@intentius/chant-lexicon-aws 0.0.18 → 0.0.22

package/src/generated/lexicon-aws.json

@@ -2838,6 +2838,9 @@
       }
     ],
     "propertyConstraints": {
+      "ActionsEnabled": {
+        "default": true
+      },
       "TreatMissingData": {
         "enum": [
           "breaching",
@@ -2845,9 +2848,6 @@
           "missing",
           "notBreaching"
         ]
-      },
-      "ActionsEnabled": {
-        "default": true
       }
     },
     "createOnly": [
@@ -23182,6 +23182,11 @@
       "tagUpdatable": true
     }
   },
+  "ConnectQueue_EmailAddress": {
+    "resourceType": "AWS::Connect::Queue.EmailAddress",
+    "kind": "property",
+    "lexicon": "aws"
+  },
   "ConnectQueue_OutboundCallerConfig": {
     "resourceType": "AWS::Connect::Queue.OutboundCallerConfig",
     "kind": "property",
@@ -23357,6 +23362,11 @@
     "kind": "property",
     "lexicon": "aws"
   },
+  "ConnectSecurityProfile_FlowModule": {
+    "resourceType": "AWS::Connect::SecurityProfile.FlowModule",
+    "kind": "property",
+    "lexicon": "aws"
+  },
   "ConnectSecurityProfile_PrimaryAttributeAccessControlConfigurationItem": {
     "resourceType": "AWS::Connect::SecurityProfile.PrimaryAttributeAccessControlConfigurationItem",
     "kind": "property",
@@ -24776,49 +24786,49 @@
       "DeploymentDetails": "DeploymentDetails",
       "GameServerContainerGroupDefinitionArn": "GameServerContainerGroupDefinitionArn",
       "PerInstanceContainerGroupDefinitionArn": "PerInstanceContainerGroupDefinitionArn",
-      "MaximumGameServerContainerGroupsPerInstance": "MaximumGameServerContainerGroupsPerInstance"
+      "MaximumGameServerContainerGroupsPerInstance": "MaximumGameServerContainerGroupsPerInstance",
+      "Locations_*_PlayerGatewayStatus": "Locations.*.PlayerGatewayStatus"
     },
     "propertyConstraints": {
-      "GameServerContainerGroupDefinitionName": {
-        "pattern": "^[a-zA-Z0-9\\-]+$|^arn:.*:containergroupdefinition\\/[a-zA-Z0-9\\-]+(:[0-9]+)?$",
+      "FleetId": {
+        "pattern": "^[a-z]*fleet-[a-zA-Z0-9\\-]+",
         "minLength": 1,
-        "maxLength": 512
+        "maxLength": 128
+      },
+      "FleetRoleArn": {
+        "pattern": "^arn:aws(-.*)?:[a-z-]+:(([a-z]+-)+[0-9])?:([0-9]{12})?:[^.]+$",
+        "minLength": 1,
+        "maxLength": 256
       },
       "Description": {
         "minLength": 1,
         "maxLength": 1024
       },
-      "MaximumGameServerContainerGroupsPerInstance": {
-        "minimum": 1,
-        "maximum": 5000
-      },
-      "GameServerContainerGroupsPerInstance": {
-        "minimum": 1,
-        "maximum": 5000
+      "GameServerContainerGroupDefinitionName": {
+        "pattern": "^[a-zA-Z0-9\\-]+$|^arn:.*:containergroupdefinition\\/[a-zA-Z0-9\\-]+(:[0-9]+)?$",
+        "minLength": 1,
+        "maxLength": 512
       },
-      "PerInstanceContainerGroupDefinitionArn": {
+      "GameServerContainerGroupDefinitionArn": {
         "pattern": "^arn:.*:containergroupdefinition\\/[a-zA-Z0-9\\-]+(:[0-9]+)?$|^$",
         "maxLength": 512
       },
-      "FleetId": {
-        "pattern": "^[a-z]*fleet-[a-zA-Z0-9\\-]+",
-        "minLength": 1,
-        "maxLength": 128
-      },
-      "InstanceType": {
+      "PerInstanceContainerGroupDefinitionName": {
