@kensio/yulin 1.13.0 → 1.14.0

package/dist/service/elbv2/serve/sim-elbv2-invoke-authorizer.d.ts

@@ -0,0 +1,49 @@
+import type { SimIamAuthorizationDecision, SimIamInterServiceAuthZ } from "../../iam/authorize/sim-iam-inter-service-auth-z.js";
+import type { SimLambdaFunction } from "../../lambda/function/sim-lambda-function.js";
+import type { SimElbV2TargetGroup } from "../target-group/sim-elbv2-target-group.js";
+/**
+ * The service principal Elastic Load Balancing invokes a Lambda function as.
+ */
+export declare const simElbV2ServicePrincipal = "elasticloadbalancing.amazonaws.com";
+interface SimElbV2InvokeAuthorizerProperties {
+    readonly iam: SimIamInterServiceAuthZ;
+}
+interface SimElbV2InvokeAuthorizationInput {
+    readonly simFunction: SimLambdaFunction;
+    readonly targetGroup: SimElbV2TargetGroup;
+    readonly accountId: string;
+}
+/**
+ * Decides whether a load balancer may invoke the function in a target group.
+ *
+ * A Lambda target registered through CloudFormation, the CLI or an SDK does not
+ * serve anything until the function's resource policy allows
+ * `elasticloadbalancing.amazonaws.com` to invoke it. That grant is the one
+ * thing standing between a target group that looks configured and one that
+ * answers, and forgetting it is a common way to get a load balancer that
+ * returns nothing but errors.
+ *
+ * Whether a service may invoke a function is Lambda's own rule, so the decision
+ * is made there. What this adds is the part only ELB knows: which target group
+ * is calling.
+ *
+ * The answer is a decision rather than a thrown error, because a refusal is an
+ * ordinary HTTP outcome: the load balancer answers 502 the way real ELB does,
+ * with nothing to propagate to a caller in process.
+ */
+export declare class SimElbV2InvokeAuthorizer {
+    private readonly lambdaAuthorizer;
+    constructor(properties: SimElbV2InvokeAuthorizerProperties);
+    /**
+     * Evaluate `lambda:InvokeFunction` for the load balancer against the
+     * function.
+     *
+     * The target group is supplied as `AWS:SourceArn` and its Account as
+     * `AWS:SourceAccount`, which is what the `add-permission` call in the ELB
+     * documentation names, so a permission granted for one target group does not
+     * open another.
+     */
+    authorize(input: SimElbV2InvokeAuthorizationInput): SimIamAuthorizationDecision;
+}
+export {};
+//# sourceMappingURL=sim-elbv2-invoke-authorizer.d.ts.map

package/dist/service/elbv2/serve/sim-elbv2-invoke-authorizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-elbv2-invoke-authorizer.d.ts","sourceRoot":"","sources":["../../../../src/service/elbv2/serve/sim-elbv2-invoke-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,2BAA2B,EAC3B,uBAAuB,EACxB,MAAM,qDAAqD,CAAC;AAE7D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,8CAA8C,CAAC;AACtF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AAErF;;GAEG;AACH,eAAO,MAAM,wBAAwB,uCAAuC,CAAC;AAE7E,UAAU,kCAAkC;IAC1C,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;CACvC;AAED,UAAU,gCAAgC;IACxC,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAC;IACxC,QAAQ,CAAC,WAAW,EAAE,mBAAmB,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,wBAAwB;IACnC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAmC;IAEpE,YAAY,UAAU,EAAE,kCAAkC,EAIzD;IAED;;;;;;;;OAQG;IACH,SAAS,CACP,KAAK,EAAE,gCAAgC,GACtC,2BAA2B,CAO7B;CACF"}

package/dist/service/elbv2/serve/sim-elbv2-invoke-authorizer.js

@@ -0,0 +1,49 @@
+import { SimLambdaServiceInvokeAuthorizer } from "../../lambda/command/authorize/sim-lambda-service-invoke-authorizer.js";
+/**
+ * The service principal Elastic Load Balancing invokes a Lambda function as.
+ */
+export const simElbV2ServicePrincipal = "elasticloadbalancing.amazonaws.com";
+/**
+ * Decides whether a load balancer may invoke the function in a target group.
+ *
+ * A Lambda target registered through CloudFormation, the CLI or an SDK does not
+ * serve anything until the function's resource policy allows
+ * `elasticloadbalancing.amazonaws.com` to invoke it. That grant is the one
+ * thing standing between a target group that looks configured and one that
+ * answers, and forgetting it is a common way to get a load balancer that
+ * returns nothing but errors.
+ *
+ * Whether a service may invoke a function is Lambda's own rule, so the decision
+ * is made there. What this adds is the part only ELB knows: which target group
+ * is calling.
+ *
+ * The answer is a decision rather than a thrown error, because a refusal is an
+ * ordinary HTTP outcome: the load balancer answers 502 the way real ELB does,
+ * with nothing to propagate to a caller in process.
+ */
+export class SimElbV2InvokeAuthorizer {
+    lambdaAuthorizer;
+    constructor(properties) {
+        this.lambdaAuthorizer = new SimLambdaServiceInvokeAuthorizer({
+            iam: properties.iam,
+        });
+    }
+    /**
+     * Evaluate `lambda:InvokeFunction` for the load balancer against the
+     * function.
+     *
+     * The target group is supplied as `AWS:SourceArn` and its Account as
+     * `AWS:SourceAccount`, which is what the `add-permission` call in the ELB
+     * documentation names, so a permission granted for one target group does not
+     * open another.
+     */
+    authorize(input) {
+        return this.lambdaAuthorizer.authorize({
+            simFunction: input.simFunction,
+            servicePrincipal: simElbV2ServicePrincipal,
+            sourceArn: input.targetGroup.arn,
+            sourceAccount: input.accountId,
+        });
+    }
+}
+//# sourceMappingURL=sim-elbv2-invoke-authorizer.js.map

