@kensio/yulin 1.21.2 → 1.21.4

package/dist/service/cloudformation/stack/sim-cfn-stack-resource-operations.js

@@ -1,7 +1,10 @@
 import { SimCdkAssetsPublisher } from "../cdk/assets/sim-cdk-assets-publisher.js";
+import { SimCfnResourceRetention } from "../resource/delete/sim-cfn-resource-retention.js";
+import { simCfnStackRetainedLogicalIds } from "./teardown/sim-cfn-stack-retained-logical-ids.js";
 import { SimCfnStackResourceCreator } from "./deploy/sim-cfn-stack-resource-creator.js";
 import { SimCfnStackResourceDeleter } from "./teardown/sim-cfn-stack-resource-deleter.js";
 import { SimCfnStackUpdater } from "./update/sim-cfn-stack-updater.js";
+import { SimCfnResourceUpdateValidator } from "../resource/update/sim-cfn-resource-update-validator.js";
 /**
  * What a Stack can ask simulated AWS to do with its Resources.
  *
@@ -23,6 +26,15 @@ export class SimCfnStackResourceOperations {
     resourceOrder;
     cdkOutContext;
     caller;
+    /**
+     * Resources an update kept in simulated AWS.
+     *
+     * They are held here because the Stack cannot hold them. A replaced Resource
+     * gives its logical ID up to the Resource created in its place as soon as the
+     * update applies. A teardown's retained Resources are still on the Stack, and
+     * are read off it.
+     */
+    retainedByUpdates = [];
     constructor(properties) {
         const { simAws, accountRegionScope, stackName, cdkOutContext, bindings, caller, resourceOrder, } = properties;
         this.simAws = simAws;
@@ -64,18 +76,53 @@ export class SimCfnStackResourceOperations {
         await this.publishAssets();
         await this.creator(resources).create(creating);
     }
+    /** Resources an update kept in simulated AWS. */
+    get retainedResources() {
+        return this.retainedByUpdates;
+    }
     /**
-     * Delete every Resource in the given Stack Resource map.
+     * Refuse a teardown that names a Resource the Stack does not have, before
+     * anything is deleted.
      */
-    async deleteAll(resources) {
-        await this.deleter(resources).deleteAll();
+    assertRetainable(resources, retainResources) {
+        this.teardownRetention(resources, retainResources);
+    }
+    /**
+     * Delete every Resource in the given Stack Resource map, apart from any the
+     * teardown named as ones to keep.
+     */
+    async deleteAll(resources, retainResources) {
+        await this.deleter(resources, this.teardownRetention(resources, retainResources)).deleteAll();
+    }
+    /**
+     * Take a record of the Resources an update kept, which the Stack is about to
+     * stop holding.
+     */
+    recordRetained(resources) {
+        this.retainedByUpdates.push(...resources);
     }
     /**
      * Delete the given Resources, in reverse dependency order among the whole
      * Stack.
      */
-    async delete(resources, deleting) {
-        await this.deleter(resources).delete(deleting);
+    async delete(resources, deleting, retention) {
+        await this.deleter(resources, retention).delete(deleting);
+    }
+    /**
+     * Validate every Resource replacement before the update changes the Stack.
+     */
+    async assertUpdatesAllowed(currentResources, updatedResources, replacements) {
+        await Promise.all(replacements.map(async ({ current, updated }) => {
+            await new SimCfnResourceUpdateValidator({
+                current,
+                updated,
+            }).assertAllowed({
+                simAws: this.simAws,
+                currentResources,
+                updatedResources,
+                caller: this.caller,
+            });
+        }));
     }
     /**
      * An update of this Stack from a changed template, in the same scope.
@@ -91,6 +138,36 @@ export class SimCfnStackResourceOperations {
             updated,
         });
     }
+    /**
+     * Put this Stack's Resources back on the template it was deployed from, over
+     * whatever a failed update left behind.
+     *
+     * The difference is worked out from the Resources the Stack holds now, not
+     * from either template. A failure part way through is reconciled from where
+     * it stopped. Nothing asserts that there is a change to make. An update that
+     * failed before it touched a Resource has nothing to undo, and that is a
+     * finished rollback.
+     *
+     * A Resource the failed update replaced is created again empty. The deployed
+     * one was deleted to make room for the replacement, and there is nothing left
+     * to put back.
+     */
+    async rollBack(properties) {
+        await this.updater(properties).apply();
+    }
+    /**
+     * What a teardown of these Resources is to leave behind: the ones it named,
+     * and the ones their own DeletionPolicy keeps.
+     */
+    teardownRetention(resources, retainResources) {
+        return new SimCfnResourceRetention({
+            named: simCfnStackRetainedLogicalIds({
+                stackName: this.stackName,
+                resources,
+                retainResources,
+            }),
+        });
+    }
     async publishAssets() {
         await new SimCdkAssetsPublisher({
             simAws: this.simAws,
@@ -111,12 +188,13 @@ export class SimCfnStackResourceOperations {
             resourceOrder: this.resourceOrder,
         });
     }
-    deleter(resources) {
+    deleter(resources, retention) {
         return new SimCfnStackResourceDeleter({
             simAws: this.simAws,
             resources,
             stackName: this.stackName,
             caller: this.caller,
+            retention,
         });
     }
 }

