@kensio/yulin 1.9.0 → 1.10.1

package/dist/service/sns/topic/sim-sns-topic-attributes.d.ts

@@ -0,0 +1,56 @@
+import { SimSnsTopicPolicy } from "./sim-sns-topic-policy.js";
+/**
+ * Topic attributes as a request carries them, which is always as strings.
+ */
+export type SimSnsTopicAttributeInput = Readonly<Record<string, string | undefined>>;
+/**
+ * The attributes of one simulated topic that a request can set.
+ *
+ * Real SNS has many more, and this simulation refuses the ones it gives no
+ * behaviour to rather than holding them, so what is here is what does
+ * something. The display name is carried because SNS reports it whether or not
+ * it has been set, and the policy is carried because it is the topic's resource
+ * policy.
+ *
+ * Applying a request makes a new set rather than changing this one, so a
+ * request that turns out to name an attribute this simulation will not take
+ * leaves the topic as it was.
+ */
+export declare class SimSnsTopicAttributes {
+    readonly displayName: string;
+    readonly policy: SimSnsTopicPolicy | undefined;
+    private constructor();
+    /**
+     * The attributes a topic has before anything sets one.
+     *
+     * Real SNS reports an empty display name for a topic created without one,
+     * rather than leaving the attribute out.
+     */
+    static defaults(): SimSnsTopicAttributes;
+    /**
+     * These attributes with a request's changes applied.
+     *
+     * Every name is checked before any value is read, so a request naming one
+     * attribute this simulation will not take changes none of them.
+     */
+    with(requested: SimSnsTopicAttributeInput): SimSnsTopicAttributes;
+    /**
+     * Add these attributes to what SNS reports about the topic.
+     *
+     * The display name is always reported, as real SNS reports it. The policy is
+     * reported only once one has been set, since a topic without one has no value
+     * for the attribute.
+     */
+    reportInto(reported: Map<string, string>): void;
+    private displayNameAfter;
+    /**
+     * The policy these attributes hold after a request.
+     *
+     * An empty string takes the policy off the topic, which is how SNS is told to
+     * remove one: there is no DeleteTopicPolicy, so setting the attribute to
+     * nothing is the only way back to a topic without one.
+     */
+    private policyAfter;
+    private valueIn;
+}
+//# sourceMappingURL=sim-sns-topic-attributes.d.ts.map

package/dist/service/sns/topic/sim-sns-topic-attributes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-topic-attributes.d.ts","sourceRoot":"","sources":["../../../../src/service/sns/topic/sim-sns-topic-attributes.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAE9D;;GAEG;AACH,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAC9C,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CACnC,CAAC;AAOF;;;;;;;;;;;;GAYG;AACH,qBAAa,qBAAqB;IAChC,SAAgB,WAAW,EAAE,MAAM,CAAC;IACpC,SAAgB,MAAM,EAAE,iBAAiB,GAAG,SAAS,CAAC;IAEtD,OAAO,eAGN;IAED;;;;;OAKG;IACH,MAAM,CAAC,QAAQ,IAAI,qBAAqB,CAEvC;IAED;;;;;OAKG;IACH,IAAI,CAAC,SAAS,EAAE,yBAAyB,GAAG,qBAAqB,CAahE;IAED;;;;;;OAMG;IACH,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAM9C;IAED,OAAO,CAAC,gBAAgB;IAMxB;;;;;;OAMG;IACH,OAAO,CAAC,WAAW;IAgBnB,OAAO,CAAC,OAAO;CAMhB"}

