@kensio/yulin 0.38.0 → 0.40.0

package/dist/service/secretsmanager/secret/sim-secrets-manager-secret-factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-secrets-manager-secret-factory.js","sourceRoot":"","sources":["../../../../src/service/secretsmanager/secret/sim-secrets-manager-secret-factory.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,uBAAuB,GAExB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AACjF,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AAcnF;;;;;;GAMG;AACH,MAAM,OAAO,8BAA8B;IACxB,kBAAkB,CAA2B;IAC7C,KAAK,CAAW;IAEjC,YAAY,UAAoD;QAC9D,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;QACxD,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,IAAI,CACF,UAAiD;QAEjD,MAAM,IAAI,GAAG,IAAI,2BAA2B,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAE9D,OAAO,IAAI,uBAAuB,CAAC;YACjC,GAAG,EAAE,IAAI,0BAA0B,CAAC;gBAClC,IAAI,EAAE,IAAI,CAAC,KAAK;gBAChB,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;aAC5C,CAAC;YACF,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;YAC7B,WAAW,EAAE,UAAU,CAAC,WAAW;YACnC,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,IAAI,EAAE,UAAU,CAAC,IAAI;SACtB,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/secretsmanager/secret/sim-secrets-manager-secret-id.d.ts

@@ -0,0 +1,27 @@
+import type { SimAwsAccountRegionScope } from "../../aws/sim-aws-account-region-scope.js";
+interface SimSecretsManagerSecretIdParserProperties {
+    readonly accountRegionScope: SimAwsAccountRegionScope;
+}
+/**
+ * Turns the SecretId every Secrets Manager operation takes into the resource
+ * part it names.
+ *
+ * Real Secrets Manager accepts three forms — a friendly name, a full ARN with
+ * its six-character suffix, and a partial ARN without it — so working out
+ * which one is in hand belongs in one place rather than in each command.
+ *
+ * An ARN naming another Account or Region resolves to nothing rather than
+ * having its name read out and looked up locally, so a foreign ARN cannot
+ * reach a secret that happens to share a name.
+ */
+export declare class SimSecretsManagerSecretIdParser {
+    private readonly accountRegionScope;
+    constructor(properties: SimSecretsManagerSecretIdParserProperties);
+    /**
+     * The resource part a SecretId names in this scope, if it names one here.
+     */
+    resolveResource(secretId: string): string | undefined;
+    private arnResource;
+}
+export {};
+//# sourceMappingURL=sim-secrets-manager-secret-id.d.ts.map

package/dist/service/secretsmanager/secret/sim-secrets-manager-secret-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-secrets-manager-secret-id.d.ts","sourceRoot":"","sources":["../../../../src/service/secretsmanager/secret/sim-secrets-manager-secret-id.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAO1F,UAAU,yCAAyC;IACjD,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;CACvD;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,+BAA+B;IAC1C,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA2B;IAE9D,YAAY,UAAU,EAAE,yCAAyC,EAEhE;IAED;;OAEG;IACH,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAMpD;IAED,OAAO,CAAC,WAAW;CA0BpB"}

package/dist/service/secretsmanager/secret/sim-secrets-manager-secret-id.js

@@ -0,0 +1,48 @@
+const arnPrefix = "arn:";
+const arnPartCount = 7;
+const secretsManagerService = "secretsmanager";
+const secretResourceType = "secret";
+/**
+ * Turns the SecretId every Secrets Manager operation takes into the resource
+ * part it names.
+ *
+ * Real Secrets Manager accepts three forms — a friendly name, a full ARN with
+ * its six-character suffix, and a partial ARN without it — so working out
+ * which one is in hand belongs in one place rather than in each command.
+ *
+ * An ARN naming another Account or Region resolves to nothing rather than
+ * having its name read out and looked up locally, so a foreign ARN cannot
+ * reach a secret that happens to share a name.
+ */
+export class SimSecretsManagerSecretIdParser {
+    accountRegionScope;
+    constructor(properties) {
+        this.accountRegionScope = properties.accountRegionScope;
+    }
+    /**
+     * The resource part a SecretId names in this scope, if it names one here.
+     */
+    resolveResource(secretId) {
+        if (!secretId.startsWith(arnPrefix)) {
+            return secretId;
+        }
+        return this.arnResource(secretId);
+    }
+    arnResource(arn) {
+        const parts = arn.split(":");
+        if (parts.length !== arnPartCount) {
+            return undefined;
+        }
+        const [service, regionName, accountId, resourceType, resource] = parts.slice(2);
+        if (service !== secretsManagerService ||
+            resourceType !== secretResourceType) {
+            return undefined;
+        }
+        if (regionName !== this.accountRegionScope.regionName ||
+            accountId !== this.accountRegionScope.accountId) {
+            return undefined;
+        }
+        return resource;
+    }
+}
+//# sourceMappingURL=sim-secrets-manager-secret-id.js.map

