@kensio/yulin 0.37.0 → 0.39.0

package/dist/service/secretsmanager/command/secret/sim-secrets-manager-lifecycle-commands.js

@@ -0,0 +1,61 @@
+import { SimSecretsManagerDeletionSchedule } from "../../secret/sim-secrets-manager-deletion-schedule.js";
+/**
+ * The commands that delete a simulated secret and take it back.
+ *
+ * Deletion is the part of Secrets Manager most worth simulating properly,
+ * because a scheduled secret still holds its name. Redeploying a stack that
+ * deleted a secret is where that bites on real AWS, and it only reproduces
+ * here if the recovery window really has to elapse.
+ */
+export class SimSecretsManagerLifecycleCommands {
+    secrets;
+    expiry;
+    authorizer;
+    clock;
+    constructor(properties) {
+        this.secrets = properties.secrets;
+        this.expiry = properties.expiry;
+        this.authorizer = properties.authorizer;
+        this.clock = properties.clock;
+    }
+    /**
+     * Schedule a secret for deletion, or delete it outright.
+     *
+     * The secret stays in the store while it is scheduled, because that is what
+     * recoverable means: it is still there, refusing to be read or written, and
+     * still holding its name, until the window runs out.
+     */
+    delete(command, options) {
+        const schedule = new SimSecretsManagerDeletionSchedule(command.input);
+        const secret = this.secrets.require(command.input.SecretId);
+        this.authorizer.authorizeSecret("secretsmanager:DeleteSecret", secret, options?.caller);
+        const deletionDate = schedule.deletionDateFrom(this.clock.now());
+        if (schedule.isImmediate) {
+            this.secrets.remove(secret);
+        }
+        else {
+            secret.scheduleDeletion(deletionDate);
+            this.expiry.scheduleRemoval(secret, deletionDate);
+        }
+        return {
+            $metadata: {},
+            ARN: secret.arn.value,
+            Name: secret.name,
+            DeletionDate: deletionDate,
+        };
+    }
+    /**
+     * Cancel a scheduled deletion, leaving the secret as it was.
+     */
+    restore(command, options) {
+        const secret = this.secrets.require(command.input.SecretId);
+        this.authorizer.authorizeSecret("secretsmanager:RestoreSecret", secret, options?.caller);
+        secret.cancelDeletion();
+        return {
+            $metadata: {},
+            ARN: secret.arn.value,
+            Name: secret.name,
+        };
+    }
+}
+//# sourceMappingURL=sim-secrets-manager-lifecycle-commands.js.map

package/dist/service/secretsmanager/command/secret/sim-secrets-manager-lifecycle-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-secrets-manager-lifecycle-commands.js","sourceRoot":"","sources":["../../../../../src/service/secretsmanager/command/secret/sim-secrets-manager-lifecycle-commands.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,iCAAiC,EAAE,MAAM,uDAAuD,CAAC;AAsB1G;;;;;;;GAOG;AACH,MAAM,OAAO,kCAAkC;IAC5B,OAAO,CAA+B;IACtC,MAAM,CAAgC;IACtC,UAAU,CAA8B;IACxC,KAAK,CAAW;IAEjC,YAAY,UAAwD;QAClE,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;QAClC,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAChC,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CACJ,OAA+B,EAC/B,OAAkD;QAElD,MAAM,QAAQ,GAAG,IAAI,iCAAiC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAE5D,IAAI,CAAC,UAAU,CAAC,eAAe,CAC7B,6BAA6B,EAC7B,MAAM,EACN,OAAO,EAAE,MAAM,CAChB,CAAC;QAEF,MAAM,YAAY,GAAG,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;QAEjE,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;YACzB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;YACtC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QACpD,CAAC;QAED,OAAO;YACL,SAAS,EAAE,EAAE;YACb,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK;YACrB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,YAAY,EAAE,YAAY;SAC3B,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,OAAO,CACL,OAAgC,EAChC,OAAkD;QAElD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAE5D,IAAI,CAAC,UAAU,CAAC,eAAe,CAC7B,8BAA8B,EAC9B,MAAM,EACN,OAAO,EAAE,MAAM,CAChB,CAAC;QACF,MAAM,CAAC,cAAc,EAAE,CAAC;QAExB,OAAO;YACL,SAAS,EAAE,EAAE;YACb,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK;YACrB,IAAI,EAAE,MAAM,CAAC,IAAI;SAClB,CAAC;IACJ,CAAC;CACF"}

package/dist/service/secretsmanager/command/secret/sim-secrets-manager-list-secrets.d.ts

@@ -0,0 +1,44 @@
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimSecretsManagerSecretStore } from "../../secret/sim-secrets-manager-secret-store.js";
+import type { SimSecretsManagerAuthorizer } from "../authorize/sim-secrets-manager-authorizer.js";
+import type { SimListSecretsCommand, SimListSecretsCommandOutput } from "./secret.command.js";
+interface SimSecretsManagerListSecretsProperties {
+    readonly secrets: SimSecretsManagerSecretStore;
+    readonly authorizer: SimSecretsManagerAuthorizer;
+}
+interface SimSecretsManagerListSecretsOptions {
+    readonly caller?: SimAwsCaller;
+}
+/**
+ * The ListSecrets command.
+ *
+ * Real Secrets Manager gives this action no resource-level permissions, so it
+ * authorizes against `*` rather than against each secret, and it does not
+ * filter the list by what the caller can read.
+ *
+ * Secrets scheduled for deletion are left out unless asked for, as real
+ * Secrets Manager leaves them out.
+ */
+export declare class SimSecretsManagerListSecrets {
+    private readonly secrets;
+    private readonly authorizer;
+    private readonly detail;
+    constructor(properties: SimSecretsManagerListSecretsProperties);
+    /**
+     * List the secrets in this scope.
+     */
+    handle(command: SimListSecretsCommand, options?: SimSecretsManagerListSecretsOptions): SimListSecretsCommandOutput;
+    /**
+     * Refuse the request inputs this simulation does not model.
+     *
+     * Ignoring a filter would quietly return more secrets than real Secrets
+     * Manager would, and ignoring a sort would return them in an order the
+     * caller did not ask for. Either is the kind of divergence that makes a
+     * passing test mean nothing, so both are refused outright, which is stricter
+     * than AWS and deliberate.
+     */
+    private refuseUnsimulatedInput;
+    private listedSecrets;
+}
+export {};
+//# sourceMappingURL=sim-secrets-manager-list-secrets.d.ts.map

