@kensio/yulin 1.9.0 → 1.10.0

package/dist/service/sns/filter/sim-sns-attribute-subject.js

@@ -0,0 +1,85 @@
+import { SimSnsFilterValue } from "./sim-sns-filter-value.js";
+import { simSnsJsonFilterValues } from "./sim-sns-json-filter-values.js";
+/**
+ * Read the members of a `String.Array` attribute.
+ *
+ * The text is a JSON array, and a policy matches any member of it. Text that is
+ * not one is matched as the text it is, rather than the publish being failed
+ * here: a message attribute's value is not validated as JSON when it is
+ * published, so a filter policy is not the place to start.
+ */
+function arrayValues(text) {
+    try {
+        const parsed = JSON.parse(text);
+        if (Array.isArray(parsed)) {
+            return simSnsJsonFilterValues(parsed);
+        }
+    }
+    catch {
+        // Not JSON, so there are no members to read.
+    }
+    return [SimSnsFilterValue.ofText(text)];
+}
+/**
+ * Read one message attribute as the values a policy can match against it.
+ *
+ * A binary attribute has none. Real SNS filters on the text of an attribute,
+ * and bytes are not text, so a policy naming a binary attribute matches nothing
+ * rather than matching its base64.
+ */
+function valuesOf(attribute) {
+    if (attribute.isBinary) {
+        return [];
+    }
+    const text = attribute.value.toString("utf8");
+    if (attribute.isNumber) {
+        return [SimSnsFilterValue.ofNumericText(text)];
+    }
+    if (attribute.isStringArray) {
+        return arrayValues(text);
+    }
+    return [SimSnsFilterValue.ofText(text)];
+}
+/**
+ * The message attributes of a publish, as a filter policy sees them.
+ *
+ * This is the default scope, and the flat one: an attribute has a name and no
+ * structure under it, so a policy nesting keys under this scope is refused when
+ * it is set.
+ */
+export class SimSnsAttributeSubject {
+    byName;
+    constructor(byName) {
+        this.byName = byName;
+    }
+    /**
+     * Read the message attributes of one publish.
+     */
+    static of(attributes) {
+        return new this(new Map(attributes.all.map((attribute) => [
+            attribute.name,
+            valuesOf(attribute),
+        ])));
+    }
+    /**
+     * Whether the publish carried no message attributes at all.
+     *
+     * An attribute carrying bytes counts as one, even though a filter policy can
+     * match nothing against it: real SNS asks whether the message has attributes
+     * rather than whether it has ones worth matching.
+     */
+    get isEmpty() {
+        return this.byName.size === 0;
+    }
+    /**
+     * The values the attribute of a name holds, if there is one.
+     */
+    valuesAt(path) {
+        const [name] = path;
+        if (path.length !== 1 || name === undefined) {
+            return [];
+        }
+        return this.byName.get(name) ?? [];
+    }
+}
+//# sourceMappingURL=sim-sns-attribute-subject.js.map

package/dist/service/sns/filter/sim-sns-attribute-subject.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-attribute-subject.js","sourceRoot":"","sources":["../../../../src/service/sns/filter/sim-sns-attribute-subject.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AAEzE;;;;;;;GAOG;AACH,SAAS,WAAW,CAAC,IAAY;IAC/B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAc,CAAC;QAE7C,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,OAAO,sBAAsB,CAAC,MAAM,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,6CAA6C;IAC/C,CAAC;IAED,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;;GAMG;AACH,SAAS,QAAQ,CACf,SAAiC;IAEjC,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;QACvB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE9C,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;QACvB,OAAO,CAAC,iBAAiB,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;IACjD,CAAC;IAED,IAAI,SAAS,CAAC,aAAa,EAAE,CAAC;QAC5B,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,OAAO,sBAAsB;IAChB,MAAM,CAAoD;IAE3E,YACE,MAAyD;QAEzD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,EAAE,CAAC,UAAmC;QAC3C,OAAO,IAAI,IAAI,CACb,IAAI,GAAG,CACL,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC;YAChC,SAAS,CAAC,IAAI;YACd,QAAQ,CAAC,SAAS,CAAC;SACpB,CAAC,CACH,CACF,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,IAAuB;QAC9B,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QAEpB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5C,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACrC,CAAC;CACF"}

