@kensio/yulin 1.19.2 → 1.19.3

package/dist/{service/cloudformation/terraform/sim-tf-template-graph.js → terraform/sim-tf-declare.js}

@@ -4,29 +4,41 @@
  * lookup. The records are parsed JSON with no prototype of their own.
  */
 // oxlint-disable security/detect-object-injection
-import { isRecord } from "../../../util/type-guard/record.js";
-import { terraformLogicalId, } from "./sim-tf-reference.js";
-import { longestFirst } from "./sim-tf-reference-address.js";
+import { isRecord } from "../util/type-guard/record.js";
 /**
- * The logical ID of the resource a fold belongs to.
+ * Build one CloudFormation Resource for each resource the plan settled on.
  *
- * The fold's parent attribute holds a reference rather than a value, because a
- * bucket or a role being created by the same plan has no name until it exists.
- * The reference names the resource directly, which is what a fold needs.
+ * Every reference resolves against that same settled set, so this runs once
+ * and nothing it produces is taken back afterwards.
  */
-export function foldTargetLogicalId(resource, parentAttribute, resolver) {
-    const expression = resource.expressions[parentAttribute];
-    if (!isRecord(expression)) {
-        return undefined;
+export function terraformDeclaredResources(settled) {
+    const templates = new Map();
+    const mapped = [];
+    const lost = [];
+    for (const { resource, mapping } of settled.declared) {
+        const built = mapping({
+            resource,
+            resolver: settled.resolver,
+            overrides: settled.overrides,
+        });
+        const logicalId = settled.resolver.logicalId(resource.address);
+        templates.set(logicalId, {
+            Type: built.Type,
+            Properties: built.Properties,
+            ...terraformDependsOn(resource, settled.resolver),
+        });
+        mapped.push({
+            address: resource.address,
+            type: resource.type,
+            cfnType: built.Type,
+            logicalId,
+        });
+        lost.push(...(built.lost ?? []).map((attribute) => ({
+            address: resource.address,
+            attribute,
+        })));
     }
-    const references = longestFirst(expression.references ?? []);
-    for (const reference of references) {
-        const address = resolver.targetAddress(reference, resource.modulePath);
-        if (address !== undefined) {
-            return terraformLogicalId(address);
-        }
-    }
-    return undefined;
+    return { templates, mapped, lost };
 }
 /**
  * The Resources one Resource has to be created after.
@@ -43,15 +55,15 @@ export function foldTargetLogicalId(resource, parentAttribute, resolver) {
  * into `DependsOn` gives the Stack the graph it would have read off a template
  * written by hand.
  */
-export function dependsOn(resource, resolver) {
-    const own = terraformLogicalId(resource.address);
+export function terraformDependsOn(resource, resolver) {
+    const own = resolver.logicalId(resource.address);
     const referenced = [
         ...resource.dependsOn,
         ...expressionReferences(resource.expressions),
     ]
         .map((reference) => resolver.targetAddress(reference, resource.modulePath))
         .filter((address) => address !== undefined)
-        .map((address) => terraformLogicalId(address))
+        .map((address) => resolver.logicalId(address))
         .filter((logicalId) => logicalId !== own);
     const declared = [...new Set(referenced)];
     return declared.length === 0 ? {} : { DependsOn: declared };
@@ -68,4 +80,4 @@ function expressionReferences(value) {
         ? nested.filter((entry) => typeof entry === "string")
         : expressionReferences(nested));
 }
-//# sourceMappingURL=sim-tf-template-graph.js.map
+//# sourceMappingURL=sim-tf-declare.js.map

