@kensio/yulin 0.34.2 → 0.36.0

package/dist/serve/http/local-server/sim-aws-local-server.d.ts

@@ -7,12 +7,23 @@ interface SimAwsLocalServerProperties {
  * Useful for local integration testing and local development.
  */
 export declare class SimAwsLocalServer {
-    private readonly simAwsHttp;
-    private readonly nodeFetchHttpAdapter;
+    private readonly requestHandler;
     private readonly server;
+    private readonly dnsServer;
     constructor(properties?: SimAwsLocalServerProperties);
     /**
      * Start serving simulated AWS services on localhost.
+     *
+     * DNS comes up alongside HTTP rather than being opted into, so a served
+     * environment is inspectable with a DNS client without anything extra to
+     * discover. It binds the same port number on UDP that HTTP took on TCP, which
+     * is normally free because the two protocols have separate port namespaces.
+     *
+     * HTTP binds the loopback address rather than the hostname. `sim-aws.localhost`
+     * resolves to both `::1` and `127.0.0.1`, and binding the name takes whichever
+     * the resolver returns first, which is commonly `::1`. DNS answers with the
+     * IPv4 loopback address, so binding it explicitly is what makes the address in
+     * a DNS answer one that actually serves HTTP.
      */
     listen(port?: number): Promise<this>;
     /**
@@ -23,6 +34,14 @@ export declare class SimAwsLocalServer {
      * Get the TCP port on which this local server is listening.
      */
     get port(): string;
+    /**
+     * Get the UDP port on which DNS queries are answered.
+     *
+     * Usually the same number as `port`, but not guaranteed: if that number was
+     * already taken on UDP, DNS bound an ephemeral port instead. Read it rather
+     * than assuming the numbers match.
+     */
+    get dnsPort(): string;
     /**
      * Stop serving simulated AWS services.
      */
@@ -31,8 +50,6 @@ export declare class SimAwsLocalServer {
      * Adapt a simulated AWS URL for this local server instance.
      */
     localUrl(input: string | URL): URL;
-    private handleRequest;
-    private handleRequestError;
 }
 interface ServeSimAwsProperties {
     readonly simAws?: SimAws;

package/dist/serve/http/local-server/sim-aws-local-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-local-server.d.ts","sourceRoot":"","sources":["../../../../src/serve/http/local-server/sim-aws-local-server.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,MAAM,EAAE,MAAM,iCAAiC,CAAC;AAOzD,UAAU,2BAA2B;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;GAGG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAa;IACxC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAA8B;IACnE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAEhC,YAAY,UAAU,GAAE,2BAAgC,EASvD;IAED;;OAEG;IACG,MAAM,CAAC,IAAI,GAAE,MAAsC,GAAG,OAAO,CAAC,IAAI,CAAC,CAIxE;IAED;;OAEG;IACH,IAAI,QAAQ,IAAI,MAAM,CAErB;IAED;;OAEG;IACH,IAAI,IAAI,IAAI,MAAM,CAYjB;IAED;;OAEG;IACH,KAAK,IAAI,IAAI,CAEZ;IAED;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,GAAG,GAAG,CAGjC;YAEa,aAAa;IAW3B,OAAO,CAAC,kBAAkB;CAmB3B;AAED,UAAU,qBAAqB;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,wBAAsB,WAAW,CAC/B,UAAU,GAAE,qBAA0B,GACrC,OAAO,CAAC,iBAAiB,CAAC,CAK5B"}
+{"version":3,"file":"sim-aws-local-server.d.ts","sourceRoot":"","sources":["../../../../src/serve/http/local-server/sim-aws-local-server.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,iCAAiC,CAAC;AAQzD,UAAU,2BAA2B;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;GAGG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA4B;IAC3D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkB;IAE5C,YAAY,UAAU,GAAE,2BAAgC,EASvD;IAED;;;;;;;;;;;;;OAaG;IACG,MAAM,CAAC,IAAI,GAAE,MAAsC,GAAG,OAAO,CAAC,IAAI,CAAC,CAKxE;IAED;;OAEG;IACH,IAAI,QAAQ,IAAI,MAAM,CAErB;IAED;;OAEG;IACH,IAAI,IAAI,IAAI,MAAM,CAYjB;IAED;;;;;;OAMG;IACH,IAAI,OAAO,IAAI,MAAM,CAEpB;IAED;;OAEG;IACH,KAAK,IAAI,IAAI,CAGZ;IAED;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,GAAG,GAAG,CAGjC;CACF;AAED,UAAU,qBAAqB;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,wBAAsB,WAAW,CAC/B,UAAU,GAAE,qBAA0B,GACrC,OAAO,CAAC,iBAAiB,CAAC,CAK5B"}