package/dist/service/elbv2/serve/sim-elbv2-invoke-authorizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-elbv2-invoke-authorizer.js","sourceRoot":"","sources":["../../../../src/service/elbv2/serve/sim-elbv2-invoke-authorizer.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,gCAAgC,EAAE,MAAM,wEAAwE,CAAC;AAI1H;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,oCAAoC,CAAC;AAY7E;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,OAAO,wBAAwB;IAClB,gBAAgB,CAAmC;IAEpE,YAAY,UAA8C;QACxD,IAAI,CAAC,gBAAgB,GAAG,IAAI,gCAAgC,CAAC;YAC3D,GAAG,EAAE,UAAU,CAAC,GAAG;SACpB,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;OAQG;IACH,SAAS,CACP,KAAuC;QAEvC,OAAO,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC;YACrC,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,gBAAgB,EAAE,wBAAwB;YAC1C,SAAS,EAAE,KAAK,CAAC,WAAW,CAAC,GAAG;YAChC,aAAa,EAAE,KAAK,CAAC,SAAS;SAC/B,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/elbv2/serve/sim-elbv2-lambda-target-invocation.d.ts

@@ -0,0 +1,37 @@
+import type { SimClock } from "../../../util/clock/sim-clock.js";
+import type { SimElbV2Router } from "./sim-elbv2-router.js";
+import type { SimElbV2TargetInvocation, SimElbV2TargetInvocationInput } from "./sim-elbv2-target-invocation.js";
+interface SimElbV2LambdaTargetInvocationProperties {
+    readonly router: SimElbV2Router;
+    /** Clock the invocation event is stamped with. */
+    readonly clock: SimClock;
+}
+/**
+ * Invokes the Lambda function registered in a target group, and turns what it
+ * returns into the HTTP response.
+ *
+ * A target group with nothing in it is a 503, because there is no target to
+ * send the request to. Everything that goes wrong once there is one is a 502:
+ * a function that is not there, one the load balancer may not invoke, one that
+ * threw, and one whose result is not a response. That is what real ELB does
+ * too, and it is why the load balancer's own logs are the only place the
+ * difference between them shows.
+ */
+export declare class SimElbV2LambdaTargetInvocation implements SimElbV2TargetInvocation {
+    private readonly router;
+    private readonly eventBuilder;
+    private readonly responseBuilder;
+    private readonly errorResponse;
+    constructor(properties: SimElbV2LambdaTargetInvocationProperties);
+    /**
+     * Invoke the target group's function for one request.
+     */
+    invoke(input: SimElbV2TargetInvocationInput): Promise<Response>;
+    /**
+     * Whether the load balancer lacks permission to invoke the function.
+     */
+    private mayNotInvoke;
+    private run;
+}
+export {};
+//# sourceMappingURL=sim-elbv2-lambda-target-invocation.d.ts.map

package/dist/service/elbv2/serve/sim-elbv2-lambda-target-invocation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-elbv2-lambda-target-invocation.d.ts","sourceRoot":"","sources":["../../../../src/service/elbv2/serve/sim-elbv2-lambda-target-invocation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AAMjE,OAAO,KAAK,EAEV,cAAc,EACf,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EACV,wBAAwB,EACxB,6BAA6B,EAC9B,MAAM,kCAAkC,CAAC;AAO1C,UAAU,wCAAwC;IAChD,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,kDAAkD;IAClD,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED;;;;;;;;;;GAUG;AACH,qBAAa,8BAA+B,YAAW,wBAAwB;IAC7E,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiB;IACxC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAuB;IACpD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAiC;IACjE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA+B;IAE7D,YAAY,UAAU,EAAE,wCAAwC,EAK/D;IAED;;OAEG;IACG,MAAM,CAAC,KAAK,EAAE,6BAA6B,GAAG,OAAO,CAAC,QAAQ,CAAC,CAcpE;IAED;;OAEG;IACH,OAAO,CAAC,YAAY;YAWN,GAAG;CA6BlB"}

