@kensio/yulin 1.21.3 → 1.21.5

package/dist/service/s3/command/get-bucket-encryption/get-bucket-encryption.handler.js

@@ -0,0 +1,39 @@
+import { BackgroundTasks, } from "../../../../util/background/background.js";
+import { assertDefined } from "../../../../util/type-guard/defined.js";
+import { SimIamAllowAllAuth, } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import { SimS3EncryptionAuthorizer } from "../encryption/sim-s3-encryption-authorizer.js";
+import { requireSimS3Bucket } from "../require-sim-s3-bucket.js";
+/**
+ * Simulated S3 GetBucketEncryptionCommand handler.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/s3/command/GetBucketEncryptionCommand/
+ */
+export class GetBucketEncryptionCommandHandler {
+    buckets;
+    authorizer;
+    background;
+    constructor(properties) {
+        const { buckets, iam = new SimIamAllowAllAuth(), background = new BackgroundTasks(), } = properties;
+        this.buckets = buckets;
+        this.authorizer = new SimS3EncryptionAuthorizer({ iam });
+        this.background = background;
+    }
+    /**
+     * Authorize and report a Bucket's default encryption.
+     *
+     * A Bucket nobody has configured answers with the SSE-S3 rule rather than an
+     * error, which is what real S3 has answered since it began encrypting every
+     * Bucket by default.
+     */
+    async handle(command, options) {
+        assertDefined(command.input.Bucket, "GetBucketEncryptionCommand.input.Bucket");
+        const bucketName = command.input.Bucket;
+        const bucket = requireSimS3Bucket(this.buckets, bucketName);
+        await this.background.sequence();
+        this.authorizer.authorizeRead(bucket, options);
+        return {
+            ServerSideEncryptionConfiguration: bucket.getEncryption().configuration,
+            $metadata: {},
+        };
+    }
+}

package/dist/service/s3/command/get-object/get-object-authorizer.d.ts

@@ -7,21 +7,24 @@ interface GetObjectAuthorizerProperties {
 /**
  * Applies IAM authorization to an S3 GetObject request.
  *
- * GetObject is authorized against the target Object ARN rather than the Bucket
- * ARN. An omitted caller is passed through to sim IAM so Account root fallback
- * behavior remains owned by IAM.
- *
- * The request's source ARN and source Account go in as condition keys, which is
- * what a Bucket policy written for a CloudFront origin access control is
- * conditioned on.
+ * A read is authorized against the target Object ARN. A read that finds
+ * nothing is authorized a second time, against the Bucket ARN, because real S3
+ * decides between AccessDenied and NoSuchKey on `s3:ListBucket`.
  */
 export declare class GetObjectAuthorizer {
-    private static readonly action;
     private readonly iam;
     constructor(properties: GetObjectAuthorizerProperties);
     /**
      * Ensure the caller may read the requested S3 Object.
      */
     authorize(bucket: SimS3Bucket, key: string, options?: SimS3RequestOptions): void;
+    /**
+     * Ensure the caller may be told that the Bucket holds no such key.
+     *
+     * Which keys a Bucket holds is what a listing tells you. Real S3 admits the
+     * absence only to a caller holding `s3:ListBucket` on the Bucket. Everyone
+     * else gets the same AccessDenied whether the key is there or not.
+     */
+    authorizeMissingKey(bucket: SimS3Bucket, options?: SimS3RequestOptions): void;
 }
 export {};