package/dist/serve/http/local-server/sim-aws-local-server.js

@@ -1,34 +1,45 @@
 import http, {} from "node:http";
 import { SimAws } from "../../../service/aws/sim-aws.js";
-import { simAwsLocalConf as simAwsLocalConfig } from "./sim-aws-local.conf.js";
+import { simAwsLocalConfig } from "./sim-aws-local.config.js";
 import { SimAwsHttp } from "../sim-aws-http.js";
 import { SimAwsLocalUrl } from "../url/sim-aws-local-url.js";
-import { NodeFetchHttpAdapter } from "../node-fetch-http-adapter.js";
 import { waitNodeServerListen } from "./wait-node-server-listen.js";
+import { SimAwsLocalRequestHandler } from "./sim-aws-local-request-handler.js";
+import { SimAwsDnsServer } from "../../dns/sim-aws-dns-server.js";
 /**
  * Local HTTP server for a simulated AWS environment.
  * Useful for local integration testing and local development.
  */
 export class SimAwsLocalServer {
-    simAwsHttp;
-    nodeFetchHttpAdapter = new NodeFetchHttpAdapter();
+    requestHandler;
     server;
+    dnsServer;
     constructor(properties = {}) {
         const { simAws = new SimAws() } = properties;
-        this.simAwsHttp = new SimAwsHttp({ simAws });
+        this.requestHandler = new SimAwsLocalRequestHandler(new SimAwsHttp({ simAws }));
+        this.dnsServer = new SimAwsDnsServer({ simAws });
         this.server = http.createServer((request, response) => {
-            // eslint-disable-next-line unicorn/prefer-await
-            this.handleRequest(request, response).catch((error) => {
-                this.handleRequestError(error, response);
-            });
+            this.requestHandler.handle(request, response);
         });
     }
     /**
      * Start serving simulated AWS services on localhost.
+     *
+     * DNS comes up alongside HTTP rather than being opted into, so a served
+     * environment is inspectable with a DNS client without anything extra to
+     * discover. It binds the same port number on UDP that HTTP took on TCP, which
+     * is normally free because the two protocols have separate port namespaces.
+     *
+     * HTTP binds the loopback address rather than the hostname. `sim-aws.localhost`
+     * resolves to both `::1` and `127.0.0.1`, and binding the name takes whichever
+     * the resolver returns first, which is commonly `::1`. DNS answers with the
+     * IPv4 loopback address, so binding it explicitly is what makes the address in
+     * a DNS answer one that actually serves HTTP.
      */
     async listen(port = simAwsLocalConfig.defaultPort) {
-        this.server.listen(port, this.hostname);
+        this.server.listen(port, simAwsLocalConfig.loopbackAddress);
         await waitNodeServerListen(this.server);
+        await this.dnsServer.listen(Number(this.port));
         return this;
     }
     /**
@@ -51,11 +62,22 @@ export class SimAwsLocalServer {
         }
         return String(address.port);
     }
+    /**
+     * Get the UDP port on which DNS queries are answered.
+     *
+     * Usually the same number as `port`, but not guaranteed: if that number was
+     * already taken on UDP, DNS bound an ephemeral port instead. Read it rather
+     * than assuming the numbers match.
+     */
+    get dnsPort() {
+        return this.dnsServer.port;
+    }
     /**
      * Stop serving simulated AWS services.
      */
     close() {
         this.server.close();
+        this.dnsServer.close();
     }
     /**
      * Adapt a simulated AWS URL for this local server instance.
@@ -64,23 +86,6 @@ export class SimAwsLocalServer {
         const simAwsLocalUrl = new SimAwsLocalUrl({ input, port: this.port });
         return simAwsLocalUrl.toURL();
     }
-    async handleRequest(nodeRequest, nodeResponse) {
-        const request = this.nodeFetchHttpAdapter.nodeRequestToFetchRequest(nodeRequest);
-        const response = await this.simAwsHttp.handleRequest(request);
-        await this.nodeFetchHttpAdapter.sendFetchResponse(nodeResponse, response);
-    }
-    handleRequestError(error, nodeResponse) {
-        /* v8 ignore if */
-        if (nodeResponse.writableEnded) {
-            return;
-        }
-        if (!nodeResponse.headersSent) {
-            nodeResponse.statusCode = 400;
-            nodeResponse.setHeader("content-type", "text/plain; charset=utf-8");
-        }
-        const message = error instanceof Error ? error.message : "HTTP request processing failed";
-        nodeResponse.end(message);
-    }
 }
 /**
  * Serve a simulated AWS environment on localhost.

