@kensio/yulin 1.16.3 → 1.17.1

package/dist/service/sns/serve/sim-sns-query-topic-operations.d.ts

@@ -0,0 +1,6 @@
+import type { SimQueryOperations } from "../../../serve/http/api/query/sim-query-operation.js";
+/**
+ * The topic operations simulated SNS serves over the Query protocol.
+ */
+export declare function simSnsQueryTopicOperations(): SimQueryOperations;
+//# sourceMappingURL=sim-sns-query-topic-operations.d.ts.map

package/dist/service/sns/serve/sim-sns-query-topic-operations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-query-topic-operations.d.ts","sourceRoot":"","sources":["../../../../src/service/sns/serve/sim-sns-query-topic-operations.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sDAAsD,CAAC;AAO/F;;GAEG;AACH,wBAAgB,0BAA0B,IAAI,kBAAkB,CA2D/D"}

package/dist/service/sns/serve/sim-sns-query-topic-operations.js

@@ -0,0 +1,62 @@
+import { queryList, queryMap, queryMembers, } from "../../../serve/http/api/query/sim-query-result.js";
+/**
+ * The topic operations simulated SNS serves over the Query protocol.
+ */
+export function simSnsQueryTopicOperations() {
+    return new Map([
+        [
+            "CreateTopic",
+            {
+                input: (fields) => ({
+                    Name: fields.text("Name"),
+                    Attributes: fields.attributes("Attributes"),
+                    Tags: fields.list("Tags", (tag) => ({
+                        Key: tag.text("Key"),
+                        Value: tag.text("Value"),
+                    })),
+                    DataProtectionPolicy: fields.text("DataProtectionPolicy"),
+                }),
+                result: (output) => queryMembers(output, ["TopicArn"]),
+            },
+        ],
+        [
+            "DeleteTopic",
+            {
+                input: (fields) => ({
+                    TopicArn: fields.text("TopicArn"),
+                }),
+                result: () => "",
+            },
+        ],
+        [
+            "ListTopics",
+            {
+                input: (fields) => ({
+                    NextToken: fields.text("NextToken"),
+                }),
+                result: (output) => queryList(output, "Topics", (topic) => queryMembers(topic, ["TopicArn"])) + queryMembers(output, ["NextToken"]),
+            },
+        ],
+        [
+            "GetTopicAttributes",
+            {
+                input: (fields) => ({
+                    TopicArn: fields.text("TopicArn"),
+                }),
+                result: (output) => queryMap(output, "Attributes"),
+            },
+        ],
+        [
+            "SetTopicAttributes",
+            {
+                input: (fields) => ({
+                    TopicArn: fields.text("TopicArn"),
+                    AttributeName: fields.text("AttributeName"),
+                    AttributeValue: fields.text("AttributeValue"),
+                }),
+                result: () => "",
+            },
+        ],
+    ]);
+}
+//# sourceMappingURL=sim-sns-query-topic-operations.js.map

package/dist/service/sns/serve/sim-sns-query-topic-operations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-query-topic-operations.js","sourceRoot":"","sources":["../../../../src/service/sns/serve/sim-sns-query-topic-operations.ts"],"names":[],"mappings":"AACA,OAAO,EACL,SAAS,EACT,QAAQ,EACR,YAAY,GACb,MAAM,mDAAmD,CAAC;AAE3D;;GAEG;AACH,MAAM,UAAU,0BAA0B;IACxC,OAAO,IAAI,GAAG,CAAC;QACb;YACE,aAAa;YACb;gBACE,KAAK,EAAE,CAAC,MAAM,EAA2B,EAAE,CAAC,CAAC;oBAC3C,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;oBACzB,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC;oBAC3C,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;wBAClC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC;wBACpB,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC;qBACzB,CAAC,CAAC;oBACH,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC;iBAC1D,CAAC;gBACF,MAAM,EAAE,CAAC,MAAM,EAAU,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,CAAC;aAC/D;SACF;QACD;YACE,aAAa;YACb;gBACE,KAAK,EAAE,CAAC,MAAM,EAA2B,EAAE,CAAC,CAAC;oBAC3C,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;iBAClC,CAAC;gBACF,MAAM,EAAE,GAAW,EAAE,CAAC,EAAE;aACzB;SACF;QACD;YACE,YAAY;YACZ;gBACE,KAAK,EAAE,CAAC,MAAM,EAA2B,EAAE,CAAC,CAAC;oBAC3C,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;iBACpC,CAAC;gBACF,MAAM,EAAE,CAAC,MAAM,EAAU,EAAE,CACzB,SAAS,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CACpC,YAAY,CAAC,KAAK,EAAE,CAAC,UAAU,CAAC,CAAC,CAClC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC;aAC1C;SACF;QACD;YACE,oBAAoB;YACpB;gBACE,KAAK,EAAE,CAAC,MAAM,EAA2B,EAAE,CAAC,CAAC;oBAC3C,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;iBAClC,CAAC;gBACF,MAAM,EAAE,CAAC,MAAM,EAAU,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;aAC3D;SACF;QACD;YACE,oBAAoB;YACpB;gBACE,KAAK,EAAE,CAAC,MAAM,EAA2B,EAAE,CAAC,CAAC;oBAC3C,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;oBACjC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC;oBAC3C,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC;iBAC9C,CAAC;gBACF,MAAM,EAAE,GAAW,EAAE,CAAC,EAAE;aACzB;SACF;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-dynamic-reference-resolver.d.ts

