@kensio/yulin 0.40.0 → 0.42.0

package/dist/service/ssm/parameter/sim-ssm-parameter-overwrite.d.ts

@@ -0,0 +1,34 @@
+import type { SimSsmParameter } from "./sim-ssm-parameter.js";
+import { SimSsmParameterType } from "./sim-ssm-parameter-type.js";
+/**
+ * What a write says about the type it wants and whether it may replace what
+ * is already there.
+ */
+export interface SimSsmParameterOverwriteRequest {
+    readonly type: string | undefined;
+    readonly overwrite: boolean | undefined;
+}
+/**
+ * The rules that only exist where a create and an overwrite meet.
+ *
+ * A name already in use and a type that cannot change are both about the
+ * relationship between a request and a stored parameter, rather than about
+ * either on its own, so they live together and away from the write itself.
+ */
+export declare class SimSsmParameterOverwrite {
+    /**
+     * The type the written version will belong to, refusing a request that may
+     * not replace the parameter it names.
+     */
+    typeFor(request: SimSsmParameterOverwriteRequest, existing: SimSsmParameter | undefined): SimSsmParameterType;
+    /**
+     * Refuse an overwrite that real Parameter Store refuses.
+     *
+     * A request that leaves out Overwrite is a create, so a name already in use
+     * fails rather than quietly replacing what is there. A request naming a
+     * different type fails too: Parameter Store has no way to convert a stored
+     * parameter, so the caller has to delete it and make a new one.
+     */
+    private requireAllowed;
+}
+//# sourceMappingURL=sim-ssm-parameter-overwrite.d.ts.map

package/dist/service/ssm/parameter/sim-ssm-parameter-overwrite.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ssm-parameter-overwrite.d.ts","sourceRoot":"","sources":["../../../../src/service/ssm/parameter/sim-ssm-parameter-overwrite.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAElE;;;GAGG;AACH,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,OAAO,GAAG,SAAS,CAAC;CACzC;AAED;;;;;;GAMG;AACH,qBAAa,wBAAwB;IACnC;;;OAGG;IACH,OAAO,CACL,OAAO,EAAE,+BAA+B,EACxC,QAAQ,EAAE,eAAe,GAAG,SAAS,GACpC,mBAAmB,CAQrB;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,cAAc;CA4BvB"}

package/dist/service/ssm/parameter/sim-ssm-parameter-overwrite.js

@@ -0,0 +1,48 @@
+import { SimSsmHierarchyTypeMismatchException, SimSsmParameterAlreadyExists, } from "../error/sim-ssm.error.js";
+import { SimSsmParameterType } from "./sim-ssm-parameter-type.js";
+/**
+ * The rules that only exist where a create and an overwrite meet.
+ *
+ * A name already in use and a type that cannot change are both about the
+ * relationship between a request and a stored parameter, rather than about
+ * either on its own, so they live together and away from the write itself.
+ */
+export class SimSsmParameterOverwrite {
+    /**
+     * The type the written version will belong to, refusing a request that may
+     * not replace the parameter it names.
+     */
+    typeFor(request, existing) {
+        if (existing === undefined) {
+            return SimSsmParameterType.forNewParameter(request.type);
+        }
+        this.requireAllowed(request, existing);
+        return existing.type;
+    }
+    /**
+     * Refuse an overwrite that real Parameter Store refuses.
+     *
+     * A request that leaves out Overwrite is a create, so a name already in use
+     * fails rather than quietly replacing what is there. A request naming a
+     * different type fails too: Parameter Store has no way to convert a stored
+     * parameter, so the caller has to delete it and make a new one.
+     */
+    requireAllowed(request, existing) {
+        if (request.overwrite !== true) {
+            throw new SimSsmParameterAlreadyExists(`The parameter '${existing.name.value}' already exists. To overwrite ` +
+                `this value, set the Overwrite option in the request to true.`);
+        }
+        if (request.type === undefined) {
+            return;
+        }
+        const requested = new SimSsmParameterType(request.type);
+        if (requested.value === existing.type.value) {
+            return;
+        }
+        throw new SimSsmHierarchyTypeMismatchException(`Parameter '${existing.name.value}' is a ${existing.type.value} ` +
+            `parameter and cannot be changed to ${requested.value}. Parameter ` +
+            `Store does not support changing a parameter type: create a new, ` +
+            `unique parameter instead.`);
+    }
+}
+//# sourceMappingURL=sim-ssm-parameter-overwrite.js.map