package/dist/serve/http/local-server/sim-aws-local-server.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-local-server.js","sourceRoot":"","sources":["../../../../src/serve/http/local-server/sim-aws-local-server.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,EAAE,EAIZ,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,MAAM,EAAE,MAAM,iCAAiC,CAAC;AACzD,OAAO,EAAE,eAAe,IAAI,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC/E,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAMpE;;;GAGG;AACH,MAAM,OAAO,iBAAiB;IACX,UAAU,CAAa;IACvB,oBAAoB,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAClD,MAAM,CAAS;IAEhC,YAAY,UAAU,GAAgC,EAAE;QACtD,MAAM,EAAE,MAAM,GAAG,IAAI,MAAM,EAAE,EAAE,GAAG,UAAU,CAAC;QAC7C,IAAI,CAAC,UAAU,GAAG,IAAI,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;YACpD,gDAAgD;YAChD,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBAC7D,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YAC3C,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,IAAI,GAAW,iBAAiB,CAAC,WAAW;QACvD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,IAAI,QAAQ;QACV,OAAO,iBAAiB,CAAC,QAAQ,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,IAAI,IAAI;QACN,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzE,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACtC,iDAAiD;QACjD,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QAED,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,KAAmB;QAC1B,MAAM,cAAc,GAAG,IAAI,cAAc,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACtE,OAAO,cAAc,CAAC,KAAK,EAAE,CAAC;IAChC,CAAC;IAEO,KAAK,CAAC,aAAa,CACzB,WAA4B,EAC5B,YAA4B;QAE5B,MAAM,OAAO,GACX,IAAI,CAAC,oBAAoB,CAAC,yBAAyB,CAAC,WAAW,CAAC,CAAC;QACnE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAE9D,MAAM,IAAI,CAAC,oBAAoB,CAAC,iBAAiB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAC5E,CAAC;IAEO,kBAAkB,CACxB,KAAc,EACd,YAA4B;QAE5B,kBAAkB;QAClB,IAAI,YAAY,CAAC,aAAa,EAAE,CAAC;YAC/B,OAAO;QACT,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC;YAC9B,YAAY,CAAC,UAAU,GAAG,GAAG,CAAC;YAC9B,YAAY,CAAC,SAAS,CAAC,cAAc,EAAE,2BAA2B,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,OAAO,GACX,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,gCAAgC,CAAC;QAE5E,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;CACF;AAOD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,UAAU,GAA0B,EAAE;IAEtC,MAAM,EAAE,MAAM,GAAG,IAAI,MAAM,EAAE,EAAE,IAAI,GAAG,iBAAiB,CAAC,WAAW,EAAE,GACnE,UAAU,CAAC;IACb,MAAM,MAAM,GAAG,IAAI,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IACjD,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC"}
+{"version":3,"file":"sim-aws-local-server.js","sourceRoot":"","sources":["../../../../src/serve/http/local-server/sim-aws-local-server.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,EAAE,EAAe,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,iCAAiC,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAC/E,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAMlE;;;GAGG;AACH,MAAM,OAAO,iBAAiB;IACX,cAAc,CAA4B;IAC1C,MAAM,CAAS;IACf,SAAS,CAAkB;IAE5C,YAAY,UAAU,GAAgC,EAAE;QACtD,MAAM,EAAE,MAAM,GAAG,IAAI,MAAM,EAAE,EAAE,GAAG,UAAU,CAAC;QAC7C,IAAI,CAAC,cAAc,GAAG,IAAI,yBAAyB,CACjD,IAAI,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC,CAC3B,CAAC;QACF,IAAI,CAAC,SAAS,GAAG,IAAI,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;YACpD,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,MAAM,CAAC,IAAI,GAAW,iBAAiB,CAAC,WAAW;QACvD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,iBAAiB,CAAC,eAAe,CAAC,CAAC;QAC5D,MAAM,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,IAAI,QAAQ;QACV,OAAO,iBAAiB,CAAC,QAAQ,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,IAAI,IAAI;QACN,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzE,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACtC,iDAAiD;QACjD,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QAED,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED;;;;;;OAMG;IACH,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACpB,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,KAAmB;QAC1B,MAAM,cAAc,GAAG,IAAI,cAAc,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACtE,OAAO,cAAc,CAAC,KAAK,EAAE,CAAC;IAChC,CAAC;CACF;AAOD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,UAAU,GAA0B,EAAE;IAEtC,MAAM,EAAE,MAAM,GAAG,IAAI,MAAM,EAAE,EAAE,IAAI,GAAG,iBAAiB,CAAC,WAAW,EAAE,GACnE,UAAU,CAAC;IACb,MAAM,MAAM,GAAG,IAAI,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IACjD,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC"}

package/dist/serve/http/local-server/sim-aws-local.config.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Default configuration for serving simulated AWS on localhost.
+ */
+export declare const simAwsLocalConfig: {
+    hostname: string;
+    defaultPort: number;
+    loopbackAddress: string;
+};
+//# sourceMappingURL=sim-aws-local.config.d.ts.map

package/dist/serve/http/local-server/sim-aws-local.config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-aws-local.config.d.ts","sourceRoot":"","sources":["../../../../src/serve/http/local-server/sim-aws-local.config.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,eAAO,MAAM,iBAAiB;IAC5B,QAAQ;IACR,WAAW;IAIX,eAAe;CAChB,CAAC"}

package/dist/serve/http/local-server/sim-aws-local.config.js

@@ -0,0 +1,12 @@
+/**
+ * Default configuration for serving simulated AWS on localhost.
+ */
+export const simAwsLocalConfig = {
+    hostname: "sim-aws.localhost",
+    defaultPort: 0,
+    // The address the local servers bind, and the address DNS answers with for
+    // names that resolve to a simulated service, so a lookup and an HTTP request
+    // for the same name reach the same place.
+    loopbackAddress: "127.0.0.1",
+};
+//# sourceMappingURL=sim-aws-local.config.js.map

