@kensio/yulin 1.19.0 → 1.19.2

package/dist/service/cloudformation/terraform/sim-tf-map-iam.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-map-iam.js","sourceRoot":"","sources":["../../../../src/service/cloudformation/terraform/sim-tf-map-iam.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,kDAAkD;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,oCAAoC,CAAC;AAE9D,OAAO,EACL,SAAS,EACT,KAAK,EACL,UAAU,EACV,OAAO,EACP,IAAI,EACJ,aAAa,GAEd,MAAM,wBAAwB,CAAC;AAMhC,mEAAmE;AACnE,MAAM,UAAU,OAAO,CACrB,OAAgC;IAEhC,MAAM,MAAM,GAAG,YAAY,CACzB,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC,CACrD,CAAC;IAEF,OAAO;QACL,IAAI,EAAE,gBAAgB;QACtB,UAAU,EAAE;YACV,GAAG,OAAO,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;YACzC,GAAG,UAAU,CAAC;gBACZ,wBAAwB,EAAE,MAAM;gBAChC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC;aACpB,CAAC;SACH;QACD,IAAI,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,EAAE;KACzD,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,QAAQ,CACtB,OAAgC;IAEhC,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IAE1D,OAAO;QACL,IAAI,EAAE,qBAAqB;QAC3B,UAAU,EAAE;YACV,GAAG,OAAO,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;YAC7C,GAAG,UAAU,CAAC;gBACZ,eAAe,EAAE,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;aACzD,CAAC;SACH;KACF,CAAC;AACJ,CAAC;AAED,yEAAyE;AACzE,MAAM,CAAC,MAAM,YAAY,GAA+C,IAAI,GAAG,CAC7E;IACE;QACE,qBAAqB;QACrB,EAAE,eAAe,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE;KACtD;IACD;QACE,gCAAgC;QAChC,EAAE,eAAe,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE;KACvD;CACF,CACF,CAAC;AAEF,SAAS,YAAY,CACnB,OAAgC;IAEhC,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;IAExE,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC;KAC1E,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,OAAgC;IAEhC,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAE7C,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;AAC/D,CAAC;AAED,0EAA0E;AAC1E,SAAS,UAAU,CAAC,OAAgC;IAClD,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAExC,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;AACvE,CAAC;AAED;;;;;;GAMG;AACH,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAE1C,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9D,CAAC"}

package/dist/service/cloudformation/terraform/sim-tf-map-lambda.d.ts

@@ -0,0 +1,19 @@
+import { type TerraformMappingContext } from "./sim-tf-attributes.js";
+import type { TerraformMappedResource } from "./sim-tf-mapping.type.js";
+/**
+ * A function, minus its code.
+ *
+ * Terraform points at a zip on disk, an S3 object or a container image, and
+ * none of the three is a handler Yulin can run. A simulated function takes its
+ * behaviour from a deploy binding instead, matched on the function name the
+ * template carries.
+ */
+export declare function lambdaFunction(context: TerraformMappingContext): TerraformMappedResource;
+/** One permission to invoke a function. */
+export declare function lambdaPermission(context: TerraformMappingContext): TerraformMappedResource;
+/**
+ * An event source mapping. Simulated Lambda checks the execution role is
+ * allowed to poll the source, so a role whose policy the plan lost fails here.
+ */
+export declare function lambdaEventSourceMapping(context: TerraformMappingContext): TerraformMappedResource;
+//# sourceMappingURL=sim-tf-map-lambda.d.ts.map

package/dist/service/cloudformation/terraform/sim-tf-map-lambda.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-map-lambda.d.ts","sourceRoot":"","sources":["../../../../src/service/cloudformation/terraform/sim-tf-map-lambda.ts"],"names":[],"mappings":"AAQA,OAAO,EAOL,KAAK,uBAAuB,EAC7B,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAExE;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,uBAAuB,GAC/B,uBAAuB,CAqBzB;AAuCD,2CAA2C;AAC3C,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,uBAAuB,GAC/B,uBAAuB,CAUzB;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,uBAAuB,GAC/B,uBAAuB,CAUzB"}

