@kensio/yulin 1.19.2 → 1.19.4

package/dist/service/ses/command/identity/sim-ses-identity-attributes.d.ts

@@ -0,0 +1,29 @@
+import type { SimSesIdentity } from "../../identity/sim-ses-identity.js";
+import type { SimGetEmailIdentityCommandOutput, SimSesDkimAttributes, SimSesMailFromAttributes } from "./identity.command.js";
+/** Everything GetEmailIdentity reports, apart from the response metadata. */
+type SimSesIdentityDetails = Omit<SimGetEmailIdentityCommandOutput, "$metadata">;
+/**
+ * The whole of what GetEmailIdentity says about one identity.
+ *
+ * Assembled here rather than at the command, so that the command stays the
+ * three steps it is about: name the identity, authorize the caller, find it.
+ */
+export declare function simSesIdentityDetails(identity: SimSesIdentity): SimSesIdentityDetails;
+/**
+ * What GetEmailIdentity reports about an identity's DKIM signing.
+ *
+ * Every field here is the configuration the identity was created with, read
+ * straight back. Nothing signs a message and nothing checks a signature on
+ * one, so what a test gets is the answer to "is the identity configured the
+ * way the stack said" and nothing about deliverability.
+ */
+export declare function simSesDkimAttributes(identity: SimSesIdentity): SimSesDkimAttributes;
+/**
+ * What GetEmailIdentity reports about a custom MAIL FROM domain.
+ *
+ * Absent where the identity was configured without one, which is how real SES
+ * answers for an identity sending from the default `amazonses.com` envelope.
+ */
+export declare function simSesMailFromAttributes(identity: SimSesIdentity): SimSesMailFromAttributes | undefined;
+export {};
+//# sourceMappingURL=sim-ses-identity-attributes.d.ts.map

package/dist/service/ses/command/identity/sim-ses-identity-attributes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ses-identity-attributes.d.ts","sourceRoot":"","sources":["../../../../../src/service/ses/command/identity/sim-ses-identity-attributes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,KAAK,EACV,gCAAgC,EAChC,oBAAoB,EACpB,wBAAwB,EACzB,MAAM,uBAAuB,CAAC;AAE/B,6EAA6E;AAC7E,KAAK,qBAAqB,GAAG,IAAI,CAC/B,gCAAgC,EAChC,WAAW,CACZ,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,cAAc,GACvB,qBAAqB,CAgBvB;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,cAAc,GACvB,oBAAoB,CAYtB;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,cAAc,GACvB,wBAAwB,GAAG,SAAS,CAYtC"}

package/dist/service/ses/command/identity/sim-ses-identity-attributes.js

@@ -0,0 +1,60 @@
+/**
+ * The whole of what GetEmailIdentity says about one identity.
+ *
+ * Assembled here rather than at the command, so that the command stays the
+ * three steps it is about: name the identity, authorize the caller, find it.
+ */
+export function simSesIdentityDetails(identity) {
+    const mailFrom = simSesMailFromAttributes(identity);
+    const settings = identity.settings;
+    return {
+        IdentityType: identity.identityType,
+        VerifiedForSendingStatus: identity.isVerified,
+        VerificationStatus: identity.verificationStatus,
+        FeedbackForwardingStatus: settings.feedbackForwardingEnabled,
+        DkimAttributes: simSesDkimAttributes(identity),
+        ...(mailFrom !== undefined && { MailFromAttributes: mailFrom }),
+        ...(settings.configurationSetName !== undefined && {
+            ConfigurationSetName: settings.configurationSetName,
+        }),
+        Tags: settings.tags,
+    };
+}
+/**
+ * What GetEmailIdentity reports about an identity's DKIM signing.
+ *
+ * Every field here is the configuration the identity was created with, read
+ * straight back. Nothing signs a message and nothing checks a signature on
+ * one, so what a test gets is the answer to "is the identity configured the
+ * way the stack said" and nothing about deliverability.
+ */
+export function simSesDkimAttributes(identity) {
+    const { dkim } = identity.settings;
+    return {
+        SigningEnabled: dkim.signingEnabled,
+        Status: identity.dkimStatus,
+        SigningAttributesOrigin: dkim.signingOrigin,
+        ...(identity.dkimTokens !== undefined && { Tokens: identity.dkimTokens }),
+        ...(dkim.nextSigningKeyLength !== undefined && {
+            NextSigningKeyLength: dkim.nextSigningKeyLength,
+        }),
+    };
+}
+/**
+ * What GetEmailIdentity reports about a custom MAIL FROM domain.
+ *
+ * Absent where the identity was configured without one, which is how real SES
+ * answers for an identity sending from the default `amazonses.com` envelope.
+ */
+export function simSesMailFromAttributes(identity) {
+    const { mailFrom } = identity.settings;
+    if (mailFrom === undefined) {
+        return undefined;
+    }
+    return {
+        MailFromDomain: mailFrom.mailFromDomain,
+        MailFromDomainStatus: identity.verificationStatus,
+        BehaviorOnMxFailure: mailFrom.behaviourOnMxFailure,
+    };
+}
+//# sourceMappingURL=sim-ses-identity-attributes.js.map

package/dist/service/ses/command/identity/sim-ses-identity-attributes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ses-identity-attributes.js","sourceRoot":"","sources":["../../../../../src/service/ses/command/identity/sim-ses-identity-attributes.ts"],"names":[],"mappings":"AAaA;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,QAAwB;IAExB,MAAM,QAAQ,GAAG,wBAAwB,CAAC,QAAQ,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;IAEnC,OAAO;QACL,YAAY,EAAE,QAAQ,CAAC,YAAY;QACnC,wBAAwB,EAAE,QAAQ,CAAC,UAAU;QAC7C,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;QAC/C,wBAAwB,EAAE,QAAQ,CAAC,yBAAyB;QAC5D,cAAc,EAAE,oBAAoB,CAAC,QAAQ,CAAC;QAC9C,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,kBAAkB,EAAE,QAAQ,EAAE,CAAC;QAC/D,GAAG,CAAC,QAAQ,CAAC,oBAAoB,KAAK,SAAS,IAAI;YACjD,oBAAoB,EAAE,QAAQ,CAAC,oBAAoB;SACpD,CAAC;QACF,IAAI,EAAE,QAAQ,CAAC,IAAI;KACpB,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAClC,QAAwB;IAExB,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC;IAEnC,OAAO;QACL,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,MAAM,EAAE,QAAQ,CAAC,UAAU;QAC3B,uBAAuB,EAAE,IAAI,CAAC,aAAa;QAC3C,GAAG,CAAC,QAAQ,CAAC,UAAU,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC;QACzE,GAAG,CAAC,IAAI,CAAC,oBAAoB,KAAK,SAAS,IAAI;YAC7C,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;SAChD,CAAC;KACH,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CACtC,QAAwB;IAExB,MAAM,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC;IAEvC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO;QACL,cAAc,EAAE,QAAQ,CAAC,cAAc;QACvC,oBAAoB,EAAE,QAAQ,CAAC,kBAAkB;QACjD,mBAAmB,EAAE,QAAQ,CAAC,oBAAoB;KACnD,CAAC;AACJ,CAAC"}

