@kensio/yulin 0.34.0 → 0.35.0

package/dist/service/acm/cfn/property/sim-cfn-acm-domain-validation-reader.js

@@ -0,0 +1,75 @@
+import { isRecord } from "../../../../util/type-guard/record.js";
+/**
+ * Reads AWS::ACM::Certificate DomainValidationOptions.
+ *
+ * This property carries two unrelated things, which is why it has its own
+ * reader. `DomainName` and `ValidationDomain` are ACM API fields and go into
+ * the request-certificate command. `HostedZoneId` is CloudFormation-only, with
+ * no equivalent in the ACM API, and tells CloudFormation where to publish the
+ * validation record.
+ */
+export class SimCfnAcmDomainValidationReader {
+    logicalId;
+    constructor(properties) {
+        this.logicalId = properties.logicalId;
+    }
+    /**
+     * Read the ACM request-certificate fields of each entry.
+     */
+    options(value) {
+        return this.entries(value).map((item, index) => this.option(item, index));
+    }
+    /**
+     * Read the Hosted Zone each entry names, keyed by domain name.
+     *
+     * Entries naming no Hosted Zone are left out, so an empty result means
+     * CloudFormation has no validation record to publish.
+     */
+    hostedZoneIds(value) {
+        const hostedZoneIds = new Map();
+        for (const [index, item] of this.entries(value).entries()) {
+            const domainName = this.option(item, index).DomainName;
+            const hostedZoneId = this.hostedZoneId(item, index);
+            if (domainName !== undefined && hostedZoneId !== undefined) {
+                hostedZoneIds.set(domainName, hostedZoneId);
+            }
+        }
+        return hostedZoneIds;
+    }
+    entries(value) {
+        if (!Array.isArray(value)) {
+            throw this.propertyError("DomainValidationOptions", "must be an array");
+        }
+        return value;
+    }
+    option(value, index) {
+        const record = this.entryRecord(value, index);
+        return {
+            DomainName: this.entryString(record["DomainName"], index, "DomainName"),
+            ValidationDomain: this.entryString(record["ValidationDomain"], index, "ValidationDomain"),
+        };
+    }
+    hostedZoneId(value, index) {
+        const record = this.entryRecord(value, index);
+        return this.entryString(record["HostedZoneId"], index, "HostedZoneId");
+    }
+    entryRecord(value, index) {
+        if (!isRecord(value)) {
+            throw this.propertyError(this.entryPath(index), "must be an object");
+        }
+        return value;
+    }
+    entryString(value, index, fieldName) {
+        if (value !== undefined && typeof value !== "string") {
+            throw this.propertyError(`${this.entryPath(index)}.${fieldName}`, "must be a string");
+        }
+        return value;
+    }
+    entryPath(index) {
+        return `DomainValidationOptions[${String(index)}]`;
+    }
+    propertyError(propertyPath, reason) {
+        return new Error(`Invalid AWS::ACM::Certificate Resource ${this.logicalId} property ${propertyPath}: ${reason}`);
+    }
+}
+//# sourceMappingURL=sim-cfn-acm-domain-validation-reader.js.map

package/dist/service/acm/cfn/property/sim-cfn-acm-domain-validation-reader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-acm-domain-validation-reader.js","sourceRoot":"","sources":["../../../../../src/service/acm/cfn/property/sim-cfn-acm-domain-validation-reader.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,uCAAuC,CAAC;AAMjE;;;;;;;;GAQG;AACH,MAAM,OAAO,+BAA+B;IACzB,SAAS,CAAS;IAEnC,YAAY,UAAqD;QAC/D,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,OAAO,CACL,KAAc;QAEd,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED;;;;;OAKG;IACH,aAAa,CAAC,KAAc;QAC1B,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;QAEhD,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;YAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC;YACvD,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAEpD,IAAI,UAAU,KAAK,SAAS,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;gBAC3D,aAAa,CAAC,GAAG,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;QAED,OAAO,aAAa,CAAC;IACvB,CAAC;IAEO,OAAO,CAAC,KAAc;QAC5B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,CAAC,aAAa,CAAC,yBAAyB,EAAE,kBAAkB,CAAC,CAAC;QAC1E,CAAC;QAED,OAAO,KAA2B,CAAC;IACrC,CAAC;IAEO,MAAM,CACZ,KAAc,EACd,KAAa;QAEb,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAE9C,OAAO;YACL,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,YAAY,CAAC;YACvE,gBAAgB,EAAE,IAAI,CAAC,WAAW,CAChC,MAAM,CAAC,kBAAkB,CAAC,EAC1B,KAAK,EACL,kBAAkB,CACnB;SACF,CAAC;IACJ,CAAC;IAEO,YAAY,CAAC,KAAc,EAAE,KAAa;QAChD,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAE9C,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;IACzE,CAAC;IAEO,WAAW,CAAC,KAAc,EAAE,KAAa;QAC/C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,mBAAmB,CAAC,CAAC;QACvE,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,WAAW,CACjB,KAAc,EACd,KAAa,EACb,SAA6D;QAE7D,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACrD,MAAM,IAAI,CAAC,aAAa,CACtB,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,SAAS,EAAE,EACvC,kBAAkB,CACnB,CAAC;QACJ,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,SAAS,CAAC,KAAa;QAC7B,OAAO,2BAA2B,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;IACrD,CAAC;IAEO,aAAa,CAAC,YAAoB,EAAE,MAAc;QACxD,OAAO,IAAI,KAAK,CACd,0CAA0C,IAAI,CAAC,SAAS,aAAa,YAAY,KAAK,MAAM,EAAE,CAC/F,CAAC;IACJ,CAAC;CACF"}

package/dist/service/acm/cfn/sim-cfn-acm-resource-factory.d.ts

@@ -8,13 +8,12 @@ interface SimAcmCfnResourceFactoryProperties {
  * CloudFormation Resource factory for simulated ACM resources.
  */
 export declare class SimAcmCfnResourceFactory implements SimCfnServiceResourceFactory {
-    private readonly acm;
+    private readonly certificateCreator;
     constructor(properties?: SimAcmCfnResourceFactoryProperties);
     /**
      * Create a simulated ACM resource from a CloudFormation Resource.
      */
     create(resourceTypeName: string, resource: SimCfnResource, context: SimCloudFormationResourceCreateContext): Promise<object | undefined>;
-    private createCertificate;
 }
 export {};
 //# sourceMappingURL=sim-cfn-acm-resource-factory.d.ts.map

