@kensio/yulin 1.17.1 → 1.18.0

package/dist/service/apigateway/api/sim-rest-api-host.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-host.d.ts","sourceRoot":"","sources":["../../../../src/service/apigateway/api/sim-rest-api-host.ts"],"names":[],"mappings":"AAKA,UAAU,wBAAwB;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,UAAU,EAAE,wBAAwB,GAAG,MAAM,CAE3E;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,wBAAwB,GACnC,MAAM,CAER"}

package/dist/service/apigateway/api/sim-rest-api-host.js

@@ -0,0 +1,23 @@
+import { executeApiDomain, executeApiHostLabel, } from "../../apigatewayv2/api/sim-http-api-host.js";
+/**
+ * Build the real AWS endpoint hostname for a REST API.
+ *
+ * REST APIs and HTTP APIs are issued endpoints under the same `execute-api`
+ * host, which is why the two labels come from one place. What differs is the
+ * path. Every REST API request carries its stage as the first path segment,
+ * where an HTTP API can serve a `$default` stage at the root.
+ */
+export function simRestApiHost(properties) {
+    return `${simRestApiLogicalHost(properties)}.${executeApiDomain}`;
+}
+/**
+ * Build the logical hostname for a REST API: the AWS endpoint hostname without
+ * the real AWS domain.
+ *
+ * This is the form Yulin serves on localhost, where the `.amazonaws.com` tail
+ * is replaced by the local suffix.
+ */
+export function simRestApiLogicalHost(properties) {
+    return `${properties.apiId}.${executeApiHostLabel}.${properties.regionName}`;
+}
+//# sourceMappingURL=sim-rest-api-host.js.map

package/dist/service/apigateway/api/sim-rest-api-host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-host.js","sourceRoot":"","sources":["../../../../src/service/apigateway/api/sim-rest-api-host.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,6CAA6C,CAAC;AAOrD;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,UAAoC;IACjE,OAAO,GAAG,qBAAqB,CAAC,UAAU,CAAC,IAAI,gBAAgB,EAAE,CAAC;AACpE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CACnC,UAAoC;IAEpC,OAAO,GAAG,UAAU,CAAC,KAAK,IAAI,mBAAmB,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;AAC/E,CAAC"}

package/dist/service/apigateway/api/sim-rest-api-id.d.ts

@@ -0,0 +1,15 @@
+import type { Brand } from "../../../util/brand.type.js";
+/**
+ * The id API Gateway allocates for one REST API, which is the leading DNS
+ * label of the endpoint it generates.
+ */
+export type SimRestApiId = Brand<string, "SimRestApiId">;
+/**
+ * Allocate a REST API id in the shape real API Gateway uses: 10 lowercase
+ * alphanumeric characters, forming one DNS label.
+ *
+ * An HTTP API id has the same shape, because both services issue endpoints
+ * under `execute-api` and neither reserves any part of that namespace.
+ */
+export declare function makeSimRestApiId(): SimRestApiId;
+//# sourceMappingURL=sim-rest-api-id.d.ts.map

package/dist/service/apigateway/api/sim-rest-api-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-id.d.ts","sourceRoot":"","sources":["../../../../src/service/apigateway/api/sim-rest-api-id.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AAEzD;;;GAGG;AACH,MAAM,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;AAEzD;;;;;;GAMG;AACH,wBAAgB,gBAAgB,IAAI,YAAY,CAE/C"}

package/dist/service/apigateway/api/sim-rest-api-id.js

@@ -0,0 +1,12 @@
+import { faker } from "@faker-js/faker";
+/**
+ * Allocate a REST API id in the shape real API Gateway uses: 10 lowercase
+ * alphanumeric characters, forming one DNS label.
+ *
+ * An HTTP API id has the same shape, because both services issue endpoints
+ * under `execute-api` and neither reserves any part of that namespace.
+ */
+export function makeSimRestApiId() {
+    return faker.helpers.fromRegExp(/[a-z0-9]{10}/);
+}
+//# sourceMappingURL=sim-rest-api-id.js.map

package/dist/service/apigateway/api/sim-rest-api-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-id.js","sourceRoot":"","sources":["../../../../src/service/apigateway/api/sim-rest-api-id.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAUxC;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB;IAC9B,OAAO,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAiB,CAAC;AAClE,CAAC"}

