@kensio/yulin 0.45.0 → 1.0.0

package/dist/service/apigatewayv2/api/route/sim-http-api-route-request.js

@@ -0,0 +1,16 @@
+/**
+ * One request as route selection sees it: the HTTP method, and the path
+ * segments left once the stage has taken its own.
+ *
+ * A named stage is a path segment the routes know nothing about, so
+ * `/dev/pets/6` on stage `dev` reaches route selection as `pets` then `6`.
+ */
+export class SimHttpApiRouteRequest {
+    method;
+    segments;
+    constructor(properties) {
+        this.method = properties.method;
+        this.segments = properties.segments;
+    }
+}
+//# sourceMappingURL=sim-http-api-route-request.js.map

package/dist/service/apigatewayv2/api/route/sim-http-api-route-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-route-request.js","sourceRoot":"","sources":["../../../../../src/service/apigatewayv2/api/route/sim-http-api-route-request.ts"],"names":[],"mappings":"AAKA;;;;;;GAMG;AACH,MAAM,OAAO,sBAAsB;IACjB,MAAM,CAAS;IACf,QAAQ,CAAoB;IAE5C,YAAY,UAA4C;QACtD,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;IACtC,CAAC;CACF"}

package/dist/service/apigatewayv2/api/route/sim-http-api-route-scopes.d.ts

@@ -0,0 +1,23 @@
+/**
+ * The scopes a route asks a token for.
+ *
+ * A route with no scopes asks for nothing beyond a token the authorizer
+ * accepted. A route with scopes is satisfied by any one of them, which is what
+ * AWS documents: the check is any-of, not all-of.
+ */
+export declare class SimHttpApiRouteScopes {
+    readonly values: readonly string[];
+    constructor(values?: readonly string[]);
+    /**
+     * Whether this route asks for no scope in particular.
+     */
+    get isEmpty(): boolean;
+    /**
+     * Whether a token claiming these scopes may have this route.
+     *
+     * A token claiming no scopes at all, which is every Cognito id token, meets
+     * no route scope and is refused by any route that asks for one.
+     */
+    permits(claimed: readonly string[] | null): boolean;
+}
+//# sourceMappingURL=sim-http-api-route-scopes.d.ts.map

package/dist/service/apigatewayv2/api/route/sim-http-api-route-scopes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-route-scopes.d.ts","sourceRoot":"","sources":["../../../../../src/service/apigatewayv2/api/route/sim-http-api-route-scopes.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,qBAAa,qBAAqB;IAChC,SAAgB,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IAE1C,YAAY,MAAM,GAAE,SAAS,MAAM,EAAO,EAEzC;IAED;;OAEG;IACH,IAAI,OAAO,IAAI,OAAO,CAErB;IAED;;;;;OAKG;IACH,OAAO,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,GAAG,OAAO,CAUlD;CACF"}

package/dist/service/apigatewayv2/api/route/sim-http-api-route-scopes.js

@@ -0,0 +1,35 @@
+/**
+ * The scopes a route asks a token for.
+ *
+ * A route with no scopes asks for nothing beyond a token the authorizer
+ * accepted. A route with scopes is satisfied by any one of them, which is what
+ * AWS documents: the check is any-of, not all-of.
+ */
+export class SimHttpApiRouteScopes {
+    values;
+    constructor(values = []) {
+        this.values = values;
+    }
+    /**
+     * Whether this route asks for no scope in particular.
+     */
+    get isEmpty() {
+        return this.values.length === 0;
+    }
+    /**
+     * Whether a token claiming these scopes may have this route.
+     *
+     * A token claiming no scopes at all, which is every Cognito id token, meets
+     * no route scope and is refused by any route that asks for one.
+     */
+    permits(claimed) {
+        if (this.isEmpty) {
+            return true;
+        }
+        if (claimed === null) {
+            return false;
+        }
+        return claimed.some((scope) => this.values.includes(scope));
+    }
+}
+//# sourceMappingURL=sim-http-api-route-scopes.js.map

package/dist/service/apigatewayv2/api/route/sim-http-api-route-scopes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-route-scopes.js","sourceRoot":"","sources":["../../../../../src/service/apigatewayv2/api/route/sim-http-api-route-scopes.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,OAAO,qBAAqB;IAChB,MAAM,CAAoB;IAE1C,YAAY,MAAM,GAAsB,EAAE;QACxC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;IAClC,CAAC;IAED;;;;;OAKG;IACH,OAAO,CAAC,OAAiC;QACvC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9D,CAAC;CACF"}

