@kensio/yulin 1.19.1 → 1.19.3

package/dist/terraform/sim-tf-refusal.js

@@ -0,0 +1,44 @@
+import { terraformResourceMappings } from "./sim-tf-registry.js";
+/**
+ * Why the Resource a mapping builds is one the service would not accept.
+ *
+ * A plan can leave a value the service requires unresolvable, and a Resource
+ * built without it fails and takes the Stack's other Resources with it. The
+ * mapping names those properties under `requires`, and names under `refused`
+ * the case where every property is there and the service will not take one of
+ * the values. Either way the resource is left out of the template rather than
+ * deployed into a failure.
+ */
+export function terraformRefusal(declaration, build, unresolved) {
+    const built = builtResource(declaration, build);
+    if (built.refused !== undefined) {
+        return built.refused;
+    }
+    return missing(built).length === 0 ? undefined : unresolved;
+}
+/**
+ * The properties a mapping declares as required and could not fill.
+ *
+ * A resource with no mapping at all has none. It is refused for the type
+ * before any value is read, and there is no mapping to ask what it needed.
+ */
+export function terraformMissingProperties(resource, build) {
+    const mapping = terraformResourceMappings.get(resource.type);
+    return mapping === undefined
+        ? []
+        : missing(builtResource({ resource, mapping }, build));
+}
+/** The Resource one declaration's mapping builds, against this plan. */
+function builtResource(declaration, build) {
+    return declaration.mapping({
+        resource: declaration.resource,
+        resolver: build.resolver,
+        overrides: build.overrides,
+    });
+}
+function missing(built) {
+    return (built.requires ?? []).filter(
+    // oxlint-disable-next-line security/detect-object-injection
+    (name) => built.Properties[name] === undefined);
+}
+//# sourceMappingURL=sim-tf-refusal.js.map

package/dist/terraform/sim-tf-refusal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-refusal.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-refusal.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AAOjE;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAC9B,WAAiC,EACjC,KAA4B,EAC5B,UAA+B;IAE/B,MAAM,KAAK,GAAG,aAAa,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAEhD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,KAAK,CAAC,OAAO,CAAC;IACvB,CAAC;IAED,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;AAC9D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CACxC,QAA2B,EAC3B,KAA4B;IAE5B,MAAM,OAAO,GAAG,yBAAyB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAE7D,OAAO,OAAO,KAAK,SAAS;QAC1B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,wEAAwE;AACxE,SAAS,aAAa,CACpB,WAAiC,EACjC,KAA4B;IAE5B,OAAO,WAAW,CAAC,OAAO,CAAC;QACzB,QAAQ,EAAE,WAAW,CAAC,QAAQ;QAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC,CAAC;AACL,CAAC;AAED,SAAS,OAAO,CAAC,KAA8B;IAC7C,OAAO,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM;IAClC,4DAA4D;IAC5D,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,SAAS,CAC/C,CAAC;AACJ,CAAC"}

package/dist/terraform/sim-tf-registry.d.ts

@@ -0,0 +1,15 @@
+import type { TerraformResourceFold, TerraformResourceMapping } from "./sim-tf-mapping.type.js";
+/**
+ * The Terraform resource types this import turns into CloudFormation Resources.
+ *
+ * A type with no entry is recorded as skipped, which is what the stack already
+ * does with a CloudFormation Resource type no simulated service models. The
+ * set grows a service at a time.
+ */
+export declare const terraformResourceMappings: ReadonlyMap<string, TerraformResourceMapping>;
+/**
+ * The Terraform resource types that configure another resource rather than
+ * creating one of their own.
+ */
+export declare const terraformResourceFolds: ReadonlyMap<string, TerraformResourceFold>;
+//# sourceMappingURL=sim-tf-registry.d.ts.map

package/dist/terraform/sim-tf-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-registry.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,qBAAqB,EACrB,wBAAwB,EACzB,MAAM,0BAA0B,CAAC;AAiClC;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB,EAAE,WAAW,CACjD,MAAM,EACN,wBAAwB,CA0BxB,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,sBAAsB,EAAE,WAAW,CAC9C,MAAM,EACN,qBAAqB,CAQrB,CAAC"}

