@kensio/yulin 1.19.2 → 1.19.4

package/dist/terraform/sim-tf-plan-sections.d.ts

@@ -0,0 +1,31 @@
+import type { TerraformConfigModule, TerraformConfigResource, TerraformPlan } from "./sim-tf-plan.type.js";
+/**
+ * Each resource's `after_unknown`, keyed by the address it belongs to.
+ *
+ * `planned_values` says what a value is and `resource_changes` says whether the
+ * plan knew it, so reading a resource means having both to hand.
+ */
+export declare function unknownAttributesByAddress(plan: TerraformPlan): ReadonlyMap<string, Record<string, unknown>>;
+/** The declared configuration of one module's resources, by type and name. */
+export declare function configResourcesByKey(config: TerraformConfigModule | undefined): ReadonlyMap<string, TerraformConfigResource>;
+/**
+ * The child module segment of an address, as `planned_values` writes it.
+ *
+ * A child module address repeats its parents, so `module.a.module.b` under
+ * `["a"]` is `b`. A module called with `count` or `for_each` carries the
+ * instance key here, and `module.workers["blue"]` gives `workers["blue"]`.
+ * That is the form every address under the module is written with, so it is
+ * the form a reference from inside it has to be qualified against.
+ */
+export declare function childModuleSegment(address: string | undefined, modulePath: readonly string[]): string;
+/**
+ * The call name of a child module, without any instance key.
+ *
+ * The configuration files a module under the name it was called by, once,
+ * however many instances the call has, so this is the form its `module_calls`
+ * are keyed on.
+ */
+export declare function childModuleCallName(address: string | undefined, modulePath: readonly string[]): string;
+/** The provider that owns a resource type, without the registry it came from. */
+export declare function providerShortName(providerName: string | undefined): string;
+//# sourceMappingURL=sim-tf-plan-sections.d.ts.map

package/dist/terraform/sim-tf-plan-sections.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-plan-sections.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-plan-sections.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EACV,qBAAqB,EACrB,uBAAuB,EACvB,aAAa,EACd,MAAM,uBAAuB,CAAC;AAE/B;;;;;GAKG;AACH,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,aAAa,GAClB,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAO9C;AAED,8EAA8E;AAC9E,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,qBAAqB,GAAG,SAAS,GACxC,WAAW,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAO9C;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,UAAU,EAAE,SAAS,MAAM,EAAE,GAC5B,MAAM,CAER;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,UAAU,EAAE,SAAS,MAAM,EAAE,GAC5B,MAAM,CAER;AAED,iFAAiF;AACjF,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAM1E"}

package/dist/terraform/sim-tf-plan-sections.js

@@ -0,0 +1,60 @@
+/**
+ * How the three sections of a plan document address and key what they hold.
+ *
+ * Each section says something different about the same resource and none of
+ * them says it the same way. `resource_changes` is a flat list keyed by fully
+ * qualified address, `configuration` files a resource under the module that
+ * declares it, and both a child module address and a provider name carry more
+ * than the name being read out of them. This is that reading, kept away from
+ * the walk that uses it.
+ */
+import { addressSegments, withoutInstanceKeys, } from "./sim-tf-reference-address.js";
+/**
+ * Each resource's `after_unknown`, keyed by the address it belongs to.
+ *
+ * `planned_values` says what a value is and `resource_changes` says whether the
+ * plan knew it, so reading a resource means having both to hand.
+ */
+export function unknownAttributesByAddress(plan) {
+    return new Map((plan.resource_changes ?? []).map((change) => [
+        change.address,
+        change.change?.after_unknown ?? {},
+    ]));
+}
+/** The declared configuration of one module's resources, by type and name. */
+export function configResourcesByKey(config) {
+    return new Map((config?.resources ?? []).map((resource) => [
+        `${resource.type}.${resource.name}`,
+        resource,
+    ]));
+}
+/**
+ * The child module segment of an address, as `planned_values` writes it.
+ *
+ * A child module address repeats its parents, so `module.a.module.b` under
+ * `["a"]` is `b`. A module called with `count` or `for_each` carries the
+ * instance key here, and `module.workers["blue"]` gives `workers["blue"]`.
+ * That is the form every address under the module is written with, so it is
+ * the form a reference from inside it has to be qualified against.
+ */
+export function childModuleSegment(address, modulePath) {
+    return addressSegments(address ?? "")[modulePath.length * 2 + 1] ?? "";
+}
+/**
+ * The call name of a child module, without any instance key.
+ *
+ * The configuration files a module under the name it was called by, once,
+ * however many instances the call has, so this is the form its `module_calls`
+ * are keyed on.
+ */
+export function childModuleCallName(address, modulePath) {
+    return withoutInstanceKeys(childModuleSegment(address, modulePath));
+}
+/** The provider that owns a resource type, without the registry it came from. */
+export function providerShortName(providerName) {
+    if (providerName === undefined) {
+        return "unknown";
+    }
+    return providerName.replace(/^registry\.terraform\.io\//u, "");
+}
+//# sourceMappingURL=sim-tf-plan-sections.js.map