package/dist/service/cloudformation/stack/sim-cfn-stack.d.ts

@@ -6,6 +6,7 @@ import { SimCfnStackDeploymentLifecycle } from "./deploy/sim-cfn-stack-deploymen
 import { SimCfnStackUpdateLifecycle } from "./update/sim-cfn-stack-update-lifecycle.js";
 import type { SimCfnStackOutput } from "./output/sim-cfn-stack-output.js";
 import type { SimCfnDeployedStack } from "./sim-cfn-deployed-stack.type.js";
+import type { SimCfnStackId } from "./sim-cfn-stack-id.js";
 import type { SimCloudFormationStackProperties, SimCloudFormationStackStatus, SimCfnStackUpdateProperties, SimCloudFormationStackName } from "./sim-cfn-stack.type.js";
 /**
  * Lightweight simulated CloudFormation Stack.
@@ -27,8 +28,8 @@ export declare class SimCfnStack implements SimCfnDeployedStack {
     readonly updating: SimCfnStackUpdateLifecycle;
     readonly deletion: SimCfnStackDeletionLifecycle;
     readonly stackName: SimCloudFormationStackName;
+    readonly stackId: SimCfnStackId;
     readonly resourceMap: Map<string, SimCfnResource>;
-    template: CfnTemplateBodyRecord;
     outputs: Map<string, SimCfnStackOutput>;
     private readonly background;
     private readonly operations;
@@ -38,15 +39,15 @@ export declare class SimCfnStack implements SimCfnDeployedStack {
     constructor(properties: SimCloudFormationStackProperties);
     /** The externally visible Stack status. */
     get status(): SimCloudFormationStackStatus;
+    /** The parsed template this Stack is deployed from. */
+    get currentTemplate(): SimCfnTemplate;
+    /** The template body this Stack is deployed from. */
+    get template(): CfnTemplateBodyRecord;
     /** The error the operation the status reports failed with, if it failed. */
     get error(): Error | undefined;
-    /**
-     * Start deploying this simulated Stack into simulated AWS.
-     */
+    /** Start deploying this simulated Stack into simulated AWS. */
     deploy(): Promise<void>;
-    /**
-     * Wait for the scheduled deployment task to finish.
-     */
+    /** Wait for the scheduled deployment task to finish. */
     waitForDeployComplete(): Promise<void>;
     /**
      * Apply a changed template to this deployed Stack.
@@ -64,11 +65,13 @@ export declare class SimCfnStack implements SimCfnDeployedStack {
      * A template that came from a synthesis of its own brings the cloud assembly
      * it was written into with it, so Resources it replaces read the assets that
      * synthesis staged rather than the ones the Stack was deployed with.
+     *
+     * An update that fails is rolled back onto the template the Stack was
+     * deployed from, which the Stack goes on holding for as long as the update
+     * runs.
      */
     update(template: SimCfnTemplate, properties?: SimCfnStackUpdateProperties): Promise<void>;
-    /**
-     * Wait for the scheduled Stack update to finish.
-     */
+    /** Wait for the scheduled Stack update to finish. */
     waitForUpdateComplete(): Promise<void>;
     /**
      * Start deleting this Stack from simulated AWS.
@@ -77,11 +80,18 @@ export declare class SimCfnStack implements SimCfnDeployedStack {
      * before the Resources have gone. The optional onDeleteComplete callback runs
      * once the teardown has finished successfully, which is when the Stack name
      * becomes free to use again.
+     *
+     * Resources named in retainResources are checked against the Stack before
+     * the teardown is scheduled. A caller naming one the Stack does not have is
+     * refused there, where a check in the background would only fail the
+     * deletion.
+     *
+     * The names are copied as the request is accepted. The teardown runs in the
+     * background, and a caller holding the array it passed could otherwise change
+     * which Resources are kept after the Stack agreed to keep them.
      */
     delete(properties?: SimCfnStackDeleteProperties): Promise<void>;
-    /**
-     * Wait for the scheduled Stack deletion to finish.
-     */
+    /** Wait for the scheduled Stack deletion to finish. */
     waitForDeleteComplete(): Promise<void>;
     /**
      * Delete this Stack's Resources from simulated AWS, in reverse dependency
@@ -90,7 +100,7 @@ export declare class SimCfnStack implements SimCfnDeployedStack {
      * The Resource half of deleting a Stack, without the Stack-level status or
      * the Stack name release that delete() puts on top of it.
      */
-    teardown(): Promise<void>;
+    teardown(properties?: SimCfnStackDeleteProperties): Promise<void>;
     /** Every Stack Resource, in the order the template declared them. */
     get resources(): readonly SimCfnResource[];
     /**
@@ -111,12 +121,14 @@ export declare class SimCfnStack implements SimCfnDeployedStack {
     get inertResources(): readonly SimCfnResource[];
     /** Resources a teardown recorded rather than deleted. */
     get skippedResourceDeletions(): readonly SimCfnResource[];
-    /** Resources a teardown left in simulated AWS, as their policy says to. */
+    /**
+     * Resources left in simulated AWS, whether a teardown stepped over them or
+     * an update replaced them and kept the deployed one.
+     */
     get retainedResources(): readonly SimCfnResource[];
     /** Every property or Parameter that did not reach simulated AWS as written. */
     get ignoredProperties(): readonly SimCfnIgnoredProperty[];
     private get report();
-    private createResources;
     private resolveOutputs;
 }
 export { type SimCfnStackUpdateProperties, type SimCloudFormationStackName, type SimCloudFormationStackStatus, } from "./sim-cfn-stack.type.js";