@@ -0,0 +1,32 @@
+import type { SimCfnDynamicReference, SimCfnDynamicReferenceResolution, SimCfnDynamicReferenceResolver } from "../../../cloudformation/template/dynamic/sim-cfn-dynamic-reference.type.js";
+import type { SimSsm } from "../../sim-ssm.js";
+interface SimCfnSsmDynamicReferenceResolverProperties {
+    readonly ssm: SimSsm;
+}
+/**
+ * Answers `{{resolve:ssm:...}}` references from the simulated Parameter Store.
+ *
+ * A reference is read as the caller deploying the Stack would read it, at the
+ * point the Resource holding it is created. Real CloudFormation makes no
+ * dependency out of a dynamic reference, so a parameter another Resource of
+ * the same Stack creates is only there in time if the template says
+ * `DependsOn`.
+ *
+ * Anything Parameter Store cannot answer becomes a stand-in value carrying a
+ * reason. A template naming parameters a test never created still deploys, and
+ * the Resource records what it was given instead.
+ */
+export declare class SimCfnSsmDynamicReferenceResolver implements SimCfnDynamicReferenceResolver {
+    private readonly ssm;
+    constructor(properties: SimCfnSsmDynamicReferenceResolverProperties);
+    /**
+     * Resolve one reference to the parameter value it names.
+     */
+    resolve(reference: SimCfnDynamicReference): SimCfnDynamicReferenceResolution;
+    /**
+     * Read the version the reference selects, or the current one.
+     */
+    private parameterValue;
+}
+export {};
+//# sourceMappingURL=sim-cfn-ssm-dynamic-reference-resolver.d.ts.map

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-dynamic-reference-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-ssm-dynamic-reference-resolver.d.ts","sourceRoot":"","sources":["../../../../../src/service/ssm/cfn/dynamic/sim-cfn-ssm-dynamic-reference-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,sBAAsB,EACtB,gCAAgC,EAChC,8BAA8B,EAC/B,MAAM,4EAA4E,CAAC;AAGpF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAI/C,UAAU,2CAA2C;IACnD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,iCAAkC,YAAW,8BAA8B;IACtF,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAE7B,YAAY,UAAU,EAAE,2CAA2C,EAElE;IAED;;OAEG;IACH,OAAO,CAAC,SAAS,EAAE,sBAAsB,GAAG,gCAAgC,CAiC3E;IAED;;OAEG;IACH,OAAO,CAAC,cAAc;CAyBvB"}

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-dynamic-reference-resolver.js

@@ -0,0 +1,61 @@
+import { SimSsmParameterVersionNotFound } from "../../error/sim-ssm.error.js";
+import { parseSimCfnSsmReferenceBody } from "./sim-cfn-ssm-reference-body.js";
+import { simCfnSsmReferenceStandIn } from "./sim-cfn-ssm-reference-stand-in.js";
+/**
+ * Answers `{{resolve:ssm:...}}` references from the simulated Parameter Store.
+ *
+ * A reference is read as the caller deploying the Stack would read it, at the
+ * point the Resource holding it is created. Real CloudFormation makes no
+ * dependency out of a dynamic reference, so a parameter another Resource of
+ * the same Stack creates is only there in time if the template says
+ * `DependsOn`.
+ *
+ * Anything Parameter Store cannot answer becomes a stand-in value carrying a
+ * reason. A template naming parameters a test never created still deploys, and
+ * the Resource records what it was given instead.
+ */
+export class SimCfnSsmDynamicReferenceResolver {
+    ssm;
+    constructor(properties) {
+        this.ssm = properties.ssm;
+    }
+    /**
+     * Resolve one reference to the parameter value it names.
+     */
+    resolve(reference) {
+        const parsed = parseSimCfnSsmReferenceBody(reference.body);
+        if (parsed === undefined) {
+            return simCfnSsmReferenceStandIn(reference, reference.body, `which is not the parameter name, optionally followed by an integer ` +
+                `version, that an ssm dynamic reference takes`);
+        }
+        const { name, version } = parsed;
+        const parameter = this.ssm.findParameter(name);
+        if (parameter === undefined) {
+            return simCfnSsmReferenceStandIn(reference, name, `and simulated Parameter Store holds no parameter '${name}'`);
+        }
+        if (parameter.type.value === "SecureString") {
+            return simCfnSsmReferenceStandIn(reference, name, `and '${name}' is a SecureString, which real CloudFormation reads ` +
+                `through an ssm-secure reference`);
+        }
+        return this.parameterValue(reference, parameter, name, version);
+    }
+    /**
+     * Read the version the reference selects, or the current one.
+     */
+    parameterValue(reference, parameter, name, version) {
+        if (version === undefined) {
+            return { value: parameter.currentVersion.value.value };
+        }
+        try {
+            return { value: parameter.versionNumbered(Number(version)).value.value };
+        }
+        catch (error) {
+            /* v8 ignore next 3 -- defensive: only a missing version reaches here */
+            if (!(error instanceof SimSsmParameterVersionNotFound)) {
+                throw error;
+            }
+            return simCfnSsmReferenceStandIn(reference, name, `and '${name}' has no version ${version}`);
+        }
+    }
+}
+//# sourceMappingURL=sim-cfn-ssm-dynamic-reference-resolver.js.map

