@kensio/yulin 1.19.4 → 1.20.1

package/dist/service/wafv2/statement/sim-waf-logical-statement.js

@@ -8,29 +8,40 @@ import { invalidSimWafRule } from "./sim-waf-rule-refusals.js";
  */
 export function compileSimWafLogicalStatement(statement, scope) {
     if (statement.AndStatement !== undefined) {
-        const matchers = compileAll(statement.AndStatement.Statements, scope);
+        const matchers = compileAll("AndStatement", statement.AndStatement.Statements, scope);
         return (request) => matchers.every((matches) => matches(request));
     }
     if (statement.OrStatement !== undefined) {
-        const matchers = compileAll(statement.OrStatement.Statements, scope);
+        const matchers = compileAll("OrStatement", statement.OrStatement.Statements, scope);
         return (request) => matchers.some((matches) => matches(request));
     }
     if (statement.NotStatement !== undefined) {
-        const matches = compileSimWafStatement(statement.NotStatement.Statement, scope);
+        const negated = statement.NotStatement.Statement;
+        // Named here rather than left to `compileSimWafStatement`, which would
+        // report the rule as having no statement at all and send the reader to the
+        // wrong place in a rule holding several.
+        if (negated === undefined) {
+            invalidSimWafRule(scope.ruleName, "A NotStatement needs the one statement it negates");
+        }
+        const matches = compileSimWafStatement(negated, scope);
         return (request) => !matches(request);
     }
     invalidSimWafRule(scope.ruleName, "The statement names no statement kind");
 }
 /**
- * Compile the statements a logical statement joins, refusing an empty list.
+ * Compile the statements a logical statement joins, refusing fewer than two.
  *
- * Real WAF requires at least two, and an `AndStatement` with none would
- * otherwise match every request while looking like it narrowed one.
+ * Real WAF holds this minimum hard enough to refuse the whole web ACL over it,
+ * answering `OR_STATEMENT` and a threshold setting. A rule joining one
+ * statement evaluates as that statement on its own, and an `AndStatement` with
+ * an empty list would match every request while looking like it narrowed one.
  */
-function compileAll(statements, scope) {
-    if (statements === undefined || statements.length === 0) {
-        invalidSimWafRule(scope.ruleName, "An AndStatement or OrStatement needs statements to join");
+function compileAll(kind, statements, scope) {
+    const joined = statements ?? [];
+    if (joined.length < 2) {
+        invalidSimWafRule(scope.ruleName, `An ${kind} needs at least two statements to join, and this one has ` +
+            `${joined.length}`);
     }
-    return statements.map((statement) => compileSimWafStatement(statement, scope));
+    return joined.map((statement) => compileSimWafStatement(statement, scope));
 }
 //# sourceMappingURL=sim-waf-logical-statement.js.map

