@kensio/yulin 1.13.0 → 1.14.0

package/dist/service/elbv2/listener/sim-elbv2-listener-security.d.ts

@@ -1,4 +1,3 @@
-import type { SimElbV2Certificate } from "../command/sim-elbv2-shared.command.js";
 /**
  * What a listener's protocol decides about its TLS settings.
  *
@@ -8,13 +7,43 @@ import type { SimElbV2Certificate } from "../command/sim-elbv2-shared.command.js
  */
 /**
  * The security policy a listener holds, which is none unless it is HTTPS.
+ *
+ * The policy is held and reported and nothing acts on it, since no handshake
+ * is performed here for it to decide anything about.
  */
 export declare function simElbV2ListenerSslPolicy(protocol: string, sslPolicy: string | undefined): string | undefined;
 /**
- * Refuse an HTTPS listener with no certificate.
+ * What a request names about a listener's default certificate, and what the
+ * listener already held.
+ */
+export interface SimElbV2ListenerCertificateChoice {
+    readonly protocol: string;
+    /** The certificate this request named, if it named one. */
+    readonly requested: string | undefined;
+    /** The certificate the listener already had, on a modify. */
+    readonly held?: string | undefined;
+}
+/**
+ * The default certificate a listener holds, which is none unless it is HTTPS.
+ *
+ * An HTTPS listener with no certificate could not complete a handshake, so real
+ * ELB refuses to create one and so does this. A request naming a certificate
+ * for a listener that speaks no TLS is refused for the other half of the same
+ * reason.
+ *
+ * What the request named and what the listener already had are separate,
+ * because the two lead to different answers on the same protocol: a listener
+ * moved to HTTP drops the certificate it was carrying, where a request that
+ * moves it to HTTP and names a certificate in the same breath contradicts
+ * itself and is refused.
+ */
+export declare function simElbV2ListenerCertificate(choice: SimElbV2ListenerCertificateChoice): string | undefined;
+/**
+ * Refuse a certificate on a listener that speaks no TLS.
  *
- * One could not complete a handshake, so real ELB refuses to create it and so
- * does this.
+ * Real ELB has nothing for an HTTP listener to do with a certificate, so it
+ * refuses one rather than holding it, and a listener that looks configured for
+ * HTTPS while answering plain HTTP is exactly the state worth refusing.
  */
-export declare function requireSimElbV2ListenerCertificate(protocol: string, certificates: readonly SimElbV2Certificate[]): void;
+export declare function requireSimElbV2CertificateProtocol(protocol: string): void;
 //# sourceMappingURL=sim-elbv2-listener-security.d.ts.map

package/dist/service/elbv2/listener/sim-elbv2-listener-security.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-elbv2-listener-security.d.ts","sourceRoot":"","sources":["../../../../src/service/elbv2/listener/sim-elbv2-listener-security.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAQlF;;;;;;GAMG;AAEH;;GAEG;AACH,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,GAAG,SAAS,GAC5B,MAAM,GAAG,SAAS,CAMpB;AAED;;;;;GAKG;AACH,wBAAgB,kCAAkC,CAChD,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,SAAS,mBAAmB,EAAE,GAC3C,IAAI,CAMN"}
+{"version":3,"file":"sim-elbv2-listener-security.d.ts","sourceRoot":"","sources":["../../../../src/service/elbv2/listener/sim-elbv2-listener-security.ts"],"names":[],"mappings":"AAOA;;;;;;GAMG;AAEH;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,GAAG,SAAS,GAC5B,MAAM,GAAG,SAAS,CAMpB;AAED;;;GAGG;AACH,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,2DAA2D;IAC3D,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,6DAA6D;IAC7D,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,iCAAiC,GACxC,MAAM,GAAG,SAAS,CAkBpB;AAED;;;;;;GAMG;AACH,wBAAgB,kCAAkC,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAMzE"}

package/dist/service/elbv2/listener/sim-elbv2-listener-security.js

@@ -12,6 +12,9 @@ const defaultSslPolicy = "ELBSecurityPolicy-2016-08";
  */
 /**
  * The security policy a listener holds, which is none unless it is HTTPS.
+ *
+ * The policy is held and reported and nothing acts on it, since no handshake
+ * is performed here for it to decide anything about.
  */
 export function simElbV2ListenerSslPolicy(protocol, sslPolicy) {
     if (protocol !== "HTTPS") {
@@ -20,14 +23,42 @@ export function simElbV2ListenerSslPolicy(protocol, sslPolicy) {
     return sslPolicy ?? defaultSslPolicy;
 }
 /**
- * Refuse an HTTPS listener with no certificate.
+ * The default certificate a listener holds, which is none unless it is HTTPS.
+ *
+ * An HTTPS listener with no certificate could not complete a handshake, so real
+ * ELB refuses to create one and so does this. A request naming a certificate
+ * for a listener that speaks no TLS is refused for the other half of the same
+ * reason.
  *
- * One could not complete a handshake, so real ELB refuses to create it and so
- * does this.
+ * What the request named and what the listener already had are separate,
+ * because the two lead to different answers on the same protocol: a listener
+ * moved to HTTP drops the certificate it was carrying, where a request that
+ * moves it to HTTP and names a certificate in the same breath contradicts
+ * itself and is refused.
  */
-export function requireSimElbV2ListenerCertificate(protocol, certificates) {
-    if (protocol === "HTTPS" && certificates.length === 0) {
+export function simElbV2ListenerCertificate(choice) {
+    if (choice.requested !== undefined) {
+        requireSimElbV2CertificateProtocol(choice.protocol);
+    }
+    if (choice.protocol !== "HTTPS") {
+        return undefined;
+    }
+    const certificateArn = choice.requested ?? choice.held;
+    if (certificateArn === undefined) {
         throw new SimElbV2InvalidConfigurationRequestException("An HTTPS listener requires at least one certificate");
     }
+    return certificateArn;
+}
+/**
+ * Refuse a certificate on a listener that speaks no TLS.
+ *
+ * Real ELB has nothing for an HTTP listener to do with a certificate, so it
+ * refuses one rather than holding it, and a listener that looks configured for
+ * HTTPS while answering plain HTTP is exactly the state worth refusing.
+ */
+export function requireSimElbV2CertificateProtocol(protocol) {
+    if (protocol !== "HTTPS") {
+        throw new SimElbV2InvalidConfigurationRequestException(`Certificates go on an HTTPS listener, and this one speaks ${protocol}`);
+    }
 }
 //# sourceMappingURL=sim-elbv2-listener-security.js.map

