@kensio/yulin 1.16.0 → 1.16.2

package/dist/service/lambda/function/sim-lambda-function.js

@@ -6,7 +6,7 @@ import { SimLambdaFunctionLogging } from "./logging/sim-lambda-function-logging.
 import { SimLambdaFunctionPolicy } from "./policy/sim-lambda-function-policy.js";
 import { SimLambdaHandlerRunner } from "./invoke/sim-lambda-handler-runner.js";
 import { SimLambdaInvokeContextBuilder } from "./invoke/sim-lambda-invoke-context-builder.js";
-import { simLambdaProcessClock } from "./invoke/sim-lambda-process-clock.js";
+import { runSimLambdaInHostScope } from "./invoke/sim-lambda-host-scope.js";
 import { SimRealClock } from "../../../util/clock/sim-clock.js";
 import { defaultLambdaHandler, } from "./sim-lambda-handler.type.js";
 export const DEFAULT_SIM_LAMBDA_TIMEOUT_SECONDS = 3;
@@ -50,8 +50,9 @@ export class SimLambdaFunction {
     runner = new SimLambdaHandlerRunner();
     clock;
     logging;
+    outboundHttp;
     constructor(properties) {
-        const { name, roleArn, accountRegionScope = simAwsAccountRegionScopeFactory.make(), handlerFunction = defaultLambdaHandler, code, state = "Pending", handlerName, runtimeName, description, timeoutSeconds = DEFAULT_SIM_LAMBDA_TIMEOUT_SECONDS, memorySizeMb = DEFAULT_SIM_LAMBDA_MEMORY_SIZE_MB, environment, runAsOwner = this, clock = new SimRealClock(), logs, } = properties;
+        const { name, roleArn, accountRegionScope = simAwsAccountRegionScopeFactory.make(), handlerFunction = defaultLambdaHandler, code, state = "Pending", handlerName, runtimeName, description, timeoutSeconds = DEFAULT_SIM_LAMBDA_TIMEOUT_SECONDS, memorySizeMb = DEFAULT_SIM_LAMBDA_MEMORY_SIZE_MB, environment, runAsOwner = this, clock = new SimRealClock(), logs, outboundHttp, } = properties;
         this.clock = clock;
         this.name = name;
         this.roleArn = roleArn;
@@ -71,6 +72,7 @@ export class SimLambdaFunction {
                     memorySizeMb,
                 });
         this.runAsOwner = runAsOwner;
+        this.outboundHttp = outboundHttp;
         this.logging = new SimLambdaFunctionLogging({
             functionName: name,
             logs,
@@ -143,20 +145,17 @@ export class SimLambdaFunction {
             logStreamName: this.logging.logStreamName(),
         });
         this.logging.recordFrom(this.code);
-        return await simAwsRunAsContext.run(this.runAsOwner, { kind: "arn", arn: this.roleArn }, async () => await this.environment.runWith(async () => await this.runWithSimulatedTime(async () => await this.logging.around(async () => await this.runner.run(this.code.handlerFunction(), event, contextBuilder)))));
+        return await simAwsRunAsContext.run(this.runAsOwner, { kind: "arn", arn: this.roleArn }, async () => await this.environment.runWith(async () => await this.runInHostScope(async () => await this.logging.around(async () => await this.runner.run(this.code.handlerFunction(), event, contextBuilder)))));
     }
     /**
-     * Run an invocation with this simulation's time as the current time.
-     *
-     * Only code running in the host scope needs this. Zip code reads the Date
-     * its own vm sandbox was given, so a function backed by one leaves the
-     * global Date alone entirely.
+     * Run an invocation with the process globals host-scope code reads bridged
+     * to this simulation: the current time, and the HTTP clients it reaches for.
      */
-    async runWithSimulatedTime(run) {
+    async runInHostScope(run) {
         if (!this.code.runsInHostScope) {
             return await run();
         }
-        return await simLambdaProcessClock.run(this.clock, run);
+        return await runSimLambdaInHostScope({ clock: this.clock, outboundHttp: this.outboundHttp }, run);
     }
 }
 //# sourceMappingURL=sim-lambda-function.js.map

package/dist/service/lambda/function/sim-lambda-function.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda-function.js","sourceRoot":"","sources":["../../../../src/service/lambda/function/sim-lambda-function.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,4CAA4C,CAAC;AAChF,OAAO,EAAE,+BAA+B,EAAE,MAAM,mDAAmD,CAAC;AAEpG,OAAO,EAEL,6BAA6B,GAC9B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AAC/E,OAAO,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AAEpF,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACjF,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,EAAE,6BAA6B,EAAE,MAAM,+CAA+C,CAAC;AAC9F,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAiB,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EACL,oBAAoB,GAErB,MAAM,8BAA8B,CAAC;AAItC,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC;AACpD,MAAM,CAAC,MAAM,iCAAiC,GAAG,GAAG,CAAC;AAmBrD;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAA+B,EAC/B,IAAY;IAEZ,OAAO,kBAAkB,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,SAAS,aAAa,IAAI,EAAE,CAAC;AAClF,CAAC;AAgDD;;;;;;;GAOG;AACH,MAAM,OAAO,iBAAiB;IACZ,IAAI,CAAwB;IAC5B,OAAO,CAAS;IAChB,kBAAkB,CAA2B;IAC7C,WAAW,CAAqB;IAChC,WAAW,CAAqB;IAChC,WAAW,CAAqB;IAChC,cAAc,CAAS;IACvB,YAAY,CAAS;IACrB,WAAW,CAAuB;IAClD;;;;;;;OAOG;IACa,cAAc,GAAG,IAAI,uBAAuB,EAAE,CAAC;IAE/D,MAAM,CAAyB;IACd,IAAI,CAA0B;IAC9B,UAAU,CAAmB;IAC7B,MAAM,GAAG,IAAI,sBAAsB,EAAE,CAAC;IACtC,KAAK,CAAW;IAChB,OAAO,CAA2B;IAEnD,YAAY,UAAuC;QACjD,MAAM,EACJ,IAAI,EACJ,OAAO,EACP,kBAAkB,GAAG,+BAA+B,CAAC,IAAI,EAAE,EAC3D,eAAe,GAAG,oBAAoB,EACtC,IAAI,EACJ,KAAK,GAAG,SAAS,EACjB,WAAW,EACX,WAAW,EACX,WAAW,EACX,cAAc,GAAG,kCAAkC,EACnD,YAAY,GAAG,iCAAiC,EAChD,WAAW,EACX,UAAU,GAAG,IAAI,EACjB,KAAK,GAAG,IAAI,YAAY,EAAE,EAC1B,IAAI,GACL,GAAG,UAAU,CAAC;QACf,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,IAAI,GAAG,IAA6B,CAAC;QAC1C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;QAC7C,IAAI,CAAC,IAAI,GAAG,IAAI,IAAI,IAAI,6BAA6B,CAAC,eAAe,CAAC,CAAC;QACvE,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,WAAW;YACd,WAAW;gBACX,IAAI,oBAAoB,CAAC;oBACvB,YAAY,EAAE,IAAI;oBAClB,UAAU,EAAE,kBAAkB,CAAC,UAAU;oBACzC,YAAY;iBACb,CAAC,CAAC;QACL,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,OAAO,GAAG,IAAI,wBAAwB,CAAC;YAC1C,YAAY,EAAE,IAAI;YAClB,IAAI;YACJ,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,IAAI,GAAG;QACL,OAAO,oBAAoB,CAAC,IAAI,CAAC,kBAAkB,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC;QACvB,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,aAAa;QACX,OAAO;YACL,YAAY,EAAE,IAAI,CAAC,IAAI;YACvB,WAAW,EAAE,IAAI,CAAC,GAAG;YACrB,IAAI,EAAE,IAAI,CAAC,OAAO;YAClB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,OAAO,EAAE,SAAS;YAClB,OAAO,EAAE,IAAI,CAAC,cAAc;YAC5B,UAAU,EAAE,IAAI,CAAC,YAAY;YAC7B,OAAO,EAAE,IAAI,CAAC,WAAW;YACzB,OAAO,EAAE,IAAI,CAAC,WAAW;YACzB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE;SAC9C,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,MAAM,CAAC,KAAc;QACzB,MAAM,cAAc,GAAG,IAAI,6BAA6B,CAAC;YACvD,YAAY,EAAE,IAAI,CAAC,IAAI;YACvB,kBAAkB,EAAE,IAAI,CAAC,GAAG;YAC5B,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY;YACvC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE;SAC5C,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEnC,OAAO,MAAM,kBAAkB,CAAC,GAAG,CACjC,IAAI,CAAC,UAAU,EACf,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,EAClC,KAAK,IAAI,EAAE,CACT,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAC5B,KAAK,IAAI,EAAE,CACT,MAAM,IAAI,CAAC,oBAAoB,CAC7B,KAAK,IAAI,EAAE,CACT,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CACvB,KAAK,IAAI,EAAE,CACT,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CACnB,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAC3B,KAAK,EACL,cAAc,CACf,CACJ,CACJ,CACJ,CACJ,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,oBAAoB,CAAI,GAAqB;QACzD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAC/B,OAAO,MAAM,GAAG,EAAE,CAAC;QACrB,CAAC;QAED,OAAO,MAAM,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC1D,CAAC;CACF"}
+{"version":3,"file":"sim-lambda-function.js","sourceRoot":"","sources":["../../../../src/service/lambda/function/sim-lambda-function.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,4CAA4C,CAAC;AAChF,OAAO,EAAE,+BAA+B,EAAE,MAAM,mDAAmD,CAAC;AAEpG,OAAO,EAEL,6BAA6B,GAC9B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AAC/E,OAAO,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AAEpF,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACjF,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,EAAE,6BAA6B,EAAE,MAAM,+CAA+C,CAAC;AAC9F,OAAO,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAE5E,OAAO,EAAiB,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EACL,oBAAoB,GAErB,MAAM,8BAA8B,CAAC;AAItC,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC;AACpD,MAAM,CAAC,MAAM,iCAAiC,GAAG,GAAG,CAAC;AAmBrD;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAA+B,EAC/B,IAAY;IAEZ,OAAO,kBAAkB,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,SAAS,aAAa,IAAI,EAAE,CAAC;AAClF,CAAC;AAuDD;;;;;;;GAOG;AACH,MAAM,OAAO,iBAAiB;IACZ,IAAI,CAAwB;IAC5B,OAAO,CAAS;IAChB,kBAAkB,CAA2B;IAC7C,WAAW,CAAqB;IAChC,WAAW,CAAqB;IAChC,WAAW,CAAqB;IAChC,cAAc,CAAS;IACvB,YAAY,CAAS;IACrB,WAAW,CAAuB;IAClD;;;;;;;OAOG;IACa,cAAc,GAAG,IAAI,uBAAuB,EAAE,CAAC;IAE/D,MAAM,CAAyB;IACd,IAAI,CAA0B;IAC9B,UAAU,CAAmB;IAC7B,MAAM,GAAG,IAAI,sBAAsB,EAAE,CAAC;IACtC,KAAK,CAAW;IAChB,OAAO,CAA2B;IAClC,YAAY,CAAoC;IAEjE,YAAY,UAAuC;QACjD,MAAM,EACJ,IAAI,EACJ,OAAO,EACP,kBAAkB,GAAG,+BAA+B,CAAC,IAAI,EAAE,EAC3D,eAAe,GAAG,oBAAoB,EACtC,IAAI,EACJ,KAAK,GAAG,SAAS,EACjB,WAAW,EACX,WAAW,EACX,WAAW,EACX,cAAc,GAAG,kCAAkC,EACnD,YAAY,GAAG,iCAAiC,EAChD,WAAW,EACX,UAAU,GAAG,IAAI,EACjB,KAAK,GAAG,IAAI,YAAY,EAAE,EAC1B,IAAI,EACJ,YAAY,GACb,GAAG,UAAU,CAAC;QACf,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,IAAI,GAAG,IAA6B,CAAC;QAC1C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;QAC7C,IAAI,CAAC,IAAI,GAAG,IAAI,IAAI,IAAI,6BAA6B,CAAC,eAAe,CAAC,CAAC;QACvE,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,WAAW;YACd,WAAW;gBACX,IAAI,oBAAoB,CAAC;oBACvB,YAAY,EAAE,IAAI;oBAClB,UAAU,EAAE,kBAAkB,CAAC,UAAU;oBACzC,YAAY;iBACb,CAAC,CAAC;QACL,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,OAAO,GAAG,IAAI,wBAAwB,CAAC;YAC1C,YAAY,EAAE,IAAI;YAClB,IAAI;YACJ,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,IAAI,GAAG;QACL,OAAO,oBAAoB,CAAC,IAAI,CAAC,kBAAkB,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC;QACvB,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,aAAa;QACX,OAAO;YACL,YAAY,EAAE,IAAI,CAAC,IAAI;YACvB,WAAW,EAAE,IAAI,CAAC,GAAG;YACrB,IAAI,EAAE,IAAI,CAAC,OAAO;YAClB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,OAAO,EAAE,SAAS;YAClB,OAAO,EAAE,IAAI,CAAC,cAAc;YAC5B,UAAU,EAAE,IAAI,CAAC,YAAY;YAC7B,OAAO,EAAE,IAAI,CAAC,WAAW;YACzB,OAAO,EAAE,IAAI,CAAC,WAAW;YACzB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE;SAC9C,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,MAAM,CAAC,KAAc;QACzB,MAAM,cAAc,GAAG,IAAI,6BAA6B,CAAC;YACvD,YAAY,EAAE,IAAI,CAAC,IAAI;YACvB,kBAAkB,EAAE,IAAI,CAAC,GAAG;YAC5B,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY;YACvC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE;SAC5C,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEnC,OAAO,MAAM,kBAAkB,CAAC,GAAG,CACjC,IAAI,CAAC,UAAU,EACf,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,EAClC,KAAK,IAAI,EAAE,CACT,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAC5B,KAAK,IAAI,EAAE,CACT,MAAM,IAAI,CAAC,cAAc,CACvB,KAAK,IAAI,EAAE,CACT,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CACvB,KAAK,IAAI,EAAE,CACT,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CACnB,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAC3B,KAAK,EACL,cAAc,CACf,CACJ,CACJ,CACJ,CACJ,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,cAAc,CAAI,GAAqB;QACnD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAC/B,OAAO,MAAM,GAAG,EAAE,CAAC;QACrB,CAAC;QAED,OAAO,MAAM,uBAAuB,CAClC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,EACtD,GAAG,CACJ,CAAC;IACJ,CAAC;CACF"}