+        "pattern": "^[a-zA-Z0-9\\-]+$|^arn:.*:containergroupdefinition\\/[a-zA-Z0-9\\-]+(:[0-9]+)?$",
         "minLength": 1,
-        "maxLength": 1024
+        "maxLength": 512
       },
-      "FleetArn": {
-        "pattern": "^arn:.*:[a-z]*fleet\\/[a-z]*fleet-[a-zA-Z0-9\\-]+$",
-        "minLength": 1,
+      "PerInstanceContainerGroupDefinitionArn": {
+        "pattern": "^arn:.*:containergroupdefinition\\/[a-zA-Z0-9\\-]+(:[0-9]+)?$|^$",
         "maxLength": 512
       },
-      "BillingType": {
-        "enum": [
-          "ON_DEMAND",
-          "SPOT"
-        ]
+      "GameServerContainerGroupsPerInstance": {
+        "minimum": 1,
+        "maximum": 5000
+      },
+      "MaximumGameServerContainerGroupsPerInstance": {
+        "minimum": 1,
+        "maximum": 5000
       },
       "Status": {
         "enum": [
@@ -24831,15 +24841,15 @@
           "DELETING"
         ]
       },
-      "FleetRoleArn": {
-        "pattern": "^arn:aws(-.*)?:[a-z-]+:(([a-z]+-)+[0-9])?:([0-9]{12})?:[^.]+$",
+      "InstanceType": {
         "minLength": 1,
-        "maxLength": 256
+        "maxLength": 1024
       },
-      "PerInstanceContainerGroupDefinitionName": {
-        "pattern": "^[a-zA-Z0-9\\-]+$|^arn:.*:containergroupdefinition\\/[a-zA-Z0-9\\-]+(:[0-9]+)?$",
-        "minLength": 1,
-        "maxLength": 512
+      "BillingType": {
+        "enum": [
+          "ON_DEMAND",
+          "SPOT"
+        ]
       },
       "NewGameSessionProtectionPolicy": {
         "enum": [
@@ -24847,14 +24857,23 @@
           "NoProtection"
         ]
       },
-      "GameServerContainerGroupDefinitionArn": {
-        "pattern": "^arn:.*:containergroupdefinition\\/[a-zA-Z0-9\\-]+(:[0-9]+)?$|^$",
+      "PlayerGatewayMode": {
+        "enum": [
+          "DISABLED",
+          "ENABLED",
+          "REQUIRED"
+        ]
+      },
+      "FleetArn": {
+        "pattern": "^arn:.*:[a-z]*fleet\\/[a-z]*fleet-[a-zA-Z0-9\\-]+$",
+        "minLength": 1,
         "maxLength": 512
       }
     },
     "createOnly": [
       "InstanceType",
-      "BillingType"
+      "BillingType",
+      "PlayerGatewayMode"
     ],
     "writeOnly": [
       "DeploymentConfiguration",
@@ -25171,6 +25190,11 @@
     "kind": "property",
     "lexicon": "aws"
   },
+  "ContentConfiguration": {
+    "resourceType": "AWS::BedrockAgentCore::Memory.ContentConfiguration",
+    "kind": "property",
+    "lexicon": "aws"
+  },
   "ContentFilterConfig": {
     "resourceType": "AWS::Bedrock::Guardrail.ContentFilterConfig",
     "kind": "property",
@@ -46257,6 +46281,11 @@
     "kind": "property",
     "lexicon": "aws"
   },
+  "FlowModule": {
+    "resourceType": "AWS::Connect::SecurityProfile.FlowModule",
+    "kind": "property",
+    "lexicon": "aws"
+  },
   "FlowOutput": {
     "resourceType": "AWS::MediaConnect::FlowOutput",
     "kind": "resource",
@@ -47940,18 +47969,10 @@
     "lexicon": "aws",
     "attrs": {
       "FleetId": "FleetId",
-      "FleetArn": "FleetArn"
+      "FleetArn": "FleetArn",
+      "Locations_*_PlayerGatewayStatus": "Locations.*.PlayerGatewayStatus"
     },
     "propertyConstraints": {
-      "Description": {
-        "minLength": 1,
-        "maxLength": 1024
-      },
-      "PeerVpcId": {
-        "pattern": "^vpc-\\S+",
-        "minLength": 1,
