@kensio/yulin 1.21.3 → 1.21.4

package/dist/service/dynamodb/expression/projection/sim-dynamodb-projection-expression.js

@@ -9,6 +9,11 @@ const expressionName = "ProjectionExpression";
  *
  * A request with no ProjectionExpression asks for the whole item, so there is
  * nothing to project.
+ *
+ * This is the form for a request whose projection is its only expression, which
+ * is every read that names one item or a list of them. A query or a scan can
+ * carry a filter alongside its projection, and reads both against one set of
+ * placeholders through `parseSimDynamoDbProjection`.
  */
 export function readSimDynamoDbProjection(request) {
     const expression = request.ProjectionExpression;
@@ -17,8 +22,20 @@ export function readSimDynamoDbProjection(request) {
         return undefined;
     }
     const parameters = new SimDynamoDbExpressionParameters(request);
-    const paths = projectedPaths(SimDynamoDbExpressionTokens.of(expressionName, expression, "the expression names no attributes, and an expression cannot be empty"), parameters.names);
+    const projection = parseSimDynamoDbProjection(expression, parameters);
     parameters.assertAllUsed();
+    return projection;
+}
+/**
+ * Read one ProjectionExpression against placeholders that have already been
+ * gathered.
+ *
+ * A query carries a key condition and may carry a filter alongside its
+ * projection, and all three draw on the same `ExpressionAttributeNames`, so the
+ * placeholders are checked once every expression has been read.
+ */
+export function parseSimDynamoDbProjection(expression, parameters) {
+    const paths = projectedPaths(SimDynamoDbExpressionTokens.of(expressionName, expression, "the expression names no attributes, and an expression cannot be empty"), parameters.names);
     return new SimDynamoDbProjection({ expressionName, paths });
 }
 /**

package/dist/service/dynamodb/expression/projection/sim-dynamodb-projection.d.ts

@@ -1,4 +1,5 @@
 import { SimDynamoDbItem } from "../../item/sim-dynamodb-item.js";
+import type { SimDynamoDbReadView } from "../../table/sim-dynamodb-read-view.js";
 import type { SimDynamoDbDocumentPath } from "../sim-dynamodb-document-path.js";
 interface SimDynamoDbProjectionProperties {
     readonly expressionName: string;
@@ -12,7 +13,19 @@ interface SimDynamoDbProjectionProperties {
  */
 export declare class SimDynamoDbProjection {
     private readonly root;
+    private readonly paths;
     constructor(properties: SimDynamoDbProjectionProperties);
+    /**
+     * Refuse a projection naming an attribute the view being read does not carry.
+     *
+     * A global secondary index holds only what it projects, so a path outside
+     * that would leave the attribute out of every item it answers with. An
+     * attribute quietly missing reads as an item that happens not to have it,
+     * which is the answer a projection used as an allow-list must never give. A
+     * local secondary index fetches from the base table, so any path is nameable
+     * there.
+     */
+    assertNamesOnlyCarried(view: SimDynamoDbReadView): void;
     /**
      * Cut an item down to what this projection asked for.
      *

package/dist/service/dynamodb/expression/projection/sim-dynamodb-projection.js

@@ -8,12 +8,27 @@ import { SimDynamoDbProjectionNode } from "./sim-dynamodb-projection-node.js";
  */
 export class SimDynamoDbProjection {
     root;
+    paths;
     constructor(properties) {
         this.root = new SimDynamoDbProjectionNode(properties.expressionName);
+        this.paths = properties.paths;
         for (const path of properties.paths) {
             this.root.add(path);
         }
     }
+    /**
+     * Refuse a projection naming an attribute the view being read does not carry.
+     *
+     * A global secondary index holds only what it projects, so a path outside
+     * that would leave the attribute out of every item it answers with. An
+     * attribute quietly missing reads as an item that happens not to have it,
+     * which is the answer a projection used as an allow-list must never give. A
+     * local secondary index fetches from the base table, so any path is nameable
+     * there.
+     */
+    assertNamesOnlyCarried(view) {
+        view.assertCarriesPaths(this.paths);
+    }
     /**
      * Cut an item down to what this projection asked for.
      *

package/dist/service/lambda/cfn/event-source-mapping/sim-cfn-lambda-event-source-mapping-properties.js

