@kensio/yulin 1.16.3 → 1.17.0

package/dist/service/cloudformation/template/dynamic/sim-cfn-dynamic-reference-placeholder.js

@@ -0,0 +1,61 @@
+import { randomBytes } from "node:crypto";
+/**
+ * What stands in a resolved string for a reference still being read.
+ *
+ * Property resolution is synchronous, and a service such as Secrets Manager
+ * cannot answer a reference without being waited on. The substitution
+ * therefore happens in two steps. A marker goes into the string while the
+ * template resolves, and the value replaces it once the service has answered.
+ *
+ * The marker is wrapped in a private use character (one nothing in a
+ * CloudFormation template holds) and carries random bytes of its own. A
+ * property holding text a template author wrote is therefore left alone, even
+ * where that text was written to look like a marker. While it is in flight the
+ * marker is opaque text, which is what an intrinsic function reading the
+ * string around it sees. An `Fn::Split` over a value the service has yet to
+ * answer with splits the marker.
+ */
+const placeholderPattern = /\u{E000}dynamic-reference-[\da-f]+-\d+\u{E000}/gu;
+/** How many random bytes each resolution's markers are marked with. */
+const markingLength = 8;
+/**
+ * What one resolution's markers are marked with, so that no other resolution
+ * and nothing a template wrote produces the same marker.
+ */
+export function simCfnDynamicReferenceMarking() {
+    return randomBytes(markingLength).toString("hex");
+}
+/**
+ * The marker standing in for the reference at this position in a resolution.
+ */
+export function simCfnDynamicReferencePlaceholder(marking, position) {
+    return `\u{E000}dynamic-reference-${marking}-${String(position)}\u{E000}`;
+}
+/**
+ * Replace every marker in a resolved template object with the value the
+ * service answered with.
+ *
+ * A marker sits inside a string rather than being one, since a reference can
+ * be written into the middle of a longer value, so each string is rewritten
+ * rather than swapped. The rewrite goes through a function so that a value
+ * holding `$&` or `$1` arrives as it was written.
+ */
+export function fillSimCfnDynamicReferencePlaceholders(properties, values) {
+    return filledRecord(properties, values);
+}
+function filled(value, values) {
+    if (typeof value === "string") {
+        return value.replaceAll(placeholderPattern, (marker) => values.get(marker) ?? marker);
+    }
+    if (Array.isArray(value)) {
+        return value.map((entry) => filled(entry, values));
+    }
+    if (value !== null && typeof value === "object") {
+        return filledRecord(value, values);
+    }
+    return value;
+}
+function filledRecord(record, values) {
+    return Object.fromEntries(Object.entries(record).map(([key, value]) => [key, filled(value, values)]));
+}
+//# sourceMappingURL=sim-cfn-dynamic-reference-placeholder.js.map

package/dist/service/cloudformation/template/dynamic/sim-cfn-dynamic-reference-placeholder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-dynamic-reference-placeholder.js","sourceRoot":"","sources":["../../../../../src/service/cloudformation/template/dynamic/sim-cfn-dynamic-reference-placeholder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAM1C;;;;;;;;;;;;;;;GAeG;AACH,MAAM,kBAAkB,GAAG,kDAAkD,CAAC;AAE9E,uEAAuE;AACvE,MAAM,aAAa,GAAG,CAAC,CAAC;AAExB;;;GAGG;AACH,MAAM,UAAU,6BAA6B;IAC3C,OAAO,WAAW,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACpD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iCAAiC,CAC/C,OAAe,EACf,QAAgB;IAEhB,OAAO,6BAA6B,OAAO,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC;AAC5E,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,sCAAsC,CACpD,UAAqC,EACrC,MAAmC;IAEnC,OAAO,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,MAAM,CACb,KAA0B,EAC1B,MAAmC;IAEnC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC,UAAU,CACrB,kBAAkB,EAClB,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,MAAM,CACzC,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;IACrD,CAAC;IAED,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CACnB,MAAiC,EACjC,MAAmC;IAEnC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAC3E,CAAC;AACJ,CAAC"}

package/dist/service/cloudformation/template/dynamic/sim-cfn-dynamic-reference-resolvers.d.ts

@@ -0,0 +1,31 @@
+import type { SimAws } from "../../../aws/sim-aws.js";
+import type { SimAwsAccountRegionContainer } from "../../../aws/sim-aws-account-region-scope.js";
+import type { SimCfnDynamicReferenceResolver } from "./sim-cfn-dynamic-reference.type.js";
+/**
+ * The simulation a dynamic reference resolver is built against.
+ *
+ * A reference reads the Stack's own Account and Region, which is what
+ * `scopedAws` is. The whole simulation comes with it because a reference can
+ * name another Account. A `secretsmanager` reference carrying a secret ARN
+ * reads the Account that ARN names, as real CloudFormation does.
+ */
+interface SimCfnDynamicReferenceSimulation {
+    readonly simAws: SimAws;
+    readonly scopedAws: SimAwsAccountRegionContainer;
+}
+/**
+ * How one simulated service hands over its dynamic reference resolver, given
+ * the simulation the Stack is deploying into.
+ */
+type SimCfnScopedDynamicReferenceResolver = (simulation: SimCfnDynamicReferenceSimulation) => SimCfnDynamicReferenceResolver;
+/**
+ * The simulated service behind each `{{resolve:<service>:...}}` reference.
+ *
+ * The same shape as the Resource factory registry, for the same reason. A
+ * service name with no entry here leaves its references in the template as
+ * written, so a template using one this simulation has yet to implement still
+ * deploys everything else.
+ */
+export declare const simCfnDynamicReferenceResolvers: ReadonlyMap<string, SimCfnScopedDynamicReferenceResolver>;
+export {};
+//# sourceMappingURL=sim-cfn-dynamic-reference-resolvers.d.ts.map

package/dist/service/cloudformation/template/dynamic/sim-cfn-dynamic-reference-resolvers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-dynamic-reference-resolvers.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudformation/template/dynamic/sim-cfn-dynamic-reference-resolvers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,8CAA8C,CAAC;AAEjG,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,qCAAqC,CAAC;AAE1F;;;;;;;GAOG;AACH,UAAU,gCAAgC;IACxC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,4BAA4B,CAAC;CAClD;AAED;;;GAGG;AACH,KAAK,oCAAoC,GAAG,CAC1C,UAAU,EAAE,gCAAgC,KACzC,8BAA8B,CAAC;AAEpC;;;;;;;GAOG;AACH,eAAO,MAAM,+BAA+B,EAAE,WAAW,CACvD,MAAM,EACN,oCAAoC,CAkBpC,CAAC"}

package/dist/service/cloudformation/template/dynamic/sim-cfn-dynamic-reference-resolvers.js

