@kensio/yulin 0.38.0 → 0.40.0

package/dist/service/secretsmanager/cfn/sim-cfn-secrets-manager-property-parser.js

@@ -0,0 +1,122 @@
+/**
+ * Validates individual AWS::SecretsManager::* CloudFormation property values,
+ * failing with a diagnostic naming the Resource type, the property and the
+ * logical ID.
+ */
+export class SimCfnSecretsManagerPropertyParser {
+    /**
+     * Parse a property value that must be a string when present.
+     */
+    optionalString(resource, value, label) {
+        if (value === undefined) {
+            return undefined;
+        }
+        if (typeof value !== "string") {
+            throw this.invalidPropertyError(resource, label, "a string");
+        }
+        return value;
+    }
+    /**
+     * Parse a property value that has to be there and has to be a string.
+     */
+    requiredString(resource, value, label) {
+        const parsed = this.optionalString(resource, value, label);
+        if (parsed === undefined) {
+            throw this.invalidPropertyError(resource, label, "a string");
+        }
+        return parsed;
+    }
+    /**
+     * Parse a property value that must be a number when present.
+     *
+     * CloudFormation carries template numbers as strings often enough that a
+     * numeric string is accepted here, as CloudFormation itself accepts one.
+     */
+    optionalNumber(resource, value, label) {
+        if (value === undefined) {
+            return undefined;
+        }
+        if (typeof value === "number") {
+            return value;
+        }
+        if (typeof value === "string" && value.trim() !== "") {
+            const parsed = Number(value);
+            if (!Number.isNaN(parsed)) {
+                return parsed;
+            }
+        }
+        throw this.invalidPropertyError(resource, label, "a number");
+    }
+    /**
+     * Parse a property value that must be a boolean when present.
+     *
+     * CloudFormation carries template booleans as the strings "true" and
+     * "false" in places, so both forms are accepted, as CloudFormation itself
+     * accepts them.
+     */
+    optionalBoolean(resource, value, label) {
+        if (value === undefined) {
+            return undefined;
+        }
+        if (typeof value === "boolean") {
+            return value;
+        }
+        if (value === "true" || value === "false") {
+            return value === "true";
+        }
+        throw this.invalidPropertyError(resource, label, "a boolean");
+    }
+    /**
+     * Parse a property value that must be an object when present.
+     */
+    optionalRecord(resource, value, label) {
+        if (value === undefined) {
+            return undefined;
+        }
+        return this.record(resource, value, label);
+    }
+    /**
+     * Parse the Tags property, which CloudFormation carries as a list of
+     * Key/Value pairs.
+     *
+     * Both parts of a pair are required, as they are on real CloudFormation. A
+     * half-written tag is refused rather than stored with an absent key or
+     * value, which nothing downstream could match on.
+     */
+    optionalTags(resource, value, label) {
+        if (value === undefined) {
+            return undefined;
+        }
+        if (!Array.isArray(value)) {
+            throw this.invalidPropertyError(resource, label, "a list");
+        }
+        return value.map((entry, index) => {
+            const entryLabel = `${label}.${String(index)}`;
+            const tag = this.record(resource, entry, entryLabel);
+            return {
+                Key: this.requiredString(resource, tag["Key"], `${entryLabel}.Key`),
+                Value: this.requiredString(resource, tag["Value"], `${entryLabel}.Value`),
+            };
+        });
+    }
+    /**
+     * Build the diagnostic error for a malformed property value.
+     *
+     * AWS::SecretsManager::Secret is the only Resource type this simulator
+     * creates, so it is named here rather than read from the Resource.
+     */
+    invalidPropertyError(resource, label, expected) {
+        return new TypeError(`Invalid AWS::SecretsManager::Secret ${resource.logicalId}: ` +
+            `${label} must be ${expected}`);
+    }
+    /**
+     * Narrow a template value to an object, refusing anything else.
+     */
+    record(resource, value, label) {
+        if (typeof value !== "object" || value === null || Array.isArray(value)) {
+            throw this.invalidPropertyError(resource, label, "an object");
+        }
+        return value;
+    }
+}
+//# sourceMappingURL=sim-cfn-secrets-manager-property-parser.js.map

