@kensio/yulin 1.19.1 → 1.19.2

package/dist/service/cloudformation/terraform/sim-tf-report.type.d.ts

@@ -0,0 +1,31 @@
+/**
+ * What one import of a plan did with every resource in it.
+ *
+ * A resource is mapped, folded into another resource, or skipped. The three
+ * add up to the plan's managed resource count, which is what makes the
+ * mapped fraction a fraction of something.
+ */
+export interface TerraformImportReport {
+    readonly total: number;
+    readonly mapped: readonly TerraformImportedResource[];
+    readonly folded: readonly TerraformImportedResource[];
+    readonly skipped: readonly TerraformSkippedResource[];
+    /** Attributes a mapping could not carry across, named per resource. */
+    readonly lost: readonly TerraformLostAttribute[];
+}
+export interface TerraformImportedResource {
+    readonly address: string;
+    readonly type: string;
+    readonly cfnType?: string;
+}
+export interface TerraformSkippedResource {
+    readonly address: string;
+    readonly type: string;
+    readonly reason: TerraformSkipReason;
+}
+export type TerraformSkipReason = "no mapping for resource type" | "not an AWS provider resource" | "fold target not found" | "unresolved required attribute" | "references a resource that was skipped";
+export interface TerraformLostAttribute {
+    readonly address: string;
+    readonly attribute: string;
+}
+//# sourceMappingURL=sim-tf-report.type.d.ts.map

package/dist/service/cloudformation/terraform/sim-tf-report.type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-report.type.d.ts","sourceRoot":"","sources":["../../../../src/service/cloudformation/terraform/sim-tf-report.type.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,SAAS,yBAAyB,EAAE,CAAC;IACtD,QAAQ,CAAC,MAAM,EAAE,SAAS,yBAAyB,EAAE,CAAC;IACtD,QAAQ,CAAC,OAAO,EAAE,SAAS,wBAAwB,EAAE,CAAC;IACtD,uEAAuE;IACvE,QAAQ,CAAC,IAAI,EAAE,SAAS,sBAAsB,EAAE,CAAC;CAClD;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;CACtC;AAED,MAAM,MAAM,mBAAmB,GAC3B,8BAA8B,GAC9B,8BAA8B,GAC9B,uBAAuB,GACvB,+BAA+B,GAC/B,wCAAwC,CAAC;AAE7C,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B"}

package/dist/service/cloudformation/terraform/sim-tf-report.type.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sim-tf-report.type.js.map

package/dist/service/cloudformation/terraform/sim-tf-report.type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-report.type.js","sourceRoot":"","sources":["../../../../src/service/cloudformation/terraform/sim-tf-report.type.ts"],"names":[],"mappings":""}

package/dist/service/cloudformation/terraform/sim-tf-template-folds.d.ts

@@ -0,0 +1,20 @@
+import type { SimCfnTemplateValueRecord } from "../template/value/sim-cfn-template-value.js";
+import type { TerraformResource } from "./sim-tf-plan-resources.js";
+import type { TerraformReferenceResolver } from "./sim-tf-reference.js";
+import type { TerraformImportedResource, TerraformSkippedResource } from "./sim-tf-report.type.js";
+export interface TerraformFoldPass {
+    readonly resources: readonly TerraformResource[];
+    readonly resolver: TerraformReferenceResolver;
+    readonly templates: Map<string, SimCfnTemplateValueRecord>;
+    readonly folded: TerraformImportedResource[];
+    readonly skipped: TerraformSkippedResource[];
+}
+/**
+ * Merge every folding resource into the Resource it configures.
+ *
+ * This runs after the mapping pass, because a fold has nothing to merge into
+ * until its parent is in the template. A fold whose parent was skipped is
+ * recorded rather than dropped, so the report still adds up.
+ */
+export declare function applyFolds(pass: TerraformFoldPass): void;
+//# sourceMappingURL=sim-tf-template-folds.d.ts.map

package/dist/service/cloudformation/terraform/sim-tf-template-folds.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-template-folds.d.ts","sourceRoot":"","sources":["../../../../src/service/cloudformation/terraform/sim-tf-template-folds.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,6CAA6C,CAAC;AAC7F,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AAIxE,OAAO,KAAK,EACV,yBAAyB,EACzB,wBAAwB,EACzB,MAAM,yBAAyB,CAAC;AAEjC,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACjD,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;IAC9C,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;IAC3D,QAAQ,CAAC,MAAM,EAAE,yBAAyB,EAAE,CAAC;IAC7C,QAAQ,CAAC,OAAO,EAAE,wBAAwB,EAAE,CAAC;CAC9C;AAID;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,iBAAiB,GAAG,IAAI,CA8BxD"}

