@kensio/yulin 1.13.0 → 1.14.0

package/README.md

@@ -25,6 +25,7 @@ npm i -D @kensio/yulin
 - [CloudFront](./docs/services/cloudfront "Simulated CloudFront docs")
 - [Cognito user pools](./docs/services/cognito "Simulated Cognito user pools docs")
 - [DynamoDB](./docs/services/dynamodb "Simulated DynamoDB docs")
+- [ECR](./docs/services/ecr "Simulated ECR docs")
 - [ECS](./docs/services/ecs "Simulated ECS docs")
 - [EventBridge](./docs/services/eventbridge "Simulated EventBridge docs")
 - [IAM](./docs/services/iam "Simulated IAM docs")

package/dist/serve/controller/factory/sim-aws-service-controller-factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-service-controller-factory.d.ts","sourceRoot":"","sources":["../../../../src/serve/controller/factory/sim-aws-service-controller-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAC5E,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iCAAiC,CAAC;AAQ9D;;GAEG;AACH,qBAAa,8BAA8B;IAC7B,OAAO,CAAC,QAAQ,CAAC,MAAM;IAAnC,YAA6B,MAAM,EAAE,MAAM,EAAI;IAE/C;;OAEG;IACH,MAAM,CAAC,WAAW,EAAE,MAAM,GAAG,uBAAuB,CA4BnD;CACF"}
+{"version":3,"file":"sim-aws-service-controller-factory.d.ts","sourceRoot":"","sources":["../../../../src/serve/controller/factory/sim-aws-service-controller-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAC5E,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iCAAiC,CAAC;AAS9D;;GAEG;AACH,qBAAa,8BAA8B;IAC7B,OAAO,CAAC,QAAQ,CAAC,MAAM;IAAnC,YAA6B,MAAM,EAAE,MAAM,EAAI;IAE/C;;OAEG;IACH,MAAM,CAAC,WAAW,EAAE,MAAM,GAAG,uBAAuB,CA+BnD;CACF"}

package/dist/serve/controller/factory/sim-aws-service-controller-factory.js

@@ -1,6 +1,7 @@
 import { SimApiGatewayV2ServiceController } from "../../../service/apigatewayv2/serve/sim-api-gateway-v2-controller.js";
 import { SimCloudFrontServiceController } from "../../../service/cloudfront/controller/sim-cloudfront-controller.js";
 import { SimCognitoServiceController } from "../../../service/cognito/serve/sim-cognito-controller.js";
+import { SimElbV2ServiceController } from "../../../service/elbv2/serve/sim-elbv2-controller.js";
 import { SimLambdaServiceController } from "../../../service/lambda/serve/sim-lambda-controller.js";
 import { SimRoute53ServiceController } from "../../../service/route53/serve/sim-route53-controller.js";
 import { SimS3ServiceController } from "../../../service/s3/serve/sim-s3-controller.js";
@@ -34,6 +35,9 @@ export class SimAwsServiceControllerFactory {
             case "apiGatewayV2": {
                 return new SimApiGatewayV2ServiceController({ simAws: this.simAws });
             }
+            case "elbV2": {
+                return new SimElbV2ServiceController({ simAws: this.simAws });
+            }
             case "cognitoIdentityProvider": {
                 return new SimCognitoServiceController({ simAws: this.simAws });
             }

package/dist/serve/controller/factory/sim-aws-service-controller-factory.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-service-controller-factory.js","sourceRoot":"","sources":["../../../../src/serve/controller/factory/sim-aws-service-controller-factory.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gCAAgC,EAAE,MAAM,sEAAsE,CAAC;AACxH,OAAO,EAAE,8BAA8B,EAAE,MAAM,qEAAqE,CAAC;AACrH,OAAO,EAAE,2BAA2B,EAAE,MAAM,0DAA0D,CAAC;AACvG,OAAO,EAAE,0BAA0B,EAAE,MAAM,wDAAwD,CAAC;AACpG,OAAO,EAAE,2BAA2B,EAAE,MAAM,0DAA0D,CAAC;AACvG,OAAO,EAAE,sBAAsB,EAAE,MAAM,gDAAgD,CAAC;AAExF;;GAEG;AACH,MAAM,OAAO,8BAA8B;IACZ,MAAM;IAAnC,YAA6B,MAAc;sBAAd,MAAM;IAAW,CAAC;IAE/C;;OAEG;IACH,MAAM,CAAC,WAAmB;QACxB,QAAQ,WAAW,EAAE,CAAC;YACpB,KAAK,IAAI,EAAE,CAAC;gBACV,OAAO,IAAI,sBAAsB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YAC7D,CAAC;YACD,KAAK,YAAY,EAAE,CAAC;gBAClB,OAAO,IAAI,8BAA8B,CAAC;oBACxC,MAAM,EAAE,IAAI,CAAC,MAAM;iBACpB,CAAC,CAAC;YACL,CAAC;YACD,KAAK,QAAQ,EAAE,CAAC;gBACd,OAAO,IAAI,0BAA0B,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YACjE,CAAC;YACD,KAAK,SAAS,EAAE,CAAC;gBACf,OAAO,IAAI,2BAA2B,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YAClE,CAAC;YACD,KAAK,cAAc,EAAE,CAAC;gBACpB,OAAO,IAAI,gCAAgC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YACvE,CAAC;YACD,KAAK,yBAAyB,EAAE,CAAC;gBAC/B,OAAO,IAAI,2BAA2B,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YAClE,CAAC;YACD,SAAS,CAAC;gBACR,MAAM,IAAI,KAAK,CACb,2CAA2C,WAAW,EAAE,CACzD,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"sim-aws-service-controller-factory.js","sourceRoot":"","sources":["../../../../src/serve/controller/factory/sim-aws-service-controller-factory.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gCAAgC,EAAE,MAAM,sEAAsE,CAAC;AACxH,OAAO,EAAE,8BAA8B,EAAE,MAAM,qEAAqE,CAAC;AACrH,OAAO,EAAE,2BAA2B,EAAE,MAAM,0DAA0D,CAAC;AACvG,OAAO,EAAE,yBAAyB,EAAE,MAAM,sDAAsD,CAAC;AACjG,OAAO,EAAE,0BAA0B,EAAE,MAAM,wDAAwD,CAAC;AACpG,OAAO,EAAE,2BAA2B,EAAE,MAAM,0DAA0D,CAAC;AACvG,OAAO,EAAE,sBAAsB,EAAE,MAAM,gDAAgD,CAAC;AAExF;;GAEG;AACH,MAAM,OAAO,8BAA8B;IACZ,MAAM;IAAnC,YAA6B,MAAc;sBAAd,MAAM;IAAW,CAAC;IAE/C;;OAEG;IACH,MAAM,CAAC,WAAmB;QACxB,QAAQ,WAAW,EAAE,CAAC;YACpB,KAAK,IAAI,EAAE,CAAC;gBACV,OAAO,IAAI,sBAAsB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YAC7D,CAAC;YACD,KAAK,YAAY,EAAE,CAAC;gBAClB,OAAO,IAAI,8BAA8B,CAAC;oBACxC,MAAM,EAAE,IAAI,CAAC,MAAM;iBACpB,CAAC,CAAC;YACL,CAAC;YACD,KAAK,QAAQ,EAAE,CAAC;gBACd,OAAO,IAAI,0BAA0B,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YACjE,CAAC;YACD,KAAK,SAAS,EAAE,CAAC;gBACf,OAAO,IAAI,2BAA2B,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YAClE,CAAC;YACD,KAAK,cAAc,EAAE,CAAC;gBACpB,OAAO,IAAI,gCAAgC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YACvE,CAAC;YACD,KAAK,OAAO,EAAE,CAAC;gBACb,OAAO,IAAI,yBAAyB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YAChE,CAAC;YACD,KAAK,yBAAyB,EAAE,CAAC;gBAC/B,OAAO,IAAI,2BAA2B,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YAClE,CAAC;YACD,SAAS,CAAC;gBACR,MAAM,IAAI,KAAK,CACb,2CAA2C,WAAW,EAAE,CACzD,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/serve/controller/sim-aws-service-signing-name.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-service-signing-name.d.ts","sourceRoot":"","sources":["../../../src/serve/controller/sim-aws-service-signing-name.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAEvE;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,mBAAmB,CAAC,SAAS,CAAC,GACtC,MAAM,CAuBR"}
+{"version":3,"file":"sim-aws-service-signing-name.d.ts","sourceRoot":"","sources":["../../../src/serve/controller/sim-aws-service-signing-name.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAEvE;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,mBAAmB,CAAC,SAAS,CAAC,GACtC,MAAM,CA6BR"}

