@kensio/yulin 1.12.1 → 1.14.0

package/dist/service/elbv2/listener/certificate/sim-elbv2-certificate-resolver.js

@@ -0,0 +1,105 @@
+import { parseSimArn } from "../../../aws/arn.js";
+import { SimElbV2CertificateNotFoundException, SimElbV2InvalidConfigurationRequestException, SimElbV2ValidationError, } from "../../error/sim-elbv2.error.js";
+import { simElbV2CertificateArn } from "./sim-elbv2-certificate-arns.js";
+/**
+ * Gets from the certificates a request names to the ARNs a listener holds.
+ *
+ * A certificate that does not exist, or that is still pending validation, is
+ * refused here rather than held, which is the whole point of connecting these
+ * two simulations: a listener that says it is serving HTTPS with a certificate
+ * a stack never got issued would serve requests here and fail to deploy on real
+ * AWS.
+ *
+ * Nothing is decrypted or presented to a client, since no TLS is performed.
+ * What is checked is the configuration relationship, which is the part a test
+ * can be written about.
+ */
+export class SimElbV2CertificateResolver {
+    accountRegionScope;
+    acmRegistry;
+    constructor(properties) {
+        this.accountRegionScope = properties.accountRegionScope;
+        this.acmRegistry = properties.acmRegistry;
+    }
+    /**
+     * The one certificate a listener request may name, if it names any.
+     */
+    static onlyOne(certificates, field) {
+        const [first, second] = certificates ?? [];
+        if (second !== undefined) {
+            throw new SimElbV2InvalidConfigurationRequestException(`${field} names more than one certificate, and a listener takes one ` +
+                `default certificate. The rest go on with AddListenerCertificates.`);
+        }
+        return first;
+    }
+    /**
+     * Refuse a certificate that was not issued.
+     */
+    static requireIssuedStatus(certificate) {
+        if (certificate.status === "ISSUED") {
+            return;
+        }
+        throw new SimElbV2InvalidConfigurationRequestException(`Certificate ${certificate.certificateArn} is ${certificate.status}, ` +
+            `not ISSUED, so a listener presenting it could not serve a request`);
+    }
+    /**
+     * Refuse any of these certificates simulated ACM does not hold as an issued
+     * one.
+     */
+    requireAllIssued(certificateArns) {
+        for (const arn of certificateArns) {
+            this.requireIssued(arn);
+        }
+    }
+    /**
+     * Read the default certificate a listener request names, if it names one.
+     *
+     * A listener takes exactly one default certificate, as real ELB does, so a
+     * request naming several is refused with the operation that carries the rest.
+     */
+    resolveDefault(certificates, field) {
+        const certificate = SimElbV2CertificateResolver.onlyOne(certificates, field);
+        if (certificate === undefined) {
+            return undefined;
+        }
+        const arn = simElbV2CertificateArn(certificate, field);
+        this.requireIssued(arn);
+        return arn;
+    }
+    /**
+     * Refuse a certificate simulated ACM does not hold as an issued one.
+     */
+    requireIssued(arn) {
+        const acmRegistry = this.acmRegistry;
+        if (acmRegistry === undefined) {
+            return;
+        }
+        this.requireOwnScope(arn);
+        const certificate = acmRegistry.certificate(arn);
+        if (certificate === undefined) {
+            throw new SimElbV2CertificateNotFoundException(`Certificate ${arn} was not found in simulated ACM`);
+        }
+        SimElbV2CertificateResolver.requireIssuedStatus(certificate);
+    }
+    /**
+     * Refuse a certificate from another Account or Region.
+     *
+     * Real ELB takes a certificate from the load balancer's own Account and
+     * Region only, which is the same mistake CloudFront's us-east-1 rule catches
+     * and one a template can carry for a long time before it is deployed.
+     */
+    requireOwnScope(arn) {
+        const parsed = parseSimArn(arn);
+        const { accountId, regionName } = this.accountRegionScope;
+        if (parsed === undefined) {
+            throw new SimElbV2ValidationError(`Certificate ${arn} is not an ACM certificate ARN`);
+        }
+        if (parsed.accountId === accountId && parsed.region === regionName) {
+            return;
+        }
+        throw new SimElbV2InvalidConfigurationRequestException(`Certificate ${arn} is in ${parsed.accountId} ${parsed.region}, and a ` +
+            `listener takes a certificate from its load balancer's own Account ` +
+            `and Region, which is ${accountId} ${regionName}`);
+    }
+}
+//# sourceMappingURL=sim-elbv2-certificate-resolver.js.map

