@intentius/chant-lexicon-aws 0.124.52 → 0.124.54

package/dist/components/cfn-imports.js

@@ -0,0 +1,239 @@
+/**
+ * `Fn::ImportValue` between stacks (#4466): which exports a template
+ * declares, which it imports, and the names they go by.
+ *
+ * A stack that imports another stack's export reads that stack, the way a
+ * CDK app wires its stacks. The read sits inside the template, so core does
+ * not see it in the step. `cfn-deploy`'s `declaredReads` finds it here: an
+ * import of a name another `cfn-deploy` step's template exports is a read of
+ * `<component>.<output>`, which core writes into the importer's step under
+ * `imports` (`CfnDeployInput.imports`) and orders, holds and lists like any
+ * other read.
+ *
+ * A name is a string, or an `Fn::Sub` (or `Fn::Join`, or `Ref`) over
+ * parameters and pseudo parameters. It resolves where the values it reads
+ * are known: a parameter with a plain value in the step's `inputs` or a
+ * `Default` in the template, `AWS::StackName`, and the region's pseudo
+ * parameters when `AWS_REGION` or `AWS_DEFAULT_REGION` names the region.
+ * Anything else (`AWS::AccountId`, a resource attribute, a parameter wired
+ * from another stack, an intrinsic this does not follow) leaves the name
+ * unresolved, and the plan says so in a hole.
+ */
+import { createHash } from "node:crypto";
+import { readFileSync } from "node:fs";
+import { isAbsolute, resolve } from "node:path";
+/** The template at `path`, read against `root` when relative, as JSON; `undefined` for one that cannot be read or parsed, or an archive reference. */
+export function readCfnTemplate(path, root) {
+    if (typeof path !== "string" || path.startsWith("archive:"))
+        return undefined;
+    try {
+        const parsed = JSON.parse(readFileSync(root && !isAbsolute(path) ? resolve(root, path) : path, "utf8"));
+        return parsed !== null && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/** The region the plan runs against, when the environment names it. */
+function regionOf(env) {
+    return env.AWS_REGION || env.AWS_DEFAULT_REGION || undefined;
+}
+/**
+ * The pseudo parameters this plan knows for `stack`: `AWS::StackName`, and
+ * `AWS::Region`, `AWS::Partition` and `AWS::URLSuffix` when the region is
+ * named. `AWS::AccountId` and `AWS::StackId` are not known before apply.
+ */
+export function cfnPseudoParameters(stack, env = process.env) {
+    const out = { "AWS::StackName": stack };
+    const region = regionOf(env);
+    if (region) {
+        out["AWS::Region"] = region;
+        out["AWS::Partition"] = region.startsWith("cn-") ? "aws-cn" : region.startsWith("us-gov-") ? "aws-us-gov" : "aws";
+        out["AWS::URLSuffix"] = region.startsWith("cn-") ? "amazonaws.com.cn" : "amazonaws.com";
+    }
+    return out;
+}
+/**
+ * The values a name in `template` can read for `stack`: each parameter's
+ * `Default`, overlaid by the step's plain inputs (a string, a number or a
+ * boolean; a wired reference or `undefined` is not known), and the pseudo
+ * parameters.
+ */
+export function cfnKnownValues(template, stack, inputs, env = process.env) {
+    const out = {};
+    const plain = (v) => typeof v === "string" ? v : typeof v === "number" || typeof v === "boolean" ? String(v) : undefined;
+    const params = (template?.Parameters ?? {});
+    for (const [k, p] of Object.entries(params)) {
+        const d = plain(p?.Default);
+        if (d !== undefined)
+            out[k] = d;
+    }
+    for (const [k, v] of Object.entries(inputs ?? {})) {
+        const s = plain(v);
+        if (s !== undefined)
+            out[k] = s;
+    }
+    return { ...out, ...cfnPseudoParameters(stack, env) };
+}
+/** Why a variable a name reads has no value here. */
+function unknownVariable(v, known) {
+    if (v in known)
+        return undefined;
+    if (v.includes("."))
+        return `reads ${v}, a resource attribute`;
+    if (v.startsWith("AWS::"))
+        return `reads ${v}, which is known only at apply`;
+    return `reads parameter ${v}, which has no value the plan knows`;
+}
+/**
+ * The name `value` resolves to against `known`, or why it does not. A
+ * string is itself; `Fn::Sub` substitutes `${X}` from `known` and its own
+ * variables (`${!X}` is the literal `${X}`); `Ref` reads `known`;
+ * `Fn::Join` joins what it resolves. Any other shape is unresolved.
+ */
+export function resolveCfnName(value, known) {
+    if (typeof value === "string")
+        return { name: value };
+    if (value === null || typeof value !== "object" || Array.isArray(value))
+        return { unresolved: "is not a string or an intrinsic" };
+    const entries = Object.entries(value);
+    if (entries.length !== 1)
+        return { unresolved: "is not a string or an intrinsic" };
+    const [key, arg] = entries[0];
+    if (key === "Ref") {
+        if (typeof arg !== "string")
+            return { unresolved: "is a Ref without a name" };
+        const why = unknownVariable(arg, known);
+        return why ? { unresolved: why } : { name: known[arg] };
+    }
+    if (key === "Fn::Sub") {
+        const text = typeof arg === "string" ? arg : Array.isArray(arg) && typeof arg[0] === "string" ? arg[0] : undefined;
+        if (text === undefined)
+            return { unresolved: "is an Fn::Sub this plan cannot read" };
+        const vars = { ...known };
+        if (Array.isArray(arg) && arg[1] && typeof arg[1] === "object") {
+            for (const [k, v] of Object.entries(arg[1])) {
+                const r = resolveCfnName(v, known);
+                if ("unresolved" in r)
+                    return { unresolved: `its Fn::Sub variable ${k} ${r.unresolved}` };
+                vars[k] = r.name;
+            }
+        }
+        let why;
+        const name = text.replace(/\$\{(!?)([^}]*)\}/g, (whole, bang, v) => {
+            if (bang)
+                return "${" + v + "}";
+            const w = unknownVariable(v, vars);
+            if (w) {
+                why ?? (why = w);
+                return whole;
+            }
+            return vars[v];
+        });
+        return why ? { unresolved: why } : { name };
+    }
+    if (key === "Fn::Join") {
+        if (!Array.isArray(arg) || typeof arg[0] !== "string" || !Array.isArray(arg[1]))
+            return { unresolved: "is an Fn::Join this plan cannot read" };
+        const parts = [];
+        for (const part of arg[1]) {
+            const r = resolveCfnName(part, known);
+            if ("unresolved" in r)
+                return r;
+            parts.push(r.name);
+        }
+        return { name: parts.join(arg[0]) };
+    }
+    return { unresolved: `uses ${key}, which this plan does not follow` };
+}
+/** Every export `template` declares (`Outputs.<name>.Export.Name`), by output, sorted. */
+export function cfnExports(template, known) {
+    const outputs = (template?.Outputs ?? {});
+    const out = [];
+    for (const [output, o] of Object.entries(outputs).sort(([a], [b]) => a.localeCompare(b))) {
+        if (o?.Export === undefined)
+            continue;
+        out.push({ output, ...resolveCfnName(o.Export.Name, known) });
+    }
+    return out;
+}
+/**
+ * Every `Fn::ImportValue` in `template`'s resources, outputs and conditions,
+ * with where it sits and the name it imports, in template order. An import
+ * whose argument is itself an import is listed once, unresolved.
+ */
+export function cfnImports(template, known) {
+    const out = [];
+    const walk = (v, path, logicalId) => {
+        if (Array.isArray(v))
+            return v.forEach((x, i) => walk(x, `${path}.${i}`, logicalId));
+        if (v === null || typeof v !== "object")
+            return;
+        for (const [k, x] of Object.entries(v)) {
+            if (k === "Fn::ImportValue") {
+                out.push({ at: path, logicalId, ...resolveCfnName(x, known) });
+                continue;
+            }
+            walk(x, `${path}.${k}`, logicalId);
+        }
+    };
+    for (const section of ["Resources", "Outputs", "Conditions"]) {
+        const s = template?.[section];
+        if (s === null || typeof s !== "object")
+            continue;
+        for (const [id, body] of Object.entries(s))
+            walk(body, `${section}.${id}`, id);
+    }
+    return out;
+}
+/** The JSON Pointer `CfnDeployInput.imports[name]` sits at in a `cfn-deploy` step. */
+export function cfnImportPointer(name) {
+    return "/imports/" + name.replace(/~/g, "~0").replace(/\//g, "~1");
+}
+/** The stand-in parameter that takes an import's place in a preview: `ChantImport`, the name's letters and digits, and a short digest so two names never share one. */
+export function cfnStandInParameter(name) {
+    return `ChantImport${name.replace(/[^A-Za-z0-9]/g, "").slice(0, 200)}${createHash("sha256").update(name).digest("hex").slice(0, 8)}`;
+}
+/**
+ * A copy of `template` for a preview (#4466b): each `Fn::ImportValue` of a
+ * name in `names` is a `Ref` to a stand-in `String` parameter, which the
+ * preview fills with `cfnPlaceholder`. CloudFormation refuses a change set
+ * that imports an export that does not exist yet, so the importer of a stack
+ * the same change creates is planned against this copy. `standIns` maps each
+ * stand-in parameter to the export it stands for; a name the template never
+ * imports gets none.
+ */
+export function cfnTemplateWithStandIns(template, names, known) {
+    const wanted = new Set(names);
+    const standIns = {};
+    const swap = (v) => {
+        if (Array.isArray(v))
+            return v.map(swap);
+        if (v === null || typeof v !== "object")
+            return v;
+        const entries = Object.entries(v);
+        if (entries.length === 1 && entries[0][0] === "Fn::ImportValue") {
+            const r = resolveCfnName(entries[0][1], known);
+            if ("name" in r && wanted.has(r.name)) {
+                const param = cfnStandInParameter(r.name);
+                standIns[param] = r.name;
+                return { Ref: param };
+            }
+            return v;
+        }
+        return Object.fromEntries(entries.map(([k, x]) => [k, swap(x)]));
+    };
+    const out = { ...template };
+    for (const section of ["Resources", "Outputs", "Conditions"]) {
+        if (template[section] !== undefined)
+            out[section] = swap(template[section]);
+    }
+    if (Object.keys(standIns).length > 0) {
+        const params = { ...(template.Parameters ?? {}) };
+        for (const [param, name] of Object.entries(standIns).sort(([a], [b]) => a.localeCompare(b))) {
+            params[param] = { Type: "String", Description: `chant preview: stands in for Fn::ImportValue ${name}, known after its stack applies` };
+        }
+        out.Parameters = params;
+    }
+    return { template: out, standIns };
+}

