@kensio/yulin 1.8.0 → 1.10.0

package/dist/service/sns/delivery/lambda/sim-sns-delivery-function.d.ts

@@ -0,0 +1,31 @@
+import type { SimAwsAccountRegionContainer } from "../../../aws/sim-aws-account-region-scope.js";
+import type { SimSnsFunctionEndpointArn } from "../../subscription/sim-sns-function-endpoint-arn.js";
+import { type SimSnsDeliveryRequest } from "../sim-sns-delivery.js";
+interface SimSnsDeliveryFunctionProperties {
+    readonly arn: SimSnsFunctionEndpointArn;
+    readonly scope: SimAwsAccountRegionContainer;
+}
+/**
+ * One function a simulated topic is delivering to, in the Account and Region
+ * its ARN names.
+ *
+ * Everything is asked of the function's own Account, which is what makes a
+ * function in another Account reachable: its resource policy is the grant, and
+ * its Account's IAM is what evaluates it.
+ */
+export declare class SimSnsDeliveryFunction {
+    private readonly arn;
+    private readonly scope;
+    constructor(properties: SimSnsDeliveryFunctionProperties);
+    /**
+     * Invoke the function with the event, if it still admits SNS for this topic.
+     *
+     * The resource policy is consulted on every delivery rather than remembered
+     * from the moment the subscription was made, so a permission taken away
+     * afterwards stops delivery. Real SNS does not check it at `Subscribe` time
+     * at all, which is why this is the only place it is asked.
+     */
+    deliver(request: SimSnsDeliveryRequest): Promise<void>;
+}
+export {};
+//# sourceMappingURL=sim-sns-delivery-function.d.ts.map

package/dist/service/sns/delivery/lambda/sim-sns-delivery-function.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-delivery-function.d.ts","sourceRoot":"","sources":["../../../../../src/service/sns/delivery/lambda/sim-sns-delivery-function.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,8CAA8C,CAAC;AAIjG,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,qDAAqD,CAAC;AACrG,OAAO,EACL,KAAK,qBAAqB,EAG3B,MAAM,wBAAwB,CAAC;AAGhC,UAAU,gCAAgC;IACxC,QAAQ,CAAC,GAAG,EAAE,yBAAyB,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,4BAA4B,CAAC;CAC9C;AAED;;;;;;;GAOG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA4B;IAChD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA+B;IAErD,YAAY,UAAU,EAAE,gCAAgC,EAGvD;IAED;;;;;;;OAOG;IACG,OAAO,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAuC3D;CACF"}

package/dist/service/sns/delivery/lambda/sim-sns-delivery-function.js

@@ -0,0 +1,62 @@
+import { SimLambdaServiceInvokeAuthorizer } from "../../../lambda/command/authorize/sim-lambda-service-invoke-authorizer.js";
+import { SimSnsDeliveryNotPermitted } from "../../error/sim-sns-delivery.error.js";
+import { SimSnsNotFoundException } from "../../error/sim-sns.error.js";
+import { simSnsDeliverySource, simSnsServicePrincipal, } from "../sim-sns-delivery.js";
+import { simSnsLambdaEventDocument } from "./sim-sns-lambda-event.js";
+/**
+ * One function a simulated topic is delivering to, in the Account and Region
+ * its ARN names.
+ *
+ * Everything is asked of the function's own Account, which is what makes a
+ * function in another Account reachable: its resource policy is the grant, and
+ * its Account's IAM is what evaluates it.
+ */
+export class SimSnsDeliveryFunction {
+    arn;
+    scope;
+    constructor(properties) {
+        this.arn = properties.arn;
+        this.scope = properties.scope;
+    }
+    /**
+     * Invoke the function with the event, if it still admits SNS for this topic.
+     *
+     * The resource policy is consulted on every delivery rather than remembered
+     * from the moment the subscription was made, so a permission taken away
+     * afterwards stops delivery. Real SNS does not check it at `Subscribe` time
+     * at all, which is why this is the only place it is asked.
+     */
+    async deliver(request) {
+        const source = simSnsDeliverySource(request);
+        const endpointArn = request.subscription.endpoint.value;
+        const simFunction = this.scope
+            .lambda()
+            .getSimFunctionByName(this.arn.functionName);
+        if (simFunction === undefined) {
+            // Not a refusal: the resource policy said nothing, because there is no
+            // function. A subscription pointing at nothing is a mistake worth
+            // warning about, where a policy saying no is a modelled outcome a test
+            // may be asking for on purpose.
+            throw new SimSnsNotFoundException(`${endpointArn} is not a simulated Lambda function.`);
+        }
+        const decision = new SimLambdaServiceInvokeAuthorizer({
+            iam: this.scope.iam(),
+        }).authorize({
+            simFunction,
+            servicePrincipal: simSnsServicePrincipal,
+            ...source,
+        });
+        if (decision.isDenied) {
+            throw new SimSnsDeliveryNotPermitted(`The resource policy of ${endpointArn} does not allow ` +
+                `${simSnsServicePrincipal} to invoke it for ${source.sourceArn}. ` +
+                "Grant it with AddPermission.");
+        }
+        // The function is invoked directly rather than through an Invoke command,
+        // because SNS is already inside the background task that stands for the
+        // asynchronous invocation real SNS makes, and because a handler failure
+        // has to reach the delivery outcome rather than being swallowed as an
+        // asynchronous invocation error.
+        await simFunction.invoke(simSnsLambdaEventDocument(request));
+    }
+}
+//# sourceMappingURL=sim-sns-delivery-function.js.map