package/dist/service/secretsmanager/cfn/sim-cfn-secrets-manager-property-parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-secrets-manager-property-parser.js","sourceRoot":"","sources":["../../../../src/service/secretsmanager/cfn/sim-cfn-secrets-manager-property-parser.ts"],"names":[],"mappings":"AAOA;;;;GAIG;AACH,MAAM,OAAO,kCAAkC;IAC7C;;OAEG;IACH,cAAc,CACZ,QAAwB,EACxB,KAAsC,EACtC,KAAa;QAEb,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;QAC/D,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,cAAc,CACZ,QAAwB,EACxB,KAAsC,EACtC,KAAa;QAEb,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAE3D,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;QAC/D,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;OAKG;IACH,cAAc,CACZ,QAAwB,EACxB,KAAsC,EACtC,KAAa;QAEb,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACrD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAE7B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1B,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QAED,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IAC/D,CAAC;IAED;;;;;;OAMG;IACH,eAAe,CACb,QAAwB,EACxB,KAAsC,EACtC,KAAa;QAEb,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;YAC1C,OAAO,KAAK,KAAK,MAAM,CAAC;QAC1B,CAAC;QAED,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;IAChE,CAAC;IAED;;OAEG;IACH,cAAc,CACZ,QAAwB,EACxB,KAAsC,EACtC,KAAa;QAEb,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IAC7C,CAAC;IAED;;;;;;;OAOG;IACH,YAAY,CACV,QAAwB,EACxB,KAAsC,EACtC,KAAa;QAEb,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC7D,CAAC;QAED,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YAChC,MAAM,UAAU,GAAG,GAAG,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;YAErD,OAAO;gBACL,GAAG,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,UAAU,MAAM,CAAC;gBACnE,KAAK,EAAE,IAAI,CAAC,cAAc,CACxB,QAAQ,EACR,GAAG,CAAC,OAAO,CAAC,EACZ,GAAG,UAAU,QAAQ,CACtB;aACF,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,oBAAoB,CAClB,QAAwB,EACxB,KAAa,EACb,QAAgB;QAEhB,OAAO,IAAI,SAAS,CAClB,uCAAuC,QAAQ,CAAC,SAAS,IAAI;YAC3D,GAAG,KAAK,YAAY,QAAQ,EAAE,CACjC,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,MAAM,CACZ,QAAwB,EACxB,KAA0B,EAC1B,KAAa;QAEb,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;QAChE,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}

package/dist/service/secretsmanager/cfn/sim-cfn-secrets-manager-resource-factory.d.ts

@@ -0,0 +1,24 @@
+import type { SimCfnServiceResourceFactory } from "../../cloudformation/resource/factory/sim-cfn-resource-factory.type.js";
+import type { SimCfnResource, SimCloudFormationResourceCreateContext } from "../../cloudformation/resource/sim-cfn-resource.js";
+import type { SimSecretsManager } from "../sim-secrets-manager.js";
+interface SimSecretsManagerCfnResourceFactoryProperties {
+    readonly secretsManager: SimSecretsManager;
+}
+/**
+ * CloudFormation Resource factory for simulated Secrets Manager resources.
+ */
+export declare class SimSecretsManagerCfnResourceFactory implements SimCfnServiceResourceFactory {
+    private readonly secretCreator;
+    constructor(properties: SimSecretsManagerCfnResourceFactoryProperties);
+    /**
+     * Create a simulated Secrets Manager resource from a CloudFormation
+     * Resource.
+     *
+     * Rotation, resource policies and target attachments are not simulated, so
+     * their Resource types are reported as unsupported and skipped rather than
+     * quietly treated as deployed.
+     */
+    create(resourceTypeName: string, resource: SimCfnResource, context: SimCloudFormationResourceCreateContext): Promise<object | undefined>;
+}
+export {};
+//# sourceMappingURL=sim-cfn-secrets-manager-resource-factory.d.ts.map

package/dist/service/secretsmanager/cfn/sim-cfn-secrets-manager-resource-factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-secrets-manager-resource-factory.d.ts","sourceRoot":"","sources":["../../../../src/service/secretsmanager/cfn/sim-cfn-secrets-manager-resource-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,wEAAwE,CAAC;AAC3H,OAAO,KAAK,EACV,cAAc,EACd,sCAAsC,EACvC,MAAM,mDAAmD,CAAC;AAC3D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAGnE,UAAU,6CAA6C;IACrD,QAAQ,CAAC,cAAc,EAAE,iBAAiB,CAAC;CAC5C;AAED;;GAEG;AACH,qBAAa,mCAAoC,YAAW,4BAA4B;IACtF,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAoC;IAElE,YAAY,UAAU,EAAE,6CAA6C,EAIpE;IAED;;;;;;;OAOG;IACG,MAAM,CACV,gBAAgB,EAAE,MAAM,EACxB,QAAQ,EAAE,cAAc,EACxB,OAAO,EAAE,sCAAsC,GAC9C,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAc7B;CACF"}

package/dist/service/secretsmanager/cfn/sim-cfn-secrets-manager-resource-factory.js

