@kensio/yulin 1.9.0 → 1.10.1

package/dist/service/sns/command/topic/sim-sns-topic-commands.d.ts

@@ -0,0 +1,42 @@
+import type { SimSnsSubscriptionStore } from "../../subscription/sim-sns-subscription-store.js";
+import type { SimSnsTopicStore } from "../../topic/sim-sns-topic-store.js";
+import type { SimSnsRequestOptions } from "../sim-sns-request-options.js";
+import type { SimSnsTopicAccess } from "./sim-sns-topic-access.js";
+import type { SimDeleteTopicCommand, SimDeleteTopicCommandOutput, SimListTopicsCommand, SimListTopicsCommandOutput } from "./topic.command.js";
+interface SimSnsTopicCommandsProperties {
+    readonly topics: SimSnsTopicStore;
+    readonly subscriptions: SimSnsSubscriptionStore;
+    readonly access: SimSnsTopicAccess;
+}
+/**
+ * The commands that list and delete topics.
+ */
+export declare class SimSnsTopicCommands {
+    private readonly topics;
+    private readonly subscriptions;
+    private readonly access;
+    constructor(properties: SimSnsTopicCommandsProperties);
+    /**
+     * List the topics in this scope, oldest first.
+     *
+     * Real SNS gives this action no topic-level permission, so it authorizes
+     * against every topic in the Account and Region and does not filter the list
+     * by what the caller can reach.
+     */
+    listTopics(command: SimListTopicsCommand, options?: SimSnsRequestOptions): SimListTopicsCommandOutput;
+    /**
+     * Delete a topic.
+     *
+     * Real SNS frees the name at once, unlike SQS, so a topic can be recreated
+     * under the same name straight away. Deleting a topic that is not there
+     * succeeds, as it does on real SNS, which is why the topic is looked for
+     * rather than required.
+     *
+     * The topic's subscriptions go with it, as they do on real SNS. A topic
+     * recreated under the same name therefore starts with none, and the
+     * subscription ARNs of the deleted topic name nothing.
+     */
+    deleteTopic(command: SimDeleteTopicCommand, options?: SimSnsRequestOptions): SimDeleteTopicCommandOutput;
+}
+export {};
+//# sourceMappingURL=sim-sns-topic-commands.d.ts.map

package/dist/service/sns/command/topic/sim-sns-topic-commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-topic-commands.d.ts","sourceRoot":"","sources":["../../../../../src/service/sns/command/topic/sim-sns-topic-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kDAAkD,CAAC;AAEhG,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAE3E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,KAAK,EACV,qBAAqB,EACrB,2BAA2B,EAC3B,oBAAoB,EACpB,0BAA0B,EAC3B,MAAM,oBAAoB,CAAC;AAE5B,UAAU,6BAA6B;IACrC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,aAAa,EAAE,uBAAuB,CAAC;IAChD,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;CACpC;AAED;;GAEG;AACH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmB;IAC1C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA0B;IACxD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoB;IAE3C,YAAY,UAAU,EAAE,6BAA6B,EAIpD;IAED;;;;;;OAMG;IACH,UAAU,CACR,OAAO,EAAE,oBAAoB,EAC7B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,0BAA0B,CAa5B;IAED;;;;;;;;;;;OAWG;IACH,WAAW,CACT,OAAO,EAAE,qBAAqB,EAC9B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,2BAA2B,CAa7B;CACF"}

package/dist/service/sns/command/topic/sim-sns-topic-commands.js

@@ -0,0 +1,51 @@
+import { SimSnsPage } from "../sim-sns-page.js";
+/**
+ * The commands that list and delete topics.
+ */
+export class SimSnsTopicCommands {
+    topics;
+    subscriptions;
+    access;
+    constructor(properties) {
+        this.topics = properties.topics;
+        this.subscriptions = properties.subscriptions;
+        this.access = properties.access;
+    }
+    /**
+     * List the topics in this scope, oldest first.
+     *
+     * Real SNS gives this action no topic-level permission, so it authorizes
+     * against every topic in the Account and Region and does not filter the list
+     * by what the caller can reach.
+     */
+    listTopics(command, options) {
+        this.access.authorizeAnyTopic("sns:ListTopics", options);
+        const page = new SimSnsPage(this.topics.all, command.input.NextToken);
+        return {
+            $metadata: {},
+            Topics: page.items.map((topic) => ({ TopicArn: topic.arn.value })),
+            NextToken: page.nextToken,
+        };
+    }
+    /**
+     * Delete a topic.
+     *
+     * Real SNS frees the name at once, unlike SQS, so a topic can be recreated
+     * under the same name straight away. Deleting a topic that is not there
+     * succeeds, as it does on real SNS, which is why the topic is looked for
+     * rather than required.
+     *
+     * The topic's subscriptions go with it, as they do on real SNS. A topic
+     * recreated under the same name therefore starts with none, and the
+     * subscription ARNs of the deleted topic name nothing.
+     */
+    deleteTopic(command, options) {
+        const topic = this.access.findByArn("sns:DeleteTopic", command.input.TopicArn, options);
+        if (topic !== undefined) {
+            this.subscriptions.removeForTopic(topic.name.value);
+            this.topics.remove(topic);
+        }
+        return { $metadata: {} };
+    }
+}
+//# sourceMappingURL=sim-sns-topic-commands.js.map