package/dist/service/ses/command/identity/sim-ses-identity-commands.d.ts

@@ -24,7 +24,12 @@ export declare class SimSesIdentityCommands {
      */
     createEmailIdentity(command: SimCreateEmailIdentityCommand, options?: SimSesRequestOptions): SimCreateEmailIdentityCommandOutput;
     /**
-     * Read one identity and how far its verification has got.
+     * Read one identity, how far its verification has got, and what it was
+     * configured with.
+     *
+     * The DKIM, MAIL FROM, configuration set and tag settings are read straight
+     * back from what created the identity. This is where a test finds out that
+     * the identity a stack deployed is the one the stack described.
      */
     getEmailIdentity(command: SimGetEmailIdentityCommand, options?: SimSesRequestOptions): SimGetEmailIdentityCommandOutput;
     /**

package/dist/service/ses/command/identity/sim-ses-identity-commands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-ses-identity-commands.d.ts","sourceRoot":"","sources":["../../../../../src/service/ses/command/identity/sim-ses-identity-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AAGpF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAE3E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,KAAK,EACV,6BAA6B,EAC7B,mCAAmC,EACnC,6BAA6B,EAC7B,mCAAmC,EACnC,0BAA0B,EAC1B,gCAAgC,EAChC,6BAA6B,EAC7B,mCAAmC,EAEpC,MAAM,uBAAuB,CAAC;AAG/B,UAAU,gCAAgC;IACxC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;IACzC,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED;;;;;;;GAOG;AACH,qBAAa,sBAAsB;;IAKjC,YAAY,UAAU,EAAE,gCAAgC,EAIvD;IAED;;OAEG;IACH,mBAAmB,CACjB,OAAO,EAAE,6BAA6B,EACtC,OAAO,CAAC,EAAE,oBAAoB,GAC7B,mCAAmC,CAmBrC;IAED;;OAEG;IACH,gBAAgB,CACd,OAAO,EAAE,0BAA0B,EACnC,OAAO,CAAC,EAAE,oBAAoB,GAC7B,gCAAgC,CAoBlC;IAED;;;;;;OAMG;IACH,mBAAmB,CACjB,OAAO,EAAE,6BAA6B,EACtC,OAAO,CAAC,EAAE,oBAAoB,GAC7B,mCAAmC,CAiBrC;IAED;;OAEG;IACH,mBAAmB,CACjB,OAAO,EAAE,6BAA6B,EACtC,OAAO,CAAC,EAAE,oBAAoB,GAC7B,mCAAmC,CAerC;CACF"}
+{"version":3,"file":"sim-ses-identity-commands.d.ts","sourceRoot":"","sources":["../../../../../src/service/ses/command/identity/sim-ses-identity-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AAMpF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAE3E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,KAAK,EACV,6BAA6B,EAC7B,mCAAmC,EACnC,6BAA6B,EAC7B,mCAAmC,EACnC,0BAA0B,EAC1B,gCAAgC,EAChC,6BAA6B,EAC7B,mCAAmC,EAEpC,MAAM,uBAAuB,CAAC;AAO/B,UAAU,gCAAgC;IACxC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;IACzC,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED;;;;;;;GAOG;AACH,qBAAa,sBAAsB;;IAKjC,YAAY,UAAU,EAAE,gCAAgC,EAIvD;IAED;;OAEG;IACH,mBAAmB,CACjB,OAAO,EAAE,6BAA6B,EACtC,OAAO,CAAC,EAAE,oBAAoB,GAC7B,mCAAmC,CA0BrC;IAED;;;;;;;OAOG;IACH,gBAAgB,CACd,OAAO,EAAE,0BAA0B,EACnC,OAAO,CAAC,EAAE,oBAAoB,GAC7B,gCAAgC,CAclC;IAED;;;;;;OAMG;IACH,mBAAmB,CACjB,OAAO,EAAE,6BAA6B,EACtC,OAAO,CAAC,EAAE,oBAAoB,GAC7B,mCAAmC,CAiBrC;IAED;;OAEG;IACH,mBAAmB,CACjB,OAAO,EAAE,6BAA6B,EACtC,OAAO,CAAC,EAAE,oBAAoB,GAC7B,mCAAmC,CAerC;CACF"}

