@kensio/yulin 1.17.2 → 1.18.1

package/dist/service/apigateway/command/api/sim-rest-api-import-input.js

@@ -0,0 +1,96 @@
+import { SimApiGatewayBadRequest } from "../../error/sim-api-gateway.error.js";
+import { SimRestApiOpenApiDocument } from "../../openapi/sim-rest-api-openapi-document.js";
+import { SimApiGatewayUnsimulatedInput } from "../sim-api-gateway-unsimulated-input.js";
+const acceptedImportOptions = ["body", "failOnWarnings"];
+const acceptedPutOptions = ["restApiId", "mode", "body", "failOnWarnings"];
+/**
+ * The one update mode simulated, which replaces the API's whole definition.
+ */
+const simulatedMode = "overwrite";
+/**
+ * Reads the inputs the two importing commands take, refusing the rest by name.
+ *
+ * `parameters` is outside both accepted sets. It carries the endpoint type,
+ * the base path handling and whether documentation parts are imported, and
+ * none of the three is simulated.
+ */
+export class SimRestApiImportInput {
+    /**
+     * The document `ImportRestApi` declares a new API with.
+     *
+     * It is parsed before anything else looks at the request, so a document this
+     * simulation cannot read creates no API at all.
+     */
+    importDocument(input) {
+        const unsimulated = new SimApiGatewayUnsimulatedInput("ImportRestApi");
+        unsimulated.refuseUnaccepted(input, acceptedImportOptions);
+        this.requireStrictWarnings("ImportRestApi", input.failOnWarnings);
+        return this.document(unsimulated, input.body);
+    }
+    /**
+     * The document `PutRestApi` replaces an API's definition with.
+     */
+    putDocument(input) {
+        const unsimulated = new SimApiGatewayUnsimulatedInput("PutRestApi");
+        unsimulated.refuseUnaccepted(input, acceptedPutOptions);
+        this.requireStrictWarnings("PutRestApi", input.failOnWarnings);
+        this.requireOverwriteMode(input.mode);
+        return this.document(unsimulated, input.body);
+    }
+    /**
+     * Read the request body, which the SDK sends as bytes.
+     *
+     * A stream is refused rather than read, because a document has to be parsed
+     * before the request is answered and reading a stream is asynchronous.
+     */
+    document(unsimulated, body) {
+        return SimRestApiOpenApiDocument.parse(unsimulated.require("body", this.text(body)));
+    }
+    /**
+     * The document as text, whichever of the body types it arrived as.
+     */
+    text(body) {
+        if (body === undefined || typeof body === "string") {
+            return body;
+        }
+        if (body instanceof Uint8Array) {
+            return Buffer.from(body).toString();
+        }
+        throw new SimApiGatewayBadRequest("Only string and Uint8Array OpenAPI documents are read: a stream or a " +
+            "Blob would have to be read before the request could be answered");
+    }
+    /**
+     * Refuse the lenient half of `failOnWarnings`.
+     *
+     * Everything this simulation cannot apply is refused rather than warned
+     * about, which is what `true` asks for, so the behaviour `false` selects is
+     * refused rather than quietly ignored. AWS takes `false` as the default, so
+     * this is refused where it is written rather than where it is left out.
+     */
+    requireStrictWarnings(operation, failOnWarnings) {
+        if (failOnWarnings !== false) {
+            return;
+        }
+        throw new SimApiGatewayBadRequest(`${operation} failOnWarnings false is not simulated: an import ` +
+            `carrying on past a warning would create an API here that AWS ` +
+            `created differently`);
+    }
+    /**
+     * Refuse an update mode that is not a whole replacement.
+     *
+     * AWS takes `merge` as the default, and a merge adds the document's paths to
+     * the API's existing ones. Which of two declarations of one method it keeps
+     * decides what every request to that method reaches, so the mode is required
+     * here rather than defaulted to the one AWS would have merged.
+     */
+    requireOverwriteMode(mode) {
+        if (mode === simulatedMode) {
+            return;
+        }
+        throw new SimApiGatewayBadRequest(`PutRestApi mode '${mode ?? "merge"}' is not simulated: merging a ` +
+            `document into an API's existing definition is not simulated, and ` +
+            `merge is the mode AWS takes when none is given. Ask for ` +
+            `'${simulatedMode}' to replace the API's definition.`);
+    }
+}
+//# sourceMappingURL=sim-rest-api-import-input.js.map