package/dist/service/cloudformation/terraform/sim-tf-map-lambda.js

@@ -0,0 +1,90 @@
+/*
+ * Reading a plan means reading records whose keys come from the document
+ * rather than from this code, so the object-injection rule fires on every
+ * lookup. The records are parsed JSON with no prototype of their own.
+ */
+// oxlint-disable security/detect-object-injection
+import { isRecord } from "../../../util/type-guard/record.js";
+import { block, field, properties, renamed, tags, templateValue, } from "./sim-tf-attributes.js";
+/**
+ * A function, minus its code.
+ *
+ * Terraform points at a zip on disk, an S3 object or a container image, and
+ * none of the three is a handler Yulin can run. A simulated function takes its
+ * behaviour from a deploy binding instead, matched on the function name the
+ * template carries.
+ */
+export function lambdaFunction(context) {
+    const variables = environmentVariables(context);
+    return {
+        Type: "AWS::Lambda::Function",
+        Properties: {
+            ...renamed(context, {
+                FunctionName: "function_name",
+                Handler: "handler",
+                Runtime: "runtime",
+                Role: "role",
+                Timeout: "timeout",
+                MemorySize: "memory_size",
+            }),
+            ...properties({
+                Environment: variables && { Variables: variables },
+                Tags: tags(context),
+            }),
+        },
+        lost: lost(context, variables),
+    };
+}
+function environmentVariables(context) {
+    const environment = block(context, "environment");
+    const variables = environment && field(environment, "variables");
+    if (!isRecord(variables)) {
+        return undefined;
+    }
+    const value = templateValue(variables);
+    return value;
+}
+/**
+ * What the mapping could not carry.
+ *
+ * The code is always one. The environment variables are another whenever any
+ * value in the map names a resource of the same plan, because Terraform marks
+ * the whole map unknown and the variable names go with it.
+ */
+function lost(context, variables) {
+    const declared = field(context.resource.unknown, "environment");
+    const entries = Array.isArray(declared) ? declared : [];
+    const first = entries[0];
+    const collapsed = isRecord(first) &&
+        field(first, "variables") === true &&
+        variables === undefined;
+    return collapsed ? ["code", "environment.variables"] : ["code"];
+}
+/** One permission to invoke a function. */
+export function lambdaPermission(context) {
+    return {
+        Type: "AWS::Lambda::Permission",
+        Properties: renamed(context, {
+            FunctionName: "function_name",
+            Action: "action",
+            Principal: "principal",
+            SourceArn: "source_arn",
+        }),
+    };
+}
+/**
+ * An event source mapping. Simulated Lambda checks the execution role is
+ * allowed to poll the source, so a role whose policy the plan lost fails here.
+ */
+export function lambdaEventSourceMapping(context) {
+    return {
+        Type: "AWS::Lambda::EventSourceMapping",
+        Properties: renamed(context, {
+            EventSourceArn: "event_source_arn",
+            FunctionName: "function_name",
+            BatchSize: "batch_size",
+            Enabled: "enabled",
+        }),
+    };
+}
+//# sourceMappingURL=sim-tf-map-lambda.js.map

package/dist/service/cloudformation/terraform/sim-tf-map-lambda.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-map-lambda.js","sourceRoot":"","sources":["../../../../src/service/cloudformation/terraform/sim-tf-map-lambda.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,kDAAkD;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,oCAAoC,CAAC;AAE9D,OAAO,EACL,KAAK,EACL,KAAK,EACL,UAAU,EACV,OAAO,EACP,IAAI,EACJ,aAAa,GAEd,MAAM,wBAAwB,CAAC;AAGhC;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAC5B,OAAgC;IAEhC,MAAM,SAAS,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAEhD,OAAO;QACL,IAAI,EAAE,uBAAuB;QAC7B,UAAU,EAAE;YACV,GAAG,OAAO,CAAC,OAAO,EAAE;gBAClB,YAAY,EAAE,eAAe;gBAC7B,OAAO,EAAE,SAAS;gBAClB,OAAO,EAAE,SAAS;gBAClB,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE,SAAS;gBAClB,UAAU,EAAE,aAAa;aAC1B,CAAC;YACF,GAAG,UAAU,CAAC;gBACZ,WAAW,EAAE,SAAS,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE;gBAClD,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC;aACpB,CAAC;SACH;QACD,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC;KAC/B,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAC3B,OAAgC;IAEhC,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,WAAW,IAAI,KAAK,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IAEjE,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACzB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,KAAK,GAAoC,aAAa,CAAC,SAAS,CAAC,CAAC;IAExE,OAAO,KAA0C,CAAC;AACpD,CAAC;AAED;;;;;;GAMG;AACH,SAAS,IAAI,CACX,OAAgC,EAChC,SAA4C;IAE5C,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAChE,MAAM,OAAO,GAAuB,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5E,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACzB,MAAM,SAAS,GACb,QAAQ,CAAC,KAAK,CAAC;QACf,KAAK,CAAC,KAAK,EAAE,WAAW,CAAC,KAAK,IAAI;QAClC,SAAS,KAAK,SAAS,CAAC;IAE1B,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAClE,CAAC;AAED,2CAA2C;AAC3C,MAAM,UAAU,gBAAgB,CAC9B,OAAgC;IAEhC,OAAO;QACL,IAAI,EAAE,yBAAyB;QAC/B,UAAU,EAAE,OAAO,CAAC,OAAO,EAAE;YAC3B,YAAY,EAAE,eAAe;YAC7B,MAAM,EAAE,QAAQ;YAChB,SAAS,EAAE,WAAW;YACtB,SAAS,EAAE,YAAY;SACxB,CAAC;KACH,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAAgC;IAEhC,OAAO;QACL,IAAI,EAAE,iCAAiC;QACvC,UAAU,EAAE,OAAO,CAAC,OAAO,EAAE;YAC3B,cAAc,EAAE,kBAAkB;YAClC,YAAY,EAAE,eAAe;YAC7B,SAAS,EAAE,YAAY;YACvB,OAAO,EAAE,SAAS;SACnB,CAAC;KACH,CAAC;AACJ,CAAC"}

package/dist/service/cloudformation/terraform/sim-tf-map-s3-cors.d.ts

@@ -0,0 +1,5 @@
+import type { SimCfnTemplateValue } from "../template/value/sim-cfn-template-value.js";
+import { type TerraformMappingContext } from "./sim-tf-attributes.js";
+/** The CORS rules a bucket answers browser requests under. */
+export declare function cors(context: TerraformMappingContext): Record<string, SimCfnTemplateValue>;
+//# sourceMappingURL=sim-tf-map-s3-cors.d.ts.map