package/dist/terraform/sim-tf-plan-sections.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-plan-sections.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-plan-sections.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EACL,eAAe,EACf,mBAAmB,GACpB,MAAM,+BAA+B,CAAC;AAOvC;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CACxC,IAAmB;IAEnB,OAAO,IAAI,GAAG,CACZ,CAAC,IAAI,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QAC5C,MAAM,CAAC,OAAO;QACd,MAAM,CAAC,MAAM,EAAE,aAAa,IAAI,EAAE;KACnC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,oBAAoB,CAClC,MAAyC;IAEzC,OAAO,IAAI,GAAG,CACZ,CAAC,MAAM,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;QAC1C,GAAG,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,EAAE;QACnC,QAAQ;KACT,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAA2B,EAC3B,UAA6B;IAE7B,OAAO,eAAe,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AACzE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAA2B,EAC3B,UAA6B;IAE7B,OAAO,mBAAmB,CAAC,kBAAkB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;AACtE,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,iBAAiB,CAAC,YAAgC;IAChE,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,YAAY,CAAC,OAAO,CAAC,6BAA6B,EAAE,EAAE,CAAC,CAAC;AACjE,CAAC"}

package/dist/{service/cloudformation/terraform → terraform}/sim-tf-plan.type.d.ts

@@ -35,7 +35,7 @@ export interface TerraformPlannedResource {
     readonly mode?: string;
     readonly type: string;
     readonly name: string;
-    readonly index?: string | number;
+    readonly index?: string | number | undefined;
     readonly provider_name?: string;
     readonly values?: Record<string, unknown>;
 }
@@ -67,9 +67,20 @@ export interface TerraformResourceChange {
  */
 export interface TerraformConfigModule {
     readonly resources?: readonly TerraformConfigResource[];
-    readonly module_calls?: Record<string, {
-        readonly module?: TerraformConfigModule;
-    }>;
+    readonly outputs?: Record<string, TerraformConfigOutput>;
+    readonly module_calls?: Record<string, TerraformConfigModuleCall>;
+}
+/**
+ * One `module` block, holding the module it calls and what it sets on it.
+ *
+ * `expressions` is keyed by variable name and holds what the caller wrote for
+ * each one, in the same shape a resource attribute's expression takes. A
+ * variable set from a resource of the calling module carries the reference
+ * rather than a value.
+ */
+export interface TerraformConfigModuleCall {
+    readonly module?: TerraformConfigModule;
+    readonly expressions?: Record<string, unknown>;
 }
 export interface TerraformConfigResource {
     readonly address: string;
@@ -78,6 +89,16 @@ export interface TerraformConfigResource {
     readonly name: string;
     readonly expressions?: Record<string, unknown>;
     readonly depends_on?: readonly string[];
+    /**
+     * What `for_each` iterates, as the references its expression holds.
+     *
+     * `planned_values` carries the instances rather than the collection, so this
+     * is the only place a plan says what `each` was iterating.
+     */
+    readonly for_each_expression?: unknown;
+}
+export interface TerraformConfigOutput {
+    readonly expression?: TerraformExpression;
 }
 /**
  * A `references` entry, which is a resource address optionally followed by the

