@kensio/yulin 0.36.0 → 0.38.0

package/dist/service/s3/serve/sim-s3-rest-controller.js

@@ -0,0 +1,92 @@
+import { SimS3RestErrorResponse } from "./sim-s3-rest-error-response.js";
+import { SimS3UploadChecksum } from "./sim-s3-upload-checksum.js";
+/**
+ * Serves Object requests that arrived at the simulated S3 REST endpoint.
+ *
+ * Everything goes through the ordinary command handlers rather than reaching
+ * into Bucket storage, so an HTTP request is authorized exactly as the same
+ * operation is when an SDK client makes it in process. That is the point of
+ * this endpoint: a presigned URL grants no more than the principal who signed
+ * it has, and it is IAM that decides what that is.
+ */
+export class SimS3RestController {
+    simAws;
+    constructor(properties) {
+        this.simAws = properties.simAws;
+    }
+    /**
+     * Serve a REST Object request as the principal the boundary resolved.
+     */
+    async handleRequest(route, serviceRequest) {
+        const errors = new SimS3RestErrorResponse({
+            bucketName: route.bucket.bucketName,
+            objectKey: route.objectKey,
+        });
+        try {
+            return await this.serve(route, serviceRequest);
+        }
+        catch (error) {
+            return errors.build(error);
+        }
+    }
+    async serve(route, serviceRequest) {
+        if (serviceRequest.request.method === "PUT") {
+            return await this.putObject(route, serviceRequest);
+        }
+        return await this.getObject(route, serviceRequest);
+    }
+    async getObject(route, serviceRequest) {
+        const output = await this.s3For(route).getObject({ input: { Bucket: route.bucket.bucketName, Key: route.objectKey } }, { caller: serviceRequest.caller.toCaller() });
+        const body = await bodyBytes(output.Body);
+        const contentType = output.Metadata?.["content-type"];
+        const headers = {
+            "content-length": String(body.length),
+            ...(contentType !== undefined && { "content-type": contentType }),
+        };
+        if (serviceRequest.request.method === "HEAD") {
+            return new Response(undefined, { status: 200, headers });
+        }
+        return new Response(body, { status: 200, headers });
+    }
+    /**
+     * Store an uploaded Object.
+     *
+     * The stated checksum is checked before anything is stored, as real S3 does,
+     * so an upload that would be refused there is refused here rather than
+     * quietly landing in the Bucket.
+     */
+    async putObject(route, serviceRequest) {
+        const { request, body } = serviceRequest;
+        SimS3UploadChecksum.stated(new URL(request.url), request.headers)?.check(body);
+        const contentType = request.headers.get("content-type") ?? undefined;
+        await this.s3For(route).putObject({
+            input: {
+                Bucket: route.bucket.bucketName,
+                Key: route.objectKey,
+                Body: body ?? new Uint8Array(),
+                ...(contentType !== undefined && { ContentType: contentType }),
+            },
+        }, { caller: serviceRequest.caller.toCaller() });
+        return new Response(undefined, { status: 200 });
+    }
+    s3For(route) {
+        return this.simAws
+            .accountRegionScope(route.bucketScope.accountId, route.bucketScope.regionName)
+            .s3();
+    }
+}
+/**
+ * Read a GetObject response body into the bytes an HTTP response carries.
+ */
+async function bodyBytes(body) {
+    /* v8 ignore if -- the loader always answers with a body */
+    if (body === undefined) {
+        return Buffer.alloc(0);
+    }
+    const chunks = [];
+    for await (const chunk of body) {
+        chunks.push(Buffer.from(chunk));
+    }
+    return Buffer.concat(chunks);
+}
+//# sourceMappingURL=sim-s3-rest-controller.js.map