package/dist/terraform/sim-tf-declare.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-declare.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-declare.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,kDAAkD;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAiBxD;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CACxC,OAA6B;IAE7B,MAAM,SAAS,GAAG,IAAI,GAAG,EAAqC,CAAC;IAC/D,MAAM,MAAM,GAAgC,EAAE,CAAC;IAC/C,MAAM,IAAI,GAA6B,EAAE,CAAC;IAE1C,KAAK,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrD,MAAM,KAAK,GAAG,OAAO,CAAC;YACpB,QAAQ;YACR,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAE/D,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE;YACvB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,GAAG,kBAAkB,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC;SAClD,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC;YACV,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,OAAO,EAAE,KAAK,CAAC,IAAI;YACnB,SAAS;SACV,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CACP,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YACxC,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,SAAS;SACV,CAAC,CAAC,CACJ,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AACrC,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAA2B,EAC3B,QAAoC;IAEpC,MAAM,GAAG,GAAG,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAEjD,MAAM,UAAU,GAAG;QACjB,GAAG,QAAQ,CAAC,SAAS;QACrB,GAAG,oBAAoB,CAAC,QAAQ,CAAC,WAAW,CAAC;KAC9C;SACE,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;SAC1E,MAAM,CAAC,CAAC,OAAO,EAAqB,EAAE,CAAC,OAAO,KAAK,SAAS,CAAC;SAC7D,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;SAC7C,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,GAAG,CAAC,CAAC;IAE5C,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;IAE1C,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AAC9D,CAAC;AAED,yEAAyE;AACzE,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,CACrD,GAAG,KAAK,YAAY,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAC3C,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;QACtE,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,CACjC,CAAC;AACJ,CAAC"}

package/dist/terraform/sim-tf-fold.d.ts

@@ -0,0 +1,26 @@
+import type { SimCfnTemplateValueRecord } from "../service/cloudformation/template/value/sim-cfn-template-value.js";
+import { type TerraformResource } from "./sim-tf-resource.type.js";
+import type { TerraformReferenceResolver } from "./sim-tf-reference.js";
+import type { TerraformPlanOverrides } from "./sim-tf-overrides.js";
+import type { TerraformImportedResource, TerraformLostAttribute, TerraformSkippedResource } from "./sim-tf-report.type.js";
+/** The template with every folding resource merged into what it configures. */
+export interface TerraformFoldedResources {
+    readonly templates: ReadonlyMap<string, SimCfnTemplateValueRecord>;
+    readonly folded: readonly TerraformImportedResource[];
+    readonly skipped: readonly TerraformSkippedResource[];
+    readonly lost: readonly TerraformLostAttribute[];
+}
+/**
+ * Merge every folding resource into the Resource it configures.
+ *
+ * The AWS provider splits one CloudFormation Resource across several Terraform
+ * resources. Six `aws_s3_bucket_*` resources configure one bucket, and
+ * CloudFormation carries all six as properties of one `AWS::S3::Bucket`.
+ *
+ * This runs after the Resources are declared, because a fold has nothing to
+ * merge into until its parent is in the template. A fold whose parent is not
+ * there is recorded rather than dropped, so the report still adds up to the
+ * plan.
+ */
+export declare function terraformFoldedResources(resources: readonly TerraformResource[], templates: ReadonlyMap<string, SimCfnTemplateValueRecord>, resolver: TerraformReferenceResolver, overrides: TerraformPlanOverrides): TerraformFoldedResources;
+//# sourceMappingURL=sim-tf-fold.d.ts.map

package/dist/terraform/sim-tf-fold.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-fold.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-fold.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oEAAoE,CAAC;AACpH,OAAO,EAEL,KAAK,iBAAiB,EACvB,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AAExE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAEpE,OAAO,KAAK,EACV,yBAAyB,EACzB,sBAAsB,EACtB,wBAAwB,EACzB,MAAM,yBAAyB,CAAC;AAEjC,+EAA+E;AAC/E,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;IACnE,QAAQ,CAAC,MAAM,EAAE,SAAS,yBAAyB,EAAE,CAAC;IACtD,QAAQ,CAAC,OAAO,EAAE,SAAS,wBAAwB,EAAE,CAAC;IACtD,QAAQ,CAAC,IAAI,EAAE,SAAS,sBAAsB,EAAE,CAAC;CAClD;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,SAAS,iBAAiB,EAAE,EACvC,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,yBAAyB,CAAC,EACzD,QAAQ,EAAE,0BAA0B,EACpC,SAAS,EAAE,sBAAsB,GAChC,wBAAwB,CA8C1B"}