@@ -0,0 +1,25 @@
+import { SimCfnSecretsManagerDynamicReferenceResolver } from "../../../secretsmanager/cfn/dynamic/sim-cfn-secrets-manager-dynamic-reference-resolver.js";
+/**
+ * The simulated service behind each `{{resolve:<service>:...}}` reference.
+ *
+ * The same shape as the Resource factory registry, for the same reason. A
+ * service name with no entry here leaves its references in the template as
+ * written, so a template using one this simulation has yet to implement still
+ * deploys everything else.
+ */
+export const simCfnDynamicReferenceResolvers = new Map([
+    [
+        "ssm",
+        ({ scopedAws }) => scopedAws.ssm().cfnDynamicReferenceResolver(),
+    ],
+    [
+        "secretsmanager",
+        ({ simAws, scopedAws }) => new SimCfnSecretsManagerDynamicReferenceResolver({
+            secretsManager: scopedAws.secretsManager(),
+            secretsManagerIn: (scope) => simAws
+                .accountRegionScope(scope.accountId, scope.regionName)
+                .secretsManager(),
+        }),
+    ],
+]);
+//# sourceMappingURL=sim-cfn-dynamic-reference-resolvers.js.map

package/dist/service/cloudformation/template/dynamic/sim-cfn-dynamic-reference-resolvers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-dynamic-reference-resolvers.js","sourceRoot":"","sources":["../../../../../src/service/cloudformation/template/dynamic/sim-cfn-dynamic-reference-resolvers.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,4CAA4C,EAAE,MAAM,2FAA2F,CAAC;AAwBzJ;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAGxC,IAAI,GAAG,CAAC;IACV;QACE,KAAK;QACL,CAAC,EAAE,SAAS,EAAE,EAAkC,EAAE,CAChD,SAAS,CAAC,GAAG,EAAE,CAAC,2BAA2B,EAAE;KAChD;IACD;QACE,gBAAgB;QAChB,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,EAAkC,EAAE,CACxD,IAAI,4CAA4C,CAAC;YAC/C,cAAc,EAAE,SAAS,CAAC,cAAc,EAAE;YAC1C,gBAAgB,EAAE,CAAC,KAAK,EAAE,EAAE,CAC1B,MAAM;iBACH,kBAAkB,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC;iBACrD,cAAc,EAAE;SACtB,CAAC;KACL;CACF,CAAC,CAAC"}

package/dist/service/cloudformation/template/dynamic/sim-cfn-dynamic-reference-scan.d.ts

@@ -0,0 +1,21 @@
+import type { SimCfnDynamicReference } from "./sim-cfn-dynamic-reference.type.js";
+/**
+ * What a caller answers each reference with.
+ *
+ * Answering `undefined` leaves the reference in the string as it was written,
+ * which is what happens for a service this simulation has no resolver for.
+ */
+type SimCfnDynamicReferenceSubstitution = (reference: SimCfnDynamicReference) => string | undefined;
+/**
+ * Whether a string holds anything worth scanning.
+ */
+export declare function hasSimCfnDynamicReference(text: string): boolean;
+/**
+ * Replace every dynamic reference in a string with what the caller answers.
+ *
+ * The text around each reference is untouched, so a value written as
+ * `prefix-{{resolve:ssm:name}}-suffix` keeps its prefix and suffix.
+ */
+export declare function substituteSimCfnDynamicReferences(text: string, substitute: SimCfnDynamicReferenceSubstitution): string;
+export {};
+//# sourceMappingURL=sim-cfn-dynamic-reference-scan.d.ts.map

package/dist/service/cloudformation/template/dynamic/sim-cfn-dynamic-reference-scan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-dynamic-reference-scan.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudformation/template/dynamic/sim-cfn-dynamic-reference-scan.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAiBlF;;;;;GAKG;AACH,KAAK,kCAAkC,GAAG,CACxC,SAAS,EAAE,sBAAsB,KAC9B,MAAM,GAAG,SAAS,CAAC;AAExB;;GAEG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE/D;AAED;;;;;GAKG;AACH,wBAAgB,iCAAiC,CAC/C,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,kCAAkC,GAC7C,MAAM,CAiBR"}

package/dist/service/cloudformation/template/dynamic/sim-cfn-dynamic-reference-scan.js

@@ -0,0 +1,39 @@
+/**
+ * The opening of every dynamic reference, used to skip strings holding none.
+ */
+const dynamicReferenceOpening = "{{resolve:";
+/**
+ * One dynamic reference inside a larger string.
+ *
+ * The body runs to the first `}`, which is what stops a reference from eating
+ * the rest of the value it sits in. No segment of any reference CloudFormation
+ * documents may hold a brace, and a secret ARN's colons are left for the
+ * service reading the body to split.
+ */
+const dynamicReferencePattern = /\{\{resolve:([A-Za-z][\w-]*):([^{}]*)\}\}/g;
+/**
+ * Whether a string holds anything worth scanning.
+ */
+export function hasSimCfnDynamicReference(text) {
+    return text.includes(dynamicReferenceOpening);
+}
+/**
+ * Replace every dynamic reference in a string with what the caller answers.
+ *
+ * The text around each reference is untouched, so a value written as
+ * `prefix-{{resolve:ssm:name}}-suffix` keeps its prefix and suffix.
+ */
+export function substituteSimCfnDynamicReferences(text, substitute) {
+    if (!hasSimCfnDynamicReference(text)) {
+        return text;
+    }
+    return text.replaceAll(dynamicReferencePattern, (matched, service, body) => {
+        const reference = {
+            text: matched,
+            service,
+            body,
+        };
+        return substitute(reference) ?? matched;
+    });
+}
+//# sourceMappingURL=sim-cfn-dynamic-reference-scan.js.map