package/dist/service/sns/command/topic/sim-sns-topic-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-topic-commands.js","sourceRoot":"","sources":["../../../../../src/service/sns/command/topic/sim-sns-topic-commands.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAgBhD;;GAEG;AACH,MAAM,OAAO,mBAAmB;IACb,MAAM,CAAmB;IACzB,aAAa,CAA0B;IACvC,MAAM,CAAoB;IAE3C,YAAY,UAAyC;QACnD,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;QAC9C,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAClC,CAAC;IAED;;;;;;OAMG;IACH,UAAU,CACR,OAA6B,EAC7B,OAA8B;QAE9B,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;QAEzD,MAAM,IAAI,GAAG,IAAI,UAAU,CACzB,IAAI,CAAC,MAAM,CAAC,GAAG,EACf,OAAO,CAAC,KAAK,CAAC,SAAS,CACxB,CAAC;QAEF,OAAO;YACL,SAAS,EAAE,EAAE;YACb,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;YAClE,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;OAWG;IACH,WAAW,CACT,OAA8B,EAC9B,OAA8B;QAE9B,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CACjC,iBAAiB,EACjB,OAAO,CAAC,KAAK,CAAC,QAAQ,EACtB,OAAO,CACR,CAAC;QAEF,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;QAED,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC3B,CAAC;CACF"}

package/dist/service/sns/command/topic/sim-sns-unsimulated-topic-input.d.ts

@@ -0,0 +1,11 @@
+import type { SimCreateTopicCommandInput } from "./topic.command.js";
+/**
+ * Refuse the topic request inputs this simulation does not model.
+ *
+ * Dropping a tag would leave a topic looking tagged to the request that sent it
+ * and untagged to everything else, and a data protection policy that redacted
+ * nothing would be a policy a test believed was protecting the messages going
+ * through the topic. Both are refused instead.
+ */
+export declare function refuseUnsimulatedTopicInput(input: SimCreateTopicCommandInput): void;
+//# sourceMappingURL=sim-sns-unsimulated-topic-input.d.ts.map

package/dist/service/sns/command/topic/sim-sns-unsimulated-topic-input.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-unsimulated-topic-input.d.ts","sourceRoot":"","sources":["../../../../../src/service/sns/command/topic/sim-sns-unsimulated-topic-input.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AAErE;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,0BAA0B,GAChC,IAAI,CAcN"}

package/dist/service/sns/command/topic/sim-sns-unsimulated-topic-input.js

@@ -0,0 +1,20 @@
+import { SimSnsUnsimulatedInputException } from "../../error/sim-sns.error.js";
+/**
+ * Refuse the topic request inputs this simulation does not model.
+ *
+ * Dropping a tag would leave a topic looking tagged to the request that sent it
+ * and untagged to everything else, and a data protection policy that redacted
+ * nothing would be a policy a test believed was protecting the messages going
+ * through the topic. Both are refused instead.
+ */
+export function refuseUnsimulatedTopicInput(input) {
+    if (input.Tags !== undefined) {
+        throw new SimSnsUnsimulatedInputException("Topic tags are not simulated, so CreateTopic refuses them rather than " +
+            "dropping them");
+    }
+    if (input.DataProtectionPolicy !== undefined) {
+        throw new SimSnsUnsimulatedInputException("Data protection policies are not simulated, so CreateTopic refuses " +
+            "one rather than creating a topic that redacts nothing");
+    }
+}
+//# sourceMappingURL=sim-sns-unsimulated-topic-input.js.map

package/dist/service/sns/command/topic/sim-sns-unsimulated-topic-input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-unsimulated-topic-input.js","sourceRoot":"","sources":["../../../../../src/service/sns/command/topic/sim-sns-unsimulated-topic-input.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,+BAA+B,EAAE,MAAM,8BAA8B,CAAC;AAG/E;;;;;;;GAOG;AACH,MAAM,UAAU,2BAA2B,CACzC,KAAiC;IAEjC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,+BAA+B,CACvC,wEAAwE;YACtE,eAAe,CAClB,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;QAC7C,MAAM,IAAI,+BAA+B,CACvC,qEAAqE;YACnE,uDAAuD,CAC1D,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/service/sns/command/topic/topic.command.d.ts