-        "maxLength": 1024
-      },
       "ApplyCapacity": {
         "enum": [
           "ON_UPDATE",
@@ -47965,67 +47986,83 @@
           "ANYWHERE"
         ]
       },
-      "Name": {
+      "Description": {
         "minLength": 1,
         "maxLength": 1024
       },
+      "DesiredEC2Instances": {
+        "minimum": 0
+      },
+      "EC2InstanceType": {
+        "pattern": "^.*..*$"
+      },
+      "FleetType": {
+        "enum": [
+          "ON_DEMAND",
+          "SPOT"
+        ]
+      },
       "InstanceRoleARN": {
         "pattern": "^arn:aws(-.*)?:[a-z-]+:(([a-z]+-)+[0-9])?:([0-9]{12})?:[^.]+$",
         "minLength": 1
       },
-      "FleetId": {
-        "pattern": "^fleet-\\S+"
-      },
       "InstanceRoleCredentialsProvider": {
         "enum": [
           "SHARED_CREDENTIAL_FILE"
         ]
       },
-      "DesiredEC2Instances": {
+      "MaxSize": {
         "minimum": 0
       },
-      "FleetArn": {
-        "pattern": "^arn:.*:fleet/[a-z]*fleet-[a-zA-Z0-9\\-]+$"
+      "MinSize": {
+        "minimum": 0
       },
-      "ServerLaunchParameters": {
+      "Name": {
         "minLength": 1,
         "maxLength": 1024
       },
-      "FleetType": {
-        "enum": [
-          "ON_DEMAND",
-          "SPOT"
-        ]
-      },
       "NewGameSessionProtectionPolicy": {
         "enum": [
           "FullProtection",
           "NoProtection"
         ]
       },
+      "PeerVpcAwsAccountId": {
+        "pattern": "^[0-9]{12}$",
+        "minLength": 1,
+        "maxLength": 1024
+      },
+      "PeerVpcId": {
+        "pattern": "^vpc-\\S+",
+        "minLength": 1,
+        "maxLength": 1024
+      },
+      "FleetId": {
+        "pattern": "^fleet-\\S+"
+      },
+      "BuildId": {
+        "pattern": "^build-\\S+|^arn:.*:build/build-\\S+"
+      },
       "ScriptId": {
         "pattern": "^script-\\S+|^arn:.*:script/script-\\S+"
       },
-      "MaxSize": {
-        "minimum": 0
-      },
-      "ServerLaunchPath": {
+      "ServerLaunchParameters": {
         "minLength": 1,
         "maxLength": 1024
       },
-      "MinSize": {
-        "minimum": 0
-      },
-      "PeerVpcAwsAccountId": {
-        "pattern": "^[0-9]{12}$",
+      "ServerLaunchPath": {
         "minLength": 1,
         "maxLength": 1024
       },
-      "BuildId": {
-        "pattern": "^build-\\S+|^arn:.*:build/build-\\S+"
+      "FleetArn": {
+        "pattern": "^arn:.*:fleet/[a-z]*fleet-[a-zA-Z0-9\\-]+$"
       },
-      "EC2InstanceType": {
-        "pattern": "^.*..*$"
+      "PlayerGatewayMode": {
+        "enum": [
+          "DISABLED",
+          "ENABLED",
+          "REQUIRED"
+        ]
       }
     },
     "createOnly": [
@@ -48041,7 +48078,9 @@
       "ScriptId",
       "ServerLaunchParameters",
       "ServerLaunchPath",
-      "ComputeType"
+      "ComputeType",
+      "PlayerGatewayMode",
+      "PlayerGatewayConfiguration"
     ],
     "writeOnly": [
       "ApplyCapacity"
@@ -48093,6 +48132,11 @@
     "kind": "property",
     "lexicon": "aws"
   },
+  "GameLiftFleet_PlayerGatewayConfiguration": {
+    "resourceType": "AWS::GameLift::Fleet.PlayerGatewayConfiguration",
+    "kind": "property",
+    "lexicon": "aws"
+  },
   "GameLiftFleet_ResourceCreationLimitPolicy": {