package/dist/service/cloudformation/template/dynamic/sim-cfn-dynamic-reference-scan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-dynamic-reference-scan.js","sourceRoot":"","sources":["../../../../../src/service/cloudformation/template/dynamic/sim-cfn-dynamic-reference-scan.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,MAAM,uBAAuB,GAAG,YAAY,CAAC;AAE7C;;;;;;;GAOG;AACH,MAAM,uBAAuB,GAAG,4CAA4C,CAAC;AAY7E;;GAEG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAAY;IACpD,OAAO,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC;AAChD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iCAAiC,CAC/C,IAAY,EACZ,UAA8C;IAE9C,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,IAAI,CAAC,UAAU,CACpB,uBAAuB,EACvB,CAAC,OAAO,EAAE,OAAe,EAAE,IAAY,EAAE,EAAE;QACzC,MAAM,SAAS,GAA2B;YACxC,IAAI,EAAE,OAAO;YACb,OAAO;YACP,IAAI;SACL,CAAC;QAEF,OAAO,UAAU,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC;IAC1C,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/service/cloudformation/template/dynamic/sim-cfn-dynamic-reference.type.d.ts

@@ -0,0 +1,45 @@
+/**
+ * One `{{resolve:service:...}}` dynamic reference found inside a template
+ * string.
+ *
+ * A dynamic reference is read out of a resolved string rather than parsed as
+ * its own node, because CloudFormation lets one sit inside a longer value.
+ * Only the span holding the reference is replaced, and the text around it is
+ * left as it was written.
+ */
+export interface SimCfnDynamicReference {
+    /** The whole reference as written, e.g. `{{resolve:ssm:/db/host:2}}`. */
+    readonly text: string;
+    /** The service the reference names, e.g. `ssm`. */
+    readonly service: string;
+    /** Everything after the service name, e.g. `/db/host:2`. */
+    readonly body: string;
+}
+/**
+ * What one service answers a dynamic reference with.
+ *
+ * A reference the service cannot answer still resolves to a value. Simulated
+ * CloudFormation deploys what it can, and a template naming parameters a test
+ * never created is one of the things it can mostly deploy. The stand-in value
+ * carries a reason, which the Resource records so a test asserting on that
+ * value can find out it was never read.
+ */
+export interface SimCfnDynamicReferenceResolution {
+    /** The value the reference is replaced with. */
+    readonly value: string;
+    /** Why the value is a stand-in, left out when the reference resolved. */
+    readonly reason?: string | undefined;
+}
+/**
+ * How one simulated service answers the dynamic references naming it.
+ *
+ * A service that cannot answer without being waited on returns a promise, as
+ * Secrets Manager does (reading a secret decrypts it through simulated KMS).
+ * Property resolution stays synchronous either way. A promised answer is
+ * substituted once the Resource's properties have resolved around it, so the
+ * resolver is free to await whatever answering takes.
+ */
+export interface SimCfnDynamicReferenceResolver {
+    resolve(reference: SimCfnDynamicReference): SimCfnDynamicReferenceResolution | Promise<SimCfnDynamicReferenceResolution>;
+}
+//# sourceMappingURL=sim-cfn-dynamic-reference.type.d.ts.map

package/dist/service/cloudformation/template/dynamic/sim-cfn-dynamic-reference.type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-dynamic-reference.type.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudformation/template/dynamic/sim-cfn-dynamic-reference.type.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,MAAM,WAAW,sBAAsB;IACrC,yEAAyE;IACzE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,mDAAmD;IACnD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB,4DAA4D;IAC5D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,gCAAgC;IAC/C,gDAAgD;IAChD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAEvB,yEAAyE;IACzE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,8BAA8B;IAC7C,OAAO,CACL,SAAS,EAAE,sBAAsB,GAE/B,gCAAgC,GAChC,OAAO,CAAC,gCAAgC,CAAC,CAAC;CAC/C"}

package/dist/service/cloudformation/template/dynamic/sim-cfn-dynamic-reference.type.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sim-cfn-dynamic-reference.type.js.map

package/dist/service/cloudformation/template/dynamic/sim-cfn-dynamic-reference.type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-dynamic-reference.type.js","sourceRoot":"","sources":["../../../../../src/service/cloudformation/template/dynamic/sim-cfn-dynamic-reference.type.ts"],"names":[],"mappings":""}

package/dist/service/cloudformation/template/dynamic/sim-cfn-dynamic-references.d.ts

@@ -0,0 +1,51 @@
+import type { SimCfnPropertyIgnorer } from "../../resource/ignore/sim-cfn-ignored-property.type.js";
+import type { SimCfnTemplateValueRecord } from "../value/sim-cfn-template-value.js";
+import type { SimCfnDynamicReferenceResolver } from "./sim-cfn-dynamic-reference.type.js";
+interface SimCfnDynamicReferencesProperties {
+    readonly resolvers: ReadonlyMap<string, SimCfnDynamicReferenceResolver>;
+    readonly propertyIgnorer?: SimCfnPropertyIgnorer | undefined;
+}
+/**
+ * The services a Stack's dynamic references are answered by.
+ *
+ * This sits on the resolve context so that a string node can substitute what
+ * it holds without knowing which simulated services exist. A service with no
+ * resolver here leaves its references in the template as written, which is
+ * what the ones this simulation has yet to implement do.
+ *
+ * One of these belongs to a single Resource's property resolution. That is
+ * what lets it hold the references still being read. `substitute` runs while
+ * the properties resolve, and `settle` finishes them afterwards.
+ */
+export declare class SimCfnDynamicReferences {
+    private readonly resolvers;
+    private readonly propertyIgnorer;
+    private readonly awaited;
+    constructor(properties: SimCfnDynamicReferencesProperties);
+    /**
+     * Replace every dynamic reference in a resolved string.
+     *
+     * A service answering at once is substituted here. One answering with a
+     * promise leaves a marker behind for `settle` to replace, so that resolution
+     * stays synchronous around a service that has to be waited on.
+     */
+    substitute(text: string): string;
+    /**
+     * Finish the references a service had to be waited on to answer.
+     *
+     * The resolved properties are handed back with every marker replaced. They
+     * come back untouched where nothing was waited on, which is every Resource
+     * whose properties name only services answering at once.
+     */
+    settle(properties: SimCfnTemplateValueRecord): Promise<SimCfnTemplateValueRecord>;
+    /**
+     * The value one reference resolved to.
+     *
+     * A reference answered with a stand-in value is recorded against the
+     * property it sat on, so the Resource reports it the same way it reports a
+     * property its service could not act on.
+     */
+    private answer;
+}
+export {};
+//# sourceMappingURL=sim-cfn-dynamic-references.d.ts.map

