@kensio/yulin 1.19.1 → 1.19.3

package/dist/terraform/sim-tf-attributes.js

@@ -0,0 +1,121 @@
+/*
+ * Reading a plan means reading records whose keys come from the document
+ * rather than from this code, so the object-injection rule fires on every
+ * lookup. The records are parsed JSON with no prototype of their own.
+ */
+// oxlint-disable security/detect-object-injection
+import { isRecord } from "../util/type-guard/record.js";
+import { longestFirst } from "./sim-tf-reference-address.js";
+/**
+ * The value of one Terraform attribute, as CloudFormation would carry it.
+ *
+ * An attribute the plan resolved returns its value. An attribute still unknown
+ * returns the intrinsic that reads it off the Resource producing it, taken from
+ * the reference the configuration records for that attribute. An attribute with
+ * neither returns undefined.
+ */
+export function attribute(context, key) {
+    const { resource, resolver } = context;
+    if (resource.unknown[key] === true) {
+        return referencedValue(resource, key, resolver);
+    }
+    return templateValue(resource.values[key]);
+}
+/**
+ * The intrinsic one unknown attribute reads, from the references its
+ * expression records.
+ *
+ * Terraform lists the attribute form and the bare resource form of the same
+ * reference. The attribute form resolves to a `Fn::GetAtt` and is the one
+ * wanted, so the first reference that resolves at all wins, and the list is
+ * ordered longest first to reach it.
+ */
+function referencedValue(resource, key, resolver) {
+    const expression = resource.expressions[key];
+    if (!isRecord(expression)) {
+        return undefined;
+    }
+    const references = longestFirst(expression.references ?? []);
+    for (const reference of references) {
+        const resolved = resolver.resolve(reference, resource.modulePath);
+        if (resolved !== undefined) {
+            return resolved;
+        }
+    }
+    return undefined;
+}
+/**
+ * A Terraform nested block, which the plan represents as a list of records even
+ * where the schema allows only one.
+ */
+export function block(context, key) {
+    const value = context.resource.values[key];
+    if (isRecord(value)) {
+        return value;
+    }
+    if (Array.isArray(value) && isRecord(value[0])) {
+        return value[0];
+    }
+    return undefined;
+}
+/** Every entry of a Terraform nested block that repeats. */
+export function blocks(context, key) {
+    const value = context.resource.values[key];
+    return Array.isArray(value) ? value.filter((entry) => isRecord(entry)) : [];
+}
+/**
+ * A CloudFormation `Tags` list built from a Terraform `tags` map.
+ *
+ * The provider also carries `tags_all`, which is `tags` merged with the
+ * provider's default tags. `tags_all` is the one that ends up on the resource.
+ */
+export function tags(context) {
+    const value = field(context.resource.values, "tags_all") ??
+        field(context.resource.values, "tags");
+    if (!isRecord(value)) {
+        return undefined;
+    }
+    const entries = Object.entries(value);
+    return entries.length === 0
+        ? undefined
+        : entries.map(([Key, Value]) => ({ Key, Value: Value }));
+}
+/**
+ * One key of a Terraform attribute record.
+ *
+ * Provider attribute names are snake case, which this project's TypeScript
+ * settings will not let through a dotted access on an index signature.
+ */
+export function field(record, key) {
+    return record[key];
+}
+/**
+ * A Terraform value, carried as the template value CloudFormation reads.
+ *
+ * Only an absent value comes back undefined. `false`, `0` and `""` are values
+ * a resource was configured with, and a truthiness test here would drop
+ * `block_public_acls = false` as though it had never been written.
+ */
+export function templateValue(value) {
+    if (value === null || value === undefined) {
+        return undefined;
+    }
+    return value;
+}
+/**
+ * CloudFormation properties read straight off Terraform attributes.
+ *
+ * The table is keyed by CloudFormation property name and holds the Terraform
+ * attribute each one is read from. Most of a mapping is this, because most
+ * properties differ only in what they are called, and the ones that need more
+ * than a rename are added to what this returns.
+ */
+export function renamed(context, names) {
+    const entries = Object.entries(names).map(([property, name]) => [property, attribute(context, name)]);
+    return properties(Object.fromEntries(entries));
+}
+/** A property record with the keys carrying no value taken back out of it. */
+export function properties(record) {
+    return Object.fromEntries(Object.entries(record).filter((entry) => entry[1] !== undefined));
+}
+//# sourceMappingURL=sim-tf-attributes.js.map