@@ -0,0 +1,31 @@
+import { SimCfnSecretsManagerSecretCreator } from "./secret/sim-cfn-secrets-manager-secret-creator.js";
+/**
+ * CloudFormation Resource factory for simulated Secrets Manager resources.
+ */
+export class SimSecretsManagerCfnResourceFactory {
+    secretCreator;
+    constructor(properties) {
+        this.secretCreator = new SimCfnSecretsManagerSecretCreator({
+            secretsManager: properties.secretsManager,
+        });
+    }
+    /**
+     * Create a simulated Secrets Manager resource from a CloudFormation
+     * Resource.
+     *
+     * Rotation, resource policies and target attachments are not simulated, so
+     * their Resource types are reported as unsupported and skipped rather than
+     * quietly treated as deployed.
+     */
+    async create(resourceTypeName, resource, context) {
+        switch (resourceTypeName) {
+            case "Secret": {
+                return await this.secretCreator.create(resource, context.resolvedProperties ?? resource.properties);
+            }
+            default: {
+                throw new Error(`Unsupported sim Secrets Manager CloudFormation Resource ${resourceTypeName}`);
+            }
+        }
+    }
+}
+//# sourceMappingURL=sim-cfn-secrets-manager-resource-factory.js.map

package/dist/service/secretsmanager/cfn/sim-cfn-secrets-manager-resource-factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-secrets-manager-resource-factory.js","sourceRoot":"","sources":["../../../../src/service/secretsmanager/cfn/sim-cfn-secrets-manager-resource-factory.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,iCAAiC,EAAE,MAAM,oDAAoD,CAAC;AAMvG;;GAEG;AACH,MAAM,OAAO,mCAAmC;IAC7B,aAAa,CAAoC;IAElE,YAAY,UAAyD;QACnE,IAAI,CAAC,aAAa,GAAG,IAAI,iCAAiC,CAAC;YACzD,cAAc,EAAE,UAAU,CAAC,cAAc;SAC1C,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,MAAM,CACV,gBAAwB,EACxB,QAAwB,EACxB,OAA+C;QAE/C,QAAQ,gBAAgB,EAAE,CAAC;YACzB,KAAK,QAAQ,EAAE,CAAC;gBACd,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CACpC,QAAQ,EACR,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAClD,CAAC;YACJ,CAAC;YACD,SAAS,CAAC;gBACR,MAAM,IAAI,KAAK,CACb,2DAA2D,gBAAgB,EAAE,CAC9E,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/service/secretsmanager/command/authorize/sim-secrets-manager-authorizer.d.ts

@@ -0,0 +1,29 @@
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimSecretsManagerSecret } from "../../secret/sim-secrets-manager-secret.js";
+interface SimSecretsManagerAuthorizerProperties {
+    readonly iam: SimIamInterServiceAuthZ;
+}
+/**
+ * Applies simulated IAM authorization to Secrets Manager requests.
+ *
+ * Every operation authorizes the IAM action real Secrets Manager names for it,
+ * against the secret's full ARN. That ARN carries the six random characters
+ * Secrets Manager appends, so a policy written against the bare name reaches
+ * nothing, exactly as on real AWS.
+ */
+export declare class SimSecretsManagerAuthorizer {
+    private readonly iam;
+    constructor(properties: SimSecretsManagerAuthorizerProperties);
+    /**
+     * Ensure the caller may perform an action on one secret.
+     */
+    authorizeSecret(action: string, secret: SimSecretsManagerSecret, caller?: SimAwsCaller): void;
+    /**
+     * Ensure the caller may perform an action that names no particular secret.
+     */
+    authorizeAny(action: string, caller?: SimAwsCaller): void;
+    private authorizeResource;
+}
+export {};
+//# sourceMappingURL=sim-secrets-manager-authorizer.d.ts.map

package/dist/service/secretsmanager/command/authorize/sim-secrets-manager-authorizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-secrets-manager-authorizer.d.ts","sourceRoot":"","sources":["../../../../../src/service/secretsmanager/command/authorize/sim-secrets-manager-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAEtG,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAC;AAY1F,UAAU,qCAAqC;IAC7C,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;CACvC;AAED;;;;;;;GAOG;AACH,qBAAa,2BAA2B;IACtC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA0B;IAE9C,YAAY,UAAU,EAAE,qCAAqC,EAE5D;IAED;;OAEG;IACH,eAAe,CACb,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,uBAAuB,EAC/B,MAAM,CAAC,EAAE,YAAY,GACpB,IAAI,CAEN;IAED;;OAEG;IACH,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,YAAY,GAAG,IAAI,CAExD;IAED,OAAO,CAAC,iBAAiB;CAe1B"}

package/dist/service/secretsmanager/command/authorize/sim-secrets-manager-authorizer.js

