@kensio/yulin 1.15.1 → 1.16.1

package/dist/service/ses/command/account/sim-ses-account-commands.js

@@ -0,0 +1,41 @@
+import { readSimSesAccountDetails } from "./sim-ses-account-details-input.js";
+import { simSesAccountReport } from "./sim-ses-account-report.js";
+/**
+ * The commands that read and change what a whole SES account may do.
+ *
+ * Both authorize against `*`, because real SES gives neither a resource type:
+ * only a policy written against every resource allows them, and one naming an
+ * identity ARN allows neither.
+ */
+export class SimSesAccountCommands {
+    #account;
+    #sent;
+    #authorizer;
+    #clock;
+    constructor(properties) {
+        this.#account = properties.account;
+        this.#sent = properties.sent;
+        this.#authorizer = properties.authorizer;
+        this.#clock = properties.clock;
+    }
+    /**
+     * Report what this account may do, including whether it is still in the
+     * sandbox.
+     */
+    getAccount(options) {
+        this.#authorizer.authorizeNoResource("ses:GetAccount", options?.caller);
+        return simSesAccountReport({
+            account: this.#account,
+            sentLast24Hours: this.#sent.countSentSince(this.#clock.now()),
+        });
+    }
+    /**
+     * Record the account details, and leave the sandbox if they ask to.
+     */
+    putAccountDetails(command, options) {
+        this.#authorizer.authorizeNoResource("ses:PutAccountDetails", options?.caller);
+        this.#account.putDetails(readSimSesAccountDetails(command.input), command.input.ProductionAccessEnabled ?? false);
+        return { $metadata: {} };
+    }
+}
+//# sourceMappingURL=sim-ses-account-commands.js.map

package/dist/service/ses/command/account/sim-ses-account-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ses-account-commands.js","sourceRoot":"","sources":["../../../../../src/service/ses/command/account/sim-ses-account-commands.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AASlE;;;;;;GAMG;AACH,MAAM,OAAO,qBAAqB;IACvB,QAAQ,CAAgB;IACxB,KAAK,CAAuB;IAC5B,WAAW,CAAmB;IAC9B,MAAM,CAAW;IAE1B,YAAY,UAA2C;QACrD,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC;QACnC,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC;QAC7B,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,UAAU,CAAC;QACzC,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC;IACjC,CAAC;IAED;;;OAGG;IACH,UAAU,CAAC,OAA8B;QACvC,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,gBAAgB,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAExE,OAAO,mBAAmB,CAAC;YACzB,OAAO,EAAE,IAAI,CAAC,QAAQ;YACtB,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;SAC9D,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,iBAAiB,CACf,OAAoC,EACpC,OAA8B;QAE9B,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAClC,uBAAuB,EACvB,OAAO,EAAE,MAAM,CAChB,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,UAAU,CACtB,wBAAwB,CAAC,OAAO,CAAC,KAAK,CAAC,EACvC,OAAO,CAAC,KAAK,CAAC,uBAAuB,IAAI,KAAK,CAC/C,CAAC;QAEF,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC3B,CAAC;CACF"}

package/dist/service/ses/command/account/sim-ses-account-details-input.d.ts

@@ -0,0 +1,11 @@
+import type { SimSesAccountContactDetails } from "../../account/sim-ses-account.js";
+import type { SimPutAccountDetailsCommandInput } from "./account.command.js";
+/**
+ * Read the account details a request carries, refusing what real SES refuses.
+ *
+ * `MailType` and `WebsiteURL` are both required on real SES, which is easy to
+ * miss: the request that only wants to leave the sandbox still has to say what
+ * the account sends and where from.
+ */
+export declare function readSimSesAccountDetails(input: SimPutAccountDetailsCommandInput): SimSesAccountContactDetails;
+//# sourceMappingURL=sim-ses-account-details-input.d.ts.map

package/dist/service/ses/command/account/sim-ses-account-details-input.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ses-account-details-input.d.ts","sourceRoot":"","sources":["../../../../../src/service/ses/command/account/sim-ses-account-details-input.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAEpF,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,sBAAsB,CAAC;AAY7E;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,gCAAgC,GACtC,2BAA2B,CAQ7B"}