package/dist/service/cloudformation/terraform/sim-tf-map-s3-cors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-map-s3-cors.d.ts","sourceRoot":"","sources":["../../../../src/service/cloudformation/terraform/sim-tf-map-s3-cors.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6CAA6C,CAAC;AACvF,OAAO,EAIL,KAAK,uBAAuB,EAC7B,MAAM,wBAAwB,CAAC;AAEhC,8DAA8D;AAC9D,wBAAgB,IAAI,CAClB,OAAO,EAAE,uBAAuB,GAC/B,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAWrC"}

package/dist/service/cloudformation/terraform/sim-tf-map-s3-cors.js

@@ -0,0 +1,12 @@
+import { blocks, field, properties, } from "./sim-tf-attributes.js";
+/** The CORS rules a bucket answers browser requests under. */
+export function cors(context) {
+    const rules = blocks(context, "cors_rule").map((rule) => properties({
+        AllowedHeaders: field(rule, "allowed_headers"),
+        AllowedMethods: field(rule, "allowed_methods"),
+        AllowedOrigins: field(rule, "allowed_origins"),
+        MaxAge: field(rule, "max_age_seconds"),
+    }));
+    return { CorsConfiguration: { CorsRules: rules } };
+}
+//# sourceMappingURL=sim-tf-map-s3-cors.js.map

package/dist/service/cloudformation/terraform/sim-tf-map-s3-cors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-map-s3-cors.js","sourceRoot":"","sources":["../../../../src/service/cloudformation/terraform/sim-tf-map-s3-cors.ts"],"names":[],"mappings":"AAOA,OAAO,EACL,MAAM,EACN,KAAK,EACL,UAAU,GAEX,MAAM,wBAAwB,CAAC;AAEhC,8DAA8D;AAC9D,MAAM,UAAU,IAAI,CAClB,OAAgC;IAEhC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACtD,UAAU,CAAC;QACT,cAAc,EAAE,KAAK,CAAC,IAAI,EAAE,iBAAiB,CAAa;QAC1D,cAAc,EAAE,KAAK,CAAC,IAAI,EAAE,iBAAiB,CAAa;QAC1D,cAAc,EAAE,KAAK,CAAC,IAAI,EAAE,iBAAiB,CAAa;QAC1D,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,iBAAiB,CAAW;KACjD,CAAC,CACH,CAAC;IAEF,OAAO,EAAE,iBAAiB,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC;AACrD,CAAC"}

package/dist/service/cloudformation/terraform/sim-tf-map-s3-encryption.d.ts

@@ -0,0 +1,5 @@
+import type { SimCfnTemplateValue } from "../template/value/sim-cfn-template-value.js";
+import { type TerraformMappingContext } from "./sim-tf-attributes.js";
+/** The default encryption a bucket applies, as CloudFormation declares it. */
+export declare function encryption(context: TerraformMappingContext): Record<string, SimCfnTemplateValue>;
+//# sourceMappingURL=sim-tf-map-s3-encryption.d.ts.map

package/dist/service/cloudformation/terraform/sim-tf-map-s3-encryption.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-map-s3-encryption.d.ts","sourceRoot":"","sources":["../../../../src/service/cloudformation/terraform/sim-tf-map-s3-encryption.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6CAA6C,CAAC;AACvF,OAAO,EAIL,KAAK,uBAAuB,EAC7B,MAAM,wBAAwB,CAAC;AAEhC,8EAA8E;AAC9E,wBAAgB,UAAU,CACxB,OAAO,EAAE,uBAAuB,GAC/B,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAQrC"}

package/dist/service/cloudformation/terraform/sim-tf-map-s3-encryption.js

@@ -0,0 +1,32 @@
+/*
+ * Reading a plan means reading records whose keys come from the document
+ * rather than from this code, so the object-injection rule fires on every
+ * lookup. The records are parsed JSON with no prototype of their own.
+ */
+// oxlint-disable security/detect-object-injection
+import { isRecord } from "../../../util/type-guard/record.js";
+import { blocks, field, properties, } from "./sim-tf-attributes.js";
+/** The default encryption a bucket applies, as CloudFormation declares it. */
+export function encryption(context) {
+    return {
+        BucketEncryption: {
+            ServerSideEncryptionConfiguration: blocks(context, "rule").map((rule) => encryptionRule(rule)),
+        },
+    };
+}
+function encryptionRule(rule) {
+    const configured = field(rule, "apply_server_side_encryption_by_default");
+    const applied = Array.isArray(configured)
+        ? configured[0]
+        : undefined;
+    if (!isRecord(applied)) {
+        return {};
+    }
+    return {
+        ServerSideEncryptionByDefault: properties({
+            SSEAlgorithm: field(applied, "sse_algorithm"),
+            KMSMasterKeyID: field(applied, "kms_master_key_id"),
+        }),
+    };
+}
+//# sourceMappingURL=sim-tf-map-s3-encryption.js.map

package/dist/service/cloudformation/terraform/sim-tf-map-s3-encryption.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-map-s3-encryption.js","sourceRoot":"","sources":["../../../../src/service/cloudformation/terraform/sim-tf-map-s3-encryption.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,kDAAkD;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,oCAAoC,CAAC;AAE9D,OAAO,EACL,MAAM,EACN,KAAK,EACL,UAAU,GAEX,MAAM,wBAAwB,CAAC;AAEhC,8EAA8E;AAC9E,MAAM,UAAU,UAAU,CACxB,OAAgC;IAEhC,OAAO;QACL,gBAAgB,EAAE;YAChB,iCAAiC,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACtE,cAAc,CAAC,IAAI,CAAC,CACrB;SACF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,IAA6B;IACnD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,yCAAyC,CAAC,CAAC;IAC1E,MAAM,OAAO,GAAY,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;QAChD,CAAC,CAAE,UAAwB,CAAC,CAAC,CAAC;QAC9B,CAAC,CAAC,SAAS,CAAC;IAEd,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO;QACL,6BAA6B,EAAE,UAAU,CAAC;YACxC,YAAY,EAAE,KAAK,CAAC,OAAO,EAAE,eAAe,CAAW;YACvD,cAAc,EAAE,KAAK,CAAC,OAAO,EAAE,mBAAmB,CAAW;SAC9D,CAAC;KACH,CAAC;AACJ,CAAC"}

