@kensio/yulin 1.17.2 → 1.18.1

package/dist/service/apigateway/openapi/sim-rest-api-openapi-import.js

@@ -0,0 +1,50 @@
+import { SimRestApiOpenApiCommand } from "./sim-rest-api-openapi-command.js";
+import { SimRestApiOpenApiMethods } from "./sim-rest-api-openapi-method.js";
+import { SimRestApiOpenApiAuthorization } from "./sim-rest-api-openapi-method-authorization.js";
+import { SimRestApiOpenApiPathTree } from "./sim-rest-api-openapi-path-tree.js";
+import { SimRestApiOpenApiSecuritySchemes } from "./sim-rest-api-openapi-security-schemes.js";
+/**
+ * Turns a read OpenAPI document into the resources, methods, integrations and
+ * authorizers of an API that already exists.
+ *
+ * Everything is created through the ordinary commands, so an imported API is
+ * held to the rules an SDK caller is held to.
+ */
+export class SimRestApiOpenApiImport {
+    resourceCommands;
+    command = new SimRestApiOpenApiCommand();
+    methods;
+    constructor(properties) {
+        this.resourceCommands = properties.resourceCommands;
+        this.methods = new SimRestApiOpenApiMethods({
+            methodCommands: properties.methodCommands,
+            integrationCommands: properties.integrationCommands,
+            authorization: new SimRestApiOpenApiAuthorization({
+                authorizerCommands: properties.authorizerCommands,
+                command: this.command,
+            }),
+            command: this.command,
+        });
+    }
+    /**
+     * Create everything the document declares on an API.
+     */
+    into(restApi, document) {
+        const tree = new SimRestApiOpenApiPathTree({
+            restApiId: restApi.apiId,
+            rootResourceId: restApi.rootResource.resourceId,
+            resourceCommands: this.resourceCommands,
+            command: this.command,
+        });
+        const schemes = new SimRestApiOpenApiSecuritySchemes({
+            schemes: document.securitySchemes(),
+        });
+        for (const item of document.paths().items()) {
+            const resourceId = tree.resourceIdFor(item);
+            for (const operation of item.operations()) {
+                this.methods.declare(restApi.apiId, resourceId, operation, schemes);
+            }
+        }
+    }
+}
+//# sourceMappingURL=sim-rest-api-openapi-import.js.map

package/dist/service/apigateway/openapi/sim-rest-api-openapi-import.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-openapi-import.js","sourceRoot":"","sources":["../../../../src/service/apigateway/openapi/sim-rest-api-openapi-import.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAE7E,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,EAAE,8BAA8B,EAAE,MAAM,gDAAgD,CAAC;AAChG,OAAO,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAChF,OAAO,EAAE,gCAAgC,EAAE,MAAM,4CAA4C,CAAC;AAS9F;;;;;;GAMG;AACH,MAAM,OAAO,uBAAuB;IACjB,gBAAgB,CAA6B;IAC7C,OAAO,GAAG,IAAI,wBAAwB,EAAE,CAAC;IACzC,OAAO,CAA2B;IAEnD,YAAY,UAA6C;QACvD,IAAI,CAAC,gBAAgB,GAAG,UAAU,CAAC,gBAAgB,CAAC;QACpD,IAAI,CAAC,OAAO,GAAG,IAAI,wBAAwB,CAAC;YAC1C,cAAc,EAAE,UAAU,CAAC,cAAc;YACzC,mBAAmB,EAAE,UAAU,CAAC,mBAAmB;YACnD,aAAa,EAAE,IAAI,8BAA8B,CAAC;gBAChD,kBAAkB,EAAE,UAAU,CAAC,kBAAkB;gBACjD,OAAO,EAAE,IAAI,CAAC,OAAO;aACtB,CAAC;YACF,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,OAAmB,EAAE,QAAmC;QAC3D,MAAM,IAAI,GAAG,IAAI,yBAAyB,CAAC;YACzC,SAAS,EAAE,OAAO,CAAC,KAAK;YACxB,cAAc,EAAE,OAAO,CAAC,YAAY,CAAC,UAAU;YAC/C,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,gCAAgC,CAAC;YACnD,OAAO,EAAE,QAAQ,CAAC,eAAe,EAAE;SACpC,CAAC,CAAC;QAEH,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;YAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;YAE5C,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;gBAC1C,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/service/apigateway/openapi/sim-rest-api-openapi-integration.d.ts

@@ -0,0 +1,38 @@
+import type { SimRestApiOpenApiValue } from "./sim-rest-api-openapi-value.js";
+/**
+ * What one operation's integration says about the request it sends on.
+ */
+export interface SimRestApiOpenApiIntegrationInput {
+    readonly type: string;
+    readonly integrationHttpMethod: string;
+    readonly uri: string;
+}
+/**
+ * One `x-amazon-apigateway-integration` object, read into the part of the
+ * PutIntegration input it decides.
+ *
+ * The values are handed to PutIntegration rather than checked here, so what an
+ * integration URI may be and which types are simulated are stated in one
+ * place. Only the translation is here: a document names an integration type in
+ * lower case, and the command takes the upper case name the SDK uses.
+ */
+export declare class SimRestApiOpenApiIntegration {
+    private readonly value;
+    constructor(value: SimRestApiOpenApiValue);
+    /**
+     * The part of the PutIntegration input this integration asks for.
+     */
+    putIntegrationInput(): SimRestApiOpenApiIntegrationInput;
+    /**
+     * The method API Gateway calls the integration with, refusing anything but
+     * POST.
+     *
+     * An absent `httpMethod` is accepted, because API Gateway invokes a Lambda
+     * proxy integration the one way whether or not the document says so. POST is
+     * the method it calls Lambda's invoke API with rather than the method the
+     * request arrived as, so anything else says the document meant something
+     * else.
+     */
+    private integrationHttpMethod;
+}
+//# sourceMappingURL=sim-rest-api-openapi-integration.d.ts.map