package/dist/service/apigatewayv2/api/route/sim-http-api-route-selector.d.ts

@@ -0,0 +1,36 @@
+import type { SimHttpApiPathParameters } from "./path/sim-http-api-path-parameters.js";
+import type { SimHttpApiRouteRequest } from "./sim-http-api-route-request.js";
+import type { SimHttpApiRoute } from "./sim-http-api-route.js";
+interface SimHttpApiRouteSelectionProperties {
+    readonly route: SimHttpApiRoute;
+    readonly pathParameters: SimHttpApiPathParameters;
+}
+/**
+ * One route that matched a request, with what it captured from the path.
+ */
+export declare class SimHttpApiRouteSelection {
+    readonly route: SimHttpApiRoute;
+    readonly pathParameters: SimHttpApiPathParameters;
+    constructor(properties: SimHttpApiRouteSelectionProperties);
+    /**
+     * Whether this route is the more specific of the two, and so the one that
+     * serves the request.
+     */
+    beats(other: SimHttpApiRouteSelection): boolean;
+}
+/**
+ * Picks the route that serves one request.
+ *
+ * Every route is asked whether it matches, and the most specific of the ones
+ * that do wins. There is always one winner: two route keys that would rank the
+ * same for a request are the same route key, and the second of those is
+ * refused as a conflict when it is created.
+ */
+export declare class SimHttpApiRouteSelector {
+    /**
+     * Find the route serving this request, if the API has one.
+     */
+    select(routes: readonly SimHttpApiRoute[], request: SimHttpApiRouteRequest): SimHttpApiRouteSelection | undefined;
+}
+export {};
+//# sourceMappingURL=sim-http-api-route-selector.d.ts.map

package/dist/service/apigatewayv2/api/route/sim-http-api-route-selector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-route-selector.d.ts","sourceRoot":"","sources":["../../../../../src/service/apigatewayv2/api/route/sim-http-api-route-selector.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AACvF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AAC9E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE/D,UAAU,kCAAkC;IAC1C,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAChC,QAAQ,CAAC,cAAc,EAAE,wBAAwB,CAAC;CACnD;AAED;;GAEG;AACH,qBAAa,wBAAwB;IACnC,SAAgB,KAAK,EAAE,eAAe,CAAC;IACvC,SAAgB,cAAc,EAAE,wBAAwB,CAAC;IAEzD,YAAY,UAAU,EAAE,kCAAkC,EAGzD;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAE9C;CACF;AAED;;;;;;;GAOG;AACH,qBAAa,uBAAuB;IAClC;;OAEG;IACH,MAAM,CACJ,MAAM,EAAE,SAAS,eAAe,EAAE,EAClC,OAAO,EAAE,sBAAsB,GAC9B,wBAAwB,GAAG,SAAS,CAqBtC;CACF"}

package/dist/service/apigatewayv2/api/route/sim-http-api-route-selector.js

@@ -0,0 +1,49 @@
+/**
+ * One route that matched a request, with what it captured from the path.
+ */
+export class SimHttpApiRouteSelection {
+    route;
+    pathParameters;
+    constructor(properties) {
+        this.route = properties.route;
+        this.pathParameters = properties.pathParameters;
+    }
+    /**
+     * Whether this route is the more specific of the two, and so the one that
+     * serves the request.
+     */
+    beats(other) {
+        return this.route.key.rank.compareTo(other.route.key.rank) < 0;
+    }
+}
+/**
+ * Picks the route that serves one request.
+ *
+ * Every route is asked whether it matches, and the most specific of the ones
+ * that do wins. There is always one winner: two route keys that would rank the
+ * same for a request are the same route key, and the second of those is
+ * refused as a conflict when it is created.
+ */
+export class SimHttpApiRouteSelector {
+    /**
+     * Find the route serving this request, if the API has one.
+     */
+    select(routes, request) {
+        let selected;
+        for (const route of routes) {
+            const pathParameters = route.key.match(request);
+            if (pathParameters === undefined) {
+                continue;
+            }
+            const candidate = new SimHttpApiRouteSelection({
+                route,
+                pathParameters,
+            });
+            if (selected === undefined || candidate.beats(selected)) {
+                selected = candidate;
+            }
+        }
+        return selected;
+    }
+}
+//# sourceMappingURL=sim-http-api-route-selector.js.map