package/dist/service/cloudformation/stack/sim-cfn-stack.js

@@ -29,8 +29,8 @@ export class SimCfnStack {
     updating;
     deletion;
     stackName;
+    stackId;
     resourceMap;
-    template;
     outputs = new Map();
     background;
     operations;
@@ -38,12 +38,12 @@ export class SimCfnStack {
     stackOutputs;
     cfnTemplate;
     constructor(properties) {
-        const { simAws, accountRegionScope, background, stackName, template, cdkOutContext, bindings, caller, resourceOrder, exports, } = properties;
+        const { simAws, accountRegionScope, background, stackName, stackId, template, cdkOutContext, bindings, caller, resourceOrder, exports, } = properties;
         this.background = background;
         this.stackName = stackName;
+        this.stackId = stackId;
         this.stackOutputs = new SimCfnStackOutputs({ stackName, exports });
         this.cfnTemplate = template;
-        this.template = this.cfnTemplate.template;
         this.resourceMap = makeSimCfnStackResourceMap({
             accountRegionScope,
             background,
@@ -67,14 +67,15 @@ export class SimCfnStack {
             background,
             stackName,
             runDeployment: async () => {
-                await this.createResources();
+                await this.operations.createAll(this.resourceMap);
+                this.resolveOutputs();
             },
         });
         this.updating = new SimCfnStackUpdateLifecycle({ background, stackName });
         this.deletion = new SimCfnStackDeletionLifecycle({
             background,
-            runTeardown: async () => {
-                await this.teardown();
+            runTeardown: async (deleteProperties) => {
+                await this.teardown(deleteProperties);
             },
         });
         this.operationStatus = new SimCfnStackOperationStatus({
@@ -87,19 +88,23 @@ export class SimCfnStack {
     get status() {
         return this.operationStatus.status;
     }
+    /** The parsed template this Stack is deployed from. */
+    get currentTemplate() {
+        return this.cfnTemplate;
+    }
+    /** The template body this Stack is deployed from. */
+    get template() {
+        return this.cfnTemplate.template;
+    }
     /** The error the operation the status reports failed with, if it failed. */
     get error() {
         return this.operationStatus.error;
     }
-    /**
-     * Start deploying this simulated Stack into simulated AWS.
-     */
+    /** Start deploying this simulated Stack into simulated AWS. */
     async deploy() {
         await this.lifecycle.deploy();
     }
-    /**
-     * Wait for the scheduled deployment task to finish.
-     */
+    /** Wait for the scheduled deployment task to finish. */
     async waitForDeployComplete() {
         await this.lifecycle.waitForComplete();
     }
@@ -119,13 +124,18 @@ export class SimCfnStack {
      * A template that came from a synthesis of its own brings the cloud assembly
      * it was written into with it, so Resources it replaces read the assets that
      * synthesis staged rather than the ones the Stack was deployed with.
+     *
+     * An update that fails is rolled back onto the template the Stack was
+     * deployed from, which the Stack goes on holding for as long as the update
+     * runs.
      */
     async update(template, properties = {}) {
         this.updating.assertNotUpdating();
+        const deployed = this.cfnTemplate;
         const updater = this.operations.updater({
             background: this.background,
             resources: this.resourceMap,
-            current: this.cfnTemplate,
+            current: deployed,
             updated: template,
         });
         updater.assertHasChanges();
@@ -134,15 +144,24 @@ export class SimCfnStack {
         // deployed it.
         this.operations.useUpdate(properties);
         this.cfnTemplate = template;