package/dist/service/apigateway/api/sim-rest-api-lambda-proxy.factory.d.ts

@@ -0,0 +1,66 @@
+import { AsyncMappedFactory } from "@kensio/part-factory";
+import type { SimPayload1Event } from "../../../serve/payload-1/sim-payload-1-event.type.js";
+import type { SimAws } from "../../aws/sim-aws.js";
+import { type SimRestApiProxyAuthorizerInput } from "./sim-rest-api-proxy-authorizer.js";
+import type { SimRestApi } from "./sim-rest-api.js";
+/**
+ * What a test asks for when it wants a REST API that serves something.
+ */
+export interface SimRestApiLambdaProxyInput extends SimRestApiProxyAuthorizerInput {
+    readonly apiName: string;
+    readonly functionName: string;
+    /** The function code every method of the API hands its requests to. */
+    readonly handler: (event: SimPayload1Event) => unknown;
+    readonly disableExecuteApiEndpoint: boolean;
+    /**
+     * The resource paths the API declares, written as templates such as
+     * `/orders/{orderId}` or `/{proxy+}`. Each one gets the method below.
+     */
+    readonly resourcePaths: readonly string[];
+    /** The HTTP method declared on each of those resources. */
+    readonly httpMethod: string;
+    /** The stage the API is deployed to, which every request goes through. */
+    readonly stageName: string;
+    /** The variables that stage carries. */
+    readonly stageVariables: Readonly<Record<string, string>>;
+    /**
+     * Whether the function grants the API permission to invoke it, which it
+     * needs before any method serves anything.
+     *
+     * The grant is the one CDK writes: `apigateway.amazonaws.com` may
+     * `lambda:InvokeFunction` for any stage and method of this API. A test about
+     * the permission itself turns this off and grants what it means to test.
+     */
+    readonly invokePermission: boolean;
+}
+/**
+ * Creates a REST API that proxies every request to a simulated Lambda
+ * function, through the ordinary commands.
+ *
+ * A resource per path segment, a method, an integration, a deployment and a
+ * function stand between a test and a request it can serve, and a test about
+ * serving is about none of them. Tests about the commands themselves send them
+ * one at a time instead.
+ *
+ * Supplying an `authorizerHandler` puts a `TOKEN` authorizer in front of every
+ * method, invoking a second simulated function of its own. A
+ * `requestAuthorizerHandler` puts a `REQUEST` authorizer there instead, and
+ * `cognitoUserPoolArns` puts a `COGNITO_USER_POOLS` authorizer there, which
+ * invokes nothing and verifies the token itself. Asking for
+ * `iamAuthorization` puts every method behind IAM.
+ *
+ * ```typescript
+ * const restApi = await simRestApiLambdaProxyFactory.make(
+ *   { handler: () => ({ statusCode: 200, body: "hello" }) },
+ *   simAws,
+ * );
+ * const response = await new SimAwsHttp({ simAws }).fetch(
+ *   new SimAwsLocalUrl({ input: restApi.invokeUrl("prod") }).toString(),
+ * );
+ * ```
+ *
+ * The API is created in the default Account and Region of the simulated AWS it
+ * is given, and so is the function unless another Account is asked for.
+ */
+export declare const simRestApiLambdaProxyFactory: AsyncMappedFactory<SimRestApiLambdaProxyInput, SimRestApi, SimAws>;
+//# sourceMappingURL=sim-rest-api-lambda-proxy.factory.d.ts.map

package/dist/service/apigateway/api/sim-rest-api-lambda-proxy.factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-lambda-proxy.factory.d.ts","sourceRoot":"","sources":["../../../../src/service/apigateway/api/sim-rest-api-lambda-proxy.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE1D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sDAAsD,CAAC;AAG7F,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAEnD,OAAO,EAEL,KAAK,8BAA8B,EACpC,MAAM,oCAAoC,CAAC;AAK5C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAEpD;;GAEG;AACH,MAAM,WAAW,0BAA2B,SAAQ,8BAA8B;IAChF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,uEAAuE;IACvE,QAAQ,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,OAAO,CAAC;IACvD,QAAQ,CAAC,yBAAyB,EAAE,OAAO,CAAC;IAC5C;;;OAGG;IACH,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,2DAA2D;IAC3D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,0EAA0E;IAC1E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,wCAAwC;IACxC,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1D;;;;;;;OAOG;IACH,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;CACpC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,eAAO,MAAM,4BAA4B,oEAuExC,CAAC"}

