@kensio/yulin 1.15.1 → 1.16.0

package/dist/service/ses/email/sim-ses-sent-email.js

@@ -0,0 +1,61 @@
+/**
+ * One message a simulated SES would have sent.
+ *
+ * Nothing is delivered. SES keeps what it would have sent instead, which is
+ * what lets a test assert that signing someone up produced a welcome message
+ * addressed to them, without a mailbox to read or a network to reach.
+ *
+ * There is no simulated delivery to add later either. Where a message goes
+ * after SES accepts it is a mail system rather than an AWS service, so the
+ * recorded send is the whole of the observable behaviour, not a stand-in for
+ * something not built yet.
+ */
+export class SimSesSentEmail {
+    /** What SendEmail answered with, and the only handle SES gives a message. */
+    messageId;
+    /** The From value as the request gave it, display name and all. */
+    fromEmailAddress;
+    destination;
+    replyToAddresses;
+    subject;
+    body;
+    /**
+     * The template this message was rendered from, if it was rendered from a
+     * stored one. A message written out in full has none, and so does one
+     * rendered from a template the send wrote inline.
+     */
+    templateName;
+    /**
+     * What the template's placeholders were filled from, parsed out of the JSON
+     * the send carried.
+     *
+     * This is usually the better thing for a test to assert on than the rendered
+     * body: it survives someone rewording the email.
+     */
+    templateData;
+    configurationSetName;
+    sentDate;
+    constructor(properties) {
+        this.messageId = properties.messageId;
+        this.fromEmailAddress = properties.fromEmailAddress;
+        this.destination = properties.destination;
+        this.replyToAddresses = properties.replyToAddresses;
+        this.subject = properties.subject;
+        this.body = properties.body;
+        this.templateName = properties.templateName;
+        this.templateData = properties.templateData;
+        this.configurationSetName = properties.configurationSetName;
+        this.sentDate = properties.sentDate;
+    }
+    /**
+     * Every address this message went to, across to, cc and bcc.
+     */
+    get recipients() {
+        return [
+            ...this.destination.toAddresses,
+            ...this.destination.ccAddresses,
+            ...this.destination.bccAddresses,
+        ];
+    }
+}
+//# sourceMappingURL=sim-ses-sent-email.js.map

package/dist/service/ses/email/sim-ses-sent-email.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ses-sent-email.js","sourceRoot":"","sources":["../../../../src/service/ses/email/sim-ses-sent-email.ts"],"names":[],"mappings":"AAoCA;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,eAAe;IAC1B,6EAA6E;IAC7D,SAAS,CAAS;IAElC,mEAAmE;IACnD,gBAAgB,CAAS;IAEzB,WAAW,CAA6B;IAExC,gBAAgB,CAAoB;IAEpC,OAAO,CAAS;IAEhB,IAAI,CAAsB;IAE1C;;;;OAIG;IACa,YAAY,CAAqB;IAEjD;;;;;;OAMG;IACa,YAAY,CAAgD;IAE5D,oBAAoB,CAAqB;IAEzC,QAAQ,CAAO;IAE/B,YAAY,UAAqC;QAC/C,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,gBAAgB,GAAG,UAAU,CAAC,gBAAgB,CAAC;QACpD,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,gBAAgB,GAAG,UAAU,CAAC,gBAAgB,CAAC;QACpD,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;QAClC,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;QAC5B,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;QAC5C,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;QAC5C,IAAI,CAAC,oBAAoB,GAAG,UAAU,CAAC,oBAAoB,CAAC;QAC5D,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,IAAI,UAAU;QACZ,OAAO;YACL,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW;YAC/B,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW;YAC/B,GAAG,IAAI,CAAC,WAAW,CAAC,YAAY;SACjC,CAAC;IACJ,CAAC;CACF"}