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-dynamic-reference-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-ssm-dynamic-reference-resolver.js","sourceRoot":"","sources":["../../../../../src/service/ssm/cfn/dynamic/sim-cfn-ssm-dynamic-reference-resolver.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,8BAA8B,EAAE,MAAM,8BAA8B,CAAC;AAG9E,OAAO,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AAC9E,OAAO,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAMhF;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,iCAAiC;IAC3B,GAAG,CAAS;IAE7B,YAAY,UAAuD;QACjE,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,SAAiC;QACvC,MAAM,MAAM,GAAG,2BAA2B,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAE3D,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,yBAAyB,CAC9B,SAAS,EACT,SAAS,CAAC,IAAI,EACd,qEAAqE;gBACnE,8CAA8C,CACjD,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;QACjC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QAE/C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,yBAAyB,CAC9B,SAAS,EACT,IAAI,EACJ,qDAAqD,IAAI,GAAG,CAC7D,CAAC;QACJ,CAAC;QAED,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,KAAK,cAAc,EAAE,CAAC;YAC5C,OAAO,yBAAyB,CAC9B,SAAS,EACT,IAAI,EACJ,QAAQ,IAAI,uDAAuD;gBACjE,iCAAiC,CACpC,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACK,cAAc,CACpB,SAAiC,EACjC,SAA0B,EAC1B,IAAY,EACZ,OAA2B;QAE3B,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACzD,CAAC;QAED,IAAI,CAAC;YACH,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QAC3E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,wEAAwE;YACxE,IAAI,CAAC,CAAC,KAAK,YAAY,8BAA8B,CAAC,EAAE,CAAC;gBACvD,MAAM,KAAK,CAAC;YACd,CAAC;YAED,OAAO,yBAAyB,CAC9B,SAAS,EACT,IAAI,EACJ,QAAQ,IAAI,oBAAoB,OAAO,EAAE,CAC1C,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-reference-body.d.ts

@@ -0,0 +1,14 @@
+/** A reference body read as the parameter name and the version after it. */
+export interface SimCfnSsmReferenceBody {
+    readonly name: string;
+    readonly version: string | undefined;
+}
+/**
+ * Read a reference body as a parameter name and an optional version.
+ *
+ * A parameter name holds no colon, so the last one always opens the version.
+ * `ssm` and `ssm-secure` references take the same body, and read it the same
+ * way.
+ */
+export declare function parseSimCfnSsmReferenceBody(body: string): SimCfnSsmReferenceBody | undefined;
+//# sourceMappingURL=sim-cfn-ssm-reference-body.d.ts.map

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-reference-body.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-ssm-reference-body.d.ts","sourceRoot":"","sources":["../../../../../src/service/ssm/cfn/dynamic/sim-cfn-ssm-reference-body.ts"],"names":[],"mappings":"AAMA,4EAA4E;AAC5E,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,MAAM,GACX,sBAAsB,GAAG,SAAS,CAiBpC"}

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-reference-body.js

@@ -0,0 +1,26 @@
+/** The characters CloudFormation documents a referenced parameter name as. */
+const ssmReferenceName = /^[a-zA-Z0-9_.\-/]+$/;
+/** The version selector, which CloudFormation documents as an integer. */
+const ssmReferenceVersion = /^\d+$/;
+/**
+ * Read a reference body as a parameter name and an optional version.
+ *
+ * A parameter name holds no colon, so the last one always opens the version.
+ * `ssm` and `ssm-secure` references take the same body, and read it the same
+ * way.
+ */
+export function parseSimCfnSsmReferenceBody(body) {
+    const colon = body.lastIndexOf(":");
+    if (colon === -1) {
+        return ssmReferenceName.test(body)
+            ? { name: body, version: undefined }
+            : undefined;
+    }
+    const name = body.slice(0, colon);
+    const version = body.slice(colon + 1);
+    if (!ssmReferenceName.test(name) || !ssmReferenceVersion.test(version)) {
+        return undefined;
+    }
+    return { name, version };
+}
+//# sourceMappingURL=sim-cfn-ssm-reference-body.js.map

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-reference-body.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-ssm-reference-body.js","sourceRoot":"","sources":["../../../../../src/service/ssm/cfn/dynamic/sim-cfn-ssm-reference-body.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,MAAM,gBAAgB,GAAG,qBAAqB,CAAC;AAE/C,0EAA0E;AAC1E,MAAM,mBAAmB,GAAG,OAAO,CAAC;AAQpC;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CACzC,IAAY;IAEZ,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAEpC,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;QACjB,OAAO,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;YAChC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE;YACpC,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IAEtC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACvE,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC"}