package/dist/service/cloudformation/terraform/sim-tf-template-folds.js

@@ -0,0 +1,28 @@
+import { terraformResourceFolds } from "./sim-tf-registry.js";
+import { foldTargetLogicalId } from "./sim-tf-template-graph.js";
+import { mergedParent, skip } from "./sim-tf-template-merge.js";
+const awsProvider = "hashicorp/aws";
+/**
+ * Merge every folding resource into the Resource it configures.
+ *
+ * This runs after the mapping pass, because a fold has nothing to merge into
+ * until its parent is in the template. A fold whose parent was skipped is
+ * recorded rather than dropped, so the report still adds up.
+ */
+export function applyFolds(pass) {
+    for (const resource of pass.resources) {
+        const fold = terraformResourceFolds.get(resource.type);
+        if (fold === undefined || resource.provider !== awsProvider) {
+            continue;
+        }
+        const parentId = foldTargetLogicalId(resource, fold.parentAttribute, pass.resolver);
+        const parent = parentId === undefined ? undefined : pass.templates.get(parentId);
+        if (parent === undefined || parentId === undefined) {
+            pass.skipped.push(skip(resource, "fold target not found"));
+            continue;
+        }
+        pass.templates.set(parentId, mergedParent(parent, fold.properties({ resource, resolver: pass.resolver })));
+        pass.folded.push({ address: resource.address, type: resource.type });
+    }
+}
+//# sourceMappingURL=sim-tf-template-folds.js.map

package/dist/service/cloudformation/terraform/sim-tf-template-folds.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-template-folds.js","sourceRoot":"","sources":["../../../../src/service/cloudformation/terraform/sim-tf-template-folds.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,4BAA4B,CAAC;AAchE,MAAM,WAAW,GAAG,eAAe,CAAC;AAEpC;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,IAAuB;IAChD,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,sBAAsB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAEvD,IAAI,IAAI,KAAK,SAAS,IAAI,QAAQ,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;YAC5D,SAAS;QACX,CAAC;QAED,MAAM,QAAQ,GAAG,mBAAmB,CAClC,QAAQ,EACR,IAAI,CAAC,eAAe,EACpB,IAAI,CAAC,QAAQ,CACd,CAAC;QACF,MAAM,MAAM,GACV,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAEpE,IAAI,MAAM,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YACnD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,uBAAuB,CAAC,CAAC,CAAC;YAC3D,SAAS;QACX,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,GAAG,CAChB,QAAQ,EACR,YAAY,CACV,MAAM,EACN,IAAI,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CACvD,CACF,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACvE,CAAC;AACH,CAAC"}

package/dist/service/cloudformation/terraform/sim-tf-template-graph.d.ts

@@ -0,0 +1,29 @@
+import type { TerraformResource } from "./sim-tf-plan-resources.js";
+import { type TerraformReferenceResolver } from "./sim-tf-reference.js";
+/**
+ * The logical ID of the resource a fold belongs to.
+ *
+ * The fold's parent attribute holds a reference rather than a value, because a
+ * bucket or a role being created by the same plan has no name until it exists.
+ * The reference names the resource directly, which is what a fold needs.
+ */
+export declare function foldTargetLogicalId(resource: TerraformResource, parentAttribute: string, resolver: TerraformReferenceResolver): string | undefined;
+/**
+ * The Resources one Resource has to be created after.
+ *
+ * A CloudFormation template orders itself, because a property that needs
+ * another Resource holds a `Ref` or an `Fn::GetAtt` naming it. A plan holds no
+ * such thing. Terraform resolves what it can before writing the plan, so a
+ * Lambda permission naming a function it creates in the same plan carries the
+ * function's name as a plain string, and the edge that ordering depends on is
+ * gone from the value.
+ *
+ * The edge survives in `configuration`, which records every reference the
+ * resource declares whether or not the value was resolved. Turning those back
+ * into `DependsOn` gives the Stack the graph it would have read off a template
+ * written by hand.
+ */
+export declare function dependsOn(resource: TerraformResource, resolver: TerraformReferenceResolver): {
+    DependsOn?: string[];
+};
+//# sourceMappingURL=sim-tf-template-graph.d.ts.map

package/dist/service/cloudformation/terraform/sim-tf-template-graph.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-template-graph.d.ts","sourceRoot":"","sources":["../../../../src/service/cloudformation/terraform/sim-tf-template-graph.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EACL,KAAK,0BAA0B,EAEhC,MAAM,uBAAuB,CAAC;AAG/B;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,iBAAiB,EAC3B,eAAe,EAAE,MAAM,EACvB,QAAQ,EAAE,0BAA0B,GACnC,MAAM,GAAG,SAAS,CAoBpB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,SAAS,CACvB,QAAQ,EAAE,iBAAiB,EAC3B,QAAQ,EAAE,0BAA0B,GACnC;IAAE,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,CAe1B"}

