@kensio/yulin 1.0.0 → 1.2.0

package/dist/service/s3/command/put-bucket-notification-configuration/put-bucket-notification-configuration.handler.js

@@ -0,0 +1,50 @@
+import { BackgroundTasks, } from "../../../../util/background/background.js";
+import { assertDefined } from "../../../../util/type-guard/defined.js";
+import { SimIamAllowAllAuth, } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import { SimS3NotificationConfigurationReader } from "../../bucket/notification/sim-s3-notification-configuration-reader.js";
+import { SimS3NotificationDestinationCheck } from "../../notification/destination/sim-s3-notification-destination-check.js";
+import { SimS3NotificationAuthorizer } from "../notification/sim-s3-notification-authorizer.js";
+import { requireSimS3Bucket } from "../require-sim-s3-bucket.js";
+/**
+ * Simulated S3 PutBucketNotificationConfiguration command handler.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/s3/command/PutBucketNotificationConfigurationCommand/
+ */
+export class PutBucketNotificationConfigurationCommandHandler {
+    buckets;
+    authorizer;
+    background;
+    destinations;
+    reader = new SimS3NotificationConfigurationReader();
+    constructor(properties) {
+        const { buckets, iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), notificationDestinations, } = properties;
+        this.buckets = buckets;
+        this.authorizer = new SimS3NotificationAuthorizer({ iam });
+        this.background = background;
+        this.destinations = new SimS3NotificationDestinationCheck(notificationDestinations);
+    }
+    /**
+     * Replace a Bucket's whole event notification configuration.
+     *
+     * The request is read, then every destination it names is checked, and only
+     * then is anything stored, so a request the simulator refuses leaves the
+     * Bucket's previous configuration exactly as it was.
+     */
+    async handle(command, options) {
+        const input = command.input;
+        assertDefined(input.Bucket, "PutBucketNotificationConfigurationCommand.input.Bucket");
+        assertDefined(input.NotificationConfiguration, "PutBucketNotificationConfigurationCommand.input.NotificationConfiguration");
+        const bucket = requireSimS3Bucket(this.buckets, input.Bucket);
+        await this.background.sequence();
+        this.authorizer.authorizeWrite(bucket, options?.caller);
+        const configuration = this.reader.read(input.NotificationConfiguration);
+        if (input.SkipDestinationValidation !== true) {
+            this.destinations.check(bucket, configuration);
+        }
+        bucket.configureNotifications(configuration);
+        return {
+            $metadata: {},
+        };
+    }
+}
+//# sourceMappingURL=put-bucket-notification-configuration.handler.js.map

package/dist/service/s3/command/put-bucket-notification-configuration/put-bucket-notification-configuration.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"put-bucket-notification-configuration.handler.js","sourceRoot":"","sources":["../../../../../src/service/s3/command/put-bucket-notification-configuration/put-bucket-notification-configuration.handler.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,eAAe,GAChB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAEvE,OAAO,EACL,kBAAkB,GAEnB,MAAM,wDAAwD,CAAC;AAChE,OAAO,EAAE,oCAAoC,EAAE,MAAM,uEAAuE,CAAC;AAK7H,OAAO,EAAE,iCAAiC,EAAE,MAAM,yEAAyE,CAAC;AAE5H,OAAO,EAAE,2BAA2B,EAAE,MAAM,mDAAmD,CAAC;AAChG,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAiBjE;;;;GAIG;AACH,MAAM,OAAO,gDAAgD;IAI1C,OAAO,CAAoC;IAC3C,UAAU,CAA8B;IACxC,UAAU,CAAsB;IAChC,YAAY,CAAoC;IAChD,MAAM,GAAG,IAAI,oCAAoC,EAAE,CAAC;IAErE,YAAY,UAA+D;QACzE,MAAM,EACJ,OAAO,EACP,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,EAClC,wBAAwB,GACzB,GAAG,UAAU,CAAC;QAEf,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,UAAU,GAAG,IAAI,2BAA2B,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,YAAY,GAAG,IAAI,iCAAiC,CACvD,wBAAwB,CACzB,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,MAAM,CACV,OAAqD,EACrD,OAA0D;QAE1D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC5B,aAAa,CACX,KAAK,CAAC,MAAM,EACZ,wDAAwD,CACzD,CAAC;QACF,aAAa,CACX,KAAK,CAAC,yBAAyB,EAC/B,2EAA2E,CAC5E,CAAC;QAEF,MAAM,MAAM,GAAG,kBAAkB,CAC/B,IAAI,CAAC,OAAO,EACZ,KAAK,CAAC,MAAyB,CAChC,CAAC;QAEF,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAExD,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAExE,IAAI,KAAK,CAAC,yBAAyB,KAAK,IAAI,EAAE,CAAC;YAC7C,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,CAAC,sBAAsB,CAAC,aAAa,CAAC,CAAC;QAE7C,OAAO;YACL,SAAS,EAAE,EAAE;SACd,CAAC;IACJ,CAAC;CACF"}

package/dist/service/s3/command/put-object/put-object-authorizer.d.ts

@@ -1,4 +1,5 @@
 import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimAwsResolvedCaller } from "../../../aws/caller/sim-aws-caller-resolver.js";
 import type { SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
 import type { SimS3Bucket } from "../../bucket/sim-s3-bucket.js";
 interface PutObjectAuthorizerProperties {
@@ -17,8 +18,12 @@ export declare class PutObjectAuthorizer {
     constructor(properties: PutObjectAuthorizerProperties);
     /**
      * Ensure the caller may create or replace the requested S3 Object.
+     *
+     * The resolved caller is returned rather than discarded, because it is the
+     * only place in the request where the principal has been worked out, and an
+     * Object event notification has to say who caused it.
      */
-    authorize(bucket: SimS3Bucket, key: string, caller?: SimAwsCaller): void;
+    authorize(bucket: SimS3Bucket, key: string, caller?: SimAwsCaller): SimAwsResolvedCaller;
 }
 export {};
 //# sourceMappingURL=put-object-authorizer.d.ts.map