package/dist/terraform/sim-tf-plan.type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-plan.type.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-plan.type.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,cAAc,CAAC,EAAE;QAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,sBAAsB,CAAA;KAAE,CAAC;IAC5E,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,uBAAuB,EAAE,CAAC;IAC/D,QAAQ,CAAC,aAAa,CAAC,EAAE;QAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,qBAAqB,CAAA;KAAE,CAAC;CAC3E;AAED;;;;;GAKG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,wBAAwB,EAAE,CAAC;IACzD,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,2BAA2B,EAAE,CAAC;CACjE;AAED,MAAM,WAAW,2BAA4B,SAAQ,sBAAsB;IACzE,yEAAyE;IACzE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC3C;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE;QAChB,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QACrC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;QAChD,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;KACzD,CAAC;CACH;AAED;;;;;;GAMG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,uBAAuB,EAAE,CAAC;IACxD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;IACzD,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;CACnE;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,MAAM,CAAC,EAAE,qBAAqB,CAAC;IACxC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChD;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/C,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC;;;;;OAKG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC;CACxC;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACzC"}

package/dist/terraform/sim-tf-plan.type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-plan.type.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-plan.type.ts"],"names":[],"mappings":""}

package/dist/terraform/sim-tf-reference-address.d.ts

@@ -0,0 +1,52 @@
+/**
+ * How a Terraform reference string is read, before anything is looked up.
+ *
+ * A reference is text the configuration wrote, and two things about that text
+ * have to be settled before a resource can be found behind it. Which of the
+ * forms Terraform lists is the one to follow, and what the reference means
+ * from outside the module that wrote it.
+ */
+/**
+ * References ordered longest first.
+ *
+ * Terraform lists the attribute form and the bare resource form of one
+ * reference. The attribute form is longer, and it is the one that resolves to
+ * the value being read rather than to the resource as a whole.
+ */
+export declare function longestFirst(references: readonly string[]): readonly string[];
+/**
+ * An address split on the dots between its segments.
+ *
+ * A `count` or `for_each` key can hold anything, including a dot, so the dots
+ * inside a bracketed key are not separators. `module.hosts["a.example.com"]`
+ * is two segments rather than four.
+ */
+export declare function addressSegments(address: string): readonly string[];
+/**
+ * The module instance path a module output was read through.
+ *
+ * `module.workers["blue"].module.queue.queue_arn` is the output `queue_arn` of
+ * the call `queue` inside the instance `workers["blue"]`. The output's own
+ * references are relative to that path, keys and all, where the index the
+ * output was found in is keyed by call name alone.
+ */
+export declare function moduleOutputPath(qualified: string): readonly string[];
+/**
+ * A reference with every `count` and `for_each` key taken out of it.
+ *
+ * A module declares its outputs once however many instances of the call there
+ * are, so the output index is keyed by call path. A reference made from inside
+ * one instance carries that instance's key, and this is what it is looked up
+ * by.
+ */
+export declare function withoutInstanceKeys(reference: string): string;
+/**
+ * A module-relative reference turned into a plan-wide address.
+ *
+ * References inside a module name their own module's resources without the
+ * module prefix that `planned_values` puts on them. A reference to another
+ * module's output is qualified the same way, because the output index is keyed
+ * by the full call path and a nested call would otherwise miss it.
+ */
+export declare function qualifiedReference(reference: string, modulePath: readonly string[]): string;
+//# sourceMappingURL=sim-tf-reference-address.d.ts.map

package/dist/terraform/sim-tf-reference-address.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-reference-address.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-reference-address.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,CAE7E;AAoBD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAsBlE;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAIrE;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE7D;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,SAAS,MAAM,EAAE,GAC5B,MAAM,CASR"}