package/dist/service/apigateway/openapi/sim-rest-api-openapi-integration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-openapi-integration.d.ts","sourceRoot":"","sources":["../../../../src/service/apigateway/openapi/sim-rest-api-openapi-integration.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AAE9E;;GAEG;AACH,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AA6BD;;;;;;;;GAQG;AACH,qBAAa,4BAA4B;IACvC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAyB;IAE/C,YAAY,KAAK,EAAE,sBAAsB,EAExC;IAED;;OAEG;IACH,mBAAmB,IAAI,iCAAiC,CAcvD;IAED;;;;;;;;;OASG;IACH,OAAO,CAAC,qBAAqB;CAgB9B"}

package/dist/service/apigateway/openapi/sim-rest-api-openapi-integration.factory.d.ts

@@ -0,0 +1,19 @@
+import { MappedFactory } from "@kensio/part-factory";
+import type { JSONObject } from "../../../util/type-guard/json.js";
+/**
+ * What a test asks for when it wants an operation's integration.
+ */
+export interface SimRestApiOpenApiIntegrationInput {
+    readonly functionArn: string;
+    readonly regionName: string;
+}
+/**
+ * Builds the `x-amazon-apigateway-integration` extension an operation carries,
+ * with the long URI form an imported document writes.
+ *
+ * ```typescript
+ * const integration = simRestApiOpenApiIntegrationFactory.make({ functionArn });
+ * ```
+ */
+export declare const simRestApiOpenApiIntegrationFactory: MappedFactory<SimRestApiOpenApiIntegrationInput, JSONObject, undefined>;
+//# sourceMappingURL=sim-rest-api-openapi-integration.factory.d.ts.map

package/dist/service/apigateway/openapi/sim-rest-api-openapi-integration.factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-openapi-integration.factory.d.ts","sourceRoot":"","sources":["../../../../src/service/apigateway/openapi/sim-rest-api-openapi-integration.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAC;AAEnE;;GAEG;AACH,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,mCAAmC,yEAe/C,CAAC"}

package/dist/service/apigateway/openapi/sim-rest-api-openapi-integration.factory.js

@@ -0,0 +1,19 @@
+import { MappedFactory } from "@kensio/part-factory";
+/**
+ * Builds the `x-amazon-apigateway-integration` extension an operation carries,
+ * with the long URI form an imported document writes.
+ *
+ * ```typescript
+ * const integration = simRestApiOpenApiIntegrationFactory.make({ functionArn });
+ * ```
+ */
+export const simRestApiOpenApiIntegrationFactory = new MappedFactory(() => ({
+    functionArn: "arn:aws:lambda:us-east-1:111111111111:function:pets",
+    regionName: "us-east-1",
+}), (input) => ({
+    type: "aws_proxy",
+    httpMethod: "POST",
+    uri: `arn:aws:apigateway:${input.regionName}:lambda:path/2015-03-31` +
+        `/functions/${input.functionArn}/invocations`,
+}));
+//# sourceMappingURL=sim-rest-api-openapi-integration.factory.js.map

package/dist/service/apigateway/openapi/sim-rest-api-openapi-integration.factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-openapi-integration.factory.js","sourceRoot":"","sources":["../../../../src/service/apigateway/openapi/sim-rest-api-openapi-integration.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAYrD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAG,IAAI,aAAa,CAIlE,GAAG,EAAE,CAAC,CAAC;IACL,WAAW,EAAE,qDAAqD;IAClE,UAAU,EAAE,WAAW;CACxB,CAAC,EACF,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACV,IAAI,EAAE,WAAW;IACjB,UAAU,EAAE,MAAM;IAClB,GAAG,EACD,sBAAsB,KAAK,CAAC,UAAU,yBAAyB;QAC/D,cAAc,KAAK,CAAC,WAAW,cAAc;CAChD,CAAC,CACH,CAAC"}