package/dist/service/cloudformation/template/dynamic/sim-cfn-dynamic-references.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-dynamic-references.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudformation/template/dynamic/sim-cfn-dynamic-references.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wDAAwD,CAAC;AACpG,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAKpF,OAAO,KAAK,EAEV,8BAA8B,EAC/B,MAAM,qCAAqC,CAAC;AAE7C,UAAU,iCAAiC;IACzC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,8BAA8B,CAAC,CAAC;IACxE,QAAQ,CAAC,eAAe,CAAC,EAAE,qBAAqB,GAAG,SAAS,CAAC;CAC9D;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,uBAAuB;IAClC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAGxB;IAEF,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAoC;IAEpE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAwC;IAEhE,YAAY,UAAU,EAAE,iCAAiC,EAGxD;IAED;;;;;;OAMG;IACH,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAgB/B;IAED;;;;;;OAMG;IACG,MAAM,CACV,UAAU,EAAE,yBAAyB,GACpC,OAAO,CAAC,yBAAyB,CAAC,CAepC;IAED;;;;;;OAMG;IACH,OAAO,CAAC,MAAM;CAUf"}

package/dist/service/cloudformation/template/dynamic/sim-cfn-dynamic-references.js

@@ -0,0 +1,77 @@
+import { currentSimCfnValuePath } from "../value/sim-cfn-value-path.js";
+import { SimCfnAwaitedDynamicReferences } from "./sim-cfn-awaited-dynamic-references.js";
+import { fillSimCfnDynamicReferencePlaceholders } from "./sim-cfn-dynamic-reference-placeholder.js";
+import { substituteSimCfnDynamicReferences } from "./sim-cfn-dynamic-reference-scan.js";
+/**
+ * The services a Stack's dynamic references are answered by.
+ *
+ * This sits on the resolve context so that a string node can substitute what
+ * it holds without knowing which simulated services exist. A service with no
+ * resolver here leaves its references in the template as written, which is
+ * what the ones this simulation has yet to implement do.
+ *
+ * One of these belongs to a single Resource's property resolution. That is
+ * what lets it hold the references still being read. `substitute` runs while
+ * the properties resolve, and `settle` finishes them afterwards.
+ */
+export class SimCfnDynamicReferences {
+    resolvers;
+    propertyIgnorer;
+    awaited = new SimCfnAwaitedDynamicReferences();
+    constructor(properties) {
+        this.resolvers = properties.resolvers;
+        this.propertyIgnorer = properties.propertyIgnorer;
+    }
+    /**
+     * Replace every dynamic reference in a resolved string.
+     *
+     * A service answering at once is substituted here. One answering with a
+     * promise leaves a marker behind for `settle` to replace, so that resolution
+     * stays synchronous around a service that has to be waited on.
+     */
+    substitute(text) {
+        return substituteSimCfnDynamicReferences(text, (reference) => {
+            const resolver = this.resolvers.get(reference.service);
+            if (resolver === undefined) {
+                return;
+            }
+            const resolution = resolver.resolve(reference);
+            if (resolution instanceof Promise) {
+                return this.awaited.hold(resolution, currentSimCfnValuePath());
+            }
+            return this.answer(resolution, currentSimCfnValuePath());
+        });
+    }
+    /**
+     * Finish the references a service had to be waited on to answer.
+     *
+     * The resolved properties are handed back with every marker replaced. They
+     * come back untouched where nothing was waited on, which is every Resource
+     * whose properties name only services answering at once.
+     */
+    async settle(properties) {
+        if (this.awaited.isEmpty) {
+            return properties;
+        }
+        const settled = await this.awaited.settled();
+        const values = new Map(settled.map((reference) => [
+            reference.placeholder,
+            this.answer(reference.resolution, reference.path),
+        ]));
+        return fillSimCfnDynamicReferencePlaceholders(properties, values);
+    }
+    /**
+     * The value one reference resolved to.
+     *
+     * A reference answered with a stand-in value is recorded against the
+     * property it sat on, so the Resource reports it the same way it reports a
+     * property its service could not act on.
+     */
+    answer(resolution, path) {
+        if (resolution.reason !== undefined) {
+            this.propertyIgnorer?.ignoreProperty(path, resolution.reason);
+        }
+        return resolution.value;
+    }
+}
+//# sourceMappingURL=sim-cfn-dynamic-references.js.map