package/dist/terraform/sim-tf-attributes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-attributes.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-attributes.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,kDAAkD;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAKxD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAoB7D;;;;;;;GAOG;AACH,MAAM,UAAU,SAAS,CACvB,OAAgC,EAChC,GAAW;IAEX,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAEvC,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;QACnC,OAAO,eAAe,CAAC,QAAQ,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IAClD,CAAC;IAED,OAAO,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,eAAe,CACtB,QAA2B,EAC3B,GAAW,EACX,QAAoC;IAEpC,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAE7C,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,UAAU,GAAG,YAAY,CAC5B,UAAkC,CAAC,UAAU,IAAI,EAAE,CACrD,CAAC;IAEF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;QAElE,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,KAAK,CACnB,OAAgC,EAChC,GAAW;IAEX,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAE3C,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACpB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,MAAM,CACpB,OAAgC,EAChC,GAAW;IAEX,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAE3C,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9E,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,IAAI,CAClB,OAAgC;IAEhC,MAAM,KAAK,GACT,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;QAC1C,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEzC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAEtC,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC;QACzB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,KAAe,EAAE,CAAC,CAAC,CAAC;AACvE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,KAAK,CAAC,MAA+B,EAAE,GAAW;IAChE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;AACrB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,KAA4B,CAAC;AACtC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,OAAO,CACrB,OAAgC,EAChC,KAAuC;IAEvC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CACvC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAU,CACpE,CAAC;IAEF,OAAO,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,UAAU,CACxB,MAAuD;IAEvD,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAC3B,CAAC,KAAK,EAA0C,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAC1E,CACF,CAAC;AACJ,CAAC"}

package/dist/terraform/sim-tf-declare.d.ts

@@ -0,0 +1,37 @@
+import type { SimCfnTemplateValueRecord } from "../service/cloudformation/template/value/sim-cfn-template-value.js";
+import type { TerraformResource } from "./sim-tf-resource.type.js";
+import type { TerraformReferenceResolver } from "./sim-tf-reference.js";
+import type { TerraformSettledPlan } from "./sim-tf-settle.js";
+import type { TerraformImportedResource, TerraformLostAttribute } from "./sim-tf-report.type.js";
+/** The Resources a settled plan declares, and what they could not carry. */
+export interface TerraformDeclaredResources {
+    readonly templates: ReadonlyMap<string, SimCfnTemplateValueRecord>;
+    readonly mapped: readonly TerraformImportedResource[];
+    readonly lost: readonly TerraformLostAttribute[];
+}
+/**
+ * Build one CloudFormation Resource for each resource the plan settled on.
+ *
+ * Every reference resolves against that same settled set, so this runs once
+ * and nothing it produces is taken back afterwards.
+ */
+export declare function terraformDeclaredResources(settled: TerraformSettledPlan): TerraformDeclaredResources;
+/**
+ * The Resources one Resource has to be created after.
+ *
+ * A CloudFormation template orders itself, because a property that needs
+ * another Resource holds a `Ref` or an `Fn::GetAtt` naming it. A plan holds no
+ * such thing. Terraform resolves what it can before writing the plan, so a
+ * Lambda permission naming a function it creates in the same plan carries the
+ * function's name as a plain string, and the edge that ordering depends on is
+ * gone from the value.
+ *
+ * The edge survives in `configuration`, which records every reference the
+ * resource declares whether or not the value was resolved. Turning those back
+ * into `DependsOn` gives the Stack the graph it would have read off a template
+ * written by hand.
+ */
+export declare function terraformDependsOn(resource: TerraformResource, resolver: TerraformReferenceResolver): {
+    DependsOn?: string[];
+};
+//# sourceMappingURL=sim-tf-declare.d.ts.map

package/dist/terraform/sim-tf-declare.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-declare.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-declare.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oEAAoE,CAAC;AACpH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AACxE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,KAAK,EACV,yBAAyB,EACzB,sBAAsB,EACvB,MAAM,yBAAyB,CAAC;AAEjC,4EAA4E;AAC5E,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;IACnE,QAAQ,CAAC,MAAM,EAAE,SAAS,yBAAyB,EAAE,CAAC;IACtD,QAAQ,CAAC,IAAI,EAAE,SAAS,sBAAsB,EAAE,CAAC;CAClD;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,oBAAoB,GAC5B,0BAA0B,CAiC5B;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,iBAAiB,EAC3B,QAAQ,EAAE,0BAA0B,GACnC;IAAE,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,CAe1B"}