package/dist/service/acm/cfn/sim-cfn-acm-resource-factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-acm-resource-factory.d.ts","sourceRoot":"","sources":["../../../../src/service/acm/cfn/sim-cfn-acm-resource-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,sCAAsC,EACvC,MAAM,mDAAmD,CAAC;AAC3D,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,wEAAwE,CAAC;AAC3H,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAKvC,UAAU,kCAAkC;IAC1C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACnC;AAED;;GAEG;AACH,qBAAa,wBAAyB,YAAW,4BAA4B;IAC3E,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAE7B,YAAY,UAAU,GAAE,kCAAuC,EAI9D;IAED;;OAEG;IACG,MAAM,CACV,gBAAgB,EAAE,MAAM,EACxB,QAAQ,EAAE,cAAc,EACxB,OAAO,EAAE,sCAAsC,GAC9C,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAW7B;YAEa,iBAAiB;CAiChC"}
+{"version":3,"file":"sim-cfn-acm-resource-factory.d.ts","sourceRoot":"","sources":["../../../../src/service/acm/cfn/sim-cfn-acm-resource-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,sCAAsC,EACvC,MAAM,mDAAmD,CAAC;AAC3D,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,wEAAwE,CAAC;AAC3H,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAGvC,UAAU,kCAAkC;IAC1C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACnC;AAED;;GAEG;AACH,qBAAa,wBAAyB,YAAW,4BAA4B;IAC3E,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA8B;IAEjE,YAAY,UAAU,GAAE,kCAAuC,EAI9D;IAED;;OAEG;IACG,MAAM,CACV,gBAAgB,EAAE,MAAM,EACxB,QAAQ,EAAE,cAAc,EACxB,OAAO,EAAE,sCAAsC,GAC9C,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAW7B;CACF"}

package/dist/service/acm/cfn/sim-cfn-acm-resource-factory.js

@@ -1,14 +1,13 @@
 import { SimAcm } from "../sim-acm.js";
-import { assertDefined } from "../../../util/type-guard/defined.js";
-import { SimCfnAcmCertificatePropertyReader } from "./property/sim-cfn-acm-cert-properties.js";
+import { SimCfnAcmCertificateCreator } from "./certificate/sim-cfn-acm-cert-creator.js";
 /**
  * CloudFormation Resource factory for simulated ACM resources.
  */
 export class SimAcmCfnResourceFactory {
-    acm;
+    certificateCreator;
     constructor(properties = {}) {
         const { acm = new SimAcm() } = properties;
-        this.acm = acm;
+        this.certificateCreator = new SimCfnAcmCertificateCreator({ acm });
     }
     /**
      * Create a simulated ACM resource from a CloudFormation Resource.
@@ -16,32 +15,12 @@ export class SimAcmCfnResourceFactory {
     async create(resourceTypeName, resource, context) {
         switch (resourceTypeName) {
             case "Certificate": {
-                return await this.createCertificate(resource, context);
+                return await this.certificateCreator.create(resource, context);
             }
             default: {
                 throw new Error(`Unsupported sim ACM CloudFormation Resource ${resourceTypeName}`);
             }
         }
     }
-    async createCertificate(resource, context) {
-        const properties = new SimCfnAcmCertificatePropertyReader({
-            logicalId: resource.logicalId,
-            properties: context.resolvedProperties ?? resource.properties,
-        });
-        const requestCertificateOutput = await this.acm.requestCertificate({
-            input: {
-                DomainName: properties.domainName(),
-                SubjectAlternativeNames: properties.subjectAlternativeNames(),
-                ValidationMethod: properties.validationMethod(),
-                DomainValidationOptions: properties.domainValidationOptions(),
-                Tags: properties.tags(),
-            },
-        });
-        const certificateArn = requestCertificateOutput.CertificateArn;
-        assertDefined(certificateArn, `sim ACM Certificate ARN after CloudFormation creation for ${resource.logicalId}`);
-        const certificate = this.acm.certificates.get(certificateArn);
-        assertDefined(certificate, `sim ACM Certificate ${certificateArn} after CloudFormation creation`);
-        return certificate;
-    }
 }
 //# sourceMappingURL=sim-cfn-acm-resource-factory.js.map

package/dist/service/acm/cfn/sim-cfn-acm-resource-factory.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-acm-resource-factory.js","sourceRoot":"","sources":["../../../../src/service/acm/cfn/sim-cfn-acm-resource-factory.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAEpE,OAAO,EAAE,kCAAkC,EAAE,MAAM,2CAA2C,CAAC;AAM/F;;GAEG;AACH,MAAM,OAAO,wBAAwB;IAClB,GAAG,CAAS;IAE7B,YAAY,UAAU,GAAuC,EAAE;QAC7D,MAAM,EAAE,GAAG,GAAG,IAAI,MAAM,EAAE,EAAE,GAAG,UAAU,CAAC;QAE1C,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,gBAAwB,EACxB,QAAwB,EACxB,OAA+C;QAE/C,QAAQ,gBAAgB,EAAE,CAAC;YACzB,KAAK,aAAa,EAAE,CAAC;gBACnB,OAAO,MAAM,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACzD,CAAC;YACD,SAAS,CAAC;gBACR,MAAM,IAAI,KAAK,CACb,+CAA+C,gBAAgB,EAAE,CAClE,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC7B,QAAwB,EACxB,OAA+C;QAE/C,MAAM,UAAU,GAAG,IAAI,kCAAkC,CAAC;YACxD,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,UAAU,EAAE,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU;SAC9D,CAAC,CAAC;QAEH,MAAM,wBAAwB,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC;YACjE,KAAK,EAAE;gBACL,UAAU,EAAE,UAAU,CAAC,UAAU,EAAE;gBACnC,uBAAuB,EAAE,UAAU,CAAC,uBAAuB,EAAE;gBAC7D,gBAAgB,EAAE,UAAU,CAAC,gBAAgB,EAAE;gBAC/C,uBAAuB,EAAE,UAAU,CAAC,uBAAuB,EAAE;gBAC7D,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE;aACxB;SACF,CAAC,CAAC;QAEH,MAAM,cAAc,GAAG,wBAAwB,CAAC,cAAc,CAAC;QAC/D,aAAa,CACX,cAAc,EACd,6DAA6D,QAAQ,CAAC,SAAS,EAAE,CAClF,CAAC;QAEF,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC9D,aAAa,CACX,WAAW,EACX,uBAAuB,cAAc,gCAAgC,CACtE,CAAC;QAEF,OAAO,WAAW,CAAC;IACrB,CAAC;CACF"}
+{"version":3,"file":"sim-cfn-acm-resource-factory.js","sourceRoot":"","sources":["../../../../src/service/acm/cfn/sim-cfn-acm-resource-factory.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AACvC,OAAO,EAAE,2BAA2B,EAAE,MAAM,2CAA2C,CAAC;AAMxF;;GAEG;AACH,MAAM,OAAO,wBAAwB;IAClB,kBAAkB,CAA8B;IAEjE,YAAY,UAAU,GAAuC,EAAE;QAC7D,MAAM,EAAE,GAAG,GAAG,IAAI,MAAM,EAAE,EAAE,GAAG,UAAU,CAAC;QAE1C,IAAI,CAAC,kBAAkB,GAAG,IAAI,2BAA2B,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;IACrE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,gBAAwB,EACxB,QAAwB,EACxB,OAA+C;QAE/C,QAAQ,gBAAgB,EAAE,CAAC;YACzB,KAAK,aAAa,EAAE,CAAC;gBACnB,OAAO,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACjE,CAAC;YACD,SAAS,CAAC;gBACR,MAAM,IAAI,KAAK,CACb,+CAA+C,gBAAgB,EAAE,CAClE,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/service/acm/cfn/validation/sim-cfn-acm-cert-validation.d.ts

