@kensio/yulin 1.13.0 → 1.14.0

package/dist/service/lambda/event-source/sim-lambda-event-source-pollers.d.ts

@@ -1,12 +1,12 @@
 import type { BackgroundScheduler } from "../../../util/background/background.js";
 import type { SimLambdaFunctionLookup } from "../function/url/sim-lambda-function-lookup.js";
-import type { SimLambdaEventSourceQueues } from "./queue/sim-lambda-event-source-queues.js";
+import type { SimSqsPollQueues } from "../../sqs/poll/sim-sqs-poll-queues.js";
 import type { SimLambdaEventSourceArn } from "./sim-lambda-event-source-arn.js";
 import type { SimLambdaEventSourceMapping } from "./sim-lambda-event-source-mapping.js";
 import type { SimLambdaEventSourceStreams } from "./stream/sim-lambda-event-source-streams.js";
 interface SimLambdaEventSourcePollersProperties {
     readonly functions: SimLambdaFunctionLookup;
-    readonly queues: SimLambdaEventSourceQueues;
+    readonly queues: SimSqsPollQueues;
     readonly streams: SimLambdaEventSourceStreams;
     readonly background: BackgroundScheduler;
 }

package/dist/service/lambda/event-source/sim-lambda-event-source-pollers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda-event-source-pollers.d.ts","sourceRoot":"","sources":["../../../../src/service/lambda/event-source/sim-lambda-event-source-pollers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAClF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,+CAA+C,CAAC;AAG7F,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAC;AAC5F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAChF,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACxF,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,6CAA6C,CAAC;AAE/F,UAAU,qCAAqC;IAC7C,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAC;IAC5C,QAAQ,CAAC,OAAO,EAAE,2BAA2B,CAAC;IAC9C,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;CAC1C;AAED;;;;;;GAMG;AACH,qBAAa,2BAA2B;IACtC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiD;IACzE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAwC;IAEnE,YAAY,UAAU,EAAE,qCAAqC,EAE5D;IAED;;;;;;;OAOG;IACH,KAAK,CACH,OAAO,EAAE,2BAA2B,EACpC,cAAc,EAAE,uBAAuB,GACtC,IAAI,CAcN;IAED;;OAEG;IACH,IAAI,CAAC,OAAO,EAAE,2BAA2B,GAAG,IAAI,CAG/C;CACF"}
+{"version":3,"file":"sim-lambda-event-source-pollers.d.ts","sourceRoot":"","sources":["../../../../src/service/lambda/event-source/sim-lambda-event-source-pollers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAClF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,+CAA+C,CAAC;AAG7F,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAChF,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACxF,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,6CAA6C,CAAC;AAE/F,UAAU,qCAAqC;IAC7C,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,2BAA2B,CAAC;IAC9C,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;CAC1C;AAED;;;;;;GAMG;AACH,qBAAa,2BAA2B;IACtC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiD;IACzE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAwC;IAEnE,YAAY,UAAU,EAAE,qCAAqC,EAE5D;IAED;;;;;;;OAOG;IACH,KAAK,CACH,OAAO,EAAE,2BAA2B,EACpC,cAAc,EAAE,uBAAuB,GACtC,IAAI,CAcN;IAED;;OAEG;IACH,IAAI,CAAC,OAAO,EAAE,2BAA2B,GAAG,IAAI,CAG/C;CACF"}

package/dist/service/lambda/event-source/sim-lambda-event-source-reachable.d.ts

@@ -1,8 +1,8 @@
-import type { SimLambdaEventSourceQueues } from "./queue/sim-lambda-event-source-queues.js";
+import type { SimSqsPollQueues } from "../../sqs/poll/sim-sqs-poll-queues.js";
 import type { SimLambdaEventSourceArn } from "./sim-lambda-event-source-arn.js";
 import type { SimLambdaEventSourceStreams } from "./stream/sim-lambda-event-source-streams.js";
 interface SimLambdaEventSourceReachableProperties {
-    readonly queues: SimLambdaEventSourceQueues;
+    readonly queues: SimSqsPollQueues;
     readonly streams: SimLambdaEventSourceStreams;
 }
 /**

package/dist/service/lambda/event-source/sim-lambda-event-source-reachable.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda-event-source-reachable.d.ts","sourceRoot":"","sources":["../../../../src/service/lambda/event-source/sim-lambda-event-source-reachable.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAC;AAC5F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAChF,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,6CAA6C,CAAC;AAE/F,UAAU,uCAAuC;IAC/C,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAC;IAC5C,QAAQ,CAAC,OAAO,EAAE,2BAA2B,CAAC;CAC/C;AAED;;;;;;;;GAQG;AACH,qBAAa,6BAA6B;IACxC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA6B;IACpD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA8B;IAEtD,YAAY,UAAU,EAAE,uCAAuC,EAG9D;IAED;;OAEG;IACG,eAAe,CACnB,OAAO,EAAE,MAAM,EACf,cAAc,EAAE,uBAAuB,GACtC,OAAO,CAAC,IAAI,CAAC,CAsBf;CACF"}
+{"version":3,"file":"sim-lambda-event-source-reachable.d.ts","sourceRoot":"","sources":["../../../../src/service/lambda/event-source/sim-lambda-event-source-reachable.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAChF,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,6CAA6C,CAAC;AAE/F,UAAU,uCAAuC;IAC/C,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,2BAA2B,CAAC;CAC/C;AAED;;;;;;;;GAQG;AACH,qBAAa,6BAA6B;IACxC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmB;IAC1C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA8B;IAEtD,YAAY,UAAU,EAAE,uCAAuC,EAG9D;IAED;;OAEG;IACG,eAAe,CACnB,OAAO,EAAE,MAAM,EACf,cAAc,EAAE,uBAAuB,GACtC,OAAO,CAAC,IAAI,CAAC,CAsBf;CACF"}

package/dist/service/lambda/event-source/sim-lambda-event-source-reachable.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda-event-source-reachable.js","sourceRoot":"","sources":["../../../../src/service/lambda/event-source/sim-lambda-event-source-reachable.ts"],"names":[],"mappings":"AASA;;;;;;;;GAQG;AACH,MAAM,OAAO,6BAA6B;IACvB,MAAM,CAA6B;IACnC,OAAO,CAA8B;IAEtD,YAAY,UAAmD;QAC7D,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CACnB,OAAe,EACf,cAAuC;QAEvC,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAW,CAAC;QAEtD,QAAQ,cAAc,CAAC,IAAI,EAAE,CAAC;YAC5B,KAAK,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC;oBACzC,QAAQ,EAAE,cAAc,CAAC,KAAK;oBAC9B,MAAM;iBACP,CAAC,CAAC;gBAEH,OAAO;YACT,CAAC;YAED,KAAK,iBAAiB,EAAE,CAAC;gBACvB,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;oBAC3B,SAAS,EAAE,cAAc,CAAC,KAAK;oBAC/B,MAAM;iBACP,CAAC,CAAC;gBAEH,OAAO;YACT,CAAC;QACH,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"sim-lambda-event-source-reachable.js","sourceRoot":"","sources":["../../../../src/service/lambda/event-source/sim-lambda-event-source-reachable.ts"],"names":[],"mappings":"AASA;;;;;;;;GAQG;AACH,MAAM,OAAO,6BAA6B;IACvB,MAAM,CAAmB;IACzB,OAAO,CAA8B;IAEtD,YAAY,UAAmD;QAC7D,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CACnB,OAAe,EACf,cAAuC;QAEvC,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAW,CAAC;QAEtD,QAAQ,cAAc,CAAC,IAAI,EAAE,CAAC;YAC5B,KAAK,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC;oBACzC,QAAQ,EAAE,cAAc,CAAC,KAAK;oBAC9B,MAAM;iBACP,CAAC,CAAC;gBAEH,OAAO;YACT,CAAC;YAED,KAAK,iBAAiB,EAAE,CAAC;gBACvB,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;oBAC3B,SAAS,EAAE,cAAc,CAAC,KAAK;oBAC/B,MAAM;iBACP,CAAC,CAAC;gBAEH,OAAO;YACT,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/service/lambda/function/code/image/sim-ecr-lambda-container-images.d.ts