package/dist/service/apigateway/command/api/sim-rest-api-import-input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-import-input.js","sourceRoot":"","sources":["../../../../../src/service/apigateway/command/api/sim-rest-api-import-input.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AAC/E,OAAO,EAAE,yBAAyB,EAAE,MAAM,gDAAgD,CAAC;AAC3F,OAAO,EAAE,6BAA6B,EAAE,MAAM,yCAAyC,CAAC;AAOxF,MAAM,qBAAqB,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;AAEzD,MAAM,kBAAkB,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;AAE3E;;GAEG;AACH,MAAM,aAAa,GAAG,WAAW,CAAC;AAElC;;;;;;GAMG;AACH,MAAM,OAAO,qBAAqB;IAChC;;;;;OAKG;IACH,cAAc,CACZ,KAAmC;QAEnC,MAAM,WAAW,GAAG,IAAI,6BAA6B,CAAC,eAAe,CAAC,CAAC;QACvE,WAAW,CAAC,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;QAC3D,IAAI,CAAC,qBAAqB,CAAC,eAAe,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;QAElE,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,KAAgC;QAC1C,MAAM,WAAW,GAAG,IAAI,6BAA6B,CAAC,YAAY,CAAC,CAAC;QACpE,WAAW,CAAC,gBAAgB,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;QACxD,IAAI,CAAC,qBAAqB,CAAC,YAAY,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;QAC/D,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAEtC,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC;IAED;;;;;OAKG;IACK,QAAQ,CACd,WAA0C,EAC1C,IAA0C;QAE1C,OAAO,yBAAyB,CAAC,KAAK,CACpC,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAC7C,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,IAAI,CAAC,IAA0C;QACrD,IAAI,IAAI,KAAK,SAAS,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACnD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,IAAI,YAAY,UAAU,EAAE,CAAC;YAC/B,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACtC,CAAC;QAED,MAAM,IAAI,uBAAuB,CAC/B,uEAAuE;YACrE,iEAAiE,CACpE,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACK,qBAAqB,CAC3B,SAAiB,EACjB,cAAmC;QAEnC,IAAI,cAAc,KAAK,KAAK,EAAE,CAAC;YAC7B,OAAO;QACT,CAAC;QAED,MAAM,IAAI,uBAAuB,CAC/B,GAAG,SAAS,oDAAoD;YAC9D,+DAA+D;YAC/D,qBAAqB,CACxB,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACK,oBAAoB,CAAC,IAAwB;QACnD,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;YAC3B,OAAO;QACT,CAAC;QAED,MAAM,IAAI,uBAAuB,CAC/B,oBAAoB,IAAI,IAAI,OAAO,gCAAgC;YACjE,mEAAmE;YACnE,0DAA0D;YAC1D,IAAI,aAAa,oCAAoC,CACxD,CAAC;IACJ,CAAC;CACF"}

package/dist/service/apigateway/command/api/sim-rest-api-patch.d.ts

@@ -0,0 +1,19 @@
+import type { SimRestApiPatchOperation } from "./rest-api.command.js";
+/**
+ * What an update asks to change about a REST API.
+ */
+export interface SimRestApiPatch {
+    readonly name?: string | undefined;
+    readonly description?: string | undefined;
+}
+/**
+ * Read the patch operations of an `UpdateRestApi` request.
+ *
+ * Every API Gateway v1 update is written this way, as a list of JSON-Patch
+ * style operations against the resource being changed, rather than as the
+ * fields to set. Only replacing the name and the description is simulated, and
+ * anything else is refused so an update cannot look applied here and change
+ * something on real AWS.
+ */
+export declare function simRestApiPatchOf(operations: readonly SimRestApiPatchOperation[]): SimRestApiPatch;
+//# sourceMappingURL=sim-rest-api-patch.d.ts.map

package/dist/service/apigateway/command/api/sim-rest-api-patch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-patch.d.ts","sourceRoot":"","sources":["../../../../../src/service/apigateway/command/api/sim-rest-api-patch.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAStE;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3C;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,SAAS,wBAAwB,EAAE,GAC9C,eAAe,CAejB"}

package/dist/service/apigateway/command/api/sim-rest-api-patch.js

@@ -0,0 +1,54 @@
+import { SimApiGatewayBadRequest } from "../../error/sim-api-gateway.error.js";
+/**
+ * The paths of a REST API an update can replace.
+ */
+const replaceablePaths = ["/name", "/description"];
+/**
+ * Read the patch operations of an `UpdateRestApi` request.
+ *
+ * Every API Gateway v1 update is written this way, as a list of JSON-Patch
+ * style operations against the resource being changed, rather than as the
+ * fields to set. Only replacing the name and the description is simulated, and
+ * anything else is refused so an update cannot look applied here and change
+ * something on real AWS.
+ */
+export function simRestApiPatchOf(operations) {
+    const patch = {};
+    for (const operation of operations) {
+        assertReplace(operation);
+        const path = assertReplaceablePath(operation);
+        if (path === "/name") {
+            patch.name = requireValue(operation);
+        }
+        else {
+            patch.description = operation.value ?? "";
+        }
+    }
+    return patch;
+}
+function assertReplace(operation) {
+    if (operation.op === "replace") {
+        return;
+    }
+    throw new SimApiGatewayBadRequest(`UpdateRestApi op '${operation.op ?? ""}' is not simulated: only ` +
+        `'replace' is supported`);
+}
+function assertReplaceablePath(operation) {
+    const path = operation.path ?? "";
+    if (!isReplaceablePath(path)) {
+        throw new SimApiGatewayBadRequest(`UpdateRestApi path '${path}' is not simulated: only ` +
+            `${replaceablePaths.map((one) => `'${one}'`).join(" and ")} can be ` +
+            `replaced`);
+    }
+    return path;
+}
+function isReplaceablePath(path) {
+    return replaceablePaths.includes(path);
+}
+function requireValue(operation) {
+    if (operation.value === undefined || operation.value.length === 0) {
+        throw new SimApiGatewayBadRequest(`UpdateRestApi replacing ${operation.path ?? ""} requires a value`);
+    }
+    return operation.value;
+}
+//# sourceMappingURL=sim-rest-api-patch.js.map

