@kensio/yulin 1.20.13 → 1.20.14

package/dist/service/scheduler/command/sim-scheduler-commands.d.ts

@@ -3,13 +3,16 @@ import type { SimAwsAccountRegionScope } from "../../aws/sim-aws-account-region-
 import type { SimIamInterServiceAuthZ } from "../../iam/authorize/sim-iam-inter-service-auth-z.js";
 import type { SimSchedulerDeliveryTargets } from "../delivery/sim-scheduler-delivery.js";
 import { SimSchedulerTargetDelivery } from "../delivery/sim-scheduler-target-delivery.js";
+import type { SimSchedulerScheduleGroupStore } from "../group/sim-scheduler-schedule-group-store.js";
 import { SimSchedulerSchedules } from "../schedule/sim-scheduler-schedules.js";
 import type { SimSchedulerScheduleStore } from "../schedule/sim-scheduler-schedule-store.js";
+import { SimSchedulerGroupCommands } from "./group/sim-scheduler-group-commands.js";
 import { SimSchedulerCreateSchedule } from "./schedule/sim-scheduler-create-schedule.js";
 import { SimSchedulerScheduleCommands } from "./schedule/sim-scheduler-schedule-commands.js";
 import { SimSchedulerUpdateSchedule } from "./schedule/sim-scheduler-update-schedule.js";
 interface SimSchedulerCommandsProperties {
     readonly schedules: SimSchedulerScheduleStore;
+    readonly groups: SimSchedulerScheduleGroupStore;
     readonly iam: SimIamInterServiceAuthZ;
     readonly background: BackgroundScheduler;
     readonly deliveryTargets?: SimSchedulerDeliveryTargets | undefined;
@@ -25,6 +28,7 @@ export declare class SimSchedulerCommands {
     readonly scheduleCreation: SimSchedulerCreateSchedule;
     readonly scheduleUpdate: SimSchedulerUpdateSchedule;
     readonly schedules: SimSchedulerScheduleCommands;
+    readonly groups: SimSchedulerGroupCommands;
     readonly delivery: SimSchedulerTargetDelivery;
     readonly firing: SimSchedulerSchedules;
     constructor(properties: SimSchedulerCommandsProperties);

package/dist/service/scheduler/command/sim-scheduler-commands.js

@@ -2,6 +2,8 @@ import { SimSchedulerNoDeliveryTargets } from "../delivery/sim-scheduler-no-deli
 import { SimSchedulerTargetDelivery } from "../delivery/sim-scheduler-target-delivery.js";
 import { SimSchedulerSchedules } from "../schedule/sim-scheduler-schedules.js";
 import { SimSchedulerAuthorizer } from "./authorize/sim-scheduler-authorizer.js";
+import { SimSchedulerGroupAccess } from "./group/sim-scheduler-group-access.js";
+import { SimSchedulerGroupCommands } from "./group/sim-scheduler-group-commands.js";
 import { SimSchedulerCreateSchedule } from "./schedule/sim-scheduler-create-schedule.js";
 import { SimSchedulerScheduleAccess } from "./schedule/sim-scheduler-schedule-access.js";
 import { SimSchedulerScheduleCommands } from "./schedule/sim-scheduler-schedule-commands.js";
@@ -17,13 +19,15 @@ export class SimSchedulerCommands {
     scheduleCreation;
     scheduleUpdate;
     schedules;
+    groups;
     delivery;
     firing;
     constructor(properties) {
-        const { schedules, accountRegionScope, background } = properties;
+        const { schedules, groups, accountRegionScope, background } = properties;
         const authorizer = new SimSchedulerAuthorizer({ iam: properties.iam });
         const access = new SimSchedulerScheduleAccess({
             schedules,
+            groups,
             authorizer,
             accountRegionScope,
         });
@@ -52,5 +56,14 @@ export class SimSchedulerCommands {
             firing: this.firing,
         });
         this.schedules = new SimSchedulerScheduleCommands({ schedules, access });
+        this.groups = new SimSchedulerGroupCommands({
+            groups,
+            schedules,
+            access: new SimSchedulerGroupAccess({
+                groups,
+                authorizer,
+                accountRegionScope,
+            }),
+        });
     }
 }

