@kensio/yulin 1.19.2 → 1.19.4

package/dist/terraform/map/sim-tf-map-cognito-client.d.ts

@@ -0,0 +1,15 @@
+import { type TerraformMappingContext } from "../sim-tf-attributes.js";
+import type { TerraformMappedResource } from "../sim-tf-mapping.type.js";
+/**
+ * A user pool client.
+ *
+ * The pool is required, as it is on real CloudFormation: a client belongs to
+ * one pool and there is nowhere to create one without it. A plan whose pool
+ * this import left out therefore leaves the client out too.
+ *
+ * Nothing else is required. The token lifetimes and the OAuth settings arrive
+ * unknown on a client that states none, because AWS decides them, and a client
+ * created without them gets the same defaults here.
+ */
+export declare function cognitoUserPoolClient(context: TerraformMappingContext): TerraformMappedResource;
+//# sourceMappingURL=sim-tf-map-cognito-client.d.ts.map

package/dist/terraform/map/sim-tf-map-cognito-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-map-cognito-client.d.ts","sourceRoot":"","sources":["../../../src/terraform/map/sim-tf-map-cognito-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAW,KAAK,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAChF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAEzE;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,uBAAuB,GAC/B,uBAAuB,CAuBzB"}

package/dist/terraform/map/sim-tf-map-cognito-client.js

@@ -0,0 +1,37 @@
+import { renamed } from "../sim-tf-attributes.js";
+/**
+ * A user pool client.
+ *
+ * The pool is required, as it is on real CloudFormation: a client belongs to
+ * one pool and there is nowhere to create one without it. A plan whose pool
+ * this import left out therefore leaves the client out too.
+ *
+ * Nothing else is required. The token lifetimes and the OAuth settings arrive
+ * unknown on a client that states none, because AWS decides them, and a client
+ * created without them gets the same defaults here.
+ */
+export function cognitoUserPoolClient(context) {
+    return {
+        Type: "AWS::Cognito::UserPoolClient",
+        Properties: renamed(context, {
+            UserPoolId: "user_pool_id",
+            ClientName: "name",
+            GenerateSecret: "generate_secret",
+            ExplicitAuthFlows: "explicit_auth_flows",
+            PreventUserExistenceErrors: "prevent_user_existence_errors",
+            AccessTokenValidity: "access_token_validity",
+            IdTokenValidity: "id_token_validity",
+            RefreshTokenValidity: "refresh_token_validity",
+            AuthSessionValidity: "auth_session_validity",
+            AllowedOAuthFlows: "allowed_oauth_flows",
+            AllowedOAuthFlowsUserPoolClient: "allowed_oauth_flows_user_pool_client",
+            AllowedOAuthScopes: "allowed_oauth_scopes",
+            CallbackURLs: "callback_urls",
+            LogoutURLs: "logout_urls",
+            DefaultRedirectURI: "default_redirect_uri",
+            SupportedIdentityProviders: "supported_identity_providers",
+        }),
+        requires: ["UserPoolId"],
+    };
+}
+//# sourceMappingURL=sim-tf-map-cognito-client.js.map

package/dist/terraform/map/sim-tf-map-cognito-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-map-cognito-client.js","sourceRoot":"","sources":["../../../src/terraform/map/sim-tf-map-cognito-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAgC,MAAM,yBAAyB,CAAC;AAGhF;;;;;;;;;;GAUG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAAgC;IAEhC,OAAO;QACL,IAAI,EAAE,8BAA8B;QACpC,UAAU,EAAE,OAAO,CAAC,OAAO,EAAE;YAC3B,UAAU,EAAE,cAAc;YAC1B,UAAU,EAAE,MAAM;YAClB,cAAc,EAAE,iBAAiB;YACjC,iBAAiB,EAAE,qBAAqB;YACxC,0BAA0B,EAAE,+BAA+B;YAC3D,mBAAmB,EAAE,uBAAuB;YAC5C,eAAe,EAAE,mBAAmB;YACpC,oBAAoB,EAAE,wBAAwB;YAC9C,mBAAmB,EAAE,uBAAuB;YAC5C,iBAAiB,EAAE,qBAAqB;YACxC,+BAA+B,EAAE,sCAAsC;YACvE,kBAAkB,EAAE,sBAAsB;YAC1C,YAAY,EAAE,eAAe;YAC7B,UAAU,EAAE,aAAa;YACzB,kBAAkB,EAAE,sBAAsB;YAC1C,0BAA0B,EAAE,8BAA8B;SAC3D,CAAC;QACF,QAAQ,EAAE,CAAC,YAAY,CAAC;KACzB,CAAC;AACJ,CAAC"}