package/dist/service/s3/command/get-object/get-object-authorizer.js

@@ -1,18 +1,12 @@
-import { SimIamAccessDenied } from "../../../iam/error/sim-iam.error.js";
-import { simS3ConditionContext } from "../authorize/sim-s3-condition-context.js";
+import { simS3AuthorizeAction } from "../authorize/sim-s3-authorize-action.js";
 /**
  * Applies IAM authorization to an S3 GetObject request.
  *
- * GetObject is authorized against the target Object ARN rather than the Bucket
- * ARN. An omitted caller is passed through to sim IAM so Account root fallback
- * behavior remains owned by IAM.
- *
- * The request's source ARN and source Account go in as condition keys, which is
- * what a Bucket policy written for a CloudFront origin access control is
- * conditioned on.
+ * A read is authorized against the target Object ARN. A read that finds
+ * nothing is authorized a second time, against the Bucket ARN, because real S3
+ * decides between AccessDenied and NoSuchKey on `s3:ListBucket`.
  */
 export class GetObjectAuthorizer {
-    static action = "s3:GetObject";
     iam;
     constructor(properties) {
         this.iam = properties.iam;
@@ -21,30 +15,28 @@ export class GetObjectAuthorizer {
      * Ensure the caller may read the requested S3 Object.
      */
     authorize(bucket, key, options) {
-        const resource = `arn:aws:s3:::${bucket.bucketName}/${key}`;
-        const policy = bucket.getPolicy();
-        const decision = this.iam.authorize({
-            action: GetObjectAuthorizer.action,
-            resource,
-            caller: options?.caller,
-            conditionContext: simS3ConditionContext(options),
-            resourcePolicies: policy === undefined
-                ? []
-                : [
-                    {
-                        document: policy,
-                        policyName: "BucketPolicy",
-                        resourceArn: `arn:aws:s3:::${bucket.bucketName}`,
-                    },
-                ],
+        simS3AuthorizeAction({
+            iam: this.iam,
+            action: "s3:GetObject",
+            resource: `arn:aws:s3:::${bucket.bucketName}/${key}`,
+            bucket,
+            options,
+        });
+    }
+    /**
+     * Ensure the caller may be told that the Bucket holds no such key.
+     *
+     * Which keys a Bucket holds is what a listing tells you. Real S3 admits the
+     * absence only to a caller holding `s3:ListBucket` on the Bucket. Everyone
+     * else gets the same AccessDenied whether the key is there or not.
+     */
+    authorizeMissingKey(bucket, options) {
+        simS3AuthorizeAction({
+            iam: this.iam,
+            action: "s3:ListBucket",
+            resource: `arn:aws:s3:::${bucket.bucketName}`,
+            bucket,
+            options,
         });
-        if (decision.isDenied) {
-            throw new SimIamAccessDenied({
-                principal: decision.caller.principal,
-                reason: decision.denialReason,
-                action: GetObjectAuthorizer.action,
-                resource,
-            });
-        }
     }
 }

package/dist/service/s3/command/get-object/get-object-loader.d.ts

@@ -10,8 +10,8 @@ import type { SimGetObjectCommandOutput } from "./get-object.command.js";
  * This class owns both storage lookup and response conversion because the SDK
  * response is a representation of the stored Object:
  *
- * - a missing storage entry becomes the S3 NoSuchKey error, and a `VersionId`
- *   naming a version the Bucket never issued becomes NoSuchVersion;
+ * - a `VersionId` naming a version the Bucket never issued becomes
+ *   NoSuchVersion;
  * - the stored Buffer, or the part of it the read asked for, becomes the
  *   readable response body;
  * - what S3 was told about the Object becomes the response's own fields, and
@@ -25,6 +25,10 @@ export declare class GetObjectLoader {
     /**
      * Read an Object, or the range of it that was asked for, from the resolved
      * Bucket, and build its SDK command output.
+     *
+     * Answering `undefined` means the key holds nothing. The command handler
+     * turns that into the error the caller's permissions allow, which for a
+     * missing key is a decision of its own.
      */
-    load(bucket: SimS3Bucket, key: string, rangeHeader?: string, versionId?: string): Promise<SimGetObjectCommandOutput>;
+    load(bucket: SimS3Bucket, key: string, rangeHeader?: string, versionId?: string): Promise<SimGetObjectCommandOutput | undefined>;
 }

