@kensio/yulin 1.19.1 → 1.19.3

package/dist/terraform/sim-tf-mapping.type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-mapping.type.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-mapping.type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oEAAoE,CAAC;AAC9G,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAEnE;;;;;;;GAOG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IACzD,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC;;;;;;;;OAQG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAEtC;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;CACpD;AAED,MAAM,MAAM,wBAAwB,GAAG,CACrC,OAAO,EAAE,uBAAuB,KAC7B,uBAAuB,CAAC;AAE7B,6EAA6E;AAC7E,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,wBAAwB,CAAC;CAC5C;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,qBAAqB;IACpC,oEAAoE;IACpE,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,CACnB,OAAO,EAAE,uBAAuB,EAChC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,KACzC,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IAEzC;;;;OAIG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,uBAAuB,KAAK,SAAS,MAAM,EAAE,CAAC;CACzE"}

package/dist/terraform/sim-tf-mapping.type.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sim-tf-mapping.type.js.map

package/dist/terraform/sim-tf-mapping.type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-mapping.type.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-mapping.type.ts"],"names":[],"mappings":""}

package/dist/terraform/sim-tf-module-outputs.d.ts

@@ -0,0 +1,11 @@
+import type { TerraformPlan } from "./sim-tf-plan.type.js";
+/**
+ * Every module output a plan declares, keyed by the address that reads it.
+ *
+ * A resource in one module reaching a resource in another goes through an
+ * output. `module.processor.lambda_function_arn` is not an address any resource
+ * has, and the plan resolves nothing for it, so following it means reading the
+ * output's own expression and continuing from the module that declares it.
+ */
+export declare function terraformModuleOutputs(plan: TerraformPlan): ReadonlyMap<string, readonly string[]>;
+//# sourceMappingURL=sim-tf-module-outputs.d.ts.map

package/dist/terraform/sim-tf-module-outputs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-module-outputs.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-module-outputs.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,aAAa,EACd,MAAM,uBAAuB,CAAC;AAE/B;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,aAAa,GAClB,WAAW,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CASxC"}

package/dist/terraform/sim-tf-module-outputs.js

@@ -0,0 +1,33 @@
+/**
+ * Every module output a plan declares, keyed by the address that reads it.
+ *
+ * A resource in one module reaching a resource in another goes through an
+ * output. `module.processor.lambda_function_arn` is not an address any resource
+ * has, and the plan resolves nothing for it, so following it means reading the
+ * output's own expression and continuing from the module that declares it.
+ */
+export function terraformModuleOutputs(plan) {
+    const outputs = new Map();
+    const root = plan.configuration?.root_module;
+    if (root !== undefined) {
+        collect(root, [], outputs);
+    }
+    return outputs;
+}
+function collect(config, modulePath, outputs) {
+    const calls = Object.entries(config.module_calls ?? {});
+    for (const [callName, call] of calls) {
+        const child = call.module;
+        if (child === undefined) {
+            continue;
+        }
+        const childPath = [...modulePath, callName];
+        const address = childPath.map((name) => `module.${name}`).join(".");
+        const declared = Object.entries(child.outputs ?? {});
+        for (const [name, output] of declared) {
+            outputs.set(`${address}.${name}`, output.expression?.references ?? []);
+        }
+        collect(child, childPath, outputs);
+    }
+}
+//# sourceMappingURL=sim-tf-module-outputs.js.map

package/dist/terraform/sim-tf-module-outputs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-module-outputs.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-module-outputs.ts"],"names":[],"mappings":"AAKA;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CACpC,IAAmB;IAEnB,MAAM,OAAO,GAAG,IAAI,GAAG,EAA6B,CAAC;IACrD,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC;IAE7C,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;IAC7B,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,OAAO,CACd,MAA6B,EAC7B,UAA6B,EAC7B,OAAuC;IAEvC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IAExD,KAAK,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC;QAE1B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,SAAS;QACX,CAAC;QAED,MAAM,SAAS,GAAG,CAAC,GAAG,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEpE,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QAErD,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACtC,OAAO,CAAC,GAAG,CAAC,GAAG,OAAO,IAAI,IAAI,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC;QACzE,CAAC;QAED,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;AACH,CAAC"}