package/dist/service/ssm/parameter/sim-ssm-parameter-overwrite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ssm-parameter-overwrite.js","sourceRoot":"","sources":["../../../../src/service/ssm/parameter/sim-ssm-parameter-overwrite.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oCAAoC,EACpC,4BAA4B,GAC7B,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAWlE;;;;;;GAMG;AACH,MAAM,OAAO,wBAAwB;IACnC;;;OAGG;IACH,OAAO,CACL,OAAwC,EACxC,QAAqC;QAErC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,mBAAmB,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAEvC,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED;;;;;;;OAOG;IACK,cAAc,CACpB,OAAwC,EACxC,QAAyB;QAEzB,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YAC/B,MAAM,IAAI,4BAA4B,CACpC,kBAAkB,QAAQ,CAAC,IAAI,CAAC,KAAK,iCAAiC;gBACpE,8DAA8D,CACjE,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,mBAAmB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAExD,IAAI,SAAS,CAAC,KAAK,KAAK,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAC5C,OAAO;QACT,CAAC;QAED,MAAM,IAAI,oCAAoC,CAC5C,cAAc,QAAQ,CAAC,IAAI,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAI,CAAC,KAAK,GAAG;YAC/D,sCAAsC,SAAS,CAAC,KAAK,cAAc;YACnE,kEAAkE;YAClE,2BAA2B,CAC9B,CAAC;IACJ,CAAC;CACF"}

package/dist/service/ssm/parameter/sim-ssm-parameter-path.d.ts

@@ -0,0 +1,36 @@
+import type { SimAwsAccountRegionScope } from "../../aws/sim-aws-account-region-scope.js";
+import type { SimSsmParameter } from "./sim-ssm-parameter.js";
+interface SimSsmParameterPathProperties {
+    readonly path: string | undefined;
+    readonly accountRegionScope: SimAwsAccountRegionScope;
+}
+/**
+ * A level of the parameter hierarchy, as GetParametersByPath names one.
+ *
+ * The path is also the resource GetParametersByPath authorizes against, which
+ * is the part worth modelling: real Parameter Store grants access to a whole
+ * subtree through its path, so a caller allowed `/myapp` can read `/myapp/prod`
+ * recursively even where an explicit deny names the parameter itself.
+ */
+export declare class SimSsmParameterPath {
+    /**
+     * The path as the request wrote it.
+     */
+    readonly value: string;
+    /**
+     * The ARN of the path, which is what an IAM policy names.
+     */
+    readonly arn: string;
+    private readonly prefix;
+    constructor(properties: SimSsmParameterPathProperties);
+    private static validated;
+    /**
+     * Whether a parameter lies under this path.
+     *
+     * Without `recursive` only the level immediately below the path counts, so
+     * `/myapp/db-host` is under `/myapp` and `/myapp/prod/db-host` is not.
+     */
+    contains(parameter: SimSsmParameter, recursive: boolean): boolean;
+}
+export {};
+//# sourceMappingURL=sim-ssm-parameter-path.d.ts.map

package/dist/service/ssm/parameter/sim-ssm-parameter-path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ssm-parameter-path.d.ts","sourceRoot":"","sources":["../../../../src/service/ssm/parameter/sim-ssm-parameter-path.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAE1F,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAG9D,UAAU,6BAA6B;IACrC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;CACvD;AAED;;;;;;;GAOG;AACH,qBAAa,mBAAmB;IAC9B;;OAEG;IACH,SAAgB,KAAK,EAAE,MAAM,CAAC;IAE9B;;OAEG;IACH,SAAgB,GAAG,EAAE,MAAM,CAAC;IAE5B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAEhC,YAAY,UAAU,EAAE,6BAA6B,EAQpD;IAED,OAAO,CAAC,MAAM,CAAC,SAAS;IAmBxB;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,EAAE,eAAe,EAAE,SAAS,EAAE,OAAO,GAAG,OAAO,CAYhE;CACF"}