package/dist/components/cloud-executor.d.ts

@@ -67,8 +67,8 @@ export interface CfnChangeSet {
     statusReason?: string;
     /** True the first time this stack is created (no prior stack exists). */
     isCreate: boolean;
-    /** The change set's type: CREATE for a stack that does not exist yet or was never executed, else UPDATE. */
-    changeSetType?: "CREATE" | "UPDATE";
+    /** The change set's type: CREATE for a stack that does not exist yet or was never executed, else UPDATE; IMPORT for an adoption (#4536). */
+    changeSetType?: "CREATE" | "UPDATE" | "IMPORT";
     /**
      * True when no stack existed before this change set, so CloudFormation made
      * an empty `REVIEW_IN_PROGRESS` stack to hold it. A plan that deletes the
@@ -83,6 +83,16 @@ export interface CfnCreateChangeSetArgs {
     templatePath: string;
     parameters?: Record<string, string>;
 }
+/** One existing resource an IMPORT change set brings under a stack (#4536). */
+export interface CfnResourceToImport {
+    resourceType: string;
+    logicalResourceId: string;
+    /** The type's primary identifier properties and their values (`{ BucketName: "logs" }`). */
+    resourceIdentifier: Record<string, string>;
+}
+export interface CfnCreateImportChangeSetArgs extends CfnCreateChangeSetArgs {
+    resourcesToImport: CfnResourceToImport[];
+}
 export interface CfnExecuteChangeSetArgs {
     stackName: string;
     changeSetName: string;
@@ -90,10 +100,23 @@ export interface CfnExecuteChangeSetArgs {
 export interface CfnStackStatus {
     stackStatus: string;
     outputs: Record<string, string>;
+    /** The stack's exports by export name (#4466c): the output each is and its value. Absent when it exports nothing or the backend does not say. */
+    exports?: Record<string, {
+        output: string;
+        value: string;
+    }>;
 }
 export interface CloudFormationClient {
     /** Create (but do not execute) a changeset, returning its proposed changes for preview/safety checks. */
     createChangeSet(args: CfnCreateChangeSetArgs): Promise<CfnChangeSet>;
+    /**
+     * Create (but do not execute) an IMPORT change set that brings existing
+     * resources under the stack (#4536, chant's CloudFormation adoption). A
+     * stack that does not exist yet is created by it. No stack tags are sent:
+     * chant's markers are written by the UPDATE that follows. Optional: a
+     * client without it cannot adopt.
+     */
+    createImportChangeSet?(args: CfnCreateImportChangeSetArgs): Promise<CfnChangeSet>;
     /** Execute a previously created changeset. */
     executeChangeSet(args: CfnExecuteChangeSetArgs): Promise<void>;
     /** Delete a changeset without executing it (used when a safety policy blocks the apply). */
@@ -114,6 +137,12 @@ export interface CloudFormationClient {
      * empty stack, and the next CREATE change set reuses it.
      */
     deleteStackShell?(stackName: string): Promise<boolean>;
+    /**
+     * The stacks that import `exportName` now (`ListImports`, #4466c), sorted;
+     * empty when none does. Optional: without it, a plan cannot say whether a
+     * change to an export is in use, and refuses nothing.
+     */
+    listImports?(exportName: string): Promise<string[]>;
 }
 export interface EcsUpdateServiceArgs {
     cluster: string;

