@kensio/yulin 1.17.1 → 1.18.0

package/dist/service/apigateway/api/authorizer/sim-rest-api-lambda-authorizer.d.ts

@@ -0,0 +1,59 @@
+import type { SimRestApiLambdaUri } from "../method/sim-rest-api-lambda-uri.js";
+import type { SimRestApiIdentitySources } from "./identity/sim-rest-api-identity-sources.js";
+import { SimRestApiAuthorizerResultCache } from "./sim-rest-api-authorizer-result-cache.js";
+import { SimRestApiAuthorizer, type SimRestApiAuthorizerId, type SimRestApiAuthorizerView } from "./sim-rest-api-authorizer.js";
+/**
+ * The kinds of authorizer that decide by invoking a function.
+ */
+export type SimRestApiLambdaAuthorizerType = "TOKEN" | "REQUEST";
+interface SimRestApiLambdaAuthorizerProperties {
+    readonly authorizerId: SimRestApiAuthorizerId;
+    readonly name: string;
+    readonly type: SimRestApiLambdaAuthorizerType;
+    readonly lambdaUri: SimRestApiLambdaUri;
+    readonly identitySources: SimRestApiIdentitySources;
+    readonly resultTtlSeconds: number;
+}
+/**
+ * A simulated REST API Lambda authorizer: the function a method sends a
+ * request to before it reaches the integration.
+ *
+ * The function decides, so nothing here says what a caller has to present.
+ * All this holds is which function to invoke, what the request has to carry
+ * before it is worth invoking, how much of the request that function is shown,
+ * and the decisions it has already made.
+ */
+export declare class SimRestApiLambdaAuthorizer extends SimRestApiAuthorizer {
+    /**
+     * How much of the request the function sees, which is the whole difference
+     * between the two kinds.
+     */
+    readonly type: SimRestApiLambdaAuthorizerType;
+    /**
+     * The Lambda function this authorizer invokes, read from its
+     * `authorizerUri`.
+     */
+    readonly lambdaUri: SimRestApiLambdaUri;
+    /**
+     * Where the request has to carry something for the function to be invoked at
+     * all. A `TOKEN` authorizer has exactly one, and its value is the token the
+     * function is invoked with.
+     */
+    readonly identitySources: SimRestApiIdentitySources;
+    /**
+     * How long a decision is held for, in seconds, with zero meaning none.
+     */
+    readonly resultTtlSeconds: number;
+    /**
+     * The decisions already made, which a request presenting the same identity
+     * to the same method is served from rather than invoking the function again.
+     */
+    readonly results: SimRestApiAuthorizerResultCache;
+    constructor(properties: SimRestApiLambdaAuthorizerProperties);
+    /**
+     * Get the AWS-like view of this authorizer.
+     */
+    view(): SimRestApiAuthorizerView;
+}
+export {};
+//# sourceMappingURL=sim-rest-api-lambda-authorizer.d.ts.map

package/dist/service/apigateway/api/authorizer/sim-rest-api-lambda-authorizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-lambda-authorizer.d.ts","sourceRoot":"","sources":["../../../../../src/service/apigateway/api/authorizer/sim-rest-api-lambda-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAChF,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,6CAA6C,CAAC;AAC7F,OAAO,EAAE,+BAA+B,EAAE,MAAM,2CAA2C,CAAC;AAC5F,OAAO,EACL,oBAAoB,EACpB,KAAK,sBAAsB,EAC3B,KAAK,wBAAwB,EAE9B,MAAM,8BAA8B,CAAC;AAEtC;;GAEG;AACH,MAAM,MAAM,8BAA8B,GAAG,OAAO,GAAG,SAAS,CAAC;AAEjE,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,YAAY,EAAE,sBAAsB,CAAC;IAC9C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,8BAA8B,CAAC;IAC9C,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;IACxC,QAAQ,CAAC,eAAe,EAAE,yBAAyB,CAAC;IACpD,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC;AAED;;;;;;;;GAQG;AACH,qBAAa,0BAA2B,SAAQ,oBAAoB;IAClE;;;OAGG;IACH,SAAgB,IAAI,EAAE,8BAA8B,CAAC;IAErD;;;OAGG;IACH,SAAgB,SAAS,EAAE,mBAAmB,CAAC;IAE/C;;;;OAIG;IACH,SAAgB,eAAe,EAAE,yBAAyB,CAAC;IAE3D;;OAEG;IACH,SAAgB,gBAAgB,EAAE,MAAM,CAAC;IAEzC;;;OAGG;IACH,SAAgB,OAAO,EAAE,+BAA+B,CAAC;IAEzD,YAAY,UAAU,EAAE,oCAAoC,EAS3D;IAED;;OAEG;IACH,IAAI,IAAI,wBAAwB,CAU/B;CACF"}

