@kensio/yulin 1.19.3 → 1.20.0

package/dist/service/stepfunctions/data/sim-states-result-path.js

@@ -0,0 +1,64 @@
+import { isRecord } from "../../../util/type-guard/record.js";
+import { SimStatesResultPathMatchFailure } from "../error/sim-step-functions.error.js";
+/**
+ * Put a state's result into its raw input at a Reference Path.
+ *
+ * The document is copied down the path being written, so the value handed in
+ * is left as it was. Everything off the path is shared, since nothing in an
+ * execution mutates a value it has already produced.
+ */
+export function insertAtSimStatesPath(document, segments, result, resultPath) {
+    const [segment, ...rest] = segments;
+    if (segment === undefined) {
+        return result;
+    }
+    if (segment.kind === "index") {
+        return insertIntoArray(document, segment.index, rest, result, resultPath);
+    }
+    return insertIntoObject(document, segment.name, rest, result, resultPath);
+}
+/**
+ * Write one field, building the object where the document holds nothing yet.
+ *
+ * The field is defined rather than assigned, and the value underneath it is
+ * read only where the object owns it. A JSON document is free to hold a field
+ * called `__proto__`, and assigning that one would move the copy's prototype
+ * instead of writing the field the path named.
+ */
+function insertIntoObject(document, name, rest, result, resultPath) {
+    const target = document ?? {};
+    if (!isRecord(target)) {
+        throw new SimStatesResultPathMatchFailure(`${resultPath} writes the field ${name} into a value that is not an ` +
+            "object, so the result has nowhere to go.");
+    }
+    const copy = { ...target };
+    const existing = Object.hasOwn(copy, name) ? copy[name] : null;
+    Object.defineProperty(copy, name, {
+        configurable: true,
+        enumerable: true,
+        value: insertAtSimStatesPath(existing ?? null, rest, result, resultPath),
+        writable: true,
+    });
+    return copy;
+}
+/**
+ * Write one array element.
+ *
+ * The index has to be one the array already reaches. Writing past the end
+ * would leave a hole, and a hole is not a JSON value: it serializes as null
+ * and the next state receives something the write never described.
+ */
+function insertIntoArray(document, index, rest, result, resultPath) {
+    if (!Array.isArray(document)) {
+        throw new SimStatesResultPathMatchFailure(`${resultPath} writes element ${String(index)} into a value that is ` +
+            "not an array, so the result has nowhere to go.");
+    }
+    if (index >= document.length) {
+        throw new SimStatesResultPathMatchFailure(`${resultPath} writes element ${String(index)} of an array holding ` +
+            `${String(document.length)}, so the result has nowhere to go.`);
+    }
+    const copy = [...document];
+    copy[index] = insertAtSimStatesPath(copy[index] ?? null, rest, result, resultPath);
+    return copy;
+}
+//# sourceMappingURL=sim-states-result-path.js.map

package/dist/service/stepfunctions/data/sim-states-result-path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-states-result-path.js","sourceRoot":"","sources":["../../../../src/service/stepfunctions/data/sim-states-result-path.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,QAAQ,EAAE,MAAM,oCAAoC,CAAC;AAC9D,OAAO,EAAE,+BAA+B,EAAE,MAAM,sCAAsC,CAAC;AAGvF;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CACnC,QAAmB,EACnB,QAAyC,EACzC,MAAiB,EACjB,UAAkB;IAElB,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,QAAQ,CAAC;IAEpC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC7B,OAAO,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IAC5E,CAAC;IAED,OAAO,gBAAgB,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;AAC5E,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,gBAAgB,CACvB,QAAmB,EACnB,IAAY,EACZ,IAAqC,EACrC,MAAiB,EACjB,UAAkB;IAElB,MAAM,MAAM,GAAG,QAAQ,IAAI,EAAE,CAAC;IAE9B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,+BAA+B,CACvC,GAAG,UAAU,qBAAqB,IAAI,+BAA+B;YACnE,0CAA0C,CAC7C,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAe,EAAE,GAAG,MAAM,EAAE,CAAC;IACvC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAE/D,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,EAAE;QAChC,YAAY,EAAE,IAAI;QAClB,UAAU,EAAE,IAAI;QAChB,KAAK,EAAE,qBAAqB,CAAC,QAAQ,IAAI,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC;QACxE,QAAQ,EAAE,IAAI;KACf,CAAC,CAAC;IAEH,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,SAAS,eAAe,CACtB,QAAmB,EACnB,KAAa,EACb,IAAqC,EACrC,MAAiB,EACjB,UAAkB;IAElB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,+BAA+B,CACvC,GAAG,UAAU,mBAAmB,MAAM,CAAC,KAAK,CAAC,wBAAwB;YACnE,gDAAgD,CACnD,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC7B,MAAM,IAAI,+BAA+B,CACvC,GAAG,UAAU,mBAAmB,MAAM,CAAC,KAAK,CAAC,uBAAuB;YAClE,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,oCAAoC,CACjE,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC;IAE3B,IAAI,CAAC,KAAK,CAAC,GAAG,qBAAqB,CACjC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,EACnB,IAAI,EACJ,MAAM,EACN,UAAU,CACX,CAAC;IAEF,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/service/stepfunctions/error/sim-step-functions.error.d.ts

