@kensio/yulin 1.0.0 → 1.1.0

package/dist/service/apigatewayv2/command/authorizer/authorizer.command.d.ts

@@ -10,8 +10,9 @@ export interface SimHttpApiJwtConfigurationInput {
 /**
  * Minimal structural sim API Gateway v2 CreateAuthorizer command.
  *
- * The `REQUEST`-only options are absent here on purpose, so a Lambda
- * authorizer is refused by name rather than created as something else.
+ * `AuthorizerCredentialsArn` is absent here on purpose. It names a Role API
+ * Gateway assumes to invoke the authorizer function, and nothing here assumes
+ * one, so it is refused by name rather than accepted and ignored.
  *
  * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/apigatewayv2/command/CreateAuthorizerCommand/
  */
@@ -24,6 +25,10 @@ export interface SimCreateAuthorizerCommandInput {
     readonly AuthorizerType?: string | undefined;
     readonly IdentitySource?: readonly string[] | undefined;
     readonly JwtConfiguration?: SimHttpApiJwtConfigurationInput | undefined;
+    readonly AuthorizerUri?: string | undefined;
+    readonly AuthorizerPayloadFormatVersion?: string | undefined;
+    readonly EnableSimpleResponses?: boolean | undefined;
+    readonly AuthorizerResultTtlInSeconds?: number | undefined;
 }
 export interface SimCreateAuthorizerCommandOutput extends SimHttpApiAuthorizerView {
     readonly $metadata: SimResponseMetadata;

package/dist/service/apigatewayv2/command/authorizer/authorizer.command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authorizer.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/apigatewayv2/command/authorizer/authorizer.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,iDAAiD,CAAC;AAEhG;;GAEG;AACH,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;CACnD;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,KAAK,EAAE,+BAA+B,CAAC;CACjD;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACxD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,+BAA+B,GAAG,SAAS,CAAC;CACzE;AAED,MAAM,WAAW,gCAAiC,SAAQ,wBAAwB;IAChF,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,KAAK,EAAE,6BAA6B,CAAC;CAC/C;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACzC;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,KAAK,EAAE,SAAS,wBAAwB,EAAE,CAAC;IACpD,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,KAAK,EAAE,+BAA+B,CAAC;CACjD;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5C;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC"}
+{"version":3,"file":"authorizer.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/apigatewayv2/command/authorizer/authorizer.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,iDAAiD,CAAC;AAEhG;;GAEG;AACH,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;CACnD;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,KAAK,EAAE,+BAA+B,CAAC;CACjD;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACxD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,+BAA+B,GAAG,SAAS,CAAC;IACxE,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,8BAA8B,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7D,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACrD,QAAQ,CAAC,4BAA4B,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5D;AAED,MAAM,WAAW,gCAAiC,SAAQ,wBAAwB;IAChF,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,KAAK,EAAE,6BAA6B,CAAC;CAC/C;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACzC;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,KAAK,EAAE,SAAS,wBAAwB,EAAE,CAAC;IACpD,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,KAAK,EAAE,+BAA+B,CAAC;CACjD;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5C;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC"}

package/dist/service/apigatewayv2/command/authorizer/sim-http-api-authorizer-commands.d.ts

@@ -12,11 +12,10 @@ export declare class SimHttpApiAuthorizerCommands {
     /**
      * Handle a CreateAuthorizer command.
      *
-     * Everything a Lambda `REQUEST` authorizer is configured with, including
-     * `AuthorizerResultTtlInSeconds`, is outside the accepted set and refused by
-     * name. Nothing here runs authorizer code or caches a decision, so an
-     * authorizer that looked configured for either would behave differently on
-     * every request.
+     * The two kinds of authorizer are configured by different halves of this
+     * input, and which half applies is settled by the reader for the type asked
+     * for, so an option written against the other kind is refused by name rather
+     * than accepted and never applied.
      */
     createAuthorizer(command: SimCreateAuthorizerCommand, options?: SimApiGatewayV2RequestOptions): SimCreateAuthorizerCommandOutput;
     /**
@@ -26,11 +25,11 @@ export declare class SimHttpApiAuthorizerCommands {
     /**
      * Handle a DeleteAuthorizer command.
      *
-     * A route still pointing at the deleted authorizer keeps its
-     * `AuthorizationType: JWT` and refuses every request, since there is no
-     * longer anything to verify a token against. What real API Gateway does with
-     * such a route is not established, so the route stays closed rather than
-     * being opened or repointed.
+     * A route still pointing at the deleted authorizer keeps its authorization
+     * type and refuses every request, since there is no longer anything to send
+     * the request through. What real API Gateway does with such a route is not
+     * established, so the route stays closed rather than being opened or
+     * repointed.
      */
     deleteAuthorizer(command: SimDeleteAuthorizerCommand, options?: SimApiGatewayV2RequestOptions): SimDeleteAuthorizerCommandOutput;
 }

package/dist/service/apigatewayv2/command/authorizer/sim-http-api-authorizer-commands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-http-api-authorizer-commands.d.ts","sourceRoot":"","sources":["../../../../../src/service/apigatewayv2/command/authorizer/sim-http-api-authorizer-commands.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,0CAA0C,CAAC;AAE9F,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,KAAK,EACV,0BAA0B,EAC1B,gCAAgC,EAChC,0BAA0B,EAC1B,gCAAgC,EAChC,wBAAwB,EACxB,8BAA8B,EAC/B,MAAM,yBAAyB,CAAC;AAajC;;GAEG;AACH,qBAAa,4BAA4B;IACvC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmB;IAE1C,YAAY,UAAU,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAA;KAAE,EAE5D;IAED;;;;;;;;OAQG;IACH,gBAAgB,CACd,OAAO,EAAE,0BAA0B,EACnC,OAAO,CAAC,EAAE,6BAA6B,GACtC,gCAAgC,CAmClC;IAED;;OAEG;IACH,cAAc,CACZ,OAAO,EAAE,wBAAwB,EACjC,OAAO,CAAC,EAAE,6BAA6B,GACtC,8BAA8B,CAiBhC;IAED;;;;;;;;OAQG;IACH,gBAAgB,CACd,OAAO,EAAE,0BAA0B,EACnC,OAAO,CAAC,EAAE,6BAA6B,GACtC,gCAAgC,CA0BlC;CACF"}
+{"version":3,"file":"sim-http-api-authorizer-commands.d.ts","sourceRoot":"","sources":["../../../../../src/service/apigatewayv2/command/authorizer/sim-http-api-authorizer-commands.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,0CAA0C,CAAC;AAE9F,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,KAAK,EACV,0BAA0B,EAC1B,gCAAgC,EAChC,0BAA0B,EAC1B,gCAAgC,EAChC,wBAAwB,EACxB,8BAA8B,EAC/B,MAAM,yBAAyB,CAAC;AAsBjC;;GAEG;AACH,qBAAa,4BAA4B;IACvC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmB;IAE1C,YAAY,UAAU,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAA;KAAE,EAE5D;IAED;;;;;;;OAOG;IACH,gBAAgB,CACd,OAAO,EAAE,0BAA0B,EACnC,OAAO,CAAC,EAAE,6BAA6B,GACtC,gCAAgC,CA2BlC;IAED;;OAEG;IACH,cAAc,CACZ,OAAO,EAAE,wBAAwB,EACjC,OAAO,CAAC,EAAE,6BAA6B,GACtC,8BAA8B,CAiBhC;IAED;;;;;;;;OAQG;IACH,gBAAgB,CACd,OAAO,EAAE,0BAA0B,EACnC,OAAO,CAAC,EAAE,6BAA6B,GACtC,gCAAgC,CA0BlC;CACF"}

package/dist/service/apigatewayv2/command/authorizer/sim-http-api-authorizer-commands.js

