@kensio/yulin 1.21.2 → 1.21.4

package/dist/service/s3/command/lifecycle/sim-s3-lifecycle-rules-validation.js

@@ -1,4 +1,5 @@
 import { SimS3MalformedXml } from "../../error/sim-s3.error.js";
+import { simS3StorageClassFrom } from "../../object/s3-storage-class.js";
 const ruleStatuses = new Set(["Enabled", "Disabled"]);
 /**
  * The fields that make a rule do something, for the refusal to name.
@@ -49,4 +50,21 @@ function validateRule(rule, bucketName) {
         throw new SimS3MalformedXml(`Lifecycle rule ${named} for S3 Bucket ${bucketName} must state at ` +
             `least one of ${ruleActionNames}`);
     }
+    validateTransitionClasses(rule, named, bucketName);
+}
+/**
+ * Refuse a transition to a storage class S3 has no such class for.
+ *
+ * The class is read here, where the configuration is stored, so a rule that
+ * names one nothing can transition to is refused before it is applied to
+ * anything.
+ */
+function validateTransitionClasses(rule, named, bucketName) {
+    const transitions = [
+        ...(rule.Transitions ?? []),
+        ...(rule.NoncurrentVersionTransitions ?? []),
+    ];
+    for (const transition of transitions) {
+        simS3StorageClassFrom(transition.StorageClass, `lifecycle rule ${named} of S3 Bucket ${bucketName}`);
+    }
 }

package/dist/service/s3/command/list-multipart-uploads/list-multipart-uploads.handler.js

@@ -1,5 +1,4 @@
 import { assertDefined } from "../../../../util/type-guard/defined.js";
-import { simS3DefaultStorageClass } from "../../object/s3-object-summary.js";
 import { SimS3MultipartAccess, } from "../multipart/sim-s3-multipart-access.js";
 /**
  * Simulated S3 ListMultipartUploadsCommand handler.
@@ -33,7 +32,7 @@ export class ListMultipartUploadsCommandHandler {
                     Key: upload.key,
                     UploadId: upload.uploadId,
                     Initiated: upload.initiated,
-                    StorageClass: simS3DefaultStorageClass,
+                    StorageClass: upload.storageClass,
                 })),
             IsTruncated: false,
             $metadata: {},

package/dist/service/s3/command/list-object-versions/list-object-versions-summaries.js

@@ -1,5 +1,4 @@
 import { simS3QuotedETag } from "../../object/s3-object-etag.js";
-import { simS3DefaultStorageClass } from "../../object/s3-object-summary.js";
 /**
  * Describe the Objects among a page of versions.
  */
@@ -13,7 +12,7 @@ export function simS3ObjectVersionSummaries(page, isLatest) {
         LastModified: version.lastModified,
         ETag: simS3QuotedETag(version.object.etag),
         Size: version.object.body.length,
-        StorageClass: simS3DefaultStorageClass,
+        StorageClass: version.object.storageClass,
     }));
 }
 /**

package/dist/service/s3/command/list-objects/list-objects-page-builder.d.ts

@@ -1,4 +1,5 @@
 import type { SimS3Bucket } from "../../bucket/sim-s3-bucket.js";
+import type { SimS3ListingEncoding } from "../../object/s3-listing-encoding.js";
 import type { SimListObjectsCommandOutput } from "./list-objects.command.js";
 interface ListObjectsPageInput {
     readonly bucket: SimS3Bucket;
@@ -6,6 +7,7 @@ interface ListObjectsPageInput {
     readonly delimiter?: string | undefined;
     readonly marker?: string | undefined;
     readonly maxKeys: number;
+    readonly encoding: SimS3ListingEncoding;
 }
 /**
  * Reads, orders, and paginates Objects for a ListObjects response.
@@ -18,6 +20,9 @@ interface ListObjectsPageInput {
  * operations differ in how a caller names where to resume rather than in which
  * keys a page holds. The marker is exclusive, so a page begins after it.
  *
+ * The keys, the prefix, the delimiter and both markers are written the way the
+ * listing asked for them, which is encoded or as they are stored.
+ *
  * NextMarker is returned only when another page exists, and identifies the
  * final entry in the current page. That entry is a common prefix where the
  * page ended on one, and the marker steps over the whole rolled-up prefix.

