@kensio/yulin 1.20.13 → 1.20.15

package/dist/service/scheduler/command/group/sim-scheduler-group-commands.js

@@ -0,0 +1,72 @@
+import { SimSchedulerConflictException } from "../../error/sim-scheduler.error.js";
+import { SimSchedulerPage } from "../sim-scheduler-page.js";
+import { narrowedScheduleGroups } from "./sim-scheduler-listed-groups.js";
+import { refuseUnsimulatedGroupInput } from "./sim-scheduler-unsimulated-group-input.js";
+import { describedScheduleGroup, listedScheduleGroup, } from "./sim-scheduler-described-group.js";
+/**
+ * The commands that manage schedule groups.
+ *
+ * All four in one handler, unlike schedules, where creating and updating are
+ * their own. A group is a name. There is no request to read into a resource,
+ * and no update at all, since `Name` is the only thing a group has and AWS
+ * replaces the group to change it.
+ */
+export class SimSchedulerGroupCommands {
+    groups;
+    schedules;
+    access;
+    constructor(properties) {
+        this.groups = properties.groups;
+        this.schedules = properties.schedules;
+        this.access = properties.access;
+    }
+    /**
+     * Create a schedule group.
+     */
+    createScheduleGroup(command, options) {
+        const input = command.input;
+        refuseUnsimulatedGroupInput(input);
+        const groupName = this.access.authorized("scheduler:CreateScheduleGroup", input.Name, options);
+        if (this.groups.find(groupName) !== undefined) {
+            throw new SimSchedulerConflictException(`Schedule group ${groupName} already exists.`);
+        }
+        return {
+            $metadata: {},
+            ScheduleGroupArn: this.groups.create(groupName).arn,
+        };
+    }
+    /**
+     * Describe a schedule group.
+     */
+    getScheduleGroup(command, options) {
+        const group = this.access.require("scheduler:GetScheduleGroup", command.input.Name, options);
+        return { $metadata: {}, ...describedScheduleGroup(group) };
+    }
+    /**
+     * Delete a schedule group, and the schedules in it.
+     *
+     * AWS deletes the schedules with the group rather than refusing a group that
+     * still holds some, and leaves the group in a `DELETING` state until they
+     * have gone. Here they go in the same call, so nothing is ever seen in that
+     * state.
+     */
+    deleteScheduleGroup(command, options) {
+        const group = this.access.requireDeletable("scheduler:DeleteScheduleGroup", command.input.Name, options);
+        this.schedules.removeGroup(group.name);
+        this.groups.remove(group);
+        return { $metadata: {} };
+    }
+    /**
+     * List the schedule groups of this scope, in creation order.
+     */
+    listScheduleGroups(command, options) {
+        const input = command.input;
+        this.access.authorizeListing("scheduler:ListScheduleGroups", options);
+        const page = new SimSchedulerPage(narrowedScheduleGroups(this.groups.all, input).map(listedScheduleGroup), input.MaxResults, input.NextToken);
+        return {
+            $metadata: {},
+            ScheduleGroups: page.items,
+            NextToken: page.nextToken,
+        };
+    }
+}

package/dist/service/scheduler/command/group/sim-scheduler-listed-groups.d.ts

@@ -0,0 +1,6 @@
+import type { SimSchedulerScheduleGroup } from "../../group/sim-scheduler-schedule-group.js";
+import type { SimListScheduleGroupsCommandInput } from "./group.command.js";
+/**
+ * The groups a listing reports, narrowed by what it asked for.
+ */
+export declare function narrowedScheduleGroups(groups: readonly SimSchedulerScheduleGroup[], input: SimListScheduleGroupsCommandInput): readonly SimSchedulerScheduleGroup[];

package/dist/service/scheduler/command/group/sim-scheduler-listed-groups.js

@@ -0,0 +1,10 @@
+/**
+ * The groups a listing reports, narrowed by what it asked for.
+ */
+export function narrowedScheduleGroups(groups, input) {
+    const prefix = input.NamePrefix;
+    if (prefix === undefined) {
+        return groups;
+    }
+    return groups.filter((group) => group.name.startsWith(prefix));
+}

package/dist/service/scheduler/command/group/sim-scheduler-unsimulated-group-input.d.ts