@@ -0,0 +1,59 @@
+/**
+ * Base class for simulated Step Functions errors.
+ *
+ * Every failure inside a state machine carries the name Amazon States Language
+ * gives it. That name is what a `Retry` or a `Catch` matches on, so it is held
+ * here rather than derived at the point one is evaluated.
+ */
+export declare class SimStepFunctionsError extends Error {
+    readonly statesErrorName: string;
+    constructor(message: string, statesErrorName: string);
+}
+/**
+ * A Reference Path this simulator cannot read.
+ *
+ * Real Step Functions rejects a malformed path when the state machine is
+ * created. It is raised here as well for a path outside the subset this reads,
+ * which is a narrower thing and worth telling apart in the message.
+ */
+export declare class SimStatesPathError extends SimStepFunctionsError {
+    readonly name = "SimStatesPathError";
+    constructor(message: string);
+}
+/**
+ * A path selecting nothing where the state needed a value.
+ *
+ * `InputPath`, `OutputPath` and a Payload Template field all fail this way when
+ * the document holds nothing at the path.
+ */
+export declare class SimStatesPathMatchFailure extends SimStepFunctionsError {
+    readonly name = "SimStatesPathMatchFailure";
+    constructor(message: string);
+}
+/**
+ * A `ResultPath` that cannot be written into the state input.
+ */
+export declare class SimStatesResultPathMatchFailure extends SimStepFunctionsError {
+    readonly name = "SimStatesResultPathMatchFailure";
+    constructor(message: string);
+}
+/**
+ * An intrinsic function that cannot be parsed, or that was called wrongly.
+ */
+export declare class SimStatesIntrinsicFailure extends SimStepFunctionsError {
+    readonly name = "SimStatesIntrinsicFailure";
+    constructor(message: string);
+}
+/**
+ * An Amazon States Language construct this simulator does not run.
+ *
+ * Raised when a state machine is read rather than when a state runs. A
+ * definition using something unsimulated is refused whole, since a state
+ * machine missing one state runs wrong, and running wrong is worse than
+ * refusing.
+ */
+export declare class SimStatesUnsimulatedInput extends SimStepFunctionsError {
+    readonly name = "SimStatesUnsimulatedInput";
+    constructor(message: string);
+}
+//# sourceMappingURL=sim-step-functions.error.d.ts.map

package/dist/service/stepfunctions/error/sim-step-functions.error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-step-functions.error.d.ts","sourceRoot":"","sources":["../../../../src/service/stepfunctions/error/sim-step-functions.error.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;aAG5B,eAAe,EAAE,MAAM;IAFzC,YACE,OAAO,EAAE,MAAM,EACC,eAAe,EAAE,MAAM,EAGxC;CACF;AAED;;;;;;GAMG;AACH,qBAAa,kBAAmB,SAAQ,qBAAqB;IAC3D,SAAyB,IAAI,wBAAwB;IAErD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;GAKG;AACH,qBAAa,yBAA0B,SAAQ,qBAAqB;IAClE,SAAyB,IAAI,+BAA+B;IAE5D,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;GAEG;AACH,qBAAa,+BAAgC,SAAQ,qBAAqB;IACxE,SAAyB,IAAI,qCAAqC;IAElE,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;GAEG;AACH,qBAAa,yBAA0B,SAAQ,qBAAqB;IAClE,SAAyB,IAAI,+BAA+B;IAE5D,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;;;GAOG;AACH,qBAAa,yBAA0B,SAAQ,qBAAqB;IAClE,SAAyB,IAAI,+BAA+B;IAE5D,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF"}

package/dist/service/stepfunctions/error/sim-step-functions.error.js

@@ -0,0 +1,72 @@
+/**
+ * Base class for simulated Step Functions errors.
+ *
+ * Every failure inside a state machine carries the name Amazon States Language
+ * gives it. That name is what a `Retry` or a `Catch` matches on, so it is held
+ * here rather than derived at the point one is evaluated.
+ */
+export class SimStepFunctionsError extends Error {
+    statesErrorName;
+    constructor(message, statesErrorName) {
+        super(message);
+        this.statesErrorName = statesErrorName;
+    }
+}
+/**
+ * A Reference Path this simulator cannot read.
+ *
+ * Real Step Functions rejects a malformed path when the state machine is
+ * created. It is raised here as well for a path outside the subset this reads,
+ * which is a narrower thing and worth telling apart in the message.
+ */
+export class SimStatesPathError extends SimStepFunctionsError {
+    name = "SimStatesPathError";
+    constructor(message) {
+        super(message, "States.QueryEvaluationError");
+    }
+}
+/**
+ * A path selecting nothing where the state needed a value.
+ *
+ * `InputPath`, `OutputPath` and a Payload Template field all fail this way when
+ * the document holds nothing at the path.
+ */
+export class SimStatesPathMatchFailure extends SimStepFunctionsError {
+    name = "SimStatesPathMatchFailure";
+    constructor(message) {
+        super(message, "States.ParameterPathFailure");
+    }
+}
+/**
+ * A `ResultPath` that cannot be written into the state input.
+ */
+export class SimStatesResultPathMatchFailure extends SimStepFunctionsError {
+    name = "SimStatesResultPathMatchFailure";
+    constructor(message) {
+        super(message, "States.ResultPathMatchFailure");
+    }
+}
+/**
+ * An intrinsic function that cannot be parsed, or that was called wrongly.
+ */
+export class SimStatesIntrinsicFailure extends SimStepFunctionsError {
+    name = "SimStatesIntrinsicFailure";
+    constructor(message) {
+        super(message, "States.IntrinsicFailure");
+    }
+}
+/**
+ * An Amazon States Language construct this simulator does not run.
+ *
+ * Raised when a state machine is read rather than when a state runs. A
+ * definition using something unsimulated is refused whole, since a state
+ * machine missing one state runs wrong, and running wrong is worse than
+ * refusing.
+ */
+export class SimStatesUnsimulatedInput extends SimStepFunctionsError {
+    name = "SimStatesUnsimulatedInput";
+    constructor(message) {
+        super(message, "States.QueryEvaluationError");
+    }
+}
+//# sourceMappingURL=sim-step-functions.error.js.map