package/dist/service/s3/serve/sim-s3-rest-controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-rest-controller.js","sourceRoot":"","sources":["../../../../src/service/s3/serve/sim-s3-rest-controller.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAOlE;;;;;;;;GAQG;AACH,MAAM,OAAO,mBAAmB;IACb,MAAM,CAAS;IAEhC,YAAY,UAAyC;QACnD,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CACjB,KAA2B,EAC3B,cAAoC;QAEpC,MAAM,MAAM,GAAG,IAAI,sBAAsB,CAAC;YACxC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,UAAU;YACnC,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,KAAK,CACjB,KAA2B,EAC3B,cAAoC;QAEpC,IAAI,cAAc,CAAC,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC5C,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;QACrD,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IACrD,CAAC;IAEO,KAAK,CAAC,SAAS,CACrB,KAA2B,EAC3B,cAAoC;QAEpC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,SAAS,CAC9C,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,EAAE,KAAK,CAAC,SAAS,EAAE,EAAE,EACpE,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAC7C,CAAC;QAEF,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,cAAc,CAAC,CAAC;QACtD,MAAM,OAAO,GAAG;YACd,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;YACrC,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC;SAClE,CAAC;QAEF,IAAI,cAAc,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC7C,OAAO,IAAI,QAAQ,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3D,CAAC;QAED,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IACtD,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,SAAS,CACrB,KAA2B,EAC3B,cAAoC;QAEpC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,cAAc,CAAC;QAEzC,mBAAmB,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,CACtE,IAAI,CACL,CAAC;QAEF,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,SAAS,CAAC;QAErE,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,SAAS,CAC/B;YACE,KAAK,EAAE;gBACL,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,UAAU;gBAC/B,GAAG,EAAE,KAAK,CAAC,SAAS;gBACpB,IAAI,EAAE,IAAI,IAAI,IAAI,UAAU,EAAE;gBAC9B,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;aAC/D;SACF,EACD,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAC7C,CAAC;QAEF,OAAO,IAAI,QAAQ,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAClD,CAAC;IAEO,KAAK,CAAC,KAA2B;QACvC,OAAO,IAAI,CAAC,MAAM;aACf,kBAAkB,CACjB,KAAK,CAAC,WAAW,CAAC,SAAS,EAC3B,KAAK,CAAC,WAAW,CAAC,UAAU,CAC7B;aACA,EAAE,EAAE,CAAC;IACV,CAAC;CACF;AAED;;GAEG;AACH,KAAK,UAAU,SAAS,CACtB,IAAsE;IAEtE,2DAA2D;IAC3D,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC;IAED,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAmB,CAAC,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC"}

package/dist/service/s3/serve/sim-s3-rest-error-response.d.ts

@@ -0,0 +1,28 @@
+interface SimS3RestErrorProperties {
+    readonly bucketName: string;
+    readonly objectKey: string;
+}
+/**
+ * Turns a refused S3 REST request into the response real S3 answers with.
+ *
+ * S3 is one of the few AWS services that still answers its REST endpoint in
+ * XML rather than JSON, and clients parse it: the AWS SDK reads `Code` out of
+ * this document to decide which exception to raise. Answering anything else
+ * would leave a simulated failure unrecognisable to the code under test.
+ */
+export declare class SimS3RestErrorResponse {
+    private readonly bucketName;
+    private readonly objectKey;
+    constructor(properties: SimS3RestErrorProperties);
+    /**
+     * Build the response for an error raised while serving an Object request.
+     *
+     * Anything the simulator does not recognise is re-raised rather than
+     * flattened into a plausible S3 error, so a bug in the simulation cannot
+     * masquerade as an AWS failure the test then asserts on.
+     */
+    build(error: unknown): Response;
+    private xml;
+}
+export {};
+//# sourceMappingURL=sim-s3-rest-error-response.d.ts.map

package/dist/service/s3/serve/sim-s3-rest-error-response.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-rest-error-response.d.ts","sourceRoot":"","sources":["../../../../src/service/s3/serve/sim-s3-rest-error-response.ts"],"names":[],"mappings":"AAIA,UAAU,wBAAwB;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;GAOG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IAEnC,YAAY,UAAU,EAAE,wBAAwB,EAG/C;IAED;;;;;;OAMG;IACH,KAAK,CAAC,KAAK,EAAE,OAAO,GAAG,QAAQ,CAkB9B;IAED,OAAO,CAAC,GAAG;CAmBZ"}

package/dist/service/s3/serve/sim-s3-rest-error-response.js

@@ -0,0 +1,63 @@
+import { SimIamAccessDenied } from "../../iam/error/sim-iam.error.js";
+import { SimS3Error } from "../error/sim-s3.error.js";
+import { SimS3ChecksumMismatch } from "../error/sim-s3-checksum.error.js";
+/**
+ * Turns a refused S3 REST request into the response real S3 answers with.
+ *
+ * S3 is one of the few AWS services that still answers its REST endpoint in
+ * XML rather than JSON, and clients parse it: the AWS SDK reads `Code` out of
+ * this document to decide which exception to raise. Answering anything else
+ * would leave a simulated failure unrecognisable to the code under test.
+ */
+export class SimS3RestErrorResponse {
+    bucketName;
+    objectKey;
+    constructor(properties) {
+        this.bucketName = properties.bucketName;
+        this.objectKey = properties.objectKey;
+    }
+    /**
+     * Build the response for an error raised while serving an Object request.
+     *
+     * Anything the simulator does not recognise is re-raised rather than
+     * flattened into a plausible S3 error, so a bug in the simulation cannot
+     * masquerade as an AWS failure the test then asserts on.
+     */
+    build(error) {
+        if (error instanceof SimIamAccessDenied) {
+            return this.xml(403, "AccessDenied", error.message);
+        }
+        if (error instanceof SimS3ChecksumMismatch) {
+            return this.xml(400, error.name, error.message);
+        }
+        if (error instanceof SimS3Error) {
+            return this.xml(error.$metadata.httpStatusCode ?? 400, error.name, error.message);
+        }
+        throw error;
+    }
+    xml(status, code, message) {
+        const body = [
+            `<?xml version="1.0" encoding="UTF-8"?>`,
+            `<Error>`,
+            `  <Code>${escapeXml(code)}</Code>`,
+            `  <Message>${escapeXml(message)}</Message>`,
+            `  <BucketName>${escapeXml(this.bucketName)}</BucketName>`,
+            `  <Key>${escapeXml(this.objectKey)}</Key>`,
+            `</Error>`,
+            ``,
+        ].join("\n");
+        return new Response(body, {
+            status,
+            headers: {
+                "content-type": "application/xml",
+            },
+        });
+    }
+}
+function escapeXml(value) {
+    return value
+        .replaceAll("&", "&amp;")
+        .replaceAll("<", "&lt;")
+        .replaceAll(">", "&gt;");
+}
+//# sourceMappingURL=sim-s3-rest-error-response.js.map

