@kensio/yulin 1.12.0 → 1.13.0

package/dist/service/elbv2/target-group/sim-elbv2-target-set.js

@@ -0,0 +1,66 @@
+import { SimElbV2TooManyTargetsException } from "../error/sim-elbv2.error.js";
+import { SimElbV2Target } from "./sim-elbv2-target.js";
+/**
+ * The targets registered in one simulated target group.
+ *
+ * This is where registering happens rather than on the group, because it is
+ * the only part of a group that changes after it is created, and keeping it
+ * here leaves the group itself immutable but for its health check settings.
+ *
+ * What a target may be is the target type's business: this asks the type and
+ * counts, and never looks at an address or an ARN itself.
+ */
+export class SimElbV2TargetSet {
+    targetType;
+    port;
+    targets = new Map();
+    constructor(properties) {
+        this.targetType = properties.targetType;
+        this.port = properties.port;
+    }
+    /**
+     * Every target in this set, in registration order.
+     */
+    get registered() {
+        return this.targets.values().toArray();
+    }
+    /**
+     * Register the targets a request names.
+     *
+     * Every target is read and checked before any is stored, so a request whose
+     * second target is refused leaves the group as it was rather than half
+     * registered.
+     */
+    register(descriptions) {
+        const registering = descriptions.map((description) => {
+            const target = SimElbV2Target.read(description, this.port);
+            this.targetType.validateTarget(target);
+            return target;
+        });
+        this.requireRoom(registering);
+        for (const target of registering) {
+            this.targets.set(target.key, target);
+        }
+    }
+    /**
+     * Deregister the targets a request names.
+     *
+     * A target that was not registered is not an error on real ELB, and is not
+     * one here either.
+     */
+    deregister(descriptions) {
+        for (const description of descriptions) {
+            this.targets.delete(SimElbV2Target.read(description, this.port).key);
+        }
+    }
+    requireRoom(registering) {
+        const keys = new Set([
+            ...this.targets.keys(),
+            ...registering.map((target) => target.key),
+        ]);
+        if (keys.size > this.targetType.maximumTargets) {
+            throw new SimElbV2TooManyTargetsException(`Registering these targets would leave the ${this.targetType.value} target group holding ${String(keys.size)}, and it holds at most ${String(this.targetType.maximumTargets)}`);
+        }
+    }
+}
+//# sourceMappingURL=sim-elbv2-target-set.js.map

package/dist/service/elbv2/target-group/sim-elbv2-target-set.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-elbv2-target-set.js","sourceRoot":"","sources":["../../../../src/service/elbv2/target-group/sim-elbv2-target-set.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,+BAA+B,EAAE,MAAM,6BAA6B,CAAC;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AASvD;;;;;;;;;GASG;AACH,MAAM,OAAO,iBAAiB;IACX,UAAU,CAAqB;IAC/B,IAAI,CAAqB;IACzB,OAAO,GAAG,IAAI,GAAG,EAA0B,CAAC;IAE7D,YAAY,UAAuC;QACjD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;IACzC,CAAC;IAED;;;;;;OAMG;IACH,QAAQ,CAAC,YAAkD;QACzD,MAAM,WAAW,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE;YACnD,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAE3D,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;YAEvC,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QAE9B,KAAK,MAAM,MAAM,IAAI,WAAW,EAAE,CAAC;YACjC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,UAAU,CAAC,YAAkD;QAC3D,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;YACvC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,WAAsC;QACxD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC;YACnB,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;YACtB,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC;SAC3C,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,cAAc,EAAE,CAAC;YAC/C,MAAM,IAAI,+BAA+B,CACvC,6CAA6C,IAAI,CAAC,UAAU,CAAC,KAAK,yBAAyB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,0BAA0B,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAC/K,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/service/elbv2/target-group/sim-elbv2-target-type.d.ts

@@ -0,0 +1,55 @@
+/**
+ * What a target group holds, and the rules that follow from it.
+ *
+ * A target type is a strategy rather than a label: the number of targets a
+ * group takes, what a target's Id has to look like, and whether the group
+ * itself carries a protocol and port all depend on it, and each subclass here
+ * is one set of those answers.
+ *
+ * Two types are simulated. `lambda` is what real ALB invokes directly, and
+ * `ip` is what a service registers itself as. `instance` is refused rather
+ * than accepted, because there are no EC2 instances here for it to mean
+ * anything about: a group created as `instance` would look configured and
+ * route nowhere.
+ */
+export declare abstract class SimElbV2TargetType {
+    /**
+     * The value this type is named by, in a request and in a describe.
+     */
+    abstract readonly value: string;
+    /**
+     * The most targets real ELB lets a group of this type hold.
+     */
+    abstract readonly maximumTargets: number;
+    /**
+     * Refuse a target group whose other properties contradict this type.
+     */
+    abstract validateGroup(properties: SimElbV2TargetGroupShape): void;
+    /**
+     * Refuse a target this type would not take.
+     */
+    abstract validateTarget(target: SimElbV2TargetShape): void;
+}
+/**
+ * The target group properties a target type has an opinion about.
+ */
+export interface SimElbV2TargetGroupShape {
+    readonly protocol: string | undefined;
+    readonly port: number | undefined;
+}
+/**
+ * The registered target properties a target type has an opinion about.
+ */
+export interface SimElbV2TargetShape {
+    readonly id: string;
+    readonly port: number | undefined;
+}
+/**
+ * Read the target type a request names.
+ *
+ * A request naming none is refused rather than defaulted. Real ELB defaults to
+ * `instance`, which is not simulated, so silently choosing one of the two
+ * types that are would create a group the request did not ask for.
+ */
+export declare function simElbV2TargetType(value: string | undefined): SimElbV2TargetType;
+//# sourceMappingURL=sim-elbv2-target-type.d.ts.map

