@kensio/yulin 1.9.0 → 1.10.1

package/dist/service/sns/command/sim-sns-commands.js

@@ -0,0 +1,83 @@
+import { SimSnsDeliveryRequests } from "../delivery/sim-sns-delivery-request.js";
+import { SimSnsFanOut } from "../delivery/sim-sns-fan-out.js";
+import { SimSnsMessageSigner } from "../signature/sim-sns-message-signer.js";
+import { SimSnsAuthorizer } from "./authorize/sim-sns-authorizer.js";
+import { SimSnsPublishCommands } from "./publish/sim-sns-publish-commands.js";
+import { SimSnsSubscriptionAccess } from "./subscription/sim-sns-subscription-access.js";
+import { SimSnsSubscriptionAttributeCommands } from "./subscription/sim-sns-subscription-attribute-commands.js";
+import { SimSnsSubscriptionCommands } from "./subscription/sim-sns-subscription-commands.js";
+import { SimSnsSubscriptionListings } from "./subscription/sim-sns-subscription-listings.js";
+import { SimSnsCreateTopic } from "./topic/sim-sns-create-topic.js";
+import { SimSnsTopicAccess } from "./topic/sim-sns-topic-access.js";
+import { SimSnsTopicAttributeCommands } from "./topic/sim-sns-topic-attribute-commands.js";
+import { SimSnsTopicCommands } from "./topic/sim-sns-topic-commands.js";
+/**
+ * Every command handler one simulated SNS scope delegates to.
+ *
+ * The wiring lives here rather than in the facade so that `SimSns` stays what
+ * it is meant to be: state and delegation. Which handler shares which
+ * collaborator is a fact about the handlers, not about the service object in
+ * front of them.
+ */
+export class SimSnsCommands {
+    topicCreation;
+    topics;
+    topicAttributes;
+    subscriptions;
+    subscriptionListings;
+    subscriptionAttributes;
+    publish;
+    fanOut;
+    signer;
+    constructor(properties) {
+        const { topics, subscriptions, accountRegionScope, background } = properties;
+        const access = new SimSnsTopicAccess({
+            topics,
+            authorizer: new SimSnsAuthorizer({ iam: properties.iam }),
+            accountRegionScope,
+        });
+        const subscriptionAccess = new SimSnsSubscriptionAccess({
+            subscriptions,
+            topicAccess: access,
+            accountRegionScope,
+        });
+        this.signer = new SimSnsMessageSigner({ accountRegionScope });
+        this.fanOut = new SimSnsFanOut({
+            subscriptions,
+            endpoints: properties.deliveryEndpoints,
+            requests: new SimSnsDeliveryRequests({
+                signer: this.signer,
+                accountRegionScope,
+            }),
+            background,
+        });
+        this.topicCreation = new SimSnsCreateTopic({
+            topics,
+            access,
+            accountRegionScope,
+        });
+        this.topics = new SimSnsTopicCommands({ topics, subscriptions, access });
+        this.topicAttributes = new SimSnsTopicAttributeCommands({
+            access,
+            subscriptions,
+        });
+        this.subscriptions = new SimSnsSubscriptionCommands({
+            subscriptions,
+            topicAccess: access,
+            subscriptionAccess,
+        });
+        this.subscriptionListings = new SimSnsSubscriptionListings({
+            subscriptions,
+            topicAccess: access,
+        });
+        this.subscriptionAttributes = new SimSnsSubscriptionAttributeCommands({
+            access: subscriptionAccess,
+        });
+        this.publish = new SimSnsPublishCommands({
+            access,
+            clock: background,
+            fanOut: this.fanOut,
+        });
+    }
+}
+//# sourceMappingURL=sim-sns-commands.js.map

package/dist/service/sns/command/sim-sns-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-commands.js","sourceRoot":"","sources":["../../../../src/service/sns/command/sim-sns-commands.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,sBAAsB,EAAE,MAAM,yCAAyC,CAAC;AACjF,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAG7E,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,wBAAwB,EAAE,MAAM,+CAA+C,CAAC;AACzF,OAAO,EAAE,mCAAmC,EAAE,MAAM,2DAA2D,CAAC;AAChH,OAAO,EAAE,0BAA0B,EAAE,MAAM,iDAAiD,CAAC;AAC7F,OAAO,EAAE,0BAA0B,EAAE,MAAM,iDAAiD,CAAC;AAC7F,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,4BAA4B,EAAE,MAAM,6CAA6C,CAAC;AAC3F,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAWxE;;;;;;;GAOG;AACH,MAAM,OAAO,cAAc;IACT,aAAa,CAAoB;IACjC,MAAM,CAAsB;IAC5B,eAAe,CAA+B;IAC9C,aAAa,CAA6B;IAC1C,oBAAoB,CAA6B;IACjD,sBAAsB,CAAsC;IAC5D,OAAO,CAAwB;IAC/B,MAAM,CAAe;IACrB,MAAM,CAAsB;IAE5C,YAAY,UAAoC;QAC9C,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,kBAAkB,EAAE,UAAU,EAAE,GAC7D,UAAU,CAAC;QACb,MAAM,MAAM,GAAG,IAAI,iBAAiB,CAAC;YACnC,MAAM;YACN,UAAU,EAAE,IAAI,gBAAgB,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,CAAC;YACzD,kBAAkB;SACnB,CAAC,CAAC;QACH,MAAM,kBAAkB,GAAG,IAAI,wBAAwB,CAAC;YACtD,aAAa;YACb,WAAW,EAAE,MAAM;YACnB,kBAAkB;SACnB,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,GAAG,IAAI,mBAAmB,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,GAAG,IAAI,YAAY,CAAC;YAC7B,aAAa;YACb,SAAS,EAAE,UAAU,CAAC,iBAAiB;YACvC,QAAQ,EAAE,IAAI,sBAAsB,CAAC;gBACnC,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,kBAAkB;aACnB,CAAC;YACF,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,aAAa,GAAG,IAAI,iBAAiB,CAAC;YACzC,MAAM;YACN,MAAM;YACN,kBAAkB;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,GAAG,IAAI,mBAAmB,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC;QACzE,IAAI,CAAC,eAAe,GAAG,IAAI,4BAA4B,CAAC;YACtD,MAAM;YACN,aAAa;SACd,CAAC,CAAC;QACH,IAAI,CAAC,aAAa,GAAG,IAAI,0BAA0B,CAAC;YAClD,aAAa;YACb,WAAW,EAAE,MAAM;YACnB,kBAAkB;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,oBAAoB,GAAG,IAAI,0BAA0B,CAAC;YACzD,aAAa;YACb,WAAW,EAAE,MAAM;SACpB,CAAC,CAAC;QACH,IAAI,CAAC,sBAAsB,GAAG,IAAI,mCAAmC,CAAC;YACpE,MAAM,EAAE,kBAAkB;SAC3B,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,GAAG,IAAI,qBAAqB,CAAC;YACvC,MAAM;YACN,KAAK,EAAE,UAAU;YACjB,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/sns/command/sim-sns-page.d.ts