-        this.template = template.template;
-        await this.updating.update(async () => {
-            await updater.apply();
-            this.resolveOutputs();
+        await this.updating.update({
+            apply: async () => {
+                await updater.apply();
+                this.resolveOutputs();
+            },
+            rollBack: async () => {
+                await this.operations.rollBack({
+                    background: this.background,
+                    resources: this.resourceMap,
+                    current: this.cfnTemplate,
+                    updated: deployed,
+                });
+                this.cfnTemplate = deployed;
+                this.resolveOutputs();
+            },
         });
     }
-    /**
-     * Wait for the scheduled Stack update to finish.
-     */
+    /** Wait for the scheduled Stack update to finish. */
     async waitForUpdateComplete() {
         await this.updating.waitForComplete();
     }
@@ -153,13 +172,22 @@ export class SimCfnStack {
      * before the Resources have gone. The optional onDeleteComplete callback runs
      * once the teardown has finished successfully, which is when the Stack name
      * becomes free to use again.
+     *
+     * Resources named in retainResources are checked against the Stack before
+     * the teardown is scheduled. A caller naming one the Stack does not have is
+     * refused there, where a check in the background would only fail the
+     * deletion.
+     *
+     * The names are copied as the request is accepted. The teardown runs in the
+     * background, and a caller holding the array it passed could otherwise change
+     * which Resources are kept after the Stack agreed to keep them.
      */
     async delete(properties = {}) {
-        await this.deletion.delete(properties);
+        const retainResources = [...(properties.retainResources ?? [])];
+        this.operations.assertRetainable(this.resourceMap, retainResources);
+        await this.deletion.delete({ ...properties, retainResources });
     }
-    /**
-     * Wait for the scheduled Stack deletion to finish.
-     */
+    /** Wait for the scheduled Stack deletion to finish. */
     async waitForDeleteComplete() {
         await this.deletion.waitForComplete();
     }
@@ -170,8 +198,8 @@ export class SimCfnStack {
      * The Resource half of deleting a Stack, without the Stack-level status or
      * the Stack name release that delete() puts on top of it.
      */
-    async teardown() {
-        await this.operations.deleteAll(this.resourceMap);
+    async teardown(properties = {}) {
+        await this.operations.deleteAll(this.resourceMap, properties.retainResources);
         this.stackOutputs.release();
     }
     /** Every Stack Resource, in the order the template declared them. */
@@ -209,9 +237,12 @@ export class SimCfnStack {
     get skippedResourceDeletions() {
         return this.report.deletionSkipped;
     }
-    /** Resources a teardown left in simulated AWS, as their policy says to. */
+    /**
+     * Resources left in simulated AWS, whether a teardown stepped over them or
+     * an update replaced them and kept the deployed one.
+     */
     get retainedResources() {
-        return this.report.retained;
+        return [...this.report.retained, ...this.operations.retainedResources];
     }
     /** Every property or Parameter that did not reach simulated AWS as written. */
     get ignoredProperties() {
@@ -220,10 +251,6 @@ export class SimCfnStack {
     get report() {
         return new SimCfnStackResourceReport(this.resourceMap, this.cfnTemplate);
     }
-    async createResources() {
-        await this.operations.createAll(this.resourceMap);
-        this.resolveOutputs();
-    }
     resolveOutputs() {
         this.outputs = this.stackOutputs.resolve(this.cfnTemplate, this.resourceMap);
     }