package/dist/service/elbv2/target-group/sim-elbv2-target-type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-elbv2-target-type.d.ts","sourceRoot":"","sources":["../../../../src/service/elbv2/target-group/sim-elbv2-target-type.ts"],"names":[],"mappings":"AAQA;;;;;;;;;;;;;GAaG;AACH,8BAAsB,kBAAkB;IACtC;;OAEG;IACH,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAEhC;;OAEG;IACH,QAAQ,CAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAEzC;;OAEG;IACH,QAAQ,CAAC,aAAa,CAAC,UAAU,EAAE,wBAAwB,GAAG,IAAI,CAAC;IAEnE;;OAEG;IACH,QAAQ,CAAC,cAAc,CAAC,MAAM,EAAE,mBAAmB,GAAG,IAAI,CAAC;CAC5D;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;CACnC;AAgGD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,MAAM,GAAG,SAAS,GACxB,kBAAkB,CAqBpB"}

package/dist/service/elbv2/target-group/sim-elbv2-target-type.js

@@ -0,0 +1,114 @@
+import { isIP } from "node:net";
+import { SimElbV2InvalidConfigurationRequestException, SimElbV2InvalidTargetException, SimElbV2UnsimulatedInputException, } from "../error/sim-elbv2.error.js";
+/**
+ * What a target group holds, and the rules that follow from it.
+ *
+ * A target type is a strategy rather than a label: the number of targets a
+ * group takes, what a target's Id has to look like, and whether the group
+ * itself carries a protocol and port all depend on it, and each subclass here
+ * is one set of those answers.
+ *
+ * Two types are simulated. `lambda` is what real ALB invokes directly, and
+ * `ip` is what a service registers itself as. `instance` is refused rather
+ * than accepted, because there are no EC2 instances here for it to mean
+ * anything about: a group created as `instance` would look configured and
+ * route nowhere.
+ */
+export class SimElbV2TargetType {
+}
+/**
+ * A function ARN, which is the only Id a `lambda` target takes.
+ */
+const functionArn = /^arn:aws:lambda:[\da-z-]+:\d{12}:function:[\w-]+$/u;
+/**
+ * A target group holding one Lambda function.
+ */
+class SimElbV2LambdaTargetType extends SimElbV2TargetType {
+    value = "lambda";
+    /**
+     * Real ELB takes exactly one function per target group, which is what makes
+     * a Lambda target group a pointer at a function rather than a pool.
+     */
+    maximumTargets = 1;
+    /**
+     * Refuse a protocol or port, which a function has no use for.
+     */
+    validateGroup(properties) {
+        if (properties.protocol !== undefined || properties.port !== undefined) {
+            throw new SimElbV2InvalidConfigurationRequestException("A lambda target group takes no Protocol or Port, because the load " +
+                "balancer invokes the function rather than connecting to it");
+        }
+    }
+    /**
+     * Refuse anything but a function ARN, and refuse a port with it.
+     */
+    validateTarget(target) {
+        if (!functionArn.test(target.id)) {
+            throw new SimElbV2InvalidTargetException(`Target '${target.id}' is not a Lambda function ARN. A lambda target ` +
+                `group registers a function by its ARN.`);
+        }
+        if (target.port !== undefined) {
+            throw new SimElbV2InvalidTargetException(`Target '${target.id}' cannot carry a Port, because a function is ` +
+                `invoked rather than connected to`);
+        }
+    }
+}
+/**
+ * A target group holding addresses, which is what a container service
+ * registers itself as.
+ */
+class SimElbV2IpTargetType extends SimElbV2TargetType {
+    value = "ip";
+    /**
+     * Far below what real ELB allows, and high enough that nothing a test
+     * registers reaches it.
+     */
+    maximumTargets = 1000;
+    /**
+     * Require the protocol and port real ELB requires of an address group.
+     */
+    validateGroup(properties) {
+        if (properties.protocol === undefined || properties.port === undefined) {
+            throw new SimElbV2InvalidConfigurationRequestException("An ip target group requires a Protocol and a Port, which is where a " +
+                "registered address is reached");
+        }
+    }
+    /**
+     * Refuse an Id that is not an address.
+     */
+    validateTarget(target) {
+        // Parsed rather than pattern matched, so that something shaped like an
+        // address but impossible, such as 999.999.999.999, is refused too.
+        if (isIP(target.id) === 0) {
+            throw new SimElbV2InvalidTargetException(`Target '${target.id}' is not an IP address. An ip target group ` +
+                `registers addresses rather than instance ids or ARNs.`);
+        }
+    }
+}
+const targetTypes = new Map([
+    ["lambda", new SimElbV2LambdaTargetType()],
+    ["ip", new SimElbV2IpTargetType()],
+]);
+/**
+ * Read the target type a request names.
+ *
+ * A request naming none is refused rather than defaulted. Real ELB defaults to
+ * `instance`, which is not simulated, so silently choosing one of the two
+ * types that are would create a group the request did not ask for.
+ */
+export function simElbV2TargetType(value) {
+    if (value === undefined) {
+        throw new SimElbV2UnsimulatedInputException("TargetType is required here. Real ELB defaults it to 'instance', " +
+            "which is not simulated, so a target group has to name 'lambda' or " +
+            "'ip' rather than be given one of them.");
+    }
+    const targetType = targetTypes.get(value);
+    if (targetType === undefined) {
+        throw new SimElbV2UnsimulatedInputException(`TargetType '${value}' is not simulated. There are no EC2 instances or ` +
+            `nested load balancers here for it to mean anything about, so it is ` +
+            `refused rather than accepted and ignored. Simulated target types are ` +
+            `${targetTypes.keys().toArray().join(" and ")}.`);
+    }
+    return targetType;
+}
+//# sourceMappingURL=sim-elbv2-target-type.js.map

