@kensio/yulin 0.47.0 → 1.1.0

package/dist/service/apigatewayv2/openapi/sim-http-api-openapi-value.js

@@ -0,0 +1,128 @@
+import { SimHttpApiOpenApiObject } from "./sim-http-api-openapi-object.js";
+import { simHttpApiOpenApiRefusal } from "./sim-http-api-openapi-refusal.js";
+const missing = "is required, and the document does not carry it";
+/**
+ * One value of the document being imported, at the pointer that reaches it.
+ *
+ * A document arrives as whatever JSON held, so every read narrows a value and
+ * refuses the shapes it cannot be. Nothing here knows what any member means:
+ * that is the readers above, which is what keeps the narrowing in one place
+ * and the meaning in classes named after the thing they read.
+ */
+export class SimHttpApiOpenApiValue {
+    pointer;
+    value;
+    constructor(properties) {
+        this.pointer = properties.pointer;
+        this.value = properties.value;
+    }
+    /**
+     * Whether the document leaves this member out.
+     */
+    absent() {
+        return this.value === undefined;
+    }
+    /**
+     * Refuse this member, naming where it is in the document.
+     */
+    refusal(reason) {
+        return simHttpApiOpenApiRefusal(this.pointer, reason);
+    }
+    /**
+     * This value as an object, refusing a document that left it out.
+     */
+    object() {
+        const object = this.optionalObject();
+        if (object === undefined) {
+            throw this.refusal(missing);
+        }
+        return object;
+    }
+    /**
+     * This value as an object when the document carries one.
+     */
+    optionalObject() {
+        if (this.value === undefined) {
+            return undefined;
+        }
+        if (typeof this.value !== "object" ||
+            this.value === null ||
+            Array.isArray(this.value)) {
+            throw this.refusal("has to be an object");
+        }
+        return new SimHttpApiOpenApiObject({
+            pointer: this.pointer,
+            members: new Map(Object.entries(this.value)),
+        });
+    }
+    /**
+     * This value as a string, refusing a document that left it out.
+     */
+    requiredString() {
+        const text = this.optionalString();
+        if (text === undefined || text.length === 0) {
+            throw this.refusal(missing);
+        }
+        return text;
+    }
+    /**
+     * This value as a string when the document carries one.
+     */
+    optionalString() {
+        if (this.value === undefined) {
+            return undefined;
+        }
+        if (typeof this.value !== "string") {
+            throw this.refusal("has to be a string");
+        }
+        return this.value;
+    }
+    /**
+     * This value as a boolean when the document carries one, which is the shape
+     * an authorizer's `enableSimpleResponses` takes.
+     */
+    optionalBoolean() {
+        if (this.value === undefined) {
+            return undefined;
+        }
+        if (typeof this.value !== "boolean") {
+            throw this.refusal("has to be a boolean");
+        }
+        return this.value;
+    }
+    /**
+     * This value as a number when the document carries one, which is the shape
+     * an authorizer's `authorizerResultTtlInSeconds` takes.
+     */
+    optionalNumber() {
+        if (this.value === undefined) {
+            return undefined;
+        }
+        if (typeof this.value !== "number") {
+            throw this.refusal("has to be a number");
+        }
+        return this.value;
+    }
+    /**
+     * The entries of this value as an array, when the document carries one.
+     */
+    optionalArray() {
+        if (this.value === undefined) {
+            return undefined;
+        }
+        if (!Array.isArray(this.value)) {
+            throw this.refusal("has to be an array");
+        }
+        return this.value.map((entry, index) => new SimHttpApiOpenApiValue({
+            pointer: this.pointer.child(String(index)),
+            value: entry,
+        }));
+    }
+    /**
+     * The entries of this value as strings, when the document carries them.
+     */
+    optionalStringList() {
+        return this.optionalArray()?.map((entry) => entry.requiredString());
+    }
+}
+//# sourceMappingURL=sim-http-api-openapi-value.js.map

package/dist/service/apigatewayv2/openapi/sim-http-api-openapi-value.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-openapi-value.js","sourceRoot":"","sources":["../../../../src/service/apigatewayv2/openapi/sim-http-api-openapi-value.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAE3E,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAO7E,MAAM,OAAO,GAAG,iDAAiD,CAAC;AAElE;;;;;;;GAOG;AACH,MAAM,OAAO,sBAAsB;IACjB,OAAO,CAA2B;IACjC,KAAK,CAAwB;IAE9C,YAAY,UAA4C;QACtD,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;QAClC,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,MAAM;QACJ,OAAO,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,MAAc;QACpB,OAAO,wBAAwB,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,MAAM;QACJ,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QAErC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IACE,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;YAC9B,IAAI,CAAC,KAAK,KAAK,IAAI;YACnB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EACzB,CAAC;YACD,MAAM,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QAC5C,CAAC;QAED,OAAO,IAAI,uBAAuB,CAAC;YACjC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SAC7C,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QAEnC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YACnC,MAAM,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED;;;OAGG;IACH,eAAe;QACb,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QAC5C,CAAC;QAED,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED;;;OAGG;IACH,cAAc;QACZ,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YACnC,MAAM,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED;;OAEG;IACH,aAAa;QACX,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CACnB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CACf,IAAI,sBAAsB,CAAC;YACzB,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC1C,KAAK,EAAE,KAAK;SACb,CAAC,CACL,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,OAAO,IAAI,CAAC,aAAa,EAAE,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC;IACtE,CAAC;CACF"}

package/dist/service/apigatewayv2/registry/sim-http-api-registry.d.ts

@@ -0,0 +1,31 @@
+import type { SimAwsAccountId } from "../../aws/sim-aws-account.js";
+import { type SimHttpApiId } from "../api/sim-http-api-id.js";
+/**
+ * Simulated API Gateway cross-Account registry of API ids.
+ *
+ * A served request carries its region in the hostname, but not the Account.
+ * Simulated API Gateway state is per Account/Region, so the serving layer
+ * needs a way to get from an API id to the Account that owns it. This registry
+ * is that lookup, which is why API ids are allocated here and are unique
+ * across every Account and Region of one simulated AWS environment.
+ */
+export declare class SimHttpApiRegistry {
+    private readonly apiAccountIds;
+    /**
+     * Allocate an API id that is unique in this simulated AWS, and register it
+     * to the Account that will own it.
+     *
+     * Allocation and registration are one step because an id nothing owns is not
+     * a useful thing to hold: it would resolve to no Account and route nowhere.
+     */
+    allocateApiId(accountId: SimAwsAccountId): SimHttpApiId;
+    /**
+     * Forget a deleted API's id, so its endpoint stops resolving.
+     */
+    deregisterApi(apiId: SimHttpApiId): void;
+    /**
+     * Get the Account that owns an API id, if it is registered.
+     */
+    accountIdForApi(apiId: string): SimAwsAccountId | undefined;
+}
+//# sourceMappingURL=sim-http-api-registry.d.ts.map

package/dist/service/apigatewayv2/registry/sim-http-api-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-registry.d.ts","sourceRoot":"","sources":["../../../../src/service/apigatewayv2/registry/sim-http-api-registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAoB,KAAK,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAEhF;;;;;;;;GAQG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA4C;IAE1E;;;;;;OAMG;IACH,aAAa,CAAC,SAAS,EAAE,eAAe,GAAG,YAAY,CAWtD;IAED;;OAEG;IACH,aAAa,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,CAEvC;IAED;;OAEG;IACH,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAE1D;CACF"}

package/dist/service/apigatewayv2/registry/sim-http-api-registry.js

@@ -0,0 +1,42 @@
+import { makeSimHttpApiId } from "../api/sim-http-api-id.js";
+/**
+ * Simulated API Gateway cross-Account registry of API ids.
+ *
+ * A served request carries its region in the hostname, but not the Account.
+ * Simulated API Gateway state is per Account/Region, so the serving layer
+ * needs a way to get from an API id to the Account that owns it. This registry
+ * is that lookup, which is why API ids are allocated here and are unique
+ * across every Account and Region of one simulated AWS environment.
+ */
+export class SimHttpApiRegistry {
+    apiAccountIds = new Map();
+    /**
+     * Allocate an API id that is unique in this simulated AWS, and register it
+     * to the Account that will own it.
+     *
+     * Allocation and registration are one step because an id nothing owns is not
+     * a useful thing to hold: it would resolve to no Account and route nowhere.
+     */
+    allocateApiId(accountId) {
+        let apiId = makeSimHttpApiId();
+        while (this.apiAccountIds.has(apiId)) {
+            /* v8 ignore next -- does not happen in practice */
+            apiId = makeSimHttpApiId();
+        }
+        this.apiAccountIds.set(apiId, accountId);
+        return apiId;
+    }
+    /**
+     * Forget a deleted API's id, so its endpoint stops resolving.
+     */
+    deregisterApi(apiId) {
+        this.apiAccountIds.delete(apiId);
+    }
+    /**
+     * Get the Account that owns an API id, if it is registered.
+     */
+    accountIdForApi(apiId) {
+        return this.apiAccountIds.get(apiId);
+    }
+}
+//# sourceMappingURL=sim-http-api-registry.js.map

package/dist/service/apigatewayv2/registry/sim-http-api-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-registry.js","sourceRoot":"","sources":["../../../../src/service/apigatewayv2/registry/sim-http-api-registry.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAqB,MAAM,2BAA2B,CAAC;AAEhF;;;;;;;;GAQG;AACH,MAAM,OAAO,kBAAkB;IACZ,aAAa,GAAG,IAAI,GAAG,EAAiC,CAAC;IAE1E;;;;;;OAMG;IACH,aAAa,CAAC,SAA0B;QACtC,IAAI,KAAK,GAAG,gBAAgB,EAAE,CAAC;QAE/B,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACrC,mDAAmD;YACnD,KAAK,GAAG,gBAAgB,EAAE,CAAC;QAC7B,CAAC;QAED,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAEzC,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,KAAmB;QAC/B,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,KAAa;QAC3B,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAqB,CAAC,CAAC;IACvD,CAAC;CACF"}

