@kensio/yulin 1.19.2 → 1.19.4

package/dist/terraform/sim-tf-module-outputs.js

@@ -0,0 +1,99 @@
+import { longestFirst, moduleOutputPath, qualifiedReference, withoutInstanceKeys, } from "./sim-tf-reference-address.js";
+/**
+ * Every module output a plan declares, keyed by the address that reads it.
+ *
+ * A resource in one module reaching a resource in another goes through an
+ * output. `module.processor.lambda_function_arn` is not an address any resource
+ * has, and the plan resolves nothing for it, so following it means reading the
+ * output's own expression and continuing from the module that declares it.
+ */
+export function terraformModuleOutputs(plan) {
+    const outputs = new Map();
+    const root = plan.configuration?.root_module;
+    if (root !== undefined) {
+        collect(root, [], outputs);
+    }
+    return outputs;
+}
+function collect(config, modulePath, outputs) {
+    const calls = Object.entries(config.module_calls ?? {});
+    for (const [callName, call] of calls) {
+        const child = call.module;
+        if (child === undefined) {
+            continue;
+        }
+        const childPath = [...modulePath, callName];
+        const address = childPath.map((name) => `module.${name}`).join(".");
+        const declared = Object.entries(child.outputs ?? {});
+        for (const [name, output] of declared) {
+            outputs.set(`${address}.${name}`, output.expression?.references ?? []);
+        }
+        collect(child, childPath, outputs);
+    }
+}
+/** How far a chain of outputs is followed before it is taken to be a loop. */
+const outputLimit = 8;
+/**
+ * Following a reference that names a module output.
+ *
+ * `module.processor.lambda_function_arn` is an address no resource has. The
+ * output's own expression names what it reads, in terms of the module
+ * declaring it, so following one is resolving that expression again a module
+ * down.
+ */
+export class TerraformModuleOutputWalk {
+    outputs;
+    resources;
+    constructor(outputs, resources) {
+        this.outputs = outputs;
+        this.resources = resources;
+    }
+    /**
+     * The resource a module output leads to.
+     *
+     * An output built out of several resources answers with the first that
+     * resolves, and the depth limit stops a module whose outputs refer to each
+     * other from looping.
+     */
+    target(qualified, depth = 0) {
+        const output = this.references(qualified);
+        if (output === undefined || depth >= outputLimit) {
+            return undefined;
+        }
+        // The path the output was read through rather than the one it was
+        // declared under, so an output reached inside a `for_each` instance
+        // follows its own instance's resources.
+        const instance = moduleOutputPath(qualified);
+        for (const reference of longestFirst(output)) {
+            const nested = qualifiedReference(reference, instance);
+            const target = this.resources.longestMatch(nested) ?? this.target(nested, depth + 1);
+            if (target !== undefined) {
+                return target;
+            }
+        }
+        return undefined;
+    }
+    /**
+     * The attribute a reference through an output reads.
+     *
+     * The reference names the output, and the output's own expression is what
+     * says which attribute of the resource behind it was being read.
+     */
+    attributeOf(qualified) {
+        const [longest] = longestFirst(this.references(qualified) ?? []);
+        return longest?.split(".").pop();
+    }
+    /**
+     * The references one output declares.
+     *
+     * The index is keyed by module call path, since a module declares its
+     * outputs once however many instances of the call there are. A reference
+     * made from inside one instance carries that instance's key, so the key
+     * comes off when the qualified form finds nothing.
+     */
+    references(qualified) {
+        return (this.outputs.get(qualified) ??
+            this.outputs.get(withoutInstanceKeys(qualified)));
+    }
+}
+//# sourceMappingURL=sim-tf-module-outputs.js.map