@@ -38,6 +38,8 @@ export class SimCfnLambdaEventSourceMappingProperties {
             BatchSize: this.parser.optionalNumber(this.resource, this.properties["BatchSize"], "BatchSize"),
             Enabled: this.parser.optionalBoolean(this.resource, this.properties["Enabled"], "Enabled"),
             MaximumBatchingWindowInSeconds: this.parser.optionalNumber(this.resource, this.properties["MaximumBatchingWindowInSeconds"], "MaximumBatchingWindowInSeconds"),
+            MaximumRetryAttempts: this.parser.optionalNumber(this.resource, this.properties["MaximumRetryAttempts"], "MaximumRetryAttempts"),
+            MaximumRecordAgeInSeconds: this.parser.optionalNumber(this.resource, this.properties["MaximumRecordAgeInSeconds"], "MaximumRecordAgeInSeconds"),
             StartingPosition: this.parser.optionalString(this.resource, this.properties["StartingPosition"], "StartingPosition"),
             StartingPositionTimestamp: this.startingPositionTimestamp(),
             FunctionResponseTypes: this.functionResponseTypes(),

package/dist/service/lambda/cfn/event-source-mapping/sim-cfn-lambda-event-source-mapping-property-rules.js

@@ -5,7 +5,9 @@
  * unsimulated ones because whether a mapping may carry one is the event
  * source's own rule: a stream has to be given a position and a queue is refused
  * for naming one. That is decided by CreateEventSourceMapping, which knows
- * which source the ARN names, so both are read and passed on.
+ * which source the ARN names, so both are read and passed on. The two
+ * failed-batch limits are read for the same reason: a stream mapping keeps them
+ * and a queue mapping is refused for naming one.
  */
 const simulatedPropertyNames = new Set([
     "BatchSize",
@@ -14,6 +16,8 @@ const simulatedPropertyNames = new Set([
     "FunctionName",
     "FunctionResponseTypes",
     "MaximumBatchingWindowInSeconds",
+    "MaximumRecordAgeInSeconds",
+    "MaximumRetryAttempts",
     "StartingPosition",
     "StartingPositionTimestamp",
 ]);
@@ -32,8 +36,6 @@ const unsimulatedPropertyNames = new Set([
     "DocumentDBEventSourceConfig",
     "FilterCriteria",
     "KmsKeyArn",
-    "MaximumRecordAgeInSeconds",
-    "MaximumRetryAttempts",
     "MetricsConfig",
     "ParallelizationFactor",
     "ProvisionedPollerConfig",

package/dist/service/lambda/cfn/url/sim-cfn-lambda-url-cors.d.ts

@@ -0,0 +1,21 @@
+import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimCfnTemplateValue } from "../../../cloudformation/template/value/sim-cfn-template-value.js";
+import type { SimLambdaFunctionUrlCors } from "../../function/url/sim-lambda-function-url-cors.js";
+import type { SimCfnLambdaPropertyParser } from "../function/sim-cfn-lambda-property-parser.js";
+interface SimCfnLambdaUrlCorsProperties {
+    readonly parser: SimCfnLambdaPropertyParser;
+    readonly resource: SimCfnResource;
+    readonly value: SimCfnTemplateValue | undefined;
+}
+/**
+ * Read the `Cors` block of an `AWS::Lambda::Url` Resource.
+ *
+ * The members go to `CreateFunctionUrlConfig` as they are written. The bounds
+ * Lambda puts on them are applied there, once. This reader settles only the
+ * template question, whether each property is the shape CloudFormation says it
+ * is.
+ *
+ * https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-url-cors.html
+ */
+export declare function simCfnLambdaUrlCors(properties: SimCfnLambdaUrlCorsProperties): SimLambdaFunctionUrlCors | undefined;
+export {};