package/dist/service/apigatewayv2/sdk/sim-api-gateway-v2-sdk-command-router.d.ts

@@ -0,0 +1,19 @@
+import { type SimSdkCommandRoute, type SimSdkCommandRouter } from "../../../sdk/index.js";
+import type { SimApiGatewayV2 } from "../sim-api-gateway-v2.js";
+/**
+ * Routes intercepted SDK Commands to one scoped simulated API Gateway v2.
+ */
+export declare class SimApiGatewayV2SdkCommandRouter implements SimSdkCommandRouter {
+    private readonly routes;
+    constructor(simApiGatewayV2: SimApiGatewayV2);
+    /**
+     * The SDK Command names simulated API Gateway v2 can handle.
+     */
+    supportedCommandNames(): readonly string[];
+    /**
+     * Get the route for an SDK Command name, if simulated API Gateway v2
+     * supports it.
+     */
+    route(commandName: string): SimSdkCommandRoute | undefined;
+}
+//# sourceMappingURL=sim-api-gateway-v2-sdk-command-router.d.ts.map

package/dist/service/apigatewayv2/sdk/sim-api-gateway-v2-sdk-command-router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-api-gateway-v2-sdk-command-router.d.ts","sourceRoot":"","sources":["../../../../src/service/apigatewayv2/sdk/sim-api-gateway-v2-sdk-command-router.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACzB,MAAM,uBAAuB,CAAC;AAyB/B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAEhE;;GAEG;AACH,qBAAa,+BAAgC,YAAW,mBAAmB;IACzE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0C;IAEjE,YAAY,eAAe,EAAE,eAAe,EAmH3C;IAED;;OAEG;IACH,qBAAqB,IAAI,SAAS,MAAM,EAAE,CAEzC;IAED;;;OAGG;IACH,KAAK,CAAC,WAAW,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAEzD;CACF"}

package/dist/service/apigatewayv2/sdk/sim-api-gateway-v2-sdk-command-router.js

@@ -0,0 +1,81 @@
+import { simSdkCallerOptions, } from "../../../sdk/index.js";
+/**
+ * Routes intercepted SDK Commands to one scoped simulated API Gateway v2.
+ */
+export class SimApiGatewayV2SdkCommandRouter {
+    routes;
+    constructor(simApiGatewayV2) {
+        this.routes = new Map([
+            [
+                "CreateApiCommand",
+                async (command, context) => await simApiGatewayV2.createApi(command, simSdkCallerOptions(context)),
+            ],
+            [
+                "ImportApiCommand",
+                async (command, context) => await simApiGatewayV2.importApi(command, simSdkCallerOptions(context)),
+            ],
+            [
+                "GetApiCommand",
+                async (command, context) => await simApiGatewayV2.getApi(command, simSdkCallerOptions(context)),
+            ],
+            [
+                "GetApisCommand",
+                async (command, context) => await simApiGatewayV2.getApis(command, simSdkCallerOptions(context)),
+            ],
+            [
+                "DeleteApiCommand",
+                async (command, context) => await simApiGatewayV2.deleteApi(command, simSdkCallerOptions(context)),
+            ],
+            [
+                "CreateAuthorizerCommand",
+                async (command, context) => await simApiGatewayV2.createAuthorizer(command, simSdkCallerOptions(context)),
+            ],
+            [
+                "GetAuthorizersCommand",
+                async (command, context) => await simApiGatewayV2.getAuthorizers(command, simSdkCallerOptions(context)),
+            ],
+            [
+                "DeleteAuthorizerCommand",
+                async (command, context) => await simApiGatewayV2.deleteAuthorizer(command, simSdkCallerOptions(context)),
+            ],
+            [
+                "CreateIntegrationCommand",
+                async (command, context) => await simApiGatewayV2.createIntegration(command, simSdkCallerOptions(context)),
+            ],
+            [
+                "GetIntegrationsCommand",
+                async (command, context) => await simApiGatewayV2.getIntegrations(command, simSdkCallerOptions(context)),
+            ],
+            [
+                "CreateRouteCommand",
+                async (command, context) => await simApiGatewayV2.createRoute(command, simSdkCallerOptions(context)),
+            ],
+            [
+                "GetRoutesCommand",
+                async (command, context) => await simApiGatewayV2.getRoutes(command, simSdkCallerOptions(context)),
+            ],
+            [
+                "CreateStageCommand",
+                async (command, context) => await simApiGatewayV2.createStage(command, simSdkCallerOptions(context)),
+            ],
+            [
+                "GetStagesCommand",
+                async (command, context) => await simApiGatewayV2.getStages(command, simSdkCallerOptions(context)),
+            ],
+        ]);
+    }
+    /**
+     * The SDK Command names simulated API Gateway v2 can handle.
+     */
+    supportedCommandNames() {
+        return this.routes.keys().toArray();
+    }
+    /**
+     * Get the route for an SDK Command name, if simulated API Gateway v2
+     * supports it.
+     */
+    route(commandName) {
+        return this.routes.get(commandName);
+    }
+}
+//# sourceMappingURL=sim-api-gateway-v2-sdk-command-router.js.map