package/dist/service/s3/command/put-object/put-object-authorizer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"put-object-authorizer.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/command/put-object/put-object-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAEtG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAEjE,UAAU,6BAA6B;IACrC,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;CACvC;AAED;;;;;;GAMG;AACH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAkB;IAEhD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA0B;IAE9C,YAAY,UAAU,EAAE,6BAA6B,EAEpD;IAED;;OAEG;IACH,SAAS,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,YAAY,GAAG,IAAI,CA0BvE;CACF"}
+{"version":3,"file":"put-object-authorizer.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/command/put-object/put-object-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gDAAgD,CAAC;AAC3F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAEtG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAEjE,UAAU,6BAA6B;IACrC,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;CACvC;AAED;;;;;;GAMG;AACH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAkB;IAEhD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA0B;IAE9C,YAAY,UAAU,EAAE,6BAA6B,EAEpD;IAED;;;;;;OAMG;IACH,SAAS,CACP,MAAM,EAAE,WAAW,EACnB,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE,YAAY,GACpB,oBAAoB,CA4BtB;CACF"}

package/dist/service/s3/command/put-object/put-object-authorizer.js

@@ -14,6 +14,10 @@ export class PutObjectAuthorizer {
     }
     /**
      * Ensure the caller may create or replace the requested S3 Object.
+     *
+     * The resolved caller is returned rather than discarded, because it is the
+     * only place in the request where the principal has been worked out, and an
+     * Object event notification has to say who caused it.
      */
     authorize(bucket, key, caller) {
         const resource = `arn:aws:s3:::${bucket.bucketName}/${key}`;
@@ -39,6 +43,7 @@ export class PutObjectAuthorizer {
                 resource,
             });
         }
+        return decision.caller;
     }
 }
 //# sourceMappingURL=put-object-authorizer.js.map

package/dist/service/s3/command/put-object/put-object-authorizer.js.map

@@ -1 +1 @@
-{"version":3,"file":"put-object-authorizer.js","sourceRoot":"","sources":["../../../../../src/service/s3/command/put-object/put-object-authorizer.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAOzE;;;;;;GAMG;AACH,MAAM,OAAO,mBAAmB;IACtB,MAAM,CAAU,MAAM,GAAG,cAAc,CAAC;IAE/B,GAAG,CAA0B;IAE9C,YAAY,UAAyC;QACnD,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,MAAmB,EAAE,GAAW,EAAE,MAAqB;QAC/D,MAAM,QAAQ,GAAG,gBAAgB,MAAM,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;QAC5D,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAClC,MAAM,EAAE,mBAAmB,CAAC,MAAM;YAClC,QAAQ;YACR,MAAM;YACN,gBAAgB,EACd,MAAM,KAAK,SAAS;gBAClB,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC;oBACE;wBACE,QAAQ,EAAE,MAAM;wBAChB,UAAU,EAAE,cAAc;wBAC1B,WAAW,EAAE,gBAAgB,MAAM,CAAC,UAAU,EAAE;qBACjD;iBACF;SACR,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;gBACpC,MAAM,EAAE,mBAAmB,CAAC,MAAM;gBAClC,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"put-object-authorizer.js","sourceRoot":"","sources":["../../../../../src/service/s3/command/put-object/put-object-authorizer.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAOzE;;;;;;GAMG;AACH,MAAM,OAAO,mBAAmB;IACtB,MAAM,CAAU,MAAM,GAAG,cAAc,CAAC;IAE/B,GAAG,CAA0B;IAE9C,YAAY,UAAyC;QACnD,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;;;;;OAMG;IACH,SAAS,CACP,MAAmB,EACnB,GAAW,EACX,MAAqB;QAErB,MAAM,QAAQ,GAAG,gBAAgB,MAAM,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;QAC5D,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAClC,MAAM,EAAE,mBAAmB,CAAC,MAAM;YAClC,QAAQ;YACR,MAAM;YACN,gBAAgB,EACd,MAAM,KAAK,SAAS;gBAClB,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC;oBACE;wBACE,QAAQ,EAAE,MAAM;wBAChB,UAAU,EAAE,cAAc;wBAC1B,WAAW,EAAE,gBAAgB,MAAM,CAAC,UAAU,EAAE;qBACjD;iBACF;SACR,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;gBACpC,MAAM,EAAE,mBAAmB,CAAC,MAAM;gBAClC,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;QAED,OAAO,QAAQ,CAAC,MAAM,CAAC;IACzB,CAAC;CACF"}

package/dist/service/s3/command/put-object/put-object.handler.d.ts

@@ -4,10 +4,12 @@ import type { SimS3Bucket, SimS3BucketName } from "../../bucket/sim-s3-bucket.js
 import { type BackgroundScheduler } from "../../../../util/background/background.js";
 import { type SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
 import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimS3ObjectNotifier } from "../../notification/sim-s3-object-notifier.js";
 interface PutObjectCommandHandlerProperties {
     readonly buckets: Map<SimS3BucketName, SimS3Bucket>;
     readonly iam?: SimIamInterServiceAuthZ;
     readonly background?: BackgroundScheduler;
+    readonly notifications: SimS3ObjectNotifier;
 }
 interface PutObjectCommandHandlerOptions {
     readonly caller?: SimAwsCaller;
@@ -22,6 +24,7 @@ export declare class PutObjectCommandHandler implements CommandHandler<SimPutObj
     private readonly authorizer;
     private readonly objectBuilder;
     private readonly background;
+    private readonly notifications;
     constructor(properties: PutObjectCommandHandlerProperties);
     /**
      * Simulate putting an Object into an S3 Bucket.

package/dist/service/s3/command/put-object/put-object.handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"put-object.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/command/put-object/put-object.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,KAAK,EACV,mBAAmB,EACnB,yBAAyB,EAC1B,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EACV,WAAW,EACX,eAAe,EAChB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AAEnD,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,wDAAwD,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAI1E,UAAU,iCAAiC;IACzC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IACpD,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED,UAAU,8BAA8B;IACtC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;GAIG;AACH,qBAAa,uBAAwB,YAAW,cAAc,CAC5D,mBAAmB,EACnB,yBAAyB,CAC1B;IACC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoC;IAC5D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA0B;IACxD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YAAY,UAAU,EAAE,iCAAiC,EASxD;IAED;;;;;;;;;;;OAWG;IACG,MAAM,CACV,OAAO,EAAE,mBAAmB,EAC5B,OAAO,CAAC,EAAE,8BAA8B,GACvC,OAAO,CAAC,yBAAyB,CAAC,CAqBpC;CACF"}
+{"version":3,"file":"put-object.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/command/put-object/put-object.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,KAAK,EACV,mBAAmB,EACnB,yBAAyB,EAC1B,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EACV,WAAW,EACX,eAAe,EAChB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AAEnD,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,wDAAwD,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAG1E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AAExF,UAAU,iCAAiC;IACzC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IACpD,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;IAC1C,QAAQ,CAAC,aAAa,EAAE,mBAAmB,CAAC;CAC7C;AAED,UAAU,8BAA8B;IACtC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;GAIG;AACH,qBAAa,uBAAwB,YAAW,cAAc,CAC5D,mBAAmB,EACnB,yBAAyB,CAC1B;IACC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoC;IAC5D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA0B;IACxD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAsB;IAEpD,YAAY,UAAU,EAAE,iCAAiC,EAUxD;IAED;;;;;;;;;;;OAWG;IACG,MAAM,CACV,OAAO,EAAE,mBAAmB,EAC5B,OAAO,CAAC,EAAE,8BAA8B,GACvC,OAAO,CAAC,yBAAyB,CAAC,CA6BpC;CACF"}