@@ -0,0 +1,28 @@
+import type { SimEcrRegistry } from "../../../../ecr/registry/sim-ecr-registry.js";
+import { SimLambdaContainerImage, type SimLambdaContainerImages } from "./sim-lambda-container-images.js";
+interface SimEcrLambdaContainerImagesProperties {
+    readonly repositories: SimEcrRegistry;
+}
+/**
+ * The simulated ECR a container image function's image URI is resolved in.
+ *
+ * The whole simulation's repositories are read rather than one scope's,
+ * because an image URI names the account and region it comes from: a function
+ * in one account can run an image from another account's registry, as it can
+ * on real AWS.
+ *
+ * The two ways of finding nothing are reported apart, because they send a
+ * reader to different places. No repository means nothing registered a handler
+ * under that name, or registered it in another account. A repository with no
+ * image means the name was right and the handler is missing.
+ */
+export declare class SimEcrLambdaContainerImages implements SimLambdaContainerImages {
+    private readonly repositories;
+    constructor(properties: SimEcrLambdaContainerImagesProperties);
+    /**
+     * The image a URI names, as simulated ECR holds it.
+     */
+    image(imageUri: string): SimLambdaContainerImage;
+}
+export {};
+//# sourceMappingURL=sim-ecr-lambda-container-images.d.ts.map

package/dist/service/lambda/function/code/image/sim-ecr-lambda-container-images.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ecr-lambda-container-images.d.ts","sourceRoot":"","sources":["../../../../../../src/service/lambda/function/code/image/sim-ecr-lambda-container-images.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8CAA8C,CAAC;AACnF,OAAO,EACL,uBAAuB,EACvB,KAAK,wBAAwB,EAC9B,MAAM,kCAAkC,CAAC;AAE1C,UAAU,qCAAqC;IAC7C,QAAQ,CAAC,YAAY,EAAE,cAAc,CAAC;CACvC;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,2BAA4B,YAAW,wBAAwB;IAC1E,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAiB;IAE9C,YAAY,UAAU,EAAE,qCAAqC,EAE5D;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ,EAAE,MAAM,GAAG,uBAAuB,CAqB/C;CACF"}

package/dist/service/lambda/function/code/image/sim-ecr-lambda-container-images.js

@@ -0,0 +1,37 @@
+import { SimEcrImageReference } from "../../../../ecr/image/sim-ecr-image-reference.js";
+import { SimLambdaContainerImage, } from "./sim-lambda-container-images.js";
+/**
+ * The simulated ECR a container image function's image URI is resolved in.
+ *
+ * The whole simulation's repositories are read rather than one scope's,
+ * because an image URI names the account and region it comes from: a function
+ * in one account can run an image from another account's registry, as it can
+ * on real AWS.
+ *
+ * The two ways of finding nothing are reported apart, because they send a
+ * reader to different places. No repository means nothing registered a handler
+ * under that name, or registered it in another account. A repository with no
+ * image means the name was right and the handler is missing.
+ */
+export class SimEcrLambdaContainerImages {
+    repositories;
+    constructor(properties) {
+        this.repositories = properties.repositories;
+    }
+    /**
+     * The image a URI names, as simulated ECR holds it.
+     */
+    image(imageUri) {
+        const repository = this.repositories.repositoryFor(imageUri);
+        if (repository === undefined) {
+            return SimLambdaContainerImage.unsimulated(`no simulated ECR repository holds the container image ${imageUri}`);
+        }
+        const image = repository.image(new SimEcrImageReference(imageUri).imageTag());
+        if (image === undefined) {
+            return SimLambdaContainerImage.unsimulated(`the simulated ECR repository ${repository.repositoryUri} holds no ` +
+                `image`);
+        }
+        return SimLambdaContainerImage.simulatedBy(image.handler);
+    }
+}
+//# sourceMappingURL=sim-ecr-lambda-container-images.js.map

package/dist/service/lambda/function/code/image/sim-ecr-lambda-container-images.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ecr-lambda-container-images.js","sourceRoot":"","sources":["../../../../../../src/service/lambda/function/code/image/sim-ecr-lambda-container-images.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,kDAAkD,CAAC;AAExF,OAAO,EACL,uBAAuB,GAExB,MAAM,kCAAkC,CAAC;AAM1C;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,2BAA2B;IACrB,YAAY,CAAiB;IAE9C,YAAY,UAAiD;QAC3D,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAgB;QACpB,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAE7D,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,uBAAuB,CAAC,WAAW,CACxC,yDAAyD,QAAQ,EAAE,CACpE,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAC5B,IAAI,oBAAoB,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAC9C,CAAC;QAEF,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,uBAAuB,CAAC,WAAW,CACxC,gCAAgC,UAAU,CAAC,aAAa,YAAY;gBAClE,OAAO,CACV,CAAC;QACJ,CAAC;QAED,OAAO,uBAAuB,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC5D,CAAC;CACF"}

package/dist/service/lambda/function/code/image/sim-lambda-container-images.d.ts

@@ -0,0 +1,52 @@
+import type { SimLambdaHandler } from "../../sim-lambda-handler.type.js";
+/**
+ * What a container image URI resolved to.
+ *
+ * Yulin never reads an image, so an image URI is only ever an identifier. The
+ * most it can resolve to is a real in-process handler something registered as
+ * that image, and where nothing has, the reason is what a caller reports:
+ * CloudFormation puts it in a skip, and CreateFunction in a refusal.
+ */
+export declare class SimLambdaContainerImage {
+    readonly handler: SimLambdaHandler | undefined;
+    private readonly reason;
+    private constructor();
+    /**
+     * An image a real in-process handler stands in for.
+     */
+    static simulatedBy(handler: SimLambdaHandler): SimLambdaContainerImage;
+    /**
+     * An image nothing in this simulation stands in for, and why not.
+     */
+    static unsimulated(reason: string): SimLambdaContainerImage;
+    /**
+     * Why nothing here can run this image.
+     *
+     * Empty for an image a handler stands in for, which callers only reach when
+     * there is no handler.
+     */
+    unsimulatedReason(): string;
+}
+/**
+ * Where a container image URI is resolved to something this simulation can
+ * run.
+ */
+export interface SimLambdaContainerImages {
+    /**
+     * The image this URI names, as far as this simulation can run it.
+     */
+    image(imageUri: string): SimLambdaContainerImage;
+}
+/**
+ * The container images of a simulated Lambda that has none to look in.
+ *
+ * A standalone SimLambda is its own little universe, with no simulated ECR
+ * beside it, so every image URI is one nothing stands in for.
+ */
+export declare class SimLambdaNoContainerImages implements SimLambdaContainerImages {
+    /**
+     * Never any image, whatever the URI names.
+     */
+    image(imageUri: string): SimLambdaContainerImage;
+}
+//# sourceMappingURL=sim-lambda-container-images.d.ts.map