package/dist/service/secretsmanager/secret/sim-secrets-manager-secret-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-secrets-manager-secret-id.js","sourceRoot":"","sources":["../../../../src/service/secretsmanager/secret/sim-secrets-manager-secret-id.ts"],"names":[],"mappings":"AAEA,MAAM,SAAS,GAAG,MAAM,CAAC;AACzB,MAAM,YAAY,GAAG,CAAC,CAAC;AACvB,MAAM,qBAAqB,GAAG,gBAAgB,CAAC;AAC/C,MAAM,kBAAkB,GAAG,QAAQ,CAAC;AAMpC;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,+BAA+B;IACzB,kBAAkB,CAA2B;IAE9D,YAAY,UAAqD;QAC/D,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;IAC1D,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,QAAgB;QAC9B,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACpC,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,OAAO,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IAEO,WAAW,CAAC,GAAW;QAC7B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAE7B,IAAI,KAAK,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YAClC,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,CAAC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,CAAC,GAC5D,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAEjB,IACE,OAAO,KAAK,qBAAqB;YACjC,YAAY,KAAK,kBAAkB,EACnC,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IACE,UAAU,KAAK,IAAI,CAAC,kBAAkB,CAAC,UAAU;YACjD,SAAS,KAAK,IAAI,CAAC,kBAAkB,CAAC,SAAS,EAC/C,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF"}

package/dist/service/secretsmanager/secret/sim-secrets-manager-secret-name.d.ts

@@ -0,0 +1,23 @@
+/**
+ * The name of one simulated secret, validated as real Secrets Manager does.
+ *
+ * Kept as a value object rather than a bare string because the rules are worth
+ * applying in one place: a name that a simulation accepts and real Secrets
+ * Manager refuses is exactly the divergence that makes a passing test worthless.
+ */
+export declare class SimSecretsManagerSecretName {
+    readonly value: string;
+    constructor(name: string | undefined);
+    private static validated;
+    /**
+     * Refuse a name that would be ambiguous with an ARN suffix.
+     *
+     * Real AWS only advises against this rather than refusing it, so this is a
+     * deliberate divergence and a deliberately strict one. A name ending in a
+     * hyphen and six characters cannot be told apart from a full ARN's resource
+     * part, so a partial ARN naming it could resolve to the wrong secret. A
+     * puzzling error at creation is better than a quietly wrong lookup later.
+     */
+    private static refuseAmbiguousSuffix;
+}
+//# sourceMappingURL=sim-secrets-manager-secret-name.d.ts.map

package/dist/service/secretsmanager/secret/sim-secrets-manager-secret-name.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-secrets-manager-secret-name.d.ts","sourceRoot":"","sources":["../../../../src/service/secretsmanager/secret/sim-secrets-manager-secret-name.ts"],"names":[],"mappings":"AAMA;;;;;;GAMG;AACH,qBAAa,2BAA2B;IACtC,SAAgB,KAAK,EAAE,MAAM,CAAC;IAE9B,YAAY,IAAI,EAAE,MAAM,GAAG,SAAS,EAEnC;IAED,OAAO,CAAC,MAAM,CAAC,SAAS;IAyBxB;;;;;;;;OAQG;IACH,OAAO,CAAC,MAAM,CAAC,qBAAqB;CAYrC"}

package/dist/service/secretsmanager/secret/sim-secrets-manager-secret-name.js

@@ -0,0 +1,50 @@
+import { SimSecretsManagerInvalidParameterException } from "../error/sim-secrets-manager.error.js";
+import { secretArnSuffixPattern } from "./sim-secrets-manager-secret-arn.js";
+const maxNameLength = 512;
+const allowedCharacters = /^[\w+=./@-]+$/;
+/**
+ * The name of one simulated secret, validated as real Secrets Manager does.
+ *
+ * Kept as a value object rather than a bare string because the rules are worth
+ * applying in one place: a name that a simulation accepts and real Secrets
+ * Manager refuses is exactly the divergence that makes a passing test worthless.
+ */
+export class SimSecretsManagerSecretName {
+    value;
+    constructor(name) {
+        this.value = SimSecretsManagerSecretName.validated(name);
+    }
+    static validated(name) {
+        if (name === undefined || name === "") {
+            throw new SimSecretsManagerInvalidParameterException("Name is required to create a secret");
+        }
+        if (name.length > maxNameLength) {
+            throw new SimSecretsManagerInvalidParameterException(`Secret name '${name}' is longer than the ${String(maxNameLength)} characters Secrets Manager allows`);
+        }
+        if (!allowedCharacters.test(name)) {
+            throw new SimSecretsManagerInvalidParameterException(`Secret name '${name}' contains characters Secrets Manager does not allow: ` +
+                `only letters, digits and the characters /_+=.@- are permitted`);
+        }
+        this.refuseAmbiguousSuffix(name);
+        return name;
+    }
+    /**
+     * Refuse a name that would be ambiguous with an ARN suffix.
+     *
+     * Real AWS only advises against this rather than refusing it, so this is a
+     * deliberate divergence and a deliberately strict one. A name ending in a
+     * hyphen and six characters cannot be told apart from a full ARN's resource
+     * part, so a partial ARN naming it could resolve to the wrong secret. A
+     * puzzling error at creation is better than a quietly wrong lookup later.
+     */
+    static refuseAmbiguousSuffix(name) {
+        if (!secretArnSuffixPattern.test(name)) {
+            return;
+        }
+        throw new SimSecretsManagerInvalidParameterException(`Secret name '${name}' ends in a hyphen and six characters, which is ` +
+            `ambiguous with the suffix Secrets Manager appends to a secret ARN. ` +
+            `AWS advises against such names because a partial ARN naming one ` +
+            `cannot be resolved reliably; simulated Secrets Manager refuses them.`);
+    }
+}
+//# sourceMappingURL=sim-secrets-manager-secret-name.js.map