package/dist/service/cloudformation/terraform/sim-tf-map-s3-folds.d.ts

@@ -0,0 +1,9 @@
+import type { TerraformResourceFold } from "./sim-tf-mapping.type.js";
+/**
+ * The `aws_s3_bucket_*` resources that configure a bucket declared elsewhere.
+ *
+ * Each names its bucket in a `bucket` attribute and carries one section of
+ * what CloudFormation holds on the `AWS::S3::Bucket` itself.
+ */
+export declare const s3BucketFolds: ReadonlyMap<string, TerraformResourceFold>;
+//# sourceMappingURL=sim-tf-map-s3-folds.d.ts.map

package/dist/service/cloudformation/terraform/sim-tf-map-s3-folds.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-map-s3-folds.d.ts","sourceRoot":"","sources":["../../../../src/service/cloudformation/terraform/sim-tf-map-s3-folds.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAEtE;;;;;GAKG;AACH,eAAO,MAAM,aAAa,EAAE,WAAW,CAAC,MAAM,EAAE,qBAAqB,CAkBjE,CAAC"}

package/dist/service/cloudformation/terraform/sim-tf-map-s3-folds.js

@@ -0,0 +1,48 @@
+import { block, field, renamed, } from "./sim-tf-attributes.js";
+import { cors } from "./sim-tf-map-s3-cors.js";
+import { encryption } from "./sim-tf-map-s3-encryption.js";
+/**
+ * The `aws_s3_bucket_*` resources that configure a bucket declared elsewhere.
+ *
+ * Each names its bucket in a `bucket` attribute and carries one section of
+ * what CloudFormation holds on the `AWS::S3::Bucket` itself.
+ */
+export const s3BucketFolds = new Map([
+    [
+        "aws_s3_bucket_versioning",
+        { parentAttribute: "bucket", properties: versioning },
+    ],
+    [
+        "aws_s3_bucket_public_access_block",
+        { parentAttribute: "bucket", properties: publicAccess },
+    ],
+    [
+        "aws_s3_bucket_cors_configuration",
+        { parentAttribute: "bucket", properties: cors },
+    ],
+    [
+        "aws_s3_bucket_server_side_encryption_configuration",
+        { parentAttribute: "bucket", properties: encryption },
+    ],
+]);
+function versioning(context) {
+    const configured = block(context, "versioning_configuration");
+    if (configured === undefined) {
+        return {};
+    }
+    const enabled = field(configured, "status") === "Enabled";
+    return {
+        VersioningConfiguration: { Status: enabled ? "Enabled" : "Suspended" },
+    };
+}
+function publicAccess(context) {
+    return {
+        PublicAccessBlockConfiguration: renamed(context, {
+            BlockPublicAcls: "block_public_acls",
+            BlockPublicPolicy: "block_public_policy",
+            IgnorePublicAcls: "ignore_public_acls",
+            RestrictPublicBuckets: "restrict_public_buckets",
+        }),
+    };
+}
+//# sourceMappingURL=sim-tf-map-s3-folds.js.map

package/dist/service/cloudformation/terraform/sim-tf-map-s3-folds.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-map-s3-folds.js","sourceRoot":"","sources":["../../../../src/service/cloudformation/terraform/sim-tf-map-s3-folds.ts"],"names":[],"mappings":"AAOA,OAAO,EACL,KAAK,EACL,KAAK,EACL,OAAO,GAER,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAG3D;;;;;GAKG;AACH,MAAM,CAAC,MAAM,aAAa,GACxB,IAAI,GAAG,CAAC;IACN;QACE,0BAA0B;QAC1B,EAAE,eAAe,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE;KACtD;IACD;QACE,mCAAmC;QACnC,EAAE,eAAe,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE;KACxD;IACD;QACE,kCAAkC;QAClC,EAAE,eAAe,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE;KAChD;IACD;QACE,oDAAoD;QACpD,EAAE,eAAe,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE;KACtD;CACF,CAAC,CAAC;AAEL,SAAS,UAAU,CACjB,OAAgC;IAEhC,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAC;IAE9D,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC,KAAK,SAAS,CAAC;IAE1D,OAAO;QACL,uBAAuB,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE;KACvE,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CACnB,OAAgC;IAEhC,OAAO;QACL,8BAA8B,EAAE,OAAO,CAAC,OAAO,EAAE;YAC/C,eAAe,EAAE,mBAAmB;YACpC,iBAAiB,EAAE,qBAAqB;YACxC,gBAAgB,EAAE,oBAAoB;YACtC,qBAAqB,EAAE,yBAAyB;SACjD,CAAC;KACH,CAAC;AACJ,CAAC"}