package/dist/service/sns/filter/sim-sns-body-subject.d.ts

@@ -0,0 +1,30 @@
+import type { SimSnsFilterSubject } from "./sim-sns-filter-subject.js";
+import type { SimSnsFilterValue } from "./sim-sns-filter-value.js";
+/**
+ * The parsed message body, as a filter policy of the `MessageBody` scope sees
+ * it.
+ *
+ * This is the scope that nests: a policy names a nested key by nesting itself,
+ * and the path is what it nested through.
+ */
+export declare class SimSnsBodySubject implements SimSnsFilterSubject {
+    private readonly document;
+    private constructor();
+    /**
+     * Read the body of one published message.
+     */
+    static of(body: string): SimSnsBodySubject;
+    /**
+     * Whether the body holds no keys at all.
+     *
+     * A body that is not a JSON object holds none, which is what keeps
+     * `{"exists": false}` from matching a message that was never JSON in the
+     * first place.
+     */
+    get isEmpty(): boolean;
+    /**
+     * The values held at a key path, after going through what nests it.
+     */
+    valuesAt(path: readonly string[]): readonly SimSnsFilterValue[];
+}
+//# sourceMappingURL=sim-sns-body-subject.d.ts.map

package/dist/service/sns/filter/sim-sns-body-subject.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-body-subject.d.ts","sourceRoot":"","sources":["../../../../src/service/sns/filter/sim-sns-body-subject.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AA0BnE;;;;;;GAMG;AACH,qBAAa,iBAAkB,YAAW,mBAAmB;IAC3D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAyB;IAElD,OAAO,eAEN;IAED;;OAEG;IACH,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,CAEzC;IAED;;;;;;OAMG;IACH,IAAI,OAAO,IAAI,OAAO,CAIrB;IAED;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,iBAAiB,EAAE,CAa9D;CACF"}

package/dist/service/sns/filter/sim-sns-body-subject.js

@@ -0,0 +1,67 @@
+import { isFilterPolicyObject } from "./sim-sns-filter-refusals.js";
+import { simSnsJsonFilterValues } from "./sim-sns-json-filter-values.js";
+/**
+ * Read a published message body as the JSON document a policy matches against.
+ *
+ * A body that is not JSON, or that is JSON without being an object, holds no
+ * keys at all. It is not an error: `MessageBody` filtering is set on the
+ * subscription and the body comes from whoever published, so a publisher
+ * sending text to a topic one subscription filters on this way would otherwise
+ * fail a delivery it knows nothing about. The message simply does not match.
+ */
+function documentIn(body) {
+    try {
+        const parsed = JSON.parse(body);
+        if (isFilterPolicyObject(parsed)) {
+            return parsed;
+        }
+    }
+    catch {
+        // Not JSON, so there is nothing to match against.
+    }
+    return undefined;
+}
+/**
+ * The parsed message body, as a filter policy of the `MessageBody` scope sees
+ * it.
+ *
+ * This is the scope that nests: a policy names a nested key by nesting itself,
+ * and the path is what it nested through.
+ */
+export class SimSnsBodySubject {
+    document;
+    constructor(document) {
+        this.document = document;
+    }
+    /**
+     * Read the body of one published message.
+     */
+    static of(body) {
+        return new this(documentIn(body));
+    }
+    /**
+     * Whether the body holds no keys at all.
+     *
+     * A body that is not a JSON object holds none, which is what keeps
+     * `{"exists": false}` from matching a message that was never JSON in the
+     * first place.
+     */
+    get isEmpty() {
+        return (this.document === undefined || Object.keys(this.document).length === 0);
+    }
+    /**
+     * The values held at a key path, after going through what nests it.
+     */
+    valuesAt(path) {
+        let held = this.document ?? null;
+        for (const key of path) {
+            if (!isFilterPolicyObject(held)) {
+                return [];
+            }
+            // eslint-disable-next-line security/detect-object-injection -- a key the filter policy named, read out of parsed JSON.
+            held = held[key] ?? null;
+        }
+        return simSnsJsonFilterValues(held);
+    }
+}
+//# sourceMappingURL=sim-sns-body-subject.js.map

