@kensio/yulin 1.12.1 → 1.13.0

package/dist/service/elbv2/target-group/sim-elbv2-target-type.js

@@ -0,0 +1,114 @@
+import { isIP } from "node:net";
+import { SimElbV2InvalidConfigurationRequestException, SimElbV2InvalidTargetException, SimElbV2UnsimulatedInputException, } from "../error/sim-elbv2.error.js";
+/**
+ * What a target group holds, and the rules that follow from it.
+ *
+ * A target type is a strategy rather than a label: the number of targets a
+ * group takes, what a target's Id has to look like, and whether the group
+ * itself carries a protocol and port all depend on it, and each subclass here
+ * is one set of those answers.
+ *
+ * Two types are simulated. `lambda` is what real ALB invokes directly, and
+ * `ip` is what a service registers itself as. `instance` is refused rather
+ * than accepted, because there are no EC2 instances here for it to mean
+ * anything about: a group created as `instance` would look configured and
+ * route nowhere.
+ */
+export class SimElbV2TargetType {
+}
+/**
+ * A function ARN, which is the only Id a `lambda` target takes.
+ */
+const functionArn = /^arn:aws:lambda:[\da-z-]+:\d{12}:function:[\w-]+$/u;
+/**
+ * A target group holding one Lambda function.
+ */
+class SimElbV2LambdaTargetType extends SimElbV2TargetType {
+    value = "lambda";
+    /**
+     * Real ELB takes exactly one function per target group, which is what makes
+     * a Lambda target group a pointer at a function rather than a pool.
+     */
+    maximumTargets = 1;
+    /**
+     * Refuse a protocol or port, which a function has no use for.
+     */
+    validateGroup(properties) {
+        if (properties.protocol !== undefined || properties.port !== undefined) {
+            throw new SimElbV2InvalidConfigurationRequestException("A lambda target group takes no Protocol or Port, because the load " +
+                "balancer invokes the function rather than connecting to it");
+        }
+    }
+    /**
+     * Refuse anything but a function ARN, and refuse a port with it.
+     */
+    validateTarget(target) {
+        if (!functionArn.test(target.id)) {
+            throw new SimElbV2InvalidTargetException(`Target '${target.id}' is not a Lambda function ARN. A lambda target ` +
+                `group registers a function by its ARN.`);
+        }
+        if (target.port !== undefined) {
+            throw new SimElbV2InvalidTargetException(`Target '${target.id}' cannot carry a Port, because a function is ` +
+                `invoked rather than connected to`);
+        }
+    }
+}
+/**
+ * A target group holding addresses, which is what a container service
+ * registers itself as.
+ */
+class SimElbV2IpTargetType extends SimElbV2TargetType {
+    value = "ip";
+    /**
+     * Far below what real ELB allows, and high enough that nothing a test
+     * registers reaches it.
+     */
+    maximumTargets = 1000;
+    /**
+     * Require the protocol and port real ELB requires of an address group.
+     */
+    validateGroup(properties) {
+        if (properties.protocol === undefined || properties.port === undefined) {
+            throw new SimElbV2InvalidConfigurationRequestException("An ip target group requires a Protocol and a Port, which is where a " +
+                "registered address is reached");
+        }
+    }
+    /**
+     * Refuse an Id that is not an address.
+     */
+    validateTarget(target) {
+        // Parsed rather than pattern matched, so that something shaped like an
+        // address but impossible, such as 999.999.999.999, is refused too.
+        if (isIP(target.id) === 0) {
+            throw new SimElbV2InvalidTargetException(`Target '${target.id}' is not an IP address. An ip target group ` +
+                `registers addresses rather than instance ids or ARNs.`);
+        }
+    }
+}
+const targetTypes = new Map([
+    ["lambda", new SimElbV2LambdaTargetType()],
+    ["ip", new SimElbV2IpTargetType()],
+]);
+/**
+ * Read the target type a request names.
+ *
+ * A request naming none is refused rather than defaulted. Real ELB defaults to
+ * `instance`, which is not simulated, so silently choosing one of the two
+ * types that are would create a group the request did not ask for.
+ */
+export function simElbV2TargetType(value) {
+    if (value === undefined) {
+        throw new SimElbV2UnsimulatedInputException("TargetType is required here. Real ELB defaults it to 'instance', " +
+            "which is not simulated, so a target group has to name 'lambda' or " +
+            "'ip' rather than be given one of them.");
+    }
+    const targetType = targetTypes.get(value);
+    if (targetType === undefined) {
+        throw new SimElbV2UnsimulatedInputException(`TargetType '${value}' is not simulated. There are no EC2 instances or ` +
+            `nested load balancers here for it to mean anything about, so it is ` +
+            `refused rather than accepted and ignored. Simulated target types are ` +
+            `${targetTypes.keys().toArray().join(" and ")}.`);
+    }
+    return targetType;
+}
+//# sourceMappingURL=sim-elbv2-target-type.js.map