package/dist/service/elbv2/listener/sim-elbv2-listener-security.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-elbv2-listener-security.js","sourceRoot":"","sources":["../../../../src/service/elbv2/listener/sim-elbv2-listener-security.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,4CAA4C,EAAE,MAAM,6BAA6B,CAAC;AAE3F;;GAEG;AACH,MAAM,gBAAgB,GAAG,2BAA2B,CAAC;AAErD;;;;;;GAMG;AAEH;;GAEG;AACH,MAAM,UAAU,yBAAyB,CACvC,QAAgB,EAChB,SAA6B;IAE7B,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,SAAS,IAAI,gBAAgB,CAAC;AACvC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kCAAkC,CAChD,QAAgB,EAChB,YAA4C;IAE5C,IAAI,QAAQ,KAAK,OAAO,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,4CAA4C,CACpD,qDAAqD,CACtD,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"sim-elbv2-listener-security.js","sourceRoot":"","sources":["../../../../src/service/elbv2/listener/sim-elbv2-listener-security.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,4CAA4C,EAAE,MAAM,6BAA6B,CAAC;AAE3F;;GAEG;AACH,MAAM,gBAAgB,GAAG,2BAA2B,CAAC;AAErD;;;;;;GAMG;AAEH;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CACvC,QAAgB,EAChB,SAA6B;IAE7B,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,SAAS,IAAI,gBAAgB,CAAC;AACvC,CAAC;AAcD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,2BAA2B,CACzC,MAAyC;IAEzC,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACnC,kCAAkC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACtD,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC;IAEvD,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,IAAI,4CAA4C,CACpD,qDAAqD,CACtD,CAAC;IACJ,CAAC;IAED,OAAO,cAAc,CAAC;AACxB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kCAAkC,CAAC,QAAgB;IACjE,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,MAAM,IAAI,4CAA4C,CACpD,6DAA6D,QAAQ,EAAE,CACxE,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/service/elbv2/listener/sim-elbv2-listener-store.d.ts

@@ -21,6 +21,14 @@ export declare class SimElbV2ListenerStore {
      * Every listener on one load balancer.
      */
     forLoadBalancer(loadBalancerArn: string): readonly SimElbV2Listener[];
+    /**
+     * Find the listener answering on one port of a load balancer.
+     *
+     * A port holds at most one listener, which is what makes a request's port
+     * the whole of the question a load balancer asks about which listener takes
+     * it.
+     */
+    findOnPort(loadBalancerArn: string, port: number): SimElbV2Listener | undefined;
     /**
      * Refuse a port another listener on the same load balancer already answers
      * on.

package/dist/service/elbv2/listener/sim-elbv2-listener-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-elbv2-listener-store.d.ts","sourceRoot":"","sources":["../../../../src/service/elbv2/listener/sim-elbv2-listener-store.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAEhE;;;;;;GAMG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAuC;IACjE,OAAO,CAAC,QAAQ,CAAK;IAErB;;OAEG;IACH,IAAI,GAAG,IAAI,SAAS,gBAAgB,EAAE,CAErC;IAED;;OAEG;IACH,YAAY,IAAI,MAAM,CAGrB;IAED;;OAEG;IACH,eAAe,CAAC,eAAe,EAAE,MAAM,GAAG,SAAS,gBAAgB,EAAE,CAIpE;IAED;;;;;;;OAOG;IACH,oBAAoB,CAClB,eAAe,EAAE,MAAM,EACvB,IAAI,EAAE,MAAM,EACZ,QAAQ,CAAC,EAAE,gBAAgB,GAC1B,IAAI,CAWN;IAED;;OAEG;IACH,GAAG,CAAC,QAAQ,EAAE,gBAAgB,GAAG,IAAI,CAEpC;IAED;;OAEG;IACH,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB,CAU1C;IAED;;OAEG;IACH,MAAM,CAAC,QAAQ,EAAE,gBAAgB,GAAG,IAAI,CAEvC;CACF"}
+{"version":3,"file":"sim-elbv2-listener-store.d.ts","sourceRoot":"","sources":["../../../../src/service/elbv2/listener/sim-elbv2-listener-store.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAEhE;;;;;;GAMG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAuC;IACjE,OAAO,CAAC,QAAQ,CAAK;IAErB;;OAEG;IACH,IAAI,GAAG,IAAI,SAAS,gBAAgB,EAAE,CAErC;IAED;;OAEG;IACH,YAAY,IAAI,MAAM,CAGrB;IAED;;OAEG;IACH,eAAe,CAAC,eAAe,EAAE,MAAM,GAAG,SAAS,gBAAgB,EAAE,CAIpE;IAED;;;;;;OAMG;IACH,UAAU,CACR,eAAe,EAAE,MAAM,EACvB,IAAI,EAAE,MAAM,GACX,gBAAgB,GAAG,SAAS,CAI9B;IAED;;;;;;;OAOG;IACH,oBAAoB,CAClB,eAAe,EAAE,MAAM,EACvB,IAAI,EAAE,MAAM,EACZ,QAAQ,CAAC,EAAE,gBAAgB,GAC1B,IAAI,CAWN;IAED;;OAEG;IACH,GAAG,CAAC,QAAQ,EAAE,gBAAgB,GAAG,IAAI,CAEpC;IAED;;OAEG;IACH,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB,CAU1C;IAED;;OAEG;IACH,MAAM,CAAC,QAAQ,EAAE,gBAAgB,GAAG,IAAI,CAEvC;CACF"}

package/dist/service/elbv2/listener/sim-elbv2-listener-store.js

@@ -28,6 +28,16 @@ export class SimElbV2ListenerStore {
     forLoadBalancer(loadBalancerArn) {
         return this.all.filter((listener) => listener.loadBalancerArn === loadBalancerArn);
     }
+    /**
+     * Find the listener answering on one port of a load balancer.
+     *
+     * A port holds at most one listener, which is what makes a request's port
+     * the whole of the question a load balancer asks about which listener takes
+     * it.
+     */
+    findOnPort(loadBalancerArn, port) {
+        return this.forLoadBalancer(loadBalancerArn).find((listener) => listener.port === port);
+    }
     /**
      * Refuse a port another listener on the same load balancer already answers
      * on.