package/dist/service/sns/delivery/lambda/sim-sns-delivery-function.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-delivery-function.js","sourceRoot":"","sources":["../../../../../src/service/sns/delivery/lambda/sim-sns-delivery-function.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gCAAgC,EAAE,MAAM,2EAA2E,CAAC;AAC7H,OAAO,EAAE,0BAA0B,EAAE,MAAM,uCAAuC,CAAC;AACnF,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAEvE,OAAO,EAEL,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAOtE;;;;;;;GAOG;AACH,MAAM,OAAO,sBAAsB;IAChB,GAAG,CAA4B;IAC/B,KAAK,CAA+B;IAErD,YAAY,UAA4C;QACtD,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;QAC1B,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAChC,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,OAAO,CAAC,OAA8B;QAC1C,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC;QACxD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK;aAC3B,MAAM,EAAE;aACR,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAE/C,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,uEAAuE;YACvE,kEAAkE;YAClE,uEAAuE;YACvE,gCAAgC;YAChC,MAAM,IAAI,uBAAuB,CAC/B,GAAG,WAAW,sCAAsC,CACrD,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,gCAAgC,CAAC;YACpD,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;SACtB,CAAC,CAAC,SAAS,CAAC;YACX,WAAW;YACX,gBAAgB,EAAE,sBAAsB;YACxC,GAAG,MAAM;SACV,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,0BAA0B,CAClC,0BAA0B,WAAW,kBAAkB;gBACrD,GAAG,sBAAsB,qBAAqB,MAAM,CAAC,SAAS,IAAI;gBAClE,8BAA8B,CACjC,CAAC;QACJ,CAAC;QAED,0EAA0E;QAC1E,wEAAwE;QACxE,wEAAwE;QACxE,sEAAsE;QACtE,iCAAiC;QACjC,MAAM,WAAW,CAAC,MAAM,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/D,CAAC;CACF"}

package/dist/service/sns/delivery/lambda/sim-sns-lambda-event.d.ts

@@ -0,0 +1,10 @@
+import type { SimSnsDeliveryRequest } from "../sim-sns-delivery.js";
+/**
+ * The event one subscribed Lambda function is invoked with.
+ *
+ * `Records` always holds exactly one entry, even for a `PublishBatch`. Real SNS
+ * does not batch to Lambda: each published message is its own asynchronous
+ * invocation, so a handler looping over `Records` sees one message per call.
+ */
+export declare function simSnsLambdaEventDocument(request: SimSnsDeliveryRequest): object;
+//# sourceMappingURL=sim-sns-lambda-event.d.ts.map

package/dist/service/sns/delivery/lambda/sim-sns-lambda-event.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-lambda-event.d.ts","sourceRoot":"","sources":["../../../../../src/service/sns/delivery/lambda/sim-sns-lambda-event.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAcpE;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,qBAAqB,GAC7B,MAAM,CAWR"}

