@kensio/yulin 1.19.1 → 1.19.3

package/dist/terraform/map/sim-tf-map-sns.js

@@ -0,0 +1,40 @@
+/*
+ * Reading a plan means reading records whose keys come from the document
+ * rather than from this code, so the object-injection rule fires on every
+ * lookup. The records are parsed JSON with no prototype of their own.
+ */
+// oxlint-disable security/detect-object-injection
+import { attribute, renamed, tags, } from "../sim-tf-attributes.js";
+/**
+ * A topic.
+ *
+ * Tags are left off. Simulated SNS refuses a `Tags` property, because nothing
+ * it models reads a topic tag, and Terraform tags whatever a default tag block
+ * covers whether or not the tag matters. A property a service refuses fails
+ * the Resource, so tagging is one of the places a mapping has to know what the
+ * service will take.
+ */
+export function snsTopic(context) {
+    const fifo = attribute(context, "fifo_topic");
+    return {
+        Type: "AWS::SNS::Topic",
+        Properties: {
+            ...renamed(context, { TopicName: "name", DisplayName: "display_name" }),
+            ...(fifo === true && { FifoTopic: true }),
+        },
+        lost: tags(context) === undefined ? [] : ["tags"],
+    };
+}
+/** A subscription, which Terraform declares apart from its topic as well. */
+export function snsSubscription(context) {
+    return {
+        Type: "AWS::SNS::Subscription",
+        Properties: renamed(context, {
+            TopicArn: "topic_arn",
+            Protocol: "protocol",
+            Endpoint: "endpoint",
+            RawMessageDelivery: "raw_message_delivery",
+        }),
+    };
+}
+//# sourceMappingURL=sim-tf-map-sns.js.map

package/dist/terraform/map/sim-tf-map-sns.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-map-sns.js","sourceRoot":"","sources":["../../../src/terraform/map/sim-tf-map-sns.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,kDAAkD;AAClD,OAAO,EACL,SAAS,EACT,OAAO,EACP,IAAI,GAEL,MAAM,yBAAyB,CAAC;AAGjC;;;;;;;;GAQG;AACH,MAAM,UAAU,QAAQ,CACtB,OAAgC;IAEhC,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAE9C,OAAO;QACL,IAAI,EAAE,iBAAiB;QACvB,UAAU,EAAE;YACV,GAAG,OAAO,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC;YACvE,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;SAC1C;QACD,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;KAClD,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,eAAe,CAC7B,OAAgC;IAEhC,OAAO;QACL,IAAI,EAAE,wBAAwB;QAC9B,UAAU,EAAE,OAAO,CAAC,OAAO,EAAE;YAC3B,QAAQ,EAAE,WAAW;YACrB,QAAQ,EAAE,UAAU;YACpB,QAAQ,EAAE,UAAU;YACpB,kBAAkB,EAAE,sBAAsB;SAC3C,CAAC;KACH,CAAC;AACJ,CAAC"}

package/dist/terraform/map/sim-tf-map-sqs-redrive.d.ts

@@ -0,0 +1,32 @@
+import type { SimCfnTemplateValue } from "../../service/cloudformation/template/value/sim-cfn-template-value.js";
+import { type TerraformMappingContext } from "../sim-tf-attributes.js";
+import type { TerraformResourceFold } from "../sim-tf-mapping.type.js";
+/** A policy document read out of the JSON string Terraform carries it in. */
+export interface TerraformJsonDocument {
+    readonly value: SimCfnTemplateValue | undefined;
+    readonly lost: readonly string[];
+}
+/**
+ * One attribute Terraform holds as a JSON string and CloudFormation as an
+ * object.
+ *
+ * The string is usually built with `jsonencode` around a queue ARN, so the
+ * whole string is unknown whenever that queue is created by the same plan. What
+ * survives is the reference to the queue, and everything the document said
+ * beside it was inside the string that never got built. A policy carrying a
+ * made-up receive limit would give the queue different retry behaviour from the
+ * one the plan describes, so the document is dropped whole and recorded.
+ */
+export declare function jsonDocument(context: TerraformMappingContext, key: string): TerraformJsonDocument;
+/**
+ * The `aws_sqs_queue_redrive_*` resources that configure a queue declared
+ * elsewhere.
+ *
+ * Each names its queue in a `queue_url` attribute, which the queue resolves to
+ * whether or not the URL itself was known at plan time. CloudFormation carries
+ * both as properties of the `AWS::SQS::Queue`, and simulated SQS records each
+ * one against the Resource: no message moves to a dead-letter queue here, and
+ * nothing enforces which queues may name one as theirs.
+ */
+export declare const sqsRedriveFolds: ReadonlyMap<string, TerraformResourceFold>;
+//# sourceMappingURL=sim-tf-map-sqs-redrive.d.ts.map

