@kensio/yulin 1.19.3 → 1.20.0

package/dist/terraform/sim-tf-reference.d.ts

@@ -7,16 +7,24 @@ import type { TerraformResource } from "./sim-tf-resource.type.js";
  * Terraform lists both forms for the same reference, so the longest address
  * matching a resource wins and what is left over is the attribute.
  *
+ * A reference naming no address at all is followed to one that does. Module
+ * outputs, module variables, `each` and an instance key left to `each.key` are
+ * each recorded somewhere else in the plan, and following them is a rewrite
+ * from one reference to another rather than an evaluation. Nothing here reads
+ * a Terraform expression, and a value the plan marked unknown stays unknown.
+ * What comes back is the resource that will produce it.
+ *
  * The resources given are the ones the template will hold, rather than every
  * resource of the plan. A reference to a resource the template does not
  * declare resolves to nothing, so no property can come out of this naming a
  * logical ID that is not there.
  */
 export declare class TerraformReferenceResolver {
-    private readonly byAddress;
+    private readonly resources;
     private readonly moduleOutputs;
+    private readonly moduleVariables;
     private readonly logicalIds;
-    constructor(resources: readonly TerraformResource[], moduleOutputs?: ReadonlyMap<string, readonly string[]>);
+    constructor(resources: readonly TerraformResource[], moduleOutputs?: ReadonlyMap<string, readonly string[]>, moduleVariables?: ReadonlyMap<string, readonly string[]>);
     /** The logical ID the template declares one address under. */
     logicalId(address: string): string;
     /**
@@ -32,7 +40,7 @@ export declare class TerraformReferenceResolver {
      * and so does one whose attribute has no entry in the read table. The caller
      * decides what an unresolvable reference means for the Resource holding it.
      */
-    resolve(reference: string, modulePath: readonly string[]): SimCfnTemplateValue | undefined;
+    resolve(reference: string, from: TerraformResource): SimCfnTemplateValue | undefined;
     /**
      * The address of the resource one reference names.
      *
@@ -40,7 +48,28 @@ export declare class TerraformReferenceResolver {
      * off it, because it is merging properties into that resource's template,
      * and so does the ordering pass.
      */
-    targetAddress(reference: string, modulePath: readonly string[]): string | undefined;
+    targetAddress(reference: string, from: TerraformResource): string | undefined;
+    /**
+     * The same reference, written so that it names a resource of this plan.
+     *
+     * A reference that already names one is itself. One that names an instance
+     * without its key gains the key. One under a scope the plan resolves for
+     * itself is replaced by what was written where that scope was set, and then
+     * asked again.
+     */
+    private named;
+    /**
+     * The one resource a scoped reference leads to, where there is only one.
+     *
+     * A plan records the references of a whole collection as one list and says
+     * nothing about which part of it a reader was reading, so a collection built
+     * out of two resources cannot say which of them `each.value.uri` holds.
+     * Guessing there would put a plausible logical ID into a property that names
+     * the wrong resource, which is worse than the property being absent. Two
+     * answers is therefore no answer, and the resource is left out and reported
+     * the way it is today.
+     */
+    private throughScope;
     /**
      * The attribute a reference reads off the resource behind it.
      *
@@ -51,32 +80,5 @@ export declare class TerraformReferenceResolver {
      */
     private attributeName;
     private target;
-    /**
-     * The module output one reference names.
-     *
-     * The index is keyed by module call path, since a module declares its
-     * outputs once however many instances of the call there are. A reference
-     * made from inside one instance carries that instance's key, so the key
-     * comes off when the qualified form finds nothing.
-     */
-    private moduleOutput;
-    /**
-     * The resource a module output leads to.
-     *
-     * The output's own expression names it, in terms of the module declaring the
-     * output, so following one is resolving that expression again one module
-     * down. An output built out of several resources returns the first that
-     * resolves, and the depth limit stops a module whose outputs refer to each
-     * other from looping.
-     */
-    private throughModuleOutput;
-    /**
-     * The resource whose address is the longest prefix of this reference.
-     *
-     * `aws_iam_role.processor.arn` has to find `aws_iam_role.processor` and leave
-     * `arn` behind, and a `for_each` instance address carries a bracketed key
-     * that is part of the address rather than an attribute.
-     */
-    private longestMatch;
 }
 //# sourceMappingURL=sim-tf-reference.d.ts.map

