@kensio/yulin 1.21.2 → 1.21.4

package/dist/service/cloudformation/template/sim-cfn-command-template.d.ts

@@ -0,0 +1,40 @@
+import type { SimAws } from "../../aws/sim-aws.js";
+import type { SimAwsAccountRegionScope } from "../../aws/sim-aws-account-region-scope.js";
+import type { SimCloudFormationStackName } from "../stack/sim-cfn-stack.type.js";
+import type { SimCfnExports } from "../export/sim-cfn-exports.js";
+import type { SimCloudFormationParameterInput } from "../parameters/sim-cfn-parameters.type.js";
+import { type CfnTemplateBodyRecord, SimCfnTemplate } from "./sim-cfn-template.js";
+interface SimCfnCommandTemplateContext {
+    readonly simAws: SimAws;
+    readonly accountRegionScope: SimAwsAccountRegionScope;
+    readonly stackName: SimCloudFormationStackName;
+    /** The ID of the Stack the template is for, where the Stack has one yet. */
+    readonly stackId?: string | undefined;
+    /** The command input the template's Parameter values are read from. */
+    readonly input: SimCloudFormationParameterInput;
+    readonly exports?: SimCfnExports | undefined;
+}
+interface SimCfnCommandTemplateProperties extends SimCfnCommandTemplateContext {
+    readonly templateBody: string;
+}
+interface SimCfnHeldTemplateProperties extends SimCfnCommandTemplateContext {
+    /** The parsed template the Stack is already deployed from. */
+    readonly template: CfnTemplateBodyRecord;
+}
+/**
+ * The template a Stack command was sent, parsed against its Parameter values.
+ *
+ * A Parameter of type `AWS::SSM::Parameter::Value` reads simulated Parameter
+ * Store, so parsing needs the simulation the command arrived at as well as the
+ * body it carried.
+ */
+export declare function simCfnCommandTemplate(properties: SimCfnCommandTemplateProperties): SimCfnTemplate;
+/**
+ * The template a Stack already holds, read against new Parameter values.
+ *
+ * What `UsePreviousTemplate` updates from. The Stack holds the template parsed
+ * rather than as a body, so this takes the parsed one straight back rather than
+ * putting it through the parsing and SAM expansion it has already been through.
+ */
+export declare function simCfnHeldTemplate(properties: SimCfnHeldTemplateProperties): SimCfnTemplate;
+export {};

package/dist/service/cloudformation/template/sim-cfn-command-template.js

@@ -0,0 +1,45 @@
+import { SimCfnParameters } from "../parameters/sim-cfn-parameters.js";
+import { makeSimCfnParameterStore } from "../parameters/store/sim-cfn-parameter-store.js";
+import { SimCfnTemplate, } from "./sim-cfn-template.js";
+/**
+ * The template a Stack command was sent, parsed against its Parameter values.
+ *
+ * A Parameter of type `AWS::SSM::Parameter::Value` reads simulated Parameter
+ * Store, so parsing needs the simulation the command arrived at as well as the
+ * body it carried.
+ */
+export function simCfnCommandTemplate(properties) {
+    const { stackName, stackId, accountRegionScope, exports } = properties;
+    return SimCfnTemplate.fromTemplateBody(properties.templateBody, {
+        stackName,
+        stackId,
+        parameters: commandParameters(properties),
+        accountRegionScope,
+        exports,
+    });
+}
+/**
+ * The template a Stack already holds, read against new Parameter values.
+ *
+ * What `UsePreviousTemplate` updates from. The Stack holds the template parsed
+ * rather than as a body, so this takes the parsed one straight back rather than
+ * putting it through the parsing and SAM expansion it has already been through.
+ */
+export function simCfnHeldTemplate(properties) {
+    const { template, stackName, stackId, accountRegionScope, exports } = properties;
+    return new SimCfnTemplate({
+        template,
+        stackName,
+        stackId,
+        parameters: commandParameters(properties),
+        accountRegionScope,
+        exports,
+    });
+}
+function commandParameters(properties) {
+    const { simAws, accountRegionScope, stackName } = properties;
+    return SimCfnParameters.fromInput(properties.input, {
+        stackName,
+        parameterStore: makeSimCfnParameterStore({ simAws, accountRegionScope }),
+    });
+}