package/dist/service/elbv2/listener/sim-elbv2-listener-store.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-elbv2-listener-store.js","sourceRoot":"","sources":["../../../../src/service/elbv2/listener/sim-elbv2-listener-store.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kCAAkC,EAClC,iCAAiC,GAClC,MAAM,6BAA6B,CAAC;AAGrC;;;;;;GAMG;AACH,MAAM,OAAO,qBAAqB;IACf,SAAS,GAAG,IAAI,GAAG,EAA4B,CAAC;IACzD,QAAQ,GAAG,CAAC,CAAC;IAErB;;OAEG;IACH,IAAI,GAAG;QACL,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;IAC3C,CAAC;IAED;;OAEG;IACH,YAAY;QACV,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,eAAuB;QACrC,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CACpB,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,eAAe,KAAK,eAAe,CAC3D,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,oBAAoB,CAClB,eAAuB,EACvB,IAAY,EACZ,QAA2B;QAE3B,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC,IAAI,CACtD,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,KAAK,IAAI,IAAI,QAAQ,KAAK,QAAQ,CAC9D,CAAC;QAEF,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,kCAAkC,CAC1C,sBAAsB,MAAM,CAAC,IAAI,CAAC,+BAA+B;gBAC/D,UAAU,CACb,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,QAA0B;QAC5B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,GAAW;QACtB,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEtC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,iCAAiC,CACzC,kCAAkC,GAAG,EAAE,CACxC,CAAC;QACJ,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,QAA0B;QAC/B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC;CACF"}
+{"version":3,"file":"sim-elbv2-listener-store.js","sourceRoot":"","sources":["../../../../src/service/elbv2/listener/sim-elbv2-listener-store.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kCAAkC,EAClC,iCAAiC,GAClC,MAAM,6BAA6B,CAAC;AAGrC;;;;;;GAMG;AACH,MAAM,OAAO,qBAAqB;IACf,SAAS,GAAG,IAAI,GAAG,EAA4B,CAAC;IACzD,QAAQ,GAAG,CAAC,CAAC;IAErB;;OAEG;IACH,IAAI,GAAG;QACL,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;IAC3C,CAAC;IAED;;OAEG;IACH,YAAY;QACV,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,eAAuB;QACrC,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CACpB,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,eAAe,KAAK,eAAe,CAC3D,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,UAAU,CACR,eAAuB,EACvB,IAAY;QAEZ,OAAO,IAAI,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC,IAAI,CAC/C,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,KAAK,IAAI,CACrC,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,oBAAoB,CAClB,eAAuB,EACvB,IAAY,EACZ,QAA2B;QAE3B,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC,IAAI,CACtD,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,KAAK,IAAI,IAAI,QAAQ,KAAK,QAAQ,CAC9D,CAAC;QAEF,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,kCAAkC,CAC1C,sBAAsB,MAAM,CAAC,IAAI,CAAC,+BAA+B;gBAC/D,UAAU,CACb,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,QAA0B;QAC5B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,GAAW;QACtB,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEtC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,iCAAiC,CACzC,kCAAkC,GAAG,EAAE,CACxC,CAAC;QACJ,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,QAA0B;QAC/B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC;CACF"}

package/dist/service/elbv2/listener/sim-elbv2-listener.d.ts

@@ -6,7 +6,8 @@ interface SimElbV2ListenerProperties {
     readonly port: number;
     readonly protocol: string;
     readonly sslPolicy: string | undefined;
-    readonly certificates: readonly SimElbV2Certificate[];
+    /** The ARN of the certificate an HTTPS listener would present by default. */
+    readonly certificateArn: string | undefined;
     readonly defaultActions: readonly SimElbV2Action[];
 }
 /**
@@ -16,7 +17,7 @@ export interface SimElbV2ListenerChanges {
     readonly port?: number | undefined;
     readonly protocol?: string | undefined;
     readonly sslPolicy?: string | undefined;
-    readonly certificates?: readonly SimElbV2Certificate[] | undefined;
+    readonly certificateArn?: string | undefined;
     readonly defaultActions?: readonly SimElbV2Action[] | undefined;
 }
 /**
@@ -42,17 +43,22 @@ export interface SimElbV2ListenerView {
 export declare class SimElbV2Listener {
     readonly arn: string;
     readonly loadBalancerArn: string;
+    private readonly certificateList;
     private currentPort;
     private currentProtocol;
     private currentSslPolicy;
-    private currentCertificates;
     private currentDefaultActions;
     constructor(properties: SimElbV2ListenerProperties);
     /** The port this listener answers on. */
     get port(): number;
     /** The protocol this listener speaks. */
     get protocol(): string;
-    /** The certificates an HTTPS listener presents. */
+    /**
+     * Every certificate this listener carries, the default one first.
+     *
+     * This is what `DescribeListenerCertificates` reports, where a described
+     * listener reports its default certificate alone.
+     */
     get certificates(): readonly SimElbV2Certificate[];
     /** What this listener does with a request no rule claims. */
     get defaultActions(): readonly SimElbV2Action[];
@@ -65,10 +71,31 @@ export declare class SimElbV2Listener {
      * it without one is not.
      */
     modify(changes: SimElbV2ListenerChanges): void;
+    /**
+     * Carry more certificates beyond the default one.
+     *
+     * These are the certificates a real listener would choose between by the host
+     * name a client asked for. Nothing selects one here, since no handshake
+     * happens, so what a test can prove is that the listener carries them.
+     */
+    addCertificates(certificateArns: readonly string[]): void;
+    /**
+     * Stop carrying certificates, refusing to take away the default one.
+     */
+    removeCertificates(certificateArns: readonly string[]): void;
     /**
      * Report this listener in the shape the SDK reads it back in.
      */
     view(): SimElbV2ListenerView;
+    /**
+     * Hold the default certificate, or none at all where the protocol has no use
+     * for one.
+     *
+     * A listener left with no certificate drops its whole certificate list rather
+     * than carrying certificates it would never present, which is what real ELB
+     * leaves behind after the same change.
+     */
+    private holdCertificate;
 }
 export {};
 //# sourceMappingURL=sim-elbv2-listener.d.ts.map