package/dist/service/apigateway/api/authorizer/sim-rest-api-lambda-authorizer.js

@@ -0,0 +1,61 @@
+import { SimRestApiAuthorizerResultCache } from "./sim-rest-api-authorizer-result-cache.js";
+import { SimRestApiAuthorizer, simRestApiCustomAuthType, } from "./sim-rest-api-authorizer.js";
+/**
+ * A simulated REST API Lambda authorizer: the function a method sends a
+ * request to before it reaches the integration.
+ *
+ * The function decides, so nothing here says what a caller has to present.
+ * All this holds is which function to invoke, what the request has to carry
+ * before it is worth invoking, how much of the request that function is shown,
+ * and the decisions it has already made.
+ */
+export class SimRestApiLambdaAuthorizer extends SimRestApiAuthorizer {
+    /**
+     * How much of the request the function sees, which is the whole difference
+     * between the two kinds.
+     */
+    type;
+    /**
+     * The Lambda function this authorizer invokes, read from its
+     * `authorizerUri`.
+     */
+    lambdaUri;
+    /**
+     * Where the request has to carry something for the function to be invoked at
+     * all. A `TOKEN` authorizer has exactly one, and its value is the token the
+     * function is invoked with.
+     */
+    identitySources;
+    /**
+     * How long a decision is held for, in seconds, with zero meaning none.
+     */
+    resultTtlSeconds;
+    /**
+     * The decisions already made, which a request presenting the same identity
+     * to the same method is served from rather than invoking the function again.
+     */
+    results;
+    constructor(properties) {
+        super(properties);
+        this.type = properties.type;
+        this.lambdaUri = properties.lambdaUri;
+        this.identitySources = properties.identitySources;
+        this.resultTtlSeconds = properties.resultTtlSeconds;
+        this.results = new SimRestApiAuthorizerResultCache(properties.resultTtlSeconds);
+    }
+    /**
+     * Get the AWS-like view of this authorizer.
+     */
+    view() {
+        return {
+            id: this.authorizerId,
+            name: this.name,
+            type: this.type,
+            authType: simRestApiCustomAuthType,
+            authorizerUri: this.lambdaUri.uri,
+            identitySource: this.identitySources.expression,
+            authorizerResultTtlInSeconds: this.resultTtlSeconds,
+        };
+    }
+}
+//# sourceMappingURL=sim-rest-api-lambda-authorizer.js.map

package/dist/service/apigateway/api/authorizer/sim-rest-api-lambda-authorizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-lambda-authorizer.js","sourceRoot":"","sources":["../../../../../src/service/apigateway/api/authorizer/sim-rest-api-lambda-authorizer.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,+BAA+B,EAAE,MAAM,2CAA2C,CAAC;AAC5F,OAAO,EACL,oBAAoB,EAGpB,wBAAwB,GACzB,MAAM,8BAA8B,CAAC;AAgBtC;;;;;;;;GAQG;AACH,MAAM,OAAO,0BAA2B,SAAQ,oBAAoB;IAClE;;;OAGG;IACa,IAAI,CAAiC;IAErD;;;OAGG;IACa,SAAS,CAAsB;IAE/C;;;;OAIG;IACa,eAAe,CAA4B;IAE3D;;OAEG;IACa,gBAAgB,CAAS;IAEzC;;;OAGG;IACa,OAAO,CAAkC;IAEzD,YAAY,UAAgD;QAC1D,KAAK,CAAC,UAAU,CAAC,CAAC;QAClB,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;QAC5B,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,eAAe,GAAG,UAAU,CAAC,eAAe,CAAC;QAClD,IAAI,CAAC,gBAAgB,GAAG,UAAU,CAAC,gBAAgB,CAAC;QACpD,IAAI,CAAC,OAAO,GAAG,IAAI,+BAA+B,CAChD,UAAU,CAAC,gBAAgB,CAC5B,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,IAAI;QACF,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,YAAY;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,wBAAwB;YAClC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG;YACjC,cAAc,EAAE,IAAI,CAAC,eAAe,CAAC,UAAU;YAC/C,4BAA4B,EAAE,IAAI,CAAC,gBAAgB;SACpD,CAAC;IACJ,CAAC;CACF"}

package/dist/service/apigateway/api/authorizer/sim-rest-api-user-pool-providers.d.ts

