@kensio/yulin 1.18.0 → 1.18.1

package/dist/service/wafv2/cfn/web-acl/sim-cfn-waf-web-acl-config.js

@@ -1,3 +1,4 @@
+import { simWafUnsimulatedWebAclMembers } from "../../command/web-acl/sim-wafv2-unsimulated-web-acl-input.js";
 import { SimCfnWafResourceConfig } from "../sim-cfn-waf-resource-config.js";
 import { wafWebAclResourceType } from "../sim-cfn-waf-resource-types.js";
 /**
@@ -7,7 +8,7 @@ import { wafWebAclResourceType } from "../sim-cfn-waf-resource-types.js";
  * default action and the custom response bodies are handed over as the
  * template wrote them. They are not read here at all: every rule is compiled
  * by CreateWebACL, which is where a statement kind Yulin cannot evaluate is
- * refused, and reading them twice would mean two answers to the same question.
+ * found, and reading them twice would mean two answers to the same question.
  */
 export class SimCfnWafWebAclConfig extends SimCfnWafResourceConfig {
     get resourceType() {
@@ -16,11 +17,13 @@ export class SimCfnWafWebAclConfig extends SimCfnWafResourceConfig {
     /**
      * The input the web ACL this Resource describes is created from.
      *
-     * The properties this simulation has no behaviour for are passed through
-     * rather than dropped, so `CaptchaConfig` and the rest are refused by
-     * CreateWebACL as they are for an SDK caller.
+     * The properties this simulation has no behaviour for are left out of it and
+     * recorded, so the web ACL deploys with the rest of what the template wrote.
+     * An SDK caller is refused for the same properties, because a request that
+     * was answered and then quietly dropped is a worse answer than a refusal.
      */
     createInput() {
+        this.recordUnsimulatedMembers();
         return {
             Name: this.name(),
             Scope: this.scope(),
@@ -29,15 +32,22 @@ export class SimCfnWafWebAclConfig extends SimCfnWafResourceConfig {
             Rules: this.rules(),
             VisibilityConfig: this.value("VisibilityConfig"),
             CustomResponseBodies: this.value("CustomResponseBodies"),
-            CaptchaConfig: this.value("CaptchaConfig"),
-            ChallengeConfig: this.value("ChallengeConfig"),
-            TokenDomains: this.strings("TokenDomains"),
-            AssociationConfig: this.value("AssociationConfig"),
-            DataProtectionConfig: this.value("DataProtectionConfig"),
-            OnSourceDDoSProtectionConfig: this.value("OnSourceDDoSProtectionConfig"),
-            ApplicationConfig: this.value("ApplicationConfig"),
         };
     }
+    /**
+     * Record the web ACL members this simulation has no behaviour for.
+     *
+     * Each of them changes what a web ACL does on real WAF, so a web ACL
+     * deployed without one behaves differently to the one the template
+     * describes. `stack.ignoredProperties` is where a test reads that.
+     */
+    recordUnsimulatedMembers() {
+        for (const [member, reason] of simWafUnsimulatedWebAclMembers) {
+            if (this.value(member) !== undefined) {
+                this.resource.ignoreProperty(member, `${member} is not simulated: ${reason}`);
+            }
+        }
+    }
     /**
      * The rules the template declared.
      *

package/dist/service/wafv2/cfn/web-acl/sim-cfn-waf-web-acl-config.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-waf-web-acl-config.js","sourceRoot":"","sources":["../../../../../src/service/wafv2/cfn/web-acl/sim-cfn-waf-web-acl-config.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AAEzE;;;;;;;;GAQG;AACH,MAAM,OAAO,qBAAsB,SAAQ,uBAAuB;IAChE,IAAuB,YAAY;QACjC,OAAO,qBAAqB,CAAC;IAC/B,CAAC;IAED;;;;;;OAMG;IACH,WAAW;QACT,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;YACjB,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;YACnB,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE;YAC/B,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe,CAE5B;YACb,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;YACnB,gBAAgB,EAAE,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC;YAChD,oBAAoB,EAAE,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAE1C;YACb,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC;YAC1C,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC;YAC9C,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC;YAC1C,iBAAiB,EAAE,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC;YAClD,oBAAoB,EAAE,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC;YACxD,4BAA4B,EAAE,IAAI,CAAC,KAAK,CAAC,8BAA8B,CAAC;YACxE,iBAAiB,EAAE,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC;SACnD,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACK,KAAK;QACX,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAElC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;QACtC,CAAC;QAED,OAAO,KAAmC,CAAC;IAC7C,CAAC;CACF"}
+{"version":3,"file":"sim-cfn-waf-web-acl-config.js","sourceRoot":"","sources":["../../../../../src/service/wafv2/cfn/web-acl/sim-cfn-waf-web-acl-config.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,8BAA8B,EAAE,MAAM,8DAA8D,CAAC;AAC9G,OAAO,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AAEzE;;;;;;;;GAQG;AACH,MAAM,OAAO,qBAAsB,SAAQ,uBAAuB;IAChE,IAAuB,YAAY;QACjC,OAAO,qBAAqB,CAAC;IAC/B,CAAC;IAED;;;;;;;OAOG;IACH,WAAW;QACT,IAAI,CAAC,wBAAwB,EAAE,CAAC;QAEhC,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;YACjB,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;YACnB,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE;YAC/B,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe,CAE5B;YACb,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;YACnB,gBAAgB,EAAE,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC;YAChD,oBAAoB,EAAE,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAE1C;SACd,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACK,wBAAwB;QAC9B,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,8BAA8B,EAAE,CAAC;YAC9D,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,SAAS,EAAE,CAAC;gBACrC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAC1B,MAAM,EACN,GAAG,MAAM,sBAAsB,MAAM,EAAE,CACxC,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACK,KAAK;QACX,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAElC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;QACtC,CAAC;QAED,OAAO,KAAmC,CAAC;IAC7C,CAAC;CACF"}

