@kensio/yulin 1.17.0 → 1.17.2

package/dist/service/s3/serve/api/sim-s3-api-object-output.d.ts

@@ -1,5 +1,10 @@
 /**
  * Answer a read with the Object itself, headers and all.
+ *
+ * A read that asked for part of the Object is answered `206 Partial Content`
+ * and says which part it carries, because a client reading a large Object in
+ * pieces at once writes each response at the offset it asked for, and a `200`
+ * carrying the whole Object would be written over its neighbours.
  */
 export declare function simS3GetObjectResponse(output: Record<string, unknown>): Promise<Response>;
 //# sourceMappingURL=sim-s3-api-object-output.d.ts.map

package/dist/service/s3/serve/api/sim-s3-api-object-output.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-s3-api-object-output.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/serve/api/sim-s3-api-object-output.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,QAAQ,CAAC,CAYnB"}
+{"version":3,"file":"sim-s3-api-object-output.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/serve/api/sim-s3-api-object-output.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,QAAQ,CAAC,CAcnB"}

package/dist/service/s3/serve/api/sim-s3-api-object-output.js

@@ -1,16 +1,23 @@
 import { simS3ObjectResponseHeaders } from "../../object/s3-object-response-headers.js";
 /**
  * Answer a read with the Object itself, headers and all.
+ *
+ * A read that asked for part of the Object is answered `206 Partial Content`
+ * and says which part it carries, because a client reading a large Object in
+ * pieces at once writes each response at the offset it asked for, and a `200`
+ * carrying the whole Object would be written over its neighbours.
  */
 export async function simS3GetObjectResponse(output) {
     const body = await objectBodyBytes(output["Body"]);
+    const contentRange = output["ContentRange"];
     return new Response(body, {
-        status: 200,
+        status: contentRange === undefined ? 200 : 206,
         headers: simS3ObjectResponseHeaders({
             metadata: output["Metadata"],
             bodyLength: body.length,
             etag: output["ETag"],
             lastModified: output["LastModified"],
+            contentRange,
         }),
     });
 }

package/dist/service/s3/serve/api/sim-s3-api-object-output.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-s3-api-object-output.js","sourceRoot":"","sources":["../../../../../src/service/s3/serve/api/sim-s3-api-object-output.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAExF;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAA+B;IAE/B,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAEnD,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;QACxB,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,0BAA0B,CAAC;YAClC,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAuC;YAClE,UAAU,EAAE,IAAI,CAAC,MAAM;YACvB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAuB;YAC1C,YAAY,EAAE,MAAM,CAAC,cAAc,CAAqB;SACzD,CAAC;KACH,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,eAAe,CAAC,IAAa;IAC1C,2DAA2D;IAC3D,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QACxC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC;IAED,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,IAAiC,EAAE,CAAC;QAC5D,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAClC,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC"}
+{"version":3,"file":"sim-s3-api-object-output.js","sourceRoot":"","sources":["../../../../../src/service/s3/serve/api/sim-s3-api-object-output.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAExF;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAA+B;IAE/B,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACnD,MAAM,YAAY,GAAG,MAAM,CAAC,cAAc,CAAuB,CAAC;IAElE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;QACxB,MAAM,EAAE,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;QAC9C,OAAO,EAAE,0BAA0B,CAAC;YAClC,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAuC;YAClE,UAAU,EAAE,IAAI,CAAC,MAAM;YACvB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAuB;YAC1C,YAAY,EAAE,MAAM,CAAC,cAAc,CAAqB;YACxD,YAAY;SACb,CAAC;KACH,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,eAAe,CAAC,IAAa;IAC1C,2DAA2D;IAC3D,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QACxC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC;IAED,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,IAAiC,EAAE,CAAC;QAC5D,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAClC,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC"}

package/dist/service/s3/serve/api/sim-s3-api-object-routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-s3-api-object-routes.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/serve/api/sim-s3-api-object-routes.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAEhE;;GAEG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAAS,aAAa,EA4DxD,CAAC"}
+{"version":3,"file":"sim-s3-api-object-routes.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/serve/api/sim-s3-api-object-routes.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAEhE;;GAEG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAAS,aAAa,EA4DxD,CAAC"}

package/dist/service/s3/serve/api/sim-s3-api-object-routes.js

@@ -1,4 +1,4 @@
-import { createMultipartUploadInput, objectInput, putObjectInput, } from "./sim-s3-api-input.js";
+import { createMultipartUploadInput, getObjectInput, objectInput, putObjectInput, } from "./sim-s3-api-object-input.js";
 import { completeMultipartUploadInput, uploadInput, uploadPartInput, } from "./sim-s3-api-multipart-input.js";
 /**
  * The Object-level S3 operations this endpoint serves.
@@ -14,7 +14,7 @@ export const simS3ObjectApiRoutes = [
         method: "GET",
         target: "object",
         commandName: "GetObjectCommand",
-        input: objectInput,
+        input: getObjectInput,
     },
     {
         method: "GET",