     "resourceType": "AWS::GameLift::Fleet.ResourceCreationLimitPolicy",
     "kind": "property",
@@ -59649,6 +59693,11 @@
     "kind": "property",
     "lexicon": "aws"
   },
+  "KinesisResource": {
+    "resourceType": "AWS::BedrockAgentCore::Memory.KinesisResource",
+    "kind": "property",
+    "lexicon": "aws"
+  },
   "KinesisResourcePolicy": {
     "resourceType": "AWS::Kinesis::ResourcePolicy",
     "kind": "resource",
@@ -68804,6 +68853,11 @@
     "kind": "property",
     "lexicon": "aws"
   },
+  "Memory_ContentConfiguration": {
+    "resourceType": "AWS::BedrockAgentCore::Memory.ContentConfiguration",
+    "kind": "property",
+    "lexicon": "aws"
+  },
   "Memory_CustomConfigurationInput": {
     "resourceType": "AWS::BedrockAgentCore::Memory.CustomConfigurationInput",
     "kind": "property",
@@ -68849,6 +68903,11 @@
     "kind": "property",
     "lexicon": "aws"
   },
+  "Memory_KinesisResource": {
+    "resourceType": "AWS::BedrockAgentCore::Memory.KinesisResource",
+    "kind": "property",
+    "lexicon": "aws"
+  },
   "Memory_MemoryStrategy": {
     "resourceType": "AWS::BedrockAgentCore::Memory.MemoryStrategy",
     "kind": "property",
@@ -68899,6 +68958,16 @@
     "kind": "property",
     "lexicon": "aws"
   },
+  "Memory_StreamDeliveryResource": {
+    "resourceType": "AWS::BedrockAgentCore::Memory.StreamDeliveryResource",
+    "kind": "property",
+    "lexicon": "aws"
+  },
+  "Memory_StreamDeliveryResources": {
+    "resourceType": "AWS::BedrockAgentCore::Memory.StreamDeliveryResources",
+    "kind": "property",
+    "lexicon": "aws"
+  },
   "Memory_SummaryConsolidationOverride": {
     "resourceType": "AWS::BedrockAgentCore::Memory.SummaryConsolidationOverride",
     "kind": "property",
@@ -79664,6 +79733,11 @@
     "kind": "property",
     "lexicon": "aws"
   },
+  "PlayerGatewayConfiguration": {
+    "resourceType": "AWS::GameLift::Fleet.PlayerGatewayConfiguration",
+    "kind": "property",
+    "lexicon": "aws"
+  },
   "PlayerLatencyPolicy": {
     "resourceType": "AWS::GameLift::GameSessionQueue.PlayerLatencyPolicy",
     "kind": "property",
@@ -99734,6 +99808,11 @@
     "kind": "property",
     "lexicon": "aws"
   },
+  "SamplingRateBoost": {
+    "resourceType": "AWS::XRay::SamplingRule.SamplingRateBoost",
+    "kind": "property",
+    "lexicon": "aws"
+  },
   "SamplingRule": {
     "resourceType": "AWS::XRay::SamplingRule",
     "kind": "resource",
@@ -99768,6 +99847,11 @@
     "kind": "property",
     "lexicon": "aws"
   },
+  "SamplingRule_SamplingRateBoost": {
+    "resourceType": "AWS::XRay::SamplingRule.SamplingRateBoost",
+    "kind": "property",
+    "lexicon": "aws"
+  },
   "SamplingRule_SamplingRule": {
     "resourceType": "AWS::XRay::SamplingRule.SamplingRule",
     "kind": "property",
@@ -106486,6 +106570,16 @@
     "kind": "property",
     "lexicon": "aws"
   },
+  "StreamDeliveryResource": {
+    "resourceType": "AWS::BedrockAgentCore::Memory.StreamDeliveryResource",
+    "kind": "property",
+    "lexicon": "aws"
+  },
+  "StreamDeliveryResources": {
+    "resourceType": "AWS::BedrockAgentCore::Memory.StreamDeliveryResources",
+    "kind": "property",
+    "lexicon": "aws"
+  },
   "StreamEncryption": {
     "resourceType": "AWS::Kinesis::Stream.StreamEncryption",
     "kind": "property",