package/dist/service/lambda/cfn/url/sim-cfn-lambda-url-cors.js

@@ -0,0 +1,37 @@
+import { isRecord } from "../../../../util/type-guard/record.js";
+/**
+ * Read the `Cors` block of an `AWS::Lambda::Url` Resource.
+ *
+ * The members go to `CreateFunctionUrlConfig` as they are written. The bounds
+ * Lambda puts on them are applied there, once. This reader settles only the
+ * template question, whether each property is the shape CloudFormation says it
+ * is.
+ *
+ * https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-url-cors.html
+ */
+export function simCfnLambdaUrlCors(properties) {
+    const { parser, resource, value } = properties;
+    if (value === undefined) {
+        return undefined;
+    }
+    if (!isRecord(value)) {
+        throw parser.invalidPropertyError(resource, "Cors", "an object");
+    }
+    const cors = value;
+    // A member the template said nothing about is left out. What the Lambda API
+    // reports back is then what the template wrote.
+    return withoutAbsentMembers({
+        AllowCredentials: parser.optionalBoolean(resource, cors["AllowCredentials"], "Cors.AllowCredentials"),
+        AllowHeaders: parser.optionalStringList(resource, cors["AllowHeaders"], "Cors.AllowHeaders"),
+        AllowMethods: parser.optionalStringList(resource, cors["AllowMethods"], "Cors.AllowMethods"),
+        AllowOrigins: parser.optionalStringList(resource, cors["AllowOrigins"], "Cors.AllowOrigins"),
+        ExposeHeaders: parser.optionalStringList(resource, cors["ExposeHeaders"], "Cors.ExposeHeaders"),
+        MaxAge: parser.optionalNumber(resource, cors["MaxAge"], "Cors.MaxAge"),
+    });
+}
+/**
+ * Drop the members the template did not state.
+ */
+function withoutAbsentMembers(cors) {
+    return Object.fromEntries(Object.entries(cors).filter(([, member]) => member !== undefined));
+}

package/dist/service/lambda/cfn/url/sim-cfn-lambda-url-creator.js

@@ -1,5 +1,6 @@
 import { assertDefined } from "../../../../util/type-guard/defined.js";
 import { SimCfnLambdaPropertyParser } from "../function/sim-cfn-lambda-property-parser.js";
+import { simCfnLambdaUrlCors } from "./sim-cfn-lambda-url-cors.js";
 import { simCfnLambdaTargetFunctionName } from "../function/sim-cfn-lambda-target-function.js";
 /**
  * Creates simulated Lambda Function URLs from CloudFormation Resources.
@@ -25,6 +26,11 @@ export class SimCfnLambdaUrlCreator {
                 FunctionName: functionName,
                 AuthType: this.propertyParser.requiredString(resource, properties["AuthType"], "AuthType"),
                 InvokeMode: this.propertyParser.optionalString(resource, properties["InvokeMode"], "InvokeMode"),
+                Cors: simCfnLambdaUrlCors({
+                    parser: this.propertyParser,
+                    resource,
+                    value: properties["Cors"],
+                }),
             },
         }, options);
         const functionUrl = this.lambda.getSimFunctionUrl(functionName);