package/dist/service/cloudformation/template/dynamic/sim-cfn-dynamic-references.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-dynamic-references.js","sourceRoot":"","sources":["../../../../../src/service/cloudformation/template/dynamic/sim-cfn-dynamic-references.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,8BAA8B,EAAE,MAAM,yCAAyC,CAAC;AACzF,OAAO,EAAE,sCAAsC,EAAE,MAAM,4CAA4C,CAAC;AACpG,OAAO,EAAE,iCAAiC,EAAE,MAAM,qCAAqC,CAAC;AAWxF;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,uBAAuB;IACjB,SAAS,CAGxB;IAEe,eAAe,CAAoC;IAEnD,OAAO,GAAG,IAAI,8BAA8B,EAAE,CAAC;IAEhE,YAAY,UAA6C;QACvD,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,eAAe,GAAG,UAAU,CAAC,eAAe,CAAC;IACpD,CAAC;IAED;;;;;;OAMG;IACH,UAAU,CAAC,IAAY;QACrB,OAAO,iCAAiC,CAAC,IAAI,EAAE,CAAC,SAAS,EAAE,EAAE;YAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAEvD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,OAAO;YACT,CAAC;YAED,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAE/C,IAAI,UAAU,YAAY,OAAO,EAAE,CAAC;gBAClC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,sBAAsB,EAAE,CAAC,CAAC;YACjE,CAAC;YAED,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,sBAAsB,EAAE,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,MAAM,CACV,UAAqC;QAErC,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACzB,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QAE7C,MAAM,MAAM,GAAG,IAAI,GAAG,CACpB,OAAO,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC;YACzB,SAAS,CAAC,WAAW;YACrB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,IAAI,CAAC;SAClD,CAAC,CACH,CAAC;QAEF,OAAO,sCAAsC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACpE,CAAC;IAED;;;;;;OAMG;IACK,MAAM,CACZ,UAA4C,EAC5C,IAAY;QAEZ,IAAI,UAAU,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACpC,IAAI,CAAC,eAAe,EAAE,cAAc,CAAC,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QAChE,CAAC;QAED,OAAO,UAAU,CAAC,KAAK,CAAC;IAC1B,CAAC;CACF"}

package/dist/service/cloudformation/template/node/fn/import-value/sim-cfn-fn-import-value.d.ts

@@ -0,0 +1,33 @@
+import { SimCfnNode } from "../../sim-cfn-node.js";
+import type { SimCfnResolveContext } from "../../../resolve/sim-cfn-resolve-context.js";
+import type { SimCfnTemplateValue } from "../../../value/sim-cfn-template-value.js";
+/**
+ * Simulated CloudFormation `Fn::ImportValue` intrinsic function.
+ *
+ * Standard shape:
+ *
+ * {
+ *   "Fn::ImportValue": "ProducerStack:ExportsOutputRefSharedQueue"
+ * }
+ *
+ * CDK emits one of these on the consumer whenever a Stack reads a value from
+ * another Stack of the same app, paired with an Export on the producer.
+ */
+export declare class SimCfnFnImportValue extends SimCfnNode {
+    private readonly exportName;
+    constructor(exportName: SimCfnNode);
+    /**
+     * Read the value the named export was published with.
+     *
+     * An export name that is still an unresolved expression re-emits this
+     * function in template form. A later resolution pass finishes it once the
+     * Resources the name is built from exist. A name that has resolved is looked
+     * up, and one no Stack has published is refused there.
+     */
+    resolve(context: SimCfnResolveContext): SimCfnTemplateValue;
+    /**
+     * Collect referenced names from the export name.
+     */
+    referencedNames(): string[];
+}
+//# sourceMappingURL=sim-cfn-fn-import-value.d.ts.map

package/dist/service/cloudformation/template/node/fn/import-value/sim-cfn-fn-import-value.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-fn-import-value.d.ts","sourceRoot":"","sources":["../../../../../../../src/service/cloudformation/template/node/fn/import-value/sim-cfn-fn-import-value.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAC;AACxF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AAGpF;;;;;;;;;;;GAWG;AACH,qBAAa,mBAAoB,SAAQ,UAAU;IACrC,OAAO,CAAC,QAAQ,CAAC,UAAU;IAAvC,YAA6B,UAAU,EAAE,UAAU,EAElD;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,OAAO,EAAE,oBAAoB,GAAG,mBAAmB,CAe1D;IAED;;OAEG;IACM,eAAe,IAAI,MAAM,EAAE,CAEnC;CACF"}

package/dist/service/cloudformation/template/node/fn/import-value/sim-cfn-fn-import-value.js

@@ -0,0 +1,47 @@
+import { SimCfnNode } from "../../sim-cfn-node.js";
+import { isSimCfnUnresolvedExpression } from "../../../value/sim-cfn-unresolved-expression.js";
+/**
+ * Simulated CloudFormation `Fn::ImportValue` intrinsic function.
+ *
+ * Standard shape:
+ *
+ * {
+ *   "Fn::ImportValue": "ProducerStack:ExportsOutputRefSharedQueue"
+ * }
+ *
+ * CDK emits one of these on the consumer whenever a Stack reads a value from
+ * another Stack of the same app, paired with an Export on the producer.
+ */
+export class SimCfnFnImportValue extends SimCfnNode {
+    exportName;
+    constructor(exportName) {
+        super();
+        this.exportName = exportName;
+    }
+    /**
+     * Read the value the named export was published with.
+     *
+     * An export name that is still an unresolved expression re-emits this
+     * function in template form. A later resolution pass finishes it once the
+     * Resources the name is built from exist. A name that has resolved is looked
+     * up, and one no Stack has published is refused there.
+     */
+    resolve(context) {
+        const name = this.exportName.resolve(context);
+        if (isSimCfnUnresolvedExpression(name)) {
+            return { "Fn::ImportValue": name };
+        }
+        if (typeof name !== "string") {
+            throw new TypeError("Sim CloudFormation Fn::ImportValue export name must resolve to a " +
+                `string, got ${typeof name}`);
+        }
+        return context.exports.value(name);
+    }
+    /**
+     * Collect referenced names from the export name.
+     */
+    referencedNames() {
+        return this.exportName.referencedNames();
+    }
+}
+//# sourceMappingURL=sim-cfn-fn-import-value.js.map