package/dist/terraform/map/sim-tf-map-cognito-pool.d.ts

@@ -0,0 +1,26 @@
+import type { SimCfnTemplateValue } from "../../service/cloudformation/template/value/sim-cfn-template-value.js";
+import { type TerraformMappingContext } from "../sim-tf-attributes.js";
+/**
+ * The attributes the pool holds, one Terraform `schema` block each.
+ *
+ * A custom attribute's constraints are a nested block of their own, and the
+ * provider writes both kinds on every entry, so the one that does not belong
+ * to the attribute's type is an empty list and comes back undefined.
+ */
+export declare function userPoolSchema(context: TerraformMappingContext): SimCfnTemplateValue | undefined;
+/**
+ * The pool's tags, which CloudFormation carries as a map rather than as the
+ * list of key and value pairs it uses everywhere else.
+ *
+ * `tags_all` is `tags` merged with the provider's default tags, and it is the
+ * one that ends up on the pool.
+ */
+export declare function userPoolTags(context: TerraformMappingContext): SimCfnTemplateValue | undefined;
+/**
+ * The pool's password policy, which CloudFormation nests under `Policies`.
+ *
+ * A policy of nothing but nulls is a pool that stated the block and configured
+ * nothing in it, so an empty result is left off rather than sent.
+ */
+export declare function userPoolPolicies(context: TerraformMappingContext): SimCfnTemplateValue | undefined;
+//# sourceMappingURL=sim-tf-map-cognito-pool.d.ts.map

package/dist/terraform/map/sim-tf-map-cognito-pool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-map-cognito-pool.d.ts","sourceRoot":"","sources":["../../../src/terraform/map/sim-tf-map-cognito-pool.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uEAAuE,CAAC;AACjH,OAAO,EAML,KAAK,uBAAuB,EAC7B,MAAM,yBAAyB,CAAC;AAGjC;;;;;;GAMG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,uBAAuB,GAC/B,mBAAmB,GAAG,SAAS,CA4BjC;AAoBD;;;;;;GAMG;AACH,wBAAgB,YAAY,CAC1B,OAAO,EAAE,uBAAuB,GAC/B,mBAAmB,GAAG,SAAS,CAKjC;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,uBAAuB,GAC/B,mBAAmB,GAAG,SAAS,CAoBjC"}

package/dist/terraform/map/sim-tf-map-cognito-pool.js

@@ -0,0 +1,70 @@
+import { block, blocks, field, properties, templateValue, } from "../sim-tf-attributes.js";
+import { blockFields } from "../sim-tf-nested-attributes.js";
+/**
+ * The attributes the pool holds, one Terraform `schema` block each.
+ *
+ * A custom attribute's constraints are a nested block of their own, and the
+ * provider writes both kinds on every entry, so the one that does not belong
+ * to the attribute's type is an empty list and comes back undefined.
+ */
+export function userPoolSchema(context) {
+    const declared = blocks(context, "schema");
+    if (declared.length === 0) {
+        return undefined;
+    }
+    return declared.map((attributeSchema) => properties({
+        Name: field(attributeSchema, "name"),
+        AttributeDataType: field(attributeSchema, "attribute_data_type"),
+        Mutable: field(attributeSchema, "mutable"),
+        Required: field(attributeSchema, "required"),
+        StringAttributeConstraints: constraints(attributeSchema, "string_attribute_constraints", { MinLength: "min_length", MaxLength: "max_length" }),
+        NumberAttributeConstraints: constraints(attributeSchema, "number_attribute_constraints", { MinValue: "min_value", MaxValue: "max_value" }),
+    }));
+}
+/** One attribute's constraints, where the block holding them was written. */
+function constraints(attributeSchema, key, names) {
+    const declared = field(attributeSchema, key);
+    const [first] = Array.isArray(declared) ? declared : [];
+    if (first === undefined || typeof first !== "object" || first === null) {
+        return undefined;
+    }
+    const bounds = blockFields(first, names);
+    return Object.keys(bounds).length === 0 ? undefined : bounds;
+}
+/**
+ * The pool's tags, which CloudFormation carries as a map rather than as the
+ * list of key and value pairs it uses everywhere else.
+ *
+ * `tags_all` is `tags` merged with the provider's default tags, and it is the
+ * one that ends up on the pool.
+ */
+export function userPoolTags(context) {
+    const values = context.resource.values;
+    const declared = field(values, "tags_all") ?? field(values, "tags");
+    return templateValue(declared);
+}
+/**
+ * The pool's password policy, which CloudFormation nests under `Policies`.
+ *
+ * A policy of nothing but nulls is a pool that stated the block and configured
+ * nothing in it, so an empty result is left off rather than sent.
+ */
+export function userPoolPolicies(context) {
+    const policy = block(context, "password_policy");
+    if (policy === undefined) {
+        return undefined;
+    }
+    const password = blockFields(policy, {
+        MinimumLength: "minimum_length",
+        RequireUppercase: "require_uppercase",
+        RequireLowercase: "require_lowercase",
+        RequireNumbers: "require_numbers",
+        RequireSymbols: "require_symbols",
+        TemporaryPasswordValidityDays: "temporary_password_validity_days",
+        PasswordHistorySize: "password_history_size",
+    });
+    return Object.keys(password).length === 0
+        ? undefined
+        : { PasswordPolicy: password };
+}
+//# sourceMappingURL=sim-tf-map-cognito-pool.js.map