package/dist/service/s3/command/get-object/get-object-loader.js

@@ -1,6 +1,6 @@
 import { Readable } from "node:stream";
-import { SimS3NoSuchKey } from "../../error/sim-s3.error.js";
 import { simS3QuotedETag } from "../../object/s3-object-etag.js";
+import { simS3ObjectStorageReport } from "../../object/s3-object-storage-report.js";
 import { simS3ContentRange, simS3ReadObjectRange, } from "../../object/s3-object-range.js";
 import { simS3ReadObjectVersion } from "../object/sim-s3-read-object-version.js";
 /**
@@ -13,8 +13,8 @@ import { simS3ReadObjectVersion } from "../object/sim-s3-read-object-version.js"
  * This class owns both storage lookup and response conversion because the SDK
  * response is a representation of the stored Object:
  *
- * - a missing storage entry becomes the S3 NoSuchKey error, and a `VersionId`
- *   naming a version the Bucket never issued becomes NoSuchVersion;
+ * - a `VersionId` naming a version the Bucket never issued becomes
+ *   NoSuchVersion;
  * - the stored Buffer, or the part of it the read asked for, becomes the
  *   readable response body;
  * - what S3 was told about the Object becomes the response's own fields, and
@@ -28,11 +28,15 @@ export class GetObjectLoader {
     /**
      * Read an Object, or the range of it that was asked for, from the resolved
      * Bucket, and build its SDK command output.
+     *
+     * Answering `undefined` means the key holds nothing. The command handler
+     * turns that into the error the caller's permissions allow, which for a
+     * missing key is a decision of its own.
      */
     async load(bucket, key, rangeHeader, versionId) {
         const read = await simS3ReadObjectVersion(bucket, key, versionId);
         if (read === undefined) {
-            throw new SimS3NoSuchKey(`No S3 Object named ${key}`);
+            return undefined;
         }
         const object = read.object;
         const size = object.body.length;
@@ -51,6 +55,7 @@ export class GetObjectLoader {
             LastModified: object.lastModified,
             ContentLength: body.length,
             ...(read.versionId !== undefined && { VersionId: read.versionId }),
+            ...simS3ObjectStorageReport(object),
             ...read.lock?.reported,
             ...(range !== undefined && {
                 ContentRange: simS3ContentRange(range, size),

package/dist/service/s3/command/get-object/get-object.command.d.ts

@@ -1,6 +1,7 @@
 import type { Readable } from "node:stream";
 import type { SimResponseMetadata } from "../../../aws/metadata/response-metadata.type.js";
 import type { SimS3ObjectLockOutput } from "../../bucket/lock/sim-s3-object-lock-output.js";
+import type { SimS3ObjectStorageReport } from "../../object/s3-object-storage-report.js";
 import type { SimS3SystemMetadataOutput } from "../../object/s3-system-metadata-read.js";
 /**
  * Minimal structural sim S3 GetObject command.
@@ -41,7 +42,7 @@ export interface SimGetObjectCommandInput {
  * when it was written. `Metadata` is what the caller attached to it, and holds
  * nothing else.
  */
-export interface SimGetObjectCommandOutput extends SimS3SystemMetadataOutput, SimS3ObjectLockOutput {
+export interface SimGetObjectCommandOutput extends SimS3SystemMetadataOutput, SimS3ObjectLockOutput, SimS3ObjectStorageReport {
     readonly Body?: Readable;
     readonly Metadata?: Record<string, string>;
     readonly ETag?: string;

package/dist/service/s3/command/get-object/get-object.handler.d.ts

@@ -33,6 +33,10 @@ export declare class GetObjectCommandHandler implements CommandHandler<SimGetObj
      *
      * A stated `Range` reaches the loader with the key, since which bytes of an
      * Object a caller may read is not something IAM decides.
+     *
+     * A key holding nothing goes back to authorization before the absence is
+     * reported. Real S3 tells a caller that a key is missing only where it may
+     * list the Bucket, and answers AccessDenied otherwise.
      */
     handle(command: SimGetObjectCommand, options?: SimS3RequestOptions): Promise<SimGetObjectCommandOutput>;
 }