@@ -0,0 +1,47 @@
+import { SimIamAccessDenied } from "../../../iam/error/sim-iam.error.js";
+/**
+ * The resource an operation with no particular secret authorizes against.
+ *
+ * Real Secrets Manager gives ListSecrets no resource-level permissions, so a
+ * policy allowing it has to use a resource of `*`. Authorizing against `*`
+ * here is what makes a policy naming individual secret ARNs fail the same way
+ * it would on real AWS.
+ */
+const anyResource = "*";
+/**
+ * Applies simulated IAM authorization to Secrets Manager requests.
+ *
+ * Every operation authorizes the IAM action real Secrets Manager names for it,
+ * against the secret's full ARN. That ARN carries the six random characters
+ * Secrets Manager appends, so a policy written against the bare name reaches
+ * nothing, exactly as on real AWS.
+ */
+export class SimSecretsManagerAuthorizer {
+    iam;
+    constructor(properties) {
+        this.iam = properties.iam;
+    }
+    /**
+     * Ensure the caller may perform an action on one secret.
+     */
+    authorizeSecret(action, secret, caller) {
+        this.authorizeResource(action, secret.arn.value, caller);
+    }
+    /**
+     * Ensure the caller may perform an action that names no particular secret.
+     */
+    authorizeAny(action, caller) {
+        this.authorizeResource(action, anyResource, caller);
+    }
+    authorizeResource(action, resource, caller) {
+        const decision = this.iam.authorize({ action, resource, caller });
+        if (decision.isDenied) {
+            throw new SimIamAccessDenied({
+                principal: decision.caller.principal,
+                action,
+                resource,
+            });
+        }
+    }
+}
+//# sourceMappingURL=sim-secrets-manager-authorizer.js.map

package/dist/service/secretsmanager/command/authorize/sim-secrets-manager-authorizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-secrets-manager-authorizer.js","sourceRoot":"","sources":["../../../../../src/service/secretsmanager/command/authorize/sim-secrets-manager-authorizer.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAGzE;;;;;;;GAOG;AACH,MAAM,WAAW,GAAG,GAAG,CAAC;AAMxB;;;;;;;GAOG;AACH,MAAM,OAAO,2BAA2B;IACrB,GAAG,CAA0B;IAE9C,YAAY,UAAiD;QAC3D,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,eAAe,CACb,MAAc,EACd,MAA+B,EAC/B,MAAqB;QAErB,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC3D,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,MAAc,EAAE,MAAqB;QAChD,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IACtD,CAAC;IAEO,iBAAiB,CACvB,MAAc,EACd,QAAgB,EAChB,MAAgC;QAEhC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAElE,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;gBACpC,MAAM;gBACN,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}