package/dist/service/elbv2/target-group/sim-elbv2-target-type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-elbv2-target-type.js","sourceRoot":"","sources":["../../../../src/service/elbv2/target-group/sim-elbv2-target-type.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAEhC,OAAO,EACL,4CAA4C,EAC5C,8BAA8B,EAC9B,iCAAiC,GAClC,MAAM,6BAA6B,CAAC;AAErC;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAgB,kBAAkB;CAoBvC;AAkBD;;GAEG;AACH,MAAM,WAAW,GAAG,oDAAoD,CAAC;AAEzE;;GAEG;AACH,MAAM,wBAAyB,SAAQ,kBAAkB;IAC9B,KAAK,GAAG,QAAQ,CAAC;IAE1C;;;OAGG;IACsB,cAAc,GAAG,CAAC,CAAC;IAE5C;;OAEG;IACM,aAAa,CAAC,UAAoC;QACzD,IAAI,UAAU,CAAC,QAAQ,KAAK,SAAS,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACvE,MAAM,IAAI,4CAA4C,CACpD,oEAAoE;gBAClE,4DAA4D,CAC/D,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACM,cAAc,CAAC,MAA2B;QACjD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,8BAA8B,CACtC,WAAW,MAAM,CAAC,EAAE,kDAAkD;gBACpE,wCAAwC,CAC3C,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,8BAA8B,CACtC,WAAW,MAAM,CAAC,EAAE,+CAA+C;gBACjE,kCAAkC,CACrC,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,oBAAqB,SAAQ,kBAAkB;IAC1B,KAAK,GAAG,IAAI,CAAC;IAEtC;;;OAGG;IACsB,cAAc,GAAG,IAAI,CAAC;IAE/C;;OAEG;IACM,aAAa,CAAC,UAAoC;QACzD,IAAI,UAAU,CAAC,QAAQ,KAAK,SAAS,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACvE,MAAM,IAAI,4CAA4C,CACpD,sEAAsE;gBACpE,+BAA+B,CAClC,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACM,cAAc,CAAC,MAA2B;QACjD,uEAAuE;QACvE,mEAAmE;QACnE,IAAI,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,8BAA8B,CACtC,WAAW,MAAM,CAAC,EAAE,6CAA6C;gBAC/D,uDAAuD,CAC1D,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAED,MAAM,WAAW,GAAG,IAAI,GAAG,CAA6B;IACtD,CAAC,QAAQ,EAAE,IAAI,wBAAwB,EAAE,CAAC;IAC1C,CAAC,IAAI,EAAE,IAAI,oBAAoB,EAAE,CAAC;CACnC,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAyB;IAEzB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,iCAAiC,CACzC,mEAAmE;YACjE,oEAAoE;YACpE,wCAAwC,CAC3C,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAE1C,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,iCAAiC,CACzC,eAAe,KAAK,oDAAoD;YACtE,qEAAqE;YACrE,uEAAuE;YACvE,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CACnD,CAAC;IACJ,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/service/elbv2/target-group/sim-elbv2-target.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Minimal structural sim ELBv2 target description.
+ */
+export interface SimElbV2TargetDescription {
+    readonly Id?: string | undefined;
+    readonly Port?: number | undefined;
+    readonly AvailabilityZone?: string | undefined;
+}
+/**
+ * One target registered in a simulated target group.
+ *
+ * Identity is the address and the port together, as it is on real ELB: the
+ * same address registered on two ports is two targets, and deregistering one
+ * leaves the other.
+ */
+export declare class SimElbV2Target {
+    readonly id: string;
+    readonly port: number | undefined;
+    readonly availabilityZone: string | undefined;
+    private constructor();
+    /**
+     * Read a target a request names, refusing one with no Id.
+     *
+     * A target naming no port takes the target group's, which is what real ELB
+     * does, so a group listening on one port needs the port named once.
+     */
+    static read(target: SimElbV2TargetDescription, groupPort: number | undefined): SimElbV2Target;
+    /**
+     * How this target is told apart from the others in its group.
+     */
+    get key(): string;
+    /**
+     * Report this target in the shape the SDK reads it back in.
+     */
+    view(): SimElbV2TargetDescription;
+}
+//# sourceMappingURL=sim-elbv2-target.d.ts.map