package/dist/terraform/sim-tf-fold.js

@@ -0,0 +1,72 @@
+/*
+ * Reading a plan means reading records whose keys come from the document
+ * rather than from this code, so the object-injection rule fires on every
+ * lookup. The records are parsed JSON with no prototype of their own.
+ */
+// oxlint-disable security/detect-object-injection
+import { isRecord } from "../util/type-guard/record.js";
+import { terraformAwsProvider, } from "./sim-tf-resource.type.js";
+import { terraformReferencedAddress } from "./sim-tf-referenced.js";
+import { terraformResourceFolds } from "./sim-tf-registry.js";
+/**
+ * Merge every folding resource into the Resource it configures.
+ *
+ * The AWS provider splits one CloudFormation Resource across several Terraform
+ * resources. Six `aws_s3_bucket_*` resources configure one bucket, and
+ * CloudFormation carries all six as properties of one `AWS::S3::Bucket`.
+ *
+ * This runs after the Resources are declared, because a fold has nothing to
+ * merge into until its parent is in the template. A fold whose parent is not
+ * there is recorded rather than dropped, so the report still adds up to the
+ * plan.
+ */
+export function terraformFoldedResources(resources, templates, resolver, overrides) {
+    const merged = new Map(templates);
+    const folded = [];
+    const skipped = [];
+    const lost = [];
+    for (const resource of resources) {
+        const fold = terraformResourceFolds.get(resource.type);
+        if (fold === undefined || resource.provider !== terraformAwsProvider) {
+            continue;
+        }
+        const address = terraformReferencedAddress(resource, fold.parentAttribute, resolver);
+        const parentId = address === undefined ? undefined : resolver.logicalId(address);
+        const parent = parentId === undefined ? undefined : merged.get(parentId);
+        if (parentId === undefined || parent === undefined) {
+            skipped.push({
+                address: resource.address,
+                type: resource.type,
+                reason: "fold target not found",
+            });
+            continue;
+        }
+        const context = { resource, resolver, overrides };
+        const existing = parent["Properties"];
+        const added = fold.properties(context, isRecord(existing) ? existing : {});
+        merged.set(parentId, mergedParent(parent, added));
+        folded.push({ address: resource.address, type: resource.type });
+        lost.push(...(fold.lost?.(context) ?? []).map((attribute) => ({
+            address: resource.address,
+            attribute,
+        })));
+    }
+    return { templates: merged, folded, skipped, lost };
+}
+/**
+ * A resource template with a fold's properties merged into it.
+ *
+ * The fold contributes whole CloudFormation properties, so a later fold on the
+ * same parent replaces a property an earlier one set rather than merging into
+ * it. Two folds writing the same property are two of one Terraform type, and a
+ * fold whose property is a list is handed what the parent already carries so
+ * it can add to it.
+ */
+function mergedParent(parent, added) {
+    const existing = parent["Properties"];
+    return {
+        ...parent,
+        Properties: { ...(isRecord(existing) && existing), ...added },
+    };
+}
+//# sourceMappingURL=sim-tf-fold.js.map

package/dist/terraform/sim-tf-fold.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-fold.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-fold.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,kDAAkD;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAExD,OAAO,EACL,oBAAoB,GAErB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AAEpE,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAe9D;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,wBAAwB,CACtC,SAAuC,EACvC,SAAyD,EACzD,QAAoC,EACpC,SAAiC;IAEjC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IAClC,MAAM,MAAM,GAAgC,EAAE,CAAC;IAC/C,MAAM,OAAO,GAA+B,EAAE,CAAC;IAC/C,MAAM,IAAI,GAA6B,EAAE,CAAC;IAE1C,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,sBAAsB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAEvD,IAAI,IAAI,KAAK,SAAS,IAAI,QAAQ,CAAC,QAAQ,KAAK,oBAAoB,EAAE,CAAC;YACrE,SAAS;QACX,CAAC;QAED,MAAM,OAAO,GAAG,0BAA0B,CACxC,QAAQ,EACR,IAAI,CAAC,eAAe,EACpB,QAAQ,CACT,CAAC;QACF,MAAM,QAAQ,GACZ,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAEzE,IAAI,QAAQ,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACnD,OAAO,CAAC,IAAI,CAAC;gBACX,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,MAAM,EAAE,uBAAuB;aAChC,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,MAAM,OAAO,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;QAClD,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAE3E,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;QAClD,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAChE,IAAI,CAAC,IAAI,CACP,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YAClD,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,SAAS;SACV,CAAC,CAAC,CACJ,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACtD,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,YAAY,CACnB,MAAiC,EACjC,KAAgC;IAEhC,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;IAEtC,OAAO;QACL,GAAG,MAAM;QACT,UAAU,EAAE,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,EAAE,GAAG,KAAK,EAAE;KAC9D,CAAC;AACJ,CAAC"}

