@kensio/yulin 1.17.2 → 1.18.1

package/dist/service/apigateway/index.js

@@ -0,0 +1,43 @@
+export { SimApiGateway } from "./sim-api-gateway.js";
+export { SimRestApi } from "./api/sim-rest-api.js";
+export { makeSimRestApiId } from "./api/sim-rest-api-id.js";
+export { simRestApiHost, simRestApiLogicalHost, } from "./api/sim-rest-api-host.js";
+export { SimRestApiStore } from "./api/sim-rest-api-store.js";
+export { SimRestApiRegistry } from "./registry/sim-rest-api-registry.js";
+export { SimRestApiResource, simRestApiRootPath, } from "./api/resource/sim-rest-api-resource.js";
+export { makeSimRestApiResourceId, } from "./api/resource/sim-rest-api-resource-id.js";
+export { SimRestApiPathPart } from "./api/resource/sim-rest-api-path-part.js";
+export { SimRestApiResourceStore } from "./api/resource/sim-rest-api-resource-store.js";
+export { makeSimRestApiAuthorizerId, SimRestApiAuthorizer, simRestApiCognitoAuthType, simRestApiCustomAuthType, } from "./api/authorizer/sim-rest-api-authorizer.js";
+export { SimRestApiLambdaAuthorizer, } from "./api/authorizer/sim-rest-api-lambda-authorizer.js";
+export { SimRestApiCognitoAuthorizer } from "./api/authorizer/sim-rest-api-cognito-authorizer.js";
+export { SimRestApiUserPoolProviders } from "./api/authorizer/sim-rest-api-user-pool-providers.js";
+export { SimRestApiNoUserPools, } from "./api/authorizer/sim-rest-api-user-pools.js";
+export { SimCognitoRestApiUserPools } from "./api/authorizer/sim-cognito-rest-api-user-pools.js";
+export { SimRestApiAuthorizerStore } from "./api/authorizer/sim-rest-api-authorizer-store.js";
+export { SimRestApiAdmitted, SimRestApiRefused, } from "./api/authorizer/sim-rest-api-authorization.js";
+export { simRestApiIdentityValue, } from "./api/authorizer/identity/sim-rest-api-identity-source.js";
+export { SimRestApiIdentitySourceParser } from "./api/authorizer/identity/sim-rest-api-identity-source-parser.js";
+export { SimRestApiIdentitySources } from "./api/authorizer/identity/sim-rest-api-identity-sources.js";
+export { SimRestApiHeaderIdentitySource, simRestApiHeaderIdentityPrefix, } from "./api/authorizer/identity/sim-rest-api-header-identity-source.js";
+export { SimRestApiQueryStringIdentitySource, simRestApiQueryStringIdentityPrefix, } from "./api/authorizer/identity/sim-rest-api-query-string-identity-source.js";
+export { SimRestApiMethodScopes } from "./api/method/sim-rest-api-method-scopes.js";
+export { simRestApiAnyMethod, SimRestApiMethod, } from "./api/method/sim-rest-api-method.js";
+export { SimRestApiIntegration, simRestApiLambdaIntegrationHttpMethod, } from "./api/method/sim-rest-api-integration.js";
+export { SimRestApiLambdaUri } from "./api/method/sim-rest-api-lambda-uri.js";
+export { isSimRestApiMatch, SimRestApiMatcher, } from "./api/match/sim-rest-api-match.js";
+export { SimRestApiRequest } from "./api/match/sim-rest-api-request.js";
+export { SimRestApiExecuteApiArn } from "./api/sim-rest-api-execute-api-arn.js";
+export { simRestApiLambdaProxyFactory, } from "./api/sim-rest-api-lambda-proxy.factory.js";
+export { SimApiGatewayServiceController } from "./serve/sim-api-gateway-controller.js";
+export { SimApiGatewayRouter } from "./serve/sim-api-gateway-router.js";
+export { SimRestApiMethodAuthorizer } from "./serve/auth/sim-rest-api-method-authorizer.js";
+export { SimRestApiRefusalResponse } from "./serve/sim-rest-api-refusal-response.js";
+export { SimRestApiIntegrationInvocation } from "./serve/sim-rest-api-integration-invocation.js";
+export { simApiGatewayServicePrincipal } from "./sim-api-gateway-service-principal.js";
+export { makeSimRestApiDeploymentId, SimRestApiDeployment, } from "./api/deployment/sim-rest-api-deployment.js";
+export { SimRestApiDeploymentStore } from "./api/deployment/sim-rest-api-deployment-store.js";
+export { SimRestApiStage, } from "./api/stage/sim-rest-api-stage.js";
+export { SimRestApiStageStore } from "./api/stage/sim-rest-api-stage-store.js";
+export { SimApiGatewayBadRequest, SimApiGatewayConflict, SimApiGatewayError, SimApiGatewayNotFound, } from "./error/sim-api-gateway.error.js";
+//# sourceMappingURL=index.js.map

