@kensio/yulin 1.14.1 → 1.15.0

package/dist/service/lambda/function/logging/sim-lambda-log-writer.js

@@ -0,0 +1,54 @@
+/**
+ * Records one execution environment's output into its log stream.
+ *
+ * Output is written line by line because that is what a log event is. Real
+ * CloudWatch Logs records one event per line, so a handler printing a
+ * multi-line object gets several events, and a test filtering for one of those
+ * lines finds it.
+ */
+export class SimLambdaLogWriter {
+    #logGroupName;
+    #logStreamName;
+    #logs;
+    #pending = "";
+    constructor(properties) {
+        this.#logGroupName = properties.logGroupName;
+        this.#logStreamName = properties.logStreamName;
+        this.#logs = properties.logs;
+        this.#logs.openStream(this.#logGroupName, this.#logStreamName);
+    }
+    /**
+     * Record what the handler wrote.
+     *
+     * A chunk is whatever reached the stream, which need not be a whole line: a
+     * handler writing to `process.stdout` directly can send one line in several
+     * writes. What is left over after the last newline is held back until the
+     * write that completes it, so a line is never split across two events.
+     */
+    write(chunk) {
+        const text = this.#pending + chunk;
+        const lastNewline = text.lastIndexOf("\n");
+        if (lastNewline === -1) {
+            this.#pending = text;
+            return;
+        }
+        this.#pending = text.slice(lastNewline + 1);
+        this.#logs.write(this.#logGroupName, this.#logStreamName, text.slice(0, lastNewline).split("\n"));
+    }
+    /**
+     * Record anything written without a closing newline.
+     *
+     * Real Lambda records what the handler wrote when the invocation ends, so a
+     * `process.stdout.write("no newline")` still reaches the log group rather
+     * than waiting for a line that never comes.
+     */
+    flush() {
+        if (this.#pending.length === 0) {
+            return;
+        }
+        const pending = this.#pending;
+        this.#pending = "";
+        this.#logs.write(this.#logGroupName, this.#logStreamName, [pending]);
+    }
+}
+//# sourceMappingURL=sim-lambda-log-writer.js.map

package/dist/service/lambda/function/logging/sim-lambda-log-writer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-log-writer.js","sourceRoot":"","sources":["../../../../../src/service/lambda/function/logging/sim-lambda-log-writer.ts"],"names":[],"mappings":"AAQA;;;;;;;GAOG;AACH,MAAM,OAAO,kBAAkB;IACpB,aAAa,CAAS;IACtB,cAAc,CAAS;IACvB,KAAK,CAAuB;IACrC,QAAQ,GAAG,EAAE,CAAC;IAEd,YAAY,UAAwC;QAClD,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,YAAY,CAAC;QAC7C,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,aAAa,CAAC;QAC/C,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC;QAC7B,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;IACjE,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,KAAa;QACjB,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QACnC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAE3C,IAAI,WAAW,KAAK,CAAC,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;YACrB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,CAAC,KAAK,CACd,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CACvC,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK;QACH,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC;QAE9B,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;QACnB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACvE,CAAC;CACF"}

package/dist/service/lambda/function/logging/sim-lambda-output-sink.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Something that records what a Lambda handler writes to its standard streams.
+ *
+ * Executable code is given one of these before it cold starts, so the streams
+ * it hands function code tee into it. It is an interface rather than the log
+ * writer itself so that the code path does not have to know that what it is
+ * writing to is a log group.
+ */
+export interface SimLambdaOutputSink {
+    /**
+     * Record a chunk of output, which need not be a whole line.
+     */
+    write(chunk: string): void;
+}
+/**
+ * A sink that records nothing.
+ *
+ * Code that was never given one writes to the host streams and nowhere else,
+ * which is what a function built standalone, outside a SimAws instance, does.
+ */
+export declare const simLambdaNoOutputSink: SimLambdaOutputSink;
+//# sourceMappingURL=sim-lambda-output-sink.d.ts.map

package/dist/service/lambda/function/logging/sim-lambda-output-sink.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-output-sink.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/function/logging/sim-lambda-output-sink.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,WAAW,mBAAmB;IAClC;;OAEG;IACH,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,EAAE,mBAInC,CAAC"}

package/dist/service/lambda/function/logging/sim-lambda-output-sink.js

@@ -0,0 +1,12 @@
+/**
+ * A sink that records nothing.
+ *
+ * Code that was never given one writes to the host streams and nowhere else,
+ * which is what a function built standalone, outside a SimAws instance, does.
+ */
+export const simLambdaNoOutputSink = {
+    write: () => {
+        // Nothing is recording.
+    },
+};
+//# sourceMappingURL=sim-lambda-output-sink.js.map

package/dist/service/lambda/function/logging/sim-lambda-output-sink.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-output-sink.js","sourceRoot":"","sources":["../../../../../src/service/lambda/function/logging/sim-lambda-output-sink.ts"],"names":[],"mappings":"AAeA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAwB;IACxD,KAAK,EAAE,GAAS,EAAE;QAChB,wBAAwB;IAC1B,CAAC;CACF,CAAC"}

package/dist/service/lambda/function/sim-lambda-function.d.ts

@@ -3,6 +3,7 @@ import type { SimAwsRunAsOwner } from "../../aws/caller/sim-aws-run-as-context.j
 import type { SimAwsAccountRegionScope } from "../../aws/sim-aws-account-region-scope.js";
 import { type SimLambdaExecutableCode } from "./code/sim-lambda-executable-code.js";
 import { SimLambdaEnvironment } from "./environment/sim-lambda-environment.js";
+import type { SimLogsServiceWriter } from "../../logs/write/sim-logs-service-writer.js";
 import { SimLambdaFunctionPolicy } from "./policy/sim-lambda-function-policy.js";
 import { type SimClock } from "../../../util/clock/sim-clock.js";
 import { type SimLambdaHandler } from "./sim-lambda-handler.type.js";
@@ -58,6 +59,12 @@ interface SimLambdaFunctionProperties {
      * real clock.
      */
     clock?: SimClock | undefined;
+    /**
+     * Where this function's handler output is recorded. A function built
+     * standalone, outside a SimAws instance, has nowhere to record to and writes
+     * only to the host streams.
+     */
+    logs?: SimLogsServiceWriter | undefined;
 }
 /**
  * Simulated Lambda function resource.
@@ -91,7 +98,12 @@ export declare class SimLambdaFunction {
     private readonly runAsOwner;
     private readonly runner;
     private readonly clock;
+    private readonly logging;
     constructor(properties: SimLambdaFunctionProperties);
+    /**
+     * The log group this function's output is recorded to.
+     */
+    get logGroupName(): string;
     /**
      * Get the current state of this sim Lambda function.
      */