package/dist/service/ses/error/sim-ses.error.d.ts

@@ -0,0 +1,70 @@
+/**
+ * Minimal metadata shape for simulated SES errors.
+ */
+export interface SimSesErrorMetadata {
+    readonly httpStatusCode?: number;
+}
+/**
+ * Base class for simulated SES errors.
+ */
+export declare class SimSesError extends Error {
+    readonly $metadata: SimSesErrorMetadata;
+    constructor(message: string, $metadata?: SimSesErrorMetadata);
+}
+/**
+ * Simulated SES BadRequestException error.
+ *
+ * This is what the SES v2 API reports for input it will not accept, such as an
+ * identity that is neither an email address nor a domain.
+ */
+export declare class SimSesBadRequestException extends SimSesError {
+    readonly name = "BadRequestException";
+    constructor(message: string);
+}
+/**
+ * Simulated SES NotFoundException error.
+ *
+ * Reading or deleting an identity that is not there produces this, and so does
+ * sending with a template name that names nothing.
+ */
+export declare class SimSesNotFoundException extends SimSesError {
+    readonly name = "NotFoundException";
+    constructor(message: string);
+}
+/**
+ * Simulated SES AlreadyExistsException error.
+ *
+ * Creating an identity that is already there fails rather than answering with
+ * the one that exists, so a test that verifies the same address twice sees the
+ * failure an account would give it.
+ */
+export declare class SimSesAlreadyExistsException extends SimSesError {
+    readonly name = "AlreadyExistsException";
+    constructor(message: string);
+}
+/**
+ * Simulated SES MessageRejected error.
+ *
+ * SES reports a message it will not accept this way, and an unverified
+ * identity is much the commonest reason for it. The message names the
+ * identities that failed the check, because that is the part a caller has to
+ * read to find out what to verify.
+ */
+export declare class SimSesMessageRejected extends SimSesError {
+    readonly name = "MessageRejected";
+    constructor(message: string);
+}
+/**
+ * Simulated SES UnsupportedOperationException error.
+ *
+ * This one is Yulin reporting a request real SES would accept and this
+ * simulator does not carry out, rather than a failure an account would
+ * produce. Refusing is the honest answer: a raw MIME message quietly recorded
+ * with an empty body would make a test pass for a reason unrelated to what it
+ * asserts.
+ */
+export declare class SimSesUnsupportedOperationException extends SimSesError {
+    readonly name = "UnsupportedOperationException";
+    constructor(message: string);
+}
+//# sourceMappingURL=sim-ses.error.d.ts.map

package/dist/service/ses/error/sim-ses.error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ses.error.d.ts","sourceRoot":"","sources":["../../../../src/service/ses/error/sim-ses.error.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;;GAEG;AACH,qBAAa,WAAY,SAAQ,KAAK;aAGlB,SAAS,EAAE,mBAAmB;IAFhD,YACE,OAAO,EAAE,MAAM,EACC,SAAS,GAAE,mBAAwB,EAGpD;CACF;AAED;;;;;GAKG;AACH,qBAAa,yBAA0B,SAAQ,WAAW;IACxD,SAAyB,IAAI,yBAAyB;IAEtD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;GAKG;AACH,qBAAa,uBAAwB,SAAQ,WAAW;IACtD,SAAyB,IAAI,uBAAuB;IAEpD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;;GAMG;AACH,qBAAa,4BAA6B,SAAQ,WAAW;IAC3D,SAAyB,IAAI,4BAA4B;IAEzD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;;;GAOG;AACH,qBAAa,qBAAsB,SAAQ,WAAW;IACpD,SAAyB,IAAI,qBAAqB;IAElD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;;;;GAQG;AACH,qBAAa,mCAAoC,SAAQ,WAAW;IAClE,SAAyB,IAAI,mCAAmC;IAEhE,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF"}

package/dist/service/ses/error/sim-ses.error.js

@@ -0,0 +1,77 @@
+/**
+ * Base class for simulated SES errors.
+ */
+export class SimSesError extends Error {
+    $metadata;
+    constructor(message, $metadata = {}) {
+        super(message);
+        this.$metadata = $metadata;
+    }
+}
+/**
+ * Simulated SES BadRequestException error.
+ *
+ * This is what the SES v2 API reports for input it will not accept, such as an
+ * identity that is neither an email address nor a domain.
+ */
+export class SimSesBadRequestException extends SimSesError {
+    name = "BadRequestException";
+    constructor(message) {
+        super(message, { httpStatusCode: 400 });
+    }
+}
+/**
+ * Simulated SES NotFoundException error.
+ *
+ * Reading or deleting an identity that is not there produces this, and so does
+ * sending with a template name that names nothing.
+ */
+export class SimSesNotFoundException extends SimSesError {
+    name = "NotFoundException";
+    constructor(message) {
+        super(message, { httpStatusCode: 404 });
+    }
+}
+/**
+ * Simulated SES AlreadyExistsException error.
+ *
+ * Creating an identity that is already there fails rather than answering with
+ * the one that exists, so a test that verifies the same address twice sees the
+ * failure an account would give it.
+ */
+export class SimSesAlreadyExistsException extends SimSesError {
+    name = "AlreadyExistsException";
+    constructor(message) {
+        super(message, { httpStatusCode: 400 });
+    }
+}
+/**
+ * Simulated SES MessageRejected error.
+ *
+ * SES reports a message it will not accept this way, and an unverified
+ * identity is much the commonest reason for it. The message names the
+ * identities that failed the check, because that is the part a caller has to
+ * read to find out what to verify.
+ */
+export class SimSesMessageRejected extends SimSesError {
+    name = "MessageRejected";
+    constructor(message) {
+        super(message, { httpStatusCode: 400 });
+    }
+}
+/**
+ * Simulated SES UnsupportedOperationException error.
+ *
+ * This one is Yulin reporting a request real SES would accept and this
+ * simulator does not carry out, rather than a failure an account would
+ * produce. Refusing is the honest answer: a raw MIME message quietly recorded
+ * with an empty body would make a test pass for a reason unrelated to what it
+ * asserts.
+ */
+export class SimSesUnsupportedOperationException extends SimSesError {
+    name = "UnsupportedOperationException";
+    constructor(message) {
+        super(message, { httpStatusCode: 400 });
+    }
+}
+//# sourceMappingURL=sim-ses.error.js.map