@@ -0,0 +1,30 @@
+/**
+ * The user pools a `COGNITO_USER_POOLS` authorizer accepts tokens from.
+ *
+ * Real `CreateAuthorizer` takes them as ARNs and requires at least one, and a
+ * token is admitted when any one of the pools issued it. The ARNs are kept as
+ * they were written, because that is what `GetAuthorizer` hands back, and the
+ * pool ids are what a token is verified against.
+ */
+export declare class SimRestApiUserPoolProviders {
+    /**
+     * The ARNs as they were written, which is what the API reports back.
+     */
+    readonly arns: readonly string[];
+    /**
+     * The pool ids those ARNs name, in the order they were written.
+     */
+    readonly userPoolIds: readonly string[];
+    private constructor();
+    /**
+     * Read the `providerARNs` an authorizer was created with, refusing a list
+     * this simulation could not verify a token against.
+     *
+     * An authorizer naming no pool, or naming something that is not a user pool
+     * ARN, refuses every request. That reads to a caller like a signing problem
+     * rather than the configuration one it is, so it is refused when the
+     * authorizer is created.
+     */
+    static parse(providerArns: readonly string[]): SimRestApiUserPoolProviders;
+}
+//# sourceMappingURL=sim-rest-api-user-pool-providers.d.ts.map

package/dist/service/apigateway/api/authorizer/sim-rest-api-user-pool-providers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-user-pool-providers.d.ts","sourceRoot":"","sources":["../../../../../src/service/apigateway/api/authorizer/sim-rest-api-user-pool-providers.ts"],"names":[],"mappings":"AAYA;;;;;;;GAOG;AACH,qBAAa,2BAA2B;IACtC;;OAEG;IACH,SAAgB,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IAExC;;OAEG;IACH,SAAgB,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IAE/C,OAAO,eAGN;IAED;;;;;;;;OAQG;IACH,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,GAAG,2BAA2B,CAYzE;CACF"}

package/dist/service/apigateway/api/authorizer/sim-rest-api-user-pool-providers.js

@@ -0,0 +1,59 @@
+import { SimApiGatewayBadRequest } from "../../error/sim-api-gateway.error.js";
+/**
+ * The ARN of one Cognito user pool, whose last segment is the pool's own id.
+ *
+ * The Account and the Region the ARN names are not read. A pool in another
+ * Account is out of scope here, and the pool id already carries its Region, so
+ * the id is the whole of what this simulation looks a pool up by.
+ */
+const userPoolArn = /^arn:aws:cognito-idp:[a-z0-9-]+:\d{12}:userpool\/(?<poolId>[a-z0-9-]+_[A-Za-z0-9]+)$/u;
+/**
+ * The user pools a `COGNITO_USER_POOLS` authorizer accepts tokens from.
+ *
+ * Real `CreateAuthorizer` takes them as ARNs and requires at least one, and a
+ * token is admitted when any one of the pools issued it. The ARNs are kept as
+ * they were written, because that is what `GetAuthorizer` hands back, and the
+ * pool ids are what a token is verified against.
+ */
+export class SimRestApiUserPoolProviders {
+    /**
+     * The ARNs as they were written, which is what the API reports back.
+     */
+    arns;
+    /**
+     * The pool ids those ARNs name, in the order they were written.
+     */
+    userPoolIds;
+    constructor(arns, userPoolIds) {
+        this.arns = arns;
+        this.userPoolIds = userPoolIds;
+    }
+    /**
+     * Read the `providerARNs` an authorizer was created with, refusing a list
+     * this simulation could not verify a token against.
+     *
+     * An authorizer naming no pool, or naming something that is not a user pool
+     * ARN, refuses every request. That reads to a caller like a signing problem
+     * rather than the configuration one it is, so it is refused when the
+     * authorizer is created.
+     */
+    static parse(providerArns) {
+        if (providerArns.length === 0) {
+            throw new SimApiGatewayBadRequest("CreateAuthorizer with type COGNITO_USER_POOLS requires providerARNs " +
+                "naming at least one user pool");
+        }
+        return new SimRestApiUserPoolProviders([...providerArns], providerArns.map((arn) => userPoolId(arn)));
+    }
+}
+/**
+ * The pool an ARN names, refusing one that names no user pool.
+ */
+function userPoolId(arn) {
+    const poolId = userPoolArn.exec(arn)?.groups?.["poolId"];
+    if (poolId === undefined) {
+        throw new SimApiGatewayBadRequest(`providerARNs entry '${arn}' is not a user pool ARN, which is written ` +
+            `as 'arn:aws:cognito-idp:<region>:<account>:userpool/<poolId>'`);
+    }
+    return poolId;
+}
+//# sourceMappingURL=sim-rest-api-user-pool-providers.js.map

