@kensio/yulin 1.2.0 → 1.3.0

package/dist/service/dynamodb/cfn/table/sim-cfn-dynamodb-table-property-rules.js

@@ -1,5 +1,6 @@
 import { SimCfnDynamoDbTableIndexRules } from "./sim-cfn-dynamodb-table-index-rules.js";
 import { dynamoDbTablePropertyError, dynamoDbTableUnsimulatedPropertyError, } from "./sim-cfn-dynamodb-table-property-error.js";
+import { SimCfnDynamoDbTableStreamRules } from "./sim-cfn-dynamodb-table-stream-rules.js";
 /**
  * The AWS::DynamoDB::Table properties this simulation acts on.
  *
@@ -15,6 +16,7 @@ const simulatedPropertyNames = new Set([
     "KeySchema",
     "LocalSecondaryIndexes",
     "ProvisionedThroughput",
+    "StreamSpecification",
     "TableClass",
     "TableName",
     "Tags",
@@ -23,9 +25,10 @@ const simulatedPropertyNames = new Set([
 /**
  * Real AWS::DynamoDB::Table properties this simulation does not model.
  *
- * Each one changes what the table does. A table deployed without the stream its
- * changes were meant to be published to would leave whatever reads that stream
- * waiting, so the Resource is skipped rather than deployed as something else.
+ * Each one changes what the table does. A table deployed without the Kinesis
+ * stream its changes were meant to be published to would leave whatever reads
+ * that stream waiting, so the Resource is skipped rather than deployed as
+ * something else.
  */
 const unsimulatedPropertyNames = new Set([
     "ContributorInsightsSpecification",
@@ -35,7 +38,6 @@ const unsimulatedPropertyNames = new Set([
     "PointInTimeRecoverySpecification",
     "ResourcePolicy",
     "SSESpecification",
-    "StreamSpecification",
     "WarmThroughput",
 ]);
 /**
@@ -47,8 +49,8 @@ const unsimulatedPropertyNames = new Set([
  * fails the Resource instead, because that is a template real CloudFormation
  * would refuse too.
  *
- * The two index properties carry properties of their own, which are held to the
- * same rule a level down.
+ * The two index properties and the stream specification carry properties of
+ * their own, which are held to the same rule a level down.
  */
 export class SimCfnDynamoDbTablePropertyRules {
     logicalId;
@@ -64,7 +66,7 @@ export class SimCfnDynamoDbTablePropertyRules {
         for (const name of this.values.names) {
             this.assertSimulatedProperty(name);
         }
-        this.assertSimulatedIndexes();
+        this.assertSimulatedMembers();
     }
     assertSimulatedProperty(name) {
         if (simulatedPropertyNames.has(name)) {
@@ -76,11 +78,14 @@ export class SimCfnDynamoDbTablePropertyRules {
         throw dynamoDbTablePropertyError(this.logicalId, `${name} is not an AWS::DynamoDB::Table property`);
     }
     /**
-     * Refuse what the entries of the two index properties ask for and cannot get.
+     * Refuse what the properties carrying properties of their own ask for and
+     * cannot get: the two index lists, and the stream specification.
      */
-    assertSimulatedIndexes() {
-        SimCfnDynamoDbTableIndexRules.global(this.logicalId).assertSimulated(this.values.list("GlobalSecondaryIndexes"));
-        SimCfnDynamoDbTableIndexRules.local(this.logicalId).assertSimulated(this.values.list("LocalSecondaryIndexes"));
+    assertSimulatedMembers() {
+        const logicalId = this.logicalId;
+        SimCfnDynamoDbTableIndexRules.global(logicalId).assertSimulated(this.values.list("GlobalSecondaryIndexes"));
+        SimCfnDynamoDbTableIndexRules.local(logicalId).assertSimulated(this.values.list("LocalSecondaryIndexes"));
+        new SimCfnDynamoDbTableStreamRules(logicalId).assertSimulated(this.values);
     }
 }
 //# sourceMappingURL=sim-cfn-dynamodb-table-property-rules.js.map

