@kensio/yulin 1.15.1 → 1.16.1

package/dist/service/lambda/function/code/vm/sim-lambda-vm-modules.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda-vm-modules.d.ts","sourceRoot":"","sources":["../../../../../../src/service/lambda/function/code/vm/sim-lambda-vm-modules.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAC5E,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,4CAA4C,CAAC;AAa/F,UAAU,4BAA4B;IACpC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC;IAC7B,QAAQ,CAAC,iBAAiB,EAAE,4BAA4B,CAAC;CAC1D;AAcD;;;;;;;GAOG;AACH,qBAAa,kBAAkB;IAIjB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAHvC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA+B;IACvD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA4B;IAErD,YAA6B,UAAU,EAAE,4BAA4B,EAEpE;IAED;;OAEG;IACH,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,SAAM,GAAG,OAAO,CAiB7D;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,aAAa;IAQrB,OAAO,CAAC,UAAU;IAgClB,OAAO,CAAC,aAAa;CAkBtB"}
+{"version":3,"file":"sim-lambda-vm-modules.d.ts","sourceRoot":"","sources":["../../../../../../src/service/lambda/function/code/vm/sim-lambda-vm-modules.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAC5E,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,4CAA4C,CAAC;AAiB/F,UAAU,4BAA4B;IACpC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC;IAC7B,QAAQ,CAAC,iBAAiB,EAAE,4BAA4B,CAAC;CAC1D;AAED;;;;;;;GAOG;AACH,qBAAa,kBAAkB;IAIjB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAHvC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAwC;IAChE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA4B;IAErD,YAA6B,UAAU,EAAE,4BAA4B,EAEpE;IAED;;OAEG;IACH,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,SAAM,GAAG,OAAO,CAuB7D;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,aAAa;IAQrB,OAAO,CAAC,UAAU;IAgClB,OAAO,CAAC,aAAa;CAkBtB"}

package/dist/service/lambda/function/code/vm/sim-lambda-vm-modules.js

@@ -30,8 +30,12 @@ export class SimLambdaVmModules {
      * Require a module by specifier, as CommonJS code in the archive would.
      */
     requireModule(specifier, fromDirectory = ".") {
+        // A built-in is the only thing a deployment package that bundles its
+        // dependencies still asks the runtime for, so the provider is offered
+        // those too. Anything it declines is the host built-in itself.
         if (isBuiltin(specifier)) {
-            return hostRequire(specifier);
+            return (this.properties.sdkModuleProvider.provideModule(specifier) ??
+                hostRequire(specifier));
         }
         let filePath;
         try {

package/dist/service/lambda/function/code/vm/sim-lambda-vm-modules.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda-vm-modules.js","sourceRoot":"","sources":["../../../../../../src/service/lambda/function/code/vm/sim-lambda-vm-modules.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AAGzB,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAChE,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAC/E,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAEtE;;;GAGG;AACH,MAAM,yBAAyB,GAAG,IAAI,CAAC;AAEvC,MAAM,WAAW,GAAG,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;AAoBnD;;;;;;;GAOG;AACH,MAAM,OAAO,kBAAkB;IAIA,UAAU;IAHtB,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAC;IACtC,QAAQ,CAA4B;IAErD,YAA6B,UAAwC;0BAAxC,UAAU;QACrC,IAAI,CAAC,QAAQ,GAAG,IAAI,yBAAyB,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACpE,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,SAAiB,EAAE,aAAa,GAAG,GAAG;QAClD,IAAI,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;YACzB,OAAO,WAAW,CAAC,SAAS,CAAC,CAAC;QAChC,CAAC;QAED,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QACrE,CAAC;QAAC,OAAO,YAAY,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,MAAM,CAAC,OAAO,CAAC;QACxB,CAAC;QACD,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC;IAC3C,CAAC;IAED;;;;;;;OAOG;IACK,aAAa,CAAC,SAAiB,EAAE,YAAqB;QAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAC5E,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,YAAY,CAAC;QACrB,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,UAAU,CAAC,QAAgB;QACjC,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,MAAM,UAAU,GAAa;gBAC3B,OAAO,EAAE,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC;aAC3D,CAAC;YACF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YACvC,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,MAAM,MAAM,GAAa,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QACzC,wEAAwE;QACxE,iBAAiB;QACjB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAEnC,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACrD,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAC1B,MAAM,CAAC,OAAO,EACd,CAAC,SAAiB,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,eAAe,CAAC,EACrE,MAAM,EACN,QAAQ,EACR,eAAe,CAChB,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,oEAAoE;YACpE,qDAAqD;YACrD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC9B,MAAM,KAAK,CAAC;QACd,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,aAAa,CAAC,QAAgB;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;QACjE,MAAM,OAAO,GAAG,kEACd,MACF,MAAM,CAAC;QAEP,IAAI,MAAiB,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,mBAAmB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC7C,CAAC;QAED,OAAO,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE;YAClD,OAAO,EAAE,yBAAyB;YAClC,aAAa,EAAE,IAAI;SACpB,CAA2B,CAAC;IAC/B,CAAC;CACF"}
+{"version":3,"file":"sim-lambda-vm-modules.js","sourceRoot":"","sources":["../../../../../../src/service/lambda/function/code/vm/sim-lambda-vm-modules.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AAGzB,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAKhE,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAC/E,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAEtE;;;GAGG;AACH,MAAM,yBAAyB,GAAG,IAAI,CAAC;AAEvC,MAAM,WAAW,GAAG,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;AAQnD;;;;;;;GAOG;AACH,MAAM,OAAO,kBAAkB;IAIA,UAAU;IAHtB,OAAO,GAAG,IAAI,GAAG,EAA6B,CAAC;IAC/C,QAAQ,CAA4B;IAErD,YAA6B,UAAwC;0BAAxC,UAAU;QACrC,IAAI,CAAC,QAAQ,GAAG,IAAI,yBAAyB,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACpE,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,SAAiB,EAAE,aAAa,GAAG,GAAG;QAClD,qEAAqE;QACrE,sEAAsE;QACtE,+DAA+D;QAC/D,IAAI,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;YACzB,OAAO,CACL,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,aAAa,CAAC,SAAS,CAAC;gBAC1D,WAAW,CAAC,SAAS,CAAC,CACvB,CAAC;QACJ,CAAC;QAED,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QACrE,CAAC;QAAC,OAAO,YAAY,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,MAAM,CAAC,OAAO,CAAC;QACxB,CAAC;QACD,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC;IAC3C,CAAC;IAED;;;;;;;OAOG;IACK,aAAa,CAAC,SAAiB,EAAE,YAAqB;QAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAC5E,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,YAAY,CAAC;QACrB,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,UAAU,CAAC,QAAgB;QACjC,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,MAAM,UAAU,GAAsB;gBACpC,OAAO,EAAE,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC;aAC3D,CAAC;YACF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YACvC,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,MAAM,MAAM,GAAsB,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAClD,wEAAwE;QACxE,iBAAiB;QACjB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAEnC,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACrD,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAC1B,MAAM,CAAC,OAAO,EACd,CAAC,SAAiB,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,eAAe,CAAC,EACrE,MAAM,EACN,QAAQ,EACR,eAAe,CAChB,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,oEAAoE;YACpE,qDAAqD;YACrD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC9B,MAAM,KAAK,CAAC;QACd,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,aAAa,CAAC,QAAgB;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;QACjE,MAAM,OAAO,GAAG,kEACd,MACF,MAAM,CAAC;QAEP,IAAI,MAAiB,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,mBAAmB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC7C,CAAC;QAED,OAAO,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE;YAClD,OAAO,EAAE,yBAAyB;YAClC,aAAa,EAAE,IAAI;SACpB,CAA8B,CAAC;IAClC,CAAC;CACF"}