package/dist/service/apigateway/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/service/apigateway/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAGrD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEnD,OAAO,EAAqB,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC/E,OAAO,EACL,cAAc,EACd,qBAAqB,GACtB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,EACL,kBAAkB,EAElB,kBAAkB,GACnB,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAEL,wBAAwB,GACzB,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AAC9E,OAAO,EAAE,uBAAuB,EAAE,MAAM,+CAA+C,CAAC;AACxF,OAAO,EACL,0BAA0B,EAC1B,oBAAoB,EAIpB,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,6CAA6C,CAAC;AACrD,OAAO,EACL,0BAA0B,GAE3B,MAAM,oDAAoD,CAAC;AAC5D,OAAO,EAAE,2BAA2B,EAAE,MAAM,qDAAqD,CAAC;AAClG,OAAO,EAAE,2BAA2B,EAAE,MAAM,sDAAsD,CAAC;AACnG,OAAO,EACL,qBAAqB,GAGtB,MAAM,6CAA6C,CAAC;AACrD,OAAO,EAAE,0BAA0B,EAAE,MAAM,qDAAqD,CAAC;AACjG,OAAO,EAAE,yBAAyB,EAAE,MAAM,mDAAmD,CAAC;AAC9F,OAAO,EACL,kBAAkB,EAElB,iBAAiB,GAElB,MAAM,gDAAgD,CAAC;AACxD,OAAO,EAEL,uBAAuB,GACxB,MAAM,2DAA2D,CAAC;AACnE,OAAO,EAAE,8BAA8B,EAAE,MAAM,kEAAkE,CAAC;AAClH,OAAO,EAAE,yBAAyB,EAAE,MAAM,4DAA4D,CAAC;AACvG,OAAO,EACL,8BAA8B,EAC9B,8BAA8B,GAC/B,MAAM,kEAAkE,CAAC;AAC1E,OAAO,EACL,mCAAmC,EACnC,mCAAmC,GACpC,MAAM,wEAAwE,CAAC;AAChF,OAAO,EAAE,sBAAsB,EAAE,MAAM,4CAA4C,CAAC;AACpF,OAAO,EACL,mBAAmB,EACnB,gBAAgB,GAGjB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,qBAAqB,EACrB,qCAAqC,GAGtC,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AAC9E,OAAO,EACL,iBAAiB,EAEjB,iBAAiB,GAElB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AAChF,OAAO,EACL,4BAA4B,GAE7B,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,8BAA8B,EAAE,MAAM,uCAAuC,CAAC;AACvF,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,EAAE,0BAA0B,EAAE,MAAM,gDAAgD,CAAC;AAC5F,OAAO,EAAE,yBAAyB,EAAE,MAAM,0CAA0C,CAAC;AAGrF,OAAO,EAAE,+BAA+B,EAAE,MAAM,gDAAgD,CAAC;AACjG,OAAO,EAAE,6BAA6B,EAAE,MAAM,wCAAwC,CAAC;AAEvF,OAAO,EACL,0BAA0B,EAC1B,oBAAoB,GAGrB,MAAM,6CAA6C,CAAC;AACrD,OAAO,EAAE,yBAAyB,EAAE,MAAM,mDAAmD,CAAC;AAC9F,OAAO,EACL,eAAe,GAEhB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AAC/E,OAAO,EACL,uBAAuB,EACvB,qBAAqB,EACrB,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,kCAAkC,CAAC"}

package/dist/service/apigateway/openapi/sim-rest-api-openapi-authorizer-type.d.ts

@@ -0,0 +1,12 @@
+import type { SimRestApiAuthorizerType } from "../api/authorizer/sim-rest-api-authorizer.js";
+import type { SimRestApiOpenApiObject } from "./sim-rest-api-openapi-object.js";
+/**
+ * Whether an authtype declares an authorizer of its own.
+ */
+export declare function simRestApiOpenApiDeclaresAuthorizer(authType: string): boolean;
+/**
+ * The kind of authorizer a security scheme carries, refusing one the scheme's
+ * own authtype does not declare.
+ */
+export declare function simRestApiOpenApiAuthorizerType(authorizer: SimRestApiOpenApiObject, authType: string): SimRestApiAuthorizerType;
+//# sourceMappingURL=sim-rest-api-openapi-authorizer-type.d.ts.map

package/dist/service/apigateway/openapi/sim-rest-api-openapi-authorizer-type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-openapi-authorizer-type.d.ts","sourceRoot":"","sources":["../../../../src/service/apigateway/openapi/sim-rest-api-openapi-authorizer-type.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAqBhF;;GAEG;AACH,wBAAgB,mCAAmC,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAE7E;AAED;;;GAGG;AACH,wBAAgB,+BAA+B,CAC7C,UAAU,EAAE,uBAAuB,EACnC,QAAQ,EAAE,MAAM,GACf,wBAAwB,CAgB1B"}

package/dist/service/apigateway/openapi/sim-rest-api-openapi-authorizer-type.js

@@ -0,0 +1,43 @@
+import { assertDefined } from "../../../util/type-guard/defined.js";
+/**
+ * The authorizer each `x-amazon-apigateway-authtype` is declared with: the
+ * `type` its `x-amazon-apigateway-authorizer` carries, and the
+ * `CreateAuthorizer` type that becomes.
+ */
+const authorizerTypes = new Map([
+    [
+        "custom",
+        new Map([
+            ["token", "TOKEN"],
+            ["request", "REQUEST"],
+        ]),
+    ],
+    [
+        "cognito_user_pools",
+        new Map([["cognito_user_pools", "COGNITO_USER_POOLS"]]),
+    ],
+]);
+/**
+ * Whether an authtype declares an authorizer of its own.
+ */
+export function simRestApiOpenApiDeclaresAuthorizer(authType) {
+    return authorizerTypes.has(authType);
+}
+/**
+ * The kind of authorizer a security scheme carries, refusing one the scheme's
+ * own authtype does not declare.
+ */
+export function simRestApiOpenApiAuthorizerType(authorizer, authType) {
+    const types = authorizerTypes.get(authType);
+    assertDefined(types, `the authorizer types of ${authType}`);
+    const declared = authorizer.member("type");
+    const written = declared.requiredString();
+    const type = types.get(written);
+    if (type === undefined) {
+        throw declared.refusal(`is '${written}', and the security scheme carrying it declares ` +
+            `x-amazon-apigateway-authtype '${authType}', which is written with ` +
+            `an authorizer of type ${types.keys().toArray().join(" or ")}`);
+    }
+    return type;
+}
+//# sourceMappingURL=sim-rest-api-openapi-authorizer-type.js.map