package/dist/serve/controller/sim-aws-service-signing-name.js

@@ -28,6 +28,12 @@ export function simAwsServiceSigningName(service) {
             // apigateway control plane that created the API.
             return "execute-api";
         }
+        case "elbV2": {
+            // Nothing signs a request to a load balancer: what it serves is an
+            // ordinary application rather than an AWS API. The name is here so the
+            // mapping stays complete.
+            return "elasticloadbalancing";
+        }
     }
 }
 //# sourceMappingURL=sim-aws-service-signing-name.js.map

package/dist/serve/controller/sim-aws-service-signing-name.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-service-signing-name.js","sourceRoot":"","sources":["../../../src/serve/controller/sim-aws-service-signing-name.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAAuC;IAEvC,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,YAAY,EAAE,CAAC;YAClB,OAAO,YAAY,CAAC;QACtB,CAAC;QACD,KAAK,IAAI,EAAE,CAAC;YACV,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,QAAQ,EAAE,CAAC;YACd,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,KAAK,SAAS,EAAE,CAAC;YACf,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,KAAK,yBAAyB,EAAE,CAAC;YAC/B,OAAO,aAAa,CAAC;QACvB,CAAC;QACD,KAAK,cAAc,EAAE,CAAC;YACpB,8DAA8D;YAC9D,iDAAiD;YACjD,OAAO,aAAa,CAAC;QACvB,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"sim-aws-service-signing-name.js","sourceRoot":"","sources":["../../../src/serve/controller/sim-aws-service-signing-name.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAAuC;IAEvC,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,YAAY,EAAE,CAAC;YAClB,OAAO,YAAY,CAAC;QACtB,CAAC;QACD,KAAK,IAAI,EAAE,CAAC;YACV,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,QAAQ,EAAE,CAAC;YACd,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,KAAK,SAAS,EAAE,CAAC;YACf,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,KAAK,yBAAyB,EAAE,CAAC;YAC/B,OAAO,aAAa,CAAC;QACvB,CAAC;QACD,KAAK,cAAc,EAAE,CAAC;YACpB,8DAA8D;YAC9D,iDAAiD;YACjD,OAAO,aAAa,CAAC;QACvB,CAAC;QACD,KAAK,OAAO,EAAE,CAAC;YACb,mEAAmE;YACnE,uEAAuE;YACvE,0BAA0B;YAC1B,OAAO,sBAAsB,CAAC;QAChC,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/serve/controller/sim-service-controller.d.ts

@@ -1,6 +1,7 @@
 import type { AwsRegionName } from "../../service/aws/sim-aws-region.js";
 import type { SimAws } from "../../service/aws/sim-aws.js";
 import { SimAwsRequestCaller } from "../../service/iam/request/sim-aws-request-caller.js";
+import type { SimAwsRequestSource } from "../../service/iam/request/sim-aws-request-source.js";
 /**
  * Which of a service's endpoints a hostname named.
  *
@@ -14,7 +15,7 @@ import { SimAwsRequestCaller } from "../../service/iam/request/sim-aws-request-c
  */
 export type SimAwsServiceEndpoint = "rest" | "website";
 export interface SimAwsServiceTarget {
-    readonly service: "s3" | "cloudFront" | "lambda" | "route53" | "cognitoIdentityProvider" | "apiGatewayV2";
+    readonly service: "s3" | "cloudFront" | "lambda" | "route53" | "cognitoIdentityProvider" | "apiGatewayV2" | "elbV2";
     readonly resourceName: string;
     readonly regionName?: AwsRegionName;
     readonly endpoint?: SimAwsServiceEndpoint;
@@ -23,6 +24,7 @@ interface SimAwsServiceRequestProperties {
     readonly target: SimAwsServiceTarget;
     readonly request: Request;
     readonly caller?: SimAwsRequestCaller | undefined;
+    readonly source?: SimAwsRequestSource | undefined;
     readonly body?: Uint8Array | undefined;
 }
 /**
@@ -41,6 +43,12 @@ export declare class SimAwsServiceRequest {
     readonly target: SimAwsServiceTarget;
     readonly request: Request;
     readonly caller: SimAwsRequestCaller;
+    /**
+     * The resource the caller is making this request on behalf of, when it said
+     * it was making one for anything. This is what a service principal's grant is
+     * conditioned on, and most requests state none.
+     */
+    readonly source: SimAwsRequestSource | undefined;
     readonly body?: Uint8Array | undefined;
     constructor(properties: SimAwsServiceRequestProperties);
 }

package/dist/serve/controller/sim-service-controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-service-controller.d.ts","sourceRoot":"","sources":["../../../src/serve/controller/sim-service-controller.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,8BAA8B,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,qDAAqD,CAAC;AAE1F;;;;;;;;;;GAUG;AACH,MAAM,MAAM,qBAAqB,GAAG,MAAM,GAAG,SAAS,CAAC;AAEvD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,OAAO,EACZ,IAAI,GACJ,YAAY,GACZ,QAAQ,GACR,SAAS,GACT,yBAAyB,GACzB,cAAc,CAAC;IACnB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAE9B,QAAQ,CAAC,UAAU,CAAC,EAAE,aAAa,CAAC;IACpC,QAAQ,CAAC,QAAQ,CAAC,EAAE,qBAAqB,CAAC;CAC3C;AAED,UAAU,8BAA8B;IACtC,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;IAClD,QAAQ,CAAC,IAAI,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;CACxC;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,oBAAoB;IAC/B,SAAgB,MAAM,EAAE,mBAAmB,CAAC;IAC5C,SAAgB,OAAO,EAAE,OAAO,CAAC;IACjC,SAAgB,MAAM,EAAE,mBAAmB,CAAC;IAC5C,SAAgB,IAAI,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IAE9C,YAAY,UAAU,EAAE,8BAA8B,EAMrD;CACF;AAED;;GAEG;AACH,MAAM,MAAM,8BAA8B,GAAG,CAC3C,MAAM,EAAE,MAAM,KACX,uBAAuB,CAAC;AAE7B;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC;;OAEG;IACH,aAAa,CAAC,cAAc,EAAE,oBAAoB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CACxE"}
+{"version":3,"file":"sim-service-controller.d.ts","sourceRoot":"","sources":["../../../src/serve/controller/sim-service-controller.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,8BAA8B,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,qDAAqD,CAAC;AAC1F,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qDAAqD,CAAC;AAE/F;;;;;;;;;;GAUG;AACH,MAAM,MAAM,qBAAqB,GAAG,MAAM,GAAG,SAAS,CAAC;AAEvD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,OAAO,EACZ,IAAI,GACJ,YAAY,GACZ,QAAQ,GACR,SAAS,GACT,yBAAyB,GACzB,cAAc,GACd,OAAO,CAAC;IACZ,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAE9B,QAAQ,CAAC,UAAU,CAAC,EAAE,aAAa,CAAC;IACpC,QAAQ,CAAC,QAAQ,CAAC,EAAE,qBAAqB,CAAC;CAC3C;AAED,UAAU,8BAA8B;IACtC,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;IAClD,QAAQ,CAAC,MAAM,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;IAClD,QAAQ,CAAC,IAAI,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;CACxC;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,oBAAoB;IAC/B,SAAgB,MAAM,EAAE,mBAAmB,CAAC;IAC5C,SAAgB,OAAO,EAAE,OAAO,CAAC;IACjC,SAAgB,MAAM,EAAE,mBAAmB,CAAC;IAC5C;;;;OAIG;IACH,SAAgB,MAAM,EAAE,mBAAmB,GAAG,SAAS,CAAC;IACxD,SAAgB,IAAI,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IAE9C,YAAY,UAAU,EAAE,8BAA8B,EAOrD;CACF;AAED;;GAEG;AACH,MAAM,MAAM,8BAA8B,GAAG,CAC3C,MAAM,EAAE,MAAM,KACX,uBAAuB,CAAC;AAE7B;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC;;OAEG;IACH,aAAa,CAAC,cAAc,EAAE,oBAAoB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CACxE"}