package/dist/service/apigateway/api/authorizer/sim-rest-api-user-pool-providers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-user-pool-providers.js","sourceRoot":"","sources":["../../../../../src/service/apigateway/api/authorizer/sim-rest-api-user-pool-providers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AAE/E;;;;;;GAMG;AACH,MAAM,WAAW,GACf,uFAAuF,CAAC;AAE1F;;;;;;;GAOG;AACH,MAAM,OAAO,2BAA2B;IACtC;;OAEG;IACa,IAAI,CAAoB;IAExC;;OAEG;IACa,WAAW,CAAoB;IAE/C,YAAoB,IAAuB,EAAE,WAA8B;QACzE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;IAED;;;;;;;;OAQG;IACH,MAAM,CAAC,KAAK,CAAC,YAA+B;QAC1C,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,uBAAuB,CAC/B,sEAAsE;gBACpE,+BAA+B,CAClC,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,2BAA2B,CACpC,CAAC,GAAG,YAAY,CAAC,EACjB,YAAY,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAC3C,CAAC;IACJ,CAAC;CACF;AAED;;GAEG;AACH,SAAS,UAAU,CAAC,GAAW;IAC7B,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC;IAEzD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,uBAAuB,CAC/B,uBAAuB,GAAG,6CAA6C;YACrE,+DAA+D,CAClE,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/service/apigateway/api/authorizer/sim-rest-api-user-pools.d.ts

@@ -0,0 +1,45 @@
+import type { SimJwtKeys } from "../../../../util/jwt/sim-jwt-keys.js";
+/**
+ * One user pool a `COGNITO_USER_POOLS` authorizer verifies tokens against.
+ */
+export interface SimRestApiUserPool {
+    /** The URL this pool's tokens name as their issuer. */
+    readonly issuerUrl: string;
+    /** The public keys this pool publishes. */
+    readonly keys: SimJwtKeys;
+}
+/**
+ * The user pools an API Gateway can reach, as its Cognito authorizers see
+ * them.
+ *
+ * A REST API authorizer names a pool by ARN, and all this asks for is what the
+ * pool id in that ARN resolves to. That is how a Cognito authorizer reaches
+ * simulated Cognito without API Gateway depending on it.
+ *
+ * Nothing is fetched over HTTP. A pool's published OpenID configuration names
+ * the localhost origin it is served from, while its tokens name the real AWS
+ * URL, so a discovery client would reject its own issuer's tokens. Resolving
+ * in process compares the two strings that both come from the same getter.
+ */
+export interface SimRestApiUserPools {
+    /**
+     * The pool this id names, which is nothing when this simulation has no such
+     * pool.
+     */
+    find(userPoolId: string): SimRestApiUserPool | undefined;
+}
+/**
+ * The pools available to an API Gateway that has no Cognito to ask.
+ *
+ * Every pool id resolves to nothing, so every token fails key selection and
+ * every request to a Cognito method is refused. That is the safe answer for a
+ * simulated API Gateway standing on its own: a method configured to be closed
+ * stays closed.
+ */
+export declare class SimRestApiNoUserPools implements SimRestApiUserPools {
+    /**
+     * No pool id resolves here.
+     */
+    find(): undefined;
+}
+//# sourceMappingURL=sim-rest-api-user-pools.d.ts.map

package/dist/service/apigateway/api/authorizer/sim-rest-api-user-pools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-user-pools.d.ts","sourceRoot":"","sources":["../../../../../src/service/apigateway/api/authorizer/sim-rest-api-user-pools.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sCAAsC,CAAC;AAEvE;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,uDAAuD;IACvD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,2CAA2C;IAC3C,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;CAC3B;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;OAGG;IACH,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAAC;CAC1D;AAED;;;;;;;GAOG;AACH,qBAAa,qBAAsB,YAAW,mBAAmB;IAC/D;;OAEG;IACH,IAAI,IAAI,SAAS,CAEhB;CACF"}

package/dist/service/apigateway/api/authorizer/sim-rest-api-user-pools.js

@@ -0,0 +1,17 @@
+/**
+ * The pools available to an API Gateway that has no Cognito to ask.
+ *
+ * Every pool id resolves to nothing, so every token fails key selection and
+ * every request to a Cognito method is refused. That is the safe answer for a
+ * simulated API Gateway standing on its own: a method configured to be closed
+ * stays closed.
+ */
+export class SimRestApiNoUserPools {
+    /**
+     * No pool id resolves here.
+     */
+    find() {
+        return;
+    }
+}
+//# sourceMappingURL=sim-rest-api-user-pools.js.map