@@ -0,0 +1,19 @@
+/**
+ * One page of a listing, and the token that reaches the next one.
+ */
+export declare class SimSnsPage<Item> {
+    readonly items: readonly Item[];
+    readonly nextToken: string | undefined;
+    constructor(listed: readonly Item[], nextToken: string | undefined);
+    /**
+     * Read a continuation token as its offset into the listed items.
+     *
+     * A token is refused unless it is one of these listings could have issued,
+     * which is the start of a page after the first. An offset landing part way
+     * into a page is not one, so it is refused rather than answered with a
+     * listing starting somewhere real SNS would never start one.
+     */
+    private static startIndex;
+    private static tokenFor;
+}
+//# sourceMappingURL=sim-sns-page.d.ts.map

package/dist/service/sns/command/sim-sns-page.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-page.d.ts","sourceRoot":"","sources":["../../../../src/service/sns/command/sim-sns-page.ts"],"names":[],"mappings":"AAWA;;GAEG;AACH,qBAAa,UAAU,CAAC,IAAI;IAC1B,SAAgB,KAAK,EAAE,SAAS,IAAI,EAAE,CAAC;IACvC,SAAgB,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAE9C,YAAY,MAAM,EAAE,SAAS,IAAI,EAAE,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS,EAMjE;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,MAAM,CAAC,UAAU;IAyBzB,OAAO,CAAC,MAAM,CAAC,QAAQ;CAUxB"}

package/dist/service/sns/command/sim-sns-page.js

@@ -0,0 +1,51 @@
+import { SimSnsInvalidParameterException } from "../error/sim-sns.error.js";
+/**
+ * How many items one listing response carries.
+ *
+ * Real SNS gives the request no say in this for any of its listings: topics,
+ * subscriptions and a topic's subscriptions all page at 100 and hand back a
+ * token for the rest.
+ */
+const itemsPerPage = 100;
+/**
+ * One page of a listing, and the token that reaches the next one.
+ */
+export class SimSnsPage {
+    items;
+    nextToken;
+    constructor(listed, nextToken) {
+        const startIndex = SimSnsPage.startIndex(nextToken, listed.length);
+        const nextIndex = startIndex + itemsPerPage;
+        this.items = listed.slice(startIndex, nextIndex);
+        this.nextToken = SimSnsPage.tokenFor(nextIndex, listed.length);
+    }
+    /**
+     * Read a continuation token as its offset into the listed items.
+     *
+     * A token is refused unless it is one of these listings could have issued,
+     * which is the start of a page after the first. An offset landing part way
+     * into a page is not one, so it is refused rather than answered with a
+     * listing starting somewhere real SNS would never start one.
+     */
+    static startIndex(nextToken, listedCount) {
+        if (nextToken === undefined) {
+            return 0;
+        }
+        const startIndex = Number(nextToken);
+        if (!Number.isSafeInteger(startIndex) ||
+            startIndex <= 0 ||
+            startIndex % itemsPerPage !== 0 ||
+            startIndex >= listedCount ||
+            String(startIndex) !== nextToken) {
+            throw new SimSnsInvalidParameterException("Invalid parameter: NextToken is not a token this simulation issued");
+        }
+        return startIndex;
+    }
+    static tokenFor(nextIndex, listedCount) {
+        if (nextIndex >= listedCount) {
+            return undefined;
+        }
+        return String(nextIndex);
+    }
+}
+//# sourceMappingURL=sim-sns-page.js.map