package/dist/service/cloudformation/terraform/sim-tf-map-s3.d.ts

@@ -0,0 +1,5 @@
+import { type TerraformMappingContext } from "./sim-tf-attributes.js";
+import type { TerraformMappedResource } from "./sim-tf-mapping.type.js";
+/** A bucket. What configures it arrives as its own resource and folds in. */
+export declare function s3Bucket(context: TerraformMappingContext): TerraformMappedResource;
+//# sourceMappingURL=sim-tf-map-s3.d.ts.map

package/dist/service/cloudformation/terraform/sim-tf-map-s3.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-map-s3.d.ts","sourceRoot":"","sources":["../../../../src/service/cloudformation/terraform/sim-tf-map-s3.ts"],"names":[],"mappings":"AAMA,OAAO,EAIL,KAAK,uBAAuB,EAC7B,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAExE,6EAA6E;AAC7E,wBAAgB,QAAQ,CACtB,OAAO,EAAE,uBAAuB,GAC/B,uBAAuB,CAQzB"}

package/dist/service/cloudformation/terraform/sim-tf-map-s3.js

@@ -0,0 +1,18 @@
+/*
+ * Reading a plan means reading records whose keys come from the document
+ * rather than from this code, so the object-injection rule fires on every
+ * lookup. The records are parsed JSON with no prototype of their own.
+ */
+// oxlint-disable security/detect-object-injection
+import { properties, renamed, tags, } from "./sim-tf-attributes.js";
+/** A bucket. What configures it arrives as its own resource and folds in. */
+export function s3Bucket(context) {
+    return {
+        Type: "AWS::S3::Bucket",
+        Properties: {
+            ...renamed(context, { BucketName: "bucket" }),
+            ...properties({ Tags: tags(context) }),
+        },
+    };
+}
+//# sourceMappingURL=sim-tf-map-s3.js.map

package/dist/service/cloudformation/terraform/sim-tf-map-s3.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-map-s3.js","sourceRoot":"","sources":["../../../../src/service/cloudformation/terraform/sim-tf-map-s3.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,kDAAkD;AAClD,OAAO,EACL,UAAU,EACV,OAAO,EACP,IAAI,GAEL,MAAM,wBAAwB,CAAC;AAGhC,6EAA6E;AAC7E,MAAM,UAAU,QAAQ,CACtB,OAAgC;IAEhC,OAAO;QACL,IAAI,EAAE,iBAAiB;QACvB,UAAU,EAAE;YACV,GAAG,OAAO,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;YAC7C,GAAG,UAAU,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;SACvC;KACF,CAAC;AACJ,CAAC"}

package/dist/service/cloudformation/terraform/sim-tf-map-sns.d.ts

@@ -0,0 +1,15 @@
+import { type TerraformMappingContext } from "./sim-tf-attributes.js";
+import type { TerraformMappedResource } from "./sim-tf-mapping.type.js";
+/**
+ * A topic.
+ *
+ * Tags are left off. Simulated SNS refuses a `Tags` property, because nothing
+ * it models reads a topic tag, and Terraform tags whatever a default tag block
+ * covers whether or not the tag matters. A property a service refuses fails
+ * the Resource, so tagging is one of the places a mapping has to know what the
+ * service will take.
+ */
+export declare function snsTopic(context: TerraformMappingContext): TerraformMappedResource;
+/** A subscription, which Terraform declares apart from its topic as well. */
+export declare function snsSubscription(context: TerraformMappingContext): TerraformMappedResource;
+//# sourceMappingURL=sim-tf-map-sns.d.ts.map

package/dist/service/cloudformation/terraform/sim-tf-map-sns.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-map-sns.d.ts","sourceRoot":"","sources":["../../../../src/service/cloudformation/terraform/sim-tf-map-sns.ts"],"names":[],"mappings":"AAMA,OAAO,EAIL,KAAK,uBAAuB,EAC7B,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAExE;;;;;;;;GAQG;AACH,wBAAgB,QAAQ,CACtB,OAAO,EAAE,uBAAuB,GAC/B,uBAAuB,CAWzB;AAED,6EAA6E;AAC7E,wBAAgB,eAAe,CAC7B,OAAO,EAAE,uBAAuB,GAC/B,uBAAuB,CAUzB"}

package/dist/service/cloudformation/terraform/sim-tf-map-sns.js

@@ -0,0 +1,40 @@
+/*
+ * Reading a plan means reading records whose keys come from the document
+ * rather than from this code, so the object-injection rule fires on every
+ * lookup. The records are parsed JSON with no prototype of their own.
+ */
+// oxlint-disable security/detect-object-injection
+import { attribute, renamed, tags, } from "./sim-tf-attributes.js";
+/**
+ * A topic.
+ *
+ * Tags are left off. Simulated SNS refuses a `Tags` property, because nothing
+ * it models reads a topic tag, and Terraform tags whatever a default tag block
+ * covers whether or not the tag matters. A property a service refuses fails
+ * the Resource, so tagging is one of the places a mapping has to know what the
+ * service will take.
+ */
+export function snsTopic(context) {
+    const fifo = attribute(context, "fifo_topic");
+    return {
+        Type: "AWS::SNS::Topic",
+        Properties: {
+            ...renamed(context, { TopicName: "name", DisplayName: "display_name" }),
+            ...(fifo === true && { FifoTopic: true }),
+        },
+        lost: tags(context) === undefined ? [] : ["tags"],
+    };
+}
+/** A subscription, which Terraform declares apart from its topic as well. */
+export function snsSubscription(context) {
+    return {
+        Type: "AWS::SNS::Subscription",
+        Properties: renamed(context, {
+            TopicArn: "topic_arn",
+            Protocol: "protocol",
+            Endpoint: "endpoint",
+            RawMessageDelivery: "raw_message_delivery",
+        }),
+    };
+}
+//# sourceMappingURL=sim-tf-map-sns.js.map