package/dist/service/secretsmanager/command/secret/sim-secrets-manager-list-secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-secrets-manager-list-secrets.d.ts","sourceRoot":"","sources":["../../../../../src/service/secretsmanager/command/secret/sim-secrets-manager-list-secrets.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAG1E,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,kDAAkD,CAAC;AACrG,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,gDAAgD,CAAC;AAGlG,OAAO,KAAK,EACV,qBAAqB,EAErB,2BAA2B,EAC5B,MAAM,qBAAqB,CAAC;AAE7B,UAAU,sCAAsC;IAC9C,QAAQ,CAAC,OAAO,EAAE,4BAA4B,CAAC;IAC/C,QAAQ,CAAC,UAAU,EAAE,2BAA2B,CAAC;CAClD;AAED,UAAU,mCAAmC;IAC3C,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;;;;;;GASG;AACH,qBAAa,4BAA4B;IACvC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA+B;IACvD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA8B;IACzD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuC;IAE9D,YAAY,UAAU,EAAE,sCAAsC,EAG7D;IAED;;OAEG;IACH,MAAM,CACJ,OAAO,EAAE,qBAAqB,EAC9B,OAAO,CAAC,EAAE,mCAAmC,GAC5C,2BAA2B,CAgB7B;IAED;;;;;;;;OAQG;IACH,OAAO,CAAC,sBAAsB;IAe9B,OAAO,CAAC,aAAa;CAStB"}

package/dist/service/secretsmanager/command/secret/sim-secrets-manager-list-secrets.js

@@ -0,0 +1,61 @@
+import { SimSecretsManagerInvalidParameterException } from "../../error/sim-secrets-manager.error.js";
+import { SimSecretsManagerSecretDetail } from "./sim-secrets-manager-secret-detail.js";
+import { SimSecretsManagerSecretPage } from "./sim-secrets-manager-secret-page.js";
+/**
+ * The ListSecrets command.
+ *
+ * Real Secrets Manager gives this action no resource-level permissions, so it
+ * authorizes against `*` rather than against each secret, and it does not
+ * filter the list by what the caller can read.
+ *
+ * Secrets scheduled for deletion are left out unless asked for, as real
+ * Secrets Manager leaves them out.
+ */
+export class SimSecretsManagerListSecrets {
+    secrets;
+    authorizer;
+    detail = new SimSecretsManagerSecretDetail();
+    constructor(properties) {
+        this.secrets = properties.secrets;
+        this.authorizer = properties.authorizer;
+    }
+    /**
+     * List the secrets in this scope.
+     */
+    handle(command, options) {
+        const input = command.input ?? {};
+        this.refuseUnsimulatedInput(input);
+        this.authorizer.authorizeAny("secretsmanager:ListSecrets", options?.caller);
+        const page = new SimSecretsManagerSecretPage(this.listedSecrets(input.IncludePlannedDeletion), input);
+        return {
+            $metadata: {},
+            SecretList: page.secrets.map((secret) => this.detail.listEntry(secret)),
+            NextToken: page.nextToken,
+        };
+    }
+    /**
+     * Refuse the request inputs this simulation does not model.
+     *
+     * Ignoring a filter would quietly return more secrets than real Secrets
+     * Manager would, and ignoring a sort would return them in an order the
+     * caller did not ask for. Either is the kind of divergence that makes a
+     * passing test mean nothing, so both are refused outright, which is stricter
+     * than AWS and deliberate.
+     */
+    refuseUnsimulatedInput(input) {
+        if (input.Filters !== undefined) {
+            throw new SimSecretsManagerInvalidParameterException("ListSecrets Filters are not simulated");
+        }
+        if (input.SortOrder !== undefined || input.SortBy !== undefined) {
+            throw new SimSecretsManagerInvalidParameterException("ListSecrets SortOrder and SortBy are not simulated: secrets are " +
+                "listed in creation order");
+        }
+    }
+    listedSecrets(includePlannedDeletion) {
+        if (includePlannedDeletion === true) {
+            return this.secrets.all;
+        }
+        return this.secrets.all.filter((secret) => !secret.isScheduledForDeletion);
+    }
+}
+//# sourceMappingURL=sim-secrets-manager-list-secrets.js.map