@@ -0,0 +1,36 @@
+import type { SimAws } from "../../../aws/sim-aws.js";
+import type { SimCfnResource } from "../../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimAcm } from "../../sim-acm.js";
+import type { SimAcmCertificate } from "../../certificate/sim-acm-certificate.js";
+interface SimCfnAcmCertificateValidationProperties {
+    readonly acm: SimAcm;
+    readonly simAws: SimAws;
+}
+/**
+ * Validates a CloudFormation-created sim ACM Certificate.
+ *
+ * Real CloudFormation publishes the validation record itself when a
+ * DomainValidationOptions entry carries a HostedZoneId, and holds the stack
+ * until the certificate is issued, so nothing depending on the certificate is
+ * created before it exists. This does the same.
+ */
+export declare class SimCfnAcmCertificateValidation {
+    private readonly acm;
+    private readonly simAws;
+    constructor(properties: SimCfnAcmCertificateValidationProperties);
+    /**
+     * Publish the template's validation records and wait for the Certificate.
+     */
+    apply(resource: SimCfnResource, certificate: SimAcmCertificate, hostedZoneIdsByDomain: ReadonlyMap<string, string>): Promise<void>;
+    /**
+     * Explain what the Certificate is still waiting for.
+     *
+     * Real CloudFormation sits in CREATE_IN_PROGRESS here for hours and then
+     * times out, which is no use in a test, so the Resource fails instead, with
+     * the records that would have to exist for it to succeed.
+     */
+    private pendingMessage;
+    private describePending;
+}
+export {};
+//# sourceMappingURL=sim-cfn-acm-cert-validation.d.ts.map

package/dist/service/acm/cfn/validation/sim-cfn-acm-cert-validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-acm-cert-validation.d.ts","sourceRoot":"","sources":["../../../../../src/service/acm/cfn/validation/sim-cfn-acm-cert-validation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAKlF,UAAU,wCAAwC;IAChD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;GAOG;AACH,qBAAa,8BAA8B;IACzC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAEhC,YAAY,UAAU,EAAE,wCAAwC,EAG/D;IAED;;OAEG;IACG,KAAK,CACT,QAAQ,EAAE,cAAc,EACxB,WAAW,EAAE,iBAAiB,EAC9B,qBAAqB,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,GACjD,OAAO,CAAC,IAAI,CAAC,CAgBf;IAED;;;;;;OAMG;IACH,OAAO,CAAC,cAAc;IAgBtB,OAAO,CAAC,eAAe;CAMxB"}

package/dist/service/acm/cfn/validation/sim-cfn-acm-cert-validation.js

@@ -0,0 +1,54 @@
+import { SimAcmDnsValidationFailed } from "../../error/sim-acm.error.js";
+import { SimCfnAcmValidationRecords } from "./sim-cfn-acm-validation-records.js";
+/**
+ * Validates a CloudFormation-created sim ACM Certificate.
+ *
+ * Real CloudFormation publishes the validation record itself when a
+ * DomainValidationOptions entry carries a HostedZoneId, and holds the stack
+ * until the certificate is issued, so nothing depending on the certificate is
+ * created before it exists. This does the same.
+ */
+export class SimCfnAcmCertificateValidation {
+    acm;
+    simAws;
+    constructor(properties) {
+        this.acm = properties.acm;
+        this.simAws = properties.simAws;
+    }
+    /**
+     * Publish the template's validation records and wait for the Certificate.
+     */
+    async apply(resource, certificate, hostedZoneIdsByDomain) {
+        const { accountId, regionName } = resource.accountRegionScope;
+        const validationRecords = new SimCfnAcmValidationRecords({
+            route53: this.simAws.accountRegionScope(accountId, regionName).route53(),
+        });
+        await validationRecords.publish(certificate, hostedZoneIdsByDomain);
+        await this.acm.settleCertificateValidation(certificate);
+        if (certificate.status === "ISSUED") {
+            return;
+        }
+        throw new SimAcmDnsValidationFailed(this.pendingMessage(resource.logicalId, certificate));
+    }
+    /**
+     * Explain what the Certificate is still waiting for.
+     *
+     * Real CloudFormation sits in CREATE_IN_PROGRESS here for hours and then
+     * times out, which is no use in a test, so the Resource fails instead, with
+     * the records that would have to exist for it to succeed.
+     */
+    pendingMessage(logicalId, certificate) {
+        const waitingFor = certificate.domainValidationOptions
+            .filter((domainValidation) => domainValidation.isPending)
+            .map((domainValidation) => this.describePending(domainValidation))
+            .join(", ");
+        return (`AWS::CertificateManager::Certificate ${logicalId} was not issued: ` +
+            `sim ACM Certificate ${certificate.certificateArn} is still waiting for ${waitingFor}. ` +
+            "Name the Hosted Zone in DomainValidationOptions[].HostedZoneId so CloudFormation can publish it.");
+    }
+    describePending(domainValidation) {
+        const recordName = domainValidation.resourceRecord?.name ?? "its validation record";
+        return `${recordName} (${domainValidation.domainName})`;
+    }
+}
+//# sourceMappingURL=sim-cfn-acm-cert-validation.js.map