package/dist/service/sns/topic/sim-sns-topic-attributes.js

@@ -0,0 +1,85 @@
+import { assertSimSnsSettableAttribute, simSnsDisplayNameAttributeName, simSnsPolicyAttributeName, } from "./sim-sns-topic-attribute-names.js";
+import { SimSnsTopicPolicy } from "./sim-sns-topic-policy.js";
+/**
+ * The attributes of one simulated topic that a request can set.
+ *
+ * Real SNS has many more, and this simulation refuses the ones it gives no
+ * behaviour to rather than holding them, so what is here is what does
+ * something. The display name is carried because SNS reports it whether or not
+ * it has been set, and the policy is carried because it is the topic's resource
+ * policy.
+ *
+ * Applying a request makes a new set rather than changing this one, so a
+ * request that turns out to name an attribute this simulation will not take
+ * leaves the topic as it was.
+ */
+export class SimSnsTopicAttributes {
+    displayName;
+    policy;
+    constructor(properties) {
+        this.displayName = properties.displayName;
+        this.policy = properties.policy;
+    }
+    /**
+     * The attributes a topic has before anything sets one.
+     *
+     * Real SNS reports an empty display name for a topic created without one,
+     * rather than leaving the attribute out.
+     */
+    static defaults() {
+        return new this({ displayName: "", policy: undefined });
+    }
+    /**
+     * These attributes with a request's changes applied.
+     *
+     * Every name is checked before any value is read, so a request naming one
+     * attribute this simulation will not take changes none of them.
+     */
+    with(requested) {
+        const named = Object.entries(requested).filter((entry) => entry[1] !== undefined);
+        for (const [name] of named) {
+            assertSimSnsSettableAttribute(name);
+        }
+        return new SimSnsTopicAttributes({
+            displayName: this.displayNameAfter(named),
+            policy: this.policyAfter(named),
+        });
+    }
+    /**
+     * Add these attributes to what SNS reports about the topic.
+     *
+     * The display name is always reported, as real SNS reports it. The policy is
+     * reported only once one has been set, since a topic without one has no value
+     * for the attribute.
+     */
+    reportInto(reported) {
+        reported.set(simSnsDisplayNameAttributeName, this.displayName);
+        if (this.policy !== undefined) {
+            reported.set(simSnsPolicyAttributeName, this.policy.value);
+        }
+    }
+    displayNameAfter(named) {
+        return (this.valueIn(named, simSnsDisplayNameAttributeName) ?? this.displayName);
+    }
+    /**
+     * The policy these attributes hold after a request.
+     *
+     * An empty string takes the policy off the topic, which is how SNS is told to
+     * remove one: there is no DeleteTopicPolicy, so setting the attribute to
+     * nothing is the only way back to a topic without one.
+     */
+    policyAfter(named) {
+        const value = this.valueIn(named, simSnsPolicyAttributeName);
+        if (value === undefined) {
+            return this.policy;
+        }
+        if (value === "") {
+            return undefined;
+        }
+        return SimSnsTopicPolicy.parse(value);
+    }
+    valueIn(named, name) {
+        return named.find(([key]) => key === name)?.[1];
+    }
+}
+//# sourceMappingURL=sim-sns-topic-attributes.js.map

package/dist/service/sns/topic/sim-sns-topic-attributes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-topic-attributes.js","sourceRoot":"","sources":["../../../../src/service/sns/topic/sim-sns-topic-attributes.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,6BAA6B,EAC7B,8BAA8B,EAC9B,yBAAyB,GAC1B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAc9D;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,qBAAqB;IAChB,WAAW,CAAS;IACpB,MAAM,CAAgC;IAEtD,YAAoB,UAA2C;QAC7D,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAClC,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,QAAQ;QACb,OAAO,IAAI,IAAI,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED;;;;;OAKG;IACH,IAAI,CAAC,SAAoC;QACvC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,MAAM,CAC5C,CAAC,KAAK,EAA6B,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAC7D,CAAC;QAEF,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC;YAC3B,6BAA6B,CAAC,IAAI,CAAC,CAAC;QACtC,CAAC;QAED,OAAO,IAAI,qBAAqB,CAAC;YAC/B,WAAW,EAAE,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC;YACzC,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;SAChC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,UAAU,CAAC,QAA6B;QACtC,QAAQ,CAAC,GAAG,CAAC,8BAA8B,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAE/D,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC9B,QAAQ,CAAC,GAAG,CAAC,yBAAyB,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAEO,gBAAgB,CAAC,KAAkC;QACzD,OAAO,CACL,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,8BAA8B,CAAC,IAAI,IAAI,CAAC,WAAW,CACxE,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACK,WAAW,CACjB,KAAkC;QAElC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,yBAAyB,CAAC,CAAC;QAE7D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,CAAC;QAED,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YACjB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC;IAEO,OAAO,CACb,KAAkC,EAClC,IAAY;QAEZ,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC;CACF"}

package/dist/service/sns/topic/sim-sns-topic-name.d.ts

@@ -0,0 +1,21 @@
+/**
+ * The name of one simulated topic.
+ *
+ * The name is the whole identity of a topic: it is the resource part of the
+ * ARN with no type separator in front of it, and it is unique within one
+ * Account and Region. Validating it in one place is what keeps a name that
+ * works here one that would work on real AWS.
+ */
+export declare class SimSnsTopicName {
+    readonly value: string;
+    private constructor();
+    /**
+     * Read the topic name a request has to carry.
+     */
+    static required(name: string | undefined): SimSnsTopicName;
+    /**
+     * Read a topic name from request input, refusing one real SNS would refuse.
+     */
+    static of(value: string): SimSnsTopicName;
+}
+//# sourceMappingURL=sim-sns-topic-name.d.ts.map

package/dist/service/sns/topic/sim-sns-topic-name.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-topic-name.d.ts","sourceRoot":"","sources":["../../../../src/service/sns/topic/sim-sns-topic-name.ts"],"names":[],"mappings":"AAcA;;;;;;;GAOG;AACH,qBAAa,eAAe;IAC1B,SAAgB,KAAK,EAAE,MAAM,CAAC;IAE9B,OAAO,eAEN;IAED;;OAEG;IACH,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,eAAe,CAQzD;IAED;;OAEG;IACH,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,CAkBxC;CACF"}

