@kensio/yulin 0.34.2 → 0.35.0

package/dist/service/acm/command/request-certificate/request-cert-factory.js

@@ -1,5 +1,6 @@
 import { createHash } from "node:crypto";
 import { SimAcmCertificate, } from "../../certificate/sim-acm-certificate.js";
+import { SimAcmDomainValidation, } from "../../certificate/sim-acm-domain-validation.js";
 import { assertDefined } from "../../../../util/type-guard/defined.js";
 /**
  * Builds simulated ACM certificates for RequestCertificateCommand.
@@ -66,13 +67,20 @@ export class RequestCertificateFactory {
      * available when ACM can provide one.
      */
     makeDomainValidationOption(domainName, validationMethod) {
-        return {
+        return new SimAcmDomainValidation({
             domainName,
             validationMethod,
-            resourceRecord: validationMethod === "DNS"
-                ? this.makeValidationRecord(domainName)
-                : undefined,
-        };
+            resourceRecord: this.makeResourceRecord(domainName, validationMethod),
+        });
+    }
+    /**
+     * Build the record ACM asks for, where the validation method has one.
+     */
+    makeResourceRecord(domainName, validationMethod) {
+        if (validationMethod !== "DNS") {
+            return undefined;
+        }
+        return this.makeValidationRecord(domainName);
     }
     /**
      * Build a deterministic DNS validation CNAME for a domain.

package/dist/service/acm/command/request-certificate/request-cert-factory.js.map

@@ -1 +1 @@
-{"version":3,"file":"request-cert-factory.js","sourceRoot":"","sources":["../../../../../src/service/acm/command/request-certificate/request-cert-factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EACL,iBAAiB,GAKlB,MAAM,0CAA0C,CAAC;AAElD,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAMvE;;;;;;;GAOG;AACH,MAAM,OAAO,yBAAyB;IACnB,kBAAkB,CAA2B;IAE9D,YAAY,UAA+C;QACzD,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;IAC1D,CAAC;IAED;;;;;;;OAOG;IACH,eAAe,CACb,OAAqC,EACrC,gBAAwB;QAExB,MAAM,cAAc,GAAG,IAAI,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;QACjE,MAAM,gBAAgB,GAAG,OAAO,CAAC,KAAK,CAAC,gBAAgB,IAAI,KAAK,CAAC;QACjE,MAAM,WAAW,GAAG;YAClB,OAAO,CAAC,KAAK,CAAC,UAAU;YACxB,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,uBAAuB,IAAI,EAAE,CAAC;SACjD,CAAC;QACF,aAAa,CACX,OAAO,CAAC,KAAK,CAAC,UAAU,EACxB,wDAAwD,CACzD,CAAC;QAEF,OAAO,IAAI,iBAAiB,CAAC;YAC3B,cAAc;YACd,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,UAAU;YACpC,uBAAuB,EAAE,OAAO,CAAC,KAAK,CAAC,uBAAuB,IAAI,EAAE;YACpE,MAAM,EAAE,oBAAoB;YAC5B,gBAAgB;YAChB,uBAAuB,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;gBACtD,aAAa,CACX,UAAU,EACV,kFAAkF,CACnF,CAAC;gBACF,OAAO,IAAI,CAAC,0BAA0B,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;YACvE,CAAC,CAAC;YACF,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,GAAG,EAAa,EAAE,CAAC,CAAC;gBACjD,GAAG,EAAE,GAAG,CAAC,GAAG;gBACZ,KAAK,EAAE,GAAG,CAAC,KAAK;aACjB,CAAC,CAAC;SACJ,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACK,kBAAkB,CAAC,gBAAwB;QACjD,MAAM,aAAa,GAAG,MAAM,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAEpE,OAAO,eAAe,IAAI,CAAC,kBAAkB,CAAC,UAAU,IAAI,IAAI,CAAC,kBAAkB,CAAC,SAAS,gBAAgB,aAAa,EAAE,CAAC;IAC/H,CAAC;IAED;;;;;;OAMG;IACK,0BAA0B,CAChC,UAAkB,EAClB,gBAAwC;QAExC,OAAO;YACL,UAAU;YACV,gBAAgB;YAChB,cAAc,EACZ,gBAAgB,KAAK,KAAK;gBACxB,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC;gBACvC,CAAC,CAAC,SAAS;SAChB,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACK,oBAAoB,CAAC,UAAkB;QAC7C,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC;aAC9B,MAAM,CACL;YACE,IAAI,CAAC,kBAAkB,CAAC,SAAS;YACjC,IAAI,CAAC,kBAAkB,CAAC,UAAU;YAClC,UAAU;SACX,CAAC,IAAI,CAAC,GAAG,CAAC,CACZ;aACA,MAAM,CAAC,KAAK,CAAC;aACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAEhB,OAAO;YACL,IAAI,EAAE,cAAc,IAAI,IAAI,UAAU,GAAG;YACzC,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,cAAc,IAAI,uBAAuB;SACjD,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"request-cert-factory.js","sourceRoot":"","sources":["../../../../../src/service/acm/command/request-certificate/request-cert-factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EACL,iBAAiB,GAElB,MAAM,0CAA0C,CAAC;AAClD,OAAO,EACL,sBAAsB,GAGvB,MAAM,gDAAgD,CAAC;AAExD,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAMvE;;;;;;;GAOG;AACH,MAAM,OAAO,yBAAyB;IACnB,kBAAkB,CAA2B;IAE9D,YAAY,UAA+C;QACzD,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;IAC1D,CAAC;IAED;;;;;;;OAOG;IACH,eAAe,CACb,OAAqC,EACrC,gBAAwB;QAExB,MAAM,cAAc,GAAG,IAAI,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;QACjE,MAAM,gBAAgB,GAAG,OAAO,CAAC,KAAK,CAAC,gBAAgB,IAAI,KAAK,CAAC;QACjE,MAAM,WAAW,GAAG;YAClB,OAAO,CAAC,KAAK,CAAC,UAAU;YACxB,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,uBAAuB,IAAI,EAAE,CAAC;SACjD,CAAC;QACF,aAAa,CACX,OAAO,CAAC,KAAK,CAAC,UAAU,EACxB,wDAAwD,CACzD,CAAC;QAEF,OAAO,IAAI,iBAAiB,CAAC;YAC3B,cAAc;YACd,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,UAAU;YACpC,uBAAuB,EAAE,OAAO,CAAC,KAAK,CAAC,uBAAuB,IAAI,EAAE;YACpE,MAAM,EAAE,oBAAoB;YAC5B,gBAAgB;YAChB,uBAAuB,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;gBACtD,aAAa,CACX,UAAU,EACV,kFAAkF,CACnF,CAAC;gBACF,OAAO,IAAI,CAAC,0BAA0B,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;YACvE,CAAC,CAAC;YACF,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,GAAG,EAAa,EAAE,CAAC,CAAC;gBACjD,GAAG,EAAE,GAAG,CAAC,GAAG;gBACZ,KAAK,EAAE,GAAG,CAAC,KAAK;aACjB,CAAC,CAAC;SACJ,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACK,kBAAkB,CAAC,gBAAwB;QACjD,MAAM,aAAa,GAAG,MAAM,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAEpE,OAAO,eAAe,IAAI,CAAC,kBAAkB,CAAC,UAAU,IAAI,IAAI,CAAC,kBAAkB,CAAC,SAAS,gBAAgB,aAAa,EAAE,CAAC;IAC/H,CAAC;IAED;;;;;;OAMG;IACK,0BAA0B,CAChC,UAAkB,EAClB,gBAAwC;QAExC,OAAO,IAAI,sBAAsB,CAAC;YAChC,UAAU;YACV,gBAAgB;YAChB,cAAc,EAAE,IAAI,CAAC,kBAAkB,CAAC,UAAU,EAAE,gBAAgB,CAAC;SACtE,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,kBAAkB,CACxB,UAAkB,EAClB,gBAAwC;QAExC,IAAI,gBAAgB,KAAK,KAAK,EAAE,CAAC;YAC/B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC;IAC/C,CAAC;IAED;;;;;;;OAOG;IACK,oBAAoB,CAAC,UAAkB;QAC7C,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC;aAC9B,MAAM,CACL;YACE,IAAI,CAAC,kBAAkB,CAAC,SAAS;YACjC,IAAI,CAAC,kBAAkB,CAAC,UAAU;YAClC,UAAU;SACX,CAAC,IAAI,CAAC,GAAG,CAAC,CACZ;aACA,MAAM,CAAC,KAAK,CAAC;aACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAEhB,OAAO;YACL,IAAI,EAAE,cAAc,IAAI,IAAI,UAAU,GAAG;YACzC,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,cAAc,IAAI,uBAAuB;SACjD,CAAC;IACJ,CAAC;CACF"}