package/dist/service/elbv2/listener/certificate/sim-elbv2-certificate-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-elbv2-certificate-resolver.js","sourceRoot":"","sources":["../../../../../src/service/elbv2/listener/certificate/sim-elbv2-certificate-resolver.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAGlD,OAAO,EACL,oCAAoC,EACpC,4CAA4C,EAC5C,uBAAuB,GACxB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AAYzE;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,2BAA2B;IACrB,kBAAkB,CAA2B;IAC7C,WAAW,CAA6B;IAEzD,YAAY,UAAiD;QAC3D,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;QACxD,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;IAC5C,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,OAAO,CACpB,YAAwD,EACxD,KAAa;QAEb,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,YAAY,IAAI,EAAE,CAAC;QAE3C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,4CAA4C,CACpD,GAAG,KAAK,6DAA6D;gBACnE,mEAAmE,CACtE,CAAC;QACJ,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,mBAAmB,CAAC,WAA8B;QAC/D,IAAI,WAAW,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACpC,OAAO;QACT,CAAC;QAED,MAAM,IAAI,4CAA4C,CACpD,eAAe,WAAW,CAAC,cAAc,OAAO,WAAW,CAAC,MAAM,IAAI;YACpE,mEAAmE,CACtE,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,gBAAgB,CAAC,eAAkC;QACjD,KAAK,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;YAClC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,cAAc,CACZ,YAAwD,EACxD,KAAa;QAEb,MAAM,WAAW,GAAG,2BAA2B,CAAC,OAAO,CACrD,YAAY,EACZ,KAAK,CACN,CAAC;QAEF,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,GAAG,GAAG,sBAAsB,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QACvD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAExB,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;OAEG;IACK,aAAa,CAAC,GAAW;QAC/B,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QAErC,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO;QACT,CAAC;QAED,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;QAE1B,MAAM,WAAW,GAAG,WAAW,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAEjD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,oCAAoC,CAC5C,eAAe,GAAG,iCAAiC,CACpD,CAAC;QACJ,CAAC;QAED,2BAA2B,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAC/D,CAAC;IAED;;;;;;OAMG;IACK,eAAe,CAAC,GAAW;QACjC,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,kBAAkB,CAAC;QAE1D,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,uBAAuB,CAC/B,eAAe,GAAG,gCAAgC,CACnD,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YACnE,OAAO;QACT,CAAC;QAED,MAAM,IAAI,4CAA4C,CACpD,eAAe,GAAG,UAAU,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,MAAM,UAAU;YACrE,oEAAoE;YACpE,wBAAwB,SAAS,IAAI,UAAU,EAAE,CACpD,CAAC;IACJ,CAAC;CACF"}

package/dist/service/elbv2/listener/rule/match/sim-elbv2-condition-field.d.ts

@@ -0,0 +1,33 @@
+import type { SimElbV2ConditionValues, SimElbV2RuleConditionInput } from "../../../command/rule/rule-condition.command.js";
+import type { SimElbV2ConditionMatcher } from "./sim-elbv2-condition-matcher.js";
+interface SimElbV2ConditionFieldProperties {
+    /**
+     * Where this field keeps its values when they are written as a per-field
+     * configuration rather than as a plain list.
+     */
+    readonly config: (input: SimElbV2RuleConditionInput) => SimElbV2ConditionValues | undefined;
+    readonly matcher: (values: readonly string[]) => SimElbV2ConditionMatcher;
+}
+/**
+ * One condition field a rule can be written on, and how a request is matched
+ * against it.
+ *
+ * The field decides which configuration is read rather than the first one that
+ * happens to be there, so a `host-header` condition carrying only a
+ * `PathPatternConfig` has no values and is refused, as it is on real ELB.
+ */
+export declare class SimElbV2ConditionField {
+    private readonly properties;
+    constructor(properties: SimElbV2ConditionFieldProperties);
+    /**
+     * The values a condition carries for this field, in either of the two forms
+     * ELB writes them in.
+     */
+    values(input: SimElbV2RuleConditionInput): readonly string[];
+    /**
+     * Build what decides whether a request satisfies those values.
+     */
+    matcher(values: readonly string[]): SimElbV2ConditionMatcher;
+}
+export {};
+//# sourceMappingURL=sim-elbv2-condition-field.d.ts.map

package/dist/service/elbv2/listener/rule/match/sim-elbv2-condition-field.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-elbv2-condition-field.d.ts","sourceRoot":"","sources":["../../../../../../src/service/elbv2/listener/rule/match/sim-elbv2-condition-field.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,uBAAuB,EACvB,0BAA0B,EAC3B,MAAM,iDAAiD,CAAC;AACzD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAEjF,UAAU,gCAAgC;IACxC;;;OAGG;IACH,QAAQ,CAAC,MAAM,EAAE,CACf,KAAK,EAAE,0BAA0B,KAC9B,uBAAuB,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,KAAK,wBAAwB,CAAC;CAC3E;AAED;;;;;;;GAOG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmC;IAE9D,YAAY,UAAU,EAAE,gCAAgC,EAEvD;IAED;;;OAGG;IACH,MAAM,CAAC,KAAK,EAAE,0BAA0B,GAAG,SAAS,MAAM,EAAE,CAE3D;IAED;;OAEG;IACH,OAAO,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,wBAAwB,CAE3D;CACF"}