package/dist/service/acm/cfn/validation/sim-cfn-acm-cert-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-acm-cert-validation.js","sourceRoot":"","sources":["../../../../../src/service/acm/cfn/validation/sim-cfn-acm-cert-validation.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AACzE,OAAO,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AAOjF;;;;;;;GAOG;AACH,MAAM,OAAO,8BAA8B;IACxB,GAAG,CAAS;IACZ,MAAM,CAAS;IAEhC,YAAY,UAAoD;QAC9D,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;QAC1B,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK,CACT,QAAwB,EACxB,WAA8B,EAC9B,qBAAkD;QAElD,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,QAAQ,CAAC,kBAAkB,CAAC;QAC9D,MAAM,iBAAiB,GAAG,IAAI,0BAA0B,CAAC;YACvD,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,OAAO,EAAE;SACzE,CAAC,CAAC;QAEH,MAAM,iBAAiB,CAAC,OAAO,CAAC,WAAW,EAAE,qBAAqB,CAAC,CAAC;QACpE,MAAM,IAAI,CAAC,GAAG,CAAC,2BAA2B,CAAC,WAAW,CAAC,CAAC;QAExD,IAAI,WAAW,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACpC,OAAO;QACT,CAAC;QAED,MAAM,IAAI,yBAAyB,CACjC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,CACrD,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACK,cAAc,CACpB,SAAiB,EACjB,WAA8B;QAE9B,MAAM,UAAU,GAAG,WAAW,CAAC,uBAAuB;aACnD,MAAM,CAAC,CAAC,gBAAgB,EAAE,EAAE,CAAC,gBAAgB,CAAC,SAAS,CAAC;aACxD,GAAG,CAAC,CAAC,gBAAgB,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,gBAAgB,CAAC,CAAC;aACjE,IAAI,CAAC,IAAI,CAAC,CAAC;QAEd,OAAO,CACL,wCAAwC,SAAS,mBAAmB;YACpE,uBAAuB,WAAW,CAAC,cAAc,yBAAyB,UAAU,IAAI;YACxF,kGAAkG,CACnG,CAAC;IACJ,CAAC;IAEO,eAAe,CAAC,gBAAwC;QAC9D,MAAM,UAAU,GACd,gBAAgB,CAAC,cAAc,EAAE,IAAI,IAAI,uBAAuB,CAAC;QAEnE,OAAO,GAAG,UAAU,KAAK,gBAAgB,CAAC,UAAU,GAAG,CAAC;IAC1D,CAAC;CACF"}

package/dist/service/acm/cfn/validation/sim-cfn-acm-validation-records.d.ts

@@ -0,0 +1,40 @@
+import type { SimRoute53 } from "../../../route53/sim-route53.js";
+import type { SimAcmCertificate } from "../../certificate/sim-acm-certificate.js";
+interface SimCfnAcmValidationRecordsProperties {
+    readonly route53: SimRoute53;
+}
+/**
+ * Publishes the ACM validation records a CloudFormation template asks for.
+ *
+ * Records go through the normal Route53 command path rather than being written
+ * into the hosted zone directly, so each one is an ordinary record in the
+ * zone: listed by ListResourceRecordSets and answerable over DNS.
+ */
+export declare class SimCfnAcmValidationRecords {
+    private readonly route53;
+    constructor(properties: SimCfnAcmValidationRecordsProperties);
+    /**
+     * Publish the validation record for every domain naming a Hosted Zone.
+     */
+    publish(certificate: SimAcmCertificate, hostedZoneIdsByDomain: ReadonlyMap<string, string>): Promise<void>;
+    /**
+     * Publish one domain's validation record into the Hosted Zone named for it.
+     *
+     * A HostedZoneId naming a zone this simulator does not hold is skipped
+     * rather than failing. Hosted zones are commonly managed outside the stack
+     * under test, and the certificate then follows the usual rule: with nothing
+     * authoritative for its domain, it is issued without validation.
+     */
+    private publishRecord;
+    /**
+     * Find the Hosted Zone a template's HostedZoneId names, if it is here.
+     *
+     * The ID is matched leniently, accepting the `/hostedzone/` prefixed form
+     * AWS also uses. It is deliberately not validated as a simulator-shaped zone
+     * ID: a template commonly carries the ID of a real zone from a real account,
+     * and that is an external zone rather than a broken template.
+     */
+    private findHostedZone;
+}
+export {};
+//# sourceMappingURL=sim-cfn-acm-validation-records.d.ts.map

package/dist/service/acm/cfn/validation/sim-cfn-acm-validation-records.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-acm-validation-records.d.ts","sourceRoot":"","sources":["../../../../../src/service/acm/cfn/validation/sim-cfn-acm-validation-records.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAGlE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAKlF,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;CAC9B;AAED;;;;;;GAMG;AACH,qBAAa,0BAA0B;IACrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAa;IAErC,YAAY,UAAU,EAAE,oCAAoC,EAE3D;IAED;;OAEG;IACG,OAAO,CACX,WAAW,EAAE,iBAAiB,EAC9B,qBAAqB,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,GACjD,OAAO,CAAC,IAAI,CAAC,CAKf;IAED;;;;;;;OAOG;YACW,aAAa;IA2C3B;;;;;;;OAOG;IACH,OAAO,CAAC,cAAc;CAOvB"}

package/dist/service/acm/cfn/validation/sim-cfn-acm-validation-records.js

@@ -0,0 +1,76 @@
+const validationRecordTtl = 300;
+/**
+ * Publishes the ACM validation records a CloudFormation template asks for.
+ *
+ * Records go through the normal Route53 command path rather than being written
+ * into the hosted zone directly, so each one is an ordinary record in the
+ * zone: listed by ListResourceRecordSets and answerable over DNS.
+ */
+export class SimCfnAcmValidationRecords {
+    route53;
+    constructor(properties) {
+        this.route53 = properties.route53;
+    }
+    /**
+     * Publish the validation record for every domain naming a Hosted Zone.
+     */
+    async publish(certificate, hostedZoneIdsByDomain) {
+        for (const domainValidation of certificate.domainValidationOptions) {
+            // eslint-disable-next-line no-await-in-loop -- one hosted zone at a time
+            await this.publishRecord(domainValidation, hostedZoneIdsByDomain);
+        }
+    }
+    /**
+     * Publish one domain's validation record into the Hosted Zone named for it.
+     *
+     * A HostedZoneId naming a zone this simulator does not hold is skipped
+     * rather than failing. Hosted zones are commonly managed outside the stack
+     * under test, and the certificate then follows the usual rule: with nothing
+     * authoritative for its domain, it is issued without validation.
+     */
+    async publishRecord(domainValidation, hostedZoneIdsByDomain) {
+        const resourceRecord = domainValidation.resourceRecord;
+        const hostedZoneIdValue = hostedZoneIdsByDomain.get(domainValidation.domainName);
+        if (resourceRecord === undefined || hostedZoneIdValue === undefined) {
+            return;
+        }
+        const hostedZone = this.findHostedZone(hostedZoneIdValue);
+        if (hostedZone === undefined) {
+            return;
+        }
+        await this.route53.changeResourceRecordSets({
+            input: {
+                HostedZoneId: hostedZone.id,
+                ChangeBatch: {
+                    Changes: [
+                        {
+                            Action: "UPSERT",
+                            ResourceRecordSet: {
+                                Name: resourceRecord.name,
+                                Type: resourceRecord.type,
+                                TTL: validationRecordTtl,
+                                ResourceRecords: [{ Value: resourceRecord.value }],
+                            },
+                        },
+                    ],
+                },
+            },
+        });
+        // The record mutation is scheduled, so wait for the zone to hold it before
+        // the certificate is checked against DNS.
+        await hostedZone.waitForSynchronizationComplete();
+    }
+    /**
+     * Find the Hosted Zone a template's HostedZoneId names, if it is here.
+     *
+     * The ID is matched leniently, accepting the `/hostedzone/` prefixed form
+     * AWS also uses. It is deliberately not validated as a simulator-shaped zone
+     * ID: a template commonly carries the ID of a real zone from a real account,
+     * and that is an external zone rather than a broken template.
+     */
+    findHostedZone(hostedZoneIdValue) {
+        const hostedZoneId = hostedZoneIdValue.replace(/^\/?hostedzone\//u, "");
+        return this.route53.hostedZones.get(hostedZoneId);
+    }
+}
+//# sourceMappingURL=sim-cfn-acm-validation-records.js.map