package/dist/service/s3/command/list-objects/list-objects-page-builder.js

@@ -12,6 +12,9 @@ import { simS3ObjectSummaries } from "../../object/s3-object-summary.js";
  * operations differ in how a caller names where to resume rather than in which
  * keys a page holds. The marker is exclusive, so a page begins after it.
  *
+ * The keys, the prefix, the delimiter and both markers are written the way the
+ * listing asked for them, which is encoded or as they are stored.
+ *
  * NextMarker is returned only when another page exists, and identifies the
  * final entry in the current page. That entry is a common prefix where the
  * page ended on one, and the marker steps over the whole rolled-up prefix.
@@ -28,16 +31,18 @@ export class ListObjectsPageBuilder {
             startAfter: input.marker,
             maxKeys: input.maxKeys,
         });
+        const { encoding } = input;
         return {
-            Contents: simS3ObjectSummaries(page.objects),
-            CommonPrefixes: simS3CommonPrefixes(page.commonPrefixes),
+            Contents: encoding.summaries(simS3ObjectSummaries(page.objects)),
+            CommonPrefixes: encoding.commonPrefixes(simS3CommonPrefixes(page.commonPrefixes)),
             Name: input.bucket.bucketName,
-            Prefix: input.prefix,
-            Delimiter: input.delimiter,
-            Marker: input.marker,
+            Prefix: encoding.value(input.prefix),
+            Delimiter: encoding.value(input.delimiter),
+            Marker: encoding.value(input.marker),
             MaxKeys: input.maxKeys,
             IsTruncated: page.isTruncated,
-            NextMarker: page.resumeAfter,
+            NextMarker: encoding.value(page.resumeAfter),
+            EncodingType: encoding.encodingType,
             $metadata: {},
         };
     }

package/dist/service/s3/command/list-objects/list-objects.command.d.ts

@@ -12,7 +12,9 @@ export interface SimListObjectsCommand {
  * Minimal structural sim S3 ListObjects input.
  *
  * `Delimiter` rolls every key holding it after the `Prefix` up into a common
- * prefix, which is how a Bucket is walked one folder at a time.
+ * prefix, which is how a Bucket is walked one folder at a time. `EncodingType`
+ * asks for the keys the listing answers with to be encoded, so that a key
+ * holding a character XML cannot carry survives the response.
  */
 export interface SimListObjectsCommandInput {
     readonly Bucket?: string | undefined;
@@ -20,6 +22,7 @@ export interface SimListObjectsCommandInput {
     readonly Delimiter?: string | undefined;
     readonly Marker?: string | undefined;
     readonly MaxKeys?: number | undefined;
+    readonly EncodingType?: string | undefined;
 }
 /**
  * Minimal structural sim S3 ListObjects output.
@@ -34,5 +37,6 @@ export interface SimListObjectsCommandOutput {
     readonly MaxKeys?: number;
     readonly IsTruncated?: boolean;
     readonly NextMarker?: string | undefined;
+    readonly EncodingType?: string | undefined;
     readonly $metadata: SimResponseMetadata;
 }

package/dist/service/s3/command/list-objects/list-objects.handler.js

@@ -2,6 +2,7 @@ import { assertDefined } from "../../../../util/type-guard/defined.js";
 import { SimS3NoSuchBucket } from "../../error/sim-s3.error.js";
 import { BackgroundTasks, } from "../../../../util/background/background.js";
 import { SimIamAllowAllAuth, } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import { SimS3ListingEncoding } from "../../object/s3-listing-encoding.js";
 import { simS3EffectiveMaxKeys } from "../../object/s3-object-listing.js";
 import { SimS3ObjectListingLimits } from "../../object/s3-object-listing-limits.js";
 import { ListObjectsAuthorizer } from "./list-objects-authorizer.js";
@@ -40,6 +41,9 @@ export class ListObjectsCommandHandler {
         }
         // Complete request sequencing before authorization and storage access.
         await this.background.sequence();
+        // Refused before anything is listed, the way real S3 refuses an argument
+        // it cannot read, rather than after a page has been built.
+        const encoding = new SimS3ListingEncoding(command.input.EncodingType);
         const maxKeys = simS3EffectiveMaxKeys(command.input.MaxKeys, this.listing.maxKeysPerPage);
         this.authorizer.authorize({
             bucket,
@@ -54,6 +58,7 @@ export class ListObjectsCommandHandler {
             delimiter: command.input.Delimiter,
             marker: command.input.Marker,
             maxKeys,
+            encoding,
         });
     }
 }