package/dist/terraform/sim-tf-nested-attributes.d.ts

@@ -0,0 +1,33 @@
+import type { SimCfnTemplateValue } from "../service/cloudformation/template/value/sim-cfn-template-value.js";
+import { type TerraformMappingContext } from "./sim-tf-attributes.js";
+/**
+ * A list attribute whose entries name other resources.
+ *
+ * An alarm's `alarm_actions` holding one topic ARN of the same plan is marked
+ * unknown as a whole list, and the entries are gone with it. What survives is
+ * the reference behind each entry, and Terraform lists both the attribute form
+ * and the bare resource form of one reference. Both forms of a topic resolve to
+ * the same `Ref`, so the resolved values are deduplicated rather than the
+ * references, which is the only place the two forms can be told apart.
+ *
+ * A list the plan resolved is carried across as it stands.
+ */
+export declare function attributeList(context: TerraformMappingContext, key: string): SimCfnTemplateValue | undefined;
+/**
+ * One attribute of one entry of a repeating nested block.
+ *
+ * A bucket notification names the function it calls inside a `lambda_function`
+ * block, and the function's ARN is unknown whenever the same plan creates it.
+ * The mark and the references both sit at the same position in a list mirroring
+ * the block, so the entry's index is what finds them.
+ */
+export declare function blockAttribute(context: TerraformMappingContext, key: string, index: number, name: string): SimCfnTemplateValue | undefined;
+/**
+ * The fields of one nested block, under the names CloudFormation gives them.
+ *
+ * The provider writes every field of a block that was declared, filling the
+ * ones the configuration left out with null, so the table says what each field
+ * is called on either side and `properties` takes the nulls back out.
+ */
+export declare function blockFields(record: Record<string, unknown>, names: Readonly<Record<string, string>>): Record<string, SimCfnTemplateValue>;
+//# sourceMappingURL=sim-tf-nested-attributes.d.ts.map

package/dist/terraform/sim-tf-nested-attributes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-nested-attributes.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-nested-attributes.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oEAAoE,CAAC;AAC9G,OAAO,EAGL,KAAK,uBAAuB,EAC7B,MAAM,wBAAwB,CAAC;AAIhC;;;;;;;;;;;GAWG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,uBAAuB,EAChC,GAAG,EAAE,MAAM,GACV,mBAAmB,GAAG,SAAS,CAqBjC;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,uBAAuB,EAChC,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,GACX,mBAAmB,GAAG,SAAS,CAmBjC;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CACzB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GACtC,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CASrC"}

package/dist/terraform/sim-tf-nested-attributes.js

@@ -0,0 +1,97 @@
+/*
+ * The two attribute shapes `attribute()` cannot read: a list whose entries name
+ * other resources, and an attribute inside a repeating nested block.
+ *
+ * `after_unknown` mirrors the shape of the value it marks, so a list of ARNs
+ * built from one resource is marked `true` whole, and a block whose one field
+ * is unknown is marked as a list of records. `configuration` mirrors the same
+ * shape with its `references`, and reading the two together is what puts the
+ * intrinsic back where the value was.
+ *
+ * Reading a plan means reading records whose keys come from the document
+ * rather than from this code, so the object-injection rule fires on every
+ * lookup. The records are parsed JSON with no prototype of their own.
+ */
+// oxlint-disable security/detect-object-injection
+import { isRecord } from "../util/type-guard/record.js";
+import { properties, templateValue, } from "./sim-tf-attributes.js";
+import { longestFirst } from "./sim-tf-reference-address.js";
+/**
+ * A list attribute whose entries name other resources.
+ *
+ * An alarm's `alarm_actions` holding one topic ARN of the same plan is marked
+ * unknown as a whole list, and the entries are gone with it. What survives is
+ * the reference behind each entry, and Terraform lists both the attribute form
+ * and the bare resource form of one reference. Both forms of a topic resolve to
+ * the same `Ref`, so the resolved values are deduplicated rather than the
+ * references, which is the only place the two forms can be told apart.
+ *
+ * A list the plan resolved is carried across as it stands.
+ */
+export function attributeList(context, key) {
+    const { resource, resolver } = context;
+    if (resource.unknown[key] !== true) {
+        const value = resource.values[key];
+        return Array.isArray(value) ? templateValue(value) : undefined;
+    }
+    const resolved = new Map();
+    const declared = longestFirst(references(resource.expressions[key]));
+    for (const reference of declared) {
+        const value = resolver.resolve(reference, resource.modulePath);
+        if (value !== undefined) {
+            resolved.set(JSON.stringify(value), value);
+        }
+    }
+    return resolved.size === 0 ? undefined : resolved.values().toArray();
+}
+/**
+ * One attribute of one entry of a repeating nested block.
+ *
+ * A bucket notification names the function it calls inside a `lambda_function`
+ * block, and the function's ARN is unknown whenever the same plan creates it.
+ * The mark and the references both sit at the same position in a list mirroring
+ * the block, so the entry's index is what finds them.
+ */
+export function blockAttribute(context, key, index, name) {
+    const { resource, resolver } = context;
+    if (entry(resource.unknown[key], index)?.[name] !== true) {
+        return templateValue(entry(resource.values[key], index)?.[name]);
+    }
+    const expression = entry(resource.expressions[key], index)?.[name];
+    const declared = longestFirst(references(expression));
+    for (const reference of declared) {
+        const value = resolver.resolve(reference, resource.modulePath);
+        if (value !== undefined) {
+            return value;
+        }
+    }
+    return undefined;
+}
+/**
+ * The fields of one nested block, under the names CloudFormation gives them.
+ *
+ * The provider writes every field of a block that was declared, filling the
+ * ones the configuration left out with null, so the table says what each field
+ * is called on either side and `properties` takes the nulls back out.
+ */
+export function blockFields(record, names) {
+    return properties(Object.fromEntries(Object.entries(names).map(([property, name]) => [
+        property,
+        templateValue(record[name]),
+    ])));
+}
+/** One entry of a list mirroring a repeating block. */
+function entry(value, index) {
+    if (!Array.isArray(value)) {
+        return undefined;
+    }
+    const found = value[index];
+    return isRecord(found) ? found : undefined;
+}
+/** The references one expression records, or none where it holds no expression. */
+function references(expression) {
+    return isRecord(expression)
+        ? (expression.references ?? [])
+        : [];
+}
+//# sourceMappingURL=sim-tf-nested-attributes.js.map