package/dist/service/secretsmanager/secret/sim-secrets-manager-secret-name.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-secrets-manager-secret-name.js","sourceRoot":"","sources":["../../../../src/service/secretsmanager/secret/sim-secrets-manager-secret-name.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0CAA0C,EAAE,MAAM,uCAAuC,CAAC;AACnG,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAE7E,MAAM,aAAa,GAAG,GAAG,CAAC;AAC1B,MAAM,iBAAiB,GAAG,eAAe,CAAC;AAE1C;;;;;;GAMG;AACH,MAAM,OAAO,2BAA2B;IACtB,KAAK,CAAS;IAE9B,YAAY,IAAwB;QAClC,IAAI,CAAC,KAAK,GAAG,2BAA2B,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC3D,CAAC;IAEO,MAAM,CAAC,SAAS,CAAC,IAAwB;QAC/C,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,0CAA0C,CAClD,qCAAqC,CACtC,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,GAAG,aAAa,EAAE,CAAC;YAChC,MAAM,IAAI,0CAA0C,CAClD,gBAAgB,IAAI,wBAAwB,MAAM,CAAC,aAAa,CAAC,oCAAoC,CACtG,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,0CAA0C,CAClD,gBAAgB,IAAI,wDAAwD;gBAC1E,+DAA+D,CAClE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAEjC,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;;OAQG;IACK,MAAM,CAAC,qBAAqB,CAAC,IAAY;QAC/C,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,OAAO;QACT,CAAC;QAED,MAAM,IAAI,0CAA0C,CAClD,gBAAgB,IAAI,kDAAkD;YACpE,qEAAqE;YACrE,kEAAkE;YAClE,sEAAsE,CACzE,CAAC;IACJ,CAAC;CACF"}

package/dist/service/secretsmanager/secret/sim-secrets-manager-secret-store.d.ts

@@ -0,0 +1,53 @@
+import type { SimAwsAccountRegionScope } from "../../aws/sim-aws-account-region-scope.js";
+import type { SimSecretsManagerSecret } from "./sim-secrets-manager-secret.js";
+interface SimSecretsManagerSecretStoreProperties {
+    readonly accountRegionScope: SimAwsAccountRegionScope;
+}
+/**
+ * The secrets of one simulated Secrets Manager scope, and how a SecretId
+ * resolves to one of them.
+ *
+ * Every operation names its target as a SecretId that may be a friendly name,
+ * a full ARN or a partial ARN, so resolution belongs here rather than in each
+ * command handler.
+ */
+export declare class SimSecretsManagerSecretStore {
+    private readonly secrets;
+    private readonly accountRegionScope;
+    private readonly secretIds;
+    constructor(properties: SimSecretsManagerSecretStoreProperties);
+    /**
+     * Every secret in this scope, in creation order.
+     */
+    get all(): readonly SimSecretsManagerSecret[];
+    /**
+     * Store a newly created secret.
+     */
+    add(secret: SimSecretsManagerSecret): void;
+    /**
+     * Forget a secret, as happens when its recovery window runs out or when it
+     * is deleted without one.
+     */
+    remove(secret: SimSecretsManagerSecret): void;
+    /**
+     * Resolve a SecretId to the secret it names, or refuse.
+     *
+     * A secret scheduled for deletion still resolves, because it still exists:
+     * it can be described and restored until its window runs out.
+     */
+    require(secretId: string | undefined): SimSecretsManagerSecret;
+    /**
+     * Resolve a SecretId in any of the forms real Secrets Manager accepts.
+     */
+    find(secretId: string): SimSecretsManagerSecret | undefined;
+    /**
+     * Refuse a name that is already taken, saying which way it is taken.
+     *
+     * A name held by a secret waiting out its recovery window is the failure
+     * people actually hit when a stack is deleted and redeployed, so it is worth
+     * telling apart from a name held by a live secret.
+     */
+    requireNameAvailable(name: string): void;
+}
+export {};
+//# sourceMappingURL=sim-secrets-manager-secret-store.d.ts.map

