@kensio/yulin 1.9.0 → 1.10.0

package/dist/service/sns/message/sim-sns-message-subject.js

@@ -0,0 +1,74 @@
+import { assertDefined } from "../../../util/type-guard/defined.js";
+import { SimSnsInvalidParameterException } from "../error/sim-sns.error.js";
+/**
+ * Real SNS states the limit as fewer than 100 characters, so a subject of
+ * exactly 100 is already too long.
+ */
+const maximumCharacters = 100;
+const lastC0Control = 0x1f;
+const firstC1Control = 0x7f;
+const lastC1Control = 0x9f;
+/**
+ * Whether a code point is one real SNS refuses in a subject.
+ *
+ * The refused set is the C0 controls, which is where a line break lives, and
+ * delete through the C1 controls. Everything else is allowed, because a subject
+ * is UTF-8 text rather than ASCII text: one carrying an accented character or
+ * an emoji reaches AWS, so it has to reach this simulation too.
+ */
+function isControlCharacter(codePoint) {
+    if (codePoint <= lastC0Control) {
+        return true;
+    }
+    return codePoint >= firstC1Control && codePoint <= lastC1Control;
+}
+/**
+ * The subject of one published message.
+ *
+ * Only the email protocols put a subject anywhere a person sees it, and neither
+ * is simulated. It is still validated and carried, because it travels in the
+ * SNS envelope a queue or a function receives, where a consumer can read it.
+ */
+export class SimSnsMessageSubject {
+    value;
+    constructor(value) {
+        this.value = value;
+    }
+    /**
+     * Read the subject a request carries, if it carries one.
+     */
+    static optional(value) {
+        if (value === undefined) {
+            return undefined;
+        }
+        return this.of(value);
+    }
+    /**
+     * Read a subject, refusing one real SNS would refuse.
+     */
+    static of(value) {
+        if (value.length >= maximumCharacters || this.hasControlCharacter(value)) {
+            throw new SimSnsInvalidParameterException(`Invalid parameter: Subject: Must be UTF-8 text with no line breaks ` +
+                `or control characters, and fewer than ` +
+                `${String(maximumCharacters)} characters long`);
+        }
+        return new this(value);
+    }
+    /**
+     * Whether a subject carries a character real SNS refuses.
+     *
+     * Iterating a string yields whole code points, so a surrogate pair is one
+     * character here rather than two unpaired halves.
+     */
+    static hasControlCharacter(value) {
+        for (const character of value) {
+            const codePoint = character.codePointAt(0);
+            assertDefined(codePoint, "Every character has a first code point");
+            if (isControlCharacter(codePoint)) {
+                return true;
+            }
+        }
+        return false;
+    }
+}
+//# sourceMappingURL=sim-sns-message-subject.js.map

package/dist/service/sns/message/sim-sns-message-subject.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-message-subject.js","sourceRoot":"","sources":["../../../../src/service/sns/message/sim-sns-message-subject.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,EAAE,+BAA+B,EAAE,MAAM,2BAA2B,CAAC;AAE5E;;;GAGG;AACH,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAE9B,MAAM,aAAa,GAAG,IAAI,CAAC;AAC3B,MAAM,cAAc,GAAG,IAAI,CAAC;AAC5B,MAAM,aAAa,GAAG,IAAI,CAAC;AAE3B;;;;;;;GAOG;AACH,SAAS,kBAAkB,CAAC,SAAiB;IAC3C,IAAI,SAAS,IAAI,aAAa,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,SAAS,IAAI,cAAc,IAAI,SAAS,IAAI,aAAa,CAAC;AACnE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,OAAO,oBAAoB;IACf,KAAK,CAAS;IAE9B,YAAoB,KAAa;QAC/B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,QAAQ,CAAC,KAAyB;QACvC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,EAAE,CAAC,KAAa;QACrB,IAAI,KAAK,CAAC,MAAM,IAAI,iBAAiB,IAAI,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;YACzE,MAAM,IAAI,+BAA+B,CACvC,qEAAqE;gBACnE,wCAAwC;gBACxC,GAAG,MAAM,CAAC,iBAAiB,CAAC,kBAAkB,CACjD,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IAED;;;;;OAKG;IACK,MAAM,CAAC,mBAAmB,CAAC,KAAa;QAC9C,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE,CAAC;YAC9B,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;YAE3C,aAAa,CAAC,SAAS,EAAE,wCAAwC,CAAC,CAAC;YAEnE,IAAI,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC;gBAClC,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}