package/dist/service/s3/command/get-object/get-object.handler.js

@@ -1,7 +1,8 @@
 import { assertDefined } from "../../../../util/type-guard/defined.js";
-import { SimS3NoSuchBucket } from "../../error/sim-s3.error.js";
+import { SimS3NoSuchKey } from "../../error/sim-s3.error.js";
 import { BackgroundTasks, } from "../../../../util/background/background.js";
 import { SimIamAllowAllAuth, } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import { requireSimS3Bucket } from "../require-sim-s3-bucket.js";
 import { GetObjectAuthorizer } from "./get-object-authorizer.js";
 import { GetObjectLoader } from "./get-object-loader.js";
 /**
@@ -33,18 +34,23 @@ export class GetObjectCommandHandler {
      *
      * A stated `Range` reaches the loader with the key, since which bytes of an
      * Object a caller may read is not something IAM decides.
+     *
+     * A key holding nothing goes back to authorization before the absence is
+     * reported. Real S3 tells a caller that a key is missing only where it may
+     * list the Bucket, and answers AccessDenied otherwise.
      */
     async handle(command, options) {
         assertDefined(command.input.Bucket, "GetObjectCommand.input.Bucket");
         assertDefined(command.input.Key, "GetObjectCommand.input.Key");
-        const bucketName = command.input.Bucket;
-        const bucket = this.buckets.get(bucketName);
-        if (bucket === undefined) {
-            throw new SimS3NoSuchBucket(`No S3 Bucket named ${bucketName}`);
-        }
+        const bucket = requireSimS3Bucket(this.buckets, command.input.Bucket);
         // Complete request sequencing before authorization and storage access.
         await this.background.sequence();
         this.authorizer.authorize(bucket, command.input.Key, options);
-        return await this.loader.load(bucket, command.input.Key, command.input.Range, command.input.VersionId);
+        const output = await this.loader.load(bucket, command.input.Key, command.input.Range, command.input.VersionId);
+        if (output !== undefined) {
+            return output;
+        }
+        this.authorizer.authorizeMissingKey(bucket, options);
+        throw new SimS3NoSuchKey(`No S3 Object named ${command.input.Key}`);
     }
 }

package/dist/service/s3/command/get-object-tagging/get-object-tagging.command.d.ts

@@ -0,0 +1,29 @@
+import type { SimResponseMetadata } from "../../../aws/metadata/response-metadata.type.js";
+import type { SimS3ObjectTag } from "../../object/s3-object-tags.js";
+/**
+ * Minimal structural sim S3 GetObjectTagging command.
+ */
+export interface SimGetObjectTaggingCommand {
+    readonly input: SimGetObjectTaggingCommandInput;
+}
+/**
+ * Minimal structural sim S3 GetObjectTagging input.
+ */
+export interface SimGetObjectTaggingCommandInput {
+    readonly Bucket?: string | undefined;
+    readonly Key?: string | undefined;
+    /** The version to read. A request naming none reads the current one. */
+    readonly VersionId?: string | undefined;
+}
+/**
+ * Minimal structural sim S3 GetObjectTagging output.
+ *
+ * `TagSet` is always present, and is empty for an Object nobody has tagged.
+ * Real S3 answers an untagged Object with an empty set rather than refusing,
+ * because having no tags is not the same as not existing.
+ */
+export interface SimGetObjectTaggingCommandOutput {
+    readonly TagSet: readonly SimS3ObjectTag[];
+    readonly VersionId?: string | undefined;
+    readonly $metadata: SimResponseMetadata;
+}

package/dist/service/s3/command/get-object-tagging/get-object-tagging.command.js

@@ -0,0 +1 @@
+export {};

package/dist/service/s3/command/get-object-tagging/get-object-tagging.handler.d.ts