package/dist/service/apigateway/api/sim-rest-api-lambda-proxy.factory.js

@@ -0,0 +1,89 @@
+import { AsyncMappedFactory } from "@kensio/part-factory";
+import { assertDefined } from "../../../util/type-guard/defined.js";
+import { DEFAULT_SIM_AWS_ACCOUNT_ID } from "../../aws/sim-aws-account.js";
+import { declaredMethods } from "./sim-rest-api-declared-method.js";
+import { simRestApiProxyAuthorization, } from "./sim-rest-api-proxy-authorizer.js";
+import { simRestApiInvokePermission, simRestApiProxyFunction, } from "./sim-rest-api-proxy-function.js";
+/**
+ * Creates a REST API that proxies every request to a simulated Lambda
+ * function, through the ordinary commands.
+ *
+ * A resource per path segment, a method, an integration, a deployment and a
+ * function stand between a test and a request it can serve, and a test about
+ * serving is about none of them. Tests about the commands themselves send them
+ * one at a time instead.
+ *
+ * Supplying an `authorizerHandler` puts a `TOKEN` authorizer in front of every
+ * method, invoking a second simulated function of its own. A
+ * `requestAuthorizerHandler` puts a `REQUEST` authorizer there instead, and
+ * `cognitoUserPoolArns` puts a `COGNITO_USER_POOLS` authorizer there, which
+ * invokes nothing and verifies the token itself. Asking for
+ * `iamAuthorization` puts every method behind IAM.
+ *
+ * ```typescript
+ * const restApi = await simRestApiLambdaProxyFactory.make(
+ *   { handler: () => ({ statusCode: 200, body: "hello" }) },
+ *   simAws,
+ * );
+ * const response = await new SimAwsHttp({ simAws }).fetch(
+ *   new SimAwsLocalUrl({ input: restApi.invokeUrl("prod") }).toString(),
+ * );
+ * ```
+ *
+ * The API is created in the default Account and Region of the simulated AWS it
+ * is given, and so is the function unless another Account is asked for.
+ */
+export const simRestApiLambdaProxyFactory = new AsyncMappedFactory(() => ({
+    apiName: "orders",
+    functionName: "orders",
+    functionAccountId: DEFAULT_SIM_AWS_ACCOUNT_ID,
+    roleArn: "arn:aws:iam::111111111111:role/OrdersRole",
+    handler: () => ({ statusCode: 200, body: "hello" }),
+    authorizerHandler: undefined,
+    requestAuthorizerHandler: undefined,
+    cognitoUserPoolArns: undefined,
+    authorizationScopes: [],
+    authorizerIdentitySource: "method.request.header.Authorization",
+    authorizerResultTtlSeconds: 0,
+    authorizerInvokePermission: true,
+    disableExecuteApiEndpoint: false,
+    iamAuthorization: false,
+    resourcePaths: ["/{proxy+}"],
+    httpMethod: "ANY",
+    stageName: "prod",
+    stageVariables: {},
+    invokePermission: true,
+}), async (input, simAws) => {
+    const functionArn = await simRestApiProxyFunction(simAws, input);
+    const apiGateway = simAws.apiGateway();
+    const created = await apiGateway.createRestApi({
+        input: {
+            name: input.apiName,
+            disableExecuteApiEndpoint: input.disableExecuteApiEndpoint,
+        },
+    });
+    const restApiId = created.id;
+    await declaredMethods(apiGateway, input.resourcePaths, {
+        restApiId,
+        rootResourceId: created.rootResourceId,
+        httpMethod: input.httpMethod,
+        functionArn,
+        authorization: await simRestApiProxyAuthorization(simAws, input, restApiId),
+    });
+    if (input.invokePermission) {
+        await simRestApiInvokePermission(simAws, input, restApiId);
+    }
+    await apiGateway.createDeployment({
+        input: {
+            restApiId,
+            stageName: input.stageName,
+            variables: input.stageVariables,
+        },
+    });
+    // An id CreateRestApi allocated is an API the store holds, so this is only
+    // missing if something is wrong with the simulator itself.
+    const restApi = apiGateway.findRestApi(restApiId);
+    assertDefined(restApi, `Simulated API Gateway created the API ${restApiId} and then did not hold it`);
+    return restApi;
+});
+//# sourceMappingURL=sim-rest-api-lambda-proxy.factory.js.map

package/dist/service/apigateway/api/sim-rest-api-lambda-proxy.factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-lambda-proxy.factory.js","sourceRoot":"","sources":["../../../../src/service/apigateway/api/sim-rest-api-lambda-proxy.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAG1D,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAE1E,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACpE,OAAO,EACL,4BAA4B,GAE7B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,0BAA0B,EAC1B,uBAAuB,GACxB,MAAM,kCAAkC,CAAC;AAkC1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,IAAI,kBAAkB,CAKhE,GAAG,EAAE,CAAC,CAAC;IACL,OAAO,EAAE,QAAQ;IACjB,YAAY,EAAE,QAAQ;IACtB,iBAAiB,EAAE,0BAA0B;IAC7C,OAAO,EAAE,2CAA2C;IACpD,OAAO,EAAE,GAAY,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC5D,iBAAiB,EAAE,SAAS;IAC5B,wBAAwB,EAAE,SAAS;IACnC,mBAAmB,EAAE,SAAS;IAC9B,mBAAmB,EAAE,EAAE;IACvB,wBAAwB,EAAE,qCAAqC;IAC/D,0BAA0B,EAAE,CAAC;IAC7B,0BAA0B,EAAE,IAAI;IAChC,yBAAyB,EAAE,KAAK;IAChC,gBAAgB,EAAE,KAAK;IACvB,aAAa,EAAE,CAAC,WAAW,CAAC;IAC5B,UAAU,EAAE,KAAK;IACjB,SAAS,EAAE,MAAM;IACjB,cAAc,EAAE,EAAE;IAClB,gBAAgB,EAAE,IAAI;CACvB,CAAC,EACF,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;IACtB,MAAM,WAAW,GAAG,MAAM,uBAAuB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACjE,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IACvC,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,aAAa,CAAC;QAC7C,KAAK,EAAE;YACL,IAAI,EAAE,KAAK,CAAC,OAAO;YACnB,yBAAyB,EAAE,KAAK,CAAC,yBAAyB;SAC3D;KACF,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,OAAO,CAAC,EAAE,CAAC;IAE7B,MAAM,eAAe,CAAC,UAAU,EAAE,KAAK,CAAC,aAAa,EAAE;QACrD,SAAS;QACT,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,WAAW;QACX,aAAa,EAAE,MAAM,4BAA4B,CAC/C,MAAM,EACN,KAAK,EACL,SAAS,CACV;KACF,CAAC,CAAC;IAEH,IAAI,KAAK,CAAC,gBAAgB,EAAE,CAAC;QAC3B,MAAM,0BAA0B,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,UAAU,CAAC,gBAAgB,CAAC;QAChC,KAAK,EAAE;YACL,SAAS;YACT,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,KAAK,CAAC,cAAc;SAChC;KACF,CAAC,CAAC;IAEH,2EAA2E;IAC3E,2DAA2D;IAC3D,MAAM,OAAO,GAAG,UAAU,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IAClD,aAAa,CACX,OAAO,EACP,yCAAyC,SAAS,2BAA2B,CAC9E,CAAC;IAEF,OAAO,OAAO,CAAC;AACjB,CAAC,CACF,CAAC"}