package/dist/service/ssm/parameter/sim-ssm-parameter-path.js

@@ -0,0 +1,56 @@
+import { SimSsmValidationException } from "../error/sim-ssm.error.js";
+import { ssmParameterArnPrefix } from "./sim-ssm-parameter-arn.js";
+/**
+ * A level of the parameter hierarchy, as GetParametersByPath names one.
+ *
+ * The path is also the resource GetParametersByPath authorizes against, which
+ * is the part worth modelling: real Parameter Store grants access to a whole
+ * subtree through its path, so a caller allowed `/myapp` can read `/myapp/prod`
+ * recursively even where an explicit deny names the parameter itself.
+ */
+export class SimSsmParameterPath {
+    /**
+     * The path as the request wrote it.
+     */
+    value;
+    /**
+     * The ARN of the path, which is what an IAM policy names.
+     */
+    arn;
+    prefix;
+    constructor(properties) {
+        this.value = SimSsmParameterPath.validated(properties.path);
+        // A trailing slash is optional in the request and never part of the ARN.
+        const resource = this.value.replace(/^\//, "").replace(/\/$/, "");
+        this.arn = ssmParameterArnPrefix(properties.accountRegionScope) + resource;
+        this.prefix = resource === "" ? "" : `${resource}/`;
+    }
+    static validated(path) {
+        if (path === undefined || path.trim() === "") {
+            throw new SimSsmValidationException("A Path is required for GetParametersByPath");
+        }
+        const trimmed = path.trim();
+        if (!trimmed.startsWith("/")) {
+            throw new SimSsmValidationException(`Path '${trimmed}' does not start with a forward slash: a parameter ` +
+                `hierarchy starts at '/'`);
+        }
+        return trimmed;
+    }
+    /**
+     * Whether a parameter lies under this path.
+     *
+     * Without `recursive` only the level immediately below the path counts, so
+     * `/myapp/db-host` is under `/myapp` and `/myapp/prod/db-host` is not.
+     */
+    contains(parameter, recursive) {
+        const { resource } = parameter.arn;
+        if (!resource.startsWith(this.prefix)) {
+            return false;
+        }
+        if (recursive) {
+            return true;
+        }
+        return !resource.slice(this.prefix.length).includes("/");
+    }
+}
+//# sourceMappingURL=sim-ssm-parameter-path.js.map

package/dist/service/ssm/parameter/sim-ssm-parameter-path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ssm-parameter-path.js","sourceRoot":"","sources":["../../../../src/service/ssm/parameter/sim-ssm-parameter-path.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAEtE,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAOnE;;;;;;;GAOG;AACH,MAAM,OAAO,mBAAmB;IAC9B;;OAEG;IACa,KAAK,CAAS;IAE9B;;OAEG;IACa,GAAG,CAAS;IAEX,MAAM,CAAS;IAEhC,YAAY,UAAyC;QACnD,IAAI,CAAC,KAAK,GAAG,mBAAmB,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAE5D,yEAAyE;QACzE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAElE,IAAI,CAAC,GAAG,GAAG,qBAAqB,CAAC,UAAU,CAAC,kBAAkB,CAAC,GAAG,QAAQ,CAAC;QAC3E,IAAI,CAAC,MAAM,GAAG,QAAQ,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,QAAQ,GAAG,CAAC;IACtD,CAAC;IAEO,MAAM,CAAC,SAAS,CAAC,IAAwB;QAC/C,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAC7C,MAAM,IAAI,yBAAyB,CACjC,4CAA4C,CAC7C,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAE5B,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,yBAAyB,CACjC,SAAS,OAAO,qDAAqD;gBACnE,yBAAyB,CAC5B,CAAC;QACJ,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;;OAKG;IACH,QAAQ,CAAC,SAA0B,EAAE,SAAkB;QACrD,MAAM,EAAE,QAAQ,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC;QAEnC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACtC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC3D,CAAC;CACF"}

package/dist/service/ssm/parameter/sim-ssm-parameter-selector.d.ts

@@ -0,0 +1,34 @@
+import type { SimSsmParameter } from "./sim-ssm-parameter.js";
+import type { SimSsmParameterVersion } from "./sim-ssm-parameter-version.js";
+/**
+ * A parameter name as a request writes it, with an optional version or label
+ * selector after a colon.
+ *
+ * A parameter name cannot contain a colon, so the first one separates the name
+ * from the selector. `name:3` names a version and `name:release` names a
+ * label, which is how real Parameter Store tells the two apart: a label may
+ * not start with a digit.
+ */
+export declare class SimSsmParameterSelector {
+    /**
+     * The parameter name, without the selector.
+     */
+    readonly name: string;
+    /**
+     * The selector as Parameter Store reports it back, such as `:3`.
+     */
+    readonly selector: string | undefined;
+    private readonly version;
+    private readonly label;
+    constructor(requestedName: string);
+    /**
+     * The version of a parameter this selector names.
+     *
+     * Parameter labels are refused rather than looked up. Nothing in this
+     * simulation can create one, because LabelParameterVersion is not
+     * implemented, so a label selector could only ever fail. Saying why beats
+     * reporting the parameter as missing.
+     */
+    versionOf(parameter: SimSsmParameter): SimSsmParameterVersion;
+}
+//# sourceMappingURL=sim-ssm-parameter-selector.d.ts.map