package/dist/serve/http/local-server/sim-aws-local.config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-aws-local.config.js","sourceRoot":"","sources":["../../../../src/serve/http/local-server/sim-aws-local.config.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,QAAQ,EAAE,mBAAmB;IAC7B,WAAW,EAAE,CAAC;IACd,2EAA2E;IAC3E,6EAA6E;IAC7E,0CAA0C;IAC1C,eAAe,EAAE,WAAW;CAC7B,CAAC"}

package/dist/serve/http/request/sim-aws-received-request.d.ts

@@ -0,0 +1,29 @@
+/**
+ * An HTTP request as it arrived at the simulated AWS boundary.
+ *
+ * The body is read exactly once, here, because a request body is a stream that
+ * cannot be consumed twice and two things need it: the SigV4 payload hash, and
+ * whatever the simulated service builds from the request. Everything
+ * downstream is handed the same bytes.
+ */
+export declare class SimAwsReceivedRequest {
+    /**
+     * The request body, or undefined when the request carried none.
+     */
+    readonly body?: Uint8Array | undefined;
+    private readonly received;
+    private constructor();
+    /**
+     * Take a request in, buffering its body.
+     */
+    static receive(request: Request): Promise<SimAwsReceivedRequest>;
+    /**
+     * The request as the simulated service should see it.
+     *
+     * Simulator control headers are stripped, so a Lambda handler echoing
+     * `event.headers` never sees them, and the buffered body is reattached so
+     * the service can read it as usual.
+     */
+    forService(): Request;
+}
+//# sourceMappingURL=sim-aws-received-request.d.ts.map

package/dist/serve/http/request/sim-aws-received-request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-aws-received-request.d.ts","sourceRoot":"","sources":["../../../../src/serve/http/request/sim-aws-received-request.ts"],"names":[],"mappings":"AAQA;;;;;;;GAOG;AACH,qBAAa,qBAAqB;IAChC;;OAEG;IACH,SAAgB,IAAI,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IAE9C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAU;IAEnC,OAAO,eAGN;IAED;;OAEG;IACH,OAAa,OAAO,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAOrE;IAED;;;;;;OAMG;IACH,UAAU,IAAI,OAAO,CAYpB;CACF"}

package/dist/serve/http/request/sim-aws-received-request.js

@@ -0,0 +1,53 @@
+import { simAwsCallerHeaderName } from "../../../service/iam/request/sim-aws-caller-header.js";
+/**
+ * Header names that are instructions to the simulator rather than part of the
+ * request being simulated.
+ */
+const controlHeaderNames = [simAwsCallerHeaderName];
+/**
+ * An HTTP request as it arrived at the simulated AWS boundary.
+ *
+ * The body is read exactly once, here, because a request body is a stream that
+ * cannot be consumed twice and two things need it: the SigV4 payload hash, and
+ * whatever the simulated service builds from the request. Everything
+ * downstream is handed the same bytes.
+ */
+export class SimAwsReceivedRequest {
+    /**
+     * The request body, or undefined when the request carried none.
+     */
+    body;
+    received;
+    constructor(received, body) {
+        this.received = received;
+        this.body = body;
+    }
+    /**
+     * Take a request in, buffering its body.
+     */
+    static async receive(request) {
+        const body = request.body === null
+            ? undefined
+            : new Uint8Array(await request.arrayBuffer());
+        return new SimAwsReceivedRequest(request, body);
+    }
+    /**
+     * The request as the simulated service should see it.
+     *
+     * Simulator control headers are stripped, so a Lambda handler echoing
+     * `event.headers` never sees them, and the buffered body is reattached so
+     * the service can read it as usual.
+     */
+    forService() {
+        const headers = new Headers(this.received.headers);
+        for (const name of controlHeaderNames) {
+            headers.delete(name);
+        }
+        return new Request(this.received.url, {
+            method: this.received.method,
+            headers,
+            ...(this.body !== undefined && { body: this.body }),
+        });
+    }
+}
+//# sourceMappingURL=sim-aws-received-request.js.map

package/dist/serve/http/request/sim-aws-received-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-aws-received-request.js","sourceRoot":"","sources":["../../../../src/serve/http/request/sim-aws-received-request.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,uDAAuD,CAAC;AAE/F;;;GAGG;AACH,MAAM,kBAAkB,GAAG,CAAC,sBAAsB,CAAC,CAAC;AAEpD;;;;;;;GAOG;AACH,MAAM,OAAO,qBAAqB;IAChC;;OAEG;IACa,IAAI,CAA0B;IAE7B,QAAQ,CAAU;IAEnC,YAAoB,QAAiB,EAAE,IAA4B;QACjE,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAgB;QACnC,MAAM,IAAI,GACR,OAAO,CAAC,IAAI,KAAK,IAAI;YACnB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,IAAI,UAAU,CAAC,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;QAElD,OAAO,IAAI,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAClD,CAAC;IAED;;;;;;OAMG;IACH,UAAU;QACR,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAEnD,KAAK,MAAM,IAAI,IAAI,kBAAkB,EAAE,CAAC;YACtC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;QAED,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE;YACpC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM;YAC5B,OAAO;YACP,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;SACpD,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/serve/http/request/sim-aws-request-authenticator.d.ts