package/dist/service/wafv2/statement/sim-waf-logical-statement.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-waf-logical-statement.js","sourceRoot":"","sources":["../../../../src/service/wafv2/statement/sim-waf-logical-statement.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,GAEvB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAG/D;;;;;GAKG;AACH,MAAM,UAAU,6BAA6B,CAC3C,SAA+B,EAC/B,KAA2B;IAE3B,IAAI,SAAS,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,UAAU,CAAC,SAAS,CAAC,YAAY,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAEtE,OAAO,CAAC,OAAO,EAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7E,CAAC;IAED,IAAI,SAAS,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,UAAU,CAAC,SAAS,CAAC,WAAW,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAErE,OAAO,CAAC,OAAO,EAAW,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,IAAI,SAAS,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,sBAAsB,CACpC,SAAS,CAAC,YAAY,CAAC,SAAS,EAChC,KAAK,CACN,CAAC;QAEF,OAAO,CAAC,OAAO,EAAW,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,CAAC;IAED,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE,uCAAuC,CAAC,CAAC;AAC7E,CAAC;AAED;;;;;GAKG;AACH,SAAS,UAAU,CACjB,UAAuD,EACvD,KAA2B;IAE3B,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxD,iBAAiB,CACf,KAAK,CAAC,QAAQ,EACd,yDAAyD,CAC1D,CAAC;IACJ,CAAC;IAED,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAClC,sBAAsB,CAAC,SAAS,EAAE,KAAK,CAAC,CACzC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"sim-waf-logical-statement.js","sourceRoot":"","sources":["../../../../src/service/wafv2/statement/sim-waf-logical-statement.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,GAEvB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAG/D;;;;;GAKG;AACH,MAAM,UAAU,6BAA6B,CAC3C,SAA+B,EAC/B,KAA2B;IAE3B,IAAI,SAAS,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,UAAU,CACzB,cAAc,EACd,SAAS,CAAC,YAAY,CAAC,UAAU,EACjC,KAAK,CACN,CAAC;QAEF,OAAO,CAAC,OAAO,EAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7E,CAAC;IAED,IAAI,SAAS,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,UAAU,CACzB,aAAa,EACb,SAAS,CAAC,WAAW,CAAC,UAAU,EAChC,KAAK,CACN,CAAC;QAEF,OAAO,CAAC,OAAO,EAAW,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,IAAI,SAAS,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,SAAS,CAAC,YAAY,CAAC,SAAS,CAAC;QAEjD,uEAAuE;QACvE,2EAA2E;QAC3E,yCAAyC;QACzC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,iBAAiB,CACf,KAAK,CAAC,QAAQ,EACd,mDAAmD,CACpD,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,sBAAsB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAEvD,OAAO,CAAC,OAAO,EAAW,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,CAAC;IAED,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE,uCAAuC,CAAC,CAAC;AAC7E,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,UAAU,CACjB,IAAoC,EACpC,UAAuD,EACvD,KAA2B;IAE3B,MAAM,MAAM,GAAG,UAAU,IAAI,EAAE,CAAC;IAEhC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,iBAAiB,CACf,KAAK,CAAC,QAAQ,EACd,MAAM,IAAI,2DAA2D;YACnE,GAAG,MAAM,CAAC,MAAM,EAAE,CACrB,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,sBAAsB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;AAC7E,CAAC"}

package/dist/util/rule/sim-declared-result-rules.d.ts

@@ -0,0 +1,55 @@
+/**
+ * The keys one request is matched on, in the order the tiers are tried.
+ *
+ * A request carrying nothing for a tier skips it. That is the ordinary case
+ * rather than an edge: a Rekognition image passed as bytes has no S3 object
+ * name, and a Personalize related-items request names no user.
+ */
+export interface SimDeclaredResultKeys {
+    readonly leading?: string | undefined;
+    readonly trailing?: string | undefined;
+}
+/**
+ * The results a simulated operation answers with, by the keys a request
+ * carries.
+ *
+ * A service that answers from declarations rather than from data needs the
+ * same matcher each time. A request carries one or two identifying keys, a
+ * test declares what each of them answers with, and everything else gets the
+ * default. Simulated Rekognition matches an image by content hash and then by
+ * S3 object name; simulated Personalize matches a recommendation request by
+ * item and then by user.
+ *
+ * There are three kinds of rule and one order between them: a leading key rule
+ * wins, then a trailing key rule, then the default. Matching is exact, with no
+ * pattern syntax, so which rule applies never depends on how specific a
+ * pattern is thought to be.
+ *
+ * The keys are matched, not validated. What counts as a key at all belongs to
+ * the service declaring the rule, which is where a malformed one is refused.
+ */
+export declare class SimDeclaredResultRules<TResult> {
+    private defaultResult;
+    private readonly byLeadingKey;
+    private readonly byTrailingKey;
+    constructor(defaultResult: TResult);
+    /**
+     * Answer with this result for any request no other rule matches.
+     */
+    byDefault(result: TResult): void;
+    /**
+     * Answer with this result for a request carrying this exact leading key.
+     */
+    onLeadingKey(key: string, result: TResult): void;
+    /**
+     * Answer with this result for a request carrying this exact trailing key,
+     * where no leading key rule matched it first.
+     */
+    onTrailingKey(key: string, result: TResult): void;
+    /**
+     * The result for one request.
+     */
+    resultFor(keys: SimDeclaredResultKeys): TResult;
+    private declaredFor;
+}
+//# sourceMappingURL=sim-declared-result-rules.d.ts.map