package/dist/service/scheduler/delivery/sim-aws-scheduler-delivery-targets.js

@@ -29,7 +29,7 @@ export class SimAwsSchedulerDeliveryTargets {
         const arn = request.schedule.target.arn;
         const role = schedulerExecutionRoleTarget(request.schedule.target.roleArn);
         const roleScope = this.simAws.accountRegionScope(role.accountId, arn.regionName);
-        const caller = await assumeSchedulerExecutionRole(role, roleScope.iam());
+        const caller = await assumeSchedulerExecutionRole(role, roleScope, request.schedule);
         await this.invoke(arn.service, { request, caller });
     }
     /**

package/dist/service/scheduler/delivery/sim-scheduler-delivery-function.js

@@ -1,5 +1,6 @@
 import { SimSchedulerDeliveryNotPermitted, SimSchedulerTargetNotFound, } from "../error/sim-scheduler-delivery.error.js";
 import { simSchedulerDeliveryDocument, } from "./sim-scheduler-delivery.js";
+import { simScopeIamAuthZ } from "../../iam/authorize/sim-iam-region-auth-z.js";
 const invokeAction = "lambda:InvokeFunction";
 /**
  * A Lambda function a simulated schedule invokes.
@@ -25,7 +26,7 @@ export class SimSchedulerDeliveryFunction {
         if (simFunction === undefined) {
             throw new SimSchedulerTargetNotFound(`${targetArn.value} is not a simulated Lambda function.`);
         }
-        const decision = this.scope.iam().authorize({
+        const decision = simScopeIamAuthZ(this.scope).authorize({
             action: invokeAction,
             resource: targetArn.value,
             caller: delivery.caller,

package/dist/service/scheduler/delivery/sim-scheduler-delivery-queue.js

@@ -1,5 +1,6 @@
 import { SimSchedulerDeliveryNotPermitted, SimSchedulerTargetNotFound, } from "../error/sim-scheduler-delivery.error.js";
 import { simSchedulerDeliveryJson, } from "./sim-scheduler-delivery.js";
+import { simScopeIamAuthZ } from "../../iam/authorize/sim-iam-region-auth-z.js";
 const sendAction = "sqs:SendMessage";
 /**
  * An SQS queue a simulated schedule sends to.
@@ -18,7 +19,7 @@ export class SimSchedulerDeliveryQueue {
         if (queue === undefined) {
             throw new SimSchedulerTargetNotFound(`${targetArn.value} is not a simulated SQS queue.`);
         }
-        const decision = this.scope.iam().authorize({
+        const decision = simScopeIamAuthZ(this.scope).authorize({
             action: sendAction,
             resource: targetArn.value,
             caller: delivery.caller,

package/dist/service/scheduler/delivery/sim-scheduler-delivery-topic.js

@@ -1,5 +1,6 @@
 import { SimSchedulerDeliveryNotPermitted, SimSchedulerTargetNotFound, } from "../error/sim-scheduler-delivery.error.js";
 import { simSchedulerDeliveryJson, } from "./sim-scheduler-delivery.js";
+import { simScopeIamAuthZ } from "../../iam/authorize/sim-iam-region-auth-z.js";
 const publishAction = "sns:Publish";
 /**
  * An SNS topic a simulated schedule publishes to.
@@ -18,7 +19,7 @@ export class SimSchedulerDeliveryTopic {
         if (topic === undefined) {
             throw new SimSchedulerTargetNotFound(`${targetArn.value} is not a simulated SNS topic.`);
         }
-        const decision = this.scope.iam().authorize({
+        const decision = simScopeIamAuthZ(this.scope).authorize({
             action: publishAction,
             resource: targetArn.value,
             caller: delivery.caller,