package/dist/components/cloud-executor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cloud-executor.d.ts","sourceRoot":"","sources":["../../src/components/cloud-executor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAOH,OAAO,EAAc,KAAK,YAAY,EAAE,MAAM,kDAAkD,CAAC;AAIjG,YAAY,EAAE,YAAY,EAAE,CAAC;AAM7B,MAAM,WAAW,SAAS;IACxB,6GAA6G;IAC7G,KAAK,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxC;AAID,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,KAAK,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;IAC3D,iBAAiB,EAAE,MAAM,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,oGAAoG;IACpG,WAAW,EAAE,OAAO,CAAC;IACrB;;;;;OAKG;IACH,eAAe,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,aAAa,CAAC;IACnD,yGAAyG;IACzG,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrF;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,YAAY;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf;;;kCAG8B;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,yEAAyE;IACzE,QAAQ,EAAE,OAAO,CAAC;IAClB,4GAA4G;IAC5G,aAAa,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;IACpC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,OAAO,EAAE,SAAS,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,oBAAoB;IACnC,yGAAyG;IACzG,eAAe,CAAC,IAAI,EAAE,sBAAsB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IACrE,8CAA8C;IAC9C,gBAAgB,CAAC,IAAI,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,4FAA4F;IAC5F,eAAe,CAAC,IAAI,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D,mHAAmH;IACnH,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC7G,uDAAuD;IACvD,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC1D,yGAAyG;IACzG,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD;;;;;OAKG;IACH,gBAAgB,CAAC,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACxD;AAID,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,MAAM,WAAW,eAAe;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,kFAAkF;IAClF,MAAM,EAAE,OAAO,CAAC;IAChB,yFAAyF;IACzF,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,4DAA4D;IAC5D,cAAc,EAAE,MAAM,CAAC;IACvB,4GAA4G;IAC5G,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,wEAAwE;IACxE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,uCAAuC;IACvC,UAAU,CAAC,EAAE,SAAS,GAAG,KAAK,CAAC;IAC/B,6CAA6C;IAC7C,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,8BAA8B;IAC9B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,sHAAsH;IACtH,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B,wCAAwC;IACxC,UAAU,EAAE,MAAM,CAAC;IACnB,yIAAyI;IACzI,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,8EAA8E;IAC9E,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,SAAS;IACxB,kGAAkG;IAClG,aAAa,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC;QAAE,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7E,iFAAiF;IACjF,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAC5E,yKAAyK;IACzK,eAAe,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3D,qFAAqF;IACrF,OAAO,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5D,8FAA8F;IAC9F,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;CAC1E;AAID,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE;QAAE,IAAI,EAAE,IAAI,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,IAAI,EAAE,QAAQ,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IACjG,QAAQ,CAAC,EAAE,UAAU,GAAG,YAAY,CAAC;CACtC;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,qEAAqE;IACrE,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,0FAA0F;IAC1F,gBAAgB,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC;QAAE,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAChF,4DAA4D;IAC5D,iBAAiB,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACvH,4JAA4J;IAC5J,eAAe,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACtD;AAID,MAAM,WAAW,gBAAgB;IAC/B,sHAAsH;IACtH,IAAI,EAAE,MAAM,CAAC;IACb,0FAA0F;IAC1F,IAAI,EAAE,MAAM,CAAC;IACb,oCAAoC;IACpC,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,kBAAkB;IACjC,6CAA6C;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,uEAAuE;IACvE,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,UAAU;IACzB,+KAA+K;IAC/K,QAAQ,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,uLAAuL;IACvL,UAAU,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClE,iKAAiK;IACjK,IAAI,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC5G;AAID,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,kFAAkF;IAClF,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,wBAAwB;IACvC,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,qBAAqB;IACpC,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,2FAA2F;IAC3F,kBAAkB,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjF,sFAAsF;IACtF,aAAa,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjE,mFAAmF;IACnF,cAAc,CAAC,IAAI,EAAE,wBAAwB,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClG,0EAA0E;IAC1E,WAAW,CAAC,IAAI,EAAE,qBAAqB,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACxE,gFAAgF;IAChF,eAAe,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAClF,uKAAuK;IACvK,MAAM,CAAC,IAAI,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACpI;AAID,MAAM,WAAW,kBAAkB;IACjC,+DAA+D;IAC/D,sBAAsB,EAAE,MAAM,CAAC;IAC/B,6GAA6G;IAC7G,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,eAAe;IAC9B,2HAA2H;IAC3H,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,cAAc;IAC7B,mDAAmD;IACnD,SAAS,EAAE,MAAM,CAAC;IAClB,4CAA4C;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,+FAA+F;IAC/F,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,4DAA4D;IAC5D,eAAe,CAAC,EAAE,UAAU,GAAG,iBAAiB,GAAG,mBAAmB,CAAC;CACxE;AAED,MAAM,WAAW,SAAS;IACxB,uIAAuI;IACvI,WAAW,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClE,2FAA2F;IAC3F,OAAO,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3D,2FAA2F;IAC3F,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAC3G,mDAAmD;IACnD,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACxD,uDAAuD;IACvD,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5C;AAID;;;;;;GAMG;AAGH,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,yDAAyD;IACzD,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,QAAQ;IACvB,wFAAwF;IACxF,IAAI,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACvE,qEAAqE;IACrE,EAAE,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACvD;AAED,MAAM,WAAW,wBAAwB;IACvC,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,+EAA+E;IAC/E,kBAAkB,CAAC,IAAI,EAAE,wBAAwB,GAAG,OAAO,CAAC;QAAE,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACzF;AAID,MAAM,MAAM,oBAAoB,GAAG,gBAAgB,GAAG,cAAc,GAAG,mBAAmB,GAAG,YAAY,CAAC;AAE1G,MAAM,WAAW,cAAc;IAC7B,qJAAqJ;IACrJ,MAAM,CAAC,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,oBAAoB,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACxG,0JAA0J;IAC1J,OAAO,CAAC,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxE;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,YAAY,CAAC;IACrB,GAAG,EAAE,SAAS,CAAC;IACf,cAAc,EAAE,oBAAoB,CAAC;IACrC,GAAG,EAAE,SAAS,CAAC;IACf,UAAU,EAAE,gBAAgB,CAAC;IAC7B,MAAM,EAAE,YAAY,CAAC;IACrB,GAAG,EAAE,SAAS,CAAC;IACf,IAAI,EAAE,UAAU,CAAC;IACjB,EAAE,EAAE,QAAQ,CAAC;IACb,UAAU,EAAE,gBAAgB,CAAC;IAC7B,QAAQ,EAAE,cAAc,CAAC;CAC1B;AAID;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAGtF;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,EAAE,CAG3F;AA4BD;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE;IAAE,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,MAAM,CAE/E;AAED,iGAAiG;AACjG,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE;IAAE,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,MAAM,EAAE,CAInF;AAED;;;GAGG;AACH,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAMnE;AAED,iFAAiF;AACjF,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,OAAO,CAAC,EAAE,KAAK,CAAC;QACd,cAAc,EAAE;YACd,MAAM,EAAE,MAAM,CAAC;YACf,iBAAiB,EAAE,MAAM,CAAC;YAC1B,YAAY,EAAE,MAAM,CAAC;YACrB,WAAW,CAAC,EAAE,MAAM,CAAC;YACrB,OAAO,CAAC,EAAE,KAAK,CAAC;gBAAE,MAAM,CAAC,EAAE;oBAAE,IAAI,CAAC,EAAE,MAAM,CAAA;iBAAE,CAAC;gBAAC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;gBAAC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;aAAE,CAAC,CAAC;YAC7G,6HAA6H;YAC7H,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;SAC7B,CAAC;KACH,CAAC,CAAC;CACJ;AAED,4HAA4H;AAC5H,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAO7D;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,SAAS,EAAE,qBAAqB,EAChC,cAAc,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,qBAAqB,CAAC,EACvE,WAAW,GAAE,MAAM,EAAO,GACzB,OAAO,CAAC,SAAS,EAAE,CAAC,CA2BtB;AAsGD;;6DAE6D;AAC7D,wBAAgB,eAAe,CAAC,SAAS,EAAE;IAAE,OAAO,EAAE;QAAE,WAAW,CAAC,EAAE,KAAK,CAAC;YAAE,EAAE,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAA;CAAE,GAAG,MAAM,CAEvG;AAED;4EAC4E;AAC5E,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE;IAAE,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAA;CAAE,GAAG,SAAS,GACzF,OAAO,CAIT;AAwVD,2HAA2H;AAC3H,wBAAgB,iBAAiB,IAAI,aAAa,CAcjD;AAKD,+FAA+F;AAC/F,wBAAgB,oBAAoB,IAAI,aAAa,CAGpD;AAED,sFAAsF;AACtF,wBAAgB,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE/C"}
+{"version":3,"file":"cloud-executor.d.ts","sourceRoot":"","sources":["../../src/components/cloud-executor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAOH,OAAO,EAAc,KAAK,YAAY,EAAE,MAAM,kDAAkD,CAAC;AAIjG,YAAY,EAAE,YAAY,EAAE,CAAC;AAM7B,MAAM,WAAW,SAAS;IACxB,6GAA6G;IAC7G,KAAK,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxC;AAID,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,KAAK,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;IAC3D,iBAAiB,EAAE,MAAM,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,oGAAoG;IACpG,WAAW,EAAE,OAAO,CAAC;IACrB;;;;;OAKG;IACH,eAAe,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,aAAa,CAAC;IACnD,yGAAyG;IACzG,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrF;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,YAAY;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf;;;kCAG8B;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,yEAAyE;IACzE,QAAQ,EAAE,OAAO,CAAC;IAClB,4IAA4I;IAC5I,aAAa,CAAC,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;IAC/C;;;;;OAKG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,OAAO,EAAE,SAAS,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC;AAED,+EAA+E;AAC/E,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,4FAA4F;IAC5F,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC5C;AAED,MAAM,WAAW,4BAA6B,SAAQ,sBAAsB;IAC1E,iBAAiB,EAAE,mBAAmB,EAAE,CAAC;CAC1C;AAED,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,iJAAiJ;IACjJ,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC7D;AAED,MAAM,WAAW,oBAAoB;IACnC,yGAAyG;IACzG,eAAe,CAAC,IAAI,EAAE,sBAAsB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IACrE;;;;;;OAMG;IACH,qBAAqB,CAAC,CAAC,IAAI,EAAE,4BAA4B,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAClF,8CAA8C;IAC9C,gBAAgB,CAAC,IAAI,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,4FAA4F;IAC5F,eAAe,CAAC,IAAI,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D,mHAAmH;IACnH,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC7G,uDAAuD;IACvD,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC1D,yGAAyG;IACzG,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD;;;;;OAKG;IACH,gBAAgB,CAAC,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACvD;;;;OAIG;IACH,WAAW,CAAC,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;CACrD;AAID,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,MAAM,WAAW,eAAe;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,kFAAkF;IAClF,MAAM,EAAE,OAAO,CAAC;IAChB,yFAAyF;IACzF,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,4DAA4D;IAC5D,cAAc,EAAE,MAAM,CAAC;IACvB,4GAA4G;IAC5G,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,wEAAwE;IACxE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,uCAAuC;IACvC,UAAU,CAAC,EAAE,SAAS,GAAG,KAAK,CAAC;IAC/B,6CAA6C;IAC7C,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,8BAA8B;IAC9B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,sHAAsH;IACtH,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B,wCAAwC;IACxC,UAAU,EAAE,MAAM,CAAC;IACnB,yIAAyI;IACzI,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,8EAA8E;IAC9E,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,SAAS;IACxB,kGAAkG;IAClG,aAAa,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC;QAAE,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7E,iFAAiF;IACjF,