package/dist/terraform/map/sim-tf-map-cognito-pool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-map-cognito-pool.js","sourceRoot":"","sources":["../../../src/terraform/map/sim-tf-map-cognito-pool.ts"],"names":[],"mappings":"AAYA,OAAO,EACL,KAAK,EACL,MAAM,EACN,KAAK,EACL,UAAU,EACV,aAAa,GAEd,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAE7D;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAC5B,OAAgC;IAEhC,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAE3C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,eAAe,EAAE,EAAE,CACtC,UAAU,CAAC;QACT,IAAI,EAAE,KAAK,CAAC,eAAe,EAAE,MAAM,CAAW;QAC9C,iBAAiB,EAAE,KAAK,CACtB,eAAe,EACf,qBAAqB,CACZ;QACX,OAAO,EAAE,KAAK,CAAC,eAAe,EAAE,SAAS,CAAY;QACrD,QAAQ,EAAE,KAAK,CAAC,eAAe,EAAE,UAAU,CAAY;QACvD,0BAA0B,EAAE,WAAW,CACrC,eAAe,EACf,8BAA8B,EAC9B,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,CACrD;QACD,0BAA0B,EAAE,WAAW,CACrC,eAAe,EACf,8BAA8B,EAC9B,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,CACjD;KACF,CAAC,CACH,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,SAAS,WAAW,CAClB,eAAwC,EACxC,GAAW,EACX,KAAuC;IAEvC,MAAM,QAAQ,GAAG,KAAK,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;IAC7C,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAE,QAAsB,CAAC,CAAC,CAAC,EAAE,CAAC;IAEvE,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACvE,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC,KAAgC,EAAE,KAAK,CAAC,CAAC;IAEpE,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;AAC/D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAC1B,OAAgC;IAEhC,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IACvC,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEpE,OAAO,aAAa,CAAC,QAAQ,CAAC,CAAC;AACjC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAAgC;IAEhC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IAEjD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,EAAE;QACnC,aAAa,EAAE,gBAAgB;QAC/B,gBAAgB,EAAE,mBAAmB;QACrC,gBAAgB,EAAE,mBAAmB;QACrC,cAAc,EAAE,iBAAiB;QACjC,cAAc,EAAE,iBAAiB;QACjC,6BAA6B,EAAE,kCAAkC;QACjE,mBAAmB,EAAE,uBAAuB;KAC7C,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC;QACvC,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC;AACnC,CAAC"}

package/dist/terraform/map/sim-tf-map-cognito.d.ts

@@ -0,0 +1,13 @@
+import { type TerraformMappingContext } from "../sim-tf-attributes.js";
+import type { TerraformMappedResource } from "../sim-tf-mapping.type.js";
+/**
+ * A user pool.
+ *
+ * `UserPoolTags` is CloudFormation's name for a pool's tags, and unlike almost
+ * everywhere else it is a map rather than a list of key and value pairs.
+ * Simulated Cognito records every property it does not model against the
+ * Resource rather than refusing it, so the pool deploys and says what it is
+ * not doing.
+ */
+export declare function cognitoUserPool(context: TerraformMappingContext): TerraformMappedResource;
+//# sourceMappingURL=sim-tf-map-cognito.d.ts.map