package/dist/service/scheduler/delivery/sim-scheduler-execution-role.d.ts

@@ -1,6 +1,7 @@
 import type { SimAwsCaller } from "../../aws/caller/sim-aws-caller.js";
-import type { SimIam } from "../../iam/sim-iam.js";
-import { type SimServiceRoleTarget } from "../../sts/service-role/sim-service-role.js";
+import type { SimAwsAccountRegionContainer } from "../../aws/sim-aws-account-region-scope.js";
+import { type SimServiceRoleTarget } from "../../sts/service-role/sim-service-role-target.js";
+import type { SimSchedulerSchedule } from "../schedule/sim-scheduler-schedule.js";
 export type SimSchedulerExecutionRoleTarget = SimServiceRoleTarget;
 /**
  * Read the Account and name out of a schedule's execution role ARN.
@@ -17,5 +18,10 @@ export declare function schedulerExecutionRoleTarget(roleArn: string): SimSchedu
  * function as the `events.amazonaws.com` service principal and the target's own
  * resource policy decides; a schedule assumes a role, and the role's policies
  * decide.
+ *
+ * The schedule comes along because its group ARN is the `aws:SourceArn` AWS
+ * documents for the trust policy condition it recommends against the confused
+ * deputy problem. A schedule ARN is not accepted there, and CDK writes the
+ * group ARN into the execution roles it generates.
  */
-export declare function assumeSchedulerExecutionRole(target: SimSchedulerExecutionRoleTarget, iam: SimIam): Promise<SimAwsCaller>;
+export declare function assumeSchedulerExecutionRole(target: SimSchedulerExecutionRoleTarget, scope: SimAwsAccountRegionContainer, schedule: SimSchedulerSchedule): Promise<SimAwsCaller>;

package/dist/service/scheduler/delivery/sim-scheduler-execution-role.js

@@ -1,4 +1,5 @@
-import { assumeSimServiceRole, simServiceRoleTarget, } from "../../sts/service-role/sim-service-role.js";
+import { assumeSimServiceRole, } from "../../sts/service-role/sim-service-role.js";
+import { simServiceRoleTarget, } from "../../sts/service-role/sim-service-role-target.js";
 import { SimSchedulerDeliveryNotPermitted } from "../error/sim-scheduler-delivery.error.js";
 import { simSchedulerServicePrincipal } from "./sim-scheduler-delivery.js";
 /**
@@ -32,13 +33,19 @@ const refusals = {
  * function as the `events.amazonaws.com` service principal and the target's own
  * resource policy decides; a schedule assumes a role, and the role's policies
  * decide.
+ *
+ * The schedule comes along because its group ARN is the `aws:SourceArn` AWS
+ * documents for the trust policy condition it recommends against the confused
+ * deputy problem. A schedule ARN is not accepted there, and CDK writes the
+ * group ARN into the execution roles it generates.
  */
-export async function assumeSchedulerExecutionRole(target, iam) {
+export async function assumeSchedulerExecutionRole(target, scope, schedule) {
     return await assumeSimServiceRole({
         target,
         servicePrincipal: simSchedulerServicePrincipal,
         sessionName,
-        iam,
+        scope,
+        source: { arn: schedule.groupArn, accountId: schedule.accountId },
         refusals,
     });
 }

package/dist/service/scheduler/group/sim-scheduler-schedule-group-arn.d.ts

@@ -0,0 +1,11 @@
+import type { SimAwsAccountRegionScope } from "../../aws/sim-aws-account-region-scope.js";
+/**
+ * The ARN of one simulated schedule group.
+ *
+ * `arn:aws:scheduler:<region>:<account>:schedule-group/<name>`. That is a
+ * different resource path from a schedule's `schedule/<group>/<name>`. An
+ * identity policy granting `scheduler:` actions on the group names this one,
+ * and so does the `aws:SourceArn` condition AWS recommends in a schedule
+ * execution role's trust policy.
+ */
+export declare function schedulerScheduleGroupArn(groupName: string, scope: SimAwsAccountRegionScope): string;