package/dist/service/s3/serve/sim-s3-rest-error-response.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-rest-error-response.js","sourceRoot":"","sources":["../../../../src/service/s3/serve/sim-s3-rest-error-response.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAO1E;;;;;;;GAOG;AACH,MAAM,OAAO,sBAAsB;IAChB,UAAU,CAAS;IACnB,SAAS,CAAS;IAEnC,YAAY,UAAoC;QAC9C,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;IACxC,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,KAAc;QAClB,IAAI,KAAK,YAAY,kBAAkB,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACtD,CAAC;QAED,IAAI,KAAK,YAAY,qBAAqB,EAAE,CAAC;YAC3C,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,KAAK,YAAY,UAAU,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC,GAAG,CACb,KAAK,CAAC,SAAS,CAAC,cAAc,IAAI,GAAG,EACrC,KAAK,CAAC,IAAI,EACV,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,CAAC;IACd,CAAC;IAEO,GAAG,CAAC,MAAc,EAAE,IAAY,EAAE,OAAe;QACvD,MAAM,IAAI,GAAG;YACX,wCAAwC;YACxC,SAAS;YACT,WAAW,SAAS,CAAC,IAAI,CAAC,SAAS;YACnC,cAAc,SAAS,CAAC,OAAO,CAAC,YAAY;YAC5C,iBAAiB,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe;YAC1D,UAAU,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ;YAC3C,UAAU;YACV,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;YACxB,MAAM;YACN,OAAO,EAAE;gBACP,cAAc,EAAE,iBAAiB;aAClC;SACF,CAAC,CAAC;IACL,CAAC;CACF;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,KAAK;SACT,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC;SACxB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;SACvB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAC7B,CAAC"}

package/dist/service/s3/serve/sim-s3-rest-refusal.d.ts

@@ -0,0 +1,7 @@
+import type { SimS3ObjectAddress } from "./sim-s3-object-address.js";
+import { type SimS3RouteFailure } from "./sim-s3-route.js";
+/**
+ * Whether a REST request asks for something simulated S3 does not serve.
+ */
+export declare function simS3RestRefusal(method: string, address: SimS3ObjectAddress): SimS3RouteFailure | undefined;
+//# sourceMappingURL=sim-s3-rest-refusal.d.ts.map

package/dist/service/s3/serve/sim-s3-rest-refusal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-rest-refusal.d.ts","sourceRoot":"","sources":["../../../../src/service/s3/serve/sim-s3-rest-refusal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,EACL,KAAK,iBAAiB,EAEvB,MAAM,mBAAmB,CAAC;AAI3B;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,kBAAkB,GAC1B,iBAAiB,GAAG,SAAS,CAmB/B"}

package/dist/service/s3/serve/sim-s3-rest-refusal.js

@@ -0,0 +1,18 @@
+import { simS3RouteFailure as failure, } from "./sim-s3-route.js";
+const restMethods = new Set(["GET", "HEAD", "PUT"]);
+/**
+ * Whether a REST request asks for something simulated S3 does not serve.
+ */
+export function simS3RestRefusal(method, address) {
+    if (!restMethods.has(method)) {
+        return failure(501, `Simulated S3 does not serve ${method} over its REST endpoint. ` +
+            `GET, HEAD and PUT of an Object are simulated.\n`);
+    }
+    if (address.objectKey.length === 0) {
+        return failure(501, `Simulated S3 serves Object requests over its REST endpoint, and this ` +
+            `request names Bucket ${address.bucketName} with no Object key. ` +
+            `Bucket operations are not served over HTTP.\n`);
+    }
+    return undefined;
+}
+//# sourceMappingURL=sim-s3-rest-refusal.js.map