package/dist/service/ses/command/account/sim-ses-account-details-input.js

@@ -0,0 +1,50 @@
+import { SimSesBadRequestException } from "../../error/sim-ses.error.js";
+/**
+ * The mail types real SES accepts, and requires one of.
+ */
+const mailTypes = new Set(["MARKETING", "TRANSACTIONAL"]);
+/**
+ * The two languages real SES will write to a contact in.
+ */
+const contactLanguages = new Set(["EN", "JA"]);
+/**
+ * Read the account details a request carries, refusing what real SES refuses.
+ *
+ * `MailType` and `WebsiteURL` are both required on real SES, which is easy to
+ * miss: the request that only wants to leave the sandbox still has to say what
+ * the account sends and where from.
+ */
+export function readSimSesAccountDetails(input) {
+    return {
+        mailType: requiredMailType(input.MailType),
+        websiteUrl: requiredWebsiteUrl(input.WebsiteURL),
+        contactLanguage: optionalContactLanguage(input.ContactLanguage),
+        useCaseDescription: input.UseCaseDescription,
+        additionalContactEmailAddresses: input.AdditionalContactEmailAddresses,
+    };
+}
+function requiredMailType(mailType) {
+    if (mailType === undefined || !mailTypes.has(mailType)) {
+        throw new SimSesBadRequestException(`1 validation error detected: Value '${String(mailType)}' at ` +
+            `'mailType' failed to satisfy constraint: Member must be one of ${[
+                ...mailTypes,
+            ].join(", ")}`);
+    }
+    return mailType;
+}
+function optionalContactLanguage(contactLanguage) {
+    if (contactLanguage !== undefined && !contactLanguages.has(contactLanguage)) {
+        throw new SimSesBadRequestException(`1 validation error detected: Value '${contactLanguage}' at ` +
+            `'contactLanguage' failed to satisfy constraint: Member must be one ` +
+            `of ${[...contactLanguages].join(", ")}`);
+    }
+    return contactLanguage;
+}
+function requiredWebsiteUrl(websiteUrl) {
+    if (websiteUrl === undefined || websiteUrl.length === 0) {
+        throw new SimSesBadRequestException("1 validation error detected: Value at 'websiteURL' failed to satisfy " +
+            "constraint: Member must not be null");
+    }
+    return websiteUrl;
+}
+//# sourceMappingURL=sim-ses-account-details-input.js.map

package/dist/service/ses/command/account/sim-ses-account-details-input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ses-account-details-input.js","sourceRoot":"","sources":["../../../../../src/service/ses/command/account/sim-ses-account-details-input.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AAGzE;;GAEG;AACH,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC,CAAC;AAE1D;;GAEG;AACH,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAE/C;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CACtC,KAAuC;IAEvC,OAAO;QACL,QAAQ,EAAE,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC1C,UAAU,EAAE,kBAAkB,CAAC,KAAK,CAAC,UAAU,CAAC;QAChD,eAAe,EAAE,uBAAuB,CAAC,KAAK,CAAC,eAAe,CAAC;QAC/D,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,+BAA+B,EAAE,KAAK,CAAC,+BAA+B;KACvE,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,QAA4B;IACpD,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,yBAAyB,CACjC,uCAAuC,MAAM,CAAC,QAAQ,CAAC,OAAO;YAC5D,kEAAkE;gBAChE,GAAG,SAAS;aACb,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACjB,CAAC;IACJ,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,uBAAuB,CAC9B,eAAmC;IAEnC,IAAI,eAAe,KAAK,SAAS,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,yBAAyB,CACjC,uCAAuC,eAAe,OAAO;YAC3D,qEAAqE;YACrE,MAAM,CAAC,GAAG,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC3C,CAAC;IACJ,CAAC;IAED,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,SAAS,kBAAkB,CAAC,UAA8B;IACxD,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,yBAAyB,CACjC,uEAAuE;YACrE,qCAAqC,CACxC,CAAC;IACJ,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/service/ses/command/account/sim-ses-account-report.d.ts

@@ -0,0 +1,21 @@
+import type { SimSesAccount } from "../../account/sim-ses-account.js";
+import type { SimGetAccountCommandOutput } from "./account.command.js";
+interface SimSesAccountReportInput {
+    readonly account: SimSesAccount;
+    /** How many messages this scope accepted in the last 24 hours. */
+    readonly sentLast24Hours: number;
+}
+/**
+ * What `GetAccount` reports about one simulated SES account.
+ *
+ * The quota figures are the real sandbox and production ones and nothing here
+ * enforces them: `SentLast24Hours` counts what was actually sent, and a send
+ * past the daily figure still succeeds.
+ *
+ * `EnforcementStatus` is always `HEALTHY` and `SendingEnabled` always true,
+ * because nothing here puts an account under enforcement or pauses its
+ * sending.
+ */
+export declare function simSesAccountReport(input: SimSesAccountReportInput): SimGetAccountCommandOutput;
+export {};
+//# sourceMappingURL=sim-ses-account-report.d.ts.map

package/dist/service/ses/command/account/sim-ses-account-report.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ses-account-report.d.ts","sourceRoot":"","sources":["../../../../../src/service/ses/command/account/sim-ses-account-report.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,KAAK,EACV,0BAA0B,EAE3B,MAAM,sBAAsB,CAAC;AAE9B,UAAU,wBAAwB;IAChC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAEhC,kEAAkE;IAClE,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,wBAAwB,GAC9B,0BAA0B,CAiB5B"}