package/dist/service/apigateway/openapi/sim-rest-api-openapi-integration.js

@@ -0,0 +1,75 @@
+import { simRestApiLambdaIntegrationHttpMethod } from "../api/method/sim-rest-api-integration.js";
+/**
+ * The integration members that configure something this simulation does not do
+ * with a request, all deferred rather than dropped.
+ *
+ * A Lambda proxy integration hands the request to the function as it arrived
+ * and sends the function's answer back as it was returned, so each of these
+ * would change a request or a response here in a way nothing carries out.
+ */
+const deferredMembers = [
+    "requestTemplates",
+    "requestParameters",
+    "responses",
+    "passthroughBehavior",
+    "contentHandling",
+    "credentials",
+    "timeoutInMillis",
+    "cacheNamespace",
+    "cacheKeyParameters",
+    "connectionType",
+    "connectionId",
+    "tlsConfig",
+];
+const deferred = "configures something this simulation does not do with a request, so an " +
+    "integration carrying it would behave differently here than on AWS";
+/**
+ * One `x-amazon-apigateway-integration` object, read into the part of the
+ * PutIntegration input it decides.
+ *
+ * The values are handed to PutIntegration rather than checked here, so what an
+ * integration URI may be and which types are simulated are stated in one
+ * place. Only the translation is here: a document names an integration type in
+ * lower case, and the command takes the upper case name the SDK uses.
+ */
+export class SimRestApiOpenApiIntegration {
+    value;
+    constructor(value) {
+        this.value = value;
+    }
+    /**
+     * The part of the PutIntegration input this integration asks for.
+     */
+    putIntegrationInput() {
+        const object = this.value.object();
+        object.refuseMember("$ref", "a reusable integration definition is an HTTP API feature, and a REST " +
+            "API declares the integration on the operation itself");
+        object.refuseMembers(deferredMembers, deferred);
+        return {
+            type: object.member("type").requiredString().toUpperCase(),
+            integrationHttpMethod: this.integrationHttpMethod(object),
+            uri: object.member("uri").requiredString(),
+        };
+    }
+    /**
+     * The method API Gateway calls the integration with, refusing anything but
+     * POST.
+     *
+     * An absent `httpMethod` is accepted, because API Gateway invokes a Lambda
+     * proxy integration the one way whether or not the document says so. POST is
+     * the method it calls Lambda's invoke API with rather than the method the
+     * request arrived as, so anything else says the document meant something
+     * else.
+     */
+    integrationHttpMethod(object) {
+        const declared = object.member("httpMethod");
+        const httpMethod = declared.optionalString();
+        if (httpMethod !== undefined &&
+            httpMethod !== simRestApiLambdaIntegrationHttpMethod) {
+            throw declared.refusal(`is '${httpMethod}', and a Lambda proxy integration is declared with ` +
+                `POST, which is the method API Gateway calls Lambda with`);
+        }
+        return simRestApiLambdaIntegrationHttpMethod;
+    }
+}
+//# sourceMappingURL=sim-rest-api-openapi-integration.js.map

package/dist/service/apigateway/openapi/sim-rest-api-openapi-integration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-openapi-integration.js","sourceRoot":"","sources":["../../../../src/service/apigateway/openapi/sim-rest-api-openapi-integration.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qCAAqC,EAAE,MAAM,2CAA2C,CAAC;AAalG;;;;;;;GAOG;AACH,MAAM,eAAe,GAAG;IACtB,kBAAkB;IAClB,mBAAmB;IACnB,WAAW;IACX,qBAAqB;IACrB,iBAAiB;IACjB,aAAa;IACb,iBAAiB;IACjB,gBAAgB;IAChB,oBAAoB;IACpB,gBAAgB;IAChB,cAAc;IACd,WAAW;CACZ,CAAC;AAEF,MAAM,QAAQ,GACZ,yEAAyE;IACzE,mEAAmE,CAAC;AAEtE;;;;;;;;GAQG;AACH,MAAM,OAAO,4BAA4B;IACtB,KAAK,CAAyB;IAE/C,YAAY,KAA6B;QACvC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,mBAAmB;QACjB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QACnC,MAAM,CAAC,YAAY,CACjB,MAAM,EACN,uEAAuE;YACrE,sDAAsD,CACzD,CAAC;QACF,MAAM,CAAC,aAAa,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;QAEhD,OAAO;YACL,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,EAAE,CAAC,WAAW,EAAE;YAC1D,qBAAqB,EAAE,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC;YACzD,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,cAAc,EAAE;SAC3C,CAAC;IACJ,CAAC;IAED;;;;;;;;;OASG;IACK,qBAAqB,CAAC,MAA+B;QAC3D,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC7C,MAAM,UAAU,GAAG,QAAQ,CAAC,cAAc,EAAE,CAAC;QAE7C,IACE,UAAU,KAAK,SAAS;YACxB,UAAU,KAAK,qCAAqC,EACpD,CAAC;YACD,MAAM,QAAQ,CAAC,OAAO,CACpB,OAAO,UAAU,qDAAqD;gBACpE,yDAAyD,CAC5D,CAAC;QACJ,CAAC;QAED,OAAO,qCAAqC,CAAC;IAC/C,CAAC;CACF"}

package/dist/service/apigateway/openapi/sim-rest-api-openapi-lambda-authorizer-scheme.d.ts

@@ -0,0 +1,38 @@
+import type { SimCreateAuthorizerCommandInput } from "../command/authorizer/authorizer.command.js";
+import type { SimRestApiOpenApiObject } from "./sim-rest-api-openapi-object.js";
+interface SimRestApiOpenApiLambdaAuthorizerSchemeProperties {
+    readonly scheme: SimRestApiOpenApiObject;
+    readonly authorizer: SimRestApiOpenApiObject;
+    /** Which of the two kinds of Lambda authorizer the scheme declares. */
+    readonly type: "TOKEN" | "REQUEST";
+}
+/**
+ * An `x-amazon-apigateway-authorizer` of `type: token` or `type: request`,
+ * read into the CreateAuthorizer input it asks for.
+ *
+ * The values are handed to CreateAuthorizer as the document wrote them, so
+ * what a Lambda authorizer requires is stated where an SDK caller and a
+ * template already meet it. That covers the wrapped function URI, the identity
+ * source expressions a `REQUEST` authorizer identifies a caller by, and how
+ * long its decisions are held for.
+ */
+export declare class SimRestApiOpenApiLambdaAuthorizerScheme {
+    private readonly scheme;
+    private readonly authorizer;
+    private readonly type;
+    constructor(properties: SimRestApiOpenApiLambdaAuthorizerSchemeProperties);
+    /**
+     * The CreateAuthorizer input this authorizer asks for.
+     */
+    createAuthorizerInput(restApiId: string, name: string): SimCreateAuthorizerCommandInput;
+    /**
+     * Where this authorizer looks for what identifies a caller.
+     *
+     * A `TOKEN` authorizer reads the header the scheme names. A `REQUEST` one
+     * names its own request parameters, which is the whole of what it has over
+     * the other kind.
+     */
+    private identitySource;
+}
+export {};
+//# sourceMappingURL=sim-rest-api-openapi-lambda-authorizer-scheme.d.ts.map