package/dist/service/elbv2/target-group/sim-elbv2-target-type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-elbv2-target-type.js","sourceRoot":"","sources":["../../../../src/service/elbv2/target-group/sim-elbv2-target-type.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAEhC,OAAO,EACL,4CAA4C,EAC5C,8BAA8B,EAC9B,iCAAiC,GAClC,MAAM,6BAA6B,CAAC;AAErC;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAgB,kBAAkB;CAoBvC;AAkBD;;GAEG;AACH,MAAM,WAAW,GAAG,oDAAoD,CAAC;AAEzE;;GAEG;AACH,MAAM,wBAAyB,SAAQ,kBAAkB;IAC9B,KAAK,GAAG,QAAQ,CAAC;IAE1C;;;OAGG;IACsB,cAAc,GAAG,CAAC,CAAC;IAE5C;;OAEG;IACM,aAAa,CAAC,UAAoC;QACzD,IAAI,UAAU,CAAC,QAAQ,KAAK,SAAS,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACvE,MAAM,IAAI,4CAA4C,CACpD,oEAAoE;gBAClE,4DAA4D,CAC/D,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACM,cAAc,CAAC,MAA2B;QACjD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,8BAA8B,CACtC,WAAW,MAAM,CAAC,EAAE,kDAAkD;gBACpE,wCAAwC,CAC3C,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,8BAA8B,CACtC,WAAW,MAAM,CAAC,EAAE,+CAA+C;gBACjE,kCAAkC,CACrC,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,oBAAqB,SAAQ,kBAAkB;IAC1B,KAAK,GAAG,IAAI,CAAC;IAEtC;;;OAGG;IACsB,cAAc,GAAG,IAAI,CAAC;IAE/C;;OAEG;IACM,aAAa,CAAC,UAAoC;QACzD,IAAI,UAAU,CAAC,QAAQ,KAAK,SAAS,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACvE,MAAM,IAAI,4CAA4C,CACpD,sEAAsE;gBACpE,+BAA+B,CAClC,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACM,cAAc,CAAC,MAA2B;QACjD,uEAAuE;QACvE,mEAAmE;QACnE,IAAI,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,8BAA8B,CACtC,WAAW,MAAM,CAAC,EAAE,6CAA6C;gBAC/D,uDAAuD,CAC1D,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAED,MAAM,WAAW,GAAG,IAAI,GAAG,CAA6B;IACtD,CAAC,QAAQ,EAAE,IAAI,wBAAwB,EAAE,CAAC;IAC1C,CAAC,IAAI,EAAE,IAAI,oBAAoB,EAAE,CAAC;CACnC,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAyB;IAEzB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,iCAAiC,CACzC,mEAAmE;YACjE,oEAAoE;YACpE,wCAAwC,CAC3C,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAE1C,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,iCAAiC,CACzC,eAAe,KAAK,oDAAoD;YACtE,qEAAqE;YACrE,uEAAuE;YACvE,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CACnD,CAAC;IACJ,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/service/elbv2/target-group/sim-elbv2-target.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Minimal structural sim ELBv2 target description.
+ */
+export interface SimElbV2TargetDescription {
+    readonly Id?: string | undefined;
+    readonly Port?: number | undefined;
+    readonly AvailabilityZone?: string | undefined;
+}
+/**
+ * One target registered in a simulated target group.
+ *
+ * Identity is the address and the port together, as it is on real ELB: the
+ * same address registered on two ports is two targets, and deregistering one
+ * leaves the other.
+ */
+export declare class SimElbV2Target {
+    readonly id: string;
+    readonly port: number | undefined;
+    readonly availabilityZone: string | undefined;
+    private constructor();
+    /**
+     * Read a target a request names, refusing one with no Id.
+     *
+     * A target naming no port takes the target group's, which is what real ELB
+     * does, so a group listening on one port needs the port named once.
+     */
+    static read(target: SimElbV2TargetDescription, groupPort: number | undefined): SimElbV2Target;
+    /**
+     * How this target is told apart from the others in its group.
+     */
+    get key(): string;
+    /**
+     * Report this target in the shape the SDK reads it back in.
+     */
+    view(): SimElbV2TargetDescription;
+}
+//# sourceMappingURL=sim-elbv2-target.d.ts.map

package/dist/service/elbv2/target-group/sim-elbv2-target.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-elbv2-target.d.ts","sourceRoot":"","sources":["../../../../src/service/elbv2/target-group/sim-elbv2-target.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChD;AAED;;;;;;GAMG;AACH,qBAAa,cAAc;IACzB,SAAgB,EAAE,EAAE,MAAM,CAAC;IAC3B,SAAgB,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,SAAgB,gBAAgB,EAAE,MAAM,GAAG,SAAS,CAAC;IAErD,OAAO,eAQN;IAED;;;;;OAKG;IACH,MAAM,CAAC,IAAI,CACT,MAAM,EAAE,yBAAyB,EACjC,SAAS,EAAE,MAAM,GAAG,SAAS,GAC5B,cAAc,CAUhB;IAED;;OAEG;IACH,IAAI,GAAG,IAAI,MAAM,CAEhB;IAED;;OAEG;IACH,IAAI,IAAI,yBAAyB,CAMhC;CACF"}