package/dist/service/s3/command/list-objects-v2/list-objects-v2-page-builder.d.ts

@@ -1,4 +1,5 @@
 import type { SimS3Bucket } from "../../bucket/sim-s3-bucket.js";
+import type { SimS3ListingEncoding } from "../../object/s3-listing-encoding.js";
 import type { SimListObjectsV2CommandOutput } from "./list-objects-v2.command.js";
 interface ListObjectsV2PageInput {
     readonly bucket: SimS3Bucket;
@@ -7,6 +8,7 @@ interface ListObjectsV2PageInput {
     readonly continuationToken?: string | undefined;
     readonly startAfter?: string | undefined;
     readonly maxKeys: number;
+    readonly encoding: SimS3ListingEncoding;
 }
 /**
  * Reads, orders, and paginates Objects for a ListObjectsV2 response.
@@ -15,6 +17,10 @@ interface ListObjectsV2PageInput {
  * called, as it is for the first version of the operation, so a denied request
  * cannot examine Object keys or sizes.
  *
+ * The keys, the prefix, the delimiter and the key a first page started after
+ * are written the way the listing asked for them, which is encoded or as they
+ * are stored. A continuation token is not, because it is opaque either way.
+ *
  * The keys on a page are chosen exactly as ListObjects chooses them. What
  * differs is how a caller says where to carry on from: a continuation token
  * from the previous page, which wins, or a StartAfter key that positions the

package/dist/service/s3/command/list-objects-v2/list-objects-v2-page-builder.js

@@ -9,6 +9,10 @@ import { simS3ContinuationToken, simS3ContinuationTokenKey, } from "./list-objec
  * called, as it is for the first version of the operation, so a denied request
  * cannot examine Object keys or sizes.
  *
+ * The keys, the prefix, the delimiter and the key a first page started after
+ * are written the way the listing asked for them, which is encoded or as they
+ * are stored. A continuation token is not, because it is opaque either way.
+ *
  * The keys on a page are chosen exactly as ListObjects chooses them. What
  * differs is how a caller says where to carry on from: a continuation token
  * from the previous page, which wins, or a StartAfter key that positions the
@@ -27,12 +31,13 @@ export class ListObjectsV2PageBuilder {
             startAfter: this.resumeAfter(input),
             maxKeys: input.maxKeys,
         });
+        const { encoding } = input;
         return {
-            Contents: simS3ObjectSummaries(page.objects),
-            CommonPrefixes: simS3CommonPrefixes(page.commonPrefixes),
+            Contents: encoding.summaries(simS3ObjectSummaries(page.objects)),
+            CommonPrefixes: encoding.commonPrefixes(simS3CommonPrefixes(page.commonPrefixes)),
             Name: input.bucket.bucketName,
-            Prefix: input.prefix,
-            Delimiter: input.delimiter,
+            Prefix: encoding.value(input.prefix),
+            Delimiter: encoding.value(input.delimiter),
             MaxKeys: input.maxKeys,
             KeyCount: page.objects.length + page.commonPrefixes.length,
             IsTruncated: page.isTruncated,
@@ -40,7 +45,8 @@ export class ListObjectsV2PageBuilder {
             NextContinuationToken: page.resumeAfter === undefined
                 ? undefined
                 : simS3ContinuationToken(page.resumeAfter),
-            StartAfter: input.startAfter,
+            StartAfter: encoding.value(input.startAfter),
+            EncodingType: encoding.encodingType,
             $metadata: {},
         };
     }

