@sponson/sim 0.4.0 → 0.6.0

package/dist/routes/aws.d.ts

@@ -0,0 +1,43 @@
+import { type ProviderSim } from "../provider.js";
+/** One S3 CORS rule as stored. */
+export interface AwsCorsRule {
+    ID?: string;
+    AllowedOrigin: string[];
+    AllowedMethod: string[];
+    AllowedHeader: string[];
+    ExposeHeader: string[];
+    MaxAgeSeconds?: string;
+}
+/** Simulated AWS state: buckets with their CORS configuration, Amplify apps with their branches. */
+export interface AwsState {
+    /** Access key id → secret access key. */
+    keys: Record<string, string>;
+    region: string;
+    buckets: Record<string, {
+        cors: AwsCorsRule[] | null;
+    }>;
+    amplify: Record<string, {
+        branches: Record<string, {
+            environmentVariables: Record<string, string>;
+        }>;
+    }>;
+}
+/** Initial AWS state. Buckets are listed by name; Amplify apps by id, with their branches' variables. */
+export interface AwsSeed {
+    keys?: Record<string, string>;
+    region?: string;
+    buckets?: Record<string, {
+        cors?: AwsCorsRule[] | null;
+    }>;
+    amplify?: Record<string, {
+        branches: Record<string, {
+            environmentVariables?: Record<string, string>;
+        }>;
+    }>;
+}
+/** The access key id the sim's default seed accepts (`AWS_SIM_ACCESS_KEY_ID` in `simEnv`). */
+export declare const AWS_SIM_ACCESS_KEY_ID = "AKIASIMEXAMPLE0042";
+/** Its secret (`AWS_SIM_SECRET_ACCESS_KEY` in `simEnv`). */
+export declare const AWS_SIM_SECRET_ACCESS_KEY = "sim/aws-secret-access-key-0042";
+/** Simulated AWS (S3 bucket CORS, Amplify branch variables); see the assumptions at the top of this file. */
+export declare const awsSim: ProviderSim<AwsState, AwsSeed>;

package/dist/routes/aws.js

@@ -0,0 +1,211 @@
+/**
+ * Simulated AWS APIs signed with SigV4: S3 bucket CORS configuration (XML) and Amplify branch environment
+ * variables (JSON). They exist to test the generic `http` adapter's `auth: { aws_sigv4 }` and `encoding: xml`
+ * against something that checks both: every request's signature is recomputed (../auth.ts) and refused when wrong.
+ *
+ * Path-style, under `/aws`: `/aws/s3/<bucket>/?cors` stands for `https://<bucket>.s3.<region>.amazonaws.com/?cors`,
+ * `/aws/amplify/apps/<app>/branches/<branch>` for `https://amplify.<region>.amazonaws.com/apps/<app>/branches/<branch>`.
+ *
+ * Assumptions (docs/api-verification.md, "AWS through the generic adapter"):
+ *   A1. Requests are signed with SigV4 for the path's service (`s3`, `amplify`) and the seeded region; S3 requests
+ *       carry `x-amz-content-sha256`. Verified: IAM "Create a signed AWS API request"; S3 "Common request headers".
+ *   A2. `PUT /?cors` takes a `CORSConfiguration` of 1 to 100 `CORSRule`s (each with at least one `AllowedOrigin` and
+ *       one `AllowedMethod`) and requires `Content-MD5` (or an x-amz-checksum); it replaces the whole configuration
+ *       and answers 200 with no body. An empty configuration is `MalformedXML`. Verified: S3 API Reference
+ *       PutBucketCors; botocore `requestChecksumRequired`.
+ *   A3. `GET /?cors` answers the configuration as XML; a bucket without one answers 404 `NoSuchCORSConfiguration`.
+ *       Unverified (the 404 code from memory); `DELETE /?cors` answers 204. Verified: DeleteBucketCors.
+ *   A4. Amplify `GetBranch` (`GET`) and `UpdateBranch` (`POST`) on `/apps/{appId}/branches/{branchName}` answer
+ *       `{ branch: { …, environmentVariables } }`; `environmentVariables` in an update replaces the whole map.