package/dist/service/elbv2/serve/sim-elbv2-lambda-target-invocation.js

@@ -0,0 +1,79 @@
+import { SimElbV2ErrorResponse } from "./sim-elbv2-error-response.js";
+import { SimElbV2EventBuilder } from "./sim-elbv2-event-builder.js";
+import { SimElbV2InvokeAuthorizer } from "./sim-elbv2-invoke-authorizer.js";
+import { SimElbV2ResponseBuilder } from "./sim-elbv2-response-builder.js";
+/**
+ * The largest request body real ELB sends to a Lambda target.
+ */
+const maximumRequestBytes = 1024 * 1024;
+/**
+ * Invokes the Lambda function registered in a target group, and turns what it
+ * returns into the HTTP response.
+ *
+ * A target group with nothing in it is a 503, because there is no target to
+ * send the request to. Everything that goes wrong once there is one is a 502:
+ * a function that is not there, one the load balancer may not invoke, one that
+ * threw, and one whose result is not a response. That is what real ELB does
+ * too, and it is why the load balancer's own logs are the only place the
+ * difference between them shows.
+ */
+export class SimElbV2LambdaTargetInvocation {
+    router;
+    eventBuilder;
+    responseBuilder = new SimElbV2ResponseBuilder();
+    errorResponse = new SimElbV2ErrorResponse();
+    constructor(properties) {
+        this.router = properties.router;
+        this.eventBuilder = new SimElbV2EventBuilder({
+            clock: properties.clock,
+        });
+    }
+    /**
+     * Invoke the target group's function for one request.
+     */
+    async invoke(input) {
+        const { targetGroup } = input;
+        if (targetGroup.registeredTargets.length === 0) {
+            return this.errorResponse.serviceUnavailable();
+        }
+        const target = this.router.functionFor(targetGroup);
+        if (target === undefined || this.mayNotInvoke(targetGroup, target)) {
+            return this.errorResponse.badGateway();
+        }
+        return await this.run(input, target);
+    }
+    /**
+     * Whether the load balancer lacks permission to invoke the function.
+     */
+    mayNotInvoke(targetGroup, target) {
+        return new SimElbV2InvokeAuthorizer({ iam: target.iam }).authorize({
+            simFunction: target.simFunction,
+            targetGroup,
+            accountId: targetGroup.accountRegionScope.accountId,
+        }).isDenied;
+    }
+    async run(input, target) {
+        const { listener, targetGroup, request } = input;
+        try {
+            const bytes = new Uint8Array(await request.arrayBuffer());
+            if (bytes.length > maximumRequestBytes) {
+                return this.errorResponse.payloadTooLarge();
+            }
+            const event = this.eventBuilder.build({
+                request,
+                bytes,
+                targetGroupArn: targetGroup.arn,
+                port: listener.port,
+                protocol: listener.protocol,
+            });
+            return this.responseBuilder.build(await target.simFunction.invoke(event));
+        }
+        catch {
+            // A handler that threw is a 502 with the error only in the function's
+            // own logs, as it is on real ELB. Reading the request body can fail the
+            // same way, so building the event is inside this too.
+            return this.errorResponse.badGateway();
+        }
+    }
+}
+//# sourceMappingURL=sim-elbv2-lambda-target-invocation.js.map

package/dist/service/elbv2/serve/sim-elbv2-lambda-target-invocation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-elbv2-lambda-target-invocation.js","sourceRoot":"","sources":["../../../../src/service/elbv2/serve/sim-elbv2-lambda-target-invocation.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAU1E;;GAEG;AACH,MAAM,mBAAmB,GAAG,IAAI,GAAG,IAAI,CAAC;AAQxC;;;;;;;;;;GAUG;AACH,MAAM,OAAO,8BAA8B;IACxB,MAAM,CAAiB;IACvB,YAAY,CAAuB;IACnC,eAAe,GAAG,IAAI,uBAAuB,EAAE,CAAC;IAChD,aAAa,GAAG,IAAI,qBAAqB,EAAE,CAAC;IAE7D,YAAY,UAAoD;QAC9D,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,YAAY,GAAG,IAAI,oBAAoB,CAAC;YAC3C,KAAK,EAAE,UAAU,CAAC,KAAK;SACxB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,KAAoC;QAC/C,MAAM,EAAE,WAAW,EAAE,GAAG,KAAK,CAAC;QAE9B,IAAI,WAAW,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/C,OAAO,IAAI,CAAC,aAAa,CAAC,kBAAkB,EAAE,CAAC;QACjD,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QAEpD,IAAI,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,CAAC;YACnE,OAAO,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,CAAC;QACzC,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAED;;OAEG;IACK,YAAY,CAClB,WAAgC,EAChC,MAA8B;QAE9B,OAAO,IAAI,wBAAwB,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,SAAS,CAAC;YACjE,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,WAAW;YACX,SAAS,EAAE,WAAW,CAAC,kBAAkB,CAAC,SAAS;SACpD,CAAC,CAAC,QAAQ,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,GAAG,CACf,KAAoC,EACpC,MAA8B;QAE9B,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;QAEjD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;YAE1D,IAAI,KAAK,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;gBACvC,OAAO,IAAI,CAAC,aAAa,CAAC,eAAe,EAAE,CAAC;YAC9C,CAAC;YAED,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;gBACpC,OAAO;gBACP,KAAK;gBACL,cAAc,EAAE,WAAW,CAAC,GAAG;gBAC/B,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;aAC5B,CAAC,CAAC;YAEH,OAAO,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5E,CAAC;QAAC,MAAM,CAAC;YACP,sEAAsE;YACtE,wEAAwE;YACxE,sDAAsD;YACtD,OAAO,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,CAAC;QACzC,CAAC;IACH,CAAC;CACF"}