package/dist/terraform/sim-tf-registry.js

@@ -0,0 +1,67 @@
+import { metricAlarm } from "./map/sim-tf-map-cloudwatch.js";
+import { cognitoUserPool } from "./map/sim-tf-map-cognito.js";
+import { cognitoUserPoolClient } from "./map/sim-tf-map-cognito-client.js";
+import { dynamodbTable } from "./map/sim-tf-map-dynamodb.js";
+import { ecrRepository } from "./map/sim-tf-map-ecr.js";
+import { eventRule, eventTargetFolds } from "./map/sim-tf-map-events.js";
+import { httpApi, httpApiStage } from "./map/sim-tf-map-http-api.js";
+import { httpApiIntegration, httpApiRoute, } from "./map/sim-tf-map-http-api-routes.js";
+import { iamRole, iamRoleFolds } from "./map/sim-tf-map-iam.js";
+import { kmsAlias, kmsKey } from "./map/sim-tf-map-kms.js";
+import { lambdaEventSourceMapping, lambdaFunction, lambdaPermission, } from "./map/sim-tf-map-lambda.js";
+import { logGroup } from "./map/sim-tf-map-logs.js";
+import { s3Bucket } from "./map/sim-tf-map-s3.js";
+import { s3BucketFolds } from "./map/sim-tf-map-s3-folds.js";
+import { s3LifecycleFolds } from "./map/sim-tf-map-s3-lifecycle.js";
+import { bucketNotification } from "./map/sim-tf-map-s3-notification.js";
+import { secretsManagerFolds, secretsManagerSecret, } from "./map/sim-tf-map-secretsmanager.js";
+import { snsSubscription, snsTopic } from "./map/sim-tf-map-sns.js";
+import { sqsQueue } from "./map/sim-tf-map-sqs.js";
+import { sqsRedriveFolds } from "./map/sim-tf-map-sqs-redrive.js";
+import { ssmParameter } from "./map/sim-tf-map-ssm.js";
+/**
+ * The Terraform resource types this import turns into CloudFormation Resources.
+ *
+ * A type with no entry is recorded as skipped, which is what the stack already
+ * does with a CloudFormation Resource type no simulated service models. The
+ * set grows a service at a time.
+ */
+export const terraformResourceMappings = new Map([
+    ["aws_apigatewayv2_api", httpApi],
+    ["aws_apigatewayv2_integration", httpApiIntegration],
+    ["aws_apigatewayv2_route", httpApiRoute],
+    ["aws_apigatewayv2_stage", httpApiStage],
+    ["aws_cloudwatch_event_rule", eventRule],
+    ["aws_cloudwatch_log_group", logGroup],
+    ["aws_cloudwatch_metric_alarm", metricAlarm],
+    ["aws_cognito_user_pool", cognitoUserPool],
+    ["aws_cognito_user_pool_client", cognitoUserPoolClient],
+    ["aws_dynamodb_table", dynamodbTable],
+    ["aws_ecr_repository", ecrRepository],
+    ["aws_iam_role", iamRole],
+    ["aws_kms_alias", kmsAlias],
+    ["aws_kms_key", kmsKey],
+    ["aws_lambda_event_source_mapping", lambdaEventSourceMapping],
+    ["aws_lambda_function", lambdaFunction],
+    ["aws_lambda_permission", lambdaPermission],
+    ["aws_s3_bucket", s3Bucket],
+    ["aws_s3_bucket_notification", bucketNotification],
+    ["aws_secretsmanager_secret", secretsManagerSecret],
+    ["aws_sns_topic", snsTopic],
+    ["aws_sns_topic_subscription", snsSubscription],
+    ["aws_sqs_queue", sqsQueue],
+    ["aws_ssm_parameter", ssmParameter],
+]);
+/**
+ * The Terraform resource types that configure another resource rather than
+ * creating one of their own.
+ */
+export const terraformResourceFolds = new Map([
+    ...s3BucketFolds,
+    ...s3LifecycleFolds,
+    ...iamRoleFolds,
+    ...secretsManagerFolds,
+    ...eventTargetFolds,
+    ...sqsRedriveFolds,
+]);
+//# sourceMappingURL=sim-tf-registry.js.map

package/dist/terraform/sim-tf-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-registry.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-registry.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AACzE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EACL,kBAAkB,EAClB,YAAY,GACb,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EACL,wBAAwB,EACxB,cAAc,EACd,gBAAgB,GACjB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,EACL,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEvD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAGlC,IAAI,GAAG,CAAC;IACV,CAAC,sBAAsB,EAAE,OAAO,CAAC;IACjC,CAAC,8BAA8B,EAAE,kBAAkB,CAAC;IACpD,CAAC,wBAAwB,EAAE,YAAY,CAAC;IACxC,CAAC,wBAAwB,EAAE,YAAY,CAAC;IACxC,CAAC,2BAA2B,EAAE,SAAS,CAAC;IACxC,CAAC,0BAA0B,EAAE,QAAQ,CAAC;IACtC,CAAC,6BAA6B,EAAE,WAAW,CAAC;IAC5C,CAAC,uBAAuB,EAAE,eAAe,CAAC;IAC1C,CAAC,8BAA8B,EAAE,qBAAqB,CAAC;IACvD,CAAC,oBAAoB,EAAE,aAAa,CAAC;IACrC,CAAC,oBAAoB,EAAE,aAAa,CAAC;IACrC,CAAC,cAAc,EAAE,OAAO,CAAC;IACzB,CAAC,eAAe,EAAE,QAAQ,CAAC;IAC3B,CAAC,aAAa,EAAE,MAAM,CAAC;IACvB,CAAC,iCAAiC,EAAE,wBAAwB,CAAC;IAC7D,CAAC,qBAAqB,EAAE,cAAc,CAAC;IACvC,CAAC,uBAAuB,EAAE,gBAAgB,CAAC;IAC3C,CAAC,eAAe,EAAE,QAAQ,CAAC;IAC3B,CAAC,4BAA4B,EAAE,kBAAkB,CAAC;IAClD,CAAC,2BAA2B,EAAE,oBAAoB,CAAC;IACnD,CAAC,eAAe,EAAE,QAAQ,CAAC;IAC3B,CAAC,4BAA4B,EAAE,eAAe,CAAC;IAC/C,CAAC,eAAe,EAAE,QAAQ,CAAC;IAC3B,CAAC,mBAAmB,EAAE,YAAY,CAAC;CACpC,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAG/B,IAAI,GAAG,CAAC;IACV,GAAG,aAAa;IAChB,GAAG,gBAAgB;IACnB,GAAG,YAAY;IACf,GAAG,mBAAmB;IACtB,GAAG,gBAAgB;IACnB,GAAG,eAAe;CACnB,CAAC,CAAC"}