@@ -1,7 +1,6 @@
-import { SimHttpApiAuthorizer } from "../../api/authorizer/sim-http-api-authorizer.js";
 import { SimApiGatewayV2NotFound } from "../../error/sim-api-gateway-v2.error.js";
 import { SimApiGatewayV2UnsimulatedInput } from "../sim-api-gateway-v2-unsimulated-input.js";
-import { SimHttpApiJwtAuthorizerInput } from "./sim-http-api-jwt-authorizer-input.js";
+import { simHttpApiAuthorizerInput } from "./sim-http-api-authorizer-input.js";
 const authorizersPath = "/authorizers";
 const acceptedCreateAuthorizerOptions = [
     "ApiId",
@@ -9,7 +8,15 @@ const acceptedCreateAuthorizerOptions = [
     "AuthorizerType",
     "IdentitySource",
     "JwtConfiguration",
+    "AuthorizerUri",
+    "AuthorizerPayloadFormatVersion",
+    "EnableSimpleResponses",
+    "AuthorizerResultTtlInSeconds",
 ];
+/**
+ * The authorizer types simulated.
+ */
+const simulatedAuthorizerTypes = ["JWT", "REQUEST"];
 /**
  * The commands addressing the authorizers of an API.
  */
@@ -21,36 +28,27 @@ export class SimHttpApiAuthorizerCommands {
     /**
      * Handle a CreateAuthorizer command.
      *
-     * Everything a Lambda `REQUEST` authorizer is configured with, including
-     * `AuthorizerResultTtlInSeconds`, is outside the accepted set and refused by
-     * name. Nothing here runs authorizer code or caches a decision, so an
-     * authorizer that looked configured for either would behave differently on
-     * every request.
+     * The two kinds of authorizer are configured by different halves of this
+     * input, and which half applies is settled by the reader for the type asked
+     * for, so an option written against the other kind is refused by name rather
+     * than accepted and never applied.
      */
     createAuthorizer(command, options) {
         const { input } = command;
         const unsimulated = new SimApiGatewayV2UnsimulatedInput("CreateAuthorizer");
         unsimulated.refuseUnaccepted(input, acceptedCreateAuthorizerOptions);
         const apiId = unsimulated.require("ApiId", input.ApiId);
-        const name = unsimulated.require("Name", input.Name);
+        unsimulated.require("Name", input.Name);
         unsimulated.require("AuthorizerType", input.AuthorizerType);
-        unsimulated.refuseUnless("AuthorizerType", input.AuthorizerType, "JWT", "a Lambda authorizer runs code of its own to decide, and none of that " +
-            "is simulated");
-        const authorizerInput = new SimHttpApiJwtAuthorizerInput(input);
-        const identitySource = authorizerInput.identitySource();
-        const jwtConfiguration = authorizerInput.jwtConfiguration();
+        unsimulated.refuseUnlessOneOf("AuthorizerType", input.AuthorizerType, simulatedAuthorizerTypes, "an HTTP API has these two kinds of authorizer and no others");
+        const authorizerInput = simHttpApiAuthorizerInput(input);
         const api = this.access.api({
             method: "POST",
             apiId,
             childPath: authorizersPath,
             caller: options?.caller,
         });
-        const authorizer = new SimHttpApiAuthorizer({
-            authorizerId: api.authorizers.allocateId(),
-            name,
-            identitySource,
-            jwtConfiguration,
-        });
+        const authorizer = authorizerInput.read(api.authorizers.allocateId());
         api.authorizers.add(authorizer);
         return { ...authorizer.view(), $metadata: {} };
     }
@@ -76,11 +74,11 @@ export class SimHttpApiAuthorizerCommands {
     /**
      * Handle a DeleteAuthorizer command.
      *
-     * A route still pointing at the deleted authorizer keeps its
-     * `AuthorizationType: JWT` and refuses every request, since there is no
-     * longer anything to verify a token against. What real API Gateway does with
-     * such a route is not established, so the route stays closed rather than
-     * being opened or repointed.
+     * A route still pointing at the deleted authorizer keeps its authorization
+     * type and refuses every request, since there is no longer anything to send
+     * the request through. What real API Gateway does with such a route is not
+     * established, so the route stays closed rather than being opened or
+     * repointed.
      */
     deleteAuthorizer(command, options) {
         const unsimulated = new SimApiGatewayV2UnsimulatedInput("DeleteAuthorizer");