package/dist/service/apigatewayv2/sdk/sim-api-gateway-v2-sdk-command-router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-api-gateway-v2-sdk-command-router.js","sourceRoot":"","sources":["../../../../src/service/apigatewayv2/sdk/sim-api-gateway-v2-sdk-command-router.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,GAGpB,MAAM,uBAAuB,CAAC;AA2B/B;;GAEG;AACH,MAAM,OAAO,+BAA+B;IACzB,MAAM,CAA0C;IAEjE,YAAY,eAAgC;QAC1C,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,CAA6B;YAChD;gBACE,kBAAkB;gBAClB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,eAAe,CAAC,SAAS,CAC7B,OAA8B,EAC9B,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,kBAAkB;gBAClB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,eAAe,CAAC,SAAS,CAC7B,OAA8B,EAC9B,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,eAAe;gBACf,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,eAAe,CAAC,MAAM,CAC1B,OAA2B,EAC3B,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,gBAAgB;gBAChB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,eAAe,CAAC,OAAO,CAC3B,OAA4B,EAC5B,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,kBAAkB;gBAClB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,eAAe,CAAC,SAAS,CAC7B,OAA8B,EAC9B,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,yBAAyB;gBACzB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,eAAe,CAAC,gBAAgB,CACpC,OAAqC,EACrC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,uBAAuB;gBACvB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,eAAe,CAAC,cAAc,CAClC,OAAmC,EACnC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,yBAAyB;gBACzB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,eAAe,CAAC,gBAAgB,CACpC,OAAqC,EACrC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,0BAA0B;gBAC1B,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,eAAe,CAAC,iBAAiB,CACrC,OAAsC,EACtC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,wBAAwB;gBACxB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,eAAe,CAAC,eAAe,CACnC,OAAoC,EACpC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,oBAAoB;gBACpB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,eAAe,CAAC,WAAW,CAC/B,OAAgC,EAChC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,kBAAkB;gBAClB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,eAAe,CAAC,SAAS,CAC7B,OAA8B,EAC9B,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,oBAAoB;gBACpB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,eAAe,CAAC,WAAW,CAC/B,OAAgC,EAChC,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;YACD;gBACE,kBAAkB;gBAClB,KAAK,EAAE,OAAO,EAAE,OAAO,EAAoB,EAAE,CAC3C,MAAM,eAAe,CAAC,SAAS,CAC7B,OAA8B,EAC9B,mBAAmB,CAAC,OAAO,CAAC,CAC7B;aACJ;SACF,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,qBAAqB;QACnB,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IACtC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,WAAmB;QACvB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACtC,CAAC;CACF"}

package/dist/service/apigatewayv2/serve/auth/sim-http-api-authorizer-decisions.d.ts

@@ -0,0 +1,36 @@
+import type { SimClock } from "../../../../util/clock/sim-clock.js";
+import type { SimHttpApiAuthorization } from "../../api/authorizer/sim-http-api-authorization.js";
+import type { SimHttpApiRequestAuthorizer } from "../../api/authorizer/sim-http-api-request-authorizer.js";
+interface SimHttpApiAuthorizerDecisionsProperties {
+    /**
+     * Clock a held decision expires against, so advancing simulated time drops
+     * one that was being reused a moment before.
+     */
+    readonly clock: SimClock;
+}
+/**
+ * Reuses a Lambda authorizer's decision for as long as its
+ * `AuthorizerResultTtlInSeconds` says, and makes a new one when there is none
+ * to reuse.
+ *
+ * What is held and what is not is the whole of this: a refusal is held the way
+ * an admission is, because AWS holds whatever answer the authorizer gave. An
+ * authorizer that could not answer at all is not held, since there is no
+ * answer to hold and a request a moment later may find its function working.
+ */
+export declare class SimHttpApiAuthorizerDecisions {
+    private readonly clock;
+    constructor(properties: SimHttpApiAuthorizerDecisionsProperties);
+    /**
+     * The decision for these identity source values, made only if there is not
+     * one already.
+     */
+    decide(authorizer: SimHttpApiRequestAuthorizer, identitySource: readonly string[], invoke: () => Promise<SimHttpApiAuthorization>): Promise<SimHttpApiAuthorization>;
+    /**
+     * Whether this is something the authorizer answered, rather than the
+     * authorizer failing to answer.
+     */
+    private isAnswer;
+}
+export {};
+//# sourceMappingURL=sim-http-api-authorizer-decisions.d.ts.map

package/dist/service/apigatewayv2/serve/auth/sim-http-api-authorizer-decisions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-authorizer-decisions.d.ts","sourceRoot":"","sources":["../../../../../src/service/apigatewayv2/serve/auth/sim-http-api-authorizer-decisions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,oDAAoD,CAAC;AAClG,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,yDAAyD,CAAC;AAE3G,UAAU,uCAAuC;IAC/C;;;OAGG;IACH,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED;;;;;;;;;GASG;AACH,qBAAa,6BAA6B;IACxC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IAEjC,YAAY,UAAU,EAAE,uCAAuC,EAE9D;IAED;;;OAGG;IACG,MAAM,CACV,UAAU,EAAE,2BAA2B,EACvC,cAAc,EAAE,SAAS,MAAM,EAAE,EACjC,MAAM,EAAE,MAAM,OAAO,CAAC,uBAAuB,CAAC,GAC7C,OAAO,CAAC,uBAAuB,CAAC,CAclC;IAED;;;OAGG;IACH,OAAO,CAAC,QAAQ;CAGjB"}

package/dist/service/apigatewayv2/serve/auth/sim-http-api-authorizer-decisions.js