package/dist/service/acm/command/request-certificate/request-certificate-validator.d.ts

@@ -1,4 +1,4 @@
-import type { SimRequestCertificateCommand } from "./request-certificate.cmd.js";
+import type { SimRequestCertificateCommand } from "./request-certificate.command.js";
 /**
  * Validates request-level invariants for ACM RequestCertificate.
  *

package/dist/service/acm/command/request-certificate/request-certificate-validator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"request-certificate-validator.d.ts","sourceRoot":"","sources":["../../../../../src/service/acm/command/request-certificate/request-certificate-validator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,8BAA8B,CAAC;AAMjF;;;;;;;;;;;GAWG;AACH,qBAAa,2BAA2B;IACtC;;;;;;;OAOG;IACH,QAAQ,CAAC,OAAO,EAAE,4BAA4B,GAAG,IAAI,CAepD;CACF"}
+{"version":3,"file":"request-certificate-validator.d.ts","sourceRoot":"","sources":["../../../../../src/service/acm/command/request-certificate/request-certificate-validator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AAMrF;;;;;;;;;;;GAWG;AACH,qBAAa,2BAA2B;IACtC;;;;;;;OAOG;IACH,QAAQ,CAAC,OAAO,EAAE,4BAA4B,GAAG,IAAI,CAepD;CACF"}

package/dist/service/acm/command/request-certificate/request-certificate-validator.js

@@ -1,4 +1,4 @@
-import { SimAcmInvalidArgsException as SimAcmInvalidArgumentsException, SimAcmTooManyTagsException, } from "../../error/sim-acm.error.js";
+import { SimAcmInvalidArgumentsException, SimAcmTooManyTagsException, } from "../../error/sim-acm.error.js";
 /**
  * Validates request-level invariants for ACM RequestCertificate.
  *

package/dist/service/acm/command/request-certificate/request-certificate-validator.js.map

@@ -1 +1 @@
-{"version":3,"file":"request-certificate-validator.js","sourceRoot":"","sources":["../../../../../src/service/acm/command/request-certificate/request-certificate-validator.ts"],"names":[],"mappings":"AACA,OAAO,EACL,0BAA0B,IAAI,+BAA+B,EAC7D,0BAA0B,GAC3B,MAAM,8BAA8B,CAAC;AAEtC;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,2BAA2B;IACtC;;;;;;;OAOG;IACH,QAAQ,CAAC,OAAqC;QAC5C,IACE,OAAO,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS;YACtC,OAAO,CAAC,KAAK,CAAC,UAAU,KAAK,EAAE,EAC/B,CAAC;YACD,MAAM,IAAI,+BAA+B,CACvC,qDAAqD,CACtD,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;YAC3C,MAAM,IAAI,0BAA0B,CAClC,uEAAuE,CACxE,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"request-certificate-validator.js","sourceRoot":"","sources":["../../../../../src/service/acm/command/request-certificate/request-certificate-validator.ts"],"names":[],"mappings":"AACA,OAAO,EACL,+BAA+B,EAC/B,0BAA0B,GAC3B,MAAM,8BAA8B,CAAC;AAEtC;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,2BAA2B;IACtC;;;;;;;OAOG;IACH,QAAQ,CAAC,OAAqC;QAC5C,IACE,OAAO,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS;YACtC,OAAO,CAAC,KAAK,CAAC,UAAU,KAAK,EAAE,EAC/B,CAAC;YACD,MAAM,IAAI,+BAA+B,CACvC,qDAAqD,CACtD,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;YAC3C,MAAM,IAAI,0BAA0B,CAClC,uEAAuE,CACxE,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/service/acm/command/request-certificate/{request-certificate.cmd.d.ts → request-certificate.command.d.ts}

@@ -1,6 +1,6 @@
 import type { SimArn } from "../../../aws/arn.js";
 import type { SimResponseMetadata } from "../../../aws/metadata/response-metadata.type.js";
-import type { SimAcmValidationMethod } from "../../certificate/sim-acm-certificate.js";
+import type { SimAcmValidationMethod } from "../../certificate/sim-acm-domain-validation.js";
 /**
  * Minimal structural sim ACM RequestCertificate command.
  */
@@ -40,4 +40,4 @@ export interface SimRequestCertificateCommandOutput {
     readonly CertificateArn?: SimArn | undefined;
     readonly $metadata: SimResponseMetadata;
 }
-//# sourceMappingURL=request-certificate.cmd.d.ts.map
+//# sourceMappingURL=request-certificate.command.d.ts.map

package/dist/service/acm/command/request-certificate/request-certificate.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-certificate.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/acm/command/request-certificate/request-certificate.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gDAAgD,CAAC;AAE7F;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,KAAK,EAAE,iCAAiC,CAAC;CACnD;AAED;;;;GAIG;AACH,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACjE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,sBAAsB,GAAG,SAAS,CAAC;IAC/D,QAAQ,CAAC,uBAAuB,CAAC,EAC/B,SAAS,2CAA2C,EAAE,GAAG,SAAS,CAAC;IACrE,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,wBAAwB,EAAE,GAAG,SAAS,CAAC;CACjE;AAED;;GAEG;AACH,MAAM,WAAW,2CAA2C;IAC1D,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChD;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACrC;AAED;;GAEG;AACH,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC"}

package/dist/service/acm/command/request-certificate/request-certificate.command.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=request-certificate.command.js.map

package/dist/service/acm/command/request-certificate/request-certificate.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-certificate.command.js","sourceRoot":"","sources":["../../../../../src/service/acm/command/request-certificate/request-certificate.command.ts"],"names":[],"mappings":""}

package/dist/service/acm/command/request-certificate/request-certificate.handler.d.ts

