@kensio/yulin 1.19.1 → 1.19.3

package/dist/terraform/sim-tf-plan.type.d.ts

@@ -0,0 +1,98 @@
+/**
+ * The parts of a `terraform show -json <planfile>` document this import reads.
+ *
+ * Terraform documents this as the plan representation, and its `format_version`
+ * has been `1.x` since Terraform 0.12. Only the members the import uses are
+ * described here. A plan carries a great deal more.
+ */
+export interface TerraformPlan {
+    readonly format_version?: string;
+    readonly terraform_version?: string;
+    readonly planned_values?: {
+        readonly root_module?: TerraformPlannedModule;
+    };
+    readonly resource_changes?: readonly TerraformResourceChange[];
+    readonly configuration?: {
+        readonly root_module?: TerraformConfigModule;
+    };
+}
+/**
+ * One module's resolved resources, and the modules it calls.
+ *
+ * `count` and `for_each` are already expanded here. A resource declared with
+ * `count = 3` appears as three entries carrying `index` 0, 1 and 2.
+ */
+export interface TerraformPlannedModule {
+    readonly resources?: readonly TerraformPlannedResource[];
+    readonly child_modules?: readonly TerraformPlannedChildModule[];
+}
+export interface TerraformPlannedChildModule extends TerraformPlannedModule {
+    /** The fully qualified call address, such as `module.uploads_bucket`. */
+    readonly address?: string;
+}
+export interface TerraformPlannedResource {
+    readonly address: string;
+    readonly mode?: string;
+    readonly type: string;
+    readonly name: string;
+    readonly index?: string | number | undefined;
+    readonly provider_name?: string;
+    readonly values?: Record<string, unknown>;
+}
+/**
+ * What a plan says it will do to one resource.
+ *
+ * `after` holds the attributes whose values the plan resolved, and
+ * `after_unknown` marks the ones it could not. An attribute unknown at plan
+ * time is absent from `after` and carries `true` in `after_unknown`, so the two
+ * have to be read together to tell "no value" from "not known yet".
+ */
+export interface TerraformResourceChange {
+    readonly address: string;
+    readonly mode?: string;
+    readonly type: string;
+    readonly name: string;
+    readonly change?: {
+        readonly actions?: readonly string[];
+        readonly after?: Record<string, unknown> | null;
+        readonly after_unknown?: Record<string, unknown> | null;
+    };
+}
+/**
+ * The declared configuration, holding the reference graph.
+ *
+ * Addresses here are relative to the module the resource is declared in, while
+ * `planned_values` addresses are fully qualified. Joining the two means walking
+ * both trees together rather than matching on address.
+ */
+export interface TerraformConfigModule {
+    readonly resources?: readonly TerraformConfigResource[];
+    readonly outputs?: Record<string, TerraformConfigOutput>;
+    readonly module_calls?: Record<string, {
+        readonly module?: TerraformConfigModule;
+    }>;
+}
+export interface TerraformConfigResource {
+    readonly address: string;
+    readonly mode?: string;
+    readonly type: string;
+    readonly name: string;
+    readonly expressions?: Record<string, unknown>;
+    readonly depends_on?: readonly string[];
+}
+export interface TerraformConfigOutput {
+    readonly expression?: TerraformExpression;
+}
+/**
+ * A `references` entry, which is a resource address optionally followed by the
+ * attribute being read off it.
+ *
+ * Terraform lists both forms for one reference. `aws_iam_role.processor.arn`
+ * names the attribute and `aws_iam_role.processor` names the resource, and both
+ * appear in the same array.
+ */
+export interface TerraformExpression {
+    readonly constant_value?: unknown;
+    readonly references?: readonly string[];
+}
+//# sourceMappingURL=sim-tf-plan.type.d.ts.map