package/dist/service/ssm/parameter/sim-ssm-parameter-selector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ssm-parameter-selector.d.ts","sourceRoot":"","sources":["../../../../src/service/ssm/parameter/sim-ssm-parameter-selector.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAI7E;;;;;;;;GAQG;AACH,qBAAa,uBAAuB;IAClC;;OAEG;IACH,SAAgB,IAAI,EAAE,MAAM,CAAC;IAE7B;;OAEG;IACH,SAAgB,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAE7C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAC7C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAqB;IAE3C,YAAY,aAAa,EAAE,MAAM,EAyBhC;IAED;;;;;;;OAOG;IACH,SAAS,CAAC,SAAS,EAAE,eAAe,GAAG,sBAAsB,CAc5D;CACF"}

package/dist/service/ssm/parameter/sim-ssm-parameter-selector.js

@@ -0,0 +1,63 @@
+import { SimSsmParameterNotFound, SimSsmValidationException, } from "../error/sim-ssm.error.js";
+const versionNumberPattern = /^\d+$/;
+/**
+ * A parameter name as a request writes it, with an optional version or label
+ * selector after a colon.
+ *
+ * A parameter name cannot contain a colon, so the first one separates the name
+ * from the selector. `name:3` names a version and `name:release` names a
+ * label, which is how real Parameter Store tells the two apart: a label may
+ * not start with a digit.
+ */
+export class SimSsmParameterSelector {
+    /**
+     * The parameter name, without the selector.
+     */
+    name;
+    /**
+     * The selector as Parameter Store reports it back, such as `:3`.
+     */
+    selector;
+    version;
+    label;
+    constructor(requestedName) {
+        const colonIndex = requestedName.indexOf(":");
+        if (colonIndex === -1) {
+            this.name = requestedName;
+            return;
+        }
+        const selected = requestedName.slice(colonIndex + 1);
+        if (selected === "") {
+            throw new SimSsmValidationException(`Parameter name '${requestedName}' ends in a colon with no version ` +
+                `or label after it`);
+        }
+        this.name = requestedName.slice(0, colonIndex);
+        this.selector = `:${selected}`;
+        if (versionNumberPattern.test(selected)) {
+            this.version = Number(selected);
+        }
+        else {
+            this.label = selected;
+        }
+    }
+    /**
+     * The version of a parameter this selector names.
+     *
+     * Parameter labels are refused rather than looked up. Nothing in this
+     * simulation can create one, because LabelParameterVersion is not
+     * implemented, so a label selector could only ever fail. Saying why beats
+     * reporting the parameter as missing.
+     */
+    versionOf(parameter) {
+        if (this.label !== undefined) {
+            throw new SimSsmParameterNotFound(`Parameter '${this.name}' has no label '${this.label}': parameter ` +
+                `labels are not simulated, because LabelParameterVersion is not ` +
+                `implemented. Select a version number instead.`);
+        }
+        if (this.version === undefined) {
+            return parameter.currentVersion;
+        }
+        return parameter.versionNumbered(this.version);
+    }
+}
+//# sourceMappingURL=sim-ssm-parameter-selector.js.map

package/dist/service/ssm/parameter/sim-ssm-parameter-selector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ssm-parameter-selector.js","sourceRoot":"","sources":["../../../../src/service/ssm/parameter/sim-ssm-parameter-selector.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,yBAAyB,GAC1B,MAAM,2BAA2B,CAAC;AAInC,MAAM,oBAAoB,GAAG,OAAO,CAAC;AAErC;;;;;;;;GAQG;AACH,MAAM,OAAO,uBAAuB;IAClC;;OAEG;IACa,IAAI,CAAS;IAE7B;;OAEG;IACa,QAAQ,CAAqB;IAE5B,OAAO,CAAqB;IAC5B,KAAK,CAAqB;IAE3C,YAAY,aAAqB;QAC/B,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAE9C,IAAI,UAAU,KAAK,CAAC,CAAC,EAAE,CAAC;YACtB,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;YAC1B,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;QAErD,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;YACpB,MAAM,IAAI,yBAAyB,CACjC,mBAAmB,aAAa,oCAAoC;gBAClE,mBAAmB,CACtB,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QAC/C,IAAI,CAAC,QAAQ,GAAG,IAAI,QAAQ,EAAE,CAAC;QAE/B,IAAI,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC;QACxB,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACH,SAAS,CAAC,SAA0B;QAClC,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,uBAAuB,CAC/B,cAAc,IAAI,CAAC,IAAI,mBAAmB,IAAI,CAAC,KAAK,eAAe;gBACjE,iEAAiE;gBACjE,+CAA+C,CAClD,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,SAAS,CAAC,cAAc,CAAC;QAClC,CAAC;QAED,OAAO,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjD,CAAC;CACF"}