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-reference-stand-in.d.ts

@@ -0,0 +1,11 @@
+import type { SimCfnDynamicReference, SimCfnDynamicReferenceResolution } from "../../../cloudformation/template/dynamic/sim-cfn-dynamic-reference.type.js";
+/**
+ * The value a reference Parameter Store could not answer resolves to.
+ *
+ * The shape follows CDK, which fills an unresolved context lookup with
+ * `dummy-value-for-<name>`. A test reading one back sees where it came from.
+ * `ssm` and `ssm-secure` references both take this path, and both record the
+ * reason against the property that held the reference.
+ */
+export declare function simCfnSsmReferenceStandIn(reference: SimCfnDynamicReference, name: string, reason: string): SimCfnDynamicReferenceResolution;
+//# sourceMappingURL=sim-cfn-ssm-reference-stand-in.d.ts.map

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-reference-stand-in.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-ssm-reference-stand-in.d.ts","sourceRoot":"","sources":["../../../../../src/service/ssm/cfn/dynamic/sim-cfn-ssm-reference-stand-in.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,sBAAsB,EACtB,gCAAgC,EACjC,MAAM,4EAA4E,CAAC;AAEpF;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,sBAAsB,EACjC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,GACb,gCAAgC,CAOlC"}

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-reference-stand-in.js

@@ -0,0 +1,16 @@
+/**
+ * The value a reference Parameter Store could not answer resolves to.
+ *
+ * The shape follows CDK, which fills an unresolved context lookup with
+ * `dummy-value-for-<name>`. A test reading one back sees where it came from.
+ * `ssm` and `ssm-secure` references both take this path, and both record the
+ * reason against the property that held the reference.
+ */
+export function simCfnSsmReferenceStandIn(reference, name, reason) {
+    return {
+        value: `dummy-value-for-${name}`,
+        reason: `holds ${reference.text}, ${reason}, so the Resource is created ` +
+            `with a stand-in value`,
+    };
+}
+//# sourceMappingURL=sim-cfn-ssm-reference-stand-in.js.map

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-reference-stand-in.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-ssm-reference-stand-in.js","sourceRoot":"","sources":["../../../../../src/service/ssm/cfn/dynamic/sim-cfn-ssm-reference-stand-in.ts"],"names":[],"mappings":"AAKA;;;;;;;GAOG;AACH,MAAM,UAAU,yBAAyB,CACvC,SAAiC,EACjC,IAAY,EACZ,MAAc;IAEd,OAAO;QACL,KAAK,EAAE,mBAAmB,IAAI,EAAE;QAChC,MAAM,EACJ,SAAS,SAAS,CAAC,IAAI,KAAK,MAAM,+BAA+B;YACjE,uBAAuB;KAC1B,CAAC;AACJ,CAAC"}

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-secure-dynamic-reference-resolver.d.ts

@@ -0,0 +1,40 @@
+import type { SimCfnDynamicReference, SimCfnDynamicReferenceResolution, SimCfnDynamicReferenceResolver, SimCfnDynamicReferenceSite } from "../../../cloudformation/template/dynamic/sim-cfn-dynamic-reference.type.js";
+import type { SimSsm } from "../../sim-ssm.js";
+interface SimCfnSsmSecureDynamicReferenceResolverProperties {
+    readonly ssm: SimSsm;
+}
+/**
+ * Answers `{{resolve:ssm-secure:...}}` references from the simulated Parameter
+ * Store.
+ *
+ * The parameter is read the way `GetParameter` with `WithDecryption` reads it,
+ * as the caller deploying the Stack, so the value comes back decrypted through
+ * the simulated KMS key it was written under. A caller the key does not admit
+ * is denied here, which is the failure a real deployment hits. Decrypting
+ * cannot be done synchronously, so the answer comes back as a promise for the
+ * CloudFormation engine to wait on.
+ *
+ * A reference the template had no business writing fails the Resource, which
+ * `sim-cfn-ssm-secure-refusals.ts` holds the rules for. Everything else
+ * Parameter Store cannot answer becomes a stand-in value carrying a reason. A
+ * template naming parameters a test never created still deploys, and the
+ * Resource records what it was given instead.
+ */
+export declare class SimCfnSsmSecureDynamicReferenceResolver implements SimCfnDynamicReferenceResolver {
+    private readonly ssm;
+    constructor(properties: SimCfnSsmSecureDynamicReferenceResolverProperties);
+    /**
+     * Resolve one reference to the decrypted parameter value it names.
+     *
+     * Where the reference sits is checked before anything is read, so a template
+     * writing one somewhere CloudFormation refuses it fails without a parameter
+     * being touched.
+     */
+    resolve(reference: SimCfnDynamicReference, site: SimCfnDynamicReferenceSite): SimCfnDynamicReferenceResolution | Promise<SimCfnDynamicReferenceResolution>;
+    /**
+     * Read the version the reference selects, or the current one, decrypted.
+     */
+    private decrypted;
+}
+export {};
+//# sourceMappingURL=sim-cfn-ssm-secure-dynamic-reference-resolver.d.ts.map

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-secure-dynamic-reference-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-ssm-secure-dynamic-reference-resolver.d.ts","sourceRoot":"","sources":["../../../../../src/service/ssm/cfn/dynamic/sim-cfn-ssm-secure-dynamic-reference-resolver.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,sBAAsB,EACtB,gCAAgC,EAChC,8BAA8B,EAC9B,0BAA0B,EAC3B,MAAM,4EAA4E,CAAC;AAEpF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAQ/C,UAAU,iDAAiD;IACzD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,uCAAwC,YAAW,8BAA8B;IAC5F,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAE7B,YAAY,UAAU,EAAE,iDAAiD,EAExE;IAED;;;;;;OAMG;IACH,OAAO,CACL,SAAS,EAAE,sBAAsB,EACjC,IAAI,EAAE,0BAA0B,GAE9B,gCAAgC,GAChC,OAAO,CAAC,gCAAgC,CAAC,CAe5C;IAED;;OAEG;YACW,SAAS;CA+BxB"}