package/dist/service/ses/command/identity/sim-ses-identity-commands.js

@@ -1,6 +1,7 @@
-import { requiredSimSesIdentityName } from "../../identity/sim-ses-identity-name.js";
+import { requiredSimSesIdentityName, simSesIdentityType, } from "../../identity/sim-ses-identity-name.js";
 import { SimSesPage } from "../sim-ses-page.js";
-import { refuseUnsimulatedIdentityInput } from "./sim-ses-unsimulated-identity-input.js";
+import { simSesDkimAttributes, simSesIdentityDetails, } from "./sim-ses-identity-attributes.js";
+import { simSesIdentityInputSettings } from "./sim-ses-identity-input-settings.js";
 /**
  * The commands that make, read, list and remove email identities.
  *
@@ -23,29 +24,28 @@ export class SimSesIdentityCommands {
      */
     createEmailIdentity(command, options) {
         const emailIdentity = requiredSimSesIdentityName(command.input.EmailIdentity);
-        refuseUnsimulatedIdentityInput(command.input);
         this.#authorizer.authorizeIdentity("ses:CreateEmailIdentity", emailIdentity, options?.caller);
-        const identity = this.#identities.create(emailIdentity, this.#clock.now());
+        const identity = this.#identities.create(emailIdentity, this.#clock.now(), simSesIdentityInputSettings(command.input, simSesIdentityType(emailIdentity)));
         return {
             $metadata: {},
             IdentityType: identity.identityType,
             VerifiedForSendingStatus: identity.isVerified,
+            DkimAttributes: simSesDkimAttributes(identity),
         };
     }
     /**
-     * Read one identity and how far its verification has got.
+     * Read one identity, how far its verification has got, and what it was
+     * configured with.
+     *
+     * The DKIM, MAIL FROM, configuration set and tag settings are read straight
+     * back from what created the identity. This is where a test finds out that
+     * the identity a stack deployed is the one the stack described.
      */
     getEmailIdentity(command, options) {
         const emailIdentity = requiredSimSesIdentityName(command.input.EmailIdentity);
         this.#authorizer.authorizeIdentity("ses:GetEmailIdentity", emailIdentity, options?.caller);
         const identity = this.#identities.require(emailIdentity);
-        return {
-            $metadata: {},
-            IdentityType: identity.identityType,
-            VerifiedForSendingStatus: identity.isVerified,
-            VerificationStatus: identity.verificationStatus,
-            FeedbackForwardingStatus: true,
-        };
+        return { $metadata: {}, ...simSesIdentityDetails(identity) };
     }
     /**
      * List the identities in this scope, in the order they were created.

package/dist/service/ses/command/identity/sim-ses-identity-commands.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-ses-identity-commands.js","sourceRoot":"","sources":["../../../../../src/service/ses/command/identity/sim-ses-identity-commands.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAGrF,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAahD,OAAO,EAAE,8BAA8B,EAAE,MAAM,yCAAyC,CAAC;AAQzF;;;;;;;GAOG;AACH,MAAM,OAAO,sBAAsB;IACxB,WAAW,CAAsB;IACjC,WAAW,CAAmB;IAC9B,MAAM,CAAW;IAE1B,YAAY,UAA4C;QACtD,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,UAAU,CAAC;QACzC,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,UAAU,CAAC;QACzC,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,mBAAmB,CACjB,OAAsC,EACtC,OAA8B;QAE9B,MAAM,aAAa,GAAG,0BAA0B,CAC9C,OAAO,CAAC,KAAK,CAAC,aAAa,CAC5B,CAAC;QAEF,8BAA8B,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAChC,yBAAyB,EACzB,aAAa,EACb,OAAO,EAAE,MAAM,CAChB,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;QAE3E,OAAO;YACL,SAAS,EAAE,EAAE;YACb,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,wBAAwB,EAAE,QAAQ,CAAC,UAAU;SAC9C,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,gBAAgB,CACd,OAAmC,EACnC,OAA8B;QAE9B,MAAM,aAAa,GAAG,0BAA0B,CAC9C,OAAO,CAAC,KAAK,CAAC,aAAa,CAC5B,CAAC;QAEF,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAChC,sBAAsB,EACtB,aAAa,EACb,OAAO,EAAE,MAAM,CAChB,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QAEzD,OAAO;YACL,SAAS,EAAE,EAAE;YACb,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,wBAAwB,EAAE,QAAQ,CAAC,UAAU;YAC7C,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;YAC/C,wBAAwB,EAAE,IAAI;SAC/B,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,mBAAmB,CACjB,OAAsC,EACtC,OAA8B;QAE9B,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAClC,yBAAyB,EACzB,OAAO,EAAE,MAAM,CAChB,CAAC;QAEF,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC;YAC1B,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG;YAC5B,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,QAAQ;YAChC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,SAAS;SACnC,CAAC,CAAC;QAEH,OAAO;YACL,SAAS,EAAE,EAAE;YACb,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YACrE,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,mBAAmB,CACjB,OAAsC,EACtC,OAA8B;QAE9B,MAAM,aAAa,GAAG,0BAA0B,CAC9C,OAAO,CAAC,KAAK,CAAC,aAAa,CAC5B,CAAC;QAEF,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAChC,yBAAyB,EACzB,aAAa,EACb,OAAO,EAAE,MAAM,CAChB,CAAC;QAEF,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACxC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAEvC,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC3B,CAAC;CACF;AAED;;GAEG;AACH,SAAS,YAAY,CAAC,QAAwB;IAC5C,OAAO;QACL,YAAY,EAAE,QAAQ,CAAC,YAAY;QACnC,YAAY,EAAE,QAAQ,CAAC,aAAa;QACpC,cAAc,EAAE,QAAQ,CAAC,UAAU;QACnC,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;KAChD,CAAC;AACJ,CAAC"}
+{"version":3,"file":"sim-ses-identity-commands.js","sourceRoot":"","sources":["../../../../../src/service/ses/command/identity/sim-ses-identity-commands.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,0BAA0B,EAC1B,kBAAkB,GACnB,MAAM,yCAAyC,CAAC;AAGjD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAahD,OAAO,EACL,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AAQnF;;;;;;;GAOG;AACH,MAAM,OAAO,sBAAsB;IACxB,WAAW,CAAsB;IACjC,WAAW,CAAmB;IAC9B,MAAM,CAAW;IAE1B,YAAY,UAA4C;QACtD,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,UAAU,CAAC;QACzC,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,UAAU,CAAC;QACzC,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,mBAAmB,CACjB,OAAsC,EACtC,OAA8B;QAE9B,MAAM,aAAa,GAAG,0BAA0B,CAC9C,OAAO,CAAC,KAAK,CAAC,aAAa,CAC5B,CAAC;QAEF,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAChC,yBAAyB,EACzB,aAAa,EACb,OAAO,EAAE,MAAM,CAChB,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CACtC,aAAa,EACb,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,EACjB,2BAA2B,CACzB,OAAO,CAAC,KAAK,EACb,kBAAkB,CAAC,aAAa,CAAC,CAClC,CACF,CAAC;QAEF,OAAO;YACL,SAAS,EAAE,EAAE;YACb,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,wBAAwB,EAAE,QAAQ,CAAC,UAAU;YAC7C,cAAc,EAAE,oBAAoB,CAAC,QAAQ,CAAC;SAC/C,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,gBAAgB,CACd,OAAmC,EACnC,OAA8B;QAE9B,MAAM,aAAa,GAAG,0BAA0B,CAC9C,OAAO,CAAC,KAAK,CAAC,aAAa,CAC5B,CAAC;QAEF,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAChC,sBAAsB,EACtB,aAAa,EACb,OAAO,EAAE,MAAM,CAChB,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QAEzD,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC/D,CAAC;IAED;;;;;;OAMG;IACH,mBAAmB,CACjB,OAAsC,EACtC,OAA8B;QAE9B,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAClC,yBAAyB,EACzB,OAAO,EAAE,MAAM,CAChB,CAAC;QAEF,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC;YAC1B,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG;YAC5B,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,QAAQ;YAChC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,SAAS;SACnC,CAAC,CAAC;QAEH,OAAO;YACL,SAAS,EAAE,EAAE;YACb,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YACrE,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,mBAAmB,CACjB,OAAsC,EACtC,OAA8B;QAE9B,MAAM,aAAa,GAAG,0BAA0B,CAC9C,OAAO,CAAC,KAAK,CAAC,aAAa,CAC5B,CAAC;QAEF,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAChC,yBAAyB,EACzB,aAAa,EACb,OAAO,EAAE,MAAM,CAChB,CAAC;QAEF,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACxC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAEvC,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC3B,CAAC;CACF;AAED;;GAEG;AACH,SAAS,YAAY,CAAC,QAAwB;IAC5C,OAAO;QACL,YAAY,EAAE,QAAQ,CAAC,YAAY;QACnC,YAAY,EAAE,QAAQ,CAAC,aAAa;QACpC,cAAc,EAAE,QAAQ,CAAC,UAAU;QACnC,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;KAChD,CAAC;AACJ,CAAC"}

