@kensio/yulin 1.8.0 → 1.10.0

package/dist/service/sns/command/publish/sim-sns-publish-commands.d.ts

@@ -0,0 +1,53 @@
+import type { BackgroundScheduler } from "../../../../util/background/background.js";
+import type { SimSnsFanOut } from "../../delivery/sim-sns-fan-out.js";
+import type { SimSnsRequestOptions } from "../sim-sns-request-options.js";
+import type { SimSnsTopicAccess } from "../topic/sim-sns-topic-access.js";
+import type { SimPublishBatchCommand, SimPublishBatchCommandOutput, SimPublishCommand, SimPublishCommandOutput } from "./publish.command.js";
+interface SimSnsPublishCommandsProperties {
+    readonly access: SimSnsTopicAccess;
+    readonly clock: BackgroundScheduler;
+    readonly fanOut: SimSnsFanOut;
+}
+/**
+ * The commands that publish messages to a topic.
+ *
+ * A topic keeps nothing a publish sends it. Real SNS hands a message to the
+ * topic's subscriptions and forgets it, so a topic with no subscriptions
+ * accepts a publish, answers with a message id, and the message goes nowhere.
+ * That is what a publish does here too, and a topic with subscriptions hands
+ * each of them a copy on the background scheduler.
+ */
+export declare class SimSnsPublishCommands {
+    private readonly access;
+    private readonly clock;
+    private readonly fanOut;
+    constructor(properties: SimSnsPublishCommandsProperties);
+    /**
+     * Publish one message to a topic.
+     */
+    publish(command: SimPublishCommand, options?: SimSnsRequestOptions): SimPublishCommandOutput;
+    /**
+     * Publish up to ten messages to a topic at once.
+     *
+     * A message one entry cannot publish is reported in `Failed` while the rest
+     * of the batch goes through, as real SNS reports it. The size limit is
+     * different: it covers the whole batch, so a batch over it fails outright
+     * rather than reporting one entry as the one that did not fit. That is why
+     * no entry is held to the limit on its own here.
+     */
+    publishBatch(command: SimPublishBatchCommand, options?: SimSnsRequestOptions): SimPublishBatchCommandOutput;
+    /**
+     * Hand every message a batch published to the topic's subscriptions.
+     *
+     * The whole batch is checked before any of it is delivered, because a batch
+     * over the size limit fails outright, and a message from a failed request
+     * should reach nothing.
+     */
+    private fanOutBatch;
+    /**
+     * Read and check one message a request describes.
+     */
+    private published;
+}
+export {};
+//# sourceMappingURL=sim-sns-publish-commands.d.ts.map

package/dist/service/sns/command/publish/sim-sns-publish-commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-publish-commands.d.ts","sourceRoot":"","sources":["../../../../../src/service/sns/command/publish/sim-sns-publish-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AACrF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AAMtE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAU1E,OAAO,KAAK,EACV,sBAAsB,EACtB,4BAA4B,EAC5B,iBAAiB,EACjB,uBAAuB,EAGxB,MAAM,sBAAsB,CAAC;AAQ9B,UAAU,+BAA+B;IACvC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;CAC/B;AAED;;;;;;;;GAQG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoB;IAC3C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAsB;IAC5C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAe;IAEtC,YAAY,UAAU,EAAE,+BAA+B,EAItD;IAED;;OAEG;IACH,OAAO,CACL,OAAO,EAAE,iBAAiB,EAC1B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,uBAAuB,CAiBzB;IAED;;;;;;;;OAQG;IACH,YAAY,CACV,OAAO,EAAE,sBAAsB,EAC/B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,4BAA4B,CAwB9B;IAED;;;;;;OAMG;IACH,OAAO,CAAC,WAAW;IASnB;;OAEG;IACH,OAAO,CAAC,SAAS;CAMlB"}