package/dist/terraform/sim-tf-reference.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-tf-reference.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-reference.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oEAAoE,CAAC;AAC9G,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAUnE;;;;;;;;;;;GAWG;AACH,qBAAa,0BAA0B;IACrC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAyC;IACnE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAyC;IACvE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YACE,SAAS,EAAE,SAAS,iBAAiB,EAAE,EACvC,aAAa,GAAE,WAAW,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAa,EAOlE;IAED,8DAA8D;IACvD,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAExC;IAED;;;;OAIG;IACI,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAE9D;IAED;;;;;;OAMG;IACI,OAAO,CACZ,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,SAAS,MAAM,EAAE,GAC5B,mBAAmB,GAAG,SAAS,CAuBjC;IAED;;;;;;OAMG;IACI,aAAa,CAClB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,SAAS,MAAM,EAAE,GAC5B,MAAM,GAAG,SAAS,CAEpB;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,aAAa;IAiBrB,OAAO,CAAC,MAAM;IAId;;;;;;;OAOG;IACH,OAAO,CAAC,YAAY;IAOpB;;;;;;;;OAQG;IACH,OAAO,CAAC,mBAAmB;IA6B3B;;;;;;OAMG;IACH,OAAO,CAAC,YAAY;CAerB"}
+{"version":3,"file":"sim-tf-reference.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-reference.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oEAAoE,CAAC;AAC9G,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAWnE;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBAAa,0BAA0B;IACrC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA6B;IACvD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA4B;IAC1D,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAyC;IACzE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IAEjD,YACE,SAAS,EAAE,SAAS,iBAAiB,EAAE,EACvC,aAAa,GAAE,WAAW,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAa,EACjE,eAAe,GAAE,WAAW,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAa,EASpE;IAED,8DAA8D;IACvD,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAExC;IAED;;;;OAIG;IACI,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAE9D;IAED;;;;;;OAMG;IACI,OAAO,CACZ,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,iBAAiB,GACtB,mBAAmB,GAAG,SAAS,CAajC;IAED;;;;;;OAMG;IACI,aAAa,CAClB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,iBAAiB,GACtB,MAAM,GAAG,SAAS,CAMpB;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,KAAK;IAuBb;;;;;;;;;;OAUG;IACH,OAAO,CAAC,YAAY;IA4BpB;;;;;;;OAOG;IACH,OAAO,CAAC,aAAa;IAarB,OAAO,CAAC,MAAM;CAMf"}