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-secure-dynamic-reference-resolver.js

@@ -0,0 +1,67 @@
+import { assertDefined } from "../../../../util/type-guard/defined.js";
+import { SimSsmError } from "../../error/sim-ssm.error.js";
+import { parseSimCfnSsmReferenceBody } from "./sim-cfn-ssm-reference-body.js";
+import { simCfnSsmReferenceStandIn } from "./sim-cfn-ssm-reference-stand-in.js";
+import { requireSecureStringParameter, requireSsmSecureReferenceProperty, } from "./sim-cfn-ssm-secure-refusals.js";
+/**
+ * Answers `{{resolve:ssm-secure:...}}` references from the simulated Parameter
+ * Store.
+ *
+ * The parameter is read the way `GetParameter` with `WithDecryption` reads it,
+ * as the caller deploying the Stack, so the value comes back decrypted through
+ * the simulated KMS key it was written under. A caller the key does not admit
+ * is denied here, which is the failure a real deployment hits. Decrypting
+ * cannot be done synchronously, so the answer comes back as a promise for the
+ * CloudFormation engine to wait on.
+ *
+ * A reference the template had no business writing fails the Resource, which
+ * `sim-cfn-ssm-secure-refusals.ts` holds the rules for. Everything else
+ * Parameter Store cannot answer becomes a stand-in value carrying a reason. A
+ * template naming parameters a test never created still deploys, and the
+ * Resource records what it was given instead.
+ */
+export class SimCfnSsmSecureDynamicReferenceResolver {
+    ssm;
+    constructor(properties) {
+        this.ssm = properties.ssm;
+    }
+    /**
+     * Resolve one reference to the decrypted parameter value it names.
+     *
+     * Where the reference sits is checked before anything is read, so a template
+     * writing one somewhere CloudFormation refuses it fails without a parameter
+     * being touched.
+     */
+    resolve(reference, site) {
+        requireSsmSecureReferenceProperty(reference, site);
+        const parsed = parseSimCfnSsmReferenceBody(reference.body);
+        if (parsed === undefined) {
+            return simCfnSsmReferenceStandIn(reference, reference.body, `which is not the parameter name, optionally followed by an integer ` +
+                `version, that an ssm-secure dynamic reference takes`);
+        }
+        return this.decrypted(reference, parsed.name, parsed.version);
+    }
+    /**
+     * Read the version the reference selects, or the current one, decrypted.
+     */
+    async decrypted(reference, name, version) {
+        const selector = version === undefined ? name : `${name}:${version}`;
+        try {
+            const read = await this.ssm.getParameter({
+                input: { Name: selector, WithDecryption: true },
+            });
+            const parameter = read.Parameter;
+            assertDefined(parameter, `the parameter read for '${name}'`);
+            requireSecureStringParameter(name, parameter);
+            assertDefined(parameter.Value, `the value read for '${name}'`);
+            return { value: parameter.Value };
+        }
+        catch (error) {
+            if (!(error instanceof SimSsmError)) {
+                throw error;
+            }
+            return simCfnSsmReferenceStandIn(reference, name, `and simulated Parameter Store could not read it (${error.message})`);
+        }
+    }
+}
+//# sourceMappingURL=sim-cfn-ssm-secure-dynamic-reference-resolver.js.map

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-secure-dynamic-reference-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-ssm-secure-dynamic-reference-resolver.js","sourceRoot":"","sources":["../../../../../src/service/ssm/cfn/dynamic/sim-cfn-ssm-secure-dynamic-reference-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAOvE,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE3D,OAAO,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AAC9E,OAAO,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAChF,OAAO,EACL,4BAA4B,EAC5B,iCAAiC,GAClC,MAAM,kCAAkC,CAAC;AAM1C;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,uCAAuC;IACjC,GAAG,CAAS;IAE7B,YAAY,UAA6D;QACvE,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;IAC5B,CAAC;IAED;;;;;;OAMG;IACH,OAAO,CACL,SAAiC,EACjC,IAAgC;QAIhC,iCAAiC,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAEnD,MAAM,MAAM,GAAG,2BAA2B,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAE3D,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,yBAAyB,CAC9B,SAAS,EACT,SAAS,CAAC,IAAI,EACd,qEAAqE;gBACnE,qDAAqD,CACxD,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAChE,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,SAAS,CACrB,SAAiC,EACjC,IAAY,EACZ,OAA2B;QAE3B,MAAM,QAAQ,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,OAAO,EAAE,CAAC;QAErE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC;gBACvC,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE;aAChD,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;YAEjC,aAAa,CAAC,SAAS,EAAE,2BAA2B,IAAI,GAAG,CAAC,CAAC;YAC7D,4BAA4B,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YAC9C,aAAa,CAAC,SAAS,CAAC,KAAK,EAAE,uBAAuB,IAAI,GAAG,CAAC,CAAC;YAE/D,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,YAAY,WAAW,CAAC,EAAE,CAAC;gBACpC,MAAM,KAAK,CAAC;YACd,CAAC;YAED,OAAO,yBAAyB,CAC9B,SAAS,EACT,IAAI,EACJ,oDAAoD,KAAK,CAAC,OAAO,GAAG,CACrE,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-secure-reference-properties.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Whether an `ssm-secure` reference is accepted in one Resource property.
+ *
+ * A Resource with no type in its template accepts none, since there is nothing
+ * to match it against.
+ */
+export declare function acceptsSsmSecureReference(resourceType: string | undefined, propertyPath: string): boolean;
+//# sourceMappingURL=sim-cfn-ssm-secure-reference-properties.d.ts.map