package/dist/service/ses/error/sim-ses.error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ses.error.js","sourceRoot":"","sources":["../../../../src/service/ses/error/sim-ses.error.ts"],"names":[],"mappings":"AAOA;;GAEG;AACH,MAAM,OAAO,WAAY,SAAQ,KAAK;IAGlB,SAAS;IAF3B,YACE,OAAe,EACC,SAAS,GAAwB,EAAE;QAEnD,KAAK,CAAC,OAAO,CAAC,CAAC;yBAFC,SAAS;IAG3B,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,yBAA0B,SAAQ,WAAW;IAC/B,IAAI,GAAG,qBAAqB,CAAC;IAEtD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,uBAAwB,SAAQ,WAAW;IAC7B,IAAI,GAAG,mBAAmB,CAAC;IAEpD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,4BAA6B,SAAQ,WAAW;IAClC,IAAI,GAAG,wBAAwB,CAAC;IAEzD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,qBAAsB,SAAQ,WAAW;IAC3B,IAAI,GAAG,iBAAiB,CAAC;IAElD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,mCAAoC,SAAQ,WAAW;IACzC,IAAI,GAAG,+BAA+B,CAAC;IAEhE,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF"}

package/dist/service/ses/identity/sim-ses-identity-name.d.ts

@@ -0,0 +1,34 @@
+/**
+ * What kind of thing an SES identity names.
+ *
+ * Real SES has a third, `MANAGED_DOMAIN`, which only its own managed sending
+ * domains carry. Nothing here can create one, so nothing here reports one.
+ */
+export type SimSesIdentityType = "EMAIL_ADDRESS" | "DOMAIN";
+/**
+ * Read an SES identity, refusing one real SES would refuse.
+ *
+ * An identity is either an email address or a domain, and which one it is
+ * follows from whether it has an `@` in it. That is how SES itself decides:
+ * there is no parameter saying which kind is meant.
+ */
+export declare function requiredSimSesIdentityName(emailIdentity?: string): string;
+/**
+ * Which kind of identity a name is.
+ */
+export declare function simSesIdentityType(emailIdentity: string): SimSesIdentityType;
+/**
+ * The domain part of an identity: the whole of a domain identity, and what
+ * follows the `@` of an address one.
+ */
+export declare function simSesIdentityDomain(emailIdentity: string): string;
+/**
+ * How an identity is keyed, so that two spellings of the same thing meet.
+ *
+ * Domains are case insensitive, so they are keyed in lower case. The local
+ * part of an address is not, per RFC 5321, so it is keyed as it was given:
+ * `Sales@example.com` and `sales@example.com` are two identities here, as they
+ * are two mailboxes in principle, while `sales@EXAMPLE.com` is the same one.
+ */
+export declare function simSesIdentityKey(emailIdentity: string): string;
+//# sourceMappingURL=sim-ses-identity-name.d.ts.map

package/dist/service/ses/identity/sim-ses-identity-name.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ses-identity-name.d.ts","sourceRoot":"","sources":["../../../../src/service/ses/identity/sim-ses-identity-name.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,MAAM,MAAM,kBAAkB,GAAG,eAAe,GAAG,QAAQ,CAAC;AAW5D;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,CAwBzE;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,aAAa,EAAE,MAAM,GAAG,kBAAkB,CAE5E;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAElE;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAQ/D"}