package/dist/service/acm/cfn/validation/sim-cfn-acm-validation-records.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-acm-validation-records.js","sourceRoot":"","sources":["../../../../../src/service/acm/cfn/validation/sim-cfn-acm-validation-records.ts"],"names":[],"mappings":"AAMA,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAMhC;;;;;;GAMG;AACH,MAAM,OAAO,0BAA0B;IACpB,OAAO,CAAa;IAErC,YAAY,UAAgD;QAC1D,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CACX,WAA8B,EAC9B,qBAAkD;QAElD,KAAK,MAAM,gBAAgB,IAAI,WAAW,CAAC,uBAAuB,EAAE,CAAC;YACnE,yEAAyE;YACzE,MAAM,IAAI,CAAC,aAAa,CAAC,gBAAgB,EAAE,qBAAqB,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,aAAa,CACzB,gBAAwC,EACxC,qBAAkD;QAElD,MAAM,cAAc,GAAG,gBAAgB,CAAC,cAAc,CAAC;QACvD,MAAM,iBAAiB,GAAG,qBAAqB,CAAC,GAAG,CACjD,gBAAgB,CAAC,UAAU,CAC5B,CAAC;QAEF,IAAI,cAAc,KAAK,SAAS,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACpE,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC;QAE1D,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO;QACT,CAAC;QAED,MAAM,IAAI,CAAC,OAAO,CAAC,wBAAwB,CAAC;YAC1C,KAAK,EAAE;gBACL,YAAY,EAAE,UAAU,CAAC,EAAE;gBAC3B,WAAW,EAAE;oBACX,OAAO,EAAE;wBACP;4BACE,MAAM,EAAE,QAAQ;4BAChB,iBAAiB,EAAE;gCACjB,IAAI,EAAE,cAAc,CAAC,IAAI;gCACzB,IAAI,EAAE,cAAc,CAAC,IAAI;gCACzB,GAAG,EAAE,mBAAmB;gCACxB,eAAe,EAAE,CAAC,EAAE,KAAK,EAAE,cAAc,CAAC,KAAK,EAAE,CAAC;6BACnD;yBACF;qBACF;iBACF;aACF;SACF,CAAC,CAAC;QAEH,2EAA2E;QAC3E,0CAA0C;QAC1C,MAAM,UAAU,CAAC,8BAA8B,EAAE,CAAC;IACpD,CAAC;IAED;;;;;;;OAOG;IACK,cAAc,CACpB,iBAAyB;QAEzB,MAAM,YAAY,GAAG,iBAAiB,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;QAExE,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,YAAsC,CAAC,CAAC;IAC9E,CAAC;CACF"}

package/dist/service/acm/command/describe-certificate/describe-certificate.command.d.ts

@@ -0,0 +1,59 @@
+import type { SimArn } from "../../../aws/arn.js";
+import type { SimResponseMetadata } from "../../../aws/metadata/response-metadata.type.js";
+import type { SimAcmCertificateStatus } from "../../certificate/sim-acm-certificate.js";
+import type { SimAcmDomainValidationStatus, SimAcmValidationMethod } from "../../certificate/sim-acm-domain-validation.js";
+/**
+ * Minimal structural sim ACM DescribeCertificate command.
+ */
+export interface SimDescribeCertificateCommand {
+    readonly input: SimDescribeCertificateCommandInput;
+}
+/**
+ * Minimal structural sim ACM DescribeCertificate input.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/acm/command/DescribeCertificateCommand/
+ */
+export interface SimDescribeCertificateCommandInput {
+    readonly CertificateArn?: string | undefined;
+}
+/**
+ * Minimal structural sim ACM DescribeCertificate output.
+ */
+export interface SimDescribeCertificateCommandOutput {
+    readonly Certificate?: SimAcmCertificateDetail | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * Minimal structural sim ACM CertificateDetail.
+ */
+export interface SimAcmCertificateDetail {
+    readonly CertificateArn?: SimArn | undefined;
+    readonly DomainName?: string | undefined;
+    readonly SubjectAlternativeNames?: readonly string[] | undefined;
+    readonly Status?: SimAcmCertificateStatus | undefined;
+    readonly Type?: "AMAZON_ISSUED" | undefined;
+    readonly KeyAlgorithm?: "RSA-2048" | undefined;
+    readonly SignatureAlgorithm?: "SHA256WITHRSA" | undefined;
+    readonly InUseBy?: readonly string[] | undefined;
+    readonly CreatedAt?: Date | undefined;
+    readonly IssuedAt?: Date | undefined;
+    readonly DomainValidationOptions?: readonly SimAcmCertificateDomainValidation[] | undefined;
+}
+/**
+ * Minimal structural sim ACM DomainValidation.
+ */
+export interface SimAcmCertificateDomainValidation {
+    readonly DomainName?: string | undefined;
+    readonly ValidationMethod?: SimAcmValidationMethod | undefined;
+    readonly ValidationStatus?: SimAcmDomainValidationStatus | undefined;
+    readonly ResourceRecord?: SimAcmCertificateResourceRecord | undefined;
+}
+/**
+ * Minimal structural sim ACM ResourceRecord.
+ */
+export interface SimAcmCertificateResourceRecord {
+    readonly Name?: string | undefined;
+    readonly Type?: "CNAME" | undefined;
+    readonly Value?: string | undefined;
+}
+//# sourceMappingURL=describe-certificate.command.d.ts.map