package/dist/service/elbv2/target-group/sim-elbv2-target.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-elbv2-target.d.ts","sourceRoot":"","sources":["../../../../src/service/elbv2/target-group/sim-elbv2-target.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChD;AAED;;;;;;GAMG;AACH,qBAAa,cAAc;IACzB,SAAgB,EAAE,EAAE,MAAM,CAAC;IAC3B,SAAgB,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,SAAgB,gBAAgB,EAAE,MAAM,GAAG,SAAS,CAAC;IAErD,OAAO,eAQN;IAED;;;;;OAKG;IACH,MAAM,CAAC,IAAI,CACT,MAAM,EAAE,yBAAyB,EACjC,SAAS,EAAE,MAAM,GAAG,SAAS,GAC5B,cAAc,CAUhB;IAED;;OAEG;IACH,IAAI,GAAG,IAAI,MAAM,CAEhB;IAED;;OAEG;IACH,IAAI,IAAI,yBAAyB,CAMhC;CACF"}

package/dist/service/elbv2/target-group/sim-elbv2-target.js

@@ -0,0 +1,47 @@
+import { SimElbV2ValidationError } from "../error/sim-elbv2.error.js";
+/**
+ * One target registered in a simulated target group.
+ *
+ * Identity is the address and the port together, as it is on real ELB: the
+ * same address registered on two ports is two targets, and deregistering one
+ * leaves the other.
+ */
+export class SimElbV2Target {
+    id;
+    port;
+    availabilityZone;
+    constructor(id, port, availabilityZone) {
+        this.id = id;
+        this.port = port;
+        this.availabilityZone = availabilityZone;
+    }
+    /**
+     * Read a target a request names, refusing one with no Id.
+     *
+     * A target naming no port takes the target group's, which is what real ELB
+     * does, so a group listening on one port needs the port named once.
+     */
+    static read(target, groupPort) {
+        if (target.Id === undefined || target.Id === "") {
+            throw new SimElbV2ValidationError("Targets member requires an Id");
+        }
+        return new SimElbV2Target(target.Id, target.Port ?? groupPort, target.AvailabilityZone);
+    }
+    /**
+     * How this target is told apart from the others in its group.
+     */
+    get key() {
+        return `${this.id}:${String(this.port ?? "")}`;
+    }
+    /**
+     * Report this target in the shape the SDK reads it back in.
+     */
+    view() {
+        return {
+            Id: this.id,
+            Port: this.port,
+            AvailabilityZone: this.availabilityZone,
+        };
+    }
+}
+//# sourceMappingURL=sim-elbv2-target.js.map

package/dist/service/elbv2/target-group/sim-elbv2-target.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-elbv2-target.js","sourceRoot":"","sources":["../../../../src/service/elbv2/target-group/sim-elbv2-target.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAWtE;;;;;;GAMG;AACH,MAAM,OAAO,cAAc;IACT,EAAE,CAAS;IACX,IAAI,CAAqB;IACzB,gBAAgB,CAAqB;IAErD,YACE,EAAU,EACV,IAAwB,EACxB,gBAAoC;QAEpC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;IAC3C,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,IAAI,CACT,MAAiC,EACjC,SAA6B;QAE7B,IAAI,MAAM,CAAC,EAAE,KAAK,SAAS,IAAI,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;YAChD,MAAM,IAAI,uBAAuB,CAAC,+BAA+B,CAAC,CAAC;QACrE,CAAC;QAED,OAAO,IAAI,cAAc,CACvB,MAAM,CAAC,EAAE,EACT,MAAM,CAAC,IAAI,IAAI,SAAS,EACxB,MAAM,CAAC,gBAAgB,CACxB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,IAAI,GAAG;QACL,OAAO,GAAG,IAAI,CAAC,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;IACjD,CAAC;IAED;;OAEG;IACH,IAAI;QACF,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;SACxC,CAAC;IACJ,CAAC;CACF"}

package/dist/service/kms/command/key/sim-kms-key-commands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-kms-key-commands.d.ts","sourceRoot":"","sources":["../../../../../src/service/kms/command/key/sim-kms-key-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAGzE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC/E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,KAAK,EACV,mBAAmB,EACnB,yBAAyB,EACzB,qBAAqB,EACrB,2BAA2B,EAC5B,MAAM,kBAAkB,CAAC;AAE1B,UAAU,2BAA2B;IACnC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;IACtC,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;IACtC,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAC;CAC1C;AAED;;GAEG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAiB;IACtC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmB;IAC9C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmB;IAC9C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAwB;IACjD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAuB;IAC/C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA8B;IAE7D,YAAY,UAAU,EAAE,2BAA2B,EAKlD;IAED;;;;;;OAMG;IACH,MAAM,CACJ,OAAO,EAAE,mBAAmB,EAC5B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,yBAAyB,CAgB3B;IAED;;OAEG;IACH,QAAQ,CACN,OAAO,EAAE,qBAAqB,EAC9B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,2BAA2B,CAK7B;CACF"}
+{"version":3,"file":"sim-kms-key-commands.d.ts","sourceRoot":"","sources":["../../../../../src/service/kms/command/key/sim-kms-key-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAGzE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC/E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,KAAK,EACV,mBAAmB,EACnB,yBAAyB,EACzB,qBAAqB,EACrB,2BAA2B,EAC5B,MAAM,kBAAkB,CAAC;AAE1B,UAAU,2BAA2B;IACnC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;IACtC,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;IACtC,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAC;CAC1C;AAED;;GAEG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAiB;IACtC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmB;IAC9C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmB;IAC9C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAwB;IACjD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAuB;IAC/C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA8B;IAE7D,YAAY,UAAU,EAAE,2BAA2B,EAKlD;IAED;;;;;;OAMG;IACH,MAAM,CACJ,OAAO,EAAE,mBAAmB,EAC5B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,yBAAyB,CAiB3B;IAED;;OAEG;IACH,QAAQ,CACN,OAAO,EAAE,qBAAqB,EAC9B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,2BAA2B,CAK7B;CACF"}