+ *       Verified: Amplify API Reference UpdateBranch, GetBranch. Errors are JSON `{ message }` with
+ *       `x-amzn-ErrorType`; unknown app or branch is 404 `NotFoundException`.
+ */
+import { createHash } from "node:crypto";
+import { sigV4Problem } from "../auth.js";
+import { Reply, route, router } from "../provider.js";
+/** The access key id the sim's default seed accepts (`AWS_SIM_ACCESS_KEY_ID` in `simEnv`). */
+export const AWS_SIM_ACCESS_KEY_ID = "AKIASIMEXAMPLE0042";
+/** Its secret (`AWS_SIM_SECRET_ACCESS_KEY` in `simEnv`). */
+export const AWS_SIM_SECRET_ACCESS_KEY = "sim/aws-secret-access-key-0042";
+/** Simulated AWS (S3 bucket CORS, Amplify branch variables); see the assumptions at the top of this file. */
+export const awsSim = {
+    env: { token: "AWS_SIM_SECRET_ACCESS_KEY", url: "AWS_SIM_URL", testToken: AWS_SIM_SECRET_ACCESS_KEY, more: { AWS_SIM_ACCESS_KEY_ID: AWS_SIM_ACCESS_KEY_ID } },
+    defaultSeed: { buckets: { assets: { cors: null } }, amplify: { d1demo: { branches: { "pr-42": {} } } } },
+    reset(_core, seed) {
+        const buckets = {};
+        for (const [name, b] of Object.entries(seed?.buckets ?? {}))
+            buckets[name] = { cors: b.cors ? structuredClone(b.cors) : null };
+        const amplify = {};
+        for (const [app, a] of Object.entries(seed?.amplify ?? {})) {
+            amplify[app] = { branches: Object.fromEntries(Object.entries(a.branches).map(([n, b]) => [n, { environmentVariables: { ...(b.environmentVariables ?? {}) } }])) };
+        }
+        return { keys: seed?.keys ?? { [AWS_SIM_ACCESS_KEY_ID]: AWS_SIM_SECRET_ACCESS_KEY }, region: seed?.region ?? "us-east-1", buckets, amplify };
+    },
+    /**
+     * `s3.<bucket>.cors`: "delete" removes the configuration; "remove:<ID>" one rule.
+     * `amplify.<app>.<branch>.<NAME>`: a new value, or "delete".
+     */
+    drift(_core, state, { key, rest, value, only }) {
+        if (only !== undefined)
+            return false;
+        const [kind, a, b, c] = rest.split(".");
+        if (kind === "s3" && a && b === "cors")
+            return driftCors(state, a, value, key);
+        if (kind === "amplify" && a && b && c) {
+            const branch = state.amplify[a]?.branches[b];
+            if (!branch)
+                throw new Error(`drift ${key}: no branch ${a}/${b}`);
+            if (value === "delete")
+                delete branch.environmentVariables[c];
+            else
+                branch.environmentVariables[c] = value;
+            return true;
+        }
+        return false;
+    },
+    authorized(headers, state, req) {
+        return authorized(headers, req, state);
+    },
+    routes(core, state, req) {
+        return routes(core, state, req);
+    },
+};
+function driftCors(state, bucket, value, key) {
+    const b = state.buckets[bucket];
+    if (!b)
+        throw new Error(`drift ${key}: no bucket ${bucket}`);
+    if (value === "delete")
+        b.cors = null;
+    else if (value.startsWith("remove:"))
+        b.cors = (b.cors ?? []).filter((r) => r.ID !== value.slice(7));
+    else
+        throw new Error(`drift ${key}: "delete" or "remove:<ID>"`);
+    return true;
+}
+/** A1: the signature must be valid for the service the path belongs to. */
+function authorized(headers, req, state) {
+    const service = /^\/aws\/(s3|amplify)\//.exec(req.url.pathname)?.[1];
+    if (!service)
+        return false;
+    if (service === "s3" && headers["x-amz-content-sha256"] === undefined)
+        return s3Error(400, "InvalidRequest", "Missing required header for this request: x-amz-content-sha256");
+    const problem = sigV4Problem(headers, req, { keys: state.keys, region: state.region, service });
+    if (problem === null)
+        return true;
+    return service === "s3" ? s3Error(403, problem === "InvalidAccessKeyId" ? problem : "SignatureDoesNotMatch", problem) : amplifyError(401, "UnauthorizedException", problem);