package/dist/service/sns/message/sim-sns-published-message.d.ts

@@ -0,0 +1,55 @@
+import type { SimSnsMessageAttributes } from "./sim-sns-message-attributes.js";
+import { SimSnsMessageBody } from "./sim-sns-message-body.js";
+import { SimSnsMessageSubject } from "./sim-sns-message-subject.js";
+/**
+ * The largest a published message may be, counting its attributes.
+ *
+ * Real SNS states the limit as 256 KB for a publish and counts the message
+ * attributes against it alongside the body, so both are added up here. The
+ * exact accounting AWS uses for an attribute is not documented, so this counts
+ * the bytes of each attribute's name, data type and value.
+ */
+export declare const simSnsMaximumPublishBytes = 262144;
+/**
+ * Refuse a publish weighing more than one message is allowed to.
+ *
+ * A publish of its own is held to the limit here. A batch is held to the same
+ * limit over the whole batch rather than over each entry, so it does its own
+ * checking and reports its own error.
+ */
+export declare function assertSimSnsMessageWithinLimit(byteSize: number): void;
+/**
+ * One message as a publisher describes it, with the request's own wrapping
+ * removed.
+ */
+export interface SimSnsPublishedMessageInput {
+    readonly message: string | undefined;
+    readonly subject: string | undefined;
+    readonly attributes: SimSnsMessageAttributes;
+}
+/**
+ * One message a publish put on a topic.
+ *
+ * A topic keeps no messages, so nothing holds this after the publish that made
+ * it. It exists so that everything a message has to be checked for happens in
+ * one place, whether the publish was one of its own or one entry of a batch.
+ * The size limit is the one thing left to the caller, because a batch is held
+ * to it over the whole batch rather than over each entry.
+ */
+export declare class SimSnsPublishedMessage {
+    readonly messageId: string;
+    readonly body: SimSnsMessageBody;
+    readonly subject: SimSnsMessageSubject | undefined;
+    readonly attributes: SimSnsMessageAttributes;
+    readonly publishedAt: Date;
+    private constructor();
+    /**
+     * Read the message a publish describes, refusing one real SNS would refuse.
+     */
+    static of(input: SimSnsPublishedMessageInput, publishedAt: Date): SimSnsPublishedMessage;
+    /**
+     * What this message weighs against the publish size limit.
+     */
+    get byteSize(): number;
+}
+//# sourceMappingURL=sim-sns-published-message.d.ts.map

package/dist/service/sns/message/sim-sns-published-message.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-published-message.d.ts","sourceRoot":"","sources":["../../../../src/service/sns/message/sim-sns-published-message.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAEpE;;;;;;;GAOG;AACH,eAAO,MAAM,yBAAyB,SAAU,CAAC;AAEjD;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAQrE;AAED;;;GAGG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,UAAU,EAAE,uBAAuB,CAAC;CAC9C;AAUD;;;;;;;;GAQG;AACH,qBAAa,sBAAsB;IACjC,SAAgB,SAAS,EAAE,MAAM,CAAC;IAClC,SAAgB,IAAI,EAAE,iBAAiB,CAAC;IACxC,SAAgB,OAAO,EAAE,oBAAoB,GAAG,SAAS,CAAC;IAC1D,SAAgB,UAAU,EAAE,uBAAuB,CAAC;IACpD,SAAgB,WAAW,EAAE,IAAI,CAAC;IAElC,OAAO,eAMN;IAED;;OAEG;IACH,MAAM,CAAC,EAAE,CACP,KAAK,EAAE,2BAA2B,EAClC,WAAW,EAAE,IAAI,GAChB,sBAAsB,CAQxB;IAED;;OAEG;IACH,IAAI,QAAQ,IAAI,MAAM,CAErB;CACF"}