@@ -0,0 +1,14 @@
+import type { SimCreateScheduleGroupCommandInput } from "./group.command.js";
+/**
+ * Refuse the group request inputs this simulation does not model.
+ *
+ * Tagging is most of what AWS says a group is for, and nothing here reads a
+ * tag back, so a group created without them would look tagged to whoever
+ * asked and untagged to everything else. An empty list asks for no tags, so
+ * there is nothing to drop and nothing to refuse.
+ *
+ * A template is treated differently. The CDK puts a Stack's tags on a group
+ * without being asked, and failing a Stack over them would be a refusal nobody
+ * wrote.
+ */
+export declare function refuseUnsimulatedGroupInput(input: SimCreateScheduleGroupCommandInput): void;

package/dist/service/scheduler/command/group/sim-scheduler-unsimulated-group-input.js

@@ -0,0 +1,19 @@
+import { SimSchedulerUnsimulatedInputException } from "../../error/sim-scheduler.error.js";
+/**
+ * Refuse the group request inputs this simulation does not model.
+ *
+ * Tagging is most of what AWS says a group is for, and nothing here reads a
+ * tag back, so a group created without them would look tagged to whoever
+ * asked and untagged to everything else. An empty list asks for no tags, so
+ * there is nothing to drop and nothing to refuse.
+ *
+ * A template is treated differently. The CDK puts a Stack's tags on a group
+ * without being asked, and failing a Stack over them would be a refusal nobody
+ * wrote.
+ */
+export function refuseUnsimulatedGroupInput(input) {
+    if (input.Tags !== undefined && input.Tags.length > 0) {
+        throw new SimSchedulerUnsimulatedInputException("Schedule group tags are not simulated, so CreateScheduleGroup " +
+            "refuses them rather than dropping them");
+    }
+}

package/dist/service/scheduler/command/schedule/sim-scheduler-create-schedule.js

@@ -26,6 +26,7 @@ export class SimSchedulerCreateSchedule {
         const input = command.input;
         const requested = this.access.requested(input);
         this.access.authorize("scheduler:CreateSchedule", requested, options);
+        this.access.requireGroup(requested.groupName);
         if (this.schedules.find(requested.groupName, requested.name.value) !==
             undefined) {
             throw new SimSchedulerConflictException(`Schedule ${requested.name.value} already exists in group ` +

package/dist/service/scheduler/command/schedule/sim-scheduler-schedule-access.d.ts

@@ -1,4 +1,5 @@
 import type { SimAwsAccountRegionScope } from "../../../aws/sim-aws-account-region-scope.js";
+import type { SimSchedulerScheduleGroupStore } from "../../group/sim-scheduler-schedule-group-store.js";
 import { SimSchedulerScheduleName } from "../../schedule/sim-scheduler-schedule-name.js";
 import type { SimSchedulerSchedule } from "../../schedule/sim-scheduler-schedule.js";
 import type { SimSchedulerScheduleStore } from "../../schedule/sim-scheduler-schedule-store.js";
@@ -13,6 +14,7 @@ export interface SimSchedulerRequestedSchedule {
 }
 interface SimSchedulerScheduleAccessProperties {
     readonly schedules: SimSchedulerScheduleStore;
+    readonly groups: SimSchedulerScheduleGroupStore;
     readonly authorizer: SimSchedulerAuthorizer;
     readonly accountRegionScope: SimAwsAccountRegionScope;
 }
@@ -29,6 +31,7 @@ interface SimSchedulerScheduleRequest {
  */
 export declare class SimSchedulerScheduleAccess {
     private readonly schedules;
+    private readonly groups;
     private readonly authorizer;
     private readonly accountRegionScope;
     constructor(properties: SimSchedulerScheduleAccessProperties);
@@ -41,6 +44,19 @@ export declare class SimSchedulerScheduleAccess {
      * exist.
      */
     authorize(action: string, requested: SimSchedulerRequestedSchedule, options?: SimSchedulerRequestOptions): void;
+    /**
+     * Ensure the group a request names is there, which AWS requires of every
+     * request naming one.
+     *
+     * Real Scheduler refuses a schedule whose `GroupName` names no group rather
+     * than creating it in `default`, and so does this. The group is in a
+     * schedule's ARN, and a schedule quietly moved would carry an ARN naming a
+     * group it had never been put in.
+     *
+     * Asked after the caller is authorized, so a caller with no permission
+     * learns nothing about which groups exist.
+     */
+    requireGroup(groupName: string): void;
     /**
      * Resolve the schedule a request names, authorizing the action first.
      */