package/dist/terraform/sim-tf-module-outputs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-module-outputs.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-module-outputs.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,+BAA+B,CAAC;AAEvC;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CACpC,IAAmB;IAEnB,MAAM,OAAO,GAAG,IAAI,GAAG,EAA6B,CAAC;IACrD,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC;IAE7C,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;IAC7B,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,OAAO,CACd,MAA6B,EAC7B,UAA6B,EAC7B,OAAuC;IAEvC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IAExD,KAAK,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC;QAE1B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,SAAS;QACX,CAAC;QAED,MAAM,SAAS,GAAG,CAAC,GAAG,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEpE,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QAErD,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACtC,OAAO,CAAC,GAAG,CAAC,GAAG,OAAO,IAAI,IAAI,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC;QACzE,CAAC;QAED,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,MAAM,WAAW,GAAG,CAAC,CAAC;AAEtB;;;;;;;GAOG;AACH,MAAM,OAAO,yBAAyB;IAEjB,OAAO;IACP,SAAS;IAF5B,YACmB,OAA+C,EAC/C,SAAqC;uBADrC,OAAO;yBACP,SAAS;IACzB,CAAC;IAEJ;;;;;;OAMG;IACI,MAAM,CAAC,SAAiB,EAAE,KAAK,GAAG,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAE1C,IAAI,MAAM,KAAK,SAAS,IAAI,KAAK,IAAI,WAAW,EAAE,CAAC;YACjD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,kEAAkE;QAClE,oEAAoE;QACpE,wCAAwC;QACxC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAE7C,KAAK,MAAM,SAAS,IAAI,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7C,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YACvD,MAAM,MAAM,GACV,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YAExE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;OAKG;IACI,WAAW,CAAC,SAAiB;QAClC,MAAM,CAAC,OAAO,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;QAEjE,OAAO,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IACnC,CAAC;IAED;;;;;;;OAOG;IACK,UAAU,CAAC,SAAiB;QAClC,OAAO,CACL,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;YAC3B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC,CACjD,CAAC;IACJ,CAAC;CACF"}

package/dist/terraform/sim-tf-module-variables.d.ts

@@ -0,0 +1,16 @@
+import type { TerraformPlan } from "./sim-tf-plan.type.js";
+/**
+ * Every variable a module call sets, keyed by the address that names it.
+ *
+ * A resource inside a module reads its module's own variables, and the value
+ * behind one was written by the caller. `var.routes` is not an address any
+ * resource has and the plan resolves nothing for it, so following it means
+ * reading the call's own expression and continuing from the module that made
+ * the call.
+ *
+ * This is the mirror of `terraformModuleOutputs`. An output carries a value up
+ * out of a module and a variable carries one down into it, and the two are the
+ * only ways a plan lets a reference cross a module boundary.
+ */
+export declare function terraformModuleVariables(plan: TerraformPlan): ReadonlyMap<string, readonly string[]>;
+//# sourceMappingURL=sim-tf-module-variables.d.ts.map

package/dist/terraform/sim-tf-module-variables.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-module-variables.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-module-variables.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,aAAa,EACd,MAAM,uBAAuB,CAAC;AAG/B;;;;;;;;;;;;GAYG;AACH,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,aAAa,GAClB,WAAW,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CASxC"}

package/dist/terraform/sim-tf-module-variables.js

@@ -0,0 +1,37 @@
+import { terraformExpressionReferences } from "./sim-tf-expression-references.js";
+/**
+ * Every variable a module call sets, keyed by the address that names it.
+ *
+ * A resource inside a module reads its module's own variables, and the value
+ * behind one was written by the caller. `var.routes` is not an address any
+ * resource has and the plan resolves nothing for it, so following it means
+ * reading the call's own expression and continuing from the module that made
+ * the call.
+ *
+ * This is the mirror of `terraformModuleOutputs`. An output carries a value up
+ * out of a module and a variable carries one down into it, and the two are the
+ * only ways a plan lets a reference cross a module boundary.
+ */
+export function terraformModuleVariables(plan) {
+    const variables = new Map();
+    const root = plan.configuration?.root_module;
+    if (root !== undefined) {
+        collect(root, [], variables);
+    }
+    return variables;
+}
+function collect(config, modulePath, variables) {
+    const calls = Object.entries(config.module_calls ?? {});
+    for (const [callName, call] of calls) {
+        const childPath = [...modulePath, callName];
+        const address = childPath.map((name) => `module.${name}`).join(".");
+        const set = Object.entries(call.expressions ?? {});
+        for (const [name, expression] of set) {
+            variables.set(`${address}.var.${name}`, terraformExpressionReferences(expression));
+        }
+        if (call.module !== undefined) {
+            collect(call.module, childPath, variables);
+        }
+    }
+}
+//# sourceMappingURL=sim-tf-module-variables.js.map

package/dist/terraform/sim-tf-module-variables.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-module-variables.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-module-variables.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,6BAA6B,EAAE,MAAM,mCAAmC,CAAC;AAElF;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,wBAAwB,CACtC,IAAmB;IAEnB,MAAM,SAAS,GAAG,IAAI,GAAG,EAA6B,CAAC;IACvD,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC;IAE7C,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,SAAS,CAAC,CAAC;IAC/B,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,OAAO,CACd,MAA6B,EAC7B,UAA6B,EAC7B,SAAyC;IAEzC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IAExD,KAAK,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC;QACrC,MAAM,SAAS,GAAG,CAAC,GAAG,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEpE,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;QAEnD,KAAK,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,GAAG,EAAE,CAAC;YACrC,SAAS,CAAC,GAAG,CACX,GAAG,OAAO,QAAQ,IAAI,EAAE,EACxB,6BAA6B,CAAC,UAAU,CAAC,CAC1C,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/terraform/sim-tf-nested-attributes.d.ts