package/dist/service/cloudformation/template/sim-cfn-template.d.ts

@@ -31,11 +31,13 @@ interface SimCfnTemplateProperties {
     readonly template: CfnTemplateBodyRecord;
     readonly parameters?: SimCfnParameters | undefined;
     readonly stackName?: string | undefined;
+    readonly stackId?: string | undefined;
     readonly accountRegionScope?: SimAwsAccountRegionScope | undefined;
     readonly exports?: SimCfnExports | undefined;
 }
 interface SimCfnTemplateFromBodyProperties {
     readonly stackName?: string | undefined;
+    readonly stackId?: string | undefined;
     readonly parameters?: SimCfnParameters | undefined;
     readonly accountRegionScope?: SimAwsAccountRegionScope | undefined;
     readonly exports?: SimCfnExports | undefined;
@@ -48,6 +50,8 @@ interface SimCfnTemplateFromBodyProperties {
 export declare class SimCfnTemplate {
     readonly template: CfnTemplateBodyRecord;
     readonly stackName: string | undefined;
+    /** The unique ID of the Stack this template is being deployed as. */
+    readonly stackId: string | undefined;
     readonly parameters: SimCfnParameters;
     /** The export names a Stack deployed from this template can import. */
     readonly exports: SimCfnExports | undefined;
@@ -81,6 +85,9 @@ export declare class SimCfnTemplate {
      *
      * Resource-backed intrinsic functions are left unresolved here because
      * Outputs are resolved after Resource creation.
+     *
+     * An Output whose `Condition` attribute is false is left out entirely, so it
+     * never reaches the Stack's Outputs and publishes no export.
      */
     outputTemplates(): SimCfnOutputTemplateRecord[];
     /**

package/dist/service/cloudformation/template/sim-cfn-template.js

@@ -5,6 +5,7 @@ import { SimCfnTemplateBodyValidator } from "./sim-cfn-template-body-validator.j
 import { parseSimCfnTemplateBody } from "./sim-cfn-template-body-parse.js";
 import { SimCfnPseudoParameters } from "../parameters/pseudo/sim-cfn-pseudo-parameters.js";
 import { SimCfnConditionEvaluator } from "./condition/sim-cfn-condition-evaluator.js";
+import { SimCfnOutputConditions } from "./condition/sim-cfn-output-conditions.js";
 import { SimCfnResourceConditions } from "./condition/sim-cfn-resource-conditions.js";
 import { samExpandedTemplate } from "../sam/sim-cfn-sam-expansion.js";
 /**
@@ -15,15 +16,18 @@ import { samExpandedTemplate } from "../sam/sim-cfn-sam-expansion.js";
 export class SimCfnTemplate {
     template;
     stackName;
+    /** The unique ID of the Stack this template is being deployed as. */
+    stackId;
     parameters;
     /** The export names a Stack deployed from this template can import. */
     exports;
     accountRegionScope;
     evaluatedConditions;
     constructor(properties) {
-        const { template, parameters, stackName, accountRegionScope, exports } = properties;
+        const { template, parameters, stackName, stackId, accountRegionScope, exports, } = properties;
         this.template = template;
         this.stackName = stackName;
+        this.stackId = stackId;
         this.accountRegionScope = accountRegionScope;
         this.exports = exports;
         const validator = new SimCfnTemplateBodyValidator({ template, stackName });
@@ -49,6 +53,7 @@ export class SimCfnTemplate {
             template: samExpandedTemplate(template),
             parameters: properties.parameters,
             stackName: properties.stackName,
+            stackId: properties.stackId,
             accountRegionScope: properties.accountRegionScope,
             exports: properties.exports,
         });
@@ -86,13 +91,21 @@ export class SimCfnTemplate {
      *
      * Resource-backed intrinsic functions are left unresolved here because
      * Outputs are resolved after Resource creation.
+     *
+     * An Output whose `Condition` attribute is false is left out entirely, so it
+     * never reaches the Stack's Outputs and publishes no export.
      */
     outputTemplates() {
         const valueResolver = this.valueResolver();
+        const outputConditions = new SimCfnOutputConditions({
+            conditions: this.conditions(),
+            stackName: this.stackName,
+        });
         return Object.entries(this.template.Outputs ?? {})
             .filter((entry) => {
             return isRecord(entry[1]);
         })
+            .filter(([outputKey, outputTemplate]) => !outputConditions.excludes(outputKey, outputTemplate))
             .map(([outputKey, outputTemplate]) => ({
             outputKey,
             template: valueResolver.resolveRecordFor(`Sim CloudFormation Output ${outputKey}`, outputTemplate),
@@ -107,6 +120,7 @@ export class SimCfnTemplate {
         return new SimCfnPseudoParameters({
             accountRegionScope: this.accountRegionScope,
             stackName: this.stackName,
+            stackId: this.stackId,
         });
     }
     /**