package/dist/service/s3/serve/api/sim-s3-api-object-routes.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-s3-api-object-routes.js","sourceRoot":"","sources":["../../../../../src/service/s3/serve/api/sim-s3-api-object-routes.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,EAC1B,WAAW,EACX,cAAc,GACf,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,4BAA4B,EAC5B,WAAW,EACX,eAAe,GAChB,MAAM,iCAAiC,CAAC;AAGzC;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA6B;IAC5D;QACE,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,mBAAmB;QAChC,KAAK,EAAE,WAAW;KACnB;IACD;QACE,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,kBAAkB;QAC/B,KAAK,EAAE,WAAW;KACnB;IACD;QACE,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,UAAU;QACvB,WAAW,EAAE,kBAAkB;QAC/B,KAAK,EAAE,WAAW;KACnB;IACD;QACE,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,SAAS;QACtB,WAAW,EAAE,8BAA8B;QAC3C,KAAK,EAAE,0BAA0B;KAClC;IACD;QACE,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,UAAU;QACvB,WAAW,EAAE,gCAAgC;QAC7C,KAAK,EAAE,4BAA4B;KACpC;IACD;QACE,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,UAAU;QACvB,WAAW,EAAE,mBAAmB;QAChC,KAAK,EAAE,eAAe;KACvB;IACD;QACE,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,kBAAkB;QAC/B,KAAK,EAAE,cAAc;KACtB;IACD;QACE,MAAM,EAAE,QAAQ;QAChB,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,UAAU;QACvB,WAAW,EAAE,6BAA6B;QAC1C,KAAK,EAAE,WAAW;KACnB;IACD;QACE,MAAM,EAAE,QAAQ;QAChB,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,qBAAqB;QAClC,KAAK,EAAE,WAAW;KACnB;CACF,CAAC"}
+{"version":3,"file":"sim-s3-api-object-routes.js","sourceRoot":"","sources":["../../../../../src/service/s3/serve/api/sim-s3-api-object-routes.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,EAC1B,cAAc,EACd,WAAW,EACX,cAAc,GACf,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,4BAA4B,EAC5B,WAAW,EACX,eAAe,GAChB,MAAM,iCAAiC,CAAC;AAGzC;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA6B;IAC5D;QACE,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,mBAAmB;QAChC,KAAK,EAAE,WAAW;KACnB;IACD;QACE,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,kBAAkB;QAC/B,KAAK,EAAE,cAAc;KACtB;IACD;QACE,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,UAAU;QACvB,WAAW,EAAE,kBAAkB;QAC/B,KAAK,EAAE,WAAW;KACnB;IACD;QACE,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,SAAS;QACtB,WAAW,EAAE,8BAA8B;QAC3C,KAAK,EAAE,0BAA0B;KAClC;IACD;QACE,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,UAAU;QACvB,WAAW,EAAE,gCAAgC;QAC7C,KAAK,EAAE,4BAA4B;KACpC;IACD;QACE,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,UAAU;QACvB,WAAW,EAAE,mBAAmB;QAChC,KAAK,EAAE,eAAe;KACvB;IACD;QACE,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,kBAAkB;QAC/B,KAAK,EAAE,cAAc;KACtB;IACD;QACE,MAAM,EAAE,QAAQ;QAChB,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,UAAU;QACvB,WAAW,EAAE,6BAA6B;QAC1C,KAAK,EAAE,WAAW;KACnB;IACD;QACE,MAAM,EAAE,QAAQ;QAChB,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,qBAAqB;QAClC,KAAK,EAAE,WAAW;KACnB;CACF,CAAC"}

package/dist/service/s3/serve/sim-s3-rest-object-reader.d.ts

@@ -7,6 +7,11 @@ import type { SimAwsServiceRequest } from "../../../serve/controller/sim-service
  * The two share everything but the body, because a `HEAD` is a `GET` whose
  * response real S3 stops short of sending, so they are read the same way here
  * and differ only in what comes back.
+ *
+ * A `GET` may ask for part of the Object, and is answered with that part and
+ * `206 Partial Content`. A `HEAD` may not. Simulated S3 describes the whole
+ * Object however it is asked about, and HeadObject does the same for an
+ * in-process caller.
  */
 export declare class SimS3RestObjectReader {
     /**

package/dist/service/s3/serve/sim-s3-rest-object-reader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-s3-rest-object-reader.d.ts","sourceRoot":"","sources":["../../../../src/service/s3/serve/sim-s3-rest-object-reader.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qDAAqD,CAAC;AAGhG;;;;;;GAMG;AACH,qBAAa,qBAAqB;IAChC;;OAEG;IACG,IAAI,CACR,KAAK,EAAE,KAAK,EACZ,KAAK,EAAE,oBAAoB,EAC3B,cAAc,EAAE,oBAAoB,GACnC,OAAO,CAAC,QAAQ,CAAC,CAmBnB;CACF"}
+{"version":3,"file":"sim-s3-rest-object-reader.d.ts","sourceRoot":"","sources":["../../../../src/service/s3/serve/sim-s3-rest-object-reader.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qDAAqD,CAAC;AAGhG;;;;;;;;;;;GAWG;AACH,qBAAa,qBAAqB;IAChC;;OAEG;IACG,IAAI,CACR,KAAK,EAAE,KAAK,EACZ,KAAK,EAAE,oBAAoB,EAC3B,cAAc,EAAE,oBAAoB,GACnC,OAAO,CAAC,QAAQ,CAAC,CAgCnB;CACF"}

package/dist/service/s3/serve/sim-s3-rest-object-reader.js

@@ -5,24 +5,41 @@ import { simS3ObjectResponseHeaders } from "../object/s3-object-response-headers
  * The two share everything but the body, because a `HEAD` is a `GET` whose
  * response real S3 stops short of sending, so they are read the same way here
  * and differ only in what comes back.
+ *
+ * A `GET` may ask for part of the Object, and is answered with that part and
+ * `206 Partial Content`. A `HEAD` may not. Simulated S3 describes the whole
+ * Object however it is asked about, and HeadObject does the same for an
+ * in-process caller.
  */
 export class SimS3RestObjectReader {
     /**
      * Read an Object as the principal the boundary resolved.
      */
     async read(simS3, route, serviceRequest) {
-        const output = await simS3.getObject({ input: { Bucket: route.bucket.bucketName, Key: route.objectKey } }, { caller: serviceRequest.caller.toCaller() });
+        const { request } = serviceRequest;
+        const head = request.method === "HEAD";
+        const output = await simS3.getObject({
+            input: {
+                Bucket: route.bucket.bucketName,
+                Key: route.objectKey,
+                Range: head ? undefined : (request.headers.get("range") ?? undefined),
+            },
+        }, { caller: serviceRequest.caller.toCaller() });
         const body = await bodyBytes(output.Body);
         const headers = simS3ObjectResponseHeaders({
             metadata: output.Metadata,
             bodyLength: body.length,
             etag: output.ETag,
             lastModified: output.LastModified,
+            contentRange: output.ContentRange,
         });
-        if (serviceRequest.request.method === "HEAD") {
+        if (head) {
             return new Response(undefined, { status: 200, headers });
         }
-        return new Response(body, { status: 200, headers });
+        return new Response(body, {
+            status: output.ContentRange === undefined ? 200 : 206,
+            headers,
+        });
     }
 }
 /**