package/dist/terraform/map/sim-tf-map-sqs-redrive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-map-sqs-redrive.d.ts","sourceRoot":"","sources":["../../../src/terraform/map/sim-tf-map-sqs-redrive.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uEAAuE,CAAC;AACjH,OAAO,EAIL,KAAK,uBAAuB,EAC7B,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAEvE,6EAA6E;AAC7E,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,EAAE,mBAAmB,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAC1B,OAAO,EAAE,uBAAuB,EAChC,GAAG,EAAE,MAAM,GACV,qBAAqB,CAgBvB;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,eAAe,EAAE,WAAW,CAAC,MAAM,EAAE,qBAAqB,CAoBnE,CAAC"}

package/dist/terraform/map/sim-tf-map-sqs-redrive.js

@@ -0,0 +1,68 @@
+/*
+ * The two ways a queue names its dead-letter arrangement as a resource of its
+ * own, rather than inline on the queue.
+ *
+ * Reading a plan means reading records whose keys come from the document
+ * rather than from this code, so the object-injection rule fires on every
+ * lookup. The records are parsed JSON with no prototype of their own.
+ */
+// oxlint-disable security/detect-object-injection
+import { isRecord } from "../../util/type-guard/record.js";
+import { field, properties, templateValue, } from "../sim-tf-attributes.js";
+/**
+ * One attribute Terraform holds as a JSON string and CloudFormation as an
+ * object.
+ *
+ * The string is usually built with `jsonencode` around a queue ARN, so the
+ * whole string is unknown whenever that queue is created by the same plan. What
+ * survives is the reference to the queue, and everything the document said
+ * beside it was inside the string that never got built. A policy carrying a
+ * made-up receive limit would give the queue different retry behaviour from the
+ * one the plan describes, so the document is dropped whole and recorded.
+ */
+export function jsonDocument(context, key) {
+    const known = field(context.resource.values, key);
+    if (typeof known === "string") {
+        const parsed = JSON.parse(known);
+        return {
+            value: isRecord(parsed) ? templateValue(parsed) : undefined,
+            lost: [],
+        };
+    }
+    return {
+        value: undefined,
+        lost: context.resource.unknown[key] === true ? [key] : [],
+    };
+}
+/**
+ * The `aws_sqs_queue_redrive_*` resources that configure a queue declared
+ * elsewhere.
+ *
+ * Each names its queue in a `queue_url` attribute, which the queue resolves to
+ * whether or not the URL itself was known at plan time. CloudFormation carries
+ * both as properties of the `AWS::SQS::Queue`, and simulated SQS records each
+ * one against the Resource: no message moves to a dead-letter queue here, and
+ * nothing enforces which queues may name one as theirs.
+ */
+export const sqsRedriveFolds = new Map([
+    [
+        "aws_sqs_queue_redrive_policy",
+        {
+            parentAttribute: "queue_url",
+            properties: (context) => redrive(context, "redrive_policy", "RedrivePolicy"),
+            lost: (context) => jsonDocument(context, "redrive_policy").lost,
+        },
+    ],
+    [
+        "aws_sqs_queue_redrive_allow_policy",
+        {
+            parentAttribute: "queue_url",
+            properties: (context) => redrive(context, "redrive_allow_policy", "RedriveAllowPolicy"),
+            lost: (context) => jsonDocument(context, "redrive_allow_policy").lost,
+        },
+    ],
+]);
+function redrive(context, attribute, property) {
+    return properties({ [property]: jsonDocument(context, attribute).value });
+}
+//# sourceMappingURL=sim-tf-map-sqs-redrive.js.map

package/dist/terraform/map/sim-tf-map-sqs-redrive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-map-sqs-redrive.js","sourceRoot":"","sources":["../../../src/terraform/map/sim-tf-map-sqs-redrive.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,kDAAkD;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAE3D,OAAO,EACL,KAAK,EACL,UAAU,EACV,aAAa,GAEd,MAAM,yBAAyB,CAAC;AASjC;;;;;;;;;;GAUG;AACH,MAAM,UAAU,YAAY,CAC1B,OAAgC,EAChC,GAAW;IAEX,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAElD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAE1C,OAAO;YACL,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;YAC3D,IAAI,EAAE,EAAE;SACT,CAAC;IACJ,CAAC;IAED,OAAO;QACL,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE;KAC1D,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,eAAe,GAC1B,IAAI,GAAG,CAAC;IACN;QACE,8BAA8B;QAC9B;YACE,eAAe,EAAE,WAAW;YAC5B,UAAU,EAAE,CAAC,OAAO,EAAE,EAAE,CACtB,OAAO,CAAC,OAAO,EAAE,gBAAgB,EAAE,eAAe,CAAC;YACrD,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC,IAAI;SAChE;KACF;IACD;QACE,oCAAoC;QACpC;YACE,eAAe,EAAE,WAAW;YAC5B,UAAU,EAAE,CAAC,OAAO,EAAE,EAAE,CACtB,OAAO,CAAC,OAAO,EAAE,sBAAsB,EAAE,oBAAoB,CAAC;YAChE,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC,IAAI;SACtE;KACF;CACF,CAAC,CAAC;AAEL,SAAS,OAAO,CACd,OAAgC,EAChC,SAAiB,EACjB,QAAgB;IAEhB,OAAO,UAAU,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;AAC5E,CAAC"}