package/dist/serve/controller/sim-service-controller.js

@@ -15,12 +15,19 @@ export class SimAwsServiceRequest {
     target;
     request;
     caller;
+    /**
+     * The resource the caller is making this request on behalf of, when it said
+     * it was making one for anything. This is what a service principal's grant is
+     * conditioned on, and most requests state none.
+     */
+    source;
     body;
     constructor(properties) {
         this.target = properties.target;
         this.request = properties.request;
         // An unattributed request is anonymous, never the Account root.
         this.caller = properties.caller ?? SimAwsRequestCaller.anonymous();
+        this.source = properties.source;
         this.body = properties.body;
     }
 }

package/dist/serve/controller/sim-service-controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-service-controller.js","sourceRoot":"","sources":["../../../src/serve/controller/sim-service-controller.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,qDAAqD,CAAC;AAoC1F;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,oBAAoB;IACf,MAAM,CAAsB;IAC5B,OAAO,CAAU;IACjB,MAAM,CAAsB;IAC5B,IAAI,CAA0B;IAE9C,YAAY,UAA0C;QACpD,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;QAClC,gEAAgE;QAChE,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,IAAI,mBAAmB,CAAC,SAAS,EAAE,CAAC;QACnE,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;IAC9B,CAAC;CACF"}
+{"version":3,"file":"sim-service-controller.js","sourceRoot":"","sources":["../../../src/serve/controller/sim-service-controller.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,qDAAqD,CAAC;AAuC1F;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,oBAAoB;IACf,MAAM,CAAsB;IAC5B,OAAO,CAAU;IACjB,MAAM,CAAsB;IAC5C;;;;OAIG;IACa,MAAM,CAAkC;IACxC,IAAI,CAA0B;IAE9C,YAAY,UAA0C;QACpD,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;QAClC,gEAAgE;QAChE,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,IAAI,mBAAmB,CAAC,SAAS,EAAE,CAAC;QACnE,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;IAC9B,CAAC;CACF"}

package/dist/serve/http/request/sim-aws-received-request.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-received-request.d.ts","sourceRoot":"","sources":["../../../../src/serve/http/request/sim-aws-received-request.ts"],"names":[],"mappings":"AAQA;;;;;;;GAOG;AACH,qBAAa,qBAAqB;IAChC;;OAEG;IACH,SAAgB,IAAI,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IAE9C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAU;IAEnC,OAAO,eAGN;IAED;;OAEG;IACH,OAAa,OAAO,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAOrE;IAED;;;;;;OAMG;IACH,UAAU,IAAI,OAAO,CAYpB;CACF"}
+{"version":3,"file":"sim-aws-received-request.d.ts","sourceRoot":"","sources":["../../../../src/serve/http/request/sim-aws-received-request.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AACH,qBAAa,qBAAqB;IAChC;;OAEG;IACH,SAAgB,IAAI,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IAE9C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAU;IAEnC,OAAO,eAGN;IAED;;OAEG;IACH,OAAa,OAAO,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAOrE;IAED;;;;;;OAMG;IACH,UAAU,IAAI,OAAO,CAUpB;CACF"}

package/dist/serve/http/request/sim-aws-received-request.js

@@ -1,9 +1,4 @@
-import { simAwsCallerHeaderName } from "../../../service/iam/request/sim-aws-caller-header.js";
-/**
- * Header names that are instructions to the simulator rather than part of the
- * request being simulated.
- */
-const controlHeaderNames = [simAwsCallerHeaderName];
+import { stripSimAwsControlHeaders } from "../../../service/iam/request/sim-aws-control-headers.js";
 /**
  * An HTTP request as it arrived at the simulated AWS boundary.
  *
@@ -40,9 +35,7 @@ export class SimAwsReceivedRequest {
      */
     forService() {
         const headers = new Headers(this.received.headers);
-        for (const name of controlHeaderNames) {
-            headers.delete(name);
-        }
+        stripSimAwsControlHeaders(headers);
         return new Request(this.received.url, {
             method: this.received.method,
             headers,

package/dist/serve/http/request/sim-aws-received-request.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-received-request.js","sourceRoot":"","sources":["../../../../src/serve/http/request/sim-aws-received-request.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,uDAAuD,CAAC;AAE/F;;;GAGG;AACH,MAAM,kBAAkB,GAAG,CAAC,sBAAsB,CAAC,CAAC;AAEpD;;;;;;;GAOG;AACH,MAAM,OAAO,qBAAqB;IAChC;;OAEG;IACa,IAAI,CAA0B;IAE7B,QAAQ,CAAU;IAEnC,YAAoB,QAAiB,EAAE,IAA4B;QACjE,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAgB;QACnC,MAAM,IAAI,GACR,OAAO,CAAC,IAAI,KAAK,IAAI;YACnB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,IAAI,UAAU,CAAC,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;QAElD,OAAO,IAAI,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAClD,CAAC;IAED;;;;;;OAMG;IACH,UAAU;QACR,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAEnD,KAAK,MAAM,IAAI,IAAI,kBAAkB,EAAE,CAAC;YACtC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;QAED,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE;YACpC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM;YAC5B,OAAO;YACP,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;SACpD,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"sim-aws-received-request.js","sourceRoot":"","sources":["../../../../src/serve/http/request/sim-aws-received-request.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,yDAAyD,CAAC;AAEpG;;;;;;;GAOG;AACH,MAAM,OAAO,qBAAqB;IAChC;;OAEG;IACa,IAAI,CAA0B;IAE7B,QAAQ,CAAU;IAEnC,YAAoB,QAAiB,EAAE,IAA4B;QACjE,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAgB;QACnC,MAAM,IAAI,GACR,OAAO,CAAC,IAAI,KAAK,IAAI;YACnB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,IAAI,UAAU,CAAC,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;QAElD,OAAO,IAAI,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAClD,CAAC;IAED;;;;;;OAMG;IACH,UAAU;QACR,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAEnD,yBAAyB,CAAC,OAAO,CAAC,CAAC;QAEnC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE;YACpC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM;YAC5B,OAAO;YACP,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;SACpD,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/serve/http/request/sim-aws-request-authenticator.d.ts

