@kensio/yulin 1.12.1 → 1.14.0

package/dist/service/sqs/poll/sim-sqs-poll-queues.js

@@ -0,0 +1,49 @@
+/**
+ * The queues a consumer built outside a SimAws instance can reach, which is
+ * none of them.
+ *
+ * A simulated service that polls is usually built through a SimAws instance,
+ * which hands it that simulation's SQS. One built by itself has no queue to
+ * reach, so it refuses and says how to get one rather than quietly delivering
+ * nothing. What the refusal says is the consuming service's own, which is why
+ * the reason is the one thing left to whatever extends this.
+ */
+export class SimSqsUnreachablePollQueues {
+    /**
+     * Refuse to look at a queue, explaining how to reach one.
+     */
+    visibilityTimeoutSeconds(request) {
+        return Promise.reject(this.unreachable(request.queueArn));
+    }
+    /**
+     * Refuse to poll, explaining how to reach a queue.
+     */
+    receive(request) {
+        return Promise.reject(this.unreachable(request.queueArn));
+    }
+    /**
+     * Refuse to delete, explaining how to reach a queue.
+     */
+    deleteMessages(request) {
+        return Promise.reject(this.unreachable(request.queueArn));
+    }
+    /**
+     * Answer with nothing: there is no queue to look at.
+     */
+    nextAvailability() {
+        return;
+    }
+    /**
+     * Watch nothing: there is no queue to watch.
+     */
+    watch() {
+        //
+    }
+    /**
+     * Stop watching nothing.
+     */
+    unwatch() {
+        //
+    }
+}
+//# sourceMappingURL=sim-sqs-poll-queues.js.map

package/dist/service/sqs/poll/sim-sqs-poll-queues.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sqs-poll-queues.js","sourceRoot":"","sources":["../../../../src/service/sqs/poll/sim-sqs-poll-queues.ts"],"names":[],"mappings":"AA2EA;;;;;;;;;GASG;AACH,MAAM,OAAgB,2BAA2B;IAM/C;;OAEG;IACH,wBAAwB,CAAC,OAA+B;QACtD,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACH,OAAO,CACL,OAAiC;QAEjC,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,OAAgC;QAC7C,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACH,gBAAgB;QACd,OAAO;IACT,CAAC;IAED;;OAEG;IACH,KAAK;QACH,EAAE;IACJ,CAAC;IAED;;OAEG;IACH,OAAO;QACL,EAAE;IACJ,CAAC;CACF"}

package/dist/service/sqs/poll/sim-sqs-polled-queue.d.ts

@@ -0,0 +1,44 @@
+import type { SimAwsCaller } from "../../aws/caller/sim-aws-caller.js";
+import type { SimSqsQueueWatcher } from "../queue/sim-sqs-queue-activity.js";
+import type { SimSqsPollMessage } from "./sim-sqs-poll-message.js";
+import type { SimSqsPollQueues } from "./sim-sqs-poll-queues.js";
+/**
+ * The one queue a consumer polls.
+ *
+ * Every call names the same queue, so it is fixed here rather than written out
+ * at each call. The caller is not: it belongs to the consumer, and simulated
+ * IAM decides each request against it exactly as real IAM does.
+ */
+export declare class SimSqsPolledQueue {
+    private readonly queues;
+    private readonly queueArn;
+    constructor(queues: SimSqsPollQueues, queueArn: string);
+    /**
+     * Watch for messages arriving on the queue.
+     */
+    watch(watcher: SimSqsQueueWatcher): void;
+    /**
+     * Stop watching the queue.
+     */
+    unwatch(watcher: SimSqsQueueWatcher): void;
+    /**
+     * When the earliest message the queue cannot hand out yet becomes
+     * receivable.
+     */
+    nextAvailability(): Date | undefined;
+    /**
+     * How long a received message stays hidden, and by asking, whether the queue
+     * is there to be polled at all.
+     */
+    visibilityTimeoutSeconds(caller: SimAwsCaller): Promise<number>;
+    /**
+     * Take up to a batch of messages off the queue.
+     */
+    receive(caller: SimAwsCaller, batchSize: number): Promise<readonly SimSqsPollMessage[]>;
+    /**
+     * Delete the messages the consumer handled.
+     */
+    deleteMessages(caller: SimAwsCaller, receiptHandles: readonly string[]): Promise<void>;
+    private requestAs;
+}
+//# sourceMappingURL=sim-sqs-polled-queue.d.ts.map