@@ -0,0 +1,33 @@
+import type { SimCfnTemplateValue } from "../service/cloudformation/template/value/sim-cfn-template-value.js";
+import { type TerraformMappingContext } from "./sim-tf-attributes.js";
+/**
+ * A list attribute whose entries name other resources.
+ *
+ * An alarm's `alarm_actions` holding one topic ARN of the same plan is marked
+ * unknown as a whole list, and the entries are gone with it. What survives is
+ * the reference behind each entry, and Terraform lists both the attribute form
+ * and the bare resource form of one reference. Both forms of a topic resolve to
+ * the same `Ref`, so the resolved values are deduplicated rather than the
+ * references, which is the only place the two forms can be told apart.
+ *
+ * A list the plan resolved is carried across as it stands.
+ */
+export declare function attributeList(context: TerraformMappingContext, key: string): SimCfnTemplateValue | undefined;
+/**
+ * One attribute of one entry of a repeating nested block.
+ *
+ * A bucket notification names the function it calls inside a `lambda_function`
+ * block, and the function's ARN is unknown whenever the same plan creates it.
+ * The mark and the references both sit at the same position in a list mirroring
+ * the block, so the entry's index is what finds them.
+ */
+export declare function blockAttribute(context: TerraformMappingContext, key: string, index: number, name: string): SimCfnTemplateValue | undefined;
+/**
+ * The fields of one nested block, under the names CloudFormation gives them.
+ *
+ * The provider writes every field of a block that was declared, filling the
+ * ones the configuration left out with null, so the table says what each field
+ * is called on either side and `properties` takes the nulls back out.
+ */
+export declare function blockFields(record: Record<string, unknown>, names: Readonly<Record<string, string>>): Record<string, SimCfnTemplateValue>;
+//# sourceMappingURL=sim-tf-nested-attributes.d.ts.map

package/dist/terraform/sim-tf-nested-attributes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-nested-attributes.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-nested-attributes.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oEAAoE,CAAC;AAC9G,OAAO,EAGL,KAAK,uBAAuB,EAC7B,MAAM,wBAAwB,CAAC;AAIhC;;;;;;;;;;;GAWG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,uBAAuB,EAChC,GAAG,EAAE,MAAM,GACV,mBAAmB,GAAG,SAAS,CAqBjC;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,uBAAuB,EAChC,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,GACX,mBAAmB,GAAG,SAAS,CAmBjC;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CACzB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GACtC,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CASrC"}