package/dist/service/sns/command/sim-sns-page.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-page.js","sourceRoot":"","sources":["../../../../src/service/sns/command/sim-sns-page.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,+BAA+B,EAAE,MAAM,2BAA2B,CAAC;AAE5E;;;;;;GAMG;AACH,MAAM,YAAY,GAAG,GAAG,CAAC;AAEzB;;GAEG;AACH,MAAM,OAAO,UAAU;IACL,KAAK,CAAkB;IACvB,SAAS,CAAqB;IAE9C,YAAY,MAAuB,EAAE,SAA6B;QAChE,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACnE,MAAM,SAAS,GAAG,UAAU,GAAG,YAAY,CAAC;QAE5C,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACjD,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACjE,CAAC;IAED;;;;;;;OAOG;IACK,MAAM,CAAC,UAAU,CACvB,SAA6B,EAC7B,WAAmB;QAEnB,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,CAAC,CAAC;QACX,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;QAErC,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC;YACjC,UAAU,IAAI,CAAC;YACf,UAAU,GAAG,YAAY,KAAK,CAAC;YAC/B,UAAU,IAAI,WAAW;YACzB,MAAM,CAAC,UAAU,CAAC,KAAK,SAAS,EAChC,CAAC;YACD,MAAM,IAAI,+BAA+B,CACvC,oEAAoE,CACrE,CAAC;QACJ,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAEO,MAAM,CAAC,QAAQ,CACrB,SAAiB,EACjB,WAAmB;QAEnB,IAAI,SAAS,IAAI,WAAW,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC;IAC3B,CAAC;CACF"}

package/dist/service/sns/command/sim-sns-request-options.d.ts

@@ -0,0 +1,47 @@
+import type { SimAwsCaller } from "../../aws/caller/sim-aws-caller.js";
+/**
+ * The condition key naming what a simulated service is reaching the topic for,
+ * such as the S3 Bucket an event came from.
+ *
+ * This is the key a topic policy granting a service principal access is nearly
+ * always conditioned on, under `ArnLike`, since a service principal is shared
+ * by every resource of that service.
+ */
+export declare const simSnsSourceArnConditionKey = "aws:SourceArn";
+/**
+ * The condition key naming the Account owning the resource a simulated service
+ * is reaching the topic for.
+ *
+ * It only has a job when that resource and the topic are in different Accounts,
+ * which is why AWS's own documented topic policies carry it alongside the
+ * source ARN.
+ */
+export declare const simSnsSourceAccountConditionKey = "aws:SourceAccount";
+/**
+ * What an SNS request carries besides its command input.
+ */
+export interface SimSnsRequestOptions {
+    /**
+     * Who is making the request. An omitted caller is the Account root, as it is
+     * everywhere else in the simulation.
+     */
+    readonly caller?: SimAwsCaller;
+    /**
+     * What the caller is reaching the topic for, supplied to IAM as
+     * `aws:SourceArn`.
+     *
+     * This is for a simulated service making a request on a resource's behalf,
+     * which is how real AWS supplies it. A value the caller does not have is left
+     * out rather than supplied empty, so a statement conditioned on it fails to
+     * match instead of matching an empty string.
+     */
+    readonly sourceArn?: string;
+    /**
+     * The Account owning the resource the caller is reaching the topic for,
+     * supplied to IAM as `aws:SourceAccount`.
+     *
+     * Left out the same way when the caller has no value for it.
+     */
+    readonly sourceAccount?: string;
+}
+//# sourceMappingURL=sim-sns-request-options.d.ts.map

package/dist/service/sns/command/sim-sns-request-options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-request-options.d.ts","sourceRoot":"","sources":["../../../../src/service/sns/command/sim-sns-request-options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAEvE;;;;;;;GAOG;AACH,eAAO,MAAM,2BAA2B,kBAAkB,CAAC;AAE3D;;;;;;;GAOG;AACH,eAAO,MAAM,+BAA+B,sBAAsB,CAAC;AAEnE;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;IAE/B;;;;;;;;OAQG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAE5B;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC"}

package/dist/service/sns/command/sim-sns-request-options.js

@@ -0,0 +1,19 @@
+/**
+ * The condition key naming what a simulated service is reaching the topic for,
+ * such as the S3 Bucket an event came from.
+ *
+ * This is the key a topic policy granting a service principal access is nearly
+ * always conditioned on, under `ArnLike`, since a service principal is shared
+ * by every resource of that service.
+ */
+export const simSnsSourceArnConditionKey = "aws:SourceArn";
+/**
+ * The condition key naming the Account owning the resource a simulated service
+ * is reaching the topic for.
+ *
+ * It only has a job when that resource and the topic are in different Accounts,
+ * which is why AWS's own documented topic policies carry it alongside the
+ * source ARN.
+ */
+export const simSnsSourceAccountConditionKey = "aws:SourceAccount";
+//# sourceMappingURL=sim-sns-request-options.js.map

package/dist/service/sns/command/sim-sns-request-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-request-options.js","sourceRoot":"","sources":["../../../../src/service/sns/command/sim-sns-request-options.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,eAAe,CAAC;AAE3D;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,mBAAmB,CAAC"}