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAC5E,yKAAyK;IACzK,eAAe,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3D,qFAAqF;IACrF,OAAO,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5D,8FAA8F;IAC9F,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;CAC1E;AAID,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE;QAAE,IAAI,EAAE,IAAI,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,IAAI,EAAE,QAAQ,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IACjG,QAAQ,CAAC,EAAE,UAAU,GAAG,YAAY,CAAC;CACtC;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,qEAAqE;IACrE,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,0FAA0F;IAC1F,gBAAgB,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC;QAAE,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAChF,4DAA4D;IAC5D,iBAAiB,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACvH,4JAA4J;IAC5J,eAAe,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACtD;AAID,MAAM,WAAW,gBAAgB;IAC/B,sHAAsH;IACtH,IAAI,EAAE,MAAM,CAAC;IACb,0FAA0F;IAC1F,IAAI,EAAE,MAAM,CAAC;IACb,oCAAoC;IACpC,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,kBAAkB;IACjC,6CAA6C;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,uEAAuE;IACvE,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,UAAU;IACzB,+KAA+K;IAC/K,QAAQ,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,uLAAuL;IACvL,UAAU,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClE,iKAAiK;IACjK,IAAI,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC5G;AAID,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,kFAAkF;IAClF,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,wBAAwB;IACvC,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,qBAAqB;IACpC,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,2FAA2F;IAC3F,kBAAkB,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjF,sFAAsF;IACtF,aAAa,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjE,mFAAmF;IACnF,cAAc,CAAC,IAAI,EAAE,wBAAwB,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClG,0EAA0E;IAC1E,WAAW,CAAC,IAAI,EAAE,qBAAqB,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACxE,gFAAgF;IAChF,eAAe,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAClF,uKAAuK;IACvK,MAAM,CAAC,IAAI,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACpI;AAID,MAAM,WAAW,kBAAkB;IACjC,+DAA+D;IAC/D,sBAAsB,EAAE,MAAM,CAAC;IAC/B,6GAA6G;IAC7G,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,eAAe;IAC9B,2HAA2H;IAC3H,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,cAAc;IAC7B,mDAAmD;IACnD,SAAS,EAAE,MAAM,CAAC;IAClB,4CAA4C;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,+FAA+F;IAC/F,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,4DAA4D;IAC5D,eAAe,CAAC,EAAE,UAAU,GAAG,iBAAiB,GAAG,mBAAmB,CAAC;CACxE;AAED,MAAM,WAAW,SAAS;IACxB,uIAAuI;IACvI,WAAW,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClE,2FAA2F;IAC3F,OAAO,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3D,2FAA2F;IAC3F,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAC3G,mDAAmD;IACnD,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACxD,uDAAuD;IACvD,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5C;AAID;;;;;;GAMG;AAGH,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,yDAAyD;IACzD,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,QAAQ;IACvB,wFAAwF;IACxF,IAAI,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACvE,qEAAqE;IACrE,EAAE,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACvD;AAED,MAAM,WAAW,wBAAwB;IACvC,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,+EAA+E;IAC/E,kBAAkB,CAAC,IAAI,EAAE,wBAAwB,GAAG,OAAO,CAAC;QAAE,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACzF;AAID,MAAM,MAAM,oBAAoB,GAAG,gBAAgB,GAAG,cAAc,GAAG,mBAAmB,GAAG,YAAY,CAAC;AAE1G,MAAM,WAAW,cAAc;IAC7B,qJAAqJ;IACrJ,MAAM,CAAC,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,oBAAoB,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACxG,0JAA0J;IAC1J,OAAO,CAAC,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxE;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,YAAY,CAAC;IACrB,GAAG,EAAE,SAAS,CAAC;IACf,cAAc,EAAE,oBAAoB,CAAC;IACrC,GAAG,EAAE,SAAS,CAAC;IACf,UAAU,EAAE,gBAAgB,CAAC;IAC7B,MAAM,EAAE,YAAY,CAAC;IACrB,GAAG,EAAE,SAAS,CAAC;IACf,IAAI,EAAE,UAAU,CAAC;IACjB,EAAE,EAAE,QAAQ,CAAC;IACb,UAAU,EAAE,gBAAgB,CAAC;IAC7B,QAAQ,EAAE,cAAc,CAAC;CAC1B;AAID;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAGtF;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,EAAE,CAG3F;AA4BD;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE;IAAE,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,MAAM,CAE/E;AAED,iGAAiG;AACjG,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE;IAAE,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,MAAM,EAAE,CAInF;AAED;;;GAGG;AACH,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAMnE;AAED,iFAAiF;AACjF,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,OAAO,CAAC,EAAE,KAAK,CAAC;QACd,cAAc,EAAE;YACd,MAAM,EAAE,MAAM,CAAC;YACf,iBAAiB,EAAE,MAAM,CAAC;YAC1B,YAAY,EAAE,MAAM,CAAC;YACrB,WAAW,CAAC,EAAE,MAAM,CAAC;YACrB,OAAO,CAAC,EAAE,KAAK,CAAC;gBAAE,MAAM,CAAC,EAAE;oBAAE,IAAI,CAAC,EAAE,MAAM,CAAA;iBAAE,CAAC;gBAAC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;gBAAC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;aAAE,CAAC,CAAC;YAC7G,6HAA6H;YAC7H,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;SAC7B,CAAC;KACH,CAAC,CAAC;CACJ;AAED,4HAA4H;AAC5H,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAO7D;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,SAAS,EAAE,qBAAqB,EAChC,cAAc,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,qBAAqB,CAAC,EACvE,WAAW,GAAE,MAAM,EAAO,GACzB,OAAO,CAAC,SAAS,EAAE,CAAC,CA2BtB;AA2KD;;6DAE6D;AAC7D,wBAAgB,eAAe,CAAC,SAAS,EAAE;IAAE,OAAO,EAAE;QAAE,WAAW,CAAC,EAAE,KAAK,CAAC;YAAE,EAAE,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAA;CAAE,GAAG,MAAM,CAEvG;AAED;4EAC4E;AAC5E,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE;IAAE,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAA;CAAE,GAAG,SAAS,GACzF,OAAO,CAIT;AAwVD,2HAA2H;AAC3H,wBAAgB,iBAAiB,IAAI,aAAa,CAcjD;AAKD,+FAA+F;AAC/F,wBAAgB,oBAAoB,IAAI,aAAa,CAGpD;AAED,sFAAsF;AACtF,wBAAgB,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE/C"}