@@ -10,6 +10,10 @@ interface SimAwsRequestAuthenticatorProperties {
  * once, the principal is resolved by IAM, and the result is the request a
  * controller is given. Controllers therefore never see an unattributed
  * request, and never have to decide for themselves what an unsigned one means.
+ *
+ * A request that states the resource it is being made on behalf of carries that
+ * through as well, since a resource policy granting a service principal is
+ * usually conditioned on it.
  */
 export declare class SimAwsRequestAuthenticator {
     private readonly simAws;

package/dist/serve/http/request/sim-aws-request-authenticator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-request-authenticator.d.ts","sourceRoot":"","sources":["../../../../src/serve/http/request/sim-aws-request-authenticator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iCAAiC,CAAC;AAE9D,OAAO,EACL,oBAAoB,EACpB,KAAK,mBAAmB,EACzB,MAAM,4CAA4C,CAAC;AAGpD,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;GAOG;AACH,qBAAa,0BAA0B;IACrC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAEhC,YAAY,UAAU,EAAE,oCAAoC,EAE3D;IAED;;;;;;;;;;OAUG;IACG,YAAY,CAChB,MAAM,EAAE,mBAAmB,EAC3B,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,oBAAoB,CAAC,CAiB/B;CACF"}
+{"version":3,"file":"sim-aws-request-authenticator.d.ts","sourceRoot":"","sources":["../../../../src/serve/http/request/sim-aws-request-authenticator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iCAAiC,CAAC;AAE9D,OAAO,EACL,oBAAoB,EACpB,KAAK,mBAAmB,EACzB,MAAM,4CAA4C,CAAC;AAIpD,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,0BAA0B;IACrC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAEhC,YAAY,UAAU,EAAE,oCAAoC,EAE3D;IAED;;;;;;;;;;OAUG;IACG,YAAY,CAChB,MAAM,EAAE,mBAAmB,EAC3B,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,oBAAoB,CAAC,CAoB/B;CACF"}

package/dist/serve/http/request/sim-aws-request-authenticator.js

@@ -1,5 +1,6 @@
 import { simAwsServiceSigningName } from "../../controller/sim-aws-service-signing-name.js";
 import { SimAwsServiceRequest, } from "../../controller/sim-service-controller.js";
+import { SimAwsRequestSource } from "../../../service/iam/request/sim-aws-request-source.js";
 import { SimAwsReceivedRequest } from "./sim-aws-received-request.js";
 /**
  * Turns a received HTTP request into a request a simulated service can serve.
@@ -8,6 +9,10 @@ import { SimAwsReceivedRequest } from "./sim-aws-received-request.js";
  * once, the principal is resolved by IAM, and the result is the request a
  * controller is given. Controllers therefore never see an unattributed
  * request, and never have to decide for themselves what an unsigned one means.
+ *
+ * A request that states the resource it is being made on behalf of carries that
+ * through as well, since a resource policy granting a service principal is
+ * usually conditioned on it.
  */
 export class SimAwsRequestAuthenticator {
     simAws;
@@ -34,10 +39,12 @@ export class SimAwsRequestAuthenticator {
                 regionName: target.regionName,
             },
         });
+        const source = SimAwsRequestSource.fromHeaders(request.headers);
         return new SimAwsServiceRequest({
             target,
             request: received.forService(),
             caller,
+            ...(source !== undefined && { source }),
             body: received.body,
         });
     }

package/dist/serve/http/request/sim-aws-request-authenticator.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-request-authenticator.js","sourceRoot":"","sources":["../../../../src/serve/http/request/sim-aws-request-authenticator.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,wBAAwB,EAAE,MAAM,kDAAkD,CAAC;AAC5F,OAAO,EACL,oBAAoB,GAErB,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAMtE;;;;;;;GAOG;AACH,MAAM,OAAO,0BAA0B;IACpB,MAAM,CAAS;IAEhC,YAAY,UAAgD;QAC1D,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAClC,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,YAAY,CAChB,MAA2B,EAC3B,OAAgB;QAEhB,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAE9D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,OAAO,EAAE;YACvD,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,aAAa,EAAE;gBACb,WAAW,EAAE,wBAAwB,CAAC,MAAM,CAAC,OAAO,CAAC;gBACrD,UAAU,EAAE,MAAM,CAAC,UAAU;aAC9B;SACF,CAAC,CAAC;QAEH,OAAO,IAAI,oBAAoB,CAAC;YAC9B,MAAM;YACN,OAAO,EAAE,QAAQ,CAAC,UAAU,EAAE;YAC9B,MAAM;YACN,IAAI,EAAE,QAAQ,CAAC,IAAI;SACpB,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"sim-aws-request-authenticator.js","sourceRoot":"","sources":["../../../../src/serve/http/request/sim-aws-request-authenticator.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,wBAAwB,EAAE,MAAM,kDAAkD,CAAC;AAC5F,OAAO,EACL,oBAAoB,GAErB,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,wDAAwD,CAAC;AAC7F,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAMtE;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,0BAA0B;IACpB,MAAM,CAAS;IAEhC,YAAY,UAAgD;QAC1D,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAClC,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,YAAY,CAChB,MAA2B,EAC3B,OAAgB;QAEhB,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAE9D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,OAAO,EAAE;YACvD,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,aAAa,EAAE;gBACb,WAAW,EAAE,wBAAwB,CAAC,MAAM,CAAC,OAAO,CAAC;gBACrD,UAAU,EAAE,MAAM,CAAC,UAAU;aAC9B;SACF,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,mBAAmB,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAEhE,OAAO,IAAI,oBAAoB,CAAC;YAC9B,MAAM;YACN,OAAO,EAAE,QAAQ,CAAC,UAAU,EAAE;YAC9B,MAAM;YACN,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,CAAC;YACvC,IAAI,EAAE,QAAQ,CAAC,IAAI;SACpB,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/serve/{payload-2/sim-payload-2-connection.d.ts → http/sim-aws-proxied-connection.d.ts}

@@ -1,12 +1,12 @@
 /**
- * The client address a simulated invocation is reported as coming from.
+ * The client address a simulated proxied request is reported as coming from.
  *
  * Requests reach a simulated endpoint over localhost or not over a socket at
  * all, so there is no remote address to report. Everything a handler can see
  * about the caller's network origin says loopback rather than pretending to a
  * public address the simulation does not have.
  */
-export declare const simPayload2SourceIp = "127.0.0.1";
+export declare const simAwsProxiedSourceIp = "127.0.0.1";
 /**
  * Build the X-Ray trace header AWS stamps on a proxied request.
  *
@@ -14,6 +14,9 @@ export declare const simPayload2SourceIp = "127.0.0.1";
  * encodes when the trace started. Nothing here is a real trace: X-Ray is not
  * simulated, and this exists because a handler reading `x-amzn-trace-id`
  * should find the shape it would find on AWS rather than nothing at all.
+ *
+ * Every AWS service that proxies a request to a function stamps this, which is
+ * why it is here rather than under one payload format.
  */
-export declare function simPayload2TraceId(at: Date): string;
-//# sourceMappingURL=sim-payload-2-connection.d.ts.map
+export declare function simAwsProxiedTraceId(at: Date): string;
+//# sourceMappingURL=sim-aws-proxied-connection.d.ts.map

package/dist/serve/http/sim-aws-proxied-connection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-aws-proxied-connection.d.ts","sourceRoot":"","sources":["../../../src/serve/http/sim-aws-proxied-connection.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,cAAc,CAAC;AAEjD;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,IAAI,GAAG,MAAM,CAMrD"}

package/dist/serve/{payload-2/sim-payload-2-connection.js → http/sim-aws-proxied-connection.js}

