@kensio/yulin 1.16.2 → 1.17.0

package/dist/service/s3/sim-s3.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-s3.js","sourceRoot":"","sources":["../../../src/service/s3/sim-s3.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAElE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,kCAAkC,EAAE,MAAM,sCAAsC,CAAC;AAE1F,OAAO,EAAE,+BAA+B,EAAE,MAAM,gDAAgD,CAAC;AACjG,OAAO,EAAE,aAAa,EAAwB,MAAM,sBAAsB,CAAC;AAC3E,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAM3E;;;;GAIG;AACH,MAAM,OAAO,KAAK;IACC,OAAO,GAAG,IAAI,GAAG,EAAgC,CAAC;IAElD,QAAQ,CAAgB;IACxB,YAAY,CAAoB;IAChC,UAAU,GAAG,IAAI,kCAAkC,CAAC,IAAI,CAAC,CAAC;IAC1D,SAAS,GAAG,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAE7D,YAAY,UAAU,GAAoB,EAAE;QAC1C,MAAM,EACJ,kBAAkB,GAAG,+BAA+B,CAAC,IAAI,EAAE,EAC3D,gBAAgB,GAAG,IAAI,mBAAmB,EAAE,GAC7C,GAAG,UAAU,CAAC;QAEf,IAAI,CAAC,QAAQ,GAAG,IAAI,aAAa,CAAC;YAChC,GAAG,UAAU;YACb,kBAAkB;YAClB,gBAAgB;YAChB,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,GAAG,IAAI,iBAAiB,CAAC;YACxC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,kBAAkB;YAClB,gBAAgB;SACjB,CAAC,CAAC;IACL,CAAC;IAED,mDAAmD;IACnD,KAAK,CAAC,YAAY,CAChB,OAA6C,EAC7C,OAA6B;QAE7B,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9D,CAAC;IAED,mDAAmD;IACnD,KAAK,CAAC,YAAY,CAChB,OAA6C,EAC7C,OAA6B;QAE7B,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9D,CAAC;IAED,uDAAuD;IACvD,KAAK,CAAC,eAAe,CACnB,OAAgD,EAChD,OAA6B;QAE7B,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClE,CAAC;IAED,uDAAuD;IACvD,KAAK,CAAC,eAAe,CACnB,OAAgD,EAChD,OAA6B;QAE7B,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClE,CAAC;IAED,0DAA0D;IAC1D,KAAK,CAAC,kBAAkB,CACtB,OAAmD,EACnD,OAA6B;QAE7B,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACrE,CAAC;IAED,6DAA6D;IAC7D,KAAK,CAAC,oBAAoB,CACxB,OAAqD,EACrD,OAA6B;QAE7B,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACtE,CAAC;IAED,6DAA6D;IAC7D,KAAK,CAAC,oBAAoB,CACxB,OAAqD,EACrD,OAA6B;QAE7B,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACtE,CAAC;IAED,gEAAgE;IAChE,KAAK,CAAC,uBAAuB,CAC3B,OAAwD,EACxD,OAA6B;QAE7B,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACzE,CAAC;IAED,wDAAwD;IACxD,KAAK,CAAC,gBAAgB,CACpB,OAAiD,EACjD,OAA6B;QAE7B,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClE,CAAC;IAED,2EAA2E;IAC3E,KAAK,CAAC,kCAAkC,CACtC,OAAmE,EACnE,OAA6B;QAE7B,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACjE,CAAC;IAED,2EAA2E;IAC3E,KAAK,CAAC,kCAAkC,CACtC,OAAmE,EACnE,OAA6B;QAE7B,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACjE,CAAC;IAED,kDAAkD;IAClD,KAAK,CAAC,WAAW,CACf,OAA4C,EAC5C,OAA6B;QAE7B,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC;IAED,gDAAgD;IAChD,KAAK,CAAC,SAAS,CACb,OAA0C,EAC1C,OAA6B;QAE7B,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3D,CAAC;IAED,gDAAgD;IAChD,KAAK,CAAC,SAAS,CACb,OAA0C,EAC1C,OAA6B;QAE7B,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3D,CAAC;IAED,mDAAmD;IACnD,KAAK,CAAC,YAAY,CAChB,OAA6C,EAC7C,OAA6B;QAE7B,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9D,CAAC;IAED,oDAAoD;IACpD,KAAK,CAAC,aAAa,CACjB,OAA8C,EAC9C,OAA6B;QAE7B,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClE,CAAC;IAED,kDAAkD;IAClD,KAAK,CAAC,WAAW,CACf,OAA4C,EAC5C,OAA6B;QAE7B,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC;IAED,qDAAqD;IACrD,KAAK,CAAC,aAAa,CACjB,OAA8C,EAC9C,OAA6B;QAE7B,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9D,CAAC;IAED;;;;;;OAMG;IACH,uBAAuB,CAAC,OAAe;QACrC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACzD,CAAC;IAED,kDAAkD;IAClD,kBAAkB,CAChB,UAAoC;QAEpC,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC5C,CAAC;IAED;;;;OAIG;IACH,+BAA+B;QAC7B,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,gBAAgB,CAAC;IACvD,CAAC;IAED;;;OAGG;IACH,aAAa;QACX,OAAO,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC;IACxC,CAAC;IAED,iEAAiE;IACjE,YAAY,CAAC,UAAoC;QAC/C,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC3C,CAAC;IAED,4DAA4D;IAC5D,mBAAmB,CAAC,UAAoC;QACtD,OAAO,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAClD,CAAC;IAED;;OAEG;IACH,eAAe,CACb,UAAoC;QAEpC,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/C,CAAC;IAED;;;;;;OAMG;IACH,qBAAqB,CACnB,UAAoC,EACpC,aAAqB,EACrB,OAAO,GAAgC,EAAE;QAEzC,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,UAAU,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;IACxE,CAAC;IAED,yDAAyD;IACzD,yBAAyB;QACvB,OAAO,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,CAAC;IAC3C,CAAC;IAED,0DAA0D;IAC1D,8BAA8B;QAC5B,IAAI,CAAC,YAAY,CAAC,kBAAkB,EAAE,CAAC;IACzC,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK;QACH,IAAI,CAAC,8BAA8B,EAAE,CAAC;IACxC,CAAC;IAED,0DAA0D;IAC1D,kBAAkB;QAChB,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,yEAAyE;IACzE,gBAAgB;QACd,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;CACF;AAED,OAAO,EAA4B,MAAM,qCAAqC,CAAC"}
+{"version":3,"file":"sim-s3.js","sourceRoot":"","sources":["../../../src/service/s3/sim-s3.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAElE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,kCAAkC,EAAE,MAAM,sCAAsC,CAAC;AAE1F,OAAO,EAAE,+BAA+B,EAAE,MAAM,gDAAgD,CAAC;AACjG,OAAO,EAAE,aAAa,EAAwB,MAAM,sBAAsB,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAK3E;;;;;;;;GAQG;AACH,MAAM,OAAO,KAAM,SAAQ,eAAe;IACvB,YAAY,CAAoB;IAChC,UAAU,GAAG,IAAI,kCAAkC,CAAC,IAAI,CAAC,CAAC;IAC1D,SAAS,GAAG,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAE7D,YAAY,UAAU,GAAoB,EAAE;QAC1C,MAAM,EACJ,kBAAkB,GAAG,+BAA+B,CAAC,IAAI,EAAE,EAC3D,gBAAgB,GAAG,IAAI,mBAAmB,EAAE,GAC7C,GAAG,UAAU,CAAC;QACf,MAAM,OAAO,GAAG,IAAI,GAAG,EAAgC,CAAC;QAExD,KAAK,CACH,IAAI,aAAa,CAAC;YAChB,GAAG,UAAU;YACb,kBAAkB;YAClB,gBAAgB;YAChB,OAAO;SACR,CAAC,CACH,CAAC;QAEF,IAAI,CAAC,YAAY,GAAG,IAAI,iBAAiB,CAAC;YACxC,OAAO;YACP,kBAAkB;YAClB,gBAAgB;SACjB,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,uBAAuB,CAAC,OAAe;QACrC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACzD,CAAC;IAED,kDAAkD;IAClD,kBAAkB,CAChB,UAAoC;QAEpC,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC5C,CAAC;IAED;;;;OAIG;IACH,+BAA+B;QAC7B,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,gBAAgB,CAAC;IACvD,CAAC;IAED;;;OAGG;IACH,aAAa;QACX,OAAO,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC;IACxC,CAAC;IAED,iEAAiE;IACjE,YAAY,CAAC,UAAoC;QAC/C,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC3C,CAAC;IAED,4DAA4D;IAC5D,mBAAmB,CAAC,UAAoC;QACtD,OAAO,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAClD,CAAC;IAED;;OAEG;IACH,eAAe,CACb,UAAoC;QAEpC,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/C,CAAC;IAED;;;;;;OAMG;IACH,qBAAqB,CACnB,UAAoC,EACpC,aAAqB,EACrB,OAAO,GAAgC,EAAE;QAEzC,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,UAAU,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;IACxE,CAAC;IAED,yDAAyD;IACzD,yBAAyB;QACvB,OAAO,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,CAAC;IAC3C,CAAC;IAED,0DAA0D;IAC1D,8BAA8B;QAC5B,IAAI,CAAC,YAAY,CAAC,kBAAkB,EAAE,CAAC;IACzC,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK;QACH,IAAI,CAAC,8BAA8B,EAAE,CAAC;IACxC,CAAC;IAED,0DAA0D;IAC1D,kBAAkB;QAChB,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,yEAAyE;IACzE,gBAAgB;QACd,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;CACF;AAED,OAAO,EAA4B,MAAM,qCAAqC,CAAC"}