package/dist/service/wafv2/cfn/web-acl/sim-cfn-waf-web-acl-creator.d.ts

@@ -11,7 +11,17 @@ interface SimCfnWafWebAclCreatorProperties {
  * The web ACL is created through the ordinary CreateWebACL command rather than
  * constructed directly, so one a template deployed is the same thing an SDK
  * caller would have got: the same compilation of every rule, and the same
- * refusal of a statement kind this simulation cannot evaluate.
+ * refusals.
+ *
+ * A rule this simulation cannot evaluate is the exception, and the two part
+ * company over it. An SDK caller has the whole web ACL refused. A template
+ * deploys the web ACL without that rule and records it on
+ * `stack.ignoredProperties`, because the alternative is one rule taking a
+ * user pool, a table and two functions in the same template down with it.
+ *
+ * The web ACL is then real, and thinner than the one the template describes.
+ * That is the cost of deploying it at all, and the record of the dropped rule
+ * is what a test reads to know the size of it.
  */
 export declare class SimCfnWafWebAclCreator {
     #private;

package/dist/service/wafv2/cfn/web-acl/sim-cfn-waf-web-acl-creator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-waf-web-acl-creator.d.ts","sourceRoot":"","sources":["../../../../../src/service/wafv2/cfn/web-acl/sim-cfn-waf-web-acl-creator.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAClH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAKrE,UAAU,gCAAgC;IACxC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED;;;;;;;GAOG;AACH,qBAAa,sBAAsB;;IAGjC,YAAY,UAAU,EAAE,gCAAgC,EAEvD;IAED;;OAEG;IACG,MAAM,CACV,QAAQ,EAAE,cAAc,EACxB,UAAU,EAAE,yBAAyB,GACpC,OAAO,CAAC,YAAY,CAAC,CA8BvB;IAED;;;;;;;OAOG;IACG,MAAM,CAAC,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAc1E;CACF"}
+{"version":3,"file":"sim-cfn-waf-web-acl-creator.d.ts","sourceRoot":"","sources":["../../../../../src/service/wafv2/cfn/web-acl/sim-cfn-waf-web-acl-creator.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sDAAsD,CAAC;AAC3F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAClH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAMrE,UAAU,gCAAgC;IACxC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,sBAAsB;;IAGjC,YAAY,UAAU,EAAE,gCAAgC,EAEvD;IAED;;OAEG;IACG,MAAM,CACV,QAAQ,EAAE,cAAc,EACxB,UAAU,EAAE,yBAAyB,GACpC,OAAO,CAAC,YAAY,CAAC,CAoCvB;IAED;;;;;;;OAOG;IACG,MAAM,CAAC,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAc1E;CACF"}

package/dist/service/wafv2/cfn/web-acl/sim-cfn-waf-web-acl-creator.js

@@ -1,6 +1,7 @@
 import { assertDefined } from "../../../../util/type-guard/defined.js";
 import { simCfnWafResourceCommand } from "../sim-cfn-waf-resource-error.js";
 import { wafWebAclResourceType } from "../sim-cfn-waf-resource-types.js";
+import { simCfnWafEvaluatableRules } from "./sim-cfn-waf-evaluatable-rules.js";
 import { SimCfnWafWebAclConfig } from "./sim-cfn-waf-web-acl-config.js";
 /**
  * Creates simulated web ACLs from AWS::WAFv2::WebACL Resources.
@@ -8,7 +9,17 @@ import { SimCfnWafWebAclConfig } from "./sim-cfn-waf-web-acl-config.js";
  * The web ACL is created through the ordinary CreateWebACL command rather than
  * constructed directly, so one a template deployed is the same thing an SDK
  * caller would have got: the same compilation of every rule, and the same
- * refusal of a statement kind this simulation cannot evaluate.
+ * refusals.
+ *
+ * A rule this simulation cannot evaluate is the exception, and the two part
+ * company over it. An SDK caller has the whole web ACL refused. A template
+ * deploys the web ACL without that rule and records it on
+ * `stack.ignoredProperties`, because the alternative is one rule taking a
+ * user pool, a table and two functions in the same template down with it.
+ *
+ * The web ACL is then real, and thinner than the one the template describes.
+ * That is the cost of deploying it at all, and the record of the dropped rule
+ * is what a test reads to know the size of it.
  */
 export class SimCfnWafWebAclCreator {
     #wafV2;
@@ -23,8 +34,14 @@ export class SimCfnWafWebAclCreator {
             resource,
             properties,
         }).createInput();
+        const deployable = {
+            ...input,
+            Rules: simCfnWafEvaluatableRules(this.#wafV2, resource, input),
+        };
         return await simCfnWafResourceCommand(wafWebAclResourceType, resource.logicalId, async () => {
-            const created = await this.#wafV2.createWebAcl({ input });
+            const created = await this.#wafV2.createWebAcl({
+                input: deployable,
+            });
             const arn = created.Summary?.ARN;
             assertDefined(arn, `sim WAFv2 web ACL ARN for CloudFormation Resource ${resource.logicalId}`);
             const webAcl = this.#wafV2.findWebAclByArn(arn);