package/dist/service/scheduler/group/sim-scheduler-schedule-group-arn.js

@@ -0,0 +1,13 @@
+/**
+ * The ARN of one simulated schedule group.
+ *
+ * `arn:aws:scheduler:<region>:<account>:schedule-group/<name>`. That is a
+ * different resource path from a schedule's `schedule/<group>/<name>`. An
+ * identity policy granting `scheduler:` actions on the group names this one,
+ * and so does the `aws:SourceArn` condition AWS recommends in a schedule
+ * execution role's trust policy.
+ */
+export function schedulerScheduleGroupArn(groupName, scope) {
+    return (`arn:aws:scheduler:${scope.regionName}:${scope.accountId}:` +
+        `schedule-group/${groupName}`);
+}

package/dist/service/scheduler/group/sim-scheduler-schedule-group-store.d.ts

@@ -0,0 +1,46 @@
+import type { SimClock } from "../../../util/clock/sim-clock.js";
+import type { SimAwsAccountRegionScope } from "../../aws/sim-aws-account-region-scope.js";
+import { SimSchedulerScheduleGroup } from "./sim-scheduler-schedule-group.js";
+interface SimSchedulerScheduleGroupStoreProperties {
+    readonly accountRegionScope: SimAwsAccountRegionScope;
+    readonly clock: SimClock;
+}
+/**
+ * The schedule groups of one simulated Scheduler scope.
+ *
+ * This store builds its own groups rather than taking them from a writer, which
+ * is the opposite of how schedules are handled. A schedule is read out of a
+ * request carrying a dozen properties, and reading it in one place is what
+ * keeps Create and Update agreeing. A group is a name and two timestamps. A
+ * writer beside this would be a class that exists to call a constructor.
+ */
+export declare class SimSchedulerScheduleGroupStore {
+    private readonly groups;
+    private readonly accountRegionScope;
+    private readonly clock;
+    constructor(properties: SimSchedulerScheduleGroupStoreProperties);
+    /**
+     * Every group in this scope, in creation order.
+     *
+     * `default` is always the first of them. Every Account has it without anyone
+     * creating one, so this scope starts with it too.
+     */
+    get all(): readonly SimSchedulerScheduleGroup[];
+    /**
+     * Create a group, stamped from the simulation's clock.
+     */
+    create(groupName: string): SimSchedulerScheduleGroup;
+    /**
+     * Find a group by name.
+     */
+    find(groupName: string): SimSchedulerScheduleGroup | undefined;
+    /**
+     * Resolve a group by name, or refuse.
+     */
+    require(groupName: string): SimSchedulerScheduleGroup;
+    /**
+     * Forget a deleted group.
+     */
+    remove(group: SimSchedulerScheduleGroup): void;
+}
+export {};