package/dist/service/apigatewayv2/command/authorizer/sim-http-api-authorizer-commands.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-http-api-authorizer-commands.js","sourceRoot":"","sources":["../../../../../src/service/apigatewayv2/command/authorizer/sim-http-api-authorizer-commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,iDAAiD,CAAC;AACvF,OAAO,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AAElF,OAAO,EAAE,+BAA+B,EAAE,MAAM,4CAA4C,CAAC;AAU7F,OAAO,EAAE,4BAA4B,EAAE,MAAM,wCAAwC,CAAC;AAEtF,MAAM,eAAe,GAAG,cAAc,CAAC;AAEvC,MAAM,+BAA+B,GAAG;IACtC,OAAO;IACP,MAAM;IACN,gBAAgB;IAChB,gBAAgB;IAChB,kBAAkB;CACnB,CAAC;AAEF;;GAEG;AACH,MAAM,OAAO,4BAA4B;IACtB,MAAM,CAAmB;IAE1C,YAAY,UAAiD;QAC3D,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAClC,CAAC;IAED;;;;;;;;OAQG;IACH,gBAAgB,CACd,OAAmC,EACnC,OAAuC;QAEvC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAC1B,MAAM,WAAW,GAAG,IAAI,+BAA+B,CAAC,kBAAkB,CAAC,CAAC;QAC5E,WAAW,CAAC,gBAAgB,CAAC,KAAK,EAAE,+BAA+B,CAAC,CAAC;QACrE,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACxD,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACrD,WAAW,CAAC,OAAO,CAAC,gBAAgB,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;QAC5D,WAAW,CAAC,YAAY,CACtB,gBAAgB,EAChB,KAAK,CAAC,cAAc,EACpB,KAAK,EACL,uEAAuE;YACrE,cAAc,CACjB,CAAC;QAEF,MAAM,eAAe,GAAG,IAAI,4BAA4B,CAAC,KAAK,CAAC,CAAC;QAChE,MAAM,cAAc,GAAG,eAAe,CAAC,cAAc,EAAE,CAAC;QACxD,MAAM,gBAAgB,GAAG,eAAe,CAAC,gBAAgB,EAAE,CAAC;QAE5D,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;YAC1B,MAAM,EAAE,MAAM;YACd,KAAK;YACL,SAAS,EAAE,eAAe;YAC1B,MAAM,EAAE,OAAO,EAAE,MAAM;SACxB,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,IAAI,oBAAoB,CAAC;YAC1C,YAAY,EAAE,GAAG,CAAC,WAAW,CAAC,UAAU,EAAE;YAC1C,IAAI;YACJ,cAAc;YACd,gBAAgB;SACjB,CAAC,CAAC;QACH,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAEhC,OAAO,EAAE,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IACjD,CAAC;IAED;;OAEG;IACH,cAAc,CACZ,OAAiC,EACjC,OAAuC;QAEvC,MAAM,WAAW,GAAG,IAAI,+BAA+B,CAAC,gBAAgB,CAAC,CAAC;QAC1E,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACxC,WAAW,CAAC,gBAAgB,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAEhE,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;YAC1B,MAAM,EAAE,KAAK;YACb,KAAK;YACL,SAAS,EAAE,eAAe;YAC1B,MAAM,EAAE,OAAO,EAAE,MAAM;SACxB,CAAC,CAAC;QAEH,OAAO;YACL,KAAK,EAAE,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;YACpE,SAAS,EAAE,EAAE;SACd,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,gBAAgB,CACd,OAAmC,EACnC,OAAuC;QAEvC,MAAM,WAAW,GAAG,IAAI,+BAA+B,CAAC,kBAAkB,CAAC,CAAC;QAC5E,WAAW,CAAC,gBAAgB,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC;QACvE,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAChE,MAAM,YAAY,GAAG,WAAW,CAAC,OAAO,CACtC,cAAc,EACd,OAAO,CAAC,KAAK,CAAC,YAAY,CAC3B,CAAC;QAEF,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;YAC1B,MAAM,EAAE,QAAQ;YAChB,KAAK;YACL,SAAS,EAAE,GAAG,eAAe,IAAI,YAAY,EAAE;YAC/C,MAAM,EAAE,OAAO,EAAE,MAAM;SACxB,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAEtD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,uBAAuB,CAC/B,yBAAyB,YAAY,WAAW,KAAK,EAAE,CACxD,CAAC;QACJ,CAAC;QAED,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QAEhD,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC3B,CAAC;CACF"}
+{"version":3,"file":"sim-http-api-authorizer-commands.js","sourceRoot":"","sources":["../../../../../src/service/apigatewayv2/command/authorizer/sim-http-api-authorizer-commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AAElF,OAAO,EAAE,+BAA+B,EAAE,MAAM,4CAA4C,CAAC;AAU7F,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAE/E,MAAM,eAAe,GAAG,cAAc,CAAC;AAEvC,MAAM,+BAA+B,GAAG;IACtC,OAAO;IACP,MAAM;IACN,gBAAgB;IAChB,gBAAgB;IAChB,kBAAkB;IAClB,eAAe;IACf,gCAAgC;IAChC,uBAAuB;IACvB,8BAA8B;CAC/B,CAAC;AAEF;;GAEG;AACH,MAAM,wBAAwB,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;AAEpD;;GAEG;AACH,MAAM,OAAO,4BAA4B;IACtB,MAAM,CAAmB;IAE1C,YAAY,UAAiD;QAC3D,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAClC,CAAC;IAED;;;;;;;OAOG;IACH,gBAAgB,CACd,OAAmC,EACnC,OAAuC;QAEvC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAC1B,MAAM,WAAW,GAAG,IAAI,+BAA+B,CAAC,kBAAkB,CAAC,CAAC;QAC5E,WAAW,CAAC,gBAAgB,CAAC,KAAK,EAAE,+BAA+B,CAAC,CAAC;QACrE,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACxD,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,WAAW,CAAC,OAAO,CAAC,gBAAgB,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;QAC5D,WAAW,CAAC,iBAAiB,CAC3B,gBAAgB,EAChB,KAAK,CAAC,cAAc,EACpB,wBAAwB,EACxB,6DAA6D,CAC9D,CAAC;QAEF,MAAM,eAAe,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;QAEzD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;YAC1B,MAAM,EAAE,MAAM;YACd,KAAK;YACL,SAAS,EAAE,eAAe;YAC1B,MAAM,EAAE,OAAO,EAAE,MAAM;SACxB,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC,CAAC;QACtE,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAEhC,OAAO,EAAE,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IACjD,CAAC;IAED;;OAEG;IACH,cAAc,CACZ,OAAiC,EACjC,OAAuC;QAEvC,MAAM,WAAW,GAAG,IAAI,+BAA+B,CAAC,gBAAgB,CAAC,CAAC;QAC1E,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACxC,WAAW,CAAC,gBAAgB,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAEhE,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;YAC1B,MAAM,EAAE,KAAK;YACb,KAAK;YACL,SAAS,EAAE,eAAe;YAC1B,MAAM,EAAE,OAAO,EAAE,MAAM;SACxB,CAAC,CAAC;QAEH,OAAO;YACL,KAAK,EAAE,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;YACpE,SAAS,EAAE,EAAE;SACd,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,gBAAgB,CACd,OAAmC,EACnC,OAAuC;QAEvC,MAAM,WAAW,GAAG,IAAI,+BAA+B,CAAC,kBAAkB,CAAC,CAAC;QAC5E,WAAW,CAAC,gBAAgB,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC;QACvE,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAChE,MAAM,YAAY,GAAG,WAAW,CAAC,OAAO,CACtC,cAAc,EACd,OAAO,CAAC,KAAK,CAAC,YAAY,CAC3B,CAAC;QAEF,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;YAC1B,MAAM,EAAE,QAAQ;YAChB,KAAK;YACL,SAAS,EAAE,GAAG,eAAe,IAAI,YAAY,EAAE;YAC/C,MAAM,EAAE,OAAO,EAAE,MAAM;SACxB,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAEtD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,uBAAuB,CAC/B,yBAAyB,YAAY,WAAW,KAAK,EAAE,CACxD,CAAC;QACJ,CAAC;QAED,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QAEhD,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC3B,CAAC;CACF"}

package/dist/service/apigatewayv2/command/authorizer/sim-http-api-authorizer-input.d.ts