package/dist/service/lambda/serve/auth/sim-lambda-url-payload-hash.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Why a Function URL request's payload hash cannot be accepted, or nothing
+ * when it can.
+ *
+ * Lambda checks what a request declares its body hashes to before it looks at
+ * who is asking, and answers a request that fails the check with a signature
+ * mismatch. Two declarations fail it. One is a digest that disagrees with the
+ * bytes that arrived, which would otherwise let a signed request carry any body
+ * at all. The other is `UNSIGNED-PAYLOAD`, which Lambda refuses outright.
+ * CloudFront signs a POST or PUT with it when the viewer sent no hash, and that
+ * is why such a request through an origin access control never reaches the
+ * function.
+ *
+ * A request declaring nothing is not checked. The hash is an input to the
+ * signature rather than something a request has to state, so a caller that
+ * signed the body it sent and left the header off has said nothing to
+ * disagree with.
+ *
+ * The method the request used makes no difference here. A declaration is a
+ * claim about the body, and SigV4 covers it for a GET as much as for a POST,
+ * so a GET carrying a digest of other bytes is refused as well. The method
+ * matters on the CloudFront side, which invents a declaration for a POST or a
+ * PUT alone.
+ *
+ * https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-lambda.html
+ */
+export declare function simLambdaUrlPayloadRefusal(request: Request): Promise<string | undefined>;
+//# sourceMappingURL=sim-lambda-url-payload-hash.d.ts.map

package/dist/service/lambda/serve/auth/sim-lambda-url-payload-hash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-url-payload-hash.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/serve/auth/sim-lambda-url-payload-hash.ts"],"names":[],"mappings":"AAOA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAkC7B"}

package/dist/service/lambda/serve/auth/sim-lambda-url-payload-hash.js

@@ -0,0 +1,56 @@
+import { simIamSigV4ContentSha256Header, SimIamSigV4PayloadDeclaration, simIamSigV4UnsignedPayload, } from "../../../iam/sigv4/canonical/sim-iam-sigv4-payload-hash.js";
+import { SimIamSigV4Error } from "../../../iam/sigv4/error/sim-iam-sigv4.error.js";
+/**
+ * Why a Function URL request's payload hash cannot be accepted, or nothing
+ * when it can.
+ *
+ * Lambda checks what a request declares its body hashes to before it looks at
+ * who is asking, and answers a request that fails the check with a signature
+ * mismatch. Two declarations fail it. One is a digest that disagrees with the
+ * bytes that arrived, which would otherwise let a signed request carry any body
+ * at all. The other is `UNSIGNED-PAYLOAD`, which Lambda refuses outright.
+ * CloudFront signs a POST or PUT with it when the viewer sent no hash, and that
+ * is why such a request through an origin access control never reaches the
+ * function.
+ *
+ * A request declaring nothing is not checked. The hash is an input to the
+ * signature rather than something a request has to state, so a caller that
+ * signed the body it sent and left the header off has said nothing to
+ * disagree with.
+ *
+ * The method the request used makes no difference here. A declaration is a
+ * claim about the body, and SigV4 covers it for a GET as much as for a POST,
+ * so a GET carrying a digest of other bytes is refused as well. The method
+ * matters on the CloudFront side, which invents a declaration for a POST or a
+ * PUT alone.
+ *
+ * https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-lambda.html
+ */
+export async function simLambdaUrlPayloadRefusal(request) {
+    if (!request.headers.has(simIamSigV4ContentSha256Header)) {
+        return undefined;
+    }
+    const declaration = SimIamSigV4PayloadDeclaration.fromHeaders(request.headers);
+    // A clone, so the body is still there for the invocation event to read.
+    const body = new Uint8Array(await request.clone().arrayBuffer());
+    let declared;
+    try {
+        declared = declaration.hashFor(body);
+    }
+    catch (error) {
+        if (error instanceof SimIamSigV4Error) {
+            return error.message;
+        }
+        /* v8 ignore next 2 -- a declaration is refused with nothing else */
+        throw error;
+    }
+    if (declared !== simIamSigV4UnsignedPayload) {
+        return undefined;
+    }
+    return (`Signed ${simIamSigV4ContentSha256Header} declares ` +
+        `${simIamSigV4UnsignedPayload}, which Lambda does not support. A ` +
+        `${request.method} to a Function URL has to declare the SHA-256 of its ` +
+        `body, and one sent through a CloudFront origin access control declares ` +
+        `whatever the viewer request declared.`);
+}
+//# sourceMappingURL=sim-lambda-url-payload-hash.js.map

package/dist/service/lambda/serve/auth/sim-lambda-url-payload-hash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-lambda-url-payload-hash.js","sourceRoot":"","sources":["../../../../../src/service/lambda/serve/auth/sim-lambda-url-payload-hash.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,8BAA8B,EAC9B,6BAA6B,EAC7B,0BAA0B,GAC3B,MAAM,4DAA4D,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iDAAiD,CAAC;AAEnF;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,OAAgB;IAEhB,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,EAAE,CAAC;QACzD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,WAAW,GAAG,6BAA6B,CAAC,WAAW,CAC3D,OAAO,CAAC,OAAO,CAChB,CAAC;IACF,wEAAwE;IACxE,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IACjE,IAAI,QAAgB,CAAC;IAErB,IAAI,CAAC;QACH,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,gBAAgB,EAAE,CAAC;YACtC,OAAO,KAAK,CAAC,OAAO,CAAC;QACvB,CAAC;QAED,oEAAoE;QACpE,MAAM,KAAK,CAAC;IACd,CAAC;IAED,IAAI,QAAQ,KAAK,0BAA0B,EAAE,CAAC;QAC5C,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,CACL,UAAU,8BAA8B,YAAY;QACpD,GAAG,0BAA0B,qCAAqC;QAClE,GAAG,OAAO,CAAC,MAAM,uDAAuD;QACxE,yEAAyE;QACzE,uCAAuC,CACxC,CAAC;AACJ,CAAC"}