package/dist/service/cloudformation/stack/sim-cfn-stack.type.d.ts

@@ -8,8 +8,9 @@ import type { SimCdkOutContext } from "../cdk/sim-cdk-out-context.js";
 import type { SimCfnBinding } from "../bind/sim-cfn-binding.js";
 import type { SimCfnExports } from "../export/sim-cfn-exports.js";
 import type { SimCfnResourceOrder } from "./deploy/sim-cfn-resource-order.js";
+import type { SimCfnStackId } from "./sim-cfn-stack-id.js";
 export type SimCloudFormationStackName = Brand<string, "SimCloudFormationStackName">;
-export type SimCloudFormationStackStatus = "REVIEW_IN_PROGRESS" | "CREATE_IN_PROGRESS" | "CREATE_COMPLETE" | "CREATE_FAILED" | "UPDATE_IN_PROGRESS" | "UPDATE_COMPLETE" | "UPDATE_FAILED" | "DELETE_IN_PROGRESS" | "DELETE_COMPLETE" | "DELETE_FAILED";
+export type SimCloudFormationStackStatus = "REVIEW_IN_PROGRESS" | "CREATE_IN_PROGRESS" | "CREATE_COMPLETE" | "CREATE_FAILED" | "UPDATE_IN_PROGRESS" | "UPDATE_COMPLETE" | "UPDATE_FAILED" | "UPDATE_ROLLBACK_IN_PROGRESS" | "UPDATE_ROLLBACK_COMPLETE" | "UPDATE_ROLLBACK_FAILED" | "DELETE_IN_PROGRESS" | "DELETE_COMPLETE" | "DELETE_FAILED";
 export interface SimCfnStackUpdateProperties {
     /**
      * The CDK cloud assembly the new template was synthesized into, when it came
@@ -29,6 +30,11 @@ export interface SimCloudFormationStackProperties {
     readonly accountRegionScope: SimAwsAccountRegionScope;
     readonly background: BackgroundScheduler;
     readonly stackName: SimCloudFormationStackName;
+    /**
+     * The unique ID this Stack was created with, which is what a deleted Stack
+     * is still described by once its name has gone back into circulation.
+     */
+    readonly stackId: SimCfnStackId;
     readonly template: SimCfnTemplate;
     readonly cdkOutContext?: SimCdkOutContext | undefined;
     readonly bindings?: readonly SimCfnBinding[] | undefined;

package/dist/service/cloudformation/stack/teardown/sim-cfn-stack-deletion-lifecycle.d.ts

@@ -10,7 +10,7 @@ interface SimCfnStackDeletionLifecycleProperties {
      * stays outside this class, while status, error and completion handling stay
      * inside it.
      */
-    readonly runTeardown: () => Promise<void>;
+    readonly runTeardown: (properties: SimCfnStackDeleteProperties) => Promise<void>;
 }
 export interface SimCfnStackDeleteProperties {
     /**
@@ -20,6 +20,12 @@ export interface SimCfnStackDeleteProperties {
      * lifecycle only says when the name is free rather than freeing it.
      */
     readonly onDeleteComplete?: (() => void) | undefined;
+    /**
+     * Resources to leave in simulated AWS, named by logical ID or CDK construct
+     * ID. What DeleteStack RetainResources asks for, and it overrides whatever
+     * the Resource's own DeletionPolicy says.
+     */
+    readonly retainResources?: readonly string[] | undefined;
 }
 /**
  * Owns the simulated CloudFormation Stack deletion lifecycle state.