package/dist/service/lambda/command/create-function/create-function.handler.d.ts

@@ -8,6 +8,7 @@ import type { SimLambdaContainerImages } from "../../function/code/image/sim-lam
 import type { SimLambdaCodeStore } from "../../function/code/store/sim-lambda-code-store.js";
 import type { SimLambdaVmSdkModuleProvider } from "../../function/code/vm/sdk/sim-lambda-vm-sdk-module-provider.js";
 import type { SimCloudWatchServiceWriter } from "../../../cloudwatch/write/sim-cloudwatch-service-writer.js";
+import type { SimLambdaOutput } from "../../function/logging/sim-lambda-output.js";
 import type { SimLogsServiceWriter } from "../../../logs/write/sim-logs-service-writer.js";
 import type { SimLambdaOutboundHttp } from "../../function/outbound/sim-lambda-outbound-http.js";
 import { SimLambdaEnvironmentConflicts } from "../../function/environment/sim-lambda-environment-conflicts.js";
@@ -24,6 +25,7 @@ interface CreateFunctionCommandHandlerProperties {
     vmSdkModuleProvider?: SimLambdaVmSdkModuleProvider | undefined;
     environmentConflicts?: SimLambdaEnvironmentConflicts;
     logs?: SimLogsServiceWriter | undefined;
+    output?: SimLambdaOutput | undefined;
     metrics?: SimCloudWatchServiceWriter | undefined;
     outboundHttp?: SimLambdaOutboundHttp | undefined;
 }
@@ -44,6 +46,7 @@ export declare class CreateFunctionCommandHandler implements CommandHandler<SimC
     private readonly codeResolver;
     private readonly environmentConflicts;
     private readonly logs;
+    private readonly output;
     private readonly metrics;
     private readonly outboundHttp;
     constructor(properties: CreateFunctionCommandHandlerProperties);

package/dist/service/lambda/command/create-function/create-function.handler.js

@@ -22,10 +22,11 @@ export class CreateFunctionCommandHandler {
     codeResolver;
     environmentConflicts;
     logs;
+    output;
     metrics;
     outboundHttp;
     constructor(properties) {
-        const { accountRegionScope, functions, runAsOwner, iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), codeStore, containerImages, vmSdkModuleProvider, environmentConflicts = new SimLambdaEnvironmentConflicts(), logs, metrics, outboundHttp, } = properties;
+        const { accountRegionScope, functions, runAsOwner, iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), codeStore, containerImages, vmSdkModuleProvider, environmentConflicts = new SimLambdaEnvironmentConflicts(), logs, output, metrics, outboundHttp, } = properties;
         this.accountRegionScope = accountRegionScope;
         this.functions = functions;
         this.runAsOwner = runAsOwner;
@@ -42,6 +43,7 @@ export class CreateFunctionCommandHandler {
         });
         this.environmentConflicts = environmentConflicts;
         this.logs = logs;
+        this.output = output;
         this.metrics = metrics;
         this.outboundHttp = outboundHttp;
     }
@@ -71,7 +73,9 @@ export class CreateFunctionCommandHandler {
             accountRegionScope: this.accountRegionScope,
             runAsOwner: this.runAsOwner,
             clock: this.background,
+            background: this.background,
             logs: this.logs,
+            output: this.output,
             metrics: this.metrics,
             outboundHttp: this.outboundHttp,
         });

package/dist/service/lambda/command/create-function-url-config/create-function-url-config.command.d.ts

@@ -2,6 +2,7 @@
  * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/lambda/command/CreateFunctionUrlConfigCommand/
  */
 import type { SimResponseMetadata } from "../../../aws/metadata/response-metadata.type.js";
+import type { SimLambdaFunctionUrlCors } from "../../function/url/sim-lambda-function-url-cors.js";
 import type { SimLambdaFunctionUrlAuthType, SimLambdaFunctionUrlConfiguration, SimLambdaFunctionUrlInvokeMode } from "../../function/url/sim-lambda-function-url.js";
 /**
  * Minimal structural sim Lambda CreateFunctionUrlConfig command.
@@ -11,14 +12,12 @@ export interface SimCreateFunctionUrlConfigCommand {
 }
 /**
  * Minimal structural sim Lambda CreateFunctionUrlConfig input.
- *
- * The Cors block real Lambda accepts here is not simulated, so it is left out
- * rather than accepted and ignored.
  */
 export interface SimCreateFunctionUrlConfigCommandInput {
     readonly FunctionName?: string | undefined;
     readonly AuthType?: SimLambdaFunctionUrlAuthType | undefined;
     readonly InvokeMode?: SimLambdaFunctionUrlInvokeMode | undefined;
+    readonly Cors?: SimLambdaFunctionUrlCors | undefined;
 }
 /**
  * Minimal structural sim Lambda CreateFunctionUrlConfig output.