package/dist/service/apigatewayv2/api/route/sim-http-api-route-selector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-route-selector.js","sourceRoot":"","sources":["../../../../../src/service/apigatewayv2/api/route/sim-http-api-route-selector.ts"],"names":[],"mappings":"AASA;;GAEG;AACH,MAAM,OAAO,wBAAwB;IACnB,KAAK,CAAkB;IACvB,cAAc,CAA2B;IAEzD,YAAY,UAA8C;QACxD,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,cAAc,CAAC;IAClD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAA+B;QACnC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjE,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,uBAAuB;IAClC;;OAEG;IACH,MAAM,CACJ,MAAkC,EAClC,OAA+B;QAE/B,IAAI,QAA8C,CAAC;QAEnD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,cAAc,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAEhD,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;gBACjC,SAAS;YACX,CAAC;YAED,MAAM,SAAS,GAAG,IAAI,wBAAwB,CAAC;gBAC7C,KAAK;gBACL,cAAc;aACf,CAAC,CAAC;YAEH,IAAI,QAAQ,KAAK,SAAS,IAAI,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACxD,QAAQ,GAAG,SAAS,CAAC;YACvB,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF"}

package/dist/service/apigatewayv2/api/route/sim-http-api-route-store.d.ts

@@ -0,0 +1,42 @@
+import { type SimHttpApiRoute, type SimHttpApiRouteId } from "./sim-http-api-route.js";
+/**
+ * The routes of one API.
+ *
+ * Routes are keyed by route key signature rather than by id, because the route
+ * key is what makes a route unique on real AWS: an API cannot have two routes
+ * for the same method and path, and the id is only how a route is addressed
+ * afterwards. The signature rather than the text, because a parameter name is
+ * not part of a route's identity, so `GET /pets/{id}` and `GET /pets/{petId}`
+ * are the same route. The ids in use are tracked alongside, so allocating one
+ * can avoid them.
+ */
+export declare class SimHttpApiRouteStore {
+    private readonly routes;
+    private readonly routeIds;
+    /**
+     * Allocate a route id this API is not already using.
+     */
+    allocateId(): SimHttpApiRouteId;
+    /**
+     * Add a route to this API.
+     */
+    add(route: SimHttpApiRoute): void;
+    /**
+     * Find a route by the id the API allocated for it.
+     *
+     * Routes are stored by route key signature rather than by id, so this is a
+     * scan. It is how a route is addressed after creation, which an API has few
+     * enough routes for the scan not to matter.
+     */
+    find(routeId: string): SimHttpApiRoute | undefined;
+    /**
+     * Find the route holding a route key signature, which is what tells whether
+     * the API is already routing a route key.
+     */
+    findBySignature(signature: string): SimHttpApiRoute | undefined;
+    /**
+     * List every route of this API, in the order they were created.
+     */
+    list(): SimHttpApiRoute[];
+}
+//# sourceMappingURL=sim-http-api-route-store.d.ts.map

package/dist/service/apigatewayv2/api/route/sim-http-api-route-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-route-store.d.ts","sourceRoot":"","sources":["../../../../../src/service/apigatewayv2/api/route/sim-http-api-route-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACvB,MAAM,yBAAyB,CAAC;AAEjC;;;;;;;;;;GAUG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAsC;IAC7D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAgC;IAEzD;;OAEG;IACH,UAAU,IAAI,iBAAiB,CAS9B;IAED;;OAEG;IACH,GAAG,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI,CAGhC;IAED;;;;;;OAMG;IACH,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAIjD;IAED;;;OAGG;IACH,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAE9D;IAED;;OAEG;IACH,IAAI,IAAI,eAAe,EAAE,CAExB;CACF"}