package/dist/service/s3/serve/sim-s3-rest-refusal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-rest-refusal.js","sourceRoot":"","sources":["../../../../src/service/s3/serve/sim-s3-rest-refusal.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,iBAAiB,IAAI,OAAO,GAC7B,MAAM,mBAAmB,CAAC;AAE3B,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AAEpD;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAAc,EACd,OAA2B;IAE3B,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,OAAO,OAAO,CACZ,GAAG,EACH,+BAA+B,MAAM,2BAA2B;YAC9D,iDAAiD,CACpD,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO,OAAO,CACZ,GAAG,EACH,uEAAuE;YACrE,wBAAwB,OAAO,CAAC,UAAU,uBAAuB;YACjE,+CAA+C,CAClD,CAAC;IACJ,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/service/s3/serve/sim-s3-route.d.ts

@@ -0,0 +1,40 @@
+import type { SimAwsAccountRegionScope } from "../../aws/sim-aws-account-region-scope.js";
+import type { SimS3Bucket } from "../bucket/sim-s3-bucket.js";
+/**
+ * A request the static website endpoint should answer, as the caller the
+ * authentication boundary resolved.
+ *
+ * The Bucket's scope is carried because serving goes through that scope's
+ * GetObject command, so the website endpoint authorizes exactly as the REST
+ * endpoint does.
+ */
+export interface SimS3WebsiteRoute {
+    readonly action: "website";
+    readonly bucket: SimS3Bucket;
+    readonly bucketScope: SimAwsAccountRegionScope;
+    readonly objectKey: string;
+}
+/**
+ * An Object request the REST API endpoint should answer, as the caller the
+ * authentication boundary resolved.
+ */
+export interface SimS3RestObjectRoute {
+    readonly action: "restObject";
+    readonly bucket: SimS3Bucket;
+    readonly bucketScope: SimAwsAccountRegionScope;
+    readonly objectKey: string;
+}
+/**
+ * A request that cannot be routed to a simulated S3 action.
+ */
+export interface SimS3RouteFailure {
+    readonly action: "failure";
+    readonly statusCode: number;
+    readonly message: string;
+}
+export type SimS3Route = SimS3WebsiteRoute | SimS3RestObjectRoute | SimS3RouteFailure;
+/**
+ * A route that answers the request with a refusal rather than an S3 action.
+ */
+export declare function simS3RouteFailure(statusCode: number, message: string): SimS3RouteFailure;
+//# sourceMappingURL=sim-s3-route.d.ts.map

package/dist/service/s3/serve/sim-s3-route.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-route.d.ts","sourceRoot":"","sources":["../../../../src/service/s3/serve/sim-s3-route.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAC1F,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAE9D;;;;;;;GAOG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,wBAAwB,CAAC;IAC/C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,wBAAwB,CAAC;IAC/C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,UAAU,GACpB,iBAAiB,GAAG,oBAAoB,GAAG,iBAAiB,CAAC;AAE/D;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,GACd,iBAAiB,CAEnB"}

package/dist/service/s3/serve/sim-s3-route.js

@@ -0,0 +1,7 @@
+/**
+ * A route that answers the request with a refusal rather than an S3 action.
+ */
+export function simS3RouteFailure(statusCode, message) {
+    return { action: "failure", statusCode, message };
+}
+//# sourceMappingURL=sim-s3-route.js.map

package/dist/service/s3/serve/sim-s3-route.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-route.js","sourceRoot":"","sources":["../../../../src/service/s3/serve/sim-s3-route.ts"],"names":[],"mappings":"AAyCA;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAC/B,UAAkB,EAClB,OAAe;IAEf,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AACpD,CAAC"}

package/dist/service/s3/serve/sim-s3-upload-checksum.d.ts

@@ -0,0 +1,27 @@
+/**
+ * The checksum an upload states its body should hash to.
+ *
+ * S3's flexible checksums travel as `x-amz-checksum-<algorithm>`, in a header
+ * on an ordinary request and in the query string of a presigned URL, where the
+ * signature covers them. Checking one is the difference between an upload that
+ * would work against real S3 and one that only appears to.
+ */
+export declare class SimS3UploadChecksum {
+    private readonly algorithm;
+    private readonly declared;
+    private constructor();
+    /**
+     * Read the checksum an upload states, from wherever it carried it.
+     *
+     * The query string is read first because that is where a presigned URL puts
+     * it, and a request that carries both should be judged by the one the
+     * signature covers.
+     */
+    static stated(url: URL, headers: Headers): SimS3UploadChecksum | undefined;
+    /**
+     * Refuse an upload whose body does not hash to the stated checksum.
+     */
+    check(body: Uint8Array | undefined): void;
+    private computed;
+}
+//# sourceMappingURL=sim-s3-upload-checksum.d.ts.map