package/dist/service/cloudformation/terraform/sim-tf-map-sns.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-map-sns.js","sourceRoot":"","sources":["../../../../src/service/cloudformation/terraform/sim-tf-map-sns.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,kDAAkD;AAClD,OAAO,EACL,SAAS,EACT,OAAO,EACP,IAAI,GAEL,MAAM,wBAAwB,CAAC;AAGhC;;;;;;;;GAQG;AACH,MAAM,UAAU,QAAQ,CACtB,OAAgC;IAEhC,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAE9C,OAAO;QACL,IAAI,EAAE,iBAAiB;QACvB,UAAU,EAAE;YACV,GAAG,OAAO,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC;YACvE,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;SAC1C;QACD,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;KAClD,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,eAAe,CAC7B,OAAgC;IAEhC,OAAO;QACL,IAAI,EAAE,wBAAwB;QAC9B,UAAU,EAAE,OAAO,CAAC,OAAO,EAAE;YAC3B,QAAQ,EAAE,WAAW;YACrB,QAAQ,EAAE,UAAU;YACpB,QAAQ,EAAE,UAAU;YACpB,kBAAkB,EAAE,sBAAsB;SAC3C,CAAC;KACH,CAAC;AACJ,CAAC"}

package/dist/service/cloudformation/terraform/sim-tf-map-sqs.d.ts

@@ -0,0 +1,5 @@
+import { type TerraformMappingContext } from "./sim-tf-attributes.js";
+import type { TerraformMappedResource } from "./sim-tf-mapping.type.js";
+/** A queue, with the redrive policy read out of the JSON string it lives in. */
+export declare function sqsQueue(context: TerraformMappingContext): TerraformMappedResource;
+//# sourceMappingURL=sim-tf-map-sqs.d.ts.map

package/dist/service/cloudformation/terraform/sim-tf-map-sqs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-map-sqs.d.ts","sourceRoot":"","sources":["../../../../src/service/cloudformation/terraform/sim-tf-map-sqs.ts"],"names":[],"mappings":"AAQA,OAAO,EAML,KAAK,uBAAuB,EAC7B,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAExE,gFAAgF;AAChF,wBAAgB,QAAQ,CACtB,OAAO,EAAE,uBAAuB,GAC/B,uBAAuB,CAgBzB"}

package/dist/service/cloudformation/terraform/sim-tf-map-sqs.js

@@ -0,0 +1,56 @@
+/*
+ * Reading a plan means reading records whose keys come from the document
+ * rather than from this code, so the object-injection rule fires on every
+ * lookup. The records are parsed JSON with no prototype of their own.
+ */
+// oxlint-disable security/detect-object-injection
+import { isRecord } from "../../../util/type-guard/record.js";
+import { field, properties, renamed, tags, templateValue, } from "./sim-tf-attributes.js";
+/** A queue, with the redrive policy read out of the JSON string it lives in. */
+export function sqsQueue(context) {
+    const redrive = redrivePolicy(context);
+    return {
+        Type: "AWS::SQS::Queue",
+        Properties: {
+            ...renamed(context, {
+                QueueName: "name",
+                VisibilityTimeout: "visibility_timeout_seconds",
+                MessageRetentionPeriod: "message_retention_seconds",
+                DelaySeconds: "delay_seconds",
+            }),
+            ...properties({ RedrivePolicy: redrive.value, Tags: tags(context) }),
+        },
+        lost: redrive.lost,
+    };
+}
+/**
+ * The queue's redrive policy, which Terraform carries as a JSON string.
+ *
+ * The string is built with `jsonencode` around the dead-letter queue's ARN, so
+ * the whole string is unknown whenever that queue is created by the same plan.
+ * What survives is the reference. The `maxReceiveCount` beside it was inside
+ * the string that never got built.
+ */
+function redrivePolicy(context) {
+    const known = field(context.resource.values, "redrive_policy");
+    if (typeof known === "string") {
+        const parsed = JSON.parse(known);
+        return {
+            value: isRecord(parsed) ? templateValue(parsed) : undefined,
+            lost: [],
+        };
+    }
+    /*
+     * The dead-letter queue is recoverable from the reference and the receive
+     * limit is not, and a redrive policy carrying a made-up limit would give the
+     * queue different retry behaviour from the one the plan describes. The whole
+     * policy is dropped and recorded instead.
+     */
+    return {
+        value: undefined,
+        lost: context.resource.unknown["redrive_policy"] === true
+            ? ["redrive_policy"]
+            : [],
+    };
+}
+//# sourceMappingURL=sim-tf-map-sqs.js.map

