@kensio/yulin 1.21.0 → 1.21.2

package/dist/service/s3/command/put-object-legal-hold/put-object-legal-hold.command.d.ts

@@ -0,0 +1,24 @@
+import type { SimResponseMetadata } from "../../../aws/metadata/response-metadata.type.js";
+import type { SimS3LegalHoldInput } from "../../bucket/lock/sim-s3-object-lock.js";
+/**
+ * Minimal structural sim S3 PutObjectLegalHold command.
+ */
+export interface SimPutObjectLegalHoldCommand {
+    readonly input: SimPutObjectLegalHoldCommandInput;
+}
+/**
+ * Minimal structural sim S3 PutObjectLegalHold input.
+ */
+export interface SimPutObjectLegalHoldCommandInput {
+    readonly Bucket?: string | undefined;
+    readonly Key?: string | undefined;
+    /** The version to hold. A request naming none holds the current one. */
+    readonly VersionId?: string | undefined;
+    readonly LegalHold?: SimS3LegalHoldInput | undefined;
+}
+/**
+ * Minimal structural sim S3 PutObjectLegalHold output.
+ */
+export interface SimPutObjectLegalHoldCommandOutput {
+    readonly $metadata: SimResponseMetadata;
+}

package/dist/service/s3/command/put-object-legal-hold/put-object-legal-hold.command.js

@@ -0,0 +1 @@
+export {};

package/dist/service/s3/command/put-object-legal-hold/put-object-legal-hold.handler.d.ts

@@ -0,0 +1,32 @@
+import type { CommandHandler } from "../../../../command/command-handler.js";
+import { type BackgroundScheduler } from "../../../../util/background/background.js";
+import { type SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimS3Bucket, SimS3BucketName } from "../../bucket/sim-s3-bucket.js";
+import type { SimS3RequestOptions } from "../sim-s3-request-options.js";
+import type { SimPutObjectLegalHoldCommand, SimPutObjectLegalHoldCommandOutput } from "./put-object-legal-hold.command.js";
+interface PutObjectLegalHoldHandlerProperties {
+    readonly buckets: Map<SimS3BucketName, SimS3Bucket>;
+    readonly iam?: SimIamInterServiceAuthZ;
+    readonly background?: BackgroundScheduler;
+}
+/**
+ * Simulated S3 PutObjectLegalHoldCommand handler.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/s3/command/PutObjectLegalHoldCommand/
+ */
+export declare class PutObjectLegalHoldCommandHandler implements CommandHandler<SimPutObjectLegalHoldCommand, SimPutObjectLegalHoldCommandOutput> {
+    private readonly buckets;
+    private readonly authorizer;
+    private readonly background;
+    constructor(properties: PutObjectLegalHoldHandlerProperties);
+    /**
+     * Authorize and turn the legal hold on one version on or off.
+     *
+     * A hold goes on and comes off through the same request and the same
+     * permission. There is no bypass and no period to wait out, which is what
+     * makes a hold the thing to reach for when the end of the retention is not
+     * knowable in advance.
+     */
+    handle(command: SimPutObjectLegalHoldCommand, options?: SimS3RequestOptions): Promise<SimPutObjectLegalHoldCommandOutput>;
+}
+export {};

package/dist/service/s3/command/put-object-legal-hold/put-object-legal-hold.handler.js