package/dist/service/secretsmanager/command/secret/sim-secrets-manager-list-secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-secrets-manager-list-secrets.js","sourceRoot":"","sources":["../../../../../src/service/secretsmanager/command/secret/sim-secrets-manager-list-secrets.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,0CAA0C,EAAE,MAAM,0CAA0C,CAAC;AAItG,OAAO,EAAE,6BAA6B,EAAE,MAAM,wCAAwC,CAAC;AACvF,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AAgBnF;;;;;;;;;GASG;AACH,MAAM,OAAO,4BAA4B;IACtB,OAAO,CAA+B;IACtC,UAAU,CAA8B;IACxC,MAAM,GAAG,IAAI,6BAA6B,EAAE,CAAC;IAE9D,YAAY,UAAkD;QAC5D,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;QAClC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,MAAM,CACJ,OAA8B,EAC9B,OAA6C;QAE7C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;QAElC,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,4BAA4B,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAE5E,MAAM,IAAI,GAAG,IAAI,2BAA2B,CAC1C,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,sBAAsB,CAAC,EAChD,KAAK,CACN,CAAC;QAEF,OAAO;YACL,SAAS,EAAE,EAAE;YACb,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACvE,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACK,sBAAsB,CAAC,KAAiC;QAC9D,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,IAAI,0CAA0C,CAClD,uCAAuC,CACxC,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAChE,MAAM,IAAI,0CAA0C,CAClD,kEAAkE;gBAChE,0BAA0B,CAC7B,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,aAAa,CACnB,sBAA2C;QAE3C,IAAI,sBAAsB,KAAK,IAAI,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;QAC1B,CAAC;QAED,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;IAC7E,CAAC;CACF"}

package/dist/service/secretsmanager/command/secret/sim-secrets-manager-secret-commands.d.ts

@@ -0,0 +1,48 @@
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimSecretsManagerSecretFactory } from "../../secret/sim-secrets-manager-secret-factory.js";
+import type { SimSecretsManagerSecretStore } from "../../secret/sim-secrets-manager-secret-store.js";
+import type { SimSecretsManagerVersionWriter } from "../../secret/sim-secrets-manager-version-writer.js";
+import type { SimSecretsManagerAuthorizer } from "../authorize/sim-secrets-manager-authorizer.js";
+import type { SimCreateSecretCommand, SimCreateSecretCommandOutput, SimDescribeSecretCommand, SimDescribeSecretCommandOutput } from "./secret.command.js";
+interface SimSecretsManagerSecretCommandsProperties {
+    readonly secrets: SimSecretsManagerSecretStore;
+    readonly secretFactory: SimSecretsManagerSecretFactory;
+    readonly versionWriter: SimSecretsManagerVersionWriter;
+    readonly authorizer: SimSecretsManagerAuthorizer;
+}
+interface SimSecretsManagerCommandOptions {
+    readonly caller?: SimAwsCaller;
+}
+/**
+ * The commands that create and describe a simulated secret.
+ *
+ * The interesting rules live with the collaborators these delegate to: name
+ * validation and ARN suffixing in the secret factory, staging labels in the
+ * version writer, and name availability in the store.
+ */
+export declare class SimSecretsManagerSecretCommands {
+    private readonly secrets;
+    private readonly secretFactory;
+    private readonly versionWriter;
+    private readonly authorizer;
+    private readonly detail;
+    constructor(properties: SimSecretsManagerSecretCommandsProperties);
+    /**
+     * Create a secret with its first version.
+     *
+     * Authorization happens against the ARN the secret is about to get, suffix
+     * and all, so a policy allowing `secretsmanager:CreateSecret` on a bare name
+     * fails here just as it would on real AWS.
+     */
+    create(command: SimCreateSecretCommand, options?: SimSecretsManagerCommandOptions): SimCreateSecretCommandOutput;
+    /**
+     * Describe a secret's metadata, including the versions and their staging
+     * labels.
+     *
+     * A secret scheduled for deletion is still describable, and reports the date
+     * its recovery window runs out as DeletedDate.
+     */
+    describe(command: SimDescribeSecretCommand, options?: SimSecretsManagerCommandOptions): SimDescribeSecretCommandOutput;
+}
+export {};
+//# sourceMappingURL=sim-secrets-manager-secret-commands.d.ts.map

package/dist/service/secretsmanager/command/secret/sim-secrets-manager-secret-commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-secrets-manager-secret-commands.d.ts","sourceRoot":"","sources":["../../../../../src/service/secretsmanager/command/secret/sim-secrets-manager-secret-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,oDAAoD,CAAC;AACzG,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,kDAAkD,CAAC;AAErG,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,oDAAoD,CAAC;AACzG,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,gDAAgD,CAAC;AAElG,OAAO,KAAK,EACV,sBAAsB,EACtB,4BAA4B,EAC5B,wBAAwB,EACxB,8BAA8B,EAC/B,MAAM,qBAAqB,CAAC;AAE7B,UAAU,yCAAyC;IACjD,QAAQ,CAAC,OAAO,EAAE,4BAA4B,CAAC;IAC/C,QAAQ,CAAC,aAAa,EAAE,8BAA8B,CAAC;IACvD,QAAQ,CAAC,aAAa,EAAE,8BAA8B,CAAC;IACvD,QAAQ,CAAC,UAAU,EAAE,2BAA2B,CAAC;CAClD;AAED,UAAU,+BAA+B;IACvC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;;;GAMG;AACH,qBAAa,+BAA+B;IAC1C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA+B;IACvD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAiC;IAC/D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAiC;IAC/D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA8B;IACzD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuC;IAE9D,YAAY,UAAU,EAAE,yCAAyC,EAKhE;IAED;;;;;;OAMG;IACH,MAAM,CACJ,OAAO,EAAE,sBAAsB,EAC/B,OAAO,CAAC,EAAE,+BAA+B,GACxC,4BAA4B,CA0B9B;IAED;;;;;;OAMG;IACH,QAAQ,CACN,OAAO,EAAE,wBAAwB,EACjC,OAAO,CAAC,EAAE,+BAA+B,GACxC,8BAA8B,CAUhC;CACF"}

package/dist/service/secretsmanager/command/secret/sim-secrets-manager-secret-commands.js