package/dist/service/s3/serve/sim-s3-upload-checksum.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-upload-checksum.d.ts","sourceRoot":"","sources":["../../../../src/service/s3/serve/sim-s3-upload-checksum.ts"],"names":[],"mappings":"AAgBA;;;;;;;GAOG;AACH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAElC,OAAO,eAGN;IAED;;;;;;OAMG;IACH,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,GAAG,mBAAmB,GAAG,SAAS,CAkBzE;IAED;;OAEG;IACH,KAAK,CAAC,IAAI,EAAE,UAAU,GAAG,SAAS,GAAG,IAAI,CAcxC;IAED,OAAO,CAAC,QAAQ;CAkBjB"}

package/dist/service/s3/serve/sim-s3-upload-checksum.js

@@ -0,0 +1,86 @@
+import { createHash } from "node:crypto";
+import { crc32 } from "../../../util/zip/crc32.js";
+import { SimS3ChecksumMismatch, SimS3UnsupportedChecksum, } from "../error/sim-s3-checksum.error.js";
+const checksumPrefix = "x-amz-checksum-";
+/**
+ * The parameter naming which algorithm was used, rather than a checksum value.
+ */
+const algorithmParameter = "x-amz-checksum-algorithm";
+/**
+ * The checksum an upload states its body should hash to.
+ *
+ * S3's flexible checksums travel as `x-amz-checksum-<algorithm>`, in a header
+ * on an ordinary request and in the query string of a presigned URL, where the
+ * signature covers them. Checking one is the difference between an upload that
+ * would work against real S3 and one that only appears to.
+ */
+export class SimS3UploadChecksum {
+    algorithm;
+    declared;
+    constructor(algorithm, declared) {
+        this.algorithm = algorithm;
+        this.declared = declared;
+    }
+    /**
+     * Read the checksum an upload states, from wherever it carried it.
+     *
+     * The query string is read first because that is where a presigned URL puts
+     * it, and a request that carries both should be judged by the one the
+     * signature covers.
+     */
+    static stated(url, headers) {
+        for (const [name, value] of url.searchParams) {
+            const algorithm = checksumAlgorithm(name);
+            if (algorithm !== undefined) {
+                return new SimS3UploadChecksum(algorithm, value);
+            }
+        }
+        for (const [name, value] of headers) {
+            const algorithm = checksumAlgorithm(name);
+            if (algorithm !== undefined) {
+                return new SimS3UploadChecksum(algorithm, value);
+            }
+        }
+        return undefined;
+    }
+    /**
+     * Refuse an upload whose body does not hash to the stated checksum.
+     */
+    check(body) {
+        const bytes = body ?? new Uint8Array();
+        const computed = this.computed(bytes);
+        if (computed === this.declared) {
+            return;
+        }
+        throw new SimS3ChecksumMismatch(`The ${this.algorithm.toUpperCase()} checksum of the uploaded body is ` +
+            `${computed}, not the ${this.declared} the request states. An AWS SDK ` +
+            `presigned PUT states the checksum of an empty body unless the client ` +
+            `is built with requestChecksumCalculation: "WHEN_REQUIRED".`);
+    }
+    computed(bytes) {
+        if (this.algorithm === "crc32") {
+            const digest = Buffer.alloc(4);
+            digest.writeUInt32BE(crc32(bytes));
+            return digest.toString("base64");
+        }
+        if (this.algorithm === "sha1" || this.algorithm === "sha256") {
+            return createHash(this.algorithm).update(bytes).digest("base64");
+        }
+        throw new SimS3UnsupportedChecksum(`Simulated S3 cannot compute the ${this.algorithm.toUpperCase()} ` +
+            `checksum this upload states, so it refuses the upload rather than ` +
+            `storing a body nothing has checked. CRC32, SHA1 and SHA256 are ` +
+            `simulated.`);
+    }
+}
+/**
+ * The algorithm a checksum parameter or header names, if it names one.
+ */
+function checksumAlgorithm(name) {
+    const lowerCased = name.toLowerCase();
+    if (!lowerCased.startsWith(checksumPrefix) ||
+        lowerCased === algorithmParameter) {
+        return undefined;
+    }
+    return lowerCased.slice(checksumPrefix.length);
+}
+//# sourceMappingURL=sim-s3-upload-checksum.js.map