package/dist/service/s3/command/list-objects-v2/list-objects-v2.command.d.ts

@@ -12,7 +12,9 @@ export interface SimListObjectsV2Command {
  *
  * `ContinuationToken` resumes a truncated listing and takes precedence over
  * `StartAfter`, which only positions the first page. `Delimiter` rolls every
- * key holding it after the `Prefix` up into a common prefix.
+ * key holding it after the `Prefix` up into a common prefix. `EncodingType`
+ * asks for the keys the listing answers with to be encoded, so that a key
+ * holding a character XML cannot carry survives the response.
  */
 export interface SimListObjectsV2CommandInput {
     readonly Bucket?: string | undefined;
@@ -21,6 +23,7 @@ export interface SimListObjectsV2CommandInput {
     readonly MaxKeys?: number | undefined;
     readonly ContinuationToken?: string | undefined;
     readonly StartAfter?: string | undefined;
+    readonly EncodingType?: string | undefined;
 }
 /**
  * Minimal structural sim S3 ListObjectsV2 output.
@@ -42,5 +45,6 @@ export interface SimListObjectsV2CommandOutput {
     readonly ContinuationToken?: string | undefined;
     readonly NextContinuationToken?: string | undefined;
     readonly StartAfter?: string | undefined;
+    readonly EncodingType?: string | undefined;
     readonly $metadata: SimResponseMetadata;
 }

package/dist/service/s3/command/list-objects-v2/list-objects-v2.handler.js

@@ -2,6 +2,7 @@ import { assertDefined } from "../../../../util/type-guard/defined.js";
 import { SimS3NoSuchBucket } from "../../error/sim-s3.error.js";
 import { BackgroundTasks, } from "../../../../util/background/background.js";
 import { SimIamAllowAllAuth, } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import { SimS3ListingEncoding } from "../../object/s3-listing-encoding.js";
 import { simS3EffectiveMaxKeys } from "../../object/s3-object-listing.js";
 import { SimS3ObjectListingLimits } from "../../object/s3-object-listing-limits.js";
 import { ListObjectsAuthorizer } from "../list-objects/list-objects-authorizer.js";
@@ -45,6 +46,9 @@ export class ListObjectsV2CommandHandler {
         }
         // Complete request sequencing before authorization and storage access.
         await this.background.sequence();
+        // Refused before anything is listed, the way real S3 refuses an argument
+        // it cannot read, rather than after a page has been built.
+        const encoding = new SimS3ListingEncoding(command.input.EncodingType);
         const maxKeys = simS3EffectiveMaxKeys(command.input.MaxKeys, this.listing.maxKeysPerPage);
         this.authorizer.authorize({
             bucket,
@@ -60,6 +64,7 @@ export class ListObjectsV2CommandHandler {
             continuationToken: command.input.ContinuationToken,
             startAfter: command.input.StartAfter,
             maxKeys,
+            encoding,
         });
     }
 }

package/dist/service/s3/command/list-parts/list-parts.handler.js

@@ -1,6 +1,5 @@
 import { assertDefined } from "../../../../util/type-guard/defined.js";
 import { simS3QuotedETag } from "../../object/s3-object-etag.js";
-import { simS3DefaultStorageClass } from "../../object/s3-object-summary.js";
 import { SimS3MultipartAccess, } from "../multipart/sim-s3-multipart-access.js";
 /**
  * Simulated S3 ListPartsCommand handler.
@@ -25,7 +24,8 @@ export class ListPartsCommandHandler {
         assertDefined(Key, "ListPartsCommand.input.Key");
         assertDefined(UploadId, "ListPartsCommand.input.UploadId");
         const { bucket } = await this.access.reach(Bucket, Key, options);
-        const parts = this.access.requireUpload(bucket, UploadId).storedParts();
+        const upload = this.access.requireUpload(bucket, UploadId);
+        const parts = upload.storedParts();
         return {
             Bucket: bucket.bucketName,
             Key,
@@ -38,7 +38,7 @@ export class ListPartsCommandHandler {
                     Size: part.body.length,
                     LastModified: part.lastModified,
                 })),
-            StorageClass: simS3DefaultStorageClass,
+            StorageClass: upload.storageClass,
             IsTruncated: false,
             $metadata: {},
         };