package/dist/service/secretsmanager/secret/sim-secrets-manager-secret-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-secrets-manager-secret-store.d.ts","sourceRoot":"","sources":["../../../../src/service/secretsmanager/secret/sim-secrets-manager-secret-store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAO1F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAG/E,UAAU,sCAAsC;IAC9C,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;CACvD;AAED;;;;;;;GAOG;AACH,qBAAa,4BAA4B;IACvC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA8C;IACtE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA2B;IAC9D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkC;IAE5D,YAAY,UAAU,EAAE,sCAAsC,EAK7D;IAED;;OAEG;IACH,IAAI,GAAG,IAAI,SAAS,uBAAuB,EAAE,CAE5C;IAED;;OAEG;IACH,GAAG,CAAC,MAAM,EAAE,uBAAuB,GAAG,IAAI,CAEzC;IAED;;;OAGG;IACH,MAAM,CAAC,MAAM,EAAE,uBAAuB,GAAG,IAAI,CAE5C;IAED;;;;;OAKG;IACH,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,uBAAuB,CAmB7D;IAED;;OAEG;IACH,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,uBAAuB,GAAG,SAAS,CAU1D;IAED;;;;;;OAMG;IACH,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAoBvC;CACF"}

package/dist/service/secretsmanager/secret/sim-secrets-manager-secret-store.js

@@ -0,0 +1,92 @@
+import { SimSecretsManagerInvalidParameterException, SimSecretsManagerInvalidRequestException, SimSecretsManagerResourceExistsException, SimSecretsManagerResourceNotFoundException, } from "../error/sim-secrets-manager.error.js";
+import { SimSecretsManagerSecretIdParser } from "./sim-secrets-manager-secret-id.js";
+/**
+ * The secrets of one simulated Secrets Manager scope, and how a SecretId
+ * resolves to one of them.
+ *
+ * Every operation names its target as a SecretId that may be a friendly name,
+ * a full ARN or a partial ARN, so resolution belongs here rather than in each
+ * command handler.
+ */
+export class SimSecretsManagerSecretStore {
+    secrets = new Map();
+    accountRegionScope;
+    secretIds;
+    constructor(properties) {
+        this.accountRegionScope = properties.accountRegionScope;
+        this.secretIds = new SimSecretsManagerSecretIdParser({
+            accountRegionScope: properties.accountRegionScope,
+        });
+    }
+    /**
+     * Every secret in this scope, in creation order.
+     */
+    get all() {
+        return this.secrets.values().toArray();
+    }
+    /**
+     * Store a newly created secret.
+     */
+    add(secret) {
+        this.secrets.set(secret.arn.value, secret);
+    }
+    /**
+     * Forget a secret, as happens when its recovery window runs out or when it
+     * is deleted without one.
+     */
+    remove(secret) {
+        this.secrets.delete(secret.arn.value);
+    }
+    /**
+     * Resolve a SecretId to the secret it names, or refuse.
+     *
+     * A secret scheduled for deletion still resolves, because it still exists:
+     * it can be described and restored until its window runs out.
+     */
+    require(secretId) {
+        if (secretId === undefined || secretId === "") {
+            throw new SimSecretsManagerInvalidParameterException("SecretId is required");
+        }
+        const found = this.find(secretId);
+        if (found === undefined) {
+            const { accountId, regionName } = this.accountRegionScope;
+            throw new SimSecretsManagerResourceNotFoundException(`Secrets Manager can't find the specified secret '${secretId}' in ` +
+                `Account ${accountId} Region ${regionName}`);
+        }
+        return found;
+    }
+    /**
+     * Resolve a SecretId in any of the forms real Secrets Manager accepts.
+     */
+    find(secretId) {
+        const resource = this.secretIds.resolveResource(secretId);
+        if (resource === undefined) {
+            return undefined;
+        }
+        return this.secrets
+            .values()
+            .find((secret) => secret.arn.matchesResource(resource));
+    }
+    /**
+     * Refuse a name that is already taken, saying which way it is taken.
+     *
+     * A name held by a secret waiting out its recovery window is the failure
+     * people actually hit when a stack is deleted and redeployed, so it is worth
+     * telling apart from a name held by a live secret.
+     */
+    requireNameAvailable(name) {
+        const existing = this.secrets
+            .values()
+            .find((secret) => secret.name === name);
+        if (existing === undefined) {
+            return;
+        }
+        if (existing.isScheduledForDeletion) {
+            throw new SimSecretsManagerInvalidRequestException(`A secret with the name '${name}' is scheduled for deletion. ` +
+                `Wait for the recovery window to elapse, or restore it with ` +
+                `RestoreSecret and delete it with ForceDeleteWithoutRecovery.`);
+        }
+        throw new SimSecretsManagerResourceExistsException(`The secret '${name}' already exists`);
+    }
+}
+//# sourceMappingURL=sim-secrets-manager-secret-store.js.map