package/dist/service/cloudformation/terraform/sim-tf-template-graph.js

@@ -0,0 +1,71 @@
+/*
+ * Reading a plan means reading records whose keys come from the document
+ * rather than from this code, so the object-injection rule fires on every
+ * lookup. The records are parsed JSON with no prototype of their own.
+ */
+// oxlint-disable security/detect-object-injection
+import { isRecord } from "../../../util/type-guard/record.js";
+import { terraformLogicalId, } from "./sim-tf-reference.js";
+import { longestFirst } from "./sim-tf-reference-address.js";
+/**
+ * The logical ID of the resource a fold belongs to.
+ *
+ * The fold's parent attribute holds a reference rather than a value, because a
+ * bucket or a role being created by the same plan has no name until it exists.
+ * The reference names the resource directly, which is what a fold needs.
+ */
+export function foldTargetLogicalId(resource, parentAttribute, resolver) {
+    const expression = resource.expressions[parentAttribute];
+    if (!isRecord(expression)) {
+        return undefined;
+    }
+    const references = longestFirst(expression.references ?? []);
+    for (const reference of references) {
+        const address = resolver.targetAddress(reference, resource.modulePath);
+        if (address !== undefined) {
+            return terraformLogicalId(address);
+        }
+    }
+    return undefined;
+}
+/**
+ * The Resources one Resource has to be created after.
+ *
+ * A CloudFormation template orders itself, because a property that needs
+ * another Resource holds a `Ref` or an `Fn::GetAtt` naming it. A plan holds no
+ * such thing. Terraform resolves what it can before writing the plan, so a
+ * Lambda permission naming a function it creates in the same plan carries the
+ * function's name as a plain string, and the edge that ordering depends on is
+ * gone from the value.
+ *
+ * The edge survives in `configuration`, which records every reference the
+ * resource declares whether or not the value was resolved. Turning those back
+ * into `DependsOn` gives the Stack the graph it would have read off a template
+ * written by hand.
+ */
+export function dependsOn(resource, resolver) {
+    const own = terraformLogicalId(resource.address);
+    const referenced = [
+        ...resource.dependsOn,
+        ...expressionReferences(resource.expressions),
+    ]
+        .map((reference) => resolver.targetAddress(reference, resource.modulePath))
+        .filter((address) => address !== undefined)
+        .map((address) => terraformLogicalId(address))
+        .filter((logicalId) => logicalId !== own);
+    const declared = [...new Set(referenced)];
+    return declared.length === 0 ? {} : { DependsOn: declared };
+}
+/** Every `references` entry anywhere inside a resource's expressions. */
+function expressionReferences(value) {
+    if (Array.isArray(value)) {
+        return value.flatMap((entry) => expressionReferences(entry));
+    }
+    if (!isRecord(value)) {
+        return [];
+    }
+    return Object.entries(value).flatMap(([key, nested]) => key === "references" && Array.isArray(nested)
+        ? nested.filter((entry) => typeof entry === "string")
+        : expressionReferences(nested));
+}
+//# sourceMappingURL=sim-tf-template-graph.js.map

package/dist/service/cloudformation/terraform/sim-tf-template-graph.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-template-graph.js","sourceRoot":"","sources":["../../../../src/service/cloudformation/terraform/sim-tf-template-graph.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,kDAAkD;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,oCAAoC,CAAC;AAG9D,OAAO,EAEL,kBAAkB,GACnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAE7D;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,QAA2B,EAC3B,eAAuB,EACvB,QAAoC;IAEpC,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;IAEzD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,UAAU,GAAG,YAAY,CAC5B,UAAkC,CAAC,UAAU,IAAI,EAAE,CACrD,CAAC;IAEF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,QAAQ,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;QAEvE,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,SAAS,CACvB,QAA2B,EAC3B,QAAoC;IAEpC,MAAM,GAAG,GAAG,kBAAkB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAEjD,MAAM,UAAU,GAAG;QACjB,GAAG,QAAQ,CAAC,SAAS;QACrB,GAAG,oBAAoB,CAAC,QAAQ,CAAC,WAAW,CAAC;KAC9C;SACE,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;SAC1E,MAAM,CAAC,CAAC,OAAO,EAAqB,EAAE,CAAC,OAAO,KAAK,SAAS,CAAC;SAC7D,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;SAC7C,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,GAAG,CAAC,CAAC;IAE5C,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;IAE1C,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AAC9D,CAAC;AAED,yEAAyE;AACzE,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,CACrD,GAAG,KAAK,YAAY,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAC3C,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;QACtE,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,CACjC,CAAC;AACJ,CAAC"}

package/dist/service/cloudformation/terraform/sim-tf-template-mappings.d.ts

@@ -0,0 +1,23 @@
+import type { SimCfnTemplateValueRecord } from "../template/value/sim-cfn-template-value.js";
+import type { TerraformResource } from "./sim-tf-plan-resources.js";
+import type { TerraformReferenceResolver } from "./sim-tf-reference.js";
+import type { TerraformImportedResource, TerraformLostAttribute, TerraformSkippedResource } from "./sim-tf-report.type.js";
+export interface TerraformMappingPass {
+    readonly resources: readonly TerraformResource[];
+    readonly resolver: TerraformReferenceResolver;
+    readonly templates: Map<string, SimCfnTemplateValueRecord>;
+    readonly claimedBy: Map<string, string>;
+    readonly mapped: TerraformImportedResource[];
+    readonly skipped: TerraformSkippedResource[];
+    readonly lost: TerraformLostAttribute[];
+}
+/**
+ * Turn every resource that has a mapping into a CloudFormation Resource.
+ *
+ * A resource from another provider, one whose type has no mapping, and one
+ * whose target service requires a property the plan could not resolve are all
+ * recorded and stepped over, so a plan Yulin only partly understands still
+ * deploys the part it does.
+ */
+export declare function applyMappings(pass: TerraformMappingPass): void;
+//# sourceMappingURL=sim-tf-template-mappings.d.ts.map