package/dist/service/sns/topic/sim-sns-topic-name.js

@@ -0,0 +1,48 @@
+import { SimSnsInvalidParameterException, SimSnsUnsimulatedInputException, } from "../error/sim-sns.error.js";
+/**
+ * Real SNS allows alphanumeric characters, hyphens and underscores, up to 256
+ * characters. A FIFO topic name additionally ends in `.fifo`, which is the only
+ * way a period gets into a name.
+ */
+const topicNamePattern = /^[\w-]{1,256}$/;
+const fifoSuffix = ".fifo";
+/**
+ * The name of one simulated topic.
+ *
+ * The name is the whole identity of a topic: it is the resource part of the
+ * ARN with no type separator in front of it, and it is unique within one
+ * Account and Region. Validating it in one place is what keeps a name that
+ * works here one that would work on real AWS.
+ */
+export class SimSnsTopicName {
+    value;
+    constructor(value) {
+        this.value = value;
+    }
+    /**
+     * Read the topic name a request has to carry.
+     */
+    static required(name) {
+        if (name === undefined || name === "") {
+            throw new SimSnsInvalidParameterException("Invalid parameter: Name is required");
+        }
+        return this.of(name);
+    }
+    /**
+     * Read a topic name from request input, refusing one real SNS would refuse.
+     */
+    static of(value) {
+        if (value.endsWith(fifoSuffix)) {
+            throw new SimSnsUnsimulatedInputException(`Topic name '${value}' names a FIFO topic, which simulated SNS does ` +
+                `not support. Only standard topics are simulated.`);
+        }
+        if (!topicNamePattern.test(value)) {
+            throw new SimSnsInvalidParameterException(`Invalid parameter: Topic Name '${value}' is invalid. Topic names ` +
+                `must be made up of only uppercase and lowercase ASCII letters, ` +
+                `numbers, underscores, and hyphens, and must be between 1 and 256 ` +
+                `characters long.`);
+        }
+        return new this(value);
+    }
+}
+//# sourceMappingURL=sim-sns-topic-name.js.map

package/dist/service/sns/topic/sim-sns-topic-name.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-topic-name.js","sourceRoot":"","sources":["../../../../src/service/sns/topic/sim-sns-topic-name.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,+BAA+B,EAC/B,+BAA+B,GAChC,MAAM,2BAA2B,CAAC;AAEnC;;;;GAIG;AACH,MAAM,gBAAgB,GAAG,gBAAgB,CAAC;AAE1C,MAAM,UAAU,GAAG,OAAO,CAAC;AAE3B;;;;;;;GAOG;AACH,MAAM,OAAO,eAAe;IACV,KAAK,CAAS;IAE9B,YAAoB,KAAa;QAC/B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,QAAQ,CAAC,IAAwB;QACtC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,+BAA+B,CACvC,qCAAqC,CACtC,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,EAAE,CAAC,KAAa;QACrB,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,+BAA+B,CACvC,eAAe,KAAK,iDAAiD;gBACnE,kDAAkD,CACrD,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,+BAA+B,CACvC,kCAAkC,KAAK,4BAA4B;gBACjE,iEAAiE;gBACjE,mEAAmE;gBACnE,kBAAkB,CACrB,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;CACF"}

package/dist/service/sns/topic/sim-sns-topic-policy.d.ts

@@ -0,0 +1,23 @@
+import type { SimIamPolicyDocument } from "../../iam/policy/sim-iam-policy.js";
+/**
+ * The resource policy of one simulated topic.
+ *
+ * It is what admits a caller with no identity policy of its own: another
+ * Account's principal, or a service principal such as `s3.amazonaws.com`, which
+ * owns no identity policies anywhere. Sim IAM evaluates it as the topic's
+ * resource policy, so the rules about who it lets in are IAM's rather than
+ * SNS's.
+ *
+ * The string the policy was set with is kept, so `GetTopicAttributes` reports
+ * back what was set rather than a re-serialised version of it.
+ */
+export declare class SimSnsTopicPolicy {
+    readonly value: string;
+    readonly document: SimIamPolicyDocument;
+    private constructor();
+    /**
+     * Read a topic policy attribute value, refusing one real SNS would refuse.
+     */
+    static parse(value: string): SimSnsTopicPolicy;
+}
+//# sourceMappingURL=sim-sns-topic-policy.d.ts.map

package/dist/service/sns/topic/sim-sns-topic-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-topic-policy.d.ts","sourceRoot":"","sources":["../../../../src/service/sns/topic/sim-sns-topic-policy.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AA6C/E;;;;;;;;;;;GAWG;AACH,qBAAa,iBAAiB;IAC5B,SAAgB,KAAK,EAAE,MAAM,CAAC;IAC9B,SAAgB,QAAQ,EAAE,oBAAoB,CAAC;IAE/C,OAAO,eAGN;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,iBAAiB,CAE7C;CACF"}