package/dist/service/ses/command/account/sim-ses-account-report.js

@@ -0,0 +1,45 @@
+/**
+ * What `GetAccount` reports about one simulated SES account.
+ *
+ * The quota figures are the real sandbox and production ones and nothing here
+ * enforces them: `SentLast24Hours` counts what was actually sent, and a send
+ * past the daily figure still succeeds.
+ *
+ * `EnforcementStatus` is always `HEALTHY` and `SendingEnabled` always true,
+ * because nothing here puts an account under enforcement or pauses its
+ * sending.
+ */
+export function simSesAccountReport(input) {
+    const { account } = input;
+    const quota = account.sendQuota;
+    return {
+        $metadata: {},
+        DedicatedIpAutoWarmupEnabled: true,
+        EnforcementStatus: "HEALTHY",
+        ProductionAccessEnabled: account.productionAccessEnabled,
+        SendingEnabled: true,
+        SendQuota: {
+            Max24HourSend: quota.max24HourSend,
+            MaxSendRate: quota.maxSendRate,
+            SentLast24Hours: input.sentLast24Hours,
+        },
+        Details: accountDetails(account),
+    };
+}
+function accountDetails(account) {
+    const details = account.contactDetails;
+    if (details === undefined) {
+        return undefined;
+    }
+    return {
+        MailType: details.mailType,
+        WebsiteURL: details.websiteUrl,
+        ContactLanguage: details.contactLanguage,
+        UseCaseDescription: details.useCaseDescription,
+        AdditionalContactEmailAddresses: details.additionalContactEmailAddresses,
+        ReviewDetails: {
+            Status: account.productionAccessEnabled ? "GRANTED" : "PENDING",
+        },
+    };
+}
+//# sourceMappingURL=sim-ses-account-report.js.map

package/dist/service/ses/command/account/sim-ses-account-report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ses-account-report.js","sourceRoot":"","sources":["../../../../../src/service/ses/command/account/sim-ses-account-report.ts"],"names":[],"mappings":"AAaA;;;;;;;;;;GAUG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAA+B;IAE/B,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC1B,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,CAAC;IAEhC,OAAO;QACL,SAAS,EAAE,EAAE;QACb,4BAA4B,EAAE,IAAI;QAClC,iBAAiB,EAAE,SAAS;QAC5B,uBAAuB,EAAE,OAAO,CAAC,uBAAuB;QACxD,cAAc,EAAE,IAAI;QACpB,SAAS,EAAE;YACT,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,eAAe,EAAE,KAAK,CAAC,eAAe;SACvC;QACD,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC;KACjC,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CACrB,OAAsB;IAEtB,MAAM,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC;IAEvC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;QAC9C,+BAA+B,EAAE,OAAO,CAAC,+BAA+B;QACxE,aAAa,EAAE;YACb,MAAM,EAAE,OAAO,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;SAChE;KACF,CAAC;AACJ,CAAC"}

package/dist/service/ses/command/authorize/sim-ses-authorizer.d.ts

@@ -0,0 +1,55 @@
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimAwsResolvedCaller } from "../../../aws/caller/sim-aws-caller-resolver.js";
+import type { SimAwsAccountRegionScope } from "../../../aws/sim-aws-account-region-scope.js";
+import type { SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+interface SimSesAuthorizerProperties {
+    readonly iam: SimIamInterServiceAuthZ;
+    readonly accountRegionScope: SimAwsAccountRegionScope;
+}
+/**
+ * Applies simulated IAM authorization to SES requests.
+ *
+ * An SES operation on one identity authorizes against that identity's ARN,
+ * which is the form SES policies are written in: allowing `ses:SendEmail` on
+ * `arn:aws:ses:us-east-1:111111111111:identity/example.com` lets a caller send
+ * from any address at that domain, and lets it send from nothing else.
+ *
+ * A send authorizes against the identity being sent *from*. Recipients never
+ * enter into it, which is worth knowing when a policy looks like it should
+ * cover a send and does not.
+ */
+export declare class SimSesAuthorizer {
+    #private;
+    constructor(properties: SimSesAuthorizerProperties);
+    /**
+     * Ensure the caller may perform an action on one email identity.
+     *
+     * The identity need not exist. Real IAM evaluates a request before the
+     * service handles it, so a caller with no permission is refused whether or
+     * not the identity is there, and CreateEmailIdentity authorizes against the
+     * ARN the identity is about to have.
+     */
+    authorizeIdentity(action: string, emailIdentity: string, caller?: SimAwsCaller): SimAwsResolvedCaller;
+    /**
+     * Ensure the caller may perform an action on one email template.
+     *
+     * The template need not exist, for the same reason an identity need not:
+     * real IAM decides a request before the service looks at it, so
+     * CreateEmailTemplate authorizes against the ARN the template is about to
+     * have.
+     */
+    authorizeTemplate(action: string, templateName: string, caller?: SimAwsCaller): SimAwsResolvedCaller;
+    /**
+     * Ensure the caller may perform an action real SES gives no resource type,
+     * such as listing identities or reading the account.
+     *
+     * The resource is `*`, which is the only thing such an action can be granted
+     * on. Writing the listing's resource as every identity in the Account and
+     * Region would be the intuitive reading and the wrong one: a policy scoped
+     * that way allows no listing on AWS, and should allow none here.
+     */
+    authorizeNoResource(action: string, caller?: SimAwsCaller): SimAwsResolvedCaller;
+    private authorizeResource;
+}
+export {};
+//# sourceMappingURL=sim-ses-authorizer.d.ts.map