package/dist/service/s3/serve/sim-s3-rest-object-reader.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-s3-rest-object-reader.js","sourceRoot":"","sources":["../../../../src/service/s3/serve/sim-s3-rest-object-reader.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAErF;;;;;;GAMG;AACH,MAAM,OAAO,qBAAqB;IAChC;;OAEG;IACH,KAAK,CAAC,IAAI,CACR,KAAY,EACZ,KAA2B,EAC3B,cAAoC;QAEpC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,SAAS,CAClC,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,EAAE,KAAK,CAAC,SAAS,EAAE,EAAE,EACpE,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAC7C,CAAC;QAEF,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,0BAA0B,CAAC;YACzC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,UAAU,EAAE,IAAI,CAAC,MAAM;YACvB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,YAAY,EAAE,MAAM,CAAC,YAAY;SAClC,CAAC,CAAC;QAEH,IAAI,cAAc,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC7C,OAAO,IAAI,QAAQ,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3D,CAAC;QAED,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IACtD,CAAC;CACF;AAED;;GAEG;AACH,KAAK,UAAU,SAAS,CACtB,IAAsE;IAEtE,2DAA2D;IAC3D,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC;IAED,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAmB,CAAC,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC"}
+{"version":3,"file":"sim-s3-rest-object-reader.js","sourceRoot":"","sources":["../../../../src/service/s3/serve/sim-s3-rest-object-reader.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAErF;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,qBAAqB;IAChC;;OAEG;IACH,KAAK,CAAC,IAAI,CACR,KAAY,EACZ,KAA2B,EAC3B,cAAoC;QAEpC,MAAM,EAAE,OAAO,EAAE,GAAG,cAAc,CAAC;QACnC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC;QAEvC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,SAAS,CAClC;YACE,KAAK,EAAE;gBACL,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,UAAU;gBAC/B,GAAG,EAAE,KAAK,CAAC,SAAS;gBACpB,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC;aACtE;SACF,EACD,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAC7C,CAAC;QAEF,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,0BAA0B,CAAC;YACzC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,UAAU,EAAE,IAAI,CAAC,MAAM;YACvB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,YAAY,EAAE,MAAM,CAAC,YAAY;SAClC,CAAC,CAAC;QAEH,IAAI,IAAI,EAAE,CAAC;YACT,OAAO,IAAI,QAAQ,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3D,CAAC;QAED,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;YACxB,MAAM,EAAE,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;YACrD,OAAO;SACR,CAAC,CAAC;IACL,CAAC;CACF;AAED;;GAEG;AACH,KAAK,UAAU,SAAS,CACtB,IAAsE;IAEtE,2DAA2D;IAC3D,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC;IAED,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAmB,CAAC,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC"}

package/dist/service/sns/delivery/lambda/sim-sns-delivery-function.d.ts

@@ -20,10 +20,11 @@ export declare class SimSnsDeliveryFunction {
     /**
      * Invoke the function with the event, if it still admits SNS for this topic.
      *
-     * The resource policy is consulted on every delivery rather than remembered
-     * from the moment the subscription was made, so a permission taken away
-     * afterwards stops delivery. Real SNS does not check it at `Subscribe` time
-     * at all, which is why this is the only place it is asked.
+     * The function, and the version or alias a qualified endpoint named, are
+     * resolved on every delivery, along with the resource policy, so a
+     * permission taken away afterwards stops delivery and an alias moved to
+     * another version moves what runs. Real SNS checks none of it at
+     * `Subscribe` time, which is why this is the only place it is asked.
      */
     deliver(request: SimSnsDeliveryRequest): Promise<void>;
 }

package/dist/service/sns/delivery/lambda/sim-sns-delivery-function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-sns-delivery-function.d.ts","sourceRoot":"","sources":["../../../../../src/service/sns/delivery/lambda/sim-sns-delivery-function.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,8CAA8C,CAAC;AAIjG,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,qDAAqD,CAAC;AACrG,OAAO,EACL,KAAK,qBAAqB,EAG3B,MAAM,wBAAwB,CAAC;AAGhC,UAAU,gCAAgC;IACxC,QAAQ,CAAC,GAAG,EAAE,yBAAyB,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,4BAA4B,CAAC;CAC9C;AAED;;;;;;;GAOG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA4B;IAChD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA+B;IAErD,YAAY,UAAU,EAAE,gCAAgC,EAGvD;IAED;;;;;;;OAOG;IACG,OAAO,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAuC3D;CACF"}
+{"version":3,"file":"sim-sns-delivery-function.d.ts","sourceRoot":"","sources":["../../../../../src/service/sns/delivery/lambda/sim-sns-delivery-function.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,8CAA8C,CAAC;AAIjG,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,qDAAqD,CAAC;AACrG,OAAO,EACL,KAAK,qBAAqB,EAG3B,MAAM,wBAAwB,CAAC;AAGhC,UAAU,gCAAgC;IACxC,QAAQ,CAAC,GAAG,EAAE,yBAAyB,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,4BAA4B,CAAC;CAC9C;AAED;;;;;;;GAOG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA4B;IAChD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA+B;IAErD,YAAY,UAAU,EAAE,gCAAgC,EAGvD;IAED;;;;;;;;OAQG;IACG,OAAO,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CA2C3D;CACF"}

package/dist/service/sns/delivery/lambda/sim-sns-delivery-function.js

@@ -21,28 +21,33 @@ export class SimSnsDeliveryFunction {
     /**
      * Invoke the function with the event, if it still admits SNS for this topic.
      *
-     * The resource policy is consulted on every delivery rather than remembered
-     * from the moment the subscription was made, so a permission taken away
-     * afterwards stops delivery. Real SNS does not check it at `Subscribe` time
-     * at all, which is why this is the only place it is asked.
+     * The function, and the version or alias a qualified endpoint named, are
+     * resolved on every delivery, along with the resource policy, so a
+     * permission taken away afterwards stops delivery and an alias moved to
+     * another version moves what runs. Real SNS checks none of it at
+     * `Subscribe` time, which is why this is the only place it is asked.
      */
     async deliver(request) {
         const source = simSnsDeliverySource(request);
         const endpointArn = request.subscription.endpoint.value;
-        const simFunction = this.scope
+        const target = this.scope
             .lambda()
-            .getSimFunctionByName(this.arn.functionName);
-        if (simFunction === undefined) {
+            .getSimFunctionTarget(this.arn.functionName, this.arn.qualifier);
+        if (target === undefined) {
             // Not a refusal: the resource policy said nothing, because there is no
             // function. A subscription pointing at nothing is a mistake worth
             // warning about, where a policy saying no is a modelled outcome a test
-            // may be asking for on purpose.
-            throw new SimSnsNotFoundException(`${endpointArn} is not a simulated Lambda function.`);
+            // may be asking for on purpose. A qualified endpoint reaches here for a
+            // version or alias that is not there as well.
+            throw new SimSnsNotFoundException(this.arn.qualifier === undefined
+                ? `${endpointArn} is not a simulated Lambda function.`
+                : `${endpointArn} names no simulated Lambda function version or ` +
+                    "alias.");
         }
         const decision = new SimLambdaServiceInvokeAuthorizer({
             iam: this.scope.iam(),
         }).authorize({
-            simFunction,
+            resource: target.resource,
             servicePrincipal: simSnsServicePrincipal,
             ...source,
         });
@@ -56,7 +61,7 @@ export class SimSnsDeliveryFunction {
         // asynchronous invocation real SNS makes, and because a handler failure
         // has to reach the delivery outcome rather than being swallowed as an
         // asynchronous invocation error.
-        await simFunction.invoke(simSnsLambdaEventDocument(request));
+        await target.simFunction.invoke(simSnsLambdaEventDocument(request));
     }
 }
 //# sourceMappingURL=sim-sns-delivery-function.js.map