package/dist/service/secretsmanager/command/secret/secret.command.d.ts

@@ -0,0 +1,144 @@
+import type { SimResponseMetadata } from "../../../aws/metadata/response-metadata.type.js";
+import type { SimSecretsManagerTag } from "../../secret/sim-secrets-manager-secret.js";
+/**
+ * Minimal structural sim Secrets Manager CreateSecret command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/secrets-manager/command/CreateSecretCommand/
+ */
+export interface SimCreateSecretCommand {
+    readonly input: SimCreateSecretCommandInput;
+}
+export interface SimCreateSecretCommandInput {
+    readonly Name?: string | undefined;
+    readonly Description?: string | undefined;
+    readonly KmsKeyId?: string | undefined;
+    readonly SecretString?: string | undefined;
+    readonly SecretBinary?: Uint8Array | undefined;
+    readonly ClientRequestToken?: string | undefined;
+    readonly Tags?: readonly SimSecretsManagerTag[] | undefined;
+}
+export interface SimCreateSecretCommandOutput {
+    readonly ARN?: string | undefined;
+    readonly Name?: string | undefined;
+    readonly VersionId?: string | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * Minimal structural sim Secrets Manager DescribeSecret command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/secrets-manager/command/DescribeSecretCommand/
+ */
+export interface SimDescribeSecretCommand {
+    readonly input: SimDescribeSecretCommandInput;
+}
+export interface SimDescribeSecretCommandInput {
+    readonly SecretId?: string | undefined;
+}
+export interface SimDescribeSecretCommandOutput {
+    readonly ARN?: string | undefined;
+    readonly Name?: string | undefined;
+    readonly Description?: string | undefined;
+    readonly KmsKeyId?: string | undefined;
+    readonly RotationEnabled?: boolean | undefined;
+    readonly CreatedDate?: Date | undefined;
+    readonly LastChangedDate?: Date | undefined;
+    readonly DeletedDate?: Date | undefined;
+    readonly Tags?: readonly SimSecretsManagerTag[] | undefined;
+    readonly VersionIdsToStages?: Record<string, string[]> | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * Minimal structural sim Secrets Manager UpdateSecret command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/secrets-manager/command/UpdateSecretCommand/
+ */
+export interface SimUpdateSecretCommand {
+    readonly input: SimUpdateSecretCommandInput;
+}
+export interface SimUpdateSecretCommandInput {
+    readonly SecretId?: string | undefined;
+    readonly Description?: string | undefined;
+    readonly KmsKeyId?: string | undefined;
+    readonly SecretString?: string | undefined;
+    readonly SecretBinary?: Uint8Array | undefined;
+    readonly ClientRequestToken?: string | undefined;
+}
+export interface SimUpdateSecretCommandOutput {
+    readonly ARN?: string | undefined;
+    readonly Name?: string | undefined;
+    readonly VersionId?: string | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * Minimal structural sim Secrets Manager DeleteSecret command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/secrets-manager/command/DeleteSecretCommand/
+ */
+export interface SimDeleteSecretCommand {
+    readonly input: SimDeleteSecretCommandInput;
+}
+export interface SimDeleteSecretCommandInput {
+    readonly SecretId?: string | undefined;
+    readonly RecoveryWindowInDays?: number | undefined;
+    readonly ForceDeleteWithoutRecovery?: boolean | undefined;
+}
+export interface SimDeleteSecretCommandOutput {
+    readonly ARN?: string | undefined;
+    readonly Name?: string | undefined;
+    readonly DeletionDate?: Date | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * Minimal structural sim Secrets Manager RestoreSecret command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/secrets-manager/command/RestoreSecretCommand/
+ */
+export interface SimRestoreSecretCommand {
+    readonly input: SimRestoreSecretCommandInput;
+}
+export interface SimRestoreSecretCommandInput {
+    readonly SecretId?: string | undefined;
+}
+export interface SimRestoreSecretCommandOutput {
+    readonly ARN?: string | undefined;
+    readonly Name?: string | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * Minimal structural sim Secrets Manager ListSecrets command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/secrets-manager/command/ListSecretsCommand/
+ */
+export interface SimListSecretsCommand {
+    readonly input?: SimListSecretsCommandInput | undefined;
+}
+export interface SimListSecretsFilter {
+    readonly Key?: string | undefined;
+    readonly Values?: readonly string[] | undefined;
+}
+export interface SimListSecretsCommandInput {
+    readonly IncludePlannedDeletion?: boolean | undefined;
+    readonly MaxResults?: number | undefined;
+    readonly NextToken?: string | undefined;
+    readonly Filters?: readonly SimListSecretsFilter[] | undefined;
+    readonly SortOrder?: string | undefined;
+    readonly SortBy?: string | undefined;
+}
+export interface SimSecretsManagerSecretListEntry {
+    readonly ARN?: string | undefined;
+    readonly Name?: string | undefined;
+    readonly Description?: string | undefined;
+    readonly KmsKeyId?: string | undefined;
+    readonly RotationEnabled?: boolean | undefined;
+    readonly CreatedDate?: Date | undefined;
+    readonly LastChangedDate?: Date | undefined;
+    readonly DeletedDate?: Date | undefined;
+    readonly Tags?: readonly SimSecretsManagerTag[] | undefined;
+    readonly SecretVersionsToStages?: Record<string, string[]> | undefined;
+}
+export interface SimListSecretsCommandOutput {
+    readonly SecretList?: readonly SimSecretsManagerSecretListEntry[] | undefined;
+    readonly NextToken?: string | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+//# sourceMappingURL=secret.command.d.ts.map