package/dist/service/ssm/parameter/sim-ssm-parameter-store.d.ts

@@ -0,0 +1,46 @@
+import type { SimSsmParameter } from "./sim-ssm-parameter.js";
+import type { SimSsmParameterPath } from "./sim-ssm-parameter-path.js";
+/**
+ * The parameters of one simulated SSM scope, and how a requested name
+ * resolves to one of them.
+ *
+ * Parameters are keyed by the resource part of their ARN rather than by the
+ * name as written, so `/db-host` and `db-host` reach the same parameter. They
+ * have to: both name the same ARN, so no IAM policy could tell them apart.
+ */
+export declare class SimSsmParameterStore {
+    private readonly parameters;
+    /**
+     * Every parameter in this scope, in creation order.
+     */
+    get all(): readonly SimSsmParameter[];
+    /**
+     * Store a newly created parameter.
+     */
+    add(parameter: SimSsmParameter): void;
+    /**
+     * Forget a deleted parameter.
+     */
+    remove(parameter: SimSsmParameter): void;
+    /**
+     * Find a parameter by name, with or without its leading slash.
+     */
+    find(name: string): SimSsmParameter | undefined;
+    /**
+     * Resolve a parameter by name, or refuse.
+     */
+    require(name: string): SimSsmParameter;
+    /**
+     * The parameters under one level of the hierarchy, in name order.
+     *
+     * Real Parameter Store returns a path listing sorted by name rather than in
+     * creation order.
+     */
+    under(path: SimSsmParameterPath, recursive: boolean): readonly SimSsmParameter[];
+    /**
+     * Every parameter in this scope, in name order.
+     */
+    get allByName(): readonly SimSsmParameter[];
+    private sortedByName;
+}
+//# sourceMappingURL=sim-ssm-parameter-store.d.ts.map

package/dist/service/ssm/parameter/sim-ssm-parameter-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ssm-parameter-store.d.ts","sourceRoot":"","sources":["../../../../src/service/ssm/parameter/sim-ssm-parameter-store.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAE9D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAEvE;;;;;;;GAOG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsC;IAEjE;;OAEG;IACH,IAAI,GAAG,IAAI,SAAS,eAAe,EAAE,CAEpC;IAED;;OAEG;IACH,GAAG,CAAC,SAAS,EAAE,eAAe,GAAG,IAAI,CAEpC;IAED;;OAEG;IACH,MAAM,CAAC,SAAS,EAAE,eAAe,GAAG,IAAI,CAEvC;IAED;;OAEG;IACH,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAE9C;IAED;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,CAUrC;IAED;;;;;OAKG;IACH,KAAK,CACH,IAAI,EAAE,mBAAmB,EACzB,SAAS,EAAE,OAAO,GACjB,SAAS,eAAe,EAAE,CAI5B;IAED;;OAEG;IACH,IAAI,SAAS,IAAI,SAAS,eAAe,EAAE,CAE1C;IAED,OAAO,CAAC,YAAY;CAOrB"}

package/dist/service/ssm/parameter/sim-ssm-parameter-store.js

@@ -0,0 +1,66 @@
+import { SimSsmParameterNotFound } from "../error/sim-ssm.error.js";
+import { SimSsmParameterName } from "./sim-ssm-parameter-name.js";
+/**
+ * The parameters of one simulated SSM scope, and how a requested name
+ * resolves to one of them.
+ *
+ * Parameters are keyed by the resource part of their ARN rather than by the
+ * name as written, so `/db-host` and `db-host` reach the same parameter. They
+ * have to: both name the same ARN, so no IAM policy could tell them apart.
+ */
+export class SimSsmParameterStore {
+    parameters = new Map();
+    /**
+     * Every parameter in this scope, in creation order.
+     */
+    get all() {
+        return this.parameters.values().toArray();
+    }
+    /**
+     * Store a newly created parameter.
+     */
+    add(parameter) {
+        this.parameters.set(parameter.arn.resource, parameter);
+    }
+    /**
+     * Forget a deleted parameter.
+     */
+    remove(parameter) {
+        this.parameters.delete(parameter.arn.resource);
+    }
+    /**
+     * Find a parameter by name, with or without its leading slash.
+     */
+    find(name) {
+        return this.parameters.get(SimSsmParameterName.resourceFor(name));
+    }
+    /**
+     * Resolve a parameter by name, or refuse.
+     */
+    require(name) {
+        const found = this.find(name);
+        if (found === undefined) {
+            throw new SimSsmParameterNotFound(`Parameter '${name}' not found: verify the name and try again`);
+        }
+        return found;
+    }
+    /**
+     * The parameters under one level of the hierarchy, in name order.
+     *
+     * Real Parameter Store returns a path listing sorted by name rather than in
+     * creation order.
+     */
+    under(path, recursive) {
+        return this.sortedByName(this.all.filter((parameter) => path.contains(parameter, recursive)));
+    }
+    /**
+     * Every parameter in this scope, in name order.
+     */
+    get allByName() {
+        return this.sortedByName(this.all);
+    }
+    sortedByName(parameters) {
+        return parameters.toSorted((one, other) => one.name.value.localeCompare(other.name.value));
+    }
+}
+//# sourceMappingURL=sim-ssm-parameter-store.js.map