package/dist/terraform/sim-tf-declare.js

@@ -0,0 +1,83 @@
+/*
+ * Reading a plan means reading records whose keys come from the document
+ * rather than from this code, so the object-injection rule fires on every
+ * lookup. The records are parsed JSON with no prototype of their own.
+ */
+// oxlint-disable security/detect-object-injection
+import { isRecord } from "../util/type-guard/record.js";
+/**
+ * Build one CloudFormation Resource for each resource the plan settled on.
+ *
+ * Every reference resolves against that same settled set, so this runs once
+ * and nothing it produces is taken back afterwards.
+ */
+export function terraformDeclaredResources(settled) {
+    const templates = new Map();
+    const mapped = [];
+    const lost = [];
+    for (const { resource, mapping } of settled.declared) {
+        const built = mapping({
+            resource,
+            resolver: settled.resolver,
+            overrides: settled.overrides,
+        });
+        const logicalId = settled.resolver.logicalId(resource.address);
+        templates.set(logicalId, {
+            Type: built.Type,
+            Properties: built.Properties,
+            ...terraformDependsOn(resource, settled.resolver),
+        });
+        mapped.push({
+            address: resource.address,
+            type: resource.type,
+            cfnType: built.Type,
+            logicalId,
+        });
+        lost.push(...(built.lost ?? []).map((attribute) => ({
+            address: resource.address,
+            attribute,
+        })));
+    }
+    return { templates, mapped, lost };
+}
+/**
+ * The Resources one Resource has to be created after.
+ *
+ * A CloudFormation template orders itself, because a property that needs
+ * another Resource holds a `Ref` or an `Fn::GetAtt` naming it. A plan holds no
+ * such thing. Terraform resolves what it can before writing the plan, so a
+ * Lambda permission naming a function it creates in the same plan carries the
+ * function's name as a plain string, and the edge that ordering depends on is
+ * gone from the value.
+ *
+ * The edge survives in `configuration`, which records every reference the
+ * resource declares whether or not the value was resolved. Turning those back
+ * into `DependsOn` gives the Stack the graph it would have read off a template
+ * written by hand.
+ */
+export function terraformDependsOn(resource, resolver) {
+    const own = resolver.logicalId(resource.address);
+    const referenced = [
+        ...resource.dependsOn,
+        ...expressionReferences(resource.expressions),
+    ]
+        .map((reference) => resolver.targetAddress(reference, resource.modulePath))
+        .filter((address) => address !== undefined)
+        .map((address) => resolver.logicalId(address))
+        .filter((logicalId) => logicalId !== own);
+    const declared = [...new Set(referenced)];
+    return declared.length === 0 ? {} : { DependsOn: declared };
+}
+/** Every `references` entry anywhere inside a resource's expressions. */
+function expressionReferences(value) {
+    if (Array.isArray(value)) {
+        return value.flatMap((entry) => expressionReferences(entry));
+    }
+    if (!isRecord(value)) {
+        return [];
+    }
+    return Object.entries(value).flatMap(([key, nested]) => key === "references" && Array.isArray(nested)
+        ? nested.filter((entry) => typeof entry === "string")
+        : expressionReferences(nested));
+}
+//# sourceMappingURL=sim-tf-declare.js.map

package/dist/terraform/sim-tf-declare.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-declare.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-declare.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,kDAAkD;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAiBxD;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CACxC,OAA6B;IAE7B,MAAM,SAAS,GAAG,IAAI,GAAG,EAAqC,CAAC;IAC/D,MAAM,MAAM,GAAgC,EAAE,CAAC;IAC/C,MAAM,IAAI,GAA6B,EAAE,CAAC;IAE1C,KAAK,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrD,MAAM,KAAK,GAAG,OAAO,CAAC;YACpB,QAAQ;YACR,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAE/D,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE;YACvB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,GAAG,kBAAkB,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC;SAClD,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC;YACV,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,OAAO,EAAE,KAAK,CAAC,IAAI;YACnB,SAAS;SACV,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CACP,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YACxC,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,SAAS;SACV,CAAC,CAAC,CACJ,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AACrC,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAA2B,EAC3B,QAAoC;IAEpC,MAAM,GAAG,GAAG,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAEjD,MAAM,UAAU,GAAG;QACjB,GAAG,QAAQ,CAAC,SAAS;QACrB,GAAG,oBAAoB,CAAC,QAAQ,CAAC,WAAW,CAAC;KAC9C;SACE,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;SAC1E,MAAM,CAAC,CAAC,OAAO,EAAqB,EAAE,CAAC,OAAO,KAAK,SAAS,CAAC;SAC7D,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;SAC7C,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,GAAG,CAAC,CAAC;IAE5C,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;IAE1C,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AAC9D,CAAC;AAED,yEAAyE;AACzE,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,CACrD,GAAG,KAAK,YAAY,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAC3C,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;QACtE,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,CACjC,CAAC;AACJ,CAAC"}