package/dist/service/apigateway/openapi/sim-rest-api-openapi-authorizer-type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-openapi-authorizer-type.js","sourceRoot":"","sources":["../../../../src/service/apigateway/openapi/sim-rest-api-openapi-authorizer-type.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAIpE;;;;GAIG;AACH,MAAM,eAAe,GAAG,IAAI,GAAG,CAAgD;IAC7E;QACE,QAAQ;QACR,IAAI,GAAG,CAAC;YACN,CAAC,OAAO,EAAE,OAAO,CAAC;YAClB,CAAC,SAAS,EAAE,SAAS,CAAC;SACvB,CAAC;KACH;IACD;QACE,oBAAoB;QACpB,IAAI,GAAG,CAAC,CAAC,CAAC,oBAAoB,EAAE,oBAAoB,CAAC,CAAC,CAAC;KACxD;CACF,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,UAAU,mCAAmC,CAAC,QAAgB;IAClE,OAAO,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AACvC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,+BAA+B,CAC7C,UAAmC,EACnC,QAAgB;IAEhB,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC5C,aAAa,CAAC,KAAK,EAAE,2BAA2B,QAAQ,EAAE,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,QAAQ,CAAC,cAAc,EAAE,CAAC;IAC1C,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAEhC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,QAAQ,CAAC,OAAO,CACpB,OAAO,OAAO,kDAAkD;YAC9D,iCAAiC,QAAQ,2BAA2B;YACpE,yBAAyB,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CACjE,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/service/apigateway/openapi/sim-rest-api-openapi-body.d.ts

@@ -0,0 +1,11 @@
+import type { SimRestApiOpenApiObject } from "./sim-rest-api-openapi-object.js";
+/**
+ * Read a serialised OpenAPI document into the object at its root.
+ *
+ * This is how all three entry points carry the document. `ImportRestApi` and
+ * `PutRestApi` take it as the request body, and CloudFormation serialises the
+ * inline JSON object an `AWS::ApiGateway::RestApi` `Body` holds, so one reader
+ * sees every one of them.
+ */
+export declare function simRestApiOpenApiRoot(body: string): SimRestApiOpenApiObject;
+//# sourceMappingURL=sim-rest-api-openapi-body.d.ts.map

package/dist/service/apigateway/openapi/sim-rest-api-openapi-body.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-openapi-body.d.ts","sourceRoot":"","sources":["../../../../src/service/apigateway/openapi/sim-rest-api-openapi-body.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAKhF;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,uBAAuB,CAO3E"}

package/dist/service/apigateway/openapi/sim-rest-api-openapi-body.js

@@ -0,0 +1,30 @@
+import { SimRestApiOpenApiPointer } from "./sim-rest-api-openapi-pointer.js";
+import { simRestApiOpenApiRefusal } from "./sim-rest-api-openapi-refusal.js";
+import { SimRestApiOpenApiValue } from "./sim-rest-api-openapi-value.js";
+/**
+ * Read a serialised OpenAPI document into the object at its root.
+ *
+ * This is how all three entry points carry the document. `ImportRestApi` and
+ * `PutRestApi` take it as the request body, and CloudFormation serialises the
+ * inline JSON object an `AWS::ApiGateway::RestApi` `Body` holds, so one reader
+ * sees every one of them.
+ */
+export function simRestApiOpenApiRoot(body) {
+    const pointer = SimRestApiOpenApiPointer.root();
+    return new SimRestApiOpenApiValue({
+        pointer,
+        value: parsed(body, pointer),
+    }).object();
+}
+/**
+ * Parse the body, refusing text that is not JSON at all.
+ */
+function parsed(body, pointer) {
+    try {
+        return JSON.parse(body);
+    }
+    catch {
+        throw simRestApiOpenApiRefusal(pointer, "is not a JSON document, and YAML is not parsed");
+    }
+}
+//# sourceMappingURL=sim-rest-api-openapi-body.js.map

package/dist/service/apigateway/openapi/sim-rest-api-openapi-body.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-openapi-body.js","sourceRoot":"","sources":["../../../../src/service/apigateway/openapi/sim-rest-api-openapi-body.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAC7E,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAC7E,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AAEzE;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,MAAM,OAAO,GAAG,wBAAwB,CAAC,IAAI,EAAE,CAAC;IAEhD,OAAO,IAAI,sBAAsB,CAAC;QAChC,OAAO;QACP,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC;KAC7B,CAAC,CAAC,MAAM,EAAE,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAS,MAAM,CAAC,IAAY,EAAE,OAAiC;IAC7D,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAc,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,wBAAwB,CAC5B,OAAO,EACP,gDAAgD,CACjD,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/service/apigateway/openapi/sim-rest-api-openapi-cognito-authorizer-scheme.d.ts