+}
+// ---------------------------------------------------------------------------
+// S3 CORS (XML)
+// ---------------------------------------------------------------------------
+const XML = { "content-type": "application/xml" };
+function escape(s) {
+    return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+}
+function unescape(s) {
+    return s.replace(/&lt;/g, "<").replace(/&gt;/g, ">").replace(/&quot;/g, '"').replace(/&apos;/g, "'").replace(/&amp;/g, "&");
+}
+function s3Error(status, code, message) {
+    return new Reply(status, `<?xml version="1.0" encoding="UTF-8"?><Error><Code>${code}</Code><Message>${escape(message)}</Message></Error>`, XML);
+}
+function corsXml(rules) {
+    const el = (name, values) => values.map((v) => `<${name}>${escape(v)}</${name}>`).join("");
+    const body = rules
+        .map((r) => `<CORSRule>${r.ID !== undefined ? el("ID", [r.ID]) : ""}${el("AllowedHeader", r.AllowedHeader)}${el("AllowedMethod", r.AllowedMethod)}${el("AllowedOrigin", r.AllowedOrigin)}${el("ExposeHeader", r.ExposeHeader)}${r.MaxAgeSeconds !== undefined ? el("MaxAgeSeconds", [r.MaxAgeSeconds]) : ""}</CORSRule>`)
+        .join("");
+    return `<?xml version="1.0" encoding="UTF-8"?>\n<CORSConfiguration xmlns="http://s3.amazonaws.com/doc/2006-03-01/">${body}</CORSConfiguration>`;
+}
+/** The rules of a `CORSConfiguration` document; a reason when it is not one S3 accepts (A2). */
+function parseCors(xml) {
+    if (/<!DOCTYPE|<!ENTITY/i.test(xml))
+        return "DTDs are not accepted";
+    if (!/<CORSConfiguration(\s[^>]*)?>[\s\S]*<\/CORSConfiguration>\s*$/.test(xml.replace(/^<\?xml[^>]*\?>\s*/, "")))
+        return "the root element must be CORSConfiguration";
+    const rules = [];
+    for (const m of xml.matchAll(/<CORSRule>([\s\S]*?)<\/CORSRule>/g)) {
+        const values = (name) => [...m[1].matchAll(new RegExp(`<${name}>([^<]*)</${name}>`, "g"))].map((x) => unescape(x[1]));
+        const rule = { AllowedOrigin: values("AllowedOrigin"), AllowedMethod: values("AllowedMethod"), AllowedHeader: values("AllowedHeader"), ExposeHeader: values("ExposeHeader") };
+        const id = values("ID")[0];
+        const age = values("MaxAgeSeconds")[0];
+        if (id !== undefined)
+            rule.ID = id;
+        if (age !== undefined)
+            rule.MaxAgeSeconds = age;
+        if (rule.AllowedOrigin.length === 0 || rule.AllowedMethod.length === 0)
+            return "every CORSRule needs an AllowedOrigin and an AllowedMethod";
+        if (rule.AllowedMethod.some((x) => !["GET", "PUT", "POST", "DELETE", "HEAD"].includes(x)))
+            return "AllowedMethod must be GET, PUT, POST, DELETE or HEAD";
+        rules.push(rule);
+    }
+    if (rules.length === 0 || rules.length > 100)
+        return "a CORSConfiguration holds 1 to 100 CORSRules";
+    return rules;
+}
+function putCors(bucket, headers, body) {
+    const xml = typeof body === "string" ? body : "";
+    const md5 = headers["content-md5"];
+    if (md5 === undefined)
+        return s3Error(400, "InvalidRequest", "Missing required header for this request: Content-Md5");
+    if (md5 !== createHash("md5").update(xml, "utf8").digest("base64"))
+        return s3Error(400, "BadDigest", "The Content-MD5 you specified did not match what we received.");
+    const rules = parseCors(xml);
+    if (typeof rules === "string")
+        return s3Error(400, "MalformedXML", rules);
+    bucket.cors = rules;
+    return new Reply(200, "", XML);
+}
+// ---------------------------------------------------------------------------
+// Amplify branches (JSON)
+// ---------------------------------------------------------------------------
+function amplifyError(status, type, message) {
+    return new Reply(status, { message }, { "x-amzn-errortype": type });
+}
+function branchView(app, name, b) {