package/dist/service/apigateway/api/authorizer/sim-rest-api-user-pools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-user-pools.js","sourceRoot":"","sources":["../../../../../src/service/apigateway/api/authorizer/sim-rest-api-user-pools.ts"],"names":[],"mappings":"AAiCA;;;;;;;GAOG;AACH,MAAM,OAAO,qBAAqB;IAChC;;OAEG;IACH,IAAI;QACF,OAAO;IACT,CAAC;CACF"}

package/dist/service/apigateway/api/deployment/sim-rest-api-deployment-store.d.ts

@@ -0,0 +1,16 @@
+import type { SimRestApiDeployment } from "./sim-rest-api-deployment.js";
+/**
+ * The deployments of one REST API, keyed by id.
+ */
+export declare class SimRestApiDeploymentStore {
+    private readonly deployments;
+    /**
+     * Add a deployment to this API.
+     */
+    add(deployment: SimRestApiDeployment): void;
+    /**
+     * Find a deployment by id.
+     */
+    find(deploymentId: string): SimRestApiDeployment | undefined;
+}
+//# sourceMappingURL=sim-rest-api-deployment-store.d.ts.map

package/dist/service/apigateway/api/deployment/sim-rest-api-deployment-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-deployment-store.d.ts","sourceRoot":"","sources":["../../../../../src/service/apigateway/api/deployment/sim-rest-api-deployment-store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,oBAAoB,EAErB,MAAM,8BAA8B,CAAC;AAEtC;;GAEG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAGxB;IAEJ;;OAEG;IACH,GAAG,CAAC,UAAU,EAAE,oBAAoB,GAAG,IAAI,CAE1C;IAED;;OAEG;IACH,IAAI,CAAC,YAAY,EAAE,MAAM,GAAG,oBAAoB,GAAG,SAAS,CAE3D;CACF"}

package/dist/service/apigateway/api/deployment/sim-rest-api-deployment-store.js

@@ -0,0 +1,19 @@
+/**
+ * The deployments of one REST API, keyed by id.
+ */
+export class SimRestApiDeploymentStore {
+    deployments = new Map();
+    /**
+     * Add a deployment to this API.
+     */
+    add(deployment) {
+        this.deployments.set(deployment.deploymentId, deployment);
+    }
+    /**
+     * Find a deployment by id.
+     */
+    find(deploymentId) {
+        return this.deployments.get(deploymentId);
+    }
+}
+//# sourceMappingURL=sim-rest-api-deployment-store.js.map

package/dist/service/apigateway/api/deployment/sim-rest-api-deployment-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-deployment-store.js","sourceRoot":"","sources":["../../../../../src/service/apigateway/api/deployment/sim-rest-api-deployment-store.ts"],"names":[],"mappings":"AAKA;;GAEG;AACH,MAAM,OAAO,yBAAyB;IACnB,WAAW,GAAG,IAAI,GAAG,EAGnC,CAAC;IAEJ;;OAEG;IACH,GAAG,CAAC,UAAgC;QAClC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,YAAoB;QACvB,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,YAAsC,CAAC,CAAC;IACtE,CAAC;CACF"}

package/dist/service/apigateway/api/deployment/sim-rest-api-deployment.d.ts

@@ -0,0 +1,44 @@
+import type { Brand } from "../../../../util/brand.type.js";
+/**
+ * The id API Gateway allocates for one deployment of a REST API.
+ */
+export type SimRestApiDeploymentId = Brand<string, "SimRestApiDeploymentId">;
+/**
+ * Allocate a deployment id, in the opaque short lowercase alphanumeric shape
+ * real API Gateway uses.
+ */
+export declare function makeSimRestApiDeploymentId(): SimRestApiDeploymentId;
+interface SimRestApiDeploymentProperties {
+    readonly deploymentId: SimRestApiDeploymentId;
+    readonly createdDate: Date;
+    readonly description?: string | undefined;
+}
+/**
+ * Minimal structural deployment view, as CreateDeployment returns.
+ */
+export interface SimRestApiDeploymentView {
+    id: string;
+    createdDate: Date;
+    description?: string;
+}
+/**
+ * A simulated REST API deployment: a snapshot a stage points at.
+ *
+ * Real API Gateway freezes the resources and methods into the deployment, and
+ * an edit made afterwards reaches no client until another deployment is
+ * created. Here a deployment records that one was made and when. A stage
+ * serves the API's current resources, so a test editing a method sees the
+ * change without redeploying, which is the one place this departs from AWS.
+ */
+export declare class SimRestApiDeployment {
+    readonly deploymentId: SimRestApiDeploymentId;
+    readonly createdDate: Date;
+    readonly description?: string | undefined;
+    constructor(properties: SimRestApiDeploymentProperties);
+    /**
+     * Get the AWS-like view of this deployment.
+     */
+    view(): SimRestApiDeploymentView;
+}
+export {};
+//# sourceMappingURL=sim-rest-api-deployment.d.ts.map