package/dist/service/ses/identity/sim-ses-identity-name.js

@@ -0,0 +1,90 @@
+import { SimSesBadRequestException } from "../error/sim-ses.error.js";
+const maximumLength = 320;
+const maximumLabelLength = 63;
+/** What a domain label may be made of. */
+const labelCharacters = /^[a-z0-9-]+$/i;
+/** What a domain has to end with: a dot and at least two letters. */
+const topLevelLabel = /\.[a-z]{2,}$/i;
+/**
+ * Read an SES identity, refusing one real SES would refuse.
+ *
+ * An identity is either an email address or a domain, and which one it is
+ * follows from whether it has an `@` in it. That is how SES itself decides:
+ * there is no parameter saying which kind is meant.
+ */
+export function requiredSimSesIdentityName(emailIdentity) {
+    if (emailIdentity === undefined || emailIdentity.length === 0) {
+        throw new SimSesBadRequestException("1 validation error detected: Value at 'emailIdentity' failed to " +
+            "satisfy constraint: Member must not be null");
+    }
+    if (emailIdentity.length > maximumLength) {
+        throw new SimSesBadRequestException(`1 validation error detected: Value at 'emailIdentity' failed to ` +
+            `satisfy constraint: Member must have length less than or equal to ` +
+            `${maximumLength}`);
+    }
+    if (!isSimSesIdentityName(emailIdentity)) {
+        throw new SimSesBadRequestException(`Invalid identity: ${emailIdentity}. An identity is an email address ` +
+            `or a domain.`);
+    }
+    return emailIdentity;
+}
+/**
+ * Which kind of identity a name is.
+ */
+export function simSesIdentityType(emailIdentity) {
+    return emailIdentity.includes("@") ? "EMAIL_ADDRESS" : "DOMAIN";
+}
+/**
+ * The domain part of an identity: the whole of a domain identity, and what
+ * follows the `@` of an address one.
+ */
+export function simSesIdentityDomain(emailIdentity) {
+    return emailIdentity.slice(emailIdentity.lastIndexOf("@") + 1).toLowerCase();
+}
+/**
+ * How an identity is keyed, so that two spellings of the same thing meet.
+ *
+ * Domains are case insensitive, so they are keyed in lower case. The local
+ * part of an address is not, per RFC 5321, so it is keyed as it was given:
+ * `Sales@example.com` and `sales@example.com` are two identities here, as they
+ * are two mailboxes in principle, while `sales@EXAMPLE.com` is the same one.
+ */
+export function simSesIdentityKey(emailIdentity) {
+    const domain = simSesIdentityDomain(emailIdentity);
+    if (simSesIdentityType(emailIdentity) === "DOMAIN") {
+        return domain;
+    }
+    return `${emailIdentity.slice(0, emailIdentity.lastIndexOf("@"))}@${domain}`;
+}
+function isSimSesIdentityName(emailIdentity) {
+    if (!emailIdentity.includes("@")) {
+        return isDomain(emailIdentity);
+    }
+    const localPart = emailIdentity.slice(0, emailIdentity.lastIndexOf("@"));
+    return (localPart.length > 0 &&
+        !localPart.includes("@") &&
+        isDomain(simSesIdentityDomain(emailIdentity)));
+}
+/**
+ * Whether a name is a domain: two or more dot separated labels, the last of
+ * them alphabetic.
+ *
+ * Checked label by label rather than with one pattern covering the whole
+ * thing. A pattern for a repeated group of repeated characters backtracks
+ * badly on a long near miss, and splitting first is both linear and easier to
+ * read.
+ */
+function isDomain(value) {
+    const labels = value.split(".");
+    return (labels.length >= 2 &&
+        topLevelLabel.test(value) &&
+        labels.every((label) => isDomainLabel(label)));
+}
+function isDomainLabel(label) {
+    return (label.length > 0 &&
+        label.length <= maximumLabelLength &&
+        labelCharacters.test(label) &&
+        !label.startsWith("-") &&
+        !label.endsWith("-"));
+}
+//# sourceMappingURL=sim-ses-identity-name.js.map