package/dist/service/lambda/serve/response/sim-lambda-url-error-response.d.ts

@@ -6,6 +6,14 @@
  * Lambda's, down to the link, because that is what someone will be reading.
  */
 export declare const simLambdaUrlForbiddenMessage: string;
+/**
+ * What real Lambda says when a Function URL request does not verify.
+ *
+ * This is the answer a request that failed authentication gets, as opposed to
+ * one that was authenticated and then not allowed, and the wording is what
+ * anyone searching for the failure will have in front of them.
+ */
+export declare const simLambdaUrlSignatureMismatchMessage: string;
 /**
  * The error responses a Function URL endpoint returns itself, before or
  * instead of the function producing one.
@@ -23,6 +31,14 @@ export declare class SimLambdaUrlErrorResponse {
      * The caller is not allowed to invoke this Function URL.
      */
     forbidden(): Response;
+    /**
+     * The request does not carry a signature over the body it arrived with.
+     *
+     * Real Lambda says only that the signature did not match, which is faithful
+     * and impossible to act on, so what the simulator worked out goes in a hint
+     * header where it changes nothing for a client reading the body.
+     */
+    signatureDoesNotMatch(detail: string): Response;
     /**
      * The function failed to handle the invocation.
      */

package/dist/service/lambda/serve/response/sim-lambda-url-error-response.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda-url-error-response.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/serve/response/sim-lambda-url-error-response.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,eAAO,MAAM,4BAA4B,QAEsB,CAAC;AAEhE;;;;;;;GAOG;AACH,qBAAa,yBAAyB;IACpC;;OAEG;IACH,QAAQ,IAAI,QAAQ,CAEnB;IAED;;OAEG;IACH,SAAS,IAAI,QAAQ,CAEpB;IAED;;OAEG;IACH,mBAAmB,IAAI,QAAQ,CAE9B;IAED,OAAO,CAAC,YAAY;CASrB"}
+{"version":3,"file":"sim-lambda-url-error-response.d.ts","sourceRoot":"","sources":["../../../../../src/service/lambda/serve/response/sim-lambda-url-error-response.ts"],"names":[],"mappings":"AAKA;;;;;;GAMG;AACH,eAAO,MAAM,4BAA4B,QAEsB,CAAC;AAEhE;;;;;;GAMG;AACH,eAAO,MAAM,oCAAoC,QAGP,CAAC;AAE3C;;;;;;;GAOG;AACH,qBAAa,yBAAyB;IACpC;;OAEG;IACH,QAAQ,IAAI,QAAQ,CAEnB;IAED;;OAEG;IACH,SAAS,IAAI,QAAQ,CAEpB;IAED;;;;;;OAMG;IACH,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,CAU9C;IAED;;OAEG;IACH,mBAAmB,IAAI,QAAQ,CAE9B;IAED,OAAO,CAAC,YAAY;CASrB"}

package/dist/service/lambda/serve/response/sim-lambda-url-error-response.js

@@ -1,3 +1,4 @@
+import { simAwsErrorDetailHeaderName, simAwsErrorHeaderName, } from "../../../../serve/http/response/sim-aws-response-hints.js";
 /**
  * What real Lambda says when it refuses a Function URL request.
  *
@@ -7,6 +8,16 @@
  */
 export const simLambdaUrlForbiddenMessage = "Forbidden. For troubleshooting Function URL authorization issues, see: " +
     "https://docs.aws.amazon.com/lambda/latest/dg/urls-auth.html";
+/**
+ * What real Lambda says when a Function URL request does not verify.
+ *
+ * This is the answer a request that failed authentication gets, as opposed to
+ * one that was authenticated and then not allowed, and the wording is what
+ * anyone searching for the failure will have in front of them.
+ */
+export const simLambdaUrlSignatureMismatchMessage = "The request signature we calculated does not match the signature you " +
+    "provided. Check your AWS Secret Access Key and signing method. Consult " +
+    "the service documentation for details.";
 /**
  * The error responses a Function URL endpoint returns itself, before or
  * instead of the function producing one.
@@ -28,6 +39,19 @@ export class SimLambdaUrlErrorResponse {
     forbidden() {
         return this.jsonResponse(403, simLambdaUrlForbiddenMessage);
     }
+    /**
+     * The request does not carry a signature over the body it arrived with.
+     *
+     * Real Lambda says only that the signature did not match, which is faithful
+     * and impossible to act on, so what the simulator worked out goes in a hint
+     * header where it changes nothing for a client reading the body.
+     */
+    signatureDoesNotMatch(detail) {
+        const response = this.jsonResponse(403, simLambdaUrlSignatureMismatchMessage);
+        response.headers.set(simAwsErrorHeaderName, "SignatureDoesNotMatch");
+        response.headers.set(simAwsErrorDetailHeaderName, detail);
+        return response;
+    }
     /**
      * The function failed to handle the invocation.
      */

package/dist/service/lambda/serve/response/sim-lambda-url-error-response.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda-url-error-response.js","sourceRoot":"","sources":["../../../../../src/service/lambda/serve/response/sim-lambda-url-error-response.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,4BAA4B,GACvC,yEAAyE;IACzE,6DAA6D,CAAC;AAEhE;;;;;;;GAOG;AACH,MAAM,OAAO,yBAAyB;IACpC;;OAEG;IACH,QAAQ;QACN,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,4BAA4B,CAAC,CAAC;IAC9D,CAAC;IAED;;OAEG;IACH,mBAAmB;QACjB,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;IACzD,CAAC;IAEO,YAAY,CAAC,MAAc,EAAE,OAAe;QAClD,OAAO,QAAQ,CAAC,IAAI,CAClB,EAAE,OAAO,EAAE,OAAO,EAAE,EACpB;YACE,MAAM;YACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CACF,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-lambda-url-error-response.js","sourceRoot":"","sources":["../../../../../src/service/lambda/serve/response/sim-lambda-url-error-response.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,2BAA2B,EAC3B,qBAAqB,GACtB,MAAM,2DAA2D,CAAC;AAEnE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,4BAA4B,GACvC,yEAAyE;IACzE,6DAA6D,CAAC;AAEhE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAC/C,uEAAuE;IACvE,yEAAyE;IACzE,wCAAwC,CAAC;AAE3C;;;;;;;GAOG;AACH,MAAM,OAAO,yBAAyB;IACpC;;OAEG;IACH,QAAQ;QACN,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,4BAA4B,CAAC,CAAC;IAC9D,CAAC;IAED;;;;;;OAMG;IACH,qBAAqB,CAAC,MAAc;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAChC,GAAG,EACH,oCAAoC,CACrC,CAAC;QAEF,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,uBAAuB,CAAC,CAAC;QACrE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,MAAM,CAAC,CAAC;QAE1D,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,mBAAmB;QACjB,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;IACzD,CAAC;IAEO,YAAY,CAAC,MAAc,EAAE,OAAe;QAClD,OAAO,QAAQ,CAAC,IAAI,CAClB,EAAE,OAAO,EAAE,OAAO,EAAE,EACpB;YACE,MAAM;YACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CACF,CAAC;IACJ,CAAC;CACF"}

package/dist/service/lambda/serve/sim-lambda-controller.d.ts

@@ -38,6 +38,12 @@ export declare class SimLambdaServiceController implements SimAwsServiceControll
      * What the request is being made on behalf of travels with it, so a
      * CloudFront Distribution reaching this URL through an origin access control
      * is judged against the Distribution the permission names.
+     *
+     * What the request declares its body hashes to is settled first, as real
+     * Lambda authenticates a request before it authorizes one. A POST or PUT
+     * arriving through an origin access control declares an unsigned payload
+     * unless the viewer sent a hash of its own, and Lambda takes no unsigned
+     * payload, so it is refused here rather than reaching the function.
      */
     private invokeAuthenticated;
     private invoke;

package/dist/service/lambda/serve/sim-lambda-controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda-controller.d.ts","sourceRoot":"","sources":["../../../../src/service/lambda/serve/sim-lambda-controller.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,uBAAuB,EACvB,oBAAoB,EACrB,MAAM,qDAAqD,CAAC;AAG7D,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAG9C,OAAO,EAEL,kBAAkB,EACnB,MAAM,4BAA4B,CAAC;AAIpC,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,kBAAkB,CAAC;CACtC;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,0BAA2B,YAAW,uBAAuB;IACxE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;IAC5C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA0B;IACvD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAoC;IACpE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAmC;IAEjE,YAAY,UAAU,GAAE,oCAAyC,EAQhE;IAED;;OAEG;IACG,aAAa,CAAC,cAAc,EAAE,oBAAoB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAc3E;IAED;;;;;;;;;;;OAWG;YACW,mBAAmB;YAmBnB,MAAM;CAqBrB"}
+{"version":3,"file":"sim-lambda-controller.d.ts","sourceRoot":"","sources":["../../../../src/service/lambda/serve/sim-lambda-controller.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,uBAAuB,EACvB,oBAAoB,EACrB,MAAM,qDAAqD,CAAC;AAG7D,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAG9C,OAAO,EAEL,kBAAkB,EACnB,MAAM,4BAA4B,CAAC;AAKpC,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,kBAAkB,CAAC;CACtC;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,0BAA2B,YAAW,uBAAuB;IACxE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;IAC5C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA0B;IACvD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAoC;IACpE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAmC;IAEjE,YAAY,UAAU,GAAE,oCAAyC,EAQhE;IAED;;OAEG;IACG,aAAa,CAAC,cAAc,EAAE,oBAAoB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAc3E;IAED;;;;;;;;;;;;;;;;;OAiBG;YACW,mBAAmB;YA2BnB,MAAM;CAqBrB"}

