationService: SimS3NotificationDestinationService;
+    /**
+     * Read one LambdaFunctionConfigurations entry.
+     */
+    static fromInput(configuration: SimS3LambdaFunctionConfigurationInput): SimS3LambdaNotification;
+    /**
+     * This configuration as GetBucketNotificationConfiguration reports it.
+     */
+    toOutput(): SimS3LambdaFunctionConfigurationInput;
+}
+//# sourceMappingURL=sim-s3-lambda-notification.d.ts.map

package/dist/service/s3/bucket/notification/sim-s3-lambda-notification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-lambda-notification.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/bucket/notification/sim-s3-lambda-notification.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,sGAAsG,CAAC;AAClK,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,mEAAmE,CAAC;AAC7H,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAG7D;;GAEG;AACH,qBAAa,uBAAwB,SAAQ,iBAAiB;IAC5D;;OAEG;IACH,SAAgB,kBAAkB,EAAE,mCAAmC,CAC5D;IAEX;;OAEG;IACH,MAAM,CAAC,SAAS,CACd,aAAa,EAAE,qCAAqC,GACnD,uBAAuB,CASzB;IAED;;OAEG;IACH,QAAQ,IAAI,qCAAqC,CAEhD;CACF"}

package/dist/service/s3/bucket/notification/sim-s3-lambda-notification.js

@@ -0,0 +1,25 @@
+import { SimS3Notification } from "./sim-s3-notification.js";
+import { simS3NotificationProperties } from "./sim-s3-notification-properties.js";
+/**
+ * One Lambda function destination in a Bucket's notification configuration.
+ */
+export class SimS3LambdaNotification extends SimS3Notification {
+    /**
+     * The kind of destination this configuration was declared for.
+     */
+    destinationService = "lambda";
+    /**
+     * Read one LambdaFunctionConfigurations entry.
+     */
+    static fromInput(configuration) {
+        return new SimS3LambdaNotification(simS3NotificationProperties(configuration, configuration.LambdaFunctionArn, "A Lambda function notification configuration must name a " +
+            "LambdaFunctionArn."));
+    }
+    /**
+     * This configuration as GetBucketNotificationConfiguration reports it.
+     */
+    toOutput() {
+        return { ...this.reported(), LambdaFunctionArn: this.destinationArn };
+    }
+}
+//# sourceMappingURL=sim-s3-lambda-notification.js.map

package/dist/service/s3/bucket/notification/sim-s3-lambda-notification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-lambda-notification.js","sourceRoot":"","sources":["../../../../../src/service/s3/bucket/notification/sim-s3-lambda-notification.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAC;AAElF;;GAEG;AACH,MAAM,OAAO,uBAAwB,SAAQ,iBAAiB;IAC5D;;OAEG;IACa,kBAAkB,GAChC,QAAQ,CAAC;IAEX;;OAEG;IACH,MAAM,CAAC,SAAS,CACd,aAAoD;QAEpD,OAAO,IAAI,uBAAuB,CAChC,2BAA2B,CACzB,aAAa,EACb,aAAa,CAAC,iBAAiB,EAC/B,2DAA2D;YACzD,oBAAoB,CACvB,CACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,EAAE,iBAAiB,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC;IACxE,CAAC;CACF"}

package/dist/service/s3/bucket/notification/sim-s3-notification-configuration-reader.d.ts

@@ -0,0 +1,23 @@
+import type { SimS3NotificationConfigurationInput } from "../../command/put-bucket-notification-configuration/put-bucket-notification-configuration.command.js";
+import { SimS3NotificationConfiguration } from "./sim-s3-notification-configuration.js";
+/**
+ * Reads a PutBucketNotificationConfiguration request into a Bucket's stored
+ * configuration.
+ *
+ * Each destination group reads its own entries, since the ARN is the only part
+ * they spell differently. What is left here is the pair of rules that are about
+ * the configuration as a whole rather than about one entry of it, and both look
+ * across the groups: real S3 refuses a function and a queue that share an id or
+ * want the same event as readily as it refuses two functions.
+ *
+ * Everything the request states is checked before anything is stored, so a
+ * request the simulator refuses leaves the Bucket's previous configuration
+ * exactly as it was.
+ */
+export declare class SimS3NotificationConfigurationReader {
+    /**
+     * Read a whole notification configuration.
+     */
+    read(input: SimS3NotificationConfigurationInput): SimS3NotificationConfiguration;
+}
+//# sourceMappingURL=sim-s3-notification-configuration-reader.d.ts.map

