@intentius/chant-lexicon-aws 0.0.2

package/src/testdata/schemas/aws-iam-role.json

@@ -0,0 +1,85 @@
+{
+  "typeName": "AWS::IAM::Role",
+  "description": "Creates an IAM role with a trust policy and optional inline policies.",
+  "properties": {
+    "RoleName": {
+      "type": "string",
+      "description": "A name for the IAM role.",
+      "minLength": 1,
+      "maxLength": 64,
+      "pattern": "^[\\w+=,.@-]+$"
+    },
+    "Arn": {
+      "type": "string",
+      "description": "The Amazon Resource Name (ARN) for the role."
+    },
+    "RoleId": {
+      "type": "string",
+      "description": "The stable and unique string identifying the role."
+    },
+    "AssumeRolePolicyDocument": {
+      "type": "object",
+      "description": "The trust policy that is associated with this role."
+    },
+    "Policies": {
+      "type": "array",
+      "items": {
+        "$ref": "#/definitions/Policy"
+      },
+      "description": "Adds or updates an inline policy document that is embedded in the role."
+    },
+    "ManagedPolicyArns": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      },
+      "description": "A list of Amazon Resource Names (ARNs) of the IAM managed policies to attach."
+    },
+    "Tags": {
+      "type": "array",
+      "items": {
+        "$ref": "#/definitions/Tag"
+      },
+      "description": "A list of tags attached to the role."
+    }
+  },
+  "definitions": {
+    "Policy": {
+      "type": "object",
+      "description": "An inline policy document embedded in the role.",
+      "properties": {
+        "PolicyName": {
+          "type": "string",
+          "description": "The friendly name of the policy.",
+          "minLength": 1,
+          "maxLength": 128
+        },
+        "PolicyDocument": {
+          "type": "object",
+          "description": "The policy document."
+        }
+      },
+      "required": ["PolicyName", "PolicyDocument"]
+    },
+    "Tag": {
+      "type": "object",
+      "description": "A key-value pair to associate with a resource.",
+      "properties": {
+        "Key": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 128
+        },
+        "Value": {
+          "type": "string",
+          "maxLength": 256
+        }
+      },
+      "required": ["Key", "Value"]
+    }
+  },
+  "required": ["AssumeRolePolicyDocument"],
+  "readOnlyProperties": ["/properties/Arn", "/properties/RoleId"],
+  "primaryIdentifier": ["/properties/RoleName"],
+  "additionalProperties": false
+}

package/src/testdata/schemas/aws-lambda-function.json

@@ -0,0 +1,90 @@
+{
+  "typeName": "AWS::Lambda::Function",
+  "description": "The AWS::Lambda::Function resource creates a Lambda function.",
+  "properties": {
+    "FunctionName": {
+      "type": "string",
+      "description": "The name of the Lambda function.",
+      "minLength": 1,
+      "maxLength": 64
+    },
+    "Arn": {
+      "type": "string",
+      "description": "The ARN of the function."
+    },
+    "Runtime": {
+      "type": "string",
+      "description": "The identifier of the function's runtime.",
+      "enum": ["nodejs20.x", "nodejs18.x", "python3.12", "python3.11", "java21", "java17"]
+    },
+    "Handler": {
+      "type": "string",
+      "description": "The name of the method within your code that Lambda calls to run your function.",
+      "maxLength": 128,
+      "pattern": "^[^\\s]+$"
+    },
+    "Code": {
+      "$ref": "#/definitions/Code",
+      "description": "The code for the function."
+    },
+    "Role": {
+      "type": "string",
+      "description": "The ARN of the function's execution role.",
+      "pattern": "^arn:(aws[a-zA-Z-]*)?:iam::\\d{12}:role/?[a-zA-Z_0-9+=,.@\\-_/]+$"
+    },
+    "MemorySize": {
+      "type": "integer",
+      "description": "The amount of memory available to the function at runtime.",
+      "minimum": 128,
+      "maximum": 10240
+    }
+  },
+  "definitions": {
+    "Code": {
+      "type": "object",
+      "description": "The deployment package for a Lambda function.",
+      "properties": {
+        "S3Bucket": {
+          "type": "string",
+          "description": "An Amazon S3 bucket in the same AWS Region as your function.",
+          "minLength": 3,
+          "maxLength": 63
+        },
+        "S3Key": {
+          "type": "string",
+          "description": "The Amazon S3 key of the deployment package.",
+          "minLength": 1,
+          "maxLength": 1024
+        },
+        "S3ObjectVersion": {
+          "type": "string",
+          "description": "For versioned objects, the version of the deployment package."
+        },
+        "ZipFile": {
+          "type": "string",
+          "description": "The source code of your Lambda function (Node.js and Python)."
+        }
+      }
+    },
+    "Tag": {
+      "type": "object",
+      "description": "A key-value pair to associate with a resource.",
+      "properties": {
+        "Key": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 128
+        },
+        "Value": {
+          "type": "string",
+          "maxLength": 256
+        }
+      },
+      "required": ["Key", "Value"]
+    }
+  },
+  "required": ["Code", "Role"],
+  "readOnlyProperties": ["/properties/Arn"],
+  "primaryIdentifier": ["/properties/FunctionName"],
+  "additionalProperties": false
+}