package/dist/service/s3/command/put-object/put-object.handler.js

@@ -14,11 +14,13 @@ export class PutObjectCommandHandler {
     authorizer;
     objectBuilder = new PutObjectBuilder();
     background;
+    notifications;
     constructor(properties) {
         const { buckets, iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), } = properties;
         this.buckets = buckets;
         this.authorizer = new PutObjectAuthorizer({ iam });
         this.background = background;
+        this.notifications = properties.notifications;
     }
     /**
      * Simulate putting an Object into an S3 Bucket.
@@ -42,9 +44,12 @@ export class PutObjectCommandHandler {
         }
         // Allow for potential non-deterministic sequencing of async events.
         await this.background.sequence();
-        this.authorizer.authorize(bucket, command.input.Key, options?.caller);
+        const caller = this.authorizer.authorize(bucket, command.input.Key, options?.caller);
         const object = this.objectBuilder.build(command);
         await bucket.putObject(object);
+        // Every write path funnels through here, so this one call covers the SDK,
+        // an intercepted SDK client and the REST endpoint alike.
+        this.notifications.objectCreated({ bucket, object, caller });
         return {
             $metadata: {},
         };

package/dist/service/s3/command/put-object/put-object.handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"put-object.handler.js","sourceRoot":"","sources":["../../../../../src/service/s3/command/put-object/put-object.handler.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AACvE,OAAO,EAEL,eAAe,GAChB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EACL,kBAAkB,GAEnB,MAAM,wDAAwD,CAAC;AAEhE,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAY3D;;;;GAIG;AACH,MAAM,OAAO,uBAAuB;IAIjB,OAAO,CAAoC;IAC3C,UAAU,CAAsB;IAChC,aAAa,GAAG,IAAI,gBAAgB,EAAE,CAAC;IACvC,UAAU,CAAsB;IAEjD,YAAY,UAA6C;QACvD,MAAM,EACJ,OAAO,EACP,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,UAAU,CAAC;QACf,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,UAAU,GAAG,IAAI,mBAAmB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,MAAM,CACV,OAA4B,EAC5B,OAAwC;QAExC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,+BAA+B,CAAC,CAAC;QACrE,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,4BAA4B,CAAC,CAAC;QAE/D,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,MAAyB,CAAC;QAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,iBAAiB,CAAC,sBAAsB,UAAU,EAAE,CAAC,CAAC;QAClE,CAAC;QAED,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAEtE,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAE/B,OAAO;YACL,SAAS,EAAE,EAAE;SACd,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"put-object.handler.js","sourceRoot":"","sources":["../../../../../src/service/s3/command/put-object/put-object.handler.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AACvE,OAAO,EAEL,eAAe,GAChB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EACL,kBAAkB,GAEnB,MAAM,wDAAwD,CAAC;AAEhE,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAc3D;;;;GAIG;AACH,MAAM,OAAO,uBAAuB;IAIjB,OAAO,CAAoC;IAC3C,UAAU,CAAsB;IAChC,aAAa,GAAG,IAAI,gBAAgB,EAAE,CAAC;IACvC,UAAU,CAAsB;IAChC,aAAa,CAAsB;IAEpD,YAAY,UAA6C;QACvD,MAAM,EACJ,OAAO,EACP,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,UAAU,CAAC;QACf,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,UAAU,GAAG,IAAI,mBAAmB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;IAChD,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,MAAM,CACV,OAA4B,EAC5B,OAAwC;QAExC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,+BAA+B,CAAC,CAAC;QACrE,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,4BAA4B,CAAC,CAAC;QAE/D,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,MAAyB,CAAC;QAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,iBAAiB,CAAC,sBAAsB,UAAU,EAAE,CAAC,CAAC;QAClE,CAAC;QAED,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CACtC,MAAM,EACN,OAAO,CAAC,KAAK,CAAC,GAAG,EACjB,OAAO,EAAE,MAAM,CAChB,CAAC;QAEF,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAE/B,0EAA0E;QAC1E,yDAAyD;QACzD,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAE7D,OAAO;YACL,SAAS,EAAE,EAAE;SACd,CAAC;IACJ,CAAC;CACF"}

package/dist/service/s3/command/sim-s3-bucket-command-state.d.ts

@@ -0,0 +1,23 @@
+import type { BackgroundScheduler } from "../../../util/background/background.js";
+import type { SimIamInterServiceAuthZ } from "../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimS3Bucket, SimS3BucketName } from "../bucket/sim-s3-bucket.js";
+import type { SimS3NotificationDestinations } from "../notification/destination/sim-s3-notification-destination.js";
+import type { SimS3ObjectNotifier } from "../notification/sim-s3-object-notifier.js";
+/**
+ * The state and collaborators every Bucket-scoped command handler is built
+ * with.
+ *
+ * Each command area holds one of these and hands it straight to the handler it
+ * runs, so the same Bucket map, IAM and background scheduler are shared across
+ * every command of one simulated S3 scope. The notifier is shared for the same
+ * reason and one more: sequence numbers and the delivery ceiling only mean
+ * anything if every Object command counts into the same one.
+ */
+export interface SimS3BucketCommandState {
+    readonly buckets: Map<SimS3BucketName, SimS3Bucket>;
+    readonly iam: SimIamInterServiceAuthZ;
+    readonly background: BackgroundScheduler;
+    readonly notificationDestinations: SimS3NotificationDestinations;
+    readonly notifications: SimS3ObjectNotifier;
+}
+//# sourceMappingURL=sim-s3-bucket-command-state.d.ts.map