@@ -2,15 +2,17 @@ import type { SimAwsAccountRegionScope } from "../../../aws/sim-aws-account-regi
 import type { SimArn } from "../../../aws/arn.js";
 import { type BackgroundScheduler } from "../../../../util/background/background.js";
 import type { CommandHandler } from "../../../../command/command-handler.js";
-import type { SimRequestCertificateCommand, SimRequestCertificateCommandOutput } from "./request-certificate.cmd.js";
+import type { SimRequestCertificateCommand, SimRequestCertificateCommandOutput } from "./request-certificate.command.js";
 import type { SimAcmCertificate } from "../../certificate/sim-acm-certificate.js";
 import { type SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
 import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import { SimAcmCertificateValidation } from "../../validation/sim-acm-certificate-validation.js";
 interface RequestCertificateCommandHandlerProperties {
     readonly accountRegionScope: SimAwsAccountRegionScope;
     readonly certificates: Map<SimArn, SimAcmCertificate>;
     readonly iam?: SimIamInterServiceAuthZ;
     readonly background?: BackgroundScheduler;
+    readonly validation?: SimAcmCertificateValidation;
 }
 interface RequestCertificateCommandHandlerOptions {
     readonly caller?: SimAwsCaller;
@@ -25,6 +27,7 @@ export declare class RequestCertificateCommandHandler implements CommandHandler<
     private readonly authorizer;
     private readonly background;
     private readonly certificateFactory;
+    private readonly validation;
     private readonly validator;
     constructor(properties: RequestCertificateCommandHandlerProperties);
     /**

package/dist/service/acm/command/request-certificate/request-certificate.handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"request-certificate.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/acm/command/request-certificate/request-certificate.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,KAAK,EACV,4BAA4B,EAC5B,kCAAkC,EACnC,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAIlF,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,wDAAwD,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAE1E,UAAU,0CAA0C;IAClD,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;IACtD,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACtD,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED,UAAU,uCAAuC;IAC/C,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;GAIG;AACH,qBAAa,gCAAiC,YAAW,cAAc,CACrE,4BAA4B,EAC5B,kCAAkC,CACnC;IACC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAiC;IAC9D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+B;IAC1D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA4B;IAC/D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAqC;IAE/D,YAAY,UAAU,EAAE,0CAA0C,EAiBjE;IAED;;;;;;;OAOG;IACG,MAAM,CACV,OAAO,EAAE,4BAA4B,EACrC,OAAO,CAAC,EAAE,uCAAuC,GAChD,OAAO,CAAC,kCAAkC,CAAC,CAuB7C;CACF"}
+{"version":3,"file":"request-certificate.handler.d.ts","sourceRoot":"","sources":["../../../../../src/service/acm/command/request-certificate/request-certificate.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,KAAK,EACV,4BAA4B,EAC5B,kCAAkC,EACnC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAIlF,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,wDAAwD,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,EAAE,2BAA2B,EAAE,MAAM,oDAAoD,CAAC;AAEjG,UAAU,0CAA0C;IAClD,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;IACtD,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACtD,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;IAC1C,QAAQ,CAAC,UAAU,CAAC,EAAE,2BAA2B,CAAC;CACnD;AAED,UAAU,uCAAuC;IAC/C,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;GAIG;AACH,qBAAa,gCAAiC,YAAW,cAAc,CACrE,4BAA4B,EAC5B,kCAAkC,CACnC;IACC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAiC;IAC9D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+B;IAC1D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA4B;IAC/D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA8B;IACzD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAqC;IAE/D,YAAY,UAAU,EAAE,0CAA0C,EAmBjE;IAED;;;;;;;OAOG;IACG,MAAM,CACV,OAAO,EAAE,4BAA4B,EACrC,OAAO,CAAC,EAAE,uCAAuC,GAChD,OAAO,CAAC,kCAAkC,CAAC,CAuB7C;CACF"}

package/dist/service/acm/command/request-certificate/request-certificate.handler.js

@@ -3,6 +3,7 @@ import { RequestCertificateAuthorizer } from "./request-certificate-authorizer.j
 import { RequestCertificateFactory } from "./request-cert-factory.js";
 import { RequestCertificateValidator } from "./request-certificate-validator.js";
 import { SimIamAllowAllAuth, } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import { SimAcmCertificateValidation } from "../../validation/sim-acm-certificate-validation.js";
 /**
  * Simulated ACM RequestCertificateCommand handler.
  *
@@ -13,10 +14,12 @@ export class RequestCertificateCommandHandler {
     authorizer;
     background;
     certificateFactory;
+    validation;
     validator = new RequestCertificateValidator();
     constructor(properties) {
-        const { accountRegionScope, certificates, iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), } = properties;
+        const { accountRegionScope, certificates, iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), validation = new SimAcmCertificateValidation({ background }), } = properties;
         this.certificates = certificates;
+        this.validation = validation;
         this.authorizer = new RequestCertificateAuthorizer({
             iam,
             resource: `arn:aws:acm:${accountRegionScope.regionName}:${accountRegionScope.accountId}:certificate/*`,
@@ -42,8 +45,8 @@ export class RequestCertificateCommandHandler {
         const certificate = this.certificateFactory.makeCertificate(command, this.certificates.size);
         const { certificateArn } = certificate;
         this.certificates.set(certificateArn, certificate);
-        // Schedule background task to issue the sim Certificate.
-        this.background.schedule(() => certificate.issue());
+        // Issuance waits on domain validation, which happens in the background.
+        this.validation.begin(certificate);
         return {
             $metadata: {},
             CertificateArn: certificateArn,