package/dist/service/lambda/function/code/image/sim-lambda-container-images.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-container-images.d.ts","sourceRoot":"","sources":["../../../../../../src/service/lambda/function/code/image/sim-lambda-container-images.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAEzE;;;;;;;GAOG;AACH,qBAAa,uBAAuB;IAClC,SAAgB,OAAO,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAEtD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAEhC,OAAO,eAGN;IAED;;OAEG;IACH,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,uBAAuB,CAErE;IAED;;OAEG;IACH,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,uBAAuB,CAE1D;IAED;;;;;OAKG;IACH,iBAAiB,IAAI,MAAM,CAE1B;CACF;AAED;;;GAGG;AACH,MAAM,WAAW,wBAAwB;IACvC;;OAEG;IACH,KAAK,CAAC,QAAQ,EAAE,MAAM,GAAG,uBAAuB,CAAC;CAClD;AAED;;;;;GAKG;AACH,qBAAa,0BAA2B,YAAW,wBAAwB;IACzE;;OAEG;IACH,KAAK,CAAC,QAAQ,EAAE,MAAM,GAAG,uBAAuB,CAK/C;CACF"}

package/dist/service/lambda/function/code/image/sim-lambda-container-images.js

@@ -0,0 +1,53 @@
+/**
+ * What a container image URI resolved to.
+ *
+ * Yulin never reads an image, so an image URI is only ever an identifier. The
+ * most it can resolve to is a real in-process handler something registered as
+ * that image, and where nothing has, the reason is what a caller reports:
+ * CloudFormation puts it in a skip, and CreateFunction in a refusal.
+ */
+export class SimLambdaContainerImage {
+    handler;
+    reason;
+    constructor(handler, reason) {
+        this.handler = handler;
+        this.reason = reason;
+    }
+    /**
+     * An image a real in-process handler stands in for.
+     */
+    static simulatedBy(handler) {
+        return new SimLambdaContainerImage(handler, "");
+    }
+    /**
+     * An image nothing in this simulation stands in for, and why not.
+     */
+    static unsimulated(reason) {
+        return new SimLambdaContainerImage(undefined, reason);
+    }
+    /**
+     * Why nothing here can run this image.
+     *
+     * Empty for an image a handler stands in for, which callers only reach when
+     * there is no handler.
+     */
+    unsimulatedReason() {
+        return this.reason;
+    }
+}
+/**
+ * The container images of a simulated Lambda that has none to look in.
+ *
+ * A standalone SimLambda is its own little universe, with no simulated ECR
+ * beside it, so every image URI is one nothing stands in for.
+ */
+export class SimLambdaNoContainerImages {
+    /**
+     * Never any image, whatever the URI names.
+     */
+    image(imageUri) {
+        return SimLambdaContainerImage.unsimulated(`nothing simulates the container image ${imageUri}, as this simulated ` +
+            `Lambda has no simulated ECR beside it`);
+    }
+}
+//# sourceMappingURL=sim-lambda-container-images.js.map

package/dist/service/lambda/function/code/image/sim-lambda-container-images.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-container-images.js","sourceRoot":"","sources":["../../../../../../src/service/lambda/function/code/image/sim-lambda-container-images.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AACH,MAAM,OAAO,uBAAuB;IAClB,OAAO,CAA+B;IAErC,MAAM,CAAS;IAEhC,YAAoB,OAAqC,EAAE,MAAc;QACvE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,WAAW,CAAC,OAAyB;QAC1C,OAAO,IAAI,uBAAuB,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAClD,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,WAAW,CAAC,MAAc;QAC/B,OAAO,IAAI,uBAAuB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACxD,CAAC;IAED;;;;;OAKG;IACH,iBAAiB;QACf,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;CACF;AAaD;;;;;GAKG;AACH,MAAM,OAAO,0BAA0B;IACrC;;OAEG;IACH,KAAK,CAAC,QAAgB;QACpB,OAAO,uBAAuB,CAAC,WAAW,CACxC,yCAAyC,QAAQ,sBAAsB;YACrE,uCAAuC,CAC1C,CAAC;IACJ,CAAC;CACF"}

package/dist/service/lambda/function/code/lambda-code-source.d.ts

@@ -7,6 +7,7 @@ export interface SimLambdaCodeInput {
     S3Bucket?: string | undefined;
     S3Key?: string | undefined;
     S3ObjectVersion?: string | undefined;
+    ImageUri?: string | undefined;
 }
 /**
  * Function code given as a real handler function reference, stowed away
@@ -33,16 +34,28 @@ export interface SimLambdaS3LocationSource {
     readonly bucketName: string;
     readonly objectKey: string;
 }
+/**
+ * Function code given as a container image URI, as a function with
+ * PackageType Image names on real AWS.
+ *
+ * The URI is only ever an identifier here. What runs is whatever simulated ECR
+ * holds under the repository it names, which is resolved when the function is
+ * created, as real Lambda resolves the image then too.
+ */
+export interface SimLambdaContainerImageSource {
+    readonly kind: "container-image";
+    readonly imageUri: string;
+}
 /**
  * The validated source of a sim Lambda function's code.
  */
-export type SimLambdaCodeSource = SimLambdaHandlerReferenceSource | SimLambdaZipBytesSource | SimLambdaS3LocationSource;
+export type SimLambdaCodeSource = SimLambdaHandlerReferenceSource | SimLambdaZipBytesSource | SimLambdaS3LocationSource | SimLambdaContainerImageSource;
 /**
  * Validate CreateFunction code input into a sim Lambda code source.
  *
- * Exactly one of ZipFile or an S3 object location must be given, as on real
- * AWS. S3ObjectVersion is accepted but ignored, as sim S3 does not simulate
- * object versioning yet.
+ * Exactly one of ZipFile, an S3 object location or a container image URI must
+ * be given, as on real AWS. S3ObjectVersion is accepted but ignored, as sim S3
+ * does not simulate object versioning yet.
  */
 export declare function requireLambdaCodeSource(code: SimLambdaCodeInput | undefined): SimLambdaCodeSource;
 //# sourceMappingURL=lambda-code-source.d.ts.map

package/dist/service/lambda/function/code/lambda-code-source.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"lambda-code-source.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/function/code/lambda-code-source.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAGtE;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IACjC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC;AAED;;;GAGG;AACH,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IACnC,QAAQ,CAAC,eAAe,EAAE,gBAAgB,CAAC;CAC5C;AAED;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;CAC/B;AAED;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAC3B,+BAA+B,GAC/B,uBAAuB,GACvB,yBAAyB,CAAC;AAE9B;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,kBAAkB,GAAG,SAAS,GACnC,mBAAmB,CAarB"}
+{"version":3,"file":"lambda-code-source.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/function/code/lambda-code-source.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAGtE;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IACjC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/B;AAED;;;GAGG;AACH,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IACnC,QAAQ,CAAC,eAAe,EAAE,gBAAgB,CAAC;CAC5C;AAED;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;CAC/B;AAED;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAC3B,+BAA+B,GAC/B,uBAAuB,GACvB,yBAAyB,GACzB,6BAA6B,CAAC;AAElC;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,kBAAkB,GAAG,SAAS,GACnC,mBAAmB,CAgBrB"}