@@ -0,0 +1,39 @@
+/**
+ * Reuses a Lambda authorizer's decision for as long as its
+ * `AuthorizerResultTtlInSeconds` says, and makes a new one when there is none
+ * to reuse.
+ *
+ * What is held and what is not is the whole of this: a refusal is held the way
+ * an admission is, because AWS holds whatever answer the authorizer gave. An
+ * authorizer that could not answer at all is not held, since there is no
+ * answer to hold and a request a moment later may find its function working.
+ */
+export class SimHttpApiAuthorizerDecisions {
+    clock;
+    constructor(properties) {
+        this.clock = properties.clock;
+    }
+    /**
+     * The decision for these identity source values, made only if there is not
+     * one already.
+     */
+    async decide(authorizer, identitySource, invoke) {
+        const cached = authorizer.results.find(identitySource, this.clock.now());
+        if (cached !== undefined) {
+            return cached;
+        }
+        const authorization = await invoke();
+        if (this.isAnswer(authorization)) {
+            authorizer.results.store(identitySource, this.clock.now(), authorization);
+        }
+        return authorization;
+    }
+    /**
+     * Whether this is something the authorizer answered, rather than the
+     * authorizer failing to answer.
+     */
+    isAnswer(authorization) {
+        return authorization.admitted || authorization.kind !== "error";
+    }
+}
+//# sourceMappingURL=sim-http-api-authorizer-decisions.js.map

package/dist/service/apigatewayv2/serve/auth/sim-http-api-authorizer-decisions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-authorizer-decisions.js","sourceRoot":"","sources":["../../../../../src/service/apigatewayv2/serve/auth/sim-http-api-authorizer-decisions.ts"],"names":[],"mappings":"AAYA;;;;;;;;;GASG;AACH,MAAM,OAAO,6BAA6B;IACvB,KAAK,CAAW;IAEjC,YAAY,UAAmD;QAC7D,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAChC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CACV,UAAuC,EACvC,cAAiC,EACjC,MAA8C;QAE9C,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;QAEzE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,aAAa,GAAG,MAAM,MAAM,EAAE,CAAC;QAErC,IAAI,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;YACjC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,aAAa,CAAC,CAAC;QAC5E,CAAC;QAED,OAAO,aAAa,CAAC;IACvB,CAAC;IAED;;;OAGG;IACK,QAAQ,CAAC,aAAsC;QACrD,OAAO,aAAa,CAAC,QAAQ,IAAI,aAAa,CAAC,IAAI,KAAK,OAAO,CAAC;IAClE,CAAC;CACF"}

package/dist/service/apigatewayv2/serve/auth/sim-http-api-authorizer-event.d.ts

@@ -0,0 +1,58 @@
+import type { SimPayload2Endpoint } from "../../../../serve/payload-2/sim-payload-2-endpoint.js";
+import type { SimPayload2Event } from "../../../../serve/payload-2/sim-payload-2-event.type.js";
+import type { SimClock } from "../../../../util/clock/sim-clock.js";
+/**
+ * The event a payload format 2.0 Lambda `REQUEST` authorizer is invoked with.
+ *
+ * It is the payload format 2.0 request event with three members added and the
+ * body left out. AWS's own example of this event carries no `body` and no
+ * `isBase64Encoded`, which is the one published account of what an authorizer
+ * receives, so neither is sent here: an authorizer written against a body it
+ * would not get on AWS is exactly the divergence worth refusing to create.
+ */
+export interface SimHttpApiAuthorizerEvent extends Omit<SimPayload2Event, "body" | "isBase64Encoded"> {
+    type: "REQUEST";
+    /**
+     * The route the request matched, as an `execute-api` ARN. A policy response
+     * is evaluated against this same ARN.
+     */
+    routeArn: string;
+    /**
+     * What the request carried at each of the authorizer's identity sources, in
+     * the order they were configured. These are the values, not the expressions
+     * that found them.
+     */
+    identitySource: string[];
+}
+interface SimHttpApiAuthorizerEventInput {
+    readonly request: Request;
+    readonly endpoint: SimPayload2Endpoint;
+    readonly routeArn: string;
+    readonly identitySource: readonly string[];
+}
+interface SimHttpApiAuthorizerEventBuilderProperties {
+    /** Clock stamping the event's requestContext time. */
+    readonly clock: SimClock;
+}
+/**
+ * Builds the event a Lambda `REQUEST` authorizer is invoked with.
+ *
+ * The members are copied across one at a time rather than spread, so what an
+ * authorizer receives is stated here rather than following from whatever the
+ * integration event happens to hold.
+ */
+export declare class SimHttpApiAuthorizerEventBuilder {
+    private readonly eventBuilder;
+    constructor(properties: SimHttpApiAuthorizerEventBuilderProperties);
+    /**
+     * Build the authorizer event for one request.
+     */
+    build(input: SimHttpApiAuthorizerEventInput): Promise<SimHttpApiAuthorizerEvent>;
+    /**
+     * Copy across the members the request only sometimes has, which the event
+     * builder leaves out when it has nothing to put there.
+     */
+    private addPresentFields;
+}
+export {};
+//# sourceMappingURL=sim-http-api-authorizer-event.d.ts.map