package/dist/service/acm/command/request-certificate/request-certificate.handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"request-certificate.handler.js","sourceRoot":"","sources":["../../../../../src/service/acm/command/request-certificate/request-certificate.handler.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,eAAe,GAChB,MAAM,2CAA2C,CAAC;AAOnD,OAAO,EAAE,4BAA4B,EAAE,MAAM,qCAAqC,CAAC;AACnF,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AACjF,OAAO,EACL,kBAAkB,GAEnB,MAAM,wDAAwD,CAAC;AAchE;;;;GAIG;AACH,MAAM,OAAO,gCAAgC;IAI1B,YAAY,CAAiC;IAC7C,UAAU,CAA+B;IACzC,UAAU,CAAsB;IAChC,kBAAkB,CAA4B;IAC9C,SAAS,GAAG,IAAI,2BAA2B,EAAE,CAAC;IAE/D,YAAY,UAAsD;QAChE,MAAM,EACJ,kBAAkB,EAClB,YAAY,EACZ,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,UAAU,CAAC;QAEf,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,UAAU,GAAG,IAAI,4BAA4B,CAAC;YACjD,GAAG;YACH,QAAQ,EAAE,eAAe,kBAAkB,CAAC,UAAU,IAAI,kBAAkB,CAAC,SAAS,gBAAgB;SACvG,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,kBAAkB,GAAG,IAAI,yBAAyB,CAAC;YACtD,kBAAkB;SACnB,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,MAAM,CACV,OAAqC,EACrC,OAAiD;QAEjD,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAEjC,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAE3C,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,eAAe,CACzD,OAAO,EACP,IAAI,CAAC,YAAY,CAAC,IAAI,CACvB,CAAC;QACF,MAAM,EAAE,cAAc,EAAE,GAAG,WAAW,CAAC;QAEvC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QAEnD,yDAAyD;QACzD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC;QAEpD,OAAO;YACL,SAAS,EAAE,EAAE;YACb,cAAc,EAAE,cAAc;SAC/B,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"request-certificate.handler.js","sourceRoot":"","sources":["../../../../../src/service/acm/command/request-certificate/request-certificate.handler.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,eAAe,GAChB,MAAM,2CAA2C,CAAC;AAOnD,OAAO,EAAE,4BAA4B,EAAE,MAAM,qCAAqC,CAAC;AACnF,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AACjF,OAAO,EACL,kBAAkB,GAEnB,MAAM,wDAAwD,CAAC;AAEhE,OAAO,EAAE,2BAA2B,EAAE,MAAM,oDAAoD,CAAC;AAcjG;;;;GAIG;AACH,MAAM,OAAO,gCAAgC;IAI1B,YAAY,CAAiC;IAC7C,UAAU,CAA+B;IACzC,UAAU,CAAsB;IAChC,kBAAkB,CAA4B;IAC9C,UAAU,CAA8B;IACxC,SAAS,GAAG,IAAI,2BAA2B,EAAE,CAAC;IAE/D,YAAY,UAAsD;QAChE,MAAM,EACJ,kBAAkB,EAClB,YAAY,EACZ,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,EAClC,UAAU,GAAG,IAAI,2BAA2B,CAAC,EAAE,UAAU,EAAE,CAAC,GAC7D,GAAG,UAAU,CAAC;QAEf,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,UAAU,GAAG,IAAI,4BAA4B,CAAC;YACjD,GAAG;YACH,QAAQ,EAAE,eAAe,kBAAkB,CAAC,UAAU,IAAI,kBAAkB,CAAC,SAAS,gBAAgB;SACvG,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,kBAAkB,GAAG,IAAI,yBAAyB,CAAC;YACtD,kBAAkB;SACnB,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,MAAM,CACV,OAAqC,EACrC,OAAiD;QAEjD,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAEjC,oEAAoE;QACpE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAEjC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAE3C,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,eAAe,CACzD,OAAO,EACP,IAAI,CAAC,YAAY,CAAC,IAAI,CACvB,CAAC;QACF,MAAM,EAAE,cAAc,EAAE,GAAG,WAAW,CAAC;QAEvC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QAEnD,wEAAwE;QACxE,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAEnC,OAAO;YACL,SAAS,EAAE,EAAE;YACb,cAAc,EAAE,cAAc;SAC/B,CAAC;IACJ,CAAC;CACF"}

package/dist/service/acm/error/sim-acm.error.d.ts

@@ -14,7 +14,7 @@ export declare class SimAcmError extends Error {
 /**
  * Simulated ACM InvalidArgsException error.
  */
-export declare class SimAcmInvalidArgsException extends SimAcmError {
+export declare class SimAcmInvalidArgumentsException extends SimAcmError {
     readonly name = "InvalidArgsException";
     constructor(message: string);
 }
@@ -25,6 +25,18 @@ export declare class SimAcmResourceNotFoundException extends SimAcmError {
     readonly name = "ResourceNotFoundException";
     constructor(message: string);
 }
+/**
+ * Simulated ACM DNS validation failure.
+ *
+ * This is a simulator diagnostic rather than an AWS error: real ACM leaves a
+ * certificate pending until validation times out hours later, which is no use
+ * in a test. The message names the records that could not be published so the
+ * missing Hosted Zone is obvious.
+ */
+export declare class SimAcmDnsValidationFailed extends SimAcmError {
+    readonly name = "DnsValidationFailed";
+    constructor(message: string);
+}
 /**
  * Simulated ACM TooManyTagsException error.
  */

package/dist/service/acm/error/sim-acm.error.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-acm.error.d.ts","sourceRoot":"","sources":["../../../../src/service/acm/error/sim-acm.error.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;;GAEG;AACH,qBAAa,WAAY,SAAQ,KAAK;aAGlB,SAAS,EAAE,mBAAmB;IAFhD,YACE,OAAO,EAAE,MAAM,EACC,SAAS,GAAE,mBAAwB,EAGpD;CACF;AAED;;GAEG;AACH,qBAAa,0BAA2B,SAAQ,WAAW;IACzD,SAAyB,IAAI,0BAA0B;IAEvD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;GAEG;AACH,qBAAa,+BAAgC,SAAQ,WAAW;IAC9D,SAAyB,IAAI,+BAA+B;IAE5D,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;GAEG;AACH,qBAAa,0BAA2B,SAAQ,WAAW;IACzD,SAAyB,IAAI,0BAA0B;IAEvD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF"}
+{"version":3,"file":"sim-acm.error.d.ts","sourceRoot":"","sources":["../../../../src/service/acm/error/sim-acm.error.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;;GAEG;AACH,qBAAa,WAAY,SAAQ,KAAK;aAGlB,SAAS,EAAE,mBAAmB;IAFhD,YACE,OAAO,EAAE,MAAM,EACC,SAAS,GAAE,mBAAwB,EAGpD;CACF;AAED;;GAEG;AACH,qBAAa,+BAAgC,SAAQ,WAAW;IAC9D,SAAyB,IAAI,0BAA0B;IAEvD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;GAEG;AACH,qBAAa,+BAAgC,SAAQ,WAAW;IAC9D,SAAyB,IAAI,+BAA+B;IAE5D,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;;;GAOG;AACH,qBAAa,yBAA0B,SAAQ,WAAW;IACxD,SAAyB,IAAI,yBAAyB;IAEtD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;GAEG;AACH,qBAAa,0BAA2B,SAAQ,WAAW;IACzD,SAAyB,IAAI,0BAA0B;IAEvD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF"}

package/dist/service/acm/error/sim-acm.error.js

@@ -11,7 +11,7 @@ export class SimAcmError extends Error {
 /**
  * Simulated ACM InvalidArgsException error.
  */
-export class SimAcmInvalidArgsException extends SimAcmError {
+export class SimAcmInvalidArgumentsException extends SimAcmError {
     name = "InvalidArgsException";
     constructor(message) {
         super(message, { httpStatusCode: 400 });
@@ -26,6 +26,20 @@ export class SimAcmResourceNotFoundException extends SimAcmError {
         super(message, { httpStatusCode: 400 });
     }
 }
+/**
+ * Simulated ACM DNS validation failure.
+ *
+ * This is a simulator diagnostic rather than an AWS error: real ACM leaves a
+ * certificate pending until validation times out hours later, which is no use
+ * in a test. The message names the records that could not be published so the
+ * missing Hosted Zone is obvious.
+ */
+export class SimAcmDnsValidationFailed extends SimAcmError {
+    name = "DnsValidationFailed";
+    constructor(message) {
+        super(message, { httpStatusCode: 400 });
+    }
+}
 /**
  * Simulated ACM TooManyTagsException error.
  */