package/dist/service/stepfunctions/error/sim-step-functions.error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-step-functions.error.js","sourceRoot":"","sources":["../../../../src/service/stepfunctions/error/sim-step-functions.error.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAG5B,eAAe;IAFjC,YACE,OAAe,EACC,eAAuB;QAEvC,KAAK,CAAC,OAAO,CAAC,CAAC;+BAFC,eAAe;IAGjC,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,kBAAmB,SAAQ,qBAAqB;IAClC,IAAI,GAAG,oBAAoB,CAAC;IAErD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,6BAA6B,CAAC,CAAC;IAChD,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,yBAA0B,SAAQ,qBAAqB;IACzC,IAAI,GAAG,2BAA2B,CAAC;IAE5D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,6BAA6B,CAAC,CAAC;IAChD,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,+BAAgC,SAAQ,qBAAqB;IAC/C,IAAI,GAAG,iCAAiC,CAAC;IAElE,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,+BAA+B,CAAC,CAAC;IAClD,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,yBAA0B,SAAQ,qBAAqB;IACzC,IAAI,GAAG,2BAA2B,CAAC;IAE5D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAAC;IAC5C,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,yBAA0B,SAAQ,qBAAqB;IACzC,IAAI,GAAG,2BAA2B,CAAC;IAE5D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,6BAA6B,CAAC,CAAC;IAChD,CAAC;CACF"}

package/dist/service/wafv2/statement/sim-waf-logical-statement.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-waf-logical-statement.d.ts","sourceRoot":"","sources":["../../../../src/service/wafv2/statement/sim-waf-logical-statement.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAE9D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAExE;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAC3C,SAAS,EAAE,oBAAoB,EAC/B,KAAK,EAAE,oBAAoB,GAC1B,aAAa,CAuBf"}
+{"version":3,"file":"sim-waf-logical-statement.d.ts","sourceRoot":"","sources":["../../../../src/service/wafv2/statement/sim-waf-logical-statement.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAE9D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAExE;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAC3C,SAAS,EAAE,oBAAoB,EAC/B,KAAK,EAAE,oBAAoB,GAC1B,aAAa,CAwCf"}

package/dist/service/wafv2/statement/sim-waf-logical-statement.js

@@ -8,29 +8,40 @@ import { invalidSimWafRule } from "./sim-waf-rule-refusals.js";
  */
 export function compileSimWafLogicalStatement(statement, scope) {
     if (statement.AndStatement !== undefined) {
-        const matchers = compileAll(statement.AndStatement.Statements, scope);
+        const matchers = compileAll("AndStatement", statement.AndStatement.Statements, scope);
         return (request) => matchers.every((matches) => matches(request));
     }
     if (statement.OrStatement !== undefined) {
-        const matchers = compileAll(statement.OrStatement.Statements, scope);
+        const matchers = compileAll("OrStatement", statement.OrStatement.Statements, scope);
         return (request) => matchers.some((matches) => matches(request));
     }
     if (statement.NotStatement !== undefined) {
-        const matches = compileSimWafStatement(statement.NotStatement.Statement, scope);
+        const negated = statement.NotStatement.Statement;
+        // Named here rather than left to `compileSimWafStatement`, which would
+        // report the rule as having no statement at all and send the reader to the
+        // wrong place in a rule holding several.
+        if (negated === undefined) {
+            invalidSimWafRule(scope.ruleName, "A NotStatement needs the one statement it negates");
+        }
+        const matches = compileSimWafStatement(negated, scope);
         return (request) => !matches(request);
     }
     invalidSimWafRule(scope.ruleName, "The statement names no statement kind");
 }
 /**
- * Compile the statements a logical statement joins, refusing an empty list.
+ * Compile the statements a logical statement joins, refusing fewer than two.
  *
- * Real WAF requires at least two, and an `AndStatement` with none would
- * otherwise match every request while looking like it narrowed one.
+ * Real WAF holds this minimum hard enough to refuse the whole web ACL over it,
+ * answering `OR_STATEMENT` and a threshold setting. A rule joining one
+ * statement evaluates as that statement on its own, and an `AndStatement` with
+ * an empty list would match every request while looking like it narrowed one.
  */
-function compileAll(statements, scope) {
-    if (statements === undefined || statements.length === 0) {
-        invalidSimWafRule(scope.ruleName, "An AndStatement or OrStatement needs statements to join");
+function compileAll(kind, statements, scope) {
+    const joined = statements ?? [];
+    if (joined.length < 2) {
+        invalidSimWafRule(scope.ruleName, `An ${kind} needs at least two statements to join, and this one has ` +
+            `${joined.length}`);
     }
-    return statements.map((statement) => compileSimWafStatement(statement, scope));
+    return joined.map((statement) => compileSimWafStatement(statement, scope));
 }
 //# sourceMappingURL=sim-waf-logical-statement.js.map