package/dist/service/lambda/serve/sim-lambda-controller.js

@@ -5,6 +5,7 @@ import { simLambdaUrlEndpoint } from "./event/sim-lambda-url-endpoint.js";
 import { SimLambdaUrlErrorResponse } from "./response/sim-lambda-url-error-response.js";
 import { SimLambdaUrlRouter, } from "./sim-lambda-url-router.js";
 import { SimLambdaUrlAuthorizer } from "./auth/sim-lambda-url-authorizer.js";
+import { simLambdaUrlPayloadRefusal } from "./auth/sim-lambda-url-payload-hash.js";
 /**
  * Localhost HTTP controller for simulated Lambda Function URLs.
  *
@@ -57,9 +58,19 @@ export class SimLambdaServiceController {
      * What the request is being made on behalf of travels with it, so a
      * CloudFront Distribution reaching this URL through an origin access control
      * is judged against the Distribution the permission names.
+     *
+     * What the request declares its body hashes to is settled first, as real
+     * Lambda authenticates a request before it authorizes one. A POST or PUT
+     * arriving through an origin access control declares an unsigned payload
+     * unless the viewer sent a hash of its own, and Lambda takes no unsigned
+     * payload, so it is refused here rather than reaching the function.
      */
     async invokeAuthenticated(route, serviceRequest) {
         const { caller } = serviceRequest;
+        const payloadRefusal = await simLambdaUrlPayloadRefusal(serviceRequest.request);
+        if (payloadRefusal !== undefined) {
+            return this.errorResponse.signatureDoesNotMatch(payloadRefusal);
+        }
         const decision = new SimLambdaUrlAuthorizer({ iam: route.iam }).authorize({
             simFunction: route.simFunction,
             functionUrl: route.functionUrl,

package/dist/service/lambda/serve/sim-lambda-controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda-controller.js","sourceRoot":"","sources":["../../../../src/service/lambda/serve/sim-lambda-controller.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,uBAAuB,EAAE,MAAM,yDAAyD,CAAC;AAClG,OAAO,EAAE,0BAA0B,EAAE,MAAM,4DAA4D,CAAC;AACxG,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,yBAAyB,EAAE,MAAM,6CAA6C,CAAC;AACxF,OAAO,EAEL,kBAAkB,GACnB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAQ7E;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,0BAA0B;IACpB,MAAM,CAAqB;IAC3B,YAAY,CAA0B;IACtC,eAAe,GAAG,IAAI,0BAA0B,EAAE,CAAC;IACnD,aAAa,GAAG,IAAI,yBAAyB,EAAE,CAAC;IAEjE,YAAY,UAAU,GAAyC,EAAE;QAC/D,MAAM,EAAE,MAAM,GAAG,IAAI,MAAM,EAAE,EAAE,GAAG,UAAU,CAAC;QAC7C,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,IAAI,IAAI,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QACtE,0EAA0E;QAC1E,iEAAiE;QACjE,IAAI,CAAC,YAAY,GAAG,IAAI,uBAAuB,CAAC;YAC9C,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;SAC1B,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,cAAoC;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAEvD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC;QACvC,CAAC;QAED,IAAI,KAAK,CAAC,WAAW,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;YAC1C,uEAAuE;YACvE,+DAA+D;YAC/D,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC;QAC1D,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IAC/D,CAAC;IAED;;;;;;;;;;;OAWG;IACK,KAAK,CAAC,mBAAmB,CAC/B,KAAgC,EAChC,cAAoC;QAEpC,MAAM,EAAE,MAAM,EAAE,GAAG,cAAc,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAI,sBAAsB,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,SAAS,CAAC;YACxE,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;YACzB,MAAM,EAAE,cAAc,CAAC,MAAM;SAC9B,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC;QACxC,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAClE,CAAC;IAEO,KAAK,CAAC,MAAM,CAClB,KAAgC,EAChC,OAAgB,EAChB,mBAAyC;QAEzC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CACzC,OAAO,EACP,oBAAoB,CAAC,KAAK,CAAC,WAAW,CAAC,EACvC,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAChC,CAAC;YAEF,OAAO,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3E,CAAC;QAAC,MAAM,CAAC;YACP,iEAAiE;YACjE,sEAAsE;YACtE,wEAAwE;YACxE,sBAAsB;YACtB,OAAO,IAAI,CAAC,aAAa,CAAC,mBAAmB,EAAE,CAAC;QAClD,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"sim-lambda-controller.js","sourceRoot":"","sources":["../../../../src/service/lambda/serve/sim-lambda-controller.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,uBAAuB,EAAE,MAAM,yDAAyD,CAAC;AAClG,OAAO,EAAE,0BAA0B,EAAE,MAAM,4DAA4D,CAAC;AACxG,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,yBAAyB,EAAE,MAAM,6CAA6C,CAAC;AACxF,OAAO,EAEL,kBAAkB,GACnB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAAE,0BAA0B,EAAE,MAAM,uCAAuC,CAAC;AAQnF;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,0BAA0B;IACpB,MAAM,CAAqB;IAC3B,YAAY,CAA0B;IACtC,eAAe,GAAG,IAAI,0BAA0B,EAAE,CAAC;IACnD,aAAa,GAAG,IAAI,yBAAyB,EAAE,CAAC;IAEjE,YAAY,UAAU,GAAyC,EAAE;QAC/D,MAAM,EAAE,MAAM,GAAG,IAAI,MAAM,EAAE,EAAE,GAAG,UAAU,CAAC;QAC7C,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,IAAI,IAAI,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QACtE,0EAA0E;QAC1E,iEAAiE;QACjE,IAAI,CAAC,YAAY,GAAG,IAAI,uBAAuB,CAAC;YAC9C,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;SAC1B,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,cAAoC;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAEvD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC;QACvC,CAAC;QAED,IAAI,KAAK,CAAC,WAAW,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;YAC1C,uEAAuE;YACvE,+DAA+D;YAC/D,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC;QAC1D,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IAC/D,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACK,KAAK,CAAC,mBAAmB,CAC/B,KAAgC,EAChC,cAAoC;QAEpC,MAAM,EAAE,MAAM,EAAE,GAAG,cAAc,CAAC;QAClC,MAAM,cAAc,GAAG,MAAM,0BAA0B,CACrD,cAAc,CAAC,OAAO,CACvB,CAAC;QAEF,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,aAAa,CAAC,qBAAqB,CAAC,cAAc,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,sBAAsB,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,SAAS,CAAC;YACxE,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;YACzB,MAAM,EAAE,cAAc,CAAC,MAAM;SAC9B,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC;QACxC,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAClE,CAAC;IAEO,KAAK,CAAC,MAAM,CAClB,KAAgC,EAChC,OAAgB,EAChB,mBAAyC;QAEzC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CACzC,OAAO,EACP,oBAAoB,CAAC,KAAK,CAAC,WAAW,CAAC,EACvC,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAChC,CAAC;YAEF,OAAO,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3E,CAAC;QAAC,MAAM,CAAC;YACP,iEAAiE;YACjE,sEAAsE;YACtE,wEAAwE;YACxE,sBAAsB;YACtB,OAAO,IAAI,CAAC,aAAa,CAAC,mBAAmB,EAAE,CAAC;QAClD,CAAC;IACH,CAAC;CACF"}

package/dist/service/lambda/sim-lambda-commands.d.ts

@@ -12,6 +12,7 @@ import { type SimLambdaContainerImages } from "./function/code/image/sim-lambda-
 import type { SimLambdaCodeStore } from "./function/code/store/sim-lambda-code-store.js";
 import type { SimLambdaVmSdkModuleProvider } from "./function/code/vm/sdk/sim-lambda-vm-sdk-module-provider.js";
 import type { SimLogsServiceWriter } from "../logs/write/sim-logs-service-writer.js";
+import type { SimLambdaOutboundHttp } from "./function/outbound/sim-lambda-outbound-http.js";
 import type { SimLambdaFunctionMap } from "./function/sim-lambda-function.js";
 import { SimLambdaFunctionLookup } from "./function/url/sim-lambda-function-lookup.js";
 import { SimLambdaFunctionUrlStore } from "./function/url/sim-lambda-function-url-store.js";
@@ -28,6 +29,13 @@ export interface SimLambdaProperties {
     readonly containerImages?: SimLambdaContainerImages;
     readonly vmSdkModuleProvider?: SimLambdaVmSdkModuleProvider;
     readonly logs?: SimLogsServiceWriter | undefined;
+    /**
+     * Where the HTTP requests this simulated Lambda's function code makes to
+     * hostnames the simulation serves are answered. A standalone SimLambda has
+     * no simulated environment to answer them, so its functions reach the
+     * network as any other code would.
+     */
+    readonly outboundHttp?: SimLambdaOutboundHttp;
     readonly urlRegistry?: SimLambdaUrlRegistry;
     readonly eventSourceQueues?: SimSqsPollQueues;
     readonly eventSourceStreams?: SimLambdaEventSourceStreams;

