@kensio/yulin 1.17.1 → 1.18.0

package/dist/service/cloudformation/sam/api/sim-cfn-sam-stage-logical-id.js

@@ -0,0 +1,29 @@
+import { createHash } from "node:crypto";
+/**
+ * The logical ID SAM builds for an API's stage, out of the API's logical ID
+ * and the stage's name.
+ *
+ * A name that can be part of an identifier goes in whole, and anything else is
+ * hashed, down to the ten hexadecimal characters SAM takes off a SHA-1 of the
+ * name. A stage the template names with an intrinsic function has no name to
+ * hash at this point, and SAM hashes the empty string for it.
+ *
+ * Both API kinds build the ID this way. An HTTP API has one form more, for the
+ * `$default` stage a REST API has no equivalent of, and spells that one before
+ * reaching here.
+ */
+export function samStageLogicalId(logicalId, stageName) {
+    if (typeof stageName === "string" && /^[A-Za-z0-9]+$/.test(stageName)) {
+        return `${logicalId}${stageName}Stage`;
+    }
+    return `${logicalId}Stage${samStageNameHash(stageName)}`;
+}
+/**
+ * The hash SAM builds a stage's logical ID out of when the name cannot be part
+ * of one.
+ */
+function samStageNameHash(stageName) {
+    const name = typeof stageName === "string" ? stageName : "";
+    return createHash("sha1").update(name).digest("hex").slice(0, 10);
+}
+//# sourceMappingURL=sim-cfn-sam-stage-logical-id.js.map

package/dist/service/cloudformation/sam/api/sim-cfn-sam-stage-logical-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-sam-stage-logical-id.js","sourceRoot":"","sources":["../../../../../src/service/cloudformation/sam/api/sim-cfn-sam-stage-logical-id.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,iBAAiB,CAC/B,SAAiB,EACjB,SAA8B;IAE9B,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACtE,OAAO,GAAG,SAAS,GAAG,SAAS,OAAO,CAAC;IACzC,CAAC;IAED,OAAO,GAAG,SAAS,QAAQ,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;AAC3D,CAAC;AAED;;;GAGG;AACH,SAAS,gBAAgB,CAAC,SAA8B;IACtD,MAAM,IAAI,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IAE5D,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACpE,CAAC"}

package/dist/service/cloudformation/sam/function/event/sim-cfn-sam-api-event-path.d.ts

@@ -0,0 +1,30 @@
+import type { SimCfnTemplateValue, SimCfnTemplateValueRecord } from "../../../template/value/sim-cfn-template-value.js";
+/**
+ * The path an `Api` event states, as the segments under the API's root.
+ *
+ * `/rates/{currency}` is two segments, and `/` is none. A REST API spells a
+ * path over one Resource per segment, where an HTTP API route states the whole
+ * path as its key, so this is where the two expansions part company.
+ */
+export declare function samApiEventPathParts(path: string): readonly string[];
+/**
+ * One AWS::ApiGateway::Resource per node the event's path needs, each naming
+ * its parent by `ParentId` and the top of the tree by `RootResourceId`.
+ *
+ * Nodes are keyed by the path they spell, so two events under one path share
+ * the node rather than declaring it twice. That is what puts `/rates` and
+ * `/rates/{currency}` on one branch of one tree, whether the events are on one
+ * function or spread over several.
+ *
+ * A node carries no `Condition`, the way the implicit API carries none. The
+ * tree is shared, and the other events on it may be conditioned differently or
+ * not at all. A path a conditioned-out function asked for is a node with no
+ * method on it, which answers nothing.
+ */
+export declare function samApiEventPathResources(apiLogicalId: string, path: readonly string[]): Record<string, SimCfnTemplateValue>;
+/**
+ * What names one node of the tree, which is the API's root resource for the
+ * empty path and a `Ref` to the node's own Resource otherwise.
+ */
+export declare function samApiEventResourceId(apiLogicalId: string, path: readonly string[]): SimCfnTemplateValueRecord;
+//# sourceMappingURL=sim-cfn-sam-api-event-path.d.ts.map

package/dist/service/cloudformation/sam/function/event/sim-cfn-sam-api-event-path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-sam-api-event-path.d.ts","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/sam/function/event/sim-cfn-sam-api-event-path.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,mBAAmB,EACnB,yBAAyB,EAC1B,MAAM,mDAAmD,CAAC;AAE3D;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAEpE;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,wBAAwB,CACtC,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,SAAS,MAAM,EAAE,GACtB,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAqBrC;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,SAAS,MAAM,EAAE,GACtB,yBAAyB,CAI3B"}

package/dist/service/cloudformation/sam/function/event/sim-cfn-sam-api-event-path.js