package/dist/service/dynamodb/cfn/table/sim-cfn-dynamodb-table-property-rules.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-dynamodb-table-property-rules.js","sourceRoot":"","sources":["../../../../../src/service/dynamodb/cfn/table/sim-cfn-dynamodb-table-property-rules.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,MAAM,yCAAyC,CAAC;AACxF,OAAO,EACL,0BAA0B,EAC1B,qCAAqC,GACtC,MAAM,4CAA4C,CAAC;AAGpD;;;;;;GAMG;AACH,MAAM,sBAAsB,GAAwB,IAAI,GAAG,CAAC;IAC1D,sBAAsB;IACtB,aAAa;IACb,2BAA2B;IAC3B,wBAAwB;IACxB,WAAW;IACX,uBAAuB;IACvB,uBAAuB;IACvB,YAAY;IACZ,WAAW;IACX,MAAM;IACN,yBAAyB;CAC1B,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,wBAAwB,GAAwB,IAAI,GAAG,CAAC;IAC5D,kCAAkC;IAClC,2BAA2B;IAC3B,4BAA4B;IAC5B,oBAAoB;IACpB,kCAAkC;IAClC,gBAAgB;IAChB,kBAAkB;IAClB,qBAAqB;IACrB,gBAAgB;CACjB,CAAC,CAAC;AAOH;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,gCAAgC;IAC1B,SAAS,CAAS;IAClB,MAAM,CAA4B;IAEnD,YAAY,UAAsD;QAChE,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,eAAe;QACb,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACrC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC;QAED,IAAI,CAAC,sBAAsB,EAAE,CAAC;IAChC,CAAC;IAEO,uBAAuB,CAAC,IAAY;QAC1C,IAAI,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,OAAO;QACT,CAAC;QAED,IAAI,wBAAwB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,MAAM,qCAAqC,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,0BAA0B,CAC9B,IAAI,CAAC,SAAS,EACd,GAAG,IAAI,0CAA0C,CAClD,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,sBAAsB;QAC5B,6BAA6B,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,eAAe,CAClE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAC3C,CAAC;QACF,6BAA6B,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,eAAe,CACjE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAC1C,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-cfn-dynamodb-table-property-rules.js","sourceRoot":"","sources":["../../../../../src/service/dynamodb/cfn/table/sim-cfn-dynamodb-table-property-rules.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,MAAM,yCAAyC,CAAC;AACxF,OAAO,EACL,0BAA0B,EAC1B,qCAAqC,GACtC,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,8BAA8B,EAAE,MAAM,0CAA0C,CAAC;AAG1F;;;;;;GAMG;AACH,MAAM,sBAAsB,GAAwB,IAAI,GAAG,CAAC;IAC1D,sBAAsB;IACtB,aAAa;IACb,2BAA2B;IAC3B,wBAAwB;IACxB,WAAW;IACX,uBAAuB;IACvB,uBAAuB;IACvB,qBAAqB;IACrB,YAAY;IACZ,WAAW;IACX,MAAM;IACN,yBAAyB;CAC1B,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,wBAAwB,GAAwB,IAAI,GAAG,CAAC;IAC5D,kCAAkC;IAClC,2BAA2B;IAC3B,4BAA4B;IAC5B,oBAAoB;IACpB,kCAAkC;IAClC,gBAAgB;IAChB,kBAAkB;IAClB,gBAAgB;CACjB,CAAC,CAAC;AAOH;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,gCAAgC;IAC1B,SAAS,CAAS;IAClB,MAAM,CAA4B;IAEnD,YAAY,UAAsD;QAChE,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,eAAe;QACb,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACrC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC;QAED,IAAI,CAAC,sBAAsB,EAAE,CAAC;IAChC,CAAC;IAEO,uBAAuB,CAAC,IAAY;QAC1C,IAAI,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,OAAO;QACT,CAAC;QAED,IAAI,wBAAwB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,MAAM,qCAAqC,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,0BAA0B,CAC9B,IAAI,CAAC,SAAS,EACd,GAAG,IAAI,0CAA0C,CAClD,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,sBAAsB;QAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAEjC,6BAA6B,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,eAAe,CAC7D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAC3C,CAAC;QACF,6BAA6B,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,eAAe,CAC5D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAC1C,CAAC;QACF,IAAI,8BAA8B,CAAC,SAAS,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7E,CAAC;CACF"}

package/dist/service/dynamodb/cfn/table/sim-cfn-dynamodb-table-stream-rules.d.ts

@@ -0,0 +1,23 @@
+import type { SimCfnDynamoDbTableValues } from "./sim-cfn-dynamodb-table-values.js";
+/**
+ * Which properties of a table's StreamSpecification simulated DynamoDB can act
+ * on.
+ *
+ * This is the table's own property rule applied a level down, as the index
+ * rules are. A real property that is not simulated skips the table, since a
+ * stream deployed without a policy the template asked for would be read by
+ * whatever that policy was meant to keep out.
+ */
+export declare class SimCfnDynamoDbTableStreamRules {
+    private readonly logicalId;
+    constructor(logicalId: string);
+    /**
+     * Refuse everything about the table's StreamSpecification that is not
+     * simulated.
+     *
+     * A table declaring no stream has nothing here to refuse.
+     */
+    assertSimulated(values: SimCfnDynamoDbTableValues): void;
+    private assertSimulatedProperty;
+}
+//# sourceMappingURL=sim-cfn-dynamodb-table-stream-rules.d.ts.map

package/dist/service/dynamodb/cfn/table/sim-cfn-dynamodb-table-stream-rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-dynamodb-table-stream-rules.d.ts","sourceRoot":"","sources":["../../../../../src/service/dynamodb/cfn/table/sim-cfn-dynamodb-table-stream-rules.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAwBpF;;;;;;;;GAQG;AACH,qBAAa,8BAA8B;IACzC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IAEnC,YAAY,SAAS,EAAE,MAAM,EAE5B;IAED;;;;;OAKG;IACH,eAAe,CAAC,MAAM,EAAE,yBAAyB,GAAG,IAAI,CAUvD;IAED,OAAO,CAAC,uBAAuB;CAqBhC"}

package/dist/service/dynamodb/cfn/table/sim-cfn-dynamodb-table-stream-rules.js

@@ -0,0 +1,62 @@
+import { dynamoDbTablePropertyError, dynamoDbTableUnsimulatedPropertyError, } from "./sim-cfn-dynamodb-table-property-error.js";
+/**
+ * The StreamSpecification properties this simulation acts on.
+ *
+ * CloudFormation's StreamSpecification is not the SDK's: it has no
+ * `StreamEnabled` field at all, so a template declaring the property at all is
+ * asking for a stream, and the view type is the only thing left to say.
+ */
+const simulatedStreamPropertyNames = new Set([
+    "StreamViewType",
+]);
+/**
+ * Real StreamSpecification properties this simulation does not model.
+ *
+ * The nested `ResourcePolicy` is a policy on the stream rather than on the
+ * table, and is a different property from the table's own `ResourcePolicy`, so
+ * it is named here rather than left to read as a property that does not exist.
+ */
+const unsimulatedStreamPropertyNames = new Set([
+    "ResourcePolicy",
+]);
+/**
+ * Which properties of a table's StreamSpecification simulated DynamoDB can act
+ * on.
+ *
+ * This is the table's own property rule applied a level down, as the index
+ * rules are. A real property that is not simulated skips the table, since a
+ * stream deployed without a policy the template asked for would be read by
+ * whatever that policy was meant to keep out.
+ */
+export class SimCfnDynamoDbTableStreamRules {
+    logicalId;
+    constructor(logicalId) {
+        this.logicalId = logicalId;
+    }
+    /**
+     * Refuse everything about the table's StreamSpecification that is not
+     * simulated.
+     *
+     * A table declaring no stream has nothing here to refuse.
+     */
+    assertSimulated(values) {
+        const specification = values.object("StreamSpecification");
+        if (specification === undefined) {
+            return;
+        }
+        for (const name of specification.names) {
+            this.assertSimulatedProperty(specification, name);
+        }
+    }
+    assertSimulatedProperty(specification, name) {
+        if (simulatedStreamPropertyNames.has(name)) {
+            return;
+        }
+        if (unsimulatedStreamPropertyNames.has(name)) {
+            throw dynamoDbTableUnsimulatedPropertyError(this.logicalId, specification.pathTo(name));
+        }
+        throw dynamoDbTablePropertyError(this.logicalId, `${specification.pathTo(name)} is not an AWS::DynamoDB::Table ` +
+            `StreamSpecification property`);
+    }
+}
+//# sourceMappingURL=sim-cfn-dynamodb-table-stream-rules.js.map