package/dist/terraform/sim-tf-fold.d.ts

@@ -0,0 +1,26 @@
+import type { SimCfnTemplateValueRecord } from "../service/cloudformation/template/value/sim-cfn-template-value.js";
+import { type TerraformResource } from "./sim-tf-resource.type.js";
+import type { TerraformReferenceResolver } from "./sim-tf-reference.js";
+import type { TerraformPlanOverrides } from "./sim-tf-overrides.js";
+import type { TerraformImportedResource, TerraformLostAttribute, TerraformSkippedResource } from "./sim-tf-report.type.js";
+/** The template with every folding resource merged into what it configures. */
+export interface TerraformFoldedResources {
+    readonly templates: ReadonlyMap<string, SimCfnTemplateValueRecord>;
+    readonly folded: readonly TerraformImportedResource[];
+    readonly skipped: readonly TerraformSkippedResource[];
+    readonly lost: readonly TerraformLostAttribute[];
+}
+/**
+ * Merge every folding resource into the Resource it configures.
+ *
+ * The AWS provider splits one CloudFormation Resource across several Terraform
+ * resources. Six `aws_s3_bucket_*` resources configure one bucket, and
+ * CloudFormation carries all six as properties of one `AWS::S3::Bucket`.
+ *
+ * This runs after the Resources are declared, because a fold has nothing to
+ * merge into until its parent is in the template. A fold whose parent is not
+ * there is recorded rather than dropped, so the report still adds up to the
+ * plan.
+ */
+export declare function terraformFoldedResources(resources: readonly TerraformResource[], templates: ReadonlyMap<string, SimCfnTemplateValueRecord>, resolver: TerraformReferenceResolver, overrides: TerraformPlanOverrides): TerraformFoldedResources;
+//# sourceMappingURL=sim-tf-fold.d.ts.map

package/dist/terraform/sim-tf-fold.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-fold.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-fold.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oEAAoE,CAAC;AACpH,OAAO,EAEL,KAAK,iBAAiB,EACvB,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AAExE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAEpE,OAAO,KAAK,EACV,yBAAyB,EACzB,sBAAsB,EACtB,wBAAwB,EACzB,MAAM,yBAAyB,CAAC;AAEjC,+EAA+E;AAC/E,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;IACnE,QAAQ,CAAC,MAAM,EAAE,SAAS,yBAAyB,EAAE,CAAC;IACtD,QAAQ,CAAC,OAAO,EAAE,SAAS,wBAAwB,EAAE,CAAC;IACtD,QAAQ,CAAC,IAAI,EAAE,SAAS,sBAAsB,EAAE,CAAC;CAClD;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,SAAS,iBAAiB,EAAE,EACvC,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,yBAAyB,CAAC,EACzD,QAAQ,EAAE,0BAA0B,EACpC,SAAS,EAAE,sBAAsB,GAChC,wBAAwB,CA8C1B"}