package/dist/terraform/sim-tf-plan.type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-plan.type.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-plan.type.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,cAAc,CAAC,EAAE;QAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,sBAAsB,CAAA;KAAE,CAAC;IAC5E,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,uBAAuB,EAAE,CAAC;IAC/D,QAAQ,CAAC,aAAa,CAAC,EAAE;QAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,qBAAqB,CAAA;KAAE,CAAC;CAC3E;AAED;;;;;GAKG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,wBAAwB,EAAE,CAAC;IACzD,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,2BAA2B,EAAE,CAAC;CACjE;AAED,MAAM,WAAW,2BAA4B,SAAQ,sBAAsB;IACzE,yEAAyE;IACzE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC3C;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE;QAChB,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QACrC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;QAChD,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;KACzD,CAAC;CACH;AAED;;;;;;GAMG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,uBAAuB,EAAE,CAAC;IACxD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;IACzD,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAC5B,MAAM,EACN;QAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,qBAAqB,CAAA;KAAE,CAC5C,CAAC;CACH;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/C,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACzC;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACzC"}

package/dist/terraform/sim-tf-plan.type.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sim-tf-plan.type.js.map

package/dist/terraform/sim-tf-plan.type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-plan.type.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-plan.type.ts"],"names":[],"mappings":""}

package/dist/terraform/sim-tf-reference-address.d.ts

@@ -0,0 +1,52 @@
+/**
+ * How a Terraform reference string is read, before anything is looked up.
+ *
+ * A reference is text the configuration wrote, and two things about that text
+ * have to be settled before a resource can be found behind it. Which of the
+ * forms Terraform lists is the one to follow, and what the reference means
+ * from outside the module that wrote it.
+ */
+/**
+ * References ordered longest first.
+ *
+ * Terraform lists the attribute form and the bare resource form of one
+ * reference. The attribute form is longer, and it is the one that resolves to
+ * the value being read rather than to the resource as a whole.
+ */
+export declare function longestFirst(references: readonly string[]): readonly string[];
+/**
+ * An address split on the dots between its segments.
+ *
+ * A `count` or `for_each` key can hold anything, including a dot, so the dots
+ * inside a bracketed key are not separators. `module.hosts["a.example.com"]`
+ * is two segments rather than four.
+ */
+export declare function addressSegments(address: string): readonly string[];
+/**
+ * The module instance path a module output was read through.
+ *
+ * `module.workers["blue"].module.queue.queue_arn` is the output `queue_arn` of
+ * the call `queue` inside the instance `workers["blue"]`. The output's own
+ * references are relative to that path, keys and all, where the index the
+ * output was found in is keyed by call name alone.
+ */
+export declare function moduleOutputPath(qualified: string): readonly string[];
+/**
+ * A reference with every `count` and `for_each` key taken out of it.
+ *
+ * A module declares its outputs once however many instances of the call there
+ * are, so the output index is keyed by call path. A reference made from inside
+ * one instance carries that instance's key, and this is what it is looked up
+ * by.
+ */
+export declare function withoutInstanceKeys(reference: string): string;
+/**
+ * A module-relative reference turned into a plan-wide address.
+ *
+ * References inside a module name their own module's resources without the
+ * module prefix that `planned_values` puts on them. A reference to another
+ * module's output is qualified the same way, because the output index is keyed
+ * by the full call path and a nested call would otherwise miss it.
+ */
+export declare function qualifiedReference(reference: string, modulePath: readonly string[]): string;
+//# sourceMappingURL=sim-tf-reference-address.d.ts.map

package/dist/terraform/sim-tf-reference-address.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-reference-address.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-reference-address.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,CAE7E;AAoBD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAsBlE;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAIrE;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE7D;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,SAAS,MAAM,EAAE,GAC5B,MAAM,CASR"}