package/dist/terraform/sim-tf-nested-attributes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-nested-attributes.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-nested-attributes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,kDAAkD;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAExD,OAAO,EACL,UAAU,EACV,aAAa,GAEd,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAE7D;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,aAAa,CAC3B,OAAgC,EAChC,GAAW;IAEX,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAEvC,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAEnC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACjE,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA+B,CAAC;IACxD,MAAM,QAAQ,GAAG,YAAY,CAAC,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAErE,KAAK,MAAM,SAAS,IAAI,QAAQ,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;QAE/D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;AACvE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAC5B,OAAgC,EAChC,GAAW,EACX,KAAa,EACb,IAAY;IAEZ,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAEvC,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QACzD,OAAO,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,YAAY,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;IAEtD,KAAK,MAAM,SAAS,IAAI,QAAQ,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;QAE/D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CACzB,MAA+B,EAC/B,KAAuC;IAEvC,OAAO,UAAU,CACf,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;QAC9C,QAAQ;QACR,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;KAC5B,CAAC,CACH,CACF,CAAC;AACJ,CAAC;AAED,uDAAuD;AACvD,SAAS,KAAK,CACZ,KAAc,EACd,KAAa;IAEb,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,KAAK,GAAY,KAAK,CAAC,KAAK,CAAC,CAAC;IAEpC,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7C,CAAC;AAED,mFAAmF;AACnF,SAAS,UAAU,CAAC,UAAmB;IACrC,OAAO,QAAQ,CAAC,UAAU,CAAC;QACzB,CAAC,CAAC,CAAE,UAAkC,CAAC,UAAU,IAAI,EAAE,CAAC;QACxD,CAAC,CAAC,EAAE,CAAC;AACT,CAAC"}

package/dist/terraform/sim-tf-override.type.d.ts

@@ -0,0 +1,36 @@
+import type { SimIamPolicyDocument } from "../service/iam/policy/sim-iam-policy.js";
+/**
+ * A value a deployment supplies because the plan could not carry it.
+ *
+ * Terraform resolves nothing inside a value it could not build, so an
+ * attribute holding one reference to a resource of the same plan arrives
+ * unknown along with everything around it. A Lambda `environment.variables`
+ * map loses its variable names, and an `aws_iam_role_policy` document built
+ * with `jsonencode` loses its statements.
+ *
+ * An override is matched the way a deploy binding is, on the name the plan
+ * carries. It fills a gap and never replaces what the plan resolved, so a
+ * configuration that later resolves the value on its own stops needing one.
+ */
+export type TerraformPlanOverride = TerraformFunctionEnvironmentOverride | TerraformRolePolicyOverride;
+/** The environment variables of the function the plan names. */
+export interface TerraformFunctionEnvironmentOverride {
+    readonly functionName: string;
+    readonly environment: Readonly<Record<string, string>>;
+    readonly roleName?: never;
+    readonly policy?: never;
+}
+/**
+ * The inline policy of the role the plan names.
+ *
+ * The name is the role's own `name`, which is what a plan resolves for a role
+ * declared with one, rather than the name of the `aws_iam_role_policy`
+ * resource holding the document.
+ */
+export interface TerraformRolePolicyOverride {
+    readonly roleName: string;
+    readonly policy: SimIamPolicyDocument;
+    readonly functionName?: never;
+    readonly environment?: never;
+}
+//# sourceMappingURL=sim-tf-override.type.d.ts.map