package/dist/service/sns/delivery/lambda/sim-sns-lambda-event.js

@@ -0,0 +1,53 @@
+/**
+ * What the `EventSource` of an SNS record says, which is how a handler taking
+ * events from more than one service tells them apart.
+ */
+const eventSource = "aws:sns";
+/**
+ * The version of the SNS record shape, which real SNS has never moved off.
+ */
+const eventVersion = "1.0";
+/**
+ * The event one subscribed Lambda function is invoked with.
+ *
+ * `Records` always holds exactly one entry, even for a `PublishBatch`. Real SNS
+ * does not batch to Lambda: each published message is its own asynchronous
+ * invocation, so a handler looping over `Records` sees one message per call.
+ */
+export function simSnsLambdaEventDocument(request) {
+    return {
+        Records: [
+            {
+                EventSource: eventSource,
+                EventVersion: eventVersion,
+                EventSubscriptionArn: request.subscription.arn.value,
+                Sns: snsRecord(request.notification.fields()),
+            },
+        ],
+    };
+}
+/**
+ * The notification as the `Sns` object of a record spells it.
+ *
+ * Two fields differ from the envelope a queue receives, and the difference is
+ * real SNS behaviour rather than an oversight: the envelope has `SigningCertURL`
+ * and `UnsubscribeURL`, and a Lambda event has `SigningCertUrl` and
+ * `UnsubscribeUrl`. `Subject` and `MessageAttributes` are always present here,
+ * where the envelope leaves each out when there is nothing to put in it.
+ */
+function snsRecord(fields) {
+    return {
+        Type: fields.type,
+        MessageId: fields.messageId,
+        TopicArn: fields.topicArn,
+        Subject: fields.subject ?? null,
+        Message: fields.message,
+        Timestamp: fields.timestamp,
+        SignatureVersion: fields.signature.SignatureVersion,
+        Signature: fields.signature.Signature,
+        SigningCertUrl: fields.signature.SigningCertURL,
+        UnsubscribeUrl: fields.unsubscribeUrl,
+        MessageAttributes: fields.messageAttributes,
+    };
+}
+//# sourceMappingURL=sim-sns-lambda-event.js.map

package/dist/service/sns/delivery/lambda/sim-sns-lambda-event.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-lambda-event.js","sourceRoot":"","sources":["../../../../../src/service/sns/delivery/lambda/sim-sns-lambda-event.ts"],"names":[],"mappings":"AAGA;;;GAGG;AACH,MAAM,WAAW,GAAG,SAAS,CAAC;AAE9B;;GAEG;AACH,MAAM,YAAY,GAAG,KAAK,CAAC;AAE3B;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CACvC,OAA8B;IAE9B,OAAO;QACL,OAAO,EAAE;YACP;gBACE,WAAW,EAAE,WAAW;gBACxB,YAAY,EAAE,YAAY;gBAC1B,oBAAoB,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK;gBACpD,GAAG,EAAE,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;aAC9C;SACF;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,SAAS,CAAC,MAAgC;IACjD,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;QAC/B,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,gBAAgB,EAAE,MAAM,CAAC,SAAS,CAAC,gBAAgB;QACnD,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,SAAS;QACrC,cAAc,EAAE,MAAM,CAAC,SAAS,CAAC,cAAc;QAC/C,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;KAC5C,CAAC;AACJ,CAAC"}

package/dist/service/sns/delivery/sim-aws-sns-delivery-endpoints.d.ts

@@ -0,0 +1,17 @@
+import type { SimAws } from "../../aws/sim-aws.js";
+import { SimSnsProtocolDeliveryEndpoints } from "./sim-sns-protocol-delivery-endpoints.js";
+interface SimAwsSnsDeliveryEndpointsProperties {
+    readonly simAws: SimAws;
+}
+/**
+ * Everywhere the topics of one simulated AWS instance can deliver.
+ *
+ * Which protocols are simulated is a fact about simulated SNS rather than about
+ * the service builder that hands it its endpoints, so the set is assembled
+ * here.
+ */
+export declare class SimAwsSnsDeliveryEndpoints extends SimSnsProtocolDeliveryEndpoints {
+    constructor(properties: SimAwsSnsDeliveryEndpointsProperties);
+}
+export {};
+//# sourceMappingURL=sim-aws-sns-delivery-endpoints.d.ts.map

package/dist/service/sns/delivery/sim-aws-sns-delivery-endpoints.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-aws-sns-delivery-endpoints.d.ts","sourceRoot":"","sources":["../../../../src/service/sns/delivery/sim-aws-sns-delivery-endpoints.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAEnD,OAAO,EAAE,+BAA+B,EAAE,MAAM,0CAA0C,CAAC;AAG3F,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;GAMG;AACH,qBAAa,0BAA2B,SAAQ,+BAA+B;IAC7E,YAAY,UAAU,EAAE,oCAAoC,EAO3D;CACF"}