package/dist/terraform/sim-tf-reference-address.js

@@ -0,0 +1,102 @@
+/**
+ * How a Terraform reference string is read, before anything is looked up.
+ *
+ * A reference is text the configuration wrote, and two things about that text
+ * have to be settled before a resource can be found behind it. Which of the
+ * forms Terraform lists is the one to follow, and what the reference means
+ * from outside the module that wrote it.
+ */
+/**
+ * References ordered longest first.
+ *
+ * Terraform lists the attribute form and the bare resource form of one
+ * reference. The attribute form is longer, and it is the one that resolves to
+ * the value being read rather than to the resource as a whole.
+ */
+export function longestFirst(references) {
+    return references.toSorted((a, b) => b.length - a.length);
+}
+/**
+ * Scopes that name something other than a resource of the same module.
+ *
+ * A reference under one of these is resolved by Terraform rather than by an
+ * address lookup, and prefixing it with the module path would invent an
+ * address no resource has.
+ */
+const unqualifiedScopes = [
+    "var.",
+    "local.",
+    "each.",
+    "count.",
+    "self.",
+    "data.",
+    "path.",
+    "terraform.",
+];
+/**
+ * An address split on the dots between its segments.
+ *
+ * A `count` or `for_each` key can hold anything, including a dot, so the dots
+ * inside a bracketed key are not separators. `module.hosts["a.example.com"]`
+ * is two segments rather than four.
+ */
+export function addressSegments(address) {
+    const segments = [];
+    let current = "";
+    let bracketed = false;
+    for (const character of address) {
+        if (character === "[") {
+            bracketed = true;
+        }
+        else if (character === "]") {
+            bracketed = false;
+        }
+        if (character === "." && !bracketed) {
+            segments.push(current);
+            current = "";
+            continue;
+        }
+        current += character;
+    }
+    return [...segments, current];
+}
+/**
+ * The module instance path a module output was read through.
+ *
+ * `module.workers["blue"].module.queue.queue_arn` is the output `queue_arn` of
+ * the call `queue` inside the instance `workers["blue"]`. The output's own
+ * references are relative to that path, keys and all, where the index the
+ * output was found in is keyed by call name alone.
+ */
+export function moduleOutputPath(qualified) {
+    return addressSegments(qualified)
+        .slice(0, -1)
+        .filter((_, position) => position % 2 === 1);
+}
+/**
+ * A reference with every `count` and `for_each` key taken out of it.
+ *
+ * A module declares its outputs once however many instances of the call there
+ * are, so the output index is keyed by call path. A reference made from inside
+ * one instance carries that instance's key, and this is what it is looked up
+ * by.
+ */
+export function withoutInstanceKeys(reference) {
+    return reference.replaceAll(/\[[^\]]*\]/gu, "");
+}
+/**
+ * A module-relative reference turned into a plan-wide address.
+ *
+ * References inside a module name their own module's resources without the
+ * module prefix that `planned_values` puts on them. A reference to another
+ * module's output is qualified the same way, because the output index is keyed
+ * by the full call path and a nested call would otherwise miss it.
+ */
+export function qualifiedReference(reference, modulePath) {
+    if (modulePath.length === 0 ||
+        unqualifiedScopes.some((scope) => reference.startsWith(scope))) {
+        return reference;
+    }
+    return `${modulePath.map((call) => `module.${call}`).join(".")}.${reference}`;
+}
+//# sourceMappingURL=sim-tf-reference-address.js.map

package/dist/terraform/sim-tf-reference-address.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-reference-address.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-reference-address.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,UAA6B;IACxD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;AAC5D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,iBAAiB,GAAG;IACxB,MAAM;IACN,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,OAAO;IACP,OAAO;IACP,OAAO;IACP,YAAY;CACb,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,SAAS,GAAG,KAAK,CAAC;IAEtB,KAAK,MAAM,SAAS,IAAI,OAAO,EAAE,CAAC;QAChC,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;YACtB,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;aAAM,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;YAC7B,SAAS,GAAG,KAAK,CAAC;QACpB,CAAC;QAED,IAAI,SAAS,KAAK,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YACpC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvB,OAAO,GAAG,EAAE,CAAC;YACb,SAAS;QACX,CAAC;QAED,OAAO,IAAI,SAAS,CAAC;IACvB,CAAC;IAED,OAAO,CAAC,GAAG,QAAQ,EAAE,OAAO,CAAC,CAAC;AAChC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,SAAiB;IAChD,OAAO,eAAe,CAAC,SAAS,CAAC;SAC9B,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;SACZ,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AACjD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,SAAiB;IACnD,OAAO,SAAS,CAAC,UAAU,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAChC,SAAiB,EACjB,UAA6B;IAE7B,IACE,UAAU,CAAC,MAAM,KAAK,CAAC;QACvB,iBAAiB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAC9D,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,SAAS,EAAE,CAAC;AAChF,CAAC"}