+    return new Reply(200, { branch: { branchArn: `arn:aws:amplify:us-east-1:000000000000:apps/${app}/branches/${name}`, branchName: name, stage: "PULL_REQUEST", environmentVariables: { ...b.environmentVariables } } });
+}
+function updateBranch(app, name, b, body) {
+    if (typeof body !== "object" || body === null)
+        return amplifyError(400, "BadRequestException", "body must be a JSON object");
+    const vars = body.environmentVariables;
+    if (vars !== undefined) {
+        if (typeof vars !== "object" || vars === null || !Object.values(vars).every((v) => typeof v === "string"))
+            return amplifyError(400, "BadRequestException", "environmentVariables must map names to strings");
+        b.environmentVariables = { ...vars };
+    }
+    return branchView(app, name, b);
+}
+const routes = router([
+    route("GET", "/s3/:bucket/", ({ state, params, url }) => {
+        const b = state.buckets[params.bucket];
+        if (!b)
+            return s3Error(404, "NoSuchBucket", "The specified bucket does not exist");
+        if (!url.searchParams.has("cors"))
+            return s3Error(501, "NotImplemented", "only ?cors is simulated");
+        return b.cors ? new Reply(200, corsXml(b.cors), XML) : s3Error(404, "NoSuchCORSConfiguration", "The CORS configuration does not exist");
+    }),
+    route("PUT", "/s3/:bucket/", ({ state, params, url, headers, body }) => {
+        const b = state.buckets[params.bucket];
+        if (!b)
+            return s3Error(404, "NoSuchBucket", "The specified bucket does not exist");
+        if (!url.searchParams.has("cors"))
+            return s3Error(501, "NotImplemented", "only ?cors is simulated");
+        return putCors(b, headers, body);
+    }),
+    route("DELETE", "/s3/:bucket/", ({ state, params, url }) => {
+        const b = state.buckets[params.bucket];
+        if (!b)
+            return s3Error(404, "NoSuchBucket", "The specified bucket does not exist");
+        if (!url.searchParams.has("cors"))
+            return s3Error(501, "NotImplemented", "only ?cors is simulated");
+        b.cors = null;
+        return new Reply(204, null);
+    }),
+    route("GET", "/amplify/apps/:app/branches/:branch", ({ state, params }) => {
+        const b = state.amplify[params.app]?.branches[params.branch];
+        return b ? branchView(params.app, params.branch, b) : amplifyError(404, "NotFoundException", "branch not found");
+    }),
+    route("POST", "/amplify/apps/:app/branches/:branch", ({ state, params, body }) => {
+        const b = state.amplify[params.app]?.branches[params.branch];
+        return b ? updateBranch(params.app, params.branch, b, body) : amplifyError(404, "NotFoundException", "branch not found");
+    }),
+], () => s3Error(404, "NotFound", "not simulated"));
+//# sourceMappingURL=aws.js.map

package/dist/routes/aws.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aws.js","sourceRoot":"","sources":["../../src/routes/aws.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAsC,MAAM,gBAAgB,CAAC;AA6B1F,8FAA8F;AAC9F,MAAM,CAAC,MAAM,qBAAqB,GAAG,oBAAoB,CAAC;AAC1D,4DAA4D;AAC5D,MAAM,CAAC,MAAM,yBAAyB,GAAG,gCAAgC,CAAC;AAE1E,6GAA6G;AAC7G,MAAM,CAAC,MAAM,MAAM,GAAmC;IACpD,GAAG,EAAE,EAAE,KAAK,EAAE,2BAA2B,EAAE,GAAG,EAAE,aAAa,EAAE,SAAS,EAAE,yBAAyB,EAAE,IAAI,EAAE,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,EAAE;IAC7J,WAAW,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;IAExG,KAAK,CAAC,KAAK,EAAE,IAAI;QACf,MAAM,OAAO,GAAwB,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/H,MAAM,OAAO,GAAwB,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;YAC3D,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,oBAAoB,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,oBAAoB,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpK,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,qBAAqB,CAAC,EAAE,yBAAyB,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