package/dist/service/scheduler/command/schedule/sim-scheduler-schedule-access.js

@@ -9,10 +9,12 @@ import { requestedScheduleGroupName, SimSchedulerScheduleName, } from "../../sch
  */
 export class SimSchedulerScheduleAccess {
     schedules;
+    groups;
     authorizer;
     accountRegionScope;
     constructor(properties) {
         this.schedules = properties.schedules;
+        this.groups = properties.groups;
         this.authorizer = properties.authorizer;
         this.accountRegionScope = properties.accountRegionScope;
     }
@@ -30,7 +32,22 @@ export class SimSchedulerScheduleAccess {
      * exist.
      */
     authorize(action, requested, options) {
-        this.authorizer.authorizeSchedule(action, this.arnFor(requested), options);
+        this.authorizer.authorizeResource(action, this.arnFor(requested), options);
+    }
+    /**
+     * Ensure the group a request names is there, which AWS requires of every
+     * request naming one.
+     *
+     * Real Scheduler refuses a schedule whose `GroupName` names no group rather
+     * than creating it in `default`, and so does this. The group is in a
+     * schedule's ARN, and a schedule quietly moved would carry an ARN naming a
+     * group it had never been put in.
+     *
+     * Asked after the caller is authorized, so a caller with no permission
+     * learns nothing about which groups exist.
+     */
+    requireGroup(groupName) {
+        this.groups.require(groupName);
     }
     /**
      * Resolve the schedule a request names, authorizing the action first.
@@ -38,6 +55,7 @@ export class SimSchedulerScheduleAccess {
     require(action, request, options) {
         const requested = this.requested(request);
         this.authorize(action, requested, options);
+        this.requireGroup(requested.groupName);
         return this.schedules.require(requested.groupName, requested.name.value);
     }
     /**
@@ -48,8 +66,10 @@ export class SimSchedulerScheduleAccess {
      * listing by what the caller can reach.
      */
     listedGroupName(action, requested, options) {
-        this.authorizer.authorizeAnySchedule(action, options);
-        return requestedScheduleGroupName(requested);
+        this.authorizer.authorizeAnyResource(action, options);
+        const groupName = requestedScheduleGroupName(requested);
+        this.requireGroup(groupName);
+        return groupName;
     }
     /**
      * The ARN a schedule of this name in this group has, or would have.

package/dist/service/scheduler/command/sim-scheduler-command.types.d.ts

@@ -1 +1,2 @@
 export type { SimCreateScheduleCommand, SimCreateScheduleCommandOutput, SimDeleteScheduleCommand, SimDeleteScheduleCommandInput, SimDeleteScheduleCommandOutput, SimGetScheduleCommand, SimGetScheduleCommandInput, SimGetScheduleCommandOutput, SimListSchedulesCommand, SimListSchedulesCommandInput, SimListSchedulesCommandOutput, SimSchedulerFlexibleTimeWindow, SimSchedulerListedSchedule, SimSchedulerRequestTarget, SimSchedulerScheduleInput, SimUpdateScheduleCommand, SimUpdateScheduleCommandOutput, } from "./schedule/schedule.command.js";
+export type { SimCreateScheduleGroupCommand, SimCreateScheduleGroupCommandInput, SimCreateScheduleGroupCommandOutput, SimDeleteScheduleGroupCommand, SimDeleteScheduleGroupCommandInput, SimDeleteScheduleGroupCommandOutput, SimGetScheduleGroupCommand, SimGetScheduleGroupCommandInput, SimGetScheduleGroupCommandOutput, SimListScheduleGroupsCommand, SimListScheduleGroupsCommandInput, SimListScheduleGroupsCommandOutput, SimSchedulerListedScheduleGroup, SimSchedulerTag, } from "./group/group.command.js";