package/dist/service/wafv2/statement/sim-waf-logical-statement.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-waf-logical-statement.js","sourceRoot":"","sources":["../../../../src/service/wafv2/statement/sim-waf-logical-statement.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,GAEvB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAG/D;;;;;GAKG;AACH,MAAM,UAAU,6BAA6B,CAC3C,SAA+B,EAC/B,KAA2B;IAE3B,IAAI,SAAS,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,UAAU,CAAC,SAAS,CAAC,YAAY,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAEtE,OAAO,CAAC,OAAO,EAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7E,CAAC;IAED,IAAI,SAAS,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,UAAU,CAAC,SAAS,CAAC,WAAW,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAErE,OAAO,CAAC,OAAO,EAAW,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,IAAI,SAAS,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,sBAAsB,CACpC,SAAS,CAAC,YAAY,CAAC,SAAS,EAChC,KAAK,CACN,CAAC;QAEF,OAAO,CAAC,OAAO,EAAW,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,CAAC;IAED,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE,uCAAuC,CAAC,CAAC;AAC7E,CAAC;AAED;;;;;GAKG;AACH,SAAS,UAAU,CACjB,UAAuD,EACvD,KAA2B;IAE3B,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxD,iBAAiB,CACf,KAAK,CAAC,QAAQ,EACd,yDAAyD,CAC1D,CAAC;IACJ,CAAC;IAED,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAClC,sBAAsB,CAAC,SAAS,EAAE,KAAK,CAAC,CACzC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"sim-waf-logical-statement.js","sourceRoot":"","sources":["../../../../src/service/wafv2/statement/sim-waf-logical-statement.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,GAEvB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAG/D;;;;;GAKG;AACH,MAAM,UAAU,6BAA6B,CAC3C,SAA+B,EAC/B,KAA2B;IAE3B,IAAI,SAAS,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,UAAU,CACzB,cAAc,EACd,SAAS,CAAC,YAAY,CAAC,UAAU,EACjC,KAAK,CACN,CAAC;QAEF,OAAO,CAAC,OAAO,EAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7E,CAAC;IAED,IAAI,SAAS,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,UAAU,CACzB,aAAa,EACb,SAAS,CAAC,WAAW,CAAC,UAAU,EAChC,KAAK,CACN,CAAC;QAEF,OAAO,CAAC,OAAO,EAAW,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,IAAI,SAAS,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,SAAS,CAAC,YAAY,CAAC,SAAS,CAAC;QAEjD,uEAAuE;QACvE,2EAA2E;QAC3E,yCAAyC;QACzC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,iBAAiB,CACf,KAAK,CAAC,QAAQ,EACd,mDAAmD,CACpD,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,sBAAsB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAEvD,OAAO,CAAC,OAAO,EAAW,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,CAAC;IAED,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE,uCAAuC,CAAC,CAAC;AAC7E,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,UAAU,CACjB,IAAoC,EACpC,UAAuD,EACvD,KAA2B;IAE3B,MAAM,MAAM,GAAG,UAAU,IAAI,EAAE,CAAC;IAEhC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,iBAAiB,CACf,KAAK,CAAC,QAAQ,EACd,MAAM,IAAI,2DAA2D;YACnE,GAAG,MAAM,CAAC,MAAM,EAAE,CACrB,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,sBAAsB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;AAC7E,CAAC"}

package/dist/terraform/sim-tf-adapter.d.ts

@@ -1,5 +1,5 @@
 import type { SimAws } from "../service/aws/sim-aws.js";
-import type { SimCfnDeployBinding } from "../service/cloudformation/bind/sim-cfn-deploy-binding.js";
+import type { SimCfnBinding } from "../service/cloudformation/bind/sim-cfn-binding.js";
 import type { SimCfnDeployedStack } from "../service/cloudformation/stack/sim-cfn-deployed-stack.type.js";
 import type { SimCloudFormationStackName } from "../service/cloudformation/stack/sim-cfn-stack.type.js";
 import type { TerraformPlanOverride } from "./sim-tf-override.type.js";
@@ -22,7 +22,7 @@ export interface TerraformPlanDeployProperties {
      * matching on the function name the plan carries is how a simulated function
      * gets its behaviour.
      */
-    readonly bindings?: readonly SimCfnDeployBinding[] | undefined;
+    readonly bindings?: readonly SimCfnBinding[] | undefined;
     /**
      * The values the plan could not carry.
      *