package/dist/service/lambda/function/sim-lambda-function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda-function.d.ts","sourceRoot":"","sources":["../../../../src/service/lambda/function/sim-lambda-function.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4CAA4C,CAAC;AAGnF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAC1F,OAAO,EACL,KAAK,uBAAuB,EAE7B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AAC/E,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AAIjF,OAAO,EAAE,KAAK,QAAQ,EAAgB,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,8BAA8B,CAAC;AAEtC,MAAM,MAAM,qBAAqB,GAAG,KAAK,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;AAE3E,eAAO,MAAM,kCAAkC,IAAI,CAAC;AACpD,eAAO,MAAM,iCAAiC,MAAM,CAAC;AAErD,MAAM,MAAM,oBAAoB,GAAG,GAAG,CACpC,qBAAqB,EACrB,iBAAiB,CAClB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAC9B,SAAS,GACT,QAAQ,GACR,UAAU,GACV,QAAQ,CAAC;AAEb;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAC9B,kBAAkB,MAAM,IAAI,MAAM,aAAa,MAAM,EAAE,CAAC;AAE1D;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,wBAAwB,EAC/B,IAAI,EAAE,MAAM,GACX,oBAAoB,CAEtB;AAED;;;GAGG;AACH,MAAM,WAAW,8BAA8B;IAC7C,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,oBAAoB,CAAC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,sBAAsB,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,WAAW,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,GAAG,SAAS,CAAC;CACjE;AAED,UAAU,2BAA2B;IACnC,IAAI,EAAE,qBAAqB,GAAG,MAAM,CAAC;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,kBAAkB,CAAC,EAAE,wBAAwB,CAAC;IACvD,eAAe,CAAC,EAAE,gBAAgB,CAAC;IACnC,IAAI,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAC;IAC3C,KAAK,CAAC,EAAE,sBAAsB,CAAC;IAC/B,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,WAAW,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC;IAC/C,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B;;;;OAIG;IACH,KAAK,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;CAC9B;AAED;;;;;;;GAOG;AACH,qBAAa,iBAAiB;;IAC5B,SAAgB,IAAI,EAAE,qBAAqB,CAAC;IAC5C,SAAgB,OAAO,EAAE,MAAM,CAAC;IAChC,SAAgB,kBAAkB,EAAE,wBAAwB,CAAC;IAC7D,SAAgB,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,SAAgB,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,SAAgB,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,SAAgB,cAAc,EAAE,MAAM,CAAC;IACvC,SAAgB,YAAY,EAAE,MAAM,CAAC;IACrC,SAAgB,WAAW,EAAE,oBAAoB,CAAC;IAClD;;;;;;;OAOG;IACH,SAAgB,cAAc,0BAAiC;IAG/D,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA0B;IAC/C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmB;IAC9C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgC;IACvD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IAEjC,YAAY,UAAU,EAAE,2BAA2B,EAoClD;IAED;;OAEG;IACH,IAAI,KAAK,IAAI,sBAAsB,CAElC;IAED;;OAEG;IACH,IAAI,GAAG,IAAI,oBAAoB,CAE9B;IAED;;OAEG;IACH,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAGxB;IAED;;OAEG;IACH,aAAa,IAAI,8BAA8B,CAc9C;IAED;;;;;;;;;;;OAWG;IACG,MAAM,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAyB7C;IAED;;;;;;OAMG;YACW,oBAAoB;CAOnC"}
+{"version":3,"file":"sim-lambda-function.d.ts","sourceRoot":"","sources":["../../../../src/service/lambda/function/sim-lambda-function.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4CAA4C,CAAC;AAGnF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAC1F,OAAO,EACL,KAAK,uBAAuB,EAE7B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AAE/E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAC;AACxF,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AAIjF,OAAO,EAAE,KAAK,QAAQ,EAAgB,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,8BAA8B,CAAC;AAEtC,MAAM,MAAM,qBAAqB,GAAG,KAAK,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;AAE3E,eAAO,MAAM,kCAAkC,IAAI,CAAC;AACpD,eAAO,MAAM,iCAAiC,MAAM,CAAC;AAErD,MAAM,MAAM,oBAAoB,GAAG,GAAG,CACpC,qBAAqB,EACrB,iBAAiB,CAClB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAC9B,SAAS,GACT,QAAQ,GACR,UAAU,GACV,QAAQ,CAAC;AAEb;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAC9B,kBAAkB,MAAM,IAAI,MAAM,aAAa,MAAM,EAAE,CAAC;AAE1D;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,wBAAwB,EAC/B,IAAI,EAAE,MAAM,GACX,oBAAoB,CAEtB;AAED;;;GAGG;AACH,MAAM,WAAW,8BAA8B;IAC7C,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,oBAAoB,CAAC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,sBAAsB,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,WAAW,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,GAAG,SAAS,CAAC;CACjE;AAED,UAAU,2BAA2B;IACnC,IAAI,EAAE,qBAAqB,GAAG,MAAM,CAAC;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,kBAAkB,CAAC,EAAE,wBAAwB,CAAC;IACvD,eAAe,CAAC,EAAE,gBAAgB,CAAC;IACnC,IAAI,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAC;IAC3C,KAAK,CAAC,EAAE,sBAAsB,CAAC;IAC/B,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,WAAW,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC;IAC/C,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B;;;;OAIG;IACH,KAAK,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC7B;;;;OAIG;IACH,IAAI,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC;CACzC;AAED;;;;;;;GAOG;AACH,qBAAa,iBAAiB;;IAC5B,SAAgB,IAAI,EAAE,qBAAqB,CAAC;IAC5C,SAAgB,OAAO,EAAE,MAAM,CAAC;IAChC,SAAgB,kBAAkB,EAAE,wBAAwB,CAAC;IAC7D,SAAgB,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,SAAgB,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,SAAgB,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,SAAgB,cAAc,EAAE,MAAM,CAAC;IACvC,SAAgB,YAAY,EAAE,MAAM,CAAC;IACrC,SAAgB,WAAW,EAAE,oBAAoB,CAAC;IAClD;;;;;;;OAOG;IACH,SAAgB,cAAc,0BAAiC;IAG/D,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA0B;IAC/C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmB;IAC9C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgC;IACvD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IACjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA2B;IAEnD,YAAY,UAAU,EAAE,2BAA2B,EA0ClD;IAED;;OAEG;IACH,IAAI,YAAY,IAAI,MAAM,CAEzB;IAED;;OAEG;IACH,IAAI,KAAK,IAAI,sBAAsB,CAElC;IAED;;OAEG;IACH,IAAI,GAAG,IAAI,oBAAoB,CAE9B;IAED;;OAEG;IACH,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAGxB;IAED;;OAEG;IACH,aAAa,IAAI,8BAA8B,CAc9C;IAED;;;;;;;;;;;OAWG;IACG,MAAM,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAgC7C;IAED;;;;;;OAMG;YACW,oBAAoB;CAOnC"}

package/dist/service/lambda/function/sim-lambda-function.js

@@ -2,6 +2,7 @@ import { simAwsRunAsContext } from "../../aws/caller/sim-aws-run-as-context.js";
 import { simAwsAccountRegionScopeFactory } from "../../aws/sim-aws-account-region-scope.factory.js";
 import { SimLambdaHandlerReferenceCode, } from "./code/sim-lambda-executable-code.js";
 import { SimLambdaEnvironment } from "./environment/sim-lambda-environment.js";
+import { SimLambdaFunctionLogging } from "./logging/sim-lambda-function-logging.js";
 import { SimLambdaFunctionPolicy } from "./policy/sim-lambda-function-policy.js";
 import { SimLambdaHandlerRunner } from "./invoke/sim-lambda-handler-runner.js";
 import { SimLambdaInvokeContextBuilder } from "./invoke/sim-lambda-invoke-context-builder.js";
@@ -48,8 +49,9 @@ export class SimLambdaFunction {
     runAsOwner;
     runner = new SimLambdaHandlerRunner();
     clock;
+    logging;
     constructor(properties) {
-        const { name, roleArn, accountRegionScope = simAwsAccountRegionScopeFactory.make(), handlerFunction = defaultLambdaHandler, code, state = "Pending", handlerName, runtimeName, description, timeoutSeconds = DEFAULT_SIM_LAMBDA_TIMEOUT_SECONDS, memorySizeMb = DEFAULT_SIM_LAMBDA_MEMORY_SIZE_MB, environment, runAsOwner = this, clock = new SimRealClock(), } = properties;
+        const { name, roleArn, accountRegionScope = simAwsAccountRegionScopeFactory.make(), handlerFunction = defaultLambdaHandler, code, state = "Pending", handlerName, runtimeName, description, timeoutSeconds = DEFAULT_SIM_LAMBDA_TIMEOUT_SECONDS, memorySizeMb = DEFAULT_SIM_LAMBDA_MEMORY_SIZE_MB, environment, runAsOwner = this, clock = new SimRealClock(), logs, } = properties;
         this.clock = clock;
         this.name = name;
         this.roleArn = roleArn;
@@ -69,6 +71,17 @@ export class SimLambdaFunction {
                     memorySizeMb,
                 });
         this.runAsOwner = runAsOwner;
+        this.logging = new SimLambdaFunctionLogging({
+            functionName: name,
+            logs,
+            clock,
+        });
+    }
+    /**
+     * The log group this function's output is recorded to.
+     */
+    get logGroupName() {
+        return this.logging.logGroupName;
     }
     /**
      * Get the current state of this sim Lambda function.
@@ -126,8 +139,11 @@ export class SimLambdaFunction {
             timeoutSeconds: this.timeoutSeconds,
             memorySizeMb: this.memorySizeMb,
             clock: this.clock,
+            logGroupName: this.logging.logGroupName,
+            logStreamName: this.logging.logStreamName(),
         });
-        return await simAwsRunAsContext.run(this.runAsOwner, { kind: "arn", arn: this.roleArn }, async () => await this.environment.runWith(async () => await this.runWithSimulatedTime(async () => await this.runner.run(this.code.handlerFunction(), event, contextBuilder))));
+        this.logging.recordFrom(this.code);
+        return await simAwsRunAsContext.run(this.runAsOwner, { kind: "arn", arn: this.roleArn }, async () => await this.environment.runWith(async () => await this.runWithSimulatedTime(async () => await this.logging.around(async () => await this.runner.run(this.code.handlerFunction(), event, contextBuilder)))));
     }
     /**
      * Run an invocation with this simulation's time as the current time.