@@ -0,0 +1,62 @@
+import { SimSecretsManagerSecretValue } from "../../secret/sim-secrets-manager-secret-value.js";
+import { SimSecretsManagerSecretDetail } from "./sim-secrets-manager-secret-detail.js";
+/**
+ * The commands that create and describe a simulated secret.
+ *
+ * The interesting rules live with the collaborators these delegate to: name
+ * validation and ARN suffixing in the secret factory, staging labels in the
+ * version writer, and name availability in the store.
+ */
+export class SimSecretsManagerSecretCommands {
+    secrets;
+    secretFactory;
+    versionWriter;
+    authorizer;
+    detail = new SimSecretsManagerSecretDetail();
+    constructor(properties) {
+        this.secrets = properties.secrets;
+        this.secretFactory = properties.secretFactory;
+        this.versionWriter = properties.versionWriter;
+        this.authorizer = properties.authorizer;
+    }
+    /**
+     * Create a secret with its first version.
+     *
+     * Authorization happens against the ARN the secret is about to get, suffix
+     * and all, so a policy allowing `secretsmanager:CreateSecret` on a bare name
+     * fails here just as it would on real AWS.
+     */
+    create(command, options) {
+        const { input } = command;
+        const secret = this.secretFactory.make({
+            name: input.Name,
+            description: input.Description,
+            kmsKeyId: input.KmsKeyId,
+            tags: input.Tags,
+        });
+        const value = SimSecretsManagerSecretValue.required(input);
+        this.authorizer.authorizeSecret("secretsmanager:CreateSecret", secret, options?.caller);
+        this.secrets.requireNameAvailable(secret.name);
+        const version = this.versionWriter.write(secret, value, input);
+        this.secrets.add(secret);
+        return {
+            $metadata: {},
+            ARN: secret.arn.value,
+            Name: secret.name,
+            VersionId: version.versionId,
+        };
+    }
+    /**
+     * Describe a secret's metadata, including the versions and their staging
+     * labels.
+     *
+     * A secret scheduled for deletion is still describable, and reports the date
+     * its recovery window runs out as DeletedDate.
+     */
+    describe(command, options) {
+        const secret = this.secrets.require(command.input.SecretId);
+        this.authorizer.authorizeSecret("secretsmanager:DescribeSecret", secret, options?.caller);
+        return { ...this.detail.describe(secret), $metadata: {} };
+    }
+}
+//# sourceMappingURL=sim-secrets-manager-secret-commands.js.map

package/dist/service/secretsmanager/command/secret/sim-secrets-manager-secret-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-secrets-manager-secret-commands.js","sourceRoot":"","sources":["../../../../../src/service/secretsmanager/command/secret/sim-secrets-manager-secret-commands.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,4BAA4B,EAAE,MAAM,kDAAkD,CAAC;AAGhG,OAAO,EAAE,6BAA6B,EAAE,MAAM,wCAAwC,CAAC;AAmBvF;;;;;;GAMG;AACH,MAAM,OAAO,+BAA+B;IACzB,OAAO,CAA+B;IACtC,aAAa,CAAiC;IAC9C,aAAa,CAAiC;IAC9C,UAAU,CAA8B;IACxC,MAAM,GAAG,IAAI,6BAA6B,EAAE,CAAC;IAE9D,YAAY,UAAqD;QAC/D,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;QAClC,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;QAC9C,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;QAC9C,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;IAC1C,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CACJ,OAA+B,EAC/B,OAAyC;QAEzC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;YACrC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,IAAI,EAAE,KAAK,CAAC,IAAI;SACjB,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,4BAA4B,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAE3D,IAAI,CAAC,UAAU,CAAC,eAAe,CAC7B,6BAA6B,EAC7B,MAAM,EACN,OAAO,EAAE,MAAM,CAChB,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAE/C,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAC/D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAEzB,OAAO;YACL,SAAS,EAAE,EAAE;YACb,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK;YACrB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,QAAQ,CACN,OAAiC,EACjC,OAAyC;QAEzC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAE5D,IAAI,CAAC,UAAU,CAAC,eAAe,CAC7B,+BAA+B,EAC/B,MAAM,EACN,OAAO,EAAE,MAAM,CAChB,CAAC;QAEF,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC5D,CAAC;CACF"}

package/dist/service/secretsmanager/command/secret/sim-secrets-manager-secret-detail.d.ts

@@ -0,0 +1,26 @@
+import type { SimSecretsManagerSecret } from "../../secret/sim-secrets-manager-secret.js";
+import type { SimDescribeSecretCommandOutput, SimSecretsManagerSecretListEntry } from "./secret.command.js";
+type SimSecretsManagerSecretDescription = Omit<SimDescribeSecretCommandOutput, "$metadata">;
+/**
+ * Converts a stored secret into the metadata Secrets Manager reports for it.
+ *
+ * DescribeSecret and ListSecrets report almost the same fields under two
+ * slightly different names, so building both here keeps them agreeing with
+ * each other.
+ *
+ * Rotation is always reported as disabled: RotateSecret and the rotation
+ * Lambda protocol are not simulated, so no secret in this simulation can be
+ * rotating.
+ */
+export declare class SimSecretsManagerSecretDetail {
+    /**
+     * The fields DescribeSecret reports for a secret.
+     */
+    describe(secret: SimSecretsManagerSecret): SimSecretsManagerSecretDescription;
+    /**
+     * The fields ListSecrets reports for a secret.
+     */
+    listEntry(secret: SimSecretsManagerSecret): SimSecretsManagerSecretListEntry;
+}
+export {};
+//# sourceMappingURL=sim-secrets-manager-secret-detail.d.ts.map