package/dist/service/elbv2/listener/sim-elbv2-listener.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-elbv2-listener.d.ts","sourceRoot":"","sources":["../../../../src/service/elbv2/listener/sim-elbv2-listener.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,KAAK,EACV,kBAAkB,EAClB,mBAAmB,EACpB,MAAM,wCAAwC,CAAC;AAMhD,UAAU,0BAA0B;IAClC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,YAAY,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACtD,QAAQ,CAAC,cAAc,EAAE,SAAS,cAAc,EAAE,CAAC;CACpD;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,mBAAmB,EAAE,GAAG,SAAS,CAAC;IACnE,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,cAAc,EAAE,GAAG,SAAS,CAAC;CACjE;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,YAAY,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACtD,QAAQ,CAAC,cAAc,EAAE,SAAS,kBAAkB,EAAE,CAAC;CACxD;AAED;;;;;;;GAOG;AACH,qBAAa,gBAAgB;IAC3B,SAAgB,GAAG,EAAE,MAAM,CAAC;IAC5B,SAAgB,eAAe,EAAE,MAAM,CAAC;IAExC,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,gBAAgB,CAAqB;IAC7C,OAAO,CAAC,mBAAmB,CAAiC;IAC5D,OAAO,CAAC,qBAAqB,CAA4B;IAEzD,YAAY,UAAU,EAAE,0BAA0B,EAkBjD;IAED,yCAAyC;IACzC,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,yCAAyC;IACzC,IAAI,QAAQ,IAAI,MAAM,CAErB;IAED,mDAAmD;IACnD,IAAI,YAAY,IAAI,SAAS,mBAAmB,EAAE,CAEjD;IAED,6DAA6D;IAC7D,IAAI,cAAc,IAAI,SAAS,cAAc,EAAE,CAE9C;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,OAAO,EAAE,uBAAuB,GAAG,IAAI,CAe7C;IAED;;OAEG;IACH,IAAI,IAAI,oBAAoB,CAU3B;CACF"}
+{"version":3,"file":"sim-elbv2-listener.d.ts","sourceRoot":"","sources":["../../../../src/service/elbv2/listener/sim-elbv2-listener.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,KAAK,EACV,kBAAkB,EAClB,mBAAmB,EACpB,MAAM,wCAAwC,CAAC;AAQhD,UAAU,0BAA0B;IAClC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,6EAA6E;IAC7E,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,cAAc,EAAE,SAAS,cAAc,EAAE,CAAC;CACpD;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,cAAc,EAAE,GAAG,SAAS,CAAC;CACjE;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,YAAY,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACtD,QAAQ,CAAC,cAAc,EAAE,SAAS,kBAAkB,EAAE,CAAC;CACxD;AAED;;;;;;;GAOG;AACH,qBAAa,gBAAgB;IAC3B,SAAgB,GAAG,EAAE,MAAM,CAAC;IAC5B,SAAgB,eAAe,EAAE,MAAM,CAAC;IAExC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAiC;IACjE,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,gBAAgB,CAAqB;IAC7C,OAAO,CAAC,qBAAqB,CAA4B;IAEzD,YAAY,UAAU,EAAE,0BAA0B,EAoBjD;IAED,yCAAyC;IACzC,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,yCAAyC;IACzC,IAAI,QAAQ,IAAI,MAAM,CAErB;IAED;;;;;OAKG;IACH,IAAI,YAAY,IAAI,SAAS,mBAAmB,EAAE,CAEjD;IAED,6DAA6D;IAC7D,IAAI,cAAc,IAAI,SAAS,cAAc,EAAE,CAE9C;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,OAAO,EAAE,uBAAuB,GAAG,IAAI,CAkB7C;IAED;;;;;;OAMG;IACH,eAAe,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAGxD;IAED;;OAEG;IACH,kBAAkB,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAE3D;IAED;;OAEG;IACH,IAAI,IAAI,oBAAoB,CAU3B;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,eAAe;CAQxB"}

package/dist/service/elbv2/listener/sim-elbv2-listener.js

@@ -1,4 +1,5 @@
-import { requireSimElbV2ListenerCertificate, simElbV2ListenerSslPolicy, } from "./sim-elbv2-listener-security.js";
+import { SimElbV2CertificateList } from "./certificate/sim-elbv2-certificate-list.js";
+import { requireSimElbV2CertificateProtocol, simElbV2ListenerCertificate, simElbV2ListenerSslPolicy, } from "./sim-elbv2-listener-security.js";
 /**
  * One simulated listener on an Application Load Balancer.
  *
@@ -10,10 +11,10 @@ import { requireSimElbV2ListenerCertificate, simElbV2ListenerSslPolicy, } from "
 export class SimElbV2Listener {
     arn;
     loadBalancerArn;
+    certificateList = new SimElbV2CertificateList();
     currentPort;
     currentProtocol;
     currentSslPolicy;
-    currentCertificates;
     currentDefaultActions;
     constructor(properties) {
         this.loadBalancerArn = properties.loadBalancerArn;
@@ -21,11 +22,11 @@ export class SimElbV2Listener {
         this.currentPort = properties.port;
         this.currentProtocol = properties.protocol;
         this.currentSslPolicy = simElbV2ListenerSslPolicy(properties.protocol, properties.sslPolicy);
-        // Copied for the same reason an action's input is: what a listener
-        // presents cannot change because a caller reused the array it sent.
-        this.currentCertificates = structuredClone(properties.certificates);
         this.currentDefaultActions = properties.defaultActions;
-        requireSimElbV2ListenerCertificate(properties.protocol, this.certificates);
+        this.holdCertificate(simElbV2ListenerCertificate({
+            protocol: properties.protocol,
+            requested: properties.certificateArn,
+        }));
     }
     /** The port this listener answers on. */
     get port() {
@@ -35,9 +36,14 @@ export class SimElbV2Listener {
     get protocol() {
         return this.currentProtocol;
     }
-    /** The certificates an HTTPS listener presents. */
+    /**
+     * Every certificate this listener carries, the default one first.
+     *
+     * This is what `DescribeListenerCertificates` reports, where a described
+     * listener reports its default certificate alone.
+     */
     get certificates() {
-        return this.currentCertificates;
+        return this.certificateList.list();
     }
     /** What this listener does with a request no rule claims. */
     get defaultActions() {
@@ -53,14 +59,34 @@ export class SimElbV2Listener {
      */
     modify(changes) {
         const protocol = changes.protocol ?? this.currentProtocol;
-        const certificates = changes.certificates ?? this.currentCertificates;
-        requireSimElbV2ListenerCertificate(protocol, certificates);
+        const certificateArn = simElbV2ListenerCertificate({
+            protocol,
+            requested: changes.certificateArn,
+            held: this.certificateList.defaultArn,
+        });
         this.currentPort = changes.port ?? this.currentPort;
         this.currentProtocol = protocol;
-        this.currentCertificates = structuredClone(certificates);
         this.currentSslPolicy = simElbV2ListenerSslPolicy(protocol, changes.sslPolicy ?? this.currentSslPolicy);
         this.currentDefaultActions =
             changes.defaultActions ?? this.currentDefaultActions;
+        this.holdCertificate(certificateArn);
+    }
+    /**
+     * Carry more certificates beyond the default one.
+     *
+     * These are the certificates a real listener would choose between by the host
+     * name a client asked for. Nothing selects one here, since no handshake
+     * happens, so what a test can prove is that the listener carries them.
+     */
+    addCertificates(certificateArns) {
+        requireSimElbV2CertificateProtocol(this.currentProtocol);
+        this.certificateList.add(certificateArns);
+    }
+    /**
+     * Stop carrying certificates, refusing to take away the default one.
+     */
+    removeCertificates(certificateArns) {
+        this.certificateList.remove(certificateArns);
     }
     /**
      * Report this listener in the shape the SDK reads it back in.
@@ -72,9 +98,24 @@ export class SimElbV2Listener {
             Port: this.port,
             Protocol: this.protocol,
             SslPolicy: this.currentSslPolicy,
-            Certificates: this.certificates,
+            Certificates: this.certificateList.defaultOnly(),
             DefaultActions: this.defaultActions.map((action) => action.view()),
         };
     }
+    /**
+     * Hold the default certificate, or none at all where the protocol has no use
+     * for one.
+     *
+     * A listener left with no certificate drops its whole certificate list rather
+     * than carrying certificates it would never present, which is what real ELB
+     * leaves behind after the same change.
+     */
+    holdCertificate(certificateArn) {
+        if (certificateArn === undefined) {
+            this.certificateList.clear();
+            return;
+        }
+        this.certificateList.setDefault(certificateArn);
+    }
 }
 //# sourceMappingURL=sim-elbv2-listener.js.map