package/dist/service/apigateway/openapi/sim-rest-api-openapi-lambda-authorizer-scheme.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-openapi-lambda-authorizer-scheme.d.ts","sourceRoot":"","sources":["../../../../src/service/apigateway/openapi/sim-rest-api-openapi-lambda-authorizer-scheme.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,6CAA6C,CAAC;AACnG,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAuBhF,UAAU,iDAAiD;IACzD,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,QAAQ,CAAC,UAAU,EAAE,uBAAuB,CAAC;IAC7C,uEAAuE;IACvE,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,SAAS,CAAC;CACpC;AAED;;;;;;;;;GASG;AACH,qBAAa,uCAAuC;IAClD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0B;IACjD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA0B;IACrD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAsB;IAE3C,YAAY,UAAU,EAAE,iDAAiD,EAIxE;IAED;;OAEG;IACH,qBAAqB,CACnB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,GACX,+BAA+B,CAqBjC;IAED;;;;;;OAMG;IACH,OAAO,CAAC,cAAc;CASvB"}

package/dist/service/apigateway/openapi/sim-rest-api-openapi-lambda-authorizer-scheme.js

@@ -0,0 +1,66 @@
+import { simRestApiOpenApiSchemeIdentitySource } from "./sim-rest-api-openapi-scheme-identity-source.js";
+const authorizerCredentials = "names an IAM Role for API Gateway to assume before invoking the " +
+    "authorizer function, and nothing here assumes one: the function's own " +
+    "resource policy is what admits the call";
+const identityValidationExpression = "checks the token against a regular expression before the function is " +
+    "invoked, and that check is not simulated, so the function would be " +
+    "invoked for a token AWS refuses without it";
+const providerArns = "names the user pools a cognito_user_pools authorizer verifies tokens " +
+    "against, and this one decides by invoking its function";
+const tokenIdentitySource = "is read from the scheme's own name and in for a token authorizer, so an " +
+    "identitySource here would be applied by neither AWS nor this simulation. " +
+    "Declare the authorizer as type request to name the request parameters it " +
+    "identifies a caller by.";
+/**
+ * An `x-amazon-apigateway-authorizer` of `type: token` or `type: request`,
+ * read into the CreateAuthorizer input it asks for.
+ *
+ * The values are handed to CreateAuthorizer as the document wrote them, so
+ * what a Lambda authorizer requires is stated where an SDK caller and a
+ * template already meet it. That covers the wrapped function URI, the identity
+ * source expressions a `REQUEST` authorizer identifies a caller by, and how
+ * long its decisions are held for.
+ */
+export class SimRestApiOpenApiLambdaAuthorizerScheme {
+    scheme;
+    authorizer;
+    type;
+    constructor(properties) {
+        this.scheme = properties.scheme;
+        this.authorizer = properties.authorizer;
+        this.type = properties.type;
+    }
+    /**
+     * The CreateAuthorizer input this authorizer asks for.
+     */
+    createAuthorizerInput(restApiId, name) {
+        this.authorizer.refuseMember("authorizerCredentials", authorizerCredentials);
+        this.authorizer.refuseMember("identityValidationExpression", identityValidationExpression);
+        this.authorizer.refuseMember("providerARNs", providerArns);
+        return {
+            restApiId,
+            name,
+            type: this.type,
+            authorizerUri: this.authorizer.member("authorizerUri").optionalString(),
+            identitySource: this.identitySource(),
+            authorizerResultTtlInSeconds: this.authorizer
+                .member("authorizerResultTtlInSeconds")
+                .optionalNumber(),
+        };
+    }
+    /**
+     * Where this authorizer looks for what identifies a caller.
+     *
+     * A `TOKEN` authorizer reads the header the scheme names. A `REQUEST` one
+     * names its own request parameters, which is the whole of what it has over
+     * the other kind.
+     */
+    identitySource() {
+        if (this.type === "REQUEST") {
+            return this.authorizer.member("identitySource").optionalString();
+        }
+        this.authorizer.refuseMember("identitySource", tokenIdentitySource);
+        return simRestApiOpenApiSchemeIdentitySource(this.scheme);
+    }
+}
+//# sourceMappingURL=sim-rest-api-openapi-lambda-authorizer-scheme.js.map