package/dist/terraform/sim-tf-reference-address.js

@@ -0,0 +1,102 @@
+/**
+ * How a Terraform reference string is read, before anything is looked up.
+ *
+ * A reference is text the configuration wrote, and two things about that text
+ * have to be settled before a resource can be found behind it. Which of the
+ * forms Terraform lists is the one to follow, and what the reference means
+ * from outside the module that wrote it.
+ */
+/**
+ * References ordered longest first.
+ *
+ * Terraform lists the attribute form and the bare resource form of one
+ * reference. The attribute form is longer, and it is the one that resolves to
+ * the value being read rather than to the resource as a whole.
+ */
+export function longestFirst(references) {
+    return references.toSorted((a, b) => b.length - a.length);
+}
+/**
+ * Scopes that name something other than a resource of the same module.
+ *
+ * A reference under one of these is resolved by Terraform rather than by an
+ * address lookup, and prefixing it with the module path would invent an
+ * address no resource has.
+ */
+const unqualifiedScopes = [
+    "var.",
+    "local.",
+    "each.",
+    "count.",
+    "self.",
+    "data.",
+    "path.",
+    "terraform.",
+];
+/**
+ * An address split on the dots between its segments.
+ *
+ * A `count` or `for_each` key can hold anything, including a dot, so the dots
+ * inside a bracketed key are not separators. `module.hosts["a.example.com"]`
+ * is two segments rather than four.
+ */
+export function addressSegments(address) {
+    const segments = [];
+    let current = "";
+    let bracketed = false;
+    for (const character of address) {
+        if (character === "[") {
+            bracketed = true;
+        }
+        else if (character === "]") {
+            bracketed = false;
+        }
+        if (character === "." && !bracketed) {
+            segments.push(current);
+            current = "";
+            continue;
+        }
+        current += character;
+    }
+    return [...segments, current];
+}
+/**
+ * The module instance path a module output was read through.
+ *
+ * `module.workers["blue"].module.queue.queue_arn` is the output `queue_arn` of
+ * the call `queue` inside the instance `workers["blue"]`. The output's own
+ * references are relative to that path, keys and all, where the index the
+ * output was found in is keyed by call name alone.
+ */
+export function moduleOutputPath(qualified) {
+    return addressSegments(qualified)
+        .slice(0, -1)
+        .filter((_, position) => position % 2 === 1);
+}
+/**
+ * A reference with every `count` and `for_each` key taken out of it.
+ *
+ * A module declares its outputs once however many instances of the call there
+ * are, so the output index is keyed by call path. A reference made from inside
+ * one instance carries that instance's key, and this is what it is looked up
+ * by.
+ */
+export function withoutInstanceKeys(reference) {
+    return reference.replaceAll(/\[[^\]]*\]/gu, "");
+}
+/**
+ * A module-relative reference turned into a plan-wide address.
+ *
+ * References inside a module name their own module's resources without the
+ * module prefix that `planned_values` puts on them. A reference to another
+ * module's output is qualified the same way, because the output index is keyed
+ * by the full call path and a nested call would otherwise miss it.
+ */
+export function qualifiedReference(reference, modulePath) {
+    if (modulePath.length === 0 ||
+        unqualifiedScopes.some((scope) => reference.startsWith(scope))) {
+        return reference;
+    }
+    return `${modulePath.map((call) => `module.${call}`).join(".")}.${reference}`;
+}
+//# sourceMappingURL=sim-tf-reference-address.js.map

package/dist/terraform/sim-tf-reference-address.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-reference-address.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-reference-address.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,UAA6B;IACxD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;AAC5D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,iBAAiB,GAAG;IACxB,MAAM;IACN,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,OAAO;IACP,OAAO;IACP,OAAO;IACP,YAAY;CACb,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,SAAS,GAAG,KAAK,CAAC;IAEtB,KAAK,MAAM,SAAS,IAAI,OAAO,EAAE,CAAC;QAChC,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;YACtB,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;aAAM,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;YAC7B,SAAS,GAAG,KAAK,CAAC;QACpB,CAAC;QAED,IAAI,SAAS,KAAK,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YACpC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvB,OAAO,GAAG,EAAE,CAAC;YACb,SAAS;QACX,CAAC;QAED,OAAO,IAAI,SAAS,CAAC;IACvB,CAAC;IAED,OAAO,CAAC,GAAG,QAAQ,EAAE,OAAO,CAAC,CAAC;AAChC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,SAAiB;IAChD,OAAO,eAAe,CAAC,SAAS,CAAC;SAC9B,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;SACZ,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AACjD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,SAAiB;IACnD,OAAO,SAAS,CAAC,UAAU,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAChC,SAAiB,EACjB,UAA6B;IAE7B,IACE,UAAU,CAAC,MAAM,KAAK,CAAC;QACvB,iBAAiB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAC9D,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,SAAS,EAAE,CAAC;AAChF,CAAC"}