package/dist/service/scheduler/command/sim-scheduler-commands.d.ts

@@ -3,13 +3,16 @@ import type { SimAwsAccountRegionScope } from "../../aws/sim-aws-account-region-
 import type { SimIamInterServiceAuthZ } from "../../iam/authorize/sim-iam-inter-service-auth-z.js";
 import type { SimSchedulerDeliveryTargets } from "../delivery/sim-scheduler-delivery.js";
 import { SimSchedulerTargetDelivery } from "../delivery/sim-scheduler-target-delivery.js";
+import type { SimSchedulerScheduleGroupStore } from "../group/sim-scheduler-schedule-group-store.js";
 import { SimSchedulerSchedules } from "../schedule/sim-scheduler-schedules.js";
 import type { SimSchedulerScheduleStore } from "../schedule/sim-scheduler-schedule-store.js";
+import { SimSchedulerGroupCommands } from "./group/sim-scheduler-group-commands.js";
 import { SimSchedulerCreateSchedule } from "./schedule/sim-scheduler-create-schedule.js";
 import { SimSchedulerScheduleCommands } from "./schedule/sim-scheduler-schedule-commands.js";
 import { SimSchedulerUpdateSchedule } from "./schedule/sim-scheduler-update-schedule.js";
 interface SimSchedulerCommandsProperties {
     readonly schedules: SimSchedulerScheduleStore;
+    readonly groups: SimSchedulerScheduleGroupStore;
     readonly iam: SimIamInterServiceAuthZ;
     readonly background: BackgroundScheduler;
     readonly deliveryTargets?: SimSchedulerDeliveryTargets | undefined;
@@ -25,6 +28,7 @@ export declare class SimSchedulerCommands {
     readonly scheduleCreation: SimSchedulerCreateSchedule;
     readonly scheduleUpdate: SimSchedulerUpdateSchedule;
     readonly schedules: SimSchedulerScheduleCommands;
+    readonly groups: SimSchedulerGroupCommands;
     readonly delivery: SimSchedulerTargetDelivery;
     readonly firing: SimSchedulerSchedules;
     constructor(properties: SimSchedulerCommandsProperties);

package/dist/service/scheduler/command/sim-scheduler-commands.js

@@ -2,6 +2,8 @@ import { SimSchedulerNoDeliveryTargets } from "../delivery/sim-scheduler-no-deli
 import { SimSchedulerTargetDelivery } from "../delivery/sim-scheduler-target-delivery.js";
 import { SimSchedulerSchedules } from "../schedule/sim-scheduler-schedules.js";
 import { SimSchedulerAuthorizer } from "./authorize/sim-scheduler-authorizer.js";
+import { SimSchedulerGroupAccess } from "./group/sim-scheduler-group-access.js";
+import { SimSchedulerGroupCommands } from "./group/sim-scheduler-group-commands.js";
 import { SimSchedulerCreateSchedule } from "./schedule/sim-scheduler-create-schedule.js";
 import { SimSchedulerScheduleAccess } from "./schedule/sim-scheduler-schedule-access.js";
 import { SimSchedulerScheduleCommands } from "./schedule/sim-scheduler-schedule-commands.js";
@@ -17,13 +19,15 @@ export class SimSchedulerCommands {
     scheduleCreation;
     scheduleUpdate;
     schedules;
+    groups;
     delivery;
     firing;
     constructor(properties) {
-        const { schedules, accountRegionScope, background } = properties;
+        const { schedules, groups, accountRegionScope, background } = properties;
         const authorizer = new SimSchedulerAuthorizer({ iam: properties.iam });
         const access = new SimSchedulerScheduleAccess({
             schedules,
+            groups,
             authorizer,
             accountRegionScope,
         });
@@ -52,5 +56,14 @@ export class SimSchedulerCommands {
             firing: this.firing,
         });
         this.schedules = new SimSchedulerScheduleCommands({ schedules, access });
+        this.groups = new SimSchedulerGroupCommands({
+            groups,
+            schedules,
+            access: new SimSchedulerGroupAccess({
+                groups,
+                authorizer,
+                accountRegionScope,
+            }),
+        });
     }
 }