package/dist/service/apigatewayv2/api/route/sim-http-api-route-store.js

@@ -0,0 +1,60 @@
+import { makeSimHttpApiRouteId, } from "./sim-http-api-route.js";
+/**
+ * The routes of one API.
+ *
+ * Routes are keyed by route key signature rather than by id, because the route
+ * key is what makes a route unique on real AWS: an API cannot have two routes
+ * for the same method and path, and the id is only how a route is addressed
+ * afterwards. The signature rather than the text, because a parameter name is
+ * not part of a route's identity, so `GET /pets/{id}` and `GET /pets/{petId}`
+ * are the same route. The ids in use are tracked alongside, so allocating one
+ * can avoid them.
+ */
+export class SimHttpApiRouteStore {
+    routes = new Map();
+    routeIds = new Set();
+    /**
+     * Allocate a route id this API is not already using.
+     */
+    allocateId() {
+        let routeId = makeSimHttpApiRouteId();
+        while (this.routeIds.has(routeId)) {
+            /* v8 ignore next -- does not happen in practice */
+            routeId = makeSimHttpApiRouteId();
+        }
+        return routeId;
+    }
+    /**
+     * Add a route to this API.
+     */
+    add(route) {
+        this.routes.set(route.key.signature, route);
+        this.routeIds.add(route.routeId);
+    }
+    /**
+     * Find a route by the id the API allocated for it.
+     *
+     * Routes are stored by route key signature rather than by id, so this is a
+     * scan. It is how a route is addressed after creation, which an API has few
+     * enough routes for the scan not to matter.
+     */
+    find(routeId) {
+        return this.routes
+            .values()
+            .find((route) => route.routeId === routeId);
+    }
+    /**
+     * Find the route holding a route key signature, which is what tells whether
+     * the API is already routing a route key.
+     */
+    findBySignature(signature) {
+        return this.routes.get(signature);
+    }
+    /**
+     * List every route of this API, in the order they were created.
+     */
+    list() {
+        return this.routes.values().toArray();
+    }
+}
+//# sourceMappingURL=sim-http-api-route-store.js.map

package/dist/service/apigatewayv2/api/route/sim-http-api-route-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-route-store.js","sourceRoot":"","sources":["../../../../../src/service/apigatewayv2/api/route/sim-http-api-route-store.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,GAGtB,MAAM,yBAAyB,CAAC;AAEjC;;;;;;;;;;GAUG;AACH,MAAM,OAAO,oBAAoB;IACd,MAAM,GAAG,IAAI,GAAG,EAA2B,CAAC;IAC5C,QAAQ,GAAG,IAAI,GAAG,EAAqB,CAAC;IAEzD;;OAEG;IACH,UAAU;QACR,IAAI,OAAO,GAAG,qBAAqB,EAAE,CAAC;QAEtC,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAClC,mDAAmD;YACnD,OAAO,GAAG,qBAAqB,EAAE,CAAC;QACpC,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,KAAsB;QACxB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC5C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IAED;;;;;;OAMG;IACH,IAAI,CAAC,OAAe;QAClB,OAAO,IAAI,CAAC,MAAM;aACf,MAAM,EAAE;aACR,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAM,OAA6B,CAAC,CAAC;IACvE,CAAC;IAED;;;OAGG;IACH,eAAe,CAAC,SAAiB;QAC/B,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,IAAI;QACF,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;IACxC,CAAC;CACF"}

package/dist/service/apigatewayv2/api/route/sim-http-api-route-view.d.ts

@@ -0,0 +1,20 @@
+import type { SimHttpApiAuthorizationType, SimHttpApiRoute } from "./sim-http-api-route.js";
+/**
+ * Minimal structural route view, as the Create and Get commands return.
+ *
+ * The two authorization fields are absent on a route that authorizes nobody,
+ * rather than reported as an empty id and an empty list.
+ */
+export interface SimHttpApiRouteView {
+    RouteId: string;
+    RouteKey: string;
+    Target: string;
+    AuthorizationType: SimHttpApiAuthorizationType;
+    AuthorizerId?: string;
+    AuthorizationScopes?: string[];
+}
+/**
+ * Get the AWS-like view of one route.
+ */
+export declare function simHttpApiRouteView(route: SimHttpApiRoute): SimHttpApiRouteView;
+//# sourceMappingURL=sim-http-api-route-view.d.ts.map

package/dist/service/apigatewayv2/api/route/sim-http-api-route-view.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-route-view.d.ts","sourceRoot":"","sources":["../../../../../src/service/apigatewayv2/api/route/sim-http-api-route-view.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,2BAA2B,EAC3B,eAAe,EAChB,MAAM,yBAAyB,CAAC;AAEjC;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB,EAAE,2BAA2B,CAAC;IAC/C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;CAChC;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,eAAe,GACrB,mBAAmB,CAiBrB"}