package/dist/terraform/sim-tf-reference-addresses.d.ts

@@ -0,0 +1,45 @@
+import type { TerraformResource } from "./sim-tf-resource.type.js";
+/**
+ * The resources a template will declare, looked up by the addresses that name
+ * them.
+ *
+ * A reference is text, and finding the resource behind it is a search over
+ * addresses rather than a lookup, because the reference carries the attribute
+ * being read and may leave out the instance key. Both searches are here, away
+ * from the resolver deciding what to do with what they find.
+ */
+export declare class TerraformResourceAddresses {
+    private readonly byAddress;
+    constructor(resources: readonly TerraformResource[]);
+    /**
+     *
+     */
+    /** Every address this template will declare a Resource under. */
+    addresses(): Iterable<string>;
+    /**
+     *
+     */
+    /** The resource one address names exactly. */
+    get(address: string): TerraformResource | undefined;
+    /**
+     * The resource whose address is the longest prefix of this reference.
+     *
+     * `aws_iam_role.processor.arn` has to find `aws_iam_role.processor` and leave
+     * `arn` behind, and a `for_each` instance address carries a bracketed key
+     * that is part of the address rather than an attribute.
+     */
+    longestMatch(qualified: string): TerraformResource | undefined;
+    /**
+     * One instance of a resource a reference named without its key.
+     *
+     * `aws_apigatewayv2_integration.this[each.key]` is written into a plan as a
+     * reference to `aws_apigatewayv2_integration.this` and a separate reference
+     * to `each.key`, so the address in hand names no instance. The instance
+     * meant is the one keyed like the resource doing the reading, since that is
+     * what `each.key` holds there, and a resource with one instance and no key
+     * to go on has only the one it could mean.
+     */
+    instance(qualified: string, index: string | number | undefined): string | undefined;
+    private soleInstance;
+}
+//# sourceMappingURL=sim-tf-reference-addresses.d.ts.map

package/dist/terraform/sim-tf-reference-addresses.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-reference-addresses.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-reference-addresses.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAEnE;;;;;;;;GAQG;AACH,qBAAa,0BAA0B;IACrC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAyC;IAEnE,YAAY,SAAS,EAAE,SAAS,iBAAiB,EAAE,EAIlD;IAED;;OAEG;IACH,iEAAiE;IAC1D,SAAS,IAAI,QAAQ,CAAC,MAAM,CAAC,CAEnC;IAED;;OAEG;IACH,8CAA8C;IACvC,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAEzD;IAED;;;;;;OAMG;IACI,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAcpE;IAED;;;;;;;;;OASG;IACI,QAAQ,CACb,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,GACjC,MAAM,GAAG,SAAS,CAQpB;IAED,OAAO,CAAC,YAAY;CAQrB"}

package/dist/terraform/sim-tf-reference-addresses.js

@@ -0,0 +1,82 @@
+/**
+ * The resources a template will declare, looked up by the addresses that name
+ * them.
+ *
+ * A reference is text, and finding the resource behind it is a search over
+ * addresses rather than a lookup, because the reference carries the attribute
+ * being read and may leave out the instance key. Both searches are here, away
+ * from the resolver deciding what to do with what they find.
+ */
+export class TerraformResourceAddresses {
+    byAddress;
+    constructor(resources) {
+        this.byAddress = new Map(resources.map((resource) => [resource.address, resource]));
+    }
+    /**
+     *
+     */
+    /** Every address this template will declare a Resource under. */
+    addresses() {
+        return this.byAddress.keys();
+    }
+    /**
+     *
+     */
+    /** The resource one address names exactly. */
+    get(address) {
+        return this.byAddress.get(address);
+    }
+    /**
+     * The resource whose address is the longest prefix of this reference.
+     *
+     * `aws_iam_role.processor.arn` has to find `aws_iam_role.processor` and leave
+     * `arn` behind, and a `for_each` instance address carries a bracketed key
+     * that is part of the address rather than an attribute.
+     */
+    longestMatch(qualified) {
+        let best;
+        for (const [address, resource] of this.byAddress) {
+            if (qualified !== address && !qualified.startsWith(`${address}.`)) {
+                continue;
+            }
+            if (best === undefined || address.length > best.address.length) {
+                best = resource;
+            }
+        }
+        return best;
+    }
+    /**
+     * One instance of a resource a reference named without its key.
+     *
+     * `aws_apigatewayv2_integration.this[each.key]` is written into a plan as a
+     * reference to `aws_apigatewayv2_integration.this` and a separate reference
+     * to `each.key`, so the address in hand names no instance. The instance
+     * meant is the one keyed like the resource doing the reading, since that is
+     * what `each.key` holds there, and a resource with one instance and no key
+     * to go on has only the one it could mean.
+     */
+    instance(qualified, index) {
+        const keyed = instanceAddress(qualified, index);
+        if (keyed !== undefined && this.byAddress.has(keyed)) {
+            return keyed;
+        }
+        return this.soleInstance(qualified);
+    }
+    soleInstance(qualified) {
+        const instances = this.byAddress
+            .keys()
+            .filter((address) => address.startsWith(`${qualified}[`))
+            .toArray();
+        return instances.length === 1 ? instances[0] : undefined;
+    }
+}
+/** One address written with the `count` or `for_each` key of an instance. */
+function instanceAddress(qualified, index) {
+    if (index === undefined) {
+        return undefined;
+    }
+    return typeof index === "number"
+        ? `${qualified}[${index}]`
+        : `${qualified}["${index}"]`;
+}
+//# sourceMappingURL=sim-tf-reference-addresses.js.map