package/dist/terraform/sim-tf-report.d.ts

@@ -0,0 +1,21 @@
+import type { TerraformResource } from "./sim-tf-resource.type.js";
+import type { TerraformSettledPlan } from "./sim-tf-settle.js";
+import type { TerraformDeclaredResources } from "./sim-tf-declare.js";
+import type { TerraformFoldedResources } from "./sim-tf-fold.js";
+import type { TerraformImportReport } from "./sim-tf-report.type.js";
+export interface TerraformImportPasses {
+    readonly resources: readonly TerraformResource[];
+    readonly settled: TerraformSettledPlan;
+    readonly declared: TerraformDeclaredResources;
+    readonly folded: TerraformFoldedResources;
+}
+/**
+ * What an import did with every resource of the plan.
+ *
+ * Each resource is in exactly one of mapped, folded and skipped, so the three
+ * add up to the plan's managed resource count. That is what makes the mapped
+ * fraction a fraction of something, and what a reader checks the report
+ * against the configuration with.
+ */
+export declare function terraformImportReport(passes: TerraformImportPasses): TerraformImportReport;
+//# sourceMappingURL=sim-tf-report.d.ts.map

package/dist/terraform/sim-tf-report.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-report.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-report.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAE/D,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AACtE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,KAAK,EACV,qBAAqB,EAGtB,MAAM,yBAAyB,CAAC;AAEjC,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,SAAS,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACjD,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAC;IACvC,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;IAC9C,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;CAC3C;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,qBAAqB,GAC5B,qBAAqB,CAcvB"}

package/dist/terraform/sim-tf-report.js

@@ -0,0 +1,57 @@
+import { terraformMissingProperties } from "./sim-tf-refusal.js";
+/**
+ * What an import did with every resource of the plan.
+ *
+ * Each resource is in exactly one of mapped, folded and skipped, so the three
+ * add up to the plan's managed resource count. That is what makes the mapped
+ * fraction a fraction of something, and what a reader checks the report
+ * against the configuration with.
+ */
+export function terraformImportReport(passes) {
+    const { resources, settled, declared, folded } = passes;
+    return {
+        total: resources.length,
+        mapped: declared.mapped,
+        folded: folded.folded,
+        skipped: skippedResources(resources, settled, folded.skipped),
+        lost: [
+            ...declared.lost,
+            ...folded.lost,
+            ...refusedAttributes(resources, settled),
+        ],
+    };
+}
+/**
+ * Every resource the template holds nothing for, in the plan's own order.
+ *
+ * A resource is refused before anything is built, or is a fold that never
+ * found the resource it configures. Reading the plan's order back means the
+ * report can be read beside the configuration it came from.
+ */
+function skippedResources(resources, settled, foldSkips) {
+    const byAddress = new Map(foldSkips.map((skip) => [skip.address, skip]));
+    return resources.flatMap((resource) => {
+        const reason = settled.refused.get(resource.address);
+        if (reason !== undefined) {
+            return [{ address: resource.address, type: resource.type, reason }];
+        }
+        const foldSkip = byAddress.get(resource.address);
+        return foldSkip === undefined ? [] : [foldSkip];
+    });
+}
+/**
+ * The attributes a refused resource was refused for.
+ *
+ * A resource left out because a required value would not resolve names that
+ * value here, so the report says which attribute the plan could not carry
+ * rather than only that the resource is missing.
+ */
+function refusedAttributes(resources, settled) {
+    return resources
+        .filter((resource) => settled.refused.has(resource.address))
+        .flatMap((resource) => terraformMissingProperties(resource, settled).map((attribute) => ({
+        address: resource.address,
+        attribute,
+    })));
+}
+//# sourceMappingURL=sim-tf-report.js.map