@@ -0,0 +1,95 @@
+import type { SimResponseMetadata } from "../../../aws/metadata/response-metadata.type.js";
+import type { SimSnsTopicAttributeInput } from "../../topic/sim-sns-topic-attributes.js";
+/**
+ * One topic in a ListTopics response, which carries the ARN and nothing else.
+ */
+export interface SimSnsListedTopic {
+    readonly TopicArn: string;
+}
+/**
+ * Minimal structural sim SNS CreateTopic command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/sns/command/CreateTopicCommand/
+ */
+export interface SimCreateTopicCommand {
+    readonly input: SimCreateTopicCommandInput;
+}
+export interface SimCreateTopicCommandInput {
+    readonly Name?: string | undefined;
+    readonly Attributes?: SimSnsTopicAttributeInput | undefined;
+    readonly Tags?: readonly SimSnsTag[] | undefined;
+    readonly DataProtectionPolicy?: string | undefined;
+}
+/**
+ * One tag as a CreateTopic request carries it.
+ */
+export interface SimSnsTag {
+    readonly Key?: string | undefined;
+    readonly Value?: string | undefined;
+}
+export interface SimCreateTopicCommandOutput {
+    readonly TopicArn?: string | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * Minimal structural sim SNS DeleteTopic command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/sns/command/DeleteTopicCommand/
+ */
+export interface SimDeleteTopicCommand {
+    readonly input: SimDeleteTopicCommandInput;
+}
+export interface SimDeleteTopicCommandInput {
+    readonly TopicArn?: string | undefined;
+}
+export interface SimDeleteTopicCommandOutput {
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * Minimal structural sim SNS ListTopics command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/sns/command/ListTopicsCommand/
+ */
+export interface SimListTopicsCommand {
+    readonly input: SimListTopicsCommandInput;
+}
+export interface SimListTopicsCommandInput {
+    readonly NextToken?: string | undefined;
+}
+export interface SimListTopicsCommandOutput {
+    readonly Topics?: readonly SimSnsListedTopic[] | undefined;
+    readonly NextToken?: string | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * Minimal structural sim SNS GetTopicAttributes command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/sns/command/GetTopicAttributesCommand/
+ */
+export interface SimGetTopicAttributesCommand {
+    readonly input: SimGetTopicAttributesCommandInput;
+}
+export interface SimGetTopicAttributesCommandInput {
+    readonly TopicArn?: string | undefined;
+}
+export interface SimGetTopicAttributesCommandOutput {
+    readonly Attributes?: Record<string, string> | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * Minimal structural sim SNS SetTopicAttributes command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/sns/command/SetTopicAttributesCommand/
+ */
+export interface SimSetTopicAttributesCommand {
+    readonly input: SimSetTopicAttributesCommandInput;
+}
+export interface SimSetTopicAttributesCommandInput {
+    readonly TopicArn?: string | undefined;
+    readonly AttributeName?: string | undefined;
+    readonly AttributeValue?: string | undefined;
+}
+export interface SimSetTopicAttributesCommandOutput {
+    readonly $metadata: SimResponseMetadata;
+}
+//# sourceMappingURL=topic.command.d.ts.map

package/dist/service/sns/command/topic/topic.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"topic.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/sns/command/topic/topic.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AAEzF;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,EAAE,0BAA0B,CAAC;CAC5C;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,UAAU,CAAC,EAAE,yBAAyB,GAAG,SAAS,CAAC;IAC5D,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,SAAS,EAAE,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACpD;AAED;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACrC;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,EAAE,0BAA0B,CAAC;CAC5C;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACxC;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,yBAAyB,CAAC;CAC3C;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACzC;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,iBAAiB,EAAE,GAAG,SAAS,CAAC;IAC3D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,KAAK,EAAE,iCAAiC,CAAC;CACnD;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACxC;AAED,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;IACzD,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,KAAK,EAAE,iCAAiC,CAAC;CACnD;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC9C;AAED,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC"}

package/dist/service/sns/command/topic/topic.command.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=topic.command.js.map