package/dist/terraform/sim-tf-override.type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-override.type.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-override.type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AAEpF;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,qBAAqB,GAC7B,oCAAoC,GACpC,2BAA2B,CAAC;AAEhC,gEAAgE;AAChE,MAAM,WAAW,oCAAoC;IACnD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACvD,QAAQ,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC;CACzB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,YAAY,CAAC,EAAE,KAAK,CAAC;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC;CAC9B"}

package/dist/terraform/sim-tf-override.type.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sim-tf-override.type.js.map

package/dist/terraform/sim-tf-override.type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-override.type.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-override.type.ts"],"names":[],"mappings":""}

package/dist/terraform/sim-tf-overrides.d.ts

@@ -0,0 +1,21 @@
+import type { SimIamPolicyDocument } from "../service/iam/policy/sim-iam-policy.js";
+import type { TerraformPlanOverride } from "./sim-tf-override.type.js";
+/**
+ * The values a deployment supplied for the gaps a plan left, by the name each
+ * one is matched on.
+ *
+ * A mapping asks this for the name the plan gave a resource and gets back what
+ * was supplied for it, or nothing. Asking with a name the plan itself could not
+ * resolve gets nothing back, which is the same answer as no override, so a
+ * mapping has one case to handle rather than two.
+ */
+export declare class TerraformPlanOverrides {
+    private readonly environments;
+    private readonly policies;
+    constructor(overrides?: readonly TerraformPlanOverride[]);
+    /** The environment variables supplied for one function name. */
+    environment(functionName: unknown): Readonly<Record<string, string>> | undefined;
+    /** The inline policy document supplied for one role name. */
+    policy(roleName: unknown): SimIamPolicyDocument | undefined;
+}
+//# sourceMappingURL=sim-tf-overrides.d.ts.map

package/dist/terraform/sim-tf-overrides.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-overrides.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-overrides.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AACpF,OAAO,KAAK,EAEV,qBAAqB,EAEtB,MAAM,2BAA2B,CAAC;AAEnC;;;;;;;;GAQG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAG3B;IAEF,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA4C;IAErE,YAAY,SAAS,GAAE,SAAS,qBAAqB,EAAO,EAW3D;IAED,gEAAgE;IACzD,WAAW,CAChB,YAAY,EAAE,OAAO,GACpB,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAI9C;IAED,6DAA6D;IACtD,MAAM,CAAC,QAAQ,EAAE,OAAO,GAAG,oBAAoB,GAAG,SAAS,CAIjE;CACF"}

package/dist/terraform/sim-tf-overrides.js

@@ -0,0 +1,40 @@
+/**
+ * The values a deployment supplied for the gaps a plan left, by the name each
+ * one is matched on.
+ *
+ * A mapping asks this for the name the plan gave a resource and gets back what
+ * was supplied for it, or nothing. Asking with a name the plan itself could not
+ * resolve gets nothing back, which is the same answer as no override, so a
+ * mapping has one case to handle rather than two.
+ */
+export class TerraformPlanOverrides {
+    environments;
+    policies;
+    constructor(overrides = []) {
+        this.environments = new Map(overrides
+            .filter(isEnvironmentOverride)
+            .map((override) => [override.functionName, override.environment]));
+        this.policies = new Map(overrides
+            .filter(isRolePolicyOverride)
+            .map((override) => [override.roleName, override.policy]));
+    }
+    /** The environment variables supplied for one function name. */
+    environment(functionName) {
+        return typeof functionName === "string"
+            ? this.environments.get(functionName)
+            : undefined;
+    }
+    /** The inline policy document supplied for one role name. */
+    policy(roleName) {
+        return typeof roleName === "string"
+            ? this.policies.get(roleName)
+            : undefined;
+    }
+}
+function isEnvironmentOverride(override) {
+    return override.functionName !== undefined;
+}
+function isRolePolicyOverride(override) {
+    return override.roleName !== undefined;
+}
+//# sourceMappingURL=sim-tf-overrides.js.map