package/dist/service/acm/error/sim-acm.error.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-acm.error.js","sourceRoot":"","sources":["../../../../src/service/acm/error/sim-acm.error.ts"],"names":[],"mappings":"AAOA;;GAEG;AACH,MAAM,OAAO,WAAY,SAAQ,KAAK;IAGlB,SAAS;IAF3B,YACE,OAAe,EACC,SAAS,GAAwB,EAAE;QAEnD,KAAK,CAAC,OAAO,CAAC,CAAC;yBAFC,SAAS;IAG3B,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,0BAA2B,SAAQ,WAAW;IAChC,IAAI,GAAG,sBAAsB,CAAC;IAEvD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,+BAAgC,SAAQ,WAAW;IACrC,IAAI,GAAG,2BAA2B,CAAC;IAE5D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,0BAA2B,SAAQ,WAAW;IAChC,IAAI,GAAG,sBAAsB,CAAC;IAEvD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF"}
+{"version":3,"file":"sim-acm.error.js","sourceRoot":"","sources":["../../../../src/service/acm/error/sim-acm.error.ts"],"names":[],"mappings":"AAOA;;GAEG;AACH,MAAM,OAAO,WAAY,SAAQ,KAAK;IAGlB,SAAS;IAF3B,YACE,OAAe,EACC,SAAS,GAAwB,EAAE;QAEnD,KAAK,CAAC,OAAO,CAAC,CAAC;yBAFC,SAAS;IAG3B,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,+BAAgC,SAAQ,WAAW;IACrC,IAAI,GAAG,sBAAsB,CAAC;IAEvD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,+BAAgC,SAAQ,WAAW;IACrC,IAAI,GAAG,2BAA2B,CAAC;IAE5D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,yBAA0B,SAAQ,WAAW;IAC/B,IAAI,GAAG,qBAAqB,CAAC;IAEtD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,0BAA2B,SAAQ,WAAW;IAChC,IAAI,GAAG,sBAAsB,CAAC;IAEvD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF"}

package/dist/service/acm/registry/sim-acm-registry.d.ts

@@ -0,0 +1,30 @@
+import type { SimAwsAccountRegionScope } from "../../aws/sim-aws-account-region-scope.js";
+import type { SimAcmCertificate } from "../certificate/sim-acm-certificate.js";
+import type { SimAcm } from "../sim-acm.js";
+/**
+ * Simulation-wide registry of Account/Region-scoped ACM facades.
+ *
+ * One registry belongs to one SimAws environment. ACM is scoped to an account
+ * and Region, but other services hold only a certificate ARN, so this is how
+ * they get from that ARN back to the certificate it names. CloudFront uses it
+ * to check the certificate on a Distribution.
+ *
+ * The registry indexes ACM facades but does not create or own them.
+ */
+export declare class SimAcmRegistry {
+    private readonly acmByScope;
+    /**
+     * Register the ACM facade belonging to an Account and Region.
+     */
+    register(accountRegionScope: SimAwsAccountRegionScope, acm: SimAcm): void;
+    /**
+     * Find the Certificate an ARN names, wherever in the simulation it lives.
+     *
+     * Undefined covers every way an ARN can fail to name a certificate here: it
+     * is not an ARN, it is not an ACM ARN, its account and Region hold no
+     * simulated ACM, or that ACM holds no such certificate. Callers report the
+     * failure in their own terms, as AWS services do.
+     */
+    certificate(certificateArn: string): SimAcmCertificate | undefined;
+}
+//# sourceMappingURL=sim-acm-registry.d.ts.map

package/dist/service/acm/registry/sim-acm-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-acm-registry.d.ts","sourceRoot":"","sources":["../../../../src/service/acm/registry/sim-acm-registry.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAC1F,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAI5C;;;;;;;;;GASG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAqC;IAEhE;;OAEG;IACH,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAExE;IAED;;;;;;;OAOG;IACH,WAAW,CAAC,cAAc,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAYjE;CACF"}

package/dist/service/acm/registry/sim-acm-registry.js

@@ -0,0 +1,40 @@
+import { parseSimArn } from "../../aws/arn.js";
+/**
+ * Simulation-wide registry of Account/Region-scoped ACM facades.
+ *
+ * One registry belongs to one SimAws environment. ACM is scoped to an account
+ * and Region, but other services hold only a certificate ARN, so this is how
+ * they get from that ARN back to the certificate it names. CloudFront uses it
+ * to check the certificate on a Distribution.
+ *
+ * The registry indexes ACM facades but does not create or own them.
+ */
+export class SimAcmRegistry {
+    acmByScope = new Map();
+    /**
+     * Register the ACM facade belonging to an Account and Region.
+     */
+    register(accountRegionScope, acm) {
+        this.acmByScope.set(scopeKey(accountRegionScope), acm);
+    }
+    /**
+     * Find the Certificate an ARN names, wherever in the simulation it lives.
+     *
+     * Undefined covers every way an ARN can fail to name a certificate here: it
+     * is not an ARN, it is not an ACM ARN, its account and Region hold no
+     * simulated ACM, or that ACM holds no such certificate. Callers report the
+     * failure in their own terms, as AWS services do.
+     */
+    certificate(certificateArn) {
+        const arn = parseSimArn(certificateArn);
+        if (arn?.service !== "acm") {
+            return undefined;
+        }
+        const acm = this.acmByScope.get(scopeKey({ accountId: arn.accountId, regionName: arn.region }));
+        return acm?.certificates.get(certificateArn);
+    }
+}
+function scopeKey(accountRegionScope) {
+    return `${accountRegionScope.accountId}:${accountRegionScope.regionName}`;
+}
+//# sourceMappingURL=sim-acm-registry.js.map

package/dist/service/acm/registry/sim-acm-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-acm-registry.js","sourceRoot":"","sources":["../../../../src/service/acm/registry/sim-acm-registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAe,MAAM,kBAAkB,CAAC;AAO5D;;;;;;;;;GASG;AACH,MAAM,OAAO,cAAc;IACR,UAAU,GAAG,IAAI,GAAG,EAA0B,CAAC;IAEhE;;OAEG;IACH,QAAQ,CAAC,kBAA4C,EAAE,GAAW;QAChE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,GAAG,CAAC,CAAC;IACzD,CAAC;IAED;;;;;;;OAOG;IACH,WAAW,CAAC,cAAsB;QAChC,MAAM,GAAG,GAAG,WAAW,CAAC,cAAc,CAAC,CAAC;QAExC,IAAI,GAAG,EAAE,OAAO,KAAK,KAAK,EAAE,CAAC;YAC3B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAC7B,QAAQ,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAC/D,CAAC;QAEF,OAAO,GAAG,EAAE,YAAY,CAAC,GAAG,CAAC,cAAwB,CAAC,CAAC;IACzD,CAAC;CACF;AAED,SAAS,QAAQ,CACf,kBAA4C;IAE5C,OAAO,GAAG,kBAAkB,CAAC,SAAS,IAAI,kBAAkB,CAAC,UAAU,EAAE,CAAC;AAC5E,CAAC"}