package/dist/service/apigateway/api/sim-rest-api-proxy-authorizer.d.ts

@@ -0,0 +1,70 @@
+import type { SimAws } from "../../aws/sim-aws.js";
+import type { SimRestApiTokenAuthorizerEvent } from "../serve/auth/sim-rest-api-authorizer-event.js";
+import type { SimRestApiRequestAuthorizerEvent } from "../serve/auth/sim-rest-api-request-authorizer-event.js";
+/**
+ * How the methods of a test's REST API say who may call them.
+ */
+export interface SimRestApiProxyAuthorization {
+    readonly authorizationType: string;
+    readonly authorizerId?: string | undefined;
+    readonly authorizationScopes?: readonly string[] | undefined;
+}
+/**
+ * What a test asks for when it wants its REST API gated by an authorizer.
+ *
+ * The two Lambda kinds hand their function different events, so a test says
+ * which it is writing by which handler it supplies rather than by naming a
+ * type. A `REQUEST` handler wins where both are given.
+ */
+export interface SimRestApiProxyAuthorizerInput {
+    /**
+     * The Account the functions belong to, which need not be the API's. An
+     * integration URI and an authorizer URI are each free to name another one.
+     */
+    readonly functionAccountId: string;
+    readonly roleArn: string;
+    /** The function a `TOKEN` authorizer invokes, which decides every request. */
+    readonly authorizerHandler: ((event: SimRestApiTokenAuthorizerEvent) => unknown) | undefined;
+    /** The function a `REQUEST` authorizer invokes instead. */
+    readonly requestAuthorizerHandler: ((event: SimRestApiRequestAuthorizerEvent) => unknown) | undefined;
+    /**
+     * The user pools a `COGNITO_USER_POOLS` authorizer accepts tokens from,
+     * named by ARN. Supplying them gates every method with that authorizer
+     * instead of a Lambda one, and it invokes nothing.
+     */
+    readonly cognitoUserPoolArns: readonly string[] | undefined;
+    /** The scopes each method asks a verified token for. */
+    readonly authorizationScopes: readonly string[];
+    /**
+     * Whether every method is authorized by IAM, which is what an `AWS_IAM`
+     * method asks for. An API asking for this names no authorizer.
+     */
+    readonly iamAuthorization: boolean;
+    /**
+     * Where the authorizer looks for what identifies a caller. A `REQUEST`
+     * authorizer writes as many expressions as it likes, separated by commas.
+     */
+    readonly authorizerIdentitySource: string;
+    /**
+     * How long a Lambda authorizer holds a decision for, with zero meaning none,
+     * which is what an authorizer says nothing about it gets.
+     */
+    readonly authorizerResultTtlSeconds: number;
+    /**
+     * Whether the authorizer's function grants the API permission to invoke it,
+     * under the ARN naming the authorizer. A test about that permission turns
+     * this off.
+     */
+    readonly authorizerInvokePermission: boolean;
+}
+/**
+ * Create the authorizer a test's REST API gates its methods with, and answer
+ * how the methods name it.
+ *
+ * An API with no authorizer function, no user pools and no IAM authorization
+ * declares open methods, which is what a test about anything else wants. An
+ * `AWS_IAM` method names no authorizer, so a test asking for both is asking
+ * for something PutMethod refuses, and gets that refusal.
+ */
+export declare function simRestApiProxyAuthorization(simAws: SimAws, input: SimRestApiProxyAuthorizerInput, restApiId: string): Promise<SimRestApiProxyAuthorization>;
+//# sourceMappingURL=sim-rest-api-proxy-authorizer.d.ts.map

package/dist/service/apigateway/api/sim-rest-api-proxy-authorizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-proxy-authorizer.d.ts","sourceRoot":"","sources":["../../../../src/service/apigateway/api/sim-rest-api-proxy-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,gDAAgD,CAAC;AACrG,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,wDAAwD,CAAC;AAG/G;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,mBAAmB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;CAC9D;AAED;;;;;;GAMG;AACH,MAAM,WAAW,8BAA8B;IAC7C;;;OAGG;IACH,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,8EAA8E;IAC9E,QAAQ,CAAC,iBAAiB,EACtB,CAAC,CAAC,KAAK,EAAE,8BAA8B,KAAK,OAAO,CAAC,GACpD,SAAS,CAAC;IACd,2DAA2D;IAC3D,QAAQ,CAAC,wBAAwB,EAC7B,CAAC,CAAC,KAAK,EAAE,gCAAgC,KAAK,OAAO,CAAC,GACtD,SAAS,CAAC;IACd;;;;OAIG;IACH,QAAQ,CAAC,mBAAmB,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAC5D,wDAAwD;IACxD,QAAQ,CAAC,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAC;IAChD;;;OAGG;IACH,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC;;;OAGG;IACH,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;IAC1C;;;OAGG;IACH,QAAQ,CAAC,0BAA0B,EAAE,MAAM,CAAC;IAC5C;;;;OAIG;IACH,QAAQ,CAAC,0BAA0B,EAAE,OAAO,CAAC;CAC9C;AAED;;;;;;;;GAQG;AACH,wBAAsB,4BAA4B,CAChD,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,8BAA8B,EACrC,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,4BAA4B,CAAC,CAkCvC"}