package/dist/service/lambda/sim-lambda-commands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda-commands.d.ts","sourceRoot":"","sources":["../../../src/service/lambda/sim-lambda-commands.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAE3E,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AACvF,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,mCAAmC,EAAE,MAAM,4EAA4E,CAAC;AACjI,OAAO,EAAE,yBAAyB,EAAE,MAAM,oDAAoD,CAAC;AAC/F,OAAO,EAAE,4BAA4B,EAAE,MAAM,4DAA4D,CAAC;AAC1G,OAAO,EAAE,2BAA2B,EAAE,MAAM,wDAAwD,CAAC;AAGrG,OAAO,EACL,KAAK,2BAA2B,EAEjC,MAAM,0DAA0D,CAAC;AAClE,OAAO,EACL,KAAK,wBAAwB,EAE9B,MAAM,sDAAsD,CAAC;AAC9D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AACzF,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,6DAA6D,CAAC;AAChH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,0CAA0C,CAAC;AAErF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,uBAAuB,EAAE,MAAM,8CAA8C,CAAC;AACvF,OAAO,EAAE,yBAAyB,EAAE,MAAM,iDAAiD,CAAC;AAC5F,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAE7E;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,wBAAwB,CAAC;IACvD,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;IAC1C,QAAQ,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAC;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,kBAAkB,CAAC;IACxC,QAAQ,CAAC,eAAe,CAAC,EAAE,wBAAwB,CAAC;IACpD,QAAQ,CAAC,mBAAmB,CAAC,EAAE,4BAA4B,CAAC;IAC5D,QAAQ,CAAC,IAAI,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,WAAW,CAAC,EAAE,oBAAoB,CAAC;IAC5C,QAAQ,CAAC,iBAAiB,CAAC,EAAE,gBAAgB,CAAC;IAC9C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,2BAA2B,CAAC;CAC3D;AAED,UAAU,2BAA4B,SAAQ,mBAAmB;IAC/D,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;IACzC,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;CACvC;AAED;;;;;;;GAOG;AACH,qBAAa,iBAAiB;IAC5B;;;;OAIG;IACH,SAAgB,eAAe,EAAE,wBAAwB,CAAC;IAE1D,SAAgB,gBAAgB,EAAE,yBAAyB,CAAC;IAC5D,SAAgB,cAAc,EAAE,uBAAuB,CAAC;IACxD,SAAgB,SAAS,EAAE,yBAAyB,CAAC;IACrD,SAAgB,YAAY,EAAE,4BAA4B,CAAC;IAC3D,SAAgB,WAAW,EAAE,2BAA2B,CAAC;IACzD,SAAgB,mBAAmB,EAAE,mCAAmC,CAAC;IAEzE,YAAY,UAAU,EAAE,2BAA2B,EAyElD;CACF"}
+{"version":3,"file":"sim-lambda-commands.d.ts","sourceRoot":"","sources":["../../../src/service/lambda/sim-lambda-commands.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAE3E,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AACvF,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,mCAAmC,EAAE,MAAM,4EAA4E,CAAC;AACjI,OAAO,EAAE,yBAAyB,EAAE,MAAM,oDAAoD,CAAC;AAC/F,OAAO,EAAE,4BAA4B,EAAE,MAAM,4DAA4D,CAAC;AAC1G,OAAO,EAAE,2BAA2B,EAAE,MAAM,wDAAwD,CAAC;AAGrG,OAAO,EACL,KAAK,2BAA2B,EAEjC,MAAM,0DAA0D,CAAC;AAClE,OAAO,EACL,KAAK,wBAAwB,EAE9B,MAAM,sDAAsD,CAAC;AAC9D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AACzF,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,6DAA6D,CAAC;AAChH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,0CAA0C,CAAC;AACrF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,iDAAiD,CAAC;AAE7F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,uBAAuB,EAAE,MAAM,8CAA8C,CAAC;AACvF,OAAO,EAAE,yBAAyB,EAAE,MAAM,iDAAiD,CAAC;AAC5F,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAE7E;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,wBAAwB,CAAC;IACvD,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;IAC1C,QAAQ,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAC;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,kBAAkB,CAAC;IACxC,QAAQ,CAAC,eAAe,CAAC,EAAE,wBAAwB,CAAC;IACpD,QAAQ,CAAC,mBAAmB,CAAC,EAAE,4BAA4B,CAAC;IAC5D,QAAQ,CAAC,IAAI,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC;IACjD;;;;;OAKG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,qBAAqB,CAAC;IAC9C,QAAQ,CAAC,WAAW,CAAC,EAAE,oBAAoB,CAAC;IAC5C,QAAQ,CAAC,iBAAiB,CAAC,EAAE,gBAAgB,CAAC;IAC9C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,2BAA2B,CAAC;CAC3D;AAED,UAAU,2BAA4B,SAAQ,mBAAmB;IAC/D,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;IACzC,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;CACvC;AAED;;;;;;;GAOG;AACH,qBAAa,iBAAiB;IAC5B;;;;OAIG;IACH,SAAgB,eAAe,EAAE,wBAAwB,CAAC;IAE1D,SAAgB,gBAAgB,EAAE,yBAAyB,CAAC;IAC5D,SAAgB,cAAc,EAAE,uBAAuB,CAAC;IACxD,SAAgB,SAAS,EAAE,yBAAyB,CAAC;IACrD,SAAgB,YAAY,EAAE,4BAA4B,CAAC;IAC3D,SAAgB,WAAW,EAAE,2BAA2B,CAAC;IACzD,SAAgB,mBAAmB,EAAE,mCAAmC,CAAC;IAEzE,YAAY,UAAU,EAAE,2BAA2B,EA2ElD;CACF"}

package/dist/service/lambda/sim-lambda-commands.js

@@ -35,7 +35,7 @@ export class SimLambdaCommands {
     permissions;
     eventSourceMappings;
     constructor(properties) {
-        const { accountRegionScope = simAwsAccountRegionScopeFactory.make(), iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), codeStore, vmSdkModuleProvider, logs, 
+        const { accountRegionScope = simAwsAccountRegionScopeFactory.make(), iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), codeStore, vmSdkModuleProvider, logs, outboundHttp, 
         // A standalone SimLambda is not reachable over HTTP, so its own registry
         // is enough; a SimAws-created one shares the environment-wide registry
         // the serving layer routes with.
@@ -96,6 +96,7 @@ export class SimLambdaCommands {
             containerImages,
             vmSdkModuleProvider,
             logs,
+            outboundHttp,
         });
     }
 }