package/dist/terraform/map/sim-tf-map-sqs.d.ts

@@ -0,0 +1,11 @@
+import { type TerraformMappingContext } from "../sim-tf-attributes.js";
+import type { TerraformMappedResource } from "../sim-tf-mapping.type.js";
+/**
+ * A queue, with the redrive policy read out of the JSON string it lives in.
+ *
+ * A queue can also state its redrive settings as resources of their own, and
+ * those fold in beside this. The queue's own attribute is the older spelling
+ * and the two never appear together on one queue.
+ */
+export declare function sqsQueue(context: TerraformMappingContext): TerraformMappedResource;
+//# sourceMappingURL=sim-tf-map-sqs.d.ts.map

package/dist/terraform/map/sim-tf-map-sqs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-map-sqs.d.ts","sourceRoot":"","sources":["../../../src/terraform/map/sim-tf-map-sqs.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,uBAAuB,EAC7B,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAGzE;;;;;;GAMG;AACH,wBAAgB,QAAQ,CACtB,OAAO,EAAE,uBAAuB,GAC/B,uBAAuB,CAgBzB"}

package/dist/terraform/map/sim-tf-map-sqs.js

@@ -0,0 +1,26 @@
+import { properties, renamed, tags, } from "../sim-tf-attributes.js";
+import { jsonDocument } from "./sim-tf-map-sqs-redrive.js";
+/**
+ * A queue, with the redrive policy read out of the JSON string it lives in.
+ *
+ * A queue can also state its redrive settings as resources of their own, and
+ * those fold in beside this. The queue's own attribute is the older spelling
+ * and the two never appear together on one queue.
+ */
+export function sqsQueue(context) {
+    const redrive = jsonDocument(context, "redrive_policy");
+    return {
+        Type: "AWS::SQS::Queue",
+        Properties: {
+            ...renamed(context, {
+                QueueName: "name",
+                VisibilityTimeout: "visibility_timeout_seconds",
+                MessageRetentionPeriod: "message_retention_seconds",
+                DelaySeconds: "delay_seconds",
+            }),
+            ...properties({ RedrivePolicy: redrive.value, Tags: tags(context) }),
+        },
+        lost: redrive.lost,
+    };
+}
+//# sourceMappingURL=sim-tf-map-sqs.js.map

package/dist/terraform/map/sim-tf-map-sqs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-map-sqs.js","sourceRoot":"","sources":["../../../src/terraform/map/sim-tf-map-sqs.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,OAAO,EACP,IAAI,GAEL,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAE3D;;;;;;GAMG;AACH,MAAM,UAAU,QAAQ,CACtB,OAAgC;IAEhC,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;IAExD,OAAO;QACL,IAAI,EAAE,iBAAiB;QACvB,UAAU,EAAE;YACV,GAAG,OAAO,CAAC,OAAO,EAAE;gBAClB,SAAS,EAAE,MAAM;gBACjB,iBAAiB,EAAE,4BAA4B;gBAC/C,sBAAsB,EAAE,2BAA2B;gBACnD,YAAY,EAAE,eAAe;aAC9B,CAAC;YACF,GAAG,UAAU,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;SACrE;QACD,IAAI,EAAE,OAAO,CAAC,IAAI;KACnB,CAAC;AACJ,CAAC"}

package/dist/terraform/map/sim-tf-map-ssm.d.ts

@@ -0,0 +1,13 @@
+import { type TerraformMappingContext } from "../sim-tf-attributes.js";
+import type { TerraformMappedResource } from "../sim-tf-mapping.type.js";
+/**
+ * A parameter.
+ *
+ * Terraform stores a `SecureString` through Parameter Store's own encryption.
+ * CloudFormation has no way to declare one, since the plaintext value would
+ * sit in the template, and refuses the type. Such a parameter is left out and
+ * recorded rather than deployed into a failure that would take the rest of the
+ * Stack with it.
+ */
+export declare function ssmParameter(context: TerraformMappingContext): TerraformMappedResource;
+//# sourceMappingURL=sim-tf-map-ssm.d.ts.map