package/dist/terraform/map/sim-tf-map-cognito.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-map-cognito.d.ts","sourceRoot":"","sources":["../../../src/terraform/map/sim-tf-map-cognito.ts"],"names":[],"mappings":"AAMA,OAAO,EAGL,KAAK,uBAAuB,EAC7B,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAOzE;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,uBAAuB,GAC/B,uBAAuB,CAoBzB"}

package/dist/terraform/map/sim-tf-map-cognito.js

@@ -0,0 +1,39 @@
+/*
+ * Reading a plan means reading records whose keys come from the document
+ * rather than from this code, so the object-injection rule fires on every
+ * lookup. The records are parsed JSON with no prototype of their own.
+ */
+// oxlint-disable security/detect-object-injection
+import { properties, renamed, } from "../sim-tf-attributes.js";
+import { userPoolPolicies, userPoolSchema, userPoolTags, } from "./sim-tf-map-cognito-pool.js";
+/**
+ * A user pool.
+ *
+ * `UserPoolTags` is CloudFormation's name for a pool's tags, and unlike almost
+ * everywhere else it is a map rather than a list of key and value pairs.
+ * Simulated Cognito records every property it does not model against the
+ * Resource rather than refusing it, so the pool deploys and says what it is
+ * not doing.
+ */
+export function cognitoUserPool(context) {
+    return {
+        Type: "AWS::Cognito::UserPool",
+        Properties: {
+            ...renamed(context, {
+                UserPoolName: "name",
+                MfaConfiguration: "mfa_configuration",
+                DeletionProtection: "deletion_protection",
+                AutoVerifiedAttributes: "auto_verified_attributes",
+                UsernameAttributes: "username_attributes",
+                AliasAttributes: "alias_attributes",
+                SmsAuthenticationMessage: "sms_authentication_message",
+            }),
+            ...properties({
+                Policies: userPoolPolicies(context),
+                Schema: userPoolSchema(context),
+                UserPoolTags: userPoolTags(context),
+            }),
+        },
+    };
+}
+//# sourceMappingURL=sim-tf-map-cognito.js.map

package/dist/terraform/map/sim-tf-map-cognito.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-map-cognito.js","sourceRoot":"","sources":["../../../src/terraform/map/sim-tf-map-cognito.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,kDAAkD;AAClD,OAAO,EACL,UAAU,EACV,OAAO,GAER,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,YAAY,GACb,MAAM,8BAA8B,CAAC;AAEtC;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAC7B,OAAgC;IAEhC,OAAO;QACL,IAAI,EAAE,wBAAwB;QAC9B,UAAU,EAAE;YACV,GAAG,OAAO,CAAC,OAAO,EAAE;gBAClB,YAAY,EAAE,MAAM;gBACpB,gBAAgB,EAAE,mBAAmB;gBACrC,kBAAkB,EAAE,qBAAqB;gBACzC,sBAAsB,EAAE,0BAA0B;gBAClD,kBAAkB,EAAE,qBAAqB;gBACzC,eAAe,EAAE,kBAAkB;gBACnC,wBAAwB,EAAE,4BAA4B;aACvD,CAAC;YACF,GAAG,UAAU,CAAC;gBACZ,QAAQ,EAAE,gBAAgB,CAAC,OAAO,CAAC;gBACnC,MAAM,EAAE,cAAc,CAAC,OAAO,CAAC;gBAC/B,YAAY,EAAE,YAAY,CAAC,OAAO,CAAC;aACpC,CAAC;SACH;KACF,CAAC;AACJ,CAAC"}