package/dist/service/lambda/function/environment/sim-lambda-environment.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda-environment.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/function/environment/sim-lambda-environment.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,UAAU,8BAA+B,SAAQ,2BAA2B;IAC1E,QAAQ,CAAC,iBAAiB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;CACtE;AAED;;;;;;;GAOG;AACH,qBAAa,oBAAoB;;IAC/B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA8B;IACtD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA8B;IAYvD,YAAY,UAAU,EAAE,8BAA8B,EAIrD;IAED;;;;;OAKG;IACH,IAAI,oBAAoB,IAAI,OAAO,CAElC;IAED;;OAEG;IACH,IAAI,iBAAiB,IAAI,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAEnD;IAED;;OAEG;IACH,IAAI,YAAY,IAAI,MAAM,CAEzB;IAED;;;;;OAKG;IACH,aAAa,IAAI;QAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,GAAG,SAAS,CAMjE;IAED;;;;;;;;OAQG;IACG,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAMlD;IAED;;OAEG;IACH,SAAS,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAMlC;IAED;;OAEG;IACH,OAAO,CAAC,gBAAgB;CAazB"}
+{"version":3,"file":"sim-lambda-environment.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/function/environment/sim-lambda-environment.ts"],"names":[],"mappings":"AAGA;;;GAGG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,UAAU,8BAA+B,SAAQ,2BAA2B;IAC1E,QAAQ,CAAC,iBAAiB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;CACtE;AAED;;;;;;;GAOG;AACH,qBAAa,oBAAoB;;IAC/B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA8B;IACtD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA8B;IAYvD,YAAY,UAAU,EAAE,8BAA8B,EAIrD;IAED;;;;;OAKG;IACH,IAAI,oBAAoB,IAAI,OAAO,CAElC;IAED;;OAEG;IACH,IAAI,iBAAiB,IAAI,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAEnD;IAED;;OAEG;IACH,IAAI,YAAY,IAAI,MAAM,CAEzB;IAED;;;;;OAKG;IACH,aAAa,IAAI;QAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,GAAG,SAAS,CAMjE;IAED;;;;;;;;OAQG;IACG,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAMlD;IAED;;OAEG;IACH,SAAS,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAMlC;IAED;;OAEG;IACH,OAAO,CAAC,gBAAgB;CAczB"}

package/dist/service/lambda/function/environment/sim-lambda-environment.js

@@ -1,4 +1,5 @@
 import { simProcessEnvironment } from "../../../../util/process/sim-process-environment.js";
+import { simLambdaExecutionCredentials } from "./sim-lambda-execution-credentials.js";
 /**
  * The environment a sim Lambda function runs with.
  *
@@ -96,6 +97,7 @@ export class SimLambdaEnvironment {
             ["AWS_LAMBDA_FUNCTION_NAME", functionName],
             ["AWS_LAMBDA_FUNCTION_MEMORY_SIZE", String(memorySizeMb)],
             ["AWS_LAMBDA_FUNCTION_VERSION", "$LATEST"],
+            ...simLambdaExecutionCredentials,
         ]);
     }
 }

package/dist/service/lambda/function/environment/sim-lambda-environment.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda-environment.js","sourceRoot":"","sources":["../../../../../src/service/lambda/function/environment/sim-lambda-environment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,qDAAqD,CAAC;AAgB5F;;;;;;;GAOG;AACH,MAAM,OAAO,oBAAoB;IACd,OAAO,CAA8B;IACrC,QAAQ,CAA8B;IAEvD;;;;;;;OAOG;IACH,UAAU,CAAqC;IAE/C,YAAY,UAA0C;QACpD,MAAM,EAAE,iBAAiB,EAAE,GAAG,OAAO,EAAE,GAAG,UAAU,CAAC;QACrD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,QAAQ,GAAG,iBAAiB,IAAI,IAAI,GAAG,EAAE,CAAC;IACjD,CAAC;IAED;;;;;OAKG;IACH,IAAI,oBAAoB;QACtB,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,IAAI,iBAAiB;QACnB,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;IACnC,CAAC;IAED;;;;;OAKG;IACH,aAAa;QACX,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC/B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC1D,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,OAAO,CAAI,GAAqB;QACpC,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC/B,OAAO,MAAM,GAAG,EAAE,CAAC;QACrB,CAAC;QAED,OAAO,MAAM,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC;IAChE,CAAC;IAED;;OAEG;IACH,SAAS;QACP,IAAI,CAAC,UAAU,KAAK;YAClB,GAAG,IAAI,CAAC,gBAAgB,EAAE;YAC1B,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC;SACrC,CAAC;QACF,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED;;OAEG;IACK,gBAAgB;QACtB,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QAChE,+DAA+D;QAC/D,oEAAoE;QACpE,oEAAoE;QACpE,OAAO,MAAM,CAAC,WAAW,CAAC;YACxB,CAAC,YAAY,EAAE,UAAU,CAAC;YAC1B,CAAC,oBAAoB,EAAE,UAAU,CAAC;YAClC,CAAC,0BAA0B,EAAE,YAAY,CAAC;YAC1C,CAAC,iCAAiC,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;YACzD,CAAC,6BAA6B,EAAE,SAAS,CAAC;SAC3C,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"sim-lambda-environment.js","sourceRoot":"","sources":["../../../../../src/service/lambda/function/environment/sim-lambda-environment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,qDAAqD,CAAC;AAC5F,OAAO,EAAE,6BAA6B,EAAE,MAAM,uCAAuC,CAAC;AAgBtF;;;;;;;GAOG;AACH,MAAM,OAAO,oBAAoB;IACd,OAAO,CAA8B;IACrC,QAAQ,CAA8B;IAEvD;;;;;;;OAOG;IACH,UAAU,CAAqC;IAE/C,YAAY,UAA0C;QACpD,MAAM,EAAE,iBAAiB,EAAE,GAAG,OAAO,EAAE,GAAG,UAAU,CAAC;QACrD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,QAAQ,GAAG,iBAAiB,IAAI,IAAI,GAAG,EAAE,CAAC;IACjD,CAAC;IAED;;;;;OAKG;IACH,IAAI,oBAAoB;QACtB,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,IAAI,iBAAiB;QACnB,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;IACnC,CAAC;IAED;;;;;OAKG;IACH,aAAa;QACX,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC/B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC1D,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,OAAO,CAAI,GAAqB;QACpC,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC/B,OAAO,MAAM,GAAG,EAAE,CAAC;QACrB,CAAC;QAED,OAAO,MAAM,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC;IAChE,CAAC;IAED;;OAEG;IACH,SAAS;QACP,IAAI,CAAC,UAAU,KAAK;YAClB,GAAG,IAAI,CAAC,gBAAgB,EAAE;YAC1B,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC;SACrC,CAAC;QACF,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED;;OAEG;IACK,gBAAgB;QACtB,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QAChE,+DAA+D;QAC/D,oEAAoE;QACpE,oEAAoE;QACpE,OAAO,MAAM,CAAC,WAAW,CAAC;YACxB,CAAC,YAAY,EAAE,UAAU,CAAC;YAC1B,CAAC,oBAAoB,EAAE,UAAU,CAAC;YAClC,CAAC,0BAA0B,EAAE,YAAY,CAAC;YAC1C,CAAC,iCAAiC,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;YACzD,CAAC,6BAA6B,EAAE,SAAS,CAAC;YAC1C,GAAG,6BAA6B;SACjC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/lambda/function/environment/sim-lambda-execution-credentials.d.ts

