@kensio/yulin 1.12.1 → 1.13.0

package/dist/service/cloudformation/bind/validate/sim-cfn-exec-binding-matcher.js

@@ -1,12 +1,7 @@
 import { simLambdaFunctionArn } from "../../../lambda/function/sim-lambda-function.js";
-/**
- * CDK metadata paths for identifying resources corresponding to bindings.
- *
- * CDK templates commonly store construct path information under `aws:cdk:path`.
- * Some synthesized templates also expose `aws:cdk:logicalId`. Both values can
- * help map a user-facing executable binding back to the synthesized Resource.
- */
-export const cdkPathMetadataKeys = ["aws:cdk:path", "aws:cdk:logicalId"];
+import { SimCfnImageRepositoryTarget } from "./sim-cfn-image-repository-target.js";
+import { SimCfnResourceCdkPath } from "./sim-cfn-resource-cdk-path.js";
+import { SimCfnResourceImageUri } from "./sim-cfn-resource-image-uri.js";
 /**
  * Matches executable-resource bindings against synthesized CloudFormation
  * Resources.
@@ -36,6 +31,7 @@ export class SimCfnExecutableResourceBindingMatcher {
      * - `arn` reconstructs the simulator's CloudFront Function or Lambda
      *   function ARN format.
      * - `cdkPath` checks CDK metadata emitted into the synthesized template.
+     * - `imageRepository` checks the Lambda Code.ImageUri, ignoring its tag.
      */
     matches(binding) {
         if ("logicalId" in binding) {
@@ -48,11 +44,21 @@ export class SimCfnExecutableResourceBindingMatcher {
             return this.#resources.some((resource) => this.#executableFunctionArn(resource) === binding.arn);
         }
         if ("cdkPath" in binding) {
-            return this.#resources.some((resource) => this.#cdkPath(resource) === binding.cdkPath);
+            return this.#resources.some((resource) => new SimCfnResourceCdkPath(resource).path() === binding.cdkPath);
+        }
+        if ("imageRepository" in binding) {
+            return this.#matchesImageRepository(binding.imageRepository);
         }
         /* v8 ignore next -- compile-time exhaustive guard */
         return false;
     }
+    /**
+     * Whether any function in the Stack runs an image from this repository.
+     */
+    #matchesImageRepository(imageRepository) {
+        const target = new SimCfnImageRepositoryTarget(imageRepository);
+        return this.#resources.some((resource) => target.matchesImageUri(new SimCfnResourceImageUri(resource).value()));
+    }
     #resourceMatchesLogicalIdBinding(resource, logicalId) {
         /*
          * CDK-generated logical IDs are not always pleasant to author by hand.
@@ -61,7 +67,7 @@ export class SimCfnExecutableResourceBindingMatcher {
          * template.
          */
         return (resource.logicalId === logicalId ||
-            this.#cdkConstructIdFromPath(resource) === logicalId);
+            new SimCfnResourceCdkPath(resource).constructId() === logicalId);
     }
     /**
      * The name an executable function Resource resolves to when created.
@@ -112,40 +118,5 @@ export class SimCfnExecutableResourceBindingMatcher {
         }
         return `arn:aws:cloudfront::${resource.accountRegionScope.accountId}:function/${functionName}`;
     }
-    #cdkPath(resource) {
-        const metadata = resource.template["Metadata"];
-        if (metadata === null ||
-            typeof metadata !== "object" ||
-            Array.isArray(metadata)) {
-            return undefined;
-        }
-        for (const metadataKey of cdkPathMetadataKeys) {
-            // oxlint-disable-next-line security/detect-object-injection
-            const value = metadata[metadataKey];
-            if (typeof value === "string") {
-                return value;
-            }
-        }
-        /* v8 ignore next */
-        return undefined;
-    }
-    #cdkConstructIdFromPath(resource) {
-        const path = this.#cdkPath(resource);
-        if (path === undefined) {
-            return undefined;
-        }
-        const parts = path.split("/").filter((part) => part.length > 0);
-        const resourceIndex = parts.lastIndexOf("Resource");
-        /*
-         * L2 CDK constructs often synthesize a child named `Resource`, for example:
-         * `Stack/RedirectFunction/Resource`. In that case the meaningful construct
-         * ID is the path segment before `Resource`, not the generated child
-         * segment.
-         */
-        if (resourceIndex > 0) {
-            return parts[resourceIndex - 1];
-        }
-        return parts.at(-1);
-    }
 }
 //# sourceMappingURL=sim-cfn-exec-binding-matcher.js.map