package/dist/service/elbv2/listener/rule/match/sim-elbv2-condition-field.js

@@ -0,0 +1,28 @@
+/**
+ * One condition field a rule can be written on, and how a request is matched
+ * against it.
+ *
+ * The field decides which configuration is read rather than the first one that
+ * happens to be there, so a `host-header` condition carrying only a
+ * `PathPatternConfig` has no values and is refused, as it is on real ELB.
+ */
+export class SimElbV2ConditionField {
+    properties;
+    constructor(properties) {
+        this.properties = properties;
+    }
+    /**
+     * The values a condition carries for this field, in either of the two forms
+     * ELB writes them in.
+     */
+    values(input) {
+        return input.Values ?? this.properties.config(input)?.Values ?? [];
+    }
+    /**
+     * Build what decides whether a request satisfies those values.
+     */
+    matcher(values) {
+        return this.properties.matcher(values);
+    }
+}
+//# sourceMappingURL=sim-elbv2-condition-field.js.map

package/dist/service/elbv2/listener/rule/match/sim-elbv2-condition-field.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-elbv2-condition-field.js","sourceRoot":"","sources":["../../../../../../src/service/elbv2/listener/rule/match/sim-elbv2-condition-field.ts"],"names":[],"mappings":"AAiBA;;;;;;;GAOG;AACH,MAAM,OAAO,sBAAsB;IAChB,UAAU,CAAmC;IAE9D,YAAY,UAA4C;QACtD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,KAAiC;QACtC,OAAO,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,IAAI,EAAE,CAAC;IACrE,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,MAAyB;QAC/B,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC;CACF"}

package/dist/service/elbv2/listener/rule/match/sim-elbv2-condition-fields.d.ts

@@ -0,0 +1,6 @@
+import { SimElbV2ConditionField } from "./sim-elbv2-condition-field.js";
+/**
+ * Resolve the field a condition is written on, or refuse.
+ */
+export declare function requireSimElbV2ConditionField(field: string): SimElbV2ConditionField;
+//# sourceMappingURL=sim-elbv2-condition-fields.d.ts.map

package/dist/service/elbv2/listener/rule/match/sim-elbv2-condition-fields.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-elbv2-condition-fields.d.ts","sourceRoot":"","sources":["../../../../../../src/service/elbv2/listener/rule/match/sim-elbv2-condition-fields.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AA+CxE;;GAEG;AACH,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,MAAM,GACZ,sBAAsB,CAoBxB"}

package/dist/service/elbv2/listener/rule/match/sim-elbv2-condition-fields.js

@@ -0,0 +1,58 @@
+import { SimElbV2UnsimulatedInputException, SimElbV2ValidationError, } from "../../../error/sim-elbv2.error.js";
+import { SimElbV2ConditionField } from "./sim-elbv2-condition-field.js";
+import { SimElbV2HostHeaderMatcher } from "./sim-elbv2-host-header-matcher.js";
+import { SimElbV2PathPatternMatcher } from "./sim-elbv2-path-pattern-matcher.js";
+/**
+ * The condition fields a rule here can be written on.
+ *
+ * These two cover most real routing, and both are matched when a request
+ * arrives rather than only stored.
+ */
+const simulatedFields = new Map([
+    [
+        "host-header",
+        new SimElbV2ConditionField({
+            config: (input) => input.HostHeaderConfig,
+            matcher: (values) => new SimElbV2HostHeaderMatcher(values),
+        }),
+    ],
+    [
+        "path-pattern",
+        new SimElbV2ConditionField({
+            config: (input) => input.PathPatternConfig,
+            matcher: (values) => new SimElbV2PathPatternMatcher(values),
+        }),
+    ],
+]);
+/**
+ * The condition fields real ELB has and nothing here matches on.
+ *
+ * They are held apart from a field ELB does not have at all, because the two
+ * mean different things to whoever wrote the rule: one request is wrong, and
+ * the other is right and goes further than this simulation does. Either way the
+ * rule is refused when it is written, rather than stored and then never
+ * claiming a request it was meant to claim.
+ */
+const unmatchedFields = new Set([
+    "http-header",
+    "http-request-method",
+    "query-string",
+    "source-ip",
+]);
+/**
+ * Resolve the field a condition is written on, or refuse.
+ */
+export function requireSimElbV2ConditionField(field) {
+    const simulated = simulatedFields.get(field);
+    if (simulated !== undefined) {
+        return simulated;
+    }
+    const simulatedNames = simulatedFields.keys().toArray();
+    if (unmatchedFields.has(field)) {
+        throw new SimElbV2UnsimulatedInputException(`Condition field '${field}' is not simulated. Simulated fields are ` +
+            `${simulatedNames.join(" and ")}.`);
+    }
+    throw new SimElbV2ValidationError(`'${field}' is not a listener rule condition field. The fields are ` +
+        `${[...simulatedNames, ...unmatchedFields].join(", ")}.`);
+}
+//# sourceMappingURL=sim-elbv2-condition-fields.js.map