package/dist/service/s3/upload/sim-s3-completed-upload.d.ts

@@ -0,0 +1,30 @@
+import { SimS3Object } from "../object/s3-object.js";
+import type { SimS3MultipartUpload } from "./sim-s3-multipart-upload.js";
+/**
+ * One part as a completion request names it: the number it was uploaded under
+ * and the ETag that upload answered with.
+ */
+export interface SimS3NamedUploadPart {
+    readonly partNumber: number;
+    readonly etag?: string | undefined;
+}
+interface SimS3CompletedUploadProperties {
+    readonly upload: SimS3MultipartUpload;
+    readonly parts: readonly SimS3NamedUploadPart[];
+    readonly completedAt: Date;
+}
+/**
+ * Join the parts a completion names into the Object S3 stores.
+ *
+ * The completion names the parts rather than S3 assuming them, so a client can
+ * finish an upload it sent a part of twice, or abandon a part it decided not to
+ * use. Every part it names has to be one that was uploaded, because an Object
+ * assembled from the parts that happened to be there would be quietly missing
+ * whatever went astray.
+ *
+ * The result carries the multipart ETag rather than the MD5 of the joined
+ * bytes. See `simS3MultipartETag`.
+ */
+export declare function simS3CompletedUploadObject(properties: SimS3CompletedUploadProperties): SimS3Object;
+export {};
+//# sourceMappingURL=sim-s3-completed-upload.d.ts.map

package/dist/service/s3/upload/sim-s3-completed-upload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-completed-upload.d.ts","sourceRoot":"","sources":["../../../../src/service/s3/upload/sim-s3-completed-upload.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAKrD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAEzE;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC;AAED,UAAU,8BAA8B;IACtC,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAChD,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC;CAC5B;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,8BAA8B,GACzC,WAAW,CAsBb"}