package/dist/service/cloudformation/bind/validate/sim-cfn-exec-binding-matcher.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-exec-binding-matcher.js","sourceRoot":"","sources":["../../../../../src/service/cloudformation/bind/validate/sim-cfn-exec-binding-matcher.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,iDAAiD,CAAC;AAIvF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,cAAc,EAAE,mBAAmB,CAAC,CAAC;AAEzE;;;;;;;GAOG;AACH,MAAM,OAAO,sCAAsC;IACxC,UAAU,CAA4B;IAE/C,YAAY,SAA8C;QACxD;;;WAGG;QACH,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;IACjD,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,OAAwC;QAC9C,IAAI,WAAW,IAAI,OAAO,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CACvC,IAAI,CAAC,gCAAgC,CAAC,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,CACnE,CAAC;QACJ,CAAC;QAED,IAAI,cAAc,IAAI,OAAO,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CACzB,CAAC,QAAQ,EAAE,EAAE,CACX,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC,KAAK,OAAO,CAAC,YAAY,CAClE,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,IAAI,OAAO,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CACzB,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,KAAK,OAAO,CAAC,GAAG,CACpE,CAAC;QACJ,CAAC;QAED,IAAI,SAAS,IAAI,OAAO,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CACzB,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,OAAO,CAAC,OAAO,CAC1D,CAAC;QACJ,CAAC;QAED,qDAAqD;QACrD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,gCAAgC,CAC9B,QAAwB,EACxB,SAA6B;QAE7B;;;;;WAKG;QACH,OAAO,CACL,QAAQ,CAAC,SAAS,KAAK,SAAS;YAChC,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC,KAAK,SAAS,CACrD,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,uBAAuB,CAAC,QAAwB;QAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QAElD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;IACrD,CAAC;IAED,qBAAqB,CAAC,QAAwB;QAC5C,MAAM,YAAY,GAAG,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC9D,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,8FAA8F;QAC9F,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QAC/C,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9C,CAAC;IAED,oBAAoB,CAAC,YAAgC;QACnD,IAAI,YAAY,KAAK,2BAA2B,EAAE,CAAC;YACjD,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,YAAY,KAAK,uBAAuB,EAAE,CAAC;YAC7C,OAAO,cAAc,CAAC;QACxB,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,sBAAsB,CAAC,QAAwB;QAC7C,MAAM,YAAY,GAAG,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAC;QAE5D,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED;;;;;WAKG;QACH,IAAI,QAAQ,CAAC,IAAI,KAAK,uBAAuB,EAAE,CAAC;YAC9C,OAAO,oBAAoB,CAAC,QAAQ,CAAC,kBAAkB,EAAE,YAAY,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,uBAAuB,QAAQ,CAAC,kBAAkB,CAAC,SAAS,aAAa,YAAY,EAAE,CAAC;IACjG,CAAC;IAED,QAAQ,CAAC,QAAwB;QAC/B,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAE/C,IACE,QAAQ,KAAK,IAAI;YACjB,OAAO,QAAQ,KAAK,QAAQ;YAC5B,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EACvB,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,KAAK,MAAM,WAAW,IAAI,mBAAmB,EAAE,CAAC;YAC9C,4DAA4D;YAC5D,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;YAEpC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,oBAAoB;QACpB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,uBAAuB,CAAC,QAAwB;QAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAErC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAChE,MAAM,aAAa,GAAG,KAAK,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAEpD;;;;;WAKG;QACH,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,KAAK,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC;QAClC,CAAC;QAED,OAAO,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACtB,CAAC;CACF"}
+{"version":3,"file":"sim-cfn-exec-binding-matcher.js","sourceRoot":"","sources":["../../../../../src/service/cloudformation/bind/validate/sim-cfn-exec-binding-matcher.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,iDAAiD,CAAC;AAGvF,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AAEzE;;;;;;;GAOG;AACH,MAAM,OAAO,sCAAsC;IACxC,UAAU,CAA4B;IAE/C,YAAY,SAA8C;QACxD;;;WAGG;QACH,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;IACjD,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,OAAwC;QAC9C,IAAI,WAAW,IAAI,OAAO,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CACvC,IAAI,CAAC,gCAAgC,CAAC,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,CACnE,CAAC;QACJ,CAAC;QAED,IAAI,cAAc,IAAI,OAAO,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CACzB,CAAC,QAAQ,EAAE,EAAE,CACX,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC,KAAK,OAAO,CAAC,YAAY,CAClE,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,IAAI,OAAO,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CACzB,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,KAAK,OAAO,CAAC,GAAG,CACpE,CAAC;QACJ,CAAC;QAED,IAAI,SAAS,IAAI,OAAO,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CACzB,CAAC,QAAQ,EAAE,EAAE,CACX,IAAI,qBAAqB,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,KAAK,OAAO,CAAC,OAAO,CACjE,CAAC;QACJ,CAAC;QAED,IAAI,iBAAiB,IAAI,OAAO,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAC/D,CAAC;QAED,qDAAqD;QACrD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,uBAAuB,CAAC,eAAuB;QAC7C,MAAM,MAAM,GAAG,IAAI,2BAA2B,CAAC,eAAe,CAAC,CAAC;QAEhE,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CACvC,MAAM,CAAC,eAAe,CAAC,IAAI,sBAAsB,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,CAAC,CACrE,CAAC;IACJ,CAAC;IAED,gCAAgC,CAC9B,QAAwB,EACxB,SAA6B;QAE7B;;;;;WAKG;QACH,OAAO,CACL,QAAQ,CAAC,SAAS,KAAK,SAAS;YAChC,IAAI,qBAAqB,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,KAAK,SAAS,CAChE,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,uBAAuB,CAAC,QAAwB;QAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QAElD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;IACrD,CAAC;IAED,qBAAqB,CAAC,QAAwB;QAC5C,MAAM,YAAY,GAAG,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC9D,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,8FAA8F;QAC9F,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QAC/C,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9C,CAAC;IAED,oBAAoB,CAAC,YAAgC;QACnD,IAAI,YAAY,KAAK,2BAA2B,EAAE,CAAC;YACjD,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,YAAY,KAAK,uBAAuB,EAAE,CAAC;YAC7C,OAAO,cAAc,CAAC;QACxB,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,sBAAsB,CAAC,QAAwB;QAC7C,MAAM,YAAY,GAAG,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAC;QAE5D,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED;;;;;WAKG;QACH,IAAI,QAAQ,CAAC,IAAI,KAAK,uBAAuB,EAAE,CAAC;YAC9C,OAAO,oBAAoB,CAAC,QAAQ,CAAC,kBAAkB,EAAE,YAAY,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,uBAAuB,QAAQ,CAAC,kBAAkB,CAAC,SAAS,aAAa,YAAY,EAAE,CAAC;IACjG,CAAC;CACF"}

package/dist/service/cloudformation/bind/validate/sim-cfn-exec-binding-validator.js