package/dist/service/apigatewayv2/serve/auth/sim-http-api-authorizer-event.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-authorizer-event.d.ts","sourceRoot":"","sources":["../../../../../src/service/apigatewayv2/serve/auth/sim-http-api-authorizer-event.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uDAAuD,CAAC;AAEjG,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yDAAyD,CAAC;AAChG,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qCAAqC,CAAC;AAEpE;;;;;;;;GAQG;AACH,MAAM,WAAW,yBAA0B,SAAQ,IAAI,CACrD,gBAAgB,EAChB,MAAM,GAAG,iBAAiB,CAC3B;IACC,IAAI,EAAE,SAAS,CAAC;IAChB;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,UAAU,8BAA8B;IACtC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC;IACvC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;CAC5C;AAED,UAAU,0CAA0C;IAClD,sDAAsD;IACtD,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED;;;;;;GAMG;AACH,qBAAa,gCAAgC;IAC3C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA0B;IAEvD,YAAY,UAAU,EAAE,0CAA0C,EAIjE;IAED;;OAEG;IACG,KAAK,CACT,KAAK,EAAE,8BAA8B,GACpC,OAAO,CAAC,yBAAyB,CAAC,CAwBpC;IAED;;;OAGG;IACH,OAAO,CAAC,gBAAgB;CAuBzB"}

package/dist/service/apigatewayv2/serve/auth/sim-http-api-authorizer-event.js

@@ -0,0 +1,58 @@
+import { SimPayload2EventBuilder } from "../../../../serve/payload-2/sim-payload-2-event-builder.js";
+/**
+ * Builds the event a Lambda `REQUEST` authorizer is invoked with.
+ *
+ * The members are copied across one at a time rather than spread, so what an
+ * authorizer receives is stated here rather than following from whatever the
+ * integration event happens to hold.
+ */
+export class SimHttpApiAuthorizerEventBuilder {
+    eventBuilder;
+    constructor(properties) {
+        this.eventBuilder = new SimPayload2EventBuilder({
+            clock: properties.clock,
+        });
+    }
+    /**
+     * Build the authorizer event for one request.
+     */
+    async build(input) {
+        // The request is cloned because reading it consumes its body, and the
+        // integration behind the route still has to build an event of its own from
+        // the same request.
+        const requestEvent = await this.eventBuilder.build(input.request.clone(), input.endpoint);
+        const event = {
+            version: requestEvent.version,
+            type: "REQUEST",
+            routeArn: input.routeArn,
+            identitySource: [...input.identitySource],
+            routeKey: requestEvent.routeKey,
+            rawPath: requestEvent.rawPath,
+            rawQueryString: requestEvent.rawQueryString,
+            headers: requestEvent.headers,
+            requestContext: requestEvent.requestContext,
+        };
+        this.addPresentFields(event, requestEvent);
+        return event;
+    }
+    /**
+     * Copy across the members the request only sometimes has, which the event
+     * builder leaves out when it has nothing to put there.
+     */
+    addPresentFields(event, requestEvent) {
+        const { cookies, queryStringParameters, pathParameters, stageVariables } = requestEvent;
+        if (cookies !== undefined) {
+            event.cookies = cookies;
+        }
+        if (queryStringParameters !== undefined) {
+            event.queryStringParameters = queryStringParameters;
+        }
+        if (pathParameters !== undefined) {
+            event.pathParameters = pathParameters;
+        }
+        if (stageVariables !== undefined) {
+            event.stageVariables = stageVariables;
+        }
+    }
+}
+//# sourceMappingURL=sim-http-api-authorizer-event.js.map