package/dist/service/sns/filter/sim-sns-body-subject.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-body-subject.js","sourceRoot":"","sources":["../../../../src/service/sns/filter/sim-sns-body-subject.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAGpE,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AAEzE;;;;;;;;GAQG;AACH,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAc,CAAC;QAE7C,IAAI,oBAAoB,CAAC,MAAM,CAAC,EAAE,CAAC;YACjC,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,kDAAkD;IACpD,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,OAAO,iBAAiB;IACX,QAAQ,CAAyB;IAElD,YAAoB,QAAgC;QAClD,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,EAAE,CAAC,IAAY;QACpB,OAAO,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IACpC,CAAC;IAED;;;;;;OAMG;IACH,IAAI,OAAO;QACT,OAAO,CACL,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,CACvE,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,IAAuB;QAC9B,IAAI,IAAI,GAAc,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC;QAE5C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChC,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,uHAAuH;YACvH,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;QAC3B,CAAC;QAED,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;CACF"}

package/dist/service/sns/filter/sim-sns-filter-any-rule.d.ts

@@ -0,0 +1,21 @@
+import type { SimSnsFilterRule } from "./sim-sns-filter-rule.js";
+import type { SimSnsFilterSubject } from "./sim-sns-filter-subject.js";
+/**
+ * An `$or` across separate keys, which matches when any of its sides does.
+ *
+ * Each side is a policy of its own, so `{"$or": [{"type": ["order"]}, {"kind":
+ * ["refund"]}]}` matches a message carrying either key. Everything else in a
+ * policy is an and, which is why this needs a key of its own to express.
+ *
+ * Whether an `$or` is one at all is decided before this is built, in
+ * `sim-sns-filter-or-eligibility.ts`.
+ */
+export declare class SimSnsFilterAnyRule implements SimSnsFilterRule {
+    private readonly alternatives;
+    constructor(alternatives: readonly SimSnsFilterRule[]);
+    /**
+     * Whether the message satisfies any one of the alternatives.
+     */
+    matches(subject: SimSnsFilterSubject): boolean;
+}
+//# sourceMappingURL=sim-sns-filter-any-rule.d.ts.map

package/dist/service/sns/filter/sim-sns-filter-any-rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-filter-any-rule.d.ts","sourceRoot":"","sources":["../../../../src/service/sns/filter/sim-sns-filter-any-rule.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAEvE;;;;;;;;;GASG;AACH,qBAAa,mBAAoB,YAAW,gBAAgB;IAC1D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA8B;IAE3D,YAAY,YAAY,EAAE,SAAS,gBAAgB,EAAE,EAEpD;IAED;;OAEG;IACH,OAAO,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAI7C;CACF"}

package/dist/service/sns/filter/sim-sns-filter-any-rule.js

@@ -0,0 +1,23 @@
+/**
+ * An `$or` across separate keys, which matches when any of its sides does.
+ *
+ * Each side is a policy of its own, so `{"$or": [{"type": ["order"]}, {"kind":
+ * ["refund"]}]}` matches a message carrying either key. Everything else in a
+ * policy is an and, which is why this needs a key of its own to express.
+ *
+ * Whether an `$or` is one at all is decided before this is built, in
+ * `sim-sns-filter-or-eligibility.ts`.
+ */
+export class SimSnsFilterAnyRule {
+    alternatives;
+    constructor(alternatives) {
+        this.alternatives = alternatives;
+    }
+    /**
+     * Whether the message satisfies any one of the alternatives.
+     */
+    matches(subject) {
+        return this.alternatives.some((alternative) => alternative.matches(subject));
+    }
+}
+//# sourceMappingURL=sim-sns-filter-any-rule.js.map

package/dist/service/sns/filter/sim-sns-filter-any-rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-filter-any-rule.js","sourceRoot":"","sources":["../../../../src/service/sns/filter/sim-sns-filter-any-rule.ts"],"names":[],"mappings":"AAGA;;;;;;;;;GASG;AACH,MAAM,OAAO,mBAAmB;IACb,YAAY,CAA8B;IAE3D,YAAY,YAAyC;QACnD,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,OAA4B;QAClC,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAC5C,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAC7B,CAAC;IACJ,CAAC;CACF"}

package/dist/service/sns/filter/sim-sns-filter-key-rule.d.ts

@@ -0,0 +1,28 @@
+import type { JSONValue } from "../../../util/type-guard/json.js";
+import type { SimSnsFilterRule } from "./sim-sns-filter-rule.js";
+import type { SimSnsFilterSubject } from "./sim-sns-filter-subject.js";
+/**
+ * One key of a filter policy and the match conditions it holds.
+ *
+ * The list is read as an OR, which is what makes `{"type": ["order",
+ * "refund"]}` a rule about two kinds of message rather than a message that is
+ * somehow both.
+ */
+export declare class SimSnsFilterKeyRule implements SimSnsFilterRule {
+    private readonly path;
+    private readonly conditions;
+    private constructor();
+    /**
+     * Read the list of match conditions a key holds.
+     *
+     * An empty list is refused rather than taken as a rule nothing satisfies. A
+     * policy that matched no message at all would be indistinguishable from one
+     * whose messages never turned up.
+     */
+    static of(path: readonly string[], written: readonly JSONValue[]): SimSnsFilterKeyRule;
+    /**
+     * Whether any of this key's match conditions holds for the message.
+     */
+    matches(subject: SimSnsFilterSubject): boolean;
+}
+//# sourceMappingURL=sim-sns-filter-key-rule.d.ts.map