package/dist/service/lambda/sim-lambda-commands.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-lambda-commands.js","sourceRoot":"","sources":["../../../src/service/lambda/sim-lambda-commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,eAAe,GAChB,MAAM,qCAAqC,CAAC;AAG7C,OAAO,EAAE,+BAA+B,EAAE,MAAM,gDAAgD,CAAC;AAEjG,OAAO,EACL,kBAAkB,GAEnB,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,mCAAmC,EAAE,MAAM,4EAA4E,CAAC;AACjI,OAAO,EAAE,yBAAyB,EAAE,MAAM,oDAAoD,CAAC;AAC/F,OAAO,EAAE,4BAA4B,EAAE,MAAM,4DAA4D,CAAC;AAC1G,OAAO,EAAE,2BAA2B,EAAE,MAAM,wDAAwD,CAAC;AACrG,OAAO,EAAE,2BAA2B,EAAE,MAAM,mDAAmD,CAAC;AAChG,OAAO,EAAE,4BAA4B,EAAE,MAAM,2DAA2D,CAAC;AACzG,OAAO,EAEL,6BAA6B,GAC9B,MAAM,0DAA0D,CAAC;AAClE,OAAO,EAEL,0BAA0B,GAC3B,MAAM,sDAAsD,CAAC;AAI9D,OAAO,EAAE,6BAA6B,EAAE,MAAM,4DAA4D,CAAC;AAE3G,OAAO,EAAE,uBAAuB,EAAE,MAAM,8CAA8C,CAAC;AACvF,OAAO,EAAE,yBAAyB,EAAE,MAAM,iDAAiD,CAAC;AAC5F,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAwB7E;;;;;;;GAOG;AACH,MAAM,OAAO,iBAAiB;IAC5B;;;;OAIG;IACa,eAAe,CAA2B;IAE1C,gBAAgB,CAA4B;IAC5C,cAAc,CAA0B;IACxC,SAAS,CAA4B;IACrC,YAAY,CAA+B;IAC3C,WAAW,CAA8B;IACzC,mBAAmB,CAAsC;IAEzE,YAAY,UAAuC;QACjD,MAAM,EACJ,kBAAkB,GAAG,+BAA+B,CAAC,IAAI,EAAE,EAC3D,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,EAClC,SAAS,EACT,mBAAmB,EACnB,IAAI;QACJ,yEAAyE;QACzE,uEAAuE;QACvE,iCAAiC;QACjC,WAAW,GAAG,IAAI,oBAAoB,EAAE;QACxC,yEAAyE;QACzE,gEAAgE;QAChE,cAAc;QACd,iBAAiB,GAAG,IAAI,4BAA4B,EAAE,EACtD,kBAAkB,GAAG,IAAI,6BAA6B,EAAE;QACxD,wEAAwE;QACxE,qEAAqE;QACrE,eAAe,GAAG,IAAI,0BAA0B,EAAE,GACnD,GAAG,UAAU,CAAC;QAEf,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;QAEvC,IAAI,CAAC,cAAc,GAAG,IAAI,uBAAuB,CAAC;YAChD,kBAAkB;YAClB,SAAS,EAAE,UAAU,CAAC,SAAS;SAChC,CAAC,CAAC;QACH,IAAI,CAAC,gBAAgB,GAAG,IAAI,yBAAyB,CAAC;YACpD,kBAAkB;YAClB,WAAW;YACX,KAAK,EAAE,UAAU;SAClB,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,GAAG,IAAI,4BAA4B,CAAC;YACnD,YAAY,EAAE,IAAI,CAAC,gBAAgB;YACnC,SAAS,EAAE,IAAI,CAAC,cAAc;YAC9B,GAAG;YACH,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,GAAG,IAAI,2BAA2B,CAAC;YACjD,SAAS,EAAE,IAAI,CAAC,cAAc;YAC9B,GAAG;YACH,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,mBAAmB,GAAG,IAAI,mCAAmC,CAAC;YACjE,kBAAkB;YAClB,OAAO,EAAE,IAAI,2BAA2B,CAAC;gBACvC,SAAS,EAAE,IAAI,CAAC,cAAc;gBAC9B,MAAM,EAAE,iBAAiB;gBACzB,OAAO,EAAE,kBAAkB;gBAC3B,UAAU;aACX,CAAC;YACF,MAAM,EAAE,iBAAiB;YACzB,OAAO,EAAE,kBAAkB;YAC3B,SAAS,EAAE,IAAI,CAAC,cAAc;YAC9B,GAAG;YACH,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,GAAG,IAAI,yBAAyB,CAAC;YAC7C,kBAAkB;YAClB,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,YAAY,EAAE,IAAI,CAAC,gBAAgB;YACnC,GAAG;YACH,UAAU;YACV,UAAU,EAAE,UAAU,CAAC,UAAU;YACjC,yEAAyE;YACzE,mDAAmD;YACnD,oBAAoB,EAAE,IAAI,6BAA6B,EAAE;YACzD,SAAS;YACT,eAAe;YACf,mBAAmB;YACnB,IAAI;SACL,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"sim-lambda-commands.js","sourceRoot":"","sources":["../../../src/service/lambda/sim-lambda-commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,eAAe,GAChB,MAAM,qCAAqC,CAAC;AAG7C,OAAO,EAAE,+BAA+B,EAAE,MAAM,gDAAgD,CAAC;AAEjG,OAAO,EACL,kBAAkB,GAEnB,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,mCAAmC,EAAE,MAAM,4EAA4E,CAAC;AACjI,OAAO,EAAE,yBAAyB,EAAE,MAAM,oDAAoD,CAAC;AAC/F,OAAO,EAAE,4BAA4B,EAAE,MAAM,4DAA4D,CAAC;AAC1G,OAAO,EAAE,2BAA2B,EAAE,MAAM,wDAAwD,CAAC;AACrG,OAAO,EAAE,2BAA2B,EAAE,MAAM,mDAAmD,CAAC;AAChG,OAAO,EAAE,4BAA4B,EAAE,MAAM,2DAA2D,CAAC;AACzG,OAAO,EAEL,6BAA6B,GAC9B,MAAM,0DAA0D,CAAC;AAClE,OAAO,EAEL,0BAA0B,GAC3B,MAAM,sDAAsD,CAAC;AAK9D,OAAO,EAAE,6BAA6B,EAAE,MAAM,4DAA4D,CAAC;AAE3G,OAAO,EAAE,uBAAuB,EAAE,MAAM,8CAA8C,CAAC;AACvF,OAAO,EAAE,yBAAyB,EAAE,MAAM,iDAAiD,CAAC;AAC5F,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AA+B7E;;;;;;;GAOG;AACH,MAAM,OAAO,iBAAiB;IAC5B;;;;OAIG;IACa,eAAe,CAA2B;IAE1C,gBAAgB,CAA4B;IAC5C,cAAc,CAA0B;IACxC,SAAS,CAA4B;IACrC,YAAY,CAA+B;IAC3C,WAAW,CAA8B;IACzC,mBAAmB,CAAsC;IAEzE,YAAY,UAAuC;QACjD,MAAM,EACJ,kBAAkB,GAAG,+BAA+B,CAAC,IAAI,EAAE,EAC3D,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,EAClC,SAAS,EACT,mBAAmB,EACnB,IAAI,EACJ,YAAY;QACZ,yEAAyE;QACzE,uEAAuE;QACvE,iCAAiC;QACjC,WAAW,GAAG,IAAI,oBAAoB,EAAE;QACxC,yEAAyE;QACzE,gEAAgE;QAChE,cAAc;QACd,iBAAiB,GAAG,IAAI,4BAA4B,EAAE,EACtD,kBAAkB,GAAG,IAAI,6BAA6B,EAAE;QACxD,wEAAwE;QACxE,qEAAqE;QACrE,eAAe,GAAG,IAAI,0BAA0B,EAAE,GACnD,GAAG,UAAU,CAAC;QAEf,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;QAEvC,IAAI,CAAC,cAAc,GAAG,IAAI,uBAAuB,CAAC;YAChD,kBAAkB;YAClB,SAAS,EAAE,UAAU,CAAC,SAAS;SAChC,CAAC,CAAC;QACH,IAAI,CAAC,gBAAgB,GAAG,IAAI,yBAAyB,CAAC;YACpD,kBAAkB;YAClB,WAAW;YACX,KAAK,EAAE,UAAU;SAClB,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,GAAG,IAAI,4BAA4B,CAAC;YACnD,YAAY,EAAE,IAAI,CAAC,gBAAgB;YACnC,SAAS,EAAE,IAAI,CAAC,cAAc;YAC9B,GAAG;YACH,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,GAAG,IAAI,2BAA2B,CAAC;YACjD,SAAS,EAAE,IAAI,CAAC,cAAc;YAC9B,GAAG;YACH,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,mBAAmB,GAAG,IAAI,mCAAmC,CAAC;YACjE,kBAAkB;YAClB,OAAO,EAAE,IAAI,2BAA2B,CAAC;gBACvC,SAAS,EAAE,IAAI,CAAC,cAAc;gBAC9B,MAAM,EAAE,iBAAiB;gBACzB,OAAO,EAAE,kBAAkB;gBAC3B,UAAU;aACX,CAAC;YACF,MAAM,EAAE,iBAAiB;YACzB,OAAO,EAAE,kBAAkB;YAC3B,SAAS,EAAE,IAAI,CAAC,cAAc;YAC9B,GAAG;YACH,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,GAAG,IAAI,yBAAyB,CAAC;YAC7C,kBAAkB;YAClB,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,YAAY,EAAE,IAAI,CAAC,gBAAgB;YACnC,GAAG;YACH,UAAU;YACV,UAAU,EAAE,UAAU,CAAC,UAAU;YACjC,yEAAyE;YACzE,mDAAmD;YACnD,oBAAoB,EAAE,IAAI,6BAA6B,EAAE;YACzD,SAAS;YACT,eAAe;YACf,mBAAmB;YACnB,IAAI;YACJ,YAAY;SACb,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/rekognition/face/sim-rekognition-face-detail-builder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-rekognition-face-detail-builder.d.ts","sourceRoot":"","sources":["../../../../src/service/rekognition/face/sim-rekognition-face-detail-builder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,iDAAiD,CAAC;AACtG,OAAO,KAAK,EACV,+BAA+B,EAC/B,4BAA4B,EAC7B,MAAM,sCAAsC,CAAC;AAE9C,KAAK,8BAA8B,GAAG,MAAM,8BAA8B,CAAC;AAM3E;;;;;;;;;;;GAWG;AACH,qBAAa,+BAA+B;IAG9B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAFvC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuC;IAE9D,YAA6B,UAAU,EAAE,4BAA4B,EAAI;IAEzE;;;OAGG;IACH,KAAK,CAAC,OAAO,SAAS,8BAA8B,EAClD,MAAM,EAAE,OAAO,EACf,SAAS,EAAE,+BAA+B,EAC1C,KAAK,EAAE,QAAQ,CAAC,8BAA8B,CAAC,CAAC,OAAO,CAAC,GAAG,SAAS,GACnE,IAAI,CASN;IAED;;OAEG;IACH,KAAK,IAAI,8BAA8B,CAEtC;CACF"}
+{"version":3,"file":"sim-rekognition-face-detail-builder.d.ts","sourceRoot":"","sources":["../../../../src/service/rekognition/face/sim-rekognition-face-detail-builder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,iDAAiD,CAAC;AACtG,OAAO,KAAK,EACV,+BAA+B,EAC/B,4BAA4B,EAC7B,MAAM,sCAAsC,CAAC;AAE9C,KAAK,8BAA8B,GAAG,MAAM,8BAA8B,CAAC;AAQ3E;;;;;;;;;;;GAWG;AACH,qBAAa,+BAA+B;IAG9B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAFvC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuC;IAE9D,YAA6B,UAAU,EAAE,4BAA4B,EAAI;IAEzE;;;OAGG;IACH,KAAK,CAAC,OAAO,SAAS,8BAA8B,EAClD,MAAM,EAAE,OAAO,EACf,SAAS,EAAE,+BAA+B,EAC1C,KAAK,EAAE,QAAQ,CAAC,8BAA8B,CAAC,CAAC,OAAO,CAAC,GAAG,SAAS,GACnE,IAAI,CASN;IAED;;OAEG;IACH,KAAK,IAAI,8BAA8B,CAEtC;CACF"}

package/dist/service/rekognition/face/sim-rekognition-face-detail-builder.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-rekognition-face-detail-builder.js","sourceRoot":"","sources":["../../../../src/service/rekognition/face/sim-rekognition-face-detail-builder.ts"],"names":[],"mappings":"AAYA;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,+BAA+B;IAGb,UAAU;IAFtB,MAAM,GAAoC,EAAE,CAAC;IAE9D,YAA6B,UAAwC;0BAAxC,UAAU;IAAiC,CAAC;IAEzE;;;OAGG;IACH,KAAK,CACH,MAAe,EACf,SAA0C,EAC1C,KAAoE;QAEpE,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,kHAAkH;QAClH,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;QAE5B,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,KAAK;QACH,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;CACF"}
+{"version":3,"file":"sim-rekognition-face-detail-builder.js","sourceRoot":"","sources":["../../../../src/service/rekognition/face/sim-rekognition-face-detail-builder.ts"],"names":[],"mappings":"AAcA;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,+BAA+B;IAGb,UAAU;IAFtB,MAAM,GAAoC,EAAE,CAAC;IAE9D,YAA6B,UAAwC;0BAAxC,UAAU;IAAiC,CAAC;IAEzE;;;OAGG;IACH,KAAK,CACH,MAAe,EACf,SAA0C,EAC1C,KAAoE;QAEpE,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,kHAAkH;QAClH,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;QAE5B,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,KAAK;QACH,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;CACF"}

package/dist/service/sns/cfn/subscription/sim-cfn-sns-subscription-properties.d.ts