package/dist/service/sqs/poll/sim-sqs-polled-queue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sqs-polled-queue.d.ts","sourceRoot":"","sources":["../../../../src/service/sqs/poll/sim-sqs-polled-queue.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAEjE;;;;;;GAMG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmB;IAC1C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAElC,YAAY,MAAM,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,EAGrD;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,EAAE,kBAAkB,GAAG,IAAI,CAEvC;IAED;;OAEG;IACH,OAAO,CAAC,OAAO,EAAE,kBAAkB,GAAG,IAAI,CAEzC;IAED;;;OAGG;IACH,gBAAgB,IAAI,IAAI,GAAG,SAAS,CAEnC;IAED;;;OAGG;IACG,wBAAwB,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAEpE;IAED;;OAEG;IACG,OAAO,CACX,MAAM,EAAE,YAAY,EACpB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,SAAS,iBAAiB,EAAE,CAAC,CAEvC;IAED;;OAEG;IACG,cAAc,CAClB,MAAM,EAAE,YAAY,EACpB,cAAc,EAAE,SAAS,MAAM,EAAE,GAChC,OAAO,CAAC,IAAI,CAAC,CAKf;IAED,OAAO,CAAC,SAAS;CAMlB"}

package/dist/service/{lambda/event-source/poll/sim-lambda-sqs-polled-queue.js → sqs/poll/sim-sqs-polled-queue.js}

@@ -1,11 +1,11 @@
 /**
- * The one queue a mapping polls.
+ * The one queue a consumer polls.
  *
- * Every call names the same queue, and the ones a poll makes are all made as
- * the function's execution role, so both are fixed here rather than written out
- * at each call. Simulated IAM still decides each one, exactly as real IAM does.
+ * Every call names the same queue, so it is fixed here rather than written out
+ * at each call. The caller is not: it belongs to the consumer, and simulated
+ * IAM decides each request against it exactly as real IAM does.
  */
-export class SimLambdaSqsPolledQueue {
+export class SimSqsPolledQueue {
     queues;
     queueArn;
     constructor(queues, queueArn) {
@@ -35,26 +35,26 @@ export class SimLambdaSqsPolledQueue {
      * How long a received message stays hidden, and by asking, whether the queue
      * is there to be polled at all.
      */
-    async visibilityTimeoutSeconds(roleArn) {
-        return await this.queues.visibilityTimeoutSeconds(this.requestAs(roleArn));
+    async visibilityTimeoutSeconds(caller) {
+        return await this.queues.visibilityTimeoutSeconds(this.requestAs(caller));
     }
     /**
      * Take up to a batch of messages off the queue.
      */
-    async receive(roleArn, batchSize) {
-        return await this.queues.receive({ ...this.requestAs(roleArn), batchSize });
+    async receive(caller, batchSize) {
+        return await this.queues.receive({ ...this.requestAs(caller), batchSize });
     }
     /**
-     * Delete the messages the function handled.
+     * Delete the messages the consumer handled.
      */
-    async deleteMessages(roleArn, receiptHandles) {
+    async deleteMessages(caller, receiptHandles) {
         await this.queues.deleteMessages({
-            ...this.requestAs(roleArn),
+            ...this.requestAs(caller),
             receiptHandles,
         });
     }
-    requestAs(roleArn) {
-        return { queueArn: this.queueArn, caller: { kind: "arn", arn: roleArn } };
+    requestAs(caller) {
+        return { queueArn: this.queueArn, caller };
     }
 }
-//# sourceMappingURL=sim-lambda-sqs-polled-queue.js.map
+//# sourceMappingURL=sim-sqs-polled-queue.js.map

package/dist/service/sqs/poll/sim-sqs-polled-queue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sqs-polled-queue.js","sourceRoot":"","sources":["../../../../src/service/sqs/poll/sim-sqs-polled-queue.ts"],"names":[],"mappings":"AAKA;;;;;;GAMG;AACH,MAAM,OAAO,iBAAiB;IACX,MAAM,CAAmB;IACzB,QAAQ,CAAS;IAElC,YAAY,MAAwB,EAAE,QAAgB;QACpD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAA2B;QAC/B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,OAA2B;QACjC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC9C,CAAC;IAED;;;OAGG;IACH,gBAAgB;QACd,OAAO,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,wBAAwB,CAAC,MAAoB;QACjD,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CACX,MAAoB,EACpB,SAAiB;QAEjB,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAClB,MAAoB,EACpB,cAAiC;QAEjC,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;YAC/B,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;YACzB,cAAc;SACf,CAAC,CAAC;IACL,CAAC;IAEO,SAAS,CAAC,MAAoB;QAIpC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAC7C,CAAC;CACF"}