package/dist/service/sns/topic/sim-sns-topic-policy.js

@@ -0,0 +1,59 @@
+import { jsonParse } from "../../../util/type-guard/json.js";
+import { SimIamPolicyDocumentValidator } from "../../iam/validate/sim-iam-policy-document-validator.js";
+import { SimSnsInvalidParameterException } from "../error/sim-sns.error.js";
+const policyValidator = new SimIamPolicyDocumentValidator();
+/**
+ * What a rejected policy document was rejected for.
+ */
+function reasonFor(error) {
+    /* v8 ignore next 3 -- unreachable: JSON parsing and policy validation both
+       throw Errors, so nothing else reaches this. */
+    if (!(error instanceof Error)) {
+        return String(error);
+    }
+    return error.message;
+}
+/**
+ * Read a topic policy attribute value as the IAM policy document it has to be.
+ *
+ * The document goes through sim IAM's own policy document validator, so a topic
+ * policy is held to the same rules as any other policy document, and it is held
+ * to them when the attribute is set rather than when the policy is first
+ * evaluated.
+ */
+function parsedDocument(value) {
+    try {
+        policyValidator.validateRequired(value);
+        return jsonParse(value);
+    }
+    catch (error) {
+        throw new SimSnsInvalidParameterException(`Invalid parameter: Policy Error: ${reasonFor(error)}`);
+    }
+}
+/**
+ * The resource policy of one simulated topic.
+ *
+ * It is what admits a caller with no identity policy of its own: another
+ * Account's principal, or a service principal such as `s3.amazonaws.com`, which
+ * owns no identity policies anywhere. Sim IAM evaluates it as the topic's
+ * resource policy, so the rules about who it lets in are IAM's rather than
+ * SNS's.
+ *
+ * The string the policy was set with is kept, so `GetTopicAttributes` reports
+ * back what was set rather than a re-serialised version of it.
+ */
+export class SimSnsTopicPolicy {
+    value;
+    document;
+    constructor(properties) {
+        this.value = properties.value;
+        this.document = properties.document;
+    }
+    /**
+     * Read a topic policy attribute value, refusing one real SNS would refuse.
+     */
+    static parse(value) {
+        return new this({ value, document: parsedDocument(value) });
+    }
+}
+//# sourceMappingURL=sim-sns-topic-policy.js.map

package/dist/service/sns/topic/sim-sns-topic-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-topic-policy.js","sourceRoot":"","sources":["../../../../src/service/sns/topic/sim-sns-topic-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAE7D,OAAO,EAAE,6BAA6B,EAAE,MAAM,yDAAyD,CAAC;AACxG,OAAO,EAAE,+BAA+B,EAAE,MAAM,2BAA2B,CAAC;AAE5E,MAAM,eAAe,GACnB,IAAI,6BAA6B,EAAE,CAAC;AAEtC;;GAEG;AACH,SAAS,SAAS,CAAC,KAAc;IAC/B;qDACiD;IACjD,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAED,OAAO,KAAK,CAAC,OAAO,CAAC;AACvB,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,CAAC;QACH,eAAe,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAExC,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,+BAA+B,CACvC,oCAAoC,SAAS,CAAC,KAAK,CAAC,EAAE,CACvD,CAAC;IACJ,CAAC;AACH,CAAC;AAOD;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,iBAAiB;IACZ,KAAK,CAAS;IACd,QAAQ,CAAuB;IAE/C,YAAoB,UAAuC;QACzD,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,KAAa;QACxB,OAAO,IAAI,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC9D,CAAC;CACF"}

package/dist/service/sns/topic/sim-sns-topic-store.d.ts

@@ -0,0 +1,35 @@
+import type { SimSnsTopic } from "./sim-sns-topic.js";
+/**
+ * The topics of one simulated SNS scope.
+ *
+ * Topics are keyed by name, which is the whole of their identity: the name is
+ * the resource part of the ARN, and it is unique within one Account and Region.
+ *
+ * Nothing holds a deleted topic's name, unlike simulated SQS. Real SNS frees a
+ * topic name as soon as the topic is gone, so a name can be reused straight
+ * away.
+ */
+export declare class SimSnsTopicStore {
+    private readonly topics;
+    /**
+     * Every topic in this scope, in creation order.
+     */
+    get all(): readonly SimSnsTopic[];
+    /**
+     * Store a newly created topic.
+     */
+    add(topic: SimSnsTopic): void;
+    /**
+     * Find a topic by name.
+     */
+    find(name: string): SimSnsTopic | undefined;
+    /**
+     * Resolve a topic by name, or refuse.
+     */
+    require(name: string): SimSnsTopic;
+    /**
+     * Forget a deleted topic.
+     */
+    remove(topic: SimSnsTopic): void;
+}
+//# sourceMappingURL=sim-sns-topic-store.d.ts.map

