@kensio/yulin 1.21.2 → 1.21.4

package/dist/service/cloudformation/serve/sim-cloudformation-api.d.ts

@@ -3,8 +3,9 @@ import { SimQueryApiEndpoint } from "../../../serve/http/api/query/sim-query-end
 /**
  * Serve the CloudFormation Query API to a client given an endpoint URL.
  *
- * The operations served are the four simulated CloudFormation implements:
- * `CreateStack`, `UpdateStack`, `DeleteStack` and `DescribeStacks`. Anything
- * else is refused as `NotImplemented`.
+ * The operations served are the Stack operations simulated CloudFormation
+ * implements, `CreateStack`, `UpdateStack`, `DeleteStack` and `DescribeStacks`,
+ * together with the five change set operations. Anything else is refused as
+ * `NotImplemented`.
  */
 export declare function simCloudFormationApiEndpoint(simAws: SimAws): SimQueryApiEndpoint;

package/dist/service/cloudformation/serve/sim-cloudformation-api.js

@@ -1,5 +1,6 @@
 import { SimQueryApiEndpoint } from "../../../serve/http/api/query/sim-query-endpoint.js";
 import { queryList, queryMembers, } from "../../../serve/http/api/query/sim-query-result.js";
+import { simCfnChangeSetQueryOperations } from "./sim-cloudformation-change-set-api.js";
 /**
  * The XML namespace real CloudFormation stamps on every response it sends.
  */
@@ -16,9 +17,10 @@ const stackOutputMembers = [
 /**
  * Serve the CloudFormation Query API to a client given an endpoint URL.
  *
- * The operations served are the four simulated CloudFormation implements:
- * `CreateStack`, `UpdateStack`, `DeleteStack` and `DescribeStacks`. Anything
- * else is refused as `NotImplemented`.
+ * The operations served are the Stack operations simulated CloudFormation
+ * implements, `CreateStack`, `UpdateStack`, `DeleteStack` and `DescribeStacks`,
+ * together with the five change set operations. Anything else is refused as
+ * `NotImplemented`.
  */
 export function simCloudFormationApiEndpoint(simAws) {
     return new SimQueryApiEndpoint({
@@ -30,6 +32,7 @@ export function simCloudFormationApiEndpoint(simAws) {
 }
 function simCloudFormationQueryOperations() {
     return new Map([
+        ...simCfnChangeSetQueryOperations(),
         [
             "CreateStack",
             {

package/dist/service/cloudformation/serve/sim-cloudformation-change-set-api.d.ts

@@ -0,0 +1,10 @@
+import type { SimQueryOperations } from "../../../serve/http/api/query/sim-query-operation.js";
+/**
+ * The change set half of the CloudFormation Query API.
+ *
+ * Held apart from the Stack operations because the two halves share nothing
+ * but the service they belong to. Every operation here reaches the same Command
+ * an SDK caller sends, so a CLI deployment runs the code an in-process caller
+ * runs.
+ */
+export declare function simCfnChangeSetQueryOperations(): SimQueryOperations;