@@ -0,0 +1,31 @@
+import type { SimAws } from "../../../service/aws/sim-aws.js";
+import { SimAwsServiceRequest, type SimAwsServiceTarget } from "../../controller/sim-service-controller.js";
+interface SimAwsRequestAuthenticatorProperties {
+    readonly simAws: SimAws;
+}
+/**
+ * Turns a received HTTP request into a request a simulated service can serve.
+ *
+ * This is where the serving layer meets simulated IAM: the body is buffered
+ * once, the principal is resolved by IAM, and the result is the request a
+ * controller is given. Controllers therefore never see an unattributed
+ * request, and never have to decide for themselves what an unsigned one means.
+ */
+export declare class SimAwsRequestAuthenticator {
+    private readonly simAws;
+    constructor(properties: SimAwsRequestAuthenticatorProperties);
+    /**
+     * Authenticate a request routed to a simulated service.
+     *
+     * The request handed to IAM is the one received, headers and all. A signature
+     * covers the host header as it arrived, and serving rewrites AWS hostnames to
+     * localhost ones, so reconstructing the real AWS hostname here would break
+     * every signature made against the URL actually called.
+     *
+     * Throws a SimAwsRequestAuthFailure when the request states an identity that
+     * cannot be accepted.
+     */
+    authenticate(target: SimAwsServiceTarget, request: Request): Promise<SimAwsServiceRequest>;
+}
+export {};
+//# sourceMappingURL=sim-aws-request-authenticator.d.ts.map

package/dist/serve/http/request/sim-aws-request-authenticator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-aws-request-authenticator.d.ts","sourceRoot":"","sources":["../../../../src/serve/http/request/sim-aws-request-authenticator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iCAAiC,CAAC;AAE9D,OAAO,EACL,oBAAoB,EACpB,KAAK,mBAAmB,EACzB,MAAM,4CAA4C,CAAC;AAGpD,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;GAOG;AACH,qBAAa,0BAA0B;IACrC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAEhC,YAAY,UAAU,EAAE,oCAAoC,EAE3D;IAED;;;;;;;;;;OAUG;IACG,YAAY,CAChB,MAAM,EAAE,mBAAmB,EAC3B,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,oBAAoB,CAAC,CAiB/B;CACF"}

package/dist/serve/http/request/sim-aws-request-authenticator.js

@@ -0,0 +1,45 @@
+import { simAwsServiceSigningName } from "../../controller/sim-aws-service-signing-name.js";
+import { SimAwsServiceRequest, } from "../../controller/sim-service-controller.js";
+import { SimAwsReceivedRequest } from "./sim-aws-received-request.js";
+/**
+ * Turns a received HTTP request into a request a simulated service can serve.
+ *
+ * This is where the serving layer meets simulated IAM: the body is buffered
+ * once, the principal is resolved by IAM, and the result is the request a
+ * controller is given. Controllers therefore never see an unattributed
+ * request, and never have to decide for themselves what an unsigned one means.
+ */
+export class SimAwsRequestAuthenticator {
+    simAws;
+    constructor(properties) {
+        this.simAws = properties.simAws;
+    }
+    /**
+     * Authenticate a request routed to a simulated service.
+     *
+     * The request handed to IAM is the one received, headers and all. A signature
+     * covers the host header as it arrived, and serving rewrites AWS hostnames to
+     * localhost ones, so reconstructing the real AWS hostname here would break
+     * every signature made against the URL actually called.
+     *
+     * Throws a SimAwsRequestAuthFailure when the request states an identity that
+     * cannot be accepted.
+     */
+    async authenticate(target, request) {
+        const received = await SimAwsReceivedRequest.receive(request);
+        const caller = this.simAws.resolveRequestCaller(request, {
+            body: received.body,
+            expectedScope: {
+                serviceName: simAwsServiceSigningName(target.service),
+                regionName: target.regionName,
+            },
+        });
+        return new SimAwsServiceRequest({
+            target,
+            request: received.forService(),
+            caller,
+            body: received.body,
+        });
+    }
+}
+//# sourceMappingURL=sim-aws-request-authenticator.js.map

package/dist/serve/http/request/sim-aws-request-authenticator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-aws-request-authenticator.js","sourceRoot":"","sources":["../../../../src/serve/http/request/sim-aws-request-authenticator.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,wBAAwB,EAAE,MAAM,kDAAkD,CAAC;AAC5F,OAAO,EACL,oBAAoB,GAErB,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAMtE;;;;;;;GAOG;AACH,MAAM,OAAO,0BAA0B;IACpB,MAAM,CAAS;IAEhC,YAAY,UAAgD;QAC1D,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAClC,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,YAAY,CAChB,MAA2B,EAC3B,OAAgB;QAEhB,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAE9D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,OAAO,EAAE;YACvD,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,aAAa,EAAE;gBACb,WAAW,EAAE,wBAAwB,CAAC,MAAM,CAAC,OAAO,CAAC;gBACrD,UAAU,EAAE,MAAM,CAAC,UAAU;aAC9B;SACF,CAAC,CAAC;QAEH,OAAO,IAAI,oBAAoB,CAAC;YAC9B,MAAM;YACN,OAAO,EAAE,QAAQ,CAAC,UAAU,EAAE;YAC9B,MAAM;YACN,IAAI,EAAE,QAAQ,CAAC,IAAI;SACpB,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/serve/http/response/sim-aws-auth-failure-response.d.ts