package/dist/terraform/sim-tf-adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-tf-adapter.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0DAA0D,CAAC;AACpG,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gEAAgE,CAAC;AAC1G,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,uDAAuD,CAAC;AAMxG,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAErE,MAAM,WAAW,6BAA6B;IAC5C;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B,kEAAkE;IAClE,QAAQ,CAAC,SAAS,CAAC,EAAE,0BAA0B,GAAG,MAAM,GAAG,SAAS,CAAC;IAErE;;;;;;;OAOG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,mBAAmB,EAAE,GAAG,SAAS,CAAC;IAE/D;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,qBAAqB,EAAE,GAAG,SAAS,CAAC;CACnE;AAED,uEAAuE;AACvE,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;IAEpC;;;;;OAKG;IACH,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;CACxC;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAEhC,YAAY,MAAM,EAAE,MAAM,EAEzB;IAED;;;;;;;;;;OAUG;IACG,UAAU,CACd,UAAU,EAAE,6BAA6B,GAAG,MAAM,GACjD,OAAO,CAAC,uBAAuB,CAAC,CAkBlC;CACF"}
+{"version":3,"file":"sim-tf-adapter.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mDAAmD,CAAC;AACvF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gEAAgE,CAAC;AAC1G,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,uDAAuD,CAAC;AAMxG,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAErE,MAAM,WAAW,6BAA6B;IAC5C;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B,kEAAkE;IAClE,QAAQ,CAAC,SAAS,CAAC,EAAE,0BAA0B,GAAG,MAAM,GAAG,SAAS,CAAC;IAErE;;;;;;;OAOG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,aAAa,EAAE,GAAG,SAAS,CAAC;IAEzD;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,qBAAqB,EAAE,GAAG,SAAS,CAAC;CACnE;AAED,uEAAuE;AACvE,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;IAEpC;;;;;OAKG;IACH,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;CACxC;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAEhC,YAAY,MAAM,EAAE,MAAM,EAEzB;IAED;;;;;;;;;;OAUG;IACG,UAAU,CACd,UAAU,EAAE,6BAA6B,GAAG,MAAM,GACjD,OAAO,CAAC,uBAAuB,CAAC,CAkBlC;CACF"}

package/dist/terraform/sim-tf-attribute-intrinsic.d.ts

@@ -0,0 +1,13 @@
+import type { SimCfnTemplateValue } from "../service/cloudformation/template/value/sim-cfn-template-value.js";
+/**
+ * The CloudFormation intrinsic that reads one Terraform attribute off the
+ * Resource standing in for the resource producing it.
+ *
+ * A reference naming a resource and no attribute is the resource itself, and
+ * a `Ref` is what CloudFormation answers that with. An attribute is read
+ * through whichever of `Ref` and `Fn::GetAtt` carries that value, which the
+ * read table says and the two services often disagree about. An attribute the
+ * table has no entry for answers with nothing.
+ */
+export declare function terraformAttributeIntrinsic(type: string, attribute: string | undefined, logicalId: string): SimCfnTemplateValue | undefined;
+//# sourceMappingURL=sim-tf-attribute-intrinsic.d.ts.map

package/dist/terraform/sim-tf-attribute-intrinsic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-attribute-intrinsic.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-attribute-intrinsic.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oEAAoE,CAAC;AAG9G;;;;;;;;;GASG;AACH,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,SAAS,EAAE,MAAM,GAChB,mBAAmB,GAAG,SAAS,CAajC"}

package/dist/terraform/sim-tf-attribute-intrinsic.js

@@ -0,0 +1,23 @@
+import { terraformAttributeReads } from "./sim-tf-attribute-reads.js";
+/**
+ * The CloudFormation intrinsic that reads one Terraform attribute off the
+ * Resource standing in for the resource producing it.
+ *
+ * A reference naming a resource and no attribute is the resource itself, and
+ * a `Ref` is what CloudFormation answers that with. An attribute is read
+ * through whichever of `Ref` and `Fn::GetAtt` carries that value, which the
+ * read table says and the two services often disagree about. An attribute the
+ * table has no entry for answers with nothing.
+ */
+export function terraformAttributeIntrinsic(type, attribute, logicalId) {
+    const read = attribute === undefined
+        ? "Ref"
+        : terraformAttributeReads.get(`${type}.${attribute}`);
+    if (read === undefined) {
+        return undefined;
+    }
+    return read === "Ref"
+        ? { Ref: logicalId }
+        : { "Fn::GetAtt": [logicalId, read] };
+}
+//# sourceMappingURL=sim-tf-attribute-intrinsic.js.map

package/dist/terraform/sim-tf-attribute-intrinsic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-attribute-intrinsic.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-attribute-intrinsic.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAEtE;;;;;;;;;GASG;AACH,MAAM,UAAU,2BAA2B,CACzC,IAAY,EACZ,SAA6B,EAC7B,SAAiB;IAEjB,MAAM,IAAI,GACR,SAAS,KAAK,SAAS;QACrB,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,uBAAuB,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,SAAS,EAAE,CAAC,CAAC;IAE1D,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,IAAI,KAAK,KAAK;QACnB,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE;QACpB,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC;AAC1C,CAAC"}

package/dist/terraform/sim-tf-attributes.js

@@ -37,7 +37,7 @@ function referencedValue(resource, key, resolver) {
     }
     const references = longestFirst(expression.references ?? []);
     for (const reference of references) {
-        const resolved = resolver.resolve(reference, resource.modulePath);
+        const resolved = resolver.resolve(reference, resource);
         if (resolved !== undefined) {
             return resolved;
         }