package/dist/service/kms/command/key/sim-kms-key-commands.js

@@ -24,11 +24,12 @@ export class SimKmsKeyCommands {
      * resource-level permissions for the same reason.
      */
     create(command, options) {
-        this.keyType.require(command.input.KeyUsage, command.input.KeySpec, command.input.Origin);
+        const keySpec = this.keyType.require(command.input.KeyUsage, command.input.KeySpec, command.input.Origin);
         this.authorizer.authorizeAccount("kms:CreateKey", options);
         const key = this.keyFactory.make({
             description: command.input.Description,
             policy: this.policyDocument.parseOptional(command.input.Policy),
+            keySpec,
         });
         this.keys.add(key);
         return { $metadata: {}, KeyMetadata: this.metadata.describe(key) };

package/dist/service/kms/command/key/sim-kms-key-commands.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-kms-key-commands.js","sourceRoot":"","sources":["../../../../../src/service/kms/command/key/sim-kms-key-commands.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAkBtD;;GAEG;AACH,MAAM,OAAO,iBAAiB;IACX,IAAI,CAAiB;IACrB,UAAU,CAAmB;IAC7B,UAAU,CAAmB;IAC7B,QAAQ,CAAwB;IAChC,OAAO,GAAG,IAAI,aAAa,EAAE,CAAC;IAC9B,cAAc,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAE7D,YAAY,UAAuC;QACjD,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;QAC5B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;IACtC,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CACJ,OAA4B,EAC5B,OAA8B;QAE9B,IAAI,CAAC,OAAO,CAAC,OAAO,CAClB,OAAO,CAAC,KAAK,CAAC,QAAQ,EACtB,OAAO,CAAC,KAAK,CAAC,OAAO,EACrB,OAAO,CAAC,KAAK,CAAC,MAAM,CACrB,CAAC;QACF,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;QAE3D,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAC/B,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,WAAW;YACtC,MAAM,EAAE,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;SAChE,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEnB,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;IACrE,CAAC;IAED;;OAEG;IACH,QAAQ,CACN,OAA8B,EAC9B,OAA8B;QAE9B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,iBAAiB,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;QAE9D,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;IACrE,CAAC;CACF"}
+{"version":3,"file":"sim-kms-key-commands.js","sourceRoot":"","sources":["../../../../../src/service/kms/command/key/sim-kms-key-commands.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAkBtD;;GAEG;AACH,MAAM,OAAO,iBAAiB;IACX,IAAI,CAAiB;IACrB,UAAU,CAAmB;IAC7B,UAAU,CAAmB;IAC7B,QAAQ,CAAwB;IAChC,OAAO,GAAG,IAAI,aAAa,EAAE,CAAC;IAC9B,cAAc,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAE7D,YAAY,UAAuC;QACjD,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;QAC5B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;IACtC,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CACJ,OAA4B,EAC5B,OAA8B;QAE9B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAClC,OAAO,CAAC,KAAK,CAAC,QAAQ,EACtB,OAAO,CAAC,KAAK,CAAC,OAAO,EACrB,OAAO,CAAC,KAAK,CAAC,MAAM,CACrB,CAAC;QACF,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;QAE3D,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAC/B,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,WAAW;YACtC,MAAM,EAAE,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;YAC/D,OAAO;SACR,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEnB,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;IACrE,CAAC;IAED;;OAEG;IACH,QAAQ,CACN,OAA8B,EAC9B,OAA8B;QAE9B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,iBAAiB,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;QAE9D,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;IACrE,CAAC;CACF"}