package/dist/terraform/sim-tf-import.d.ts

@@ -0,0 +1,31 @@
+import type { CfnTemplateBodyRecord } from "../service/cloudformation/template/sim-cfn-template.js";
+import type { TerraformPlan } from "./sim-tf-plan.type.js";
+import type { TerraformPlanOverride } from "./sim-tf-override.type.js";
+import type { TerraformImportReport } from "./sim-tf-report.type.js";
+/** A CloudFormation template built from a plan, and what building it did. */
+export interface TerraformImportResult {
+    readonly template: CfnTemplateBodyRecord;
+    readonly report: TerraformImportReport;
+}
+/**
+ * A CloudFormation template body built from a Terraform plan.
+ *
+ * The plan is the JSON `terraform show -json` writes for a saved plan file.
+ * What comes back is the body `deployTemplate` takes, so everything below the
+ * template is the machinery a CloudFormation, CDK or SAM deployment already
+ * goes through.
+ *
+ * It is read in three passes. Settling decides which resources the template
+ * will declare, and it is what makes the two after it single passes. Every
+ * reference then resolves against a set that has stopped changing, so no
+ * Resource is built and then taken back, and no property is left naming a
+ * logical ID the template does not hold. Declaring builds those Resources.
+ * Folding merges in the resources that configure another resource.
+ *
+ * The report alongside the template says what happened to every resource of
+ * the plan. A type with no mapping is skipped and named, in the same spirit as
+ * the skipped Resources a Stack records for a CloudFormation type no simulated
+ * service models.
+ */
+export declare function cfnTemplateFromTerraformPlan(plan: TerraformPlan, supplied?: readonly TerraformPlanOverride[]): TerraformImportResult;
+//# sourceMappingURL=sim-tf-import.d.ts.map

package/dist/terraform/sim-tf-import.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-import.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-import.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wDAAwD,CAAC;AACpG,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAO3D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAErE,6EAA6E;AAC7E,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;CACxC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,aAAa,EACnB,QAAQ,GAAE,SAAS,qBAAqB,EAAO,GAC9C,qBAAqB,CAgBvB"}

package/dist/terraform/sim-tf-import.js

@@ -0,0 +1,38 @@
+import { terraformPlanResources } from "./sim-tf-plan-resources.js";
+import { settledTerraformPlan } from "./sim-tf-settle.js";
+import { terraformDeclaredResources } from "./sim-tf-declare.js";
+import { terraformFoldedResources } from "./sim-tf-fold.js";
+import { terraformImportReport } from "./sim-tf-report.js";
+import { TerraformPlanOverrides } from "./sim-tf-overrides.js";
+/**
+ * A CloudFormation template body built from a Terraform plan.
+ *
+ * The plan is the JSON `terraform show -json` writes for a saved plan file.
+ * What comes back is the body `deployTemplate` takes, so everything below the
+ * template is the machinery a CloudFormation, CDK or SAM deployment already
+ * goes through.
+ *
+ * It is read in three passes. Settling decides which resources the template
+ * will declare, and it is what makes the two after it single passes. Every
+ * reference then resolves against a set that has stopped changing, so no
+ * Resource is built and then taken back, and no property is left naming a
+ * logical ID the template does not hold. Declaring builds those Resources.
+ * Folding merges in the resources that configure another resource.
+ *
+ * The report alongside the template says what happened to every resource of
+ * the plan. A type with no mapping is skipped and named, in the same spirit as
+ * the skipped Resources a Stack records for a CloudFormation type no simulated
+ * service models.
+ */
+export function cfnTemplateFromTerraformPlan(plan, supplied = []) {
+    const overrides = new TerraformPlanOverrides(supplied);
+    const resources = terraformPlanResources(plan);
+    const settled = settledTerraformPlan(plan, resources, overrides);
+    const declared = terraformDeclaredResources(settled);
+    const folded = terraformFoldedResources(resources, declared.templates, settled.resolver, overrides);
+    return {
+        template: { Resources: Object.fromEntries(folded.templates) },
+        report: terraformImportReport({ resources, settled, declared, folded }),
+    };
+}
+//# sourceMappingURL=sim-tf-import.js.map