package/dist/service/sns/delivery/sim-aws-sns-delivery-endpoints.js

@@ -0,0 +1,21 @@
+import { SimAwsSnsDeliveryFunctions } from "./lambda/sim-aws-sns-delivery-functions.js";
+import { SimSnsProtocolDeliveryEndpoints } from "./sim-sns-protocol-delivery-endpoints.js";
+import { SimAwsSnsDeliveryQueues } from "./sqs/sim-aws-sns-delivery-queues.js";
+/**
+ * Everywhere the topics of one simulated AWS instance can deliver.
+ *
+ * Which protocols are simulated is a fact about simulated SNS rather than about
+ * the service builder that hands it its endpoints, so the set is assembled
+ * here.
+ */
+export class SimAwsSnsDeliveryEndpoints extends SimSnsProtocolDeliveryEndpoints {
+    constructor(properties) {
+        super({
+            byProtocol: {
+                sqs: new SimAwsSnsDeliveryQueues(properties),
+                lambda: new SimAwsSnsDeliveryFunctions(properties),
+            },
+        });
+    }
+}
+//# sourceMappingURL=sim-aws-sns-delivery-endpoints.js.map

package/dist/service/sns/delivery/sim-aws-sns-delivery-endpoints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-aws-sns-delivery-endpoints.js","sourceRoot":"","sources":["../../../../src/service/sns/delivery/sim-aws-sns-delivery-endpoints.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,EAAE,+BAA+B,EAAE,MAAM,0CAA0C,CAAC;AAC3F,OAAO,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AAM/E;;;;;;GAMG;AACH,MAAM,OAAO,0BAA2B,SAAQ,+BAA+B;IAC7E,YAAY,UAAgD;QAC1D,KAAK,CAAC;YACJ,UAAU,EAAE;gBACV,GAAG,EAAE,IAAI,uBAAuB,CAAC,UAAU,CAAC;gBAC5C,MAAM,EAAE,IAAI,0BAA0B,CAAC,UAAU,CAAC;aACnD;SACF,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/sns/delivery/sim-sns-canonical-message.d.ts

@@ -0,0 +1,32 @@
+/**
+ * The values real SNS signs, under the names it signs them by.
+ *
+ * A verifier rebuilds this from the document it received, so the names are the
+ * document's rather than the simulator's.
+ */
+export interface SimSnsSignedValues {
+    readonly Message: string;
+    readonly MessageId: string;
+    readonly Subject: string | undefined;
+    readonly Timestamp: string;
+    readonly TopicArn: string;
+    readonly Type: string;
+}
+/**
+ * The string real SNS signs, which is what a verifier rebuilds to check the
+ * signature.
+ *
+ * Each signed field is its name and its value, both followed by a newline, in
+ * the alphabetical order of the names. The names are sorted here rather than
+ * taken in the order they were passed in: an object keeps the order its keys
+ * were written in, so a caller writing the same fields in another order would
+ * otherwise produce a string no verifier could rebuild.
+ *
+ * A field with no value is left out rather than signed as an empty string,
+ * which is what makes a message published without a subject verify.
+ *
+ * The message attributes are not signed, here or on real AWS, so changing one
+ * in flight leaves the signature valid.
+ */
+export declare function simSnsCanonicalMessage(values: SimSnsSignedValues): string;
+//# sourceMappingURL=sim-sns-canonical-message.d.ts.map

package/dist/service/sns/delivery/sim-sns-canonical-message.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-canonical-message.d.ts","sourceRoot":"","sources":["../../../../src/service/sns/delivery/sim-sns-canonical-message.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,kBAAkB,GAAG,MAAM,CAMzE"}

package/dist/service/sns/delivery/sim-sns-canonical-message.js

@@ -0,0 +1,24 @@
+/**
+ * The string real SNS signs, which is what a verifier rebuilds to check the
+ * signature.
+ *
+ * Each signed field is its name and its value, both followed by a newline, in
+ * the alphabetical order of the names. The names are sorted here rather than
+ * taken in the order they were passed in: an object keeps the order its keys
+ * were written in, so a caller writing the same fields in another order would
+ * otherwise produce a string no verifier could rebuild.
+ *
+ * A field with no value is left out rather than signed as an empty string,
+ * which is what makes a message published without a subject verify.
+ *
+ * The message attributes are not signed, here or on real AWS, so changing one
+ * in flight leaves the signature valid.
+ */
+export function simSnsCanonicalMessage(values) {
+    return Object.entries(values)
+        .filter(([, value]) => value !== undefined)
+        .toSorted(([left], [right]) => left.localeCompare(right))
+        .map(([name, value]) => `${name}\n${String(value)}\n`)
+        .join("");
+}
+//# sourceMappingURL=sim-sns-canonical-message.js.map

package/dist/service/sns/delivery/sim-sns-canonical-message.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-canonical-message.js","sourceRoot":"","sources":["../../../../src/service/sns/delivery/sim-sns-canonical-message.ts"],"names":[],"mappings":"AAeA;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAA0B;IAC/D,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;SAC1B,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC;SAC1C,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;SACxD,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;SACrD,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC"}