package/dist/service/sns/delivery/lambda/sim-sns-delivery-function.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-sns-delivery-function.js","sourceRoot":"","sources":["../../../../../src/service/sns/delivery/lambda/sim-sns-delivery-function.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gCAAgC,EAAE,MAAM,2EAA2E,CAAC;AAC7H,OAAO,EAAE,0BAA0B,EAAE,MAAM,uCAAuC,CAAC;AACnF,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAEvE,OAAO,EAEL,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAOtE;;;;;;;GAOG;AACH,MAAM,OAAO,sBAAsB;IAChB,GAAG,CAA4B;IAC/B,KAAK,CAA+B;IAErD,YAAY,UAA4C;QACtD,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;QAC1B,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAChC,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,OAAO,CAAC,OAA8B;QAC1C,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC;QACxD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK;aAC3B,MAAM,EAAE;aACR,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAE/C,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,uEAAuE;YACvE,kEAAkE;YAClE,uEAAuE;YACvE,gCAAgC;YAChC,MAAM,IAAI,uBAAuB,CAC/B,GAAG,WAAW,sCAAsC,CACrD,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,gCAAgC,CAAC;YACpD,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;SACtB,CAAC,CAAC,SAAS,CAAC;YACX,WAAW;YACX,gBAAgB,EAAE,sBAAsB;YACxC,GAAG,MAAM;SACV,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,0BAA0B,CAClC,0BAA0B,WAAW,kBAAkB;gBACrD,GAAG,sBAAsB,qBAAqB,MAAM,CAAC,SAAS,IAAI;gBAClE,8BAA8B,CACjC,CAAC;QACJ,CAAC;QAED,0EAA0E;QAC1E,wEAAwE;QACxE,wEAAwE;QACxE,sEAAsE;QACtE,iCAAiC;QACjC,MAAM,WAAW,CAAC,MAAM,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/D,CAAC;CACF"}
+{"version":3,"file":"sim-sns-delivery-function.js","sourceRoot":"","sources":["../../../../../src/service/sns/delivery/lambda/sim-sns-delivery-function.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gCAAgC,EAAE,MAAM,2EAA2E,CAAC;AAC7H,OAAO,EAAE,0BAA0B,EAAE,MAAM,uCAAuC,CAAC;AACnF,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAEvE,OAAO,EAEL,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAOtE;;;;;;;GAOG;AACH,MAAM,OAAO,sBAAsB;IAChB,GAAG,CAA4B;IAC/B,KAAK,CAA+B;IAErD,YAAY,UAA4C;QACtD,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;QAC1B,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAChC,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,OAAO,CAAC,OAA8B;QAC1C,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC;QACxD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK;aACtB,MAAM,EAAE;aACR,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAEnE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,uEAAuE;YACvE,kEAAkE;YAClE,uEAAuE;YACvE,wEAAwE;YACxE,8CAA8C;YAC9C,MAAM,IAAI,uBAAuB,CAC/B,IAAI,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS;gBAC9B,CAAC,CAAC,GAAG,WAAW,sCAAsC;gBACtD,CAAC,CAAC,GAAG,WAAW,iDAAiD;oBAC7D,QAAQ,CACf,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,gCAAgC,CAAC;YACpD,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;SACtB,CAAC,CAAC,SAAS,CAAC;YACX,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,gBAAgB,EAAE,sBAAsB;YACxC,GAAG,MAAM;SACV,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,0BAA0B,CAClC,0BAA0B,WAAW,kBAAkB;gBACrD,GAAG,sBAAsB,qBAAqB,MAAM,CAAC,SAAS,IAAI;gBAClE,8BAA8B,CACjC,CAAC;QACJ,CAAC;QAED,0EAA0E;QAC1E,wEAAwE;QACxE,wEAAwE;QACxE,sEAAsE;QACtE,iCAAiC;QACjC,MAAM,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC,CAAC;IACtE,CAAC;CACF"}

package/dist/service/sns/subscription/sim-sns-function-endpoint-arn.d.ts

@@ -13,6 +13,14 @@ export declare class SimSnsFunctionEndpointArn {
     readonly regionName: AwsRegionName;
     readonly accountId: SimAwsAccountId;
     readonly functionName: string;
+    /**
+     * The version or alias the endpoint qualified the function with, if it named
+     * one.
+     *
+     * A subscription to `orders:live` delivers to the version the alias points
+     * at, so the qualifier is held here and resolved on every delivery.
+     */
+    readonly qualifier: string | undefined;
     private constructor();
     /**
      * Read a function ARN, refusing anything a function could not be reached by.
@@ -21,10 +29,6 @@ export declare class SimSnsFunctionEndpointArn {
      * What SNS adds is what an unreadable one means to a `Subscribe` request,
      * which is the same `InvalidParameterException` a queue ARN that is not one
      * gets.
-     *
-     * A qualified ARN naming a version or an alias is refused rather than read as
-     * the unqualified function, because simulated Lambda has neither and
-     * delivering to `$LATEST` instead would be the wrong function.
      */
     static parse(endpoint: string): SimSnsFunctionEndpointArn;
 }