package/dist/terraform/sim-tf-import.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-import.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-import.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAU/D;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,4BAA4B,CAC1C,IAAmB,EACnB,QAAQ,GAAqC,EAAE;IAE/C,MAAM,SAAS,GAAG,IAAI,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACjE,MAAM,QAAQ,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,wBAAwB,CACrC,SAAS,EACT,QAAQ,CAAC,SAAS,EAClB,OAAO,CAAC,QAAQ,EAChB,SAAS,CACV,CAAC;IAEF,OAAO;QACL,QAAQ,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE;QAC7D,MAAM,EAAE,qBAAqB,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;KACxE,CAAC;AACJ,CAAC"}

package/dist/terraform/sim-tf-logical-id.d.ts

@@ -0,0 +1,27 @@
+/**
+ * The CloudFormation logical IDs standing for the addresses of one plan.
+ *
+ * A logical ID is alphanumeric, so the module path, the resource type, the
+ * name and any `count` or `for_each` key are folded into one camel-run.
+ * Folding loses the separators, and two addresses can therefore arrive at the
+ * same run. `aws_s3_bucket.foo_bar` and `aws_s3_bucket.fooBar` both give
+ * `AwsS3BucketFooBar`, and so do the `for_each` keys `a-b` and `a_b`.
+ *
+ * The addresses of a plan are named together rather than one at a time, so a
+ * collision can be given a number instead of refusing the plan. Addresses are
+ * sorted before they are named, so which of a colliding pair keeps the plain
+ * ID is decided by the plan rather than by the order the resources were read
+ * in.
+ */
+export declare class TerraformLogicalIds {
+    private readonly byAddress;
+    constructor(addresses: Iterable<string>);
+    /**
+     * The logical ID standing for one address.
+     *
+     * An address this was not built with is named as though it stood alone,
+     * which is what a caller asking about a resource outside the template wants.
+     */
+    of(address: string): string;
+}
+//# sourceMappingURL=sim-tf-logical-id.d.ts.map

package/dist/terraform/sim-tf-logical-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-logical-id.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-logical-id.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA8B;IAExD,YAAY,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,EAEtC;IAED;;;;;OAKG;IACI,EAAE,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEjC;CACF"}

package/dist/terraform/sim-tf-logical-id.js

@@ -0,0 +1,83 @@
+/**
+ * The CloudFormation logical IDs standing for the addresses of one plan.
+ *
+ * A logical ID is alphanumeric, so the module path, the resource type, the
+ * name and any `count` or `for_each` key are folded into one camel-run.
+ * Folding loses the separators, and two addresses can therefore arrive at the
+ * same run. `aws_s3_bucket.foo_bar` and `aws_s3_bucket.fooBar` both give
+ * `AwsS3BucketFooBar`, and so do the `for_each` keys `a-b` and `a_b`.
+ *
+ * The addresses of a plan are named together rather than one at a time, so a
+ * collision can be given a number instead of refusing the plan. Addresses are
+ * sorted before they are named, so which of a colliding pair keeps the plain
+ * ID is decided by the plan rather than by the order the resources were read
+ * in.
+ */
+export class TerraformLogicalIds {
+    byAddress;
+    constructor(addresses) {
+        this.byAddress = namedAddresses([...addresses].toSorted(byCodeUnit));
+    }
+    /**
+     * The logical ID standing for one address.
+     *
+     * An address this was not built with is named as though it stood alone,
+     * which is what a caller asking about a resource outside the template wants.
+     */
+    of(address) {
+        return this.byAddress.get(address) ?? camelRun(address);
+    }
+}
+/**
+ * Address order by code unit, over addresses that are already distinct.
+ *
+ * Which of a colliding pair keeps the plain logical ID follows from this, so
+ * it has to be the same everywhere. `localeCompare` orders by the collation
+ * rules of whatever locale the process is running under, and a template whose
+ * logical IDs move with the machine is one a test cannot name a Resource in.
+ */
+function byCodeUnit(a, b) {
+    return a < b ? -1 : 1;
+}
+function namedAddresses(addresses) {
+    const groups = new Map();
+    for (const address of addresses) {
+        const base = camelRun(address);
+        groups.set(base, [...(groups.get(base) ?? []), address]);
+    }
+    const taken = new Set(groups.keys());
+    const named = new Map();
+    for (const [base, group] of groups) {
+        for (const [position, address] of group.entries()) {
+            named.set(address, position === 0 ? base : numbered(base, taken));
+        }
+    }
+    return named;
+}
+/**
+ * The next free numbered form of a logical ID.
+ *
+ * Numbering starts at two, so the first of a colliding group keeps the name
+ * the address gives and the second reads as the second of that name. The
+ * search steps past a number already taken, since a numbered ID can collide
+ * with one an address arrived at on its own.
+ */
+function numbered(base, taken) {
+    for (let suffix = 2;; suffix += 1) {
+        const candidate = `${base}${suffix}`;
+        if (!taken.has(candidate)) {
+            taken.add(candidate);
+            return candidate;
+        }
+    }
+}
+/** One address as a single alphanumeric camel-run. */
+function camelRun(address) {
+    const alphanumeric = address
+        .split(/[^A-Za-z0-9]+/)
+        .filter((part) => part.length > 0)
+        .map((part) => part.charAt(0).toUpperCase() + part.slice(1))
+        .join("");
+    return alphanumeric.length > 0 ? alphanumeric : "Resource";
+}
+//# sourceMappingURL=sim-tf-logical-id.js.map