package/dist/terraform/sim-tf-nested-attributes.js

@@ -0,0 +1,97 @@
+/*
+ * The two attribute shapes `attribute()` cannot read: a list whose entries name
+ * other resources, and an attribute inside a repeating nested block.
+ *
+ * `after_unknown` mirrors the shape of the value it marks, so a list of ARNs
+ * built from one resource is marked `true` whole, and a block whose one field
+ * is unknown is marked as a list of records. `configuration` mirrors the same
+ * shape with its `references`, and reading the two together is what puts the
+ * intrinsic back where the value was.
+ *
+ * Reading a plan means reading records whose keys come from the document
+ * rather than from this code, so the object-injection rule fires on every
+ * lookup. The records are parsed JSON with no prototype of their own.
+ */
+// oxlint-disable security/detect-object-injection
+import { isRecord } from "../util/type-guard/record.js";
+import { properties, templateValue, } from "./sim-tf-attributes.js";
+import { longestFirst } from "./sim-tf-reference-address.js";
+/**
+ * A list attribute whose entries name other resources.
+ *
+ * An alarm's `alarm_actions` holding one topic ARN of the same plan is marked
+ * unknown as a whole list, and the entries are gone with it. What survives is
+ * the reference behind each entry, and Terraform lists both the attribute form
+ * and the bare resource form of one reference. Both forms of a topic resolve to
+ * the same `Ref`, so the resolved values are deduplicated rather than the
+ * references, which is the only place the two forms can be told apart.
+ *
+ * A list the plan resolved is carried across as it stands.
+ */
+export function attributeList(context, key) {
+    const { resource, resolver } = context;
+    if (resource.unknown[key] !== true) {
+        const value = resource.values[key];
+        return Array.isArray(value) ? templateValue(value) : undefined;
+    }
+    const resolved = new Map();
+    const declared = longestFirst(references(resource.expressions[key]));
+    for (const reference of declared) {
+        const value = resolver.resolve(reference, resource);
+        if (value !== undefined) {
+            resolved.set(JSON.stringify(value), value);
+        }
+    }
+    return resolved.size === 0 ? undefined : resolved.values().toArray();
+}
+/**
+ * One attribute of one entry of a repeating nested block.
+ *
+ * A bucket notification names the function it calls inside a `lambda_function`
+ * block, and the function's ARN is unknown whenever the same plan creates it.
+ * The mark and the references both sit at the same position in a list mirroring
+ * the block, so the entry's index is what finds them.
+ */
+export function blockAttribute(context, key, index, name) {
+    const { resource, resolver } = context;
+    if (entry(resource.unknown[key], index)?.[name] !== true) {
+        return templateValue(entry(resource.values[key], index)?.[name]);
+    }
+    const expression = entry(resource.expressions[key], index)?.[name];
+    const declared = longestFirst(references(expression));
+    for (const reference of declared) {
+        const value = resolver.resolve(reference, resource);
+        if (value !== undefined) {
+            return value;
+        }
+    }
+    return undefined;
+}
+/**
+ * The fields of one nested block, under the names CloudFormation gives them.
+ *
+ * The provider writes every field of a block that was declared, filling the
+ * ones the configuration left out with null, so the table says what each field
+ * is called on either side and `properties` takes the nulls back out.
+ */
+export function blockFields(record, names) {
+    return properties(Object.fromEntries(Object.entries(names).map(([property, name]) => [
+        property,
+        templateValue(record[name]),
+    ])));
+}
+/** One entry of a list mirroring a repeating block. */
+function entry(value, index) {
+    if (!Array.isArray(value)) {
+        return undefined;
+    }
+    const found = value[index];
+    return isRecord(found) ? found : undefined;
+}
+/** The references one expression records, or none where it holds no expression. */
+function references(expression) {
+    return isRecord(expression)
+        ? (expression.references ?? [])
+        : [];
+}
+//# sourceMappingURL=sim-tf-nested-attributes.js.map

package/dist/terraform/sim-tf-nested-attributes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-nested-attributes.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-nested-attributes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,kDAAkD;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAExD,OAAO,EACL,UAAU,EACV,aAAa,GAEd,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAE7D;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,aAAa,CAC3B,OAAgC,EAChC,GAAW;IAEX,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAEvC,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAEnC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACjE,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA+B,CAAC;IACxD,MAAM,QAAQ,GAAG,YAAY,CAAC,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAErE,KAAK,MAAM,SAAS,IAAI,QAAQ,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAEpD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;AACvE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAC5B,OAAgC,EAChC,GAAW,EACX,KAAa,EACb,IAAY;IAEZ,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAEvC,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QACzD,OAAO,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,YAAY,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;IAEtD,KAAK,MAAM,SAAS,IAAI,QAAQ,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAEpD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CACzB,MAA+B,EAC/B,KAAuC;IAEvC,OAAO,UAAU,CACf,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;QAC9C,QAAQ;QACR,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;KAC5B,CAAC,CACH,CACF,CAAC;AACJ,CAAC;AAED,uDAAuD;AACvD,SAAS,KAAK,CACZ,KAAc,EACd,KAAa;IAEb,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,KAAK,GAAY,KAAK,CAAC,KAAK,CAAC,CAAC;IAEpC,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7C,CAAC;AAED,mFAAmF;AACnF,SAAS,UAAU,CAAC,UAAmB;IACrC,OAAO,QAAQ,CAAC,UAAU,CAAC;QACzB,CAAC,CAAC,CAAE,UAAkC,CAAC,UAAU,IAAI,EAAE,CAAC;QACxD,CAAC,CAAC,EAAE,CAAC;AACT,CAAC"}