package/dist/terraform/map/sim-tf-map-ssm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-map-ssm.d.ts","sourceRoot":"","sources":["../../../src/terraform/map/sim-tf-map-ssm.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,uBAAuB,EAC7B,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAEzE;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAC1B,OAAO,EAAE,uBAAuB,GAC/B,uBAAuB,CAazB"}

package/dist/terraform/map/sim-tf-map-ssm.js

@@ -0,0 +1,24 @@
+import { attribute, renamed, } from "../sim-tf-attributes.js";
+/**
+ * A parameter.
+ *
+ * Terraform stores a `SecureString` through Parameter Store's own encryption.
+ * CloudFormation has no way to declare one, since the plaintext value would
+ * sit in the template, and refuses the type. Such a parameter is left out and
+ * recorded rather than deployed into a failure that would take the rest of the
+ * Stack with it.
+ */
+export function ssmParameter(context) {
+    const secure = attribute(context, "type") === "SecureString";
+    return {
+        Type: "AWS::SSM::Parameter",
+        Properties: renamed(context, {
+            Name: "name",
+            Type: "type",
+            Value: "value",
+            Description: "description",
+        }),
+        ...(secure && { refused: "a property value the service refuses" }),
+    };
+}
+//# sourceMappingURL=sim-tf-map-ssm.js.map

package/dist/terraform/map/sim-tf-map-ssm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-map-ssm.js","sourceRoot":"","sources":["../../../src/terraform/map/sim-tf-map-ssm.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,OAAO,GAER,MAAM,yBAAyB,CAAC;AAGjC;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAC1B,OAAgC;IAEhC,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,cAAc,CAAC;IAE7D,OAAO;QACL,IAAI,EAAE,qBAAqB;QAC3B,UAAU,EAAE,OAAO,CAAC,OAAO,EAAE;YAC3B,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,OAAO;YACd,WAAW,EAAE,aAAa;SAC3B,CAAC;QACF,GAAG,CAAC,MAAM,IAAI,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC;KACnE,CAAC;AACJ,CAAC"}

package/dist/terraform/sim-tf-adapter.d.ts

@@ -0,0 +1,80 @@
+import type { SimAws } from "../service/aws/sim-aws.js";
+import type { SimCfnDeployBinding } from "../service/cloudformation/bind/sim-cfn-deploy-binding.js";
+import type { SimCfnDeployedStack } from "../service/cloudformation/stack/sim-cfn-deployed-stack.type.js";
+import type { SimCloudFormationStackName } from "../service/cloudformation/stack/sim-cfn-stack.type.js";
+import type { TerraformPlanOverride } from "./sim-tf-override.type.js";
+import type { TerraformImportReport } from "./sim-tf-report.type.js";
+export interface TerraformPlanDeployProperties {
+    /**
+     * The path of a JSON plan, as `terraform show -json <planfile>` writes one.
+     *
+     * The saved plan file itself is Terraform's own binary format and is not
+     * what this reads.
+     */
+    readonly planPath: string;
+    /** The Stack name, which defaults to the plan file's own name. */
+    readonly stackName?: SimCloudFormationStackName | string | undefined;
+    /**
+     * What the Resources of the plan run.
+     *
+     * A plan points a function at a zip on disk, an S3 object or a container
+     * image, and none of the three is a handler Yulin can run. A binding
+     * matching on the function name the plan carries is how a simulated function
+     * gets its behaviour.
+     */
+    readonly bindings?: readonly SimCfnDeployBinding[] | undefined;
+    /**
+     * The values the plan could not carry.
+     *
+     * Terraform resolves nothing inside a value it could not build, so a Lambda
+     * `environment.variables` map holding one reference to a queue of the same
+     * plan arrives without its variable names, and an `aws_iam_role_policy`
+     * document built with `jsonencode` arrives without its statements. An
+     * override supplies one of those against the name the plan carries, and is
+     * used only where the plan resolved nothing.
+     *
+     * What no override covers is named on the report's `lost`.
+     */
+    readonly overrides?: readonly TerraformPlanOverride[] | undefined;
+}
+/** What one plan deployed as, and what reading the plan made of it. */
+export interface TerraformPlanDeployment {
+    readonly stack: SimCfnDeployedStack;
+    /**
+     * What happened to every resource of the plan.
+     *
+     * The Stack holds the resources this had a mapping for. The rest of the plan
+     * is here, by Terraform address and type, with the reason each was left out.
+     */
+    readonly report: TerraformImportReport;
+}
+/**
+ * Deploys Terraform into simulated AWS.
+ *
+ * A team whose infrastructure is written in Terraform reaches simulated AWS
+ * through this rather than by hand-writing a second CloudFormation template
+ * describing the same infrastructure.
+ *
+ * Underneath, a plan becomes a CloudFormation template body and goes through
+ * the same Stack machinery a synthesized template goes through. That is an
+ * implementation detail of this adapter. Simulated CloudFormation knows
+ * nothing about Terraform, and a Stack deployed from a plan is an ordinary
+ * Stack.
+ */
+export declare class TerraformAdapter {
+    private readonly simAws;
+    constructor(simAws: SimAws);
+    /**
+     * Deploy the resources of a Terraform plan into simulated AWS.
+     *
+     * The file is the JSON `terraform show -json <planfile>` writes, rather than
+     * the saved plan file itself. A path on its own is the same deployment as an
+     * object naming only the path.
+     *
+     * A resource type this has no mapping for, and a resource from a provider
+     * other than AWS, are recorded on the report rather than failing the
+     * deployment.
+     */
+    deployPlan(properties: TerraformPlanDeployProperties | string): Promise<TerraformPlanDeployment>;
+}
+//# sourceMappingURL=sim-tf-adapter.d.ts.map