package/dist/service/apigateway/api/sim-rest-api-proxy-authorizer.js

@@ -0,0 +1,37 @@
+import { simRestApiProxyLambdaAuthorizer } from "./sim-rest-api-proxy-lambda-authorizer.js";
+/**
+ * Create the authorizer a test's REST API gates its methods with, and answer
+ * how the methods name it.
+ *
+ * An API with no authorizer function, no user pools and no IAM authorization
+ * declares open methods, which is what a test about anything else wants. An
+ * `AWS_IAM` method names no authorizer, so a test asking for both is asking
+ * for something PutMethod refuses, and gets that refusal.
+ */
+export async function simRestApiProxyAuthorization(simAws, input, restApiId) {
+    const providerARNs = input.cognitoUserPoolArns;
+    if (providerARNs !== undefined) {
+        const { id } = await simAws.apiGateway().createAuthorizer({
+            input: {
+                restApiId,
+                name: "orders-user-pools",
+                type: "COGNITO_USER_POOLS",
+                providerARNs,
+                identitySource: input.authorizerIdentitySource,
+            },
+        });
+        return {
+            authorizationType: "COGNITO_USER_POOLS",
+            authorizerId: id,
+            authorizationScopes: input.authorizationScopes,
+        };
+    }
+    const authorizerId = await simRestApiProxyLambdaAuthorizer(simAws, input, restApiId);
+    if (authorizerId !== undefined) {
+        return { authorizationType: "CUSTOM", authorizerId };
+    }
+    return {
+        authorizationType: input.iamAuthorization ? "AWS_IAM" : "NONE",
+    };
+}
+//# sourceMappingURL=sim-rest-api-proxy-authorizer.js.map

package/dist/service/apigateway/api/sim-rest-api-proxy-authorizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-proxy-authorizer.js","sourceRoot":"","sources":["../../../../src/service/apigateway/api/sim-rest-api-proxy-authorizer.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,+BAA+B,EAAE,MAAM,2CAA2C,CAAC;AAgE5F;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,MAAc,EACd,KAAqC,EACrC,SAAiB;IAEjB,MAAM,YAAY,GAAG,KAAK,CAAC,mBAAmB,CAAC;IAE/C,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC,gBAAgB,CAAC;YACxD,KAAK,EAAE;gBACL,SAAS;gBACT,IAAI,EAAE,mBAAmB;gBACzB,IAAI,EAAE,oBAAoB;gBAC1B,YAAY;gBACZ,cAAc,EAAE,KAAK,CAAC,wBAAwB;aAC/C;SACF,CAAC,CAAC;QAEH,OAAO;YACL,iBAAiB,EAAE,oBAAoB;YACvC,YAAY,EAAE,EAAE;YAChB,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;SAC/C,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,+BAA+B,CACxD,MAAM,EACN,KAAK,EACL,SAAS,CACV,CAAC;IAEF,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;IACvD,CAAC;IAED,OAAO;QACL,iBAAiB,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM;KAC/D,CAAC;AACJ,CAAC"}

package/dist/service/apigateway/api/sim-rest-api-proxy-function.d.ts

@@ -0,0 +1,25 @@
+import type { SimAws } from "../../aws/sim-aws.js";
+interface SimRestApiProxyFunctionInput {
+    readonly functionAccountId: string;
+    readonly functionName: string;
+    readonly roleArn: string;
+    readonly handler: (event: never) => unknown;
+}
+/**
+ * Create the simulated Lambda function a test's REST API proxies to, and
+ * answer its ARN.
+ */
+export declare function simRestApiProxyFunction(simAws: SimAws, input: SimRestApiProxyFunctionInput): Promise<string>;
+/**
+ * Grant the API permission to invoke the function, the way CDK writes it.
+ *
+ * The ARN names the API's own Account and Region, which is where the request
+ * arrives, whatever Account the function belongs to. Every stage and method of
+ * the API is wildcarded, as a `LambdaRestApi` grant is.
+ */
+export declare function simRestApiInvokePermission(simAws: SimAws, input: {
+    readonly functionAccountId: string;
+    readonly functionName: string;
+}, restApiId: string): Promise<void>;
+export {};
+//# sourceMappingURL=sim-rest-api-proxy-function.d.ts.map