@@ -0,0 +1,41 @@
+import { BackgroundTasks, } from "../../../../util/background/background.js";
+import { assertDefined } from "../../../../util/type-guard/defined.js";
+import { SimIamAllowAllAuth, } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import { SimS3ObjectLockAuthorizer } from "../object-lock/sim-s3-object-lock-authorizer.js";
+import { simS3LockedVersion } from "../object-lock/sim-s3-locked-version.js";
+import { requireSimS3Bucket } from "../require-sim-s3-bucket.js";
+/**
+ * Simulated S3 PutObjectLegalHoldCommand handler.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/s3/command/PutObjectLegalHoldCommand/
+ */
+export class PutObjectLegalHoldCommandHandler {
+    buckets;
+    authorizer;
+    background;
+    constructor(properties) {
+        const { buckets, iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), } = properties;
+        this.buckets = buckets;
+        this.authorizer = new SimS3ObjectLockAuthorizer({ iam });
+        this.background = background;
+    }
+    /**
+     * Authorize and turn the legal hold on one version on or off.
+     *
+     * A hold goes on and comes off through the same request and the same
+     * permission. There is no bypass and no period to wait out, which is what
+     * makes a hold the thing to reach for when the end of the retention is not
+     * knowable in advance.
+     */
+    async handle(command, options) {
+        const { Bucket, Key, VersionId, LegalHold } = command.input;
+        assertDefined(Bucket, "PutObjectLegalHoldCommand.input.Bucket");
+        assertDefined(Key, "PutObjectLegalHoldCommand.input.Key");
+        assertDefined(LegalHold, "PutObjectLegalHoldCommand.input.LegalHold");
+        const bucket = requireSimS3Bucket(this.buckets, Bucket);
+        await this.background.sequence();
+        this.authorizer.authorizeLegalHold(bucket, Key, options);
+        simS3LockedVersion(bucket, Key, VersionId).lock.applyLegalHold(LegalHold);
+        return { $metadata: {} };
+    }
+}

package/dist/service/s3/command/put-object-lock-configuration/put-object-lock-configuration.command.d.ts

@@ -0,0 +1,21 @@
+import type { SimResponseMetadata } from "../../../aws/metadata/response-metadata.type.js";
+import type { SimS3ObjectLockConfigurationInput } from "../../bucket/lock/sim-s3-object-lock-configuration.js";
+/**
+ * Minimal structural sim S3 PutObjectLockConfiguration command.
+ */
+export interface SimPutObjectLockConfigurationCommand {
+    readonly input: SimPutObjectLockConfigurationCommandInput;
+}
+/**
+ * Minimal structural sim S3 PutObjectLockConfiguration input.
+ */
+export interface SimPutObjectLockConfigurationCommandInput {
+    readonly Bucket?: string | undefined;
+    readonly ObjectLockConfiguration?: SimS3ObjectLockConfigurationInput | undefined;
+}
+/**
+ * Minimal structural sim S3 PutObjectLockConfiguration output.
+ */
+export interface SimPutObjectLockConfigurationCommandOutput {
+    readonly $metadata: SimResponseMetadata;
+}

package/dist/service/s3/command/put-object-lock-configuration/put-object-lock-configuration.command.js

@@ -0,0 +1 @@
+export {};

package/dist/service/s3/command/put-object-lock-configuration/put-object-lock-configuration.handler.d.ts

@@ -0,0 +1,32 @@
+import type { CommandHandler } from "../../../../command/command-handler.js";
+import { type BackgroundScheduler } from "../../../../util/background/background.js";
+import { type SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimS3Bucket, SimS3BucketName } from "../../bucket/sim-s3-bucket.js";
+import type { SimS3RequestOptions } from "../sim-s3-request-options.js";
+import type { SimPutObjectLockConfigurationCommand, SimPutObjectLockConfigurationCommandOutput } from "./put-object-lock-configuration.command.js";
+interface PutObjectLockConfigurationHandlerProperties {
+    readonly buckets: Map<SimS3BucketName, SimS3Bucket>;
+    readonly iam?: SimIamInterServiceAuthZ;
+    readonly background?: BackgroundScheduler;
+}
+/**
+ * Simulated S3 PutObjectLockConfigurationCommand handler.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/s3/command/PutObjectLockConfigurationCommand/
+ */
+export declare class PutObjectLockConfigurationCommandHandler implements CommandHandler<SimPutObjectLockConfigurationCommand, SimPutObjectLockConfigurationCommandOutput> {
+    private readonly buckets;
+    private readonly authorizer;
+    private readonly background;
+    constructor(properties: PutObjectLockConfigurationHandlerProperties);
+    /**
+     * Authorize and apply a Bucket's Object Lock configuration.
+     *
+     * Object Lock protects a version and has no meaning without one, so a Bucket
+     * that keeps none is refused. Real S3 requires versioning underneath it for
+     * the same reason, and a Bucket that appeared to accept the configuration
+     * would report a retention nothing was enforcing.
+     */
+    handle(command: SimPutObjectLockConfigurationCommand, options?: SimS3RequestOptions): Promise<SimPutObjectLockConfigurationCommandOutput>;
+}
+export {};

package/dist/service/s3/command/put-object-lock-configuration/put-object-lock-configuration.handler.js