package/dist/service/ses/identity/sim-ses-identity-name.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ses-identity-name.js","sourceRoot":"","sources":["../../../../src/service/ses/identity/sim-ses-identity-name.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAUtE,MAAM,aAAa,GAAG,GAAG,CAAC;AAC1B,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAE9B,0CAA0C;AAC1C,MAAM,eAAe,GAAG,eAAe,CAAC;AAExC,qEAAqE;AACrE,MAAM,aAAa,GAAG,eAAe,CAAC;AAEtC;;;;;;GAMG;AACH,MAAM,UAAU,0BAA0B,CAAC,aAAsB;IAC/D,IAAI,aAAa,KAAK,SAAS,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,yBAAyB,CACjC,kEAAkE;YAChE,6CAA6C,CAChD,CAAC;IACJ,CAAC;IAED,IAAI,aAAa,CAAC,MAAM,GAAG,aAAa,EAAE,CAAC;QACzC,MAAM,IAAI,yBAAyB,CACjC,kEAAkE;YAChE,oEAAoE;YACpE,GAAG,aAAa,EAAE,CACrB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,oBAAoB,CAAC,aAAa,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,yBAAyB,CACjC,qBAAqB,aAAa,oCAAoC;YACpE,cAAc,CACjB,CAAC;IACJ,CAAC;IAED,OAAO,aAAa,CAAC;AACvB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,aAAqB;IACtD,OAAO,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC;AAClE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,aAAqB;IACxD,OAAO,aAAa,CAAC,KAAK,CAAC,aAAa,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;AAC/E,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,aAAqB;IACrD,MAAM,MAAM,GAAG,oBAAoB,CAAC,aAAa,CAAC,CAAC;IAEnD,IAAI,kBAAkB,CAAC,aAAa,CAAC,KAAK,QAAQ,EAAE,CAAC;QACnD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,MAAM,EAAE,CAAC;AAC/E,CAAC;AAED,SAAS,oBAAoB,CAAC,aAAqB;IACjD,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,OAAO,QAAQ,CAAC,aAAa,CAAC,CAAC;IACjC,CAAC;IAED,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;IAEzE,OAAO,CACL,SAAS,CAAC,MAAM,GAAG,CAAC;QACpB,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC;QACxB,QAAQ,CAAC,oBAAoB,CAAC,aAAa,CAAC,CAAC,CAC9C,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,QAAQ,CAAC,KAAa;IAC7B,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAEhC,OAAO,CACL,MAAM,CAAC,MAAM,IAAI,CAAC;QAClB,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC;QACzB,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAC9C,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,OAAO,CACL,KAAK,CAAC,MAAM,GAAG,CAAC;QAChB,KAAK,CAAC,MAAM,IAAI,kBAAkB;QAClC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC;QAC3B,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QACtB,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CACrB,CAAC;AACJ,CAAC"}

package/dist/service/ses/identity/sim-ses-identity-store.d.ts

@@ -0,0 +1,62 @@
+import type { SimAwsAccountRegionScope } from "../../aws/sim-aws-account-region-scope.js";
+import { SimSesIdentity } from "./sim-ses-identity.js";
+interface SimSesIdentityStoreProperties {
+    readonly accountRegionScope: SimAwsAccountRegionScope;
+}
+/**
+ * The email identities of one simulated SES scope.
+ *
+ * Identities are region scoped on real SES: verifying an address in one region
+ * verifies nothing in another, which is a mistake worth reproducing rather
+ * than smoothing over.
+ */
+export declare class SimSesIdentityStore {
+    #private;
+    constructor(properties: SimSesIdentityStoreProperties);
+    /**
+     * Every identity in this scope, in the order they were created.
+     */
+    get all(): readonly SimSesIdentity[];
+    /**
+     * Make an identity, refusing one that is already there.
+     */
+    create(emailIdentity: string, createdDate: Date): SimSesIdentity;
+    /**
+     * Find an identity by the address or domain it names.
+     */
+    find(emailIdentity: string): SimSesIdentity | undefined;
+    /**
+     * Get an identity, refusing one that is not there.
+     */
+    require(emailIdentity: string): SimSesIdentity;
+    /**
+     * The identity an address belongs to, whether or not it is verified.
+     *
+     * This is what IAM authorizes an operation on an address against, and the
+     * more specific of the two wins: a policy naming `identity/hello@example.com`
+     * covers a send from that address, and one naming `identity/example.com`
+     * covers a send from any address at the domain. A parent domain does not
+     * cover a subdomain, here or on real SES.
+     *
+     * An address nothing covers falls back to the address itself, since IAM
+     * evaluates a request before the service looks at it and has to authorize
+     * against something either way.
+     */
+    covering(address: string): string;
+    /**
+     * Whether SES would accept mail from or to an address.
+     *
+     * An address is verified if an identity for the address itself is, or if one
+     * for its domain is: verifying `example.com` lets every mailbox at it send,
+     * which is the whole reason domain identities exist. Either will do, so an
+     * address identity still waiting on its link sends anyway once its domain is
+     * verified.
+     */
+    isAddressVerified(address: string): boolean;
+    /**
+     * Remove an identity.
+     */
+    delete(emailIdentity: string): void;
+}
+export {};
+//# sourceMappingURL=sim-ses-identity-store.d.ts.map

package/dist/service/ses/identity/sim-ses-identity-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ses-identity-store.d.ts","sourceRoot":"","sources":["../../../../src/service/ses/identity/sim-ses-identity-store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAS1F,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,UAAU,6BAA6B;IACrC,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;CACvD;AAED;;;;;;GAMG;AACH,qBAAa,mBAAmB;;IAI9B,YAAY,UAAU,EAAE,6BAA6B,EAEpD;IAED;;OAEG;IACH,IAAI,GAAG,IAAI,SAAS,cAAc,EAAE,CAEnC;IAED;;OAEG;IACH,MAAM,CAAC,aAAa,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,GAAG,cAAc,CAkB/D;IAED;;OAEG;IACH,IAAI,CAAC,aAAa,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAEtD;IAED;;OAEG;IACH,OAAO,CAAC,aAAa,EAAE,MAAM,GAAG,cAAc,CAU7C;IAED;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAMhC;IAED;;;;;;;;OAQG;IACH,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAK1C;IAED;;OAEG;IACH,MAAM,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAElC;CACF"}