package/dist/service/sns/topic/sim-sns-topic-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-topic-store.d.ts","sourceRoot":"","sources":["../../../../src/service/sns/topic/sim-sns-topic-store.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEtD;;;;;;;;;GASG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkC;IAEzD;;OAEG;IACH,IAAI,GAAG,IAAI,SAAS,WAAW,EAAE,CAEhC;IAED;;OAEG;IACH,GAAG,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI,CAE5B;IAED;;OAEG;IACH,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAE1C;IAED;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAWjC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI,CAE/B;CACF"}

package/dist/service/sns/topic/sim-sns-topic-store.js

@@ -0,0 +1,50 @@
+import { SimSnsNotFoundException } from "../error/sim-sns.error.js";
+/**
+ * The topics of one simulated SNS scope.
+ *
+ * Topics are keyed by name, which is the whole of their identity: the name is
+ * the resource part of the ARN, and it is unique within one Account and Region.
+ *
+ * Nothing holds a deleted topic's name, unlike simulated SQS. Real SNS frees a
+ * topic name as soon as the topic is gone, so a name can be reused straight
+ * away.
+ */
+export class SimSnsTopicStore {
+    topics = new Map();
+    /**
+     * Every topic in this scope, in creation order.
+     */
+    get all() {
+        return this.topics.values().toArray();
+    }
+    /**
+     * Store a newly created topic.
+     */
+    add(topic) {
+        this.topics.set(topic.name.value, topic);
+    }
+    /**
+     * Find a topic by name.
+     */
+    find(name) {
+        return this.topics.get(name);
+    }
+    /**
+     * Resolve a topic by name, or refuse.
+     */
+    require(name) {
+        const found = this.find(name);
+        if (found === undefined) {
+            throw new SimSnsNotFoundException(`Topic does not exist: no topic named '${name}' in this Account and ` +
+                `Region`);
+        }
+        return found;
+    }
+    /**
+     * Forget a deleted topic.
+     */
+    remove(topic) {
+        this.topics.delete(topic.name.value);
+    }
+}
+//# sourceMappingURL=sim-sns-topic-store.js.map

package/dist/service/sns/topic/sim-sns-topic-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-topic-store.js","sourceRoot":"","sources":["../../../../src/service/sns/topic/sim-sns-topic-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAGpE;;;;;;;;;GASG;AACH,MAAM,OAAO,gBAAgB;IACV,MAAM,GAAG,IAAI,GAAG,EAAuB,CAAC;IAEzD;;OAEG;IACH,IAAI,GAAG;QACL,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,KAAkB;QACpB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC3C,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,IAAY;QACf,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,IAAY;QAClB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE9B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,uBAAuB,CAC/B,yCAAyC,IAAI,wBAAwB;gBACnE,QAAQ,CACX,CAAC;QACJ,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAkB;QACvB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;CACF"}

package/dist/service/sns/topic/sim-sns-topic.d.ts

@@ -0,0 +1,48 @@
+import type { SimAwsAccountRegionScope } from "../../aws/sim-aws-account-region-scope.js";
+import type { SimSnsSubscriptionCounts } from "../subscription/sim-sns-subscription-store.js";
+import { SimSnsTopicArn } from "./sim-sns-topic-arn.js";
+import type { SimSnsTopicAttributeInput, SimSnsTopicAttributes } from "./sim-sns-topic-attributes.js";
+import type { SimSnsTopicName } from "./sim-sns-topic-name.js";
+interface SimSnsTopicProperties {
+    readonly name: SimSnsTopicName;
+    readonly accountRegionScope: SimAwsAccountRegionScope;
+    readonly attributes: SimSnsTopicAttributes;
+}
+/**
+ * One simulated standard topic.
+ *
+ * A topic holds almost nothing: its name, the ARN that name implies, and the
+ * attributes a request has set. Publishing to it changes none of that, because
+ * a topic keeps no messages. What a message reaches is the topic's
+ * subscriptions, and those are held in their own store rather than here, since
+ * an Unsubscribe reaches one by ARN without naming a topic at all.
+ */
+export declare class SimSnsTopic {
+    readonly name: SimSnsTopicName;
+    readonly arn: SimSnsTopicArn;
+    /**
+     * The Account that owns the topic, which a subscription created without a
+     * caller of its own belongs to as well.
+     */
+    readonly owner: string;
+    private held;
+    constructor(properties: SimSnsTopicProperties);
+    /**
+     * The attributes this topic currently holds.
+     */
+    get attributes(): SimSnsTopicAttributes;
+    /**
+     * Apply the attributes a request names, refusing any this simulation will not
+     * take.
+     */
+    applyAttributes(requested: SimSnsTopicAttributeInput): void;
+    /**
+     * This topic as GetTopicAttributes reports it.
+     *
+     * Real SNS reports every attribute a topic has rather than only the ones a
+     * request asked for, since a GetTopicAttributes request names no attributes.
+     */
+    reportedAttributes(counts: SimSnsSubscriptionCounts): Record<string, string>;
+}
+export {};
+//# sourceMappingURL=sim-sns-topic.d.ts.map