package/dist/terraform/sim-tf-overrides.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-overrides.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-overrides.ts"],"names":[],"mappings":"AAOA;;;;;;;;GAQG;AACH,MAAM,OAAO,sBAAsB;IAChB,YAAY,CAG3B;IAEe,QAAQ,CAA4C;IAErE,YAAY,SAAS,GAAqC,EAAE;QAC1D,IAAI,CAAC,YAAY,GAAG,IAAI,GAAG,CACzB,SAAS;aACN,MAAM,CAAC,qBAAqB,CAAC;aAC7B,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC,CACpE,CAAC;QACF,IAAI,CAAC,QAAQ,GAAG,IAAI,GAAG,CACrB,SAAS;aACN,MAAM,CAAC,oBAAoB,CAAC;aAC5B,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAC3D,CAAC;IACJ,CAAC;IAED,gEAAgE;IACzD,WAAW,CAChB,YAAqB;QAErB,OAAO,OAAO,YAAY,KAAK,QAAQ;YACrC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC;YACrC,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAED,6DAA6D;IACtD,MAAM,CAAC,QAAiB;QAC7B,OAAO,OAAO,QAAQ,KAAK,QAAQ;YACjC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC7B,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;CACF;AAED,SAAS,qBAAqB,CAC5B,QAA+B;IAE/B,OAAO,QAAQ,CAAC,YAAY,KAAK,SAAS,CAAC;AAC7C,CAAC;AAED,SAAS,oBAAoB,CAC3B,QAA+B;IAE/B,OAAO,QAAQ,CAAC,QAAQ,KAAK,SAAS,CAAC;AACzC,CAAC"}

package/dist/terraform/sim-tf-plan-file.d.ts

@@ -0,0 +1,23 @@
+import type { TerraformPlan } from "./sim-tf-plan.type.js";
+/**
+ * Read the plan JSON at a path.
+ *
+ * The two ways of getting this wrong are worth telling apart. A path with no
+ * file at it is named as resolved, and a file that is not the JSON form is met
+ * with the command that writes it, since `terraform plan -out` writes a binary
+ * file whose name looks like the right one.
+ *
+ * A document that parses but is not a plan is refused the same way. Every
+ * `terraform show -json` document carries `format_version`, and without that
+ * check a JSON file of anything at all reads as a plan that creates nothing
+ * and deploys as an empty Stack.
+ */
+export declare function readTerraformPlanFile(planPath: string): Promise<TerraformPlan>;
+/**
+ * The Stack name a plan file gives, for a deployment that names none.
+ *
+ * `orders.tfplan.json` deploys as `orders`, the way a template file deployment
+ * is named after the template.
+ */
+export declare function terraformStackNameFromPlanPath(planPath: string): string;
+//# sourceMappingURL=sim-tf-plan-file.d.ts.map

package/dist/terraform/sim-tf-plan-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-plan-file.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-plan-file.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D;;;;;;;;;;;;GAYG;AACH,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,aAAa,CAAC,CAcxB;AAED;;;;;GAKG;AACH,wBAAgB,8BAA8B,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEvE"}

package/dist/terraform/sim-tf-plan-file.js

@@ -0,0 +1,58 @@
+import { readFile } from "node:fs/promises";
+import path from "node:path";
+import { isRecord } from "../util/type-guard/record.js";
+/**
+ * Read the plan JSON at a path.
+ *
+ * The two ways of getting this wrong are worth telling apart. A path with no
+ * file at it is named as resolved, and a file that is not the JSON form is met
+ * with the command that writes it, since `terraform plan -out` writes a binary
+ * file whose name looks like the right one.
+ *
+ * A document that parses but is not a plan is refused the same way. Every
+ * `terraform show -json` document carries `format_version`, and without that
+ * check a JSON file of anything at all reads as a plan that creates nothing
+ * and deploys as an empty Stack.
+ */
+export async function readTerraformPlanFile(planPath) {
+    const contents = await planFileContents(planPath);
+    try {
+        const parsed = JSON.parse(contents);
+        if (isPlanDocument(parsed)) {
+            return parsed;
+        }
+    }
+    catch (error) {
+        throw notPlanJson(planPath, error);
+    }
+    throw notPlanJson(planPath);
+}
+/**
+ * The Stack name a plan file gives, for a deployment that names none.
+ *
+ * `orders.tfplan.json` deploys as `orders`, the way a template file deployment
+ * is named after the template.
+ */
+export function terraformStackNameFromPlanPath(planPath) {
+    return path.basename(planPath).replace(/(?:\.tfplan|\.plan)?\.json$/u, "");
+}
+function isPlanDocument(parsed) {
+    return isRecord(parsed) && typeof parsed["format_version"] === "string";
+}
+async function planFileContents(planPath) {
+    try {
+        // oxlint-disable-next-line security/detect-non-literal-fs-filename
+        return await readFile(planPath, "utf8");
+    }
+    catch (error) {
+        if (error instanceof Error && "code" in error && error.code === "ENOENT") {
+            throw new Error(`No Terraform plan JSON file at ${path.resolve(planPath)}`, { cause: error });
+        }
+        throw error;
+    }
+}
+function notPlanJson(planPath, cause) {
+    return new Error(`${path.resolve(planPath)} is not Terraform plan JSON. ` +
+        `Write it with \`terraform show -json <planfile>\`.`, { cause });
+}
+//# sourceMappingURL=sim-tf-plan-file.js.map