package/dist/service/secretsmanager/secret/sim-secrets-manager-secret-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-secrets-manager-secret-store.js","sourceRoot":"","sources":["../../../../src/service/secretsmanager/secret/sim-secrets-manager-secret-store.ts"],"names":[],"mappings":"AACA,OAAO,EACL,0CAA0C,EAC1C,wCAAwC,EACxC,wCAAwC,EACxC,0CAA0C,GAC3C,MAAM,uCAAuC,CAAC;AAE/C,OAAO,EAAE,+BAA+B,EAAE,MAAM,oCAAoC,CAAC;AAMrF;;;;;;;GAOG;AACH,MAAM,OAAO,4BAA4B;IACtB,OAAO,GAAG,IAAI,GAAG,EAAmC,CAAC;IACrD,kBAAkB,CAA2B;IAC7C,SAAS,CAAkC;IAE5D,YAAY,UAAkD;QAC5D,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;QACxD,IAAI,CAAC,SAAS,GAAG,IAAI,+BAA+B,CAAC;YACnD,kBAAkB,EAAE,UAAU,CAAC,kBAAkB;SAClD,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,IAAI,GAAG;QACL,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,MAA+B;QACjC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC7C,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,MAA+B;QACpC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC;IAED;;;;;OAKG;IACH,OAAO,CAAC,QAA4B;QAClC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;YAC9C,MAAM,IAAI,0CAA0C,CAClD,sBAAsB,CACvB,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAElC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,kBAAkB,CAAC;YAE1D,MAAM,IAAI,0CAA0C,CAClD,oDAAoD,QAAQ,OAAO;gBACjE,WAAW,SAAS,WAAW,UAAU,EAAE,CAC9C,CAAC;QACJ,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,QAAgB;QACnB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAE1D,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,IAAI,CAAC,OAAO;aAChB,MAAM,EAAE;aACR,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED;;;;;;OAMG;IACH,oBAAoB,CAAC,IAAY;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO;aAC1B,MAAM,EAAE;aACR,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAE1C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO;QACT,CAAC;QAED,IAAI,QAAQ,CAAC,sBAAsB,EAAE,CAAC;YACpC,MAAM,IAAI,wCAAwC,CAChD,2BAA2B,IAAI,+BAA+B;gBAC5D,6DAA6D;gBAC7D,8DAA8D,CACjE,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,wCAAwC,CAChD,eAAe,IAAI,kBAAkB,CACtC,CAAC;IACJ,CAAC;CACF"}

package/dist/service/secretsmanager/secret/sim-secrets-manager-secret-value.d.ts

@@ -0,0 +1,47 @@
+/**
+ * The two ways a Secrets Manager request can carry a secret value.
+ */
+export interface SimSecretsManagerSecretValueInput {
+    readonly SecretString?: string | undefined;
+    readonly SecretBinary?: Uint8Array | undefined;
+}
+/**
+ * The value held by one version of a simulated secret.
+ *
+ * Real Secrets Manager stores either text or binary and never both, and hands
+ * back whichever one it stored. Holding one content field rather than two
+ * optional ones keeps that invariant true by construction, so no reader has to
+ * cope with a value that is somehow neither.
+ */
+export declare class SimSecretsManagerSecretValue {
+    private readonly content;
+    private constructor();
+    /**
+     * Read a value from request input, refusing a request carrying neither.
+     */
+    static required(input: SimSecretsManagerSecretValueInput): SimSecretsManagerSecretValue;
+    /**
+     * Read a value from request input where supplying one is optional.
+     */
+    static optional(input: SimSecretsManagerSecretValueInput): SimSecretsManagerSecretValue | undefined;
+    private static bytesEqual;
+    /**
+     * The text value, if this version holds text.
+     */
+    get secretString(): string | undefined;
+    /**
+     * The binary value, if this version holds binary.
+     *
+     * A copy is handed out so a caller mutating the array it receives cannot
+     * change the stored secret, as it could not over a real API.
+     */
+    get secretBinary(): Uint8Array | undefined;
+    /**
+     * Whether another value holds exactly the same content.
+     *
+     * This is what makes a retried write with the same client request token a
+     * no-op rather than a failure, as it is on real AWS.
+     */
+    equals(other: SimSecretsManagerSecretValue): boolean;
+}
+//# sourceMappingURL=sim-secrets-manager-secret-value.d.ts.map