package/dist/service/sns/topic/sim-sns-topic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-topic.d.ts","sourceRoot":"","sources":["../../../../src/service/sns/topic/sim-sns-topic.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAC1F,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,+CAA+C,CAAC;AAC9F,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,KAAK,EACV,yBAAyB,EACzB,qBAAqB,EACtB,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AA6B/D,UAAU,qBAAqB;IAC7B,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;IACtD,QAAQ,CAAC,UAAU,EAAE,qBAAqB,CAAC;CAC5C;AAED;;;;;;;;GAQG;AACH,qBAAa,WAAW;IACtB,SAAgB,IAAI,EAAE,eAAe,CAAC;IACtC,SAAgB,GAAG,EAAE,cAAc,CAAC;IAEpC;;;OAGG;IACH,SAAgB,KAAK,EAAE,MAAM,CAAC;IAE9B,OAAO,CAAC,IAAI,CAAwB;IAEpC,YAAY,UAAU,EAAE,qBAAqB,EAQ5C;IAED;;OAEG;IACH,IAAI,UAAU,IAAI,qBAAqB,CAEtC;IAED;;;OAGG;IACH,eAAe,CAAC,SAAS,EAAE,yBAAyB,GAAG,IAAI,CAE1D;IAED;;;;;OAKG;IACH,kBAAkB,CAAC,MAAM,EAAE,wBAAwB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAU3E;CACF"}

package/dist/service/sns/topic/sim-sns-topic.js

@@ -0,0 +1,80 @@
+import { SimSnsTopicArn } from "./sim-sns-topic-arn.js";
+/**
+ * The attribute naming the topic itself, which is the ARN a request reaches it
+ * by.
+ */
+const topicArnAttributeName = "TopicArn";
+/**
+ * The attribute naming the Account that owns the topic.
+ */
+const ownerAttributeName = "Owner";
+/**
+ * The subscription counts real SNS reports on every topic.
+ *
+ * Nothing is ever pending, because the only subscription protocol simulated is
+ * the one real SNS confirms itself.
+ */
+function subscriptionCountAttributes(counts) {
+    return [
+        ["SubscriptionsConfirmed", String(counts.confirmed)],
+        ["SubscriptionsPending", String(counts.pending)],
+        ["SubscriptionsDeleted", String(counts.deleted)],
+    ];
+}
+/**
+ * One simulated standard topic.
+ *
+ * A topic holds almost nothing: its name, the ARN that name implies, and the
+ * attributes a request has set. Publishing to it changes none of that, because
+ * a topic keeps no messages. What a message reaches is the topic's
+ * subscriptions, and those are held in their own store rather than here, since
+ * an Unsubscribe reaches one by ARN without naming a topic at all.
+ */
+export class SimSnsTopic {
+    name;
+    arn;
+    /**
+     * The Account that owns the topic, which a subscription created without a
+     * caller of its own belongs to as well.
+     */
+    owner;
+    held;
+    constructor(properties) {
+        this.name = properties.name;
+        this.arn = new SimSnsTopicArn({
+            name: properties.name,
+            accountRegionScope: properties.accountRegionScope,
+        });
+        this.owner = properties.accountRegionScope.accountId;
+        this.held = properties.attributes;
+    }
+    /**
+     * The attributes this topic currently holds.
+     */
+    get attributes() {
+        return this.held;
+    }
+    /**
+     * Apply the attributes a request names, refusing any this simulation will not
+     * take.
+     */
+    applyAttributes(requested) {
+        this.held = this.held.with(requested);
+    }
+    /**
+     * This topic as GetTopicAttributes reports it.
+     *
+     * Real SNS reports every attribute a topic has rather than only the ones a
+     * request asked for, since a GetTopicAttributes request names no attributes.
+     */
+    reportedAttributes(counts) {
+        const reported = new Map([
+            [topicArnAttributeName, this.arn.value],
+            [ownerAttributeName, this.owner],
+            ...subscriptionCountAttributes(counts),
+        ]);
+        this.held.reportInto(reported);
+        return Object.fromEntries(reported);
+    }
+}
+//# sourceMappingURL=sim-sns-topic.js.map