package/dist/service/cloudformation/serve/sim-cloudformation-change-set-api.js

@@ -0,0 +1,94 @@
+import { queryList, queryMembers, queryStructure, } from "../../../serve/http/api/query/sim-query-result.js";
+/**
+ * The members CloudFormation describes one change set with.
+ */
+const changeSetMembers = [
+    "ChangeSetId",
+    "ChangeSetName",
+    "StackId",
+    "StackName",
+    "Description",
+    "Status",
+    "StatusReason",
+    "ExecutionStatus",
+];
+/**
+ * The members CloudFormation summarises one change set with in ListChangeSets.
+ */
+const changeSetSummaryMembers = [
+    "ChangeSetId",
+    "ChangeSetName",
+    "StackId",
+    "StackName",
+    "Description",
+    "Status",
+    "StatusReason",
+    "ExecutionStatus",
+];
+/**
+ * The members CloudFormation describes one Resource change with.
+ */
+const resourceChangeMembers = [
+    "Action",
+    "LogicalResourceId",
+    "ResourceType",
+    "Replacement",
+];
+/**
+ * The change set half of the CloudFormation Query API.
+ *
+ * Held apart from the Stack operations because the two halves share nothing
+ * but the service they belong to. Every operation here reaches the same Command
+ * an SDK caller sends, so a CLI deployment runs the code an in-process caller
+ * runs.
+ */
+export function simCfnChangeSetQueryOperations() {
+    return new Map([
+        [
+            "CreateChangeSet",
+            {
+                input: (fields) => ({
+                    StackName: fields.text("StackName"),
+                    ChangeSetName: fields.text("ChangeSetName"),
+                    ChangeSetType: fields.text("ChangeSetType"),
+                    Description: fields.text("Description"),
+                    TemplateBody: fields.text("TemplateBody"),
+                    Parameters: fields.list("Parameters", (parameter) => ({
+                        ParameterKey: parameter.text("ParameterKey"),
+                        ParameterValue: parameter.text("ParameterValue"),
+                    })),
+                }),
+                result: (output) => queryMembers(output, ["Id", "StackId"]),
+            },
+        ],
+        [
+            "DescribeChangeSet",
+            {
+                input: changeSetInput,
+                result: (output) => queryMembers(output, changeSetMembers) +
+                    queryList(output, "Changes", (change) => queryMembers(change, ["Type"]) +
+                        queryStructure(change, "ResourceChange", (resourceChange) => queryMembers(resourceChange, resourceChangeMembers))),
+            },
+        ],
+        ["ExecuteChangeSet", { input: changeSetInput, result: () => "" }],
+        ["DeleteChangeSet", { input: changeSetInput, result: () => "" }],
+        [
+            "ListChangeSets",
+            {
+                input: (fields) => ({
+                    StackName: fields.text("StackName"),
+                }),
+                result: (output) => queryList(output, "Summaries", (summary) => queryMembers(summary, changeSetSummaryMembers)),
+            },
+        ],
+    ]);
+}
+/**
+ * The input every operation naming one change set sends.
+ */
+function changeSetInput(fields) {
+    return {
+        StackName: fields.text("StackName"),
+        ChangeSetName: fields.text("ChangeSetName"),
+    };
+}

package/dist/service/cloudformation/sim-cloudformation.d.ts

@@ -7,6 +7,11 @@ import type { SimCreateStackCommand, SimCreateStackCommandOutput } from "./comma
 import type { SimDescribeStacksCommand, SimDescribeStacksCommandOutput } from "./command/describe-stacks/describe-stacks.command.js";
 import type { SimDeleteStackCommand, SimDeleteStackCommandOutput } from "./command/delete-stack/delete-stack.command.js";
 import type { SimUpdateStackCommand, SimUpdateStackCommandOutput } from "./command/update-stack/update-stack.command.js";
+import type { SimCreateChangeSetCommand, SimCreateChangeSetCommandOutput } from "./command/create-change-set/create-change-set.command.js";
+import type { SimDescribeChangeSetCommand, SimDescribeChangeSetCommandOutput } from "./command/describe-change-set/describe-change-set.command.js";
+import type { SimExecuteChangeSetCommand, SimExecuteChangeSetCommandOutput } from "./command/execute-change-set/execute-change-set.command.js";
+import type { SimDeleteChangeSetCommand, SimDeleteChangeSetCommandOutput } from "./command/delete-change-set/delete-change-set.command.js";
+import type { SimListChangeSetsCommand, SimListChangeSetsCommandOutput } from "./command/list-change-sets/list-change-sets.command.js";
 import { type SimCloudFormationCreateStackProperties as SimCloudFormationCreateStackProperties } from "./deploy/sim-cfn-template-deployer.js";
 import type { SimCloudFormationDeployTemplateFileProperties as SimCloudFormationDeployTemplateFileProperties } from "./deploy/sim-cfn-template-file-loader.js";
 import type { SimCloudFormationDeployCdkOutProperties } from "./deploy/sim-cfn-cdk-out-deployer.js";
@@ -33,10 +38,12 @@ export declare class SimCloudFormation {
     private readonly simAws;
     private readonly background;
     private readonly stacks;
+    private readonly deletedStacks;
     private readonly exports;
     private readonly templateDeployer;
     private readonly sdkRouter;
     private readonly authorization;
+    private readonly changeSetCommands;
     constructor(properties: SimCloudFormationProperties);
     /** Get a deployed simulated CloudFormation Stack by name. */
     getStackByName(stackName: SimCloudFormationStackName | string): SimCfnDeployedStack | undefined;
@@ -56,6 +63,30 @@ export declare class SimCloudFormation {
      * Handle a Delete Stack Command from the SDK.
      */
     deleteStack(command: SimDeleteStackCommand, options?: SimCloudFormationRequestOptions): Promise<SimDeleteStackCommandOutput>;
+    /**
+     * Handle a Create Change Set Command from the SDK.
+     *
+     * The change set commands authorize themselves, unlike the Stack commands
+     * above. Three of them can name a change set by its ARN alone, and only the
+     * change set registry knows which Stack such a request operates on.
+     */
+    createChangeSet(command: SimCreateChangeSetCommand, options?: SimCloudFormationRequestOptions): Promise<SimCreateChangeSetCommandOutput>;
+    /**
+     * Handle a Describe Change Set Command from the SDK.
+     */
+    describeChangeSet(command: SimDescribeChangeSetCommand, options?: SimCloudFormationRequestOptions): Promise<SimDescribeChangeSetCommandOutput>;
+    /**
+     * Handle an Execute Change Set Command from the SDK.
+     */
+    executeChangeSet(command: SimExecuteChangeSetCommand, options?: SimCloudFormationRequestOptions): Promise<SimExecuteChangeSetCommandOutput>;
+    /**
+     * Handle a Delete Change Set Command from the SDK.
+     */
+    deleteChangeSet(command: SimDeleteChangeSetCommand, options?: SimCloudFormationRequestOptions): Promise<SimDeleteChangeSetCommandOutput>;
+    /**
+     * Handle a List Change Sets Command from the SDK.
+     */
+    listChangeSets(command: SimListChangeSetsCommand, options?: SimCloudFormationRequestOptions): Promise<SimListChangeSetsCommandOutput>;
     /**
      * Wait for a simulated CloudFormation Stack deploy operation to complete.
      */