package/dist/service/s3/command/sim-s3-bucket-command-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-bucket-command-state.d.ts","sourceRoot":"","sources":["../../../../src/service/s3/command/sim-s3-bucket-command-state.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAClF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qDAAqD,CAAC;AACnG,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC/E,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,gEAAgE,CAAC;AACpH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AAErF;;;;;;;;;GASG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IACpD,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;IACtC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;IACzC,QAAQ,CAAC,wBAAwB,EAAE,6BAA6B,CAAC;IACjE,QAAQ,CAAC,aAAa,EAAE,mBAAmB,CAAC;CAC7C"}

package/dist/service/s3/command/sim-s3-bucket-command-state.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sim-s3-bucket-command-state.js.map

package/dist/service/s3/command/sim-s3-bucket-command-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-bucket-command-state.js","sourceRoot":"","sources":["../../../../src/service/s3/command/sim-s3-bucket-command-state.ts"],"names":[],"mappings":""}

package/dist/service/s3/command/sim-s3-command.types.d.ts

@@ -6,12 +6,16 @@
  */
 export type { SimCreateBucketCommand, SimCreateBucketCommandOutput, } from "./create-bucket/create-bucket.command.js";
 export type { SimDeleteBucketPolicyCommand, SimDeleteBucketPolicyCommandOutput, } from "./delete-bucket-policy/delete-bucket-policy.command.js";
+export type { SimDeleteObjectCommand, SimDeleteObjectCommandOutput, } from "./delete-object/delete-object.command.js";
+export type { SimDeleteObjectsCommand, SimDeleteObjectsCommandOutput, } from "./delete-objects/delete-objects.command.js";
 export type { SimDeletePublicAccessBlockCommand, SimDeletePublicAccessBlockCommandOutput, } from "./delete-public-access-block/delete-public-access-block.command.js";
 export type { SimGetBucketPolicyCommand, SimGetBucketPolicyCommandOutput, } from "./get-bucket-policy/get-bucket-policy.command.js";
+export type { SimGetBucketNotificationConfigurationCommand, SimGetBucketNotificationConfigurationCommandOutput, } from "./get-bucket-notification-configuration/get-bucket-notification-configuration.command.js";
 export type { SimGetObjectCommand, SimGetObjectCommandOutput, } from "./get-object/get-object.command.js";
 export type { SimGetPublicAccessBlockCommand, SimGetPublicAccessBlockCommandOutput, } from "./get-public-access-block/get-public-access-block.command.js";
 export type { SimListBucketsCommand, SimListBucketsCommandOutput, } from "./list-buckets/list-buckets.command.js";
 export type { SimListObjectsCommand, SimListObjectsCommandOutput, } from "./list-objects/list-objects.command.js";
+export type { SimPutBucketNotificationConfigurationCommand, SimPutBucketNotificationConfigurationCommandOutput, } from "./put-bucket-notification-configuration/put-bucket-notification-configuration.command.js";
 export type { SimPutBucketPolicyCommand, SimPutBucketPolicyCommandOutput, } from "./put-bucket-policy/put-bucket-policy.command.js";
 export type { SimPutBucketWebsiteCommand, SimPutBucketWebsiteCommandOutput, } from "./put-bucket-website/put-bucket-website.command.js";
 export type { SimPutObjectCommand, SimPutObjectCommandOutput, } from "./put-object/put-object.command.js";

package/dist/service/s3/command/sim-s3-command.types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-s3-command.types.d.ts","sourceRoot":"","sources":["../../../../src/service/s3/command/sim-s3-command.types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,YAAY,EACV,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,0CAA0C,CAAC;AAClD,YAAY,EACV,4BAA4B,EAC5B,kCAAkC,GACnC,MAAM,wDAAwD,CAAC;AAChE,YAAY,EACV,iCAAiC,EACjC,uCAAuC,GACxC,MAAM,oEAAoE,CAAC;AAC5E,YAAY,EACV,yBAAyB,EACzB,+BAA+B,GAChC,MAAM,kDAAkD,CAAC;AAC1D,YAAY,EACV,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,oCAAoC,CAAC;AAC5C,YAAY,EACV,8BAA8B,EAC9B,oCAAoC,GACrC,MAAM,8DAA8D,CAAC;AACtE,YAAY,EACV,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,wCAAwC,CAAC;AAChD,YAAY,EACV,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,wCAAwC,CAAC;AAChD,YAAY,EACV,yBAAyB,EACzB,+BAA+B,GAChC,MAAM,kDAAkD,CAAC;AAC1D,YAAY,EACV,0BAA0B,EAC1B,gCAAgC,GACjC,MAAM,oDAAoD,CAAC;AAC5D,YAAY,EACV,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,oCAAoC,CAAC;AAC5C,YAAY,EACV,8BAA8B,EAC9B,oCAAoC,GACrC,MAAM,8DAA8D,CAAC"}
+{"version":3,"file":"sim-s3-command.types.d.ts","sourceRoot":"","sources":["../../../../src/service/s3/command/sim-s3-command.types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,YAAY,EACV,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,0CAA0C,CAAC;AAClD,YAAY,EACV,4BAA4B,EAC5B,kCAAkC,GACnC,MAAM,wDAAwD,CAAC;AAChE,YAAY,EACV,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,0CAA0C,CAAC;AAClD,YAAY,EACV,uBAAuB,EACvB,6BAA6B,GAC9B,MAAM,4CAA4C,CAAC;AACpD,YAAY,EACV,iCAAiC,EACjC,uCAAuC,GACxC,MAAM,oEAAoE,CAAC;AAC5E,YAAY,EACV,yBAAyB,EACzB,+BAA+B,GAChC,MAAM,kDAAkD,CAAC;AAC1D,YAAY,EACV,4CAA4C,EAC5C,kDAAkD,GACnD,MAAM,0FAA0F,CAAC;AAClG,YAAY,EACV,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,oCAAoC,CAAC;AAC5C,YAAY,EACV,8BAA8B,EAC9B,oCAAoC,GACrC,MAAM,8DAA8D,CAAC;AACtE,YAAY,EACV,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,wCAAwC,CAAC;AAChD,YAAY,EACV,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,wCAAwC,CAAC;AAChD,YAAY,EACV,4CAA4C,EAC5C,kDAAkD,GACnD,MAAM,0FAA0F,CAAC;AAClG,YAAY,EACV,yBAAyB,EACzB,+BAA+B,GAChC,MAAM,kDAAkD,CAAC;AAC1D,YAAY,EACV,0BAA0B,EAC1B,gCAAgC,GACjC,MAAM,oDAAoD,CAAC;AAC5D,YAAY,EACV,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,oCAAoC,CAAC;AAC5C,YAAY,EACV,8BAA8B,EAC9B,oCAAoC,GACrC,MAAM,8DAA8D,CAAC"}