package/dist/terraform/sim-tf-fold.js

@@ -0,0 +1,72 @@
+/*
+ * Reading a plan means reading records whose keys come from the document
+ * rather than from this code, so the object-injection rule fires on every
+ * lookup. The records are parsed JSON with no prototype of their own.
+ */
+// oxlint-disable security/detect-object-injection
+import { isRecord } from "../util/type-guard/record.js";
+import { terraformAwsProvider, } from "./sim-tf-resource.type.js";
+import { terraformReferencedAddress } from "./sim-tf-referenced.js";
+import { terraformResourceFolds } from "./sim-tf-registry.js";
+/**
+ * Merge every folding resource into the Resource it configures.
+ *
+ * The AWS provider splits one CloudFormation Resource across several Terraform
+ * resources. Six `aws_s3_bucket_*` resources configure one bucket, and
+ * CloudFormation carries all six as properties of one `AWS::S3::Bucket`.
+ *
+ * This runs after the Resources are declared, because a fold has nothing to
+ * merge into until its parent is in the template. A fold whose parent is not
+ * there is recorded rather than dropped, so the report still adds up to the
+ * plan.
+ */
+export function terraformFoldedResources(resources, templates, resolver, overrides) {
+    const merged = new Map(templates);
+    const folded = [];
+    const skipped = [];
+    const lost = [];
+    for (const resource of resources) {
+        const fold = terraformResourceFolds.get(resource.type);
+        if (fold === undefined || resource.provider !== terraformAwsProvider) {
+            continue;
+        }
+        const address = terraformReferencedAddress(resource, fold.parentAttribute, resolver);
+        const parentId = address === undefined ? undefined : resolver.logicalId(address);
+        const parent = parentId === undefined ? undefined : merged.get(parentId);
+        if (parentId === undefined || parent === undefined) {
+            skipped.push({
+                address: resource.address,
+                type: resource.type,
+                reason: "fold target not found",
+            });
+            continue;
+        }
+        const context = { resource, resolver, overrides };
+        const existing = parent["Properties"];
+        const added = fold.properties(context, isRecord(existing) ? existing : {});
+        merged.set(parentId, mergedParent(parent, added));
+        folded.push({ address: resource.address, type: resource.type });
+        lost.push(...(fold.lost?.(context) ?? []).map((attribute) => ({
+            address: resource.address,
+            attribute,
+        })));
+    }
+    return { templates: merged, folded, skipped, lost };
+}
+/**
+ * A resource template with a fold's properties merged into it.
+ *
+ * The fold contributes whole CloudFormation properties, so a later fold on the
+ * same parent replaces a property an earlier one set rather than merging into
+ * it. Two folds writing the same property are two of one Terraform type, and a
+ * fold whose property is a list is handed what the parent already carries so
+ * it can add to it.
+ */
+function mergedParent(parent, added) {
+    const existing = parent["Properties"];
+    return {
+        ...parent,
+        Properties: { ...(isRecord(existing) && existing), ...added },
+    };
+}
+//# sourceMappingURL=sim-tf-fold.js.map

package/dist/terraform/sim-tf-fold.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-fold.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-fold.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,kDAAkD;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAExD,OAAO,EACL,oBAAoB,GAErB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AAEpE,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAe9D;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,wBAAwB,CACtC,SAAuC,EACvC,SAAyD,EACzD,QAAoC,EACpC,SAAiC;IAEjC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IAClC,MAAM,MAAM,GAAgC,EAAE,CAAC;IAC/C,MAAM,OAAO,GAA+B,EAAE,CAAC;IAC/C,MAAM,IAAI,GAA6B,EAAE,CAAC;IAE1C,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,sBAAsB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAEvD,IAAI,IAAI,KAAK,SAAS,IAAI,QAAQ,CAAC,QAAQ,KAAK,oBAAoB,EAAE,CAAC;YACrE,SAAS;QACX,CAAC;QAED,MAAM,OAAO,GAAG,0BAA0B,CACxC,QAAQ,EACR,IAAI,CAAC,eAAe,EACpB,QAAQ,CACT,CAAC;QACF,MAAM,QAAQ,GACZ,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAEzE,IAAI,QAAQ,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACnD,OAAO,CAAC,IAAI,CAAC;gBACX,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,MAAM,EAAE,uBAAuB;aAChC,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,MAAM,OAAO,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;QAClD,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAE3E,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;QAClD,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAChE,IAAI,CAAC,IAAI,CACP,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YAClD,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,SAAS;SACV,CAAC,CAAC,CACJ,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACtD,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,YAAY,CACnB,MAAiC,EACjC,KAAgC;IAEhC,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;IAEtC,OAAO;QACL,GAAG,MAAM;QACT,UAAU,EAAE,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,EAAE,GAAG,KAAK,EAAE;KAC9D,CAAC;AACJ,CAAC"}

package/dist/terraform/sim-tf-import.d.ts

@@ -0,0 +1,31 @@
+import type { CfnTemplateBodyRecord } from "../service/cloudformation/template/sim-cfn-template.js";
+import type { TerraformPlan } from "./sim-tf-plan.type.js";
+import type { TerraformPlanOverride } from "./sim-tf-override.type.js";
+import type { TerraformImportReport } from "./sim-tf-report.type.js";
+/** A CloudFormation template built from a plan, and what building it did. */
+export interface TerraformImportResult {
+    readonly template: CfnTemplateBodyRecord;
+    readonly report: TerraformImportReport;
+}
+/**
+ * A CloudFormation template body built from a Terraform plan.
+ *
+ * The plan is the JSON `terraform show -json` writes for a saved plan file.
+ * What comes back is the body `deployTemplate` takes, so everything below the
+ * template is the machinery a CloudFormation, CDK or SAM deployment already
+ * goes through.
+ *
+ * It is read in three passes. Settling decides which resources the template
+ * will declare, and it is what makes the two after it single passes. Every
+ * reference then resolves against a set that has stopped changing, so no
+ * Resource is built and then taken back, and no property is left naming a
+ * logical ID the template does not hold. Declaring builds those Resources.
+ * Folding merges in the resources that configure another resource.
+ *
+ * The report alongside the template says what happened to every resource of
+ * the plan. A type with no mapping is skipped and named, in the same spirit as
+ * the skipped Resources a Stack records for a CloudFormation type no simulated
+ * service models.
+ */
+export declare function cfnTemplateFromTerraformPlan(plan: TerraformPlan, supplied?: readonly TerraformPlanOverride[]): TerraformImportResult;
+//# sourceMappingURL=sim-tf-import.d.ts.map