package/dist/service/s3/serve/sim-s3-upload-checksum.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-upload-checksum.js","sourceRoot":"","sources":["../../../../src/service/s3/serve/sim-s3-upload-checksum.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAC;AAEnD,OAAO,EACL,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,mCAAmC,CAAC;AAE3C,MAAM,cAAc,GAAG,iBAAiB,CAAC;AAEzC;;GAEG;AACH,MAAM,kBAAkB,GAAG,0BAA0B,CAAC;AAEtD;;;;;;;GAOG;AACH,MAAM,OAAO,mBAAmB;IACb,SAAS,CAAS;IAClB,QAAQ,CAAS;IAElC,YAAoB,SAAiB,EAAE,QAAgB;QACrD,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,MAAM,CAAC,GAAQ,EAAE,OAAgB;QACtC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;YAC7C,MAAM,SAAS,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAE1C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,OAAO,IAAI,mBAAmB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;QAED,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;YACpC,MAAM,SAAS,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAE1C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,OAAO,IAAI,mBAAmB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAA4B;QAChC,MAAM,KAAK,GAAG,IAAI,IAAI,IAAI,UAAU,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAEtC,IAAI,QAAQ,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC/B,OAAO;QACT,CAAC;QAED,MAAM,IAAI,qBAAqB,CAC7B,OAAO,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,oCAAoC;YACrE,GAAG,QAAQ,aAAa,IAAI,CAAC,QAAQ,kCAAkC;YACvE,uEAAuE;YACvE,4DAA4D,CAC/D,CAAC;IACJ,CAAC;IAEO,QAAQ,CAAC,KAAiB;QAChC,IAAI,IAAI,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC/B,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;YACnC,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACnC,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,KAAK,MAAM,IAAI,IAAI,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YAC7D,OAAO,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACnE,CAAC;QAED,MAAM,IAAI,wBAAwB,CAChC,mCAAmC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,GAAG;YAChE,oEAAoE;YACpE,iEAAiE;YACjE,YAAY,CACf,CAAC;IACJ,CAAC;CACF;AAED;;GAEG;AACH,SAAS,iBAAiB,CAAC,IAAY;IACrC,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IAEtC,IACE,CAAC,UAAU,CAAC,UAAU,CAAC,cAAc,CAAC;QACtC,UAAU,KAAK,kBAAkB,EACjC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,UAAU,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;AACjD,CAAC"}

package/dist/service/s3/serve/website/sim-s3-website-object-loader.d.ts

@@ -0,0 +1,51 @@
+import type { SimAwsServiceRequest } from "../../../../serve/controller/sim-service-controller.js";
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimAws } from "../../../aws/sim-aws.js";
+import type { SimS3WebsiteRoute } from "../sim-s3-route.js";
+import type { SimS3BucketName } from "../../bucket/sim-s3-bucket.js";
+import type { SimS3 } from "../../sim-s3.js";
+import { SimS3WebsiteObject } from "./sim-s3-website-object.js";
+interface SimS3WebsiteObjectLoaderProperties {
+    readonly simS3: SimS3;
+    readonly bucketName: SimS3BucketName;
+    readonly caller: SimAwsCaller;
+}
+/**
+ * Reads Objects for the static website endpoint as the requesting principal.
+ *
+ * Everything goes through the ordinary GetObject command, so a website request
+ * is authorized by the same IAM code path an in-process SDK call goes through.
+ * A browser presenting nothing is anonymous, and anonymous holds nothing unless
+ * the Bucket policy grants it, which is what makes a Bucket that is not
+ * publicly readable answer 403 here as it does in real S3.
+ */
+export declare class SimS3WebsiteObjectLoader {
+    private readonly simS3;
+    private readonly bucketName;
+    private readonly caller;
+    constructor(properties: SimS3WebsiteObjectLoaderProperties);
+    /**
+     * A loader for one routed website request, reading from the scope that owns
+     * the Bucket as the principal the boundary resolved.
+     */
+    static forRoute(simAws: SimAws, route: SimS3WebsiteRoute, serviceRequest: SimAwsServiceRequest): SimS3WebsiteObjectLoader;
+    /**
+     * Load an Object, or nothing when the Bucket holds no such key.
+     *
+     * A denial is raised rather than reported as absence, because the two mean
+     * different things to a website visitor: one is 404, the other 403.
+     */
+    load(objectKey: string): Promise<SimS3WebsiteObject | undefined>;
+    /**
+     * Load an Object the site only needs if it is readable, treating a denial as
+     * absence.
+     *
+     * The folder index probe and the error document are looked up to decide what
+     * to serve rather than because the visitor asked for them, so a denial on
+     * either should fall through to the next option instead of becoming the
+     * answer.
+     */
+    loadIfPermitted(objectKey: string): Promise<SimS3WebsiteObject | undefined>;
+}
+export {};
+//# sourceMappingURL=sim-s3-website-object-loader.d.ts.map