package/dist/service/s3/upload/sim-s3-completed-upload.js

@@ -0,0 +1,69 @@
+import { SimS3InvalidPart, SimS3InvalidPartOrder, SimS3MalformedXml, } from "../error/sim-s3.error.js";
+import { SimS3Object } from "../object/s3-object.js";
+import { simS3MultipartETag, simS3UnquotedETag, } from "../object/s3-object-etag.js";
+/**
+ * Join the parts a completion names into the Object S3 stores.
+ *
+ * The completion names the parts rather than S3 assuming them, so a client can
+ * finish an upload it sent a part of twice, or abandon a part it decided not to
+ * use. Every part it names has to be one that was uploaded, because an Object
+ * assembled from the parts that happened to be there would be quietly missing
+ * whatever went astray.
+ *
+ * The result carries the multipart ETag rather than the MD5 of the joined
+ * bytes. See `simS3MultipartETag`.
+ */
+export function simS3CompletedUploadObject(properties) {
+    const { upload, parts } = properties;
+    if (parts.length === 0) {
+        throw new SimS3MalformedXml(`The completion of upload ${upload.uploadId} names no parts. S3 takes ` +
+            `the parts to join from the request rather than assuming every part ` +
+            `it holds.`);
+    }
+    assertAscending(parts);
+    const stored = parts.map((named) => storedPart(upload, named));
+    return new SimS3Object({
+        key: upload.key,
+        body: Buffer.concat(stored.map((part) => part.body)),
+        metadata: upload.metadata,
+        lastModified: properties.completedAt,
+        etag: simS3MultipartETag(stored.map((part) => part.etag)),
+    });
+}
+/**
+ * Refuse a completion listing its parts out of order.
+ *
+ * The parts themselves can be uploaded in any order, and `aws s3 cp` routinely
+ * finishes a later one first. It is the list in the completion request that
+ * real S3 requires to ascend, and it says so rather than sorting.
+ */
+function assertAscending(parts) {
+    for (const [index, part] of parts.entries()) {
+        const previous = parts[index - 1];
+        if (previous !== undefined && previous.partNumber >= part.partNumber) {
+            throw new SimS3InvalidPartOrder(`The parts of a completed multipart upload must be listed in ` +
+                `ascending part number order. Part ${part.partNumber} is listed ` +
+                `after part ${previous.partNumber}.`);
+        }
+    }
+}
+/**
+ * The stored part a completion names, or S3's refusal to complete without it.
+ *
+ * A completion carries the ETag each `UploadPart` answered with, so a mismatch
+ * means the client is naming a part other than the one S3 holds under that
+ * number.
+ */
+function storedPart(upload, named) {
+    const stored = upload.getPart(named.partNumber);
+    if (stored === undefined) {
+        throw new SimS3InvalidPart(`Upload ${upload.uploadId} has no part ${named.partNumber}.`);
+    }
+    const namedETag = named.etag === undefined ? undefined : simS3UnquotedETag(named.etag);
+    if (namedETag !== undefined && namedETag !== stored.etag) {
+        throw new SimS3InvalidPart(`Part ${named.partNumber} of upload ${upload.uploadId} was stored with ` +
+            `ETag ${stored.etag}, not the ${namedETag} the completion names.`);
+    }
+    return stored;
+}
+//# sourceMappingURL=sim-s3-completed-upload.js.map

package/dist/service/s3/upload/sim-s3-completed-upload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-completed-upload.js","sourceRoot":"","sources":["../../../../src/service/s3/upload/sim-s3-completed-upload.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EACL,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,6BAA6B,CAAC;AAkBrC;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,0BAA0B,CACxC,UAA0C;IAE1C,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC;IAErC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,iBAAiB,CACzB,4BAA4B,MAAM,CAAC,QAAQ,4BAA4B;YACrE,qEAAqE;YACrE,WAAW,CACd,CAAC;IACJ,CAAC;IAED,eAAe,CAAC,KAAK,CAAC,CAAC;IAEvB,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IAE/D,OAAO,IAAI,WAAW,CAAC;QACrB,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpD,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,YAAY,EAAE,UAAU,CAAC,WAAW;QACpC,IAAI,EAAE,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;KAC1D,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,SAAS,eAAe,CAAC,KAAsC;IAC7D,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5C,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAElC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACrE,MAAM,IAAI,qBAAqB,CAC7B,8DAA8D;gBAC5D,qCAAqC,IAAI,CAAC,UAAU,aAAa;gBACjE,cAAc,QAAQ,CAAC,UAAU,GAAG,CACvC,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,UAAU,CACjB,MAA4B,EAC5B,KAA2B;IAE3B,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAEhD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,gBAAgB,CACxB,UAAU,MAAM,CAAC,QAAQ,gBAAgB,KAAK,CAAC,UAAU,GAAG,CAC7D,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GACb,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAEvE,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;QACzD,MAAM,IAAI,gBAAgB,CACxB,QAAQ,KAAK,CAAC,UAAU,cAAc,MAAM,CAAC,QAAQ,mBAAmB;YACtE,QAAQ,MAAM,CAAC,IAAI,aAAa,SAAS,wBAAwB,CACpE,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/service/s3/upload/sim-s3-multipart-upload.d.ts