package/dist/service/lambda/command/create-function-url-config/create-function-url-config.handler.js

@@ -37,6 +37,7 @@ export class CreateFunctionUrlConfigCommandHandler {
             simFunction: this.functions.require(functionName),
             authType: this.inputParser.requireAuthType(command.input.AuthType),
             invokeMode: this.inputParser.parseOptionalInvokeMode(command.input.InvokeMode),
+            cors: this.inputParser.parseOptionalCors(command.input.Cors),
         });
         return {
             $metadata: {},

package/dist/service/lambda/command/event-source-mapping/create-event-source-mapping-input.d.ts

@@ -1,6 +1,7 @@
 import type { SimAwsAccountRegionScope } from "../../../aws/sim-aws-account-region-scope.js";
 import { type SimLambdaEventSourceArn } from "../../event-source/sim-lambda-event-source-arn.js";
 import type { SimLambdaFunctionResponseType } from "../../event-source/sim-lambda-event-source-mapping.js";
+import type { SimLambdaStreamRetryLimits } from "../../event-source/sim-lambda-stream-retry-limits.js";
 import type { SimLambdaEventSourceStart } from "../../event-source/sim-lambda-event-source-starting-position.js";
 import type { SimCreateEventSourceMappingCommandInput } from "./event-source-mapping.command.js";
 /**
@@ -28,6 +29,11 @@ export declare class SimLambdaEventSourceMappingInput {
     readonly start: SimLambdaEventSourceStart | undefined;
     readonly enabled: boolean;
     readonly functionResponseTypes: readonly SimLambdaFunctionResponseType[];
+    /**
+     * When a failed batch stops being delivered again, for a source that leaves
+     * the counting to the mapping.
+     */
+    readonly streamRetryLimits: SimLambdaStreamRetryLimits | undefined;
     private constructor();
     /**
      * Read a CreateEventSourceMapping request, refusing what this simulation

package/dist/service/lambda/command/event-source-mapping/create-event-source-mapping-input.js

@@ -28,6 +28,11 @@ export class SimLambdaEventSourceMappingInput {
     start;
     enabled;
     functionResponseTypes;
+    /**
+     * When a failed batch stops being delivered again, for a source that leaves
+     * the counting to the mapping.
+     */
+    streamRetryLimits;
     constructor(properties) {
         this.eventSourceArn = properties.eventSourceArn;
         this.functionName = properties.functionName;
@@ -36,6 +41,7 @@ export class SimLambdaEventSourceMappingInput {
         this.start = properties.start;
         this.enabled = properties.enabled;
         this.functionResponseTypes = properties.functionResponseTypes;
+        this.streamRetryLimits = properties.streamRetryLimits;
     }
     /**
      * Read a CreateEventSourceMapping request, refusing what this simulation
@@ -55,6 +61,10 @@ export class SimLambdaEventSourceMappingInput {
             }),
             enabled: input.Enabled ?? true,
             functionResponseTypes: functionResponseTypesIn(input),
+            streamRetryLimits: eventSourceArn.retryLimitRules.limitsIn({
+                maximumRetryAttempts: input.MaximumRetryAttempts,
+                maximumRecordAgeInSeconds: input.MaximumRecordAgeInSeconds,
+            }),
         });
     }
 }

package/dist/service/lambda/command/event-source-mapping/create-event-source-mapping-refusals.js