package/src/testdata/schemas/aws-s3-bucket.json

@@ -0,0 +1,83 @@
+{
+  "typeName": "AWS::S3::Bucket",
+  "description": "The AWS::S3::Bucket resource creates an Amazon S3 bucket.",
+  "properties": {
+    "BucketName": {
+      "type": "string",
+      "description": "A name for the bucket.",
+      "minLength": 3,
+      "maxLength": 63,
+      "pattern": "^[a-z0-9][a-z0-9.-]*[a-z0-9]$"
+    },
+    "Arn": {
+      "type": "string",
+      "description": "The Amazon Resource Name (ARN) of the bucket."
+    },
+    "BucketEncryption": {
+      "$ref": "#/definitions/BucketEncryption",
+      "description": "Specifies default encryption for a bucket."
+    },
+    "Tags": {
+      "type": "array",
+      "items": {
+        "$ref": "#/definitions/Tag"
+      },
+      "description": "An arbitrary set of tags (key-value pairs) for this S3 bucket."
+    },
+    "VersioningConfiguration": {
+      "$ref": "#/definitions/VersioningConfiguration",
+      "description": "Enables multiple versions of all objects in this bucket."
+    }
+  },
+  "definitions": {
+    "BucketEncryption": {
+      "type": "object",
+      "description": "Specifies default encryption for a bucket using server-side encryption.",
+      "properties": {
+        "ServerSideEncryptionConfiguration": {
+          "type": "array",
+          "items": {
+            "type": "object"
+          },
+          "description": "Specifies the default server-side-encryption configuration."
+        }
+      },
+      "required": ["ServerSideEncryptionConfiguration"]
+    },
+    "Tag": {
+      "type": "object",
+      "description": "A key-value pair to associate with a resource.",
+      "properties": {
+        "Key": {
+          "type": "string",
+          "description": "The key name of the tag.",
+          "minLength": 1,
+          "maxLength": 128
+        },
+        "Value": {
+          "type": "string",
+          "description": "The value for the tag.",
+          "maxLength": 256
+        }
+      },
+      "required": ["Key", "Value"]
+    },
+    "VersioningConfiguration": {
+      "type": "object",
+      "description": "Describes the versioning state of an Amazon S3 bucket.",
+      "properties": {
+        "Status": {
+          "type": "string",
+          "description": "The versioning state of the bucket.",
+          "enum": ["Enabled", "Suspended"]
+        }
+      },
+      "required": ["Status"]
+    }
+  },
+  "required": ["BucketName"],
+  "readOnlyProperties": ["/properties/Arn"],
+  "createOnlyProperties": ["/properties/BucketName"],
+  "primaryIdentifier": ["/properties/BucketName"],
+  "additionalProperties": false
+}