package/dist/service/lambda/function/code/lambda-code-source.js

@@ -4,20 +4,36 @@ import { LambdaZipFileStowaway } from "./lambda-zip-file-input.js";
 /**
  * Validate CreateFunction code input into a sim Lambda code source.
  *
- * Exactly one of ZipFile or an S3 object location must be given, as on real
- * AWS. S3ObjectVersion is accepted but ignored, as sim S3 does not simulate
- * object versioning yet.
+ * Exactly one of ZipFile, an S3 object location or a container image URI must
+ * be given, as on real AWS. S3ObjectVersion is accepted but ignored, as sim S3
+ * does not simulate object versioning yet.
  */
 export function requireLambdaCodeSource(code) {
     assertDefined(code, "CreateFunctionCommand.input.Code required");
+    if (code.ImageUri !== undefined) {
+        return containerImageSource(code.ImageUri, code);
+    }
     if (code.ZipFile !== undefined) {
         return zipFileSource(code.ZipFile, code);
     }
     if (code.S3Bucket !== undefined || code.S3Key !== undefined) {
         return s3LocationSource(code);
     }
-    throw new SimLambdaInvalidParameterValueException("CreateFunctionCommand.input.Code requires either ZipFile bytes or an " +
-        "S3Bucket and S3Key object location");
+    throw new SimLambdaInvalidParameterValueException("CreateFunctionCommand.input.Code requires either ZipFile bytes, an " +
+        "S3Bucket and S3Key object location, or an ImageUri");
+}
+/**
+ * A container image function names its image and nothing else, as on real
+ * AWS, where an image function has no zip code to also name.
+ */
+function containerImageSource(imageUri, code) {
+    if (code.ZipFile !== undefined ||
+        code.S3Bucket !== undefined ||
+        code.S3Key !== undefined) {
+        throw new SimLambdaInvalidParameterValueException("Please do not provide ZipFile bytes or an S3 object location when " +
+            "using Code.ImageUri");
+    }
+    return { kind: "container-image", imageUri };
 }
 function zipFileSource(zipFile, code) {
     if (code.S3Bucket !== undefined || code.S3Key !== undefined) {

package/dist/service/lambda/function/code/lambda-code-source.js.map

@@ -1 +1 @@
-{"version":3,"file":"lambda-code-source.js","sourceRoot":"","sources":["../../../../../src/service/lambda/function/code/lambda-code-source.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AACvE,OAAO,EAAE,uCAAuC,EAAE,MAAM,iCAAiC,CAAC;AAE1F,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAgDnE;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CACrC,IAAoC;IAEpC,aAAa,CAAC,IAAI,EAAE,2CAA2C,CAAC,CAAC;IAEjE,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC5D,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IACD,MAAM,IAAI,uCAAuC,CAC/C,uEAAuE;QACrE,oCAAoC,CACvC,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,OAAmB,EACnB,IAAwB;IAExB,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC5D,MAAM,IAAI,uCAAuC,CAC/C,qEAAqE,CACtE,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,YAAY,qBAAqB,EAAE,CAAC;QAC7C,OAAO;YACL,IAAI,EAAE,mBAAmB;YACzB,eAAe,EAAE,OAAO,CAAC,eAAe;SACzC,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAClD,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAwB;IAChD,aAAa,CACX,IAAI,CAAC,QAAQ,EACb,+DAA+D,CAChE,CAAC;IACF,aAAa,CACX,IAAI,CAAC,KAAK,EACV,+DAA+D,CAChE,CAAC;IACF,OAAO;QACL,IAAI,EAAE,aAAa;QACnB,UAAU,EAAE,IAAI,CAAC,QAAQ;QACzB,SAAS,EAAE,IAAI,CAAC,KAAK;KACtB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"lambda-code-source.js","sourceRoot":"","sources":["../../../../../src/service/lambda/function/code/lambda-code-source.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AACvE,OAAO,EAAE,uCAAuC,EAAE,MAAM,iCAAiC,CAAC;AAE1F,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AA+DnE;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CACrC,IAAoC;IAEpC,aAAa,CAAC,IAAI,EAAE,2CAA2C,CAAC,CAAC;IAEjE,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,oBAAoB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC5D,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IACD,MAAM,IAAI,uCAAuC,CAC/C,qEAAqE;QACnE,oDAAoD,CACvD,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,oBAAoB,CAC3B,QAAgB,EAChB,IAAwB;IAExB,IACE,IAAI,CAAC,OAAO,KAAK,SAAS;QAC1B,IAAI,CAAC,QAAQ,KAAK,SAAS;QAC3B,IAAI,CAAC,KAAK,KAAK,SAAS,EACxB,CAAC;QACD,MAAM,IAAI,uCAAuC,CAC/C,oEAAoE;YAClE,qBAAqB,CACxB,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,aAAa,CACpB,OAAmB,EACnB,IAAwB;IAExB,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC5D,MAAM,IAAI,uCAAuC,CAC/C,qEAAqE,CACtE,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,YAAY,qBAAqB,EAAE,CAAC;QAC7C,OAAO;YACL,IAAI,EAAE,mBAAmB;YACzB,eAAe,EAAE,OAAO,CAAC,eAAe;SACzC,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAClD,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAwB;IAChD,aAAa,CACX,IAAI,CAAC,QAAQ,EACb,+DAA+D,CAChE,CAAC;IACF,aAAa,CACX,IAAI,CAAC,KAAK,EACV,+DAA+D,CAChE,CAAC;IACF,OAAO;QACL,IAAI,EAAE,aAAa;QACnB,UAAU,EAAE,IAAI,CAAC,QAAQ;QACzB,SAAS,EAAE,IAAI,CAAC,KAAK;KACtB,CAAC;AACJ,CAAC"}

package/dist/service/lambda/function/code/sim-lambda-code-resolver.d.ts

@@ -1,6 +1,7 @@
 import type { SimClock } from "../../../../util/clock/sim-clock.js";
 import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
 import type { SimLambdaEnvironment } from "../environment/sim-lambda-environment.js";
+import { type SimLambdaContainerImages } from "./image/sim-lambda-container-images.js";
 import type { SimLambdaCodeSource } from "./lambda-code-source.js";
 import { type SimLambdaExecutableCode } from "./sim-lambda-executable-code.js";
 import { type SimLambdaCodeStore } from "./store/sim-lambda-code-store.js";
@@ -8,6 +9,10 @@ import type { SimLambdaVmSdkModuleProvider } from "./vm/sdk/sim-lambda-vm-sdk-mo
 interface SimLambdaCodeResolverProperties {
     readonly codeStore?: SimLambdaCodeStore | undefined;
     readonly vmSdkModuleProvider?: SimLambdaVmSdkModuleProvider | undefined;
+    /**
+     * Where a container image URI is resolved to a real in-process handler.
+     */
+    readonly containerImages?: SimLambdaContainerImages | undefined;
     /**
      * Clock vm zip code reports as the current time. A handler reference needs
      * none: it runs in the host scope, where the invocation bridges the clock.
@@ -34,12 +39,22 @@ export interface SimLambdaCodeResolveContext {
  */
 export declare class SimLambdaCodeResolver {
     private readonly codeStore;
+    private readonly containerImages;
     private readonly vmZipCodeFactory;
     constructor(properties: SimLambdaCodeResolverProperties);
     /**
      * Resolve the code source into executable code.
      */
     resolve(source: SimLambdaCodeSource, context: SimLambdaCodeResolveContext): Promise<SimLambdaExecutableCode>;
+    /**
+     * The handler standing in for a container image, refusing the function where
+     * nothing stands in for it.
+     *
+     * Real Lambda refuses a function whose image it cannot pull, so refusing
+     * here is the closest thing to that: an image URI is an identifier, and one
+     * naming nothing this simulation holds is a function with no code.
+     */
+    private containerImageHandler;
 }
 export {};
 //# sourceMappingURL=sim-lambda-code-resolver.d.ts.map