package/dist/service/cloudformation/stack/teardown/sim-cfn-stack-deletion-lifecycle.js

@@ -58,7 +58,9 @@ export class SimCfnStackDeletionLifecycle {
         });
         await scheduler.sequence();
         this.completePromise = scheduler.schedule({
-            operation: this.runTeardown,
+            operation: async () => {
+                await this.runTeardown(properties);
+            },
             onSuccess: () => {
                 this.#status = "DELETE_COMPLETE";
                 properties.onDeleteComplete?.();

package/dist/service/cloudformation/stack/teardown/sim-cfn-stack-resource-batch-deleter.d.ts

@@ -1,10 +1,12 @@
 import type { SimAws } from "../../../aws/sim-aws.js";
 import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
 import type { SimCfnResource } from "../../resource/sim-cfn-resource.js";
+import type { SimCfnResourceRetention } from "../../resource/delete/sim-cfn-resource-retention.js";
 interface SimCfnStackResourceBatchDeleterProperties {
     readonly simAws: SimAws;
     readonly resources: ReadonlyMap<string, SimCfnResource>;
     readonly caller?: SimAwsCaller | undefined;
+    readonly retention?: SimCfnResourceRetention | undefined;
 }
 /**
  * Deletes one batch of Stack Resources nothing still depends on.
@@ -20,6 +22,7 @@ export declare class SimCfnStackResourceBatchDeleter {
     private readonly simAws;
     private readonly resources;
     private readonly caller;
+    private readonly retention;
     constructor(properties: SimCfnStackResourceBatchDeleterProperties);
     /**
      * Delete the supplied Resources concurrently.

package/dist/service/cloudformation/stack/teardown/sim-cfn-stack-resource-batch-deleter.js

@@ -12,10 +12,12 @@ export class SimCfnStackResourceBatchDeleter {
     simAws;
     resources;
     caller;
+    retention;
     constructor(properties) {
         this.simAws = properties.simAws;
         this.resources = properties.resources;
         this.caller = properties.caller;
+        this.retention = properties.retention;
     }
     /**
      * Delete the supplied Resources concurrently.
@@ -28,6 +30,7 @@ export class SimCfnStackResourceBatchDeleter {
                 simAws: this.simAws,
                 resources: this.resources,
                 caller: this.caller,
+                retention: this.retention,
             });
         }));
     }

package/dist/service/cloudformation/stack/teardown/sim-cfn-stack-resource-deleter.d.ts

@@ -1,11 +1,14 @@
 import type { SimAws } from "../../../aws/sim-aws.js";
 import type { SimAwsCaller } from "../../../aws/caller/sim-aws-caller.js";
 import type { SimCfnResource } from "../../resource/sim-cfn-resource.js";
+import type { SimCfnResourceRetention } from "../../resource/delete/sim-cfn-resource-retention.js";
 interface SimCfnStackResourceDeleterProperties {
     readonly simAws: SimAws;
     readonly resources: ReadonlyMap<string, SimCfnResource>;
     readonly stackName: string;
     readonly caller?: SimAwsCaller | undefined;
+    /** Which of the Resources being deleted are to be left in simulated AWS. */
+    readonly retention?: SimCfnResourceRetention | undefined;
 }
 /**
  * Orchestrates reverse-dependency-ordered deletion of a Stack's Resources.

package/dist/service/cloudformation/stack/teardown/sim-cfn-stack-resource-deleter.js

@@ -20,13 +20,14 @@ export class SimCfnStackResourceDeleter {
     stackName;
     batchDeleter;
     constructor(properties) {
-        const { simAws, resources, stackName, caller } = properties;
+        const { simAws, resources, stackName, caller, retention } = properties;
         this.resources = resources;
         this.stackName = stackName;
         this.batchDeleter = new SimCfnStackResourceBatchDeleter({
             simAws,
             resources,
             caller,
+            retention,
         });
     }
     /**

package/dist/service/cloudformation/stack/teardown/sim-cfn-stack-retained-logical-ids.d.ts