package/dist/components/cloud-executor.js

@@ -194,6 +194,44 @@ const realCloudFormation = {
             changes: await readCfnChanges(described, describeNested),
         };
     },
+    async createImportChangeSet(args) {
+        const changeSetName = `cs-import-${Date.now()}`;
+        const params = Object.entries(args.parameters ?? {})
+            .map(([k, v]) => `ParameterKey=${k},ParameterValue=${v}`)
+            .join(" ");
+        const paramFlag = params ? ` --parameters ${params}` : "";
+        let body = "";
+        try {
+            body = readFileSync(args.templatePath, "utf8");
+        }
+        catch { /* unreadable template — create-change-set reports it */ }
+        const capabilities = awsDeployCapabilitiesForBody(body).join(" ");
+        const { existed } = await cfnChangeSetType(args.stackName);
+        const dir = mkdtempSync(join(tmpdir(), "chant-cfn-import-"));
+        try {
+            const resourcesFile = join(dir, "resources-to-import.json");
+            writeFileSync(resourcesFile, JSON.stringify(args.resourcesToImport.map((r) => ({ ResourceType: r.resourceType, LogicalResourceId: r.logicalResourceId, ResourceIdentifier: r.resourceIdentifier }))));
+            await run(`aws cloudformation create-change-set --stack-name ${q(args.stackName)} --change-set-name ${q(changeSetName)} ` +
+                `--change-set-type IMPORT --resources-to-import file://${resourcesFile} ` +
+                `--template-body file://${args.templatePath} --capabilities ${capabilities}${paramFlag}`);
+        }
+        finally {
+            rmSync(dir, { recursive: true, force: true });
+        }
+        await run(`aws cloudformation wait change-set-create-complete --stack-name ${q(args.stackName)} --change-set-name ${q(changeSetName)}`).catch(() => undefined);
+        const { stdout } = await run(`aws cloudformation describe-change-set --stack-name ${q(args.stackName)} --change-set-name ${q(changeSetName)}`);
+        const described = JSON.parse(stdout);
+        return {
+            changeSetName,
+            stackName: args.stackName,
+            status: described.Status,
+            statusReason: described.StatusReason ?? undefined,
+            isCreate: false,
+            changeSetType: "IMPORT",
+            stackCreated: !existed,
+            changes: await readCfnChanges(described, async () => ({ Status: "CREATE_COMPLETE" })),
+        };
+    },
     async executeChangeSet(args) {
         await run(`aws cloudformation execute-change-set --stack-name ${q(args.stackName)} --change-set-name ${q(args.changeSetName)}`);
     },
@@ -205,9 +243,33 @@ const realCloudFormation = {
         const described = JSON.parse(stdout);
         const stack = described.Stacks[0];
         const outputs = {};
-        for (const o of stack?.Outputs ?? [])
+        const exports = {};
+        for (const o of stack?.Outputs ?? []) {
             outputs[o.OutputKey] = o.OutputValue;
-        return { stackStatus: stack?.StackStatus ?? "UNKNOWN", outputs };
+            if (o.ExportName)
+                exports[o.ExportName] = { output: o.OutputKey, value: o.OutputValue };
+        }
+        return { stackStatus: stack?.StackStatus ?? "UNKNOWN", outputs, ...(Object.keys(exports).length > 0 ? { exports } : {}) };
+    },
+    async listImports(exportName) {
+        const stacks = [];
+        let token;
+        do {
+            let stdout;
+            try {
+                ({ stdout } = await run(`aws cloudformation list-imports --export-name ${q(exportName)}${token ? ` --next-token ${q(token)}` : ""}`));
+            }
+            catch (err) {
+                // CloudFormation answers an export nobody imports with an error, not an empty list.
+                if (/is not imported by any stack/i.test(err instanceof Error ? err.message : String(err)))
+                    return [];
+                throw err;
+            }
+            const page = JSON.parse(stdout);
+            stacks.push(...(page.Imports ?? []));
+            token = page.NextToken;
+        } while (token);
+        return [...new Set(stacks)].sort();
     },
     async waitForStack(stackName, opts) {
         const intervalMs = opts?.intervalMs ?? 10000;