package/dist/service/apigateway/command/api/sim-rest-api-patch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-patch.js","sourceRoot":"","sources":["../../../../../src/service/apigateway/command/api/sim-rest-api-patch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AAG/E;;GAEG;AACH,MAAM,gBAAgB,GAAG,CAAC,OAAO,EAAE,cAAc,CAAU,CAAC;AAY5D;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAC/B,UAA+C;IAE/C,MAAM,KAAK,GAA4C,EAAE,CAAC;IAE1D,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,aAAa,CAAC,SAAS,CAAC,CAAC;QACzB,MAAM,IAAI,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;QAE9C,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,KAAK,CAAC,IAAI,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;QACvC,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,WAAW,GAAG,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,SAAmC;IACxD,IAAI,SAAS,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO;IACT,CAAC;IAED,MAAM,IAAI,uBAAuB,CAC/B,qBAAqB,SAAS,CAAC,EAAE,IAAI,EAAE,2BAA2B;QAChE,wBAAwB,CAC3B,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAC5B,SAAmC;IAEnC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC;IAElC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,uBAAuB,CAC/B,uBAAuB,IAAI,2BAA2B;YACpD,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU;YACpE,UAAU,CACb,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,OAAQ,gBAAsC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,YAAY,CAAC,SAAmC;IACvD,IAAI,SAAS,CAAC,KAAK,KAAK,SAAS,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,uBAAuB,CAC/B,2BAA2B,SAAS,CAAC,IAAI,IAAI,EAAE,mBAAmB,CACnE,CAAC;IACJ,CAAC;IAED,OAAO,SAAS,CAAC,KAAK,CAAC;AACzB,CAAC"}

package/dist/service/apigateway/command/authorize/sim-api-gateway-authorizer.d.ts

@@ -0,0 +1,42 @@
+import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
+import type { SimAwsAccountRegionScope } from "../../../aws/sim-aws-account-region-scope.js";
+import type { SimIamInterServiceAuthZ } from "../../../iam/authorize/sim-iam-inter-service-auth-z.js";
+/**
+ * The HTTP methods the API Gateway control plane authorizes against.
+ */
+export type SimApiGatewayMethod = "GET" | "POST" | "PUT" | "DELETE" | "PATCH";
+interface SimApiGatewayAuthorizerProperties {
+    readonly iam: SimIamInterServiceAuthZ;
+    readonly accountRegionScope: SimAwsAccountRegionScope;
+}
+/**
+ * Applies simulated IAM authorization to REST API control-plane commands.
+ *
+ * API Gateway is unusual in what it asks IAM. The action is the HTTP method of
+ * the underlying REST call, `apigateway:POST` and friends, rather than a name
+ * matching the SDK operation, and the resource is the request path rather than
+ * an ARN naming a resource type. So `CreateResource` on API `a1b2c3d4e5` asks
+ * whether the caller may `apigateway:POST` on
+ * `arn:aws:apigateway:<region>::/restapis/a1b2c3d4e5/resources`. A policy
+ * written the way policies for other services are written matches nothing
+ * here, as it matches nothing on real AWS.
+ *
+ * Those ARNs carry no Account id. API Gateway control-plane ARNs leave the
+ * Account segment empty, and the same is true of the v2 API.
+ */
+export declare class SimApiGatewayAuthorizer {
+    private readonly actions;
+    private readonly accountRegionScope;
+    constructor(properties: SimApiGatewayAuthorizerProperties);
+    /**
+     * Ensure the caller may make a request to an API Gateway resource path.
+     *
+     * The resource need not exist. Real IAM evaluates a request before the
+     * service handles it, so a caller with no permission is refused whether or
+     * not the API is there, and CreateRestApi authorizes against the collection
+     * it is about to add to.
+     */
+    authorize(method: SimApiGatewayMethod, resourcePath: string, caller?: SimAwsCaller): void;
+}
+export {};
+//# sourceMappingURL=sim-api-gateway-authorizer.d.ts.map

package/dist/service/apigateway/command/authorize/sim-api-gateway-authorizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-api-gateway-authorizer.d.ts","sourceRoot":"","sources":["../../../../../src/service/apigateway/command/authorize/sim-api-gateway-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAE7F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wDAAwD,CAAC;AAEtG;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAAG,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,OAAO,CAAC;AAE9E,UAAU,iCAAiC;IACzC,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;IACtC,QAAQ,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;CACvD;AAED;;;;;;;;;;;;;;GAcG;AACH,qBAAa,uBAAuB;IAClC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAyB;IACjD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA2B;IAE9D,YAAY,UAAU,EAAE,iCAAiC,EAGxD;IAED;;;;;;;OAOG;IACH,SAAS,CACP,MAAM,EAAE,mBAAmB,EAC3B,YAAY,EAAE,MAAM,EACpB,MAAM,CAAC,EAAE,YAAY,GACpB,IAAI,CAMN;CACF"}