package/dist/terraform/sim-tf-import.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-import.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-import.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wDAAwD,CAAC;AACpG,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAO3D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAErE,6EAA6E;AAC7E,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;CACxC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,aAAa,EACnB,QAAQ,GAAE,SAAS,qBAAqB,EAAO,GAC9C,qBAAqB,CAgBvB"}

package/dist/terraform/sim-tf-import.js

@@ -0,0 +1,38 @@
+import { terraformPlanResources } from "./sim-tf-plan-resources.js";
+import { settledTerraformPlan } from "./sim-tf-settle.js";
+import { terraformDeclaredResources } from "./sim-tf-declare.js";
+import { terraformFoldedResources } from "./sim-tf-fold.js";
+import { terraformImportReport } from "./sim-tf-report.js";
+import { TerraformPlanOverrides } from "./sim-tf-overrides.js";
+/**
+ * A CloudFormation template body built from a Terraform plan.
+ *
+ * The plan is the JSON `terraform show -json` writes for a saved plan file.
+ * What comes back is the body `deployTemplate` takes, so everything below the
+ * template is the machinery a CloudFormation, CDK or SAM deployment already
+ * goes through.
+ *
+ * It is read in three passes. Settling decides which resources the template
+ * will declare, and it is what makes the two after it single passes. Every
+ * reference then resolves against a set that has stopped changing, so no
+ * Resource is built and then taken back, and no property is left naming a
+ * logical ID the template does not hold. Declaring builds those Resources.
+ * Folding merges in the resources that configure another resource.
+ *
+ * The report alongside the template says what happened to every resource of
+ * the plan. A type with no mapping is skipped and named, in the same spirit as
+ * the skipped Resources a Stack records for a CloudFormation type no simulated
+ * service models.
+ */
+export function cfnTemplateFromTerraformPlan(plan, supplied = []) {
+    const overrides = new TerraformPlanOverrides(supplied);
+    const resources = terraformPlanResources(plan);
+    const settled = settledTerraformPlan(plan, resources, overrides);
+    const declared = terraformDeclaredResources(settled);
+    const folded = terraformFoldedResources(resources, declared.templates, settled.resolver, overrides);
+    return {
+        template: { Resources: Object.fromEntries(folded.templates) },
+        report: terraformImportReport({ resources, settled, declared, folded }),
+    };
+}
+//# sourceMappingURL=sim-tf-import.js.map

package/dist/terraform/sim-tf-import.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-import.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-import.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAU/D;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,4BAA4B,CAC1C,IAAmB,EACnB,QAAQ,GAAqC,EAAE;IAE/C,MAAM,SAAS,GAAG,IAAI,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACjE,MAAM,QAAQ,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,wBAAwB,CACrC,SAAS,EACT,QAAQ,CAAC,SAAS,EAClB,OAAO,CAAC,QAAQ,EAChB,SAAS,CACV,CAAC;IAEF,OAAO;QACL,QAAQ,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE;QAC7D,MAAM,EAAE,qBAAqB,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;KACxE,CAAC;AACJ,CAAC"}

package/dist/terraform/sim-tf-logical-id.d.ts

@@ -0,0 +1,27 @@
+/**
+ * The CloudFormation logical IDs standing for the addresses of one plan.
+ *
+ * A logical ID is alphanumeric, so the module path, the resource type, the
+ * name and any `count` or `for_each` key are folded into one camel-run.
+ * Folding loses the separators, and two addresses can therefore arrive at the
+ * same run. `aws_s3_bucket.foo_bar` and `aws_s3_bucket.fooBar` both give
+ * `AwsS3BucketFooBar`, and so do the `for_each` keys `a-b` and `a_b`.
+ *
+ * The addresses of a plan are named together rather than one at a time, so a
+ * collision can be given a number instead of refusing the plan. Addresses are
+ * sorted before they are named, so which of a colliding pair keeps the plain
+ * ID is decided by the plan rather than by the order the resources were read
+ * in.
+ */
+export declare class TerraformLogicalIds {
+    private readonly byAddress;
+    constructor(addresses: Iterable<string>);
+    /**
+     * The logical ID standing for one address.
+     *
+     * An address this was not built with is named as though it stood alone,
+     * which is what a caller asking about a resource outside the template wants.
+     */
+    of(address: string): string;
+}
+//# sourceMappingURL=sim-tf-logical-id.d.ts.map