package/dist/service/acm/command/describe-certificate/describe-certificate.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"describe-certificate.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/acm/command/describe-certificate/describe-certificate.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,0CAA0C,CAAC;AACxF,OAAO,KAAK,EACV,4BAA4B,EAC5B,sBAAsB,EACvB,MAAM,gDAAgD,CAAC;AAExD;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,KAAK,EAAE,kCAAkC,CAAC;CACpD;AAED;;;;GAIG;AACH,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC9C;AAED;;GAEG;AACH,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,WAAW,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAC;IAC3D,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACjE,QAAQ,CAAC,MAAM,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAC;IACtD,QAAQ,CAAC,IAAI,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,YAAY,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IAC1D,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,uBAAuB,CAAC,EAC/B,SAAS,iCAAiC,EAAE,GAAG,SAAS,CAAC;CAC5D;AAED;;GAEG;AACH,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,sBAAsB,GAAG,SAAS,CAAC;IAC/D,QAAQ,CAAC,gBAAgB,CAAC,EAAE,4BAA4B,GAAG,SAAS,CAAC;IACrE,QAAQ,CAAC,cAAc,CAAC,EAAE,+BAA+B,GAAG,SAAS,CAAC;CACvE;AAED;;GAEG;AACH,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACrC"}

package/dist/service/acm/command/describe-certificate/describe-certificate.command.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=describe-certificate.command.js.map

package/dist/service/acm/command/describe-certificate/describe-certificate.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"describe-certificate.command.js","sourceRoot":"","sources":["../../../../../src/service/acm/command/describe-certificate/describe-certificate.command.ts"],"names":[],"mappings":""}

package/dist/service/acm/command/describe-certificate/describe-certificate.handler.d.ts

@@ -4,7 +4,7 @@ import { type SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-int
 import { type BackgroundScheduler } from "../../../../util/background/background.js";
 import type { CommandHandler } from "../../../../command/command-handler.js";
 import type { SimAcmCertificate } from "../../certificate/sim-acm-certificate.js";
-import type { SimDescribeCertificateCommand, SimDescribeCertificateCommandOutput } from "./describe-certificate.cmd.js";
+import type { SimDescribeCertificateCommand, SimDescribeCertificateCommandOutput } from "./describe-certificate.command.js";
 interface DescribeCertificateCommandHandlerProperties {
     readonly certificates: Map<SimArn, SimAcmCertificate>;
     readonly iam?: SimIamInterServiceAuthZ;

package/dist/service/acm/command/describe-certificate/describe-certificate.handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"describe-certificate.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/acm/command/describe-certificate/describe-certificate.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,wDAAwD,CAAC;AAChE,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAE7E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAGlF,OAAO,KAAK,EACV,6BAA6B,EAC7B,mCAAmC,EACpC,MAAM,+BAA+B,CAAC;AAGvC,UAAU,2CAA2C;IACnD,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACtD,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED,UAAU,wCAAwC;IAChD,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;GAIG;AACH,qBAAa,iCAAkC,YAAW,cAAc,CACtE,6BAA6B,EAC7B,mCAAmC,CACpC;IACC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAiC;IAC9D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAgC;IAC3D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CACF;IAEvC,YAAY,UAAU,EAAE,2CAA2C,EAUlE;IAED;;;;;;;OAOG;IACG,MAAM,CACV,OAAO,EAAE,6BAA6B,EACtC,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,mCAAmC,CAAC,CAwB9C;CACF"}
+{"version":3,"file":"describe-certificate.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/acm/command/describe-certificate/describe-certificate.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,wDAAwD,CAAC;AAChE,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAE7E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAGlF,OAAO,KAAK,EACV,6BAA6B,EAC7B,mCAAmC,EACpC,MAAM,mCAAmC,CAAC;AAG3C,UAAU,2CAA2C;IACnD,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACtD,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED,UAAU,wCAAwC;IAChD,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;GAIG;AACH,qBAAa,iCAAkC,YAAW,cAAc,CACtE,6BAA6B,EAC7B,mCAAmC,CACpC;IACC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAiC;IAC9D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAgC;IAC3D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CACF;IAEvC,YAAY,UAAU,EAAE,2CAA2C,EAUlE;IAED;;;;;;;OAOG;IACG,MAAM,CACV,OAAO,EAAE,6BAA6B,EACtC,OAAO,CAAC,EAAE,wCAAwC,GACjD,OAAO,CAAC,mCAAmC,CAAC,CAwB9C;CACF"}

package/dist/service/acm/command/describe-certificate/sim-acm-cert-detail-factory.d.ts

@@ -0,0 +1,22 @@
+import type { SimAcmCertificate } from "../../certificate/sim-acm-certificate.js";
+import type { SimAcmCertificateDetail } from "./describe-certificate.command.js";
+/**
+ * Builds ACM DescribeCertificate certificate detail payloads.
+ *
+ * This class owns the translation from the simulator's internal certificate
+ * model to the public DescribeCertificate response shape. Keeping that
+ * translation out of the command handler lets the handler stay focused on
+ * command validation, background sequencing, lookup, and error handling.
+ */
+export declare class SimAcmCertificateDetailFactory {
+    /**
+     * Convert one simulated ACM certificate into the structure returned as
+     * DescribeCertificateCommandOutput.Certificate.
+     *
+     * The simulator stores certificate data in camelCase fields, while the AWS
+     * SDK response uses PascalCase member names. This method is the boundary
+     * where those naming conventions are translated.
+     */
+    make(certificate: SimAcmCertificate): SimAcmCertificateDetail;
+}
+//# sourceMappingURL=sim-acm-cert-detail-factory.d.ts.map

package/dist/service/acm/command/describe-certificate/sim-acm-cert-detail-factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-acm-cert-detail-factory.d.ts","sourceRoot":"","sources":["../../../../../src/service/acm/command/describe-certificate/sim-acm-cert-detail-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAClF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAEjF;;;;;;;GAOG;AACH,qBAAa,8BAA8B;IACzC;;;;;;;OAOG;IACH,IAAI,CAAC,WAAW,EAAE,iBAAiB,GAAG,uBAAuB,CA4B5D;CACF"}

package/dist/service/acm/command/describe-certificate/sim-acm-cert-detail-factory.js