package/dist/service/elbv2/serve/sim-elbv2-lambda-target.factory.d.ts

@@ -0,0 +1,52 @@
+import { AsyncMappedFactory } from "@kensio/part-factory";
+import type { SimAws } from "../../aws/sim-aws.js";
+import type { SimElbV2LoadBalancer } from "../load-balancer/sim-elbv2-load-balancer.js";
+import type { SimElbV2Event } from "./sim-elbv2-event.type.js";
+/**
+ * The load balancer, target group and function this builds.
+ *
+ * The names are fixed rather than asked for, so a test asserting on an ARN or
+ * a DNS name has one value to write down.
+ */
+export declare const simElbV2LambdaTargetNames: {
+    readonly loadBalancer: "shop-alb";
+    readonly targetGroup: "checkout-tg";
+    readonly function: "checkout";
+    /** The statement id the invoke permission is granted under. */
+    readonly invokeStatement: "elb-invoke";
+};
+/**
+ * What a test asks for when it wants a load balancer that serves something.
+ */
+export interface SimElbV2LambdaTargetInput {
+    /** The function code the load balancer hands its requests to. */
+    readonly handler: (event: SimElbV2Event) => unknown;
+    /** The port the listener answers on. */
+    readonly listenerPort: number;
+}
+/**
+ * Creates a load balancer that forwards every request to a Lambda function,
+ * through the ordinary commands.
+ *
+ * Five commands and a function stand between a test and a request a load
+ * balancer can answer, and a test about answering one is about none of them.
+ * Tests about the commands themselves send them one at a time instead.
+ *
+ * ```typescript
+ * const loadBalancer = await simElbV2LambdaTargetFactory.make(
+ *   { handler: () => ({ statusCode: 200, body: "hello" }) },
+ *   simAws,
+ * );
+ * ```
+ *
+ * What comes back is a load balancer that serves: the function is registered
+ * and it grants the load balancer the invoke action. A test about one of those
+ * missing takes it away again, which is also what a working stack losing it
+ * looks like.
+ *
+ * Everything is created in the default Account and Region of the simulated AWS
+ * it is given, because real ELB requires a Lambda target to be in the same
+ * Account and Region as its target group.
+ */
+export declare const simElbV2LambdaTargetFactory: AsyncMappedFactory<SimElbV2LambdaTargetInput, SimElbV2LoadBalancer, SimAws>;
+//# sourceMappingURL=sim-elbv2-lambda-target.factory.d.ts.map

package/dist/service/elbv2/serve/sim-elbv2-lambda-target.factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-elbv2-lambda-target.factory.d.ts","sourceRoot":"","sources":["../../../../src/service/elbv2/serve/sim-elbv2-lambda-target.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAG1D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAC;AAKxF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAO/D;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB;aACpC,YAAY,EAAE,UAAU;aACxB,WAAW,EAAE,aAAa;aAC1B,QAAQ,EAAE,UAAU;IACpB,+DAA+D;aAC/D,eAAe;CACP,CAAC;AAEX;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,iEAAiE;IACjE,QAAQ,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,aAAa,KAAK,OAAO,CAAC;IACpD,wCAAwC;IACxC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,2BAA2B,6EAqCvC,CAAC"}

package/dist/service/elbv2/serve/sim-elbv2-lambda-target.factory.js

@@ -0,0 +1,55 @@
+import { AsyncMappedFactory } from "@kensio/part-factory";
+import { assertDefined } from "../../../util/type-guard/defined.js";
+import { createFixtureListener, createFixtureLoadBalancer, } from "../sim-elbv2.fixture.js";
+import { simElbV2CheckoutHandler, simElbV2InvokeStatementId, simElbV2ServingTargetGroupFactory, } from "./sim-elbv2-serving-target-group.factory.js";
+/**
+ * The load balancer, target group and function this builds.
+ *
+ * The names are fixed rather than asked for, so a test asserting on an ARN or
+ * a DNS name has one value to write down.
+ */
+export const simElbV2LambdaTargetNames = {
+    loadBalancer: "shop-alb",
+    targetGroup: "checkout-tg",
+    function: "checkout",
+    /** The statement id the invoke permission is granted under. */
+    invokeStatement: simElbV2InvokeStatementId,
+};
+/**
+ * Creates a load balancer that forwards every request to a Lambda function,
+ * through the ordinary commands.
+ *
+ * Five commands and a function stand between a test and a request a load
+ * balancer can answer, and a test about answering one is about none of them.
+ * Tests about the commands themselves send them one at a time instead.
+ *
+ * ```typescript
+ * const loadBalancer = await simElbV2LambdaTargetFactory.make(
+ *   { handler: () => ({ statusCode: 200, body: "hello" }) },
+ *   simAws,
+ * );
+ * ```
+ *
+ * What comes back is a load balancer that serves: the function is registered
+ * and it grants the load balancer the invoke action. A test about one of those
+ * missing takes it away again, which is also what a working stack losing it
+ * looks like.
+ *
+ * Everything is created in the default Account and Region of the simulated AWS
+ * it is given, because real ELB requires a Lambda target to be in the same
+ * Account and Region as its target group.
+ */
+export const simElbV2LambdaTargetFactory = new AsyncMappedFactory(() => ({ handler: simElbV2CheckoutHandler, listenerPort: 80 }), async (input, simAws) => {
+    const names = simElbV2LambdaTargetNames;
+    const targetGroup = await simElbV2ServingTargetGroupFactory.make({ name: names.function, handler: input.handler }, simAws);
+    const elbV2 = simAws.elbV2();
+    const balancerArn = await createFixtureLoadBalancer(elbV2, names.loadBalancer);
+    await createFixtureListener(elbV2, balancerArn, targetGroup.arn, input.listenerPort);
+    // A load balancer CreateLoadBalancer reported is one the store holds, so
+    // this is only missing if something is wrong with the simulator itself.
+    const loadBalancer = elbV2.findLoadBalancerByName(names.loadBalancer);
+    assertDefined(loadBalancer, `Simulated ELBv2 created the load balancer ${names.loadBalancer} and ` +
+        `then did not hold it`);
+    return loadBalancer;
+});
+//# sourceMappingURL=sim-elbv2-lambda-target.factory.js.map