package/dist/service/sqs/poll/sim-sqs-queue-poller.d.ts

@@ -0,0 +1,131 @@
+import type { BackgroundScheduler } from "../../../util/background/background.js";
+import type { SimAwsCaller } from "../../aws/caller/sim-aws-caller.js";
+import type { SimSqsQueueWatcher } from "../queue/sim-sqs-queue-activity.js";
+import type { SimSqsPollMessage } from "./sim-sqs-poll-message.js";
+import type { SimSqsPollQueues } from "./sim-sqs-poll-queues.js";
+/**
+ * What became of one batch handed to a consumer.
+ *
+ * A batch is either deleted from the queue or left on it to be handed out
+ * again once its visibility timeout has run. Partial batch responses split it,
+ * which is the only reason this says both rather than yes or no.
+ */
+export interface SimSqsPollOutcome {
+    readonly handledReceiptHandles: readonly string[];
+    readonly hasReturnedMessages: boolean;
+}
+/**
+ * What one poll is made on behalf of.
+ *
+ * The caller is what receiving and deleting are authorized as, and the batch
+ * size is how many messages the consumer wants at once. Both are read per poll
+ * rather than held, because a consumer can change either while it is running.
+ */
+export interface SimSqsPollSession {
+    readonly caller: SimAwsCaller;
+    readonly batchSize: number;
+    /**
+     * Hand a batch to whatever consumes it, answering with what became of it.
+     */
+    handle(messages: readonly SimSqsPollMessage[]): Promise<SimSqsPollOutcome>;
+}
+/**
+ * Whatever is consuming a queue through a poller.
+ *
+ * A poller asks for a session rather than being handed one, because a consumer
+ * can be temporarily in no state to consume: a Lambda event source mapping
+ * still being created, or one whose function has gone.
+ */
+export interface SimSqsPollConsumer {
+    /**
+     * The session this poll runs in, or nothing when there is nothing to poll
+     * for at the moment.
+     */
+    session(): SimSqsPollSession | undefined;
+}
+interface SimSqsQueuePollerProperties {
+    readonly queues: SimSqsPollQueues;
+    readonly queueArn: string;
+    readonly consumer: SimSqsPollConsumer;
+    readonly background: BackgroundScheduler;
+}
+/**
+ * Polls one queue on behalf of one consumer.
+ *
+ * Real consumers poll continuously, and nothing in this simulation runs
+ * continuously: an endless loop in a single Node.js process would never yield
+ * to the test running it. So the queue says when a message has arrived and a
+ * poll is scheduled in response, on the simulation's own clock. A test that
+ * awaits the simulation settling has therefore watched the whole delivery
+ * happen, rather than having waited a while and hoped.
+ *
+ * A batch the consumer handled is deleted from the queue. A batch it did not is
+ * left there, which hides it for the visibility timeout and hands it back
+ * afterwards, so a redrive policy eventually gives up on it exactly as it would
+ * for any other failing consumer.
+ *
+ * A Lambda event source mapping and a long-running ECS container both consume a
+ * queue this way. What differs between them is what a batch is handed to and
+ * what a role it is read as, which is what the session carries, so the loop
+ * itself is written once.
+ */
+export declare class SimSqsQueuePoller implements SimSqsQueueWatcher {
+    private readonly consumer;
+    private readonly queue;
+    private readonly schedule;
+    private stopped;
+    constructor(properties: SimSqsQueuePollerProperties);
+    /**
+     * Watch the queue, so a message arriving on it wakes a poll.
+     *
+     * Watching can start before the consumer is ready to consume, so that a
+     * message sent in between is not missed. The poll it wakes finds a consumer
+     * with no session and does nothing, and the poll that follows picks the
+     * message up.
+     */
+    watch(): void;
+    /**
+     * Poll as soon as the simulation gets to it, which is what a consumer that
+     * has just started does with whatever is already on its queue.
+     */
+    pollNow(): void;
+    /**
+     * Stop polling, as the consumer going away does.
+     *
+     * Nothing is left watching the queue and no turn is left waiting on the
+     * clock, so a consumer that has gone leaves the simulation with nothing
+     * scheduled on its behalf.
+     */
+    stop(): void;
+    /**
+     * Take a message arriving on the queue as something to poll for.
+     *
+     * Nothing reaches here after stopping, because stopping gives up watching the
+     * queue in the same breath.
+     */
+    messageAvailable(availableFrom: Date): void;
+    /**
+     * Poll once: one batch, handed over and then deleted or left behind.
+     */
+    private run;
+    /**
+     * The session this poll runs in, while there is anything to poll for.
+     */
+    private session;
+    /**
+     * Look again when a message the queue could not hand out becomes receivable.
+     *
+     * A consumer that started while every message on its queue was in flight, or
+     * one whose queue holds only delayed messages, has nothing to wake it
+     * otherwise.
+     */
+    private pollWhenSomethingComesBack;
+    /**
+     * Decide when to poll again: when a returned batch becomes visible again, or
+     * straight away when a batch filled the request and there may be more
+     * waiting.
+     */
+    private pollAgainAfter;
+}
+export {};
+//# sourceMappingURL=sim-sqs-queue-poller.d.ts.map