package/dist/service/s3/command/sim-s3-request-options.d.ts

@@ -0,0 +1,11 @@
+import type { SimAwsCaller } from "../../aws/caller/sim-aws-caller.js";
+/**
+ * The per-request options every simulated S3 command accepts.
+ *
+ * This lives beside the commands rather than on the service facade so a command
+ * area can name it without importing the facade back.
+ */
+export interface SimS3RequestOptions {
+    readonly caller?: SimAwsCaller;
+}
+//# sourceMappingURL=sim-s3-request-options.d.ts.map

package/dist/service/s3/command/sim-s3-request-options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-request-options.d.ts","sourceRoot":"","sources":["../../../../src/service/s3/command/sim-s3-request-options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAEvE;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC"}

package/dist/service/s3/command/sim-s3-request-options.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sim-s3-request-options.js.map

package/dist/service/s3/command/sim-s3-request-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-request-options.js","sourceRoot":"","sources":["../../../../src/service/s3/command/sim-s3-request-options.ts"],"names":[],"mappings":""}

package/dist/service/s3/error/sim-s3-notification.error.d.ts

@@ -0,0 +1,24 @@
+/**
+ * A destination that would not take an event when it was offered one.
+ *
+ * This is not an AWS API error: nothing is waiting for it, because real S3
+ * never reports a failed delivery to whoever wrote the Object. It exists so
+ * the delivery outcome can say why nothing arrived, rather than the event
+ * simply disappearing.
+ */
+export declare class SimS3NotificationNotPermitted extends Error {
+    readonly name = "SimS3NotificationNotPermitted";
+}
+/**
+ * The simulation delivered more notifications than it is willing to.
+ *
+ * A handler that writes back into the Bucket that triggered it is a loop, and
+ * in process it is a loop with nothing to slow it down: `backgroundTasksComplete()`
+ * drains until there is no work left, so the test hangs with no stack to read.
+ * This is the one delivery failure allowed to escape its background task, so
+ * the loop surfaces as a named failure instead.
+ */
+export declare class SimS3NotificationDeliveryLimit extends Error {
+    readonly name = "SimS3NotificationDeliveryLimit";
+}
+//# sourceMappingURL=sim-s3-notification.error.d.ts.map

package/dist/service/s3/error/sim-s3-notification.error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-notification.error.d.ts","sourceRoot":"","sources":["../../../../src/service/s3/error/sim-s3-notification.error.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,qBAAa,6BAA8B,SAAQ,KAAK;IACtD,SAAyB,IAAI,mCAAmC;CACjE;AAED;;;;;;;;GAQG;AACH,qBAAa,8BAA+B,SAAQ,KAAK;IACvD,SAAyB,IAAI,oCAAoC;CAClE"}

package/dist/service/s3/error/sim-s3-notification.error.js

@@ -0,0 +1,24 @@
+/**
+ * A destination that would not take an event when it was offered one.
+ *
+ * This is not an AWS API error: nothing is waiting for it, because real S3
+ * never reports a failed delivery to whoever wrote the Object. It exists so
+ * the delivery outcome can say why nothing arrived, rather than the event
+ * simply disappearing.
+ */
+export class SimS3NotificationNotPermitted extends Error {
+    name = "SimS3NotificationNotPermitted";
+}
+/**
+ * The simulation delivered more notifications than it is willing to.
+ *
+ * A handler that writes back into the Bucket that triggered it is a loop, and
+ * in process it is a loop with nothing to slow it down: `backgroundTasksComplete()`
+ * drains until there is no work left, so the test hangs with no stack to read.
+ * This is the one delivery failure allowed to escape its background task, so
+ * the loop surfaces as a named failure instead.
+ */
+export class SimS3NotificationDeliveryLimit extends Error {
+    name = "SimS3NotificationDeliveryLimit";
+}
+//# sourceMappingURL=sim-s3-notification.error.js.map

package/dist/service/s3/error/sim-s3-notification.error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-notification.error.js","sourceRoot":"","sources":["../../../../src/service/s3/error/sim-s3-notification.error.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,OAAO,6BAA8B,SAAQ,KAAK;IAC7B,IAAI,GAAG,+BAA+B,CAAC;CACjE;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,8BAA+B,SAAQ,KAAK;IAC9B,IAAI,GAAG,gCAAgC,CAAC;CAClE"}

package/dist/service/s3/error/sim-s3.error.d.ts

@@ -59,6 +59,38 @@ export declare class SimS3BucketAlreadyOwnedByYou extends SimS3Error {
     readonly name = "BucketAlreadyOwnedByYou";
     constructor(message: string);
 }
+/**
+ * Simulated S3 MalformedXML error.
+ *
+ * Real S3 answers this when the request document is not one it accepts, which
+ * is how a DeleteObjects request naming no Objects, or more than a thousand of
+ * them, is refused.
+ */
+export declare class SimS3MalformedXml extends SimS3Error {
+    readonly name = "MalformedXML";
+    constructor(message: string);
+}
+/**
+ * Simulated S3 InvalidArgument error.
+ *
+ * Real S3 answers this when a request argument is not one it accepts, which is
+ * how a notification configuration with overlapping filters, a repeated
+ * configuration id or an unusable destination is refused.
+ */
+export declare class SimS3InvalidArgument extends SimS3Error {
+    readonly name = "InvalidArgument";
+    constructor(message: string);
+}
+/**
+ * Simulated S3 NotImplemented error.
+ *
+ * Something real S3 does that the simulator refuses rather than approximates.
+ * Real S3 uses the same code for a request it will not carry out.
+ */
+export declare class SimS3NotImplemented extends SimS3Error {
+    readonly name = "NotImplemented";
+    constructor(message: string);
+}
 /**
  * Simulated S3 InvalidBucketName error.
  */

