@kensio/yulin 0.32.0 → 0.34.0

package/dist/dist-hidden/service/cloudformation/bind/validate/sim-cfn-exec-binding-finder.d.ts

@@ -0,0 +1,69 @@
+import type { SimCfnCfBinding, SimCfnExecutableResourceBinding } from "../sim-cfn-exec-binding.type.js";
+import type { SimCfnResource } from "../../resource/sim-cfn-resource.js";
+interface SimCfnCffBindingFinderProps {
+    readonly resource: SimCfnResource;
+    readonly bindings?: readonly SimCfnExecutableResourceBinding[] | undefined;
+}
+/**
+ * Finds the executable binding that should replace CloudFormation FunctionCode.
+ *
+ * A CloudFront Function can be declared in a synthesized CloudFormation template,
+ * while test code may provide an executable JavaScript handler through a binding.
+ * This class keeps the matching rules in one place so the CreateFunction input
+ * builder can stay focused on validating Resource properties and building the
+ * command input.
+ *
+ * Supported binding targets:
+ *
+ * - CloudFormation logical ID, for templates written directly or synthesized by CDK
+ * - CDK construct ID, recovered from Resource Metadata path values
+ * - resolved CloudFront Function name, for name-based bindings
+ */
+export declare class SimCfnCffBindingFinder {
+    private readonly resource;
+    private readonly bindings;
+    constructor(props: SimCfnCffBindingFinderProps);
+    /**
+     * Return the first binding that targets this CloudFront Function Resource.
+     *
+     * Logical ID matching is evaluated before function-name matching because the
+     * logical ID is stable even when the template omits the Function Name property
+     * and the simulator falls back to the Resource logical ID as the local name.
+     */
+    findBinding(functionName: string): SimCfnCfBinding | undefined;
+    /**
+     * Decide whether a binding targets this Resource.
+     *
+     * The union uses distinct target fields, so checking property presence is enough
+     * to choose the matching strategy. The final false branch protects future binding
+     * shapes from being treated as matches before explicit support is added.
+     */
+    private matchesBinding;
+    /**
+     * Match either the synthesized Resource logical ID or the original CDK construct
+     * ID extracted from metadata.
+     *
+     * CDK commonly synthesizes logical IDs with hashes. The metadata path preserves
+     * the construct path, which lets tests bind to the readable construct ID instead
+     * of the generated logical ID.
+     */
+    private resourceMatchesLogicalIdBinding;
+    /**
+     * Extract the construct ID from a CDK metadata path.
+     *
+     * CDK paths for low-level resources often end with `/Resource`. In that case,
+     * the construct ID is the previous path segment. If the path does not end with
+     * `Resource`, the last path segment is the best available construct identifier.
+     */
+    private cdkConstructIdFromPath;
+    /**
+     * Read a CDK path value from Resource Metadata.
+     *
+     * CDK has used more than one metadata key for construct paths over time. The
+     * shared `cdkPathMetadataKeys` list captures those supported keys, and the first
+     * string value found is treated as the path for this Resource.
+     */
+    private cdkPath;
+}
+export {};
+//# sourceMappingURL=sim-cfn-exec-binding-finder.d.ts.map

package/dist/dist-hidden/service/cloudformation/bind/validate/sim-cfn-exec-binding-finder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-exec-binding-finder.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudformation/bind/validate/sim-cfn-exec-binding-finder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,eAAe,EACf,+BAA+B,EAChC,MAAM,iCAAiC,CAAC;AAEzC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAEzE,UAAU,2BAA2B;IACnC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,+BAA+B,EAAE,GAAG,SAAS,CAAC;CAC5E;AAED;;;;;;;;;;;;;;GAcG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAC1C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CACgC;IAEzD,YAAY,KAAK,EAAE,2BAA2B,EAG7C;IAED;;;;;;OAMG;IACH,WAAW,CAAC,YAAY,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAI7D;IAED;;;;;;OAMG;IACH,OAAO,CAAC,cAAc;IAgBtB;;;;;;;OAOG;IACH,OAAO,CAAC,+BAA+B;IAOvC;;;;;;OAMG;IACH,OAAO,CAAC,sBAAsB;IAiB9B;;;;;;OAMG;IACH,OAAO,CAAC,OAAO;CAsBhB"}

package/dist/dist-hidden/service/cloudformation/bind/validate/sim-cfn-exec-binding-finder.js