@@ -0,0 +1,19 @@
+/**
+ * The execution role credentials the Lambda runtime puts in the environment.
+ *
+ * Real Lambda sets these to the temporary credentials of the function's
+ * execution Role, and an AWS SDK in the function code finds them there before
+ * it looks anywhere else. Function code that bundles the SDK needs them for
+ * the same reason: without them the first call fails while resolving
+ * credentials, long before anything the simulation could answer.
+ *
+ * The values are placeholders, and deliberately say so. Nothing in the
+ * simulation authorizes against them: a call from function code is attributed
+ * to the execution Role because the invocation is running as it, which is what
+ * the credentials would have identified anyway.
+ */
+export declare const simLambdaExecutionCredentials: readonly (readonly [
+    string,
+    string
+])[];
+//# sourceMappingURL=sim-lambda-execution-credentials.d.ts.map

package/dist/service/lambda/function/environment/sim-lambda-execution-credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-execution-credentials.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/function/environment/sim-lambda-execution-credentials.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,6BAA6B,EAAE,SAAS,CAAC,SAAS;IAC7D,MAAM;IACN,MAAM;CACP,CAAC,EAID,CAAC"}

package/dist/service/lambda/function/environment/sim-lambda-execution-credentials.js

@@ -0,0 +1,20 @@
+/**
+ * The execution role credentials the Lambda runtime puts in the environment.
+ *
+ * Real Lambda sets these to the temporary credentials of the function's
+ * execution Role, and an AWS SDK in the function code finds them there before
+ * it looks anywhere else. Function code that bundles the SDK needs them for
+ * the same reason: without them the first call fails while resolving
+ * credentials, long before anything the simulation could answer.
+ *
+ * The values are placeholders, and deliberately say so. Nothing in the
+ * simulation authorizes against them: a call from function code is attributed
+ * to the execution Role because the invocation is running as it, which is what
+ * the credentials would have identified anyway.
+ */
+export const simLambdaExecutionCredentials = [
+    ["AWS_ACCESS_KEY_ID", "ASIAYULINSIMULATED00"],
+    ["AWS_SECRET_ACCESS_KEY", "yulinSimulatedSecretAccessKeyValue000000"],
+    ["AWS_SESSION_TOKEN", "yulin-simulated-session-token"],
+];
+//# sourceMappingURL=sim-lambda-execution-credentials.js.map

package/dist/service/lambda/function/environment/sim-lambda-execution-credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-execution-credentials.js","sourceRoot":"","sources":["../../../../../src/service/lambda/function/environment/sim-lambda-execution-credentials.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAGnC;IACL,CAAC,mBAAmB,EAAE,sBAAsB,CAAC;IAC7C,CAAC,uBAAuB,EAAE,0CAA0C,CAAC;IACrE,CAAC,mBAAmB,EAAE,+BAA+B,CAAC;CACvD,CAAC"}

package/dist/service/lambda/index.d.ts

@@ -5,6 +5,9 @@ export { makeLambdaZipFileInput } from "./function/code/lambda-zip-file-input.js
 export { makeLambdaCodeZip, type LambdaCodeZipFiles, } from "./function/code/make-lambda-code-zip.js";
 export type { SimLambdaCallback, SimLambdaContext, SimLambdaHandler, } from "./function/sim-lambda-handler.type.js";
 export type { SimLambdaFunctionUrlEvent, SimLambdaFunctionUrlResult, } from "./serve/event/sim-lambda-url-event.type.js";
+export { lambdaFunctionUrlEventFactory } from "./factory/lambda-function-url-event.factory.js";
+export { lambdaSqsEventFactory, lambdaSqsEventRecordFactory, } from "./factory/lambda-sqs-event.factory.js";
+export { lambdaDynamoDbStreamEventFactory, lambdaDynamoDbStreamEventRecordFactory, } from "./factory/lambda-dynamodb-stream-event.factory.js";
 export type { SimLambdaSqsEvent, SimLambdaSqsEventMessageAttribute, SimLambdaSqsEventRecord, } from "./event-source/poll/sim-lambda-sqs-event.js";
 export type { SimLambdaDynamoDbEventAttributeValue, SimLambdaDynamoDbEventImage, SimLambdaDynamoDbStreamEvent, SimLambdaDynamoDbStreamEventRecord, SimLambdaDynamoDbStreamEventRecordBody, SimLambdaDynamoDbStreamEventUserIdentity, } from "./event-source/poll/sim-lambda-dynamodb-stream-event.types.js";
 export type { SimLambdaDynamoDbAttributeValue, SimLambdaDynamoDbImage, } from "./event-source/stream/sim-lambda-dynamodb-attribute-value.js";

package/dist/service/lambda/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/service/lambda/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EACL,8BAA8B,EAC9B,KAAK,4BAA4B,GAClC,MAAM,6DAA6D,CAAC;AACrE,OAAO,EAAE,4BAA4B,EAAE,MAAM,6DAA6D,CAAC;AAC3G,OAAO,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AAClF,OAAO,EACL,iBAAiB,EACjB,KAAK,kBAAkB,GACxB,MAAM,yCAAyC,CAAC;AACjD,YAAY,EACV,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,uCAAuC,CAAC;AAC/C,YAAY,EACV,yBAAyB,EACzB,0BAA0B,GAC3B,MAAM,4CAA4C,CAAC;AACpD,YAAY,EACV,iBAAiB,EACjB,iCAAiC,EACjC,uBAAuB,GACxB,MAAM,6CAA6C,CAAC;AACrD,YAAY,EACV,oCAAoC,EACpC,2BAA2B,EAC3B,4BAA4B,EAC5B,kCAAkC,EAClC,sCAAsC,EACtC,wCAAwC,GACzC,MAAM,+DAA+D,CAAC;AACvE,YAAY,EACV,+BAA+B,EAC/B,sBAAsB,GACvB,MAAM,8DAA8D,CAAC;AACtE,OAAO,EAAE,2BAA2B,EAAE,MAAM,0DAA0D,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/service/lambda/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EACL,8BAA8B,EAC9B,KAAK,4BAA4B,GAClC,MAAM,6DAA6D,CAAC;AACrE,OAAO,EAAE,4BAA4B,EAAE,MAAM,6DAA6D,CAAC;AAC3G,OAAO,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AAClF,OAAO,EACL,iBAAiB,EACjB,KAAK,kBAAkB,GACxB,MAAM,yCAAyC,CAAC;AACjD,YAAY,EACV,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,uCAAuC,CAAC;AAC/C,YAAY,EACV,yBAAyB,EACzB,0BAA0B,GAC3B,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,6BAA6B,EAAE,MAAM,gDAAgD,CAAC;AAC/F,OAAO,EACL,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EACL,gCAAgC,EAChC,sCAAsC,GACvC,MAAM,mDAAmD,CAAC;AAC3D,YAAY,EACV,iBAAiB,EACjB,iCAAiC,EACjC,uBAAuB,GACxB,MAAM,6CAA6C,CAAC;AACrD,YAAY,EACV,oCAAoC,EACpC,2BAA2B,EAC3B,4BAA4B,EAC5B,kCAAkC,EAClC,sCAAsC,EACtC,wCAAwC,GACzC,MAAM,+DAA+D,CAAC;AACvE,YAAY,EACV,+BAA+B,EAC/B,sBAAsB,GACvB,MAAM,8DAA8D,CAAC;AACtE,OAAO,EAAE,2BAA2B,EAAE,MAAM,0DAA0D,CAAC"}