package/dist/service/kms/command/key/sim-kms-key-type.d.ts

@@ -1,14 +1,52 @@
+import { type SimKmsKeySpec } from "../../key/spec/sim-kms-key-spec.js";
 /**
- * Checks a requested key type against what this simulation models.
+ * Resolves the key spec a CreateKey request asks for.
  *
- * Asymmetric keys, HMAC keys and imported material all behave differently
- * enough that pretending a symmetric key is one of them would make a passing
- * test meaningless, so an unmodelled type is refused rather than substituted.
+ * A key spec and key usage pair says what the key is, so a pair this
+ * simulation does not model is refused rather than substituted: asymmetric
+ * encryption, HMAC and key agreement keys all behave differently enough that a
+ * signing key or a symmetric one standing in for them would make a passing
+ * test meaningless. Imported key material is refused for the same reason.
  */
 export declare class SimKmsKeyType {
     /**
-     * Refuse a key type this simulation does not model.
+     * Resolve a requested key type, or refuse one this simulation does not
+     * model.
      */
-    require(keyUsage: string | undefined, keySpec: string | undefined, origin: string | undefined): void;
+    require(keyUsage: string | undefined, keySpec: string | undefined, origin: string | undefined): SimKmsKeySpec;
+    /**
+     * Refuse a key usage no simulated key spec has.
+     *
+     * HMAC and key agreement keys are the two this rules out. Neither has a spec
+     * here at all, so saying the usage is unsimulated is more use than sending
+     * the caller looking for a spec that would allow it.
+     */
+    private requireSimulatedKeyUsage;
+    /**
+     * Refuse key material this simulation does not generate itself.
+     */
+    private requireSimulatedOrigin;
+    /**
+     * Resolve a key spec name, or refuse one this simulation does not create.
+     */
+    private requireSimulatedSpec;
+    /**
+     * Refuse a key usage the resolved spec does not have here.
+     *
+     * Real KMS offers the RSA specs for encryption as well as signing, and
+     * offers no spec at all for a `SIGN_VERIFY` key that names none. Both of
+     * those come out here, and the two need different explanations, so the
+     * refusal says which case it is rather than repeating the pair back.
+     */
+    private requireSpecAllowsUsage;
+    /**
+     * Refuse a spec that cannot take the default key usage.
+     *
+     * `KeyUsage` is optional only for a symmetric encryption key. Every other
+     * spec requires it, so leaving it out is a request AWS refuses rather than
+     * one it fills in, and filling it in here would create a key real KMS would
+     * not have made.
+     */
+    private requireDefaultableSpec;
 }
 //# sourceMappingURL=sim-kms-key-type.d.ts.map

package/dist/service/kms/command/key/sim-kms-key-type.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-kms-key-type.d.ts","sourceRoot":"","sources":["../../../../../src/service/kms/command/key/sim-kms-key-type.ts"],"names":[],"mappings":"AAYA;;;;;;GAMG;AACH,qBAAa,aAAa;IACxB;;OAEG;IACH,OAAO,CACL,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,MAAM,EAAE,MAAM,GAAG,SAAS,GACzB,IAAI,CAkBN;CACF"}
+{"version":3,"file":"sim-kms-key-type.d.ts","sourceRoot":"","sources":["../../../../../src/service/kms/command/key/sim-kms-key-type.ts"],"names":[],"mappings":"AAIA,OAAO,EAEL,KAAK,aAAa,EACnB,MAAM,oCAAoC,CAAC;AAiB5C;;;;;;;;GAQG;AACH,qBAAa,aAAa;IACxB;;;OAGG;IACH,OAAO,CACL,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,MAAM,EAAE,MAAM,GAAG,SAAS,GACzB,aAAa,CAWf;IAED;;;;;;OAMG;IACH,OAAO,CAAC,wBAAwB;IAUhC;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAQ9B;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAY5B;;;;;;;OAOG;IACH,OAAO,CAAC,sBAAsB;IA0B9B;;;;;;;OAOG;IACH,OAAO,CAAC,sBAAsB;CAS/B"}