package/dist/terraform/sim-tf-report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-report.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-report.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AAgBjE;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAA6B;IAE7B,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAExD,OAAO;QACL,KAAK,EAAE,SAAS,CAAC,MAAM;QACvB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,OAAO,EAAE,gBAAgB,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC;QAC7D,IAAI,EAAE;YACJ,GAAG,QAAQ,CAAC,IAAI;YAChB,GAAG,MAAM,CAAC,IAAI;YACd,GAAG,iBAAiB,CAAC,SAAS,EAAE,OAAO,CAAC;SACzC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,gBAAgB,CACvB,SAAuC,EACvC,OAA6B,EAC7B,SAA8C;IAE9C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAEzE,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE;QACpC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAErD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAEjD,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,SAAS,iBAAiB,CACxB,SAAuC,EACvC,OAA6B;IAE7B,OAAO,SAAS;SACb,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;SAC3D,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CACpB,0BAA0B,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAChE,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,SAAS;KACV,CAAC,CAAC,CACJ,CAAC;AACN,CAAC"}

package/dist/terraform/sim-tf-report.type.d.ts

@@ -0,0 +1,37 @@
+/**
+ * What one import of a plan did with every resource in it.
+ *
+ * A resource is mapped to a Resource of its own, folded into another
+ * resource's Resource, or skipped. The three add up to the plan's managed
+ * resource count, which is what makes the mapped fraction a fraction of
+ * something.
+ */
+export interface TerraformImportReport {
+    readonly total: number;
+    readonly mapped: readonly TerraformImportedResource[];
+    readonly folded: readonly TerraformImportedResource[];
+    readonly skipped: readonly TerraformSkippedResource[];
+    /** Attributes a mapping could not carry across, named per resource. */
+    readonly lost: readonly TerraformLostAttribute[];
+}
+export interface TerraformImportedResource {
+    /** The Terraform address, such as `module.uploads.aws_s3_bucket.this`. */
+    readonly address: string;
+    /** The Terraform resource type, such as `aws_s3_bucket`. */
+    readonly type: string;
+    /** The CloudFormation type it was deployed as, for a mapped resource. */
+    readonly cfnType?: string;
+    /** The logical ID the template declares it under, for a mapped resource. */
+    readonly logicalId?: string;
+}
+export interface TerraformSkippedResource {
+    readonly address: string;
+    readonly type: string;
+    readonly reason: TerraformSkipReason;
+}
+export type TerraformSkipReason = "no mapping for resource type" | "not an AWS provider resource" | "fold target not found" | "unresolved required attribute" | "a property value the service refuses" | "references a resource that was skipped";
+export interface TerraformLostAttribute {
+    readonly address: string;
+    readonly attribute: string;
+}
+//# sourceMappingURL=sim-tf-report.type.d.ts.map

package/dist/terraform/sim-tf-report.type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-report.type.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-report.type.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,SAAS,yBAAyB,EAAE,CAAC;IACtD,QAAQ,CAAC,MAAM,EAAE,SAAS,yBAAyB,EAAE,CAAC;IACtD,QAAQ,CAAC,OAAO,EAAE,SAAS,wBAAwB,EAAE,CAAC;IACtD,uEAAuE;IACvE,QAAQ,CAAC,IAAI,EAAE,SAAS,sBAAsB,EAAE,CAAC;CAClD;AAED,MAAM,WAAW,yBAAyB;IACxC,0EAA0E;IAC1E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,4DAA4D;IAC5D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,yEAAyE;IACzE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,4EAA4E;IAC5E,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;CACtC;AAED,MAAM,MAAM,mBAAmB,GAC3B,8BAA8B,GAC9B,8BAA8B,GAC9B,uBAAuB,GACvB,+BAA+B,GAC/B,sCAAsC,GACtC,wCAAwC,CAAC;AAE7C,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B"}

package/dist/terraform/sim-tf-report.type.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sim-tf-report.type.js.map

package/dist/terraform/sim-tf-report.type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-report.type.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-report.type.ts"],"names":[],"mappings":""}

package/dist/terraform/sim-tf-resource.type.d.ts

@@ -0,0 +1,33 @@
+/** The provider whose resource types this import knows how to map. */
+export declare const terraformAwsProvider = "hashicorp/aws";
+/**
+ * One resource of a plan, with everything the import needs about it in one
+ * place.
+ *
+ * A plan splits what it knows about a resource across three sections.
+ * `planned_values` holds resolved attributes, `resource_changes` marks the
+ * attributes that stayed unknown, and `configuration` holds what the resource
+ * refers to. This is the three joined up, and it is what every mapping, every
+ * reference and every report entry is written against.
+ */
+export interface TerraformResource {
+    /** The fully qualified address, such as `module.uploads.aws_s3_bucket.this`. */
+    readonly address: string;
+    readonly type: string;
+    readonly name: string;
+    /** The `count` or `for_each` key, for one instance of an expanded resource. */
+    readonly index: string | number | undefined;
+    /** The provider that owns the type, such as `hashicorp/aws`. */
+    readonly provider: string;
+    /** Attributes the plan resolved to a value. */
+    readonly values: Record<string, unknown>;
+    /** `after_unknown`, whose `true` leaves mark attributes still to be decided. */
+    readonly unknown: Record<string, unknown>;
+    /** Declared expressions, holding the `references` this resource reads. */
+    readonly expressions: Record<string, unknown>;
+    /** Explicit `depends_on` addresses, relative to the declaring module. */
+    readonly dependsOn: readonly string[];
+    /** The module call path this resource was declared under. */
+    readonly modulePath: readonly string[];
+}
+//# sourceMappingURL=sim-tf-resource.type.d.ts.map