,IAAI,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAC/I,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE;QAC5C,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACrC,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,MAAM;YAAE,OAAO,SAAS,CAAC,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QAC/E,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC7C,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,SAAS,GAAG,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAClE,IAAI,KAAK,KAAK,QAAQ;gBAAE,OAAO,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;;gBACzD,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;YAC5C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,UAAU,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG;QAC5B,OAAO,UAAU,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACzC,CAAC;IAED,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG;QACrB,OAAO,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAClC,CAAC;CACF,CAAC;AAEF,SAAS,SAAS,CAAC,KAAe,EAAE,MAAc,EAAE,KAAa,EAAE,GAAW;IAC5E,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAChC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,SAAS,GAAG,eAAe,MAAM,EAAE,CAAC,CAAC;IAC7D,IAAI,KAAK,KAAK,QAAQ;QAAE,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC;SACjC,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;;QAChG,MAAM,IAAI,KAAK,CAAC,SAAS,GAAG,6BAA6B,CAAC,CAAC;IAChE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,2EAA2E;AAC3E,SAAS,UAAU,CAAC,OAA4B,EAAE,GAAgB,EAAE,KAAe;IACjF,MAAM,OAAO,GAAG,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACrE,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,sBAAsB,CAAC,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,GAAG,EAAE,gBAAgB,EAAE,gEAAgE,CAAC,CAAC;IAC/K,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IAChG,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAClC,OAAO,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,KAAK,oBAAoB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,uBAAuB,EAAE,OAAO,CAAC,CAAC;AAC9K,CAAC;AAED,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E,MAAM,GAAG,GAAG,EAAE,cAAc,EAAE,iBAAiB,EAAE,CAAC;AAElD,SAAS,MAAM,CAAC,CAAS;IACvB,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS;IACzB,OAAO,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;AAC9H,CAAC;AAED,SAAS,OAAO,CAAC,MAAc,EAAE,IAAY,EAAE,OAAe;IAC5D,OAAO,IAAI,KAAK,CAAC,MAAM,EAAE,sDAAsD,IAAI,mBAAmB,MAAM,CAAC,OAAO,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAAC;AAClJ,CAAC;AAED,SAAS,OAAO,CAAC,KAAoB;IACnC,MAAM,EAAE,GAAG,CAAC,IAAY,EAAE,MAAgB,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7G,MAAM,IAAI,GAAG,KAAK;SACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,eAAe,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,eAAe,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,eAAe,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,cAAc,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC;SACxT,IAAI,CAAC,EAAE,CAAC,CAAC;IACZ,OAAO,8GAA8G,IAAI,sBAAsB,CAAC;AAClJ,CAAC;AAED,gGAAgG;AAChG,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,uBAAuB,CAAC;IACpE,IAAI,CAAC,+DAA+D,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC;QAAE,OAAO,4CAA4C,CAAC;IACtK,MAAM,KAAK,GAAkB,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,mCAAmC,CAAC,EAAE,CAAC;QAClE,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,IAAI,IAAI,aAAa,IAAI,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;QAChI,MAAM,IAAI,GAAgB,EAAE,aAAa,EAAE,MAAM,CAAC,eAAe,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,eAAe,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,eAAe,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;QAC3L,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,GAAG,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;QACvC,IAAI,EAAE,KAAK,SAAS;YAAE,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACnC,IAAI,GAAG,KAAK,SAAS;YAAE,IAAI,CAAC,aAAa,GAAG,GAAG,CAAC;QAChD,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,4DAA4D,CAAC;QAC5I,IAAI,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,sDAAsD,CAAC;QACzJ,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,8CAA8C,CAAC;IACpG,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,OAAO,CAAC,MAAsC,EAAE,OAA+B,EAAE,IAAa;IACrG,MAAM,GAAG,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACjD,MAAM,GAAG,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACnC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,GAAG,EAAE,gBAAgB,EAAE,uDAAuD,CAAC,CAAC;IACtH,IAAI,GAAG,KAAK,UAAU,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;QAAE,OAAO,OAAO,CAAC,GAAG,EAAE,WAAW,EAAE,+DAA+D,CAAC,CAAC;IACtK,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC;IAC1E,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC;IACpB,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;AACjC,CAAC;AAED,8EAA8E;AAC9E,0BAA0B;AAC1B,8EAA8E;AAE9E,SAAS,YAAY,CAAC,MAAc,EAAE,IAAY,EAAE,OAAe;IACjE,OAAO,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,UAAU,CAAC,GAAW,EAAE,IAAY,EAAE,CAAmD;IAChG,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,+CAA+C,GAAG,aAAa,IAAI,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,oBAAoB,EAAE,EAAE,GAAG,CAAC,CAAC,oBAAoB,EAAE,EAAE,EAAE,CAAC,CAAC;AACxN,CAAC;AAED,SAAS,YAAY,CAAC,GAAW,EAAE,IAAY,EAAE,CAAmD,EAAE,IAAa;IACjH,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,YAAY,CAAC,GAAG,EAAE,qBAAqB,EAAE,4BAA4B,CAAC,CAAC;IAC7H,MAAM,IAAI,GAAI,IAAgC,CAAC,oBAAoB,CAAC;IACpE,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;YAAE,OAAO,YAAY,CAAC,GAAG,EAAE,qBAAqB,EAAE,gDAAgD,CAAC,CAAC;QAC7M,CAAC,CAAC,oBAAoB,GAAG,EAAE,GAAI,IAA+B,EAAE,CAAC;IACnE,CAAC;IACD,OAAO,UAAU,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,MAAM,GAAG,MAAM,CACnB;IACE,KAAK,CAAC,KAAK,EAAE,cAAc,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE;QACtD,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,CAAC;YAAE,OAAO,OAAO,CAAC,GAAG,EAAE,cAAc,EAAE,qCAAqC,CAAC,CAAC;QACnF,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO,OAAO,CAAC,GAAG,EAAE,gBAAgB,EAAE,yBAAyB,CAAC,CAAC;QACpG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,yBAAyB,EAAE,uCAAuC,CAAC,CAAC;IAC1I,CAAC,CAAC;IACF,KAAK,CAAC,KAAK,EAAE,cAAc,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE;QACrE,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,CAAC;YAAE,OAAO,OAAO,CAAC,GAAG,EAAE,cAAc,EAAE,qCAAqC,CAAC,CAAC;QACnF,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO,OAAO,CAAC,GAAG,EAAE,gBAAgB,EAAE,yBAAyB,CAAC,CAAC;QACpG,OAAO,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC,CAAC;IACF,KAAK,CAAC,QAAQ,EAAE,cAAc,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE;QACzD,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,CAAC;YAAE,OAAO,OAAO,CAAC,GAAG,EAAE,cAAc,EAAE,qCAAqC,CAAC,CAAC;QACnF,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO,OAAO,CAAC,GAAG,EAAE,gBAAgB,EAAE,yBAAyB,CAAC,CAAC;QACpG,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC;QACd,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC9B,CAAC,CAAC;IACF,KAAK,CAAC,KAAK,EAAE,qCAAqC,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE;QACxE,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7D,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,mBAAmB,EAAE,kBAAkB,CAAC,CAAC;IACnH,CAAC,CAAC;IACF,KAAK,CAAC,MAAM,EAAE,qCAAqC,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;QAC/E,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7D,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,mBAAmB,EAAE,kBAAkB,CAAC,CAAC;IAC3H,CAAC,CAAC;CACH,EACD,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,eAAe,CAAC,CAChD,CAAC"}

package/dist/routes/cloud_run.d.ts

@@ -0,0 +1,131 @@
+/**
+ * Simulated Google Cloud Run Admin API v2: services whose every template change makes an immutable revision, their
+ * traffic targets and tags, and the long-running operations a patch answers with.