@@ -30,6 +30,9 @@ function describeBinding(binding) {
     if ("cdkPath" in binding) {
         return `cdkPath ${JSON.stringify(binding.cdkPath)}`;
     }
+    if ("imageRepository" in binding) {
+        return `imageRepository ${JSON.stringify(binding.imageRepository)}`;
+    }
     /* v8 ignore next -- compile-time exhaustive guard */
     return "unknown binding target";
 }

package/dist/service/cloudformation/bind/validate/sim-cfn-exec-binding-validator.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-exec-binding-validator.js","sourceRoot":"","sources":["../../../../../src/service/cloudformation/bind/validate/sim-cfn-exec-binding-validator.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,sCAAsC,EAAE,MAAM,mCAAmC,CAAC;AAE3F;;;;;;;GAOG;AACH,MAAM,UAAU,wCAAwC,CAAC,UAIxD;IACC,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,IAAI,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAG,IAAI,sCAAsC,CACxD,UAAU,CAAC,SAAS,CACrB,CAAC;IAEF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,SAAS;QACX,CAAC;QAED,MAAM,IAAI,KAAK,CACb,0DAA0D,UAAU,CAAC,SAAS,KAAK,eAAe,CAAC,OAAO,CAAC,8CAA8C,CAC1J,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,OAAwC;IAC/D,IAAI,WAAW,IAAI,OAAO,EAAE,CAAC;QAC3B,OAAO,aAAa,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;IAC1D,CAAC;IAED,IAAI,cAAc,IAAI,OAAO,EAAE,CAAC;QAC9B,OAAO,gBAAgB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;IAChE,CAAC;IAED,IAAI,KAAK,IAAI,OAAO,EAAE,CAAC;QACrB,OAAO,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;IAC9C,CAAC;IAED,IAAI,SAAS,IAAI,OAAO,EAAE,CAAC;QACzB,OAAO,WAAW,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;IACtD,CAAC;IAED,qDAAqD;IACrD,OAAO,wBAAwB,CAAC;AAClC,CAAC"}
+{"version":3,"file":"sim-cfn-exec-binding-validator.js","sourceRoot":"","sources":["../../../../../src/service/cloudformation/bind/validate/sim-cfn-exec-binding-validator.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,sCAAsC,EAAE,MAAM,mCAAmC,CAAC;AAE3F;;;;;;;GAOG;AACH,MAAM,UAAU,wCAAwC,CAAC,UAIxD;IACC,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,IAAI,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAG,IAAI,sCAAsC,CACxD,UAAU,CAAC,SAAS,CACrB,CAAC;IAEF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,SAAS;QACX,CAAC;QAED,MAAM,IAAI,KAAK,CACb,0DAA0D,UAAU,CAAC,SAAS,KAAK,eAAe,CAAC,OAAO,CAAC,8CAA8C,CAC1J,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,OAAwC;IAC/D,IAAI,WAAW,IAAI,OAAO,EAAE,CAAC;QAC3B,OAAO,aAAa,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;IAC1D,CAAC;IAED,IAAI,cAAc,IAAI,OAAO,EAAE,CAAC;QAC9B,OAAO,gBAAgB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;IAChE,CAAC;IAED,IAAI,KAAK,IAAI,OAAO,EAAE,CAAC;QACrB,OAAO,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;IAC9C,CAAC;IAED,IAAI,SAAS,IAAI,OAAO,EAAE,CAAC;QACzB,OAAO,WAAW,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;IACtD,CAAC;IAED,IAAI,iBAAiB,IAAI,OAAO,EAAE,CAAC;QACjC,OAAO,mBAAmB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;IACtE,CAAC;IAED,qDAAqD;IACrD,OAAO,wBAAwB,CAAC;AAClC,CAAC"}

package/dist/service/cloudformation/bind/validate/sim-cfn-image-repository-target.d.ts

@@ -0,0 +1,26 @@
+/**
+ * The container image repository an executable binding targets.
+ *
+ * A binding names a repository, such as
+ * `111111111111.dkr.ecr.eu-west-2.amazonaws.com/orders`, and matches any
+ * template function whose `Code.ImageUri` names that repository.
+ *
+ * The tag is ignored on both sides, because no tag is stable enough to write
+ * into a test. A CDK image asset is tagged with the asset content hash, which
+ * changes whenever the source does, and a pipeline-built image is usually
+ * tagged with a git sha or build number injected as a stack parameter. A
+ * digest is ignored for the same reason.
+ *
+ * The registry host is part of the repository, so the account and region have
+ * to match too. That keeps a binding from reaching a same-named repository in
+ * another account.
+ */
+export declare class SimCfnImageRepositoryTarget {
+    private readonly repository;
+    constructor(imageRepository: string);
+    /**
+     * Whether a function's image URI names this repository.
+     */
+    matchesImageUri(imageUri: string | undefined): boolean;
+}
+//# sourceMappingURL=sim-cfn-image-repository-target.d.ts.map

package/dist/service/cloudformation/bind/validate/sim-cfn-image-repository-target.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-image-repository-target.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudformation/bind/validate/sim-cfn-image-repository-target.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,2BAA2B;IACtC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IAEpC,YAAY,eAAe,EAAE,MAAM,EAElC;IAED;;OAEG;IACH,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAMrD;CACF"}

package/dist/service/cloudformation/bind/validate/sim-cfn-image-repository-target.js