package/dist/terraform/sim-tf-reference.js

@@ -1,6 +1,11 @@
-import { terraformAttributeReads } from "./sim-tf-attribute-reads.js";
+import { terraformAttributeIntrinsic } from "./sim-tf-attribute-intrinsic.js";
 import { TerraformLogicalIds } from "./sim-tf-logical-id.js";
-import { longestFirst, moduleOutputPath, qualifiedReference, withoutInstanceKeys, } from "./sim-tf-reference-address.js";
+import { TerraformResourceAddresses } from "./sim-tf-reference-addresses.js";
+import { TerraformModuleOutputWalk } from "./sim-tf-module-outputs.js";
+import { terraformScopeHops } from "./sim-tf-reference-scope.js";
+import { qualifiedReference } from "./sim-tf-reference-address.js";
+/** How far a chain of hops is followed before it is taken to be a loop. */
+const hopLimit = 8;
 /**
  * Resolves a Terraform reference against the resources a template declares.
  *
@@ -8,19 +13,28 @@ import { longestFirst, moduleOutputPath, qualifiedReference, withoutInstanceKeys
  * Terraform lists both forms for the same reference, so the longest address
  * matching a resource wins and what is left over is the attribute.
  *
+ * A reference naming no address at all is followed to one that does. Module
+ * outputs, module variables, `each` and an instance key left to `each.key` are
+ * each recorded somewhere else in the plan, and following them is a rewrite
+ * from one reference to another rather than an evaluation. Nothing here reads
+ * a Terraform expression, and a value the plan marked unknown stays unknown.
+ * What comes back is the resource that will produce it.
+ *
  * The resources given are the ones the template will hold, rather than every
  * resource of the plan. A reference to a resource the template does not
  * declare resolves to nothing, so no property can come out of this naming a
  * logical ID that is not there.
  */
 export class TerraformReferenceResolver {
-    byAddress;
+    resources;
     moduleOutputs;
+    moduleVariables;
     logicalIds;
-    constructor(resources, moduleOutputs = new Map()) {
-        this.byAddress = new Map(resources.map((resource) => [resource.address, resource]));
-        this.moduleOutputs = moduleOutputs;
-        this.logicalIds = new TerraformLogicalIds(this.byAddress.keys());
+    constructor(resources, moduleOutputs = new Map(), moduleVariables = new Map()) {
+        this.resources = new TerraformResourceAddresses(resources);
+        this.moduleOutputs = new TerraformModuleOutputWalk(moduleOutputs, this.resources);
+        this.moduleVariables = moduleVariables;
+        this.logicalIds = new TerraformLogicalIds(this.resources.addresses());
     }
     /** The logical ID the template declares one address under. */
     logicalId(address) {
@@ -32,7 +46,7 @@ export class TerraformReferenceResolver {
      * own attribute refers to is what wants this.
      */
     resource(address) {
-        return this.byAddress.get(address);
+        return this.resources.get(address);
     }
     /**
      * The CloudFormation value one reference stands for.
@@ -41,23 +55,13 @@ export class TerraformReferenceResolver {
      * and so does one whose attribute has no entry in the read table. The caller
      * decides what an unresolvable reference means for the Resource holding it.
      */
-    resolve(reference, modulePath) {
-        const qualified = qualifiedReference(reference, modulePath);
-        const target = this.target(qualified);
-        if (target === undefined) {
+    resolve(reference, from) {
+        const qualified = this.named(reference, from.modulePath, from, 0);
+        const target = qualified === undefined ? undefined : this.target(qualified);
+        if (qualified === undefined || target === undefined) {
             return undefined;
         }
-        const attribute = this.attributeName(qualified, target.address);
-        const read = attribute === undefined
-            ? "Ref"
-            : terraformAttributeReads.get(`${target.type}.${attribute}`);
-        if (read === undefined) {
-            return undefined;
-        }
-        const logicalId = this.logicalId(target.address);
-        return read === "Ref"
-            ? { Ref: logicalId }
-            : { "Fn::GetAtt": [logicalId, read] };
+        return terraformAttributeIntrinsic(target.type, this.attributeName(qualified, target.address), this.logicalId(target.address));
     }
     /**
      * The address of the resource one reference names.
@@ -66,88 +70,75 @@ export class TerraformReferenceResolver {
      * off it, because it is merging properties into that resource's template,
      * and so does the ordering pass.
      */
-    targetAddress(reference, modulePath) {
-        return this.target(qualifiedReference(reference, modulePath))?.address;
+    targetAddress(reference, from) {
+        const qualified = this.named(reference, from.modulePath, from, 0);
+        return qualified === undefined
+            ? undefined
+            : this.target(qualified)?.address;
     }
     /**
-     * The attribute a reference reads off the resource behind it.
+     * The same reference, written so that it names a resource of this plan.
      *
-     * A reference naming a resource address and nothing else names no attribute,
-     * and is the resource itself. A reference through a module output names the
-     * output rather than the attribute, and the output's own expression says
-     * which attribute that is.
+     * A reference that already names one is itself. One that names an instance
+     * without its key gains the key. One under a scope the plan resolves for
+     * itself is replaced by what was written where that scope was set, and then
+     * asked again.
      */
-    attributeName(qualified, address) {
-        if (qualified === address) {
-            return undefined;
+    named(reference, modulePath, from, depth) {
+        const qualified = qualifiedReference(reference, modulePath);
+        if (this.target(qualified) !== undefined) {
+            return qualified;
         }
-        if (qualified.startsWith(`${address}.`)) {
-            return qualified.slice(address.length + 1);
+        const keyed = this.resources.instance(qualified, from.index);
+        if (keyed !== undefined) {
+            return keyed;
         }
-        const [longest] = longestFirst(this.moduleOutput(qualified) ?? []);
-        return longest?.split(".").pop();
-    }
-    target(qualified) {
-        return this.longestMatch(qualified) ?? this.throughModuleOutput(qualified);
+        return depth >= hopLimit
+            ? undefined
+            : this.throughScope(reference, modulePath, from, depth);
     }
     /**
-     * The module output one reference names.
+     * The one resource a scoped reference leads to, where there is only one.
      *
-     * The index is keyed by module call path, since a module declares its
-     * outputs once however many instances of the call there are. A reference
-     * made from inside one instance carries that instance's key, so the key
-     * comes off when the qualified form finds nothing.
+     * A plan records the references of a whole collection as one list and says
+     * nothing about which part of it a reader was reading, so a collection built
+     * out of two resources cannot say which of them `each.value.uri` holds.
+     * Guessing there would put a plausible logical ID into a property that names
+     * the wrong resource, which is worse than the property being absent. Two
+     * answers is therefore no answer, and the resource is left out and reported
+     * the way it is today.
      */
-    moduleOutput(qualified) {
-        return (this.moduleOutputs.get(qualified) ??
-            this.moduleOutputs.get(withoutInstanceKeys(qualified)));
-    }
-    /**
-     * The resource a module output leads to.
-     *
-     * The output's own expression names it, in terms of the module declaring the
-     * output, so following one is resolving that expression again one module
-     * down. An output built out of several resources returns the first that
-     * resolves, and the depth limit stops a module whose outputs refer to each
-     * other from looping.
-     */
-    throughModuleOutput(qualified, depth = 0) {
-        const output = this.moduleOutput(qualified);
-        if (output === undefined || depth > 8) {
-            return undefined;
-        }
-        // The path the output was read through rather than the one it was
-        // declared under, so an output reached inside a `for_each` instance
-        // follows its own instance's resources.
-        const instance = moduleOutputPath(qualified);
-        for (const reference of longestFirst(output)) {
-            const nested = qualifiedReference(reference, instance);
-            const target = this.longestMatch(nested) ??
-                this.throughModuleOutput(nested, depth + 1);
-            if (target !== undefined) {
-                return target;
+    throughScope(reference, modulePath, from, depth) {
+        const hops = terraformScopeHops(reference, modulePath, from, this.moduleVariables, depth);
+        const found = new Map();
+        for (const hop of hops) {
+            const named = this.named(hop.reference, hop.modulePath, from, depth + 1);
+            const address = named === undefined ? undefined : this.target(named)?.address;
+            if (named !== undefined && address !== undefined && !found.has(address)) {
+                found.set(address, named);
             }
         }
-        return undefined;
+        return found.size === 1 ? found.values().next().value : undefined;
     }
     /**
-     * The resource whose address is the longest prefix of this reference.
+     * The attribute a reference reads off the resource behind it.
      *
-     * `aws_iam_role.processor.arn` has to find `aws_iam_role.processor` and leave
-     * `arn` behind, and a `for_each` instance address carries a bracketed key
-     * that is part of the address rather than an attribute.
+     * A reference naming a resource address and nothing else names no attribute,
+     * and is the resource itself. A reference through a module output names the
+     * output rather than the attribute, and the output's own expression says
+     * which attribute that is.
      */
-    longestMatch(qualified) {
-        let best;
-        for (const [address, resource] of this.byAddress) {
-            if (qualified !== address && !qualified.startsWith(`${address}.`)) {
-                continue;
-            }
-            if (best === undefined || address.length > best.address.length) {
-                best = resource;
-            }
+    attributeName(qualified, address) {
+        if (qualified === address) {
+            return undefined;
         }
-        return best;
+        return qualified.startsWith(`${address}.`)
+            ? qualified.slice(address.length + 1)
+            : this.moduleOutputs.attributeOf(qualified);
+    }
+    target(qualified) {
+        return (this.resources.longestMatch(qualified) ??
+            this.moduleOutputs.target(qualified));
     }
 }
 //# sourceMappingURL=sim-tf-reference.js.map