package/dist/service/elbv2/target-group/sim-elbv2-target.js

@@ -0,0 +1,47 @@
+import { SimElbV2ValidationError } from "../error/sim-elbv2.error.js";
+/**
+ * One target registered in a simulated target group.
+ *
+ * Identity is the address and the port together, as it is on real ELB: the
+ * same address registered on two ports is two targets, and deregistering one
+ * leaves the other.
+ */
+export class SimElbV2Target {
+    id;
+    port;
+    availabilityZone;
+    constructor(id, port, availabilityZone) {
+        this.id = id;
+        this.port = port;
+        this.availabilityZone = availabilityZone;
+    }
+    /**
+     * Read a target a request names, refusing one with no Id.
+     *
+     * A target naming no port takes the target group's, which is what real ELB
+     * does, so a group listening on one port needs the port named once.
+     */
+    static read(target, groupPort) {
+        if (target.Id === undefined || target.Id === "") {
+            throw new SimElbV2ValidationError("Targets member requires an Id");
+        }
+        return new SimElbV2Target(target.Id, target.Port ?? groupPort, target.AvailabilityZone);
+    }
+    /**
+     * How this target is told apart from the others in its group.
+     */
+    get key() {
+        return `${this.id}:${String(this.port ?? "")}`;
+    }
+    /**
+     * Report this target in the shape the SDK reads it back in.
+     */
+    view() {
+        return {
+            Id: this.id,
+            Port: this.port,
+            AvailabilityZone: this.availabilityZone,
+        };
+    }
+}
+//# sourceMappingURL=sim-elbv2-target.js.map

package/dist/service/elbv2/target-group/sim-elbv2-target.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-elbv2-target.js","sourceRoot":"","sources":["../../../../src/service/elbv2/target-group/sim-elbv2-target.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAWtE;;;;;;GAMG;AACH,MAAM,OAAO,cAAc;IACT,EAAE,CAAS;IACX,IAAI,CAAqB;IACzB,gBAAgB,CAAqB;IAErD,YACE,EAAU,EACV,IAAwB,EACxB,gBAAoC;QAEpC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;IAC3C,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,IAAI,CACT,MAAiC,EACjC,SAA6B;QAE7B,IAAI,MAAM,CAAC,EAAE,KAAK,SAAS,IAAI,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;YAChD,MAAM,IAAI,uBAAuB,CAAC,+BAA+B,CAAC,CAAC;QACrE,CAAC;QAED,OAAO,IAAI,cAAc,CACvB,MAAM,CAAC,EAAE,EACT,MAAM,CAAC,IAAI,IAAI,SAAS,EACxB,MAAM,CAAC,gBAAgB,CACxB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,IAAI,GAAG;QACL,OAAO,GAAG,IAAI,CAAC,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;IACjD,CAAC;IAED;;OAEG;IACH,IAAI;QACF,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;SACxC,CAAC;IACJ,CAAC;CACF"}

package/dist/service/kms/command/key/sim-kms-key-commands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-kms-key-commands.d.ts","sourceRoot":"","sources":["../../../../../src/service/kms/command/key/sim-kms-key-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAGzE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC/E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,KAAK,EACV,mBAAmB,EACnB,yBAAyB,EACzB,qBAAqB,EACrB,2BAA2B,EAC5B,MAAM,kBAAkB,CAAC;AAE1B,UAAU,2BAA2B;IACnC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;IACtC,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;IACtC,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAC;CAC1C;AAED;;GAEG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAiB;IACtC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmB;IAC9C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmB;IAC9C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAwB;IACjD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAuB;IAC/C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA8B;IAE7D,YAAY,UAAU,EAAE,2BAA2B,EAKlD;IAED;;;;;;OAMG;IACH,MAAM,CACJ,OAAO,EAAE,mBAAmB,EAC5B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,yBAAyB,CAgB3B;IAED;;OAEG;IACH,QAAQ,CACN,OAAO,EAAE,qBAAqB,EAC9B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,2BAA2B,CAK7B;CACF"}
+{"version":3,"file":"sim-kms-key-commands.d.ts","sourceRoot":"","sources":["../../../../../src/service/kms/command/key/sim-kms-key-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAGzE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC/E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,KAAK,EACV,mBAAmB,EACnB,yBAAyB,EACzB,qBAAqB,EACrB,2BAA2B,EAC5B,MAAM,kBAAkB,CAAC;AAE1B,UAAU,2BAA2B;IACnC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;IACtC,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;IACtC,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAC;CAC1C;AAED;;GAEG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAiB;IACtC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmB;IAC9C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmB;IAC9C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAwB;IACjD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAuB;IAC/C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA8B;IAE7D,YAAY,UAAU,EAAE,2BAA2B,EAKlD;IAED;;;;;;OAMG;IACH,MAAM,CACJ,OAAO,EAAE,mBAAmB,EAC5B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,yBAAyB,CAiB3B;IAED;;OAEG;IACH,QAAQ,CACN,OAAO,EAAE,qBAAqB,EAC9B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,2BAA2B,CAK7B;CACF"}