package/dist/service/elbv2/listener/rule/match/sim-elbv2-condition-fields.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-elbv2-condition-fields.js","sourceRoot":"","sources":["../../../../../../src/service/elbv2/listener/rule/match/sim-elbv2-condition-fields.ts"],"names":[],"mappings":"AACA,OAAO,EACL,iCAAiC,EACjC,uBAAuB,GACxB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAC/E,OAAO,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AAEjF;;;;;GAKG;AACH,MAAM,eAAe,GAAG,IAAI,GAAG,CAAiC;IAC9D;QACE,aAAa;QACb,IAAI,sBAAsB,CAAC;YACzB,MAAM,EAAE,CAAC,KAAK,EAAuC,EAAE,CACrD,KAAK,CAAC,gBAAgB;YACxB,OAAO,EAAE,CAAC,MAAM,EAA6B,EAAE,CAC7C,IAAI,yBAAyB,CAAC,MAAM,CAAC;SACxC,CAAC;KACH;IACD;QACE,cAAc;QACd,IAAI,sBAAsB,CAAC;YACzB,MAAM,EAAE,CAAC,KAAK,EAAuC,EAAE,CACrD,KAAK,CAAC,iBAAiB;YACzB,OAAO,EAAE,CAAC,MAAM,EAA8B,EAAE,CAC9C,IAAI,0BAA0B,CAAC,MAAM,CAAC;SACzC,CAAC;KACH;CACF,CAAC,CAAC;AAEH;;;;;;;;GAQG;AACH,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,aAAa;IACb,qBAAqB;IACrB,cAAc;IACd,WAAW;CACZ,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,UAAU,6BAA6B,CAC3C,KAAa;IAEb,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAE7C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,cAAc,GAAG,eAAe,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IAExD,IAAI,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,iCAAiC,CACzC,oBAAoB,KAAK,2CAA2C;YAClE,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CACrC,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,uBAAuB,CAC/B,IAAI,KAAK,2DAA2D;QAClE,GAAG,CAAC,GAAG,cAAc,EAAE,GAAG,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC3D,CAAC;AACJ,CAAC"}

package/dist/service/elbv2/listener/rule/match/sim-elbv2-condition-matcher.d.ts

@@ -0,0 +1,31 @@
+import type { SimElbV2MatchableRequest } from "./sim-elbv2-matchable-request.js";
+import type { SimElbV2WildcardPattern } from "./sim-elbv2-wildcard-pattern.js";
+/**
+ * Decides whether one condition on a rule claims a request.
+ *
+ * There is one implementation per simulated condition field, so nothing has to
+ * branch on which field a condition was written on once the rule exists.
+ */
+export interface SimElbV2ConditionMatcher {
+    /**
+     * Whether this condition is satisfied by a request.
+     */
+    matches(request: SimElbV2MatchableRequest): boolean;
+}
+/**
+ * A condition matching one part of a request against a list of patterns.
+ *
+ * A condition with several values is satisfied when any one of them matches,
+ * which is what makes a value list an or and several conditions on a rule an
+ * and. Each subclass says which part of the request its field compares.
+ */
+export declare abstract class SimElbV2ValueListMatcher implements SimElbV2ConditionMatcher {
+    private readonly patterns;
+    protected constructor(patterns: readonly SimElbV2WildcardPattern[]);
+    matches(request: SimElbV2MatchableRequest): boolean;
+    /**
+     * The part of the request this field compares its values against.
+     */
+    protected abstract subject(request: SimElbV2MatchableRequest): string;
+}
+//# sourceMappingURL=sim-elbv2-condition-matcher.d.ts.map