package/dist/terraform/sim-tf-reference.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-tf-reference.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-reference.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,+BAA+B,CAAC;AAEvC;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,0BAA0B;IACpB,SAAS,CAAyC;IAClD,aAAa,CAAyC;IACtD,UAAU,CAAsB;IAEjD,YACE,SAAuC,EACvC,aAAa,GAA2C,IAAI,GAAG,EAAE;QAEjE,IAAI,CAAC,SAAS,GAAG,IAAI,GAAG,CACtB,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAC1D,CAAC;QACF,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,UAAU,GAAG,IAAI,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,8DAA8D;IACvD,SAAS,CAAC,OAAe;QAC9B,OAAO,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAED;;;;OAIG;IACI,QAAQ,CAAC,OAAe;QAC7B,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAED;;;;;;OAMG;IACI,OAAO,CACZ,SAAiB,EACjB,UAA6B;QAE7B,MAAM,SAAS,GAAG,kBAAkB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAEtC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QAChE,MAAM,IAAI,GACR,SAAS,KAAK,SAAS;YACrB,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,uBAAuB,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,IAAI,SAAS,EAAE,CAAC,CAAC;QAEjE,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAEjD,OAAO,IAAI,KAAK,KAAK;YACnB,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE;YACpB,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC;IAC1C,CAAC;IAED;;;;;;OAMG;IACI,aAAa,CAClB,SAAiB,EACjB,UAA6B;QAE7B,OAAO,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,EAAE,OAAO,CAAC;IACzE,CAAC;IAED;;;;;;;OAOG;IACK,aAAa,CACnB,SAAiB,EACjB,OAAe;QAEf,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;YAC1B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,OAAO,GAAG,CAAC,EAAE,CAAC;YACxC,OAAO,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC7C,CAAC;QAED,MAAM,CAAC,OAAO,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;QAEnE,OAAO,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IACnC,CAAC;IAEO,MAAM,CAAC,SAAiB;QAC9B,OAAO,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAC7E,CAAC;IAED;;;;;;;OAOG;IACK,YAAY,CAAC,SAAiB;QACpC,OAAO,CACL,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC;YACjC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC,CACvD,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACK,mBAAmB,CACzB,SAAiB,EACjB,KAAK,GAAG,CAAC;QAET,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QAE5C,IAAI,MAAM,KAAK,SAAS,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACtC,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,kEAAkE;QAClE,oEAAoE;QACpE,wCAAwC;QACxC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAE7C,KAAK,MAAM,SAAS,IAAI,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7C,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YACvD,MAAM,MAAM,GACV,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;gBACzB,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YAE9C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;OAMG;IACK,YAAY,CAAC,SAAiB;QACpC,IAAI,IAAmC,CAAC;QAExC,KAAK,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACjD,IAAI,SAAS,KAAK,OAAO,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,OAAO,GAAG,CAAC,EAAE,CAAC;gBAClE,SAAS;YACX,CAAC;YAED,IAAI,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;gBAC/D,IAAI,GAAG,QAAQ,CAAC;YAClB,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}
+{"version":3,"file":"sim-tf-reference.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-reference.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAEnE,2EAA2E;AAC3E,MAAM,QAAQ,GAAG,CAAC,CAAC;AAEnB;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,OAAO,0BAA0B;IACpB,SAAS,CAA6B;IACtC,aAAa,CAA4B;IACzC,eAAe,CAAyC;IACxD,UAAU,CAAsB;IAEjD,YACE,SAAuC,EACvC,aAAa,GAA2C,IAAI,GAAG,EAAE,EACjE,eAAe,GAA2C,IAAI,GAAG,EAAE;QAEnE,IAAI,CAAC,SAAS,GAAG,IAAI,0BAA0B,CAAC,SAAS,CAAC,CAAC;QAC3D,IAAI,CAAC,aAAa,GAAG,IAAI,yBAAyB,CAChD,aAAa,EACb,IAAI,CAAC,SAAS,CACf,CAAC;QACF,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;QACvC,IAAI,CAAC,UAAU,GAAG,IAAI,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,8DAA8D;IACvD,SAAS,CAAC,OAAe;QAC9B,OAAO,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAED;;;;OAIG;IACI,QAAQ,CAAC,OAAe;QAC7B,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAED;;;;;;OAMG;IACI,OAAO,CACZ,SAAiB,EACjB,IAAuB;QAEvB,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAE5E,IAAI,SAAS,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACpD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,2BAA2B,CAChC,MAAM,CAAC,IAAI,EACX,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,EAC7C,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAC/B,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACI,aAAa,CAClB,SAAiB,EACjB,IAAuB;QAEvB,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAElE,OAAO,SAAS,KAAK,SAAS;YAC5B,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IACtC,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CACX,SAAiB,EACjB,UAA6B,EAC7B,IAAuB,EACvB,KAAa;QAEb,MAAM,SAAS,GAAG,kBAAkB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAE5D,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,SAAS,EAAE,CAAC;YACzC,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAE7D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,KAAK,IAAI,QAAQ;YACtB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC5D,CAAC;IAED;;;;;;;;;;OAUG;IACK,YAAY,CAClB,SAAiB,EACjB,UAA6B,EAC7B,IAAuB,EACvB,KAAa;QAEb,MAAM,IAAI,GAAG,kBAAkB,CAC7B,SAAS,EACT,UAAU,EACV,IAAI,EACJ,IAAI,CAAC,eAAe,EACpB,KAAK,CACN,CAAC;QACF,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;QAExC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YACzE,MAAM,OAAO,GACX,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;YAEhE,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBACxE,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACpE,CAAC;IAED;;;;;;;OAOG;IACK,aAAa,CACnB,SAAiB,EACjB,OAAe;QAEf,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;YAC1B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,SAAS,CAAC,UAAU,CAAC,GAAG,OAAO,GAAG,CAAC;YACxC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;YACrC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IAChD,CAAC;IAEO,MAAM,CAAC,SAAiB;QAC9B,OAAO,CACL,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,SAAS,CAAC;YACtC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,CACrC,CAAC;IACJ,CAAC;CACF"}