@@ -1,13 +1,13 @@
 import { faker } from "@faker-js/faker";
 /**
- * The client address a simulated invocation is reported as coming from.
+ * The client address a simulated proxied request is reported as coming from.
  *
  * Requests reach a simulated endpoint over localhost or not over a socket at
  * all, so there is no remote address to report. Everything a handler can see
  * about the caller's network origin says loopback rather than pretending to a
  * public address the simulation does not have.
  */
-export const simPayload2SourceIp = "127.0.0.1";
+export const simAwsProxiedSourceIp = "127.0.0.1";
 /**
  * Build the X-Ray trace header AWS stamps on a proxied request.
  *
@@ -15,11 +15,14 @@ export const simPayload2SourceIp = "127.0.0.1";
  * encodes when the trace started. Nothing here is a real trace: X-Ray is not
  * simulated, and this exists because a handler reading `x-amzn-trace-id`
  * should find the shape it would find on AWS rather than nothing at all.
+ *
+ * Every AWS service that proxies a request to a function stamps this, which is
+ * why it is here rather than under one payload format.
  */
-export function simPayload2TraceId(at) {
+export function simAwsProxiedTraceId(at) {
     const startedAt = Math.floor(at.getTime() / 1000)
         .toString(16)
         .padStart(8, "0");
     return `Root=1-${startedAt}-${faker.helpers.fromRegExp(/[0-9a-f]{24}/)}`;
 }
-//# sourceMappingURL=sim-payload-2-connection.js.map
+//# sourceMappingURL=sim-aws-proxied-connection.js.map

package/dist/serve/http/sim-aws-proxied-connection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-aws-proxied-connection.js","sourceRoot":"","sources":["../../../src/serve/http/sim-aws-proxied-connection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAExC;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,WAAW,CAAC;AAEjD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,oBAAoB,CAAC,EAAQ;IAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC;SAC9C,QAAQ,CAAC,EAAE,CAAC;SACZ,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAEpB,OAAO,UAAU,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;AAC3E,CAAC"}

package/dist/serve/http/url/sim-aws-request-hostname.d.ts

@@ -10,4 +10,14 @@
  * client sends and what AWS itself routes on.
  */
 export declare function simAwsRequestHostname(request: Request): string;
+/**
+ * Whether a request reached the local server under the Yulin-local suffix.
+ *
+ * A request that did carries the local server's port rather than the port the
+ * client asked for, because the suffix is how a client reaches localhost while
+ * nothing resolves the name it is really after. Anything reading a port out of
+ * a request has to know that, which is why the suffix is reported here rather
+ * than being taken apart again wherever it matters.
+ */
+export declare function isSimAwsLocalRequest(request: Request): boolean;
 //# sourceMappingURL=sim-aws-request-hostname.d.ts.map

package/dist/serve/http/url/sim-aws-request-hostname.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-request-hostname.d.ts","sourceRoot":"","sources":["../../../../src/serve/http/url/sim-aws-request-hostname.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAM9D"}
+{"version":3,"file":"sim-aws-request-hostname.d.ts","sourceRoot":"","sources":["../../../../src/serve/http/url/sim-aws-request-hostname.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAI9D;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAI9D"}

package/dist/serve/http/url/sim-aws-request-hostname.js

@@ -11,9 +11,27 @@ import { SimAwsLocalUrl } from "./sim-aws-local-url.js";
  * client sends and what AWS itself routes on.
  */
 export function simAwsRequestHostname(request) {
-    const requestHost = request.headers.get("host") ?? new URL(request.url).host;
     return new SimAwsLocalUrl({
-        input: `http://${requestHost}/`,
+        input: `http://${simAwsRequestHost(request)}/`,
     }).withoutLocalhostSuffix().hostname;
 }
+/**
+ * Whether a request reached the local server under the Yulin-local suffix.
+ *
+ * A request that did carries the local server's port rather than the port the
+ * client asked for, because the suffix is how a client reaches localhost while
+ * nothing resolves the name it is really after. Anything reading a port out of
+ * a request has to know that, which is why the suffix is reported here rather
+ * than being taken apart again wherever it matters.
+ */
+export function isSimAwsLocalRequest(request) {
+    const { hostname } = new URL(`http://${simAwsRequestHost(request)}/`);
+    return hostname.endsWith(SimAwsLocalUrl.localhostSuffix);
+}
+/**
+ * The host a request named, which is its Host header when it sent one.
+ */
+function simAwsRequestHost(request) {
+    return request.headers.get("host") ?? new URL(request.url).host;
+}
 //# sourceMappingURL=sim-aws-request-hostname.js.map

package/dist/serve/http/url/sim-aws-request-hostname.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-request-hostname.js","sourceRoot":"","sources":["../../../../src/serve/http/url/sim-aws-request-hostname.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACpD,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;IAE7E,OAAO,IAAI,cAAc,CAAC;QACxB,KAAK,EAAE,UAAU,WAAW,GAAG;KAChC,CAAC,CAAC,sBAAsB,EAAE,CAAC,QAAQ,CAAC;AACvC,CAAC"}
+{"version":3,"file":"sim-aws-request-hostname.js","sourceRoot":"","sources":["../../../../src/serve/http/url/sim-aws-request-hostname.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACpD,OAAO,IAAI,cAAc,CAAC;QACxB,KAAK,EAAE,UAAU,iBAAiB,CAAC,OAAO,CAAC,GAAG;KAC/C,CAAC,CAAC,sBAAsB,EAAE,CAAC,QAAQ,CAAC;AACvC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACnD,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,GAAG,CAAC,UAAU,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAEtE,OAAO,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;AAC3D,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CAAC,OAAgB;IACzC,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;AAClE,CAAC"}

package/dist/serve/payload-2/sim-payload-2-event-builder.js

@@ -1,6 +1,6 @@
 import { SimRealClock } from "../../util/clock/sim-clock.js";
+import { simAwsProxiedSourceIp, simAwsProxiedTraceId, } from "../http/sim-aws-proxied-connection.js";
 import { SimPayload2BodyEncoding } from "./sim-payload-2-body-encoding.js";
-import { simPayload2SourceIp, simPayload2TraceId, } from "./sim-payload-2-connection.js";
 import { SimPayload2RequestContextBuilder, } from "./sim-payload-2-request-context.js";
 import { SimPayload2RequestParts } from "./sim-payload-2-request-parts.js";
 /**
@@ -44,8 +44,8 @@ export class SimPayload2EventBuilder {
             headers: this.requestParts.headers({
                 request,
                 domainName: endpoint.domainName,
-                traceId: simPayload2TraceId(at),
-                sourceIp: simPayload2SourceIp,
+                traceId: simAwsProxiedTraceId(at),
+                sourceIp: simAwsProxiedSourceIp,
             }),
             requestContext: this.requestContext.build({
                 request,