package/dist/terraform/sim-tf-override.type.d.ts

@@ -0,0 +1,36 @@
+import type { SimIamPolicyDocument } from "../service/iam/policy/sim-iam-policy.js";
+/**
+ * A value a deployment supplies because the plan could not carry it.
+ *
+ * Terraform resolves nothing inside a value it could not build, so an
+ * attribute holding one reference to a resource of the same plan arrives
+ * unknown along with everything around it. A Lambda `environment.variables`
+ * map loses its variable names, and an `aws_iam_role_policy` document built
+ * with `jsonencode` loses its statements.
+ *
+ * An override is matched the way a deploy binding is, on the name the plan
+ * carries. It fills a gap and never replaces what the plan resolved, so a
+ * configuration that later resolves the value on its own stops needing one.
+ */
+export type TerraformPlanOverride = TerraformFunctionEnvironmentOverride | TerraformRolePolicyOverride;
+/** The environment variables of the function the plan names. */
+export interface TerraformFunctionEnvironmentOverride {
+    readonly functionName: string;
+    readonly environment: Readonly<Record<string, string>>;
+    readonly roleName?: never;
+    readonly policy?: never;
+}
+/**
+ * The inline policy of the role the plan names.
+ *
+ * The name is the role's own `name`, which is what a plan resolves for a role
+ * declared with one, rather than the name of the `aws_iam_role_policy`
+ * resource holding the document.
+ */
+export interface TerraformRolePolicyOverride {
+    readonly roleName: string;
+    readonly policy: SimIamPolicyDocument;
+    readonly functionName?: never;
+    readonly environment?: never;
+}
+//# sourceMappingURL=sim-tf-override.type.d.ts.map

package/dist/terraform/sim-tf-override.type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-override.type.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-override.type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AAEpF;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,qBAAqB,GAC7B,oCAAoC,GACpC,2BAA2B,CAAC;AAEhC,gEAAgE;AAChE,MAAM,WAAW,oCAAoC;IACnD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACvD,QAAQ,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC;CACzB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,YAAY,CAAC,EAAE,KAAK,CAAC;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC;CAC9B"}

package/dist/terraform/sim-tf-override.type.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sim-tf-override.type.js.map

package/dist/terraform/sim-tf-override.type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-override.type.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-override.type.ts"],"names":[],"mappings":""}

package/dist/terraform/sim-tf-overrides.d.ts

@@ -0,0 +1,21 @@
+import type { SimIamPolicyDocument } from "../service/iam/policy/sim-iam-policy.js";
+import type { TerraformPlanOverride } from "./sim-tf-override.type.js";
+/**
+ * The values a deployment supplied for the gaps a plan left, by the name each
+ * one is matched on.
+ *
+ * A mapping asks this for the name the plan gave a resource and gets back what
+ * was supplied for it, or nothing. Asking with a name the plan itself could not
+ * resolve gets nothing back, which is the same answer as no override, so a
+ * mapping has one case to handle rather than two.
+ */
+export declare class TerraformPlanOverrides {
+    private readonly environments;
+    private readonly policies;
+    constructor(overrides?: readonly TerraformPlanOverride[]);
+    /** The environment variables supplied for one function name. */
+    environment(functionName: unknown): Readonly<Record<string, string>> | undefined;
+    /** The inline policy document supplied for one role name. */
+    policy(roleName: unknown): SimIamPolicyDocument | undefined;
+}
+//# sourceMappingURL=sim-tf-overrides.d.ts.map

package/dist/terraform/sim-tf-overrides.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-overrides.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-overrides.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AACpF,OAAO,KAAK,EAEV,qBAAqB,EAEtB,MAAM,2BAA2B,CAAC;AAEnC;;;;;;;;GAQG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAG3B;IAEF,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA4C;IAErE,YAAY,SAAS,GAAE,SAAS,qBAAqB,EAAO,EAW3D;IAED,gEAAgE;IACzD,WAAW,CAChB,YAAY,EAAE,OAAO,GACpB,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAI9C;IAED,6DAA6D;IACtD,MAAM,CAAC,QAAQ,EAAE,OAAO,GAAG,oBAAoB,GAAG,SAAS,CAIjE;CACF"}