package/dist/service/ssm/parameter/sim-ssm-parameter-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ssm-parameter-store.js","sourceRoot":"","sources":["../../../../src/service/ssm/parameter/sim-ssm-parameter-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAEpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAGlE;;;;;;;GAOG;AACH,MAAM,OAAO,oBAAoB;IACd,UAAU,GAAG,IAAI,GAAG,EAA2B,CAAC;IAEjE;;OAEG;IACH,IAAI,GAAG;QACL,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,SAA0B;QAC5B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACzD,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,SAA0B;QAC/B,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACjD,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,IAAY;QACf,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,mBAAmB,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IACpE,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,IAAY;QAClB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE9B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,uBAAuB,CAC/B,cAAc,IAAI,4CAA4C,CAC/D,CAAC;QACJ,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;OAKG;IACH,KAAK,CACH,IAAyB,EACzB,SAAkB;QAElB,OAAO,IAAI,CAAC,YAAY,CACtB,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CACpE,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrC,CAAC;IAEO,YAAY,CAClB,UAAsC;QAEtC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CACxC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAC/C,CAAC;IACJ,CAAC;CACF"}

package/dist/service/ssm/parameter/sim-ssm-parameter-type.d.ts

@@ -0,0 +1,29 @@
+/**
+ * The parameter types this simulation stores.
+ */
+export type SimSsmParameterTypeName = "String" | "StringList" | "SecureString";
+/**
+ * The type of one simulated parameter.
+ *
+ * A `SecureString` is encrypted through simulated KMS rather than stored in
+ * the clear, so the two failures a real deployment hits are reproducible here:
+ * a caller that may read the parameter but may not decrypt with its key, and
+ * a read that forgets `WithDecryption` and gets a ciphertext back.
+ */
+export declare class SimSsmParameterType {
+    readonly value: SimSsmParameterTypeName;
+    constructor(type: string);
+    /**
+     * Read the type a new parameter is created with.
+     *
+     * Parameter Store requires a type when a parameter is created and allows it
+     * to be left out when one is updated.
+     */
+    static forNewParameter(type: string | undefined): SimSsmParameterType;
+    private static validated;
+    /**
+     * Whether values of this type are stored encrypted.
+     */
+    get isSecure(): boolean;
+}
+//# sourceMappingURL=sim-ssm-parameter-type.d.ts.map

package/dist/service/ssm/parameter/sim-ssm-parameter-type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ssm-parameter-type.d.ts","sourceRoot":"","sources":["../../../../src/service/ssm/parameter/sim-ssm-parameter-type.ts"],"names":[],"mappings":"AAKA;;GAEG;AACH,MAAM,MAAM,uBAAuB,GAAG,QAAQ,GAAG,YAAY,GAAG,cAAc,CAAC;AAQ/E;;;;;;;GAOG;AACH,qBAAa,mBAAmB;IAC9B,SAAgB,KAAK,EAAE,uBAAuB,CAAC;IAE/C,YAAY,IAAI,EAAE,MAAM,EAEvB;IAED;;;;;OAKG;IACH,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,mBAAmB,CAQpE;IAED,OAAO,CAAC,MAAM,CAAC,SAAS;IAWxB;;OAEG;IACH,IAAI,QAAQ,IAAI,OAAO,CAEtB;CACF"}

package/dist/service/ssm/parameter/sim-ssm-parameter-type.js

@@ -0,0 +1,46 @@
+import { SimSsmUnsupportedParameterType, SimSsmValidationException, } from "../error/sim-ssm.error.js";
+const simulatedTypes = new Set([
+    "String",
+    "StringList",
+    "SecureString",
+]);
+/**
+ * The type of one simulated parameter.
+ *
+ * A `SecureString` is encrypted through simulated KMS rather than stored in
+ * the clear, so the two failures a real deployment hits are reproducible here:
+ * a caller that may read the parameter but may not decrypt with its key, and
+ * a read that forgets `WithDecryption` and gets a ciphertext back.
+ */
+export class SimSsmParameterType {
+    value;
+    constructor(type) {
+        this.value = SimSsmParameterType.validated(type);
+    }
+    /**
+     * Read the type a new parameter is created with.
+     *
+     * Parameter Store requires a type when a parameter is created and allows it
+     * to be left out when one is updated.
+     */
+    static forNewParameter(type) {
+        if (type === undefined) {
+            throw new SimSsmValidationException("A parameter Type is required when creating a parameter");
+        }
+        return new SimSsmParameterType(type);
+    }
+    static validated(type) {
+        if (!simulatedTypes.has(type)) {
+            throw new SimSsmUnsupportedParameterType(`Parameter type '${type}' is not a Parameter Store type: use String, ` +
+                `StringList or SecureString`);
+        }
+        return type;
+    }
+    /**
+     * Whether values of this type are stored encrypted.
+     */
+    get isSecure() {
+        return this.value === "SecureString";
+    }
+}
+//# sourceMappingURL=sim-ssm-parameter-type.js.map