package/dist/service/sns/command/topic/topic.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"topic.command.js","sourceRoot":"","sources":["../../../../../src/service/sns/command/topic/topic.command.ts"],"names":[],"mappings":""}

package/dist/service/sns/delivery/lambda/sim-aws-sns-delivery-functions.d.ts

@@ -0,0 +1,27 @@
+import type { SimAws } from "../../../aws/sim-aws.js";
+import type { SimSnsDeliveryEndpoints, SimSnsDeliveryRequest } from "../sim-sns-delivery.js";
+interface SimAwsSnsDeliveryFunctionsProperties {
+    readonly simAws: SimAws;
+}
+/**
+ * The simulated Lambda functions of one simulated AWS instance, as places a
+ * topic delivers to.
+ *
+ * The function is looked up when a message is delivered, never when this is
+ * built, for the same reason the delivery queues do it that way: reaching
+ * another service while this one is being constructed is a cycle with no bottom
+ * to it.
+ *
+ * A function in another Account or another Region is allowed, since real SNS
+ * invokes both.
+ */
+export declare class SimAwsSnsDeliveryFunctions implements SimSnsDeliveryEndpoints {
+    private readonly simAws;
+    constructor(properties: SimAwsSnsDeliveryFunctionsProperties);
+    /**
+     * Deliver one message to the function its subscription's endpoint names.
+     */
+    deliver(request: SimSnsDeliveryRequest): Promise<void>;
+}
+export {};
+//# sourceMappingURL=sim-aws-sns-delivery-functions.d.ts.map

package/dist/service/sns/delivery/lambda/sim-aws-sns-delivery-functions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-aws-sns-delivery-functions.d.ts","sourceRoot":"","sources":["../../../../../src/service/sns/delivery/lambda/sim-aws-sns-delivery-functions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAEtD,OAAO,KAAK,EACV,uBAAuB,EACvB,qBAAqB,EACtB,MAAM,wBAAwB,CAAC;AAGhC,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,0BAA2B,YAAW,uBAAuB;IACxE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAEhC,YAAY,UAAU,EAAE,oCAAoC,EAE3D;IAED;;OAEG;IACG,OAAO,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAS3D;CACF"}

package/dist/service/sns/delivery/lambda/sim-aws-sns-delivery-functions.js

@@ -0,0 +1,31 @@
+import { SimSnsFunctionEndpointArn } from "../../subscription/sim-sns-function-endpoint-arn.js";
+import { SimSnsDeliveryFunction } from "./sim-sns-delivery-function.js";
+/**
+ * The simulated Lambda functions of one simulated AWS instance, as places a
+ * topic delivers to.
+ *
+ * The function is looked up when a message is delivered, never when this is
+ * built, for the same reason the delivery queues do it that way: reaching
+ * another service while this one is being constructed is a cycle with no bottom
+ * to it.
+ *
+ * A function in another Account or another Region is allowed, since real SNS
+ * invokes both.
+ */
+export class SimAwsSnsDeliveryFunctions {
+    simAws;
+    constructor(properties) {
+        this.simAws = properties.simAws;
+    }
+    /**
+     * Deliver one message to the function its subscription's endpoint names.
+     */
+    async deliver(request) {
+        const arn = SimSnsFunctionEndpointArn.parse(request.subscription.endpoint.value);
+        await new SimSnsDeliveryFunction({
+            arn,
+            scope: this.simAws.accountRegionScope(arn.accountId, arn.regionName),
+        }).deliver(request);
+    }
+}
+//# sourceMappingURL=sim-aws-sns-delivery-functions.js.map

package/dist/service/sns/delivery/lambda/sim-aws-sns-delivery-functions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-aws-sns-delivery-functions.js","sourceRoot":"","sources":["../../../../../src/service/sns/delivery/lambda/sim-aws-sns-delivery-functions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,yBAAyB,EAAE,MAAM,qDAAqD,CAAC;AAKhG,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAMxE;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,0BAA0B;IACpB,MAAM,CAAS;IAEhC,YAAY,UAAgD;QAC1D,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CAAC,OAA8B;QAC1C,MAAM,GAAG,GAAG,yBAAyB,CAAC,KAAK,CACzC,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CACpC,CAAC;QAEF,MAAM,IAAI,sBAAsB,CAAC;YAC/B,GAAG;YACH,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,UAAU,CAAC;SACrE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACtB,CAAC;CACF"}