package/dist/service/acm/sim-acm.d.ts

@@ -1,13 +1,14 @@
 import { type BackgroundScheduler } from "../../util/background/background.js";
 import type { SimAwsAccountRegionScope } from "../aws/sim-aws-account-region-scope.js";
-import type { SimRequestCertificateCommand, SimRequestCertificateCommandOutput } from "./command/request-certificate/request-certificate.cmd.js";
+import type { SimRequestCertificateCommand, SimRequestCertificateCommandOutput } from "./command/request-certificate/request-certificate.command.js";
 import type { SimAcmCertificate } from "./certificate/sim-acm-certificate.js";
-import type { SimDescribeCertificateCommand, SimDescribeCertificateCommandOutput } from "./command/describe-certificate/describe-certificate.cmd.js";
-import type { SimListCertificatesCommand, SimListCertificatesCommandOutput } from "./command/list-certificates/list-certificates.cmd.js";
+import type { SimDescribeCertificateCommand, SimDescribeCertificateCommandOutput } from "./command/describe-certificate/describe-certificate.command.js";
+import type { SimListCertificatesCommand, SimListCertificatesCommandOutput } from "./command/list-certificates/list-certificates.command.js";
 import { SimAcmCfnResourceFactory } from "./cfn/sim-cfn-acm-resource-factory.js";
 import type { SimAwsCaller } from "../aws/caller/sim-aws-caller.js";
 import { type SimIamInterServiceAuthZ } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
 import type { SimSdkCommandRouter } from "../../sdk/router/sim-sdk-command-router.type.js";
+import type { SimAcmDnsRecords } from "./validation/sim-acm-dns-records.js";
 export interface SimAcmRequestOptions {
     readonly caller?: SimAwsCaller;
 }
@@ -15,6 +16,7 @@ interface SimAcmProperties {
     readonly accountRegionScope?: SimAwsAccountRegionScope;
     readonly iam?: SimIamInterServiceAuthZ;
     readonly background?: BackgroundScheduler;
+    readonly dnsRecords?: SimAcmDnsRecords;
 }
 /**
  * Simulated ACM. Handles SDK commands. Emulates AWS behaviour and state.
@@ -24,9 +26,37 @@ export declare class SimAcm {
     private readonly accountRegionScope;
     private readonly iam;
     private readonly background;
+    private readonly validation;
+    private readonly dnsValidationCompleter;
     private readonly cfnFactory;
     private readonly sdkRouter;
     constructor(properties?: SimAcmProperties);
+    /**
+     * Always require a DNS validation record before issuing a Certificate, even
+     * where no sim Route53 Hosted Zone covers the domain name.
+     */
+    requireDnsValidation(): this;
+    /**
+     * Never require a DNS validation record: issue every Certificate as soon as
+     * it is requested, whatever sim Route53 holds.
+     */
+    autoIssueCertificates(): this;
+    /**
+     * Create the DNS validation records a pending sim Certificate is waiting on.
+     *
+     * This is a simulator convenience for tests that want a realistic issuance
+     * flow without publishing each validation CNAME by hand. The Certificate is
+     * issued by the time this resolves.
+     */
+    completeDnsValidation(certificateArn: string | undefined): Promise<void>;
+    /**
+     * Re-check a sim Certificate against DNS now, issuing it if it is validated.
+     *
+     * This publishes nothing. It is for callers that have already created the
+     * validation records themselves, such as CloudFormation.
+     * @internal
+     */
+    settleCertificateValidation(certificate: SimAcmCertificate): Promise<void>;
     /**
      * Handle a Describe Certificate Command from the SDK.
      */

package/dist/service/acm/sim-acm.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-acm.d.ts","sourceRoot":"","sources":["../../../src/service/acm/sim-acm.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAEvF,OAAO,KAAK,EACV,4BAA4B,EAC5B,kCAAkC,EACnC,MAAM,0DAA0D,CAAC;AAElE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AAC9E,OAAO,KAAK,EACV,6BAA6B,EAC7B,mCAAmC,EACpC,MAAM,4DAA4D,CAAC;AAEpE,OAAO,KAAK,EACV,0BAA0B,EAC1B,gCAAgC,EACjC,MAAM,sDAAsD,CAAC;AAE9D,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AAEjF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,kDAAkD,CAAC;AAE1D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAE3F,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED,UAAU,gBAAgB;IACxB,QAAQ,CAAC,kBAAkB,CAAC,EAAE,wBAAwB,CAAC;IACvD,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED;;GAEG;AACH,qBAAa,MAAM;IACjB,SAAgB,YAAY,sFAAwC;IAEpE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA2B;IAC9D,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA0B;IAC9C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAExB;IACH,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAoC;IAE9D,YAAY,UAAU,GAAE,gBAAqB,EAU5C;IAED;;OAEG;IACG,mBAAmB,CACvB,OAAO,EAAE,6BAA6B,EACtC,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,mCAAmC,CAAC,CAO9C;IAED;;OAEG;IACG,gBAAgB,CACpB,OAAO,EAAE,0BAA0B,EACnC,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,gCAAgC,CAAC,CAO3C;IAED;;OAEG;IACG,kBAAkB,CACtB,OAAO,EAAE,4BAA4B,EACrC,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,kCAAkC,CAAC,CAQ7C;IAED;;OAEG;IACH,kBAAkB,IAAI,wBAAwB,CAE7C;IAED;;OAEG;IACH,gBAAgB,IAAI,mBAAmB,CAEtC;CACF"}
+{"version":3,"file":"sim-acm.d.ts","sourceRoot":"","sources":["../../../src/service/acm/sim-acm.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAEvF,OAAO,KAAK,EACV,4BAA4B,EAC5B,kCAAkC,EACnC,MAAM,8DAA8D,CAAC;AAEtE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AAC9E,OAAO,KAAK,EACV,6BAA6B,EAC7B,mCAAmC,EACpC,MAAM,gEAAgE,CAAC;AAExE,OAAO,KAAK,EACV,0BAA0B,EAC1B,gCAAgC,EACjC,MAAM,0DAA0D,CAAC;AAElE,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AAEjF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,kDAAkD,CAAC;AAE1D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAG3F,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AAE5E,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED,UAAU,gBAAgB;IACxB,QAAQ,CAAC,kBAAkB,CAAC,EAAE,wBAAwB,CAAC;IACvD,QAAQ,CAAC,GAAG,CAAC,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;IAC1C,QAAQ,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAC;CACxC;AAED;;GAEG;AACH,qBAAa,MAAM;IACjB,SAAgB,YAAY,sFAAwC;IAEpE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA2B;IAC9D,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA0B;IAC9C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA8B;IACzD,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAA+B;IACtE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAExB;IACH,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAoC;IAE9D,YAAY,UAAU,GAAE,gBAAqB,EAoB5C;IAED;;;OAGG;IACH,oBAAoB,IAAI,IAAI,CAG3B;IAED;;;OAGG;IACH,qBAAqB,IAAI,IAAI,CAG5B;IAED;;;;;;OAMG;IACG,qBAAqB,CACzB,cAAc,EAAE,MAAM,GAAG,SAAS,GACjC,OAAO,CAAC,IAAI,CAAC,CAEf;IAED;;;;;;OAMG;IACG,2BAA2B,CAC/B,WAAW,EAAE,iBAAiB,GAC7B,OAAO,CAAC,IAAI,CAAC,CAEf;IAED;;OAEG;IACG,mBAAmB,CACvB,OAAO,EAAE,6BAA6B,EACtC,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,mCAAmC,CAAC,CAO9C;IAED;;OAEG;IACG,gBAAgB,CACpB,OAAO,EAAE,0BAA0B,EACnC,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,gCAAgC,CAAC,CAO3C;IAED;;OAEG;IACG,kBAAkB,CACtB,OAAO,EAAE,4BAA4B,EACrC,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,kCAAkC,CAAC,CAS7C;IAED;;OAEG;IACH,kBAAkB,IAAI,wBAAwB,CAE7C;IAED;;OAEG;IACH,gBAAgB,IAAI,mBAAmB,CAEtC;CACF"}