@@ -0,0 +1,66 @@
+import type { Brand } from "../../../util/brand.type.js";
+import type { SimS3ObjectMetadata } from "../object/s3-object.js";
+export type SimS3UploadId = Brand<string, "SimS3UploadId">;
+/**
+ * One numbered part of a multipart upload, as S3 holds it between the
+ * `UploadPart` that stored it and the `CompleteMultipartUpload` that joins it
+ * to the rest.
+ *
+ * The ETag is the MD5 of the part's own bytes, which is both what `UploadPart`
+ * answers with and what the completed Object's ETag is computed from.
+ */
+export declare class SimS3UploadPart {
+    readonly partNumber: number;
+    readonly body: Buffer;
+    readonly etag: string;
+    readonly lastModified: Date;
+    constructor(partNumber: number, body: Buffer, lastModified: Date);
+}
+interface SimS3MultipartUploadProperties {
+    readonly uploadId: SimS3UploadId | string;
+    readonly key: string;
+    readonly metadata: SimS3ObjectMetadata;
+    readonly initiated: Date;
+}
+/**
+ * A simulated S3 multipart upload in progress.
+ *
+ * S3 keeps the parts of an upload apart from the Bucket's Objects until the
+ * upload is completed, which is why an unfinished upload is invisible to a
+ * listing and an abandoned one leaves nothing behind. This holds them the same
+ * way: a Bucket's Objects and its uploads in progress are separate collections,
+ * and only `CompleteMultipartUpload` moves anything between them.
+ *
+ * The system metadata is taken at `CreateMultipartUpload` rather than at
+ * completion, as real S3 takes it, because the request that says what the
+ * Object is arrives before any of its bytes do.
+ */
+export declare class SimS3MultipartUpload {
+    readonly uploadId: SimS3UploadId;
+    readonly key: string;
+    readonly metadata: SimS3ObjectMetadata;
+    readonly initiated: Date;
+    private readonly parts;
+    constructor(properties: SimS3MultipartUploadProperties);
+    /**
+     * Store a numbered part, replacing whatever was under that number.
+     *
+     * Real S3 lets a client re-send a part it is not sure arrived, and the last
+     * one to arrive is the one the completed Object is built from.
+     */
+    putPart(partNumber: number, body: Buffer, at: Date): SimS3UploadPart;
+    /**
+     * The part stored under a number, if one has been.
+     */
+    getPart(partNumber: number): SimS3UploadPart | undefined;
+    /**
+     * Every part stored so far, in part-number order.
+     *
+     * The order is the upload's rather than the arrival order kept by the Map,
+     * because part numbers are what a completed Object is assembled by and a
+     * client is free to send them in any order it likes.
+     */
+    storedParts(): readonly SimS3UploadPart[];
+}
+export {};
+//# sourceMappingURL=sim-s3-multipart-upload.d.ts.map

package/dist/service/s3/upload/sim-s3-multipart-upload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-multipart-upload.d.ts","sourceRoot":"","sources":["../../../../src/service/s3/upload/sim-s3-multipart-upload.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAElE,MAAM,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;AAE3D;;;;;;;GAOG;AACH,qBAAa,eAAe;IAC1B,SAAgB,UAAU,EAAE,MAAM,CAAC;IACnC,SAAgB,IAAI,EAAE,MAAM,CAAC;IAC7B,SAAgB,IAAI,EAAE,MAAM,CAAC;IAC7B,SAAgB,YAAY,EAAE,IAAI,CAAC;IAEnC,YAAY,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAK/D;CACF;AAED,UAAU,8BAA8B;IACtC,QAAQ,CAAC,QAAQ,EAAE,aAAa,GAAG,MAAM,CAAC;IAC1C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC;IACvC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;CAC1B;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,oBAAoB;IAC/B,SAAgB,QAAQ,EAAE,aAAa,CAAC;IACxC,SAAgB,GAAG,EAAE,MAAM,CAAC;IAC5B,SAAgB,QAAQ,EAAE,mBAAmB,CAAC;IAC9C,SAAgB,SAAS,EAAE,IAAI,CAAC;IAEhC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAsC;IAE5D,YAAY,UAAU,EAAE,8BAA8B,EAKrD;IAED;;;;;OAKG;IACH,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,GAAG,eAAe,CAKnE;IAED;;OAEG;IACH,OAAO,CAAC,UAAU,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAEvD;IAED;;;;;;OAMG;IACH,WAAW,IAAI,SAAS,eAAe,EAAE,CAKxC;CACF"}

package/dist/service/s3/upload/sim-s3-multipart-upload.js

@@ -0,0 +1,78 @@
+import { createHash } from "node:crypto";
+/**
+ * One numbered part of a multipart upload, as S3 holds it between the
+ * `UploadPart` that stored it and the `CompleteMultipartUpload` that joins it
+ * to the rest.
+ *
+ * The ETag is the MD5 of the part's own bytes, which is both what `UploadPart`
+ * answers with and what the completed Object's ETag is computed from.
+ */
+export class SimS3UploadPart {
+    partNumber;
+    body;
+    etag;
+    lastModified;
+    constructor(partNumber, body, lastModified) {
+        this.partNumber = partNumber;
+        this.body = body;
+        this.etag = createHash("md5").update(body).digest("hex");
+        this.lastModified = new Date(lastModified);
+    }
+}
+/**
+ * A simulated S3 multipart upload in progress.
+ *
+ * S3 keeps the parts of an upload apart from the Bucket's Objects until the
+ * upload is completed, which is why an unfinished upload is invisible to a
+ * listing and an abandoned one leaves nothing behind. This holds them the same
+ * way: a Bucket's Objects and its uploads in progress are separate collections,
+ * and only `CompleteMultipartUpload` moves anything between them.
+ *
+ * The system metadata is taken at `CreateMultipartUpload` rather than at
+ * completion, as real S3 takes it, because the request that says what the
+ * Object is arrives before any of its bytes do.
+ */
+export class SimS3MultipartUpload {
+    uploadId;
+    key;
+    metadata;
+    initiated;
+    parts = new Map();
+    constructor(properties) {
+        this.uploadId = properties.uploadId;
+        this.key = properties.key;
+        this.metadata = properties.metadata;
+        this.initiated = new Date(properties.initiated);
+    }
+    /**
+     * Store a numbered part, replacing whatever was under that number.
+     *
+     * Real S3 lets a client re-send a part it is not sure arrived, and the last
+     * one to arrive is the one the completed Object is built from.
+     */
+    putPart(partNumber, body, at) {
+        const part = new SimS3UploadPart(partNumber, body, at);
+        this.parts.set(partNumber, part);
+        return part;
+    }
+    /**
+     * The part stored under a number, if one has been.
+     */
+    getPart(partNumber) {
+        return this.parts.get(partNumber);
+    }
+    /**
+     * Every part stored so far, in part-number order.
+     *
+     * The order is the upload's rather than the arrival order kept by the Map,
+     * because part numbers are what a completed Object is assembled by and a
+     * client is free to send them in any order it likes.
+     */
+    storedParts() {
+        return this.parts
+            .values()
+            .toArray()
+            .toSorted((one, other) => one.partNumber - other.partNumber);
+    }
+}
+//# sourceMappingURL=sim-s3-multipart-upload.js.map