package/dist/service/s3/bucket/notification/sim-s3-notification-configuration-reader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-notification-configuration-reader.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/bucket/notification/sim-s3-notification-configuration-reader.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,sGAAsG,CAAC;AAEhK,OAAO,EAAE,8BAA8B,EAAE,MAAM,wCAAwC,CAAC;AAMxF;;;;;;;;;;;;;GAaG;AACH,qBAAa,oCAAoC;IAC/C;;OAEG;IACH,IAAI,CACF,KAAK,EAAE,mCAAmC,GACzC,8BAA8B,CAgBhC;CACF"}

package/dist/service/s3/bucket/notification/sim-s3-notification-configuration-reader.js

@@ -0,0 +1,36 @@
+import { SimS3LambdaNotification } from "./sim-s3-lambda-notification.js";
+import { SimS3NotificationConfiguration } from "./sim-s3-notification-configuration.js";
+import { simS3AssertNotificationIdsAreUnique } from "./sim-s3-notification-ids.js";
+import { simS3AssertNoNotificationOverlap } from "./sim-s3-notification-overlap.js";
+import { SimS3QueueNotification } from "./sim-s3-queue-notification.js";
+import { simS3RefuseUnsimulatedDestinations } from "./sim-s3-unsimulated-notification-destinations.js";
+/**
+ * Reads a PutBucketNotificationConfiguration request into a Bucket's stored
+ * configuration.
+ *
+ * Each destination group reads its own entries, since the ARN is the only part
+ * they spell differently. What is left here is the pair of rules that are about
+ * the configuration as a whole rather than about one entry of it, and both look
+ * across the groups: real S3 refuses a function and a queue that share an id or
+ * want the same event as readily as it refuses two functions.
+ *
+ * Everything the request states is checked before anything is stored, so a
+ * request the simulator refuses leaves the Bucket's previous configuration
+ * exactly as it was.
+ */
+export class SimS3NotificationConfigurationReader {
+    /**
+     * Read a whole notification configuration.
+     */
+    read(input) {
+        simS3RefuseUnsimulatedDestinations(input);
+        const configuration = new SimS3NotificationConfiguration({
+            lambdaNotifications: (input.LambdaFunctionConfigurations ?? []).map((entry) => SimS3LambdaNotification.fromInput(entry)),
+            queueNotifications: (input.QueueConfigurations ?? []).map((entry) => SimS3QueueNotification.fromInput(entry)),
+        });
+        simS3AssertNotificationIdsAreUnique(configuration.all);
+        simS3AssertNoNotificationOverlap(configuration.all);
+        return configuration;
+    }
+}
+//# sourceMappingURL=sim-s3-notification-configuration-reader.js.map

package/dist/service/s3/bucket/notification/sim-s3-notification-configuration-reader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-notification-configuration-reader.js","sourceRoot":"","sources":["../../../../../src/service/s3/bucket/notification/sim-s3-notification-configuration-reader.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EAAE,8BAA8B,EAAE,MAAM,wCAAwC,CAAC;AACxF,OAAO,EAAE,mCAAmC,EAAE,MAAM,8BAA8B,CAAC;AACnF,OAAO,EAAE,gCAAgC,EAAE,MAAM,kCAAkC,CAAC;AACpF,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,kCAAkC,EAAE,MAAM,mDAAmD,CAAC;AAEvG;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,oCAAoC;IAC/C;;OAEG;IACH,IAAI,CACF,KAA0C;QAE1C,kCAAkC,CAAC,KAAK,CAAC,CAAC;QAE1C,MAAM,aAAa,GAAG,IAAI,8BAA8B,CAAC;YACvD,mBAAmB,EAAE,CAAC,KAAK,CAAC,4BAA4B,IAAI,EAAE,CAAC,CAAC,GAAG,CACjE,CAAC,KAAK,EAAE,EAAE,CAAC,uBAAuB,CAAC,SAAS,CAAC,KAAK,CAAC,CACpD;YACD,kBAAkB,EAAE,CAAC,KAAK,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAClE,sBAAsB,CAAC,SAAS,CAAC,KAAK,CAAC,CACxC;SACF,CAAC,CAAC;QAEH,mCAAmC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QACvD,gCAAgC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAEpD,OAAO,aAAa,CAAC;IACvB,CAAC;CACF"}

package/dist/service/s3/bucket/notification/sim-s3-notification-configuration.d.ts