package/dist/service/secretsmanager/command/secret/secret.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/secretsmanager/command/secret/secret.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,4CAA4C,CAAC;AAEvF;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,2BAA2B,CAAC;CAC7C;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,YAAY,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,oBAAoB,EAAE,GAAG,SAAS,CAAC;CAC7D;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,KAAK,EAAE,6BAA6B,CAAC;CAC/C;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACxC;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,WAAW,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,eAAe,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,WAAW,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,oBAAoB,EAAE,GAAG,SAAS,CAAC;IAC5D,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,SAAS,CAAC;IACnE,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,2BAA2B,CAAC;CAC7C;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,YAAY,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAClD;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,2BAA2B,CAAC;CAC7C;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnD,QAAQ,CAAC,0BAA0B,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CAC3D;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,YAAY,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,4BAA4B,CAAC;CAC9C;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACxC;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,0BAA0B,GAAG,SAAS,CAAC;CACzD;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;CACjD;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACtD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,oBAAoB,EAAE,GAAG,SAAS,CAAC;IAC/D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,WAAW,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,eAAe,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,WAAW,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,oBAAoB,EAAE,GAAG,SAAS,CAAC;IAC5D,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,SAAS,CAAC;CACxE;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,gCAAgC,EAAE,GAAG,SAAS,CAAC;IAC9E,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC"}

package/dist/service/secretsmanager/command/secret/secret.command.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=secret.command.js.map

package/dist/service/secretsmanager/command/secret/secret.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret.command.js","sourceRoot":"","sources":["../../../../../src/service/secretsmanager/command/secret/secret.command.ts"],"names":[],"mappings":""}

package/dist/service/secretsmanager/command/secret/sim-secrets-manager-lifecycle-commands.d.ts

@@ -0,0 +1,44 @@
+import type { SimClock } from "../../../../util/clock/sim-clock.js";
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimSecretsManagerSecretExpiry } from "../../secret/sim-secrets-manager-secret-expiry.js";
+import type { SimSecretsManagerSecretStore } from "../../secret/sim-secrets-manager-secret-store.js";
+import type { SimSecretsManagerAuthorizer } from "../authorize/sim-secrets-manager-authorizer.js";
+import type { SimDeleteSecretCommand, SimDeleteSecretCommandOutput, SimRestoreSecretCommand, SimRestoreSecretCommandOutput } from "./secret.command.js";
+interface SimSecretsManagerLifecycleCommandsProperties {
+    readonly secrets: SimSecretsManagerSecretStore;
+    readonly expiry: SimSecretsManagerSecretExpiry;
+    readonly authorizer: SimSecretsManagerAuthorizer;
+    readonly clock: SimClock;
+}
+interface SimSecretsManagerLifecycleCommandOptions {
+    readonly caller?: SimAwsCaller;
+}
+/**
+ * The commands that delete a simulated secret and take it back.
+ *
+ * Deletion is the part of Secrets Manager most worth simulating properly,
+ * because a scheduled secret still holds its name. Redeploying a stack that
+ * deleted a secret is where that bites on real AWS, and it only reproduces
+ * here if the recovery window really has to elapse.
+ */
+export declare class SimSecretsManagerLifecycleCommands {
+    private readonly secrets;
+    private readonly expiry;
+    private readonly authorizer;
+    private readonly clock;
+    constructor(properties: SimSecretsManagerLifecycleCommandsProperties);
+    /**
+     * Schedule a secret for deletion, or delete it outright.
+     *
+     * The secret stays in the store while it is scheduled, because that is what
+     * recoverable means: it is still there, refusing to be read or written, and
+     * still holding its name, until the window runs out.
+     */
+    delete(command: SimDeleteSecretCommand, options?: SimSecretsManagerLifecycleCommandOptions): SimDeleteSecretCommandOutput;
+    /**
+     * Cancel a scheduled deletion, leaving the secret as it was.
+     */
+    restore(command: SimRestoreSecretCommand, options?: SimSecretsManagerLifecycleCommandOptions): SimRestoreSecretCommandOutput;
+}
+export {};
+//# sourceMappingURL=sim-secrets-manager-lifecycle-commands.d.ts.map