package/dist/service/lambda/function/sim-lambda-function.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda-function.js","sourceRoot":"","sources":["../../../../src/service/lambda/function/sim-lambda-function.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,4CAA4C,CAAC;AAChF,OAAO,EAAE,+BAA+B,EAAE,MAAM,mDAAmD,CAAC;AAEpG,OAAO,EAEL,6BAA6B,GAC9B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AAC/E,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACjF,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,EAAE,6BAA6B,EAAE,MAAM,+CAA+C,CAAC;AAC9F,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAiB,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EACL,oBAAoB,GAErB,MAAM,8BAA8B,CAAC;AAItC,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC;AACpD,MAAM,CAAC,MAAM,iCAAiC,GAAG,GAAG,CAAC;AAmBrD;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAA+B,EAC/B,IAAY;IAEZ,OAAO,kBAAkB,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,SAAS,aAAa,IAAI,EAAE,CAAC;AAClF,CAAC;AA0CD;;;;;;;GAOG;AACH,MAAM,OAAO,iBAAiB;IACZ,IAAI,CAAwB;IAC5B,OAAO,CAAS;IAChB,kBAAkB,CAA2B;IAC7C,WAAW,CAAqB;IAChC,WAAW,CAAqB;IAChC,WAAW,CAAqB;IAChC,cAAc,CAAS;IACvB,YAAY,CAAS;IACrB,WAAW,CAAuB;IAClD;;;;;;;OAOG;IACa,cAAc,GAAG,IAAI,uBAAuB,EAAE,CAAC;IAE/D,MAAM,CAAyB;IACd,IAAI,CAA0B;IAC9B,UAAU,CAAmB;IAC7B,MAAM,GAAG,IAAI,sBAAsB,EAAE,CAAC;IACtC,KAAK,CAAW;IAEjC,YAAY,UAAuC;QACjD,MAAM,EACJ,IAAI,EACJ,OAAO,EACP,kBAAkB,GAAG,+BAA+B,CAAC,IAAI,EAAE,EAC3D,eAAe,GAAG,oBAAoB,EACtC,IAAI,EACJ,KAAK,GAAG,SAAS,EACjB,WAAW,EACX,WAAW,EACX,WAAW,EACX,cAAc,GAAG,kCAAkC,EACnD,YAAY,GAAG,iCAAiC,EAChD,WAAW,EACX,UAAU,GAAG,IAAI,EACjB,KAAK,GAAG,IAAI,YAAY,EAAE,GAC3B,GAAG,UAAU,CAAC;QACf,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,IAAI,GAAG,IAA6B,CAAC;QAC1C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;QAC7C,IAAI,CAAC,IAAI,GAAG,IAAI,IAAI,IAAI,6BAA6B,CAAC,eAAe,CAAC,CAAC;QACvE,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,WAAW;YACd,WAAW;gBACX,IAAI,oBAAoB,CAAC;oBACvB,YAAY,EAAE,IAAI;oBAClB,UAAU,EAAE,kBAAkB,CAAC,UAAU;oBACzC,YAAY;iBACb,CAAC,CAAC;QACL,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,IAAI,GAAG;QACL,OAAO,oBAAoB,CAAC,IAAI,CAAC,kBAAkB,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC;QACvB,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,aAAa;QACX,OAAO;YACL,YAAY,EAAE,IAAI,CAAC,IAAI;YACvB,WAAW,EAAE,IAAI,CAAC,GAAG;YACrB,IAAI,EAAE,IAAI,CAAC,OAAO;YAClB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,OAAO,EAAE,SAAS;YAClB,OAAO,EAAE,IAAI,CAAC,cAAc;YAC5B,UAAU,EAAE,IAAI,CAAC,YAAY;YAC7B,OAAO,EAAE,IAAI,CAAC,WAAW;YACzB,OAAO,EAAE,IAAI,CAAC,WAAW;YACzB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE;SAC9C,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,MAAM,CAAC,KAAc;QACzB,MAAM,cAAc,GAAG,IAAI,6BAA6B,CAAC;YACvD,YAAY,EAAE,IAAI,CAAC,IAAI;YACvB,kBAAkB,EAAE,IAAI,CAAC,GAAG;YAC5B,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC,CAAC;QAEH,OAAO,MAAM,kBAAkB,CAAC,GAAG,CACjC,IAAI,CAAC,UAAU,EACf,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,EAClC,KAAK,IAAI,EAAE,CACT,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAC5B,KAAK,IAAI,EAAE,CACT,MAAM,IAAI,CAAC,oBAAoB,CAC7B,KAAK,IAAI,EAAE,CACT,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CACnB,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAC3B,KAAK,EACL,cAAc,CACf,CACJ,CACJ,CACJ,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,oBAAoB,CAAI,GAAqB;QACzD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAC/B,OAAO,MAAM,GAAG,EAAE,CAAC;QACrB,CAAC;QAED,OAAO,MAAM,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC1D,CAAC;CACF"}
+{"version":3,"file":"sim-lambda-function.js","sourceRoot":"","sources":["../../../../src/service/lambda/function/sim-lambda-function.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,4CAA4C,CAAC;AAChF,OAAO,EAAE,+BAA+B,EAAE,MAAM,mDAAmD,CAAC;AAEpG,OAAO,EAEL,6BAA6B,GAC9B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AAC/E,OAAO,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AAEpF,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACjF,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,EAAE,6BAA6B,EAAE,MAAM,+CAA+C,CAAC;AAC9F,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAiB,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EACL,oBAAoB,GAErB,MAAM,8BAA8B,CAAC;AAItC,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC;AACpD,MAAM,CAAC,MAAM,iCAAiC,GAAG,GAAG,CAAC;AAmBrD;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAA+B,EAC/B,IAAY;IAEZ,OAAO,kBAAkB,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,SAAS,aAAa,IAAI,EAAE,CAAC;AAClF,CAAC;AAgDD;;;;;;;GAOG;AACH,MAAM,OAAO,iBAAiB;IACZ,IAAI,CAAwB;IAC5B,OAAO,CAAS;IAChB,kBAAkB,CAA2B;IAC7C,WAAW,CAAqB;IAChC,WAAW,CAAqB;IAChC,WAAW,CAAqB;IAChC,cAAc,CAAS;IACvB,YAAY,CAAS;IACrB,WAAW,CAAuB;IAClD;;;;;;;OAOG;IACa,cAAc,GAAG,IAAI,uBAAuB,EAAE,CAAC;IAE/D,MAAM,CAAyB;IACd,IAAI,CAA0B;IAC9B,UAAU,CAAmB;IAC7B,MAAM,GAAG,IAAI,sBAAsB,EAAE,CAAC;IACtC,KAAK,CAAW;IAChB,OAAO,CAA2B;IAEnD,YAAY,UAAuC;QACjD,MAAM,EACJ,IAAI,EACJ,OAAO,EACP,kBAAkB,GAAG,+BAA+B,CAAC,IAAI,EAAE,EAC3D,eAAe,GAAG,oBAAoB,EACtC,IAAI,EACJ,KAAK,GAAG,SAAS,EACjB,WAAW,EACX,WAAW,EACX,WAAW,EACX,cAAc,GAAG,kCAAkC,EACnD,YAAY,GAAG,iCAAiC,EAChD,WAAW,EACX,UAAU,GAAG,IAAI,EACjB,KAAK,GAAG,IAAI,YAAY,EAAE,EAC1B,IAAI,GACL,GAAG,UAAU,CAAC;QACf,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,IAAI,GAAG,IAA6B,CAAC;QAC1C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;QAC7C,IAAI,CAAC,IAAI,GAAG,IAAI,IAAI,IAAI,6BAA6B,CAAC,eAAe,CAAC,CAAC;QACvE,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,WAAW;YACd,WAAW;gBACX,IAAI,oBAAoB,CAAC;oBACvB,YAAY,EAAE,IAAI;oBAClB,UAAU,EAAE,kBAAkB,CAAC,UAAU;oBACzC,YAAY;iBACb,CAAC,CAAC;QACL,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,OAAO,GAAG,IAAI,wBAAwB,CAAC;YAC1C,YAAY,EAAE,IAAI;YAClB,IAAI;YACJ,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,IAAI,GAAG;QACL,OAAO,oBAAoB,CAAC,IAAI,CAAC,kBAAkB,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC;QACvB,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,aAAa;QACX,OAAO;YACL,YAAY,EAAE,IAAI,CAAC,IAAI;YACvB,WAAW,EAAE,IAAI,CAAC,GAAG;YACrB,IAAI,EAAE,IAAI,CAAC,OAAO;YAClB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,OAAO,EAAE,SAAS;YAClB,OAAO,EAAE,IAAI,CAAC,cAAc;YAC5B,UAAU,EAAE,IAAI,CAAC,YAAY;YAC7B,OAAO,EAAE,IAAI,CAAC,WAAW;YACzB,OAAO,EAAE,IAAI,CAAC,WAAW;YACzB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE;SAC9C,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,MAAM,CAAC,KAAc;QACzB,MAAM,cAAc,GAAG,IAAI,6BAA6B,CAAC;YACvD,YAAY,EAAE,IAAI,CAAC,IAAI;YACvB,kBAAkB,EAAE,IAAI,CAAC,GAAG;YAC5B,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY;YACvC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE;SAC5C,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEnC,OAAO,MAAM,kBAAkB,CAAC,GAAG,CACjC,IAAI,CAAC,UAAU,EACf,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,EAClC,KAAK,IAAI,EAAE,CACT,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAC5B,KAAK,IAAI,EAAE,CACT,MAAM,IAAI,CAAC,oBAAoB,CAC7B,KAAK,IAAI,EAAE,CACT,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CACvB,KAAK,IAAI,EAAE,CACT,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CACnB,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAC3B,KAAK,EACL,cAAc,CACf,CACJ,CACJ,CACJ,CACJ,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,oBAAoB,CAAI,GAAqB;QACzD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAC/B,OAAO,MAAM,GAAG,EAAE,CAAC;QACrB,CAAC;QAED,OAAO,MAAM,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC1D,CAAC;CACF"}