package/dist/service/scheduler/group/sim-scheduler-schedule-group-store.js

@@ -0,0 +1,65 @@
+import { SimSchedulerResourceNotFoundException } from "../error/sim-scheduler.error.js";
+import { defaultScheduleGroupName } from "../schedule/sim-scheduler-schedule-name.js";
+import { SimSchedulerScheduleGroup } from "./sim-scheduler-schedule-group.js";
+/**
+ * The schedule groups of one simulated Scheduler scope.
+ *
+ * This store builds its own groups rather than taking them from a writer, which
+ * is the opposite of how schedules are handled. A schedule is read out of a
+ * request carrying a dozen properties, and reading it in one place is what
+ * keeps Create and Update agreeing. A group is a name and two timestamps. A
+ * writer beside this would be a class that exists to call a constructor.
+ */
+export class SimSchedulerScheduleGroupStore {
+    groups = new Map();
+    accountRegionScope;
+    clock;
+    constructor(properties) {
+        this.accountRegionScope = properties.accountRegionScope;
+        this.clock = properties.clock;
+        this.create(defaultScheduleGroupName);
+    }
+    /**
+     * Every group in this scope, in creation order.
+     *
+     * `default` is always the first of them. Every Account has it without anyone
+     * creating one, so this scope starts with it too.
+     */
+    get all() {
+        return this.groups.values().toArray();
+    }
+    /**
+     * Create a group, stamped from the simulation's clock.
+     */
+    create(groupName) {
+        const group = new SimSchedulerScheduleGroup({
+            name: groupName,
+            accountRegionScope: this.accountRegionScope,
+            createdAt: this.clock.now(),
+        });
+        this.groups.set(groupName, group);
+        return group;
+    }
+    /**
+     * Find a group by name.
+     */
+    find(groupName) {
+        return this.groups.get(groupName);
+    }
+    /**
+     * Resolve a group by name, or refuse.
+     */
+    require(groupName) {
+        const found = this.find(groupName);
+        if (found === undefined) {
+            throw new SimSchedulerResourceNotFoundException(`Schedule group ${groupName} does not exist.`);
+        }
+        return found;
+    }
+    /**
+     * Forget a deleted group.
+     */
+    remove(group) {
+        this.groups.delete(group.name);
+    }
+}

package/dist/service/scheduler/group/sim-scheduler-schedule-group.d.ts

@@ -0,0 +1,25 @@
+import type { SimAwsAccountRegionScope } from "../../aws/sim-aws-account-region-scope.js";
+interface SimSchedulerScheduleGroupProperties {
+    readonly name: string;
+    readonly accountRegionScope: SimAwsAccountRegionScope;
+    readonly createdAt: Date;
+}
+/**
+ * One simulated EventBridge Scheduler schedule group.
+ *
+ * A group is a namespace and a tagging handle. It carries no settings, and a
+ * schedule in it behaves exactly as one in `default` would. What it changes is
+ * identity. A schedule's name is unique within its group rather than within the
+ * Account, and the group is in the schedule's ARN. Two deployments of the same
+ * construct into one Account and Region collide on schedule names unless each
+ * one has its own group.
+ */
+export declare class SimSchedulerScheduleGroup {
+    readonly name: string;
+    readonly arn: string;
+    readonly creationDate: Date;
+    readonly lastModificationDate: Date;
+    readonly state = "ACTIVE";
+    constructor(properties: SimSchedulerScheduleGroupProperties);
+}
+export {};

package/dist/service/scheduler/group/sim-scheduler-schedule-group.js

@@ -0,0 +1,32 @@
+import { schedulerScheduleGroupArn } from "./sim-scheduler-schedule-group-arn.js";
+/**
+ * The state a schedule group is in.
+ *
+ * Real Scheduler also has `DELETING`, which a group sits in while the schedules
+ * it holds are being removed. No group here is ever in it. Deleting a group
+ * removes its schedules in the same call, and a group is `ACTIVE` or gone.
+ */
+const activeState = "ACTIVE";
+/**
+ * One simulated EventBridge Scheduler schedule group.
+ *
+ * A group is a namespace and a tagging handle. It carries no settings, and a
+ * schedule in it behaves exactly as one in `default` would. What it changes is
+ * identity. A schedule's name is unique within its group rather than within the
+ * Account, and the group is in the schedule's ARN. Two deployments of the same
+ * construct into one Account and Region collide on schedule names unless each
+ * one has its own group.
+ */
+export class SimSchedulerScheduleGroup {
+    name;
+    arn;
+    creationDate;
+    lastModificationDate;
+    state = activeState;
+    constructor(properties) {
+        this.name = properties.name;
+        this.arn = schedulerScheduleGroupArn(properties.name, properties.accountRegionScope);
+        this.creationDate = properties.createdAt;
+        this.lastModificationDate = properties.createdAt;
+    }
+}