package/dist/terraform/sim-tf-reference-addresses.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-reference-addresses.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-reference-addresses.ts"],"names":[],"mappings":"AAEA;;;;;;;;GAQG;AACH,MAAM,OAAO,0BAA0B;IACpB,SAAS,CAAyC;IAEnE,YAAY,SAAuC;QACjD,IAAI,CAAC,SAAS,GAAG,IAAI,GAAG,CACtB,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAC1D,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,iEAAiE;IAC1D,SAAS;QACd,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,8CAA8C;IACvC,GAAG,CAAC,OAAe;QACxB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAED;;;;;;OAMG;IACI,YAAY,CAAC,SAAiB;QACnC,IAAI,IAAmC,CAAC;QAExC,KAAK,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACjD,IAAI,SAAS,KAAK,OAAO,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,OAAO,GAAG,CAAC,EAAE,CAAC;gBAClE,SAAS;YACX,CAAC;YAED,IAAI,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;gBAC/D,IAAI,GAAG,QAAQ,CAAC;YAClB,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;;;OASG;IACI,QAAQ,CACb,SAAiB,EACjB,KAAkC;QAElC,MAAM,KAAK,GAAG,eAAe,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAEhD,IAAI,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACrD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IAEO,YAAY,CAAC,SAAiB;QACpC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS;aAC7B,IAAI,EAAE;aACN,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,SAAS,GAAG,CAAC,CAAC;aACxD,OAAO,EAAE,CAAC;QAEb,OAAO,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3D,CAAC;CACF;AAED,6EAA6E;AAC7E,SAAS,eAAe,CACtB,SAAiB,EACjB,KAAkC;IAElC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,OAAO,KAAK,KAAK,QAAQ;QAC9B,CAAC,CAAC,GAAG,SAAS,IAAI,KAAK,GAAG;QAC1B,CAAC,CAAC,GAAG,SAAS,KAAK,KAAK,IAAI,CAAC;AACjC,CAAC"}

package/dist/terraform/sim-tf-reference-scope.d.ts

@@ -0,0 +1,29 @@
+import type { TerraformResource } from "./sim-tf-resource.type.js";
+/** One reference to follow, and the module its own references are written in. */
+export interface TerraformScopeHop {
+    readonly reference: string;
+    readonly modulePath: readonly string[];
+}
+/**
+ * What a reference Terraform resolves for itself stands in for.
+ *
+ * `each.value.uri` and `var.routes` name no address, and a plan resolves
+ * neither to a value where the value is not known yet. What a plan does record
+ * is where each one was written from. A `for_each` expression says what the
+ * collection was built out of, and a module call says what the caller set each
+ * variable to, so following one of these is following a reference written
+ * somewhere else.
+ *
+ * The step is a rewrite rather than an evaluation. `each.value.uri` becomes
+ * the references of the collection `each` iterates, in the module that
+ * declared the resource, and `var.routes` becomes the references of the module
+ * call, in the module that made it.
+ *
+ * What is lost either way is which part of the collection was being read.
+ * A plan records the references of a `routes` map as one list, with nothing to
+ * say which route or which of its keys each one belongs to, so `each.value.uri`
+ * and `each.value.timeout_milliseconds` are written down identically. The
+ * caller is what decides that an ambiguous answer is no answer.
+ */
+export declare function terraformScopeHops(reference: string, modulePath: readonly string[], from: TerraformResource, moduleVariables: ReadonlyMap<string, readonly string[]>, depth: number): readonly TerraformScopeHop[];
+//# sourceMappingURL=sim-tf-reference-scope.d.ts.map