package/dist/service/ssm/parameter/sim-ssm-parameter-type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ssm-parameter-type.js","sourceRoot":"","sources":["../../../../src/service/ssm/parameter/sim-ssm-parameter-type.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,8BAA8B,EAC9B,yBAAyB,GAC1B,MAAM,2BAA2B,CAAC;AAOnC,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;IAClD,QAAQ;IACR,YAAY;IACZ,cAAc;CACf,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,OAAO,mBAAmB;IACd,KAAK,CAA0B;IAE/C,YAAY,IAAY;QACtB,IAAI,CAAC,KAAK,GAAG,mBAAmB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACnD,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,eAAe,CAAC,IAAwB;QAC7C,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,yBAAyB,CACjC,wDAAwD,CACzD,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IAEO,MAAM,CAAC,SAAS,CAAC,IAAY;QACnC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,8BAA8B,CACtC,mBAAmB,IAAI,+CAA+C;gBACpE,4BAA4B,CAC/B,CAAC;QACJ,CAAC;QAED,OAAO,IAA+B,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,KAAK,KAAK,cAAc,CAAC;IACvC,CAAC;CACF"}

package/dist/service/ssm/parameter/sim-ssm-parameter-value.d.ts

@@ -0,0 +1,30 @@
+/**
+ * The value held by one version of a simulated parameter, as it is stored.
+ *
+ * A `StringList` value is a single comma-separated string here, as it is on
+ * real Parameter Store. It is stored and returned that way rather than split
+ * into an array, so handler code that splits it on commas is exercising the
+ * same shape it would get from AWS.
+ *
+ * A `SecureString` value is stored as the base64 ciphertext KMS produced,
+ * which is what a read without `WithDecryption` returns. The 4KB limit applies
+ * to the plaintext a request submitted rather than to that ciphertext, so the
+ * two ways of making one of these are separate.
+ */
+export declare class SimSsmParameterValue {
+    readonly value: string;
+    private constructor();
+    /**
+     * The value a request submitted, checked against the standard tier limit.
+     */
+    static submitted(value: string | undefined): SimSsmParameterValue;
+    /**
+     * The stored form of an encrypted value.
+     *
+     * This is longer than the plaintext it came from and is not subject to the
+     * limit that plaintext was checked against, because Parameter Store measures
+     * the request rather than what it keeps.
+     */
+    static encrypted(ciphertext: string): SimSsmParameterValue;
+}
+//# sourceMappingURL=sim-ssm-parameter-value.d.ts.map

package/dist/service/ssm/parameter/sim-ssm-parameter-value.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ssm-parameter-value.d.ts","sourceRoot":"","sources":["../../../../src/service/ssm/parameter/sim-ssm-parameter-value.ts"],"names":[],"mappings":"AAWA;;;;;;;;;;;;GAYG;AACH,qBAAa,oBAAoB;IAC/B,SAAgB,KAAK,EAAE,MAAM,CAAC;IAE9B,OAAO,eAEN;IAED;;OAEG;IACH,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,oBAAoB,CAkBhE;IAED;;;;;;OAMG;IACH,MAAM,CAAC,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,oBAAoB,CAEzD;CACF"}