package/dist/service/elbv2/listener/sim-elbv2-listener.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-elbv2-listener.js","sourceRoot":"","sources":["../../../../src/service/elbv2/listener/sim-elbv2-listener.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,kCAAkC,EAClC,yBAAyB,GAC1B,MAAM,kCAAkC,CAAC;AAoC1C;;;;;;;GAOG;AACH,MAAM,OAAO,gBAAgB;IACX,GAAG,CAAS;IACZ,eAAe,CAAS;IAEhC,WAAW,CAAS;IACpB,eAAe,CAAS;IACxB,gBAAgB,CAAqB;IACrC,mBAAmB,CAAiC;IACpD,qBAAqB,CAA4B;IAEzD,YAAY,UAAsC;QAChD,IAAI,CAAC,eAAe,GAAG,UAAU,CAAC,eAAe,CAAC;QAClD,IAAI,CAAC,GAAG,GAAG,GAAG,UAAU,CAAC,eAAe,CAAC,OAAO,CAC9C,gBAAgB,EAChB,YAAY,CACb,IAAI,UAAU,CAAC,EAAE,EAAE,CAAC;QACrB,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,IAAI,CAAC;QACnC,IAAI,CAAC,eAAe,GAAG,UAAU,CAAC,QAAQ,CAAC;QAC3C,IAAI,CAAC,gBAAgB,GAAG,yBAAyB,CAC/C,UAAU,CAAC,QAAQ,EACnB,UAAU,CAAC,SAAS,CACrB,CAAC;QACF,mEAAmE;QACnE,oEAAoE;QACpE,IAAI,CAAC,mBAAmB,GAAG,eAAe,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QACpE,IAAI,CAAC,qBAAqB,GAAG,UAAU,CAAC,cAAc,CAAC;QAEvD,kCAAkC,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IAC7E,CAAC;IAED,yCAAyC;IACzC,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,yCAAyC;IACzC,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;IAED,mDAAmD;IACnD,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,mBAAmB,CAAC;IAClC,CAAC;IAED,6DAA6D;IAC7D,IAAI,cAAc;QAChB,OAAO,IAAI,CAAC,qBAAqB,CAAC;IACpC,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,OAAgC;QACrC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,eAAe,CAAC;QAC1D,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC,mBAAmB,CAAC;QAEtE,kCAAkC,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QAE3D,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,CAAC;QACpD,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC;QAChC,IAAI,CAAC,mBAAmB,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;QACzD,IAAI,CAAC,gBAAgB,GAAG,yBAAyB,CAC/C,QAAQ,EACR,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,gBAAgB,CAC3C,CAAC;QACF,IAAI,CAAC,qBAAqB;YACxB,OAAO,CAAC,cAAc,IAAI,IAAI,CAAC,qBAAqB,CAAC;IACzD,CAAC;IAED;;OAEG;IACH,IAAI;QACF,OAAO;YACL,WAAW,EAAE,IAAI,CAAC,GAAG;YACrB,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,SAAS,EAAE,IAAI,CAAC,gBAAgB;YAChC,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;SACnE,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-elbv2-listener.js","sourceRoot":"","sources":["../../../../src/service/elbv2/listener/sim-elbv2-listener.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,uBAAuB,EAAE,MAAM,6CAA6C,CAAC;AACtF,OAAO,EACL,kCAAkC,EAClC,2BAA2B,EAC3B,yBAAyB,GAC1B,MAAM,kCAAkC,CAAC;AAqC1C;;;;;;;GAOG;AACH,MAAM,OAAO,gBAAgB;IACX,GAAG,CAAS;IACZ,eAAe,CAAS;IAEvB,eAAe,GAAG,IAAI,uBAAuB,EAAE,CAAC;IACzD,WAAW,CAAS;IACpB,eAAe,CAAS;IACxB,gBAAgB,CAAqB;IACrC,qBAAqB,CAA4B;IAEzD,YAAY,UAAsC;QAChD,IAAI,CAAC,eAAe,GAAG,UAAU,CAAC,eAAe,CAAC;QAClD,IAAI,CAAC,GAAG,GAAG,GAAG,UAAU,CAAC,eAAe,CAAC,OAAO,CAC9C,gBAAgB,EAChB,YAAY,CACb,IAAI,UAAU,CAAC,EAAE,EAAE,CAAC;QACrB,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,IAAI,CAAC;QACnC,IAAI,CAAC,eAAe,GAAG,UAAU,CAAC,QAAQ,CAAC;QAC3C,IAAI,CAAC,gBAAgB,GAAG,yBAAyB,CAC/C,UAAU,CAAC,QAAQ,EACnB,UAAU,CAAC,SAAS,CACrB,CAAC;QACF,IAAI,CAAC,qBAAqB,GAAG,UAAU,CAAC,cAAc,CAAC;QAEvD,IAAI,CAAC,eAAe,CAClB,2BAA2B,CAAC;YAC1B,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,SAAS,EAAE,UAAU,CAAC,cAAc;SACrC,CAAC,CACH,CAAC;IACJ,CAAC;IAED,yCAAyC;IACzC,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,yCAAyC;IACzC,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;IAED;;;;;OAKG;IACH,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;IACrC,CAAC;IAED,6DAA6D;IAC7D,IAAI,cAAc;QAChB,OAAO,IAAI,CAAC,qBAAqB,CAAC;IACpC,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,OAAgC;QACrC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,eAAe,CAAC;QAC1D,MAAM,cAAc,GAAG,2BAA2B,CAAC;YACjD,QAAQ;YACR,SAAS,EAAE,OAAO,CAAC,cAAc;YACjC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,UAAU;SACtC,CAAC,CAAC;QAEH,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,CAAC;QACpD,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC;QAChC,IAAI,CAAC,gBAAgB,GAAG,yBAAyB,CAC/C,QAAQ,EACR,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,gBAAgB,CAC3C,CAAC;QACF,IAAI,CAAC,qBAAqB;YACxB,OAAO,CAAC,cAAc,IAAI,IAAI,CAAC,qBAAqB,CAAC;QAEvD,IAAI,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC;IACvC,CAAC;IAED;;;;;;OAMG;IACH,eAAe,CAAC,eAAkC;QAChD,kCAAkC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACzD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,kBAAkB,CAAC,eAAkC;QACnD,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,IAAI;QACF,OAAO;YACL,WAAW,EAAE,IAAI,CAAC,GAAG;YACrB,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,SAAS,EAAE,IAAI,CAAC,gBAAgB;YAChC,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE;YAChD,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;SACnE,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACK,eAAe,CAAC,cAAkC;QACxD,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;YAC7B,OAAO;QACT,CAAC;QAED,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;IAClD,CAAC;CACF"}