package/dist/service/sns/topic/sim-sns-topic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-topic.js","sourceRoot":"","sources":["../../../../src/service/sns/topic/sim-sns-topic.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAOxD;;;GAGG;AACH,MAAM,qBAAqB,GAAG,UAAU,CAAC;AAEzC;;GAEG;AACH,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAEnC;;;;;GAKG;AACH,SAAS,2BAA2B,CAClC,MAAgC;IAEhC,OAAO;QACL,CAAC,wBAAwB,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACpD,CAAC,sBAAsB,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAChD,CAAC,sBAAsB,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;KACjD,CAAC;AACJ,CAAC;AAQD;;;;;;;;GAQG;AACH,MAAM,OAAO,WAAW;IACN,IAAI,CAAkB;IACtB,GAAG,CAAiB;IAEpC;;;OAGG;IACa,KAAK,CAAS;IAEtB,IAAI,CAAwB;IAEpC,YAAY,UAAiC;QAC3C,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;QAC5B,IAAI,CAAC,GAAG,GAAG,IAAI,cAAc,CAAC;YAC5B,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,kBAAkB,EAAE,UAAU,CAAC,kBAAkB;SAClD,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,kBAAkB,CAAC,SAAS,CAAC;QACrD,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,UAAU,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED;;;OAGG;IACH,eAAe,CAAC,SAAoC;QAClD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC;IAED;;;;;OAKG;IACH,kBAAkB,CAAC,MAAgC;QACjD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAiB;YACvC,CAAC,qBAAqB,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YACvC,CAAC,kBAAkB,EAAE,IAAI,CAAC,KAAK,CAAC;YAChC,GAAG,2BAA2B,CAAC,MAAM,CAAC;SACvC,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAE/B,OAAO,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC;CACF"}

package/dist/service/sqs/command/authorize/sim-sqs-authorizer.d.ts

@@ -1,11 +1,9 @@
 import type { SimAwsResolvedCaller } from "../../../aws/caller/sim-aws-caller-resolver.js";
-import type { SimAwsAccountRegionScope } from "../../../aws/sim-aws-account-region-scope.js";
 import type { SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
 import type { SimSqsQueue } from "../../queue/sim-sqs-queue.js";
 import type { SimSqsRequestOptions } from "../sim-sqs-request-options.js";
 interface SimSqsAuthorizerProperties {
     readonly iam: SimIamInterServiceAuthZ;
-    readonly accountRegionScope: SimAwsAccountRegionScope;
 }
 interface SimSqsQueueAuthorizationInput {
     readonly action: string;
@@ -29,13 +27,12 @@ interface SimSqsQueueAuthorizationInput {
  * what admits a caller from another Account or a service principal, since
  * neither is covered by an identity policy in the Account owning the queue.
  *
- * ListQueues is the exception: real SQS gives it no queue-level permission, so
- * it authorizes against every queue in the account and region rather than one of
- * them, and no queue policy applies to it.
+ * ListQueues is the exception: real SQS gives it no resource type, so it
+ * authorizes against `*` rather than against a queue, and no queue policy
+ * applies to it.
  */
 export declare class SimSqsAuthorizer {
     private readonly iam;
-    private readonly accountRegionScope;
     constructor(properties: SimSqsAuthorizerProperties);
     /**
      * Ensure the caller may perform an action on a queue, named by its ARN.

package/dist/service/sqs/command/authorize/sim-sqs-authorizer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-sqs-authorizer.d.ts","sourceRoot":"","sources":["../../../../../src/service/sqs/command/authorize/sim-sqs-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gDAAgD,CAAC;AAC3F,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAE7F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAEtG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAEhE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAI1E,UAAU,0BAA0B;IAClC,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;IACtC,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;CACvD;AAED,UAAU,6BAA6B;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B;;;OAGG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IAEzC,QAAQ,CAAC,OAAO,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC;CACrD;AASD;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA0B;IAC9C,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA2B;IAE9D,YAAY,UAAU,EAAE,0BAA0B,EAGjD;IAED;;;;;;;OAOG;IACH,cAAc,CAAC,KAAK,EAAE,6BAA6B,GAAG,oBAAoB,CAOzE;IAED;;OAEG;IACH,iBAAiB,CACf,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,oBAAoB,GAC7B,oBAAoB,CAOtB;IAED,OAAO,CAAC,iBAAiB;CAqB1B"}
+{"version":3,"file":"sim-sqs-authorizer.d.ts","sourceRoot":"","sources":["../../../../../src/service/sqs/command/authorize/sim-sqs-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gDAAgD,CAAC;AAE3F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAEtG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAc1E,UAAU,0BAA0B;IAClC,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;CACvC;AAED,UAAU,6BAA6B;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B;;;OAGG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IAEzC,QAAQ,CAAC,OAAO,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC;CACrD;AASD;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA0B;IAE9C,YAAY,UAAU,EAAE,0BAA0B,EAEjD;IAED;;;;;;;OAOG;IACH,cAAc,CAAC,KAAK,EAAE,6BAA6B,GAAG,oBAAoB,CAOzE;IAED;;OAEG;IACH,iBAAiB,CACf,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,oBAAoB,GAC7B,oBAAoB,CAOtB;IAED,OAAO,CAAC,iBAAiB;CAqB1B"}