@@ -0,0 +1,47 @@
+import type { SimS3NotificationConfigurationOutput } from "../../command/get-bucket-notification-configuration/get-bucket-notification-configuration.command.js";
+import type { SimS3LambdaNotification } from "./sim-s3-lambda-notification.js";
+import type { SimS3Notification } from "./sim-s3-notification.js";
+import type { SimS3NotificationEvent } from "./sim-s3-notification-event.js";
+import type { SimS3QueueNotification } from "./sim-s3-queue-notification.js";
+interface SimS3NotificationConfigurationProperties {
+    readonly lambdaNotifications?: readonly SimS3LambdaNotification[];
+    readonly queueNotifications?: readonly SimS3QueueNotification[];
+}
+/**
+ * The event notification configuration of one simulated S3 Bucket.
+ *
+ * A Bucket has one configuration rather than a list of them, which is why
+ * PutBucketNotificationConfiguration replaces the whole thing: real S3 has no
+ * way to add one destination without restating the others.
+ *
+ * The destination groups are held apart because that is how they go in and come
+ * back out. Everything that acts on a configuration, the overlap rule, the
+ * destination check and delivery, works on `all` instead, since none of them
+ * cares which kind of destination it is looking at.
+ */
+export declare class SimS3NotificationConfiguration {
+    readonly lambdaNotifications: readonly SimS3LambdaNotification[];
+    readonly queueNotifications: readonly SimS3QueueNotification[];
+    constructor(properties?: SimS3NotificationConfigurationProperties);
+    /**
+     * The configuration a Bucket nobody has configured has.
+     */
+    static empty(): SimS3NotificationConfiguration;
+    /**
+     * Every configured destination, whatever kind it is.
+     */
+    get all(): readonly SimS3Notification[];
+    /**
+     * The destinations an event about an object key should reach.
+     */
+    matching(event: SimS3NotificationEvent, key: string): readonly SimS3Notification[];
+    /**
+     * This configuration as GetBucketNotificationConfiguration reports it.
+     *
+     * A destination group with nothing in it is left out rather than reported
+     * empty, which is what real S3 answers for a Bucket with no configuration.
+     */
+    toOutput(): SimS3NotificationConfigurationOutput;
+}
+export {};
+//# sourceMappingURL=sim-s3-notification-configuration.d.ts.map

package/dist/service/s3/bucket/notification/sim-s3-notification-configuration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-notification-configuration.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/bucket/notification/sim-s3-notification-configuration.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oCAAoC,EAAE,MAAM,sGAAsG,CAAC;AACjK,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC/E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAC7E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAE7E,UAAU,wCAAwC;IAChD,QAAQ,CAAC,mBAAmB,CAAC,EAAE,SAAS,uBAAuB,EAAE,CAAC;IAClE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,sBAAsB,EAAE,CAAC;CACjE;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,8BAA8B;IACzC,SAAgB,mBAAmB,EAAE,SAAS,uBAAuB,EAAE,CAAC;IACxE,SAAgB,kBAAkB,EAAE,SAAS,sBAAsB,EAAE,CAAC;IAEtE,YAAY,UAAU,GAAE,wCAA6C,EAGpE;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,IAAI,8BAA8B,CAE7C;IAED;;OAEG;IACH,IAAI,GAAG,IAAI,SAAS,iBAAiB,EAAE,CAEtC;IAED;;OAEG;IACH,QAAQ,CACN,KAAK,EAAE,sBAAsB,EAC7B,GAAG,EAAE,MAAM,GACV,SAAS,iBAAiB,EAAE,CAE9B;IAED;;;;;OAKG;IACH,QAAQ,IAAI,oCAAoC,CAa/C;CACF"}