package/dist/terraform/sim-tf-resource.type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-resource.type.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-resource.type.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,eAAO,MAAM,oBAAoB,kBAAkB,CAAC;AAEpD;;;;;;;;;GASG;AACH,MAAM,WAAW,iBAAiB;IAChC,gFAAgF;IAChF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,+EAA+E;IAC/E,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IAC5C,gEAAgE;IAChE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,+CAA+C;IAC/C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC,gFAAgF;IAChF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,0EAA0E;IAC1E,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9C,yEAAyE;IACzE,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,6DAA6D;IAC7D,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC"}

package/dist/terraform/sim-tf-resource.type.js

@@ -0,0 +1,3 @@
+/** The provider whose resource types this import knows how to map. */
+export const terraformAwsProvider = "hashicorp/aws";
+//# sourceMappingURL=sim-tf-resource.type.js.map

package/dist/terraform/sim-tf-resource.type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-resource.type.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-resource.type.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,MAAM,CAAC,MAAM,oBAAoB,GAAG,eAAe,CAAC"}

package/dist/terraform/sim-tf-settle.d.ts

@@ -0,0 +1,36 @@
+import type { TerraformPlan } from "./sim-tf-plan.type.js";
+import { type TerraformResource } from "./sim-tf-resource.type.js";
+import { TerraformReferenceResolver } from "./sim-tf-reference.js";
+import type { TerraformDeclaration } from "./sim-tf-mapping.type.js";
+import type { TerraformPlanOverrides } from "./sim-tf-overrides.js";
+import type { TerraformSkipReason } from "./sim-tf-report.type.js";
+/**
+ * Which resources of a plan the template will declare, and what resolves
+ * against them.
+ */
+export interface TerraformSettledPlan {
+    /** The resources a Resource is built for, in plan order. */
+    readonly declared: readonly TerraformDeclaration[];
+    /** A resolver that knows those resources and no others. */
+    readonly resolver: TerraformReferenceResolver;
+    /** What the deployment supplied for the values the plan could not carry. */
+    readonly overrides: TerraformPlanOverrides;
+    /** Why a resource is not one of them, by address. */
+    readonly refused: ReadonlyMap<string, TerraformSkipReason>;
+}
+/**
+ * Settle which resources of a plan become CloudFormation Resources.
+ *
+ * Whether a resource can be built depends on what its references resolve to,
+ * and what a reference resolves to depends on which resources are being built.
+ * The two are decided together before anything is built. Each round drops the
+ * resources whose required properties the round's resolver cannot fill, and a
+ * resource dropped is one the next round's references no longer reach. The set
+ * only ever shrinks, and the rounds therefore end.
+ *
+ * Building against the settled set is then a single pass that produces nothing
+ * it has to take back. No Resource is built and then removed, and no property
+ * is left naming a logical ID the template does not declare.
+ */
+export declare function settledTerraformPlan(plan: TerraformPlan, resources: readonly TerraformResource[], overrides: TerraformPlanOverrides): TerraformSettledPlan;
+//# sourceMappingURL=sim-tf-settle.d.ts.map

package/dist/terraform/sim-tf-settle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-settle.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-settle.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAEL,KAAK,iBAAiB,EACvB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AAKnE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAEpE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAEnE;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,4DAA4D;IAC5D,QAAQ,CAAC,QAAQ,EAAE,SAAS,oBAAoB,EAAE,CAAC;IACnD,2DAA2D;IAC3D,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;IAC9C,4EAA4E;IAC5E,QAAQ,CAAC,SAAS,EAAE,sBAAsB,CAAC;IAC3C,qDAAqD;IACrD,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;CAC5D;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,aAAa,EACnB,SAAS,EAAE,SAAS,iBAAiB,EAAE,EACvC,SAAS,EAAE,sBAAsB,GAChC,oBAAoB,CAuCtB"}