package/dist/service/elbv2/listener/rule/match/sim-elbv2-condition-matcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-elbv2-condition-matcher.d.ts","sourceRoot":"","sources":["../../../../../../src/service/elbv2/listener/rule/match/sim-elbv2-condition-matcher.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AACjF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAE/E;;;;;GAKG;AACH,MAAM,WAAW,wBAAwB;IACvC;;OAEG;IACH,OAAO,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC;CACrD;AAED;;;;;;GAMG;AACH,8BAAsB,wBAAyB,YAAW,wBAAwB;IAE9E,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAD3B,SAAS,aACU,QAAQ,EAAE,SAAS,uBAAuB,EAAE,EAC3D;IAEJ,OAAO,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAIlD;IAED;;OAEG;IACH,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,wBAAwB,GAAG,MAAM,CAAC;CACvE"}

package/dist/service/elbv2/listener/rule/match/sim-elbv2-condition-matcher.js

@@ -0,0 +1,18 @@
+/**
+ * A condition matching one part of a request against a list of patterns.
+ *
+ * A condition with several values is satisfied when any one of them matches,
+ * which is what makes a value list an or and several conditions on a rule an
+ * and. Each subclass says which part of the request its field compares.
+ */
+export class SimElbV2ValueListMatcher {
+    patterns;
+    constructor(patterns) {
+        this.patterns = patterns;
+    }
+    matches(request) {
+        const subject = this.subject(request);
+        return this.patterns.some((pattern) => pattern.matches(subject));
+    }
+}
+//# sourceMappingURL=sim-elbv2-condition-matcher.js.map

package/dist/service/elbv2/listener/rule/match/sim-elbv2-condition-matcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-elbv2-condition-matcher.js","sourceRoot":"","sources":["../../../../../../src/service/elbv2/listener/rule/match/sim-elbv2-condition-matcher.ts"],"names":[],"mappings":"AAgBA;;;;;;GAMG;AACH,MAAM,OAAgB,wBAAwB;IAEzB,QAAQ;IAD3B,YACmB,QAA4C;wBAA5C,QAAQ;IACxB,CAAC;IAEJ,OAAO,CAAC,OAAiC;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAEtC,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IACnE,CAAC;CAMF"}

package/dist/service/elbv2/listener/rule/match/sim-elbv2-condition-values.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Read the values a condition compares against, refusing a list ELB would not
+ * take.
+ *
+ * The length limit is real ELB's rather than one of this simulation's own. A
+ * pattern longer than this is accepted here and refused by AWS, which is the
+ * divergence worth avoiding: a test passes and the deployment fails.
+ *
+ * It also bounds what the matcher compiles. A pattern with many wildcards
+ * still compiles to that many `.*` runs, and a backtracking engine can take a
+ * while to settle on a long near miss, so the bound is worth having even
+ * though it is not what stops that. What stops it is that a condition value is
+ * written by whoever wrote the rule and is never carried on a request, so the
+ * only run a pathological pattern can hold up is that author's own. A cap on
+ * wildcards is deliberately not added, since real ELB has none and a rule AWS
+ * accepts should not be refused here.
+ */
+export declare function requireSimElbV2ConditionValues(values: readonly string[], field: string): readonly string[];
+//# sourceMappingURL=sim-elbv2-condition-values.d.ts.map

package/dist/service/elbv2/listener/rule/match/sim-elbv2-condition-values.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-elbv2-condition-values.d.ts","sourceRoot":"","sources":["../../../../../../src/service/elbv2/listener/rule/match/sim-elbv2-condition-values.ts"],"names":[],"mappings":"AAUA;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,SAAS,MAAM,EAAE,EACzB,KAAK,EAAE,MAAM,GACZ,SAAS,MAAM,EAAE,CAiBnB"}

package/dist/service/elbv2/listener/rule/match/sim-elbv2-condition-values.js

@@ -0,0 +1,37 @@
+import { SimElbV2ValidationError } from "../../../error/sim-elbv2.error.js";
+/**
+ * The longest condition value real ELB takes.
+ *
+ * The limit is the same for a host name and for a path pattern, and it is per
+ * value rather than across the list.
+ */
+const maximumValueLength = 128;
+/**
+ * Read the values a condition compares against, refusing a list ELB would not
+ * take.
+ *
+ * The length limit is real ELB's rather than one of this simulation's own. A
+ * pattern longer than this is accepted here and refused by AWS, which is the
+ * divergence worth avoiding: a test passes and the deployment fails.
+ *
+ * It also bounds what the matcher compiles. A pattern with many wildcards
+ * still compiles to that many `.*` runs, and a backtracking engine can take a
+ * while to settle on a long near miss, so the bound is worth having even
+ * though it is not what stops that. What stops it is that a condition value is
+ * written by whoever wrote the rule and is never carried on a request, so the
+ * only run a pathological pattern can hold up is that author's own. A cap on
+ * wildcards is deliberately not added, since real ELB has none and a rule AWS
+ * accepts should not be refused here.
+ */
+export function requireSimElbV2ConditionValues(values, field) {
+    if (values.length === 0) {
+        throw new SimElbV2ValidationError(`A '${field}' condition requires at least one value`);
+    }
+    const tooLong = values.find((value) => value.length > maximumValueLength);
+    if (tooLong !== undefined) {
+        throw new SimElbV2ValidationError(`A '${field}' condition value is ${String(tooLong.length)} characters, ` +
+            `and ELB takes at most ${String(maximumValueLength)}`);
+    }
+    return values;
+}
+//# sourceMappingURL=sim-elbv2-condition-values.js.map