package/dist/terraform/sim-tf-plan-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-plan-file.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-plan-file.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAGxD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,QAAgB;IAEhB,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAElD,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAE7C,IAAI,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,WAAW,CAAC,QAAQ,CAAC,CAAC;AAC9B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,8BAA8B,CAAC,QAAgB;IAC7D,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,8BAA8B,EAAE,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,cAAc,CAAC,MAAe;IACrC,OAAO,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,gBAAgB,CAAC,KAAK,QAAQ,CAAC;AAC1E,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,QAAgB;IAC9C,IAAI,CAAC;QACH,mEAAmE;QACnE,OAAO,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACzE,MAAM,IAAI,KAAK,CACb,kCAAkC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAC1D,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB,EAAE,KAAe;IACpD,OAAO,IAAI,KAAK,CACd,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,+BAA+B;QACtD,oDAAoD,EACtD,EAAE,KAAK,EAAE,CACV,CAAC;AACJ,CAAC"}

package/dist/terraform/sim-tf-plan-resources.d.ts

@@ -0,0 +1,18 @@
+import type { TerraformPlan } from "./sim-tf-plan.type.js";
+import type { TerraformResource } from "./sim-tf-resource.type.js";
+/**
+ * Every managed AWS resource a plan will create, in declaration order.
+ *
+ * The three sections a plan splits a resource across are walked together.
+ * `planned_values` and `configuration` are two trees of the same shape, and
+ * `configuration` addresses its resources relative to the module declaring
+ * them, so the two are joined per module rather than matched on address.
+ * `resource_changes` is a flat list keyed by the fully qualified address.
+ *
+ * Data sources are left out, because a data source reads infrastructure that
+ * already exists and creates nothing. Resources from another provider are left
+ * in, carrying their provider name, so the caller can report them rather than
+ * silently lose them.
+ */
+export declare function terraformPlanResources(plan: TerraformPlan): readonly TerraformResource[];
+//# sourceMappingURL=sim-tf-plan-resources.d.ts.map

package/dist/terraform/sim-tf-plan-resources.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-plan-resources.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-plan-resources.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAGV,aAAa,EAGd,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AASnE;;;;;;;;;;;;;GAaG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,aAAa,GAClB,SAAS,iBAAiB,EAAE,CAa9B"}

package/dist/terraform/sim-tf-plan-resources.js

@@ -0,0 +1,52 @@
+import { childModuleCallName, childModuleSegment, configResourcesByKey, providerShortName, unknownAttributesByAddress, } from "./sim-tf-plan-sections.js";
+/**
+ * Every managed AWS resource a plan will create, in declaration order.
+ *
+ * The three sections a plan splits a resource across are walked together.
+ * `planned_values` and `configuration` are two trees of the same shape, and
+ * `configuration` addresses its resources relative to the module declaring
+ * them, so the two are joined per module rather than matched on address.
+ * `resource_changes` is a flat list keyed by the fully qualified address.
+ *
+ * Data sources are left out, because a data source reads infrastructure that
+ * already exists and creates nothing. Resources from another provider are left
+ * in, carrying their provider name, so the caller can report them rather than
+ * silently lose them.
+ */
+export function terraformPlanResources(plan) {
+    const rootValues = plan.planned_values?.root_module;
+    if (rootValues === undefined) {
+        return [];
+    }
+    return collectModule(rootValues, plan.configuration?.root_module, [], unknownAttributesByAddress(plan));
+}
+function collectModule(values, config, modulePath, unknown) {
+    const declared = configResourcesByKey(config);
+    const own = (values.resources ?? [])
+        .filter((resource) => (resource.mode ?? "managed") === "managed")
+        .map((resource) => joined(resource, declared, modulePath, unknown));
+    const nested = (values.child_modules ?? []).flatMap((child) => {
+        // The configuration is filed under the call name and the resources are
+        // addressed by the instance, so the two parts of the walk take different
+        // halves of the same segment.
+        const callName = childModuleCallName(child.address, modulePath);
+        return collectModule(child, config?.module_calls?.[callName]?.module, [...modulePath, childModuleSegment(child.address, modulePath)], unknown);
+    });
+    return [...own, ...nested];
+}
+function joined(resource, declared, modulePath, unknown) {
+    const config = declared.get(`${resource.type}.${resource.name}`);
+    return {
+        address: resource.address,
+        type: resource.type,
+        name: resource.name,
+        index: resource.index,
+        provider: providerShortName(resource.provider_name),
+        values: resource.values ?? {},
+        unknown: unknown.get(resource.address) ?? {},
+        expressions: config?.expressions ?? {},
+        dependsOn: config?.depends_on ?? [],
+        modulePath,
+    };
+}
+//# sourceMappingURL=sim-tf-plan-resources.js.map