@@ -0,0 +1,45 @@
+/**
+ * Builds ACM DescribeCertificate certificate detail payloads.
+ *
+ * This class owns the translation from the simulator's internal certificate
+ * model to the public DescribeCertificate response shape. Keeping that
+ * translation out of the command handler lets the handler stay focused on
+ * command validation, background sequencing, lookup, and error handling.
+ */
+export class SimAcmCertificateDetailFactory {
+    /**
+     * Convert one simulated ACM certificate into the structure returned as
+     * DescribeCertificateCommandOutput.Certificate.
+     *
+     * The simulator stores certificate data in camelCase fields, while the AWS
+     * SDK response uses PascalCase member names. This method is the boundary
+     * where those naming conventions are translated.
+     */
+    make(certificate) {
+        return {
+            CertificateArn: certificate.certificateArn,
+            DomainName: certificate.domainName,
+            SubjectAlternativeNames: certificate.subjectAlternativeNames,
+            Status: certificate.status,
+            Type: "AMAZON_ISSUED",
+            KeyAlgorithm: "RSA-2048",
+            SignatureAlgorithm: "SHA256WITHRSA",
+            InUseBy: [],
+            CreatedAt: certificate.createdAt,
+            IssuedAt: certificate.issuedAt,
+            DomainValidationOptions: certificate.domainValidationOptions.map((option) => ({
+                DomainName: option.domainName,
+                ValidationMethod: option.validationMethod,
+                ValidationStatus: option.status,
+                ResourceRecord: option.resourceRecord === undefined
+                    ? undefined
+                    : {
+                        Name: option.resourceRecord.name,
+                        Type: option.resourceRecord.type,
+                        Value: option.resourceRecord.value,
+                    },
+            })),
+        };
+    }
+}
+//# sourceMappingURL=sim-acm-cert-detail-factory.js.map

package/dist/service/acm/command/describe-certificate/sim-acm-cert-detail-factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-acm-cert-detail-factory.js","sourceRoot":"","sources":["../../../../../src/service/acm/command/describe-certificate/sim-acm-cert-detail-factory.ts"],"names":[],"mappings":"AAGA;;;;;;;GAOG;AACH,MAAM,OAAO,8BAA8B;IACzC;;;;;;;OAOG;IACH,IAAI,CAAC,WAA8B;QACjC,OAAO;YACL,cAAc,EAAE,WAAW,CAAC,cAAc;YAC1C,UAAU,EAAE,WAAW,CAAC,UAAU;YAClC,uBAAuB,EAAE,WAAW,CAAC,uBAAuB;YAC5D,MAAM,EAAE,WAAW,CAAC,MAAM;YAC1B,IAAI,EAAE,eAAe;YACrB,YAAY,EAAE,UAAU;YACxB,kBAAkB,EAAE,eAAe;YACnC,OAAO,EAAE,EAAE;YACX,SAAS,EAAE,WAAW,CAAC,SAAS;YAChC,QAAQ,EAAE,WAAW,CAAC,QAAQ;YAC9B,uBAAuB,EAAE,WAAW,CAAC,uBAAuB,CAAC,GAAG,CAC9D,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBACX,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;gBACzC,gBAAgB,EAAE,MAAM,CAAC,MAAM;gBAC/B,cAAc,EACZ,MAAM,CAAC,cAAc,KAAK,SAAS;oBACjC,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC;wBACE,IAAI,EAAE,MAAM,CAAC,cAAc,CAAC,IAAI;wBAChC,IAAI,EAAE,MAAM,CAAC,cAAc,CAAC,IAAI;wBAChC,KAAK,EAAE,MAAM,CAAC,cAAc,CAAC,KAAK;qBACnC;aACR,CAAC,CACH;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/service/acm/command/list-certificates/list-certificates-page-builder.d.ts

@@ -1,6 +1,6 @@
 import type { SimArn } from "../../../aws/arn.js";
 import type { SimAcmCertificate } from "../../certificate/sim-acm-certificate.js";
-import type { SimListCertificatesCommandInput, SimListCertificatesCommandOutput } from "./list-certificates.cmd.js";
+import type { SimListCertificatesCommandInput, SimListCertificatesCommandOutput } from "./list-certificates.command.js";
 interface ListCertificatesPageBuilderProperties {
     readonly certificates: ReadonlyMap<SimArn, SimAcmCertificate>;
 }

package/dist/service/acm/command/list-certificates/list-certificates-page-builder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"list-certificates-page-builder.d.ts","sourceRoot":"","sources":["../../../../../src/service/acm/command/list-certificates/list-certificates-page-builder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAElF,OAAO,KAAK,EAEV,+BAA+B,EAC/B,gCAAgC,EACjC,MAAM,4BAA4B,CAAC;AAEpC,UAAU,qCAAqC;IAC7C,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;CAC/D;AAED,KAAK,oBAAoB,GAAG,IAAI,CAAC,gCAAgC,EAAE,WAAW,CAAC,CAAC;AAKhF;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,2BAA2B;IACtC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAyC;IAEtE,YAAY,UAAU,EAAE,qCAAqC,EAE5D;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,KAAK,EAAE,+BAA+B,GAAG,oBAAoB,CAkBlE;IAED;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ;IAgBhB;;;;;;OAMG;IACH,OAAO,CAAC,UAAU;IAoBlB;;;;;;OAMG;IACH,OAAO,CAAC,oBAAoB;IAY5B;;;;;;OAMG;IACH,OAAO,CAAC,SAAS;IAUjB;;;;;;OAMG;IACH,OAAO,CAAC,kBAAkB;CAkB3B"}
+{"version":3,"file":"list-certificates-page-builder.d.ts","sourceRoot":"","sources":["../../../../../src/service/acm/command/list-certificates/list-certificates-page-builder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAElF,OAAO,KAAK,EAEV,+BAA+B,EAC/B,gCAAgC,EACjC,MAAM,gCAAgC,CAAC;AAExC,UAAU,qCAAqC;IAC7C,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;CAC/D;AAED,KAAK,oBAAoB,GAAG,IAAI,CAAC,gCAAgC,EAAE,WAAW,CAAC,CAAC;AAKhF;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,2BAA2B;IACtC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAyC;IAEtE,YAAY,UAAU,EAAE,qCAAqC,EAE5D;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,KAAK,EAAE,+BAA+B,GAAG,oBAAoB,CAkBlE;IAED;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ;IAgBhB;;;;;;OAMG;IACH,OAAO,CAAC,UAAU;IAoBlB;;;;;;OAMG;IACH,OAAO,CAAC,oBAAoB;IAY5B;;;;;;OAMG;IACH,OAAO,CAAC,SAAS;IAUjB;;;;;;OAMG;IACH,OAAO,CAAC,kBAAkB;CAkB3B"}

package/dist/service/acm/command/list-certificates/list-certificates-page-builder.js

@@ -1,4 +1,4 @@
-import { SimAcmInvalidArgsException as SimAcmInvalidArgumentsException } from "../../error/sim-acm.error.js";
+import { SimAcmInvalidArgumentsException } from "../../error/sim-acm.error.js";
 const defaultMaxItems = 100;
 const maxMaxItems = 1000;
 /**

package/dist/service/acm/command/list-certificates/list-certificates-page-builder.js.map