package/dist/service/acm/sim-acm.js

@@ -6,6 +6,8 @@ import { SimAcmCfnResourceFactory } from "./cfn/sim-cfn-acm-resource-factory.js"
 import { simAwsAccountRegionScopeFactory } from "../aws/sim-aws-account-region-scope.factory.js";
 import { SimIamAllowAllAuth, } from "../iam/authorize/sim-iam-inter-service-auth-z.js";
 import { SimAcmSdkCommandRouter } from "./sdk/sim-acm-sdk-command-router.js";
+import { SimAcmCertificateValidation } from "./validation/sim-acm-certificate-validation.js";
+import { SimAcmDnsValidationCompleter } from "./validation/sim-acm-dns-validation-completer.js";
 /**
  * Simulated ACM. Handles SDK commands. Emulates AWS behaviour and state.
  */
@@ -14,15 +16,62 @@ export class SimAcm {
     accountRegionScope;
     iam;
     background;
+    validation;
+    dnsValidationCompleter;
     cfnFactory = new SimAcmCfnResourceFactory({
         acm: this,
     });
     sdkRouter = new SimAcmSdkCommandRouter(this);
     constructor(properties = {}) {
-        const { accountRegionScope = simAwsAccountRegionScopeFactory.make(), iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), } = properties;
+        const { accountRegionScope = simAwsAccountRegionScopeFactory.make(), iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), dnsRecords, } = properties;
         this.accountRegionScope = accountRegionScope;
         this.iam = iam;
         this.background = background;
+        this.validation = new SimAcmCertificateValidation({
+            background,
+            dnsRecords,
+        });
+        this.dnsValidationCompleter = new SimAcmDnsValidationCompleter({
+            certificates: this.certificates,
+            validation: this.validation,
+            dnsRecords,
+        });
+    }
+    /**
+     * Always require a DNS validation record before issuing a Certificate, even
+     * where no sim Route53 Hosted Zone covers the domain name.
+     */
+    requireDnsValidation() {
+        this.validation.alwaysRequireDnsValidation();
+        return this;
+    }
+    /**
+     * Never require a DNS validation record: issue every Certificate as soon as
+     * it is requested, whatever sim Route53 holds.
+     */
+    autoIssueCertificates() {
+        this.validation.neverRequireDnsValidation();
+        return this;
+    }
+    /**
+     * Create the DNS validation records a pending sim Certificate is waiting on.
+     *
+     * This is a simulator convenience for tests that want a realistic issuance
+     * flow without publishing each validation CNAME by hand. The Certificate is
+     * issued by the time this resolves.
+     */
+    async completeDnsValidation(certificateArn) {
+        await this.dnsValidationCompleter.complete(certificateArn);
+    }
+    /**
+     * Re-check a sim Certificate against DNS now, issuing it if it is validated.
+     *
+     * This publishes nothing. It is for callers that have already created the
+     * validation records themselves, such as CloudFormation.
+     * @internal
+     */
+    async settleCertificateValidation(certificate) {
+        await this.validation.settle(certificate);
     }
     /**
      * Handle a Describe Certificate Command from the SDK.
@@ -55,6 +104,7 @@ export class SimAcm {
             certificates: this.certificates,
             iam: this.iam,
             background: this.background,
+            validation: this.validation,
         });
         return await handler.handle(command, options);
     }