package/dist/terraform/sim-tf-settle.js

@@ -0,0 +1,63 @@
+import { terraformAwsProvider, } from "./sim-tf-resource.type.js";
+import { terraformModuleOutputs } from "./sim-tf-module-outputs.js";
+import { TerraformReferenceResolver } from "./sim-tf-reference.js";
+import { terraformResourceFolds, terraformResourceMappings, } from "./sim-tf-registry.js";
+import { terraformRefusal } from "./sim-tf-refusal.js";
+/**
+ * Settle which resources of a plan become CloudFormation Resources.
+ *
+ * Whether a resource can be built depends on what its references resolve to,
+ * and what a reference resolves to depends on which resources are being built.
+ * The two are decided together before anything is built. Each round drops the
+ * resources whose required properties the round's resolver cannot fill, and a
+ * resource dropped is one the next round's references no longer reach. The set
+ * only ever shrinks, and the rounds therefore end.
+ *
+ * Building against the settled set is then a single pass that produces nothing
+ * it has to take back. No Resource is built and then removed, and no property
+ * is left naming a logical ID the template does not declare.
+ */
+export function settledTerraformPlan(plan, resources, overrides) {
+    const moduleOutputs = terraformModuleOutputs(plan);
+    const refused = new Map();
+    let candidates = resources.flatMap((resource) => mappable(resource, refused));
+    let reason = "unresolved required attribute";
+    for (;;) {
+        const resolver = new TerraformReferenceResolver(candidates.map((declaration) => declaration.resource), moduleOutputs);
+        const dropped = new Map(candidates.flatMap((declaration) => {
+            const why = terraformRefusal(declaration, { resolver, overrides }, reason);
+            return why === undefined ? [] : [[declaration.resource.address, why]];
+        }));
+        if (dropped.size === 0) {
+            return { declared: candidates, resolver, overrides, refused };
+        }
+        for (const [address, why] of dropped) {
+            refused.set(address, why);
+        }
+        candidates = candidates.filter((declaration) => !dropped.has(declaration.resource.address));
+        // A resource that was buildable a round ago and is not now lost the
+        // resource it was reading, rather than never having had one.
+        reason = "references a resource that was skipped";
+    }
+}
+/**
+ * The mapping a resource will be built with, if this import has one for it.
+ *
+ * A folding resource comes back with none and without a reason recorded, since
+ * the fold pass is what decides whether it reached the resource it configures.
+ */
+function mappable(resource, refused) {
+    if (resource.provider !== terraformAwsProvider) {
+        refused.set(resource.address, "not an AWS provider resource");
+        return [];
+    }
+    const mapping = terraformResourceMappings.get(resource.type);
+    if (mapping !== undefined) {
+        return [{ resource, mapping }];
+    }
+    if (!terraformResourceFolds.has(resource.type)) {
+        refused.set(resource.address, "no mapping for resource type");
+    }
+    return [];
+}
+//# sourceMappingURL=sim-tf-settle.js.map

package/dist/terraform/sim-tf-settle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-settle.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-settle.ts"],"names":[],"mappings":"AACA,OAAO,EACL,oBAAoB,GAErB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AACnE,OAAO,EACL,sBAAsB,EACtB,yBAAyB,GAC1B,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAkBvD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAAmB,EACnB,SAAuC,EACvC,SAAiC;IAEjC,MAAM,aAAa,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,IAAI,GAAG,EAA+B,CAAC;IAEvD,IAAI,UAAU,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;IAC9E,IAAI,MAAM,GAAwB,+BAA+B,CAAC;IAElE,SAAS,CAAC;QACR,MAAM,QAAQ,GAAG,IAAI,0BAA0B,CAC7C,UAAU,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,EACrD,aAAa,CACd,CAAC;QACF,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,UAAU,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE;YACjC,MAAM,GAAG,GAAG,gBAAgB,CAC1B,WAAW,EACX,EAAE,QAAQ,EAAE,SAAS,EAAE,EACvB,MAAM,CACP,CAAC;YAEF,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QACxE,CAAC,CAAC,CACH,CAAC;QAEF,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;QAChE,CAAC;QAED,KAAK,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,OAAO,EAAE,CAAC;YACrC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC5B,CAAC;QAED,UAAU,GAAG,UAAU,CAAC,MAAM,CAC5B,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,CAC5D,CAAC;QACF,oEAAoE;QACpE,6DAA6D;QAC7D,MAAM,GAAG,wCAAwC,CAAC;IACpD,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,QAAQ,CACf,QAA2B,EAC3B,OAAyC;IAEzC,IAAI,QAAQ,CAAC,QAAQ,KAAK,oBAAoB,EAAE,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,EAAE,8BAA8B,CAAC,CAAC;QAE9D,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,OAAO,GAAG,yBAAyB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAE7D,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IACjC,CAAC;IAED,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,EAAE,8BAA8B,CAAC,CAAC;IAChE,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/dist/util/filesystem/test-terraform-project.d.ts