package/dist/serve/payload-2/sim-payload-2-event-builder.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-payload-2-event-builder.js","sourceRoot":"","sources":["../../../src/serve/payload-2/sim-payload-2-event-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAC5E,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EACL,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,+BAA+B,CAAC;AAGvC,OAAO,EAEL,gCAAgC,GACjC,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAU3E;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,uBAAuB;IACjB,YAAY,GAAG,IAAI,uBAAuB,EAAE,CAAC;IAC7C,YAAY,GAAG,IAAI,uBAAuB,EAAE,CAAC;IAC7C,cAAc,GAAG,IAAI,gCAAgC,EAAE,CAAC;IACxD,KAAK,CAAW;IAEjC,YAAY,UAAU,GAAsC,EAAE;QAC5D,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,IAAI,IAAI,YAAY,EAAE,CAAC;IACtD,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,KAAK,CACT,OAAgB,EAChB,QAA6B,EAC7B,aAAwC;QAExC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;QAC1D,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACxD,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAE5B,MAAM,KAAK,GAAqB;YAC9B,OAAO,EAAE,KAAK;YACd,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,OAAO,EAAE,GAAG,CAAC,QAAQ;YACrB,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;YAC7C,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC;gBACjC,OAAO;gBACP,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,OAAO,EAAE,kBAAkB,CAAC,EAAE,CAAC;gBAC/B,QAAQ,EAAE,mBAAmB;aAC9B,CAAC;YACF,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC;gBACxC,OAAO;gBACP,GAAG;gBACH,QAAQ;gBACR,EAAE;gBACF,GAAG,CAAC,aAAa,KAAK,SAAS,IAAI,EAAE,aAAa,EAAE,CAAC;aACtD,CAAC;YACF,eAAe,EACb,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC;SAC7D,CAAC;QAEF,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QAC3C,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;QAExC,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACK,gBAAgB,CACtB,KAAuB,EACvB,OAAgB,EAChB,GAAQ;QAER,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACnD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC;QAC1B,CAAC;QAED,MAAM,qBAAqB,GAAG,IAAI,CAAC,YAAY,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAC3E,IAAI,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClD,KAAK,CAAC,qBAAqB,GAAG,qBAAqB,CAAC;QACtD,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,cAAc,CACpB,KAAuB,EACvB,QAA6B;QAE7B,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,GAAG,QAAQ,CAAC;QAEpD,IACE,cAAc,KAAK,SAAS;YAC5B,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,GAAG,CAAC,EACtC,CAAC;YACD,KAAK,CAAC,cAAc,GAAG,cAAc,CAAC;QACxC,CAAC;QAED,IACE,cAAc,KAAK,SAAS;YAC5B,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,GAAG,CAAC,EACtC,CAAC;YACD,KAAK,CAAC,cAAc,GAAG,cAAc,CAAC;QACxC,CAAC;IACH,CAAC;IAEO,OAAO,CACb,KAAuB,EACvB,KAAiB,EACjB,WAA0B;QAE1B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"sim-payload-2-event-builder.js","sourceRoot":"","sources":["../../../src/serve/payload-2/sim-payload-2-event-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAC5E,OAAO,EACL,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAG3E,OAAO,EAEL,gCAAgC,GACjC,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAU3E;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,uBAAuB;IACjB,YAAY,GAAG,IAAI,uBAAuB,EAAE,CAAC;IAC7C,YAAY,GAAG,IAAI,uBAAuB,EAAE,CAAC;IAC7C,cAAc,GAAG,IAAI,gCAAgC,EAAE,CAAC;IACxD,KAAK,CAAW;IAEjC,YAAY,UAAU,GAAsC,EAAE;QAC5D,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,IAAI,IAAI,YAAY,EAAE,CAAC;IACtD,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,KAAK,CACT,OAAgB,EAChB,QAA6B,EAC7B,aAAwC;QAExC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;QAC1D,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACxD,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAE5B,MAAM,KAAK,GAAqB;YAC9B,OAAO,EAAE,KAAK;YACd,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,OAAO,EAAE,GAAG,CAAC,QAAQ;YACrB,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;YAC7C,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC;gBACjC,OAAO;gBACP,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,OAAO,EAAE,oBAAoB,CAAC,EAAE,CAAC;gBACjC,QAAQ,EAAE,qBAAqB;aAChC,CAAC;YACF,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC;gBACxC,OAAO;gBACP,GAAG;gBACH,QAAQ;gBACR,EAAE;gBACF,GAAG,CAAC,aAAa,KAAK,SAAS,IAAI,EAAE,aAAa,EAAE,CAAC;aACtD,CAAC;YACF,eAAe,EACb,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC;SAC7D,CAAC;QAEF,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QAC3C,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;QAExC,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACK,gBAAgB,CACtB,KAAuB,EACvB,OAAgB,EAChB,GAAQ;QAER,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACnD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC;QAC1B,CAAC;QAED,MAAM,qBAAqB,GAAG,IAAI,CAAC,YAAY,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAC3E,IAAI,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClD,KAAK,CAAC,qBAAqB,GAAG,qBAAqB,CAAC;QACtD,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,cAAc,CACpB,KAAuB,EACvB,QAA6B;QAE7B,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,GAAG,QAAQ,CAAC;QAEpD,IACE,cAAc,KAAK,SAAS;YAC5B,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,GAAG,CAAC,EACtC,CAAC;YACD,KAAK,CAAC,cAAc,GAAG,cAAc,CAAC;QACxC,CAAC;QAED,IACE,cAAc,KAAK,SAAS;YAC5B,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,GAAG,CAAC,EACtC,CAAC;YACD,KAAK,CAAC,cAAc,GAAG,cAAc,CAAC;QACxC,CAAC;IACH,CAAC;IAEO,OAAO,CACb,KAAuB,EACvB,KAAiB,EACjB,WAA0B;QAE1B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;CACF"}

package/dist/serve/payload-2/sim-payload-2-request-context.js

@@ -1,5 +1,5 @@
 import { randomUUID } from "node:crypto";
-import { simPayload2SourceIp } from "./sim-payload-2-connection.js";
+import { simAwsProxiedSourceIp } from "../http/sim-aws-proxied-connection.js";
 import { simPayload2EventTime } from "./sim-payload-2-event-time.js";
 import { simPayload2AnonymousAccountId, SimPayload2IamCaller, } from "./sim-payload-2-iam-caller.js";
 /**
@@ -28,7 +28,7 @@ export class SimPayload2RequestContextBuilder {
                 method: request.method,
                 path: url.pathname,
                 protocol: "HTTP/1.1",
-                sourceIp: simPayload2SourceIp,
+                sourceIp: simAwsProxiedSourceIp,
                 userAgent: request.headers.get("user-agent") ?? "",
             },
             requestId: randomUUID(),

package/dist/serve/payload-2/sim-payload-2-request-context.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-payload-2-request-context.js","sourceRoot":"","sources":["../../../src/serve/payload-2/sim-payload-2-request-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AAOpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EACL,6BAA6B,EAC7B,oBAAoB,GACrB,MAAM,+BAA+B,CAAC;AA8BvC;;;;;;;GAOG;AACH,MAAM,OAAO,gCAAgC;IAC3C;;OAEG;IACH,KAAK,CAAC,KAAqC;QACzC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,KAAK,CAAC;QAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QAE9D,MAAM,cAAc,GAA8B;YAChD,wEAAwE;YACxE,uBAAuB;YACvB,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,6BAA6B;YAClE,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,IAAI,EAAE;gBACJ,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,IAAI,EAAE,GAAG,CAAC,QAAQ;gBAClB,QAAQ,EAAE,UAAU;gBACpB,QAAQ,EAAE,mBAAmB;gBAC7B,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE;aACnD;YACD,SAAS,EAAE,UAAU,EAAE;YACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,IAAI,EAAE,oBAAoB,CAAC,EAAE,CAAC;YAC9B,SAAS,EAAE,EAAE,CAAC,OAAO,EAAE;SACxB,CAAC;QAEF,MAAM,GAAG,GAAG,KAAK,CAAC,aAAa,EAAE,GAAG,CAAC;QACrC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,cAAc,CAAC,UAAU,GAAG,EAAE,GAAG,EAAE,CAAC;QACtC,CAAC;QAED,MAAM,MAAM,GAAG,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC;QAC3C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,cAAc,CAAC,UAAU,GAAG,EAAE,MAAM,EAAE,CAAC;QACzC,CAAC;QAED,MAAM,UAAU,GAAG,SAAS,EAAE,iBAAiB,EAAE,CAAC;QAClD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,cAAc,CAAC,UAAU,GAAG,UAAU,CAAC;QACzC,CAAC;QAED,OAAO,cAAc,CAAC;IACxB,CAAC;IAEO,SAAS,CACf,MAAuC;QAEvC,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAC7E,CAAC;CACF"}
+{"version":3,"file":"sim-payload-2-request-context.js","sourceRoot":"","sources":["../../../src/serve/payload-2/sim-payload-2-request-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAO9E,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EACL,6BAA6B,EAC7B,oBAAoB,GACrB,MAAM,+BAA+B,CAAC;AA8BvC;;;;;;;GAOG;AACH,MAAM,OAAO,gCAAgC;IAC3C;;OAEG;IACH,KAAK,CAAC,KAAqC;QACzC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,KAAK,CAAC;QAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QAE9D,MAAM,cAAc,GAA8B;YAChD,wEAAwE;YACxE,uBAAuB;YACvB,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,6BAA6B;YAClE,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,IAAI,EAAE;gBACJ,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,IAAI,EAAE,GAAG,CAAC,QAAQ;gBAClB,QAAQ,EAAE,UAAU;gBACpB,QAAQ,EAAE,qBAAqB;gBAC/B,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE;aACnD;YACD,SAAS,EAAE,UAAU,EAAE;YACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,IAAI,EAAE,oBAAoB,CAAC,EAAE,CAAC;YAC9B,SAAS,EAAE,EAAE,CAAC,OAAO,EAAE;SACxB,CAAC;QAEF,MAAM,GAAG,GAAG,KAAK,CAAC,aAAa,EAAE,GAAG,CAAC;QACrC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,cAAc,CAAC,UAAU,GAAG,EAAE,GAAG,EAAE,CAAC;QACtC,CAAC;QAED,MAAM,MAAM,GAAG,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC;QAC3C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,cAAc,CAAC,UAAU,GAAG,EAAE,MAAM,EAAE,CAAC;QACzC,CAAC;QAED,MAAM,UAAU,GAAG,SAAS,EAAE,iBAAiB,EAAE,CAAC;QAClD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,cAAc,CAAC,UAAU,GAAG,UAAU,CAAC;QACzC,CAAC;QAED,OAAO,cAAc,CAAC;IACxB,CAAC;IAEO,SAAS,CACf,MAAuC;QAEvC,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAC7E,CAAC;CACF"}