package/dist/service/elbv2/serve/sim-elbv2-lambda-target.factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-elbv2-lambda-target.factory.js","sourceRoot":"","sources":["../../../../src/service/elbv2/serve/sim-elbv2-lambda-target.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE1D,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAGpE,OAAO,EACL,qBAAqB,EACrB,yBAAyB,GAC1B,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,uBAAuB,EACvB,yBAAyB,EACzB,iCAAiC,GAClC,MAAM,6CAA6C,CAAC;AAErD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,YAAY,EAAE,UAAU;IACxB,WAAW,EAAE,aAAa;IAC1B,QAAQ,EAAE,UAAU;IACpB,+DAA+D;IAC/D,eAAe,EAAE,yBAAyB;CAClC,CAAC;AAYX;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,IAAI,kBAAkB,CAK/D,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,EAC9D,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;IACtB,MAAM,KAAK,GAAG,yBAAyB,CAAC;IACxC,MAAM,WAAW,GAAG,MAAM,iCAAiC,CAAC,IAAI,CAC9D,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,EAChD,MAAM,CACP,CAAC;IAEF,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC;IAC7B,MAAM,WAAW,GAAG,MAAM,yBAAyB,CACjD,KAAK,EACL,KAAK,CAAC,YAAY,CACnB,CAAC;IAEF,MAAM,qBAAqB,CACzB,KAAK,EACL,WAAW,EACX,WAAW,CAAC,GAAG,EACf,KAAK,CAAC,YAAY,CACnB,CAAC;IAEF,yEAAyE;IACzE,wEAAwE;IACxE,MAAM,YAAY,GAAG,KAAK,CAAC,sBAAsB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACtE,aAAa,CACX,YAAY,EACZ,6CAA6C,KAAK,CAAC,YAAY,OAAO;QACpE,sBAAsB,CACzB,CAAC;IAEF,OAAO,YAAY,CAAC;AACtB,CAAC,CACF,CAAC"}

package/dist/service/elbv2/serve/sim-elbv2-listener-match.d.ts

@@ -0,0 +1,10 @@
+import type { SimElbV2Listener } from "../listener/sim-elbv2-listener.js";
+import type { SimElbV2LoadBalancerRoute } from "./sim-elbv2-router.js";
+/**
+ * Find the listener answering the port a request arrived on, or refuse.
+ *
+ * A port no listener holds throws rather than answering, because on real AWS
+ * the connection is refused and there is no status to send back.
+ */
+export declare function requireSimElbV2Listener(route: SimElbV2LoadBalancerRoute, request: Request): SimElbV2Listener;
+//# sourceMappingURL=sim-elbv2-listener-match.d.ts.map

package/dist/service/elbv2/serve/sim-elbv2-listener-match.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-elbv2-listener-match.d.ts","sourceRoot":"","sources":["../../../../src/service/elbv2/serve/sim-elbv2-listener-match.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAE1E,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAEvE;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,yBAAyB,EAChC,OAAO,EAAE,OAAO,GACf,gBAAgB,CAclB"}

package/dist/service/elbv2/serve/sim-elbv2-listener-match.js

@@ -0,0 +1,18 @@
+import { SimElbV2ConnectionRefusedError } from "../error/sim-elbv2.error.js";
+import { simElbV2RequestPort } from "./sim-elbv2-request-port.js";
+/**
+ * Find the listener answering the port a request arrived on, or refuse.
+ *
+ * A port no listener holds throws rather than answering, because on real AWS
+ * the connection is refused and there is no status to send back.
+ */
+export function requireSimElbV2Listener(route, request) {
+    const { loadBalancer, elbV2 } = route;
+    const port = simElbV2RequestPort(request);
+    const listener = elbV2.findListenerOnPort(loadBalancer.arn, port);
+    if (listener === undefined) {
+        throw new SimElbV2ConnectionRefusedError(`Load balancer '${loadBalancer.name}' has no listener on port ${String(port)}`);
+    }
+    return listener;
+}
+//# sourceMappingURL=sim-elbv2-listener-match.js.map