package/dist/terraform/sim-tf-referenced.js

@@ -30,7 +30,7 @@ export function terraformReferencedAddress(resource, key, resolver) {
     }
     const references = longestFirst(expression.references ?? []);
     for (const reference of references) {
-        const address = resolver.targetAddress(reference, resource.modulePath);
+        const address = resolver.targetAddress(reference, resource);
         if (address !== undefined) {
             return address;
         }

package/dist/terraform/sim-tf-referenced.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-tf-referenced.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-referenced.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,kDAAkD;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAIxD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAE7D;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,2BAA2B,CACzC,QAA2B,EAC3B,GAAW,EACX,QAAoC;IAEpC,MAAM,OAAO,GAAG,0BAA0B,CAAC,QAAQ,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IAEpE,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AACxE,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,0BAA0B,CACxC,QAA2B,EAC3B,GAAW,EACX,QAAoC;IAEpC,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAE7C,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,UAAU,GAAG,YAAY,CAC5B,UAAkC,CAAC,UAAU,IAAI,EAAE,CACrD,CAAC;IAEF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,QAAQ,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;QAEvE,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,OAAO,CAAC;QACjB,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}
+{"version":3,"file":"sim-tf-referenced.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-referenced.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,kDAAkD;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAIxD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAE7D;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,2BAA2B,CACzC,QAA2B,EAC3B,GAAW,EACX,QAAoC;IAEpC,MAAM,OAAO,GAAG,0BAA0B,CAAC,QAAQ,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IAEpE,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AACxE,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,0BAA0B,CACxC,QAA2B,EAC3B,GAAW,EACX,QAAoC;IAEpC,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAE7C,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,UAAU,GAAG,YAAY,CAC5B,UAAkC,CAAC,UAAU,IAAI,EAAE,CACrD,CAAC;IAEF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,QAAQ,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAE5D,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,OAAO,CAAC;QACjB,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/terraform/sim-tf-resource.type.d.ts

@@ -27,6 +27,14 @@ export interface TerraformResource {
     readonly expressions: Record<string, unknown>;
     /** Explicit `depends_on` addresses, relative to the declaring module. */
     readonly dependsOn: readonly string[];
+    /**
+     * What `for_each` iterates, as the references its expression holds.
+     *
+     * A resource expanded by `for_each` reads `each.value` and `each.key`, and
+     * neither names anything the plan resolved. What the collection was built
+     * from is the only thing behind them.
+     */
+    readonly forEach: readonly string[];
     /** The module call path this resource was declared under. */
     readonly modulePath: readonly string[];
 }