package/dist/service/sns/delivery/sim-sns-delivery-failures.d.ts

@@ -0,0 +1,60 @@
+/**
+ * What a delivery that failed was trying to do.
+ */
+export interface SimSnsDeliveryFailureProperties {
+    readonly topicArn: string;
+    readonly subscriptionArn: string;
+    readonly endpointArn: string;
+    readonly messageId: string;
+    readonly error: unknown;
+}
+/**
+ * One message an endpoint did not take.
+ */
+export declare class SimSnsDeliveryFailure {
+    readonly topicArn: string;
+    readonly subscriptionArn: string;
+    readonly endpointArn: string;
+    readonly messageId: string;
+    readonly error: unknown;
+    constructor(properties: SimSnsDeliveryFailureProperties);
+    /**
+     * Whether the endpoint refused the message rather than failing on it.
+     */
+    get wasRefused(): boolean;
+    /**
+     * What went wrong, in one line.
+     */
+    get reason(): string;
+}
+/**
+ * What became of the messages a simulated SNS scope could not deliver.
+ *
+ * Real SNS tells the publisher nothing about a failed delivery: the publish is
+ * answered with a message id before anything is delivered, and a delivery that
+ * fails after that is the subscription's problem. Neither does this. Swallowing
+ * the failure entirely would leave a queue mysteriously empty, so every failure
+ * is kept for inspection and anything other than a refusal is warned about
+ * once.
+ */
+export declare class SimSnsDeliveryFailures {
+    private readonly failures;
+    private readonly warned;
+    /**
+     * Every message this scope could not deliver, oldest first.
+     */
+    get all(): readonly SimSnsDeliveryFailure[];
+    /**
+     * Record a failed delivery, from what the fan-out knows about it.
+     */
+    record(properties: SimSnsDeliveryFailureProperties): void;
+    /**
+     * Warn about an endpoint that failed, once per endpoint and cause.
+     *
+     * Warnings go to the console because that is where a test runner surfaces
+     * them next to the failing expectation they explain; the simulator has no
+     * logger of its own to route them through.
+     */
+    private warn;
+}
+//# sourceMappingURL=sim-sns-delivery-failures.d.ts.map

package/dist/service/sns/delivery/sim-sns-delivery-failures.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-delivery-failures.d.ts","sourceRoot":"","sources":["../../../../src/service/sns/delivery/sim-sns-delivery-failures.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB;AAED;;GAEG;AACH,qBAAa,qBAAqB;IAChC,SAAgB,QAAQ,EAAE,MAAM,CAAC;IACjC,SAAgB,eAAe,EAAE,MAAM,CAAC;IACxC,SAAgB,WAAW,EAAE,MAAM,CAAC;IACpC,SAAgB,SAAS,EAAE,MAAM,CAAC;IAClC,SAAgB,KAAK,EAAE,OAAO,CAAC;IAE/B,YAAY,UAAU,EAAE,+BAA+B,EAMtD;IAED;;OAEG;IACH,IAAI,UAAU,IAAI,OAAO,CAExB;IAED;;OAEG;IACH,IAAI,MAAM,IAAI,MAAM,CAInB;CACF;AAED;;;;;;;;;GASG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA+B;IACxD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;IAE5C;;OAEG;IACH,IAAI,GAAG,IAAI,SAAS,qBAAqB,EAAE,CAE1C;IAED;;OAEG;IACH,MAAM,CAAC,UAAU,EAAE,+BAA+B,GAAG,IAAI,CAaxD;IAED;;;;;;OAMG;IACH,OAAO,CAAC,IAAI;CAeb"}