package/dist/service/cloudfront/origin/custom/sim-cf-custom-origin-request.d.ts

@@ -1,8 +1,10 @@
+import type { SimCloudFrontBehavior } from "../../behaviour/sim-cloud-front-behavior.js";
 import type { SimCfForwardedToOrigin } from "../../origin-request-policy/sim-cf-forwarded-to-origin.js";
 interface SimCfCustomOriginRequestProperties {
     readonly domainName: string;
     readonly originPath: string;
     readonly request: Request;
+    readonly viewerProtocolPolicy?: SimCloudFrontBehavior["viewerProtocolPolicy"] | undefined;
     /**
      * What the Behavior's cache policy and origin request policy carry to the
      * Origin between them.

package/dist/service/cloudfront/origin/custom/sim-cf-custom-origin-request.js

@@ -1,4 +1,5 @@
 import { SimAwsLocalUrl } from "../../../../serve/http/url/sim-aws-local-url.js";
+import { isSimAwsLocalRequest, simAwsRequestHostname, } from "../../../../serve/http/url/sim-aws-request-hostname.js";
 import { stripSimAwsControlHeaders } from "../../../iam/request/sim-aws-control-headers.js";
 import { simCfForwardedOriginHeaders, simCfForwardedOriginSearch, } from "./sim-cf-custom-origin-forwarding.js";
 /**
@@ -23,6 +24,7 @@ export function simCfCustomOriginRequest(properties) {
     originUrl.pathname = originRequestPath(properties.originPath, viewerUrl.pathname);
     originUrl.search = simCfForwardedOriginSearch(viewerUrl.search, forwarded);
     const headers = simCfForwardedOriginHeaders(request.headers, forwarded);
+    applyAwsFacingViewerOrigin(headers, request, properties.viewerProtocolPolicy);
     headers.set("host", originUrl.host);
     // Who the Origin request is from is the Origin's business, not the viewer's,
     // so a viewer's own control headers are dropped before the Origin's are
@@ -51,6 +53,53 @@ export function simCfCustomOriginRequest(properties) {
         signal: request.signal,
     });
 }
+/**
+ * Replace the local same-origin value a browser sends with the origin the
+ * viewer would use against CloudFront.
+ *
+ * https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/RequestAndResponseBehaviorCustomOrigin.html
+ */
+function applyAwsFacingViewerOrigin(headers, viewerRequest, viewerProtocolPolicy) {
+    const value = headers.get("origin");
+    if (value === null || !isSimAwsLocalRequest(viewerRequest)) {
+        return;
+    }
+    const origin = originUrl(value);
+    if (origin === undefined || origin.origin !== viewerOrigin(viewerRequest)) {
+        return;
+    }
+    origin.hostname = simAwsRequestHostname(viewerRequest);
+    origin.port = "";
+    if (viewerProtocolPolicy === "redirect-to-https" ||
+        viewerProtocolPolicy === "https-only") {
+        origin.protocol = "https:";
+    }
+    headers.set("origin", origin.origin);
+}
+/**
+ * The local origin the viewer used, including the Host header when it differs
+ * from the Request URL.
+ */
+function viewerOrigin(request) {
+    const url = new URL(request.url);
+    const host = request.headers.get("host");
+    if (host !== null) {
+        url.host = host;
+    }
+    return url.origin;
+}
+/**
+ * Read a serialized Origin without rejecting the request when it is `null` or
+ * malformed. CloudFront forwards those values unchanged.
+ */
+function originUrl(value) {
+    try {
+        return new URL(value);
+    }
+    catch {
+        return undefined;
+    }
+}
 /**
  * Prefix the Origin path to the request path, as CloudFront does.
  */

package/dist/service/cloudfront/origin/custom/sim-cloudfront-custom-origin.js

@@ -60,6 +60,7 @@ export class SimCloudFrontCustomOrigin {
             domainName: this.domainName,
             originPath: this.originPath,
             request: request.req,
+            viewerProtocolPolicy: request.behavior.viewerProtocolPolicy,
             forwarded: simCfBehaviorForwardedToOrigin(request.behavior, this.policies),
             customHeaders: this.customHeaders,
             signingHeaders: this.signer.forRequest(request),