@@ -0,0 +1,18 @@
+import type { SimCfnResource } from "../../resource/sim-cfn-resource.js";
+interface SimCfnStackRetainedLogicalIdsProperties {
+    readonly stackName: string;
+    readonly resources: ReadonlyMap<string, SimCfnResource>;
+    /** The identifiers DeleteStack named in RetainResources. */
+    readonly retainResources?: readonly string[] | undefined;
+}
+/**
+ * The logical IDs a DeleteStack call asked to keep, resolved against the Stack.
+ *
+ * An identifier the Stack has no Resource for is refused, as CloudFormation
+ * refuses one. A caller who misspells the Resource they meant to keep would
+ * otherwise watch it go. CDK construct IDs resolve here as well as logical IDs,
+ * the same way `getResource(...)` takes either. A test written against a
+ * synthesized template then needs no hashed logical ID.
+ */
+export declare function simCfnStackRetainedLogicalIds(properties: SimCfnStackRetainedLogicalIdsProperties): ReadonlySet<string>;
+export {};

package/dist/service/cloudformation/stack/teardown/sim-cfn-stack-retained-logical-ids.js

@@ -0,0 +1,30 @@
+import { SimCloudFormationValidationError } from "../../error/sim-cloudformation.error.js";
+import { SimCfnStackResourceLookup } from "../resource-map/sim-cfn-stack-resource-lookup.js";
+/**
+ * The logical IDs a DeleteStack call asked to keep, resolved against the Stack.
+ *
+ * An identifier the Stack has no Resource for is refused, as CloudFormation
+ * refuses one. A caller who misspells the Resource they meant to keep would
+ * otherwise watch it go. CDK construct IDs resolve here as well as logical IDs,
+ * the same way `getResource(...)` takes either. A test written against a
+ * synthesized template then needs no hashed logical ID.
+ */
+export function simCfnStackRetainedLogicalIds(properties) {
+    const { stackName, resources, retainResources = [] } = properties;
+    const lookup = new SimCfnStackResourceLookup(resources);
+    const retained = new Set();
+    const missing = [];
+    for (const identifier of retainResources) {
+        const resource = lookup.find(identifier);
+        if (resource === undefined) {
+            missing.push(identifier);
+        }
+        else {
+            retained.add(resource.logicalId);
+        }
+    }
+    if (missing.length > 0) {
+        throw new SimCloudFormationValidationError(`Invalid RetainResources: [${missing.join(", ")}] not found in Stack ${stackName}`);
+    }
+    return retained;
+}

package/dist/service/cloudformation/stack/update/sim-cfn-stack-update-guard.d.ts

@@ -0,0 +1,9 @@
+import type { SimCloudFormationStackName, SimCloudFormationStackStatus } from "../sim-cfn-stack.type.js";
+/**
+ * Refuse an update while one is already running, or being rolled back.
+ *
+ * CloudFormation takes one update at a time. A second here would read the
+ * difference to apply from a Stack half way through the first, or from one
+ * being put back on the template it was deployed from.
+ */
+export declare function assertSimCfnStackNotUpdating(stackName: SimCloudFormationStackName, status: SimCloudFormationStackStatus | undefined): void;

package/dist/service/cloudformation/stack/update/sim-cfn-stack-update-guard.js

@@ -0,0 +1,14 @@
+import { SimCloudFormationValidationError } from "../../error/sim-cloudformation.error.js";
+/**
+ * Refuse an update while one is already running, or being rolled back.
+ *
+ * CloudFormation takes one update at a time. A second here would read the
+ * difference to apply from a Stack half way through the first, or from one
+ * being put back on the template it was deployed from.
+ */
+export function assertSimCfnStackNotUpdating(stackName, status) {
+    if (status === "UPDATE_IN_PROGRESS" ||
+        status === "UPDATE_ROLLBACK_IN_PROGRESS") {
+        throw new SimCloudFormationValidationError(`Stack ${stackName} is in ${status} state and can not be updated`);
+    }
+}