package/dist/service/s3/upload/sim-s3-multipart-upload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-multipart-upload.js","sourceRoot":"","sources":["../../../../src/service/s3/upload/sim-s3-multipart-upload.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAOzC;;;;;;;GAOG;AACH,MAAM,OAAO,eAAe;IACV,UAAU,CAAS;IACnB,IAAI,CAAS;IACb,IAAI,CAAS;IACb,YAAY,CAAO;IAEnC,YAAY,UAAkB,EAAE,IAAY,EAAE,YAAkB;QAC9D,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACzD,IAAI,CAAC,YAAY,GAAG,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC;IAC7C,CAAC;CACF;AASD;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,oBAAoB;IACf,QAAQ,CAAgB;IACxB,GAAG,CAAS;IACZ,QAAQ,CAAsB;IAC9B,SAAS,CAAO;IAEf,KAAK,GAAG,IAAI,GAAG,EAA2B,CAAC;IAE5D,YAAY,UAA0C;QACpD,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAyB,CAAC;QACrD,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;QAC1B,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IAClD,CAAC;IAED;;;;;OAKG;IACH,OAAO,CAAC,UAAkB,EAAE,IAAY,EAAE,EAAQ;QAChD,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAEjC,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,UAAkB;QACxB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IAED;;;;;;OAMG;IACH,WAAW;QACT,OAAO,IAAI,CAAC,KAAK;aACd,MAAM,EAAE;aACR,OAAO,EAAE;aACT,QAAQ,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;IACjE,CAAC;CACF"}

package/dist/service/s3/upload/sim-s3-multipart-uploads.d.ts

@@ -0,0 +1,48 @@
+import type { SimS3ObjectMetadata } from "../object/s3-object.js";
+import { SimS3MultipartUpload, type SimS3UploadId } from "./sim-s3-multipart-upload.js";
+interface SimS3StartUploadProperties {
+    readonly key: string;
+    readonly metadata: SimS3ObjectMetadata;
+    readonly initiated: Date;
+}
+/**
+ * The multipart uploads one Bucket has in progress.
+ *
+ * Uploads belong to a Bucket rather than to its storage, because they are not
+ * Objects yet: the parts live here until `CompleteMultipartUpload` joins them
+ * into one Object and hands that to storage. Held in memory whatever the
+ * Bucket's storage is, since a mounted directory writes whole files and has
+ * nowhere to put half of one.
+ */
+export declare class SimS3MultipartUploads {
+    private readonly uploads;
+    /**
+     * Issue an upload id and start holding parts under it.
+     *
+     * The id is opaque to a client, which sends back whatever it was given, so a
+     * UUID does everything real S3's longer token does.
+     */
+    start(properties: SimS3StartUploadProperties): SimS3MultipartUpload;
+    /**
+     * The upload an id names, if this Bucket has one in progress under it.
+     */
+    find(uploadId: SimS3UploadId | string): SimS3MultipartUpload | undefined;
+    /**
+     * Forget an upload and every part stored against it.
+     *
+     * Both the abort and the completion end here: real S3 keeps nothing about an
+     * upload once it has stopped being one, so a completed upload id is as
+     * unknown afterwards as an aborted one.
+     */
+    discard(uploadId: SimS3UploadId | string): void;
+    /**
+     * The uploads in progress, in the order real S3 lists them.
+     *
+     * S3 orders a multipart upload listing by key, and by when the upload was
+     * started within one key, so two uploads to the same key come back oldest
+     * first.
+     */
+    inProgress(prefix?: string): readonly SimS3MultipartUpload[];
+}
+export {};
+//# sourceMappingURL=sim-s3-multipart-uploads.d.ts.map

package/dist/service/s3/upload/sim-s3-multipart-uploads.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-multipart-uploads.d.ts","sourceRoot":"","sources":["../../../../src/service/s3/upload/sim-s3-multipart-uploads.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EACL,oBAAoB,EACpB,KAAK,aAAa,EACnB,MAAM,8BAA8B,CAAC;AAEtC,UAAU,0BAA0B;IAClC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC;IACvC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;CAC1B;AAED;;;;;;;;GAQG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA2C;IAEnE;;;;;OAKG;IACH,KAAK,CAAC,UAAU,EAAE,0BAA0B,GAAG,oBAAoB,CAWlE;IAED;;OAEG;IACH,IAAI,CAAC,QAAQ,EAAE,aAAa,GAAG,MAAM,GAAG,oBAAoB,GAAG,SAAS,CAEvE;IAED;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,EAAE,aAAa,GAAG,MAAM,GAAG,IAAI,CAE9C;IAED;;;;;;OAMG;IACH,UAAU,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,oBAAoB,EAAE,CAU3D;CACF"}