package/dist/service/dynamodb/cfn/table/sim-cfn-dynamodb-table-stream-rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-dynamodb-table-stream-rules.js","sourceRoot":"","sources":["../../../../../src/service/dynamodb/cfn/table/sim-cfn-dynamodb-table-stream-rules.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,EAC1B,qCAAqC,GACtC,MAAM,4CAA4C,CAAC;AAGpD;;;;;;GAMG;AACH,MAAM,4BAA4B,GAAwB,IAAI,GAAG,CAAC;IAChE,gBAAgB;CACjB,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,8BAA8B,GAAwB,IAAI,GAAG,CAAC;IAClE,gBAAgB;CACjB,CAAC,CAAC;AAEH;;;;;;;;GAQG;AACH,MAAM,OAAO,8BAA8B;IACxB,SAAS,CAAS;IAEnC,YAAY,SAAiB;QAC3B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;IAED;;;;;OAKG;IACH,eAAe,CAAC,MAAiC;QAC/C,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;QAE3D,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO;QACT,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,aAAa,CAAC,KAAK,EAAE,CAAC;YACvC,IAAI,CAAC,uBAAuB,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAEO,uBAAuB,CAC7B,aAAwC,EACxC,IAAY;QAEZ,IAAI,4BAA4B,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,OAAO;QACT,CAAC;QAED,IAAI,8BAA8B,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7C,MAAM,qCAAqC,CACzC,IAAI,CAAC,SAAS,EACd,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAC3B,CAAC;QACJ,CAAC;QAED,MAAM,0BAA0B,CAC9B,IAAI,CAAC,SAAS,EACd,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,kCAAkC;YAC7D,8BAA8B,CACjC,CAAC;IACJ,CAAC;CACF"}

package/dist/service/dynamodb/cfn/table/sim-cfn-dynamodb-table-stream.d.ts

@@ -0,0 +1,17 @@
+import type { SimDynamoDbStreamSpecification } from "../../stream/sim-dynamodb-stream.types.js";
+import type { SimCfnDynamoDbTableValues } from "./sim-cfn-dynamodb-table-values.js";
+/**
+ * Read the stream an AWS::DynamoDB::Table Resource asks for.
+ *
+ * CloudFormation's StreamSpecification carries no `StreamEnabled`, where the
+ * SDK's requires one, so declaring the property is how a template says it wants
+ * a stream. `StreamEnabled` is synthesized from the property being there at
+ * all, because passing the block straight through would make a table whose
+ * stream was never switched on.
+ *
+ * The view type is passed through as the template wrote it, so a template
+ * naming one that does not exist is refused in the words CreateTable refuses it
+ * in.
+ */
+export declare function readSimCfnDynamoDbTableStream(values: SimCfnDynamoDbTableValues): SimDynamoDbStreamSpecification | undefined;
+//# sourceMappingURL=sim-cfn-dynamodb-table-stream.d.ts.map

package/dist/service/dynamodb/cfn/table/sim-cfn-dynamodb-table-stream.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-dynamodb-table-stream.d.ts","sourceRoot":"","sources":["../../../../../src/service/dynamodb/cfn/table/sim-cfn-dynamodb-table-stream.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,2CAA2C,CAAC;AAChG,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAEpF;;;;;;;;;;;;GAYG;AACH,wBAAgB,6BAA6B,CAC3C,MAAM,EAAE,yBAAyB,GAChC,8BAA8B,GAAG,SAAS,CAW5C"}

package/dist/service/dynamodb/cfn/table/sim-cfn-dynamodb-table-stream.js

@@ -0,0 +1,24 @@
+/**
+ * Read the stream an AWS::DynamoDB::Table Resource asks for.
+ *
+ * CloudFormation's StreamSpecification carries no `StreamEnabled`, where the
+ * SDK's requires one, so declaring the property is how a template says it wants
+ * a stream. `StreamEnabled` is synthesized from the property being there at
+ * all, because passing the block straight through would make a table whose
+ * stream was never switched on.
+ *
+ * The view type is passed through as the template wrote it, so a template
+ * naming one that does not exist is refused in the words CreateTable refuses it
+ * in.
+ */
+export function readSimCfnDynamoDbTableStream(values) {
+    const specification = values.object("StreamSpecification");
+    if (specification === undefined) {
+        return undefined;
+    }
+    return {
+        StreamEnabled: true,
+        StreamViewType: specification.string("StreamViewType"),
+    };
+}
+//# sourceMappingURL=sim-cfn-dynamodb-table-stream.js.map

package/dist/service/dynamodb/cfn/table/sim-cfn-dynamodb-table-stream.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-dynamodb-table-stream.js","sourceRoot":"","sources":["../../../../../src/service/dynamodb/cfn/table/sim-cfn-dynamodb-table-stream.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,6BAA6B,CAC3C,MAAiC;IAEjC,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;IAE3D,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO;QACL,aAAa,EAAE,IAAI;QACnB,cAAc,EAAE,aAAa,CAAC,MAAM,CAAC,gBAAgB,CAAC;KACvD,CAAC;AACJ,CAAC"}