package/dist/service/cloudformation/terraform/sim-tf-template-mappings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-template-mappings.d.ts","sourceRoot":"","sources":["../../../../src/service/cloudformation/terraform/sim-tf-template-mappings.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,6CAA6C,CAAC;AAC7F,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AAQxE,OAAO,KAAK,EACV,yBAAyB,EACzB,sBAAsB,EACtB,wBAAwB,EACzB,MAAM,yBAAyB,CAAC;AAIjC,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,SAAS,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACjD,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;IAC9C,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;IAC3D,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,QAAQ,CAAC,MAAM,EAAE,yBAAyB,EAAE,CAAC;IAC7C,QAAQ,CAAC,OAAO,EAAE,wBAAwB,EAAE,CAAC;IAC7C,QAAQ,CAAC,IAAI,EAAE,sBAAsB,EAAE,CAAC;CACzC;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,oBAAoB,GAAG,IAAI,CAI9D"}

package/dist/service/cloudformation/terraform/sim-tf-template-mappings.js

@@ -0,0 +1,72 @@
+import { terraformLogicalId } from "./sim-tf-reference.js";
+import { skip } from "./sim-tf-template-merge.js";
+import { dependsOn } from "./sim-tf-template-graph.js";
+import { terraformResourceFolds, terraformResourceMappings, } from "./sim-tf-registry.js";
+const awsProvider = "hashicorp/aws";
+/**
+ * Turn every resource that has a mapping into a CloudFormation Resource.
+ *
+ * A resource from another provider, one whose type has no mapping, and one
+ * whose target service requires a property the plan could not resolve are all
+ * recorded and stepped over, so a plan Yulin only partly understands still
+ * deploys the part it does.
+ */
+export function applyMappings(pass) {
+    for (const resource of pass.resources) {
+        mapOne(resource, pass);
+    }
+}
+function mapOne(resource, pass) {
+    if (resource.provider !== awsProvider) {
+        pass.skipped.push(skip(resource, "not an AWS provider resource"));
+        return;
+    }
+    const mapping = terraformResourceMappings.get(resource.type);
+    if (mapping === undefined) {
+        if (!terraformResourceFolds.has(resource.type)) {
+            pass.skipped.push(skip(resource, "no mapping for resource type"));
+        }
+        return;
+    }
+    const built = mapping({ resource, resolver: pass.resolver });
+    const missing = (built.requires ?? []).filter((name) => built.Properties[name] === undefined);
+    if (missing.length > 0) {
+        pass.skipped.push(skip(resource, "unresolved required attribute"));
+        pass.lost.push(...missing.map((name) => ({
+            address: resource.address,
+            attribute: name,
+        })));
+        return;
+    }
+    declare(resource, built.Type, built.Properties, pass);
+    pass.lost.push(...(built.lost ?? []).map((attribute) => ({
+        address: resource.address,
+        attribute,
+    })));
+}
+/**
+ * Put one Resource in the template under the logical ID its address gives.
+ *
+ * Two addresses reaching one logical ID is refused rather than resolved, since
+ * the alternative is one Resource silently standing for two.
+ */
+function declare(resource, type, resourceProperties, pass) {
+    const logicalId = terraformLogicalId(resource.address);
+    const claimed = pass.claimedBy.get(logicalId);
+    if (claimed !== undefined) {
+        throw new Error(`Terraform addresses ${claimed} and ${resource.address} both give the ` +
+            `CloudFormation logical ID ${logicalId}`);
+    }
+    pass.claimedBy.set(logicalId, resource.address);
+    pass.templates.set(logicalId, {
+        Type: type,
+        Properties: resourceProperties,
+        ...dependsOn(resource, pass.resolver),
+    });
+    pass.mapped.push({
+        address: resource.address,
+        type: resource.type,
+        cfnType: type,
+    });
+}
+//# sourceMappingURL=sim-tf-template-mappings.js.map