package/dist/service/apigateway/api/deployment/sim-rest-api-deployment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-deployment.d.ts","sourceRoot":"","sources":["../../../../../src/service/apigateway/api/deployment/sim-rest-api-deployment.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,gCAAgC,CAAC;AAE5D;;GAEG;AACH,MAAM,MAAM,sBAAsB,GAAG,KAAK,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;AAE7E;;;GAGG;AACH,wBAAgB,0BAA0B,IAAI,sBAAsB,CAEnE;AAED,UAAU,8BAA8B;IACtC,QAAQ,CAAC,YAAY,EAAE,sBAAsB,CAAC;IAC9C,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3C;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,IAAI,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;GAQG;AACH,qBAAa,oBAAoB;IAC/B,SAAgB,YAAY,EAAE,sBAAsB,CAAC;IACrD,SAAgB,WAAW,EAAE,IAAI,CAAC;IAClC,SAAgB,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAEjD,YAAY,UAAU,EAAE,8BAA8B,EAIrD;IAED;;OAEG;IACH,IAAI,IAAI,wBAAwB,CAW/B;CACF"}

package/dist/service/apigateway/api/deployment/sim-rest-api-deployment.js

@@ -0,0 +1,41 @@
+import { faker } from "@faker-js/faker";
+/**
+ * Allocate a deployment id, in the opaque short lowercase alphanumeric shape
+ * real API Gateway uses.
+ */
+export function makeSimRestApiDeploymentId() {
+    return faker.helpers.fromRegExp(/[a-z0-9]{6}/);
+}
+/**
+ * A simulated REST API deployment: a snapshot a stage points at.
+ *
+ * Real API Gateway freezes the resources and methods into the deployment, and
+ * an edit made afterwards reaches no client until another deployment is
+ * created. Here a deployment records that one was made and when. A stage
+ * serves the API's current resources, so a test editing a method sees the
+ * change without redeploying, which is the one place this departs from AWS.
+ */
+export class SimRestApiDeployment {
+    deploymentId;
+    createdDate;
+    description;
+    constructor(properties) {
+        this.deploymentId = properties.deploymentId;
+        this.createdDate = properties.createdDate;
+        this.description = properties.description;
+    }
+    /**
+     * Get the AWS-like view of this deployment.
+     */
+    view() {
+        const view = {
+            id: this.deploymentId,
+            createdDate: new Date(this.createdDate),
+        };
+        if (this.description !== undefined) {
+            view.description = this.description;
+        }
+        return view;
+    }
+}
+//# sourceMappingURL=sim-rest-api-deployment.js.map

package/dist/service/apigateway/api/deployment/sim-rest-api-deployment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-deployment.js","sourceRoot":"","sources":["../../../../../src/service/apigateway/api/deployment/sim-rest-api-deployment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AASxC;;;GAGG;AACH,MAAM,UAAU,0BAA0B;IACxC,OAAO,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,aAAa,CAA2B,CAAC;AAC3E,CAAC;AAiBD;;;;;;;;GAQG;AACH,MAAM,OAAO,oBAAoB;IACf,YAAY,CAAyB;IACrC,WAAW,CAAO;IAClB,WAAW,CAAsB;IAEjD,YAAY,UAA0C;QACpD,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;QAC5C,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,IAAI;QACF,MAAM,IAAI,GAA6B;YACrC,EAAE,EAAE,IAAI,CAAC,YAAY;YACrB,WAAW,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC;SACxC,CAAC;QAEF,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACnC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACtC,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/service/apigateway/api/match/sim-rest-api-match.d.ts