package/dist/service/scheduler/delivery/sim-aws-scheduler-delivery-targets.js

@@ -29,7 +29,7 @@ export class SimAwsSchedulerDeliveryTargets {
         const arn = request.schedule.target.arn;
         const role = schedulerExecutionRoleTarget(request.schedule.target.roleArn);
         const roleScope = this.simAws.accountRegionScope(role.accountId, arn.regionName);
-        const caller = await assumeSchedulerExecutionRole(role, roleScope.iam());
+        const caller = await assumeSchedulerExecutionRole(role, roleScope, request.schedule);
         await this.invoke(arn.service, { request, caller });
     }
     /**

package/dist/service/scheduler/delivery/sim-scheduler-delivery-failures.d.ts

@@ -6,6 +6,13 @@ interface SimSchedulerDeliveryFailureProperties {
     readonly at: Date;
     readonly error: unknown;
 }
+/**
+ * A failed invocation as it serialises. Every property the failure holds, plus
+ * the message the getter reads off the error.
+ */
+export interface SimSchedulerDeliveryFailureJson extends SimSchedulerDeliveryFailureProperties {
+    readonly message: string;
+}
 /**
  * One invocation a schedule could not make.
  */
@@ -28,6 +35,15 @@ export declare class SimSchedulerDeliveryFailure {
      * What went wrong, as a message.
      */
     get message(): string;
+    /**
+     * The failure as JSON.stringify renders it, message included.
+     *
+     * Serialising a failure is the first thing to reach for when a schedule did
+     * not do what a test expected. The message is a getter on the prototype and
+     * would be left out. An Error keeps its own message on a non-enumerable
+     * property and prints as `{}`.
+     */
+    toJSON(): SimSchedulerDeliveryFailureJson;
 }
 /**
  * Every invocation one simulated Scheduler scope could not make.

package/dist/service/scheduler/delivery/sim-scheduler-delivery-failures.js

@@ -32,6 +32,25 @@ export class SimSchedulerDeliveryFailure {
         }
         return String(this.error);
     }
+    /**
+     * The failure as JSON.stringify renders it, message included.
+     *
+     * Serialising a failure is the first thing to reach for when a schedule did
+     * not do what a test expected. The message is a getter on the prototype and
+     * would be left out. An Error keeps its own message on a non-enumerable
+     * property and prints as `{}`.
+     */
+    toJSON() {
+        return {
+            scheduleName: this.scheduleName,
+            scheduleArn: this.scheduleArn,
+            targetArn: this.targetArn,
+            roleArn: this.roleArn,
+            at: this.at,
+            message: this.message,
+            error: this.error,
+        };
+    }
 }
 /**
  * Every invocation one simulated Scheduler scope could not make.

package/dist/service/scheduler/delivery/sim-scheduler-delivery-function.js

@@ -1,5 +1,6 @@
 import { SimSchedulerDeliveryNotPermitted, SimSchedulerTargetNotFound, } from "../error/sim-scheduler-delivery.error.js";
 import { simSchedulerDeliveryDocument, } from "./sim-scheduler-delivery.js";
+import { simScopeIamAuthZ } from "../../iam/authorize/sim-iam-region-auth-z.js";
 const invokeAction = "lambda:InvokeFunction";
 /**
  * A Lambda function a simulated schedule invokes.
@@ -25,7 +26,7 @@ export class SimSchedulerDeliveryFunction {
         if (simFunction === undefined) {
             throw new SimSchedulerTargetNotFound(`${targetArn.value} is not a simulated Lambda function.`);
         }
-        const decision = this.scope.iam().authorize({
+        const decision = simScopeIamAuthZ(this.scope).authorize({
             action: invokeAction,
             resource: targetArn.value,
             caller: delivery.caller,