package/dist/service/s3/upload/sim-s3-multipart-uploads.js

@@ -0,0 +1,62 @@
+import { randomUUID } from "node:crypto";
+import { SimS3MultipartUpload, } from "./sim-s3-multipart-upload.js";
+/**
+ * The multipart uploads one Bucket has in progress.
+ *
+ * Uploads belong to a Bucket rather than to its storage, because they are not
+ * Objects yet: the parts live here until `CompleteMultipartUpload` joins them
+ * into one Object and hands that to storage. Held in memory whatever the
+ * Bucket's storage is, since a mounted directory writes whole files and has
+ * nowhere to put half of one.
+ */
+export class SimS3MultipartUploads {
+    uploads = new Map();
+    /**
+     * Issue an upload id and start holding parts under it.
+     *
+     * The id is opaque to a client, which sends back whatever it was given, so a
+     * UUID does everything real S3's longer token does.
+     */
+    start(properties) {
+        const upload = new SimS3MultipartUpload({
+            uploadId: randomUUID(),
+            key: properties.key,
+            metadata: properties.metadata,
+            initiated: properties.initiated,
+        });
+        this.uploads.set(upload.uploadId, upload);
+        return upload;
+    }
+    /**
+     * The upload an id names, if this Bucket has one in progress under it.
+     */
+    find(uploadId) {
+        return this.uploads.get(uploadId);
+    }
+    /**
+     * Forget an upload and every part stored against it.
+     *
+     * Both the abort and the completion end here: real S3 keeps nothing about an
+     * upload once it has stopped being one, so a completed upload id is as
+     * unknown afterwards as an aborted one.
+     */
+    discard(uploadId) {
+        this.uploads.delete(uploadId);
+    }
+    /**
+     * The uploads in progress, in the order real S3 lists them.
+     *
+     * S3 orders a multipart upload listing by key, and by when the upload was
+     * started within one key, so two uploads to the same key come back oldest
+     * first.
+     */
+    inProgress(prefix) {
+        return this.uploads
+            .values()
+            .filter((upload) => prefix === undefined || upload.key.startsWith(prefix))
+            .toArray()
+            .toSorted((one, other) => one.key.localeCompare(other.key) ||
+            one.initiated.getTime() - other.initiated.getTime());
+    }
+}
+//# sourceMappingURL=sim-s3-multipart-uploads.js.map

package/dist/service/s3/upload/sim-s3-multipart-uploads.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-s3-multipart-uploads.js","sourceRoot":"","sources":["../../../../src/service/s3/upload/sim-s3-multipart-uploads.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EACL,oBAAoB,GAErB,MAAM,8BAA8B,CAAC;AAQtC;;;;;;;;GAQG;AACH,MAAM,OAAO,qBAAqB;IACf,OAAO,GAAG,IAAI,GAAG,EAAgC,CAAC;IAEnE;;;;;OAKG;IACH,KAAK,CAAC,UAAsC;QAC1C,MAAM,MAAM,GAAG,IAAI,oBAAoB,CAAC;YACtC,QAAQ,EAAE,UAAU,EAAE;YACtB,GAAG,EAAE,UAAU,CAAC,GAAG;YACnB,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,SAAS,EAAE,UAAU,CAAC,SAAS;SAChC,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAE1C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,QAAgC;QACnC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IAED;;;;;;OAMG;IACH,OAAO,CAAC,QAAgC;QACtC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAED;;;;;;OAMG;IACH,UAAU,CAAC,MAAe;QACxB,OAAO,IAAI,CAAC,OAAO;aAChB,MAAM,EAAE;aACR,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;aACzE,OAAO,EAAE;aACT,QAAQ,CACP,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CACb,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC;YAChC,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,CACtD,CAAC;IACN,CAAC;CACF"}

package/dist/service/secretsmanager/cfn/dynamic/sim-cfn-secrets-manager-dynamic-reference-resolver.d.ts

@@ -0,0 +1,51 @@
+import type { SimAwsAccountRegionScope } from "../../../aws/sim-aws-account-region-scope.js";
+import type { SimCfnDynamicReference, SimCfnDynamicReferenceResolution, SimCfnDynamicReferenceResolver } from "../../../cloudformation/template/dynamic/sim-cfn-dynamic-reference.type.js";
+import type { SimSecretsManager } from "../../sim-secrets-manager.js";
+interface SimCfnSecretsManagerDynamicReferenceResolverProperties {
+    /** Secrets Manager for the Account and Region the Stack deploys into. */
+    readonly secretsManager: SimSecretsManager;
+    /** Secrets Manager for another Account and Region, which a full ARN names. */
+    readonly secretsManagerIn: (scope: SimAwsAccountRegionScope) => SimSecretsManager;
+}
+/**
+ * Answers `{{resolve:secretsmanager:...}}` references from simulated Secrets
+ * Manager.
+ *
+ * The secret is read as the caller deploying the Stack would read it, at the
+ * point the Resource holding the reference is created. Real CloudFormation
+ * makes no dependency out of a dynamic reference, so a secret another Resource
+ * of the same Stack creates is only there in time if the template says
+ * `DependsOn`.
+ *
+ * Reading goes through the ordinary GetSecretValue command, which decrypts the
+ * version through simulated KMS, so the answer comes back as a promise. That
+ * is what the CloudFormation engine waits on around its otherwise synchronous
+ * property resolution.
+ *
+ * Anything Secrets Manager cannot answer becomes a stand-in value carrying a
+ * reason. A template naming secrets a test never created still deploys, and
+ * the Resource records what it was given instead.
+ */
+export declare class SimCfnSecretsManagerDynamicReferenceResolver implements SimCfnDynamicReferenceResolver {
+    private readonly secretsManager;
+    private readonly secretsManagerIn;
+    constructor(properties: SimCfnSecretsManagerDynamicReferenceResolverProperties);
+    /**
+     * Resolve one reference to the secret value it names.
+     */
+    resolve(reference: SimCfnDynamicReference): Promise<SimCfnDynamicReferenceResolution>;
+    /**
+     * Read the version the reference selects, or the current one.
+     */
+    private read;
+    /**
+     * The value a reference Secrets Manager could not answer resolves to.
+     *
+     * The shape follows the `ssm` references beside it, and CDK before them,
+     * which fills an unresolved context lookup with `dummy-value-for-<name>`. A
+     * test reading one back sees where it came from.
+     */
+    private standIn;
+}
+export {};
+//# sourceMappingURL=sim-cfn-secrets-manager-dynamic-reference-resolver.d.ts.map