package/dist/service/apigateway/openapi/sim-rest-api-openapi-lambda-authorizer-scheme.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-openapi-lambda-authorizer-scheme.js","sourceRoot":"","sources":["../../../../src/service/apigateway/openapi/sim-rest-api-openapi-lambda-authorizer-scheme.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qCAAqC,EAAE,MAAM,kDAAkD,CAAC;AAEzG,MAAM,qBAAqB,GACzB,kEAAkE;IAClE,wEAAwE;IACxE,yCAAyC,CAAC;AAE5C,MAAM,4BAA4B,GAChC,uEAAuE;IACvE,qEAAqE;IACrE,4CAA4C,CAAC;AAE/C,MAAM,YAAY,GAChB,uEAAuE;IACvE,wDAAwD,CAAC;AAE3D,MAAM,mBAAmB,GACvB,0EAA0E;IAC1E,2EAA2E;IAC3E,2EAA2E;IAC3E,yBAAyB,CAAC;AAS5B;;;;;;;;;GASG;AACH,MAAM,OAAO,uCAAuC;IACjC,MAAM,CAA0B;IAChC,UAAU,CAA0B;IACpC,IAAI,CAAsB;IAE3C,YAAY,UAA6D;QACvE,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,qBAAqB,CACnB,SAAiB,EACjB,IAAY;QAEZ,IAAI,CAAC,UAAU,CAAC,YAAY,CAC1B,uBAAuB,EACvB,qBAAqB,CACtB,CAAC;QACF,IAAI,CAAC,UAAU,CAAC,YAAY,CAC1B,8BAA8B,EAC9B,4BAA4B,CAC7B,CAAC;QACF,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;QAE3D,OAAO;YACL,SAAS;YACT,IAAI;YACJ,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,aAAa,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,cAAc,EAAE;YACvE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE;YACrC,4BAA4B,EAAE,IAAI,CAAC,UAAU;iBAC1C,MAAM,CAAC,8BAA8B,CAAC;iBACtC,cAAc,EAAE;SACpB,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACK,cAAc;QACpB,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,cAAc,EAAE,CAAC;QACnE,CAAC;QAED,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC;QAEpE,OAAO,qCAAqC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5D,CAAC;CACF"}

package/dist/service/apigateway/openapi/sim-rest-api-openapi-method-authorization.d.ts

@@ -0,0 +1,47 @@
+import type { SimRestApiAuthorizerCommands } from "../command/authorizer/sim-rest-api-authorizer-commands.js";
+import type { SimPutMethodCommandInput } from "../command/method/method.command.js";
+import type { SimRestApiOpenApiCommand } from "./sim-rest-api-openapi-command.js";
+import type { SimRestApiOpenApiOperation } from "./sim-rest-api-openapi-operation.js";
+import type { SimRestApiOpenApiSecuritySchemes } from "./sim-rest-api-openapi-security-schemes.js";
+/**
+ * The authorization a method created from a document is declared with.
+ */
+export type SimRestApiOpenApiMethodAuthorization = Pick<SimPutMethodCommandInput, "authorizationType" | "authorizerId" | "authorizationScopes">;
+interface SimRestApiOpenApiAuthorizationProperties {
+    readonly authorizerCommands: SimRestApiAuthorizerCommands;
+    readonly command: SimRestApiOpenApiCommand;
+}
+/**
+ * Turns what an operation says about who may call it into the authorization
+ * its method is declared with, creating the authorizer a security requirement
+ * names.
+ *
+ * An operation saying nothing is open, which is what an imported method with
+ * no authorizer is on AWS.
+ */
+export declare class SimRestApiOpenApiAuthorization {
+    private readonly authorizerCommands;
+    private readonly command;
+    constructor(properties: SimRestApiOpenApiAuthorizationProperties);
+    /**
+     * How the method one operation becomes says who may call it.
+     */
+    of(restApiId: string, operation: SimRestApiOpenApiOperation, schemes: SimRestApiOpenApiSecuritySchemes): SimRestApiOpenApiMethodAuthorization;
+    /**
+     * The authorizer the scheme a requirement names declares, shared with every
+     * method that named it before, and nothing at all where the scheme declares
+     * a method decided by IAM.
+     */
+    private authorizerFor;
+    /**
+     * A method that sends its requests through one of the API's authorizers, of
+     * the type that authorizer is.
+     *
+     * The requirement's scopes go with it rather than being dropped: AWS checks
+     * scopes against the token a `COGNITO_USER_POOLS` method verifies, so
+     * `PutMethod` refuses them on a method that checks none.
+     */
+    private gated;
+}
+export {};
+//# sourceMappingURL=sim-rest-api-openapi-method-authorization.d.ts.map

package/dist/service/apigateway/openapi/sim-rest-api-openapi-method-authorization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-openapi-method-authorization.d.ts","sourceRoot":"","sources":["../../../../src/service/apigateway/openapi/sim-rest-api-openapi-method-authorization.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,2DAA2D,CAAC;AAC9G,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,qCAAqC,CAAC;AAEpF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAClF,OAAO,KAAK,EACV,0BAA0B,EAE3B,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,4CAA4C,CAAC;AAEnG;;GAEG;AACH,MAAM,MAAM,oCAAoC,GAAG,IAAI,CACrD,wBAAwB,EACxB,mBAAmB,GAAG,cAAc,GAAG,qBAAqB,CAC7D,CAAC;AAOF,UAAU,wCAAwC;IAChD,QAAQ,CAAC,kBAAkB,EAAE,4BAA4B,CAAC;IAC1D,QAAQ,CAAC,OAAO,EAAE,wBAAwB,CAAC;CAC5C;AAED;;;;;;;GAOG;AACH,qBAAa,8BAA8B;IACzC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA+B;IAClE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA2B;IAEnD,YAAY,UAAU,EAAE,wCAAwC,EAG/D;IAED;;OAEG;IACH,EAAE,CACA,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,0BAA0B,EACrC,OAAO,EAAE,gCAAgC,GACxC,oCAAoC,CAoBtC;IAED;;;;OAIG;IACH,OAAO,CAAC,aAAa;IAyBrB;;;;;;;OAOG;IACH,OAAO,CAAC,KAAK;CAad"}

package/dist/service/apigateway/openapi/sim-rest-api-openapi-method-authorization.js