package/dist/util/rule/sim-declared-result-rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-declared-result-rules.d.ts","sourceRoot":"","sources":["../../../src/util/rule/sim-declared-result-rules.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACxC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBAAa,sBAAsB,CAAC,OAAO;IACzC,OAAO,CAAC,aAAa,CAAU;IAC/B,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA8B;IAC3D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA8B;IAE5D,YAAY,aAAa,EAAE,OAAO,EAEjC;IAED;;OAEG;IACH,SAAS,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,CAE/B;IAED;;OAEG;IACH,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,IAAI,CAE/C;IAED;;;OAGG;IACH,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,IAAI,CAEhD;IAED;;OAEG;IACH,SAAS,CAAC,IAAI,EAAE,qBAAqB,GAAG,OAAO,CAM9C;IAED,OAAO,CAAC,WAAW;CAUpB"}

package/dist/util/rule/sim-declared-result-rules.js

@@ -0,0 +1,61 @@
+/**
+ * The results a simulated operation answers with, by the keys a request
+ * carries.
+ *
+ * A service that answers from declarations rather than from data needs the
+ * same matcher each time. A request carries one or two identifying keys, a
+ * test declares what each of them answers with, and everything else gets the
+ * default. Simulated Rekognition matches an image by content hash and then by
+ * S3 object name; simulated Personalize matches a recommendation request by
+ * item and then by user.
+ *
+ * There are three kinds of rule and one order between them: a leading key rule
+ * wins, then a trailing key rule, then the default. Matching is exact, with no
+ * pattern syntax, so which rule applies never depends on how specific a
+ * pattern is thought to be.
+ *
+ * The keys are matched, not validated. What counts as a key at all belongs to
+ * the service declaring the rule, which is where a malformed one is refused.
+ */
+export class SimDeclaredResultRules {
+    defaultResult;
+    byLeadingKey = new Map();
+    byTrailingKey = new Map();
+    constructor(defaultResult) {
+        this.defaultResult = defaultResult;
+    }
+    /**
+     * Answer with this result for any request no other rule matches.
+     */
+    byDefault(result) {
+        this.defaultResult = result;
+    }
+    /**
+     * Answer with this result for a request carrying this exact leading key.
+     */
+    onLeadingKey(key, result) {
+        this.byLeadingKey.set(key, result);
+    }
+    /**
+     * Answer with this result for a request carrying this exact trailing key,
+     * where no leading key rule matched it first.
+     */
+    onTrailingKey(key, result) {
+        this.byTrailingKey.set(key, result);
+    }
+    /**
+     * The result for one request.
+     */
+    resultFor(keys) {
+        return (this.declaredFor(this.byLeadingKey, keys.leading) ??
+            this.declaredFor(this.byTrailingKey, keys.trailing) ??
+            this.defaultResult);
+    }
+    declaredFor(rules, key) {
+        if (key === undefined) {
+            return undefined;
+        }
+        return rules.get(key);
+    }
+}
+//# sourceMappingURL=sim-declared-result-rules.js.map