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-secure-reference-properties.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-ssm-secure-reference-properties.d.ts","sourceRoot":"","sources":["../../../../../src/service/ssm/cfn/dynamic/sim-cfn-ssm-secure-reference-properties.ts"],"names":[],"mappings":"AAoCA;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACvC,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,YAAY,EAAE,MAAM,GACnB,OAAO,CAST"}

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-secure-reference-properties.js

@@ -0,0 +1,61 @@
+/**
+ * The Resource properties real CloudFormation reads an `ssm-secure` dynamic
+ * reference in.
+ *
+ * Every other property refuses one, which is a rule worth keeping because a
+ * template breaking it is wrong wherever it deploys. The list is short and
+ * fixed, and AWS documents it in full:
+ * https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/dynamic-references-ssm-secure-strings.html
+ *
+ * `AWS::IAM::User` `LoginProfile.Password` is the only pair a simulated
+ * Resource holds today. The other ten name Resource types nothing here
+ * simulates, and they are listed anyway so that the rule is the documented one
+ * rather than the part of it this simulation happens to reach.
+ */
+const acceptingProperties = new Map([
+    ["AWS::DirectoryService::MicrosoftAD", new Set(["Password"])],
+    ["AWS::DirectoryService::SimpleAD", new Set(["Password"])],
+    ["AWS::ElastiCache::ReplicationGroup", new Set(["AuthToken"])],
+    ["AWS::IAM::User", new Set(["LoginProfile.Password"])],
+    [
+        "AWS::KinesisFirehose::DeliveryStream",
+        new Set(["RedshiftDestinationConfiguration.Password"]),
+    ],
+    ["AWS::OpsWorks::App", new Set(["Source.Password"])],
+    [
+        "AWS::OpsWorks::Stack",
+        new Set(["CustomCookbooksSource.Password", "RdsDbInstances.DbPassword"]),
+    ],
+    ["AWS::RDS::DBCluster", new Set(["MasterUserPassword"])],
+    ["AWS::RDS::DBInstance", new Set(["MasterUserPassword"])],
+    ["AWS::Redshift::Cluster", new Set(["MasterUserPassword"])],
+]);
+/** A list position in a resolved property path, such as the `0` of `Tags.0`. */
+const listPosition = /^\d+$/;
+/**
+ * Whether an `ssm-secure` reference is accepted in one Resource property.
+ *
+ * A Resource with no type in its template accepts none, since there is nothing
+ * to match it against.
+ */
+export function acceptsSsmSecureReference(resourceType, propertyPath) {
+    if (resourceType === undefined) {
+        return false;
+    }
+    return (acceptingProperties.get(resourceType)?.has(namedProperty(propertyPath)) ===
+        true);
+}
+/**
+ * The property a resolved path names, with the list positions taken out.
+ *
+ * `RdsDbInstances` holds a list, so the path to a password inside it reads
+ * `RdsDbInstances.0.DbPassword` while the documented property is
+ * `RdsDbInstances.DbPassword`.
+ */
+function namedProperty(propertyPath) {
+    return propertyPath
+        .split(".")
+        .filter((segment) => !listPosition.test(segment))
+        .join(".");
+}
+//# sourceMappingURL=sim-cfn-ssm-secure-reference-properties.js.map

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-secure-reference-properties.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-ssm-secure-reference-properties.js","sourceRoot":"","sources":["../../../../../src/service/ssm/cfn/dynamic/sim-cfn-ssm-secure-reference-properties.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,MAAM,mBAAmB,GAA6C,IAAI,GAAG,CAAC;IAC5E,CAAC,oCAAoC,EAAE,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;IAC7D,CAAC,iCAAiC,EAAE,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;IAC1D,CAAC,oCAAoC,EAAE,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;IAC9D,CAAC,gBAAgB,EAAE,IAAI,GAAG,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC;IACtD;QACE,sCAAsC;QACtC,IAAI,GAAG,CAAC,CAAC,2CAA2C,CAAC,CAAC;KACvD;IACD,CAAC,oBAAoB,EAAE,IAAI,GAAG,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC;IACpD;QACE,sBAAsB;QACtB,IAAI,GAAG,CAAC,CAAC,gCAAgC,EAAE,2BAA2B,CAAC,CAAC;KACzE;IACD,CAAC,qBAAqB,EAAE,IAAI,GAAG,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC;IACxD,CAAC,sBAAsB,EAAE,IAAI,GAAG,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC;IACzD,CAAC,wBAAwB,EAAE,IAAI,GAAG,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC;CAC5D,CAAC,CAAC;AAEH,gFAAgF;AAChF,MAAM,YAAY,GAAG,OAAO,CAAC;AAE7B;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CACvC,YAAgC,EAChC,YAAoB;IAEpB,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,CACL,mBAAmB,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QACvE,IAAI,CACL,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,aAAa,CAAC,YAAoB;IACzC,OAAO,YAAY;SAChB,KAAK,CAAC,GAAG,CAAC;SACV,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;SAChD,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC"}