@@ -0,0 +1,27 @@
+import type { SimCreateAuthorizerCommandInput } from "../command/authorizer/authorizer.command.js";
+import type { SimRestApiOpenApiObject } from "./sim-rest-api-openapi-object.js";
+interface SimRestApiOpenApiCognitoAuthorizerSchemeProperties {
+    readonly scheme: SimRestApiOpenApiObject;
+    readonly authorizer: SimRestApiOpenApiObject;
+}
+/**
+ * An `x-amazon-apigateway-authorizer` of `type: cognito_user_pools`, read into
+ * the CreateAuthorizer input it asks for.
+ *
+ * The pool ARNs are handed to CreateAuthorizer as the document wrote them, so
+ * what an authorizer verifying a user pool token requires is stated where
+ * every other caller meets it. `authorizerResultTtlInSeconds` goes with them,
+ * and that command refuses a period on an authorizer verifying each token as
+ * it arrives.
+ */
+export declare class SimRestApiOpenApiCognitoAuthorizerScheme {
+    private readonly scheme;
+    private readonly authorizer;
+    constructor(properties: SimRestApiOpenApiCognitoAuthorizerSchemeProperties);
+    /**
+     * The CreateAuthorizer input this authorizer asks for.
+     */
+    createAuthorizerInput(restApiId: string, name: string): SimCreateAuthorizerCommandInput;
+}
+export {};
+//# sourceMappingURL=sim-rest-api-openapi-cognito-authorizer-scheme.d.ts.map

package/dist/service/apigateway/openapi/sim-rest-api-openapi-cognito-authorizer-scheme.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-openapi-cognito-authorizer-scheme.d.ts","sourceRoot":"","sources":["../../../../src/service/apigateway/openapi/sim-rest-api-openapi-cognito-authorizer-scheme.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,6CAA6C,CAAC;AACnG,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAwBhF,UAAU,kDAAkD;IAC1D,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,QAAQ,CAAC,UAAU,EAAE,uBAAuB,CAAC;CAC9C;AAED;;;;;;;;;GASG;AACH,qBAAa,wCAAwC;IACnD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0B;IACjD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA0B;IAErD,YAAY,UAAU,EAAE,kDAAkD,EAGzE;IAED;;OAEG;IACH,qBAAqB,CACnB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,GACX,+BAA+B,CAcjC;CACF"}

package/dist/service/apigateway/openapi/sim-rest-api-openapi-cognito-authorizer-scheme.js

@@ -0,0 +1,53 @@
+import { simRestApiOpenApiSchemeIdentitySource } from "./sim-rest-api-openapi-scheme-identity-source.js";
+/**
+ * The members that belong to a Lambda authorizer, refused rather than ignored
+ * so a scheme declaring one under a `cognito_user_pools` authorizer does not
+ * import as something quieter than it says.
+ */
+const lambdaMembers = [
+    "authorizerUri",
+    "authorizerCredentials",
+    "identityValidationExpression",
+];
+const lambdaMember = "configures the function a Lambda authorizer invokes, and a " +
+    "cognito_user_pools authorizer invokes nothing: it verifies the token " +
+    "against the user pools it names";
+const cognitoIdentitySource = "is read from the scheme's own name and in for a cognito_user_pools " +
+    "authorizer, so an identitySource here would be applied by neither AWS nor " +
+    "this simulation";
+/**
+ * An `x-amazon-apigateway-authorizer` of `type: cognito_user_pools`, read into
+ * the CreateAuthorizer input it asks for.
+ *
+ * The pool ARNs are handed to CreateAuthorizer as the document wrote them, so
+ * what an authorizer verifying a user pool token requires is stated where
+ * every other caller meets it. `authorizerResultTtlInSeconds` goes with them,
+ * and that command refuses a period on an authorizer verifying each token as
+ * it arrives.
+ */
+export class SimRestApiOpenApiCognitoAuthorizerScheme {
+    scheme;
+    authorizer;
+    constructor(properties) {
+        this.scheme = properties.scheme;
+        this.authorizer = properties.authorizer;
+    }
+    /**
+     * The CreateAuthorizer input this authorizer asks for.
+     */
+    createAuthorizerInput(restApiId, name) {
+        this.authorizer.refuseMembers(lambdaMembers, lambdaMember);
+        this.authorizer.refuseMember("identitySource", cognitoIdentitySource);
+        return {
+            restApiId,
+            name,
+            type: "COGNITO_USER_POOLS",
+            providerARNs: this.authorizer.member("providerARNs").optionalStringList(),
+            identitySource: simRestApiOpenApiSchemeIdentitySource(this.scheme),
+            authorizerResultTtlInSeconds: this.authorizer
+                .member("authorizerResultTtlInSeconds")
+                .optionalNumber(),
+        };
+    }
+}
+//# sourceMappingURL=sim-rest-api-openapi-cognito-authorizer-scheme.js.map

package/dist/service/apigateway/openapi/sim-rest-api-openapi-cognito-authorizer-scheme.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-openapi-cognito-authorizer-scheme.js","sourceRoot":"","sources":["../../../../src/service/apigateway/openapi/sim-rest-api-openapi-cognito-authorizer-scheme.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qCAAqC,EAAE,MAAM,kDAAkD,CAAC;AAEzG;;;;GAIG;AACH,MAAM,aAAa,GAAG;IACpB,eAAe;IACf,uBAAuB;IACvB,8BAA8B;CAC/B,CAAC;AAEF,MAAM,YAAY,GAChB,6DAA6D;IAC7D,uEAAuE;IACvE,iCAAiC,CAAC;AAEpC,MAAM,qBAAqB,GACzB,qEAAqE;IACrE,4EAA4E;IAC5E,iBAAiB,CAAC;AAOpB;;;;;;;;;GASG;AACH,MAAM,OAAO,wCAAwC;IAClC,MAAM,CAA0B;IAChC,UAAU,CAA0B;IAErD,YAAY,UAA8D;QACxE,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,qBAAqB,CACnB,SAAiB,EACjB,IAAY;QAEZ,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;QAC3D,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,gBAAgB,EAAE,qBAAqB,CAAC,CAAC;QAEtE,OAAO;YACL,SAAS;YACT,IAAI;YACJ,IAAI,EAAE,oBAAoB;YAC1B,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,kBAAkB,EAAE;YACzE,cAAc,EAAE,qCAAqC,CAAC,IAAI,CAAC,MAAM,CAAC;YAClE,4BAA4B,EAAE,IAAI,CAAC,UAAU;iBAC1C,MAAM,CAAC,8BAA8B,CAAC;iBACtC,cAAc,EAAE;SACpB,CAAC;IACJ,CAAC;CACF"}