@@ -0,0 +1,69 @@
+import { createHash } from "node:crypto";
+/**
+ * The path an `Api` event states, as the segments under the API's root.
+ *
+ * `/rates/{currency}` is two segments, and `/` is none. A REST API spells a
+ * path over one Resource per segment, where an HTTP API route states the whole
+ * path as its key, so this is where the two expansions part company.
+ */
+export function samApiEventPathParts(path) {
+    return path.split("/").filter((part) => part.length > 0);
+}
+/**
+ * One AWS::ApiGateway::Resource per node the event's path needs, each naming
+ * its parent by `ParentId` and the top of the tree by `RootResourceId`.
+ *
+ * Nodes are keyed by the path they spell, so two events under one path share
+ * the node rather than declaring it twice. That is what puts `/rates` and
+ * `/rates/{currency}` on one branch of one tree, whether the events are on one
+ * function or spread over several.
+ *
+ * A node carries no `Condition`, the way the implicit API carries none. The
+ * tree is shared, and the other events on it may be conditioned differently or
+ * not at all. A path a conditioned-out function asked for is a node with no
+ * method on it, which answers nothing.
+ */
+export function samApiEventPathResources(apiLogicalId, path) {
+    return Object.fromEntries(path.map((pathPart, index) => {
+        const nodePath = path.slice(0, index + 1);
+        return [
+            samApiEventPathLogicalId(apiLogicalId, nodePath),
+            {
+                Type: "AWS::ApiGateway::Resource",
+                Properties: {
+                    RestApiId: { Ref: apiLogicalId },
+                    ParentId: samApiEventResourceId(apiLogicalId, nodePath.slice(0, -1)),
+                    PathPart: pathPart,
+                },
+            },
+        ];
+    }));
+}
+/**
+ * What names one node of the tree, which is the API's root resource for the
+ * empty path and a `Ref` to the node's own Resource otherwise.
+ */
+export function samApiEventResourceId(apiLogicalId, path) {
+    return path.length === 0
+        ? { "Fn::GetAtt": [apiLogicalId, "RootResourceId"] }
+        : { Ref: samApiEventPathLogicalId(apiLogicalId, path) };
+}
+/**
+ * The logical ID of the Resource carrying one node of the tree.
+ *
+ * SAM writes its paths into a Swagger document and so names no Resource for
+ * one, which leaves nothing here to match. The path is hashed the way SAM
+ * hashes anything it has to build an identifier out of, because a path part is
+ * `{currency}` or `{proxy+}` as often as it is a word, and every scheme that
+ * spells those out either drops the punctuation that tells them apart or
+ * produces an ID no reader gets anything from. Two events under one path hash
+ * alike and converge on the node.
+ */
+function samApiEventPathLogicalId(apiLogicalId, path) {
+    const hash = createHash("sha1")
+        .update(path.join("/"))
+        .digest("hex")
+        .slice(0, 10);
+    return `${apiLogicalId}Resource${hash}`;
+}
+//# sourceMappingURL=sim-cfn-sam-api-event-path.js.map

package/dist/service/cloudformation/sam/function/event/sim-cfn-sam-api-event-path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-sam-api-event-path.js","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/sam/function/event/sim-cfn-sam-api-event-path.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAOzC;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,wBAAwB,CACtC,YAAoB,EACpB,IAAuB;IAEvB,OAAO,MAAM,CAAC,WAAW,CACvB,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAE1C,OAAO;YACL,wBAAwB,CAAC,YAAY,EAAE,QAAQ,CAAC;YAChD;gBACE,IAAI,EAAE,2BAA2B;gBACjC,UAAU,EAAE;oBACV,SAAS,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE;oBAChC,QAAQ,EAAE,qBAAqB,CAC7B,YAAY,EACZ,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CACtB;oBACD,QAAQ,EAAE,QAAQ;iBACnB;aACF;SACF,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CACnC,YAAoB,EACpB,IAAuB;IAEvB,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC;QACtB,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,YAAY,EAAE,gBAAgB,CAAC,EAAE;QACpD,CAAC,CAAC,EAAE,GAAG,EAAE,wBAAwB,CAAC,YAAY,EAAE,IAAI,CAAC,EAAE,CAAC;AAC5D,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,wBAAwB,CAC/B,YAAoB,EACpB,IAAuB;IAEvB,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC;SAC5B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;SACtB,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEhB,OAAO,GAAG,YAAY,WAAW,IAAI,EAAE,CAAC;AAC1C,CAAC"}

package/dist/service/cloudformation/sam/function/event/sim-cfn-sam-api-event.d.ts