package/dist/terraform/sim-tf-reference.d.ts

@@ -0,0 +1,82 @@
+import type { SimCfnTemplateValue } from "../service/cloudformation/template/value/sim-cfn-template-value.js";
+import type { TerraformResource } from "./sim-tf-resource.type.js";
+/**
+ * Resolves a Terraform reference against the resources a template declares.
+ *
+ * A reference is an address optionally followed by the attribute being read.
+ * Terraform lists both forms for the same reference, so the longest address
+ * matching a resource wins and what is left over is the attribute.
+ *
+ * The resources given are the ones the template will hold, rather than every
+ * resource of the plan. A reference to a resource the template does not
+ * declare resolves to nothing, so no property can come out of this naming a
+ * logical ID that is not there.
+ */
+export declare class TerraformReferenceResolver {
+    private readonly byAddress;
+    private readonly moduleOutputs;
+    private readonly logicalIds;
+    constructor(resources: readonly TerraformResource[], moduleOutputs?: ReadonlyMap<string, readonly string[]>);
+    /** The logical ID the template declares one address under. */
+    logicalId(address: string): string;
+    /**
+     * The resource at one address, for a caller that needs the resource rather
+     * than a value read off it. A mapping reading a name out of the resource its
+     * own attribute refers to is what wants this.
+     */
+    resource(address: string): TerraformResource | undefined;
+    /**
+     * The CloudFormation value one reference stands for.
+     *
+     * A reference to a resource the template does not declare returns undefined,
+     * and so does one whose attribute has no entry in the read table. The caller
+     * decides what an unresolvable reference means for the Resource holding it.
+     */
+    resolve(reference: string, modulePath: readonly string[]): SimCfnTemplateValue | undefined;
+    /**
+     * The address of the resource one reference names.
+     *
+     * A fold needs the resource a reference points at rather than the value read
+     * off it, because it is merging properties into that resource's template,
+     * and so does the ordering pass.
+     */
+    targetAddress(reference: string, modulePath: readonly string[]): string | undefined;
+    /**
+     * The attribute a reference reads off the resource behind it.
+     *
+     * A reference naming a resource address and nothing else names no attribute,
+     * and is the resource itself. A reference through a module output names the
+     * output rather than the attribute, and the output's own expression says
+     * which attribute that is.
+     */
+    private attributeName;
+    private target;
+    /**
+     * The module output one reference names.
+     *
+     * The index is keyed by module call path, since a module declares its
+     * outputs once however many instances of the call there are. A reference
+     * made from inside one instance carries that instance's key, so the key
+     * comes off when the qualified form finds nothing.
+     */
+    private moduleOutput;
+    /**
+     * The resource a module output leads to.
+     *
+     * The output's own expression names it, in terms of the module declaring the
+     * output, so following one is resolving that expression again one module
+     * down. An output built out of several resources returns the first that
+     * resolves, and the depth limit stops a module whose outputs refer to each
+     * other from looping.
+     */
+    private throughModuleOutput;
+    /**
+     * The resource whose address is the longest prefix of this reference.
+     *
+     * `aws_iam_role.processor.arn` has to find `aws_iam_role.processor` and leave
+     * `arn` behind, and a `for_each` instance address carries a bracketed key
+     * that is part of the address rather than an attribute.
+     */
+    private longestMatch;
+}
+//# sourceMappingURL=sim-tf-reference.d.ts.map