package/dist/service/sns/command/publish/sim-sns-publish-commands.js

@@ -0,0 +1,83 @@
+import { assertSimSnsMessageWithinLimit, SimSnsPublishedMessage, } from "../../message/sim-sns-published-message.js";
+import { assertSnsBatchWithinSizeLimit, requireSnsBatchEntries, runSnsBatch, } from "./sim-sns-batch-entries.js";
+import { refuseUnsimulatedPublishTarget, simSnsPublishedMessageInput, } from "./sim-sns-publish-input.js";
+/**
+ * Real SNS authorizes a batch publish as `sns:Publish`. There is no
+ * `sns:PublishBatch` action, so a policy naming one grants nothing.
+ */
+const publishAction = "sns:Publish";
+/**
+ * The commands that publish messages to a topic.
+ *
+ * A topic keeps nothing a publish sends it. Real SNS hands a message to the
+ * topic's subscriptions and forgets it, so a topic with no subscriptions
+ * accepts a publish, answers with a message id, and the message goes nowhere.
+ * That is what a publish does here too, and a topic with subscriptions hands
+ * each of them a copy on the background scheduler.
+ */
+export class SimSnsPublishCommands {
+    access;
+    clock;
+    fanOut;
+    constructor(properties) {
+        this.access = properties.access;
+        this.clock = properties.clock;
+        this.fanOut = properties.fanOut;
+    }
+    /**
+     * Publish one message to a topic.
+     */
+    publish(command, options) {
+        refuseUnsimulatedPublishTarget(command.input);
+        // The topic has to be there and the caller has to be allowed to publish to
+        // it before anything is read out of the message.
+        const topic = this.access.requireByArn(publishAction, command.input.TopicArn, options);
+        const message = this.published(command.input);
+        assertSimSnsMessageWithinLimit(message.byteSize);
+        this.fanOut.publish(topic, message);
+        return { $metadata: {}, MessageId: message.messageId };
+    }
+    /**
+     * Publish up to ten messages to a topic at once.
+     *
+     * A message one entry cannot publish is reported in `Failed` while the rest
+     * of the batch goes through, as real SNS reports it. The size limit is
+     * different: it covers the whole batch, so a batch over it fails outright
+     * rather than reporting one entry as the one that did not fit. That is why
+     * no entry is held to the limit on its own here.
+     */
+    publishBatch(command, options) {
+        const topic = this.access.requireByArn(publishAction, command.input.TopicArn, options);
+        const entries = requireSnsBatchEntries(command.input.PublishBatchRequestEntries);
+        const outcome = runSnsBatch(entries, (entry, id) => ({
+            id,
+            message: this.published(entry),
+        }));
+        assertSnsBatchWithinSizeLimit(outcome.successful);
+        this.fanOutBatch(topic, outcome.successful);
+        const successful = outcome.successful.map(({ id, message }) => ({
+            Id: id,
+            MessageId: message.messageId,
+        }));
+        return { $metadata: {}, Successful: successful, Failed: outcome.failed };
+    }
+    /**
+     * Hand every message a batch published to the topic's subscriptions.
+     *
+     * The whole batch is checked before any of it is delivered, because a batch
+     * over the size limit fails outright, and a message from a failed request
+     * should reach nothing.
+     */
+    fanOutBatch(topic, published) {
+        for (const { message } of published) {
+            this.fanOut.publish(topic, message);
+        }
+    }
+    /**
+     * Read and check one message a request describes.
+     */
+    published(published) {
+        return SimSnsPublishedMessage.of(simSnsPublishedMessageInput(published), this.clock.now());
+    }
+}
+//# sourceMappingURL=sim-sns-publish-commands.js.map

package/dist/service/sns/command/publish/sim-sns-publish-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-publish-commands.js","sourceRoot":"","sources":["../../../../../src/service/sns/command/publish/sim-sns-publish-commands.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,8BAA8B,EAC9B,sBAAsB,GACvB,MAAM,4CAA4C,CAAC;AAIpD,OAAO,EACL,6BAA6B,EAC7B,sBAAsB,EACtB,WAAW,GACZ,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,8BAA8B,EAC9B,2BAA2B,GAC5B,MAAM,4BAA4B,CAAC;AAUpC;;;GAGG;AACH,MAAM,aAAa,GAAG,aAAa,CAAC;AAQpC;;;;;;;;GAQG;AACH,MAAM,OAAO,qBAAqB;IACf,MAAM,CAAoB;IAC1B,KAAK,CAAsB;IAC3B,MAAM,CAAe;IAEtC,YAAY,UAA2C;QACrD,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,OAAO,CACL,OAA0B,EAC1B,OAA8B;QAE9B,8BAA8B,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAE9C,2EAA2E;QAC3E,iDAAiD;QACjD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CACpC,aAAa,EACb,OAAO,CAAC,KAAK,CAAC,QAAQ,EACtB,OAAO,CACR,CAAC;QACF,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAE9C,8BAA8B,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAEjD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAEpC,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;IACzD,CAAC;IAED;;;;;;;;OAQG;IACH,YAAY,CACV,OAA+B,EAC/B,OAA8B;QAE9B,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CACpC,aAAa,EACb,OAAO,CAAC,KAAK,CAAC,QAAQ,EACtB,OAAO,CACR,CAAC;QACF,MAAM,OAAO,GAAG,sBAAsB,CACpC,OAAO,CAAC,KAAK,CAAC,0BAA0B,CACzC,CAAC;QACF,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;YACnD,EAAE;YACF,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SAC/B,CAAC,CAAC,CAAC;QAEJ,6BAA6B,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QAE5C,MAAM,UAAU,GACd,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;YAC3C,EAAE,EAAE,EAAE;YACN,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC,CAAC,CAAC;QAEN,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;IAC3E,CAAC;IAED;;;;;;OAMG;IACK,WAAW,CACjB,KAAkB,EAClB,SAAkE;QAElE,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,SAAS,EAAE,CAAC;YACpC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED;;OAEG;IACK,SAAS,CAAC,SAAgC;QAChD,OAAO,sBAAsB,CAAC,EAAE,CAC9B,2BAA2B,CAAC,SAAS,CAAC,EACtC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CACjB,CAAC;IACJ,CAAC;CACF"}

package/dist/service/sns/command/publish/sim-sns-publish-input.d.ts

@@ -0,0 +1,23 @@
+import type { SimSnsPublishedMessageInput } from "../../message/sim-sns-published-message.js";
+import type { SimPublishCommandInput, SimSnsPublishedFields } from "./publish.command.js";
+/**
+ * Refuse a publish to somewhere other than a topic.
+ *
+ * Real SNS publishes to a topic, to a mobile application endpoint, or to a
+ * phone number. Only the topic is simulated, so the other two are refused
+ * rather than answered with a message id for a message that reached nothing.
+ */
+export declare function refuseUnsimulatedPublishTarget(input: SimPublishCommandInput): void;
+/**
+ * Read the message a publish describes, refusing the fields this simulation
+ * does not model.
+ *
+ * The FIFO fields are refused because there are no FIFO topics here to give
+ * them meaning, and a message accepted with a `MessageGroupId` that ordered
+ * nothing would be a message a test believed was ordered. `MessageStructure`
+ * is refused because a `json` structure picks a different body per protocol,
+ * and the protocols it picks between are not simulated, so it would be a body
+ * chosen by a rule that never ran.
+ */
+export declare function simSnsPublishedMessageInput(published: SimSnsPublishedFields): SimSnsPublishedMessageInput;
+//# sourceMappingURL=sim-sns-publish-input.d.ts.map