package/dist/service/kms/command/key/sim-kms-key-type.js

@@ -1,31 +1,100 @@
 import { SimKmsInvalidKeyUsageException, SimKmsValidationException, } from "../../error/sim-kms.error.js";
+import { SimKmsKeyUsage, } from "../../key/spec/sim-kms-key-spec.js";
+import { simKmsKeySpecNames, simKmsKeySpecs, simKmsSymmetricKeySpecName, } from "../../key/spec/sim-kms-key-specs.js";
+const kmsOrigin = "AWS_KMS";
 /**
- * The only key type this simulation models.
+ * The key usages this simulation has key specs for.
  */
-const symmetricKeySpec = "SYMMETRIC_DEFAULT";
-const encryptDecryptUsage = "ENCRYPT_DECRYPT";
-const kmsOrigin = "AWS_KMS";
+const simKmsKeyUsages = new Set([
+    SimKmsKeyUsage.EncryptDecrypt,
+    SimKmsKeyUsage.SignVerify,
+]);
 /**
- * Checks a requested key type against what this simulation models.
+ * Resolves the key spec a CreateKey request asks for.
  *
- * Asymmetric keys, HMAC keys and imported material all behave differently
- * enough that pretending a symmetric key is one of them would make a passing
- * test meaningless, so an unmodelled type is refused rather than substituted.
+ * A key spec and key usage pair says what the key is, so a pair this
+ * simulation does not model is refused rather than substituted: asymmetric
+ * encryption, HMAC and key agreement keys all behave differently enough that a
+ * signing key or a symmetric one standing in for them would make a passing
+ * test meaningless. Imported key material is refused for the same reason.
  */
 export class SimKmsKeyType {
     /**
-     * Refuse a key type this simulation does not model.
+     * Resolve a requested key type, or refuse one this simulation does not
+     * model.
      */
     require(keyUsage, keySpec, origin) {
-        if (keyUsage !== undefined && keyUsage !== encryptDecryptUsage) {
-            throw new SimKmsInvalidKeyUsageException(`KeyUsage '${keyUsage}' is not simulated: simulated KMS creates ${encryptDecryptUsage} keys`);
-        }
-        if (keySpec !== undefined && keySpec !== symmetricKeySpec) {
-            throw new SimKmsInvalidKeyUsageException(`KeySpec '${keySpec}' is not simulated: simulated KMS creates ${symmetricKeySpec} keys`);
+        this.requireSimulatedOrigin(origin);
+        this.requireSimulatedKeyUsage(keyUsage);
+        const spec = this.requireSimulatedSpec(keySpec ?? simKmsSymmetricKeySpecName);
+        this.requireSpecAllowsUsage(spec, keyUsage, keySpec);
+        return spec;
+    }
+    /**
+     * Refuse a key usage no simulated key spec has.
+     *
+     * HMAC and key agreement keys are the two this rules out. Neither has a spec
+     * here at all, so saying the usage is unsimulated is more use than sending
+     * the caller looking for a spec that would allow it.
+     */
+    requireSimulatedKeyUsage(keyUsage) {
+        if (keyUsage === undefined || simKmsKeyUsages.has(keyUsage)) {
+            return;
         }
+        throw new SimKmsInvalidKeyUsageException(`KeyUsage '${keyUsage}' is not simulated: simulated KMS creates ${[...simKmsKeyUsages].join(" and ")} keys`);
+    }
+    /**
+     * Refuse key material this simulation does not generate itself.
+     */
+    requireSimulatedOrigin(origin) {
         if (origin !== undefined && origin !== kmsOrigin) {
             throw new SimKmsValidationException(`Origin '${origin}' is not simulated: simulated KMS generates its own key material`);
         }
     }
+    /**
+     * Resolve a key spec name, or refuse one this simulation does not create.
+     */
+    requireSimulatedSpec(keySpecName) {
+        const spec = simKmsKeySpecs.get(keySpecName);
+        if (spec === undefined) {
+            throw new SimKmsInvalidKeyUsageException(`KeySpec '${keySpecName}' is not simulated: simulated KMS creates ${simKmsKeySpecNames().join(", ")} keys`);
+        }
+        return spec;
+    }
+    /**
+     * Refuse a key usage the resolved spec does not have here.
+     *
+     * Real KMS offers the RSA specs for encryption as well as signing, and
+     * offers no spec at all for a `SIGN_VERIFY` key that names none. Both of
+     * those come out here, and the two need different explanations, so the
+     * refusal says which case it is rather than repeating the pair back.
+     */
+    requireSpecAllowsUsage(spec, keyUsage, requestedKeySpec) {
+        if (keyUsage === undefined) {
+            this.requireDefaultableSpec(spec);
+            return;
+        }
+        if (keyUsage === spec.keyUsage) {
+            return;
+        }
+        if (requestedKeySpec === undefined) {
+            throw new SimKmsInvalidKeyUsageException(`KeyUsage '${keyUsage}' needs a KeySpec: the default ${simKmsSymmetricKeySpecName} spec is ${spec.keyUsage} only`);
+        }
+        throw new SimKmsInvalidKeyUsageException(`KeyUsage '${keyUsage}' with KeySpec '${spec.name}' is not simulated: simulated KMS creates ${spec.name} keys for ${spec.keyUsage}`);
+    }
+    /**
+     * Refuse a spec that cannot take the default key usage.
+     *
+     * `KeyUsage` is optional only for a symmetric encryption key. Every other
+     * spec requires it, so leaving it out is a request AWS refuses rather than
+     * one it fills in, and filling it in here would create a key real KMS would
+     * not have made.
+     */
+    requireDefaultableSpec(spec) {
+        if (!spec.isAsymmetric) {
+            return;
+        }
+        throw new SimKmsInvalidKeyUsageException(`KeySpec '${spec.name}' needs a KeyUsage: it is only optional for a ${simKmsSymmetricKeySpecName} key`);
+    }
 }
 //# sourceMappingURL=sim-kms-key-type.js.map