package/dist/service/sns/delivery/sim-sns-delivery-failures.js

@@ -0,0 +1,84 @@
+import { SimSnsDeliveryNotPermitted } from "../error/sim-sns-delivery.error.js";
+/**
+ * One message an endpoint did not take.
+ */
+export class SimSnsDeliveryFailure {
+    topicArn;
+    subscriptionArn;
+    endpointArn;
+    messageId;
+    error;
+    constructor(properties) {
+        this.topicArn = properties.topicArn;
+        this.subscriptionArn = properties.subscriptionArn;
+        this.endpointArn = properties.endpointArn;
+        this.messageId = properties.messageId;
+        this.error = properties.error;
+    }
+    /**
+     * Whether the endpoint refused the message rather than failing on it.
+     */
+    get wasRefused() {
+        return this.error instanceof SimSnsDeliveryNotPermitted;
+    }
+    /**
+     * What went wrong, in one line.
+     */
+    get reason() {
+        return this.error instanceof Error
+            ? this.error.message
+            : String(this.error);
+    }
+}
+/**
+ * What became of the messages a simulated SNS scope could not deliver.
+ *
+ * Real SNS tells the publisher nothing about a failed delivery: the publish is
+ * answered with a message id before anything is delivered, and a delivery that
+ * fails after that is the subscription's problem. Neither does this. Swallowing
+ * the failure entirely would leave a queue mysteriously empty, so every failure
+ * is kept for inspection and anything other than a refusal is warned about
+ * once.
+ */
+export class SimSnsDeliveryFailures {
+    failures = [];
+    warned = new Set();
+    /**
+     * Every message this scope could not deliver, oldest first.
+     */
+    get all() {
+        return this.failures;
+    }
+    /**
+     * Record a failed delivery, from what the fan-out knows about it.
+     */
+    record(properties) {
+        const failure = new SimSnsDeliveryFailure(properties);
+        this.failures.push(failure);
+        if (failure.wasRefused) {
+            // A refusal is a modelled outcome rather than a fault: the queue policy
+            // says no, which is what a test taking a permission away is checking
+            // for. It is recorded, not warned about.
+            return;
+        }
+        this.warn(failure);
+    }
+    /**
+     * Warn about an endpoint that failed, once per endpoint and cause.
+     *
+     * Warnings go to the console because that is where a test runner surfaces
+     * them next to the failing expectation they explain; the simulator has no
+     * logger of its own to route them through.
+     */
+    warn(failure) {
+        const key = `${failure.endpointArn}:${failure.reason}`;
+        if (this.warned.has(key)) {
+            return;
+        }
+        this.warned.add(key);
+        // eslint-disable-next-line no-console
+        console.warn(`Simulated SNS topic ${failure.topicArn} could not deliver to ` +
+            `${failure.endpointArn}: ${failure.reason}`);
+    }
+}
+//# sourceMappingURL=sim-sns-delivery-failures.js.map

package/dist/service/sns/delivery/sim-sns-delivery-failures.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-delivery-failures.js","sourceRoot":"","sources":["../../../../src/service/sns/delivery/sim-sns-delivery-failures.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAahF;;GAEG;AACH,MAAM,OAAO,qBAAqB;IAChB,QAAQ,CAAS;IACjB,eAAe,CAAS;IACxB,WAAW,CAAS;IACpB,SAAS,CAAS;IAClB,KAAK,CAAU;IAE/B,YAAY,UAA2C;QACrD,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,eAAe,GAAG,UAAU,CAAC,eAAe,CAAC;QAClD,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,KAAK,YAAY,0BAA0B,CAAC;IAC1D,CAAC;IAED;;OAEG;IACH,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,KAAK,YAAY,KAAK;YAChC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO;YACpB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;CACF;AAED;;;;;;;;;GASG;AACH,MAAM,OAAO,sBAAsB;IAChB,QAAQ,GAA4B,EAAE,CAAC;IACvC,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IAE5C;;OAEG;IACH,IAAI,GAAG;QACL,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,UAA2C;QAChD,MAAM,OAAO,GAAG,IAAI,qBAAqB,CAAC,UAAU,CAAC,CAAC;QAEtD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAE5B,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YACvB,wEAAwE;YACxE,qEAAqE;YACrE,yCAAyC;YACzC,OAAO;QACT,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrB,CAAC;IAED;;;;;;OAMG;IACK,IAAI,CAAC,OAA8B;QACzC,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QAEvD,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAErB,sCAAsC;QACtC,OAAO,CAAC,IAAI,CACV,uBAAuB,OAAO,CAAC,QAAQ,wBAAwB;YAC7D,GAAG,OAAO,CAAC,WAAW,KAAK,OAAO,CAAC,MAAM,EAAE,CAC9C,CAAC;IACJ,CAAC;CACF"}

package/dist/service/sns/delivery/sim-sns-delivery-request.d.ts

@@ -0,0 +1,28 @@
+import type { SimAwsAccountRegionScope } from "../../aws/sim-aws-account-region-scope.js";
+import type { SimSnsPublishedMessage } from "../message/sim-sns-published-message.js";
+import type { SimSnsMessageSigner } from "../signature/sim-sns-message-signer.js";
+import type { SimSnsSubscription } from "../subscription/sim-sns-subscription.js";
+import type { SimSnsDeliveryRequest } from "./sim-sns-delivery.js";
+interface SimSnsDeliveryRequestsProperties {
+    readonly signer: SimSnsMessageSigner;
+    readonly accountRegionScope: SimAwsAccountRegionScope;
+}
+/**
+ * Builds what each subscription of one simulated SNS scope is sent.
+ *
+ * The notification is built here rather than at the endpoint, because it is
+ * signed with the scope's own key: the signature belongs to the message rather
+ * than to the destination. Which document the endpoint makes of it is the
+ * endpoint's own business.
+ */
+export declare class SimSnsDeliveryRequests {
+    private readonly signer;
+    private readonly scope;
+    constructor(properties: SimSnsDeliveryRequestsProperties);
+    /**
+     * What one subscription is being sent for one published message.
+     */
+    for(subscription: SimSnsSubscription, message: SimSnsPublishedMessage): SimSnsDeliveryRequest;
+}
+export {};
+//# sourceMappingURL=sim-sns-delivery-request.d.ts.map