@@ -0,0 +1,20 @@
+import type { SimHttpApiAuthorizer, SimHttpApiAuthorizerId } from "../../api/authorizer/sim-http-api-authorizer.js";
+import type { SimCreateAuthorizerCommandInput } from "./authorizer.command.js";
+/**
+ * Reads one kind of authorizer out of a CreateAuthorizer input.
+ *
+ * The two kinds are configured by different halves of the same input, so each
+ * reader states what its own kind requires and refuses what belongs to the
+ * other, rather than the command handler knowing both.
+ */
+export interface SimHttpApiAuthorizerInput {
+    read(authorizerId: SimHttpApiAuthorizerId): SimHttpApiAuthorizer;
+}
+/**
+ * The reader for the kind of authorizer this input asks for.
+ *
+ * The type itself is checked by the command before this is reached, so
+ * anything that is not `REQUEST` here is `JWT`.
+ */
+export declare function simHttpApiAuthorizerInput(input: SimCreateAuthorizerCommandInput): SimHttpApiAuthorizerInput;
+//# sourceMappingURL=sim-http-api-authorizer-input.d.ts.map

package/dist/service/apigatewayv2/command/authorizer/sim-http-api-authorizer-input.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-authorizer-input.d.ts","sourceRoot":"","sources":["../../../../../src/service/apigatewayv2/command/authorizer/sim-http-api-authorizer-input.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,oBAAoB,EACpB,sBAAsB,EACvB,MAAM,iDAAiD,CAAC;AACzD,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,yBAAyB,CAAC;AAI/E;;;;;;GAMG;AACH,MAAM,WAAW,yBAAyB;IACxC,IAAI,CAAC,YAAY,EAAE,sBAAsB,GAAG,oBAAoB,CAAC;CAClE;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,+BAA+B,GACrC,yBAAyB,CAM3B"}

package/dist/service/apigatewayv2/command/authorizer/sim-http-api-authorizer-input.js

@@ -0,0 +1,15 @@
+import { SimHttpApiJwtAuthorizerInput } from "./sim-http-api-jwt-authorizer-input.js";
+import { SimHttpApiRequestAuthorizerInput } from "./sim-http-api-request-authorizer-input.js";
+/**
+ * The reader for the kind of authorizer this input asks for.
+ *
+ * The type itself is checked by the command before this is reached, so
+ * anything that is not `REQUEST` here is `JWT`.
+ */
+export function simHttpApiAuthorizerInput(input) {
+    if (input.AuthorizerType === "REQUEST") {
+        return new SimHttpApiRequestAuthorizerInput(input);
+    }
+    return new SimHttpApiJwtAuthorizerInput(input);
+}
+//# sourceMappingURL=sim-http-api-authorizer-input.js.map

package/dist/service/apigatewayv2/command/authorizer/sim-http-api-authorizer-input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-authorizer-input.js","sourceRoot":"","sources":["../../../../../src/service/apigatewayv2/command/authorizer/sim-http-api-authorizer-input.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,4BAA4B,EAAE,MAAM,wCAAwC,CAAC;AACtF,OAAO,EAAE,gCAAgC,EAAE,MAAM,4CAA4C,CAAC;AAa9F;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CACvC,KAAsC;IAEtC,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACvC,OAAO,IAAI,gCAAgC,CAAC,KAAK,CAAC,CAAC;IACrD,CAAC;IAED,OAAO,IAAI,4BAA4B,CAAC,KAAK,CAAC,CAAC;AACjD,CAAC"}

package/dist/service/apigatewayv2/command/authorizer/sim-http-api-authorizer-options.d.ts

@@ -0,0 +1,22 @@
+/**
+ * The value shapes an authorizer option arrives in.
+ */
+type SimHttpApiAuthorizerOption = string | number | boolean | object | undefined;
+/**
+ * Refuses an option belonging to the other kind of authorizer.
+ *
+ * The two kinds are configured by different halves of one command input, and
+ * API Gateway refuses an option written against the kind that has no use for
+ * it. Accepting it here would make an authorizer look configured for something
+ * nothing would apply.
+ */
+export declare class SimHttpApiAuthorizerOptions {
+    private readonly authorizerType;
+    constructor(authorizerType: string);
+    /**
+     * Refuse an option this kind of authorizer does not take.
+     */
+    refuse(option: string, value: SimHttpApiAuthorizerOption, reason: string): void;
+}
+export {};
+//# sourceMappingURL=sim-http-api-authorizer-options.d.ts.map

package/dist/service/apigatewayv2/command/authorizer/sim-http-api-authorizer-options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-authorizer-options.d.ts","sourceRoot":"","sources":["../../../../../src/service/apigatewayv2/command/authorizer/sim-http-api-authorizer-options.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,KAAK,0BAA0B,GAC7B,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;AAEjD;;;;;;;GAOG;AACH,qBAAa,2BAA2B;IACtC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IAExC,YAAY,cAAc,EAAE,MAAM,EAEjC;IAED;;OAEG;IACH,MAAM,CACJ,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,0BAA0B,EACjC,MAAM,EAAE,MAAM,GACb,IAAI,CASN;CACF"}

package/dist/service/apigatewayv2/command/authorizer/sim-http-api-authorizer-options.js

@@ -0,0 +1,26 @@
+import { SimApiGatewayV2BadRequest } from "../../error/sim-api-gateway-v2.error.js";
+/**
+ * Refuses an option belonging to the other kind of authorizer.
+ *
+ * The two kinds are configured by different halves of one command input, and
+ * API Gateway refuses an option written against the kind that has no use for
+ * it. Accepting it here would make an authorizer look configured for something
+ * nothing would apply.
+ */
+export class SimHttpApiAuthorizerOptions {
+    authorizerType;
+    constructor(authorizerType) {
+        this.authorizerType = authorizerType;
+    }
+    /**
+     * Refuse an option this kind of authorizer does not take.
+     */
+    refuse(option, value, reason) {
+        if (value === undefined) {
+            return;
+        }
+        throw new SimApiGatewayV2BadRequest(`CreateAuthorizer ${option} is set on a ${this.authorizerType} ` +
+            `authorizer, ${reason}`);
+    }
+}
+//# sourceMappingURL=sim-http-api-authorizer-options.js.map

package/dist/service/apigatewayv2/command/authorizer/sim-http-api-authorizer-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-authorizer-options.js","sourceRoot":"","sources":["../../../../../src/service/apigatewayv2/command/authorizer/sim-http-api-authorizer-options.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AAQpF;;;;;;;GAOG;AACH,MAAM,OAAO,2BAA2B;IACrB,cAAc,CAAS;IAExC,YAAY,cAAsB;QAChC,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,MAAM,CACJ,MAAc,EACd,KAAiC,EACjC,MAAc;QAEd,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO;QACT,CAAC;QAED,MAAM,IAAI,yBAAyB,CACjC,oBAAoB,MAAM,gBAAgB,IAAI,CAAC,cAAc,GAAG;YAC9D,eAAe,MAAM,EAAE,CAC1B,CAAC;IACJ,CAAC;CACF"}

package/dist/service/apigatewayv2/command/authorizer/sim-http-api-jwt-authorizer-input.d.ts