@@ -0,0 +1,58 @@
+/**
+ * The container image repository an executable binding targets.
+ *
+ * A binding names a repository, such as
+ * `111111111111.dkr.ecr.eu-west-2.amazonaws.com/orders`, and matches any
+ * template function whose `Code.ImageUri` names that repository.
+ *
+ * The tag is ignored on both sides, because no tag is stable enough to write
+ * into a test. A CDK image asset is tagged with the asset content hash, which
+ * changes whenever the source does, and a pipeline-built image is usually
+ * tagged with a git sha or build number injected as a stack parameter. A
+ * digest is ignored for the same reason.
+ *
+ * The registry host is part of the repository, so the account and region have
+ * to match too. That keeps a binding from reaching a same-named repository in
+ * another account.
+ */
+export class SimCfnImageRepositoryTarget {
+    repository;
+    constructor(imageRepository) {
+        this.repository = repositoryOf(imageRepository);
+    }
+    /**
+     * Whether a function's image URI names this repository.
+     */
+    matchesImageUri(imageUri) {
+        if (imageUri === undefined) {
+            return false;
+        }
+        return repositoryOf(imageUri) === this.repository;
+    }
+}
+/**
+ * An image reference with any tag or digest removed.
+ *
+ * A registry host can carry a port, as in `registry.test:5000/orders`, so the
+ * tag separator is only looked for in the last path segment. Repository names
+ * are lower case on ECR, and a registry host is a DNS name, so comparing in
+ * lower case matches how a registry would read the two references.
+ */
+function repositoryOf(reference) {
+    const trimmed = reference.trim();
+    const lastSlash = trimmed.lastIndexOf("/");
+    const registryPath = trimmed.slice(0, lastSlash + 1);
+    const name = trimmed.slice(lastSlash + 1);
+    return `${registryPath}${untagged(name)}`.toLowerCase();
+}
+/**
+ * The repository name with a `:tag` or `@digest` suffix removed.
+ */
+function untagged(name) {
+    const separators = [name.indexOf(":"), name.indexOf("@")].filter((index) => index >= 0);
+    if (separators.length === 0) {
+        return name;
+    }
+    return name.slice(0, Math.min(...separators));
+}
+//# sourceMappingURL=sim-cfn-image-repository-target.js.map

package/dist/service/cloudformation/bind/validate/sim-cfn-image-repository-target.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-image-repository-target.js","sourceRoot":"","sources":["../../../../../src/service/cloudformation/bind/validate/sim-cfn-image-repository-target.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,2BAA2B;IACrB,UAAU,CAAS;IAEpC,YAAY,eAAuB;QACjC,IAAI,CAAC,UAAU,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;IAClD,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,QAA4B;QAC1C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,YAAY,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,UAAU,CAAC;IACpD,CAAC;CACF;AAED;;;;;;;GAOG;AACH,SAAS,YAAY,CAAC,SAAiB;IACrC,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;IACjC,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;IAE1C,OAAO,GAAG,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;AAC1D,CAAC;AAED;;GAEG;AACH,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAC9D,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,CACtB,CAAC;IAEF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC;AAChD,CAAC"}

package/dist/service/cloudformation/bind/validate/sim-cfn-resource-cdk-path.d.ts

@@ -0,0 +1,28 @@
+import type { SimCfnResource } from "../../resource/sim-cfn-resource.js";
+/**
+ * The CDK construct path a synthesized Resource carries in its Metadata.
+ *
+ * Both the binding validator and the binding finder ask the same two questions
+ * of a Resource, so the reading lives here rather than in either of them.
+ */
+export declare class SimCfnResourceCdkPath {
+    private readonly resource;
+    constructor(resource: SimCfnResource);
+    /**
+     * The CDK path value from Resource Metadata.
+     *
+     * CDK has used more than one metadata key for construct paths over time, and
+     * the first string value found is treated as the path for this Resource.
+     */
+    path(): string | undefined;
+    /**
+     * The construct ID from the CDK path.
+     *
+     * L2 CDK constructs often synthesize a child named `Resource`, for example
+     * `Stack/RedirectFunction/Resource`. In that case the meaningful construct ID
+     * is the path segment before `Resource`, not the generated child segment.
+     * Otherwise the last path segment is the best available construct identifier.
+     */
+    constructId(): string | undefined;
+}
+//# sourceMappingURL=sim-cfn-resource-cdk-path.d.ts.map

package/dist/service/cloudformation/bind/validate/sim-cfn-resource-cdk-path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-resource-cdk-path.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudformation/bind/validate/sim-cfn-resource-cdk-path.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAWzE;;;;;GAKG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAE1C,YAAY,QAAQ,EAAE,cAAc,EAEnC;IAED;;;;;OAKG;IACH,IAAI,IAAI,MAAM,GAAG,SAAS,CAqBzB;IAED;;;;;;;OAOG;IACH,WAAW,IAAI,MAAM,GAAG,SAAS,CAehC;CACF"}