@@ -0,0 +1,47 @@
+import { BackgroundTasks, } from "../../../../util/background/background.js";
+import { assertDefined } from "../../../../util/type-guard/defined.js";
+import { SimIamAllowAllAuth, } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import { SimS3ObjectLockConfiguration } from "../../bucket/lock/sim-s3-object-lock-configuration.js";
+import { SimS3InvalidBucketState } from "../../error/sim-s3-object-lock.error.js";
+import { SimS3ObjectLockAuthorizer } from "../object-lock/sim-s3-object-lock-authorizer.js";
+import { requireSimS3Bucket } from "../require-sim-s3-bucket.js";
+/**
+ * Simulated S3 PutObjectLockConfigurationCommand handler.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/s3/command/PutObjectLockConfigurationCommand/
+ */
+export class PutObjectLockConfigurationCommandHandler {
+    buckets;
+    authorizer;
+    background;
+    constructor(properties) {
+        const { buckets, iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), } = properties;
+        this.buckets = buckets;
+        this.authorizer = new SimS3ObjectLockAuthorizer({ iam });
+        this.background = background;
+    }
+    /**
+     * Authorize and apply a Bucket's Object Lock configuration.
+     *
+     * Object Lock protects a version and has no meaning without one, so a Bucket
+     * that keeps none is refused. Real S3 requires versioning underneath it for
+     * the same reason, and a Bucket that appeared to accept the configuration
+     * would report a retention nothing was enforcing.
+     */
+    async handle(command, options) {
+        const { Bucket, ObjectLockConfiguration } = command.input;
+        assertDefined(Bucket, "PutObjectLockConfigurationCommand.input.Bucket");
+        assertDefined(ObjectLockConfiguration, "PutObjectLockConfigurationCommand.input.ObjectLockConfiguration");
+        const bucket = requireSimS3Bucket(this.buckets, Bucket);
+        await this.background.sequence();
+        this.authorizer.authorizeWriteConfiguration(bucket, options);
+        if (!bucket.getVersions().configuration.isEnabled) {
+            throw new SimS3InvalidBucketState(`Object Lock cannot be enabled on Bucket ${Bucket}, which does not ` +
+                `have versioning enabled`);
+        }
+        bucket
+            .getObjectLock()
+            .configure(SimS3ObjectLockConfiguration.parse(ObjectLockConfiguration));
+        return { $metadata: {} };
+    }
+}

package/dist/service/s3/command/put-object-retention/put-object-retention.command.d.ts

@@ -0,0 +1,29 @@
+import type { SimResponseMetadata } from "../../../aws/metadata/response-metadata.type.js";
+import type { SimS3RetentionInput } from "../../bucket/lock/sim-s3-object-retention.js";
+/**
+ * Minimal structural sim S3 PutObjectRetention command.
+ */
+export interface SimPutObjectRetentionCommand {
+    readonly input: SimPutObjectRetentionCommandInput;
+}
+/**
+ * Minimal structural sim S3 PutObjectRetention input.
+ */
+export interface SimPutObjectRetentionCommandInput {
+    readonly Bucket?: string | undefined;
+    readonly Key?: string | undefined;
+    /** The version to retain. A request naming none retains the current one. */
+    readonly VersionId?: string | undefined;
+    readonly Retention?: SimS3RetentionInput | undefined;
+    /**
+     * Whether to shorten a governance retention period already on the version,
+     * which the caller also needs `s3:BypassGovernanceRetention` for.
+     */
+    readonly BypassGovernanceRetention?: boolean | undefined;
+}
+/**
+ * Minimal structural sim S3 PutObjectRetention output.
+ */
+export interface SimPutObjectRetentionCommandOutput {
+    readonly $metadata: SimResponseMetadata;
+}

package/dist/service/s3/command/put-object-retention/put-object-retention.command.js