package/dist/service/cloudformation/template/node/fn/import-value/sim-cfn-fn-import-value.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-fn-import-value.js","sourceRoot":"","sources":["../../../../../../../src/service/cloudformation/template/node/fn/import-value/sim-cfn-fn-import-value.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAGnD,OAAO,EAAE,4BAA4B,EAAE,MAAM,iDAAiD,CAAC;AAE/F;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,mBAAoB,SAAQ,UAAU;IACpB,UAAU;IAAvC,YAA6B,UAAsB;QACjD,KAAK,EAAE,CAAC;0BADmB,UAAU;IAEvC,CAAC;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,OAA6B;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAE9C,IAAI,4BAA4B,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,OAAO,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC;QACrC,CAAC;QAED,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,IAAI,SAAS,CACjB,mEAAmE;gBACjE,eAAe,OAAO,IAAI,EAAE,CAC/B,CAAC;QACJ,CAAC;QAED,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IAED;;OAEG;IACM,eAAe;QACtB,OAAO,IAAI,CAAC,UAAU,CAAC,eAAe,EAAE,CAAC;IAC3C,CAAC;CACF"}

package/dist/service/cloudformation/template/node/fn/split/sim-cfn-fn-split.d.ts

@@ -21,6 +21,13 @@ export declare class SimCfnFnSplit extends SimCfnNode {
      * that is still an unresolved expression, such as an `Fn::GetAtt` read
      * before Resources exist, re-emits this function in template form for a
      * later resolution pass to finish.
+     *
+     * A string still holding a dynamic reference is deferred the same way, on
+     * the pass that has no service to read one with. The delimiters are inside
+     * the value that service has yet to answer with, which is the whole point of
+     * splitting a `StringList` parameter, so splitting now would cut up the
+     * reference. A reference left after the reading pass belongs to a service
+     * with no resolver, and is split as the plain text it stayed.
      */
     resolve(context: SimCfnResolveContext): SimCfnTemplateValue;
     /**

package/dist/service/cloudformation/template/node/fn/split/sim-cfn-fn-split.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-fn-split.d.ts","sourceRoot":"","sources":["../../../../../../../src/service/cloudformation/template/node/fn/split/sim-cfn-fn-split.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAC;AACxF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AAGpF;;;;;;;;GAQG;AACH,qBAAa,aAAc,SAAQ,UAAU;IAEzC,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,MAAM;IAFzB,YACmB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,UAAU,EAGpC;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,OAAO,EAAE,oBAAoB,GAAG,mBAAmB,CAc1D;IAED;;OAEG;IACM,eAAe,IAAI,MAAM,EAAE,CAEnC;CACF"}
+{"version":3,"file":"sim-cfn-fn-split.d.ts","sourceRoot":"","sources":["../../../../../../../src/service/cloudformation/template/node/fn/split/sim-cfn-fn-split.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAC;AACxF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AAIpF;;;;;;;;GAQG;AACH,qBAAa,aAAc,SAAQ,UAAU;IAEzC,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,MAAM;IAFzB,YACmB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,UAAU,EAGpC;IAED;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,OAAO,EAAE,oBAAoB,GAAG,mBAAmB,CAqB1D;IAED;;OAEG;IACM,eAAe,IAAI,MAAM,EAAE,CAEnC;CACF"}

package/dist/service/cloudformation/template/node/fn/split/sim-cfn-fn-split.js

@@ -1,5 +1,6 @@
 import { SimCfnNode } from "../../sim-cfn-node.js";
 import { isSimCfnUnresolvedExpression } from "../../../value/sim-cfn-unresolved-expression.js";
+import { hasSimCfnDynamicReference } from "../../../dynamic/sim-cfn-dynamic-reference-scan.js";
 /**
  * Simulated CloudFormation `Fn::Split` intrinsic function.
  *
@@ -24,10 +25,21 @@ export class SimCfnFnSplit extends SimCfnNode {
      * that is still an unresolved expression, such as an `Fn::GetAtt` read
      * before Resources exist, re-emits this function in template form for a
      * later resolution pass to finish.
+     *
+     * A string still holding a dynamic reference is deferred the same way, on
+     * the pass that has no service to read one with. The delimiters are inside
+     * the value that service has yet to answer with, which is the whole point of
+     * splitting a `StringList` parameter, so splitting now would cut up the
+     * reference. A reference left after the reading pass belongs to a service
+     * with no resolver, and is split as the plain text it stayed.
      */
     resolve(context) {
         const source = this.source.resolve(context);
         if (typeof source === "string") {
+            if (context.dynamicReferences === undefined &&
+                hasSimCfnDynamicReference(source)) {
+                return { "Fn::Split": [this.delimiter, source] };
+            }
             return source.split(this.delimiter);
         }
         if (isSimCfnUnresolvedExpression(source)) {

package/dist/service/cloudformation/template/node/fn/split/sim-cfn-fn-split.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-fn-split.js","sourceRoot":"","sources":["../../../../../../../src/service/cloudformation/template/node/fn/split/sim-cfn-fn-split.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAGnD,OAAO,EAAE,4BAA4B,EAAE,MAAM,iDAAiD,CAAC;AAE/F;;;;;;;;GAQG;AACH,MAAM,OAAO,aAAc,SAAQ,UAAU;IAExB,SAAS;IACT,MAAM;IAFzB,YACmB,SAAiB,EACjB,MAAkB;QAEnC,KAAK,EAAE,CAAC;yBAHS,SAAS;sBACT,MAAM;IAGzB,CAAC;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,OAA6B;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAE5C,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/B,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACtC,CAAC;QAED,IAAI,4BAA4B,CAAC,MAAM,CAAC,EAAE,CAAC;YACzC,OAAO,EAAE,WAAW,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC;QACnD,CAAC;QAED,MAAM,IAAI,SAAS,CACjB,qEAAqE,OAAO,MAAM,EAAE,CACrF,CAAC;IACJ,CAAC;IAED;;OAEG;IACM,eAAe;QACtB,OAAO,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;IACvC,CAAC;CACF"}
+{"version":3,"file":"sim-cfn-fn-split.js","sourceRoot":"","sources":["../../../../../../../src/service/cloudformation/template/node/fn/split/sim-cfn-fn-split.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAGnD,OAAO,EAAE,4BAA4B,EAAE,MAAM,iDAAiD,CAAC;AAC/F,OAAO,EAAE,yBAAyB,EAAE,MAAM,oDAAoD,CAAC;AAE/F;;;;;;;;GAQG;AACH,MAAM,OAAO,aAAc,SAAQ,UAAU;IAExB,SAAS;IACT,MAAM;IAFzB,YACmB,SAAiB,EACjB,MAAkB;QAEnC,KAAK,EAAE,CAAC;yBAHS,SAAS;sBACT,MAAM;IAGzB,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,OAA6B;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAE5C,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/B,IACE,OAAO,CAAC,iBAAiB,KAAK,SAAS;gBACvC,yBAAyB,CAAC,MAAM,CAAC,EACjC,CAAC;gBACD,OAAO,EAAE,WAAW,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC;YACnD,CAAC;YAED,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACtC,CAAC;QAED,IAAI,4BAA4B,CAAC,MAAM,CAAC,EAAE,CAAC;YACzC,OAAO,EAAE,WAAW,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC;QACnD,CAAC;QAED,MAAM,IAAI,SAAS,CACjB,qEAAqE,OAAO,MAAM,EAAE,CACrF,CAAC;IACJ,CAAC;IAED;;OAEG;IACM,eAAe;QACtB,OAAO,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;IACvC,CAAC;CACF"}