package/dist/service/apigateway/api/sim-rest-api-proxy-function.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-proxy-function.d.ts","sourceRoot":"","sources":["../../../../src/service/apigateway/api/sim-rest-api-proxy-function.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAInD,UAAU,4BAA4B;IACpC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,OAAO,CAAC;CAC7C;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,4BAA4B,GAClC,OAAO,CAAC,MAAM,CAAC,CAajB;AAED;;;;;;GAMG;AACH,wBAAsB,0BAA0B,CAC9C,MAAM,EAAE,MAAM,EACd,KAAK,EAAE;IAAE,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAAE,EAC5E,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CAgBf"}

package/dist/service/apigateway/api/sim-rest-api-proxy-function.js

@@ -0,0 +1,42 @@
+import { makeLambdaZipFileInput } from "../../lambda/function/code/lambda-zip-file-input.js";
+import { simApiGatewayServicePrincipal } from "../sim-api-gateway-service-principal.js";
+/**
+ * Create the simulated Lambda function a test's REST API proxies to, and
+ * answer its ARN.
+ */
+export async function simRestApiProxyFunction(simAws, input) {
+    const { FunctionArn: functionArn } = await simAws
+        .account(input.functionAccountId)
+        .lambda()
+        .createFunction({
+        input: {
+            FunctionName: input.functionName,
+            Role: input.roleArn,
+            Code: { ZipFile: makeLambdaZipFileInput(input.handler) },
+        },
+    });
+    return functionArn;
+}
+/**
+ * Grant the API permission to invoke the function, the way CDK writes it.
+ *
+ * The ARN names the API's own Account and Region, which is where the request
+ * arrives, whatever Account the function belongs to. Every stage and method of
+ * the API is wildcarded, as a `LambdaRestApi` grant is.
+ */
+export async function simRestApiInvokePermission(simAws, input, restApiId) {
+    const { accountId, regionName } = simAws.accountRegionScope().accountRegionScope;
+    await simAws
+        .account(input.functionAccountId)
+        .lambda()
+        .addPermission({
+        input: {
+            FunctionName: input.functionName,
+            StatementId: "api-gateway-invoke",
+            Action: "lambda:InvokeFunction",
+            Principal: simApiGatewayServicePrincipal,
+            SourceArn: `arn:aws:execute-api:${regionName}:${accountId}:${restApiId}/*/*/*`,
+        },
+    });
+}
+//# sourceMappingURL=sim-rest-api-proxy-function.js.map

package/dist/service/apigateway/api/sim-rest-api-proxy-function.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-proxy-function.js","sourceRoot":"","sources":["../../../../src/service/apigateway/api/sim-rest-api-proxy-function.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,qDAAqD,CAAC;AAC7F,OAAO,EAAE,6BAA6B,EAAE,MAAM,yCAAyC,CAAC;AASxF;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,MAAc,EACd,KAAmC;IAEnC,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM;SAC9C,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC;SAChC,MAAM,EAAE;SACR,cAAc,CAAC;QACd,KAAK,EAAE;YACL,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,IAAI,EAAE,KAAK,CAAC,OAAO;YACnB,IAAI,EAAE,EAAE,OAAO,EAAE,sBAAsB,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE;SACzD;KACF,CAAC,CAAC;IAEL,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,MAAc,EACd,KAA4E,EAC5E,SAAiB;IAEjB,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAC7B,MAAM,CAAC,kBAAkB,EAAE,CAAC,kBAAkB,CAAC;IAEjD,MAAM,MAAM;SACT,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC;SAChC,MAAM,EAAE;SACR,aAAa,CAAC;QACb,KAAK,EAAE;YACL,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,WAAW,EAAE,oBAAoB;YACjC,MAAM,EAAE,uBAAuB;YAC/B,SAAS,EAAE,6BAA6B;YACxC,SAAS,EAAE,uBAAuB,UAAU,IAAI,SAAS,IAAI,SAAS,QAAQ;SAC/E;KACF,CAAC,CAAC;AACP,CAAC"}

package/dist/service/apigateway/api/sim-rest-api-proxy-lambda-authorizer.d.ts

@@ -0,0 +1,13 @@
+import type { SimAws } from "../../aws/sim-aws.js";
+import type { SimRestApiProxyAuthorizerInput } from "./sim-rest-api-proxy-authorizer.js";
+/**
+ * Create the Lambda authorizer a test's REST API gates its methods with, and
+ * answer its id.
+ *
+ * The function is a second one beside the integration's, because a REST API
+ * authorizer is invoked under an ARN naming the authorizer rather than any
+ * method, and needs a grant of its own. That grant is the one CDK's
+ * `TokenAuthorizer` and `RequestAuthorizer` write.
+ */
+export declare function simRestApiProxyLambdaAuthorizer(simAws: SimAws, input: SimRestApiProxyAuthorizerInput, restApiId: string): Promise<string | undefined>;
+//# sourceMappingURL=sim-rest-api-proxy-lambda-authorizer.d.ts.map

package/dist/service/apigateway/api/sim-rest-api-proxy-lambda-authorizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-proxy-lambda-authorizer.d.ts","sourceRoot":"","sources":["../../../../src/service/apigateway/api/sim-rest-api-proxy-lambda-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAInD,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,oCAAoC,CAAC;AA8BzF;;;;;;;;GAQG;AACH,wBAAsB,+BAA+B,CACnD,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,8BAA8B,EACrC,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CA8C7B"}