@@ -0,0 +1 @@
+export {};

package/dist/service/s3/command/put-object-retention/put-object-retention.handler.d.ts

@@ -0,0 +1,31 @@
+import type { CommandHandler } from "../../../../command/command-handler.js";
+import { type BackgroundScheduler } from "../../../../util/background/background.js";
+import { type SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimS3Bucket, SimS3BucketName } from "../../bucket/sim-s3-bucket.js";
+import type { SimS3RequestOptions } from "../sim-s3-request-options.js";
+import type { SimPutObjectRetentionCommand, SimPutObjectRetentionCommandOutput } from "./put-object-retention.command.js";
+interface PutObjectRetentionHandlerProperties {
+    readonly buckets: Map<SimS3BucketName, SimS3Bucket>;
+    readonly iam?: SimIamInterServiceAuthZ;
+    readonly background?: BackgroundScheduler;
+}
+/**
+ * Simulated S3 PutObjectRetentionCommand handler.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/s3/command/PutObjectRetentionCommand/
+ */
+export declare class PutObjectRetentionCommandHandler implements CommandHandler<SimPutObjectRetentionCommand, SimPutObjectRetentionCommandOutput> {
+    private readonly buckets;
+    private readonly authorizer;
+    private readonly background;
+    constructor(properties: PutObjectRetentionHandlerProperties);
+    /**
+     * Authorize and put a retention period on one version.
+     *
+     * Lengthening a period is always allowed. Shortening one is what the modes
+     * differ over, and the version itself is what refuses it, so a template and
+     * an SDK caller are held to the same rule.
+     */
+    handle(command: SimPutObjectRetentionCommand, options?: SimS3RequestOptions): Promise<SimPutObjectRetentionCommandOutput>;
+}
+export {};

package/dist/service/s3/command/put-object-retention/put-object-retention.handler.js

@@ -0,0 +1,42 @@
+import { BackgroundTasks, } from "../../../../util/background/background.js";
+import { assertDefined } from "../../../../util/type-guard/defined.js";
+import { SimIamAllowAllAuth, } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import { SimS3ObjectRetention } from "../../bucket/lock/sim-s3-object-retention.js";
+import { SimS3ObjectLockAuthorizer } from "../object-lock/sim-s3-object-lock-authorizer.js";
+import { simS3LockedVersion } from "../object-lock/sim-s3-locked-version.js";
+import { requireSimS3Bucket } from "../require-sim-s3-bucket.js";
+/**
+ * Simulated S3 PutObjectRetentionCommand handler.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/s3/command/PutObjectRetentionCommand/
+ */
+export class PutObjectRetentionCommandHandler {
+    buckets;
+    authorizer;
+    background;
+    constructor(properties) {
+        const { buckets, iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), } = properties;
+        this.buckets = buckets;
+        this.authorizer = new SimS3ObjectLockAuthorizer({ iam });
+        this.background = background;
+    }
+    /**
+     * Authorize and put a retention period on one version.
+     *
+     * Lengthening a period is always allowed. Shortening one is what the modes
+     * differ over, and the version itself is what refuses it, so a template and
+     * an SDK caller are held to the same rule.
+     */
+    async handle(command, options) {
+        const { Bucket, Key, VersionId, Retention, BypassGovernanceRetention } = command.input;
+        assertDefined(Bucket, "PutObjectRetentionCommand.input.Bucket");
+        assertDefined(Key, "PutObjectRetentionCommand.input.Key");
+        assertDefined(Retention, "PutObjectRetentionCommand.input.Retention");
+        const bucket = requireSimS3Bucket(this.buckets, Bucket);
+        await this.background.sequence();
+        this.authorizer.authorizeRetention(bucket, Key, options);
+        const bypassed = this.authorizer.authorizeBypass(bucket, Key, BypassGovernanceRetention, options);
+        simS3LockedVersion(bucket, Key, VersionId).lock.applyRetention(SimS3ObjectRetention.parse(Retention), bypassed);
+        return { $metadata: {} };
+    }
+}