package/dist/importable.d.ts

@@ -0,0 +1,30 @@
+/** The slice of a `lexicon-aws.json` entry this module reads. */
+export interface ImportabilityManifestEntry {
+    resourceType: string;
+    kind: string;
+    handlers?: readonly string[];
+    primaryIdentifier?: readonly string[];
+    tagging?: {
+        taggable: boolean;
+        tagOnCreate?: boolean;
+        tagUpdatable: boolean;
+        tagProperty?: string;
+        tagShape?: "list" | "map";
+    };
+}
+/** Legacy types (no handlers in the registry schema) that AWS documents as importable. */
+export declare const LEGACY_IMPORTABLE_TYPES: ReadonlySet<string>;
+/** Types with create and read handlers that AWS documents as not importable. */
+export declare const NOT_IMPORTABLE_TYPES: ReadonlySet<string>;
+/** The generated registry keyed by type, or an empty map in a checkout that has not generated. */
+export declare function importabilityManifest(): ReadonlyMap<string, ImportabilityManifestEntry>;
+/** Whether CloudFormation can import the type into a stack: create and read handlers, or AWS's hand list. */
+export declare function isImportable(type: string, manifest?: ReadonlyMap<string, ImportabilityManifestEntry>): boolean;
+/**
+ * Why chant refuses to adopt the type, or undefined when it can: not a
+ * generated type, not importable, or tags that can only be set at create
+ * (the marker UPDATE would replace the object). An untaggable type is
+ * adopted on the stack's word alone; the caller says so in its review.
+ */
+export declare function adoptionRefusal(type: string, manifest?: ReadonlyMap<string, ImportabilityManifestEntry>): string | undefined;
+//# sourceMappingURL=importable.d.ts.map

package/dist/importable.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"importable.d.ts","sourceRoot":"","sources":["../src/importable.ts"],"names":[],"mappings":"AAuBA,iEAAiE;AACjE,MAAM,WAAW,0BAA0B;IACzC,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,OAAO,CAAC,EAAE;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,WAAW,CAAC,EAAE,OAAO,CAAC;QAAC,YAAY,EAAE,OAAO,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,KAAK,CAAA;KAAE,CAAC;CAChI;AAED,0FAA0F;AAC1F,eAAO,MAAM,uBAAuB,EAAE,WAAW,CAAC,MAAM,CAA2C,CAAC;AAEpG,gFAAgF;AAChF,eAAO,MAAM,oBAAoB,EAAE,WAAW,CAAC,MAAM,CAInD,CAAC;AAIH,kGAAkG;AAClG,wBAAgB,qBAAqB,IAAI,WAAW,CAAC,MAAM,EAAE,0BAA0B,CAAC,CASvF;AAED,6GAA6G;AAC7G,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,GAAE,WAAW,CAAC,MAAM,EAAE,0BAA0B,CAA2B,GAAG,OAAO,CAKvI;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,GAAE,WAAW,CAAC,MAAM,EAAE,0BAA0B,CAA2B,GAAG,MAAM,GAAG,SAAS,CAYrJ"}

package/dist/importable.js

@@ -0,0 +1,72 @@
+/**
+ * Which CloudFormation types chant can adopt into a stack with an IMPORT
+ * change set (#4536; ruled on INTENTIUS/choudoufu#2284 Q5, 2026-10-26).
+ *
+ * A registry type is importable when its schema has `create` and `read`
+ * handlers, which codegen keeps in `lexicon-aws.json` as `handlers`. AWS
+ * documents the exceptions on its "Resource type support" page
+ * (https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/resource-import-supported-resources.html),
+ * and the two short lists below are those exceptions, compared on 2026-10-26
+ * against the pinned spec (sha256:398259716cca…): one legacy type with no
+ * handlers that the page marks importable, and three types with create and
+ * read handlers that the page marks not importable.
+ *
+ * Adoption also needs to write chant's markers after the import, as a
+ * tags-only UPDATE. A type whose tags can only be set at create
+ * (`tagging.tagUpdatable` false) is refused by {@link adoptionRefusal},
+ * never replaced to mark it.
+ */
+import { createRequire } from "module";
+import { moduleSourceUrl } from "@intentius/chant/module-source";
+const require = createRequire(moduleSourceUrl(import.meta.url));
+/** Legacy types (no handlers in the registry schema) that AWS documents as importable. */
+export const LEGACY_IMPORTABLE_TYPES = new Set(["AWS::IoTEvents::AlarmModel"]);
+/** Types with create and read handlers that AWS documents as not importable. */
+export const NOT_IMPORTABLE_TYPES = new Set([
+    "AWS::AppSync::GraphQLApi",
+    "AWS::SES::ConfigurationSetEventDestination",
+    "AWS::SageMaker::Endpoint",
+]);
+let cachedManifest;
+/** The generated registry keyed by type, or an empty map in a checkout that has not generated. */
+export function importabilityManifest() {
+    if (cachedManifest)
+        return cachedManifest;
+    try {
+        const manifest = require("./generated/lexicon-aws.json");
+        cachedManifest = new Map(Object.values(manifest).filter((e) => e.kind === "resource").map((e) => [e.resourceType, e]));
+    }
+    catch {
+        cachedManifest = new Map();
+    }
+    return cachedManifest;
+}
+/** Whether CloudFormation can import the type into a stack: create and read handlers, or AWS's hand list. */
+export function isImportable(type, manifest = importabilityManifest()) {
+    if (NOT_IMPORTABLE_TYPES.has(type))
+        return false;
+    if (LEGACY_IMPORTABLE_TYPES.has(type))
+        return true;
+    const handlers = manifest.get(type)?.handlers ?? [];
+    return handlers.includes("create") && handlers.includes("read");
+}
+/**
+ * Why chant refuses to adopt the type, or undefined when it can: not a
+ * generated type, not importable, or tags that can only be set at create
+ * (the marker UPDATE would replace the object). An untaggable type is
+ * adopted on the stack's word alone; the caller says so in its review.
+ */
+export function adoptionRefusal(type, manifest = importabilityManifest()) {
+    const entry = manifest.get(type);
+    if (!entry && !LEGACY_IMPORTABLE_TYPES.has(type))
+        return `${type} is not a type this aws lexicon generated`;
+    if (!isImportable(type, manifest)) {
+        return NOT_IMPORTABLE_TYPES.has(type)
+            ? `${type} is listed by AWS as not supporting resource import`
+            : `${type} has no create and read handlers, so CloudFormation cannot import it`;
+    }
+    if (entry?.tagging?.taggable && entry.tagging.tagUpdatable === false) {
+        return `${type}'s tags can only be set at create, so writing chant's markers would replace it`;
+    }
+    return undefined;
+}