package/dist/service/apigateway/openapi/sim-rest-api-openapi-command.d.ts

@@ -0,0 +1,18 @@
+import type { SimRestApiOpenApiPointer } from "./sim-rest-api-openapi-pointer.js";
+/**
+ * Runs the ordinary commands an import creates its API's parts with, giving
+ * whatever one of them refuses the pointer of the member the input came from.
+ *
+ * That is what lets path part grammar, integration types and URI parsing stay
+ * stated once, where an SDK caller and a template already meet them, while a
+ * refusal still sends the reader into their own document. Anything that is not
+ * a refusal, such as the conflict two paths that are one resource produce, is
+ * passed on as it is.
+ */
+export declare class SimRestApiOpenApiCommand {
+    /**
+     * Run one command, refusing under a pointer if it refuses.
+     */
+    run<T>(pointer: SimRestApiOpenApiPointer, work: () => T): T;
+}
+//# sourceMappingURL=sim-rest-api-openapi-command.d.ts.map

package/dist/service/apigateway/openapi/sim-rest-api-openapi-command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-openapi-command.d.ts","sourceRoot":"","sources":["../../../../src/service/apigateway/openapi/sim-rest-api-openapi-command.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAGlF;;;;;;;;;GASG;AACH,qBAAa,wBAAwB;IACnC;;OAEG;IACH,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,wBAAwB,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAU1D;CACF"}

package/dist/service/apigateway/openapi/sim-rest-api-openapi-command.js

@@ -0,0 +1,29 @@
+import { SimApiGatewayBadRequest } from "../error/sim-api-gateway.error.js";
+import { simRestApiOpenApiRefusal } from "./sim-rest-api-openapi-refusal.js";
+/**
+ * Runs the ordinary commands an import creates its API's parts with, giving
+ * whatever one of them refuses the pointer of the member the input came from.
+ *
+ * That is what lets path part grammar, integration types and URI parsing stay
+ * stated once, where an SDK caller and a template already meet them, while a
+ * refusal still sends the reader into their own document. Anything that is not
+ * a refusal, such as the conflict two paths that are one resource produce, is
+ * passed on as it is.
+ */
+export class SimRestApiOpenApiCommand {
+    /**
+     * Run one command, refusing under a pointer if it refuses.
+     */
+    run(pointer, work) {
+        try {
+            return work();
+        }
+        catch (error) {
+            if (error instanceof SimApiGatewayBadRequest) {
+                throw simRestApiOpenApiRefusal(pointer, error.message);
+            }
+            throw error;
+        }
+    }
+}
+//# sourceMappingURL=sim-rest-api-openapi-command.js.map

package/dist/service/apigateway/openapi/sim-rest-api-openapi-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-openapi-command.js","sourceRoot":"","sources":["../../../../src/service/apigateway/openapi/sim-rest-api-openapi-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAE5E,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAE7E;;;;;;;;;GASG;AACH,MAAM,OAAO,wBAAwB;IACnC;;OAEG;IACH,GAAG,CAAI,OAAiC,EAAE,IAAa;QACrD,IAAI,CAAC;YACH,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,uBAAuB,EAAE,CAAC;gBAC7C,MAAM,wBAAwB,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YACzD,CAAC;YAED,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF"}

package/dist/service/apigateway/openapi/sim-rest-api-openapi-document.d.ts

@@ -0,0 +1,44 @@
+import type { SimRestApiOpenApiObject } from "./sim-rest-api-openapi-object.js";
+import { SimRestApiOpenApiPaths } from "./sim-rest-api-openapi-paths.js";
+import { SimRestApiOpenApiValue } from "./sim-rest-api-openapi-value.js";
+/**
+ * The OpenAPI 3.0 document a REST API is imported from.
+ *
+ * This is the root of the document and the version check on it. Everything
+ * below is read by a class named after the member it reads, because the
+ * refusal surface is most of the work and one reader would not stay readable.
+ */
+export declare class SimRestApiOpenApiDocument {
+    private readonly root;
+    constructor(root: SimRestApiOpenApiObject);
+    /**
+     * Read a serialised OpenAPI document.
+     */
+    static parse(body: string): SimRestApiOpenApiDocument;
+    /**
+     * The name the imported API takes, which is the document's own title.
+     */
+    title(): string;
+    /**
+     * The paths this document declares, one resource and one method per
+     * operation under each.
+     */
+    paths(): SimRestApiOpenApiPaths;
+    /**
+     * The security schemes an operation's security requirement can name.
+     */
+    securitySchemes(): SimRestApiOpenApiValue;
+    /**
+     * One member of `components`, whether or not the document has any.
+     */
+    private component;
+    /**
+     * Refuse a document this simulation would read as something it is not.
+     */
+    private requireSimulatedVersion;
+    /**
+     * Refuse the root members that would otherwise be dropped.
+     */
+    private refuseUnsimulatedMembers;
+}
+//# sourceMappingURL=sim-rest-api-openapi-document.d.ts.map