package/dist/terraform/sim-tf-overrides.js

@@ -0,0 +1,40 @@
+/**
+ * The values a deployment supplied for the gaps a plan left, by the name each
+ * one is matched on.
+ *
+ * A mapping asks this for the name the plan gave a resource and gets back what
+ * was supplied for it, or nothing. Asking with a name the plan itself could not
+ * resolve gets nothing back, which is the same answer as no override, so a
+ * mapping has one case to handle rather than two.
+ */
+export class TerraformPlanOverrides {
+    environments;
+    policies;
+    constructor(overrides = []) {
+        this.environments = new Map(overrides
+            .filter(isEnvironmentOverride)
+            .map((override) => [override.functionName, override.environment]));
+        this.policies = new Map(overrides
+            .filter(isRolePolicyOverride)
+            .map((override) => [override.roleName, override.policy]));
+    }
+    /** The environment variables supplied for one function name. */
+    environment(functionName) {
+        return typeof functionName === "string"
+            ? this.environments.get(functionName)
+            : undefined;
+    }
+    /** The inline policy document supplied for one role name. */
+    policy(roleName) {
+        return typeof roleName === "string"
+            ? this.policies.get(roleName)
+            : undefined;
+    }
+}
+function isEnvironmentOverride(override) {
+    return override.functionName !== undefined;
+}
+function isRolePolicyOverride(override) {
+    return override.roleName !== undefined;
+}
+//# sourceMappingURL=sim-tf-overrides.js.map

package/dist/terraform/sim-tf-overrides.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-overrides.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-overrides.ts"],"names":[],"mappings":"AAOA;;;;;;;;GAQG;AACH,MAAM,OAAO,sBAAsB;IAChB,YAAY,CAG3B;IAEe,QAAQ,CAA4C;IAErE,YAAY,SAAS,GAAqC,EAAE;QAC1D,IAAI,CAAC,YAAY,GAAG,IAAI,GAAG,CACzB,SAAS;aACN,MAAM,CAAC,qBAAqB,CAAC;aAC7B,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC,CACpE,CAAC;QACF,IAAI,CAAC,QAAQ,GAAG,IAAI,GAAG,CACrB,SAAS;aACN,MAAM,CAAC,oBAAoB,CAAC;aAC5B,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAC3D,CAAC;IACJ,CAAC;IAED,gEAAgE;IACzD,WAAW,CAChB,YAAqB;QAErB,OAAO,OAAO,YAAY,KAAK,QAAQ;YACrC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC;YACrC,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAED,6DAA6D;IACtD,MAAM,CAAC,QAAiB;QAC7B,OAAO,OAAO,QAAQ,KAAK,QAAQ;YACjC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC7B,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;CACF;AAED,SAAS,qBAAqB,CAC5B,QAA+B;IAE/B,OAAO,QAAQ,CAAC,YAAY,KAAK,SAAS,CAAC;AAC7C,CAAC;AAED,SAAS,oBAAoB,CAC3B,QAA+B;IAE/B,OAAO,QAAQ,CAAC,QAAQ,KAAK,SAAS,CAAC;AACzC,CAAC"}

package/dist/terraform/sim-tf-plan-file.d.ts

@@ -0,0 +1,23 @@
+import type { TerraformPlan } from "./sim-tf-plan.type.js";
+/**
+ * Read the plan JSON at a path.
+ *
+ * The two ways of getting this wrong are worth telling apart. A path with no
+ * file at it is named as resolved, and a file that is not the JSON form is met
+ * with the command that writes it, since `terraform plan -out` writes a binary
+ * file whose name looks like the right one.
+ *
+ * A document that parses but is not a plan is refused the same way. Every
+ * `terraform show -json` document carries `format_version`, and without that
+ * check a JSON file of anything at all reads as a plan that creates nothing
+ * and deploys as an empty Stack.
+ */
+export declare function readTerraformPlanFile(planPath: string): Promise<TerraformPlan>;
+/**
+ * The Stack name a plan file gives, for a deployment that names none.
+ *
+ * `orders.tfplan.json` deploys as `orders`, the way a template file deployment
+ * is named after the template.
+ */
+export declare function terraformStackNameFromPlanPath(planPath: string): string;
+//# sourceMappingURL=sim-tf-plan-file.d.ts.map

package/dist/terraform/sim-tf-plan-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-plan-file.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-plan-file.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D;;;;;;;;;;;;GAYG;AACH,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,aAAa,CAAC,CAcxB;AAED;;;;;GAKG;AACH,wBAAgB,8BAA8B,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEvE"}