package/dist/service/secretsmanager/secret/sim-secrets-manager-secret-value.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-secrets-manager-secret-value.d.ts","sourceRoot":"","sources":["../../../../src/service/secretsmanager/secret/sim-secrets-manager-secret-value.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,YAAY,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;CAChD;AAED;;;;;;;GAOG;AACH,qBAAa,4BAA4B;IACvC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAsB;IAE9C,OAAO,eAEN;IAED;;OAEG;IACH,MAAM,CAAC,QAAQ,CACb,KAAK,EAAE,iCAAiC,GACvC,4BAA4B,CAU9B;IAED;;OAEG;IACH,MAAM,CAAC,QAAQ,CACb,KAAK,EAAE,iCAAiC,GACvC,4BAA4B,GAAG,SAAS,CAkB1C;IAED,OAAO,CAAC,MAAM,CAAC,UAAU;IAQzB;;OAEG;IACH,IAAI,YAAY,IAAI,MAAM,GAAG,SAAS,CAMrC;IAED;;;;;OAKG;IACH,IAAI,YAAY,IAAI,UAAU,GAAG,SAAS,CAMzC;IAED;;;;;OAKG;IACH,MAAM,CAAC,KAAK,EAAE,4BAA4B,GAAG,OAAO,CAMnD;CACF"}

package/dist/service/secretsmanager/secret/sim-secrets-manager-secret-value.js

@@ -0,0 +1,81 @@
+import { SimSecretsManagerInvalidParameterException } from "../error/sim-secrets-manager.error.js";
+/**
+ * The value held by one version of a simulated secret.
+ *
+ * Real Secrets Manager stores either text or binary and never both, and hands
+ * back whichever one it stored. Holding one content field rather than two
+ * optional ones keeps that invariant true by construction, so no reader has to
+ * cope with a value that is somehow neither.
+ */
+export class SimSecretsManagerSecretValue {
+    content;
+    constructor(content) {
+        this.content = content;
+    }
+    /**
+     * Read a value from request input, refusing a request carrying neither.
+     */
+    static required(input) {
+        const value = this.optional(input);
+        if (value === undefined) {
+            throw new SimSecretsManagerInvalidParameterException("Either SecretString or SecretBinary must be supplied");
+        }
+        return value;
+    }
+    /**
+     * Read a value from request input where supplying one is optional.
+     */
+    static optional(input) {
+        const { SecretString: text, SecretBinary: bytes } = input;
+        if (text !== undefined && bytes !== undefined) {
+            throw new SimSecretsManagerInvalidParameterException("SecretString and SecretBinary cannot both be supplied");
+        }
+        if (text !== undefined) {
+            return new SimSecretsManagerSecretValue(text);
+        }
+        if (bytes !== undefined) {
+            return new SimSecretsManagerSecretValue(Uint8Array.from(bytes));
+        }
+        return undefined;
+    }
+    static bytesEqual(mine, theirs) {
+        if (mine.length !== theirs.length) {
+            return false;
+        }
+        return mine.every((byte, index) => byte === theirs.at(index));
+    }
+    /**
+     * The text value, if this version holds text.
+     */
+    get secretString() {
+        if (typeof this.content === "string") {
+            return this.content;
+        }
+        return undefined;
+    }
+    /**
+     * The binary value, if this version holds binary.
+     *
+     * A copy is handed out so a caller mutating the array it receives cannot
+     * change the stored secret, as it could not over a real API.
+     */
+    get secretBinary() {
+        if (typeof this.content === "string") {
+            return undefined;
+        }
+        return Uint8Array.from(this.content);
+    }
+    /**
+     * Whether another value holds exactly the same content.
+     *
+     * This is what makes a retried write with the same client request token a
+     * no-op rather than a failure, as it is on real AWS.
+     */
+    equals(other) {
+        if (typeof this.content === "string" || typeof other.content === "string") {
+            return this.content === other.content;
+        }
+        return SimSecretsManagerSecretValue.bytesEqual(this.content, other.content);
+    }
+}
+//# sourceMappingURL=sim-secrets-manager-secret-value.js.map

package/dist/service/secretsmanager/secret/sim-secrets-manager-secret-value.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-secrets-manager-secret-value.js","sourceRoot":"","sources":["../../../../src/service/secretsmanager/secret/sim-secrets-manager-secret-value.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0CAA0C,EAAE,MAAM,uCAAuC,CAAC;AAUnG;;;;;;;GAOG;AACH,MAAM,OAAO,4BAA4B;IACtB,OAAO,CAAsB;IAE9C,YAAoB,OAA4B;QAC9C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,QAAQ,CACb,KAAwC;QAExC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAEnC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,0CAA0C,CAClD,sDAAsD,CACvD,CAAC;QACJ,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,QAAQ,CACb,KAAwC;QAExC,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;QAE1D,IAAI,IAAI,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAC9C,MAAM,IAAI,0CAA0C,CAClD,uDAAuD,CACxD,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,IAAI,4BAA4B,CAAC,IAAI,CAAC,CAAC;QAChD,CAAC;QAED,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,IAAI,4BAA4B,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAClE,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,MAAM,CAAC,UAAU,CAAC,IAAgB,EAAE,MAAkB;QAC5D,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;YAClC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IAChE,CAAC;IAED;;OAEG;IACH,IAAI,YAAY;QACd,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC,OAAO,CAAC;QACtB,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;OAKG;IACH,IAAI,YAAY;QACd,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACrC,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,KAAmC;QACxC,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC1E,OAAO,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC;QACxC,CAAC;QAED,OAAO,4BAA4B,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAC9E,CAAC;CACF"}

package/dist/service/secretsmanager/secret/sim-secrets-manager-secret-version.d.ts