@@ -1,6 +1,7 @@
-import { SimHttpApiIdentitySource } from "../../api/authorizer/sim-http-api-identity-source.js";
-import { SimHttpApiJwtConfiguration } from "../../api/authorizer/sim-http-api-jwt-configuration.js";
+import type { SimHttpApiAuthorizerId } from "../../api/authorizer/sim-http-api-authorizer.js";
+import { SimHttpApiJwtAuthorizer } from "../../api/authorizer/sim-http-api-jwt-authorizer.js";
 import type { SimCreateAuthorizerCommandInput } from "./authorizer.command.js";
+import type { SimHttpApiAuthorizerInput } from "./sim-http-api-authorizer-input.js";
 /**
  * Reads the two structured inputs a JWT authorizer is created from.
  *
@@ -9,17 +10,34 @@ import type { SimCreateAuthorizerCommandInput } from "./authorizer.command.js";
  * and an authorizer with no identity source would look for the token nowhere,
  * and both of those look like a signing problem to whoever hits the route.
  */
-export declare class SimHttpApiJwtAuthorizerInput {
+export declare class SimHttpApiJwtAuthorizerInput implements SimHttpApiAuthorizerInput {
     private readonly input;
+    private readonly options;
+    private readonly identitySourceParser;
     constructor(input: SimCreateAuthorizerCommandInput);
+    /**
+     * The JWT authorizer this input asks for.
+     */
+    read(authorizerId: SimHttpApiAuthorizerId): SimHttpApiJwtAuthorizer;
+    /**
+     * Refuse the options only a Lambda `REQUEST` authorizer takes.
+     *
+     * Real API Gateway refuses each of these on a JWT authorizer too: there is
+     * no function to invoke, no event to build and no decision to cache.
+     */
+    private refuseRequestOptions;
     /**
      * The one header or query string parameter the token is read from.
+     *
+     * A JWT authorizer takes one source and API Gateway refuses a second, so the
+     * rule is here rather than on the command input a `REQUEST` authorizer takes
+     * a list through.
      */
-    identitySource(): SimHttpApiIdentitySource;
+    private identitySource;
     /**
      * The issuer this authorizer trusts and the audiences it accepts.
      */
-    jwtConfiguration(): SimHttpApiJwtConfiguration;
+    private jwtConfiguration;
     private issuer;
     /**
      * The audiences the authorizer accepts.

package/dist/service/apigatewayv2/command/authorizer/sim-http-api-jwt-authorizer-input.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-http-api-jwt-authorizer-input.d.ts","sourceRoot":"","sources":["../../../../../src/service/apigatewayv2/command/authorizer/sim-http-api-jwt-authorizer-input.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,sDAAsD,CAAC;AAChG,OAAO,EAAE,0BAA0B,EAAE,MAAM,wDAAwD,CAAC;AAEpG,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,yBAAyB,CAAC;AAE/E;;;;;;;GAOG;AACH,qBAAa,4BAA4B;IACvC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkC;IAExD,YAAY,KAAK,EAAE,+BAA+B,EAEjD;IAED;;OAEG;IACH,cAAc,IAAI,wBAAwB,CAkBzC;IAED;;OAEG;IACH,gBAAgB,IAAI,0BAA0B,CAa7C;IAED,OAAO,CAAC,MAAM;IAUd;;;;;;;OAOG;IACH,OAAO,CAAC,QAAQ;CAWjB"}
+{"version":3,"file":"sim-http-api-jwt-authorizer-input.d.ts","sourceRoot":"","sources":["../../../../../src/service/apigatewayv2/command/authorizer/sim-http-api-jwt-authorizer-input.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,iDAAiD,CAAC;AAG9F,OAAO,EAAE,uBAAuB,EAAE,MAAM,qDAAqD,CAAC;AAG9F,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,yBAAyB,CAAC;AAC/E,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAGpF;;;;;;;GAOG;AACH,qBAAa,4BAA6B,YAAW,yBAAyB;IAC5E,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkC;IACxD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA0C;IAClE,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAwC;IAE7E,YAAY,KAAK,EAAE,+BAA+B,EAEjD;IAED;;OAEG;IACH,IAAI,CAAC,YAAY,EAAE,sBAAsB,GAAG,uBAAuB,CASlE;IAED;;;;;OAKG;IACH,OAAO,CAAC,oBAAoB;IA0B5B;;;;;;OAMG;IACH,OAAO,CAAC,cAAc;IAsBtB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAexB,OAAO,CAAC,MAAM;IAUd;;;;;;;OAOG;IACH,OAAO,CAAC,QAAQ;CAWjB"}

package/dist/service/apigatewayv2/command/authorizer/sim-http-api-jwt-authorizer-input.js

@@ -1,6 +1,8 @@
-import { SimHttpApiIdentitySource } from "../../api/authorizer/sim-http-api-identity-source.js";
+import { SimHttpApiIdentitySourceParser } from "../../api/authorizer/identity/sim-http-api-identity-source-parser.js";
+import { SimHttpApiJwtAuthorizer } from "../../api/authorizer/sim-http-api-jwt-authorizer.js";
 import { SimHttpApiJwtConfiguration } from "../../api/authorizer/sim-http-api-jwt-configuration.js";
 import { SimApiGatewayV2BadRequest } from "../../error/sim-api-gateway-v2.error.js";
+import { SimHttpApiAuthorizerOptions } from "./sim-http-api-authorizer-options.js";
 /**
  * Reads the two structured inputs a JWT authorizer is created from.
  *
@@ -11,11 +13,44 @@ import { SimApiGatewayV2BadRequest } from "../../error/sim-api-gateway-v2.error.
  */
 export class SimHttpApiJwtAuthorizerInput {
     input;
+    options = new SimHttpApiAuthorizerOptions("JWT");
+    identitySourceParser = new SimHttpApiIdentitySourceParser();
     constructor(input) {
         this.input = input;
     }
+    /**
+     * The JWT authorizer this input asks for.
+     */
+    read(authorizerId) {
+        this.refuseRequestOptions();
+        return new SimHttpApiJwtAuthorizer({
+            authorizerId,
+            name: this.input.Name ?? "",
+            identitySource: this.identitySource(),
+            jwtConfiguration: this.jwtConfiguration(),
+        });
+    }
+    /**
+     * Refuse the options only a Lambda `REQUEST` authorizer takes.
+     *
+     * Real API Gateway refuses each of these on a JWT authorizer too: there is
+     * no function to invoke, no event to build and no decision to cache.
+     */
+    refuseRequestOptions() {
+        this.options.refuse("AuthorizerUri", this.input.AuthorizerUri, "which names the function a REQUEST authorizer invokes, and a JWT " +
+            "authorizer invokes nothing");
+        this.options.refuse("AuthorizerPayloadFormatVersion", this.input.AuthorizerPayloadFormatVersion, "which is the format a REQUEST authorizer's event is built in, and a " +
+            "JWT authorizer builds no event");
+        this.options.refuse("EnableSimpleResponses", this.input.EnableSimpleResponses, "which chooses the shape a REQUEST authorizer answers in, and a JWT " +
+            "authorizer answers nothing");
+        this.options.refuse("AuthorizerResultTtlInSeconds", this.input.AuthorizerResultTtlInSeconds, "and a JWT authorizer caches nothing: every request is verified again");
+    }
     /**
      * The one header or query string parameter the token is read from.
+     *
+     * A JWT authorizer takes one source and API Gateway refuses a second, so the
+     * rule is here rather than on the command input a `REQUEST` authorizer takes
+     * a list through.
      */
     identitySource() {
         const sources = this.input.IdentitySource ?? [];
@@ -24,10 +59,12 @@ export class SimHttpApiJwtAuthorizerInput {
         }
         if (sources.length > 1) {
             throw new SimApiGatewayV2BadRequest(`CreateAuthorizer IdentitySource has ${String(sources.length)} ` +
-                `entries: more than one identity source is not simulated, and only ` +
-                `the first would be read here`);
+                `entries: a JWT authorizer takes one, and only the first would be ` +
+                `read here`);
         }
-        return SimHttpApiIdentitySource.parse(sources[0] ?? "");
+        // The request-only forms: a JWT authorizer reads the token the client
+        // sent, so `$context.routeKey` is refused for it as it is on AWS.
+        return this.identitySourceParser.requestSource(sources[0] ?? "");
     }
     /**
      * The issuer this authorizer trusts and the audiences it accepts.