@@ -0,0 +1,106 @@
+import { cdkPathMetadataKeys } from "./sim-cfn-exec-binding-matcher.js";
+/**
+ * Finds the executable binding that should replace CloudFormation FunctionCode.
+ *
+ * A CloudFront Function can be declared in a synthesized CloudFormation template,
+ * while test code may provide an executable JavaScript handler through a binding.
+ * This class keeps the matching rules in one place so the CreateFunction input
+ * builder can stay focused on validating Resource properties and building the
+ * command input.
+ *
+ * Supported binding targets:
+ *
+ * - CloudFormation logical ID, for templates written directly or synthesized by CDK
+ * - CDK construct ID, recovered from Resource Metadata path values
+ * - resolved CloudFront Function name, for name-based bindings
+ */
+export class SimCfnCffBindingFinder {
+    resource;
+    bindings;
+    constructor(props) {
+        this.resource = props.resource;
+        this.bindings = props.bindings;
+    }
+    /**
+     * Return the first binding that targets this CloudFront Function Resource.
+     *
+     * Logical ID matching is evaluated before function-name matching because the
+     * logical ID is stable even when the template omits the Function Name property
+     * and the simulator falls back to the Resource logical ID as the local name.
+     */
+    findBinding(functionName) {
+        return this.bindings?.find((binding) => this.matchesBinding(binding, functionName));
+    }
+    /**
+     * Decide whether a binding targets this Resource.
+     *
+     * The union uses distinct target fields, so checking property presence is enough
+     * to choose the matching strategy. The final false branch protects future binding
+     * shapes from being treated as matches before explicit support is added.
+     */
+    matchesBinding(binding, functionName) {
+        if ("logicalId" in binding) {
+            return this.resourceMatchesLogicalIdBinding(binding.logicalId);
+        }
+        if ("functionName" in binding) {
+            return binding.functionName === functionName;
+        }
+        /* v8 ignore next */
+        return false;
+    }
+    /**
+     * Match either the synthesized Resource logical ID or the original CDK construct
+     * ID extracted from metadata.
+     *
+     * CDK commonly synthesizes logical IDs with hashes. The metadata path preserves
+     * the construct path, which lets tests bind to the readable construct ID instead
+     * of the generated logical ID.
+     */
+    resourceMatchesLogicalIdBinding(logicalId) {
+        return (this.resource.logicalId === logicalId ||
+            this.cdkConstructIdFromPath() === logicalId);
+    }
+    /**
+     * Extract the construct ID from a CDK metadata path.
+     *
+     * CDK paths for low-level resources often end with `/Resource`. In that case,
+     * the construct ID is the previous path segment. If the path does not end with
+     * `Resource`, the last path segment is the best available construct identifier.
+     */
+    cdkConstructIdFromPath() {
+        const path = this.cdkPath();
+        if (path === undefined) {
+            return undefined;
+        }
+        const parts = path.split("/").filter((part) => part.length > 0);
+        const resourceIndex = parts.lastIndexOf("Resource");
+        if (resourceIndex > 0) {
+            return parts[resourceIndex - 1];
+        }
+        return parts.at(-1);
+    }
+    /**
+     * Read a CDK path value from Resource Metadata.
+     *
+     * CDK has used more than one metadata key for construct paths over time. The
+     * shared `cdkPathMetadataKeys` list captures those supported keys, and the first
+     * string value found is treated as the path for this Resource.
+     */
+    cdkPath() {
+        const metadata = this.resource.template["Metadata"];
+        if (metadata === null ||
+            typeof metadata !== "object" ||
+            Array.isArray(metadata)) {
+            return undefined;
+        }
+        for (const metadataKey of cdkPathMetadataKeys) {
+            // eslint-disable-next-line security/detect-object-injection
+            const value = metadata[metadataKey];
+            if (typeof value === "string") {
+                return value;
+            }
+        }
+        return undefined;
+    }
+}
+//# sourceMappingURL=sim-cfn-exec-binding-finder.js.map

package/dist/dist-hidden/service/cloudformation/bind/validate/sim-cfn-exec-binding-finder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-exec-binding-finder.js","sourceRoot":"","sources":["../../../../../src/service/cloudformation/bind/validate/sim-cfn-exec-binding-finder.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAQxE;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,sBAAsB;IAChB,QAAQ,CAAiB;IACzB,QAAQ,CACgC;IAEzD,YAAY,KAAkC;QAC5C,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QAC/B,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IACjC,CAAC;IAED;;;;;;OAMG;IACH,WAAW,CAAC,YAAoB;QAC9B,OAAO,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CACrC,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,CAAC,CACZ,CAAC;IACnC,CAAC;IAED;;;;;;OAMG;IACK,cAAc,CACpB,OAAwC,EACxC,YAAoB;QAEpB,IAAI,WAAW,IAAI,OAAO,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC,+BAA+B,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACjE,CAAC;QAED,IAAI,cAAc,IAAI,OAAO,EAAE,CAAC;YAC9B,OAAO,OAAO,CAAC,YAAY,KAAK,YAAY,CAAC;QAC/C,CAAC;QAED,oBAAoB;QACpB,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;;;OAOG;IACK,+BAA+B,CAAC,SAAiB;QACvD,OAAO,CACL,IAAI,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS;YACrC,IAAI,CAAC,sBAAsB,EAAE,KAAK,SAAS,CAC5C,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACK,sBAAsB;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAE5B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAChE,MAAM,aAAa,GAAG,KAAK,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAEpD,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,KAAK,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC;QAClC,CAAC;QAED,OAAO,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACtB,CAAC;IAED;;;;;;OAMG;IACK,OAAO;QACb,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAEpD,IACE,QAAQ,KAAK,IAAI;YACjB,OAAO,QAAQ,KAAK,QAAQ;YAC5B,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EACvB,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,KAAK,MAAM,WAAW,IAAI,mBAAmB,EAAE,CAAC;YAC9C,4DAA4D;YAC5D,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;YAEpC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;CACF"}

package/dist/dist-hidden/service/cloudformation/bind/validate/sim-cfn-exec-binding-matcher.d.ts