package/dist/service/secretsmanager/command/secret/sim-secrets-manager-secret-detail.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-secrets-manager-secret-detail.d.ts","sourceRoot":"","sources":["../../../../../src/service/secretsmanager/command/secret/sim-secrets-manager-secret-detail.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAC;AAC1F,OAAO,KAAK,EACV,8BAA8B,EAC9B,gCAAgC,EACjC,MAAM,qBAAqB,CAAC;AAE7B,KAAK,kCAAkC,GAAG,IAAI,CAC5C,8BAA8B,EAC9B,WAAW,CACZ,CAAC;AAEF;;;;;;;;;;GAUG;AACH,qBAAa,6BAA6B;IACxC;;OAEG;IACH,QAAQ,CACN,MAAM,EAAE,uBAAuB,GAC9B,kCAAkC,CAapC;IAED;;OAEG;IACH,SAAS,CAAC,MAAM,EAAE,uBAAuB,GAAG,gCAAgC,CAK3E;CACF"}

package/dist/service/secretsmanager/command/secret/sim-secrets-manager-secret-detail.js

@@ -0,0 +1,38 @@
+/**
+ * Converts a stored secret into the metadata Secrets Manager reports for it.
+ *
+ * DescribeSecret and ListSecrets report almost the same fields under two
+ * slightly different names, so building both here keeps them agreeing with
+ * each other.
+ *
+ * Rotation is always reported as disabled: RotateSecret and the rotation
+ * Lambda protocol are not simulated, so no secret in this simulation can be
+ * rotating.
+ */
+export class SimSecretsManagerSecretDetail {
+    /**
+     * The fields DescribeSecret reports for a secret.
+     */
+    describe(secret) {
+        return {
+            ARN: secret.arn.value,
+            Name: secret.name,
+            Description: secret.description,
+            KmsKeyId: secret.kmsKeyId,
+            RotationEnabled: false,
+            CreatedDate: secret.createdDate,
+            LastChangedDate: secret.lastChangedDate,
+            DeletedDate: secret.deletionDate,
+            Tags: secret.tags,
+            VersionIdsToStages: secret.versions.versionIdsToStages(),
+        };
+    }
+    /**
+     * The fields ListSecrets reports for a secret.
+     */
+    listEntry(secret) {
+        const { VersionIdsToStages: versionsToStages, ...shared } = this.describe(secret);
+        return { ...shared, SecretVersionsToStages: versionsToStages };
+    }
+}
+//# sourceMappingURL=sim-secrets-manager-secret-detail.js.map

package/dist/service/secretsmanager/command/secret/sim-secrets-manager-secret-detail.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-secrets-manager-secret-detail.js","sourceRoot":"","sources":["../../../../../src/service/secretsmanager/command/secret/sim-secrets-manager-secret-detail.ts"],"names":[],"mappings":"AAWA;;;;;;;;;;GAUG;AACH,MAAM,OAAO,6BAA6B;IACxC;;OAEG;IACH,QAAQ,CACN,MAA+B;QAE/B,OAAO;YACL,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK;YACrB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,eAAe,EAAE,KAAK;YACtB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,WAAW,EAAE,MAAM,CAAC,YAAY;YAChC,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,kBAAkB,EAAE,MAAM,CAAC,QAAQ,CAAC,kBAAkB,EAAE;SACzD,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,MAA+B;QACvC,MAAM,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,GAAG,MAAM,EAAE,GACvD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAExB,OAAO,EAAE,GAAG,MAAM,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,CAAC;IACjE,CAAC;CACF"}

package/dist/service/secretsmanager/command/secret/sim-secrets-manager-secret-page.d.ts

@@ -0,0 +1,29 @@
+import type { SimSecretsManagerSecret } from "../../secret/sim-secrets-manager-secret.js";
+/**
+ * The paging fields a ListSecrets request carries.
+ */
+export interface SimSecretsManagerSecretPageInput {
+    readonly MaxResults?: number | undefined;
+    readonly NextToken?: string | undefined;
+}
+/**
+ * One page of listed secrets, and the token that reaches the next one.
+ */
+export declare class SimSecretsManagerSecretPage {
+    readonly secrets: readonly SimSecretsManagerSecret[];
+    readonly nextToken: string | undefined;
+    constructor(listed: readonly SimSecretsManagerSecret[], input: SimSecretsManagerSecretPageInput);
+    private static maxResults;
+    /**
+     * Read a continuation token as its offset into the listed secrets.
+     *
+     * Tokens are the canonical non-negative integer representation this command
+     * emits, so anything else is rejected rather than silently starting again
+     * from the beginning. An offset past the end of the list is rejected for the
+     * same reason: no such token is ever issued, so answering one with an empty
+     * page would be answering a question that was never validly asked.
+     */
+    private static startIndex;
+    private static tokenFor;
+}
+//# sourceMappingURL=sim-secrets-manager-secret-page.d.ts.map

package/dist/service/secretsmanager/command/secret/sim-secrets-manager-secret-page.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-secrets-manager-secret-page.d.ts","sourceRoot":"","sources":["../../../../../src/service/secretsmanager/command/secret/sim-secrets-manager-secret-page.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAC;AAK1F;;GAEG;AACH,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACzC;AAED;;GAEG;AACH,qBAAa,2BAA2B;IACtC,SAAgB,OAAO,EAAE,SAAS,uBAAuB,EAAE,CAAC;IAC5D,SAAgB,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAE9C,YACE,MAAM,EAAE,SAAS,uBAAuB,EAAE,EAC1C,KAAK,EAAE,gCAAgC,EAcxC;IAED,OAAO,CAAC,MAAM,CAAC,UAAU;IAgBzB;;;;;;;;OAQG;IACH,OAAO,CAAC,MAAM,CAAC,UAAU;IAwBzB,OAAO,CAAC,MAAM,CAAC,QAAQ;CAUxB"}

package/dist/service/secretsmanager/command/secret/sim-secrets-manager-secret-page.js