@@ -0,0 +1,56 @@
+import type { SimSecretsManagerSecretValue } from "./sim-secrets-manager-secret-value.js";
+/**
+ * The staging labels Secrets Manager gives a meaning of its own.
+ *
+ * Any other label is a custom one, which real Secrets Manager also allows and
+ * treats as a plain marker.
+ */
+export declare const SimSecretsManagerStagingLabel: {
+    readonly Current: "AWSCURRENT";
+    readonly Previous: "AWSPREVIOUS";
+};
+export type SimSecretsManagerStagingLabel = (typeof SimSecretsManagerStagingLabel)[keyof typeof SimSecretsManagerStagingLabel];
+interface SimSecretsManagerSecretVersionProperties {
+    readonly versionId: string;
+    readonly value: SimSecretsManagerSecretValue;
+    readonly createdDate: Date;
+}
+/**
+ * One stored version of a simulated secret.
+ *
+ * A version's value never changes once written: real Secrets Manager creates a
+ * new version for every write and moves staging labels between them, which is
+ * what makes AWSPREVIOUS able to hold the value that was current before.
+ */
+export declare class SimSecretsManagerSecretVersion {
+    readonly versionId: string;
+    readonly value: SimSecretsManagerSecretValue;
+    readonly createdDate: Date;
+    private readonly labels;
+    constructor(properties: SimSecretsManagerSecretVersionProperties);
+    /**
+     * The staging labels currently attached to this version.
+     */
+    get stages(): readonly string[];
+    /**
+     * Whether this version carries any staging label at all.
+     *
+     * A version that carries none is deprecated on real AWS: it is no longer
+     * reported by DescribeSecret, and nothing can reach it by label.
+     */
+    get isLabelled(): boolean;
+    /**
+     * Whether a staging label is attached to this version.
+     */
+    hasStage(label: string): boolean;
+    /**
+     * Attach a staging label to this version.
+     */
+    addStage(label: string): void;
+    /**
+     * Detach a staging label from this version.
+     */
+    removeStage(label: string): void;
+}
+export {};
+//# sourceMappingURL=sim-secrets-manager-secret-version.d.ts.map

package/dist/service/secretsmanager/secret/sim-secrets-manager-secret-version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-secrets-manager-secret-version.d.ts","sourceRoot":"","sources":["../../../../src/service/secretsmanager/secret/sim-secrets-manager-secret-version.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AAE1F;;;;;GAKG;AACH,eAAO,MAAM,6BAA6B;aACxC,OAAO,EAAE,YAAY;aACrB,QAAQ,EAAE,aAAa;CACf,CAAC;AAEX,MAAM,MAAM,6BAA6B,GACvC,CAAC,OAAO,6BAA6B,CAAC,CAAC,MAAM,OAAO,6BAA6B,CAAC,CAAC;AAErF,UAAU,wCAAwC;IAChD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,4BAA4B,CAAC;IAC7C,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC;CAC5B;AAED;;;;;;GAMG;AACH,qBAAa,8BAA8B;IACzC,SAAgB,SAAS,EAAE,MAAM,CAAC;IAClC,SAAgB,KAAK,EAAE,4BAA4B,CAAC;IACpD,SAAgB,WAAW,EAAE,IAAI,CAAC;IAElC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;IAE5C,YAAY,UAAU,EAAE,wCAAwC,EAI/D;IAED;;OAEG;IACH,IAAI,MAAM,IAAI,SAAS,MAAM,EAAE,CAE9B;IAED;;;;;OAKG;IACH,IAAI,UAAU,IAAI,OAAO,CAExB;IAED;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE/B;IAED;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAE5B;IAED;;OAEG;IACH,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAE/B;CACF"}