package/dist/service/sns/delivery/sim-sns-delivery-request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-delivery-request.d.ts","sourceRoot":"","sources":["../../../../src/service/sns/delivery/sim-sns-delivery-request.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAC1F,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,yCAAyC,CAAC;AACtF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAClF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAClF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAGnE,UAAU,gCAAgC;IACxC,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;CACvD;AAED;;;;;;;GAOG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAsB;IAC7C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA2B;IAEjD,YAAY,UAAU,EAAE,gCAAgC,EAGvD;IAED;;OAEG;IACH,GAAG,CACD,YAAY,EAAE,kBAAkB,EAChC,OAAO,EAAE,sBAAsB,GAC9B,qBAAqB,CAYvB;CACF"}

package/dist/service/sns/delivery/sim-sns-delivery-request.js

@@ -0,0 +1,34 @@
+import { SimSnsNotification } from "./sim-sns-notification.js";
+/**
+ * Builds what each subscription of one simulated SNS scope is sent.
+ *
+ * The notification is built here rather than at the endpoint, because it is
+ * signed with the scope's own key: the signature belongs to the message rather
+ * than to the destination. Which document the endpoint makes of it is the
+ * endpoint's own business.
+ */
+export class SimSnsDeliveryRequests {
+    signer;
+    scope;
+    constructor(properties) {
+        this.signer = properties.signer;
+        this.scope = properties.accountRegionScope;
+    }
+    /**
+     * What one subscription is being sent for one published message.
+     */
+    for(subscription, message) {
+        return {
+            subscription,
+            message,
+            topicOwnerAccountId: this.scope.accountId,
+            notification: new SimSnsNotification({
+                message,
+                subscription,
+                regionName: this.scope.regionName,
+                signer: this.signer,
+            }),
+        };
+    }
+}
+//# sourceMappingURL=sim-sns-delivery-request.js.map

package/dist/service/sns/delivery/sim-sns-delivery-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-delivery-request.js","sourceRoot":"","sources":["../../../../src/service/sns/delivery/sim-sns-delivery-request.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAO/D;;;;;;;GAOG;AACH,MAAM,OAAO,sBAAsB;IAChB,MAAM,CAAsB;IAC5B,KAAK,CAA2B;IAEjD,YAAY,UAA4C;QACtD,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,kBAAkB,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,GAAG,CACD,YAAgC,EAChC,OAA+B;QAE/B,OAAO;YACL,YAAY;YACZ,OAAO;YACP,mBAAmB,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS;YACzC,YAAY,EAAE,IAAI,kBAAkB,CAAC;gBACnC,OAAO;gBACP,YAAY;gBACZ,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU;gBACjC,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC;SACH,CAAC;IACJ,CAAC;CACF"}

package/dist/service/sns/delivery/sim-sns-delivery.d.ts

@@ -0,0 +1,55 @@
+import type { SimSnsPublishedMessage } from "../message/sim-sns-published-message.js";
+import type { SimSnsSubscription } from "../subscription/sim-sns-subscription.js";
+import type { SimSnsNotification } from "./sim-sns-notification.js";
+/**
+ * The service principal simulated SNS reaches another service as.
+ *
+ * This is the principal a destination's resource policy has to admit, which is
+ * why a queue subscribed to a topic needs `sns.amazonaws.com` in its policy and
+ * a function needs it in an `AddPermission` grant.
+ */
+export declare const simSnsServicePrincipal = "sns.amazonaws.com";
+/**
+ * One message on its way from a topic to a subscription's endpoint.
+ *
+ * The notification comes along signed, because the signature is over the
+ * message rather than over the destination. What each protocol makes of it is
+ * the endpoint's own business: a queue receives it as an envelope, and a Lambda
+ * function receives it inside an event record.
+ */
+export interface SimSnsDeliveryRequest {
+    readonly subscription: SimSnsSubscription;
+    readonly message: SimSnsPublishedMessage;
+    readonly topicOwnerAccountId: string;
+    readonly notification: SimSnsNotification;
+}
+/**
+ * Somewhere a simulated topic can deliver a published message.
+ *
+ * There is one implementation per protocol, because what a destination is asked
+ * and what it is handed differ by protocol: a second protocol adds a second
+ * implementation rather than a branch in an existing one.
+ * `SimSnsProtocolDeliveryEndpoints` is what picks between them.
+ */
+export interface SimSnsDeliveryEndpoints {
+    /**
+     * Deliver one message, refusing if the endpoint does not admit SNS.
+     */
+    deliver(request: SimSnsDeliveryRequest): Promise<void>;
+}
+/**
+ * What a destination's policy is asked about, as IAM condition values.
+ *
+ * A destination is admitting one topic rather than SNS at large, so every
+ * endpoint supplies these two: the topic as `aws:SourceArn`, and the Account
+ * owning it as `aws:SourceAccount`.
+ */
+export interface SimSnsDeliverySource {
+    readonly sourceArn: string;
+    readonly sourceAccount: string;
+}
+/**
+ * Which topic a delivery is being made for, and whose it is.
+ */
+export declare function simSnsDeliverySource(request: SimSnsDeliveryRequest): SimSnsDeliverySource;
+//# sourceMappingURL=sim-sns-delivery.d.ts.map