package/dist/service/ses/command/identity/sim-ses-identity-input-settings.d.ts

@@ -0,0 +1,16 @@
+import type { SimSesIdentityType } from "../../identity/sim-ses-identity-name.js";
+import { type SimSesIdentitySettings } from "../../identity/sim-ses-identity-settings.js";
+import type { SimCreateEmailIdentityCommandInput } from "./identity.command.js";
+/**
+ * Read the settings a CreateEmailIdentity request configures an identity with.
+ *
+ * The request is taken at its word. `DkimSigningAttributes`, `Tags` and
+ * `ConfigurationSetName` are all held on the identity and read back by
+ * `GetEmailIdentity`, so a caller that asks for one gets an identity that
+ * agrees with the request that made it.
+ *
+ * A private signing key is the one input dropped. Nothing here signs a
+ * message, and holding a secret for no reason is worse than forgetting it.
+ */
+export declare function simSesIdentityInputSettings(input: SimCreateEmailIdentityCommandInput, identityType: SimSesIdentityType): SimSesIdentitySettings;
+//# sourceMappingURL=sim-ses-identity-input-settings.d.ts.map

package/dist/service/ses/command/identity/sim-ses-identity-input-settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ses-identity-input-settings.d.ts","sourceRoot":"","sources":["../../../../../src/service/ses/command/identity/sim-ses-identity-input-settings.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAClF,OAAO,EAGL,KAAK,sBAAsB,EAE5B,MAAM,6CAA6C,CAAC;AACrD,OAAO,KAAK,EACV,kCAAkC,EAGnC,MAAM,uBAAuB,CAAC;AAE/B;;;;;;;;;;GAUG;AACH,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,kCAAkC,EACzC,YAAY,EAAE,kBAAkB,GAC/B,sBAAsB,CAexB"}

package/dist/service/ses/command/identity/sim-ses-identity-input-settings.js

@@ -0,0 +1,57 @@
+import { defaultSimSesIdentitySettings, } from "../../identity/sim-ses-identity-settings.js";
+/**
+ * Read the settings a CreateEmailIdentity request configures an identity with.
+ *
+ * The request is taken at its word. `DkimSigningAttributes`, `Tags` and
+ * `ConfigurationSetName` are all held on the identity and read back by
+ * `GetEmailIdentity`, so a caller that asks for one gets an identity that
+ * agrees with the request that made it.
+ *
+ * A private signing key is the one input dropped. Nothing here signs a
+ * message, and holding a secret for no reason is worse than forgetting it.
+ */
+export function simSesIdentityInputSettings(input, identityType) {
+    const defaults = defaultSimSesIdentitySettings(identityType);
+    return {
+        ...defaults,
+        dkim: inputDkimSettings(input.DkimSigningAttributes, defaults.dkim, identityType),
+        ...(input.ConfigurationSetName !== undefined && {
+            configurationSetName: input.ConfigurationSetName,
+        }),
+        tags: inputTags(input.Tags),
+    };
+}
+/**
+ * The tags a request carries, keeping the ones that have both halves.
+ *
+ * Real SES refuses a tag with no key. Dropping it is the lesser divergence
+ * here, since the alternative is failing a request over a tag nothing in this
+ * simulation is billed or grouped by.
+ */
+function inputTags(tags) {
+    return (tags ?? []).flatMap((tag) => tag.Key === undefined || tag.Value === undefined
+        ? []
+        : [{ Key: tag.Key, Value: tag.Value }]);
+}
+/**
+ * How a request's signing attributes configure DKIM.
+ *
+ * A selector means Bring Your Own DKIM, which SES reports as an `EXTERNAL`
+ * origin with no tokens of its own. Anything else leaves Easy DKIM in place
+ * and only says which key length it rotates to next.
+ */
+function inputDkimSettings(signingAttributes, defaults, identityType) {
+    if (signingAttributes === undefined) {
+        return defaults;
+    }
+    const selector = signingAttributes.DomainSigningSelector;
+    return {
+        signingEnabled: identityType === "DOMAIN",
+        signingOrigin: selector === undefined ? "AWS_SES" : "EXTERNAL",
+        ...(selector !== undefined && { domainSigningSelector: selector }),
+        ...(signingAttributes.NextSigningKeyLength !== undefined && {
+            nextSigningKeyLength: signingAttributes.NextSigningKeyLength,
+        }),
+    };
+}
+//# sourceMappingURL=sim-ses-identity-input-settings.js.map