package/dist/service/sns/subscription/sim-sns-function-endpoint-arn.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-sns-function-endpoint-arn.d.ts","sourceRoot":"","sources":["../../../../src/service/sns/subscription/sim-sns-function-endpoint-arn.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAcjE;;;;;;;GAOG;AACH,qBAAa,yBAAyB;IACpC,SAAgB,KAAK,EAAE,MAAM,CAAC;IAC9B,SAAgB,UAAU,EAAE,aAAa,CAAC;IAC1C,SAAgB,SAAS,EAAE,eAAe,CAAC;IAC3C,SAAgB,YAAY,EAAE,MAAM,CAAC;IAErC,OAAO,eAKN;IAED;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,GAAG,yBAAyB,CAyBxD;CACF"}
+{"version":3,"file":"sim-sns-function-endpoint-arn.d.ts","sourceRoot":"","sources":["../../../../src/service/sns/subscription/sim-sns-function-endpoint-arn.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAYjE;;;;;;;GAOG;AACH,qBAAa,yBAAyB;IACpC,SAAgB,KAAK,EAAE,MAAM,CAAC;IAC9B,SAAgB,UAAU,EAAE,aAAa,CAAC;IAC1C,SAAgB,SAAS,EAAE,eAAe,CAAC;IAC3C,SAAgB,YAAY,EAAE,MAAM,CAAC;IAErC;;;;;;OAMG;IACH,SAAgB,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAE9C,OAAO,eAMN;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,GAAG,yBAAyB,CAkBxD;CACF"}

package/dist/service/sns/subscription/sim-sns-function-endpoint-arn.js

@@ -1,5 +1,5 @@
 import { parseSimLambdaFunctionArn } from "../../lambda/function/sim-lambda-function-arn-parts.js";
-import { SimSnsInvalidParameterException, SimSnsUnsimulatedInputException, } from "../error/sim-sns.error.js";
+import { SimSnsInvalidParameterException } from "../error/sim-sns.error.js";
 /**
  * The Lambda function ARN a subscription's endpoint names.
  *
@@ -13,11 +13,20 @@ export class SimSnsFunctionEndpointArn {
     regionName;
     accountId;
     functionName;
+    /**
+     * The version or alias the endpoint qualified the function with, if it named
+     * one.
+     *
+     * A subscription to `orders:live` delivers to the version the alias points
+     * at, so the qualifier is held here and resolved on every delivery.
+     */
+    qualifier;
     constructor(properties) {
         this.value = properties.value;
         this.regionName = properties.regionName;
         this.accountId = properties.accountId;
         this.functionName = properties.functionName;
+        this.qualifier = properties.qualifier;
     }
     /**
      * Read a function ARN, refusing anything a function could not be reached by.
@@ -26,10 +35,6 @@ export class SimSnsFunctionEndpointArn {
      * What SNS adds is what an unreadable one means to a `Subscribe` request,
      * which is the same `InvalidParameterException` a queue ARN that is not one
      * gets.
-     *
-     * A qualified ARN naming a version or an alias is refused rather than read as
-     * the unqualified function, because simulated Lambda has neither and
-     * delivering to `$LATEST` instead would be the wrong function.
      */
     static parse(endpoint) {
         const parts = parseSimLambdaFunctionArn(endpoint);
@@ -38,16 +43,12 @@ export class SimSnsFunctionEndpointArn {
                 "function ARN, which is " +
                 "arn:aws:lambda:<region>:<account-id>:function:<function-name>");
         }
-        if (parts.qualifier !== undefined) {
-            throw new SimSnsUnsimulatedInputException(`Cannot subscribe ${endpoint}: simulated Lambda has no function ` +
-                "versions or aliases, so a qualified function ARN is refused rather " +
-                "than treated as the unqualified function.");
-        }
         return new this({
             value: endpoint,
             regionName: parts.regionName,
             accountId: parts.accountId,
             functionName: parts.functionName,
+            qualifier: parts.qualifier,
         });
     }
 }

package/dist/service/sns/subscription/sim-sns-function-endpoint-arn.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-sns-function-endpoint-arn.js","sourceRoot":"","sources":["../../../../src/service/sns/subscription/sim-sns-function-endpoint-arn.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,yBAAyB,EAAE,MAAM,wDAAwD,CAAC;AACnG,OAAO,EACL,+BAA+B,EAC/B,+BAA+B,GAChC,MAAM,2BAA2B,CAAC;AASnC;;;;;;;GAOG;AACH,MAAM,OAAO,yBAAyB;IACpB,KAAK,CAAS;IACd,UAAU,CAAgB;IAC1B,SAAS,CAAkB;IAC3B,YAAY,CAAS;IAErC,YAAoB,UAA+C;QACjE,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;IAC9C,CAAC;IAED;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,KAAK,CAAC,QAAgB;QAC3B,MAAM,KAAK,GAAG,yBAAyB,CAAC,QAAQ,CAAC,CAAC;QAElD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,+BAA+B,CACvC,uCAAuC,QAAQ,mBAAmB;gBAChE,yBAAyB;gBACzB,+DAA+D,CAClE,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,IAAI,+BAA+B,CACvC,oBAAoB,QAAQ,qCAAqC;gBAC/D,qEAAqE;gBACrE,2CAA2C,CAC9C,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,IAAI,CAAC;YACd,KAAK,EAAE,QAAQ;YACf,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,YAAY,EAAE,KAAK,CAAC,YAAY;SACjC,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"sim-sns-function-endpoint-arn.js","sourceRoot":"","sources":["../../../../src/service/sns/subscription/sim-sns-function-endpoint-arn.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,yBAAyB,EAAE,MAAM,wDAAwD,CAAC;AACnG,OAAO,EAAE,+BAA+B,EAAE,MAAM,2BAA2B,CAAC;AAU5E;;;;;;;GAOG;AACH,MAAM,OAAO,yBAAyB;IACpB,KAAK,CAAS;IACd,UAAU,CAAgB;IAC1B,SAAS,CAAkB;IAC3B,YAAY,CAAS;IAErC;;;;;;OAMG;IACa,SAAS,CAAqB;IAE9C,YAAoB,UAA+C;QACjE,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;QAC5C,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;IACxC,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,KAAK,CAAC,QAAgB;QAC3B,MAAM,KAAK,GAAG,yBAAyB,CAAC,QAAQ,CAAC,CAAC;QAElD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,+BAA+B,CACvC,uCAAuC,QAAQ,mBAAmB;gBAChE,yBAAyB;gBACzB,+DAA+D,CAClE,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,IAAI,CAAC;YACd,KAAK,EAAE,QAAQ;YACf,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-dynamic-reference-resolver.d.ts