@@ -1 +1 @@
-{"version":3,"file":"list-certificates-page-builder.js","sourceRoot":"","sources":["../../../../../src/service/acm/command/list-certificates/list-certificates-page-builder.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,0BAA0B,IAAI,+BAA+B,EAAE,MAAM,8BAA8B,CAAC;AAa7G,MAAM,eAAe,GAAG,GAAG,CAAC;AAC5B,MAAM,WAAW,GAAG,IAAI,CAAC;AAEzB;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,2BAA2B;IACrB,YAAY,CAAyC;IAEtE,YAAY,UAAiD;QAC3D,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;IAC9C,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,KAAsC;QAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACpD,MAAM,oBAAoB,GAAG,IAAI,CAAC,oBAAoB,CACpD,KAAK,CAAC,mBAAmB,CAC1B,CAAC;QACF,MAAM,IAAI,GAAG,oBAAoB,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,GAAG,QAAQ,CAAC,CAAC;QAE3E,OAAO;YACL,sBAAsB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAC/C,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,CACrC;YACD,SAAS,EAAE,IAAI,CAAC,SAAS,CACvB,UAAU,EACV,QAAQ,EACR,oBAAoB,CAAC,MAAM,CAC5B;SACF,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACK,QAAQ,CAAC,iBAA0B;QACzC,MAAM,QAAQ,GAAG,iBAAiB,IAAI,eAAe,CAAC;QAEtD,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC;YAC/B,QAAQ,GAAG,CAAC;YACZ,QAAQ,GAAG,WAAW,EACtB,CAAC;YACD,MAAM,IAAI,+BAA+B,CACvC,8EAA8E,CAC/E,CAAC;QACJ,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;;;OAMG;IACK,UAAU,CAAC,SAAkB;QACnC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,CAAC,CAAC;QACX,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;QAErC,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC;YACjC,UAAU,GAAG,CAAC;YACd,MAAM,CAAC,UAAU,CAAC,KAAK,SAAS,EAChC,CAAC;YACD,MAAM,IAAI,+BAA+B,CACvC,oDAAoD,CACrD,CAAC;QACJ,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;;;;;OAMG;IACK,oBAAoB,CAC1B,QAAgE;QAEhE,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;QAE1D,OAAO,QAAQ,KAAK,SAAS;YAC3B,CAAC,CAAC,YAAY;YACd,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAClC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,CACtC,CAAC;IACR,CAAC;IAED;;;;;;OAMG;IACK,SAAS,CACf,UAAkB,EAClB,QAAgB,EAChB,wBAAgC;QAEhC,MAAM,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC;QAExC,OAAO,SAAS,GAAG,wBAAwB,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9E,CAAC;IAED;;;;;;OAMG;IACK,kBAAkB,CACxB,WAA8B;QAE9B,OAAO;YACL,cAAc,EAAE,WAAW,CAAC,cAAc;YAC1C,UAAU,EAAE,WAAW,CAAC,UAAU;YAClC,+BAA+B,EAC7B,WAAW,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;YACnD,oCAAoC,EAClC,WAAW,CAAC,uBAAuB,CAAC,MAAM,GAAG,GAAG;YAClD,MAAM,EAAE,WAAW,CAAC,MAAM;YAC1B,IAAI,EAAE,aAAa;YACnB,YAAY,EAAE,UAAU;YACxB,KAAK,EAAE,KAAK;YACZ,SAAS,EAAE,WAAW,CAAC,SAAS;YAChC,QAAQ,EAAE,WAAW,CAAC,QAAQ;SAC/B,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"list-certificates-page-builder.js","sourceRoot":"","sources":["../../../../../src/service/acm/command/list-certificates/list-certificates-page-builder.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,+BAA+B,EAAE,MAAM,8BAA8B,CAAC;AAa/E,MAAM,eAAe,GAAG,GAAG,CAAC;AAC5B,MAAM,WAAW,GAAG,IAAI,CAAC;AAEzB;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,2BAA2B;IACrB,YAAY,CAAyC;IAEtE,YAAY,UAAiD;QAC3D,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;IAC9C,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,KAAsC;QAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACpD,MAAM,oBAAoB,GAAG,IAAI,CAAC,oBAAoB,CACpD,KAAK,CAAC,mBAAmB,CAC1B,CAAC;QACF,MAAM,IAAI,GAAG,oBAAoB,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,GAAG,QAAQ,CAAC,CAAC;QAE3E,OAAO;YACL,sBAAsB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAC/C,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,CACrC;YACD,SAAS,EAAE,IAAI,CAAC,SAAS,CACvB,UAAU,EACV,QAAQ,EACR,oBAAoB,CAAC,MAAM,CAC5B;SACF,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACK,QAAQ,CAAC,iBAA0B;QACzC,MAAM,QAAQ,GAAG,iBAAiB,IAAI,eAAe,CAAC;QAEtD,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC;YAC/B,QAAQ,GAAG,CAAC;YACZ,QAAQ,GAAG,WAAW,EACtB,CAAC;YACD,MAAM,IAAI,+BAA+B,CACvC,8EAA8E,CAC/E,CAAC;QACJ,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;;;OAMG;IACK,UAAU,CAAC,SAAkB;QACnC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,CAAC,CAAC;QACX,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;QAErC,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC;YACjC,UAAU,GAAG,CAAC;YACd,MAAM,CAAC,UAAU,CAAC,KAAK,SAAS,EAChC,CAAC;YACD,MAAM,IAAI,+BAA+B,CACvC,oDAAoD,CACrD,CAAC;QACJ,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;;;;;OAMG;IACK,oBAAoB,CAC1B,QAAgE;QAEhE,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;QAE1D,OAAO,QAAQ,KAAK,SAAS;YAC3B,CAAC,CAAC,YAAY;YACd,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAClC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,CACtC,CAAC;IACR,CAAC;IAED;;;;;;OAMG;IACK,SAAS,CACf,UAAkB,EAClB,QAAgB,EAChB,wBAAgC;QAEhC,MAAM,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC;QAExC,OAAO,SAAS,GAAG,wBAAwB,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9E,CAAC;IAED;;;;;;OAMG;IACK,kBAAkB,CACxB,WAA8B;QAE9B,OAAO;YACL,cAAc,EAAE,WAAW,CAAC,cAAc;YAC1C,UAAU,EAAE,WAAW,CAAC,UAAU;YAClC,+BAA+B,EAC7B,WAAW,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;YACnD,oCAAoC,EAClC,WAAW,CAAC,uBAAuB,CAAC,MAAM,GAAG,GAAG;YAClD,MAAM,EAAE,WAAW,CAAC,MAAM;YAC1B,IAAI,EAAE,aAAa;YACnB,YAAY,EAAE,UAAU;YACxB,KAAK,EAAE,KAAK;YACZ,SAAS,EAAE,WAAW,CAAC,SAAS;YAChC,QAAQ,EAAE,WAAW,CAAC,QAAQ;SAC/B,CAAC;IACJ,CAAC;CACF"}