package/dist/service/apigateway/command/authorize/sim-api-gateway-authorizer.js

@@ -0,0 +1,36 @@
+import { SimIamActionAuthorizer } from "../../../iam/authorize/sim-iam-action-authorizer.js";
+/**
+ * Applies simulated IAM authorization to REST API control-plane commands.
+ *
+ * API Gateway is unusual in what it asks IAM. The action is the HTTP method of
+ * the underlying REST call, `apigateway:POST` and friends, rather than a name
+ * matching the SDK operation, and the resource is the request path rather than
+ * an ARN naming a resource type. So `CreateResource` on API `a1b2c3d4e5` asks
+ * whether the caller may `apigateway:POST` on
+ * `arn:aws:apigateway:<region>::/restapis/a1b2c3d4e5/resources`. A policy
+ * written the way policies for other services are written matches nothing
+ * here, as it matches nothing on real AWS.
+ *
+ * Those ARNs carry no Account id. API Gateway control-plane ARNs leave the
+ * Account segment empty, and the same is true of the v2 API.
+ */
+export class SimApiGatewayAuthorizer {
+    actions;
+    accountRegionScope;
+    constructor(properties) {
+        this.actions = new SimIamActionAuthorizer({ iam: properties.iam });
+        this.accountRegionScope = properties.accountRegionScope;
+    }
+    /**
+     * Ensure the caller may make a request to an API Gateway resource path.
+     *
+     * The resource need not exist. Real IAM evaluates a request before the
+     * service handles it, so a caller with no permission is refused whether or
+     * not the API is there, and CreateRestApi authorizes against the collection
+     * it is about to add to.
+     */
+    authorize(method, resourcePath, caller) {
+        this.actions.authorize(`apigateway:${method}`, `arn:aws:apigateway:${this.accountRegionScope.regionName}::${resourcePath}`, caller);
+    }
+}
+//# sourceMappingURL=sim-api-gateway-authorizer.js.map

package/dist/service/apigateway/command/authorize/sim-api-gateway-authorizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-api-gateway-authorizer.js","sourceRoot":"","sources":["../../../../../src/service/apigateway/command/authorize/sim-api-gateway-authorizer.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,sBAAsB,EAAE,MAAM,qDAAqD,CAAC;AAa7F;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,uBAAuB;IACjB,OAAO,CAAyB;IAChC,kBAAkB,CAA2B;IAE9D,YAAY,UAA6C;QACvD,IAAI,CAAC,OAAO,GAAG,IAAI,sBAAsB,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC;QACnE,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;IAC1D,CAAC;IAED;;;;;;;OAOG;IACH,SAAS,CACP,MAA2B,EAC3B,YAAoB,EACpB,MAAqB;QAErB,IAAI,CAAC,OAAO,CAAC,SAAS,CACpB,cAAc,MAAM,EAAE,EACtB,sBAAsB,IAAI,CAAC,kBAAkB,CAAC,UAAU,KAAK,YAAY,EAAE,EAC3E,MAAM,CACP,CAAC;IACJ,CAAC;CACF"}

package/dist/service/apigateway/command/authorizer/authorizer.command.d.ts

@@ -0,0 +1,70 @@
+import type { SimResponseMetadata } from "../../../aws/metadata/response-metadata.type.js";
+import type { SimRestApiAuthorizerView } from "../../api/authorizer/sim-rest-api-authorizer.js";
+/**
+ * Minimal structural sim API Gateway CreateAuthorizer command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/api-gateway/command/CreateAuthorizerCommand/
+ */
+export interface SimCreateAuthorizerCommand {
+    readonly input: SimCreateAuthorizerCommandInput;
+}
+export interface SimCreateAuthorizerCommandInput {
+    readonly restApiId?: string | undefined;
+    readonly name?: string | undefined;
+    readonly type?: string | undefined;
+    readonly authorizerUri?: string | undefined;
+    readonly providerARNs?: readonly string[] | undefined;
+    readonly identitySource?: string | undefined;
+    readonly authorizerResultTtlInSeconds?: number | undefined;
+}
+export interface SimCreateAuthorizerCommandOutput extends SimRestApiAuthorizerView {
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * Minimal structural sim API Gateway GetAuthorizer command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/api-gateway/command/GetAuthorizerCommand/
+ */
+export interface SimGetAuthorizerCommand {
+    readonly input: SimGetAuthorizerCommandInput;
+}
+export interface SimGetAuthorizerCommandInput {
+    readonly restApiId?: string | undefined;
+    readonly authorizerId?: string | undefined;
+}
+export interface SimGetAuthorizerCommandOutput extends SimRestApiAuthorizerView {
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * Minimal structural sim API Gateway GetAuthorizers command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/api-gateway/command/GetAuthorizersCommand/
+ */
+export interface SimGetAuthorizersCommand {
+    readonly input: SimGetAuthorizersCommandInput;
+}
+export interface SimGetAuthorizersCommandInput {
+    readonly restApiId?: string | undefined;
+    readonly limit?: number | undefined;
+    readonly position?: string | undefined;
+}
+export interface SimGetAuthorizersCommandOutput {
+    readonly items: SimRestApiAuthorizerView[];
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * Minimal structural sim API Gateway DeleteAuthorizer command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/api-gateway/command/DeleteAuthorizerCommand/
+ */
+export interface SimDeleteAuthorizerCommand {
+    readonly input: SimDeleteAuthorizerCommandInput;
+}
+export interface SimDeleteAuthorizerCommandInput {
+    readonly restApiId?: string | undefined;
+    readonly authorizerId?: string | undefined;
+}
+export interface SimDeleteAuthorizerCommandOutput {
+    readonly $metadata: SimResponseMetadata;
+}
+//# sourceMappingURL=authorizer.command.d.ts.map