package/dist/service/ses/command/identity/sim-ses-identity-input-settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ses-identity-input-settings.js","sourceRoot":"","sources":["../../../../../src/service/ses/command/identity/sim-ses-identity-input-settings.ts"],"names":[],"mappings":"AACA,OAAO,EACL,6BAA6B,GAI9B,MAAM,6CAA6C,CAAC;AAOrD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,2BAA2B,CACzC,KAAyC,EACzC,YAAgC;IAEhC,MAAM,QAAQ,GAAG,6BAA6B,CAAC,YAAY,CAAC,CAAC;IAE7D,OAAO;QACL,GAAG,QAAQ;QACX,IAAI,EAAE,iBAAiB,CACrB,KAAK,CAAC,qBAAqB,EAC3B,QAAQ,CAAC,IAAI,EACb,YAAY,CACb;QACD,GAAG,CAAC,KAAK,CAAC,oBAAoB,KAAK,SAAS,IAAI;YAC9C,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;SACjD,CAAC;QACF,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;KAC5B,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,SAAS,CAChB,IAA2C;IAE3C,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAClC,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS;QAC9C,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CACzC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,iBAAiB,CACxB,iBAA0D,EAC1D,QAA4B,EAC5B,YAAgC;IAEhC,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACpC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,QAAQ,GAAG,iBAAiB,CAAC,qBAAqB,CAAC;IAEzD,OAAO;QACL,cAAc,EAAE,YAAY,KAAK,QAAQ;QACzC,aAAa,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU;QAC9D,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,qBAAqB,EAAE,QAAQ,EAAE,CAAC;QAClE,GAAG,CAAC,iBAAiB,CAAC,oBAAoB,KAAK,SAAS,IAAI;YAC1D,oBAAoB,EAAE,iBAAiB,CAAC,oBAAoB;SAC7D,CAAC;KACH,CAAC;AACJ,CAAC"}

package/dist/service/ses/command/send/sim-ses-configuration-set-check.d.ts

@@ -0,0 +1,53 @@
+import type { SimSesConfigurationSetStore } from "../../configuration-set/sim-ses-configuration-set-store.js";
+import type { SimSesIdentityStore } from "../../identity/sim-ses-identity-store.js";
+interface SimSesConfigurationSetCheckProperties {
+    readonly identities: SimSesIdentityStore;
+    readonly configurationSets: SimSesConfigurationSetStore;
+}
+interface SimSesConfiguredSend {
+    readonly fromEmailAddress: string;
+    readonly configurationSetName: string | undefined;
+}
+/**
+ * Which configuration set a send goes through, and whether it may.
+ *
+ * A send names its own set, and one that names none falls back to the set the
+ * sending identity was created with. That fallback is how an application
+ * attaching a set to an identity behaves, and it lets a test assert a message
+ * went through the right set without the send naming it.
+ *
+ * A name nothing created is still accepted. Real SES refuses one, and refusing
+ * here would fail a test over a set the developer left out of their local
+ * setup. A test wanting the strict reading asks `findConfigurationSet` for the
+ * set and finds nothing.
+ *
+ * `SendingEnabled` is the one option acted on. It is a switch the caller wrote
+ * deliberately. A send through a set that has it off is refused the way SES
+ * refuses one.
+ */
+export declare class SimSesConfigurationSetCheck {
+    #private;
+    constructor(properties: SimSesConfigurationSetCheckProperties);
+    /**
+     * The set this send is made through, or nothing where neither the send nor
+     * the identity names one.
+     *
+     * Which identity's set counts follows the rule IAM authorizes an address
+     * against. An address identity's set wins over its domain's.
+     */
+    applying(send: SimSesConfiguredSend): string | undefined;
+    /**
+     * Refuse a send through a set whose sending is switched off.
+     */
+    check(configurationSetName: string | undefined): void;
+    /**
+     * Why SES would turn this send down, or nothing where it would take it.
+     *
+     * The identity check offers a reason alongside its exception, and this
+     * offers both for the same purpose. A service sending on the account's
+     * behalf reports the refusal in its own vocabulary.
+     */
+    refusal(configurationSetName: string | undefined): string | undefined;
+}
+export {};
+//# sourceMappingURL=sim-ses-configuration-set-check.d.ts.map

package/dist/service/ses/command/send/sim-ses-configuration-set-check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ses-configuration-set-check.d.ts","sourceRoot":"","sources":["../../../../../src/service/ses/command/send/sim-ses-configuration-set-check.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,4DAA4D,CAAC;AAE9G,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AAEpF,UAAU,qCAAqC;IAC7C,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;IACzC,QAAQ,CAAC,iBAAiB,EAAE,2BAA2B,CAAC;CACzD;AAED,UAAU,oBAAoB;IAC5B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,GAAG,SAAS,CAAC;CACnD;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,2BAA2B;;IAItC,YAAY,UAAU,EAAE,qCAAqC,EAG5D;IAED;;;;;;OAMG;IACH,QAAQ,CAAC,IAAI,EAAE,oBAAoB,GAAG,MAAM,GAAG,SAAS,CASvD;IAED;;OAEG;IACH,KAAK,CAAC,oBAAoB,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAMpD;IAED;;;;;;OAMG;IACH,OAAO,CAAC,oBAAoB,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAepE;CACF"}

package/dist/service/ses/command/send/sim-ses-configuration-set-check.js

@@ -0,0 +1,70 @@
+import { simSesBareAddress } from "../../email/sim-ses-address.js";
+import { SimSesSendingPausedException } from "../../error/sim-ses.error.js";
+/**
+ * Which configuration set a send goes through, and whether it may.
+ *
+ * A send names its own set, and one that names none falls back to the set the
+ * sending identity was created with. That fallback is how an application
+ * attaching a set to an identity behaves, and it lets a test assert a message
+ * went through the right set without the send naming it.
+ *
+ * A name nothing created is still accepted. Real SES refuses one, and refusing
+ * here would fail a test over a set the developer left out of their local
+ * setup. A test wanting the strict reading asks `findConfigurationSet` for the
+ * set and finds nothing.
+ *
+ * `SendingEnabled` is the one option acted on. It is a switch the caller wrote
+ * deliberately. A send through a set that has it off is refused the way SES
+ * refuses one.
+ */
+export class SimSesConfigurationSetCheck {
+    #identities;
+    #configurationSets;
+    constructor(properties) {
+        this.#identities = properties.identities;
+        this.#configurationSets = properties.configurationSets;
+    }
+    /**
+     * The set this send is made through, or nothing where neither the send nor
+     * the identity names one.
+     *
+     * Which identity's set counts follows the rule IAM authorizes an address
+     * against. An address identity's set wins over its domain's.
+     */
+    applying(send) {
+        if (send.configurationSetName !== undefined) {
+            return send.configurationSetName;
+        }
+        const address = simSesBareAddress(send.fromEmailAddress);
+        return this.#identities.find(this.#identities.covering(address))?.settings
+            .configurationSetName;
+    }
+    /**
+     * Refuse a send through a set whose sending is switched off.
+     */
+    check(configurationSetName) {
+        const refusal = this.refusal(configurationSetName);
+        if (refusal !== undefined) {
+            throw new SimSesSendingPausedException(refusal);
+        }
+    }
+    /**
+     * Why SES would turn this send down, or nothing where it would take it.
+     *
+     * The identity check offers a reason alongside its exception, and this
+     * offers both for the same purpose. A service sending on the account's
+     * behalf reports the refusal in its own vocabulary.
+     */
+    refusal(configurationSetName) {
+        if (configurationSetName === undefined) {
+            return undefined;
+        }
+        const configurationSet = this.#configurationSets.find(configurationSetName);
+        if (configurationSet === undefined || configurationSet.sendingEnabled) {
+            return undefined;
+        }
+        return (`Email sending is disabled for configuration set ` +
+            `${configurationSetName}.`);
+    }
+}
+//# sourceMappingURL=sim-ses-configuration-set-check.js.map