@@ -27,13 +27,6 @@ export declare class SimCfnSsmDynamicReferenceResolver implements SimCfnDynamicR
      * Read the version the reference selects, or the current one.
      */
     private parameterValue;
-    /**
-     * The value a reference Parameter Store could not answer resolves to.
-     *
-     * The shape follows CDK, which fills an unresolved context lookup with
-     * `dummy-value-for-<name>`. A test reading one back sees where it came from.
-     */
-    private standIn;
 }
 export {};
 //# sourceMappingURL=sim-cfn-ssm-dynamic-reference-resolver.d.ts.map

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-dynamic-reference-resolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-ssm-dynamic-reference-resolver.d.ts","sourceRoot":"","sources":["../../../../../src/service/ssm/cfn/dynamic/sim-cfn-ssm-dynamic-reference-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,sBAAsB,EACtB,gCAAgC,EAChC,8BAA8B,EAC/B,MAAM,4EAA4E,CAAC;AAGpF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAwC/C,UAAU,2CAA2C;IACnD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,iCAAkC,YAAW,8BAA8B;IACtF,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAE7B,YAAY,UAAU,EAAE,2CAA2C,EAElE;IAED;;OAEG;IACH,OAAO,CAAC,SAAS,EAAE,sBAAsB,GAAG,gCAAgC,CAiC3E;IAED;;OAEG;IACH,OAAO,CAAC,cAAc;IA0BtB;;;;;OAKG;IACH,OAAO,CAAC,OAAO;CAYhB"}
+{"version":3,"file":"sim-cfn-ssm-dynamic-reference-resolver.d.ts","sourceRoot":"","sources":["../../../../../src/service/ssm/cfn/dynamic/sim-cfn-ssm-dynamic-reference-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,sBAAsB,EACtB,gCAAgC,EAChC,8BAA8B,EAC/B,MAAM,4EAA4E,CAAC;AAGpF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAI/C,UAAU,2CAA2C;IACnD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,iCAAkC,YAAW,8BAA8B;IACtF,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAE7B,YAAY,UAAU,EAAE,2CAA2C,EAElE;IAED;;OAEG;IACH,OAAO,CAAC,SAAS,EAAE,sBAAsB,GAAG,gCAAgC,CAiC3E;IAED;;OAEG;IACH,OAAO,CAAC,cAAc;CAyBvB"}

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-dynamic-reference-resolver.js

@@ -1,27 +1,6 @@
 import { SimSsmParameterVersionNotFound } from "../../error/sim-ssm.error.js";
-/** The characters CloudFormation documents a referenced parameter name as. */
-const ssmReferenceName = /^[a-zA-Z0-9_.\-/]+$/;
-/** The version selector, which CloudFormation documents as an integer. */
-const ssmReferenceVersion = /^\d+$/;
-/**
- * Read a reference body as a parameter name and an optional version.
- *
- * A parameter name holds no colon, so the last one always opens the version.
- */
-function parseSsmReferenceBody(body) {
-    const colon = body.lastIndexOf(":");
-    if (colon === -1) {
-        return ssmReferenceName.test(body)
-            ? { name: body, version: undefined }
-            : undefined;
-    }
-    const name = body.slice(0, colon);
-    const version = body.slice(colon + 1);
-    if (!ssmReferenceName.test(name) || !ssmReferenceVersion.test(version)) {
-        return undefined;
-    }
-    return { name, version };
-}
+import { parseSimCfnSsmReferenceBody } from "./sim-cfn-ssm-reference-body.js";
+import { simCfnSsmReferenceStandIn } from "./sim-cfn-ssm-reference-stand-in.js";
 /**
  * Answers `{{resolve:ssm:...}}` references from the simulated Parameter Store.
  *
@@ -44,18 +23,18 @@ export class SimCfnSsmDynamicReferenceResolver {
      * Resolve one reference to the parameter value it names.
      */
     resolve(reference) {
-        const parsed = parseSsmReferenceBody(reference.body);
+        const parsed = parseSimCfnSsmReferenceBody(reference.body);
         if (parsed === undefined) {
-            return this.standIn(reference, reference.body, `which is not the parameter name, optionally followed by an integer ` +
+            return simCfnSsmReferenceStandIn(reference, reference.body, `which is not the parameter name, optionally followed by an integer ` +
                 `version, that an ssm dynamic reference takes`);
         }
         const { name, version } = parsed;
         const parameter = this.ssm.findParameter(name);
         if (parameter === undefined) {
-            return this.standIn(reference, name, `and simulated Parameter Store holds no parameter '${name}'`);
+            return simCfnSsmReferenceStandIn(reference, name, `and simulated Parameter Store holds no parameter '${name}'`);
         }
         if (parameter.type.value === "SecureString") {
-            return this.standIn(reference, name, `and '${name}' is a SecureString, which real CloudFormation reads ` +
+            return simCfnSsmReferenceStandIn(reference, name, `and '${name}' is a SecureString, which real CloudFormation reads ` +
                 `through an ssm-secure reference`);
         }
         return this.parameterValue(reference, parameter, name, version);
@@ -75,21 +54,8 @@ export class SimCfnSsmDynamicReferenceResolver {
             if (!(error instanceof SimSsmParameterVersionNotFound)) {
                 throw error;
             }
-            return this.standIn(reference, name, `and '${name}' has no version ${version}`);
+            return simCfnSsmReferenceStandIn(reference, name, `and '${name}' has no version ${version}`);
         }
     }
-    /**
-     * The value a reference Parameter Store could not answer resolves to.
-     *
-     * The shape follows CDK, which fills an unresolved context lookup with
-     * `dummy-value-for-<name>`. A test reading one back sees where it came from.
-     */
-    standIn(reference, name, reason) {
-        return {
-            value: `dummy-value-for-${name}`,
-            reason: `holds ${reference.text}, ${reason}, so the Resource is created ` +
-                `with a stand-in value`,
-        };
-    }
 }
 //# sourceMappingURL=sim-cfn-ssm-dynamic-reference-resolver.js.map