package/dist/service/apigatewayv2/api/route/sim-http-api-route-view.js

@@ -0,0 +1,19 @@
+/**
+ * Get the AWS-like view of one route.
+ */
+export function simHttpApiRouteView(route) {
+    const view = {
+        RouteId: route.routeId,
+        RouteKey: route.routeKey,
+        Target: route.target,
+        AuthorizationType: route.authorizationType,
+    };
+    if (route.authorizerId !== undefined) {
+        view.AuthorizerId = route.authorizerId;
+    }
+    if (!route.authorizationScopes.isEmpty) {
+        view.AuthorizationScopes = [...route.authorizationScopes.values];
+    }
+    return view;
+}
+//# sourceMappingURL=sim-http-api-route-view.js.map

package/dist/service/apigatewayv2/api/route/sim-http-api-route-view.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-route-view.js","sourceRoot":"","sources":["../../../../../src/service/apigatewayv2/api/route/sim-http-api-route-view.ts"],"names":[],"mappings":"AAoBA;;GAEG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAsB;IAEtB,MAAM,IAAI,GAAwB;QAChC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;KAC3C,CAAC;IAEF,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACrC,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;IACzC,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,OAAO,EAAE,CAAC;QACvC,IAAI,CAAC,mBAAmB,GAAG,CAAC,GAAG,KAAK,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACnE,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/service/apigatewayv2/api/route/sim-http-api-route.d.ts

@@ -0,0 +1,65 @@
+import type { Brand } from "../../../../util/brand.type.js";
+import type { SimHttpApiAuthorizerId } from "../authorizer/sim-http-api-authorizer.js";
+import type { SimHttpApiIntegrationId } from "../integration/sim-http-api-integration.js";
+import type { SimHttpApiRouteKey } from "./key/sim-http-api-route-key.js";
+import { SimHttpApiRouteScopes } from "./sim-http-api-route-scopes.js";
+import { type SimHttpApiRouteView } from "./sim-http-api-route-view.js";
+/**
+ * The id API Gateway allocates for one route.
+ */
+export type SimHttpApiRouteId = Brand<string, "SimHttpApiRouteId">;
+/**
+ * The authorization types simulated: none, so anyone may call the route, a JWT
+ * the route's authorizer verifies, or a SigV4-signed caller IAM allows
+ * `execute-api:Invoke` on the route being called.
+ *
+ * `CUSTOM`, which is a Lambda authorizer, is refused at creation rather than
+ * created open.
+ */
+export type SimHttpApiAuthorizationType = "NONE" | "JWT" | "AWS_IAM";
+/**
+ * Allocate a route id, in the same opaque shape as an integration id.
+ */
+export declare function makeSimHttpApiRouteId(): SimHttpApiRouteId;
+interface SimHttpApiRouteProperties {
+    readonly routeId: SimHttpApiRouteId;
+    readonly key: SimHttpApiRouteKey;
+    readonly integrationId: SimHttpApiIntegrationId;
+    readonly authorizationType: SimHttpApiAuthorizationType;
+    readonly authorizerId?: SimHttpApiAuthorizerId | undefined;
+    readonly authorizationScopes?: SimHttpApiRouteScopes | undefined;
+}
+/**
+ * A simulated HTTP API route: which requests reach which integration, and what
+ * a caller has to present to get there.
+ */
+export declare class SimHttpApiRoute {
+    readonly routeId: SimHttpApiRouteId;
+    readonly key: SimHttpApiRouteKey;
+    readonly integrationId: SimHttpApiIntegrationId;
+    readonly authorizationType: SimHttpApiAuthorizationType;
+    /**
+     * The authorizer this route sends requests through, which only a `JWT` route
+     * has. An `AWS_IAM` route takes no authorizer, since IAM itself is what
+     * decides, and a `NONE` route authorizes nobody.
+     */
+    readonly authorizerId: SimHttpApiAuthorizerId | undefined;
+    readonly authorizationScopes: SimHttpApiRouteScopes;
+    constructor(properties: SimHttpApiRouteProperties);
+    /**
+     * The route key as it was written, which is what the API reports back and
+     * what reaches the handler as `event.routeKey`.
+     */
+    get routeKey(): string;
+    /**
+     * The route's target, in the `integrations/<id>` form the API takes it in
+     * and hands it back.
+     */
+    get target(): string;
+    /**
+     * Get the AWS-like view of this route.
+     */
+    view(): SimHttpApiRouteView;
+}
+export {};
+//# sourceMappingURL=sim-http-api-route.d.ts.map