package/dist/service/sns/delivery/lambda/sim-sns-delivery-function.d.ts

@@ -0,0 +1,31 @@
+import type { SimAwsAccountRegionContainer } from "../../../aws/sim-aws-account-region-scope.js";
+import type { SimSnsFunctionEndpointArn } from "../../subscription/sim-sns-function-endpoint-arn.js";
+import { type SimSnsDeliveryRequest } from "../sim-sns-delivery.js";
+interface SimSnsDeliveryFunctionProperties {
+    readonly arn: SimSnsFunctionEndpointArn;
+    readonly scope: SimAwsAccountRegionContainer;
+}
+/**
+ * One function a simulated topic is delivering to, in the Account and Region
+ * its ARN names.
+ *
+ * Everything is asked of the function's own Account, which is what makes a
+ * function in another Account reachable: its resource policy is the grant, and
+ * its Account's IAM is what evaluates it.
+ */
+export declare class SimSnsDeliveryFunction {
+    private readonly arn;
+    private readonly scope;
+    constructor(properties: SimSnsDeliveryFunctionProperties);
+    /**
+     * Invoke the function with the event, if it still admits SNS for this topic.
+     *
+     * The resource policy is consulted on every delivery rather than remembered
+     * from the moment the subscription was made, so a permission taken away
+     * afterwards stops delivery. Real SNS does not check it at `Subscribe` time
+     * at all, which is why this is the only place it is asked.
+     */
+    deliver(request: SimSnsDeliveryRequest): Promise<void>;
+}
+export {};
+//# sourceMappingURL=sim-sns-delivery-function.d.ts.map

package/dist/service/sns/delivery/lambda/sim-sns-delivery-function.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-delivery-function.d.ts","sourceRoot":"","sources":["../../../../../src/service/sns/delivery/lambda/sim-sns-delivery-function.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,8CAA8C,CAAC;AAIjG,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,qDAAqD,CAAC;AACrG,OAAO,EACL,KAAK,qBAAqB,EAG3B,MAAM,wBAAwB,CAAC;AAGhC,UAAU,gCAAgC;IACxC,QAAQ,CAAC,GAAG,EAAE,yBAAyB,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,4BAA4B,CAAC;CAC9C;AAED;;;;;;;GAOG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA4B;IAChD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA+B;IAErD,YAAY,UAAU,EAAE,gCAAgC,EAGvD;IAED;;;;;;;OAOG;IACG,OAAO,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAuC3D;CACF"}

package/dist/service/sns/delivery/lambda/sim-sns-delivery-function.js

@@ -0,0 +1,62 @@
+import { SimLambdaServiceInvokeAuthorizer } from "../../../lambda/command/authorize/sim-lambda-service-invoke-authorizer.js";
+import { SimSnsDeliveryNotPermitted } from "../../error/sim-sns-delivery.error.js";
+import { SimSnsNotFoundException } from "../../error/sim-sns.error.js";
+import { simSnsDeliverySource, simSnsServicePrincipal, } from "../sim-sns-delivery.js";
+import { simSnsLambdaEventDocument } from "./sim-sns-lambda-event.js";
+/**
+ * One function a simulated topic is delivering to, in the Account and Region
+ * its ARN names.
+ *
+ * Everything is asked of the function's own Account, which is what makes a
+ * function in another Account reachable: its resource policy is the grant, and
+ * its Account's IAM is what evaluates it.
+ */
+export class SimSnsDeliveryFunction {
+    arn;
+    scope;
+    constructor(properties) {
+        this.arn = properties.arn;
+        this.scope = properties.scope;
+    }
+    /**
+     * Invoke the function with the event, if it still admits SNS for this topic.
+     *
+     * The resource policy is consulted on every delivery rather than remembered
+     * from the moment the subscription was made, so a permission taken away
+     * afterwards stops delivery. Real SNS does not check it at `Subscribe` time
+     * at all, which is why this is the only place it is asked.
+     */
+    async deliver(request) {
+        const source = simSnsDeliverySource(request);
+        const endpointArn = request.subscription.endpoint.value;
+        const simFunction = this.scope
+            .lambda()
+            .getSimFunctionByName(this.arn.functionName);
+        if (simFunction === undefined) {
+            // Not a refusal: the resource policy said nothing, because there is no
+            // function. A subscription pointing at nothing is a mistake worth
+            // warning about, where a policy saying no is a modelled outcome a test
+            // may be asking for on purpose.
+            throw new SimSnsNotFoundException(`${endpointArn} is not a simulated Lambda function.`);
+        }
+        const decision = new SimLambdaServiceInvokeAuthorizer({
+            iam: this.scope.iam(),
+        }).authorize({
+            simFunction,
+            servicePrincipal: simSnsServicePrincipal,
+            ...source,
+        });
+        if (decision.isDenied) {
+            throw new SimSnsDeliveryNotPermitted(`The resource policy of ${endpointArn} does not allow ` +
+                `${simSnsServicePrincipal} to invoke it for ${source.sourceArn}. ` +
+                "Grant it with AddPermission.");
+        }
+        // The function is invoked directly rather than through an Invoke command,
+        // because SNS is already inside the background task that stands for the
+        // asynchronous invocation real SNS makes, and because a handler failure
+        // has to reach the delivery outcome rather than being swallowed as an
+        // asynchronous invocation error.
+        await simFunction.invoke(simSnsLambdaEventDocument(request));
+    }
+}
+//# sourceMappingURL=sim-sns-delivery-function.js.map