@@ -0,0 +1,55 @@
+import { SimSecretsManagerInvalidParameterException } from "../../error/sim-secrets-manager.error.js";
+const defaultMaxResults = 100;
+const maxMaxResults = 100;
+/**
+ * One page of listed secrets, and the token that reaches the next one.
+ */
+export class SimSecretsManagerSecretPage {
+    secrets;
+    nextToken;
+    constructor(listed, input) {
+        const maxResults = SimSecretsManagerSecretPage.maxResults(input.MaxResults);
+        const startIndex = SimSecretsManagerSecretPage.startIndex(input.NextToken, listed.length);
+        const nextIndex = startIndex + maxResults;
+        this.secrets = listed.slice(startIndex, nextIndex);
+        this.nextToken = SimSecretsManagerSecretPage.tokenFor(nextIndex, listed.length);
+    }
+    static maxResults(requested) {
+        const maxResults = requested ?? defaultMaxResults;
+        if (!Number.isSafeInteger(maxResults) ||
+            maxResults < 1 ||
+            maxResults > maxMaxResults) {
+            throw new SimSecretsManagerInvalidParameterException(`MaxResults must be a whole number between 1 and ${String(maxMaxResults)}`);
+        }
+        return maxResults;
+    }
+    /**
+     * Read a continuation token as its offset into the listed secrets.
+     *
+     * Tokens are the canonical non-negative integer representation this command
+     * emits, so anything else is rejected rather than silently starting again
+     * from the beginning. An offset past the end of the list is rejected for the
+     * same reason: no such token is ever issued, so answering one with an empty
+     * page would be answering a question that was never validly asked.
+     */
+    static startIndex(nextToken, listedCount) {
+        if (nextToken === undefined) {
+            return 0;
+        }
+        const startIndex = Number(nextToken);
+        if (!Number.isSafeInteger(startIndex) ||
+            startIndex < 0 ||
+            startIndex >= listedCount ||
+            String(startIndex) !== nextToken) {
+            throw new SimSecretsManagerInvalidParameterException("NextToken is not a token this simulation issued");
+        }
+        return startIndex;
+    }
+    static tokenFor(nextIndex, listedCount) {
+        if (nextIndex >= listedCount) {
+            return undefined;
+        }
+        return String(nextIndex);
+    }
+}
+//# sourceMappingURL=sim-secrets-manager-secret-page.js.map

package/dist/service/secretsmanager/command/secret/sim-secrets-manager-secret-page.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-secrets-manager-secret-page.js","sourceRoot":"","sources":["../../../../../src/service/secretsmanager/command/secret/sim-secrets-manager-secret-page.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0CAA0C,EAAE,MAAM,0CAA0C,CAAC;AAGtG,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,aAAa,GAAG,GAAG,CAAC;AAU1B;;GAEG;AACH,MAAM,OAAO,2BAA2B;IACtB,OAAO,CAAqC;IAC5C,SAAS,CAAqB;IAE9C,YACE,MAA0C,EAC1C,KAAuC;QAEvC,MAAM,UAAU,GAAG,2BAA2B,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC5E,MAAM,UAAU,GAAG,2BAA2B,CAAC,UAAU,CACvD,KAAK,CAAC,SAAS,EACf,MAAM,CAAC,MAAM,CACd,CAAC;QACF,MAAM,SAAS,GAAG,UAAU,GAAG,UAAU,CAAC;QAE1C,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACnD,IAAI,CAAC,SAAS,GAAG,2BAA2B,CAAC,QAAQ,CACnD,SAAS,EACT,MAAM,CAAC,MAAM,CACd,CAAC;IACJ,CAAC;IAEO,MAAM,CAAC,UAAU,CAAC,SAA6B;QACrD,MAAM,UAAU,GAAG,SAAS,IAAI,iBAAiB,CAAC;QAElD,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC;YACjC,UAAU,GAAG,CAAC;YACd,UAAU,GAAG,aAAa,EAC1B,CAAC;YACD,MAAM,IAAI,0CAA0C,CAClD,mDAAmD,MAAM,CAAC,aAAa,CAAC,EAAE,CAC3E,CAAC;QACJ,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;;;;;;;OAQG;IACK,MAAM,CAAC,UAAU,CACvB,SAA6B,EAC7B,WAAmB;QAEnB,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,CAAC,CAAC;QACX,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;QAErC,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC;YACjC,UAAU,GAAG,CAAC;YACd,UAAU,IAAI,WAAW;YACzB,MAAM,CAAC,UAAU,CAAC,KAAK,SAAS,EAChC,CAAC;YACD,MAAM,IAAI,0CAA0C,CAClD,iDAAiD,CAClD,CAAC;QACJ,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAEO,MAAM,CAAC,QAAQ,CACrB,SAAiB,EACjB,WAAmB;QAEnB,IAAI,SAAS,IAAI,WAAW,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC;IAC3B,CAAC;CACF"}

package/dist/service/secretsmanager/command/secret/sim-secrets-manager-update-secret.d.ts