@@ -0,0 +1,30 @@
+import { type SimAwsRequestAuthFailure } from "../../../service/iam/request/error/sim-aws-request-auth.error.js";
+/**
+ * The response a request refused at the authentication boundary gets.
+ *
+ * The body is the small JSON document AWS answers a rejected request with, and
+ * nothing more: real AWS does not explain itself here, and neither does this.
+ * Everything the simulator can say about the refusal goes into `x-sim-aws-*`
+ * headers, where it helps without changing the shape of the response any
+ * client is written against.
+ */
+export declare class SimAwsAuthFailureResponse {
+    private readonly hints;
+    /**
+     * Build the HTTP response for a failed request authentication.
+     */
+    build(failure: SimAwsRequestAuthFailure): Response;
+    private rejectedResponse;
+    /**
+     * Whether the request was malformed rather than unauthenticated.
+     *
+     * A caller header the simulator cannot read is a mistake in driving Yulin
+     * rather than a failed AWS authentication. A signature too incomplete to
+     * parse is the one SigV4 rejection real AWS also answers with a 400, because
+     * nothing was presented that could have been authenticated; every other SigV4
+     * rejection is a 403.
+     */
+    private isBadRequest;
+    private jsonResponse;
+}
+//# sourceMappingURL=sim-aws-auth-failure-response.d.ts.map

package/dist/serve/http/response/sim-aws-auth-failure-response.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-aws-auth-failure-response.d.ts","sourceRoot":"","sources":["../../../../src/serve/http/response/sim-aws-auth-failure-response.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,wBAAwB,EAC9B,MAAM,kEAAkE,CAAC;AAI1E;;;;;;;;GAQG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA6B;IAEnD;;OAEG;IACH,KAAK,CAAC,OAAO,EAAE,wBAAwB,GAAG,QAAQ,CAIjD;IAED,OAAO,CAAC,gBAAgB;IAQxB;;;;;;;;OAQG;IACH,OAAO,CAAC,YAAY;IAOpB,OAAO,CAAC,YAAY;CAgBrB"}

package/dist/serve/http/response/sim-aws-auth-failure-response.js

@@ -0,0 +1,51 @@
+import { SimAwsInvalidCallerHeader, } from "../../../service/iam/request/error/sim-aws-request-auth.error.js";
+import { SimIamIncompleteSignature } from "../../../service/iam/sigv4/error/sim-iam-sigv4.error.js";
+import { SimAwsResponseHints } from "./sim-aws-response-hints.js";
+/**
+ * The response a request refused at the authentication boundary gets.
+ *
+ * The body is the small JSON document AWS answers a rejected request with, and
+ * nothing more: real AWS does not explain itself here, and neither does this.
+ * Everything the simulator can say about the refusal goes into `x-sim-aws-*`
+ * headers, where it helps without changing the shape of the response any
+ * client is written against.
+ */
+export class SimAwsAuthFailureResponse {
+    hints = new SimAwsResponseHints();
+    /**
+     * Build the HTTP response for a failed request authentication.
+     */
+    build(failure) {
+        const rejected = this.rejectedResponse(failure);
+        return this.hints.stampAuthFailure(rejected, failure);
+    }
+    rejectedResponse(failure) {
+        if (this.isBadRequest(failure)) {
+            return this.jsonResponse(400, "Bad Request", failure.code);
+        }
+        return this.jsonResponse(403, "Forbidden", failure.code);
+    }
+    /**
+     * Whether the request was malformed rather than unauthenticated.
+     *
+     * A caller header the simulator cannot read is a mistake in driving Yulin
+     * rather than a failed AWS authentication. A signature too incomplete to
+     * parse is the one SigV4 rejection real AWS also answers with a 400, because
+     * nothing was presented that could have been authenticated; every other SigV4
+     * rejection is a 403.
+     */
+    isBadRequest(failure) {
+        return (failure instanceof SimAwsInvalidCallerHeader ||
+            failure instanceof SimIamIncompleteSignature);
+    }
+    jsonResponse(status, message, errorType) {
+        return Response.json({ Message: message }, {
+            status,
+            headers: {
+                "content-type": "application/json",
+                "x-amzn-errortype": errorType,
+            },
+        });
+    }
+}
+//# sourceMappingURL=sim-aws-auth-failure-response.js.map