package/dist/terraform/sim-tf-logical-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-logical-id.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-logical-id.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA8B;IAExD,YAAY,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,EAEtC;IAED;;;;;OAKG;IACI,EAAE,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEjC;CACF"}

package/dist/terraform/sim-tf-logical-id.js

@@ -0,0 +1,83 @@
+/**
+ * The CloudFormation logical IDs standing for the addresses of one plan.
+ *
+ * A logical ID is alphanumeric, so the module path, the resource type, the
+ * name and any `count` or `for_each` key are folded into one camel-run.
+ * Folding loses the separators, and two addresses can therefore arrive at the
+ * same run. `aws_s3_bucket.foo_bar` and `aws_s3_bucket.fooBar` both give
+ * `AwsS3BucketFooBar`, and so do the `for_each` keys `a-b` and `a_b`.
+ *
+ * The addresses of a plan are named together rather than one at a time, so a
+ * collision can be given a number instead of refusing the plan. Addresses are
+ * sorted before they are named, so which of a colliding pair keeps the plain
+ * ID is decided by the plan rather than by the order the resources were read
+ * in.
+ */
+export class TerraformLogicalIds {
+    byAddress;
+    constructor(addresses) {
+        this.byAddress = namedAddresses([...addresses].toSorted(byCodeUnit));
+    }
+    /**
+     * The logical ID standing for one address.
+     *
+     * An address this was not built with is named as though it stood alone,
+     * which is what a caller asking about a resource outside the template wants.
+     */
+    of(address) {
+        return this.byAddress.get(address) ?? camelRun(address);
+    }
+}
+/**
+ * Address order by code unit, over addresses that are already distinct.
+ *
+ * Which of a colliding pair keeps the plain logical ID follows from this, so
+ * it has to be the same everywhere. `localeCompare` orders by the collation
+ * rules of whatever locale the process is running under, and a template whose
+ * logical IDs move with the machine is one a test cannot name a Resource in.
+ */
+function byCodeUnit(a, b) {
+    return a < b ? -1 : 1;
+}
+function namedAddresses(addresses) {
+    const groups = new Map();
+    for (const address of addresses) {
+        const base = camelRun(address);
+        groups.set(base, [...(groups.get(base) ?? []), address]);
+    }
+    const taken = new Set(groups.keys());
+    const named = new Map();
+    for (const [base, group] of groups) {
+        for (const [position, address] of group.entries()) {
+            named.set(address, position === 0 ? base : numbered(base, taken));
+        }
+    }
+    return named;
+}
+/**
+ * The next free numbered form of a logical ID.
+ *
+ * Numbering starts at two, so the first of a colliding group keeps the name
+ * the address gives and the second reads as the second of that name. The
+ * search steps past a number already taken, since a numbered ID can collide
+ * with one an address arrived at on its own.
+ */
+function numbered(base, taken) {
+    for (let suffix = 2;; suffix += 1) {
+        const candidate = `${base}${suffix}`;
+        if (!taken.has(candidate)) {
+            taken.add(candidate);
+            return candidate;
+        }
+    }
+}
+/** One address as a single alphanumeric camel-run. */
+function camelRun(address) {
+    const alphanumeric = address
+        .split(/[^A-Za-z0-9]+/)
+        .filter((part) => part.length > 0)
+        .map((part) => part.charAt(0).toUpperCase() + part.slice(1))
+        .join("");
+    return alphanumeric.length > 0 ? alphanumeric : "Resource";
+}
+//# sourceMappingURL=sim-tf-logical-id.js.map