package/dist/service/wafv2/cfn/web-acl/sim-cfn-waf-web-acl-creator.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cfn-waf-web-acl-creator.js","sourceRoot":"","sources":["../../../../../src/service/wafv2/cfn/web-acl/sim-cfn-waf-web-acl-creator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAKvE,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AAMxE;;;;;;;GAOG;AACH,MAAM,OAAO,sBAAsB;IACxB,MAAM,CAAW;IAE1B,YAAY,UAA4C;QACtD,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,QAAwB,EACxB,UAAqC;QAErC,MAAM,KAAK,GAAG,IAAI,qBAAqB,CAAC;YACtC,QAAQ;YACR,UAAU;SACX,CAAC,CAAC,WAAW,EAAE,CAAC;QAEjB,OAAO,MAAM,wBAAwB,CACnC,qBAAqB,EACrB,QAAQ,CAAC,SAAS,EAClB,KAAK,IAAI,EAAE;YACT,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1D,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;YAEjC,aAAa,CACX,GAAG,EACH,qDACE,QAAQ,CAAC,SACX,EAAE,CACH,CAAC;YAEF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;YAEhD,aAAa,CACX,MAAM,EACN,qBAAqB,GAAG,gCAAgC,CACzD,CAAC;YAEF,OAAO,MAAM,CAAC;QAChB,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,MAAM,CAAC,QAAwB,EAAE,MAAoB;QACzD,MAAM,wBAAwB,CAC5B,qBAAqB,EACrB,QAAQ,CAAC,SAAS,EAClB,KAAK,IAAI,EAAE,CACT,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;YAC7B,KAAK,EAAE;gBACL,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,SAAS,EAAE,MAAM,CAAC,SAAS;aAC5B;SACF,CAAC,CACL,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-cfn-waf-web-acl-creator.js","sourceRoot":"","sources":["../../../../../src/service/wafv2/cfn/web-acl/sim-cfn-waf-web-acl-creator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAKvE,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAC/E,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AAMxE;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,OAAO,sBAAsB;IACxB,MAAM,CAAW;IAE1B,YAAY,UAA4C;QACtD,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,QAAwB,EACxB,UAAqC;QAErC,MAAM,KAAK,GAAG,IAAI,qBAAqB,CAAC;YACtC,QAAQ;YACR,UAAU;SACX,CAAC,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,UAAU,GAAG;YACjB,GAAG,KAAK;YACR,KAAK,EAAE,yBAAyB,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC;SAC/D,CAAC;QAEF,OAAO,MAAM,wBAAwB,CACnC,qBAAqB,EACrB,QAAQ,CAAC,SAAS,EAClB,KAAK,IAAI,EAAE;YACT,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;gBAC7C,KAAK,EAAE,UAAU;aAClB,CAAC,CAAC;YACH,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;YAEjC,aAAa,CACX,GAAG,EACH,qDACE,QAAQ,CAAC,SACX,EAAE,CACH,CAAC;YAEF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;YAEhD,aAAa,CACX,MAAM,EACN,qBAAqB,GAAG,gCAAgC,CACzD,CAAC;YAEF,OAAO,MAAM,CAAC;QAChB,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,MAAM,CAAC,QAAwB,EAAE,MAAoB;QACzD,MAAM,wBAAwB,CAC5B,qBAAqB,EACrB,QAAQ,CAAC,SAAS,EAClB,KAAK,IAAI,EAAE,CACT,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;YAC7B,KAAK,EAAE;gBACL,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,SAAS,EAAE,MAAM,CAAC,SAAS;aAC5B;SACF,CAAC,CACL,CAAC;IACJ,CAAC;CACF"}

package/dist/service/wafv2/command/web-acl/sim-wafv2-unsimulated-web-acl-input.d.ts

@@ -1,4 +1,13 @@
 import type { SimWafWebAclWriteInput } from "./web-acl.command.js";
+/**
+ * Why each web ACL member this simulation does not model is refused, by the
+ * name a request and a template both write.
+ *
+ * The refusal below and the CloudFormation layer read the same list. One
+ * throws and the other records the member and deploys the web ACL without it,
+ * and neither should be able to grow a reason the other has not got.
+ */
+export declare const simWafUnsimulatedWebAclMembers: ReadonlyMap<string, string>;
 /**
  * Refuse the web ACL members this simulation does not model.
  *

package/dist/service/wafv2/command/web-acl/sim-wafv2-unsimulated-web-acl-input.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-wafv2-unsimulated-web-acl-input.d.ts","sourceRoot":"","sources":["../../../../../src/service/wafv2/command/web-acl/sim-wafv2-unsimulated-web-acl-input.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AA2CnE;;;;;;GAMG;AACH,wBAAgB,kCAAkC,CAChD,KAAK,EAAE,sBAAsB,EAC7B,SAAS,EAAE,MAAM,GAChB,IAAI,CAYN"}
+{"version":3,"file":"sim-wafv2-unsimulated-web-acl-input.d.ts","sourceRoot":"","sources":["../../../../../src/service/wafv2/command/web-acl/sim-wafv2-unsimulated-web-acl-input.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AA2CnE;;;;;;;GAOG;AACH,eAAO,MAAM,8BAA8B,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CACA,CAAC;AAExE;;;;;;GAMG;AACH,wBAAgB,kCAAkC,CAChD,KAAK,EAAE,sBAAsB,EAC7B,SAAS,EAAE,MAAM,GAChB,IAAI,CAYN"}

package/dist/service/wafv2/command/web-acl/sim-wafv2-unsimulated-web-acl-input.js