package/dist/service/apigatewayv2/command/authorizer/sim-http-api-jwt-authorizer-input.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-http-api-jwt-authorizer-input.js","sourceRoot":"","sources":["../../../../../src/service/apigatewayv2/command/authorizer/sim-http-api-jwt-authorizer-input.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,sDAAsD,CAAC;AAChG,OAAO,EAAE,0BAA0B,EAAE,MAAM,wDAAwD,CAAC;AACpG,OAAO,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AAGpF;;;;;;;GAOG;AACH,MAAM,OAAO,4BAA4B;IACtB,KAAK,CAAkC;IAExD,YAAY,KAAsC;QAChD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC;QAEhD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,yBAAyB,CACjC,0CAA0C,CAC3C,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,yBAAyB,CACjC,uCAAuC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG;gBAC9D,oEAAoE;gBACpE,8BAA8B,CACjC,CAAC;QACJ,CAAC;QAED,OAAO,wBAAwB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED;;OAEG;IACH,gBAAgB;QACd,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC;QAElD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,IAAI,yBAAyB,CACjC,4CAA4C,CAC7C,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,0BAA0B,CAAC;YACpC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC;YACzC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC;SAChD,CAAC,CAAC;IACL,CAAC;IAEO,MAAM,CAAC,MAA0B;QACvC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,yBAAyB,CACjC,mDAAmD,CACpD,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;;OAOG;IACK,QAAQ,CAAC,QAAuC;QACtD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,yBAAyB,CACjC,+DAA+D;gBAC7D,oEAAoE;gBACpE,kBAAkB,CACrB,CAAC;QACJ,CAAC;QAED,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC;IACvB,CAAC;CACF"}
+{"version":3,"file":"sim-http-api-jwt-authorizer-input.js","sourceRoot":"","sources":["../../../../../src/service/apigatewayv2/command/authorizer/sim-http-api-jwt-authorizer-input.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,8BAA8B,EAAE,MAAM,sEAAsE,CAAC;AAEtH,OAAO,EAAE,uBAAuB,EAAE,MAAM,qDAAqD,CAAC;AAC9F,OAAO,EAAE,0BAA0B,EAAE,MAAM,wDAAwD,CAAC;AACpG,OAAO,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AAGpF,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AAEnF;;;;;;;GAOG;AACH,MAAM,OAAO,4BAA4B;IACtB,KAAK,CAAkC;IACvC,OAAO,GAAG,IAAI,2BAA2B,CAAC,KAAK,CAAC,CAAC;IACjD,oBAAoB,GAAG,IAAI,8BAA8B,EAAE,CAAC;IAE7E,YAAY,KAAsC;QAChD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,YAAoC;QACvC,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAE5B,OAAO,IAAI,uBAAuB,CAAC;YACjC,YAAY;YACZ,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE;YAC3B,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE;YACrC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE;SAC1C,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACK,oBAAoB;QAC1B,IAAI,CAAC,OAAO,CAAC,MAAM,CACjB,eAAe,EACf,IAAI,CAAC,KAAK,CAAC,aAAa,EACxB,mEAAmE;YACjE,4BAA4B,CAC/B,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,MAAM,CACjB,gCAAgC,EAChC,IAAI,CAAC,KAAK,CAAC,8BAA8B,EACzC,sEAAsE;YACpE,gCAAgC,CACnC,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,MAAM,CACjB,uBAAuB,EACvB,IAAI,CAAC,KAAK,CAAC,qBAAqB,EAChC,qEAAqE;YACnE,4BAA4B,CAC/B,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,MAAM,CACjB,8BAA8B,EAC9B,IAAI,CAAC,KAAK,CAAC,4BAA4B,EACvC,sEAAsE,CACvE,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACK,cAAc;QACpB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC;QAEhD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,yBAAyB,CACjC,0CAA0C,CAC3C,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,yBAAyB,CACjC,uCAAuC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG;gBAC9D,mEAAmE;gBACnE,WAAW,CACd,CAAC;QACJ,CAAC;QAED,sEAAsE;QACtE,kEAAkE;QAClE,OAAO,IAAI,CAAC,oBAAoB,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACnE,CAAC;IAED;;OAEG;IACK,gBAAgB;QACtB,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC;QAElD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,IAAI,yBAAyB,CACjC,4CAA4C,CAC7C,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,0BAA0B,CAAC;YACpC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC;YACzC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC;SAChD,CAAC,CAAC;IACL,CAAC;IAEO,MAAM,CAAC,MAA0B;QACvC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,yBAAyB,CACjC,mDAAmD,CACpD,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;;OAOG;IACK,QAAQ,CAAC,QAAuC;QACtD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,yBAAyB,CACjC,+DAA+D;gBAC7D,oEAAoE;gBACpE,kBAAkB,CACrB,CAAC;QACJ,CAAC;QAED,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC;IACvB,CAAC;CACF"}

package/dist/service/apigatewayv2/command/authorizer/sim-http-api-request-authorizer-input.d.ts