@@ -17,11 +17,6 @@ const unsimulatedInputs = new Map([
         "failure destinations are not simulated, so a stream batch that runs out " +
             "of attempts is discarded rather than sent anywhere",
     ],
-    [
-        "MaximumRetryAttempts",
-        "the number of times a stream batch is delivered again is fixed",
-    ],
-    ["MaximumRecordAgeInSeconds", "record ages are not simulated"],
     [
         "BisectBatchOnFunctionError",
         "batch bisection is not simulated, so a failing stream batch is retried " +
@@ -51,7 +46,8 @@ const unsimulatedInputs = new Map([
  *
  * `StartingPosition` is not among them, because whether a source has one is the
  * source's own rule: a stream is refused without it and a queue is refused with
- * it.
+ * it. The two failed-batch limits are left out for the same reason: a stream
+ * mapping keeps them and a queue mapping is refused for naming one.
  */
 const unsupportedEventSourceInputs = new Set([
     "Topics",

package/dist/service/lambda/command/event-source-mapping/create-event-source-mapping.handler.js

@@ -80,6 +80,7 @@ export class CreateEventSourceMappingCommandHandler {
             start: input.start,
             enabled: input.enabled,
             functionResponseTypes: input.functionResponseTypes,
+            streamRetryLimits: input.streamRetryLimits,
             createdAt: this.properties.background.now(),
         });
         this.properties.mappings.add(mapping);

package/dist/service/lambda/command/function/sim-lambda-function-commands.d.ts

@@ -7,6 +7,7 @@ import type { SimLambdaContainerImages } from "../../function/code/image/sim-lam
 import type { SimLambdaCodeStore } from "../../function/code/store/sim-lambda-code-store.js";
 import type { SimLambdaVmSdkModuleProvider } from "../../function/code/vm/sdk/sim-lambda-vm-sdk-module-provider.js";
 import type { SimCloudWatchServiceWriter } from "../../../cloudwatch/write/sim-cloudwatch-service-writer.js";
+import type { SimLambdaOutput } from "../../function/logging/sim-lambda-output.js";
 import type { SimLogsServiceWriter } from "../../../logs/write/sim-logs-service-writer.js";
 import type { SimLambdaOutboundHttp } from "../../function/outbound/sim-lambda-outbound-http.js";
 import type { SimLambdaDestinationTargets } from "../../destination/sim-lambda-destination-targets.js";
@@ -39,6 +40,7 @@ interface SimLambdaFunctionCommandsProperties {
     readonly containerImages?: SimLambdaContainerImages | undefined;
     readonly vmSdkModuleProvider?: SimLambdaVmSdkModuleProvider | undefined;
     readonly logs?: SimLogsServiceWriter | undefined;
+    readonly output?: SimLambdaOutput | undefined;
     readonly metrics?: SimCloudWatchServiceWriter | undefined;
     readonly outboundHttp?: SimLambdaOutboundHttp | undefined;
 }

package/dist/service/lambda/command/function-url/function-url-cors-constraints.d.ts

@@ -0,0 +1,25 @@
+/**
+ * One list member of a `Cors` block and the bounds Lambda puts on it.
+ *
+ * `AllowMethods` is capped at six characters. That is what leaves `OPTIONS`
+ * out of the list a caller may state, since Lambda answers the preflight
+ * itself.
+ *
+ * https://docs.aws.amazon.com/lambda/latest/api/API_Cors.html
+ */
+export interface CorsListConstraint {
+    readonly member: "AllowHeaders" | "AllowMethods" | "AllowOrigins" | "ExposeHeaders";
+    readonly field: string;
+    readonly maxItems: number;
+    readonly minLength: number;
+    readonly maxLength: number;
+}
+/**
+ * The bounds Lambda publishes for each list member of a `Cors` block.
+ */
+export declare const corsListConstraints: readonly CorsListConstraint[];
+/**
+ * The bound a list broke, worded as Lambda words it, or nothing when the list
+ * is within every bound.
+ */
+export declare function corsListViolation(values: readonly string[], constraint: CorsListConstraint): string | undefined;

package/dist/service/lambda/command/function-url/function-url-cors-constraints.js