@@ -29,6 +29,15 @@ const refusedMembers = [
         "it configures the WAF-hosted sign-in pages, which are not simulated",
     ],
 ];
+/**
+ * Why each web ACL member this simulation does not model is refused, by the
+ * name a request and a template both write.
+ *
+ * The refusal below and the CloudFormation layer read the same list. One
+ * throws and the other records the member and deploys the web ACL without it,
+ * and neither should be able to grow a reason the other has not got.
+ */
+export const simWafUnsimulatedWebAclMembers = new Map(refusedMembers.map(([, member, reason]) => [member, reason]));
 /**
  * Refuse the web ACL members this simulation does not model.
  *

package/dist/service/wafv2/command/web-acl/sim-wafv2-unsimulated-web-acl-input.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-wafv2-unsimulated-web-acl-input.js","sourceRoot":"","sources":["../../../../../src/service/wafv2/command/web-acl/sim-wafv2-unsimulated-web-acl-input.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,+BAA+B,EAAE,MAAM,gCAAgC,CAAC;AACjF,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAYzD,MAAM,YAAY,GAChB,2EAA2E;IAC3E,qBAAqB,CAAC;AAExB,MAAM,cAAc,GAAmC;IACrD,CAAC,CAAC,KAAK,EAAW,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,eAAe,EAAE,YAAY,CAAC;IACxE,CAAC,CAAC,KAAK,EAAW,EAAE,CAAC,KAAK,CAAC,eAAe,EAAE,iBAAiB,EAAE,YAAY,CAAC;IAC5E,CAAC,CAAC,KAAK,EAAW,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,EAAE,YAAY,CAAC;IACtE;QACE,CAAC,KAAK,EAAW,EAAE,CAAC,KAAK,CAAC,iBAAiB;QAC3C,mBAAmB;QACnB,mEAAmE;YACjE,+DAA+D;KAClE;IACD;QACE,CAAC,KAAK,EAAW,EAAE,CAAC,KAAK,CAAC,oBAAoB;QAC9C,sBAAsB;QACtB,0EAA0E;YACxE,kBAAkB;KACrB;IACD;QACE,CAAC,KAAK,EAAW,EAAE,CAAC,KAAK,CAAC,4BAA4B;QACtD,8BAA8B;QAC9B,oEAAoE;KACrE;IACD;QACE,CAAC,KAAK,EAAW,EAAE,CAAC,KAAK,CAAC,iBAAiB;QAC3C,mBAAmB;QACnB,qEAAqE;KACtE;CACF,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,kCAAkC,CAChD,KAA6B,EAC7B,SAAiB;IAEjB,gBAAgB,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAExC,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;QACpD,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,+BAA+B,CACvC,GAAG,SAAS,YAAY,MAAM,oCAC5B,MACF,EAAE,CACH,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"sim-wafv2-unsimulated-web-acl-input.js","sourceRoot":"","sources":["../../../../../src/service/wafv2/command/web-acl/sim-wafv2-unsimulated-web-acl-input.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,+BAA+B,EAAE,MAAM,gCAAgC,CAAC;AACjF,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAYzD,MAAM,YAAY,GAChB,2EAA2E;IAC3E,qBAAqB,CAAC;AAExB,MAAM,cAAc,GAAmC;IACrD,CAAC,CAAC,KAAK,EAAW,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,eAAe,EAAE,YAAY,CAAC;IACxE,CAAC,CAAC,KAAK,EAAW,EAAE,CAAC,KAAK,CAAC,eAAe,EAAE,iBAAiB,EAAE,YAAY,CAAC;IAC5E,CAAC,CAAC,KAAK,EAAW,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,EAAE,YAAY,CAAC;IACtE;QACE,CAAC,KAAK,EAAW,EAAE,CAAC,KAAK,CAAC,iBAAiB;QAC3C,mBAAmB;QACnB,mEAAmE;YACjE,+DAA+D;KAClE;IACD;QACE,CAAC,KAAK,EAAW,EAAE,CAAC,KAAK,CAAC,oBAAoB;QAC9C,sBAAsB;QACtB,0EAA0E;YACxE,kBAAkB;KACrB;IACD;QACE,CAAC,KAAK,EAAW,EAAE,CAAC,KAAK,CAAC,4BAA4B;QACtD,8BAA8B;QAC9B,oEAAoE;KACrE;IACD;QACE,CAAC,KAAK,EAAW,EAAE,CAAC,KAAK,CAAC,iBAAiB;QAC3C,mBAAmB;QACnB,qEAAqE;KACtE;CACF,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,8BAA8B,GACzC,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;AAExE;;;;;;GAMG;AACH,MAAM,UAAU,kCAAkC,CAChD,KAA6B,EAC7B,SAAiB;IAEjB,gBAAgB,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAExC,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;QACpD,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,+BAA+B,CACvC,GAAG,SAAS,YAAY,MAAM,oCAC5B,MACF,EAAE,CACH,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/service/wafv2/sim-wafv2.d.ts