package/dist/service/ses/identity/sim-ses-identity-store.js

@@ -0,0 +1,93 @@
+import { SimSesAlreadyExistsException, SimSesNotFoundException, } from "../error/sim-ses.error.js";
+import { simSesIdentityDomain, simSesIdentityKey, } from "./sim-ses-identity-name.js";
+import { SimSesIdentity } from "./sim-ses-identity.js";
+/**
+ * The email identities of one simulated SES scope.
+ *
+ * Identities are region scoped on real SES: verifying an address in one region
+ * verifies nothing in another, which is a mistake worth reproducing rather
+ * than smoothing over.
+ */
+export class SimSesIdentityStore {
+    #accountRegionScope;
+    #identities = new Map();
+    constructor(properties) {
+        this.#accountRegionScope = properties.accountRegionScope;
+    }
+    /**
+     * Every identity in this scope, in the order they were created.
+     */
+    get all() {
+        return this.#identities.values().toArray();
+    }
+    /**
+     * Make an identity, refusing one that is already there.
+     */
+    create(emailIdentity, createdDate) {
+        const key = simSesIdentityKey(emailIdentity);
+        if (this.#identities.has(key)) {
+            throw new SimSesAlreadyExistsException(`Email identity ${emailIdentity} already exists.`);
+        }
+        const identity = new SimSesIdentity({
+            emailIdentity,
+            accountRegionScope: this.#accountRegionScope,
+            createdDate,
+        });
+        this.#identities.set(key, identity);
+        return identity;
+    }
+    /**
+     * Find an identity by the address or domain it names.
+     */
+    find(emailIdentity) {
+        return this.#identities.get(simSesIdentityKey(emailIdentity));
+    }
+    /**
+     * Get an identity, refusing one that is not there.
+     */
+    require(emailIdentity) {
+        const identity = this.find(emailIdentity);
+        if (identity === undefined) {
+            throw new SimSesNotFoundException(`Email identity ${emailIdentity} does not exist.`);
+        }
+        return identity;
+    }
+    /**
+     * The identity an address belongs to, whether or not it is verified.
+     *
+     * This is what IAM authorizes an operation on an address against, and the
+     * more specific of the two wins: a policy naming `identity/hello@example.com`
+     * covers a send from that address, and one naming `identity/example.com`
+     * covers a send from any address at the domain. A parent domain does not
+     * cover a subdomain, here or on real SES.
+     *
+     * An address nothing covers falls back to the address itself, since IAM
+     * evaluates a request before the service looks at it and has to authorize
+     * against something either way.
+     */
+    covering(address) {
+        return (this.find(address)?.emailIdentity ??
+            this.find(simSesIdentityDomain(address))?.emailIdentity ??
+            address);
+    }
+    /**
+     * Whether SES would accept mail from or to an address.
+     *
+     * An address is verified if an identity for the address itself is, or if one
+     * for its domain is: verifying `example.com` lets every mailbox at it send,
+     * which is the whole reason domain identities exist. Either will do, so an
+     * address identity still waiting on its link sends anyway once its domain is
+     * verified.
+     */
+    isAddressVerified(address) {
+        return (this.find(address)?.isVerified === true ||
+            this.find(simSesIdentityDomain(address))?.isVerified === true);
+    }
+    /**
+     * Remove an identity.
+     */
+    delete(emailIdentity) {
+        this.#identities.delete(simSesIdentityKey(emailIdentity));
+    }
+}
+//# sourceMappingURL=sim-ses-identity-store.js.map