package/dist/service/kms/command/key/sim-kms-key-commands.js

@@ -24,11 +24,12 @@ export class SimKmsKeyCommands {
      * resource-level permissions for the same reason.
      */
     create(command, options) {
-        this.keyType.require(command.input.KeyUsage, command.input.KeySpec, command.input.Origin);
+        const keySpec = this.keyType.require(command.input.KeyUsage, command.input.KeySpec, command.input.Origin);
         this.authorizer.authorizeAccount("kms:CreateKey", options);
         const key = this.keyFactory.make({
             description: command.input.Description,
             policy: this.policyDocument.parseOptional(command.input.Policy),
+            keySpec,
         });
         this.keys.add(key);
         return { $metadata: {}, KeyMetadata: this.metadata.describe(key) };

package/dist/service/kms/command/key/sim-kms-key-commands.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-kms-key-commands.js","sourceRoot":"","sources":["../../../../../src/service/kms/command/key/sim-kms-key-commands.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAkBtD;;GAEG;AACH,MAAM,OAAO,iBAAiB;IACX,IAAI,CAAiB;IACrB,UAAU,CAAmB;IAC7B,UAAU,CAAmB;IAC7B,QAAQ,CAAwB;IAChC,OAAO,GAAG,IAAI,aAAa,EAAE,CAAC;IAC9B,cAAc,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAE7D,YAAY,UAAuC;QACjD,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;QAC5B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;IACtC,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CACJ,OAA4B,EAC5B,OAA8B;QAE9B,IAAI,CAAC,OAAO,CAAC,OAAO,CAClB,OAAO,CAAC,KAAK,CAAC,QAAQ,EACtB,OAAO,CAAC,KAAK,CAAC,OAAO,EACrB,OAAO,CAAC,KAAK,CAAC,MAAM,CACrB,CAAC;QACF,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;QAE3D,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAC/B,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,WAAW;YACtC,MAAM,EAAE,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;SAChE,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEnB,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;IACrE,CAAC;IAED;;OAEG;IACH,QAAQ,CACN,OAA8B,EAC9B,OAA8B;QAE9B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,iBAAiB,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;QAE9D,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;IACrE,CAAC;CACF"}
+{"version":3,"file":"sim-kms-key-commands.js","sourceRoot":"","sources":["../../../../../src/service/kms/command/key/sim-kms-key-commands.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAkBtD;;GAEG;AACH,MAAM,OAAO,iBAAiB;IACX,IAAI,CAAiB;IACrB,UAAU,CAAmB;IAC7B,UAAU,CAAmB;IAC7B,QAAQ,CAAwB;IAChC,OAAO,GAAG,IAAI,aAAa,EAAE,CAAC;IAC9B,cAAc,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAE7D,YAAY,UAAuC;QACjD,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;QAC5B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;IACtC,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CACJ,OAA4B,EAC5B,OAA8B;QAE9B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAClC,OAAO,CAAC,KAAK,CAAC,QAAQ,EACtB,OAAO,CAAC,KAAK,CAAC,OAAO,EACrB,OAAO,CAAC,KAAK,CAAC,MAAM,CACrB,CAAC;QACF,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;QAE3D,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAC/B,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,WAAW;YACtC,MAAM,EAAE,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;YAC/D,OAAO;SACR,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEnB,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;IACrE,CAAC;IAED;;OAEG;IACH,QAAQ,CACN,OAA8B,EAC9B,OAA8B;QAE9B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,iBAAiB,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;QAE9D,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;IACrE,CAAC;CACF"}