@@ -0,0 +1,59 @@
+import type { SimRestApiMethod } from "../method/sim-rest-api-method.js";
+import type { SimRestApiResource } from "../resource/sim-rest-api-resource.js";
+import type { SimRestApiStage } from "../stage/sim-rest-api-stage.js";
+import type { SimRestApi } from "../sim-rest-api.js";
+import type { SimRestApiRequest } from "./sim-rest-api-request.js";
+/**
+ * What a simulated REST API found for one request.
+ */
+export interface SimRestApiMatch {
+    readonly stage: SimRestApiStage;
+    readonly resource: SimRestApiResource;
+    readonly method: SimRestApiMethod;
+    readonly pathParameters: Readonly<Record<string, string>>;
+    /**
+     * The request path with the stage segment taken off and no leading
+     * separator, such as `orders/6`. A request to the stage root leaves it
+     * empty.
+     *
+     * This is the path a Lambda authorizer's `methodArn` names, which is the
+     * path the client asked for rather than the resource template it matched.
+     */
+    readonly pathAfterStage: string;
+}
+/**
+ * Why a request reached nothing.
+ *
+ * The two are told apart because real API Gateway answers them differently. A
+ * stage that is not there is a plain `Forbidden`, while a request that reached
+ * the stage and matched no method gets the `Missing Authentication Token`
+ * message API Gateway is well known for.
+ */
+export type SimRestApiMiss = "stage" | "route";
+/**
+ * Matches a request to a stage, a resource and a method of one REST API.
+ *
+ * The stage goes first, because every REST API request carries its stage as
+ * the first path segment and the resource tree knows nothing about it. A
+ * request to `/prod/orders/6` on stage `prod` reaches the tree as the segments
+ * `orders` and `6`.
+ */
+export declare class SimRestApiMatcher {
+    private readonly walk;
+    /**
+     * Find what should handle one request, or why nothing does.
+     */
+    match(restApi: SimRestApi, request: SimRestApiRequest): SimRestApiMatch | SimRestApiMiss;
+    /**
+     * The method of the reached resource that answers this request.
+     *
+     * An explicit method wins over `ANY`, which is the catch-all for whatever
+     * the resource declares no method of its own for.
+     */
+    private matched;
+}
+/**
+ * Whether matching found something to invoke.
+ */
+export declare function isSimRestApiMatch(match: SimRestApiMatch | SimRestApiMiss): match is SimRestApiMatch;
+//# sourceMappingURL=sim-rest-api-match.d.ts.map

package/dist/service/apigateway/api/match/sim-rest-api-match.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-match.d.ts","sourceRoot":"","sources":["../../../../../src/service/apigateway/api/match/sim-rest-api-match.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAC/E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAMnE;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1D;;;;;;;OAOG;IACH,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,OAAO,CAAC;AAE/C;;;;;;;GAOG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAgC;IAErD;;OAEG;IACH,KAAK,CACH,OAAO,EAAE,UAAU,EACnB,OAAO,EAAE,iBAAiB,GACzB,eAAe,GAAG,cAAc,CAelC;IAED;;;;;OAKG;IACH,OAAO,CAAC,OAAO;CAchB;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,eAAe,GAAG,cAAc,GACtC,KAAK,IAAI,eAAe,CAE1B"}

package/dist/service/apigateway/api/match/sim-rest-api-match.js

@@ -0,0 +1,48 @@
+import { simRestApiAnyMethod } from "../method/sim-rest-api-method.js";
+import { SimRestApiResourceWalk, } from "./sim-rest-api-resource-walk.js";
+/**
+ * Matches a request to a stage, a resource and a method of one REST API.
+ *
+ * The stage goes first, because every REST API request carries its stage as
+ * the first path segment and the resource tree knows nothing about it. A
+ * request to `/prod/orders/6` on stage `prod` reaches the tree as the segments
+ * `orders` and `6`.
+ */
+export class SimRestApiMatcher {
+    walk = new SimRestApiResourceWalk();
+    /**
+     * Find what should handle one request, or why nothing does.
+     */
+    match(restApi, request) {
+        const [stageName, ...segments] = request.segments;
+        const stage = restApi.stages.find(stageName ?? "");
+        if (stage === undefined) {
+            return "stage";
+        }
+        const reached = this.walk.walk(restApi.resources, segments);
+        if (reached === undefined) {
+            return "route";
+        }
+        return this.matched(stage, reached, request, segments.join("/")) ?? "route";
+    }
+    /**
+     * The method of the reached resource that answers this request.
+     *
+     * An explicit method wins over `ANY`, which is the catch-all for whatever
+     * the resource declares no method of its own for.
+     */
+    matched(stage, reached, request, pathAfterStage) {
+        const method = reached.resource.findMethod(request.method) ??
+            reached.resource.findMethod(simRestApiAnyMethod);
+        return method === undefined
+            ? undefined
+            : { stage, method, pathAfterStage, ...reached };
+    }
+}
+/**
+ * Whether matching found something to invoke.
+ */
+export function isSimRestApiMatch(match) {
+    return typeof match !== "string";
+}
+//# sourceMappingURL=sim-rest-api-match.js.map