package/dist/terraform/sim-tf-resource.type.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-tf-resource.type.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-resource.type.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,eAAO,MAAM,oBAAoB,kBAAkB,CAAC;AAEpD;;;;;;;;;GASG;AACH,MAAM,WAAW,iBAAiB;IAChC,gFAAgF;IAChF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,+EAA+E;IAC/E,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IAC5C,gEAAgE;IAChE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,+CAA+C;IAC/C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC,gFAAgF;IAChF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,0EAA0E;IAC1E,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9C,yEAAyE;IACzE,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,6DAA6D;IAC7D,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC"}
+{"version":3,"file":"sim-tf-resource.type.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-resource.type.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,eAAO,MAAM,oBAAoB,kBAAkB,CAAC;AAEpD;;;;;;;;;GASG;AACH,MAAM,WAAW,iBAAiB;IAChC,gFAAgF;IAChF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,+EAA+E;IAC/E,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IAC5C,gEAAgE;IAChE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,+CAA+C;IAC/C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC,gFAAgF;IAChF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,0EAA0E;IAC1E,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9C,yEAAyE;IACzE,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC;;;;;;OAMG;IACH,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,6DAA6D;IAC7D,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC"}

package/dist/terraform/sim-tf-settle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-tf-settle.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-settle.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAEL,KAAK,iBAAiB,EACvB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AAKnE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAEpE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAEnE;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,4DAA4D;IAC5D,QAAQ,CAAC,QAAQ,EAAE,SAAS,oBAAoB,EAAE,CAAC;IACnD,2DAA2D;IAC3D,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;IAC9C,4EAA4E;IAC5E,QAAQ,CAAC,SAAS,EAAE,sBAAsB,CAAC;IAC3C,qDAAqD;IACrD,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;CAC5D;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,aAAa,EACnB,SAAS,EAAE,SAAS,iBAAiB,EAAE,EACvC,SAAS,EAAE,sBAAsB,GAChC,oBAAoB,CAuCtB"}
+{"version":3,"file":"sim-tf-settle.d.ts","sourceRoot":"","sources":["../../src/terraform/sim-tf-settle.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAEL,KAAK,iBAAiB,EACvB,MAAM,2BAA2B,CAAC;AAGnC,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AAKnE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAEpE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAEnE;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,4DAA4D;IAC5D,QAAQ,CAAC,QAAQ,EAAE,SAAS,oBAAoB,EAAE,CAAC;IACnD,2DAA2D;IAC3D,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;IAC9C,4EAA4E;IAC5E,QAAQ,CAAC,SAAS,EAAE,sBAAsB,CAAC;IAC3C,qDAAqD;IACrD,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;CAC5D;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,aAAa,EACnB,SAAS,EAAE,SAAS,iBAAiB,EAAE,EACvC,SAAS,EAAE,sBAAsB,GAChC,oBAAoB,CAyCtB"}

package/dist/terraform/sim-tf-settle.js

@@ -1,5 +1,6 @@
 import { terraformAwsProvider, } from "./sim-tf-resource.type.js";
 import { terraformModuleOutputs } from "./sim-tf-module-outputs.js";
+import { terraformModuleVariables } from "./sim-tf-module-variables.js";
 import { TerraformReferenceResolver } from "./sim-tf-reference.js";
 import { terraformResourceFolds, terraformResourceMappings, } from "./sim-tf-registry.js";
 import { terraformRefusal } from "./sim-tf-refusal.js";
@@ -19,11 +20,12 @@ import { terraformRefusal } from "./sim-tf-refusal.js";
  */
 export function settledTerraformPlan(plan, resources, overrides) {
     const moduleOutputs = terraformModuleOutputs(plan);
+    const moduleVariables = terraformModuleVariables(plan);
     const refused = new Map();
     let candidates = resources.flatMap((resource) => mappable(resource, refused));
     let reason = "unresolved required attribute";
     for (;;) {
-        const resolver = new TerraformReferenceResolver(candidates.map((declaration) => declaration.resource), moduleOutputs);
+        const resolver = new TerraformReferenceResolver(candidates.map((declaration) => declaration.resource), moduleOutputs, moduleVariables);
         const dropped = new Map(candidates.flatMap((declaration) => {
             const why = terraformRefusal(declaration, { resolver, overrides }, reason);
             return why === undefined ? [] : [[declaration.resource.address, why]];