package/dist/service/s3/serve/website/sim-s3-website-object-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-website-object-loader.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/serve/website/sim-s3-website-object-loader.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,wDAAwD,CAAC;AACnG,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAEtD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAErE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAE7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAEhE,UAAU,kCAAkC;IAC1C,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;CAC/B;AAED;;;;;;;;GAQG;AACH,qBAAa,wBAAwB;IACnC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAQ;IAC9B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAkB;IAC7C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAe;IAEtC,YAAY,UAAU,EAAE,kCAAkC,EAIzD;IAED;;;OAGG;IACH,MAAM,CAAC,QAAQ,CACb,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,iBAAiB,EACxB,cAAc,EAAE,oBAAoB,GACnC,wBAAwB,CAW1B;IAED;;;;;OAKG;IACG,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAkBrE;IAED;;;;;;;;OAQG;IACG,eAAe,CACnB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAUzC;CACF"}

package/dist/service/s3/serve/website/sim-s3-website-object-loader.js

@@ -0,0 +1,75 @@
+import { SimIamAccessDenied } from "../../../iam/error/sim-iam.error.js";
+import { SimS3NoSuchKey } from "../../error/sim-s3.error.js";
+import { simS3BodyToBuffer } from "../../storage/s3-body-buffer.js";
+import { SimS3WebsiteObject } from "./sim-s3-website-object.js";
+/**
+ * Reads Objects for the static website endpoint as the requesting principal.
+ *
+ * Everything goes through the ordinary GetObject command, so a website request
+ * is authorized by the same IAM code path an in-process SDK call goes through.
+ * A browser presenting nothing is anonymous, and anonymous holds nothing unless
+ * the Bucket policy grants it, which is what makes a Bucket that is not
+ * publicly readable answer 403 here as it does in real S3.
+ */
+export class SimS3WebsiteObjectLoader {
+    simS3;
+    bucketName;
+    caller;
+    constructor(properties) {
+        this.simS3 = properties.simS3;
+        this.bucketName = properties.bucketName;
+        this.caller = properties.caller;
+    }
+    /**
+     * A loader for one routed website request, reading from the scope that owns
+     * the Bucket as the principal the boundary resolved.
+     */
+    static forRoute(simAws, route, serviceRequest) {
+        return new SimS3WebsiteObjectLoader({
+            simS3: simAws
+                .accountRegionScope(route.bucketScope.accountId, route.bucketScope.regionName)
+                .s3(),
+            bucketName: route.bucket.bucketName,
+            caller: serviceRequest.caller.toCaller(),
+        });
+    }
+    /**
+     * Load an Object, or nothing when the Bucket holds no such key.
+     *
+     * A denial is raised rather than reported as absence, because the two mean
+     * different things to a website visitor: one is 404, the other 403.
+     */
+    async load(objectKey) {
+        try {
+            const output = await this.simS3.getObject({ input: { Bucket: this.bucketName, Key: objectKey } }, { caller: this.caller });
+            return new SimS3WebsiteObject(await simS3BodyToBuffer(output.Body), output.Metadata?.["content-type"]);
+        }
+        catch (error) {
+            if (error instanceof SimS3NoSuchKey) {
+                return undefined;
+            }
+            throw error;
+        }
+    }
+    /**
+     * Load an Object the site only needs if it is readable, treating a denial as
+     * absence.
+     *
+     * The folder index probe and the error document are looked up to decide what
+     * to serve rather than because the visitor asked for them, so a denial on
+     * either should fall through to the next option instead of becoming the
+     * answer.
+     */
+    async loadIfPermitted(objectKey) {
+        try {
+            return await this.load(objectKey);
+        }
+        catch (error) {
+            if (error instanceof SimIamAccessDenied) {
+                return undefined;
+            }
+            throw error;
+        }
+    }
+}
+//# sourceMappingURL=sim-s3-website-object-loader.js.map

package/dist/service/s3/serve/website/sim-s3-website-object-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-website-object-loader.js","sourceRoot":"","sources":["../../../../../src/service/s3/serve/website/sim-s3-website-object-loader.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAGzE,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAE7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAQhE;;;;;;;;GAQG;AACH,MAAM,OAAO,wBAAwB;IAClB,KAAK,CAAQ;IACb,UAAU,CAAkB;IAC5B,MAAM,CAAe;IAEtC,YAAY,UAA8C;QACxD,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAClC,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,QAAQ,CACb,MAAc,EACd,KAAwB,EACxB,cAAoC;QAEpC,OAAO,IAAI,wBAAwB,CAAC;YAClC,KAAK,EAAE,MAAM;iBACV,kBAAkB,CACjB,KAAK,CAAC,WAAW,CAAC,SAAS,EAC3B,KAAK,CAAC,WAAW,CAAC,UAAU,CAC7B;iBACA,EAAE,EAAE;YACP,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,UAAU;YACnC,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,QAAQ,EAAE;SACzC,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,IAAI,CAAC,SAAiB;QAC1B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CACvC,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,EACtD,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CACxB,CAAC;YAEF,OAAO,IAAI,kBAAkB,CAC3B,MAAM,iBAAiB,CAAC,MAAM,CAAC,IAA6B,CAAC,EAC7D,MAAM,CAAC,QAAQ,EAAE,CAAC,cAAc,CAAC,CAClC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;gBACpC,OAAO,SAAS,CAAC;YACnB,CAAC;YAED,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,eAAe,CACnB,SAAiB;QAEjB,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,kBAAkB,EAAE,CAAC;gBACxC,OAAO,SAAS,CAAC;YACnB,CAAC;YAED,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF"}