@@ -0,0 +1,46 @@
+import type { SimClock } from "../../../../util/clock/sim-clock.js";
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimSecretsManagerSecretStore } from "../../secret/sim-secrets-manager-secret-store.js";
+import type { SimSecretsManagerVersionWriter } from "../../secret/sim-secrets-manager-version-writer.js";
+import type { SimSecretsManagerAuthorizer } from "../authorize/sim-secrets-manager-authorizer.js";
+import type { SimUpdateSecretCommand, SimUpdateSecretCommandOutput } from "./secret.command.js";
+interface SimSecretsManagerUpdateSecretProperties {
+    readonly secrets: SimSecretsManagerSecretStore;
+    readonly versionWriter: SimSecretsManagerVersionWriter;
+    readonly authorizer: SimSecretsManagerAuthorizer;
+    readonly clock: SimClock;
+}
+interface SimSecretsManagerUpdateSecretOptions {
+    readonly caller?: SimAwsCaller;
+}
+/**
+ * The UpdateSecret command.
+ *
+ * This is the one operation that can change a secret's metadata and its value
+ * in the same request, and either part is optional, so it is kept apart from
+ * the commands that only do one of those.
+ */
+export declare class SimSecretsManagerUpdateSecret {
+    private readonly secrets;
+    private readonly versionWriter;
+    private readonly authorizer;
+    private readonly clock;
+    constructor(properties: SimSecretsManagerUpdateSecretProperties);
+    /**
+     * Update a secret's metadata, its value, or both.
+     *
+     * Supplying a value writes a new version and makes it current, the same as
+     * PutSecretValue does.
+     */
+    handle(command: SimUpdateSecretCommand, options?: SimSecretsManagerUpdateSecretOptions): SimUpdateSecretCommandOutput;
+    /**
+     * Apply the metadata fields an UpdateSecret request carries.
+     *
+     * Omitting a field leaves it as it was, which is how real Secrets Manager
+     * treats an absent Description or KmsKeyId.
+     */
+    private applyMetadata;
+    private writtenVersionId;
+}
+export {};
+//# sourceMappingURL=sim-secrets-manager-update-secret.d.ts.map

package/dist/service/secretsmanager/command/secret/sim-secrets-manager-update-secret.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-secrets-manager-update-secret.d.ts","sourceRoot":"","sources":["../../../../../src/service/secretsmanager/command/secret/sim-secrets-manager-update-secret.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAE1E,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,kDAAkD,CAAC;AAErG,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,oDAAoD,CAAC;AACzG,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,gDAAgD,CAAC;AAClG,OAAO,KAAK,EACV,sBAAsB,EAEtB,4BAA4B,EAC7B,MAAM,qBAAqB,CAAC;AAE7B,UAAU,uCAAuC;IAC/C,QAAQ,CAAC,OAAO,EAAE,4BAA4B,CAAC;IAC/C,QAAQ,CAAC,aAAa,EAAE,8BAA8B,CAAC;IACvD,QAAQ,CAAC,UAAU,EAAE,2BAA2B,CAAC;IACjD,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;;;GAMG;AACH,qBAAa,6BAA6B;IACxC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA+B;IACvD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAiC;IAC/D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA8B;IACzD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IAEjC,YAAY,UAAU,EAAE,uCAAuC,EAK9D;IAED;;;;;OAKG;IACH,MAAM,CACJ,OAAO,EAAE,sBAAsB,EAC/B,OAAO,CAAC,EAAE,oCAAoC,GAC7C,4BAA4B,CA0B9B;IAED;;;;;OAKG;IACH,OAAO,CAAC,aAAa;IAerB,OAAO,CAAC,gBAAgB;CAWzB"}

package/dist/service/secretsmanager/command/secret/sim-secrets-manager-update-secret.js

@@ -0,0 +1,67 @@
+import { SimSecretsManagerSecretValue } from "../../secret/sim-secrets-manager-secret-value.js";
+/**
+ * The UpdateSecret command.
+ *
+ * This is the one operation that can change a secret's metadata and its value
+ * in the same request, and either part is optional, so it is kept apart from
+ * the commands that only do one of those.
+ */
+export class SimSecretsManagerUpdateSecret {
+    secrets;
+    versionWriter;
+    authorizer;
+    clock;
+    constructor(properties) {
+        this.secrets = properties.secrets;
+        this.versionWriter = properties.versionWriter;
+        this.authorizer = properties.authorizer;
+        this.clock = properties.clock;
+    }
+    /**
+     * Update a secret's metadata, its value, or both.
+     *
+     * Supplying a value writes a new version and makes it current, the same as
+     * PutSecretValue does.
+     */
+    handle(command, options) {
+        const { input } = command;
+        const secret = this.secrets.require(input.SecretId);
+        this.authorizer.authorizeSecret("secretsmanager:UpdateSecret", secret, options?.caller);
+        secret.requireNotScheduledForDeletion();
+        const value = SimSecretsManagerSecretValue.optional(input);
+        // The version is written first because writing it can still fail, on a
+        // client request token already used for a different value. Applying the
+        // metadata first would leave the secret half updated by a request that
+        // then reported an error.
+        const versionId = this.writtenVersionId(secret, value, input);
+        this.applyMetadata(secret, input);
+        return {
+            $metadata: {},
+            ARN: secret.arn.value,
+            Name: secret.name,
+            VersionId: versionId,
+        };
+    }
+    /**
+     * Apply the metadata fields an UpdateSecret request carries.
+     *
+     * Omitting a field leaves it as it was, which is how real Secrets Manager
+     * treats an absent Description or KmsKeyId.
+     */
+    applyMetadata(secret, input) {
+        if (input.Description !== undefined) {
+            secret.description = input.Description;
+        }
+        if (input.KmsKeyId !== undefined) {
+            secret.kmsKeyId = input.KmsKeyId;
+        }
+        secret.lastChangedDate = this.clock.now();
+    }
+    writtenVersionId(secret, value, input) {
+        if (value === undefined) {
+            return undefined;
+        }
+        return this.versionWriter.write(secret, value, input).versionId;
+    }
+}
+//# sourceMappingURL=sim-secrets-manager-update-secret.js.map