package/dist/service/lambda/index.js

@@ -3,5 +3,8 @@ export { SimLambdaNoVmSdkModuleProvider, } from "./function/code/vm/sdk/sim-lamb
 export { SimSdkLambdaVmModuleProvider } from "./function/code/vm/sdk/sim-sdk-lambda-vm-module-provider.js";
 export { makeLambdaZipFileInput } from "./function/code/lambda-zip-file-input.js";
 export { makeLambdaCodeZip, } from "./function/code/make-lambda-code-zip.js";
+export { lambdaFunctionUrlEventFactory } from "./factory/lambda-function-url-event.factory.js";
+export { lambdaSqsEventFactory, lambdaSqsEventRecordFactory, } from "./factory/lambda-sqs-event.factory.js";
+export { lambdaDynamoDbStreamEventFactory, lambdaDynamoDbStreamEventRecordFactory, } from "./factory/lambda-dynamodb-stream-event.factory.js";
 export { SimLambdaStreamCascadeError } from "./event-source/stream/sim-lambda-stream-cascade.error.js";
 //# sourceMappingURL=index.js.map

package/dist/service/lambda/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/service/lambda/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EACL,8BAA8B,GAE/B,MAAM,6DAA6D,CAAC;AACrE,OAAO,EAAE,4BAA4B,EAAE,MAAM,6DAA6D,CAAC;AAC3G,OAAO,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AAClF,OAAO,EACL,iBAAiB,GAElB,MAAM,yCAAyC,CAAC;AA2BjD,OAAO,EAAE,2BAA2B,EAAE,MAAM,0DAA0D,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/service/lambda/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EACL,8BAA8B,GAE/B,MAAM,6DAA6D,CAAC;AACrE,OAAO,EAAE,4BAA4B,EAAE,MAAM,6DAA6D,CAAC;AAC3G,OAAO,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AAClF,OAAO,EACL,iBAAiB,GAElB,MAAM,yCAAyC,CAAC;AAUjD,OAAO,EAAE,6BAA6B,EAAE,MAAM,gDAAgD,CAAC;AAC/F,OAAO,EACL,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EACL,gCAAgC,EAChC,sCAAsC,GACvC,MAAM,mDAAmD,CAAC;AAkB3D,OAAO,EAAE,2BAA2B,EAAE,MAAM,0DAA0D,CAAC"}

package/dist/service/lambda/serve/auth/sim-lambda-url-payload-hash.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Why a Function URL request's payload hash cannot be accepted, or nothing
+ * when it can.
+ *
+ * Lambda checks what a request declares its body hashes to before it looks at
+ * who is asking, and answers a request that fails the check with a signature
+ * mismatch. Two declarations fail it. One is a digest that disagrees with the
+ * bytes that arrived, which would otherwise let a signed request carry any body
+ * at all. The other is `UNSIGNED-PAYLOAD`, which Lambda refuses outright.
+ * CloudFront signs a POST or PUT with it when the viewer sent no hash, and that
+ * is why such a request through an origin access control never reaches the
+ * function.
+ *
+ * A request declaring nothing is not checked. The hash is an input to the
+ * signature rather than something a request has to state, so a caller that
+ * signed the body it sent and left the header off has said nothing to
+ * disagree with.
+ *
+ * The method the request used makes no difference here. A declaration is a
+ * claim about the body, and SigV4 covers it for a GET as much as for a POST,
+ * so a GET carrying a digest of other bytes is refused as well. The method
+ * matters on the CloudFront side, which invents a declaration for a POST or a
+ * PUT alone.
+ *
+ * https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-lambda.html
+ */
+export declare function simLambdaUrlPayloadRefusal(request: Request): Promise<string | undefined>;
+//# sourceMappingURL=sim-lambda-url-payload-hash.d.ts.map

package/dist/service/lambda/serve/auth/sim-lambda-url-payload-hash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-url-payload-hash.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/serve/auth/sim-lambda-url-payload-hash.ts"],"names":[],"mappings":"AAOA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAkC7B"}

package/dist/service/lambda/serve/auth/sim-lambda-url-payload-hash.js

@@ -0,0 +1,56 @@
+import { simIamSigV4ContentSha256Header, SimIamSigV4PayloadDeclaration, simIamSigV4UnsignedPayload, } from "../../../iam/sigv4/canonical/sim-iam-sigv4-payload-hash.js";
+import { SimIamSigV4Error } from "../../../iam/sigv4/error/sim-iam-sigv4.error.js";
+/**
+ * Why a Function URL request's payload hash cannot be accepted, or nothing
+ * when it can.
+ *
+ * Lambda checks what a request declares its body hashes to before it looks at
+ * who is asking, and answers a request that fails the check with a signature
+ * mismatch. Two declarations fail it. One is a digest that disagrees with the
+ * bytes that arrived, which would otherwise let a signed request carry any body
+ * at all. The other is `UNSIGNED-PAYLOAD`, which Lambda refuses outright.
+ * CloudFront signs a POST or PUT with it when the viewer sent no hash, and that
+ * is why such a request through an origin access control never reaches the
+ * function.
+ *
+ * A request declaring nothing is not checked. The hash is an input to the
+ * signature rather than something a request has to state, so a caller that
+ * signed the body it sent and left the header off has said nothing to
+ * disagree with.
+ *
+ * The method the request used makes no difference here. A declaration is a
+ * claim about the body, and SigV4 covers it for a GET as much as for a POST,
+ * so a GET carrying a digest of other bytes is refused as well. The method
+ * matters on the CloudFront side, which invents a declaration for a POST or a
+ * PUT alone.
+ *
+ * https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-lambda.html
+ */
+export async function simLambdaUrlPayloadRefusal(request) {
+    if (!request.headers.has(simIamSigV4ContentSha256Header)) {
+        return undefined;
+    }
+    const declaration = SimIamSigV4PayloadDeclaration.fromHeaders(request.headers);
+    // A clone, so the body is still there for the invocation event to read.
+    const body = new Uint8Array(await request.clone().arrayBuffer());
+    let declared;
+    try {
+        declared = declaration.hashFor(body);
+    }
+    catch (error) {
+        if (error instanceof SimIamSigV4Error) {
+            return error.message;
+        }
+        /* v8 ignore next 2 -- a declaration is refused with nothing else */
+        throw error;
+    }
+    if (declared !== simIamSigV4UnsignedPayload) {
+        return undefined;
+    }
+    return (`Signed ${simIamSigV4ContentSha256Header} declares ` +
+        `${simIamSigV4UnsignedPayload}, which Lambda does not support. A ` +
+        `${request.method} to a Function URL has to declare the SHA-256 of its ` +
+        `body, and one sent through a CloudFront origin access control declares ` +
+        `whatever the viewer request declared.`);
+}
+//# sourceMappingURL=sim-lambda-url-payload-hash.js.map

package/dist/service/lambda/serve/auth/sim-lambda-url-payload-hash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-url-payload-hash.js","sourceRoot":"","sources":["../../../../../src/service/lambda/serve/auth/sim-lambda-url-payload-hash.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,8BAA8B,EAC9B,6BAA6B,EAC7B,0BAA0B,GAC3B,MAAM,4DAA4D,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iDAAiD,CAAC;AAEnF;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,OAAgB;IAEhB,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,EAAE,CAAC;QACzD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,WAAW,GAAG,6BAA6B,CAAC,WAAW,CAC3D,OAAO,CAAC,OAAO,CAChB,CAAC;IACF,wEAAwE;IACxE,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IACjE,IAAI,QAAgB,CAAC;IAErB,IAAI,CAAC;QACH,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,gBAAgB,EAAE,CAAC;YACtC,OAAO,KAAK,CAAC,OAAO,CAAC;QACvB,CAAC;QAED,oEAAoE;QACpE,MAAM,KAAK,CAAC;IACd,CAAC;IAED,IAAI,QAAQ,KAAK,0BAA0B,EAAE,CAAC;QAC5C,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,CACL,UAAU,8BAA8B,YAAY;QACpD,GAAG,0BAA0B,qCAAqC;QAClE,GAAG,OAAO,CAAC,MAAM,uDAAuD;QACxE,yEAAyE;QACzE,uCAAuC,CACxC,CAAC;AACJ,CAAC"}