package/dist/service/lambda/serve/auth/sim-lambda-url-authorizer.d.ts

@@ -3,15 +3,6 @@ import type { SimIamAuthorizationDecision, SimIamInterServiceAuthZ } from "../..
 import type { SimAwsRequestSource } from "../../../iam/request/sim-aws-request-source.js";
 import type { SimLambdaFunction } from "../../function/sim-lambda-function.js";
 import type { SimLambdaFunctionUrl } from "../../function/url/sim-lambda-function-url.js";
-/**
- * The IAM action a Function URL invocation is authorized against.
- *
- * This is deliberately not `lambda:InvokeFunction`, which is what the Invoke
- * API maps to. Real AWS separates the two so a policy can grant the HTTP
- * endpoint without granting the SDK operation, and a test asserting on that
- * distinction should see it hold here.
- */
-export declare const simLambdaInvokeFunctionUrlAction = "lambda:InvokeFunctionUrl";
 interface SimLambdaUrlAuthorizerProperties {
     readonly iam: SimIamInterServiceAuthZ;
 }
@@ -40,7 +31,19 @@ export declare class SimLambdaUrlAuthorizer {
     private readonly iam;
     constructor(properties: SimLambdaUrlAuthorizerProperties);
     /**
-     * Evaluate `lambda:InvokeFunctionUrl` for a caller against a Function URL.
+     * Evaluate the actions reaching this Function URL takes.
+     *
+     * `lambda:InvokeFunctionUrl` is the one a caller signing its own request
+     * needs. CloudFront reaching the URL through an origin access control needs
+     * `lambda:InvokeFunction` on top of it, so a resource policy granting only
+     * the URL action is refused here as real Lambda refuses it.
+     *
+     * Every action is judged against the same request, so a permission
+     * conditioned on the Distribution applies to both.
+     */
+    authorize(input: SimLambdaUrlAuthorizationInput): SimIamAuthorizationDecision;
+    /**
+     * Evaluate one action for a caller against a Function URL.
      *
      * The URL's auth type is supplied as `lambda:FunctionUrlAuthType`, which is
      * what a grant conditions on in practice: a permission granted for `AWS_IAM`
@@ -52,7 +55,7 @@ export declare class SimLambdaUrlAuthorizer {
      * no source supplies neither, so a permission conditioned on one does not
      * match rather than matching anything.
      */
-    authorize(input: SimLambdaUrlAuthorizationInput): SimIamAuthorizationDecision;
+    private decide;
 }
 export {};
 //# sourceMappingURL=sim-lambda-url-authorizer.d.ts.map

package/dist/service/lambda/serve/auth/sim-lambda-url-authorizer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda-url-authorizer.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/serve/auth/sim-lambda-url-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EACV,2BAA2B,EAC3B,uBAAuB,EACxB,MAAM,wDAAwD,CAAC;AAOhE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gDAAgD,CAAC;AAC1F,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+CAA+C,CAAC;AAE1F;;;;;;;GAOG;AACH,eAAO,MAAM,gCAAgC,6BAA6B,CAAC;AAE3E,UAAU,gCAAgC;IACxC,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;CACvC;AAED,UAAU,8BAA8B;IACtC,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAC;IACxC,QAAQ,CAAC,WAAW,EAAE,oBAAoB,CAAC;IAC3C,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;CACnD;AAED;;;;;;;;;;GAUG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA0B;IAE9C,YAAY,UAAU,EAAE,gCAAgC,EAEvD;IAED;;;;;;;;;;;;OAYG;IACH,SAAS,CACP,KAAK,EAAE,8BAA8B,GACpC,2BAA2B,CAkB7B;CACF"}
+{"version":3,"file":"sim-lambda-url-authorizer.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/serve/auth/sim-lambda-url-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EACV,2BAA2B,EAC3B,uBAAuB,EACxB,MAAM,wDAAwD,CAAC;AAYhE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gDAAgD,CAAC;AAC1F,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+CAA+C,CAAC;AAE1F,UAAU,gCAAgC;IACxC,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;CACvC;AAED,UAAU,8BAA8B;IACtC,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAC;IACxC,QAAQ,CAAC,WAAW,EAAE,oBAAoB,CAAC;IAC3C,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;CACnD;AAED;;;;;;;;;;GAUG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA0B;IAE9C,YAAY,UAAU,EAAE,gCAAgC,EAEvD;IAED;;;;;;;;;;OAUG;IACH,SAAS,CACP,KAAK,EAAE,8BAA8B,GACpC,2BAA2B,CAkB7B;IAED;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,MAAM;CAsBf"}

package/dist/service/lambda/serve/auth/sim-lambda-url-authorizer.js

@@ -1,14 +1,6 @@
 import { simLambdaResourcePolicies } from "../../command/authorize/sim-lambda-resource-policies.js";
 import { simLambdaFunctionUrlAuthTypeConditionKey, simLambdaSourceAccountConditionKey, simLambdaSourceArnConditionKey, } from "../../function/policy/sim-lambda-permission.js";
-/**
- * The IAM action a Function URL invocation is authorized against.
- *
- * This is deliberately not `lambda:InvokeFunction`, which is what the Invoke
- * API maps to. Real AWS separates the two so a policy can grant the HTTP
- * endpoint without granting the SDK operation, and a test asserting on that
- * distinction should see it hold here.
- */
-export const simLambdaInvokeFunctionUrlAction = "lambda:InvokeFunctionUrl";
+import { simLambdaInvokeFunctionAction, simLambdaInvokeFunctionUrlAction, simLambdaUrlRequiresInvokeFunction, } from "./sim-lambda-url-invoke-actions.js";
 /**
  * Decides whether a caller may invoke a Function URL.
  *
@@ -26,7 +18,32 @@ export class SimLambdaUrlAuthorizer {
         this.iam = properties.iam;
     }
     /**
-     * Evaluate `lambda:InvokeFunctionUrl` for a caller against a Function URL.
+     * Evaluate the actions reaching this Function URL takes.
+     *
+     * `lambda:InvokeFunctionUrl` is the one a caller signing its own request
+     * needs. CloudFront reaching the URL through an origin access control needs
+     * `lambda:InvokeFunction` on top of it, so a resource policy granting only
+     * the URL action is refused here as real Lambda refuses it.
+     *
+     * Every action is judged against the same request, so a permission
+     * conditioned on the Distribution applies to both.
+     */
+    authorize(input) {
+        const urlDecision = this.decide(simLambdaInvokeFunctionUrlAction, input);
+        if (urlDecision.isDenied) {
+            return urlDecision;
+        }
+        if (!simLambdaUrlRequiresInvokeFunction(input.caller)) {
+            return urlDecision;
+        }
+        const invokeDecision = this.decide(simLambdaInvokeFunctionAction, input);
+        if (invokeDecision.isDenied) {
+            return invokeDecision;
+        }
+        return urlDecision;
+    }
+    /**
+     * Evaluate one action for a caller against a Function URL.
      *
      * The URL's auth type is supplied as `lambda:FunctionUrlAuthType`, which is
      * what a grant conditions on in practice: a permission granted for `AWS_IAM`
@@ -38,10 +55,10 @@ export class SimLambdaUrlAuthorizer {
      * no source supplies neither, so a permission conditioned on one does not
      * match rather than matching anything.
      */
-    authorize(input) {
+    decide(action, input) {
         const { source } = input;
         return this.iam.authorize({
-            action: simLambdaInvokeFunctionUrlAction,
+            action,
             resource: input.simFunction.arn,
             caller: input.caller,
             resourcePolicies: simLambdaResourcePolicies(input.simFunction),