package/dist/service/ses/identity/sim-ses-identity-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ses-identity-store.js","sourceRoot":"","sources":["../../../../src/service/ses/identity/sim-ses-identity-store.ts"],"names":[],"mappings":"AACA,OAAO,EACL,4BAA4B,EAC5B,uBAAuB,GACxB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAMvD;;;;;;GAMG;AACH,MAAM,OAAO,mBAAmB;IACrB,mBAAmB,CAA2B;IAC9C,WAAW,GAAG,IAAI,GAAG,EAA0B,CAAC;IAEzD,YAAY,UAAyC;QACnD,IAAI,CAAC,mBAAmB,GAAG,UAAU,CAAC,kBAAkB,CAAC;IAC3D,CAAC;IAED;;OAEG;IACH,IAAI,GAAG;QACL,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,aAAqB,EAAE,WAAiB;QAC7C,MAAM,GAAG,GAAG,iBAAiB,CAAC,aAAa,CAAC,CAAC;QAE7C,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,4BAA4B,CACpC,kBAAkB,aAAa,kBAAkB,CAClD,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,cAAc,CAAC;YAClC,aAAa;YACb,kBAAkB,EAAE,IAAI,CAAC,mBAAmB;YAC5C,WAAW;SACZ,CAAC,CAAC;QAEH,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAEpC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,aAAqB;QACxB,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC,CAAC;IAChE,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,aAAqB;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAE1C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,uBAAuB,CAC/B,kBAAkB,aAAa,kBAAkB,CAClD,CAAC;QACJ,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,OAAe;QACtB,OAAO,CACL,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,aAAa;YACjC,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,EAAE,aAAa;YACvD,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,iBAAiB,CAAC,OAAe;QAC/B,OAAO,CACL,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,UAAU,KAAK,IAAI;YACvC,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,EAAE,UAAU,KAAK,IAAI,CAC9D,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,aAAqB;QAC1B,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC,CAAC;IAC5D,CAAC;CACF"}

package/dist/service/ses/identity/sim-ses-identity.d.ts

@@ -0,0 +1,63 @@
+import type { SimAwsAccountRegionScope } from "../../aws/sim-aws-account-region-scope.js";
+import { type SimSesIdentityType } from "./sim-ses-identity-name.js";
+/**
+ * How far along an identity's verification is, in SES's own vocabulary.
+ *
+ * Only two of the five real values occur here. Nothing in this simulator can
+ * fail a verification or leave one in a temporary failure, because nothing
+ * here does the checking that would fail: an identity is pending until a test
+ * says it is verified.
+ */
+export type SimSesVerificationStatus = "PENDING" | "SUCCESS";
+interface SimSesIdentityProperties {
+    readonly emailIdentity: string;
+    readonly accountRegionScope: SimAwsAccountRegionScope;
+    readonly createdDate: Date;
+}
+/**
+ * One email address or domain SES has been asked to send from.
+ *
+ * An identity starts unverified and stays that way until something says
+ * otherwise. Real SES verifies an address by emailing it a link and a domain
+ * by looking for DNS records, and neither of those can happen inside a test
+ * process, so verification here is a simulator-side act rather than an API
+ * operation.
+ */
+export declare class SimSesIdentity {
+    #private;
+    /** The address or domain, spelled as it was given. */
+    readonly emailIdentity: string;
+    /** How this identity is looked up, so two spellings of it meet. */
+    readonly key: string;
+    readonly identityType: SimSesIdentityType;
+    readonly arn: string;
+    readonly createdDate: Date;
+    constructor(properties: SimSesIdentityProperties);
+    get verificationStatus(): SimSesVerificationStatus;
+    /**
+     * Whether SES would let a message be sent from this identity.
+     *
+     * Real SES reports this separately from the verification status because an
+     * account under enforcement can hold a verified identity it may not send
+     * from. Nothing here puts an account under enforcement, so the two agree.
+     */
+    get isVerified(): boolean;
+    /**
+     * Treat this identity as having completed verification.
+     *
+     * This stands in for clicking the link SES emails, or for the DNS records a
+     * domain identity waits on. It is the simulator's own operation and no SES
+     * API call reaches it.
+     */
+    verify(): void;
+    /**
+     * Put this identity back to waiting on its verification.
+     *
+     * Real SES moves an identity out of `SUCCESS` when the records that proved
+     * it stop resolving, so a test that wants to see sending fail after it once
+     * worked has somewhere to go.
+     */
+    unverify(): void;
+}
+export {};
+//# sourceMappingURL=sim-ses-identity.d.ts.map

package/dist/service/ses/identity/sim-ses-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ses-identity.d.ts","sourceRoot":"","sources":["../../../../src/service/ses/identity/sim-ses-identity.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAE1F,OAAO,EAGL,KAAK,kBAAkB,EACxB,MAAM,4BAA4B,CAAC;AAEpC;;;;;;;GAOG;AACH,MAAM,MAAM,wBAAwB,GAAG,SAAS,GAAG,SAAS,CAAC;AAE7D,UAAU,wBAAwB;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;IACtD,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC;CAC5B;AAED;;;;;;;;GAQG;AACH,qBAAa,cAAc;;IACzB,sDAAsD;IACtD,SAAgB,aAAa,EAAE,MAAM,CAAC;IAEtC,mEAAmE;IACnE,SAAgB,GAAG,EAAE,MAAM,CAAC;IAE5B,SAAgB,YAAY,EAAE,kBAAkB,CAAC;IAEjD,SAAgB,GAAG,EAAE,MAAM,CAAC;IAE5B,SAAgB,WAAW,EAAE,IAAI,CAAC;IAIlC,YAAY,UAAU,EAAE,wBAAwB,EAS/C;IAED,IAAI,kBAAkB,IAAI,wBAAwB,CAEjD;IAED;;;;;;OAMG;IACH,IAAI,UAAU,IAAI,OAAO,CAExB;IAED;;;;;;OAMG;IACH,MAAM,IAAI,IAAI,CAEb;IAED;;;;;;OAMG;IACH,QAAQ,IAAI,IAAI,CAEf;CACF"}