package/dist/service/cloudformation/terraform/sim-tf-template-mappings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-template-mappings.js","sourceRoot":"","sources":["../../../../src/service/cloudformation/terraform/sim-tf-template-mappings.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,IAAI,EAAE,MAAM,4BAA4B,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACvD,OAAO,EACL,sBAAsB,EACtB,yBAAyB,GAC1B,MAAM,sBAAsB,CAAC;AAO9B,MAAM,WAAW,GAAG,eAAe,CAAC;AAYpC;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,IAA0B;IACtD,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACzB,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,QAA2B,EAAE,IAA0B;IACrE,IAAI,QAAQ,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;QACtC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,8BAA8B,CAAC,CAAC,CAAC;QAClE,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,yBAAyB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAE7D,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,8BAA8B,CAAC,CAAC,CAAC;QACpE,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,CAC3C,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,SAAS,CAC/C,CAAC;IAEF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,+BAA+B,CAAC,CAAC,CAAC;QACnE,IAAI,CAAC,IAAI,CAAC,IAAI,CACZ,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACxB,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC,CACJ,CAAC;QACF,OAAO;IACT,CAAC;IAED,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAEtD,IAAI,CAAC,IAAI,CAAC,IAAI,CACZ,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACxC,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,SAAS;KACV,CAAC,CAAC,CACJ,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,OAAO,CACd,QAA2B,EAC3B,IAAY,EACZ,kBAA2C,EAC3C,IAA0B;IAE1B,MAAM,SAAS,GAAG,kBAAkB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAE9C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,uBAAuB,OAAO,QAAQ,QAAQ,CAAC,OAAO,iBAAiB;YACrE,6BAA6B,SAAS,EAAE,CAC3C,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IAChD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE;QAC5B,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,kBAA+C;QAC3D,GAAG,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC;KACtC,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;QACf,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,OAAO,EAAE,IAAI;KACd,CAAC,CAAC;AACL,CAAC"}

package/dist/service/cloudformation/terraform/sim-tf-template-merge.d.ts

@@ -0,0 +1,21 @@
+import type { SimCfnTemplateValueRecord } from "../template/value/sim-cfn-template-value.js";
+import type { TerraformResource } from "./sim-tf-plan-resources.js";
+import type { TerraformSkippedResource } from "./sim-tf-report.type.js";
+/** One resource of the plan recorded as skipped, with the reason it was. */
+export declare function skip(resource: TerraformResource, reason: TerraformSkippedResource["reason"]): TerraformSkippedResource;
+/**
+ * A resource template with a fold's properties merged into it.
+ *
+ * The fold contributes whole CloudFormation properties, so a later fold on the
+ * same parent replaces a property an earlier one set rather than merging into
+ * it. No two folds of one resource type write the same property.
+ */
+export declare function mergedParent(parent: SimCfnTemplateValueRecord, added: SimCfnTemplateValueRecord): SimCfnTemplateValueRecord;
+/**
+ * The logical ID of the resource a fold belongs to.
+ *
+ * The fold's parent attribute holds a reference rather than a value, because a
+ * bucket or a role being created by the same plan has no name until it exists.
+ * The reference names the resource directly, which is what a fold needs.
+ */
+//# sourceMappingURL=sim-tf-template-merge.d.ts.map

package/dist/service/cloudformation/terraform/sim-tf-template-merge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-template-merge.d.ts","sourceRoot":"","sources":["../../../../src/service/cloudformation/terraform/sim-tf-template-merge.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,6CAA6C,CAAC;AAC7F,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAExE,4EAA4E;AAC5E,wBAAgB,IAAI,CAClB,QAAQ,EAAE,iBAAiB,EAC3B,MAAM,EAAE,wBAAwB,CAAC,QAAQ,CAAC,GACzC,wBAAwB,CAE1B;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAC1B,MAAM,EAAE,yBAAyB,EACjC,KAAK,EAAE,yBAAyB,GAC/B,yBAAyB,CAO3B;AAED;;;;;;GAMG"}

package/dist/service/cloudformation/terraform/sim-tf-template-merge.js

@@ -0,0 +1,33 @@
+/*
+ * Reading a plan means reading records whose keys come from the document
+ * rather than from this code, so the object-injection rule fires on every
+ * lookup. The records are parsed JSON with no prototype of their own.
+ */
+// oxlint-disable security/detect-object-injection
+import { isRecord } from "../../../util/type-guard/record.js";
+/** One resource of the plan recorded as skipped, with the reason it was. */
+export function skip(resource, reason) {
+    return { address: resource.address, type: resource.type, reason };
+}
+/**
+ * A resource template with a fold's properties merged into it.
+ *
+ * The fold contributes whole CloudFormation properties, so a later fold on the
+ * same parent replaces a property an earlier one set rather than merging into
+ * it. No two folds of one resource type write the same property.
+ */
+export function mergedParent(parent, added) {
+    const existing = parent["Properties"];
+    return {
+        ...parent,
+        Properties: { ...(isRecord(existing) && existing), ...added },
+    };
+}
+/**
+ * The logical ID of the resource a fold belongs to.
+ *
+ * The fold's parent attribute holds a reference rather than a value, because a
+ * bucket or a role being created by the same plan has no name until it exists.
+ * The reference names the resource directly, which is what a fold needs.
+ */
+//# sourceMappingURL=sim-tf-template-merge.js.map

package/dist/service/cloudformation/terraform/sim-tf-template-merge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-template-merge.js","sourceRoot":"","sources":["../../../../src/service/cloudformation/terraform/sim-tf-template-merge.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,kDAAkD;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,oCAAoC,CAAC;AAK9D,4EAA4E;AAC5E,MAAM,UAAU,IAAI,CAClB,QAA2B,EAC3B,MAA0C;IAE1C,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;AACpE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAC1B,MAAiC,EACjC,KAAgC;IAEhC,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;IAEtC,OAAO;QACL,GAAG,MAAM;QACT,UAAU,EAAE,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,EAAE,GAAG,KAAK,EAAE;KAC9D,CAAC;AACJ,CAAC;AAED;;;;;;GAMG"}