package/dist/service/apigateway/openapi/sim-rest-api-openapi-document.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-openapi-document.d.ts","sourceRoot":"","sources":["../../../../src/service/apigateway/openapi/sim-rest-api-openapi-document.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAChF,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AAWzE;;;;;;GAMG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA0B;IAE/C,YAAY,IAAI,EAAE,uBAAuB,EAKxC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,yBAAyB,CAEpD;IAED;;OAEG;IACH,KAAK,IAAI,MAAM,CAEd;IAED;;;OAGG;IACH,KAAK,IAAI,sBAAsB,CAE9B;IAED;;OAEG;IACH,eAAe,IAAI,sBAAsB,CAExC;IAED;;OAEG;IACH,OAAO,CAAC,SAAS;IAajB;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAgB/B;;OAEG;IACH,OAAO,CAAC,wBAAwB;CAKjC"}

package/dist/service/apigateway/openapi/sim-rest-api-openapi-document.factory.d.ts

@@ -0,0 +1,30 @@
+import { MappedFactory } from "@kensio/part-factory";
+import type { JSONObject } from "../../../util/type-guard/json.js";
+/**
+ * What a test asks for when it wants an OpenAPI document to import.
+ *
+ * `paths` and `components` are empty by default rather than carrying an
+ * operation of their own, so a test states the one path item or security
+ * scheme it is about and nothing is merged into it.
+ */
+export interface SimRestApiOpenApiDocumentInput {
+    readonly openapi: string;
+    readonly title: string;
+    readonly paths: JSONObject;
+    readonly components: JSONObject;
+}
+/**
+ * Builds the OpenAPI 3.0 document an `ImportRestApi`, a `PutRestApi` or an
+ * `AWS::ApiGateway::RestApi` `Body` carries.
+ *
+ * ```typescript
+ * const document = simRestApiOpenApiDocumentFactory.make({
+ *   paths: { "/pets": { get: { "x-amazon-apigateway-integration": ... } } },
+ * });
+ * ```
+ *
+ * The envelope is incidental to every test about what an import does with one
+ * member, which is what earns this its place.
+ */
+export declare const simRestApiOpenApiDocumentFactory: MappedFactory<SimRestApiOpenApiDocumentInput, JSONObject, undefined>;
+//# sourceMappingURL=sim-rest-api-openapi-document.factory.d.ts.map

package/dist/service/apigateway/openapi/sim-rest-api-openapi-document.factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-openapi-document.factory.d.ts","sourceRoot":"","sources":["../../../../src/service/apigateway/openapi/sim-rest-api-openapi-document.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAC;AAEnE;;;;;;GAMG;AACH,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;CACjC;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,gCAAgC,sEAgB5C,CAAC"}

package/dist/service/apigateway/openapi/sim-rest-api-openapi-document.factory.js

@@ -0,0 +1,26 @@
+import { MappedFactory } from "@kensio/part-factory";
+/**
+ * Builds the OpenAPI 3.0 document an `ImportRestApi`, a `PutRestApi` or an
+ * `AWS::ApiGateway::RestApi` `Body` carries.
+ *
+ * ```typescript
+ * const document = simRestApiOpenApiDocumentFactory.make({
+ *   paths: { "/pets": { get: { "x-amazon-apigateway-integration": ... } } },
+ * });
+ * ```
+ *
+ * The envelope is incidental to every test about what an import does with one
+ * member, which is what earns this its place.
+ */
+export const simRestApiOpenApiDocumentFactory = new MappedFactory(() => ({
+    openapi: "3.0.1",
+    title: "pets",
+    paths: {},
+    components: {},
+}), (input) => ({
+    openapi: input.openapi,
+    info: { title: input.title, version: "1.0" },
+    paths: input.paths,
+    components: input.components,
+}));
+//# sourceMappingURL=sim-rest-api-openapi-document.factory.js.map

package/dist/service/apigateway/openapi/sim-rest-api-openapi-document.factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-openapi-document.factory.js","sourceRoot":"","sources":["../../../../src/service/apigateway/openapi/sim-rest-api-openapi-document.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAkBrD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,IAAI,aAAa,CAI/D,GAAG,EAAE,CAAC,CAAC;IACL,OAAO,EAAE,OAAO;IAChB,KAAK,EAAE,MAAM;IACb,KAAK,EAAE,EAAE;IACT,UAAU,EAAE,EAAE;CACf,CAAC,EACF,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACV,OAAO,EAAE,KAAK,CAAC,OAAO;IACtB,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE;IAC5C,KAAK,EAAE,KAAK,CAAC,KAAK;IAClB,UAAU,EAAE,KAAK,CAAC,UAAU;CAC7B,CAAC,CACH,CAAC"}