package/dist/service/sqs/command/authorize/sim-sqs-authorizer.js

@@ -1,7 +1,15 @@
 import { SimIamAccessDenied } from "../../../iam/error/sim-iam.error.js";
-import { sqsAnyQueueArn } from "../../queue/sim-sqs-queue-arn.js";
 import { simSqsConditionContext } from "./sim-sqs-condition-context.js";
 import { simSqsQueueResourcePolicies } from "./sim-sqs-queue-resource-policies.js";
+/**
+ * The resource an action with no resource type authorizes against.
+ *
+ * Real SQS gives ListQueues no resource type at all, so IAM evaluates it
+ * against `*` and only a policy whose Resource is `*` allows it. A policy
+ * naming a queue ARN, or every queue ARN in the Account and Region, allows no
+ * listing, here as on AWS.
+ */
+const noResource = "*";
 /**
  * Applies simulated IAM authorization to SQS requests.
  *
@@ -14,16 +22,14 @@ import { simSqsQueueResourcePolicies } from "./sim-sqs-queue-resource-policies.j
  * what admits a caller from another Account or a service principal, since
  * neither is covered by an identity policy in the Account owning the queue.
  *
- * ListQueues is the exception: real SQS gives it no queue-level permission, so
- * it authorizes against every queue in the account and region rather than one of
- * them, and no queue policy applies to it.
+ * ListQueues is the exception: real SQS gives it no resource type, so it
+ * authorizes against `*` rather than against a queue, and no queue policy
+ * applies to it.
  */
 export class SimSqsAuthorizer {
     iam;
-    accountRegionScope;
     constructor(properties) {
         this.iam = properties.iam;
-        this.accountRegionScope = properties.accountRegionScope;
     }
     /**
      * Ensure the caller may perform an action on a queue, named by its ARN.
@@ -47,7 +53,7 @@ export class SimSqsAuthorizer {
     authorizeAnyQueue(action, options) {
         return this.authorizeResource({
             action,
-            resource: sqsAnyQueueArn(this.accountRegionScope),
+            resource: noResource,
             resourcePolicies: [],
             options,
         });

package/dist/service/sqs/command/authorize/sim-sqs-authorizer.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-sqs-authorizer.js","sourceRoot":"","sources":["../../../../../src/service/sqs/command/authorize/sim-sqs-authorizer.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAEzE,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAElE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AA2BnF;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,gBAAgB;IACV,GAAG,CAA0B;IAC7B,kBAAkB,CAA2B;IAE9D,YAAY,UAAsC;QAChD,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;QAC1B,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;IAC1D,CAAC;IAED;;;;;;;OAOG;IACH,cAAc,CAAC,KAAoC;QACjD,OAAO,IAAI,CAAC,iBAAiB,CAAC;YAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,gBAAgB,EAAE,2BAA2B,CAAC,KAAK,CAAC,KAAK,CAAC;YAC1D,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,iBAAiB,CACf,MAAc,EACd,OAA8B;QAE9B,OAAO,IAAI,CAAC,iBAAiB,CAAC;YAC5B,MAAM;YACN,QAAQ,EAAE,cAAc,CAAC,IAAI,CAAC,kBAAkB,CAAC;YACjD,gBAAgB,EAAE,EAAE;YACpB,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAEO,iBAAiB,CACvB,KAAuC;QAEvC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAClC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM;YAC7B,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,gBAAgB,EAAE,sBAAsB,CAAC,KAAK,CAAC,OAAO,CAAC;SACxD,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;gBACpC,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;aACzB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,QAAQ,CAAC,MAAM,CAAC;IACzB,CAAC;CACF"}
+{"version":3,"file":"sim-sqs-authorizer.js","sourceRoot":"","sources":["../../../../../src/service/sqs/command/authorize/sim-sqs-authorizer.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAGzE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AAEnF;;;;;;;GAOG;AACH,MAAM,UAAU,GAAG,GAAG,CAAC;AA0BvB;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,gBAAgB;IACV,GAAG,CAA0B;IAE9C,YAAY,UAAsC;QAChD,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;;;;;;OAOG;IACH,cAAc,CAAC,KAAoC;QACjD,OAAO,IAAI,CAAC,iBAAiB,CAAC;YAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,gBAAgB,EAAE,2BAA2B,CAAC,KAAK,CAAC,KAAK,CAAC;YAC1D,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,iBAAiB,CACf,MAAc,EACd,OAA8B;QAE9B,OAAO,IAAI,CAAC,iBAAiB,CAAC;YAC5B,MAAM;YACN,QAAQ,EAAE,UAAU;YACpB,gBAAgB,EAAE,EAAE;YACpB,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAEO,iBAAiB,CACvB,KAAuC;QAEvC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAClC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM;YAC7B,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,gBAAgB,EAAE,sBAAsB,CAAC,KAAK,CAAC,OAAO,CAAC;SACxD,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;gBACpC,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;aACzB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,QAAQ,CAAC,MAAM,CAAC;IACzB,CAAC;CACF"}