package/src/lint/post-synth/ext001.ts

@@ -73,6 +73,10 @@ function matchesCondition(condition: unknown, properties: Record<string, unknown
       if ("enum" in s && Array.isArray(s.enum)) {
         if (!s.enum.includes(properties[propName])) return false;
       }
+      if ("pattern" in s && typeof s.pattern === "string") {
+        const val = properties[propName];
+        if (typeof val !== "string" || !new RegExp(s.pattern).test(val)) return false;
+      }
     }
   }
 

package/src/plugin.ts

@@ -1,5 +1,5 @@
 import { createRequire } from "module";
-import type { LexiconPlugin, IntrinsicDef, SkillDefinition } from "@intentius/chant/lexicon";
+import type { LexiconPlugin, IntrinsicDef, SkillDefinition, ResourceMetadata } from "@intentius/chant/lexicon";
 const require = createRequire(import.meta.url);
 import type { LintRule } from "@intentius/chant/lint/rule";
 import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
@@ -392,7 +392,7 @@ user-invocable: true
 
 ## How chant and CloudFormation relate
 
-chant is a **synthesis-only** tool — it compiles TypeScript source files into CloudFormation JSON (or YAML). chant does NOT call AWS APIs. Your job as an agent is to bridge the two:
+chant is a **synthesis compiler** — it compiles TypeScript source files into CloudFormation JSON (or YAML). \`chant build\` does not call AWS APIs; synthesis is pure and deterministic. The optional \`chant state snapshot\` command queries AWS APIs to capture deployment metadata (physical IDs, status, outputs) for observability. Your job as an agent is to bridge synthesis and deployment:
 
 - Use **chant** for: build, lint, diff (local template comparison)
 - Use **AWS CLI** for: validate-template, deploy, change sets, rollback, drift detection, and all stack operations
@@ -955,6 +955,91 @@ aws cloudformation wait stack-update-complete --stack-name my-app-prod`,
     return awsHover(ctx);
   },
 
+  async describeResources(options: {
+    environment: string;
+    buildOutput: string;
+    entityNames: string[];
+  }): Promise<Record<string, ResourceMetadata>> {
+    const { getRuntime } = await import("@intentius/chant/runtime-adapter");
+    const rt = getRuntime();
+    const resources: Record<string, ResourceMetadata> = {};
+
+    // Derive stack name: environment-based convention
+    // Try to parse the build output to detect stack name from Metadata or use convention
+    const stackName = `${options.environment}`;
+
+    // Describe stack resources
+    const listResult = await rt.spawn([
+      "aws", "cloudformation", "describe-stack-resources",
+      "--stack-name", stackName,
+      "--output", "json",
+    ]);
+
+    if (listResult.exitCode !== 0) {
+      throw new Error(`Failed to describe stack "${stackName}": ${listResult.stderr}`);
+    }
+
+    const data = JSON.parse(listResult.stdout) as {
+      StackResources: Array<{
+        LogicalResourceId: string;
+        ResourceType: string;
+        PhysicalResourceId: string;
+        ResourceStatus: string;
+        Timestamp: string;
+      }>;
+    };
+
+    // Map logical names from build to stack resources
+    const stackResourceMap = new Map<string, typeof data.StackResources[0]>();
+    for (const r of data.StackResources) {
+      stackResourceMap.set(r.LogicalResourceId, r);
+    }
+
+    // Get stack outputs
+    const describeResult = await rt.spawn([
+      "aws", "cloudformation", "describe-stacks",
+      "--stack-name", stackName,
+      "--output", "json",
+    ]);
+
+    let stackOutputs: Record<string, string> = {};
+    if (describeResult.exitCode === 0) {
+      const stacks = JSON.parse(describeResult.stdout) as {
+        Stacks: Array<{ Outputs?: Array<{ OutputKey: string; OutputValue: string }> }>;
+      };
+      if (stacks.Stacks[0]?.Outputs) {
+        for (const o of stacks.Stacks[0].Outputs) {
+          stackOutputs[o.OutputKey] = o.OutputValue;
+        }
+      }
+    }
+
+    for (const entityName of options.entityNames) {
+      const stackResource = stackResourceMap.get(entityName);
+      if (!stackResource) continue;
+
+      const attributes: Record<string, unknown> = {};
+      // Include stack outputs as attributes (scrub sensitive ones)
+      for (const [key, value] of Object.entries(stackOutputs)) {
+        if (/password|secret|token|key/i.test(key)) {
+          attributes[key] = "[REDACTED]";
+        } else {
+          attributes[key] = value;
+        }
+      }
+
+      resources[entityName] = {
+        type: stackResource.ResourceType,
+        physicalId: stackResource.PhysicalResourceId,
+        status: stackResource.ResourceStatus,
+        lastUpdated: stackResource.Timestamp,
+        attributes: Object.keys(attributes).length > 0 ? attributes : undefined,
+      };
+    }
+
+    return resources;
+  },
+
   mcpTools(): McpToolContribution[] {
     return [
       {

package/src/skills/chant-eks.md

@@ -33,6 +33,9 @@ AWS Lexicon (CloudFormation)          K8s Lexicon (kubectl apply)
 # Build CloudFormation template
 chant build src/infra/ --output infra.json
 
+# See what changed since last deploy (compares current build against last snapshot's digest)
+chant state diff staging aws
+
 # Deploy
 aws cloudformation deploy \
   --template-file infra.json \