@@ -0,0 +1,21 @@
+import type { CommandHandler } from "../../../../command/command-handler.js";
+import { type SimS3ObjectTaggingAccessProperties } from "../tagging/sim-s3-object-tagging-access.js";
+import type { SimS3RequestOptions } from "../sim-s3-request-options.js";
+import type { SimGetObjectTaggingCommand, SimGetObjectTaggingCommandOutput } from "./get-object-tagging.command.js";
+/**
+ * Simulated S3 GetObjectTaggingCommand handler.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/s3/command/GetObjectTaggingCommand/
+ */
+export declare class GetObjectTaggingCommandHandler implements CommandHandler<SimGetObjectTaggingCommand, SimGetObjectTaggingCommandOutput> {
+    private readonly access;
+    constructor(properties: SimS3ObjectTaggingAccessProperties);
+    /**
+     * Read the tags on an Object, or on the version the request named.
+     *
+     * An Object nobody has tagged answers with an empty set rather than a
+     * refusal, as real S3 does. Nothing is announced: real S3 raises a tagging
+     * event for a change to the tags, and a read changes nothing.
+     */
+    handle(command: SimGetObjectTaggingCommand, options?: SimS3RequestOptions): Promise<SimGetObjectTaggingCommandOutput>;
+}

package/dist/service/s3/command/get-object-tagging/get-object-tagging.handler.js

@@ -0,0 +1,33 @@
+import { SimS3ObjectTaggingAccess, } from "../tagging/sim-s3-object-tagging-access.js";
+/**
+ * Simulated S3 GetObjectTaggingCommand handler.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/s3/command/GetObjectTaggingCommand/
+ */
+export class GetObjectTaggingCommandHandler {
+    access;
+    constructor(properties) {
+        this.access = new SimS3ObjectTaggingAccess(properties);
+    }
+    /**
+     * Read the tags on an Object, or on the version the request named.
+     *
+     * An Object nobody has tagged answers with an empty set rather than a
+     * refusal, as real S3 does. Nothing is announced: real S3 raises a tagging
+     * event for a change to the tags, and a read changes nothing.
+     */
+    async handle(command, options) {
+        const { taggable } = await this.access.reach({
+            commandName: "GetObjectTaggingCommand",
+            action: "s3:GetObjectTagging",
+            input: command.input,
+        }, options);
+        return {
+            TagSet: taggable.tagSet.tags,
+            ...(taggable.versionId !== undefined && {
+                VersionId: taggable.versionId,
+            }),
+            $metadata: {},
+        };
+    }
+}

package/dist/service/s3/command/head-object/head-object-loader.js

@@ -1,5 +1,6 @@
 import { SimS3NotFound } from "../../error/sim-s3.error.js";
 import { simS3QuotedETag } from "../../object/s3-object-etag.js";
+import { simS3ObjectStorageReport } from "../../object/s3-object-storage-report.js";
 import { simS3ReadObjectVersion } from "../object/sim-s3-read-object-version.js";
 /**
  * Describes an authorized S3 Object without reading it out.
@@ -26,6 +27,7 @@ export class HeadObjectLoader {
             ETag: simS3QuotedETag(object.etag),
             LastModified: object.lastModified,
             ...(read.versionId !== undefined && { VersionId: read.versionId }),
+            ...simS3ObjectStorageReport(object),
             ...read.lock?.reported,
             $metadata: {},
         };

package/dist/service/s3/command/head-object/head-object.command.d.ts

@@ -1,5 +1,6 @@
 import type { SimResponseMetadata } from "../../../aws/metadata/response-metadata.type.js";
 import type { SimS3ObjectLockOutput } from "../../bucket/lock/sim-s3-object-lock-output.js";
+import type { SimS3ObjectStorageReport } from "../../object/s3-object-storage-report.js";
 import type { SimS3SystemMetadataOutput } from "../../object/s3-system-metadata-read.js";
 /**
  * Minimal structural sim S3 HeadObject command.
@@ -26,7 +27,7 @@ export interface SimHeadObjectCommandInput {
  * the Object itself, so this is a GetObject output without its body and with
  * the length that body would have had.
  */
-export interface SimHeadObjectCommandOutput extends SimS3SystemMetadataOutput, SimS3ObjectLockOutput {
+export interface SimHeadObjectCommandOutput extends SimS3SystemMetadataOutput, SimS3ObjectLockOutput, SimS3ObjectStorageReport {
     readonly ContentLength?: number;
     readonly Metadata?: Record<string, string>;
     readonly ETag?: string;