package/dist/service/apigateway/api/sim-rest-api-proxy-lambda-authorizer.js

@@ -0,0 +1,71 @@
+import { makeLambdaZipFileInput } from "../../lambda/function/code/lambda-zip-file-input.js";
+import { simApiGatewayServicePrincipal } from "../sim-api-gateway-service-principal.js";
+/**
+ * The kind of authorizer a test asked for and the code of its function, or
+ * nothing at all where it asked for no Lambda authorizer.
+ *
+ * The two handlers are read apart rather than together because each is written
+ * against the event its own kind of authorizer receives.
+ */
+function authorizerFunction(input) {
+    const { authorizerHandler, requestAuthorizerHandler } = input;
+    if (requestAuthorizerHandler !== undefined) {
+        return {
+            type: "REQUEST",
+            code: makeLambdaZipFileInput(requestAuthorizerHandler),
+        };
+    }
+    if (authorizerHandler !== undefined) {
+        return { type: "TOKEN", code: makeLambdaZipFileInput(authorizerHandler) };
+    }
+    return undefined;
+}
+/**
+ * Create the Lambda authorizer a test's REST API gates its methods with, and
+ * answer its id.
+ *
+ * The function is a second one beside the integration's, because a REST API
+ * authorizer is invoked under an ARN naming the authorizer rather than any
+ * method, and needs a grant of its own. That grant is the one CDK's
+ * `TokenAuthorizer` and `RequestAuthorizer` write.
+ */
+export async function simRestApiProxyLambdaAuthorizer(simAws, input, restApiId) {
+    const authorizerFn = authorizerFunction(input);
+    if (authorizerFn === undefined) {
+        return undefined;
+    }
+    const lambda = simAws.account(input.functionAccountId).lambda();
+    const name = `${restApiId}-authorizer`;
+    const created = await lambda.createFunction({
+        input: {
+            FunctionName: name,
+            Role: input.roleArn,
+            Code: { ZipFile: authorizerFn.code },
+        },
+    });
+    const { id } = await simAws.apiGateway().createAuthorizer({
+        input: {
+            restApiId,
+            name: "orders-authorizer",
+            type: authorizerFn.type,
+            authorizerUri: created.FunctionArn,
+            identitySource: input.authorizerIdentitySource,
+            authorizerResultTtlInSeconds: input.authorizerResultTtlSeconds,
+        },
+    });
+    if (input.authorizerInvokePermission) {
+        const { accountId, regionName } = simAws.accountRegionScope().accountRegionScope;
+        await lambda.addPermission({
+            input: {
+                FunctionName: name,
+                StatementId: "api-gateway-invoke-authorizer",
+                Action: "lambda:InvokeFunction",
+                Principal: simApiGatewayServicePrincipal,
+                SourceArn: `arn:aws:execute-api:${regionName}:${accountId}:` +
+                    `${restApiId}/authorizers/${id}`,
+            },
+        });
+    }
+    return id;
+}
+//# sourceMappingURL=sim-rest-api-proxy-lambda-authorizer.js.map

package/dist/service/apigateway/api/sim-rest-api-proxy-lambda-authorizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-proxy-lambda-authorizer.js","sourceRoot":"","sources":["../../../../src/service/apigateway/api/sim-rest-api-proxy-lambda-authorizer.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,qDAAqD,CAAC;AAE7F,OAAO,EAAE,6BAA6B,EAAE,MAAM,yCAAyC,CAAC;AAGxF;;;;;;GAMG;AACH,SAAS,kBAAkB,CACzB,KAAqC;IAIrC,MAAM,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,GAAG,KAAK,CAAC;IAE9D,IAAI,wBAAwB,KAAK,SAAS,EAAE,CAAC;QAC3C,OAAO;YACL,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,sBAAsB,CAAC,wBAAwB,CAAC;SACvD,CAAC;IACJ,CAAC;IAED,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACpC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,sBAAsB,CAAC,iBAAiB,CAAC,EAAE,CAAC;IAC5E,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,MAAc,EACd,KAAqC,EACrC,SAAiB;IAEjB,MAAM,YAAY,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAE/C,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,MAAM,EAAE,CAAC;IAChE,MAAM,IAAI,GAAG,GAAG,SAAS,aAAa,CAAC;IACvC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC;QAC1C,KAAK,EAAE;YACL,YAAY,EAAE,IAAI;YAClB,IAAI,EAAE,KAAK,CAAC,OAAO;YACnB,IAAI,EAAE,EAAE,OAAO,EAAE,YAAY,CAAC,IAAI,EAAE;SACrC;KACF,CAAC,CAAC;IAEH,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC,gBAAgB,CAAC;QACxD,KAAK,EAAE;YACL,SAAS;YACT,IAAI,EAAE,mBAAmB;YACzB,IAAI,EAAE,YAAY,CAAC,IAAI;YACvB,aAAa,EAAE,OAAO,CAAC,WAAW;YAClC,cAAc,EAAE,KAAK,CAAC,wBAAwB;YAC9C,4BAA4B,EAAE,KAAK,CAAC,0BAA0B;SAC/D;KACF,CAAC,CAAC;IAEH,IAAI,KAAK,CAAC,0BAA0B,EAAE,CAAC;QACrC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAC7B,MAAM,CAAC,kBAAkB,EAAE,CAAC,kBAAkB,CAAC;QAEjD,MAAM,MAAM,CAAC,aAAa,CAAC;YACzB,KAAK,EAAE;gBACL,YAAY,EAAE,IAAI;gBAClB,WAAW,EAAE,+BAA+B;gBAC5C,MAAM,EAAE,uBAAuB;gBAC/B,SAAS,EAAE,6BAA6B;gBACxC,SAAS,EACP,uBAAuB,UAAU,IAAI,SAAS,GAAG;oBACjD,GAAG,SAAS,gBAAgB,EAAE,EAAE;aACnC;SACF,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/dist/service/apigateway/api/sim-rest-api-store.d.ts