package/dist/service/sns/command/publish/sim-sns-publish-input.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-publish-input.d.ts","sourceRoot":"","sources":["../../../../../src/service/sns/command/publish/sim-sns-publish-input.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,4CAA4C,CAAC;AAC9F,OAAO,KAAK,EACV,sBAAsB,EACtB,qBAAqB,EACtB,MAAM,sBAAsB,CAAC;AAE9B;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,sBAAsB,GAC5B,IAAI,CAcN;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,2BAA2B,CACzC,SAAS,EAAE,qBAAqB,GAC/B,2BAA2B,CAuB7B"}

package/dist/service/sns/command/publish/sim-sns-publish-input.js

@@ -0,0 +1,47 @@
+import { SimSnsUnsimulatedInputException } from "../../error/sim-sns.error.js";
+import { SimSnsMessageAttributes } from "../../message/sim-sns-message-attributes.js";
+/**
+ * Refuse a publish to somewhere other than a topic.
+ *
+ * Real SNS publishes to a topic, to a mobile application endpoint, or to a
+ * phone number. Only the topic is simulated, so the other two are refused
+ * rather than answered with a message id for a message that reached nothing.
+ */
+export function refuseUnsimulatedPublishTarget(input) {
+    if (input.TargetArn !== undefined) {
+        throw new SimSnsUnsimulatedInputException("TargetArn publishes to a mobile application endpoint, which simulated " +
+            "SNS does not support. Publish to a TopicArn instead.");
+    }
+    if (input.PhoneNumber !== undefined) {
+        throw new SimSnsUnsimulatedInputException("PhoneNumber publishes an SMS message, which simulated SNS does not " +
+            "support. Publish to a TopicArn instead.");
+    }
+}
+/**
+ * Read the message a publish describes, refusing the fields this simulation
+ * does not model.
+ *
+ * The FIFO fields are refused because there are no FIFO topics here to give
+ * them meaning, and a message accepted with a `MessageGroupId` that ordered
+ * nothing would be a message a test believed was ordered. `MessageStructure`
+ * is refused because a `json` structure picks a different body per protocol,
+ * and the protocols it picks between are not simulated, so it would be a body
+ * chosen by a rule that never ran.
+ */
+export function simSnsPublishedMessageInput(published) {
+    if (published.MessageDeduplicationId !== undefined ||
+        published.MessageGroupId !== undefined) {
+        throw new SimSnsUnsimulatedInputException("MessageDeduplicationId and MessageGroupId apply to FIFO topics, which " +
+            "simulated SNS does not support");
+    }
+    if (published.MessageStructure !== undefined) {
+        throw new SimSnsUnsimulatedInputException("MessageStructure carries a different message body per protocol, which " +
+            "simulated SNS does not model");
+    }
+    return {
+        message: published.Message,
+        subject: published.Subject,
+        attributes: SimSnsMessageAttributes.of(published.MessageAttributes),
+    };
+}
+//# sourceMappingURL=sim-sns-publish-input.js.map

package/dist/service/sns/command/publish/sim-sns-publish-input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-publish-input.js","sourceRoot":"","sources":["../../../../../src/service/sns/command/publish/sim-sns-publish-input.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,+BAA+B,EAAE,MAAM,8BAA8B,CAAC;AAC/E,OAAO,EAAE,uBAAuB,EAAE,MAAM,6CAA6C,CAAC;AAOtF;;;;;;GAMG;AACH,MAAM,UAAU,8BAA8B,CAC5C,KAA6B;IAE7B,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,IAAI,+BAA+B,CACvC,wEAAwE;YACtE,sDAAsD,CACzD,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,IAAI,+BAA+B,CACvC,qEAAqE;YACnE,yCAAyC,CAC5C,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,2BAA2B,CACzC,SAAgC;IAEhC,IACE,SAAS,CAAC,sBAAsB,KAAK,SAAS;QAC9C,SAAS,CAAC,cAAc,KAAK,SAAS,EACtC,CAAC;QACD,MAAM,IAAI,+BAA+B,CACvC,wEAAwE;YACtE,gCAAgC,CACnC,CAAC;IACJ,CAAC;IAED,IAAI,SAAS,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QAC7C,MAAM,IAAI,+BAA+B,CACvC,wEAAwE;YACtE,8BAA8B,CACjC,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO,EAAE,SAAS,CAAC,OAAO;QAC1B,OAAO,EAAE,SAAS,CAAC,OAAO;QAC1B,UAAU,EAAE,uBAAuB,CAAC,EAAE,CAAC,SAAS,CAAC,iBAAiB,CAAC;KACpE,CAAC;AACJ,CAAC"}