@@ -0,0 +1,20 @@
+import type { SimCfnTemplateValue } from "../../../template/value/sim-cfn-template-value.js";
+import type { SamFunctionEvent } from "./sim-cfn-sam-function-events.js";
+/**
+ * Expand one `Api` event into the Resources that put a method in front of the
+ * function.
+ *
+ * The event becomes the nodes of the path it states, a method on the last of
+ * them carrying a proxy integration to the function, and the permission the
+ * API invokes the function under. An event naming no `RestApiId` brings the
+ * implicit API, its deployment and its stage with it, and an event naming one
+ * leaves all three to whatever declared it.
+ *
+ * The method and the permission are named after the function and the event, so
+ * two events on one function are two methods, and two functions answering the
+ * same API keep permissions of their own. Both are conditioned the way the
+ * function is, since a function the template conditioned out has nothing for a
+ * method to reach.
+ */
+export declare function samApiEventResources(event: SamFunctionEvent): Record<string, SimCfnTemplateValue>;
+//# sourceMappingURL=sim-cfn-sam-api-event.d.ts.map

package/dist/service/cloudformation/sam/function/event/sim-cfn-sam-api-event.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-sam-api-event.d.ts","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/sam/function/event/sim-cfn-sam-api-event.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EAEpB,MAAM,mDAAmD,CAAC;AAQ3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAYzE;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,gBAAgB,GACtB,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAsBrC"}

package/dist/service/cloudformation/sam/function/event/sim-cfn-sam-api-event.js

@@ -0,0 +1,132 @@
+import { isSamTemplateRecord } from "../../sim-cfn-sam-record.js";
+import { samApiInvokePermissionResource } from "./sim-cfn-sam-api-invoke-permission.js";
+import { samApiEventPathParts, samApiEventPathResources, samApiEventResourceId, } from "./sim-cfn-sam-api-event-path.js";
+import { samImplicitRestApiLogicalId, samImplicitRestApiResources, } from "./sim-cfn-sam-implicit-rest-api.js";
+/**
+ * The method an event stating none is served under, matching the path whatever
+ * the request did to it.
+ */
+const anyMethod = "ANY";
+/**
+ * Expand one `Api` event into the Resources that put a method in front of the
+ * function.
+ *
+ * The event becomes the nodes of the path it states, a method on the last of
+ * them carrying a proxy integration to the function, and the permission the
+ * API invokes the function under. An event naming no `RestApiId` brings the
+ * implicit API, its deployment and its stage with it, and an event naming one
+ * leaves all three to whatever declared it.
+ *
+ * The method and the permission are named after the function and the event, so
+ * two events on one function are two methods, and two functions answering the
+ * same API keep permissions of their own. Both are conditioned the way the
+ * function is, since a function the template conditioned out has nothing for a
+ * method to reach.
+ */
+export function samApiEventResources(event) {
+    const restApiId = event.properties["RestApiId"];
+    const apiLogicalId = samApiEventApiLogicalId(restApiId);
+    const path = samApiEventPath(event.properties);
+    if (apiLogicalId === undefined || path === undefined) {
+        return {};
+    }
+    const prefix = `${event.functionLogicalId}${event.eventName}`;
+    return {
+        ...(restApiId === undefined &&
+            samImplicitRestApiResources(event.apiGlobals)),
+        ...samApiEventPathResources(apiLogicalId, path),
+        [`${prefix}Method`]: methodResource({ event, apiLogicalId, path }),
+        [`${prefix}Permission`]: samApiInvokePermissionResource({
+            event,
+            apiId: { Ref: apiLogicalId },
+            sourceArnSuffix: "/*/*/*",
+        }),
+    };
+}
+/**
+ * The logical ID of the API this event puts its method on.
+ *
+ * An event naming no `RestApiId` gets the implicit API. An event naming one
+ * states it as the logical ID or as a `Ref` to it, which is what SAM accepts,
+ * and both name a Resource of this template.
+ *
+ * A `RestApiId` written as anything else names an API whose root resource
+ * nothing here can reach, and a REST API path tree is built downwards from
+ * that root. Such an event expands into nothing, the way an event of a type
+ * this has no entry for does, and the function deploys with nothing in front
+ * of it.
+ */
+function samApiEventApiLogicalId(restApiId) {
+    if (restApiId === undefined) {
+        return samImplicitRestApiLogicalId;
+    }
+    if (typeof restApiId === "string") {
+        return restApiId;
+    }
+    const reference = isSamTemplateRecord(restApiId)
+        ? restApiId["Ref"]
+        : undefined;
+    return typeof reference === "string" ? reference : undefined;
+}
+/**
+ * The segments of the `Path` the event states.
+ *
+ * An event stating no path states no method either, since a REST API method
+ * hangs off a node of the tree and there is no node to hang it on. Nothing is
+ * expanded for it.
+ */
+function samApiEventPath(properties) {
+    const path = properties["Path"];
+    return typeof path === "string" ? samApiEventPathParts(path) : undefined;
+}
+/**
+ * The AWS::ApiGateway::Method the event's path and method are served by.
+ *
+ * SAM integrates an `Api` event as a proxy, which is the shape the function is
+ * handed the request in, and the REST API declares an integration as a block
+ * of the method. `Auth` on the event is not expanded, so the method authorizes
+ * nothing and every request matching it reaches the function.
+ */
+function methodResource(properties) {
+    const { event, apiLogicalId, path } = properties;
+    return {
+        Type: "AWS::ApiGateway::Method",
+        ...event.condition,
+        Properties: {
+            RestApiId: { Ref: apiLogicalId },
+            ResourceId: samApiEventResourceId(apiLogicalId, path),
+            HttpMethod: samApiEventHttpMethod(event.properties),
+            AuthorizationType: "NONE",
+            Integration: {
+                Type: "AWS_PROXY",
+                IntegrationHttpMethod: "POST",
+                Uri: {
+                    "Fn::Join": [
+                        "",
+                        [
+                            "arn:",
+                            { Ref: "AWS::Partition" },
+                            ":apigateway:",
+                            { Ref: "AWS::Region" },
+                            ":lambda:path/2015-03-31/functions/",
+                            { "Fn::GetAtt": [event.functionLogicalId, "Arn"] },
+                            "/invocations",
+                        ],
+                    ],
+                },
+            },
+        },
+    };
+}
+/**
+ * The HTTP method the event asked for.
+ *
+ * A method in lower case is upper-cased, the only case API Gateway takes, so
+ * the `any` a SAM template usually writes becomes `ANY`. An event stating no
+ * method gets `ANY` as well.
+ */
+function samApiEventHttpMethod(properties) {
+    const method = properties["Method"];
+    return typeof method === "string" ? method.toUpperCase() : anyMethod;
+}
+//# sourceMappingURL=sim-cfn-sam-api-event.js.map