package/dist/service/apigatewayv2/serve/auth/sim-http-api-authorizer-event.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-authorizer-event.js","sourceRoot":"","sources":["../../../../../src/service/apigatewayv2/serve/auth/sim-http-api-authorizer-event.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,MAAM,4DAA4D,CAAC;AA2CrG;;;;;;GAMG;AACH,MAAM,OAAO,gCAAgC;IAC1B,YAAY,CAA0B;IAEvD,YAAY,UAAsD;QAChE,IAAI,CAAC,YAAY,GAAG,IAAI,uBAAuB,CAAC;YAC9C,KAAK,EAAE,UAAU,CAAC,KAAK;SACxB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK,CACT,KAAqC;QAErC,sEAAsE;QACtE,2EAA2E;QAC3E,oBAAoB;QACpB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAChD,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EACrB,KAAK,CAAC,QAAQ,CACf,CAAC;QAEF,MAAM,KAAK,GAA8B;YACvC,OAAO,EAAE,YAAY,CAAC,OAAO;YAC7B,IAAI,EAAE,SAAS;YACf,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,cAAc,EAAE,CAAC,GAAG,KAAK,CAAC,cAAc,CAAC;YACzC,QAAQ,EAAE,YAAY,CAAC,QAAQ;YAC/B,OAAO,EAAE,YAAY,CAAC,OAAO;YAC7B,cAAc,EAAE,YAAY,CAAC,cAAc;YAC3C,OAAO,EAAE,YAAY,CAAC,OAAO;YAC7B,cAAc,EAAE,YAAY,CAAC,cAAc;SAC5C,CAAC;QAEF,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QAE3C,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;OAGG;IACK,gBAAgB,CACtB,KAAgC,EAChC,YAA8B;QAE9B,MAAM,EAAE,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,cAAc,EAAE,GACtE,YAAY,CAAC;QAEf,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC;QAC1B,CAAC;QAED,IAAI,qBAAqB,KAAK,SAAS,EAAE,CAAC;YACxC,KAAK,CAAC,qBAAqB,GAAG,qBAAqB,CAAC;QACtD,CAAC;QAED,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACjC,KAAK,CAAC,cAAc,GAAG,cAAc,CAAC;QACxC,CAAC;QAED,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACjC,KAAK,CAAC,cAAc,GAAG,cAAc,CAAC;QACxC,CAAC;IACH,CAAC;CACF"}

package/dist/service/apigatewayv2/serve/auth/sim-http-api-authorizer-invocation.d.ts

@@ -0,0 +1,36 @@
+import type { SimClock } from "../../../../util/clock/sim-clock.js";
+import { type SimHttpApiAuthorization } from "../../api/authorizer/sim-http-api-authorization.js";
+import type { SimHttpApiRequestAuthorizer } from "../../api/authorizer/sim-http-api-request-authorizer.js";
+import type { SimHttpApiLambdaUri } from "../../api/integration/sim-http-api-lambda-uri.js";
+import type { SimHttpApiFunctionTarget } from "../sim-api-gateway-v2-router.js";
+import type { SimHttpApiRouteAuthorizeInput } from "./sim-http-api-route-authorize-input.js";
+/**
+ * Finds the function an authorizer names, which the serving router does.
+ */
+export interface SimHttpApiAuthorizerFunctions {
+    functionFor(lambdaUri: SimHttpApiLambdaUri): SimHttpApiFunctionTarget | undefined;
+}
+interface SimHttpApiAuthorizerInvocationProperties {
+    /** Clock the authorizer's own invocation event is stamped with. */
+    readonly clock: SimClock;
+    readonly functions: SimHttpApiAuthorizerFunctions;
+}
+/**
+ * Invokes a Lambda `REQUEST` authorizer's function and reads what it answered.
+ *
+ * The API's permission to invoke that function is asked first, under an ARN
+ * naming the authorizer rather than any route. A function that is not there,
+ * one the API may not invoke, and one that failed are the same 500, as they
+ * are on real AWS: none of them is anything the caller could act on.
+ */
+export declare class SimHttpApiAuthorizerInvocation {
+    private readonly functions;
+    private readonly eventBuilder;
+    constructor(properties: SimHttpApiAuthorizerInvocationProperties);
+    /**
+     * Ask the authorizer's function about one request.
+     */
+    invoke(input: SimHttpApiRouteAuthorizeInput, authorizer: SimHttpApiRequestAuthorizer, identitySource: readonly string[]): Promise<SimHttpApiAuthorization>;
+}
+export {};
+//# sourceMappingURL=sim-http-api-authorizer-invocation.d.ts.map

package/dist/service/apigatewayv2/serve/auth/sim-http-api-authorizer-invocation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-authorizer-invocation.d.ts","sourceRoot":"","sources":["../../../../../src/service/apigatewayv2/serve/auth/sim-http-api-authorizer-invocation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,EACL,KAAK,uBAAuB,EAE7B,MAAM,oDAAoD,CAAC;AAC5D,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,yDAAyD,CAAC;AAC3G,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kDAAkD,CAAC;AAE5F,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAKhF,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,yCAAyC,CAAC;AAE7F;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC5C,WAAW,CACT,SAAS,EAAE,mBAAmB,GAC7B,wBAAwB,GAAG,SAAS,CAAC;CACzC;AAED,UAAU,wCAAwC;IAChD,mEAAmE;IACnE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,6BAA6B,CAAC;CACnD;AAED;;;;;;;GAOG;AACH,qBAAa,8BAA8B;IACzC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAgC;IAC1D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAmC;IAEhE,YAAY,UAAU,EAAE,wCAAwC,EAK/D;IAED;;OAEG;IACG,MAAM,CACV,KAAK,EAAE,6BAA6B,EACpC,UAAU,EAAE,2BAA2B,EACvC,cAAc,EAAE,SAAS,MAAM,EAAE,GAChC,OAAO,CAAC,uBAAuB,CAAC,CAkClC;CACF"}

package/dist/service/apigatewayv2/serve/auth/sim-http-api-authorizer-invocation.js