@@ -26,9 +26,10 @@ export declare class SimCfnSnsSubscriptionProperties {
     /**
      * What the subscription delivers to.
      *
-     * Real CloudFormation leaves it optional, because a protocol such as `sms`
-     * carries the destination elsewhere. Neither protocol simulated here is one
-     * of those, so an absent endpoint is refused by Subscribe rather than here.
+     * Real CloudFormation leaves it optional, because a protocol such as
+     * `application` carries the destination elsewhere. No protocol simulated here
+     * is one of those, so an absent endpoint is refused by Subscribe rather than
+     * here.
      */
     private endpoint;
     private attributes;

package/dist/service/sns/cfn/subscription/sim-cfn-sns-subscription-properties.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-sns-subscription-properties.d.ts","sourceRoot":"","sources":["../../../../../src/service/sns/cfn/subscription/sim-cfn-sns-subscription-properties.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAEV,yBAAyB,EAC1B,MAAM,kEAAkE,CAAC;AAC1E,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,oDAAoD,CAAC;AAcnG,UAAU,yCAAyC;IACjD,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC;CAChD;AAED;;;;;;;;;GASG;AACH,qBAAa,+BAA+B;IAC1C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAC1C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA2C;IAEtE,YAAY,UAAU,EAAE,yCAAyC,EAGhE;IAED;;OAEG;IACH,KAAK,IAAI,wBAAwB,CAOhC;IAED;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ;IAgBhB,OAAO,CAAC,UAAU;IASlB;;;;;;OAMG;IACH,OAAO,CAAC,mBAAmB;IAuB3B,OAAO,CAAC,cAAc;IAUtB,OAAO,CAAC,aAAa;CAOtB"}
+{"version":3,"file":"sim-cfn-sns-subscription-properties.d.ts","sourceRoot":"","sources":["../../../../../src/service/sns/cfn/subscription/sim-cfn-sns-subscription-properties.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAEV,yBAAyB,EAC1B,MAAM,kEAAkE,CAAC;AAC1E,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,oDAAoD,CAAC;AAcnG,UAAU,yCAAyC;IACjD,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC;CAChD;AAED;;;;;;;;;GASG;AACH,qBAAa,+BAA+B;IAC1C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAC1C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA2C;IAEtE,YAAY,UAAU,EAAE,yCAAyC,EAGhE;IAED;;OAEG;IACH,KAAK,IAAI,wBAAwB,CAOhC;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,QAAQ;IAgBhB,OAAO,CAAC,UAAU;IASlB;;;;;;OAMG;IACH,OAAO,CAAC,mBAAmB;IAuB3B,OAAO,CAAC,cAAc;IAUtB,OAAO,CAAC,aAAa;CAOtB"}

package/dist/service/sns/cfn/subscription/sim-cfn-sns-subscription-properties.js

@@ -33,9 +33,10 @@ export class SimCfnSnsSubscriptionProperties {
     /**
      * What the subscription delivers to.
      *
-     * Real CloudFormation leaves it optional, because a protocol such as `sms`
-     * carries the destination elsewhere. Neither protocol simulated here is one
-     * of those, so an absent endpoint is refused by Subscribe rather than here.
+     * Real CloudFormation leaves it optional, because a protocol such as
+     * `application` carries the destination elsewhere. No protocol simulated here
+     * is one of those, so an absent endpoint is refused by Subscribe rather than
+     * here.
      */
     endpoint() {
         const endpoint = this.properties.get(subscriptionEndpointPropertyName);

package/dist/service/sns/cfn/subscription/sim-cfn-sns-subscription-properties.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-sns-subscription-properties.js","sourceRoot":"","sources":["../../../../../src/service/sns/cfn/subscription/sim-cfn-sns-subscription-properties.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EACL,sBAAsB,EACtB,gCAAgC,EAChC,yBAAyB,EACzB,gCAAgC,EAChC,gCAAgC,EAChC,0BAA0B,GAC3B,MAAM,8CAA8C,CAAC;AAOtD;;;;;;;;;GASG;AACH,MAAM,OAAO,+BAA+B;IACzB,QAAQ,CAAiB;IACzB,UAAU,CAA2C;IAEtE,YAAY,UAAqD;QAC/D,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;IACnE,CAAC;IAED;;OAEG;IACH,KAAK;QACH,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,gCAAgC,CAAC;YAC/D,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,gCAAgC,CAAC;YAC/D,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE;YACzB,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE;SAC9B,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACK,QAAQ;QACd,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;QAEvE,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjC,MAAM,IAAI,CAAC,aAAa,CACtB,GAAG,gCAAgC,mBAAmB,CACvD,CAAC;QACJ,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,UAAU;QAChB,OAAO,MAAM,CAAC,WAAW,CACvB,IAAI,CAAC,UAAU;aACZ,OAAO,EAAE;aACT,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;aAClD,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,uBAAuB,CAAC,KAAK,CAAC,CAAC,CAAC,CAClE,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACK,mBAAmB,CAAC,IAAY;QACtC,IAAI,yBAAyB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,iBAAiB,GAAG,0BAA0B,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAE/D,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,IAAI,CAAC,aAAa,CACtB,GAAG,IAAI,cAAc,2BAA2B,sBAAsB;gBACpE,wBAAwB,iBAAiB,EAAE,CAC9C,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,CAAC,aAAa,CACtB,GAAG,IAAI,yBAAyB,2BAA2B,EAAE,CAC9D,CAAC;IACJ,CAAC;IAEO,cAAc,CAAC,IAAY;QACjC,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAExC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,IAAI,mCAAmC,CAAC,CAAC;QACvE,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,aAAa,CAAC,MAAc;QAClC,OAAO,sBAAsB,CAC3B,2BAA2B,EAC3B,IAAI,CAAC,QAAQ,CAAC,SAAS,EACvB,MAAM,CACP,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-cfn-sns-subscription-properties.js","sourceRoot":"","sources":["../../../../../src/service/sns/cfn/subscription/sim-cfn-sns-subscription-properties.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EACL,sBAAsB,EACtB,gCAAgC,EAChC,yBAAyB,EACzB,gCAAgC,EAChC,gCAAgC,EAChC,0BAA0B,GAC3B,MAAM,8CAA8C,CAAC;AAOtD;;;;;;;;;GASG;AACH,MAAM,OAAO,+BAA+B;IACzB,QAAQ,CAAiB;IACzB,UAAU,CAA2C;IAEtE,YAAY,UAAqD;QAC/D,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;IACnE,CAAC;IAED;;OAEG;IACH,KAAK;QACH,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,gCAAgC,CAAC;YAC/D,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,gCAAgC,CAAC;YAC/D,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE;YACzB,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE;SAC9B,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACK,QAAQ;QACd,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;QAEvE,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjC,MAAM,IAAI,CAAC,aAAa,CACtB,GAAG,gCAAgC,mBAAmB,CACvD,CAAC;QACJ,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,UAAU;QAChB,OAAO,MAAM,CAAC,WAAW,CACvB,IAAI,CAAC,UAAU;aACZ,OAAO,EAAE;aACT,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;aAClD,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,uBAAuB,CAAC,KAAK,CAAC,CAAC,CAAC,CAClE,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACK,mBAAmB,CAAC,IAAY;QACtC,IAAI,yBAAyB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,iBAAiB,GAAG,0BAA0B,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAE/D,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,IAAI,CAAC,aAAa,CACtB,GAAG,IAAI,cAAc,2BAA2B,sBAAsB;gBACpE,wBAAwB,iBAAiB,EAAE,CAC9C,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,CAAC,aAAa,CACtB,GAAG,IAAI,yBAAyB,2BAA2B,EAAE,CAC9D,CAAC;IACJ,CAAC;IAEO,cAAc,CAAC,IAAY;QACjC,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAExC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,IAAI,mCAAmC,CAAC,CAAC;QACvE,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,aAAa,CAAC,MAAc;QAClC,OAAO,sBAAsB,CAC3B,2BAA2B,EAC3B,IAAI,CAAC,QAAQ,CAAC,SAAS,EACvB,MAAM,CACP,CAAC;IACJ,CAAC;CACF"}

package/dist/service/sns/cfn/subscription/sim-cfn-sns-subscription-property-names.d.ts

@@ -7,8 +7,8 @@ export declare const subscriptionTopicArnPropertyName = "TopicArn";
  */
 export declare const subscriptionProtocolPropertyName = "Protocol";
 /**
- * What the subscription is delivered to, which is a queue ARN or a function
- * ARN for the two protocols simulated.
+ * What the subscription is delivered to, which is a queue ARN, a function ARN
+ * or a phone number for the three protocols simulated.
  */
 export declare const subscriptionEndpointPropertyName = "Endpoint";
 /**

package/dist/service/sns/cfn/subscription/sim-cfn-sns-subscription-property-names.js

@@ -7,8 +7,8 @@ export const subscriptionTopicArnPropertyName = "TopicArn";
  */
 export const subscriptionProtocolPropertyName = "Protocol";
 /**
- * What the subscription is delivered to, which is a queue ARN or a function
- * ARN for the two protocols simulated.
+ * What the subscription is delivered to, which is a queue ARN, a function ARN
+ * or a phone number for the three protocols simulated.
  */
 export const subscriptionEndpointPropertyName = "Endpoint";
 /**

package/dist/service/sns/command/publish/sim-sns-publish-commands.d.ts

@@ -11,6 +11,9 @@ interface SimSnsPublishCommandsProperties {
 /**
  * The commands that publish messages to a topic.
  *
+ * A publish reaches this once `SimSnsPublishDispatch` has decided it names a
+ * topic. Publishing to a phone number never arrives here.
+ *
  * A topic keeps nothing a publish sends it. Real SNS hands a message to the
  * topic's subscriptions and forgets it, so a topic with no subscriptions
  * accepts a publish, answers with a message id, and the message goes nowhere.

package/dist/service/sns/command/publish/sim-sns-publish-commands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-sns-publish-commands.d.ts","sourceRoot":"","sources":["../../../../../src/service/sns/command/publish/sim-sns-publish-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AACrF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AAMtE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAU1E,OAAO,KAAK,EACV,sBAAsB,EACtB,4BAA4B,EAC5B,iBAAiB,EACjB,uBAAuB,EAGxB,MAAM,sBAAsB,CAAC;AAQ9B,UAAU,+BAA+B;IACvC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;CAC/B;AAED;;;;;;;;GAQG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoB;IAC3C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAsB;IAC5C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAe;IAEtC,YAAY,UAAU,EAAE,+BAA+B,EAItD;IAED;;OAEG;IACH,OAAO,CACL,OAAO,EAAE,iBAAiB,EAC1B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,uBAAuB,CAiBzB;IAED;;;;;;;;OAQG;IACH,YAAY,CACV,OAAO,EAAE,sBAAsB,EAC/B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,4BAA4B,CAwB9B;IAED;;;;;;OAMG;IACH,OAAO,CAAC,WAAW;IASnB;;OAEG;IACH,OAAO,CAAC,SAAS;CAMlB"}
+{"version":3,"file":"sim-sns-publish-commands.d.ts","sourceRoot":"","sources":["../../../../../src/service/sns/command/publish/sim-sns-publish-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AACrF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AAMtE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAO1E,OAAO,KAAK,EACV,sBAAsB,EACtB,4BAA4B,EAC5B,iBAAiB,EACjB,uBAAuB,EAGxB,MAAM,sBAAsB,CAAC;AAQ9B,UAAU,+BAA+B;IACvC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;CAC/B;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoB;IAC3C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAsB;IAC5C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAe;IAEtC,YAAY,UAAU,EAAE,+BAA+B,EAItD;IAED;;OAEG;IACH,OAAO,CACL,OAAO,EAAE,iBAAiB,EAC1B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,uBAAuB,CAezB;IAED;;;;;;;;OAQG;IACH,YAAY,CACV,OAAO,EAAE,sBAAsB,EAC/B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,4BAA4B,CAwB9B;IAED;;;;;;OAMG;IACH,OAAO,CAAC,WAAW;IASnB;;OAEG;IACH,OAAO,CAAC,SAAS;CAMlB"}