package/dist/service/elbv2/load-balancer/sim-elbv2-load-balancer-arn.d.ts

@@ -1,5 +1,4 @@
 import type { SimAwsAccountRegionScope } from "../../aws/sim-aws-account-region-scope.js";
-import type { SimElbV2LoadBalancerScheme } from "./sim-elbv2-load-balancer-scheme.js";
 /**
  * The ARN of one simulated Application Load Balancer.
  *
@@ -10,16 +9,6 @@ import type { SimElbV2LoadBalancerScheme } from "./sim-elbv2-load-balancer-schem
  * that part too.
  */
 export declare function simElbV2LoadBalancerArn(name: string, id: string, scope: SimAwsAccountRegionScope): string;
-/**
- * The DNS name real ELB issues for a load balancer.
- *
- * This is the whole point of creating one here: a Route53 alias or a CloudFront
- * origin needs a host name of the right shape to point at, and it is the only
- * name by which anything reaches a load balancer on real AWS. An internal load
- * balancer's name carries the `internal-` prefix real ELB gives it, which is
- * why that prefix is refused in a load balancer's own name.
- */
-export declare function simElbV2LoadBalancerDnsName(name: string, suffix: string, scheme: SimElbV2LoadBalancerScheme, scope: SimAwsAccountRegionScope): string;
 /**
  * The Route53 hosted zone a load balancer's DNS name lives in.
  *

package/dist/service/elbv2/load-balancer/sim-elbv2-load-balancer-arn.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-elbv2-load-balancer-arn.d.ts","sourceRoot":"","sources":["../../../../src/service/elbv2/load-balancer/sim-elbv2-load-balancer-arn.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAC1F,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AAEtF;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,wBAAwB,GAC9B,MAAM,CAKR;AAED;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,0BAA0B,EAClC,KAAK,EAAE,wBAAwB,GAC9B,MAAM,CAIR;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,6BAA6B,mBAAmB,CAAC"}
+{"version":3,"file":"sim-elbv2-load-balancer-arn.d.ts","sourceRoot":"","sources":["../../../../src/service/elbv2/load-balancer/sim-elbv2-load-balancer-arn.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAE1F;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,wBAAwB,GAC9B,MAAM,CAKR;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,6BAA6B,mBAAmB,CAAC"}

package/dist/service/elbv2/load-balancer/sim-elbv2-load-balancer-arn.js

@@ -11,19 +11,6 @@ export function simElbV2LoadBalancerArn(name, id, scope) {
     return (`arn:aws:elasticloadbalancing:${scope.regionName}:${scope.accountId}:` +
         `loadbalancer/app/${name}/${id}`);
 }
-/**
- * The DNS name real ELB issues for a load balancer.
- *
- * This is the whole point of creating one here: a Route53 alias or a CloudFront
- * origin needs a host name of the right shape to point at, and it is the only
- * name by which anything reaches a load balancer on real AWS. An internal load
- * balancer's name carries the `internal-` prefix real ELB gives it, which is
- * why that prefix is refused in a load balancer's own name.
- */
-export function simElbV2LoadBalancerDnsName(name, suffix, scheme, scope) {
-    const prefix = scheme === "internal" ? "internal-" : "";
-    return `${prefix}${name}-${suffix}.${scope.regionName}.elb.amazonaws.com`;
-}
 /**
  * The Route53 hosted zone a load balancer's DNS name lives in.
  *

package/dist/service/elbv2/load-balancer/sim-elbv2-load-balancer-arn.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-elbv2-load-balancer-arn.js","sourceRoot":"","sources":["../../../../src/service/elbv2/load-balancer/sim-elbv2-load-balancer-arn.ts"],"names":[],"mappings":"AAGA;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB,CACrC,IAAY,EACZ,EAAU,EACV,KAA+B;IAE/B,OAAO,CACL,gCAAgC,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,SAAS,GAAG;QACtE,oBAAoB,IAAI,IAAI,EAAE,EAAE,CACjC,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,2BAA2B,CACzC,IAAY,EACZ,MAAc,EACd,MAAkC,EAClC,KAA+B;IAE/B,MAAM,MAAM,GAAG,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;IAExD,OAAO,GAAG,MAAM,GAAG,IAAI,IAAI,MAAM,IAAI,KAAK,CAAC,UAAU,oBAAoB,CAAC;AAC5E,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,gBAAgB,CAAC"}
+{"version":3,"file":"sim-elbv2-load-balancer-arn.js","sourceRoot":"","sources":["../../../../src/service/elbv2/load-balancer/sim-elbv2-load-balancer-arn.ts"],"names":[],"mappings":"AAEA;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB,CACrC,IAAY,EACZ,EAAU,EACV,KAA+B;IAE/B,OAAO,CACL,gCAAgC,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,SAAS,GAAG;QACtE,oBAAoB,IAAI,IAAI,EAAE,EAAE,CACjC,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,gBAAgB,CAAC"}