package/dist/service/ses/command/authorize/sim-ses-authorizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ses-authorizer.d.ts","sourceRoot":"","sources":["../../../../../src/service/ses/command/authorize/sim-ses-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gDAAgD,CAAC;AAC3F,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAetG,UAAU,0BAA0B;IAClC,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;IACtC,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;CACvD;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,gBAAgB;;IAI3B,YAAY,UAAU,EAAE,0BAA0B,EAGjD;IAED;;;;;;;OAOG;IACH,iBAAiB,CACf,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,MAAM,EACrB,MAAM,CAAC,EAAE,YAAY,GACpB,oBAAoB,CAMtB;IAED;;;;;;;OAOG;IACH,iBAAiB,CACf,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,EACpB,MAAM,CAAC,EAAE,YAAY,GACpB,oBAAoB,CAMtB;IAED;;;;;;;;OAQG;IACH,mBAAmB,CACjB,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,YAAY,GACpB,oBAAoB,CAEtB;IAED,OAAO,CAAC,iBAAiB;CAiB1B"}

package/dist/service/ses/command/authorize/sim-ses-authorizer.js

@@ -0,0 +1,78 @@
+import { SimIamAccessDenied } from "../../../iam/error/sim-iam.error.js";
+import { simSesIdentityArn, simSesTemplateArn } from "../../sim-ses-arn.js";
+/**
+ * The resource an action with no resource type authorizes against.
+ *
+ * Real SES gives the two listings, `ses:GetAccount` and
+ * `ses:PutAccountDetails` no resource type at all, so IAM evaluates them
+ * against `*` and only a policy whose Resource is `*` allows them. A policy
+ * naming an identity or template ARN allows none of them, not even one written
+ * against every identity in the Account and Region, here as on AWS.
+ */
+const noResource = "*";
+/**
+ * Applies simulated IAM authorization to SES requests.
+ *
+ * An SES operation on one identity authorizes against that identity's ARN,
+ * which is the form SES policies are written in: allowing `ses:SendEmail` on
+ * `arn:aws:ses:us-east-1:111111111111:identity/example.com` lets a caller send
+ * from any address at that domain, and lets it send from nothing else.
+ *
+ * A send authorizes against the identity being sent *from*. Recipients never
+ * enter into it, which is worth knowing when a policy looks like it should
+ * cover a send and does not.
+ */
+export class SimSesAuthorizer {
+    #iam;
+    #accountRegionScope;
+    constructor(properties) {
+        this.#iam = properties.iam;
+        this.#accountRegionScope = properties.accountRegionScope;
+    }
+    /**
+     * Ensure the caller may perform an action on one email identity.
+     *
+     * The identity need not exist. Real IAM evaluates a request before the
+     * service handles it, so a caller with no permission is refused whether or
+     * not the identity is there, and CreateEmailIdentity authorizes against the
+     * ARN the identity is about to have.
+     */
+    authorizeIdentity(action, emailIdentity, caller) {
+        return this.authorizeResource(action, simSesIdentityArn(this.#accountRegionScope, emailIdentity), caller);
+    }
+    /**
+     * Ensure the caller may perform an action on one email template.
+     *
+     * The template need not exist, for the same reason an identity need not:
+     * real IAM decides a request before the service looks at it, so
+     * CreateEmailTemplate authorizes against the ARN the template is about to
+     * have.
+     */
+    authorizeTemplate(action, templateName, caller) {
+        return this.authorizeResource(action, simSesTemplateArn(this.#accountRegionScope, templateName), caller);
+    }
+    /**
+     * Ensure the caller may perform an action real SES gives no resource type,
+     * such as listing identities or reading the account.
+     *
+     * The resource is `*`, which is the only thing such an action can be granted
+     * on. Writing the listing's resource as every identity in the Account and
+     * Region would be the intuitive reading and the wrong one: a policy scoped
+     * that way allows no listing on AWS, and should allow none here.
+     */
+    authorizeNoResource(action, caller) {
+        return this.authorizeResource(action, noResource, caller);
+    }
+    authorizeResource(action, resource, caller) {
+        const decision = this.#iam.authorize({ action, resource, caller });
+        if (decision.isDenied) {
+            throw new SimIamAccessDenied({
+                principal: decision.caller.principal,
+                action,
+                resource,
+            });
+        }
+        return decision.caller;
+    }
+}
+//# sourceMappingURL=sim-ses-authorizer.js.map

package/dist/service/ses/command/authorize/sim-ses-authorizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ses-authorizer.js","sourceRoot":"","sources":["../../../../../src/service/ses/command/authorize/sim-ses-authorizer.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAE5E;;;;;;;;GAQG;AACH,MAAM,UAAU,GAAG,GAAG,CAAC;AAOvB;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,gBAAgB;IAClB,IAAI,CAA0B;IAC9B,mBAAmB,CAA2B;IAEvD,YAAY,UAAsC;QAChD,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC;QAC3B,IAAI,CAAC,mBAAmB,GAAG,UAAU,CAAC,kBAAkB,CAAC;IAC3D,CAAC;IAED;;;;;;;OAOG;IACH,iBAAiB,CACf,MAAc,EACd,aAAqB,EACrB,MAAqB;QAErB,OAAO,IAAI,CAAC,iBAAiB,CAC3B,MAAM,EACN,iBAAiB,CAAC,IAAI,CAAC,mBAAmB,EAAE,aAAa,CAAC,EAC1D,MAAM,CACP,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,iBAAiB,CACf,MAAc,EACd,YAAoB,EACpB,MAAqB;QAErB,OAAO,IAAI,CAAC,iBAAiB,CAC3B,MAAM,EACN,iBAAiB,CAAC,IAAI,CAAC,mBAAmB,EAAE,YAAY,CAAC,EACzD,MAAM,CACP,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,mBAAmB,CACjB,MAAc,EACd,MAAqB;QAErB,OAAO,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IAC5D,CAAC;IAEO,iBAAiB,CACvB,MAAc,EACd,QAAgB,EAChB,MAAgC;QAEhC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAEnE,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;gBACpC,MAAM;gBACN,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;QAED,OAAO,QAAQ,CAAC,MAAM,CAAC;IACzB,CAAC;CACF"}