package/dist/service/lambda/function/code/sim-lambda-code-resolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda-code-resolver.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/function/code/sim-lambda-code-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,0CAA0C,CAAC;AACrF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EACL,KAAK,uBAAuB,EAE7B,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EACL,KAAK,kBAAkB,EAExB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,+CAA+C,CAAC;AAElG,UAAU,+BAA+B;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAC;IACpD,QAAQ,CAAC,mBAAmB,CAAC,EAAE,4BAA4B,GAAG,SAAS,CAAC;IACxE;;;OAGG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;CACvC;AAED;;;;GAIG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,WAAW,EAAE,oBAAoB,CAAC;IAC3C,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,GAAG,SAAS,CAAC;CAC5C;AAED;;;;;;;GAOG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAqB;IAC/C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA4B;IAE7D,YAAY,UAAU,EAAE,+BAA+B,EAMtD;IAED;;OAEG;IACG,OAAO,CACX,MAAM,EAAE,mBAAmB,EAC3B,OAAO,EAAE,2BAA2B,GACnC,OAAO,CAAC,uBAAuB,CAAC,CAiBlC;CACF"}
+{"version":3,"file":"sim-lambda-code-resolver.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/function/code/sim-lambda-code-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qCAAqC,CAAC;AAEpE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,0CAA0C,CAAC;AACrF,OAAO,EACL,KAAK,wBAAwB,EAE9B,MAAM,wCAAwC,CAAC;AAChD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EACL,KAAK,uBAAuB,EAE7B,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EACL,KAAK,kBAAkB,EAExB,MAAM,kCAAkC,CAAC;AAE1C,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,+CAA+C,CAAC;AAElG,UAAU,+BAA+B;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAC;IACpD,QAAQ,CAAC,mBAAmB,CAAC,EAAE,4BAA4B,GAAG,SAAS,CAAC;IACxE;;OAEG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,wBAAwB,GAAG,SAAS,CAAC;IAChE;;;OAGG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;CACvC;AAED;;;;GAIG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,WAAW,EAAE,oBAAoB,CAAC;IAC3C,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,GAAG,SAAS,CAAC;CAC5C;AAED;;;;;;;GAOG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAqB;IAC/C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA2B;IAC3D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA4B;IAE7D,YAAY,UAAU,EAAE,+BAA+B,EAQtD;IAED;;OAEG;IACG,OAAO,CACX,MAAM,EAAE,mBAAmB,EAC3B,OAAO,EAAE,2BAA2B,GACnC,OAAO,CAAC,uBAAuB,CAAC,CAsBlC;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,qBAAqB;CAa9B"}

package/dist/service/lambda/function/code/sim-lambda-code-resolver.js

@@ -1,3 +1,5 @@
+import { SimLambdaInvalidParameterValueException } from "../../error/sim-lambda.error.js";
+import { SimLambdaNoContainerImages, } from "./image/sim-lambda-container-images.js";
 import { SimLambdaHandlerReferenceCode, } from "./sim-lambda-executable-code.js";
 import { SimLambdaVmZipCodeFactory } from "./sim-lambda-vm-zip-code-factory.js";
 import { SimLambdaNoCodeStore, } from "./store/sim-lambda-code-store.js";
@@ -11,9 +13,12 @@ import { SimLambdaNoCodeStore, } from "./store/sim-lambda-code-store.js";
  */
 export class SimLambdaCodeResolver {
     codeStore;
+    containerImages;
     vmZipCodeFactory;
     constructor(properties) {
         this.codeStore = properties.codeStore ?? new SimLambdaNoCodeStore();
+        this.containerImages =
+            properties.containerImages ?? new SimLambdaNoContainerImages();
         this.vmZipCodeFactory = new SimLambdaVmZipCodeFactory({
             vmSdkModuleProvider: properties.vmSdkModuleProvider,
             clock: properties.clock,
@@ -38,7 +43,27 @@ export class SimLambdaCodeResolver {
                 });
                 return this.vmZipCodeFactory.make(zipBytes, context);
             }
+            case "container-image": {
+                return new SimLambdaHandlerReferenceCode(this.containerImageHandler(source.imageUri));
+            }
+        }
+    }
+    /**
+     * The handler standing in for a container image, refusing the function where
+     * nothing stands in for it.
+     *
+     * Real Lambda refuses a function whose image it cannot pull, so refusing
+     * here is the closest thing to that: an image URI is an identifier, and one
+     * naming nothing this simulation holds is a function with no code.
+     */
+    containerImageHandler(imageUri) {
+        const image = this.containerImages.image(imageUri);
+        if (image.handler === undefined) {
+            throw new SimLambdaInvalidParameterValueException(`Source image ${imageUri} cannot be run: ` +
+                `${image.unsimulatedReason()}. Register a real in-process handler ` +
+                `as the image in a simulated ECR repository to simulate it.`);
         }
+        return image.handler;
     }
 }
 //# sourceMappingURL=sim-lambda-code-resolver.js.map

package/dist/service/lambda/function/code/sim-lambda-code-resolver.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda-code-resolver.js","sourceRoot":"","sources":["../../../../../src/service/lambda/function/code/sim-lambda-code-resolver.ts"],"names":[],"mappings":"AAIA,OAAO,EAEL,6BAA6B,GAC9B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAChF,OAAO,EAEL,oBAAoB,GACrB,MAAM,kCAAkC,CAAC;AAwB1C;;;;;;;GAOG;AACH,MAAM,OAAO,qBAAqB;IACf,SAAS,CAAqB;IAC9B,gBAAgB,CAA4B;IAE7D,YAAY,UAA2C;QACrD,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,IAAI,IAAI,oBAAoB,EAAE,CAAC;QACpE,IAAI,CAAC,gBAAgB,GAAG,IAAI,yBAAyB,CAAC;YACpD,mBAAmB,EAAE,UAAU,CAAC,mBAAmB;YACnD,KAAK,EAAE,UAAU,CAAC,KAAK;SACxB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CACX,MAA2B,EAC3B,OAAoC;QAEpC,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;YACpB,KAAK,mBAAmB,EAAE,CAAC;gBACzB,OAAO,IAAI,6BAA6B,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YACnE,CAAC;YACD,KAAK,WAAW,EAAE,CAAC;gBACjB,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC9D,CAAC;YACD,KAAK,aAAa,EAAE,CAAC;gBACnB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;oBAChD,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,MAAM,EAAE,OAAO,CAAC,MAAM;iBACvB,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"sim-lambda-code-resolver.js","sourceRoot":"","sources":["../../../../../src/service/lambda/function/code/sim-lambda-code-resolver.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uCAAuC,EAAE,MAAM,iCAAiC,CAAC;AAG1F,OAAO,EAEL,0BAA0B,GAC3B,MAAM,wCAAwC,CAAC;AAEhD,OAAO,EAEL,6BAA6B,GAC9B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAChF,OAAO,EAEL,oBAAoB,GACrB,MAAM,kCAAkC,CAAC;AA6B1C;;;;;;;GAOG;AACH,MAAM,OAAO,qBAAqB;IACf,SAAS,CAAqB;IAC9B,eAAe,CAA2B;IAC1C,gBAAgB,CAA4B;IAE7D,YAAY,UAA2C;QACrD,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,IAAI,IAAI,oBAAoB,EAAE,CAAC;QACpE,IAAI,CAAC,eAAe;YAClB,UAAU,CAAC,eAAe,IAAI,IAAI,0BAA0B,EAAE,CAAC;QACjE,IAAI,CAAC,gBAAgB,GAAG,IAAI,yBAAyB,CAAC;YACpD,mBAAmB,EAAE,UAAU,CAAC,mBAAmB;YACnD,KAAK,EAAE,UAAU,CAAC,KAAK;SACxB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CACX,MAA2B,EAC3B,OAAoC;QAEpC,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;YACpB,KAAK,mBAAmB,EAAE,CAAC;gBACzB,OAAO,IAAI,6BAA6B,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YACnE,CAAC;YACD,KAAK,WAAW,EAAE,CAAC;gBACjB,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC9D,CAAC;YACD,KAAK,aAAa,EAAE,CAAC;gBACnB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;oBAChD,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,MAAM,EAAE,OAAO,CAAC,MAAM;iBACvB,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACvD,CAAC;YACD,KAAK,iBAAiB,EAAE,CAAC;gBACvB,OAAO,IAAI,6BAA6B,CACtC,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAC5C,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACK,qBAAqB,CAAC,QAAgB;QAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAEnD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,IAAI,uCAAuC,CAC/C,gBAAgB,QAAQ,kBAAkB;gBACxC,GAAG,KAAK,CAAC,iBAAiB,EAAE,uCAAuC;gBACnE,4DAA4D,CAC/D,CAAC;QACJ,CAAC;QAED,OAAO,KAAK,CAAC,OAAO,CAAC;IACvB,CAAC;CACF"}

package/dist/service/lambda/function/environment/sim-lambda-environment-conflicts.js