package/dist/terraform/sim-tf-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-adapter.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0DAA0D,CAAC;AACpG,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gEAAgE,CAAC;AAC1G,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,uDAAuD,CAAC;AAMxG,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAErE,MAAM,WAAW,6BAA6B;IAC5C;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B,kEAAkE;IAClE,QAAQ,CAAC,SAAS,CAAC,EAAE,0BAA0B,GAAG,MAAM,GAAG,SAAS,CAAC;IAErE;;;;;;;OAOG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,mBAAmB,EAAE,GAAG,SAAS,CAAC;IAE/D;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,qBAAqB,EAAE,GAAG,SAAS,CAAC;CACnE;AAED,uEAAuE;AACvE,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;IAEpC;;;;;OAKG;IACH,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;CACxC;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAEhC,YAAY,MAAM,EAAE,MAAM,EAEzB;IAED;;;;;;;;;;OAUG;IACG,UAAU,CACd,UAAU,EAAE,6BAA6B,GAAG,MAAM,GACjD,OAAO,CAAC,uBAAuB,CAAC,CAkBlC;CACF"}

package/dist/terraform/sim-tf-adapter.js

@@ -0,0 +1,44 @@
+import { cfnTemplateFromTerraformPlan } from "./sim-tf-import.js";
+import { readTerraformPlanFile, terraformStackNameFromPlanPath, } from "./sim-tf-plan-file.js";
+/**
+ * Deploys Terraform into simulated AWS.
+ *
+ * A team whose infrastructure is written in Terraform reaches simulated AWS
+ * through this rather than by hand-writing a second CloudFormation template
+ * describing the same infrastructure.
+ *
+ * Underneath, a plan becomes a CloudFormation template body and goes through
+ * the same Stack machinery a synthesized template goes through. That is an
+ * implementation detail of this adapter. Simulated CloudFormation knows
+ * nothing about Terraform, and a Stack deployed from a plan is an ordinary
+ * Stack.
+ */
+export class TerraformAdapter {
+    simAws;
+    constructor(simAws) {
+        this.simAws = simAws;
+    }
+    /**
+     * Deploy the resources of a Terraform plan into simulated AWS.
+     *
+     * The file is the JSON `terraform show -json <planfile>` writes, rather than
+     * the saved plan file itself. A path on its own is the same deployment as an
+     * object naming only the path.
+     *
+     * A resource type this has no mapping for, and a resource from a provider
+     * other than AWS, are recorded on the report rather than failing the
+     * deployment.
+     */
+    async deployPlan(properties) {
+        const deployment = typeof properties === "string" ? { planPath: properties } : properties;
+        const { planPath, bindings, overrides } = deployment;
+        const { template, report } = cfnTemplateFromTerraformPlan(await readTerraformPlanFile(planPath), overrides);
+        const stack = await this.simAws.cloudFormation().deployTemplate({
+            stackName: deployment.stackName ?? terraformStackNameFromPlanPath(planPath),
+            template,
+            bindings,
+        });
+        return { stack, report };
+    }
+}
+//# sourceMappingURL=sim-tf-adapter.js.map