package/dist/service/sns/filter/sim-sns-filter-key-rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-filter-key-rule.d.ts","sourceRoot":"","sources":["../../../../src/service/sns/filter/sim-sns-filter-key-rule.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAIlE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAEvE;;;;;;GAMG;AACH,qBAAa,mBAAoB,YAAW,gBAAgB;IAC1D,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAoB;IACzC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+B;IAE1D,OAAO,eAMN;IAED;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,CACP,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,OAAO,EAAE,SAAS,SAAS,EAAE,GAC5B,mBAAmB,CAWrB;IAED;;OAEG;IACH,OAAO,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAmB7C;CACF"}

package/dist/service/sns/filter/sim-sns-filter-key-rule.js

@@ -0,0 +1,48 @@
+import { simSnsFilterMatchOf } from "./sim-sns-filter-matches.js";
+import { simSnsFilterPolicyRefusal } from "./sim-sns-filter-refusals.js";
+/**
+ * One key of a filter policy and the match conditions it holds.
+ *
+ * The list is read as an OR, which is what makes `{"type": ["order",
+ * "refund"]}` a rule about two kinds of message rather than a message that is
+ * somehow both.
+ */
+export class SimSnsFilterKeyRule {
+    path;
+    conditions;
+    constructor(path, conditions) {
+        this.path = path;
+        this.conditions = conditions;
+    }
+    /**
+     * Read the list of match conditions a key holds.
+     *
+     * An empty list is refused rather than taken as a rule nothing satisfies. A
+     * policy that matched no message at all would be indistinguishable from one
+     * whose messages never turned up.
+     */
+    static of(path, written) {
+        if (written.length === 0) {
+            throw simSnsFilterPolicyRefusal(`${path.join(".")} holds no match conditions, so nothing could match it`);
+        }
+        return new this(path, written.map((condition) => simSnsFilterMatchOf(condition)));
+    }
+    /**
+     * Whether any of this key's match conditions holds for the message.
+     */
+    matches(subject) {
+        const values = subject.valuesAt(this.path);
+        // A key the message does not carry is only matched by the operator that
+        // asks for it to be missing, and only when the message carries something
+        // else: real SNS states that `{"exists": false}` needs at least one
+        // attribute present, so a message carrying none matches no policy at all.
+        // A key holding several values, as a String.Array attribute or a JSON array
+        // does, is matched by any of them.
+        if (values.length === 0) {
+            return (!subject.isEmpty &&
+                this.conditions.some((condition) => condition.matchesAbsence));
+        }
+        return this.conditions.some((condition) => values.some((value) => condition.matchesValue(value)));
+    }
+}
+//# sourceMappingURL=sim-sns-filter-key-rule.js.map

package/dist/service/sns/filter/sim-sns-filter-key-rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-filter-key-rule.js","sourceRoot":"","sources":["../../../../src/service/sns/filter/sim-sns-filter-key-rule.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AAIzE;;;;;;GAMG;AACH,MAAM,OAAO,mBAAmB;IACb,IAAI,CAAoB;IACxB,UAAU,CAA+B;IAE1D,YACE,IAAuB,EACvB,UAAwC;QAExC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,CACP,IAAuB,EACvB,OAA6B;QAE7B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,yBAAyB,CAC7B,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,uDAAuD,CACzE,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,IAAI,CACb,IAAI,EACJ,OAAO,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAC3D,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,OAA4B;QAClC,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE3C,wEAAwE;QACxE,yEAAyE;QACzE,oEAAoE;QACpE,0EAA0E;QAC1E,4EAA4E;QAC5E,mCAAmC;QACnC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,CACL,CAAC,OAAO,CAAC,OAAO;gBAChB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,cAAc,CAAC,CAC9D,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CACxC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CACtD,CAAC;IACJ,CAAC;CACF"}