package/dist/service/sns/message/sim-sns-published-message.js

@@ -0,0 +1,69 @@
+import { randomUUID } from "node:crypto";
+import { SimSnsInvalidParameterException } from "../error/sim-sns.error.js";
+import { SimSnsMessageBody } from "./sim-sns-message-body.js";
+import { SimSnsMessageSubject } from "./sim-sns-message-subject.js";
+/**
+ * The largest a published message may be, counting its attributes.
+ *
+ * Real SNS states the limit as 256 KB for a publish and counts the message
+ * attributes against it alongside the body, so both are added up here. The
+ * exact accounting AWS uses for an attribute is not documented, so this counts
+ * the bytes of each attribute's name, data type and value.
+ */
+export const simSnsMaximumPublishBytes = 262_144;
+/**
+ * Refuse a publish weighing more than one message is allowed to.
+ *
+ * A publish of its own is held to the limit here. A batch is held to the same
+ * limit over the whole batch rather than over each entry, so it does its own
+ * checking and reports its own error.
+ */
+export function assertSimSnsMessageWithinLimit(byteSize) {
+    if (byteSize > simSnsMaximumPublishBytes) {
+        throw new SimSnsInvalidParameterException(`Invalid parameter: Message too long. A message and its attributes may ` +
+            `be up to ${String(simSnsMaximumPublishBytes)} bytes, and this one ` +
+            `is ${String(byteSize)} bytes.`);
+    }
+}
+/**
+ * One message a publish put on a topic.
+ *
+ * A topic keeps no messages, so nothing holds this after the publish that made
+ * it. It exists so that everything a message has to be checked for happens in
+ * one place, whether the publish was one of its own or one entry of a batch.
+ * The size limit is the one thing left to the caller, because a batch is held
+ * to it over the whole batch rather than over each entry.
+ */
+export class SimSnsPublishedMessage {
+    messageId;
+    body;
+    subject;
+    attributes;
+    publishedAt;
+    constructor(properties) {
+        this.messageId = properties.messageId;
+        this.body = properties.body;
+        this.subject = properties.subject;
+        this.attributes = properties.attributes;
+        this.publishedAt = properties.publishedAt;
+    }
+    /**
+     * Read the message a publish describes, refusing one real SNS would refuse.
+     */
+    static of(input, publishedAt) {
+        return new this({
+            messageId: randomUUID(),
+            body: SimSnsMessageBody.of(input.message),
+            subject: SimSnsMessageSubject.optional(input.subject),
+            attributes: input.attributes,
+            publishedAt,
+        });
+    }
+    /**
+     * What this message weighs against the publish size limit.
+     */
+    get byteSize() {
+        return this.body.byteSize + this.attributes.byteSize;
+    }
+}
+//# sourceMappingURL=sim-sns-published-message.js.map

package/dist/service/sns/message/sim-sns-published-message.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-published-message.js","sourceRoot":"","sources":["../../../../src/service/sns/message/sim-sns-published-message.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,+BAA+B,EAAE,MAAM,2BAA2B,CAAC;AAE5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAEpE;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,OAAO,CAAC;AAEjD;;;;;;GAMG;AACH,MAAM,UAAU,8BAA8B,CAAC,QAAgB;IAC7D,IAAI,QAAQ,GAAG,yBAAyB,EAAE,CAAC;QACzC,MAAM,IAAI,+BAA+B,CACvC,wEAAwE;YACtE,YAAY,MAAM,CAAC,yBAAyB,CAAC,uBAAuB;YACpE,MAAM,MAAM,CAAC,QAAQ,CAAC,SAAS,CAClC,CAAC;IACJ,CAAC;AACH,CAAC;AAoBD;;;;;;;;GAQG;AACH,MAAM,OAAO,sBAAsB;IACjB,SAAS,CAAS;IAClB,IAAI,CAAoB;IACxB,OAAO,CAAmC;IAC1C,UAAU,CAA0B;IACpC,WAAW,CAAO;IAElC,YAAoB,UAA4C;QAC9D,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;QAC5B,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;QAClC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,EAAE,CACP,KAAkC,EAClC,WAAiB;QAEjB,OAAO,IAAI,IAAI,CAAC;YACd,SAAS,EAAE,UAAU,EAAE;YACvB,IAAI,EAAE,iBAAiB,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;YACzC,OAAO,EAAE,oBAAoB,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;YACrD,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,WAAW;SACZ,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;IACvD,CAAC;CACF"}

package/dist/service/sns/sdk/sim-sns-sdk-command-router.d.ts

@@ -0,0 +1,18 @@
+import { type SimSdkCommandRoute, type SimSdkCommandRouter } from "../../../sdk/index.js";
+import type { SimSns } from "../sim-sns.js";
+/**
+ * Routes intercepted SDK Commands to one scoped simulated SNS.
+ */
+export declare class SimSnsSdkCommandRouter implements SimSdkCommandRouter {
+    private readonly routes;
+    constructor(simSns: SimSns);
+    /**
+     * The SDK Command names simulated SNS can handle.
+     */
+    supportedCommandNames(): readonly string[];
+    /**
+     * Get the route for an SDK Command name, if simulated SNS supports it.
+     */
+    route(commandName: string): SimSdkCommandRoute | undefined;
+}
+//# sourceMappingURL=sim-sns-sdk-command-router.d.ts.map

package/dist/service/sns/sdk/sim-sns-sdk-command-router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-sdk-command-router.d.ts","sourceRoot":"","sources":["../../../../src/service/sns/sdk/sim-sns-sdk-command-router.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACzB,MAAM,uBAAuB,CAAC;AAoB/B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAE5C;;GAEG;AACH,qBAAa,sBAAuB,YAAW,mBAAmB;IAChE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0C;IAEjE,YAAY,MAAM,EAAE,MAAM,EA2GzB;IAED;;OAEG;IACH,qBAAqB,IAAI,SAAS,MAAM,EAAE,CAEzC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAEzD;CACF"}