package/dist/service/ses/command/send/sim-ses-configuration-set-check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ses-configuration-set-check.js","sourceRoot":"","sources":["../../../../../src/service/ses/command/send/sim-ses-configuration-set-check.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AAEnE,OAAO,EAAE,4BAA4B,EAAE,MAAM,8BAA8B,CAAC;AAa5E;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,2BAA2B;IAC7B,WAAW,CAAsB;IACjC,kBAAkB,CAA8B;IAEzD,YAAY,UAAiD;QAC3D,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,UAAU,CAAC;QACzC,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,iBAAiB,CAAC;IACzD,CAAC;IAED;;;;;;OAMG;IACH,QAAQ,CAAC,IAA0B;QACjC,IAAI,IAAI,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;YAC5C,OAAO,IAAI,CAAC,oBAAoB,CAAC;QACnC,CAAC;QAED,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAEzD,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,QAAQ;aACvE,oBAAoB,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,oBAAwC;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QAEnD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,4BAA4B,CAAC,OAAO,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,OAAO,CAAC,oBAAwC;QAC9C,IAAI,oBAAoB,KAAK,SAAS,EAAE,CAAC;YACvC,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,gBAAgB,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAE5E,IAAI,gBAAgB,KAAK,SAAS,IAAI,gBAAgB,CAAC,cAAc,EAAE,CAAC;YACtE,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,CACL,kDAAkD;YAClD,GAAG,oBAAoB,GAAG,CAC3B,CAAC;IACJ,CAAC;CACF"}

package/dist/service/ses/command/send/sim-ses-send-email.d.ts

@@ -4,13 +4,17 @@ import type { SimSesIdentityStore } from "../../identity/sim-ses-identity-store.
 import type { SimSesAuthorizer } from "../authorize/sim-ses-authorizer.js";
 import type { SimSesRequestOptions } from "../sim-ses-request-options.js";
 import type { SimSendEmailCommand, SimSendEmailCommandOutput } from "./send.command.js";
+import type { SimSesConfigurationSetCheck } from "./sim-ses-configuration-set-check.js";
 import type { SimSesContentReader } from "./sim-ses-content.js";
+import type { SimSesSuppressionCheck } from "./sim-ses-suppression-check.js";
 import type { SimSesVerifiedIdentityCheck } from "./sim-ses-verified-identities.js";
 interface SimSesSendEmailProperties {
     readonly identities: SimSesIdentityStore;
     readonly content: SimSesContentReader;
     readonly sent: SimSesSentEmailStore;
     readonly identityCheck: SimSesVerifiedIdentityCheck;
+    readonly configurationSetCheck: SimSesConfigurationSetCheck;
+    readonly suppressionCheck: SimSesSuppressionCheck;
     readonly authorizer: SimSesAuthorizer;
     readonly clock: SimClock;
 }
@@ -20,9 +24,13 @@ interface SimSesSendEmailProperties {
  * Nothing is delivered, so what this does is decide whether SES would have
  * accepted the message and, if it would, keep what it would have sent. The
  * order matters and follows real SES: IAM decides the request before the
- * service looks at it, then the identity check, then the message is recorded.
- * A caller with no permission is therefore refused whether or not its
- * identities are verified.
+ * service looks at it, then the identity check, then the configuration set's
+ * sending switch, then the message is recorded. A caller with no permission is
+ * therefore refused whether or not its identities are verified.
+ *
+ * The suppression list refuses nothing. SES accepts a message addressed to a
+ * suppressed recipient and holds it back from that recipient, so the check
+ * runs last and its answer goes on the record.
  */
 export declare class SimSesSendEmail {
     #private;

package/dist/service/ses/command/send/sim-ses-send-email.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-ses-send-email.d.ts","sourceRoot":"","sources":["../../../../../src/service/ses/command/send/sim-ses-send-email.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qCAAqC,CAAC;AAOpE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AAEpF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AACpF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,KAAK,EACV,mBAAmB,EACnB,yBAAyB,EAE1B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAEhE,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAEpF,UAAU,yBAAyB;IACjC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;IACzC,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;IACtC,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,aAAa,EAAE,2BAA2B,CAAC;IACpD,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED;;;;;;;;;GASG;AACH,qBAAa,eAAe;;IAQ1B,YAAY,UAAU,EAAE,yBAAyB,EAOhD;IAED;;OAEG;IACH,MAAM,CACJ,OAAO,EAAE,mBAAmB,EAC5B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,yBAAyB,CA4C3B;CACF"}
+{"version":3,"file":"sim-ses-send-email.d.ts","sourceRoot":"","sources":["../../../../../src/service/ses/command/send/sim-ses-send-email.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qCAAqC,CAAC;AAOpE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AAEpF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AACpF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,KAAK,EACV,mBAAmB,EACnB,yBAAyB,EAE1B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACxF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAE7E,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAEpF,UAAU,yBAAyB;IACjC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;IACzC,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;IACtC,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,aAAa,EAAE,2BAA2B,CAAC;IACpD,QAAQ,CAAC,qBAAqB,EAAE,2BAA2B,CAAC;IAC5D,QAAQ,CAAC,gBAAgB,EAAE,sBAAsB,CAAC;IAClD,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED;;;;;;;;;;;;;GAaG;AACH,qBAAa,eAAe;;IAU1B,YAAY,UAAU,EAAE,yBAAyB,EAShD;IAED;;OAEG;IACH,MAAM,CACJ,OAAO,EAAE,mBAAmB,EAC5B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,yBAAyB,CAoD3B;CACF"}