package/dist/service/apigateway/command/authorizer/authorizer.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorizer.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/apigateway/command/authorizer/authorizer.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,iDAAiD,CAAC;AAEhG;;;;GAIG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,KAAK,EAAE,+BAA+B,CAAC;CACjD;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACtD,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,4BAA4B,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5D;AAED,MAAM,WAAW,gCAAiC,SAAQ,wBAAwB;IAChF,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,4BAA4B,CAAC;CAC9C;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5C;AAED,MAAM,WAAW,6BAA8B,SAAQ,wBAAwB;IAC7E,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,KAAK,EAAE,6BAA6B,CAAC;CAC/C;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACxC;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,KAAK,EAAE,wBAAwB,EAAE,CAAC;IAC3C,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,KAAK,EAAE,+BAA+B,CAAC;CACjD;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5C;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC"}

package/dist/service/apigateway/command/authorizer/authorizer.command.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=authorizer.command.js.map

package/dist/service/apigateway/command/authorizer/authorizer.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorizer.command.js","sourceRoot":"","sources":["../../../../../src/service/apigateway/command/authorizer/authorizer.command.ts"],"names":[],"mappings":""}

package/dist/service/apigateway/command/authorizer/sim-rest-api-authorizer-commands.d.ts

@@ -0,0 +1,45 @@
+import type { SimApiGatewayRequestOptions } from "../sim-api-gateway-request-options.js";
+import type { SimRestApiAccess } from "../sim-rest-api-access.js";
+import type { SimCreateAuthorizerCommand, SimCreateAuthorizerCommandOutput, SimDeleteAuthorizerCommand, SimDeleteAuthorizerCommandOutput, SimGetAuthorizerCommand, SimGetAuthorizerCommandOutput, SimGetAuthorizersCommand, SimGetAuthorizersCommandOutput } from "./authorizer.command.js";
+interface SimRestApiAuthorizerCommandsProperties {
+    readonly access: SimRestApiAccess;
+}
+/**
+ * The commands addressing the authorizers of a REST API.
+ */
+export declare class SimRestApiAuthorizerCommands {
+    private readonly access;
+    constructor(properties: SimRestApiAuthorizerCommandsProperties);
+    /**
+     * Handle a CreateAuthorizer command.
+     */
+    createAuthorizer(command: SimCreateAuthorizerCommand, options?: SimApiGatewayRequestOptions): SimCreateAuthorizerCommandOutput;
+    /**
+     * Handle a GetAuthorizer command.
+     */
+    getAuthorizer(command: SimGetAuthorizerCommand, options?: SimApiGatewayRequestOptions): SimGetAuthorizerCommandOutput;
+    /**
+     * Handle a GetAuthorizers command.
+     */
+    getAuthorizers(command: SimGetAuthorizersCommand, options?: SimApiGatewayRequestOptions): SimGetAuthorizersCommandOutput;
+    /**
+     * Handle a DeleteAuthorizer command.
+     *
+     * A method still naming the deleted authorizer keeps its authorization type
+     * and refuses every request, since there is no longer anything to send the
+     * request through. What real API Gateway does with such a method is not
+     * established, so the method stays closed rather than being opened.
+     */
+    deleteAuthorizer(command: SimDeleteAuthorizerCommand, options?: SimApiGatewayRequestOptions): SimDeleteAuthorizerCommandOutput;
+    /**
+     * The API and authorizer id a command names, once the caller is allowed to
+     * address them.
+     */
+    private addressed;
+    /**
+     * An authorizer of this API, refusing an id it has none for.
+     */
+    private declared;
+}
+export {};
+//# sourceMappingURL=sim-rest-api-authorizer-commands.d.ts.map