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-secure-refusals.d.ts

@@ -0,0 +1,19 @@
+import type { SimCfnDynamicReference, SimCfnDynamicReferenceSite } from "../../../cloudformation/template/dynamic/sim-cfn-dynamic-reference.type.js";
+import type { SimSsmParameterOutput } from "../../command/parameter/parameter.command.js";
+/**
+ * Fail a reference written into a property CloudFormation does not read one
+ * in.
+ *
+ * This fails the Resource rather than resolving to a stand-in value. A
+ * template breaking the rule is wrong wherever it deploys, so saying so is
+ * more use than deploying something that was never the secret.
+ */
+export declare function requireSsmSecureReferenceProperty(reference: SimCfnDynamicReference, site: SimCfnDynamicReferenceSite): void;
+/**
+ * Fail a reference naming a parameter stored in the clear.
+ *
+ * Real CloudFormation refuses one the same way. The plain `ssm` reference
+ * beside it is what reads a `String` or a `StringList`.
+ */
+export declare function requireSecureStringParameter(name: string, parameter: SimSsmParameterOutput): void;
+//# sourceMappingURL=sim-cfn-ssm-secure-refusals.d.ts.map

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-secure-refusals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-ssm-secure-refusals.d.ts","sourceRoot":"","sources":["../../../../../src/service/ssm/cfn/dynamic/sim-cfn-ssm-secure-refusals.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,sBAAsB,EACtB,0BAA0B,EAC3B,MAAM,4EAA4E,CAAC;AACpF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AAS1F;;;;;;;GAOG;AACH,wBAAgB,iCAAiC,CAC/C,SAAS,EAAE,sBAAsB,EACjC,IAAI,EAAE,0BAA0B,GAC/B,IAAI,CAUN;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,qBAAqB,GAC/B,IAAI,CAUN"}

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-secure-refusals.js

@@ -0,0 +1,37 @@
+import { SimCloudFormationValidationError } from "../../../cloudformation/error/sim-cloudformation.error.js";
+import { acceptsSsmSecureReference } from "./sim-cfn-ssm-secure-reference-properties.js";
+/** What a Resource carrying no `Type` is called in a refusal. */
+const untypedResource = "A Resource with no Type";
+/** The parameter type an `ssm-secure` reference reads. */
+const secureString = "SecureString";
+/**
+ * Fail a reference written into a property CloudFormation does not read one
+ * in.
+ *
+ * This fails the Resource rather than resolving to a stand-in value. A
+ * template breaking the rule is wrong wherever it deploys, so saying so is
+ * more use than deploying something that was never the secret.
+ */
+export function requireSsmSecureReferenceProperty(reference, site) {
+    if (acceptsSsmSecureReference(site.resourceType, site.propertyPath)) {
+        return;
+    }
+    throw new SimCloudFormationValidationError(`${site.resourceType ?? untypedResource} holds ${reference.text}. ` +
+        `CloudFormation reads an ssm-secure dynamic reference in eleven ` +
+        `Resource properties, and this is not one of them.`);
+}
+/**
+ * Fail a reference naming a parameter stored in the clear.
+ *
+ * Real CloudFormation refuses one the same way. The plain `ssm` reference
+ * beside it is what reads a `String` or a `StringList`.
+ */
+export function requireSecureStringParameter(name, parameter) {
+    if (parameter.Type === secureString) {
+        return;
+    }
+    throw new SimCloudFormationValidationError(`'${name}' is a ${parameter.Type ?? "typeless"} parameter, and an ` +
+        `ssm-secure dynamic reference reads a ${secureString}. Read a plain ` +
+        `parameter with an ssm reference instead.`);
+}
+//# sourceMappingURL=sim-cfn-ssm-secure-refusals.js.map

package/dist/service/ssm/cfn/dynamic/sim-cfn-ssm-secure-refusals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-ssm-secure-refusals.js","sourceRoot":"","sources":["../../../../../src/service/ssm/cfn/dynamic/sim-cfn-ssm-secure-refusals.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gCAAgC,EAAE,MAAM,2DAA2D,CAAC;AAM7G,OAAO,EAAE,yBAAyB,EAAE,MAAM,8CAA8C,CAAC;AAEzF,iEAAiE;AACjE,MAAM,eAAe,GAAG,yBAAyB,CAAC;AAElD,0DAA0D;AAC1D,MAAM,YAAY,GAAG,cAAc,CAAC;AAEpC;;;;;;;GAOG;AACH,MAAM,UAAU,iCAAiC,CAC/C,SAAiC,EACjC,IAAgC;IAEhC,IAAI,yBAAyB,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QACpE,OAAO;IACT,CAAC;IAED,MAAM,IAAI,gCAAgC,CACxC,GAAG,IAAI,CAAC,YAAY,IAAI,eAAe,UAAU,SAAS,CAAC,IAAI,IAAI;QACjE,iEAAiE;QACjE,mDAAmD,CACtD,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B,CAC1C,IAAY,EACZ,SAAgC;IAEhC,IAAI,SAAS,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QACpC,OAAO;IACT,CAAC;IAED,MAAM,IAAI,gCAAgC,CACxC,IAAI,IAAI,UAAU,SAAS,CAAC,IAAI,IAAI,UAAU,qBAAqB;QACjE,wCAAwC,YAAY,iBAAiB;QACrE,0CAA0C,CAC7C,CAAC;AACJ,CAAC"}