package/dist/service/cloudfront/origin/s3/sim-cf-s3-origin-responses.js

@@ -21,6 +21,7 @@ export class SimCfS3OriginResponses {
     foundObject(object, request) {
         const headers = simS3ObjectResponseHeaders({
             metadata: object.metadata.values,
+            userMetadata: object.metadata.userDefined,
             bodyLength: object.body.length,
             etag: simS3QuotedETag(object.etag),
             lastModified: object.lastModified,

package/dist/service/cognito/serve/page/sim-cognito-provider-page.js

@@ -44,7 +44,7 @@ export class SimCognitoProviderPage {
      */
     claimFields(provider) {
         return simCognitoMappedClaimNames(provider)
-            .map((claimName) => this.markup.field(`${simCognitoClaimFieldPrefix}${claimName}`, `${claimName} claim`, "text", simCognitoDefaultClaim(claimName)))
+            .map((claimName) => this.markup.field(`${simCognitoClaimFieldPrefix}${claimName}`, `${claimName} claim`, "text", simCognitoDefaultClaim(provider, claimName)))
             .join("");
     }
 }

package/dist/service/cognito/user-pool/idp/sim-cognito-attribute-mapping.d.ts

@@ -1,3 +1,4 @@
+import type { SimCognitoAttributeDataTypeValue } from "../schema/sim-cognito-attribute-data-type.js";
 import type { SimCognitoUserPoolSchema } from "../schema/sim-cognito-user-pool-schema.js";
 import type { SimCognitoAttributeType } from "../user/sim-cognito-user-attributes.js";
 import type { SimCognitoExternalUser } from "./sim-cognito-external-user.js";
@@ -25,6 +26,10 @@ export declare class SimCognitoAttributeMapping {
      * This mapping as a described provider reports it.
      */
     toOutput(): SimCognitoAttributeMappingType;
+    /**
+     * The pool attribute types one provider claim is mapped onto.
+     */
+    dataTypesForClaim(claimName: string): readonly SimCognitoAttributeDataTypeValue[];
     /**
      * The attributes an external user's claims map onto.
      */

package/dist/service/cognito/user-pool/idp/sim-cognito-attribute-mapping.js

@@ -20,6 +20,23 @@ export class SimCognitoAttributeMapping {
     toOutput() {
         return { ...this.mapping };
     }
+    /**
+     * The pool attribute types one provider claim is mapped onto.
+     */
+    dataTypesForClaim(claimName) {
+        return Object.entries(this.mapping).flatMap(([attributeName, mappedClaimName]) => {
+            if (mappedClaimName !== claimName) {
+                return [];
+            }
+            const attribute = this.schema.find(attributeName);
+            return attribute === undefined
+                ? []
+                : [
+                    attribute.toOutput()
+                        .AttributeDataType,
+                ];
+        });
+    }
     /**
      * The attributes an external user's claims map onto.
      */

package/dist/service/cognito/user-pool/idp/sim-cognito-presented-external-user.d.ts

@@ -16,13 +16,13 @@ export declare const simCognitoClaimFieldPrefix = "claim_";
  */
 export declare function simCognitoMappedClaimNames(provider: SimCognitoUserPoolIdentityProvider): readonly string[];
 /**
- * What one claim field is pre-filled with, so that the page signs a user in
- * when nobody edits it.
+ * What one claim field is pre-filled with, so the page signs a user in when
+ * nobody edits it.
  *
- * An address has to look like one, because a pool that verifies or aliases by
- * email holds it to that. Everything else is a name as far as this knows.
+ * The pool attribute type decides the shape. A string claim whose name refers
+ * to an email address uses the reserved address.
  */
-export declare function simCognitoDefaultClaim(claimName: string): string;
+export declare function simCognitoDefaultClaim(provider: SimCognitoUserPoolIdentityProvider, claimName: string): string;
 /**
  * The subject the page pre-fills, which says on its face where it came from.
  */

package/dist/service/cognito/user-pool/idp/sim-cognito-presented-external-user.js