package/dist/service/sns/sdk/sim-sns-sdk-command-router.js

@@ -0,0 +1,76 @@
+import { simSdkCallerOptions, } from "../../../sdk/index.js";
+/**
+ * Routes intercepted SDK Commands to one scoped simulated SNS.
+ */
+export class SimSnsSdkCommandRouter {
+    routes;
+    constructor(simSns) {
+        this.routes = new Map([
+            [
+                "CreateTopicCommand",
+                async (command, context) => await simSns.createTopic(command, simSdkCallerOptions(context)),
+            ],
+            [
+                "ListTopicsCommand",
+                async (command, context) => await simSns.listTopics(command, simSdkCallerOptions(context)),
+            ],
+            [
+                "DeleteTopicCommand",
+                async (command, context) => await simSns.deleteTopic(command, simSdkCallerOptions(context)),
+            ],
+            [
+                "GetTopicAttributesCommand",
+                async (command, context) => await simSns.getTopicAttributes(command, simSdkCallerOptions(context)),
+            ],
+            [
+                "SetTopicAttributesCommand",
+                async (command, context) => await simSns.setTopicAttributes(command, simSdkCallerOptions(context)),
+            ],
+            [
+                "SubscribeCommand",
+                async (command, context) => await simSns.subscribe(command, simSdkCallerOptions(context)),
+            ],
+            [
+                "UnsubscribeCommand",
+                async (command, context) => await simSns.unsubscribe(command, simSdkCallerOptions(context)),
+            ],
+            [
+                "ListSubscriptionsCommand",
+                async (command, context) => await simSns.listSubscriptions(command, simSdkCallerOptions(context)),
+            ],
+            [
+                "ListSubscriptionsByTopicCommand",
+                async (command, context) => await simSns.listSubscriptionsByTopic(command, simSdkCallerOptions(context)),
+            ],
+            [
+                "GetSubscriptionAttributesCommand",
+                async (command, context) => await simSns.getSubscriptionAttributes(command, simSdkCallerOptions(context)),
+            ],
+            [
+                "SetSubscriptionAttributesCommand",
+                async (command, context) => await simSns.setSubscriptionAttributes(command, simSdkCallerOptions(context)),
+            ],
+            [
+                "PublishCommand",
+                async (command, context) => await simSns.publish(command, simSdkCallerOptions(context)),
+            ],
+            [
+                "PublishBatchCommand",
+                async (command, context) => await simSns.publishBatch(command, simSdkCallerOptions(context)),
+            ],
+        ]);
+    }
+    /**
+     * The SDK Command names simulated SNS can handle.
+     */
+    supportedCommandNames() {
+        return this.routes.keys().toArray();
+    }
+    /**
+     * Get the route for an SDK Command name, if simulated SNS supports it.
+     */
+    route(commandName) {
+        return this.routes.get(commandName);
+    }
+}
+//# sourceMappingURL=sim-sns-sdk-command-router.js.map

package/dist/service/sns/sdk/sim-sns-sdk-command-router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-sdk-command-router.js","sourceRoot":"","sources":["../../../../src/service/sns/sdk/sim-sns-sdk-command-router.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,GAGpB,MAAM,uBAAuB,CAAC;AAsB/B;;GAEG;AACH,MAAM,OAAO,sBAAsB;IAChB,MAAM,CAA0C;IAEjE,YAAY,MAAc;QACxB,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,CAA6B;YAChD;gBACE,oBAAoB;gBACpB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,WAAW,CACtB,OAAgC,EAChC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,mBAAmB;gBACnB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,UAAU,CACrB,OAA+B,EAC/B,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,oBAAoB;gBACpB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,WAAW,CACtB,OAAgC,EAChC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,2BAA2B;gBAC3B,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,kBAAkB,CAC7B,OAAuC,EACvC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,2BAA2B;gBAC3B,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,kBAAkB,CAC7B,OAAuC,EACvC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,kBAAkB;gBAClB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,SAAS,CACpB,OAA8B,EAC9B,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,oBAAoB;gBACpB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,WAAW,CACtB,OAAgC,EAChC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,0BAA0B;gBAC1B,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,iBAAiB,CAC5B,OAAsC,EACtC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,iCAAiC;gBACjC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,wBAAwB,CACnC,OAA6C,EAC7C,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,kCAAkC;gBAClC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,yBAAyB,CACpC,OAA8C,EAC9C,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,kCAAkC;gBAClC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,yBAAyB,CACpC,OAA8C,EAC9C,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,gBAAgB;gBAChB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,OAAO,CAClB,OAA4B,EAC5B,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,qBAAqB;gBACrB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,MAAM,CAAC,YAAY,CACvB,OAAiC,EACjC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;SACF,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,qBAAqB;QACnB,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAmB;QACvB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACtC,CAAC;CACF"}