package/dist/service/cloudformation/sim-cloudformation.js

@@ -3,9 +3,11 @@ import { CreateStackCommandHandler } from "./command/create-stack/create-stack.h
 import { DescribeStacksCommandHandler } from "./command/describe-stacks/describe-stacks.handler.js";
 import { DeleteStackCommandHandler } from "./command/delete-stack/delete-stack.handler.js";
 import { UpdateStackCommandHandler } from "./command/update-stack/update-stack.handler.js";
+import { SimCfnChangeSetCommands } from "./changeset/sim-cfn-change-set-commands.js";
 import { SimCloudFormationTemplateDeployer, } from "./deploy/sim-cfn-template-deployer.js";
 import { simAwsAccountRegionScopeFactory } from "../aws/sim-aws-account-region-scope.factory.js";
 import { SimCfnExports } from "./export/sim-cfn-exports.js";
+import { SimCfnDeletedStacks } from "./stack/sim-cfn-deleted-stacks.js";
 import { SimCloudFormationSdkCommandRouter } from "./sdk/sim-cloudformation-sdk-command-router.js";
 import { SimCloudFormationAuthorization } from "./authorize/sim-cloudformation-authorization.js";
 import { simIamInRegion } from "../iam/authorize/sim-iam-region-auth-z.js";
@@ -17,10 +19,12 @@ export class SimCloudFormation {
     simAws;
     background;
     stacks = new Map();
+    deletedStacks = new SimCfnDeletedStacks();
     exports = new SimCfnExports();
     templateDeployer;
     sdkRouter = new SimCloudFormationSdkCommandRouter(this);
     authorization;
+    changeSetCommands;
     constructor(properties) {
         const { simAws, accountRegionScope = simAwsAccountRegionScopeFactory.make(), background, } = properties;
         const iam = simIamInRegion(properties.iam, accountRegionScope.regionName);
@@ -31,6 +35,14 @@ export class SimCloudFormation {
             iam,
             accountRegionScope: this.accountRegionScope,
         });
+        this.changeSetCommands = new SimCfnChangeSetCommands({
+            simAws: this.simAws,
+            accountRegionScope: this.accountRegionScope,
+            stacks: this.stacks,
+            background: this.background,
+            authorization: this.authorization,
+            exports: this.exports,
+        });
         this.templateDeployer = new SimCloudFormationTemplateDeployer({
             simAws: this.simAws,
             accountRegionScope: this.accountRegionScope,
@@ -61,36 +73,71 @@ export class SimCloudFormation {
      */
     async describeStacks(command, options) {
         this.authorization.describeStacks(command.input.StackName, options?.caller);
-        const handler = new DescribeStacksCommandHandler({
+        return await new DescribeStacksCommandHandler({
             stacks: this.stacks,
+            deleted: this.deletedStacks,
             background: this.background,
-        });
-        return await handler.handle(command);
+        }).handle(command);
     }
     /**
      * Handle an Update Stack Command from the SDK.
      */
     async updateStack(command, options) {
         this.authorization.updateStack(command.input.StackName, options?.caller);
-        const handler = new UpdateStackCommandHandler({
+        return await new UpdateStackCommandHandler({
             simAws: this.simAws,
             accountRegionScope: this.accountRegionScope,
             stacks: this.stacks,
             background: this.background,
             exports: this.exports,
-        });
-        return await handler.handle(command);
+        }).handle(command);
     }
     /**
      * Handle a Delete Stack Command from the SDK.
      */
     async deleteStack(command, options) {
         this.authorization.deleteStack(command.input.StackName, options?.caller);
-        const handler = new DeleteStackCommandHandler({
+        return await new DeleteStackCommandHandler({
             stacks: this.stacks,
+            deleted: this.deletedStacks,
             background: this.background,
-        });
-        return await handler.handle(command);
+        }).handle(command);
+    }
+    /**
+     * Handle a Create Change Set Command from the SDK.
+     *
+     * The change set commands authorize themselves, unlike the Stack commands
+     * above. Three of them can name a change set by its ARN alone, and only the
+     * change set registry knows which Stack such a request operates on.
+     */
+    async createChangeSet(command, options) {
+        this.authorization.createChangeSet(command.input.StackName, options?.caller);
+        return await this.changeSetCommands.create(command, options?.caller);
+    }
+    /**
+     * Handle a Describe Change Set Command from the SDK.
+     */
+    async describeChangeSet(command, options) {
+        return await this.changeSetCommands.describe(command, options?.caller);
+    }
+    /**
+     * Handle an Execute Change Set Command from the SDK.
+     */
+    async executeChangeSet(command, options) {
+        return await this.changeSetCommands.execute(command, options?.caller);
+    }
+    /**
+     * Handle a Delete Change Set Command from the SDK.
+     */
+    async deleteChangeSet(command, options) {
+        this.authorization.deleteChangeSet(command.input.StackName, options?.caller);
+        return await this.changeSetCommands.delete(command);
+    }
+    /**
+     * Handle a List Change Sets Command from the SDK.
+     */
+    async listChangeSets(command, options) {
+        return await this.changeSetCommands.list(command, options?.caller);
     }
     /**
      * Wait for a simulated CloudFormation Stack deploy operation to complete.