package/dist/service/lambda/serve/auth/sim-lambda-url-authorizer.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda-url-authorizer.js","sourceRoot":"","sources":["../../../../../src/service/lambda/serve/auth/sim-lambda-url-authorizer.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,yBAAyB,EAAE,MAAM,yDAAyD,CAAC;AACpG,OAAO,EACL,wCAAwC,EACxC,kCAAkC,EAClC,8BAA8B,GAC/B,MAAM,gDAAgD,CAAC;AAKxD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,0BAA0B,CAAC;AAiB3E;;;;;;;;;;GAUG;AACH,MAAM,OAAO,sBAAsB;IAChB,GAAG,CAA0B;IAE9C,YAAY,UAA4C;QACtD,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,SAAS,CACP,KAAqC;QAErC,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;QAEzB,OAAO,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YACxB,MAAM,EAAE,gCAAgC;YACxC,QAAQ,EAAE,KAAK,CAAC,WAAW,CAAC,GAAG;YAC/B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,gBAAgB,EAAE,yBAAyB,CAAC,KAAK,CAAC,WAAW,CAAC;YAC9D,gBAAgB,EAAE;gBAChB,CAAC,wCAAwC,CAAC,EAAE,KAAK,CAAC,WAAW,CAAC,QAAQ;gBACtE,GAAG,CAAC,MAAM,EAAE,GAAG,KAAK,SAAS,IAAI;oBAC/B,CAAC,8BAA8B,CAAC,EAAE,MAAM,CAAC,GAAG;iBAC7C,CAAC;gBACF,GAAG,CAAC,MAAM,EAAE,SAAS,KAAK,SAAS,IAAI;oBACrC,CAAC,kCAAkC,CAAC,EAAE,MAAM,CAAC,SAAS;iBACvD,CAAC;aACH;SACF,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"sim-lambda-url-authorizer.js","sourceRoot":"","sources":["../../../../../src/service/lambda/serve/auth/sim-lambda-url-authorizer.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,yBAAyB,EAAE,MAAM,yDAAyD,CAAC;AACpG,OAAO,EACL,wCAAwC,EACxC,kCAAkC,EAClC,8BAA8B,GAC/B,MAAM,gDAAgD,CAAC;AACxD,OAAO,EACL,6BAA6B,EAC7B,gCAAgC,EAChC,kCAAkC,GACnC,MAAM,oCAAoC,CAAC;AAoB5C;;;;;;;;;;GAUG;AACH,MAAM,OAAO,sBAAsB;IAChB,GAAG,CAA0B;IAE9C,YAAY,UAA4C;QACtD,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;;;;;;;;;OAUG;IACH,SAAS,CACP,KAAqC;QAErC,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAC;QAEzE,IAAI,WAAW,CAAC,QAAQ,EAAE,CAAC;YACzB,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,IAAI,CAAC,kCAAkC,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YACtD,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,6BAA6B,EAAE,KAAK,CAAC,CAAC;QAEzE,IAAI,cAAc,CAAC,QAAQ,EAAE,CAAC;YAC5B,OAAO,cAAc,CAAC;QACxB,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IAED;;;;;;;;;;;;OAYG;IACK,MAAM,CACZ,MAAc,EACd,KAAqC;QAErC,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;QAEzB,OAAO,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YACxB,MAAM;YACN,QAAQ,EAAE,KAAK,CAAC,WAAW,CAAC,GAAG;YAC/B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,gBAAgB,EAAE,yBAAyB,CAAC,KAAK,CAAC,WAAW,CAAC;YAC9D,gBAAgB,EAAE;gBAChB,CAAC,wCAAwC,CAAC,EAAE,KAAK,CAAC,WAAW,CAAC,QAAQ;gBACtE,GAAG,CAAC,MAAM,EAAE,GAAG,KAAK,SAAS,IAAI;oBAC/B,CAAC,8BAA8B,CAAC,EAAE,MAAM,CAAC,GAAG;iBAC7C,CAAC;gBACF,GAAG,CAAC,MAAM,EAAE,SAAS,KAAK,SAAS,IAAI;oBACrC,CAAC,kCAAkC,CAAC,EAAE,MAAM,CAAC,SAAS;iBACvD,CAAC;aACH;SACF,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/lambda/serve/auth/sim-lambda-url-invoke-actions.d.ts

@@ -0,0 +1,34 @@
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+/**
+ * The IAM action a Function URL invocation is authorized against.
+ *
+ * This is deliberately not `lambda:InvokeFunction`, which is what the Invoke
+ * API maps to. Real AWS separates the two so a policy can grant the HTTP
+ * endpoint without granting the SDK operation, and a test asserting on that
+ * distinction should see it hold here.
+ *
+ * That is the whole rule for a caller signing its own request. It is not the
+ * whole rule for a CloudFront origin access control, which needs
+ * `lambda:InvokeFunction` as well.
+ */
+export declare const simLambdaInvokeFunctionUrlAction = "lambda:InvokeFunctionUrl";
+/**
+ * The action the Invoke API maps to, which reaching a Function URL through a
+ * CloudFront origin access control takes on top of the URL action.
+ *
+ * Real Lambda answers an origin access control granted only the URL action
+ * with 403 and never runs the handler. Both grants go to the CloudFront
+ * service principal and both are conditioned on the Distribution, as described
+ * in [Restrict access to an AWS Lambda function URL
+ * origin](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-lambda.html).
+ */
+export declare const simLambdaInvokeFunctionAction = "lambda:InvokeFunction";
+/**
+ * Whether reaching this Function URL also takes `lambda:InvokeFunction`.
+ *
+ * True for CloudFront, and false for anything else, which is the distinction
+ * real Lambda draws: a caller signing the request itself needs the URL action
+ * alone.
+ */
+export declare function simLambdaUrlRequiresInvokeFunction(caller: SimAwsCaller): boolean;
+//# sourceMappingURL=sim-lambda-url-invoke-actions.d.ts.map

package/dist/service/lambda/serve/auth/sim-lambda-url-invoke-actions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-url-invoke-actions.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/serve/auth/sim-lambda-url-invoke-actions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,YAAY,EAEb,MAAM,uCAAuC,CAAC;AAE/C;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,gCAAgC,6BAA6B,CAAC;AAE3E;;;;;;;;;GASG;AACH,eAAO,MAAM,6BAA6B,0BAA0B,CAAC;AAWrE;;;;;;GAMG;AACH,wBAAgB,kCAAkC,CAChD,MAAM,EAAE,YAAY,GACnB,OAAO,CAQT"}

package/dist/service/lambda/serve/auth/sim-lambda-url-invoke-actions.js

@@ -0,0 +1,63 @@
+/**
+ * The IAM action a Function URL invocation is authorized against.
+ *
+ * This is deliberately not `lambda:InvokeFunction`, which is what the Invoke
+ * API maps to. Real AWS separates the two so a policy can grant the HTTP
+ * endpoint without granting the SDK operation, and a test asserting on that
+ * distinction should see it hold here.
+ *
+ * That is the whole rule for a caller signing its own request. It is not the
+ * whole rule for a CloudFront origin access control, which needs
+ * `lambda:InvokeFunction` as well.
+ */
+export const simLambdaInvokeFunctionUrlAction = "lambda:InvokeFunctionUrl";
+/**
+ * The action the Invoke API maps to, which reaching a Function URL through a
+ * CloudFront origin access control takes on top of the URL action.
+ *
+ * Real Lambda answers an origin access control granted only the URL action
+ * with 403 and never runs the handler. Both grants go to the CloudFront
+ * service principal and both are conditioned on the Distribution, as described
+ * in [Restrict access to an AWS Lambda function URL
+ * origin](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-lambda.html).
+ */
+export const simLambdaInvokeFunctionAction = "lambda:InvokeFunction";
+/**
+ * The service principal CloudFront reaches an Origin as.
+ *
+ * Named here rather than imported from simulated CloudFront, so that simulated
+ * Lambda goes on depending on nothing in that service. What real Lambda wants
+ * the second action for is the principal, whatever is simulating it.
+ */
+const cloudFrontServicePrincipal = "cloudfront.amazonaws.com";
+/**
+ * Whether reaching this Function URL also takes `lambda:InvokeFunction`.
+ *
+ * True for CloudFront, and false for anything else, which is the distinction
+ * real Lambda draws: a caller signing the request itself needs the URL action
+ * alone.
+ */
+export function simLambdaUrlRequiresInvokeFunction(caller) {
+    const principal = callerPrincipal(caller);
+    if (principal.kind !== "service") {
+        return false;
+    }
+    return principal.service === cloudFrontServicePrincipal;
+}
+/**
+ * The principal a caller names.
+ *
+ * Credentials name one too, but only once IAM has authenticated them, and
+ * nothing reaching a Function URL as a service principal presents any: an
+ * origin access control states who it is at the boundary instead.
+ */
+function callerPrincipal(caller) {
+    if (caller.kind === "resolved") {
+        return caller.principal;
+    }
+    if (caller.kind === "credentials") {
+        return { kind: "anonymous" };
+    }
+    return caller;
+}
+//# sourceMappingURL=sim-lambda-url-invoke-actions.js.map