package/dist/service/cloudformation/sam/function/event/sim-cfn-sam-api-event.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-sam-api-event.js","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/sam/function/event/sim-cfn-sam-api-event.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,8BAA8B,EAAE,MAAM,wCAAwC,CAAC;AACxF,OAAO,EACL,oBAAoB,EACpB,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EACL,2BAA2B,EAC3B,2BAA2B,GAC5B,MAAM,oCAAoC,CAAC;AAE5C;;;GAGG;AACH,MAAM,SAAS,GAAG,KAAK,CAAC;AAExB;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAAuB;IAEvB,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IAChD,MAAM,YAAY,GAAG,uBAAuB,CAAC,SAAS,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAE/C,IAAI,YAAY,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACrD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,MAAM,GAAG,GAAG,KAAK,CAAC,iBAAiB,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;IAE9D,OAAO;QACL,GAAG,CAAC,SAAS,KAAK,SAAS;YACzB,2BAA2B,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAChD,GAAG,wBAAwB,CAAC,YAAY,EAAE,IAAI,CAAC;QAC/C,CAAC,GAAG,MAAM,QAAQ,CAAC,EAAE,cAAc,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QAClE,CAAC,GAAG,MAAM,YAAY,CAAC,EAAE,8BAA8B,CAAC;YACtD,KAAK;YACL,KAAK,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE;YAC5B,eAAe,EAAE,QAAQ;SAC1B,CAAC;KACH,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,uBAAuB,CAC9B,SAA0C;IAE1C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,2BAA2B,CAAC;IACrC,CAAC;IAED,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,SAAS,GAAG,mBAAmB,CAAC,SAAS,CAAC;QAC9C,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC;QAClB,CAAC,CAAC,SAAS,CAAC;IAEd,OAAO,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/D,CAAC;AAED;;;;;;GAMG;AACH,SAAS,eAAe,CACtB,UAAqC;IAErC,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAEhC,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3E,CAAC;AAQD;;;;;;;GAOG;AACH,SAAS,cAAc,CACrB,UAAuC;IAEvC,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,UAAU,CAAC;IAEjD,OAAO;QACL,IAAI,EAAE,yBAAyB;QAC/B,GAAG,KAAK,CAAC,SAAS;QAClB,UAAU,EAAE;YACV,SAAS,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE;YAChC,UAAU,EAAE,qBAAqB,CAAC,YAAY,EAAE,IAAI,CAAC;YACrD,UAAU,EAAE,qBAAqB,CAAC,KAAK,CAAC,UAAU,CAAC;YACnD,iBAAiB,EAAE,MAAM;YACzB,WAAW,EAAE;gBACX,IAAI,EAAE,WAAW;gBACjB,qBAAqB,EAAE,MAAM;gBAC7B,GAAG,EAAE;oBACH,UAAU,EAAE;wBACV,EAAE;wBACF;4BACE,MAAM;4BACN,EAAE,GAAG,EAAE,gBAAgB,EAAE;4BACzB,cAAc;4BACd,EAAE,GAAG,EAAE,aAAa,EAAE;4BACtB,oCAAoC;4BACpC,EAAE,YAAY,EAAE,CAAC,KAAK,CAAC,iBAAiB,EAAE,KAAK,CAAC,EAAE;4BAClD,cAAc;yBACf;qBACF;iBACF;aACF;SACF;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,qBAAqB,CAAC,UAAqC;IAClE,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAEpC,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACvE,CAAC"}