package/dist/service/ses/command/send/sim-ses-send-email.js

@@ -9,15 +9,21 @@ import { refuseUnsimulatedSendInput } from "./sim-ses-unsimulated-send-input.js"
  * Nothing is delivered, so what this does is decide whether SES would have
  * accepted the message and, if it would, keep what it would have sent. The
  * order matters and follows real SES: IAM decides the request before the
- * service looks at it, then the identity check, then the message is recorded.
- * A caller with no permission is therefore refused whether or not its
- * identities are verified.
+ * service looks at it, then the identity check, then the configuration set's
+ * sending switch, then the message is recorded. A caller with no permission is
+ * therefore refused whether or not its identities are verified.
+ *
+ * The suppression list refuses nothing. SES accepts a message addressed to a
+ * suppressed recipient and holds it back from that recipient, so the check
+ * runs last and its answer goes on the record.
  */
 export class SimSesSendEmail {
     #identities;
     #content;
     #sent;
     #identityCheck;
+    #configurationSetCheck;
+    #suppressionCheck;
     #authorizer;
     #clock;
     constructor(properties) {
@@ -25,6 +31,8 @@ export class SimSesSendEmail {
         this.#content = properties.content;
         this.#sent = properties.sent;
         this.#identityCheck = properties.identityCheck;
+        this.#configurationSetCheck = properties.configurationSetCheck;
+        this.#suppressionCheck = properties.suppressionCheck;
         this.#authorizer = properties.authorizer;
         this.#clock = properties.clock;
     }
@@ -44,6 +52,11 @@ export class SimSesSendEmail {
         }
         const content = this.#content.read(input.Content);
         this.#identityCheck.check({ fromEmailAddress, recipients });
+        const configurationSetName = this.#configurationSetCheck.applying({
+            fromEmailAddress,
+            configurationSetName: input.ConfigurationSetName,
+        });
+        this.#configurationSetCheck.check(configurationSetName);
         const messageId = randomUUID();
         this.#sent.add(new SimSesSentEmail({
             messageId,
@@ -54,7 +67,8 @@ export class SimSesSendEmail {
             body: content.body,
             templateName: content.templateName,
             templateData: content.templateData,
-            configurationSetName: input.ConfigurationSetName,
+            configurationSetName,
+            suppressedRecipients: this.#suppressionCheck.withheldFrom(recipients),
             sentDate: this.#clock.now(),
         }));
         return { $metadata: {}, MessageId: messageId };

package/dist/service/ses/command/send/sim-ses-send-email.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-ses-send-email.js","sourceRoot":"","sources":["../../../../../src/service/ses/command/send/sim-ses-send-email.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EACL,yBAAyB,EACzB,iBAAiB,GAClB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAGpE,OAAO,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AAUzE,OAAO,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AAYjF;;;;;;;;;GASG;AACH,MAAM,OAAO,eAAe;IACjB,WAAW,CAAsB;IACjC,QAAQ,CAAsB;IAC9B,KAAK,CAAuB;IAC5B,cAAc,CAA8B;IAC5C,WAAW,CAAmB;IAC9B,MAAM,CAAW;IAE1B,YAAY,UAAqC;QAC/C,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,UAAU,CAAC;QACzC,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC;QACnC,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC;QAC7B,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,aAAa,CAAC;QAC/C,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,UAAU,CAAC;QACzC,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,MAAM,CACJ,OAA4B,EAC5B,OAA8B;QAE9B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC5B,MAAM,gBAAgB,GAAG,yBAAyB,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAE3E,0BAA0B,CAAC,KAAK,CAAC,CAAC;QAElC,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAChC,eAAe,EACf,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC,EAC9D,OAAO,EAAE,MAAM,CAChB,CAAC;QAEF,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACvD,MAAM,UAAU,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;QAE9C,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,yBAAyB,CACjC,gEAAgE;gBAC9D,6DAA6D,CAChE,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAElD,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC,CAAC;QAE5D,MAAM,SAAS,GAAG,UAAU,EAAE,CAAC;QAE/B,IAAI,CAAC,KAAK,CAAC,GAAG,CACZ,IAAI,eAAe,CAAC;YAClB,SAAS;YACT,gBAAgB;YAChB,WAAW;YACX,gBAAgB,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;YACrD,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;YAChD,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE;SAC5B,CAAC,CACH,CAAC;QAEF,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;IACjD,CAAC;CACF;AAED;;GAEG;AACH,SAAS,eAAe,CACtB,WAA0C;IAE1C,OAAO;QACL,WAAW,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC;QAClD,WAAW,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC;QAClD,YAAY,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,YAAY,IAAI,EAAE,CAAC,CAAC;KACrD,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,WAAuC;IAEvC,OAAO;QACL,GAAG,WAAW,CAAC,WAAW;QAC1B,GAAG,WAAW,CAAC,WAAW;QAC1B,GAAG,WAAW,CAAC,YAAY;KAC5B,CAAC;AACJ,CAAC"}
+{"version":3,"file":"sim-ses-send-email.js","sourceRoot":"","sources":["../../../../../src/service/ses/command/send/sim-ses-send-email.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EACL,yBAAyB,EACzB,iBAAiB,GAClB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAGpE,OAAO,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AAYzE,OAAO,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AAcjF;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,eAAe;IACjB,WAAW,CAAsB;IACjC,QAAQ,CAAsB;IAC9B,KAAK,CAAuB;IAC5B,cAAc,CAA8B;IAC5C,sBAAsB,CAA8B;IACpD,iBAAiB,CAAyB;IAC1C,WAAW,CAAmB;IAC9B,MAAM,CAAW;IAE1B,YAAY,UAAqC;QAC/C,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,UAAU,CAAC;QACzC,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC;QACnC,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC;QAC7B,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,aAAa,CAAC;QAC/C,IAAI,CAAC,sBAAsB,GAAG,UAAU,CAAC,qBAAqB,CAAC;QAC/D,IAAI,CAAC,iBAAiB,GAAG,UAAU,CAAC,gBAAgB,CAAC;QACrD,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,UAAU,CAAC;QACzC,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,MAAM,CACJ,OAA4B,EAC5B,OAA8B;QAE9B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC5B,MAAM,gBAAgB,GAAG,yBAAyB,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAE3E,0BAA0B,CAAC,KAAK,CAAC,CAAC;QAElC,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAChC,eAAe,EACf,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC,EAC9D,OAAO,EAAE,MAAM,CAChB,CAAC;QAEF,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACvD,MAAM,UAAU,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;QAE9C,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,yBAAyB,CACjC,gEAAgE;gBAC9D,6DAA6D,CAChE,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAElD,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC,CAAC;QAE5D,MAAM,oBAAoB,GAAG,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC;YAChE,gBAAgB;YAChB,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;SACjD,CAAC,CAAC;QAEH,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAExD,MAAM,SAAS,GAAG,UAAU,EAAE,CAAC;QAE/B,IAAI,CAAC,KAAK,CAAC,GAAG,CACZ,IAAI,eAAe,CAAC;YAClB,SAAS;YACT,gBAAgB;YAChB,WAAW;YACX,gBAAgB,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;YACrD,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,oBAAoB;YACpB,oBAAoB,EAAE,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,UAAU,CAAC;YACrE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE;SAC5B,CAAC,CACH,CAAC;QAEF,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;IACjD,CAAC;CACF;AAED;;GAEG;AACH,SAAS,eAAe,CACtB,WAA0C;IAE1C,OAAO;QACL,WAAW,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC;QAClD,WAAW,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC;QAClD,YAAY,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,YAAY,IAAI,EAAE,CAAC,CAAC;KACrD,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,WAAuC;IAEvC,OAAO;QACL,GAAG,WAAW,CAAC,WAAW;QAC1B,GAAG,WAAW,CAAC,WAAW;QAC1B,GAAG,WAAW,CAAC,YAAY;KAC5B,CAAC;AACJ,CAAC"}