@@ -0,0 +1,35 @@
+import type { SimCfnResource } from "../../resource/sim-cfn-resource.js";
+import type { SimCfnExecutableResourceBinding } from "../sim-cfn-exec-binding.type.js";
+/**
+ * CDK metadata paths for identifying resources corresponding to bindings.
+ *
+ * CDK templates commonly store construct path information under `aws:cdk:path`.
+ * Some synthesized templates also expose `aws:cdk:logicalId`. Both values can
+ * help map a user-facing executable binding back to the synthesized Resource.
+ */
+export declare const cdkPathMetadataKeys: string[];
+/**
+ * Matches executable-resource bindings against synthesized CloudFormation
+ * Resources.
+ *
+ * This class keeps the matching rules separate from validation flow. The
+ * validator only needs to decide whether every binding resolves; this matcher
+ * explains what "resolves" means for each supported binding shape.
+ */
+export declare class SimCfnExecutableResourceBindingMatcher {
+    #private;
+    constructor(resources: ReadonlyMap<string, SimCfnResource>);
+    /**
+     * Return true when the binding points at a Resource in the Stack.
+     *
+     * Each binding variant uses the most natural identifier available:
+     *
+     * - `logicalId` checks the synthesized logical ID and the CDK construct ID.
+     * - `functionName` checks the CloudFront Function Name property, falling
+     *   back to the logical ID because CloudFront Functions can omit Name.
+     * - `arn` reconstructs the simulator's CloudFront Function ARN format.
+     * - `cdkPath` checks CDK metadata emitted into the synthesized template.
+     */
+    matches(binding: SimCfnExecutableResourceBinding): boolean;
+}
+//# sourceMappingURL=sim-cfn-exec-binding-matcher.d.ts.map

package/dist/dist-hidden/service/cloudformation/bind/validate/sim-cfn-exec-binding-matcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-exec-binding-matcher.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudformation/bind/validate/sim-cfn-exec-binding-matcher.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,iCAAiC,CAAC;AAEvF;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB,UAAwC,CAAC;AAEzE;;;;;;;GAOG;AACH,qBAAa,sCAAsC;;IAGjD,YAAY,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,cAAc,CAAC,EAMzD;IAED;;;;;;;;;;OAUG;IACH,OAAO,CAAC,OAAO,EAAE,+BAA+B,GAAG,OAAO,CA4BzD;CAiGF"}

package/dist/dist-hidden/service/cloudformation/bind/validate/sim-cfn-exec-binding-matcher.js

@@ -0,0 +1,126 @@
+/**
+ * CDK metadata paths for identifying resources corresponding to bindings.
+ *
+ * CDK templates commonly store construct path information under `aws:cdk:path`.
+ * Some synthesized templates also expose `aws:cdk:logicalId`. Both values can
+ * help map a user-facing executable binding back to the synthesized Resource.
+ */
+export const cdkPathMetadataKeys = ["aws:cdk:path", "aws:cdk:logicalId"];
+/**
+ * Matches executable-resource bindings against synthesized CloudFormation
+ * Resources.
+ *
+ * This class keeps the matching rules separate from validation flow. The
+ * validator only needs to decide whether every binding resolves; this matcher
+ * explains what "resolves" means for each supported binding shape.
+ */
+export class SimCfnExecutableResourceBindingMatcher {
+    #resources;
+    constructor(resources) {
+        /*
+         * Convert the map values once so each matching branch can scan a stable
+         * resource list without repeating `[...resources.values()]`.
+         */
+        this.#resources = resources.values().toArray();
+    }
+    /**
+     * Return true when the binding points at a Resource in the Stack.
+     *
+     * Each binding variant uses the most natural identifier available:
+     *
+     * - `logicalId` checks the synthesized logical ID and the CDK construct ID.
+     * - `functionName` checks the CloudFront Function Name property, falling
+     *   back to the logical ID because CloudFront Functions can omit Name.
+     * - `arn` reconstructs the simulator's CloudFront Function ARN format.
+     * - `cdkPath` checks CDK metadata emitted into the synthesized template.
+     */
+    matches(binding) {
+        if ("logicalId" in binding) {
+            return this.#resources.some((resource) => this.#resourceMatchesLogicalIdBinding(resource, binding.logicalId));
+        }
+        if ("functionName" in binding) {
+            return this.#resources.some((resource) => this.#cloudFrontFunctionName(resource) === binding.functionName);
+        }
+        if ("arn" in binding) {
+            return this.#resources.some((resource) => this.#cloudFrontFunctionArn(resource) === binding.arn);
+        }
+        if ("cdkPath" in binding) {
+            return this.#resources.some((resource) => this.#cdkPath(resource) === binding.cdkPath);
+        }
+        /* v8 ignore next -- compile-time exhaustive guard */
+        return false;
+    }
+    #resourceMatchesLogicalIdBinding(resource, logicalId) {
+        /*
+         * CDK-generated logical IDs are not always pleasant to author by hand.
+         * Accepting the construct ID from the CDK path lets binding config refer to
+         * the original construct name while still validating against the synthesized
+         * template.
+         */
+        return (resource.logicalId === logicalId ||
+            this.#cdkConstructIdFromPath(resource) === logicalId);
+    }
+    #cloudFrontFunctionName(resource) {
+        if (resource.type !== "AWS::CloudFront::Function") {
+            return undefined;
+        }
+        const name = resource.properties["Name"];
+        /*
+         * CloudFront Function Name is optional in CDK output. When no explicit name
+         * is present, the simulator identifies the function using its logical ID,
+         * matching the fallback used when the sim Function resource is created.
+         */
+        return typeof name === "string" && name.length > 0
+            ? name
+            : resource.logicalId;
+    }
+    #cloudFrontFunctionArn(resource) {
+        const functionName = this.#cloudFrontFunctionName(resource);
+        /* v8 ignore if */
+        if (functionName === undefined) {
+            return undefined;
+        }
+        /*
+         * CloudFront Function ARNs do not contain a region component. The account
+         * still comes from the resource scope so bindings can validate exact ARNs
+         * when CDK associations use ARN-based references.
+         */
+        return `arn:aws:cloudfront::${resource.accountRegionScope.accountId}:function/${functionName}`;
+    }
+    #cdkPath(resource) {
+        const metadata = resource.template["Metadata"];
+        if (metadata === null ||
+            typeof metadata !== "object" ||
+            Array.isArray(metadata)) {
+            return undefined;
+        }
+        for (const metadataKey of cdkPathMetadataKeys) {
+            // eslint-disable-next-line security/detect-object-injection
+            const value = metadata[metadataKey];
+            if (typeof value === "string") {
+                return value;
+            }
+        }
+        /* v8 ignore next */
+        return undefined;
+    }
+    #cdkConstructIdFromPath(resource) {
+        const path = this.#cdkPath(resource);
+        if (path === undefined) {
+            return undefined;
+        }
+        const parts = path.split("/").filter((part) => part.length > 0);
+        const resourceIndex = parts.lastIndexOf("Resource");
+        /*
+         * L2 CDK constructs often synthesize a child named `Resource`, for example:
+         * `Stack/RedirectFunction/Resource`. In that case the meaningful construct
+         * ID is the path segment before `Resource`, not the generated child
+         * segment.
+         */
+        if (resourceIndex > 0) {
+            return parts[resourceIndex - 1];
+        }
+        return parts.at(-1);
+    }
+}
+//# sourceMappingURL=sim-cfn-exec-binding-matcher.js.map