package/dist/service/apigateway/command/authorizer/sim-rest-api-authorizer-commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-authorizer-commands.d.ts","sourceRoot":"","sources":["../../../../../src/service/apigateway/command/authorizer/sim-rest-api-authorizer-commands.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,uCAAuC,CAAC;AAEzF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,KAAK,EACV,0BAA0B,EAC1B,gCAAgC,EAChC,0BAA0B,EAE1B,gCAAgC,EAChC,uBAAuB,EAEvB,6BAA6B,EAC7B,wBAAwB,EACxB,8BAA8B,EAC/B,MAAM,yBAAyB,CAAC;AAyBjC,UAAU,sCAAsC;IAC9C,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;CACnC;AAED;;GAEG;AACH,qBAAa,4BAA4B;IACvC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmB;IAE1C,YAAY,UAAU,EAAE,sCAAsC,EAE7D;IAED;;OAEG;IACH,gBAAgB,CACd,OAAO,EAAE,0BAA0B,EACnC,OAAO,CAAC,EAAE,2BAA2B,GACpC,gCAAgC,CA8BlC;IAED;;OAEG;IACH,aAAa,CACX,OAAO,EAAE,uBAAuB,EAChC,OAAO,CAAC,EAAE,2BAA2B,GACpC,6BAA6B,CAS/B;IAED;;OAEG;IACH,cAAc,CACZ,OAAO,EAAE,wBAAwB,EACjC,OAAO,CAAC,EAAE,2BAA2B,GACpC,8BAA8B,CAiBhC;IAED;;;;;;;OAOG;IACH,gBAAgB,CACd,OAAO,EAAE,0BAA0B,EACnC,OAAO,CAAC,EAAE,2BAA2B,GACpC,gCAAgC,CAalC;IAED;;;OAGG;IACH,OAAO,CAAC,SAAS;IAyBjB;;OAEG;IACH,OAAO,CAAC,QAAQ;CAcjB"}

package/dist/service/apigateway/command/authorizer/sim-rest-api-authorizer-commands.js

@@ -0,0 +1,123 @@
+import { SimApiGatewayNotFound } from "../../error/sim-api-gateway.error.js";
+import { SimApiGatewayUnsimulatedInput } from "../sim-api-gateway-unsimulated-input.js";
+import { SimRestApiAuthorizerInput } from "./sim-rest-api-authorizer-input.js";
+const authorizersPath = "/authorizers";
+const acceptedCreateOptions = [
+    "restApiId",
+    "name",
+    "type",
+    "authorizerUri",
+    "providerARNs",
+    "identitySource",
+    "authorizerResultTtlInSeconds",
+];
+const simulatedAuthorizerTypes = [
+    "TOKEN",
+    "REQUEST",
+    "COGNITO_USER_POOLS",
+];
+const authorizerTypeRefusal = "a REST API authorizer invokes a function or verifies a user pool token, " +
+    "and the JWT authorizer an HTTP API takes is the v2 service's";
+/**
+ * The commands addressing the authorizers of a REST API.
+ */
+export class SimRestApiAuthorizerCommands {
+    access;
+    constructor(properties) {
+        this.access = properties.access;
+    }
+    /**
+     * Handle a CreateAuthorizer command.
+     */
+    createAuthorizer(command, options) {
+        const { input } = command;
+        const unsimulated = new SimApiGatewayUnsimulatedInput("CreateAuthorizer");
+        unsimulated.refuseUnaccepted(input, acceptedCreateOptions);
+        const restApiId = unsimulated.require("restApiId", input.restApiId);
+        unsimulated.require("name", input.name);
+        const type = unsimulated.require("type", input.type);
+        unsimulated.refuseUnlessOneOf("type", type, simulatedAuthorizerTypes, authorizerTypeRefusal);
+        const authorizerInput = new SimRestApiAuthorizerInput({
+            input,
+            type: type,
+        });
+        const restApi = this.access.api({
+            method: "POST",
+            restApiId,
+            childPath: authorizersPath,
+            caller: options?.caller,
+        });
+        const authorizer = authorizerInput.read(restApi.authorizers.allocateId());
+        restApi.authorizers.add(authorizer);
+        return { ...authorizer.view(), $metadata: {} };
+    }
+    /**
+     * Handle a GetAuthorizer command.
+     */
+    getAuthorizer(command, options) {
+        const { restApi, authorizerId } = this.addressed("GET", "GetAuthorizer", command.input, options);
+        return { ...this.declared(restApi, authorizerId).view(), $metadata: {} };
+    }
+    /**
+     * Handle a GetAuthorizers command.
+     */
+    getAuthorizers(command, options) {
+        const unsimulated = new SimApiGatewayUnsimulatedInput("GetAuthorizers");
+        unsimulated.refusePaging(command.input);
+        unsimulated.refuseUnaccepted(command.input, ["restApiId"]);
+        const restApiId = unsimulated.require("restApiId", command.input.restApiId);
+        const restApi = this.access.api({
+            method: "GET",
+            restApiId,
+            childPath: authorizersPath,
+            caller: options?.caller,
+        });
+        return {
+            items: restApi.authorizers.list().map((one) => one.view()),
+            $metadata: {},
+        };
+    }
+    /**
+     * Handle a DeleteAuthorizer command.
+     *
+     * A method still naming the deleted authorizer keeps its authorization type
+     * and refuses every request, since there is no longer anything to send the
+     * request through. What real API Gateway does with such a method is not
+     * established, so the method stays closed rather than being opened.
+     */
+    deleteAuthorizer(command, options) {
+        const { restApi, authorizerId } = this.addressed("DELETE", "DeleteAuthorizer", command.input, options);
+        restApi.authorizers.remove(this.declared(restApi, authorizerId).authorizerId);
+        return { $metadata: {} };
+    }
+    /**
+     * The API and authorizer id a command names, once the caller is allowed to
+     * address them.
+     */
+    addressed(accessMethod, operation, input, options) {
+        const unsimulated = new SimApiGatewayUnsimulatedInput(operation);
+        unsimulated.refuseUnaccepted(input, ["restApiId", "authorizerId"]);
+        const restApiId = unsimulated.require("restApiId", input.restApiId);
+        const authorizerId = unsimulated.require("authorizerId", input.authorizerId);
+        return {
+            restApi: this.access.api({
+                method: accessMethod,
+                restApiId,
+                childPath: `${authorizersPath}/${authorizerId}`,
+                caller: options?.caller,
+            }),
+            authorizerId,
+        };
+    }
+    /**
+     * An authorizer of this API, refusing an id it has none for.
+     */
+    declared(restApi, authorizerId) {
+        const authorizer = restApi.authorizers.find(authorizerId);
+        if (authorizer === undefined) {
+            throw new SimApiGatewayNotFound(`Invalid Authorizer identifier specified: ${authorizerId}`);
+        }
+        return authorizer;
+    }
+}
+//# sourceMappingURL=sim-rest-api-authorizer-commands.js.map