package/dist/service/sns/command/sim-sns-command.types.d.ts

@@ -0,0 +1,7 @@
+/**
+ * The sim SNS Command types, gathered for the service facade.
+ */
+export type { SimCreateTopicCommand, SimCreateTopicCommandInput, SimCreateTopicCommandOutput, SimDeleteTopicCommand, SimDeleteTopicCommandInput, SimDeleteTopicCommandOutput, SimGetTopicAttributesCommand, SimGetTopicAttributesCommandInput, SimGetTopicAttributesCommandOutput, SimListTopicsCommand, SimListTopicsCommandInput, SimListTopicsCommandOutput, SimSetTopicAttributesCommand, SimSetTopicAttributesCommandInput, SimSetTopicAttributesCommandOutput, SimSnsListedTopic, SimSnsTag, } from "./topic/topic.command.js";
+export type { SimGetSubscriptionAttributesCommand, SimGetSubscriptionAttributesCommandInput, SimGetSubscriptionAttributesCommandOutput, SimListSubscriptionsByTopicCommand, SimListSubscriptionsByTopicCommandInput, SimListSubscriptionsByTopicCommandOutput, SimListSubscriptionsCommand, SimListSubscriptionsCommandInput, SimListSubscriptionsCommandOutput, SimSetSubscriptionAttributesCommand, SimSetSubscriptionAttributesCommandInput, SimSetSubscriptionAttributesCommandOutput, SimSnsListedSubscription, SimSubscribeCommand, SimSubscribeCommandInput, SimSubscribeCommandOutput, SimUnsubscribeCommand, SimUnsubscribeCommandInput, SimUnsubscribeCommandOutput, } from "./subscription/subscription.command.js";
+export type { SimPublishBatchCommand, SimPublishBatchCommandInput, SimPublishBatchCommandOutput, SimPublishCommand, SimPublishCommandInput, SimPublishCommandOutput, SimSnsBatchResultErrorEntry, SimSnsPublishBatchRequestEntry, SimSnsPublishBatchResultEntry, SimSnsPublishedFields, } from "./publish/publish.command.js";
+//# sourceMappingURL=sim-sns-command.types.d.ts.map

package/dist/service/sns/command/sim-sns-command.types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-command.types.d.ts","sourceRoot":"","sources":["../../../../src/service/sns/command/sim-sns-command.types.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,YAAY,EACV,qBAAqB,EACrB,0BAA0B,EAC1B,2BAA2B,EAC3B,qBAAqB,EACrB,0BAA0B,EAC1B,2BAA2B,EAC3B,4BAA4B,EAC5B,iCAAiC,EACjC,kCAAkC,EAClC,oBAAoB,EACpB,yBAAyB,EACzB,0BAA0B,EAC1B,4BAA4B,EAC5B,iCAAiC,EACjC,kCAAkC,EAClC,iBAAiB,EACjB,SAAS,GACV,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACV,mCAAmC,EACnC,wCAAwC,EACxC,yCAAyC,EACzC,kCAAkC,EAClC,uCAAuC,EACvC,wCAAwC,EACxC,2BAA2B,EAC3B,gCAAgC,EAChC,iCAAiC,EACjC,mCAAmC,EACnC,wCAAwC,EACxC,yCAAyC,EACzC,wBAAwB,EACxB,mBAAmB,EACnB,wBAAwB,EACxB,yBAAyB,EACzB,qBAAqB,EACrB,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,wCAAwC,CAAC;AAChD,YAAY,EACV,sBAAsB,EACtB,2BAA2B,EAC3B,4BAA4B,EAC5B,iBAAiB,EACjB,sBAAsB,EACtB,uBAAuB,EACvB,2BAA2B,EAC3B,8BAA8B,EAC9B,6BAA6B,EAC7B,qBAAqB,GACtB,MAAM,8BAA8B,CAAC"}

package/dist/service/sns/command/sim-sns-command.types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sim-sns-command.types.js.map

package/dist/service/sns/command/sim-sns-command.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-command.types.js","sourceRoot":"","sources":["../../../../src/service/sns/command/sim-sns-command.types.ts"],"names":[],"mappings":""}

package/dist/service/sns/command/sim-sns-commands.d.ts

@@ -0,0 +1,45 @@
+import type { BackgroundScheduler } from "../../../util/background/background.js";
+import type { SimAwsAccountRegionScope } from "../../aws/sim-aws-account-region-scope.js";
+import type { SimIamInterServiceAuthZ } from "../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimSnsDeliveryEndpoints } from "../delivery/sim-sns-delivery.js";
+import { SimSnsFanOut } from "../delivery/sim-sns-fan-out.js";
+import { SimSnsMessageSigner } from "../signature/sim-sns-message-signer.js";
+import type { SimSnsSubscriptionStore } from "../subscription/sim-sns-subscription-store.js";
+import type { SimSnsTopicStore } from "../topic/sim-sns-topic-store.js";
+import { SimSnsPublishCommands } from "./publish/sim-sns-publish-commands.js";
+import { SimSnsSubscriptionAttributeCommands } from "./subscription/sim-sns-subscription-attribute-commands.js";
+import { SimSnsSubscriptionCommands } from "./subscription/sim-sns-subscription-commands.js";
+import { SimSnsSubscriptionListings } from "./subscription/sim-sns-subscription-listings.js";
+import { SimSnsCreateTopic } from "./topic/sim-sns-create-topic.js";
+import { SimSnsTopicAttributeCommands } from "./topic/sim-sns-topic-attribute-commands.js";
+import { SimSnsTopicCommands } from "./topic/sim-sns-topic-commands.js";
+interface SimSnsCommandsProperties {
+    readonly topics: SimSnsTopicStore;
+    readonly subscriptions: SimSnsSubscriptionStore;
+    readonly iam: SimIamInterServiceAuthZ;
+    readonly background: BackgroundScheduler;
+    readonly deliveryEndpoints: SimSnsDeliveryEndpoints;
+    readonly accountRegionScope: SimAwsAccountRegionScope;
+}
+/**
+ * Every command handler one simulated SNS scope delegates to.
+ *
+ * The wiring lives here rather than in the facade so that `SimSns` stays what
+ * it is meant to be: state and delegation. Which handler shares which
+ * collaborator is a fact about the handlers, not about the service object in
+ * front of them.
+ */
+export declare class SimSnsCommands {
+    readonly topicCreation: SimSnsCreateTopic;
+    readonly topics: SimSnsTopicCommands;
+    readonly topicAttributes: SimSnsTopicAttributeCommands;
+    readonly subscriptions: SimSnsSubscriptionCommands;
+    readonly subscriptionListings: SimSnsSubscriptionListings;
+    readonly subscriptionAttributes: SimSnsSubscriptionAttributeCommands;
+    readonly publish: SimSnsPublishCommands;
+    readonly fanOut: SimSnsFanOut;
+    readonly signer: SimSnsMessageSigner;
+    constructor(properties: SimSnsCommandsProperties);
+}
+export {};
+//# sourceMappingURL=sim-sns-commands.d.ts.map