package/dist/service/scheduler/index.d.ts

@@ -2,6 +2,8 @@ export { SimScheduler } from "./sim-scheduler.js";
 export type { SimSchedulerRequestOptions } from "./command/sim-scheduler-request-options.js";
 export { SimSchedulerSchedule, type SimSchedulerActionAfterCompletion, } from "./schedule/sim-scheduler-schedule.js";
 export { schedulerScheduleArn } from "./schedule/sim-scheduler-schedule-arn.js";
+export { SimSchedulerScheduleGroup } from "./group/sim-scheduler-schedule-group.js";
+export { schedulerScheduleGroupArn } from "./group/sim-scheduler-schedule-group-arn.js";
 export { defaultScheduleGroupName, SimSchedulerScheduleName, } from "./schedule/sim-scheduler-schedule-name.js";
 export { SimSchedulerScheduleState } from "./schedule/sim-scheduler-schedule-state.js";
 export { schedulerScheduleDialect } from "./schedule/sim-scheduler-schedule-expression.js";

package/dist/service/scheduler/index.js

@@ -1,6 +1,8 @@
 export { SimScheduler } from "./sim-scheduler.js";
 export { SimSchedulerSchedule, } from "./schedule/sim-scheduler-schedule.js";
 export { schedulerScheduleArn } from "./schedule/sim-scheduler-schedule-arn.js";
+export { SimSchedulerScheduleGroup } from "./group/sim-scheduler-schedule-group.js";
+export { schedulerScheduleGroupArn } from "./group/sim-scheduler-schedule-group-arn.js";
 export { defaultScheduleGroupName, SimSchedulerScheduleName, } from "./schedule/sim-scheduler-schedule-name.js";
 export { SimSchedulerScheduleState } from "./schedule/sim-scheduler-schedule-state.js";
 export { schedulerScheduleDialect } from "./schedule/sim-scheduler-schedule-expression.js";

package/dist/service/scheduler/schedule/sim-scheduler-schedule-name.d.ts

@@ -1,11 +1,9 @@
 /**
- * The one schedule group this simulation has.
+ * The schedule group a request naming none goes to.
  *
- * Every Account has a `default` group without one being created, and named
- * groups are a resource of their own with their own commands. Nothing here
- * creates one, so a schedule asking for another group is refused rather than
- * quietly put in `default`, where it would have the wrong ARN and be found by
- * a listing that should not see it.
+ * Every Account has a `default` group without one being created, which is why
+ * this is a name every scope already has rather than one the first request
+ * makes up.
  */
 export declare const defaultScheduleGroupName = "default";
 /**
@@ -22,8 +20,12 @@ export declare class SimSchedulerScheduleName {
 /**
  * The name of the schedule group a request names.
  *
- * A request naming no group gets `default`, as AWS does. One naming any other
- * group is refused: schedule groups are not simulated, and a schedule quietly
- * moved into `default` would carry an ARN naming a group it is not in.
+ * A request naming no group gets `default`, as AWS does. Whether the group is
+ * there is a separate question, asked once the caller has been authorized, so
+ * nothing here reaches a store.
  */
 export declare function requestedScheduleGroupName(value: string | undefined): string;
+/**
+ * The name of the schedule group a group command names, which is required.
+ */
+export declare function requiredScheduleGroupName(value: string | undefined): string;