package/dist/service/cloudformation/bind/validate/sim-cfn-resource-cdk-path.js

@@ -0,0 +1,63 @@
+/**
+ * CDK metadata keys holding a construct path.
+ *
+ * CDK templates commonly store construct path information under `aws:cdk:path`.
+ * Some synthesized templates also expose `aws:cdk:logicalId`. Both values can
+ * help map a user-facing executable binding back to the synthesized Resource.
+ */
+const cdkPathMetadataKeys = ["aws:cdk:path", "aws:cdk:logicalId"];
+/**
+ * The CDK construct path a synthesized Resource carries in its Metadata.
+ *
+ * Both the binding validator and the binding finder ask the same two questions
+ * of a Resource, so the reading lives here rather than in either of them.
+ */
+export class SimCfnResourceCdkPath {
+    resource;
+    constructor(resource) {
+        this.resource = resource;
+    }
+    /**
+     * The CDK path value from Resource Metadata.
+     *
+     * CDK has used more than one metadata key for construct paths over time, and
+     * the first string value found is treated as the path for this Resource.
+     */
+    path() {
+        const metadata = this.resource.template["Metadata"];
+        if (metadata === null ||
+            typeof metadata !== "object" ||
+            Array.isArray(metadata)) {
+            return undefined;
+        }
+        for (const metadataKey of cdkPathMetadataKeys) {
+            // oxlint-disable-next-line security/detect-object-injection
+            const value = metadata[metadataKey];
+            if (typeof value === "string") {
+                return value;
+            }
+        }
+        return undefined;
+    }
+    /**
+     * The construct ID from the CDK path.
+     *
+     * L2 CDK constructs often synthesize a child named `Resource`, for example
+     * `Stack/RedirectFunction/Resource`. In that case the meaningful construct ID
+     * is the path segment before `Resource`, not the generated child segment.
+     * Otherwise the last path segment is the best available construct identifier.
+     */
+    constructId() {
+        const path = this.path();
+        if (path === undefined) {
+            return undefined;
+        }
+        const parts = path.split("/").filter((part) => part.length > 0);
+        const resourceIndex = parts.lastIndexOf("Resource");
+        if (resourceIndex > 0) {
+            return parts[resourceIndex - 1];
+        }
+        return parts.at(-1);
+    }
+}
+//# sourceMappingURL=sim-cfn-resource-cdk-path.js.map

package/dist/service/cloudformation/bind/validate/sim-cfn-resource-cdk-path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-resource-cdk-path.js","sourceRoot":"","sources":["../../../../../src/service/cloudformation/bind/validate/sim-cfn-resource-cdk-path.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,MAAM,mBAAmB,GAAG,CAAC,cAAc,EAAE,mBAAmB,CAAC,CAAC;AAElE;;;;;GAKG;AACH,MAAM,OAAO,qBAAqB;IACf,QAAQ,CAAiB;IAE1C,YAAY,QAAwB;QAClC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED;;;;;OAKG;IACH,IAAI;QACF,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAEpD,IACE,QAAQ,KAAK,IAAI;YACjB,OAAO,QAAQ,KAAK,QAAQ;YAC5B,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EACvB,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,KAAK,MAAM,WAAW,IAAI,mBAAmB,EAAE,CAAC;YAC9C,4DAA4D;YAC5D,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;YAEpC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;;OAOG;IACH,WAAW;QACT,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAEzB,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAChE,MAAM,aAAa,GAAG,KAAK,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAEpD,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,KAAK,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC;QAClC,CAAC;QAED,OAAO,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACtB,CAAC;CACF"}

package/dist/service/cloudformation/bind/validate/sim-cfn-resource-image-uri.d.ts

@@ -0,0 +1,20 @@
+import type { SimCfnResource } from "../../resource/sim-cfn-resource.js";
+/**
+ * The container image a synthesized Resource runs.
+ *
+ * Only AWS::Lambda::Function names one, on `Code.ImageUri`. Resource
+ * Properties have already had Parameters and intrinsic functions resolved by
+ * the time the Stack builds its Resources, so an image URI built by Fn::Sub or
+ * from a Parameter reads here as the string it resolved to. Anything else,
+ * including a template that is wrong about the shape of Code, has no image URI
+ * for a binding to match.
+ */
+export declare class SimCfnResourceImageUri {
+    private readonly resource;
+    constructor(resource: SimCfnResource);
+    /**
+     * The resolved image URI, if this Resource is a function that names one.
+     */
+    value(): string | undefined;
+}
+//# sourceMappingURL=sim-cfn-resource-image-uri.d.ts.map

package/dist/service/cloudformation/bind/validate/sim-cfn-resource-image-uri.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-resource-image-uri.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudformation/bind/validate/sim-cfn-resource-image-uri.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAEzE;;;;;;;;;GASG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAE1C,YAAY,QAAQ,EAAE,cAAc,EAEnC;IAED;;OAEG;IACH,KAAK,IAAI,MAAM,GAAG,SAAS,CAkB1B;CACF"}

package/dist/service/cloudformation/bind/validate/sim-cfn-resource-image-uri.js

@@ -0,0 +1,34 @@
+/**
+ * The container image a synthesized Resource runs.
+ *
+ * Only AWS::Lambda::Function names one, on `Code.ImageUri`. Resource
+ * Properties have already had Parameters and intrinsic functions resolved by
+ * the time the Stack builds its Resources, so an image URI built by Fn::Sub or
+ * from a Parameter reads here as the string it resolved to. Anything else,
+ * including a template that is wrong about the shape of Code, has no image URI
+ * for a binding to match.
+ */
+export class SimCfnResourceImageUri {
+    resource;
+    constructor(resource) {
+        this.resource = resource;
+    }
+    /**
+     * The resolved image URI, if this Resource is a function that names one.
+     */
+    value() {
+        if (this.resource.type !== "AWS::Lambda::Function") {
+            return undefined;
+        }
+        const code = this.resource.properties["Code"];
+        if (code === null || typeof code !== "object" || Array.isArray(code)) {
+            return undefined;
+        }
+        const imageUri = code["ImageUri"];
+        if (typeof imageUri !== "string") {
+            return undefined;
+        }
+        return imageUri;
+    }
+}
+//# sourceMappingURL=sim-cfn-resource-image-uri.js.map