package/dist/terraform/sim-tf-attributes.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-tf-attributes.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-attributes.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,kDAAkD;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAKxD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAoB7D;;;;;;;GAOG;AACH,MAAM,UAAU,SAAS,CACvB,OAAgC,EAChC,GAAW;IAEX,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAEvC,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;QACnC,OAAO,eAAe,CAAC,QAAQ,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IAClD,CAAC;IAED,OAAO,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,eAAe,CACtB,QAA2B,EAC3B,GAAW,EACX,QAAoC;IAEpC,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAE7C,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,UAAU,GAAG,YAAY,CAC5B,UAAkC,CAAC,UAAU,IAAI,EAAE,CACrD,CAAC;IAEF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;QAElE,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,KAAK,CACnB,OAAgC,EAChC,GAAW;IAEX,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAE3C,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACpB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,MAAM,CACpB,OAAgC,EAChC,GAAW;IAEX,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAE3C,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9E,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,IAAI,CAClB,OAAgC;IAEhC,MAAM,KAAK,GACT,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;QAC1C,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEzC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAEtC,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC;QACzB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,KAAe,EAAE,CAAC,CAAC,CAAC;AACvE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,KAAK,CAAC,MAA+B,EAAE,GAAW;IAChE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;AACrB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,KAA4B,CAAC;AACtC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,OAAO,CACrB,OAAgC,EAChC,KAAuC;IAEvC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CACvC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAU,CACpE,CAAC;IAEF,OAAO,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,UAAU,CACxB,MAAuD;IAEvD,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAC3B,CAAC,KAAK,EAA0C,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAC1E,CACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"sim-tf-attributes.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-attributes.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,kDAAkD;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAKxD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAoB7D;;;;;;;GAOG;AACH,MAAM,UAAU,SAAS,CACvB,OAAgC,EAChC,GAAW;IAEX,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAEvC,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;QACnC,OAAO,eAAe,CAAC,QAAQ,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IAClD,CAAC;IAED,OAAO,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,eAAe,CACtB,QAA2B,EAC3B,GAAW,EACX,QAAoC;IAEpC,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAE7C,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,UAAU,GAAG,YAAY,CAC5B,UAAkC,CAAC,UAAU,IAAI,EAAE,CACrD,CAAC;IAEF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAEvD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,KAAK,CACnB,OAAgC,EAChC,GAAW;IAEX,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAE3C,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACpB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,MAAM,CACpB,OAAgC,EAChC,GAAW;IAEX,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAE3C,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9E,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,IAAI,CAClB,OAAgC;IAEhC,MAAM,KAAK,GACT,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;QAC1C,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEzC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAEtC,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC;QACzB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,KAAe,EAAE,CAAC,CAAC,CAAC;AACvE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,KAAK,CAAC,MAA+B,EAAE,GAAW;IAChE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;AACrB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,KAA4B,CAAC;AACtC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,OAAO,CACrB,OAAgC,EAChC,KAAuC;IAEvC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CACvC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAU,CACpE,CAAC;IAEF,OAAO,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,UAAU,CACxB,MAAuD;IAEvD,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAC3B,CAAC,KAAK,EAA0C,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAC1E,CACF,CAAC;AACJ,CAAC"}

package/dist/terraform/sim-tf-declare.d.ts

@@ -1,6 +1,4 @@
 import type { SimCfnTemplateValueRecord } from "../service/cloudformation/template/value/sim-cfn-template-value.js";
-import type { TerraformResource } from "./sim-tf-resource.type.js";
-import type { TerraformReferenceResolver } from "./sim-tf-reference.js";
 import type { TerraformSettledPlan } from "./sim-tf-settle.js";
 import type { TerraformImportedResource, TerraformLostAttribute } from "./sim-tf-report.type.js";
 /** The Resources a settled plan declares, and what they could not carry. */
@@ -16,22 +14,4 @@ export interface TerraformDeclaredResources {
  * and nothing it produces is taken back afterwards.
  */
 export declare function terraformDeclaredResources(settled: TerraformSettledPlan): TerraformDeclaredResources;
-/**
- * The Resources one Resource has to be created after.
- *
- * A CloudFormation template orders itself, because a property that needs
- * another Resource holds a `Ref` or an `Fn::GetAtt` naming it. A plan holds no
- * such thing. Terraform resolves what it can before writing the plan, so a
- * Lambda permission naming a function it creates in the same plan carries the
- * function's name as a plain string, and the edge that ordering depends on is
- * gone from the value.
- *
- * The edge survives in `configuration`, which records every reference the
- * resource declares whether or not the value was resolved. Turning those back
- * into `DependsOn` gives the Stack the graph it would have read off a template
- * written by hand.
- */
-export declare function terraformDependsOn(resource: TerraformResource, resolver: TerraformReferenceResolver): {
-    DependsOn?: string[];
-};
 //# sourceMappingURL=sim-tf-declare.d.ts.map

package/dist/terraform/sim-tf-declare.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-tf-declare.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-declare.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oEAAoE,CAAC;AACpH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AACxE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,KAAK,EACV,yBAAyB,EACzB,sBAAsB,EACvB,MAAM,yBAAyB,CAAC;AAEjC,4EAA4E;AAC5E,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;IACnE,QAAQ,CAAC,MAAM,EAAE,SAAS,yBAAyB,EAAE,CAAC;IACtD,QAAQ,CAAC,IAAI,EAAE,SAAS,sBAAsB,EAAE,CAAC;CAClD;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,oBAAoB,GAC5B,0BAA0B,CAiC5B;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,iBAAiB,EAC3B,QAAQ,EAAE,0BAA0B,GACnC;IAAE,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,CAe1B"}
+{"version":3,"file":"sim-tf-declare.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-declare.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oEAAoE,CAAC;AAEpH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,KAAK,EACV,yBAAyB,EACzB,sBAAsB,EACvB,MAAM,yBAAyB,CAAC;AAEjC,4EAA4E;AAC5E,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;IACnE,QAAQ,CAAC,MAAM,EAAE,SAAS,yBAAyB,EAAE,CAAC;IACtD,QAAQ,CAAC,IAAI,EAAE,SAAS,sBAAsB,EAAE,CAAC;CAClD;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,oBAAoB,GAC5B,0BAA0B,CAiC5B"}