@@ -0,0 +1,86 @@
+import { simRestApiCognitoAuthorizationType } from "../command/method/sim-rest-api-method-authorizer-input.js";
+const declaredTwice = "names a security scheme, and the operation also carries " +
+    "x-amazon-apigateway-auth, so it says twice who may call the method. A " +
+    "method is decided one way.";
+/**
+ * Turns what an operation says about who may call it into the authorization
+ * its method is declared with, creating the authorizer a security requirement
+ * names.
+ *
+ * An operation saying nothing is open, which is what an imported method with
+ * no authorizer is on AWS.
+ */
+export class SimRestApiOpenApiAuthorization {
+    authorizerCommands;
+    command;
+    constructor(properties) {
+        this.authorizerCommands = properties.authorizerCommands;
+        this.command = properties.command;
+    }
+    /**
+     * How the method one operation becomes says who may call it.
+     */
+    of(restApiId, operation, schemes) {
+        const iam = operation.iamAuthorization();
+        const requirement = operation.security();
+        if (requirement === undefined) {
+            return { authorizationType: iam ? "AWS_IAM" : "NONE" };
+        }
+        if (iam) {
+            throw requirement.value.refusal(declaredTwice);
+        }
+        const authorizer = this.authorizerFor(restApiId, requirement, schemes);
+        return authorizer === undefined
+            ? {
+                authorizationType: "AWS_IAM",
+                authorizationScopes: scopesOf(requirement),
+            }
+            : this.gated(authorizer, requirement);
+    }
+    /**
+     * The authorizer the scheme a requirement names declares, shared with every
+     * method that named it before, and nothing at all where the scheme declares
+     * a method decided by IAM.
+     */
+    authorizerFor(restApiId, requirement, schemes) {
+        const shared = schemes.createdAuthorizer(requirement.schemeName);
+        if (shared !== undefined) {
+            return shared;
+        }
+        const { input, pointer } = schemes.authorizer(restApiId, requirement);
+        if (input === undefined) {
+            return undefined;
+        }
+        const created = this.command.run(pointer, () => this.authorizerCommands.createAuthorizer({ input }));
+        schemes.remember(requirement.schemeName, created);
+        return created;
+    }
+    /**
+     * A method that sends its requests through one of the API's authorizers, of
+     * the type that authorizer is.
+     *
+     * The requirement's scopes go with it rather than being dropped: AWS checks
+     * scopes against the token a `COGNITO_USER_POOLS` method verifies, so
+     * `PutMethod` refuses them on a method that checks none.
+     */
+    gated(authorizer, requirement) {
+        return {
+            authorizationType: authorizer.type === simRestApiCognitoAuthorizationType
+                ? simRestApiCognitoAuthorizationType
+                : "CUSTOM",
+            authorizerId: authorizer.id,
+            authorizationScopes: scopesOf(requirement),
+        };
+    }
+}
+/**
+ * The scopes a requirement asks for, left out where it asks for none.
+ *
+ * An empty list is what most requirements carry, and `PutMethod` refuses
+ * scopes on every method but the one kind that checks them, so an empty list
+ * would refuse a method the document never asked to gate by scope.
+ */
+function scopesOf(requirement) {
+    return requirement.scopes.length === 0 ? undefined : requirement.scopes;
+}
+//# sourceMappingURL=sim-rest-api-openapi-method-authorization.js.map

package/dist/service/apigateway/openapi/sim-rest-api-openapi-method-authorization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-openapi-method-authorization.js","sourceRoot":"","sources":["../../../../src/service/apigateway/openapi/sim-rest-api-openapi-method-authorization.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,kCAAkC,EAAE,MAAM,2DAA2D,CAAC;AAgB/G,MAAM,aAAa,GACjB,0DAA0D;IAC1D,wEAAwE;IACxE,4BAA4B,CAAC;AAO/B;;;;;;;GAOG;AACH,MAAM,OAAO,8BAA8B;IACxB,kBAAkB,CAA+B;IACjD,OAAO,CAA2B;IAEnD,YAAY,UAAoD;QAC9D,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;QACxD,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,EAAE,CACA,SAAiB,EACjB,SAAqC,EACrC,OAAyC;QAEzC,MAAM,GAAG,GAAG,SAAS,CAAC,gBAAgB,EAAE,CAAC;QACzC,MAAM,WAAW,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC;QAEzC,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,EAAE,iBAAiB,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QACzD,CAAC;QAED,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QAEvE,OAAO,UAAU,KAAK,SAAS;YAC7B,CAAC,CAAC;gBACE,iBAAiB,EAAE,SAAS;gBAC5B,mBAAmB,EAAE,QAAQ,CAAC,WAAW,CAAC;aAC3C;YACH,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAC1C,CAAC;IAED;;;;OAIG;IACK,aAAa,CACnB,SAAiB,EACjB,WAAiD,EACjD,OAAyC;QAEzC,MAAM,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAEjE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAEtE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,CAC7C,IAAI,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,CAAC,CACpD,CAAC;QACF,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAElD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CACX,UAAoC,EACpC,WAAiD;QAEjD,OAAO;YACL,iBAAiB,EACf,UAAU,CAAC,IAAI,KAAK,kCAAkC;gBACpD,CAAC,CAAC,kCAAkC;gBACpC,CAAC,CAAC,QAAQ;YACd,YAAY,EAAE,UAAU,CAAC,EAAE;YAC3B,mBAAmB,EAAE,QAAQ,CAAC,WAAW,CAAC;SAC3C,CAAC;IACJ,CAAC;CACF;AAED;;;;;;GAMG;AACH,SAAS,QAAQ,CACf,WAAiD;IAEjD,OAAO,WAAW,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC;AAC1E,CAAC"}