@@ -12,6 +12,8 @@ import { type SimWafV2Properties } from "./sim-wafv2-commands.js";
 import { SimWafCfnResourceFactory } from "./cfn/sim-waf-cfn-resource-factory.js";
 import { SimWafSets } from "./sim-wafv2-sets.js";
 import type { SimWafWebAcl } from "./web-acl/sim-waf-web-acl.js";
+import { type SimWafUnevaluatableRule } from "./web-acl/sim-waf-unevaluatable-rules.js";
+import type { SimWafWebAclWriteInput } from "./command/web-acl/web-acl.command.js";
 export type { SimWafEvaluationRequest } from "./evaluate/sim-waf-evaluation-request.js";
 /**
  * Simulated AWS WAFv2. Handles SDK commands. Emulates AWS behaviour and state.
@@ -87,6 +89,16 @@ export declare class SimWafV2 extends SimWafSets {
      * nothing here, and `rules()` reports what is covered of each.
      */
     managedRules(): SimWafManagedRules;
+    /**
+     * The rules of a web ACL input this simulation cannot evaluate.
+     *
+     * The simulator's own accessor rather than a WAFv2 operation. `CreateWebACL`
+     * refuses a web ACL carrying such a rule, because a web ACL that accepted
+     * one would allow a request AWS blocks. A template is deployed rule by rule
+     * instead, so the CloudFormation layer asks this first and leaves the rules
+     * it names out of the web ACL it writes.
+     */
+    unevaluatableWebAclRules(input: SimWafWebAclWriteInput): readonly SimWafUnevaluatableRule[];
     /**
      * Handle a CreateWebACL Command from the SDK.
      */

package/dist/service/wafv2/sim-wafv2.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-wafv2.d.ts","sourceRoot":"","sources":["../../../src/service/wafv2/sim-wafv2.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,KAAK,KAAK,cAAc,MAAM,sCAAsC,CAAC;AAC5E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAEnF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,0CAA0C,CAAC;AAExF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kDAAkD,CAAC;AAC9F,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAE5D,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AACjF,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAEjE,YAAY,EAAE,uBAAuB,EAAE,MAAM,0CAA0C,CAAC;AAExF;;;;;;;;;;;;;GAaG;AACH,qBAAa,QAAS,SAAQ,UAAU;;IAItC,YAAY,UAAU,GAAE,kBAAuB,EAE9C;IAED;;;;;;;;;OASG;IACH,UAAU,IAAI,gBAAgB,CAE7B;IAED;;;;;OAKG;IACH,UAAU,CAAC,KAAK,EAAE,WAAW,GAAG,SAAS,YAAY,EAAE,CAEtD;IAED;;;;;OAKG;IACH,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAE3D;IAED;;;;;OAKG;IACH,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAExD;IAED;;;;;OAKG;IACH,wBAAwB,CACtB,kBAAkB,EAAE,MAAM,GACzB,qBAAqB,GAAG,SAAS,CAEnC;IAED;;;;;;;;OAQG;IACH,eAAe,CAAC,UAAU,EAAE,uBAAuB,GAAG,cAAc,CAanE;IAED;;;;;;OAMG;IACH,YAAY,IAAI,kBAAkB,CAEjC;IAED;;OAEG;IACG,YAAY,CAChB,OAAO,EAAE,cAAc,CAAC,sBAAsB,EAC9C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,4BAA4B,CAAC,CAGtD;IAED;;OAEG;IACG,SAAS,CACb,OAAO,EAAE,cAAc,CAAC,mBAAmB,EAC3C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,yBAAyB,CAAC,CAGnD;IAED;;OAEG;IACG,YAAY,CAChB,OAAO,EAAE,cAAc,CAAC,sBAAsB,EAC9C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,4BAA4B,CAAC,CAGtD;IAED;;OAEG;IACG,WAAW,CACf,OAAO,EAAE,cAAc,CAAC,qBAAqB,EAC7C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,2BAA2B,CAAC,CAGrD;IAED;;OAEG;IACG,YAAY,CAChB,OAAO,EAAE,cAAc,CAAC,sBAAsB,EAC9C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,4BAA4B,CAAC,CAGtD;IAED;;OAEG;IACG,wBAAwB,CAC5B,OAAO,EAAE,cAAc,CAAC,kCAAkC,EAC1D,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,wCAAwC,CAAC,CAMlE;IAED;;OAEG;IACG,eAAe,CACnB,OAAO,EAAE,cAAc,CAAC,yBAAyB,EACjD,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,+BAA+B,CAAC,CAGzD;IAED;;OAEG;IACG,kBAAkB,CACtB,OAAO,EAAE,cAAc,CAAC,4BAA4B,EACpD,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,kCAAkC,CAAC,CAM5D;IAED;;OAEG;IACG,oBAAoB,CACxB,OAAO,EAAE,cAAc,CAAC,8BAA8B,EACtD,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,oCAAoC,CAAC,CAM9D;IAED;;OAEG;IACG,sBAAsB,CAC1B,OAAO,EAAE,cAAc,CAAC,gCAAgC,EACxD,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,sCAAsC,CAAC,CAMhE;IAED;;OAEG;IACH,kBAAkB,IAAI,wBAAwB,CAE7C;IAED;;OAEG;IACH,gBAAgB,IAAI,mBAAmB,CAEtC;CACF"}
+{"version":3,"file":"sim-wafv2.d.ts","sourceRoot":"","sources":["../../../src/service/wafv2/sim-wafv2.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,KAAK,KAAK,cAAc,MAAM,sCAAsC,CAAC;AAC5E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAEnF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,0CAA0C,CAAC;AAExF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kDAAkD,CAAC;AAC9F,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAE5D,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AACjF,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EACL,KAAK,uBAAuB,EAE7B,MAAM,0CAA0C,CAAC;AAClD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAEnF,YAAY,EAAE,uBAAuB,EAAE,MAAM,0CAA0C,CAAC;AAExF;;;;;;;;;;;;;GAaG;AACH,qBAAa,QAAS,SAAQ,UAAU;;IAItC,YAAY,UAAU,GAAE,kBAAuB,EAE9C;IAED;;;;;;;;;OASG;IACH,UAAU,IAAI,gBAAgB,CAE7B;IAED;;;;;OAKG;IACH,UAAU,CAAC,KAAK,EAAE,WAAW,GAAG,SAAS,YAAY,EAAE,CAEtD;IAED;;;;;OAKG;IACH,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAE3D;IAED;;;;;OAKG;IACH,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAExD;IAED;;;;;OAKG;IACH,wBAAwB,CACtB,kBAAkB,EAAE,MAAM,GACzB,qBAAqB,GAAG,SAAS,CAEnC;IAED;;;;;;;;OAQG;IACH,eAAe,CAAC,UAAU,EAAE,uBAAuB,GAAG,cAAc,CAanE;IAED;;;;;;OAMG;IACH,YAAY,IAAI,kBAAkB,CAEjC;IAED;;;;;;;;OAQG;IACH,wBAAwB,CACtB,KAAK,EAAE,sBAAsB,GAC5B,SAAS,uBAAuB,EAAE,CAMpC;IAED;;OAEG;IACG,YAAY,CAChB,OAAO,EAAE,cAAc,CAAC,sBAAsB,EAC9C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,4BAA4B,CAAC,CAGtD;IAED;;OAEG;IACG,SAAS,CACb,OAAO,EAAE,cAAc,CAAC,mBAAmB,EAC3C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,yBAAyB,CAAC,CAGnD;IAED;;OAEG;IACG,YAAY,CAChB,OAAO,EAAE,cAAc,CAAC,sBAAsB,EAC9C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,4BAA4B,CAAC,CAGtD;IAED;;OAEG;IACG,WAAW,CACf,OAAO,EAAE,cAAc,CAAC,qBAAqB,EAC7C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,2BAA2B,CAAC,CAGrD;IAED;;OAEG;IACG,YAAY,CAChB,OAAO,EAAE,cAAc,CAAC,sBAAsB,EAC9C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,4BAA4B,CAAC,CAGtD;IAED;;OAEG;IACG,wBAAwB,CAC5B,OAAO,EAAE,cAAc,CAAC,kCAAkC,EAC1D,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,wCAAwC,CAAC,CAMlE;IAED;;OAEG;IACG,eAAe,CACnB,OAAO,EAAE,cAAc,CAAC,yBAAyB,EACjD,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,+BAA+B,CAAC,CAGzD;IAED;;OAEG;IACG,kBAAkB,CACtB,OAAO,EAAE,cAAc,CAAC,4BAA4B,EACpD,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,kCAAkC,CAAC,CAM5D;IAED;;OAEG;IACG,oBAAoB,CACxB,OAAO,EAAE,cAAc,CAAC,8BAA8B,EACtD,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,oCAAoC,CAAC,CAM9D;IAED;;OAEG;IACG,sBAAsB,CAC1B,OAAO,EAAE,cAAc,CAAC,gCAAgC,EACxD,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,cAAc,CAAC,sCAAsC,CAAC,CAMhE;IAED;;OAEG;IACH,kBAAkB,IAAI,wBAAwB,CAE7C;IAED;;OAEG;IACH,gBAAgB,IAAI,mBAAmB,CAEtC;CACF"}