package/dist/service/s3/bucket/notification/sim-s3-notification-configuration.js

@@ -0,0 +1,55 @@
+/**
+ * The event notification configuration of one simulated S3 Bucket.
+ *
+ * A Bucket has one configuration rather than a list of them, which is why
+ * PutBucketNotificationConfiguration replaces the whole thing: real S3 has no
+ * way to add one destination without restating the others.
+ *
+ * The destination groups are held apart because that is how they go in and come
+ * back out. Everything that acts on a configuration, the overlap rule, the
+ * destination check and delivery, works on `all` instead, since none of them
+ * cares which kind of destination it is looking at.
+ */
+export class SimS3NotificationConfiguration {
+    lambdaNotifications;
+    queueNotifications;
+    constructor(properties = {}) {
+        this.lambdaNotifications = properties.lambdaNotifications ?? [];
+        this.queueNotifications = properties.queueNotifications ?? [];
+    }
+    /**
+     * The configuration a Bucket nobody has configured has.
+     */
+    static empty() {
+        return new SimS3NotificationConfiguration();
+    }
+    /**
+     * Every configured destination, whatever kind it is.
+     */
+    get all() {
+        return [...this.lambdaNotifications, ...this.queueNotifications];
+    }
+    /**
+     * The destinations an event about an object key should reach.
+     */
+    matching(event, key) {
+        return this.all.filter((notification) => notification.matches(event, key));
+    }
+    /**
+     * This configuration as GetBucketNotificationConfiguration reports it.
+     *
+     * A destination group with nothing in it is left out rather than reported
+     * empty, which is what real S3 answers for a Bucket with no configuration.
+     */
+    toOutput() {
+        return {
+            ...(this.lambdaNotifications.length > 0 && {
+                LambdaFunctionConfigurations: this.lambdaNotifications.map((notification) => notification.toOutput()),
+            }),
+            ...(this.queueNotifications.length > 0 && {
+                QueueConfigurations: this.queueNotifications.map((notification) => notification.toOutput()),
+            }),
+        };
+    }
+}
+//# sourceMappingURL=sim-s3-notification-configuration.js.map

package/dist/service/s3/bucket/notification/sim-s3-notification-configuration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-notification-configuration.js","sourceRoot":"","sources":["../../../../../src/service/s3/bucket/notification/sim-s3-notification-configuration.ts"],"names":[],"mappings":"AAWA;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,8BAA8B;IACzB,mBAAmB,CAAqC;IACxD,kBAAkB,CAAoC;IAEtE,YAAY,UAAU,GAA6C,EAAE;QACnE,IAAI,CAAC,mBAAmB,GAAG,UAAU,CAAC,mBAAmB,IAAI,EAAE,CAAC;QAChE,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,IAAI,EAAE,CAAC;IAChE,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK;QACV,OAAO,IAAI,8BAA8B,EAAE,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,IAAI,GAAG;QACL,OAAO,CAAC,GAAG,IAAI,CAAC,mBAAmB,EAAE,GAAG,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACnE,CAAC;IAED;;OAEG;IACH,QAAQ,CACN,KAA6B,EAC7B,GAAW;QAEX,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;IAC7E,CAAC;IAED;;;;;OAKG;IACH,QAAQ;QACN,OAAO;YACL,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,MAAM,GAAG,CAAC,IAAI;gBACzC,4BAA4B,EAAE,IAAI,CAAC,mBAAmB,CAAC,GAAG,CACxD,CAAC,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,CAC1C;aACF,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,IAAI;gBACxC,mBAAmB,EAAE,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE,CAChE,YAAY,CAAC,QAAQ,EAAE,CACxB;aACF,CAAC;SACH,CAAC;IACJ,CAAC;CACF"}

package/dist/service/s3/bucket/notification/sim-s3-notification-event.d.ts

@@ -0,0 +1,18 @@
+/**
+ * The event types simulated S3 can actually raise.
+ *
+ * These are the concrete members that a configured event expands to. Real S3
+ * has many more, and the ones it has that this simulator cannot produce are
+ * refused by name rather than accepted and never delivered.
+ */
+export declare const SIM_S3_NOTIFICATION_EVENTS: readonly ["s3:ObjectCreated:Put", "s3:ObjectRemoved:Delete"];
+export type SimS3NotificationEvent = (typeof SIM_S3_NOTIFICATION_EVENTS)[number];
+/**
+ * The concrete events a configured event type covers.
+ *
+ * An event type real S3 has but this simulator cannot raise is refused as not
+ * implemented. Anything else is not an S3 event type at all, which is what
+ * real S3 answers InvalidArgument to.
+ */
+export declare function simS3ExpandNotificationEvent(event: string): readonly SimS3NotificationEvent[];
+//# sourceMappingURL=sim-s3-notification-event.d.ts.map