+ *
+ * Assumptions about the real API this fake encodes, checked against the official REST reference and discovery
+ * document (https://run.googleapis.com/$discovery/rest?version=v2, called DISC below) unless marked unverified. The
+ * critical ones are pinned in scenarios/contract.test.ts (`assumption CR…`).
+ *   CR1. The API is `https://run.googleapis.com/v2`; every method takes an OAuth access token with the
+ *        `cloud-platform` scope as `Authorization: Bearer`, which `gcloud auth print-access-token` prints for the
+ *        active account. (verified: DISC; https://docs.cloud.google.com/sdk/gcloud/reference/auth/print-access-token)
+ *   CR2. `GET /v2/projects/{project}/locations/{region}/services/{service}` answers the Service: `etag` ("may be used
+ *        to detect modification conflict during updates"), `template`, `traffic`, `trafficStatuses`,
+ *        `latestReadyRevision`, `latestCreatedRevision`, `reconciling`, and `generation` as a JSON string (int64).
+ *        (verified: DISC, https://docs.cloud.google.com/run/docs/reference/rest/v2/projects.locations.services)
+ *   CR3. `PATCH /v2/{service.name}?updateMask=<fields>` takes a Service and answers a long-running Operation; only the
+ *        fields the mask names are written. (verified: https://docs.cloud.google.com/run/docs/reference/rest/v2/projects.locations.services/patch;
+ *        the sim refuses a patch without a mask, which the adapter never sends)
+ *   CR4. Each change of `template` makes a new, immutable revision; `template.revision` names it ("If this field is
+ *        omitted, it will be automatically generated based on the Service name"). A name starts with the service's
+ *        name and `-`, has only lowercase letters, digits and `-`, does not end with `-` and is at most 63 characters.
+ *        (verified: DISC; https://docs.cloud.google.com/run/docs/configuring/services/containers) A name already
+ *        taken is refused (unverified: the sim answers 409 ALREADY_EXISTS).
+ *   CR5. A TrafficTarget is `{ type, revision, percent, tag }`, `type` `TRAFFIC_TARGET_ALLOCATION_TYPE_LATEST` or
+ *        `…_REVISION`, `percent` zero when left out; empty `traffic` means 100% to the latest ready revision. LATEST
+ *        follows the latest ready revision, so a template change alone moves its share to the new revision; gcloud's
+ *        `--no-traffic` "assigns any traffic assigned to the LATEST revision to the specific revision bound to LATEST
+ *        before the deployment", after which "the LATEST revision will not receive traffic on future deployments".
+ *        (verified: DISC; https://docs.cloud.google.com/sdk/gcloud/reference/run/deploy)
+ *   CR6. A `tag` gives its revision a URL of its own with no traffic ("test the new revision at a specific URL,
+ *        without serving traffic"), shown in `trafficStatuses[].uri` ("Displays the target URI"); its form is not to be
+ *        parsed ("Don't parse the SERVICE_IDENTIFIER"), so it is read, never built. (verified:
+ *        https://docs.cloud.google.com/run/docs/rollouts-rollbacks-traffic-migration,
+ *        https://docs.cloud.google.com/run/docs/triggering/https-request)
+ *   CR7. Whether `latestReadyRevision`, `latestCreatedRevision` and `TrafficTarget.revision` hold a revision's short
+ *        name or its full resource name is not documented (unverified): clients take the last path segment; the sim
+ *        answers full names in `latest*Revision` and the names it was sent in `traffic`.
+ *   CR8. The `etag` sent in a patch body is a precondition: a patch whose etag is no longer the service's is refused
+ *        and changes nothing. (unverified: the docs say only that it "may be used to detect modification conflict";
+ *        the sim answers 409 ABORTED)
+ *   CR9. `GET /v2/{name=projects/*\/locations/*\/operations/*}` answers `{ name, done, error, response }`; when `done`,
+ *        "either `error` or `response` is available". (verified: DISC) The operation of a template change ends when
+ *        the new revision is ready, or with an `error` when it cannot become ready (unverified: the sim ends it after
+ *        `operationPolls` polls, failing it for an image in `failImages`).