package/dist/service/s3/command/lifecycle/sim-s3-lifecycle-rules-validation.js

@@ -1,4 +1,5 @@
 import { SimS3MalformedXml } from "../../error/sim-s3.error.js";
+import { simS3StorageClassFrom } from "../../object/s3-storage-class.js";
 const ruleStatuses = new Set(["Enabled", "Disabled"]);
 /**
  * The fields that make a rule do something, for the refusal to name.
@@ -49,4 +50,21 @@ function validateRule(rule, bucketName) {
         throw new SimS3MalformedXml(`Lifecycle rule ${named} for S3 Bucket ${bucketName} must state at ` +
             `least one of ${ruleActionNames}`);
     }
+    validateTransitionClasses(rule, named, bucketName);
+}
+/**
+ * Refuse a transition to a storage class S3 has no such class for.
+ *
+ * The class is read here, where the configuration is stored, so a rule that
+ * names one nothing can transition to is refused before it is applied to
+ * anything.
+ */
+function validateTransitionClasses(rule, named, bucketName) {
+    const transitions = [
+        ...(rule.Transitions ?? []),
+        ...(rule.NoncurrentVersionTransitions ?? []),
+    ];
+    for (const transition of transitions) {
+        simS3StorageClassFrom(transition.StorageClass, `lifecycle rule ${named} of S3 Bucket ${bucketName}`);
+    }
 }

package/dist/service/s3/command/list-multipart-uploads/list-multipart-uploads.handler.js

@@ -1,5 +1,4 @@
 import { assertDefined } from "../../../../util/type-guard/defined.js";
-import { simS3DefaultStorageClass } from "../../object/s3-object-summary.js";
 import { SimS3MultipartAccess, } from "../multipart/sim-s3-multipart-access.js";
 /**
  * Simulated S3 ListMultipartUploadsCommand handler.
@@ -33,7 +32,7 @@ export class ListMultipartUploadsCommandHandler {
                     Key: upload.key,
                     UploadId: upload.uploadId,
                     Initiated: upload.initiated,
-                    StorageClass: simS3DefaultStorageClass,
+                    StorageClass: upload.storageClass,
                 })),
             IsTruncated: false,
             $metadata: {},

package/dist/service/s3/command/list-object-versions/list-object-versions-summaries.js

@@ -1,5 +1,4 @@
 import { simS3QuotedETag } from "../../object/s3-object-etag.js";
-import { simS3DefaultStorageClass } from "../../object/s3-object-summary.js";
 /**
  * Describe the Objects among a page of versions.
  */
@@ -13,7 +12,7 @@ export function simS3ObjectVersionSummaries(page, isLatest) {
         LastModified: version.lastModified,
         ETag: simS3QuotedETag(version.object.etag),
         Size: version.object.body.length,
-        StorageClass: simS3DefaultStorageClass,
+        StorageClass: version.object.storageClass,
     }));
 }
 /**

package/dist/service/s3/command/list-objects/list-objects-page-builder.d.ts

@@ -1,4 +1,5 @@
 import type { SimS3Bucket } from "../../bucket/sim-s3-bucket.js";
+import type { SimS3ListingEncoding } from "../../object/s3-listing-encoding.js";
 import type { SimListObjectsCommandOutput } from "./list-objects.command.js";
 interface ListObjectsPageInput {
     readonly bucket: SimS3Bucket;
@@ -6,6 +7,7 @@ interface ListObjectsPageInput {
     readonly delimiter?: string | undefined;
     readonly marker?: string | undefined;
     readonly maxKeys: number;
+    readonly encoding: SimS3ListingEncoding;
 }
 /**
  * Reads, orders, and paginates Objects for a ListObjects response.
@@ -18,6 +20,9 @@ interface ListObjectsPageInput {
  * operations differ in how a caller names where to resume rather than in which
  * keys a page holds. The marker is exclusive, so a page begins after it.
  *
+ * The keys, the prefix, the delimiter and both markers are written the way the
+ * listing asked for them, which is encoded or as they are stored.
+ *
  * NextMarker is returned only when another page exists, and identifies the
  * final entry in the current page. That entry is a common prefix where the
  * page ended on one, and the marker steps over the whole rolled-up prefix.