package/dist/service/secretsmanager/command/secret/sim-secrets-manager-lifecycle-commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-secrets-manager-lifecycle-commands.d.ts","sourceRoot":"","sources":["../../../../../src/service/secretsmanager/command/secret/sim-secrets-manager-lifecycle-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAE1E,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,mDAAmD,CAAC;AACvG,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,kDAAkD,CAAC;AACrG,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,gDAAgD,CAAC;AAClG,OAAO,KAAK,EACV,sBAAsB,EACtB,4BAA4B,EAC5B,uBAAuB,EACvB,6BAA6B,EAC9B,MAAM,qBAAqB,CAAC;AAE7B,UAAU,4CAA4C;IACpD,QAAQ,CAAC,OAAO,EAAE,4BAA4B,CAAC;IAC/C,QAAQ,CAAC,MAAM,EAAE,6BAA6B,CAAC;IAC/C,QAAQ,CAAC,UAAU,EAAE,2BAA2B,CAAC;IACjD,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED,UAAU,wCAAwC;IAChD,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;;;;GAOG;AACH,qBAAa,kCAAkC;IAC7C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA+B;IACvD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgC;IACvD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA8B;IACzD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IAEjC,YAAY,UAAU,EAAE,4CAA4C,EAKnE;IAED;;;;;;OAMG;IACH,MAAM,CACJ,OAAO,EAAE,sBAAsB,EAC/B,OAAO,CAAC,EAAE,wCAAwC,GACjD,4BAA4B,CAyB9B;IAED;;OAEG;IACH,OAAO,CACL,OAAO,EAAE,uBAAuB,EAChC,OAAO,CAAC,EAAE,wCAAwC,GACjD,6BAA6B,CAe/B;CACF"}

package/dist/service/secretsmanager/command/secret/sim-secrets-manager-lifecycle-commands.js

@@ -0,0 +1,61 @@
+import { SimSecretsManagerDeletionSchedule } from "../../secret/sim-secrets-manager-deletion-schedule.js";
+/**
+ * The commands that delete a simulated secret and take it back.
+ *
+ * Deletion is the part of Secrets Manager most worth simulating properly,
+ * because a scheduled secret still holds its name. Redeploying a stack that
+ * deleted a secret is where that bites on real AWS, and it only reproduces
+ * here if the recovery window really has to elapse.
+ */
+export class SimSecretsManagerLifecycleCommands {
+    secrets;
+    expiry;
+    authorizer;
+    clock;
+    constructor(properties) {
+        this.secrets = properties.secrets;
+        this.expiry = properties.expiry;
+        this.authorizer = properties.authorizer;
+        this.clock = properties.clock;
+    }
+    /**
+     * Schedule a secret for deletion, or delete it outright.
+     *
+     * The secret stays in the store while it is scheduled, because that is what
+     * recoverable means: it is still there, refusing to be read or written, and
+     * still holding its name, until the window runs out.
+     */
+    delete(command, options) {
+        const schedule = new SimSecretsManagerDeletionSchedule(command.input);
+        const secret = this.secrets.require(command.input.SecretId);
+        this.authorizer.authorizeSecret("secretsmanager:DeleteSecret", secret, options?.caller);
+        const deletionDate = schedule.deletionDateFrom(this.clock.now());
+        if (schedule.isImmediate) {
+            this.secrets.remove(secret);
+        }
+        else {
+            secret.scheduleDeletion(deletionDate);
+            this.expiry.scheduleRemoval(secret, deletionDate);
+        }
+        return {
+            $metadata: {},
+            ARN: secret.arn.value,
+            Name: secret.name,
+            DeletionDate: deletionDate,
+        };
+    }
+    /**
+     * Cancel a scheduled deletion, leaving the secret as it was.
+     */
+    restore(command, options) {
+        const secret = this.secrets.require(command.input.SecretId);
+        this.authorizer.authorizeSecret("secretsmanager:RestoreSecret", secret, options?.caller);
+        secret.cancelDeletion();
+        return {
+            $metadata: {},
+            ARN: secret.arn.value,
+            Name: secret.name,
+        };
+    }
+}
+//# sourceMappingURL=sim-secrets-manager-lifecycle-commands.js.map