@@ -1,4 +1,4 @@
-import { simLambdaProcessEnvironment } from "./sim-lambda-process-environment.js";
+import { simProcessEnvironment } from "../../../../util/process/sim-process-environment.js";
 const moveTheReadAdvice = "A read of process.env at module scope happens when the module is " +
     "imported, before any invocation, so it sees the host value instead. " +
     "Move the read inside the handler function.";
@@ -41,7 +41,7 @@ export class SimLambdaEnvironmentConflicts {
     checkHostProcess(environment, name, value) {
         // Read-only lookup of a name the function itself declared.
         // oxlint-disable-next-line security/detect-object-injection
-        const hostValue = simLambdaProcessEnvironment.hostVariables()[name];
+        const hostValue = simProcessEnvironment.hostVariables()[name];
         if (hostValue === undefined || hostValue === value) {
             return;
         }

package/dist/service/lambda/function/environment/sim-lambda-environment-conflicts.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda-environment-conflicts.js","sourceRoot":"","sources":["../../../../../src/service/lambda/function/environment/sim-lambda-environment-conflicts.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAC;AAElF,MAAM,iBAAiB,GACrB,mEAAmE;IACnE,sEAAsE;IACtE,4CAA4C,CAAC;AAE/C;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,6BAA6B;IACxC;;;OAGG;IACc,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IAE5C;;;OAGG;IACH,KAAK,CACH,WAAiC,EACjC,oBAAoD;QAEpD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,WAAW,CAAC,iBAAiB,EAAE,CAAC;YAC1D,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAChD,IAAI,CAAC,mBAAmB,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,oBAAoB,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAED;;OAEG;IACK,gBAAgB,CACtB,WAAiC,EACjC,IAAY,EACZ,KAAa;QAEb,2DAA2D;QAC3D,4DAA4D;QAC5D,MAAM,SAAS,GAAG,2BAA2B,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC,CAAC;QACpE,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;YACnD,OAAO;QACT,CAAC;QAED,IAAI,CAAC,IAAI,CACP,QAAQ,IAAI,EAAE,EACd,wBAAwB,WAAW,CAAC,YAAY,aAAa;YAC3D,wBAAwB,IAAI,qCAAqC;YACjE,2BAA2B,iBAAiB,EAAE,CACjD,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,mBAAmB,CACzB,WAAiC,EACjC,IAAY,EACZ,KAAa,EACb,oBAAoD;QAEpD,KAAK,MAAM,QAAQ,IAAI,oBAAoB,EAAE,CAAC;YAC5C,MAAM,aAAa,GAAG,QAAQ,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC3D,IAAI,aAAa,KAAK,SAAS,IAAI,aAAa,KAAK,KAAK,EAAE,CAAC;gBAC3D,SAAS;YACX,CAAC;YAED,IAAI,CAAC,IAAI,CACP,YAAY,IAAI,EAAE,EAClB,yBAAyB,QAAQ,CAAC,YAAY,QAAQ;gBACpD,IAAI,WAAW,CAAC,YAAY,iCAAiC;gBAC7D,wBAAwB,IAAI,KAAK,iBAAiB,EAAE,CACvD,CAAC;YACF,OAAO;QACT,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACK,IAAI,CAAC,GAAW,EAAE,OAAe;QACvC,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrB,sCAAsC;QACtC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;CACF"}
+{"version":3,"file":"sim-lambda-environment-conflicts.js","sourceRoot":"","sources":["../../../../../src/service/lambda/function/environment/sim-lambda-environment-conflicts.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,qDAAqD,CAAC;AAE5F,MAAM,iBAAiB,GACrB,mEAAmE;IACnE,sEAAsE;IACtE,4CAA4C,CAAC;AAE/C;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,6BAA6B;IACxC;;;OAGG;IACc,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IAE5C;;;OAGG;IACH,KAAK,CACH,WAAiC,EACjC,oBAAoD;QAEpD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,WAAW,CAAC,iBAAiB,EAAE,CAAC;YAC1D,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAChD,IAAI,CAAC,mBAAmB,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,oBAAoB,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAED;;OAEG;IACK,gBAAgB,CACtB,WAAiC,EACjC,IAAY,EACZ,KAAa;QAEb,2DAA2D;QAC3D,4DAA4D;QAC5D,MAAM,SAAS,GAAG,qBAAqB,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC,CAAC;QAC9D,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;YACnD,OAAO;QACT,CAAC;QAED,IAAI,CAAC,IAAI,CACP,QAAQ,IAAI,EAAE,EACd,wBAAwB,WAAW,CAAC,YAAY,aAAa;YAC3D,wBAAwB,IAAI,qCAAqC;YACjE,2BAA2B,iBAAiB,EAAE,CACjD,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,mBAAmB,CACzB,WAAiC,EACjC,IAAY,EACZ,KAAa,EACb,oBAAoD;QAEpD,KAAK,MAAM,QAAQ,IAAI,oBAAoB,EAAE,CAAC;YAC5C,MAAM,aAAa,GAAG,QAAQ,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC3D,IAAI,aAAa,KAAK,SAAS,IAAI,aAAa,KAAK,KAAK,EAAE,CAAC;gBAC3D,SAAS;YACX,CAAC;YAED,IAAI,CAAC,IAAI,CACP,YAAY,IAAI,EAAE,EAClB,yBAAyB,QAAQ,CAAC,YAAY,QAAQ;gBACpD,IAAI,WAAW,CAAC,YAAY,iCAAiC;gBAC7D,wBAAwB,IAAI,KAAK,iBAAiB,EAAE,CACvD,CAAC;YACF,OAAO;QACT,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACK,IAAI,CAAC,GAAW,EAAE,OAAe;QACvC,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrB,sCAAsC;QACtC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;CACF"}

package/dist/service/lambda/function/environment/sim-lambda-environment.js

@@ -1,4 +1,4 @@
-import { simLambdaProcessEnvironment } from "./sim-lambda-process-environment.js";
+import { simProcessEnvironment } from "../../../../util/process/sim-process-environment.js";
 /**
  * The environment a sim Lambda function runs with.
  *
@@ -70,7 +70,7 @@ export class SimLambdaEnvironment {
         if (!this.hasDeclaredVariables) {
             return await run();
         }
-        return await simLambdaProcessEnvironment.run(this.variables(), run);
+        return await simProcessEnvironment.run(this.variables(), run);
     }
     /**
      * The complete process.env-shaped variables the function code sees.