package/dist/serve/http/response/sim-aws-auth-failure-response.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-aws-auth-failure-response.js","sourceRoot":"","sources":["../../../../src/serve/http/response/sim-aws-auth-failure-response.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,GAE1B,MAAM,kEAAkE,CAAC;AAC1E,OAAO,EAAE,yBAAyB,EAAE,MAAM,yDAAyD,CAAC;AACpG,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAElE;;;;;;;;GAQG;AACH,MAAM,OAAO,yBAAyB;IACnB,KAAK,GAAG,IAAI,mBAAmB,EAAE,CAAC;IAEnD;;OAEG;IACH,KAAK,CAAC,OAAiC;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAEhD,OAAO,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;IAEO,gBAAgB,CAAC,OAAiC;QACxD,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,aAAa,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7D,CAAC;QAED,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3D,CAAC;IAED;;;;;;;;OAQG;IACK,YAAY,CAAC,OAAiC;QACpD,OAAO,CACL,OAAO,YAAY,yBAAyB;YAC5C,OAAO,YAAY,yBAAyB,CAC7C,CAAC;IACJ,CAAC;IAEO,YAAY,CAClB,MAAc,EACd,OAAe,EACf,SAAiB;QAEjB,OAAO,QAAQ,CAAC,IAAI,CAClB,EAAE,OAAO,EAAE,OAAO,EAAE,EACpB;YACE,MAAM;YACN,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,kBAAkB,EAAE,SAAS;aAC9B;SACF,CACF,CAAC;IACJ,CAAC;CACF"}

package/dist/serve/http/response/sim-aws-response-hints.d.ts

@@ -0,0 +1,35 @@
+import type { SimAwsRequestAuthFailure } from "../../../service/iam/request/error/sim-aws-request-auth.error.js";
+import type { SimAwsRequestCaller } from "../../../service/iam/request/sim-aws-request-caller.js";
+/**
+ * How the caller was established, reported back on the response.
+ */
+export declare const simAwsAuthHeaderName = "x-sim-aws-auth";
+/**
+ * The AWS error code a rejected request was refused with.
+ */
+export declare const simAwsErrorHeaderName = "x-sim-aws-error";
+/**
+ * Why the request was refused, in more detail than the AWS response body has
+ * anywhere to put it.
+ */
+export declare const simAwsErrorDetailHeaderName = "x-sim-aws-error-detail";
+/**
+ * Stamps the simulator's own account of a request onto its response.
+ *
+ * These hints go in headers, never in the body, so that a response stays the
+ * shape the real service returns and client code parsing it is unaffected.
+ * That matters most where AWS is least forthcoming: a Function URL rejects a
+ * bad signature with nothing but `{"Message":"Forbidden"}`, which is faithful
+ * and useless to debug against, so the detail is carried alongside instead.
+ */
+export declare class SimAwsResponseHints {
+    /**
+     * Report who the simulator decided the caller was, and how.
+     */
+    stampCaller(response: Response, caller: SimAwsRequestCaller): Response;
+    /**
+     * Report that the request was refused before it reached a service, and why.
+     */
+    stampAuthFailure(response: Response, failure: SimAwsRequestAuthFailure): Response;
+}
+//# sourceMappingURL=sim-aws-response-hints.d.ts.map

package/dist/serve/http/response/sim-aws-response-hints.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-aws-response-hints.d.ts","sourceRoot":"","sources":["../../../../src/serve/http/response/sim-aws-response-hints.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,kEAAkE,CAAC;AAEjH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wDAAwD,CAAC;AAElG;;GAEG;AACH,eAAO,MAAM,oBAAoB,mBAAmB,CAAC;AAErD;;GAEG;AACH,eAAO,MAAM,qBAAqB,oBAAoB,CAAC;AAEvD;;;GAGG;AACH,eAAO,MAAM,2BAA2B,2BAA2B,CAAC;AAEpE;;;;;;;;GAQG;AACH,qBAAa,mBAAmB;IAC9B;;OAEG;IACH,WAAW,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,mBAAmB,GAAG,QAAQ,CAKrE;IAED;;OAEG;IACH,gBAAgB,CACd,QAAQ,EAAE,QAAQ,EAClB,OAAO,EAAE,wBAAwB,GAChC,QAAQ,CASV;CACF"}