package/dist/service/ses/command/send/sim-ses-service-send.d.ts

@@ -0,0 +1,74 @@
+import type { SimClock } from "../../../../util/clock/sim-clock.js";
+import type { SimSesSentEmailStore } from "../../email/sim-ses-sent-email-store.js";
+import type { SimSesConfigurationSetCheck } from "./sim-ses-configuration-set-check.js";
+import type { SimSesSuppressionCheck } from "./sim-ses-suppression-check.js";
+import type { SimSesVerifiedIdentityCheck } from "./sim-ses-verified-identities.js";
+/**
+ * A message another simulated service is sending through SES on an account's
+ * behalf.
+ *
+ * One recipient, and a plain text body. That is the whole of what a service
+ * sender needs so far: a Cognito user pool writes one message to one user at a
+ * time, and writes it as text.
+ */
+export interface SimSesServiceSendRequest {
+    readonly fromEmailAddress: string;
+    readonly toAddress: string;
+    readonly replyToAddresses: readonly string[];
+    readonly subject: string;
+    readonly body: string;
+    readonly configurationSetName: string | undefined;
+}
+/**
+ * What SES made of the message: the id it would have answered with, or why it
+ * would have turned the message down.
+ *
+ * A refusal comes back rather than being thrown. The service that asked
+ * reports it in its own vocabulary, and an SES exception crossing the boundary
+ * would leave that service repackaging one error as another.
+ */
+export interface SimSesServiceSendResult {
+    readonly messageId?: string | undefined;
+    readonly refusedBecause?: string | undefined;
+}
+interface SimSesServiceSendProperties {
+    readonly sent: SimSesSentEmailStore;
+    readonly identityCheck: SimSesVerifiedIdentityCheck;
+    readonly configurationSetCheck: SimSesConfigurationSetCheck;
+    readonly suppressionCheck: SimSesSuppressionCheck;
+    readonly clock: SimClock;
+}
+/**
+ * A send that reaches SES from another simulated service rather than from a
+ * caller with an SDK client.
+ *
+ * The identity check and the recorded message are the same as `SendEmail`.
+ * IAM is the difference, and it is left out on purpose: a Cognito user pool
+ * with `EmailSendingAccount: DEVELOPER` sends as the Cognito service through a
+ * service-linked role, so the permissions of whoever called `SignUp` decide
+ * nothing about it. Simulated Lambda triggers skip the `Invoke` command for
+ * the same reason.
+ *
+ * The sandbox still applies. That is the point of routing a pool's messages
+ * through here rather than recording them and calling it a send. An account
+ * configured for SES and still in the sandbox is the way this fails in a
+ * deployment.
+ *
+ * The suppression list applies too, and refuses nothing. A pool's message to a
+ * suppressed recipient is accepted and recorded as held back, exactly as one
+ * an SDK caller sent would be.
+ *
+ * The configuration set applies as it does to any other send. A pool that
+ * names none sends through the set its identity carries, and a set with
+ * sending switched off turns the message down.
+ */
+export declare class SimSesServiceSend {
+    #private;
+    constructor(properties: SimSesServiceSendProperties);
+    /**
+     * Accept the message, or say why SES would have refused it.
+     */
+    send(request: SimSesServiceSendRequest): SimSesServiceSendResult;
+}
+export {};
+//# sourceMappingURL=sim-ses-service-send.d.ts.map

package/dist/service/ses/command/send/sim-ses-service-send.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ses-service-send.d.ts","sourceRoot":"","sources":["../../../../../src/service/ses/command/send/sim-ses-service-send.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qCAAqC,CAAC;AAGpE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AACpF,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACxF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAC7E,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAEpF;;;;;;;GAOG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,oBAAoB,EAAE,MAAM,GAAG,SAAS,CAAC;CACnD;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC9C;AAED,UAAU,2BAA2B;IACnC,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,aAAa,EAAE,2BAA2B,CAAC;IACpD,QAAQ,CAAC,qBAAqB,EAAE,2BAA2B,CAAC;IAC5D,QAAQ,CAAC,gBAAgB,EAAE,sBAAsB,CAAC;IAClD,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,qBAAa,iBAAiB;;IAO5B,YAAY,UAAU,EAAE,2BAA2B,EAMlD;IAED;;OAEG;IACH,IAAI,CAAC,OAAO,EAAE,wBAAwB,GAAG,uBAAuB,CAsC/D;CACF"}