package/dist/terraform/sim-tf-settle.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-tf-settle.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-settle.ts"],"names":[],"mappings":"AACA,OAAO,EACL,oBAAoB,GAErB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AACnE,OAAO,EACL,sBAAsB,EACtB,yBAAyB,GAC1B,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAkBvD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAAmB,EACnB,SAAuC,EACvC,SAAiC;IAEjC,MAAM,aAAa,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,IAAI,GAAG,EAA+B,CAAC;IAEvD,IAAI,UAAU,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;IAC9E,IAAI,MAAM,GAAwB,+BAA+B,CAAC;IAElE,SAAS,CAAC;QACR,MAAM,QAAQ,GAAG,IAAI,0BAA0B,CAC7C,UAAU,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,EACrD,aAAa,CACd,CAAC;QACF,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,UAAU,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE;YACjC,MAAM,GAAG,GAAG,gBAAgB,CAC1B,WAAW,EACX,EAAE,QAAQ,EAAE,SAAS,EAAE,EACvB,MAAM,CACP,CAAC;YAEF,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QACxE,CAAC,CAAC,CACH,CAAC;QAEF,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;QAChE,CAAC;QAED,KAAK,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,OAAO,EAAE,CAAC;YACrC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC5B,CAAC;QAED,UAAU,GAAG,UAAU,CAAC,MAAM,CAC5B,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,CAC5D,CAAC;QACF,oEAAoE;QACpE,6DAA6D;QAC7D,MAAM,GAAG,wCAAwC,CAAC;IACpD,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,QAAQ,CACf,QAA2B,EAC3B,OAAyC;IAEzC,IAAI,QAAQ,CAAC,QAAQ,KAAK,oBAAoB,EAAE,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,EAAE,8BAA8B,CAAC,CAAC;QAE9D,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,OAAO,GAAG,yBAAyB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAE7D,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IACjC,CAAC;IAED,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,EAAE,8BAA8B,CAAC,CAAC;IAChE,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC"}
+{"version":3,"file":"sim-tf-settle.js","sourceRoot":"","sources":["../../src/terraform/sim-tf-settle.ts"],"names":[],"mappings":"AACA,OAAO,EACL,oBAAoB,GAErB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AACnE,OAAO,EACL,sBAAsB,EACtB,yBAAyB,GAC1B,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAkBvD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAAmB,EACnB,SAAuC,EACvC,SAAiC;IAEjC,MAAM,aAAa,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IACnD,MAAM,eAAe,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,IAAI,GAAG,EAA+B,CAAC;IAEvD,IAAI,UAAU,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;IAC9E,IAAI,MAAM,GAAwB,+BAA+B,CAAC;IAElE,SAAS,CAAC;QACR,MAAM,QAAQ,GAAG,IAAI,0BAA0B,CAC7C,UAAU,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,EACrD,aAAa,EACb,eAAe,CAChB,CAAC;QACF,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,UAAU,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE;YACjC,MAAM,GAAG,GAAG,gBAAgB,CAC1B,WAAW,EACX,EAAE,QAAQ,EAAE,SAAS,EAAE,EACvB,MAAM,CACP,CAAC;YAEF,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QACxE,CAAC,CAAC,CACH,CAAC;QAEF,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;QAChE,CAAC;QAED,KAAK,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,OAAO,EAAE,CAAC;YACrC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC5B,CAAC;QAED,UAAU,GAAG,UAAU,CAAC,MAAM,CAC5B,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,CAC5D,CAAC;QACF,oEAAoE;QACpE,6DAA6D;QAC7D,MAAM,GAAG,wCAAwC,CAAC;IACpD,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,QAAQ,CACf,QAA2B,EAC3B,OAAyC;IAEzC,IAAI,QAAQ,CAAC,QAAQ,KAAK,oBAAoB,EAAE,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,EAAE,8BAA8B,CAAC,CAAC;QAE9D,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,OAAO,GAAG,yBAAyB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAE7D,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IACjC,CAAC;IAED,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,EAAE,8BAA8B,CAAC,CAAC;IAChE,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/dist/util/exactly-one.type.d.ts

@@ -0,0 +1,14 @@
+/**
+ * A union over the keys of `T`, where one key is given and the rest refused.
+ *
+ * Writing such a union out by hand means every member declares every other
+ * member's key as `?: never`, and a key's documentation lands once per member.
+ * `T` names each key once, and this builds the union from it.
+ *
+ * The optional `never` keys are what keep the members exclusive. An object
+ * literal naming two of the keys satisfies no member at all.
+ */
+export type ExactlyOne<T> = {
+    [K in keyof T]: Readonly<Pick<T, K>> & Readonly<Partial<Record<Exclude<keyof T, K>, never>>>;
+}[keyof T];
+//# sourceMappingURL=exactly-one.type.d.ts.map

package/dist/util/exactly-one.type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exactly-one.type.d.ts","sourceRoot":"","sources":["../../src/util/exactly-one.type.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,MAAM,MAAM,UAAU,CAAC,CAAC,IAAI;KACzB,CAAC,IAAI,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAClC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;CACxD,CAAC,MAAM,CAAC,CAAC,CAAC"}

package/dist/util/exactly-one.type.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=exactly-one.type.js.map

package/dist/util/exactly-one.type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exactly-one.type.js","sourceRoot":"","sources":["../../src/util/exactly-one.type.ts"],"names":[],"mappings":""}