package/dist/service/lambda/function/environment/sim-lambda-environment.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda-environment.js","sourceRoot":"","sources":["../../../../../src/service/lambda/function/environment/sim-lambda-environment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAC;AAgBlF;;;;;;;GAOG;AACH,MAAM,OAAO,oBAAoB;IACd,OAAO,CAA8B;IACrC,QAAQ,CAA8B;IAEvD;;;;;;;OAOG;IACH,UAAU,CAAqC;IAE/C,YAAY,UAA0C;QACpD,MAAM,EAAE,iBAAiB,EAAE,GAAG,OAAO,EAAE,GAAG,UAAU,CAAC;QACrD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,QAAQ,GAAG,iBAAiB,IAAI,IAAI,GAAG,EAAE,CAAC;IACjD,CAAC;IAED;;;;;OAKG;IACH,IAAI,oBAAoB;QACtB,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,IAAI,iBAAiB;QACnB,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;IACnC,CAAC;IAED;;;;;OAKG;IACH,aAAa;QACX,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC/B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC1D,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,OAAO,CAAI,GAAqB;QACpC,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC/B,OAAO,MAAM,GAAG,EAAE,CAAC;QACrB,CAAC;QAED,OAAO,MAAM,2BAA2B,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC;IACtE,CAAC;IAED;;OAEG;IACH,SAAS;QACP,IAAI,CAAC,UAAU,KAAK;YAClB,GAAG,IAAI,CAAC,gBAAgB,EAAE;YAC1B,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC;SACrC,CAAC;QACF,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED;;OAEG;IACK,gBAAgB;QACtB,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QAChE,+DAA+D;QAC/D,oEAAoE;QACpE,oEAAoE;QACpE,OAAO,MAAM,CAAC,WAAW,CAAC;YACxB,CAAC,YAAY,EAAE,UAAU,CAAC;YAC1B,CAAC,oBAAoB,EAAE,UAAU,CAAC;YAClC,CAAC,0BAA0B,EAAE,YAAY,CAAC;YAC1C,CAAC,iCAAiC,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;YACzD,CAAC,6BAA6B,EAAE,SAAS,CAAC;SAC3C,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"sim-lambda-environment.js","sourceRoot":"","sources":["../../../../../src/service/lambda/function/environment/sim-lambda-environment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,qDAAqD,CAAC;AAgB5F;;;;;;;GAOG;AACH,MAAM,OAAO,oBAAoB;IACd,OAAO,CAA8B;IACrC,QAAQ,CAA8B;IAEvD;;;;;;;OAOG;IACH,UAAU,CAAqC;IAE/C,YAAY,UAA0C;QACpD,MAAM,EAAE,iBAAiB,EAAE,GAAG,OAAO,EAAE,GAAG,UAAU,CAAC;QACrD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,QAAQ,GAAG,iBAAiB,IAAI,IAAI,GAAG,EAAE,CAAC;IACjD,CAAC;IAED;;;;;OAKG;IACH,IAAI,oBAAoB;QACtB,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,IAAI,iBAAiB;QACnB,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;IACnC,CAAC;IAED;;;;;OAKG;IACH,aAAa;QACX,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC/B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC1D,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,OAAO,CAAI,GAAqB;QACpC,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC/B,OAAO,MAAM,GAAG,EAAE,CAAC;QACrB,CAAC;QAED,OAAO,MAAM,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC;IAChE,CAAC;IAED;;OAEG;IACH,SAAS;QACP,IAAI,CAAC,UAAU,KAAK;YAClB,GAAG,IAAI,CAAC,gBAAgB,EAAE;YAC1B,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC;SACrC,CAAC;QACF,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED;;OAEG;IACK,gBAAgB;QACtB,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QAChE,+DAA+D;QAC/D,oEAAoE;QACpE,oEAAoE;QACpE,OAAO,MAAM,CAAC,WAAW,CAAC;YACxB,CAAC,YAAY,EAAE,UAAU,CAAC;YAC1B,CAAC,oBAAoB,EAAE,UAAU,CAAC;YAClC,CAAC,0BAA0B,EAAE,YAAY,CAAC;YAC1C,CAAC,iCAAiC,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;YACzD,CAAC,6BAA6B,EAAE,SAAS,CAAC;SAC3C,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/lambda/serve/auth/sim-lambda-url-authorizer.d.ts

@@ -1,5 +1,6 @@
 import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
 import type { SimIamAuthorizationDecision, SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimAwsRequestSource } from "../../../iam/request/sim-aws-request-source.js";
 import type { SimLambdaFunction } from "../../function/sim-lambda-function.js";
 import type { SimLambdaFunctionUrl } from "../../function/url/sim-lambda-function-url.js";
 /**
@@ -18,6 +19,11 @@ interface SimLambdaUrlAuthorizationInput {
     readonly simFunction: SimLambdaFunction;
     readonly functionUrl: SimLambdaFunctionUrl;
     readonly caller: SimAwsCaller;
+    /**
+     * The resource the request said it was made on behalf of, such as the
+     * CloudFront Distribution reaching a Function URL Origin.
+     */
+    readonly source?: SimAwsRequestSource | undefined;
 }
 /**
  * Decides whether a caller may invoke a Function URL.
@@ -39,6 +45,12 @@ export declare class SimLambdaUrlAuthorizer {
      * The URL's auth type is supplied as `lambda:FunctionUrlAuthType`, which is
      * what a grant conditions on in practice: a permission granted for `AWS_IAM`
      * should not also open a URL later switched to `NONE`.
+     *
+     * A request made on behalf of a resource supplies `AWS:SourceArn` and
+     * `AWS:SourceAccount` with it, which is what the permission granting
+     * `cloudfront.amazonaws.com` names its Distribution in. A request that states
+     * no source supplies neither, so a permission conditioned on one does not
+     * match rather than matching anything.
      */
     authorize(input: SimLambdaUrlAuthorizationInput): SimIamAuthorizationDecision;
 }

package/dist/service/lambda/serve/auth/sim-lambda-url-authorizer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda-url-authorizer.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/serve/auth/sim-lambda-url-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EACV,2BAA2B,EAC3B,uBAAuB,EACxB,MAAM,wDAAwD,CAAC;AAGhE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+CAA+C,CAAC;AAE1F;;;;;;;GAOG;AACH,eAAO,MAAM,gCAAgC,6BAA6B,CAAC;AAE3E,UAAU,gCAAgC;IACxC,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;CACvC;AAED,UAAU,8BAA8B;IACtC,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAC;IACxC,QAAQ,CAAC,WAAW,EAAE,oBAAoB,CAAC;IAC3C,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;CAC/B;AAED;;;;;;;;;;GAUG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA0B;IAE9C,YAAY,UAAU,EAAE,gCAAgC,EAEvD;IAED;;;;;;OAMG;IACH,SAAS,CACP,KAAK,EAAE,8BAA8B,GACpC,2BAA2B,CAU7B;CACF"}
+{"version":3,"file":"sim-lambda-url-authorizer.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/serve/auth/sim-lambda-url-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EACV,2BAA2B,EAC3B,uBAAuB,EACxB,MAAM,wDAAwD,CAAC;AAOhE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gDAAgD,CAAC;AAC1F,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+CAA+C,CAAC;AAE1F;;;;;;;GAOG;AACH,eAAO,MAAM,gCAAgC,6BAA6B,CAAC;AAE3E,UAAU,gCAAgC;IACxC,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;CACvC;AAED,UAAU,8BAA8B;IACtC,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAC;IACxC,QAAQ,CAAC,WAAW,EAAE,oBAAoB,CAAC;IAC3C,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;CACnD;AAED;;;;;;;;;;GAUG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA0B;IAE9C,YAAY,UAAU,EAAE,gCAAgC,EAEvD;IAED;;;;;;;;;;;;OAYG;IACH,SAAS,CACP,KAAK,EAAE,8BAA8B,GACpC,2BAA2B,CAkB7B;CACF"}