package/dist/terraform/sim-tf-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-adapter.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-adapter.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,4BAA4B,EAAE,MAAM,oBAAoB,CAAC;AAClE,OAAO,EACL,qBAAqB,EACrB,8BAA8B,GAC/B,MAAM,uBAAuB,CAAC;AAsD/B;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,gBAAgB;IACV,MAAM,CAAS;IAEhC,YAAY,MAAc;QACxB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,UAAU,CACd,UAAkD;QAElD,MAAM,UAAU,GACd,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;QACzE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC;QAErD,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,4BAA4B,CACvD,MAAM,qBAAqB,CAAC,QAAQ,CAAC,EACrC,SAAS,CACV,CAAC;QAEF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC,cAAc,CAAC;YAC9D,SAAS,EACP,UAAU,CAAC,SAAS,IAAI,8BAA8B,CAAC,QAAQ,CAAC;YAClE,QAAQ;YACR,QAAQ;SACT,CAAC,CAAC;QAEH,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAC3B,CAAC;CACF"}

package/dist/terraform/sim-tf-attribute-reads.d.ts

@@ -0,0 +1,12 @@
+/**
+ * How one Terraform attribute is read off the CloudFormation Resource standing
+ * in for it.
+ *
+ * `Ref` means the CloudFormation Resource's own Ref value returns it, and any
+ * other string is the `Fn::GetAtt` attribute name. The table is per Terraform
+ * type because the provider and CloudFormation disagree about which value is
+ * the Ref. An `AWS::SNS::Topic` Ref is the topic ARN, an `AWS::SQS::Queue` Ref
+ * is the queue URL, and an `AWS::S3::Bucket` Ref is the bucket name.
+ */
+export declare const terraformAttributeReads: ReadonlyMap<string, string>;
+//# sourceMappingURL=sim-tf-attribute-reads.d.ts.map

package/dist/terraform/sim-tf-attribute-reads.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-attribute-reads.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-attribute-reads.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,eAAO,MAAM,uBAAuB,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAgD9D,CAAC"}

package/dist/terraform/sim-tf-attribute-reads.js

@@ -0,0 +1,60 @@
+/**
+ * How one Terraform attribute is read off the CloudFormation Resource standing
+ * in for it.
+ *
+ * `Ref` means the CloudFormation Resource's own Ref value returns it, and any
+ * other string is the `Fn::GetAtt` attribute name. The table is per Terraform
+ * type because the provider and CloudFormation disagree about which value is
+ * the Ref. An `AWS::SNS::Topic` Ref is the topic ARN, an `AWS::SQS::Queue` Ref
+ * is the queue URL, and an `AWS::S3::Bucket` Ref is the bucket name.
+ */
+export const terraformAttributeReads = new Map([
+    ["aws_s3_bucket.id", "Ref"],
+    ["aws_s3_bucket.bucket", "Ref"],
+    ["aws_s3_bucket.arn", "Arn"],
+    ["aws_s3_bucket.bucket_regional_domain_name", "RegionalDomainName"],
+    ["aws_s3_bucket.bucket_domain_name", "DomainName"],
+    ["aws_dynamodb_table.id", "Ref"],
+    ["aws_dynamodb_table.name", "Ref"],
+    ["aws_dynamodb_table.arn", "Arn"],
+    ["aws_dynamodb_table.stream_arn", "StreamArn"],
+    ["aws_sqs_queue.id", "Ref"],
+    ["aws_sqs_queue.url", "Ref"],
+    ["aws_sqs_queue.arn", "Arn"],
+    ["aws_sqs_queue.name", "QueueName"],
+    ["aws_sns_topic.id", "Ref"],
+    ["aws_sns_topic.arn", "Ref"],
+    ["aws_sns_topic.name", "TopicName"],
+    ["aws_lambda_function.arn", "Arn"],
+    /*
+     * `invoke_arn` is the API Gateway invocation URI in Terraform, and the
+     * CloudFormation property it feeds, `IntegrationUri`, takes the function ARN
+     * itself. The ARN is what a synthesized template carries, so that is what
+     * this reads. `qualified_arn` has no entry, because it names a version and
+     * dropping the qualifier would point at the wrong code.
+     */
+    ["aws_lambda_function.invoke_arn", "Arn"],
+    ["aws_lambda_function.function_name", "Ref"],
+    ["aws_lambda_function.id", "Ref"],
+    ["aws_iam_role.arn", "Arn"],
+    ["aws_iam_role.id", "Ref"],
+    ["aws_iam_role.name", "Ref"],
+    ["aws_kms_key.arn", "Arn"],
+    ["aws_kms_key.id", "Ref"],
+    ["aws_kms_key.key_id", "Ref"],
+    ["aws_apigatewayv2_api.id", "Ref"],
+    ["aws_apigatewayv2_api.api_endpoint", "ApiEndpoint"],
+    ["aws_apigatewayv2_integration.id", "Ref"],
+    ["aws_cognito_user_pool.id", "Ref"],
+    ["aws_cognito_user_pool.arn", "Arn"],
+    ["aws_cognito_user_pool_client.id", "Ref"],
+    ["aws_cloudwatch_log_group.arn", "Arn"],
+    ["aws_cloudwatch_log_group.name", "Ref"],
+    ["aws_cloudwatch_event_rule.arn", "Arn"],
+    ["aws_cloudwatch_event_rule.name", "Ref"],
+    ["aws_secretsmanager_secret.id", "Ref"],
+    ["aws_secretsmanager_secret.arn", "Ref"],
+    ["aws_ecr_repository.arn", "Arn"],
+    ["aws_ecr_repository.repository_url", "RepositoryUri"],
+]);
+//# sourceMappingURL=sim-tf-attribute-reads.js.map