package/dist/service/sns/command/sim-sns-commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-commands.d.ts","sourceRoot":"","sources":["../../../../src/service/sns/command/sim-sns-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAClF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAC1F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qDAAqD,CAAC;AACnG,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAE/E,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,+CAA+C,CAAC;AAC7F,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAExE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAE9E,OAAO,EAAE,mCAAmC,EAAE,MAAM,2DAA2D,CAAC;AAChH,OAAO,EAAE,0BAA0B,EAAE,MAAM,iDAAiD,CAAC;AAC7F,OAAO,EAAE,0BAA0B,EAAE,MAAM,iDAAiD,CAAC;AAC7F,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AAEpE,OAAO,EAAE,4BAA4B,EAAE,MAAM,6CAA6C,CAAC;AAC3F,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAExE,UAAU,wBAAwB;IAChC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,aAAa,EAAE,uBAAuB,CAAC;IAChD,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;IACtC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;IACzC,QAAQ,CAAC,iBAAiB,EAAE,uBAAuB,CAAC;IACpD,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;CACvD;AAED;;;;;;;GAOG;AACH,qBAAa,cAAc;IACzB,SAAgB,aAAa,EAAE,iBAAiB,CAAC;IACjD,SAAgB,MAAM,EAAE,mBAAmB,CAAC;IAC5C,SAAgB,eAAe,EAAE,4BAA4B,CAAC;IAC9D,SAAgB,aAAa,EAAE,0BAA0B,CAAC;IAC1D,SAAgB,oBAAoB,EAAE,0BAA0B,CAAC;IACjE,SAAgB,sBAAsB,EAAE,mCAAmC,CAAC;IAC5E,SAAgB,OAAO,EAAE,qBAAqB,CAAC;IAC/C,SAAgB,MAAM,EAAE,YAAY,CAAC;IACrC,SAAgB,MAAM,EAAE,mBAAmB,CAAC;IAE5C,YAAY,UAAU,EAAE,wBAAwB,EAmD/C;CACF"}

package/dist/service/sns/command/sim-sns-commands.js

@@ -0,0 +1,83 @@
+import { SimSnsDeliveryRequests } from "../delivery/sim-sns-delivery-request.js";
+import { SimSnsFanOut } from "../delivery/sim-sns-fan-out.js";
+import { SimSnsMessageSigner } from "../signature/sim-sns-message-signer.js";
+import { SimSnsAuthorizer } from "./authorize/sim-sns-authorizer.js";
+import { SimSnsPublishCommands } from "./publish/sim-sns-publish-commands.js";
+import { SimSnsSubscriptionAccess } from "./subscription/sim-sns-subscription-access.js";
+import { SimSnsSubscriptionAttributeCommands } from "./subscription/sim-sns-subscription-attribute-commands.js";
+import { SimSnsSubscriptionCommands } from "./subscription/sim-sns-subscription-commands.js";
+import { SimSnsSubscriptionListings } from "./subscription/sim-sns-subscription-listings.js";
+import { SimSnsCreateTopic } from "./topic/sim-sns-create-topic.js";
+import { SimSnsTopicAccess } from "./topic/sim-sns-topic-access.js";
+import { SimSnsTopicAttributeCommands } from "./topic/sim-sns-topic-attribute-commands.js";
+import { SimSnsTopicCommands } from "./topic/sim-sns-topic-commands.js";
+/**
+ * Every command handler one simulated SNS scope delegates to.
+ *
+ * The wiring lives here rather than in the facade so that `SimSns` stays what
+ * it is meant to be: state and delegation. Which handler shares which
+ * collaborator is a fact about the handlers, not about the service object in
+ * front of them.
+ */
+export class SimSnsCommands {
+    topicCreation;
+    topics;
+    topicAttributes;
+    subscriptions;
+    subscriptionListings;
+    subscriptionAttributes;
+    publish;
+    fanOut;
+    signer;
+    constructor(properties) {
+        const { topics, subscriptions, accountRegionScope, background } = properties;
+        const access = new SimSnsTopicAccess({
+            topics,
+            authorizer: new SimSnsAuthorizer({ iam: properties.iam }),
+            accountRegionScope,
+        });
+        const subscriptionAccess = new SimSnsSubscriptionAccess({
+            subscriptions,
+            topicAccess: access,
+            accountRegionScope,
+        });
+        this.signer = new SimSnsMessageSigner({ accountRegionScope });
+        this.fanOut = new SimSnsFanOut({
+            subscriptions,
+            endpoints: properties.deliveryEndpoints,
+            requests: new SimSnsDeliveryRequests({
+                signer: this.signer,
+                accountRegionScope,
+            }),
+            background,
+        });
+        this.topicCreation = new SimSnsCreateTopic({
+            topics,
+            access,
+            accountRegionScope,
+        });
+        this.topics = new SimSnsTopicCommands({ topics, subscriptions, access });
+        this.topicAttributes = new SimSnsTopicAttributeCommands({
+            access,
+            subscriptions,
+        });
+        this.subscriptions = new SimSnsSubscriptionCommands({
+            subscriptions,
+            topicAccess: access,
+            subscriptionAccess,
+        });
+        this.subscriptionListings = new SimSnsSubscriptionListings({
+            subscriptions,
+            topicAccess: access,
+        });
+        this.subscriptionAttributes = new SimSnsSubscriptionAttributeCommands({
+            access: subscriptionAccess,
+        });
+        this.publish = new SimSnsPublishCommands({
+            access,
+            clock: background,
+            fanOut: this.fanOut,
+        });
+    }
+}
+//# sourceMappingURL=sim-sns-commands.js.map