package/dist/terraform/sim-tf-reference.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-reference.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-reference.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oEAAoE,CAAC;AAC9G,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAUnE;;;;;;;;;;;GAWG;AACH,qBAAa,0BAA0B;IACrC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAyC;IACnE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAyC;IACvE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YACE,SAAS,EAAE,SAAS,iBAAiB,EAAE,EACvC,aAAa,GAAE,WAAW,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAa,EAOlE;IAED,8DAA8D;IACvD,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAExC;IAED;;;;OAIG;IACI,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAE9D;IAED;;;;;;OAMG;IACI,OAAO,CACZ,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,SAAS,MAAM,EAAE,GAC5B,mBAAmB,GAAG,SAAS,CAuBjC;IAED;;;;;;OAMG;IACI,aAAa,CAClB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,SAAS,MAAM,EAAE,GAC5B,MAAM,GAAG,SAAS,CAEpB;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,aAAa;IAiBrB,OAAO,CAAC,MAAM;IAId;;;;;;;OAOG;IACH,OAAO,CAAC,YAAY;IAOpB;;;;;;;;OAQG;IACH,OAAO,CAAC,mBAAmB;IA6B3B;;;;;;OAMG;IACH,OAAO,CAAC,YAAY;CAerB"}

package/dist/terraform/sim-tf-reference.js

@@ -0,0 +1,153 @@
+import { terraformAttributeReads } from "./sim-tf-attribute-reads.js";
+import { TerraformLogicalIds } from "./sim-tf-logical-id.js";
+import { longestFirst, moduleOutputPath, qualifiedReference, withoutInstanceKeys, } from "./sim-tf-reference-address.js";
+/**
+ * Resolves a Terraform reference against the resources a template declares.
+ *
+ * A reference is an address optionally followed by the attribute being read.
+ * Terraform lists both forms for the same reference, so the longest address
+ * matching a resource wins and what is left over is the attribute.
+ *
+ * The resources given are the ones the template will hold, rather than every
+ * resource of the plan. A reference to a resource the template does not
+ * declare resolves to nothing, so no property can come out of this naming a
+ * logical ID that is not there.
+ */
+export class TerraformReferenceResolver {
+    byAddress;
+    moduleOutputs;
+    logicalIds;
+    constructor(resources, moduleOutputs = new Map()) {
+        this.byAddress = new Map(resources.map((resource) => [resource.address, resource]));
+        this.moduleOutputs = moduleOutputs;
+        this.logicalIds = new TerraformLogicalIds(this.byAddress.keys());
+    }
+    /** The logical ID the template declares one address under. */
+    logicalId(address) {
+        return this.logicalIds.of(address);
+    }
+    /**
+     * The resource at one address, for a caller that needs the resource rather
+     * than a value read off it. A mapping reading a name out of the resource its
+     * own attribute refers to is what wants this.
+     */
+    resource(address) {
+        return this.byAddress.get(address);
+    }
+    /**
+     * The CloudFormation value one reference stands for.
+     *
+     * A reference to a resource the template does not declare returns undefined,
+     * and so does one whose attribute has no entry in the read table. The caller
+     * decides what an unresolvable reference means for the Resource holding it.
+     */
+    resolve(reference, modulePath) {
+        const qualified = qualifiedReference(reference, modulePath);
+        const target = this.target(qualified);
+        if (target === undefined) {
+            return undefined;
+        }
+        const attribute = this.attributeName(qualified, target.address);
+        const read = attribute === undefined
+            ? "Ref"
+            : terraformAttributeReads.get(`${target.type}.${attribute}`);
+        if (read === undefined) {
+            return undefined;
+        }
+        const logicalId = this.logicalId(target.address);
+        return read === "Ref"