package/dist/service/ses/command/identity/identity.command.d.ts

@@ -0,0 +1,84 @@
+import type { SimResponseMetadata } from "../../../aws/metadata/response-metadata.type.js";
+/**
+ * The verification states real SES reports, of which this simulator produces
+ * two: an identity is pending until something says it is verified.
+ */
+export type SimSesVerificationStatusValue = "FAILED" | "NOT_STARTED" | "PENDING" | "SUCCESS" | "TEMPORARY_FAILURE";
+/**
+ * Minimal structural sim SES v2 CreateEmailIdentity command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/sesv2/command/CreateEmailIdentityCommand/
+ */
+export interface SimCreateEmailIdentityCommand {
+    readonly input: SimCreateEmailIdentityCommandInput;
+}
+export interface SimCreateEmailIdentityCommandInput {
+    readonly EmailIdentity?: string | undefined;
+    readonly Tags?: readonly unknown[] | undefined;
+    readonly DkimSigningAttributes?: unknown;
+    readonly ConfigurationSetName?: string | undefined;
+}
+export interface SimCreateEmailIdentityCommandOutput {
+    readonly IdentityType?: string | undefined;
+    readonly VerifiedForSendingStatus?: boolean | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * Minimal structural sim SES v2 GetEmailIdentity command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/sesv2/command/GetEmailIdentityCommand/
+ */
+export interface SimGetEmailIdentityCommand {
+    readonly input: SimGetEmailIdentityCommandInput;
+}
+export interface SimGetEmailIdentityCommandInput {
+    readonly EmailIdentity?: string | undefined;
+}
+export interface SimGetEmailIdentityCommandOutput {
+    readonly IdentityType?: string | undefined;
+    readonly VerifiedForSendingStatus?: boolean | undefined;
+    readonly VerificationStatus?: SimSesVerificationStatusValue | undefined;
+    readonly FeedbackForwardingStatus?: boolean | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * Minimal structural sim SES v2 DeleteEmailIdentity command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/sesv2/command/DeleteEmailIdentityCommand/
+ */
+export interface SimDeleteEmailIdentityCommand {
+    readonly input: SimDeleteEmailIdentityCommandInput;
+}
+export interface SimDeleteEmailIdentityCommandInput {
+    readonly EmailIdentity?: string | undefined;
+}
+export interface SimDeleteEmailIdentityCommandOutput {
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * Minimal structural sim SES v2 ListEmailIdentities command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/sesv2/command/ListEmailIdentitiesCommand/
+ */
+export interface SimListEmailIdentitiesCommand {
+    readonly input: SimListEmailIdentitiesCommandInput;
+}
+export interface SimListEmailIdentitiesCommandInput {
+    readonly PageSize?: number | undefined;
+    readonly NextToken?: string | undefined;
+}
+export interface SimListEmailIdentitiesCommandOutput {
+    readonly EmailIdentities?: readonly SimSesIdentityInfo[] | undefined;
+    readonly NextToken?: string | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * What ListEmailIdentities reports about one identity.
+ */
+export interface SimSesIdentityInfo {
+    readonly IdentityType: string;
+    readonly IdentityName: string;
+    readonly SendingEnabled: boolean;
+    readonly VerificationStatus: SimSesVerificationStatusValue;
+}
+//# sourceMappingURL=identity.command.d.ts.map

package/dist/service/ses/command/identity/identity.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/ses/command/identity/identity.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAE3F;;;GAGG;AACH,MAAM,MAAM,6BAA6B,GACrC,QAAQ,GACR,aAAa,GACb,SAAS,GACT,SAAS,GACT,mBAAmB,CAAC;AAExB;;;;GAIG;AACH,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,KAAK,EAAE,kCAAkC,CAAC;CACpD;AAED,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,OAAO,EAAE,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IACzC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACpD;AAED,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,wBAAwB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACxD,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,KAAK,EAAE,+BAA+B,CAAC;CACjD;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7C;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,wBAAwB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACxD,QAAQ,CAAC,kBAAkB,CAAC,EAAE,6BAA6B,GAAG,SAAS,CAAC;IACxE,QAAQ,CAAC,wBAAwB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACxD,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,KAAK,EAAE,kCAAkC,CAAC;CACpD;AAED,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7C;AAED,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,KAAK,EAAE,kCAAkC,CAAC;CACpD;AAED,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACzC;AAED,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,kBAAkB,EAAE,GAAG,SAAS,CAAC;IACrE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,kBAAkB,EAAE,6BAA6B,CAAC;CAC5D"}