package/dist/service/cloudformation/stack/resource-map/sim-cfn-stack-resource-map.js

@@ -13,6 +13,7 @@ export function makeSimCfnStackResourceMap(properties) {
             background,
             logicalId: resourceTemplate.logicalId,
             stackName: template.stackName,
+            stackId: template.stackId,
             template: resourceTemplate.template,
             parameters: template.parameters,
             resourceLogicalIds,

package/dist/service/cloudformation/stack/sim-cfn-deleted-stacks.d.ts

@@ -0,0 +1,20 @@
+import type { SimCfnStack } from "./sim-cfn-stack.js";
+/**
+ * The Stacks that have finished deleting, kept by Stack ID.
+ *
+ * A deleted Stack gives its name back, so the map of live Stacks can no longer
+ * hold it: the next Stack of that name is a different Stack. CloudFormation
+ * still answers `DescribeStacks` for it by its Stack ID, for 90 days, and this
+ * is where the Stack it answers with is kept.
+ *
+ * Nothing expires here. A simulation lasts a test rather than three months, so
+ * a deleted Stack stays readable for as long as the simulated CloudFormation
+ * it was deleted from does.
+ */
+export declare class SimCfnDeletedStacks {
+    private readonly stacks;
+    /** Keep a Stack that has finished deleting, so its ID still describes it. */
+    record(stack: SimCfnStack): void;
+    /** The deleted Stack with this Stack ID, if one was deleted under it. */
+    get(stackId: string): SimCfnStack | undefined;
+}