package/dist/terraform/sim-tf-plan-file.js

@@ -0,0 +1,58 @@
+import { readFile } from "node:fs/promises";
+import path from "node:path";
+import { isRecord } from "../util/type-guard/record.js";
+/**
+ * Read the plan JSON at a path.
+ *
+ * The two ways of getting this wrong are worth telling apart. A path with no
+ * file at it is named as resolved, and a file that is not the JSON form is met
+ * with the command that writes it, since `terraform plan -out` writes a binary
+ * file whose name looks like the right one.
+ *
+ * A document that parses but is not a plan is refused the same way. Every
+ * `terraform show -json` document carries `format_version`, and without that
+ * check a JSON file of anything at all reads as a plan that creates nothing
+ * and deploys as an empty Stack.
+ */
+export async function readTerraformPlanFile(planPath) {
+    const contents = await planFileContents(planPath);
+    try {
+        const parsed = JSON.parse(contents);
+        if (isPlanDocument(parsed)) {
+            return parsed;
+        }
+    }
+    catch (error) {
+        throw notPlanJson(planPath, error);
+    }
+    throw notPlanJson(planPath);
+}
+/**
+ * The Stack name a plan file gives, for a deployment that names none.
+ *
+ * `orders.tfplan.json` deploys as `orders`, the way a template file deployment
+ * is named after the template.
+ */
+export function terraformStackNameFromPlanPath(planPath) {
+    return path.basename(planPath).replace(/(?:\.tfplan|\.plan)?\.json$/u, "");
+}
+function isPlanDocument(parsed) {
+    return isRecord(parsed) && typeof parsed["format_version"] === "string";
+}
+async function planFileContents(planPath) {
+    try {
+        // oxlint-disable-next-line security/detect-non-literal-fs-filename
+        return await readFile(planPath, "utf8");
+    }
+    catch (error) {
+        if (error instanceof Error && "code" in error && error.code === "ENOENT") {
+            throw new Error(`No Terraform plan JSON file at ${path.resolve(planPath)}`, { cause: error });
+        }
+        throw error;
+    }
+}
+function notPlanJson(planPath, cause) {
+    return new Error(`${path.resolve(planPath)} is not Terraform plan JSON. ` +
+        `Write it with \`terraform show -json <planfile>\`.`, { cause });
+}
+//# sourceMappingURL=sim-tf-plan-file.js.map

package/dist/terraform/sim-tf-plan-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-plan-file.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-plan-file.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAGxD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,QAAgB;IAEhB,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAElD,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAE7C,IAAI,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,WAAW,CAAC,QAAQ,CAAC,CAAC;AAC9B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,8BAA8B,CAAC,QAAgB;IAC7D,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,8BAA8B,EAAE,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,cAAc,CAAC,MAAe;IACrC,OAAO,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,gBAAgB,CAAC,KAAK,QAAQ,CAAC;AAC1E,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,QAAgB;IAC9C,IAAI,CAAC;QACH,mEAAmE;QACnE,OAAO,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACzE,MAAM,IAAI,KAAK,CACb,kCAAkC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAC1D,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB,EAAE,KAAe;IACpD,OAAO,IAAI,KAAK,CACd,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,+BAA+B;QACtD,oDAAoD,EACtD,EAAE,KAAK,EAAE,CACV,CAAC;AACJ,CAAC"}

package/dist/terraform/sim-tf-plan-resources.d.ts

@@ -0,0 +1,18 @@
+import type { TerraformPlan } from "./sim-tf-plan.type.js";
+import type { TerraformResource } from "./sim-tf-resource.type.js";
+/**
+ * Every managed AWS resource a plan will create, in declaration order.
+ *
+ * The three sections a plan splits a resource across are walked together.
+ * `planned_values` and `configuration` are two trees of the same shape, and
+ * `configuration` addresses its resources relative to the module declaring
+ * them, so the two are joined per module rather than matched on address.
+ * `resource_changes` is a flat list keyed by the fully qualified address.
+ *
+ * Data sources are left out, because a data source reads infrastructure that
+ * already exists and creates nothing. Resources from another provider are left
+ * in, carrying their provider name, so the caller can report them rather than
+ * silently lose them.
+ */
+export declare function terraformPlanResources(plan: TerraformPlan): readonly TerraformResource[];
+//# sourceMappingURL=sim-tf-plan-resources.d.ts.map

package/dist/terraform/sim-tf-plan-resources.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-plan-resources.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-plan-resources.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAGV,aAAa,EAGd,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAUnE;;;;;;;;;;;;;GAaG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,aAAa,GAClB,SAAS,iBAAiB,EAAE,CAa9B"}