+            ? { Ref: logicalId }
+            : { "Fn::GetAtt": [logicalId, read] };
+    }
+    /**
+     * The address of the resource one reference names.
+     *
+     * A fold needs the resource a reference points at rather than the value read
+     * off it, because it is merging properties into that resource's template,
+     * and so does the ordering pass.
+     */
+    targetAddress(reference, modulePath) {
+        return this.target(qualifiedReference(reference, modulePath))?.address;
+    }
+    /**
+     * The attribute a reference reads off the resource behind it.
+     *
+     * A reference naming a resource address and nothing else names no attribute,
+     * and is the resource itself. A reference through a module output names the
+     * output rather than the attribute, and the output's own expression says
+     * which attribute that is.
+     */
+    attributeName(qualified, address) {
+        if (qualified === address) {
+            return undefined;
+        }
+        if (qualified.startsWith(`${address}.`)) {
+            return qualified.slice(address.length + 1);
+        }
+        const [longest] = longestFirst(this.moduleOutput(qualified) ?? []);
+        return longest?.split(".").pop();
+    }
+    target(qualified) {
+        return this.longestMatch(qualified) ?? this.throughModuleOutput(qualified);
+    }
+    /**
+     * The module output one reference names.
+     *
+     * The index is keyed by module call path, since a module declares its
+     * outputs once however many instances of the call there are. A reference
+     * made from inside one instance carries that instance's key, so the key
+     * comes off when the qualified form finds nothing.
+     */
+    moduleOutput(qualified) {
+        return (this.moduleOutputs.get(qualified) ??
+            this.moduleOutputs.get(withoutInstanceKeys(qualified)));
+    }
+    /**
+     * The resource a module output leads to.
+     *
+     * The output's own expression names it, in terms of the module declaring the
+     * output, so following one is resolving that expression again one module
+     * down. An output built out of several resources returns the first that
+     * resolves, and the depth limit stops a module whose outputs refer to each
+     * other from looping.
+     */
+    throughModuleOutput(qualified, depth = 0) {
+        const output = this.moduleOutput(qualified);
+        if (output === undefined || depth > 8) {
+            return undefined;
+        }
+        // The path the output was read through rather than the one it was
+        // declared under, so an output reached inside a `for_each` instance
+        // follows its own instance's resources.
+        const instance = moduleOutputPath(qualified);
+        for (const reference of longestFirst(output)) {
+            const nested = qualifiedReference(reference, instance);
+            const target = this.longestMatch(nested) ??
+                this.throughModuleOutput(nested, depth + 1);
+            if (target !== undefined) {
+                return target;
+            }
+        }
+        return undefined;
+    }
+    /**
+     * The resource whose address is the longest prefix of this reference.
+     *
+     * `aws_iam_role.processor.arn` has to find `aws_iam_role.processor` and leave
+     * `arn` behind, and a `for_each` instance address carries a bracketed key
+     * that is part of the address rather than an attribute.
+     */
+    longestMatch(qualified) {
+        let best;
+        for (const [address, resource] of this.byAddress) {
+            if (qualified !== address && !qualified.startsWith(`${address}.`)) {
+                continue;
+            }
+            if (best === undefined || address.length > best.address.length) {
+                best = resource;
+            }
+        }
+        return best;
+    }
+}
+//# sourceMappingURL=sim-tf-reference.js.map