@@ -0,0 +1,58 @@
+import type { SimHttpApiAuthorizerId } from "../../api/authorizer/sim-http-api-authorizer.js";
+import { SimHttpApiRequestAuthorizer } from "../../api/authorizer/sim-http-api-request-authorizer.js";
+import type { SimCreateAuthorizerCommandInput } from "./authorizer.command.js";
+import type { SimHttpApiAuthorizerInput } from "./sim-http-api-authorizer-input.js";
+/**
+ * Reads the inputs a Lambda `REQUEST` authorizer is created from.
+ *
+ * The function and the payload format are both required rather than defaulted.
+ * An authorizer naming no function has nothing to ask, and API Gateway itself
+ * defaults the payload format to `1.0`, which builds a different event and is
+ * refused across this simulation, so it is named rather than assumed.
+ */
+export declare class SimHttpApiRequestAuthorizerInput implements SimHttpApiAuthorizerInput {
+    private readonly input;
+    private readonly options;
+    private readonly identitySourceParser;
+    constructor(input: SimCreateAuthorizerCommandInput);
+    /**
+     * The `REQUEST` authorizer this input asks for.
+     */
+    read(authorizerId: SimHttpApiAuthorizerId): SimHttpApiRequestAuthorizer;
+    /**
+     * The function this authorizer invokes.
+     *
+     * An `AuthorizerUri` is written in the same wrapped form an integration URI
+     * is, so it is read by the same parser and refused for the same reasons.
+     */
+    private lambdaUri;
+    /**
+     * Require payload format 2.0 by name.
+     *
+     * A `REQUEST` authorizer with no payload format is a `1.0` authorizer on
+     * real AWS, which builds a different event and answers in a different shape,
+     * so an unstated format is refused rather than read as the one simulated.
+     */
+    private requirePayloadFormatVersion;
+    /**
+     * How long this authorizer's decisions are held for.
+     *
+     * Zero, and saying nothing, both mean no caching, which is what AWS defaults
+     * an authorizer to. AWS accepts a whole number of seconds up to an hour, so
+     * anything else is refused here rather than held for a period no deployed
+     * authorizer could be configured with. That includes `NaN`, which no
+     * comparison refuses and which would otherwise hold a decision for ever.
+     */
+    private resultTtlSeconds;
+    /**
+     * The identity sources every request has to carry before the function is
+     * invoked at all.
+     *
+     * At least one is required. An authorizer with none is invoked for every
+     * request on real AWS, including requests carrying nothing, and that is a
+     * different thing from the authorizer this simulation runs, so it is refused
+     * rather than treated as an authorizer nothing gates.
+     */
+    private identitySources;
+}
+//# sourceMappingURL=sim-http-api-request-authorizer-input.d.ts.map

package/dist/service/apigatewayv2/command/authorizer/sim-http-api-request-authorizer-input.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-request-authorizer-input.d.ts","sourceRoot":"","sources":["../../../../../src/service/apigatewayv2/command/authorizer/sim-http-api-request-authorizer-input.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,iDAAiD,CAAC;AAG9F,OAAO,EAEL,2BAA2B,EAC5B,MAAM,yDAAyD,CAAC;AAIjE,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,yBAAyB,CAAC;AAC/E,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAQpF;;;;;;;GAOG;AACH,qBAAa,gCAAiC,YAAW,yBAAyB;IAChF,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkC;IACxD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA8C;IACtE,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAwC;IAE7E,YAAY,KAAK,EAAE,+BAA+B,EAEjD;IAED;;OAEG;IACH,IAAI,CAAC,YAAY,EAAE,sBAAsB,GAAG,2BAA2B,CAoBtE;IAED;;;;;OAKG;IACH,OAAO,CAAC,SAAS;IAYjB;;;;;;OAMG;IACH,OAAO,CAAC,2BAA2B;IAoBnC;;;;;;;;OAQG;IACH,OAAO,CAAC,gBAAgB;IA0BxB;;;;;;;;OAQG;IACH,OAAO,CAAC,eAAe;CAexB"}

package/dist/service/apigatewayv2/command/authorizer/sim-http-api-request-authorizer-input.js

@@ -0,0 +1,120 @@
+import { SimHttpApiIdentitySourceParser } from "../../api/authorizer/identity/sim-http-api-identity-source-parser.js";
+import { SimHttpApiIdentitySources } from "../../api/authorizer/identity/sim-http-api-identity-sources.js";
+import { simHttpApiAuthorizerPayloadFormatVersion, SimHttpApiRequestAuthorizer, } from "../../api/authorizer/sim-http-api-request-authorizer.js";
+import { SimHttpApiLambdaUri } from "../../api/integration/sim-http-api-lambda-uri.js";
+import { SimApiGatewayV2BadRequest } from "../../error/sim-api-gateway-v2.error.js";
+import { SimApiGatewayV2UnsimulatedInput } from "../sim-api-gateway-v2-unsimulated-input.js";
+import { SimHttpApiAuthorizerOptions } from "./sim-http-api-authorizer-options.js";
+/**
+ * The longest AWS holds a Lambda authorizer's decision for.
+ */
+const maximumResultTtlSeconds = 3600;
+/**
+ * Reads the inputs a Lambda `REQUEST` authorizer is created from.
+ *
+ * The function and the payload format are both required rather than defaulted.
+ * An authorizer naming no function has nothing to ask, and API Gateway itself
+ * defaults the payload format to `1.0`, which builds a different event and is
+ * refused across this simulation, so it is named rather than assumed.
+ */
+export class SimHttpApiRequestAuthorizerInput {
+    input;
+    options = new SimHttpApiAuthorizerOptions("REQUEST");
+    identitySourceParser = new SimHttpApiIdentitySourceParser();
+    constructor(input) {
+        this.input = input;
+    }
+    /**
+     * The `REQUEST` authorizer this input asks for.
+     */
+    read(authorizerId) {
+        this.options.refuse("JwtConfiguration", this.input.JwtConfiguration, "and a REQUEST authorizer verifies no token: its function decides");
+        this.requirePayloadFormatVersion();
+        // Read before the sources are parsed, so an authorizer asking to cache a
+        // decision it could not key is told that rather than told it needs a
+        // source for the reason an uncached authorizer needs one.
+        const resultTtlSeconds = this.resultTtlSeconds();
+        return new SimHttpApiRequestAuthorizer({
+            authorizerId,
+            name: this.input.Name ?? "",
+            lambdaUri: this.lambdaUri(),
+            identitySources: this.identitySources(),
+            enableSimpleResponses: this.input.EnableSimpleResponses ?? false,
+            resultTtlSeconds,
+        });
+    }
+    /**
+     * The function this authorizer invokes.
+     *
+     * An `AuthorizerUri` is written in the same wrapped form an integration URI
+     * is, so it is read by the same parser and refused for the same reasons.
+     */
+    lambdaUri() {
+        const uri = this.input.AuthorizerUri;
+        if (uri === undefined || uri.length === 0) {
+            throw new SimApiGatewayV2BadRequest("CreateAuthorizer with AuthorizerType REQUEST requires AuthorizerUri");
+        }
+        return SimHttpApiLambdaUri.parseAuthorizerUri(uri);
+    }
+    /**
+     * Require payload format 2.0 by name.
+     *
+     * A `REQUEST` authorizer with no payload format is a `1.0` authorizer on
+     * real AWS, which builds a different event and answers in a different shape,
+     * so an unstated format is refused rather than read as the one simulated.
+     */
+    requirePayloadFormatVersion() {
+        const version = this.input.AuthorizerPayloadFormatVersion;
+        if (version === undefined) {
+            throw new SimApiGatewayV2BadRequest("CreateAuthorizer with AuthorizerType REQUEST requires " +
+                "AuthorizerPayloadFormatVersion: AWS defaults it to '1.0', which " +
+                "builds a different event and is not simulated");
+        }
+        new SimApiGatewayV2UnsimulatedInput("CreateAuthorizer").refuseUnless("AuthorizerPayloadFormatVersion", version, simHttpApiAuthorizerPayloadFormatVersion, "a 1.0 authorizer receives a different event and answers a policy " +
+            "against a method ARN, and none of that is built here");
+    }
+    /**
+     * How long this authorizer's decisions are held for.
+     *
+     * Zero, and saying nothing, both mean no caching, which is what AWS defaults
+     * an authorizer to. AWS accepts a whole number of seconds up to an hour, so
+     * anything else is refused here rather than held for a period no deployed
+     * authorizer could be configured with. That includes `NaN`, which no
+     * comparison refuses and which would otherwise hold a decision for ever.
+     */
+    resultTtlSeconds() {
+        const ttl = this.input.AuthorizerResultTtlInSeconds ?? 0;
+        if (!Number.isSafeInteger(ttl) ||
+            ttl < 0 ||
+            ttl > maximumResultTtlSeconds) {
+            throw new SimApiGatewayV2BadRequest(`CreateAuthorizer AuthorizerResultTtlInSeconds is ${String(ttl)}: AWS ` +
+                `holds an authorizer's decision for a whole number of seconds ` +
+                `between 0 and ${String(maximumResultTtlSeconds)}`);
+        }
+        if (ttl > 0 && (this.input.IdentitySource ?? []).length === 0) {
+            throw new SimApiGatewayV2BadRequest("CreateAuthorizer AuthorizerResultTtlInSeconds is set on an " +
+                "authorizer with no IdentitySource: a cached decision is keyed on " +
+                "the identity source values, so AWS has nothing to key it on");
+        }
+        return ttl;
+    }
+    /**
+     * The identity sources every request has to carry before the function is
+     * invoked at all.
+     *
+     * At least one is required. An authorizer with none is invoked for every
+     * request on real AWS, including requests carrying nothing, and that is a
+     * different thing from the authorizer this simulation runs, so it is refused
+     * rather than treated as an authorizer nothing gates.
+     */
+    identitySources() {
+        const sources = this.input.IdentitySource ?? [];
+        if (sources.length === 0) {
+            throw new SimApiGatewayV2BadRequest("CreateAuthorizer requires IdentitySource: an authorizer with none " +
+                "is invoked for every request on AWS, including one carrying " +
+                "nothing, and that is not simulated");
+        }
+        return new SimHttpApiIdentitySources(sources.map((source) => this.identitySourceParser.parse(source)));
+    }
+}
+//# sourceMappingURL=sim-http-api-request-authorizer-input.js.map