package/dist/service/elbv2/listener/rule/match/sim-elbv2-condition-values.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-elbv2-condition-values.js","sourceRoot":"","sources":["../../../../../../src/service/elbv2/listener/rule/match/sim-elbv2-condition-values.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAE5E;;;;;GAKG;AACH,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAE/B;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,8BAA8B,CAC5C,MAAyB,EACzB,KAAa;IAEb,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,uBAAuB,CAC/B,MAAM,KAAK,yCAAyC,CACrD,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,kBAAkB,CAAC,CAAC;IAE1E,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,uBAAuB,CAC/B,MAAM,KAAK,wBAAwB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe;YACtE,yBAAyB,MAAM,CAAC,kBAAkB,CAAC,EAAE,CACxD,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/service/elbv2/listener/rule/match/sim-elbv2-host-header-matcher.d.ts

@@ -0,0 +1,15 @@
+import { SimElbV2ValueListMatcher } from "./sim-elbv2-condition-matcher.js";
+import type { SimElbV2MatchableRequest } from "./sim-elbv2-matchable-request.js";
+/**
+ * A `host-header` condition, matched against the host name a request named.
+ *
+ * The comparison is case insensitive, as host names are. It is still a whole
+ * value comparison, so `*.example.com` matches `admin.example.com` and does not
+ * match `example.com`: the pattern has a dot before the wildcard's zero
+ * characters, and the bare domain has nothing there.
+ */
+export declare class SimElbV2HostHeaderMatcher extends SimElbV2ValueListMatcher {
+    constructor(values: readonly string[]);
+    protected subject(request: SimElbV2MatchableRequest): string;
+}
+//# sourceMappingURL=sim-elbv2-host-header-matcher.d.ts.map

package/dist/service/elbv2/listener/rule/match/sim-elbv2-host-header-matcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-elbv2-host-header-matcher.d.ts","sourceRoot":"","sources":["../../../../../../src/service/elbv2/listener/rule/match/sim-elbv2-host-header-matcher.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAGjF;;;;;;;GAOG;AACH,qBAAa,yBAA0B,SAAQ,wBAAwB;IACrE,YAAY,MAAM,EAAE,SAAS,MAAM,EAAE,EAIpC;IAED,UAAmB,OAAO,CAAC,OAAO,EAAE,wBAAwB,GAAG,MAAM,CAEpE;CACF"}

package/dist/service/elbv2/listener/rule/match/sim-elbv2-host-header-matcher.js

@@ -0,0 +1,19 @@
+import { SimElbV2ValueListMatcher } from "./sim-elbv2-condition-matcher.js";
+import { SimElbV2WildcardPattern } from "./sim-elbv2-wildcard-pattern.js";
+/**
+ * A `host-header` condition, matched against the host name a request named.
+ *
+ * The comparison is case insensitive, as host names are. It is still a whole
+ * value comparison, so `*.example.com` matches `admin.example.com` and does not
+ * match `example.com`: the pattern has a dot before the wildcard's zero
+ * characters, and the bare domain has nothing there.
+ */
+export class SimElbV2HostHeaderMatcher extends SimElbV2ValueListMatcher {
+    constructor(values) {
+        super(values.map((value) => SimElbV2WildcardPattern.caseInsensitive(value)));
+    }
+    subject(request) {
+        return request.host;
+    }
+}
+//# sourceMappingURL=sim-elbv2-host-header-matcher.js.map

package/dist/service/elbv2/listener/rule/match/sim-elbv2-host-header-matcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-elbv2-host-header-matcher.js","sourceRoot":"","sources":["../../../../../../src/service/elbv2/listener/rule/match/sim-elbv2-host-header-matcher.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAE5E,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAE1E;;;;;;;GAOG;AACH,MAAM,OAAO,yBAA0B,SAAQ,wBAAwB;IACrE,YAAY,MAAyB;QACnC,KAAK,CACH,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,uBAAuB,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CACtE,CAAC;IACJ,CAAC;IAEkB,OAAO,CAAC,OAAiC;QAC1D,OAAO,OAAO,CAAC,IAAI,CAAC;IACtB,CAAC;CACF"}