package/dist/service/cloudformation/terraform/sim-tf-map-sqs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-map-sqs.js","sourceRoot":"","sources":["../../../../src/service/cloudformation/terraform/sim-tf-map-sqs.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,kDAAkD;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,oCAAoC,CAAC;AAE9D,OAAO,EACL,KAAK,EACL,UAAU,EACV,OAAO,EACP,IAAI,EACJ,aAAa,GAEd,MAAM,wBAAwB,CAAC;AAGhC,gFAAgF;AAChF,MAAM,UAAU,QAAQ,CACtB,OAAgC;IAEhC,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IAEvC,OAAO;QACL,IAAI,EAAE,iBAAiB;QACvB,UAAU,EAAE;YACV,GAAG,OAAO,CAAC,OAAO,EAAE;gBAClB,SAAS,EAAE,MAAM;gBACjB,iBAAiB,EAAE,4BAA4B;gBAC/C,sBAAsB,EAAE,2BAA2B;gBACnD,YAAY,EAAE,eAAe;aAC9B,CAAC;YACF,GAAG,UAAU,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;SACrE;QACD,IAAI,EAAE,OAAO,CAAC,IAAI;KACnB,CAAC;AACJ,CAAC;AAOD;;;;;;;GAOG;AACH,SAAS,aAAa,CAAC,OAAgC;IACrD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAE/D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAE1C,OAAO;YACL,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;YAC3D,IAAI,EAAE,EAAE;SACT,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,OAAO;QACL,KAAK,EAAE,SAAS;QAChB,IAAI,EACF,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK,IAAI;YACjD,CAAC,CAAC,CAAC,gBAAgB,CAAC;YACpB,CAAC,CAAC,EAAE;KACT,CAAC;AACJ,CAAC"}

package/dist/service/cloudformation/terraform/sim-tf-mapping.type.d.ts

@@ -0,0 +1,41 @@
+import type { SimCfnTemplateValue } from "../template/value/sim-cfn-template-value.js";
+import type { TerraformMappingContext } from "./sim-tf-attributes.js";
+/**
+ * One CloudFormation Resource built from one Terraform resource.
+ *
+ * `lost` names the Terraform attributes the mapping could not carry across.
+ * A mapping records them rather than dropping them quietly, because an
+ * attribute that goes missing without a word is the kind of gap that only turns
+ * up later as a test passing for the wrong reason.
+ */
+export interface TerraformMappedResource {
+    readonly Type: string;
+    readonly Properties: Record<string, SimCfnTemplateValue>;
+    readonly lost?: readonly string[];
+    /**
+     * Properties the simulated service will refuse the Resource without.
+     *
+     * A plan can leave a required value unresolvable, and a Resource built
+     * without it fails and takes the Stack's other Resources with it. Naming the
+     * properties here lets the import drop that one Resource and record it,
+     * which is what sim CloudFormation already does with a Resource type it
+     * cannot create.
+     */
+    readonly requires?: readonly string[];
+}
+export type TerraformResourceMapping = (context: TerraformMappingContext) => TerraformMappedResource;
+/**
+ * How one Terraform resource contributes to another resource's properties.
+ *
+ * The AWS provider splits a single CloudFormation Resource across several
+ * Terraform resources. Six `aws_s3_bucket_*` resources configure one bucket,
+ * and CloudFormation carries all six as properties of one `AWS::S3::Bucket`.
+ * A fold names the attribute holding the parent's address, and returns the
+ * properties to merge into the parent.
+ */
+export interface TerraformResourceFold {
+    /** The attribute naming the resource these properties belong to. */
+    readonly parentAttribute: string;
+    readonly properties: (context: TerraformMappingContext) => Record<string, SimCfnTemplateValue>;
+}
+//# sourceMappingURL=sim-tf-mapping.type.d.ts.map

package/dist/service/cloudformation/terraform/sim-tf-mapping.type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-mapping.type.d.ts","sourceRoot":"","sources":["../../../../src/service/cloudformation/terraform/sim-tf-mapping.type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6CAA6C,CAAC;AACvF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAEtE;;;;;;;GAOG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IACzD,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC;;;;;;;;OAQG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACvC;AAED,MAAM,MAAM,wBAAwB,GAAG,CACrC,OAAO,EAAE,uBAAuB,KAC7B,uBAAuB,CAAC;AAE7B;;;;;;;;GAQG;AACH,MAAM,WAAW,qBAAqB;IACpC,oEAAoE;IACpE,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,CACnB,OAAO,EAAE,uBAAuB,KAC7B,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;CAC1C"}

package/dist/service/cloudformation/terraform/sim-tf-mapping.type.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sim-tf-mapping.type.js.map

package/dist/service/cloudformation/terraform/sim-tf-mapping.type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-mapping.type.js","sourceRoot":"","sources":["../../../../src/service/cloudformation/terraform/sim-tf-mapping.type.ts"],"names":[],"mappings":""}

package/dist/service/cloudformation/terraform/sim-tf-module-outputs.d.ts

@@ -0,0 +1,19 @@
+import type { TerraformPlan } from "./sim-tf-plan.type.js";
+/**
+ * What one module output is, in terms of the module that declares it.
+ */
+export interface TerraformModuleOutput {
+    /** The module path the output's references are relative to. */
+    readonly modulePath: readonly string[];
+    readonly references: readonly string[];
+}
+/**
+ * Every module output a plan declares, keyed by the address that reads it.
+ *
+ * A resource in one module reaching a resource in another goes through an
+ * output. `module.processor.lambda_function_arn` is not an address any resource
+ * has, and the plan resolves nothing for it, so following it means reading the
+ * output's own expression and continuing from the module that declares it.
+ */
+export declare function terraformModuleOutputs(plan: TerraformPlan): ReadonlyMap<string, TerraformModuleOutput>;
+//# sourceMappingURL=sim-tf-module-outputs.d.ts.map

package/dist/service/cloudformation/terraform/sim-tf-module-outputs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-module-outputs.d.ts","sourceRoot":"","sources":["../../../../src/service/cloudformation/terraform/sim-tf-module-outputs.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAGV,aAAa,EACd,MAAM,uBAAuB,CAAC;AAE/B;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,+DAA+D;IAC/D,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,aAAa,GAClB,WAAW,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAS5C"}