package/dist/service/scheduler/schedule/sim-scheduler-schedule-name.js

@@ -1,4 +1,4 @@
-import { SimSchedulerUnsimulatedInputException, SimSchedulerValidationException, } from "../error/sim-scheduler.error.js";
+import { SimSchedulerValidationException } from "../error/sim-scheduler.error.js";
 const maximumNameLength = 64;
 /**
  * The characters AWS takes in a schedule name, and in a group name: letters,
@@ -6,13 +6,11 @@ const maximumNameLength = 64;
  */
 const allowedName = /^[0-9a-zA-Z\-_.]+$/u;
 /**
- * The one schedule group this simulation has.
+ * The schedule group a request naming none goes to.
  *
- * Every Account has a `default` group without one being created, and named
- * groups are a resource of their own with their own commands. Nothing here
- * creates one, so a schedule asking for another group is refused rather than
- * quietly put in `default`, where it would have the wrong ARN and be found by
- * a listing that should not see it.
+ * Every Account has a `default` group without one being created, which is why
+ * this is a name every scope already has rather than one the first request
+ * makes up.
  */
 export const defaultScheduleGroupName = "default";
 /**
@@ -51,20 +49,19 @@ export class SimSchedulerScheduleName {
 /**
  * The name of the schedule group a request names.
  *
- * A request naming no group gets `default`, as AWS does. One naming any other
- * group is refused: schedule groups are not simulated, and a schedule quietly
- * moved into `default` would carry an ARN naming a group it is not in.
+ * A request naming no group gets `default`, as AWS does. Whether the group is
+ * there is a separate question, asked once the caller has been authorized, so
+ * nothing here reaches a store.
  */
 export function requestedScheduleGroupName(value) {
     if (value === undefined) {
         return defaultScheduleGroupName;
     }
-    const groupName = readName("GroupName", value);
-    if (groupName !== defaultScheduleGroupName) {
-        throw new SimSchedulerUnsimulatedInputException(`Schedule groups are not simulated, so a schedule goes in the ` +
-            `${defaultScheduleGroupName} group. GroupName '${groupName}' is ` +
-            `refused rather than put in ${defaultScheduleGroupName}, where its ` +
-            `ARN would name a group it is not in.`);
-    }
-    return groupName;
+    return readName("GroupName", value);
+}
+/**
+ * The name of the schedule group a group command names, which is required.
+ */
+export function requiredScheduleGroupName(value) {
+    return readName("Name", value);
 }

package/dist/service/scheduler/schedule/sim-scheduler-schedule-store.d.ts

@@ -23,6 +23,13 @@ export declare class SimSchedulerScheduleStore {
      * Resolve a schedule by group and name, or refuse.
      */
     require(groupName: string, scheduleName: string): SimSchedulerSchedule;
+    /**
+     * Forget every schedule of one group.
+     *
+     * Deleting a group takes its schedules with it, as it does on AWS, and how
+     * to find them is this store's own business rather than the command's.
+     */
+    removeGroup(groupName: string): void;
     /**
      * Forget a deleted schedule.
      */

package/dist/service/scheduler/schedule/sim-scheduler-schedule-store.js

@@ -44,6 +44,19 @@ export class SimSchedulerScheduleStore {
         }
         return found;
     }
+    /**
+     * Forget every schedule of one group.
+     *
+     * Deleting a group takes its schedules with it, as it does on AWS, and how
+     * to find them is this store's own business rather than the command's.
+     */
+    removeGroup(groupName) {
+        for (const schedule of this.all) {
+            if (schedule.groupName === groupName) {
+                this.remove(schedule);
+            }
+        }
+    }
     /**
      * Forget a deleted schedule.
      */

package/dist/service/scheduler/schedule/sim-scheduler-schedule.d.ts

@@ -35,6 +35,19 @@ export declare class SimSchedulerSchedule {
     readonly name: SimSchedulerScheduleName;
     readonly groupName: string;
     readonly arn: string;
+    /**
+     * The ARN of the group this schedule is in.
+     *
+     * Kept beside the schedule's own ARN because it is a different resource path
+     * and the two are easy to confuse. This is the one AWS recommends as the
+     * `aws:SourceArn` of an execution role's trust policy.
+     */
+    readonly groupArn: string;
+    /**
+     * The Account this schedule is in, supplied as `aws:SourceAccount` when its
+     * execution role is assumed.
+     */
+    readonly accountId: string;
     readonly target: SimSchedulerTarget;
     readonly actionAfterCompletion: SimSchedulerActionAfterCompletion;
     readonly description: string | undefined;