package/dist/terraform/sim-tf-reference.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-reference.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-reference.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,+BAA+B,CAAC;AAEvC;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,0BAA0B;IACpB,SAAS,CAAyC;IAClD,aAAa,CAAyC;IACtD,UAAU,CAAsB;IAEjD,YACE,SAAuC,EACvC,aAAa,GAA2C,IAAI,GAAG,EAAE;QAEjE,IAAI,CAAC,SAAS,GAAG,IAAI,GAAG,CACtB,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAC1D,CAAC;QACF,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,UAAU,GAAG,IAAI,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,8DAA8D;IACvD,SAAS,CAAC,OAAe;QAC9B,OAAO,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAED;;;;OAIG;IACI,QAAQ,CAAC,OAAe;QAC7B,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAED;;;;;;OAMG;IACI,OAAO,CACZ,SAAiB,EACjB,UAA6B;QAE7B,MAAM,SAAS,GAAG,kBAAkB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAEtC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QAChE,MAAM,IAAI,GACR,SAAS,KAAK,SAAS;YACrB,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,uBAAuB,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,IAAI,SAAS,EAAE,CAAC,CAAC;QAEjE,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAEjD,OAAO,IAAI,KAAK,KAAK;YACnB,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE;YACpB,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC;IAC1C,CAAC;IAED;;;;;;OAMG;IACI,aAAa,CAClB,SAAiB,EACjB,UAA6B;QAE7B,OAAO,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,EAAE,OAAO,CAAC;IACzE,CAAC;IAED;;;;;;;OAOG;IACK,aAAa,CACnB,SAAiB,EACjB,OAAe;QAEf,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;YAC1B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,OAAO,GAAG,CAAC,EAAE,CAAC;YACxC,OAAO,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC7C,CAAC;QAED,MAAM,CAAC,OAAO,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;QAEnE,OAAO,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IACnC,CAAC;IAEO,MAAM,CAAC,SAAiB;QAC9B,OAAO,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAC7E,CAAC;IAED;;;;;;;OAOG;IACK,YAAY,CAAC,SAAiB;QACpC,OAAO,CACL,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC;YACjC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC,CACvD,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACK,mBAAmB,CACzB,SAAiB,EACjB,KAAK,GAAG,CAAC;QAET,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QAE5C,IAAI,MAAM,KAAK,SAAS,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACtC,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,kEAAkE;QAClE,oEAAoE;QACpE,wCAAwC;QACxC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAE7C,KAAK,MAAM,SAAS,IAAI,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7C,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YACvD,MAAM,MAAM,GACV,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;gBACzB,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YAE9C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;OAMG;IACK,YAAY,CAAC,SAAiB;QACpC,IAAI,IAAmC,CAAC;QAExC,KAAK,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACjD,IAAI,SAAS,KAAK,OAAO,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,OAAO,GAAG,CAAC,EAAE,CAAC;gBAClE,SAAS;YACX,CAAC;YAED,IAAI,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;gBAC/D,IAAI,GAAG,QAAQ,CAAC;YAClB,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/terraform/sim-tf-referenced.d.ts

@@ -0,0 +1,18 @@
+import type { TerraformResource } from "./sim-tf-resource.type.js";
+import type { TerraformReferenceResolver } from "./sim-tf-reference.js";
+/**
+ * The resource one attribute of a resource refers to.
+ *
+ * A fold reads the resource it configures this way, because its parent
+ * attribute holds a reference rather than a value. A bucket or a role being
+ * created by the same plan has no name until it exists, so the reference is
+ * all there is to go on.
+ *
+ * Terraform lists both the attribute form and the bare resource form of one
+ * reference, and both lead to the same resource, so the first that resolves
+ * wins.
+ */
+export declare function terraformReferencedResource(resource: TerraformResource, key: string, resolver: TerraformReferenceResolver): TerraformResource | undefined;
+/** The address of the resource one attribute refers to. */
+export declare function terraformReferencedAddress(resource: TerraformResource, key: string, resolver: TerraformReferenceResolver): string | undefined;
+//# sourceMappingURL=sim-tf-referenced.d.ts.map

package/dist/terraform/sim-tf-referenced.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-referenced.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-referenced.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AAGxE;;;;;;;;;;;GAWG;AACH,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,iBAAiB,EAC3B,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,0BAA0B,GACnC,iBAAiB,GAAG,SAAS,CAI/B;AAED,2DAA2D;AAC3D,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,iBAAiB,EAC3B,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,0BAA0B,GACnC,MAAM,GAAG,SAAS,CAoBpB"}