package/dist/service/cloudformation/sam/function/event/sim-cfn-sam-api-invoke-permission.d.ts

@@ -0,0 +1,26 @@
+import type { SimCfnTemplateValue, SimCfnTemplateValueRecord } from "../../../template/value/sim-cfn-template-value.js";
+import type { SamFunctionEvent } from "./sim-cfn-sam-function-events.js";
+interface SamApiInvokePermissionProperties {
+    readonly event: SamFunctionEvent;
+    /** The API the permission is granted to, as the expanded Resources name it. */
+    readonly apiId: SimCfnTemplateValue;
+    /**
+     * What the source ARN wildcards after the API's id. An HTTP API addresses a
+     * request by stage and route, and a REST API by stage, method and resource
+     * path, so the two grants are a segment apart.
+     */
+    readonly sourceArnSuffix: string;
+}
+/**
+ * The AWS::Lambda::Permission an API invokes the function under.
+ *
+ * A Lambda proxy integration works only once the function's resource policy
+ * admits API Gateway. Without this the route answers 500.
+ *
+ * The source ARN wildcards everything under the API, the grant SAM writes.
+ * Every request this API sends the function is one an event of its own asked
+ * for.
+ */
+export declare function samApiInvokePermissionResource(properties: SamApiInvokePermissionProperties): SimCfnTemplateValueRecord;
+export {};
+//# sourceMappingURL=sim-cfn-sam-api-invoke-permission.d.ts.map

package/dist/service/cloudformation/sam/function/event/sim-cfn-sam-api-invoke-permission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-sam-api-invoke-permission.d.ts","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/sam/function/event/sim-cfn-sam-api-invoke-permission.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,yBAAyB,EAC1B,MAAM,mDAAmD,CAAC;AAC3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAEzE,UAAU,gCAAgC;IACxC,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC;IACjC,+EAA+E;IAC/E,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;IACpC;;;;OAIG;IACH,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED;;;;;;;;;GASG;AACH,wBAAgB,8BAA8B,CAC5C,UAAU,EAAE,gCAAgC,GAC3C,yBAAyB,CA4B3B"}

package/dist/service/cloudformation/sam/function/event/sim-cfn-sam-api-invoke-permission.js

@@ -0,0 +1,39 @@
+/**
+ * The AWS::Lambda::Permission an API invokes the function under.
+ *
+ * A Lambda proxy integration works only once the function's resource policy
+ * admits API Gateway. Without this the route answers 500.
+ *
+ * The source ARN wildcards everything under the API, the grant SAM writes.
+ * Every request this API sends the function is one an event of its own asked
+ * for.
+ */
+export function samApiInvokePermissionResource(properties) {
+    const { event, apiId, sourceArnSuffix } = properties;
+    return {
+        Type: "AWS::Lambda::Permission",
+        ...event.condition,
+        Properties: {
+            Action: "lambda:InvokeFunction",
+            FunctionName: { "Fn::GetAtt": [event.functionLogicalId, "Arn"] },
+            Principal: "apigateway.amazonaws.com",
+            SourceArn: {
+                "Fn::Join": [
+                    "",
+                    [
+                        "arn:",
+                        { Ref: "AWS::Partition" },
+                        ":execute-api:",
+                        { Ref: "AWS::Region" },
+                        ":",
+                        { Ref: "AWS::AccountId" },
+                        ":",
+                        apiId,
+                        sourceArnSuffix,
+                    ],
+                ],
+            },
+        },
+    };
+}
+//# sourceMappingURL=sim-cfn-sam-api-invoke-permission.js.map