package/dist/service/apigateway/openapi/sim-rest-api-openapi-document.js

@@ -0,0 +1,85 @@
+import { simRestApiOpenApiRoot } from "./sim-rest-api-openapi-body.js";
+import { simRestApiOpenApiRefusedRootMembers } from "./sim-rest-api-openapi-root-members.js";
+import { SimRestApiOpenApiPaths } from "./sim-rest-api-openapi-paths.js";
+import { SimRestApiOpenApiValue } from "./sim-rest-api-openapi-value.js";
+/**
+ * The OpenAPI versions a REST API is imported from.
+ *
+ * 3.1 is a separate specification rather than a later revision of 3.0, and
+ * Swagger 2 predates both, so each is refused by version rather than read as
+ * far as it happens to agree.
+ */
+const simulatedVersion = /^3\.0\.\d+$/;
+/**
+ * The OpenAPI 3.0 document a REST API is imported from.
+ *
+ * This is the root of the document and the version check on it. Everything
+ * below is read by a class named after the member it reads, because the
+ * refusal surface is most of the work and one reader would not stay readable.
+ */
+export class SimRestApiOpenApiDocument {
+    root;
+    constructor(root) {
+        this.root = root;
+        this.requireSimulatedVersion();
+        this.refuseUnsimulatedMembers();
+    }
+    /**
+     * Read a serialised OpenAPI document.
+     */
+    static parse(body) {
+        return new SimRestApiOpenApiDocument(simRestApiOpenApiRoot(body));
+    }
+    /**
+     * The name the imported API takes, which is the document's own title.
+     */
+    title() {
+        return this.root.member("info").object().member("title").requiredString();
+    }
+    /**
+     * The paths this document declares, one resource and one method per
+     * operation under each.
+     */
+    paths() {
+        return new SimRestApiOpenApiPaths(this.root.member("paths"));
+    }
+    /**
+     * The security schemes an operation's security requirement can name.
+     */
+    securitySchemes() {
+        return this.component("securitySchemes");
+    }
+    /**
+     * One member of `components`, whether or not the document has any.
+     */
+    component(name) {
+        const components = this.root.member("components").optionalObject();
+        if (components === undefined) {
+            return new SimRestApiOpenApiValue({
+                pointer: this.root.pointer.child("components").child(name),
+                value: undefined,
+            });
+        }
+        return components.member(name);
+    }
+    /**
+     * Refuse a document this simulation would read as something it is not.
+     */
+    requireSimulatedVersion() {
+        this.root.refuseMember("swagger", "a Swagger 2 document is not simulated. Only OpenAPI 3.0.x is read.");
+        const declared = this.root.member("openapi");
+        const version = declared.requiredString();
+        if (!simulatedVersion.test(version)) {
+            throw declared.refusal(`is '${version}', and only OpenAPI 3.0.x is simulated`);
+        }
+    }
+    /**
+     * Refuse the root members that would otherwise be dropped.
+     */
+    refuseUnsimulatedMembers() {
+        for (const [name, reason] of simRestApiOpenApiRefusedRootMembers) {
+            this.root.refuseMember(name, reason);
+        }
+    }
+}
+//# sourceMappingURL=sim-rest-api-openapi-document.js.map

package/dist/service/apigateway/openapi/sim-rest-api-openapi-document.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-openapi-document.js","sourceRoot":"","sources":["../../../../src/service/apigateway/openapi/sim-rest-api-openapi-document.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAAE,mCAAmC,EAAE,MAAM,wCAAwC,CAAC;AAE7F,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AAEzE;;;;;;GAMG;AACH,MAAM,gBAAgB,GAAG,aAAa,CAAC;AAEvC;;;;;;GAMG;AACH,MAAM,OAAO,yBAAyB;IACnB,IAAI,CAA0B;IAE/C,YAAY,IAA6B;QACvC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QAEjB,IAAI,CAAC,uBAAuB,EAAE,CAAC;QAC/B,IAAI,CAAC,wBAAwB,EAAE,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,IAAY;QACvB,OAAO,IAAI,yBAAyB,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC;IACpE,CAAC;IAED;;OAEG;IACH,KAAK;QACH,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,cAAc,EAAE,CAAC;IAC5E,CAAC;IAED;;;OAGG;IACH,KAAK;QACH,OAAO,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/D,CAAC;IAED;;OAEG;IACH,eAAe;QACb,OAAO,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;IAC3C,CAAC;IAED;;OAEG;IACK,SAAS,CAAC,IAAY;QAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,cAAc,EAAE,CAAC;QAEnE,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,IAAI,sBAAsB,CAAC;gBAChC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;gBAC1D,KAAK,EAAE,SAAS;aACjB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAED;;OAEG;IACK,uBAAuB;QAC7B,IAAI,CAAC,IAAI,CAAC,YAAY,CACpB,SAAS,EACT,oEAAoE,CACrE,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,QAAQ,CAAC,cAAc,EAAE,CAAC;QAE1C,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACpC,MAAM,QAAQ,CAAC,OAAO,CACpB,OAAO,OAAO,wCAAwC,CACvD,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACK,wBAAwB;QAC9B,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,mCAAmC,EAAE,CAAC;YACjE,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;CACF"}

package/dist/service/apigateway/openapi/sim-rest-api-openapi-iam-authorization.d.ts

@@ -0,0 +1,11 @@
+import type { SimRestApiOpenApiObject } from "./sim-rest-api-openapi-object.js";
+/**
+ * Whether an operation asks for its method to be decided by IAM.
+ *
+ * The extension carries a type and nothing else, and `AWS_IAM` is all AWS
+ * writes there. Anything else is refused rather than read as IAM
+ * authorization, since a method decided by the wrong thing is worse than a
+ * refused import.
+ */
+export declare function simRestApiOpenApiIamAuthorization(operation: SimRestApiOpenApiObject): boolean;
+//# sourceMappingURL=sim-rest-api-openapi-iam-authorization.d.ts.map

package/dist/service/apigateway/openapi/sim-rest-api-openapi-iam-authorization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-openapi-iam-authorization.d.ts","sourceRoot":"","sources":["../../../../src/service/apigateway/openapi/sim-rest-api-openapi-iam-authorization.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAQhF;;;;;;;GAOG;AACH,wBAAgB,iCAAiC,CAC/C,SAAS,EAAE,uBAAuB,GACjC,OAAO,CAqBT"}

package/dist/service/apigateway/openapi/sim-rest-api-openapi-iam-authorization.js