@@ -28,16 +28,32 @@ export function simCognitoMappedClaimNames(provider) {
     return [...new Set(Object.values(provider.attributeMapping.toOutput()))];
 }
 /**
- * What one claim field is pre-filled with, so that the page signs a user in
- * when nobody edits it.
+ * What one claim field is pre-filled with, so the page signs a user in when
+ * nobody edits it.
  *
- * An address has to look like one, because a pool that verifies or aliases by
- * email holds it to that. Everything else is a name as far as this knows.
+ * The pool attribute type decides the shape. A string claim whose name refers
+ * to an email address uses the reserved address.
  */
-export function simCognitoDefaultClaim(claimName) {
-    return claimName.toLowerCase().includes("email")
-        ? defaultAddress
-        : defaultClaimValue;
+export function simCognitoDefaultClaim(provider, claimName) {
+    const dataType = provider.attributeMapping
+        .dataTypesForClaim(claimName)
+        .find((mappedType) => mappedType !== "String") ?? "String";
+    switch (dataType) {
+        case "Boolean": {
+            return "true";
+        }
+        case "DateTime": {
+            return "1970-01-01T00:00:00.000Z";
+        }
+        case "Number": {
+            return "0";
+        }
+        case "String": {
+            return claimName.toLowerCase().includes("email")
+                ? defaultAddress
+                : defaultClaimValue;
+        }
+    }
 }
 /**
  * The subject the page pre-fills, which says on its face where it came from.

package/dist/service/dynamodb/cfn/sim-cfn-dynamodb-resource-factory.d.ts

@@ -1,5 +1,6 @@
 import type { SimCfnServiceResourceFactory } from "../../cloudformation/resource/factory/sim-cfn-resource-factory.type.js";
 import type { SimCfnResource, SimCloudFormationResourceCreateContext, SimCloudFormationResourceDeleteContext } from "../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCloudFormationResourceUpdateContext } from "../../cloudformation/resource/sim-cfn-resource.type.js";
 import type { SimDynamoDb } from "../sim-dynamodb.js";
 interface SimDynamoDbCfnResourceFactoryProperties {
     readonly dynamoDb: SimDynamoDb;
@@ -26,5 +27,9 @@ export declare class SimDynamoDbCfnResourceFactory implements SimCfnServiceResou
      * Delete a simulated DynamoDB resource created from a CloudFormation Resource.
      */
     delete(resourceTypeName: string, resource: SimCfnResource, context: SimCloudFormationResourceDeleteContext): Promise<void>;
+    /**
+     * Validate a DynamoDB Resource replacement before its table is deleted.
+     */
+    assertUpdateAllowed(resourceTypeName: string, current: SimCfnResource, updated: SimCfnResource, context: SimCloudFormationResourceUpdateContext): void;
 }
 export {};

package/dist/service/dynamodb/cfn/sim-cfn-dynamodb-resource-factory.js

@@ -2,6 +2,7 @@ import { simCfnResourceCallerOptions } from "../../cloudformation/resource/calle
 import { SimCfnDynamoDbGlobalTableCreator } from "./global-table/sim-cfn-dynamodb-global-table-creator.js";
 import { SimCfnDynamoDbTableCreator } from "./table/sim-cfn-dynamodb-table-creator.js";
 import { SimCfnDynamoDbResourceDeleter } from "./sim-cfn-dynamodb-resource-deleter.js";
+import { SimCfnDynamoDbTableUpdateValidator } from "./table/sim-cfn-dynamodb-table-update-validator.js";
 /**
  * CloudFormation Resource factory for simulated DynamoDB resources.
  */
@@ -50,4 +51,18 @@ export class SimDynamoDbCfnResourceFactory {
     async delete(resourceTypeName, resource, context) {
         await this.deleter.delete(resourceTypeName, resource, simCfnResourceCallerOptions(context.caller));
     }
+    /**
+     * Validate a DynamoDB Resource replacement before its table is deleted.
+     */
+    assertUpdateAllowed(resourceTypeName, current, updated, context) {
+        if (resourceTypeName !== "Table") {
+            return;
+        }
+        new SimCfnDynamoDbTableUpdateValidator({
+            currentResource: current,
+            updatedResource: updated,
+            currentProperties: context.currentResolvedProperties,
+            updatedProperties: context.updatedResolvedProperties,
+        }).assertAllowed();
+    }
 }

package/dist/service/dynamodb/cfn/table/sim-cfn-dynamodb-table-update-validator.d.ts