package/dist/terraform/sim-tf-declare.js

@@ -1,10 +1,4 @@
-/*
- * Reading a plan means reading records whose keys come from the document
- * rather than from this code, so the object-injection rule fires on every
- * lookup. The records are parsed JSON with no prototype of their own.
- */
-// oxlint-disable security/detect-object-injection
-import { isRecord } from "../util/type-guard/record.js";
+import { terraformDependsOn } from "./sim-tf-depends-on.js";
 /**
  * Build one CloudFormation Resource for each resource the plan settled on.
  *
@@ -40,44 +34,4 @@ export function terraformDeclaredResources(settled) {
     }
     return { templates, mapped, lost };
 }
-/**
- * The Resources one Resource has to be created after.
- *
- * A CloudFormation template orders itself, because a property that needs
- * another Resource holds a `Ref` or an `Fn::GetAtt` naming it. A plan holds no
- * such thing. Terraform resolves what it can before writing the plan, so a
- * Lambda permission naming a function it creates in the same plan carries the
- * function's name as a plain string, and the edge that ordering depends on is
- * gone from the value.
- *
- * The edge survives in `configuration`, which records every reference the
- * resource declares whether or not the value was resolved. Turning those back
- * into `DependsOn` gives the Stack the graph it would have read off a template
- * written by hand.
- */
-export function terraformDependsOn(resource, resolver) {
-    const own = resolver.logicalId(resource.address);
-    const referenced = [
-        ...resource.dependsOn,
-        ...expressionReferences(resource.expressions),
-    ]
-        .map((reference) => resolver.targetAddress(reference, resource.modulePath))
-        .filter((address) => address !== undefined)
-        .map((address) => resolver.logicalId(address))
-        .filter((logicalId) => logicalId !== own);
-    const declared = [...new Set(referenced)];
-    return declared.length === 0 ? {} : { DependsOn: declared };
-}
-/** Every `references` entry anywhere inside a resource's expressions. */
-function expressionReferences(value) {
-    if (Array.isArray(value)) {
-        return value.flatMap((entry) => expressionReferences(entry));
-    }
-    if (!isRecord(value)) {
-        return [];
-    }
-    return Object.entries(value).flatMap(([key, nested]) => key === "references" && Array.isArray(nested)
-        ? nested.filter((entry) => typeof entry === "string")
-        : expressionReferences(nested));
-}
 //# sourceMappingURL=sim-tf-declare.js.map

package/dist/terraform/sim-tf-declare.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-tf-declare.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-declare.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,kDAAkD;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAiBxD;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CACxC,OAA6B;IAE7B,MAAM,SAAS,GAAG,IAAI,GAAG,EAAqC,CAAC;IAC/D,MAAM,MAAM,GAAgC,EAAE,CAAC;IAC/C,MAAM,IAAI,GAA6B,EAAE,CAAC;IAE1C,KAAK,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrD,MAAM,KAAK,GAAG,OAAO,CAAC;YACpB,QAAQ;YACR,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAE/D,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE;YACvB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,GAAG,kBAAkB,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC;SAClD,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC;YACV,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,OAAO,EAAE,KAAK,CAAC,IAAI;YACnB,SAAS;SACV,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CACP,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YACxC,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,SAAS;SACV,CAAC,CAAC,CACJ,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AACrC,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAA2B,EAC3B,QAAoC;IAEpC,MAAM,GAAG,GAAG,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAEjD,MAAM,UAAU,GAAG;QACjB,GAAG,QAAQ,CAAC,SAAS;QACrB,GAAG,oBAAoB,CAAC,QAAQ,CAAC,WAAW,CAAC;KAC9C;SACE,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;SAC1E,MAAM,CAAC,CAAC,OAAO,EAAqB,EAAE,CAAC,OAAO,KAAK,SAAS,CAAC;SAC7D,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;SAC7C,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,GAAG,CAAC,CAAC;IAE5C,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;IAE1C,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AAC9D,CAAC;AAED,yEAAyE;AACzE,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,CACrD,GAAG,KAAK,YAAY,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAC3C,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;QACtE,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,CACjC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"sim-tf-declare.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-declare.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAc5D;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CACxC,OAA6B;IAE7B,MAAM,SAAS,GAAG,IAAI,GAAG,EAAqC,CAAC;IAC/D,MAAM,MAAM,GAAgC,EAAE,CAAC;IAC/C,MAAM,IAAI,GAA6B,EAAE,CAAC;IAE1C,KAAK,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrD,MAAM,KAAK,GAAG,OAAO,CAAC;YACpB,QAAQ;YACR,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAE/D,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE;YACvB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,GAAG,kBAAkB,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC;SAClD,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC;YACV,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,OAAO,EAAE,KAAK,CAAC,IAAI;YACnB,SAAS;SACV,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CACP,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YACxC,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,SAAS;SACV,CAAC,CAAC,CACJ,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AACrC,CAAC"}

package/dist/terraform/sim-tf-depends-on.d.ts

@@ -0,0 +1,21 @@
+import type { TerraformResource } from "./sim-tf-resource.type.js";
+import type { TerraformReferenceResolver } from "./sim-tf-reference.js";
+/**
+ * The Resources one Resource has to be created after.
+ *
+ * A CloudFormation template orders itself, because a property that needs
+ * another Resource holds a `Ref` or an `Fn::GetAtt` naming it. A plan holds no
+ * such thing. Terraform resolves what it can before writing the plan, so a
+ * Lambda permission naming a function it creates in the same plan carries the
+ * function's name as a plain string, and the edge that ordering depends on is
+ * gone from the value.
+ *
+ * The edge survives in `configuration`, which records every reference the
+ * resource declares whether or not the value was resolved. Turning those back
+ * into `DependsOn` gives the Stack the graph it would have read off a template
+ * written by hand.
+ */
+export declare function terraformDependsOn(resource: TerraformResource, resolver: TerraformReferenceResolver): {
+    DependsOn?: string[];
+};
+//# sourceMappingURL=sim-tf-depends-on.d.ts.map