package/dist/terraform/sim-tf-logical-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-logical-id.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-logical-id.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,mBAAmB;IACb,SAAS,CAA8B;IAExD,YAAY,SAA2B;QACrC,IAAI,CAAC,SAAS,GAAG,cAAc,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;IACvE,CAAC;IAED;;;;;OAKG;IACI,EAAE,CAAC,OAAe;QACvB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC1D,CAAC;CACF;AAED;;;;;;;GAOG;AACH,SAAS,UAAU,CAAC,CAAS,EAAE,CAAS;IACtC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,cAAc,CAAC,SAA4B;IAClD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAC;IAE3C,KAAK,MAAM,OAAO,IAAI,SAAS,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;QAE/B,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IAExC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;QACnC,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAClD,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,QAAQ,CAAC,IAAY,EAAE,KAAkB;IAChD,KAAK,IAAI,MAAM,GAAG,CAAC,GAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,SAAS,GAAG,GAAG,IAAI,GAAG,MAAM,EAAE,CAAC;QAErC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1B,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAErB,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;AACH,CAAC;AAED,sDAAsD;AACtD,SAAS,QAAQ,CAAC,OAAe;IAC/B,MAAM,YAAY,GAAG,OAAO;SACzB,KAAK,CAAC,eAAe,CAAC;SACtB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;SACjC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SAC3D,IAAI,CAAC,EAAE,CAAC,CAAC;IAEZ,OAAO,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC;AAC7D,CAAC"}

package/dist/terraform/sim-tf-mapping.type.d.ts

@@ -0,0 +1,73 @@
+import type { SimCfnTemplateValue } from "../service/cloudformation/template/value/sim-cfn-template-value.js";
+import type { TerraformMappingContext } from "./sim-tf-attributes.js";
+import type { TerraformResource } from "./sim-tf-resource.type.js";
+import type { TerraformSkipReason } from "./sim-tf-report.type.js";
+/**
+ * One CloudFormation Resource built from one Terraform resource.
+ *
+ * `lost` names the Terraform attributes the mapping could not carry across.
+ * A mapping records them rather than dropping them quietly, because an
+ * attribute that goes missing without a word is the kind of gap that only turns
+ * up later as a test passing for the wrong reason.
+ */
+export interface TerraformMappedResource {
+    readonly Type: string;
+    readonly Properties: Record<string, SimCfnTemplateValue>;
+    readonly lost?: readonly string[];
+    /**
+     * Properties the simulated service will refuse the Resource without.
+     *
+     * A plan can leave a required value unresolvable, and a Resource built
+     * without it fails and takes the Stack's other Resources with it. Naming the
+     * properties here lets the import drop that one Resource and record it,
+     * which is what sim CloudFormation already does with a Resource type it
+     * cannot create.
+     */
+    readonly requires?: readonly string[];
+    /**
+     * Why this Resource is one the simulated service would refuse whatever the
+     * plan resolved.
+     *
+     * `requires` covers a property the service needs and the plan could not
+     * fill. This covers the other shape, where every property is there and one
+     * of them holds a value the target refuses. Terraform's `SecureString`
+     * parameter is the example. Real CloudFormation refuses that type on an
+     * `AWS::SSM::Parameter` because the plaintext would sit in the template, and
+     * so does the simulation, so a Resource built for one fails the Stack around
+     * it rather than only itself.
+     */
+    readonly refused?: TerraformSkipReason | undefined;
+}
+export type TerraformResourceMapping = (context: TerraformMappingContext) => TerraformMappedResource;
+/** One resource of a plan, with the mapping that will build its Resource. */
+export interface TerraformDeclaration {
+    readonly resource: TerraformResource;
+    readonly mapping: TerraformResourceMapping;
+}
+/**
+ * How one Terraform resource contributes to another resource's properties.
+ *
+ * The AWS provider splits a single CloudFormation Resource across several
+ * Terraform resources. Six `aws_s3_bucket_*` resources configure one bucket,
+ * and CloudFormation carries all six as properties of one `AWS::S3::Bucket`.
+ * A fold names the attribute holding the parent's address, and returns the
+ * properties to merge into the parent.
+ *
+ * The properties the parent already carries are given along with the resource,
+ * for the fold that adds to a list rather than setting a property outright. An
+ * EventBridge rule's targets are one Terraform resource each and one `Targets`
+ * list on the Resource, so the second target of a rule has to find the first.
+ * A fold writing a property of its own ignores them.
+ */
+export interface TerraformResourceFold {
+    /** The attribute naming the resource these properties belong to. */
+    readonly parentAttribute: string;
+    readonly properties: (context: TerraformMappingContext, parent?: Record<string, SimCfnTemplateValue>) => Record<string, SimCfnTemplateValue>;
+    /**
+     * The Terraform attributes this fold could not carry across, as a mapping's
+     * own `lost` names them. A fold that carries everything it was given
+     * declares none.
+     */
+    readonly lost?: (context: TerraformMappingContext) => readonly string[];
+}
+//# sourceMappingURL=sim-tf-mapping.type.d.ts.map