package/dist/service/apigatewayv2/api/route/sim-http-api-route.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-route.d.ts","sourceRoot":"","sources":["../../../../../src/service/apigatewayv2/api/route/sim-http-api-route.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,gCAAgC,CAAC;AAC5D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AACvF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAC;AAC1F,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,8BAA8B,CAAC;AAEtC;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG,KAAK,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;AAEnE;;;;;;;GAOG;AACH,MAAM,MAAM,2BAA2B,GAAG,MAAM,GAAG,KAAK,GAAG,SAAS,CAAC;AAErE;;GAEG;AACH,wBAAgB,qBAAqB,IAAI,iBAAiB,CAEzD;AAED,UAAU,yBAAyB;IACjC,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,QAAQ,CAAC,GAAG,EAAE,kBAAkB,CAAC;IACjC,QAAQ,CAAC,aAAa,EAAE,uBAAuB,CAAC;IAChD,QAAQ,CAAC,iBAAiB,EAAE,2BAA2B,CAAC;IACxD,QAAQ,CAAC,YAAY,CAAC,EAAE,sBAAsB,GAAG,SAAS,CAAC;IAC3D,QAAQ,CAAC,mBAAmB,CAAC,EAAE,qBAAqB,GAAG,SAAS,CAAC;CAClE;AAED;;;GAGG;AACH,qBAAa,eAAe;IAC1B,SAAgB,OAAO,EAAE,iBAAiB,CAAC;IAC3C,SAAgB,GAAG,EAAE,kBAAkB,CAAC;IACxC,SAAgB,aAAa,EAAE,uBAAuB,CAAC;IACvD,SAAgB,iBAAiB,EAAE,2BAA2B,CAAC;IAE/D;;;;OAIG;IACH,SAAgB,YAAY,EAAE,sBAAsB,GAAG,SAAS,CAAC;IAEjE,SAAgB,mBAAmB,EAAE,qBAAqB,CAAC;IAE3D,YAAY,UAAU,EAAE,yBAAyB,EAQhD;IAED;;;OAGG;IACH,IAAI,QAAQ,IAAI,MAAM,CAErB;IAED;;;OAGG;IACH,IAAI,MAAM,IAAI,MAAM,CAEnB;IAED;;OAEG;IACH,IAAI,IAAI,mBAAmB,CAE1B;CACF"}

package/dist/service/apigatewayv2/api/route/sim-http-api-route.js

@@ -0,0 +1,56 @@
+import { faker } from "@faker-js/faker";
+import { SimHttpApiRouteScopes } from "./sim-http-api-route-scopes.js";
+import { simHttpApiRouteView, } from "./sim-http-api-route-view.js";
+/**
+ * Allocate a route id, in the same opaque shape as an integration id.
+ */
+export function makeSimHttpApiRouteId() {
+    return faker.helpers.fromRegExp(/[a-z0-9]{8}/);
+}
+/**
+ * A simulated HTTP API route: which requests reach which integration, and what
+ * a caller has to present to get there.
+ */
+export class SimHttpApiRoute {
+    routeId;
+    key;
+    integrationId;
+    authorizationType;
+    /**
+     * The authorizer this route sends requests through, which only a `JWT` route
+     * has. An `AWS_IAM` route takes no authorizer, since IAM itself is what
+     * decides, and a `NONE` route authorizes nobody.
+     */
+    authorizerId;
+    authorizationScopes;
+    constructor(properties) {
+        this.routeId = properties.routeId;
+        this.key = properties.key;
+        this.integrationId = properties.integrationId;
+        this.authorizationType = properties.authorizationType;
+        this.authorizerId = properties.authorizerId;
+        this.authorizationScopes =
+            properties.authorizationScopes ?? new SimHttpApiRouteScopes();
+    }
+    /**
+     * The route key as it was written, which is what the API reports back and
+     * what reaches the handler as `event.routeKey`.
+     */
+    get routeKey() {
+        return this.key.text;
+    }
+    /**
+     * The route's target, in the `integrations/<id>` form the API takes it in
+     * and hands it back.
+     */
+    get target() {
+        return `integrations/${this.integrationId}`;
+    }
+    /**
+     * Get the AWS-like view of this route.
+     */
+    view() {
+        return simHttpApiRouteView(this);
+    }
+}
+//# sourceMappingURL=sim-http-api-route.js.map