package/dist/util/rule/sim-declared-result-rules.d.ts

@@ -0,0 +1,55 @@
+/**
+ * The keys one request is matched on, in the order the tiers are tried.
+ *
+ * A request carrying nothing for a tier skips it. That is the ordinary case
+ * rather than an edge: a Rekognition image passed as bytes has no S3 object
+ * name, and a Personalize related-items request names no user.
+ */
+export interface SimDeclaredResultKeys {
+    readonly leading?: string | undefined;
+    readonly trailing?: string | undefined;
+}
+/**
+ * The results a simulated operation answers with, by the keys a request
+ * carries.
+ *
+ * A service that answers from declarations rather than from data needs the
+ * same matcher each time. A request carries one or two identifying keys, a
+ * test declares what each of them answers with, and everything else gets the
+ * default. Simulated Rekognition matches an image by content hash and then by
+ * S3 object name; simulated Personalize matches a recommendation request by
+ * item and then by user.
+ *
+ * There are three kinds of rule and one order between them: a leading key rule
+ * wins, then a trailing key rule, then the default. Matching is exact, with no
+ * pattern syntax, so which rule applies never depends on how specific a
+ * pattern is thought to be.
+ *
+ * The keys are matched, not validated. What counts as a key at all belongs to
+ * the service declaring the rule, which is where a malformed one is refused.
+ */
+export declare class SimDeclaredResultRules<TResult> {
+    private defaultResult;
+    private readonly byLeadingKey;
+    private readonly byTrailingKey;
+    constructor(defaultResult: TResult);
+    /**
+     * Answer with this result for any request no other rule matches.
+     */
+    byDefault(result: TResult): void;
+    /**
+     * Answer with this result for a request carrying this exact leading key.
+     */
+    onLeadingKey(key: string, result: TResult): void;
+    /**
+     * Answer with this result for a request carrying this exact trailing key,
+     * where no leading key rule matched it first.
+     */
+    onTrailingKey(key: string, result: TResult): void;
+    /**
+     * The result for one request.
+     */
+    resultFor(keys: SimDeclaredResultKeys): TResult;
+    private declaredFor;
+}
+//# sourceMappingURL=sim-declared-result-rules.d.ts.map

package/dist/util/rule/sim-declared-result-rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-declared-result-rules.d.ts","sourceRoot":"","sources":["../../../src/util/rule/sim-declared-result-rules.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACxC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBAAa,sBAAsB,CAAC,OAAO;IACzC,OAAO,CAAC,aAAa,CAAU;IAC/B,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA8B;IAC3D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA8B;IAE5D,YAAY,aAAa,EAAE,OAAO,EAEjC;IAED;;OAEG;IACH,SAAS,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,CAE/B;IAED;;OAEG;IACH,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,IAAI,CAE/C;IAED;;;OAGG;IACH,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,IAAI,CAEhD;IAED;;OAEG;IACH,SAAS,CAAC,IAAI,EAAE,qBAAqB,GAAG,OAAO,CAM9C;IAED,OAAO,CAAC,WAAW;CAUpB"}

package/dist/util/rule/sim-declared-result-rules.js

@@ -0,0 +1,61 @@
+/**
+ * The results a simulated operation answers with, by the keys a request
+ * carries.
+ *
+ * A service that answers from declarations rather than from data needs the
+ * same matcher each time. A request carries one or two identifying keys, a
+ * test declares what each of them answers with, and everything else gets the
+ * default. Simulated Rekognition matches an image by content hash and then by
+ * S3 object name; simulated Personalize matches a recommendation request by
+ * item and then by user.
+ *
+ * There are three kinds of rule and one order between them: a leading key rule
+ * wins, then a trailing key rule, then the default. Matching is exact, with no
+ * pattern syntax, so which rule applies never depends on how specific a
+ * pattern is thought to be.
+ *
+ * The keys are matched, not validated. What counts as a key at all belongs to
+ * the service declaring the rule, which is where a malformed one is refused.
+ */
+export class SimDeclaredResultRules {
+    defaultResult;
+    byLeadingKey = new Map();
+    byTrailingKey = new Map();
+    constructor(defaultResult) {
+        this.defaultResult = defaultResult;
+    }
+    /**
+     * Answer with this result for any request no other rule matches.
+     */
+    byDefault(result) {
+        this.defaultResult = result;
+    }
+    /**
+     * Answer with this result for a request carrying this exact leading key.
+     */
+    onLeadingKey(key, result) {
+        this.byLeadingKey.set(key, result);
+    }
+    /**
+     * Answer with this result for a request carrying this exact trailing key,
+     * where no leading key rule matched it first.
+     */
+    onTrailingKey(key, result) {
+        this.byTrailingKey.set(key, result);
+    }
+    /**
+     * The result for one request.
+     */
+    resultFor(keys) {
+        return (this.declaredFor(this.byLeadingKey, keys.leading) ??
+            this.declaredFor(this.byTrailingKey, keys.trailing) ??
+            this.defaultResult);
+    }
+    declaredFor(rules, key) {
+        if (key === undefined) {
+            return undefined;
+        }
+        return rules.get(key);
+    }
+}
+//# sourceMappingURL=sim-declared-result-rules.js.map

package/dist/util/rule/sim-declared-result-rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-declared-result-rules.js","sourceRoot":"","sources":["../../../src/util/rule/sim-declared-result-rules.ts"],"names":[],"mappings":"AAYA;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,OAAO,sBAAsB;IACzB,aAAa,CAAU;IACd,YAAY,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC1C,aAAa,GAAG,IAAI,GAAG,EAAmB,CAAC;IAE5D,YAAY,aAAsB;QAChC,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,MAAe;QACvB,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,GAAW,EAAE,MAAe;QACvC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC;IAED;;;OAGG;IACH,aAAa,CAAC,GAAW,EAAE,MAAe;QACxC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,IAA2B;QACnC,OAAO,CACL,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC;YACjD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC;YACnD,IAAI,CAAC,aAAa,CACnB,CAAC;IACJ,CAAC;IAEO,WAAW,CACjB,KAAmC,EACnC,GAAuB;QAEvB,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;CACF"}