package/dist/service/kms/command/key/sim-kms-key-type.d.ts

@@ -1,14 +1,52 @@
+import { type SimKmsKeySpec } from "../../key/spec/sim-kms-key-spec.js";
 /**
- * Checks a requested key type against what this simulation models.
+ * Resolves the key spec a CreateKey request asks for.
  *
- * Asymmetric keys, HMAC keys and imported material all behave differently
- * enough that pretending a symmetric key is one of them would make a passing
- * test meaningless, so an unmodelled type is refused rather than substituted.
+ * A key spec and key usage pair says what the key is, so a pair this
+ * simulation does not model is refused rather than substituted: asymmetric
+ * encryption, HMAC and key agreement keys all behave differently enough that a
+ * signing key or a symmetric one standing in for them would make a passing
+ * test meaningless. Imported key material is refused for the same reason.
  */
 export declare class SimKmsKeyType {
     /**
-     * Refuse a key type this simulation does not model.
+     * Resolve a requested key type, or refuse one this simulation does not
+     * model.
      */
-    require(keyUsage: string | undefined, keySpec: string | undefined, origin: string | undefined): void;
+    require(keyUsage: string | undefined, keySpec: string | undefined, origin: string | undefined): SimKmsKeySpec;
+    /**
+     * Refuse a key usage no simulated key spec has.
+     *
+     * HMAC and key agreement keys are the two this rules out. Neither has a spec
+     * here at all, so saying the usage is unsimulated is more use than sending
+     * the caller looking for a spec that would allow it.
+     */
+    private requireSimulatedKeyUsage;
+    /**
+     * Refuse key material this simulation does not generate itself.
+     */
+    private requireSimulatedOrigin;
+    /**
+     * Resolve a key spec name, or refuse one this simulation does not create.
+     */
+    private requireSimulatedSpec;
+    /**
+     * Refuse a key usage the resolved spec does not have here.
+     *
+     * Real KMS offers the RSA specs for encryption as well as signing, and
+     * offers no spec at all for a `SIGN_VERIFY` key that names none. Both of
+     * those come out here, and the two need different explanations, so the
+     * refusal says which case it is rather than repeating the pair back.
+     */
+    private requireSpecAllowsUsage;
+    /**
+     * Refuse a spec that cannot take the default key usage.
+     *
+     * `KeyUsage` is optional only for a symmetric encryption key. Every other
+     * spec requires it, so leaving it out is a request AWS refuses rather than
+     * one it fills in, and filling it in here would create a key real KMS would
+     * not have made.
+     */
+    private requireDefaultableSpec;
 }
 //# sourceMappingURL=sim-kms-key-type.d.ts.map

package/dist/service/kms/command/key/sim-kms-key-type.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-kms-key-type.d.ts","sourceRoot":"","sources":["../../../../../src/service/kms/command/key/sim-kms-key-type.ts"],"names":[],"mappings":"AAYA;;;;;;GAMG;AACH,qBAAa,aAAa;IACxB;;OAEG;IACH,OAAO,CACL,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,MAAM,EAAE,MAAM,GAAG,SAAS,GACzB,IAAI,CAkBN;CACF"}
+{"version":3,"file":"sim-kms-key-type.d.ts","sourceRoot":"","sources":["../../../../../src/service/kms/command/key/sim-kms-key-type.ts"],"names":[],"mappings":"AAIA,OAAO,EAEL,KAAK,aAAa,EACnB,MAAM,oCAAoC,CAAC;AAiB5C;;;;;;;;GAQG;AACH,qBAAa,aAAa;IACxB;;;OAGG;IACH,OAAO,CACL,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,MAAM,EAAE,MAAM,GAAG,SAAS,GACzB,aAAa,CAWf;IAED;;;;;;OAMG;IACH,OAAO,CAAC,wBAAwB;IAUhC;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAQ9B;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAY5B;;;;;;;OAOG;IACH,OAAO,CAAC,sBAAsB;IA0B9B;;;;;;;OAOG;IACH,OAAO,CAAC,sBAAsB;CAS/B"}