package/dist/service/s3/bucket/notification/sim-s3-notification-event.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-notification-event.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/bucket/notification/sim-s3-notification-event.ts"],"names":[],"mappings":"AAMA;;;;;;GAMG;AACH,eAAO,MAAM,0BAA0B,YACrC,sBAAsB,EACtB,yBAAyB,CACjB,CAAC;AAEX,MAAM,MAAM,sBAAsB,GAChC,CAAC,OAAO,0BAA0B,CAAC,CAAC,MAAM,CAAC,CAAC;AAqB9C;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,MAAM,GACZ,SAAS,sBAAsB,EAAE,CAiBnC"}

package/dist/service/s3/bucket/notification/sim-s3-notification-event.js

@@ -0,0 +1,50 @@
+import { SimS3InvalidArgument, SimS3NotImplemented, } from "../../error/sim-s3.error.js";
+import { SIM_S3_UNSIMULATED_NOTIFICATION_EVENTS } from "./sim-s3-unsimulated-notification-events.js";
+/**
+ * The event types simulated S3 can actually raise.
+ *
+ * These are the concrete members that a configured event expands to. Real S3
+ * has many more, and the ones it has that this simulator cannot produce are
+ * refused by name rather than accepted and never delivered.
+ */
+export const SIM_S3_NOTIFICATION_EVENTS = [
+    "s3:ObjectCreated:Put",
+    "s3:ObjectRemoved:Delete",
+];
+/**
+ * What each configurable event type expands to.
+ *
+ * A `:*` event is expanded before anything compares two configurations,
+ * because the overlap rule is about event sets rather than event strings: real
+ * S3 refuses `s3:ObjectCreated:*` alongside `s3:ObjectCreated:Put` on the same
+ * filter, and comparing the two as strings would accept it.
+ *
+ * The wildcards expand only to the members this simulator can raise. The other
+ * members are refused by name, so nothing can configure one and then wonder
+ * why the wildcard never covered it.
+ */
+const eventExpansions = new Map([
+    ["s3:ObjectCreated:*", ["s3:ObjectCreated:Put"]],
+    ["s3:ObjectCreated:Put", ["s3:ObjectCreated:Put"]],
+    ["s3:ObjectRemoved:*", ["s3:ObjectRemoved:Delete"]],
+    ["s3:ObjectRemoved:Delete", ["s3:ObjectRemoved:Delete"]],
+]);
+/**
+ * The concrete events a configured event type covers.
+ *
+ * An event type real S3 has but this simulator cannot raise is refused as not
+ * implemented. Anything else is not an S3 event type at all, which is what
+ * real S3 answers InvalidArgument to.
+ */
+export function simS3ExpandNotificationEvent(event) {
+    const expansion = eventExpansions.get(event);
+    if (expansion !== undefined) {
+        return expansion;
+    }
+    if (SIM_S3_UNSIMULATED_NOTIFICATION_EVENTS.has(event)) {
+        throw new SimS3NotImplemented(`Simulated S3 does not raise the event type ${event}. It raises ` +
+            `${eventExpansions.keys().toArray().join(", ")}.`);
+    }
+    throw new SimS3InvalidArgument(`The event ${event} is not a supported S3 event type.`);
+}
+//# sourceMappingURL=sim-s3-notification-event.js.map

package/dist/service/s3/bucket/notification/sim-s3-notification-event.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-notification-event.js","sourceRoot":"","sources":["../../../../../src/service/s3/bucket/notification/sim-s3-notification-event.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,sCAAsC,EAAE,MAAM,6CAA6C,CAAC;AAErG;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,sBAAsB;IACtB,yBAAyB;CACjB,CAAC;AAKX;;;;;;;;;;;GAWG;AACH,MAAM,eAAe,GAAG,IAAI,GAAG,CAA4C;IACzE,CAAC,oBAAoB,EAAE,CAAC,sBAAsB,CAAC,CAAC;IAChD,CAAC,sBAAsB,EAAE,CAAC,sBAAsB,CAAC,CAAC;IAClD,CAAC,oBAAoB,EAAE,CAAC,yBAAyB,CAAC,CAAC;IACnD,CAAC,yBAAyB,EAAE,CAAC,yBAAyB,CAAC,CAAC;CACzD,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,UAAU,4BAA4B,CAC1C,KAAa;IAEb,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAE7C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,sCAAsC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,mBAAmB,CAC3B,8CAA8C,KAAK,cAAc;YAC/D,GAAG,eAAe,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACpD,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,oBAAoB,CAC5B,aAAa,KAAK,oCAAoC,CACvD,CAAC;AACJ,CAAC"}