package/dist/service/sns/command/subscription/sim-sns-subscription-access.d.ts

@@ -0,0 +1,42 @@
+import type { SimAwsAccountRegionScope } from "../../../aws/sim-aws-account-region-scope.js";
+import type { SimSnsSubscription } from "../../subscription/sim-sns-subscription.js";
+import type { SimSnsSubscriptionStore } from "../../subscription/sim-sns-subscription-store.js";
+import type { SimSnsTopicAccess } from "../topic/sim-sns-topic-access.js";
+import type { SimSnsRequestOptions } from "../sim-sns-request-options.js";
+interface SimSnsSubscriptionAccessProperties {
+    readonly subscriptions: SimSnsSubscriptionStore;
+    readonly topicAccess: SimSnsTopicAccess;
+    readonly accountRegionScope: SimAwsAccountRegionScope;
+}
+/**
+ * How a request reaches the subscription it names by ARN.
+ *
+ * The action is authorized before the subscription is looked for, which is the
+ * other way round from a topic. Real SNS gives `Unsubscribe`,
+ * `GetSubscriptionAttributes` and `SetSubscriptionAttributes` no resource type
+ * at all, so IAM evaluates them against `*` and no topic policy takes part in
+ * the decision. Nothing about the subscription can change the answer, so
+ * nothing has to be found first.
+ */
+export declare class SimSnsSubscriptionAccess {
+    private readonly subscriptions;
+    private readonly topicAccess;
+    private readonly accountRegionScope;
+    constructor(properties: SimSnsSubscriptionAccessProperties);
+    /**
+     * Resolve the subscription a request names by ARN, authorizing the action
+     * first.
+     */
+    requireByArn(action: string, subscriptionArn: string | undefined, options?: SimSnsRequestOptions): SimSnsSubscription;
+    /**
+     * Read the subscription ARN a request carries, refusing one this scope could
+     * not own.
+     *
+     * A subscription ARN is the topic's with an id on the end, so it names an
+     * Account and a Region the same way a topic ARN does, and one naming another
+     * scope reaches nothing here rather than being looked up locally by its id.
+     */
+    private scopedArn;
+}
+export {};
+//# sourceMappingURL=sim-sns-subscription-access.d.ts.map

package/dist/service/sns/command/subscription/sim-sns-subscription-access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-subscription-access.d.ts","sourceRoot":"","sources":["../../../../../src/service/sns/command/subscription/sim-sns-subscription-access.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAK7F,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4CAA4C,CAAC;AAErF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kDAAkD,CAAC;AAChG,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAE1E,UAAU,kCAAkC;IAC1C,QAAQ,CAAC,aAAa,EAAE,uBAAuB,CAAC;IAChD,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAC;IACxC,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;CACvD;AAED;;;;;;;;;GASG;AACH,qBAAa,wBAAwB;IACnC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA0B;IACxD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAoB;IAChD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA2B;IAE9D,YAAY,UAAU,EAAE,kCAAkC,EAIzD;IAED;;;OAGG;IACH,YAAY,CACV,MAAM,EAAE,MAAM,EACd,eAAe,EAAE,MAAM,GAAG,SAAS,EACnC,OAAO,CAAC,EAAE,oBAAoB,GAC7B,kBAAkB,CAIpB;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,SAAS;CA6BlB"}

package/dist/service/sns/command/subscription/sim-sns-subscription-access.js

@@ -0,0 +1,57 @@
+import { SimSnsInvalidParameterException, SimSnsNotFoundException, } from "../../error/sim-sns.error.js";
+import { parseSnsSubscriptionArn } from "../../subscription/sim-sns-subscription-arn.js";
+/**
+ * How a request reaches the subscription it names by ARN.
+ *
+ * The action is authorized before the subscription is looked for, which is the
+ * other way round from a topic. Real SNS gives `Unsubscribe`,
+ * `GetSubscriptionAttributes` and `SetSubscriptionAttributes` no resource type
+ * at all, so IAM evaluates them against `*` and no topic policy takes part in
+ * the decision. Nothing about the subscription can change the answer, so
+ * nothing has to be found first.
+ */
+export class SimSnsSubscriptionAccess {
+    subscriptions;
+    topicAccess;
+    accountRegionScope;
+    constructor(properties) {
+        this.subscriptions = properties.subscriptions;
+        this.topicAccess = properties.topicAccess;
+        this.accountRegionScope = properties.accountRegionScope;
+    }
+    /**
+     * Resolve the subscription a request names by ARN, authorizing the action
+     * first.
+     */
+    requireByArn(action, subscriptionArn, options) {
+        this.topicAccess.authorizeAnyTopic(action, options);
+        return this.subscriptions.require(this.scopedArn(subscriptionArn));
+    }
+    /**
+     * Read the subscription ARN a request carries, refusing one this scope could
+     * not own.
+     *
+     * A subscription ARN is the topic's with an id on the end, so it names an
+     * Account and a Region the same way a topic ARN does, and one naming another
+     * scope reaches nothing here rather than being looked up locally by its id.
+     */
+    scopedArn(subscriptionArn) {
+        if (subscriptionArn === undefined || subscriptionArn === "") {
+            throw new SimSnsInvalidParameterException("Invalid parameter: SubscriptionArn is required");
+        }
+        const parts = parseSnsSubscriptionArn(subscriptionArn);
+        if (parts === undefined) {
+            throw new SimSnsInvalidParameterException(`Invalid parameter: SubscriptionArn Reason: ${subscriptionArn} is ` +
+                `not a subscription ARN, which is ` +
+                `arn:aws:sns:<region>:<account-id>:<topic-name>:<subscription-id>`);
+        }
+        const { accountId, regionName } = this.accountRegionScope;
+        if (parts.accountId !== accountId || parts.regionName !== regionName) {
+            throw new SimSnsNotFoundException(`Subscription does not exist: ${subscriptionArn} names Account ` +
+                `${parts.accountId} in ${parts.regionName}, and this simulated SNS ` +
+                `is Account ${accountId} in ${regionName}`);
+        }
+        return subscriptionArn;
+    }
+}
+//# sourceMappingURL=sim-sns-subscription-access.js.map