package/dist/service/kms/command/key/sim-kms-key-type.js

@@ -1,31 +1,100 @@
 import { SimKmsInvalidKeyUsageException, SimKmsValidationException, } from "../../error/sim-kms.error.js";
+import { SimKmsKeyUsage, } from "../../key/spec/sim-kms-key-spec.js";
+import { simKmsKeySpecNames, simKmsKeySpecs, simKmsSymmetricKeySpecName, } from "../../key/spec/sim-kms-key-specs.js";
+const kmsOrigin = "AWS_KMS";
 /**
- * The only key type this simulation models.
+ * The key usages this simulation has key specs for.
  */
-const symmetricKeySpec = "SYMMETRIC_DEFAULT";
-const encryptDecryptUsage = "ENCRYPT_DECRYPT";
-const kmsOrigin = "AWS_KMS";
+const simKmsKeyUsages = new Set([
+    SimKmsKeyUsage.EncryptDecrypt,
+    SimKmsKeyUsage.SignVerify,
+]);
 /**
- * Checks a requested key type against what this simulation models.
+ * Resolves the key spec a CreateKey request asks for.
  *
- * Asymmetric keys, HMAC keys and imported material all behave differently
- * enough that pretending a symmetric key is one of them would make a passing
- * test meaningless, so an unmodelled type is refused rather than substituted.
+ * A key spec and key usage pair says what the key is, so a pair this
+ * simulation does not model is refused rather than substituted: asymmetric
+ * encryption, HMAC and key agreement keys all behave differently enough that a
+ * signing key or a symmetric one standing in for them would make a passing
+ * test meaningless. Imported key material is refused for the same reason.
  */
 export class SimKmsKeyType {
     /**
-     * Refuse a key type this simulation does not model.
+     * Resolve a requested key type, or refuse one this simulation does not
+     * model.
      */
     require(keyUsage, keySpec, origin) {
-        if (keyUsage !== undefined && keyUsage !== encryptDecryptUsage) {
-            throw new SimKmsInvalidKeyUsageException(`KeyUsage '${keyUsage}' is not simulated: simulated KMS creates ${encryptDecryptUsage} keys`);
-        }
-        if (keySpec !== undefined && keySpec !== symmetricKeySpec) {
-            throw new SimKmsInvalidKeyUsageException(`KeySpec '${keySpec}' is not simulated: simulated KMS creates ${symmetricKeySpec} keys`);
+        this.requireSimulatedOrigin(origin);
+        this.requireSimulatedKeyUsage(keyUsage);
+        const spec = this.requireSimulatedSpec(keySpec ?? simKmsSymmetricKeySpecName);
+        this.requireSpecAllowsUsage(spec, keyUsage, keySpec);
+        return spec;
+    }
+    /**
+     * Refuse a key usage no simulated key spec has.
+     *
+     * HMAC and key agreement keys are the two this rules out. Neither has a spec
+     * here at all, so saying the usage is unsimulated is more use than sending
+     * the caller looking for a spec that would allow it.
+     */
+    requireSimulatedKeyUsage(keyUsage) {
+        if (keyUsage === undefined || simKmsKeyUsages.has(keyUsage)) {
+            return;
         }
+        throw new SimKmsInvalidKeyUsageException(`KeyUsage '${keyUsage}' is not simulated: simulated KMS creates ${[...simKmsKeyUsages].join(" and ")} keys`);
+    }
+    /**
+     * Refuse key material this simulation does not generate itself.
+     */
+    requireSimulatedOrigin(origin) {
         if (origin !== undefined && origin !== kmsOrigin) {
             throw new SimKmsValidationException(`Origin '${origin}' is not simulated: simulated KMS generates its own key material`);
         }
     }
+    /**
+     * Resolve a key spec name, or refuse one this simulation does not create.
+     */
+    requireSimulatedSpec(keySpecName) {
+        const spec = simKmsKeySpecs.get(keySpecName);
+        if (spec === undefined) {
+            throw new SimKmsInvalidKeyUsageException(`KeySpec '${keySpecName}' is not simulated: simulated KMS creates ${simKmsKeySpecNames().join(", ")} keys`);
+        }
+        return spec;
+    }
+    /**
+     * Refuse a key usage the resolved spec does not have here.
+     *
+     * Real KMS offers the RSA specs for encryption as well as signing, and
+     * offers no spec at all for a `SIGN_VERIFY` key that names none. Both of
+     * those come out here, and the two need different explanations, so the
+     * refusal says which case it is rather than repeating the pair back.
+     */
+    requireSpecAllowsUsage(spec, keyUsage, requestedKeySpec) {
+        if (keyUsage === undefined) {
+            this.requireDefaultableSpec(spec);
+            return;
+        }
+        if (keyUsage === spec.keyUsage) {
+            return;
+        }
+        if (requestedKeySpec === undefined) {
+            throw new SimKmsInvalidKeyUsageException(`KeyUsage '${keyUsage}' needs a KeySpec: the default ${simKmsSymmetricKeySpecName} spec is ${spec.keyUsage} only`);
+        }
+        throw new SimKmsInvalidKeyUsageException(`KeyUsage '${keyUsage}' with KeySpec '${spec.name}' is not simulated: simulated KMS creates ${spec.name} keys for ${spec.keyUsage}`);
+    }
+    /**
+     * Refuse a spec that cannot take the default key usage.
+     *
+     * `KeyUsage` is optional only for a symmetric encryption key. Every other
+     * spec requires it, so leaving it out is a request AWS refuses rather than
+     * one it fills in, and filling it in here would create a key real KMS would
+     * not have made.
+     */
+    requireDefaultableSpec(spec) {
+        if (!spec.isAsymmetric) {
+            return;
+        }
+        throw new SimKmsInvalidKeyUsageException(`KeySpec '${spec.name}' needs a KeyUsage: it is only optional for a ${simKmsSymmetricKeySpecName} key`);
+    }
 }
 //# sourceMappingURL=sim-kms-key-type.js.map