package/dist/terraform/sim-tf-plan-resources.js

@@ -0,0 +1,54 @@
+import { terraformExpressionReferences } from "./sim-tf-expression-references.js";
+import { childModuleCallName, childModuleSegment, configResourcesByKey, providerShortName, unknownAttributesByAddress, } from "./sim-tf-plan-sections.js";
+/**
+ * Every managed AWS resource a plan will create, in declaration order.
+ *
+ * The three sections a plan splits a resource across are walked together.
+ * `planned_values` and `configuration` are two trees of the same shape, and
+ * `configuration` addresses its resources relative to the module declaring
+ * them, so the two are joined per module rather than matched on address.
+ * `resource_changes` is a flat list keyed by the fully qualified address.
+ *
+ * Data sources are left out, because a data source reads infrastructure that
+ * already exists and creates nothing. Resources from another provider are left
+ * in, carrying their provider name, so the caller can report them rather than
+ * silently lose them.
+ */
+export function terraformPlanResources(plan) {
+    const rootValues = plan.planned_values?.root_module;
+    if (rootValues === undefined) {
+        return [];
+    }
+    return collectModule(rootValues, plan.configuration?.root_module, [], unknownAttributesByAddress(plan));
+}
+function collectModule(values, config, modulePath, unknown) {
+    const declared = configResourcesByKey(config);
+    const own = (values.resources ?? [])
+        .filter((resource) => (resource.mode ?? "managed") === "managed")
+        .map((resource) => joined(resource, declared, modulePath, unknown));
+    const nested = (values.child_modules ?? []).flatMap((child) => {
+        // The configuration is filed under the call name and the resources are
+        // addressed by the instance, so the two parts of the walk take different
+        // halves of the same segment.
+        const callName = childModuleCallName(child.address, modulePath);
+        return collectModule(child, config?.module_calls?.[callName]?.module, [...modulePath, childModuleSegment(child.address, modulePath)], unknown);
+    });
+    return [...own, ...nested];
+}
+function joined(resource, declared, modulePath, unknown) {
+    const config = declared.get(`${resource.type}.${resource.name}`);
+    return {
+        address: resource.address,
+        type: resource.type,
+        name: resource.name,
+        index: resource.index,
+        provider: providerShortName(resource.provider_name),
+        values: resource.values ?? {},
+        unknown: unknown.get(resource.address) ?? {},
+        expressions: config?.expressions ?? {},
+        dependsOn: config?.depends_on ?? [],
+        forEach: terraformExpressionReferences(config?.for_each_expression),
+        modulePath,
+    };
+}
+//# sourceMappingURL=sim-tf-plan-resources.js.map

package/dist/terraform/sim-tf-plan-resources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-plan-resources.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-plan-resources.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,6BAA6B,EAAE,MAAM,mCAAmC,CAAC;AAClF,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,EACpB,iBAAiB,EACjB,0BAA0B,GAC3B,MAAM,2BAA2B,CAAC;AAEnC;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,sBAAsB,CACpC,IAAmB;IAEnB,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,EAAE,WAAW,CAAC;IAEpD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,aAAa,CAClB,UAAU,EACV,IAAI,CAAC,aAAa,EAAE,WAAW,EAC/B,EAAE,EACF,0BAA0B,CAAC,IAAI,CAAC,CACjC,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,MAA8B,EAC9B,MAAyC,EACzC,UAA6B,EAC7B,OAAqD;IAErD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAE9C,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;SACjC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,IAAI,SAAS,CAAC,KAAK,SAAS,CAAC;SAChE,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;IAEtE,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QAC5D,uEAAuE;QACvE,yEAAyE;QACzE,8BAA8B;QAC9B,MAAM,QAAQ,GAAG,mBAAmB,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAEhE,OAAO,aAAa,CAClB,KAAK,EACL,MAAM,EAAE,YAAY,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EACxC,CAAC,GAAG,UAAU,EAAE,kBAAkB,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,EAC9D,OAAO,CACR,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,MAAM,CACb,QAAkC,EAClC,QAAsD,EACtD,UAA6B,EAC7B,OAAqD;IAErD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IAEjE,OAAO;QACL,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,QAAQ,EAAE,iBAAiB,CAAC,QAAQ,CAAC,aAAa,CAAC;QACnD,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,EAAE;QAC7B,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE;QAC5C,WAAW,EAAE,MAAM,EAAE,WAAW,IAAI,EAAE;QACtC,SAAS,EAAE,MAAM,EAAE,UAAU,IAAI,EAAE;QACnC,OAAO,EAAE,6BAA6B,CAAC,MAAM,EAAE,mBAAmB,CAAC;QACnE,UAAU;KACX,CAAC;AACJ,CAAC"}