package/dist/service/sns/filter/sim-sns-filter-matches.d.ts

@@ -0,0 +1,9 @@
+import type { JSONValue } from "../../../util/type-guard/json.js";
+import type { SimSnsFilterMatch } from "./match/sim-sns-filter-match.js";
+/**
+ * Read one entry of the list a policy key holds.
+ *
+ * An object is an operator, and anything else is a value to match exactly.
+ */
+export declare function simSnsFilterMatchOf(written: JSONValue): SimSnsFilterMatch;
+//# sourceMappingURL=sim-sns-filter-matches.d.ts.map

package/dist/service/sns/filter/sim-sns-filter-matches.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-filter-matches.d.ts","sourceRoot":"","sources":["../../../../src/service/sns/filter/sim-sns-filter-matches.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAGlE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AAgCzE;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,SAAS,GAAG,iBAAiB,CAazE"}

package/dist/service/sns/filter/sim-sns-filter-matches.js

@@ -0,0 +1,40 @@
+import { SimSnsUnsimulatedInputException } from "../error/sim-sns.error.js";
+import { SimSnsExactMatch } from "./match/sim-sns-exact-match.js";
+import { simSnsFilterOperators } from "./sim-sns-filter-operators.js";
+import { filterPolicyOperator, isFilterPolicyObject, simSnsFilterPolicyRefusal, } from "./sim-sns-filter-refusals.js";
+/**
+ * The one operator real SNS has that this simulation does not.
+ *
+ * IP range matching is refused when the policy is set rather than accepted and
+ * then matching nothing, because a subscription that filtered everything out
+ * would look like a policy nothing happened to match.
+ */
+const simSnsCidrOperator = "cidr";
+/**
+ * Refuse an operator this simulation cannot apply, naming it.
+ */
+function unknownOperator(name) {
+    if (name === simSnsCidrOperator) {
+        return new SimSnsUnsimulatedInputException(`The filter policy operator ${simSnsCidrOperator} is not simulated. IP ` +
+            `range matching is refused when the policy is set, because a policy ` +
+            `holding it would match nothing and look like filtering that worked.`);
+    }
+    return simSnsFilterPolicyRefusal(`${name} is not a match operator`);
+}
+/**
+ * Read one entry of the list a policy key holds.
+ *
+ * An object is an operator, and anything else is a value to match exactly.
+ */
+export function simSnsFilterMatchOf(written) {
+    if (!isFilterPolicyObject(written)) {
+        return SimSnsExactMatch.of(written);
+    }
+    const { name, operand } = filterPolicyOperator(written);
+    const operator = simSnsFilterOperators.get(name);
+    if (operator === undefined) {
+        throw unknownOperator(name);
+    }
+    return operator(operand);
+}
+//# sourceMappingURL=sim-sns-filter-matches.js.map

package/dist/service/sns/filter/sim-sns-filter-matches.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-filter-matches.js","sourceRoot":"","sources":["../../../../src/service/sns/filter/sim-sns-filter-matches.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,+BAA+B,EAAE,MAAM,2BAA2B,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAElE,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,yBAAyB,GAC1B,MAAM,8BAA8B,CAAC;AAEtC;;;;;;GAMG;AACH,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC;;GAEG;AACH,SAAS,eAAe,CAAC,IAAY;IACnC,IAAI,IAAI,KAAK,kBAAkB,EAAE,CAAC;QAChC,OAAO,IAAI,+BAA+B,CACxC,8BAA8B,kBAAkB,wBAAwB;YACtE,qEAAqE;YACrE,qEAAqE,CACxE,CAAC;IACJ,CAAC;IAED,OAAO,yBAAyB,CAAC,GAAG,IAAI,0BAA0B,CAAC,CAAC;AACtE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAkB;IACpD,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,OAAO,gBAAgB,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAEjD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC;AAC3B,CAAC"}

package/dist/service/sns/filter/sim-sns-filter-operators.d.ts

@@ -0,0 +1,22 @@
+import type { JSONValue } from "../../../util/type-guard/json.js";
+import type { SimSnsFilterMatch } from "./match/sim-sns-filter-match.js";
+/**
+ * How each operator reads the operand it was written with.
+ */
+export type SimSnsFilterOperatorReader = (operand: JSONValue) => SimSnsFilterMatch;
+/**
+ * Every operator a match condition can be written with.
+ *
+ * The one real SNS has that is missing here is `cidr`, which is refused by name
+ * rather than left out quietly.
+ */
+export declare const simSnsFilterOperators: ReadonlyMap<string, SimSnsFilterOperatorReader>;
+/**
+ * The names real SNS reserves, which a policy cannot use as a key.
+ *
+ * These are the operator names. An `$or` alternative naming one of them is not
+ * read as an alternative by real SNS, which is the rule that decides whether a
+ * policy is an or at all.
+ */
+export declare const simSnsFilterReservedNames: ReadonlySet<string>;
+//# sourceMappingURL=sim-sns-filter-operators.d.ts.map