package/dist/service/cloudformation/terraform/sim-tf-template-prune.d.ts

@@ -0,0 +1,21 @@
+import type { SimCfnTemplateValueRecord } from "../template/value/sim-cfn-template-value.js";
+export interface TerraformPruneResult {
+    /** The logical IDs removed, in the order they were found. */
+    readonly removed: readonly string[];
+}
+/**
+ * Take out what points at a Resource the template does not declare.
+ *
+ * A Resource can be mapped and then dropped, because a property the service
+ * requires turned out to be unresolvable. Anything that already resolved a
+ * reference against it is left naming a logical ID the template never declares,
+ * and CloudFormation refuses the whole template for one of those.
+ *
+ * The two forms are treated differently on purpose. A `DependsOn` entry is an
+ * ordering hint, so a dangling one is dropped and its Resource stays. A `Ref`
+ * or an `Fn::GetAtt` in a property is a value the Resource needs, so a
+ * Resource holding a dangling one goes as well. That removal can strand
+ * another Resource in turn, which is why this runs until nothing changes.
+ */
+export declare function pruneDanglingReferences(templates: Map<string, SimCfnTemplateValueRecord>): TerraformPruneResult;
+//# sourceMappingURL=sim-tf-template-prune.d.ts.map

package/dist/service/cloudformation/terraform/sim-tf-template-prune.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-template-prune.d.ts","sourceRoot":"","sources":["../../../../src/service/cloudformation/terraform/sim-tf-template-prune.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,6CAA6C,CAAC;AAG7F,MAAM,WAAW,oBAAoB;IACnC,6DAA6D;IAC7D,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,yBAAyB,CAAC,GAChD,oBAAoB,CAmBtB"}

package/dist/service/cloudformation/terraform/sim-tf-template-prune.js

@@ -0,0 +1,51 @@
+import { referencedLogicalIds } from "./sim-tf-template-references.js";
+/**
+ * Take out what points at a Resource the template does not declare.
+ *
+ * A Resource can be mapped and then dropped, because a property the service
+ * requires turned out to be unresolvable. Anything that already resolved a
+ * reference against it is left naming a logical ID the template never declares,
+ * and CloudFormation refuses the whole template for one of those.
+ *
+ * The two forms are treated differently on purpose. A `DependsOn` entry is an
+ * ordering hint, so a dangling one is dropped and its Resource stays. A `Ref`
+ * or an `Fn::GetAtt` in a property is a value the Resource needs, so a
+ * Resource holding a dangling one goes as well. That removal can strand
+ * another Resource in turn, which is why this runs until nothing changes.
+ */
+export function pruneDanglingReferences(templates) {
+    const removed = [];
+    for (let stranded = strandedLogicalIds(templates); stranded.length > 0; stranded = strandedLogicalIds(templates)) {
+        for (const logicalId of stranded) {
+            templates.delete(logicalId);
+            removed.push(logicalId);
+        }
+    }
+    for (const [logicalId, template] of templates) {
+        templates.set(logicalId, withoutDanglingDependsOn(template, templates));
+    }
+    return { removed };
+}
+/** The Resources holding a property that names a Resource nothing declares. */
+function strandedLogicalIds(templates) {
+    return [...templates]
+        .filter(([, template]) => referencedLogicalIds(template["Properties"]).some((named) => !templates.has(named)))
+        .map(([logicalId]) => logicalId);
+}
+function withoutDanglingDependsOn(template, templates) {
+    const declared = template["DependsOn"];
+    if (!Array.isArray(declared)) {
+        return template;
+    }
+    const kept = declared.filter((entry) => typeof entry === "string" && templates.has(entry));
+    if (kept.length === declared.length) {
+        return template;
+    }
+    return kept.length === 0
+        ? withoutKey(template, "DependsOn")
+        : { ...template, DependsOn: kept };
+}
+function withoutKey(template, key) {
+    return Object.fromEntries(Object.entries(template).filter(([name]) => name !== key));
+}
+//# sourceMappingURL=sim-tf-template-prune.js.map