package/dist/service/wafv2/sim-wafv2.js

@@ -4,6 +4,7 @@ import { SimWafSdkCommandRouter } from "./sdk/sim-wafv2-sdk-command-router.js";
 import { SimWafCommands, } from "./sim-wafv2-commands.js";
 import { SimWafCfnResourceFactory } from "./cfn/sim-waf-cfn-resource-factory.js";
 import { SimWafSets } from "./sim-wafv2-sets.js";
+import { unevaluatableSimWafRules, } from "./web-acl/sim-waf-unevaluatable-rules.js";
 /**
  * Simulated AWS WAFv2. Handles SDK commands. Emulates AWS behaviour and state.
  *
@@ -100,6 +101,22 @@ export class SimWafV2 extends SimWafSets {
     managedRules() {
         return this.commands.managedRules;
     }
+    /**
+     * The rules of a web ACL input this simulation cannot evaluate.
+     *
+     * The simulator's own accessor rather than a WAFv2 operation. `CreateWebACL`
+     * refuses a web ACL carrying such a rule, because a web ACL that accepted
+     * one would allow a request AWS blocks. A template is deployed rule by rule
+     * instead, so the CloudFormation layer asks this first and leaves the rules
+     * it names out of the web ACL it writes.
+     */
+    unevaluatableWebAclRules(input) {
+        return unevaluatableSimWafRules(input.Rules, {
+            regexPatternSets: this.commands.regexPatternSets,
+            managedRules: this.commands.managedRules,
+            customResponseBodies: input.CustomResponseBodies ?? {},
+        });
+    }
     /**
      * Handle a CreateWebACL Command from the SDK.
      */