package/dist/service/sns/filter/sim-sns-filter-operators.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-filter-operators.d.ts","sourceRoot":"","sources":["../../../../src/service/sns/filter/sim-sns-filter-operators.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAalE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AAczE;;GAEG;AACH,MAAM,MAAM,0BAA0B,GAAG,CACvC,OAAO,EAAE,SAAS,KACf,iBAAiB,CAAC;AAEvB;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,EAAE,WAAW,CAC7C,MAAM,EACN,0BAA0B,CA0B1B,CAAC;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB,EAAE,WAAW,CAAC,MAAM,CAGxD,CAAC"}

package/dist/service/sns/filter/sim-sns-filter-operators.js

@@ -0,0 +1,50 @@
+import { SimSnsAnythingButMatch, simSnsAnythingButOperator, } from "./match/sim-sns-anything-but-match.js";
+import { SimSnsEqualsIgnoreCaseMatch, simSnsEqualsIgnoreCaseOperator, } from "./match/sim-sns-equals-ignore-case-match.js";
+import { SimSnsExistsMatch, simSnsExistsOperator, } from "./match/sim-sns-exists-match.js";
+import { SimSnsNumericMatch, simSnsNumericOperator, } from "./match/sim-sns-numeric-match.js";
+import { SimSnsPrefixMatch, simSnsPrefixOperator, } from "./match/sim-sns-prefix-match.js";
+import { SimSnsSuffixMatch, simSnsSuffixOperator, } from "./match/sim-sns-suffix-match.js";
+/**
+ * Every operator a match condition can be written with.
+ *
+ * The one real SNS has that is missing here is `cidr`, which is refused by name
+ * rather than left out quietly.
+ */
+export const simSnsFilterOperators = new Map([
+    [
+        simSnsPrefixOperator,
+        (operand) => SimSnsPrefixMatch.of(operand),
+    ],
+    [
+        simSnsSuffixOperator,
+        (operand) => SimSnsSuffixMatch.of(operand),
+    ],
+    [
+        simSnsEqualsIgnoreCaseOperator,
+        (operand) => SimSnsEqualsIgnoreCaseMatch.of(operand),
+    ],
+    [
+        simSnsNumericOperator,
+        (operand) => SimSnsNumericMatch.of(operand),
+    ],
+    [
+        simSnsExistsOperator,
+        (operand) => SimSnsExistsMatch.of(operand),
+    ],
+    [
+        simSnsAnythingButOperator,
+        (operand) => SimSnsAnythingButMatch.of(operand),
+    ],
+]);
+/**
+ * The names real SNS reserves, which a policy cannot use as a key.
+ *
+ * These are the operator names. An `$or` alternative naming one of them is not
+ * read as an alternative by real SNS, which is the rule that decides whether a
+ * policy is an or at all.
+ */
+export const simSnsFilterReservedNames = new Set([
+    ...simSnsFilterOperators.keys(),
+    "cidr",
+]);
+//# sourceMappingURL=sim-sns-filter-operators.js.map

package/dist/service/sns/filter/sim-sns-filter-operators.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-filter-operators.js","sourceRoot":"","sources":["../../../../src/service/sns/filter/sim-sns-filter-operators.ts"],"names":[],"mappings":"AACA,OAAO,EACL,sBAAsB,EACtB,yBAAyB,GAC1B,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EACL,2BAA2B,EAC3B,8BAA8B,GAC/B,MAAM,6CAA6C,CAAC;AACrD,OAAO,EACL,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EACL,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,iCAAiC,CAAC;AASzC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAG9B,IAAI,GAAG,CAAqC;IAC9C;QACE,oBAAoB;QACpB,CAAC,OAAO,EAAqB,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC,OAAO,CAAC;KAC9D;IACD;QACE,oBAAoB;QACpB,CAAC,OAAO,EAAqB,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC,OAAO,CAAC;KAC9D;IACD;QACE,8BAA8B;QAC9B,CAAC,OAAO,EAAqB,EAAE,CAAC,2BAA2B,CAAC,EAAE,CAAC,OAAO,CAAC;KACxE;IACD;QACE,qBAAqB;QACrB,CAAC,OAAO,EAAqB,EAAE,CAAC,kBAAkB,CAAC,EAAE,CAAC,OAAO,CAAC;KAC/D;IACD;QACE,oBAAoB;QACpB,CAAC,OAAO,EAAqB,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC,OAAO,CAAC;KAC9D;IACD;QACE,yBAAyB;QACzB,CAAC,OAAO,EAAqB,EAAE,CAAC,sBAAsB,CAAC,EAAE,CAAC,OAAO,CAAC;KACnE;CACF,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAwB,IAAI,GAAG,CAAC;IACpE,GAAG,qBAAqB,CAAC,IAAI,EAAE;IAC/B,MAAM;CACP,CAAC,CAAC"}