package/dist/service/cloudformation/bind/validate/sim-cfn-resource-image-uri.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-resource-image-uri.js","sourceRoot":"","sources":["../../../../../src/service/cloudformation/bind/validate/sim-cfn-resource-image-uri.ts"],"names":[],"mappings":"AAEA;;;;;;;;;GASG;AACH,MAAM,OAAO,sBAAsB;IAChB,QAAQ,CAAiB;IAE1C,YAAY,QAAwB;QAClC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,uBAAuB,EAAE,CAAC;YACnD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAE9C,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACrE,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC;QAElC,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjC,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF"}

package/dist/service/cloudformation/resource/cfn/route53/sim-route53-cfn-value-adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-route53-cfn-value-adapter.d.ts","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/resource/cfn/route53/sim-route53-cfn-value-adapter.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,oCAAoC,EACpC,yBAAyB,EAC1B,MAAM,sCAAsC,CAAC;AAE9C;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,oCAAoC,GAC/C,yBAAyB,CAS3B"}
+{"version":3,"file":"sim-route53-cfn-value-adapter.d.ts","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/resource/cfn/route53/sim-route53-cfn-value-adapter.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,oCAAoC,EACpC,yBAAyB,EAC1B,MAAM,sCAAsC,CAAC;AAE9C;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,oCAAoC,GAC/C,yBAAyB,CA2B3B"}

package/dist/service/cloudformation/resource/cfn/route53/sim-route53-cfn-value-adapter.js

@@ -1,5 +1,8 @@
 import { SimRoute53HostedZone } from "../../../../route53/hosted-zone/sim-route53-hosted-zone.js";
+import { SimRoute53KeySigningKey } from "../../../../route53/dnssec/sim-route53-key-signing-key.js";
+import { SimRoute53DnssecCfn } from "./sim-route53-dnssec-cfn.js";
 import { SimRoute53HostedZoneCfn } from "./sim-route53-hosted-zone-cfn.js";
+import { SimRoute53KeySigningKeyCfn } from "./sim-route53-key-signing-key-cfn.js";
 /**
  * The CloudFormation-facing value adapter for a simulated Route 53 Resource.
  */
@@ -8,6 +11,18 @@ export function route53ValueAdapter(properties) {
         properties.simResource instanceof SimRoute53HostedZone) {
         return new SimRoute53HostedZoneCfn({ hostedZone: properties.simResource });
     }
+    if (properties.type === "AWS::Route53::KeySigningKey" &&
+        properties.simResource instanceof SimRoute53KeySigningKey) {
+        return new SimRoute53KeySigningKeyCfn({
+            keySigningKey: properties.simResource,
+        });
+    }
+    // A DNSSEC Resource creates nothing of its own, so the simulated resource
+    // behind it is the zone it turns signing on for.
+    if (properties.type === "AWS::Route53::DNSSEC" &&
+        properties.simResource instanceof SimRoute53HostedZone) {
+        return new SimRoute53DnssecCfn({ hostedZone: properties.simResource });
+    }
     return undefined;
 }
 //# sourceMappingURL=sim-route53-cfn-value-adapter.js.map

package/dist/service/cloudformation/resource/cfn/route53/sim-route53-cfn-value-adapter.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-route53-cfn-value-adapter.js","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/resource/cfn/route53/sim-route53-cfn-value-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,4DAA4D,CAAC;AAClG,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAM3E;;GAEG;AACH,MAAM,UAAU,mBAAmB,CACjC,UAAgD;IAEhD,IACE,UAAU,CAAC,IAAI,KAAK,0BAA0B;QAC9C,UAAU,CAAC,WAAW,YAAY,oBAAoB,EACtD,CAAC;QACD,OAAO,IAAI,uBAAuB,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}
+{"version":3,"file":"sim-route53-cfn-value-adapter.js","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/resource/cfn/route53/sim-route53-cfn-value-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,4DAA4D,CAAC;AAClG,OAAO,EAAE,uBAAuB,EAAE,MAAM,2DAA2D,CAAC;AACpG,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,0BAA0B,EAAE,MAAM,sCAAsC,CAAC;AAMlF;;GAEG;AACH,MAAM,UAAU,mBAAmB,CACjC,UAAgD;IAEhD,IACE,UAAU,CAAC,IAAI,KAAK,0BAA0B;QAC9C,UAAU,CAAC,WAAW,YAAY,oBAAoB,EACtD,CAAC;QACD,OAAO,IAAI,uBAAuB,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,IACE,UAAU,CAAC,IAAI,KAAK,6BAA6B;QACjD,UAAU,CAAC,WAAW,YAAY,uBAAuB,EACzD,CAAC;QACD,OAAO,IAAI,0BAA0B,CAAC;YACpC,aAAa,EAAE,UAAU,CAAC,WAAW;SACtC,CAAC,CAAC;IACL,CAAC;IAED,0EAA0E;IAC1E,iDAAiD;IACjD,IACE,UAAU,CAAC,IAAI,KAAK,sBAAsB;QAC1C,UAAU,CAAC,WAAW,YAAY,oBAAoB,EACtD,CAAC;QACD,OAAO,IAAI,mBAAmB,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/service/cloudformation/resource/cfn/route53/sim-route53-dnssec-cfn.d.ts