package/dist/service/lambda/serve/auth/sim-lambda-url-invoke-actions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-url-invoke-actions.js","sourceRoot":"","sources":["../../../../../src/service/lambda/serve/auth/sim-lambda-url-invoke-actions.ts"],"names":[],"mappings":"AAKA;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,0BAA0B,CAAC;AAE3E;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,uBAAuB,CAAC;AAErE;;;;;;GAMG;AACH,MAAM,0BAA0B,GAAG,0BAA0B,CAAC;AAE9D;;;;;;GAMG;AACH,MAAM,UAAU,kCAAkC,CAChD,MAAoB;IAEpB,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAE1C,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,SAAS,CAAC,OAAO,KAAK,0BAA0B,CAAC;AAC1D,CAAC;AAED;;;;;;GAMG;AACH,SAAS,eAAe,CAAC,MAAoB;IAC3C,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC/B,OAAO,MAAM,CAAC,SAAS,CAAC;IAC1B,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QAClC,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IAC/B,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/service/lambda/serve/response/sim-lambda-url-error-response.d.ts

@@ -1,3 +1,11 @@
+/**
+ * What real Lambda says when it refuses a Function URL request.
+ *
+ * A refused request never reaches the handler and writes no log stream, so
+ * this body is the only thing a deployment has to go on. The wording is real
+ * Lambda's, down to the link, because that is what someone will be reading.
+ */
+export declare const simLambdaUrlForbiddenMessage: string;
 /**
  * The error responses a Function URL endpoint returns itself, before or
  * instead of the function producing one.
@@ -12,7 +20,7 @@ export declare class SimLambdaUrlErrorResponse {
      */
     notFound(): Response;
     /**
-     * The Function URL requires authentication the simulator cannot verify.
+     * The caller is not allowed to invoke this Function URL.
      */
     forbidden(): Response;
     /**

package/dist/service/lambda/serve/response/sim-lambda-url-error-response.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda-url-error-response.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/serve/response/sim-lambda-url-error-response.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,qBAAa,yBAAyB;IACpC;;OAEG;IACH,QAAQ,IAAI,QAAQ,CAEnB;IAED;;OAEG;IACH,SAAS,IAAI,QAAQ,CAEpB;IAED;;OAEG;IACH,mBAAmB,IAAI,QAAQ,CAE9B;IAED,OAAO,CAAC,YAAY;CASrB"}
+{"version":3,"file":"sim-lambda-url-error-response.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/serve/response/sim-lambda-url-error-response.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,eAAO,MAAM,4BAA4B,QAEsB,CAAC;AAEhE;;;;;;;GAOG;AACH,qBAAa,yBAAyB;IACpC;;OAEG;IACH,QAAQ,IAAI,QAAQ,CAEnB;IAED;;OAEG;IACH,SAAS,IAAI,QAAQ,CAEpB;IAED;;OAEG;IACH,mBAAmB,IAAI,QAAQ,CAE9B;IAED,OAAO,CAAC,YAAY;CASrB"}

package/dist/service/lambda/serve/response/sim-lambda-url-error-response.js

@@ -1,3 +1,12 @@
+/**
+ * What real Lambda says when it refuses a Function URL request.
+ *
+ * A refused request never reaches the handler and writes no log stream, so
+ * this body is the only thing a deployment has to go on. The wording is real
+ * Lambda's, down to the link, because that is what someone will be reading.
+ */
+export const simLambdaUrlForbiddenMessage = "Forbidden. For troubleshooting Function URL authorization issues, see: " +
+    "https://docs.aws.amazon.com/lambda/latest/dg/urls-auth.html";
 /**
  * The error responses a Function URL endpoint returns itself, before or
  * instead of the function producing one.
@@ -14,10 +23,10 @@ export class SimLambdaUrlErrorResponse {
         return this.jsonResponse(404, "Not Found");
     }
     /**
-     * The Function URL requires authentication the simulator cannot verify.
+     * The caller is not allowed to invoke this Function URL.
      */
     forbidden() {
-        return this.jsonResponse(403, "Forbidden");
+        return this.jsonResponse(403, simLambdaUrlForbiddenMessage);
     }
     /**
      * The function failed to handle the invocation.

package/dist/service/lambda/serve/response/sim-lambda-url-error-response.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda-url-error-response.js","sourceRoot":"","sources":["../../../../../src/service/lambda/serve/response/sim-lambda-url-error-response.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,OAAO,yBAAyB;IACpC;;OAEG;IACH,QAAQ;QACN,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,mBAAmB;QACjB,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;IACzD,CAAC;IAEO,YAAY,CAAC,MAAc,EAAE,OAAe;QAClD,OAAO,QAAQ,CAAC,IAAI,CAClB,EAAE,OAAO,EAAE,OAAO,EAAE,EACpB;YACE,MAAM;YACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CACF,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-lambda-url-error-response.js","sourceRoot":"","sources":["../../../../../src/service/lambda/serve/response/sim-lambda-url-error-response.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,4BAA4B,GACvC,yEAAyE;IACzE,6DAA6D,CAAC;AAEhE;;;;;;;GAOG;AACH,MAAM,OAAO,yBAAyB;IACpC;;OAEG;IACH,QAAQ;QACN,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,4BAA4B,CAAC,CAAC;IAC9D,CAAC;IAED;;OAEG;IACH,mBAAmB;QACjB,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;IACzD,CAAC;IAEO,YAAY,CAAC,MAAc,EAAE,OAAe;QAClD,OAAO,QAAQ,CAAC,IAAI,CAClB,EAAE,OAAO,EAAE,OAAO,EAAE,EACpB;YACE,MAAM;YACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CACF,CAAC;IACJ,CAAC;CACF"}

package/dist/service/lambda/sim-lambda-commands.d.ts

@@ -11,6 +11,7 @@ import { type SimLambdaEventSourceStreams } from "./event-source/stream/sim-lamb
 import { type SimLambdaContainerImages } from "./function/code/image/sim-lambda-container-images.js";
 import type { SimLambdaCodeStore } from "./function/code/store/sim-lambda-code-store.js";
 import type { SimLambdaVmSdkModuleProvider } from "./function/code/vm/sdk/sim-lambda-vm-sdk-module-provider.js";
+import type { SimLogsServiceWriter } from "../logs/write/sim-logs-service-writer.js";
 import type { SimLambdaFunctionMap } from "./function/sim-lambda-function.js";
 import { SimLambdaFunctionLookup } from "./function/url/sim-lambda-function-lookup.js";
 import { SimLambdaFunctionUrlStore } from "./function/url/sim-lambda-function-url-store.js";
@@ -26,6 +27,7 @@ export interface SimLambdaProperties {
     readonly codeStore?: SimLambdaCodeStore;
     readonly containerImages?: SimLambdaContainerImages;
     readonly vmSdkModuleProvider?: SimLambdaVmSdkModuleProvider;
+    readonly logs?: SimLogsServiceWriter | undefined;
     readonly urlRegistry?: SimLambdaUrlRegistry;
     readonly eventSourceQueues?: SimSqsPollQueues;
     readonly eventSourceStreams?: SimLambdaEventSourceStreams;