package/dist/service/sqs/poll/sim-sqs-queue-poller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sqs-queue-poller.d.ts","sourceRoot":"","sources":["../../../../src/service/sqs/poll/sim-sqs-queue-poller.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAElF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAGjE;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,qBAAqB,EAAE,SAAS,MAAM,EAAE,CAAC;IAClD,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC;CACvC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAE3B;;OAEG;IACH,MAAM,CAAC,QAAQ,EAAE,SAAS,iBAAiB,EAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;CAC5E;AAED;;;;;;GAMG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;OAGG;IACH,OAAO,IAAI,iBAAiB,GAAG,SAAS,CAAC;CAC1C;AAED,UAAU,2BAA2B;IACnC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;CAC1C;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,iBAAkB,YAAW,kBAAkB;IAC1D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqB;IAC9C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAoB;IAC1C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAe;IAExC,OAAO,CAAC,OAAO,CAAS;IAExB,YAAY,UAAU,EAAE,2BAA2B,EASlD;IAED;;;;;;;OAOG;IACH,KAAK,IAAI,IAAI,CAEZ;IAED;;;OAGG;IACH,OAAO,IAAI,IAAI,CAEd;IAED;;;;;;OAMG;IACH,IAAI,IAAI,IAAI,CAIX;IAED;;;;;OAKG;IACH,gBAAgB,CAAC,aAAa,EAAE,IAAI,GAAG,IAAI,CAE1C;IAED;;OAEG;YACW,GAAG;IAgCjB;;OAEG;IACH,OAAO,CAAC,OAAO;IAQf;;;;;;OAMG;IACH,OAAO,CAAC,0BAA0B;IAQlC;;;;OAIG;IACH,OAAO,CAAC,cAAc;CAgBvB"}

package/dist/service/sqs/poll/sim-sqs-queue-poller.js

@@ -0,0 +1,140 @@
+import { PollSchedule } from "../../../util/background/poll-schedule.js";
+import { SimSqsPolledQueue } from "./sim-sqs-polled-queue.js";
+/**
+ * Polls one queue on behalf of one consumer.
+ *
+ * Real consumers poll continuously, and nothing in this simulation runs
+ * continuously: an endless loop in a single Node.js process would never yield
+ * to the test running it. So the queue says when a message has arrived and a
+ * poll is scheduled in response, on the simulation's own clock. A test that
+ * awaits the simulation settling has therefore watched the whole delivery
+ * happen, rather than having waited a while and hoped.
+ *
+ * A batch the consumer handled is deleted from the queue. A batch it did not is
+ * left there, which hides it for the visibility timeout and hands it back
+ * afterwards, so a redrive policy eventually gives up on it exactly as it would
+ * for any other failing consumer.
+ *
+ * A Lambda event source mapping and a long-running ECS container both consume a
+ * queue this way. What differs between them is what a batch is handed to and
+ * what a role it is read as, which is what the session carries, so the loop
+ * itself is written once.
+ */
+export class SimSqsQueuePoller {
+    consumer;
+    queue;
+    schedule;
+    stopped = false;
+    constructor(properties) {
+        this.consumer = properties.consumer;
+        this.queue = new SimSqsPolledQueue(properties.queues, properties.queueArn);
+        this.schedule = new PollSchedule({
+            background: properties.background,
+            poll: async () => {
+                await this.run();
+            },
+        });
+    }
+    /**
+     * Watch the queue, so a message arriving on it wakes a poll.
+     *
+     * Watching can start before the consumer is ready to consume, so that a
+     * message sent in between is not missed. The poll it wakes finds a consumer
+     * with no session and does nothing, and the poll that follows picks the
+     * message up.
+     */
+    watch() {
+        this.queue.watch(this);
+    }
+    /**
+     * Poll as soon as the simulation gets to it, which is what a consumer that
+     * has just started does with whatever is already on its queue.
+     */
+    pollNow() {
+        this.schedule.now();
+    }
+    /**
+     * Stop polling, as the consumer going away does.
+     *
+     * Nothing is left watching the queue and no turn is left waiting on the
+     * clock, so a consumer that has gone leaves the simulation with nothing
+     * scheduled on its behalf.
+     */
+    stop() {
+        this.stopped = true;
+        this.queue.unwatch(this);
+        this.schedule.stop();
+    }
+    /**
+     * Take a message arriving on the queue as something to poll for.
+     *
+     * Nothing reaches here after stopping, because stopping gives up watching the
+     * queue in the same breath.
+     */
+    messageAvailable(availableFrom) {
+        this.schedule.at(availableFrom);
+    }
+    /**
+     * Poll once: one batch, handed over and then deleted or left behind.
+     */
+    async run() {
+        const session = this.session();
+        if (session === undefined) {
+            return;
+        }
+        const { caller } = session;
+        const timeout = await this.queue.visibilityTimeoutSeconds(caller);
+        const messages = await this.queue.receive(caller, session.batchSize);
+        if (messages.length === 0) {
+            this.pollWhenSomethingComesBack();
+            return;
+        }
+        const outcome = await session.handle(messages);
+        if (this.stopped) {
+            // The consumer went away while it was handling the batch. Leaving the
+            // batch undeleted is what a real consumer killed part way through does:
+            // the messages come back when their visibility timeout runs out, which
+            // is the at-least-once delivery the sender is entitled to.
+            return;
+        }
+        await this.queue.deleteMessages(caller, outcome.handledReceiptHandles);
+        this.pollAgainAfter(outcome, messages.length, session.batchSize, timeout);
+    }
+    /**
+     * The session this poll runs in, while there is anything to poll for.
+     */
+    session() {
+        if (this.stopped) {
+            return undefined;
+        }
+        return this.consumer.session();
+    }
+    /**
+     * Look again when a message the queue could not hand out becomes receivable.
+     *
+     * A consumer that started while every message on its queue was in flight, or
+     * one whose queue holds only delayed messages, has nothing to wake it
+     * otherwise.
+     */
+    pollWhenSomethingComesBack() {
+        const availableFrom = this.queue.nextAvailability();
+        if (availableFrom !== undefined) {
+            this.schedule.at(availableFrom);
+        }
+    }
+    /**
+     * Decide when to poll again: when a returned batch becomes visible again, or
+     * straight away when a batch filled the request and there may be more
+     * waiting.
+     */
+    pollAgainAfter(outcome, receivedCount, batchSize, visibilityTimeoutSeconds) {
+        if (outcome.hasReturnedMessages) {
+            this.schedule.afterSeconds(visibilityTimeoutSeconds);
+            return;
+        }
+        if (receivedCount >= batchSize) {
+            this.schedule.now();
+        }
+    }
+}
+//# sourceMappingURL=sim-sqs-queue-poller.js.map