package/dist/service/sns/command/publish/sim-sns-publish-commands.js

@@ -1,6 +1,6 @@
 import { assertSimSnsMessageWithinLimit, SimSnsPublishedMessage, } from "../../message/sim-sns-published-message.js";
 import { assertSnsBatchWithinSizeLimit, requireSnsBatchEntries, runSnsBatch, } from "./sim-sns-batch-entries.js";
-import { refuseUnsimulatedPublishTarget, simSnsPublishedMessageInput, } from "./sim-sns-publish-input.js";
+import { simSnsPublishedMessageInput } from "./sim-sns-publish-input.js";
 /**
  * Real SNS authorizes a batch publish as `sns:Publish`. There is no
  * `sns:PublishBatch` action, so a policy naming one grants nothing.
@@ -9,6 +9,9 @@ const publishAction = "sns:Publish";
 /**
  * The commands that publish messages to a topic.
  *
+ * A publish reaches this once `SimSnsPublishDispatch` has decided it names a
+ * topic. Publishing to a phone number never arrives here.
+ *
  * A topic keeps nothing a publish sends it. Real SNS hands a message to the
  * topic's subscriptions and forgets it, so a topic with no subscriptions
  * accepts a publish, answers with a message id, and the message goes nowhere.
@@ -28,7 +31,6 @@ export class SimSnsPublishCommands {
      * Publish one message to a topic.
      */
     publish(command, options) {
-        refuseUnsimulatedPublishTarget(command.input);
         // The topic has to be there and the caller has to be allowed to publish to
         // it before anything is read out of the message.
         const topic = this.access.requireByArn(publishAction, command.input.TopicArn, options);

package/dist/service/sns/command/publish/sim-sns-publish-commands.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-sns-publish-commands.js","sourceRoot":"","sources":["../../../../../src/service/sns/command/publish/sim-sns-publish-commands.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,8BAA8B,EAC9B,sBAAsB,GACvB,MAAM,4CAA4C,CAAC;AAIpD,OAAO,EACL,6BAA6B,EAC7B,sBAAsB,EACtB,WAAW,GACZ,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,8BAA8B,EAC9B,2BAA2B,GAC5B,MAAM,4BAA4B,CAAC;AAUpC;;;GAGG;AACH,MAAM,aAAa,GAAG,aAAa,CAAC;AAQpC;;;;;;;;GAQG;AACH,MAAM,OAAO,qBAAqB;IACf,MAAM,CAAoB;IAC1B,KAAK,CAAsB;IAC3B,MAAM,CAAe;IAEtC,YAAY,UAA2C;QACrD,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,OAAO,CACL,OAA0B,EAC1B,OAA8B;QAE9B,8BAA8B,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAE9C,2EAA2E;QAC3E,iDAAiD;QACjD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CACpC,aAAa,EACb,OAAO,CAAC,KAAK,CAAC,QAAQ,EACtB,OAAO,CACR,CAAC;QACF,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAE9C,8BAA8B,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAEjD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAEpC,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;IACzD,CAAC;IAED;;;;;;;;OAQG;IACH,YAAY,CACV,OAA+B,EAC/B,OAA8B;QAE9B,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CACpC,aAAa,EACb,OAAO,CAAC,KAAK,CAAC,QAAQ,EACtB,OAAO,CACR,CAAC;QACF,MAAM,OAAO,GAAG,sBAAsB,CACpC,OAAO,CAAC,KAAK,CAAC,0BAA0B,CACzC,CAAC;QACF,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;YACnD,EAAE;YACF,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SAC/B,CAAC,CAAC,CAAC;QAEJ,6BAA6B,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QAE5C,MAAM,UAAU,GACd,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;YAC3C,EAAE,EAAE,EAAE;YACN,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC,CAAC,CAAC;QAEN,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;IAC3E,CAAC;IAED;;;;;;OAMG;IACK,WAAW,CACjB,KAAkB,EAClB,SAAkE;QAElE,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,SAAS,EAAE,CAAC;YACpC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED;;OAEG;IACK,SAAS,CAAC,SAAgC;QAChD,OAAO,sBAAsB,CAAC,EAAE,CAC9B,2BAA2B,CAAC,SAAS,CAAC,EACtC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CACjB,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-sns-publish-commands.js","sourceRoot":"","sources":["../../../../../src/service/sns/command/publish/sim-sns-publish-commands.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,8BAA8B,EAC9B,sBAAsB,GACvB,MAAM,4CAA4C,CAAC;AAIpD,OAAO,EACL,6BAA6B,EAC7B,sBAAsB,EACtB,WAAW,GACZ,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AAUzE;;;GAGG;AACH,MAAM,aAAa,GAAG,aAAa,CAAC;AAQpC;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,qBAAqB;IACf,MAAM,CAAoB;IAC1B,KAAK,CAAsB;IAC3B,MAAM,CAAe;IAEtC,YAAY,UAA2C;QACrD,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,OAAO,CACL,OAA0B,EAC1B,OAA8B;QAE9B,2EAA2E;QAC3E,iDAAiD;QACjD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CACpC,aAAa,EACb,OAAO,CAAC,KAAK,CAAC,QAAQ,EACtB,OAAO,CACR,CAAC;QACF,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAE9C,8BAA8B,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAEjD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAEpC,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;IACzD,CAAC;IAED;;;;;;;;OAQG;IACH,YAAY,CACV,OAA+B,EAC/B,OAA8B;QAE9B,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CACpC,aAAa,EACb,OAAO,CAAC,KAAK,CAAC,QAAQ,EACtB,OAAO,CACR,CAAC;QACF,MAAM,OAAO,GAAG,sBAAsB,CACpC,OAAO,CAAC,KAAK,CAAC,0BAA0B,CACzC,CAAC;QACF,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;YACnD,EAAE;YACF,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SAC/B,CAAC,CAAC,CAAC;QAEJ,6BAA6B,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QAE5C,MAAM,UAAU,GACd,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;YAC3C,EAAE,EAAE,EAAE;YACN,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC,CAAC,CAAC;QAEN,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;IAC3E,CAAC;IAED;;;;;;OAMG;IACK,WAAW,CACjB,KAAkB,EAClB,SAAkE;QAElE,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,SAAS,EAAE,CAAC;YACpC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED;;OAEG;IACK,SAAS,CAAC,SAAgC;QAChD,OAAO,sBAAsB,CAAC,EAAE,CAC9B,2BAA2B,CAAC,SAAS,CAAC,EACtC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CACjB,CAAC;IACJ,CAAC;CACF"}

package/dist/service/sns/command/publish/sim-sns-publish-dispatch.d.ts

@@ -0,0 +1,39 @@
+import type { SimSnsRequestOptions } from "../sim-sns-request-options.js";
+import type { SimSnsPublishCommands } from "./sim-sns-publish-commands.js";
+import type { SimSnsPublishSms } from "./sim-sns-publish-sms.js";
+import type { SimPublishBatchCommand, SimPublishBatchCommandOutput, SimPublishCommand, SimPublishCommandOutput } from "./publish.command.js";
+interface SimSnsPublishDispatchProperties {
+    readonly topic: SimSnsPublishCommands;
+    readonly sms: SimSnsPublishSms;
+}
+/**
+ * Which of the two publishes a `Publish` request is.
+ *
+ * One SDK command name covers two operations that share a message and nothing
+ * else. A publish to a topic goes to the topic's subscriptions. A publish to a
+ * phone number reaches no topic, no subscription and no delivery endpoint, and
+ * is recorded as an SMS. Each has its own handler, and this is what reads the
+ * request to decide.
+ *
+ * The target refusals belong here, ahead of the decision, so that a request
+ * naming an unsimulated target is refused whichever way it would otherwise
+ * have gone.
+ *
+ * `PublishBatch` is only ever a topic publish, since the SNS API gives a batch
+ * entry no phone number field.
+ */
+export declare class SimSnsPublishDispatch {
+    private readonly topic;
+    private readonly sms;
+    constructor(properties: SimSnsPublishDispatchProperties);
+    /**
+     * Publish one message to a topic or to a phone number.
+     */
+    publish(command: SimPublishCommand, options?: SimSnsRequestOptions): SimPublishCommandOutput;
+    /**
+     * Publish up to ten messages to a topic at once.
+     */
+    publishBatch(command: SimPublishBatchCommand, options?: SimSnsRequestOptions): SimPublishBatchCommandOutput;
+}
+export {};
+//# sourceMappingURL=sim-sns-publish-dispatch.d.ts.map

package/dist/service/sns/command/publish/sim-sns-publish-dispatch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-publish-dispatch.d.ts","sourceRoot":"","sources":["../../../../../src/service/sns/command/publish/sim-sns-publish-dispatch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAE3E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,KAAK,EACV,sBAAsB,EACtB,4BAA4B,EAC5B,iBAAiB,EACjB,uBAAuB,EACxB,MAAM,sBAAsB,CAAC;AAE9B,UAAU,+BAA+B;IACvC,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAC;IACtC,QAAQ,CAAC,GAAG,EAAE,gBAAgB,CAAC;CAChC;AAED;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAwB;IAC9C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAmB;IAEvC,YAAY,UAAU,EAAE,+BAA+B,EAGtD;IAED;;OAEG;IACH,OAAO,CACL,OAAO,EAAE,iBAAiB,EAC1B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,uBAAuB,CAQzB;IAED;;OAEG;IACH,YAAY,CACV,OAAO,EAAE,sBAAsB,EAC/B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,4BAA4B,CAE9B;CACF"}