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-dynamic-reference-resolver.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-ssm-dynamic-reference-resolver.js","sourceRoot":"","sources":["../../../../../src/service/ssm/cfn/dynamic/sim-cfn-ssm-dynamic-reference-resolver.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,8BAA8B,EAAE,MAAM,8BAA8B,CAAC;AAI9E,8EAA8E;AAC9E,MAAM,gBAAgB,GAAG,qBAAqB,CAAC;AAE/C,0EAA0E;AAC1E,MAAM,mBAAmB,GAAG,OAAO,CAAC;AAQpC;;;;GAIG;AACH,SAAS,qBAAqB,CAC5B,IAAY;IAEZ,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAEpC,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;QACjB,OAAO,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;YAChC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE;YACpC,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IAEtC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACvE,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC;AAMD;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,iCAAiC;IAC3B,GAAG,CAAS;IAE7B,YAAY,UAAuD;QACjE,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,SAAiC;QACvC,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAErD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC,OAAO,CACjB,SAAS,EACT,SAAS,CAAC,IAAI,EACd,qEAAqE;gBACnE,8CAA8C,CACjD,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;QACjC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QAE/C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC,OAAO,CACjB,SAAS,EACT,IAAI,EACJ,qDAAqD,IAAI,GAAG,CAC7D,CAAC;QACJ,CAAC;QAED,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,KAAK,cAAc,EAAE,CAAC;YAC5C,OAAO,IAAI,CAAC,OAAO,CACjB,SAAS,EACT,IAAI,EACJ,QAAQ,IAAI,uDAAuD;gBACjE,iCAAiC,CACpC,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACK,cAAc,CACpB,SAAiC,EACjC,SAA0B,EAC1B,IAAY,EACZ,OAA2B;QAE3B,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACzD,CAAC;QAED,IAAI,CAAC;YACH,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QAC3E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,wEAAwE;YACxE,IAAI,CAAC,CAAC,KAAK,YAAY,8BAA8B,CAAC,EAAE,CAAC;gBACvD,MAAM,KAAK,CAAC;YACd,CAAC;YAED,OAAO,IAAI,CAAC,OAAO,CACjB,SAAS,EACT,IAAI,EACJ,QAAQ,IAAI,oBAAoB,OAAO,EAAE,CAC1C,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,OAAO,CACb,SAAiC,EACjC,IAAY,EACZ,MAAc;QAEd,OAAO;YACL,KAAK,EAAE,mBAAmB,IAAI,EAAE;YAChC,MAAM,EACJ,SAAS,SAAS,CAAC,IAAI,KAAK,MAAM,+BAA+B;gBACjE,uBAAuB;SAC1B,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-cfn-ssm-dynamic-reference-resolver.js","sourceRoot":"","sources":["../../../../../src/service/ssm/cfn/dynamic/sim-cfn-ssm-dynamic-reference-resolver.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,8BAA8B,EAAE,MAAM,8BAA8B,CAAC;AAG9E,OAAO,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AAC9E,OAAO,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAMhF;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,iCAAiC;IAC3B,GAAG,CAAS;IAE7B,YAAY,UAAuD;QACjE,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,SAAiC;QACvC,MAAM,MAAM,GAAG,2BAA2B,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAE3D,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,yBAAyB,CAC9B,SAAS,EACT,SAAS,CAAC,IAAI,EACd,qEAAqE;gBACnE,8CAA8C,CACjD,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;QACjC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QAE/C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,yBAAyB,CAC9B,SAAS,EACT,IAAI,EACJ,qDAAqD,IAAI,GAAG,CAC7D,CAAC;QACJ,CAAC;QAED,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,KAAK,cAAc,EAAE,CAAC;YAC5C,OAAO,yBAAyB,CAC9B,SAAS,EACT,IAAI,EACJ,QAAQ,IAAI,uDAAuD;gBACjE,iCAAiC,CACpC,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACK,cAAc,CACpB,SAAiC,EACjC,SAA0B,EAC1B,IAAY,EACZ,OAA2B;QAE3B,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACzD,CAAC;QAED,IAAI,CAAC;YACH,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QAC3E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,wEAAwE;YACxE,IAAI,CAAC,CAAC,KAAK,YAAY,8BAA8B,CAAC,EAAE,CAAC;gBACvD,MAAM,KAAK,CAAC;YACd,CAAC;YAED,OAAO,yBAAyB,CAC9B,SAAS,EACT,IAAI,EACJ,QAAQ,IAAI,oBAAoB,OAAO,EAAE,CAC1C,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-reference-body.d.ts

@@ -0,0 +1,14 @@
+/** A reference body read as the parameter name and the version after it. */
+export interface SimCfnSsmReferenceBody {
+    readonly name: string;
+    readonly version: string | undefined;
+}
+/**
+ * Read a reference body as a parameter name and an optional version.
+ *
+ * A parameter name holds no colon, so the last one always opens the version.
+ * `ssm` and `ssm-secure` references take the same body, and read it the same
+ * way.
+ */
+export declare function parseSimCfnSsmReferenceBody(body: string): SimCfnSsmReferenceBody | undefined;
+//# sourceMappingURL=sim-cfn-ssm-reference-body.d.ts.map

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-reference-body.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-ssm-reference-body.d.ts","sourceRoot":"","sources":["../../../../../src/service/ssm/cfn/dynamic/sim-cfn-ssm-reference-body.ts"],"names":[],"mappings":"AAMA,4EAA4E;AAC5E,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,MAAM,GACX,sBAAsB,GAAG,SAAS,CAiBpC"}

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-reference-body.js

@@ -0,0 +1,26 @@
+/** The characters CloudFormation documents a referenced parameter name as. */
+const ssmReferenceName = /^[a-zA-Z0-9_.\-/]+$/;
+/** The version selector, which CloudFormation documents as an integer. */
+const ssmReferenceVersion = /^\d+$/;
+/**
+ * Read a reference body as a parameter name and an optional version.
+ *
+ * A parameter name holds no colon, so the last one always opens the version.
+ * `ssm` and `ssm-secure` references take the same body, and read it the same
+ * way.
+ */
+export function parseSimCfnSsmReferenceBody(body) {
+    const colon = body.lastIndexOf(":");
+    if (colon === -1) {
+        return ssmReferenceName.test(body)
+            ? { name: body, version: undefined }
+            : undefined;
+    }
+    const name = body.slice(0, colon);
+    const version = body.slice(colon + 1);
+    if (!ssmReferenceName.test(name) || !ssmReferenceVersion.test(version)) {
+        return undefined;
+    }
+    return { name, version };
+}
+//# sourceMappingURL=sim-cfn-ssm-reference-body.js.map