package/dist/service/sns/command/sim-sns-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-commands.js","sourceRoot":"","sources":["../../../../src/service/sns/command/sim-sns-commands.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,sBAAsB,EAAE,MAAM,yCAAyC,CAAC;AACjF,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAG7E,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,wBAAwB,EAAE,MAAM,+CAA+C,CAAC;AACzF,OAAO,EAAE,mCAAmC,EAAE,MAAM,2DAA2D,CAAC;AAChH,OAAO,EAAE,0BAA0B,EAAE,MAAM,iDAAiD,CAAC;AAC7F,OAAO,EAAE,0BAA0B,EAAE,MAAM,iDAAiD,CAAC;AAC7F,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,4BAA4B,EAAE,MAAM,6CAA6C,CAAC;AAC3F,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAWxE;;;;;;;GAOG;AACH,MAAM,OAAO,cAAc;IACT,aAAa,CAAoB;IACjC,MAAM,CAAsB;IAC5B,eAAe,CAA+B;IAC9C,aAAa,CAA6B;IAC1C,oBAAoB,CAA6B;IACjD,sBAAsB,CAAsC;IAC5D,OAAO,CAAwB;IAC/B,MAAM,CAAe;IACrB,MAAM,CAAsB;IAE5C,YAAY,UAAoC;QAC9C,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,kBAAkB,EAAE,UAAU,EAAE,GAC7D,UAAU,CAAC;QACb,MAAM,MAAM,GAAG,IAAI,iBAAiB,CAAC;YACnC,MAAM;YACN,UAAU,EAAE,IAAI,gBAAgB,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,CAAC;YACzD,kBAAkB;SACnB,CAAC,CAAC;QACH,MAAM,kBAAkB,GAAG,IAAI,wBAAwB,CAAC;YACtD,aAAa;YACb,WAAW,EAAE,MAAM;YACnB,kBAAkB;SACnB,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,GAAG,IAAI,mBAAmB,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,GAAG,IAAI,YAAY,CAAC;YAC7B,aAAa;YACb,SAAS,EAAE,UAAU,CAAC,iBAAiB;YACvC,QAAQ,EAAE,IAAI,sBAAsB,CAAC;gBACnC,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,kBAAkB;aACnB,CAAC;YACF,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,aAAa,GAAG,IAAI,iBAAiB,CAAC;YACzC,MAAM;YACN,MAAM;YACN,kBAAkB;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,GAAG,IAAI,mBAAmB,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC;QACzE,IAAI,CAAC,eAAe,GAAG,IAAI,4BAA4B,CAAC;YACtD,MAAM;YACN,aAAa;SACd,CAAC,CAAC;QACH,IAAI,CAAC,aAAa,GAAG,IAAI,0BAA0B,CAAC;YAClD,aAAa;YACb,WAAW,EAAE,MAAM;YACnB,kBAAkB;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,oBAAoB,GAAG,IAAI,0BAA0B,CAAC;YACzD,aAAa;YACb,WAAW,EAAE,MAAM;SACpB,CAAC,CAAC;QACH,IAAI,CAAC,sBAAsB,GAAG,IAAI,mCAAmC,CAAC;YACpE,MAAM,EAAE,kBAAkB;SAC3B,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,GAAG,IAAI,qBAAqB,CAAC;YACvC,MAAM;YACN,KAAK,EAAE,UAAU;YACjB,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/sns/command/sim-sns-page.d.ts

@@ -0,0 +1,19 @@
+/**
+ * One page of a listing, and the token that reaches the next one.
+ */
+export declare class SimSnsPage<Item> {
+    readonly items: readonly Item[];
+    readonly nextToken: string | undefined;
+    constructor(listed: readonly Item[], nextToken: string | undefined);
+    /**
+     * Read a continuation token as its offset into the listed items.
+     *
+     * A token is refused unless it is one of these listings could have issued,
+     * which is the start of a page after the first. An offset landing part way
+     * into a page is not one, so it is refused rather than answered with a
+     * listing starting somewhere real SNS would never start one.
+     */
+    private static startIndex;
+    private static tokenFor;
+}
+//# sourceMappingURL=sim-sns-page.d.ts.map