package/dist/service/elbv2/load-balancer/sim-elbv2-load-balancer-host.d.ts

@@ -0,0 +1,50 @@
+import type { SimAwsAccountRegionScope } from "../../aws/sim-aws-account-region-scope.js";
+import type { SimElbV2LoadBalancerScheme } from "./sim-elbv2-load-balancer-scheme.js";
+/**
+ * The DNS label ELB puts between the Region and the AWS domain in the host
+ * name it issues for a load balancer:
+ *
+ *   <name>-<id>.<region>.elb.amazonaws.com
+ */
+export declare const simElbV2HostLabel = "elb";
+/**
+ * The real AWS domain load balancer host names live under.
+ *
+ * Unlike the endpoints the SDK talks to, this domain is not dropped when the
+ * name is served locally. Nothing signs a request to a load balancer, so the
+ * host name a client writes is the one `DNSName` reported, and reading it back
+ * is what lets a Route53 alias be written with that value unchanged.
+ */
+export declare const simElbV2HostDomain = "amazonaws.com";
+/**
+ * A load balancer host name taken apart.
+ */
+export interface SimElbV2LoadBalancerHost {
+    /** The host name, in the lower case host names are compared in. */
+    readonly dnsName: string;
+    /** The Region label the host name carries. */
+    readonly regionName: string;
+}
+/**
+ * The DNS name real ELB issues for a load balancer.
+ *
+ * This is the whole point of creating one here: a Route53 alias or a CloudFront
+ * origin needs a host name of the right shape to point at, and it is the only
+ * name by which anything reaches a load balancer on real AWS. An internal load
+ * balancer's name carries the `internal-` prefix real ELB gives it, which is
+ * why that prefix is refused in a load balancer's own name.
+ */
+export declare function simElbV2LoadBalancerDnsName(name: string, suffix: string, scheme: SimElbV2LoadBalancerScheme, scope: SimAwsAccountRegionScope): string;
+/**
+ * Read a host name that names a load balancer, or nothing if it names
+ * something else.
+ *
+ * This is the reading half of `simElbV2LoadBalancerDnsName`, and it is what
+ * tells Route53 resolution that a name is a load balancer's rather than
+ * another service's. It says only that the name has the shape ELB issues: which
+ * load balancer answers on it, and whether one still does, is the registry's
+ * answer rather than this one's, the same as for every other simulated service
+ * host name.
+ */
+export declare function readSimElbV2LoadBalancerHost(hostname: string): SimElbV2LoadBalancerHost | undefined;
+//# sourceMappingURL=sim-elbv2-load-balancer-host.d.ts.map

package/dist/service/elbv2/load-balancer/sim-elbv2-load-balancer-host.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-elbv2-load-balancer-host.d.ts","sourceRoot":"","sources":["../../../../src/service/elbv2/load-balancer/sim-elbv2-load-balancer-host.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAC1F,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AAEtF;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,QAAQ,CAAC;AAEvC;;;;;;;GAOG;AACH,eAAO,MAAM,kBAAkB,kBAAkB,CAAC;AAOlD;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,mEAAmE;IACnE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,8CAA8C;IAC9C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AASD;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,0BAA0B,EAClC,KAAK,EAAE,wBAAwB,GAC9B,MAAM,CAOR;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,MAAM,GACf,wBAAwB,GAAG,SAAS,CAStC"}

package/dist/service/elbv2/load-balancer/sim-elbv2-load-balancer-host.js

@@ -0,0 +1,59 @@
+/**
+ * The DNS label ELB puts between the Region and the AWS domain in the host
+ * name it issues for a load balancer:
+ *
+ *   <name>-<id>.<region>.elb.amazonaws.com
+ */
+export const simElbV2HostLabel = "elb";
+/**
+ * The real AWS domain load balancer host names live under.
+ *
+ * Unlike the endpoints the SDK talks to, this domain is not dropped when the
+ * name is served locally. Nothing signs a request to a load balancer, so the
+ * host name a client writes is the one `DNSName` reported, and reading it back
+ * is what lets a Route53 alias be written with that value unchanged.
+ */
+export const simElbV2HostDomain = "amazonaws.com";
+/**
+ * The prefix real ELB puts on the DNS name of an internal load balancer.
+ */
+const internalPrefix = "internal-";
+/**
+ * The shape of a load balancer host name: the load balancer's own label, the
+ * Region, and the ELB domain.
+ */
+const loadBalancerHost = /^[\da-z][\da-z-]*\.(?<regionName>[\da-z-]+)\.elb\.amazonaws\.com$/u;
+/**
+ * The DNS name real ELB issues for a load balancer.
+ *
+ * This is the whole point of creating one here: a Route53 alias or a CloudFront
+ * origin needs a host name of the right shape to point at, and it is the only
+ * name by which anything reaches a load balancer on real AWS. An internal load
+ * balancer's name carries the `internal-` prefix real ELB gives it, which is
+ * why that prefix is refused in a load balancer's own name.
+ */
+export function simElbV2LoadBalancerDnsName(name, suffix, scheme, scope) {
+    const prefix = scheme === "internal" ? internalPrefix : "";
+    return (`${prefix}${name}-${suffix}.${scope.regionName}.` +
+        `${simElbV2HostLabel}.${simElbV2HostDomain}`);
+}
+/**
+ * Read a host name that names a load balancer, or nothing if it names
+ * something else.
+ *
+ * This is the reading half of `simElbV2LoadBalancerDnsName`, and it is what
+ * tells Route53 resolution that a name is a load balancer's rather than
+ * another service's. It says only that the name has the shape ELB issues: which
+ * load balancer answers on it, and whether one still does, is the registry's
+ * answer rather than this one's, the same as for every other simulated service
+ * host name.
+ */
+export function readSimElbV2LoadBalancerHost(hostname) {
+    const dnsName = hostname.toLowerCase();
+    const regionName = loadBalancerHost.exec(dnsName)?.groups?.["regionName"];
+    if (regionName === undefined) {
+        return undefined;
+    }
+    return { dnsName, regionName };
+}
+//# sourceMappingURL=sim-elbv2-load-balancer-host.js.map