package/dist/service/acm/sim-acm.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-acm.js","sourceRoot":"","sources":["../../../src/service/acm/sim-acm.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,eAAe,GAChB,MAAM,qCAAqC,CAAC;AAO7C,OAAO,EAAE,gCAAgC,EAAE,MAAM,8DAA8D,CAAC;AAMhH,OAAO,EAAE,iCAAiC,EAAE,MAAM,gEAAgE,CAAC;AAKnH,OAAO,EAAE,8BAA8B,EAAE,MAAM,0DAA0D,CAAC;AAC1G,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AACjF,OAAO,EAAE,+BAA+B,EAAE,MAAM,gDAAgD,CAAC;AAEjG,OAAO,EACL,kBAAkB,GAEnB,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAa7E;;GAEG;AACH,MAAM,OAAO,MAAM;IACD,YAAY,GAAG,IAAI,GAAG,EAA6B,CAAC;IAEnD,kBAAkB,CAA2B;IAC7C,GAAG,CAA0B;IAC7B,UAAU,CAAsB;IAChC,UAAU,GAAG,IAAI,wBAAwB,CAAC;QACzD,GAAG,EAAE,IAAI;KACV,CAAC,CAAC;IACc,SAAS,GAAG,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAE9D,YAAY,UAAU,GAAqB,EAAE;QAC3C,MAAM,EACJ,kBAAkB,GAAG,+BAA+B,CAAC,IAAI,EAAE,EAC3D,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,GACnC,GAAG,UAAU,CAAC;QAEf,IAAI,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;QAC7C,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB,CACvB,OAAsC,EACtC,OAA8B;QAE9B,MAAM,OAAO,GAAG,IAAI,iCAAiC,CAAC;YACpD,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CACpB,OAAmC,EACnC,OAA8B;QAE9B,MAAM,OAAO,GAAG,IAAI,8BAA8B,CAAC;YACjD,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CACtB,OAAqC,EACrC,OAA8B;QAE9B,MAAM,OAAO,GAAG,IAAI,gCAAgC,CAAC;YACnD,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,gBAAgB;QACd,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;CACF"}
+{"version":3,"file":"sim-acm.js","sourceRoot":"","sources":["../../../src/service/acm/sim-acm.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,eAAe,GAChB,MAAM,qCAAqC,CAAC;AAO7C,OAAO,EAAE,gCAAgC,EAAE,MAAM,8DAA8D,CAAC;AAMhH,OAAO,EAAE,iCAAiC,EAAE,MAAM,gEAAgE,CAAC;AAKnH,OAAO,EAAE,8BAA8B,EAAE,MAAM,0DAA0D,CAAC;AAC1G,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AACjF,OAAO,EAAE,+BAA+B,EAAE,MAAM,gDAAgD,CAAC;AAEjG,OAAO,EACL,kBAAkB,GAEnB,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAE7E,OAAO,EAAE,2BAA2B,EAAE,MAAM,gDAAgD,CAAC;AAC7F,OAAO,EAAE,4BAA4B,EAAE,MAAM,kDAAkD,CAAC;AAchG;;GAEG;AACH,MAAM,OAAO,MAAM;IACD,YAAY,GAAG,IAAI,GAAG,EAA6B,CAAC;IAEnD,kBAAkB,CAA2B;IAC7C,GAAG,CAA0B;IAC7B,UAAU,CAAsB;IAChC,UAAU,CAA8B;IACxC,sBAAsB,CAA+B;IACrD,UAAU,GAAG,IAAI,wBAAwB,CAAC;QACzD,GAAG,EAAE,IAAI;KACV,CAAC,CAAC;IACc,SAAS,GAAG,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAE9D,YAAY,UAAU,GAAqB,EAAE;QAC3C,MAAM,EACJ,kBAAkB,GAAG,+BAA+B,CAAC,IAAI,EAAE,EAC3D,GAAG,GAAG,IAAI,kBAAkB,EAAE,EAC9B,UAAU,GAAG,IAAI,eAAe,EAAE,EAClC,UAAU,GACX,GAAG,UAAU,CAAC;QAEf,IAAI,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;QAC7C,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,UAAU,GAAG,IAAI,2BAA2B,CAAC;YAChD,UAAU;YACV,UAAU;SACX,CAAC,CAAC;QACH,IAAI,CAAC,sBAAsB,GAAG,IAAI,4BAA4B,CAAC;YAC7D,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU;SACX,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,oBAAoB;QAClB,IAAI,CAAC,UAAU,CAAC,0BAA0B,EAAE,CAAC;QAC7C,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;OAGG;IACH,qBAAqB;QACnB,IAAI,CAAC,UAAU,CAAC,yBAAyB,EAAE,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,qBAAqB,CACzB,cAAkC;QAElC,MAAM,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IAC7D,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,2BAA2B,CAC/B,WAA8B;QAE9B,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB,CACvB,OAAsC,EACtC,OAA8B;QAE9B,MAAM,OAAO,GAAG,IAAI,iCAAiC,CAAC;YACpD,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CACpB,OAAmC,EACnC,OAA8B;QAE9B,MAAM,OAAO,GAAG,IAAI,8BAA8B,CAAC;YACjD,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CACtB,OAAqC,EACrC,OAA8B;QAE9B,MAAM,OAAO,GAAG,IAAI,gCAAgC,CAAC;YACnD,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,gBAAgB;QACd,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;CACF"}

package/dist/service/acm/validation/sim-acm-certificate-validation.d.ts

@@ -0,0 +1,66 @@
+import type { BackgroundScheduler } from "../../../util/background/background.js";
+import type { SimAcmCertificate } from "../certificate/sim-acm-certificate.js";
+import type { SimAcmDnsRecords } from "./sim-acm-dns-records.js";
+interface SimAcmCertificateValidationProperties {
+    readonly background: BackgroundScheduler;
+    readonly dnsRecords?: SimAcmDnsRecords | undefined;
+}
+/**
+ * Drives sim ACM Certificate issuance through domain validation.
+ *
+ * A requested Certificate is evaluated once as background work, and then again
+ * whenever DNS records change, until every domain name on it is validated. The
+ * re-evaluation is driven by DNS record changes rather than by polling, so
+ * draining simulator background tasks always terminates: a Certificate whose
+ * validation record never appears simply stays pending.
+ */
+export declare class SimAcmCertificateValidation {
+    private readonly background;
+    private readonly dnsRecords;
+    private readonly pendingCertificates;
+    private mode;
+    private listeningForRecordChanges;
+    constructor(properties: SimAcmCertificateValidationProperties);
+    /**
+     * Always require a DNS validation record before issuing a Certificate.
+     *
+     * With no sim Route53 to validate against there is no way to satisfy this,
+     * so it is rejected rather than silently issuing certificates anyway.
+     */
+    alwaysRequireDnsValidation(): void;
+    /**
+     * Never require a DNS validation record before issuing a Certificate.
+     */
+    neverRequireDnsValidation(): void;
+    /**
+     * Begin validating a newly requested Certificate.
+     */
+    begin(certificate: SimAcmCertificate): void;
+    /**
+     * Validate whatever can be validated now, issuing the Certificate once every
+     * domain name on it has succeeded.
+     */
+    settle(certificate: SimAcmCertificate): Promise<void>;
+    /**
+     * Validate one domain name, if it is waiting and its record now exists.
+     */
+    private validateDomain;
+    /**
+     * The DNS record a domain name must publish before it can be validated.
+     *
+     * Undefined means this domain name does not need to prove anything through
+     * DNS: it is not using DNS validation, or nothing in the simulation is
+     * authoritative for it.
+     */
+    private requiredDnsRecord;
+    /**
+     * Subscribe to DNS record changes the first time a Certificate needs them.
+     */
+    private listenForRecordChanges;
+    /**
+     * Schedule another look at every Certificate still waiting to be issued.
+     */
+    private revalidatePendingCertificates;
+}
+export {};
+//# sourceMappingURL=sim-acm-certificate-validation.d.ts.map

package/dist/service/acm/validation/sim-acm-certificate-validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-acm-certificate-validation.d.ts","sourceRoot":"","sources":["../../../../src/service/acm/validation/sim-acm-certificate-validation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAClF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAK/E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAGjE,UAAU,qCAAqC;IAC7C,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;IACzC,QAAQ,CAAC,UAAU,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;CACpD;AAED;;;;;;;;GAQG;AACH,qBAAa,2BAA2B;IACtC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+B;IAC1D,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAgC;IACpE,OAAO,CAAC,IAAI,CAAkC;IAC9C,OAAO,CAAC,yBAAyB,CAAS;IAE1C,YAAY,UAAU,EAAE,qCAAqC,EAG5D;IAED;;;;;OAKG;IACH,0BAA0B,IAAI,IAAI,CASjC;IAED;;OAEG;IACH,yBAAyB,IAAI,IAAI,CAEhC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,EAAE,iBAAiB,GAAG,IAAI,CAI1C;IAED;;;OAGG;IACG,MAAM,CAAC,WAAW,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAW1D;IAED;;OAEG;IACH,OAAO,CAAC,cAAc;IAsBtB;;;;;;OAMG;IACH,OAAO,CAAC,iBAAiB;IAwBzB;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAa9B;;OAEG;IACH,OAAO,CAAC,6BAA6B;CAKtC"}