package/src/testdata/schemas/aws-sns-topic.json

@@ -0,0 +1,71 @@
+{
+  "typeName": "AWS::SNS::Topic",
+  "description": "The AWS::SNS::Topic resource creates a topic to which notifications can be published.",
+  "properties": {
+    "TopicName": {
+      "type": "string",
+      "description": "The name of the topic.",
+      "minLength": 1,
+      "maxLength": 256
+    },
+    "TopicArn": {
+      "type": "string",
+      "description": "The Amazon Resource Name (ARN) of the topic."
+    },
+    "DisplayName": {
+      "type": "string",
+      "description": "The display name to use for an SNS topic with SMS subscriptions."
+    },
+    "Subscription": {
+      "type": "array",
+      "items": {
+        "$ref": "#/definitions/Subscription"
+      },
+      "description": "The SNS subscriptions (endpoints) for this topic."
+    },
+    "Tags": {
+      "type": "array",
+      "items": {
+        "$ref": "#/definitions/Tag"
+      },
+      "description": "The list of tags to add to a new topic."
+    }
+  },
+  "definitions": {
+    "Subscription": {
+      "type": "object",
+      "description": "An SNS subscription associated with the topic.",
+      "properties": {
+        "Protocol": {
+          "type": "string",
+          "description": "The subscription's protocol.",
+          "enum": ["http", "https", "email", "email-json", "sms", "sqs", "application", "lambda"]
+        },
+        "Endpoint": {
+          "type": "string",
+          "description": "The endpoint that receives notifications from the topic."
+        }
+      },
+      "required": ["Protocol", "Endpoint"]
+    },
+    "Tag": {
+      "type": "object",
+      "description": "A key-value pair to associate with a resource.",
+      "properties": {
+        "Key": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 128
+        },
+        "Value": {
+          "type": "string",
+          "maxLength": 256
+        }
+      },
+      "required": ["Key", "Value"]
+    }
+  },
+  "readOnlyProperties": ["/properties/TopicArn"],
+  "primaryIdentifier": ["/properties/TopicArn"],
+  "additionalProperties": false
+}

package/src/validate-cli.ts

@@ -0,0 +1,19 @@
+#!/usr/bin/env bun
+/**
+ * Thin entry point for `bun run validate` in lexicon-aws.
+ */
+import { validate } from "./validate";
+
+const result = await validate();
+
+for (const check of result.checks) {
+  const status = check.ok ? "OK" : "FAIL";
+  const msg = check.error ? ` — ${check.error}` : "";
+  console.error(`  [${status}] ${check.name}${msg}`);
+}
+
+if (!result.success) {
+  console.error("Validation failed");
+  process.exit(1);
+}
+console.error("All validation checks passed.");

package/src/validate.ts

@@ -0,0 +1,34 @@
+/**
+ * Validate generated lexicon-aws artifacts.
+ *
+ * Thin wrapper around the core validation framework
+ * with AWS-specific configuration.
+ */
+
+import { dirname } from "path";
+import { fileURLToPath } from "url";
+import { validateLexiconArtifacts, type ValidateResult } from "@intentius/chant/codegen/validate";
+
+export type { ValidateCheck, ValidateResult } from "@intentius/chant/codegen/validate";
+
+const REQUIRED_NAMES = ["Bucket", "Function", "Role", "Table", "Policy", "LogGroup"];
+
+/**
+ * Validate the generated lexicon-aws artifacts.
+ *
+ * @param opts.basePath - Override the package directory (defaults to lexicon-aws package root)
+ */
+export async function validate(opts?: { basePath?: string }): Promise<ValidateResult> {
+  const basePath = opts?.basePath ?? dirname(dirname(fileURLToPath(import.meta.url)));
+
+  return validateLexiconArtifacts({
+    lexiconJsonFilename: "lexicon-aws.json",
+    requiredNames: REQUIRED_NAMES,
+    basePath,
+    coverageThresholds: {
+      minPropertyPct: 1,
+      minLifecyclePct: 1,
+      minAttrPct: 1,
+    },
+  });
+}