package/dist/service/sns/delivery/sim-sns-delivery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-delivery.d.ts","sourceRoot":"","sources":["../../../../src/service/sns/delivery/sim-sns-delivery.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,yCAAyC,CAAC;AACtF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAClF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAEpE;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,sBAAsB,CAAC;AAE1D;;;;;;;GAOG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAC;IAC1C,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC;IACzC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAC;CAC3C;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,uBAAuB;IACtC;;OAEG;IACH,OAAO,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxD;AAED;;;;;;GAMG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,qBAAqB,GAC7B,oBAAoB,CAKtB"}

package/dist/service/sns/delivery/sim-sns-delivery.js

@@ -0,0 +1,18 @@
+/**
+ * The service principal simulated SNS reaches another service as.
+ *
+ * This is the principal a destination's resource policy has to admit, which is
+ * why a queue subscribed to a topic needs `sns.amazonaws.com` in its policy and
+ * a function needs it in an `AddPermission` grant.
+ */
+export const simSnsServicePrincipal = "sns.amazonaws.com";
+/**
+ * Which topic a delivery is being made for, and whose it is.
+ */
+export function simSnsDeliverySource(request) {
+    return {
+        sourceArn: request.subscription.topicArn,
+        sourceAccount: request.topicOwnerAccountId,
+    };
+}
+//# sourceMappingURL=sim-sns-delivery.js.map

package/dist/service/sns/delivery/sim-sns-delivery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-delivery.js","sourceRoot":"","sources":["../../../../src/service/sns/delivery/sim-sns-delivery.ts"],"names":[],"mappings":"AAIA;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,mBAAmB,CAAC;AA4C1D;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAA8B;IAE9B,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,YAAY,CAAC,QAAQ;QACxC,aAAa,EAAE,OAAO,CAAC,mBAAmB;KAC3C,CAAC;AACJ,CAAC"}

package/dist/service/sns/delivery/sim-sns-envelope.d.ts

@@ -0,0 +1,26 @@
+import type { SimSnsNotification } from "./sim-sns-notification.js";
+interface SimSnsEnvelopeProperties {
+    readonly notification: SimSnsNotification;
+}
+/**
+ * The document a subscription receives when it is not asking for raw delivery.
+ *
+ * Real SNS wraps the published message in this, which is why a consumer written
+ * for it reads `JSON.parse(body).Message` rather than `body`. Everything real
+ * SNS puts in it is here, including a signature a verifier can actually check.
+ *
+ * The two URLs are spelled in upper case, which is how real SNS spells them in
+ * an envelope. A Lambda event spells the same two fields `SigningCertUrl` and
+ * `UnsubscribeUrl`.
+ */
+export declare class SimSnsEnvelope {
+    private readonly notification;
+    constructor(properties: SimSnsEnvelopeProperties);
+    /**
+     * The envelope as the JSON body a queue receives.
+     */
+    get body(): string;
+    private document;
+}
+export {};
+//# sourceMappingURL=sim-sns-envelope.d.ts.map

package/dist/service/sns/delivery/sim-sns-envelope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-envelope.d.ts","sourceRoot":"","sources":["../../../../src/service/sns/delivery/sim-sns-envelope.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAEpE,UAAU,wBAAwB;IAChC,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAC;CAC3C;AAED;;;;;;;;;;GAUG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAqB;IAElD,YAAY,UAAU,EAAE,wBAAwB,EAE/C;IAED;;OAEG;IACH,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,OAAO,CAAC,QAAQ;CAiBjB"}