@intentius/chant-lexicon-aws 0.0.8 → 0.0.10

package/src/taggable.ts

@@ -0,0 +1,44 @@
+/**
+ * Shared taggable resource lookup — loads from the generated lexicon JSON.
+ *
+ * Lazy-loaded and cached for the lifetime of the process.
+ */
+
+import { readFileSync } from "fs";
+import { join } from "path";
+
+interface LexiconEntry {
+  kind: string;
+  resourceType: string;
+  tagging?: { taggable: boolean; tagOnCreate: boolean; tagUpdatable: boolean };
+  [key: string]: unknown;
+}
+
+let _cached: Set<string> | undefined;
+
+/**
+ * Load taggable resource types from the lexicon JSON.
+ * Result is cached after first call.
+ */
+export function loadTaggableResources(): Set<string> {
+  if (_cached) return _cached;
+
+  const set = new Set<string>();
+  try {
+    const pkgDir = join(__dirname, "..");
+    const lexiconPath = join(pkgDir, "src", "generated", "lexicon-aws.json");
+    const content = readFileSync(lexiconPath, "utf-8");
+    const data = JSON.parse(content) as Record<string, LexiconEntry>;
+
+    for (const [_name, entry] of Object.entries(data)) {
+      if (entry.kind === "resource" && entry.resourceType && entry.tagging?.taggable) {
+        set.add(entry.resourceType);
+      }
+    }
+  } catch {
+    // Lexicon not available — skip
+  }
+
+  _cached = set;
+  return set;
+}

package/src/testdata/nested-stacks/app.ts

@@ -0,0 +1,26 @@
+/**
+ * App layer — Lambda function in the parent template that references
+ * the network nested stack's outputs via cross-stack references
+ */
+
+import { Function, Sub, AWS, Ref, nestedStack } from "@intentius/chant-lexicon-aws";
+
+// nestedStack() references a child project directory
+const network = nestedStack("network", import.meta.dirname + "/network", {
+  parameters: { Environment: "prod" },
+});
+
+export const handler = new Function({
+  FunctionName: Sub`${AWS.StackName}-handler`,
+  Runtime: "nodejs20.x",
+  Handler: "index.handler",
+  Role: Ref("LambdaExecutionRole"),
+  Code: { ZipFile: "exports.handler = async () => ({ statusCode: 200 });" },
+  VpcConfig: {
+    SubnetIds: [network.outputs.subnetId],
+    SecurityGroupIds: [network.outputs.lambdaSgId],
+  },
+});
+
+// Re-export so discovery picks it up as an entity
+export { network };

package/src/testdata/nested-stacks/network/outputs.ts

@@ -0,0 +1,17 @@
+/**
+ * Cross-stack outputs — values the parent can reference
+ */
+
+import { stackOutput } from "@intentius/chant";
+import { vpc, subnet } from "./vpc";
+import { lambdaSg } from "./security";
+
+export const vpcId = stackOutput(vpc.VpcId, {
+  description: "VPC ID",
+});
+export const subnetId = stackOutput(subnet.SubnetId, {
+  description: "Public subnet ID",
+});
+export const lambdaSgId = stackOutput(lambdaSg.GroupId, {
+  description: "Lambda security group ID",
+});

package/src/testdata/nested-stacks/network/security.ts

@@ -0,0 +1,17 @@
+/**
+ * Security group for the Lambda function in the parent stack
+ */
+
+import { SecurityGroup, Sub, AWS } from "@intentius/chant-lexicon-aws";
+import { vpc } from "./vpc";
+
+export const lambdaSg = new SecurityGroup({
+  GroupDescription: Sub`${AWS.StackName} Lambda security group`,
+  VpcId: vpc.VpcId,
+  SecurityGroupEgress: [{
+    IpProtocol: "-1",
+    CidrIp: "0.0.0.0/0",
+    Description: "Allow all outbound",
+  }],
+  Tags: [{ Key: "Name", Value: Sub`${AWS.StackName}-lambda-sg` }],
+});

package/src/testdata/nested-stacks/network/vpc.ts

@@ -0,0 +1,54 @@
+/**
+ * Network resources — VPC, subnet, internet gateway, and routing
+ */
+
+import {
+  Vpc,
+  Subnet,
+  InternetGateway,
+  VPCGatewayAttachment,
+  RouteTable,
+  EC2Route,
+  SubnetRouteTableAssociation,
+  Sub,
+  AWS,
+} from "@intentius/chant-lexicon-aws";
+
+export const vpc = new Vpc({
+  CidrBlock: "10.0.0.0/16",
+  EnableDnsSupport: true,
+  EnableDnsHostnames: true,
+  Tags: [{ Key: "Name", Value: Sub`${AWS.StackName}-vpc` }],
+});
+
+export const subnet = new Subnet({
+  VpcId: vpc.VpcId,
+  CidrBlock: "10.0.1.0/24",
+  MapPublicIpOnLaunch: true,
+  Tags: [{ Key: "Name", Value: Sub`${AWS.StackName}-public` }],
+});
+
+export const igw = new InternetGateway({
+  Tags: [{ Key: "Name", Value: Sub`${AWS.StackName}-igw` }],
+});
+
+export const igwAttachment = new VPCGatewayAttachment({
+  VpcId: vpc.VpcId,
+  InternetGatewayId: igw.InternetGatewayId,
+});
+
+export const routeTable = new RouteTable({
+  VpcId: vpc.VpcId,
+  Tags: [{ Key: "Name", Value: Sub`${AWS.StackName}-public-rt` }],
+});
+
+export const defaultRoute = new EC2Route({
+  RouteTableId: routeTable.RouteTableId,
+  DestinationCidrBlock: "0.0.0.0/0",
+  GatewayId: igw.InternetGatewayId,
+});
+
+export const subnetRouteTableAssoc = new SubnetRouteTableAssociation({
+  SubnetId: subnet.SubnetId,
+  RouteTableId: routeTable.RouteTableId,
+});