package/dist/service/sns/signature/sim-sns-certificate.d.ts

@@ -0,0 +1,30 @@
+import type { KeyObject } from "node:crypto";
+interface SimSnsCertificateInput {
+    readonly privateKey: KeyObject;
+    readonly publicKey: KeyObject;
+    readonly subjectName: string;
+    readonly serialNumber: Buffer;
+}
+/**
+ * Build a self-signed X.509 certificate for a key pair, as PEM.
+ *
+ * It is the smallest certificate that is still a certificate: a version, a
+ * serial number, one common name as both issuer and subject, a validity window,
+ * the public key, and an RSA signature over all of it. There are no extensions,
+ * because nothing verifying an SNS message looks at any.
+ */
+export declare function simSnsSelfSignedCertificatePem(input: SimSnsCertificateInput): string;
+/**
+ * Read a certificate serial number out of a digest of the public key.
+ *
+ * A real certificate authority allocates serial numbers. Nothing here has one
+ * to allocate, and a serial derived from the key is unique in the only way that
+ * matters: two simulated scopes with different keys have different serials.
+ *
+ * The top bit of the first byte is cleared, because a certificate serial number
+ * has to be positive and a DER integer is signed. Clearing it is one byte of
+ * uniqueness given up for a serial that never needs a leading zero.
+ */
+export declare function simSnsSerialNumber(digest: Buffer): Buffer;
+export {};
+//# sourceMappingURL=sim-sns-certificate.d.ts.map

package/dist/service/sns/signature/sim-sns-certificate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-certificate.d.ts","sourceRoot":"","sources":["../../../../src/service/sns/signature/sim-sns-certificate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AA6D7C,UAAU,sBAAsB;IAC9B,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAuED;;;;;;;GAOG;AACH,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,sBAAsB,GAC5B,MAAM,CAaR;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAMzD"}

package/dist/service/sns/signature/sim-sns-certificate.js

@@ -0,0 +1,110 @@
+import { createSign } from "node:crypto";
+import { derBitStringTag, derBytes, derExplicitZeroTag, derIntegerTag, derNullTag, derObjectIdentifierTag, derPrintableStringTag, derSequenceTag, derSetTag, derText, derUtcTimeTag, derValue, } from "./sim-sns-der.js";
+/**
+ * The body bytes of the sha1WithRSAEncryption object identifier,
+ * 1.2.840.113549.1.1.5.
+ *
+ * This is the algorithm signature version 1 names, which is the version real
+ * SNS signs with unless a topic opts into version 2.
+ */
+const sha1WithRsaEncryption = [
+    0x2a, 0x86, 0x48, 0x86, 0xf7, 0x0d, 0x01, 0x01, 0x05,
+];
+/**
+ * The body bytes of the commonName object identifier, 2.5.4.3.
+ */
+const commonName = [0x55, 0x04, 0x03];
+/**
+ * The version number of an X.509 v3 certificate, which counts from zero.
+ */
+const version3 = 2;
+/**
+ * When the certificate becomes valid, and when it stops being valid.
+ *
+ * Both are fixed rather than taken from the clock, so the same key always
+ * produces the same certificate and nothing in a test suite depends on when it
+ * ran. The end is before 2050 because a certificate valid past then cannot use
+ * the UTCTime encoding, and nothing here is a real trust anchor that ought to
+ * expire.
+ */
+const notBefore = new Date("2000-01-01T00:00:00.000Z");
+const notAfter = new Date("2049-12-31T23:59:59.000Z");
+/**
+ * How many bytes of the public key digest become the serial number.
+ */
+const serialNumberBytes = 8;
+/**
+ * How many base64 characters a PEM document puts on one line.
+ */
+const pemLineLength = 64;
+/**
+ * A UTCTime, which is the two digit year form certificates date things with.
+ *
+ * Two digits means the year has to be before 2050, which is what X.509 says: a
+ * certificate valid past then carries a GeneralizedTime instead.
+ */
+function utcTime(instant) {
+    const digits = instant.toISOString().replaceAll(/\D/gu, "");
+    return derText(derUtcTimeTag, `${digits.slice(2, 14)}Z`);
+}
+/**
+ * Wrap DER bytes as the PEM document a verifier reads.
+ */
+function toPem(der) {
+    const base64 = der.toString("base64");
+    const lines = Array.from({ length: Math.ceil(base64.length / pemLineLength) }, (_unused, index) => base64.slice(index * pemLineLength, (index + 1) * pemLineLength));
+    return `-----BEGIN CERTIFICATE-----\n${lines.join("\n")}\n-----END CERTIFICATE-----\n`;
+}
+/**
+ * The algorithm identifier both the certificate body and its signature carry.
+ */
+function signatureAlgorithm() {
+    return derValue(derSequenceTag, derBytes(derObjectIdentifierTag, ...sha1WithRsaEncryption), derValue(derNullTag));
+}
+/**
+ * An X.509 Name carrying one common name, which is all this certificate needs.
+ */
+function distinguishedName(name) {
+    const attribute = derValue(derSequenceTag, derBytes(derObjectIdentifierTag, ...commonName), derText(derPrintableStringTag, name));
+    return derValue(derSequenceTag, derValue(derSetTag, attribute));
+}
+/**
+ * The part of a certificate that is signed.
+ */
+function certificateBody(input) {
+    const name = distinguishedName(input.subjectName);
+    return derValue(derSequenceTag, derValue(derExplicitZeroTag, derBytes(derIntegerTag, version3)), derValue(derIntegerTag, input.serialNumber), signatureAlgorithm(), name, derValue(derSequenceTag, utcTime(notBefore), utcTime(notAfter)), 
+    // Self-signed, so the issuer and the subject are the same Name.
+    name, input.publicKey.export({ type: "spki", format: "der" }));
+}
+/**
+ * Build a self-signed X.509 certificate for a key pair, as PEM.
+ *
+ * It is the smallest certificate that is still a certificate: a version, a
+ * serial number, one common name as both issuer and subject, a validity window,
+ * the public key, and an RSA signature over all of it. There are no extensions,
+ * because nothing verifying an SNS message looks at any.
+ */
+export function simSnsSelfSignedCertificatePem(input) {
+    const body = certificateBody(input);
+    const signature = createSign("RSA-SHA1").update(body).sign(input.privateKey);
+    const unusedBits = Buffer.from([0]);
+    return toPem(derValue(derSequenceTag, body, signatureAlgorithm(), derValue(derBitStringTag, unusedBits, signature)));
+}
+/**
+ * Read a certificate serial number out of a digest of the public key.
+ *
+ * A real certificate authority allocates serial numbers. Nothing here has one
+ * to allocate, and a serial derived from the key is unique in the only way that
+ * matters: two simulated scopes with different keys have different serials.
+ *
+ * The top bit of the first byte is cleared, because a certificate serial number
+ * has to be positive and a DER integer is signed. Clearing it is one byte of
+ * uniqueness given up for a serial that never needs a leading zero.
+ */
+export function simSnsSerialNumber(digest) {
+    const serial = Buffer.from(digest.subarray(0, serialNumberBytes));
+    serial.writeUInt8(serial.readUInt8(0) & 0x7f, 0);
+    return serial;
+}
+//# sourceMappingURL=sim-sns-certificate.js.map