package/dist/service/scheduler/schedule/sim-scheduler-schedule.js

@@ -1,3 +1,4 @@
+import { schedulerScheduleGroupArn } from "../group/sim-scheduler-schedule-group-arn.js";
 import { schedulerScheduleArn } from "./sim-scheduler-schedule-arn.js";
 /**
  * One simulated EventBridge Scheduler schedule.
@@ -11,6 +12,19 @@ export class SimSchedulerSchedule {
     name;
     groupName;
     arn;
+    /**
+     * The ARN of the group this schedule is in.
+     *
+     * Kept beside the schedule's own ARN because it is a different resource path
+     * and the two are easy to confuse. This is the one AWS recommends as the
+     * `aws:SourceArn` of an execution role's trust policy.
+     */
+    groupArn;
+    /**
+     * The Account this schedule is in, supplied as `aws:SourceAccount` when its
+     * execution role is assumed.
+     */
+    accountId;
     target;
     actionAfterCompletion;
     description;
@@ -25,6 +39,8 @@ export class SimSchedulerSchedule {
         this.name = properties.name;
         this.groupName = properties.groupName;
         this.arn = schedulerScheduleArn(properties.groupName, properties.name.value, properties.accountRegionScope);
+        this.groupArn = schedulerScheduleGroupArn(properties.groupName, properties.accountRegionScope);
+        this.accountId = properties.accountRegionScope.accountId;
         this.schedule = properties.schedule;
         this.target = properties.target;
         this.actionAfterCompletion = properties.actionAfterCompletion;

package/dist/service/scheduler/sdk/sim-scheduler-sdk-command-router.js

@@ -26,6 +26,22 @@ export class SimSchedulerSdkCommandRouter {
                 "ListSchedulesCommand",
                 async (command, context) => await simScheduler.listSchedules(command, simSdkCallerOptions(context)),
             ],
+            [
+                "CreateScheduleGroupCommand",
+                async (command, context) => await simScheduler.createScheduleGroup(command, simSdkCallerOptions(context)),
+            ],
+            [
+                "GetScheduleGroupCommand",
+                async (command, context) => await simScheduler.getScheduleGroup(command, simSdkCallerOptions(context)),
+            ],
+            [
+                "DeleteScheduleGroupCommand",
+                async (command, context) => await simScheduler.deleteScheduleGroup(command, simSdkCallerOptions(context)),
+            ],
+            [
+                "ListScheduleGroupsCommand",
+                async (command, context) => await simScheduler.listScheduleGroups(command, simSdkCallerOptions(context)),
+            ],
         ]);
     }
     /**

package/dist/service/scheduler/sim-scheduler-inspection.d.ts

@@ -1,3 +1,5 @@
+import type { SimSchedulerScheduleGroup } from "./group/sim-scheduler-schedule-group.js";
+import type { SimSchedulerScheduleGroupStore } from "./group/sim-scheduler-schedule-group-store.js";
 import type { SimSchedulerSchedule } from "./schedule/sim-scheduler-schedule.js";
 import type { SimSchedulerScheduleStore } from "./schedule/sim-scheduler-schedule-store.js";
 /**
@@ -11,6 +13,7 @@ import type { SimSchedulerScheduleStore } from "./schedule/sim-scheduler-schedul
  */
 export declare abstract class SimSchedulerInspection {
     protected abstract readonly scheduleStore: SimSchedulerScheduleStore;
+    protected abstract readonly groupStore: SimSchedulerScheduleGroupStore;
     /**
      * Find a schedule by name, in a group.
      *
@@ -22,4 +25,15 @@ export declare abstract class SimSchedulerInspection {
      * Every schedule this scope holds, in creation order.
      */
     get allSchedules(): readonly SimSchedulerSchedule[];
+    /**
+     * Find a schedule group by name.
+     */
+    findScheduleGroup(groupName: string): SimSchedulerScheduleGroup | undefined;
+    /**
+     * Every schedule group this scope holds, in creation order.
+     *
+     * `default` is always the first of them, since every Account has it without
+     * anyone creating one.
+     */
+    get allScheduleGroups(): readonly SimSchedulerScheduleGroup[];
 }