package/dist/service/sns/filter/sim-sns-filter-or-eligibility.d.ts

@@ -0,0 +1,17 @@
+import type { JSONObject, JSONValue } from "../../../util/type-guard/json.js";
+/**
+ * The key real SNS reads as an OR across separate keys.
+ */
+export declare const simSnsOrKey = "$or";
+/**
+ * Read the alternatives of an `$or`, refusing what real SNS would not read as
+ * one.
+ *
+ * Real SNS recognises an `$or` only when it holds an array of at least two
+ * objects, none of which names a reserved keyword. Anything else is an ordinary
+ * attribute name there rather than an error, which makes a policy that looks
+ * like an or and is not one: it asks about an attribute called `$or`, so it
+ * matches nothing. Each of those is refused here when the policy is set.
+ */
+export declare function simSnsOrAlternatives(written: JSONValue): readonly JSONObject[];
+//# sourceMappingURL=sim-sns-filter-or-eligibility.d.ts.map

package/dist/service/sns/filter/sim-sns-filter-or-eligibility.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-filter-or-eligibility.d.ts","sourceRoot":"","sources":["../../../../src/service/sns/filter/sim-sns-filter-or-eligibility.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAQ9E;;GAEG;AACH,eAAO,MAAM,WAAW,QAAQ,CAAC;AAmCjC;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,SAAS,GACjB,SAAS,UAAU,EAAE,CAYvB"}

package/dist/service/sns/filter/sim-sns-filter-or-eligibility.js

@@ -0,0 +1,47 @@
+import { simSnsFilterReservedNames } from "./sim-sns-filter-operators.js";
+import { filterPolicyList, isFilterPolicyObject, simSnsFilterPolicyRefusal, } from "./sim-sns-filter-refusals.js";
+/**
+ * The key real SNS reads as an OR across separate keys.
+ */
+export const simSnsOrKey = "$or";
+/**
+ * Refuse an alternative real SNS would not read as one.
+ *
+ * Real SNS asks that no field name inside an `$or` be a reserved keyword, which
+ * is what the operators are named. A policy breaking that rule is not an error
+ * there: `$or` becomes an ordinary attribute name, so the policy asks about an
+ * attribute called `$or` and matches nothing. It is refused here instead,
+ * because a policy that quietly stopped being an or is the failure this feature
+ * exists to prevent.
+ */
+function assertAlternative(written) {
+    if (!isFilterPolicyObject(written)) {
+        throw simSnsFilterPolicyRefusal(`each alternative of ${simSnsOrKey} is a policy of its own, and this one ` +
+            `is ${JSON.stringify(written)}`);
+    }
+    const reserved = Object.keys(written).find((name) => simSnsFilterReservedNames.has(name));
+    if (reserved !== undefined) {
+        throw simSnsFilterPolicyRefusal(`an alternative of ${simSnsOrKey} names keys of the message, and this ` +
+            `one names the reserved ${reserved}, which real SNS reads as an ` +
+            `attribute called ${simSnsOrKey} rather than as an or`);
+    }
+    return written;
+}
+/**
+ * Read the alternatives of an `$or`, refusing what real SNS would not read as
+ * one.
+ *
+ * Real SNS recognises an `$or` only when it holds an array of at least two
+ * objects, none of which names a reserved keyword. Anything else is an ordinary
+ * attribute name there rather than an error, which makes a policy that looks
+ * like an or and is not one: it asks about an attribute called `$or`, so it
+ * matches nothing. Each of those is refused here when the policy is set.
+ */
+export function simSnsOrAlternatives(written) {
+    const alternatives = filterPolicyList(written, simSnsOrKey);
+    if (alternatives.length < 2) {
+        throw simSnsFilterPolicyRefusal(`${simSnsOrKey} holds at least two alternatives, and this one holds ${String(alternatives.length)}`);
+    }
+    return alternatives.map((alternative) => assertAlternative(alternative));
+}
+//# sourceMappingURL=sim-sns-filter-or-eligibility.js.map