@@ -0,0 +1,29 @@
+import type { SimRestApiId } from "./sim-rest-api-id.js";
+import type { SimRestApi } from "./sim-rest-api.js";
+/**
+ * The REST APIs of one Account and Region, keyed by id.
+ *
+ * A REST API has no unique name on real AWS. Two APIs in one Account and
+ * Region may share a name, and only the id tells them apart, so that is what
+ * this stores them by.
+ */
+export declare class SimRestApiStore {
+    private readonly apis;
+    /**
+     * Add an API to this scope.
+     */
+    add(api: SimRestApi): void;
+    /**
+     * Find an API by id.
+     */
+    find(apiId: string): SimRestApi | undefined;
+    /**
+     * Forget an API, as DeleteRestApi does.
+     */
+    remove(apiId: SimRestApiId): void;
+    /**
+     * List every API in this scope, in the order they were created.
+     */
+    list(): SimRestApi[];
+}
+//# sourceMappingURL=sim-rest-api-store.d.ts.map

package/dist/service/apigateway/api/sim-rest-api-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-store.d.ts","sourceRoot":"","sources":["../../../../src/service/apigateway/api/sim-rest-api-store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAEpD;;;;;;GAMG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAuC;IAE5D;;OAEG;IACH,GAAG,CAAC,GAAG,EAAE,UAAU,GAAG,IAAI,CAEzB;IAED;;OAEG;IACH,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAE1C;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,CAEhC;IAED;;OAEG;IACH,IAAI,IAAI,UAAU,EAAE,CAEnB;CACF"}

package/dist/service/apigateway/api/sim-rest-api-store.js

@@ -0,0 +1,35 @@
+/**
+ * The REST APIs of one Account and Region, keyed by id.
+ *
+ * A REST API has no unique name on real AWS. Two APIs in one Account and
+ * Region may share a name, and only the id tells them apart, so that is what
+ * this stores them by.
+ */
+export class SimRestApiStore {
+    apis = new Map();
+    /**
+     * Add an API to this scope.
+     */
+    add(api) {
+        this.apis.set(api.apiId, api);
+    }
+    /**
+     * Find an API by id.
+     */
+    find(apiId) {
+        return this.apis.get(apiId);
+    }
+    /**
+     * Forget an API, as DeleteRestApi does.
+     */
+    remove(apiId) {
+        this.apis.delete(apiId);
+    }
+    /**
+     * List every API in this scope, in the order they were created.
+     */
+    list() {
+        return this.apis.values().toArray();
+    }
+}
+//# sourceMappingURL=sim-rest-api-store.js.map

package/dist/service/apigateway/api/sim-rest-api-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-store.js","sourceRoot":"","sources":["../../../../src/service/apigateway/api/sim-rest-api-store.ts"],"names":[],"mappings":"AAGA;;;;;;GAMG;AACH,MAAM,OAAO,eAAe;IACT,IAAI,GAAG,IAAI,GAAG,EAA4B,CAAC;IAE5D;;OAEG;IACH,GAAG,CAAC,GAAe;QACjB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,KAAa;QAChB,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAqB,CAAC,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAmB;QACxB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,IAAI;QACF,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;IACtC,CAAC;CACF"}

package/dist/service/apigateway/api/sim-rest-api-view.d.ts

@@ -0,0 +1,20 @@
+import type { SimRestApi } from "./sim-rest-api.js";
+/**
+ * Minimal structural REST API view, as the Create and Get commands return.
+ */
+export interface SimRestApiView {
+    id: string;
+    name: string;
+    createdDate: Date;
+    rootResourceId: string;
+    disableExecuteApiEndpoint: boolean;
+    description?: string;
+}
+/**
+ * Build the AWS-like view of a REST API.
+ *
+ * The creation time is copied, since a Date is mutable and a caller holding
+ * the stored one could change when the API says it was created.
+ */
+export declare function simRestApiView(restApi: SimRestApi): SimRestApiView;
+//# sourceMappingURL=sim-rest-api-view.d.ts.map

package/dist/service/apigateway/api/sim-rest-api-view.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-view.d.ts","sourceRoot":"","sources":["../../../../src/service/apigateway/api/sim-rest-api-view.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAEpD;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,IAAI,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,yBAAyB,EAAE,OAAO,CAAC;IACnC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,UAAU,GAAG,cAAc,CAclE"}