package/dist/service/apigateway/command/authorizer/sim-rest-api-authorizer-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-authorizer-commands.js","sourceRoot":"","sources":["../../../../../src/service/apigateway/command/authorizer/sim-rest-api-authorizer-commands.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAE7E,OAAO,EAAE,6BAA6B,EAAE,MAAM,yCAAyC,CAAC;AAcxF,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAE/E,MAAM,eAAe,GAAG,cAAc,CAAC;AAEvC,MAAM,qBAAqB,GAAG;IAC5B,WAAW;IACX,MAAM;IACN,MAAM;IACN,eAAe;IACf,cAAc;IACd,gBAAgB;IAChB,8BAA8B;CAC/B,CAAC;AAEF,MAAM,wBAAwB,GAAwC;IACpE,OAAO;IACP,SAAS;IACT,oBAAoB;CACrB,CAAC;AAEF,MAAM,qBAAqB,GACzB,0EAA0E;IAC1E,8DAA8D,CAAC;AAMjE;;GAEG;AACH,MAAM,OAAO,4BAA4B;IACtB,MAAM,CAAmB;IAE1C,YAAY,UAAkD;QAC5D,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,gBAAgB,CACd,OAAmC,EACnC,OAAqC;QAErC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAC1B,MAAM,WAAW,GAAG,IAAI,6BAA6B,CAAC,kBAAkB,CAAC,CAAC;QAC1E,WAAW,CAAC,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QACpE,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACrD,WAAW,CAAC,iBAAiB,CAC3B,MAAM,EACN,IAAI,EACJ,wBAAwB,EACxB,qBAAqB,CACtB,CAAC;QAEF,MAAM,eAAe,GAAG,IAAI,yBAAyB,CAAC;YACpD,KAAK;YACL,IAAI,EAAE,IAAgC;SACvC,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;YAC9B,MAAM,EAAE,MAAM;YACd,SAAS;YACT,SAAS,EAAE,eAAe;YAC1B,MAAM,EAAE,OAAO,EAAE,MAAM;SACxB,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC,CAAC;QAC1E,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAEpC,OAAO,EAAE,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IACjD,CAAC;IAED;;OAEG;IACH,aAAa,CACX,OAAgC,EAChC,OAAqC;QAErC,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC,SAAS,CAC9C,KAAK,EACL,eAAe,EACf,OAAO,CAAC,KAAK,EACb,OAAO,CACR,CAAC;QAEF,OAAO,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC3E,CAAC;IAED;;OAEG;IACH,cAAc,CACZ,OAAiC,EACjC,OAAqC;QAErC,MAAM,WAAW,GAAG,IAAI,6BAA6B,CAAC,gBAAgB,CAAC,CAAC;QACxE,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACxC,WAAW,CAAC,gBAAgB,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAE5E,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;YAC9B,MAAM,EAAE,KAAK;YACb,SAAS;YACT,SAAS,EAAE,eAAe;YAC1B,MAAM,EAAE,OAAO,EAAE,MAAM;SACxB,CAAC,CAAC;QAEH,OAAO;YACL,KAAK,EAAE,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAC1D,SAAS,EAAE,EAAE;SACd,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,gBAAgB,CACd,OAAmC,EACnC,OAAqC;QAErC,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC,SAAS,CAC9C,QAAQ,EACR,kBAAkB,EAClB,OAAO,CAAC,KAAK,EACb,OAAO,CACR,CAAC;QAEF,OAAO,CAAC,WAAW,CAAC,MAAM,CACxB,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,YAAY,CAClD,CAAC;QAEF,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC3B,CAAC;IAED;;;OAGG;IACK,SAAS,CACf,YAA8B,EAC9B,SAAiB,EACjB,KAAqE,EACrE,OAAqC;QAErC,MAAM,WAAW,GAAG,IAAI,6BAA6B,CAAC,SAAS,CAAC,CAAC;QACjE,WAAW,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC;QACnE,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QACpE,MAAM,YAAY,GAAG,WAAW,CAAC,OAAO,CACtC,cAAc,EACd,KAAK,CAAC,YAAY,CACnB,CAAC;QAEF,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;gBACvB,MAAM,EAAE,YAAY;gBACpB,SAAS;gBACT,SAAS,EAAE,GAAG,eAAe,IAAI,YAAY,EAAE;gBAC/C,MAAM,EAAE,OAAO,EAAE,MAAM;aACxB,CAAC;YACF,YAAY;SACb,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,QAAQ,CACd,OAAmB,EACnB,YAAoB;QAEpB,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAE1D,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,qBAAqB,CAC7B,4CAA4C,YAAY,EAAE,CAC3D,CAAC;QACJ,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;CACF"}