package/dist/dist-hidden/service/cloudformation/bind/validate/sim-cfn-exec-binding-matcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-exec-binding-matcher.js","sourceRoot":"","sources":["../../../../../src/service/cloudformation/bind/validate/sim-cfn-exec-binding-matcher.ts"],"names":[],"mappings":"AAGA;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,cAAc,EAAE,mBAAmB,CAAC,CAAC;AAEzE;;;;;;;GAOG;AACH,MAAM,OAAO,sCAAsC;IACxC,UAAU,CAA4B;IAE/C,YAAY,SAA8C;QACxD;;;WAGG;QACH,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;IACjD,CAAC;IAED;;;;;;;;;;OAUG;IACH,OAAO,CAAC,OAAwC;QAC9C,IAAI,WAAW,IAAI,OAAO,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CACvC,IAAI,CAAC,gCAAgC,CAAC,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,CACnE,CAAC;QACJ,CAAC;QAED,IAAI,cAAc,IAAI,OAAO,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CACzB,CAAC,QAAQ,EAAE,EAAE,CACX,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC,KAAK,OAAO,CAAC,YAAY,CAClE,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,IAAI,OAAO,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CACzB,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,KAAK,OAAO,CAAC,GAAG,CACpE,CAAC;QACJ,CAAC;QAED,IAAI,SAAS,IAAI,OAAO,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CACzB,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,OAAO,CAAC,OAAO,CAC1D,CAAC;QACJ,CAAC;QAED,qDAAqD;QACrD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,gCAAgC,CAC9B,QAAwB,EACxB,SAA6B;QAE7B;;;;;WAKG;QACH,OAAO,CACL,QAAQ,CAAC,SAAS,KAAK,SAAS;YAChC,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC,KAAK,SAAS,CACrD,CAAC;IACJ,CAAC;IAED,uBAAuB,CAAC,QAAwB;QAC9C,IAAI,QAAQ,CAAC,IAAI,KAAK,2BAA2B,EAAE,CAAC;YAClD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAEzC;;;;WAIG;QACH,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAChD,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;IACzB,CAAC;IAED,sBAAsB,CAAC,QAAwB;QAC7C,MAAM,YAAY,GAAG,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAC;QAE5D,kBAAkB;QAClB,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED;;;;WAIG;QACH,OAAO,uBAAuB,QAAQ,CAAC,kBAAkB,CAAC,SAAS,aAAa,YAAY,EAAE,CAAC;IACjG,CAAC;IAED,QAAQ,CAAC,QAAwB;QAC/B,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAE/C,IACE,QAAQ,KAAK,IAAI;YACjB,OAAO,QAAQ,KAAK,QAAQ;YAC5B,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EACvB,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,KAAK,MAAM,WAAW,IAAI,mBAAmB,EAAE,CAAC;YAC9C,4DAA4D;YAC5D,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;YAEpC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,oBAAoB;QACpB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,uBAAuB,CAAC,QAAwB;QAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAErC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAChE,MAAM,aAAa,GAAG,KAAK,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAEpD;;;;;WAKG;QACH,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,KAAK,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC;QAClC,CAAC;QAED,OAAO,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACtB,CAAC;CACF"}

package/dist/dist-hidden/service/cloudformation/bind/validate/sim-cfn-exec-binding-validator.d.ts

@@ -0,0 +1,16 @@
+import type { SimCfnExecutableResourceBinding } from "../sim-cfn-exec-binding.type.js";
+import type { SimCfnResource } from "../../resource/sim-cfn-resource.js";
+/**
+ * Validate that every executable binding targets a Resource in the Stack.
+ *
+ * The validator owns the high-level validation contract: each supplied binding
+ * must resolve to a synthesized CloudFormation Resource. The detailed matching
+ * rules live in `SimCfnExecutableResourceBindingMatcher`, which keeps this file
+ * small and focused on reporting actionable validation errors.
+ */
+export declare function validateSimCfnExecutableResourceBindings(props: {
+    readonly stackName: string;
+    readonly resources: ReadonlyMap<string, SimCfnResource>;
+    readonly bindings?: readonly SimCfnExecutableResourceBinding[] | undefined;
+}): void;
+//# sourceMappingURL=sim-cfn-exec-binding-validator.d.ts.map

package/dist/dist-hidden/service/cloudformation/bind/validate/sim-cfn-exec-binding-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-exec-binding-validator.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudformation/bind/validate/sim-cfn-exec-binding-validator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,iCAAiC,CAAC;AACvF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAGzE;;;;;;;GAOG;AACH,wBAAgB,wCAAwC,CAAC,KAAK,EAAE;IAC9D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACxD,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,+BAA+B,EAAE,GAAG,SAAS,CAAC;CAC5E,GAAG,IAAI,CAaP"}

package/dist/dist-hidden/service/cloudformation/bind/validate/sim-cfn-exec-binding-validator.js