package/dist/service/sns/delivery/lambda/sim-sns-delivery-function.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-delivery-function.js","sourceRoot":"","sources":["../../../../../src/service/sns/delivery/lambda/sim-sns-delivery-function.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gCAAgC,EAAE,MAAM,2EAA2E,CAAC;AAC7H,OAAO,EAAE,0BAA0B,EAAE,MAAM,uCAAuC,CAAC;AACnF,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAEvE,OAAO,EAEL,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAOtE;;;;;;;GAOG;AACH,MAAM,OAAO,sBAAsB;IAChB,GAAG,CAA4B;IAC/B,KAAK,CAA+B;IAErD,YAAY,UAA4C;QACtD,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;QAC1B,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAChC,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,OAAO,CAAC,OAA8B;QAC1C,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC;QACxD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK;aAC3B,MAAM,EAAE;aACR,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAE/C,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,uEAAuE;YACvE,kEAAkE;YAClE,uEAAuE;YACvE,gCAAgC;YAChC,MAAM,IAAI,uBAAuB,CAC/B,GAAG,WAAW,sCAAsC,CACrD,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,gCAAgC,CAAC;YACpD,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;SACtB,CAAC,CAAC,SAAS,CAAC;YACX,WAAW;YACX,gBAAgB,EAAE,sBAAsB;YACxC,GAAG,MAAM;SACV,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,0BAA0B,CAClC,0BAA0B,WAAW,kBAAkB;gBACrD,GAAG,sBAAsB,qBAAqB,MAAM,CAAC,SAAS,IAAI;gBAClE,8BAA8B,CACjC,CAAC;QACJ,CAAC;QAED,0EAA0E;QAC1E,wEAAwE;QACxE,wEAAwE;QACxE,sEAAsE;QACtE,iCAAiC;QACjC,MAAM,WAAW,CAAC,MAAM,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/D,CAAC;CACF"}

package/dist/service/sns/delivery/lambda/sim-sns-lambda-event.d.ts

@@ -0,0 +1,10 @@
+import type { SimSnsDeliveryRequest } from "../sim-sns-delivery.js";
+/**
+ * The event one subscribed Lambda function is invoked with.
+ *
+ * `Records` always holds exactly one entry, even for a `PublishBatch`. Real SNS
+ * does not batch to Lambda: each published message is its own asynchronous
+ * invocation, so a handler looping over `Records` sees one message per call.
+ */
+export declare function simSnsLambdaEventDocument(request: SimSnsDeliveryRequest): object;
+//# sourceMappingURL=sim-sns-lambda-event.d.ts.map

package/dist/service/sns/delivery/lambda/sim-sns-lambda-event.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-lambda-event.d.ts","sourceRoot":"","sources":["../../../../../src/service/sns/delivery/lambda/sim-sns-lambda-event.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAcpE;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,qBAAqB,GAC7B,MAAM,CAWR"}