package/dist/service/sns/command/sim-sns-page.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-page.d.ts","sourceRoot":"","sources":["../../../../src/service/sns/command/sim-sns-page.ts"],"names":[],"mappings":"AAWA;;GAEG;AACH,qBAAa,UAAU,CAAC,IAAI;IAC1B,SAAgB,KAAK,EAAE,SAAS,IAAI,EAAE,CAAC;IACvC,SAAgB,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAE9C,YAAY,MAAM,EAAE,SAAS,IAAI,EAAE,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS,EAMjE;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,MAAM,CAAC,UAAU;IAyBzB,OAAO,CAAC,MAAM,CAAC,QAAQ;CAUxB"}

package/dist/service/sns/command/sim-sns-page.js

@@ -0,0 +1,51 @@
+import { SimSnsInvalidParameterException } from "../error/sim-sns.error.js";
+/**
+ * How many items one listing response carries.
+ *
+ * Real SNS gives the request no say in this for any of its listings: topics,
+ * subscriptions and a topic's subscriptions all page at 100 and hand back a
+ * token for the rest.
+ */
+const itemsPerPage = 100;
+/**
+ * One page of a listing, and the token that reaches the next one.
+ */
+export class SimSnsPage {
+    items;
+    nextToken;
+    constructor(listed, nextToken) {
+        const startIndex = SimSnsPage.startIndex(nextToken, listed.length);
+        const nextIndex = startIndex + itemsPerPage;
+        this.items = listed.slice(startIndex, nextIndex);
+        this.nextToken = SimSnsPage.tokenFor(nextIndex, listed.length);
+    }
+    /**
+     * Read a continuation token as its offset into the listed items.
+     *
+     * A token is refused unless it is one of these listings could have issued,
+     * which is the start of a page after the first. An offset landing part way
+     * into a page is not one, so it is refused rather than answered with a
+     * listing starting somewhere real SNS would never start one.
+     */
+    static startIndex(nextToken, listedCount) {
+        if (nextToken === undefined) {
+            return 0;
+        }
+        const startIndex = Number(nextToken);
+        if (!Number.isSafeInteger(startIndex) ||
+            startIndex <= 0 ||
+            startIndex % itemsPerPage !== 0 ||
+            startIndex >= listedCount ||
+            String(startIndex) !== nextToken) {
+            throw new SimSnsInvalidParameterException("Invalid parameter: NextToken is not a token this simulation issued");
+        }
+        return startIndex;
+    }
+    static tokenFor(nextIndex, listedCount) {
+        if (nextIndex >= listedCount) {
+            return undefined;
+        }
+        return String(nextIndex);
+    }
+}
+//# sourceMappingURL=sim-sns-page.js.map

package/dist/service/sns/command/sim-sns-page.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-page.js","sourceRoot":"","sources":["../../../../src/service/sns/command/sim-sns-page.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,+BAA+B,EAAE,MAAM,2BAA2B,CAAC;AAE5E;;;;;;GAMG;AACH,MAAM,YAAY,GAAG,GAAG,CAAC;AAEzB;;GAEG;AACH,MAAM,OAAO,UAAU;IACL,KAAK,CAAkB;IACvB,SAAS,CAAqB;IAE9C,YAAY,MAAuB,EAAE,SAA6B;QAChE,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACnE,MAAM,SAAS,GAAG,UAAU,GAAG,YAAY,CAAC;QAE5C,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACjD,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACjE,CAAC;IAED;;;;;;;OAOG;IACK,MAAM,CAAC,UAAU,CACvB,SAA6B,EAC7B,WAAmB;QAEnB,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,CAAC,CAAC;QACX,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;QAErC,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC;YACjC,UAAU,IAAI,CAAC;YACf,UAAU,GAAG,YAAY,KAAK,CAAC;YAC/B,UAAU,IAAI,WAAW;YACzB,MAAM,CAAC,UAAU,CAAC,KAAK,SAAS,EAChC,CAAC;YACD,MAAM,IAAI,+BAA+B,CACvC,oEAAoE,CACrE,CAAC;QACJ,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAEO,MAAM,CAAC,QAAQ,CACrB,SAAiB,EACjB,WAAmB;QAEnB,IAAI,SAAS,IAAI,WAAW,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC;IAC3B,CAAC;CACF"}

package/dist/service/sns/command/sim-sns-request-options.d.ts

@@ -0,0 +1,47 @@
+import type { SimAwsCaller } from "../../aws/caller/sim-aws-caller.js";
+/**
+ * The condition key naming what a simulated service is reaching the topic for,
+ * such as the S3 Bucket an event came from.
+ *
+ * This is the key a topic policy granting a service principal access is nearly
+ * always conditioned on, under `ArnLike`, since a service principal is shared
+ * by every resource of that service.
+ */
+export declare const simSnsSourceArnConditionKey = "aws:SourceArn";
+/**
+ * The condition key naming the Account owning the resource a simulated service
+ * is reaching the topic for.
+ *
+ * It only has a job when that resource and the topic are in different Accounts,
+ * which is why AWS's own documented topic policies carry it alongside the
+ * source ARN.
+ */
+export declare const simSnsSourceAccountConditionKey = "aws:SourceAccount";
+/**
+ * What an SNS request carries besides its command input.
+ */
+export interface SimSnsRequestOptions {
+    /**
+     * Who is making the request. An omitted caller is the Account root, as it is
+     * everywhere else in the simulation.
+     */
+    readonly caller?: SimAwsCaller;
+    /**
+     * What the caller is reaching the topic for, supplied to IAM as
+     * `aws:SourceArn`.
+     *
+     * This is for a simulated service making a request on a resource's behalf,
+     * which is how real AWS supplies it. A value the caller does not have is left
+     * out rather than supplied empty, so a statement conditioned on it fails to
+     * match instead of matching an empty string.
+     */
+    readonly sourceArn?: string;
+    /**
+     * The Account owning the resource the caller is reaching the topic for,
+     * supplied to IAM as `aws:SourceAccount`.
+     *
+     * Left out the same way when the caller has no value for it.
+     */
+    readonly sourceAccount?: string;
+}
+//# sourceMappingURL=sim-sns-request-options.d.ts.map