package/dist/terraform/sim-tf-attribute-reads.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-attribute-reads.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-attribute-reads.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAgC,IAAI,GAAG,CAAC;IAC1E,CAAC,kBAAkB,EAAE,KAAK,CAAC;IAC3B,CAAC,sBAAsB,EAAE,KAAK,CAAC;IAC/B,CAAC,mBAAmB,EAAE,KAAK,CAAC;IAC5B,CAAC,2CAA2C,EAAE,oBAAoB,CAAC;IACnE,CAAC,kCAAkC,EAAE,YAAY,CAAC;IAClD,CAAC,uBAAuB,EAAE,KAAK,CAAC;IAChC,CAAC,yBAAyB,EAAE,KAAK,CAAC;IAClC,CAAC,wBAAwB,EAAE,KAAK,CAAC;IACjC,CAAC,+BAA+B,EAAE,WAAW,CAAC;IAC9C,CAAC,kBAAkB,EAAE,KAAK,CAAC;IAC3B,CAAC,mBAAmB,EAAE,KAAK,CAAC;IAC5B,CAAC,mBAAmB,EAAE,KAAK,CAAC;IAC5B,CAAC,oBAAoB,EAAE,WAAW,CAAC;IACnC,CAAC,kBAAkB,EAAE,KAAK,CAAC;IAC3B,CAAC,mBAAmB,EAAE,KAAK,CAAC;IAC5B,CAAC,oBAAoB,EAAE,WAAW,CAAC;IACnC,CAAC,yBAAyB,EAAE,KAAK,CAAC;IAClC;;;;;;OAMG;IACH,CAAC,gCAAgC,EAAE,KAAK,CAAC;IACzC,CAAC,mCAAmC,EAAE,KAAK,CAAC;IAC5C,CAAC,wBAAwB,EAAE,KAAK,CAAC;IACjC,CAAC,kBAAkB,EAAE,KAAK,CAAC;IAC3B,CAAC,iBAAiB,EAAE,KAAK,CAAC;IAC1B,CAAC,mBAAmB,EAAE,KAAK,CAAC;IAC5B,CAAC,iBAAiB,EAAE,KAAK,CAAC;IAC1B,CAAC,gBAAgB,EAAE,KAAK,CAAC;IACzB,CAAC,oBAAoB,EAAE,KAAK,CAAC;IAC7B,CAAC,yBAAyB,EAAE,KAAK,CAAC;IAClC,CAAC,mCAAmC,EAAE,aAAa,CAAC;IACpD,CAAC,iCAAiC,EAAE,KAAK,CAAC;IAC1C,CAAC,0BAA0B,EAAE,KAAK,CAAC;IACnC,CAAC,2BAA2B,EAAE,KAAK,CAAC;IACpC,CAAC,iCAAiC,EAAE,KAAK,CAAC;IAC1C,CAAC,8BAA8B,EAAE,KAAK,CAAC;IACvC,CAAC,+BAA+B,EAAE,KAAK,CAAC;IACxC,CAAC,+BAA+B,EAAE,KAAK,CAAC;IACxC,CAAC,gCAAgC,EAAE,KAAK,CAAC;IACzC,CAAC,8BAA8B,EAAE,KAAK,CAAC;IACvC,CAAC,+BAA+B,EAAE,KAAK,CAAC;IACxC,CAAC,wBAAwB,EAAE,KAAK,CAAC;IACjC,CAAC,mCAAmC,EAAE,eAAe,CAAC;CACvD,CAAC,CAAC"}