package/dist/service/s3/error/sim-s3.error.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-s3.error.d.ts","sourceRoot":"","sources":["../../../../src/service/s3/error/sim-s3.error.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;;GAEG;AACH,qBAAa,UAAW,SAAQ,KAAK;aAGjB,SAAS,EAAE,kBAAkB;IAF/C,YACE,OAAO,EAAE,MAAM,EACC,SAAS,GAAE,kBAAuB,EAGnD;CACF;AAED;;GAEG;AACH,qBAAa,iBAAkB,SAAQ,UAAU;IAC/C,SAAyB,IAAI,kBAAkB;IAE/C,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;GAEG;AACH,qBAAa,cAAe,SAAQ,UAAU;IAC5C,SAAyB,IAAI,eAAe;IAE5C,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;GAKG;AACH,qBAAa,uBAAwB,SAAQ,UAAU;IACrD,SAAyB,IAAI,wBAAwB;IAErD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;GAKG;AACH,qBAAa,iBAAkB,SAAQ,UAAU;IAC/C,SAAyB,IAAI,kBAAkB;IAE/C,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;GAEG;AACH,qBAAa,wBAAyB,SAAQ,UAAU;IACtD,SAAyB,IAAI,yBAAyB;IAEtD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;GAEG;AACH,qBAAa,4BAA6B,SAAQ,UAAU;IAC1D,SAAyB,IAAI,6BAA6B;IAE1D,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;GAEG;AACH,qBAAa,sBAAuB,SAAQ,UAAU;IACpD,SAAyB,IAAI,uBAAuB;IAEpD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF"}
+{"version":3,"file":"sim-s3.error.d.ts","sourceRoot":"","sources":["../../../../src/service/s3/error/sim-s3.error.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;;GAEG;AACH,qBAAa,UAAW,SAAQ,KAAK;aAGjB,SAAS,EAAE,kBAAkB;IAF/C,YACE,OAAO,EAAE,MAAM,EACC,SAAS,GAAE,kBAAuB,EAGnD;CACF;AAED;;GAEG;AACH,qBAAa,iBAAkB,SAAQ,UAAU;IAC/C,SAAyB,IAAI,kBAAkB;IAE/C,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;GAEG;AACH,qBAAa,cAAe,SAAQ,UAAU;IAC5C,SAAyB,IAAI,eAAe;IAE5C,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;GAKG;AACH,qBAAa,uBAAwB,SAAQ,UAAU;IACrD,SAAyB,IAAI,wBAAwB;IAErD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;GAKG;AACH,qBAAa,iBAAkB,SAAQ,UAAU;IAC/C,SAAyB,IAAI,kBAAkB;IAE/C,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;GAEG;AACH,qBAAa,wBAAyB,SAAQ,UAAU;IACtD,SAAyB,IAAI,yBAAyB;IAEtD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;GAEG;AACH,qBAAa,4BAA6B,SAAQ,UAAU;IAC1D,SAAyB,IAAI,6BAA6B;IAE1D,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;;GAMG;AACH,qBAAa,iBAAkB,SAAQ,UAAU;IAC/C,SAAyB,IAAI,kBAAkB;IAE/C,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;;GAMG;AACH,qBAAa,oBAAqB,SAAQ,UAAU;IAClD,SAAyB,IAAI,qBAAqB;IAElD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;GAKG;AACH,qBAAa,mBAAoB,SAAQ,UAAU;IACjD,SAAyB,IAAI,oBAAoB;IAEjD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;GAEG;AACH,qBAAa,sBAAuB,SAAQ,UAAU;IACpD,SAAyB,IAAI,uBAAuB;IAEpD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF"}

package/dist/service/s3/error/sim-s3.error.js

@@ -68,6 +68,44 @@ export class SimS3BucketAlreadyOwnedByYou extends SimS3Error {
         super(message, { httpStatusCode: 409 });
     }
 }
+/**
+ * Simulated S3 MalformedXML error.
+ *
+ * Real S3 answers this when the request document is not one it accepts, which
+ * is how a DeleteObjects request naming no Objects, or more than a thousand of
+ * them, is refused.
+ */
+export class SimS3MalformedXml extends SimS3Error {
+    name = "MalformedXML";
+    constructor(message) {
+        super(message, { httpStatusCode: 400 });
+    }
+}
+/**
+ * Simulated S3 InvalidArgument error.
+ *
+ * Real S3 answers this when a request argument is not one it accepts, which is
+ * how a notification configuration with overlapping filters, a repeated
+ * configuration id or an unusable destination is refused.
+ */
+export class SimS3InvalidArgument extends SimS3Error {
+    name = "InvalidArgument";
+    constructor(message) {
+        super(message, { httpStatusCode: 400 });
+    }
+}
+/**
+ * Simulated S3 NotImplemented error.
+ *
+ * Something real S3 does that the simulator refuses rather than approximates.
+ * Real S3 uses the same code for a request it will not carry out.
+ */
+export class SimS3NotImplemented extends SimS3Error {
+    name = "NotImplemented";
+    constructor(message) {
+        super(message, { httpStatusCode: 501 });
+    }
+}
 /**
  * Simulated S3 InvalidBucketName error.
  */

package/dist/service/s3/error/sim-s3.error.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-s3.error.js","sourceRoot":"","sources":["../../../../src/service/s3/error/sim-s3.error.ts"],"names":[],"mappings":"AAOA;;GAEG;AACH,MAAM,OAAO,UAAW,SAAQ,KAAK;IAGjB,SAAS;IAF3B,YACE,OAAe,EACC,SAAS,GAAuB,EAAE;QAElD,KAAK,CAAC,OAAO,CAAC,CAAC;yBAFC,SAAS;IAG3B,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,iBAAkB,SAAQ,UAAU;IACtB,IAAI,GAAG,cAAc,CAAC;IAE/C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,cAAe,SAAQ,UAAU;IACnB,IAAI,GAAG,WAAW,CAAC;IAE5C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,uBAAwB,SAAQ,UAAU;IAC5B,IAAI,GAAG,oBAAoB,CAAC;IAErD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,iBAAkB,SAAQ,UAAU;IACtB,IAAI,GAAG,cAAc,CAAC;IAE/C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,wBAAyB,SAAQ,UAAU;IAC7B,IAAI,GAAG,qBAAqB,CAAC;IAEtD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,4BAA6B,SAAQ,UAAU;IACjC,IAAI,GAAG,yBAAyB,CAAC;IAE1D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,sBAAuB,SAAQ,UAAU;IAC3B,IAAI,GAAG,mBAAmB,CAAC;IAEpD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF"}
+{"version":3,"file":"sim-s3.error.js","sourceRoot":"","sources":["../../../../src/service/s3/error/sim-s3.error.ts"],"names":[],"mappings":"AAOA;;GAEG;AACH,MAAM,OAAO,UAAW,SAAQ,KAAK;IAGjB,SAAS;IAF3B,YACE,OAAe,EACC,SAAS,GAAuB,EAAE;QAElD,KAAK,CAAC,OAAO,CAAC,CAAC;yBAFC,SAAS;IAG3B,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,iBAAkB,SAAQ,UAAU;IACtB,IAAI,GAAG,cAAc,CAAC;IAE/C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,cAAe,SAAQ,UAAU;IACnB,IAAI,GAAG,WAAW,CAAC;IAE5C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,uBAAwB,SAAQ,UAAU;IAC5B,IAAI,GAAG,oBAAoB,CAAC;IAErD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,iBAAkB,SAAQ,UAAU;IACtB,IAAI,GAAG,cAAc,CAAC;IAE/C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,wBAAyB,SAAQ,UAAU;IAC7B,IAAI,GAAG,qBAAqB,CAAC;IAEtD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,4BAA6B,SAAQ,UAAU;IACjC,IAAI,GAAG,yBAAyB,CAAC;IAE1D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,iBAAkB,SAAQ,UAAU;IACtB,IAAI,GAAG,cAAc,CAAC;IAE/C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,oBAAqB,SAAQ,UAAU;IACzB,IAAI,GAAG,iBAAiB,CAAC;IAElD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,mBAAoB,SAAQ,UAAU;IACxB,IAAI,GAAG,gBAAgB,CAAC;IAEjD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,sBAAuB,SAAQ,UAAU;IAC3B,IAAI,GAAG,mBAAmB,CAAC;IAEpD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF"}