package/dist/service/sns/signature/sim-sns-certificate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-certificate.js","sourceRoot":"","sources":["../../../../src/service/sns/signature/sim-sns-certificate.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,eAAe,EACf,QAAQ,EACR,kBAAkB,EAClB,aAAa,EACb,UAAU,EACV,sBAAsB,EACtB,qBAAqB,EACrB,cAAc,EACd,SAAS,EACT,OAAO,EACP,aAAa,EACb,QAAQ,GACT,MAAM,kBAAkB,CAAC;AAE1B;;;;;;GAMG;AACH,MAAM,qBAAqB,GAAG;IAC5B,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;CACrD,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAEtC;;GAEG;AACH,MAAM,QAAQ,GAAG,CAAC,CAAC;AAEnB;;;;;;;;GAQG;AACH,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,0BAA0B,CAAC,CAAC;AAEvD,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,0BAA0B,CAAC,CAAC;AAEtD;;GAEG;AACH,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAE5B;;GAEG;AACH,MAAM,aAAa,GAAG,EAAE,CAAC;AASzB;;;;;GAKG;AACH,SAAS,OAAO,CAAC,OAAa;IAC5B,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAE5D,OAAO,OAAO,CAAC,aAAa,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;AAC3D,CAAC;AAED;;GAEG;AACH,SAAS,KAAK,CAAC,GAAW;IACxB,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CACtB,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,aAAa,CAAC,EAAE,EACpD,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CACjB,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,aAAa,EAAE,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,aAAa,CAAC,CACnE,CAAC;IAEF,OAAO,gCAAgC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,+BAA+B,CAAC;AACzF,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB;IACzB,OAAO,QAAQ,CACb,cAAc,EACd,QAAQ,CAAC,sBAAsB,EAAE,GAAG,qBAAqB,CAAC,EAC1D,QAAQ,CAAC,UAAU,CAAC,CACrB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CAAC,IAAY;IACrC,MAAM,SAAS,GAAG,QAAQ,CACxB,cAAc,EACd,QAAQ,CAAC,sBAAsB,EAAE,GAAG,UAAU,CAAC,EAC/C,OAAO,CAAC,qBAAqB,EAAE,IAAI,CAAC,CACrC,CAAC;IAEF,OAAO,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;AAClE,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,KAA6B;IACpD,MAAM,IAAI,GAAG,iBAAiB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAElD,OAAO,QAAQ,CACb,cAAc,EACd,QAAQ,CAAC,kBAAkB,EAAE,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,EAC/D,QAAQ,CAAC,aAAa,EAAE,KAAK,CAAC,YAAY,CAAC,EAC3C,kBAAkB,EAAE,EACpB,IAAI,EACJ,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC/D,gEAAgE;IAChE,IAAI,EACJ,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CACxD,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,8BAA8B,CAC5C,KAA6B;IAE7B,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC7E,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEpC,OAAO,KAAK,CACV,QAAQ,CACN,cAAc,EACd,IAAI,EACJ,kBAAkB,EAAE,EACpB,QAAQ,CAAC,eAAe,EAAE,UAAU,EAAE,SAAS,CAAC,CACjD,CACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAElE,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC;IAEjD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/service/sns/signature/sim-sns-der.d.ts