package/dist/terraform/sim-tf-plan-resources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-plan-resources.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-plan-resources.ts"],"names":[],"mappings":"AAcA,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,EACpB,iBAAiB,EACjB,0BAA0B,GAC3B,MAAM,2BAA2B,CAAC;AAEnC;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,sBAAsB,CACpC,IAAmB;IAEnB,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,EAAE,WAAW,CAAC;IAEpD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,aAAa,CAClB,UAAU,EACV,IAAI,CAAC,aAAa,EAAE,WAAW,EAC/B,EAAE,EACF,0BAA0B,CAAC,IAAI,CAAC,CACjC,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,MAA8B,EAC9B,MAAyC,EACzC,UAA6B,EAC7B,OAAqD;IAErD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAE9C,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;SACjC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,IAAI,SAAS,CAAC,KAAK,SAAS,CAAC;SAChE,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;IAEtE,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QAC5D,uEAAuE;QACvE,yEAAyE;QACzE,8BAA8B;QAC9B,MAAM,QAAQ,GAAG,mBAAmB,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAEhE,OAAO,aAAa,CAClB,KAAK,EACL,MAAM,EAAE,YAAY,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EACxC,CAAC,GAAG,UAAU,EAAE,kBAAkB,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,EAC9D,OAAO,CACR,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,MAAM,CACb,QAAkC,EAClC,QAAsD,EACtD,UAA6B,EAC7B,OAAqD;IAErD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IAEjE,OAAO;QACL,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,QAAQ,EAAE,iBAAiB,CAAC,QAAQ,CAAC,aAAa,CAAC;QACnD,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,EAAE;QAC7B,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE;QAC5C,WAAW,EAAE,MAAM,EAAE,WAAW,IAAI,EAAE;QACtC,SAAS,EAAE,MAAM,EAAE,UAAU,IAAI,EAAE;QACnC,UAAU;KACX,CAAC;AACJ,CAAC"}

package/dist/terraform/sim-tf-plan-sections.d.ts

@@ -0,0 +1,31 @@
+import type { TerraformConfigModule, TerraformConfigResource, TerraformPlan } from "./sim-tf-plan.type.js";
+/**
+ * Each resource's `after_unknown`, keyed by the address it belongs to.
+ *
+ * `planned_values` says what a value is and `resource_changes` says whether the
+ * plan knew it, so reading a resource means having both to hand.
+ */
+export declare function unknownAttributesByAddress(plan: TerraformPlan): ReadonlyMap<string, Record<string, unknown>>;
+/** The declared configuration of one module's resources, by type and name. */
+export declare function configResourcesByKey(config: TerraformConfigModule | undefined): ReadonlyMap<string, TerraformConfigResource>;
+/**
+ * The child module segment of an address, as `planned_values` writes it.
+ *
+ * A child module address repeats its parents, so `module.a.module.b` under
+ * `["a"]` is `b`. A module called with `count` or `for_each` carries the
+ * instance key here, and `module.workers["blue"]` gives `workers["blue"]`.
+ * That is the form every address under the module is written with, so it is
+ * the form a reference from inside it has to be qualified against.
+ */
+export declare function childModuleSegment(address: string | undefined, modulePath: readonly string[]): string;
+/**
+ * The call name of a child module, without any instance key.
+ *
+ * The configuration files a module under the name it was called by, once,
+ * however many instances the call has, so this is the form its `module_calls`
+ * are keyed on.
+ */
+export declare function childModuleCallName(address: string | undefined, modulePath: readonly string[]): string;
+/** The provider that owns a resource type, without the registry it came from. */
+export declare function providerShortName(providerName: string | undefined): string;
+//# sourceMappingURL=sim-tf-plan-sections.d.ts.map