package/dist/service/wafv2/sim-wafv2.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-wafv2.js","sourceRoot":"","sources":["../../../src/service/wafv2/sim-wafv2.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,8BAA8B,EAAE,MAAM,4BAA4B,CAAC;AAG5E,OAAO,EAAE,sBAAsB,EAAE,MAAM,yCAAyC,CAAC;AAKjF,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,EACL,cAAc,GAEf,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AACjF,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAKjD;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,QAAS,SAAQ,UAAU;IAC7B,UAAU,GAAG,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC9C,WAAW,GAAG,IAAI,wBAAwB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAErE,YAAY,UAAU,GAAuB,EAAE;QAC7C,KAAK,CAAC,IAAI,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC;IACxC,CAAC;IAED;;;;;;;;;OASG;IACH,UAAU;QACR,OAAO,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;IACpC,CAAC;IAED;;;;;OAKG;IACH,UAAU,CAAC,KAAkB;QAC3B,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC1C,CAAC;IAED;;;;;OAKG;IACH,eAAe,CAAC,SAAiB;QAC/B,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;IAED;;;;;OAKG;IACH,cAAc,CAAC,QAAgB;QAC7B,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAClD,CAAC;IAED;;;;;OAKG;IACH,wBAAwB,CACtB,kBAA0B;QAE1B,OAAO,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;IACtE,CAAC;IAED;;;;;;;;OAQG;IACH,eAAe,CAAC,UAAmC;QACjD,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAE1D,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,8BAA8B,CACtC,+DAA+D;gBAC7D,0BAA0B,UAAU,CAAC,SAAS,GAAG,CACpD,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC,QAAQ,CACpB,sBAAsB,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,CAC5D,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,YAAY;QACV,OAAO,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAChB,OAA8C,EAC9C,OAA8B;QAE9B,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACrE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CACb,OAA2C,EAC3C,OAA8B;QAE9B,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAChB,OAA8C,EAC9C,OAA8B;QAE9B,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACrE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CACf,OAA6C,EAC7C,OAA8B;QAE9B,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACpE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAChB,OAA8C,EAC9C,OAA8B;QAE9B,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACrE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,wBAAwB,CAC5B,OAA0D,EAC1D,OAA8B;QAE9B,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC,QAAQ,CAAC,wBAAwB,CAAC,wBAAwB,CACpE,OAAO,EACP,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CACnB,OAAiD,EACjD,OAA8B;QAE9B,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7E,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CACtB,OAAoD,EACpD,OAA8B;QAE9B,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,kBAAkB,CACzD,OAAO,EACP,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,oBAAoB,CACxB,OAAsD,EACtD,OAA8B;QAE9B,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,oBAAoB,CAC3D,OAAO,EACP,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,sBAAsB,CAC1B,OAAwD,EACxD,OAA8B;QAE9B,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,sBAAsB,CAC7D,OAAO,EACP,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,gBAAgB;QACd,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;CACF"}
+{"version":3,"file":"sim-wafv2.js","sourceRoot":"","sources":["../../../src/service/wafv2/sim-wafv2.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,8BAA8B,EAAE,MAAM,4BAA4B,CAAC;AAG5E,OAAO,EAAE,sBAAsB,EAAE,MAAM,yCAAyC,CAAC;AAKjF,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,EACL,cAAc,GAEf,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AACjF,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEjD,OAAO,EAEL,wBAAwB,GACzB,MAAM,0CAA0C,CAAC;AAKlD;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,QAAS,SAAQ,UAAU;IAC7B,UAAU,GAAG,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC9C,WAAW,GAAG,IAAI,wBAAwB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAErE,YAAY,UAAU,GAAuB,EAAE;QAC7C,KAAK,CAAC,IAAI,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC;IACxC,CAAC;IAED;;;;;;;;;OASG;IACH,UAAU;QACR,OAAO,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;IACpC,CAAC;IAED;;;;;OAKG;IACH,UAAU,CAAC,KAAkB;QAC3B,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC1C,CAAC;IAED;;;;;OAKG;IACH,eAAe,CAAC,SAAiB;QAC/B,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;IAED;;;;;OAKG;IACH,cAAc,CAAC,QAAgB;QAC7B,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAClD,CAAC;IAED;;;;;OAKG;IACH,wBAAwB,CACtB,kBAA0B;QAE1B,OAAO,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;IACtE,CAAC;IAED;;;;;;;;OAQG;IACH,eAAe,CAAC,UAAmC;QACjD,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAE1D,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,8BAA8B,CACtC,+DAA+D;gBAC7D,0BAA0B,UAAU,CAAC,SAAS,GAAG,CACpD,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC,QAAQ,CACpB,sBAAsB,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,CAC5D,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,YAAY;QACV,OAAO,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;IACpC,CAAC;IAED;;;;;;;;OAQG;IACH,wBAAwB,CACtB,KAA6B;QAE7B,OAAO,wBAAwB,CAAC,KAAK,CAAC,KAAK,EAAE;YAC3C,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,gBAAgB;YAChD,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,YAAY;YACxC,oBAAoB,EAAE,KAAK,CAAC,oBAAoB,IAAI,EAAE;SACvD,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAChB,OAA8C,EAC9C,OAA8B;QAE9B,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACrE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CACb,OAA2C,EAC3C,OAA8B;QAE9B,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAChB,OAA8C,EAC9C,OAA8B;QAE9B,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACrE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CACf,OAA6C,EAC7C,OAA8B;QAE9B,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACpE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAChB,OAA8C,EAC9C,OAA8B;QAE9B,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACrE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,wBAAwB,CAC5B,OAA0D,EAC1D,OAA8B;QAE9B,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC,QAAQ,CAAC,wBAAwB,CAAC,wBAAwB,CACpE,OAAO,EACP,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CACnB,OAAiD,EACjD,OAA8B;QAE9B,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7E,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CACtB,OAAoD,EACpD,OAA8B;QAE9B,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,kBAAkB,CACzD,OAAO,EACP,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,oBAAoB,CACxB,OAAsD,EACtD,OAA8B;QAE9B,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,oBAAoB,CAC3D,OAAO,EACP,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,sBAAsB,CAC1B,OAAwD,EACxD,OAA8B;QAE9B,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,sBAAsB,CAC7D,OAAO,EACP,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,gBAAgB;QACd,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;CACF"}