package/dist/terraform/sim-tf-depends-on.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-depends-on.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-depends-on.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AAGxE;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,iBAAiB,EAC3B,QAAQ,EAAE,0BAA0B,GACnC;IAAE,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,CAe1B"}

package/dist/terraform/sim-tf-depends-on.js

@@ -0,0 +1,30 @@
+import { terraformExpressionReferences } from "./sim-tf-expression-references.js";
+/**
+ * The Resources one Resource has to be created after.
+ *
+ * A CloudFormation template orders itself, because a property that needs
+ * another Resource holds a `Ref` or an `Fn::GetAtt` naming it. A plan holds no
+ * such thing. Terraform resolves what it can before writing the plan, so a
+ * Lambda permission naming a function it creates in the same plan carries the
+ * function's name as a plain string, and the edge that ordering depends on is
+ * gone from the value.
+ *
+ * The edge survives in `configuration`, which records every reference the
+ * resource declares whether or not the value was resolved. Turning those back
+ * into `DependsOn` gives the Stack the graph it would have read off a template
+ * written by hand.
+ */
+export function terraformDependsOn(resource, resolver) {
+    const own = resolver.logicalId(resource.address);
+    const referenced = [
+        ...resource.dependsOn,
+        ...terraformExpressionReferences(resource.expressions),
+    ]
+        .map((reference) => resolver.targetAddress(reference, resource))
+        .filter((address) => address !== undefined)
+        .map((address) => resolver.logicalId(address))
+        .filter((logicalId) => logicalId !== own);
+    const declared = [...new Set(referenced)];
+    return declared.length === 0 ? {} : { DependsOn: declared };
+}
+//# sourceMappingURL=sim-tf-depends-on.js.map

package/dist/terraform/sim-tf-depends-on.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-depends-on.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-depends-on.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,6BAA6B,EAAE,MAAM,mCAAmC,CAAC;AAElF;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAA2B,EAC3B,QAAoC;IAEpC,MAAM,GAAG,GAAG,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAEjD,MAAM,UAAU,GAAG;QACjB,GAAG,QAAQ,CAAC,SAAS;QACrB,GAAG,6BAA6B,CAAC,QAAQ,CAAC,WAAW,CAAC;KACvD;SACE,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;SAC/D,MAAM,CAAC,CAAC,OAAO,EAAqB,EAAE,CAAC,OAAO,KAAK,SAAS,CAAC;SAC7D,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;SAC7C,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,GAAG,CAAC,CAAC;IAE5C,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;IAE1C,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AAC9D,CAAC"}

package/dist/terraform/sim-tf-expression-references.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Every `references` entry anywhere inside an expression.
+ *
+ * A plan writes an expression as a record holding `references`, and nests
+ * that record wherever the configuration nested the expression. A nested block
+ * becomes a list of records, and a block inside a block becomes a list inside
+ * a record, so reaching every reference means walking whatever shape the
+ * configuration had rather than reading one key.
+ */
+export declare function terraformExpressionReferences(value: unknown): readonly string[];
+//# sourceMappingURL=sim-tf-expression-references.d.ts.map

package/dist/terraform/sim-tf-expression-references.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-expression-references.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-expression-references.ts"],"names":[],"mappings":"AAEA;;;;;;;;GAQG;AACH,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,OAAO,GACb,SAAS,MAAM,EAAE,CAcnB"}

package/dist/terraform/sim-tf-expression-references.js

@@ -0,0 +1,22 @@
+import { isRecord } from "../util/type-guard/record.js";
+/**
+ * Every `references` entry anywhere inside an expression.
+ *
+ * A plan writes an expression as a record holding `references`, and nests
+ * that record wherever the configuration nested the expression. A nested block
+ * becomes a list of records, and a block inside a block becomes a list inside
+ * a record, so reaching every reference means walking whatever shape the
+ * configuration had rather than reading one key.
+ */
+export function terraformExpressionReferences(value) {
+    if (Array.isArray(value)) {
+        return value.flatMap((entry) => terraformExpressionReferences(entry));
+    }
+    if (!isRecord(value)) {
+        return [];
+    }
+    return Object.entries(value).flatMap(([key, nested]) => key === "references" && Array.isArray(nested)
+        ? nested.filter((entry) => typeof entry === "string")
+        : terraformExpressionReferences(nested));
+}
+//# sourceMappingURL=sim-tf-expression-references.js.map

package/dist/terraform/sim-tf-expression-references.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-tf-expression-references.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-expression-references.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAExD;;;;;;;;GAQG;AACH,MAAM,UAAU,6BAA6B,CAC3C,KAAc;IAEd,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,6BAA6B,CAAC,KAAK,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,CACrD,GAAG,KAAK,YAAY,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAC3C,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;QACtE,CAAC,CAAC,6BAA6B,CAAC,MAAM,CAAC,CAC1C,CAAC;AACJ,CAAC"}