package/dist/service/apigateway/api/match/sim-rest-api-match.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-match.js","sourceRoot":"","sources":["../../../../../src/service/apigateway/api/match/sim-rest-api-match.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAMvE,OAAO,EAEL,sBAAsB,GACvB,MAAM,iCAAiC,CAAC;AA+BzC;;;;;;;GAOG;AACH,MAAM,OAAO,iBAAiB;IACX,IAAI,GAAG,IAAI,sBAAsB,EAAE,CAAC;IAErD;;OAEG;IACH,KAAK,CACH,OAAmB,EACnB,OAA0B;QAE1B,MAAM,CAAC,SAAS,EAAE,GAAG,QAAQ,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC;QAClD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QAEnD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAE5D,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,OAAO,CAAC;IAC9E,CAAC;IAED;;;;;OAKG;IACK,OAAO,CACb,KAAsB,EACtB,OAAgC,EAChC,OAA0B,EAC1B,cAAsB;QAEtB,MAAM,MAAM,GACV,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC;YAC3C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC;QAEnD,OAAO,MAAM,KAAK,SAAS;YACzB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,OAAO,EAAE,CAAC;IACpD,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAC/B,KAAuC;IAEvC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;AACnC,CAAC"}

package/dist/service/apigateway/api/match/sim-rest-api-request.d.ts

@@ -0,0 +1,23 @@
+interface SimRestApiRequestProperties {
+    readonly method: string;
+    readonly path: string;
+}
+/**
+ * One HTTP request as a simulated REST API sees it for matching.
+ *
+ * The path is the whole request path, stage segment and all. A REST API always
+ * carries its stage as the first segment, and taking it off is the first step
+ * of matching rather than something the caller does beforehand.
+ */
+export declare class SimRestApiRequest {
+    readonly method: string;
+    readonly path: string;
+    constructor(properties: SimRestApiRequestProperties);
+    /**
+     * The path segments, with the empty strings a leading or trailing separator
+     * produces dropped.
+     */
+    get segments(): readonly string[];
+}
+export {};
+//# sourceMappingURL=sim-rest-api-request.d.ts.map

package/dist/service/apigateway/api/match/sim-rest-api-request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-request.d.ts","sourceRoot":"","sources":["../../../../../src/service/apigateway/api/match/sim-rest-api-request.ts"],"names":[],"mappings":"AAAA,UAAU,2BAA2B;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;GAMG;AACH,qBAAa,iBAAiB;IAC5B,SAAgB,MAAM,EAAE,MAAM,CAAC;IAC/B,SAAgB,IAAI,EAAE,MAAM,CAAC;IAE7B,YAAY,UAAU,EAAE,2BAA2B,EAGlD;IAED;;;OAGG;IACH,IAAI,QAAQ,IAAI,SAAS,MAAM,EAAE,CAEhC;CACF"}

package/dist/service/apigateway/api/match/sim-rest-api-request.js

@@ -0,0 +1,23 @@
+/**
+ * One HTTP request as a simulated REST API sees it for matching.
+ *
+ * The path is the whole request path, stage segment and all. A REST API always
+ * carries its stage as the first segment, and taking it off is the first step
+ * of matching rather than something the caller does beforehand.
+ */
+export class SimRestApiRequest {
+    method;
+    path;
+    constructor(properties) {
+        this.method = properties.method;
+        this.path = properties.path;
+    }
+    /**
+     * The path segments, with the empty strings a leading or trailing separator
+     * produces dropped.
+     */
+    get segments() {
+        return this.path.split("/").filter((segment) => segment.length > 0);
+    }
+}
+//# sourceMappingURL=sim-rest-api-request.js.map

package/dist/service/apigateway/api/match/sim-rest-api-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-request.js","sourceRoot":"","sources":["../../../../../src/service/apigateway/api/match/sim-rest-api-request.ts"],"names":[],"mappings":"AAKA;;;;;;GAMG;AACH,MAAM,OAAO,iBAAiB;IACZ,MAAM,CAAS;IACf,IAAI,CAAS;IAE7B,YAAY,UAAuC;QACjD,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;IAC9B,CAAC;IAED;;;OAGG;IACH,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACtE,CAAC;CACF"}