package/dist/service/scheduler/delivery/sim-scheduler-delivery-queue.js

@@ -1,5 +1,6 @@
 import { SimSchedulerDeliveryNotPermitted, SimSchedulerTargetNotFound, } from "../error/sim-scheduler-delivery.error.js";
 import { simSchedulerDeliveryJson, } from "./sim-scheduler-delivery.js";
+import { simScopeIamAuthZ } from "../../iam/authorize/sim-iam-region-auth-z.js";
 const sendAction = "sqs:SendMessage";
 /**
  * An SQS queue a simulated schedule sends to.
@@ -18,7 +19,7 @@ export class SimSchedulerDeliveryQueue {
         if (queue === undefined) {
             throw new SimSchedulerTargetNotFound(`${targetArn.value} is not a simulated SQS queue.`);
         }
-        const decision = this.scope.iam().authorize({
+        const decision = simScopeIamAuthZ(this.scope).authorize({
             action: sendAction,
             resource: targetArn.value,
             caller: delivery.caller,

package/dist/service/scheduler/delivery/sim-scheduler-delivery-topic.js

@@ -1,5 +1,6 @@
 import { SimSchedulerDeliveryNotPermitted, SimSchedulerTargetNotFound, } from "../error/sim-scheduler-delivery.error.js";
 import { simSchedulerDeliveryJson, } from "./sim-scheduler-delivery.js";
+import { simScopeIamAuthZ } from "../../iam/authorize/sim-iam-region-auth-z.js";
 const publishAction = "sns:Publish";
 /**
  * An SNS topic a simulated schedule publishes to.
@@ -18,7 +19,7 @@ export class SimSchedulerDeliveryTopic {
         if (topic === undefined) {
             throw new SimSchedulerTargetNotFound(`${targetArn.value} is not a simulated SNS topic.`);
         }
-        const decision = this.scope.iam().authorize({
+        const decision = simScopeIamAuthZ(this.scope).authorize({
             action: publishAction,
             resource: targetArn.value,
             caller: delivery.caller,

package/dist/service/scheduler/delivery/sim-scheduler-execution-role.d.ts

@@ -1,6 +1,7 @@
 import type { SimAwsCaller } from "../../aws/caller/sim-aws-caller.js";
-import type { SimIam } from "../../iam/sim-iam.js";
-import { type SimServiceRoleTarget } from "../../sts/service-role/sim-service-role.js";
+import type { SimAwsAccountRegionContainer } from "../../aws/sim-aws-account-region-scope.js";
+import { type SimServiceRoleTarget } from "../../sts/service-role/sim-service-role-target.js";
+import type { SimSchedulerSchedule } from "../schedule/sim-scheduler-schedule.js";
 export type SimSchedulerExecutionRoleTarget = SimServiceRoleTarget;
 /**
  * Read the Account and name out of a schedule's execution role ARN.
@@ -17,5 +18,10 @@ export declare function schedulerExecutionRoleTarget(roleArn: string): SimSchedu
  * function as the `events.amazonaws.com` service principal and the target's own
  * resource policy decides; a schedule assumes a role, and the role's policies
  * decide.
+ *
+ * The schedule comes along because its group ARN is the `aws:SourceArn` AWS
+ * documents for the trust policy condition it recommends against the confused
+ * deputy problem. A schedule ARN is not accepted there, and CDK writes the
+ * group ARN into the execution roles it generates.
  */
-export declare function assumeSchedulerExecutionRole(target: SimSchedulerExecutionRoleTarget, iam: SimIam): Promise<SimAwsCaller>;
+export declare function assumeSchedulerExecutionRole(target: SimSchedulerExecutionRoleTarget, scope: SimAwsAccountRegionContainer, schedule: SimSchedulerSchedule): Promise<SimAwsCaller>;