package/dist/util/rule/sim-declared-result-rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-declared-result-rules.js","sourceRoot":"","sources":["../../../src/util/rule/sim-declared-result-rules.ts"],"names":[],"mappings":"AAYA;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,OAAO,sBAAsB;IACzB,aAAa,CAAU;IACd,YAAY,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC1C,aAAa,GAAG,IAAI,GAAG,EAAmB,CAAC;IAE5D,YAAY,aAAsB;QAChC,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,MAAe;QACvB,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,GAAW,EAAE,MAAe;QACvC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC;IAED;;;OAGG;IACH,aAAa,CAAC,GAAW,EAAE,MAAe;QACxC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,IAA2B;QACnC,OAAO,CACL,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC;YACjD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC;YACnD,IAAI,CAAC,aAAa,CACnB,CAAC;IACJ,CAAC;IAEO,WAAW,CACjB,KAAmC,EACnC,GAAuB;QAEvB,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kensio/yulin",
-  "version": "1.19.4",
+  "version": "1.20.1",
   "description": "AWS system behaviour simulation for isolated unit testing",
   "repository": "https://github.com/KensioSoftware/yulin",
   "homepage": "https://yulinsim.dev/",
@@ -55,6 +55,10 @@
       "import": "./dist/service/apigatewayv2/index.js",
       "types": "./dist/service/apigatewayv2/index.d.ts"
     },
+    "./bedrock": {
+      "import": "./dist/service/bedrock/index.js",
+      "types": "./dist/service/bedrock/index.d.ts"
+    },
     "./cloudformation": {
       "import": "./dist/service/cloudformation/index.js",
       "types": "./dist/service/cloudformation/index.d.ts"
@@ -95,6 +99,10 @@
       "import": "./dist/config/eslint/index.js",
       "types": "./dist/config/eslint/index.d.ts"
     },
+    "./firehose": {
+      "import": "./dist/service/firehose/index.js",
+      "types": "./dist/service/firehose/index.d.ts"
+    },
     "./eventbridge": {
       "import": "./dist/service/eventbridge/index.js",
       "types": "./dist/service/eventbridge/index.d.ts"
@@ -103,6 +111,10 @@
       "import": "./dist/service/iam/index.js",
       "types": "./dist/service/iam/index.d.ts"
     },
+    "./kinesis": {
+      "import": "./dist/service/kinesis/index.js",
+      "types": "./dist/service/kinesis/index.d.ts"
+    },
     "./kms": {
       "import": "./dist/service/kms/index.js",
       "types": "./dist/service/kms/index.d.ts"
@@ -121,6 +133,10 @@
     },
     "./oxlint/cffjs2.oxlintrc.json": "./dist/config/oxlint/cffjs2.oxlintrc.json",
     "./package.json": "./package.json",
+    "./personalize": {
+      "import": "./dist/service/personalize/index.js",
+      "types": "./dist/service/personalize/index.d.ts"
+    },
     "./rekognition": {
       "import": "./dist/service/rekognition/index.js",
       "types": "./dist/service/rekognition/index.d.ts"
@@ -157,6 +173,10 @@
       "import": "./dist/service/sqs/index.js",
       "types": "./dist/service/sqs/index.d.ts"
     },
+    "./stepfunctions": {
+      "import": "./dist/service/stepfunctions/index.js",
+      "types": "./dist/service/stepfunctions/index.d.ts"
+    },
     "./ssm": {
       "import": "./dist/service/ssm/index.js",
       "types": "./dist/service/ssm/index.d.ts"
@@ -193,6 +213,7 @@
     "@aws-sdk/client-acm": "^3.1101.0",
     "@aws-sdk/client-api-gateway": "^3.1112.0",
     "@aws-sdk/client-apigatewayv2": "^3.1101.0",
+    "@aws-sdk/client-bedrock-runtime": "^3.1115.0",
     "@aws-sdk/client-cloudformation": "^3.1101.0",
     "@aws-sdk/client-cloudfront": "^3.1101.0",
     "@aws-sdk/client-cloudfront-keyvaluestore": "^3.1108.0",
@@ -204,15 +225,21 @@
     "@aws-sdk/client-ecs": "^3.1101.0",
     "@aws-sdk/client-elastic-load-balancing-v2": "^3.1109.0",
     "@aws-sdk/client-eventbridge": "^3.1109.0",
+    "@aws-sdk/client-firehose": "^3.1115.0",
     "@aws-sdk/client-iam": "^3.1101.0",
+    "@aws-sdk/client-kinesis": "^3.1115.0",
     "@aws-sdk/client-kms": "^3.1101.0",
     "@aws-sdk/client-lambda": "^3.1101.0",
+    "@aws-sdk/client-personalize": "^3.1115.0",
+    "@aws-sdk/client-personalize-events": "^3.1115.0",
+    "@aws-sdk/client-personalize-runtime": "^3.1115.0",
     "@aws-sdk/client-rekognition": "^3.1101.0",
     "@aws-sdk/client-route-53": "^3.1101.0",
     "@aws-sdk/client-s3": "^3.1101.0",
     "@aws-sdk/client-scheduler": "^3.1109.0",
     "@aws-sdk/client-secrets-manager": "^3.1101.0",
     "@aws-sdk/client-sesv2": "^3.1111.0",
+    "@aws-sdk/client-sfn": "^3.1115.0",
     "@aws-sdk/client-sns": "^3.1104.0",
     "@aws-sdk/client-sqs": "^3.1101.0",
     "@aws-sdk/client-ssm": "^3.1101.0",