package/dist/terraform/map/sim-tf-map-dynamodb-keys.d.ts

@@ -0,0 +1,31 @@
+import type { SimCfnTemplateValue } from "../../service/cloudformation/template/value/sim-cfn-template-value.js";
+import { type TerraformMappingContext } from "../sim-tf-attributes.js";
+/** The attribute types a table declares, one `attribute` block each. */
+export declare function attributeDefinitions(context: TerraformMappingContext): SimCfnTemplateValue;
+/**
+ * A key schema, from the hash and range key attribute names.
+ *
+ * An optional string inside a nested block arrives as an empty string rather
+ * than as null, which is how a top-level optional attribute arrives. A range
+ * key that was never declared reads as `""`, and taking it at face value
+ * declares an index with a nameless RANGE element.
+ */
+export declare function keySchema(hashKey: unknown, rangeKey: unknown): SimCfnTemplateValue | undefined;
+/**
+ * The global secondary indexes, each provisioned the way the table is.
+ *
+ * An index of a provisioned table carries a capacity pair of its own, under
+ * the same attribute names the table uses, and an index of an on-demand table
+ * carries the pair at zero. So the property follows the table's billing mode
+ * rather than the presence of the attributes.
+ */
+export declare function secondaryIndexes(context: TerraformMappingContext, provisioned: boolean): SimCfnTemplateValue | undefined;
+/**
+ * The capacity a provisioned table or index is created with.
+ *
+ * Simulated DynamoDB requires `ProvisionedThroughput` under `PROVISIONED`
+ * billing and refuses it under `PAY_PER_REQUEST`, as real DynamoDB does either
+ * way, so a table that leaves it off is refused along with the Stack around it.
+ */
+export declare function throughput(values: Record<string, unknown>): SimCfnTemplateValue;
+//# sourceMappingURL=sim-tf-map-dynamodb-keys.d.ts.map

package/dist/terraform/map/sim-tf-map-dynamodb-keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-map-dynamodb-keys.d.ts","sourceRoot":"","sources":["../../../src/terraform/map/sim-tf-map-dynamodb-keys.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uEAAuE,CAAC;AACjH,OAAO,EAIL,KAAK,uBAAuB,EAC7B,MAAM,yBAAyB,CAAC;AAEjC,wEAAwE;AACxE,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,uBAAuB,GAC/B,mBAAmB,CAKrB;AAED;;;;;;;GAOG;AACH,wBAAgB,SAAS,CACvB,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,OAAO,GAChB,mBAAmB,GAAG,SAAS,CAUjC;AAMD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,uBAAuB,EAChC,WAAW,EAAE,OAAO,GACnB,mBAAmB,GAAG,SAAS,CAiBjC;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CACxB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,mBAAmB,CAKrB"}

package/dist/{service/cloudformation/terraform/sim-tf-map-dynamodb.js → terraform/map/sim-tf-map-dynamodb-keys.js}

@@ -1,36 +1,11 @@
-import { block, blocks, field, properties, renamed, tags, } from "./sim-tf-attributes.js";
-/** A table, with the key schema rebuilt from its key attribute names. */
-export function dynamodbTable(context) {
-    const values = context.resource.values;
-    const ttl = block(context, "ttl");
-    return {
-        Type: "AWS::DynamoDB::Table",
-        Properties: {
-            ...renamed(context, { TableName: "name", BillingMode: "billing_mode" }),
-            ...properties({
-                AttributeDefinitions: attributeDefinitions(context),
-                KeySchema: keySchema(field(values, "hash_key"), field(values, "range_key")),
-                GlobalSecondaryIndexes: secondaryIndexes(context),
-                TimeToLiveSpecification: timeToLive(ttl),
-                Tags: tags(context),
-            }),
-        },
-    };
-}
-function attributeDefinitions(context) {
+import { blocks, field, properties, } from "../sim-tf-attributes.js";
+/** The attribute types a table declares, one `attribute` block each. */
+export function attributeDefinitions(context) {
     return blocks(context, "attribute").map((entry) => ({
         AttributeName: field(entry, "name"),
         AttributeType: field(entry, "type"),
     }));
 }
-function timeToLive(ttl) {
-    return ttl === undefined
-        ? undefined
-        : {
-            AttributeName: field(ttl, "attribute_name"),
-            Enabled: field(ttl, "enabled") === true,
-        };
-}
 /**
  * A key schema, from the hash and range key attribute names.
  *
@@ -51,7 +26,15 @@ export function keySchema(hashKey, rangeKey) {
 function named(value) {
     return typeof value === "string" && value.length > 0;
 }
-function secondaryIndexes(context) {
+/**
+ * The global secondary indexes, each provisioned the way the table is.
+ *
+ * An index of a provisioned table carries a capacity pair of its own, under
+ * the same attribute names the table uses, and an index of an on-demand table
+ * carries the pair at zero. So the property follows the table's billing mode
+ * rather than the presence of the attributes.
+ */
+export function secondaryIndexes(context, provisioned) {
     const indexes = blocks(context, "global_secondary_index");
     if (indexes.length === 0) {
         return undefined;
@@ -63,12 +46,26 @@ function secondaryIndexes(context) {
             ProjectionType: field(index, "projection_type"),
             NonKeyAttributes: nonEmptyList(field(index, "non_key_attributes")),
         }),
+        ...(provisioned && { ProvisionedThroughput: throughput(index) }),
     }));
 }
+/**
+ * The capacity a provisioned table or index is created with.
+ *
+ * Simulated DynamoDB requires `ProvisionedThroughput` under `PROVISIONED`
+ * billing and refuses it under `PAY_PER_REQUEST`, as real DynamoDB does either
+ * way, so a table that leaves it off is refused along with the Stack around it.
+ */
+export function throughput(values) {
+    return {
+        ReadCapacityUnits: field(values, "read_capacity"),
+        WriteCapacityUnits: field(values, "write_capacity"),
+    };
+}
 /** A Terraform list attribute, where the provider left anything in it. */
 function nonEmptyList(value) {
     return Array.isArray(value) && value.length > 0
         ? value
         : undefined;
 }
-//# sourceMappingURL=sim-tf-map-dynamodb.js.map
+//# sourceMappingURL=sim-tf-map-dynamodb-keys.js.map