package/dist/service/s3/command/sim-s3-command.types.d.ts

@@ -16,6 +16,9 @@ export type { SimDeletePublicAccessBlockCommand, SimDeletePublicAccessBlockComma
 export type { SimDeleteBucketLifecycleCommand, SimDeleteBucketLifecycleCommandOutput, } from "./delete-bucket-lifecycle/delete-bucket-lifecycle.command.js";
 export type { SimGetBucketLifecycleConfigurationCommand, SimGetBucketLifecycleConfigurationCommandOutput, } from "./get-bucket-lifecycle-configuration/get-bucket-lifecycle-configuration.command.js";
 export type { SimPutBucketLifecycleConfigurationCommand, SimPutBucketLifecycleConfigurationCommandOutput, SimS3LifecycleConfiguration, SimS3LifecycleRule, } from "./put-bucket-lifecycle-configuration/put-bucket-lifecycle-configuration.command.js";
+export type { SimGetBucketVersioningCommand, SimGetBucketVersioningCommandOutput, } from "./get-bucket-versioning/get-bucket-versioning.command.js";
+export type { SimPutBucketVersioningCommand, SimPutBucketVersioningCommandOutput, } from "./put-bucket-versioning/put-bucket-versioning.command.js";
+export type { SimListObjectVersionsCommand, SimListObjectVersionsCommandOutput, SimS3DeleteMarkerSummary, SimS3ObjectVersionSummary, } from "./list-object-versions/list-object-versions.command.js";
 export type { SimGetBucketPolicyCommand, SimGetBucketPolicyCommandOutput, } from "./get-bucket-policy/get-bucket-policy.command.js";
 export type { SimGetBucketNotificationConfigurationCommand, SimGetBucketNotificationConfigurationCommandOutput, } from "./get-bucket-notification-configuration/get-bucket-notification-configuration.command.js";
 export type { SimGetObjectCommand, SimGetObjectCommandOutput, } from "./get-object/get-object.command.js";
@@ -34,3 +37,7 @@ export type { SimCreateMultipartUploadCommand, SimCreateMultipartUploadCommandOu
 export type { SimListMultipartUploadsCommand, SimListMultipartUploadsCommandOutput, SimMultipartUploadSummary, } from "./list-multipart-uploads/list-multipart-uploads.command.js";
 export type { SimListPartsCommand, SimListPartsCommandOutput, SimUploadPartSummary, } from "./list-parts/list-parts.command.js";
 export type { SimUploadPartCommand, SimUploadPartCommandOutput, } from "./upload-part/upload-part.command.js";
+export type { SimPutObjectLockConfigurationCommand, SimPutObjectLockConfigurationCommandInput, SimPutObjectLockConfigurationCommandOutput, } from "./put-object-lock-configuration/put-object-lock-configuration.command.js";
+export type { SimGetObjectLockConfigurationCommand, SimGetObjectLockConfigurationCommandInput, SimGetObjectLockConfigurationCommandOutput, } from "./get-object-lock-configuration/get-object-lock-configuration.command.js";
+export type { SimPutObjectRetentionCommand, SimPutObjectRetentionCommandInput, SimPutObjectRetentionCommandOutput, } from "./put-object-retention/put-object-retention.command.js";
+export type { SimPutObjectLegalHoldCommand, SimPutObjectLegalHoldCommandInput, SimPutObjectLegalHoldCommandOutput, } from "./put-object-legal-hold/put-object-legal-hold.command.js";