package/dist/service/s3/index.d.ts

@@ -1,2 +1,3 @@
 export { SimS3 } from "./sim-s3.js";
+export type { SimS3NotificationDeliveryFailure } from "./notification/sim-s3-notification-failures.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/service/s3/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/service/s3/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/service/s3/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,YAAY,EAAE,gCAAgC,EAAE,MAAM,gDAAgD,CAAC"}

package/dist/service/s3/notification/destination/lambda/sim-aws-s3-notification-functions.d.ts

@@ -0,0 +1,44 @@
+import type { SimAws } from "../../../../aws/sim-aws.js";
+import type { SimS3NotificationDestinationRequest } from "../sim-s3-notification-destination.js";
+import type { SimS3NotificationFunctions } from "./sim-s3-notification-functions.js";
+interface SimAwsS3NotificationFunctionsProperties {
+    readonly simAws: SimAws;
+}
+/**
+ * The simulated Lambda functions of one simulated AWS instance, as S3
+ * notification destinations.
+ *
+ * Functions are looked up when a configuration is applied or an event is
+ * delivered, never when this is built. Simulated Lambda already reaches
+ * simulated S3 while it is being constructed, for function code in a Bucket, so
+ * reaching back the other way at construction time would be a cycle with no
+ * bottom to it.
+ */
+export declare class SimAwsS3NotificationFunctions implements SimS3NotificationFunctions {
+    private readonly simAws;
+    constructor(properties: SimAwsS3NotificationFunctionsProperties);
+    /**
+     * Why S3 may not invoke the function, or nothing when it may.
+     *
+     * Whether a service may invoke a function is Lambda's own rule, so the
+     * decision is made there. What S3 adds is which Bucket is calling, supplied
+     * as the source ARN and source Account, so a permission granted for one
+     * Bucket does not open the function to another.
+     */
+    invokeRefusal(request: SimS3NotificationDestinationRequest): string | undefined;
+    /**
+     * Invoke the function with the event document.
+     *
+     * The function is invoked directly rather than through an Invoke command,
+     * because S3 is already inside the background task that stands for the
+     * asynchronous invocation real S3 makes, and because a handler failure has
+     * to reach the delivery outcome rather than being swallowed as an
+     * asynchronous invocation error.
+     */
+    invoke(request: SimS3NotificationDestinationRequest, event: object): Promise<void>;
+    private findFunction;
+    private iam;
+    private scope;
+}
+export {};
+//# sourceMappingURL=sim-aws-s3-notification-functions.d.ts.map

package/dist/service/s3/notification/destination/lambda/sim-aws-s3-notification-functions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-aws-s3-notification-functions.d.ts","sourceRoot":"","sources":["../../../../../../src/service/s3/notification/destination/lambda/sim-aws-s3-notification-functions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAIzD,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,uCAAuC,CAAC;AAGjG,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAErF,UAAU,uCAAuC;IAC/C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;;GASG;AACH,qBAAa,6BAA8B,YAAW,0BAA0B;IAC9E,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAEhC,YAAY,UAAU,EAAE,uCAAuC,EAE9D;IAED;;;;;;;OAOG;IACH,aAAa,CACX,OAAO,EAAE,mCAAmC,GAC3C,MAAM,GAAG,SAAS,CA0BpB;IAED;;;;;;;;OAQG;IACG,MAAM,CACV,OAAO,EAAE,mCAAmC,EAC5C,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CAWf;IAED,OAAO,CAAC,YAAY;IAMpB,OAAO,CAAC,GAAG;IAIX,OAAO,CAAC,KAAK;CAKd"}

package/dist/service/s3/notification/destination/lambda/sim-aws-s3-notification-functions.js