package/dist/service/s3/bucket/notification/sim-s3-notification-filter.d.ts

@@ -0,0 +1,42 @@
+import type { SimS3NotificationFilterInput } from "../../command/put-bucket-notification-configuration/put-bucket-notification-configuration.command.js";
+/**
+ * The object key filter of one notification configuration.
+ *
+ * An absent prefix or suffix is held as an empty string rather than as
+ * undefined, because that is what it means to S3: the root prefix matches every
+ * key and overlaps every other prefix, and the same goes for the root suffix.
+ */
+export declare class SimS3NotificationFilter {
+    readonly prefix: string;
+    readonly suffix: string;
+    constructor(prefix?: string, suffix?: string);
+    /**
+     * Read the filter of one notification configuration.
+     *
+     * A filter rule name S3 does not have is refused by name, as is a rule name
+     * repeated twice, which real S3 refuses rather than taking the last one.
+     */
+    static fromInput(filter: SimS3NotificationFilterInput | undefined): SimS3NotificationFilter;
+    /**
+     * Whether an object key passes this filter.
+     */
+    matches(key: string): boolean;
+    /**
+     * Whether some object key could pass both this filter and another.
+     *
+     * Two prefixes overlap when a key could begin with both, which is to say
+     * when one is a prefix of the other, and two suffixes overlap on the same
+     * reasoning at the other end. A filter pair only conflicts when both ends
+     * overlap: `images` with `.jpg` and `images` with `.png` share a prefix but
+     * no key ends both ways, which is why real S3 accepts that pair.
+     */
+    overlaps(other: SimS3NotificationFilter): boolean;
+    /**
+     * This filter as a notification configuration reports it, or nothing when it
+     * filters nothing.
+     */
+    toOutput(): SimS3NotificationFilterInput | undefined;
+    private prefixesOverlap;
+    private suffixesOverlap;
+}
+//# sourceMappingURL=sim-s3-notification-filter.d.ts.map

package/dist/service/s3/bucket/notification/sim-s3-notification-filter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-notification-filter.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/bucket/notification/sim-s3-notification-filter.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,4BAA4B,EAE7B,MAAM,sGAAsG,CAAC;AAE9G;;;;;;GAMG;AACH,qBAAa,uBAAuB;IAClC,SAAgB,MAAM,EAAE,MAAM,CAAC;IAC/B,SAAgB,MAAM,EAAE,MAAM,CAAC;IAE/B,YAAY,MAAM,SAAK,EAAE,MAAM,SAAK,EAGnC;IAED;;;;;OAKG;IACH,MAAM,CAAC,SAAS,CACd,MAAM,EAAE,4BAA4B,GAAG,SAAS,GAC/C,uBAAuB,CAqBzB;IAED;;OAEG;IACH,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAE5B;IAED;;;;;;;;OAQG;IACH,QAAQ,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAIhD;IAED;;;OAGG;IACH,QAAQ,IAAI,4BAA4B,GAAG,SAAS,CAgBnD;IAED,OAAO,CAAC,eAAe;IAIvB,OAAO,CAAC,eAAe;CAGxB"}