@@ -0,0 +1,67 @@
+export interface TestTerraformProjectProperties {
+    /**
+     * Whether this configuration is expected to fail its `data` blocks.
+     *
+     * Only a configuration known to read AWS at plan time sets this, and it
+     * limits the tolerance to that one. Every other configuration treats a
+     * non-zero exit as the failure it is.
+     */
+    readonly toleratesDataSourceErrors?: boolean;
+}
+/**
+ * A Terraform configuration under `test/terraform`, planned on demand.
+ *
+ * The plan JSON a Terraform import reads runs to thousands of lines, and the
+ * configuration behind it runs to tens. Only the configuration is in the
+ * repository, and this produces the plan from it the way `TestCdkProject`
+ * produces a cloud assembly from a CDK app.
+ *
+ * `terraform init` downloads the AWS provider, which is one binary of about
+ * 650MB. That is far too slow to sit inside a test, so it is left to
+ * `pnpm tf:init` and to the workflow step that caches it. A configuration that
+ * has never been initialised is reported rather than initialised here.
+ */
+export declare class TestTerraformProject {
+    readonly name: string;
+    private readonly directory;
+    private readonly toleratesDataSourceErrors;
+    constructor(name: string, properties?: TestTerraformProjectProperties);
+    /**
+     * The plan JSON for this configuration, as `terraform show -json` writes it.
+     *
+     * The plan file goes to a temporary directory rather than into the
+     * configuration, so a run leaves the repository as it found it.
+     */
+    planJson(): Promise<unknown>;
+    /**
+     * The path of a file holding this configuration's plan JSON.
+     *
+     * `TerraformAdapter.deployPlan` reads a path rather than a document, so a
+     * test of the deployment needs the JSON on disk. It goes to a temporary directory
+     * for the same reason the plan file does.
+     */
+    planJsonPath(): Promise<string>;
+    /**
+     * Write the plan file.
+     *
+     * A configuration reading a `data` block that calls AWS cannot be planned
+     * offline. Terraform reports each one as an error and exits non-zero, and it
+     * still writes a plan covering the managed resources, which are what an
+     * import reads. A configuration expecting that says so. Every other failure
+     * is a failure, so a broken configuration cannot pass as a partial plan.
+     *
+     * The state lock is not taken. These configurations have no state and are
+     * never applied, and several test files plan the same one at once.
+     */
+    private plan;
+    private show;
+    /**
+     * Fail with what to run, rather than with what Terraform says.
+     *
+     * Terraform's own message for an uninitialised directory names a command
+     * that would work and say nothing about the provider cache this repository
+     * shares between its two configurations.
+     */
+    private requireInitialised;
+}
+//# sourceMappingURL=test-terraform-project.d.ts.map

package/dist/util/filesystem/test-terraform-project.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-terraform-project.d.ts","sourceRoot":"","sources":["../../../src/util/filesystem/test-terraform-project.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,8BAA8B;IAC7C;;;;;;OAMG;IACH,QAAQ,CAAC,yBAAyB,CAAC,EAAE,OAAO,CAAC;CAC9C;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,oBAAoB;aAKb,IAAI,EAAE,MAAM;IAJ9B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAAU;IAEpD,YACkB,IAAI,EAAE,MAAM,EAC5B,UAAU,GAAE,8BAAmC,EAKhD;IAED;;;;;OAKG;IACG,QAAQ,IAAI,OAAO,CAAC,OAAO,CAAC,CAUjC;IAED;;;;;;OAMG;IACG,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC,CAcpC;IAED;;;;;;;;;;;OAWG;YACW,IAAI;YA6BJ,IAAI;IAUlB;;;;;;OAMG;IACH,OAAO,CAAC,kBAAkB;CAY3B"}

package/dist/util/filesystem/test-terraform-project.js

@@ -0,0 +1,112 @@
+import { existsSync } from "node:fs";
+import { execa } from "execa";
+import { repoPath } from "./path.js";
+import { TemporaryDirectory } from "./temporary-directory.js";
+/**
+ * A Terraform configuration under `test/terraform`, planned on demand.
+ *
+ * The plan JSON a Terraform import reads runs to thousands of lines, and the
+ * configuration behind it runs to tens. Only the configuration is in the
+ * repository, and this produces the plan from it the way `TestCdkProject`
+ * produces a cloud assembly from a CDK app.
+ *
+ * `terraform init` downloads the AWS provider, which is one binary of about
+ * 650MB. That is far too slow to sit inside a test, so it is left to
+ * `pnpm tf:init` and to the workflow step that caches it. A configuration that
+ * has never been initialised is reported rather than initialised here.
+ */
+export class TestTerraformProject {
+    name;
+    directory;
+    toleratesDataSourceErrors;
+    constructor(name, properties = {}) {
+        this.name = name;
+        this.directory = repoPath(`test/terraform/${name}`);
+        this.toleratesDataSourceErrors =
+            properties.toleratesDataSourceErrors ?? false;
+    }
+    /**
+     * The plan JSON for this configuration, as `terraform show -json` writes it.
+     *
+     * The plan file goes to a temporary directory rather than into the
+     * configuration, so a run leaves the repository as it found it.
+     */
+    async planJson() {
+        this.requireInitialised();
+        const output = new TemporaryDirectory();
+        await output.resolvePath();
+        const planFile = output.join(`${this.name}.tfplan`);
+        await this.plan(planFile);
+        return JSON.parse(await this.show(planFile));
+    }
+    /**
+     * The path of a file holding this configuration's plan JSON.
+     *
+     * `TerraformAdapter.deployPlan` reads a path rather than a document, so a
+     * test of the deployment needs the JSON on disk. It goes to a temporary directory
+     * for the same reason the plan file does.
+     */
+    async planJsonPath() {
+        this.requireInitialised();
+        const output = new TemporaryDirectory();
+        await output.resolvePath();
+        const planFile = output.join(`${this.name}.tfplan`);
+        await this.plan(planFile);
+        await output.writeFile(`${this.name}.tfplan.json`, await this.show(planFile));
+        return output.join(`${this.name}.tfplan.json`);
+    }
+    /**
+     * Write the plan file.
+     *
+     * A configuration reading a `data` block that calls AWS cannot be planned
+     * offline. Terraform reports each one as an error and exits non-zero, and it
+     * still writes a plan covering the managed resources, which are what an
+     * import reads. A configuration expecting that says so. Every other failure
+     * is a failure, so a broken configuration cannot pass as a partial plan.
+     *
+     * The state lock is not taken. These configurations have no state and are
+     * never applied, and several test files plan the same one at once.
+     */
+    async plan(planFile) {
+        const result = await execa("terraform", [
+            `-chdir=${this.directory}`,
+            "plan",
+            "-input=false",
+            // There is no state to protect. Nothing is ever applied here, and two
+            // test files planning the same configuration at once would otherwise
+            // fail on each other's state lock rather than on the configuration.
+            "-lock=false",
+            "-out",
+            planFile,
+        ], { env: { TF_IN_AUTOMATION: "1" }, reject: false });
+        if (result.exitCode === 0) {
+            return;
+        }
+        // oxlint-disable-next-line security/detect-non-literal-fs-filename
+        if (this.toleratesDataSourceErrors && existsSync(planFile)) {
+            return;
+        }
+        throw new Error(`terraform plan failed for ${this.name}: ${result.stderr}`);
+    }
+    async show(planFile) {
+        const { stdout } = await execa("terraform", [`-chdir=${this.directory}`, "show", "-json", planFile], { env: { TF_IN_AUTOMATION: "1" } });
+        return stdout;
+    }
+    /**
+     * Fail with what to run, rather than with what Terraform says.
+     *
+     * Terraform's own message for an uninitialised directory names a command
+     * that would work and say nothing about the provider cache this repository
+     * shares between its two configurations.
+     */
+    requireInitialised() {
+        // oxlint-disable-next-line security/detect-non-literal-fs-filename
+        if (existsSync(`${this.directory}/.terraform`)) {
+            return;
+        }
+        throw new Error(`Terraform configuration ${this.name} is not initialised. ` +
+            `Run \`pnpm tf:init\` first. It downloads the AWS provider, which ` +
+            `takes a few minutes the first time and nothing afterwards.`);
+    }
+}
+//# sourceMappingURL=test-terraform-project.js.map