package/dist/service/elbv2/listener/rule/match/sim-elbv2-matchable-request.d.ts

@@ -0,0 +1,31 @@
+/**
+ * The parts of a request a listener rule is matched against.
+ *
+ * A rule is matched against the request rather than against the load balancer
+ * it reached, so this is everything the two simulated condition fields need and
+ * nothing else.
+ */
+export interface SimElbV2MatchableRequest {
+    /** The host name the request named, with any port taken off. */
+    readonly host: string;
+    /** The path of the request URL, which is not its query string. */
+    readonly path: string;
+}
+/**
+ * Read the parts of an HTTP request that listener rules match on.
+ *
+ * The Host header is what real ELB compares a `host-header` condition against,
+ * so it wins over the host name in the URL. They are the same thing on real
+ * AWS, where DNS is what brought the request here.
+ *
+ * The host name is the AWS-facing one, so a request served under the
+ * Yulin-local suffix is matched against the name the client asked for rather
+ * than against the localhost name it reached the server at. That is what makes
+ * host-based routing agree with what Route53 resolved: a request to
+ * `api.example.test.sim-aws.localhost` is claimed by a rule on
+ * `api.example.test`, the same rule a browser resolving that name would meet.
+ * A condition value cannot carry a port on real ELB, and the AWS-facing host
+ * name has none either.
+ */
+export declare function simElbV2MatchableRequest(request: Request): SimElbV2MatchableRequest;
+//# sourceMappingURL=sim-elbv2-matchable-request.d.ts.map

package/dist/service/elbv2/listener/rule/match/sim-elbv2-matchable-request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-elbv2-matchable-request.d.ts","sourceRoot":"","sources":["../../../../../../src/service/elbv2/listener/rule/match/sim-elbv2-matchable-request.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,MAAM,WAAW,wBAAwB;IACvC,gEAAgE;IAChE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,kEAAkE;IAClE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,OAAO,GACf,wBAAwB,CAO1B"}

package/dist/service/elbv2/listener/rule/match/sim-elbv2-matchable-request.js

@@ -0,0 +1,26 @@
+import { simAwsRequestHostname } from "../../../../../serve/http/url/sim-aws-request-hostname.js";
+/**
+ * Read the parts of an HTTP request that listener rules match on.
+ *
+ * The Host header is what real ELB compares a `host-header` condition against,
+ * so it wins over the host name in the URL. They are the same thing on real
+ * AWS, where DNS is what brought the request here.
+ *
+ * The host name is the AWS-facing one, so a request served under the
+ * Yulin-local suffix is matched against the name the client asked for rather
+ * than against the localhost name it reached the server at. That is what makes
+ * host-based routing agree with what Route53 resolved: a request to
+ * `api.example.test.sim-aws.localhost` is claimed by a rule on
+ * `api.example.test`, the same rule a browser resolving that name would meet.
+ * A condition value cannot carry a port on real ELB, and the AWS-facing host
+ * name has none either.
+ */
+export function simElbV2MatchableRequest(request) {
+    return {
+        host: simAwsRequestHostname(request),
+        // The pathname excludes the query string, which is what real ELB compares
+        // a path pattern against.
+        path: new URL(request.url).pathname,
+    };
+}
+//# sourceMappingURL=sim-elbv2-matchable-request.js.map

package/dist/service/elbv2/listener/rule/match/sim-elbv2-matchable-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-elbv2-matchable-request.js","sourceRoot":"","sources":["../../../../../../src/service/elbv2/listener/rule/match/sim-elbv2-matchable-request.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,2DAA2D,CAAC;AAgBlG;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAAgB;IAEhB,OAAO;QACL,IAAI,EAAE,qBAAqB,CAAC,OAAO,CAAC;QACpC,0EAA0E;QAC1E,0BAA0B;QAC1B,IAAI,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ;KACpC,CAAC;AACJ,CAAC"}

package/dist/service/elbv2/listener/rule/match/sim-elbv2-path-pattern-matcher.d.ts