package/dist/service/lambda/serve/auth/sim-lambda-url-authorizer.js

@@ -1,5 +1,5 @@
 import { simLambdaResourcePolicies } from "../../command/authorize/sim-lambda-resource-policies.js";
-import { simLambdaFunctionUrlAuthTypeConditionKey } from "../../function/policy/sim-lambda-permission.js";
+import { simLambdaFunctionUrlAuthTypeConditionKey, simLambdaSourceAccountConditionKey, simLambdaSourceArnConditionKey, } from "../../function/policy/sim-lambda-permission.js";
 /**
  * The IAM action a Function URL invocation is authorized against.
  *
@@ -31,8 +31,15 @@ export class SimLambdaUrlAuthorizer {
      * The URL's auth type is supplied as `lambda:FunctionUrlAuthType`, which is
      * what a grant conditions on in practice: a permission granted for `AWS_IAM`
      * should not also open a URL later switched to `NONE`.
+     *
+     * A request made on behalf of a resource supplies `AWS:SourceArn` and
+     * `AWS:SourceAccount` with it, which is what the permission granting
+     * `cloudfront.amazonaws.com` names its Distribution in. A request that states
+     * no source supplies neither, so a permission conditioned on one does not
+     * match rather than matching anything.
      */
     authorize(input) {
+        const { source } = input;
         return this.iam.authorize({
             action: simLambdaInvokeFunctionUrlAction,
             resource: input.simFunction.arn,
@@ -40,6 +47,12 @@ export class SimLambdaUrlAuthorizer {
             resourcePolicies: simLambdaResourcePolicies(input.simFunction),
             conditionContext: {
                 [simLambdaFunctionUrlAuthTypeConditionKey]: input.functionUrl.authType,
+                ...(source?.arn !== undefined && {
+                    [simLambdaSourceArnConditionKey]: source.arn,
+                }),
+                ...(source?.accountId !== undefined && {
+                    [simLambdaSourceAccountConditionKey]: source.accountId,
+                }),
             },
         });
     }

package/dist/service/lambda/serve/auth/sim-lambda-url-authorizer.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda-url-authorizer.js","sourceRoot":"","sources":["../../../../../src/service/lambda/serve/auth/sim-lambda-url-authorizer.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,yBAAyB,EAAE,MAAM,yDAAyD,CAAC;AACpG,OAAO,EAAE,wCAAwC,EAAE,MAAM,gDAAgD,CAAC;AAI1G;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,0BAA0B,CAAC;AAY3E;;;;;;;;;;GAUG;AACH,MAAM,OAAO,sBAAsB;IAChB,GAAG,CAA0B;IAE9C,YAAY,UAA4C;QACtD,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;;;;;OAMG;IACH,SAAS,CACP,KAAqC;QAErC,OAAO,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YACxB,MAAM,EAAE,gCAAgC;YACxC,QAAQ,EAAE,KAAK,CAAC,WAAW,CAAC,GAAG;YAC/B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,gBAAgB,EAAE,yBAAyB,CAAC,KAAK,CAAC,WAAW,CAAC;YAC9D,gBAAgB,EAAE;gBAChB,CAAC,wCAAwC,CAAC,EAAE,KAAK,CAAC,WAAW,CAAC,QAAQ;aACvE;SACF,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"sim-lambda-url-authorizer.js","sourceRoot":"","sources":["../../../../../src/service/lambda/serve/auth/sim-lambda-url-authorizer.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,yBAAyB,EAAE,MAAM,yDAAyD,CAAC;AACpG,OAAO,EACL,wCAAwC,EACxC,kCAAkC,EAClC,8BAA8B,GAC/B,MAAM,gDAAgD,CAAC;AAKxD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,0BAA0B,CAAC;AAiB3E;;;;;;;;;;GAUG;AACH,MAAM,OAAO,sBAAsB;IAChB,GAAG,CAA0B;IAE9C,YAAY,UAA4C;QACtD,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,SAAS,CACP,KAAqC;QAErC,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;QAEzB,OAAO,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YACxB,MAAM,EAAE,gCAAgC;YACxC,QAAQ,EAAE,KAAK,CAAC,WAAW,CAAC,GAAG;YAC/B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,gBAAgB,EAAE,yBAAyB,CAAC,KAAK,CAAC,WAAW,CAAC;YAC9D,gBAAgB,EAAE;gBAChB,CAAC,wCAAwC,CAAC,EAAE,KAAK,CAAC,WAAW,CAAC,QAAQ;gBACtE,GAAG,CAAC,MAAM,EAAE,GAAG,KAAK,SAAS,IAAI;oBAC/B,CAAC,8BAA8B,CAAC,EAAE,MAAM,CAAC,GAAG;iBAC7C,CAAC;gBACF,GAAG,CAAC,MAAM,EAAE,SAAS,KAAK,SAAS,IAAI;oBACrC,CAAC,kCAAkC,CAAC,EAAE,MAAM,CAAC,SAAS;iBACvD,CAAC;aACH;SACF,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/lambda/serve/sim-lambda-controller.d.ts

@@ -34,6 +34,10 @@ export declare class SimLambdaServiceController implements SimAwsServiceControll
      * named principal, and is anonymous when the request offered neither.
      * Anonymous owns no policies, so an unsigned request is refused by the same
      * evaluation that admits a permitted one, rather than by a special case.
+     *
+     * What the request is being made on behalf of travels with it, so a
+     * CloudFront Distribution reaching this URL through an origin access control
+     * is judged against the Distribution the permission names.
      */
     private invokeAuthenticated;
     private invoke;

package/dist/service/lambda/serve/sim-lambda-controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda-controller.d.ts","sourceRoot":"","sources":["../../../../src/service/lambda/serve/sim-lambda-controller.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,uBAAuB,EACvB,oBAAoB,EACrB,MAAM,qDAAqD,CAAC;AAG7D,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAG9C,OAAO,EAEL,kBAAkB,EACnB,MAAM,4BAA4B,CAAC;AAIpC,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,kBAAkB,CAAC;CACtC;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,0BAA2B,YAAW,uBAAuB;IACxE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;IAC5C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA0B;IACvD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAoC;IACpE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAmC;IAEjE,YAAY,UAAU,GAAE,oCAAyC,EAQhE;IAED;;OAEG;IACG,aAAa,CAAC,cAAc,EAAE,oBAAoB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAc3E;IAED;;;;;;;OAOG;YACW,mBAAmB;YAkBnB,MAAM;CAqBrB"}
+{"version":3,"file":"sim-lambda-controller.d.ts","sourceRoot":"","sources":["../../../../src/service/lambda/serve/sim-lambda-controller.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,uBAAuB,EACvB,oBAAoB,EACrB,MAAM,qDAAqD,CAAC;AAG7D,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAG9C,OAAO,EAEL,kBAAkB,EACnB,MAAM,4BAA4B,CAAC;AAIpC,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,kBAAkB,CAAC;CACtC;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,0BAA2B,YAAW,uBAAuB;IACxE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;IAC5C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA0B;IACvD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAoC;IACpE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAmC;IAEjE,YAAY,UAAU,GAAE,oCAAyC,EAQhE;IAED;;OAEG;IACG,aAAa,CAAC,cAAc,EAAE,oBAAoB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAc3E;IAED;;;;;;;;;;;OAWG;YACW,mBAAmB;YAmBnB,MAAM;CAqBrB"}