package/dist/service/ses/command/identity/identity.command.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=identity.command.js.map

package/dist/service/ses/command/identity/identity.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.command.js","sourceRoot":"","sources":["../../../../../src/service/ses/command/identity/identity.command.ts"],"names":[],"mappings":""}

package/dist/service/ses/command/identity/sim-ses-identity-commands.d.ts

@@ -0,0 +1,44 @@
+import type { SimClock } from "../../../../util/clock/sim-clock.js";
+import type { SimSesIdentityStore } from "../../identity/sim-ses-identity-store.js";
+import type { SimSesAuthorizer } from "../authorize/sim-ses-authorizer.js";
+import type { SimSesRequestOptions } from "../sim-ses-request-options.js";
+import type { SimCreateEmailIdentityCommand, SimCreateEmailIdentityCommandOutput, SimDeleteEmailIdentityCommand, SimDeleteEmailIdentityCommandOutput, SimGetEmailIdentityCommand, SimGetEmailIdentityCommandOutput, SimListEmailIdentitiesCommand, SimListEmailIdentitiesCommandOutput } from "./identity.command.js";
+interface SimSesIdentityCommandsProperties {
+    readonly identities: SimSesIdentityStore;
+    readonly authorizer: SimSesAuthorizer;
+    readonly clock: SimClock;
+}
+/**
+ * The commands that make, read, list and remove email identities.
+ *
+ * A new identity is never verified. Real SES starts one pending and waits on
+ * an emailed link or a DNS record, so a test that creates an identity and
+ * sends from it straight away should see the same refusal an account gives,
+ * rather than a simulator being helpful.
+ */
+export declare class SimSesIdentityCommands {
+    #private;
+    constructor(properties: SimSesIdentityCommandsProperties);
+    /**
+     * Begin verifying an email address or a domain.
+     */
+    createEmailIdentity(command: SimCreateEmailIdentityCommand, options?: SimSesRequestOptions): SimCreateEmailIdentityCommandOutput;
+    /**
+     * Read one identity and how far its verification has got.
+     */
+    getEmailIdentity(command: SimGetEmailIdentityCommand, options?: SimSesRequestOptions): SimGetEmailIdentityCommandOutput;
+    /**
+     * List the identities in this scope, in the order they were created.
+     *
+     * Real SES gives this action no resource type at all, so it authorizes
+     * against `*`: a policy scoped to identity ARNs allows no listing, however
+     * broadly those ARNs are written.
+     */
+    listEmailIdentities(command: SimListEmailIdentitiesCommand, options?: SimSesRequestOptions): SimListEmailIdentitiesCommandOutput;
+    /**
+     * Remove an identity, refusing one that is not there.
+     */
+    deleteEmailIdentity(command: SimDeleteEmailIdentityCommand, options?: SimSesRequestOptions): SimDeleteEmailIdentityCommandOutput;
+}
+export {};
+//# sourceMappingURL=sim-ses-identity-commands.d.ts.map

package/dist/service/ses/command/identity/sim-ses-identity-commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ses-identity-commands.d.ts","sourceRoot":"","sources":["../../../../../src/service/ses/command/identity/sim-ses-identity-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AAGpF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAE3E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,KAAK,EACV,6BAA6B,EAC7B,mCAAmC,EACnC,6BAA6B,EAC7B,mCAAmC,EACnC,0BAA0B,EAC1B,gCAAgC,EAChC,6BAA6B,EAC7B,mCAAmC,EAEpC,MAAM,uBAAuB,CAAC;AAG/B,UAAU,gCAAgC;IACxC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;IACzC,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED;;;;;;;GAOG;AACH,qBAAa,sBAAsB;;IAKjC,YAAY,UAAU,EAAE,gCAAgC,EAIvD;IAED;;OAEG;IACH,mBAAmB,CACjB,OAAO,EAAE,6BAA6B,EACtC,OAAO,CAAC,EAAE,oBAAoB,GAC7B,mCAAmC,CAmBrC;IAED;;OAEG;IACH,gBAAgB,CACd,OAAO,EAAE,0BAA0B,EACnC,OAAO,CAAC,EAAE,oBAAoB,GAC7B,gCAAgC,CAoBlC;IAED;;;;;;OAMG;IACH,mBAAmB,CACjB,OAAO,EAAE,6BAA6B,EACtC,OAAO,CAAC,EAAE,oBAAoB,GAC7B,mCAAmC,CAiBrC;IAED;;OAEG;IACH,mBAAmB,CACjB,OAAO,EAAE,6BAA6B,EACtC,OAAO,CAAC,EAAE,oBAAoB,GAC7B,mCAAmC,CAerC;CACF"}