package/dist/service/s3/command/list-objects/list-objects-page-builder.js

@@ -12,6 +12,9 @@ import { simS3ObjectSummaries } from "../../object/s3-object-summary.js";
  * operations differ in how a caller names where to resume rather than in which
  * keys a page holds. The marker is exclusive, so a page begins after it.
  *
+ * The keys, the prefix, the delimiter and both markers are written the way the
+ * listing asked for them, which is encoded or as they are stored.
+ *
  * NextMarker is returned only when another page exists, and identifies the
  * final entry in the current page. That entry is a common prefix where the
  * page ended on one, and the marker steps over the whole rolled-up prefix.
@@ -28,16 +31,18 @@ export class ListObjectsPageBuilder {
             startAfter: input.marker,
             maxKeys: input.maxKeys,
         });
+        const { encoding } = input;
         return {
-            Contents: simS3ObjectSummaries(page.objects),
-            CommonPrefixes: simS3CommonPrefixes(page.commonPrefixes),
+            Contents: encoding.summaries(simS3ObjectSummaries(page.objects)),
+            CommonPrefixes: encoding.commonPrefixes(simS3CommonPrefixes(page.commonPrefixes)),
             Name: input.bucket.bucketName,
-            Prefix: input.prefix,
-            Delimiter: input.delimiter,
-            Marker: input.marker,
+            Prefix: encoding.value(input.prefix),
+            Delimiter: encoding.value(input.delimiter),
+            Marker: encoding.value(input.marker),
             MaxKeys: input.maxKeys,
             IsTruncated: page.isTruncated,
-            NextMarker: page.resumeAfter,
+            NextMarker: encoding.value(page.resumeAfter),
+            EncodingType: encoding.encodingType,
             $metadata: {},
         };
     }

package/dist/service/s3/command/list-objects/list-objects.command.d.ts

@@ -12,7 +12,9 @@ export interface SimListObjectsCommand {
  * Minimal structural sim S3 ListObjects input.
  *
  * `Delimiter` rolls every key holding it after the `Prefix` up into a common
- * prefix, which is how a Bucket is walked one folder at a time.
+ * prefix, which is how a Bucket is walked one folder at a time. `EncodingType`
+ * asks for the keys the listing answers with to be encoded, so that a key
+ * holding a character XML cannot carry survives the response.
  */
 export interface SimListObjectsCommandInput {
     readonly Bucket?: string | undefined;
@@ -20,6 +22,7 @@ export interface SimListObjectsCommandInput {
     readonly Delimiter?: string | undefined;
     readonly Marker?: string | undefined;
     readonly MaxKeys?: number | undefined;
+    readonly EncodingType?: string | undefined;
 }
 /**
  * Minimal structural sim S3 ListObjects output.
@@ -34,5 +37,6 @@ export interface SimListObjectsCommandOutput {
     readonly MaxKeys?: number;
     readonly IsTruncated?: boolean;
     readonly NextMarker?: string | undefined;
+    readonly EncodingType?: string | undefined;
     readonly $metadata: SimResponseMetadata;
 }

package/dist/service/s3/command/list-objects/list-objects.handler.js

@@ -2,6 +2,7 @@ import { assertDefined } from "../../../../util/type-guard/defined.js";
 import { SimS3NoSuchBucket } from "../../error/sim-s3.error.js";
 import { BackgroundTasks, } from "../../../../util/background/background.js";
 import { SimIamAllowAllAuth, } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import { SimS3ListingEncoding } from "../../object/s3-listing-encoding.js";
 import { simS3EffectiveMaxKeys } from "../../object/s3-object-listing.js";
 import { SimS3ObjectListingLimits } from "../../object/s3-object-listing-limits.js";
 import { ListObjectsAuthorizer } from "./list-objects-authorizer.js";
@@ -40,6 +41,9 @@ export class ListObjectsCommandHandler {
         }
         // Complete request sequencing before authorization and storage access.
         await this.background.sequence();
+        // Refused before anything is listed, the way real S3 refuses an argument
+        // it cannot read, rather than after a page has been built.
+        const encoding = new SimS3ListingEncoding(command.input.EncodingType);
         const maxKeys = simS3EffectiveMaxKeys(command.input.MaxKeys, this.listing.maxKeysPerPage);
         this.authorizer.authorize({
             bucket,
@@ -54,6 +58,7 @@ export class ListObjectsCommandHandler {
             delimiter: command.input.Delimiter,
             marker: command.input.Marker,
             maxKeys,
+            encoding,
         });
     }
 }