package/dist/service/secretsmanager/secret/sim-secrets-manager-secret-version.js

@@ -0,0 +1,62 @@
+/**
+ * The staging labels Secrets Manager gives a meaning of its own.
+ *
+ * Any other label is a custom one, which real Secrets Manager also allows and
+ * treats as a plain marker.
+ */
+export const SimSecretsManagerStagingLabel = {
+    Current: "AWSCURRENT",
+    Previous: "AWSPREVIOUS",
+};
+/**
+ * One stored version of a simulated secret.
+ *
+ * A version's value never changes once written: real Secrets Manager creates a
+ * new version for every write and moves staging labels between them, which is
+ * what makes AWSPREVIOUS able to hold the value that was current before.
+ */
+export class SimSecretsManagerSecretVersion {
+    versionId;
+    value;
+    createdDate;
+    labels = new Set();
+    constructor(properties) {
+        this.versionId = properties.versionId;
+        this.value = properties.value;
+        this.createdDate = properties.createdDate;
+    }
+    /**
+     * The staging labels currently attached to this version.
+     */
+    get stages() {
+        return this.labels.values().toArray();
+    }
+    /**
+     * Whether this version carries any staging label at all.
+     *
+     * A version that carries none is deprecated on real AWS: it is no longer
+     * reported by DescribeSecret, and nothing can reach it by label.
+     */
+    get isLabelled() {
+        return this.labels.size > 0;
+    }
+    /**
+     * Whether a staging label is attached to this version.
+     */
+    hasStage(label) {
+        return this.labels.has(label);
+    }
+    /**
+     * Attach a staging label to this version.
+     */
+    addStage(label) {
+        this.labels.add(label);
+    }
+    /**
+     * Detach a staging label from this version.
+     */
+    removeStage(label) {
+        this.labels.delete(label);
+    }
+}
+//# sourceMappingURL=sim-secrets-manager-secret-version.js.map

package/dist/service/secretsmanager/secret/sim-secrets-manager-secret-version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-secrets-manager-secret-version.js","sourceRoot":"","sources":["../../../../src/service/secretsmanager/secret/sim-secrets-manager-secret-version.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,OAAO,EAAE,YAAY;IACrB,QAAQ,EAAE,aAAa;CACf,CAAC;AAWX;;;;;;GAMG;AACH,MAAM,OAAO,8BAA8B;IACzB,SAAS,CAAS;IAClB,KAAK,CAA+B;IACpC,WAAW,CAAO;IAEjB,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IAE5C,YAAY,UAAoD;QAC9D,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;IACxC,CAAC;IAED;;;;;OAKG;IACH,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,KAAa;QACpB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,KAAa;QACpB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,KAAa;QACvB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;CACF"}

package/dist/service/secretsmanager/secret/sim-secrets-manager-secret-versions.d.ts

@@ -0,0 +1,47 @@
+import { type SimSecretsManagerSecretVersion } from "./sim-secrets-manager-secret-version.js";
+/**
+ * The versions of one simulated secret, and how staging labels move between
+ * them.
+ *
+ * The label rules are the interesting part of Secrets Manager's data model and
+ * they belong together: a label names exactly one version at a time, and
+ * making a version current demotes the one that was.
+ */
+export declare class SimSecretsManagerSecretVersions {
+    private readonly versions;
+    /**
+     * Store a version and give it the staging labels it was written with.
+     */
+    add(version: SimSecretsManagerSecretVersion, stages: readonly string[]): void;
+    /**
+     * Find a version by its version id.
+     */
+    byId(versionId: string): SimSecretsManagerSecretVersion | undefined;
+    /**
+     * Find the version a staging label currently names.
+     */
+    byStage(label: string): SimSecretsManagerSecretVersion | undefined;
+    /**
+     * The version AWSCURRENT names, which is what a plain read returns.
+     */
+    get current(): SimSecretsManagerSecretVersion | undefined;
+    /**
+     * The version ids carrying at least one staging label, as DescribeSecret
+     * reports them.
+     *
+     * Versions that have lost every label are left out, because that is how real
+     * Secrets Manager reports a version on its way out of existence.
+     */
+    versionIdsToStages(): Record<string, string[]>;
+    /**
+     * Attach a staging label to one version, taking it off whichever version
+     * held it before.
+     *
+     * Making a version current is the one move with a consequence of its own:
+     * the version that was current becomes AWSPREVIOUS, and whatever was
+     * AWSPREVIOUS loses the label.
+     */
+    private moveStage;
+    private demoteCurrent;
+}
+//# sourceMappingURL=sim-secrets-manager-secret-versions.d.ts.map

package/dist/service/secretsmanager/secret/sim-secrets-manager-secret-versions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-secrets-manager-secret-versions.d.ts","sourceRoot":"","sources":["../../../../src/service/secretsmanager/secret/sim-secrets-manager-secret-versions.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,8BAA8B,EAEpC,MAAM,yCAAyC,CAAC;AAEjD;;;;;;;GAOG;AACH,qBAAa,+BAA+B;IAC1C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqD;IAE9E;;OAEG;IACH,GAAG,CACD,OAAO,EAAE,8BAA8B,EACvC,MAAM,EAAE,SAAS,MAAM,EAAE,GACxB,IAAI,CAMN;IAED;;OAEG;IACH,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,8BAA8B,GAAG,SAAS,CAElE;IAED;;OAEG;IACH,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,8BAA8B,GAAG,SAAS,CAEjE;IAED;;OAEG;IACH,IAAI,OAAO,IAAI,8BAA8B,GAAG,SAAS,CAExD;IAED;;;;;;OAMG;IACH,kBAAkB,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAU7C;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,SAAS;IAejB,OAAO,CAAC,aAAa;CAYtB"}