package/dist/service/sns/delivery/lambda/sim-sns-lambda-event.js

@@ -0,0 +1,53 @@
+/**
+ * What the `EventSource` of an SNS record says, which is how a handler taking
+ * events from more than one service tells them apart.
+ */
+const eventSource = "aws:sns";
+/**
+ * The version of the SNS record shape, which real SNS has never moved off.
+ */
+const eventVersion = "1.0";
+/**
+ * The event one subscribed Lambda function is invoked with.
+ *
+ * `Records` always holds exactly one entry, even for a `PublishBatch`. Real SNS
+ * does not batch to Lambda: each published message is its own asynchronous
+ * invocation, so a handler looping over `Records` sees one message per call.
+ */
+export function simSnsLambdaEventDocument(request) {
+    return {
+        Records: [
+            {
+                EventSource: eventSource,
+                EventVersion: eventVersion,
+                EventSubscriptionArn: request.subscription.arn.value,
+                Sns: snsRecord(request.notification.fields()),
+            },
+        ],
+    };
+}
+/**
+ * The notification as the `Sns` object of a record spells it.
+ *
+ * Two fields differ from the envelope a queue receives, and the difference is
+ * real SNS behaviour rather than an oversight: the envelope has `SigningCertURL`
+ * and `UnsubscribeURL`, and a Lambda event has `SigningCertUrl` and
+ * `UnsubscribeUrl`. `Subject` and `MessageAttributes` are always present here,
+ * where the envelope leaves each out when there is nothing to put in it.
+ */
+function snsRecord(fields) {
+    return {
+        Type: fields.type,
+        MessageId: fields.messageId,
+        TopicArn: fields.topicArn,
+        Subject: fields.subject ?? null,
+        Message: fields.message,
+        Timestamp: fields.timestamp,
+        SignatureVersion: fields.signature.SignatureVersion,
+        Signature: fields.signature.Signature,
+        SigningCertUrl: fields.signature.SigningCertURL,
+        UnsubscribeUrl: fields.unsubscribeUrl,
+        MessageAttributes: fields.messageAttributes,
+    };
+}
+//# sourceMappingURL=sim-sns-lambda-event.js.map

package/dist/service/sns/delivery/lambda/sim-sns-lambda-event.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-lambda-event.js","sourceRoot":"","sources":["../../../../../src/service/sns/delivery/lambda/sim-sns-lambda-event.ts"],"names":[],"mappings":"AAGA;;;GAGG;AACH,MAAM,WAAW,GAAG,SAAS,CAAC;AAE9B;;GAEG;AACH,MAAM,YAAY,GAAG,KAAK,CAAC;AAE3B;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CACvC,OAA8B;IAE9B,OAAO;QACL,OAAO,EAAE;YACP;gBACE,WAAW,EAAE,WAAW;gBACxB,YAAY,EAAE,YAAY;gBAC1B,oBAAoB,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK;gBACpD,GAAG,EAAE,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;aAC9C;SACF;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,SAAS,CAAC,MAAgC;IACjD,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;QAC/B,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,gBAAgB,EAAE,MAAM,CAAC,SAAS,CAAC,gBAAgB;QACnD,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,SAAS;QACrC,cAAc,EAAE,MAAM,CAAC,SAAS,CAAC,cAAc;QAC/C,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;KAC5C,CAAC;AACJ,CAAC"}

package/dist/service/sns/delivery/sim-aws-sns-delivery-endpoints.d.ts

@@ -0,0 +1,17 @@
+import type { SimAws } from "../../aws/sim-aws.js";
+import { SimSnsProtocolDeliveryEndpoints } from "./sim-sns-protocol-delivery-endpoints.js";
+interface SimAwsSnsDeliveryEndpointsProperties {
+    readonly simAws: SimAws;
+}
+/**
+ * Everywhere the topics of one simulated AWS instance can deliver.
+ *
+ * Which protocols are simulated is a fact about simulated SNS rather than about
+ * the service builder that hands it its endpoints, so the set is assembled
+ * here.
+ */
+export declare class SimAwsSnsDeliveryEndpoints extends SimSnsProtocolDeliveryEndpoints {
+    constructor(properties: SimAwsSnsDeliveryEndpointsProperties);
+}
+export {};
+//# sourceMappingURL=sim-aws-sns-delivery-endpoints.d.ts.map

package/dist/service/sns/delivery/sim-aws-sns-delivery-endpoints.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-aws-sns-delivery-endpoints.d.ts","sourceRoot":"","sources":["../../../../src/service/sns/delivery/sim-aws-sns-delivery-endpoints.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAEnD,OAAO,EAAE,+BAA+B,EAAE,MAAM,0CAA0C,CAAC;AAG3F,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;GAMG;AACH,qBAAa,0BAA2B,SAAQ,+BAA+B;IAC7E,YAAY,UAAU,EAAE,oCAAoC,EAO3D;CACF"}