package/dist/service/s3/serve/website/sim-s3-website-object.d.ts

@@ -0,0 +1,18 @@
+/**
+ * An Object the static website endpoint is about to serve.
+ *
+ * The website endpoint reads Objects through the ordinary GetObject command
+ * rather than out of Bucket storage, so what it gets back is a stream and a
+ * metadata record. This is that, collapsed into the two things an HTTP
+ * response needs.
+ */
+export declare class SimS3WebsiteObject {
+    readonly body: Buffer;
+    readonly contentType: string | undefined;
+    constructor(body: Buffer, contentType: string | undefined);
+    /**
+     * The headers describing this Object in a website response.
+     */
+    headers(): Record<string, string>;
+}
+//# sourceMappingURL=sim-s3-website-object.d.ts.map

package/dist/service/s3/serve/website/sim-s3-website-object.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-website-object.d.ts","sourceRoot":"","sources":["../../../../../src/service/s3/serve/website/sim-s3-website-object.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,qBAAa,kBAAkB;aAEX,IAAI,EAAE,MAAM;aACZ,WAAW,EAAE,MAAM,GAAG,SAAS;IAFjD,YACkB,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,GAAG,SAAS,EAC7C;IAEJ;;OAEG;IACH,OAAO,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAOhC;CACF"}

package/dist/service/s3/serve/website/sim-s3-website-object.js

@@ -0,0 +1,28 @@
+/**
+ * An Object the static website endpoint is about to serve.
+ *
+ * The website endpoint reads Objects through the ordinary GetObject command
+ * rather than out of Bucket storage, so what it gets back is a stream and a
+ * metadata record. This is that, collapsed into the two things an HTTP
+ * response needs.
+ */
+export class SimS3WebsiteObject {
+    body;
+    contentType;
+    constructor(body, contentType) {
+        this.body = body;
+        this.contentType = contentType;
+    }
+    /**
+     * The headers describing this Object in a website response.
+     */
+    headers() {
+        return {
+            "content-length": String(this.body.length),
+            ...(this.contentType !== undefined && {
+                "content-type": this.contentType,
+            }),
+        };
+    }
+}
+//# sourceMappingURL=sim-s3-website-object.js.map

package/dist/service/s3/serve/website/sim-s3-website-object.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-website-object.js","sourceRoot":"","sources":["../../../../../src/service/s3/serve/website/sim-s3-website-object.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,OAAO,kBAAkB;IAEX,IAAI;IACJ,WAAW;IAF7B,YACkB,IAAY,EACZ,WAA+B;oBAD/B,IAAI;2BACJ,WAAW;IAC1B,CAAC;IAEJ;;OAEG;IACH,OAAO;QACL,OAAO;YACL,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;YAC1C,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI;gBACpC,cAAc,EAAE,IAAI,CAAC,WAAW;aACjC,CAAC;SACH,CAAC;IACJ,CAAC;CACF"}

package/dist/service/s3/serve/website/sim-s3-website-responses.d.ts

@@ -0,0 +1,27 @@
+import type { SimS3WebsiteObject } from "./sim-s3-website-object.js";
+/**
+ * The HTTP responses the simulated S3 static website endpoint answers with.
+ *
+ * Kept apart from the controller because deciding what to serve and building
+ * the response that serves it are separate jobs, and only the first one is
+ * interesting.
+ */
+export declare class SimS3WebsiteResponses {
+    /**
+     * Serve an Object, with no body when the request was a HEAD.
+     */
+    foundObject(object: SimS3WebsiteObject, request: Request, status?: number): Response;
+    /**
+     * Refuse a request for an Object the caller may not read.
+     */
+    accessDenied(bucketName: string): Response;
+    /**
+     * Refuse a request to a Bucket that is not serving a website at all.
+     */
+    websiteNotEnabled(bucketName: string): Response;
+    /**
+     * Report an Object the Bucket does not hold.
+     */
+    notFound(bucketName: string, objectKey: string): Response;
+}
+//# sourceMappingURL=sim-s3-website-responses.d.ts.map