package/dist/service/cloudformation/sam/function/event/sim-cfn-sam-api-invoke-permission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-sam-api-invoke-permission.js","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/sam/function/event/sim-cfn-sam-api-invoke-permission.ts"],"names":[],"mappings":"AAkBA;;;;;;;;;GASG;AACH,MAAM,UAAU,8BAA8B,CAC5C,UAA4C;IAE5C,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,UAAU,CAAC;IAErD,OAAO;QACL,IAAI,EAAE,yBAAyB;QAC/B,GAAG,KAAK,CAAC,SAAS;QAClB,UAAU,EAAE;YACV,MAAM,EAAE,uBAAuB;YAC/B,YAAY,EAAE,EAAE,YAAY,EAAE,CAAC,KAAK,CAAC,iBAAiB,EAAE,KAAK,CAAC,EAAE;YAChE,SAAS,EAAE,0BAA0B;YACrC,SAAS,EAAE;gBACT,UAAU,EAAE;oBACV,EAAE;oBACF;wBACE,MAAM;wBACN,EAAE,GAAG,EAAE,gBAAgB,EAAE;wBACzB,eAAe;wBACf,EAAE,GAAG,EAAE,aAAa,EAAE;wBACtB,GAAG;wBACH,EAAE,GAAG,EAAE,gBAAgB,EAAE;wBACzB,GAAG;wBACH,KAAK;wBACL,eAAe;qBAChB;iBACF;aACF;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/service/cloudformation/sam/function/event/sim-cfn-sam-declared-event.d.ts

@@ -0,0 +1,63 @@
+import type { SimCfnTemplateValue, SimCfnTemplateValueRecord } from "../../../template/value/sim-cfn-template-value.js";
+/**
+ * What the expansion of a SAM function is asked about its events.
+ */
+export interface SamFunctionEventsProperties {
+    /** The logical ID of the SAM function whose events these are. */
+    readonly logicalId: string;
+    /** The function properties, with the `Globals` defaults already merged in. */
+    readonly functionProperties: SimCfnTemplateValueRecord;
+    /**
+     * The `Globals.Api` defaults the template states, for the events that make
+     * an API of their own.
+     */
+    readonly apiGlobals: SimCfnTemplateValueRecord;
+    /** The `Condition` the SAM Resource carried, where it carried one. */
+    readonly condition: SimCfnTemplateValue | undefined;
+}
+/**
+ * What an expansion is told about the event it is expanding.
+ */
+export interface SamFunctionEvent {
+    /**
+     * The logical ID of the SAM function the event is declared on, which is also
+     * the logical ID of the Lambda function it is expanded into.
+     */
+    readonly functionLogicalId: string;
+    /** The name the function declared the event under in `Events`. */
+    readonly eventName: string;
+    /**
+     * The `Properties` of the event. An event stating none states an empty
+     * record.
+     */
+    readonly properties: SimCfnTemplateValueRecord;
+    /**
+     * The `Condition` attribute to put on the Resources that exist only because
+     * this function does, ready to spread. A function carrying no condition
+     * supplies nothing.
+     */
+    readonly condition: SimCfnTemplateValueRecord;
+    /**
+     * The `Globals.Api` defaults the template states. An `Api` event naming no
+     * `RestApiId` makes the implicit API, and SAM gives that API the same
+     * defaults as one the template declared.
+     */
+    readonly apiGlobals: SimCfnTemplateValueRecord;
+}
+/**
+ * One event of a function, as the expansion tables are asked about it.
+ */
+export interface SamDeclaredEvent {
+    /** The name the event wrote under `Type`. */
+    readonly type: string;
+    readonly event: SamFunctionEvent;
+}
+/**
+ * The events a function declares, as the expansion tables are told about them.
+ *
+ * An event this cannot read at all, or one naming no `Type`, is left out. The
+ * function deploys with nothing in front of it rather than the deployment
+ * failing over an event nothing reads.
+ */
+export declare function samDeclaredEvents(properties: SamFunctionEventsProperties): readonly SamDeclaredEvent[];
+//# sourceMappingURL=sim-cfn-sam-declared-event.d.ts.map