package/dist/terraform/map/sim-tf-map-dynamodb-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-map-dynamodb-keys.js","sourceRoot":"","sources":["../../../src/terraform/map/sim-tf-map-dynamodb-keys.ts"],"names":[],"mappings":"AAUA,OAAO,EACL,MAAM,EACN,KAAK,EACL,UAAU,GAEX,MAAM,yBAAyB,CAAC;AAEjC,wEAAwE;AACxE,MAAM,UAAU,oBAAoB,CAClC,OAAgC;IAEhC,OAAO,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAClD,aAAa,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,CAAW;QAC7C,aAAa,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,CAAW;KAC9C,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,SAAS,CACvB,OAAgB,EAChB,QAAiB;IAEjB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACpB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC;QAC3B,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QACjD,CAAC,CAAC,EAAE,CAAC;IAEP,OAAO,CAAC,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,KAAK,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,KAAK,CAAC,KAAc;IAC3B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;AACvD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAAgC,EAChC,WAAoB;IAEpB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC;IAE1D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC7B,SAAS,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,CAAW;QACzC,SAAS,EACP,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,KAAK,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,IAAI,EAAE;QACtE,UAAU,EAAE,UAAU,CAAC;YACrB,cAAc,EAAE,KAAK,CAAC,KAAK,EAAE,iBAAiB,CAAW;YACzD,gBAAgB,EAAE,YAAY,CAAC,KAAK,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC;SACnE,CAAC;QACF,GAAG,CAAC,WAAW,IAAI,EAAE,qBAAqB,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;KACjE,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CACxB,MAA+B;IAE/B,OAAO;QACL,iBAAiB,EAAE,KAAK,CAAC,MAAM,EAAE,eAAe,CAAW;QAC3D,kBAAkB,EAAE,KAAK,CAAC,MAAM,EAAE,gBAAgB,CAAW;KAC9D,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAC7C,CAAC,CAAE,KAA6B;QAChC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC"}

package/dist/terraform/map/sim-tf-map-dynamodb.d.ts

@@ -0,0 +1,5 @@
+import { type TerraformMappingContext } from "../sim-tf-attributes.js";
+import type { TerraformMappedResource } from "../sim-tf-mapping.type.js";
+/** A table, with the key schema rebuilt from its key attribute names. */
+export declare function dynamodbTable(context: TerraformMappingContext): TerraformMappedResource;
+//# sourceMappingURL=sim-tf-map-dynamodb.d.ts.map

package/dist/terraform/map/sim-tf-map-dynamodb.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-map-dynamodb.d.ts","sourceRoot":"","sources":["../../../src/terraform/map/sim-tf-map-dynamodb.ts"],"names":[],"mappings":"AAOA,OAAO,EAML,KAAK,uBAAuB,EAC7B,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAQzE,yEAAyE;AACzE,wBAAgB,aAAa,CAC3B,OAAO,EAAE,uBAAuB,GAC/B,uBAAuB,CAsBzB"}