package/dist/service/aws/factory/sim-aws-account-region-service-builder.d.ts

@@ -5,22 +5,18 @@ import { SimAcm } from "../../acm/sim-acm.js";
 import { SimApiGatewayV2 } from "../../apigatewayv2/index.js";
 import { SimCloudFormation } from "../../cloudformation/index.js";
 import { SimCognitoIdentityProvider } from "../../cognito/index.js";
-import { SimDynamoDb as SimDynamoDatabase } from "../../dynamodb/index.js";
+import { SimEcr } from "../../ecr/index.js";
 import { SimEcs } from "../../ecs/index.js";
 import { SimElbV2 } from "../../elbv2/index.js";
 import { SimEventBridge } from "../../eventbridge/index.js";
 import type { SimIamRegistry } from "../../iam/registry/sim-iam-registry.js";
 import { SimKms } from "../../kms/index.js";
-import type { SimHttpApiRegistry } from "../../apigatewayv2/registry/sim-http-api-registry.js";
 import { SimLambda } from "../../lambda/index.js";
 import type { SimLambdaUrlRegistry } from "../../lambda/registry/sim-lambda-url-registry.js";
 import { SimRekognition } from "../../rekognition/index.js";
 import { SimS3 } from "../../s3/sim-s3.js";
 import { SimScheduler } from "../../scheduler/index.js";
-import { SimSecretsManager } from "../../secretsmanager/index.js";
 import { SimSns } from "../../sns/index.js";
-import { SimSqs } from "../../sqs/index.js";
-import { SimSsm } from "../../ssm/index.js";
 import { SimSts } from "../../sts/sim-sts.js";
 import type { SimAwsAccountServiceCache } from "./sim-aws-account-service-cache.js";
 import type { SimAwsScopedServiceRegistries } from "./sim-aws-scoped-service-registries.js";
@@ -30,7 +26,6 @@ interface SimAwsAccountRegionServiceBuilderProperties {
     readonly registries: SimAwsScopedServiceRegistries;
     readonly iamRegistry: SimIamRegistry;
     readonly lambdaUrlRegistry: SimLambdaUrlRegistry;
-    readonly httpApiRegistry: SimHttpApiRegistry;
     readonly accountServices: SimAwsAccountServiceCache;
 }
 /**
@@ -41,6 +36,10 @@ interface SimAwsAccountRegionServiceBuilderProperties {
  * AWS state is scoped to an account/region pair, as SimAwsAccountServiceCache
  * is the half holding the services scoped to a whole account.
  *
+ * A service whose wiring says nothing but which scope it is in belongs in
+ * SimAwsSelfContainedServiceBuilder instead, so what is left here is the
+ * services that reach for something outside their own scope.
+ *
  * Nothing is cached here, which is the point of the split: a service in this
  * class is built fresh for the scope that asks for it, because on real AWS its
  * state does not cross a Region boundary. Each build method is therefore just
@@ -57,7 +56,6 @@ export declare class SimAwsAccountRegionServiceBuilder {
     private readonly registries;
     private readonly iamRegistry;
     private readonly lambdaUrlRegistry;
-    private readonly httpApiRegistry;
     private readonly accountServices;
     constructor(properties: SimAwsAccountRegionServiceBuilderProperties);
     /** Create simulated ACM for an Account Region scope. */
@@ -78,8 +76,15 @@ export declare class SimAwsAccountRegionServiceBuilder {
      * a pool cannot be reached from another one.
      */
     createCognitoIdentityProvider(scope: SimAwsAccountRegionContainer): SimCognitoIdentityProvider;
-    /** Create simulated DynamoDB for an Account Region scope. */
-    createDynamoDb(scope: SimAwsAccountRegionContainer): SimDynamoDatabase;
+    /**
+     * Create simulated ECR for an Account Region scope.
+     *
+     * Repositories are Region-scoped on real AWS: a repository ARN names the
+     * Region, and the registry host in an image URI carries the Account and the
+     * Region both. It is registered because a container image function holds
+     * nothing but that URI, and the function need not be in this scope.
+     */
+    createEcr(scope: SimAwsAccountRegionContainer): SimEcr;
     /** Create simulated ECS for an Account Region scope. */
     createEcs(scope: SimAwsAccountRegionContainer): SimEcs;
     /**
@@ -89,7 +94,12 @@ export declare class SimAwsAccountRegionServiceBuilder {
      * an event put in one Region reaches no rule in another.
      */
     createEventBridge(scope: SimAwsAccountRegionContainer): SimEventBridge;
-    /** Create simulated Elastic Load Balancing v2 for an Account Region scope. */
+    /**
+     * Create simulated Elastic Load Balancing v2 for an Account Region scope.
+     *
+     * The registries are the hops from a name to a scope: a load balancer's DNS
+     * name to the Account holding it, and a listener's certificate ARN to ACM.
+     */
     createElbV2(scope: SimAwsAccountRegionContainer): SimElbV2;
     /**
      * Create simulated KMS for an Account Region scope.
@@ -120,11 +130,6 @@ export declare class SimAwsAccountRegionServiceBuilder {
      * today as well, since a later one could.
      */
     createS3(scope: SimAwsAccountRegionContainer): SimS3;
-    /**
-     * Create simulated Secrets Manager for an Account Region scope, whose secret
-     * values are encrypted through that same scope's simulated KMS.
-     */
-    createSecretsManager(scope: SimAwsAccountRegionContainer): SimSecretsManager;
     /**
      * Create simulated SNS for an Account Region scope.
      *
@@ -134,21 +139,6 @@ export declare class SimAwsAccountRegionServiceBuilder {
      * and are resolved on delivery rather than here.
      */
     createSns(scope: SimAwsAccountRegionContainer): SimSns;
-    /**
-     * Create simulated SQS for an Account Region scope.
-     *
-     * Queues are Region-scoped on real AWS: a queue URL and ARN both name the
-     * Region, and a queue cannot be reached from another one.
-     */
-    createSqs(scope: SimAwsAccountRegionContainer): SimSqs;
-    /**
-     * Create simulated SSM for an Account Region scope.
-     *
-     * Parameters are Region-scoped on real AWS: a parameter name is unique
-     * within one Account and Region, and its ARN names the Region. SecureString
-     * values are encrypted through that same scope's simulated KMS.
-     */
-    createSsm(scope: SimAwsAccountRegionContainer): SimSsm;
     /** Create simulated EventBridge Scheduler for an Account Region scope. */
     createScheduler(scope: SimAwsAccountRegionContainer): SimScheduler;
     /** Create simulated STS for an Account/Region scope. */