package/dist/service/cloudformation/sam/function/event/sim-cfn-sam-declared-event.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-sam-declared-event.d.ts","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/sam/function/event/sim-cfn-sam-declared-event.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,yBAAyB,EAC1B,MAAM,mDAAmD,CAAC;AAI3D;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,iEAAiE;IACjE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,8EAA8E;IAC9E,QAAQ,CAAC,kBAAkB,EAAE,yBAAyB,CAAC;IACvD;;;OAGG;IACH,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC;IAC/C,sEAAsE;IACtE,QAAQ,CAAC,SAAS,EAAE,mBAAmB,GAAG,SAAS,CAAC;CACrD;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;OAGG;IACH,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,kEAAkE;IAClE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;OAGG;IACH,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC;IAC/C;;;;OAIG;IACH,QAAQ,CAAC,SAAS,EAAE,yBAAyB,CAAC;IAC9C;;;;OAIG;IACH,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC;CAChD;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,6CAA6C;IAC7C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC;CAClC;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,2BAA2B,GACtC,SAAS,gBAAgB,EAAE,CAU7B"}

package/dist/service/cloudformation/sam/function/event/sim-cfn-sam-declared-event.js

@@ -0,0 +1,39 @@
+import { isSamTemplateRecord } from "../../sim-cfn-sam-record.js";
+import { samConditionAttribute } from "../sim-cfn-sam-function-properties.js";
+/**
+ * The events a function declares, as the expansion tables are told about them.
+ *
+ * An event this cannot read at all, or one naming no `Type`, is left out. The
+ * function deploys with nothing in front of it rather than the deployment
+ * failing over an event nothing reads.
+ */
+export function samDeclaredEvents(properties) {
+    const events = properties.functionProperties["Events"];
+    if (!isSamTemplateRecord(events)) {
+        return [];
+    }
+    return Object.entries(events).flatMap(([eventName, event]) => declaredEvent(properties, eventName, event));
+}
+function declaredEvent(properties, eventName, event) {
+    if (!isSamTemplateRecord(event)) {
+        return [];
+    }
+    const type = event["Type"];
+    if (typeof type !== "string") {
+        return [];
+    }
+    const eventProperties = event["Properties"];
+    return [
+        {
+            type,
+            event: {
+                functionLogicalId: properties.logicalId,
+                eventName,
+                properties: isSamTemplateRecord(eventProperties) ? eventProperties : {},
+                condition: samConditionAttribute(properties.condition),
+                apiGlobals: properties.apiGlobals,
+            },
+        },
+    ];
+}
+//# sourceMappingURL=sim-cfn-sam-declared-event.js.map

package/dist/service/cloudformation/sam/function/event/sim-cfn-sam-declared-event.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-sam-declared-event.js","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/sam/function/event/sim-cfn-sam-declared-event.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AA0D9E;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAC/B,UAAuC;IAEvC,MAAM,MAAM,GAAG,UAAU,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAEvD,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,EAAE,CAC3D,aAAa,CAAC,UAAU,EAAE,SAAS,EAAE,KAAK,CAAC,CAC5C,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,UAAuC,EACvC,SAAiB,EACjB,KAA0B;IAE1B,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IAE3B,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,eAAe,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC;IAE5C,OAAO;QACL;YACE,IAAI;YACJ,KAAK,EAAE;gBACL,iBAAiB,EAAE,UAAU,CAAC,SAAS;gBACvC,SAAS;gBACT,UAAU,EAAE,mBAAmB,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE;gBACvE,SAAS,EAAE,qBAAqB,CAAC,UAAU,CAAC,SAAS,CAAC;gBACtD,UAAU,EAAE,UAAU,CAAC,UAAU;aAClC;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/service/cloudformation/sam/function/event/sim-cfn-sam-event-bridge-rule-event.d.ts