package/dist/service/s3/command/multipart/sim-s3-multipart-access.js

@@ -1,6 +1,6 @@
 import { BackgroundTasks, } from "../../../../util/background/background.js";
 import { SimIamAllowAllAuth, } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
-import { SimS3NoSuchUpload } from "../../error/sim-s3.error.js";
+import { SimS3NoSuchUpload } from "../../error/sim-s3-upload.error.js";
 import { requireSimS3Bucket } from "../require-sim-s3-bucket.js";
 import { SimS3MultipartAuthorizer } from "./sim-s3-multipart-authorizer.js";
 /**

package/dist/service/s3/command/put-bucket-encryption/put-bucket-encryption.command.d.ts

@@ -0,0 +1,21 @@
+import type { SimResponseMetadata } from "../../../aws/metadata/response-metadata.type.js";
+import type { SimS3ServerSideEncryptionConfiguration } from "../../bucket/encryption/sim-s3-bucket-encryption.js";
+/**
+ * Minimal structural sim S3 PutBucketEncryption command.
+ */
+export interface SimPutBucketEncryptionCommand {
+    readonly input: SimPutBucketEncryptionCommandInput;
+}
+/**
+ * Minimal structural sim S3 PutBucketEncryption input.
+ */
+export interface SimPutBucketEncryptionCommandInput {
+    readonly Bucket?: string | undefined;
+    readonly ServerSideEncryptionConfiguration?: SimS3ServerSideEncryptionConfiguration | undefined;
+}
+/**
+ * Minimal structural sim S3 PutBucketEncryption output.
+ */
+export interface SimPutBucketEncryptionCommandOutput {
+    readonly $metadata: SimResponseMetadata;
+}

package/dist/service/s3/command/put-bucket-encryption/put-bucket-encryption.command.js

@@ -0,0 +1 @@
+export {};

package/dist/service/s3/command/put-bucket-encryption/put-bucket-encryption.handler.d.ts

@@ -0,0 +1,31 @@
+import type { CommandHandler } from "../../../../command/command-handler.js";
+import { type BackgroundScheduler } from "../../../../util/background/background.js";
+import { type SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimS3Bucket, SimS3BucketName } from "../../bucket/sim-s3-bucket.js";
+import type { SimS3RequestOptions } from "../sim-s3-request-options.js";
+import type { SimPutBucketEncryptionCommand, SimPutBucketEncryptionCommandOutput } from "./put-bucket-encryption.command.js";
+interface PutBucketEncryptionHandlerProperties {
+    readonly buckets: Map<SimS3BucketName, SimS3Bucket>;
+    readonly iam?: SimIamInterServiceAuthZ;
+    readonly background?: BackgroundScheduler;
+}
+/**
+ * Simulated S3 PutBucketEncryptionCommand handler.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/s3/command/PutBucketEncryptionCommand/
+ */
+export declare class PutBucketEncryptionCommandHandler implements CommandHandler<SimPutBucketEncryptionCommand, SimPutBucketEncryptionCommandOutput> {
+    private readonly buckets;
+    private readonly authorizer;
+    private readonly background;
+    constructor(properties: PutBucketEncryptionHandlerProperties);
+    /**
+     * Authorize and apply a Bucket's default encryption.
+     *
+     * The configuration decides the algorithm an Object written without one is
+     * stamped with. Objects already in the Bucket keep what they were written
+     * with, as they do in real S3.
+     */
+    handle(command: SimPutBucketEncryptionCommand, options?: SimS3RequestOptions): Promise<SimPutBucketEncryptionCommandOutput>;
+}
+export {};

package/dist/service/s3/command/put-bucket-encryption/put-bucket-encryption.handler.js