package/dist/service/secretsmanager/cfn/dynamic/sim-cfn-secrets-manager-dynamic-reference-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-secrets-manager-dynamic-reference-resolver.d.ts","sourceRoot":"","sources":["../../../../../src/service/secretsmanager/cfn/dynamic/sim-cfn-secrets-manager-dynamic-reference-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,KAAK,EACV,sBAAsB,EACtB,gCAAgC,EAChC,8BAA8B,EAC/B,MAAM,4EAA4E,CAAC;AAEpF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAQtE,UAAU,sDAAsD;IAC9D,yEAAyE;IACzE,QAAQ,CAAC,cAAc,EAAE,iBAAiB,CAAC;IAE3C,8EAA8E;IAC9E,QAAQ,CAAC,gBAAgB,EAAE,CACzB,KAAK,EAAE,wBAAwB,KAC5B,iBAAiB,CAAC;CACxB;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBAAa,4CAA6C,YAAW,8BAA8B;IACjG,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAoB;IAEnD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAEV;IAEvB,YACE,UAAU,EAAE,sDAAsD,EAInE;IAED;;OAEG;IACG,OAAO,CACX,SAAS,EAAE,sBAAsB,GAChC,OAAO,CAAC,gCAAgC,CAAC,CAwB3C;IAED;;OAEG;YACW,IAAI;IA+BlB;;;;;;OAMG;IACH,OAAO,CAAC,OAAO;CAYhB"}

package/dist/service/secretsmanager/cfn/dynamic/sim-cfn-secrets-manager-dynamic-reference-resolver.js

@@ -0,0 +1,89 @@
+import { SimSecretsManagerError } from "../../error/sim-secrets-manager.error.js";
+import { simCfnSecretsManagerJsonKeyValue } from "./sim-cfn-secrets-manager-json-key.js";
+import { parseSimCfnSecretsManagerReference, SimCfnSecretsManagerReferenceProblem, } from "./sim-cfn-secrets-manager-reference-body.js";
+/**
+ * Answers `{{resolve:secretsmanager:...}}` references from simulated Secrets
+ * Manager.
+ *
+ * The secret is read as the caller deploying the Stack would read it, at the
+ * point the Resource holding the reference is created. Real CloudFormation
+ * makes no dependency out of a dynamic reference, so a secret another Resource
+ * of the same Stack creates is only there in time if the template says
+ * `DependsOn`.
+ *
+ * Reading goes through the ordinary GetSecretValue command, which decrypts the
+ * version through simulated KMS, so the answer comes back as a promise. That
+ * is what the CloudFormation engine waits on around its otherwise synchronous
+ * property resolution.
+ *
+ * Anything Secrets Manager cannot answer becomes a stand-in value carrying a
+ * reason. A template naming secrets a test never created still deploys, and
+ * the Resource records what it was given instead.
+ */
+export class SimCfnSecretsManagerDynamicReferenceResolver {
+    secretsManager;
+    secretsManagerIn;
+    constructor(properties) {
+        this.secretsManager = properties.secretsManager;
+        this.secretsManagerIn = properties.secretsManagerIn;
+    }
+    /**
+     * Resolve one reference to the secret value it names.
+     */
+    async resolve(reference) {
+        let secretId = reference.body;
+        try {
+            const parsed = parseSimCfnSecretsManagerReference(reference.body);
+            secretId = parsed.secretId;
+            return { value: await this.read(parsed) };
+        }
+        catch (error) {
+            if (error instanceof SimCfnSecretsManagerReferenceProblem) {
+                return this.standIn(reference, secretId, error.message);
+            }
+            /* v8 ignore next 3 -- defensive: only Secrets Manager reaches here */
+            if (!(error instanceof SimSecretsManagerError)) {
+                throw error;
+            }
+            return this.standIn(reference, secretId, `and simulated Secrets Manager could not read it (${error.message})`);
+        }
+    }
+    /**
+     * Read the version the reference selects, or the current one.
+     */
+    async read(reference) {
+        const { secretId, scope, jsonKey, versionStage, versionId } = reference;
+        const secretsManager = scope === undefined ? this.secretsManager : this.secretsManagerIn(scope);
+        const read = await secretsManager.getSecretValue({
+            input: {
+                SecretId: secretId,
+                VersionStage: versionStage,
+                VersionId: versionId,
+            },
+        });
+        const secretString = read.SecretString;
+        if (secretString === undefined) {
+            throw new SimCfnSecretsManagerReferenceProblem(`and '${secretId}' holds a binary value, which a dynamic reference ` +
+                `cannot read`);
+        }
+        if (jsonKey === undefined) {
+            return secretString;
+        }
+        return simCfnSecretsManagerJsonKeyValue(secretString, secretId, jsonKey);
+    }
+    /**
+     * The value a reference Secrets Manager could not answer resolves to.
+     *
+     * The shape follows the `ssm` references beside it, and CDK before them,
+     * which fills an unresolved context lookup with `dummy-value-for-<name>`. A
+     * test reading one back sees where it came from.
+     */
+    standIn(reference, secretId, reason) {
+        return {
+            value: `dummy-value-for-${secretId}`,
+            reason: `holds ${reference.text}, ${reason}, so the Resource is created ` +
+                `with a stand-in value`,
+        };
+    }
+}
+//# sourceMappingURL=sim-cfn-secrets-manager-dynamic-reference-resolver.js.map