package/dist/service/ses/identity/sim-ses-identity.js

@@ -0,0 +1,62 @@
+import { simSesIdentityArn } from "../sim-ses-arn.js";
+import { simSesIdentityKey, simSesIdentityType, } from "./sim-ses-identity-name.js";
+/**
+ * One email address or domain SES has been asked to send from.
+ *
+ * An identity starts unverified and stays that way until something says
+ * otherwise. Real SES verifies an address by emailing it a link and a domain
+ * by looking for DNS records, and neither of those can happen inside a test
+ * process, so verification here is a simulator-side act rather than an API
+ * operation.
+ */
+export class SimSesIdentity {
+    /** The address or domain, spelled as it was given. */
+    emailIdentity;
+    /** How this identity is looked up, so two spellings of it meet. */
+    key;
+    identityType;
+    arn;
+    createdDate;
+    #verificationStatus = "PENDING";
+    constructor(properties) {
+        this.emailIdentity = properties.emailIdentity;
+        this.key = simSesIdentityKey(properties.emailIdentity);
+        this.identityType = simSesIdentityType(properties.emailIdentity);
+        this.arn = simSesIdentityArn(properties.accountRegionScope, properties.emailIdentity);
+        this.createdDate = properties.createdDate;
+    }
+    get verificationStatus() {
+        return this.#verificationStatus;
+    }
+    /**
+     * Whether SES would let a message be sent from this identity.
+     *
+     * Real SES reports this separately from the verification status because an
+     * account under enforcement can hold a verified identity it may not send
+     * from. Nothing here puts an account under enforcement, so the two agree.
+     */
+    get isVerified() {
+        return this.#verificationStatus === "SUCCESS";
+    }
+    /**
+     * Treat this identity as having completed verification.
+     *
+     * This stands in for clicking the link SES emails, or for the DNS records a
+     * domain identity waits on. It is the simulator's own operation and no SES
+     * API call reaches it.
+     */
+    verify() {
+        this.#verificationStatus = "SUCCESS";
+    }
+    /**
+     * Put this identity back to waiting on its verification.
+     *
+     * Real SES moves an identity out of `SUCCESS` when the records that proved
+     * it stop resolving, so a test that wants to see sending fail after it once
+     * worked has somewhere to go.
+     */
+    unverify() {
+        this.#verificationStatus = "PENDING";
+    }
+}
+//# sourceMappingURL=sim-ses-identity.js.map

package/dist/service/ses/identity/sim-ses-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ses-identity.js","sourceRoot":"","sources":["../../../../src/service/ses/identity/sim-ses-identity.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EACL,iBAAiB,EACjB,kBAAkB,GAEnB,MAAM,4BAA4B,CAAC;AAkBpC;;;;;;;;GAQG;AACH,MAAM,OAAO,cAAc;IACzB,sDAAsD;IACtC,aAAa,CAAS;IAEtC,mEAAmE;IACnD,GAAG,CAAS;IAEZ,YAAY,CAAqB;IAEjC,GAAG,CAAS;IAEZ,WAAW,CAAO;IAElC,mBAAmB,GAA6B,SAAS,CAAC;IAE1D,YAAY,UAAoC;QAC9C,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;QAC9C,IAAI,CAAC,GAAG,GAAG,iBAAiB,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;QACvD,IAAI,CAAC,YAAY,GAAG,kBAAkB,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;QACjE,IAAI,CAAC,GAAG,GAAG,iBAAiB,CAC1B,UAAU,CAAC,kBAAkB,EAC7B,UAAU,CAAC,aAAa,CACzB,CAAC;QACF,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;IAC5C,CAAC;IAED,IAAI,kBAAkB;QACpB,OAAO,IAAI,CAAC,mBAAmB,CAAC;IAClC,CAAC;IAED;;;;;;OAMG;IACH,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,mBAAmB,KAAK,SAAS,CAAC;IAChD,CAAC;IAED;;;;;;OAMG;IACH,MAAM;QACJ,IAAI,CAAC,mBAAmB,GAAG,SAAS,CAAC;IACvC,CAAC;IAED;;;;;;OAMG;IACH,QAAQ;QACN,IAAI,CAAC,mBAAmB,GAAG,SAAS,CAAC;IACvC,CAAC;CACF"}