package/dist/service/s3/command/versioning/sim-s3-versioning-authorizer.d.ts

@@ -0,0 +1,35 @@
+import type { SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimS3Bucket } from "../../bucket/sim-s3-bucket.js";
+import type { SimS3RequestOptions } from "../sim-s3-request-options.js";
+interface SimS3VersioningAuthorizerProperties {
+    readonly iam: SimIamInterServiceAuthZ;
+}
+/**
+ * Applies IAM authorization to the S3 versioning commands.
+ *
+ * Three actions rather than two, because listing the versions is a read of the
+ * Objects rather than of the Bucket's configuration. s3:ListBucketVersions is
+ * the one a caller reading a version history needs, and it says nothing about
+ * whether that caller may see how the Bucket is configured.
+ */
+export declare class SimS3VersioningAuthorizer {
+    private static readonly readAction;
+    private static readonly writeAction;
+    private static readonly listAction;
+    private readonly iam;
+    constructor(properties: SimS3VersioningAuthorizerProperties);
+    /**
+     * Ensure the caller may read the Bucket's versioning configuration.
+     */
+    authorizeRead(bucket: SimS3Bucket, options?: SimS3RequestOptions): void;
+    /**
+     * Ensure the caller may change the Bucket's versioning configuration.
+     */
+    authorizeWrite(bucket: SimS3Bucket, options?: SimS3RequestOptions): void;
+    /**
+     * Ensure the caller may list the versions the Bucket holds.
+     */
+    authorizeList(bucket: SimS3Bucket, options?: SimS3RequestOptions): void;
+    private authorize;
+}
+export {};

package/dist/service/s3/command/versioning/sim-s3-versioning-authorizer.js

@@ -0,0 +1,57 @@
+import { SimIamAccessDenied } from "../../../iam/error/sim-iam.error.js";
+import { simS3BucketArn } from "../../bucket/sim-s3-bucket-arn.js";
+import { simS3BucketResourcePolicies } from "../authorize/sim-s3-bucket-resource-policies.js";
+import { simS3ConditionContext } from "../authorize/sim-s3-condition-context.js";
+/**
+ * Applies IAM authorization to the S3 versioning commands.
+ *
+ * Three actions rather than two, because listing the versions is a read of the
+ * Objects rather than of the Bucket's configuration. s3:ListBucketVersions is
+ * the one a caller reading a version history needs, and it says nothing about
+ * whether that caller may see how the Bucket is configured.
+ */
+export class SimS3VersioningAuthorizer {
+    static readAction = "s3:GetBucketVersioning";
+    static writeAction = "s3:PutBucketVersioning";
+    static listAction = "s3:ListBucketVersions";
+    iam;
+    constructor(properties) {
+        this.iam = properties.iam;
+    }
+    /**
+     * Ensure the caller may read the Bucket's versioning configuration.
+     */
+    authorizeRead(bucket, options) {
+        this.authorize(SimS3VersioningAuthorizer.readAction, bucket, options);
+    }
+    /**
+     * Ensure the caller may change the Bucket's versioning configuration.
+     */
+    authorizeWrite(bucket, options) {
+        this.authorize(SimS3VersioningAuthorizer.writeAction, bucket, options);
+    }
+    /**
+     * Ensure the caller may list the versions the Bucket holds.
+     */
+    authorizeList(bucket, options) {
+        this.authorize(SimS3VersioningAuthorizer.listAction, bucket, options);
+    }
+    authorize(action, bucket, options) {
+        const resource = simS3BucketArn(bucket.bucketName);
+        const decision = this.iam.authorize({
+            action,
+            resource,
+            caller: options?.caller,
+            conditionContext: simS3ConditionContext(options),
+            resourcePolicies: simS3BucketResourcePolicies(bucket),
+        });
+        if (decision.isDenied) {
+            throw new SimIamAccessDenied({
+                principal: decision.caller.principal,
+                reason: decision.denialReason,
+                action,
+                resource,
+            });
+        }
+    }
+}