package/dist/terraform/map/sim-tf-map-dynamodb.js

@@ -0,0 +1,31 @@
+import { block, field, properties, renamed, tags, } from "../sim-tf-attributes.js";
+import { attributeDefinitions, keySchema, secondaryIndexes, throughput, } from "./sim-tf-map-dynamodb-keys.js";
+/** A table, with the key schema rebuilt from its key attribute names. */
+export function dynamodbTable(context) {
+    const values = context.resource.values;
+    const ttl = block(context, "ttl");
+    const provisioned = field(values, "billing_mode") === "PROVISIONED";
+    return {
+        Type: "AWS::DynamoDB::Table",
+        Properties: {
+            ...renamed(context, { TableName: "name", BillingMode: "billing_mode" }),
+            ...properties({
+                AttributeDefinitions: attributeDefinitions(context),
+                KeySchema: keySchema(field(values, "hash_key"), field(values, "range_key")),
+                GlobalSecondaryIndexes: secondaryIndexes(context, provisioned),
+                ProvisionedThroughput: provisioned ? throughput(values) : undefined,
+                TimeToLiveSpecification: timeToLive(ttl),
+                Tags: tags(context),
+            }),
+        },
+    };
+}
+function timeToLive(ttl) {
+    return ttl === undefined
+        ? undefined
+        : {
+            AttributeName: field(ttl, "attribute_name"),
+            Enabled: field(ttl, "enabled") === true,
+        };
+}
+//# sourceMappingURL=sim-tf-map-dynamodb.js.map

package/dist/terraform/map/sim-tf-map-dynamodb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-map-dynamodb.js","sourceRoot":"","sources":["../../../src/terraform/map/sim-tf-map-dynamodb.ts"],"names":[],"mappings":"AAOA,OAAO,EACL,KAAK,EACL,KAAK,EACL,UAAU,EACV,OAAO,EACP,IAAI,GAEL,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,oBAAoB,EACpB,SAAS,EACT,gBAAgB,EAChB,UAAU,GACX,MAAM,+BAA+B,CAAC;AAEvC,yEAAyE;AACzE,MAAM,UAAU,aAAa,CAC3B,OAAgC;IAEhC,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IACvC,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAClC,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,EAAE,cAAc,CAAC,KAAK,aAAa,CAAC;IAEpE,OAAO;QACL,IAAI,EAAE,sBAAsB;QAC5B,UAAU,EAAE;YACV,GAAG,OAAO,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC;YACvE,GAAG,UAAU,CAAC;gBACZ,oBAAoB,EAAE,oBAAoB,CAAC,OAAO,CAAC;gBACnD,SAAS,EAAE,SAAS,CAClB,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,EACzB,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,CAC3B;gBACD,sBAAsB,EAAE,gBAAgB,CAAC,OAAO,EAAE,WAAW,CAAC;gBAC9D,qBAAqB,EAAE,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;gBACnE,uBAAuB,EAAE,UAAU,CAAC,GAAG,CAAC;gBACxC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC;aACpB,CAAC;SACH;KACF,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CACjB,GAAwC;IAExC,OAAO,GAAG,KAAK,SAAS;QACtB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC;YACE,aAAa,EAAE,KAAK,CAAC,GAAG,EAAE,gBAAgB,CAAW;YACrD,OAAO,EAAE,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,KAAK,IAAI;SACxC,CAAC;AACR,CAAC"}

package/dist/terraform/map/sim-tf-map-ecr.d.ts

@@ -0,0 +1,12 @@
+import { type TerraformMappingContext } from "../sim-tf-attributes.js";
+import type { TerraformMappedResource } from "../sim-tf-mapping.type.js";
+/**
+ * A repository.
+ *
+ * The name is the only property simulated ECR acts on. The rest describe image
+ * content, and nothing here pulls or inspects an image, so they are carried
+ * across and recorded against the Resource rather than left off. A repository
+ * scanning on push says on its Resource that no image is ever scanned.
+ */
+export declare function ecrRepository(context: TerraformMappingContext): TerraformMappedResource;
+//# sourceMappingURL=sim-tf-map-ecr.d.ts.map

package/dist/terraform/map/sim-tf-map-ecr.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-map-ecr.d.ts","sourceRoot":"","sources":["../../../src/terraform/map/sim-tf-map-ecr.ts"],"names":[],"mappings":"AAMA,OAAO,EAML,KAAK,uBAAuB,EAC7B,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAEzE;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,uBAAuB,GAC/B,uBAAuB,CAmBzB"}