package/dist/service/scheduler/delivery/sim-scheduler-execution-role.js

@@ -1,4 +1,5 @@
-import { assumeSimServiceRole, simServiceRoleTarget, } from "../../sts/service-role/sim-service-role.js";
+import { assumeSimServiceRole, } from "../../sts/service-role/sim-service-role.js";
+import { simServiceRoleTarget, } from "../../sts/service-role/sim-service-role-target.js";
 import { SimSchedulerDeliveryNotPermitted } from "../error/sim-scheduler-delivery.error.js";
 import { simSchedulerServicePrincipal } from "./sim-scheduler-delivery.js";
 /**
@@ -32,13 +33,19 @@ const refusals = {
  * function as the `events.amazonaws.com` service principal and the target's own
  * resource policy decides; a schedule assumes a role, and the role's policies
  * decide.
+ *
+ * The schedule comes along because its group ARN is the `aws:SourceArn` AWS
+ * documents for the trust policy condition it recommends against the confused
+ * deputy problem. A schedule ARN is not accepted there, and CDK writes the
+ * group ARN into the execution roles it generates.
  */
-export async function assumeSchedulerExecutionRole(target, iam) {
+export async function assumeSchedulerExecutionRole(target, scope, schedule) {
     return await assumeSimServiceRole({
         target,
         servicePrincipal: simSchedulerServicePrincipal,
         sessionName,
-        iam,
+        scope,
+        source: { arn: schedule.groupArn, accountId: schedule.accountId },
         refusals,
     });
 }

package/dist/service/scheduler/group/sim-scheduler-schedule-group-arn.d.ts

@@ -0,0 +1,11 @@
+import type { SimAwsAccountRegionScope } from "../../aws/sim-aws-account-region-scope.js";
+/**
+ * The ARN of one simulated schedule group.
+ *
+ * `arn:aws:scheduler:<region>:<account>:schedule-group/<name>`. That is a
+ * different resource path from a schedule's `schedule/<group>/<name>`. An
+ * identity policy granting `scheduler:` actions on the group names this one,
+ * and so does the `aws:SourceArn` condition AWS recommends in a schedule
+ * execution role's trust policy.
+ */
+export declare function schedulerScheduleGroupArn(groupName: string, scope: SimAwsAccountRegionScope): string;

package/dist/service/scheduler/group/sim-scheduler-schedule-group-arn.js

@@ -0,0 +1,13 @@
+/**
+ * The ARN of one simulated schedule group.
+ *
+ * `arn:aws:scheduler:<region>:<account>:schedule-group/<name>`. That is a
+ * different resource path from a schedule's `schedule/<group>/<name>`. An
+ * identity policy granting `scheduler:` actions on the group names this one,
+ * and so does the `aws:SourceArn` condition AWS recommends in a schedule
+ * execution role's trust policy.
+ */
+export function schedulerScheduleGroupArn(groupName, scope) {
+    return (`arn:aws:scheduler:${scope.regionName}:${scope.accountId}:` +
+        `schedule-group/${groupName}`);
+}

package/dist/service/scheduler/group/sim-scheduler-schedule-group-store.d.ts

@@ -0,0 +1,46 @@
+import type { SimClock } from "../../../util/clock/sim-clock.js";
+import type { SimAwsAccountRegionScope } from "../../aws/sim-aws-account-region-scope.js";
+import { SimSchedulerScheduleGroup } from "./sim-scheduler-schedule-group.js";
+interface SimSchedulerScheduleGroupStoreProperties {
+    readonly accountRegionScope: SimAwsAccountRegionScope;
+    readonly clock: SimClock;
+}
+/**
+ * The schedule groups of one simulated Scheduler scope.
+ *
+ * This store builds its own groups rather than taking them from a writer, which
+ * is the opposite of how schedules are handled. A schedule is read out of a
+ * request carrying a dozen properties, and reading it in one place is what
+ * keeps Create and Update agreeing. A group is a name and two timestamps. A
+ * writer beside this would be a class that exists to call a constructor.
+ */
+export declare class SimSchedulerScheduleGroupStore {
+    private readonly groups;
+    private readonly accountRegionScope;
+    private readonly clock;
+    constructor(properties: SimSchedulerScheduleGroupStoreProperties);
+    /**
+     * Every group in this scope, in creation order.
+     *
+     * `default` is always the first of them. Every Account has it without anyone
+     * creating one, so this scope starts with it too.
+     */
+    get all(): readonly SimSchedulerScheduleGroup[];
+    /**
+     * Create a group, stamped from the simulation's clock.
+     */
+    create(groupName: string): SimSchedulerScheduleGroup;
+    /**
+     * Find a group by name.
+     */
+    find(groupName: string): SimSchedulerScheduleGroup | undefined;
+    /**
+     * Resolve a group by name, or refuse.
+     */
+    require(groupName: string): SimSchedulerScheduleGroup;
+    /**
+     * Forget a deleted group.
+     */
+    remove(group: SimSchedulerScheduleGroup): void;
+}
+export {};