package/dist/service/cloudformation/template/node/fn/sub/sim-cfn-fn-sub.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-fn-sub.d.ts","sourceRoot":"","sources":["../../../../../../../src/service/cloudformation/template/node/fn/sub/sim-cfn-fn-sub.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AAGpF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAC;AAGxF;;;;;;;;;;;;GAYG;AACH,qBAAa,WAAY,SAAQ,UAAU;IAOvC,OAAO,CAAC,QAAQ,CAAC,SAAS;IAN5B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA4B;IACxD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAoC;IACrE,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAmC;IAEnE,YACE,QAAQ,EAAE,MAAM,EACC,SAAS,GAAE,WAAW,CAAC,MAAM,EAAE,UAAU,CAAa,EAUxE;IAED;;;;;OAKG;IACH,OAAO,CAAC,OAAO,EAAE,oBAAoB,GAAG,mBAAmB,CAiB1D;IAED;;;OAGG;IACM,eAAe,IAAI,MAAM,EAAE,CAQnC;CACF"}
+{"version":3,"file":"sim-cfn-fn-sub.d.ts","sourceRoot":"","sources":["../../../../../../../src/service/cloudformation/template/node/fn/sub/sim-cfn-fn-sub.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AAGpF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAC;AAGxF;;;;;;;;;;;;GAYG;AACH,qBAAa,WAAY,SAAQ,UAAU;IAOvC,OAAO,CAAC,QAAQ,CAAC,SAAS;IAN5B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA4B;IACxD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAoC;IACrE,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAmC;IAEnE,YACE,QAAQ,EAAE,MAAM,EACC,SAAS,GAAE,WAAW,CAAC,MAAM,EAAE,UAAU,CAAa,EAUxE;IAED;;;;;OAKG;IACH,OAAO,CAAC,OAAO,EAAE,oBAAoB,GAAG,mBAAmB,CAuB1D;IAED;;;OAGG;IACM,eAAe,IAAI,MAAM,EAAE,CAQnC;CACF"}

package/dist/service/cloudformation/template/node/fn/sub/sim-cfn-fn-sub.js

@@ -45,7 +45,12 @@ export class SimCfnFnSub extends SimCfnNode {
         if (resolvedVariables.values().some((value) => typeof value !== "string")) {
             return this.unresolvedValue.toTemplateValue(resolvedVariables);
         }
-        return this.subTemplate.substitute(this.variableResolver.stringVariables(resolvedVariables));
+        const substituted = this.subTemplate.substitute(this.variableResolver.stringVariables(resolvedVariables));
+        // A dynamic reference can name a parameter through a Sub variable, as in
+        // `{{resolve:ssm:/app/${Environment}/host}}`. Reading it before the
+        // variables are in would look up a name still holding `${...}`, so the
+        // reference is read from the finished string.
+        return context.dynamicReferences?.substitute(substituted) ?? substituted;
     }
     /**
      * Collect referenced names from explicit variable values and implicit