package/dist/service/apigateway/openapi/sim-rest-api-openapi-method.d.ts

@@ -0,0 +1,36 @@
+import type { SimRestApiIntegrationCommands } from "../command/integration/sim-rest-api-integration-commands.js";
+import type { SimRestApiMethodCommands } from "../command/method/sim-rest-api-method-commands.js";
+import type { SimRestApiOpenApiCommand } from "./sim-rest-api-openapi-command.js";
+import type { SimRestApiOpenApiAuthorization } from "./sim-rest-api-openapi-method-authorization.js";
+import type { SimRestApiOpenApiOperation } from "./sim-rest-api-openapi-operation.js";
+import type { SimRestApiOpenApiSecuritySchemes } from "./sim-rest-api-openapi-security-schemes.js";
+interface SimRestApiOpenApiMethodsProperties {
+    readonly methodCommands: SimRestApiMethodCommands;
+    readonly integrationCommands: SimRestApiIntegrationCommands;
+    readonly authorization: SimRestApiOpenApiAuthorization;
+    readonly command: SimRestApiOpenApiCommand;
+}
+/**
+ * Declares the method one operation becomes, who may call it, and what it does
+ * with a request.
+ *
+ * A REST API declares the method and its integration separately, so one
+ * operation is two commands, both of them the ordinary ones.
+ */
+export declare class SimRestApiOpenApiMethods {
+    private readonly methodCommands;
+    private readonly integrationCommands;
+    private readonly authorization;
+    private readonly command;
+    constructor(properties: SimRestApiOpenApiMethodsProperties);
+    /**
+     * Declare one operation on the resource its path reached.
+     *
+     * The integration is read before the method is declared, so a document
+     * carrying one this simulation cannot create leaves no method behind for the
+     * next import of the corrected document to collide with.
+     */
+    declare(restApiId: string, resourceId: string, operation: SimRestApiOpenApiOperation, schemes: SimRestApiOpenApiSecuritySchemes): void;
+}
+export {};
+//# sourceMappingURL=sim-rest-api-openapi-method.d.ts.map

package/dist/service/apigateway/openapi/sim-rest-api-openapi-method.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-openapi-method.d.ts","sourceRoot":"","sources":["../../../../src/service/apigateway/openapi/sim-rest-api-openapi-method.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,6DAA6D,CAAC;AACjH,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,mDAAmD,CAAC;AAClG,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAElF,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,gDAAgD,CAAC;AACrG,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AACtF,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,4CAA4C,CAAC;AAEnG,UAAU,kCAAkC;IAC1C,QAAQ,CAAC,cAAc,EAAE,wBAAwB,CAAC;IAClD,QAAQ,CAAC,mBAAmB,EAAE,6BAA6B,CAAC;IAC5D,QAAQ,CAAC,aAAa,EAAE,8BAA8B,CAAC;IACvD,QAAQ,CAAC,OAAO,EAAE,wBAAwB,CAAC;CAC5C;AAED;;;;;;GAMG;AACH,qBAAa,wBAAwB;IACnC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA2B;IAC1D,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAgC;IACpE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAiC;IAC/D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA2B;IAEnD,YAAY,UAAU,EAAE,kCAAkC,EAKzD;IAED;;;;;;OAMG;IACH,OAAO,CACL,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,0BAA0B,EACrC,OAAO,EAAE,gCAAgC,GACxC,IAAI,CAmBN;CACF"}

package/dist/service/apigateway/openapi/sim-rest-api-openapi-method.js

@@ -0,0 +1,40 @@
+import { SimRestApiOpenApiIntegration } from "./sim-rest-api-openapi-integration.js";
+/**
+ * Declares the method one operation becomes, who may call it, and what it does
+ * with a request.
+ *
+ * A REST API declares the method and its integration separately, so one
+ * operation is two commands, both of them the ordinary ones.
+ */
+export class SimRestApiOpenApiMethods {
+    methodCommands;
+    integrationCommands;
+    authorization;
+    command;
+    constructor(properties) {
+        this.methodCommands = properties.methodCommands;
+        this.integrationCommands = properties.integrationCommands;
+        this.authorization = properties.authorization;
+        this.command = properties.command;
+    }
+    /**
+     * Declare one operation on the resource its path reached.
+     *
+     * The integration is read before the method is declared, so a document
+     * carrying one this simulation cannot create leaves no method behind for the
+     * next import of the corrected document to collide with.
+     */
+    declare(restApiId, resourceId, operation, schemes) {
+        const declared = operation.integration();
+        const integration = new SimRestApiOpenApiIntegration(declared).putIntegrationInput();
+        const authorization = this.authorization.of(restApiId, operation, schemes);
+        const address = { restApiId, resourceId, httpMethod: operation.httpMethod };
+        this.command.run(operation.pointer(), () => this.methodCommands.putMethod({
+            input: { ...address, ...authorization },
+        }));
+        this.command.run(declared.pointer, () => this.integrationCommands.putIntegration({
+            input: { ...address, ...integration },
+        }));
+    }
+}
+//# sourceMappingURL=sim-rest-api-openapi-method.js.map