package/dist/service/scheduler/group/sim-scheduler-schedule-group-store.js

@@ -0,0 +1,65 @@
+import { SimSchedulerResourceNotFoundException } from "../error/sim-scheduler.error.js";
+import { defaultScheduleGroupName } from "../schedule/sim-scheduler-schedule-name.js";
+import { SimSchedulerScheduleGroup } from "./sim-scheduler-schedule-group.js";
+/**
+ * The schedule groups of one simulated Scheduler scope.
+ *
+ * This store builds its own groups rather than taking them from a writer, which
+ * is the opposite of how schedules are handled. A schedule is read out of a
+ * request carrying a dozen properties, and reading it in one place is what
+ * keeps Create and Update agreeing. A group is a name and two timestamps. A
+ * writer beside this would be a class that exists to call a constructor.
+ */
+export class SimSchedulerScheduleGroupStore {
+    groups = new Map();
+    accountRegionScope;
+    clock;
+    constructor(properties) {
+        this.accountRegionScope = properties.accountRegionScope;
+        this.clock = properties.clock;
+        this.create(defaultScheduleGroupName);
+    }
+    /**
+     * Every group in this scope, in creation order.
+     *
+     * `default` is always the first of them. Every Account has it without anyone
+     * creating one, so this scope starts with it too.
+     */
+    get all() {
+        return this.groups.values().toArray();
+    }
+    /**
+     * Create a group, stamped from the simulation's clock.
+     */
+    create(groupName) {
+        const group = new SimSchedulerScheduleGroup({
+            name: groupName,
+            accountRegionScope: this.accountRegionScope,
+            createdAt: this.clock.now(),
+        });
+        this.groups.set(groupName, group);
+        return group;
+    }
+    /**
+     * Find a group by name.
+     */
+    find(groupName) {
+        return this.groups.get(groupName);
+    }
+    /**
+     * Resolve a group by name, or refuse.
+     */
+    require(groupName) {
+        const found = this.find(groupName);
+        if (found === undefined) {
+            throw new SimSchedulerResourceNotFoundException(`Schedule group ${groupName} does not exist.`);
+        }
+        return found;
+    }
+    /**
+     * Forget a deleted group.
+     */
+    remove(group) {
+        this.groups.delete(group.name);
+    }
+}

package/dist/service/scheduler/group/sim-scheduler-schedule-group.d.ts

@@ -0,0 +1,25 @@
+import type { SimAwsAccountRegionScope } from "../../aws/sim-aws-account-region-scope.js";
+interface SimSchedulerScheduleGroupProperties {
+    readonly name: string;
+    readonly accountRegionScope: SimAwsAccountRegionScope;
+    readonly createdAt: Date;
+}
+/**
+ * One simulated EventBridge Scheduler schedule group.
+ *
+ * A group is a namespace and a tagging handle. It carries no settings, and a
+ * schedule in it behaves exactly as one in `default` would. What it changes is
+ * identity. A schedule's name is unique within its group rather than within the
+ * Account, and the group is in the schedule's ARN. Two deployments of the same
+ * construct into one Account and Region collide on schedule names unless each
+ * one has its own group.
+ */
+export declare class SimSchedulerScheduleGroup {
+    readonly name: string;
+    readonly arn: string;
+    readonly creationDate: Date;
+    readonly lastModificationDate: Date;
+    readonly state = "ACTIVE";
+    constructor(properties: SimSchedulerScheduleGroupProperties);
+}
+export {};