package/dist/service/lambda/sim-lambda-commands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda-commands.d.ts","sourceRoot":"","sources":["../../../src/service/lambda/sim-lambda-commands.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAE3E,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AACvF,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,mCAAmC,EAAE,MAAM,4EAA4E,CAAC;AACjI,OAAO,EAAE,yBAAyB,EAAE,MAAM,oDAAoD,CAAC;AAC/F,OAAO,EAAE,4BAA4B,EAAE,MAAM,4DAA4D,CAAC;AAC1G,OAAO,EAAE,2BAA2B,EAAE,MAAM,wDAAwD,CAAC;AAGrG,OAAO,EACL,KAAK,2BAA2B,EAEjC,MAAM,0DAA0D,CAAC;AAClE,OAAO,EACL,KAAK,wBAAwB,EAE9B,MAAM,sDAAsD,CAAC;AAC9D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AACzF,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,6DAA6D,CAAC;AAEhH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,uBAAuB,EAAE,MAAM,8CAA8C,CAAC;AACvF,OAAO,EAAE,yBAAyB,EAAE,MAAM,iDAAiD,CAAC;AAC5F,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAE7E;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,wBAAwB,CAAC;IACvD,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;IAC1C,QAAQ,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAC;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,kBAAkB,CAAC;IACxC,QAAQ,CAAC,eAAe,CAAC,EAAE,wBAAwB,CAAC;IACpD,QAAQ,CAAC,mBAAmB,CAAC,EAAE,4BAA4B,CAAC;IAC5D,QAAQ,CAAC,WAAW,CAAC,EAAE,oBAAoB,CAAC;IAC5C,QAAQ,CAAC,iBAAiB,CAAC,EAAE,gBAAgB,CAAC;IAC9C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,2BAA2B,CAAC;CAC3D;AAED,UAAU,2BAA4B,SAAQ,mBAAmB;IAC/D,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;IACzC,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;CACvC;AAED;;;;;;;GAOG;AACH,qBAAa,iBAAiB;IAC5B;;;;OAIG;IACH,SAAgB,eAAe,EAAE,wBAAwB,CAAC;IAE1D,SAAgB,gBAAgB,EAAE,yBAAyB,CAAC;IAC5D,SAAgB,cAAc,EAAE,uBAAuB,CAAC;IACxD,SAAgB,SAAS,EAAE,yBAAyB,CAAC;IACrD,SAAgB,YAAY,EAAE,4BAA4B,CAAC;IAC3D,SAAgB,WAAW,EAAE,2BAA2B,CAAC;IACzD,SAAgB,mBAAmB,EAAE,mCAAmC,CAAC;IAEzE,YAAY,UAAU,EAAE,2BAA2B,EAuElD;CACF"}
+{"version":3,"file":"sim-lambda-commands.d.ts","sourceRoot":"","sources":["../../../src/service/lambda/sim-lambda-commands.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAE3E,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AACvF,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,mCAAmC,EAAE,MAAM,4EAA4E,CAAC;AACjI,OAAO,EAAE,yBAAyB,EAAE,MAAM,oDAAoD,CAAC;AAC/F,OAAO,EAAE,4BAA4B,EAAE,MAAM,4DAA4D,CAAC;AAC1G,OAAO,EAAE,2BAA2B,EAAE,MAAM,wDAAwD,CAAC;AAGrG,OAAO,EACL,KAAK,2BAA2B,EAEjC,MAAM,0DAA0D,CAAC;AAClE,OAAO,EACL,KAAK,wBAAwB,EAE9B,MAAM,sDAAsD,CAAC;AAC9D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AACzF,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,6DAA6D,CAAC;AAChH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,0CAA0C,CAAC;AAErF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,uBAAuB,EAAE,MAAM,8CAA8C,CAAC;AACvF,OAAO,EAAE,yBAAyB,EAAE,MAAM,iDAAiD,CAAC;AAC5F,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAE7E;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,wBAAwB,CAAC;IACvD,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;IAC1C,QAAQ,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAC;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,kBAAkB,CAAC;IACxC,QAAQ,CAAC,eAAe,CAAC,EAAE,wBAAwB,CAAC;IACpD,QAAQ,CAAC,mBAAmB,CAAC,EAAE,4BAA4B,CAAC;IAC5D,QAAQ,CAAC,IAAI,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,WAAW,CAAC,EAAE,oBAAoB,CAAC;IAC5C,QAAQ,CAAC,iBAAiB,CAAC,EAAE,gBAAgB,CAAC;IAC9C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,2BAA2B,CAAC;CAC3D;AAED,UAAU,2BAA4B,SAAQ,mBAAmB;IAC/D,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;IACzC,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;CACvC;AAED;;;;;;;GAOG;AACH,qBAAa,iBAAiB;IAC5B;;;;OAIG;IACH,SAAgB,eAAe,EAAE,wBAAwB,CAAC;IAE1D,SAAgB,gBAAgB,EAAE,yBAAyB,CAAC;IAC5D,SAAgB,cAAc,EAAE,uBAAuB,CAAC;IACxD,SAAgB,SAAS,EAAE,yBAAyB,CAAC;IACrD,SAAgB,YAAY,EAAE,4BAA4B,CAAC;IAC3D,SAAgB,WAAW,EAAE,2BAA2B,CAAC;IACzD,SAAgB,mBAAmB,EAAE,mCAAmC,CAAC;IAEzE,YAAY,UAAU,EAAE,2BAA2B,EAyElD;CACF"}

package/dist/service/lambda/sim-lambda-commands.js

@@ -35,7 +35,7 @@ export class SimLambdaCommands {
     permissions;
     eventSourceMappings;
     constructor(properties) {
-        const { accountRegionScope = simAwsAccountRegionScopeFactory.make(), iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), codeStore, vmSdkModuleProvider, 
+        const { accountRegionScope = simAwsAccountRegionScopeFactory.make(), iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), codeStore, vmSdkModuleProvider, logs, 
         // A standalone SimLambda is not reachable over HTTP, so its own registry
         // is enough; a SimAws-created one shares the environment-wide registry
         // the serving layer routes with.
@@ -95,6 +95,7 @@ export class SimLambdaCommands {
             codeStore,
             containerImages,
             vmSdkModuleProvider,
+            logs,
         });
     }
 }