package/dist/service/s3/command/versioning/sim-s3-versioning-commands.d.ts

@@ -0,0 +1,26 @@
+import type { SimS3BucketCommandState } from "../sim-s3-bucket-command-state.js";
+import type * as simS3Commands from "../sim-s3-command.types.js";
+import type { SimS3RequestOptions } from "../sim-s3-request-options.js";
+/**
+ * The versioning commands of one simulated S3 scope.
+ *
+ * Listing the versions belongs here rather than with the Object listings,
+ * because what it reports is the version history rather than the keys a Bucket
+ * currently holds, and it is governed by its own IAM action.
+ */
+export declare class SimS3VersioningCommands {
+    private readonly state;
+    constructor(state: SimS3BucketCommandState);
+    /**
+     * Apply a Bucket's versioning configuration.
+     */
+    put(command: simS3Commands.SimPutBucketVersioningCommand, options?: SimS3RequestOptions): Promise<simS3Commands.SimPutBucketVersioningCommandOutput>;
+    /**
+     * Read how a Bucket is versioned.
+     */
+    get(command: simS3Commands.SimGetBucketVersioningCommand, options?: SimS3RequestOptions): Promise<simS3Commands.SimGetBucketVersioningCommandOutput>;
+    /**
+     * List the versions a Bucket holds.
+     */
+    list(command: simS3Commands.SimListObjectVersionsCommand, options?: SimS3RequestOptions): Promise<simS3Commands.SimListObjectVersionsCommandOutput>;
+}

package/dist/service/s3/command/versioning/sim-s3-versioning-commands.js

@@ -0,0 +1,34 @@
+import { GetBucketVersioningCommandHandler } from "../get-bucket-versioning/get-bucket-versioning.handler.js";
+import { ListObjectVersionsCommandHandler } from "../list-object-versions/list-object-versions.handler.js";
+import { PutBucketVersioningCommandHandler } from "../put-bucket-versioning/put-bucket-versioning.handler.js";
+/**
+ * The versioning commands of one simulated S3 scope.
+ *
+ * Listing the versions belongs here rather than with the Object listings,
+ * because what it reports is the version history rather than the keys a Bucket
+ * currently holds, and it is governed by its own IAM action.
+ */
+export class SimS3VersioningCommands {
+    state;
+    constructor(state) {
+        this.state = state;
+    }
+    /**
+     * Apply a Bucket's versioning configuration.
+     */
+    async put(command, options) {
+        return await new PutBucketVersioningCommandHandler(this.state).handle(command, options);
+    }
+    /**
+     * Read how a Bucket is versioned.
+     */
+    async get(command, options) {
+        return await new GetBucketVersioningCommandHandler(this.state).handle(command, options);
+    }
+    /**
+     * List the versions a Bucket holds.
+     */
+    async list(command, options) {
+        return await new ListObjectVersionsCommandHandler(this.state).handle(command, options);
+    }
+}

package/dist/service/s3/command/versioning/sim-s3-versioning-configuration-validation.d.ts

@@ -0,0 +1,13 @@
+import type { SimS3VersioningConfiguration } from "../../bucket/versioning/sim-s3-bucket-versioning.js";
+/**
+ * Refuse a versioning configuration this simulator cannot carry out.
+ *
+ * Real S3 takes `Enabled` and `Suspended` for the status and nothing else, and
+ * there is no request that takes a Bucket back to unversioned. MFA delete
+ * takes `Enabled` and `Disabled`, and a value that is neither is refused here
+ * rather than ignored, because a status S3 would have rejected reads back
+ * looking configured. Asking for it enabled is refused too, since a Bucket
+ * reporting a protection it does not enforce is the wrong answer to the
+ * question a test is asking.
+ */
+export declare function validateSimS3VersioningConfiguration(configuration: SimS3VersioningConfiguration, bucketName: string): void;

package/dist/service/s3/command/versioning/sim-s3-versioning-configuration-validation.js