package/dist/service/sns/filter/sim-sns-filter-or-eligibility.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-filter-or-eligibility.js","sourceRoot":"","sources":["../../../../src/service/sns/filter/sim-sns-filter-or-eligibility.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,yBAAyB,GAC1B,MAAM,8BAA8B,CAAC;AAEtC;;GAEG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,CAAC;AAEjC;;;;;;;;;GASG;AACH,SAAS,iBAAiB,CAAC,OAAkB;IAC3C,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,MAAM,yBAAyB,CAC7B,uBAAuB,WAAW,wCAAwC;YACxE,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAClC,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAClD,yBAAyB,CAAC,GAAG,CAAC,IAAI,CAAC,CACpC,CAAC;IAEF,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,yBAAyB,CAC7B,qBAAqB,WAAW,uCAAuC;YACrE,0BAA0B,QAAQ,+BAA+B;YACjE,oBAAoB,WAAW,uBAAuB,CACzD,CAAC;IACJ,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAAkB;IAElB,MAAM,YAAY,GAAG,gBAAgB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAE5D,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,yBAAyB,CAC7B,GAAG,WAAW,wDAAwD,MAAM,CAC1E,YAAY,CAAC,MAAM,CACpB,EAAE,CACJ,CAAC;IACJ,CAAC;IAED,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC,CAAC;AAC3E,CAAC"}

package/dist/service/sns/filter/sim-sns-filter-policy-scope.d.ts

@@ -0,0 +1,36 @@
+import type { SimSnsPublishedMessage } from "../message/sim-sns-published-message.js";
+import type { SimSnsFilterSubject } from "./sim-sns-filter-subject.js";
+/**
+ * What part of a published message a filter policy is matched against.
+ *
+ * There are two, and which one a subscription uses decides what its policy can
+ * say: message attributes are a flat set of names, and a message body is a JSON
+ * document a policy can nest into.
+ */
+export declare abstract class SimSnsFilterPolicyScope {
+    /**
+     * The name real SNS gives this scope, which is what the attribute is set to.
+     */
+    abstract get value(): string;
+    /**
+     * Whether a policy of this scope can name a key nested under another.
+     */
+    abstract get allowsNestedKeys(): boolean;
+    /**
+     * The part of a published message a policy of this scope matches against.
+     */
+    abstract subjectOf(message: SimSnsPublishedMessage): SimSnsFilterSubject;
+}
+/**
+ * The scope a subscription filters with unless it says otherwise, which is the
+ * one real SNS defaults to.
+ */
+export declare const simSnsDefaultFilterPolicyScope: SimSnsFilterPolicyScope;
+/**
+ * Read the `FilterPolicyScope` attribute of a request.
+ *
+ * An empty value is how an attribute is cleared, which puts the subscription
+ * back on the default scope. Anything real SNS does not have is refused.
+ */
+export declare function simSnsFilterPolicyScopeOf(value: string): SimSnsFilterPolicyScope;
+//# sourceMappingURL=sim-sns-filter-policy-scope.d.ts.map

package/dist/service/sns/filter/sim-sns-filter-policy-scope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-filter-policy-scope.d.ts","sourceRoot":"","sources":["../../../../src/service/sns/filter/sim-sns-filter-policy-scope.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,yCAAyC,CAAC;AAGtF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAEvE;;;;;;GAMG;AACH,8BAAsB,uBAAuB;IAC3C;;OAEG;IACH,QAAQ,KAAK,KAAK,IAAI,MAAM,CAAC;IAE7B;;OAEG;IACH,QAAQ,KAAK,gBAAgB,IAAI,OAAO,CAAC;IAEzC;;OAEG;IACH,QAAQ,CAAC,SAAS,CAAC,OAAO,EAAE,sBAAsB,GAAG,mBAAmB,CAAC;CAC1E;AAoCD;;;GAGG;AACH,eAAO,MAAM,8BAA8B,EAAE,uBACT,CAAC;AAOrC;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,GACZ,uBAAuB,CAezB"}