package/dist/service/elbv2/load-balancer/sim-elbv2-load-balancer-host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-elbv2-load-balancer-host.js","sourceRoot":"","sources":["../../../../src/service/elbv2/load-balancer/sim-elbv2-load-balancer-host.ts"],"names":[],"mappings":"AAGA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAEvC;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,eAAe,CAAC;AAElD;;GAEG;AACH,MAAM,cAAc,GAAG,WAAW,CAAC;AAYnC;;;GAGG;AACH,MAAM,gBAAgB,GACpB,oEAAoE,CAAC;AAEvE;;;;;;;;GAQG;AACH,MAAM,UAAU,2BAA2B,CACzC,IAAY,EACZ,MAAc,EACd,MAAkC,EAClC,KAA+B;IAE/B,MAAM,MAAM,GAAG,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;IAE3D,OAAO,CACL,GAAG,MAAM,GAAG,IAAI,IAAI,MAAM,IAAI,KAAK,CAAC,UAAU,GAAG;QACjD,GAAG,iBAAiB,IAAI,kBAAkB,EAAE,CAC7C,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,4BAA4B,CAC1C,QAAgB;IAEhB,MAAM,OAAO,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACvC,MAAM,UAAU,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC,YAAY,CAAC,CAAC;IAE1E,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;AACjC,CAAC"}

package/dist/service/elbv2/load-balancer/sim-elbv2-load-balancer-store.d.ts

@@ -1,14 +1,25 @@
+import type { SimElbV2Registry } from "../registry/sim-elbv2-registry.js";
 import type { SimElbV2LoadBalancer } from "./sim-elbv2-load-balancer.js";
+interface SimElbV2LoadBalancerStoreProperties {
+    readonly registry: SimElbV2Registry;
+}
 /**
  * The load balancers of one simulated ELBv2 scope.
  *
  * A name is unique within an account and region on real ELB rather than
  * globally, which is the same scope this store is created in, so holding the
  * names here is all that uniqueness needs.
+ *
+ * A DNS name is not scoped that way: a request arriving at one has no account
+ * to start from. Storing and forgetting a load balancer therefore also tells
+ * the cross-scope registry, so the two cannot disagree about which names
+ * answer.
  */
 export declare class SimElbV2LoadBalancerStore {
     private readonly loadBalancers;
+    private readonly registry;
     private sequence;
+    constructor(properties: SimElbV2LoadBalancerStoreProperties);
     /**
      * Every load balancer in this scope, in creation order.
      */
@@ -17,6 +28,15 @@ export declare class SimElbV2LoadBalancerStore {
      * Take the next id for a load balancer about to be created.
      */
     nextSequence(): number;
+    /**
+     * Take the next number for the DNS name of a load balancer about to be
+     * created.
+     *
+     * This one comes from the registry rather than from this store, because a
+     * DNS name has to be unique across every scope while an ARN id only has to
+     * be unique within one.
+     */
+    nextDnsSequence(): number;
     /**
      * Refuse a name another load balancer in this scope already holds.
      */
@@ -29,6 +49,10 @@ export declare class SimElbV2LoadBalancerStore {
      * Find a load balancer by name.
      */
     findByName(name: string): SimElbV2LoadBalancer | undefined;
+    /**
+     * Find the load balancer answering on a DNS name.
+     */
+    findByDnsName(dnsName: string): SimElbV2LoadBalancer | undefined;
     /**
      * Resolve a load balancer by ARN, or refuse.
      */
@@ -42,4 +66,5 @@ export declare class SimElbV2LoadBalancerStore {
      */
     remove(loadBalancer: SimElbV2LoadBalancer): void;
 }
+export {};
 //# sourceMappingURL=sim-elbv2-load-balancer-store.d.ts.map

package/dist/service/elbv2/load-balancer/sim-elbv2-load-balancer-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-elbv2-load-balancer-store.d.ts","sourceRoot":"","sources":["../../../../src/service/elbv2/load-balancer/sim-elbv2-load-balancer-store.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAEzE;;;;;;GAMG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA2C;IACzE,OAAO,CAAC,QAAQ,CAAK;IAErB;;OAEG;IACH,IAAI,GAAG,IAAI,SAAS,oBAAoB,EAAE,CAEzC;IAED;;OAEG;IACH,YAAY,IAAI,MAAM,CAGrB;IAED;;OAEG;IACH,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAOvC;IAED;;OAEG;IACH,GAAG,CAAC,YAAY,EAAE,oBAAoB,GAAG,IAAI,CAE5C;IAED;;OAEG;IACH,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,oBAAoB,GAAG,SAAS,CAEzD;IAED;;OAEG;IACH,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,oBAAoB,CAU9C;IAED;;OAEG;IACH,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,oBAAoB,CAUhD;IAED;;OAEG;IACH,MAAM,CAAC,YAAY,EAAE,oBAAoB,GAAG,IAAI,CAE/C;CACF"}
+{"version":3,"file":"sim-elbv2-load-balancer-store.d.ts","sourceRoot":"","sources":["../../../../src/service/elbv2/load-balancer/sim-elbv2-load-balancer-store.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAEzE,UAAU,mCAAmC;IAC3C,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;CACrC;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA2C;IACzE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmB;IAC5C,OAAO,CAAC,QAAQ,CAAK;IAErB,YAAY,UAAU,EAAE,mCAAmC,EAE1D;IAED;;OAEG;IACH,IAAI,GAAG,IAAI,SAAS,oBAAoB,EAAE,CAEzC;IAED;;OAEG;IACH,YAAY,IAAI,MAAM,CAGrB;IAED;;;;;;;OAOG;IACH,eAAe,IAAI,MAAM,CAExB;IAED;;OAEG;IACH,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAOvC;IAED;;OAEG;IACH,GAAG,CAAC,YAAY,EAAE,oBAAoB,GAAG,IAAI,CAG5C;IAED;;OAEG;IACH,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,oBAAoB,GAAG,SAAS,CAEzD;IAED;;OAEG;IACH,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,oBAAoB,GAAG,SAAS,CAM/D;IAED;;OAEG;IACH,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,oBAAoB,CAU9C;IAED;;OAEG;IACH,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,oBAAoB,CAUhD;IAED;;OAEG;IACH,MAAM,CAAC,YAAY,EAAE,oBAAoB,GAAG,IAAI,CAG/C;CACF"}