package/dist/index-identity.d.ts

@@ -0,0 +1,19 @@
+import type { DeclaredIdentity, IndexIdentity } from "@intentius/chant/lifecycle/identity-match";
+/** One `lexicon-aws.json` entry, the fields this rule reads. */
+export interface IdentityManifestEntry {
+    resourceType: string;
+    kind: string;
+    primaryIdentifier?: string[];
+    /** GetAtt name -> CloudFormation attribute: the schema's `readOnlyProperties`. */
+    attrs?: Record<string, string>;
+}
+/** True for a type behold's lister indexes at location `global`. */
+export declare function isGlobalAwsType(type: string): boolean;
+/**
+ * The identifier an aws declaration spells for the index, or why it spells
+ * none. `manifest` is the generated `lexicon-aws.json` keyed by type; a test
+ * passes a table.
+ */
+export declare function awsDeclaredIdentity(entityType: string, props: Record<string, unknown>, manifest?: ReadonlyMap<string, IdentityManifestEntry>): DeclaredIdentity;
+export declare const awsIndexIdentity: IndexIdentity;
+//# sourceMappingURL=index-identity.d.ts.map

package/dist/index-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index-identity.d.ts","sourceRoot":"","sources":["../src/index-identity.ts"],"names":[],"mappings":"AAyBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,2CAA2C,CAAC;AAIjG,gEAAgE;AAChE,MAAM,WAAW,qBAAqB;IACpC,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,kFAAkF;IAClF,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChC;AAID,oEAAoE;AACpE,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAErD;AAgBD;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,QAAQ,GAAE,WAAW,CAAC,MAAM,EAAE,qBAAqB,CAAqB,GACvE,gBAAgB,CAwBlB;AAED,eAAO,MAAM,gBAAgB,EAAE,aAG9B,CAAC"}

package/dist/index-identity.js

@@ -0,0 +1,79 @@
+/**
+ * The aws lexicon's identity rule for indexed resources (#4523, rule written
+ * out on INTENTIUS/behold#1025's design comment).
+ *
+ * The same evidence the stack read's identity fallback uses (#1647,
+ * ./identity-observe.ts): the CloudFormation schema's `primaryIdentifier`,
+ * which codegen compiled into `lexicon-aws.json`, read off the declared
+ * props and `|`-joined the way Cloud Control spells an identifier. behold's
+ * lister (behold#1029) writes that Cloud Control `Identifier` as each indexed
+ * node's `nativeId`, so a never-deployed bucket declared with `BucketName`
+ * and a role declared with `RoleName` match their indexed objects by value.
+ *
+ * What cannot match:
+ * - an identifier part the schema lists in `readOnlyProperties` is assigned
+ *   by the service (`InstanceId` for `AWS::EC2::Instance`, `QueueUrl` for
+ *   `AWS::SQS::Queue`), so no declaration states it: `no-binding`;
+ * - a part the declaration leaves out or spells with a Ref or an intrinsic:
+ *   `no-binding`, "identity is not in the declaration";
+ * - a type with no primary identifier on record: `unsupported-kind`.
+ *
+ * Global types are the prefixes behold's aws lister lists once per account at
+ * location `global` (behold src/cloud-lister/aws.ts, `isGlobalAwsType`).
+ */
+import { createRequire } from "module";
+import { moduleSourceUrl } from "@intentius/chant/module-source";
+const require = createRequire(moduleSourceUrl(import.meta.url));
+const GLOBAL_TYPE_PREFIXES = ["AWS::IAM::", "AWS::CloudFront::", "AWS::Route53::", "AWS::Organizations::", "AWS::GlobalAccelerator::"];
+/** True for a type behold's lister indexes at location `global`. */
+export function isGlobalAwsType(type) {
+    return GLOBAL_TYPE_PREFIXES.some((p) => type.startsWith(p));
+}
+let cachedManifest;
+/** The manifest keyed by type, or an empty one in a checkout that has not generated (every type is then `unsupported-kind`). */
+function defaultManifest() {
+    if (cachedManifest)
+        return cachedManifest;
+    try {
+        const manifest = require("./generated/lexicon-aws.json");
+        cachedManifest = new Map(Object.values(manifest).filter((e) => e.kind === "resource").map((e) => [e.resourceType, e]));
+    }
+    catch {
+        cachedManifest = new Map();
+    }
+    return cachedManifest;
+}
+/**
+ * The identifier an aws declaration spells for the index, or why it spells
+ * none. `manifest` is the generated `lexicon-aws.json` keyed by type; a test
+ * passes a table.
+ */
+export function awsDeclaredIdentity(entityType, props, manifest = defaultManifest()) {
+    const entry = manifest.get(entityType);
+    const parts = entry?.primaryIdentifier;
+    if (!entry || entry.kind !== "resource" || !parts || parts.length === 0) {
+        return { kind: "unmatchable", reason: "unsupported-kind", detail: `${entityType} has no primary identifier on record` };
+    }
+    const readOnly = new Set(Object.values(entry.attrs ?? {}));
+    const serverAssigned = parts.filter((p) => readOnly.has(p));
+    if (serverAssigned.length > 0) {
+        return {
+            kind: "unmatchable",
+            reason: "no-binding",
+            detail: `the identity of ${entityType} (${parts.join(", ")}) is assigned by the service (${serverAssigned.join(", ")}), so no declaration states it`,
+        };
+    }
+    const values = [];
+    for (const part of parts) {
+        const v = props[part];
+        if ((typeof v !== "string" && typeof v !== "number") || String(v) === "") {
+            return { kind: "unmatchable", reason: "no-binding", detail: `identity is not in the declaration (${entityType} ${part})` };
+        }
+        values.push(String(v));
+    }
+    return { kind: "identifier", listedType: entityType, identifier: values.join("|"), global: isGlobalAwsType(entityType) };
+}
+export const awsIndexIdentity = {
+    substrate: "aws",
+    declaredIdentity: (entityType, props) => awsDeclaredIdentity(entityType, props),
+};