@@ -0,0 +1,36 @@
+import { SimCfnExecutableResourceBindingMatcher } from "./sim-cfn-exec-binding-matcher.js";
+/**
+ * Validate that every executable binding targets a Resource in the Stack.
+ *
+ * The validator owns the high-level validation contract: each supplied binding
+ * must resolve to a synthesized CloudFormation Resource. The detailed matching
+ * rules live in `SimCfnExecutableResourceBindingMatcher`, which keeps this file
+ * small and focused on reporting actionable validation errors.
+ */
+export function validateSimCfnExecutableResourceBindings(props) {
+    const bindings = props.bindings ?? [];
+    const matcher = new SimCfnExecutableResourceBindingMatcher(props.resources);
+    for (const binding of bindings) {
+        if (matcher.matches(binding)) {
+            continue;
+        }
+        throw new Error(`Invalid sim CloudFormation executable binding in Stack ${props.stackName}: ${describeBinding(binding)} does not resolve to a Resource in the Stack`);
+    }
+}
+function describeBinding(binding) {
+    if ("logicalId" in binding) {
+        return `logicalId ${JSON.stringify(binding.logicalId)}`;
+    }
+    if ("functionName" in binding) {
+        return `functionName ${JSON.stringify(binding.functionName)}`;
+    }
+    if ("arn" in binding) {
+        return `arn ${JSON.stringify(binding.arn)}`;
+    }
+    if ("cdkPath" in binding) {
+        return `cdkPath ${JSON.stringify(binding.cdkPath)}`;
+    }
+    /* v8 ignore next -- compile-time exhaustive guard */
+    return "unknown binding target";
+}
+//# sourceMappingURL=sim-cfn-exec-binding-validator.js.map

package/dist/dist-hidden/service/cloudformation/bind/validate/sim-cfn-exec-binding-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-exec-binding-validator.js","sourceRoot":"","sources":["../../../../../src/service/cloudformation/bind/validate/sim-cfn-exec-binding-validator.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,sCAAsC,EAAE,MAAM,mCAAmC,CAAC;AAE3F;;;;;;;GAOG;AACH,MAAM,UAAU,wCAAwC,CAAC,KAIxD;IACC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,sCAAsC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAE5E,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,SAAS;QACX,CAAC;QAED,MAAM,IAAI,KAAK,CACb,0DAA0D,KAAK,CAAC,SAAS,KAAK,eAAe,CAAC,OAAO,CAAC,8CAA8C,CACrJ,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,OAAwC;IAC/D,IAAI,WAAW,IAAI,OAAO,EAAE,CAAC;QAC3B,OAAO,aAAa,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;IAC1D,CAAC;IAED,IAAI,cAAc,IAAI,OAAO,EAAE,CAAC;QAC9B,OAAO,gBAAgB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;IAChE,CAAC;IAED,IAAI,KAAK,IAAI,OAAO,EAAE,CAAC;QACrB,OAAO,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;IAC9C,CAAC;IAED,IAAI,SAAS,IAAI,OAAO,EAAE,CAAC;QACzB,OAAO,WAAW,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;IACtD,CAAC;IAED,qDAAqD;IACrD,OAAO,wBAAwB,CAAC;AAClC,CAAC"}

package/dist/dist-hidden/service/cloudformation/cdk/s3/bucket-deployment/error-message/sim-cdk-bucket-deploy-error-message.d.ts

@@ -0,0 +1,24 @@
+import type { SimCfnResource } from "../../../../resource/sim-cfn-resource.js";
+import type { SimCdkOutContext } from "../../../sim-cdk-out-context.js";
+interface SimCdkBucketDeploymentAssetErrorMessageProps {
+    readonly resource: SimCfnResource;
+    readonly sourceObjectKey: string;
+    readonly cdkOutContext: SimCdkOutContext | undefined;
+    readonly reason: string;
+}
+/**
+ * Formats CDK BucketDeployment asset resolution error messages.
+ */
+export declare class SimCdkBucketDeployErrorMessage {
+    private readonly resource;
+    private readonly sourceObjectKey;
+    private readonly cdkOutContext;
+    private readonly reason;
+    constructor(props: SimCdkBucketDeploymentAssetErrorMessageProps);
+    /**
+     * Build the complete asset resolution error message.
+     */
+    toString(): string;
+}
+export {};
+//# sourceMappingURL=sim-cdk-bucket-deploy-error-message.d.ts.map

package/dist/dist-hidden/service/cloudformation/cdk/s3/bucket-deployment/error-message/sim-cdk-bucket-deploy-error-message.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cdk-bucket-deploy-error-message.d.ts","sourceRoot":"","sources":["../../../../../../../src/service/cloudformation/cdk/s3/bucket-deployment/error-message/sim-cdk-bucket-deploy-error-message.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0CAA0C,CAAC;AAC/E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAExE,UAAU,4CAA4C;IACpD,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,aAAa,EAAE,gBAAgB,GAAG,SAAS,CAAC;IACrD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,qBAAa,8BAA8B;IACzC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAC1C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;IACzC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA+B;IAC7D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAEhC,YAAY,KAAK,EAAE,4CAA4C,EAK9D;IAED;;OAEG;IACH,QAAQ,IAAI,MAAM,CAcjB;CACF"}

package/dist/dist-hidden/service/cloudformation/cdk/s3/bucket-deployment/error-message/sim-cdk-bucket-deploy-error-message.js