package/dist/service/dynamodb/command/authorize/sim-dynamodb-authorizer.d.ts

@@ -30,6 +30,17 @@ export declare class SimDynamoDbAuthorizer {
      * caller.
      */
     authorizeTable(action: string, tableName: string, caller?: SimAwsCaller): SimAwsResolvedCaller;
+    /**
+     * Ensure the caller may perform an action on a table's stream.
+     *
+     * The resource is the stream's own ARN, which is the table's ARN and then
+     * the stream's label, so a statement naming only the table does not reach it.
+     * The ARN comes from the request rather than being built here: a stream is
+     * named by an ARN a caller was handed, and one naming no stream is refused
+     * before anything looks it up, as real IAM refuses a request before the
+     * service sees it.
+     */
+    authorizeStream(action: string, streamArn: string, caller?: SimAwsCaller): SimAwsResolvedCaller;
     /**
      * Ensure the caller may perform an action that names no particular table.
      *

package/dist/service/dynamodb/command/authorize/sim-dynamodb-authorizer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-dynamodb-authorizer.d.ts","sourceRoot":"","sources":["../../../../../src/service/dynamodb/command/authorize/sim-dynamodb-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gDAAgD,CAAC;AAC3F,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAItG,UAAU,+BAA+B;IACvC,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;IACtC,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;CACvD;AAED;;;;;;GAMG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA0B;IAC9C,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA2B;IAE9D,YAAY,UAAU,EAAE,+BAA+B,EAGtD;IAED;;;;;;;;;;;OAWG;IACH,cAAc,CACZ,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,YAAY,GACpB,oBAAoB,CAMtB;IAED;;;;;OAKG;IACH,iBAAiB,CACf,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,YAAY,GACpB,oBAAoB,CAEtB;IAED,OAAO,CAAC,iBAAiB;CAiB1B"}
+{"version":3,"file":"sim-dynamodb-authorizer.d.ts","sourceRoot":"","sources":["../../../../../src/service/dynamodb/command/authorize/sim-dynamodb-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gDAAgD,CAAC;AAC3F,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAItG,UAAU,+BAA+B;IACvC,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;IACtC,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;CACvD;AAED;;;;;;GAMG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA0B;IAC9C,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA2B;IAE9D,YAAY,UAAU,EAAE,+BAA+B,EAGtD;IAED;;;;;;;;;;;OAWG;IACH,cAAc,CACZ,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,YAAY,GACpB,oBAAoB,CAMtB;IAED;;;;;;;;;OASG;IACH,eAAe,CACb,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,YAAY,GACpB,oBAAoB,CAEtB;IAED;;;;;OAKG;IACH,iBAAiB,CACf,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,YAAY,GACpB,oBAAoB,CAEtB;IAED,OAAO,CAAC,iBAAiB;CAiB1B"}

package/dist/service/dynamodb/command/authorize/sim-dynamodb-authorizer.js

@@ -29,6 +29,19 @@ export class SimDynamoDbAuthorizer {
     authorizeTable(action, tableName, caller) {
         return this.authorizeResource(action, simDynamoDbTableArn(this.accountRegionScope, tableName), caller);
     }
+    /**
+     * Ensure the caller may perform an action on a table's stream.
+     *
+     * The resource is the stream's own ARN, which is the table's ARN and then
+     * the stream's label, so a statement naming only the table does not reach it.
+     * The ARN comes from the request rather than being built here: a stream is
+     * named by an ARN a caller was handed, and one naming no stream is refused
+     * before anything looks it up, as real IAM refuses a request before the
+     * service sees it.
+     */
+    authorizeStream(action, streamArn, caller) {
+        return this.authorizeResource(action, streamArn, caller);
+    }
     /**
      * Ensure the caller may perform an action that names no particular table.
      *

package/dist/service/dynamodb/command/authorize/sim-dynamodb-authorizer.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-dynamodb-authorizer.js","sourceRoot":"","sources":["../../../../../src/service/dynamodb/command/authorize/sim-dynamodb-authorizer.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,uCAAuC,CAAC;AAO5E;;;;;;GAMG;AACH,MAAM,OAAO,qBAAqB;IACf,GAAG,CAA0B;IAC7B,kBAAkB,CAA2B;IAE9D,YAAY,UAA2C;QACrD,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;QAC1B,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;IAC1D,CAAC;IAED;;;;;;;;;;;OAWG;IACH,cAAc,CACZ,MAAc,EACd,SAAiB,EACjB,MAAqB;QAErB,OAAO,IAAI,CAAC,iBAAiB,CAC3B,MAAM,EACN,mBAAmB,CAAC,IAAI,CAAC,kBAAkB,EAAE,SAAS,CAAC,EACvD,MAAM,CACP,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,iBAAiB,CACf,MAAc,EACd,MAAqB;QAErB,OAAO,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IACrD,CAAC;IAEO,iBAAiB,CACvB,MAAc,EACd,QAAgB,EAChB,MAAgC;QAEhC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAElE,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;gBACpC,MAAM;gBACN,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;QAED,OAAO,QAAQ,CAAC,MAAM,CAAC;IACzB,CAAC;CACF"}
+{"version":3,"file":"sim-dynamodb-authorizer.js","sourceRoot":"","sources":["../../../../../src/service/dynamodb/command/authorize/sim-dynamodb-authorizer.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,uCAAuC,CAAC;AAO5E;;;;;;GAMG;AACH,MAAM,OAAO,qBAAqB;IACf,GAAG,CAA0B;IAC7B,kBAAkB,CAA2B;IAE9D,YAAY,UAA2C;QACrD,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;QAC1B,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;IAC1D,CAAC;IAED;;;;;;;;;;;OAWG;IACH,cAAc,CACZ,MAAc,EACd,SAAiB,EACjB,MAAqB;QAErB,OAAO,IAAI,CAAC,iBAAiB,CAC3B,MAAM,EACN,mBAAmB,CAAC,IAAI,CAAC,kBAAkB,EAAE,SAAS,CAAC,EACvD,MAAM,CACP,CAAC;IACJ,CAAC;IAED;;;;;;;;;OASG;IACH,eAAe,CACb,MAAc,EACd,SAAiB,EACjB,MAAqB;QAErB,OAAO,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAC3D,CAAC;IAED;;;;;OAKG;IACH,iBAAiB,CACf,MAAc,EACd,MAAqB;QAErB,OAAO,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IACrD,CAAC;IAEO,iBAAiB,CACvB,MAAc,EACd,QAAgB,EAChB,MAAgC;QAEhC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAElE,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;gBACpC,MAAM;gBACN,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;QAED,OAAO,QAAQ,CAAC,MAAM,CAAC;IACzB,CAAC;CACF"}

package/dist/service/dynamodb/command/stream/describe-stream/describe-stream.command.d.ts