package/dist/terraform/sim-tf-logical-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-logical-id.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-logical-id.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,mBAAmB;IACb,SAAS,CAA8B;IAExD,YAAY,SAA2B;QACrC,IAAI,CAAC,SAAS,GAAG,cAAc,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;IACvE,CAAC;IAED;;;;;OAKG;IACI,EAAE,CAAC,OAAe;QACvB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC1D,CAAC;CACF;AAED;;;;;;;GAOG;AACH,SAAS,UAAU,CAAC,CAAS,EAAE,CAAS;IACtC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,cAAc,CAAC,SAA4B;IAClD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAC;IAE3C,KAAK,MAAM,OAAO,IAAI,SAAS,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;QAE/B,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IAExC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;QACnC,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAClD,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,QAAQ,CAAC,IAAY,EAAE,KAAkB;IAChD,KAAK,IAAI,MAAM,GAAG,CAAC,GAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,SAAS,GAAG,GAAG,IAAI,GAAG,MAAM,EAAE,CAAC;QAErC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1B,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAErB,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;AACH,CAAC;AAED,sDAAsD;AACtD,SAAS,QAAQ,CAAC,OAAe;IAC/B,MAAM,YAAY,GAAG,OAAO;SACzB,KAAK,CAAC,eAAe,CAAC;SACtB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;SACjC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SAC3D,IAAI,CAAC,EAAE,CAAC,CAAC;IAEZ,OAAO,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC;AAC7D,CAAC"}

package/dist/terraform/sim-tf-mapping.type.d.ts

@@ -0,0 +1,73 @@
+import type { SimCfnTemplateValue } from "../service/cloudformation/template/value/sim-cfn-template-value.js";
+import type { TerraformMappingContext } from "./sim-tf-attributes.js";
+import type { TerraformResource } from "./sim-tf-resource.type.js";
+import type { TerraformSkipReason } from "./sim-tf-report.type.js";
+/**
+ * One CloudFormation Resource built from one Terraform resource.
+ *
+ * `lost` names the Terraform attributes the mapping could not carry across.
+ * A mapping records them rather than dropping them quietly, because an
+ * attribute that goes missing without a word is the kind of gap that only turns
+ * up later as a test passing for the wrong reason.
+ */
+export interface TerraformMappedResource {
+    readonly Type: string;
+    readonly Properties: Record<string, SimCfnTemplateValue>;
+    readonly lost?: readonly string[];
+    /**
+     * Properties the simulated service will refuse the Resource without.
+     *
+     * A plan can leave a required value unresolvable, and a Resource built
+     * without it fails and takes the Stack's other Resources with it. Naming the
+     * properties here lets the import drop that one Resource and record it,
+     * which is what sim CloudFormation already does with a Resource type it
+     * cannot create.
+     */
+    readonly requires?: readonly string[];
+    /**
+     * Why this Resource is one the simulated service would refuse whatever the
+     * plan resolved.
+     *
+     * `requires` covers a property the service needs and the plan could not
+     * fill. This covers the other shape, where every property is there and one
+     * of them holds a value the target refuses. Terraform's `SecureString`
+     * parameter is the example. Real CloudFormation refuses that type on an
+     * `AWS::SSM::Parameter` because the plaintext would sit in the template, and
+     * so does the simulation, so a Resource built for one fails the Stack around
+     * it rather than only itself.
+     */
+    readonly refused?: TerraformSkipReason | undefined;
+}
+export type TerraformResourceMapping = (context: TerraformMappingContext) => TerraformMappedResource;
+/** One resource of a plan, with the mapping that will build its Resource. */
+export interface TerraformDeclaration {
+    readonly resource: TerraformResource;
+    readonly mapping: TerraformResourceMapping;
+}
+/**
+ * How one Terraform resource contributes to another resource's properties.
+ *
+ * The AWS provider splits a single CloudFormation Resource across several
+ * Terraform resources. Six `aws_s3_bucket_*` resources configure one bucket,
+ * and CloudFormation carries all six as properties of one `AWS::S3::Bucket`.
+ * A fold names the attribute holding the parent's address, and returns the
+ * properties to merge into the parent.
+ *
+ * The properties the parent already carries are given along with the resource,
+ * for the fold that adds to a list rather than setting a property outright. An
+ * EventBridge rule's targets are one Terraform resource each and one `Targets`
+ * list on the Resource, so the second target of a rule has to find the first.
+ * A fold writing a property of its own ignores them.
+ */
+export interface TerraformResourceFold {
+    /** The attribute naming the resource these properties belong to. */
+    readonly parentAttribute: string;
+    readonly properties: (context: TerraformMappingContext, parent?: Record<string, SimCfnTemplateValue>) => Record<string, SimCfnTemplateValue>;
+    /**
+     * The Terraform attributes this fold could not carry across, as a mapping's
+     * own `lost` names them. A fold that carries everything it was given
+     * declares none.
+     */
+    readonly lost?: (context: TerraformMappingContext) => readonly string[];
+}
+//# sourceMappingURL=sim-tf-mapping.type.d.ts.map