package/dist/terraform/sim-tf-mapping.type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-mapping.type.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-mapping.type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oEAAoE,CAAC;AAC9G,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAEnE;;;;;;;GAOG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IACzD,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC;;;;;;;;OAQG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAEtC;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;CACpD;AAED,MAAM,MAAM,wBAAwB,GAAG,CACrC,OAAO,EAAE,uBAAuB,KAC7B,uBAAuB,CAAC;AAE7B,6EAA6E;AAC7E,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,wBAAwB,CAAC;CAC5C;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,qBAAqB;IACpC,oEAAoE;IACpE,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,CACnB,OAAO,EAAE,uBAAuB,EAChC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,KACzC,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IAEzC;;;;OAIG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,uBAAuB,KAAK,SAAS,MAAM,EAAE,CAAC;CACzE"}

package/dist/terraform/sim-tf-mapping.type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-mapping.type.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-mapping.type.ts"],"names":[],"mappings":""}

package/dist/{service/cloudformation/terraform → terraform}/sim-tf-module-outputs.d.ts

@@ -1,12 +1,4 @@
 import type { TerraformPlan } from "./sim-tf-plan.type.js";
-/**
- * What one module output is, in terms of the module that declares it.
- */
-export interface TerraformModuleOutput {
-    /** The module path the output's references are relative to. */
-    readonly modulePath: readonly string[];
-    readonly references: readonly string[];
-}
 /**
  * Every module output a plan declares, keyed by the address that reads it.
  *
@@ -15,5 +7,5 @@ export interface TerraformModuleOutput {
  * has, and the plan resolves nothing for it, so following it means reading the
  * output's own expression and continuing from the module that declares it.
  */
-export declare function terraformModuleOutputs(plan: TerraformPlan): ReadonlyMap<string, TerraformModuleOutput>;
+export declare function terraformModuleOutputs(plan: TerraformPlan): ReadonlyMap<string, readonly string[]>;
 //# sourceMappingURL=sim-tf-module-outputs.d.ts.map

package/dist/terraform/sim-tf-module-outputs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-module-outputs.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-module-outputs.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,aAAa,EACd,MAAM,uBAAuB,CAAC;AAE/B;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,aAAa,GAClB,WAAW,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CASxC"}