package/dist/service/apigatewayv2/api/route/sim-http-api-route.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-route.js","sourceRoot":"","sources":["../../../../../src/service/apigatewayv2/api/route/sim-http-api-route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAMxC,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EACL,mBAAmB,GAEpB,MAAM,8BAA8B,CAAC;AAiBtC;;GAEG;AACH,MAAM,UAAU,qBAAqB;IACnC,OAAO,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAsB,CAAC;AACtE,CAAC;AAWD;;;GAGG;AACH,MAAM,OAAO,eAAe;IACV,OAAO,CAAoB;IAC3B,GAAG,CAAqB;IACxB,aAAa,CAA0B;IACvC,iBAAiB,CAA8B;IAE/D;;;;OAIG;IACa,YAAY,CAAqC;IAEjD,mBAAmB,CAAwB;IAE3D,YAAY,UAAqC;QAC/C,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;QAClC,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;QAC1B,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;QAC9C,IAAI,CAAC,iBAAiB,GAAG,UAAU,CAAC,iBAAiB,CAAC;QACtD,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;QAC5C,IAAI,CAAC,mBAAmB;YACtB,UAAU,CAAC,mBAAmB,IAAI,IAAI,qBAAqB,EAAE,CAAC;IAClE,CAAC;IAED;;;OAGG;IACH,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;IACvB,CAAC;IAED;;;OAGG;IACH,IAAI,MAAM;QACR,OAAO,gBAAgB,IAAI,CAAC,aAAa,EAAE,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,IAAI;QACF,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;CACF"}

package/dist/service/apigatewayv2/api/sim-http-api-execute-api-arn.d.ts

@@ -0,0 +1,51 @@
+import type { SimHttpApi } from "./sim-http-api.js";
+interface SimHttpApiExecuteApiArnProperties {
+    readonly api: SimHttpApi;
+    readonly stageName: string;
+    /**
+     * The method and path part of the ARN, such as `GET/orders/{orderId}` or
+     * the literal `$default`.
+     */
+    readonly methodAndPath: string;
+}
+/**
+ * The `execute-api` ARN of one request to an API.
+ *
+ * ```text
+ * arn:aws:execute-api:<region>:<account>:<apiId>/<stage>/<METHOD>/<path>
+ * ```
+ *
+ * Two things want this ARN and they fill the last part differently:
+ *
+ * - the invoke permission a Lambda integration is authorized against, where
+ *   the path is the matched route key's template with its braces intact,
+ *   because that is the form a permission's `SourceArn` is written in;
+ * - `AWS_IAM` route authorization, where the path is the path the request
+ *   asked for, because that is the resource the caller is acting on.
+ *
+ * Neither part is documented by AWS as the value API Gateway supplies. The
+ * path is the better supported of the two: CDK synthesises a `SourceArn`
+ * whose stage and method segments are wildcards and whose path segments are
+ * the route key template, braces and all. IAM wildcard matching treats a brace
+ * as a literal, so a concrete request path could never match a permission
+ * written that way.
+ *
+ * The method is weaker. AWS's CLI example for granting an `ANY /test` route on
+ * the `prod` stage wildcards the method segment, which shows what a permission
+ * may say rather than what API Gateway puts there. A concrete verb matches
+ * such a pattern, while a permission written with a literal `ANY` would not
+ * match a concrete verb, so the concrete verb is the reading that keeps a
+ * CDK-deployed route working.
+ */
+export declare class SimHttpApiExecuteApiArn {
+    private readonly api;
+    private readonly stageName;
+    private readonly methodAndPath;
+    constructor(properties: SimHttpApiExecuteApiArnProperties);
+    /**
+     * The ARN as a permission or a policy names it.
+     */
+    toString(): string;
+}
+export {};
+//# sourceMappingURL=sim-http-api-execute-api-arn.d.ts.map

package/dist/service/apigatewayv2/api/sim-http-api-execute-api-arn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-execute-api-arn.d.ts","sourceRoot":"","sources":["../../../../src/service/apigatewayv2/api/sim-http-api-execute-api-arn.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAEpD,UAAU,iCAAiC;IACzC,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;OAGG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,qBAAa,uBAAuB;IAClC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAa;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IAEvC,YAAY,UAAU,EAAE,iCAAiC,EAIxD;IAED;;OAEG;IACH,QAAQ,IAAI,MAAM,CAOjB;CACF"}