@@ -0,0 +1,26 @@
+import type { SimRoute53HostedZone } from "../../../../route53/hosted-zone/sim-route53-hosted-zone.js";
+import type { SimCfnTemplateValue } from "../../../template/value/sim-cfn-template-value.js";
+import type { SimCfnResourceValueAdapter } from "../sim-cfn-resource-value-adapter.js";
+interface SimRoute53DnssecCfnProperties {
+    readonly hostedZone: SimRoute53HostedZone;
+}
+/**
+ * CloudFormation-facing values for DNSSEC signing on a simulated Hosted Zone.
+ */
+export declare class SimRoute53DnssecCfn implements SimCfnResourceValueAdapter {
+    private readonly hostedZone;
+    constructor(properties: SimRoute53DnssecCfnProperties);
+    /**
+     * AWS::Route53::DNSSEC Ref returns the hosted zone ID, which is the whole of
+     * the Resource's identity: it holds nothing of its own beyond the zone it
+     * turns signing on for.
+     */
+    refValue(): SimCfnTemplateValue;
+    /**
+     * AWS::Route53::DNSSEC has no Fn::GetAtt attributes, so one is refused
+     * rather than answered with something invented.
+     */
+    attributeValue(attributeName: string): SimCfnTemplateValue;
+}
+export {};
+//# sourceMappingURL=sim-route53-dnssec-cfn.d.ts.map

package/dist/service/cloudformation/resource/cfn/route53/sim-route53-dnssec-cfn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-route53-dnssec-cfn.d.ts","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/resource/cfn/route53/sim-route53-dnssec-cfn.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,4DAA4D,CAAC;AACvG,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mDAAmD,CAAC;AAC7F,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,sCAAsC,CAAC;AAEvF,UAAU,6BAA6B;IACrC,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;CAC3C;AAED;;GAEG;AACH,qBAAa,mBAAoB,YAAW,0BAA0B;IACpE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAuB;IAElD,YAAY,UAAU,EAAE,6BAA6B,EAEpD;IAED;;;;OAIG;IACH,QAAQ,IAAI,mBAAmB,CAE9B;IAED;;;OAGG;IACH,cAAc,CAAC,aAAa,EAAE,MAAM,GAAG,mBAAmB,CAIzD;CACF"}

package/dist/service/cloudformation/resource/cfn/route53/sim-route53-dnssec-cfn.js

@@ -0,0 +1,25 @@
+/**
+ * CloudFormation-facing values for DNSSEC signing on a simulated Hosted Zone.
+ */
+export class SimRoute53DnssecCfn {
+    hostedZone;
+    constructor(properties) {
+        this.hostedZone = properties.hostedZone;
+    }
+    /**
+     * AWS::Route53::DNSSEC Ref returns the hosted zone ID, which is the whole of
+     * the Resource's identity: it holds nothing of its own beyond the zone it
+     * turns signing on for.
+     */
+    refValue() {
+        return this.hostedZone.id;
+    }
+    /**
+     * AWS::Route53::DNSSEC has no Fn::GetAtt attributes, so one is refused
+     * rather than answered with something invented.
+     */
+    attributeValue(attributeName) {
+        throw new Error(`Unsupported AWS::Route53::DNSSEC attribute ${attributeName}`);
+    }
+}
+//# sourceMappingURL=sim-route53-dnssec-cfn.js.map

package/dist/service/cloudformation/resource/cfn/route53/sim-route53-dnssec-cfn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-route53-dnssec-cfn.js","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/resource/cfn/route53/sim-route53-dnssec-cfn.ts"],"names":[],"mappings":"AAQA;;GAEG;AACH,MAAM,OAAO,mBAAmB;IACb,UAAU,CAAuB;IAElD,YAAY,UAAyC;QACnD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;IAC1C,CAAC;IAED;;;;OAIG;IACH,QAAQ;QACN,OAAO,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;IAC5B,CAAC;IAED;;;OAGG;IACH,cAAc,CAAC,aAAqB;QAClC,MAAM,IAAI,KAAK,CACb,8CAA8C,aAAa,EAAE,CAC9D,CAAC;IACJ,CAAC;CACF"}

package/dist/service/cloudformation/resource/cfn/route53/sim-route53-key-signing-key-cfn.d.ts

@@ -0,0 +1,25 @@
+import type { SimRoute53KeySigningKey } from "../../../../route53/dnssec/sim-route53-key-signing-key.js";
+import type { SimCfnTemplateValue } from "../../../template/value/sim-cfn-template-value.js";
+import type { SimCfnResourceValueAdapter } from "../sim-cfn-resource-value-adapter.js";
+interface SimRoute53KeySigningKeyCfnProperties {
+    readonly keySigningKey: SimRoute53KeySigningKey;
+}
+/**
+ * CloudFormation-facing values for a simulated Route53 key-signing key.
+ */
+export declare class SimRoute53KeySigningKeyCfn implements SimCfnResourceValueAdapter {
+    private readonly keySigningKey;
+    constructor(properties: SimRoute53KeySigningKeyCfnProperties);
+    /**
+     * AWS::Route53::KeySigningKey Ref returns the hosted zone ID and the key
+     * name joined by a pipe, which is what CDK's `keySigningKeyId` reads.
+     */
+    refValue(): SimCfnTemplateValue;
+    /**
+     * AWS::Route53::KeySigningKey has no Fn::GetAtt attributes, so one is
+     * refused rather than answered with something invented.
+     */
+    attributeValue(attributeName: string): SimCfnTemplateValue;
+}
+export {};
+//# sourceMappingURL=sim-route53-key-signing-key-cfn.d.ts.map