@@ -0,0 +1,15 @@
+import { SimElbV2ValueListMatcher } from "./sim-elbv2-condition-matcher.js";
+import type { SimElbV2MatchableRequest } from "./sim-elbv2-matchable-request.js";
+/**
+ * A `path-pattern` condition, matched against the path of the request URL.
+ *
+ * The comparison is case sensitive, unlike a host name's, and it is against the
+ * path alone: a query string is matched by a `query-string` condition, which is
+ * not simulated. The whole path has to match, so `/api/*` claims `/api/orders`
+ * and does not claim `/api`.
+ */
+export declare class SimElbV2PathPatternMatcher extends SimElbV2ValueListMatcher {
+    constructor(values: readonly string[]);
+    protected subject(request: SimElbV2MatchableRequest): string;
+}
+//# sourceMappingURL=sim-elbv2-path-pattern-matcher.d.ts.map

package/dist/service/elbv2/listener/rule/match/sim-elbv2-path-pattern-matcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-elbv2-path-pattern-matcher.d.ts","sourceRoot":"","sources":["../../../../../../src/service/elbv2/listener/rule/match/sim-elbv2-path-pattern-matcher.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAGjF;;;;;;;GAOG;AACH,qBAAa,0BAA2B,SAAQ,wBAAwB;IACtE,YAAY,MAAM,EAAE,SAAS,MAAM,EAAE,EAEpC;IAED,UAAmB,OAAO,CAAC,OAAO,EAAE,wBAAwB,GAAG,MAAM,CAEpE;CACF"}

package/dist/service/elbv2/listener/rule/match/sim-elbv2-path-pattern-matcher.js

@@ -0,0 +1,19 @@
+import { SimElbV2ValueListMatcher } from "./sim-elbv2-condition-matcher.js";
+import { SimElbV2WildcardPattern } from "./sim-elbv2-wildcard-pattern.js";
+/**
+ * A `path-pattern` condition, matched against the path of the request URL.
+ *
+ * The comparison is case sensitive, unlike a host name's, and it is against the
+ * path alone: a query string is matched by a `query-string` condition, which is
+ * not simulated. The whole path has to match, so `/api/*` claims `/api/orders`
+ * and does not claim `/api`.
+ */
+export class SimElbV2PathPatternMatcher extends SimElbV2ValueListMatcher {
+    constructor(values) {
+        super(values.map((value) => SimElbV2WildcardPattern.caseSensitive(value)));
+    }
+    subject(request) {
+        return request.path;
+    }
+}
+//# sourceMappingURL=sim-elbv2-path-pattern-matcher.js.map

package/dist/service/elbv2/listener/rule/match/sim-elbv2-path-pattern-matcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-elbv2-path-pattern-matcher.js","sourceRoot":"","sources":["../../../../../../src/service/elbv2/listener/rule/match/sim-elbv2-path-pattern-matcher.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAE5E,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAE1E;;;;;;;GAOG;AACH,MAAM,OAAO,0BAA2B,SAAQ,wBAAwB;IACtE,YAAY,MAAyB;QACnC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,uBAAuB,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC7E,CAAC;IAEkB,OAAO,CAAC,OAAiC;QAC1D,OAAO,OAAO,CAAC,IAAI,CAAC;IACtB,CAAC;CACF"}

package/dist/service/elbv2/listener/rule/match/sim-elbv2-wildcard-pattern.d.ts

@@ -0,0 +1,30 @@
+/**
+ * One `host-header` or `path-pattern` value, compiled so a request can be
+ * compared against it.
+ *
+ * Real ELB supports two wildcards, `*` for zero or more characters and `?` for
+ * exactly one, and compares them against the whole of the host name or path
+ * rather than against part of it. That whole-value comparison is the part that
+ * surprises people: `/api/*` does not match `/api`, because the pattern has a
+ * literal slash the path does not, and `*.example.com` does not match
+ * `example.com` for the same reason.
+ */
+export declare class SimElbV2WildcardPattern {
+    private readonly expression;
+    private constructor();
+    /**
+     * Compile a pattern compared exactly as it is written, which is how real ELB
+     * compares a path pattern.
+     */
+    static caseSensitive(pattern: string): SimElbV2WildcardPattern;
+    /**
+     * Compile a pattern compared without regard to case, which is how real ELB
+     * compares a host name.
+     */
+    static caseInsensitive(pattern: string): SimElbV2WildcardPattern;
+    /**
+     * Whether a value is one this pattern matches.
+     */
+    matches(value: string): boolean;
+}
+//# sourceMappingURL=sim-elbv2-wildcard-pattern.d.ts.map

package/dist/service/elbv2/listener/rule/match/sim-elbv2-wildcard-pattern.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-elbv2-wildcard-pattern.d.ts","sourceRoot":"","sources":["../../../../../../src/service/elbv2/listener/rule/match/sim-elbv2-wildcard-pattern.ts"],"names":[],"mappings":"AASA;;;;;;;;;;GAUG;AACH,qBAAa,uBAAuB;IAClC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IAEpC,OAAO,eAmBN;IAED;;;OAGG;IACH,MAAM,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,uBAAuB,CAE7D;IAED;;;OAGG;IACH,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,uBAAuB,CAE/D;IAED;;OAEG;IACH,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE9B;CACF"}