package/dist/service/apigateway/command/authorizer/sim-rest-api-authorizer-input.d.ts

@@ -0,0 +1,51 @@
+import type { SimRestApiAuthorizer, SimRestApiAuthorizerId, SimRestApiAuthorizerType } from "../../api/authorizer/sim-rest-api-authorizer.js";
+import type { SimCreateAuthorizerCommandInput } from "./authorizer.command.js";
+interface SimRestApiAuthorizerInputProperties {
+    readonly input: SimCreateAuthorizerCommandInput;
+    /** The type the command settled, which decides how the rest is read. */
+    readonly type: SimRestApiAuthorizerType;
+}
+/**
+ * Reads the inputs an authorizer is created from.
+ *
+ * The identity source is required by real `CreateAuthorizer` for every type,
+ * and an authorizer naming nowhere to look would read nothing on every
+ * request. What decides then differs: a Lambda authorizer requires the
+ * function it asks, and a `COGNITO_USER_POOLS` one requires the pools it
+ * verifies against. Neither has a value worth guessing.
+ */
+export declare class SimRestApiAuthorizerInput {
+    private readonly input;
+    private readonly type;
+    constructor(properties: SimRestApiAuthorizerInputProperties);
+    /**
+     * The authorizer this input asks for.
+     */
+    read(authorizerId: SimRestApiAuthorizerId): SimRestApiAuthorizer;
+    /**
+     * The function a Lambda authorizer invokes.
+     *
+     * An `authorizerUri` is written in the same wrapped form an integration URI
+     * is, so it is read by the same parser and refused for the same reasons.
+     */
+    private lambdaUri;
+    /**
+     * The user pools a `COGNITO_USER_POOLS` authorizer accepts tokens from.
+     */
+    private providerArns;
+    /**
+     * Where a Lambda authorizer looks for what identifies a caller.
+     *
+     * A `TOKEN` authorizer names one header. A `REQUEST` authorizer names as
+     * many headers and query string parameters as it likes, written as one
+     * comma-separated string.
+     */
+    private identitySources;
+    /**
+     * The identity source as it was written, which real `CreateAuthorizer`
+     * requires for every type.
+     */
+    private identitySource;
+}
+export {};
+//# sourceMappingURL=sim-rest-api-authorizer-input.d.ts.map

package/dist/service/apigateway/command/authorizer/sim-rest-api-authorizer-input.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-authorizer-input.d.ts","sourceRoot":"","sources":["../../../../../src/service/apigateway/command/authorizer/sim-rest-api-authorizer-input.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,oBAAoB,EACpB,sBAAsB,EACtB,wBAAwB,EACzB,MAAM,iDAAiD,CAAC;AAMzD,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,yBAAyB,CAAC;AAG/E,UAAU,mCAAmC;IAC3C,QAAQ,CAAC,KAAK,EAAE,+BAA+B,CAAC;IAChD,wEAAwE;IACxE,QAAQ,CAAC,IAAI,EAAE,wBAAwB,CAAC;CACzC;AAED;;;;;;;;GAQG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkC;IACxD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA2B;IAEhD,YAAY,UAAU,EAAE,mCAAmC,EAG1D;IAED;;OAEG;IACH,IAAI,CAAC,YAAY,EAAE,sBAAsB,GAAG,oBAAoB,CAyB/D;IAED;;;;;OAKG;IACH,OAAO,CAAC,SAAS;IAoBjB;;OAEG;IACH,OAAO,CAAC,YAAY;IAWpB;;;;;;OAMG;IACH,OAAO,CAAC,eAAe;IAQvB;;;OAGG;IACH,OAAO,CAAC,cAAc;CAYvB"}