package/dist/service/sns/delivery/sim-aws-sns-delivery-endpoints.js

@@ -0,0 +1,21 @@
+import { SimAwsSnsDeliveryFunctions } from "./lambda/sim-aws-sns-delivery-functions.js";
+import { SimSnsProtocolDeliveryEndpoints } from "./sim-sns-protocol-delivery-endpoints.js";
+import { SimAwsSnsDeliveryQueues } from "./sqs/sim-aws-sns-delivery-queues.js";
+/**
+ * Everywhere the topics of one simulated AWS instance can deliver.
+ *
+ * Which protocols are simulated is a fact about simulated SNS rather than about
+ * the service builder that hands it its endpoints, so the set is assembled
+ * here.
+ */
+export class SimAwsSnsDeliveryEndpoints extends SimSnsProtocolDeliveryEndpoints {
+    constructor(properties) {
+        super({
+            byProtocol: {
+                sqs: new SimAwsSnsDeliveryQueues(properties),
+                lambda: new SimAwsSnsDeliveryFunctions(properties),
+            },
+        });
+    }
+}
+//# sourceMappingURL=sim-aws-sns-delivery-endpoints.js.map

package/dist/service/sns/delivery/sim-aws-sns-delivery-endpoints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-aws-sns-delivery-endpoints.js","sourceRoot":"","sources":["../../../../src/service/sns/delivery/sim-aws-sns-delivery-endpoints.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,EAAE,+BAA+B,EAAE,MAAM,0CAA0C,CAAC;AAC3F,OAAO,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AAM/E;;;;;;GAMG;AACH,MAAM,OAAO,0BAA2B,SAAQ,+BAA+B;IAC7E,YAAY,UAAgD;QAC1D,KAAK,CAAC;YACJ,UAAU,EAAE;gBACV,GAAG,EAAE,IAAI,uBAAuB,CAAC,UAAU,CAAC;gBAC5C,MAAM,EAAE,IAAI,0BAA0B,CAAC,UAAU,CAAC;aACnD;SACF,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/sns/delivery/sim-sns-canonical-message.d.ts

@@ -0,0 +1,32 @@
+/**
+ * The values real SNS signs, under the names it signs them by.
+ *
+ * A verifier rebuilds this from the document it received, so the names are the
+ * document's rather than the simulator's.
+ */
+export interface SimSnsSignedValues {
+    readonly Message: string;
+    readonly MessageId: string;
+    readonly Subject: string | undefined;
+    readonly Timestamp: string;
+    readonly TopicArn: string;
+    readonly Type: string;
+}
+/**
+ * The string real SNS signs, which is what a verifier rebuilds to check the
+ * signature.
+ *
+ * Each signed field is its name and its value, both followed by a newline, in
+ * the alphabetical order of the names. The names are sorted here rather than
+ * taken in the order they were passed in: an object keeps the order its keys
+ * were written in, so a caller writing the same fields in another order would
+ * otherwise produce a string no verifier could rebuild.
+ *
+ * A field with no value is left out rather than signed as an empty string,
+ * which is what makes a message published without a subject verify.
+ *
+ * The message attributes are not signed, here or on real AWS, so changing one
+ * in flight leaves the signature valid.
+ */
+export declare function simSnsCanonicalMessage(values: SimSnsSignedValues): string;
+//# sourceMappingURL=sim-sns-canonical-message.d.ts.map

package/dist/service/sns/delivery/sim-sns-canonical-message.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-canonical-message.d.ts","sourceRoot":"","sources":["../../../../src/service/sns/delivery/sim-sns-canonical-message.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,kBAAkB,GAAG,MAAM,CAMzE"}

package/dist/service/sns/delivery/sim-sns-canonical-message.js

@@ -0,0 +1,24 @@
+/**
+ * The string real SNS signs, which is what a verifier rebuilds to check the
+ * signature.
+ *
+ * Each signed field is its name and its value, both followed by a newline, in
+ * the alphabetical order of the names. The names are sorted here rather than
+ * taken in the order they were passed in: an object keeps the order its keys
+ * were written in, so a caller writing the same fields in another order would
+ * otherwise produce a string no verifier could rebuild.
+ *
+ * A field with no value is left out rather than signed as an empty string,
+ * which is what makes a message published without a subject verify.
+ *
+ * The message attributes are not signed, here or on real AWS, so changing one
+ * in flight leaves the signature valid.
+ */
+export function simSnsCanonicalMessage(values) {
+    return Object.entries(values)
+        .filter(([, value]) => value !== undefined)
+        .toSorted(([left], [right]) => left.localeCompare(right))
+        .map(([name, value]) => `${name}\n${String(value)}\n`)
+        .join("");
+}
+//# sourceMappingURL=sim-sns-canonical-message.js.map

package/dist/service/sns/delivery/sim-sns-canonical-message.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-canonical-message.js","sourceRoot":"","sources":["../../../../src/service/sns/delivery/sim-sns-canonical-message.ts"],"names":[],"mappings":"AAeA;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAA0B;IAC/D,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;SAC1B,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC;SAC1C,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;SACxD,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;SACrD,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC"}