@@ -0,0 +1,24 @@
+import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnTemplateValueRecord } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
+interface SimCfnDynamoDbTableUpdateValidatorProperties {
+    readonly currentResource: SimCfnResource;
+    readonly updatedResource: SimCfnResource;
+    readonly currentProperties: SimCfnTemplateValueRecord;
+    readonly updatedProperties: SimCfnTemplateValueRecord;
+}
+/**
+ * Validates constraints that apply when CloudFormation updates a table.
+ */
+export declare class SimCfnDynamoDbTableUpdateValidator {
+    private readonly properties;
+    constructor(properties: SimCfnDynamoDbTableUpdateValidatorProperties);
+    /**
+     * Refuse a template diff that asks DynamoDB for too many index operations.
+     *
+     * https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-dynamodb-table.html
+     */
+    assertAllowed(): void;
+    private tableProperties;
+    private indexUpdates;
+}
+export {};

package/dist/service/dynamodb/cfn/table/sim-cfn-dynamodb-table-update-validator.js

@@ -0,0 +1,38 @@
+import { readSimDynamoDbIndexName } from "../../secondary-index/sim-dynamodb-index-name.js";
+import { SimDynamoDbIndexUpdate } from "../../table/sim-dynamodb-index-update.js";
+import { SimCfnDynamoDbTableProperties } from "./sim-cfn-dynamodb-table-properties.js";
+/**
+ * Validates constraints that apply when CloudFormation updates a table.
+ */
+export class SimCfnDynamoDbTableUpdateValidator {
+    properties;
+    constructor(properties) {
+        this.properties = properties;
+    }
+    /**
+     * Refuse a template diff that asks DynamoDB for too many index operations.
+     *
+     * https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-dynamodb-table.html
+     */
+    assertAllowed() {
+        const { currentResource, updatedResource } = this.properties;
+        const current = this.tableProperties(currentResource, this.properties.currentProperties).globalSecondaryIndexes();
+        const updated = this.tableProperties(updatedResource, this.properties.updatedProperties).globalSecondaryIndexes();
+        SimDynamoDbIndexUpdate.fromInput(this.indexUpdates(current, updated));
+    }
+    tableProperties(resource, properties) {
+        return new SimCfnDynamoDbTableProperties({ resource, properties });
+    }
+    indexUpdates(current, updated) {
+        const currentNames = new Set(current.map((index) => readSimDynamoDbIndexName(index.IndexName)));
+        const updatedNames = new Set(updated.map((index) => readSimDynamoDbIndexName(index.IndexName)));
+        return [
+            ...updated
+                .filter((index) => !currentNames.has(readSimDynamoDbIndexName(index.IndexName)))
+                .map((index) => ({ Create: index })),
+            ...current
+                .filter((index) => !updatedNames.has(readSimDynamoDbIndexName(index.IndexName)))
+                .map((index) => ({ Delete: { IndexName: index.IndexName } })),
+        ];
+    }
+}

package/dist/service/dynamodb/command/query/sim-dynamodb-query-expressions.d.ts

@@ -1,23 +1,26 @@
 import type { SimDynamoDbFilter } from "../../expression/filter/sim-dynamodb-filter.js";
 import type { SimDynamoDbKeyConditionTerms } from "../../expression/key-condition/sim-dynamodb-key-condition-terms.js";
+import type { SimDynamoDbProjection } from "../../expression/projection/sim-dynamodb-projection.js";
 import type { SimQueryCommandInput } from "./query.command.js";
 /**
- * What a query's expressions say, once both have been read.
+ * What a query's expressions say, once all three have been read.
  */
 export interface SimDynamoDbQueryExpressions {
     readonly terms: SimDynamoDbKeyConditionTerms;
     readonly filter: SimDynamoDbFilter | undefined;
+    readonly projection: SimDynamoDbProjection | undefined;
 }
 /**
- * Read both expressions of a query against one set of placeholders.
+ * Read every expression of a query against one set of placeholders.
  *
  * `ExpressionAttributeNames` and `ExpressionAttributeValues` are shared between
- * them, so they are checked once both have been read. A placeholder used by
- * either counts as used, and one used by neither is refused.
+ * the key condition, the filter and the projection, so they are checked once
+ * all three have been read. A placeholder used by any one of them counts as
+ * used, and one used by none is refused.
  *
- * Both are read before the table is reached, so an expression DynamoDB would
- * refuse is refused whether or not the table is there. What is left is the part
- * that needs the key schema, which each of them is held to once the table has
- * been found.
+ * All three are read before the table is reached, so an expression DynamoDB
+ * would refuse is refused whether or not the table is there. What is left is
+ * the part that needs the key schema, which each of them is held to once the
+ * table has been found.
  */
 export declare function readSimDynamoDbQueryExpressions(input: SimQueryCommandInput): SimDynamoDbQueryExpressions;