package/dist/service/sns/command/subscription/sim-sns-subscription-access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-subscription-access.js","sourceRoot":"","sources":["../../../../../src/service/sns/command/subscription/sim-sns-subscription-access.ts"],"names":[],"mappings":"AACA,OAAO,EACL,+BAA+B,EAC/B,uBAAuB,GACxB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,uBAAuB,EAAE,MAAM,gDAAgD,CAAC;AAWzF;;;;;;;;;GASG;AACH,MAAM,OAAO,wBAAwB;IAClB,aAAa,CAA0B;IACvC,WAAW,CAAoB;IAC/B,kBAAkB,CAA2B;IAE9D,YAAY,UAA8C;QACxD,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;QAC9C,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;IAC1D,CAAC;IAED;;;OAGG;IACH,YAAY,CACV,MAAc,EACd,eAAmC,EACnC,OAA8B;QAE9B,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAEpD,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC,CAAC;IACrE,CAAC;IAED;;;;;;;OAOG;IACK,SAAS,CAAC,eAAmC;QACnD,IAAI,eAAe,KAAK,SAAS,IAAI,eAAe,KAAK,EAAE,EAAE,CAAC;YAC5D,MAAM,IAAI,+BAA+B,CACvC,gDAAgD,CACjD,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,uBAAuB,CAAC,eAAe,CAAC,CAAC;QAEvD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,+BAA+B,CACvC,8CAA8C,eAAe,MAAM;gBACjE,mCAAmC;gBACnC,kEAAkE,CACrE,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,kBAAkB,CAAC;QAE1D,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;YACrE,MAAM,IAAI,uBAAuB,CAC/B,gCAAgC,eAAe,iBAAiB;gBAC9D,GAAG,KAAK,CAAC,SAAS,OAAO,KAAK,CAAC,UAAU,2BAA2B;gBACpE,cAAc,SAAS,OAAO,UAAU,EAAE,CAC7C,CAAC;QACJ,CAAC;QAED,OAAO,eAAe,CAAC;IACzB,CAAC;CACF"}

package/dist/service/sns/command/subscription/sim-sns-subscription-attribute-commands.d.ts

@@ -0,0 +1,31 @@
+import type { SimSnsRequestOptions } from "../sim-sns-request-options.js";
+import type { SimSnsSubscriptionAccess } from "./sim-sns-subscription-access.js";
+import type { SimGetSubscriptionAttributesCommand, SimGetSubscriptionAttributesCommandOutput, SimSetSubscriptionAttributesCommand, SimSetSubscriptionAttributesCommandOutput } from "./subscription.command.js";
+interface SimSnsSubscriptionAttributeCommandsProperties {
+    readonly access: SimSnsSubscriptionAccess;
+}
+/**
+ * The commands that read and change the attributes of a subscription.
+ */
+export declare class SimSnsSubscriptionAttributeCommands {
+    private readonly access;
+    constructor(properties: SimSnsSubscriptionAttributeCommandsProperties);
+    /**
+     * Read every attribute of a subscription.
+     *
+     * The request names no attributes, so everything the subscription has comes
+     * back. An attribute real SNS reports and this simulation does not hold is
+     * left out rather than invented.
+     */
+    getSubscriptionAttributes(command: SimGetSubscriptionAttributesCommand, options?: SimSnsRequestOptions): SimGetSubscriptionAttributesCommandOutput;
+    /**
+     * Change one attribute of a subscription.
+     *
+     * Real SNS sets one attribute per request rather than a map of them, which is
+     * why the request carries a name and a value instead of an `Attributes`
+     * object.
+     */
+    setSubscriptionAttributes(command: SimSetSubscriptionAttributesCommand, options?: SimSnsRequestOptions): SimSetSubscriptionAttributesCommandOutput;
+}
+export {};
+//# sourceMappingURL=sim-sns-subscription-attribute-commands.d.ts.map

package/dist/service/sns/command/subscription/sim-sns-subscription-attribute-commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-subscription-attribute-commands.d.ts","sourceRoot":"","sources":["../../../../../src/service/sns/command/subscription/sim-sns-subscription-attribute-commands.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AACjF,OAAO,KAAK,EACV,mCAAmC,EACnC,yCAAyC,EACzC,mCAAmC,EACnC,yCAAyC,EAC1C,MAAM,2BAA2B,CAAC;AAEnC,UAAU,6CAA6C;IACrD,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;CAC3C;AAED;;GAEG;AACH,qBAAa,mCAAmC;IAC9C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA2B;IAElD,YAAY,UAAU,EAAE,6CAA6C,EAEpE;IAED;;;;;;OAMG;IACH,yBAAyB,CACvB,OAAO,EAAE,mCAAmC,EAC5C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,yCAAyC,CAQ3C;IAED;;;;;;OAMG;IACH,yBAAyB,CACvB,OAAO,EAAE,mCAAmC,EAC5C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,yCAAyC,CAuB3C;CACF"}

package/dist/service/sns/command/subscription/sim-sns-subscription-attribute-commands.js