package/dist/service/secretsmanager/command/secret/sim-secrets-manager-lifecycle-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-secrets-manager-lifecycle-commands.js","sourceRoot":"","sources":["../../../../../src/service/secretsmanager/command/secret/sim-secrets-manager-lifecycle-commands.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,iCAAiC,EAAE,MAAM,uDAAuD,CAAC;AAsB1G;;;;;;;GAOG;AACH,MAAM,OAAO,kCAAkC;IAC5B,OAAO,CAA+B;IACtC,MAAM,CAAgC;IACtC,UAAU,CAA8B;IACxC,KAAK,CAAW;IAEjC,YAAY,UAAwD;QAClE,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;QAClC,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAChC,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CACJ,OAA+B,EAC/B,OAAkD;QAElD,MAAM,QAAQ,GAAG,IAAI,iCAAiC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAE5D,IAAI,CAAC,UAAU,CAAC,eAAe,CAC7B,6BAA6B,EAC7B,MAAM,EACN,OAAO,EAAE,MAAM,CAChB,CAAC;QAEF,MAAM,YAAY,GAAG,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;QAEjE,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;YACzB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;YACtC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QACpD,CAAC;QAED,OAAO;YACL,SAAS,EAAE,EAAE;YACb,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK;YACrB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,YAAY,EAAE,YAAY;SAC3B,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,OAAO,CACL,OAAgC,EAChC,OAAkD;QAElD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAE5D,IAAI,CAAC,UAAU,CAAC,eAAe,CAC7B,8BAA8B,EAC9B,MAAM,EACN,OAAO,EAAE,MAAM,CAChB,CAAC;QACF,MAAM,CAAC,cAAc,EAAE,CAAC;QAExB,OAAO;YACL,SAAS,EAAE,EAAE;YACb,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK;YACrB,IAAI,EAAE,MAAM,CAAC,IAAI;SAClB,CAAC;IACJ,CAAC;CACF"}

package/dist/service/secretsmanager/command/secret/sim-secrets-manager-list-secrets.d.ts

@@ -0,0 +1,44 @@
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimSecretsManagerSecretStore } from "../../secret/sim-secrets-manager-secret-store.js";
+import type { SimSecretsManagerAuthorizer } from "../authorize/sim-secrets-manager-authorizer.js";
+import type { SimListSecretsCommand, SimListSecretsCommandOutput } from "./secret.command.js";
+interface SimSecretsManagerListSecretsProperties {
+    readonly secrets: SimSecretsManagerSecretStore;
+    readonly authorizer: SimSecretsManagerAuthorizer;
+}
+interface SimSecretsManagerListSecretsOptions {
+    readonly caller?: SimAwsCaller;
+}
+/**
+ * The ListSecrets command.
+ *
+ * Real Secrets Manager gives this action no resource-level permissions, so it
+ * authorizes against `*` rather than against each secret, and it does not
+ * filter the list by what the caller can read.
+ *
+ * Secrets scheduled for deletion are left out unless asked for, as real
+ * Secrets Manager leaves them out.
+ */
+export declare class SimSecretsManagerListSecrets {
+    private readonly secrets;
+    private readonly authorizer;
+    private readonly detail;
+    constructor(properties: SimSecretsManagerListSecretsProperties);
+    /**
+     * List the secrets in this scope.
+     */
+    handle(command: SimListSecretsCommand, options?: SimSecretsManagerListSecretsOptions): SimListSecretsCommandOutput;
+    /**
+     * Refuse the request inputs this simulation does not model.
+     *
+     * Ignoring a filter would quietly return more secrets than real Secrets
+     * Manager would, and ignoring a sort would return them in an order the
+     * caller did not ask for. Either is the kind of divergence that makes a
+     * passing test mean nothing, so both are refused outright, which is stricter
+     * than AWS and deliberate.
+     */
+    private refuseUnsimulatedInput;
+    private listedSecrets;
+}
+export {};
+//# sourceMappingURL=sim-secrets-manager-list-secrets.d.ts.map

package/dist/service/secretsmanager/command/secret/sim-secrets-manager-list-secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-secrets-manager-list-secrets.d.ts","sourceRoot":"","sources":["../../../../../src/service/secretsmanager/command/secret/sim-secrets-manager-list-secrets.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAG1E,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,kDAAkD,CAAC;AACrG,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,gDAAgD,CAAC;AAGlG,OAAO,KAAK,EACV,qBAAqB,EAErB,2BAA2B,EAC5B,MAAM,qBAAqB,CAAC;AAE7B,UAAU,sCAAsC;IAC9C,QAAQ,CAAC,OAAO,EAAE,4BAA4B,CAAC;IAC/C,QAAQ,CAAC,UAAU,EAAE,2BAA2B,CAAC;CAClD;AAED,UAAU,mCAAmC;IAC3C,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED;;;;;;;;;GASG;AACH,qBAAa,4BAA4B;IACvC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA+B;IACvD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA8B;IACzD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuC;IAE9D,YAAY,UAAU,EAAE,sCAAsC,EAG7D;IAED;;OAEG;IACH,MAAM,CACJ,OAAO,EAAE,qBAAqB,EAC9B,OAAO,CAAC,EAAE,mCAAmC,GAC5C,2BAA2B,CAgB7B;IAED;;;;;;;;OAQG;IACH,OAAO,CAAC,sBAAsB;IAe9B,OAAO,CAAC,aAAa;CAStB"}