@@ -0,0 +1,41 @@
+import { BackgroundTasks, } from "../../../../util/background/background.js";
+import { assertDefined } from "../../../../util/type-guard/defined.js";
+import { SimIamAllowAllAuth, } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import { SimS3BucketEncryption } from "../../bucket/encryption/sim-s3-bucket-encryption.js";
+import { SimS3EncryptionAuthorizer } from "../encryption/sim-s3-encryption-authorizer.js";
+import { requireSimS3Bucket } from "../require-sim-s3-bucket.js";
+/**
+ * Simulated S3 PutBucketEncryptionCommand handler.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/s3/command/PutBucketEncryptionCommand/
+ */
+export class PutBucketEncryptionCommandHandler {
+    buckets;
+    authorizer;
+    background;
+    constructor(properties) {
+        const { buckets, iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), } = properties;
+        this.buckets = buckets;
+        this.authorizer = new SimS3EncryptionAuthorizer({ iam });
+        this.background = background;
+    }
+    /**
+     * Authorize and apply a Bucket's default encryption.
+     *
+     * The configuration decides the algorithm an Object written without one is
+     * stamped with. Objects already in the Bucket keep what they were written
+     * with, as they do in real S3.
+     */
+    async handle(command, options) {
+        assertDefined(command.input.Bucket, "PutBucketEncryptionCommand.input.Bucket");
+        assertDefined(command.input.ServerSideEncryptionConfiguration, "PutBucketEncryptionCommand.input.ServerSideEncryptionConfiguration");
+        const bucketName = command.input.Bucket;
+        const bucket = requireSimS3Bucket(this.buckets, bucketName);
+        await this.background.sequence();
+        this.authorizer.authorizeWrite(bucket, options);
+        bucket.configureEncryption(SimS3BucketEncryption.fromConfiguration(command.input.ServerSideEncryptionConfiguration, bucketName));
+        return {
+            $metadata: {},
+        };
+    }
+}

package/dist/service/s3/command/put-object/put-object-builder.d.ts

@@ -1,4 +1,5 @@
 import { SimS3Object } from "../../object/s3-object.js";
+import type { SimS3ServerSideEncryption } from "../../object/s3-server-side-encryption.js";
 import type { SimPutObjectCommand } from "./put-object.command.js";
 import type { SimClock } from "../../../../util/clock/sim-clock.js";
 interface PutObjectBuilderProperties {
@@ -25,7 +26,10 @@ export declare class PutObjectBuilder {
      *
      * The Object is dated by the simulation's clock rather than the host's, so a
      * test that freezes time gets a last-modified time it can assert on.
+     *
+     * The Bucket's default encryption is passed in because the request has the
+     * last word on it and the Bucket answers for a request that names none.
      */
-    build(command: SimPutObjectCommand): SimS3Object;
+    build(command: SimPutObjectCommand, bucketEncryption: SimS3ServerSideEncryption): SimS3Object;
 }
 export {};

package/dist/service/s3/command/put-object/put-object-builder.js

@@ -1,6 +1,8 @@
 import { SimS3Object } from "../../object/s3-object.js";
 import { simS3WriteBodyBuffer } from "../../object/s3-write-body.js";
 import { simS3WriteMetadata } from "../../object/s3-write-metadata.js";
+import { simS3WriteEncryption, simS3WriteStorageClass, } from "../../object/s3-write-storage.js";
+import { simS3WriteTags } from "../../object/s3-write-tagging.js";
 import { assertDefined } from "../../../../util/type-guard/defined.js";
 /**
  * Converts the supported PutObject request fields into a stored sim S3 Object.
@@ -25,14 +27,21 @@ export class PutObjectBuilder {
      *
      * The Object is dated by the simulation's clock rather than the host's, so a
      * test that freezes time gets a last-modified time it can assert on.
+     *
+     * The Bucket's default encryption is passed in because the request has the
+     * last word on it and the Bucket answers for a request that names none.
      */
-    build(command) {
+    build(command, bucketEncryption) {
         assertDefined(command.input.Key, "PutObjectCommand.input.Key");
+        const storageClass = simS3WriteStorageClass(command.input, "PutObjectCommand");
         return new SimS3Object({
             key: command.input.Key,
             body: simS3WriteBodyBuffer(command.input.Body, "PutObjectCommand"),
             metadata: simS3WriteMetadata(command.input),
+            tags: simS3WriteTags(command.input, "PutObjectCommand"),
             lastModified: this.clock.now(),
+            ...(storageClass !== undefined && { storageClass }),
+            serverSideEncryption: simS3WriteEncryption(command.input, bucketEncryption, "PutObjectCommand"),
         });
     }
 }