@@ -0,0 +1,44 @@
+import { SimSnsInvalidParameterException } from "../../error/sim-sns.error.js";
+/**
+ * The commands that read and change the attributes of a subscription.
+ */
+export class SimSnsSubscriptionAttributeCommands {
+    access;
+    constructor(properties) {
+        this.access = properties.access;
+    }
+    /**
+     * Read every attribute of a subscription.
+     *
+     * The request names no attributes, so everything the subscription has comes
+     * back. An attribute real SNS reports and this simulation does not hold is
+     * left out rather than invented.
+     */
+    getSubscriptionAttributes(command, options) {
+        const subscription = this.access.requireByArn("sns:GetSubscriptionAttributes", command.input.SubscriptionArn, options);
+        return { $metadata: {}, Attributes: subscription.reportedAttributes() };
+    }
+    /**
+     * Change one attribute of a subscription.
+     *
+     * Real SNS sets one attribute per request rather than a map of them, which is
+     * why the request carries a name and a value instead of an `Attributes`
+     * object.
+     */
+    setSubscriptionAttributes(command, options) {
+        const subscription = this.access.requireByArn("sns:SetSubscriptionAttributes", command.input.SubscriptionArn, options);
+        const name = command.input.AttributeName;
+        if (name === undefined || name === "") {
+            throw new SimSnsInvalidParameterException("Invalid parameter: AttributeName is required");
+        }
+        // An absent value is how SNS is told to clear an attribute, so it reaches
+        // the subscription as an empty string rather than being left out of the
+        // request. RawMessageDelivery has no empty value, so clearing that one is
+        // refused by the attribute itself.
+        subscription.applyAttributes({
+            [name]: command.input.AttributeValue ?? "",
+        });
+        return { $metadata: {} };
+    }
+}
+//# sourceMappingURL=sim-sns-subscription-attribute-commands.js.map

package/dist/service/sns/command/subscription/sim-sns-subscription-attribute-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-subscription-attribute-commands.js","sourceRoot":"","sources":["../../../../../src/service/sns/command/subscription/sim-sns-subscription-attribute-commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,+BAA+B,EAAE,MAAM,8BAA8B,CAAC;AAc/E;;GAEG;AACH,MAAM,OAAO,mCAAmC;IAC7B,MAAM,CAA2B;IAElD,YAAY,UAAyD;QACnE,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAClC,CAAC;IAED;;;;;;OAMG;IACH,yBAAyB,CACvB,OAA4C,EAC5C,OAA8B;QAE9B,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAC3C,+BAA+B,EAC/B,OAAO,CAAC,KAAK,CAAC,eAAe,EAC7B,OAAO,CACR,CAAC;QAEF,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,UAAU,EAAE,YAAY,CAAC,kBAAkB,EAAE,EAAE,CAAC;IAC1E,CAAC;IAED;;;;;;OAMG;IACH,yBAAyB,CACvB,OAA4C,EAC5C,OAA8B;QAE9B,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAC3C,+BAA+B,EAC/B,OAAO,CAAC,KAAK,CAAC,eAAe,EAC7B,OAAO,CACR,CAAC;QACF,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC;QAEzC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,+BAA+B,CACvC,8CAA8C,CAC/C,CAAC;QACJ,CAAC;QAED,0EAA0E;QAC1E,wEAAwE;QACxE,0EAA0E;QAC1E,mCAAmC;QACnC,YAAY,CAAC,eAAe,CAAC;YAC3B,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,cAAc,IAAI,EAAE;SAC3C,CAAC,CAAC;QAEH,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC3B,CAAC;CACF"}

package/dist/service/sns/command/subscription/sim-sns-subscription-commands.d.ts

@@ -0,0 +1,50 @@
+import type { SimSnsSubscriptionStore } from "../../subscription/sim-sns-subscription-store.js";
+import type { SimSnsRequestOptions } from "../sim-sns-request-options.js";
+import type { SimSnsTopicAccess } from "../topic/sim-sns-topic-access.js";
+import type { SimSnsSubscriptionAccess } from "./sim-sns-subscription-access.js";
+import type { SimSubscribeCommand, SimSubscribeCommandOutput, SimUnsubscribeCommand, SimUnsubscribeCommandOutput } from "./subscription.command.js";
+interface SimSnsSubscriptionCommandsProperties {
+    readonly subscriptions: SimSnsSubscriptionStore;
+    readonly topicAccess: SimSnsTopicAccess;
+    readonly subscriptionAccess: SimSnsSubscriptionAccess;
+}
+/**
+ * The commands that create and remove subscriptions.
+ */
+export declare class SimSnsSubscriptionCommands {
+    private readonly subscriptions;
+    private readonly topicAccess;
+    private readonly subscriptionAccess;
+    constructor(properties: SimSnsSubscriptionCommandsProperties);
+    /**
+     * Subscribe an endpoint to a topic.
+     *
+     * The subscription comes back confirmed, with an ARN rather than the `pending
+     * confirmation` a protocol needing a confirmation token answers with. Real
+     * SNS confirms an `sqs` and a `lambda` subscription itself, and those are the
+     * protocols simulated.
+     */
+    subscribe(command: SimSubscribeCommand, options?: SimSnsRequestOptions): SimSubscribeCommandOutput;
+    /**
+     * Remove a subscription, so nothing more is delivered to its endpoint.
+     *
+     * An ARN naming no subscription is refused rather than quietly succeeding.
+     * Real SNS documents `NotFoundException` for this command, and a silent
+     * success would let a test unsubscribe the wrong ARN and believe it had
+     * stopped a delivery.
+     */
+    unsubscribe(command: SimUnsubscribeCommand, options?: SimSnsRequestOptions): SimUnsubscribeCommandOutput;
+    /**
+     * The subscription this request would duplicate, if there is one.
+     *
+     * Real SNS answers a repeated Subscribe for the same topic, protocol and
+     * endpoint with the subscription that is already there rather than making a
+     * second one, so the same endpoint receives one copy of a published message
+     * however many times it subscribed. The attributes the repeated request
+     * carries are not applied, which is how a repeated `CreateTopic` treats its
+     * attributes too.
+     */
+    private existingLike;
+}
+export {};
+//# sourceMappingURL=sim-sns-subscription-commands.d.ts.map