package/dist/serve/http/response/sim-aws-response-hints.js

@@ -0,0 +1,49 @@
+import { simAwsCallerHeaderName } from "../../../service/iam/request/sim-aws-caller-header.js";
+/**
+ * How the caller was established, reported back on the response.
+ */
+export const simAwsAuthHeaderName = "x-sim-aws-auth";
+/**
+ * The AWS error code a rejected request was refused with.
+ */
+export const simAwsErrorHeaderName = "x-sim-aws-error";
+/**
+ * Why the request was refused, in more detail than the AWS response body has
+ * anywhere to put it.
+ */
+export const simAwsErrorDetailHeaderName = "x-sim-aws-error-detail";
+/**
+ * Stamps the simulator's own account of a request onto its response.
+ *
+ * These hints go in headers, never in the body, so that a response stays the
+ * shape the real service returns and client code parsing it is unaffected.
+ * That matters most where AWS is least forthcoming: a Function URL rejects a
+ * bad signature with nothing but `{"Message":"Forbidden"}`, which is faithful
+ * and useless to debug against, so the detail is carried alongside instead.
+ */
+export class SimAwsResponseHints {
+    /**
+     * Report who the simulator decided the caller was, and how.
+     */
+    stampCaller(response, caller) {
+        response.headers.set(simAwsCallerHeaderName, caller.toHeaderValue());
+        response.headers.set(simAwsAuthHeaderName, caller.authMethod);
+        return response;
+    }
+    /**
+     * Report that the request was refused before it reached a service, and why.
+     */
+    stampAuthFailure(response, failure) {
+        response.headers.set(simAwsAuthHeaderName, "rejected");
+        response.headers.set(simAwsErrorHeaderName, failure.code);
+        response.headers.set(simAwsErrorDetailHeaderName, singleLine(failure.message));
+        return response;
+    }
+}
+/**
+ * Flatten a message into something a header value can hold.
+ */
+function singleLine(message) {
+    return message.replaceAll(/\s+/g, " ").trim();
+}
+//# sourceMappingURL=sim-aws-response-hints.js.map

package/dist/serve/http/response/sim-aws-response-hints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-aws-response-hints.js","sourceRoot":"","sources":["../../../../src/serve/http/response/sim-aws-response-hints.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,uDAAuD,CAAC;AAG/F;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,gBAAgB,CAAC;AAErD;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,iBAAiB,CAAC;AAEvD;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,wBAAwB,CAAC;AAEpE;;;;;;;;GAQG;AACH,MAAM,OAAO,mBAAmB;IAC9B;;OAEG;IACH,WAAW,CAAC,QAAkB,EAAE,MAA2B;QACzD,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC;QACrE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;QAE9D,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,gBAAgB,CACd,QAAkB,EAClB,OAAiC;QAEjC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,UAAU,CAAC,CAAC;QACvD,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1D,QAAQ,CAAC,OAAO,CAAC,GAAG,CAClB,2BAA2B,EAC3B,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAC5B,CAAC;QAEF,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF;AAED;;GAEG;AACH,SAAS,UAAU,CAAC,OAAe;IACjC,OAAO,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAChD,CAAC"}

package/dist/serve/http/sim-aws-http.d.ts

@@ -8,6 +8,9 @@ interface SimAwsHttpProperties {
 export declare class SimAwsHttp {
     private readonly simAws;
     private readonly controllers;
+    private readonly authenticator;
+    private readonly authFailureResponse;
+    private readonly hints;
     constructor(properties?: SimAwsHttpProperties);
     /**
      * Send a Fetch API request to simulated AWS.
@@ -15,8 +18,22 @@ export declare class SimAwsHttp {
     fetch(input: string | URL | Request, init?: RequestInit): Promise<Response>;
     /**
      * Handle a simulated AWS HTTP request.
+     *
+     * Every response is stamped with simulated time, as real AWS stamps every API
+     * response with server time. That is the one mechanism an outside client has
+     * for discovering what this simulation thinks the time is, without needing to
+     * know it is talking to a simulator at all.
      */
     handleRequest(request: Request): Promise<Response>;
+    private routeRequest;
+    /**
+     * Authenticate a request and hand it to the service it is routed to.
+     *
+     * Every served request passes through the same authentication boundary,
+     * whichever service answers it, and every response says who the simulator
+     * decided the caller was.
+     */
+    private serveTarget;
     private hostnameFromRequest;
 }
 export {};

package/dist/serve/http/sim-aws-http.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-aws-http.d.ts","sourceRoot":"","sources":["../../../src/serve/http/sim-aws-http.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,8BAA8B,CAAC;AAEtD,UAAU,oBAAoB;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;GAEG;AACH,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAmC;IAE/D,YAAY,UAAU,GAAE,oBAAyB,EAIhD;IAED;;OAEG;IACG,KAAK,CACT,KAAK,EAAE,MAAM,GAAG,GAAG,GAAG,OAAO,EAC7B,IAAI,CAAC,EAAE,WAAW,GACjB,OAAO,CAAC,QAAQ,CAAC,CAEnB;IAED;;OAEG;IACG,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CA4BvD;IAED,OAAO,CAAC,mBAAmB;CAU5B"}
+{"version":3,"file":"sim-aws-http.d.ts","sourceRoot":"","sources":["../../../src/serve/http/sim-aws-http.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,8BAA8B,CAAC;AAOtD,UAAU,oBAAoB;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;GAEG;AACH,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAmC;IAC/D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA6B;IAC3D,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAmC;IACvE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA6B;IAEnD,YAAY,UAAU,GAAE,oBAAyB,EAKhD;IAED;;OAEG;IACG,KAAK,CACT,KAAK,EAAE,MAAM,GAAG,GAAG,GAAG,OAAO,EAC7B,IAAI,CAAC,EAAE,WAAW,GACjB,OAAO,CAAC,QAAQ,CAAC,CAEnB;IAED;;;;;;;OAOG;IACG,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAMvD;YAEa,YAAY;IAiC1B;;;;;;OAMG;YACW,WAAW;IAgBzB,OAAO,CAAC,mBAAmB;CAU5B"}