package/dist/service/s3/command/put-object/put-object.command.d.ts

@@ -1,6 +1,8 @@
 import type { SimResponseMetadata } from "../../../aws/metadata/response-metadata.type.js";
 import type { SimS3WriteBody } from "../../object/s3-write-body.js";
 import type { SimS3ObjectWriteMetadata } from "../../object/s3-write-metadata.js";
+import type { SimS3ObjectWriteStorage } from "../../object/s3-write-storage.js";
+import type { SimS3ObjectWriteTagging } from "../../object/s3-write-tagging.js";
 /**
  * Minimal structural sim S3 PutObject command.
  */
@@ -14,7 +16,7 @@ export interface SimPutObjectCommand {
  * Object carries, which is why they are declared once in
  * `SimS3ObjectWriteMetadata` and shared with `CreateMultipartUpload`.
  */
-export interface SimPutObjectCommandInput extends SimS3ObjectWriteMetadata {
+export interface SimPutObjectCommandInput extends SimS3ObjectWriteMetadata, SimS3ObjectWriteStorage, SimS3ObjectWriteTagging {
     readonly Bucket?: string | undefined;
     readonly Key?: string | undefined;
     readonly Body?: SimPutObjectBody;
@@ -30,6 +32,8 @@ export interface SimPutObjectCommandInput extends SimS3ObjectWriteMetadata {
 export interface SimPutObjectCommandOutput {
     readonly ETag?: string;
     readonly VersionId?: string | undefined;
+    /** The encryption S3 stamped on the Object it stored. */
+    readonly ServerSideEncryption?: string | undefined;
     readonly $metadata: SimResponseMetadata;
 }
 /**

package/dist/service/s3/command/put-object/put-object.handler.js

@@ -44,7 +44,7 @@ export class PutObjectCommandHandler {
         // Allow for potential non-deterministic sequencing of async events.
         await this.background.sequence();
         const caller = this.authorizer.authorize(bucket, Key, options);
-        const object = this.objectBuilder.build(command);
+        const object = this.objectBuilder.build(command, bucket.getEncryption().algorithm);
         const version = await bucket.putObject(object);
         const versionId = version?.versionId;
         // Every write path funnels through here, so this one call covers the SDK,
@@ -59,6 +59,7 @@ export class PutObjectCommandHandler {
         return {
             ETag: simS3QuotedETag(object.etag),
             ...(versionId !== undefined && { VersionId: versionId }),
+            ServerSideEncryption: object.serverSideEncryption,
             $metadata: {},
         };
     }

package/dist/service/s3/command/put-object-tagging/put-object-tagging.command.d.ts

@@ -0,0 +1,37 @@
+import type { SimResponseMetadata } from "../../../aws/metadata/response-metadata.type.js";
+import type { SimS3ObjectTagInput } from "../../object/s3-object-tags.js";
+/**
+ * Minimal structural sim S3 PutObjectTagging command.
+ */
+export interface SimPutObjectTaggingCommand {
+    readonly input: SimPutObjectTaggingCommandInput;
+}
+/**
+ * Minimal structural sim S3 PutObjectTagging input.
+ *
+ * The tag set arrives as a list here rather than as the query string a write
+ * carries it in, because this request has a body of its own to put it in.
+ */
+export interface SimPutObjectTaggingCommandInput {
+    readonly Bucket?: string | undefined;
+    readonly Key?: string | undefined;
+    /** The version to tag. A request naming none tags the current one. */
+    readonly VersionId?: string | undefined;
+    readonly Tagging?: SimS3TaggingInput | undefined;
+}
+/**
+ * Minimal structural sim S3 tag set, as a tagging request states one.
+ */
+export interface SimS3TaggingInput {
+    readonly TagSet?: readonly SimS3ObjectTagInput[] | undefined;
+}
+/**
+ * Minimal structural sim S3 PutObjectTagging output.
+ *
+ * `VersionId` is the version the tags were put on, on a Bucket keeping
+ * versions.
+ */
+export interface SimPutObjectTaggingCommandOutput {
+    readonly VersionId?: string | undefined;
+    readonly $metadata: SimResponseMetadata;
+}