package/dist/service/sqs/poll/sim-sqs-queue-poller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sqs-queue-poller.js","sourceRoot":"","sources":["../../../../src/service/sqs/poll/sim-sqs-queue-poller.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,2CAA2C,CAAC;AAKzE,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAqD9D;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,OAAO,iBAAiB;IACX,QAAQ,CAAqB;IAC7B,KAAK,CAAoB;IACzB,QAAQ,CAAe;IAEhC,OAAO,GAAG,KAAK,CAAC;IAExB,YAAY,UAAuC;QACjD,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,KAAK,GAAG,IAAI,iBAAiB,CAAC,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC3E,IAAI,CAAC,QAAQ,GAAG,IAAI,YAAY,CAAC;YAC/B,UAAU,EAAE,UAAU,CAAC,UAAU;YACjC,IAAI,EAAE,KAAK,IAAmB,EAAE;gBAC9B,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;YACnB,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IACH,KAAK;QACH,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAED;;;OAGG;IACH,OAAO;QACL,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;IACtB,CAAC;IAED;;;;;;OAMG;IACH,IAAI;QACF,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC;IAED;;;;;OAKG;IACH,gBAAgB,CAAC,aAAmB;QAClC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC;IAClC,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,GAAG;QACf,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAE/B,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO;QACT,CAAC;QAED,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QAC3B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAC;QAClE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAErE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC,0BAA0B,EAAE,CAAC;YAElC,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAE/C,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,sEAAsE;YACtE,wEAAwE;YACxE,uEAAuE;YACvE,2DAA2D;YAC3D,OAAO;QACT,CAAC;QAED,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,qBAAqB,CAAC,CAAC;QAEvE,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC5E,CAAC;IAED;;OAEG;IACK,OAAO;QACb,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;IACjC,CAAC;IAED;;;;;;OAMG;IACK,0BAA0B;QAChC,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;QAEpD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,cAAc,CACpB,OAA0B,EAC1B,aAAqB,EACrB,SAAiB,EACjB,wBAAgC;QAEhC,IAAI,OAAO,CAAC,mBAAmB,EAAE,CAAC;YAChC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,wBAAwB,CAAC,CAAC;YAErD,OAAO;QACT,CAAC;QAED,IAAI,aAAa,IAAI,SAAS,EAAE,CAAC;YAC/B,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;QACtB,CAAC;IACH,CAAC;CACF"}