@@ -0,0 +1,34 @@
+/**
+ * Formats CDK BucketDeployment asset resolution error messages.
+ */
+export class SimCdkBucketDeployErrorMessage {
+    resource;
+    sourceObjectKey;
+    cdkOutContext;
+    reason;
+    constructor(props) {
+        this.resource = props.resource;
+        this.sourceObjectKey = props.sourceObjectKey;
+        this.cdkOutContext = props.cdkOutContext;
+        this.reason = props.reason;
+    }
+    /**
+     * Build the complete asset resolution error message.
+     */
+    toString() {
+        return [
+            `Could not configure Custom::CDKBucketDeployment ${this.resource.logicalId}.`,
+            "",
+            "Referenced source object key:",
+            this.sourceObjectKey,
+            "",
+            "Expected asset metadata in:",
+            this.cdkOutContext?.assetsManifestPath ?? "unknown assets manifest",
+            "",
+            this.reason,
+            "",
+            "Run `cdk synth` and ensure the cloud assembly is available.",
+        ].join("\n");
+    }
+}
+//# sourceMappingURL=sim-cdk-bucket-deploy-error-message.js.map

package/dist/dist-hidden/service/cloudformation/cdk/s3/bucket-deployment/error-message/sim-cdk-bucket-deploy-error-message.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cdk-bucket-deploy-error-message.js","sourceRoot":"","sources":["../../../../../../../src/service/cloudformation/cdk/s3/bucket-deployment/error-message/sim-cdk-bucket-deploy-error-message.ts"],"names":[],"mappings":"AAUA;;GAEG;AACH,MAAM,OAAO,8BAA8B;IACxB,QAAQ,CAAiB;IACzB,eAAe,CAAS;IACxB,aAAa,CAA+B;IAC5C,MAAM,CAAS;IAEhC,YAAY,KAAmD;QAC7D,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QAC/B,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC,eAAe,CAAC;QAC7C,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;QACzC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO;YACL,mDAAmD,IAAI,CAAC,QAAQ,CAAC,SAAS,GAAG;YAC7E,EAAE;YACF,+BAA+B;YAC/B,IAAI,CAAC,eAAe;YACpB,EAAE;YACF,6BAA6B;YAC7B,IAAI,CAAC,aAAa,EAAE,kBAAkB,IAAI,yBAAyB;YACnE,EAAE;YACF,IAAI,CAAC,MAAM;YACX,EAAE;YACF,6DAA6D;SAC9D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;CACF"}

package/dist/dist-hidden/service/cloudformation/cdk/s3/bucket-deployment/sim-cdk-bucket-deployment.js

@@ -0,0 +1,56 @@
+import path from "node:path";
+import { FilesystemS3BucketStorage } from "../../../../s3/storage/filesystem/s3-filesystem-storage.js";
+import { SimCdkBucketDeploySource } from "./source/sim-cdk-bucket-deploy-source.js";
+import { assertDefined } from "../../../../../util/type-guard/defined.js";
+/**
+ * CloudFormation Resource factory for CDK BucketDeployment compatibility.
+ */
+export class SimCdkBucketDeploymentResourceFactory {
+    sourceResolver = new SimCdkBucketDeploySource();
+    /**
+     * Configure a simulated destination S3 Bucket for a CDK BucketDeployment.
+     */
+    async create(resourceTypeName, resource, context) {
+        if (resourceTypeName !== "CDKBucketDeployment") {
+            throw new Error(`Unsupported sim CDK BucketDeployment Resource ${resourceTypeName}`);
+        }
+        this.createCdkBucketDeployment(resource, context);
+        await Promise.resolve();
+        return undefined;
+    }
+    createCdkBucketDeployment(resource, context) {
+        const properties = context.resolvedProperties ?? resource.properties;
+        const destinationBucketName = properties["DestinationBucketName"];
+        /* v8 ignore if -- defensive catch */
+        if (typeof destinationBucketName !== "string") {
+            throw new TypeError("Custom::CDKBucketDeployment DestinationBucketName must resolve to a string");
+        }
+        const sourceObjectKeys = properties["SourceObjectKeys"];
+        /* v8 ignore if -- defensive catch */
+        if (!Array.isArray(sourceObjectKeys)) {
+            throw new TypeError("Custom::CDKBucketDeployment SourceObjectKeys must be an array");
+        }
+        /* v8 ignore if -- defensive catch */
+        if (sourceObjectKeys.length !== 1) {
+            throw new Error("Custom::CDKBucketDeployment currently supports exactly one source object key");
+        }
+        const [sourceObjectKey] = sourceObjectKeys;
+        /* v8 ignore if -- defensive catch */
+        if (typeof sourceObjectKey !== "string") {
+            throw new TypeError("Custom::CDKBucketDeployment SourceObjectKeys must contain a string object key");
+        }
+        const sourceDirectoryPath = this.sourceResolver.sourceDirectoryPathForObjectKey(resource, sourceObjectKey, context.cdkOutContext);
+        const sourceDirectoryName = path.basename(sourceDirectoryPath);
+        const bucket = context.simAws
+            .accountRegionScope(resource.accountRegionScope.accountId, resource.accountRegionScope.regionName)
+            .s3()
+            .getSimBucketByName(destinationBucketName);
+        assertDefined(bucket, `Custom::CDKBucketDeployment destination Bucket ${destinationBucketName} does not exist`);
+        bucket.configureSimStorage(new FilesystemS3BucketStorage({
+            directoryPath: sourceDirectoryPath,
+            // Specifically allow the cdk.out asset directory we want to mount.
+            allowedDirectoryNames: [sourceDirectoryName],
+        }));
+    }
+}
+//# sourceMappingURL=sim-cdk-bucket-deployment.js.map