package/dist/service/s3/command/put-object-tagging/put-object-tagging.command.js

@@ -0,0 +1 @@
+export {};

package/dist/service/s3/command/put-object-tagging/put-object-tagging.handler.d.ts

@@ -0,0 +1,22 @@
+import type { CommandHandler } from "../../../../command/command-handler.js";
+import { type SimS3ObjectTaggingAccessProperties } from "../tagging/sim-s3-object-tagging-access.js";
+import type { SimS3RequestOptions } from "../sim-s3-request-options.js";
+import type { SimPutObjectTaggingCommand, SimPutObjectTaggingCommandOutput } from "./put-object-tagging.command.js";
+/**
+ * Simulated S3 PutObjectTaggingCommand handler.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/s3/command/PutObjectTaggingCommand/
+ */
+export declare class PutObjectTaggingCommandHandler implements CommandHandler<SimPutObjectTaggingCommand, SimPutObjectTaggingCommandOutput> {
+    private readonly access;
+    constructor(properties: SimS3ObjectTaggingAccessProperties);
+    /**
+     * Replace the tags on an Object, or on the version the request named.
+     *
+     * Real S3 puts the whole tag set rather than adding to it, so a request
+     * naming one tag leaves the Object carrying that tag alone. The set is read
+     * before anything is written, which is what refuses eleven tags without
+     * leaving ten of them on the Object.
+     */
+    handle(command: SimPutObjectTaggingCommand, options?: SimS3RequestOptions): Promise<SimPutObjectTaggingCommandOutput>;
+}

package/dist/service/s3/command/put-object-tagging/put-object-tagging.handler.js

@@ -0,0 +1,46 @@
+import { assertDefined } from "../../../../util/type-guard/defined.js";
+import { SimS3ObjectTagSet } from "../../object/s3-object-tags.js";
+import { SimS3ObjectTaggingAccess, } from "../tagging/sim-s3-object-tagging-access.js";
+/**
+ * Simulated S3 PutObjectTaggingCommand handler.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/s3/command/PutObjectTaggingCommand/
+ */
+export class PutObjectTaggingCommandHandler {
+    access;
+    constructor(properties) {
+        this.access = new SimS3ObjectTaggingAccess(properties);
+    }
+    /**
+     * Replace the tags on an Object, or on the version the request named.
+     *
+     * Real S3 puts the whole tag set rather than adding to it, so a request
+     * naming one tag leaves the Object carrying that tag alone. The set is read
+     * before anything is written, which is what refuses eleven tags without
+     * leaving ten of them on the Object.
+     */
+    async handle(command, options) {
+        const { Tagging } = command.input;
+        assertDefined(Tagging, "PutObjectTaggingCommand.input.Tagging");
+        const tags = SimS3ObjectTagSet.from(Tagging.TagSet ?? [], "PutObjectTaggingCommand");
+        const { bucket, taggable, caller } = await this.access.reach({
+            commandName: "PutObjectTaggingCommand",
+            action: "s3:PutObjectTagging",
+            input: command.input,
+        }, options);
+        const object = await taggable.retag(tags);
+        this.access.notifications.objectTagged({
+            bucket,
+            object,
+            caller,
+            eventName: "s3:ObjectTagging:Put",
+            versionId: taggable.versionId,
+        });
+        return {
+            ...(taggable.versionId !== undefined && {
+                VersionId: taggable.versionId,
+            }),
+            $metadata: {},
+        };
+    }
+}