package/dist/service/wafv2/web-acl/sim-waf-unevaluatable-rules.d.ts

@@ -0,0 +1,26 @@
+import type { SimWafRuleInput, SimWafRuleScope } from "./sim-waf-rule.type.js";
+/**
+ * One rule of a web ACL this simulation cannot evaluate, and why.
+ */
+export interface SimWafUnevaluatableRule {
+    /** Where the rule sits in the list the web ACL was written with. */
+    readonly index: number;
+    /** The rule's name, as the reason and a record of it name it. */
+    readonly name: string;
+    /** What `CreateWebACL` refuses the rule with. */
+    readonly reason: string;
+}
+/**
+ * The rules of a web ACL this simulation cannot evaluate.
+ *
+ * Each rule is compiled on its own and the refusal is caught, so this answers
+ * with exactly what `CreateWebACL` would refuse and nothing else. A rule the
+ * simulation can evaluate is compiled twice, once here and once by the write
+ * that follows, and compiling is a pure reading of the rule.
+ *
+ * Only a refusal saying the simulation does not go that far is collected. Rule
+ * input WAFv2 itself will not take is left where it is, for the write to raise
+ * as it always has.
+ */
+export declare function unevaluatableSimWafRules(rules: readonly SimWafRuleInput[] | undefined, scope: SimWafRuleScope): readonly SimWafUnevaluatableRule[];
+//# sourceMappingURL=sim-waf-unevaluatable-rules.d.ts.map

package/dist/service/wafv2/web-acl/sim-waf-unevaluatable-rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-waf-unevaluatable-rules.d.ts","sourceRoot":"","sources":["../../../../src/service/wafv2/web-acl/sim-waf-unevaluatable-rules.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAE/E;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,oEAAoE;IACpE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAEvB,iEAAiE;IACjE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,iDAAiD;IACjD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,SAAS,eAAe,EAAE,GAAG,SAAS,EAC7C,KAAK,EAAE,eAAe,GACrB,SAAS,uBAAuB,EAAE,CAQpC"}

package/dist/service/wafv2/web-acl/sim-waf-unevaluatable-rules.js

@@ -0,0 +1,34 @@
+import { SimWafUnsimulatedInputException } from "../error/sim-wafv2.error.js";
+import { SimWafRule } from "./sim-waf-rule.js";
+/**
+ * The rules of a web ACL this simulation cannot evaluate.
+ *
+ * Each rule is compiled on its own and the refusal is caught, so this answers
+ * with exactly what `CreateWebACL` would refuse and nothing else. A rule the
+ * simulation can evaluate is compiled twice, once here and once by the write
+ * that follows, and compiling is a pure reading of the rule.
+ *
+ * Only a refusal saying the simulation does not go that far is collected. Rule
+ * input WAFv2 itself will not take is left where it is, for the write to raise
+ * as it always has.
+ */
+export function unevaluatableSimWafRules(rules, scope) {
+    return (rules ?? []).flatMap((rule, index) => {
+        const reason = unevaluatableReason(rule, scope);
+        return reason === undefined
+            ? []
+            : [{ index, name: rule.Name ?? `at ${index}`, reason }];
+    });
+}
+function unevaluatableReason(rule, scope) {
+    try {
+        SimWafRule.compile(rule, scope);
+    }
+    catch (error) {
+        if (error instanceof SimWafUnsimulatedInputException) {
+            return error.message;
+        }
+    }
+    return undefined;
+}
+//# sourceMappingURL=sim-waf-unevaluatable-rules.js.map

package/dist/service/wafv2/web-acl/sim-waf-unevaluatable-rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-waf-unevaluatable-rules.js","sourceRoot":"","sources":["../../../../src/service/wafv2/web-acl/sim-waf-unevaluatable-rules.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,+BAA+B,EAAE,MAAM,6BAA6B,CAAC;AAC9E,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAiB/C;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,wBAAwB,CACtC,KAA6C,EAC7C,KAAsB;IAEtB,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC3C,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAEhD,OAAO,MAAM,KAAK,SAAS;YACzB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,MAAM,KAAK,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAC1B,IAAqB,EACrB,KAAsB;IAEtB,IAAI,CAAC;QACH,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,+BAA+B,EAAE,CAAC;YACrD,OAAO,KAAK,CAAC,OAAO,CAAC;QACvB,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kensio/yulin",
-  "version": "1.18.0",
+  "version": "1.18.1",
   "description": "AWS system behaviour simulation for isolated unit testing",
   "repository": "https://github.com/KensioSoftware/yulin",
   "homepage": "https://yulinsim.dev/",