package/dist/terraform/sim-tf-module-outputs.js

@@ -0,0 +1,33 @@
+/**
+ * Every module output a plan declares, keyed by the address that reads it.
+ *
+ * A resource in one module reaching a resource in another goes through an
+ * output. `module.processor.lambda_function_arn` is not an address any resource
+ * has, and the plan resolves nothing for it, so following it means reading the
+ * output's own expression and continuing from the module that declares it.
+ */
+export function terraformModuleOutputs(plan) {
+    const outputs = new Map();
+    const root = plan.configuration?.root_module;
+    if (root !== undefined) {
+        collect(root, [], outputs);
+    }
+    return outputs;
+}
+function collect(config, modulePath, outputs) {
+    const calls = Object.entries(config.module_calls ?? {});
+    for (const [callName, call] of calls) {
+        const child = call.module;
+        if (child === undefined) {
+            continue;
+        }
+        const childPath = [...modulePath, callName];
+        const address = childPath.map((name) => `module.${name}`).join(".");
+        const declared = Object.entries(child.outputs ?? {});
+        for (const [name, output] of declared) {
+            outputs.set(`${address}.${name}`, output.expression?.references ?? []);
+        }
+        collect(child, childPath, outputs);
+    }
+}
+//# sourceMappingURL=sim-tf-module-outputs.js.map

package/dist/terraform/sim-tf-module-outputs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-module-outputs.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-module-outputs.ts"],"names":[],"mappings":"AAKA;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CACpC,IAAmB;IAEnB,MAAM,OAAO,GAAG,IAAI,GAAG,EAA6B,CAAC;IACrD,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC;IAE7C,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;IAC7B,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,OAAO,CACd,MAA6B,EAC7B,UAA6B,EAC7B,OAAuC;IAEvC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IAExD,KAAK,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC;QAE1B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,SAAS;QACX,CAAC;QAED,MAAM,SAAS,GAAG,CAAC,GAAG,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEpE,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QAErD,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACtC,OAAO,CAAC,GAAG,CAAC,GAAG,OAAO,IAAI,IAAI,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC;QACzE,CAAC;QAED,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;AACH,CAAC"}

package/dist/terraform/sim-tf-nested-attributes.d.ts

@@ -0,0 +1,33 @@
+import type { SimCfnTemplateValue } from "../service/cloudformation/template/value/sim-cfn-template-value.js";
+import { type TerraformMappingContext } from "./sim-tf-attributes.js";
+/**
+ * A list attribute whose entries name other resources.
+ *
+ * An alarm's `alarm_actions` holding one topic ARN of the same plan is marked
+ * unknown as a whole list, and the entries are gone with it. What survives is
+ * the reference behind each entry, and Terraform lists both the attribute form
+ * and the bare resource form of one reference. Both forms of a topic resolve to
+ * the same `Ref`, so the resolved values are deduplicated rather than the
+ * references, which is the only place the two forms can be told apart.
+ *
+ * A list the plan resolved is carried across as it stands.
+ */
+export declare function attributeList(context: TerraformMappingContext, key: string): SimCfnTemplateValue | undefined;
+/**
+ * One attribute of one entry of a repeating nested block.
+ *
+ * A bucket notification names the function it calls inside a `lambda_function`
+ * block, and the function's ARN is unknown whenever the same plan creates it.
+ * The mark and the references both sit at the same position in a list mirroring
+ * the block, so the entry's index is what finds them.
+ */
+export declare function blockAttribute(context: TerraformMappingContext, key: string, index: number, name: string): SimCfnTemplateValue | undefined;
+/**
+ * The fields of one nested block, under the names CloudFormation gives them.
+ *
+ * The provider writes every field of a block that was declared, filling the
+ * ones the configuration left out with null, so the table says what each field
+ * is called on either side and `properties` takes the nulls back out.
+ */
+export declare function blockFields(record: Record<string, unknown>, names: Readonly<Record<string, string>>): Record<string, SimCfnTemplateValue>;
+//# sourceMappingURL=sim-tf-nested-attributes.d.ts.map

package/dist/terraform/sim-tf-nested-attributes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-nested-attributes.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-nested-attributes.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oEAAoE,CAAC;AAC9G,OAAO,EAGL,KAAK,uBAAuB,EAC7B,MAAM,wBAAwB,CAAC;AAIhC;;;;;;;;;;;GAWG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,uBAAuB,EAChC,GAAG,EAAE,MAAM,GACV,mBAAmB,GAAG,SAAS,CAqBjC;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,uBAAuB,EAChC,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,GACX,mBAAmB,GAAG,SAAS,CAmBjC;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CACzB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GACtC,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CASrC"}