package/dist/service/sns/command/subscription/sim-sns-subscription-commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-subscription-commands.d.ts","sourceRoot":"","sources":["../../../../../src/service/sns/command/subscription/sim-sns-subscription-commands.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kDAAkD,CAAC;AAEhG,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AACjF,OAAO,KAAK,EACV,mBAAmB,EACnB,yBAAyB,EACzB,qBAAqB,EACrB,2BAA2B,EAC5B,MAAM,2BAA2B,CAAC;AAEnC,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,aAAa,EAAE,uBAAuB,CAAC;IAChD,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAC;IACxC,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;CACvD;AAED;;GAEG;AACH,qBAAa,0BAA0B;IACrC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA0B;IACxD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAoB;IAChD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA2B;IAE9D,YAAY,UAAU,EAAE,oCAAoC,EAI3D;IAED;;;;;;;OAOG;IACH,SAAS,CACP,OAAO,EAAE,mBAAmB,EAC5B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,yBAAyB,CA8B3B;IAED;;;;;;;OAOG;IACH,WAAW,CACT,OAAO,EAAE,qBAAqB,EAC9B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,2BAA2B,CAU7B;IAED;;;;;;;;;OASG;IACH,OAAO,CAAC,YAAY;CAQrB"}

package/dist/service/sns/command/subscription/sim-sns-subscription-commands.js

@@ -0,0 +1,73 @@
+import { SimSnsSubscription } from "../../subscription/sim-sns-subscription.js";
+import { SimSnsSubscriptionAttributes } from "../../subscription/sim-sns-subscription-attributes.js";
+import { requireSimSnsProtocol } from "../../subscription/sim-sns-subscription-protocol.js";
+/**
+ * The commands that create and remove subscriptions.
+ */
+export class SimSnsSubscriptionCommands {
+    subscriptions;
+    topicAccess;
+    subscriptionAccess;
+    constructor(properties) {
+        this.subscriptions = properties.subscriptions;
+        this.topicAccess = properties.topicAccess;
+        this.subscriptionAccess = properties.subscriptionAccess;
+    }
+    /**
+     * Subscribe an endpoint to a topic.
+     *
+     * The subscription comes back confirmed, with an ARN rather than the `pending
+     * confirmation` a protocol needing a confirmation token answers with. Real
+     * SNS confirms an `sqs` and a `lambda` subscription itself, and those are the
+     * protocols simulated.
+     */
+    subscribe(command, options) {
+        const { topic, caller } = this.topicAccess.requireByArnForCaller("sns:Subscribe", command.input.TopicArn, options);
+        // The attributes are read whether or not they end up applied, so a
+        // repeated Subscribe carrying one this simulation will not take is still
+        // refused for it.
+        const attributes = SimSnsSubscriptionAttributes.defaults().with(command.input.Attributes ?? {});
+        const subscription = SimSnsSubscription.of({
+            topicArn: topic.arn.value,
+            topicName: topic.name.value,
+            protocol: requireSimSnsProtocol(command.input.Protocol),
+            endpoint: command.input.Endpoint,
+            owner: caller.accountId ?? topic.owner,
+            attributes,
+        });
+        const existing = this.existingLike(topic, subscription);
+        if (existing !== undefined) {
+            return { $metadata: {}, SubscriptionArn: existing.arn.value };
+        }
+        this.subscriptions.add(subscription);
+        return { $metadata: {}, SubscriptionArn: subscription.arn.value };
+    }
+    /**
+     * Remove a subscription, so nothing more is delivered to its endpoint.
+     *
+     * An ARN naming no subscription is refused rather than quietly succeeding.
+     * Real SNS documents `NotFoundException` for this command, and a silent
+     * success would let a test unsubscribe the wrong ARN and believe it had
+     * stopped a delivery.
+     */
+    unsubscribe(command, options) {
+        this.subscriptions.remove(this.subscriptionAccess.requireByArn("sns:Unsubscribe", command.input.SubscriptionArn, options));
+        return { $metadata: {} };
+    }
+    /**
+     * The subscription this request would duplicate, if there is one.
+     *
+     * Real SNS answers a repeated Subscribe for the same topic, protocol and
+     * endpoint with the subscription that is already there rather than making a
+     * second one, so the same endpoint receives one copy of a published message
+     * however many times it subscribed. The attributes the repeated request
+     * carries are not applied, which is how a repeated `CreateTopic` treats its
+     * attributes too.
+     */
+    existingLike(topic, subscription) {
+        return this.subscriptions
+            .forTopic(topic.name.value)
+            .find((held) => held.repeats(subscription));
+    }
+}
+//# sourceMappingURL=sim-sns-subscription-commands.js.map