package/dist/service/cloudformation/stack/sim-cfn-deleted-stacks.js

@@ -0,0 +1,23 @@
+/**
+ * The Stacks that have finished deleting, kept by Stack ID.
+ *
+ * A deleted Stack gives its name back, so the map of live Stacks can no longer
+ * hold it: the next Stack of that name is a different Stack. CloudFormation
+ * still answers `DescribeStacks` for it by its Stack ID, for 90 days, and this
+ * is where the Stack it answers with is kept.
+ *
+ * Nothing expires here. A simulation lasts a test rather than three months, so
+ * a deleted Stack stays readable for as long as the simulated CloudFormation
+ * it was deleted from does.
+ */
+export class SimCfnDeletedStacks {
+    stacks = new Map();
+    /** Keep a Stack that has finished deleting, so its ID still describes it. */
+    record(stack) {
+        this.stacks.set(stack.stackId, stack);
+    }
+    /** The deleted Stack with this Stack ID, if one was deleted under it. */
+    get(stackId) {
+        return this.stacks.get(stackId);
+    }
+}

package/dist/service/cloudformation/stack/sim-cfn-deployed-stack.type.d.ts

@@ -17,6 +17,12 @@ import type { SimCloudFormationStackStatus } from "./sim-cfn-stack.type.js";
 export interface SimCfnDeployedStack {
     /** What the Stack was deployed as. */
     readonly stackName: string;
+    /**
+     * The Stack's unique ID, which is the ARN CloudFormation gave it when it was
+     * created. A Stack deployed again under the same name gets a new one, and a
+     * deleted Stack is described by this rather than by the name it gave back.
+     */
+    readonly stackId: string;
     /** What CloudFormation last did to the Stack. */
     readonly status: SimCloudFormationStackStatus;
     /** What the operation the status reports failed with, where it failed. */

package/dist/service/cloudformation/stack/sim-cfn-stack-id.d.ts

@@ -0,0 +1,30 @@
+import type { Brand } from "../../../util/brand.type.js";
+import type { SimAwsAccountRegionScope } from "../../aws/sim-aws-account-region-scope.js";
+/**
+ * The unique ID CloudFormation gives a Stack when it creates it.
+ *
+ * An ARN rather than a name, and a new one every time a Stack of that name is
+ * created, which is what lets a deleted Stack still be told apart from the one
+ * that took its name.
+ */
+export type SimCfnStackId = Brand<string, "SimCfnStackId">;
+interface SimCfnStackIdProperties {
+    readonly accountRegionScope: SimAwsAccountRegionScope;
+    readonly stackName: string;
+}
+/**
+ * Make the Stack ID for a Stack being created.
+ *
+ * The Account and Region are the ones the Stack is being created in, and the
+ * UUID on the end is what makes this Stack a different Stack from the last one
+ * of the same name.
+ */
+export declare function makeSimCfnStackId(properties: SimCfnStackIdProperties): SimCfnStackId;
+/**
+ * Whether a value naming a Stack is a Stack ID rather than a Stack name.
+ *
+ * `DescribeStacks` takes either in `StackName`, so what a caller gave has to be
+ * read before it can be looked up.
+ */
+export declare function isSimCfnStackId(value: string): boolean;
+export {};

package/dist/service/cloudformation/stack/sim-cfn-stack-id.js

@@ -0,0 +1,24 @@
+import { randomUUID } from "node:crypto";
+import { parseSimArn } from "../../aws/arn.js";
+/**
+ * Make the Stack ID for a Stack being created.
+ *
+ * The Account and Region are the ones the Stack is being created in, and the
+ * UUID on the end is what makes this Stack a different Stack from the last one
+ * of the same name.
+ */
+export function makeSimCfnStackId(properties) {
+    const { accountRegionScope, stackName } = properties;
+    const { accountId, regionName } = accountRegionScope;
+    return `arn:aws:cloudformation:${regionName}:${accountId}:stack/${stackName}/${randomUUID()}`;
+}
+/**
+ * Whether a value naming a Stack is a Stack ID rather than a Stack name.
+ *
+ * `DescribeStacks` takes either in `StackName`, so what a caller gave has to be
+ * read before it can be looked up.
+ */
+export function isSimCfnStackId(value) {
+    const arn = parseSimArn(value);
+    return arn?.service === "cloudformation" && arn.resourceType === "stack";
+}