package/dist/service/sqs/queue/sim-sqs-queue-arn.d.ts

@@ -28,6 +28,32 @@ export interface SimSqsQueueLocation {
  * source mapping polling one, and the queue itself all mean the same URL.
  */
 export declare function sqsQueueUrl(location: SimSqsQueueLocation): string;
+/**
+ * The ARN an IAM policy names a queue by.
+ */
+export declare function sqsQueueArn(location: SimSqsQueueLocation): string;
+/**
+ * Read the three facts a queue ARN carries, or nothing for a value that is not
+ * a queue ARN.
+ */
+export declare function parseSqsQueueArn(value: string): SimSqsQueueLocation | undefined;
+/**
+ * The URL SQS requests name the queue an ARN names by, refusing a value that
+ * is not a queue ARN.
+ *
+ * Anything holding a queue ARN and about to make an SDK request goes through
+ * here, so the two formats are converted in one place rather than wherever a
+ * consumer happens to hold the ARN.
+ */
+export declare function sqsQueueUrlOf(queueArn: string): string;
+/**
+ * The ARN naming the queue a URL names, refusing a value that is not a queue
+ * URL.
+ *
+ * A user names a queue by its URL, since that is what `CreateQueue` answers
+ * with, and everything that authorizes or watches a queue names it by ARN.
+ */
+export declare function sqsQueueArnOf(queueUrl: string): string;
 interface SimSqsQueueArnProperties {
     readonly name: SimSqsQueueName;
     readonly accountRegionScope: SimAwsAccountRegionScope;

package/dist/service/sqs/queue/sim-sqs-queue-arn.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-sqs-queue-arn.d.ts","sourceRoot":"","sources":["../../../../src/service/sqs/queue/sim-sqs-queue-arn.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAC1F,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE/D;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAC/B,kBAAkB,EAAE,wBAAwB,GAC3C,MAAM,CAIR;AAED;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,mBAAmB,GAAG,MAAM,CAIjE;AAED,UAAU,wBAAwB;IAChC,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;CACvD;AAED;;;;;;GAMG;AACH,qBAAa,cAAc;IACzB,SAAgB,IAAI,EAAE,MAAM,CAAC;IAC7B,SAAgB,KAAK,EAAE,MAAM,CAAC;IAC9B,SAAgB,GAAG,EAAE,MAAM,CAAC;IAE5B,YAAY,UAAU,EAAE,wBAAwB,EAM/C;CACF"}
+{"version":3,"file":"sim-sqs-queue-arn.d.ts","sourceRoot":"","sources":["../../../../src/service/sqs/queue/sim-sqs-queue-arn.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAC1F,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAc/D;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAC/B,kBAAkB,EAAE,wBAAwB,GAC3C,MAAM,CAIR;AAED;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,mBAAmB,GAAG,MAAM,CAIjE;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,mBAAmB,GAAG,MAAM,CAIjE;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,MAAM,GACZ,mBAAmB,GAAG,SAAS,CAoBjC;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAUtD;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAetD;AAED,UAAU,wBAAwB;IAChC,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;CACvD;AAED;;;;;;GAMG;AACH,qBAAa,cAAc;IACzB,SAAgB,IAAI,EAAE,MAAM,CAAC;IAC7B,SAAgB,KAAK,EAAE,MAAM,CAAC;IAC9B,SAAgB,GAAG,EAAE,MAAM,CAAC;IAE5B,YAAY,UAAU,EAAE,wBAAwB,EAM/C;CACF"}