package/dist/service/cloudformation/terraform/sim-tf-template-prune.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-template-prune.js","sourceRoot":"","sources":["../../../../src/service/cloudformation/terraform/sim-tf-template-prune.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAOvE;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,uBAAuB,CACrC,SAAiD;IAEjD,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,KACE,IAAI,QAAQ,GAAG,kBAAkB,CAAC,SAAS,CAAC,EAC5C,QAAQ,CAAC,MAAM,GAAG,CAAC,EACnB,QAAQ,GAAG,kBAAkB,CAAC,SAAS,CAAC,EACxC,CAAC;QACD,KAAK,MAAM,SAAS,IAAI,QAAQ,EAAE,CAAC;YACjC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC5B,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,KAAK,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,SAAS,EAAE,CAAC;QAC9C,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,wBAAwB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,CAAC;AACrB,CAAC;AAED,+EAA+E;AAC/E,SAAS,kBAAkB,CACzB,SAAyD;IAEzD,OAAO,CAAC,GAAG,SAAS,CAAC;SAClB,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,EAAE,CACvB,oBAAoB,CAClB,QAAQ,CAAC,YAAY,CAA8B,CACpD,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CACzC;SACA,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,wBAAwB,CAC/B,QAAmC,EACnC,SAAyD;IAEzD,MAAM,QAAQ,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;IAEvC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAC1B,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAC7D,CAAC;IAEF,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC;QACtB,CAAC,CAAC,UAAU,CAAC,QAAQ,EAAE,WAAW,CAAC;QACnC,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AACvC,CAAC;AAED,SAAS,UAAU,CACjB,QAAmC,EACnC,GAAW;IAEX,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,GAAG,CAAC,CAC1D,CAAC;AACJ,CAAC"}

package/dist/service/cloudformation/terraform/sim-tf-template-pruned.d.ts

@@ -0,0 +1,18 @@
+import type { SimCfnTemplateValueRecord } from "../template/value/sim-cfn-template-value.js";
+import type { TerraformImportedResource, TerraformSkippedResource } from "./sim-tf-report.type.js";
+export interface TerraformPruneBookkeeping {
+    readonly templates: Map<string, SimCfnTemplateValueRecord>;
+    readonly claimedBy: ReadonlyMap<string, string>;
+    readonly mapped: TerraformImportedResource[];
+    readonly skipped: TerraformSkippedResource[];
+}
+/**
+ * Prune the template, and move what went from mapped to skipped.
+ *
+ * A Resource dropped for an unresolvable required property leaves whatever
+ * referred to it naming a logical ID the template does not declare. Those go
+ * here rather than reaching CloudFormation as a template it would refuse, and
+ * the report follows them so the counts still add up to the plan.
+ */
+export declare function recordPrunedResources(bookkeeping: TerraformPruneBookkeeping): void;
+//# sourceMappingURL=sim-tf-template-pruned.d.ts.map

package/dist/service/cloudformation/terraform/sim-tf-template-pruned.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-template-pruned.d.ts","sourceRoot":"","sources":["../../../../src/service/cloudformation/terraform/sim-tf-template-pruned.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,6CAA6C,CAAC;AAE7F,OAAO,KAAK,EACV,yBAAyB,EACzB,wBAAwB,EACzB,MAAM,yBAAyB,CAAC;AAEjC,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;IAC3D,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChD,QAAQ,CAAC,MAAM,EAAE,yBAAyB,EAAE,CAAC;IAC7C,QAAQ,CAAC,OAAO,EAAE,wBAAwB,EAAE,CAAC;CAC9C;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACnC,WAAW,EAAE,yBAAyB,GACrC,IAAI,CAcN"}

package/dist/service/cloudformation/terraform/sim-tf-template-pruned.js

@@ -0,0 +1,23 @@
+import { pruneDanglingReferences } from "./sim-tf-template-prune.js";
+/**
+ * Prune the template, and move what went from mapped to skipped.
+ *
+ * A Resource dropped for an unresolvable required property leaves whatever
+ * referred to it naming a logical ID the template does not declare. Those go
+ * here rather than reaching CloudFormation as a template it would refuse, and
+ * the report follows them so the counts still add up to the plan.
+ */
+export function recordPrunedResources(bookkeeping) {
+    const { templates, claimedBy, mapped, skipped } = bookkeeping;
+    for (const logicalId of pruneDanglingReferences(templates).removed) {
+        const address = claimedBy.get(logicalId) ?? logicalId;
+        const index = mapped.findIndex((entry) => entry.address === address);
+        const [entry] = index === -1 ? [] : mapped.splice(index, 1);
+        skipped.push({
+            address,
+            type: entry?.type ?? "unknown",
+            reason: "references a resource that was skipped",
+        });
+    }
+}
+//# sourceMappingURL=sim-tf-template-pruned.js.map

package/dist/service/cloudformation/terraform/sim-tf-template-pruned.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-template-pruned.js","sourceRoot":"","sources":["../../../../src/service/cloudformation/terraform/sim-tf-template-pruned.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAarE;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CACnC,WAAsC;IAEtC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC;IAE9D,KAAK,MAAM,SAAS,IAAI,uBAAuB,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;QACnE,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC;QACtD,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;QACrE,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAE5D,OAAO,CAAC,IAAI,CAAC;YACX,OAAO;YACP,IAAI,EAAE,KAAK,EAAE,IAAI,IAAI,SAAS;YAC9B,MAAM,EAAE,wCAAwC;SACjD,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/service/cloudformation/terraform/sim-tf-template-references.d.ts