package/dist/service/secretsmanager/command/secret/sim-secrets-manager-update-secret.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-secrets-manager-update-secret.js","sourceRoot":"","sources":["../../../../../src/service/secretsmanager/command/secret/sim-secrets-manager-update-secret.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,4BAA4B,EAAE,MAAM,kDAAkD,CAAC;AAoBhG;;;;;;GAMG;AACH,MAAM,OAAO,6BAA6B;IACvB,OAAO,CAA+B;IACtC,aAAa,CAAiC;IAC9C,UAAU,CAA8B;IACxC,KAAK,CAAW;IAEjC,YAAY,UAAmD;QAC7D,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;QAClC,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;QAC9C,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAChC,CAAC;IAED;;;;;OAKG;IACH,MAAM,CACJ,OAA+B,EAC/B,OAA8C;QAE9C,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAEpD,IAAI,CAAC,UAAU,CAAC,eAAe,CAC7B,6BAA6B,EAC7B,MAAM,EACN,OAAO,EAAE,MAAM,CAChB,CAAC;QACF,MAAM,CAAC,8BAA8B,EAAE,CAAC;QAExC,MAAM,KAAK,GAAG,4BAA4B,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAE3D,uEAAuE;QACvE,wEAAwE;QACxE,uEAAuE;QACvE,0BAA0B;QAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAC9D,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAElC,OAAO;YACL,SAAS,EAAE,EAAE;YACb,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK;YACrB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,SAAS,EAAE,SAAS;SACrB,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACK,aAAa,CACnB,MAA+B,EAC/B,KAAkC;QAElC,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;QACzC,CAAC;QAED,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QACnC,CAAC;QAED,MAAM,CAAC,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IAC5C,CAAC;IAEO,gBAAgB,CACtB,MAA+B,EAC/B,KAA+C,EAC/C,KAAkC;QAElC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,SAAS,CAAC;IAClE,CAAC;CACF"}

package/dist/service/secretsmanager/command/sim-secrets-manager-command.types.d.ts

@@ -0,0 +1,6 @@
+/**
+ * The sim Secrets Manager Command types, gathered for the service facade.
+ */
+export type { SimCreateSecretCommand, SimCreateSecretCommandInput, SimCreateSecretCommandOutput, SimDeleteSecretCommand, SimDeleteSecretCommandInput, SimDeleteSecretCommandOutput, SimDescribeSecretCommand, SimDescribeSecretCommandInput, SimDescribeSecretCommandOutput, SimListSecretsCommand, SimListSecretsCommandInput, SimListSecretsCommandOutput, SimListSecretsFilter, SimRestoreSecretCommand, SimRestoreSecretCommandInput, SimRestoreSecretCommandOutput, SimSecretsManagerSecretListEntry, SimUpdateSecretCommand, SimUpdateSecretCommandInput, SimUpdateSecretCommandOutput, } from "./secret/secret.command.js";
+export type { SimGetSecretValueCommand, SimGetSecretValueCommandInput, SimGetSecretValueCommandOutput, SimPutSecretValueCommand, SimPutSecretValueCommandInput, SimPutSecretValueCommandOutput, } from "./value/value.command.js";
+//# sourceMappingURL=sim-secrets-manager-command.types.d.ts.map

package/dist/service/secretsmanager/command/sim-secrets-manager-command.types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-secrets-manager-command.types.d.ts","sourceRoot":"","sources":["../../../../src/service/secretsmanager/command/sim-secrets-manager-command.types.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,YAAY,EACV,sBAAsB,EACtB,2BAA2B,EAC3B,4BAA4B,EAC5B,sBAAsB,EACtB,2BAA2B,EAC3B,4BAA4B,EAC5B,wBAAwB,EACxB,6BAA6B,EAC7B,8BAA8B,EAC9B,qBAAqB,EACrB,0BAA0B,EAC1B,2BAA2B,EAC3B,oBAAoB,EACpB,uBAAuB,EACvB,4BAA4B,EAC5B,6BAA6B,EAC7B,gCAAgC,EAChC,sBAAsB,EACtB,2BAA2B,EAC3B,4BAA4B,GAC7B,MAAM,4BAA4B,CAAC;AACpC,YAAY,EACV,wBAAwB,EACxB,6BAA6B,EAC7B,8BAA8B,EAC9B,wBAAwB,EACxB,6BAA6B,EAC7B,8BAA8B,GAC/B,MAAM,0BAA0B,CAAC"}

package/dist/service/secretsmanager/command/sim-secrets-manager-command.types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sim-secrets-manager-command.types.js.map

package/dist/service/secretsmanager/command/sim-secrets-manager-command.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-secrets-manager-command.types.js","sourceRoot":"","sources":["../../../../src/service/secretsmanager/command/sim-secrets-manager-command.types.ts"],"names":[],"mappings":""}