package/dist/service/s3/bucket/notification/sim-s3-notification-filter.js

@@ -0,0 +1,91 @@
+import { SimS3InvalidArgument } from "../../error/sim-s3.error.js";
+/**
+ * The object key filter of one notification configuration.
+ *
+ * An absent prefix or suffix is held as an empty string rather than as
+ * undefined, because that is what it means to S3: the root prefix matches every
+ * key and overlaps every other prefix, and the same goes for the root suffix.
+ */
+export class SimS3NotificationFilter {
+    prefix;
+    suffix;
+    constructor(prefix = "", suffix = "") {
+        this.prefix = prefix;
+        this.suffix = suffix;
+    }
+    /**
+     * Read the filter of one notification configuration.
+     *
+     * A filter rule name S3 does not have is refused by name, as is a rule name
+     * repeated twice, which real S3 refuses rather than taking the last one.
+     */
+    static fromInput(filter) {
+        const rules = filter?.Key?.FilterRules ?? [];
+        const values = new Map();
+        for (const rule of rules) {
+            const name = simS3NotificationFilterRuleName(rule);
+            if (values.has(name)) {
+                throw new SimS3InvalidArgument(`Filter rule ${name} is specified more than once in one ` +
+                    "notification configuration.");
+            }
+            values.set(name, rule.Value ?? "");
+        }
+        return new SimS3NotificationFilter(values.get("prefix"), values.get("suffix"));
+    }
+    /**
+     * Whether an object key passes this filter.
+     */
+    matches(key) {
+        return key.startsWith(this.prefix) && key.endsWith(this.suffix);
+    }
+    /**
+     * Whether some object key could pass both this filter and another.
+     *
+     * Two prefixes overlap when a key could begin with both, which is to say
+     * when one is a prefix of the other, and two suffixes overlap on the same
+     * reasoning at the other end. A filter pair only conflicts when both ends
+     * overlap: `images` with `.jpg` and `images` with `.png` share a prefix but
+     * no key ends both ways, which is why real S3 accepts that pair.
+     */
+    overlaps(other) {
+        return (this.prefixesOverlap(other.prefix) && this.suffixesOverlap(other.suffix));
+    }
+    /**
+     * This filter as a notification configuration reports it, or nothing when it
+     * filters nothing.
+     */
+    toOutput() {
+        const rules = [];
+        if (this.prefix !== "") {
+            rules.push({ Name: "prefix", Value: this.prefix });
+        }
+        if (this.suffix !== "") {
+            rules.push({ Name: "suffix", Value: this.suffix });
+        }
+        if (rules.length === 0) {
+            return undefined;
+        }
+        return { Key: { FilterRules: rules } };
+    }
+    prefixesOverlap(other) {
+        return this.prefix.startsWith(other) || other.startsWith(this.prefix);
+    }
+    suffixesOverlap(other) {
+        return this.suffix.endsWith(other) || other.endsWith(this.suffix);
+    }
+}
+/**
+ * The filter rule name a rule names, refusing anything S3 does not filter on.
+ *
+ * The name is matched case-insensitively because the SDK and the REST XML
+ * disagree about the capitalisation, while the value is taken as written.
+ */
+function simS3NotificationFilterRuleName(rule) {
+    const name = (rule.Name ?? "").toLowerCase();
+    if (name !== "prefix" && name !== "suffix") {
+        throw new SimS3InvalidArgument(`Unsupported notification filter rule name ${rule.Name ?? "(none)"}. ` +
+            "S3 filters object keys on prefix and suffix.");
+    }
+    return name;
+}
+//# sourceMappingURL=sim-s3-notification-filter.js.map

package/dist/service/s3/bucket/notification/sim-s3-notification-filter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-notification-filter.js","sourceRoot":"","sources":["../../../../../src/service/s3/bucket/notification/sim-s3-notification-filter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAMnE;;;;;;GAMG;AACH,MAAM,OAAO,uBAAuB;IAClB,MAAM,CAAS;IACf,MAAM,CAAS;IAE/B,YAAY,MAAM,GAAG,EAAE,EAAE,MAAM,GAAG,EAAE;QAClC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,SAAS,CACd,MAAgD;QAEhD,MAAM,KAAK,GAAG,MAAM,EAAE,GAAG,EAAE,WAAW,IAAI,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;QAEzC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,+BAA+B,CAAC,IAAI,CAAC,CAAC;YAEnD,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrB,MAAM,IAAI,oBAAoB,CAC5B,eAAe,IAAI,sCAAsC;oBACvD,6BAA6B,CAChC,CAAC;YACJ,CAAC;YAED,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QACrC,CAAC;QAED,OAAO,IAAI,uBAAuB,CAChC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,EACpB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CACrB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,GAAW;QACjB,OAAO,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAClE,CAAC;IAED;;;;;;;;OAQG;IACH,QAAQ,CAAC,KAA8B;QACrC,OAAO,CACL,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CACzE,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,QAAQ;QACN,MAAM,KAAK,GAAuC,EAAE,CAAC;QAErD,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACrD,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACrD,CAAC;QAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,CAAC;IACzC,CAAC;IAEO,eAAe,CAAC,KAAa;QACnC,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxE,CAAC;IAEO,eAAe,CAAC,KAAa;QACnC,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACpE,CAAC;CACF;AAED;;;;;GAKG;AACH,SAAS,+BAA+B,CACtC,IAAsC;IAEtC,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAE7C,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC3C,MAAM,IAAI,oBAAoB,CAC5B,6CAA6C,IAAI,CAAC,IAAI,IAAI,QAAQ,IAAI;YACpE,8CAA8C,CACjD,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}