@@ -0,0 +1,75 @@
+import { SimLambdaServiceInvokeAuthorizer } from "../../../../lambda/command/authorize/sim-lambda-service-invoke-authorizer.js";
+import { simS3ServicePrincipal } from "../sim-s3-service-principal.js";
+import { SimS3NotificationFunctionArn } from "./sim-s3-notification-function-arn.js";
+/**
+ * The simulated Lambda functions of one simulated AWS instance, as S3
+ * notification destinations.
+ *
+ * Functions are looked up when a configuration is applied or an event is
+ * delivered, never when this is built. Simulated Lambda already reaches
+ * simulated S3 while it is being constructed, for function code in a Bucket, so
+ * reaching back the other way at construction time would be a cycle with no
+ * bottom to it.
+ */
+export class SimAwsS3NotificationFunctions {
+    simAws;
+    constructor(properties) {
+        this.simAws = properties.simAws;
+    }
+    /**
+     * Why S3 may not invoke the function, or nothing when it may.
+     *
+     * Whether a service may invoke a function is Lambda's own rule, so the
+     * decision is made there. What S3 adds is which Bucket is calling, supplied
+     * as the source ARN and source Account, so a permission granted for one
+     * Bucket does not open the function to another.
+     */
+    invokeRefusal(request) {
+        const arn = SimS3NotificationFunctionArn.parse(request.destinationArn);
+        const simFunction = this.findFunction(arn);
+        if (simFunction === undefined) {
+            return `${request.destinationArn} is not a simulated Lambda function.`;
+        }
+        const decision = new SimLambdaServiceInvokeAuthorizer({
+            iam: this.iam(arn),
+        }).authorize({
+            simFunction,
+            servicePrincipal: simS3ServicePrincipal,
+            sourceArn: request.bucketArn,
+            sourceAccount: request.bucketOwnerAccountId,
+        });
+        if (decision.isDenied) {
+            return (`The resource policy of ${request.destinationArn} does not allow ` +
+                `${simS3ServicePrincipal} to invoke it for ${request.bucketArn}. ` +
+                "Grant it with AddPermission.");
+        }
+        return undefined;
+    }
+    /**
+     * Invoke the function with the event document.
+     *
+     * The function is invoked directly rather than through an Invoke command,
+     * because S3 is already inside the background task that stands for the
+     * asynchronous invocation real S3 makes, and because a handler failure has
+     * to reach the delivery outcome rather than being swallowed as an
+     * asynchronous invocation error.
+     */
+    async invoke(request, event) {
+        const arn = SimS3NotificationFunctionArn.parse(request.destinationArn);
+        const simFunction = this.findFunction(arn);
+        if (simFunction === undefined) {
+            throw new Error(`${request.destinationArn} is not a simulated Lambda function.`);
+        }
+        await simFunction.invoke(event);
+    }
+    findFunction(arn) {
+        return this.scope(arn).lambda().getSimFunctionByName(arn.functionName);
+    }
+    iam(arn) {
+        return this.scope(arn).iam();
+    }
+    scope(arn) {
+        return this.simAws.accountRegionScope(arn.accountId, arn.regionName);
+    }
+}
+//# sourceMappingURL=sim-aws-s3-notification-functions.js.map

package/dist/service/s3/notification/destination/lambda/sim-aws-s3-notification-functions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-aws-s3-notification-functions.js","sourceRoot":"","sources":["../../../../../../src/service/s3/notification/destination/lambda/sim-aws-s3-notification-functions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gCAAgC,EAAE,MAAM,8EAA8E,CAAC;AAIhI,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AAOrF;;;;;;;;;GASG;AACH,MAAM,OAAO,6BAA6B;IACvB,MAAM,CAAS;IAEhC,YAAY,UAAmD;QAC7D,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAClC,CAAC;IAED;;;;;;;OAOG;IACH,aAAa,CACX,OAA4C;QAE5C,MAAM,GAAG,GAAG,4BAA4B,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QACvE,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAE3C,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,GAAG,OAAO,CAAC,cAAc,sCAAsC,CAAC;QACzE,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,gCAAgC,CAAC;YACpD,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;SACnB,CAAC,CAAC,SAAS,CAAC;YACX,WAAW;YACX,gBAAgB,EAAE,qBAAqB;YACvC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,aAAa,EAAE,OAAO,CAAC,oBAAoB;SAC5C,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,OAAO,CACL,0BAA0B,OAAO,CAAC,cAAc,kBAAkB;gBAClE,GAAG,qBAAqB,qBAAqB,OAAO,CAAC,SAAS,IAAI;gBAClE,8BAA8B,CAC/B,CAAC;QACJ,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,MAAM,CACV,OAA4C,EAC5C,KAAa;QAEb,MAAM,GAAG,GAAG,4BAA4B,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QACvE,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAE3C,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,CAAC,cAAc,sCAAsC,CAChE,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAEO,YAAY,CAClB,GAAiC;QAEjC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,oBAAoB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACzE,CAAC;IAEO,GAAG,CAAC,GAAiC;QAC3C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IAC/B,CAAC;IAEO,KAAK,CACX,GAAiC;QAEjC,OAAO,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;IACvE,CAAC;CACF"}

package/dist/service/s3/notification/destination/lambda/sim-s3-lambda-notification-destination.d.ts

@@ -0,0 +1,30 @@
+import type { SimS3NotificationDeliveryRequest, SimS3NotificationDestination, SimS3NotificationDestinationRequest } from "../sim-s3-notification-destination.js";
+import type { SimS3NotificationFunctions } from "./sim-s3-notification-functions.js";
+interface SimS3LambdaNotificationDestinationProperties {
+    readonly functions: SimS3NotificationFunctions;
+}
+/**
+ * A simulated Lambda function as somewhere S3 sends Object events.
+ *
+ * The same question is asked twice on purpose. Real S3 checks the function's
+ * resource policy when the configuration is applied, and checks it again for
+ * every event, so a permission removed afterwards stops delivery. Nothing is
+ * remembered from the first check.
+ */
+export declare class SimS3LambdaNotificationDestination implements SimS3NotificationDestination {
+    private readonly functions;
+    constructor(properties: SimS3LambdaNotificationDestinationProperties);
+    /**
+     * Refuse a function the Bucket may not invoke.
+     *
+     * Real S3 answers InvalidArgument for a destination it could not validate,
+     * which is what a missing `AddPermission` for `s3.amazonaws.com` produces.
+     */
+    validate(request: SimS3NotificationDestinationRequest): void;
+    /**
+     * Invoke the function with the event, if it still admits this Bucket.
+     */
+    deliver(request: SimS3NotificationDeliveryRequest): Promise<void>;
+}
+export {};
+//# sourceMappingURL=sim-s3-lambda-notification-destination.d.ts.map

package/dist/service/s3/notification/destination/lambda/sim-s3-lambda-notification-destination.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-lambda-notification-destination.d.ts","sourceRoot":"","sources":["../../../../../../src/service/s3/notification/destination/lambda/sim-s3-lambda-notification-destination.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,gCAAgC,EAChC,4BAA4B,EAC5B,mCAAmC,EACpC,MAAM,uCAAuC,CAAC;AAC/C,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAErF,UAAU,4CAA4C;IACpD,QAAQ,CAAC,SAAS,EAAE,0BAA0B,CAAC;CAChD;AAED;;;;;;;GAOG;AACH,qBAAa,kCAAmC,YAAW,4BAA4B;IACrF,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA6B;IAEvD,YAAY,UAAU,EAAE,4CAA4C,EAEnE;IAED;;;;;OAKG;IACH,QAAQ,CAAC,OAAO,EAAE,mCAAmC,GAAG,IAAI,CAQ3D;IAED;;OAEG;IACG,OAAO,CAAC,OAAO,EAAE,gCAAgC,GAAG,OAAO,CAAC,IAAI,CAAC,CAWtE;CACF"}