package/dist/service/elbv2/serve/sim-elbv2-listener-match.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-elbv2-listener-match.js","sourceRoot":"","sources":["../../../../src/service/elbv2/serve/sim-elbv2-listener-match.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,8BAA8B,EAAE,MAAM,6BAA6B,CAAC;AAE7E,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAGlE;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CACrC,KAAgC,EAChC,OAAgB;IAEhB,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACtC,MAAM,IAAI,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,KAAK,CAAC,kBAAkB,CAAC,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAElE,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,IAAI,8BAA8B,CACtC,kBAAkB,YAAY,CAAC,IAAI,6BAA6B,MAAM,CACpE,IAAI,CACL,EAAE,CACJ,CAAC;IACJ,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/service/elbv2/serve/sim-elbv2-null-body-statuses.d.ts

@@ -0,0 +1,6 @@
+/**
+ * The statuses that cannot carry a body, whatever is configured or returned
+ * with them.
+ */
+export declare const simElbV2NullBodyStatuses: ReadonlySet<number>;
+//# sourceMappingURL=sim-elbv2-null-body-statuses.d.ts.map

package/dist/service/elbv2/serve/sim-elbv2-null-body-statuses.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-elbv2-null-body-statuses.d.ts","sourceRoot":"","sources":["../../../../src/service/elbv2/serve/sim-elbv2-null-body-statuses.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,eAAO,MAAM,wBAAwB,EAAE,WAAW,CAAC,MAAM,CAEvD,CAAC"}

package/dist/service/elbv2/serve/sim-elbv2-null-body-statuses.js

@@ -0,0 +1,8 @@
+/**
+ * The statuses that cannot carry a body, whatever is configured or returned
+ * with them.
+ */
+export const simElbV2NullBodyStatuses = new Set([
+    204, 205, 304,
+]);
+//# sourceMappingURL=sim-elbv2-null-body-statuses.js.map

package/dist/service/elbv2/serve/sim-elbv2-null-body-statuses.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-elbv2-null-body-statuses.js","sourceRoot":"","sources":["../../../../src/service/elbv2/serve/sim-elbv2-null-body-statuses.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAwB,IAAI,GAAG,CAAC;IACnE,GAAG,EAAE,GAAG,EAAE,GAAG;CACd,CAAC,CAAC"}

package/dist/service/elbv2/serve/sim-elbv2-redirect-location.d.ts

@@ -0,0 +1,47 @@
+import type { SimElbV2RedirectActionConfig } from "../command/sim-elbv2-shared.command.js";
+/**
+ * The URI a request arrived at, in the five parts a redirect can reuse.
+ */
+export interface SimElbV2RequestUri {
+    /** The protocol the listener taking the request speaks. */
+    readonly protocol: string;
+    /** The host name the request named, without any port. */
+    readonly host: string;
+    /** The port the listener taking the request answers on. */
+    readonly port: string;
+    /** The path of the request URL, with its leading slash. */
+    readonly path: string;
+    /** The query string of the request URL, without its leading question mark. */
+    readonly query: string;
+}
+/**
+ * Builds the URI a `redirect` action sends the client to.
+ *
+ * A component the action does not name keeps the request's own value, so a
+ * redirect that changes only the protocol still lands on the same path. The
+ * five reserved keywords put a component back where the action names another,
+ * and `#{path}` is the one with a shape of its own: it has the leading slash
+ * removed, which is why leaving the path alone is written as `/#{path}`.
+ *
+ * The port is always in the URI, including when it is the protocol's own, which
+ * is what real ELB sends. A redirect to HTTPS on 443 therefore answers with a
+ * Location ending `:443`, and a test asserting on it is asserting on what a
+ * client would really receive.
+ */
+export declare class SimElbV2RedirectLocation {
+    private readonly keywords;
+    constructor(original: SimElbV2RequestUri);
+    /**
+     * Build the Location one redirect action sends.
+     */
+    build(config: SimElbV2RedirectActionConfig): string;
+    private substitute;
+    private keyword;
+    /**
+     * The query string as the URI carries it, which is nothing when there is
+     * none. The question mark is ELB's to add, which is why a configured query
+     * does not carry one.
+     */
+    private queryPart;
+}
+//# sourceMappingURL=sim-elbv2-redirect-location.d.ts.map

package/dist/service/elbv2/serve/sim-elbv2-redirect-location.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-elbv2-redirect-location.d.ts","sourceRoot":"","sources":["../../../../src/service/elbv2/serve/sim-elbv2-redirect-location.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,wCAAwC,CAAC;AAE3F;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,2DAA2D;IAC3D,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,yDAAyD;IACzD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,2DAA2D;IAC3D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,2DAA2D;IAC3D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,8EAA8E;IAC9E,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAOD;;;;;;;;;;;;;GAaG;AACH,qBAAa,wBAAwB;IACnC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA8B;IAEvD,YAAY,QAAQ,EAAE,kBAAkB,EAQvC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,EAAE,4BAA4B,GAAG,MAAM,CAUlD;IAED,OAAO,CAAC,UAAU;IAMlB,OAAO,CAAC,OAAO;IASf;;;;OAIG;IACH,OAAO,CAAC,SAAS;CAOlB"}