package/dist/terraform/sim-tf-reference-scope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-reference-scope.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-reference-scope.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAMnE,iFAAiF;AACjF,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,SAAS,MAAM,EAAE,EAC7B,IAAI,EAAE,iBAAiB,EACvB,eAAe,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,EACvD,KAAK,EAAE,MAAM,GACZ,SAAS,iBAAiB,EAAE,CAU9B"}

package/dist/terraform/sim-tf-reference-scope.js

@@ -0,0 +1,71 @@
+import { longestFirst, withoutInstanceKeys, } from "./sim-tf-reference-address.js";
+/**
+ * What a reference Terraform resolves for itself stands in for.
+ *
+ * `each.value.uri` and `var.routes` name no address, and a plan resolves
+ * neither to a value where the value is not known yet. What a plan does record
+ * is where each one was written from. A `for_each` expression says what the
+ * collection was built out of, and a module call says what the caller set each
+ * variable to, so following one of these is following a reference written
+ * somewhere else.
+ *
+ * The step is a rewrite rather than an evaluation. `each.value.uri` becomes
+ * the references of the collection `each` iterates, in the module that
+ * declared the resource, and `var.routes` becomes the references of the module
+ * call, in the module that made it.
+ *
+ * What is lost either way is which part of the collection was being read.
+ * A plan records the references of a `routes` map as one list, with nothing to
+ * say which route or which of its keys each one belongs to, so `each.value.uri`
+ * and `each.value.timeout_milliseconds` are written down identically. The
+ * caller is what decides that an ambiguous answer is no answer.
+ */
+export function terraformScopeHops(reference, modulePath, from, moduleVariables, depth) {
+    if (reference.startsWith("each.")) {
+        return eachHops(modulePath, from, depth);
+    }
+    if (reference.startsWith("var.")) {
+        return variableHops(reference, modulePath, moduleVariables);
+    }
+    return [];
+}
+/**
+ * The collection `each` iterates, read from the resource doing the reading.
+ *
+ * Only the resource whose own expression held the reference has an `each` to
+ * read, which is the reference at depth zero. A reference reached by an
+ * earlier hop was written in another module, against another resource's
+ * collection, and is left alone.
+ */
+function eachHops(modulePath, from, depth) {
+    if (depth > 0) {
+        return [];
+    }
+    return longestFirst(from.forEach).map((reference) => ({
+        reference,
+        modulePath,
+    }));
+}
+/**
+ * What the caller set one of a module's variables to.
+ *
+ * The index is keyed by call path, since a module declares its variables once
+ * however many instances of the call there are, and the references the caller
+ * wrote are relative to the module holding the call.
+ */
+function variableHops(reference, modulePath, moduleVariables) {
+    if (modulePath.length === 0) {
+        return [];
+    }
+    const call = modulePath
+        .map((name) => `module.${withoutInstanceKeys(name)}`)
+        .join(".");
+    const name = reference.split(".", 2)[1] ?? "";
+    const set = moduleVariables.get(`${call}.var.${name}`) ?? [];
+    const caller = modulePath.slice(0, -1);
+    return longestFirst(set).map((written) => ({
+        reference: written,
+        modulePath: caller,
+    }));
+}
+//# sourceMappingURL=sim-tf-reference-scope.js.map

package/dist/terraform/sim-tf-reference-scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-reference-scope.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-reference-scope.ts"],"names":[],"mappings":"AACA,OAAO,EACL,YAAY,EACZ,mBAAmB,GACpB,MAAM,+BAA+B,CAAC;AAQvC;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,kBAAkB,CAChC,SAAiB,EACjB,UAA6B,EAC7B,IAAuB,EACvB,eAAuD,EACvD,KAAa;IAEb,IAAI,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAClC,OAAO,QAAQ,CAAC,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC3C,CAAC;IAED,IAAI,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,OAAO,YAAY,CAAC,SAAS,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;IAC9D,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,QAAQ,CACf,UAA6B,EAC7B,IAAuB,EACvB,KAAa;IAEb,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACd,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACpD,SAAS;QACT,UAAU;KACX,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;;;;;GAMG;AACH,SAAS,YAAY,CACnB,SAAiB,EACjB,UAA6B,EAC7B,eAAuD;IAEvD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,IAAI,GAAG,UAAU;SACpB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;SACpD,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9C,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,IAAI,QAAQ,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;IAC7D,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAEvC,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACzC,SAAS,EAAE,OAAO;QAClB,UAAU,EAAE,MAAM;KACnB,CAAC,CAAC,CAAC;AACN,CAAC"}