package/dist/service/cloudformation/resource/cfn/route53/sim-route53-key-signing-key-cfn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-route53-key-signing-key-cfn.d.ts","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/resource/cfn/route53/sim-route53-key-signing-key-cfn.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,2DAA2D,CAAC;AACzG,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mDAAmD,CAAC;AAC7F,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,sCAAsC,CAAC;AAEvF,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,aAAa,EAAE,uBAAuB,CAAC;CACjD;AAED;;GAEG;AACH,qBAAa,0BAA2B,YAAW,0BAA0B;IAC3E,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA0B;IAExD,YAAY,UAAU,EAAE,oCAAoC,EAE3D;IAED;;;OAGG;IACH,QAAQ,IAAI,mBAAmB,CAE9B;IAED;;;OAGG;IACH,cAAc,CAAC,aAAa,EAAE,MAAM,GAAG,mBAAmB,CAIzD;CACF"}

package/dist/service/cloudformation/resource/cfn/route53/sim-route53-key-signing-key-cfn.js

@@ -0,0 +1,24 @@
+/**
+ * CloudFormation-facing values for a simulated Route53 key-signing key.
+ */
+export class SimRoute53KeySigningKeyCfn {
+    keySigningKey;
+    constructor(properties) {
+        this.keySigningKey = properties.keySigningKey;
+    }
+    /**
+     * AWS::Route53::KeySigningKey Ref returns the hosted zone ID and the key
+     * name joined by a pipe, which is what CDK's `keySigningKeyId` reads.
+     */
+    refValue() {
+        return `${this.keySigningKey.hostedZoneId}|${this.keySigningKey.name}`;
+    }
+    /**
+     * AWS::Route53::KeySigningKey has no Fn::GetAtt attributes, so one is
+     * refused rather than answered with something invented.
+     */
+    attributeValue(attributeName) {
+        throw new Error(`Unsupported AWS::Route53::KeySigningKey attribute ${attributeName}`);
+    }
+}
+//# sourceMappingURL=sim-route53-key-signing-key-cfn.js.map

package/dist/service/cloudformation/resource/cfn/route53/sim-route53-key-signing-key-cfn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-route53-key-signing-key-cfn.js","sourceRoot":"","sources":["../../../../../../src/service/cloudformation/resource/cfn/route53/sim-route53-key-signing-key-cfn.ts"],"names":[],"mappings":"AAQA;;GAEG;AACH,MAAM,OAAO,0BAA0B;IACpB,aAAa,CAA0B;IAExD,YAAY,UAAgD;QAC1D,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC;IAChD,CAAC;IAED;;;OAGG;IACH,QAAQ;QACN,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,IAAI,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;IACzE,CAAC;IAED;;;OAGG;IACH,cAAc,CAAC,aAAqB;QAClC,MAAM,IAAI,KAAK,CACb,qDAAqD,aAAa,EAAE,CACrE,CAAC;IACJ,CAAC;CACF"}

package/dist/service/ecs/cluster/sim-ecs-cluster-arn.d.ts

@@ -0,0 +1,38 @@
+import type { SimArn } from "../../aws/arn.js";
+import type { SimAwsAccountRegionScope } from "../../aws/sim-aws-account-region-scope.js";
+/**
+ * The cluster an ECS request means when it names no cluster at all.
+ *
+ * Only the operations that take an optional cluster fall back to it.
+ * `DeleteCluster` needs one to be named, as it does on real ECS.
+ */
+export declare const simEcsDefaultClusterName = "default";
+/**
+ * Builds and reads simulated ECS cluster ARNs for one Account and Region.
+ *
+ * A request may name a cluster by its short name or by its full ARN, and the
+ * two are interchangeable everywhere ECS takes a cluster. Reading an ARN
+ * belonging to another Account or Region gives no cluster rather than the
+ * same-named one here, because those are different clusters on real AWS.
+ */
+export declare class SimEcsClusterArn {
+    private readonly accountRegionScope;
+    constructor(accountRegionScope: SimAwsAccountRegionScope);
+    /**
+     * The ARN a cluster of this name has in this Account and Region.
+     */
+    make(clusterName: string): SimArn;
+    /**
+     * Read the cluster name out of a short name or a full cluster ARN.
+     *
+     * Undefined covers every way an identifier can name no cluster in this
+     * scope: it is not an ARN of the right shape, it is an ARN of something
+     * else, or it is an ECS cluster ARN belonging to another Account or Region.
+     * Callers report that in their own terms, because `DescribeClusters` reports
+     * a cluster it cannot find as a failure while `DeleteCluster` raises. An
+     * identifier is required here: the operations that take an optional cluster
+     * fall back to the default one before they get this far.
+     */
+    clusterName(identifier: string): string | undefined;
+}
+//# sourceMappingURL=sim-ecs-cluster-arn.d.ts.map

package/dist/service/ecs/cluster/sim-ecs-cluster-arn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-ecs-cluster-arn.d.ts","sourceRoot":"","sources":["../../../../src/service/ecs/cluster/sim-ecs-cluster-arn.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAG1F;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB,YAAY,CAAC;AAElD;;;;;;;GAOG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA2B;IAE9D,YAAY,kBAAkB,EAAE,wBAAwB,EAEvD;IAED;;OAEG;IACH,IAAI,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAIhC;IAED;;;;;;;;;;OAUG;IACH,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAiBlD;CACF"}