package/dist/service/sns/command/subscription/sim-sns-subscription-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-subscription-commands.js","sourceRoot":"","sources":["../../../../../src/service/sns/command/subscription/sim-sns-subscription-commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,4CAA4C,CAAC;AAChF,OAAO,EAAE,4BAA4B,EAAE,MAAM,uDAAuD,CAAC;AACrG,OAAO,EAAE,qBAAqB,EAAE,MAAM,qDAAqD,CAAC;AAmB5F;;GAEG;AACH,MAAM,OAAO,0BAA0B;IACpB,aAAa,CAA0B;IACvC,WAAW,CAAoB;IAC/B,kBAAkB,CAA2B;IAE9D,YAAY,UAAgD;QAC1D,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;QAC9C,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;IAC1D,CAAC;IAED;;;;;;;OAOG;IACH,SAAS,CACP,OAA4B,EAC5B,OAA8B;QAE9B,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,qBAAqB,CAC9D,eAAe,EACf,OAAO,CAAC,KAAK,CAAC,QAAQ,EACtB,OAAO,CACR,CAAC;QAEF,mEAAmE;QACnE,yEAAyE;QACzE,kBAAkB;QAClB,MAAM,UAAU,GAAG,4BAA4B,CAAC,QAAQ,EAAE,CAAC,IAAI,CAC7D,OAAO,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAC/B,CAAC;QACF,MAAM,YAAY,GAAG,kBAAkB,CAAC,EAAE,CAAC;YACzC,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK;YACzB,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK;YAC3B,QAAQ,EAAE,qBAAqB,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;YACvD,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,QAAQ;YAChC,KAAK,EAAE,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC,KAAK;YACtC,UAAU;SACX,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QAExD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,eAAe,EAAE,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QAChE,CAAC;QAED,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAErC,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,eAAe,EAAE,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;IACpE,CAAC;IAED;;;;;;;OAOG;IACH,WAAW,CACT,OAA8B,EAC9B,OAA8B;QAE9B,IAAI,CAAC,aAAa,CAAC,MAAM,CACvB,IAAI,CAAC,kBAAkB,CAAC,YAAY,CAClC,iBAAiB,EACjB,OAAO,CAAC,KAAK,CAAC,eAAe,EAC7B,OAAO,CACR,CACF,CAAC;QAEF,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC3B,CAAC;IAED;;;;;;;;;OASG;IACK,YAAY,CAClB,KAAkB,EAClB,YAAgC;QAEhC,OAAO,IAAI,CAAC,aAAa;aACtB,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;aAC1B,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;IAChD,CAAC;CACF"}

package/dist/service/sns/command/subscription/sim-sns-subscription-listings.d.ts

@@ -0,0 +1,34 @@
+import type { SimSnsSubscriptionStore } from "../../subscription/sim-sns-subscription-store.js";
+import type { SimSnsRequestOptions } from "../sim-sns-request-options.js";
+import type { SimSnsTopicAccess } from "../topic/sim-sns-topic-access.js";
+import type { SimListSubscriptionsByTopicCommand, SimListSubscriptionsByTopicCommandOutput, SimListSubscriptionsCommand, SimListSubscriptionsCommandOutput } from "./subscription.command.js";
+interface SimSnsSubscriptionListingsProperties {
+    readonly subscriptions: SimSnsSubscriptionStore;
+    readonly topicAccess: SimSnsTopicAccess;
+}
+/**
+ * The commands that list subscriptions.
+ */
+export declare class SimSnsSubscriptionListings {
+    private readonly subscriptions;
+    private readonly topicAccess;
+    constructor(properties: SimSnsSubscriptionListingsProperties);
+    /**
+     * List every subscription in this scope, oldest first.
+     *
+     * Real SNS gives this action no resource type, so it authorizes against `*`
+     * the way `ListTopics` does: a policy naming a topic ARN allows no listing,
+     * and the list is not filtered by what the caller can reach.
+     */
+    listSubscriptions(command: SimListSubscriptionsCommand, options?: SimSnsRequestOptions): SimListSubscriptionsCommandOutput;
+    /**
+     * List the subscriptions of one topic, oldest first.
+     *
+     * This one does name a topic, so it authorizes against the topic's ARN and
+     * the topic's own policy takes part in the decision.
+     */
+    listSubscriptionsByTopic(command: SimListSubscriptionsByTopicCommand, options?: SimSnsRequestOptions): SimListSubscriptionsByTopicCommandOutput;
+    private page;
+}
+export {};
+//# sourceMappingURL=sim-sns-subscription-listings.d.ts.map

package/dist/service/sns/command/subscription/sim-sns-subscription-listings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-subscription-listings.d.ts","sourceRoot":"","sources":["../../../../../src/service/sns/command/subscription/sim-sns-subscription-listings.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kDAAkD,CAAC;AAEhG,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,KAAK,EACV,kCAAkC,EAClC,wCAAwC,EACxC,2BAA2B,EAC3B,iCAAiC,EAElC,MAAM,2BAA2B,CAAC;AAkBnC,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,aAAa,EAAE,uBAAuB,CAAC;IAChD,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAC;CACzC;AAED;;GAEG;AACH,qBAAa,0BAA0B;IACrC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA0B;IACxD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAoB;IAEhD,YAAY,UAAU,EAAE,oCAAoC,EAG3D;IAED;;;;;;OAMG;IACH,iBAAiB,CACf,OAAO,EAAE,2BAA2B,EACpC,OAAO,CAAC,EAAE,oBAAoB,GAC7B,iCAAiC,CAInC;IAED;;;;;OAKG;IACH,wBAAwB,CACtB,OAAO,EAAE,kCAAkC,EAC3C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,wCAAwC,CAW1C;IAED,OAAO,CAAC,IAAI;CAYb"}