@@ -0,0 +1,43 @@
+/**
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/dynamodb-streams/command/DescribeStreamCommand/
+ */
+import type { SimResponseMetadata } from "../../../../aws/metadata/response-metadata.type.js";
+import type { SimDynamoDbStreamDescription } from "../stream.types.js";
+/**
+ * Minimal structural sim DynamoDB Streams shard filter.
+ *
+ * Declared so a request asking for one is refused by name. A simulated stream
+ * has one shard and never splits, so there is no lineage for a filter to walk.
+ */
+export interface SimDynamoDbShardFilter {
+    readonly Type?: string | undefined;
+    readonly ShardId?: string | undefined;
+}
+/**
+ * Minimal structural sim DynamoDB Streams DescribeStream command.
+ */
+export interface SimDescribeStreamCommand {
+    readonly input: SimDescribeStreamCommandInput;
+}
+/**
+ * Minimal structural sim DynamoDB Streams DescribeStream input.
+ *
+ * `Limit` and `ExclusiveStartShardId` page through a stream's shards. A
+ * simulated stream has exactly one, so a `Limit` of at least one never cuts a
+ * page short, and `ExclusiveStartShardId` naming that shard leaves a page with
+ * nothing on it.
+ */
+export interface SimDescribeStreamCommandInput {
+    readonly StreamArn?: string | undefined;
+    readonly Limit?: number | undefined;
+    readonly ExclusiveStartShardId?: string | undefined;
+    readonly ShardFilter?: SimDynamoDbShardFilter | undefined;
+}
+/**
+ * Minimal structural sim DynamoDB Streams DescribeStream output.
+ */
+export interface SimDescribeStreamCommandOutput {
+    readonly StreamDescription?: SimDynamoDbStreamDescription | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+//# sourceMappingURL=describe-stream.command.d.ts.map

package/dist/service/dynamodb/command/stream/describe-stream/describe-stream.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"describe-stream.command.d.ts","sourceRoot":"","sources":["../../../../../../src/service/dynamodb/command/stream/describe-stream/describe-stream.command.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oDAAoD,CAAC;AAC9F,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,oBAAoB,CAAC;AAEvE;;;;;GAKG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACvC;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,KAAK,EAAE,6BAA6B,CAAC;CAC/C;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpD,QAAQ,CAAC,WAAW,CAAC,EAAE,sBAAsB,GAAG,SAAS,CAAC;CAC3D;AAED;;GAEG;AACH,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,iBAAiB,CAAC,EAAE,4BAA4B,GAAG,SAAS,CAAC;IACtE,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC"}

package/dist/service/dynamodb/command/stream/describe-stream/describe-stream.command.js

@@ -0,0 +1,5 @@
+/**
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/dynamodb-streams/command/DescribeStreamCommand/
+ */
+export {};
+//# sourceMappingURL=describe-stream.command.js.map

package/dist/service/dynamodb/command/stream/describe-stream/describe-stream.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"describe-stream.command.js","sourceRoot":"","sources":["../../../../../../src/service/dynamodb/command/stream/describe-stream/describe-stream.command.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/service/dynamodb/command/stream/describe-stream/sim-dynamodb-describe-stream.d.ts

@@ -0,0 +1,26 @@
+import type { SimAwsCaller } from "../../../../aws/caller/sim-aws-caller.js";
+import type { SimDynamoDbStreamAccess } from "../sim-dynamodb-stream-access.js";
+import type { SimDescribeStreamCommand, SimDescribeStreamCommandOutput } from "./describe-stream.command.js";
+interface SimDynamoDbDescribeStreamProperties {
+    readonly access: SimDynamoDbStreamAccess;
+}
+interface SimDynamoDbDescribeStreamOptions {
+    readonly caller?: SimAwsCaller;
+}
+/**
+ * The command that reports a stream, its shard and what its records carry.
+ */
+export declare class SimDynamoDbDescribeStream {
+    private readonly access;
+    constructor(properties: SimDynamoDbDescribeStreamProperties);
+    /**
+     * Describe the stream an ARN names.
+     *
+     * `LastEvaluatedShardId` is never reported: there is one shard, so a page of
+     * them is always the whole of them, and a token would send a caller round a
+     * loop for a shard that does not exist.
+     */
+    handle(command: SimDescribeStreamCommand, options?: SimDynamoDbDescribeStreamOptions): SimDescribeStreamCommandOutput;
+}
+export {};
+//# sourceMappingURL=sim-dynamodb-describe-stream.d.ts.map

package/dist/service/dynamodb/command/stream/describe-stream/sim-dynamodb-describe-stream.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-dynamodb-describe-stream.d.ts","sourceRoot":"","sources":["../../../../../../src/service/dynamodb/command/stream/describe-stream/sim-dynamodb-describe-stream.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0CAA0C,CAAC;AAO7E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAChF,OAAO,KAAK,EACV,wBAAwB,EACxB,8BAA8B,EAC/B,MAAM,8BAA8B,CAAC;AAEtC,UAAU,mCAAmC;IAC3C,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;CAC1C;AAED,UAAU,gCAAgC;IACxC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAkDD;;GAEG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0B;IAEjD,YAAY,UAAU,EAAE,mCAAmC,EAE1D;IAED;;;;;;OAMG;IACH,MAAM,CACJ,OAAO,EAAE,wBAAwB,EACjC,OAAO,CAAC,EAAE,gCAAgC,GACzC,8BAA8B,CA6BhC;CACF"}

package/dist/service/dynamodb/command/stream/describe-stream/sim-dynamodb-describe-stream.js