package/dist/service/ses/command/identity/sim-ses-identity-commands.js

@@ -0,0 +1,92 @@
+import { requiredSimSesIdentityName } from "../../identity/sim-ses-identity-name.js";
+import { SimSesPage } from "../sim-ses-page.js";
+import { refuseUnsimulatedIdentityInput } from "./sim-ses-unsimulated-identity-input.js";
+/**
+ * The commands that make, read, list and remove email identities.
+ *
+ * A new identity is never verified. Real SES starts one pending and waits on
+ * an emailed link or a DNS record, so a test that creates an identity and
+ * sends from it straight away should see the same refusal an account gives,
+ * rather than a simulator being helpful.
+ */
+export class SimSesIdentityCommands {
+    #identities;
+    #authorizer;
+    #clock;
+    constructor(properties) {
+        this.#identities = properties.identities;
+        this.#authorizer = properties.authorizer;
+        this.#clock = properties.clock;
+    }
+    /**
+     * Begin verifying an email address or a domain.
+     */
+    createEmailIdentity(command, options) {
+        const emailIdentity = requiredSimSesIdentityName(command.input.EmailIdentity);
+        refuseUnsimulatedIdentityInput(command.input);
+        this.#authorizer.authorizeIdentity("ses:CreateEmailIdentity", emailIdentity, options?.caller);
+        const identity = this.#identities.create(emailIdentity, this.#clock.now());
+        return {
+            $metadata: {},
+            IdentityType: identity.identityType,
+            VerifiedForSendingStatus: identity.isVerified,
+        };
+    }
+    /**
+     * Read one identity and how far its verification has got.
+     */
+    getEmailIdentity(command, options) {
+        const emailIdentity = requiredSimSesIdentityName(command.input.EmailIdentity);
+        this.#authorizer.authorizeIdentity("ses:GetEmailIdentity", emailIdentity, options?.caller);
+        const identity = this.#identities.require(emailIdentity);
+        return {
+            $metadata: {},
+            IdentityType: identity.identityType,
+            VerifiedForSendingStatus: identity.isVerified,
+            VerificationStatus: identity.verificationStatus,
+            FeedbackForwardingStatus: true,
+        };
+    }
+    /**
+     * List the identities in this scope, in the order they were created.
+     *
+     * Real SES gives this action no resource type at all, so it authorizes
+     * against `*`: a policy scoped to identity ARNs allows no listing, however
+     * broadly those ARNs are written.
+     */
+    listEmailIdentities(command, options) {
+        this.#authorizer.authorizeNoResource("ses:ListEmailIdentities", options?.caller);
+        const page = new SimSesPage({
+            listed: this.#identities.all,
+            pageSize: command.input.PageSize,
+            nextToken: command.input.NextToken,
+        });
+        return {
+            $metadata: {},
+            EmailIdentities: page.items.map((identity) => identityInfo(identity)),
+            NextToken: page.nextToken,
+        };
+    }
+    /**
+     * Remove an identity, refusing one that is not there.
+     */
+    deleteEmailIdentity(command, options) {
+        const emailIdentity = requiredSimSesIdentityName(command.input.EmailIdentity);
+        this.#authorizer.authorizeIdentity("ses:DeleteEmailIdentity", emailIdentity, options?.caller);
+        this.#identities.require(emailIdentity);
+        this.#identities.delete(emailIdentity);
+        return { $metadata: {} };
+    }
+}
+/**
+ * What ListEmailIdentities reports about one identity.
+ */
+function identityInfo(identity) {
+    return {
+        IdentityType: identity.identityType,
+        IdentityName: identity.emailIdentity,
+        SendingEnabled: identity.isVerified,
+        VerificationStatus: identity.verificationStatus,
+    };
+}
+//# sourceMappingURL=sim-ses-identity-commands.js.map

package/dist/service/ses/command/identity/sim-ses-identity-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ses-identity-commands.js","sourceRoot":"","sources":["../../../../../src/service/ses/command/identity/sim-ses-identity-commands.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAGrF,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAahD,OAAO,EAAE,8BAA8B,EAAE,MAAM,yCAAyC,CAAC;AAQzF;;;;;;;GAOG;AACH,MAAM,OAAO,sBAAsB;IACxB,WAAW,CAAsB;IACjC,WAAW,CAAmB;IAC9B,MAAM,CAAW;IAE1B,YAAY,UAA4C;QACtD,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,UAAU,CAAC;QACzC,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,UAAU,CAAC;QACzC,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,mBAAmB,CACjB,OAAsC,EACtC,OAA8B;QAE9B,MAAM,aAAa,GAAG,0BAA0B,CAC9C,OAAO,CAAC,KAAK,CAAC,aAAa,CAC5B,CAAC;QAEF,8BAA8B,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAChC,yBAAyB,EACzB,aAAa,EACb,OAAO,EAAE,MAAM,CAChB,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;QAE3E,OAAO;YACL,SAAS,EAAE,EAAE;YACb,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,wBAAwB,EAAE,QAAQ,CAAC,UAAU;SAC9C,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,gBAAgB,CACd,OAAmC,EACnC,OAA8B;QAE9B,MAAM,aAAa,GAAG,0BAA0B,CAC9C,OAAO,CAAC,KAAK,CAAC,aAAa,CAC5B,CAAC;QAEF,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAChC,sBAAsB,EACtB,aAAa,EACb,OAAO,EAAE,MAAM,CAChB,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QAEzD,OAAO;YACL,SAAS,EAAE,EAAE;YACb,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,wBAAwB,EAAE,QAAQ,CAAC,UAAU;YAC7C,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;YAC/C,wBAAwB,EAAE,IAAI;SAC/B,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,mBAAmB,CACjB,OAAsC,EACtC,OAA8B;QAE9B,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAClC,yBAAyB,EACzB,OAAO,EAAE,MAAM,CAChB,CAAC;QAEF,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC;YAC1B,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG;YAC5B,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,QAAQ;YAChC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,SAAS;SACnC,CAAC,CAAC;QAEH,OAAO;YACL,SAAS,EAAE,EAAE;YACb,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YACrE,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,mBAAmB,CACjB,OAAsC,EACtC,OAA8B;QAE9B,MAAM,aAAa,GAAG,0BAA0B,CAC9C,OAAO,CAAC,KAAK,CAAC,aAAa,CAC5B,CAAC;QAEF,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAChC,yBAAyB,EACzB,aAAa,EACb,OAAO,EAAE,MAAM,CAChB,CAAC;QAEF,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACxC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAEvC,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC3B,CAAC;CACF;AAED;;GAEG;AACH,SAAS,YAAY,CAAC,QAAwB;IAC5C,OAAO;QACL,YAAY,EAAE,QAAQ,CAAC,YAAY;QACnC,YAAY,EAAE,QAAQ,CAAC,aAAa;QACpC,cAAc,EAAE,QAAQ,CAAC,UAAU;QACnC,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;KAChD,CAAC;AACJ,CAAC"}