package/dist/service/elbv2/serve/sim-elbv2-redirect-location.js

@@ -0,0 +1,65 @@
+import { assertDefined } from "../../../util/type-guard/defined.js";
+/**
+ * The keywords a redirect can carry, which are the only ones substituted.
+ */
+const keywordPattern = /#\{(?:protocol|host|port|path|query)\}/gu;
+/**
+ * Builds the URI a `redirect` action sends the client to.
+ *
+ * A component the action does not name keeps the request's own value, so a
+ * redirect that changes only the protocol still lands on the same path. The
+ * five reserved keywords put a component back where the action names another,
+ * and `#{path}` is the one with a shape of its own: it has the leading slash
+ * removed, which is why leaving the path alone is written as `/#{path}`.
+ *
+ * The port is always in the URI, including when it is the protocol's own, which
+ * is what real ELB sends. A redirect to HTTPS on 443 therefore answers with a
+ * Location ending `:443`, and a test asserting on it is asserting on what a
+ * client would really receive.
+ */
+export class SimElbV2RedirectLocation {
+    keywords;
+    constructor(original) {
+        this.keywords = new Map([
+            ["#{protocol}", original.protocol],
+            ["#{host}", original.host],
+            ["#{port}", original.port],
+            ["#{path}", original.path.replace(/^\//u, "")],
+            ["#{query}", original.query],
+        ]);
+    }
+    /**
+     * Build the Location one redirect action sends.
+     */
+    build(config) {
+        const protocol = this.substitute(config.Protocol ?? "#{protocol}");
+        const host = this.substitute(config.Host ?? "#{host}");
+        const port = this.substitute(config.Port ?? "#{port}");
+        const path = this.substitute(config.Path ?? "/#{path}");
+        const query = this.substitute(config.Query ?? "#{query}");
+        // Lowercased, because ELB takes the protocol as HTTP or HTTPS and a URI
+        // scheme is written in lower case.
+        return `${protocol.toLowerCase()}://${host}:${port}${path}${this.queryPart(query)}`;
+    }
+    substitute(component) {
+        return component.replaceAll(keywordPattern, (keyword) => this.keyword(keyword));
+    }
+    keyword(keyword) {
+        const value = this.keywords.get(keyword);
+        // The pattern matches only the five keywords the map was built with.
+        assertDefined(value, `No sim ELBv2 redirect value for ${keyword}`);
+        return value;
+    }
+    /**
+     * The query string as the URI carries it, which is nothing when there is
+     * none. The question mark is ELB's to add, which is why a configured query
+     * does not carry one.
+     */
+    queryPart(query) {
+        if (query === "") {
+            return "";
+        }
+        return `?${query}`;
+    }
+}
+//# sourceMappingURL=sim-elbv2-redirect-location.js.map

package/dist/service/elbv2/serve/sim-elbv2-redirect-location.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-elbv2-redirect-location.js","sourceRoot":"","sources":["../../../../src/service/elbv2/serve/sim-elbv2-redirect-location.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAmBpE;;GAEG;AACH,MAAM,cAAc,GAAG,0CAA0C,CAAC;AAElE;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,wBAAwB;IAClB,QAAQ,CAA8B;IAEvD,YAAY,QAA4B;QACtC,IAAI,CAAC,QAAQ,GAAG,IAAI,GAAG,CAAC;YACtB,CAAC,aAAa,EAAE,QAAQ,CAAC,QAAQ,CAAC;YAClC,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC;YAC1B,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC;YAC1B,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAC9C,CAAC,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC;SAC7B,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAoC;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,IAAI,aAAa,CAAC,CAAC;QACnE,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,SAAS,CAAC,CAAC;QACvD,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,SAAS,CAAC,CAAC;QACvD,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,UAAU,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,IAAI,UAAU,CAAC,CAAC;QAE1D,wEAAwE;QACxE,mCAAmC;QACnC,OAAO,GAAG,QAAQ,CAAC,WAAW,EAAE,MAAM,IAAI,IAAI,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;IACtF,CAAC;IAEO,UAAU,CAAC,SAAiB;QAClC,OAAO,SAAS,CAAC,UAAU,CAAC,cAAc,EAAE,CAAC,OAAO,EAAE,EAAE,CACtD,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CACtB,CAAC;IACJ,CAAC;IAEO,OAAO,CAAC,OAAe;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAEzC,qEAAqE;QACrE,aAAa,CAAC,KAAK,EAAE,mCAAmC,OAAO,EAAE,CAAC,CAAC;QAEnE,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;OAIG;IACK,SAAS,CAAC,KAAa;QAC7B,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YACjB,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,IAAI,KAAK,EAAE,CAAC;IACrB,CAAC;CACF"}