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-reference-body.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-ssm-reference-body.js","sourceRoot":"","sources":["../../../../../src/service/ssm/cfn/dynamic/sim-cfn-ssm-reference-body.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,MAAM,gBAAgB,GAAG,qBAAqB,CAAC;AAE/C,0EAA0E;AAC1E,MAAM,mBAAmB,GAAG,OAAO,CAAC;AAQpC;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CACzC,IAAY;IAEZ,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAEpC,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;QACjB,OAAO,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;YAChC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE;YACpC,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IAEtC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACvE,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC"}

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-reference-stand-in.d.ts

@@ -0,0 +1,11 @@
+import type { SimCfnDynamicReference, SimCfnDynamicReferenceResolution } from "../../../cloudformation/template/dynamic/sim-cfn-dynamic-reference.type.js";
+/**
+ * The value a reference Parameter Store could not answer resolves to.
+ *
+ * The shape follows CDK, which fills an unresolved context lookup with
+ * `dummy-value-for-<name>`. A test reading one back sees where it came from.
+ * `ssm` and `ssm-secure` references both take this path, and both record the
+ * reason against the property that held the reference.
+ */
+export declare function simCfnSsmReferenceStandIn(reference: SimCfnDynamicReference, name: string, reason: string): SimCfnDynamicReferenceResolution;
+//# sourceMappingURL=sim-cfn-ssm-reference-stand-in.d.ts.map

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-reference-stand-in.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-ssm-reference-stand-in.d.ts","sourceRoot":"","sources":["../../../../../src/service/ssm/cfn/dynamic/sim-cfn-ssm-reference-stand-in.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,sBAAsB,EACtB,gCAAgC,EACjC,MAAM,4EAA4E,CAAC;AAEpF;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,sBAAsB,EACjC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,GACb,gCAAgC,CAOlC"}

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-reference-stand-in.js

@@ -0,0 +1,16 @@
+/**
+ * The value a reference Parameter Store could not answer resolves to.
+ *
+ * The shape follows CDK, which fills an unresolved context lookup with
+ * `dummy-value-for-<name>`. A test reading one back sees where it came from.
+ * `ssm` and `ssm-secure` references both take this path, and both record the
+ * reason against the property that held the reference.
+ */
+export function simCfnSsmReferenceStandIn(reference, name, reason) {
+    return {
+        value: `dummy-value-for-${name}`,
+        reason: `holds ${reference.text}, ${reason}, so the Resource is created ` +
+            `with a stand-in value`,
+    };
+}
+//# sourceMappingURL=sim-cfn-ssm-reference-stand-in.js.map

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-reference-stand-in.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-ssm-reference-stand-in.js","sourceRoot":"","sources":["../../../../../src/service/ssm/cfn/dynamic/sim-cfn-ssm-reference-stand-in.ts"],"names":[],"mappings":"AAKA;;;;;;;GAOG;AACH,MAAM,UAAU,yBAAyB,CACvC,SAAiC,EACjC,IAAY,EACZ,MAAc;IAEd,OAAO;QACL,KAAK,EAAE,mBAAmB,IAAI,EAAE;QAChC,MAAM,EACJ,SAAS,SAAS,CAAC,IAAI,KAAK,MAAM,+BAA+B;YACjE,uBAAuB;KAC1B,CAAC;AACJ,CAAC"}

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-secure-dynamic-reference-resolver.d.ts

@@ -0,0 +1,40 @@
+import type { SimCfnDynamicReference, SimCfnDynamicReferenceResolution, SimCfnDynamicReferenceResolver, SimCfnDynamicReferenceSite } from "../../../cloudformation/template/dynamic/sim-cfn-dynamic-reference.type.js";
+import type { SimSsm } from "../../sim-ssm.js";
+interface SimCfnSsmSecureDynamicReferenceResolverProperties {
+    readonly ssm: SimSsm;
+}
+/**
+ * Answers `{{resolve:ssm-secure:...}}` references from the simulated Parameter
+ * Store.
+ *
+ * The parameter is read the way `GetParameter` with `WithDecryption` reads it,
+ * as the caller deploying the Stack, so the value comes back decrypted through
+ * the simulated KMS key it was written under. A caller the key does not admit
+ * is denied here, which is the failure a real deployment hits. Decrypting
+ * cannot be done synchronously, so the answer comes back as a promise for the
+ * CloudFormation engine to wait on.
+ *
+ * A reference the template had no business writing fails the Resource, which
+ * `sim-cfn-ssm-secure-refusals.ts` holds the rules for. Everything else
+ * Parameter Store cannot answer becomes a stand-in value carrying a reason. A
+ * template naming parameters a test never created still deploys, and the
+ * Resource records what it was given instead.
+ */
+export declare class SimCfnSsmSecureDynamicReferenceResolver implements SimCfnDynamicReferenceResolver {
+    private readonly ssm;
+    constructor(properties: SimCfnSsmSecureDynamicReferenceResolverProperties);
+    /**
+     * Resolve one reference to the decrypted parameter value it names.
+     *
+     * Where the reference sits is checked before anything is read, so a template
+     * writing one somewhere CloudFormation refuses it fails without a parameter
+     * being touched.
+     */
+    resolve(reference: SimCfnDynamicReference, site: SimCfnDynamicReferenceSite): SimCfnDynamicReferenceResolution | Promise<SimCfnDynamicReferenceResolution>;
+    /**
+     * Read the version the reference selects, or the current one, decrypted.
+     */
+    private decrypted;
+}
+export {};
+//# sourceMappingURL=sim-cfn-ssm-secure-dynamic-reference-resolver.d.ts.map

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-secure-dynamic-reference-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-ssm-secure-dynamic-reference-resolver.d.ts","sourceRoot":"","sources":["../../../../../src/service/ssm/cfn/dynamic/sim-cfn-ssm-secure-dynamic-reference-resolver.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,sBAAsB,EACtB,gCAAgC,EAChC,8BAA8B,EAC9B,0BAA0B,EAC3B,MAAM,4EAA4E,CAAC;AAEpF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAQ/C,UAAU,iDAAiD;IACzD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,uCAAwC,YAAW,8BAA8B;IAC5F,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAE7B,YAAY,UAAU,EAAE,iDAAiD,EAExE;IAED;;;;;;OAMG;IACH,OAAO,CACL,SAAS,EAAE,sBAAsB,EACjC,IAAI,EAAE,0BAA0B,GAE9B,gCAAgC,GAChC,OAAO,CAAC,gCAAgC,CAAC,CAe5C;IAED;;OAEG;YACW,SAAS;CA+BxB"}