package/dist/service/sqs/queue/sim-sqs-queue-arn.js

@@ -1,3 +1,14 @@
+import { assertDefined } from "../../../util/type-guard/defined.js";
+import { SimSqsQueueUrl } from "./sim-sqs-queue-url.js";
+/**
+ * How a queue ARN is written: no resource type separator, so the queue's name
+ * follows the account id directly.
+ *
+ * The name takes no dot, which rules out the `<name>.fifo` a FIFO queue is
+ * named by. That is deliberate rather than an omission: simulated SQS refuses
+ * a queue name ending in `.fifo`, so no queue here can ever have one.
+ */
+const queueArnPattern = /^arn:aws:sqs:(?<regionName>[a-z\d-]+):(?<accountId>\d{12}):(?<name>[\w-]{1,80})$/u;
 /**
  * The part of a queue ARN that comes before the queue's own name.
  *
@@ -21,6 +32,64 @@ export function sqsQueueUrl(location) {
     const { regionName, accountId, name } = location;
     return `https://sqs.${regionName}.amazonaws.com/${accountId}/${name}`;
 }
+/**
+ * The ARN an IAM policy names a queue by.
+ */
+export function sqsQueueArn(location) {
+    const { regionName, accountId, name } = location;
+    return `arn:aws:sqs:${regionName}:${accountId}:${name}`;
+}
+/**
+ * Read the three facts a queue ARN carries, or nothing for a value that is not
+ * a queue ARN.
+ */
+export function parseSqsQueueArn(value) {
+    const groups = queueArnPattern.exec(value)?.groups;
+    if (groups === undefined) {
+        return undefined;
+    }
+    const { regionName, accountId, name } = groups;
+    /* v8 ignore next 3 -- unreachable: a match always fills every named group,
+       but the index signature the regex groups come back as cannot say so. */
+    if (regionName === undefined ||
+        accountId === undefined ||
+        name === undefined) {
+        return undefined;
+    }
+    return { regionName, accountId, name };
+}
+/**
+ * The URL SQS requests name the queue an ARN names by, refusing a value that
+ * is not a queue ARN.
+ *
+ * Anything holding a queue ARN and about to make an SDK request goes through
+ * here, so the two formats are converted in one place rather than wherever a
+ * consumer happens to hold the ARN.
+ */
+export function sqsQueueUrlOf(queueArn) {
+    const location = parseSqsQueueArn(queueArn);
+    assertDefined(location, `${queueArn} is not an SQS queue ARN, which is written ` +
+        `arn:aws:sqs:<region>:<account-id>:<queue-name>`);
+    return sqsQueueUrl(location);
+}
+/**
+ * The ARN naming the queue a URL names, refusing a value that is not a queue
+ * URL.
+ *
+ * A user names a queue by its URL, since that is what `CreateQueue` answers
+ * with, and everything that authorizes or watches a queue names it by ARN.
+ */
+export function sqsQueueArnOf(queueUrl) {
+    const location = SimSqsQueueUrl.parse(queueUrl);
+    const queueArn = location === undefined ? "" : sqsQueueArn(location);
+    // Read back what was built, so a URL naming a queue simulated SQS could never
+    // hold, such as a FIFO one, is refused here rather than at the first use of
+    // the ARN. The two readers agree by construction that way.
+    assertDefined(parseSqsQueueArn(queueArn), `${queueUrl} does not name a queue simulated SQS can hold. A queue URL is ` +
+        `written https://sqs.<region>.amazonaws.com/<account-id>/<queue-name>, ` +
+        `and a FIFO queue is not simulated.`);
+    return queueArn;
+}
 /**
  * The ARN and URL of one simulated queue.
  *

package/dist/service/sqs/queue/sim-sqs-queue-arn.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-sqs-queue-arn.js","sourceRoot":"","sources":["../../../../src/service/sqs/queue/sim-sqs-queue-arn.ts"],"names":[],"mappings":"AAGA;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAC/B,kBAA4C;IAE5C,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,kBAAkB,CAAC;IAErD,OAAO,eAAe,UAAU,IAAI,SAAS,GAAG,CAAC;AACnD,CAAC;AAcD;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,QAA6B;IACvD,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC;IAEjD,OAAO,eAAe,UAAU,kBAAkB,SAAS,IAAI,IAAI,EAAE,CAAC;AACxE,CAAC;AAOD;;;;;;GAMG;AACH,MAAM,OAAO,cAAc;IACT,IAAI,CAAS;IACb,KAAK,CAAS;IACd,GAAG,CAAS;IAE5B,YAAY,UAAoC;QAC9C,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,GAAG,UAAU,CAAC;QAEhD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC;QACvB,IAAI,CAAC,KAAK,GAAG,iBAAiB,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;QAChE,IAAI,CAAC,GAAG,GAAG,WAAW,CAAC,EAAE,GAAG,kBAAkB,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACtE,CAAC;CACF"}
+{"version":3,"file":"sim-sqs-queue-arn.js","sourceRoot":"","sources":["../../../../src/service/sqs/queue/sim-sqs-queue-arn.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAGpE,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD;;;;;;;GAOG;AACH,MAAM,eAAe,GACnB,mFAAmF,CAAC;AAEtF;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAC/B,kBAA4C;IAE5C,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,kBAAkB,CAAC;IAErD,OAAO,eAAe,UAAU,IAAI,SAAS,GAAG,CAAC;AACnD,CAAC;AAcD;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,QAA6B;IACvD,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC;IAEjD,OAAO,eAAe,UAAU,kBAAkB,SAAS,IAAI,IAAI,EAAE,CAAC;AACxE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,QAA6B;IACvD,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC;IAEjD,OAAO,eAAe,UAAU,IAAI,SAAS,IAAI,IAAI,EAAE,CAAC;AAC1D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,KAAa;IAEb,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAEnD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC;IAE/C;8EAC0E;IAC1E,IACE,UAAU,KAAK,SAAS;QACxB,SAAS,KAAK,SAAS;QACvB,IAAI,KAAK,SAAS,EAClB,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AACzC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAE5C,aAAa,CACX,QAAQ,EACR,GAAG,QAAQ,6CAA6C;QACtD,gDAAgD,CACnD,CAAC;IAEF,OAAO,WAAW,CAAC,QAAQ,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IAErE,8EAA8E;IAC9E,4EAA4E;IAC5E,2DAA2D;IAC3D,aAAa,CACX,gBAAgB,CAAC,QAAQ,CAAC,EAC1B,GAAG,QAAQ,gEAAgE;QACzE,wEAAwE;QACxE,oCAAoC,CACvC,CAAC;IAEF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAOD;;;;;;GAMG;AACH,MAAM,OAAO,cAAc;IACT,IAAI,CAAS;IACb,KAAK,CAAS;IACd,GAAG,CAAS;IAE5B,YAAY,UAAoC;QAC9C,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,GAAG,UAAU,CAAC;QAEhD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC;QACvB,IAAI,CAAC,KAAK,GAAG,iBAAiB,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;QAChE,IAAI,CAAC,GAAG,GAAG,WAAW,CAAC,EAAE,GAAG,kBAAkB,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACtE,CAAC;CACF"}