@@ -0,0 +1,49 @@
+/**
+ * The bounds Lambda publishes for each list member of a `Cors` block.
+ */
+export const corsListConstraints = [
+    {
+        member: "AllowHeaders",
+        field: "cors.allowHeaders",
+        maxItems: 100,
+        minLength: 0,
+        maxLength: 1024,
+    },
+    {
+        member: "AllowMethods",
+        field: "cors.allowMethods",
+        maxItems: 6,
+        minLength: 0,
+        maxLength: 6,
+    },
+    {
+        member: "AllowOrigins",
+        field: "cors.allowOrigins",
+        maxItems: 100,
+        minLength: 1,
+        maxLength: 253,
+    },
+    {
+        member: "ExposeHeaders",
+        field: "cors.exposeHeaders",
+        maxItems: 100,
+        minLength: 0,
+        maxLength: 1024,
+    },
+];
+/**
+ * The bound a list broke, worded as Lambda words it, or nothing when the list
+ * is within every bound.
+ */
+export function corsListViolation(values, constraint) {
+    const { maxItems, minLength, maxLength } = constraint;
+    if (values.length > maxItems) {
+        return `Member must have length less than or equal to ${String(maxItems)}`;
+    }
+    const outOfRange = values.some((value) => value.length < minLength || value.length > maxLength);
+    return outOfRange
+        ? "Member must satisfy constraint: [Member must have length less than " +
+            `or equal to ${String(maxLength)}, Member must have length greater ` +
+            `than or equal to ${String(minLength)}]`
+        : undefined;
+}

package/dist/service/lambda/command/function-url/function-url-cors-input.d.ts

@@ -0,0 +1,25 @@
+import type { SimLambdaFunctionUrlCors } from "../../function/url/sim-lambda-function-url-cors.js";
+/**
+ * Validates the `Cors` block of Function URL config command input.
+ *
+ * Every check here is against a bound real Lambda publishes. A configuration
+ * this accepts is one the API would have taken. Nothing else is checked,
+ * because a refusal the real service would not make costs a working
+ * deployment.
+ *
+ * The check runs before the Function URL is created or updated, leaving a
+ * refused configuration with the URL as it was.
+ */
+export declare class FunctionUrlCorsInputParser {
+    /**
+     * Parse an optional `Cors` block, which every Function URL config command
+     * allows a caller to leave out.
+     */
+    parseOptional(cors: SimLambdaFunctionUrlCors | undefined): SimLambdaFunctionUrlCors | undefined;
+    private checkMaxAge;
+    private maxAgeViolation;
+    /**
+     * Fail the way Lambda fails a request that broke one bound.
+     */
+    private refuse;
+}