package/dist/service/cloudformation/stack/sim-cfn-stack-resource-operations.d.ts

@@ -5,9 +5,11 @@ import type { SimAwsAccountRegionScope } from "../../aws/sim-aws-account-region-
 import type { SimCfnBinding } from "../bind/sim-cfn-binding.js";
 import type { SimCdkOutContext } from "../cdk/sim-cdk-out-context.js";
 import type { SimCfnResource } from "../resource/sim-cfn-resource.js";
+import { SimCfnResourceRetention } from "../resource/delete/sim-cfn-resource-retention.js";
 import type { SimCfnTemplate } from "../template/sim-cfn-template.js";
 import type { SimCfnResourceOrder } from "./deploy/sim-cfn-resource-order.js";
 import { SimCfnStackUpdater } from "./update/sim-cfn-stack-updater.js";
+import type { SimCfnStackResourceReplacement } from "./update/sim-cfn-stack-update-plan.js";
 import type { SimCloudFormationStackName } from "./sim-cfn-stack.js";
 interface SimCfnStackUpdateProperties {
     readonly background: BackgroundScheduler;
@@ -52,6 +54,15 @@ export declare class SimCfnStackResourceOperations {
     private readonly resourceOrder;
     private cdkOutContext;
     private caller;
+    /**
+     * Resources an update kept in simulated AWS.
+     *
+     * They are held here because the Stack cannot hold them. A replaced Resource
+     * gives its logical ID up to the Resource created in its place as soon as the
+     * update applies. A teardown's retained Resources are still on the Stack, and
+     * are read off it.
+     */
+    private readonly retainedByUpdates;
     constructor(properties: SimCfnStackResourceOperationsProperties);
     /**
      * Take on what an update brings with it, for this and every later operation.
@@ -78,19 +89,56 @@ export declare class SimCfnStackResourceOperations {
      * Create the given Resources, in dependency order among the whole Stack.
      */
     create(resources: ReadonlyMap<string, SimCfnResource>, creating: readonly SimCfnResource[]): Promise<void>;
+    /** Resources an update kept in simulated AWS. */
+    get retainedResources(): readonly SimCfnResource[];
+    /**
+     * Refuse a teardown that names a Resource the Stack does not have, before
+     * anything is deleted.
+     */
+    assertRetainable(resources: ReadonlyMap<string, SimCfnResource>, retainResources: readonly string[] | undefined): void;
+    /**
+     * Delete every Resource in the given Stack Resource map, apart from any the
+     * teardown named as ones to keep.
+     */
+    deleteAll(resources: ReadonlyMap<string, SimCfnResource>, retainResources?: readonly string[]): Promise<void>;
     /**
-     * Delete every Resource in the given Stack Resource map.
+     * Take a record of the Resources an update kept, which the Stack is about to
+     * stop holding.
      */
-    deleteAll(resources: ReadonlyMap<string, SimCfnResource>): Promise<void>;
+    recordRetained(resources: readonly SimCfnResource[]): void;
     /**
      * Delete the given Resources, in reverse dependency order among the whole
      * Stack.
      */
-    delete(resources: ReadonlyMap<string, SimCfnResource>, deleting: readonly SimCfnResource[]): Promise<void>;
+    delete(resources: ReadonlyMap<string, SimCfnResource>, deleting: readonly SimCfnResource[], retention?: SimCfnResourceRetention): Promise<void>;
+    /**
+     * Validate every Resource replacement before the update changes the Stack.
+     */
+    assertUpdatesAllowed(currentResources: ReadonlyMap<string, SimCfnResource>, updatedResources: ReadonlyMap<string, SimCfnResource>, replacements: readonly SimCfnStackResourceReplacement[]): Promise<void>;
     /**
      * An update of this Stack from a changed template, in the same scope.
      */
     updater(properties: SimCfnStackUpdateProperties): SimCfnStackUpdater;
+    /**
+     * Put this Stack's Resources back on the template it was deployed from, over
+     * whatever a failed update left behind.
+     *
+     * The difference is worked out from the Resources the Stack holds now, not
+     * from either template. A failure part way through is reconciled from where
+     * it stopped. Nothing asserts that there is a change to make. An update that
+     * failed before it touched a Resource has nothing to undo, and that is a
+     * finished rollback.
+     *
+     * A Resource the failed update replaced is created again empty. The deployed
+     * one was deleted to make room for the replacement, and there is nothing left
+     * to put back.
+     */
+    rollBack(properties: SimCfnStackUpdateProperties): Promise<void>;
+    /**
+     * What a teardown of these Resources is to leave behind: the ones it named,
+     * and the ones their own DeletionPolicy keeps.
+     */
+    private teardownRetention;
     private publishAssets;
     private creator;
     private deleter;