@@ -0,0 +1,40 @@
+/**
+ * The little bit of DER writing a self-signed certificate needs.
+ *
+ * Node's `crypto` reads an X.509 certificate but does not write one, and the
+ * signature a simulated SNS message carries is only useful if a verifier can
+ * check it against a certificate. So the certificate is assembled by hand, and
+ * this is the encoding it is assembled with: every ASN.1 value is a tag, a
+ * length and a body, and that is the whole of what is here.
+ *
+ * The tags are exported alongside it because the shapes X.509 uses are the
+ * caller's business rather than this module's. It is not a general ASN.1
+ * encoder and does not try to be one.
+ */
+export declare const derSequenceTag = 48;
+export declare const derSetTag = 49;
+export declare const derIntegerTag = 2;
+export declare const derBitStringTag = 3;
+export declare const derNullTag = 5;
+export declare const derObjectIdentifierTag = 6;
+export declare const derPrintableStringTag = 19;
+export declare const derUtcTimeTag = 23;
+/**
+ * The tag of an explicitly tagged context specific zero, which is how a
+ * certificate carries its version.
+ */
+export declare const derExplicitZeroTag = 160;
+/**
+ * One ASN.1 value: a tag, the length of what follows, and what follows.
+ */
+export declare function derValue(tag: number, ...contents: Buffer[]): Buffer;
+/**
+ * A DER value holding ASCII text, which is what a common name and a UTCTime
+ * both are.
+ */
+export declare function derText(tag: number, value: string): Buffer;
+/**
+ * A DER value holding bytes given one at a time.
+ */
+export declare function derBytes(tag: number, ...bytes: number[]): Buffer;
+//# sourceMappingURL=sim-sns-der.d.ts.map

package/dist/service/sns/signature/sim-sns-der.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-der.d.ts","sourceRoot":"","sources":["../../../../src/service/sns/signature/sim-sns-der.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,eAAO,MAAM,cAAc,KAAO,CAAC;AAEnC,eAAO,MAAM,SAAS,KAAO,CAAC;AAE9B,eAAO,MAAM,aAAa,IAAO,CAAC;AAElC,eAAO,MAAM,eAAe,IAAO,CAAC;AAEpC,eAAO,MAAM,UAAU,IAAO,CAAC;AAE/B,eAAO,MAAM,sBAAsB,IAAO,CAAC;AAE3C,eAAO,MAAM,qBAAqB,KAAO,CAAC;AAE1C,eAAO,MAAM,aAAa,KAAO,CAAC;AAElC;;;GAGG;AACH,eAAO,MAAM,kBAAkB,MAAO,CAAC;AAwBvC;;GAEG;AACH,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,CAInE;AAED;;;GAGG;AACH,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED;;GAEG;AACH,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,CAEhE"}