package/dist/service/sns/command/sim-sns-request-options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-request-options.d.ts","sourceRoot":"","sources":["../../../../src/service/sns/command/sim-sns-request-options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAEvE;;;;;;;GAOG;AACH,eAAO,MAAM,2BAA2B,kBAAkB,CAAC;AAE3D;;;;;;;GAOG;AACH,eAAO,MAAM,+BAA+B,sBAAsB,CAAC;AAEnE;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;IAE/B;;;;;;;;OAQG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAE5B;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC"}

package/dist/service/sns/command/sim-sns-request-options.js

@@ -0,0 +1,19 @@
+/**
+ * The condition key naming what a simulated service is reaching the topic for,
+ * such as the S3 Bucket an event came from.
+ *
+ * This is the key a topic policy granting a service principal access is nearly
+ * always conditioned on, under `ArnLike`, since a service principal is shared
+ * by every resource of that service.
+ */
+export const simSnsSourceArnConditionKey = "aws:SourceArn";
+/**
+ * The condition key naming the Account owning the resource a simulated service
+ * is reaching the topic for.
+ *
+ * It only has a job when that resource and the topic are in different Accounts,
+ * which is why AWS's own documented topic policies carry it alongside the
+ * source ARN.
+ */
+export const simSnsSourceAccountConditionKey = "aws:SourceAccount";
+//# sourceMappingURL=sim-sns-request-options.js.map

package/dist/service/sns/command/sim-sns-request-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-request-options.js","sourceRoot":"","sources":["../../../../src/service/sns/command/sim-sns-request-options.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,eAAe,CAAC;AAE3D;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,mBAAmB,CAAC"}

package/dist/service/sns/command/subscription/sim-sns-subscription-access.d.ts

@@ -0,0 +1,42 @@
+import type { SimAwsAccountRegionScope } from "../../../aws/sim-aws-account-region-scope.js";
+import type { SimSnsSubscription } from "../../subscription/sim-sns-subscription.js";
+import type { SimSnsSubscriptionStore } from "../../subscription/sim-sns-subscription-store.js";
+import type { SimSnsTopicAccess } from "../topic/sim-sns-topic-access.js";
+import type { SimSnsRequestOptions } from "../sim-sns-request-options.js";
+interface SimSnsSubscriptionAccessProperties {
+    readonly subscriptions: SimSnsSubscriptionStore;
+    readonly topicAccess: SimSnsTopicAccess;
+    readonly accountRegionScope: SimAwsAccountRegionScope;
+}
+/**
+ * How a request reaches the subscription it names by ARN.
+ *
+ * The action is authorized before the subscription is looked for, which is the
+ * other way round from a topic. Real SNS gives `Unsubscribe`,
+ * `GetSubscriptionAttributes` and `SetSubscriptionAttributes` no resource type
+ * at all, so IAM evaluates them against `*` and no topic policy takes part in
+ * the decision. Nothing about the subscription can change the answer, so
+ * nothing has to be found first.
+ */
+export declare class SimSnsSubscriptionAccess {
+    private readonly subscriptions;
+    private readonly topicAccess;
+    private readonly accountRegionScope;
+    constructor(properties: SimSnsSubscriptionAccessProperties);
+    /**
+     * Resolve the subscription a request names by ARN, authorizing the action
+     * first.
+     */
+    requireByArn(action: string, subscriptionArn: string | undefined, options?: SimSnsRequestOptions): SimSnsSubscription;
+    /**
+     * Read the subscription ARN a request carries, refusing one this scope could
+     * not own.
+     *
+     * A subscription ARN is the topic's with an id on the end, so it names an
+     * Account and a Region the same way a topic ARN does, and one naming another
+     * scope reaches nothing here rather than being looked up locally by its id.
+     */
+    private scopedArn;
+}
+export {};
+//# sourceMappingURL=sim-sns-subscription-access.d.ts.map

package/dist/service/sns/command/subscription/sim-sns-subscription-access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-subscription-access.d.ts","sourceRoot":"","sources":["../../../../../src/service/sns/command/subscription/sim-sns-subscription-access.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAK7F,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4CAA4C,CAAC;AAErF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kDAAkD,CAAC;AAChG,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAE1E,UAAU,kCAAkC;IAC1C,QAAQ,CAAC,aAAa,EAAE,uBAAuB,CAAC;IAChD,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAC;IACxC,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;CACvD;AAED;;;;;;;;;GASG;AACH,qBAAa,wBAAwB;IACnC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA0B;IACxD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAoB;IAChD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA2B;IAE9D,YAAY,UAAU,EAAE,kCAAkC,EAIzD;IAED;;;OAGG;IACH,YAAY,CACV,MAAM,EAAE,MAAM,EACd,eAAe,EAAE,MAAM,GAAG,SAAS,EACnC,OAAO,CAAC,EAAE,oBAAoB,GAC7B,kBAAkB,CAIpB;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,SAAS;CA6BlB"}