@@ -0,0 +1,77 @@
+import { SimDynamoDbUnsupportedOperation, SimDynamoDbValidationException, } from "../../../error/dynamodb.error.js";
+/**
+ * The greatest number of shards one DescribeStream reports.
+ */
+const greatestLimit = 100;
+/**
+ * Refuse a page size DynamoDB would not take.
+ */
+function assertLimit(limit) {
+    if (limit === undefined) {
+        return;
+    }
+    if (!Number.isSafeInteger(limit) || limit < 1 || limit > greatestLimit) {
+        throw new SimDynamoDbValidationException(`Limit ${limit.toString()} is invalid. It is a whole number between 1 ` +
+            `and ${greatestLimit.toString()}.`);
+    }
+}
+/**
+ * The shards of a stream a request asks for, which is its one shard or none.
+ *
+ * A simulated stream has one shard, so a `Limit` of at least one never cuts the
+ * page short. `ExclusiveStartShardId` naming that shard does leave nothing to
+ * report, which is what a caller resuming from it means, so it is honoured
+ * rather than ignored.
+ */
+function shardsOf(stream, exclusiveStartShardId) {
+    if (exclusiveStartShardId === stream.shard.shardId) {
+        return [];
+    }
+    return [
+        {
+            ShardId: stream.shard.shardId,
+            SequenceNumberRange: {
+                StartingSequenceNumber: stream.shard.startingSequenceNumber,
+                EndingSequenceNumber: stream.shard.endingSequenceNumber,
+            },
+        },
+    ];
+}
+/**
+ * The command that reports a stream, its shard and what its records carry.
+ */
+export class SimDynamoDbDescribeStream {
+    access;
+    constructor(properties) {
+        this.access = properties.access;
+    }
+    /**
+     * Describe the stream an ARN names.
+     *
+     * `LastEvaluatedShardId` is never reported: there is one shard, so a page of
+     * them is always the whole of them, and a token would send a caller round a
+     * loop for a shard that does not exist.
+     */
+    handle(command, options) {
+        const stream = this.access.required("dynamodb:DescribeStream", command.input.StreamArn, options?.caller);
+        if (command.input.ShardFilter !== undefined) {
+            throw new SimDynamoDbUnsupportedOperation("DescribeStream ShardFilter is not simulated: a simulated stream has " +
+                "one shard and never splits, so it has no shard lineage to filter");
+        }
+        assertLimit(command.input.Limit);
+        return {
+            StreamDescription: {
+                StreamArn: stream.arn,
+                StreamLabel: stream.label,
+                StreamStatus: stream.status,
+                StreamViewType: stream.viewType,
+                CreationRequestDateTime: stream.enabledAt,
+                TableName: stream.tableName,
+                KeySchema: stream.keySchemaElements,
+                Shards: shardsOf(stream, command.input.ExclusiveStartShardId),
+            },
+            $metadata: {},
+        };
+    }
+}
+//# sourceMappingURL=sim-dynamodb-describe-stream.js.map

package/dist/service/dynamodb/command/stream/describe-stream/sim-dynamodb-describe-stream.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-dynamodb-describe-stream.js","sourceRoot":"","sources":["../../../../../../src/service/dynamodb/command/stream/describe-stream/sim-dynamodb-describe-stream.ts"],"names":[],"mappings":"AACA,OAAO,EACL,+BAA+B,EAC/B,8BAA8B,GAC/B,MAAM,kCAAkC,CAAC;AAiB1C;;GAEG;AACH,MAAM,aAAa,GAAG,GAAG,CAAC;AAE1B;;GAEG;AACH,SAAS,WAAW,CAAC,KAAyB;IAC5C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO;IACT,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,aAAa,EAAE,CAAC;QACvE,MAAM,IAAI,8BAA8B,CACtC,SAAS,KAAK,CAAC,QAAQ,EAAE,8CAA8C;YACrE,OAAO,aAAa,CAAC,QAAQ,EAAE,GAAG,CACrC,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,QAAQ,CACf,MAAyB,EACzB,qBAAyC;IAEzC,IAAI,qBAAqB,KAAK,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACnD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO;QACL;YACE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO;YAC7B,mBAAmB,EAAE;gBACnB,sBAAsB,EAAE,MAAM,CAAC,KAAK,CAAC,sBAAsB;gBAC3D,oBAAoB,EAAE,MAAM,CAAC,KAAK,CAAC,oBAAoB;aACxD;SACF;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,OAAO,yBAAyB;IACnB,MAAM,CAA0B;IAEjD,YAAY,UAA+C;QACzD,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAClC,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CACJ,OAAiC,EACjC,OAA0C;QAE1C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CACjC,yBAAyB,EACzB,OAAO,CAAC,KAAK,CAAC,SAAS,EACvB,OAAO,EAAE,MAAM,CAChB,CAAC;QAEF,IAAI,OAAO,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YAC5C,MAAM,IAAI,+BAA+B,CACvC,sEAAsE;gBACpE,kEAAkE,CACrE,CAAC;QACJ,CAAC;QAED,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAEjC,OAAO;YACL,iBAAiB,EAAE;gBACjB,SAAS,EAAE,MAAM,CAAC,GAAG;gBACrB,WAAW,EAAE,MAAM,CAAC,KAAK;gBACzB,YAAY,EAAE,MAAM,CAAC,MAAM;gBAC3B,cAAc,EAAE,MAAM,CAAC,QAAQ;gBAC/B,uBAAuB,EAAE,MAAM,CAAC,SAAS;gBACzC,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,SAAS,EAAE,MAAM,CAAC,iBAAiB;gBACnC,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC;aAC9D;YACD,SAAS,EAAE,EAAE;SACd,CAAC;IACJ,CAAC;CACF"}

package/dist/service/dynamodb/command/stream/get-records/get-records.command.d.ts