package/dist/service/apigateway/openapi/sim-rest-api-openapi-method.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-openapi-method.js","sourceRoot":"","sources":["../../../../src/service/apigateway/openapi/sim-rest-api-openapi-method.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AAYrF;;;;;;GAMG;AACH,MAAM,OAAO,wBAAwB;IAClB,cAAc,CAA2B;IACzC,mBAAmB,CAAgC;IACnD,aAAa,CAAiC;IAC9C,OAAO,CAA2B;IAEnD,YAAY,UAA8C;QACxD,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,cAAc,CAAC;QAChD,IAAI,CAAC,mBAAmB,GAAG,UAAU,CAAC,mBAAmB,CAAC;QAC1D,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;QAC9C,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;IACpC,CAAC;IAED;;;;;;OAMG;IACH,OAAO,CACL,SAAiB,EACjB,UAAkB,EAClB,SAAqC,EACrC,OAAyC;QAEzC,MAAM,QAAQ,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;QACzC,MAAM,WAAW,GAAG,IAAI,4BAA4B,CAClD,QAAQ,CACT,CAAC,mBAAmB,EAAE,CAAC;QACxB,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAC3E,MAAM,OAAO,GAAG,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,CAAC,UAAU,EAAE,CAAC;QAE5E,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,CACzC,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC;YAC5B,KAAK,EAAE,EAAE,GAAG,OAAO,EAAE,GAAG,aAAa,EAAE;SACxC,CAAC,CACH,CAAC;QAEF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE,CACtC,IAAI,CAAC,mBAAmB,CAAC,cAAc,CAAC;YACtC,KAAK,EAAE,EAAE,GAAG,OAAO,EAAE,GAAG,WAAW,EAAE;SACtC,CAAC,CACH,CAAC;IACJ,CAAC;CACF"}

package/dist/service/apigateway/openapi/sim-rest-api-openapi-object.d.ts

@@ -0,0 +1,47 @@
+import type { JSONValue } from "../../../util/type-guard/json.js";
+import type { SimApiGatewayBadRequest } from "../error/sim-api-gateway.error.js";
+import type { SimRestApiOpenApiPointer } from "./sim-rest-api-openapi-pointer.js";
+import { SimRestApiOpenApiValue } from "./sim-rest-api-openapi-value.js";
+interface SimRestApiOpenApiObjectProperties {
+    readonly pointer: SimRestApiOpenApiPointer;
+    readonly members: ReadonlyMap<string, JSONValue>;
+}
+/**
+ * One object of the document being imported, and the members under it.
+ *
+ * Members are held as a Map rather than read off the parsed record, so a
+ * document carrying a member called `constructor` or `__proto__` is read as
+ * the data it is.
+ */
+export declare class SimRestApiOpenApiObject {
+    readonly pointer: SimRestApiOpenApiPointer;
+    private readonly members;
+    constructor(properties: SimRestApiOpenApiObjectProperties);
+    /**
+     * The member under a name, whether or not the document carries it.
+     */
+    member(name: string): SimRestApiOpenApiValue;
+    /**
+     * The names this object carries, in the order the document wrote them.
+     */
+    memberNames(): readonly string[];
+    /**
+     * Whether this object carries a member under a name.
+     */
+    has(name: string): boolean;
+    /**
+     * Refuse this object, naming where it is in the document.
+     */
+    refusal(reason: string): SimApiGatewayBadRequest;
+    /**
+     * Refuse a member this simulation would ignore rather than apply, with the
+     * reason it is not applied.
+     */
+    refuseMember(name: string, reason: string): void;
+    /**
+     * Refuse every one of a set of members that share a reason.
+     */
+    refuseMembers(names: readonly string[], reason: string): void;
+}
+export {};
+//# sourceMappingURL=sim-rest-api-openapi-object.d.ts.map

package/dist/service/apigateway/openapi/sim-rest-api-openapi-object.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-rest-api-openapi-object.d.ts","sourceRoot":"","sources":["../../../../src/service/apigateway/openapi/sim-rest-api-openapi-object.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AACjF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAElF,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AAEzE,UAAU,iCAAiC;IACzC,QAAQ,CAAC,OAAO,EAAE,wBAAwB,CAAC;IAC3C,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;CAClD;AAED;;;;;;GAMG;AACH,qBAAa,uBAAuB;IAClC,SAAgB,OAAO,EAAE,wBAAwB,CAAC;IAClD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiC;IAEzD,YAAY,UAAU,EAAE,iCAAiC,EAGxD;IAED;;OAEG;IACH,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,sBAAsB,CAK3C;IAED;;OAEG;IACH,WAAW,IAAI,SAAS,MAAM,EAAE,CAE/B;IAED;;OAEG;IACH,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEzB;IAED;;OAEG;IACH,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,uBAAuB,CAE/C;IAED;;;OAGG;IACH,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAM/C;IAED;;OAEG;IACH,aAAa,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAI5D;CACF"}