package/dist/service/lambda/serve/response/sim-lambda-url-error-response.d.ts

@@ -6,6 +6,14 @@
  * Lambda's, down to the link, because that is what someone will be reading.
  */
 export declare const simLambdaUrlForbiddenMessage: string;
+/**
+ * What real Lambda says when a Function URL request does not verify.
+ *
+ * This is the answer a request that failed authentication gets, as opposed to
+ * one that was authenticated and then not allowed, and the wording is what
+ * anyone searching for the failure will have in front of them.
+ */
+export declare const simLambdaUrlSignatureMismatchMessage: string;
 /**
  * The error responses a Function URL endpoint returns itself, before or
  * instead of the function producing one.
@@ -23,6 +31,14 @@ export declare class SimLambdaUrlErrorResponse {
      * The caller is not allowed to invoke this Function URL.
      */
     forbidden(): Response;
+    /**
+     * The request does not carry a signature over the body it arrived with.
+     *
+     * Real Lambda says only that the signature did not match, which is faithful
+     * and impossible to act on, so what the simulator worked out goes in a hint
+     * header where it changes nothing for a client reading the body.
+     */
+    signatureDoesNotMatch(detail: string): Response;
     /**
      * The function failed to handle the invocation.
      */

package/dist/service/lambda/serve/response/sim-lambda-url-error-response.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda-url-error-response.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/serve/response/sim-lambda-url-error-response.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,eAAO,MAAM,4BAA4B,QAEsB,CAAC;AAEhE;;;;;;;GAOG;AACH,qBAAa,yBAAyB;IACpC;;OAEG;IACH,QAAQ,IAAI,QAAQ,CAEnB;IAED;;OAEG;IACH,SAAS,IAAI,QAAQ,CAEpB;IAED;;OAEG;IACH,mBAAmB,IAAI,QAAQ,CAE9B;IAED,OAAO,CAAC,YAAY;CASrB"}
+{"version":3,"file":"sim-lambda-url-error-response.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/serve/response/sim-lambda-url-error-response.ts"],"names":[],"mappings":"AAKA;;;;;;GAMG;AACH,eAAO,MAAM,4BAA4B,QAEsB,CAAC;AAEhE;;;;;;GAMG;AACH,eAAO,MAAM,oCAAoC,QAGP,CAAC;AAE3C;;;;;;;GAOG;AACH,qBAAa,yBAAyB;IACpC;;OAEG;IACH,QAAQ,IAAI,QAAQ,CAEnB;IAED;;OAEG;IACH,SAAS,IAAI,QAAQ,CAEpB;IAED;;;;;;OAMG;IACH,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,CAU9C;IAED;;OAEG;IACH,mBAAmB,IAAI,QAAQ,CAE9B;IAED,OAAO,CAAC,YAAY;CASrB"}

package/dist/service/lambda/serve/response/sim-lambda-url-error-response.js

@@ -1,3 +1,4 @@
+import { simAwsErrorDetailHeaderName, simAwsErrorHeaderName, } from "../../../../serve/http/response/sim-aws-response-hints.js";
 /**
  * What real Lambda says when it refuses a Function URL request.
  *
@@ -7,6 +8,16 @@
  */
 export const simLambdaUrlForbiddenMessage = "Forbidden. For troubleshooting Function URL authorization issues, see: " +
     "https://docs.aws.amazon.com/lambda/latest/dg/urls-auth.html";
+/**
+ * What real Lambda says when a Function URL request does not verify.
+ *
+ * This is the answer a request that failed authentication gets, as opposed to
+ * one that was authenticated and then not allowed, and the wording is what
+ * anyone searching for the failure will have in front of them.
+ */
+export const simLambdaUrlSignatureMismatchMessage = "The request signature we calculated does not match the signature you " +
+    "provided. Check your AWS Secret Access Key and signing method. Consult " +
+    "the service documentation for details.";
 /**
  * The error responses a Function URL endpoint returns itself, before or
  * instead of the function producing one.
@@ -28,6 +39,19 @@ export class SimLambdaUrlErrorResponse {
     forbidden() {
         return this.jsonResponse(403, simLambdaUrlForbiddenMessage);
     }
+    /**
+     * The request does not carry a signature over the body it arrived with.
+     *
+     * Real Lambda says only that the signature did not match, which is faithful
+     * and impossible to act on, so what the simulator worked out goes in a hint
+     * header where it changes nothing for a client reading the body.
+     */
+    signatureDoesNotMatch(detail) {
+        const response = this.jsonResponse(403, simLambdaUrlSignatureMismatchMessage);
+        response.headers.set(simAwsErrorHeaderName, "SignatureDoesNotMatch");
+        response.headers.set(simAwsErrorDetailHeaderName, detail);
+        return response;
+    }
     /**
      * The function failed to handle the invocation.
      */

package/dist/service/lambda/serve/response/sim-lambda-url-error-response.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda-url-error-response.js","sourceRoot":"","sources":["../../../../../src/service/lambda/serve/response/sim-lambda-url-error-response.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,4BAA4B,GACvC,yEAAyE;IACzE,6DAA6D,CAAC;AAEhE;;;;;;;GAOG;AACH,MAAM,OAAO,yBAAyB;IACpC;;OAEG;IACH,QAAQ;QACN,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,4BAA4B,CAAC,CAAC;IAC9D,CAAC;IAED;;OAEG;IACH,mBAAmB;QACjB,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;IACzD,CAAC;IAEO,YAAY,CAAC,MAAc,EAAE,OAAe;QAClD,OAAO,QAAQ,CAAC,IAAI,CAClB,EAAE,OAAO,EAAE,OAAO,EAAE,EACpB;YACE,MAAM;YACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CACF,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-lambda-url-error-response.js","sourceRoot":"","sources":["../../../../../src/service/lambda/serve/response/sim-lambda-url-error-response.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,2BAA2B,EAC3B,qBAAqB,GACtB,MAAM,2DAA2D,CAAC;AAEnE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,4BAA4B,GACvC,yEAAyE;IACzE,6DAA6D,CAAC;AAEhE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAC/C,uEAAuE;IACvE,yEAAyE;IACzE,wCAAwC,CAAC;AAE3C;;;;;;;GAOG;AACH,MAAM,OAAO,yBAAyB;IACpC;;OAEG;IACH,QAAQ;QACN,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,4BAA4B,CAAC,CAAC;IAC9D,CAAC;IAED;;;;;;OAMG;IACH,qBAAqB,CAAC,MAAc;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAChC,GAAG,EACH,oCAAoC,CACrC,CAAC;QAEF,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,uBAAuB,CAAC,CAAC;QACrE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,MAAM,CAAC,CAAC;QAE1D,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,mBAAmB;QACjB,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;IACzD,CAAC;IAEO,YAAY,CAAC,MAAc,EAAE,OAAe;QAClD,OAAO,QAAQ,CAAC,IAAI,CAClB,EAAE,OAAO,EAAE,OAAO,EAAE,EACpB;YACE,MAAM;YACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CACF,CAAC;IACJ,CAAC;CACF"}