@@ -0,0 +1,32 @@
+/**
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/dynamodb-streams/command/GetRecordsCommand/
+ */
+import type { SimResponseMetadata } from "../../../../aws/metadata/response-metadata.type.js";
+import type { SimDynamoDbStreamsRecord } from "../stream.types.js";
+/**
+ * Minimal structural sim DynamoDB Streams GetRecords command.
+ */
+export interface SimGetRecordsCommand {
+    readonly input: SimGetRecordsCommandInput;
+}
+/**
+ * Minimal structural sim DynamoDB Streams GetRecords input.
+ */
+export interface SimGetRecordsCommandInput {
+    readonly ShardIterator?: string | undefined;
+    readonly Limit?: number | undefined;
+}
+/**
+ * Minimal structural sim DynamoDB Streams GetRecords output.
+ *
+ * An empty `Records` with a `NextShardIterator` is the ordinary answer for a
+ * reader that has caught up, and is not smoothed away into anything else.
+ * `NextShardIterator` is absent only when the shard is closed and the reader
+ * has reached the end of it, which is how a consumer knows to stop.
+ */
+export interface SimGetRecordsCommandOutput {
+    readonly Records?: readonly SimDynamoDbStreamsRecord[] | undefined;
+    readonly NextShardIterator?: string | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+//# sourceMappingURL=get-records.command.d.ts.map

package/dist/service/dynamodb/command/stream/get-records/get-records.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-records.command.d.ts","sourceRoot":"","sources":["../../../../../../src/service/dynamodb/command/stream/get-records/get-records.command.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oDAAoD,CAAC;AAC9F,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAEnE;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,yBAAyB,CAAC;CAC3C;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACrC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,wBAAwB,EAAE,GAAG,SAAS,CAAC;IACnE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC"}

package/dist/service/dynamodb/command/stream/get-records/get-records.command.js

@@ -0,0 +1,5 @@
+/**
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/dynamodb-streams/command/GetRecordsCommand/
+ */
+export {};
+//# sourceMappingURL=get-records.command.js.map

package/dist/service/dynamodb/command/stream/get-records/get-records.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-records.command.js","sourceRoot":"","sources":["../../../../../../src/service/dynamodb/command/stream/get-records/get-records.command.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/service/dynamodb/command/stream/get-records/sim-dynamodb-get-records.d.ts

@@ -0,0 +1,29 @@
+import type { SimAwsCaller } from "../../../../aws/caller/sim-aws-caller.js";
+import type { SimAwsAccountRegionScope } from "../../../../aws/sim-aws-account-region-scope.js";
+import type { SimDynamoDbStreamAccess } from "../sim-dynamodb-stream-access.js";
+import type { SimGetRecordsCommand, SimGetRecordsCommandOutput } from "./get-records.command.js";
+interface SimDynamoDbGetRecordsProperties {
+    readonly access: SimDynamoDbStreamAccess;
+    readonly accountRegionScope: SimAwsAccountRegionScope;
+}
+interface SimDynamoDbGetRecordsOptions {
+    readonly caller?: SimAwsCaller;
+}
+/**
+ * The command that reads records off a shard.
+ */
+export declare class SimDynamoDbGetRecords {
+    private readonly access;
+    private readonly accountRegionScope;
+    constructor(properties: SimDynamoDbGetRecordsProperties);
+    /**
+     * Read from where a shard iterator points, and say where to carry on.
+     *
+     * The iterator carries the stream it belongs to, so the caller is authorized
+     * against that stream's ARN rather than against anything the request names
+     * separately.
+     */
+    handle(command: SimGetRecordsCommand, options?: SimDynamoDbGetRecordsOptions): SimGetRecordsCommandOutput;
+}
+export {};
+//# sourceMappingURL=sim-dynamodb-get-records.d.ts.map

package/dist/service/dynamodb/command/stream/get-records/sim-dynamodb-get-records.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-dynamodb-get-records.d.ts","sourceRoot":"","sources":["../../../../../../src/service/dynamodb/command/stream/get-records/sim-dynamodb-get-records.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0CAA0C,CAAC;AAC7E,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,iDAAiD,CAAC;AAUhG,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAEhF,OAAO,KAAK,EACV,oBAAoB,EACpB,0BAA0B,EAC3B,MAAM,0BAA0B,CAAC;AAOlC,UAAU,+BAA+B;IACvC,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;CACvD;AAED,UAAU,4BAA4B;IACpC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAwBD;;GAEG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0B;IACjD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA2B;IAE9D,YAAY,UAAU,EAAE,+BAA+B,EAGtD;IAED;;;;;;OAMG;IACH,MAAM,CACJ,OAAO,EAAE,oBAAoB,EAC7B,OAAO,CAAC,EAAE,4BAA4B,GACrC,0BAA0B,CA4B5B;CACF"}

package/dist/service/dynamodb/command/stream/get-records/sim-dynamodb-get-records.js