@@ -0,0 +1,10 @@
+import type { SimCfnTemplateValue } from "../template/value/sim-cfn-template-value.js";
+/**
+ * The logical IDs an intrinsic somewhere in this value names.
+ *
+ * A `Ref` names one in its value and an `Fn::GetAtt` names one in the first
+ * element of its list. Anything else is walked into, because an intrinsic can
+ * sit at any depth of a property.
+ */
+export declare function referencedLogicalIds(value: SimCfnTemplateValue | undefined): readonly string[];
+//# sourceMappingURL=sim-tf-template-references.d.ts.map

package/dist/service/cloudformation/terraform/sim-tf-template-references.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-template-references.d.ts","sourceRoot":"","sources":["../../../../src/service/cloudformation/terraform/sim-tf-template-references.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6CAA6C,CAAC;AAEvF;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,mBAAmB,GAAG,SAAS,GACrC,SAAS,MAAM,EAAE,CAgBnB"}

package/dist/service/cloudformation/terraform/sim-tf-template-references.js

@@ -0,0 +1,39 @@
+/*
+ * Reading a plan means reading records whose keys come from the document
+ * rather than from this code, so the object-injection rule fires on every
+ * lookup. The records are parsed JSON with no prototype of their own.
+ */
+// oxlint-disable security/detect-object-injection
+import { isRecord } from "../../../util/type-guard/record.js";
+/**
+ * The logical IDs an intrinsic somewhere in this value names.
+ *
+ * A `Ref` names one in its value and an `Fn::GetAtt` names one in the first
+ * element of its list. Anything else is walked into, because an intrinsic can
+ * sit at any depth of a property.
+ */
+export function referencedLogicalIds(value) {
+    if (Array.isArray(value)) {
+        return value.flatMap((entry) => referencedLogicalIds(entry));
+    }
+    if (!isRecord(value)) {
+        return [];
+    }
+    const named = intrinsicTarget(value);
+    if (named !== undefined) {
+        return [named];
+    }
+    return Object.values(value).flatMap((nested) => referencedLogicalIds(nested));
+}
+function intrinsicTarget(value) {
+    const referenced = value["Ref"];
+    if (typeof referenced === "string") {
+        return referenced;
+    }
+    const attribute = value["Fn::GetAtt"];
+    if (Array.isArray(attribute) && typeof attribute[0] === "string") {
+        return attribute[0];
+    }
+    return undefined;
+}
+//# sourceMappingURL=sim-tf-template-references.js.map

package/dist/service/cloudformation/terraform/sim-tf-template-references.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-template-references.js","sourceRoot":"","sources":["../../../../src/service/cloudformation/terraform/sim-tf-template-references.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,kDAAkD;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,oCAAoC,CAAC;AAG9D;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAAsC;IAEtC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IAErC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,CAAC,KAAK,CAAC,CAAC;IACjB,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,eAAe,CAAC,KAA8B;IACrD,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IAEhC,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;QACnC,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC;IAEtC,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,OAAO,SAAS,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QACjE,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC;IACtB,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/service/cloudformation/terraform/sim-tf-template-resolver.d.ts

@@ -0,0 +1,12 @@
+import type { TerraformPlan } from "./sim-tf-plan.type.js";
+import type { TerraformResource } from "./sim-tf-plan-resources.js";
+import { TerraformReferenceResolver } from "./sim-tf-reference.js";
+/**
+ * A resolver over the resources that become a CloudFormation Resource.
+ *
+ * A reference to a type with no mapping would otherwise produce an intrinsic
+ * naming a logical ID the template never declares, and the property carrying it
+ * would reach the service factory as an object where a string was wanted.
+ */
+export declare function mappableResolver(plan: TerraformPlan, resources: readonly TerraformResource[]): TerraformReferenceResolver;
+//# sourceMappingURL=sim-tf-template-resolver.d.ts.map

package/dist/service/cloudformation/terraform/sim-tf-template-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-template-resolver.d.ts","sourceRoot":"","sources":["../../../../src/service/cloudformation/terraform/sim-tf-template-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AAMnE;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,aAAa,EACnB,SAAS,EAAE,SAAS,iBAAiB,EAAE,GACtC,0BAA0B,CAQ5B"}

package/dist/service/cloudformation/terraform/sim-tf-template-resolver.js

@@ -0,0 +1,17 @@
+import { TerraformReferenceResolver } from "./sim-tf-reference.js";
+import { terraformModuleOutputs } from "./sim-tf-module-outputs.js";
+import { terraformResourceMappings } from "./sim-tf-registry.js";
+const awsProvider = "hashicorp/aws";
+/**
+ * A resolver over the resources that become a CloudFormation Resource.
+ *
+ * A reference to a type with no mapping would otherwise produce an intrinsic
+ * naming a logical ID the template never declares, and the property carrying it
+ * would reach the service factory as an object where a string was wanted.
+ */
+export function mappableResolver(plan, resources) {
+    const mappable = resources.filter((resource) => resource.provider === awsProvider &&
+        terraformResourceMappings.has(resource.type));
+    return new TerraformReferenceResolver(mappable, terraformModuleOutputs(plan));
+}
+//# sourceMappingURL=sim-tf-template-resolver.js.map