package/dist/service/lambda/serve/sim-lambda-controller.d.ts

@@ -38,6 +38,12 @@ export declare class SimLambdaServiceController implements SimAwsServiceControll
      * What the request is being made on behalf of travels with it, so a
      * CloudFront Distribution reaching this URL through an origin access control
      * is judged against the Distribution the permission names.
+     *
+     * What the request declares its body hashes to is settled first, as real
+     * Lambda authenticates a request before it authorizes one. A POST or PUT
+     * arriving through an origin access control declares an unsigned payload
+     * unless the viewer sent a hash of its own, and Lambda takes no unsigned
+     * payload, so it is refused here rather than reaching the function.
      */
     private invokeAuthenticated;
     private invoke;

package/dist/service/lambda/serve/sim-lambda-controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda-controller.d.ts","sourceRoot":"","sources":["../../../../src/service/lambda/serve/sim-lambda-controller.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,uBAAuB,EACvB,oBAAoB,EACrB,MAAM,qDAAqD,CAAC;AAG7D,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAG9C,OAAO,EAEL,kBAAkB,EACnB,MAAM,4BAA4B,CAAC;AAIpC,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,kBAAkB,CAAC;CACtC;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,0BAA2B,YAAW,uBAAuB;IACxE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;IAC5C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA0B;IACvD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAoC;IACpE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAmC;IAEjE,YAAY,UAAU,GAAE,oCAAyC,EAQhE;IAED;;OAEG;IACG,aAAa,CAAC,cAAc,EAAE,oBAAoB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAc3E;IAED;;;;;;;;;;;OAWG;YACW,mBAAmB;YAmBnB,MAAM;CAqBrB"}
+{"version":3,"file":"sim-lambda-controller.d.ts","sourceRoot":"","sources":["../../../../src/service/lambda/serve/sim-lambda-controller.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,uBAAuB,EACvB,oBAAoB,EACrB,MAAM,qDAAqD,CAAC;AAG7D,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAG9C,OAAO,EAEL,kBAAkB,EACnB,MAAM,4BAA4B,CAAC;AAKpC,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,kBAAkB,CAAC;CACtC;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,0BAA2B,YAAW,uBAAuB;IACxE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;IAC5C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA0B;IACvD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAoC;IACpE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAmC;IAEjE,YAAY,UAAU,GAAE,oCAAyC,EAQhE;IAED;;OAEG;IACG,aAAa,CAAC,cAAc,EAAE,oBAAoB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAc3E;IAED;;;;;;;;;;;;;;;;;OAiBG;YACW,mBAAmB;YA2BnB,MAAM;CAqBrB"}

package/dist/service/lambda/serve/sim-lambda-controller.js

@@ -5,6 +5,7 @@ import { simLambdaUrlEndpoint } from "./event/sim-lambda-url-endpoint.js";
 import { SimLambdaUrlErrorResponse } from "./response/sim-lambda-url-error-response.js";
 import { SimLambdaUrlRouter, } from "./sim-lambda-url-router.js";
 import { SimLambdaUrlAuthorizer } from "./auth/sim-lambda-url-authorizer.js";
+import { simLambdaUrlPayloadRefusal } from "./auth/sim-lambda-url-payload-hash.js";
 /**
  * Localhost HTTP controller for simulated Lambda Function URLs.
  *
@@ -57,9 +58,19 @@ export class SimLambdaServiceController {
      * What the request is being made on behalf of travels with it, so a
      * CloudFront Distribution reaching this URL through an origin access control
      * is judged against the Distribution the permission names.
+     *
+     * What the request declares its body hashes to is settled first, as real
+     * Lambda authenticates a request before it authorizes one. A POST or PUT
+     * arriving through an origin access control declares an unsigned payload
+     * unless the viewer sent a hash of its own, and Lambda takes no unsigned
+     * payload, so it is refused here rather than reaching the function.
      */
     async invokeAuthenticated(route, serviceRequest) {
         const { caller } = serviceRequest;
+        const payloadRefusal = await simLambdaUrlPayloadRefusal(serviceRequest.request);
+        if (payloadRefusal !== undefined) {
+            return this.errorResponse.signatureDoesNotMatch(payloadRefusal);
+        }
         const decision = new SimLambdaUrlAuthorizer({ iam: route.iam }).authorize({
             simFunction: route.simFunction,
             functionUrl: route.functionUrl,

package/dist/service/lambda/serve/sim-lambda-controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda-controller.js","sourceRoot":"","sources":["../../../../src/service/lambda/serve/sim-lambda-controller.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,uBAAuB,EAAE,MAAM,yDAAyD,CAAC;AAClG,OAAO,EAAE,0BAA0B,EAAE,MAAM,4DAA4D,CAAC;AACxG,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,yBAAyB,EAAE,MAAM,6CAA6C,CAAC;AACxF,OAAO,EAEL,kBAAkB,GACnB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAQ7E;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,0BAA0B;IACpB,MAAM,CAAqB;IAC3B,YAAY,CAA0B;IACtC,eAAe,GAAG,IAAI,0BAA0B,EAAE,CAAC;IACnD,aAAa,GAAG,IAAI,yBAAyB,EAAE,CAAC;IAEjE,YAAY,UAAU,GAAyC,EAAE;QAC/D,MAAM,EAAE,MAAM,GAAG,IAAI,MAAM,EAAE,EAAE,GAAG,UAAU,CAAC;QAC7C,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,IAAI,IAAI,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QACtE,0EAA0E;QAC1E,iEAAiE;QACjE,IAAI,CAAC,YAAY,GAAG,IAAI,uBAAuB,CAAC;YAC9C,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;SAC1B,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,cAAoC;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAEvD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC;QACvC,CAAC;QAED,IAAI,KAAK,CAAC,WAAW,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;YAC1C,uEAAuE;YACvE,+DAA+D;YAC/D,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC;QAC1D,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IAC/D,CAAC;IAED;;;;;;;;;;;OAWG;IACK,KAAK,CAAC,mBAAmB,CAC/B,KAAgC,EAChC,cAAoC;QAEpC,MAAM,EAAE,MAAM,EAAE,GAAG,cAAc,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAI,sBAAsB,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,SAAS,CAAC;YACxE,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;YACzB,MAAM,EAAE,cAAc,CAAC,MAAM;SAC9B,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC;QACxC,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAClE,CAAC;IAEO,KAAK,CAAC,MAAM,CAClB,KAAgC,EAChC,OAAgB,EAChB,mBAAyC;QAEzC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CACzC,OAAO,EACP,oBAAoB,CAAC,KAAK,CAAC,WAAW,CAAC,EACvC,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAChC,CAAC;YAEF,OAAO,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3E,CAAC;QAAC,MAAM,CAAC;YACP,iEAAiE;YACjE,sEAAsE;YACtE,wEAAwE;YACxE,sBAAsB;YACtB,OAAO,IAAI,CAAC,aAAa,CAAC,mBAAmB,EAAE,CAAC;QAClD,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"sim-lambda-controller.js","sourceRoot":"","sources":["../../../../src/service/lambda/serve/sim-lambda-controller.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,uBAAuB,EAAE,MAAM,yDAAyD,CAAC;AAClG,OAAO,EAAE,0BAA0B,EAAE,MAAM,4DAA4D,CAAC;AACxG,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,yBAAyB,EAAE,MAAM,6CAA6C,CAAC;AACxF,OAAO,EAEL,kBAAkB,GACnB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAAE,0BAA0B,EAAE,MAAM,uCAAuC,CAAC;AAQnF;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,0BAA0B;IACpB,MAAM,CAAqB;IAC3B,YAAY,CAA0B;IACtC,eAAe,GAAG,IAAI,0BAA0B,EAAE,CAAC;IACnD,aAAa,GAAG,IAAI,yBAAyB,EAAE,CAAC;IAEjE,YAAY,UAAU,GAAyC,EAAE;QAC/D,MAAM,EAAE,MAAM,GAAG,IAAI,MAAM,EAAE,EAAE,GAAG,UAAU,CAAC;QAC7C,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,IAAI,IAAI,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QACtE,0EAA0E;QAC1E,iEAAiE;QACjE,IAAI,CAAC,YAAY,GAAG,IAAI,uBAAuB,CAAC;YAC9C,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;SAC1B,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,cAAoC;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAEvD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC;QACvC,CAAC;QAED,IAAI,KAAK,CAAC,WAAW,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;YAC1C,uEAAuE;YACvE,+DAA+D;YAC/D,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC;QAC1D,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IAC/D,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACK,KAAK,CAAC,mBAAmB,CAC/B,KAAgC,EAChC,cAAoC;QAEpC,MAAM,EAAE,MAAM,EAAE,GAAG,cAAc,CAAC;QAClC,MAAM,cAAc,GAAG,MAAM,0BAA0B,CACrD,cAAc,CAAC,OAAO,CACvB,CAAC;QAEF,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,aAAa,CAAC,qBAAqB,CAAC,cAAc,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,sBAAsB,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,SAAS,CAAC;YACxE,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;YACzB,MAAM,EAAE,cAAc,CAAC,MAAM;SAC9B,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC;QACxC,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAClE,CAAC;IAEO,KAAK,CAAC,MAAM,CAClB,KAAgC,EAChC,OAAgB,EAChB,mBAAyC;QAEzC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CACzC,OAAO,EACP,oBAAoB,CAAC,KAAK,CAAC,WAAW,CAAC,EACvC,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAChC,CAAC;YAEF,OAAO,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3E,CAAC;QAAC,MAAM,CAAC;YACP,iEAAiE;YACjE,sEAAsE;YACtE,wEAAwE;YACxE,sBAAsB;YACtB,OAAO,IAAI,CAAC,aAAa,CAAC,mBAAmB,EAAE,CAAC;QAClD,CAAC;IACH,CAAC;CACF"}