package/dist/service/kms/command/key/sim-kms-key-type.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-kms-key-type.js","sourceRoot":"","sources":["../../../../../src/service/kms/command/key/sim-kms-key-type.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,8BAA8B,EAC9B,yBAAyB,GAC1B,MAAM,8BAA8B,CAAC;AAEtC;;GAEG;AACH,MAAM,gBAAgB,GAAG,mBAAmB,CAAC;AAC7C,MAAM,mBAAmB,GAAG,iBAAiB,CAAC;AAC9C,MAAM,SAAS,GAAG,SAAS,CAAC;AAE5B;;;;;;GAMG;AACH,MAAM,OAAO,aAAa;IACxB;;OAEG;IACH,OAAO,CACL,QAA4B,EAC5B,OAA2B,EAC3B,MAA0B;QAE1B,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,mBAAmB,EAAE,CAAC;YAC/D,MAAM,IAAI,8BAA8B,CACtC,aAAa,QAAQ,6CAA6C,mBAAmB,OAAO,CAC7F,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,gBAAgB,EAAE,CAAC;YAC1D,MAAM,IAAI,8BAA8B,CACtC,YAAY,OAAO,6CAA6C,gBAAgB,OAAO,CACxF,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACjD,MAAM,IAAI,yBAAyB,CACjC,WAAW,MAAM,kEAAkE,CACpF,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"sim-kms-key-type.js","sourceRoot":"","sources":["../../../../../src/service/kms/command/key/sim-kms-key-type.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,8BAA8B,EAC9B,yBAAyB,GAC1B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,cAAc,GAEf,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,0BAA0B,GAC3B,MAAM,qCAAqC,CAAC;AAE7C,MAAM,SAAS,GAAG,SAAS,CAAC;AAE5B;;GAEG;AACH,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC;IACnD,cAAc,CAAC,cAAc;IAC7B,cAAc,CAAC,UAAU;CAC1B,CAAC,CAAC;AAEH;;;;;;;;GAQG;AACH,MAAM,OAAO,aAAa;IACxB;;;OAGG;IACH,OAAO,CACL,QAA4B,EAC5B,OAA2B,EAC3B,MAA0B;QAE1B,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,wBAAwB,CAAC,QAAQ,CAAC,CAAC;QAExC,MAAM,IAAI,GAAG,IAAI,CAAC,oBAAoB,CACpC,OAAO,IAAI,0BAA0B,CACtC,CAAC;QAEF,IAAI,CAAC,sBAAsB,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAErD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;OAMG;IACK,wBAAwB,CAAC,QAA4B;QAC3D,IAAI,QAAQ,KAAK,SAAS,IAAI,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5D,OAAO;QACT,CAAC;QAED,MAAM,IAAI,8BAA8B,CACtC,aAAa,QAAQ,6CAA6C,CAAC,GAAG,eAAe,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAC5G,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,sBAAsB,CAAC,MAA0B;QACvD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACjD,MAAM,IAAI,yBAAyB,CACjC,WAAW,MAAM,kEAAkE,CACpF,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACK,oBAAoB,CAAC,WAAmB;QAC9C,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAE7C,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,8BAA8B,CACtC,YAAY,WAAW,6CAA6C,kBAAkB,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAC3G,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;OAOG;IACK,sBAAsB,CAC5B,IAAmB,EACnB,QAA4B,EAC5B,gBAAoC;QAEpC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAElC,OAAO;QACT,CAAC;QAED,IAAI,QAAQ,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC/B,OAAO;QACT,CAAC;QAED,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,IAAI,8BAA8B,CACtC,aAAa,QAAQ,kCAAkC,0BAA0B,YAAY,IAAI,CAAC,QAAQ,OAAO,CAClH,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,8BAA8B,CACtC,aAAa,QAAQ,mBAAmB,IAAI,CAAC,IAAI,6CAA6C,IAAI,CAAC,IAAI,aAAa,IAAI,CAAC,QAAQ,EAAE,CACpI,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACK,sBAAsB,CAAC,IAAmB;QAChD,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,OAAO;QACT,CAAC;QAED,MAAM,IAAI,8BAA8B,CACtC,YAAY,IAAI,CAAC,IAAI,iDAAiD,0BAA0B,MAAM,CACvG,CAAC;IACJ,CAAC;CACF"}

package/dist/service/kms/command/sign/sign.command.d.ts

@@ -0,0 +1,69 @@
+import type { SimResponseMetadata } from "../../../aws/metadata/response-metadata.type.js";
+import type { SimKmsKeyUsage } from "../../key/spec/sim-kms-key-spec.js";
+/**
+ * Minimal structural sim KMS Sign command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/kms/command/SignCommand/
+ */
+export interface SimSignCommand {
+    readonly input: SimSignCommandInput;
+}
+export interface SimSignCommandInput {
+    readonly KeyId?: string | undefined;
+    readonly Message?: Uint8Array | undefined;
+    /**
+     * `RAW` only. A `DIGEST` message is refused, because Node cannot sign a
+     * digest that has already been computed.
+     */
+    readonly MessageType?: string | undefined;
+    readonly SigningAlgorithm?: string | undefined;
+}
+export interface SimSignCommandOutput {
+    readonly KeyId?: string | undefined;
+    readonly Signature?: Uint8Array | undefined;
+    readonly SigningAlgorithm?: string | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * Minimal structural sim KMS Verify command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/kms/command/VerifyCommand/
+ */
+export interface SimVerifyCommand {
+    readonly input: SimVerifyCommandInput;
+}
+export interface SimVerifyCommandInput {
+    readonly KeyId?: string | undefined;
+    readonly Message?: Uint8Array | undefined;
+    readonly MessageType?: string | undefined;
+    readonly Signature?: Uint8Array | undefined;
+    readonly SigningAlgorithm?: string | undefined;
+}
+export interface SimVerifyCommandOutput {
+    readonly KeyId?: string | undefined;
+    readonly SignatureValid?: boolean | undefined;
+    readonly SigningAlgorithm?: string | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * Minimal structural sim KMS GetPublicKey command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/kms/command/GetPublicKeyCommand/
+ */
+export interface SimGetPublicKeyCommand {
+    readonly input: SimGetPublicKeyCommandInput;
+}
+export interface SimGetPublicKeyCommandInput {
+    readonly KeyId?: string | undefined;
+}
+export interface SimGetPublicKeyCommandOutput {
+    readonly KeyId?: string | undefined;
+    readonly PublicKey?: Uint8Array | undefined;
+    readonly KeySpec?: string | undefined;
+    readonly CustomerMasterKeySpec?: string | undefined;
+    readonly KeyUsage?: SimKmsKeyUsage | undefined;
+    readonly EncryptionAlgorithms?: readonly string[] | undefined;
+    readonly SigningAlgorithms?: readonly string[] | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+//# sourceMappingURL=sign.command.d.ts.map