package/dist/service/apigatewayv2/command/authorizer/sim-http-api-request-authorizer-input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-http-api-request-authorizer-input.js","sourceRoot":"","sources":["../../../../../src/service/apigatewayv2/command/authorizer/sim-http-api-request-authorizer-input.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,8BAA8B,EAAE,MAAM,sEAAsE,CAAC;AACtH,OAAO,EAAE,yBAAyB,EAAE,MAAM,gEAAgE,CAAC;AAC3G,OAAO,EACL,wCAAwC,EACxC,2BAA2B,GAC5B,MAAM,yDAAyD,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,kDAAkD,CAAC;AACvF,OAAO,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AACpF,OAAO,EAAE,+BAA+B,EAAE,MAAM,4CAA4C,CAAC;AAG7F,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AAEnF;;GAEG;AACH,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAErC;;;;;;;GAOG;AACH,MAAM,OAAO,gCAAgC;IAC1B,KAAK,CAAkC;IACvC,OAAO,GAAG,IAAI,2BAA2B,CAAC,SAAS,CAAC,CAAC;IACrD,oBAAoB,GAAG,IAAI,8BAA8B,EAAE,CAAC;IAE7E,YAAY,KAAsC;QAChD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,YAAoC;QACvC,IAAI,CAAC,OAAO,CAAC,MAAM,CACjB,kBAAkB,EAClB,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAC3B,kEAAkE,CACnE,CAAC;QACF,IAAI,CAAC,2BAA2B,EAAE,CAAC;QACnC,yEAAyE;QACzE,qEAAqE;QACrE,0DAA0D;QAC1D,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAEjD,OAAO,IAAI,2BAA2B,CAAC;YACrC,YAAY;YACZ,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE;YAC3B,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE;YAC3B,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE;YACvC,qBAAqB,EAAE,IAAI,CAAC,KAAK,CAAC,qBAAqB,IAAI,KAAK;YAChE,gBAAgB;SACjB,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACK,SAAS;QACf,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC;QAErC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,yBAAyB,CACjC,qEAAqE,CACtE,CAAC;QACJ,CAAC;QAED,OAAO,mBAAmB,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACrD,CAAC;IAED;;;;;;OAMG;IACK,2BAA2B;QACjC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,8BAA8B,CAAC;QAE1D,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,yBAAyB,CACjC,wDAAwD;gBACtD,kEAAkE;gBAClE,+CAA+C,CAClD,CAAC;QACJ,CAAC;QAED,IAAI,+BAA+B,CAAC,kBAAkB,CAAC,CAAC,YAAY,CAClE,gCAAgC,EAChC,OAAO,EACP,wCAAwC,EACxC,mEAAmE;YACjE,sDAAsD,CACzD,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACK,gBAAgB;QACtB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,4BAA4B,IAAI,CAAC,CAAC;QAEzD,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC;YAC1B,GAAG,GAAG,CAAC;YACP,GAAG,GAAG,uBAAuB,EAC7B,CAAC;YACD,MAAM,IAAI,yBAAyB,CACjC,oDAAoD,MAAM,CAAC,GAAG,CAAC,QAAQ;gBACrE,+DAA+D;gBAC/D,iBAAiB,MAAM,CAAC,uBAAuB,CAAC,EAAE,CACrD,CAAC;QACJ,CAAC;QAED,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,yBAAyB,CACjC,6DAA6D;gBAC3D,mEAAmE;gBACnE,6DAA6D,CAChE,CAAC;QACJ,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;;;;;;;OAQG;IACK,eAAe;QACrB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC;QAEhD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,yBAAyB,CACjC,oEAAoE;gBAClE,8DAA8D;gBAC9D,oCAAoC,CACvC,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,yBAAyB,CAClC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CACjE,CAAC;IACJ,CAAC;CACF"}