package/dist/terraform/sim-tf-plan-sections.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-plan-sections.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-plan-sections.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EACV,qBAAqB,EACrB,uBAAuB,EACvB,aAAa,EACd,MAAM,uBAAuB,CAAC;AAE/B;;;;;GAKG;AACH,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,aAAa,GAClB,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAO9C;AAED,8EAA8E;AAC9E,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,qBAAqB,GAAG,SAAS,GACxC,WAAW,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAO9C;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,UAAU,EAAE,SAAS,MAAM,EAAE,GAC5B,MAAM,CAER;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,UAAU,EAAE,SAAS,MAAM,EAAE,GAC5B,MAAM,CAER;AAED,iFAAiF;AACjF,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAM1E"}

package/dist/terraform/sim-tf-plan-sections.js

@@ -0,0 +1,60 @@
+/**
+ * How the three sections of a plan document address and key what they hold.
+ *
+ * Each section says something different about the same resource and none of
+ * them says it the same way. `resource_changes` is a flat list keyed by fully
+ * qualified address, `configuration` files a resource under the module that
+ * declares it, and both a child module address and a provider name carry more
+ * than the name being read out of them. This is that reading, kept away from
+ * the walk that uses it.
+ */
+import { addressSegments, withoutInstanceKeys, } from "./sim-tf-reference-address.js";
+/**
+ * Each resource's `after_unknown`, keyed by the address it belongs to.
+ *
+ * `planned_values` says what a value is and `resource_changes` says whether the
+ * plan knew it, so reading a resource means having both to hand.
+ */
+export function unknownAttributesByAddress(plan) {
+    return new Map((plan.resource_changes ?? []).map((change) => [
+        change.address,
+        change.change?.after_unknown ?? {},
+    ]));
+}
+/** The declared configuration of one module's resources, by type and name. */
+export function configResourcesByKey(config) {
+    return new Map((config?.resources ?? []).map((resource) => [
+        `${resource.type}.${resource.name}`,
+        resource,
+    ]));
+}
+/**
+ * The child module segment of an address, as `planned_values` writes it.
+ *
+ * A child module address repeats its parents, so `module.a.module.b` under
+ * `["a"]` is `b`. A module called with `count` or `for_each` carries the
+ * instance key here, and `module.workers["blue"]` gives `workers["blue"]`.
+ * That is the form every address under the module is written with, so it is
+ * the form a reference from inside it has to be qualified against.
+ */
+export function childModuleSegment(address, modulePath) {
+    return addressSegments(address ?? "")[modulePath.length * 2 + 1] ?? "";
+}
+/**
+ * The call name of a child module, without any instance key.
+ *
+ * The configuration files a module under the name it was called by, once,
+ * however many instances the call has, so this is the form its `module_calls`
+ * are keyed on.
+ */
+export function childModuleCallName(address, modulePath) {
+    return withoutInstanceKeys(childModuleSegment(address, modulePath));
+}
+/** The provider that owns a resource type, without the registry it came from. */
+export function providerShortName(providerName) {
+    if (providerName === undefined) {
+        return "unknown";
+    }
+    return providerName.replace(/^registry\.terraform\.io\//u, "");
+}
+//# sourceMappingURL=sim-tf-plan-sections.js.map

package/dist/terraform/sim-tf-plan-sections.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-plan-sections.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-plan-sections.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EACL,eAAe,EACf,mBAAmB,GACpB,MAAM,+BAA+B,CAAC;AAOvC;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CACxC,IAAmB;IAEnB,OAAO,IAAI,GAAG,CACZ,CAAC,IAAI,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QAC5C,MAAM,CAAC,OAAO;QACd,MAAM,CAAC,MAAM,EAAE,aAAa,IAAI,EAAE;KACnC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,oBAAoB,CAClC,MAAyC;IAEzC,OAAO,IAAI,GAAG,CACZ,CAAC,MAAM,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;QAC1C,GAAG,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,EAAE;QACnC,QAAQ;KACT,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAA2B,EAC3B,UAA6B;IAE7B,OAAO,eAAe,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AACzE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAA2B,EAC3B,UAA6B;IAE7B,OAAO,mBAAmB,CAAC,kBAAkB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;AACtE,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,iBAAiB,CAAC,YAAgC;IAChE,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,YAAY,CAAC,OAAO,CAAC,6BAA6B,EAAE,EAAE,CAAC,CAAC;AACjE,CAAC"}