package/dist/service/dynamodb/command/query/sim-dynamodb-query-expressions.js

@@ -1,24 +1,27 @@
 import { parseSimDynamoDbFilter } from "../../expression/filter/sim-dynamodb-filter-expression.js";
 import { readSimDynamoDbKeyCondition } from "../../expression/key-condition/sim-dynamodb-key-condition-expression.js";
+import { parseSimDynamoDbProjection } from "../../expression/projection/sim-dynamodb-projection-expression.js";
 import { SimDynamoDbExpressionParameters } from "../../expression/sim-dynamodb-expression-parameters.js";
 /**
- * Read both expressions of a query against one set of placeholders.
+ * Read every expression of a query against one set of placeholders.
  *
  * `ExpressionAttributeNames` and `ExpressionAttributeValues` are shared between
- * them, so they are checked once both have been read. A placeholder used by
- * either counts as used, and one used by neither is refused.
+ * the key condition, the filter and the projection, so they are checked once
+ * all three have been read. A placeholder used by any one of them counts as
+ * used, and one used by none is refused.
  *
- * Both are read before the table is reached, so an expression DynamoDB would
- * refuse is refused whether or not the table is there. What is left is the part
- * that needs the key schema, which each of them is held to once the table has
- * been found.
+ * All three are read before the table is reached, so an expression DynamoDB
+ * would refuse is refused whether or not the table is there. What is left is
+ * the part that needs the key schema, which each of them is held to once the
+ * table has been found.
  */
 export function readSimDynamoDbQueryExpressions(input) {
     const parameters = new SimDynamoDbExpressionParameters(input);
     const terms = readSimDynamoDbKeyCondition(input, parameters);
     const filter = filterIn(input.FilterExpression, parameters);
+    const projection = projectionIn(input.ProjectionExpression, parameters);
     parameters.assertAllUsed();
-    return { terms, filter };
+    return { terms, filter, projection };
 }
 /**
  * Read the filter a query drops read items by, if it names one.
@@ -29,3 +32,12 @@ function filterIn(expression, parameters) {
     }
     return parseSimDynamoDbFilter(expression, parameters);
 }
+/**
+ * Read the parts of an item a query answers with, if it names them.
+ */
+function projectionIn(expression, parameters) {
+    if (expression === undefined) {
+        return undefined;
+    }
+    return parseSimDynamoDbProjection(expression, parameters);
+}

package/dist/service/dynamodb/command/query/sim-dynamodb-query.js

@@ -46,6 +46,7 @@ export class SimDynamoDbQuery {
         // waits for the view the same way the key condition does.
         expressions.filter?.assertNamesNoKeyAttribute(view.keySchema);
         expressions.filter?.assertNamesOnlyCarried(view);
+        expressions.projection?.assertNamesOnlyCarried(view);
         // The token names an item of the collection being read, so it can only be
         // checked once that collection is known.
         const after = readSimDynamoDbQueryStartKey({
@@ -65,6 +66,7 @@ export class SimDynamoDbQuery {
             ...new SimDynamoDbReadAnswer({
                 page,
                 filter: expressions.filter,
+                projection: expressions.projection,
                 select,
                 view,
             }).fields(),

package/dist/service/dynamodb/command/query/sim-dynamodb-unsimulated-query-input.js

@@ -9,7 +9,6 @@ import { SimDynamoDbUnsimulatedInput } from "../item/sim-dynamodb-unsimulated-in
  */
 export function refuseUnsimulatedQueryInput(input) {
     const unsimulated = new SimDynamoDbUnsimulatedInput("Query");
-    unsimulated.refuse(input.ProjectionExpression !== undefined, "ProjectionExpression", "answering with whole items where part of them was asked for");
     unsimulated.refuse((input.AttributesToGet ?? []).length > 0, "AttributesToGet", "answering with whole items where part of them was asked for");
     unsimulated.refuseNamed(input.KeyConditions, "KeyConditions", "reading a key condition written the way KeyConditionExpression replaced");
     unsimulated.refuseNamed(input.QueryFilter, "QueryFilter", "answering with the items a legacy filter would have dropped");