package/dist/terraform/sim-tf-attributes.d.ts

@@ -0,0 +1,69 @@
+import type { SimCfnTemplateValue } from "../service/cloudformation/template/value/sim-cfn-template-value.js";
+import type { TerraformResource } from "./sim-tf-resource.type.js";
+import type { TerraformReferenceResolver } from "./sim-tf-reference.js";
+import type { TerraformPlanOverrides } from "./sim-tf-overrides.js";
+/**
+ * What a mapping resolves against, which is the same for every resource of one
+ * plan. A settled plan carries these two, so it is one of these.
+ */
+export interface TerraformBuildContext {
+    readonly resolver: TerraformReferenceResolver;
+    /** What the deployment supplied for the values the plan could not carry. */
+    readonly overrides: TerraformPlanOverrides;
+}
+/**
+ * What a mapping function is given to build one CloudFormation Resource.
+ */
+export interface TerraformMappingContext extends TerraformBuildContext {
+    readonly resource: TerraformResource;
+}
+/**
+ * The value of one Terraform attribute, as CloudFormation would carry it.
+ *
+ * An attribute the plan resolved returns its value. An attribute still unknown
+ * returns the intrinsic that reads it off the Resource producing it, taken from
+ * the reference the configuration records for that attribute. An attribute with
+ * neither returns undefined.
+ */
+export declare function attribute(context: TerraformMappingContext, key: string): SimCfnTemplateValue | undefined;
+/**
+ * A Terraform nested block, which the plan represents as a list of records even
+ * where the schema allows only one.
+ */
+export declare function block(context: TerraformMappingContext, key: string): Record<string, unknown> | undefined;
+/** Every entry of a Terraform nested block that repeats. */
+export declare function blocks(context: TerraformMappingContext, key: string): readonly Record<string, unknown>[];
+/**
+ * A CloudFormation `Tags` list built from a Terraform `tags` map.
+ *
+ * The provider also carries `tags_all`, which is `tags` merged with the
+ * provider's default tags. `tags_all` is the one that ends up on the resource.
+ */
+export declare function tags(context: TerraformMappingContext): SimCfnTemplateValue | undefined;
+/**
+ * One key of a Terraform attribute record.
+ *
+ * Provider attribute names are snake case, which this project's TypeScript
+ * settings will not let through a dotted access on an index signature.
+ */
+export declare function field(record: Record<string, unknown>, key: string): unknown;
+/**
+ * A Terraform value, carried as the template value CloudFormation reads.
+ *
+ * Only an absent value comes back undefined. `false`, `0` and `""` are values
+ * a resource was configured with, and a truthiness test here would drop
+ * `block_public_acls = false` as though it had never been written.
+ */
+export declare function templateValue(value: unknown): SimCfnTemplateValue | undefined;
+/**
+ * CloudFormation properties read straight off Terraform attributes.
+ *
+ * The table is keyed by CloudFormation property name and holds the Terraform
+ * attribute each one is read from. Most of a mapping is this, because most
+ * properties differ only in what they are called, and the ones that need more
+ * than a rename are added to what this returns.
+ */
+export declare function renamed(context: TerraformMappingContext, names: Readonly<Record<string, string>>): Record<string, SimCfnTemplateValue>;
+/** A property record with the keys carrying no value taken back out of it. */
+export declare function properties(record: Record<string, SimCfnTemplateValue | undefined>): Record<string, SimCfnTemplateValue>;
+//# sourceMappingURL=sim-tf-attributes.d.ts.map

package/dist/terraform/sim-tf-attributes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-attributes.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-attributes.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oEAAoE,CAAC;AAC9G,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AACxE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAIpE;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;IAC9C,4EAA4E;IAC5E,QAAQ,CAAC,SAAS,EAAE,sBAAsB,CAAC;CAC5C;AAED;;GAEG;AACH,MAAM,WAAW,uBAAwB,SAAQ,qBAAqB;IACpE,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;CACtC;AAED;;;;;;;GAOG;AACH,wBAAgB,SAAS,CACvB,OAAO,EAAE,uBAAuB,EAChC,GAAG,EAAE,MAAM,GACV,mBAAmB,GAAG,SAAS,CAQjC;AAqCD;;;GAGG;AACH,wBAAgB,KAAK,CACnB,OAAO,EAAE,uBAAuB,EAChC,GAAG,EAAE,MAAM,GACV,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAYrC;AAED,4DAA4D;AAC5D,wBAAgB,MAAM,CACpB,OAAO,EAAE,uBAAuB,EAChC,GAAG,EAAE,MAAM,GACV,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAIpC;AAED;;;;;GAKG;AACH,wBAAgB,IAAI,CAClB,OAAO,EAAE,uBAAuB,GAC/B,mBAAmB,GAAG,SAAS,CAcjC;AAED;;;;;GAKG;AACH,wBAAgB,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAE3E;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,mBAAmB,GAAG,SAAS,CAM7E;AAED;;;;;;;GAOG;AACH,wBAAgB,OAAO,CACrB,OAAO,EAAE,uBAAuB,EAChC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GACtC,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAMrC;AAED,8EAA8E;AAC9E,wBAAgB,UAAU,CACxB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,GAAG,SAAS,CAAC,GACtD,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAMrC"}