package/dist/service/aws/factory/sim-aws-account-region-service-builder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-account-region-service-builder.d.ts","sourceRoot":"","sources":["../../../../src/service/aws/factory/sim-aws-account-region-service-builder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,wCAAwC,CAAC;AAChD,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,oCAAoC,CAAC;AACvF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAQ9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AAEpE,OAAO,EAAE,WAAW,IAAI,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC3E,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sDAAsD,CAAC;AAC/F,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kDAAkD,CAAC;AAC7F,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAGxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAEpF,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,wCAAwC,CAAC;AAE5F,UAAU,2CAA2C;IACnD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,mBAAmB,GAAG,mBAAmB,CAAC;IAC/D,QAAQ,CAAC,UAAU,EAAE,6BAA6B,CAAC;IACnD,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAC;IACrC,QAAQ,CAAC,iBAAiB,EAAE,oBAAoB,CAAC;IACjD,QAAQ,CAAC,eAAe,EAAE,kBAAkB,CAAC;IAC7C,QAAQ,CAAC,eAAe,EAAE,yBAAyB,CAAC;CACrD;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,iCAAiC;IAC5C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA4C;IACvE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAgC;IAC3D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAiB;IAC7C,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAuB;IACzD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAqB;IACrD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA4B;IAE5D,YAAY,UAAU,EAAE,2CAA2C,EAQlE;IAED,wDAAwD;IACxD,SAAS,CAAC,KAAK,EAAE,4BAA4B,GAAG,MAAM,CAQrD;IAED;;;;;OAKG;IACH,kBAAkB,CAAC,KAAK,EAAE,4BAA4B,GAAG,eAAe,CAQvE;IAED,mEAAmE;IACnE,oBAAoB,CAAC,KAAK,EAAE,4BAA4B,GAAG,iBAAiB,CAK3E;IAED;;;;;OAKG;IACH,6BAA6B,CAC3B,KAAK,EAAE,4BAA4B,GAClC,0BAA0B,CAO5B;IAED,6DAA6D;IAC7D,cAAc,CAAC,KAAK,EAAE,4BAA4B,GAAG,iBAAiB,CAErE;IAED,wDAAwD;IACxD,SAAS,CAAC,KAAK,EAAE,4BAA4B,GAAG,MAAM,CAErD;IAED;;;;;OAKG;IACH,iBAAiB,CAAC,KAAK,EAAE,4BAA4B,GAAG,cAAc,CAKrE;IAED,8EAA8E;IAC9E,WAAW,CAAC,KAAK,EAAE,4BAA4B,GAAG,QAAQ,CAEzD;IAED;;;;;;OAMG;IACH,SAAS,CAAC,KAAK,EAAE,4BAA4B,GAAG,MAAM,CAIrD;IAED,2DAA2D;IAC3D,YAAY,CAAC,KAAK,EAAE,4BAA4B,GAAG,SAAS,CAS3D;IAED;;;;;OAKG;IACH,iBAAiB,CAAC,KAAK,EAAE,4BAA4B,GAAG,cAAc,CAMrE;IAED;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,KAAK,EAAE,4BAA4B,GAAG,KAAK,CAQnD;IAED;;;OAGG;IACH,oBAAoB,CAAC,KAAK,EAAE,4BAA4B,GAAG,iBAAiB,CAE3E;IAED;;;;;;;OAOG;IACH,SAAS,CAAC,KAAK,EAAE,4BAA4B,GAAG,MAAM,CAIrD;IAED;;;;;OAKG;IACH,SAAS,CAAC,KAAK,EAAE,4BAA4B,GAAG,MAAM,CAErD;IAED;;;;;;OAMG;IACH,SAAS,CAAC,KAAK,EAAE,4BAA4B,GAAG,MAAM,CAErD;IAED,0EAA0E;IAC1E,eAAe,CAAC,KAAK,EAAE,4BAA4B,GAAG,YAAY,CAKjE;IAED,wDAAwD;IACxD,SAAS,CAAC,KAAK,EAAE,4BAA4B,GAAG,MAAM,CAQrD;IAED;;OAEG;IACH,OAAO,CAAC,MAAM;CAKf"}
+{"version":3,"file":"sim-aws-account-region-service-builder.d.ts","sourceRoot":"","sources":["../../../../src/service/aws/factory/sim-aws-account-region-service-builder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,wCAAwC,CAAC;AAChD,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,oCAAoC,CAAC;AACvF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAQ9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AACpE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kDAAkD,CAAC;AAC7F,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAIxD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAEpF,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,wCAAwC,CAAC;AAE5F,UAAU,2CAA2C;IACnD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,mBAAmB,GAAG,mBAAmB,CAAC;IAC/D,QAAQ,CAAC,UAAU,EAAE,6BAA6B,CAAC;IACnD,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAC;IACrC,QAAQ,CAAC,iBAAiB,EAAE,oBAAoB,CAAC;IACjD,QAAQ,CAAC,eAAe,EAAE,yBAAyB,CAAC;CACrD;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,qBAAa,iCAAiC;IAC5C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA4C;IACvE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAgC;IAC3D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAiB;IAC7C,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAuB;IACzD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA4B;IAE5D,YAAY,UAAU,EAAE,2CAA2C,EAOlE;IAED,wDAAwD;IACxD,SAAS,CAAC,KAAK,EAAE,4BAA4B,GAAG,MAAM,CAQrD;IAED;;;;;OAKG;IACH,kBAAkB,CAAC,KAAK,EAAE,4BAA4B,GAAG,eAAe,CAQvE;IAED,mEAAmE;IACnE,oBAAoB,CAAC,KAAK,EAAE,4BAA4B,GAAG,iBAAiB,CAK3E;IAED;;;;;OAKG;IACH,6BAA6B,CAC3B,KAAK,EAAE,4BAA4B,GAClC,0BAA0B,CAO5B;IAED;;;;;;;OAOG;IACH,SAAS,CAAC,KAAK,EAAE,4BAA4B,GAAG,MAAM,CAKrD;IAED,wDAAwD;IACxD,SAAS,CAAC,KAAK,EAAE,4BAA4B,GAAG,MAAM,CAKrD;IAED;;;;;OAKG;IACH,iBAAiB,CAAC,KAAK,EAAE,4BAA4B,GAAG,cAAc,CAKrE;IAED;;;;;OAKG;IACH,WAAW,CAAC,KAAK,EAAE,4BAA4B,GAAG,QAAQ,CAIzD;IAED;;;;;;OAMG;IACH,SAAS,CAAC,KAAK,EAAE,4BAA4B,GAAG,MAAM,CAIrD;IAED,2DAA2D;IAC3D,YAAY,CAAC,KAAK,EAAE,4BAA4B,GAAG,SAAS,CAU3D;IAED;;;;;OAKG;IACH,iBAAiB,CAAC,KAAK,EAAE,4BAA4B,GAAG,cAAc,CAMrE;IAED;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,KAAK,EAAE,4BAA4B,GAAG,KAAK,CAQnD;IAED;;;;;;;OAOG;IACH,SAAS,CAAC,KAAK,EAAE,4BAA4B,GAAG,MAAM,CAIrD;IAED,0EAA0E;IAC1E,eAAe,CAAC,KAAK,EAAE,4BAA4B,GAAG,YAAY,CAKjE;IAED,wDAAwD;IACxD,SAAS,CAAC,KAAK,EAAE,4BAA4B,GAAG,MAAM,CAQrD;IAED;;OAEG;IACH,OAAO,CAAC,MAAM;CAKf"}