package/dist/dist-hidden/service/cloudformation/cdk/s3/bucket-deployment/sim-cdk-bucket-deployment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cdk-bucket-deployment.js","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/cdk/s3/bucket-deployment/sim-cdk-bucket-deployment.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,yBAAyB,EAAE,MAAM,4DAA4D,CAAC;AAMvG,OAAO,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AACpF,OAAO,EAAE,aAAa,EAAE,MAAM,2CAA2C,CAAC;AAE1E;;GAEG;AACH,MAAM,OAAO,qCAAqC;IAC/B,cAAc,GAAG,IAAI,wBAAwB,EAAE,CAAC;IAEjE;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,gBAAwB,EACxB,QAAwB,EACxB,OAA+C;QAE/C,IAAI,gBAAgB,KAAK,qBAAqB,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CACb,iDAAiD,gBAAgB,EAAE,CACpE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,yBAAyB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAElD,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QAExB,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,yBAAyB,CAC/B,QAAwB,EACxB,OAA+C;QAE/C,MAAM,UAAU,GAAG,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,UAAU,CAAC;QACrE,MAAM,qBAAqB,GAAG,UAAU,CAAC,uBAAuB,CAAC,CAAC;QAElE,qCAAqC;QACrC,IAAI,OAAO,qBAAqB,KAAK,QAAQ,EAAE,CAAC;YAC9C,MAAM,IAAI,SAAS,CACjB,4EAA4E,CAC7E,CAAC;QACJ,CAAC;QAED,MAAM,gBAAgB,GAAG,UAAU,CAAC,kBAAkB,CAAC,CAAC;QACxD,qCAAqC;QACrC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,SAAS,CACjB,+DAA+D,CAChE,CAAC;QACJ,CAAC;QAED,qCAAqC;QACrC,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CACb,8EAA8E,CAC/E,CAAC;QACJ,CAAC;QAED,MAAM,CAAC,eAAe,CAAC,GAAG,gBAAgB,CAAC;QAE3C,qCAAqC;QACrC,IAAI,OAAO,eAAe,KAAK,QAAQ,EAAE,CAAC;YACxC,MAAM,IAAI,SAAS,CACjB,+EAA+E,CAChF,CAAC;QACJ,CAAC;QAED,MAAM,mBAAmB,GACvB,IAAI,CAAC,cAAc,CAAC,+BAA+B,CACjD,QAAQ,EACR,eAAe,EACf,OAAO,CAAC,aAAa,CACtB,CAAC;QACJ,MAAM,mBAAmB,GAAG,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;QAE/D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM;aAC1B,kBAAkB,CACjB,QAAQ,CAAC,kBAAkB,CAAC,SAAS,EACrC,QAAQ,CAAC,kBAAkB,CAAC,UAAU,CACvC;aACA,EAAE,EAAE;aACJ,kBAAkB,CAAC,qBAAqB,CAAC,CAAC;QAC7C,aAAa,CACX,MAAM,EACN,kDAAkD,qBAAqB,iBAAiB,CACzF,CAAC;QAEF,MAAM,CAAC,mBAAmB,CACxB,IAAI,yBAAyB,CAAC;YAC5B,aAAa,EAAE,mBAAmB;YAClC,mEAAmE;YACnE,qBAAqB,EAAE,CAAC,mBAAmB,CAAC;SAC7C,CAAC,CACH,CAAC;IACJ,CAAC;CACF"}

package/dist/dist-hidden/service/cloudformation/cdk/s3/bucket-deployment/source/sim-cdk-bucket-deploy-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cdk-bucket-deploy-source.d.ts","sourceRoot":"","sources":["../../../../../../../src/service/cloudformation/cdk/s3/bucket-deployment/source/sim-cdk-bucket-deploy-source.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0CAA0C,CAAC;AAC/E,OAAO,KAAK,EAEV,gBAAgB,EACjB,MAAM,iCAAiC,CAAC;AAGzC;;GAEG;AACH,qBAAa,wBAAwB;IACnC;;OAEG;IACH,+BAA+B,CAC7B,QAAQ,EAAE,cAAc,EACxB,eAAe,EAAE,MAAM,EACvB,aAAa,EAAE,gBAAgB,GAAG,SAAS,GAC1C,MAAM,CAoER;IAED,OAAO,CAAC,qBAAqB;CAU9B"}

package/dist/dist-hidden/service/cloudformation/cdk/s3/bucket-deployment/source/sim-cdk-bucket-deploy-source.js