package/dist/service/kms/command/key/sim-kms-key-type.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-kms-key-type.js","sourceRoot":"","sources":["../../../../../src/service/kms/command/key/sim-kms-key-type.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,8BAA8B,EAC9B,yBAAyB,GAC1B,MAAM,8BAA8B,CAAC;AAEtC;;GAEG;AACH,MAAM,gBAAgB,GAAG,mBAAmB,CAAC;AAC7C,MAAM,mBAAmB,GAAG,iBAAiB,CAAC;AAC9C,MAAM,SAAS,GAAG,SAAS,CAAC;AAE5B;;;;;;GAMG;AACH,MAAM,OAAO,aAAa;IACxB;;OAEG;IACH,OAAO,CACL,QAA4B,EAC5B,OAA2B,EAC3B,MAA0B;QAE1B,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,mBAAmB,EAAE,CAAC;YAC/D,MAAM,IAAI,8BAA8B,CACtC,aAAa,QAAQ,6CAA6C,mBAAmB,OAAO,CAC7F,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,gBAAgB,EAAE,CAAC;YAC1D,MAAM,IAAI,8BAA8B,CACtC,YAAY,OAAO,6CAA6C,gBAAgB,OAAO,CACxF,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACjD,MAAM,IAAI,yBAAyB,CACjC,WAAW,MAAM,kEAAkE,CACpF,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"sim-kms-key-type.js","sourceRoot":"","sources":["../../../../../src/service/kms/command/key/sim-kms-key-type.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,8BAA8B,EAC9B,yBAAyB,GAC1B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,cAAc,GAEf,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,0BAA0B,GAC3B,MAAM,qCAAqC,CAAC;AAE7C,MAAM,SAAS,GAAG,SAAS,CAAC;AAE5B;;GAEG;AACH,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC;IACnD,cAAc,CAAC,cAAc;IAC7B,cAAc,CAAC,UAAU;CAC1B,CAAC,CAAC;AAEH;;;;;;;;GAQG;AACH,MAAM,OAAO,aAAa;IACxB;;;OAGG;IACH,OAAO,CACL,QAA4B,EAC5B,OAA2B,EAC3B,MAA0B;QAE1B,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,wBAAwB,CAAC,QAAQ,CAAC,CAAC;QAExC,MAAM,IAAI,GAAG,IAAI,CAAC,oBAAoB,CACpC,OAAO,IAAI,0BAA0B,CACtC,CAAC;QAEF,IAAI,CAAC,sBAAsB,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAErD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;OAMG;IACK,wBAAwB,CAAC,QAA4B;QAC3D,IAAI,QAAQ,KAAK,SAAS,IAAI,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5D,OAAO;QACT,CAAC;QAED,MAAM,IAAI,8BAA8B,CACtC,aAAa,QAAQ,6CAA6C,CAAC,GAAG,eAAe,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAC5G,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,sBAAsB,CAAC,MAA0B;QACvD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACjD,MAAM,IAAI,yBAAyB,CACjC,WAAW,MAAM,kEAAkE,CACpF,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACK,oBAAoB,CAAC,WAAmB;QAC9C,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAE7C,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,8BAA8B,CACtC,YAAY,WAAW,6CAA6C,kBAAkB,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAC3G,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;OAOG;IACK,sBAAsB,CAC5B,IAAmB,EACnB,QAA4B,EAC5B,gBAAoC;QAEpC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAElC,OAAO;QACT,CAAC;QAED,IAAI,QAAQ,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC/B,OAAO;QACT,CAAC;QAED,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,IAAI,8BAA8B,CACtC,aAAa,QAAQ,kCAAkC,0BAA0B,YAAY,IAAI,CAAC,QAAQ,OAAO,CAClH,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,8BAA8B,CACtC,aAAa,QAAQ,mBAAmB,IAAI,CAAC,IAAI,6CAA6C,IAAI,CAAC,IAAI,aAAa,IAAI,CAAC,QAAQ,EAAE,CACpI,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACK,sBAAsB,CAAC,IAAmB;QAChD,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,OAAO;QACT,CAAC;QAED,MAAM,IAAI,8BAA8B,CACtC,YAAY,IAAI,CAAC,IAAI,iDAAiD,0BAA0B,MAAM,CACvG,CAAC;IACJ,CAAC;CACF"}

package/dist/service/kms/command/sign/sign.command.d.ts

@@ -0,0 +1,69 @@
+import type { SimResponseMetadata } from "../../../aws/metadata/response-metadata.type.js";
+import type { SimKmsKeyUsage } from "../../key/spec/sim-kms-key-spec.js";
+/**
+ * Minimal structural sim KMS Sign command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/kms/command/SignCommand/
+ */
+export interface SimSignCommand {
+    readonly input: SimSignCommandInput;
+}
+export interface SimSignCommandInput {
+    readonly KeyId?: string | undefined;
+    readonly Message?: Uint8Array | undefined;
+    /**
+     * `RAW` only. A `DIGEST` message is refused, because Node cannot sign a
+     * digest that has already been computed.
+     */
+    readonly MessageType?: string | undefined;
+    readonly SigningAlgorithm?: string | undefined;
+}
+export interface SimSignCommandOutput {
+    readonly KeyId?: string | undefined;
+    readonly Signature?: Uint8Array | undefined;
+    readonly SigningAlgorithm?: string | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * Minimal structural sim KMS Verify command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/kms/command/VerifyCommand/
+ */
+export interface SimVerifyCommand {
+    readonly input: SimVerifyCommandInput;
+}
+export interface SimVerifyCommandInput {
+    readonly KeyId?: string | undefined;
+    readonly Message?: Uint8Array | undefined;
+    readonly MessageType?: string | undefined;
+    readonly Signature?: Uint8Array | undefined;
+    readonly SigningAlgorithm?: string | undefined;
+}
+export interface SimVerifyCommandOutput {
+    readonly KeyId?: string | undefined;
+    readonly SignatureValid?: boolean | undefined;
+    readonly SigningAlgorithm?: string | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * Minimal structural sim KMS GetPublicKey command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/kms/command/GetPublicKeyCommand/
+ */
+export interface SimGetPublicKeyCommand {
+    readonly input: SimGetPublicKeyCommandInput;
+}
+export interface SimGetPublicKeyCommandInput {
+    readonly KeyId?: string | undefined;
+}
+export interface SimGetPublicKeyCommandOutput {
+    readonly KeyId?: string | undefined;
+    readonly PublicKey?: Uint8Array | undefined;
+    readonly KeySpec?: string | undefined;
+    readonly CustomerMasterKeySpec?: string | undefined;
+    readonly KeyUsage?: SimKmsKeyUsage | undefined;
+    readonly EncryptionAlgorithms?: readonly string[] | undefined;
+    readonly SigningAlgorithms?: readonly string[] | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+//# sourceMappingURL=sign.command.d.ts.map