@@ -0,0 +1,28 @@
+import { SimS3InvalidArgument, SimS3NotImplemented, } from "../../error/sim-s3.error.js";
+/**
+ * Refuse a versioning configuration this simulator cannot carry out.
+ *
+ * Real S3 takes `Enabled` and `Suspended` for the status and nothing else, and
+ * there is no request that takes a Bucket back to unversioned. MFA delete
+ * takes `Enabled` and `Disabled`, and a value that is neither is refused here
+ * rather than ignored, because a status S3 would have rejected reads back
+ * looking configured. Asking for it enabled is refused too, since a Bucket
+ * reporting a protection it does not enforce is the wrong answer to the
+ * question a test is asking.
+ */
+export function validateSimS3VersioningConfiguration(configuration, bucketName) {
+    if (configuration.MFADelete === "Enabled") {
+        throw new SimS3NotImplemented(`Simulated S3 does not enforce MFA delete, so it refuses to report it ` +
+            `enabled on Bucket ${bucketName}.`);
+    }
+    if (configuration.MFADelete !== undefined &&
+        configuration.MFADelete !== "Disabled") {
+        throw new SimS3InvalidArgument(`The MFA delete status ${configuration.MFADelete} is not one S3 ` +
+            `accepts. It takes Enabled or Disabled.`);
+    }
+    if (configuration.Status !== "Enabled" &&
+        configuration.Status !== "Suspended") {
+        throw new SimS3InvalidArgument(`The versioning status ${String(configuration.Status)} is not one S3 ` +
+            `accepts. It takes Enabled or Suspended.`);
+    }
+}

package/dist/service/s3/error/sim-s3-object-lock.error.d.ts

@@ -0,0 +1,22 @@
+import { SimS3Error } from "./sim-s3.error.js";
+/**
+ * Simulated S3 InvalidBucketState error.
+ *
+ * A request real S3 refuses because of how the Bucket is configured rather
+ * than because of anything in the request. Turning Object Lock on over a
+ * Bucket that keeps no versions is the one sim S3 raises it for.
+ */
+export declare class SimS3InvalidBucketState extends SimS3Error {
+    readonly name = "InvalidBucketState";
+    constructor(message: string);
+}
+/**
+ * Simulated S3 ObjectLockConfigurationNotFoundError.
+ *
+ * What real S3 answers a read of the Object Lock configuration of a Bucket
+ * that has never had one, rather than answering with an empty configuration.
+ */
+export declare class SimS3ObjectLockConfigurationNotFound extends SimS3Error {
+    readonly name = "ObjectLockConfigurationNotFoundError";
+    constructor(message: string);
+}

package/dist/service/s3/error/sim-s3-object-lock.error.js

@@ -0,0 +1,26 @@
+import { SimS3Error } from "./sim-s3.error.js";
+/**
+ * Simulated S3 InvalidBucketState error.
+ *
+ * A request real S3 refuses because of how the Bucket is configured rather
+ * than because of anything in the request. Turning Object Lock on over a
+ * Bucket that keeps no versions is the one sim S3 raises it for.
+ */
+export class SimS3InvalidBucketState extends SimS3Error {
+    name = "InvalidBucketState";
+    constructor(message) {
+        super(message, { httpStatusCode: 409 });
+    }
+}
+/**
+ * Simulated S3 ObjectLockConfigurationNotFoundError.
+ *
+ * What real S3 answers a read of the Object Lock configuration of a Bucket
+ * that has never had one, rather than answering with an empty configuration.
+ */
+export class SimS3ObjectLockConfigurationNotFound extends SimS3Error {
+    name = "ObjectLockConfigurationNotFoundError";
+    constructor(message) {
+        super(message, { httpStatusCode: 404 });
+    }
+}

package/dist/service/s3/error/sim-s3.error.d.ts

@@ -37,6 +37,28 @@ export declare class SimS3NotFound extends SimS3Error {
     readonly name = "NotFound";
     constructor(message: string);
 }
+/**
+ * Simulated S3 NoSuchVersion error.
+ *
+ * What real S3 answers when a request names a version id that no version of
+ * that key was ever given. A key that exists with a version id that does not
+ * is this rather than NoSuchKey.
+ */
+export declare class SimS3NoSuchVersion extends SimS3Error {
+    readonly name = "NoSuchVersion";
+    constructor(message: string);
+}
+/**
+ * Simulated S3 MethodNotAllowed error.
+ *
+ * What real S3 answers to a read of a delete marker by its own version id. The
+ * marker exists, so it is not a missing version, and it holds no bytes to
+ * send.
+ */
+export declare class SimS3MethodNotAllowed extends SimS3Error {
+    readonly name = "MethodNotAllowed";
+    constructor(message: string);
+}
 /**
  * Simulated S3 NoSuchBucketPolicy error.
  *