package/dist/service/elbv2/serve/sim-elbv2-redirect-response.d.ts

@@ -0,0 +1,31 @@
+import type { SimElbV2Action } from "../action/sim-elbv2-action.js";
+import type { SimElbV2Listener } from "../listener/sim-elbv2-listener.js";
+interface SimElbV2RedirectInput {
+    readonly action: SimElbV2Action;
+    readonly listener: SimElbV2Listener;
+    readonly request: Request;
+}
+/**
+ * Answers a request with a listener or rule's `redirect` action.
+ *
+ * Like a fixed response this needs no target, which is why it is the usual way
+ * to send HTTP to HTTPS: a listener on port 80 can redirect without anything
+ * being registered behind it.
+ */
+export declare class SimElbV2RedirectResponse {
+    /**
+     * Build the response one redirect action sends.
+     */
+    respond(input: SimElbV2RedirectInput): Response;
+    /**
+     * The URI the request arrived at, which is what an unnamed component of the
+     * redirect keeps.
+     *
+     * The protocol and port are the listener's rather than the URL's, because
+     * they are what the load balancer answered on. Nothing here performs TLS, so
+     * a URL can name a scheme the listener does not speak.
+     */
+    private uri;
+}
+export {};
+//# sourceMappingURL=sim-elbv2-redirect-response.d.ts.map

package/dist/service/elbv2/serve/sim-elbv2-redirect-response.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-elbv2-redirect-response.d.ts","sourceRoot":"","sources":["../../../../src/service/elbv2/serve/sim-elbv2-redirect-response.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAEpE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAM1E,UAAU,qBAAqB;IAC7B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,qBAAa,wBAAwB;IACnC;;OAEG;IACH,OAAO,CAAC,KAAK,EAAE,qBAAqB,GAAG,QAAQ,CAwB9C;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,GAAG;CAWZ"}

package/dist/service/elbv2/serve/sim-elbv2-redirect-response.js

@@ -0,0 +1,48 @@
+import { assertDefined } from "../../../util/type-guard/defined.js";
+import { simElbV2MatchableRequest } from "../listener/rule/match/sim-elbv2-matchable-request.js";
+import { SimElbV2RedirectLocation, } from "./sim-elbv2-redirect-location.js";
+/**
+ * Answers a request with a listener or rule's `redirect` action.
+ *
+ * Like a fixed response this needs no target, which is why it is the usual way
+ * to send HTTP to HTTPS: a listener on port 80 can redirect without anything
+ * being registered behind it.
+ */
+export class SimElbV2RedirectResponse {
+    /**
+     * Build the response one redirect action sends.
+     */
+    respond(input) {
+        const config = input.action.redirect;
+        // A redirect action is created with a configuration and a status code, so
+        // a stored one always has both.
+        assertDefined(config, `Simulated ELBv2 redirect action holds no RedirectConfig`);
+        assertDefined(config.StatusCode, `Simulated ELBv2 redirect action holds no StatusCode`);
+        const location = new SimElbV2RedirectLocation(this.uri(input)).build(config);
+        // The status code is written as HTTP_301 or HTTP_302, which is the form
+        // ELB takes it in rather than the number it sends.
+        return new Response(null, {
+            status: Number(config.StatusCode.replace("HTTP_", "")),
+            headers: { location },
+        });
+    }
+    /**
+     * The URI the request arrived at, which is what an unnamed component of the
+     * redirect keeps.
+     *
+     * The protocol and port are the listener's rather than the URL's, because
+     * they are what the load balancer answered on. Nothing here performs TLS, so
+     * a URL can name a scheme the listener does not speak.
+     */
+    uri(input) {
+        const { host, path } = simElbV2MatchableRequest(input.request);
+        return {
+            protocol: input.listener.protocol,
+            host,
+            port: String(input.listener.port),
+            path,
+            query: new URL(input.request.url).search.replace(/^\?/u, ""),
+        };
+    }
+}
+//# sourceMappingURL=sim-elbv2-redirect-response.js.map

package/dist/service/elbv2/serve/sim-elbv2-redirect-response.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-elbv2-redirect-response.js","sourceRoot":"","sources":["../../../../src/service/elbv2/serve/sim-elbv2-redirect-response.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAEpE,OAAO,EAAE,wBAAwB,EAAE,MAAM,uDAAuD,CAAC;AAEjG,OAAO,EACL,wBAAwB,GAEzB,MAAM,kCAAkC,CAAC;AAQ1C;;;;;;GAMG;AACH,MAAM,OAAO,wBAAwB;IACnC;;OAEG;IACH,OAAO,CAAC,KAA4B;QAClC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC;QAErC,0EAA0E;QAC1E,gCAAgC;QAChC,aAAa,CACX,MAAM,EACN,yDAAyD,CAC1D,CAAC;QACF,aAAa,CACX,MAAM,CAAC,UAAU,EACjB,qDAAqD,CACtD,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAI,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAClE,MAAM,CACP,CAAC;QAEF,wEAAwE;QACxE,mDAAmD;QACnD,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;YACxB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACtD,OAAO,EAAE,EAAE,QAAQ,EAAE;SACtB,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IACK,GAAG,CAAC,KAA4B;QACtC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,wBAAwB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAE/D,OAAO;YACL,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ;YACjC,IAAI;YACJ,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;YACjC,IAAI;YACJ,KAAK,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;SAC7D,CAAC;IACJ,CAAC;CACF"}