package/dist/service/ssm/parameter/sim-ssm-parameter-value.js

@@ -0,0 +1,54 @@
+import { SimSsmValidationException } from "../error/sim-ssm.error.js";
+/**
+ * The content size a standard tier parameter may hold.
+ *
+ * This is the limit people actually hit, usually by putting a whole JSON
+ * configuration blob in one parameter. The advanced tier's 8KB is not
+ * simulated, so this is the only limit here.
+ */
+const maxValueBytes = 4096;
+/**
+ * The value held by one version of a simulated parameter, as it is stored.
+ *
+ * A `StringList` value is a single comma-separated string here, as it is on
+ * real Parameter Store. It is stored and returned that way rather than split
+ * into an array, so handler code that splits it on commas is exercising the
+ * same shape it would get from AWS.
+ *
+ * A `SecureString` value is stored as the base64 ciphertext KMS produced,
+ * which is what a read without `WithDecryption` returns. The 4KB limit applies
+ * to the plaintext a request submitted rather than to that ciphertext, so the
+ * two ways of making one of these are separate.
+ */
+export class SimSsmParameterValue {
+    value;
+    constructor(value) {
+        this.value = value;
+    }
+    /**
+     * The value a request submitted, checked against the standard tier limit.
+     */
+    static submitted(value) {
+        if (value === undefined || value === "") {
+            throw new SimSsmValidationException("A parameter Value is required and cannot be empty");
+        }
+        const byteLength = Buffer.byteLength(value, "utf8");
+        if (byteLength > maxValueBytes) {
+            throw new SimSsmValidationException(`Parameter value is ${String(byteLength)} bytes; a standard tier ` +
+                `parameter holds at most ${String(maxValueBytes)} bytes. The ` +
+                `advanced tier is not simulated.`);
+        }
+        return new SimSsmParameterValue(value);
+    }
+    /**
+     * The stored form of an encrypted value.
+     *
+     * This is longer than the plaintext it came from and is not subject to the
+     * limit that plaintext was checked against, because Parameter Store measures
+     * the request rather than what it keeps.
+     */
+    static encrypted(ciphertext) {
+        return new SimSsmParameterValue(ciphertext);
+    }
+}
+//# sourceMappingURL=sim-ssm-parameter-value.js.map

package/dist/service/ssm/parameter/sim-ssm-parameter-value.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ssm-parameter-value.js","sourceRoot":"","sources":["../../../../src/service/ssm/parameter/sim-ssm-parameter-value.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAEtE;;;;;;GAMG;AACH,MAAM,aAAa,GAAG,IAAI,CAAC;AAE3B;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,oBAAoB;IACf,KAAK,CAAS;IAE9B,YAAoB,KAAa;QAC/B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,SAAS,CAAC,KAAyB;QACxC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YACxC,MAAM,IAAI,yBAAyB,CACjC,mDAAmD,CACpD,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAEpD,IAAI,UAAU,GAAG,aAAa,EAAE,CAAC;YAC/B,MAAM,IAAI,yBAAyB,CACjC,sBAAsB,MAAM,CAAC,UAAU,CAAC,0BAA0B;gBAChE,2BAA2B,MAAM,CAAC,aAAa,CAAC,cAAc;gBAC9D,iCAAiC,CACpC,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,oBAAoB,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,SAAS,CAAC,UAAkB;QACjC,OAAO,IAAI,oBAAoB,CAAC,UAAU,CAAC,CAAC;IAC9C,CAAC;CACF"}

package/dist/service/ssm/parameter/sim-ssm-parameter-version.d.ts

@@ -0,0 +1,46 @@
+import type { SimSsmParameterValue } from "./sim-ssm-parameter-value.js";
+/**
+ * The data type of a parameter's value.
+ *
+ * Only plain text is simulated. `aws:ec2:image` and `aws:ssm:integration` are
+ * validated against other services by real Parameter Store, which this
+ * simulation does not do.
+ */
+export declare const ssmTextDataType = "text";
+/**
+ * The details one stored version of a parameter records, beyond its value.
+ */
+export interface SimSsmParameterVersionDetails {
+    readonly description?: string | undefined;
+    readonly dataType?: string | undefined;
+    readonly lastModifiedUser?: string | undefined;
+    /**
+     * The ARN of the KMS key a SecureString value was encrypted under, and
+     * undefined for the types that are stored in the clear.
+     */
+    readonly keyId?: string | undefined;
+}
+interface SimSsmParameterVersionProperties extends SimSsmParameterVersionDetails {
+    readonly version: number;
+    readonly value: SimSsmParameterValue;
+    readonly lastModifiedDate: Date;
+}
+/**
+ * One version of a simulated parameter.
+ *
+ * Every write makes a new version rather than replacing the value, because
+ * that is what makes the `name:version` selector mean anything: a caller can
+ * still read what the parameter said two deployments ago.
+ */
+export declare class SimSsmParameterVersion {
+    readonly version: number;
+    readonly value: SimSsmParameterValue;
+    readonly lastModifiedDate: Date;
+    readonly lastModifiedUser: string | undefined;
+    readonly description: string | undefined;
+    readonly keyId: string | undefined;
+    readonly dataType: string;
+    constructor(properties: SimSsmParameterVersionProperties);
+}
+export {};
+//# sourceMappingURL=sim-ssm-parameter-version.d.ts.map