+ *   CR10. `GET …/services/{service}/revisions/{revision}` answers the Revision: `containers` (`name`, `image`, `env`
+ *        of `{ name, value }` or `{ name, valueSource: { secretKeyRef } }`) and `conditions` of `{ type, state }`,
+ *        where type "Ready" is "True when the Resource is ready" and state is CONDITION_SUCCEEDED, CONDITION_FAILED,
+ *        CONDITION_PENDING or CONDITION_RECONCILING. (verified: DISC)
+ *   CR11. Once an operation has succeeded, the Service answers the new `traffic` and its `trafficStatuses`
+ *        (`reconciling` false: then they "will match"). (verified: DISC, `reconciling`)
+ *   CR12. Cloud Run deletes revisions by itself: past 1000 per service, "non-addressable revisions are automatically
+ *        deleted in historical order"; past 2000 tags per project and region, "tags that don't have a specified
+ *        traffic percentage are automatically deleted". (verified: https://docs.cloud.google.com/run/quotas) Whether
+ *        a tagged revision counts as addressable is not documented. The sim does not delete anything by itself.
+ *   CR13. A tag is lowercase (the only documented rule, "your lowercase tag name"); the sim also refuses one that is
+ *        not a DNS label (`^[a-z]([a-z0-9-]*[a-z0-9])?$`) or that two targets share. (unverified)
+ */
+import { type CreatedBy, type ProviderSim } from "../provider.js";
+/** One traffic target, as sent and stored (CR5). */
+export interface CloudRunTrafficTarget {
+    type: string;
+    revision?: string;
+    percent?: number;
+    tag?: string;
+}
+/** A revision: the template it was made from, and whether it came up (CR4, CR10). */
+export interface CloudRunRevision {
+    name: string;
+    /** `<project>/<region>/<service>`. */
+    service: string;
+    template: Record<string, unknown>;
+    state: "pending" | "ready" | "failed";
+    createdBy: CreatedBy;
+}
+/** A Cloud Run service. */
+export interface CloudRunService {
+    project: string;
+    region: string;
+    name: string;
+    generation: number;
+    etag: string;
+    template: Record<string, unknown>;
+    traffic: CloudRunTrafficTarget[];
+    latestCreated: string;
+    latestReady: string;
+    /** The part of its URLs Cloud Run makes up (CR6). */
+    identifier: string;
+    createdBy: CreatedBy;
+}
+/** A long-running operation a patch started (CR9). */
+export interface CloudRunOperation {
+    name: string;
+    service: string;
+    /** The revision it brings up, for a template change. */
+    revision: string | null;
+    polls: number;
+    done: boolean;
+    error?: {
+        code: number;
+        message: string;
+    };
+}
+/** The simulated Cloud Run's state. */
+export interface CloudRunState {
+    services: CloudRunService[];
+    revisions: CloudRunRevision[];
+    operations: CloudRunOperation[];
+    /** Polls an operation answers `done: false` before it ends (default 1). */
+    operationPolls: number;
+    /** Images whose revisions never become ready. */
+    failImages: string[];
+}
+/** One service a scenario or test seeds (`seed: { cloud_run: { services: [...] } }`). */
+export interface CloudRunSeedService {
+    /** Default `demo-project`. */
+    project?: string;
+    /** Default `us-central1`. */
+    region?: string;
+    name: string;
+    image?: string;
+    env?: Record<string, string>;
+    /** `latest` (default): all traffic to LATEST; `pinned`: all traffic to the first revision by name. */
+    traffic?: "latest" | "pinned";
+}
+/** What a scenario or test seeds the simulated Cloud Run with. */
+export interface CloudRunSeed {
+    services?: CloudRunSeedService[];
+    operationPolls?: number;
+    failImages?: string[];
+}
+/** The simulated Cloud Run Admin API, registered in `PROVIDERS` (packages/sim/src/state.ts) and served under `/cloud_run`. */
+export declare const cloudRunSim: ProviderSim<CloudRunState, CloudRunSeed>;