package/dist/service/s3/factory/s3-notification-event-object.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Whether the Object a record reports still exists after the event.
+ *
+ * `size` and `eTag` describe an Object that is there to be read, so a removal
+ * record carries neither, exactly as a real one does not. Everything that is
+ * not a removal is treated as leaving an Object behind, which covers the
+ * creations, the restores and the replications.
+ */
+export declare function simS3ObjectExists(eventName: string): boolean;
+//# sourceMappingURL=s3-notification-event-object.d.ts.map

package/dist/service/s3/factory/s3-notification-event-object.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3-notification-event-object.d.ts","sourceRoot":"","sources":["../../../../src/service/s3/factory/s3-notification-event-object.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAE5D"}

package/dist/service/s3/factory/s3-notification-event-object.js

@@ -0,0 +1,12 @@
+/**
+ * Whether the Object a record reports still exists after the event.
+ *
+ * `size` and `eTag` describe an Object that is there to be read, so a removal
+ * record carries neither, exactly as a real one does not. Everything that is
+ * not a removal is treated as leaving an Object behind, which covers the
+ * creations, the restores and the replications.
+ */
+export function simS3ObjectExists(eventName) {
+    return !eventName.startsWith("ObjectRemoved");
+}
+//# sourceMappingURL=s3-notification-event-object.js.map

package/dist/service/s3/factory/s3-notification-event-object.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3-notification-event-object.js","sourceRoot":"","sources":["../../../../src/service/s3/factory/s3-notification-event-object.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAAiB;IACjD,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;AAChD,CAAC"}

package/dist/service/s3/factory/s3-notification-event.factory.d.ts

@@ -0,0 +1,45 @@
+import { DynamicFactory, type ItemFactory } from "@kensio/part-factory";
+import type { SimS3Event, SimS3EventRecord } from "../notification/event/sim-s3-event.type.js";
+/**
+ * Makes the records of an S3 event notification, one Object event each.
+ *
+ * A test that cares about which Object changed says only that:
+ *
+ * ```typescript
+ * s3NotificationEventRecordFactory.make({
+ *   s3: { object: { key: "orders/YL-9.json" } },
+ * });
+ * ```
+ *
+ * What a real record says in more than one place is computed from the rest, so
+ * a record is one S3 could have delivered:
+ *
+ * - the Bucket ARN is the ARN of the Bucket named
+ * - a removal carries no `size` and no `eTag`, because the Object it reports
+ *   no longer exists, while a creation carries both
+ *
+ * The key is carried as a record carries it, form-URL-encoded, so a key with a
+ * space in it goes in as `my+file.txt`. `principalId` is an ARN rather than
+ * the `AIDA...` form real S3 reports, which is what simulated S3 delivers and
+ * what a test would assert on.
+ */
+export declare const s3NotificationEventRecordFactory: DynamicFactory<SimS3EventRecord, undefined>;
+/**
+ * Makes the event notification a Bucket delivers to a function.
+ *
+ * The default is the single record one Object event produces, which is all
+ * real S3 ever delivers to a function at once. A test wanting more than one
+ * says what each is about, and each is completed by
+ * `s3NotificationEventRecordFactory`:
+ *
+ * ```typescript
+ * s3NotificationEventFactory.make({
+ *   Records: [
+ *     { s3: { object: { key: "orders/YL-1.json" } } },
+ *     { eventName: "ObjectRemoved:Delete" },
+ *   ],
+ * });
+ * ```
+ */
+export declare const s3NotificationEventFactory: ItemFactory<SimS3Event>;
+//# sourceMappingURL=s3-notification-event.factory.d.ts.map

package/dist/service/s3/factory/s3-notification-event.factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3-notification-event.factory.d.ts","sourceRoot":"","sources":["../../../../src/service/s3/factory/s3-notification-event.factory.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,KAAK,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAUxE,OAAO,KAAK,EACV,UAAU,EAEV,gBAAgB,EACjB,MAAM,4CAA4C,CAAC;AAMpD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,gCAAgC,6CA6BzC,CAAC;AAEL;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,0BAA0B,EAAE,WAAW,CAAC,UAAU,CACD,CAAC"}