package/dist/util/filesystem/test-terraform-project.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-terraform-project.js","sourceRoot":"","sources":["../../../src/util/filesystem/test-terraform-project.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAC9B,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAa9D;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,oBAAoB;IAKb,IAAI;IAJL,SAAS,CAAS;IAClB,yBAAyB,CAAU;IAEpD,YACkB,IAAY,EAC5B,UAAU,GAAmC,EAAE;oBAD/B,IAAI;QAGpB,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,yBAAyB;YAC5B,UAAU,CAAC,yBAAyB,IAAI,KAAK,CAAC;IAClD,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,QAAQ;QACZ,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAE1B,MAAM,MAAM,GAAG,IAAI,kBAAkB,EAAE,CAAC;QACxC,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,SAAS,CAAC,CAAC;QAEpD,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAE1B,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAY,CAAC;IAC1D,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,YAAY;QAChB,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAE1B,MAAM,MAAM,GAAG,IAAI,kBAAkB,EAAE,CAAC;QACxC,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,SAAS,CAAC,CAAC;QAEpD,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1B,MAAM,MAAM,CAAC,SAAS,CACpB,GAAG,IAAI,CAAC,IAAI,cAAc,EAC1B,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAC1B,CAAC;QAEF,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,cAAc,CAAC,CAAC;IACjD,CAAC;IAED;;;;;;;;;;;OAWG;IACK,KAAK,CAAC,IAAI,CAAC,QAAgB;QACjC,MAAM,MAAM,GAAG,MAAM,KAAK,CACxB,WAAW,EACX;YACE,UAAU,IAAI,CAAC,SAAS,EAAE;YAC1B,MAAM;YACN,cAAc;YACd,sEAAsE;YACtE,qEAAqE;YACrE,oEAAoE;YACpE,aAAa;YACb,MAAM;YACN,QAAQ;SACT,EACD,EAAE,GAAG,EAAE,EAAE,gBAAgB,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAClD,CAAC;QAEF,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO;QACT,CAAC;QAED,mEAAmE;QACnE,IAAI,IAAI,CAAC,yBAAyB,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3D,OAAO;QACT,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9E,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,QAAgB;QACjC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,CAC5B,WAAW,EACX,CAAC,UAAU,IAAI,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,EACvD,EAAE,GAAG,EAAE,EAAE,gBAAgB,EAAE,GAAG,EAAE,EAAE,CACnC,CAAC;QAEF,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;OAMG;IACK,kBAAkB;QACxB,mEAAmE;QACnE,IAAI,UAAU,CAAC,GAAG,IAAI,CAAC,SAAS,aAAa,CAAC,EAAE,CAAC;YAC/C,OAAO;QACT,CAAC;QAED,MAAM,IAAI,KAAK,CACb,2BAA2B,IAAI,CAAC,IAAI,uBAAuB;YACzD,mEAAmE;YACnE,4DAA4D,CAC/D,CAAC;IACJ,CAAC;CACF"}