@@ -0,0 +1,52 @@
+import { SimHttpApiRefused, } from "../../api/authorizer/sim-http-api-authorization.js";
+import { SimHttpApiExecuteApiArn } from "../../api/sim-http-api-execute-api-arn.js";
+import { simHttpApiEndpoint } from "../sim-http-api-endpoint.js";
+import { SimHttpApiAuthorizerEventBuilder } from "./sim-http-api-authorizer-event.js";
+import { SimHttpApiAuthorizerResponse } from "./sim-http-api-authorizer-response.js";
+import { simHttpApiMayNotInvokeAuthorizer } from "./sim-http-api-invoke-authorizer.js";
+/**
+ * Invokes a Lambda `REQUEST` authorizer's function and reads what it answered.
+ *
+ * The API's permission to invoke that function is asked first, under an ARN
+ * naming the authorizer rather than any route. A function that is not there,
+ * one the API may not invoke, and one that failed are the same 500, as they
+ * are on real AWS: none of them is anything the caller could act on.
+ */
+export class SimHttpApiAuthorizerInvocation {
+    functions;
+    eventBuilder;
+    constructor(properties) {
+        this.functions = properties.functions;
+        this.eventBuilder = new SimHttpApiAuthorizerEventBuilder({
+            clock: properties.clock,
+        });
+    }
+    /**
+     * Ask the authorizer's function about one request.
+     */
+    async invoke(input, authorizer, identitySource) {
+        const { api, match, request } = input;
+        const target = this.functions.functionFor(authorizer.lambdaUri);
+        if (target === undefined ||
+            simHttpApiMayNotInvokeAuthorizer(api, authorizer, target)) {
+            return SimHttpApiRefused.error();
+        }
+        const routeArn = SimHttpApiExecuteApiArn.forMatchedRoute(api, match, request.method).toString();
+        try {
+            const event = await this.eventBuilder.build({
+                request,
+                endpoint: simHttpApiEndpoint(api, match),
+                routeArn,
+                identitySource,
+            });
+            return new SimHttpApiAuthorizerResponse({ authorizer, routeArn }).read(await target.simFunction.invoke(event));
+        }
+        catch {
+            // An authorizer that failed tells the caller nothing, the way an
+            // integration that failed does not. Reading the request to build the
+            // event can fail the same way, so it is inside this too.
+            return SimHttpApiRefused.error();
+        }
+    }
+}
+//# sourceMappingURL=sim-http-api-authorizer-invocation.js.map

package/dist/service/apigatewayv2/serve/auth/sim-http-api-authorizer-invocation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-authorizer-invocation.js","sourceRoot":"","sources":["../../../../../src/service/apigatewayv2/serve/auth/sim-http-api-authorizer-invocation.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,iBAAiB,GAClB,MAAM,oDAAoD,CAAC;AAG5D,OAAO,EAAE,uBAAuB,EAAE,MAAM,2CAA2C,CAAC;AAEpF,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,EAAE,gCAAgC,EAAE,MAAM,oCAAoC,CAAC;AACtF,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,gCAAgC,EAAE,MAAM,qCAAqC,CAAC;AAkBvF;;;;;;;GAOG;AACH,MAAM,OAAO,8BAA8B;IACxB,SAAS,CAAgC;IACzC,YAAY,CAAmC;IAEhE,YAAY,UAAoD;QAC9D,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,YAAY,GAAG,IAAI,gCAAgC,CAAC;YACvD,KAAK,EAAE,UAAU,CAAC,KAAK;SACxB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,KAAoC,EACpC,UAAuC,EACvC,cAAiC;QAEjC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;QACtC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAEhE,IACE,MAAM,KAAK,SAAS;YACpB,gCAAgC,CAAC,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,EACzD,CAAC;YACD,OAAO,iBAAiB,CAAC,KAAK,EAAE,CAAC;QACnC,CAAC;QAED,MAAM,QAAQ,GAAG,uBAAuB,CAAC,eAAe,CACtD,GAAG,EACH,KAAK,EACL,OAAO,CAAC,MAAM,CACf,CAAC,QAAQ,EAAE,CAAC;QAEb,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;gBAC1C,OAAO;gBACP,QAAQ,EAAE,kBAAkB,CAAC,GAAG,EAAE,KAAK,CAAC;gBACxC,QAAQ;gBACR,cAAc;aACf,CAAC,CAAC;YAEH,OAAO,IAAI,4BAA4B,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,CACpE,MAAM,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CACvC,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,iEAAiE;YACjE,qEAAqE;YACrE,yDAAyD;YACzD,OAAO,iBAAiB,CAAC,KAAK,EAAE,CAAC;QACnC,CAAC;IACH,CAAC;CACF"}