package/dist/service/ses/command/identity/sim-ses-unsimulated-identity-input.d.ts

@@ -0,0 +1,12 @@
+import type { SimCreateEmailIdentityCommandInput } from "./identity.command.js";
+/**
+ * Refuse the CreateEmailIdentity inputs this simulation does not model.
+ *
+ * Each changes what the identity does on real SES, so accepting one and
+ * dropping it would let a request succeed here and behave differently in an
+ * account. DKIM signing attributes are the clearest case: an identity created
+ * with Bring Your Own DKIM would look configured to the request that made it
+ * and unconfigured to everything else.
+ */
+export declare function refuseUnsimulatedIdentityInput(input: SimCreateEmailIdentityCommandInput): void;
+//# sourceMappingURL=sim-ses-unsimulated-identity-input.d.ts.map

package/dist/service/ses/command/identity/sim-ses-unsimulated-identity-input.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ses-unsimulated-identity-input.d.ts","sourceRoot":"","sources":["../../../../../src/service/ses/command/identity/sim-ses-unsimulated-identity-input.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,uBAAuB,CAAC;AAEhF;;;;;;;;GAQG;AACH,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,kCAAkC,GACxC,IAAI,CAsBN"}

package/dist/service/ses/command/identity/sim-ses-unsimulated-identity-input.js

@@ -0,0 +1,26 @@
+import { SimSesUnsupportedOperationException } from "../../error/sim-ses.error.js";
+/**
+ * Refuse the CreateEmailIdentity inputs this simulation does not model.
+ *
+ * Each changes what the identity does on real SES, so accepting one and
+ * dropping it would let a request succeed here and behave differently in an
+ * account. DKIM signing attributes are the clearest case: an identity created
+ * with Bring Your Own DKIM would look configured to the request that made it
+ * and unconfigured to everything else.
+ */
+export function refuseUnsimulatedIdentityInput(input) {
+    if (input.Tags !== undefined && input.Tags.length > 0) {
+        throw new SimSesUnsupportedOperationException("Email identity tags are not simulated, so CreateEmailIdentity " +
+            "refuses them rather than dropping them");
+    }
+    if (input.DkimSigningAttributes !== undefined) {
+        throw new SimSesUnsupportedOperationException("DKIM signing is not simulated, so CreateEmailIdentity refuses " +
+            "DkimSigningAttributes rather than reporting a signing configuration " +
+            "no message here is signed with");
+    }
+    if (input.ConfigurationSetName !== undefined) {
+        throw new SimSesUnsupportedOperationException("Configuration sets are not simulated, so CreateEmailIdentity refuses " +
+            "ConfigurationSetName rather than naming one that does nothing");
+    }
+}
+//# sourceMappingURL=sim-ses-unsimulated-identity-input.js.map

package/dist/service/ses/command/identity/sim-ses-unsimulated-identity-input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ses-unsimulated-identity-input.js","sourceRoot":"","sources":["../../../../../src/service/ses/command/identity/sim-ses-unsimulated-identity-input.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mCAAmC,EAAE,MAAM,8BAA8B,CAAC;AAGnF;;;;;;;;GAQG;AACH,MAAM,UAAU,8BAA8B,CAC5C,KAAyC;IAEzC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,mCAAmC,CAC3C,gEAAgE;YAC9D,wCAAwC,CAC3C,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,qBAAqB,KAAK,SAAS,EAAE,CAAC;QAC9C,MAAM,IAAI,mCAAmC,CAC3C,gEAAgE;YAC9D,sEAAsE;YACtE,gCAAgC,CACnC,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;QAC7C,MAAM,IAAI,mCAAmC,CAC3C,uEAAuE;YACrE,+DAA+D,CAClE,CAAC;IACJ,CAAC;AACH,CAAC"}