package/dist/terraform/sim-tf-referenced.js

@@ -0,0 +1,40 @@
+/*
+ * Reading a plan means reading records whose keys come from the document
+ * rather than from this code, so the object-injection rule fires on every
+ * lookup. The records are parsed JSON with no prototype of their own.
+ */
+// oxlint-disable security/detect-object-injection
+import { isRecord } from "../util/type-guard/record.js";
+import { longestFirst } from "./sim-tf-reference-address.js";
+/**
+ * The resource one attribute of a resource refers to.
+ *
+ * A fold reads the resource it configures this way, because its parent
+ * attribute holds a reference rather than a value. A bucket or a role being
+ * created by the same plan has no name until it exists, so the reference is
+ * all there is to go on.
+ *
+ * Terraform lists both the attribute form and the bare resource form of one
+ * reference, and both lead to the same resource, so the first that resolves
+ * wins.
+ */
+export function terraformReferencedResource(resource, key, resolver) {
+    const address = terraformReferencedAddress(resource, key, resolver);
+    return address === undefined ? undefined : resolver.resource(address);
+}
+/** The address of the resource one attribute refers to. */
+export function terraformReferencedAddress(resource, key, resolver) {
+    const expression = resource.expressions[key];
+    if (!isRecord(expression)) {
+        return undefined;
+    }
+    const references = longestFirst(expression.references ?? []);
+    for (const reference of references) {
+        const address = resolver.targetAddress(reference, resource.modulePath);
+        if (address !== undefined) {
+            return address;
+        }
+    }
+    return undefined;
+}
+//# sourceMappingURL=sim-tf-referenced.js.map

package/dist/terraform/sim-tf-referenced.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-referenced.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-referenced.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,kDAAkD;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAIxD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAE7D;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,2BAA2B,CACzC,QAA2B,EAC3B,GAAW,EACX,QAAoC;IAEpC,MAAM,OAAO,GAAG,0BAA0B,CAAC,QAAQ,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IAEpE,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AACxE,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,0BAA0B,CACxC,QAA2B,EAC3B,GAAW,EACX,QAAoC;IAEpC,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAE7C,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,UAAU,GAAG,YAAY,CAC5B,UAAkC,CAAC,UAAU,IAAI,EAAE,CACrD,CAAC;IAEF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,QAAQ,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;QAEvE,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,OAAO,CAAC;QACjB,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/terraform/sim-tf-refusal.d.ts

@@ -0,0 +1,23 @@
+import type { TerraformResource } from "./sim-tf-resource.type.js";
+import type { TerraformBuildContext } from "./sim-tf-attributes.js";
+import type { TerraformDeclaration } from "./sim-tf-mapping.type.js";
+import type { TerraformSkipReason } from "./sim-tf-report.type.js";
+/**
+ * Why the Resource a mapping builds is one the service would not accept.
+ *
+ * A plan can leave a value the service requires unresolvable, and a Resource
+ * built without it fails and takes the Stack's other Resources with it. The
+ * mapping names those properties under `requires`, and names under `refused`
+ * the case where every property is there and the service will not take one of
+ * the values. Either way the resource is left out of the template rather than
+ * deployed into a failure.
+ */
+export declare function terraformRefusal(declaration: TerraformDeclaration, build: TerraformBuildContext, unresolved: TerraformSkipReason): TerraformSkipReason | undefined;
+/**
+ * The properties a mapping declares as required and could not fill.
+ *
+ * A resource with no mapping at all has none. It is refused for the type
+ * before any value is read, and there is no mapping to ask what it needed.
+ */
+export declare function terraformMissingProperties(resource: TerraformResource, build: TerraformBuildContext): readonly string[];
+//# sourceMappingURL=sim-tf-refusal.d.ts.map

package/dist/terraform/sim-tf-refusal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-refusal.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-refusal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAEpE,OAAO,KAAK,EACV,oBAAoB,EAErB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAEnE;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAC9B,WAAW,EAAE,oBAAoB,EACjC,KAAK,EAAE,qBAAqB,EAC5B,UAAU,EAAE,mBAAmB,GAC9B,mBAAmB,GAAG,SAAS,CAQjC;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,iBAAiB,EAC3B,KAAK,EAAE,qBAAqB,GAC3B,SAAS,MAAM,EAAE,CAMnB"}