package/dist/service/lambda/sim-lambda-commands.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda-commands.js","sourceRoot":"","sources":["../../../src/service/lambda/sim-lambda-commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,eAAe,GAChB,MAAM,qCAAqC,CAAC;AAG7C,OAAO,EAAE,+BAA+B,EAAE,MAAM,gDAAgD,CAAC;AAEjG,OAAO,EACL,kBAAkB,GAEnB,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,mCAAmC,EAAE,MAAM,4EAA4E,CAAC;AACjI,OAAO,EAAE,yBAAyB,EAAE,MAAM,oDAAoD,CAAC;AAC/F,OAAO,EAAE,4BAA4B,EAAE,MAAM,4DAA4D,CAAC;AAC1G,OAAO,EAAE,2BAA2B,EAAE,MAAM,wDAAwD,CAAC;AACrG,OAAO,EAAE,2BAA2B,EAAE,MAAM,mDAAmD,CAAC;AAChG,OAAO,EAAE,4BAA4B,EAAE,MAAM,2DAA2D,CAAC;AACzG,OAAO,EAEL,6BAA6B,GAC9B,MAAM,0DAA0D,CAAC;AAClE,OAAO,EAEL,0BAA0B,GAC3B,MAAM,sDAAsD,CAAC;AAG9D,OAAO,EAAE,6BAA6B,EAAE,MAAM,4DAA4D,CAAC;AAE3G,OAAO,EAAE,uBAAuB,EAAE,MAAM,8CAA8C,CAAC;AACvF,OAAO,EAAE,yBAAyB,EAAE,MAAM,iDAAiD,CAAC;AAC5F,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAuB7E;;;;;;;GAOG;AACH,MAAM,OAAO,iBAAiB;IAC5B;;;;OAIG;IACa,eAAe,CAA2B;IAE1C,gBAAgB,CAA4B;IAC5C,cAAc,CAA0B;IACxC,SAAS,CAA4B;IACrC,YAAY,CAA+B;IAC3C,WAAW,CAA8B;IACzC,mBAAmB,CAAsC;IAEzE,YAAY,UAAuC;QACjD,MAAM,EACJ,kBAAkB,GAAG,+BAA+B,CAAC,IAAI,EAAE,EAC3D,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,EAClC,SAAS,EACT,mBAAmB;QACnB,yEAAyE;QACzE,uEAAuE;QACvE,iCAAiC;QACjC,WAAW,GAAG,IAAI,oBAAoB,EAAE;QACxC,yEAAyE;QACzE,gEAAgE;QAChE,cAAc;QACd,iBAAiB,GAAG,IAAI,4BAA4B,EAAE,EACtD,kBAAkB,GAAG,IAAI,6BAA6B,EAAE;QACxD,wEAAwE;QACxE,qEAAqE;QACrE,eAAe,GAAG,IAAI,0BAA0B,EAAE,GACnD,GAAG,UAAU,CAAC;QAEf,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;QAEvC,IAAI,CAAC,cAAc,GAAG,IAAI,uBAAuB,CAAC;YAChD,kBAAkB;YAClB,SAAS,EAAE,UAAU,CAAC,SAAS;SAChC,CAAC,CAAC;QACH,IAAI,CAAC,gBAAgB,GAAG,IAAI,yBAAyB,CAAC;YACpD,kBAAkB;YAClB,WAAW;YACX,KAAK,EAAE,UAAU;SAClB,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,GAAG,IAAI,4BAA4B,CAAC;YACnD,YAAY,EAAE,IAAI,CAAC,gBAAgB;YACnC,SAAS,EAAE,IAAI,CAAC,cAAc;YAC9B,GAAG;YACH,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,GAAG,IAAI,2BAA2B,CAAC;YACjD,SAAS,EAAE,IAAI,CAAC,cAAc;YAC9B,GAAG;YACH,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,mBAAmB,GAAG,IAAI,mCAAmC,CAAC;YACjE,kBAAkB;YAClB,OAAO,EAAE,IAAI,2BAA2B,CAAC;gBACvC,SAAS,EAAE,IAAI,CAAC,cAAc;gBAC9B,MAAM,EAAE,iBAAiB;gBACzB,OAAO,EAAE,kBAAkB;gBAC3B,UAAU;aACX,CAAC;YACF,MAAM,EAAE,iBAAiB;YACzB,OAAO,EAAE,kBAAkB;YAC3B,SAAS,EAAE,IAAI,CAAC,cAAc;YAC9B,GAAG;YACH,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,GAAG,IAAI,yBAAyB,CAAC;YAC7C,kBAAkB;YAClB,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,YAAY,EAAE,IAAI,CAAC,gBAAgB;YACnC,GAAG;YACH,UAAU;YACV,UAAU,EAAE,UAAU,CAAC,UAAU;YACjC,yEAAyE;YACzE,mDAAmD;YACnD,oBAAoB,EAAE,IAAI,6BAA6B,EAAE;YACzD,SAAS;YACT,eAAe;YACf,mBAAmB;SACpB,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"sim-lambda-commands.js","sourceRoot":"","sources":["../../../src/service/lambda/sim-lambda-commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,eAAe,GAChB,MAAM,qCAAqC,CAAC;AAG7C,OAAO,EAAE,+BAA+B,EAAE,MAAM,gDAAgD,CAAC;AAEjG,OAAO,EACL,kBAAkB,GAEnB,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,mCAAmC,EAAE,MAAM,4EAA4E,CAAC;AACjI,OAAO,EAAE,yBAAyB,EAAE,MAAM,oDAAoD,CAAC;AAC/F,OAAO,EAAE,4BAA4B,EAAE,MAAM,4DAA4D,CAAC;AAC1G,OAAO,EAAE,2BAA2B,EAAE,MAAM,wDAAwD,CAAC;AACrG,OAAO,EAAE,2BAA2B,EAAE,MAAM,mDAAmD,CAAC;AAChG,OAAO,EAAE,4BAA4B,EAAE,MAAM,2DAA2D,CAAC;AACzG,OAAO,EAEL,6BAA6B,GAC9B,MAAM,0DAA0D,CAAC;AAClE,OAAO,EAEL,0BAA0B,GAC3B,MAAM,sDAAsD,CAAC;AAI9D,OAAO,EAAE,6BAA6B,EAAE,MAAM,4DAA4D,CAAC;AAE3G,OAAO,EAAE,uBAAuB,EAAE,MAAM,8CAA8C,CAAC;AACvF,OAAO,EAAE,yBAAyB,EAAE,MAAM,iDAAiD,CAAC;AAC5F,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAwB7E;;;;;;;GAOG;AACH,MAAM,OAAO,iBAAiB;IAC5B;;;;OAIG;IACa,eAAe,CAA2B;IAE1C,gBAAgB,CAA4B;IAC5C,cAAc,CAA0B;IACxC,SAAS,CAA4B;IACrC,YAAY,CAA+B;IAC3C,WAAW,CAA8B;IACzC,mBAAmB,CAAsC;IAEzE,YAAY,UAAuC;QACjD,MAAM,EACJ,kBAAkB,GAAG,+BAA+B,CAAC,IAAI,EAAE,EAC3D,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,EAClC,SAAS,EACT,mBAAmB,EACnB,IAAI;QACJ,yEAAyE;QACzE,uEAAuE;QACvE,iCAAiC;QACjC,WAAW,GAAG,IAAI,oBAAoB,EAAE;QACxC,yEAAyE;QACzE,gEAAgE;QAChE,cAAc;QACd,iBAAiB,GAAG,IAAI,4BAA4B,EAAE,EACtD,kBAAkB,GAAG,IAAI,6BAA6B,EAAE;QACxD,wEAAwE;QACxE,qEAAqE;QACrE,eAAe,GAAG,IAAI,0BAA0B,EAAE,GACnD,GAAG,UAAU,CAAC;QAEf,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;QAEvC,IAAI,CAAC,cAAc,GAAG,IAAI,uBAAuB,CAAC;YAChD,kBAAkB;YAClB,SAAS,EAAE,UAAU,CAAC,SAAS;SAChC,CAAC,CAAC;QACH,IAAI,CAAC,gBAAgB,GAAG,IAAI,yBAAyB,CAAC;YACpD,kBAAkB;YAClB,WAAW;YACX,KAAK,EAAE,UAAU;SAClB,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,GAAG,IAAI,4BAA4B,CAAC;YACnD,YAAY,EAAE,IAAI,CAAC,gBAAgB;YACnC,SAAS,EAAE,IAAI,CAAC,cAAc;YAC9B,GAAG;YACH,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,GAAG,IAAI,2BAA2B,CAAC;YACjD,SAAS,EAAE,IAAI,CAAC,cAAc;YAC9B,GAAG;YACH,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,mBAAmB,GAAG,IAAI,mCAAmC,CAAC;YACjE,kBAAkB;YAClB,OAAO,EAAE,IAAI,2BAA2B,CAAC;gBACvC,SAAS,EAAE,IAAI,CAAC,cAAc;gBAC9B,MAAM,EAAE,iBAAiB;gBACzB,OAAO,EAAE,kBAAkB;gBAC3B,UAAU;aACX,CAAC;YACF,MAAM,EAAE,iBAAiB;YACzB,OAAO,EAAE,kBAAkB;YAC3B,SAAS,EAAE,IAAI,CAAC,cAAc;YAC9B,GAAG;YACH,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,GAAG,IAAI,yBAAyB,CAAC;YAC7C,kBAAkB;YAClB,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,YAAY,EAAE,IAAI,CAAC,gBAAgB;YACnC,GAAG;YACH,UAAU;YACV,UAAU,EAAE,UAAU,CAAC,UAAU;YACjC,yEAAyE;YACzE,mDAAmD;YACnD,oBAAoB,EAAE,IAAI,6BAA6B,EAAE;YACzD,SAAS;YACT,eAAe;YACf,mBAAmB;YACnB,IAAI;SACL,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/logs/cfn/group/sim-cfn-log-group-creator.d.ts

@@ -0,0 +1,34 @@
+import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
+import type { SimLogsLogGroup } from "../../group/sim-logs-log-group.js";
+import type { SimLogs } from "../../sim-logs.js";
+interface SimCfnLogGroupCreatorProperties {
+    readonly logs: SimLogs;
+}
+/**
+ * Creates simulated log groups from AWS::Logs::LogGroup Resources.
+ *
+ * A declared log group and one a Lambda function made for itself are the same
+ * thing, which is why creating one that is already there is not an error here
+ * the way `CreateLogGroup` is. A template naming `/aws/lambda/orders` is
+ * usually saying what retention that function's logs should have, and it is
+ * ordinary for the function to have logged first: real CloudFormation fails
+ * that deploy, which is a genuine misconfiguration in an account and pure
+ * noise in a test whose function ran during setup.
+ */
+export declare class SimCfnLogGroupCreator {
+    #private;
+    constructor(properties: SimCfnLogGroupCreatorProperties);
+    /**
+     * Create a log group from an AWS::Logs::LogGroup Resource.
+     */
+    create(resource: SimCfnResource, properties: SimCfnTemplateValueRecord): SimLogsLogGroup;
+    /**
+     * Delete a log group created from an AWS::Logs::LogGroup Resource.
+     *
+     * The events go with it, as they do in an account.
+     */
+    delete(group: SimLogsLogGroup): void;
+}
+export {};
+//# sourceMappingURL=sim-cfn-log-group-creator.d.ts.map

package/dist/service/logs/cfn/group/sim-cfn-log-group-creator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-log-group-creator.d.ts","sourceRoot":"","sources":["../../../../../src/service/logs/cfn/group/sim-cfn-log-group-creator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAClH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAGjD,UAAU,+BAA+B;IACvC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB;AAED;;;;;;;;;;GAUG;AACH,qBAAa,qBAAqB;;IAGhC,YAAY,UAAU,EAAE,+BAA+B,EAEtD;IAED;;OAEG;IACH,MAAM,CACJ,QAAQ,EAAE,cAAc,EACxB,UAAU,EAAE,yBAAyB,GACpC,eAAe,CAejB;IAED;;;;OAIG;IACH,MAAM,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI,CAEnC;CACF"}