package/dist/service/sts/service-role/sim-service-role.d.ts

@@ -0,0 +1,68 @@
+import type { SimAwsCaller } from "../../aws/caller/sim-aws-caller.js";
+import type { SimAwsAccountId } from "../../aws/sim-aws-account.js";
+import type { SimIam } from "../../iam/sim-iam.js";
+/**
+ * Which IAM a role ARN belongs to, and what the role is called there.
+ */
+export interface SimServiceRoleTarget {
+    readonly accountId: SimAwsAccountId;
+    readonly roleName: string;
+    readonly roleArn: string;
+}
+/**
+ * How a service says that it could not assume a role, in its own words.
+ *
+ * The two failures are the two that go wrong in a real account, and each
+ * service names them differently because each is fixed somewhere different: a
+ * schedule that cannot invoke its target and a rule that cannot reach one are
+ * the same mechanism and not the same message.
+ */
+export interface SimServiceRoleRefusals {
+    /**
+     * There is no such role to assume.
+     */
+    missingRole(target: SimServiceRoleTarget): Error;
+    /**
+     * The role is there and does not trust this service.
+     */
+    untrustedRole(target: SimServiceRoleTarget, servicePrincipal: string): Error;
+}
+/**
+ * What one service assuming a role needs to know.
+ */
+export interface SimServiceRoleAssumption {
+    readonly target: SimServiceRoleTarget;
+    readonly servicePrincipal: string;
+    /**
+     * The session name AWS gives the role this service assumes.
+     */
+    readonly sessionName: string;
+    /**
+     * The IAM of the role's own Account, which is not always the target's.
+     */
+    readonly iam: SimIam;
+    readonly refusals: SimServiceRoleRefusals;
+}
+/**
+ * Read the Account and name out of a role ARN a service will assume.
+ *
+ * The ARN is checked for being a role ARN where the request that carried it was
+ * written, so this is reading a known shape rather than validating an unknown
+ * one.
+ */
+export declare function simServiceRoleTarget(roleArn: string): SimServiceRoleTarget;
+/**
+ * Assume a role as a service principal, and answer with the caller it makes.
+ *
+ * This is what an execution role is: a service reaches a resource as a session
+ * of the role rather than as itself, and the role's own policies decide what it
+ * may do. So the two things checked here are the two things that go wrong in a
+ * real account: whether the role trusts the service at all, and then,
+ * separately, whether it may do the thing.
+ *
+ * The caller carries both principals. The request is attributed to the session,
+ * as it is on AWS, while the policies that apply are the role's, which is
+ * exactly the split `SimResolvedCaller` exists for.
+ */
+export declare function assumeSimServiceRole(assumption: SimServiceRoleAssumption): Promise<SimAwsCaller>;
+//# sourceMappingURL=sim-service-role.d.ts.map

package/dist/service/sts/service-role/sim-service-role.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-service-role.d.ts","sourceRoot":"","sources":["../../../../src/service/sts/service-role/sim-service-role.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAGpE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAGnD;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,sBAAsB;IACrC;;OAEG;IACH,WAAW,CAAC,MAAM,EAAE,oBAAoB,GAAG,KAAK,CAAC;IAEjD;;OAEG;IACH,aAAa,CAAC,MAAM,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,GAAG,KAAK,CAAC;CAC9E;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAElC;;OAEG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B;;OAEG;IACH,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAErB,QAAQ,CAAC,QAAQ,EAAE,sBAAsB,CAAC;CAC3C;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,oBAAoB,CAI1E;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,oBAAoB,CACxC,UAAU,EAAE,wBAAwB,GACnC,OAAO,CAAC,YAAY,CAAC,CA2BvB"}