@@ -0,0 +1,60 @@
+import { SimDynamoDbResourceNotFoundException, SimDynamoDbValidationException, } from "../../../error/dynamodb.error.js";
+import { simDynamoDbStreamRead } from "../../../stream/sim-dynamodb-stream-read.js";
+import { readSimDynamoDbShardIteratorToken, simDynamoDbShardIteratorToken, } from "../../../stream/sim-dynamodb-stream-shard-iterator.js";
+import { simDynamoDbStreamsApiRecord } from "./sim-dynamodb-streams-api-record.js";
+/**
+ * The most records one GetRecords hands back, whatever the request asks for.
+ */
+const greatestLimit = 1000;
+/**
+ * Read the batch size a request asks for.
+ *
+ * A request asking for more than the cap is refused rather than quietly given
+ * fewer, since a consumer that thinks it asked for 5000 and got 1000 has no way
+ * of telling that from having caught up.
+ */
+function readLimit(limit) {
+    if (limit === undefined) {
+        return greatestLimit;
+    }
+    if (!Number.isSafeInteger(limit) || limit < 1 || limit > greatestLimit) {
+        throw new SimDynamoDbValidationException(`Limit ${limit.toString()} is invalid. It is a whole number between 1 ` +
+            `and ${greatestLimit.toString()}.`);
+    }
+    return limit;
+}
+/**
+ * The command that reads records off a shard.
+ */
+export class SimDynamoDbGetRecords {
+    access;
+    accountRegionScope;
+    constructor(properties) {
+        this.access = properties.access;
+        this.accountRegionScope = properties.accountRegionScope;
+    }
+    /**
+     * Read from where a shard iterator points, and say where to carry on.
+     *
+     * The iterator carries the stream it belongs to, so the caller is authorized
+     * against that stream's ARN rather than against anything the request names
+     * separately.
+     */
+    handle(command, options) {
+        const iterator = readSimDynamoDbShardIteratorToken(command.input.ShardIterator);
+        const limit = readLimit(command.input.Limit);
+        const stream = this.access.required("dynamodb:GetRecords", iterator.streamArn, options?.caller);
+        if (iterator.shardId !== stream.shard.shardId) {
+            throw new SimDynamoDbResourceNotFoundException(`Stream ${stream.arn} has no shard ${iterator.shardId}`);
+        }
+        const read = simDynamoDbStreamRead(stream.shard, iterator.position, limit);
+        return {
+            Records: read.records.map((record) => simDynamoDbStreamsApiRecord(record, this.accountRegionScope.regionName)),
+            NextShardIterator: read.drained
+                ? undefined
+                : simDynamoDbShardIteratorToken({ ...iterator, position: read.next }),
+            $metadata: {},
+        };
+    }
+}
+//# sourceMappingURL=sim-dynamodb-get-records.js.map

package/dist/service/dynamodb/command/stream/get-records/sim-dynamodb-get-records.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-dynamodb-get-records.js","sourceRoot":"","sources":["../../../../../../src/service/dynamodb/command/stream/get-records/sim-dynamodb-get-records.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,oCAAoC,EACpC,8BAA8B,GAC/B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,qBAAqB,EAAE,MAAM,6CAA6C,CAAC;AACpF,OAAO,EACL,iCAAiC,EACjC,6BAA6B,GAC9B,MAAM,uDAAuD,CAAC;AAE/D,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AAMnF;;GAEG;AACH,MAAM,aAAa,GAAG,IAAI,CAAC;AAW3B;;;;;;GAMG;AACH,SAAS,SAAS,CAAC,KAAyB;IAC1C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,aAAa,EAAE,CAAC;QACvE,MAAM,IAAI,8BAA8B,CACtC,SAAS,KAAK,CAAC,QAAQ,EAAE,8CAA8C;YACrE,OAAO,aAAa,CAAC,QAAQ,EAAE,GAAG,CACrC,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,OAAO,qBAAqB;IACf,MAAM,CAA0B;IAChC,kBAAkB,CAA2B;IAE9D,YAAY,UAA2C;QACrD,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;IAC1D,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CACJ,OAA6B,EAC7B,OAAsC;QAEtC,MAAM,QAAQ,GAAG,iCAAiC,CAChD,OAAO,CAAC,KAAK,CAAC,aAAa,CAC5B,CAAC;QACF,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CACjC,qBAAqB,EACrB,QAAQ,CAAC,SAAS,EAClB,OAAO,EAAE,MAAM,CAChB,CAAC;QAEF,IAAI,QAAQ,CAAC,OAAO,KAAK,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YAC9C,MAAM,IAAI,oCAAoC,CAC5C,UAAU,MAAM,CAAC,GAAG,iBAAiB,QAAQ,CAAC,OAAO,EAAE,CACxD,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,qBAAqB,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAE3E,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CACnC,2BAA2B,CAAC,MAAM,EAAE,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,CACxE;YACD,iBAAiB,EAAE,IAAI,CAAC,OAAO;gBAC7B,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,6BAA6B,CAAC,EAAE,GAAG,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;YACvE,SAAS,EAAE,EAAE;SACd,CAAC;IACJ,CAAC;CACF"}

package/dist/service/dynamodb/command/stream/get-records/sim-dynamodb-streams-api-record.d.ts

@@ -0,0 +1,12 @@
+import type { AwsRegionName } from "../../../../aws/sim-aws-region.js";
+import type { SimDynamoDbStreamRecord } from "../../../stream/sim-dynamodb-stream-record.js";
+import type { SimDynamoDbStreamsRecord } from "../stream.types.js";
+/**
+ * Render a captured record the way the DynamoDB Streams API hands it back.
+ *
+ * `ApproximateCreationDateTime` is a Date here, where the Lambda event has
+ * epoch seconds in the same place. The SDK deserializes a timestamp into a
+ * Date, so this is what an application reading GetRecords already expects.
+ */
+export declare function simDynamoDbStreamsApiRecord(record: SimDynamoDbStreamRecord, awsRegion: AwsRegionName): SimDynamoDbStreamsRecord;
+//# sourceMappingURL=sim-dynamodb-streams-api-record.d.ts.map

package/dist/service/dynamodb/command/stream/get-records/sim-dynamodb-streams-api-record.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-dynamodb-streams-api-record.d.ts","sourceRoot":"","sources":["../../../../../../src/service/dynamodb/command/stream/get-records/sim-dynamodb-streams-api-record.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,+CAA+C,CAAC;AAC7F,OAAO,KAAK,EAEV,wBAAwB,EACzB,MAAM,oBAAoB,CAAC;AAgC5B;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,uBAAuB,EAC/B,SAAS,EAAE,aAAa,GACvB,wBAAwB,CAkB1B"}