package/dist/service/secretsmanager/cfn/dynamic/sim-cfn-secrets-manager-dynamic-reference-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-secrets-manager-dynamic-reference-resolver.js","sourceRoot":"","sources":["../../../../../src/service/secretsmanager/cfn/dynamic/sim-cfn-secrets-manager-dynamic-reference-resolver.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AAElF,OAAO,EAAE,gCAAgC,EAAE,MAAM,uCAAuC,CAAC;AACzF,OAAO,EACL,kCAAkC,EAElC,oCAAoC,GACrC,MAAM,6CAA6C,CAAC;AAYrD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,OAAO,4CAA4C;IACtC,cAAc,CAAoB;IAElC,gBAAgB,CAEV;IAEvB,YACE,UAAkE;QAElE,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,cAAc,CAAC;QAChD,IAAI,CAAC,gBAAgB,GAAG,UAAU,CAAC,gBAAgB,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CACX,SAAiC;QAEjC,IAAI,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC;QAE9B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,kCAAkC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAClE,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;YAE3B,OAAO,EAAE,KAAK,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,oCAAoC,EAAE,CAAC;gBAC1D,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAC1D,CAAC;YAED,sEAAsE;YACtE,IAAI,CAAC,CAAC,KAAK,YAAY,sBAAsB,CAAC,EAAE,CAAC;gBAC/C,MAAM,KAAK,CAAC;YACd,CAAC;YAED,OAAO,IAAI,CAAC,OAAO,CACjB,SAAS,EACT,QAAQ,EACR,oDAAoD,KAAK,CAAC,OAAO,GAAG,CACrE,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,IAAI,CAChB,SAAwC;QAExC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,SAAS,CAAC;QACxE,MAAM,cAAc,GAClB,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAE3E,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,cAAc,CAAC;YAC/C,KAAK,EAAE;gBACL,QAAQ,EAAE,QAAQ;gBAClB,YAAY,EAAE,YAAY;gBAC1B,SAAS,EAAE,SAAS;aACrB;SACF,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QAEvC,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,IAAI,oCAAoC,CAC5C,QAAQ,QAAQ,oDAAoD;gBAClE,aAAa,CAChB,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,OAAO,gCAAgC,CAAC,YAAY,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC3E,CAAC;IAED;;;;;;OAMG;IACK,OAAO,CACb,SAAiC,EACjC,QAAgB,EAChB,MAAc;QAEd,OAAO;YACL,KAAK,EAAE,mBAAmB,QAAQ,EAAE;YACpC,MAAM,EACJ,SAAS,SAAS,CAAC,IAAI,KAAK,MAAM,+BAA+B;gBACjE,uBAAuB;SAC1B,CAAC;IACJ,CAAC;CACF"}

package/dist/service/secretsmanager/cfn/dynamic/sim-cfn-secrets-manager-json-key.d.ts

@@ -0,0 +1,9 @@
+/**
+ * One key of a secret holding a JSON object.
+ *
+ * Real CloudFormation refuses a key the secret has no value for. A template
+ * naming a key that has since been renamed fails, where substituting nothing
+ * would have deployed an empty password.
+ */
+export declare function simCfnSecretsManagerJsonKeyValue(secretString: string, secretId: string, jsonKey: string): string;
+//# sourceMappingURL=sim-cfn-secrets-manager-json-key.d.ts.map

package/dist/service/secretsmanager/cfn/dynamic/sim-cfn-secrets-manager-json-key.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-secrets-manager-json-key.d.ts","sourceRoot":"","sources":["../../../../../src/service/secretsmanager/cfn/dynamic/sim-cfn-secrets-manager-json-key.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,wBAAgB,gCAAgC,CAC9C,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,GACd,MAAM,CAmBR"}

package/dist/service/secretsmanager/cfn/dynamic/sim-cfn-secrets-manager-json-key.js

@@ -0,0 +1,40 @@
+import { SimCfnSecretsManagerReferenceProblem } from "./sim-cfn-secrets-manager-reference-body.js";
+/**
+ * One key of a secret holding a JSON object.
+ *
+ * Real CloudFormation refuses a key the secret has no value for. A template
+ * naming a key that has since been renamed fails, where substituting nothing
+ * would have deployed an empty password.
+ */
+export function simCfnSecretsManagerJsonKeyValue(secretString, secretId, jsonKey) {
+    const parsed = jsonObject(secretString);
+    if (parsed === undefined) {
+        throw new SimCfnSecretsManagerReferenceProblem(`and '${secretId}' does not hold a JSON object, so it has no ` +
+            `'${jsonKey}' key`);
+    }
+    const value = parsed.get(jsonKey);
+    if (value === undefined) {
+        throw new SimCfnSecretsManagerReferenceProblem(`and '${secretId}' holds no '${jsonKey}' key`);
+    }
+    return typeof value === "string" ? value : JSON.stringify(value);
+}
+/**
+ * The secret value read as a JSON object, or nothing where it is not one.
+ *
+ * The keys come back as a map so that a secret naming one of them `__proto__`
+ * reads that key of the secret.
+ */
+function jsonObject(secretString) {
+    let parsed;
+    try {
+        parsed = JSON.parse(secretString);
+    }
+    catch {
+        return undefined;
+    }
+    if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
+        return undefined;
+    }
+    return new Map(Object.entries(parsed));
+}
+//# sourceMappingURL=sim-cfn-secrets-manager-json-key.js.map

package/dist/service/secretsmanager/cfn/dynamic/sim-cfn-secrets-manager-json-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-secrets-manager-json-key.js","sourceRoot":"","sources":["../../../../../src/service/secretsmanager/cfn/dynamic/sim-cfn-secrets-manager-json-key.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oCAAoC,EAAE,MAAM,6CAA6C,CAAC;AAEnG;;;;;;GAMG;AACH,MAAM,UAAU,gCAAgC,CAC9C,YAAoB,EACpB,QAAgB,EAChB,OAAe;IAEf,MAAM,MAAM,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;IAExC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,oCAAoC,CAC5C,QAAQ,QAAQ,8CAA8C;YAC5D,IAAI,OAAO,OAAO,CACrB,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAElC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,oCAAoC,CAC5C,QAAQ,QAAQ,eAAe,OAAO,OAAO,CAC9C,CAAC;IACJ,CAAC;IAED,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AACnE,CAAC;AAED;;;;;GAKG;AACH,SAAS,UAAU,CAAC,YAAoB;IACtC,IAAI,MAAe,CAAC;IAEpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;AACzC,CAAC"}