@@ -0,0 +1,30 @@
+/**
+ * The one authorization `x-amazon-apigateway-auth` declares, which is the
+ * extension a document writes IAM authorization on an operation with.
+ */
+const iamAuthorizationType = "AWS_IAM";
+/**
+ * Whether an operation asks for its method to be decided by IAM.
+ *
+ * The extension carries a type and nothing else, and `AWS_IAM` is all AWS
+ * writes there. Anything else is refused rather than read as IAM
+ * authorization, since a method decided by the wrong thing is worse than a
+ * refused import.
+ */
+export function simRestApiOpenApiIamAuthorization(operation) {
+    const declared = operation
+        .member("x-amazon-apigateway-auth")
+        .optionalObject();
+    if (declared === undefined) {
+        return false;
+    }
+    const type = declared.member("type");
+    const authorizationType = type.requiredString();
+    if (authorizationType !== iamAuthorizationType) {
+        throw type.refusal(`is '${authorizationType}', and ${iamAuthorizationType} is the one ` +
+            `authorization x-amazon-apigateway-auth declares. An authorizer is ` +
+            `named by a security requirement instead.`);
+    }
+    return true;
+}
+//# sourceMappingURL=sim-rest-api-openapi-iam-authorization.js.map

package/dist/service/apigateway/openapi/sim-rest-api-openapi-iam-authorization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-openapi-iam-authorization.js","sourceRoot":"","sources":["../../../../src/service/apigateway/openapi/sim-rest-api-openapi-iam-authorization.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,oBAAoB,GAAG,SAAS,CAAC;AAEvC;;;;;;;GAOG;AACH,MAAM,UAAU,iCAAiC,CAC/C,SAAkC;IAElC,MAAM,QAAQ,GAAG,SAAS;SACvB,MAAM,CAAC,0BAA0B,CAAC;SAClC,cAAc,EAAE,CAAC;IAEpB,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,iBAAiB,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;IAEhD,IAAI,iBAAiB,KAAK,oBAAoB,EAAE,CAAC;QAC/C,MAAM,IAAI,CAAC,OAAO,CAChB,OAAO,iBAAiB,UAAU,oBAAoB,cAAc;YAClE,oEAAoE;YACpE,0CAA0C,CAC7C,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/service/apigateway/openapi/sim-rest-api-openapi-import.d.ts

@@ -0,0 +1,31 @@
+import type { SimRestApi } from "../api/sim-rest-api.js";
+import type { SimRestApiAuthorizerCommands } from "../command/authorizer/sim-rest-api-authorizer-commands.js";
+import type { SimRestApiIntegrationCommands } from "../command/integration/sim-rest-api-integration-commands.js";
+import type { SimRestApiMethodCommands } from "../command/method/sim-rest-api-method-commands.js";
+import type { SimRestApiResourceCommands } from "../command/resource/sim-rest-api-resource-commands.js";
+import type { SimRestApiOpenApiDocument } from "./sim-rest-api-openapi-document.js";
+interface SimRestApiOpenApiImportProperties {
+    readonly resourceCommands: SimRestApiResourceCommands;
+    readonly methodCommands: SimRestApiMethodCommands;
+    readonly integrationCommands: SimRestApiIntegrationCommands;
+    readonly authorizerCommands: SimRestApiAuthorizerCommands;
+}
+/**
+ * Turns a read OpenAPI document into the resources, methods, integrations and
+ * authorizers of an API that already exists.
+ *
+ * Everything is created through the ordinary commands, so an imported API is
+ * held to the rules an SDK caller is held to.
+ */
+export declare class SimRestApiOpenApiImport {
+    private readonly resourceCommands;
+    private readonly command;
+    private readonly methods;
+    constructor(properties: SimRestApiOpenApiImportProperties);
+    /**
+     * Create everything the document declares on an API.
+     */
+    into(restApi: SimRestApi, document: SimRestApiOpenApiDocument): void;
+}
+export {};
+//# sourceMappingURL=sim-rest-api-openapi-import.d.ts.map

package/dist/service/apigateway/openapi/sim-rest-api-openapi-import.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-openapi-import.d.ts","sourceRoot":"","sources":["../../../../src/service/apigateway/openapi/sim-rest-api-openapi-import.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,2DAA2D,CAAC;AAC9G,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,6DAA6D,CAAC;AACjH,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,mDAAmD,CAAC;AAClG,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,uDAAuD,CAAC;AAExG,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAMpF,UAAU,iCAAiC;IACzC,QAAQ,CAAC,gBAAgB,EAAE,0BAA0B,CAAC;IACtD,QAAQ,CAAC,cAAc,EAAE,wBAAwB,CAAC;IAClD,QAAQ,CAAC,mBAAmB,EAAE,6BAA6B,CAAC;IAC5D,QAAQ,CAAC,kBAAkB,EAAE,4BAA4B,CAAC;CAC3D;AAED;;;;;;GAMG;AACH,qBAAa,uBAAuB;IAClC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA6B;IAC9D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkC;IAC1D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA2B;IAEnD,YAAY,UAAU,EAAE,iCAAiC,EAWxD;IAED;;OAEG;IACH,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,yBAAyB,GAAG,IAAI,CAkBnE;CACF"}