package/dist/service/ssm/cfn/parameter/sim-cfn-ssm-parameter-value-reader.d.ts

@@ -0,0 +1,36 @@
+import type { SimCfnParameterStoreReader, SimCfnParameterStoreValue } from "../../../cloudformation/parameters/store/sim-cfn-parameter-store.type.js";
+import type { SimSsm } from "../../sim-ssm.js";
+interface SimCfnSsmParameterValueReaderProperties {
+    readonly ssm: SimSsm;
+}
+/**
+ * Answers an `AWS::SSM::Parameter::Value<...>` template Parameter from the
+ * simulated Parameter Store.
+ *
+ * The Parameter is given a parameter name and resolves to the current value
+ * held under it, as real CloudFormation resolves one while it reads the
+ * template's `Parameters` section. Nothing in the Stack has been created at
+ * that point, so a name another Resource of the same Stack goes on to create
+ * is a name this cannot answer.
+ *
+ * A name with nothing behind it becomes a stand-in value carrying a reason,
+ * which the Stack records. A template reading configuration a test never
+ * created still deploys everything else in it.
+ */
+export declare class SimCfnSsmParameterValueReader implements SimCfnParameterStoreReader {
+    private readonly ssm;
+    constructor(properties: SimCfnSsmParameterValueReaderProperties);
+    /**
+     * Read the current value of one parameter.
+     */
+    read(name: string): SimCfnParameterStoreValue;
+    /**
+     * The value a name Parameter Store could not answer resolves to.
+     *
+     * The shape follows the one a dynamic reference stands in with, so a test
+     * reading either back sees where the value came from.
+     */
+    private standIn;
+}
+export {};
+//# sourceMappingURL=sim-cfn-ssm-parameter-value-reader.d.ts.map

package/dist/service/ssm/cfn/parameter/sim-cfn-ssm-parameter-value-reader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cfn-ssm-parameter-value-reader.d.ts","sourceRoot":"","sources":["../../../../../src/service/ssm/cfn/parameter/sim-cfn-ssm-parameter-value-reader.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,0BAA0B,EAC1B,yBAAyB,EAC1B,MAAM,0EAA0E,CAAC;AAClF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE/C,UAAU,uCAAuC;IAC/C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;;;;;GAaG;AACH,qBAAa,6BAA8B,YAAW,0BAA0B;IAC9E,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAE7B,YAAY,UAAU,EAAE,uCAAuC,EAE9D;IAED;;OAEG;IACH,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,yBAAyB,CAmB5C;IAED;;;;;OAKG;IACH,OAAO,CAAC,OAAO;CAQhB"}

package/dist/service/ssm/cfn/parameter/sim-cfn-ssm-parameter-value-reader.js

@@ -0,0 +1,48 @@
+/**
+ * Answers an `AWS::SSM::Parameter::Value<...>` template Parameter from the
+ * simulated Parameter Store.
+ *
+ * The Parameter is given a parameter name and resolves to the current value
+ * held under it, as real CloudFormation resolves one while it reads the
+ * template's `Parameters` section. Nothing in the Stack has been created at
+ * that point, so a name another Resource of the same Stack goes on to create
+ * is a name this cannot answer.
+ *
+ * A name with nothing behind it becomes a stand-in value carrying a reason,
+ * which the Stack records. A template reading configuration a test never
+ * created still deploys everything else in it.
+ */
+export class SimCfnSsmParameterValueReader {
+    ssm;
+    constructor(properties) {
+        this.ssm = properties.ssm;
+    }
+    /**
+     * Read the current value of one parameter.
+     */
+    read(name) {
+        const parameter = this.ssm.findParameter(name);
+        if (parameter === undefined) {
+            return this.standIn(name, `which simulated Parameter Store holds no parameter of`);
+        }
+        if (parameter.type.value === "SecureString") {
+            return this.standIn(name, `which is a SecureString, a type real CloudFormation refuses to read ` +
+                `into a template Parameter`);
+        }
+        return { value: parameter.currentVersion.value.value };
+    }
+    /**
+     * The value a name Parameter Store could not answer resolves to.
+     *
+     * The shape follows the one a dynamic reference stands in with, so a test
+     * reading either back sees where the value came from.
+     */
+    standIn(name, reason) {
+        return {
+            value: `dummy-value-for-${name}`,
+            reason: `names the Parameter Store parameter '${name}', ${reason}, so the ` +
+                `Parameter resolves to a stand-in value`,
+        };
+    }
+}
+//# sourceMappingURL=sim-cfn-ssm-parameter-value-reader.js.map