package/dist/service/apigatewayv2/api/sim-http-api-execute-api-arn.js

@@ -0,0 +1,48 @@
+/**
+ * The `execute-api` ARN of one request to an API.
+ *
+ * ```text
+ * arn:aws:execute-api:<region>:<account>:<apiId>/<stage>/<METHOD>/<path>
+ * ```
+ *
+ * Two things want this ARN and they fill the last part differently:
+ *
+ * - the invoke permission a Lambda integration is authorized against, where
+ *   the path is the matched route key's template with its braces intact,
+ *   because that is the form a permission's `SourceArn` is written in;
+ * - `AWS_IAM` route authorization, where the path is the path the request
+ *   asked for, because that is the resource the caller is acting on.
+ *
+ * Neither part is documented by AWS as the value API Gateway supplies. The
+ * path is the better supported of the two: CDK synthesises a `SourceArn`
+ * whose stage and method segments are wildcards and whose path segments are
+ * the route key template, braces and all. IAM wildcard matching treats a brace
+ * as a literal, so a concrete request path could never match a permission
+ * written that way.
+ *
+ * The method is weaker. AWS's CLI example for granting an `ANY /test` route on
+ * the `prod` stage wildcards the method segment, which shows what a permission
+ * may say rather than what API Gateway puts there. A concrete verb matches
+ * such a pattern, while a permission written with a literal `ANY` would not
+ * match a concrete verb, so the concrete verb is the reading that keeps a
+ * CDK-deployed route working.
+ */
+export class SimHttpApiExecuteApiArn {
+    api;
+    stageName;
+    methodAndPath;
+    constructor(properties) {
+        this.api = properties.api;
+        this.stageName = properties.stageName;
+        this.methodAndPath = properties.methodAndPath;
+    }
+    /**
+     * The ARN as a permission or a policy names it.
+     */
+    toString() {
+        const { accountId, regionName } = this.api.accountRegionScope;
+        return (`arn:aws:execute-api:${regionName}:${accountId}:` +
+            `${this.api.apiId}/${this.stageName}/${this.methodAndPath}`);
+    }
+}
+//# sourceMappingURL=sim-http-api-execute-api-arn.js.map

package/dist/service/apigatewayv2/api/sim-http-api-execute-api-arn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-execute-api-arn.js","sourceRoot":"","sources":["../../../../src/service/apigatewayv2/api/sim-http-api-execute-api-arn.ts"],"names":[],"mappings":"AAYA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,OAAO,uBAAuB;IACjB,GAAG,CAAa;IAChB,SAAS,CAAS;IAClB,aAAa,CAAS;IAEvC,YAAY,UAA6C;QACvD,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;QAC1B,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;IAChD,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC;QAE9D,OAAO,CACL,uBAAuB,UAAU,IAAI,SAAS,GAAG;YACjD,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,aAAa,EAAE,CAC5D,CAAC;IACJ,CAAC;CACF"}

package/dist/service/apigatewayv2/api/sim-http-api-host.d.ts

@@ -0,0 +1,32 @@
+/**
+ * The DNS label API Gateway uses for the endpoint it generates for an API,
+ * sitting between the API id and the region:
+ *
+ *   <api-id>.execute-api.<region>.amazonaws.com
+ *
+ * It is also the SigV4 signing name of that endpoint, which is not the signing
+ * name of the API Gateway control plane.
+ */
+export declare const executeApiHostLabel = "execute-api";
+/**
+ * The real AWS domain generated API endpoints live under.
+ */
+export declare const executeApiDomain = "amazonaws.com";
+interface SimHttpApiHostProperties {
+    readonly apiId: string;
+    readonly regionName: string;
+}
+/**
+ * Build the real AWS endpoint hostname for an API.
+ */
+export declare function simHttpApiHost(properties: SimHttpApiHostProperties): string;
+/**
+ * Build the logical hostname for an API: the AWS endpoint hostname without the
+ * real AWS domain.
+ *
+ * This is the form Yulin serves on localhost, where the `.amazonaws.com` tail
+ * is replaced by the local suffix, in the same way S3 endpoint hostnames are.
+ */
+export declare function simHttpApiLogicalHost(properties: SimHttpApiHostProperties): string;
+export {};
+//# sourceMappingURL=sim-http-api-host.d.ts.map

package/dist/service/apigatewayv2/api/sim-http-api-host.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-host.d.ts","sourceRoot":"","sources":["../../../../src/service/apigatewayv2/api/sim-http-api-host.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,gBAAgB,CAAC;AAEjD;;GAEG;AACH,eAAO,MAAM,gBAAgB,kBAAkB,CAAC;AAEhD,UAAU,wBAAwB;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,UAAU,EAAE,wBAAwB,GAAG,MAAM,CAE3E;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,wBAAwB,GACnC,MAAM,CAER"}