package/dist/service/cloudformation/terraform/sim-tf-module-outputs.js

@@ -0,0 +1,63 @@
+/*
+ * Reading a plan means reading records whose keys come from the document
+ * rather than from this code, so the object-injection rule fires on every
+ * lookup. The records are parsed JSON with no prototype of their own.
+ */
+// oxlint-disable security/detect-object-injection
+import { isRecord } from "../../../util/type-guard/record.js";
+/**
+ * Every module output a plan declares, keyed by the address that reads it.
+ *
+ * A resource in one module reaching a resource in another goes through an
+ * output. `module.processor.lambda_function_arn` is not an address any resource
+ * has, and the plan resolves nothing for it, so following it means reading the
+ * output's own expression and continuing from the module that declares it.
+ */
+export function terraformModuleOutputs(plan) {
+    const outputs = new Map();
+    const root = plan.configuration?.root_module;
+    if (root !== undefined) {
+        collect(root, [], outputs);
+    }
+    return outputs;
+}
+function collect(config, modulePath, outputs) {
+    const calls = Object.entries(config.module_calls ?? {});
+    for (const [callName, call] of calls) {
+        const child = call.module;
+        if (child === undefined) {
+            continue;
+        }
+        const childPath = [...modulePath, callName];
+        const address = childPath.map((name) => `module.${name}`).join(".");
+        const declaredOutputs = Object.entries(moduleOutputRecords(child));
+        for (const [outputName, declared] of declaredOutputs) {
+            outputs.set(`${address}.${outputName}`, {
+                modulePath: childPath,
+                references: declared,
+            });
+        }
+        collect(child, childPath, outputs);
+    }
+}
+function moduleOutputRecords(config) {
+    const declared = config.outputs;
+    if (!isRecord(declared)) {
+        return {};
+    }
+    return Object.fromEntries(Object.entries(declared).map(([name, output]) => [
+        name,
+        outputReferences(output),
+    ]));
+}
+function outputReferences(output) {
+    if (!isRecord(output)) {
+        return [];
+    }
+    const expression = output.expression;
+    if (!isRecord(expression)) {
+        return [];
+    }
+    return expression.references ?? [];
+}
+//# sourceMappingURL=sim-tf-module-outputs.js.map

package/dist/service/cloudformation/terraform/sim-tf-module-outputs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-module-outputs.js","sourceRoot":"","sources":["../../../../src/service/cloudformation/terraform/sim-tf-module-outputs.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,kDAAkD;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,oCAAoC,CAAC;AAgB9D;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CACpC,IAAmB;IAEnB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAiC,CAAC;IACzD,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC;IAE7C,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;IAC7B,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,OAAO,CACd,MAA6B,EAC7B,UAA6B,EAC7B,OAA2C;IAE3C,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IAExD,KAAK,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC;QAE1B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,SAAS;QACX,CAAC;QAED,MAAM,SAAS,GAAG,CAAC,GAAG,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEpE,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC;QAEnE,KAAK,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,eAAe,EAAE,CAAC;YACrD,OAAO,CAAC,GAAG,CAAC,GAAG,OAAO,IAAI,UAAU,EAAE,EAAE;gBACtC,UAAU,EAAE,SAAS;gBACrB,UAAU,EAAE,QAAQ;aACrB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAC1B,MAA6B;IAE7B,MAAM,QAAQ,GAAI,MAAgC,CAAC,OAAO,CAAC;IAE3D,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;QAC/C,IAAI;QACJ,gBAAgB,CAAC,MAAM,CAAC;KACzB,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAe;IACvC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,UAAU,GAAI,MAAmC,CAAC,UAAU,CAAC;IAEnE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAQ,UAAkC,CAAC,UAAU,IAAI,EAAE,CAAC;AAC9D,CAAC"}

package/dist/service/cloudformation/terraform/sim-tf-plan-index.d.ts

@@ -0,0 +1,26 @@
+import type { TerraformConfigModule, TerraformConfigResource, TerraformPlan } from "./sim-tf-plan.type.js";
+export interface TerraformChangeParts {
+    readonly unknown: Record<string, unknown>;
+}
+/**
+ * Each resource's `after_unknown`, keyed by the address it belongs to.\n *\n * `planned_values` says what a value is and `resource_changes` says whether\n * the plan knew it, so reading a resource means having both to hand.
+ */
+export declare function changesByAddress(plan: TerraformPlan): ReadonlyMap<string, TerraformChangeParts>;
+/**
+ * The declared configuration of one module's resources, keyed by type and\n * name.\n *\n * Configuration addresses are relative to the module that declares them, while\n * `planned_values` addresses are fully qualified, so the two are joined per\n * module rather than across the whole plan.
+ */
+export declare function configResourcesByKey(config: TerraformConfigModule | undefined): ReadonlyMap<string, TerraformConfigResource>;
+/**
+ * The call name of a child module, taken off its fully qualified address.
+ *
+ * A child module address repeats its parents, so `module.a.module.b` under
+ * `["a"]` is the call named `b`. A module called with `for_each` carries the
+ * key on the address, and the key belongs to the instance rather than to the
+ * call the configuration is filed under.
+ */
+export declare function childModuleCallName(address: string | undefined, modulePath: readonly string[]): string;
+/**
+ * The provider that owns a resource type, without the registry it came from.
+ */
+export declare function providerShortName(providerName: string | undefined): string;
+//# sourceMappingURL=sim-tf-plan-index.d.ts.map