package/dist/service/lambda/command/function-url/function-url-cors-input.js

@@ -0,0 +1,57 @@
+import { SimLambdaValidationException } from "../../error/sim-lambda.error.js";
+import { corsListConstraints, corsListViolation, } from "./function-url-cors-constraints.js";
+const maxAgeSeconds = 86_400;
+/**
+ * Validates the `Cors` block of Function URL config command input.
+ *
+ * Every check here is against a bound real Lambda publishes. A configuration
+ * this accepts is one the API would have taken. Nothing else is checked,
+ * because a refusal the real service would not make costs a working
+ * deployment.
+ *
+ * The check runs before the Function URL is created or updated, leaving a
+ * refused configuration with the URL as it was.
+ */
+export class FunctionUrlCorsInputParser {
+    /**
+     * Parse an optional `Cors` block, which every Function URL config command
+     * allows a caller to leave out.
+     */
+    parseOptional(cors) {
+        if (cors === undefined) {
+            return undefined;
+        }
+        for (const constraint of corsListConstraints) {
+            const values = cors[constraint.member];
+            if (values !== undefined) {
+                this.refuse(`[${values.join(", ")}]`, constraint.field, corsListViolation(values, constraint));
+            }
+        }
+        this.checkMaxAge(cors.MaxAge);
+        return cors;
+    }
+    checkMaxAge(maxAge) {
+        if (maxAge === undefined) {
+            return;
+        }
+        this.refuse(String(maxAge), "cors.maxAge", this.maxAgeViolation(maxAge));
+    }
+    maxAgeViolation(maxAge) {
+        if (maxAge > maxAgeSeconds) {
+            return `Member must have value less than or equal to ${String(maxAgeSeconds)}`;
+        }
+        return maxAge < 0
+            ? "Member must have value greater than or equal to 0"
+            : undefined;
+    }
+    /**
+     * Fail the way Lambda fails a request that broke one bound.
+     */
+    refuse(value, field, violation) {
+        if (violation === undefined) {
+            return;
+        }
+        throw new SimLambdaValidationException(`1 validation error detected: Value '${value}' at '${field}' failed ` +
+            `to satisfy constraint: ${violation}`);
+    }
+}

package/dist/service/lambda/command/function-url/function-url-input.d.ts

@@ -1,3 +1,4 @@
+import type { SimLambdaFunctionUrlCors } from "../../function/url/sim-lambda-function-url-cors.js";
 import type { SimLambdaFunctionUrlAuthType, SimLambdaFunctionUrlInvokeMode } from "../../function/url/sim-lambda-function-url.js";
 /**
  * Validates the enumerated values in Function URL config command input.
@@ -7,6 +8,7 @@ import type { SimLambdaFunctionUrlAuthType, SimLambdaFunctionUrlInvokeMode } fro
  * runtime and reported the way real Lambda reports a bad enum member.
  */
 export declare class FunctionUrlInputParser {
+    private readonly corsParser;
     /**
      * Parse a required AuthType, as CreateFunctionUrlConfig requires one.
      */
@@ -19,5 +21,10 @@ export declare class FunctionUrlInputParser {
      * Parse an optional InvokeMode, which defaults to BUFFERED on real Lambda.
      */
     parseOptionalInvokeMode(value: string | undefined): SimLambdaFunctionUrlInvokeMode | undefined;
+    /**
+     * Parse an optional `Cors` block, which every Function URL config command
+     * allows a caller to leave out.
+     */
+    parseOptionalCors(value: SimLambdaFunctionUrlCors | undefined): SimLambdaFunctionUrlCors | undefined;
     private parseAuthType;
 }

package/dist/service/lambda/command/function-url/function-url-input.js

@@ -1,4 +1,5 @@
 import { SimLambdaValidationException } from "../../error/sim-lambda.error.js";
+import { FunctionUrlCorsInputParser } from "./function-url-cors-input.js";
 const authTypes = ["NONE", "AWS_IAM"];
 const invokeModes = ["BUFFERED", "RESPONSE_STREAM"];
 /**
@@ -9,6 +10,7 @@ const invokeModes = ["BUFFERED", "RESPONSE_STREAM"];
  * runtime and reported the way real Lambda reports a bad enum member.
  */
 export class FunctionUrlInputParser {
+    corsParser = new FunctionUrlCorsInputParser();
     /**
      * Parse a required AuthType, as CreateFunctionUrlConfig requires one.
      */
@@ -39,6 +41,13 @@ export class FunctionUrlInputParser {
         }
         return value;
     }
+    /**
+     * Parse an optional `Cors` block, which every Function URL config command
+     * allows a caller to leave out.
+     */
+    parseOptionalCors(value) {
+        return this.corsParser.parseOptional(value);
+    }
     parseAuthType(value) {
         if (!authTypes.includes(value)) {
             throw new SimLambdaValidationException(`1 validation error detected: Value '${value}' at 'authType' failed to satisfy constraint: Member must satisfy enum value set: [${authTypes.join(", ")}]`);