package/dist/terraform/map/sim-tf-map-ecr.js

@@ -0,0 +1,34 @@
+/*
+ * Reading a plan means reading records whose keys come from the document
+ * rather than from this code, so the object-injection rule fires on every
+ * lookup. The records are parsed JSON with no prototype of their own.
+ */
+// oxlint-disable security/detect-object-injection
+import { block, field, properties, renamed, tags, } from "../sim-tf-attributes.js";
+/**
+ * A repository.
+ *
+ * The name is the only property simulated ECR acts on. The rest describe image
+ * content, and nothing here pulls or inspects an image, so they are carried
+ * across and recorded against the Resource rather than left off. A repository
+ * scanning on push says on its Resource that no image is ever scanned.
+ */
+export function ecrRepository(context) {
+    const scanning = block(context, "image_scanning_configuration");
+    return {
+        Type: "AWS::ECR::Repository",
+        Properties: {
+            ...renamed(context, {
+                RepositoryName: "name",
+                ImageTagMutability: "image_tag_mutability",
+            }),
+            ...properties({
+                ImageScanningConfiguration: scanning === undefined
+                    ? undefined
+                    : { ScanOnPush: field(scanning, "scan_on_push") === true },
+                Tags: tags(context),
+            }),
+        },
+    };
+}
+//# sourceMappingURL=sim-tf-map-ecr.js.map

package/dist/terraform/map/sim-tf-map-ecr.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-map-ecr.js","sourceRoot":"","sources":["../../../src/terraform/map/sim-tf-map-ecr.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,kDAAkD;AAClD,OAAO,EACL,KAAK,EACL,KAAK,EACL,UAAU,EACV,OAAO,EACP,IAAI,GAEL,MAAM,yBAAyB,CAAC;AAGjC;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAC3B,OAAgC;IAEhC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,EAAE,8BAA8B,CAAC,CAAC;IAEhE,OAAO;QACL,IAAI,EAAE,sBAAsB;QAC5B,UAAU,EAAE;YACV,GAAG,OAAO,CAAC,OAAO,EAAE;gBAClB,cAAc,EAAE,MAAM;gBACtB,kBAAkB,EAAE,sBAAsB;aAC3C,CAAC;YACF,GAAG,UAAU,CAAC;gBACZ,0BAA0B,EACxB,QAAQ,KAAK,SAAS;oBACpB,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,QAAQ,EAAE,cAAc,CAAC,KAAK,IAAI,EAAE;gBAC9D,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC;aACpB,CAAC;SACH;KACF,CAAC;AACJ,CAAC"}

package/dist/terraform/map/sim-tf-map-events.d.ts

@@ -0,0 +1,24 @@
+import { type TerraformMappingContext } from "../sim-tf-attributes.js";
+import type { TerraformMappedResource, TerraformResourceFold } from "../sim-tf-mapping.type.js";
+/**
+ * A rule.
+ *
+ * Tags are left off. Simulated EventBridge refuses a `Tags` property outright,
+ * because a rule's tags never reach PutRule and a tagged rule would otherwise
+ * deploy and lose them without a word, so a rule carrying tags fails the Stack
+ * around it rather than only itself.
+ *
+ * Terraform carries the enabled state twice. `state` is the current spelling
+ * and `is_enabled` is the boolean the provider deprecated in favour of it.
+ */
+export declare function eventRule(context: TerraformMappingContext): TerraformMappedResource;
+/**
+ * The target resources, which Terraform declares apart from the rule they
+ * belong to.
+ *
+ * CloudFormation holds them as one `Targets` list on the rule, so each fold
+ * adds an entry to what is already there rather than replacing it. A rule with
+ * three targets is three Terraform resources and one `AWS::Events::Rule`.
+ */
+export declare const eventTargetFolds: ReadonlyMap<string, TerraformResourceFold>;
+//# sourceMappingURL=sim-tf-map-events.d.ts.map

package/dist/terraform/map/sim-tf-map-events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-map-events.d.ts","sourceRoot":"","sources":["../../../src/terraform/map/sim-tf-map-events.ts"],"names":[],"mappings":"AAQA,OAAO,EAKL,KAAK,uBAAuB,EAC7B,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EACV,uBAAuB,EACvB,qBAAqB,EACtB,MAAM,2BAA2B,CAAC;AAEnC;;;;;;;;;;GAUG;AACH,wBAAgB,SAAS,CACvB,OAAO,EAAE,uBAAuB,GAC/B,uBAAuB,CAqBzB;AA8CD;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB,EAAE,WAAW,CAAC,MAAM,EAAE,qBAAqB,CAMpE,CAAC"}