package/dist/service/kms/command/sign/sign.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/kms/command/sign/sign.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAEzE;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;CACrC;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,OAAO,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IAE1C;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAE1C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChD;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,SAAS,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAC;CACvC;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,OAAO,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,SAAS,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChD;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,2BAA2B,CAAC;CAC7C;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACrC;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,SAAS,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpD,QAAQ,CAAC,QAAQ,CAAC,EAAE,cAAc,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,oBAAoB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAC9D,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAC3D,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC"}

package/dist/service/kms/command/sign/sign.command.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sign.command.js.map

package/dist/service/kms/command/sign/sign.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign.command.js","sourceRoot":"","sources":["../../../../../src/service/kms/command/sign/sign.command.ts"],"names":[],"mappings":""}

package/dist/service/kms/command/sign/sim-kms-sign-commands.d.ts

@@ -0,0 +1,40 @@
+import type { SimKmsKeyStore } from "../../key/sim-kms-key-store.js";
+import type { SimKmsAuthorizer } from "../authorize/sim-kms-authorizer.js";
+import type { SimKmsRequestOptions } from "../sim-kms-request-options.js";
+import type { SimGetPublicKeyCommand, SimGetPublicKeyCommandOutput, SimSignCommand, SimSignCommandOutput, SimVerifyCommand, SimVerifyCommandOutput } from "./sign.command.js";
+interface SimKmsSignCommandsProperties {
+    readonly keys: SimKmsKeyStore;
+    readonly authorizer: SimKmsAuthorizer;
+}
+/**
+ * The Sign, Verify and GetPublicKey commands of one simulated KMS scope.
+ *
+ * The three go together: they are the operations an asymmetric signing key
+ * answers, they share the key store and the authorizer, and each of them has
+ * to refuse a key whose usage is not SIGN_VERIFY.
+ */
+export declare class SimKmsSignCommands {
+    private readonly keys;
+    private readonly authorizer;
+    private readonly message;
+    constructor(properties: SimKmsSignCommandsProperties);
+    /**
+     * Sign a message under a key.
+     */
+    sign(command: SimSignCommand, options?: SimKmsRequestOptions): SimSignCommandOutput;
+    /**
+     * Check a signature against a message and a key.
+     *
+     * A signature that does not check out fails rather than returning false.
+     * That is what real KMS does, so a caller that only handles the exception is
+     * not left believing an unverified signature was good.
+     */
+    verify(command: SimVerifyCommand, options?: SimKmsRequestOptions): SimVerifyCommandOutput;
+    /**
+     * Get a key's public key.
+     */
+    getPublicKey(command: SimGetPublicKeyCommand, options?: SimKmsRequestOptions): SimGetPublicKeyCommandOutput;
+    private authorizedKey;
+}
+export {};
+//# sourceMappingURL=sim-kms-sign-commands.d.ts.map

package/dist/service/kms/command/sign/sim-kms-sign-commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-kms-sign-commands.d.ts","sourceRoot":"","sources":["../../../../../src/service/kms/command/sign/sim-kms-sign-commands.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAE1E,OAAO,KAAK,EACV,sBAAsB,EACtB,4BAA4B,EAC5B,cAAc,EACd,oBAAoB,EACpB,gBAAgB,EAChB,sBAAsB,EACvB,MAAM,mBAAmB,CAAC;AAE3B,UAAU,4BAA4B;IACpC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;CACvC;AAED;;;;;;GAMG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAiB;IACtC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmB;IAC9C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6B;IAErD,YAAY,UAAU,EAAE,4BAA4B,EAGnD;IAED;;OAEG;IACH,IAAI,CACF,OAAO,EAAE,cAAc,EACvB,OAAO,CAAC,EAAE,oBAAoB,GAC7B,oBAAoB,CAgBtB;IAED;;;;;;OAMG;IACH,MAAM,CACJ,OAAO,EAAE,gBAAgB,EACzB,OAAO,CAAC,EAAE,oBAAoB,GAC7B,sBAAsB,CAuBxB;IAED;;OAEG;IACH,YAAY,CACV,OAAO,EAAE,sBAAsB,EAC/B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,4BAA4B,CAiB9B;IAED,OAAO,CAAC,aAAa;CAUtB"}