@@ -0,0 +1,16 @@
+import type { SimCfnTemplateValue } from "../../../template/value/sim-cfn-template-value.js";
+import type { SamFunctionEvent } from "./sim-cfn-sam-function-events.js";
+/**
+ * Expand one `EventBridgeRule` event into the rule that invokes the function
+ * for a matching event.
+ *
+ * The event's `Pattern` is the rule's `EventPattern`, and an event naming an
+ * `EventBusName` watches that bus rather than the default one. A pattern the
+ * rule cannot parse is refused by the rule rather than being read here.
+ *
+ * An event stating no `Pattern` expands into a rule matching nothing, which
+ * the rule then refuses. A pattern guessed for an event that named none would
+ * be a function invoked for events it never asked for.
+ */
+export declare function samEventBridgeRuleEventResources(event: SamFunctionEvent): Record<string, SimCfnTemplateValue>;
+//# sourceMappingURL=sim-cfn-sam-event-bridge-rule-event.d.ts.map

package/dist/service/cloudformation/sam/function/event/sim-cfn-sam-event-bridge-rule-event.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-sam-event-bridge-rule-event.d.ts","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/sam/function/event/sim-cfn-sam-event-bridge-rule-event.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mDAAmD,CAAC;AAE7F,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAEzE;;;;;;;;;;;GAWG;AACH,wBAAgB,gCAAgC,CAC9C,KAAK,EAAE,gBAAgB,GACtB,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAOrC"}

package/dist/service/cloudformation/sam/function/event/sim-cfn-sam-event-bridge-rule-event.js

@@ -0,0 +1,21 @@
+import { samEventRuleResources } from "./sim-cfn-sam-event-rule.js";
+/**
+ * Expand one `EventBridgeRule` event into the rule that invokes the function
+ * for a matching event.
+ *
+ * The event's `Pattern` is the rule's `EventPattern`, and an event naming an
+ * `EventBusName` watches that bus rather than the default one. A pattern the
+ * rule cannot parse is refused by the rule rather than being read here.
+ *
+ * An event stating no `Pattern` expands into a rule matching nothing, which
+ * the rule then refuses. A pattern guessed for an event that named none would
+ * be a function invoked for events it never asked for.
+ */
+export function samEventBridgeRuleEventResources(event) {
+    const pattern = event.properties["Pattern"];
+    return samEventRuleResources({
+        event,
+        trigger: pattern === undefined ? {} : { EventPattern: pattern },
+    });
+}
+//# sourceMappingURL=sim-cfn-sam-event-bridge-rule-event.js.map

package/dist/service/cloudformation/sam/function/event/sim-cfn-sam-event-bridge-rule-event.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-sam-event-bridge-rule-event.js","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/sam/function/event/sim-cfn-sam-event-bridge-rule-event.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAGpE;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,gCAAgC,CAC9C,KAAuB;IAEvB,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IAE5C,OAAO,qBAAqB,CAAC;QAC3B,KAAK;QACL,OAAO,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE;KAChE,CAAC,CAAC;AACL,CAAC"}

package/dist/service/cloudformation/sam/function/event/sim-cfn-sam-event-rule.d.ts

@@ -0,0 +1,26 @@
+import type { SimCfnTemplateValue, SimCfnTemplateValueRecord } from "../../../template/value/sim-cfn-template-value.js";
+import type { SamFunctionEvent } from "./sim-cfn-sam-function-events.js";
+interface SamEventRuleProperties {
+    readonly event: SamFunctionEvent;
+    /**
+     * What makes the rule fire, as the property that carries it. An event on a
+     * timer states a `ScheduleExpression`, and one matching events states an
+     * `EventPattern`.
+     */
+    readonly trigger: SimCfnTemplateValueRecord;
+}
+/**
+ * The Resources an event fired by an EventBridge rule is expanded into.
+ *
+ * The rule holds the function as its one inline target, and the permission
+ * beside it is what lets EventBridge invoke it. Without the permission the
+ * rule matches, the delivery is refused, and the function never runs.
+ *
+ * Both are named after the function and the event, so a function with two
+ * events of its own gets a rule for each. They are conditioned the way the
+ * function is, since a function the template conditioned out has nothing for a
+ * rule to invoke.
+ */
+export declare function samEventRuleResources(properties: SamEventRuleProperties): Record<string, SimCfnTemplateValue>;
+export {};
+//# sourceMappingURL=sim-cfn-sam-event-rule.d.ts.map

package/dist/service/cloudformation/sam/function/event/sim-cfn-sam-event-rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-sam-event-rule.d.ts","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/sam/function/event/sim-cfn-sam-event-rule.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,yBAAyB,EAC1B,MAAM,mDAAmD,CAAC;AAG3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAEzE,UAAU,sBAAsB;IAC9B,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC;IACjC;;;;OAIG;IACH,QAAQ,CAAC,OAAO,EAAE,yBAAyB,CAAC;CAC7C;AAQD;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,sBAAsB,GACjC,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAmBrC"}