package/dist/service/s3/command/list-objects-v2/list-objects-v2-page-builder.d.ts

@@ -1,4 +1,5 @@
 import type { SimS3Bucket } from "../../bucket/sim-s3-bucket.js";
+import type { SimS3ListingEncoding } from "../../object/s3-listing-encoding.js";
 import type { SimListObjectsV2CommandOutput } from "./list-objects-v2.command.js";
 interface ListObjectsV2PageInput {
     readonly bucket: SimS3Bucket;
@@ -7,6 +8,7 @@ interface ListObjectsV2PageInput {
     readonly continuationToken?: string | undefined;
     readonly startAfter?: string | undefined;
     readonly maxKeys: number;
+    readonly encoding: SimS3ListingEncoding;
 }
 /**
  * Reads, orders, and paginates Objects for a ListObjectsV2 response.
@@ -15,6 +17,10 @@ interface ListObjectsV2PageInput {
  * called, as it is for the first version of the operation, so a denied request
  * cannot examine Object keys or sizes.
  *
+ * The keys, the prefix, the delimiter and the key a first page started after
+ * are written the way the listing asked for them, which is encoded or as they
+ * are stored. A continuation token is not, because it is opaque either way.
+ *
  * The keys on a page are chosen exactly as ListObjects chooses them. What
  * differs is how a caller says where to carry on from: a continuation token
  * from the previous page, which wins, or a StartAfter key that positions the

package/dist/service/s3/command/list-objects-v2/list-objects-v2-page-builder.js

@@ -9,6 +9,10 @@ import { simS3ContinuationToken, simS3ContinuationTokenKey, } from "./list-objec
  * called, as it is for the first version of the operation, so a denied request
  * cannot examine Object keys or sizes.
  *
+ * The keys, the prefix, the delimiter and the key a first page started after
+ * are written the way the listing asked for them, which is encoded or as they
+ * are stored. A continuation token is not, because it is opaque either way.
+ *
  * The keys on a page are chosen exactly as ListObjects chooses them. What
  * differs is how a caller says where to carry on from: a continuation token
  * from the previous page, which wins, or a StartAfter key that positions the
@@ -27,12 +31,13 @@ export class ListObjectsV2PageBuilder {
             startAfter: this.resumeAfter(input),
             maxKeys: input.maxKeys,
         });
+        const { encoding } = input;
         return {
-            Contents: simS3ObjectSummaries(page.objects),
-            CommonPrefixes: simS3CommonPrefixes(page.commonPrefixes),
+            Contents: encoding.summaries(simS3ObjectSummaries(page.objects)),
+            CommonPrefixes: encoding.commonPrefixes(simS3CommonPrefixes(page.commonPrefixes)),
             Name: input.bucket.bucketName,
-            Prefix: input.prefix,
-            Delimiter: input.delimiter,
+            Prefix: encoding.value(input.prefix),
+            Delimiter: encoding.value(input.delimiter),
             MaxKeys: input.maxKeys,
             KeyCount: page.objects.length + page.commonPrefixes.length,
             IsTruncated: page.isTruncated,
@@ -40,7 +45,8 @@ export class ListObjectsV2PageBuilder {
             NextContinuationToken: page.resumeAfter === undefined
                 ? undefined
                 : simS3ContinuationToken(page.resumeAfter),
-            StartAfter: input.startAfter,
+            StartAfter: encoding.value(input.startAfter),
+            EncodingType: encoding.encodingType,
             $metadata: {},
         };
     }