@@ -0,0 +1,66 @@
+import path from "node:path";
+import { SimCdkBucketDeployErrorMessage } from "../error-message/sim-cdk-bucket-deploy-error-message.js";
+/**
+ * Resolves the filesystem source directory for a CDK BucketDeployment asset.
+ */
+export class SimCdkBucketDeploySource {
+    /**
+     * Find the local source directory for a CDK BucketDeployment source object key.
+     */
+    sourceDirectoryPathForObjectKey(resource, sourceObjectKey, cdkOutContext) {
+        const assetsManifest = cdkOutContext?.assetsManifest;
+        const templateDirectoryPath = cdkOutContext?.templateDirectoryPath;
+        if (assetsManifest === undefined || templateDirectoryPath === undefined) {
+            throw new Error([
+                `Could not configure Custom::CDKBucketDeployment ${resource.logicalId}.`,
+                "",
+                "Referenced source object key:",
+                sourceObjectKey,
+                "",
+                "No CDK assets manifest is available.",
+                "",
+                "Deploy from a synthesized CDK template file, or run `cdk synth` and ensure the cloud assembly is available.",
+            ].join("\n"));
+        }
+        const fileAsset = this.fileAssetForObjectKey(assetsManifest, sourceObjectKey);
+        if (fileAsset?.source?.path === undefined) {
+            const errorMessage = new SimCdkBucketDeployErrorMessage({
+                resource,
+                sourceObjectKey,
+                cdkOutContext,
+                reason: "No matching CDK file asset with a source path was found.",
+            });
+            throw new Error(errorMessage.toString());
+        }
+        if (fileAsset.source.packaging !== "zip") {
+            const errorMessage = new SimCdkBucketDeployErrorMessage({
+                resource,
+                sourceObjectKey,
+                cdkOutContext,
+                reason: `Expected CDK file asset packaging "zip", got ${String(fileAsset.source.packaging)}.`,
+            });
+            throw new Error(errorMessage.toString());
+        }
+        const resolvedTemplateDirectoryPath = path.resolve(templateDirectoryPath);
+        const resolvedAssetPath = path.resolve(resolvedTemplateDirectoryPath, fileAsset.source.path);
+        if (resolvedAssetPath !== resolvedTemplateDirectoryPath &&
+            !resolvedAssetPath.startsWith(`${resolvedTemplateDirectoryPath}${path.sep}`)) {
+            const errorMessage = new SimCdkBucketDeployErrorMessage({
+                resource,
+                sourceObjectKey,
+                cdkOutContext,
+                reason: `CDK file asset source path escapes the template directory: ${fileAsset.source.path}`,
+            });
+            throw new Error(errorMessage.toString());
+        }
+        return resolvedAssetPath;
+    }
+    fileAssetForObjectKey(assetsManifest, sourceObjectKey) {
+        return Object.values(assetsManifest.files ?? {}).find((fileAsset) => {
+            return Object.values(fileAsset.destinations ?? {}).some((destination) => {
+                return destination.objectKey === sourceObjectKey;
+            });
+        });
+    }
+}
+//# sourceMappingURL=sim-cdk-bucket-deploy-source.js.map

package/dist/dist-hidden/service/cloudformation/cdk/s3/bucket-deployment/source/sim-cdk-bucket-deploy-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cdk-bucket-deploy-source.js","sourceRoot":"","sources":["../../../../../../../src/service/cloudformation/cdk/s3/bucket-deployment/source/sim-cdk-bucket-deploy-source.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAO7B,OAAO,EAAE,8BAA8B,EAAE,MAAM,yDAAyD,CAAC;AAEzG;;GAEG;AACH,MAAM,OAAO,wBAAwB;IACnC;;OAEG;IACH,+BAA+B,CAC7B,QAAwB,EACxB,eAAuB,EACvB,aAA2C;QAE3C,MAAM,cAAc,GAAG,aAAa,EAAE,cAAc,CAAC;QACrD,MAAM,qBAAqB,GAAG,aAAa,EAAE,qBAAqB,CAAC;QAEnE,IAAI,cAAc,KAAK,SAAS,IAAI,qBAAqB,KAAK,SAAS,EAAE,CAAC;YACxE,MAAM,IAAI,KAAK,CACb;gBACE,mDAAmD,QAAQ,CAAC,SAAS,GAAG;gBACxE,EAAE;gBACF,+BAA+B;gBAC/B,eAAe;gBACf,EAAE;gBACF,sCAAsC;gBACtC,EAAE;gBACF,6GAA6G;aAC9G,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,qBAAqB,CAC1C,cAAc,EACd,eAAe,CAChB,CAAC;QAEF,IAAI,SAAS,EAAE,MAAM,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;YAC1C,MAAM,YAAY,GAAG,IAAI,8BAA8B,CAAC;gBACtD,QAAQ;gBACR,eAAe;gBACf,aAAa;gBACb,MAAM,EAAE,0DAA0D;aACnE,CAAC,CAAC;YACH,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC3C,CAAC;QAED,IAAI,SAAS,CAAC,MAAM,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;YACzC,MAAM,YAAY,GAAG,IAAI,8BAA8B,CAAC;gBACtD,QAAQ;gBACR,eAAe;gBACf,aAAa;gBACb,MAAM,EAAE,gDAAgD,MAAM,CAC5D,SAAS,CAAC,MAAM,CAAC,SAAS,CAC3B,GAAG;aACL,CAAC,CAAC;YACH,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC3C,CAAC;QAED,MAAM,6BAA6B,GAAG,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QAC1E,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,CACpC,6BAA6B,EAC7B,SAAS,CAAC,MAAM,CAAC,IAAI,CACtB,CAAC;QAEF,IACE,iBAAiB,KAAK,6BAA6B;YACnD,CAAC,iBAAiB,CAAC,UAAU,CAC3B,GAAG,6BAA6B,GAAG,IAAI,CAAC,GAAG,EAAE,CAC9C,EACD,CAAC;YACD,MAAM,YAAY,GAAG,IAAI,8BAA8B,CAAC;gBACtD,QAAQ;gBACR,eAAe;gBACf,aAAa;gBACb,MAAM,EAAE,8DAA8D,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE;aAC9F,CAAC,CAAC;YACH,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAEO,qBAAqB,CAC3B,cAAoC,EACpC,eAAuB;QAEvB,OAAO,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;YAClE,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE;gBACtE,OAAO,WAAW,CAAC,SAAS,KAAK,eAAe,CAAC;YACnD,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}