package/dist/service/cloudformation/template/node/fn/sub/sim-cfn-fn-sub.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-fn-sub.js","sourceRoot":"","sources":["../../../../../../../src/service/cloudformation/template/node/fn/sub/sim-cfn-fn-sub.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEnD,OAAO,EAAE,mBAAmB,IAAI,yBAAyB,EAAE,MAAM,uCAAuC,CAAC;AACzG,OAAO,EAAE,2BAA2B,IAAI,iCAAiC,EAAE,MAAM,+CAA+C,CAAC;AAEjI,OAAO,EAAE,0BAA0B,IAAI,gCAAgC,EAAE,MAAM,8CAA8C,CAAC;AAE9H;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,WAAY,SAAQ,UAAU;IAOtB,SAAS;IANX,WAAW,CAA4B;IACvC,gBAAgB,CAAoC;IACpD,eAAe,CAAmC;IAEnE,YACE,QAAgB,EACC,SAAS,GAAoC,IAAI,GAAG,EAAE;QAEvE,KAAK,EAAE,CAAC;yBAFS,SAAS;QAI1B,IAAI,CAAC,WAAW,GAAG,IAAI,yBAAyB,CAAC,QAAQ,CAAC,CAAC;QAC3D,IAAI,CAAC,gBAAgB,GAAG,IAAI,iCAAiC,CAAC,SAAS,CAAC,CAAC;QACzE,IAAI,CAAC,eAAe,GAAG,IAAI,gCAAgC,CAAC;YAC1D,QAAQ;YACR,SAAS;SACV,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,OAAO,CAAC,OAA6B;QACnC,MAAM,iBAAiB,GAAG,IAAI,CAAC,gBAAgB,CAAC,UAAU,CACxD,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,EAChC,OAAO,CACR,CAAC;QAEF,4EAA4E;QAC5E,yEAAyE;QACzE,uEAAuE;QACvE,UAAU;QACV,IAAI,iBAAiB,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,EAAE,CAAC;YAC1E,OAAO,IAAI,CAAC,eAAe,CAAC,eAAe,CAAC,iBAAiB,CAAC,CAAC;QACjE,CAAC;QAED,OAAO,IAAI,CAAC,WAAW,CAAC,UAAU,CAChC,IAAI,CAAC,gBAAgB,CAAC,eAAe,CAAC,iBAAiB,CAAC,CACzD,CAAC;IACJ,CAAC;IAED;;;OAGG;IACM,eAAe;QACtB,OAAO;YACL,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;YACtE,GAAG,IAAI,CAAC,WAAW;iBAChB,aAAa,EAAE;iBACf,MAAM,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;iBAC3D,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC;SACxE,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-cfn-fn-sub.js","sourceRoot":"","sources":["../../../../../../../src/service/cloudformation/template/node/fn/sub/sim-cfn-fn-sub.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEnD,OAAO,EAAE,mBAAmB,IAAI,yBAAyB,EAAE,MAAM,uCAAuC,CAAC;AACzG,OAAO,EAAE,2BAA2B,IAAI,iCAAiC,EAAE,MAAM,+CAA+C,CAAC;AAEjI,OAAO,EAAE,0BAA0B,IAAI,gCAAgC,EAAE,MAAM,8CAA8C,CAAC;AAE9H;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,WAAY,SAAQ,UAAU;IAOtB,SAAS;IANX,WAAW,CAA4B;IACvC,gBAAgB,CAAoC;IACpD,eAAe,CAAmC;IAEnE,YACE,QAAgB,EACC,SAAS,GAAoC,IAAI,GAAG,EAAE;QAEvE,KAAK,EAAE,CAAC;yBAFS,SAAS;QAI1B,IAAI,CAAC,WAAW,GAAG,IAAI,yBAAyB,CAAC,QAAQ,CAAC,CAAC;QAC3D,IAAI,CAAC,gBAAgB,GAAG,IAAI,iCAAiC,CAAC,SAAS,CAAC,CAAC;QACzE,IAAI,CAAC,eAAe,GAAG,IAAI,gCAAgC,CAAC;YAC1D,QAAQ;YACR,SAAS;SACV,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,OAAO,CAAC,OAA6B;QACnC,MAAM,iBAAiB,GAAG,IAAI,CAAC,gBAAgB,CAAC,UAAU,CACxD,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,EAChC,OAAO,CACR,CAAC;QAEF,4EAA4E;QAC5E,yEAAyE;QACzE,uEAAuE;QACvE,UAAU;QACV,IAAI,iBAAiB,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,EAAE,CAAC;YAC1E,OAAO,IAAI,CAAC,eAAe,CAAC,eAAe,CAAC,iBAAiB,CAAC,CAAC;QACjE,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAC7C,IAAI,CAAC,gBAAgB,CAAC,eAAe,CAAC,iBAAiB,CAAC,CACzD,CAAC;QAEF,yEAAyE;QACzE,oEAAoE;QACpE,uEAAuE;QACvE,8CAA8C;QAC9C,OAAO,OAAO,CAAC,iBAAiB,EAAE,UAAU,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC;IAC3E,CAAC;IAED;;;OAGG;IACM,eAAe;QACtB,OAAO;YACL,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;YACtE,GAAG,IAAI,CAAC,WAAW;iBAChB,aAAa,EAAE;iBACf,MAAM,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;iBAC3D,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC;SACxE,CAAC;IACJ,CAAC;CACF"}

package/dist/service/cloudformation/template/node/sim-cfn-literal.d.ts

@@ -1,5 +1,6 @@
 import { SimCfnNode } from "./sim-cfn-node.js";
 import type { SimCfnTemplatePrimitiveValue } from "../value/sim-cfn-template-value.js";
+import type { SimCfnResolveContext } from "../resolve/sim-cfn-resolve-context.js";
 /**
  * A primitive CloudFormation template value (null, boolean, number, string).
  */
@@ -7,8 +8,14 @@ export declare class SimCfnLiteral extends SimCfnNode {
     private readonly value;
     constructor(value: SimCfnTemplatePrimitiveValue);
     /**
-     * Return the literal value unchanged.
+     * Return the literal value, with any dynamic reference in it substituted.
+     *
+     * A dynamic reference is written into the template as ordinary text, so this
+     * is where one is read. Substituting here rather than over the finished
+     * value keeps `Fn::Split` and the other functions reading a resolved string:
+     * splitting `{{resolve:ssm:name}}` on commas has to happen after Parameter
+     * Store has answered it.
      */
-    resolve(): SimCfnTemplatePrimitiveValue;
+    resolve(context: SimCfnResolveContext): SimCfnTemplatePrimitiveValue;
 }
 //# sourceMappingURL=sim-cfn-literal.d.ts.map

package/dist/service/cloudformation/template/node/sim-cfn-literal.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-literal.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudformation/template/node/sim-cfn-literal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,oCAAoC,CAAC;AAEvF;;GAEG;AACH,qBAAa,aAAc,SAAQ,UAAU;IAC/B,OAAO,CAAC,QAAQ,CAAC,KAAK;IAAlC,YAA6B,KAAK,EAAE,4BAA4B,EAE/D;IAED;;OAEG;IACH,OAAO,IAAI,4BAA4B,CAEtC;CACF"}
+{"version":3,"file":"sim-cfn-literal.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudformation/template/node/sim-cfn-literal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,oCAAoC,CAAC;AACvF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAElF;;GAEG;AACH,qBAAa,aAAc,SAAQ,UAAU;IAC/B,OAAO,CAAC,QAAQ,CAAC,KAAK;IAAlC,YAA6B,KAAK,EAAE,4BAA4B,EAE/D;IAED;;;;;;;;OAQG;IACH,OAAO,CAAC,OAAO,EAAE,oBAAoB,GAAG,4BAA4B,CAMnE;CACF"}