package/dist/service/s3/factory/s3-notification-event.factory.js

@@ -0,0 +1,102 @@
+import { faker } from "@faker-js/faker";
+import { DynamicFactory } from "@kensio/part-factory";
+import { SimRecordsEventFactory } from "../../../util/factory/sim-records-event.factory.js";
+import { DEFAULT_SIM_AWS_REGION_NAME } from "../../aws/sim-aws-region.js";
+import { SIM_S3_EVENT_SCHEMA_VERSION, SIM_S3_EVENT_VERSION, simS3EventRequestId, simS3EventSourceIpAddress, } from "../notification/event/sim-s3-event-records.js";
+import { simS3ObjectExists } from "./s3-notification-event-object.js";
+const defaultBucketName = "uploads";
+const defaultKey = "orders/YL-1.json";
+/**
+ * Makes the records of an S3 event notification, one Object event each.
+ *
+ * A test that cares about which Object changed says only that:
+ *
+ * ```typescript
+ * s3NotificationEventRecordFactory.make({
+ *   s3: { object: { key: "orders/YL-9.json" } },
+ * });
+ * ```
+ *
+ * What a real record says in more than one place is computed from the rest, so
+ * a record is one S3 could have delivered:
+ *
+ * - the Bucket ARN is the ARN of the Bucket named
+ * - a removal carries no `size` and no `eTag`, because the Object it reports
+ *   no longer exists, while a creation carries both
+ *
+ * The key is carried as a record carries it, form-URL-encoded, so a key with a
+ * space in it goes in as `my+file.txt`. `principalId` is an ARN rather than
+ * the `AIDA...` form real S3 reports, which is what simulated S3 delivers and
+ * what a test would assert on.
+ */
+export const s3NotificationEventRecordFactory = new DynamicFactory((overrides = {}) => {
+    const notification = overrides.s3 ?? {};
+    const bucketName = notification.bucket?.name ?? defaultBucketName;
+    const eventName = overrides.eventName ?? "ObjectCreated:Put";
+    return {
+        eventVersion: SIM_S3_EVENT_VERSION,
+        eventSource: "aws:s3",
+        awsRegion: DEFAULT_SIM_AWS_REGION_NAME,
+        eventTime: new Date().toISOString(),
+        eventName,
+        userIdentity: { principalId: "anonymous" },
+        requestParameters: { sourceIPAddress: simS3EventSourceIpAddress },
+        responseElements: {
+            "x-amz-request-id": simS3EventRequestId(),
+            "x-amz-id-2": simS3EventRequestId(),
+        },
+        s3: {
+            s3SchemaVersion: SIM_S3_EVENT_SCHEMA_VERSION,
+            configurationId: "yulin-notification",
+            bucket: {
+                name: bucketName,
+                ownerIdentity: { principalId: "anonymous" },
+                arn: `arn:aws:s3:::${bucketName}`,
+            },
+            object: eventObject(eventName),
+        },
+    };
+});
+/**
+ * Makes the event notification a Bucket delivers to a function.
+ *
+ * The default is the single record one Object event produces, which is all
+ * real S3 ever delivers to a function at once. A test wanting more than one
+ * says what each is about, and each is completed by
+ * `s3NotificationEventRecordFactory`:
+ *
+ * ```typescript
+ * s3NotificationEventFactory.make({
+ *   Records: [
+ *     { s3: { object: { key: "orders/YL-1.json" } } },
+ *     { eventName: "ObjectRemoved:Delete" },
+ *   ],
+ * });
+ * ```
+ */
+export const s3NotificationEventFactory = new SimRecordsEventFactory(s3NotificationEventRecordFactory);
+/**
+ * The Object a record reports, described as it can be for the event reported.
+ */
+function eventObject(eventName) {
+    // Sixteen upper-case hexadecimal digits, the width simulated S3 hands out,
+    // so a test comparing two sequencers as text orders them.
+    const sequencer = faker.string.hexadecimal({
+        length: 16,
+        casing: "upper",
+        prefix: "",
+    });
+    return {
+        key: defaultKey,
+        ...(simS3ObjectExists(eventName) && {
+            size: 1024,
+            eTag: faker.string.hexadecimal({
+                length: 32,
+                casing: "lower",
+                prefix: "",
+            }),
+        }),
+        sequencer,
+    };
+}
+//# sourceMappingURL=s3-notification-event.factory.js.map

package/dist/service/s3/factory/s3-notification-event.factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3-notification-event.factory.js","sourceRoot":"","sources":["../../../../src/service/s3/factory/s3-notification-event.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AACxC,OAAO,EAAE,cAAc,EAAoB,MAAM,sBAAsB,CAAC;AAExE,OAAO,EAAE,sBAAsB,EAAE,MAAM,oDAAoD,CAAC;AAC5F,OAAO,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAC1E,OAAO,EACL,2BAA2B,EAC3B,oBAAoB,EACpB,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,+CAA+C,CAAC;AAMvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AAEtE,MAAM,iBAAiB,GAAG,SAAS,CAAC;AACpC,MAAM,UAAU,GAAG,kBAAkB,CAAC;AAEtC;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAC3C,IAAI,cAAc,CAAmB,CAAC,SAAS,GAAG,EAAE,EAAE,EAAE;IACtD,MAAM,YAAY,GAAG,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC;IACxC,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,EAAE,IAAI,IAAI,iBAAiB,CAAC;IAClE,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,IAAI,mBAAmB,CAAC;IAE7D,OAAO;QACL,YAAY,EAAE,oBAAoB;QAClC,WAAW,EAAE,QAAQ;QACrB,SAAS,EAAE,2BAA2B;QACtC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,SAAS;QACT,YAAY,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE;QAC1C,iBAAiB,EAAE,EAAE,eAAe,EAAE,yBAAyB,EAAE;QACjE,gBAAgB,EAAE;YAChB,kBAAkB,EAAE,mBAAmB,EAAE;YACzC,YAAY,EAAE,mBAAmB,EAAE;SACpC;QACD,EAAE,EAAE;YACF,eAAe,EAAE,2BAA2B;YAC5C,eAAe,EAAE,oBAAoB;YACrC,MAAM,EAAE;gBACN,IAAI,EAAE,UAAU;gBAChB,aAAa,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE;gBAC3C,GAAG,EAAE,gBAAgB,UAAU,EAAE;aAClC;YACD,MAAM,EAAE,WAAW,CAAC,SAAS,CAAC;SAC/B;KACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEL;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,0BAA0B,GACrC,IAAI,sBAAsB,CAAC,gCAAgC,CAAC,CAAC;AAE/D;;GAEG;AACH,SAAS,WAAW,CAAC,SAAiB;IACpC,2EAA2E;IAC3E,0DAA0D;IAC1D,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC;QACzC,MAAM,EAAE,EAAE;QACV,MAAM,EAAE,OAAO;QACf,MAAM,EAAE,EAAE;KACX,CAAC,CAAC;IAEH,OAAO;QACL,GAAG,EAAE,UAAU;QACf,GAAG,CAAC,iBAAiB,CAAC,SAAS,CAAC,IAAI;YAClC,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC;gBAC7B,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,EAAE;aACX,CAAC;SACH,CAAC;QACF,SAAS;KACV,CAAC;AACJ,CAAC"}

package/dist/service/s3/index.d.ts

@@ -3,4 +3,6 @@ export type { SimS3MountFilesystemOptions, SimS3MountReloadTarget, } from "./mou
 export type { SimS3KeyPrefixMetadata } from "./object/s3-key-prefix-metadata.js";
 export type { SimS3SystemMetadataField, SimS3SystemMetadataValues, } from "./object/s3-system-metadata.js";
 export type { SimS3NotificationDeliveryFailure } from "./notification/sim-s3-notification-failures.js";
+export type { SimS3Event, SimS3EventBucket, SimS3EventNotification, SimS3EventObject, SimS3EventRecord, SimS3EventRequestParameters, SimS3EventResponseElements, SimS3EventUserIdentity, } from "./notification/event/sim-s3-event.type.js";
+export { s3NotificationEventFactory, s3NotificationEventRecordFactory, } from "./factory/s3-notification-event.factory.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/service/s3/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/service/s3/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,YAAY,EACV,2BAA2B,EAC3B,sBAAsB,GACvB,MAAM,8BAA8B,CAAC;AACtC,YAAY,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AACjF,YAAY,EACV,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,gCAAgC,CAAC;AACxC,YAAY,EAAE,gCAAgC,EAAE,MAAM,gDAAgD,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/service/s3/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,YAAY,EACV,2BAA2B,EAC3B,sBAAsB,GACvB,MAAM,8BAA8B,CAAC;AACtC,YAAY,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AACjF,YAAY,EACV,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,gCAAgC,CAAC;AACxC,YAAY,EAAE,gCAAgC,EAAE,MAAM,gDAAgD,CAAC;AACvG,YAAY,EACV,UAAU,EACV,gBAAgB,EAChB,sBAAsB,EACtB,gBAAgB,EAChB,gBAAgB,EAChB,2BAA2B,EAC3B,0BAA0B,EAC1B,sBAAsB,GACvB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EACL,0BAA0B,EAC1B,gCAAgC,GACjC,MAAM,4CAA4C,CAAC"}