package/dist/service/sns/signature/sim-sns-der.js

@@ -0,0 +1,64 @@
+/**
+ * The little bit of DER writing a self-signed certificate needs.
+ *
+ * Node's `crypto` reads an X.509 certificate but does not write one, and the
+ * signature a simulated SNS message carries is only useful if a verifier can
+ * check it against a certificate. So the certificate is assembled by hand, and
+ * this is the encoding it is assembled with: every ASN.1 value is a tag, a
+ * length and a body, and that is the whole of what is here.
+ *
+ * The tags are exported alongside it because the shapes X.509 uses are the
+ * caller's business rather than this module's. It is not a general ASN.1
+ * encoder and does not try to be one.
+ */
+export const derSequenceTag = 0x30;
+export const derSetTag = 0x31;
+export const derIntegerTag = 0x02;
+export const derBitStringTag = 0x03;
+export const derNullTag = 0x05;
+export const derObjectIdentifierTag = 0x06;
+export const derPrintableStringTag = 0x13;
+export const derUtcTimeTag = 0x17;
+/**
+ * The tag of an explicitly tagged context specific zero, which is how a
+ * certificate carries its version.
+ */
+export const derExplicitZeroTag = 0xa0;
+/**
+ * The largest length DER writes in the length byte itself.
+ */
+const shortFormLimit = 0x80;
+/**
+ * Encode a length in DER's short or long form.
+ */
+function derLength(length) {
+    if (length < shortFormLimit) {
+        return Buffer.from([length]);
+    }
+    const bytes = [];
+    for (let rest = length; rest > 0; rest = Math.floor(rest / 256)) {
+        bytes.unshift(rest % 256);
+    }
+    return Buffer.from([shortFormLimit | bytes.length, ...bytes]);
+}
+/**
+ * One ASN.1 value: a tag, the length of what follows, and what follows.
+ */
+export function derValue(tag, ...contents) {
+    const body = Buffer.concat(contents);
+    return Buffer.concat([Buffer.from([tag]), derLength(body.length), body]);
+}
+/**
+ * A DER value holding ASCII text, which is what a common name and a UTCTime
+ * both are.
+ */
+export function derText(tag, value) {
+    return derValue(tag, Buffer.from(value, "ascii"));
+}
+/**
+ * A DER value holding bytes given one at a time.
+ */
+export function derBytes(tag, ...bytes) {
+    return derValue(tag, Buffer.from(bytes));
+}
+//# sourceMappingURL=sim-sns-der.js.map

package/dist/service/sns/signature/sim-sns-der.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-der.js","sourceRoot":"","sources":["../../../../src/service/sns/signature/sim-sns-der.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,CAAC;AAEnC,MAAM,CAAC,MAAM,SAAS,GAAG,IAAI,CAAC;AAE9B,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,CAAC;AAElC,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,CAAC;AAEpC,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,CAAC;AAE/B,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,CAAC;AAE3C,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,CAAC;AAE1C,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,CAAC;AAElC;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAEvC;;GAEG;AACH,MAAM,cAAc,GAAG,IAAI,CAAC;AAE5B;;GAEG;AACH,SAAS,SAAS,CAAC,MAAc;IAC/B,IAAI,MAAM,GAAG,cAAc,EAAE,CAAC;QAC5B,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/B,CAAC;IAED,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,IAAI,IAAI,GAAG,MAAM,EAAE,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;QAChE,KAAK,CAAC,OAAO,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,cAAc,GAAG,KAAK,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC;AAChE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,QAAQ,CAAC,GAAW,EAAE,GAAG,QAAkB;IACzD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAErC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,OAAO,CAAC,GAAW,EAAE,KAAa;IAChD,OAAO,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;AACpD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,QAAQ,CAAC,GAAW,EAAE,GAAG,KAAe;IACtD,OAAO,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AAC3C,CAAC"}

package/dist/service/sns/signature/sim-sns-host.d.ts

@@ -0,0 +1,28 @@
+/**
+ * The hostname the URLs in a delivered message name.
+ *
+ * Real SNS puts `sns.<region>.amazonaws.com` in the `SigningCertURL` and the
+ * `UnsubscribeURL` of every message it delivers. A simulated message names
+ * `sns.<region>.yulin.invalid` instead, because neither URL can be fetched:
+ * simulated SNS is not served over HTTP, and the certificate is handed out
+ * in process by `SimSns.signingCertificate`.
+ *
+ * `.invalid` is the reserved top level domain for exactly this. A consumer that
+ * does try to fetch one of these URLs fails to resolve it, rather than reaching
+ * real AWS and being answered by a certificate that signed nothing here.
+ *
+ * This is a divergence a real signature verifier notices. `sns-validator`
+ * hard-codes an `amazonaws.com` certificate host and fetches the URL itself, so
+ * it cannot verify a simulated message as it stands. Verifying one means
+ * checking the signature against the certificate `SimSns.signingCertificate`
+ * hands over, which is what the docs show.
+ */
+export declare function simSnsHost(regionName: string): string;
+/**
+ * The URL a delivered message names to say how to stop receiving them.
+ *
+ * Real SNS carries this in every envelope, and it is the same shape here with
+ * the simulated host in front of it.
+ */
+export declare function simSnsUnsubscribeUrl(regionName: string, subscriptionArn: string): string;
+//# sourceMappingURL=sim-sns-host.d.ts.map

package/dist/service/sns/signature/sim-sns-host.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-host.d.ts","sourceRoot":"","sources":["../../../../src/service/sns/signature/sim-sns-host.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAErD;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,MAAM,EAClB,eAAe,EAAE,MAAM,GACtB,MAAM,CAKR"}